CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

517 matches found

Vulnrichment•added 2025/10/14 5:1 p.m.•2 views

CVE-2025-37144 Authenticated Arbitrary File Download Vulnerabilities in a Low-Level Interface Library Affecting AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-Based Management Interface

Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6.5AI score0.00418EPSS

Exploits0References1

CVE•added 2025/10/14 5:1 p.m.•18 views

CVE-2025-37144

CVE-2025-37144 describes an authentication-requiring arbitrary file download vulnerability in a low-level interface library of ArubaOS AOS-10 GW and AOS-8 Controller/Mobility Conductor. Exploitation could let an authenticated attacker download arbitrary files through crafted requests. The connect...

4.9CVSS6.5AI score0.00418EPSS

Exploits0References1Affected Software1

Positive Technologies•added 2025/10/14 12:0 a.m.•5 views

PT-2025-41988

Name of the Vulnerable Software and Affected Versions AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description An issue exists in a low-level interface library that could allow an authenticated malicious actor to download arbitrary...

4.9CVSS6.4AI score0.00418EPSS

Exploits0References4

Positive Technologies•added 2025/10/14 12:0 a.m.•5 views

PT-2025-41989

Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems affected versions not specified Description An issue exists that could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploit...

4.9CVSS6.4AI score0.00418EPSS

Exploits0References4

CNNVD•added 2025/10/14 12:0 a.m.•4 views

Hewlett Packard Enterprise ArubaOS 安全漏洞

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that originates from a low-level interface inventory in an arbitrary file download...

4.9CVSS6.6AI score0.00418EPSS

Exploits0References2