Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

Published 2026-02-20 · Analyzed

10.0EPSS 0.008

CVE-2024-44984

bnxt_en: Fix double DMA unmapping for XDP_REDIRECT

Published 2024-09-04 · Modified

10.0EPSS 0.007

CVE-2025-30412

Published 2026-02-20 · Analyzed

10.0EPSS 0.007

CVE-2025-57870

BUG-000179884 - There is a security vulnerability in ArcGIS Server Feature Services.

Published 2025-10-22 · Analyzed

10.0EPSS 0.005

CVE-2026-63795

9p: avoid putting oldfid in p9_client_walk() error path

Published 2026-07-19 · Analyzed

10.0EPSS 0.005

CVE-2024-56719

net: stmmac: fix TSO DMA API usage causing oops

Published 2024-12-29 · Modified

10.0EPSS 0.005

CVE-2025-30416

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis Cyber Protect 15 (Linux, Windows) before build 41800.

Published 2026-02-20 · Analyzed

10.0EPSS 0.005

CVE-2025-22021

netfilter: socket: Lookup orig tuple for IPv6 SNAT

Published 2025-04-16 · Modified

10.0EPSS 0.005

CVE-2025-21663

net: stmmac: dwmac-tegra: Read iommu stream id from device tree

Published 2025-01-21 · Modified

10.0EPSS 0.004

CVE-2025-38429

bus: mhi: ep: Update read pointer only after buffer is written

Published 2025-07-25 · Modified

10.0EPSS 0.004

CVE-2026-83660

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

Published 2026-09-22 · Analyzed

10.0EPSS 0.003

CVE-2026-13782

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Published 2026-06-30 · Modified

10.0EPSS 0.003

CVE-2026-64879

Command Injection

Published 2026-07-21 · Analyzed

9.9EPSS 0.023

CVE-2022-37425

The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.

Published 2022-10-28 · Modified

9.9EPSS 0.016

CVE-2023-35893

IBM Security Guardium command execution

Published 2023-08-16 · Modified

9.9EPSS 0.014

CVE-2023-27874

IBM Aspera Faspex XML external entity injection

Published 2023-03-21 · Modified

9.9EPSS 0.013

CVE-2024-25693

Portal for ArcGIS has a directory traversal vulnerability.

Published 2024-04-04 · Analyzed

9.9EPSS 0.013

CVE-2021-26334

AMD Chipset Driver Information Disclosure Vulnerability

Published 2021-12-01 · Modified

9.9EPSS 0.012

CVE-2022-28181

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

Published 2022-05-17 · Modified

9.9EPSS 0.011

CVE-2026-8476

Disk Cache Deserialization Remote Code Execution Vulnerability

Published 2026-07-17 · Analyzed

9.9EPSS 0.010

CVE-2026-82010

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Published 2026-09-22 · Analyzed

9.9EPSS 0.010

CVE-2026-48326

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)