Browse CVEs

CRITICAL 9.8 CVE-2019-6318 HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient… Color Laserjet Cm4540 Mfp Firmware 2309010_581401 / 2309010_581402+ Fix from $2,3002019-04-11 HIGH 7.8 CVE-2018-7118 A local access restriction bypass vulnerability was identified in HPE Service Pack for ProLiant (SPP) Bundled Software earlier than version 2018.09.0. Service Pack For Proliant 2018.09.0+ Fix from $1,9502019-04-09 MEDIUM 6.1 CVE-2018-7117 A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 (iLO 5) for Gen10 ProLiant … Integrated Lights Out 5 Firmware 1.40+ Fix from $1,6002019-04-09 HIGH 7.5 CVE-2017-2748 A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaa… Isaac Mizrahi Smartwatch Mitigation only Fix from $1,9502019-03-27 CRITICAL 9.8 CVE-2018-5923 In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking… Color Laserjet Cm4540 Mfp Firmware 2308974_579753 / 2308974_579754+ Fix from $2,3002019-03-27 CRITICAL 9.1 CVE-2018-5926 A potential vulnerability has been identified in HP Remote Graphics Software’s certificate authentication process version 7.5.0 and earlier. Remote Graphics Software after 7.5.0 Fix from $2,3002019-03-27 HIGH 7.3 CVE-2018-5927 HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. Support Assistant 8.7.50.3+ Fix from $1,9502019-03-27 HIGH 7.8 CVE-2019-3484 Mitigates a remote code execution issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $1,9502019-03-25 MEDIUM 6.5 CVE-2019-3483 Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $1,6002019-03-25 CRITICAL 9.8 CVE-2019-3479EPSS 7% Mitigates a potential remote code execution issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $2,3002019-03-25 HIGH 7.1 CVE-2019-3481 Mitigates a XML External Entity Parsing issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $1,9502019-03-25 MEDIUM 6.5 CVE-2019-3482 Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $1,6002019-03-25 MEDIUM 6.1 CVE-2019-3480 Mitigates a stored/reflected XSS issue in ArcSight Logger versions prior to 6.7. Arcsight Logger 6.7+ Fix from $1,6002019-03-25 HIGH 7.5 CVE-2018-18593EPSS 9% Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.2… Ucmdb Configuration Manager Mitigation only Fix from $1,9502018-12-31 CRITICAL 9.8 CVE-2018-7114EPSS 33% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. … Intelligent Management Center 7.3+ Fix from $2,3002018-12-03 HIGH 7.5 CVE-2018-7116EPSS 10% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename… Intelligent Management Center 7.3+ Fix from $1,9502018-12-03 MEDIUM 6.6 CVE-2018-7113 A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for fir… Integrated Lights Out 5 Firmware 1.37+ Fix from $1,6002018-12-03 MEDIUM 5.5 CVE-2018-7112 The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This iss… Integrated Lights Out 2 Firmware 1.90 / 2.33+ Fix from $1,6002018-12-03 MEDIUM 5.3 CVE-2018-7115EPSS 13% HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windo… Intelligent Management Center 7.3+ Fix from $1,6002018-12-03 CRITICAL 9.8 CVE-2018-7076EPSS 12% A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04. Intelligent Management Center 7.3+ Fix from $2,3002018-10-17 MEDIUM 5.3 CVE-2018-7111EPSS 5% A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunctio… Universal Internet Of Things Mitigation only Fix from $1,6002018-10-17 HIGH 8.8 CVE-2018-5921 A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerab… F2a70a Firmware 2405129_000052 / 2405129_000055+ Fix from $1,9502018-10-03 MEDIUM 5.9 CVE-2018-9069 In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, pot… 310s 14isk Firmware 1.15 / 2wcn38ww+ Fix from $1,6002018-10-02 MEDIUM 6.5 CVE-2018-7109 HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager (eIUM) v9.0FP1 with the cumulative patch … Enhanced Internet Usage Manager Mitigation only Fix from $1,6002018-09-27 CRITICAL 9.8 CVE-2018-7103EPSS 9% A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than versi… Intelligent Management Center Wireless Services Manager Software 7.3+ Fix from $2,3002018-09-27 CRITICAL 9.8 CVE-2018-7104EPSS 9% A Remote Code Execution vulnerability was identified in HPE Intelligent Management Center (iMC) Wireless Services Manager Software earlier than versi… Intelligent Management Center Wireless Services Manager Software 7.3+ Fix from $2,3002018-09-27 HIGH 7.5 CVE-2018-7101EPSS 7% A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 se… Integrated Lights Out 4 Firmware 1.30 / 2.60+ Fix from $1,9502018-09-27 HIGH 7.5 CVE-2018-7102 A security vulnerability in HPE Intelligent Management Center (iMC) PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory … Intelligent Management Center 7.3+ Fix from $1,9502018-09-27 HIGH 7.2 CVE-2018-7105 A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers prior to v1.35, HPE Integrated Lights-Out 4 (iLO 4) prior to v2… Integrated Lights Out 5 Firmware 1.35 / 1.90+ Fix from $1,9502018-09-27 HIGH 7.5 CVE-2018-6505 A potential Unauthenticated File Download vulnerability has been identified in ArcSight Management Center (ArcMC) in all versions prior to 2.81. This… Arcsight Management Center 2.81+ Fix from $1,9502018-09-20