CVE Vulnerability Database
Search and browse 425,004 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-79797 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Ma... |
| CVE-2026-79796 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow ... |
| CVE-2026-79794 | CRITICAL | 9.1 | 0.3% | Oct 6, 2026 | A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authentic... |
| CVE-2026-76754 | CRITICAL | 9.8 | 0.4% | Oct 6, 2026 | A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to c... |
| CVE-2026-76753 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an... |
| CVE-2026-76752 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass P... |
| CVE-2026-76751 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful explo... |
| CVE-2026-76750 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager.... |
| CVE-2026-76749 | MEDIUM | 6.5 | 0.4% | Oct 6, 2026 | A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated... |
| CVE-2026-76748 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated re... |
| CVE-2026-76747 | CRITICAL | 9.1 | 0.4% | Oct 6, 2026 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe... |
| CVE-2026-76746 | CRITICAL | 9.3 | 0.2% | Oct 6, 2026 | An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated... |
| CVE-2026-76745 | CRITICAL | 9.6 | 0.2% | Oct 6, 2026 | Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful ... |
| CVE-2026-76744 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthe... |
| CVE-2026-76743 | CRITICAL | 9.8 | 0.6% | Oct 6, 2026 | A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticate... |
| CVE-2026-76742 | CRITICAL | 9.8 | 0.6% | Oct 6, 2026 | Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allo... |
| CVE-2026-76741 | MEDIUM | 6.5 | 0.4% | Oct 6, 2026 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authent... |
| CVE-2026-76061 | MEDIUM | 5.5 | 0.2% | Oct 6, 2026 | A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malici... |
| CVE-2026-73278 | CRITICAL | 9.8 | 0.5% | Oct 6, 2026 | Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only ... |
| CVE-2026-70357 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the G... |
| CVE-2026-106454 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardTo... |
| CVE-2026-106453 | MEDIUM | 5.3 | 0.4% | Oct 6, 2026 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength... |
| CVE-2026-106452 | MEDIUM | 5.3 | — | Oct 6, 2026 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validat... |
| CVE-2026-106451 | HIGH | 7.3 | 0.1% | Oct 6, 2026 | yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.cre... |
| CVE-2026-106450 | MEDIUM | 5.3 | 0.4% | Oct 6, 2026 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() all... |