Filtered by vendor Hp
Subscribe
Total
2463 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2002-1796 | 1 Hp | 5 Chaivm Ezloader, Laserjet 4100, Laserjet 4500 and 2 more | 2025-04-03 | 4.6 MEDIUM | 7.8 HIGH |
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services. | |||||
CVE-2001-1564 | 1 Hp | 1 Hp-ux | 2025-04-03 | 2.1 LOW | N/A |
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space. | |||||
CVE-2004-1332 | 1 Hp | 5 Hp-ux, Hp-ux Series 700, Hp-ux Series 800 and 2 more | 2025-04-03 | 7.5 HIGH | N/A |
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request. | |||||
CVE-2004-1857 | 1 Hp | 1 Web Jetadmin | 2025-04-03 | 2.1 LOW | N/A |
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter. | |||||
CVE-2001-1506 | 1 Hp | 1 Secure Os | 2025-04-03 | 4.6 MEDIUM | N/A |
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files. | |||||
CVE-1999-0040 | 7 Bsdi, Freebsd, Hp and 4 more | 10 Bsd Os, Freebsd, Hp-ux and 7 more | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |||||
CVE-2001-1182 | 1 Hp | 1 Hp-ux | 2025-04-03 | 7.2 HIGH | N/A |
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. | |||||
CVE-2002-0992 | 1 Hp | 1 Hp-ux | 2025-04-03 | 2.1 LOW | N/A |
Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data. | |||||
CVE-2000-0005 | 1 Hp | 3 9000, Aserver, Hp-ux | 2025-04-03 | 7.2 HIGH | N/A |
HP-UX aserver program allows local users to gain privileges via a symlink attack. | |||||
CVE-2000-1058 | 1 Hp | 1 Openview Network Node Manager | 2025-04-03 | 5.0 MEDIUM | N/A |
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem." | |||||
CVE-2002-0763 | 1 Hp | 1 Virtualvault | 2025-04-03 | 7.5 HIGH | N/A |
Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server. | |||||
CVE-2001-0311 | 1 Hp | 2 Hp-ux, Omniback Ii | 2025-04-03 | 4.6 MEDIUM | N/A |
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client. | |||||
CVE-2004-1029 | 5 Conectiva, Gentoo, Hp and 2 more | 8 Linux, Linux, Hp-ux and 5 more | 2025-04-03 | 9.3 HIGH | N/A |
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages. | |||||
CVE-2002-0798 | 1 Hp | 1 Hp-ux | 2025-04-03 | 2.1 LOW | N/A |
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service. | |||||
CVE-2004-2439 | 1 Hp | 17 Color Laserjet, Color Laserjet 4600, Laserjet 2500 and 14 more | 2025-04-03 | 5.0 MEDIUM | N/A |
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware. | |||||
CVE-2002-1618 | 1 Hp | 2 Hp-ux, Jfs | 2025-04-03 | 7.2 HIGH | N/A |
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems. | |||||
CVE-2002-1794 | 1 Hp | 2 Hp-ux, Ldap-ux Integration | 2025-04-03 | 10.0 HIGH | N/A |
Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users. | |||||
CVE-2000-0078 | 1 Hp | 1 Hp-ux | 2025-04-03 | 7.2 HIGH | N/A |
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command. | |||||
CVE-1999-1135 | 1 Hp | 1 Hp-ux | 2025-04-03 | 7.2 HIGH | N/A |
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438. | |||||
CVE-2000-1126 | 1 Hp | 1 Hp-ux | 2025-04-03 | 10.0 HIGH | N/A |
Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service. |