cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-50271,https://securityvulnerability.io/vulnerability/CVE-2023-50271,"HP-UX System Management Homepage, Disclosure of Information","A security vulnerability has been discovered in HP-UX System Management Homepage (SMH) that can be exploited by both local and remote attackers. This vulnerability poses a risk of unauthorized information disclosure, potentially allowing attackers to access sensitive system data. Users and administrators are urged to review their HP-UX SMH installations and apply relevant security measures.",HP,HPE System Management Homepage (SMH),7.2,HIGH,0.0014600000577047467,false,false,false,false,,false,false,2023-12-17T15:15:00.000Z,0 CVE-2017-12549,https://securityvulnerability.io/vulnerability/CVE-2017-12549,,A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12550,https://securityvulnerability.io/vulnerability/CVE-2017-12550,,A local security misconfiguration vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0005200000014156103,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12544,https://securityvulnerability.io/vulnerability/CVE-2017-12544,,A cross-site scripting vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.4,MEDIUM,0.9556999802589417,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12547,https://securityvulnerability.io/vulnerability/CVE-2017-12547,,A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12548,https://securityvulnerability.io/vulnerability/CVE-2017-12548,,A local arbitrary command execution vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12552,https://securityvulnerability.io/vulnerability/CVE-2017-12552,,A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0006300000241026282,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12553,https://securityvulnerability.io/vulnerability/CVE-2017-12553,,A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12545,https://securityvulnerability.io/vulnerability/CVE-2017-12545,,A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,7.5,HIGH,0.0036800000816583633,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12546,https://securityvulnerability.io/vulnerability/CVE-2017-12546,,A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage For Windows And Linux,5.6,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2018-02-15T22:29:00.000Z,0 CVE-2017-12551,https://securityvulnerability.io/vulnerability/CVE-2017-12551,,A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.,HP,System Management Homepage,5.6,MEDIUM,0.0006300000241026282,false,false,false,false,,false,false,2018-02-15T22:00:00.000Z,0 CVE-2016-4393,https://securityvulnerability.io/vulnerability/CVE-2016-4393,,"HPE System Management Homepage before v7.6 allows ""remote authenticated"" attackers to obtain sensitive information via unspecified vectors, related to an ""XSS"" issue.",HP,HP System Management Homepage Before V7.6,5.4,MEDIUM,0.0016400000313296914,false,false,false,false,,false,false,2016-10-28T21:00:00.000Z,0 CVE-2016-4394,https://securityvulnerability.io/vulnerability/CVE-2016-4394,,"HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an ""HSTS"" issue.",HP,HP System Management Homepage Before V7.6,6.5,MEDIUM,0.004149999935179949,false,false,false,false,,false,false,2016-10-28T21:00:00.000Z,0 CVE-2016-4395,https://securityvulnerability.io/vulnerability/CVE-2016-4395,,"HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a ""Buffer Overflow"" issue.",HP,HP System Management Homepage Before V7.6,7.5,HIGH,0.0821399986743927,false,false,false,false,,false,false,2016-10-28T21:00:00.000Z,0 CVE-2016-4396,https://securityvulnerability.io/vulnerability/CVE-2016-4396,,"HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a ""Buffer Overflow"" issue.",HP,HP System Management Homepage Before V7.6,7.5,HIGH,0.0821399986743927,false,false,false,false,,false,false,2016-10-28T21:00:00.000Z,0 CVE-2016-4543,https://securityvulnerability.io/vulnerability/CVE-2016-4543,,"The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.",HP,System Management Homepage,9.8,CRITICAL,0.013570000417530537,false,false,false,false,,false,false,2016-05-22T01:00:00.000Z,0 CVE-2016-2015,https://securityvulnerability.io/vulnerability/CVE-2016-2015,,HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.,HP,System Management Homepage,7.1,HIGH,0.0004199999966658652,false,false,false,false,,false,false,2016-05-14T15:00:00.000Z,0 CVE-2016-1996,https://securityvulnerability.io/vulnerability/CVE-2016-1996,,HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors.,HP,System Management Homepage,7.7,HIGH,0.0006600000197067857,false,false,false,false,,false,false,2016-03-18T10:00:00.000Z,0 CVE-2016-1993,https://securityvulnerability.io/vulnerability/CVE-2016-1993,,HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.,HP,System Management Homepage,8.1,HIGH,0.0013000000035390258,false,false,false,false,,false,false,2016-03-18T10:00:00.000Z,0 CVE-2016-1994,https://securityvulnerability.io/vulnerability/CVE-2016-1994,,HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors.,HP,System Management Homepage,6.5,MEDIUM,0.0010900000343099236,false,false,false,false,,false,false,2016-03-18T10:00:00.000Z,0 CVE-2016-1995,https://securityvulnerability.io/vulnerability/CVE-2016-1995,,HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.,HP,System Management Homepage,9.8,CRITICAL,0.012729999609291553,false,false,false,false,,false,false,2016-03-18T10:00:00.000Z,0 CVE-2015-2134,https://securityvulnerability.io/vulnerability/CVE-2015-2134,,Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.,HP,System Management Homepage,,,0.00203000009059906,false,false,false,false,,false,false,2015-07-21T19:00:00.000Z,0 CVE-2014-7874,https://securityvulnerability.io/vulnerability/CVE-2014-7874,,"Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.",HP,"HP-ux,System Management Homepage",,,0.001879999996162951,false,false,false,false,,false,false,2014-10-19T01:00:00.000Z,0 CVE-2014-2640,https://securityvulnerability.io/vulnerability/CVE-2014-2640,,Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.,HP,System Management Homepage,,,0.1788100004196167,false,false,false,false,,false,false,2014-10-02T00:00:00.000Z,0 CVE-2014-2642,https://securityvulnerability.io/vulnerability/CVE-2014-2642,,HP System Management Homepage (SMH) before 7.4 allows remote attackers to conduct clickjacking attacks via unspecified vectors.,HP,System Management Homepage,,,0.020980000495910645,false,false,false,false,,false,false,2014-10-02T00:00:00.000Z,0