Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82090 | 9.2 (v4.0) | Pocket through 8.33.0.0 allows XSS because "Save … |
getpocket |
Pocket |
2026-08-28T03:36:23.687Z | 2026-08-28T16:17:06.780Z |
| cve-2026-73827 | 5.4 (v3.0) 4.8 (v4.0) | SOY Calendar contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Calendar |
2026-08-28T06:10:48.880Z | 2026-08-28T16:14:39.069Z |
| cve-2026-77838 | 5.4 (v3.0) 4.8 (v4.0) | SOY Calendar contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Calendar |
2026-08-28T06:10:58.005Z | 2026-08-28T16:12:47.204Z |
| cve-2026-78238 | 5.4 (v3.0) 4.8 (v4.0) | SOY Gallery contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Gallery |
2026-08-28T06:11:06.057Z | 2026-08-28T16:11:28.141Z |
| cve-2026-78032 | 9.8 (v3.0) 9.3 (v4.0) | SOY CMS contains an issue with deserialization o… |
Tsuyoshi Saito |
SOY CMS |
2026-08-28T06:11:11.567Z | 2026-08-28T16:10:55.790Z |
| cve-2026-19586 | 9.3 (v4.0) | Pre-Authentication OS Command Injection in Omada Gatew… |
TP-Link Systems Inc. |
ER7212PC v2 |
2026-08-20T18:32:06.942Z | 2026-08-28T16:10:43.693Z |
| cve-2026-82123 | 6.5 (v3.1) | WordPress Loops & Logic - Reflected XSS |
Tangible |
Loops & Logic |
2026-08-28T06:54:43.365Z | 2026-08-28T16:10:28.897Z |
| cve-2026-82234 | 8.4 (v4.0) 8.2 (v3.1) | SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU |
siyuan-note |
siyuan |
2026-08-28T10:49:24.564Z | 2026-08-28T16:10:07.633Z |
| cve-2026-3423 | Envira Gallery <= 1.12.4 - Authenticated (Author+) Sto… |
smub |
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More |
2026-08-28T11:29:28.138Z | 2026-08-28T16:09:20.421Z | |
| cve-2026-82227 | 8.5 (v3.1) | WordPress WPBulky plugin <= 1.2.2 - SQL Injection vuln… |
VillaTheme |
WPBulky |
2026-08-28T14:33:31.083Z | 2026-08-28T16:08:35.467Z |
| cve-2026-81759 | 5.4 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:34.687Z | 2026-08-28T16:08:16.510Z |
| cve-2026-82327 | 5.5 (v3.1) | Libsolv: libsolv: out-of-bounds write in repo_write() … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-28T14:21:04.777Z | 2026-08-28T16:08:04.589Z |
| cve-2026-81299 | 4.3 (v3.1) | WordPress WP Job Portal plugin <= 2.5.9 - Insecure Dir… |
Ahmad |
WP Job Portal |
2026-08-28T14:33:33.228Z | 2026-08-28T16:06:39.220Z |
| cve-2026-81767 | 7.5 (v3.1) | WordPress Simple Payment plugin <= 2.5.2 - Broken Acce… |
yalla ya! |
Simple Payment |
2026-08-28T14:33:36.833Z | 2026-08-28T16:04:28.368Z |
| cve-2026-82220 | 5.3 (v3.1) | WordPress Forminator plugin <= 1.57.1 - Other vulnerab… |
WPMU DEV |
Forminator |
2026-08-28T14:33:37.550Z | 2026-08-28T16:04:12.622Z |
| cve-2026-81757 | 7.2 (v3.1) | WordPress Rank Math SEO plugin <= 1.0.276 - Remote Cod… |
Rank Math SEO |
Rank Math SEO |
2026-08-28T14:33:33.960Z | 2026-08-28T16:03:21.825Z |
| cve-2026-48549 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:37:20.083Z | 2026-08-28T16:00:44.978Z |
| cve-2026-81028 | 6.9 (v4.0) 4.9 (v3.1) | ZLMediaKit downloadFile Root-Directory Confinement Byp… |
ZLMediaKit |
ZLMediaKit |
2026-08-26T15:44:57.303Z | 2026-08-28T16:00:38.893Z |
| cve-2026-82112 | houtini-ai houtini-lm code_task_files index.ts path tr… |
houtini-ai |
houtini-lm |
2026-08-28T11:30:11.253Z | 2026-08-28T16:00:34.718Z | |
| cve-2026-81033 | 6.9 (v4.0) 5.3 (v3.1) | Automatisch through 0.15.0 User Enumeration via Forgot… |
automatisch |
automatisch |
2026-08-26T15:45:00.826Z | 2026-08-28T16:00:31.483Z |
| cve-2026-43621 | 8.6 (v4.0) 8.1 (v3.1) | Simple Machines Forum < 2.1.7 Authorization Confusion … |
SimpleMachines |
SMF |
2026-08-26T21:27:52.842Z | 2026-08-28T16:00:22.892Z |
| cve-2026-80208 | 8.8 (v4.0) 8.2 (v3.1) | APITable through 1.13.0-beta.1 Missing Authentication … |
apitable |
apitable |
2026-08-27T14:50:29.616Z | 2026-08-28T16:00:16.121Z |
| cve-2026-81679 | 8.3 (v4.0) 7.7 (v3.1) | OpenRemote before 1.28.0 Cross-Realm Information Discl… |
openremote |
openremote |
2026-08-27T14:50:45.924Z | 2026-08-28T15:59:40.080Z |
| cve-2026-81684 | 6.9 (v4.0) 6.2 (v3.1) | openssl_encrypt before 1.4.9 Information Disclosure vi… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:49.620Z | 2026-08-28T15:59:32.673Z |
| cve-2026-81689 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Pepper Key Derivation |
jahlives |
openssl_encrypt |
2026-08-27T14:50:54.590Z | 2026-08-28T15:59:26.341Z |
| cve-2026-81694 | 9.3 (v4.0) 3.3 (v3.1) | verify-usb before 1.4.9 Output Injection via Unsanitiz… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:58.318Z | 2026-08-28T15:59:19.969Z |
| cve-2026-81699 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Denial of Service via unb… |
jahlives |
openssl_encrypt |
2026-08-27T14:51:03.419Z | 2026-08-28T15:59:12.631Z |
| cve-2026-6176 | Customer Reviews for WooCommerce <= 5.106.0 - Unauthen… |
ivole |
Customer Reviews for WooCommerce |
2026-08-28T11:29:29.483Z | 2026-08-28T15:59:10.529Z | |
| cve-2026-81704 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus |
jahlives |
openssl_encrypt |
2026-08-27T14:51:06.960Z | 2026-08-28T15:58:59.572Z |
| cve-2026-5934 | WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-S… |
WP Media |
WP Rocket |
2026-08-28T11:29:28.699Z | 2026-08-28T15:58:57.068Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-1015 | Multiples vulnérabilités dans les produits Microsoft | 2022-11-09T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1025 | Multiples vulnérabilités dans IBM QRadar | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1024 | Multiples vulnérabilités dans les produits Apple | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1023 | Vulnérabilité dans Palo Alto Networks Cortex XSOAR | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1022 | Multiples vulnérabilités dans les produits Cisco | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1021 | Multiples vulnérabilités dans TrendMicro Apex One | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1020 | Multiples vulnérabilités dans les produits SAP | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1019 | Multiples vulnérabilités dans Tenable Nessus | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1018 | Vulnérabilité dans Xen | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1017 | Vulnérabilité dans Python 3 | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1016 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1014 | Multiples vulnérabilités dans Microsoft Azure | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1013 | Vulnérabilité dans Microsoft .Net | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1012 | Multiples vulnérabilités dans Microsoft Windows | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1011 | Multiples vulnérabilités dans Microsoft Office | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1009 | Multiples vulnérabilités dans les produits Intel | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1008 | Multiples vulnérabilités dans VMware Workspace ONE Assist | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1007 | Multiples vulnérabilités dans Google Chrome | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1006 | Multiples vulnérabilités dans Grafana | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1005 | Multiples vulnérabilités dans les produits Citrix | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1004 | Vulnérabilité dans Joomla | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1003 | Vulnérabilité dans Veeam Backup | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-999 | Multiples vulnérabilités dans Foxit PDF | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-998 | Multiples vulnérabilités dans Android | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-997 | Multiples vulnérabilités dans IBM Tivoli | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1002 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1001 | Multiples vulnérabilités dans les produits Siemens | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1000 | Multiples vulnérabilités dans les produits Schneider | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-996 | Vulnérabilité dans Python 3 | 2022-11-07T00:00:00.000000 | 2022-11-07T00:00:00.000000 |
| certfr-2022-avi-995 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-11-04T00:00:00.000000 | 2022-11-04T00:00:00.000000 |