آخرین آسیب‌پذیری‌ها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-95743 | 7.8بالا |
Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95742 | 7.8بالا |
Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95741 | 8.0بالا |
Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95740 | 8.0بالا |
Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95739 | 8.1بالا |
Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95738 | 8.1بالا |
Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95737 | 8.2بالا |
Local Privilege Escalation in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95736 | 8.3بالا |
Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95735 | 8.7بالا |
Improper Certificate Validation in HPE Networking Fabric Composer
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95734 | 8.8بالا |
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95733 | 9.6بحرانی |
Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95732 | 9.6بحرانی |
Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-95731 | 9.8بحرانی |
Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
Hewlett Packard Enterprise (HPE) Fabric Composer
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2025-71452 | 5.1متوسط |
Vembu BDRSuite < 7.6.0 XSS via restoreprogress.sgp
Vembu Technologies BDRSuite
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63395 | 8.8بالا |
isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)
isomorphic-git isomorphic-git
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2025-71451 | 5.1متوسط |
Vembu BDRSuite < 7.6.0 XSS via serverbackupprogress.sgp
Vembu Technologies BDRSuite
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63475 | 4.3متوسط |
isomorphic-git: Circular symbolic references cause non-terminating resolution (DoS)
isomorphic-git isomorphic-git
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63476 | 4.3متوسط |
isomorphic-git: Unbounded memory allocation from attacker-controlled delta target size (DoS)
isomorphic-git isomorphic-git
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-105822 | 8.3بالا |
Server-Side Request Forgery in Tapo Cloud MQTT Proxy
TP-Link Systems Tapo Cloud Service
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-105821 | 8.3بالا |
Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy
TP-Link Systems Tapo Cloud Service
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63478 | 5.3متوسط |
isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
isomorphic-git isomorphic-git
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63500 | 7.1بالا |
Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export
yeti-platform yeti
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-120567 | 2.3پایین |
ExecuteUpdate may evaluate caller-supplied values as MongoDB expressions
MongoDB Entity Framework Core Provider
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-63502 | 8.3بالا |
Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write
yeti-platform yeti
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|
| CVE-2026-93325 | 7.3بالا |
Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
Docker Buildx
|
— |
۱۴۰۵/۰۸/۱۲
۴ ساعت پیش
|