Priority CRITICAL 100KEV
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to ex…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2017-03-11 · Fixed in 2.3.32, 2.5.10.1 CWE-755
Priority HIGH 84
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86491 · Published 2017-10-02 · Fixed CWE-787
Priority HIGH 78
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.64596 · Published 2020-06-03 · No fix listed CWE-306
Priority HIGH 65
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15163 · Published 2024-05-01 · No fix listed CWE-121
Priority MEDIUM 62
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22972 · Published 2022-05-10 · No fix listed CWE-787
Priority MEDIUM 57
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.25765 · Published 2021-03-30 · No fix listed CWE-78
Priority MEDIUM 55
wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.27383 · Published 2017-12-13 · Fixed in 3.12.2 CWE-203
Priority MEDIUM 54
A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.20526 · Published 2022-05-10 · No fix listed CWE-787
Priority MEDIUM 53
There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point m…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02132 · Published 2023-11-14 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point managemen…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02068 · Published 2023-07-25 · No fix listed CWE-120
Priority MEDIUM 53
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.019 · Published 2022-11-03 · Fixed in ArubaOS 6.5.4.x: 6.5.4.23 and above; ArubaOS 8.6.x: 8.6.0.18 and above; ArubaOS 8.7.x: 8.7.1.10 and above; ArubaOS 8.10.x: 8.10.0.0 and above; ArubaOS 10.3.x: 10.3.0.1 and above; SD-WAN-2.3.0.x: 8.7.0.0-2.3.0.7 and above CWE-78
Priority MEDIUM 52
There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01651 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Poin…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Acce…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01582 · Published 2024-05-14 · No fix listed CWE-78
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks access point management protocol) UD…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0174 · Published 2023-02-28 · No fix listed CWE-77
Priority MEDIUM 52
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01833 · Published 2022-10-28 · No fix listed CWE-78
Priority MEDIUM 52
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0154 · Published 2022-10-28 · No fix listed CWE-287
Priority MEDIUM 52
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0154 · Published 2022-10-28 · No fix listed CWE-287
Load more