301105 matches found
CVE-2026-79809
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager . This flaw allows a remote attacker to influence authorization decisions and potentially be assigned an unintended role . No specific version numbers, root cause details, or remediation steps ar...
CVE-2026-79808
A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager . This flaw could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or cause a disruption in service availability. No specific patch versions, root cause...
CVE-2026-79808 Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent
A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service...
EUVD-2026-93893
A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges. A successful exploit could allow these users to execute attacker-supplied code with elevated privileges on t...
CVE-2026-79799 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...
EUVD-2026-93884
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...
CVE-2026-79796 Authentication Bypass Vulnerabilities in ClearPass Policy Manager
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain unauthorized access to the affected...
CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
EUVD-2026-93979
Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-76742 Authentication Bypass in the Web Management Interface of AOS-S
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected system...
CVE-2026-76742
An authentication bypass vulnerability exists in the web management interface of AOS-S . Successful exploitation by an unauthenticated remote attacker could result in unauthorized access to the affected system. The vulnerability carries a CRITICAL base severity score of 9.8. No specific root caus...
EUVD-2026-93975
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...
CVE-2026-76741 Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service condition on the affected system...
CVE-2026-106385
A race condition (CWE-362) exists in the Chromoting component of Google Chrome versions prior to 155.0.8059.39 . A remote attacker leveraging social engineering could use crafted network traffic to potentially bypass system access restrictions . The Chromium security severity for this vulnerabili...
CVE-2026-106294
Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...
EUVD-2026-93639
Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106195
Google Chrome on macOS (versions prior to 155.0.8059.39 ) is vulnerable to an incorrect authorization flaw in the Chromoting component. A remote attacker can exploit this by sending crafted network traffic to bypass system access restrictions. This vulnerability could potentially allow an attacke...
EUVD-2026-93641
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...
CVE-2026-106350
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...