VYPR
← All vendors
Vendor

Microfocus

Products
8,718
CVEs
2,781
Across products
1,704
Status
Private

Products

8,718
View all 8,718 products →

Recent CVEs

2,781
View all 2,781 CVEs →
  • CVE-2015-3113CriKEVJun 23, 2015
    Microfocus
    System Management Homepage
    risk 0.87cvss 9.8epss 1.00

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.

  • CVE-2012-1823CriKEVMay 11, 2012
    PHP
    PHP
    risk 0.87cvss 9.8epss 1.00

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options…

  • CVE-2021-22502CriKEVFeb 8, 2021
    Microfocus
    Operation Bridge Reporter
    risk 0.86cvss 9.8epss 0.97

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

  • CVE-2017-5638CriKEVMar 11, 2017
    Apache
    Struts
    risk 0.86cvss 9.8epss 1.00

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type,…

  • CVE-2013-4810CriKEVSep 16, 2013
    Microfocus
    Application LifeCycle Management
    risk 0.85cvss 9.8epss 0.79

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE:…

  • CVE-2005-2773CriKEVSep 2, 2005
    Microfocus
    OpenView Network Node Manager
    risk 0.85cvss 9.8epss 0.74

    HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

  • CVE-2017-12542CriFeb 15, 2018
    HPE
    Integrated Lights-Out 4 (iLO 4)
    risk 0.76cvss 10.0epss 0.99

    A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

  • CVE-2020-7209CriFeb 13, 2020
    LinuxKI
    LinuxKI
    risk 0.75cvss 9.8epss 0.99

    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

  • CVE-2015-8651HigKEVDec 28, 2015
    Adobe Inc.
    Air
    risk 0.75cvss 8.8epss 0.68

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to…

  • CVE-2018-12464CriJun 29, 2018
    Microfocus
    Secure Messaging Gateway
    risk 0.74cvss 10.0epss 0.81

    A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows an unauthenticated remote attacker to execute arbitrary SQL statements against the database. This can be exploited to create an administrative account…

  • CVE-2017-5816CriFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.74cvss 9.8epss 0.86

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2016-2004CriApr 21, 2016
    HPE
    Data Protector
    risk 0.74cvss 9.8epss 0.94

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.

  • CVE-2020-7200CriDec 18, 2020
    HPE
    Systems Insight Manager
    risk 0.73cvss 9.8epss 0.82

    A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The vulnerability could be exploited to allow remote code execution.

  • CVE-2020-11854CriOct 27, 2020
    Microfocus
    Application Performance Management
    risk 0.73cvss 9.8epss 0.74

    Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance…

  • CVE-2017-5817CriFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.73cvss 9.8epss 0.83

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

  • CVE-2017-12557CriFeb 15, 2018
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.73cvss 9.8epss 0.80

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

  • CVE-2017-2741CriJan 23, 2018
    Microfocus
    J6u57b Firmware
    risk 0.73cvss 9.8epss 0.85

    A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.

  • CVE-2019-11945CriJun 5, 2019
    HPE
    Intelligent Management Center (iMC) PLAT
    risk 0.70cvss 9.8epss 0.79

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  • CVE-2016-1606CriJul 3, 2016
    Microfocus
    Rumba
    risk 0.70cvss 9.8epss 0.46

    Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to…

  • CVE-2021-29203CriMay 6, 2021
    HPE
    Edgeline Infrastructure Manager
    risk 0.69cvss 9.8epss 0.68

    A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of…

View all 2,781 CVEs →