Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-73209 | 6.5 (v3.1) | An attacker that has valid credentials can send c… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:33.625Z | 2026-08-28T15:53:12.773Z |
| cve-2026-82235 | 8.2 (v4.0) 5.9 (v3.1) | filebrowser through 2.63.23 Denial of Service via name… |
filebrowser |
filebrowser |
2026-08-28T10:49:25.222Z | 2026-08-28T15:53:04.375Z |
| cve-2026-82240 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Privilege Escalation via User U… |
budibase |
server |
2026-08-28T10:49:28.683Z | 2026-08-28T15:52:56.424Z |
| cve-2026-82245 | 7.2 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Missing Authorization License M… |
budibase |
server |
2026-08-28T10:49:32.098Z | 2026-08-28T15:52:50.059Z |
| cve-2026-82250 | 7.1 (v4.0) 6.5 (v3.1) | gitoxide gix-packetline before 0.21.5 Denial of Service |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:35.517Z | 2026-08-28T15:52:43.900Z |
| cve-2026-82255 | 7.6 (v4.0) 6.8 (v3.1) | gitoxide 0.25.4 HTTP Credential Leak via Redirect |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:38.916Z | 2026-08-28T15:52:36.828Z |
| cve-2026-82260 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 Memory Exhaustion via Remote F… |
sveltejs |
kit |
2026-08-28T10:49:43.651Z | 2026-08-28T15:52:30.481Z |
| cve-2026-81285 | 7.5 (v3.1) | WordPress Smush Image Compression and Optimization plu… |
WPMU DEV |
Smush Image Compression and Optimization |
2026-08-28T14:33:32.509Z | 2026-08-28T15:52:24.225Z |
| cve-2026-81761 | 4.3 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:36.126Z | 2026-08-28T15:52:16.879Z |
| cve-2026-81521 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write retargeting via unvalidated dotte… |
MongoDB |
GO Driver |
2026-08-27T18:31:45.450Z | 2026-08-28T15:52:13.039Z |
| cve-2026-81523 | 2 (v4.0) 4.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
libmongocrypt |
2026-08-27T18:32:24.206Z | 2026-08-28T15:51:12.001Z |
| cve-2026-81524 | 5.3 (v4.0) 5.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
C Driver |
2026-08-27T18:32:25.355Z | 2026-08-28T15:50:10.011Z |
| cve-2026-81525 | 8.6 (v4.0) 8.1 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
PHP Library |
2026-08-27T18:32:26.493Z | 2026-08-28T15:49:03.964Z |
| cve-2026-81526 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write redirection via unvalidated dotte… |
MongoDB |
Rust Driver |
2026-08-27T18:32:27.704Z | 2026-08-28T15:48:02.435Z |
| cve-2026-81527 | 6.9 (v4.0) 6.5 (v3.1) | NoSQL injection via unquoted constant GroupBy keys in … |
MongoDB |
C# Driver |
2026-08-27T18:32:28.926Z | 2026-08-28T15:46:55.682Z |
| cve-2026-81528 | 5.3 (v4.0) 5.4 (v3.1) | NoSQL injection via array replacement bypassing update… |
MongoDB |
C# Driver |
2026-08-27T18:32:30.215Z | 2026-08-28T15:45:22.840Z |
| cve-2026-82239 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Authorization Bypass via dataso… |
budibase |
server |
2026-08-28T10:49:28.004Z | 2026-08-28T15:44:26.965Z |
| cve-2026-81530 | 6.8 (v4.0) 5.6 (v3.1) | KMS master key exposure via unredacted credential seri… |
MongoDB |
C# Driver |
2026-08-27T18:32:32.877Z | 2026-08-28T15:44:10.176Z |
| cve-2026-34616 | 5.5 (v3.1) | DNG SDK | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe DNG Software Development Kit (SDK) |
2026-08-27T18:33:58.874Z | 2026-08-28T15:42:40.150Z |
| cve-2026-82244 | 9.4 (v4.0) 9.1 (v3.1) | Budibase before 3.41.3 Remote Code Execution via Plugi… |
budibase |
server |
2026-08-28T10:49:31.426Z | 2026-08-28T15:40:15.664Z |
| cve-2026-51611 | N/A | Incorrect access control in the startSlaveReboot … |
n/a |
n/a |
2026-08-28T00:00:00.000Z | 2026-08-28T15:39:41.114Z |
| cve-2026-18374 | 4.9 (v3.1) | Passing an effectively empty string to the `,ccs=… |
The GNU C Library |
glibc |
2026-08-27T19:20:40.426Z | 2026-08-28T15:37:10.821Z |
| cve-2026-81931 | 4.8 (v4.0) | Unrestricted upload of file with dangerous type in Pro… |
Roskus |
Prospero Flow CRM |
2026-08-27T19:33:27.288Z | 2026-08-28T15:36:24.352Z |
| cve-2026-77438 | Trilium unauthenticated share-search discloses passwor… |
TriliumNext |
Trilium |
2026-08-27T19:52:55.731Z | 2026-08-28T15:35:12.098Z | |
| cve-2026-81847 | MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal |
MAA-AI |
MaaMCP |
2026-08-27T22:15:13.010Z | 2026-08-28T15:34:36.405Z | |
| cve-2026-81837 | RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts p… |
RooCodeInc |
Roo-Code |
2026-08-27T21:30:11.939Z | 2026-08-28T15:32:48.327Z | |
| cve-2026-81834 | RooCodeInc Roo-Code README File ExecaTerminalProcess c… |
RooCodeInc |
Roo-Code |
2026-08-27T20:00:08.895Z | 2026-08-28T15:32:38.871Z | |
| cve-2026-44629 | 7.9 (v3.1) | Improper access control to the Synergis Softwire … |
Genetec Inc. |
Synergis Softwire |
2026-08-27T22:08:52.736Z | 2026-08-28T15:32:08.304Z |
| cve-2026-77341 | cpp-httplib: CRLF injection via unvalidated HTTP trail… |
yhirose |
cpp-httplib |
2026-08-27T22:16:45.356Z | 2026-08-28T15:30:02.142Z | |
| cve-2026-17610 | 6 (v4.0) | RAIL 802.15.4 Mux missing ACK can lead to DoS |
Silicon Labs |
SiSDK |
2026-08-27T22:17:09.467Z | 2026-08-28T15:29:13.052Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0679 | Vulnérabilité dans Spring-Kafka | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0678 | Vulnérabilité dans Wireshark | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0677 | Multiples vulnérabilités dans Moxa ioLogik | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0676 | Vulnérabilité dans Zimbra Collaboration Suite | 2023-08-23T00:00:00.000000 | 2023-08-23T00:00:00.000000 |
| certfr-2023-avi-0675 | Multiples vulnérabilités dans Google Chrome | 2023-08-23T00:00:00.000000 | 2023-08-23T00:00:00.000000 |
| certfr-2023-avi-0674 | Multiples vulnérabilités dans Aruba EdgeConnect SD-WAN Orchestrator | 2023-08-23T00:00:00.000000 | 2023-08-23T00:00:00.000000 |
| certfr-2023-avi-0673 | Vulnérabilité dans Ivanti Sentry | 2023-08-22T00:00:00.000000 | 2023-08-22T00:00:00.000000 |
| certfr-2023-avi-0672 | Multiples vulnérabilités dans Microsoft Edge | 2023-08-22T00:00:00.000000 | 2023-08-22T00:00:00.000000 |
| certfr-2023-avi-0671 | Multiples vulnérabilités dans Moodle | 2023-08-21T00:00:00.000000 | 2023-08-21T00:00:00.000000 |
| certfr-2023-avi-0670 | Vulnérabilité dans Fortinet FortiOS | 2023-08-21T00:00:00.000000 | 2023-08-21T00:00:00.000000 |
| certfr-2023-avi-0669 | Multiples vulnérabilités dans PHP | 2023-08-21T00:00:00.000000 | 2023-08-21T00:00:00.000000 |
| certfr-2023-avi-0668 | Vulnérabilité dans les caméras Synology | 2023-08-21T00:00:00.000000 | 2023-08-21T00:00:00.000000 |
| certfr-2023-avi-0667 | Multiples vulnérabilités dans le noyau Linux de Debian et DebianLTS | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0666 | Multiples vulnérabilités dans IBM Cognos Analytics | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0665 | Multiples vulnérabilités dans les produits ClamAV | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0664 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0663 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0662 | Vulnérabilité dans MISP | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0661 | Multiples vulnérabilités dans Microsoft Edge | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0660 | Vulnérabilité dans Juniper Junos OS | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0659 | Multiples vulnérabilités dans les produits Moxa | 2023-08-17T00:00:00.000000 | 2023-08-17T00:00:00.000000 |
| certfr-2023-avi-0658 | Multiples vulnérabilités dans les produits Cisco | 2023-08-17T00:00:00.000000 | 2023-08-17T00:00:00.000000 |
| certfr-2023-avi-0657 | Vulnérabilité dans Microsoft Office et OneNote | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0656 | Multiples vulnérabilités dans Tenable Sensor Proxy | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0655 | Multiples vulnérabilités dans Aruba Networking Virtual Intranet Access | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0654 | Multiples vulnérabilités dans Google Chrome | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0653 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0652 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0651 | Multiples vulnérabilités dans PostgreSQL | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0650 | Multiples vulnérabilités dans IBM Spectrum Copy Data Management | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |