Lucene search
+L

9662 matches found

Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•41 views

CVE-2026-79799 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

8.8CVSS0.00329EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•41 views

CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

9.9CVSS0.00343EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:17 p.m.•6 views

EUVD-2026-93885

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitra...

9.9CVSS6.2AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•32 views

CVE-2026-79798

The ClearPass Policy Manager web-based management interface contains SQL injection vulnerabilities that can be exploited by a low-privileged authenticated remote attacker. Successful exploitation allows the attacker to execute arbitrary database commands against the ClearPass Policy Manager insta...

9.9CVSS6.2AI score0.00343EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 7:16 p.m.•5 views

EUVD-2026-93882

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

9.1CVSS6.2AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:16 p.m.•2 views

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

9.1CVSS6.2AI score0.00297EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:16 p.m.•36 views

CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

9.1CVSS0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:16 p.m.•10 views

CVE-2026-79794

The ClearPass Policy Manager web-based management interface contains a SQL injection vulnerability . This flaw allows an authenticated remote attacker to perform SQL injection attacks against the ClearPass Policy Manager instance. If successfully exploited, an attacker could execute arbitrary dat...

9.1CVSS6.2AI score0.00297EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:16 p.m.•4 views

CVE-2026-76752 Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affect...

9.8CVSS6AI score0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:16 p.m.•39 views

CVE-2026-76752 Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affect...

9.8CVSS0.0047EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:16 p.m.•8 views

CVE-2026-76752

HPE Networking ClearPass Policy Manager contains authentication bypass vulnerabilities within its web-based management and API interfaces . A successful exploit allows an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected ...

9.8CVSS6AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•5 views

PT-2026-107191

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description Authentication bypass flaws exist in the web-based management and API interfaces. These issues allow an unauthenticated remote attacker to circumvent...

9.8CVSS5.9AI score0.0047EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•5 views

PT-2026-107194

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database...

9.1CVSS6.2AI score0.00297EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107198

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...

8.8CVSS6.3AI score0.00329EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•6 views

Cisco ASA Cross-site Scripting (CVE-2019-12695)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web- based management interface of an...

6.1CVSS6.2AI score0.01066EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/03 12:31 a.m.•7 views

EUVD-2026-91820

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00202EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/02 9:27 p.m.•35 views

CVE-2026-93474 Monta monta.app Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS0.00202EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/02 4:24 a.m.•74 views

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

6.2AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/02 3:36 a.m.•15 views

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•4 views

CVE-2026-93474: Insufficiently Protected Credentials

Charging station authentication identifiers are publicly accessible via web-based mapping platforms...

6.9CVSS5.8AI score0.00202EPSS
SaveExploits0References2
Rows per page
Query Builder