Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-27463 | Combodo iTop: Version disclosure via login page logo |
Combodo |
iTop |
2026-08-21T19:57:40.427Z | 2026-08-21T21:43:20.794Z | |
| cve-2026-50290 | @asymmetric-effort/specifyjs: CSS expression sanitizat… |
asymmetric-effort |
specifyjs |
2026-08-21T19:55:51.086Z | 2026-08-21T20:07:10.712Z | |
| cve-2026-27462 | Combodo iTop: User enumeration via password reset |
Combodo |
iTop |
2026-08-21T19:52:04.025Z | 2026-08-26T17:37:23.128Z | |
| cve-2026-76876 | 8.2 (v4.0) 5.9 (v3.1) | Craftplan < 0.5.1 Broken Access Control Information Di… |
puemos |
craftplan |
2026-08-21T19:38:45.203Z | 2026-08-25T17:17:45.458Z |
| cve-2026-77810 | 9.9 (v3.1) 9.4 (v4.0) | Code Injection via Gremlin Query Passthrough in Amazon… |
AWS |
Athena Federated Query Neptune Connector |
2026-08-21T19:34:06.041Z | 2026-08-27T16:46:27.538Z |
| cve-2026-30866 | Combodo iTop: Insecured access to uploaded images via … |
Combodo |
iTop |
2026-08-21T19:32:00.149Z | 2026-08-25T17:28:23.007Z | |
| cve-2026-50288 | @asymmetric-effort/specifyjs: URL parse failure silent… |
asymmetric-effort |
specifyjs |
2026-08-21T19:29:45.774Z | 2026-08-21T19:55:40.103Z | |
| cve-2026-67361 | 6.9 (v4.0) | Joomla Extension - j2commerce.com - Unauthenticated fi… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:23:29.970Z | 2026-08-21T20:11:27.524Z |
| cve-2026-74252 | 8.6 (v4.0) | Joomla Extension - j2commerce.com - Stored XSS in Gues… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:21:10.157Z | 2026-08-21T20:09:07.770Z |
| cve-2026-67358 | 5.3 (v4.0) | Joomla Extension - j2commerce.com - Download quota man… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:20:36.445Z | 2026-08-21T20:26:11.441Z |
| cve-2026-67362 | 5.1 (v4.0) | Joomla Extension - j2commerce.com - Open redirect in c… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:19:33.471Z | 2026-08-21T20:25:08.470Z |
| cve-2026-67359 | 8.7 (v4.0) | Joomla Extension - j2commerce.com - Order content disc… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:18:44.371Z | 2026-08-21T20:24:19.508Z |
| cve-2026-67360 | 6.3 (v4.0) | Joomla Extension - j2commerce.com - Cross-customer ord… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:16:36.014Z | 2026-08-21T20:22:09.246Z |
| cve-2026-54071 | BabelDOC: Arbitrary Code Execution via CMap Pickle Des… |
funstory-ai |
BabelDOC |
2026-08-21T18:55:42.248Z | 2026-08-21T21:43:28.162Z | |
| cve-2026-54073 | VeraCrypt: Hidden volume quick format weakens plausibl… |
veracrypt |
VeraCrypt |
2026-08-21T18:51:58.855Z | 2026-08-21T19:32:34.830Z | |
| cve-2026-53762 | VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 … |
veracrypt |
VeraCrypt |
2026-08-21T18:50:58.083Z | 2026-08-26T17:35:53.948Z | |
| cve-2026-54681 | DiscordChatExporter: HTML attribute injection via unes… |
Tyrrrz |
DiscordChatExporter |
2026-08-21T18:41:45.861Z | 2026-08-21T19:04:42.235Z | |
| cve-2026-54682 | DiscordChatExporter: Stored XSS in HTML export when ma… |
Tyrrrz |
DiscordChatExporter |
2026-08-21T18:40:05.196Z | 2026-08-25T17:31:36.280Z | |
| cve-2026-55850 | Element Web: A malicious homeserver can inject HTML in… |
element-hq |
element-web |
2026-08-21T18:30:12.251Z | 2026-08-21T19:54:55.604Z | |
| cve-2026-77795 | Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveCont… |
Dromara |
RuoYi-Vue-Plus |
2026-08-21T18:30:07.737Z | 2026-08-21T19:36:40.600Z | |
| cve-2026-54134 | OctoPrint: File exfiltration possible via query parame… |
OctoPrint |
OctoPrint |
2026-08-21T18:28:15.925Z | 2026-08-26T17:34:27.359Z | |
| cve-2026-35163 | OctoPrint: XSS in Suppressed Command Notifications |
OctoPrint |
OctoPrint |
2026-08-21T18:25:49.564Z | 2026-08-21T19:53:55.905Z | |
| cve-2026-63466 | Unleash: Global Mustache.escape override disables HTML… |
Unleash |
unleash |
2026-08-21T18:21:46.526Z | 2026-08-21T21:43:35.526Z | |
| cve-2026-63462 | Unleash: Unauthenticated single-request DoS via OpenAP… |
Unleash |
unleash |
2026-08-21T18:12:32.807Z | 2026-08-25T17:33:23.689Z | |
| cve-2026-63004 | Unleash: Addon webhook URL is dialed server-side with … |
Unleash |
unleash |
2026-08-21T18:05:20.458Z | 2026-08-21T19:22:22.158Z | |
| cve-2026-71862 | Checkmate: Sensitive Bearer Token Exposure via Public … |
bluewave-labs |
Checkmate |
2026-08-21T18:00:32.871Z | 2026-08-21T21:43:42.303Z | |
| cve-2026-70656 | Checkmate: Regular Expression Denial of Service (ReDoS… |
bluewave-labs |
Checkmate |
2026-08-21T17:59:28.639Z | 2026-08-21T18:07:11.885Z | |
| cve-2026-55241 | Checkmate: Pre-auth Denial of Service via File Upload … |
bluewave-labs |
Checkmate |
2026-08-21T17:57:10.014Z | 2026-08-25T11:51:15.776Z | |
| cve-2026-27875 | 6.9 (v4.0) | Simplex Incident Manager Clear Test |
Johnson Controls |
Simplex Incident Manager / Autocall Fire Administrator |
2026-08-21T17:52:49.383Z | 2026-08-21T20:08:37.055Z |
| cve-2026-71493 | Infracost: Arbitrary file read via config-template rea… |
infracost |
infracost |
2026-08-21T17:52:29.001Z | 2026-08-26T17:33:14.286Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0490 | Multiples vulnérabilités dans NetApp ONTAP | 2023-06-26T00:00:00.000000 | 2023-06-26T00:00:00.000000 |
| certfr-2023-avi-0489 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0488 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0487 | Multiples vulnérabilités dans les produits Fortinet | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0486 | Vulnérabilité dans StormShield Endpoint Security | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0485 | Multiples vulnérabilités dans les produits Nextcloud | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0484 | Multiples vulnérabilités dans les produits IBM | 2023-06-23T00:00:00.000000 | 2023-06-23T00:00:00.000000 |
| certfr-2023-avi-0483 | Multiples vulnérabilités dans les produits VMware | 2023-06-22T00:00:00.000000 | 2023-06-22T00:00:00.000000 |
| certfr-2023-avi-0482 | Multiples vulnérabilités dans les produits Nextcloud | 2023-06-22T00:00:00.000000 | 2023-06-22T00:00:00.000000 |
| certfr-2023-avi-0481 | Vulnérabilité dans Juniper Junos OS et Junos OS Evolved | 2023-06-22T00:00:00.000000 | 2023-06-22T00:00:00.000000 |
| certfr-2023-avi-0480 | Multiples vulnérabilités dans les produits Apple | 2023-06-22T00:00:00.000000 | 2023-06-22T00:00:00.000000 |
| certfr-2023-avi-0479 | Multiples vulnérabilités dans BIND | 2023-06-22T00:00:00.000000 | 2023-06-22T00:00:00.000000 |
| certfr-2023-avi-0478 | Vulnérabilité dans Apache Tomcat | 2023-06-21T00:00:00.000000 | 2023-06-21T00:00:00.000000 |
| certfr-2023-avi-0477 | Vulnérabilité dans LibreOffice | 2023-06-19T00:00:00.000000 | 2023-06-19T00:00:00.000000 |
| certfr-2023-avi-0476 | Multiples vulnérabilités dans Moodle | 2023-06-19T00:00:00.000000 | 2023-06-19T00:00:00.000000 |
| certfr-2023-avi-0475 | Multiples vulnérabilités dans Synology DiskStation Manager | 2023-06-19T00:00:00.000000 | 2023-06-19T00:00:00.000000 |
| certfr-2023-avi-0474 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0473 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0472 | Multiples vulnérabilités dans les produits IBM | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0471 | Vulnérabilité dans Stormshield Network Security | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0470 | Vulnérabilité dans Fortinet FortiOS et FortiProxy | 2023-06-16T00:00:00.000000 | 2023-06-21T00:00:00.000000 |
| certfr-2023-avi-0469 | Multiples vulnérabilités dans les produits Microsoft | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0468 | Multiples vulnérabilités dans Microsoft Edge | 2023-06-16T00:00:00.000000 | 2023-06-16T00:00:00.000000 |
| certfr-2023-avi-0467 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2023-06-15T00:00:00.000000 | 2023-06-15T00:00:00.000000 |
| certfr-2023-avi-0466 | Vulnérabilité dans les produits ESET | 2023-06-15T00:00:00.000000 | 2023-06-15T00:00:00.000000 |
| certfr-2023-avi-0465 | Multiples vulnérabilités dans les produits Microsoft | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0464 | Multiples vulnérabilités dans Microsoft Azure | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0463 | Multiples vulnérabilités dans Microsoft .Net | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0462 | Multiples vulnérabilités dans Microsoft Windows | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0461 | Multiples vulnérabilités dans Microsoft Office | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |