[UPDATE] [low] expat: Vulnerability allows Denial of Service
A local attacker can exploit a vulnerability in expat to conduct a Denial of Service attack.
Advisories tracked
20,904
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
3H AGO
[NEW] [high] Fortinet FortiSandbox: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Fortinet FortiSandbox to bypass security measures.
[NEW] [medium] Fortinet FortiClient EMS: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Fortinet FortiClient EMS to bypass security measures.
[NEW] [low] Fortinet FortiProxy and FortiOS: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Fortinet FortiOS and Fortinet FortiProxy to bypass security measures, manipulate data, and disclose information.
[NEW] [medium] Fortinet FortiOS and FortiProxy: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Fortinet FortiOS and Fortinet FortiProxy to execute arbitrary code, conduct a Cross Site Scripting attack, and manipulate data.
USN-8546-1: Linux kernel (Raspberry Pi) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - Infini…
[UPDATE] [medium] Grafana: Vulnerability allows information disclosure
A remote, authenticated attacker can exploit a vulnerability in Grafana to disclose information.
[UPDATE] [low] Grafana: Vulnerability allows bypassing security measures
A remote, authenticated attacker can exploit a vulnerability in Grafana to bypass security measures.
[NEW] [high] Microsoft SQL Server and Power BI: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft SQL Server and Microsoft Power BI to escalate privileges, execute arbitrary code, present false information, and disclose information.
[NEW] [high] Microsoft Exchange: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Exchange to execute arbitrary code, gain elevated permissions, or conduct spoofing attacks.
USN-8545-1: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - Infini…
[NEW] [high] Microsoft Dynamics NAV: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Microsoft Dynamics NAV to execute arbitrary code.
[NEW] [medium] Microsoft Surface: Vulnerability allows gaining administrator rights
A local attacker can exploit a vulnerability in several Microsoft Surface products to gain administrator rights.
[NEW] [medium] Microsoft Malware Protection Engine and Defender: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Microsoft Malware Protection Engine and Microsoft Defender to execute arbitrary code, gain elevated permissions, or disclose sensitive information.
[NEW] [high] Spotfire Server: Vulnerability Allows Bypassing Security Measures
A remote, anonymous attacker can exploit a vulnerability in Spotfire Server to bypass security measures.
[UPDATE] [medium] Zabbix: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Zabbix to conduct a denial of service attack and to bypass security measures.
[UPDATE] [high] IBM App Connect Enterprise: Vulnerability Allows Code Execution
A remote, anonymous attacker can exploit a vulnerability in IBM App Connect Enterprise and IBM Integration Bus to execute arbitrary code.
[UPDATE] [critical] Apple macOS: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Apple macOS to disclose information, conduct a denial of service attack, bypass security measures, manipulate files, and escalate their privileges.
[UPDATE] [high] cPanel/WHM (PostgreSQL, Perl): Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in cPanel/WHM to manipulate files and disclose confidential information.
[UPDATE] [high] Apple macOS Sequoia, Sonoma, and Ventura: Multiple Vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Apple macOS Sequoia, Sonoma, and Ventura to gain root privileges, execute arbitrary code, cause a denial-of-service condition, disclose confidential information, alter data, or bypass security measures.
[UPDATE] [medium] Red Hat Enterprise Linux (jq): Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux (jq) to conduct a denial of service attack.
[UPDATE] [medium] wget: Vulnerability Allows Unspecified Attack
A remote, anonymous attacker can exploit a vulnerability in wget to conduct an unspecified attack.
[UPDATE] [medium] OpenSSL: Vulnerability Allows Code Execution, Data Manipulation, Information Disclosure, and DoS
A remote anonymous attacker can exploit a vulnerability in OpenSSL to execute arbitrary code, cause a denial-of-service condition, disclose confidential information, and manipulate data.
[UPDATE] [medium] OpenSSL: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in OpenSSL to conduct a Denial of Service attack.
[UPDATE] [medium] BusyBox: Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in BusyBox to manipulate files.
[UPDATE] [high] Red Hat Enterprise Linux (python-pillow): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux in python-pillow to conduct a Denial of Service attack and disclose confidential information.
[UPDATE] [medium] NGINX: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in NGINX to conduct a Denial of Service attack.
[UPDATE] [medium] Python: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in Python to conduct a Denial of Service attack.
[NEW] [medium] Elasticsearch: Multiple vulnerabilities allow denial of service
A remote, authenticated attacker can exploit multiple vulnerabilities in Elasticsearch to conduct a denial of service attack.
[NEW] [medium] win.rar WinRAR: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in win.rar WinRAR to execute arbitrary program code.
[UPDATE] [high] NATS Server: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in NATS Server to execute arbitrary code, gain elevated permissions, bypass security measures, manipulate or disclose data, or cause a Denial-of-Service condition.
[UPDATE] [high] Apple macOS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Apple macOS to bypass security measures, conduct a Denial of Service attack, disclose information, manipulate files, and escalate privileges.
[UPDATE] [medium] Red Hat Enterprise Linux (389-ds-base): Vulnerability allows code execution and potentially Denial of Service
A remote, authenticated attacker can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary program code, and potentially to carry out a Denial of Service attack.
[UPDATE] [medium] NGINX OSS and NGINX Plus: Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in NGINX and NGINX Plus to manipulate files.
[NEW] [medium] Eclipse Jetty: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Eclipse Jetty to conduct a Denial of Service attack, bypass security measures, and disclose confidential information.
[NEW] [medium] Siemens SIMATIC S7: Vulnerability allows denial of service
An attacker from an adjacent network can exploit a vulnerability in Siemens SIMATIC S7 to carry out a denial of service attack.
[NEW] [high] rclone: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in rclone to read and write arbitrary files, as well as disclose information and bypass security mechanisms.
[NEW] [medium] etcd: Vulnerability allows bypassing security measures
A remote, authenticated attacker can exploit a vulnerability in etcd to bypass security measures.
[UPDATE] [medium] ffmpeg: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in ffmpeg to conduct a Denial of Service attack.
[NEW] [medium] Erlang/OTP: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Erlang/OTP to conduct a denial of service attack, disclose information, and bypass security measures.
Installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries
Installer of HYPER SBI 2 provided by SBI SECURITIES Co.,Ltd. insecurely loads Dynamic Link Libraries.
Mozilla Products Multiple Vulnerabilities
SonicWall SMA1000 Series Products Multiple Vulnerabilities
Adobe Monthly Security Update (July 2026)
Microsoft Monthly Security Update (July 2026)
CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability
Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments.
Multiple vulnerabilities in Microsoft Office (July 15, 2026)
Multiple vulnerabilities have been discovered in Microsoft Office. They allow an attacker to cause remote arbitrary code execution, privilege escalation, and a data confidentiality breach.
Multiple Vulnerabilities in Citrix Products (July 15, 2026)
Multiple vulnerabilities have been discovered in Citrix products. Some of them allow an attacker to cause privilege escalation, data confidentiality breaches, and a security policy bypass.
Multiple vulnerabilities in Microsoft Windows (July 15, 2026)
Multiple vulnerabilities have been discovered in Microsoft Windows. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation, and remote denial of service. Microsoft states that the vulnerability CVE-2026-56155...
CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability
KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options enabled and set a BCU key to lock the device.