Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-15743 | N/A | Catalyst::Plugin::Static::Simple versions through 0.38… |
|
|
2026-08-20T18:15:26.876Z | 2026-08-28T15:07:16.802Z |
| cve-2026-61802 | Wazuh discloses cleartext cluster key to low-privilege… |
wazuh |
wazuh |
2026-08-27T23:31:30.766Z | 2026-08-28T15:05:05.253Z | |
| cve-2026-21584 | This High severity Improper Authorization vulnera… |
Atlassian |
Bamboo Data Center |
2026-08-18T22:00:00.499Z | 2026-08-28T15:04:12.086Z | |
| cve-2026-40015 | 4.3 (v3.1) | An attacker that has valid credentials can open m… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:18.576Z | 2026-08-28T15:03:07.769Z |
| cve-2026-40017 | 6.5 (v3.1) | An attacker that can send mail to a user can craf… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:19.524Z | 2026-08-28T15:02:36.570Z |
| cve-2026-61231 | Vulnerability in the Oracle Virtual Directory pro… |
Oracle Corporation |
Oracle Virtual Directory |
2026-08-18T20:59:53.712Z | 2026-08-28T15:02:18.100Z | |
| cve-2026-75368 | N/A | A stack overflow in the loadRawData function of S… |
n/a |
n/a |
2026-08-24T00:00:00.000Z | 2026-08-28T15:01:13.914Z |
| cve-2026-40018 | 7.4 (v3.1) | None None None No publicly available exploits are… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:20.457Z | 2026-08-28T15:00:32.995Z |
| cve-2026-40019 | 5.9 (v3.1) | An unauthenticated attacker can send a truncated … |
Open-Xchange GmbH |
OX Dovecot CE |
2026-08-28T10:12:21.390Z | 2026-08-28T14:58:20.016Z |
| cve-2026-40203 | 3.7 (v3.1) | When IMAP compression is enabled, the same compre… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:22.287Z | 2026-08-28T14:57:07.686Z |
| cve-2026-40204 | 3.1 (v3.1) | None None None No publicly available exploits are… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:23.236Z | 2026-08-28T14:56:40.510Z |
| cve-2026-40205 | 5.9 (v3.1) | An attacker that holds an OAuth2 token granting o… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:24.186Z | 2026-08-28T14:56:09.120Z |
| cve-2026-53580 | Trilium arbitrary file read and denial of service via … |
TriliumNext |
Trilium |
2026-08-27T19:46:12.357Z | 2026-08-28T14:55:56.996Z | |
| cve-2026-54732 | libreoffice-convert: path traversal / arbitrary file write |
elwerene |
libreoffice-convert |
2026-08-27T17:21:50.743Z | 2026-08-28T14:54:16.963Z | |
| cve-2026-61783 | Wazuh: RBAC permission-effect check in mask_sensitive_… |
wazuh |
wazuh |
2026-08-27T23:19:18.214Z | 2026-08-28T14:52:45.579Z | |
| cve-2026-82222 | 10 (v3.1) | WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Exec… |
Liquid Web / StellarWP |
GiveWP |
2026-08-28T10:46:14.315Z | 2026-08-28T14:50:53.520Z |
| cve-2026-82236 | 2.3 (v4.0) 3.1 (v3.1) | File Browser 2.63.6 through 2.63.23 Share Link Exposur… |
filebrowser |
filebrowser |
2026-08-28T10:49:25.873Z | 2026-08-28T14:49:07.319Z |
| cve-2026-82241 | 7.1 (v4.0) 7.1 (v3.1) | Budibase backend-core SSRF via incomplete default blacklist |
budibase |
server |
2026-08-28T10:49:29.355Z | 2026-08-28T14:46:56.389Z |
| cve-2026-82246 | 7.1 (v4.0) 7.1 (v3.1) | Budibase Server before 3.41.3 SSRF via Query Import |
budibase |
server |
2026-08-28T10:49:32.768Z | 2026-08-28T14:45:27.847Z |
| cve-2026-82256 | 6.9 (v4.0) 5.3 (v3.1) | SvelteKit before 2.69.1 Denial of Service via Remote Form |
sveltejs |
kit |
2026-08-28T10:49:40.634Z | 2026-08-28T14:41:47.444Z |
| cve-2026-82261 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 CPU Exhaustion via Remote Form… |
sveltejs |
kit |
2026-08-28T10:49:44.323Z | 2026-08-28T14:41:04.001Z |
| cve-2026-78195 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': 'Rejecting as a duplicate of CVE-2026-78047'}], 'replacedBy': ['CVE-2026-78047'], 'providerMetadata': {'orgId': '5d1c2695-1a31-4499-88ae-e847036fd7e3', 'shortName': 'WatchGuard', 'dateUpdated': '2026-08-28T14:33:35.260Z'}} | N/A | N/A | 2026-08-27T23:26:31.597Z | 2026-08-28T14:33:35.260Z |
| cve-2026-81893 | 4.7 (v3.1) | Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc prof… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-27T18:34:03.016Z | 2026-08-28T14:29:06.460Z |
| cve-2023-36664 | N/A | Artifex Ghostscript before 10.01.2 mishandles per… |
n/a |
n/a |
2023-06-25T00:00:00.000Z | 2026-08-28T14:15:50.886Z |
| cve-2026-66353 | 5.3 (v4.0) | Doggo vulnerable to cross-site scripting via unescaped… |
woylie |
doggo |
2026-08-27T16:44:59.553Z | 2026-08-28T14:13:54.861Z |
| cve-2026-65931 | 5.1 (v4.0) | LimeSurvey Community Edition 7.0.5 - Improper authoriz… |
LimeSurvey |
LimeSurvey |
2026-08-27T17:50:47.311Z | 2026-08-28T14:13:54.515Z |
| cve-2026-4398 | 5.4 (v3.1) | Authorization Bypass Through User-Controlled Key in GitLab |
GitLab |
GitLab |
2026-08-27T17:53:14.609Z | 2026-08-28T14:13:54.361Z |
| cve-2026-81838 | 6.8 (v4.0) 7.1 (v3.1) | Zip Slip Arbitrary File Write in AWS diagram-as-code (… |
aws |
diagram-as-code |
2026-08-27T20:03:59.258Z | 2026-08-28T14:13:53.824Z |
| cve-2026-68967 | 6.5 (v3.1) 7.1 (v4.0) | Out-of-bounds Write in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:50:22.011Z | 2026-08-28T14:13:53.649Z |
| cve-2026-67560 | 7.5 (v3.1) 7.7 (v4.0) | Stack-based Buffer Overflow in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:54:20.022Z | 2026-08-28T14:13:53.473Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-525 | Multiples vulnérabilités dans les produits Fortinet | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-524 | Multiples vulnérabilités dans Google Android | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-523 | Multiples vulnérabilités dans les produits IBM | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-522 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-427 | Multiples vulnérabilités dans Foxit PDF Reader et Foxit PDF Editor | 2022-05-09T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-521 | Vulnérabilité dans Atlassian Confluence | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-520 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-519 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-518 | Vulnérabilité dans Nextcloud richdocuments | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-517 | Multiples vulnérabilités dans GitLab | 2022-06-02T00:00:00.000000 | 2022-06-02T00:00:00.000000 |
| certfr-2022-avi-511 | Multiples vulnérabilités dans Mozilla Firefox | 2022-06-01T00:00:00.000000 | 2022-06-02T00:00:00.000000 |
| certfr-2022-avi-516 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-515 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-514 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-513 | Multiples vulnérabilités dans Google Chrome | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-512 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-510 | Multiples vulnérabilités dans IBM QRadar | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-509 | Vulnérabilité dans Elasticsearch | 2022-05-31T00:00:00.000000 | 2022-05-31T00:00:00.000000 |
| certfr-2022-avi-508 | Vulnérabilité dans Nextcloud Server | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-507 | Vulnérabilité dans Grafana | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-506 | Multiples vulnérabilités dans Ruby on Rails | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-505 | Multiples vulnérabilités dans Google Chrome OS | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-504 | Multiples vulnérabilités dans Tenable Nessus | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-503 | Vulnérabilité dans QNAP Proxy Server | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-502 | Vulnérabilité dans les produits F-Secure | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-501 | Vulnérabilité dans Drupal Core | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-500 | Vulnérabilité dans le client ownCloud Desktop | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-499 | Multiples vulnérabilités dans les produits Citrix | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-498 | Vulnérabilité dans IBM Spectrum Control | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-497 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |