CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/01/2024 |
| CVE-2023-50274 | HIGH7.8 | HPE OneView may allow command injection with local privilege escalation. | 23/01/2024 |
| CVE-2023-50271 | HIGH7.5 |
A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited locally or remotely to disclose information.
| 17/12/2023 |
| CVE-2023-5739 | HIGH7.8 | Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege. | 31/10/2023 |
| CVE-2023-5671 | HIGH7.8 | HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability. | 25/10/2023 |
| CVE-2023-4499 | HIGH7.5 | A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability. | 13/10/2023 |
| CVE-2023-5365 | CRITICAL9.8 | HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure. | 09/10/2023 |
| CVE-2023-30909 | CRITICAL9.8 | A remote authentication bypass issue exists in some
OneView APIs.
| 14/09/2023 |
| CVE-2023-30908 | CRITICAL9.8 | A remote authentication bypass issue exists in a OneView API.
| 07/09/2023 |
| CVE-2015-2202 | HIGH7.2 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS. | 05/09/2023 |
| CVE-2015-2201 | HIGH7.2 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users. | 05/09/2023 |
| CVE-2015-1391 | HIGH8.8 | Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism. | 05/09/2023 |
| CVE-2015-1390 | MEDIUM6.1 | Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator. | 05/09/2023 |
| CVE-2023-38402 | HIGH7.1 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot pro | 15/08/2023 |
| CVE-2023-38401 | HIGH7.8 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system. | 15/08/2023 |
| CVE-2023-32674 | CRITICAL9.8 | Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow. | 12/06/2023 |
| CVE-2023-32673 | CRITICAL9.8 | Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege. | 12/06/2023 |