Vulnerabilities > HP > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-06-30 CVE-2023-35175 Server-Side Request Forgery (SSRF) vulnerability in HP products
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
network
low complexity
hp CWE-918
critical
9.8
2023-06-14 CVE-2023-1329 Unspecified vulnerability in HP products
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs).
network
low complexity
hp
critical
9.8
2023-06-12 CVE-2023-26295 Command Injection vulnerability in HP Device Manager
Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
network
low complexity
hp CWE-77
critical
9.8
2023-06-12 CVE-2023-32673 Unspecified vulnerability in HP products
Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.
network
low complexity
hp
critical
9.8
2023-06-12 CVE-2023-32674 Classic Buffer Overflow vulnerability in HP PC Hardware Diagnostics
Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.
network
low complexity
hp CWE-120
critical
9.8
2023-05-08 CVE-2023-22779 Classic Buffer Overflow vulnerability in HP Instantos
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211).
network
low complexity
hp CWE-120
critical
9.8
2023-05-08 CVE-2023-22780 Classic Buffer Overflow vulnerability in HP Instantos
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211).
network
low complexity
hp CWE-120
critical
9.8
2023-05-08 CVE-2023-22781 Classic Buffer Overflow vulnerability in HP Instantos
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211).
network
low complexity
hp CWE-120
critical
9.8
2023-05-08 CVE-2023-22782 Classic Buffer Overflow vulnerability in HP Instantos
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211).
network
low complexity
hp CWE-120
critical
9.8
2023-05-08 CVE-2023-22783 Classic Buffer Overflow vulnerability in HP Instantos
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211).
network
low complexity
hp CWE-120
critical
9.8