Show filters
89 Total Results
Displaying 81-89 of 89
Sort by:
Attacker Value
Unknown
CVE-2011-0280
Disclosure Date: March 14, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in HP Power Manager (HPPM) 4.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the logType parameter to Contents/exportlogs.asp, (2) the Id parameter to Contents/pagehelp.asp, or the (3) SORTORD or (4) SORTCOL parameter to Contents/applicationlogs.asp. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2011-0277
Disclosure Date: February 09, 2011 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.
0
Attacker Value
Unknown
CVE-2010-4113
Disclosure Date: December 22, 2010 (last updated October 04, 2023)
Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server.
0
Attacker Value
Unknown
CVE-2009-4997
Disclosure Date: September 07, 2010 (last updated October 04, 2023)
gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: this issue exists because of a regression that followed a gnome-power-manager fix a few years earlier.
0
Attacker Value
Unknown
CVE-2006-7240
Disclosure Date: September 07, 2010 (last updated October 04, 2023)
gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532.
0
Attacker Value
Unknown
CVE-2009-4000
Disclosure Date: January 20, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
0
Attacker Value
Unknown
CVE-2009-3999
Disclosure Date: January 20, 2010 (last updated October 04, 2023)
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
0
Attacker Value
Unknown
CVE-2009-2685
Disclosure Date: November 06, 2009 (last updated October 04, 2023)
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.
0
Attacker Value
Unknown
CVE-2007-2351
Disclosure Date: April 30, 2007 (last updated October 04, 2023)
Unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier in HP-UX B.11.11 and B.11.23 allows local users to execute arbitrary code via unspecified vectors.
0
