Filtered by vendor Hp
Subscribe
Total
2438 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2009-4188 | 1 Hp | 1 Operations Dashboard | 2024-11-21 | 10.0 HIGH | N/A |
HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3098. | |||||
CVE-2009-4185 | 1 Hp | 1 System Management Homepage | 2024-11-21 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter. | |||||
CVE-2009-4184 | 1 Hp | 2 Enterprise Cluster Master Toolkit, Hp-ux | 2024-11-21 | 6.2 MEDIUM | N/A |
Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database via unknown vectors. | |||||
CVE-2009-4183 | 1 Hp | 1 Openview Storage Data Protector | 2024-11-21 | 4.6 MEDIUM | N/A |
Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown vectors. | |||||
CVE-2009-4182 | 1 Hp | 1 Web Jetadmin | 2024-11-21 | 9.0 HIGH | N/A |
Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging authentication and encryption weaknesses on the SQL server. | |||||
CVE-2009-4181 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe. | |||||
CVE-2009-4180 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header. | |||||
CVE-2009-4179 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action. | |||||
CVE-2009-4178 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter. | |||||
CVE-2009-4177 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header. | |||||
CVE-2009-4176 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter to ovlogin.exe. | |||||
CVE-2009-4000 | 1 Hp | 1 Power Manager | 2024-11-21 | 10.0 HIGH | N/A |
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter. | |||||
CVE-2009-3999 | 1 Hp | 1 Power Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter. | |||||
CVE-2009-3977 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 5.0 MEDIUM | N/A |
Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53 might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via a long string argument to the (1) DisplayName, (2) AddGroup, (3) InstallComponent, or (4) Subscribe method. NOTE: this issue is not a vulnerability in many environments, because the control is not marked as safe for scripting and would not execute with default Internet Explorer settings. | |||||
CVE-2009-3849 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe. | |||||
CVE-2009-3848 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function. | |||||
CVE-2009-3847 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors. | |||||
CVE-2009-3846 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter. | |||||
CVE-2009-3845 | 1 Hp | 1 Openview Network Node Manager | 2024-11-21 | 10.0 HIGH | N/A |
The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts. | |||||
CVE-2009-3844 | 1 Hp | 1 Openview Data Protector Application Recovery Manager | 2024-11-21 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet. |