Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55373 | OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can … |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:39:45.185Z | 2026-08-25T13:37:33.398Z | |
| cve-2026-55371 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:31:35.995Z | 2026-08-25T19:22:48.186Z | |
| cve-2026-55059 | OpenEXR: OpenEXRUtil SampleCountChannel row setter hea… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:16:01.747Z | 2026-08-27T14:30:57.043Z | |
| cve-2026-54920 | OpenEXR: Integer overflow and uninitialized pointer ca… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:10:39.077Z | 2026-08-25T15:17:34.384Z | |
| cve-2026-75465 | N/A | The /api.php/user/get_list endpoint in Maccms v10… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:58:59.788Z |
| cve-2026-75421 | N/A | aria2 <=1.37.0 has a stack-buffer-underflow vulne… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:16:13.940Z |
| cve-2026-52491 | N/A | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b89… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:57:48.468Z |
| cve-2026-52489 | N/A | Buffer Overflow vulnerability in gpac 31becc9e08b… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:12:50.889Z |
| cve-2026-51368 | N/A | An issue in Beijing Tongtech Co., Ltd tongweb v.7… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T17:40:01.999Z |
| cve-2026-39113 | N/A | Buffer Overflow vulnerability in SQLite affected … |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:11:27.506Z |
| cve-2026-38474 | N/A | GazellePW (GazellePosterWall) commit 86c4bedf7276… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:17:49.485Z |
| cve-2026-38473 | N/A | A Stored XSS vulnerability in the subtitle deleti… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:26:00.472Z |
| cve-2026-38472 | N/A | A Stored XSS vulnerability in forum reward commen… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:42:37.951Z |
| cve-2026-38470 | N/A | A Broken access control vulnerability in the API … |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:27:18.229Z |
| cve-2026-38469 | N/A | A Stored XSS vulnerability in the custom bonus ti… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:41:19.240Z |
| cve-2026-38468 | N/A | A SQL injection vulnerability in the country-code… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:50:00.408Z |
| cve-2026-38467 | N/A | A SQL injection vulnerability in the tags manager… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T15:09:23.855Z |
| cve-2026-38466 | N/A | A Stored XSS vulnerability in the torrent remaste… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:24:35.615Z |
| cve-2026-38465 | N/A | A Stored XSS vulnerability in the donor avatar mo… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:43:31.017Z |
| cve-2026-53532 | OpenEXR: Unhandled assert abort in HTJ2K decoder via c… |
AcademySoftwareFoundation |
openexr |
2026-08-24T22:24:02.733Z | 2026-08-28T17:52:11.296Z | |
| cve-2026-68516 | OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow |
AcademySoftwareFoundation |
openexr |
2026-08-24T22:08:49.176Z | 2026-08-25T14:25:11.590Z | |
| cve-2026-78435 | Faveo Helpdesk Logo SettingsController.php unlink path… |
Faveo |
Helpdesk |
2026-08-24T21:45:10.940Z | 2026-08-27T14:28:42.624Z | |
| cve-2026-78282 | 7.1 (v3.1) | WordPress Stripe Payments plugin <= 2.1.2 - Cross Site… |
mra13 |
Stripe Payments |
2026-08-24T21:31:35.725Z | 2026-08-25T19:05:40.876Z |
| cve-2026-78268 | 7.5 (v3.1) | WordPress Lead Generation Contact Widget & AI Chatbot:… |
Extend Themes |
Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads |
2026-08-24T21:31:34.955Z | 2026-08-25T19:22:54.673Z |
| cve-2026-78267 | 9.8 (v3.1) | WordPress TranslatePress plugin <= 3.3.2 - Privilege E… |
Cozmoslabs |
TranslatePress |
2026-08-24T21:31:34.248Z | 2026-08-27T14:26:13.797Z |
| cve-2026-78266 | 6.5 (v3.1) | WordPress AutomatorWP plugin <= 5.8.3 - Broken Access … |
Ruben Garcia |
AutomatorWP |
2026-08-24T21:31:33.520Z | 2026-08-25T19:02:39.587Z |
| cve-2026-78265 | 9.8 (v3.1) | WordPress The Events Calendar plugin <= 6.17.2 - PHP O… |
Nexcess |
The Events Calendar |
2026-08-24T21:31:32.805Z | 2026-08-25T14:40:53.886Z |
| cve-2026-78264 | 7.1 (v3.1) | WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site… |
Site Building with Toolset |
Toolset Blocks |
2026-08-24T21:31:32.102Z | 2026-08-25T19:06:19.855Z |
| cve-2026-78263 | 7.1 (v3.1) | WordPress Event Tickets plugin <= 5.29.2.1 - Cross Sit… |
Nexcess |
Event Tickets |
2026-08-24T21:31:31.391Z | 2026-08-25T19:23:05.855Z |
| cve-2026-78262 | 9.8 (v3.1) | WordPress WP Project Manager plugin <= 4.0.6 - PHP Obj… |
weDevs |
WP Project Manager |
2026-08-24T21:31:30.692Z | 2026-08-27T14:25:00.255Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2005-000794 | Kent Web PostMail vulnerable to third party mail relay | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000793 | Hyper Estraier directory traversal/denial of service vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000792 | eBASEweb SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000791 | Cross-site scripting vulnerability in the Unicode version of msearch | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000789 | Hyper NIKKI System cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000788 | FreeStyleWiki command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000787 | Pochy denial-of-service (DoS) vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000786 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000785 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000784 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000783 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000782 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000781 | Common Management Agent 3.x vulnerable to information leakage | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000780 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000779 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000778 | QRcode Perl CGI & PHP script vulnerable to denial of service attack | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000777 | tDiary cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000776 | Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000775 | Vulnerability involving security zone handling in applications using Internet Explorer components | 2008-05-21T00:00+09:00 | 2010-10-12T16:44+09:00 |
| jvndb-2005-000774 | SFS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000773 | desknet's cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000772 | Inappropriate interpretation of mailto URL scheme by mail client software | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000771 | Wiki clone cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000770 | Virus Security memory leak vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000769 | Virus Security heap overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000768 | Movable Type session management vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000767 | WebUD arbitrary program execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000766 | w3ml cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000765 | Buffalo router configuration management interface vulnerable to remote access and password leakage | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000764 | Website connection problem when a mobile phone terminal uses specific QR code | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0119 | Multiples vulnérabilités dans les produits Siemens | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0118 | Multiples vulnérabilités dans les produits Qnap | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0117 | Multiples vulnérabilités dans SolarWinds Platform | 2024-02-12T00:00:00.000000 | 2024-02-12T00:00:00.000000 |
| certfr-2024-avi-0116 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0115 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0114 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0113 | Multiples vulnérabilités dans les produits IBM | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0112 | Multiples vulnérabilités dans MISP | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0111 | Vulnérabilité dans PostgreSQL | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0110 | Multiples vulnérabilités dans Microsoft Edge | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0109 | Vulnérabilité dans les produits Ivanti | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0108 | Multiples vulnérabilités dans les produits Fortinet | 2024-02-09T00:00:00.000000 | 2024-04-10T00:00:00.000000 |
| certfr-2024-avi-0107 | Vulnérabilité dans Elastic Kibana | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0106 | Multiples vulnérabilités dans Fortinet FortiSIEM | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0105 | Vulnérabilité dans SonicWall SonicOS | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0104 | Multiples vulnérabilités dans les produits ClamAV | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0103 | Multiples vulnérabilités dans les produits Cisco | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0102 | Multiples vulnérabilités dans GitLab | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0101 | Multiples vulnérabilités dans Google Android | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0100 | Multiples vulnérabilités dans Google Chrome | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0099 | Multiples vulnérabilités dans les produits Elastic | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0098 | Multiples vulnérabilités dans VMware Aria Operations pour les réseaux | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0097 | Multiples vulnérabilités dans Veeam Recovery Orchestrator | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0096 | Multiples vulnérabilités dans les produits Tenable | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0095 | Multiples vulnérabilités dans les produits Axis | 2024-02-06T00:00:00.000000 | 2024-02-06T00:00:00.000000 |
| certfr-2024-avi-0094 | Multiples vulnérabilités dans les produits Qnap | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |
| certfr-2024-avi-0093 | Vulnérabilité dans NetApp StorageGRID | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |
| certfr-2024-avi-0092 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0091 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0090 | Multiples vulnérabilités dans les produits IBM | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |