Category

CVE Database

70 articles · Page 3 of 6
All News Malware Ransomware Breaches Vulnerabilities Nation-State CVEs
CVE
CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management contain a deseri…
CISA KEV · Mar 19, 2026 · CRITICAL
CVE
CVE-2025-66376 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability in the Classic UI where attackers could abu…
CISA KEV · Mar 18, 2026 · CRITICAL
CVE
CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute co…
CISA KEV · Mar 18, 2026 · CRITICAL
CVE
CVE-2025-47813 — Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in t…
CISA KEV · Mar 16, 2026 · CRITICAL
CVE
CVE-2026-3910 — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability that could al…
CISA KEV · Mar 13, 2026 · CRITICAL
CVE
CVE-2026-3909 — Google Skia Out-of-Bounds Write Vulnerability
Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory acces…
CISA KEV · Mar 13, 2026 · CRITICAL
CVE
CVE-2025-68613 — n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system …
CISA KEV · Mar 11, 2026 · CRITICAL
CVE
CVE-2021-22054 — Omnissa Workspace ONE Server-Side Request Forgery
Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability t…
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to ru…
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2026-1603 — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow …
CISA KEV · Mar 9, 2026 · CRITICAL
CVE
CVE-2017-7921 — Hikvision Multiple Products Improper Authentication Vulnerability
Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privile…
CISA KEV · Mar 5, 2026 · CRITICAL
CVE
CVE-2021-22681 — Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may al…
CISA KEV · Mar 5, 2026 · CRITICAL