Complete feed
Security advisories & CVEs
47 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Medium [CVE-2024-33516] ArubaOS: unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed
An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provided by ArubaOS. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the controller.
Medium [CVE-2024-26303] ArubaOS-Switch: Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon
Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon
Medium [CVE-2024-25615] ArubaOS: unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
Medium [CVE-2024-25614] ArubaOS: There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS.
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller.
Medium [CVE-2024-26302] vulnerability in the web-based management interface of ClearPass Policy Manager could
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
Medium [CVE-2024-26300] vulnerability in the guest interface of ClearPass Policy Manager could
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Medium [CVE-2024-26299] vulnerability in the web-based management interface of ClearPass Policy Manager could
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.