Browse CVEs

CRITICAL 9.8 CVE-2019-6330 A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability could po… Access Control 16.7+ Fix from $2,3002020-01-09 HIGH 8.1 CVE-2019-6320 Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN191… Deskjet 3630 F5s43a Firmware Mitigation only Fix from $1,9502020-01-09 CRITICAL 9.8 CVE-2019-11994EPSS 7% A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600… Simplivity 380 Gen9 Firmware after 3.7.9 Fix from $2,3002020-01-03 HIGH 7.5 CVE-2019-11993 A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600… Simplivity 380 Gen9 Firmware after 3.7.9 Fix from $1,9502020-01-03 HIGH 7.5 CVE-2019-11995 Security vulnerabilities in HPE UIoT version 1.2.4.2 could allow unauthorized remote access and access to sensitive data. HPE has addressed this issu… Universal Internet Of Things Mitigation only Fix from $1,9502019-12-18 MEDIUM 6.1 CVE-2019-11992 A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting. Oneview For Vmware Vcenter Mitigation only Fix from $1,6002019-12-18 HIGH 8.0 CVE-2019-18909 The VPN software within HP ThinPro does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will exe… Thinpro No fix yet Fix from $1,9502019-11-22 MEDIUM 6.8 CVE-2019-16286 An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to la… Thinpro Linux No fix yet Fix from $1,6002019-11-22 MEDIUM 6.8 CVE-2019-16287 In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged acces… Thinpro No fix yet Fix from $1,6002019-11-22 MEDIUM 6.8 CVE-2019-18910 The Citrix Receiver wrapper function does not safely handle user supplied input, which may be leveraged by an attacker to inject commands that will e… Thinpro No fix yet Fix from $1,6002019-11-22 MEDIUM 5.2 CVE-2019-6337 For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer p… D9l63a Firmware 001.1937c / 001.1937d+ Fix from $1,6002019-11-07 HIGH 7.2 CVE-2019-16284 A potential security vulnerability has been identified in multiple HP products and versions which involves possible execution of arbitrary code durin… 260 G1 Dm Firmware 2.27 / 80.3+ Fix from $1,9502019-11-05 CRITICAL 9.8 CVE-2019-6334 HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potential ex… Futuresmart 3 2309021_581886 / 2309021_581889+ Fix from $2,3002019-10-16 HIGH 7.5 CVE-2019-6335 A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to create a den… Samsung Clp680 Firmware 3.82.01.20+ Fix from $1,9502019-10-11 MEDIUM 6.7 CVE-2019-6333 A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vulnerabili… Touchpoint Analytics 4.1.4.2827+ Fix from $1,6002019-10-11 HIGH 8.8 CVE-2019-11655 Unrestricted file upload vulnerability in Micro Focus ArcSight Logger, version 6.7.0 and later. This vulnerability could allow Unrestricted Upload of… Arcsight Logger Mitigation only Fix from $1,9502019-10-04 MEDIUM 5.4 CVE-2019-11656 Stored XSS vulnerability in Micro Focus ArcSight Logger, affects versions prior to Logger 6.7.1 HotFix 6.7.1.8262.0. This vulnerability could allow I… Arcsight Logger 6.7.1+ Fix from $1,6002019-10-04 CRITICAL 9.4 CVE-2019-5402 A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. 3par Storeserv Management Console 3.5.0.1+ Fix from $2,3002019-08-09 HIGH 8.8 CVE-2019-5404 A remote script injection vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. 3par Storeserv Management Console 3.5.0.1+ Fix from $1,9502019-08-09 HIGH 7.3 CVE-2019-5405 A remote authorization bypass vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. 3par Storeserv Management Console 3.5.0.1+ Fix from $1,9502019-08-09 HIGH 7.2 CVE-2019-5406 A remote session reuse vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. 3par Storeserv Management Console 3.5.0.1+ Fix from $1,9502019-08-09 MEDIUM 6.5 CVE-2019-5408 Command View Advanced Edition (CVAE) products contain a vulnerability that could expose configuration information of hosts and storage systems that a… Xp7 Device Manager 8.6.1-02+ Fix from $1,6002019-08-09 MEDIUM 6.3 CVE-2019-5400 A remote session reuse vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $1,6002019-08-09 MEDIUM 6.3 CVE-2019-5407 A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media version(s): prior to 3.5.0.1. 3par Storeserv Management Console 3.5.0.1+ Fix from $1,6002019-08-09 CRITICAL 9.4 CVE-2019-5397 A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $2,3002019-08-09 CRITICAL 9.4 CVE-2019-5399 A remote gain authorized access vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $2,3002019-08-09 MEDIUM 5.4 CVE-2019-5398 A remote multiple multiple cross-site vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $1,6002019-08-09 CRITICAL 9.4 CVE-2019-5396EPSS 5% A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $2,3002019-08-09 HIGH 8.8 CVE-2019-5395 A remote arbitrary file upload vulnerability was discovered in HPE 3PAR Service Processor version(s): prior to 5.0.5.1. 3par Service Processor Firmware 5.0.5.1+ Fix from $1,9502019-08-09 MEDIUM 6.1 CVE-2019-3486 Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1 Arcsight Management Center 2.9.1+ Fix from $1,6002019-07-25