Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated...
CVE-2026-76745
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful
#advisory
共收录 23210 条相关情报。
← 返回所有主题Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful...
CVE-2026-76742
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allo
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that...
CVE-2026-79796
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking...
CVE-2026-76750
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager.
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy...
CVE-2026-76753
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation...
CVE-2026-76744
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe
A vulnerability have been identified in the management interface of AOS-S that could potentially...
CVE-2026-76743
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticate
An improper access control vulnerability exists in the Android client application for HPE...
CVE-2026-79797
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Ma
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager...
CVE-2026-79794
A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authentic
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could...
CVE-2026-76749
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation...
CVE-2026-76741
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could...
CVE-2026-76748
A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated re
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image...
CVE-2026-106063
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large widt
Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache...
CVE-2026-105244
Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character ou
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding
CVE-2026-41510
## Root Cause File: `internal/corazawaf/transaction.go`, lines 770–808 (since commit 2fd87b89, PR #812, 2023-06-14) ``
Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling
CVE-2026-41508
## Root Cause File: `internal/bodyprocessors/multipart.go` (since commit `3347961b`, PR #1453 *"feat: ignore unexpected
Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields
CVE-2026-41504
## Root Cause File: `internal/auditlog/formats.go` — multiple sites write attacker-influenced bytes into the Native aud
knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
CVE-2026-86540
## Overview A critical **Arbitrary Code Execution (ACE)** vulnerability exists in the Knowns Language Server Protocol (
RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
CVE-2026-106123
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.
RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
CVE-2026-106122
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes.