1029 matches found
CVE-2025-8875-CVE-2025-8876
CVE-2025-8875 & CVE-2025-8876 How does this detection method work? Version detection template - anything running 2025.3.1.9 or older is considered vulnerable to CVE-2025-8875 & CVE-2025-8876 How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run th...
patch-CVE-2026-31337
Patch: CVE-2026-31337 Vulnerability Details CVE : CVE-2026-31337 Product : Ivanti Connect Secure Description : RCE via authentication bypass Severity : Critical CISA KEV : Yes confirmed exploited in the wild Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-08-15 Status| deployed...
kev-data
Welcome to kev-data This repository is home to the data files that make up the Known Exploited Vulnerabilities KEV catalog. The data is originally sourced from https://www.cisa.gov/known-exploited-vulnerabilities-catalog, which is short linked at https://cisa.gov/kev. Interactive dashboard to...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76504link is external Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...
Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…...
ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...
CVE-2021-48008
creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3db3454-5e05-426b-9952-73c9165409df...
CVE-2017-20284
creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:39+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/658a8fd7-a69e-4a17-86ca-a5f73c20f5d3 2026-10-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-10-05 2026-10-06...
CVE-2022-32025
creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:51+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31c6441e-f30f-4596-92dc-89053d7d36c0 2026-09-17 10:00:08+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-16 2026-09-23...
CVE-2018-10735
creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...
CVE-2017-17731
creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...
CVE-2024-2851
creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...
GHSA-6V53-HR58-556R
creationtimestamp| type| source ---|---|--- 2026-09-10 08:18:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87df996f-d392-4a84-a8ce-59565a65625f...
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...
VulnCheck KEV: CVE-2026-87491
Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...
CVE-2026-67276
creationtimestamp| type| source ---|---|--- 2026-09-05 20:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b 2026-09-...
CVE-2026-67277
creationtimestamp| type| source ---|---|--- 2026-09-05 20:20:30+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117220286803293141 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68 2026-09-0...
CVE-2026-78141
creationtimestamp| type| source ---|---|--- 2026-09-02 11:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9751b736-8bb9-4c37-8b98-397276c88a36 2026-09-03 01:02:36+00:00| exploited|...
CVE-2026-66384
creationtimestamp| type| source ---|---|--- 2026-08-27 17:44:46+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm5paxf24 2026-08-27 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d46c9d24-f8e3-4328-8a89-6da9954a94e6...
