| CVE-2017-3210 | ALTO7.8 | Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the component pdiservice.exe w | 24/07/2018 |
| CVE-2018-12463 | CRÍTICO9.8 | An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. | 12/07/2018 |
| CVE-2017-7658 | CRÍTICO9.8 | In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2 | 26/06/2018 |
| CVE-2017-7657 | CRÍTICO9.8 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size | 26/06/2018 |
| CVE-2018-6493 | ALTO8.8 | SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection. | 22/05/2018 |
| CVE-2018-6492 | MEDIO6.1 | Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent cross-site scripting, | 22/05/2018 |
| CVE-2018-6490 | ALTO7.5 | Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service. | 02/03/2018 |
| CVE-2017-8985 | MEDIO5.3 | HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00. | 15/02/2018 |
| CVE-2017-8984 | ALTO8.8 | A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found. | 15/02/2018 |
| CVE-2017-8983 | ALTO8.8 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. | 15/02/2018 |
| CVE-2017-8982 | ALTO7.5 | A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found. | 15/02/2018 |
| CVE-2017-8981 | CRÍTICO9.8 | A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506 was found. | 15/02/2018 |
| CVE-2017-8980 | ALTO7.5 | A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found. | 15/02/2018 |
| CVE-2017-8978 | MEDIO4.6 | A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found. | 15/02/2018 |
| CVE-2017-8977 | CRÍTICO9.1 | A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | 15/02/2018 |
| CVE-2017-8976 | CRÍTICO9.8 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | 15/02/2018 |
| CVE-2017-8975 | CRÍTICO9.8 | A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found. | 15/02/2018 |
| CVE-2017-8974 | MEDIO4.4 | A Local Authentication Restriction Bypass vulnerability in HPE NonStop Server version L-Series: T6533L01 through T6533L01^ADN; J-Series and H-series: T6533H02 through T6533H04^ADF and T6533H05 through T6533H05^ADL was found. | 15/02/2018 |
| CVE-2017-8973 | MEDIO4.3 | An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | 15/02/2018 |
| CVE-2017-8972 | MEDIO4.3 | A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found. | 15/02/2018 |