Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 531

Export CSV
CVE-2026-95719

Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-95720

Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-95721

Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interface

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-79887

Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)

A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device control, enabling interception of network traffic and potential compromise of connected systems.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-95712

Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 via the PAPI Protocol

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability of the affected service.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-95706

Authenticated Command Injection Vulnerabilities in AOS-8

Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying operating system.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-95710

Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-10 or AOS-8

An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-79894

Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Aos
CVE-2026-79821

HPE NonStop SOAP 4.0 - Memory corruption

A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Soap 4.0
CVE-2026-79824

HPE NonStop Python 3.x - Directory traversal vulnerability

A directory traversal vulnerability in HPE NonStop Python 3.x could allow  attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Python 3.x
CVE-2026-79825

HPE NonStop NDSREST - Heap buffer overflow vulnerability

A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Ndsrest
CVE-2026-79826

HPE NonStop OCAX - Heap buffer overflow vulnerability

A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Ocax
CVE-2026-79840

HPE NonStop XABroker - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Xabroker
CVE-2026-79843

HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability

A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Sql/mx Exe
CVE-2026-73799

HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Snmp Trap Multiplexer
CVE-2026-76656

HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Tcp/ip Utilities
CVE-2026-76659

HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Tcp/ip Utilities
CVE-2026-79822

HPE NonStop TNS/X Native Inspect - Execution flow vulnerability

A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Tns/x Native Inspect
CVE-2026-79823

HPE NonStop EMS Distributor - Buffer Overflow vulnerability

HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Ems Distributor
CVE-2026-79827

HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability

A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hpe
Products
Nonstop Inspect Subsystem