Filtered by vendor Hp
Subscriptions
Filtered by product Hp-ux
Subscriptions
Total
465 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-1999-1238 | 1 Hp | 1 Hp-ux | 2017-12-19 | N/A |
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges. | ||||
CVE-1999-1213 | 1 Hp | 1 Hp-ux | 2017-12-19 | N/A |
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service. | ||||
CVE-1999-1135 | 1 Hp | 1 Hp-ux | 2017-12-19 | N/A |
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438. | ||||
CVE-1999-1133 | 1 Hp | 1 Hp-ux | 2017-12-19 | N/A |
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users. | ||||
CVE-2012-0126 | 1 Hp | 1 Hp-ux | 2017-12-06 | N/A |
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0125. | ||||
CVE-2012-0125 | 1 Hp | 1 Hp-ux | 2017-12-06 | N/A |
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126. | ||||
CVE-2006-5558 | 1 Hp | 1 Hp-ux | 2017-10-19 | N/A |
Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain. | ||||
CVE-2006-5557 | 1 Hp | 1 Hp-ux | 2017-10-19 | N/A |
Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain. | ||||
CVE-2006-5556 | 1 Hp | 1 Hp-ux | 2017-10-19 | N/A |
Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable. | ||||
CVE-2000-1134 | 7 Caldera, Conectiva, Hp and 4 more | 9 Openlinux, Openlinux Edesktop, Openlinux Eserver and 6 more | 2017-10-19 | N/A |
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack. | ||||
CVE-2000-1126 | 1 Hp | 1 Hp-ux | 2017-10-19 | N/A |
Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service. | ||||
CVE-1999-1573 | 1 Hp | 1 Hp-ux | 2017-10-19 | N/A |
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files. | ||||
CVE-2002-2138 | 1 Hp | 2 Advanced Server 9000, Hp-ux | 2017-10-12 | N/A |
RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139. | ||||
CVE-2001-1564 | 1 Hp | 1 Hp-ux | 2017-10-12 | N/A |
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space. | ||||
CVE-2007-2736 | 9 Achievo, Apple, Hp and 6 more | 18 Achievo, A Ux, Mac Os X and 15 more | 2017-10-11 | N/A |
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter. | ||||
CVE-2007-1994 | 1 Hp | 1 Hp-ux | 2017-10-11 | N/A |
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.00 allows local users to cause a denial of service via unknown vectors. NOTE: due to lack of vendor details, it is not clear whether this is the same as CVE-2007-0916. | ||||
CVE-2007-1993 | 1 Hp | 1 Hp-ux | 2017-10-11 | N/A |
Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2." | ||||
CVE-2007-0916 | 1 Hp | 1 Hp-ux | 2017-10-11 | N/A |
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. | ||||
CVE-2007-0396 | 1 Hp | 1 Hp-ux | 2017-10-11 | N/A |
Unspecified vulnerability in HP-UX B.11.23, when running IPFilter in combination with PHNE_34474, allows remote attackers to cause a denial of service (system crash) via unspecified vectors. | ||||
CVE-2006-4188 | 1 Hp | 1 Hp-ux | 2017-10-11 | N/A |
Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors. |