Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77780 | 5.3 (v4.0) | Unvalidated bank account and card foreign keys in the … |
Roskus |
Prospero Flow CRM |
2026-08-21T12:12:59.160Z | 2026-08-21T16:12:40.967Z |
| cve-2026-77029 | 4.6 (v4.0) | Joomla Extension - yootheme.com - Missing CSRF tokens … |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:11:41.823Z | 2026-08-21T19:16:33.222Z |
| cve-2026-59318 | 6.5 (v3.1) | DefaultToolCallingManager Global Resolver Fallback All… |
Spring |
Spring AI |
2026-08-21T12:07:10.349Z | 2026-08-22T03:55:38.874Z |
| cve-2026-59308 | 4.2 (v3.1) | Semantic Cache Cross-Tenant Isolation Bypass via SHA-2… |
Spring |
Spring AI |
2026-08-21T12:07:07.992Z | 2026-08-21T14:29:06.814Z |
| cve-2026-59279 | 7.5 (v3.1) | Unbounded persistent session allocation via repeated i… |
Spring |
Spring AI |
2026-08-21T12:07:05.567Z | 2026-08-21T14:28:41.415Z |
| cve-2026-19848 | ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shor… |
Unknown |
ProfilePress |
2026-08-21T11:40:43.073Z | 2026-08-21T12:46:34.584Z | |
| cve-2026-18356 | Limit Login Attempts Reloaded < 3.3.5 - Username Denyl… |
Unknown |
Limit Login Attempts Security |
2026-08-21T11:40:42.408Z | 2026-08-21T12:46:58.438Z | |
| cve-2026-17559 | Content Protector (Passster) < 4.3.9 - Unauthenticated… |
Unknown |
Passster |
2026-08-21T11:40:41.735Z | 2026-08-21T12:47:20.891Z | |
| cve-2026-16650 | Charitable < 1.8.12 - Unauthenticated Donation Payment… |
Unknown |
Charitable |
2026-08-21T11:40:41.065Z | 2026-08-21T12:47:51.251Z | |
| cve-2026-15150 | myCred < 3.2.5 - Unauthenticated Payment Bypass via Mi… |
Unknown |
myCred |
2026-08-21T11:40:40.410Z | 2026-08-21T12:48:15.019Z | |
| cve-2026-15046 | LitExtension: Store to WooCommerce Migration <= 1.2.5 … |
Unknown |
LitExtension |
2026-08-21T11:40:39.753Z | 2026-08-21T12:48:33.246Z | |
| cve-2026-13176 | Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery |
Unknown |
Eventin |
2026-08-21T11:40:29.153Z | 2026-08-21T12:54:40.938Z | |
| cve-2026-77759 | 8.7 (v4.0) | IDOR and missing authorization in the Prospero Flow CR… |
Roskus |
Prospero Flow CRM |
2026-08-21T11:29:43.550Z | 2026-08-21T11:53:17.782Z |
| cve-2026-77776 | 9.1 (v3.1) 9.3 (v4.0) | Headroom Proxy Treats the Client-Supplied x-headroom-u… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.779Z | 2026-08-21T21:44:30.707Z |
| cve-2026-77775 | 8.6 (v3.1) 7.7 (v4.0) | Headroom Proxy Sends Upstream Requests to a Client-Sup… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.107Z | 2026-08-21T11:44:34.968Z |
| cve-2026-15576 | Agent receiver accepts mTLS requests without a client … |
Checkmk GmbH |
Checkmk |
2026-08-21T11:10:00.856Z | 2026-08-21T11:53:45.355Z | |
| cve-2026-77769 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.list Queries Reports by an Unverified… |
Openpanel-dev |
openpanel |
2026-08-21T11:05:15.644Z | 2026-08-26T17:23:49.786Z |
| cve-2026-77768 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.get Returns Any Report by Identifier … |
Openpanel-dev |
openpanel |
2026-08-21T11:05:14.998Z | 2026-08-21T17:31:03.513Z |
| cve-2026-77767 | 7.5 (v3.1) 8.7 (v4.0) | Reconmap Report Preview Endpoint Is Marked AllowAnonym… |
reconmap |
reconmap |
2026-08-21T11:05:14.316Z | 2026-08-21T13:51:15.264Z |
| cve-2026-77763 | 6.5 (v3.1) 7.1 (v4.0) | JuiceFS Local Filestore Backend Joins Object Keys onto… |
juicedata |
juicefs |
2026-08-21T11:05:13.650Z | 2026-08-21T21:44:37.044Z |
| cve-2026-77086 | 9.4 (v4.0) 9.1 (v3.1) | SiYuan before v3.7.4 Path Traversal via packageName |
siyuan-note |
siyuan |
2026-08-21T11:05:12.989Z | 2026-08-21T11:46:26.985Z |
| cve-2026-77686 | Dolibarr Account card.php improper authorization |
n/a |
Dolibarr |
2026-08-21T11:00:13.604Z | 2026-08-21T21:44:44.037Z | |
| cve-2026-14208 | 7.3 (v4.0) | Local Privilege Escalation via Insecure DLL Permission… |
Remote Utilities Pte. Ltd. |
Remote Utilities Host |
2026-08-21T10:51:07.262Z | 2026-08-21T11:54:27.254Z |
| cve-2026-59296 | 5.9 (v3.1) | Micrometer StatsD and Logging meter registries line-pr… |
Spring |
Micrometer |
2026-08-21T10:47:25.384Z | 2026-08-27T17:57:53.054Z |
| cve-2026-77683 | Comfast CF-N1-S mbox-config system command injection |
Comfast |
CF-N1-S |
2026-08-21T10:15:08.099Z | 2026-08-21T13:52:02.069Z | |
| cve-2026-77761 | 6.3 (v4.0) | Cross-Document Parser State Contamination in misp-stix |
misp |
misp-stix |
2026-08-21T10:11:54.840Z | 2026-08-21T12:00:49.313Z |
| cve-2026-59323 | 5.3 (v3.1) | Micrometer Tracing Brave Bridge W3C Baggage propagatio… |
Spring |
Micrometer Tracing |
2026-08-21T10:01:05.831Z | 2026-08-27T18:04:50.627Z |
| cve-2026-77755 | 8.7 (v4.0) | Denial of Service in MISP-STIX Import via Malformed or… |
misp |
misp-stix |
2026-08-21T09:55:11.079Z | 2026-08-21T12:09:16.956Z |
| cve-2026-47079 | 2.1 (v4.0) | Round-trip Corruption via Improper Entity Escaping in … |
joshnuss |
xml_builder |
2026-08-21T09:52:44.178Z | 2026-08-21T12:19:47.179Z |
| cve-2026-48590 | 2.1 (v4.0) | Element and Attribute Names Injected Verbatim into XML… |
joshnuss |
xml_builder |
2026-08-21T09:51:25.412Z | 2026-08-21T12:25:33.127Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0398 | Multiples vulnérabilités dans le cadriciel VMware Spring | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0397 | Vulnérabilité dans IBM Sterling Connect | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0396 | Multiples vulnérabilités dans Microsoft Edge | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0395 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0394 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0393 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0392 | Multiples vulnérabilités dans le noyau Linux de DebianLTS | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0391 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0390 | Multiples vulnérabilités dans les produits Apple | 2023-05-19T00:00:00.000000 | 2023-05-19T00:00:00.000000 |
| certfr-2023-avi-0389 | Vulnérabilité dans les produits Xen | 2023-05-17T00:00:00.000000 | 2023-05-17T00:00:00.000000 |
| certfr-2023-avi-0388 | Multiples vulnérabilités dans les produits Google Chrome | 2023-05-17T00:00:00.000000 | 2023-05-17T00:00:00.000000 |
| certfr-2023-avi-0387 | Multiples vulnérabilités dans TrendMicro Apex One et Apex Central | 2023-05-17T00:00:00.000000 | 2023-05-17T00:00:00.000000 |
| certfr-2023-avi-0386 | Multiples vulnérabilités dans WordPress | 2023-05-17T00:00:00.000000 | 2023-05-17T00:00:00.000000 |
| certfr-2023-avi-0385 | Multiples vulnérabilités dans les produits VMware Tanzu | 2023-05-15T00:00:00.000000 | 2023-05-15T00:00:00.000000 |
| certfr-2023-avi-0384 | Multiples vulnérabilités dans TrendMicro Mobile Security (entreprise) | 2023-05-15T00:00:00.000000 | 2023-05-15T00:00:00.000000 |
| certfr-2023-avi-0383 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0382 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0381 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0380 | Multiples vulnérabilités dans Tenable Nessus | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0379 | Multiples vulnérabilités Vmware Aria Operations | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0378 | Multiples vulnérabilités dans PostgreSQL | 2023-05-12T00:00:00.000000 | 2023-05-12T00:00:00.000000 |
| certfr-2023-avi-0377 | Multiples vulnérabilités dans PAN-OS | 2023-05-11T00:00:00.000000 | 2023-05-11T00:00:00.000000 |
| certfr-2023-avi-0376 | Vulnérabilité dans les produits GitLab | 2023-05-11T00:00:00.000000 | 2023-05-11T00:00:00.000000 |
| certfr-2023-avi-0375 | Multiples vulnérabilités dans Thunderbird | 2023-05-11T00:00:00.000000 | 2023-05-11T00:00:00.000000 |
| certfr-2023-avi-0374 | Multiples vulnérabilités dans les produits Microsoft | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |
| certfr-2023-avi-0373 | Multiples vulnérabilités dans Microsoft Windows | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |
| certfr-2023-avi-0372 | Multiples vulnérabilités dans Microsoft Office | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |
| certfr-2023-avi-0371 | Multiples vulnérabilités dans les produits Intel | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |
| certfr-2023-avi-0370 | Multiples vulnérabilités dans les produits Siemens | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |
| certfr-2023-avi-0369 | Multiples vulnérabilités dans les produits SAP | 2023-05-10T00:00:00.000000 | 2023-05-10T00:00:00.000000 |