cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2021-26584,https://securityvulnerability.io/vulnerability/CVE-2021-26584,,A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC).,HP,HP Oneview For Vmware Vcenter With Operations Manager And Log Insight,6.1,MEDIUM,0.0005799999926239252,false,,false,false,false,,,false,false,,2021-06-03T10:59:53.000Z,0 CVE-2019-11992,https://securityvulnerability.io/vulnerability/CVE-2019-11992,,A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting.,HP,HPe Oneview For Vmware Vcenter With Operations Manager And Log Insight,6.1,MEDIUM,0.0005799999926239252,false,,false,false,false,,,false,false,,2019-12-18T15:59:05.000Z,0 CVE-2017-12555,https://securityvulnerability.io/vulnerability/CVE-2017-12555,,A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found.,HP,Intelligent Management Center (imc) Service Operation Management (som),6.5,MEDIUM,0.000910000002477318,false,,false,false,false,,,false,false,,2018-02-15T22:29:00.000Z,0 CVE-2016-4380,https://securityvulnerability.io/vulnerability/CVE-2016-4380,,Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.,HP,Operations Manager,5.4,MEDIUM,0.0015800000401213765,false,,false,false,false,,,false,false,,2016-09-08T16:00:00.000Z,0 CVE-2016-4373,https://securityvulnerability.io/vulnerability/CVE-2016-4373,,"The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.",HP,Operations Manager,9.8,CRITICAL,0.004029999952763319,false,,false,false,false,,,false,false,,2016-08-01T01:00:00.000Z,0 CVE-2016-1985,https://securityvulnerability.io/vulnerability/CVE-2016-1985,,"HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.",HP,Operations Manager,10,CRITICAL,0.004360000137239695,false,,false,false,false,,,false,false,,2016-01-30T15:00:00.000Z,0 CVE-2015-2137,https://securityvulnerability.io/vulnerability/CVE-2015-2137,,"Unspecified vulnerability in HP Operations Manager i (OMi) 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors.",HP,Operations Manager I,,,0.01744000054895878,false,,false,false,false,,,false,false,,2015-08-22T23:59:00.000Z,0 CVE-2015-2132,https://securityvulnerability.io/vulnerability/CVE-2015-2132,,"Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.",HP,Operations Manager I,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2015-08-22T23:59:00.000Z,0 CVE-2015-2107,https://securityvulnerability.io/vulnerability/CVE-2015-2107,,HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges.,HP,Operations Manager I Management Pack,,,0.0004199999966658652,false,,false,false,false,,,false,false,,2015-03-14T01:00:00.000Z,0 CVE-2014-2648,https://securityvulnerability.io/vulnerability/CVE-2014-2648,,Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.,HP,Operations Manager,,,0.03587000072002411,false,,false,false,false,,,false,false,,2014-10-10T01:00:00.000Z,0 CVE-2014-2649,https://securityvulnerability.io/vulnerability/CVE-2014-2649,,Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors.,HP,"Operations Manager,Kernel",,,0.018810000270605087,false,,false,false,false,,,false,false,,2014-10-10T01:00:00.000Z,0 CVE-2014-2607,https://securityvulnerability.io/vulnerability/CVE-2014-2607,,Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.,HP,Operations Manager I,,,0.003370000049471855,false,,false,false,false,,,false,false,,2014-05-26T00:25:00.000Z,0 CVE-2013-4825,https://securityvulnerability.io/vulnerability/CVE-2013-4825,,"Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass intended access restrictions via unknown vectors, aka ZDI-CAN-1645.",HP,"Intelligent Management Center,Imc Service Operation Management Software Module",,,0.11522000283002853,false,,false,false,false,,,false,false,,2013-10-13T10:20:00.000Z,0 CVE-2013-4824,https://securityvulnerability.io/vulnerability/CVE-2013-4824,,"Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644.",HP,"Intelligent Management Center,Imc Service Operation Management Software Module",,,0.9648900032043457,false,,false,false,false,,,false,false,,2013-10-13T10:20:00.000Z,0 CVE-2013-4826,https://securityvulnerability.io/vulnerability/CVE-2013-4826,,"Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.",HP,"Intelligent Management Center,Imc Service Operation Management Software Module",,,0.12046000361442566,false,,false,false,false,,,false,false,,2013-10-13T10:20:00.000Z,0 CVE-2013-4827,https://securityvulnerability.io/vulnerability/CVE-2013-4827,,"SQL injection vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664.",HP,"Intelligent Management Center,Imc Service Operation Management Software Module",,,0.006209999788552523,false,,false,false,false,,,false,false,,2013-10-13T10:20:00.000Z,0 CVE-2010-1033,https://securityvulnerability.io/vulnerability/CVE-2010-1033,,"Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and srcvw4.dll.",HP,Operations Manager,,,0.22086000442504883,false,,false,false,false,,,false,false,,2010-04-21T14:00:00.000Z,0 CVE-2009-4189,https://securityvulnerability.io/vulnerability/CVE-2009-4189,,"HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to execute arbitrary code via a session that uses the manager role to conduct unrestricted file upload attacks against the /manager servlet in the Tomcat servlet container. NOTE: this might overlap CVE-2009-3099 and CVE-2009-3843.",HP,Operations Manager,,,0.01056000031530857,false,,false,false,false,,,false,false,,2009-12-03T17:30:00.000Z,0 CVE-2009-3843,https://securityvulnerability.io/vulnerability/CVE-2009-3843,,"HP Operations Manager 8.10 on Windows contains a ""hidden account"" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.",HP,Operations Manager,,,0.7052900195121765,false,,false,false,false,,,false,false,,2009-11-24T00:00:00.000Z,0 CVE-2009-3099,https://securityvulnerability.io/vulnerability/CVE-2009-3099,,"Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a ""Remote exploit,"" as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.",HP,Operations Manager,,,0.027410000562667847,false,,false,false,false,,,false,false,,2009-09-08T18:30:00.000Z,0