Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-16599 | 5.1 (v4.0) | Denial of Service in GNU wget |
GNU |
wget |
2026-08-25T14:17:04.941Z | 2026-08-25T14:51:53.738Z |
| cve-2026-55525 | PraisonAI: SSRF via redirect-following in praisonaiage… |
MervinPraison |
PraisonAI |
2026-08-25T14:07:08.551Z | 2026-08-25T16:14:41.881Z | |
| cve-2026-79655 | 7.8 (v3.1) | Sos: sos: path traversal in sos clean tar extraction v… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-25T13:49:37.593Z | 2026-08-25T14:12:08.732Z |
| cve-2026-79623 | FishCodeTech Muteki Default Local Worker Backend setti… |
FishCodeTech |
Muteki |
2026-08-25T13:30:09.438Z | 2026-08-27T14:35:48.228Z | |
| cve-2026-79622 | dekdee adobe-xd-mcp file-access-from-request Endpoint … |
dekdee |
adobe-xd-mcp |
2026-08-25T13:15:09.282Z | 2026-08-25T14:33:37.187Z | |
| cve-2026-78581 | 4.2 (v3.1) | Authorization Bypass Through User-Controlled Key in Ki… |
Elastic |
Kibana |
2026-08-25T13:08:11.520Z | 2026-08-25T14:51:53.897Z |
| cve-2026-75803 | AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() |
OpenSSL |
OpenSSL |
2026-08-25T13:00:25.067Z | 2026-09-01T18:23:06.793Z | |
| cve-2026-63076 | Invalid Pointer Dereference in CMP Server via Crafted … |
OpenSSL |
OpenSSL |
2026-08-25T13:00:11.218Z | 2026-08-25T14:37:32.193Z | |
| cve-2026-79406 | macrozheng mall quantity OmsCartItemServiceImpl.update… |
macrozheng |
mall |
2026-08-25T13:00:09.821Z | 2026-08-27T15:14:14.547Z | |
| cve-2026-63075 | QUIC ACK-only Packet Retention Can Cause Memory Exhaustion |
OpenSSL |
OpenSSL |
2026-08-25T13:00:04.752Z | 2026-08-25T14:36:51.928Z | |
| cve-2026-63074 | CMP Indefinite Cache Growth of ExtraCerts |
OpenSSL |
OpenSSL |
2026-08-25T12:59:58.278Z | 2026-08-25T14:36:13.170Z | |
| cve-2026-63073 | Untrusted Sender DN Used as Format String in CMP Respo… |
OpenSSL |
OpenSSL |
2026-08-25T12:59:43.356Z | 2026-08-31T19:12:54.136Z | |
| cve-2026-63072 | Heap Buffer Overflow in CMS Key Unwrapping |
OpenSSL |
OpenSSL |
2026-08-25T12:59:34.428Z | 2026-08-25T14:29:55.378Z | |
| cve-2026-54874 | Excessive Memory Use Buffering DTLS Records for a Futu… |
OpenSSL |
OpenSSL |
2026-08-25T12:59:17.912Z | 2026-08-25T14:28:37.339Z | |
| cve-2026-18798 | QUIC Server May Trigger Double Free When Processing IN… |
OpenSSL |
OpenSSL |
2026-08-25T12:59:04.715Z | 2026-08-25T14:15:04.879Z | |
| cve-2026-14457 | RPK Server Signature Algorithm Selection Can Dereferen… |
OpenSSL |
OpenSSL |
2026-08-25T12:58:29.349Z | 2026-08-25T14:13:27.811Z | |
| cve-2026-57863 | 8.7 (v4.0) 8.8 (v3.1) | Crater Invoice 6.0.6 Path Traversal RCE via update/unz… |
crater-invoice-inc |
crater |
2026-08-25T12:52:11.549Z | 2026-08-25T14:35:27.431Z |
| cve-2026-77998 | 10 (v4.0) | Joomla Extension - miniorange.com - Unauthenticated Au… |
miniorange.com |
SAML SSO Free for Joomla extension for Joomla |
2026-08-25T12:50:46.506Z | 2026-08-26T22:35:35.616Z |
| cve-2026-78887 | liketrek TREK Journey Photo Proxy validateShareTokenFo… |
liketrek |
TREK |
2026-08-25T12:45:10.723Z | 2026-08-25T17:59:31.339Z | |
| cve-2026-78886 | liketrek TREK Public Journey Photo Proxy journey-publi… |
liketrek |
TREK |
2026-08-25T12:30:09.424Z | 2026-08-25T13:13:00.971Z | |
| cve-2026-78885 | liketrek TREK OIDC Service oidcService.ts findOrCreate… |
liketrek |
TREK |
2026-08-25T12:15:08.513Z | 2026-08-27T14:35:57.758Z | |
| cve-2026-77997 | 5.1 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-25T11:53:21.796Z | 2026-08-26T06:55:47.222Z |
| cve-2026-77996 | 7.5 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-25T11:52:16.807Z | 2026-08-26T06:54:36.136Z |
| cve-2026-57910 | WatchGuard Agent improper authentication allows unauth… |
WatchGuard |
WatchGuard Agent |
2026-08-25T11:47:49.189Z | 2026-08-25T12:53:13.695Z | |
| cve-2026-57909 | WatchGuard Agent path traversal allows unauthenticated… |
WatchGuard |
WatchGuard Agent |
2026-08-25T11:47:03.000Z | 2026-08-26T13:16:42.462Z | |
| cve-2026-79673 | 8.5 (v4.0) 6.5 (v3.1) | Ech0 before 4.4.3 Scope Bypass via profile:read Token |
lin-snow |
Ech0 |
2026-08-25T11:33:33.528Z | 2026-08-26T16:11:39.207Z |
| cve-2026-79672 | 7 (v4.0) 5.5 (v3.1) | Ech0 before 4.4.3 Authentication Bypass via Comment Panel |
lin-snow |
Ech0 |
2026-08-25T11:33:32.848Z | 2026-08-25T13:21:08.330Z |
| cve-2026-79671 | 5.1 (v4.0) 5.5 (v3.1) | Ech0 before 4.4.3 SSRF via DNS Resolution Bypass |
lin-snow |
Ech0 |
2026-08-25T11:33:32.174Z | 2026-08-29T11:48:00.599Z |
| cve-2026-79670 | 4.8 (v4.0) 4.8 (v3.1) | Ech0 before 4.4.3 Stored XSS via SVG Upload |
lin-snow |
Ech0 |
2026-08-25T11:33:31.499Z | 2026-08-25T17:30:32.633Z |
| cve-2026-79669 | 5.3 (v4.0) 4.3 (v3.1) | Ech0 before 4.4.3 Missing Authorization on System Logs |
lin-snow |
Ech0 |
2026-08-25T11:33:30.826Z | 2026-08-25T12:57:52.706Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000730 | Webmin OS command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000729 | Aipo session fixation vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000727 | Safari allows access from HTTP to HTTPS | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000712 | Cosminexus Agent Process Crash Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000711 | TPBroker Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000710 | Cosminexus Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000702 | Cosminexus Developer's Kit for Java Buffer Overflow and Denial of Service Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000701 | Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java Buffer Overflow Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000700 | Cosminexus javadoc Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000699 | JP1/NETM/DM Manager SQL Injection Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000697 | Lhaplus buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000678 | Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000647 | Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000646 | Fuktommy.com httpd.pl including HTML preprocessor vulnerable to directory traversal | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000645 | 7-ZIP32.DLL buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000640 | Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000639 | Shopping Basket Pro directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000626 | Mayaa cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000625 | Tuigwaa cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000598 | Apache Tomcat Host Manager cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000572 | WebCart cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000560 | Safari URL spoofing vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000559 | Yayoi Kaikei improper handling of credential information | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000551 | Aruba Mobility Controller Series cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000548 | Nessus report function vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000507 | Flash Player allows to send arbitrary Referer headers | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000494 | KDDI sample CGI download program directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000491 | Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000487 | sHTTPd cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000486 | rktSNS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0299 | Multiples vulnérabilités dans les produits Citrix | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0298 | Vulnérabilité dans Spring Framework | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0297 | Multiples vulnérabilités dans Juniper | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0296 | Multiples vulnérabilités dans GitLab | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0295 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0294 | Multiples vulnérabilités dans Google Chrome | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0293 | Multiples vulnérabilités dans Mitel MiCollab | 2024-04-11T00:00:00.000000 | 2024-04-11T00:00:00.000000 |
| certfr-2024-avi-0292 | Multiples vulnérabilités dans les produits Microsoft | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0291 | Multiples vulnérabilités dans Microsoft Azure | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0290 | Vulnérabilité dans Microsoft .Net | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0289 | Multiples vulnérabilités dans Microsoft Windows | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0288 | Vulnérabilité dans Microsoft Office | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0287 | Multiples vulnérabilités dans les produits Fortinet | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0286 | Multiples vulnérabilités dans les produits Xen | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0285 | Vulnérabilité dans WordPress | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0284 | Multiples vulnérabilités dans les produits Adobe | 2024-04-10T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0283 | Multiples vulnérabilités dans les produits SAP | 2024-04-09T00:00:00.000000 | 2024-04-12T00:00:00.000000 |
| certfr-2024-avi-0282 | Vulnérabilité dans les produits Schneider | 2024-04-09T00:00:00.000000 | 2024-04-09T00:00:00.000000 |
| certfr-2024-avi-0281 | Multiples vulnérabilités dans les produits Siemens | 2024-04-09T00:00:00.000000 | 2024-04-09T00:00:00.000000 |
| certfr-2024-avi-0280 | Vulnérabilité dans OpenSSL | 2024-04-09T00:00:00.000000 | 2024-04-09T00:00:00.000000 |
| certfr-2024-avi-0279 | Multiples vulnérabilités dans les produits IBM | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0278 | Vulnérabilité dans le noyau Linux de Debian | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0277 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0276 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0275 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0274 | Multiples vulnérabilités dans Apache HTTP Server | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0273 | Multiples vulnérabilités dans Microsoft Edge | 2024-04-05T00:00:00.000000 | 2024-04-05T00:00:00.000000 |
| certfr-2024-avi-0272 | Multiples vulnérabilités dans Google Android et Pixel | 2024-04-04T00:00:00.000000 | 2024-04-04T00:00:00.000000 |
| certfr-2024-avi-0271 | Multiples vulnérabilités dans les produits Ivanti | 2024-04-04T00:00:00.000000 | 2024-04-04T00:00:00.000000 |
| certfr-2024-avi-0270 | Vulnérabilité dans Cisco Nexus Dashboard Fabric Controller | 2024-04-04T00:00:00.000000 | 2024-04-04T00:00:00.000000 |