Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72704 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Guard Checker Trusts Corrupt… |
rocq-prover |
rocq |
2026-08-24T20:08:31.787Z | 2026-08-29T11:47:43.676Z |
| cve-2026-72703 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts No… |
rocq-prover |
rocq |
2026-08-24T20:08:30.607Z | 2026-08-29T11:47:43.005Z |
| cve-2020-37268 | 6.8 (v4.0) 6.3 (v3.1) | Coq and Rocq Prover Print Assumptions Omits Unsafe Uni… |
rocq-prover |
rocq |
2026-08-24T20:08:28.079Z | 2026-08-25T15:10:45.964Z |
| cve-2026-75509 | joserfc claim-validation bypass via array-typed single… |
authlib |
joserfc |
2026-08-24T20:08:07.088Z | 2026-08-25T16:42:19.769Z | |
| cve-2026-76098 | Mistune has Denial of Service — RecursionError via Exc… |
lepture |
mistune |
2026-08-24T20:05:00.932Z | 2026-08-24T20:17:07.057Z | |
| cve-2026-76816 | Netty: MQTT Topic Name and Client ID Validation Bypass |
netty |
netty |
2026-08-24T19:53:12.737Z | 2026-08-25T13:34:51.567Z | |
| cve-2026-78430 | sworddut mcp-ffmpeg-helper Tool handlers.ts handleTool… |
sworddut |
mcp-ffmpeg-helper |
2026-08-24T19:45:08.359Z | 2026-08-24T19:58:40.163Z | |
| cve-2026-63693 | 6.6 (v3.1) | Dell Client BIOS contains an Improper Link Resolu… |
Dell |
Alienware Area 51m R2 |
2026-08-24T19:40:03.175Z | 2026-08-27T14:36:28.474Z |
| cve-2026-78555 | 9.4 (v4.0) | RansomLook API Key Disclosure Through /admin/apikeys H… |
ransomlook |
ransomlook |
2026-08-24T19:38:50.437Z | 2026-08-24T20:05:50.104Z |
| cve-2026-78553 | 7 (v4.0) | Insecure Flask Secret-Key File Permissions Allow Local… |
ransomlook |
ransomlook |
2026-08-24T19:28:49.323Z | 2026-08-24T20:07:07.041Z |
| cve-2026-77310 | jackson-databind: Eager DNS resolution (SSRF) still pr… |
FasterXML |
com.fasterxml.jackson.core:jackson-databind |
2026-08-24T19:24:59.115Z | 2026-08-25T19:23:52.205Z | |
| cve-2026-77923 | 5.3 (v4.0) 4.3 (v3.1) | Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clon… |
Dolibarr |
dolibarr |
2026-08-24T19:23:28.160Z | 2026-08-29T11:47:55.204Z |
| cve-2026-61419 | 7.8 (v3.1) | Dell ThinOS 10, versions prior to 2605_10.2518, c… |
Dell |
ThinOS 10 |
2026-08-24T19:21:40.484Z | 2026-08-27T16:24:50.370Z |
| cve-2026-78551 | 8.8 (v4.0) | RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:20:03.145Z | 2026-08-24T20:07:41.242Z |
| cve-2026-71511 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Members REST API Sensitive Data Expo… |
Dolibarr |
dolibarr |
2026-08-24T19:06:35.183Z | 2026-08-29T11:47:41.626Z |
| cve-2026-71510 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Users REST API SQL Injection via fil… |
Dolibarr |
dolibarr |
2026-08-24T19:05:39.848Z | 2026-08-29T11:47:40.942Z |
| cve-2026-71509 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Expense Report REST API Improper Aut… |
Dolibarr |
dolibarr |
2026-08-24T19:04:52.122Z | 2026-08-29T11:47:40.171Z |
| cve-2026-71508 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Improper Authorization via … |
Dolibarr |
dolibarr |
2026-08-24T19:03:59.694Z | 2026-08-29T11:47:38.779Z |
| cve-2026-71507 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:03:01.493Z | 2026-08-29T11:47:38.074Z |
| cve-2026-71506 | 7.2 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Payments REST API Improper Authoriza… |
Dolibarr |
dolibarr |
2026-08-24T19:01:47.408Z | 2026-08-29T11:47:37.389Z |
| cve-2026-71505 | 7.1 (v4.0) 7.1 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:00:47.470Z | 2026-08-29T11:47:36.700Z |
| cve-2026-40877 | Combodo iTop: PHP Object Injection Leading to Remote C… |
Combodo |
iTop |
2026-08-24T18:57:55.017Z | 2026-08-27T14:10:34.908Z | |
| cve-2026-71504 | 8.6 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Members REST API Improper Authorizat… |
Dolibarr |
dolibarr |
2026-08-24T18:57:47.028Z | 2026-08-29T11:47:36.048Z |
| cve-2026-71503 | 5.1 (v4.0) 6.1 (v3.1) | Dolibarr < 24.0.0 Reflected XSS via Extra Fields Admin… |
Dolibarr |
dolibarr |
2026-08-24T18:57:05.485Z | 2026-08-29T11:47:35.368Z |
| cve-2026-30864 | Combodo iTop: Reflected XSS in dashboard revert |
Combodo |
iTop |
2026-08-24T18:52:43.685Z | 2026-08-24T19:31:23.588Z | |
| cve-2026-39975 | Combodo iTop: Remote code execution using external aut… |
Combodo |
iTop |
2026-08-24T18:50:48.920Z | 2026-08-24T19:58:25.146Z | |
| cve-2026-78417 | N/A | Insufficient verification of data authenticity in… |
Devolutions |
Remote Desktop Manager |
2026-08-24T18:26:25.739Z | 2026-08-28T17:33:51.985Z |
| cve-2026-78541 | 8.5 (v4.0) | Command Injection in Parent Control of TP-Link Archer … |
TP-Link Systems Inc. |
Archer BE3600 v1 |
2026-08-24T18:26:11.670Z | 2026-08-25T03:56:57.446Z |
| cve-2026-76835 | 9.3 (v4.0) 9.1 (v3.1) | OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypa… |
oauth2-proxy |
oauth2-proxy |
2026-08-24T17:55:39.829Z | 2026-08-29T11:47:48.465Z |
| cve-2026-76073 | 8.7 (v4.0) 8.8 (v3.1) | Label Studio through 1.23.0 Cross-Organization Annotat… |
HumanSignal |
label-studio |
2026-08-24T17:55:39.204Z | 2026-08-26T16:13:40.083Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2004-000587 | desknet's buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000586 | Virus Buster Corporate Edition vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000554 | Namazu cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000511 | DeleGate Multiple Buffer Overflow Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000473 | Ruby cgi.rb Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000323 | Ruby CGI Session Management Insecure File Permission Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000231 | KAME Racoon eay_check_x509cert Improper Certificate Verification Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000197 | LHA extrace_one Vuffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000196 | LHA Buffer Overflow Vulnerability with lack of Path Length Validation | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000195 | LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000179 | DeleGate SSLway Filter Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000170 | Lha Directory Traversal Vulnerability in Testing and Extracting Process | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000169 | LHa Vuffer Overflow Vulnerability in Testing and Extracting Process | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000242 | skk Arbitrary Code Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000163 | KON2 Buffer Overflow Vulnerability in Command Argument Validation | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000149 | lv Arbitrary Command Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000144 | IP Messenger for Win Filename Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000030 | w3m Vulnerability of Unauthorized Access to Files or Cookies | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2003-000029 | w3m Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2002-000291 | Canna irw_through Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0059 | Vulnérabilité dans Spring Framework | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0058 | Vulnérabilité dans Postfix | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0057 | Multiples vulnérabilités dans les produits IBM | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0056 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0055 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0054 | Vulnérabilité dans Exim | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0053 | Multiples vulnérabilités dans les produits Nextcloud | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0052 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0051 | Vulnérabilité dans Drupal Core | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0050 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0049 | Multiples vulnérabilités dans Oracle Weblogic Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0048 | Multiples vulnérabilités dans Oracle Systems | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0047 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0046 | Multiples vulnérabilités dans Oracle Java SE | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0045 | Multiples vulnérabilités dans Oracle Database Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0044 | Multiples vulnérabilités dans Oracle MySQL | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0043 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0042 | Vulnérabilité dans MongoDB C-Driver | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0041 | Multiples vulnérabilités dans Google Chrome | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0040 | Multiples vulnérabilités dans Atlassian Confluence et Jira | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0039 | Multiples vulnérabilités dans les produits Citrix | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0038 | Vulnérabilité dans les produits SonicWall | 2024-01-16T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0037 | Vulnérabilité dans VMware Aria Operations | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0036 | Vulnérabilité dans OpenSSL | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0035 | Vulnérabilité dans Synology Disk Station Manager | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0034 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0033 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0032 | Vulnérabilité dans les produits WithSecure | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0031 | Multiples vulnérabilités dans les produits IBM | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0030 | Multiples vulnérabilités dans GitLab | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |