CVSS: 8.5EPSS: 0%CPEs: 3EXPL: 0CVE-2014-7879
https://notcve.org/view.php?id=CVE-2014-7879
HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors. HP HP-UX B.11.11, B.11.23, y B.11.31, cuando la configuración PAM incluye libpam_updbe, permite a usuarios remotos autenticados evadir la autenticación, y como consecuencia ejecutar código arbitrario, a través de vectores no especificados. • https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778 • CWE-287: Improper Authentication •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2014-7877
https://notcve.org/view.php?id=CVE-2014-7877
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. Vulnerabilidad no especificada en el kernel en HP HP-UX B.11.31 permite a usuarios locales causar una denegación de servicio a través de vectores desconocidos. • http://secunia.com/advisories/61196 http://www.securityfocus.com/bid/70808 http://www.securitytracker.com/id/1031139 https://exchange.xforce.ibmcloud.com/vulnerabilities/98382 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04491186 •
CVSS: 6.8EPSS: 0%CPEs: 4EXPL: 0CVE-2014-7874
https://notcve.org/view.php?id=CVE-2014-7874
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Vulnerabilidad de CSRF en HP System Management Homepage (SMH) anterior a 3.2.3 en HP-UX B.11.23, y anterior a 3.2.8 en HP-UX B.11.31, permite a atacantes remotos secuestrar la autenticación de victimas no especificadas a través de vectores desconocidos. • http://secunia.com/advisories/60945 http://www.securitytracker.com/id/1031050 https://exchange.xforce.ibmcloud.com/vulnerabilities/97024 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04476799 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 9.3EPSS: 2%CPEs: 7EXPL: 0CVE-2014-2490 – Oracle Java ResourceBundle Format String Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-2490
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en el componente Java SE en Oracle Java SE 7u60 y SE 8u5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Hotspot. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ResourceBundles. The issue lies in insufficient validation of user-supplied data when applying a ResourceBundle. • http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/60129 http://secunia.com/advisories/60485 http://secunia.com/advisories/60812 http://security.gentoo.org/glsa/glsa-201502-12.xml http://www.debian.org/security/2014/dsa-2980 http://www.debian.org/security/2014/dsa-2987 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.securityfocus.com/archive/1/534161/100/0& • CWE-134: Use of Externally-Controlled Format String •
CVSS: 3.8EPSS: 0%CPEs: 2EXPL: 0CVE-2013-6219
https://notcve.org/view.php?id=CVE-2013-6219
Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. Vulnerabilidad no especificada en HP HP-UX Whitelisting (también conocido como WLI) anterior a A.01.02.02 en HP-UX B.11.31 permite a usuarios locales evadir restricciones de acceso a través de vectores desconocidos. • https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04227671 •