🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-107240 HIGH The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the VOS appliance and is not required... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125087 MEDIUM A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file src/server.rs of the com... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-125086 CRITICAL A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDae... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-107246 CRITICAL The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal. This let... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125082 MEDIUM A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a. Affected by this vulnerability is the function... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-124600 CRITICAL GV-Face transmits sensitive user credentials and
related authentication data over unencrypted HTTP connections. The HTTP
traffic is not encrypted, an... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125079 MEDIUM A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf_get_onvif_user_pwd/mydlink_default_sys_info of the file /mnt... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125078 MEDIUM A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown part of the file login... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-126260 CRITICAL R Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125077 MEDIUM A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functi... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| ???-????-???? HIGH ?????????????????????????????????? ?????????????????????????????????? | HIGH | ????? | ????? | SA | 4 days ago |
| CVE-2026-125076 MEDIUM A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendan... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125406 HIGH Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ec_telnet.c that decrements the ou... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125405 HIGH Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c due to unvalidated NTLM message... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125404 HIGH Ettercap through 0.8.4.1 contains an integer underflow in ccmp_decrypt() in src/ec_encryption_ccmp.c that subtracts the 8-byte CCMP trailer without ch... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125403 HIGH Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in src/ec_sslwrap.c, caused by a stale... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125402 HIGH Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the unchecked ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125401 HIGH Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125400 HIGH Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2 ovector after freeing match da... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-125399 HIGH Fluxion before 6.39 contains an OS command injection vulnerability in the fluxion.sh target scanner, which decodes access point ESSIDs with eval after... | HIGH | ????? | ????? | NVD | 4 days ago |