24h | 7d | 30d

CVE-2020-4428

Overview

  • IBM
  • Data Risk Manager
07 May 2020
Published
03 Nov 2025
Updated
CVSS v3.0
CRITICAL (9.1)
EPSS
61.69%
KEV

Description

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.

Statistics

  • 1 Post
  • 5 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
nyan @nyanbinary

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

  • 1
  • 4
  • 0
  • 9h ago

CVE-2026-55040

Overview

  • Microsoft
  • Microsoft SharePoint Enterprise Server 2016
14 Jul 2026
Published
17 Sep 2026
Updated
CVSS v3.1
CRITICAL (9.1)
EPSS
50.58%
KEV

Description

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
  • 5 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
nyan @nyanbinary

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

  • 1
  • 4
  • 0
  • 9h ago

CVE-2026-21513

Overview

  • Microsoft
  • Windows 10 Version 1607
10 Feb 2026
Published
19 Aug 2026
Updated
CVSS v3.1
HIGH (8.8)
EPSS
15.64%
KEV

Description

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

Statistics

  • 1 Post
  • 5 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
nyan @nyanbinary

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

  • 1
  • 4
  • 0
  • 9h ago

CVE-2026-41091

Overview

  • Microsoft
  • Microsoft Malware Protection Engine
20 May 2026
Published
10 Aug 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
8.20%
KEV

Description

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Statistics

  • 1 Post
  • 5 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
nyan @nyanbinary

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

  • 1
  • 4
  • 0
  • 9h ago

CVE-2025-68686

Overview

  • Fortinet
  • FortiOS
10 Feb 2026
Published
28 Jul 2026
Updated
CVSS v3.1
MEDIUM (5.3)
EPSS
29.60%
KEV

Description

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.

Statistics

  • 1 Post
  • 5 Interactions
Last activity: 9 hours ago

Fediverse

Profile picture fallback
nyan @nyanbinary

Based on something @cR0w mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw?

Well, yes. One or two. Or three:

(and many more that aren't CVE-2026-*).

... ok, are there any that aren't MS?

Yes, a handful:

For no particular reason:

4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available.

(data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

  • 1
  • 4
  • 0
  • 9h ago
Showing 71 to 75 of 75 CVEs