Export limit exceeded: 108624 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (108624 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-79890 | 1 Hpe | 1 Aos | 2026-10-26 | 8.1 High |
| There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system. | ||||
| CVE-2026-79891 | 1 Hpe | 1 Aos | 2026-10-26 | 8.1 High |
| A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise. | ||||
| CVE-2026-79892 | 1 Hpe | 1 Aos | 2026-10-26 | 7.8 High |
| A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system. | ||||
| CVE-2026-79893 | 1 Hpe | 1 Aos | 2026-10-26 | 7.5 High |
| Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service. | ||||
| CVE-2026-79895 | 1 Hpe | 1 Aos | 2026-10-26 | 7.5 High |
| Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface. | ||||
| CVE-2026-79955 | 1 Hpe | 1 Aos | 2026-10-26 | 7.5 High |
| An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected service. | ||||
| CVE-2026-79956 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. Successful exploitation could allow an attacker to run unauthorized commands on the system, potentially leading to system compromise. | ||||
| CVE-2026-95704 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and data security. | ||||
| CVE-2026-95705 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system. | ||||
| CVE-2026-95707 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system. | ||||
| CVE-2026-95708 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system. | ||||
| CVE-2026-95709 | 1 Hpe | 1 Aos | 2026-10-26 | 7.2 High |
| Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system. | ||||
| CVE-2026-95711 | 1 Hpe | 1 Aos | 2026-10-26 | 7.1 High |
| An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system. | ||||
| CVE-2026-95713 | 1 Hpe | 1 Aos | 2026-10-26 | 7 High |
| An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data. | ||||
| CVE-2026-112330 | 1 Gdatasoftwareag | 1 Motornet | 2026-10-26 | 7.5 High |
| Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted cloudEvents headers. Attackers can supply an invalid cloudEvents:motorversion, a single double-quote header value, or an unparsable typed attribute such as cloudEvents:time to trigger an unhandled exception in ExtractCloudEvent that is treated as fatal, causing the application to stop and the unacknowledged message to be redelivered on restart, resulting in a permanent crash-loop. | ||||
| CVE-2026-72753 | 1 Nlnetlabs | 1 Routinator | 2026-10-26 | 8.2 High |
| When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed, potentially leading to missing data. If it encounters too many delta entries it may run out of memory. | ||||
| CVE-2026-72754 | 1 Nlnetlabs | 1 Routinator | 2026-10-26 | 7.5 High |
| When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong encoding, it may exit. | ||||
| CVE-2026-72758 | 1 Nlnetlabs | 1 Routinator | 2026-10-26 | 7.5 High |
| When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory. | ||||
| CVE-2026-107894 | 1 Fujielectric | 1 V-sft | 2026-10-26 | 7.8 High |
| V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product. | ||||
| CVE-2026-107895 | 1 Fujielectric | 1 V-sft | 2026-10-26 | 7.8 High |
| V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product. | ||||