ByteOS

cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*

>>system_management_homepage>>Versions up to 7.1.0-16(inclusive)

cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*

>>system_management_homepage>>2.0.0

cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*

>>system_management_homepage>>2.0.1

cpe:2.3:a:hp:system_management_homepage:2.0.1.104:*:*:*:*:*:*:*

>>system_management_homepage>>2.0.1.104

cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*

>>system_management_homepage>>2.0.2

cpe:2.3:a:hp:system_management_homepage:2.0.2.106:*:*:*:*:*:*:*

>>system_management_homepage>>2.0.2.106

cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*

>>system_management_homepage>>2.1

cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.0-103

cpe:2.3:a:hp:system_management_homepage:2.1.0-103\(a\):*:*:*:*:*:*:*

>>system_management_homepage>>2.1.0-103\(a\)

cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.0-109

cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.0-118

cpe:2.3:a:hp:system_management_homepage:2.1.0.121:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.0.121

cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.1

cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.2

cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.2-127

cpe:2.3:a:hp:system_management_homepage:2.1.2.127:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.2.127

cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.3

cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.3.132

cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.4

cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.4-143

cpe:2.3:a:hp:system_management_homepage:2.1.4.143:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.4.143

cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.5

cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.5-146

cpe:2.3:a:hp:system_management_homepage:2.1.5.146:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.5.146

cpe:2.3:a:hp:system_management_homepage:2.1.5.146:b:*:*:*:*:*:*

>>system_management_homepage>>2.1.5.146

cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.6

cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.6-156

cpe:2.3:a:hp:system_management_homepage:2.1.6.156:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.6.156

cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.7

cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.7-168

cpe:2.3:a:hp:system_management_homepage:2.1.7.168:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.7.168

cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.8

cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.8-177

cpe:2.3:a:hp:system_management_homepage:2.1.8.179:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.8.179

cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.9

cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.9-178

cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.10

cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.10-186

cpe:2.3:a:hp:system_management_homepage:2.1.10.186:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.10.186

cpe:2.3:a:hp:system_management_homepage:2.1.10.186:b:*:*:*:*:*:*

>>system_management_homepage>>2.1.10.186

cpe:2.3:a:hp:system_management_homepage:2.1.10.186:c:*:*:*:*:*:*

>>system_management_homepage>>2.1.10.186

cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.11

cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.11-197

cpe:2.3:a:hp:system_management_homepage:2.1.11.197:a:*:*:*:*:*:*

>>system_management_homepage>>2.1.11.197

cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.12-118

cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.12-200

cpe:2.3:a:hp:system_management_homepage:2.1.12.201:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.12.201

cpe:2.3:a:hp:system_management_homepage:2.1.14:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.14

cpe:2.3:a:hp:system_management_homepage:2.1.14.20:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.14.20

cpe:2.3:a:hp:system_management_homepage:2.1.15:*:*:*:*:*:*:*

>>system_management_homepage>>2.1.15

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	hp-security-alert@hp.com	Patch Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: hp-security-alert@hp.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

322Records found

CVE-2009-3023

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-79.31% / 99.09%

7 Day CHG~0.00%

Published-31 Aug, 2009 | 20:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."

Product-windows_server_2008 internet_information_server windows_vista windows_xp windows_2000 windows_server_2003 n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2009-3841

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-9||HIGH

EPSS-0.35% / 57.58%

7 Day CHG~0.00%

Published-17 Nov, 2009 | 18:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.60 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows discovery\&dependency_mapping_inventory n/a

CVE-2014-6324

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-89.88% / 99.59%

7 Day CHG~0.00%

Published-18 Nov, 2014 | 23:00

Updated-22 Apr, 2026 | 16:46

Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a forged signature in a ticket, as exploited in the wild in November 2014, aka "Kerberos Checksum Vulnerability."

Product-windows_7 windows_8.1 windows_server_2008 windows_8 windows_server_2012 windows_server_2003 n/a Kerberos Key Distribution Center (KDC)

CVE-2017-2290

Matching Score-8

Assigner-Perforce

Matching Score-8

Assigner-Perforce

CVSS Score-8.8||HIGH

EPSS-0.39% / 60.03%

7 Day CHG~0.00%

Published-03 Mar, 2017 | 15:00

Updated-13 May, 2026 | 00:24

On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet Enterprise users are not affected. This is resolved in mcollective-puppet-agent 1.12.1.

Vendor-Microsoft Corporation Perforce Software, Inc. ("Puppet")

Product-windows mcollective-puppet-agent mcollective-puppet-agent plugin

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2014-2613

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-9||HIGH

EPSS-0.22% / 43.97%

7 Day CHG~0.00%

Published-28 Jun, 2014 | 15:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to gain privileges via unknown vectors.

Vendor-n/a HP Inc.Microsoft Corporation Linux Kernel Organization, Inc

Product-release_control linux_kernel windows n/a

CVE-2014-2606

Matching Score-8

Assigner-HP Inc.

Product-storevirtual_4730fc storevirtual_4530 storevirtual_4130 storevirtual_4630 storevirtual_vsa storevirtual_4730 storevirtual_4330 storage_management_software storevirtual_4335 storevirtual_4330fc n/a

Matching Score-8

Assigner-HP Inc.

CVSS Score-9||HIGH

EPSS-0.27% / 50.11%

7 Day CHG~0.00%

Published-16 Jul, 2014 | 01:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in HP StoreVirtual 4000 Storage and StoreVirtual VSA 9.5 through 11.0 allows remote authenticated users to gain privileges via unknown vectors.

Vendor-n/a HP Inc.

CVE-2014-0251

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-19.65% / 95.49%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-06 May, 2026 | 22:30

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability."

Product-web_applications sharepoint_services sharepoint_foundation sharepoint_designer office_web_apps_server sharepoint_server_client_components_sdk project_server sharepoint_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-2509

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-26.76% / 96.40%

7 Day CHG~0.00%

Published-09 Dec, 2009 | 18:00

Updated-23 Apr, 2026 | 00:35

Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows remote authenticated users to execute arbitrary code via a crafted request to an IIS web server, aka "Remote Code Execution in ADFS Vulnerability."

Product-windows_server_2008 windows_server_2003 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2009-1544

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-32.40% / 96.90%

7 Day CHG~0.00%

Published-12 Aug, 2009 | 17:00

Updated-23 Apr, 2026 | 00:35

Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 system, or cause a denial of service via a crafted RPC message to a Vista Gold, SP1, or SP2 or Server 2008 Gold or SP2 system, aka "Workstation Service Memory Corruption Vulnerability."

Product-windows_2003_server windows_vista windows_server_2008 windows_xp n/a

CWE ID-CWE-415

Double Free

CVE-2009-1542

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-18.00% / 95.23%

7 Day CHG~0.00%

Published-15 Jul, 2009 | 15:00

Updated-23 Apr, 2026 | 00:35

The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine instructions, which allows guest OS users to execute arbitrary kernel-mode code and gain privileges within the guest OS via a crafted application, aka "Virtual PC and Virtual Server Privileged Instruction Decoding Vulnerability."

Product-virtual_pc virtual_server n/a

CVE-2010-3992

Matching Score-8

Assigner-HP Inc.

Matching Score-8

Assigner-HP Inc.

CVSS Score-9||HIGH

EPSS-0.19% / 40.13%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in HP Insight Control Server Migration before 6.2 allows remote authenticated users to gain privileges via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_server_migration6.0.1 insight_control_server_migration n/a

CVE-2009-1135

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-39.38% / 97.34%

7 Day CHG~0.00%

Published-15 Jul, 2009 | 15:00

Updated-23 Apr, 2026 | 00:35

Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka "Radius OTP Bypass Vulnerability."

Product-isa_server n/a

CVE-2017-12763

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-5.07% / 89.89%

7 Day CHG~0.00%

Published-29 Aug, 2017 | 15:00

Updated-13 May, 2026 | 00:24

An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files.

Vendor-nomachine n/a Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel mac_os_x nomachine n/a

CWE ID-CWE-276

Incorrect Default Permissions

CVE-2009-0230

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-33.04% / 96.95%

7 Day CHG~0.00%

Published-10 Jun, 2009 | 17:37

Updated-23 Apr, 2026 | 00:35

The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory, aka "Print Spooler Load Library Vulnerability."

Product-windows_server_2008 windows_vista windows_xp windows_2000 windows_2003_server windows_server n/a

CVE-2017-12530

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 19:56

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12489

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 18:50

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12531

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 00:26

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12503

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 22:09

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12496

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 02:51

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2010-0020

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-23.03% / 95.97%

7 Day CHG~0.00%

Published-10 Feb, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka "SMB Pathname Overflow Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_2000 windows_2003_server n/a

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2017-12528

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 18:09

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2008-5416

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-87.90% / 99.49%

7 Day CHG~0.00%

Published-10 Dec, 2008 | 13:33

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."

Product-sql_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-12524

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 19:25

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12518

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 22:46

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12495

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 01:51

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12506

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 20:31

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12520

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 01:46

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12515

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 23:35

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12502

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 19:09

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12494

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 03:18

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12534

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 03:33

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2017-12522

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.24% / 87.24%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 17:38

Product-intelligent_management_center Intelligent Management Center (iMC) PLAT

CWE ID-CWE-20

Improper Input Validation

CVE-2008-3538

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-0.85% / 75.08%

7 Day CHG~0.00%

Published-02 Sep, 2008 | 14:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the initial description of this CVE was inadvertently associated with libxml2, but it should be for HP Enterprise Discovery.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows enterprise_discovery n/a

CVE-2008-1446

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-67.00% / 98.57%

7 Day CHG~0.00%

Published-15 Oct, 2008 | 00:00

Updated-23 Apr, 2026 | 00:35

Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."

Product-windows_server_2003 internet_information_services windows_2000 windows_xp n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2008-1457

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-54.93% / 98.08%

7 Day CHG~0.00%

Published-13 Aug, 2008 | 10:00

Updated-23 Apr, 2026 | 00:35

The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.

Product-windows-nt windows_vista windows_xp windows_2000 windows_2003_server n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-1436

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-57.88% / 98.20%

7 Day CHG~0.00%

Published-21 Apr, 2008 | 17:00

Updated-23 Apr, 2026 | 00:35

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.

Product-windows-nt windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CVE-2008-1456

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-66.29% / 98.55%

7 Day CHG~0.00%

Published-13 Aug, 2008 | 10:00

Updated-23 Apr, 2026 | 00:35

Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.

Product-windows-nt windows_vista windows_xp windows_2000 windows_2003_server n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-1665

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-1.20% / 79.13%

7 Day CHG~0.00%

Published-17 Jul, 2008 | 10:00

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a HP Inc.

Product-hpsi_active_directory_bidirectional_ldap_connector n/a

CVE-2008-0086

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-71.67% / 98.76%

7 Day CHG~0.00%

Published-08 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.

Product-sql_server_express_edition data_engine sql_server sql_server_desktop_engine n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-0106

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-70.60% / 98.72%

7 Day CHG~0.00%

Published-08 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.

Product-sql_server_express_edition data_engine sql_server sql_server_desktop_engine n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-24630

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-0.41% / 61.22%

7 Day CHG~0.00%

Published-19 Oct, 2020 | 17:34

Updated-04 Aug, 2024 | 15:19

A remote operatoronlinelist_content privilege escalation vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07).

Vendor-n/a HP Inc.

Product-intelligent_management_center HPE Intelligent Management Center (iMC)

CVE-2007-5008

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9||HIGH

EPSS-1.14% / 78.58%

7 Day CHG+0.05%

Published-20 Sep, 2007 | 21:00

Updated-23 Apr, 2026 | 00:35

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.

Vendor-n/a HP Inc.

Product-hp-ux n/a

CWE ID-CWE-287

Improper Authentication

CVE-2007-3039

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-83.39% / 99.29%

7 Day CHG~0.00%

Published-12 Dec, 2007 | 00:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103. NOTE: this is remotely exploitable on Windows 2000 Server.

Product-message_queuing windows_2000 windows_xp n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-17084

Matching Score-8

Matching Score-8

Product-exchange_server Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 18 Microsoft Exchange Server 2019 Cumulative Update 6 Microsoft Exchange Server 2016 Cumulative Update 17 Microsoft Exchange Server 2019 Cumulative Update 7

CVSS Score-8.5||HIGH

EPSS-0.19% / 40.84%

7 Day CHG~0.00%

Published-11 Nov, 2020 | 06:48

Updated-10 Sep, 2024 | 15:52

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-17095

Matching Score-8

Matching Score-8

Product-windows_server_2016 windows_server_2019 windows_10 Windows Server 2016 (Server Core installation)Windows Server 2019 (Server Core installation)Windows Server 2016 Windows Server version 2004 Windows 10 Version 1607 Windows 10 Version 1809 Windows Server, version 1903 (Server Core installation)Windows Server version 20H2 Windows Server 2019 Windows Server, version 1909 (Server Core installation)Windows 10 Version 2004 Windows 10 Version 1909 Windows 10 Version 1803 Windows 10 Version 1903 for x64-based Systems

CVSS Score-8.5||HIGH

EPSS-0.69% / 71.96%

7 Day CHG~0.00%

Published-09 Dec, 2020 | 23:36

Updated-28 Aug, 2025 | 23:15

Windows Hyper-V Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CVE-2022-30670

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-0.84% / 74.91%

7 Day CHG~0.00%

Published-16 Jun, 2022 | 16:56

Updated-16 Sep, 2024 | 17:43

Escalate Privileges to Server Admin - Robohelp Server

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require user interaction.

Vendor-Microsoft Corporation Adobe Inc.

Product-robohelp_server windows RoboHelp

CWE ID-CWE-285

Improper Authorization

CVE-2020-17049

Matching Score-8

Matching Score-8

CVSS Score-6.6||MEDIUM

EPSS-27.48% / 96.47%

7 Day CHG~0.00%

Published-11 Nov, 2020 | 00:00

Updated-15 Nov, 2024 | 16:12

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

Vendor-Microsoft Corporation Samba

CWE ID-CWE-863

Incorrect Authorization

CVE-2006-4696

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-65.02% / 98.50%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."

Product-windows_2000 windows_2003_server windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2020-16875

Matching Score-8

Matching Score-8

Product-exchange_server Microsoft Exchange Server 2019 Cumulative Update 5 Microsoft Exchange Server 2019 Cumulative Update 6 Microsoft Exchange Server 2016 Cumulative Update 16 Microsoft Exchange Server 2016 Cumulative Update 17

CVSS Score-8.4||HIGH

EPSS-86.82% / 99.44%

7 Day CHG~0.00%

Published-11 Sep, 2020 | 17:08

Updated-23 Feb, 2026 | 18:21

Microsoft Exchange Server Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised. The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.

Vendor-Microsoft Corporation

CWE ID-CWE-269

Improper Privilege Management

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2008-0107

Matching Score-8

Matching Score-8

CVSS Score-9||HIGH

EPSS-57.27% / 98.17%

7 Day CHG~0.00%

Published-08 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."