Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Total 2419 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-2404 1 Hp 1 Easy Printer Care Software 2012-01-14 7.5 HIGH N/A
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
CVE-2011-3337 4 Eeye, Hp, Sgi and 1 more 5 Digital Security Audits, Retina Network Security Scanner, Hp-ux and 2 more 2012-01-04 6.9 MEDIUM N/A
eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.
CVE-2011-1855 1 Hp 1 Network Node Manager I 2011-09-22 4.3 MEDIUM N/A
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows local users to read or modify (1) log files or (2) other data via unknown vectors.
CVE-2011-1724 1 Hp 1 Virtual Server Environment 2011-09-22 6.0 MEDIUM N/A
Unspecified vulnerability in HP Virtual Server Environment before 6.3 allows remote authenticated users to gain privileges via unknown vectors.
CVE-2011-1545 1 Hp 1 Insight Control Performance Management 2011-09-22 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2011-1544 1 Hp 1 Insight Control Performance Management 2011-09-22 6.0 MEDIUM N/A
Unspecified vulnerability in HP Insight Control Performance Management before 6.3 allows remote authenticated users to gain privileges via unknown vectors.
CVE-2011-1543 1 Hp 1 Systems Insight Manager 2011-09-22 4.3 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2011-1542 1 Hp 1 Systems Insight Manager 2011-09-22 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1541 1 Hp 1 System Management Homepage 2011-09-22 10.0 HIGH N/A
Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote attackers to bypass intended access restrictions, and consequently execute arbitrary code, via unknown vectors.
CVE-2011-1540 1 Hp 1 System Management Homepage 2011-09-22 9.0 HIGH N/A
Unspecified vulnerability in HP System Management Homepage (SMH) before 6.3 allows remote authenticated users to execute arbitrary code via unknown vectors.
CVE-2011-1539 1 Hp 1 Proliant Support Pack 2011-09-22 5.0 MEDIUM N/A
Unspecified vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2011-1538 1 Hp 1 Proliant Support Pack 2011-09-22 4.9 MEDIUM N/A
Open redirect vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVE-2011-1537 1 Hp 1 Proliant Support Pack 2011-09-22 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Proliant Support Pack (PSP) before 8.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1536 1 Hp 1 Performance Insight 2011-09-22 5.0 MEDIUM N/A
Unspecified vulnerability in HP Performance Insight 5.0, 5.1x. 5.2x, 5.3x, 5.4, 5.41, and 5.41.002 allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2011-0894 1 Hp 1 Operations 2011-09-22 5.5 MEDIUM N/A
Unspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated users to bypass intended access restrictions via unknown vectors.
CVE-2011-0893 1 Hp 1 Operations 2011-09-22 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-0892 1 Hp 1 Diagnostics 2011-09-22 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2009-5097 1 Hp 1 Palm Pre Webos 2011-09-14 7.1 HIGH N/A
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
CVE-2011-1856 1 Hp 1 Business Availability Center 2011-09-07 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-1738 1 Hp 1 Palm Webos 2011-09-07 7.2 HIGH N/A
HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.