61508 matches found
PT-2026-84976
Name of the Vulnerable Software and Affected Versions OCS Inventory affected versions not specified Description An authenticated user with operator privileges can exploit a Server-Side Request Forgery SSRF issue. This occurs due to insufficient validation of the HTTPS SERV and FILE SERV parameter...
PT-2026-85290
Name of the Vulnerable Software and Affected Versions MOOS core-moos versions prior to 10.4.1 Description An issue exists where the software fails to validate that serialized string lengths are non-negative within the CMOOSMsg::operator function. Unauthenticated attackers can exploit this by...
CVE-2026-65140
Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
UBUNTU-CVE-2026-65140
Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
CVE-2026-85441: Signed to Unsigned Conversion Error
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process...
CVE-2026-85439: Improper Neutralization of Special Elements used in an OS Command
MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...
CVE-2026-76177: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in the /ocsreports/?function=teleactivate endpoint due to insufficient validation of the HTTPSSERV and FILESERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory...
CVE-2026-76176: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...
CVE-2026-76175: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...
CVE-2026-73723
A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...
CVE-2026-73747
CVE-2026-73747 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer . An authenticated low-privilege operator user with local access can elevate privileges and make limited modifications on the affected system. The CVSS 3.1 score is 2.5 (LOW) , reflecting a local attack...
CVE-2026-73747 Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer
A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system...
EUVD-2026-69473
A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system...
CVE-2026-73746 Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer API
A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...
EUVD-2026-69471
A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected...
EUVD-2026-69469
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...
EUVD-2026-69451
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...
CVE-2026-73714
CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...