Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-34008 | 8.5 (v4.0) | **Privilege Escalation** World-writable crontab path m… |
QNAP Systems Inc. |
Notes Station 3 |
2026-10-15T09:37:29.958Z | 2026-10-15T13:33:55.371Z |
| cve-2026-34007 | 6.9 (v4.0) | **RCE** Unsanitized `X-Forwarded-For` header passed to… |
QNAP Systems Inc. |
Notes Station 3 |
2026-10-15T09:37:20.174Z | 2026-10-15T13:36:35.475Z |
| cve-2026-53882 | 8.7 (v4.0) | Path Traversal in Virtualization Station VM Import |
QNAP Systems Inc. |
Virtualization Station |
2026-10-15T09:31:51.390Z | 2026-10-15T13:43:56.655Z |
| cve-2026-50612 | 9.4 (v4.0) | Import Symlink Following Remote Code Execution Vulnera… |
QNAP Systems Inc. |
QuMagie |
2026-10-15T09:31:41.898Z | 2026-10-15T13:44:26.606Z |
| cve-2026-44084 | 8.7 (v4.0) | Access Code Forgery in Video Station leading to unauth… |
QNAP Systems Inc. |
Video Station |
2026-10-15T09:31:29.859Z | 2026-10-15T14:13:21.907Z |
| cve-2026-41545 | 8.6 (v4.0) | WebSocket timelapse path traversal and command injection |
QNAP Systems Inc. |
QuMagie |
2026-10-15T09:31:05.937Z | 2026-10-15T13:45:00.535Z |
| cve-2026-41541 | 5.3 (v4.0) | Symlink creation in qsyncsrv.cgi |
QNAP Systems Inc. |
Qsync Central |
2026-10-15T09:30:51.471Z | 2026-10-15T13:45:21.273Z |
| cve-2026-39989 | 5.3 (v4.0) | SSRF in QNAP Download Station |
QNAP Systems Inc. |
Download Station |
2026-10-15T09:30:42.076Z | 2026-10-15T13:43:27.205Z |
| cve-2026-34015 | 8.7 (v4.0) | Remote Code Execution in upload.php of Video Station |
QNAP Systems Inc. |
Video Station |
2026-10-15T09:30:31.743Z | 2026-10-15T13:39:26.593Z |
| cve-2026-34014 | 8.4 (v4.0) | ds-move-files.sh is writable and executed as root |
QNAP Systems Inc. |
Download Station |
2026-10-15T09:30:12.174Z | 2026-10-15T13:39:02.703Z |
| cve-2026-34006 | 9.3 (v4.0) | Pre-Authentication Multiple Critical Vulnerabilities i… |
QNAP Systems Inc. |
sMedio DTCP MOVE |
2026-10-15T09:30:03.388Z | 2026-10-15T13:38:37.753Z |
| cve-2026-26245 | 7.1 (v4.0) | SQLi#2 SQL Injection in class_videos.php getSmartVideo… |
QNAP Systems Inc. |
Video Station |
2026-10-15T09:29:45.734Z | 2026-10-15T13:37:49.564Z |
| cve-2026-26244 | 7.1 (v4.0) | SQLi#1 SQL Injection in class_videos.php _getFilters |
QNAP Systems Inc. |
Video Station |
2026-10-15T09:29:36.440Z | 2026-10-15T13:37:06.779Z |
| cve-2026-26243 | 7.2 (v4.0) | Arbitrary Folder Deletion in Qsync Central 5.0.0.5 |
QNAP Systems Inc. |
Qsync Central |
2026-10-15T09:29:27.642Z | 2026-10-15T13:37:30.842Z |
| cve-2026-79825 | 7.1 (v3.1) | HPE NonStop NDSREST - Heap buffer overflow vulnerability |
Hewlett Packard Enterprise |
HPE NonStop NDSREST |
2026-10-15T09:25:56.645Z | 2026-10-15T13:45:45.120Z |
| cve-2026-79824 | 8 (v3.1) | HPE NonStop Python 3.x - Directory traversal vulnerability |
Hewlett Packard Enterprise |
HPE NonStop Python 3.x |
2026-10-15T09:09:17.173Z | 2026-10-15T14:14:59.352Z |
| cve-2026-18661 | 8.8 (v4.0) | In Eclipse Jetty, across various versions of `jet… |
Eclipse Foundation |
|
2026-10-15T09:01:28.668Z | 2026-10-15T13:46:37.040Z |
| cve-2026-79823 | 4 (v3.1) | HPE NonStop EMS Distributor - Buffer Overflow vulnerability |
Hewlett Packard Enterprise |
HPE NonStop EMS Distributor |
2026-10-15T09:01:09.650Z | 2026-10-15T13:46:58.729Z |
| cve-2026-63315 | 8.2 (v4.0) | Plaintext storage of a password in WebCTI |
Slican |
IPx |
2026-10-15T09:00:45.702Z | 2026-10-15T13:47:26.220Z |
| cve-2026-63314 | 8.7 (v4.0) | SQL Injection in WebCTI |
Slican |
IPx |
2026-10-15T09:00:40.742Z | 2026-10-15T13:47:47.961Z |
| cve-2026-35088 | 8.2 (v4.0) | Inadequate Encryption Strength in Slican telephone exchanges |
Slican |
IPx |
2026-10-15T09:00:35.428Z | 2026-10-15T13:48:28.306Z |
| cve-2026-101287 | 9.3 (v4.0) | Authentication bypass in Stela by Diaple Networking |
Diaple |
Stela |
2026-10-15T09:00:07.829Z | 2026-10-15T13:48:56.460Z |
| cve-2026-101290 | 7.5 (v3.1) | CVE-2026-101290 |
SICK AG |
Sick_Safetyscanners_Base CPP Driver |
2026-10-15T08:53:33.117Z | 2026-10-15T13:49:55.870Z |
| cve-2026-77711 | 8.2 (v4.0) | When Jetty's `HttpClient` make a request to a ser… |
Eclipse Foundation |
Eclipse Jetty |
2026-10-15T08:51:48.066Z | 2026-10-15T13:50:52.566Z |
| cve-2026-76184 | 8.2 (v4.0) | In Eclipse Jetty, HttpClient may receive a redire… |
Eclipse Foundation |
Eclipse Jetty |
2026-10-15T08:46:54.683Z | 2026-10-15T13:51:45.344Z |
| cve-2026-104618 | 6.2 (v3.1) 6.9 (v4.0) | sdbootutil: world-readable debug log |
SUSE |
SUSE Linux Enterprise Server 16.1 |
2026-10-15T08:41:31.842Z | 2026-10-15T13:58:23.634Z |
| cve-2026-76182 | 6.9 (v4.0) | In Eclipse Jetty, `TryPathsHandler` and `TryFiles… |
Eclipse Foundation |
Eclipse Jetty |
2026-10-15T08:40:58.439Z | 2026-10-15T13:59:12.521Z |
| cve-2026-104617 | 5.1 (v3.1) 5.9 (v4.0) | sdbootutil: qrencode invocation leaks PIN/recovery key… |
SUSE |
SUSE Linux Enterprise Server 16.1 |
2026-10-15T08:33:09.363Z | 2026-10-15T14:03:20.369Z |
| cve-2026-16438 | 9.4 (v4.0) | An arbitrary operation vulnerability in GENESIS64, ICO… |
Mitsubishi Electric Corporation |
GENESIS64 |
2026-10-15T08:31:41.267Z | 2026-11-05T06:52:55.711Z |
| cve-2026-16437 | 7.1 (v4.0) | An authentication bypass vulnerability in GENESIS, GEN… |
Mitsubishi Electric Corporation |
GENESIS |
2026-10-15T08:30:39.094Z | 2026-11-05T06:51:26.265Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-673 | Vulnérabilité dans Xen | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-672 | Vulnérabilité dans un composant partagé de Microsoft Office | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-671 | Multiples vulnérabilités dans Microsoft Exchange Server | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-670 | Vulnérabilité dans Microsoft Office | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-669 | Vulnérabilité dans Microsoft ASP.NET SignalR | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-668 | Vulnérabilité dans le client LRPC de Microsoft | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-667 | Multiples vulnérabilités dans les pilotes en mode noyau de Microsoft Windows | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-666 | Multiples vulnérabilités dans Microsoft SharePoint | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-665 | Vulnérabilité dans Microsoft Bibliothèque d'objets de l'exécutable de Microsoft Scripting | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-664 | Vulnérabilité dans Microsoft Windows | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-663 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-662 | Vulnérabilité dans un composant graphique de Microsoft | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-661 | Multiples vulnérabilités dans Adobe Shockwave Player | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-660 | Multiples vulnérabilités dans Adobe Flash Player | 2013-12-11T00:00:00.000000 | 2013-12-11T00:00:00.000000 |
| certa-2013-avi-659 | Vulnérabilité dans Siemens COMOS | 2013-12-10T00:00:00.000000 | 2013-12-10T00:00:00.000000 |
| certa-2013-avi-658 | Multiples vulnérabilités dans Samba | 2013-12-09T00:00:00.000000 | 2013-12-09T00:00:00.000000 |
| certa-2013-avi-657 | Multiples vulnérabilités dans VMware ESX | 2013-12-09T00:00:00.000000 | 2013-12-09T00:00:00.000000 |
| certa-2013-avi-656 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2013-12-09T00:00:00.000000 | 2013-12-09T00:00:00.000000 |
| certa-2013-avi-655 | Vulnérabilité dans le noyau Linux | 2013-12-05T00:00:00.000000 | 2013-12-05T00:00:00.000000 |
| certa-2013-avi-654 | Multiples vulnérabilités dans Google Chrome | 2013-12-05T00:00:00.000000 | 2013-12-05T00:00:00.000000 |
| certa-2013-avi-653 | Vulnérabilité dans Xen | 2013-12-04T00:00:00.000000 | 2013-12-04T00:00:00.000000 |
| certa-2013-avi-652 | Vulnérabilité dans VMWare | 2013-12-04T00:00:00.000000 | 2013-12-04T00:00:00.000000 |
| certa-2013-avi-651 | Vulnérabilité dans Apache Struts | 2013-12-03T00:00:00.000000 | 2013-12-03T00:00:00.000000 |
| certa-2013-avi-650 | Multiples vulnérabilités dans Fujitsu Interstage HTTP Server | 2013-11-27T00:00:00.000000 | 2013-11-27T00:00:00.000000 |
| certa-2013-avi-649 | Multiples vulnérabilités dans les systèmes SCADA ABB | 2013-11-27T00:00:00.000000 | 2013-11-27T00:00:00.000000 |
| certa-2013-avi-648 | Multiples vulnérabilités dans Moodle | 2013-11-26T00:00:00.000000 | 2013-11-26T00:00:00.000000 |
| certa-2013-avi-647 | Vulnérabilité dans Ruby | 2013-11-22T00:00:00.000000 | 2013-11-22T00:00:00.000000 |
| certa-2013-avi-646 | Vulnérabilité dans Xen | 2013-11-22T00:00:00.000000 | 2013-11-22T00:00:00.000000 |
| certa-2013-avi-645 | Multiples vulnérabilités dans Drupal | 2013-11-21T00:00:00.000000 | 2013-11-21T00:00:00.000000 |
| certa-2013-avi-644 | Vulnérabilité dans nginx | 2013-11-20T00:00:00.000000 | 2013-11-20T00:00:00.000000 |