1014334 matches found
EUVD-2026-84673
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...
CVE-2026-76711
A vulnerability exists in the Analytics and Location Engine (ALE) component of HPE Networking products. The impacted process improperly handles incoming socket connections , allowing an unauthenticated remote attacker to provide specially crafted input during the connection process. Successful ex...
EUVD-2026-84671
A vulnerability exists in an Analytics and Location Engine ALE component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful...
CVE-2026-76711 Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in an Analytics and Location Engine ALE component where the impacted process improperly processes incoming socket connections. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input during the connection process. Successful...
EUVD-2026-84670
A vulnerability exists in the Analytics and Location Engine ALE management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful...
CVE-2026-76710
A vulnerability in the HPE Networking Analytics and Location Engine (ALE) management interface allows an unauthenticated remote attacker to disclose sensitive information. By sending specially crafted requests to specific internal endpoints, an attacker can gain access to site hierarchy , infrast...
CVE-2026-76710 Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the Analytics and Location Engine ALE management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful...
CVE-2026-76709
A vulnerability exists in the internal administrative component of the HPE Networking Analytics and Location Engine (ALE) . This flaw allows an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges . Successful exploitation could lead to a f...
CVE-2026-76709 Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...
EUVD-2026-84668
A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...
EUVD-2026-84669
A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...
CVE-2026-76708
A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) because the application and its underlying operating system utilize default, hard-coded credentials for multiple administrative and system accounts. An unauthenticated remote attacker can exploit this by logging in w...
CVE-2026-28324
The SolarWinds Observability Self-Hosted platform is vulnerable to an unauthenticated remote code execution (RCE) vulnerability. The root cause is identified as insufficient integrity checks affecting installations configured in non-default and non-secure configurations . This vulnerability has a...
EUVD-2026-84807
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...
CVE-2026-28324 SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...
CVE-2026-57149
plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5.0.0 and prior to versions 5.0.8, 6.0.4, and 7.0.2, the Classic portlet plone.app.portlets.portlets.classic used its...
CVE-2026-57149 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5.0.0 and prior to versions 5.0.8, 6.0.4, and 7.0.2, the Classic portlet plone.app.portlets.portlets.classic used its...
CVE-2026-93981
A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...
CVE-2026-93379
A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Object Request Broker ORB component allows a remote attacker to bypass site isolation. By crafting a malicious HTML page, an attacker can exploit this flaw, potentially leading to unauthorized access to sensitive...
