Hp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-2201 2Arubanetworks Hp 2Airwave Airwave Nov 21, 2024 Sep 5, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
CVE-2015-1391 1Hp 1Airwave Nov 21, 2024 Sep 5, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
CVE-2015-1390 1Hp 1Airwave Nov 21, 2024 Sep 5, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
CVE-2022-4894 2Hp Samsung 10231vr14a Firmware 209u7a Firmware2ky38a Firmware+1020 more Nov 21, 2024 Aug 16, 2023 N/A· v4 7.3 HIGH· v3 N/A· v2 Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.
CVE-2023-38402 1Hp 1Aruba Virtual Intranet Access Nov 21, 2024 Aug 15, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to...Show more A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.Show less
CVE-2023-38401 1Hp 1Aruba Virtual Intranet Access Nov 21, 2024 Aug 15, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM pri...Show more A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.Show less
CVE-2023-35982 2Arubanetworks Hp 2Arubaos Instantos Nov 21, 2024 Jul 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
CVE-2023-35981 2Arubanetworks Hp 2Arubaos Instantos Nov 21, 2024 Jul 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
CVE-2023-35980 2Arubanetworks Hp 2Arubaos Instantos Nov 21, 2024 Jul 25, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen...Show more There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.Show less
CVE-2023-26301 1Hp 19Color Laserjet Pro 4201 4203 4ra87f Firmware Color Laserjet Pro 4201 4203 4ra88f FirmwareColor Laserjet Pro 4201 4203 4ra89a Firmware+16 more Nov 21, 2024 Jul 21, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
CVE-2023-35178 1Hp 38Laserjet Pro M304 M305 W1a46a Firmware Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+35 more Nov 21, 2024 Jun 30, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.
CVE-2023-35177 1Hp 38Laserjet Pro M304 M305 W1a46a Firmware Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+35 more Nov 21, 2024 Jun 30, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
CVE-2023-35176 1Hp 38Laserjet Pro M304 M305 W1a46a Firmware Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+35 more Nov 21, 2024 Jun 30, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
CVE-2023-35175 1Hp 38Laserjet Pro M304 M305 W1a46a Firmware Laserjet Pro M304 M305 W1a47a FirmwareLaserjet Pro M304 M305 W1a48a Firmware+35 more Nov 21, 2024 Jun 30, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVE-2023-26299 1Hp 59200 G3 Firmware 200 G4 22 All In One Firmware200 Pro G4 22 All In One Firmware+56 more Nov 21, 2024 Jun 30, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to...Show more A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.Show less
CVE-2023-30903 1Hp 1Hp Ux Dec 17, 2024 Jun 16, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
CVE-2023-1329 1Hp 957 Laserjet Managed Mfp E62665 3gy14a Firmware Laserjet Managed Mfp E62665 3gy15a Firmware Laserjet Managed Mfp E62665 3gy16a Firmware+954 more Dec 31, 2024 Jun 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potent...Show more A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.Show less
CVE-2022-31646 1Hp 327Dragonfly Folio G3 2 In 1 Firmware Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 more Dec 30, 2024 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31645 1Hp 327Dragonfly Folio G3 2 In 1 Firmware Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 more Dec 30, 2024 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31644 1Hp 327Dragonfly Folio G3 2 In 1 Firmware Elite Dragonfly FirmwareElite Dragonfly G2 Firmware+324 more Dec 30, 2024 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Previous 1...678...117 Next