Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Total 2498 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-1551 1 Hp 1 Openview Network Node Manager 2025-04-11 10.0 HIGH N/A
Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter.
CVE-2013-4843 1 Hp 2 Integrated Lights-out 4, Integrated Lights-out Firmware 2025-04-11 6.8 MEDIUM N/A
Unspecified vulnerability in HP Integrated Lights-Out 4 (iLO4) with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2011-1531 1 Hp 7 Envy 100 D410, Photosmart B110, Photosmart D110 and 4 more 2025-04-11 4.3 MEDIUM N/A
The webscan component in the Embedded Web Server (EWS) on the HP Photosmart D110 and B110; Photosmart Plus B210; Photosmart Premium C310, Fax All-in-One, and C510; and ENVY 100 D410 printers allows remote attackers to read documents on the scan surface via unspecified vectors.
CVE-2013-2356 1 Hp 1 System Management Homepage 2025-04-11 5.0 MEDIUM N/A
HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363.
CVE-2010-0447 1 Hp 1 Openview Performance Insight 2025-04-11 10.0 HIGH N/A
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.
CVE-2012-2960 1 Hp 4 Arcsight Connector Appliance, Arcsight Connector Appliance Firmware, Arcsight Logger Appliance and 1 more 2025-04-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger appliance 5.2.0.6288.0 allows remote attackers to inject arbitrary web script or HTML via a crafted file.
CVE-2012-6501 1 Hp 1 Pki Activex Control 2025-04-11 4.3 MEDIUM N/A
The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.
CVE-2010-4494 10 Apache, Apple, Debian and 7 more 17 Openoffice, Iphone Os, Itunes and 14 more 2025-04-11 7.5 HIGH N/A
Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVE-2013-2364 1 Hp 1 System Management Homepage 2025-04-11 3.5 LOW N/A
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-1968 2 Hp, Microsoft 2 Insight Software Installer, Windows 2025-04-11 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.
CVE-2013-4836 1 Hp 2 Alm Synchronizer, Application Lifecycle Management 2025-04-11 7.5 HIGH N/A
Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management (ALM) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759.
CVE-2013-4823 1 Hp 2 Imc Branch Intelligent Management System Software Module, Intelligent Management Center 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Software Module (aka BIMS) allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607.
CVE-2011-0897 1 Hp 1 Network Node Manager I 2025-04-11 4.6 MEDIUM N/A
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.00 allows local users to read arbitrary files via unknown vectors.
CVE-2010-1035 1 Hp 1 Insight Virtual Machine Management 2025-04-11 9.0 HIGH N/A
Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to execute arbitrary code via unknown vectors.
CVE-2010-4112 1 Hp 1 Insight Management Agents 2025-04-11 5.0 MEDIUM N/A
HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path.
CVE-2011-1856 1 Hp 1 Business Availability Center 2025-04-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.06 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3266 1 Hp 4 Ibrix, Ibrix X9300, Ibrix X9320 and 1 more 2025-04-11 5.0 MEDIUM N/A
Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2011-4790 1 Hp 1 Network Automation 2025-04-11 9.3 HIGH N/A
Unspecified vulnerability in HP Network Automation 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2012-5211 1 Hp 1 Intelligent Management Center User Access Manager 2025-04-11 7.5 HIGH N/A
Unspecified vulnerability in HP Intelligent Management Center (iMC) User Access Manager (UAM) before 5.2 E0402 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1643.
CVE-2010-1037 1 Hp 1 Systems Insight Manager 2025-04-11 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.