CVE-2026-92958Published
vm2 before 3.11.7 Denylist Bypass via fs/promises
cve-program ·
Vendor product: vm2
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699236 source statements · aliases may refer to the same vulnerabilityCVE-2026-16777Published
Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter
cve-program ·
Vendor product: Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers
CVE-2026-92942Published
vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry
cve-program ·
Vendor product: vm2
CVE-2026-92948Published
vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
cve-program ·
Vendor product: vm2
CVE-2026-92937Published
vm2 3.11.6 Remote Code Execution via Promise call/apply
cve-program ·
Vendor product: vm2
CVE-2026-13285Published
IBM MQ Managed File Transfer is vulnerable to XML external entity injection
cve-program ·
Vendor product: MQ
CVE-2026-92983Published
InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
cve-program ·
Vendor product: lmdeploy
CVE-2026-85652Published
Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
cve-program ·
Vendor product: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
CVE-2026-12384Published
Broken Access Control in TECHIN2B Application
cve-program ·
Vendor product: TECHIN2B Application
CVE-2026-92963Published
vm2 before 3.11.2 Information Disclosure via Internal State
cve-program ·
Vendor product: vm2
CVE-2026-11757Published
Reflected XSS in KA Informatics' Bar Association Website
cve-program ·
Vendor product: Bar Association Website
CVE-2026-13684Published
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct de…
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-21848Published
HCL BigFix Service Management is affected by multiple security vulnerabilities.
cve-program ·
Vendor product: HCL BigFix Service Management
CVE-2026-13639Published
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-serv…
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-13635Published
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to obtain non-sensitive information.
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-13673Published
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to read or write ar…
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-56590Published
HCL BigFix Service Management is affected by multiple security vulnerabilities.
cve-program ·
Vendor product: HCL BigFix Service Management
CVE-2026-13666Published
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write …
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-20336Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Resource Lifetime Management Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20334Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-4036Published
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated us…
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-20335Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Calculation Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20332Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20333Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incorrect Comparison Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20329Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20331Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-40531Published
An integer overflow or wraparound vulnerability in File Operation in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to conduct limited denial-of-service attacks.
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-20330Published
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Management Center (FMC) · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20250Published
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20249Published
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20154Published
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-40532Published
A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain sensitive information.
cve-program ·
Vendor product: DiskStation Manager (DSM)
CVE-2026-20248Published
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20222Published
Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20121Published
CIsco FTD Bypass Access List
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-20120Published
Cisco FTD ACL bypass vulnerability
cve-program ·
Vendor product: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · Vendor product: Cisco Secure Firewall Threat Defense (FTD) Software
CVE-2026-18405Published
Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
cve-program ·
Vendor product: Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
CVE-2026-21806Published
HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)
cve-program ·
Vendor product: HCL BigFix Service Management
CVE-2026-87228Published
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Oracle Hyperion Financial Management
CVE-2026-87229Published
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Oracle Hyperion Financial Management
CVE-2026-87230Published
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…
cve-program ·
Vendor product: Oracle Hyperion Financial Management
CVE-2026-87232Published
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with acc…
cve-program ·
Vendor product: Oracle Hyperion Financial Management
CVE-2026-87233Published
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with net…
cve-program ·
Vendor product: Oracle Hyperion Financial Management
CVE-2026-54239Published
FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope
cve-program ·
Vendor product: faustjs
CVE-2026-54617Published
GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler
cve-program ·
Vendor product: Launcher
CVE-2026-54916Published
NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft
cve-program ·
Vendor product: devicetype-library
CVE-2026-45140Published
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
cve-program ·
Vendor product: chamilo-lms
CVE-2026-54237Published
Wavelog: Unauthenticated Remote Code Execution
cve-program ·
Vendor product: wavelog
CVE-2026-86049Published
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
cve-program ·
Vendor product: jupyter_server
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.