Hp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-0720 1Hp 1Openview Network Node Manager Apr 23, 2026 May 5, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2009-0719 1Hp 1Hp Ux Apr 23, 2026 Apr 29, 2009 N/A· v4 N/A· v3 6.0 MEDIUM· v2 Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660.
CVE-2008-2438 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 28, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based b...Show more Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow.Show less
CVE-2009-0718 1Hp 1Storageworks Storage Mirroring Apr 23, 2026 Apr 21, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2009-0717 1Hp 1Storageworks Storage Mirroring Apr 23, 2026 Apr 21, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2009-0716 1Hp 1Storageworks Storage Mirroring Apr 23, 2026 Apr 21, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in HP StorageWorks Storage Mirroring 5 before 5.1.1.1090.15 allows remote attackers to cause a denial of service or obtain "access" via unknown vectors.
CVE-2009-0715 1Hp 1Storage Essentials Apr 23, 2026 Apr 21, 2009 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unspecified vulnerability in Secure NaviCLI in HP Storage Essentials 6.0.2 through 6.0.4 allows remote authenticated users to obtain "access" or "extended privileges" via unknown vectors.
CVE-2009-1333 1Hp 1Deskjet 6840 Apr 23, 2026 Apr 17, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request...Show more Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request body.Show less
CVE-2007-4514 1Hp 1Procurve Manager Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in HP ProCurve Manager and HP ProCurve Manager Plus 2.3 and earlier allows remote attackers to obtain sensitive information from the ProCurve Manager server via unknown attack vectors.
CVE-2008-4420 3Filestream HpInnermedia 4Dynazip Max Dynazip Max SecureOpenview Performance Agent+1 more Apr 23, 2026 Apr 13, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C...Show more Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985.Show less
CVE-2009-0921 1Hp 1Network Node Manager Apr 23, 2026 Mar 25, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which trigg...Show more Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.Show less
CVE-2009-0920 1Hp 1Network Node Manager Apr 23, 2026 Mar 25, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-006...Show more Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.Show less
CVE-2009-0207 1Hp 1Hp Ux Apr 23, 2026 Mar 25, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 ru...Show more Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running VRTSodm 5.0 or VRTSvxfs 5.0, and B.11.31 running VRTSodm 5.0 allows local users to gain root privileges via unknown vectors.Show less
CVE-2009-0941 1Hp 1548100c Digital Sender 9100c Digital Sender9200c Digital Sender+151 more Apr 23, 2026 Mar 18, 2009 N/A· v4 N/A· v3 7.6 HIGH· v2 The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.
CVE-2009-0940 1Hp 1548100c Digital Sender 9100c Digital Sender9200c Digital Sender+151 more Apr 23, 2026 Mar 18, 2009 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.Show less
CVE-2009-0713 1Hp 1Systems Insight Manager Apr 23, 2026 Mar 11, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2009-0712 1Hp 1Wmi Mapper Apr 23, 2026 Mar 11, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in WMI Mapper for HP Systems Insight Manager before 2.5.2.0 allows local users to gain privileges via unknown vectors.
CVE-2009-0208 1Hp 1Virtual Rooms Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2007-5289 1Hp 2Mercury Quality Center Testdirector Apr 23, 2026 Feb 24, 2009 N/A· v4 N/A· v3 7.6 HIGH· v2 HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to exe...Show more HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only.Show less
CVE-2009-0206 1Hp 1Oncplus Apr 23, 2026 Feb 8, 2009 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Unspecified vulnerability in NFS in HP ONCplus B.11.31.05 and earlier for HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.

Previous 1...909192...117 Next