Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78259 | 7.3 (v3.1) | WordPress WPLegalPages plugin <= 3.7.0 - Broken Authen… |
WP Legal Pages |
WPLegalPages |
2026-08-24T21:31:29.978Z | 2026-08-25T19:03:02.064Z |
| cve-2026-32563 | 9.8 (v3.1) | WordPress ACPT (Pro) - Custom Post Types Plugin for Wo… |
A CPT |
ACPT (Pro) - Custom Post Types Plugin for WordPress |
2026-08-24T21:31:29.268Z | 2026-08-25T14:44:09.356Z |
| cve-2026-32561 | 8.8 (v3.1) | WordPress Booking Hub plugin <= 1.3.0 - Privilege Esca… |
LiquidThemes |
Booking Hub |
2026-08-24T21:31:28.568Z | 2026-08-25T19:17:36.940Z |
| cve-2026-32560 | 8.8 (v3.1) | WordPress MagicAI for WordPress - AI Text, Image, Chat… |
LiquidThemes |
MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator |
2026-08-24T21:31:27.848Z | 2026-08-25T19:23:15.522Z |
| cve-2026-32559 | 9.9 (v3.1) | WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File … |
tophive |
UltimateAI |
2026-08-24T21:31:27.138Z | 2026-08-27T14:19:57.548Z |
| cve-2026-32556 | 7.1 (v3.1) | WordPress Boost plugin <= 2.0.4 - Cross Site Scripting… |
PixelYourSite Professional |
Boost |
2026-08-24T21:31:26.430Z | 2026-08-25T19:03:29.234Z |
| cve-2026-32555 | 9.3 (v3.1) | WordPress Boost plugin <= 2.0.4 - SQL Injection vulner… |
PixelYourSite Professional |
Boost |
2026-08-24T21:31:25.718Z | 2026-08-25T14:43:17.674Z |
| cve-2026-32554 | 9.3 (v3.1) | WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 … |
WBW |
WooBeWoo Product Filter Pro |
2026-08-24T21:31:25.000Z | 2026-08-25T19:12:24.665Z |
| cve-2026-27364 | 6.5 (v3.1) | WordPress Style Kits plugin <= 2.6.5 - Broken Access C… |
AnalogWP |
Style Kits |
2026-08-24T21:31:24.274Z | 2026-08-25T19:23:25.508Z |
| cve-2026-78284 | 8.6 (v3.1) | WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary… |
Stylemix |
MasterStudy LMS |
2026-08-24T21:31:23.567Z | 2026-08-25T14:42:01.677Z |
| cve-2026-78434 | Faveo Helpdesk post-ticket-reply Endpoint FormControll… |
Faveo |
Helpdesk |
2026-08-24T21:30:08.526Z | 2026-08-25T19:14:49.643Z | |
| cve-2026-77337 | CakePHP: Potential Authentication bypass with CookieAu… |
cakephp |
authentication |
2026-08-24T21:30:06.817Z | 2026-08-25T19:23:34.125Z | |
| cve-2026-17113 | 6 (v3.1) | Cri-o: cri-o: unvalidated image env var causes daemon crash |
|
|
2026-08-24T21:22:49.638Z | 2026-08-27T14:36:20.534Z |
| cve-2026-45404 | OpenTelemetry-Go: Unsynchronized baggage map can panic… |
open-telemetry |
opentelemetry-go |
2026-08-24T21:19:00.617Z | 2026-08-27T14:18:58.878Z | |
| cve-2026-77384 | libp2p: Circuit relay v2 server reservation refresh le… |
libp2p |
js-libp2p |
2026-08-24T21:06:39.909Z | 2026-08-25T19:04:25.322Z | |
| cve-2026-19568 | 7.8 (v3.1) | SVG File Parsing Memory Corruption Vulnerability in Au… |
Autodesk |
3ds Max |
2026-08-24T20:59:44.839Z | 2026-08-26T03:56:10.947Z |
| cve-2026-7455 | 7.8 (v3.1) | FLT File Parsing Out-of-Bounds Write Vulnerability in … |
Autodesk |
3ds Max |
2026-08-24T20:58:30.749Z | 2026-08-26T03:56:09.639Z |
| cve-2026-16783 | 7.8 (v3.1) | ABC File Parsing Out-of-Bounds Write Vulnerability in … |
Autodesk |
3ds Max |
2026-08-24T20:56:43.477Z | 2026-08-26T03:56:07.890Z |
| cve-2026-16782 | 5.3 (v3.1) | SVG File Parsing Out-of-Bounds Read Vulnerability in A… |
Autodesk |
3ds Max |
2026-08-24T20:56:16.841Z | 2026-08-25T14:51:55.740Z |
| cve-2026-16781 | 5.5 (v3.1) | SVG File Parsing Stack Exhaustion Vulnerability in Aut… |
Autodesk |
3ds Max |
2026-08-24T20:55:41.015Z | 2026-08-25T14:51:55.905Z |
| cve-2026-55468 | Wagtail: Improper restriction handling on Pages admin API |
wagtail |
wagtail |
2026-08-24T20:37:36.460Z | 2026-08-25T16:32:43.104Z | |
| cve-2026-77634 | CakePHP: SmtpTransport vulnerable to CRLF header injection |
cakephp |
cakephp |
2026-08-24T20:33:46.836Z | 2026-08-25T19:23:40.053Z | |
| cve-2026-5006 | 6.8 (v3.1) | Vault Vulnerable to Privilege Escalation via Slash Inj… |
HashiCorp |
Vault |
2026-08-24T20:32:49.396Z | 2026-08-26T03:56:14.745Z |
| cve-2026-77635 | CakePHP: FunctionsBuilder::jsonValue() vulerable to SQ… |
cakephp |
cakephp |
2026-08-24T20:30:34.492Z | 2026-08-25T13:31:40.225Z | |
| cve-2026-75554 | 2.3 (v4.0) | Explicit organization scopes survive token refresh aft… |
hexpm |
hexpm |
2026-08-24T20:15:05.791Z | 2026-08-25T19:53:55.535Z |
| cve-2026-75542 | 8.3 (v4.0) | OAuth token exchange grants repository scopes for orga… |
hexpm |
hexpm |
2026-08-24T20:14:30.191Z | 2026-08-25T19:53:26.196Z |
| cve-2026-77567 | Filament: App-based MFA can be bypassed when recovery … |
filamentphp |
filament |
2026-08-24T20:10:58.326Z | 2026-08-27T14:17:29.291Z | |
| cve-2026-72714 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Universe Checking State Desy… |
rocq-prover |
rocq |
2026-08-24T20:08:33.917Z | 2026-08-25T17:41:24.594Z |
| cve-2026-72711 | 6.8 (v4.0) 6.3 (v3.1) | Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration… |
leanprover |
lean4 |
2026-08-24T20:08:33.219Z | 2026-08-29T11:47:45.059Z |
| cve-2026-72705 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoin… |
rocq-prover |
rocq |
2026-08-24T20:08:32.535Z | 2026-08-29T11:47:44.348Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2005-000764 | Website connection problem when a mobile phone terminal uses specific QR code | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000763 | ppBlog cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000762 | Norton AntiVirus causes abnormal OS termination when scanning illegal files | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000761 | Norton AntiVirus causes abnormal OS termination when a user edits a shared network file | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000760 | McAfee VirusScan Engine buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000759 | McAfee VirusScan Engine buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000758 | msearch directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000757 | Cybozu Office browser script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000756 | Tsuru-Kame Mail vulnerable in S/MIME signature verification | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000727 | mod_imap cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2005-000707 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000706 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000705 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000695 | Ruby XMLRPC Server Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000601 | OpenSSL version rollback vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:04+09:00 |
| jvndb-2005-000538 | Ruby vulnerability allowing to bypass safe level 4 as a sandbox | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000537 | Webmin and Usermin authentication bypass vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000530 | Vulnerability in multiple web browsers allowing request spoofing attacks | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000396 | Ruby XMLRPC Arbitrary Command Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000343 | DeleGate DNS Message Decompression Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000199 | Sylpheed Filename Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000183 | Apache Tomcat denial of service vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000163 | Sylpheed Email Header Buffer Overflow Vulnerability with non-ASCII Characters | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000594 | DNS cache servers resource consumption by TCP SYN_SENT states | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000593 | LDAP server update function vulnerable to buffer overflow | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000592 | Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000591 | Shuriken Pro3 S/MIME signature verification does not verify the From address | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000590 | Becky! Internet Mail vulnerability in S/MIME signature verification | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000589 | Toshiba HDD & DVD video recorders can be accessed without authentication | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000588 | SSL-VPN products vulnerable to cookie theft | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0089 | Vulnérabilité dans Kaspersky Security pour Linux Mail Server | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0088 | Multiples vulnérabilités dans Microsoft Edge | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0087 | Multiples vulnérabilités dans les produits GLPI | 2024-02-01T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0086 | Multiples vulnérabilités dans Juniper | 2024-02-01T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0085 | Multiples vulnérabilités dans les produits Ivanti | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0084 | Multiples vulnérabilités dans Wordpress | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0083 | Vulnérabilité dans Microsoft Edge | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0082 | Multiples vulnérabilités dans les produits Xen | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0081 | Multiples vulnérabilités dans les produits Spring | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0080 | Multiples vulnérabilités dans les produits Splunk | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0079 | Vulnérabilité dans les produits ESET | 2024-01-30T00:00:00.000000 | 2024-01-30T00:00:00.000000 |
| certfr-2024-avi-0078 | Vulnérabilité dans Progress MOVEit Transfer | 2024-01-30T00:00:00.000000 | 2024-01-30T00:00:00.000000 |
| certfr-2024-avi-0077 | Vulnérabilité dans les produits NetApp | 2024-01-29T00:00:00.000000 | 2024-01-29T00:00:00.000000 |
| certfr-2024-avi-0076 | Vulnérabilité dans Microsoft Edge | 2024-01-29T00:00:00.000000 | 2024-01-29T00:00:00.000000 |
| certfr-2024-avi-0075 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0074 | Multiples vulnérabilités dans les produits IBM | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0073 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0072 | Multiples vulnérabilités dans les produits Juniper | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0071 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0070 | Vulnérabilité dans Synology DiskStation Manager | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0069 | Multiples vulnérabilités dans Gitlab | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0068 | Vulnérabilité dans Cisco Unified Communications | 2024-01-25T00:00:00.000000 | 2024-01-25T00:00:00.000000 |
| certfr-2024-avi-0067 | Multiples vulnérabilités dans les produits NetApp | 2024-01-25T00:00:00.000000 | 2024-01-25T00:00:00.000000 |
| certfr-2024-avi-0066 | Vulnérabilité dans Squid | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0065 | Vulnérabilité dans Citrix Hypervisor | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0064 | Multiples vulnérabilités dans Google Chrome | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0063 | Multiples vulnérabilités dans les produits Mozilla | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0062 | Multiples vulnérabilités dans les produits Apple | 2024-01-23T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0061 | Multiples vulnérabilités dans les produits Splunk | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2024-avi-0060 | Vulnérabilité dans Xen | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |