Hp vulnerabilities, page 4
2,284 vulnerabilities
Known vulnerabilities in Hp products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8,619 products.
CVE-2018-7097hewlett packard enterprisehpe 3par service processors+1
EPSS score0.74%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.CVE-2018-7099hewlett packard enterprisehpe 3par service processors+1EPSS score0.40%
A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow disclosure of privileged information.CVE-2018-18593hpucmdb_configuration_manager+1EPSS score8.83%
Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged InformationCVE-2018-5390a10networksadvanced_core_operating_system+100EPSS score71.11%
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.CVE-2018-5926hphp remote graphics software+1EPSS score1.17%
A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier.CVE-2018-5740alpinebind+32EPSS score59.62%
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.CVE-2018-5921hp inc.certain hp enterprise printers, hp pagewide printers, and mfp products+194EPSS score0.74%
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.CVE-2018-5927hphp support assistant+1EPSS score0.38%
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code.CVE-2018-5924hp inc.hp inkjet printers+270EPSS score10.95%
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.CVE-2018-5923hpcolor_laserjet_cm4540_mfp_firmware+138EPSS score2.64%
In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution of arbitrary code.CVE-2018-5925hp inc.hp inkjet printers+270EPSS score9.74%
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.CVE-2018-15532hpsynaptics_touchpad_driverEPSS score0.70%
SynTP.sys in Synaptics Touchpad drivers before 2018-06-06 allows local users to obtain sensitive information about freed kernel addresses.CVE-2018-6505hparcsight_management_center+1EPSS score2.54%
A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Unauthenticated File Downloads.CVE-2018-6503hparcsight_management_center+1EPSS score1.14%
A potential Access Control vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls.CVE-2018-6502hparcsight_management_center+1EPSS score1.27%
A potential Reflected Cross-Site Scripting (XSS) Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting (XSS).CVE-2018-6500hparcsight_management_center+1EPSS score4.00%
A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal.CVE-2018-6493hpnetwork_automation+3EPSS score2.01%
SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection.CVE-2018-6501hparcsight_management_centerEPSS score0.83%
Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center (ArcMC) for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls.CVE-2018-6492hpnetwork_automation+3EPSS score1.55%
Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, and non-persistent HTML Injection.CVE-2018-6490hpoperations_orchestration+1EPSS score2.57%
Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service.