Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2015-5477KEVexploit ×10 | 7.5 high | 100.0% | juniper, fedoraproject, junos, fedora, enterprise_linux | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. | 9 Oct |
| CVE-2026-63455 | 9.8 critical | 1.0% | no CPE yet | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system. | Sat 24 Oct |
| CVE-2026-63456 | 9.8 critical | 1.0% | no CPE yet | Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system. | Sat 24 Oct |
| CVE-2026-76753 | 9.8 critical | 1.0% | no CPE yet | A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code. | 8 Oct |
| CVE-2026-76750 | 9.8 critical | 1.0% | no CPE yet | Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system. | 8 Oct |
| CVE-2026-44880 | 8.8 high | 1.0% | hpe, arubaos-cx | A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow an remote low-privileged user to execute arbitrary code as a privileged user on the underlying operating system. | Sat 24 Oct |
| CVE-2025-37157 | 8.8 high | 1.0% | hpe, arubaos-cx | A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system. | 18 Oct |
| CVE-2025-37158 | 8.8 high | 1.0% | hpe, arubaos-cx | A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system. | 18 Oct |
| CVE-2026-76655 | 7.5 high | 1.0% | no CPE yet | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution | 14 Oct |
| CVE-2026-79834 | 7.4 high | 1.0% | no CPE yet | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. | 15 Oct |
| CVE-2026-63453 | 7.2 high | 1.0% | hpe, arubaos-cx | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system. | Sat 24 Oct |
| CVE-2026-63454 | 7.2 high | 1.0% | hpe, arubaos-cx | An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution. | Sat 24 Oct |
| CVE-2025-37163 | 7.2 high | 1.0% | arubanetworks, airwave | A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system. | 18 Oct |
| CVE-2026-79810 | 7.2 high | 1.0% | no CPE yet | Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. | 8 Oct |
| CVE-2026-79801 | 9.8 critical | 0.00% | no CPE yet | A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Successful exploitation could allow an attacker to execute arbitrary code on the affected client system. | 8 Oct |
| CVE-2026-76752 | 9.8 critical | 0.00% | no CPE yet | Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to circumvent existing authentication controls and gain administrative access to the affected system. | 8 Oct |
| CVE-2026-23818 | 9.6 critical | 0.00% | hpe, aruba_networking_private_5g_core | A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled server hosting a spoofed login page prompting the unsuspecting victim to give away their credentials, which could then be captured by the attacker, before being redirected back to the legitimate login page. | Mon 26 Oct |
| CVE-2026-79842 | 9.1 critical | 0.00% | no CPE yet | An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 | 10 Oct |
| CVE-2026-79797 | 8.8 high | 0.00% | no CPE yet | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to obtain sensitive information from the affected user. | 8 Oct |
| CVE-2026-76660 | 8.7 high | 0.00% | no CPE yet | A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. | 15 Oct |
| CVE-2026-79883 | 8.3 high | 0.00% | no CPE yet | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by AOS-10, and to interrupt the normal operation of the affected service. | Mon 26 Oct |
| CVE-2026-79821 | 8.2 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. | 15 Oct |
| CVE-2026-79829 | 8.2 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt. | 15 Oct |
| CVE-2026-73790 | 8.2 high | 0.00% | no CPE yet | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. | 14 Oct |
| CVE-2026-73798 | 8.2 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. | 14 Oct |
| CVE-2019-11137 | 8.2 high | 0.00% | intel, hpe, xeon_platinum_8253_firmware, xeon_platinum_8256_firmware, xeon_platinum_8260_firmware | Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access. | 8 Oct |
| CVE-2026-79824 | 8.0 high | 0.00% | no CPE yet | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive. | 15 Oct |
| CVE-2026-73793 | 7.9 high | 0.00% | no CPE yet | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. | 14 Oct |
| CVE-2025-71238 | 7.8 high | 0.00% | linux, linux_kernel | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix bsg_done() causing double free Kernel panic observed on system, [5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: supervisor write access in kernel mode [5353358.825195] #PF: error_code(0x0002) - not-present page [5353358.825196] PGD 100006067 P4D 0 [5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI [5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1 [5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025 [5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10 [5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246 [5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000 [5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000 [5353358.825214] RBP: 0000000000010000 R08: ff5f5e897b024000 R09: 0000000000000000 [5353358.825215] R10: ff46cf8c40517000 R11: 0000000000000001 R12: 0000000000008090 [5353358.825216] R13: ff591da8f4f6b720 R14: 0000000000001000 R15: 0000000000000000 [5353358.825218] FS: 00007f1e88d47740(0000) GS:ff46cf935f940000(0000) knlGS:0000000000000000 [5353358.825219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [5353358.825220] CR2: ff5f5e897b024000 CR3: 0000000231532004 CR4: 0000000000771ef0 [5353358.825221] PKRU: 55555554 [5353358.825222] Call Trace: [5353358.825223] <TASK> [5353358.825224] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825229] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825232] ? sg_copy_buffer+0xc8/0x110 [5353358.825236] ? __die_body.cold+0x8/0xd [5353358.825238] ? page_fault_oops+0x134/0x170 [5353358.825242] ? kernelmode_fixup_or_oops+0x84/0x110 [5353358.825244] ? exc_page_fault+0xa8/0x150 [5353358.825247] ? asm_exc_page_fault+0x22/0x30 [5353358.825252] ? memcpy_erms+0x6/0x10 [5353358.825253] sg_copy_buffer+0xc8/0x110 [5353358.825259] qla2x00_process_vendor_specific+0x652/0x1320 [qla2xxx] [5353358.825317] qla24xx_bsg_request+0x1b2/0x2d0 [qla2xxx] Most routines in qla_bsg.c call bsg_done() only for success cases. However a few invoke it for failure case as well leading to a double free. Validate before calling bsg_done(). | 19 Oct |
| CVE-2025-37155 | 7.8 high | 0.00% | hpe, arubaos-cx | A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system. | 18 Oct |
| CVE-2026-76661 | 7.6 high | 0.00% | no CPE yet | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. | 15 Oct |
| CVE-2026-79832 | 7.6 high | 0.00% | no CPE yet | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. | 15 Oct |
| CVE-2026-73799 | 7.5 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption | 15 Oct |
| CVE-2026-76659 | 7.5 high | 0.00% | no CPE yet | A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service. | 15 Oct |
| CVE-2026-76663 | 7.5 high | 0.00% | no CPE yet | A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS. | 15 Oct |
| CVE-2026-79833 | 7.5 high | 0.00% | no CPE yet | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service. | 15 Oct |
| CVE-2025-37159 | 7.3 high | 0.00% | hpe, arubaos-cx | A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of sensitive configuration data. | 18 Oct |
| CVE-2026-79840 | 7.3 high | 0.00% | no CPE yet | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. | 15 Oct |
| CVE-2026-79839 | 7.3 high | 0.00% | no CPE yet | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. | 15 Oct |
| CVE-2026-79838 | 7.3 high | 0.00% | no CPE yet | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. | 15 Oct |
| CVE-2026-79837 | 7.3 high | 0.00% | no CPE yet | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior. | 15 Oct |
| CVE-2026-76740 | 7.2 high | 0.00% | no CPE yet | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary commands on the RMC. | 21 Oct |
| CVE-2026-76665 | 7.1 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. | 15 Oct |
| CVE-2026-79822 | 7.1 high | 0.00% | no CPE yet | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. | 15 Oct |
| CVE-2026-79825 | 7.1 high | 0.00% | no CPE yet | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. | 15 Oct |
| CVE-2026-79826 | 7.1 high | 0.00% | no CPE yet | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. | 15 Oct |
| CVE-2026-79827 | 7.1 high | 0.00% | no CPE yet | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. | 15 Oct |
| CVE-2026-79828 | 7.1 high | 0.00% | no CPE yet | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. | 15 Oct |
| CVE-2024-40978 | 7.1 high | 0.00% | linux, linux_kernel | In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf() and then call simple_read_from_buffer(), which in turns make the copy_to_user() call. BUG: unable to handle page fault for address: 00007f4801111000 PGD 8000000864df6067 P4D 8000000864df6067 PUD 864df7067 PMD 846028067 PTE 0 Oops: 0002 [#1] PREEMPT SMP PTI Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 06/15/2023 RIP: 0010:memcpy_orig+0xcd/0x130 RSP: 0018:ffffb7a18c3ffc40 EFLAGS: 00010202 RAX: 00007f4801111000 RBX: 00007f4801111000 RCX: 000000000000000f RDX: 000000000000000f RSI: ffffffffc0bfd7a0 RDI: 00007f4801111000 RBP: ffffffffc0bfd7a0 R08: 725f746f6e5f6f64 R09: 3d7265766f636572 R10: ffffb7a18c3ffd08 R11: 0000000000000000 R12: 00007f4881110fff R13: 000000007fffffff R14: ffffb7a18c3ffca0 R15: ffffffffc0bfd7af FS: 00007f480118a740(0000) GS:ffff98e38af00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4801111000 CR3: 0000000864b8e001 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x183/0x510 ? exc_page_fault+0x69/0x150 ? asm_exc_page_fault+0x22/0x30 ? memcpy_orig+0xcd/0x130 vsnprintf+0x102/0x4c0 sprintf+0x51/0x80 qedi_dbg_do_not_recover_cmd_read+0x2f/0x50 [qedi 6bcfdeeecdea037da47069eca2ba717c84a77324] full_proxy_read+0x50/0x80 vfs_read+0xa5/0x2e0 ? folio_add_new_anon_rmap+0x44/0xa0 ? set_pte_at+0x15/0x30 ? do_pte_missing+0x426/0x7f0 ksys_read+0xa5/0xe0 do_syscall_64+0x58/0x80 ? __count_memcg_events+0x46/0x90 ? count_memcg_event_mm+0x3d/0x60 ? handle_mm_fault+0x196/0x2f0 ? do_user_addr_fault+0x267/0x890 ? exc_page_fault+0x69/0x150 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f4800f20b4d | 15 Oct |
| CVE-2025-37156 | 6.8 medium | 0.00% | hpe, arubaos-cx | A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional. | 18 Oct |
50 of 78 · Next
Download these 78 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.