Lucene search
K

36 matches found

Nextcloud
Nextcloud
added 2025/12/05 8:0 a.m.6 views

Calendar app allowed booking appointments without the generated token

None...

3.3CVSS5.2AI score0.00009EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 1:2 a.m.6 views

CVE-2022-37884

A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific operations which result in a Denial-of-Service condition. A successful exploitation of this vulnerability results in the unavailability of the guest interface in...

7.5CVSS7.1AI score0.00441EPSS
Exploits0
OSV
OSV
added 2022/10/07 7:15 p.m.1 views

CVE-2022-37895

An unauthenticated Denial of Service DoS vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x:...

4.9CVSS5.8AI score0.00557EPSS
Exploits0References2
OSV
OSV
added 2022/10/07 7:15 p.m.1 views

CVE-2022-37894

An unauthenticated Denial of Service DoS vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x:...

6.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2022/10/07 7:15 p.m.0 views

CVE-2022-37893

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x...

7.8CVSS6.1AI score0.00785EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 7:15 p.m.3 views

CVE-2022-37894

An unauthenticated Denial of Service DoS vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x:...

6.5CVSS5.8AI score0.00129EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 7:15 p.m.2 views

CVE-2022-37893

An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x...

7.8CVSS6.1AI score0.00785EPSS
Exploits0References3
OSV
OSV
added 2022/10/07 6:15 p.m.0 views

CVE-2022-37889

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...

9.8CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2022/10/07 6:15 p.m.1 views

CVE-2022-37886

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...

9.8CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2022/10/07 6:15 p.m.1 views

CVE-2022-37890

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS...

9.8CVSS6.3AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.1 views

CVE-2022-37891

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS...

9.8CVSS6.3AI score0.03023EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.2 views

CVE-2022-37890

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Successful exploitation results in the execution of arbitrary commands on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS...

9.8CVSS6.3AI score0.03023EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.3 views

CVE-2022-37886

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...

9.8CVSS6.9AI score0.01152EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.2 views

CVE-2022-37889

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...

9.8CVSS6.9AI score0.01152EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 6:15 p.m.2 views

CVE-2022-37892

A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a...

5.4CVSS6AI score0.01081EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/10/06 6:16 p.m.2 views

CVE-2022-37888

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...

9.8CVSS6.9AI score0.01152EPSS
Exploits0References4
OSV
OSV
added 2022/09/20 9:15 p.m.0 views

CVE-2022-23696

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

8.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/09/20 9:15 p.m.1 views

CVE-2022-23694

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

8.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/09/20 9:15 p.m.0 views

CVE-2022-23692

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

8.8CVSS5.8AI score0.00415EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/09/20 8:12 p.m.2 views

CVE-2022-23685

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery CSRF protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can...

7.7AI score0.00235EPSS
Exploits0References1
Rows per page
Query Builder