Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82089 | 8.8 (v4.0) | The wallabag (aka fr.gaulupeau.apps.InThePoche) a… |
wallabag |
android-app |
2026-08-28T03:14:20.421Z | 2026-08-28T16:17:59.059Z |
| cve-2026-82090 | 9.2 (v4.0) | Pocket through 8.33.0.0 allows XSS because "Save … |
getpocket |
Pocket |
2026-08-28T03:36:23.687Z | 2026-08-28T16:17:06.780Z |
| cve-2026-73827 | 5.4 (v3.0) 4.8 (v4.0) | SOY Calendar contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Calendar |
2026-08-28T06:10:48.880Z | 2026-08-28T16:14:39.069Z |
| cve-2026-77838 | 5.4 (v3.0) 4.8 (v4.0) | SOY Calendar contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Calendar |
2026-08-28T06:10:58.005Z | 2026-08-28T16:12:47.204Z |
| cve-2026-78238 | 5.4 (v3.0) 4.8 (v4.0) | SOY Gallery contains a cross-site scripting vuln… |
Tsuyoshi Saito |
SOY Gallery |
2026-08-28T06:11:06.057Z | 2026-08-28T16:11:28.141Z |
| cve-2026-78032 | 9.8 (v3.0) 9.3 (v4.0) | SOY CMS contains an issue with deserialization o… |
Tsuyoshi Saito |
SOY CMS |
2026-08-28T06:11:11.567Z | 2026-08-28T16:10:55.790Z |
| cve-2026-19586 | 9.3 (v4.0) | Pre-Authentication OS Command Injection in Omada Gatew… |
TP-Link Systems Inc. |
ER7212PC v2 |
2026-08-20T18:32:06.942Z | 2026-08-28T16:10:43.693Z |
| cve-2026-82123 | 6.5 (v3.1) | WordPress Loops & Logic - Reflected XSS |
Tangible |
Loops & Logic |
2026-08-28T06:54:43.365Z | 2026-08-28T16:10:28.897Z |
| cve-2026-82234 | 8.4 (v4.0) 8.2 (v3.1) | SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU |
siyuan-note |
siyuan |
2026-08-28T10:49:24.564Z | 2026-08-28T16:10:07.633Z |
| cve-2026-3423 | Envira Gallery <= 1.12.4 - Authenticated (Author+) Sto… |
smub |
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More |
2026-08-28T11:29:28.138Z | 2026-08-28T16:09:20.421Z | |
| cve-2026-82227 | 8.5 (v3.1) | WordPress WPBulky plugin <= 1.2.2 - SQL Injection vuln… |
VillaTheme |
WPBulky |
2026-08-28T14:33:31.083Z | 2026-08-28T16:08:35.467Z |
| cve-2026-81759 | 5.4 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:34.687Z | 2026-08-28T16:08:16.510Z |
| cve-2026-82327 | 5.5 (v3.1) | Libsolv: libsolv: out-of-bounds write in repo_write() … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-28T14:21:04.777Z | 2026-08-28T16:08:04.589Z |
| cve-2026-81299 | 4.3 (v3.1) | WordPress WP Job Portal plugin <= 2.5.9 - Insecure Dir… |
Ahmad |
WP Job Portal |
2026-08-28T14:33:33.228Z | 2026-08-28T16:06:39.220Z |
| cve-2026-81767 | 7.5 (v3.1) | WordPress Simple Payment plugin <= 2.5.2 - Broken Acce… |
yalla ya! |
Simple Payment |
2026-08-28T14:33:36.833Z | 2026-08-28T16:04:28.368Z |
| cve-2026-82220 | 5.3 (v3.1) | WordPress Forminator plugin <= 1.57.1 - Other vulnerab… |
WPMU DEV |
Forminator |
2026-08-28T14:33:37.550Z | 2026-08-28T16:04:12.622Z |
| cve-2026-81757 | 7.2 (v3.1) | WordPress Rank Math SEO plugin <= 1.0.276 - Remote Cod… |
Rank Math SEO |
Rank Math SEO |
2026-08-28T14:33:33.960Z | 2026-08-28T16:03:21.825Z |
| cve-2026-48549 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:37:20.083Z | 2026-08-28T16:00:44.978Z |
| cve-2026-81028 | 6.9 (v4.0) 4.9 (v3.1) | ZLMediaKit downloadFile Root-Directory Confinement Byp… |
ZLMediaKit |
ZLMediaKit |
2026-08-26T15:44:57.303Z | 2026-08-28T16:00:38.893Z |
| cve-2026-82112 | houtini-ai houtini-lm code_task_files index.ts path tr… |
houtini-ai |
houtini-lm |
2026-08-28T11:30:11.253Z | 2026-08-28T16:00:34.718Z | |
| cve-2026-81033 | 6.9 (v4.0) 5.3 (v3.1) | Automatisch through 0.15.0 User Enumeration via Forgot… |
automatisch |
automatisch |
2026-08-26T15:45:00.826Z | 2026-08-28T16:00:31.483Z |
| cve-2026-43621 | 8.6 (v4.0) 8.1 (v3.1) | Simple Machines Forum < 2.1.7 Authorization Confusion … |
SimpleMachines |
SMF |
2026-08-26T21:27:52.842Z | 2026-08-28T16:00:22.892Z |
| cve-2026-80208 | 8.8 (v4.0) 8.2 (v3.1) | APITable through 1.13.0-beta.1 Missing Authentication … |
apitable |
apitable |
2026-08-27T14:50:29.616Z | 2026-08-28T16:00:16.121Z |
| cve-2026-81679 | 8.3 (v4.0) 7.7 (v3.1) | OpenRemote before 1.28.0 Cross-Realm Information Discl… |
openremote |
openremote |
2026-08-27T14:50:45.924Z | 2026-08-28T15:59:40.080Z |
| cve-2026-81684 | 6.9 (v4.0) 6.2 (v3.1) | openssl_encrypt before 1.4.9 Information Disclosure vi… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:49.620Z | 2026-08-28T15:59:32.673Z |
| cve-2026-81689 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Pepper Key Derivation |
jahlives |
openssl_encrypt |
2026-08-27T14:50:54.590Z | 2026-08-28T15:59:26.341Z |
| cve-2026-81694 | 9.3 (v4.0) 3.3 (v3.1) | verify-usb before 1.4.9 Output Injection via Unsanitiz… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:58.318Z | 2026-08-28T15:59:19.969Z |
| cve-2026-81699 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Denial of Service via unb… |
jahlives |
openssl_encrypt |
2026-08-27T14:51:03.419Z | 2026-08-28T15:59:12.631Z |
| cve-2026-6176 | Customer Reviews for WooCommerce <= 5.106.0 - Unauthen… |
ivole |
Customer Reviews for WooCommerce |
2026-08-28T11:29:29.483Z | 2026-08-28T15:59:10.529Z | |
| cve-2026-81704 | 8.7 (v4.0) 7.5 (v3.1) | openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus |
jahlives |
openssl_encrypt |
2026-08-27T14:51:06.960Z | 2026-08-28T15:58:59.572Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-679 | Vulnérabilité dans Aruba Virtual Intranet Access | 2022-07-27T00:00:00.000000 | 2022-07-27T00:00:00.000000 |
| certfr-2022-avi-678 | Vulnérabilité dans LemonLDAP::NG | 2022-07-26T00:00:00.000000 | 2022-07-26T00:00:00.000000 |
| certfr-2022-avi-676 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2022-07-25T00:00:00.000000 | 2022-07-25T00:00:00.000000 |
| certfr-2022-avi-675 | Multiples vulnérabilités dans Microsoft Edge | 2022-07-25T00:00:00.000000 | 2022-07-25T00:00:00.000000 |
| certfr-2022-avi-674 | Multiples vulnérabilités dans les produits WithSecure | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-673 | Vulnérabilité dans Microsoft Azure Arc Jumpstart | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-672 | Vulnérabilité dans les produits SonicWall | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-671 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-670 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-669 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-07-22T00:00:00.000000 | 2022-07-22T00:00:00.000000 |
| certfr-2022-avi-668 | Vulnérabilité dans les produits WithSecure | 2022-07-21T00:00:00.000000 | 2022-07-21T00:00:00.000000 |
| certfr-2022-avi-667 | Multiples vulnérabilités dans Drupal | 2022-07-21T00:00:00.000000 | 2022-07-21T00:00:00.000000 |
| certfr-2022-avi-666 | Multiples vulnérabilités dans Cisco Nexus Dashboard | 2022-07-21T00:00:00.000000 | 2022-07-21T00:00:00.000000 |
| certfr-2022-avi-665 | Multiples vulnérabilités dans les produits Apple | 2022-07-21T00:00:00.000000 | 2022-07-21T00:00:00.000000 |
| certfr-2022-avi-664 | Multiples vulnérabilités dans Google ChromeOS | 2022-07-21T00:00:00.000000 | 2022-07-21T00:00:00.000000 |
| certfr-2022-avi-663 | Multiples vulnérabilités dans IBM QRadar | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-662 | Multiples vulnérabilités dans Google Chrome | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-661 | Multiples vulnérabilités dans Oracle Virtualization | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-660 | Multiples vulnérabilités dans Oracle Systems | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-659 | Multiples vulnérabilités dans Oracle WebLogic | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-658 | Multiples vulnérabilités dans Oracle PeopleSoft | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-657 | Multiples vulnérabilités dans Oracle E-Business Suite | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-656 | Multiples vulnérabilités dans Oracle Java SE | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-655 | Multiples vulnérabilités dans Oracle MySQL | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-654 | Multiples vulnérabilités dans Oracle Database Server | 2022-07-20T00:00:00.000000 | 2022-07-20T00:00:00.000000 |
| certfr-2022-avi-653 | Multiples vulnérabilités dans Moodle | 2022-07-18T00:00:00.000000 | 2022-07-18T00:00:00.000000 |
| certfr-2022-avi-652 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-07-18T00:00:00.000000 | 2022-07-18T00:00:00.000000 |
| certfr-2022-avi-651 | Vulnérabilité dans SonicWall Switch | 2022-07-18T00:00:00.000000 | 2022-07-18T00:00:00.000000 |
| certfr-2022-avi-650 | Multiples vulnérabilités dans les produits Juniper | 2022-07-15T00:00:00.000000 | 2022-07-15T00:00:00.000000 |
| certfr-2022-avi-649 | Multiples vulnérabilités dans Grafana | 2022-07-15T00:00:00.000000 | 2022-07-15T00:00:00.000000 |