Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81759 | 5.4 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:34.687Z | 2026-08-28T16:08:16.510Z |
| cve-2026-82327 | 5.5 (v3.1) | Libsolv: libsolv: out-of-bounds write in repo_write() … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-28T14:21:04.777Z | 2026-08-28T16:08:04.589Z |
| cve-2026-81299 | 4.3 (v3.1) | WordPress WP Job Portal plugin <= 2.5.9 - Insecure Dir… |
Ahmad |
WP Job Portal |
2026-08-28T14:33:33.228Z | 2026-08-28T16:06:39.220Z |
| cve-2026-81767 | 7.5 (v3.1) | WordPress Simple Payment plugin <= 2.5.2 - Broken Acce… |
yalla ya! |
Simple Payment |
2026-08-28T14:33:36.833Z | 2026-08-28T16:04:28.368Z |
| cve-2026-82220 | 5.3 (v3.1) | WordPress Forminator plugin <= 1.57.1 - Other vulnerab… |
WPMU DEV |
Forminator |
2026-08-28T14:33:37.550Z | 2026-08-28T16:04:12.622Z |
| cve-2026-81757 | 7.2 (v3.1) | WordPress Rank Math SEO plugin <= 1.0.276 - Remote Cod… |
Rank Math SEO |
Rank Math SEO |
2026-08-28T14:33:33.960Z | 2026-08-28T16:03:21.825Z |
| cve-2026-48549 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:37:20.083Z | 2026-08-28T16:00:44.978Z |
| cve-2026-81028 | 6.9 (v4.0) 4.9 (v3.1) | ZLMediaKit downloadFile Root-Directory Confinement Byp… |
ZLMediaKit |
ZLMediaKit |
2026-08-26T15:44:57.303Z | 2026-08-28T16:00:38.893Z |
| cve-2026-82112 | houtini-ai houtini-lm code_task_files index.ts path tr… |
houtini-ai |
houtini-lm |
2026-08-28T11:30:11.253Z | 2026-08-28T16:00:34.718Z | |
| cve-2026-81033 | 6.9 (v4.0) 5.3 (v3.1) | Automatisch through 0.15.0 User Enumeration via Forgot… |
automatisch |
automatisch |
2026-08-26T15:45:00.826Z | 2026-08-28T16:00:31.483Z |
| cve-2026-43621 | 8.6 (v4.0) 8.1 (v3.1) | Simple Machines Forum < 2.1.7 Authorization Confusion … |
SimpleMachines |
SMF |
2026-08-26T21:27:52.842Z | 2026-08-28T16:00:22.892Z |
| cve-2026-80208 | 8.8 (v4.0) 8.2 (v3.1) | APITable through 1.13.0-beta.1 Missing Authentication … |
apitable |
apitable |
2026-08-27T14:50:29.616Z | 2026-08-28T16:00:16.121Z |
| cve-2026-81679 | 8.3 (v4.0) 7.7 (v3.1) | OpenRemote before 1.28.0 Cross-Realm Information Discl… |
openremote |
openremote |
2026-08-27T14:50:45.924Z | 2026-08-28T15:59:40.080Z |
| cve-2026-81684 | 6.9 (v4.0) 6.2 (v3.1) | openssl_encrypt before 1.4.9 Information Disclosure vi… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:49.620Z | 2026-08-28T15:59:32.673Z |
| cve-2026-81689 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Pepper Key Derivation |
jahlives |
openssl_encrypt |
2026-08-27T14:50:54.590Z | 2026-08-28T15:59:26.341Z |
| cve-2026-81694 | 9.3 (v4.0) 3.3 (v3.1) | verify-usb before 1.4.9 Output Injection via Unsanitiz… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:58.318Z | 2026-08-28T15:59:19.969Z |
| cve-2026-81699 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Denial of Service via unb… |
jahlives |
openssl_encrypt |
2026-08-27T14:51:03.419Z | 2026-08-28T15:59:12.631Z |
| cve-2026-6176 | Customer Reviews for WooCommerce <= 5.106.0 - Unauthen… |
ivole |
Customer Reviews for WooCommerce |
2026-08-28T11:29:29.483Z | 2026-08-28T15:59:10.529Z | |
| cve-2026-81704 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus |
jahlives |
openssl_encrypt |
2026-08-27T14:51:06.960Z | 2026-08-28T15:58:59.572Z |
| cve-2026-5934 | WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-S… |
WP Media |
WP Rocket |
2026-08-28T11:29:28.699Z | 2026-08-28T15:58:57.068Z | |
| cve-2026-81715 | 8.7 (v4.0) 3.3 (v3.1) | openssl_encrypt before 1.4.9 Credential Exposure via D… |
jahlives |
openssl_encrypt |
2026-08-27T14:51:10.592Z | 2026-08-28T15:58:50.414Z |
| cve-2026-81720 | 6.9 (v4.0) 6.2 (v3.1) | openssl_encrypt before 1.4.9 Denial of Service via Unb… |
jahlives |
openssl_encrypt |
2026-08-27T14:51:14.352Z | 2026-08-28T15:58:43.138Z |
| cve-2026-5706 | 8.9 (v4.0) | Buffer overflow in Bluetooth Mesh SDK when handling ex… |
Silicon Labs |
BT Mesh SDK |
2026-08-27T22:13:56.225Z | 2026-08-28T15:58:36.339Z |
| cve-2026-81725 | 6.3 (v4.0) 3.7 (v3.1) | NLTK before 3.10.3 Regular Expression Denial of Servic… |
nltk |
nltk |
2026-08-27T14:51:18.082Z | 2026-08-28T15:58:35.166Z |
| cve-2026-54721 | Silverstripe UserForms: Remote code execution via user… |
silverstripe |
silverstripe-userforms |
2026-08-27T16:52:46.023Z | 2026-08-28T15:58:28.067Z | |
| cve-2026-53579 | Trilium: Note Import to RCE via Book Note |
TriliumNext |
Trilium |
2026-08-27T19:33:24.490Z | 2026-08-28T15:58:18.142Z | |
| cve-2026-18717 | 7.4 (v3.1) 9.1 (v4.0) | Improper Certificate Validation in ASE 2000 |
Applied Systems Engineering |
ASE2000 V2 |
2026-08-27T20:20:23.451Z | 2026-08-28T15:58:08.375Z |
| cve-2026-76060 | 8.8 (v3.1) 8.7 (v4.0) | OS Command Injection in PayRange API |
Zoneminder |
Zoneminder |
2026-08-27T20:29:05.262Z | 2026-08-28T15:58:01.239Z |
| cve-2026-18965 | 8.8 (v3.1) 8.7 (v4.0) | Missing Authorization in PayRange API |
PayRange |
PayRange API |
2026-08-27T20:34:16.692Z | 2026-08-28T15:57:53.992Z |
| cve-2026-71396 | 5.4 (v3.1) 5.3 (v4.0) | Use of Hard-coded Credentials in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:45:52.804Z | 2026-08-28T15:57:46.738Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-1086 | Multiples vulnérabilités dans les produits VMware | 2022-12-09T00:00:00.000000 | 2022-12-09T00:00:00.000000 |
| certfr-2022-avi-1084 | Multiples vulnérabilités dans Google Android | 2022-12-08T00:00:00.000000 | 2022-12-08T00:00:00.000000 |
| certfr-2022-avi-1082 | Multiples vulnérabilités dans Wireshark | 2022-12-08T00:00:00.000000 | 2022-12-08T00:00:00.000000 |
| certfr-2022-avi-1081 | Multiples vulnérabilités dans les produits Fortinet | 2022-12-07T00:00:00.000000 | 2022-12-07T00:00:00.000000 |
| certfr-2022-avi-1080 | Multiples vulnérabilités dans Aruba ClearPass Policy Manager | 2022-12-07T00:00:00.000000 | 2022-12-07T00:00:00.000000 |
| certfr-2022-avi-1079 | Multiples vulnérabilités dans Microsoft Edge | 2022-12-06T00:00:00.000000 | 2022-12-06T00:00:00.000000 |
| certfr-2022-avi-1078 | Multiples vulnérabilités dans les produits Intel | 2022-12-06T00:00:00.000000 | 2022-12-06T00:00:00.000000 |
| certfr-2022-avi-1077 | Multiples vulnérabilités dans Sophos Firewall | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1076 | Vulnérabilité dans le noyau Linux de RedHat | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1074 | Vulnérabilité dans Google Chrome | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1073 | Multiples vulnérabilités dans les produits NextCloud | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1072 | Multiples vulnérabilités dans TrendMicro Apex One | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1071 | Multiples vulnérabilités dans les produits Asterisk | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1070 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1069 | Multiples vulnérabilités dans les produits IBM | 2022-12-01T00:00:00.000000 | 2022-12-01T00:00:00.000000 |
| certfr-2022-avi-1068 | Vulnérabilité dans Mozilla Thunderbird | 2022-12-01T00:00:00.000000 | 2022-12-01T00:00:00.000000 |
| certfr-2022-avi-1067 | Multiples vulnérabilités dans GitLab | 2022-12-01T00:00:00.000000 | 2022-12-01T00:00:00.000000 |
| certfr-2022-avi-1066 | Multiples vulnérabilités dans Aruba AirWave | 2022-11-30T00:00:00.000000 | 2022-11-30T00:00:00.000000 |
| certfr-2022-avi-1065 | Multiples vulnérabilités dans Google Chrome | 2022-11-30T00:00:00.000000 | 2022-11-30T00:00:00.000000 |
| certfr-2022-avi-1064 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-11-30T00:00:00.000000 | 2022-11-30T00:00:00.000000 |
| certfr-2022-avi-1063 | Vulnérabilité dans le noyau Linux de Red Hat | 2022-11-30T00:00:00.000000 | 2022-11-30T00:00:00.000000 |
| certfr-2022-avi-1062 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-30T00:00:00.000000 | 2022-11-30T00:00:00.000000 |
| certfr-2022-avi-1061 | Multiples vulnérabilités dans Moxa Gamme UC | 2022-11-29T00:00:00.000000 | 2022-11-29T00:00:00.000000 |
| certfr-2022-avi-1060 | Vulnérabilité dans Microsoft Edge | 2022-11-29T00:00:00.000000 | 2022-11-29T00:00:00.000000 |
| certfr-2022-avi-1059 | Multiples vulnérabilités dans les produits IBM | 2022-11-29T00:00:00.000000 | 2022-11-29T00:00:00.000000 |
| certfr-2022-avi-677 | Vulnérabilité dans Trend Micro Apex One et Worry-Free Business Security | 2022-07-26T00:00:00.000000 | 2022-11-28T00:00:00.000000 |
| certfr-2022-avi-1058 | Vulnérabilité dans les produits Moxa | 2022-11-28T00:00:00.000000 | 2022-11-28T00:00:00.000000 |
| certfr-2022-avi-1055 | Vulnérabilité dans Moxa TN-5916 | 2022-11-25T00:00:00.000000 | 2022-11-28T00:00:00.000000 |
| certfr-2022-avi-1057 | Multiples vulnérabilités dans les produits Nextcloud | 2022-11-25T00:00:00.000000 | 2022-11-25T00:00:00.000000 |