Lucene search
+L

708 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.16 views

PT-2026-40338

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 affected versions not specified Description A flaw in the configuration processing logic allows an authenticated remote attacker to execute arbitrary system commands on the underlying operating system under specifi...

7.2CVSS5.8AI score0.00616EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.32 views

PT-2026-40354

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description A heap-based buffer overflow in a Network management service allows an unauthenticated remote attacker to execute arbitrary code as a privileged user on t...

7.5CVSS6.4AI score0.00535EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.18 views

PT-2026-40336

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 affected versions not specified Access Points running AOS-8 Instant affected versions not specified Description A flaw in the web-based management interface allows an unauthenticated remote attacker on the same loc...

8.8CVSS5.7AI score0.0027EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.22 views

PT-2026-40364

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a...

7.2CVSS6.5AI score0.01014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.20 views

PT-2026-40368

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.16 views

PT-2026-40370

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into...

7.2CVSS6.2AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.28 views

PT-2026-40363

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a...

7.2CVSS6.5AI score0.01014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.28 views

PT-2026-40448

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description Command injection flaws exist in the command line interface CLI service accessed via the PAPI protocol. An authenticated remote attacker can exploit these...

7.2CVSS6.1AI score0.01226EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.17 views

PT-2026-40339

Name of the Vulnerable Software and Affected Versions AOS Instant versions 8.x.x.x Description A flaw in the XML handling component of AOS-8 DHCP services allows an unauthenticated remote attacker to trigger a denial-of-service condition. This occurs through excessive resource consumption upon us...

5.3CVSS5.3AI score0.00263EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.18 views

PT-2026-40377

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description Command injection flaws exist in the web-based management interface of the operating systems. An authenticated remote attacker can exploit these issues to...

8.8CVSS6.1AI score0.00896EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.32 views

PT-2026-40374

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into...

7.2CVSS6.2AI score0.00315EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.17 views

PT-2026-40376

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS6.1AI score0.00896EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.18 views

PT-2026-40375

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description Command injection flaws exist in the web-based management interface of the operating systems. An authenticated remote attacker can exploit these issues to...

7.2CVSS6.1AI score0.00918EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.12 views

PT-2026-40369

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.26 views

PT-2026-40352

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description Issues in a protocol-handling component allow an unauthenticated attacker to cause a denial-of-service condition by sending specially crafted network...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.22 views

PT-2026-40362

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified AOS-10 affected versions not specified Description An authenticated remote code execution issue exists in the web-based management interface. Improper input validation in the file path parameter within the...

7.2CVSS6.5AI score0.00436EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.21 views

PT-2026-40340

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 versions 10.7.x.x and above Description A flaw in the command line interface of Access Points running AOS-10 allows an authenticated remote attacker to perform command injection. This could enable the execution of...

7.2CVSS5.8AI score0.00957EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.15 views

PT-2026-40337

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 affected versions not specified Access Points running AOS-8 Instant affected versions not specified Description A flaw in the command line interface allows an authenticated remote attacker to execute system command...

7.2CVSS5.9AI score0.00555EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/09 12:0 a.m.46 views

Nutanix AOS : (NXSA-AOS-7.3.1.9)

The version of AOS installed on the remote host is prior to 7.3.1.9. It is, therefore, affected by a vulnerability as referenced in the NXSA-AOS-7.3.1.9 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - Revert to operating out-of-place This mostly...

7.8CVSS6AI score0.99907EPSS
SaveExploits238References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:11 p.m.9 views

CVE-2026-23817

A vulnerability in the web-based management interface of AOS-CX Switches could allow an unauthenticated remote attacker to redirect users to an arbitrary URL...

6.5CVSS5.9AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder