Priority HIGH 84
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.86491 · Published 2017-10-02 · Fixed CWE-787
Priority MEDIUM 57
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and be…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.25765 · Published 2021-03-30 · No fix listed CWE-78
Priority MEDIUM 55
wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.27383 · Published 2017-12-13 · Fixed in 3.12.2 CWE-203
Priority MEDIUM 54
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculati…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.24639 · Published 2021-11-11 · No fix listed CWE-400
Priority MEDIUM 50
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.30459 · Published 2021-03-30 · No fix listed CWE-362
Priority MEDIUM 50
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.3965 · Published 2021-03-30 · No fix listed
Priority MEDIUM 50
A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04631 · Published 2019-05-10 · No fix listed CWE-78
Priority MEDIUM 50
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass secu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05123 · Published 2020-01-31 · No fix listed CWE-20
Priority MEDIUM 48
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03653 · Published 2021-03-29 · No fix listed CWE-78
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02409 · Published 2021-10-12 · No fix listed CWE-120
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02409 · Published 2021-09-07 · Fixed in 8.6.0.4-2.2.0.4 CWE-120
Priority MEDIUM 47
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02694 · Published 2021-03-30 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02054 · Published 2022-10-06 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0213 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01868 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 46
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01828 · Published 2021-03-29 · No fix listed CWE-120
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 45
Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01416 · Published 2022-10-07 · No fix listed CWE-120
Priority MEDIUM 44
A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.16372 · Published 2021-03-30 · No fix listed CWE-79
Priority MEDIUM 44
A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aru…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03152 · Published 2021-03-30 · No fix listed CWE-78
Priority MEDIUM 43
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.12573 · Published 2021-03-30 · No fix listed
Priority MEDIUM 43
A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below;…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.1242 · Published 2021-03-30 · No fix listed
Priority MEDIUM 43
A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Insta…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0238 · Published 2021-03-29 · No fix listed CWE-120
Load more