Vulnerabilities (CVE)

Filtered by vendor Hp Subscribe
Filtered by product Openvms
Total 26 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3729 1 Hp 1 Openvms 2025-04-09 5.0 MEDIUM N/A
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames.
CVE-2008-4052 1 Hp 1 Openvms 2025-04-09 7.2 HIGH N/A
Stack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3-1H1 and OpenVMS ALPHA 7.3-2, 8.2, and 8.3 allows local users to cause a denial of service (crash) or gain privileges via unspecified vectors.
CVE-2005-0652 1 Hp 1 Openvms 2025-04-03 2.1 LOW N/A
Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.
CVE-2006-3686 1 Hp 1 Openvms 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash).
CVE-2005-3476 1 Hp 1 Openvms 2025-04-03 2.1 LOW N/A
Unspecified vulnerability in HP OpenVMS Integrity 8.2-1 and 8.2, and OpenVMS Alpha 7.3-2 and 8.2, allows local users to cause a denial of service.
CVE-2017-17482 1 Hp 1 Openvms 2024-11-21 4.6 MEDIUM 7.8 HIGH
An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on VAX and Alpha and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, HP, Compaq, or Digital Equipment Corporation.