1029 matches found
CVE-2025-8875-CVE-2025-8876
CVE-2025-8875 & CVE-2025-8876 Comment fonctionne cette méthode de détection ? Modèle de détection de version - toute version 2025.3.1.9 ou antérieure est considérée comme vulnérable aux CVE-2025-8875 et CVE-2025-8876 Comment exécuter ce script ? 1. Téléchargez Nuclei depuis ici 2. Copiez le modèl...
kev-data
Bienvenue sur kev-data Ce dépôt héberge les fichiers de données qui composent le catalogue des vulnérabilités exploitées connues KEV. Les données proviennent à l'origine de https://www.cisa.gov/known-exploited-vulnerabilities-catalog, dont le lien court est https://cisa.gov/kev. Tableau de bord...
patch-CVE-2026-31337
Correctif : CVE-2026-31337 Détails de la vulnérabilité CVE : CVE-2026-31337 Produit : Ivanti Connect Secure Description : RCE par contournement de l'authentification Gravité : Critique CISA KEV : Oui exploitation confirmée dans la nature Statut du correctif : DÉPLOYÉ Champ| Valeur ---|--- Date du...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76504link is external Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...
Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…...
ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...
CVE-2021-48008
creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3db3454-5e05-426b-9952-73c9165409df...
CVE-2017-20284
creationtimestamp| type| source ---|---|--- 2026-09-19 20:00:39+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/658a8fd7-a69e-4a17-86ca-a5f73c20f5d3 2026-10-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-10-05 2026-10-06...
CVE-2022-32025
creationtimestamp| type| source ---|---|--- 2026-09-15 11:00:51+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/31c6441e-f30f-4596-92dc-89053d7d36c0 2026-09-17 10:00:08+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-16 2026-09-23...
CVE-2018-10735
creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...
CVE-2017-17731
creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...
CVE-2024-2851
creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...
GHSA-6V53-HR58-556R
creationtimestamp| type| source ---|---|--- 2026-09-10 08:18:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/87df996f-d392-4a84-a8ce-59565a65625f...
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...
VulnCheck KEV: CVE-2026-87491
Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...
CVE-2026-67276
creationtimestamp| type| source ---|---|--- 2026-09-05 20:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b 2026-09-...
CVE-2026-67277
creationtimestamp| type| source ---|---|--- 2026-09-05 20:20:30+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117220286803293141 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68 2026-09-0...
CVE-2026-78141
creationtimestamp| type| source ---|---|--- 2026-09-02 11:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9751b736-8bb9-4c37-8b98-397276c88a36 2026-09-03 01:02:36+00:00| exploited|...
CVE-2026-66384
creationtimestamp| type| source ---|---|--- 2026-08-27 17:44:46+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm5paxf24 2026-08-27 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d46c9d24-f8e3-4328-8a89-6da9954a94e6...