Vulnerabilities > HP

DATE CVE VULNERABILITY TITLE RISK
2016-10-05 CVE-2016-4390 Unspecified vulnerability in HP Keyview
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389.
network
high complexity
hp
8.1
2016-10-05 CVE-2016-4389 Unspecified vulnerability in HP Keyview
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390.
network
high complexity
hp
8.1
2016-10-05 CVE-2016-4388 Unspecified vulnerability in HP Keyview
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390.
network
high complexity
hp
8.1
2016-10-05 CVE-2016-4387 Unspecified vulnerability in HP Keyview
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390.
network
high complexity
hp
8.1
2016-09-29 CVE-2016-4386 Unspecified vulnerability in HP Network Automation 10.10
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors.
local
low complexity
hp
7.8
2016-09-29 CVE-2016-4385 Deserialization of Untrusted Data vulnerability in HP Network Automation
The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) and Commons BeanUtils libraries.
network
low complexity
hp CWE-502
7.3
2016-09-28 CVE-2016-2776 Improper Input Validation vulnerability in multiple products
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
network
low complexity
oracle isc hp CWE-20
7.5
2016-09-26 CVE-2016-6306 Out-of-bounds Read vulnerability in multiple products
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
network
high complexity
openssl hp novell nodejs debian canonical CWE-125
5.9
2016-09-21 CVE-2016-4384 Unspecified vulnerability in HP Loadrunner and Performance Center
HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors.
network
low complexity
hp
8.6
2016-09-21 CVE-2016-4382 Permissions, Privileges, and Access Controls vulnerability in HP Performance Center
HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue.
network
high complexity
hp CWE-264
8.3