Show filters
503 Total Results
Displaying 11-20 of 503
Sort by:
Attacker Value
Unknown
CVE-2024-39356
Disclosure Date: February 12, 2025 (last updated February 13, 2025)
NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
0
Attacker Value
Unknown
CVE-2024-39271
Disclosure Date: February 12, 2025 (last updated February 13, 2025)
Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
0
Attacker Value
Unknown
CVE-2024-36285
Disclosure Date: February 12, 2025 (last updated February 13, 2025)
Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access.
0
Attacker Value
Unknown
CVE-2025-0675
Disclosure Date: February 07, 2025 (last updated February 07, 2025)
Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.
0
Attacker Value
Unknown
CVE-2025-0674
Disclosure Date: February 07, 2025 (last updated February 07, 2025)
Multiple Elber products are affected by an authentication bypass
vulnerability which allows unauthorized access to the password
management functionality. Attackers can exploit this issue by
manipulating the endpoint to overwrite any user's password within the
system. This grants them unauthorized administrative access to protected
areas of the application, compromising the device's system security.
0
Attacker Value
Unknown
CVE-2025-23057
Disclosure Date: January 28, 2025 (last updated January 29, 2025)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
0
Attacker Value
Unknown
CVE-2025-23056
Disclosure Date: January 28, 2025 (last updated January 29, 2025)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
0
Attacker Value
Unknown
CVE-2025-23055
Disclosure Date: January 28, 2025 (last updated January 29, 2025)
A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. If successfully exploited, a threat actor could run arbitrary script code in a victim's web browser within the context of the compromised interface.
0
Attacker Value
Unknown
CVE-2025-23054
Disclosure Date: January 28, 2025 (last updated January 29, 2025)
A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not allowed by their privilege level. Successful exploitation could allow an attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations.
0
Attacker Value
Unknown
CVE-2025-23053
Disclosure Date: January 28, 2025 (last updated January 29, 2025)
A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
0