2966 matches found
CVE-2026-84147 Remote Code Execution Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
CVE-2026-84147
Manacle Technologies ERP System is vulnerable to remote code execution due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker can upload arbitrary files to a web-accessible directory on the targeted system, enabling arbi...
PT-2026-84200
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...
PT-2026-84476
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. This allows an authenticated user with low privilege operator permissions to modify the state of specific system settings...
PT-2026-84480
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the API endpoint allows a remote actor to bypass established access controls. This may result in unauthorized access to management functionality that is intended to be restricted by...
PT-2026-84492
Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...
PT-2026-84500
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...
CVE-2026-73711: Improper Privilege Management
A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...
CVE-2026-84147: Unrestricted Upload of File with Dangerous Type
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
CVE-2026-73773: Uncontrolled Resource Consumption
An unauthenticated Denial-of-Service DoS vulnerability exists in the API endpoint of AOS-CX. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service...
CVE-2026-73783: Stack-based Buffer Overflow
Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system...
PT-2026-84446
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...
CVE-2026-73710: Missing Authentication for Critical Function
Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to make limited unauthorized modifications to the underlying operating system and disrupt the...
PT-2026-84441
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations,...
PT-2026-84449
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to view information handled by the system. This could enable an attacker to gain insight into...
CVE-2026-73752: Improper Limitation of a Pathname to a Restricted Directory
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...
PT-2026-84415
A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host...
CVE-2026-73766: Improper Neutralization of Special Elements used in a Command
Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...
PT-2026-84418
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A sensitive information disclosure issue exists in the API of HPE Networking Fabric Composer. An authenticated user with low privilege operator permissions can access...
PT-2026-84484
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description Command injection flaws in the API endpoint allow an authenticated remote attacker with administrative privileges to inject and execute arbitrary commands as a privileged user on the underlyin...