Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 28 min ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
353new WordPress flaws this week
390,080entries in the database

82 results · page 2 of 2

  • Feb 8, 2009HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to CVE-2008-4559 · Other software · HP · reported by MITREHigh 10

    HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 8, 2009Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1)CVE-2008-0067 · Other software · HP · reported by PSIRT-CNA@flexerasoftware.comHigh 10

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2008Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via CVE-2008-3545 · Other software · HP · reported by MITREHigh 7.8

    Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536, CVE-2008-3537, and CVE-2008-3544. NOTE: due to insufficient details from the vendor, it is not clear whether this is the same as CVE-2008-1853.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2008Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackersCVE-2008-3544 · Other software · HP · reported by MITREHigh 9

    Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 3, 2008Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service vCVE-2008-3537 · Other software · HP · reported by MITREHigh 7.8

    Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 3, 2008Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service vCVE-2008-3536 · Other software · HP · reported by MITREHigh 7.8

    Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3537.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 16, 2008ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via CVE-2008-1851 · Other software · HP · reported by MITREMedium 5

    ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 16, 2008The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (eCVE-2008-1853 · Other software · HP · reported by MITREMedium 4.3

    The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request).

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 16, 2008ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) viaCVE-2008-1852 · Other software · HP · reported by MITREHigh 7.8

    ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 16, 2008Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary fCVE-2008-0068 · Other software · HP · reported by PSIRT-CNA@flexerasoftware.comMedium 5

    Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 16, 2008Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of serCVE-2008-1842 · Other software · HP · reported by MITREHigh 10

    Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 8, 2008Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary cCVE-2008-1697 · Other software · HP · reported by MITREHigh 10

    Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 6, 2008ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP requestCVE-2008-0212 · Other software · HP · reported by MITREHigh 7.8

    ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 13, 2007Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web scripCVE-2007-6343 · Other software · HP · reported by MITREMedium 4.3

    Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 13, 2007Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unsCVE-2007-6204 · Other software · HP · reported by MITREHigh 10

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 28, 2007Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privCVE-2007-1727 · Other software · HP · reported by MITREMedium 6.5

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 23, 2007Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknCVE-2007-0441 · Other software · HP · reported by MITREMedium 5.1

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknown vectors.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 11, 2007Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to read arbitrary files via unknown veCVE-2007-0206 · Other software · HP · reported by MITREMedium 5

    Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to read arbitrary files via unknown vectors.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 24, 2006Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, eCVE-2006-2580 · Other software · HP · reported by MITREHigh 7.5

    Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 2, 2005HP OpenView Network Node Manager Remote Code Execution VulnerabilityCVE-2005-2773 · Other software · Hewlett Packard (HP) · reported by MITREExploitedCritical 9.8

    HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

    Product
    OpenView Network Node Manager
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Hewlett Packard (HP)’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
  • May 3, 2005Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbiCVE-2005-1434 · Other software · HP · reported by MITREHigh 7.5

    Multiple unknown vulnerabilities in OpenView Network Node Manager (OV NNM) 6.2, 6.4, 7.01, and 7.50 allow attackers to cause a denial of service or execute arbitrary code.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 2, 2005Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.CVE-2005-1056 · Other software · HP · reported by MITREMedium 5

    Unknown vulnerability in HP OpenView Network Node Manager (NMM) 6.2 through 6.4, and 7.01 through 7.50, allows remote attackers to cause a denial of service.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a craCVE-2003-1494 · Other software · HP · reported by MITREMedium 5

    Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packeCVE-2003-1493 · Other software · HP · reported by MITREMedium 5

    Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 1, 2001Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a loCVE-2001-1123 · Other software · HP · reported by MITREHigh 7.2

    Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 20, 2001ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharaCVE-2001-0552 · Other software · HP · reported by MITREHigh 10

    ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 14, 2001HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflCVE-2001-0629 · Other software · HP · reported by MITREHigh 10

    HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and posCVE-2000-1058 · Other software · HP · reported by MITREMedium 5

    Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via CVE-2000-1057 · Other software · HP · reported by MITREMedium 4.6

    Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 20, 2000Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.CVE-2000-0755 · Other software · HP · reported by MITREMedium 4.6

    Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 20, 2000Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.CVE-2000-0754 · Other software · HP · reported by MITRELow 2.1

    Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 6, 2000Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.CVE-2000-0558 · Other software · HP · reported by MITREHigh 10

    Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.

    Product
    Openview Network Node Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.