Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76904 | GeoTools has unauthenticated SQL injection in the json… |
geotools |
geotools |
2026-08-21T20:13:20.536Z | 2026-08-27T16:24:50.888Z | |
| cve-2026-61824 | Defuddle: XSS via unescaped attribute interpolation i… |
kepano |
defuddle |
2026-08-21T20:12:53.225Z | 2026-08-24T19:48:53.974Z | |
| cve-2026-53572 | KEDA: PostgreSQL connection string parameter injection… |
kedacore |
keda |
2026-08-21T20:11:56.479Z | 2026-08-25T17:13:43.120Z | |
| cve-2026-68508 | Hydra: hydra.utils.instantiate with untrusted config c… |
facebookresearch |
hydra |
2026-08-21T20:09:26.113Z | 2026-08-21T21:43:13.889Z | |
| cve-2026-77811 | 8.7 (v3.1) 6.2 (v4.0) | Stored Cross-Site Scripting via Integration Template A… |
AWS |
Amazon OpenSearch Service |
2026-08-21T20:09:19.151Z | 2026-08-27T16:46:19.625Z |
| cve-2026-45099 | Terragrunt: Arbitrary File Deletion via Malicious Modu… |
gruntwork-io |
terragrunt |
2026-08-21T20:07:33.195Z | 2026-08-25T14:23:16.006Z | |
| cve-2026-30819 | Combodo iTop: Reflected XSS in /pages/ajax.render.php … |
Combodo |
iTop |
2026-08-21T20:05:47.126Z | 2026-08-21T20:21:48.873Z | |
| cve-2026-62960 | Git for Windows: Server-advertised bundle-uri can trig… |
git-for-windows |
git |
2026-08-21T20:05:45.099Z | 2026-08-26T17:38:14.501Z | |
| cve-2026-27490 | Combodo iTop: Weak secret generation for inline image |
Combodo |
iTop |
2026-08-21T19:59:29.384Z | 2026-08-25T17:16:32.291Z | |
| cve-2026-27463 | Combodo iTop: Version disclosure via login page logo |
Combodo |
iTop |
2026-08-21T19:57:40.427Z | 2026-08-21T21:43:20.794Z | |
| cve-2026-50290 | @asymmetric-effort/specifyjs: CSS expression sanitizat… |
asymmetric-effort |
specifyjs |
2026-08-21T19:55:51.086Z | 2026-08-21T20:07:10.712Z | |
| cve-2026-27462 | Combodo iTop: User enumeration via password reset |
Combodo |
iTop |
2026-08-21T19:52:04.025Z | 2026-08-26T17:37:23.128Z | |
| cve-2026-76876 | 8.2 (v4.0) 5.9 (v3.1) | Craftplan < 0.5.1 Broken Access Control Information Di… |
puemos |
craftplan |
2026-08-21T19:38:45.203Z | 2026-08-25T17:17:45.458Z |
| cve-2026-77810 | 9.9 (v3.1) 9.4 (v4.0) | Code Injection via Gremlin Query Passthrough in Amazon… |
AWS |
Athena Federated Query Neptune Connector |
2026-08-21T19:34:06.041Z | 2026-08-27T16:46:27.538Z |
| cve-2026-30866 | Combodo iTop: Insecured access to uploaded images via … |
Combodo |
iTop |
2026-08-21T19:32:00.149Z | 2026-08-25T17:28:23.007Z | |
| cve-2026-50288 | @asymmetric-effort/specifyjs: URL parse failure silent… |
asymmetric-effort |
specifyjs |
2026-08-21T19:29:45.774Z | 2026-08-21T19:55:40.103Z | |
| cve-2026-67361 | 6.9 (v4.0) | Joomla Extension - j2commerce.com - Unauthenticated fi… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:23:29.970Z | 2026-08-21T20:11:27.524Z |
| cve-2026-74252 | 8.6 (v4.0) | Joomla Extension - j2commerce.com - Stored XSS in Gues… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:21:10.157Z | 2026-08-21T20:09:07.770Z |
| cve-2026-67358 | 5.3 (v4.0) | Joomla Extension - j2commerce.com - Download quota man… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:20:36.445Z | 2026-08-21T20:26:11.441Z |
| cve-2026-67362 | 5.1 (v4.0) | Joomla Extension - j2commerce.com - Open redirect in c… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:19:33.471Z | 2026-08-21T20:25:08.470Z |
| cve-2026-67359 | 8.7 (v4.0) | Joomla Extension - j2commerce.com - Order content disc… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:18:44.371Z | 2026-08-21T20:24:19.508Z |
| cve-2026-67360 | 6.3 (v4.0) | Joomla Extension - j2commerce.com - Cross-customer ord… |
j2commerce.com |
J2Store extension for Joomla |
2026-08-21T19:16:36.014Z | 2026-08-21T20:22:09.246Z |
| cve-2026-54071 | BabelDOC: Arbitrary Code Execution via CMap Pickle Des… |
funstory-ai |
BabelDOC |
2026-08-21T18:55:42.248Z | 2026-08-21T21:43:28.162Z | |
| cve-2026-54073 | VeraCrypt: Hidden volume quick format weakens plausibl… |
veracrypt |
VeraCrypt |
2026-08-21T18:51:58.855Z | 2026-08-21T19:32:34.830Z | |
| cve-2026-53762 | VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 … |
veracrypt |
VeraCrypt |
2026-08-21T18:50:58.083Z | 2026-08-26T17:35:53.948Z | |
| cve-2026-54681 | DiscordChatExporter: HTML attribute injection via unes… |
Tyrrrz |
DiscordChatExporter |
2026-08-21T18:41:45.861Z | 2026-08-21T19:04:42.235Z | |
| cve-2026-54682 | DiscordChatExporter: Stored XSS in HTML export when ma… |
Tyrrrz |
DiscordChatExporter |
2026-08-21T18:40:05.196Z | 2026-08-25T17:31:36.280Z | |
| cve-2026-55850 | Element Web: A malicious homeserver can inject HTML in… |
element-hq |
element-web |
2026-08-21T18:30:12.251Z | 2026-08-21T19:54:55.604Z | |
| cve-2026-77795 | Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveCont… |
Dromara |
RuoYi-Vue-Plus |
2026-08-21T18:30:07.737Z | 2026-08-21T19:36:40.600Z | |
| cve-2026-54134 | OctoPrint: File exfiltration possible via query parame… |
OctoPrint |
OctoPrint |
2026-08-21T18:28:15.925Z | 2026-08-26T17:34:27.359Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-546 | Multiples vulnérabilités dans les produits Schneider | 2022-06-15T00:00:00.000000 | 2022-08-19T00:00:00.000000 |
| certfr-2022-avi-545 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-544 | Multiples vulnérabilités dans IBM Netcool Operations Insight | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-543 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-14T00:00:00.000000 | 2022-06-14T00:00:00.000000 |
| certfr-2022-avi-542 | Multiples vulnérabilités dans le noyau Linux de Debian | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-541 | Multiples vulnérabilités dans Drupal Core | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-540 | Vulnérabilité dans Ruby on Rails | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-539 | Multiples vulnérabilités dans IBM DB2 | 2022-06-13T00:00:00.000000 | 2022-06-13T00:00:00.000000 |
| certfr-2022-avi-538 | Multiples vulnérabilités dans Moxa NPort | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-537 | Vulnérabilité dans Microsoft Edge | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-536 | Multiples vulnérabilités dans Google Chrome | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-535 | Multiples vulnérabilités dans Xen | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-534 | Multiples vulnérabilités dans PHP | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-533 | Vulnérabilité dans IBM DB2 | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-532 | Vulnérabilité dans ownCloud Server | 2022-06-10T00:00:00.000000 | 2022-06-10T00:00:00.000000 |
| certfr-2022-avi-531 | Multiples vulnérabilités dans Apache HTTP Server | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-530 | Vulnérabilité dans les produits Mitel | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-528 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2022-06-09T00:00:00.000000 | 2022-06-09T00:00:00.000000 |
| certfr-2022-avi-527 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-526 | Multiples vulnérabilités dans les produits IBM | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-525 | Multiples vulnérabilités dans les produits Fortinet | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-524 | Multiples vulnérabilités dans Google Android | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-523 | Multiples vulnérabilités dans les produits IBM | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-522 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-521 | Vulnérabilité dans Atlassian Confluence | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-520 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-519 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-518 | Vulnérabilité dans Nextcloud richdocuments | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-517 | Multiples vulnérabilités dans GitLab | 2022-06-02T00:00:00.000000 | 2022-06-02T00:00:00.000000 |