Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-63003 | django CMS: Broken access control in page *Duplicate* … |
django-cms |
django-cms |
2026-08-20T18:09:13.988Z | 2026-08-21T21:46:19.864Z | |
| cve-2026-61663 | django CMS: Missing authorization in `render_object_st… |
django-cms |
django-cms |
2026-08-20T18:07:28.005Z | 2026-08-25T15:16:01.718Z | |
| cve-2026-54622 | django CMS: Clipboard copy IDOR discloses unauthorized… |
django-cms |
django-cms |
2026-08-20T18:06:00.186Z | 2026-08-20T18:50:59.089Z | |
| cve-2026-54624 | django CMS: Structure endpoint bypasses page-view permission |
django-cms |
django-cms |
2026-08-20T18:04:38.766Z | 2026-08-20T19:46:10.950Z | |
| cve-2026-2334 | 9.4 (v4.0) | ) Missing Server-Side File Extension Validation in vsDesk |
vsDesk |
vsDesk |
2026-08-20T18:03:38.982Z | 2026-08-21T20:08:38.818Z |
| cve-2026-54623 | django CMS: Plugin move endpoint allows cyclic reparen… |
django-cms |
django-cms |
2026-08-20T18:02:45.599Z | 2026-08-20T18:47:19.789Z | |
| cve-2026-54625 | django CMS: Page cache ignores plugin-declared Vary he… |
django-cms |
django-cms |
2026-08-20T17:58:03.255Z | 2026-08-20T19:45:17.403Z | |
| cve-2026-63385 | Libevent: HTTP header handling bugs create risk of acc… |
libevent |
libevent |
2026-08-20T17:55:36.214Z | 2026-08-21T21:46:26.752Z | |
| cve-2026-63379 | Libevent: HTTP Header smuggling |
libevent |
libevent |
2026-08-20T17:55:00.789Z | 2026-08-25T15:14:26.228Z | |
| cve-2026-63387 | Libevent: Off-by-one stack buffer overflow in dnsname_… |
libevent |
libevent |
2026-08-20T17:53:41.863Z | 2026-08-25T15:12:12.129Z | |
| cve-2026-63384 | Libevent: `evtag_unmarshal_header()` decodes a wire `u… |
libevent |
libevent |
2026-08-20T17:53:08.417Z | 2026-08-20T19:50:32.085Z | |
| cve-2026-63380 | Libevent: Null Pointer Dereference in `evws_new_session` |
libevent |
libevent |
2026-08-20T17:52:29.458Z | 2026-08-25T15:11:16.746Z | |
| cve-2026-63382 | libevent evhttp: Multiple HTTP Parser Bugs Enable Requ… |
libevent |
libevent |
2026-08-20T17:51:15.156Z | 2026-08-20T19:33:50.217Z | |
| cve-2026-63381 | Libevent: Dangling Pointer in `evbuffer_add_buffer_ref… |
libevent |
libevent |
2026-08-20T17:50:09.322Z | 2026-08-21T21:46:33.792Z | |
| cve-2026-63495 | Libevent: Unbounded memory accumulation in WebSocket s… |
libevent |
libevent |
2026-08-20T17:49:16.790Z | 2026-08-20T19:17:04.616Z | |
| cve-2026-63383 | Libevent: decode_tag_internal() can lead to out-of-bou… |
libevent |
libevent |
2026-08-20T17:48:24.568Z | 2026-08-20T18:41:23.897Z | |
| cve-2026-63388 | Libevent: Heap out-of-bounds write in bufferevent_sock… |
libevent |
libevent |
2026-08-20T17:44:18.435Z | 2026-08-21T21:46:40.675Z | |
| cve-2026-73253 | Mongoose: TLS Hostname Verification Bypass via Overly … |
cesanta |
mongoose |
2026-08-20T17:41:02.495Z | 2026-08-20T18:36:17.262Z | |
| cve-2026-73255 | Mongoose: Path traversal in SSI #include directives en… |
cesanta |
mongoose |
2026-08-20T17:40:02.443Z | 2026-08-25T15:09:33.679Z | |
| cve-2026-73259 | Mongoose: Reflected XSS via decoded URI in directory l… |
cesanta |
mongoose |
2026-08-20T17:39:16.147Z | 2026-08-20T19:51:19.095Z | |
| cve-2026-73256 | Mongoose: HTTP/1.0 detection off-by-one enables reques… |
cesanta |
mongoose |
2026-08-20T17:37:54.505Z | 2026-08-21T21:46:47.832Z | |
| cve-2026-73254 | Mongoose: Stored XSS via unescaped filenames in direct… |
cesanta |
mongoose |
2026-08-20T17:37:17.245Z | 2026-08-21T16:22:13.424Z | |
| cve-2026-73258 | Mongoose: Multipart boundary/header scan logic error i… |
cesanta |
mongoose |
2026-08-20T17:36:39.239Z | 2026-08-20T18:32:51.938Z | |
| cve-2026-73251 | Mongoose Built-in TLS: CA-bundle certificate chain acc… |
cesanta |
mongoose |
2026-08-20T17:34:50.472Z | 2026-08-20T19:50:32.555Z | |
| cve-2026-76641 | 8.7 (v4.0) 7.5 (v3.1) | Expat Out-of-Bounds Read via dtdCopy |
libexpat |
libexpat |
2026-08-20T17:31:10.610Z | 2026-08-21T11:21:12.314Z |
| cve-2026-73257 | Mongoose: Content-Length + Transfer-Encoding coexisten… |
cesanta |
mongoose |
2026-08-20T17:30:58.424Z | 2026-08-20T19:34:58.840Z | |
| cve-2026-77036 | elunez eladmin GenConfigController improper authorization |
elunez |
eladmin |
2026-08-20T17:30:13.098Z | 2026-08-25T15:08:13.602Z | |
| cve-2026-53424 | 9.1 (v4.0) | Missing one-time-use enforcement in Samly allows repla… |
dropbox |
samly |
2026-08-20T17:27:11.115Z | 2026-08-21T19:42:21.623Z |
| cve-2026-53425 | 7.6 (v4.0) | Missing InResponseTo validation in Samly allows accept… |
dropbox |
samly |
2026-08-20T17:26:35.537Z | 2026-08-21T19:50:34.320Z |
| cve-2026-72847 | 2.4 (v4.0) 4.6 (v3.1) | broot Terminal Escape Sequence Injection via Unsanitiz… |
Canop |
broot |
2026-08-20T17:19:34.678Z | 2026-08-21T16:22:56.831Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-066 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2022-01-21T00:00:00.000000 | 2022-01-21T00:00:00.000000 |
| certfr-2022-avi-065 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-01-21T00:00:00.000000 | 2022-01-21T00:00:00.000000 |
| certfr-2022-avi-064 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-01-21T00:00:00.000000 | 2022-01-21T00:00:00.000000 |
| certfr-2022-avi-063 | Multiples vulnérabilités dans F5 NGINX | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-062 | Multiples vulnérabilités dans F5 BIG-IP et BIG-IQ | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-061 | Multiples vulnérabilités dans TrendMicro Deep Security Agent | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-060 | Multiples vulnérabilités dans les produits Cisco | 2022-01-20T00:00:00.000000 | 2022-01-21T00:00:00.000000 |
| certfr-2022-avi-059 | Multiples vulnérabilités dans IBM Db2 | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-058 | Multiples vulnérabilités dans Drupal core | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-057 | Multiples vulnérabilités dans Google Chrome | 2022-01-20T00:00:00.000000 | 2022-01-20T00:00:00.000000 |
| certfr-2022-avi-056 | Multiples vulnérabilités dans Oracle WebLogic Server | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-055 | Multiples vulnérabilités dans Oracle VM VirtualBox | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-054 | Multiples vulnérabilités dans Oracle Systems | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-053 | Multiples vulnérabilités dans Oracle PeopleSoft | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-052 | Multiples vulnérabilités dans Oracle MySQL | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-051 | Multiples vulnérabilités dans Oracle Java SE | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-050 | Multiples vulnérabilités dans Oracle Database Server | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-049 | Vulnérabilité dans les produits VMware | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-048 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-01-19T00:00:00.000000 | 2022-01-19T00:00:00.000000 |
| certfr-2022-avi-046 | Vulnérabilité dans SolarWinds Serv-U | 2022-01-18T00:00:00.000000 | 2022-01-18T00:00:00.000000 |
| certfr-2022-avi-045 | Multiples vulnérabilités dans Postfix | 2022-01-17T00:00:00.000000 | 2022-01-17T00:00:00.000000 |
| certfr-2022-avi-044 | Vulnérabilité dans Juniper Junos | 2022-01-17T00:00:00.000000 | 2022-01-17T00:00:00.000000 |
| certfr-2022-avi-043 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-01-17T00:00:00.000000 | 2022-01-17T00:00:00.000000 |
| certfr-2022-avi-042 | Vulnérabilité dans Junos OS et Junos OS Evolved | 2022-01-14T00:00:00.000000 | 2022-01-14T00:00:00.000000 |
| certfr-2022-avi-041 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-01-14T00:00:00.000000 | 2022-01-14T00:00:00.000000 |
| certfr-2022-avi-040 | Multiples vulnérabilités dans les produits Juniper | 2022-01-13T00:00:00.000000 | 2022-01-13T00:00:00.000000 |
| certfr-2022-avi-039 | Multiples vulnérabilités dans Moxa VPort | 2022-01-13T00:00:00.000000 | 2022-01-13T00:00:00.000000 |
| certfr-2022-avi-038 | Multiples vulnérabilités dans Tenable.sc | 2022-01-13T00:00:00.000000 | 2022-01-13T00:00:00.000000 |
| certfr-2022-avi-037 | Multiples vulnérabilités dans Citrix Hypervisor | 2022-01-13T00:00:00.000000 | 2022-01-13T00:00:00.000000 |