2935393 matches found
Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...
ServiceNow - Incomplete Input Validation
ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...
CVE-2026-87523
creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:51+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...
CVE-2026-87635
creationtimestamp| type| source ---|---|--- 2026-09-10 04:45:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...
ROOT-APP-NPM-CVE-2022-31129 CVE-2022-31129 in moment - Patched by Root
Root has patched CVE-2022-31129 in the moment package for Root:npm. Multiple fixed versions available...
CVE-2026-75595 vulnerabilities
Vulnerabilities for packages: tez, akhq, spark, strimzi-kafka-operator, zookeeper, sonarqube, trino, druid, cassandra, flyway, keycloak, cassandra-reaper...
GHSA-C4C3-7FPV-J4Q5 vulnerabilities
Vulnerabilities for packages: tez, akhq, spark, strimzi-kafka-operator, zookeeper, sonarqube, trino, druid, cassandra, flyway, keycloak, cassandra-reaper...
CVE-2026-75596 vulnerabilities
Vulnerabilities for packages: tez, akhq, spark, strimzi-kafka-operator, zookeeper, sonarqube, trino, druid, cassandra, flyway, keycloak, cassandra-reaper...
CVE-2026-62899 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-9MR8-PWPW-3J2W vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-M93F-WJ8C-RP8P vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-R6MH-95JW-G7QG vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-62901 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-87448
creationtimestamp| type| source ---|---|--- 2026-09-10 02:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yzhpg2q2w 2026-09-10 04:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 17:37:07+00:00| seen|...
CVE-2026-87637
creationtimestamp| type| source ---|---|--- 2026-09-10 01:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4wrxnbwu2j 2026-09-10 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 05:37:06+00:00| seen|...
UBUNTU-CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
CVE-2026-87527
creationtimestamp| type| source ---|---|--- 2026-09-10 00:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4tgo6dgh2w 2026-09-10 04:49:51+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 12:37:07+00:00| seen|...
CVE-2026-71809
creationtimestamp| type| source ---|---|--- 2026-09-10 00:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d2tg5j7kiwjm5...
Microsoft Dynamics 365 (on-premises) (September 2026)
The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-65772 Note that Nessus has not tested fo...
