Lucene search
+L

2577 matches found

Vulnrichment
Vulnrichment
added 2025/10/14 4:59 p.m.2 views

CVE-2025-37142 Authenticated Arbitrary File Download Vulnerabilities in CLI Binary of AOS-8 Controller/Mobility Conductor Web-Based Management Interface

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6.5AI score0.00326EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 4:59 p.m.24 views

CVE-2025-37142

CVE-2025-37142 affects ArubaOS AOS-10 GW and AOS-8 Controller/Mobility Conductor CLI Binary. The vulnerability is an authenticated arbitrary file download flaw that could be exploited by a user with high privileges over the network to download arbitrary files. The NVD/NVDA/Red Hat EU and Nessus-r...

4.9CVSS6.5AI score0.00326EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/10/14 4:54 p.m.30 views

CVE-2025-37133

CVE-2025-37133 affects ArubaOS AOS-8 Controller/Mobility Conductor CLI binary. An authenticated attacker could inject commands with privileged execution rights. The Nessus plugin ARUBAOS-HPESBNW04957 notes multiple vulnerabilities including this CVE, and lists affected ArubaOS versions prior to c...

7.2CVSS7.5AI score0.01257EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/14 4:42 p.m.11 views

CVE-2025-37146 Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution

A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS0.0083EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/14 4:42 p.m.3 views

CVE-2025-37146 Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution

A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

7.2CVSS7.4AI score0.0083EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Hewlett Packard Enterprise ArubaOS 安全漏洞

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that stems from an arbitrary file download vulnerability in the web-based management...

4.9CVSS6.6AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41987

Name of the Vulnerable Software and Affected Versions AOS-10 GW and AOS-8 Controller/Mobility Conductor affected versions not specified Description An arbitrary file download issue exists in the web-based management interface. Exploitation of this issue could allow an authenticated malicious acto...

4.9CVSS6.3AI score0.00355EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 3:30 p.m.6 views

EUVD-2025-32713

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...

7.9CVSS5.3AI score0.0021EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/07 1:15 p.m.11 views

CVE-2025-3718

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...

5.4CVSS5.8AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2008-6668

Malware in sbrugna...

9CVSS6.4AI score0.02098EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-17295

Malware in sbrugna...

8CVSS8AI score0.00928EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-24549

Malware in sbrugna...

9CVSS7AI score0.028EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-12962

Malware in sbrugna...

6.1CVSS6.3AI score0.01543EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-15818

Malware in sbrugna...

5.4CVSS5.5AI score0.00902EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-13741

Malware in sbrugna...

4.8CVSS5.1AI score0.00638EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-1231

Malware in sbrugna...

5.4CVSS5.5AI score0.00678EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-10259

Malware in sbrugna...

6.1CVSS6.3AI score0.01211EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2017-17298

Malware in sbrugna...

8.8CVSS8.8AI score0.02597EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-13472

Malware in sbrugna...

9CVSS7AI score0.02452EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2013-3522

Malware in sbrugna...

7.8CVSS7.5AI score0.02189EPSS
SaveExploits1References2
Rows per page
Query Builder