CVE-2021-24217

creationtimestamp| type| source ---|---|--- 2026-06-19 12:48:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b4d293c6-01ac-4be3-99ba-fd4146b800cc 2026-06-23 14:04:02+00:00| exploited|...

CVE-2021-20083

creationtimestamp| type| source ---|---|--- 2026-06-19 12:47:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d76544ca-fc11-400a-a630-e448451d3813 2026-06-23 14:04:03+00:00| exploited|...

CVE-2023-42813

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:45+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/60245ae4-12f6-4b70-b6af-eb153d0db052...

CVE-2024-26745

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:41+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ac09a861-a827-4aa5-a942-1de2e6d14bf4...

CVE-2024-26859

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:40+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dfd3445e-feba-492f-bb02-b8ff3626a7a6...

CVE-2021-47337

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:39+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4a47bf2-cfbb-4da8-9e79-77a6124a8979...

CVE-2021-4444

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:33+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/23b66058-4661-49fa-b6f0-c5f57348f533...

CVE-2025-21713

creationtimestamp| type| source ---|---|--- 2026-06-19 12:46:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ae0ac1a-6eec-430e-a129-2cf086d146b3...

VulnCheck KEV: CVE-2026-56011

Unauthenticated Cross Site Scripting XSS in MapPress Maps for WordPress = 2.97.3 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-12306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. CVE-2026-12306...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-48907link is external Widget Factory Joomla Content Editor Improper Access Control Vulnerability This type of vulnerability is a frequent attack vector for...

Nuxt: Dev server discloses project absolute path and persistent workspace UUID via `/.well-known/appspecific/com.chrome.devtools.json`

Summary When running nuxt dev, Nuxt registers an unauthenticated route at /.well-known/appspecific/com.chrome.devtools.json that returns the absolute filesystem path of the project root and a per-project UUID persisted to nodemodules/.cache/nuxt/chrome-workspace.json. The route is enabled by...

Linux Distros Unpatched Vulnerability : CVE-2025-55645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the gfcencsetpssh function isomedia/drmsample.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a...

Linux Distros Unpatched Vulnerability : CVE-2025-55641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the gfisomcopysampleinfo function isomedia/isomwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via...

Linux Distros Unpatched Vulnerability : CVE-2025-55644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free in the gfnodegettag function scenegraph/basescenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplyi...

sbom-risk-analyzer

SBOM-Risk-Analyzer Exploitability-weighted vulnerability pri...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-35273link is external Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability This type of vulnerability is a...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-10520link is external Ivanti Sentry OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and...

Linux Distros Unpatched Vulnerability : CVE-2026-44236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Heap buffer overflow in AMQP login handshake via undersized connection.tune.framemax CVE-2026-44236 Note that Nessus relies on the presence of th...

UBUNTU-CVE-2026-41839

A WebFlux application with a compromised subdomain for example, compromised via cross-site scripting XSS is vulnerable to an escalation attack exchanging a known session ID for that of an authenticated user. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0...