Hp Ux

hp-ux

Vendor: Hp • 288 CVEs

CVEs (288)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-5946 1Hp 1Hp Ux Apr 23, 2026 Nov 14, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access.
CVE-2007-5536 1Hp 1Hp Ux Apr 23, 2026 Oct 18, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of service via unspecified vectors.
CVE-2007-5302 1Hp 1Hp Ux Apr 23, 2026 Oct 9, 2007 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary w...Show more Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2007-5008 1Hp 1Hp Ux Apr 23, 2026 Sep 20, 2007 N/A· v4 N/A· v3 9.0 HIGH· v2 The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
CVE-2007-4590 1Hp 3Dynrootdisk Hp UxIgnite Ux Apr 23, 2026 Aug 29, 2007 N/A· v4 N/A· v3 3.3 LOW· v2 The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the c...Show more The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.Show less
CVE-2007-4241 1Hp 1Hp Ux Apr 23, 2026 Aug 8, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781.
CVE-2007-4125 1Hp 1Hp Ux Apr 23, 2026 Aug 1, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vect...Show more Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors.Show less
CVE-2007-1994 1Hp 1Hp Ux Apr 23, 2026 Apr 12, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor detail...Show more Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916.Show less
CVE-2007-1993 1Hp 1Hp Ux Apr 23, 2026 Apr 12, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a...Show more Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."Show less
CVE-2007-0916 1Hp 1Hp Ux Apr 23, 2026 Feb 14, 2007 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
CVE-2007-0915 1Hp 1Hp Ux Apr 23, 2026 Feb 14, 2007 N/A· v4 N/A· v3 10.0 HIGH· v2 Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request.
CVE-2007-0396 1Hp 1Hp Ux Apr 23, 2026 Jan 19, 2007 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors.
CVE-2007-0394 1Hp 1Hp Ux Apr 23, 2026 Jan 19, 2007 N/A· v4 N/A· v3 4.6 MEDIUM· v2 HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a var...Show more HP HP-UX B11.11 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572.Show less
CVE-2006-5558 1Hp 1Hp Ux Apr 23, 2026 Oct 27, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate...Show more Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.Show less
CVE-2006-5557 1Hp 1Hp Ux Apr 23, 2026 Oct 27, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicat...Show more Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.Show less
CVE-2006-5556 1Hp 1Hp Ux Apr 23, 2026 Oct 27, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.
CVE-2006-5452 1Hp 2Hp Ux Tru64 Apr 23, 2026 Oct 23, 2006 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.
CVE-2006-5151 1Hp 1Hp Ux Apr 23, 2026 Oct 5, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors.
CVE-2006-5091 1Hp 1Hp Ux Apr 23, 2026 Sep 29, 2006 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors.
CVE-2006-4820 1Hp 1Hp Ux Apr 16, 2026 Sep 15, 2006 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.

Previous 1 234 5...15 Next