VYPR
← Microfocus

Vendor CVEs

Microfocus

All CVEs

2,790 total · sorted by risk
  • CVE-2013-2332Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1654.

  • CVE-2013-2331Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652.

  • CVE-2013-2330Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1638.

  • CVE-2013-2329Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1637.

  • CVE-2013-2328Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636.

  • CVE-2013-2327Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1635.

  • CVE-2013-2326Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1634.

  • CVE-2013-2325Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.61

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1633.

  • CVE-2012-5203Mar 9, 2013
    Microfocus
    Intelligent Management Center
    risk 0.05cvss —epss 0.21

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka…

  • CVE-2012-5202Mar 9, 2013
    Microfocus
    Intelligent Management Center
    risk 0.05cvss —epss 0.21

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka…

  • CVE-2012-3259Sep 25, 2012
    Microfocus
    Sitescope
    risk 0.05cvss —epss 0.60

    Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.

  • CVE-2011-1866Jul 1, 2011
    Microfocus
    Storage Data Protector
    risk 0.05cvss —epss 0.21

    Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.

  • CVE-2010-1039May 20, 2010
    Sgi
    Irix
    risk 0.05cvss —epss 0.20

    Format string vulnerability in the _msgout function in rpc.pcnfsd in IBM AIX 6.1, 5.3, and earlier; IBM VIOS 2.1, 1.5, and earlier; NFS/ONCplus B.11.31_09 and earlier on HP HP-UX B.11.11, B.11.23, and B.11.31; and SGI IRIX 6.5 allows remote attackers to execute arbitrary code…

  • CVE-2007-6331Dec 13, 2007
    Microfocus
    HP Quick Launch Button
    risk 0.05cvss —epss 0.30

    Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs…

  • CVE-2007-4916Sep 17, 2007
    Hewlett-Packard
    All-in-One
    risk 0.05cvss —epss 0.20

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard (HP) All-in-One and Photo…

  • CVE-2007-3872Aug 9, 2007
    Microfocus
    OpenView Operations
    risk 0.05cvss —epss 0.30

    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.

  • CVE-2005-3277Oct 21, 2005
    HPE
    HP-UX
    risk 0.05cvss —epss 0.19

    The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different…

  • CVE-2005-1825May 3, 2005
    Microfocus
    Radia Notify Daemon
    risk 0.05cvss —epss 0.62

    Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.

  • CVE-2004-1856Mar 24, 2004
    Microfocus
    Jetadmin
    risk 0.05cvss —epss 0.30

    devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.

  • CVE-2003-0681Oct 6, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.05cvss —epss 0.22

    A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

  • CVE-2002-1426Apr 11, 2003
    Microfocus
    Procurve Switch 4000M
    risk 0.05cvss —epss 0.20

    HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.

  • CVE-2002-1317Dec 11, 2002
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.24

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

  • CVE-2001-0552Sep 20, 2001
    Tivoli
    Netview
    risk 0.05cvss —epss 0.26

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.

  • CVE-1999-0003Apr 1, 1998
    Sgi
    Tooltalk
    risk 0.05cvss —epss 0.25

    Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd).

  • CVE-2015-4024Jun 9, 2015
    PHP
    PHP
    risk 0.04cvss —epss 0.50

    Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an…

  • CVE-2015-2125Jun 7, 2015
    Microfocus
    Webinspect
    risk 0.04cvss —epss 0.08

    Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access restrictions via unknown vectors.

  • CVE-2014-7884Mar 14, 2015
    Microfocus
    ArcSight Logger
    risk 0.04cvss —epss 0.12

    Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.

  • CVE-2014-2630Aug 12, 2014
    Microfocus
    Operations Agent
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.

  • CVE-2014-2612Jun 28, 2014
    Microfocus
    Release Control
    risk 0.04cvss —epss 0.07

    Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to obtain sensitive information via unknown vectors.

  • CVE-2013-4784Jul 8, 2013
    Microfocus
    Integrated Lights Out 4 Firmware
    risk 0.04cvss —epss 0.50

    The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.

  • CVE-2013-2334Jun 6, 2013
    Microfocus
    Storage Data Protector
    risk 0.04cvss —epss 0.47

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1681.

  • CVE-2012-5204Mar 9, 2013
    Microfocus
    Intelligent Management Center
    risk 0.04cvss —epss 0.18

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka…

  • CVE-2012-3282Feb 6, 2013
    Microfocus
    LeftHand Virtual SAN Appliance
    risk 0.04cvss —epss 0.17

    Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468.

  • CVE-2012-5931Dec 24, 2012
    Microfocus
    Privileged User Manager
    risk 0.04cvss —epss 0.07

    Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

  • CVE-2012-5930Dec 24, 2012
    Microfocus
    Privileged User Manager
    risk 0.04cvss —epss 0.07

    The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted…

  • CVE-2011-4162Dec 5, 2011
    Microfocus
    Protecttools Device Access Manager
    risk 0.04cvss —epss 0.08

    The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap…

  • CVE-2010-4107Nov 17, 2010
    Microfocus
    Laserjet 4300
    risk 0.04cvss —epss 0.13

    The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which…

  • CVE-2010-1586Apr 28, 2010
    Microfocus
    System Management Homepage
    risk 0.04cvss —epss 0.10

    Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter.

  • CVE-2010-1033Apr 21, 2010
    Microfocus
    Operations Manager
    risk 0.04cvss —epss 0.13

    Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and…

  • CVE-2009-3840Nov 19, 2009
    Microfocus
    OpenView Network Node Manager
    risk 0.04cvss —epss 0.09

    The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.

  • CVE-2009-3099Sep 8, 2009
    Microfocus
    Operations Manager
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than…

  • CVE-2008-7126Aug 31, 2009
    Microfocus
    Visibroker
    risk 0.04cvss —epss 0.10

    Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a…

  • CVE-2008-5120Nov 18, 2008
    Process Software
    MultiNet finger service
    risk 0.04cvss —epss 0.10

    Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.

  • CVE-2008-3544Oct 13, 2008
    Microfocus
    OpenView Network Node Manager
    risk 0.04cvss —epss 0.18

    Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61),…

  • CVE-2008-0953Jun 4, 2008
    Microfocus
    Instant Support
    risk 0.04cvss —epss 0.09

    The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and…

  • CVE-2007-5610Jun 4, 2008
    Microfocus
    Instant Support
    risk 0.04cvss —epss 0.09

    The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument.

  • CVE-2007-5607Jun 4, 2008
    Microfocus
    Instant Support
    risk 0.04cvss —epss 0.13

    Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than…

  • CVE-2007-5604Jun 4, 2008
    Microfocus
    Instant Support
    risk 0.04cvss —epss 0.12

    Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605,…

  • CVE-2008-2390May 21, 2008
    Microfocus
    Software Update
    risk 0.04cvss —epss 0.07

    Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.

  • CVE-2008-1842Apr 16, 2008
    Microfocus
    OpenView Network Node Manager
    risk 0.04cvss —epss 0.12

    Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative…

Page 32 of 56