HP
Product
Hp-ux
by HP · last CVE Sep 9, 2024
On CISA KEVExploited in the wild
290
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 5Low 1
Watch

Add Hp-ux to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2012-1823
In wildKEV
9.8
100%
May 11
PHP-CGI Query String Parameter Vulnerability
Affected: b.11.23; b.11.31
CVE-2015-5477
In wildKEV
7.5
100%
Jul 29
ISC BIND Data Processing Errors Vulnerability
Affected: 11.11; 11.23; 11.31
CVE-2001-0249
9.8
20%
Jun 18
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
Affected: 11.00
CVE-2001-0248
9.8
11%
Jun 18
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
Affected: 11.00
CVE-2024-42500
9.3
0%
Sep 9
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services
Affected: before b.11.31.24
CVE-1999-0038
8.4
1%
Apr 26
Buffer overflow in xlock program allows local users to execute commands as root
Affected: 10.00; 10.01; 10.08; 10.10; 10.16; 10.20; +3 more
CVE-2004-0940
7.8
5%
Feb 9
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via…
Affected: 11.00; 11.11; 11.20; 11.22
CVE-1999-0022
7.8
0%
Jul 3
Local user gains root privileges via buffer overflow in rdist, via expstr() function
Affected: 10.00
CVE-2018-5740
7.5
60%
Jan 16
A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named
Affected: All versions, or not specified
CVE-2016-2776
7.5
89%
Sep 28
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause…
Affected: 11.31
CVE-2004-0079
7.5
10%
Nov 23
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
Affected: 8.05; 11.00; 11.11; 11.23
CVE-2016-2775
5.9
63%
Jul 19
ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of…
Affected: b.11.31
CVE-1999-0517
5.9
29%
Jan 1
An SNMP community name is the default (e.g
Affected: 10; 11.00
CVE-2023-30903
5.5
0%
Jun 16
HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6
Affected: 11.00 through 11.31
CVE-2000-0972
5.5
1%
Dec 19
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and…
Affected: 11.00
CVE-1999-0524
4.0
32%
Aug 1
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
Affected: All versions, or not specified
CVE-2015-4000
3.7
100%
May 21
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows…
Affected: b.11.31
CVE-2015-2126
–
1%
Jul 6
Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions
Affected: 11.11iv2; 11.11iv3
CVE-2014-7879
–
5%
Dec 10
HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute…
Affected: b.11.11; b.11.23; b.11.31
CVE-2014-7877
–
1%
Oct 30
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors
Affected: b.11.31
CVE-2014-7874
–
2%
Oct 19
Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to…
Affected: b.11.23; b.11.31
CVE-2014-2490
–
6%
Jul 17
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
Affected: b.11.23; b.11.31
CVE-2013-6209
–
3%
Mar 14
Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors
Affected: b.11.11; b.11.23
CVE-2013-6200
–
0%
Mar 11
Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors
Affected: b.11.23; b.11.31
CVE-2013-4854
–
34%
Jul 29
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and…
Affected: b.11.31
CVE-2012-0131
–
7%
Apr 5
Distributed Computing Environment (DCE) 1.8 and 1.9 on HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service or possibly have unspecified other impact…
Affected: b.11.11; b.11.23
CVE-2012-0126
–
2%
Mar 28
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related…
Affected: 11.11; 11.23
CVE-2012-0125
–
0%
Mar 28
Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to…
Affected: 11.31
CVE-2011-2398
–
0%
Jul 11
Unspecified vulnerability in the dynamic loader in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges or cause a denial of service via unknown vectors
Affected: b.11.11; b.11.23; b.11.31
CVE-2011-0896
–
3%
Apr 15
Unspecified vulnerability in HP NFS/ONCplus B.11.31.10 and earlier on HP-UX B.11.31 allows remote authenticated users to cause a denial of service via unknown vectors
Affected: b.11.31
CVE-2011-0891
–
0%
Apr 3
Unspecified vulnerability in the OS-Core.CORE2-KRN fileset in HP HP-UX B.11.23 and B.11.31 allows local users to cause a denial of service via unknown vectors
Affected: b.11.23; b.11.31
CVE-2010-4108
–
3%
Dec 8
HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors
Affected: b.11.11; b.11.23; b.11.31
CVE-2010-2712
–
0%
Aug 30
Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors
Affected: b.11.11; b.11.23; b.11.31
CVE-2010-1032
–
1%
Apr 21
Unspecified vulnerability in HP HP-UX B.11.11 allows local users to cause a denial of service via unknown vectors
Affected: b.11.11
CVE-2010-1030
–
0%
Mar 31
Unspecified vulnerability in HP-UX B.11.31, with AudFilter rules enabled, allows local users to cause a denial of service via unknown vectors
Affected: b.11.31
CVE-2010-0451
–
3%
Mar 29
The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to…
Affected: 11.31; b.11.31
CVE-2009-2679
–
4%
Oct 5
Unspecified vulnerability in bootpd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown attack vectors
Affected: b.11.11; b.11.23; b.11.31
CVE-2009-2682
–
1%
Sep 24
Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors
Affected: b.11.23; b.11.31
CVE-2009-0719
–
0%
Apr 29
Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue…
Affected: b.11.11; b.11.23; b.11.31
CVE-2009-0207
–
0%
Mar 25
Unspecified vulnerability in HP-UX B.11.11 running VERITAS Oracle Disk Manager (VRTSodm) 3.5, B.11.23 running VRTSodm 4.1 or VERITAS File System (VRTSvxfs) 4.1, B.11.23 running…
Affected: b.11.11; b.11.31; b.11.23
CVE-2009-0418
–
8%
Feb 4
The IPv6 Neighbor Discovery Protocol (NDP) implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows…
Affected: b.11.11; b.11.23; b.11.31
CVE-2008-4418
–
3%
Dec 11
Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service via unknown vectors
Affected: b.11.11; b.11.23; b.11.31
CVE-2008-4416
–
0%
Dec 5
Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors
Affected: b.11.31
CVE-2008-1668
–
4%
Aug 13
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed…
Affected: 11.11
CVE-2008-1664
–
3%
Aug 8
Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors
Affected: 11.23; 11.31
CVE-2008-1662
–
4%
Aug 1
Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify…
Affected: b.11.11; b.11.23
CVE-2008-1660
–
0%
May 21
Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors
Affected: 11.11; 11.23; 11.31
CVE-2008-0713
–
2%
May 13
Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users to cause a denial of service (FTP server outage) via unknown…
Affected: 11.11; 11.23; 11.31
CVE-2007-6425
–
4%
Jan 23
Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of service via unknown vectors
Affected: 11.31
CVE-2007-6419
–
3%
Dec 24
Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors
Affected: 11.11; 11.23; 11.31
Page 1 of 6 · 290 total
12…6