EUVD-2025-12203

Malicious code in bioql PyPI...

EUVD-2025-12290

Malicious code in bioql PyPI...

EUVD-2022-35630

Malicious code in bioql PyPI...

CVE-2022-42951

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time before the cluster management authentication has started where an attacker can connect to the cluster...

CVE-2022-32564

An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

CVE-2025-37087

CVE-2025-37087 affects HPE Performance Cluster Manager (HPCM) cmdb service. Multiple connected sources confirm a vulnerability that could allow an attacker to access an arbitrary file on the server host. The initial entry lists a high-severity CVSS 3.1 vector (9.8, NETWORK / LOW complexity / no u...

CVE-2025-37087

A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...

PT-2025-17594 · Hewlett Packard · Hpe Performance Cluster Manager

Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM affected versions not specified Description: A vulnerability in the cmdb service could allow an attacker to gain access to an arbitrary file on the server host. Recommendations: At the moment, there is no...

Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞

Hewlett Packard Enterprise Performance Cluster Manager is a security vulnerability in Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager that stems from a problem with the cmdb service and could result in access to arbitrary files...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

CVE-2025-27086

CVE-2025-27086 describes an authentication bypass in the HPE Performance Cluster Manager (HPCM) GUI . The issue affects HPCM prior to a fixed version; PT Security notes affected versions through 1.12, with remediation by upgrading to a version containing the fix (e.g., 1.13 or later). Public sour...

CVE-2025-27086

A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...

PT-2025-17459 · Hewlett Packard · Hpe Performance Cluster Manager

Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM versions through 1.12 Description: A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication. This issue affects the HPE Performance Cluster Manager...

Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞

A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager, a Hewlett Packard Enterprise company. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager versions prior to 1.13 that originates from a possible bypass of authenticatio...

Privilege Escalation

open-cluster-management.io/ocm is vulnerable to Privilege Escalation. The vulnerability is due to improper service account management, where the cluster-manager service account is bound to a ClusterRole with broad permissions, including the ability to create Pod resources. It allows attackers on...