by Kastro CVE-2026-20079 · Cisco Cisco Secure Firewall Management Center (FMC)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,974 matching vulnerabilities · Page 211 of 780
Cisco
CVE-2026-20131 · Cisco Cisco Secure Firewall Management Center (FMC)
Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
openemr
D-Link
mitre
CVE-2025-70219 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.
CVE-2026-26478 · mitre
A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a sp…
CVE-2025-66944 · mitre
SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query pa…
CVE-2025-70218 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component.
CVE-2025-46108 · mitre
D-link Dir-513 A1FW110 is vulnerable to Buffer Overflow in the function formTcpipSetup.
CVE-2025-66678 · mitre
An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to ex…
CVE-2025-70220 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.
CVE-2025-70221 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin.
CVE-2025-70222 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.
CVE-2025-70223 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.
CVE-2025-70225 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component
CVE-2025-70226 · mitre
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.
CVE-2025-69969 · mitre
A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd P…
pac4j
craftcms
freescout-help-desk
Apache Software Foundation
CVE-2026-27446 · Apache Software Foundation Apache Artemis
Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation
devcode-it
QwikDev
International Datacasting Corporation (IDC)
CVE-2026-28773 · International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface
Authenticated OS Command Injection via Ping Utility Leading to RCE as Root
CVE-2026-28774 · International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver Web Management Interface
Authenticated OS Command Injection via Traceroute Utility leads to Root RCE
CVE-2026-28775 · International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver
Unauthenticated RCE via SNMP Default Writable Community String
CVE-2026-28778 · International Datacasting Corporation (IDC) IDC SFX2100 SuperFlex Satellite Receiver
Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100
CVE-2026-28776 · International Datacasting Corporation (IDC) IDC SFX2100 SuperFlex Satellite Receiver
Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver
CVE-2026-28777 · International Datacasting Corporation (IDC) SFX2100 Satellite Receiver
Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver
CVE-2026-29119 · International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver
Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver
xwiki-contrib
CVE-2025-66024 · xwiki-contrib application-blog-ui
XWiki Blog Application home page vulnerable to Stored XSS via Post Title
froxlor
Devolutions
CVE-2026-3204 · Devolutions Server
Improper input validation in the error message page in Devolutions Server 2025.3.16 and earlier allows remote attackers to spoof the dis…
CVE-2026-3224 · Devolutions Server
Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an un…
CVE-2026-2590 · Devolutions Remote Desktop Manager
Improper enforcement of the Disable password saving in vaults setting in the connection entry component in Devolutions Remote Desktop M…
CVE-2026-3130 · Devolutions Server
Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete…
OSC
OpenText™
SEPPmail
CVE-2026-27442 · SEPPmail Secure Email Gateway
zip_attachments Path Traversal
CVE-2026-27441 · SEPPmail Secure Email Gateway
PDF Password CMDi
2N Telekomunikace a.s.
CVE-2025-59786 · 2N Telekomunikace a.s. 2N Access Commander
Cookies are not Invalidated upon Logout and Password Change
aliasvault
IBM
CVE-2025-14923 · IBM WebSphere Application Server - Liberty
IBM WebSphere Application Server Liberty could provide weaker than expected security
International Datacasting Corporation
CVE-2026-29120 · International Datacasting Corporation IDC SFX2100 SuperFlex Satellite Receiver
Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver
Portwell
CVE-2026-3437 · Portwell Portwell Engineering Toolkits