Hp Version Control Repository Manager vulnerabilities
13 vulnerabilities
Known vulnerabilities in Hp Version Control Repository Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-5412hpversion_control_repository_manager
EPSS score0.87%
Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.CVE-2015-5413hpversion_control_repository_managerEPSS score1.73%
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors.CVE-2015-5410hpversion_control_repository_managerEPSS score2.80%
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors.CVE-2015-5409hpversion_control_repository_managerEPSS score2.27%
Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.CVE-2015-5411hpversion_control_repository_managerEPSS score2.11%
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors.CVE-2015-8651adobeair+17KEVEPSS score67.70%
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.CVE-2015-3113adobeflash_player+18KEVEPSS score99.81%
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.CVE-2016-8514hewlett packard enterpriseversion control repository manager (vcrm)+1EPSS score1.73%
A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.CVE-2016-8515hewlett packard enterpriseversion control repository manager (vcrm)+1EPSS score1.92%
A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.CVE-2016-8513hewlett packard enterpriseversion control repository manager (vcrm)+1EPSS score0.68%
A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.CVE-2005-2076hpversion_control_repository_managerEPSS score0.51%
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.CVE-2010-3994hphp+1EPSS score2.88%
Cross-site scripting (XSS) vulnerability in HP Version Control Repository Manager (VCRM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2017-5787hewlett packard enterpriseversion control repository manager (vcrm)+1EPSS score2.29%
A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found.