Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75628 | N/A | Punk::OAuth2 versions before 0.03 for Perl allow an at… |
|
|
2026-08-20T00:40:08.220Z | 2026-08-28T15:11:53.961Z |
| cve-2026-5510 | GiveWP <= 4.14.4 - Authenticated (Contributor+) Stored… |
stellarwp |
GiveWP – Donation Plugin and Fundraising Platform |
2026-08-28T07:40:17.075Z | 2026-08-28T15:11:37.616Z | |
| cve-2026-64773 | N/A | An attacker that can reach a container's publishe… |
Apple |
container |
2026-08-20T21:16:08.187Z | 2026-08-28T15:10:14.714Z |
| cve-2026-15743 | N/A | Catalyst::Plugin::Static::Simple versions through 0.38… |
|
|
2026-08-20T18:15:26.876Z | 2026-08-28T15:07:16.802Z |
| cve-2026-61802 | Wazuh discloses cleartext cluster key to low-privilege… |
wazuh |
wazuh |
2026-08-27T23:31:30.766Z | 2026-08-28T15:05:05.253Z | |
| cve-2026-21584 | This High severity Improper Authorization vulnera… |
Atlassian |
Bamboo Data Center |
2026-08-18T22:00:00.499Z | 2026-08-28T15:04:12.086Z | |
| cve-2026-40015 | 4.3 (v3.1) | An attacker that has valid credentials can open m… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:18.576Z | 2026-08-28T15:03:07.769Z |
| cve-2026-40017 | 6.5 (v3.1) | An attacker that can send mail to a user can craf… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:19.524Z | 2026-08-28T15:02:36.570Z |
| cve-2026-61231 | Vulnerability in the Oracle Virtual Directory pro… |
Oracle Corporation |
Oracle Virtual Directory |
2026-08-18T20:59:53.712Z | 2026-08-28T15:02:18.100Z | |
| cve-2026-75368 | N/A | A stack overflow in the loadRawData function of S… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-28T15:01:13.914Z |
| cve-2026-40018 | 7.4 (v3.1) | None None None No publicly available exploits are… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:20.457Z | 2026-08-28T15:00:32.995Z |
| cve-2026-40019 | 5.9 (v3.1) | An unauthenticated attacker can send a truncated … |
Open-Xchange GmbH |
OX Dovecot CE |
2026-08-28T10:12:21.390Z | 2026-08-28T14:58:20.016Z |
| cve-2026-40203 | 3.7 (v3.1) | When IMAP compression is enabled, the same compre… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:22.287Z | 2026-08-28T14:57:07.686Z |
| cve-2026-40204 | 3.1 (v3.1) | None None None No publicly available exploits are… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:23.236Z | 2026-08-28T14:56:40.510Z |
| cve-2026-40205 | 5.9 (v3.1) | An attacker that holds an OAuth2 token granting o… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:24.186Z | 2026-08-28T14:56:09.120Z |
| cve-2026-53580 | Trilium arbitrary file read and denial of service via … |
TriliumNext |
Trilium |
2026-08-27T19:46:12.357Z | 2026-08-28T14:55:56.996Z | |
| cve-2026-54732 | libreoffice-convert: path traversal / arbitrary file write |
elwerene |
libreoffice-convert |
2026-08-27T17:21:50.743Z | 2026-08-28T14:54:16.963Z | |
| cve-2026-61783 | Wazuh: RBAC permission-effect check in mask_sensitive_… |
wazuh |
wazuh |
2026-08-27T23:19:18.214Z | 2026-08-28T14:52:45.579Z | |
| cve-2026-82222 | 10 (v3.1) | WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Exec… |
Liquid Web / StellarWP |
GiveWP |
2026-08-28T10:46:14.315Z | 2026-08-28T14:50:53.520Z |
| cve-2026-82236 | 2.3 (v4.0) 3.1 (v3.1) | File Browser 2.63.6 through 2.63.23 Share Link Exposur… |
filebrowser |
filebrowser |
2026-08-28T10:49:25.873Z | 2026-08-28T14:49:07.319Z |
| cve-2026-82241 | 7.1 (v4.0) 7.1 (v3.1) | Budibase backend-core SSRF via incomplete default blacklist |
budibase |
server |
2026-08-28T10:49:29.355Z | 2026-08-28T14:46:56.389Z |
| cve-2026-82246 | 7.1 (v4.0) 7.1 (v3.1) | Budibase Server before 3.41.3 SSRF via Query Import |
budibase |
server |
2026-08-28T10:49:32.768Z | 2026-08-28T14:45:27.847Z |
| cve-2026-82256 | 6.9 (v4.0) 5.3 (v3.1) | SvelteKit before 2.69.1 Denial of Service via Remote Form |
sveltejs |
kit |
2026-08-28T10:49:40.634Z | 2026-08-28T14:41:47.444Z |
| cve-2026-82261 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 CPU Exhaustion via Remote Form… |
sveltejs |
kit |
2026-08-28T10:49:44.323Z | 2026-08-28T14:41:04.001Z |
| cve-2026-78195 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': 'Rejecting as a duplicate of CVE-2026-78047'}], 'replacedBy': ['CVE-2026-78047'], 'providerMetadata': {'orgId': '5d1c2695-1a31-4499-88ae-e847036fd7e3', 'shortName': 'WatchGuard', 'dateUpdated': '2026-08-28T14:33:35.260Z'}} | N/A | N/A | 2026-08-27T23:26:31.597Z | 2026-08-28T14:33:35.260Z |
| cve-2026-81893 | 4.7 (v3.1) | Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc prof… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-27T18:34:03.016Z | 2026-08-28T14:29:06.460Z |
| cve-2023-36664 | N/A | Artifex Ghostscript before 10.01.2 mishandles per… |
n/a |
n/a |
2023-06-25T00:00:00.000Z | 2026-08-28T14:15:50.886Z |
| cve-2026-66353 | 5.3 (v4.0) | Doggo vulnerable to cross-site scripting via unescaped… |
woylie |
doggo |
2026-08-27T16:44:59.553Z | 2026-08-28T14:13:54.861Z |
| cve-2026-65931 | 5.1 (v4.0) | LimeSurvey Community Edition 7.0.5 - Improper authoriz… |
LimeSurvey |
LimeSurvey |
2026-08-27T17:50:47.311Z | 2026-08-28T14:13:54.515Z |
| cve-2026-4398 | 5.4 (v3.1) | Authorization Bypass Through User-Controlled Key in GitLab |
GitLab |
GitLab |
2026-08-27T17:53:14.609Z | 2026-08-28T14:13:54.361Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0620 | Vulnérabilité dans les produits WithSecure | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0619 | Multiples vulnérabilités dans VMware Horizon Server | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0618 | Multiples vulnérabilités dans Axis License Plate Verifier | 2023-08-04T00:00:00.000000 | 2023-08-04T00:00:00.000000 |
| certfr-2023-avi-0617 | Vulnérabilité dans Check Point Enterprise Endpoint Security | 2023-08-03T00:00:00.000000 | 2023-08-03T00:00:00.000000 |
| certfr-2023-avi-0616 | Multiples vulnérabilités dans F5 Big-IP | 2023-08-03T00:00:00.000000 | 2023-08-03T00:00:00.000000 |
| certfr-2023-avi-0614 | Multiples vulnérabilités dans Mitel MiVoice | 2023-08-03T00:00:00.000000 | 2023-08-03T00:00:00.000000 |
| certfr-2023-avi-0613 | Multiples vulnérabilités dans Mozilla Thunderbird | 2023-08-03T00:00:00.000000 | 2023-08-03T00:00:00.000000 |
| certfr-2023-avi-0612 | Multiples vulnérabilités dans Tenable Nessus | 2023-08-03T00:00:00.000000 | 2023-08-03T00:00:00.000000 |
| certfr-2023-avi-0611 | Multiples vulnérabilités dans Mozilla Firefox | 2023-08-02T00:00:00.000000 | 2023-08-02T00:00:00.000000 |
| certfr-2023-avi-0610 | Multiples vulnérabilités dans GitLab | 2023-08-02T00:00:00.000000 | 2023-08-02T00:00:00.000000 |
| certfr-2023-avi-0609 | Vulnérabilité dans les commutateurs Aruba | 2023-08-02T00:00:00.000000 | 2023-08-02T00:00:00.000000 |
| certfr-2023-avi-0608 | Vulnérabilité dans Xen | 2023-08-02T00:00:00.000000 | 2023-08-02T00:00:00.000000 |
| certfr-2023-avi-0607 | Vulnérabilité dans Palo Alto Networks GlobalProtect App | 2023-08-01T00:00:00.000000 | 2023-08-01T00:00:00.000000 |
| certfr-2023-avi-0606 | Vulnérabilité dans Splunk SOAR | 2023-08-01T00:00:00.000000 | 2023-08-01T00:00:00.000000 |
| certfr-2023-avi-0605 | Vulnérabilité dans OpenSSL | 2023-08-01T00:00:00.000000 | 2023-08-01T00:00:00.000000 |
| certfr-2023-avi-0604 | Vulnérabilité dans Ivanti Endpoint Manager Mobile | 2023-07-31T00:00:00.000000 | 2023-07-31T00:00:00.000000 |
| certfr-2023-avi-0603 | Multiples vulnérabilités dans Samba | 2023-07-31T00:00:00.000000 | 2023-07-31T00:00:00.000000 |
| certfr-2023-avi-0602 | Multiples vulnérabilités dans les produits Qnap | 2023-07-28T00:00:00.000000 | 2023-07-28T00:00:00.000000 |
| certfr-2023-avi-0601 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-07-28T00:00:00.000000 | 2023-07-28T00:00:00.000000 |
| certfr-2023-avi-0600 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-07-28T00:00:00.000000 | 2023-07-28T00:00:00.000000 |
| certfr-2023-avi-0599 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-07-28T00:00:00.000000 | 2023-07-28T00:00:00.000000 |
| certfr-2023-avi-0597 | Multiples vulnérabilités dans IBM Cognos Analytics | 2023-07-28T00:00:00.000000 | 2023-07-28T00:00:00.000000 |
| certfr-2023-avi-0596 | Multiples vulnérabilités dans les produits SolarWinds | 2023-07-27T00:00:00.000000 | 2023-07-27T00:00:00.000000 |
| certfr-2023-avi-0595 | Vulnérabilité dans Thunderbird | 2023-07-27T00:00:00.000000 | 2023-07-27T00:00:00.000000 |
| certfr-2023-avi-0594 | Multiples vulnérabilités dans Trend Micro Apex Central | 2023-07-27T00:00:00.000000 | 2023-07-27T00:00:00.000000 |
| certfr-2023-avi-0593 | Multiples vulnérabilités dans SonicWall GMS et Analytics | 2023-07-26T00:00:00.000000 | 2023-07-26T00:00:00.000000 |
| certfr-2023-avi-0592 | Multiples vulnérabilités dans Zimbra | 2023-07-26T00:00:00.000000 | 2023-07-26T00:00:00.000000 |
| certfr-2023-avi-0591 | Vulnérabilité dans IBM AIX et VIOS | 2023-07-26T00:00:00.000000 | 2023-07-26T00:00:00.000000 |
| certfr-2023-avi-0590 | Multiples vulnérabilités dans Aruba ArubaOS et InstantOS | 2023-07-26T00:00:00.000000 | 2023-07-26T00:00:00.000000 |
| certfr-2023-avi-0589 | Multiples vulnérabilités dans Symantec Advanced Authentication | 2023-07-26T00:00:00.000000 | 2023-07-26T00:00:00.000000 |