FortiLogger 4.4.2.2 - Arbitrary File Upload

FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...

strapi CMS <3.0.0-beta.17.5 - Admin Password Reset

strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. id: CVE-2019-18818 info: name: strapi CMS 3.0.0-beta.17.5 - Admin Password Reset...

DrayTek Vigor - Command Injection

DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...

Webmin <1.990 - Improper Access Control

Webmin before 1.990 is susceptible to improper access control in GitHub repository webmin/webmin. This in turn can lead to remote code execution, by which an attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without enterin...

Joomla! Webservice - Password Disclosure

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. id: CVE-2023-23752 info: name: Joomla! Webservice - Password Disclosure author: badboycxcc,Sascha Brendel severity: medium description: | An issue was discovered in...

CVE-2026-87523

creationtimestamp| type| source ---|---|--- 2026-09-10 04:49:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:49:51+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-87635

creationtimestamp| type| source ---|---|--- 2026-09-10 04:45:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-16 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

ROOT-APP-NPM-CVE-2022-31129 CVE-2022-31129 in moment - Patched by Root

Root has patched CVE-2022-31129 in the moment package for Root:npm. Multiple fixed versions available...

CVE-2026-75595 vulnerabilities

Vulnerabilities for packages: keycloak, cassandra-reaper, zookeeper, tez, trino, sonarqube, strimzi-kafka-operator, flyway, spark, druid, cassandra, akhq...

GHSA-C4C3-7FPV-J4Q5 vulnerabilities

Vulnerabilities for packages: keycloak, cassandra-reaper, zookeeper, tez, trino, sonarqube, strimzi-kafka-operator, flyway, spark, druid, cassandra, akhq...

CVE-2026-75596 vulnerabilities

Vulnerabilities for packages: keycloak, cassandra-reaper, zookeeper, tez, trino, sonarqube, strimzi-kafka-operator, flyway, spark, druid, cassandra, akhq...

CVE-2026-62899 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-M93F-WJ8C-RP8P vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-R6MH-95JW-G7QG vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-62901 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-87448

creationtimestamp| type| source ---|---|--- 2026-09-10 02:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yzhpg2q2w 2026-09-10 04:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 17:37:07+00:00| seen|...

CVE-2026-87637

creationtimestamp| type| source ---|---|--- 2026-09-10 01:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4wrxnbwu2j 2026-09-10 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 05:37:06+00:00| seen|...