Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77812 | 9.4 (v4.0) | Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE |
DJI |
Neo |
2026-08-21T14:06:55.723Z | 2026-08-24T07:28:37.450Z |
| cve-2026-15580 | 6.9 (v4.0) | PassPortal browser extension: vault token disclosure v… |
N-able |
PassPortal |
2026-08-21T14:00:10.835Z | 2026-08-21T15:07:33.739Z |
| cve-2026-75946 | 8.2 (v4.0) | OMEN Gaming Hub – Potential Escalation of Privilege & … |
HP Inc |
OMEN Gaming Hub |
2026-08-21T13:50:55.856Z | 2026-08-31T18:34:58.616Z |
| cve-2026-77806 | 9.8 (v3.1) | SPIP before 4.4.21 allows unauthenticated remote … |
SPIP |
SPIP |
2026-08-21T13:37:43.289Z | 2026-08-21T17:43:56.771Z |
| cve-2026-59654 | 6.8 (v4.0) | Apache CloudStack: DoS caused by database connections leak |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T12:33:00.577Z | 2026-08-24T13:01:27.125Z |
| cve-2026-76612 | 8.6 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated stor… |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:17:08.946Z | 2026-08-21T19:22:11.591Z |
| cve-2026-76611 | 6.9 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated arbi… |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:15:01.640Z | 2026-08-21T19:20:00.136Z |
| cve-2026-75115 | 7 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-21T12:14:13.260Z | 2026-08-21T19:19:09.831Z |
| cve-2026-76613 | 8.6 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-21T12:14:02.505Z | 2026-08-23T13:35:35.725Z |
| cve-2026-77028 | 5.3 (v4.0) | Joomla Extension - yootheme.com - Reflected XSS and op… |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:13:04.328Z | 2026-08-21T19:17:58.399Z |
| cve-2026-77780 | 5.3 (v4.0) | Unvalidated bank account and card foreign keys in the … |
Roskus |
Prospero Flow CRM |
2026-08-21T12:12:59.160Z | 2026-08-21T16:12:40.967Z |
| cve-2026-77029 | 4.6 (v4.0) | Joomla Extension - yootheme.com - Missing CSRF tokens … |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:11:41.823Z | 2026-08-21T19:16:33.222Z |
| cve-2026-59318 | 6.5 (v3.1) | DefaultToolCallingManager Global Resolver Fallback All… |
Spring |
Spring AI |
2026-08-21T12:07:10.349Z | 2026-08-22T03:55:38.874Z |
| cve-2026-59308 | 4.2 (v3.1) | Semantic Cache Cross-Tenant Isolation Bypass via SHA-2… |
Spring |
Spring AI |
2026-08-21T12:07:07.992Z | 2026-08-21T14:29:06.814Z |
| cve-2026-59279 | 7.5 (v3.1) | Unbounded persistent session allocation via repeated i… |
Spring |
Spring AI |
2026-08-21T12:07:05.567Z | 2026-08-21T14:28:41.415Z |
| cve-2026-19848 | ProfilePress < 4.17.1 - Unauthenticated Arbitrary Shor… |
Unknown |
ProfilePress |
2026-08-21T11:40:43.073Z | 2026-08-21T12:46:34.584Z | |
| cve-2026-18356 | Limit Login Attempts Reloaded < 3.3.5 - Username Denyl… |
Unknown |
Limit Login Attempts Security |
2026-08-21T11:40:42.408Z | 2026-08-21T12:46:58.438Z | |
| cve-2026-17559 | Content Protector (Passster) < 4.3.9 - Unauthenticated… |
Unknown |
Passster |
2026-08-21T11:40:41.735Z | 2026-08-21T12:47:20.891Z | |
| cve-2026-16650 | Charitable < 1.8.12 - Unauthenticated Donation Payment… |
Unknown |
Charitable |
2026-08-21T11:40:41.065Z | 2026-08-21T12:47:51.251Z | |
| cve-2026-15150 | myCred < 3.2.5 - Unauthenticated Payment Bypass via Mi… |
Unknown |
myCred |
2026-08-21T11:40:40.410Z | 2026-08-21T12:48:15.019Z | |
| cve-2026-15046 | LitExtension: Store to WooCommerce Migration <= 1.2.5 … |
Unknown |
LitExtension |
2026-08-21T11:40:39.753Z | 2026-08-21T12:48:33.246Z | |
| cve-2026-13176 | Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery |
Unknown |
Eventin |
2026-08-21T11:40:29.153Z | 2026-08-21T12:54:40.938Z | |
| cve-2026-77759 | 8.7 (v4.0) | IDOR and missing authorization in the Prospero Flow CR… |
Roskus |
Prospero Flow CRM |
2026-08-21T11:29:43.550Z | 2026-08-21T11:53:17.782Z |
| cve-2026-77776 | 9.1 (v3.1) 9.3 (v4.0) | Headroom Proxy Treats the Client-Supplied x-headroom-u… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.779Z | 2026-08-21T21:44:30.707Z |
| cve-2026-77775 | 8.6 (v3.1) 7.7 (v4.0) | Headroom Proxy Sends Upstream Requests to a Client-Sup… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.107Z | 2026-08-21T11:44:34.968Z |
| cve-2026-15576 | Agent receiver accepts mTLS requests without a client … |
Checkmk GmbH |
Checkmk |
2026-08-21T11:10:00.856Z | 2026-08-21T11:53:45.355Z | |
| cve-2026-77769 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.list Queries Reports by an Unverified… |
Openpanel-dev |
openpanel |
2026-08-21T11:05:15.644Z | 2026-08-26T17:23:49.786Z |
| cve-2026-77768 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.get Returns Any Report by Identifier … |
Openpanel-dev |
openpanel |
2026-08-21T11:05:14.998Z | 2026-08-21T17:31:03.513Z |
| cve-2026-77767 | 7.5 (v3.1) 8.7 (v4.0) | Reconmap Report Preview Endpoint Is Marked AllowAnonym… |
reconmap |
reconmap |
2026-08-21T11:05:14.316Z | 2026-08-21T13:51:15.264Z |
| cve-2026-77763 | 6.5 (v3.1) 7.1 (v4.0) | JuiceFS Local Filestore Backend Joins Object Keys onto… |
juicedata |
juicefs |
2026-08-21T11:05:13.650Z | 2026-08-21T21:44:37.044Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-396 | Multiples vulnérabilités dans les produits SonicWall | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-395 | Multiples vulnérabilités dans les produits Nextcloud | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-394 | Multiples vulnérabilités dans MISP | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-393 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-392 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-391 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-390 | Multiples vulnérabilités dans Google Chrome | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-389 | Multiples vulnérabilités dans Ruby on Rails | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-388 | Vulnérabilité dans SolarWinds DPA | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-387 | Vulnérabilité dans Nextcloud Server | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-386 | Multiples vulnérabilités dans IBM QRadar SIEM | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-385 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-384 | Multiples vulnérabilités dans FreeRADIUS Server | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-383 | Vulnérabilité dans Liferay Portal | 2022-04-25T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-382 | Vulnérabilité dans Atlassian Jira | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-381 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-380 | Vulnérabilité dans MongoDB Server | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-379 | Multiples vulnérabilités dans Stormshield Network VPN Client | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-378 | Vulnérabilité dans Grafana Enterprise | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-377 | Vulnérabilité dans VMware Spring Security OAuth | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-376 | Multiples vulnérabilités dans Fortinet FortiSOAR | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-375 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-374 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-373 | Vulnérabilité dans les produits Palo Alto Networks | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-372 | Multiples vulnérabilités dans Drupal core | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-371 | Multiples vulnérabilités dans les produits Cisco | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-370 | Multiples vulnérabilités dans Tenable.sc | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-369 | Multiples vulnérabilités dans Oracle WebLogic Server | 2022-04-20T00:00:00.000000 | 2022-04-20T00:00:00.000000 |
| certfr-2022-avi-368 | Multiples vulnérabilités dans Oracle Virtualization | 2022-04-20T00:00:00.000000 | 2022-04-20T00:00:00.000000 |
| certfr-2022-avi-367 | Multiples vulnérabilités dans Oracle Systems | 2022-04-20T00:00:00.000000 | 2022-04-20T00:00:00.000000 |