Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695813 source statements · aliases may refer to the same vulnerability

CVE-2011-3389Published

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which …

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2006-0987Published

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a den…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2004-0230Published

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protoc…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2002-0510Published

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2002-0478Published

The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2001-1210Published

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using a…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2001-0514Published

SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive informati…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2001-0380Published

Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2000-0515Published

The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2000-0147Published

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-1999-0792Published

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-1999-0516Published

An SNMP community name is guessable.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-1999-0472Published

The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-1999-0024Published

DNS cache poisoning via BIND, by predictable query IDs.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2001-1184Published

wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection a…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2002-0109Published

Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which cau…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2013-4786Published

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP mes…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2002-1117Published

Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2015-2466Published

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2015-2467Published

Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2000-1200Published

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107841Published

pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

cve-program ·

Vendor product: pacioli

CVSS 3.1 5.7Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107384Published

MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

cve-program ·

Vendor product: mariadb-connector-nodejs

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107389Published

music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort

cve-program ·

Vendor product: music-metadata

CVSS 3.1 6.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107835Published

OWASP Coraza WAF: Cookie Parser Confusion

cve-program ·

Vendor product: coraza

CVSS 3.1 4.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-100515Published

WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: woo-photo-reviews

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-55797Published

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git reposi…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-97289Published

WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: quiz-master-next

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-108124Published

WordPress Post Author Authenticated SQLi

cve-program ·

https://wordpress.org/plugins: wp-post-author

CVSS 3.1 4.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-108125Published

WordPress Post Author Authenticated SQLi

cve-program ·

https://wordpress.org/plugins: wp-post-author

CVSS 4.0 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-102554Published

Denial of Service via Eager Array Allocation During Deserialization in Guava

cve-program ·

Vendor product: Guava

CVSS 4.0 8.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-90983Published

OTP Code Exposure in Hayat Hospital's Hayat Mobile

cve-program ·

Vendor product: Hayat Mobile

CVSS 3.1 8.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107783Published

Insertion of sensitive information into log file in AWS Tools for PowerShell

cve-program ·

Vendor product: aws-tools-for-powershell

CVSS 3.1 5.9 · CVSS 4.0 6.7Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-78795Published

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107886Published

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation…

cve-program ·

Vendor product: CUPS

CVSS 3.1 2.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87109Published

Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

cve-program ·

Vendor product: Ops Manager

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-101028Published

Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts

cve-program ·

https://repo.hex.pm: ash · https://github.com: ash-project/ash

CVSS 4.0 6.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106145Published

Privilege Escalation in Telerik Report Server Service-Agent Hub

cve-program ·

Vendor product: Telerik Report Server

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106155Published

Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers

cve-program ·

Vendor product: Telerik Report Server

CVSS 3.1 8.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-97075Published

WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: wp-rocket

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107833Published

OWASP Coraza WAF: Unbounded recursion in JSON response body processor causes CPU exhaustion

cve-program ·

Vendor product: coraza

CVSS 3.1 5.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107836Published

RIOT: nanoCoAP Block2 client slice handling underflows on inconsistent server-controlled block size

cve-program ·

Vendor product: RIOT

CVSS 4.0 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107819Published

MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

cve-program ·

Vendor product: server

CVSS 3.1 5.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106505Published

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to co…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.7 · CVSS 3.1 · [email protected] · Primary 8.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-107807Published

Nginx UI: Node Secret Credential Exposure via URL Query Parameter

cve-program ·

Vendor product: nginx-ui

CVSS 3.1 8.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107826Published

OWASP Coraza WAF: JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)

cve-program ·

Vendor product: coraza

CVSS 3.1 7.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-55797Published

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

cve-program ·

Vendor product: argo-cd

CVSS 3.1 8.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14502Published

IBM DataPower Gateway Improper Authentication

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 9.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-75348Published

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure() when it parses re…

cve-program ·

Vendor product: n/a

CVSS 3.1 7.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-78407Published

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

cve-program ·

Vendor product: Security Verify Access · Vendor product: Verify Identity Access · Vendor product: Security Verify Access Container

CVSS 3.1 5.4Source modified 9 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.