All CVEs — page 276 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A buffer overflow in ClearPass Policy Manager's OnGuard agent allows authenticated local users to execute arbitrary code with elevated privileges, potentially leading to complete system compromise or service disruption.
A missing integrity verification vulnerability in Windows ClearPass Policy Manager client allows local attackers to elevate privileges and execute code with elevated rights. This represents a significant escalation risk for local system compromise.
A privilege escalation vulnerability in ClearPass Policy Manager's OnGuard Linux agent allows local users to escalate their privileges to root, potentially enabling full system compromise. This flaw affects Linux clients running the agent and could be exploited by attackers who already have user-level access.
This vulnerability allows an authenticated attacker to traverse paths and read or modify files on the underlying operating system, posing a significant risk to system integrity.
A command injection vulnerability allows an authenticated attacker to execute arbitrary commands, potentially gaining full administrative control over the ClearPass Policy Manager system.
A command injection vulnerability allows an attacker to execute arbitrary commands with elevated privileges, potentially leading to full system compromise.
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager allows unauthenticated attackers to execute arbitrary code, posing a significant risk.
This vulnerability allows a low-privileged authenticated attacker to execute arbitrary code with elevated privileges via the command line interface of ClearPass Policy Manager, potentially leading to full system compromise.
This vulnerability allows an attacker to inject malicious scripts into the ClearPass Policy Manager web interface, potentially leading to arbitrary code execution in the victim's browser.
A SQL injection vulnerability in ClearPass Policy Manager allows low-privileged attackers to execute arbitrary database commands, compromising the integrity and confidentiality of the database.
The flaw is an improper access control vulnerability in the Android client application for HPE Networking ClearPass Policy Manager, allowing unauthenticated attackers to obtain sensitive information with user interaction. This matters because it exposes sensitive data to unauthorized access, compromising user privacy and security.
This vulnerability allows unauthenticated attackers to bypass authentication controls in ClearPass Policy Manager, potentially gaining unauthorized access to the system.
A SQL injection vulnerability in ClearPass Policy Manager allows authenticated attackers to execute arbitrary database commands, posing a critical risk to the integrity and confidentiality of the database.
This vulnerability allows unauthenticated attackers to conduct SQL injection attacks, potentially leading to arbitrary database command execution.
A format string vulnerability in HPE Networking ClearPass Policy Manager allows unauthenticated attackers to corrupt process memory, potentially leading to arbitrary code execution.
The flaw allows unauthenticated remote attackers to bypass authentication and gain administrative access, compromising system security.
A missing integrity verification vulnerability in the OnGuard agent of ClearPass Policy Manager allows unauthenticated, remote attackers to execute arbitrary code with elevated privileges.