| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-117704 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117703 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117702 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117701 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117700 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117699 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117698 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117697 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117696 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117695 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117694 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117693 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-117692 | — | 0.00 | — | — | Oct 28, 2026 | Rejected reason: Reserved in error; never associated with a vulnerability. | ||
| CVE-2026-115223 | Med | 0.32 | 4.9 | 0.00 | Oct 28, 2026 | The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that… | ||
| CVE-2026-112198 | Hig | 0.54 | — | 0.00 | Oct 28, 2026 | XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this… | ||
| CVE-2026-112197 | Cri | 0.61 | — | 0.00 | Oct 28, 2026 | Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on… | ||
| CVE-2026-110541 | Hig | 0.47 | 7.2 | 0.02 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special… | ||
| CVE-2026-110540 | Hig | 0.46 | 7.1 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing… | ||
| CVE-2026-110508 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an… | ||
| CVE-2026-106648 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list and relay… | ||
| CVE-2026-103799 | Cri | 0.62 | 9.6 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing… | ||
| CVE-2026-103792 | Cri | 0.62 | 9.6 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper… | ||
| CVE-2026-103780 | Cri | 0.64 | 9.8 | 0.01 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow… | ||
| CVE-2026-103779 | Hig | 0.54 | 8.3 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication… | ||
| CVE-2026-103330 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing… | ||
| CVE-2026-103313 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine low-value transaction to… | ||
| CVE-2026-101274 | Med | 0.38 | — | 0.00 | Oct 28, 2026 | When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO… | ||
| CVE-2026-101273 | Med | 0.27 | — | 0.00 | Oct 28, 2026 | Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that reference gift cards from different organizers and thereby obtaining their secret. The gift… | ||
| CVE-2026-101272 | Low | 0.08 | — | 0.00 | Oct 28, 2026 | The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. This is similar to an issue fixed in 2026.7.1 but was missed while creating the fix. Since the… | ||
| CVE-2025-30414 | Hig | 0.46 | 7.1 | 0.00 | Oct 28, 2026 | Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587. | ||
| CVE-2026-92665 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without… | ||
| CVE-2026-86394 | Hig | 0.47 | 7.2 | 0.02 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special… | ||
| CVE-2026-86393 | Hig | 0.47 | 7.2 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management… | ||
| CVE-2026-86392 | Med | 0.32 | 4.9 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow… | ||
| CVE-2026-86391 | Med | 0.42 | 6.4 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication… | ||
| CVE-2026-86390 | Med | 0.42 | 6.5 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability.… | ||
| CVE-2026-86389 | Hig | 0.47 | 7.2 | 0.01 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound… | ||
| CVE-2026-86388 | Med | 0.34 | 5.3 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to… | ||
| CVE-2026-86386 | Med | 0.28 | 4.3 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper… | ||
| CVE-2026-86385 | Hig | 0.57 | 8.8 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges. | ||
| CVE-2026-86384 | Cri | 0.64 | 9.8 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key… | ||
| CVE-2026-86383 | Med | 0.44 | 6.8 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | ||
| CVE-2026-86380 | Hig | 0.47 | 7.2 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound… | ||
| CVE-2026-86379 | Hig | 0.47 | 7.2 | 0.03 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper… | ||
| CVE-2026-14571 | Cri | 0.59 | — | 0.00 | Oct 28, 2026 | A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the… | ||
| CVE-2026-105457 | Med | 0.42 | 6.5 | 0.00 | Oct 28, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132. | ||
| CVE-2026-90724 | Low | 0.18 | 2.7 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper… | ||
| CVE-2026-90723 | Low | 0.18 | 2.7 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper… | ||
| CVE-2026-90721 | Low | 0.22 | 3.4 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high… | ||
| CVE-2026-90720 | Med | 0.44 | 6.7 | 0.00 | Oct 28, 2026 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity… |
- CVE-2026-117704Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117703Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117702Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117701Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117700Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117699Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117698Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117697Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117696Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117695Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117694Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117693Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- CVE-2026-117692Oct 28, 2026risk 0.00cvss —epss —
Rejected reason: Reserved in error; never associated with a vulnerability.
- risk 0.32cvss 4.9epss 0.00
The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that…
- risk 0.54cvss —epss 0.00
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this…
- risk 0.61cvss —epss 0.00
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on…
- risk 0.47cvss 7.2epss 0.02
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special…
- risk 0.46cvss 7.1epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing…
- risk 0.34cvss 5.3epss 0.00
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an…
- risk 0.34cvss 5.3epss 0.00
The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list and relay…
- risk 0.62cvss 9.6epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing…
- risk 0.62cvss 9.6epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…
- risk 0.64cvss 9.8epss 0.01
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow…
- risk 0.54cvss 8.3epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication…
- risk 0.34cvss 5.3epss 0.00
The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is attacker-controlled, allowing…
- risk 0.34cvss 5.3epss 0.00
The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine low-value transaction to…
- risk 0.38cvss —epss 0.00
When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO…
- risk 0.27cvss —epss 0.00
Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that reference gift cards from different organizers and thereby obtaining their secret. The gift…
- risk 0.08cvss —epss 0.00
The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. This is similar to an issue fixed in 2026.7.1 but was missed while creating the fix. Since the…
- risk 0.46cvss 7.1epss 0.00
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.
- risk 0.34cvss 5.3epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without…
- risk 0.47cvss 7.2epss 0.02
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special…
- risk 0.47cvss 7.2epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management…
- risk 0.32cvss 4.9epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow…
- risk 0.42cvss 6.4epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication…
- risk 0.42cvss 6.5epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability.…
- risk 0.47cvss 7.2epss 0.01
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound…
- risk 0.34cvss 5.3epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to…
- risk 0.28cvss 4.3epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…
- risk 0.57cvss 8.8epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
- risk 0.64cvss 9.8epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key…
- risk 0.44cvss 6.8epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…
- risk 0.47cvss 7.2epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound…
- risk 0.47cvss 7.2epss 0.03
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…
- risk 0.59cvss —epss 0.00
A Blind SQL Injection vulnerability in Futurum Software’s management software, caused by a lack of adequate validation and sanitisation of user-provided inputs in queries to the private area’s database, as well as by an incorrect WAF configuration. This weakness allows the…
- risk 0.42cvss 6.5epss 0.00
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132.
- risk 0.18cvss 2.7epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…
- risk 0.18cvss 2.7epss 0.00
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…
- risk 0.22cvss 3.4epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high…
- risk 0.44cvss 6.7epss 0.00
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity…