← Back

Hp

hp

2,335 CVEs • 17,248 products

Products (17,248)

Click to collapse
Toggle
Hp Ux
hp-ux
Instantos
instantos
Tru64
tru64
Loadrunner
loadrunner
Sitescope
sitescope
Openvms
openvms
Oneview
oneview

CVEs (2,335)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hp
1Palm Pre Webos
Apr 29, 2026
Sep 13, 2011
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a ref...Show more
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception.Show less
1Hp
1Palm Pre Webos
Apr 29, 2026
Sep 13, 2011
N/A· v4
N/A· v3
7.1 HIGH· v2
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
1Hp
1Openview Performance Insight
Apr 29, 2026
Aug 19, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Hp
1Palm Webos
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Hp
1Palm Webos
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Hp
1Openview Performance Insight
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors.
1Hp
1Openview Performance Insight
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
1Hp
2Proliant Sl Advanced Power Manager
Proliant Sl Advanced Power Manager Firmware
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
7.8 HIGH· v2
The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors.
1Hp
1Easy Printer Care Software
Apr 29, 2026
Aug 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vect...Show more
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.Show less
1Hp
1Network Automation
Apr 29, 2026
Aug 1, 2011
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
1Hp
1Network Automation
Apr 29, 2026
Aug 1, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Hp
1Data Protector
Apr 29, 2026
Aug 1, 2011
N/A· v4
N/A· v3
7.8 HIGH· v2
Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.
1Hp
1Linux Imaging And Printing Project
Apr 29, 2026
Jul 29, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
1Hp
1Sitescope
Apr 29, 2026
Jul 29, 2011
N/A· v4
N/A· v3
8.3 HIGH· v2
Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.
1Hp
1Sitescope
Apr 29, 2026
Jul 29, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Hp
7Arcsight C1000 Appliance
Arcsight C1300 ApplianceArcsight C3200 Appliance+4 more
Apr 29, 2026
Jul 19, 2011
N/A· v4
N/A· v3
3.6 LOW· v2
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a diffe...Show more
Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.Show less
1Hp
7Arcsight C1000 Appliance
Arcsight C1300 ApplianceArcsight C3200 Appliance+4 more
Apr 29, 2026
Jul 19, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a f...Show more
Cross-site scripting (XSS) vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file.Show less
1Hp
1Hp Ux
Apr 29, 2026
Jul 11, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a denial of service via unknown vectors.
1Hp
3Endpoint Admission Defense
Intelligent Management CenterUser Access Manager
Apr 29, 2026
Jul 11, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (EAD) 5.0 before SP1 E0101P03 components in HP Intelligent Management Center (aka...Show more
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (EAD) 5.0 before SP1 E0101P03 components in HP Intelligent Management Center (aka iNode Management Center) allows remote attackers to execute arbitrary code via a 0x0A0BF007 packet.Show less
1Hp
2Openview Performance Agent
Operations Agent
Apr 29, 2026
Jul 1, 2011
N/A· v4
N/A· v3
6.4 MEDIUM· v2
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary f...Show more
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.Show less