:: Vulnerabilidades exploradas ativamente

Catálogos CISA KEV e EUVD/ENISA — as dez mais recentes; as que correspondem a um fabricante vigiado aparecem a vermelho.

Última recolha: 14/08/26, 00:02

A mostrar apenas alertas de EUVD / ENISA. Clique outra vez para ver ambas as fontes. Ver as duas fontes

• CVE: CVE-2026-20349[fabricante vigiado]EUVD / ENISA

  Fabricante / produto: Cisco

  A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.  This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

  Ver na fonte ↗

  Gravidade: [Alto · CVSS 8.6]

  Prazo: sem prazo

• CVE: CVE-2026-68820[fabricante vigiado]EUVD / ENISA

  Fabricante / produto: Microsoft

  Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  Ver na fonte ↗

  Gravidade: [Alto · CVSS 7.0]

  Prazo: sem prazo

• CVE: CVE-2026-59310[fabricante vigiado]EUVD / ENISA

  Fabricante / produto: VMware

  VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

  Ver na fonte ↗

  Gravidade: [Crítico · CVSS 9.8]

  Prazo: sem prazo

• CVE: CVE-2026-72898EUVD / ENISA

  Fabricante / produto: metabase

  Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.

  Ver na fonte ↗

  Gravidade: [Crítico · CVSS 10.0]

  Prazo: sem prazo

• CVE: CVE-2017-10271EUVD / ENISA

  Fabricante / produto: Oracle Corporation

  Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

  Ver na fonte ↗

  Gravidade: [Alto · CVSS 7.5]

  Prazo: sem prazo

Ver o arquivo completo (1670 vulnerabilidades) →