Vulnerabilities
Summary — last 7 days
New vulnerabilities4,591▼ 563 vs. last week
Critical / high1,803▼ 1,118 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)880▲ 782 vs. last week
More filters
18 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.5) | 0.32% | — | Museder RestoreoneAI | 10/6/2026 | 10/6/2026 | Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. | |
| Analyzed | High (7.5) | 1.2% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | Medium (5.9) | 1.2% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | Critical (9.1) | 0.86% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | Critical (9.8) | 1.1% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | An authentication bypass vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | High (7.5) | 1.2% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | Critical (9.8) | 1.2% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | Medium (6.9) | 0.62% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A server-side request forgery vulnerability exists in HPE StoreOnce Software. | |
| Analyzed | High (7.5) | 1.2% | — | HPE Storeonce System | 6/2/2025 | 6/17/2026 | A command injection remote code execution vulnerability exists in HPE StoreOnce Software. | |
| Modified | High (7.5) | 0.80% | — | HPE Storeonce 3640 Firmware | 6/27/2022 | 6/17/2026 | A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2. | |
| Modified | Medium (6.5) | 0.50% | — | HPE Storeonce 5200 FirmwareHPE Storeonce 5650 FirmwareHPE Storeonce 5250 FirmwareHPE Storeonce 3640 Firmware+2 | 9/27/2021 | 6/17/2026 | A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce… | |
| Modified | Medium (5.4) | 1.2% | — | HP Storeonce Backup System Software | 1/5/2016 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | |
| Modified | High (7.5) | 2.5% | — | HP Storeonce Backup System Software | 1/5/2016 | 6/17/2026 | HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors. | |
| Modified | High (8.8) | 1.3% | — | HP Storeonce Backup System Software | 1/5/2016 | 6/17/2026 | Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. | |
| Modified | High (7.8) | 2.1% | — | HP Storeonce 2610 Iscsi Backup SystemHP Storeonce 2620 Iscsi Backup SystemHP Storeonce 4210 FC Backup SystemHP Storeonce 4210 Iscsi Backup System+4 | 3/29/2014 | 6/17/2026 | Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance (VSA) before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or cause a denial of… | |
| Modified | High (7.8) | 2.5% | — | HP Storeonce D2D | 8/28/2013 | 6/16/2026 | Unspecified vulnerability in HP StoreOnce D2D Backup System 1.x before 1.2.19 and 2.x before 2.3.0 allows remote attackers to cause a denial of service via unknown vectors. | |
| Modified | High (7.7) | 0.82% | — | HP Storeonce D2D | 6/30/2013 | 6/16/2026 | The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete data via an SSH session. | |
| Modified | High (7.5) | 3.4% | Exploit | Oreon Project Oreon | 1/19/2007 | 6/16/2026 | PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. |