Vulnerabilities (CVE)

CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-3260 1 Hp 1 Sitescope 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.
CVE-2012-3261 1 Hp 1 Sitescope 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.
CVE-2012-3262 1 Hp 1 Sitescope 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.
CVE-2012-3263 1 Hp 1 Sitescope 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.
CVE-2012-3264 1 Hp 1 Sitescope 2019-10-09 7.5 HIGH N/A
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1472.
CVE-2012-3266 1 Hp 4 Ibrix, Ibrix X9300, Ibrix X9320 and 1 more 2019-10-09 5.0 MEDIUM N/A
Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows remote attackers to obtain sensitive information via unknown vectors.
CVE-2012-3274 1 Hp 1 Intelligent Management Center 2019-10-09 10.0 HIGH N/A
Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.
CVE-2012-3276 1 Hp 1 Openvms 2019-10-09 2.1 LOW N/A
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows local users to cause a denial of service via unspecified vectors.
CVE-2012-3277 1 Hp 1 Openvms 2019-10-09 5.0 MEDIUM N/A
HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the LOGIN and ACME_SERVER ACMELOGIN programs, which allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2012-3278 1 Hp 1 Diagnostics Server 2019-10-09 10.0 HIGH N/A
Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.
CVE-2012-3279 1 Hp 1 Network Node Manager I 2019-10-09 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-3280 1 Hp 2 Nonstop Server, Nonstop Server Software 2019-10-09 6.3 MEDIUM N/A
Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via an OSS Remote Operation over an Expand connection.
CVE-2012-3281 1 Hp 1 Xp P9000 Command View Advanced Edition 2019-10-09 7.8 HIGH N/A
Unspecified vulnerability in Device Manager in HP XP P9000 Command View Advanced Edition before 7.4.0-00 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2012-3282 1 Hp 2 Lefthand P4000 Virtual San Appliance, San\/iq 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.
CVE-2012-3283 1 Hp 2 Lefthand P4000 Virtual San Appliance, San\/iq 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511.
CVE-2012-3284 1 Hp 2 Lefthand P4000 Virtual San Appliance, San\/iq 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512.
CVE-2012-3285 1 Hp 2 Lefthand P4000 Virtual San Appliance, San\/iq 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513.
CVE-2012-3286 1 Hp 3 Arcsight Connector Appliance, Arcsight Connector Appliance Firmware, Arcsight Logger 2019-10-09 6.5 MEDIUM N/A
Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVE-2012-0121 1 Hp 1 Data Protector Express 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392.
CVE-2012-0122 1 Hp 1 Data Protector Express 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.
CVE-2012-0124 1 Hp 1 Data Protector Express 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
CVE-2012-0433 1 Crowbar Project 1 Crowbar 2019-10-09 2.1 LOW 5.5 MEDIUM
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data.
CVE-2012-0508 1 Oracle 1 Javafx 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX, 1.3.0 and earlier, and 1.2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2012-1995 1 Hp 1 Systems Insight Manager 2019-10-09 3.2 LOW N/A
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors.
CVE-2012-1996 1 Hp 1 Systems Insight Manager 2019-10-09 4.3 MEDIUM N/A
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to modify data via unknown vectors.
CVE-2012-1997 1 Hp 1 Systems Insight Manager 2019-10-09 7.5 HIGH N/A
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998.
CVE-2012-1998 1 Hp 1 Systems Insight Manager 2019-10-09 6.8 MEDIUM N/A
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997.
CVE-2012-1999 1 Hp 1 Systems Insight Manager 2019-10-09 8.5 HIGH N/A
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors.
CVE-2012-2012 3 Hp, Linux, Microsoft 3 System Management Homepage, Linux Kernel, Windows 2019-10-09 10.0 HIGH N/A
HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVE-2012-2013 3 Hp, Linux, Microsoft 3 System Management Homepage, Linux Kernel, Windows 2019-10-09 7.5 HIGH N/A
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.
CVE-2012-2014 3 Hp, Linux, Microsoft 3 System Management Homepage, Linux Kernel, Windows 2019-10-09 9.0 HIGH N/A
HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors.
CVE-2012-2015 3 Hp, Linux, Microsoft 3 System Management Homepage, Linux Kernel, Windows 2019-10-09 9.0 HIGH N/A
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors.
CVE-2012-2016 3 Hp, Linux, Microsoft 3 System Management Homepage, Linux Kernel, Windows 2019-10-09 4.9 MEDIUM N/A
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown vectors.
CVE-2012-2019 1 Hp 1 Operations Agent 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.
CVE-2012-2020 1 Hp 1 Operations Agent 2019-10-09 10.0 HIGH N/A
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.
CVE-2012-2021 1 Hp 1 Assetmanager 2019-10-09 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-2022 1 Hp 1 Network Node Manager I 2019-10-09 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i (NNMi) 8.x, 9.0x, 9.1x, and 9.20 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2405 1 Hp 2 Proliant Sl Advanced Power Manager, Proliant Sl Advanced Power Manager Firmware 2019-10-09 7.8 HIGH N/A
The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2011-2407 1 Hp 1 Openview Performance Insight 2019-10-09 6.4 MEDIUM N/A
Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors.
CVE-2011-2408 1 Hp 1 Palm Webos 2019-10-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2409 1 Hp 1 Palm Webos 2019-10-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2410 1 Hp 1 Openview Performance Insight 2019-10-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-2411 2 Hp, Samba 3 Nonstop Server, Nonstop Server Software, Samba 2019-10-09 9.0 HIGH N/A
Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors.
CVE-2011-3145 1 Mount.ecrpytfs Private Project 1 Mount.ecrpytfs Private 2019-10-09 7.5 HIGH 9.8 CRITICAL
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.
CVE-2011-3151 1 Canonical 1 Selinux 2019-10-09 5.8 MEDIUM 5.9 MEDIUM
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.
CVE-2011-3178 1 Opensuse 1 Open Build Service 2019-10-09 6.5 MEDIUM 8.8 HIGH
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
CVE-2011-4166 1 Hp 1 Managed Printing Administration 2019-10-09 7.5 HIGH N/A
Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
CVE-2011-4167 1 Hp 1 Managed Printing Administration 2019-10-09 7.5 HIGH N/A
Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp.
CVE-2011-4168 1 Hp 1 Managed Printing Administration 2019-10-09 7.5 HIGH N/A
Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
CVE-2011-4169 1 Hp 1 Managed Printing Administration 2019-10-09 7.5 HIGH N/A
Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.