WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor hp✕
Overview 2,346 matches · 42 in Waratek scope · 35 protected · 24 exploited · 7 CISA KEV · 239 public PoC · 115 EPSS ≥ 0.5
2,346matches 42in Waratek scope1.8% 35protected1.5% 24exploited1.0% 7CISA KEV0.3% 239public PoC10.2% 115EPSS ≥ 0.54.9%
Protected by Waratek 35 1.5% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 7 0.3% Outside Waratek scope 34 1.4% Not applicable 2,270 96.8% Withdrawn CVE 0 0.0%
Critical 248 10.6% High 1,190 50.7% Medium 813 34.7% Low 95 4.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 35 1.5% partly blocked 0 0.0% not blocked 2,311 98.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 24 1.0% Working exploit published 217 9.2% Proof of concept only 5 0.2% Forecast only 22 0.9% No public exploit 2,078 88.6%
split by peak 309 / year
Not applicable: 2,270Outside Waratek scope: 34No exploit published: 7Protected by Waratek: 35 Low: 95Medium: 813High: 1,190Critical: 248 not blocked: 2,311blocked by ARMR today: 35 No public exploit: 2,078Forecast only: 22Proof of concept only: 5Working exploit published: 217Exploited: 24
19901 Not applicable1 High1 not blocked1 No public exploit1 19911 Not applicable1 High1 not blocked1 No public exploit1 19920 19931 Not applicable1 Medium1 not blocked1 No public exploit1 19948 Not applicable8 High3 Medium5 not blocked8 No public exploit8 19951 Not applicable1 High1 not blocked1 No public exploit1 199619 Not applicable19 High12 Medium3 Low4 not blocked19 Working exploit published2 No public exploit17 199729 Not applicable29 High15 Medium13 Low1 not blocked29 Working exploit published7 No public exploit22 199812 Not applicable12 High7 Medium5 not blocked12 Exploited1 Working exploit published4 No public exploit7 199918 Not applicable18 Critical1 High9 Medium8 not blocked18 Working exploit published1 No public exploit17 200036 Not applicable36 High14 Medium21 Low1 not blocked36 Working exploit published14 No public exploit22 200148 No exploit published1 Not applicable47 Critical2 High24 Medium12 Low10 not blocked48 Exploited1 Working exploit published7 No public exploit40 200257 Outside Waratek scope1 Not applicable56 High28 Medium23 Low6 not blocked57 Working exploit published9 No public exploit48 200341 Not applicable41 High28 Medium12 Low1 not blocked41 Exploited3 Working exploit published13 No public exploit25 200429 Outside Waratek scope1 Not applicable28 High13 Medium14 Low2 not blocked29 Working exploit published3 No public exploit26 200533 Outside Waratek scope1 Not applicable32 Critical1 High19 Medium8 Low5 not blocked33 Exploited1 Working exploit published5 Forecast only1 No public exploit26 200639 Not applicable39 High17 Medium19 Low3 not blocked39 Working exploit published4 No public exploit35 200766 Not applicable66 High35 Medium27 Low4 not blocked66 Working exploit published21 No public exploit45 200868 Not applicable68 High43 Medium22 Low3 not blocked68 Working exploit published13 No public exploit55 200978 Not applicable78 High57 Medium21 not blocked78 Working exploit published17 No public exploit61 2010120 Not applicable120 High44 Medium74 Low2 not blocked120 Working exploit published18 No public exploit102 2011143 Not applicable143 High77 Medium61 Low5 not blocked143 Working exploit published15 No public exploit128 201285 Not applicable85 Critical1 High45 Medium33 Low6 not blocked85 Exploited1 Working exploit published12 Forecast only1 No public exploit71 2013143 No exploit published1 Not applicable142 Critical1 High79 Medium52 Low11 not blocked143 Exploited2 Working exploit published17 Forecast only9 No public exploit115 2014103 Outside Waratek scope7 Not applicable96 High56 Medium40 Low7 not blocked103 Exploited2 Working exploit published7 No public exploit94 2015108 Outside Waratek scope1 Not applicable107 Critical1 High51 Medium52 Low4 not blocked108 Exploited3 Working exploit published3 Proof of concept only1 No public exploit101 2016112 No exploit published2 Outside Waratek scope4 Not applicable106 Critical30 High58 Medium22 Low2 not blocked112 Exploited3 Working exploit published3 Forecast only5 No public exploit101 201732 Protected by Waratek2 Not applicable30 Critical10 High8 Medium14 blocked by ARMR today2 not blocked30 Exploited1 Forecast only1 No public exploit30 2018309 Protected by Waratek24 No exploit published3 Outside Waratek scope13 Not applicable269 Critical60 High143 Medium100 Low6 blocked by ARMR today24 not blocked285 Exploited3 Working exploit published15 Forecast only1 No public exploit290 2019184 Protected by Waratek9 Outside Waratek scope5 Not applicable170 Critical26 High114 Medium37 Low7 blocked by ARMR today9 not blocked175 Exploited1 Working exploit published3 Forecast only4 No public exploit176 2020112 Outside Waratek scope1 Not applicable111 Critical51 High41 Medium18 Low2 not blocked112 Exploited1 Working exploit published3 Proof of concept only2 No public exploit106 202135 Not applicable35 Critical8 High10 Medium17 not blocked35 Exploited1 Working exploit published1 No public exploit33 202260 Not applicable60 Critical10 High35 Medium15 not blocked60 No public exploit60 2023112 Not applicable112 Critical27 High69 Medium15 Low1 not blocked112 Proof of concept only1 No public exploit111 202455 Not applicable55 Critical15 High21 Medium19 not blocked55 Proof of concept only1 No public exploit54 202532 Not applicable32 Critical1 High7 Medium22 Low2 not blocked32 No public exploit32 202616 Not applicable16 Critical3 High5 Medium8 not blocked16 No public exploit16
1990199319961999200220052008201120142017202020232026
2,346 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 24 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2023-6573 Medium 2024-01-23 Not applicable No public exploit HPE OneView may have a missing passphrase during restore.
CVE-2023-50275 High 2024-01-23 Not applicable No public exploit HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
CVE-2023-50274 High 2024-01-23 Not applicable No public exploit HPE OneView may allow command injection with local privilege escalation.
CVE-2023-50271 High 2023-12-17 Not applicable No public exploit A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.
CVE-2023-4694 High 2023-12-14 Not applicable No public exploit Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when sending a SOAP message to the service on TCP port 3911 that contains a body but no header.
CVE-2023-45627 Medium 2023-11-14 Not applicable No public exploit An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45626 High 2023-11-14 Not applicable No public exploit An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.
CVE-2023-45625 High 2023-11-14 Not applicable No public exploit Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2023-45624 High 2023-11-14 Not applicable No public exploit An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45623 High 2023-11-14 Not applicable No public exploit Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45622 High 2023-11-14 Not applicable No public exploit Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45621 High 2023-11-14 Not applicable No public exploit Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45620 High 2023-11-14 Not applicable No public exploit Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
CVE-2023-45619 High 2023-11-14 Not applicable No public exploit There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
CVE-2023-45618 High 2023-11-14 Not applicable No public exploit There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
CVE-2023-45617 High 2023-11-14 Not applicable No public exploit There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
CVE-2023-45616 Critical 2023-11-14 Not applicable No public exploit There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-45615 Critical 2023-11-14 Not applicable No public exploit There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-45614 Critical 2023-11-14 Not applicable No public exploit There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-5739 High 2023-10-31 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege.
CVE-2023-5671 High 2023-10-25 Not applicable No public exploit HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability.
CVE-2023-26300 High 2023-10-18 Not applicable No public exploit A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability.
CVE-2023-5449 Low 2023-10-13 Not applicable No public exploit A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature which may allow a monitor’s Theft Deterrence to be deactivated.
CVE-2023-5409 Medium 2023-10-13 Not applicable No public exploit HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible to a physical attack, allowing an untrusted source to tamper with the system firmware using a publicly disclosed private key. HP is providing recommended guidance for customers to reduce exposure to the potential vulnerability.
CVE-2023-4499 High 2023-10-13 Not applicable No public exploit A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.
CVE-2023-5365 Critical 2023-10-09 Not applicable No public exploit HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure.
CVE-2023-5113 Medium 2023-10-04 Not applicable No public exploit Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI.
CVE-2023-30909 Critical 2023-09-14 Not applicable No public exploit A remote authentication bypass issue exists in some OneView APIs.
CVE-2023-30908 Critical 2023-09-07 Not applicable No public exploit A remote authentication bypass issue exists in a OneView API.
CVE-2015-2202 High 2023-09-05 Not applicable No public exploit Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS.
CVE-2015-2201 High 2023-09-05 Not applicable No public exploit Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users.
CVE-2015-1391 High 2023-09-05 Not applicable No public exploit Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
CVE-2015-1390 Medium 2023-09-05 Not applicable No public exploit Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
CVE-2022-4894 High 2023-08-16 Not applicable No public exploit Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.
CVE-2023-38402 High 2023-08-15 Not applicable No public exploit A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.
CVE-2023-38401 High 2023-08-15 Not applicable No public exploit A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.
CVE-2023-35982 Critical 2023-07-25 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-35981 Critical 2023-07-25 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-35980 Critical 2023-07-25 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-26301 Critical 2023-07-21 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints.
CVE-2023-35178 High 2023-06-30 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.
CVE-2023-35177 High 2023-06-30 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.
CVE-2023-35176 High 2023-06-30 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device.
CVE-2023-35175 Critical 2023-06-30 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVE-2023-26299 High 2023-06-30 Not applicable No public exploit A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.
CVE-2023-30903 Medium 2023-06-16 Not applicable No public exploit HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
CVE-2023-1329 Critical 2023-06-14 Not applicable No public exploit A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.
CVE-2022-31646 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31645 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31644 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31642 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31641 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31640 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2023-1707 High 2023-06-13 Not applicable No public exploit Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6.
CVE-2022-31639 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31638 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31637 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31636 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31635 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2023-32674 Critical 2023-06-12 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.
CVE-2023-32673 Critical 2023-06-12 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege.
CVE-2023-26298 High 2023-06-12 Not applicable No public exploit Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVE-2023-26297 High 2023-06-12 Not applicable No public exploit Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVE-2023-26296 High 2023-06-12 Not applicable No public exploit Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVE-2023-26295 Critical 2023-06-12 Not applicable No public exploit Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVE-2023-26294 High 2023-06-12 Not applicable No public exploit Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.
CVE-2022-43778 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-43777 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-27541 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-27539 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2019-16283 High 2023-06-09 Not applicable No public exploit A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution.
CVE-2023-22791 Medium 2023-05-08 Not applicable No public exploit A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can occur are complex and depend on factors that are beyond the control of the attacker.
CVE-2023-22790 High 2023-05-08 Not applicable No public exploit Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2023-22789 High 2023-05-08 Not applicable No public exploit Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2023-22788 High 2023-05-08 Not applicable No public exploit Multiple authenticated command injection vulnerabilities exist in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
CVE-2023-22787 High 2023-05-08 Not applicable No public exploit An unauthenticated Denial of Service (DoS) vulnerability exists in a service accessed via the PAPI protocol provided by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
CVE-2023-22786 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22785 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22784 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22783 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22782 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22781 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22780 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-22779 Critical 2023-05-08 Not applicable No public exploit There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVE-2023-28092 Medium 2023-05-01 Not applicable No public exploit A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.
CVE-2023-27973 Critical 2023-04-28 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
CVE-2023-27972 Critical 2023-04-28 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
CVE-2023-27971 Critical 2023-04-28 Not applicable No public exploit Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
CVE-2023-1526 Medium 2023-04-28 Not applicable No public exploit Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer.
CVE-2022-31643 Medium 2023-04-28 Not applicable No public exploit A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability.
CVE-2023-28090 Medium 2023-04-25 Not applicable No public exploit An HPE OneView appliance dump may expose SNMPv3 read credentials
CVE-2023-28089 High 2023-04-25 Not applicable No public exploit An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules
CVE-2023-28088 High 2023-04-25 Not applicable No public exploit An HPE OneView appliance dump may expose SAN switch administrative credentials
CVE-2023-28087 Medium 2023-04-25 Not applicable No public exploit An HPE OneView appliance dump may expose OneView user accounts
CVE-2023-28086 Medium 2023-04-25 Not applicable No public exploit An HPE OneView appliance dump may expose proxy credential settings
CVE-2023-28084 Medium 2023-04-25 Not applicable No public exploit HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
CVE-2023-28091 Medium 2023-04-14 Not applicable No public exploit HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump
CVE-2023-28083 High 2023-03-22 Not applicable No public exploit A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates to resolve this vulnerability in HPE Integrated Lights-Out.
CVE-2022-37935 Medium 2023-03-01 Not applicable No public exploit HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
CVE-2022-43779 High 2023-02-12 Not applicable No public exploit A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might allow arbitrary code execution, denial of service, and information disclosure. AMI has released updates to mitigate the potential vulnerability.
‹ prev page 2 of 24 next ›