Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-13216 | 6.1 (v3.1) | Out-of-bounds stack write in Zephyr virtio PCI driver … |
zephyrproject |
zephyr |
2026-08-25T16:05:36.964Z | 2026-08-25T19:41:42.446Z |
| cve-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/… |
cbcoutinho |
nextcloud-mcp-server |
2026-08-25T16:03:28.085Z | 2026-08-25T19:20:43.689Z | |
| cve-2026-79785 | 8.2 (v4.0) 5.9 (v3.1) | X-AnyLabeling before 4.0.0-beta.9 Improper Certificate… |
CVHub520 |
X-AnyLabeling |
2026-08-25T16:03:20.305Z | 2026-08-29T11:48:02.041Z |
| cve-2026-55580 | mcp-shell — Security Disabled by Default in Bare-Binar… |
sonirico |
mcp-shell |
2026-08-25T15:42:36.474Z | 2026-08-25T16:08:10.442Z | |
| cve-2026-55581 | mcp-shell: Secure Mode Allowlist Bypass via Default `/… |
sonirico |
mcp-shell |
2026-08-25T15:40:10.992Z | 2026-08-25T19:01:56.083Z | |
| cve-2026-55582 | mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias |
sonirico |
mcp-shell |
2026-08-25T15:37:43.486Z | 2026-08-28T22:28:54.025Z | |
| cve-2026-55546 | QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Exec… |
QWED-AI |
qwed-mcp |
2026-08-25T15:25:34.759Z | 2026-08-25T18:26:44.049Z | |
| cve-2026-70550 | 6.5 (v3.1) | Potential unauthorized access to private Composer repo… |
jfrog |
artifactory |
2026-08-25T15:22:53.484Z | 2026-08-26T19:47:11.893Z |
| cve-2026-55536 | Browser Server WebSocket origin validation bypass via … |
MervinPraison |
PraisonAI |
2026-08-25T15:21:53.387Z | 2026-08-28T22:27:40.534Z | |
| cve-2026-55532 | PraisonAI: Origin-validation bypass (startswith prefix… |
MervinPraison |
PraisonAI |
2026-08-25T15:17:53.068Z | 2026-08-25T16:10:44.149Z | |
| cve-2026-70548 | 3.5 (v3.1) | SSRF In CocoaPods Via JFrog Artifactory External Dependency |
jfrog |
artifactory |
2026-08-25T15:17:16.973Z | 2026-08-26T19:47:26.235Z |
| cve-2026-79784 | 8.6 (v4.0) 8.8 (v3.1) | Vocos through 0.1.0 Arbitrary Code Execution via Unres… |
gemelo-ai |
vocos |
2026-08-25T15:16:12.456Z | 2026-08-26T16:10:54.750Z |
| cve-2026-79783 | 2 (v4.0) 3.6 (v3.1) | rclone before 1.74.4 Privilege Escalation via setuid M… |
rclone |
rclone |
2026-08-25T15:16:11.806Z | 2026-08-25T16:11:49.885Z |
| cve-2026-79782 | 9.3 (v4.0) 3.1 (v3.1) | rclone before 1.74.4 Security Token Disclosure via HTT… |
rclone |
rclone |
2026-08-25T15:16:11.136Z | 2026-08-28T22:26:44.440Z |
| cve-2026-79781 | 6.9 (v4.0) 6.5 (v3.1) | rclone serve s3 Path Traversal via dot-dot object keys |
rclone |
rclone |
2026-08-25T15:16:10.471Z | 2026-08-25T17:29:20.262Z |
| cve-2026-79780 | 6 (v4.0) 5.3 (v3.1) | rclone before v1.75.0 Credential Exposure via S3 Redirect |
rclone |
rclone |
2026-08-25T15:16:09.789Z | 2026-08-25T16:07:21.266Z |
| cve-2026-79779 | 6 (v4.0) 5.3 (v3.1) | rclone before v1.75.0 WebDAV Credential Exposure via H… |
rclone |
rclone |
2026-08-25T15:16:09.110Z | 2026-08-27T16:45:55.566Z |
| cve-2026-79778 | 6 (v4.0) 5.3 (v3.1) | rclone before v1.75.0 Denial of Service via TUS nil-re… |
rclone |
rclone |
2026-08-25T15:16:08.402Z | 2026-08-25T16:12:58.686Z |
| cve-2026-79777 | 5.1 (v4.0) 2.7 (v3.1) | rclone before v1.75.0 Information Disclosure via RC API |
rclone |
rclone |
2026-08-25T15:16:07.745Z | 2026-08-28T22:25:36.423Z |
| cve-2026-79776 | 6.9 (v4.0) 5.3 (v3.1) | rclone before 1.75.0 Authentication Bypass via pprof |
rclone |
rclone |
2026-08-25T15:16:07.085Z | 2026-08-25T17:27:57.096Z |
| cve-2026-79775 | 7.1 (v4.0) 6.5 (v3.1) | rclone Archive Backend SquashFS Parser Denial of Service |
rclone |
rclone |
2026-08-25T15:16:06.427Z | 2026-08-29T11:48:01.347Z |
| cve-2026-79774 | 9.3 (v4.0) 8.4 (v3.1) | Winter CMS before 1.2.13 Twig Sandbox Escape via Secur… |
wintercms |
winter |
2026-08-25T15:16:05.738Z | 2026-08-26T16:11:03.275Z |
| cve-2026-79773 | 6.9 (v4.0) 4.9 (v3.1) | Winter CMS before 1.2.13 Local File Inclusion via JavaScript |
wintercms |
winter |
2026-08-25T15:16:05.053Z | 2026-08-28T15:18:32.149Z |
| cve-2026-79772 | 6.9 (v4.0) 5.3 (v3.1) | Nokogiri before 1.19.1 Unchecked Return Value canonicalize |
sparklemotion |
nokogiri |
2026-08-25T15:16:04.400Z | 2026-08-28T22:24:47.141Z |
| cve-2026-79771 | 6.9 (v4.0) 5.3 (v3.1) | Nokogiri before 1.19.3 Memory Leak via XSLT Transform |
sparklemotion |
nokogiri |
2026-08-25T15:16:03.736Z | 2026-08-25T17:44:08.629Z |
| cve-2026-79770 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer |
sparklemotion |
nokogiri |
2026-08-25T15:16:03.059Z | 2026-08-25T16:10:31.778Z |
| cve-2026-79769 | 8.7 (v4.0) 5.5 (v3.1) | Nokogiri before 1.19.4 Invalid Memory Read via initial… |
sparklemotion |
nokogiri |
2026-08-25T15:16:02.372Z | 2026-08-26T16:11:11.096Z |
| cve-2026-79676 | 8.2 (v4.0) 5.9 (v3.1) | NLTK before 3.10.3 Path Traversal via Symlink Bypass |
nltk |
nltk |
2026-08-25T15:16:01.646Z | 2026-08-25T16:15:13.359Z |
| cve-2026-79675 | 9.3 (v4.0) 9.8 (v3.1) | NLTK before 3.10.3 JVM Argument Injection via Per-Call… |
nltk |
nltk |
2026-08-25T15:16:00.949Z | 2026-08-27T16:24:50.205Z |
| cve-2026-79674 | 8.8 (v4.0) 8.2 (v3.1) | NLTK 3.10.2 Path Traversal via corpus-reader constructors |
nltk |
nltk |
2026-08-25T15:16:00.226Z | 2026-08-25T17:42:56.934Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000023 | Sony mylo COM-2 does not verify server SSL certificate | 2008-05-21T00:00+09:00 | 2008-05-21T11:34+09:00 |
| jvndb-2008-000022 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000021 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-29T14:54+09:00 |
| jvndb-2008-000020 | DesignForm cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000019 | PerlMailer cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:33+09:00 |
| jvndb-2008-000018 | Namazu cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2009-10-27T13:43+09:00 |
| jvndb-2008-000017 | Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000016 | Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations | 2008-05-21T00:00+09:00 | 2008-10-09T13:35+09:00 |
| jvndb-2008-000015 | BFup ActiveX Control buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:32+09:00 |
| jvndb-2008-000014 | Nagios cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000013 | FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000012 | Cross-site scripting vulnerability in multiple Tor World CGI scripts | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000011 | Internet Scanner reporting engine vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000010 | Google Desktop cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:31+09:00 |
| jvndb-2008-000009 | Apache Tomcat fails to properly handle cookie value | 2008-05-21T00:00+09:00 | 2010-01-05T12:14+09:00 |
| jvndb-2008-000008 | PC2M cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000007 | RaidenHTTPD cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000006 | Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000005 | Multiple Yamaha routers vulnerable to cross-site request forgery | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2008-000004 | Zimbra Collaboration Suite script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-000003 | MTCMS WYSIWYG Editor cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T11:30+09:00 |
| jvndb-2008-000001 | Multiple JustSystems products vulnerable to buffer overflow | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001133 | Cosminexus Component Container Session Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001092 | JP1/Cm2/Network Node Manager Arbitrary Code Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001091 | Cosminexus Application Server Incorrect Group Permission Handling Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-001022 | Apache UTF-7 Encoding Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2009-11-16T11:52+09:00 |
| jvndb-2007-001000 | Hitachi JP1/File Transmission Server/FTP Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000999 | Hitachi JP1/File Transmission Server/FTP Authentication Bypass Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000921 | Groupmax Collaboration Schedule Information Disclosure Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000878 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0359 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0358 | Multiples vulnérabilités dans Google Chrome | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0357 | Multiples vulnérabilités dans Cisco IP Phone | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0356 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2024-04-30T00:00:00.000000 | 2024-04-30T00:00:00.000000 |
| certfr-2024-avi-0355 | Multiples vulnérabilités dans Microsoft Edge | 2024-04-29T00:00:00.000000 | 2024-04-29T00:00:00.000000 |
| certfr-2024-avi-0354 | Multiples vulnérabilités dans les produits Qnap | 2024-04-29T00:00:00.000000 | 2024-04-29T00:00:00.000000 |
| certfr-2024-avi-0353 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0352 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0351 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0350 | Multiples vulnérabilités dans les produits IBM | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0349 | Vulnérabilité dans les produits Belden | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0348 | Vulnérabilité dans les produits MongoDB | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0347 | Multiples vulnérabilités dans les produits Cisco | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0346 | Multiples vulnérabilités dans GitLab | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0345 | Vulnérabilité dans les produits Palo Alto Networks | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0344 | Multiples vulnérabilités dans les produits Mitel | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0343 | Multiples vulnérabilités dans Google Chrome | 2024-04-24T00:00:00.000000 | 2024-04-24T00:00:00.000000 |
| certfr-2024-avi-0342 | Multiples vulnérabilités dans NagiosXI | 2024-04-24T00:00:00.000000 | 2024-04-24T00:00:00.000000 |
| certfr-2024-avi-0341 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0340 | Multiples vulnérabilités dans les produits Moxa | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0339 | Vulnérabilité dans Microsoft Edge | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0338 | Vulnérabilité dans Siemens RUGGEDCOM APE1808 | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0337 | Multiples vulnérabilités dans Mozilla Thunderbird | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0336 | Multiples vulnérabilités dans les produits OwnCloud | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0335 | Vulnérabilité dans SolarWinds Platform | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0334 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0333 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0332 | Multiples vulnérabilités dans les produits Red Hat | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0331 | Multiples vulnérabilités dans SolarWinds Platform | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0330 | Multiples vulnérabilités dans les produits IBM | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |