Lucene search
+L

8260 matches found

Vulnrichment
Vulnrichment
added 2023/02/28 5:02 p.m.9 views

CVE-2023-22776 Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files...

4.9CVSS6.9AI score0.00709EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/28 4:58 p.m.68 views

CVE-2023-22775

CVE-2023-22775 affects ArubaOS, specifically an authenticated information disclosure via the ArubaOS command line interface. The vulnerability allows an authenticated attacker to access sensitive information beyond their current privilege level, impacting confidentiality (C:H) with no integrity o...

6.5CVSS6.3AI score0.00584EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/02/28 4:58 p.m.32 views

CVE-2023-22775 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface

A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level...

6.5CVSS6.5AI score0.00584EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/02/28 4:57 p.m.41 views

CVE-2023-22774 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...

7.2CVSS7.5AI score0.00766EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/28 4:56 p.m.13 views

CVE-2023-22773 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.

Authenticated path traversal vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files in the underlying operating system...

7.2CVSS7.5AI score0.00766EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/02/28 4:53 p.m.33 views

CVE-2023-22771 Insufficient Session Expiration in ArubaOS Command Line Interface

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account...

6.8CVSS6.8AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/28 4:53 p.m.12 views

CVE-2023-22771 Insufficient Session Expiration in ArubaOS Command Line Interface

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account...

6.8CVSS7AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/28 4:51 p.m.13 views

CVE-2023-22770 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS8.4AI score0.01481EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/28 4:49 p.m.82 views

CVE-2023-22767

CVE-2023-22767 describes authenticated command injection in ArubaOS CLI, allowing an attacker with high privileges (and network access) to execute arbitrary commands as the underlying OS user. Affects ArubaOS (used in Mobility Controllers/Gateways) via the CLI; CVSSv3.1 base score 7.2 (HIGH) with...

7.2CVSS7.7AI score0.01481EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/28 4:47 p.m.6 views

CVE-2023-22765 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.7AI score0.01481EPSS
SaveExploits0References1
CVE
CVE
added 2023/02/28 4:47 p.m.85 views

CVE-2023-22764

CVE-2023-22764 describes an authenticated command injection vulnerability in ArubaOS CLI that allows executing arbitrary commands as a privileged user on the underlying system. The issue affects ArubaOS as used in Aruba Mobility Controllers, Gateways, and related components, with exploitation req...

7.2CVSS7.7AI score0.01481EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/02/28 4:46 p.m.38 views

CVE-2023-22762 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS7.8AI score0.01481EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/02/28 4:46 p.m.9 views

CVE-2023-22762 Authenticated Remote Command Execution in the ArubaOS Command Line Interface

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

7.2CVSS8.2AI score0.01481EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2023/02/28 8:07 a.m.38 views

Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

8.8CVSS6.8AI score0.00642EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/02/28 12:00 a.m.9 views

PT-2023-2101 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to an insufficient session expiration in the command line interface of ArubaOS. This allows an attacker to maintain a session on an affected device even after the accou...

9.3CVSS3.6AI score0.00443EPSS
SaveExploits0References5
AlmaLinux
AlmaLinux
added 2023/02/28 12:00 a.m.32 views

Moderate: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: sinatra: Reflected File Download attack CVE-2022-45442 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

8.8CVSS8.6AI score0.00642EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/27 2:15 p.m.31 views

CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

7.5CVSS7.5AI score0.00738EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/27 2:15 p.m.6 views

DEBIAN-CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

7.5CVSS7.3AI score0.00738EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/27 2:15 p.m.13 views

UBUNTU-CVE-2023-23109

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

7.5CVSS5.8AI score0.00738EPSS
SaveExploits0References4
OSV
OSV
added 2023/02/27 2:15 p.m.6 views

UBUNTU-CVE-2023-23108

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...

7.5CVSS7.1AI score0.00919EPSS
SaveExploits1References4
Rows per page
Query Builder