Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76842 | 8.8 (v4.0) 8.2 (v3.1) | Mercado Pago Node.js SDK through 3.4.0 Path Injection … |
mercadopago |
mercadopago |
2026-08-24T13:11:59.790Z | 2026-08-29T11:47:52.494Z |
| cve-2026-76841 | 8.7 (v4.0) 8.8 (v3.1) | Xinference through 2.11.0 Remote Code Execution via Ha… |
xorbitsai |
inference |
2026-08-24T13:11:59.094Z | 2026-08-29T11:47:51.824Z |
| cve-2026-76840 | 8.5 (v4.0) 9.6 (v3.1) | RustDesk through 1.4.9 Heap Buffer Overflow via Unvali… |
rustdesk |
rustdesk |
2026-08-24T13:11:58.408Z | 2026-08-29T11:47:51.166Z |
| cve-2026-76838 | 8.4 (v4.0) 8.5 (v3.1) | Hi.Events before 1.11.1-beta Server-Side Request Forge… |
HiEventsDev |
Hi.Events |
2026-08-24T17:36:02.928Z | 2026-08-29T11:47:50.490Z |
| cve-2026-76837 | 5.3 (v4.0) 6.4 (v3.1) | Baserow before 2.3.0 Stored Cross-Site Scripting via R… |
Baserow |
Baserow |
2026-08-24T17:36:02.268Z | 2026-08-29T11:47:49.784Z |
| cve-2026-76836 | 8.7 (v4.0) 8.8 (v3.1) | AzuraCast through 0.23.8 Liquidsoap Configuration Writ… |
AzuraCast |
AzuraCast |
2026-08-24T17:36:01.620Z | 2026-08-29T11:47:49.114Z |
| cve-2026-76835 | 9.3 (v4.0) 9.1 (v3.1) | OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypa… |
oauth2-proxy |
oauth2-proxy |
2026-08-24T17:55:39.829Z | 2026-08-29T11:47:48.465Z |
| cve-2026-75575 | 6.9 (v4.0) 5.3 (v3.1) | Rocket.Chat Missing DDP Rate Limit on the sendForgotPa… |
RocketChat |
Rocket.Chat |
2026-08-25T01:30:29.898Z | 2026-08-29T11:47:47.758Z |
| cve-2026-73108 | 8.7 (v4.0) 7.5 (v3.1) | RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS vi… |
rustdesk |
rustdesk |
2026-08-26T13:00:29.283Z | 2026-08-29T11:47:46.413Z |
| cve-2026-73102 | 6.9 (v4.0) 5.7 (v3.1) | RustDesk Path Traversal via macOS Clipboard File-Paste |
rustdesk |
rustdesk |
2026-08-26T13:00:00.405Z | 2026-08-29T11:47:45.736Z |
| cve-2026-72711 | 6.8 (v4.0) 6.3 (v3.1) | Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration… |
leanprover |
lean4 |
2026-08-24T20:08:33.219Z | 2026-08-29T11:47:45.059Z |
| cve-2026-72705 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoin… |
rocq-prover |
rocq |
2026-08-24T20:08:32.535Z | 2026-08-29T11:47:44.348Z |
| cve-2026-72704 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Guard Checker Trusts Corrupt… |
rocq-prover |
rocq |
2026-08-24T20:08:31.787Z | 2026-08-29T11:47:43.676Z |
| cve-2026-72703 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts No… |
rocq-prover |
rocq |
2026-08-24T20:08:30.607Z | 2026-08-29T11:47:43.005Z |
| cve-2026-72699 | 9.3 (v4.0) 5.3 (v3.1) | Grav Login Plugin before 3.9.1 Email Enumeration via R… |
getgrav |
grav-plugin-login |
2026-08-25T01:30:21.863Z | 2026-08-29T11:47:42.332Z |
| cve-2026-71511 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Members REST API Sensitive Data Expo… |
Dolibarr |
dolibarr |
2026-08-24T19:06:35.183Z | 2026-08-29T11:47:41.626Z |
| cve-2026-71510 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Users REST API SQL Injection via fil… |
Dolibarr |
dolibarr |
2026-08-24T19:05:39.848Z | 2026-08-29T11:47:40.942Z |
| cve-2026-71509 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Expense Report REST API Improper Aut… |
Dolibarr |
dolibarr |
2026-08-24T19:04:52.122Z | 2026-08-29T11:47:40.171Z |
| cve-2026-71508 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Improper Authorization via … |
Dolibarr |
dolibarr |
2026-08-24T19:03:59.694Z | 2026-08-29T11:47:38.779Z |
| cve-2026-71507 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:03:01.493Z | 2026-08-29T11:47:38.074Z |
| cve-2026-71506 | 7.2 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Payments REST API Improper Authoriza… |
Dolibarr |
dolibarr |
2026-08-24T19:01:47.408Z | 2026-08-29T11:47:37.389Z |
| cve-2026-71505 | 7.1 (v4.0) 7.1 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:00:47.470Z | 2026-08-29T11:47:36.700Z |
| cve-2026-71504 | 8.6 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Members REST API Improper Authorizat… |
Dolibarr |
dolibarr |
2026-08-24T18:57:47.028Z | 2026-08-29T11:47:36.048Z |
| cve-2026-71503 | 5.1 (v4.0) 6.1 (v3.1) | Dolibarr < 24.0.0 Reflected XSS via Extra Fields Admin… |
Dolibarr |
dolibarr |
2026-08-24T18:57:05.485Z | 2026-08-29T11:47:35.368Z |
| cve-2026-6827 | 5.1 (v4.0) 6.1 (v3.1) | justhtml before 1.17.0 Multiple Cross-Site Scripting V… |
EmilStenstrom |
justhtml |
2026-08-23T13:34:11.236Z | 2026-08-29T11:47:34.707Z |
| cve-2026-67602 | 9.3 (v4.0) 9.1 (v3.1) | phpIPAM < 1.8.2 Authentication Bypass via REST API Obj… |
phpipam |
phpipam |
2026-08-24T13:57:42.191Z | 2026-08-29T11:47:34.046Z |
| cve-2026-67204 | 5.3 (v4.0) 5.4 (v3.1) | BookStack < 26.05.4 Broken Access Control via Image Ga… |
BookStackApp |
BookStack |
2026-08-24T15:33:13.649Z | 2026-08-29T11:47:33.393Z |
| cve-2026-65053 | 5.1 (v4.0) 6.1 (v3.1) | Horde IMP before 7.2.0 Stored Cross-Site Scripting via… |
horde |
imp |
2026-08-24T14:53:43.219Z | 2026-08-29T11:47:32.704Z |
| cve-2026-62388 | 8.7 (v4.0) 7.5 (v3.1) | NLTK before 3.10.0 Insecure Default Configuration in p… |
nltk |
nltk |
2026-08-22T14:12:38.647Z | 2026-08-29T11:47:32.048Z |
| cve-2026-58474 | 8.6 (v4.0) 8.8 (v3.1) | whichllm < 0.5.16 Code Injection via run and snippet c… |
Andyyyy64 |
whichllm |
2026-08-26T17:49:04.041Z | 2026-08-29T11:47:31.365Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2005-000797 | Multiple vulnerabilities in FreeStyleWiki including cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000796 | Multiple vulnerabilities in FreeStyleWiki including cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000795 | HTTPD-User-Manage cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000794 | Kent Web PostMail vulnerable to third party mail relay | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000793 | Hyper Estraier directory traversal/denial of service vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000792 | eBASEweb SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000791 | Cross-site scripting vulnerability in the Unicode version of msearch | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000789 | Hyper NIKKI System cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000788 | FreeStyleWiki command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000787 | Pochy denial-of-service (DoS) vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000786 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000785 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000784 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000783 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000782 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000781 | Common Management Agent 3.x vulnerable to information leakage | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000780 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000779 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000778 | QRcode Perl CGI & PHP script vulnerable to denial of service attack | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000777 | tDiary cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000776 | Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000774 | SFS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000773 | desknet's cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000772 | Inappropriate interpretation of mailto URL scheme by mail client software | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000771 | Wiki clone cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000770 | Virus Security memory leak vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000769 | Virus Security heap overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000768 | Movable Type session management vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000767 | WebUD arbitrary program execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000766 | w3ml cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0123 | Multiples vulnérabilités dans les produits Adobe | 2024-02-14T00:00:00.000000 | 2024-02-14T00:00:00.000000 |
| certfr-2024-avi-0122 | Multiples vulnérabilités dans Bind | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0121 | Multiples vulnérabilités dans Typo3 | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0120 | Multiples vulnérabilités dans les produits Schneider | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0119 | Multiples vulnérabilités dans les produits Siemens | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0118 | Multiples vulnérabilités dans les produits Qnap | 2024-02-13T00:00:00.000000 | 2024-02-13T00:00:00.000000 |
| certfr-2024-avi-0117 | Multiples vulnérabilités dans SolarWinds Platform | 2024-02-12T00:00:00.000000 | 2024-02-12T00:00:00.000000 |
| certfr-2024-avi-0116 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0115 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0114 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0113 | Multiples vulnérabilités dans les produits IBM | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0112 | Multiples vulnérabilités dans MISP | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0111 | Vulnérabilité dans PostgreSQL | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0110 | Multiples vulnérabilités dans Microsoft Edge | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0109 | Vulnérabilité dans les produits Ivanti | 2024-02-09T00:00:00.000000 | 2024-02-09T00:00:00.000000 |
| certfr-2024-avi-0107 | Vulnérabilité dans Elastic Kibana | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0106 | Multiples vulnérabilités dans Fortinet FortiSIEM | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0105 | Vulnérabilité dans SonicWall SonicOS | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0104 | Multiples vulnérabilités dans les produits ClamAV | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0103 | Multiples vulnérabilités dans les produits Cisco | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0102 | Multiples vulnérabilités dans GitLab | 2024-02-08T00:00:00.000000 | 2024-02-08T00:00:00.000000 |
| certfr-2024-avi-0101 | Multiples vulnérabilités dans Google Android | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0100 | Multiples vulnérabilités dans Google Chrome | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0099 | Multiples vulnérabilités dans les produits Elastic | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0098 | Multiples vulnérabilités dans VMware Aria Operations pour les réseaux | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0097 | Multiples vulnérabilités dans Veeam Recovery Orchestrator | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0096 | Multiples vulnérabilités dans les produits Tenable | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0095 | Multiples vulnérabilités dans les produits Axis | 2024-02-06T00:00:00.000000 | 2024-02-06T00:00:00.000000 |
| certfr-2024-avi-0094 | Multiples vulnérabilités dans les produits Qnap | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |
| certfr-2024-avi-0093 | Vulnérabilité dans NetApp StorageGRID | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |