Vulnerabilities
Summary — last 7 days
New vulnerabilities2,556▼ 319 vs. last week
Critical / high1,344▲ 80 vs. last week
New active exploitation (KEV)5▼ 7 vs. last week
Unscored (no CVSS)62▼ 466 vs. last week
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.5) | 0.73% | — | Jenkins HPE Network Virtualization | 6/30/2022 | 6/17/2026 | Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system. | |
| Modified | High (8.8) | 0.48% | — | Cisco Enterprise Network Virtualization Software | 10/17/2018 | 6/17/2026 | A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks. The vulnerability is due to improper validation of Origin headers on HTTP requests within the management interface. An attacker could exploit… | |
| Modified | Medium (4.9) | 1.5% | — | Cisco Enterprise Network Virtualization Software | 10/5/2018 | 6/17/2026 | A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a denial of service (DoS) attack against an affected system. The vulnerability is due to insufficient validation of user-provided input. An attacker… | |
| Modified | Critical (9.8) | 2.4% | — | Microfocus Data Center AutomationMicrofocus Hybrid Cloud ManagementMicrofocus Network Operations ManagementMicrofocus Operations Bridge+4 | 8/30/2018 | 6/17/2026 | Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02,… | |
| Modified | High (7.8) | 2.8% | — | HP Network Virtualization | 5/25/2015 | 6/17/2026 | HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569. | |
| Modified | High (9.4) | 19% | — | HP Network Virtualization | 7/26/2014 | 6/17/2026 | Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024. | |
| Modified | High (8.5) | 9.9% | — | HP Network Virtualization | 7/26/2014 | 6/17/2026 | Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023. |