Hp

System Management Homepage

78 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.7

CVE-2016-1996

  • EPSS 0.13%
  • Veröffentlicht 18.03.2016 10:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.

10

CVE-2016-1995

  • EPSS 16.41%
  • Veröffentlicht 18.03.2016 10:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

6.5

CVE-2016-1994

  • EPSS 0.26%
  • Veröffentlicht 18.03.2016 10:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors.

8.1

CVE-2016-1993

  • EPSS 0.31%
  • Veröffentlicht 18.03.2016 10:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

9.3

CVE-2015-8651

Warnung
  • EPSS 89.78%
  • Veröffentlicht 28.12.2015 23:59:19
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0....

6

CVE-2015-2134

  • EPSS 0.08%
  • Veröffentlicht 21.07.2015 19:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

10

CVE-2015-3113

Warnung
  • EPSS 92.91%
  • Veröffentlicht 23.06.2015 21:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in...

6.4

CVE-2015-3237

  • EPSS 2.78%
  • Veröffentlicht 22.06.2015 19:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.

5

CVE-2015-4024

Exploit
  • EPSS 75.52%
  • Veröffentlicht 09.06.2015 18:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form ...

5

CVE-2015-3148

  • EPSS 1.71%
  • Veröffentlicht 24.04.2015 14:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.