Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-71407 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-01T20:33:25.113Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected as a duplicate.'}], 'replacedBy': ['CVE-2025-24928', 'CVE-2024-56171']} | N/A | N/A | 2026-08-25T15:15:59.250Z | 2026-09-01T20:33:25.113Z |
| cve-2025-71406 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-01T20:33:45.855Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected as a duplicate.'}], 'replacedBy': ['CVE-2025-24855', 'CVE-2024-55549']} | N/A | N/A | 2026-08-25T15:15:58.585Z | 2026-09-01T20:33:45.855Z |
| cve-2025-71346 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-01T20:33:44.722Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected as a duplicate.'}], 'replacedBy': ['CVE-2025-32415']} | N/A | N/A | 2026-08-25T15:15:57.921Z | 2026-09-01T20:33:44.722Z |
| cve-2024-58378 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-01T20:33:43.529Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected as a duplicate.'}], 'replacedBy': ['CVE-2024-25062']} | N/A | N/A | 2026-08-25T15:15:57.242Z | 2026-09-01T20:33:43.529Z |
| cve-2024-58377 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-01T20:33:42.399Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected as a duplicate.'}], 'replacedBy': ['CVE-2024-34459']} | N/A | N/A | 2026-08-25T15:15:56.569Z | 2026-09-01T20:33:42.399Z |
| cve-2023-54354 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.14.3 Null Pointer Dereference via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.858Z | 2026-08-28T15:18:24.047Z |
| cve-2022-51000 | 9.3 (v4.0) 9.8 (v3.1) | Nokogiri before 1.13.2 Multiple Vulnerabilities via li… |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.205Z | 2026-08-28T15:18:22.982Z |
| cve-2022-50999 | 8.8 (v4.0) 8.6 (v3.1) | Nokogiri before 1.13.5 Integer Overflow via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:54.519Z | 2026-08-28T15:18:22.151Z |
| cve-2022-50998 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.830Z | 2026-08-28T15:18:21.490Z |
| cve-2021-47996 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.158Z | 2026-08-28T15:18:20.801Z |
| cve-2026-55533 | PraisonAI: Authentication fail-open in Recipe server a… |
MervinPraison |
PraisonAI |
2026-08-25T15:15:34.856Z | 2026-08-25T16:12:49.407Z | |
| cve-2026-55539 | PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/a… |
MervinPraison |
PraisonAI |
2026-08-25T15:14:07.109Z | 2026-08-25T19:20:57.949Z | |
| cve-2026-69104 | 7.6 (v3.1) | Potential unauthorized repository migration in JFrog A… |
jfrog |
artifactory |
2026-08-25T15:09:29.369Z | 2026-08-25T17:43:24.784Z |
| cve-2026-55527 | PraisonAI: Arbitrary file write via unsanitized `user_… |
MervinPraison |
PraisonAI |
2026-08-25T15:09:07.500Z | 2026-08-25T19:21:08.622Z | |
| cve-2026-15310 | 2.1 (v4.0) | zipfile: bzip2/LZMA/Zstandard members decompress witho… |
Python Software Foundation |
CPython |
2026-08-25T15:07:58.054Z | 2026-09-02T00:38:24.795Z |
| cve-2026-70551 | 8.5 (v3.1) | Server-Side Request Forgery Via VCS remote download in… |
jfrog |
artifactory |
2026-08-25T15:06:48.188Z | 2026-08-26T19:47:41.387Z |
| cve-2026-55541 | PraisonAI: `--api-key` flag on `praisonai serve` is no… |
MervinPraison |
PraisonAI |
2026-08-25T15:05:25.370Z | 2026-08-25T19:21:21.324Z | |
| cve-2026-55535 | PraisonAI: Server-Side Request Forgery via DNS rebindi… |
MervinPraison |
PraisonAI |
2026-08-25T15:01:47.765Z | 2026-08-25T18:16:28.163Z | |
| cve-2026-55537 | PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmi… |
MervinPraison |
PraisonAI |
2026-08-25T14:58:50.231Z | 2026-08-25T16:18:21.471Z | |
| cve-2026-55538 | PraisonAI: [Auth Bypass] `praisonai serve agents --api… |
MervinPraison |
PraisonAI |
2026-08-25T14:56:33.713Z | 2026-08-25T16:13:24.170Z | |
| cve-2026-55624 | MintyItanium Lost-Auction takes items like barrier blo… |
MintyItanium |
Lost-Auction |
2026-08-25T14:56:11.409Z | 2026-08-25T18:27:35.700Z | |
| cve-2026-55540 | PraisonAI: [Path Traversal] agent tools escape the con… |
MervinPraison |
PraisonAI |
2026-08-25T14:54:32.407Z | 2026-08-27T15:19:10.382Z | |
| cve-2026-79717 | 6.4 (v3.1) | Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-25T14:53:45.382Z | 2026-08-27T14:35:40.044Z |
| cve-2026-55530 | PraisonAI: ast_grep_rewrite rewrites arbitrary files w… |
MervinPraison |
PraisonAI |
2026-08-25T14:45:07.570Z | 2026-08-25T16:26:22.899Z | |
| cve-2026-55534 | PraisonAI serve agents --api-key is ignored, allowing … |
MervinPraison |
PraisonAI |
2026-08-25T14:41:13.869Z | 2026-08-27T15:18:13.151Z | |
| cve-2026-55526 | PraisonAI: SSRF protection bypass in `spider_tools._ho… |
MervinPraison |
PraisonAI |
2026-08-25T14:36:09.934Z | 2026-08-25T19:21:26.954Z | |
| cve-2026-55531 | PraisonAI: Unauthenticated unbounded session accumulat… |
MervinPraison |
PraisonAI |
2026-08-25T14:33:51.733Z | 2026-08-25T16:14:09.460Z | |
| cve-2026-55528 | praisonaiagents: AgentServer declares auth_token but n… |
MervinPraison |
PraisonAI |
2026-08-25T14:32:05.929Z | 2026-08-25T18:17:51.763Z | |
| cve-2026-55529 | PraisonAI: Origin validation bypass in MCP HTTP Stream… |
MervinPraison |
PraisonAI |
2026-08-25T14:26:30.692Z | 2026-08-27T15:15:14.217Z | |
| cve-2026-16286 | 9.8 (v3.1) | File Upload in TRTEK Software's Software Repository Ma… |
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company |
Software Repository Management |
2026-08-25T14:26:19.608Z | 2026-08-25T14:51:53.578Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000877 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000876 | Ichitaro series buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000875 | AirStation series and BroadStation series vulnerable to cross-site request forgery | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000824 | GreaseKit and Creammonkey allows execution of userscript functions | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000823 | Cross-site scripting in Sun Java System Web Server and Sun Java System Web Proxy Server | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000822 | WinAce buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000820 | Google Web Toolkit vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000819 | Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap" | 2008-05-21T00:00+09:00 | 2013-07-18T18:58+09:00 |
| jvndb-2007-000818 | Flash Player allows to send arbitrary HTTP headers | 2008-05-21T00:00+09:00 | 2008-06-20T13:34+09:00 |
| jvndb-2007-000817 | Flash Player vulnerable in handling cross-domain policy files | 2008-05-21T00:00+09:00 | 2009-02-10T11:32+09:00 |
| jvndb-2007-000816 | Rainboard cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000815 | Multiple Cybozu products vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000814 | Multiple Cybozu products vulnerable to HTTP header injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000813 | Multiple Cybozu products vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000812 | Cybozu Office denial of service (DoS) vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000811 | HttpLogger vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000810 | JP1/Cm2/Network Node Manager vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000809 | SonicStage CP buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000808 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000807 | FileMaker cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000806 | Feed2JS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000805 | RoundCube Webmail cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000804 | Sleipnir and Grani Bookmark Search vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000803 | Cross-site scripting vulnerability in updir.php in UPDIR.NET | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000802 | Lotus Domino cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000801 | NetCommons cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000779 | MouseoverDictionary vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000773 | Hitachi Web Server Cross-Site Scripting Vulnerability with Server-Status Page | 2008-05-21T00:00+09:00 | 2014-05-21T18:27+09:00 |
| jvndb-2007-000772 | Hitachi Web Server SSL Client Authentication Vulnerability | 2008-05-21T00:00+09:00 | 2014-05-23T18:32+09:00 |
| jvndb-2007-000745 | PowerArchiver buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0329 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0328 | Vulnérabilité dans Citrix uberAgent | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0327 | Multiples vulnérabilités dans Microsoft Edge | 2024-04-19T00:00:00.000000 | 2024-04-19T00:00:00.000000 |
| certfr-2024-avi-0326 | Multiples vulnérabilités dans Oracle MySQL | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0325 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0324 | Multiples vulnérabilités dans Oracle Systems | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0323 | Multiples vulnérabilités dans Oracle Weblogic | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0322 | Multiples vulnérabilités dans Oracle Database Server | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0321 | Multiples vulnérabilités dans Oracle Java SE | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0320 | Multiples vulnérabilités dans Oracle VirtualBox | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0319 | Multiples vulnérabilités dans les produits Cisco | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0318 | Multiples vulnérabilités dans les produits Mitel | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0317 | Vulnérabilité dans Cisco ClamAV | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0316 | Vulnérabilité dans les produits Xen | 2024-04-18T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0315 | Vulnérabilité dans SolarWinds Serv-U | 2024-04-17T00:00:00.000000 | 2024-04-17T00:00:00.000000 |
| certfr-2024-avi-0314 | Multiples vulnérabilités dans Ivanti Avalanche | 2024-04-17T00:00:00.000000 | 2024-04-17T00:00:00.000000 |
| certfr-2024-avi-0313 | Multiples vulnérabilités dans Google Chrome | 2024-04-17T00:00:00.000000 | 2024-04-17T00:00:00.000000 |
| certfr-2024-avi-0312 | Multiples vulnérabilités dans les produits Atlassian | 2024-04-17T00:00:00.000000 | 2024-04-18T00:00:00.000000 |
| certfr-2024-avi-0311 | Multiples vulnérabilités dans les produits Mozilla | 2024-04-17T00:00:00.000000 | 2024-04-17T00:00:00.000000 |
| certfr-2024-avi-0310 | Vulnérabilité dans les produits Juniper | 2024-04-16T00:00:00.000000 | 2024-04-16T00:00:00.000000 |
| certfr-2024-avi-0309 | Vulnérabilité dans Stormshield Network Security | 2024-04-16T00:00:00.000000 | 2024-04-16T00:00:00.000000 |
| certfr-2024-avi-0308 | Vulnérabilité dans Stormshield Network Security | 2024-04-15T00:00:00.000000 | 2024-04-15T00:00:00.000000 |
| certfr-2024-avi-0307 | Vulnérabilité dans Palo Alto Networks GlobalProtect | 2024-04-15T00:00:00.000000 | 2024-04-15T00:00:00.000000 |
| certfr-2024-avi-0306 | Multiples vulnérabilités dans Microsoft Edge | 2024-04-15T00:00:00.000000 | 2024-04-15T00:00:00.000000 |
| certfr-2024-avi-0305 | Multiples vulnérabilités dans les produits IBM | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0304 | Multiples vulnérabilités dans Debian LTS buster | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0303 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0302 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0301 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0300 | Multiples vulnérabilités dans PHP | 2024-04-12T00:00:00.000000 | 2024-04-12T00:00:00.000000 |