Skip to contentHp vulnerabilities
Products
Show 140 moreShow less
Newest
- hp hp-ux ipfilterHPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows...CVE-2016-19875.9 Medium
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- hp continuous delivery automationHP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary...CVE-2016-19869.8 Critical
- hp operations managerHPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary...CVE-2016-198510.0 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreThe join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4...CVE-2016-0728Public exploitFix available7.8 High
- hp arcsight loggerHPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via...CVE-2015-68646.3 Medium
- hp arcsight loggerHPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via...CVE-2015-68637.3 High
- openbsd openssh, apple mac os x, hp virtual customer access system +3 more +5 moreThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...CVE-2016-0778Fix availableEPSS 20.9%8.1 High
- openbsd openssh, apple mac os x, hp remote device access virtual customer access system +3 more +5 moreThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...CVE-2016-0777Public exploitFix availableEPSS 63.5%6.5 Medium
- hp ucmdb browserHPE UCMDB Browser before 4.02 allows remote attackers to obtain sensitive information or bypass...CVE-2015-68628.4 High
- hp j8692a, j8693a, j8697a +51 more +53 moreHPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended...CVE-2015-68608.4 High
- hp network switch softwareHPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended...CVE-2015-68597.8 High
- hp insight managementHP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain...CVE-2015-68583.7 Low
- hp storeonce backup system softwareCross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1...CVE-2015-54475.4 Medium
- hp storeonce backup system softwareHP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary...CVE-2015-54467.5 High
- hp storeonce backup system softwareCross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3...CVE-2015-54458.8 High
- hp jc072b hp 12500 main processing unit, jc085a hp a12518 switch chassis, jc086a hp a12508 switch chassis +84 more +86 moreHPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote...CVE-2015-54346.5 Medium
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...CVE-2015-8651In KEVFix availableEPSS 67.7%8.8 High
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...CVE-2015-3196Fix availableEPSS 13.5%4.3 Medium
- hp loadrunner, performance center +1 moreUnspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12...CVE-2015-68577.2 High
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- hp operations orchestrationCross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x...CVE-2015-54516.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- adobe coldfusion, livecycle data services, hp xp7 command view advanced edition +1 more +3 moreAdobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle...CVE-2015-52554.3 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- hp arcsight logger, archsight management center +1 moreMultiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1...CVE-2015-54414.3 Medium
- hp arcsight command center, arcsight connector appliance, arcsight logger +4 more +6 moreHP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector...CVE-2015-60307.2 High
- hp arcsight loggerHP ArcSight Logger before 6.0 P2 does not limit attempts to authenticate to the SOAP interface,...CVE-2015-60295.0 Medium
- hp arcsight smartconnectorsThe CWSAPI SOAP service in HP ArcSight SmartConnectors before 7.1.6 has a hardcoded password,...CVE-2015-29036.9 Medium
- hp arcsight smartconnectorsHP ArcSight SmartConnectors before 7.1.6 do not verify X.509 certificates from Logger devices,...CVE-2015-29026.8 Medium
- xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 Medium
- hp smart profile server data analytics layerMultiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics...CVE-2015-54444.3 Medium
- hp 3par service processor spHP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA...CVE-2015-54434.0 Medium
- hp software updateUnspecified vulnerability in HP Software Update before 5.005.002.002 allows local users to gain...CVE-2015-54424.6 Medium
- hp integrated lights-out 3 firmware, integrated lights-out 4 firmware +1 moreUnspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 3 before 1.85 and 4 before 2...CVE-2015-54354.0 Medium
- hp universal configuration management databaseHP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10...CVE-2015-54404.9 Medium
- hp arcsight loggerHP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended...CVE-2015-21364.0 Medium
- hp loadrunnerUnspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain...CVE-2015-54264.6 Medium
- hp intelligent provisioningUnspecified vulnerability in HP Intelligent Provisioning 1.00 through 1.62(a), 2.00, and 2.10...CVE-2015-213510.0 High
- hp lt4112 lte, mt41 thin client, elite x2 1010 g2 +36 more +38 moreThe HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook,...CVE-2015-53687.8 High
- hp lt4112 lte, mt41 thin client, elite x2 1010 g2 +36 more +38 moreThe HP lt4112 LTE/HSPA+ Gobi 4G module with firmware before 12.500.00.15.1803 on EliteBook,...CVE-2015-53676.9 Medium
- hp virtual connect enterprise manager sdkHP Virtual Connect Enterprise Manager (VCEM) SDK before 7.5.0, as used in HP Matrix Operating...CVE-2015-54334.0 Medium
- hp virtual connect enterprise manager sdkHP Virtual Connect Enterprise Manager (VCEM) SDK before 7.5.0, as used in HP Matrix Operating...CVE-2015-54327.5 High
- hp matrix operating environmentHP Matrix Operating Environment before 7.5.0 allows remote authenticated users to obtain...CVE-2015-54316.5 Medium
- hp matrix operating environmentHP Matrix Operating Environment before 7.5.0 allows remote attackers to obtain sensitive...CVE-2015-54305.0 Medium
- Show moreLoading…