CVE-2011-2409

The CVE-2011-2409 issue affects HP webOS Calendar on HP Palm webOS 3.x prior to 3.0.2. The vulnerability is a Cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Reported impact indicates potential for arbitrary HTML/JavaScr...

CVE-2011-2408

CVE-2011-2408 affects HP webOS 3.x, specifically the Contacts application, where an XSS vulnerability exists in the Contacts UI before version 3.0.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. HP security bulletin HPSBGN02694 rev.1 notes affec...

CVE-2010-4025

CVE-2010-4025 affects Palm webOS 1.4.1's Doc Viewer. A crafted Word document could allow remote code execution. HP’s security bulletin HPSBMI02573 rev.1 recommends updating to webOS 1.4.5+ (or later) to mitigate; until then, avoid untrusted Word docs. The HP bulletin lists CVSS v2 base 6.8 (AV:L/...

CVE-2010-4026

The CVE-2010-4026 issue concerns HP Palm webOS 1.4.1 where a vulnerability in the Palm webOS service API allows a local user to gain privileges by issuing privileged service calls. The exact root cause isn’t detailed in the provided documents, but HP’s Security Bulletin links CVE-2010-4026 to a c...

CVE-2010-4027

The CVE-2010-4027 issue affects HP Palm webOS 1.4.1, specifically the camera application, enabling a local user to overwrite arbitrary files on the device filesystem via unknown vectors. HP’s security bulletin (HPSBMI02582 SSRT100269 rev.1) confirms the vulnerability and assigns CVSS v2 base metr...

CVE-2011-1737

CVE-2011-1737 involves the HP/Palm webOS Email application (versions 1.4.5 and 1.4.5.1). The vulnerability is described as multiple XSS flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affects the HP Palm webOS Email component; CVSS 2.0 base score ...

CVE-2011-1738

HP Palm webOS 1.4.5 and 1.4.5.1 are affected by CVE-2011-1738 due to improper restriction of Plug-in Development Kit (PDK) applications, enabling local privilege escalation via unintended filesystem write access. The root cause is insufficient access controls on PDK apps, allowing local users to ...

CVE-2010-4109

CVE-2010-4109 affects the HP webOS Contacts Application on Palm devices. The issue is a Cross-site Scripting (XSS) vulnerability exploitable via a crafted vCard file, enabling remote execution of arbitrary HTML/JavaScript. HP’s security bulletin and related documents indicate affected software ve...