Vulnerabilities > HP > High

DATE CVE VULNERABILITY TITLE RISK
2012-08-20 CVE-2012-3252 Denial of Service vulnerability in HP Serviceguard A.11.19/A.11.20
Unspecified vulnerability in HP Serviceguard A.11.19 and A.11.20 allows remote attackers to cause a denial of service via unknown vectors.
network
low complexity
hp
7.8
2012-08-20 CVE-2012-2986 OS Command Injection vulnerability in HP San/Iq 9.5
lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter.
low complexity
hp CWE-78
7.7
2012-06-30 CVE-2012-2017 Unspecified vulnerability in HP products
Unspecified vulnerability on HP Photosmart Wireless e-All-in-One B110, e-All-in-One D110, Plus e-All-in-One B210, eStation All-in-One C510, Ink Advantage e-All-in-One K510, and Premium Fax e-All-in-One C410 printers allows remote attackers to cause a denial of service via unknown vectors.
network
low complexity
hp
7.8
2012-06-29 CVE-2012-2013 Unspecified vulnerability in HP System Management Homepage
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors.
network
low complexity
hp linux microsoft
7.5
2012-05-09 CVE-2012-2007 SQL Injection vulnerability in HP Performance Insight
SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
hp CWE-89
7.5
2012-05-02 CVE-2012-2004 Improper Input Validation vulnerability in HP Insight Management Agents
Open redirect vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
network
hp microsoft CWE-20
8.3
2012-05-02 CVE-2012-2002 Improper Input Validation vulnerability in HP Snmp Agents FOR Linux
Open redirect vulnerability in HP SNMP Agents for Linux before 9.0.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
network
hp CWE-20
8.3
2012-05-02 CVE-2012-2000 Remote Code Execution vulnerability in HP System Health Application and Command Line Utilities
Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors.
network
low complexity
hp
7.5
2012-04-05 CVE-2012-0129 Permissions, Privileges, and Access Controls vulnerability in HP Onboard Administrator
HP Onboard Administrator (OA) before 3.50 allows remote attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.
network
high complexity
hp CWE-264
7.6
2012-03-20 CVE-2012-1796 Local Security vulnerability in IBM DB2 9.5
Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via unknown vectors.
local
low complexity
ibm hp linux sun
7.2