CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 この検出方法はどのように機能しますか？ バージョン検出テンプレート - 2025.3.1.9 以前を実行しているものはすべて、CVE-2025-8875 & CVE-2025-8876 に対して脆弱と見なされます。 このスクリプトを実行するには？ 1. Nuclei を こちら からダウンロードします 2. テンプレートをローカルシステムにコピーします 3. 次のコマンドを実行します: nuclei -u https://yourHost.com -t template.yaml 参照...

ConnectWise ScreenConnect <= 23.9.7 - Path Traversal

ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...

CVE-2018-10735

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:04+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:48+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4e434f0-da60-4555-9882-9715560ea4cb 2026-09-17...

CVE-2017-17731

creationtimestamp| type| source ---|---|--- 2026-09-15 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-14 2026-09-15 11:00:44+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0d89868-ad3a-4d69-bd11-cd0baa9058a2 2026-09-17...

patch-CVE-2026-31337

补丁：CVE-2026-31337 漏洞详情 CVE ：CVE-2026-31337 产品 ：Ivanti Connect Secure 描述 ：通过身份验证绕过实现远程代码执行（RCE） 严重性 ：严重 CISA KEV ：是（已确认在野利用） 补丁状态：已部署 字段| 值 ---|--- 补丁日期| 2026-08-15 状态| 已部署 部署位置| 生产环境（所有区域） 验证方| 安全运维团队 回滚计划| 是（记录在 RUNBOOK.md 中） 修复步骤 1. 已应用 Ivanti Connect Secure 安全通告中的供应商补丁 2. 已在预发布环境中验证 3. 已通过 CI/...

CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

VulnCheck KEV: CVE-2026-87491

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-67276

creationtimestamp| type| source ---|---|--- 2026-09-05 20:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b 2026-09-...

CVE-2026-67277

creationtimestamp| type| source ---|---|--- 2026-09-05 20:20:30+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117220286803293141 2026-09-05 22:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68 2026-09-0...

CVE-2026-78141

creationtimestamp| type| source ---|---|--- 2026-09-02 11:00:28+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9751b736-8bb9-4c37-8b98-397276c88a36 2026-09-03 01:02:36+00:00| exploited|...

CVE-2026-66384

creationtimestamp| type| source ---|---|--- 2026-08-27 17:44:46+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm5paxf24 2026-08-27 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d46c9d24-f8e3-4328-8a89-6da9954a94e6...

CGA-7R46-5XW5-56Q2

Bulletin has no description...

Exploit for CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details - CVE: CVE...

CVE-2025-10164

creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5775be7d-1a29-41ee-bdff-b6026e93023f 2026-08-24 01:11:00+00:00| exploited|...

CVE-2016-5312

creationtimestamp| type| source ---|---|--- 2026-08-16 11:00:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc76e2ae-d1cb-4f07-9269-4e12b5e7cc35 2026-08-17 01:01:16+00:00| exploited|...

CVE-2016-20097

creationtimestamp| type| source ---|---|--- 2026-08-14 20:00:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72a4432a-2124-4b6e-9cab-fd09b4ac5fa6 2026-09-03 01:02:31+00:00| exploited|...

CVE-2026-68820

creationtimestamp| type| source ---|---|--- 2026-08-11 18:00:24+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bf8749-f824-4eeb-982e-7eb87d11e75a 2026-08-11 18:18:05+00:00| seen| https://bsky.app/profile/suriq.io/post/3mst7yyfsko2o 2026-08-11...

Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041

An update of the telegraf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0041. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Sudo PHSA-2025-5.0-91-0544

An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...