漏洞列表

CVE-2026-32202 · 2026-09-02 · pending_review

Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-20805 · 2026-09-02 · pending_review

Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized attacker to disclose information locally.

CVE-2025-21590 · 2026-10-01 · pending_review

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

CVE-2024-9379 · 2026-10-01 · pending_review

Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL stat…

CVE-2024-50302 · 2026-10-15 · pending_review

The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report.

CVE-2023-20269 · 2026-09-02 · pending_review

Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify v…

CVE-2022-2586 · 2026-10-14 · pending_review

Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

CVE-2021-41379 · 2026-09-04 · pending_review

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-34448 · 2026-09-04 · pending_review

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

CVE-2021-20023 · 2026-10-01 · pending_review

SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain …

CVE-2020-3153 · 2026-09-03 · pending_review

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system…

CVE-2019-6693 · 2026-09-02 · pending_review

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.

CVE-2019-5591 · 2026-09-04 · pending_review

Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol …

CVE-2018-13374 · 2026-10-01 · pending_review

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request…

CVE-2016-3351 · 2026-09-03 · pending_review

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's co…

CVE-2013-3900 · 2026-10-07 · pending_review

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

CVE-2013-0431 · 2026-10-02 · pending_review

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.

CVE-2008-4128 · 2026-09-02 · draft

Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "al…

CVE-2025-12801 · 2026-10-16 · auto

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particu…

CVE-2026-97790 · 2026-10-16 · auto

Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

CVE-2026-96948 · 2026-10-16 · auto

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

CVE-2026-96944 · 2026-10-16 · auto

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.

CVE-2026-96938 · 2026-10-16 · auto

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-96935 · 2026-10-16 · auto

Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96930 · 2026-10-16 · auto

Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

CVE-2026-88130 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88129 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88125 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88123 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-88122 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

CVE-2026-70244 · 2026-10-16 · auto

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

CVE-2025-61624 · 2026-10-16 · auto

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all ver…

CVE-2018-19539 · 2026-10-15 · auto

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

CVE-2018-19139 · 2026-10-15 · auto

An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.

CVE-2018-11784 · 2026-10-15 · auto

When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially craf…

CVE-2018-1061 · 2026-10-15 · auto

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVE-2018-11212 · 2026-10-15 · auto

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

CVE-2018-0737 · 2026-10-15 · auto

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could…

CVE-2018-1304 · 2026-10-15 · auto

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of …

CVE-2018-1305 · 2026-10-15 · auto

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security cons…

CVE-2017-12172 · 2026-10-15 · auto

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effecti…

CVE-2016-6794 · 2026-10-15 · auto

When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 t…

CVE-2016-0763 · 2026-10-15 · auto

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalCont…

CVE-2016-0706 · 2026-10-15 · auto

Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the org/apache/catalina/core/RestrictedServlets.properties…

CVE-2025-39953 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during [1] LTP cgroup testing when repeatedly mounting/unmounting perf_event a…

CVE-2025-39845 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure…

CVE-2025-39795 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a mult…

CVE-2025-40300 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a us…

CVE-2025-39782 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list() periodically release j_li…

CVE-2025-39773 · 2026-10-15 · auto

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large value, the local variable 'time' in br_multi…