Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Total 2441 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-4823 1 Hp 1 Http Server 2025-04-03 10.0 HIGH N/A
Buffer overflow in the HP HTTP Server 5.0 through 5.95 of the HP Web-enabled Management Software allows remote attackers to execute arbitrary code via unknown vectors.
CVE-1999-1146 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges.
CVE-2001-1439 1 Hp 1 Hp-ux 2025-04-03 2.1 LOW N/A
Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit.
CVE-2001-1162 2 Hp, Samba 2 Cifs-9000 Server, Samba 2025-04-03 10.0 HIGH N/A
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
CVE-1999-1433 1 Hp 1 Jetadmin 2025-04-03 7.2 HIGH N/A
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.
CVE-2001-0219 1 Hp 1 Hp-ux 2025-04-03 2.1 LOW N/A
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
CVE-2005-2076 1 Hp 1 Version Control Repository Manager 2025-04-03 2.1 LOW N/A
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.
CVE-1999-0325 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
vhe_u_mnt program in HP-UX allows local users to create root files through symlinks.
CVE-1999-0513 7 Digital, Freebsd, Hp and 4 more 8 Unix, Freebsd, Hp-ux and 5 more 2025-04-03 5.0 MEDIUM N/A
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-1133 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users.
CVE-1999-0432 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
ftp on HP-UX 11.00 allows local users to gain privileges.
CVE-2006-4795 1 Hp 1 Hp-ux 2025-04-03 4.6 MEDIUM N/A
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors.
CVE-2001-1182 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
CVE-2002-1615 1 Hp 2 Hp-ux, Tru64 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
CVE-2002-0679 6 Caldera, Compaq, Hp and 3 more 8 Openunix, Unixware, Tru64 and 5 more 2025-04-03 10.0 HIGH N/A
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
CVE-2002-0678 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2025-04-03 7.2 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
CVE-2000-1062 1 Hp 1 Jetdirect 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service.
CVE-2003-0746 1 Hp 1 Openview 2025-04-03 5.0 MEDIUM N/A
Various Distributed Computing Environment (DCE) implementations, including HP OpenView, allow remote attackers to cause a denial of service (process hang or termination) via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such as the Blaster/MSblast/LovSAN worm.
CVE-2003-1437 6 Bea, Hp, Ibm and 3 more 8 Weblogic Server, Hp-ux, Aix and 5 more 2025-04-03 2.1 LOW N/A
BEA WebLogic Express and WebLogic Server 7.0 and 7.0.0.1, stores passwords in plaintext when a keystore is used to store a private key or trust certificate authorities, which allows local users to gain access.
CVE-1999-1144 1 Hp 1 Hp-ux 2025-04-03 7.2 HIGH N/A
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges.