Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Filtered by product System Management Homepage
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-4543 4 Fedoraproject, Hp, Opensuse and 1 more 4 Fedora, System Management Homepage, Leap and 1 more 2018-10-30 7.5 HIGH 9.8 CRITICAL
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVE-2016-1995 1 Hp 1 System Management Homepage 2016-12-03 10.0 HIGH 9.8 CRITICAL
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.