LIVE FEED
2092 events · 4 sources · newest first
Events in view
2092
all sources
Critical
0
severity
Active sources
4
collectors
Last sync
2026-10-16 02:00
UTC
2026-10-15
CISA KEV
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files...
2026-10-14
CISA KEV
Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s...
2026-10-14
CISA KEV
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
2026-10-14
CISA KEV
Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This...
2026-10-14
CISA KEV
Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.
2026-10-13
CISA KEV
Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.
2026-10-13
CISA KEV
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
2026-10-12
NVD CVE
CVE-2026-19622: IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass auth
HIGH
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.
2026-10-09
NVD CVE
CVE-2026-76779: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16,
HIGH
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access...
2026-10-08
NVD CVE
CVE-2026-81932: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or...
2026-10-08
NVD CVE
CVE-2026-82895: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-08
CISA KEV
ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
2026-10-08
NVD CVE
CVE-2026-14888: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.
HIGH
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow.
2026-10-08
NVD CVE
CVE-2026-82334: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-
HIGH
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid...
2026-10-08
NVD CVE
CVE-2026-84246: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-08
NVD CVE
CVE-2026-84198: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
2026-10-08
NVD CVE
CVE-2026-84058: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer over
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to...
2026-10-08
CISA KEV
Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s)...
2026-10-08
NVD CVE
CVE-2026-82900: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to d
HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.
2026-10-08
NVD CVE
CVE-2026-84057: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e
HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
2026-10-08
CISA KEV
Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.
2026-10-08
CISA KEV
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
2026-10-08
NVD CVE
CVE-2026-84209: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e
HIGH
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
2026-10-08
NVD CVE
CVE-2026-82344: IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer ove
HIGH
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login...
2026-10-08
NVD CVE
CVE-2026-82335: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buff
HIGH
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an...
2026-10-08
CISA KEV
ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.
2026-10-08
NVD CVE
CVE-2026-84035: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker
HIGH
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
2026-10-07
NVD CVE
CVE-2026-93675: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute a
HIGH
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.
2026-10-06
NVD CVE
CVE-2026-82162: Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper
HIGH
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
2026-10-06
NVD CVE
CVE-2026-106218: In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leadin
HIGH
In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible
2026-10-04
CISA KEV
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for...
boundcisa-kevcitrixcitrix-gatewaycve-2026-88779denialimproper-restrictionmemory
2026-10-02
CISA KEV
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.
chained-vulnerabilitiescisa-kevcve-2026-102489cve-2026-102490improper-privileges-managementlocal-usersprivileges-escalationroot-escalation
2026-10-02
CISA KEV
Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.
cisa-kevcve-2026-102489cve-2026-102490incident-responsepatch-managementremote-code-executionsecurity-bulletinsession-fixation
2026-10-01
CISA KEV
Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system...
arbitrary-file-writecisa-kevcve-2026-104286fortimailfortinethttps-requestsimproper-neutralizationnull-byte
2026-09-30
CISA KEV
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI...
admins-userscisa-kevciscocisco-catalystcve-2026-76504hex-encodinghttps-requestsprivileges-escalation
2026-09-30
NVD CVE
CVE-2026-103109: Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper in
HIGH
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a...
2026-09-30
NVD CVE
CVE-2026-100255: In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 administrator account
HIGH
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 administrator account takeover was possible via password reset
2026-09-30
NVD CVE
CVE-2026-100273: In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts de
HIGH
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
2026-09-30
NVD CVE
CVE-2026-100277: In JetBrains YouTrack before 2026.2.19197 account takeover was possible by repla
HIGH
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature
2026-09-29
NVD CVE
CVE-2026-102827: simple-git, an interface for running git commands in any node.js application, en
HIGH
simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin compares parsed...