Hp Ux

hp-ux

Vendor: Hp • 288 CVEs

CVEs (288)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-30903 1Hp 1Hp Ux Jun 17, 2026 Jun 16, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
CVE-2018-5740 7Canonical DebianHp+4 more 11Bind Data Ontap EdgeDebian Linux+8 more Jun 17, 2026 Jan 16, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers....Show more "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.Show less
CVE-2016-2776 3Hp IscOracle 5Bind Hp UxLinux+2 more May 6, 2026 Sep 28, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure a...Show more buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.Show less
CVE-2016-2775 4Fedoraproject HpIsc+1 more 9Bind Enterprise Linux DesktopEnterprise Linux Eus+6 more May 6, 2026 Jul 19, 2016 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request...Show more ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.Show less
CVE-2015-2126 1Hp 1Hp Ux May 6, 2026 Jul 6, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions.
CVE-2015-4000 12Apple CanonicalDebian+9 more 25Chrome Content ManagerDebian Linux+22 more May 27, 2026 May 21, 2015 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra...Show more The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.Show less
CVE-2014-7879 1Hp 1Hp Ux May 6, 2026 Dec 10, 2014 N/A· v4 N/A· v3 8.5 HIGH· v2 HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.
CVE-2014-7877 1Hp 1Hp Ux May 6, 2026 Oct 30, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.
CVE-2014-7874 1Hp 2Hp Ux System Management Homepage May 6, 2026 Oct 19, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified...Show more Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.Show less
CVE-2014-2490 3Debian HpOracle 4Debian Linux Hp UxJdk+1 more May 6, 2026 Jul 17, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2013-6209 1Hp 1Hp Ux May 6, 2026 Mar 14, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2013-6200 1Hp 1Hp Ux May 6, 2026 Mar 11, 2014 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors.
CVE-2013-4854 10Fedoraproject FreebsdHp+7 more 12Bind Business ServerDnsco Bind+9 more Apr 29, 2026 Jul 29, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause...Show more The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.Show less
CVE-2012-1823 8Apple DebianFedoraproject+5 more 17Application Stack Debian LinuxEnterprise Linux Desktop+14 more Apr 21, 2026 May 11, 2012 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers...Show more sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.Show less
CVE-2012-0131 1Hp 2Distributed Computing Environment Hp Ux Apr 29, 2026 Apr 5, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2012-0126 1Hp 1Hp Ux Apr 29, 2026 Mar 28, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0125.
CVE-2012-0125 1Hp 1Hp Ux Apr 29, 2026 Mar 28, 2012 N/A· v4 N/A· v3 3.3 LOW· v2 Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126.
CVE-2011-2398 1Hp 1Hp Ux Apr 29, 2026 Jul 11, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a denial of service via unknown vectors.
CVE-2011-0896 1Hp 2Hp Ux Nfs/oncplus Apr 29, 2026 Apr 15, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors.
CVE-2011-0891 1Hp 1Hp Ux Apr 29, 2026 Apr 4, 2011 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Unspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows local users to cause a denial of service via unknown vectors.

12 3 4 5...15 Next