A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated...
CVE-2026-79818
A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circum
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autof
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an...
CVE-2026-79816
A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote a
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow...
CVE-2026-79814
An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a loc
A local privilege escalation vulnerability exists in the ClearPass client software. Successful...
CVE-2026-79813
A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow
A sensitive information disclosure vulnerability exists in the client software of HPE Networking...
CVE-2026-79817
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manage
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an...
CVE-2026-79815
A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote a
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy...
CVE-2026-79812
A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exp
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could...
CVE-2026-76749
A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation...
CVE-2026-76741
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image...
CVE-2026-106063
A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large widt
Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache...
CVE-2026-105244
Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character ou
Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling
CVE-2026-41508
## Root Cause File: `internal/bodyprocessors/multipart.go` (since commit `3347961b`, PR #1453 *"feat: ignore unexpected
Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields
CVE-2026-41504
## Root Cause File: `internal/auditlog/formats.go` — multiple sites write attacker-influenced bytes into the Native aud
Payload relationship-query authorization bypass
CVE-2026-105852
## Impact A readable collection could expose information about protected documents in a related collection. **You are
Payload: Insufficient Access Control in Stripe REST Proxy
CVE-2026-105848
## Impact An authenticated user could perform unintended Stripe operations through the optional Stripe REST proxy. **Y
Payload: Untrusted redirect URL parameter exploit
CVE-2026-105846
### Impact Under certain conditions, an attacker can craft a redirect link that sends a guest user to an untrusted desti
Payload: Password hashes use insufficient PBKDF2 iterations
CVE-2026-105804
### Impact The password-hashing configuration used a lower work factor than what is recommended. ### Patches Payload no
Payload: Sort queries could expose protected field information
CVE-2026-105805
### Impact Under certain conditions, sorting readable records could reveal limited information about fields the requeste
Vyper: Memory corruption using function calls within tuples / nested calls
### Impact When performing a function call inside a tuple or as an argument inside another function call, there is a mem