Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,763

Export CSV
CVE-2017-8947

A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.

CVSS 3.0 · 9.8 Critical EPSS 29.8% KEV · Not listed
Vendors
Hp
Products
Ucmdb Configuration Manager
CVE-2017-8946

A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.

CVSS 3.0 · 8.3 High EPSS 10.7% KEV · Not listed
Vendors
Hp
Products
Aruba Airwave Glass
CVE-2017-8023

EMC Networker Remote Code Execution Vulnerability

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker Client execution service (nsrexecd) when oldauth authentication method is used. An unauthenticated remote attacker could send arbitrary commands via RPC service to be executed on the host system with the privileges of the nsrexecd service, which runs with administrative privileges.

CVSS 3.0 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Dell
Products
Emc Networker
CVE-2017-7465

JBoss: JAXP in EAP 7.0 allows RCE via XSL

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause remote code execution if they are able to provide XSLT content for parsing. Doing a transform in JAXP requires the use of a 'javax.xml.transform.TransformerFactory'. If the FEATURE_SECURE_PROCESSING feature is set to 'true', it mitigates this vulnerability.

CVSS 3.0 · 9 Critical EPSS 2.8% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd
CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.

CVSS 3.0 · 7.5 High EPSS 17.0% KEV · Not listed
Vendors
Hp
Products
Network Automation