Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59822 | LiteLLM: MCP Authentication Bypass via OAuth2 Passthro… |
BerriAI |
litellm |
2026-07-08T19:32:18.611Z | 2026-08-28T15:28:59.177Z | |
| cve-2026-81777 | 5.3 (v3.1) | WordPress Essential Addons for Elementor plugin <= 6.8… |
WPDeveloper |
Essential Addons for Elementor |
2026-08-28T09:42:11.752Z | 2026-08-28T15:28:16.134Z |
| cve-2026-54084 | Wazuh agent enrollment NULL pointer dereference via ma… |
wazuh |
wazuh |
2026-08-27T23:12:20.239Z | 2026-08-28T15:27:56.072Z | |
| cve-2026-82249 | 2.3 (v4.0) 3.1 (v3.1) | gitoxide before 0.38.2 Credential Helper Protocol Fiel… |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:34.825Z | 2026-08-28T15:26:02.245Z |
| cve-2026-76581 | WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to… |
wpmudev |
WPMU DEV Dashboard |
2026-08-28T06:39:49.567Z | 2026-08-28T15:24:54.022Z | |
| cve-2026-38821 | 7.1 (v3.1) | A heap-based buffer overflow vulnerability exists… |
openNDS |
openNDS |
2026-08-28T00:10:10.769Z | 2026-08-28T15:24:14.987Z |
| cve-2026-76053 | TranslatePress <= 3.3.3 - Unauthenticated Stored Cross… |
cozmoslabs |
TranslatePress – Translate Multilingual sites with AI Translation |
2026-08-28T02:26:56.181Z | 2026-08-28T15:23:52.929Z | |
| cve-2026-38822 | 7.6 (v3.1) | In openNDS before 11.0.0, the client_params.sh sc… |
openNDS |
openNDS |
2026-08-28T00:12:08.428Z | 2026-08-28T15:23:29.402Z |
| cve-2026-16759 | Tutor LMS <= 4.0.5 - Unauthenticated Remote Code Execu… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-08-28T03:39:35.072Z | 2026-08-28T15:22:17.595Z | |
| cve-2026-80200 | 5.3 (v4.0) 4.7 (v3.1) | Kimai before 2.53.0 Open Redirect via RelayState |
kimai |
kimai |
2026-08-25T23:19:05.809Z | 2026-08-28T15:18:32.829Z |
| cve-2026-79773 | 6.9 (v4.0) 4.9 (v3.1) | Winter CMS before 1.2.13 Local File Inclusion via JavaScript |
wintercms |
winter |
2026-08-25T15:16:05.053Z | 2026-08-28T15:18:32.149Z |
| cve-2026-76843 | 8.4 (v4.0) 7.8 (v3.1) | Flair 0.15.0 and 0.15.1 Deserialization of Untrusted D… |
flairNLP |
flair |
2026-08-24T13:12:00.470Z | 2026-08-28T15:18:31.470Z |
| cve-2026-72831 | 8.7 (v4.0) 8.8 (v3.1) | Grav through 2.0.11 Authentication Bypass via Flex Objects |
getgrav |
grav |
2026-08-14T11:35:37.801Z | 2026-08-28T15:18:30.795Z |
| cve-2026-65897 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin 1.0.9 Privilege Escalation via Invitat… |
getgrav |
grav |
2026-07-23T11:42:17.453Z | 2026-08-28T15:18:30.122Z |
| cve-2026-65896 | 7.1 (v4.0) 7.1 (v3.1) | Grav API Plugin before 1.0.10 Path Traversal via move |
getgrav |
grav |
2026-07-23T11:42:16.817Z | 2026-08-28T15:18:29.460Z |
| cve-2026-65895 | 8.2 (v4.0) 8.5 (v3.1) | Grav API Plugin before 1.0.10 Broken Access Control |
getgrav |
grav |
2026-07-23T11:42:16.163Z | 2026-08-28T15:18:28.805Z |
| cve-2026-58652 | 7.7 (v4.0) 7.5 (v3.1) | luci-app-travelmate - Arbitrary Command Execution via … |
openwrt |
luci-app-travelmate |
2026-07-02T12:28:34.022Z | 2026-08-28T15:18:28.142Z |
| cve-2025-2610 | 7.6 (v3.1) | MagnusBilling Stored Cross-Site Scripting in Alarm Module |
MagnusSolution |
MagnusBilling |
2025-03-21T22:35:17.724Z | 2026-08-28T15:18:26.844Z |
| cve-2025-2609 | 8.2 (v3.1) | MagnusBilling Stored Cross-Site Scripting in Login Logs |
MagnusSolution |
MagnusBilling |
2025-03-21T22:41:13.784Z | 2026-08-28T15:18:26.179Z |
| cve-2023-54354 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.14.3 Null Pointer Dereference via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.858Z | 2026-08-28T15:18:24.047Z |
| cve-2022-51000 | 9.3 (v4.0) 9.8 (v3.1) | Nokogiri before 1.13.2 Multiple Vulnerabilities via li… |
sparklemotion |
nokogiri |
2026-08-25T15:15:55.205Z | 2026-08-28T15:18:22.982Z |
| cve-2022-50999 | 8.8 (v4.0) 8.6 (v3.1) | Nokogiri before 1.13.5 Integer Overflow via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:54.519Z | 2026-08-28T15:18:22.151Z |
| cve-2022-50998 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.830Z | 2026-08-28T15:18:21.490Z |
| cve-2021-47996 | 8.7 (v4.0) 7.5 (v3.1) | Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 |
sparklemotion |
nokogiri |
2026-08-25T15:15:53.158Z | 2026-08-28T15:18:20.801Z |
| cve-2026-77365 | Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site… |
optimole |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization |
2026-08-28T02:26:56.688Z | 2026-08-28T15:17:13.576Z | |
| cve-2026-82081 | 6.4 (v3.1) | wallabag 2 through 2.6.14 allows SSRF because a c… |
wallabag |
wallabag |
2026-08-28T02:40:33.844Z | 2026-08-28T15:16:08.971Z |
| cve-2026-33818 | N/A | Enforce maximum recursion depth in encoding/asn1 |
Go standard library |
encoding/asn1 |
2026-08-13T21:58:52.821Z | 2026-08-28T15:14:26.550Z |
| cve-2026-42504 | N/A | Quadratic complexity in WordDecoder.DecodeHeader in mime |
Go standard library |
mime |
2026-06-02T22:01:37.219Z | 2026-08-28T15:14:26.260Z |
| cve-2026-18324 | Forminator Forms <= 1.57.0.1 - Unauthenticated Stored … |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-08-28T03:39:34.725Z | 2026-08-28T15:14:18.901Z | |
| cve-2026-13598 | N/A | RestrictMate < 1.3.0 - Unauthenticated Privilege Escal… |
Unknown |
RestrictMate |
2026-08-23T06:00:17.682Z | 2026-08-28T15:13:47.841Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0632 | Multiples vulnérabilités dans les produits Schneider Electric | 2023-08-08T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0615 | Vulnérabilité dans Ivanti MobileIron Core et Endpoint Manager Mobile | 2023-08-03T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0649 | Multiples vulnérabilités dans les produits Nextcloud | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0648 | Multiples vulnérabilités dans les produits NetApp | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0647 | Multiples vulnérabilités dans les produits Mitel | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0646 | Vulnérabilité dans MongoDB Ops Manager | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0645 | Multiples vulnérabilités dans les produits Microsoft | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0644 | Multiples vulnérabilités dans Microsoft Azure | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0643 | Multiples vulnérabilités dans Microsoft .Net | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0642 | Multiples vulnérabilités dans Microsoft Windows | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0641 | Multiples vulnérabilités dans Microsoft Office | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0640 | Multiples vulnérabilités dans les produits Intel | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0639 | Multiples vulnérabilités dans Xen | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0638 | Multiples vulnérabilités dans Citrix Hypervisor | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0637 | Vulnérabilité dans Fortinet FortiOS | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0636 | Multiples vulnérabilités dans les produits Adobe | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0635 | Multiples vulnérabilités dans les produits SAP | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0634 | Vulnérabilité dans les produits Belden | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0633 | Multiples vulnérabilités dans les produits Siemens | 2023-08-08T00:00:00.000000 | 2023-08-08T00:00:00.000000 |
| certfr-2023-avi-0631 | Multiples vulnérabilités dans Microsoft Edge | 2023-08-08T00:00:00.000000 | 2023-08-08T00:00:00.000000 |
| certfr-2023-avi-0630 | Vulnérabilité dans IBM WebSphere | 2023-08-08T00:00:00.000000 | 2023-08-08T00:00:00.000000 |
| certfr-2023-avi-0629 | Multiples vulnérabilités dans Google Android | 2023-08-08T00:00:00.000000 | 2023-08-08T00:00:00.000000 |
| certfr-2023-avi-0628 | Multiples vulnérabilités dans PHP | 2023-08-07T00:00:00.000000 | 2023-08-07T00:00:00.000000 |
| certfr-2023-avi-0627 | Multiples vulnérabilités dans IBM Spectrum | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0626 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0625 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0624 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0623 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0622 | Multiples vulnérabilités dans le noyau Linux de DebianLTS | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0621 | Multiples vulnérabilités dans PHP | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |