CveMateVulnerability intelligence

Hp Ux vulnerabilities, page 3

282 vulnerabilities

Known vulnerabilities in Hp Ux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2007-5946hphp-ux18y ago14-11-2007 01:00

Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local users to obtain unspecified access.CVE-2007-5302hphp-ux19y ago09-10-2007 18:00

Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, and B.11.31, and SMH before 2.1.10 for Linux and Windows, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2007-5008hphp-ux19y ago20-09-2007 21:00

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.CVE-2007-6425hphp-ux18y ago23-01-2008 20:00

Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of service via unknown vectors.CVE-2007-6419hphp-ux18y ago24-12-2007 20:00

Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.CVE-2007-6195hphp-ux18y ago15-12-2007 01:00

Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.CVE-2016-2776alpinebind+4610y ago28-09-2016 10:00

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.CVE-2016-2775debianbind9+2510y ago19-07-2016 22:00

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.CVE-2014-2490ubuntuopenjdk-6+412y ago17-07-2014 02:36

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.CVE-2014-7877hphp-ux11y ago30-10-2014 10:00

Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors.CVE-2014-7874hphp-ux+112y ago19-10-2014 01:00

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.CVE-2014-7879hphp-ux11y ago10-12-2014 21:00

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.CVE-2001-1136hphp-ux24y ago15-03-2002 05:00

The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.CVE-2001-1124hphp-ux24y ago15-03-2002 05:00

rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.CVE-2001-1244freebsdfreebsd+724y ago03-05-2002 04:00

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.CVE-2001-1264hphp-ux+124y ago03-05-2002 04:00

Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.CVE-2001-1181hphp-ux24y ago15-03-2002 05:00

Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.CVE-2001-1509hphp-ux21y ago14-07-2005 04:00

geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges.CVE-2001-1182hphp-ux24y ago15-03-2002 05:00

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.CVE-2001-1564hphp-ux21y ago14-07-2005 04:00

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.