Vulnerabilities > HP > System Management Homepage > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-05-22 CVE-2016-4543 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
network
low complexity
hp php fedoraproject opensuse CWE-119
critical
9.8
2016-03-18 CVE-2016-1995 Unspecified vulnerability in HP System Management Homepage
HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.
network
low complexity
hp
critical
9.8
2015-06-23 CVE-2015-3113 Out-of-bounds Write vulnerability in multiple products
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
network
low complexity
adobe opensuse suse hp redhat CWE-787
critical
9.8