İçeriğe atla
Noroxi

HP kayıtları

hp üreticisine ait 2.534 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
6 · %0,2
Silahlaştırılmış
102 · %4
Pre-auth RCE
539
Düzeltme kaydı olan
%7
Yayından KEV’e ortanca
2799 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

2.534 kayıt
  • CVE-2017-5638
    99Hemen

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · struts10 Mar 2017

  • CVE-2012-1823
    99Hemen

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    php · php11 May 2012

  • CVE-2015-3113
    99Hemen

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    adobe · flash player23 Haz 2015

  • CVE-2013-4810
    93Hemen

    HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow rem

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %79

    hp · application lifecycle management16 Eyl 2013

  • CVE-2005-2773
    91Hemen

    HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1)

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %75

    hp · openview network node manager2 Eyl 2005

  • CVE-2015-8651
    85Hemen

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %68

    adobe · air sdk28 Ara 2015

  • CVE-2017-12542
    70Bu hafta

    A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

    KritikCVSS 10,0SilahlaştırılmışEPSS %99

    hp · integrated lights-out 4 firmware15 Şub 2018

  • CVE-2020-7209
    69Bu hafta

    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    hp · linuxki12 Şub 2020

  • CVE-2000-0573
    69Bu hafta

    The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec

    KritikCVSS 10,0SilahlaştırılmışEPSS %96

    hp · hp-ux7 Tem 2000

  • CVE-2001-0797
    68Bu hafta

    Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numbe

    KritikCVSS 10,0SilahlaştırılmışEPSS %95

    sgi · irix12 Ara 2001

  • CVE-2016-2004
    67Bu hafta

    HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified ve

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    hp · data protector21 Nis 2016

  • CVE-2014-2623
    67Bu hafta

    Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors.

    KritikCVSS 10,0SilahlaştırılmışEPSS %91

    hp · storage data protector17 Tem 2014

  • CVE-2013-2333
    67Bu hafta

    Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unkn

    KritikCVSS 10,0SilahlaştırılmışEPSS %90

    hp · storage data protector6 Haz 2013

  • CVE-2011-1865
    67Bu hafta

    Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %89

    hp · openview storage data protector1 Tem 2011

  • CVE-2003-0085
    66Bu hafta

    Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, al

    KritikCVSS 10,0Kavram kanıtıEPSS %86

    samba · samba31 Mar 2003

  • CVE-2017-5816
    65Bu hafta

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    hp · intelligent management center15 Şub 2018

  • CVE-2003-0201
    65Bu hafta

    Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG

    KritikCVSS 10,0SilahlaştırılmışEPSS %85

    samba · samba5 May 2003

  • CVE-2011-0276
    65Bu hafta

    HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager

    KritikCVSS 10,0SilahlaştırılmışEPSS %82

    hp · openview performance insight1 Şub 2011

  • CVE-2019-5736
    64Bu hafta

    runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequen

    YüksekCVSS 8,6SilahlaştırılmışEPSS %98

    docker · docker11 Şub 2019

  • CVE-2017-2741
    64Bu hafta

    A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    hp · j9v82a firmware23 Oca 2018

  • CVE-2017-5817
    64Bu hafta

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    KritikCVSS 9,8SilahlaştırılmışEPSS %83

    hp · intelligent management center15 Şub 2018

  • CVE-2020-7200
    64Bu hafta

    A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6.

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    hp · systems insight manager18 Ara 2020

  • CVE-2011-0923
    64Bu hafta

    The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code

    KritikCVSS 10,0SilahlaştırılmışEPSS %81

    hp · data protector8 Şub 2011

  • CVE-2009-3843
    64Bu hafta

    HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    hp · operations manager23 Kas 2009

  • CVE-2009-4189
    64Bu hafta

    HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    hp · operations manager3 Ara 2009