Lucene search
+L

11956 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-92041: Protection Mechanism Failure

Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

9.1CVSS8.2AI score0.00316EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•20 views

PT-2026-92011

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description A mitigation bypass exists within the Networking component. Recommendations Update Firefox to...

9.8CVSS6.7AI score0.00609EPSS
SaveExploits1References205
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-91962

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 140.16 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 140.16 Thunderbird versions prior to 153.3 Description A use-after-free issu...

8.8CVSS6.7AI score0.00312EPSS
SaveExploits0References372
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•31 views

PT-2026-91972

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Thunderbird versions prior to 156 Description Incorrect boundary conditions exist within the Networking: HTTP component. Recommendations Update Firefox to version 156. Update Thunderbird to version 156...

9.8CVSS6.7AI score0.00551EPSS
SaveExploits0References84
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•36 views

PT-2026-92006

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Information disclosure occurs within the Networking component. Recommendations Update Firefox t...

9.8CVSS6.7AI score0.00609EPSS
SaveExploits1References206
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•31 views

PT-2026-92012

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Incorrect boundary conditions exist within the Networking component. Recommendations Update...

9.8CVSS6.7AI score0.00609EPSS
SaveExploits1References205
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•38 views

PT-2026-92444

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description An issue exists in the API of the HPE Networking EdgeConnect SD-WAN Orchestrator that allows an unauthenticated remote actor to bypass authentication...

8.1CVSS5.9AI score0.00456EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•24 views

PT-2026-92467

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description An unauthenticated adjacent attacker can view certain system memory contents. This exposure may provide insights into internal services and workflows, which...

4.3CVSS5.8AI score0.00233EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92439

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description An unauthenticated adjacent attacker can conduct denial-of-service attacks. Successful exploitation may cause the system to crash, which prevents it from...

8.6CVSS5.7AI score0.0046EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•30 views

PT-2026-92434

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description Buffer overflow vulnerabilities in the underlying operating system could allow an unauthenticated remote attacker to execute arbitrary code. A buffer overfl...

9.8CVSS7AI score0.01014EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•33 views

PT-2026-92466

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to obtain sensitive information. This could lead to the disclosure of...

5.3CVSS5.9AI score0.0042EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92453

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways...

7CVSS5.8AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92438

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the API endpoint allows a low-privilege authenticated remote attacker to escalate privileges. This could lead to the execution of arbitrary system...

8.8CVSS6.1AI score0.00625EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•31 views

PT-2026-92457

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

6.5CVSS5.9AI score0.00462EPSS
SaveExploits0References2
HPE Security Bulletins
HPE Security Bulletins
•added 2026/09/15 12:00 a.m.•44 views

HPESBNW05135 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways & Orchestrator

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software - Please refer to the "Vulnerability Summary" section for details about affected software versions Aruba EdgeConnect...

9.9CVSS6.6AI score0.04534EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•29 views

PT-2026-92462

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the operating system allows an authenticated local attacker to trigger a denial-of-service. This could disrupt system operations and lead to an...

5.8CVSS5.7AI score0.00112EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/09/14 4:34 p.m.•26 views

OESA-2026-3836 openjdk-25 security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2;...

6.8CVSS6AI score0.0031EPSS
SaveExploits0References4
osv_oesa
osv_oesa
•added 2026/09/14 4:34 p.m.•36 views

OESA-2026-3835 openjdk-25 security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2;...

6.8CVSS6AI score0.0031EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•14 views

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tools or runtimes. Moby’s networking implementation allows for multiple networks to be defined, each with its own IP address range and gateway. This feature is...

7.5CVSS6AI score0.00744EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•15 views

Astra Linux – Vulnerability in Firefox

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

9.6CVSS6.2AI score0.00393EPSS
SaveExploits0References1
Rows per page
Query Builder