Loading vulnerability catalog
Threat intelligence
Public CVEs with current exploit evidence, risk signals and related defensive or research tooling.
Exploits RSS| CVE and title | Evidence / dates | CVSS | EPSS | KEV | Vendor / product | Exploits | Updated |
|---|---|---|---|---|---|---|---|
| CVE-2026-83548A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote... | Evidence Sep 2, 2026Published Sep 1, 2026 | 10.0HighCritical | 8.8%Low | KEV | SonicWallSMA1000 |
| 42 Repository evidenceEvidence observed: Sep 26, 2026 |
| Sep 3, 2026 |
| CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability | Evidence Aug 18, 2026Published Jul 14, 2026 | 9.1HighCritical | 69.5%High | KEV | MicrosoftMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition | 61 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 2, 2026 |
|---|
| CVE-2026-48909Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4 | Evidence Jul 6, 2026Published Jun 20, 2026 | 9.5HighCritical | 4.9%Low | — | joomshaper.netSP LMS extension for Joomla | 51 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2026-4480Samba: samba: remote code execution in printing subsystem via unescaped job description | Evidence Aug 8, 2026Published May 26, 2026 | 9.8HighCritical | 13.9%Moderate | — | Red HatRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4 | 81 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2026-44578Next.js: Server-side request forgery in applications using WebSocket upgrades | Evidence Aug 8, 2026Published May 13, 2026 | 8.6HighHigh | 1.9%Low | — | vercelnext.js | 101 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2026-39987marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass | Evidence Apr 23, 2026Published Apr 9, 2026 | 9.3HighCritical | 37.9%Moderate | KEV | marimo-teammarimo | 241 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 3, 2026 |
|---|
| CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket | Evidence Aug 24, 2026Published Apr 7, 2026 | 8.2HighHigh | 2.6%Low | — | vitejsvite, vite-plus | 62 Repository evidenceEvidence observed: Sep 25, 2026 | Aug 24, 2026 |
|---|
| CVE-2026-33453Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution | Evidence Aug 6, 2026Published Apr 27, 2026 | 10.0HighCritical | 7.2%Low | — | Apache Software FoundationApache Camel | 31 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 6, 2026 |
|---|
| CVE-2026-27886Strapi may leak sensitive data via relational filtering due to lack of query sanitization | Evidence Aug 8, 2026Published May 14, 2026 | 9.2HighCritical | 2.5%Low | — | strapistrapi | 41 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2026-16232Authentication Bypass in the SmartConsole Login Process Using an Application Token | Evidence Jul 22, 2026Published Jul 22, 2026 | 9.3HighCritical | 78.0%High | KEV | checkpointQuantum Security Management, Multi-Domain Security Management | 42 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 2, 2026 |
|---|
| CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Evidence Jul 14, 2026Published Jul 14, 2026 | 10.0HighCritical | 6.8%Low | KEV | SonicWallSMA1000 | 62 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 2, 2026 |
|---|
| CVE-2024-47176cups-browsed binds to INADDR_ANY:631, trusting any packet from any source | Evidence Aug 8, 2026Published Sep 26, 2024 | 5.3ModerateMedium | 50.6%High | — | OpenPrintingcups-browsed | 183 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2021-27877Veritas Backup Exec Agent Improper Authentication Vulnerability | Evidence Apr 7, 2023Published Mar 1, 2021 | 9.8HighCritical | 64.9%High | KEV | n/an/a | 42 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 2, 2026 |
|---|
| CVE-2020-4429IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could... | Evidence —Published May 7, 2020 | 9.8HighCritical | 72.0%High | — | IBMData Risk Manager | 44 Repository evidenceEvidence observed: Sep 25, 2026 | Nov 3, 2025 |
|---|
| CVE-2018-8011mod_md, DoS via Coredumps on specially crafted requests | Evidence —Published Jul 18, 2018 | 7.5HighHigh | 55.6%High | — | Apache Software FoundationApache HTTP Server | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 16, 2024 |
|---|
| CVE-2016-8706An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be... | Evidence —Published Jan 6, 2017 | 8.1HighHigh | 45.7%Moderate | — | MemcachedMemcached | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 6, 2024 |
|---|
| CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability | Evidence Aug 21, 2026Published Aug 13, 2026 | 8.9HighHigh | 71.7%High | KEV | ZimbraCollaboration | 91 Repository evidenceEvidence observed: Sep 26, 2026 | Sep 2, 2026 |
|---|
| CVE-2026-42167mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with... | Evidence Aug 25, 2026Published Apr 28, 2026 | 8.1HighHigh | 7.3%Low | — | ProFTPDProFTPD | 81 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 29, 2026 |
|---|
| CVE-2026-23829Mailpit has SMTP Header Injection via Regex Bypass | Evidence Aug 25, 2026Published Jan 18, 2026 | 5.3ModerateMedium | 1.4%Low | — | axllentmailpit | 31 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 25, 2026 |
|---|
| CVE-2025-8286Güralp Systems FMUS Series and MIN Series Devices | Evidence —Published Jul 31, 2025 | 9.3HighCritical | 1.3%Low | — | Güralp SystemsGüralp FMUS Series, MIN Series Devices | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 15, 2025 |
|---|
| CVE-2025-25256An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM... | Evidence Aug 28, 2026Published Aug 12, 2025 | 9.8HighCritical | 64.7%High | — | FortinetFortiSIEM | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 28, 2026 |
|---|
| CVE-2024-48651In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from... | Evidence —Published Nov 29, 2024 | 7.5HighHigh | 2.2%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Nov 3, 2025 |
|---|
| CVE-2024-48208pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file. | Evidence Aug 4, 2026Published Oct 24, 2024 | 8.6HighHigh | 1.6%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 4, 2026 |
|---|
| CVE-2024-23108An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute... | Evidence Aug 8, 2026Published Feb 5, 2024 | 10.0HighCritical | 80.3%High | — | FortinetFortiSIEM | 31 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2023-51713make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics. | Evidence —Published Dec 22, 2023 | 7.5HighHigh | 4.2%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Nov 3, 2025 |
|---|
| CVE-2023-34992A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute... | Evidence Aug 8, 2026Published Oct 10, 2023 | 10.0HighCritical | 81.7%High | — | FortinetFortiSIEM | 31 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2023-22629An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated... | Evidence Apr 6, 2023Published Feb 14, 2023 | 8.8HighHigh | 12.3%Moderate | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2022-31793do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a... | Evidence Aug 5, 2026Published Aug 4, 2022 | 7.5HighHigh | 16.9%Moderate | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 5, 2026 |
|---|
| CVE-2021-44521Remote code execution for scripted UDFs | Evidence Aug 8, 2026Published Feb 11, 2022 | 9.1HighCritical | 57.5%High | — | Apache Software FoundationApache Cassandra | 31 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2021-40524In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to... | Evidence —Published Sep 5, 2021 | 7.5HighHigh | 4.3%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Nov 4, 2025 |
|---|
| CVE-2021-30047VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. | Evidence —Published Aug 22, 2023 | 7.5HighHigh | 3.2%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Oct 3, 2024 |
|---|
| CVE-2020-9274An issue was discovered in Pure-FTPd 1.0.49. An uninitialized pointer vulnerability has been detected in the diraliases linked list. When the... | Evidence —Published Feb 26, 2020 | 7.5HighHigh | 6.0%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 4, 2024 |
|---|
| CVE-2020-35359Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. | Evidence —Published Dec 26, 2020 | 7.5HighHigh | 4.5%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 4, 2024 |
|---|
| CVE-2020-11981An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ)... | Evidence Aug 14, 2026Published Jul 16, 2020 | 9.8HighCritical | 36.5%Moderate | — | Apache Software FoundationApache Airflow | 32 Repository evidenceEvidence observed: Sep 25, 2026 | Aug 14, 2026 |
|---|
| CVE-2019-20176In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. | Evidence —Published Dec 31, 2019 | 7.5HighHigh | 4.4%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 5, 2024 |
|---|
| CVE-2016-2004HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to... | Evidence May 26, 2016Published Apr 21, 2016 | 9.8HighCritical | 94.3%High | — | n/an/a | 42 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2015-1419Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing. | Evidence —Published Jan 28, 2015 | 5.0ModerateMedium | 6.8%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 6, 2024 |
|---|
| CVE-2014-1843Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property... | Evidence Feb 11, 2014Published Apr 29, 2014 | 5.0ModerateMedium | 4.5%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2014-1842Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go... | Evidence Feb 11, 2014Published Apr 29, 2014 | 5.0ModerateMedium | 5.0%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2014-1841Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home... | Evidence Feb 11, 2014Published Apr 29, 2014 | 5.0ModerateMedium | 4.7%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2011-3171Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating... | Evidence —Published Nov 4, 2011 | 3.6LowLow | 0.6%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 6, 2024 |
|---|
| CVE-2010-3867Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create directories,... | Evidence —Published Nov 9, 2010 | 7.1HighHigh | 7.6%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 7, 2024 |
|---|
| CVE-2009-0884Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets. | Evidence —Published Mar 12, 2009 | 4.3ModerateMedium | 3.4%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 7, 2024 |
|---|
| CVE-2008-5281Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command. | Evidence Feb 4, 2008Published Nov 29, 2008 | 10.0HighHigh | 6.4%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2008-0702Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and... | Evidence Feb 2, 2008Published Feb 12, 2008 | 9.3HighHigh | 7.7%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2006-2173Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a... | Evidence —Published May 4, 2006 | 6.4ModerateMedium | 6.5%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 7, 2024 |
|---|
| CVE-2005-0851FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain... | Evidence —Published Mar 24, 2005 | 5.0ModerateMedium | 2.2%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 7, 2024 |
|---|
| CVE-2005-0850FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as... | Evidence —Published Mar 24, 2005 | 5.0ModerateMedium | 2.2%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 7, 2024 |
|---|
| CVE-2004-1641Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1)... | Evidence Aug 31, 2004Published Feb 20, 2005 | 5.0ModerateMedium | 8.2%Low | — | n/an/a | 21 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2026 |
|---|
| CVE-2004-0656The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections. | Evidence —Published Jul 13, 2004 | 5.0ModerateMedium | 2.3%Low | — | n/an/a | 11 Repository evidenceEvidence observed: Sep 26, 2026 | Aug 8, 2024 |
|---|