Hp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-2121 1Hp 1Network Virtualization May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController compone...Show more HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.Show less
CVE-2015-2118 1Hp 1Access Control May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information v...Show more Unspecified vulnerability in the Secure Pull Print and Security Pull Print components in HP Access Control (AC) Software 12.x through 14.x before 14.1.2 allows remote authenticated users to obtain sensitive information via unknown vectors.Show less
CVE-2015-2110 1Hp 1Loadrunner May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2015-2122 1Hp 1Sdn Van Controller May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 The REST layer on HP SDN VAN Controller devices 2.5 and earlier allows remote attackers to cause a denial of service via network traffic to the REST port.
CVE-2015-2120 1Hp 1Sitescope May 6, 2026 May 25, 2015 N/A· v4 N/A· v3 8.7 HIGH· v2 Unspecified vulnerability in HP SiteScope 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 allows remote authenticated users to gain privileges via unknown vectors, aka ZDI-CAN-2567.
CVE-2015-4000 12Apple CanonicalDebian+9 more 25Chrome Content ManagerDebian Linux+22 more May 27, 2026 May 21, 2015 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra...Show more The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.Show less
CVE-2015-2115 1Hp 1Capture And Route Software May 6, 2026 Apr 27, 2015 N/A· v4 N/A· v3 2.7 LOW· v2 Unspecified vulnerability in HP Capture and Route Software (HPCR) 1.3 before Patch 7, 1.3 FP1 before Patch 1, and 1.4 before Patch 1 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2117 1Hp 2Tippingpoint Security Management System Tippingpoint Virtual Security Management System May 6, 2026 Apr 27, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows rem...Show more HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by (1) uploading this code within an archive or (2) instantiating a class.Show less
CVE-2015-2116 1Hp 1Storage Data Protector May 6, 2026 Apr 27, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2015-3148 7Apple CanonicalDebian+4 more 8Curl Debian LinuxFedora+5 more May 6, 2026 Apr 24, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.
CVE-2015-3145 8Apple CanonicalDebian+5 more 9Curl Debian LinuxFedora+6 more May 6, 2026 Apr 24, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly hav...Show more The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.Show less
CVE-2015-3143 5Apple CanonicalDebian+2 more 6Curl Debian LinuxLibcurl+3 more May 6, 2026 Apr 24, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
CVE-2015-2114 1Hp 1Support Solution Framework May 6, 2026 Apr 14, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.
CVE-2015-2113 1Hp 1Easy Tools May 6, 2026 Apr 14, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t8...Show more Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown vectors.Show less
CVE-2015-2112 1Hp 1Easy Tools May 6, 2026 Apr 14, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t8...Show more Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via unknown vectors.Show less
CVE-2015-2111 1Hp 1Intelligent Provisioning May 6, 2026 Apr 4, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors.
CVE-2015-2109 1Hp 1Operations Orchestration May 6, 2026 Mar 31, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unknown vectors.
CVE-2015-2108 1Hp 1Operations Orchestration May 6, 2026 Mar 31, 2015 N/A· v4 N/A· v3 3.5 LOW· v2 Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.
CVE-2015-2106 1Hp 3Integrated Lights Out 2 Firmware Integrated Lights Out 3 FirmwareIntegrated Lights Out 4 Firmware May 6, 2026 Mar 31, 2015 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown...Show more Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27, 3 before 1.82, and 4 before 2.10 allows remote attackers to bypass intended access restrictions or cause a denial of service via unknown vectors.Show less
CVE-2014-7876 1Hp 3Integrated Lights Out 2 Firmware Integrated Lights Out 4 FirmwareIntegrated Lights Out Chassis Management Firmware May 6, 2026 Mar 31, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code...Show more Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmware before 1.30 allows remote attackers to gain privileges, execute arbitrary code, or cause a denial of service via unknown vectors.Show less

Previous 1...565758...117 Next