Lucene search
+L

3830 matches found

CNNVD
CNNVD
added 2026/02/19 12:00 a.m.16 views

WordPress plugin Aruba HiSpeed Cache 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.7AI score0.00283EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.12 views

PT-2026-20573

Name of the Vulnerable Software and Affected Versions Aruba HiSpeed Cache versions up to and including 3.0.2 Description The Aruba HiSpeed Cache plugin for WordPress is susceptible to Reflected Cross-Site Scripting through the dbstatus parameter. Insufficient input sanitization and output escapin...

6.1CVSS5.3AI score0.00283EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.16 views

WordPress plugin Aruba HiSpeed Cache 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00194EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.17 views

PT-2026-20574

Name of the Vulnerable Software and Affected Versions Aruba HiSpeed Cache versions up to and including 3.0.2 Description The Aruba HiSpeed Cache plugin for WordPress is susceptible to unauthorized data modification because of absent capability checks in several functions. This allows...

6.5CVSS5.2AI score0.00277EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/02/19 12:00 a.m.20 views

PT-2026-20663

Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through = 3.0.4...

5.5AI score0.00194EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.18 views

WordPress plugin Aruba HiSpeed Cache 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00277EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/18 12:59 p.m.12 views

WordPress Aruba HiSpeed Cache plugin <= 3.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Aruba HiSpeed Cache versions = 3.0.4...

6.5CVSS5.4AI score0.00194EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/02/18 12:16 a.m.19 views

CVE-2026-23599

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...

7.8CVSS0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/17 11:04 p.m.39 views

CVE-2026-23599 Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...

7.8CVSS0.00143EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/17 11:04 p.m.109 views

CVE-2026-23599

CVE-2026-23599 describes a local privilege-escalation vulnerability in HPE Aruba Networking ClearPass OnGuard Software for Linux. An attacker with local access could exploit this to achieve arbitrary code execution with root privileges. The CVSS 3.1 data indicates a local attack vector, low attac...

7.8CVSS6.4AI score0.00143EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/17 9:22 p.m.10 views

CVE-2026-23598

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.8AI score0.00326EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/17 9:22 p.m.9 views

CVE-2026-23597

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.8AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/17 9:22 p.m.12 views

CVE-2026-23598

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS0.00326EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 8:47 p.m.16 views

CVE-2026-23598

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.5AI score0.00326EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/17 8:47 p.m.7 views

CVE-2026-23598 Unauthenticated Information Disclosure in application API allows sensitive system information exposure

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.5AI score0.00326EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/17 8:47 p.m.51 views

CVE-2026-23598 Unauthenticated Information Disclosure in application API allows sensitive system information exposure

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS0.00326EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/17 8:46 p.m.6 views

CVE-2026-23597 Unauthenticated Information Disclosure in application API allows sensitive system information exposure

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.5AI score0.00247EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 8:46 p.m.35 views

CVE-2026-23597

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS5.5AI score0.00247EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/17 8:46 p.m.60 views

CVE-2026-23597 Unauthenticated Information Disclosure in application API allows sensitive system information exposure

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well...

6.5CVSS0.00247EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/17 8:46 p.m.33 views

CVE-2026-23597

The CVE-2026-23597 entry concerns an issue in the API error handling of HPE Aruba Networking 5G Core server API that could allow an unauthenticated remote attacker to obtain sensitive information. The available documents indicate that exploitation could reveal user accounts, roles, system configu...

6.5CVSS5.5AI score0.00247EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder