Robuta

https://jabega.net/en/cve/CVE-2026-76461 CVE-2026-76461: Cisco Secure Email Gateway · CVSS 9.8 · exploited · Jábega CVE-2026-76461 in Cisco Secure Email Gateway: critical severity (CVSS 9.8), actively exploited according to CISA, 28.3% probability of attack. Affected… secure email gatewaycveciscocvssexploited https://blog.zerowl.io/d-link-router-hit-by-cvss-100-flaw-exploitable-remotely-without-authentication D-Link Router Hit by CVSS 10.0 Flaw Exploitable Remotely Without Authentication | #1 Source for... Sep 30, 2026 - D-Link Systems has identified a critical security vulnerability in its DIR-822A router, tracked as CVE-2026-86296 This article explores affects udhcpcd. routerhitcvssflawexploitable https://www.otpulse.io/feed/icsa-26-202-04 Siemens SIDIS Secured SmartPlug | CVSS 9.8 - OTPulse An attacker who gains network access to SIDIS Secured SmartPlug could remotely execute commands, modify firmware, or disrupt device operations due to multipl... siemenssidissecuredcvss https://docs.devguard.org/vulnerability-database/RHSA-2026:10711/ RHSA-2026:10711 – CVSS 8.1 | DevGuard Vulnerability Database RHSA-2026:10711 (High) – CVSS 8.1. Red Hat Security Advisory: python3.12 security update… vulnerability databaserhsacvss https://kb.gajshield.com/a/1281/microsoft-entra-id-flaw-cvss-10-0-exploited-in-wild-allows-remote-code-execution Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution — GajShield KB The disclosure of CVE-2026-69836 in Microsoft Entra ID is particularly significant because it affects one of the most important trust layers in modern... microsoft entra idremote code executionin wildflawcvss https://1ip.tech/cve/CVE-2026-105119 CVE-2026-105119 — Medium Vulnerability Details & CVSS Score CVE-2026-105119 CVSS 6.8. OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is ... Full... cvemediumvulnerabilitydetailscvss https://synoslabs.com/ressources/cve-cvss-cest-quoi/ CVE et CVSS, c’est quoi ? Ce que recouvrent une CVE et un score CVSS : les trois métriques, le calcul du score, et ce qui change entre la version 2 et la version 3. cvecvssquoi https://www.softwaresecured.com/subtopic/cvss-vs-dread-comparison Software Secured | CVSS vs DREAD Comparison | Canada | Canada Software Secured - CVSS vs DREAD comparison—choose the right vulnerability scoring model for board‑level risk reporting. | Canada softwaresecuredcvssdreadcomparison https://informatiebeveiliging.nl/update-voor-cvss-beoordeling-beveiligingslekken/ » Update voor CVSS-beoordeling beveiligingslekken updatevoorcvssbeoordeling https://www.cvefind.com/fr/cve/CVE-2024-49922.html CVE-2024-49922 - Détail CVSS, EPSS & CISA KEV | CVE Find Fiche complète pour CVE-2024-49922 : description technique, impact, score CVSS/EPSS, CWE, CAPEC, CPE affectés, date de publication, surface d’attaque et... cvecvssepsscisakev https://www.otpulse.io/feed/cve-2026-54119 Windows Active Directory Denial of Service Vulnerability | CVSS 7.5 - OTPulse An attacker can send a specially crafted network request to Windows Active Directory, causing it to enter an infinite loop that makes domain authentication a... denial of serviceactive directorywindowsvulnerabilitycvss https://sara-open.sirp.io/cve/CVE-2019-5418 CVE-2019-5418: There is a File Content Disclosure vulnerability in Action View 5 — CVSS 7.5, KEV... there isin actioncvefilecontent https://senserva.com/cve/CVE-2026-55135.html CVE-2026-55135: SharePoint Server 2019 fix KB5002883 (CVSS 4.6) Likely to be exploited. CVE-2026-55135 is a Microsoft vulnerability, rated Important by Microsoft (CVSS 4.6, EPSS 70%). Fixed by KB5002882 and 2 more. sharepoint servercvefixcvss https://www.otpulse.io/feed/cve-2026-48564 DHCP Server Service Remote Code Execution Vulnerability | CVSS 8.8 - OTPulse An attacker with DHCP server access credentials could exploit a buffer overflow to run arbitrary code on a Windows server that provides DHCP to your network,... remote code executiondhcp serverservicevulnerabilitycvss Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_17 Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start. https://lifeboat.com/blog/2025/05/over-100000-wordpress-sites-at-risk-from-critical-cvss-10-0-vulnerability-in-wishlist-plugin Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin –... May 29, 2025 - CVE-2025-47577 flaw in TI WooCommerce Wishlist lets unauthenticated attackers upload malicious files—no patch yet, 100K+ sites at risk. at riskwordpresssitescriticalcvss https://portscanner.online/news/2026/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosure.html GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure - Online Port scanner in the wildport scannergitlabcvssfile https://www.liondor.com.mx/vacantes/9b78b0ee-5176-45e2-91ce-e6b42d879271 CVSS Data Analyst – Remoto · México | Liondor Responsabilidades: - Realizar estudios de comparativo competitivo, comparaciones entre vehículos, evaluaciones técnicas y análisis de tendencias de la indust… data analystcvssremoto Sponsored https://www.camsoda.com/?id=robuta&ad_id=cs_300x250_3girls_300k.gif Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy! https://www.sherlockforensics.com/blog/2026-05-14-cve-2026-2347.html CVE-2026-2347: Authorization bypass through User-Controlled CVSS 9.8 - Sherlock Forensics May 15, 2026 - Authorization bypass through User-Contro (CVE-2026-2347) scores CVSS 9.8 CRITICAL. Analysis of affected systems and remediation steps. cveauthorizationbypassusercontrolled https://jabega.net/en/cve/CVE-2026-5695 CVE-2026-5695: Microweber Administration panel · CVSS 8.4 · Jábega CVE-2026-5695 in Microweber Administration panel: high severity (CVSS 8.4), 0.3% probability of attack. Affected products, patches and news. cvemicroweberadministrationpanelcvss https://spbcomputers.ru/cybersecurity/cisco-warns-of-critical-ise-0-day-vulnerability-exploited Cisco ISE: 0-day CVE-2026-76460 с CVSS 10.0 уже эксплуатируют | SPBcomputers Cisco предупредила об активно эксплуатируемой 0-day в ISE и ISE-PIC: CVE-2026-76460, CVSS 10.0, обход аутентификации и root-доступ. Патчей нет, обходного пути ciscoisedaycvecvss https://cybersecurity-news.de/synology-dsm-cve-2026-13639-cve-2026-13684/ Synology DSM: Zwei kritische Schwachstellen mit CVSS 9.8 betreffen Login-Logik und SCGI Sep 19, 2026 - Synology DSM ist von CVE-2026-13639 und CVE-2026-13684 betroffen. Betroffene Systeme sollten zügig auf die genannten Versionen aktualisieren. synologydsmzweikritischeschwachstellen https://secboard.org/cve/CVE-2026-20131 CVE-2026-20131: Cisco — aktiv ausgenutzt (KEV), CVSS 10.0 | SecBoard cveciscoaktivausgenutztkev https://www.otpulse.io/feed/cve-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | CVSS 7 - OTPulse A local user with standard privileges could exploit this vulnerability to gain administrative control of a Windows system, potentially allowing them to modif... elevation of privilegewindows kernelmodedrivervulnerability https://thehiddenport.dev/posts/vulnerability-prioritization-beyond-cvss/ Vulnerability Prioritization Beyond CVSS: The Rules-Based Model I Actually Use | The Hidden Port Sep 24, 2026 - CVSS alone doesn't tell engineering what to work on first. Here's the rules-based prioritization model I built for a fully custom vulnerability management... vulnerability prioritizationthe rulesbeyondcvssbased https://sodiumcyber.com/fortra-goanywhere-cvss-10-flaw-exploited-as-0-day-a-week-before-public-disclosure/ Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure – Sodium Cyber Ltd a weekpublic disclosurefortracvssflaw Sponsored https://spicychat.co/enter.php?prg=1&id=robuta&t=best&ad_id=sc_300x250_mt1.jpg SpicyChat - World's Biggest Spicy Chat Community Spicy Chat is the no-pressure place to meet flirty, like-minded adults. Match on vibe, slide into a chat, and let the night take its course. All from one discreet app built for fun. https://jabega.net/cve/CVE-2026-48710 CVE-2026-48710: Kludex Starlette · CVSS 6.5 · explotada · Jábega CVE-2026-48710 en Kludex Starlette: gravedad media (CVSS 6.5), explotada activamente según CISA, 7.1 % de probabilidad de ataque. Productos afectados,… cvestarlettecvssexplotada https://www.otpulse.io/feed/cve-2026-69340 Windows NTFS Elevation of Privilege Vulnerability | CVSS 7.1 - OTPulse An attacker with a low-privileged local account could exploit a buffer overflow in NTFS file processing to gain administrative privileges on the system. This... elevation of privilegewindowsntfsvulnerabilitycvss https://www.alpacax.com/kr/blog/a-cvss-10-0-bug-turned-metabases-password-reset-into-full-admin/ Metabase 비밀번호 재설정이 관리자 권한으로 이어진 CVSS 10.0 취약점 | AlpacaX Metabase 비밀번호 재설정 기능의 취약점으로 자격증명 없이 관리자 권한을 얻을 수 있었습니다. CVSS 10.0을 받았고, 실제 악용이 확인돼 CISA KEV에 올랐습니다. metabasecvss https://www.otpulse.io/feed/cve-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | CVSS 7.5 - OTPulse An attacker can crash the Windows IKE (Internet Key Exchange) service over the network without credentials, temporarily disrupting VPN and encrypted communic... internet key exchangedenial of servicewindowsikeextension Sponsored https://www.xlovecam.com/prm03/textlink?id_affilie=26457&p=online&tri=10 Best Live Sex Cam Shows with Free Live Chat | XLoveCam Watch thousands of cam girls get naked on XLoveCam. https://recentbreaches.com/vulnerability/CVE-2019-1429 CVE-2019-1429: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnera (CVSS 7.5) |... CVE-2019-1429 affects Microsoft · Internet Explorer. Exploited in the wild (CISA KEV). A remote code execution vulnerability exists in the way that the... microsoft internet explorerscripting enginememory corruptioncvevulnera https://deafnews.it/en/news/cybersecurity/sonicwall-sma-1000-under-attack-cve-2026-15409-cvss-100-and-totp-seed-theft SonicWall SMA 1000 Under Attack: CVE-2026-15409 CVSS 10.0 and TOTP Seed Theft | DeafNews Oct 15, 2026 - CVE-2026-15409 and CVE-2026-15410 exposed SonicWall SMA 1000 appliances to unauthenticated root compromise. The theft of MFA seeds renders standard password... under attacksonicwallsmacvecvss https://securenm.org/2026/01/07/critical-n8n-vulnerability-cvss-10-0-allows-unauthenticated-attackers-to-take-full-control/ Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control -... Jan 7, 2026 - Cybersecurity news, information and alerts for New Mexico's small and mid-size businesses and nonprofits. full controlcriticalvulnerabilitycvssallows https://ninjasignal.ninja/intel/cve/GHSA-vp6r-9m58-5xv8 GHSA-vp6r-9m58-5xv8 (CVSS 8.1) — Ninja Signal Threat Intelligence | Ninja Signal ### Impact Server-side EL injection leading to Remote Code Execution (RCE). Affects applications that use `CDNResourceHandler` with a wildcard CDN mapping (e.g threat intelligenceghsacvssninjasignal https://www.cvefind.com/fr/cve/CVE-2005-2782.html CVE-2005-2782 - Détail CVSS, EPSS & CISA KEV | CVE Find Fiche complète pour CVE-2005-2782 : description technique, impact, score CVSS/EPSS, CWE, CAPEC, CPE affectés, date de publication, surface d’attaque et... cvecvssepsscisakev https://mallen.com.au/blog/cve-2024-54012-cve-2024-54013-hanwhavision-camera-command-injection-cvss-8-5-patch-released-april-2026/ CVE-2024-54012 / CVE-2024-54013 — HanwhaVision Camera Command Injection (CVSS 8.5), Patch Released... Jul 27, 2026 - A high-severity vulnerability affecting HanwhaVision camera systems has been published to the National Vulnerability Database and the GitHub Advisory Database.... command injectioncvecameracvsspatch https://hackerfeeds.com/cve/CVE-2026-93698 CVE-2026-93698 — critical severity (CVSS 9.9) | HackerFeeds Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. cvecriticalseveritycvss https://sara-open.sirp.io/cve/CVE-2024-36396 CVE-2024-36396: Verint - CWE-434: Unrestricted Upload of File with Dangerous Type — CVSS 8.8, EPSS... Verint - CWE-434: Unrestricted Upload of File with Dangerous Type: Verint - CWE-434: Unrestricted Upload of File with Dangerous Type. CVSS 8.8. EPSS 0.18… file withdangerous typecveverintcwe https://docs.devguard.org/vulnerability-database/DEBIAN-CVE-2019-13057/ DEBIAN-CVE-2019-13057 – CVSS 4.9 | DevGuard Vulnerability Database DEBIAN-CVE-2019-13057 (Medium) – CVSS 4.9. An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN... vulnerability databasedebiancvecvss https://secboard.org/cve/CVE-2026-15409 CVE-2026-15409 — aktiv ausgenutzt (KEV), CVSS 10.0 | SecBoard cveaktivausgenutztkevcvss https://recentbreaches.com/vulnerability/CVE-2010-2572 CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability (CVSS 7.8) | Recent Breaches CVE-2010-2572 affects Microsoft · PowerPoint. Exploited in the wild (CISA KEV). Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote... microsoft powerpointbuffer overflowcvevulnerabilitycvss https://docs.devguard.org/vulnerability-database/PYSEC-2018-155/ PYSEC-2018-155 – CVSS 8.8 | DevGuard Vulnerability Database PYSEC-2018-155 (High) – CVSS 8.8. Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with... vulnerability databasecvss https://www.otpulse.io/feed/cve-2026-0261 PAN-OS: Authenticated Admin Command Injection Vulnerability | CVSS 8.6 - OTPulse An authenticated administrator with access to the PAN-OS command line or web interface could run arbitrary commands as root on the firewall, potentially allo... command injectionpanauthenticatedadminvulnerability https://docs.devguard.org/vulnerability-database/RUSTSEC-2026-0113/ RUSTSEC-2026-0113 – CVSS N/A | DevGuard Vulnerability Database RUSTSEC-2026-0113 – CVSS N/A. In versions 0.6.0 and earlier of astral-tokio-tar, the unpack_in API could inadvertently modify the permissions of external (i.e.... n avulnerability databasecvss https://codeant.ai/blogs/ai-code-reviewer-discovered-jwt-authentication-bypass AI Code Review Finds CVSS 10 JWT Bypass: CVE-2026-29000 A CVSS-10 vulnerability in pac4j-jwt allowed attackers to authenticate as any user using only a public key. Learn how an AI code reviewer discovered the JWT... ai code reviewfindscvssjwtbypass https://1ip.tech/pt/cve/CVE-2026-23590 CVE-2026-23590 — Detalhes de vulnerabilidade e pontuação CVSS CVE-2026-23590 CVSS . Rejected reason: Withdrawn by requester.... Descrição completa, produtos afetados e mitigação. cvedetalhesvulnerabilidadecvss https://cubexgroup.com/rss_feeds/fortra-goanywhere-cvss-10-flaw-exploited-as-0-day-a-week-before-public-disclosure/ Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure ​ - Cubex Group Read More Cybersecurity company watchTowr Labs has disclosed that it has “credible evidence” of active exploitation of the recently disclosed security flaw in... a weekpublic disclosurefortracvssflaw https://jabega.net/en/cve/CVE-2026-81963 CVE-2026-81963: Microsoft Windows · CVSS 7.8 · exploited · Jábega CVE-2026-81963 in Microsoft Windows: high severity (CVSS 7.8), actively exploited according to CISA, 0.4% probability of attack. Affected products, patches… microsoft windowscvecvssexploited https://cybersecuritymarket.com/cisco-ise-zero-day-cve-2026-76460/ Cisco ISE Zero-Day CVE-2026-76460 Hits CVSS 10.0 and CISA Gives Agencies Three Days to Patch |... zero daythree daysciscoisecve https://cyberworldops.eu/en/cve/CVE-2026-33824 CVE-2026-33824 — Critical CVSS 9.8 — microsoft windows 10 1607 | CyberWorldOps Critical, CVSS 9.8. Affected products: microsoft windows 10 1607. Double free in Windows IKE Extension allows an unauthorized attacker to execute code over microsoft windowscvecriticalcvss https://docs.devguard.org/vulnerability-database/CVE-2026-41680/ CVE-2026-41680 – CVSS 8.7 | DevGuard Vulnerability Database CVE-2026-41680 (High) – CVSS 8.7. Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Denial of Service (DoS) vulnerability exists in... vulnerability databasecvecvss https://www.otpulse.io/feed/cve-2026-62712 Windows Win32k Elevation of Privilege Vulnerability | CVSS 7.8 - OTPulse An attacker with a standard user account on a Windows system could run commands with administrator privileges, allowing them to modify system settings, insta... elevation of privilegewindowsvulnerabilitycvss https://www.strix.ai/cve/CVE-2026-49836 CVE-2026-49836: psd-tools Path Traversal (CVSS 4.6) Sep 30, 2026 - CVE-2026-49836 is a medium-severity vulnerability in psd-tools (CVSS 4.6). psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior… path traversalcvepsdtoolscvss https://securityelites.com/cve/CVE-2022-3602/ CVE-2022-3602 — CVE Details, CVSS Score & Exploits | SecurityElites Full details for CVE-2022-3602: CVSS severity score, affected software, exploit availability, patch information, and vulnerability analysis. cvedetailscvssscoreexploits https://aicybercheck.com/blog/epss-first-beats-cvss-47-faster-median-time-to-patch.php EPSS-First Beats CVSS: 47% Faster Median Time-to-Patch | aicybercheck.com Sep 4, 2026 - Filter by EPSS exploit probability first, then CVSS severity to cut median time-to-patch by 47%. See how 0.87 vs 0.004 scores change queues. time to patchepssfirstbeatscvss https://www.bugcrowd.com/blog/consistency-is-key-aligning-bugcrowds-vrt-with-cvss-within-crowdcontrol/ Consistency is Key: Aligning Bugcrowd’s VRT with CVSS | @Bugcrowd consistency is keyaligningvrtcvssbugcrowd https://ostec.blog/es/aprendizaje-descubrimiento/cve-y-cvss-para-la-clasificacion-de-vulnerabilidades-de-seguridad-digital/ CVE y CVSS, para la clasificación de vulnerabilidades de seguridad digital - OSTEC | Segurança... May 29, 2023 - This post is also available in: Português EspañolEl aumento de la explotación de vulnerabilidades de seguridad en software y aplicaciones crece... seguridad digitalcvecvssparavulnerabilidades https://stackfutures.com/blog/gemini-cli-cvss-10-rce-cicd-supply-chain/ CVSS 10.0 in Gemini CLI: A Pull Request Was Enough to Execute Code on the Host Before the Sandbox... A max-severity RCE flaw in Google Gemini CLI let a PR opener run commands on the CI/CD host before any sandbox initialized. No prompt injection required. Fixed... gemini clipull requeston thecvssenough https://www.cvefind.com/en/cve/CVE-2018-17156.html CVE-2018-17156 - Detail CVSS, EPSS & CISA Kev | CVE Find Full details for CVE-2018-17156: technical description, impact, CVSS/EPSS scores, linked CWE, CAPEC, affected CPEs, disclosure date, and mitigation options. cvedetailcvssepsscisa https://snyk.io/blog/scoring-security-vulnerabilities-101-introducing-cvss-for-cve/ Scoring security vulnerabilities 101: Introducing CVSS for CVEs | Snyk May 16, 2019 - One of FIRST’s initiatives is a Special Interest Group (SIG) that is responsible for developing and maintaining the Common Vulnerability Scoring System (CVSS)... security vulnerabilitiesscoringintroducingcvsscves https://cyber.netsecops.io/articles/check-point-patches-critical-cvss-9-8-vpn-flaws/ Check Point patches two critical 9.8 CVSS flaws i... - CyberNetSec.io Sep 13, 2026 - Check Point has patched two CVSS 9.8 vulnerabilities (CVE-2026-85102, CVE-2026-85103) in its VPN products that could lead to unauthenticated remote code... check pointpatchestwocriticalcvss Sponsored https://www.sexyfans.app/enter.php?prg=1&id=robuta&t=best&ad_id=sexyfans_300x250_202201_1.jpg Sexyfans.app - Only Fans of Dating Apps The only dating app for fans to meet up with local content creators. https://www.otpulse.io/feed/cve-2026-65784 Windows NTFS Information Disclosure Vulnerability | CVSS 5.5 - OTPulse An attacker with local access to a Windows system could read sensitive data from NTFS file system memory that they should not have permission to access, pote... information disclosurewindowsntfsvulnerabilitycvss https://jabega.net/en/cve/CVE-2026-87491 CVE-2026-87491: Google Chromium V8 · CVSS 8.8 · exploited · Jábega CVE-2026-87491 in Google Chromium V8: high severity (CVSS 8.8), actively exploited according to CISA, 3.1% probability of attack. Affected products, patches… google chromiumcvecvssexploited https://secboard.org/cve/CVE-2021-42278 CVE-2021-42278: Active Directory — aktiv ausgenutzt (KEV), CVSS 7.5 | SecBoard active directorycveaktivausgenutztkev https://www.otpulse.io/feed/cve-2026-40415 Windows TCP/IP Remote Code Execution Vulnerability | CVSS 8.1 - OTPulse An attacker on the network could send specially crafted TCP/IP packets to a vulnerable Windows system, potentially allowing remote code execution with the sa... remote code executiontcp ipwindowsvulnerabilitycvss https://recentbreaches.com/vulnerability/CVE-2022-42948 CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerabilit (CVSS 9.8) |... CVE-2022-42948 affects Fortra · Cobalt Strike. Exploited in the wild (CISA KEV). Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed... remote code executioncobalt strikeuser interfacecvefortra Sponsored https://www.asstok.com/enter.php?prg=1&id=robuta&t=best&ad_id=asstok_300x250_ms2.jpg Asstok Ready for a modern day adult dating site? Hook up online and enjoy sexting with others on AssTok. Trade private photos and videos formerly. https://www.cvefind.com/en/cve/CVE-2025-24905.html CVE-2025-24905 - Detail CVSS, EPSS & CISA Kev | CVE Find Full details for CVE-2025-24905: technical description, impact, CVSS/EPSS scores, linked CWE, CAPEC, affected CPEs, disclosure date, and mitigation options. cvedetailcvssepsscisa https://secboard.org/cve/CVE-2021-34523 CVE-2021-34523: Exchange — aktiv ausgenutzt (KEV), CVSS 9.0 | SecBoard cveexchangeaktivausgenutztkev https://dailysecurityreview.com/resources/sap-patches-cvss-10-0-kernel-rce-in-extended-passport-processing/ SAP Patches CVSS 10.0 Kernel RCE in Extended Passport Processing - Resources Sep 9, 2026 - SAP released patches for CVE-2026-44756, a maximum-severity memory corruption flaw enabling unauthenticated remote code execution in SAP kernel systems. sappatchescvsskernelrce https://blog.netmanageit.com/two-cvss-9-0-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/ Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes Oct 22, 2026 - Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline fix. public mailing liststwocvsslinuxksmbd https://securenm.org/2026/04/06/flowise-ai-agent-builder-under-active-cvss-10-0-rce-exploitation-12000-instances-exposed/ Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed -... Apr 7, 2026 - Cybersecurity news, information and alerts for New Mexico's small and mid-size businesses and nonprofits. ai agentbuilderactivecvssrce https://www.velaspan.com/blog/2026/06/24/cvss-is-out-heres-why-cisa-just-changed-the-rules-of-patching/ CVSS Is Out. Here's Why CISA Just Changed the Rules of Patching. - Velaspan Jun 24, 2026 - There’s never been enough time to patch every vulnerability. For most organizations, one number has governed how security teams prioritized what to fix first:... out herethe rulescvsscisachanged https://docs.devguard.org/vulnerability-database/PYSEC-2018-142/ PYSEC-2018-142 – CVSS 6.5 | DevGuard Vulnerability Database PYSEC-2018-142 (Medium) – CVSS 6.5. In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service... vulnerability databasecvss https://senserva.com/cve/CVE-2025-62473.html CVE-2025-62473: Windows Server 2025 fix KB5072014 (CVSS 6.5) CVE-2025-62473 is a Microsoft vulnerability, rated Important by Microsoft (CVSS 6.5, EPSS 5%). Fixed by KB5071413 and 14 more. Exploit odds, remediation. windows servercvefixcvss https://www.strix.ai/cve/CVE-2026-15386 CVE-2026-15386: Meow Gallery XSS (CVSS 5.4) — Fix & Details Aug 26, 2026 - CVE-2026-15386 is a medium-severity vulnerability in Meow Gallery (CVSS 5.4). The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's… cvemeowgalleryxsscvss https://hackerfeeds.com/cve/CVE-2020-8467 CVE-2020-8467 — high severity (CVSS 8.8) — CISA KEV | HackerFeeds A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrar cvehighseveritycvsscisa https://hackerfeeds.com/cve/CVE-2025-27038 CVE-2025-27038 — high severity (CVSS 7.5) — CISA KEV | HackerFeeds Memory corruption while rendering graphics using Adreno GPU drivers in Chrome. cvehighseveritycvsscisa https://recentbreaches.com/vulnerability/CVE-2015-5119 CVE-2015-5119: Adobe Flash Player Use-After-Free Vulnerability (CVSS 9.8) | Recent Breaches CVE-2015-5119 affects Adobe · Flash Player. Exploited in the wild (CISA KEV). Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)... adobe flash playeruse after freecvevulnerabilitycvss https://resiliently.ai/blog/posts/beyond-the-cvss-score-underwriting-critical-telecom-vulnerab Beyond the CVSS Score: Underwriting Critical Telecom Vulnerabilities | Resiliently Critical CVSS scores don't equal critical exposure. How underwriters should price the gap between severity and exploitation probability in SIP infrastruct… beyondcvssscoreunderwritingcritical https://community.veeam.com/cyber-security-space-95/cve-2026-44963-vulnerability-in-veeam-backup-replication-v12-cvss-v4-score-9-4-13447 CVE-2026-44963 - Vulnerability in Veeam Backup & Replication v12 (CVSS v4 Score: 9.4) | Veeam... cvevulnerabilityveeambackupreplication https://senserva.com/cve/CVE-2026-42833.html CVE-2026-42833: Dynamics 365 version 9.1 fix KB5078943 (CVSS 9.1) CVE-2026-42833 is a Microsoft vulnerability, rated Important by Microsoft (CVSS 9.1, EPSS 1%). Fixed by KB5078943. Exploit odds, remediation steps, and a. cvedynamicsversionfixcvss https://hackerfeeds.com/cve/CVE-2012-1823 CVE-2012-1823 — critical severity (CVSS 9.8) — CISA KEV | HackerFeeds sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that cvecriticalseveritycvsscisa https://recentbreaches.com/vulnerability/CVE-2018-0161 CVE-2018-0161: Cisco IOS Software Resource Management Errors Vulnerability (CVSS 6.3) | Recent... CVE-2018-0161 affects Cisco · IOS Software. Exploited in the wild (CISA KEV). A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of... cisco iosresource managementcvesoftwareerrors https://docs.devguard.org/vulnerability-database/DLA-1557-1/ DLA-1557-1 – CVSS N/A | DevGuard Vulnerability Database DLA-1557-1 – CVSS N/A. tiff - security update… n avulnerability databasedlacvss https://www.cvefind.com/en/cve/cve-2026-92084.html CVE-2026-92084 - Detail CVSS, EPSS & CISA Kev | CVE Find Full details for CVE-2026-92084: technical description, impact, CVSS/EPSS scores, linked CWE, CAPEC, affected CPEs, disclosure date, and mitigation options. cvedetailcvssepsscisa https://shattered.io/roundcube-cve-2026-48842-sql-injection-2026/ Roundcube CVE-2026-48842: CVSS 8.1 SQLi Exploited [2026] Sep 28, 2026 - CVE-2026-48842 lets attackers SQL-inject Roundcube webmail pre-auth. CVSS 8.1, active exploitation reported, no CISA KEV listing yet. roundcubecvecvsssqliexploited https://recentbreaches.com/vulnerability/CVE-2014-1776 CVE-2014-1776: Microsoft Internet Explorer Memory Corruption Vulnerability (CVSS 9.8) | Recent... CVE-2014-1776 affects Microsoft · Internet Explorer. Exploited in the wild (CISA KEV). Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11... microsoft internet explorermemory corruptioncvevulnerabilitycvss https://securityelites.com/cve/CVE-2023-20122/ CVE-2023-20122 — CVE Details, CVSS Score & Exploits | SecurityElites Full details for CVE-2023-20122: CVSS severity score, affected software, exploit availability, patch information, and vulnerability analysis. cvedetailscvssscoreexploits https://secboard.org/cve/CVE-2026-53362 CVE-2026-53362 — aktiv ausgenutzt (KEV), CVSS 7.8 | SecBoard cveaktivausgenutztkevcvss https://www.cvefind.com/fr/cve/CVE-2015-2301.html CVE-2015-2301 - Détail CVSS, EPSS & CISA KEV | CVE Find Fiche complète pour CVE-2015-2301 : description technique, impact, score CVSS/EPSS, CWE, CAPEC, CPE affectés, date de publication, surface d’attaque et... cvecvssepsscisakev https://ninjasignal.ninja/intel/cve/GHSA-pr6h-vr44-xq8j GHSA-pr6h-vr44-xq8j (CVSS 5.3) — Ninja Signal Threat Intelligence | Ninja Signal ## Summary In affected versions, enabling registry authentication (`OBOT_SERVER_ENABLE_REGISTRY_AUTH=true`) does not actually protect the MCP Registry endpoint threat intelligenceghsacvssninjasignal https://reconix.co/tools/risk-calculator/ CVSS 4.0 and OWASP Risk Rating Calculator | Reconix Free calculator for CVSS 4.0 (Base and Exploit Maturity) and the OWASP Risk Rating Methodology. Paste a vector or score a finding in your browser. cvssowaspriskratingcalculator https://docs.devguard.org/vulnerability-database/CVE-2018-18868/ CVE-2018-18868 – CVSS 6.1 | DevGuard Vulnerability Database CVE-2018-18868 (Medium) – CVSS 6.1. No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.… vulnerability databasecvecvss https://www.syrianetf.com/what-types-of-testing-equipment-are-used-for-cvss.html What Types of Testing Equipment Are Used for CVSS? - Flammability Testing Equipment Manufacturer Jan 7, 2025 - The CVSS (CVSS), playing a key role in assessing and prioritizing the severity of weaknesses, is in the quickly evolving field of information security.A range... typestestingequipmentusedcvss https://www.beri.net/article/2026-05-12-microsoft-semantic-kernel-cve-9-9-rce-prompt-injection Microsoft Semantic Kernel CVE: CVSS 9.9 RCE via Prompts | THE D*AI*LY BRIEF May 12, 2026 - Microsoft disclosed two CVSS 9.9 RCEs in Semantic Kernel — its own 27K-star AI agent framework. CISO action plan and 25-point risk assessment. the dmicrosoftsemantickernelcve https://securityelites.com/cve/CVE-2023-20043/ CVE-2023-20043 — CVE Details, CVSS Score & Exploits | SecurityElites Full details for CVE-2023-20043: CVSS severity score, affected software, exploit availability, patch information, and vulnerability analysis. cvedetailscvssscoreexploits https://ayinedjimi-consultants.fr/cve/cve-2026-76657-hpe-fabric-composer-cvss10 CVE-2026-76657 : HPE Fabric Composer double RCE non-auth CVSS 10 Oct 7, 2026 - CVE-2026-76657 et CVE-2026-76658 : deux failles CVSS 10.0 dans HPE Fabric Composer — bypass API non-auth et RCE root. Mettez à jour vers la version 7.3.4. cvehpefabriccomposerdouble https://www.jw-lok.com/product/12393.html CVSS-FNS2_江苏经纬阀业有限公司,接头,阀门,阀组,过滤器,快速接头 CVSS-FNS2-江苏经纬阀业有限公司,接头,阀门,阀组,过滤器,快速接头-316 不锈钢, CV系列单向阀, 端口均为1/8 NPT阴螺纹, 氟橡胶(FKM)O形圈, 207bar(3000psig), -23°C至190°C(-10°F至375°F), 固定开启压力0.21bar(3psig) cvss https://securityelites.com/cve/CVE-2017-5638/ CVE-2017-5638 — CVE Details, CVSS Score & Exploits | SecurityElites Full details for CVE-2017-5638: CVSS severity score, affected software, exploit availability, patch information, and vulnerability analysis. cvedetailscvssscoreexploits Sponsored https://ctwmsg.com/?siteId=jasmin&cobrandId=&superCategoryName=&categoryName=fetish&pageName=listpage&prm[psid]=robuta&prm[pstool]=211_18&prm[psprogram]=pps&prm[campaign_id]=&subAffId= Live Sex Cams and Adult Chat with Webcam Girls | LiveJasmin Chat for free on LiveJasmin and watch HD Live Sex cam shows! 2000+ Models are waiting for You, no registration required. https://ninjasignal.ninja/intel/cve/GHSA-v53p-9fqp-m79j GHSA-v53p-9fqp-m79j (CVSS 7.5) — Ninja Signal Threat Intelligence | Ninja Signal ### Summary When `addressparser` finds no address by its strict reading, it falls back to pulling one out of the free text with `/\s*\b[^@\s]+@[^\s]+\b\s*/`. T threat intelligenceghsacvssninjasignal https://warnhack.com/blog/cvss-4-0-guide-scoring-metrics-changes CVSS 4.0 Guide: Scoring, Metrics, and Changes vs 3.1 | WarnHack Oct 6, 2026 - Master CVSS 4.0 with our guide on new metrics like Attack Requirements and Safety. Learn the differences from 3.1 to prioritize vulnerabilities better. cvssguidescoringmetricschanges