CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
A command injection remote code execution vulnerability exists in HPE StoreOnce Software. |
| 02/06/2025 |
| CVE-2025-27086 | ALTO8.1 | A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication. | 21/04/2025 |
| CVE-2024-53676 | CRÍTICO9.8 | A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution. | 27/11/2024 |
| CVE-2024-53675 | ALTO7.5 | An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. | 26/11/2024 |
| CVE-2024-53674 | ALTO7.5 | An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. | 26/11/2024 |
| CVE-2024-53673 | CRÍTICO9.8 | A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code. | 26/11/2024 |
| CVE-2024-11622 | ALTO7.5 | An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. | 26/11/2024 |
| CVE-2024-42508 | MÉDIO5.5 | This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users. | 18/10/2024 |
| CVE-2023-30912 | CRÍTICO9.8 |
A remote code execution issue exists in HPE OneView.
| 25/10/2023 |
| CVE-2023-30906 | ALTO7.8 | The vulnerability could be locally exploited to allow escalation of privilege.
| 18/07/2023 |
| CVE-2023-30904 | MÉDIO5.5 | A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information. | 16/06/2023 |
| CVE-2023-28084 | MÉDIO5.5 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens | 25/04/2023 |
| CVE-2023-28085 | MÉDIO5.5 | An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials | 14/04/2023 |
| CVE-2022-37938 | CRÍTICO9.8 | Unauthenticated server side request forgery in HPE Serviceguard Manager | 01/03/2023 |
| CVE-2022-37937 | CRÍTICO9.8 | Pre-auth memory corruption in HPE Serviceguard | 01/03/2023 |
| CVE-2022-37936 | CRÍTICO9.8 | Unauthenticated Java deserialization vulnerability in Serviceguard Manager
| 01/03/2023 |