Live · 98 sources · updated 1m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

Clear

127 matching records.

  1. CVE NVD

    A vulnerability exists in a component of HPE Networking Fabric Composer.

    A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.

    CVSS 9.6 CVE-2026-95733 HPE Web platform
  2. CVE NVD

    An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer.

    An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the…

    CVSS 9.6 CVE-2026-95732 HPE Web platform
  3. CVE NVD

    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…

    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation…

    CVSS 9.8 CVE-2026-95731 HPE Web platform
  4. CVE NVD

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer.

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by…

    CVSS 7.1 CVE-2026-95753 HPE Web platform
  5. CVE NVD

    A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer.

    A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to elevate their privileges on the affected system.

    CVSS 7.1 CVE-2026-95752 HPE Web platform
  6. CVE NVD

    An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…

    An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the…

    CVSS 7.4 CVE-2026-95751 HPE Web platform
  7. CVE NVD

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive…

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met.…

    CVSS 7.5 CVE-2026-95750 HPE Web platform
  8. CVE NVD

    A missing integrity verification vulnerability exists in HPE Networking Fabric Composer.

    A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.

    CVSS 7.5 CVE-2026-95749 HPE Web platform
  9. CVE NVD

    A SQL injection vulnerability exists in HPE Networking Fabric Composer.

    A SQL injection vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to run arbitrary database commands.

    CVSS 7.5 CVE-2026-95748 HPE Web platform
  10. CVE NVD

    A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged…

    A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions…

    CVSS 7.5 CVE-2026-95747 HPE Web platform
  11. CVE NVD

    An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to…

    An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the…

    CVSS 7.5 CVE-2026-95746 HPE Web platform
  12. CVE NVD

    A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack.

    A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to cause the management services…

    CVSS 7.5 CVE-2026-95745 HPE Web platform
  13. CVE NVD

    A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated…

    A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside…

    CVSS 7.7 CVE-2026-95744 HPE Web platform
  14. CVE NVD

    Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer.

    Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to gain elevated privileges on the…

    CVSS 7.8 CVE-2026-95743 HPE Web platform
  15. CVE NVD

    An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer.

    An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated local attacker to create or overwrite arbitrary files on the…

    CVSS 7.8 CVE-2026-95742 HPE Web platform
  16. CVE NVD

    A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer.

    A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged authenticated attacker to gain elevated privileges on the affected system.

    CVSS 8.0 CVE-2026-95741 HPE Web platform
  17. CVE NVD

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept…

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain…

    CVSS 8.0 CVE-2026-95740 HPE Web platform
  18. CVE NVD

    An improper restriction of excessive authentication attempts vulnerability in the API of HPE Networking Fabric Composer could allow an…

    An improper restriction of excessive authentication attempts vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct brute-force attacks against user accounts if…

    CVSS 8.1 CVE-2026-95739 HPE Web platform
  19. CVE NVD

    Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…

    Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of…

    CVSS 8.1 CVE-2026-95738 HPE Web platform
  20. CVE NVD

    A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer.

    A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with high privileges to gain elevated privileges on the…

    CVSS 8.2 CVE-2026-95737 HPE Web platform
  21. CVE NVD

    Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an…

    Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the…

    CVSS 8.3 CVE-2026-95736 HPE Web platform
  22. CVE NVD

    An improper certificate validation vulnerability exists in HPE Networking Fabric Composer.

    An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker, under certain preconditions outside the attacker's control, to…

    CVSS 8.7 CVE-2026-95735 HPE Web platform
  23. CVE NVD

    A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low-privileged user to…

    A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low-privileged user to access sensitive information beyond what is authorized by the user's existing…

    CVSS 8.8 CVE-2026-95734 HPE Web platform
  24. CVE NVD

    An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client.

    An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system.

    CVSS 7.1 CVE-2026-95728 HPE
  25. CVE NVD

    A command injection vulnerability exists in HPE Networking VIA.

    A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.

    CVSS 7.2 CVE-2026-95727 HPE
  26. CVE NVD

    A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of service attack.

    A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the…

    CVSS 7.5 CVE-2026-95726 HPE
  27. CVE NVD

    A command injection vulnerability exists in the VIA client for Linux.

    A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.

    CVSS 7.8 CVE-2026-95725 HPE
  28. CVE NVD

    An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA).

    An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the…

    CVSS 8.1 CVE-2026-95724 HPE
  29. CVE NVD

    A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client.

    A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code…

    CVSS 8.4 CVE-2026-95723 HPE
  30. CVE NVD

    A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client.

    A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary…

    CVSS 8.8 CVE-2026-95722 HPE
  31. CVE NVD

    A race condition vulnerability exists in the API of HPE Networking Fabric Composer.

    A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.

    CVSS 4.2 CVE-2026-95772 HPE Web platform
  32. CVE NVD

    An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer.

    An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the…

    CVSS 4.3 CVE-2026-95771 HPE Web platform
  33. CVE NVD

    A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated…

    A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain…

    CVSS 4.7 CVE-2026-95770 HPE Web platform
  34. CVE NVD

    An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer.

    An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records.

    CVSS 5.3 CVE-2026-95769 HPE Web platform
  35. CVE NVD

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control…

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged…

    CVSS 5.3 CVE-2026-95768 HPE Web platform
  36. CVE NVD

    An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer.

    An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the…

    CVSS 5.3 CVE-2026-95767 HPE Web platform
  37. CVE NVD

    Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to…

    Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to…

    CVSS 5.3 CVE-2026-95766 HPE Web platform
  38. CVE NVD

    A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer.

    A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive…

    CVSS 5.4 CVE-2026-95765 HPE Web platform
  39. CVE NVD

    An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer.

    An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information.

    CVSS 5.7 CVE-2026-95764 HPE Web platform
  40. CVE NVD

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive…

    An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met.…

    CVSS 5.9 CVE-2026-95763 HPE Web platform
  41. CVE NVD

    An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the…

    An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated…

    CVSS 5.9 CVE-2026-95762 HPE Web platform
  42. CVE NVD

    An improper certificate validation vulnerability exists in HPE Networking Fabric Composer.

    An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to obtain sensitive information.

    CVSS 5.9 CVE-2026-95761 HPE Web platform
  43. CVE NVD

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control…

    A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated attacker with low…

    CVSS 6.4 CVE-2026-95760 HPE Web platform
  44. CVE NVD

    Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer.

    Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the…

    CVSS 6.5 CVE-2026-95759 HPE Web platform
  45. CVE NVD

    An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer.

    An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the…

    CVSS 6.5 CVE-2026-95758 HPE Web platform
  46. CVE NVD

    A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer.

    A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the…

    CVSS 6.5 CVE-2026-95757 HPE Web platform
  47. CVE NVD

    A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with…

    A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with administrative privileges if certain preconditions outside of the attacker's…

    CVSS 6.6 CVE-2026-95756 HPE Web platform
  48. CVE NVD

    Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent…

    Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept management traffic if certain preconditions outside of the…

    CVSS 6.8 CVE-2026-95755 HPE Web platform
  49. CVE NVD

    An authenticated path traversal vulnerability exists in ClearPass Policy Manager.

    An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.

    CVSS 9.8 CVE-2026-79805 HPE Network management
  50. CVE NVD

    A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated…

    A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could…

    CVSS 9.8 CVE-2026-79801 HPE Network management
  51. CVE NVD

    SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote…

    SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager…

    CVSS 9.9 CVE-2026-79798 HPE Network management
  52. CVE NVD

    Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote…

    Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation…

    CVSS 9.8 CVE-2026-79796 HPE Network management
  53. CVE NVD

    A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to…

    A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance.…

    CVSS 9.1 CVE-2026-79794 HPE Network management
  54. CVE NVD

    A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks…

    A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could…

    CVSS 9.8 CVE-2026-76754 HPE Network management
  55. CVE NVD

    A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote…

    A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker…

    CVSS 9.8 CVE-2026-76753 HPE Network management
  56. CVE NVD

    Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager.

    Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing…

    CVSS 9.8 CVE-2026-76752 HPE Network management
  57. CVE NVD

    A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager.

    A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary code on the affected endpoint…

    CVSS 9.8 CVE-2026-76751 HPE Network management
  58. CVE NVD

    Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager.

    Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the…

    CVSS 9.8 CVE-2026-76750 HPE Network management
  59. CVE NVD

    A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

    A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

    CVSS 9.0 CVE-2026-79820 HPE Network management
  60. CVE NVD

    A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer.

    A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored…

    CVSS 3.1 CVE-2026-95777 HPE Web platform
  61. CVE NVD

    An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated…

    An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are…

    CVSS 3.1 CVE-2026-95776 HPE Web platform
  62. CVE NVD

    A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer.

    A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to read certain files on the underlying…

    CVSS 3.3 CVE-2026-95775 HPE Web platform
  63. CVE NVD

    A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer.

    A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information from the affected system.

    CVSS 3.7 CVE-2026-95774 HPE Web platform
  64. CVE NVD

    A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer.

    A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a low-privileged local attacker to cause a partial denial-of-service condition…

    CVSS 3.8 CVE-2026-95773 HPE Web platform
  65. CVE NVD

    A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service.

    A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal…

    CVSS 6.5 CVE-2026-95730 HPE
  66. CVE NVD

    A sensitive information disclosure vulnerability exists in HPE Networking VIA.

    A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker to obtain sensitive information.

    CVSS 6.5 CVE-2026-95729 HPE
  67. CVE NVD

    An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713

    An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713

    CVSS 9.1 CVE-2026-79842 HPE
  68. CVE NVD

    A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in…

    A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.

    CVSS 8.0 CVE-2026-79824 HPE Developer platform
  69. CVE NVD

    A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to…

    A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance.…

    CVSS 7.2 CVE-2026-79811 HPE Network management
  70. CVE NVD

    Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated…

    Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful…

    CVSS 7.2 CVE-2026-79810 HPE Network management
  71. CVE NVD

    An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager.

    An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions…

    CVSS 7.3 CVE-2026-79809 HPE Network management
  72. CVE NVD

    A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager.

    A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or…

    CVSS 7.8 CVE-2026-79808 HPE Network management
  73. CVE NVD

    A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate…

    A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit allows a malicious user to escalate…

    CVSS 7.8 CVE-2026-79806 HPE Network management
  74. CVE NVD

    A command injection vulnerability exists in the API of ClearPass Policy Manager.

    A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.

    CVSS 8.8 CVE-2026-79803 HPE Network management
  75. CVE NVD

    A command injection vulnerability exists in the client software of ClearPass Policy Manager.

    A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary…

    CVSS 8.8 CVE-2026-79802 HPE Network management
  76. CVE NVD

    An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager.

    An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with…

    CVSS 8.8 CVE-2026-79800 HPE Network management
  77. CVE NVD

    A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored…

    A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the…

    CVSS 8.8 CVE-2026-79799 HPE Network management
  78. CVE NVD

    A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited…

    A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC.

    CVSS 7.2 CVE-2026-76740 HPE
  79. CVE NVD

    A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.

    A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.

    CVSS 7.3 CVE-2026-79840 HPE
  80. CVE NVD

    A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.

    A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.

    CVSS 7.3 CVE-2026-79839 HPE
  81. CVE NVD

    A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.

    A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.

    CVSS 7.3 CVE-2026-79838 HPE
  82. CVE NVD

    A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption…

    A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.

    CVSS 7.3 CVE-2026-79837 HPE
  83. CVE NVD

    A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.

    A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.

    CVSS 7.4 CVE-2026-79834 HPE
  84. CVE NVD

    A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing…

    A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.

    CVSS 7.5 CVE-2026-79833 HPE
  85. CVE NVD

    A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.

    A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.

    CVSS 7.6 CVE-2026-79832 HPE
  86. CVE NVD

    A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.

    A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.

    CVSS 8.2 CVE-2026-79829 HPE
  87. CVE NVD

    A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.

    A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.

    CVSS 7.1 CVE-2026-79828 HPE
  88. CVE NVD

    A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.

    A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.

    CVSS 7.1 CVE-2026-79827 HPE
  89. CVE NVD

    A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.

    A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.

    CVSS 7.1 CVE-2026-79826 HPE
  90. CVE NVD

    A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.

    A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.

    CVSS 7.1 CVE-2026-79825 HPE
  91. CVE NVD

    A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.

    A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.

    CVSS 7.1 CVE-2026-79822 HPE
  92. CVE NVD

    A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.

    A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.

    CVSS 8.2 CVE-2026-79821 HPE
  93. CVE NVD

    A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.

    A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.

    CVSS 7.1 CVE-2026-76665 HPE
  94. CVE NVD

    A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.

    A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.

    CVSS 7.5 CVE-2026-76663 HPE
  95. CVE NVD

    A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

    A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.

    CVSS 7.6 CVE-2026-76661 HPE
  96. CVE NVD

    A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

    A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.

    CVSS 8.7 CVE-2026-76660 HPE
  97. CVE NVD

    A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.

    A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.

    CVSS 7.5 CVE-2026-76659 HPE
  98. CVE NVD

    A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

    A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

    CVSS 7.5 CVE-2026-73799 HPE
  99. CVE NVD

    A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution

    A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution

    CVSS 7.5 CVE-2026-76655 HPE
  100. CVE NVD

    A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.

    A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.

    CVSS 8.2 CVE-2026-73798 HPE

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=HPE&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help