Hp

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1663 1Hp 1System Management Homepage Apr 23, 2026 Jul 9, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-0953 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argume...Show more The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.Show less
CVE-2008-0952 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pat...Show more The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.Show less
CVE-2007-5610 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the...Show more The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument.Show less
CVE-2007-5608 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client mach...Show more The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953.Show less
CVE-2007-5607 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long f...Show more Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.Show less
CVE-2007-5606 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argumen...Show more Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.Show less
CVE-2007-5605 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argu...Show more Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.Show less
CVE-2007-5604 1Hp 1Instant Support Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first...Show more Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.Show less
CVE-2008-1661 1Hp 1Storageworks Storage Mirroring Apr 23, 2026 Jun 4, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.
CVE-2008-2390 1Hp 1Software Update Apr 23, 2026 May 21, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.
CVE-2008-1660 1Hp 1Hp Ux Apr 23, 2026 May 21, 2008 N/A· v4 N/A· v3 6.3 MEDIUM· v2 Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors.
CVE-2008-0713 1Hp 1Hp Ux Apr 23, 2026 May 13, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown attack vectors.
CVE-2008-1659 1Hp 1Ldap Ux Apr 23, 2026 May 8, 2008 N/A· v4 N/A· v3 7.2 HIGH· v2 Unspecified vulnerability in HP LDAP-UX vB.04.10 through vB.04.15 allows local users to gain privileges via unknown vectors.
CVE-2008-0712 1Hp 1Software Update Apr 23, 2026 Apr 25, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive i...Show more Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513.Show less
CVE-2008-1853 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 16, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request).
CVE-2008-1852 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 16, 2008 N/A· v4 N/A· v3 7.8 HIGH· v2 ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-argumen...Show more ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure.Show less
CVE-2008-1851 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 16, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments.
CVE-2008-0068 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 16, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action paramet...Show more Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.Show less
CVE-2008-1842 1Hp 1Openview Network Node Manager Apr 23, 2026 Apr 16, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long req...Show more Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.Show less

Previous 1...939495...117 Next