Lucene search
+L

132 matches found

CVE
CVE
•added 2026/10/08 2:48 a.m.•16 views

CVE-2026-87669

Brocade Fabric OS versions before 10.0.1 are susceptible to a missing authorization check in the REST API interface. This vulnerability allows an authenticated user, regardless of their role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data a...

5.1CVSS5.7AI score0.00178EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/08 2:48 a.m.•46 views

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

5.1CVSS0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•13 views

PT-2026-107782

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

5.1CVSS5.7AI score0.00178EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•36 views

CVE-2026-79818 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

5.3CVSS0.00286EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•9 views

EUVD-2026-93904

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

5.3CVSS6AI score0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:17 p.m.•5 views

CVE-2026-79818 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

5.3CVSS6AI score0.00286EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•13 views

CVE-2026-79818

A vulnerability exists in the API interface of ClearPass Policy Manager that allows an unauthenticated remote attacker to bypass existing authentication controls. Successful exploitation of this flaw could result in unauthorized information disclosure from the affected system. No specific patch v...

5.3CVSS6AI score0.00286EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:16 p.m.•43 views

CVE-2026-76752 Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affect...

9.8CVSS0.0047EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:16 p.m.•15 views

CVE-2026-76752

HPE Networking ClearPass Policy Manager contains authentication bypass vulnerabilities within its web-based management and API interfaces . A successful exploit allows an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected ...

9.8CVSS6AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107216

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An authentication bypass exists in an API interface that allows an unauthenticated remote attacker to circumvent authentication controls. This could enable the attacker to...

5.3CVSS5.9AI score0.00286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-107191

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description Authentication bypass flaws exist in the web-based management and API interfaces. These issues allow an unauthenticated remote attacker to circumvent...

9.8CVSS5.9AI score0.0047EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-79818: Missing Authentication for Critical Function

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

5.3CVSS6AI score0.00286EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/10 12:27 p.m.•21 views

EUVD-2026-75401

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...

7.1CVSS5.7AI score0.0029EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/01 12:00 a.m.•15 views

The vulnerability of the Remote Access API interface for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2Affected Software18
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•9 views

PT-2026-67777

Name of the Vulnerable Software and Affected Versions HPE Networking SD-WAN Orchestrator affected versions not specified Description Multiple issues in the REST API interface allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. This could...

9.8CVSS5.9AI score0.00796EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•9 views

CVE-2026-8081: Server-Side Request Forgery (SSRF)

A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internal/api/handlers/management/apitools.go of the component API Interface. The manipulation of the argument url leads to server-side request forgery. Remote...

6.5CVSS6.2AI score0.00387EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
•added 2026/04/06 12:00 a.m.•19 views

VulnCheck KEV: CVE-2026-3965

A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...

6.5CVSS6AI score0.00484EPSS
SaveIn wildExploits1References27
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/12 12:00 a.m.•5 views

CVE-2026-3965: Protection Mechanism Failure

A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...

6.5CVSS6AI score0.00484EPSS
SaveExploits1References1
Mend
Mend
•added 2026/03/11 11:32 p.m.•7 views

CVE-2026-3965

A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...

6.5CVSS6AI score0.00484EPSS
SaveExploits1References12
OSV
OSV
•added 2026/03/11 11:32 p.m.•27 views

CVE-2026-3965 whyour qinglong API express.ts protection mechanism

A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...

5.3CVSS6.2AI score
SaveExploits0References11
Rows per page
Query Builder