VYPR

Vendor CVEs

Microfocus

All CVEs

2,791 total · sorted by risk
  • CVE-2010-1963Jun 7, 2010
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in HP ServiceCenter allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1959May 27, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP TestDirector for Quality Center 9.2 before Patch8 allows remote attackers to modify data via unknown vectors.

  • CVE-2010-1557May 14, 2010
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1556May 14, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Systems Insight Manager (SIM) 5.3, 5.3 Update 1, and 6.0 allows remote attackers to obtain sensitive information and modify data via unknown vectors.

  • CVE-2010-1558May 14, 2010
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature, and obtain sensitive information, via unknown vectors.

  • CVE-2010-1038Apr 28, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP System Insight Manager before 6.0 allows remote authenticated users to gain privileges via unknown vectors.

  • CVE-2010-1037Apr 28, 2010
    risk 0.00cvss —epss 0.02

    Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2010-1036Apr 28, 2010
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1035Apr 23, 2010
    risk 0.00cvss —epss 0.05

    Multiple unspecified vulnerabilities in HP Virtual Machine Manager (VMM) before 6.0 allow remote authenticated users to execute arbitrary code via unknown vectors.

  • CVE-2010-1034Apr 23, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP System Management Homepage (SMH) 6.0 before 6.0.0-95 on Linux, and 6.0 before 6.0.0.96 on Windows, allows remote authenticated users to obtain sensitive information, modify data, and cause a denial of service via unknown vectors.

  • CVE-2010-1032Apr 21, 2010
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors.

  • CVE-2010-1031Apr 1, 2010
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Insight Control for Linux (aka IC-Linux or ICE-LX) 2.11 and earlier allows local users to gain privileges via unknown vectors.

  • CVE-2010-1030Mar 31, 2010
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of service via unknown vectors.

  • CVE-2010-0450Mar 31, 2010
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors.

  • CVE-2010-0449Mar 31, 2010
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2010-0448Mar 31, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors.

  • CVE-2010-0451Mar 29, 2010
    risk 0.00cvss —epss 0.03

    The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests.

  • CVE-2010-0452Mar 29, 2010
    risk 0.00cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0447Mar 10, 2010
    risk 0.00cvss —epss 0.05

    The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

  • CVE-2010-0446Feb 12, 2010
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2010-0445Feb 11, 2010
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors.

  • CVE-2009-4185Feb 5, 2010
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers to inject arbitrary web script or HTML via the servercert parameter.

  • CVE-2010-0443Feb 4, 2010
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors.

  • CVE-2009-4184Feb 3, 2010
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database via unknown vectors.

  • CVE-2009-4183Jan 28, 2010
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown vectors.

  • CVE-2009-4182Jan 14, 2010
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in HP Web Jetadmin 10.2, when a remote SQL server is used, allow remote attackers to obtain access to data or cause a denial of service, possibly by leveraging authentication and encryption weaknesses on the SQL server.

  • CVE-2009-2686Dec 2, 2009
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors.

  • CVE-2009-3842Nov 20, 2009
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color LaserJet CP3525 Printer with firmware 53.021.2 allows remote attackers to obtain "access to data" or cause a denial of service via unknown vectors.

  • CVE-2009-3977Nov 19, 2009
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53 might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via a long string argument to the (1)…

  • CVE-2009-3841Nov 17, 2009
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors.

  • CVE-2009-2678Nov 13, 2009
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2009-2679Oct 5, 2009
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors.

  • CVE-2009-2683Sep 29, 2009
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote authenticated users to execute arbitrary code via unknown vectors.

  • CVE-2009-2681Sep 29, 2009
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors.

  • CVE-2009-2682Sep 24, 2009
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors.

  • CVE-2009-2680Sep 24, 2009
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and…

  • CVE-2009-3098Sep 8, 2009
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Portal in HP Operations Dashboard 2.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903,…

  • CVE-2009-3097Sep 8, 2009
    risk 0.00cvss —epss 0.02

    Multiple unspecified vulnerabilities in HP Performance Insight 5.3 on Windows allow attackers to obtain sensitive information via unknown vectors, as demonstrated by certain modules in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable…

  • CVE-2009-3096Sep 8, 2009
    risk 0.00cvss —epss 0.04

    Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to (1) a "Remote exploit" on Windows platforms, and (2) a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by…

  • CVE-2008-7127Aug 31, 2009
    risk 0.00cvss —epss 0.02

    osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled.

  • CVE-2009-2677Aug 14, 2009
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2009-1427Aug 12, 2009
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call.

  • CVE-2009-1426Jul 29, 2009
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors.

  • CVE-2009-1425Jul 14, 2009
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and…

  • CVE-2009-1424Jul 14, 2009
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425.

  • CVE-2009-1423Jul 14, 2009
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425.

  • CVE-2009-1421Jul 2, 2009
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors.

  • CVE-2009-1419Jun 8, 2009
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors.

  • CVE-2009-1418May 19, 2009
    risk 0.00cvss —epss 0.03

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-0719Apr 29, 2009
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660.

Page 48 of 56