Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18272 | 6.8 (v3.0) | Kenwood DNR1007XR startUpdateProcess Command Injection… |
Kenwood |
DNR1007XR |
2026-08-20T16:14:37.830Z | 2026-08-26T19:48:29.217Z |
| cve-2026-18271 | 6.8 (v3.0) | Kenwood DNR1007XR vCardParser Heap-based Buffer Overfl… |
Kenwood |
DNR1007XR |
2026-08-20T16:14:28.528Z | 2026-08-26T19:48:44.233Z |
| cve-2026-18270 | 7.8 (v3.0) | Kenwood DNR1007XR udhcpd Incorrect Permission Assignme… |
Kenwood |
DNR1007XR |
2026-08-20T16:14:15.245Z | 2026-08-26T19:48:59.632Z |
| cve-2026-18269 | 6.8 (v3.0) | Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds … |
Kenwood |
DNR1007XR |
2026-08-20T16:14:07.024Z | 2026-08-26T19:49:15.834Z |
| cve-2026-18268 | 7 (v3.0) | Kenwood DNR1007XR JKGenService Command Injection Local… |
Kenwood |
DNR1007XR |
2026-08-20T16:13:59.070Z | 2026-08-26T19:49:31.459Z |
| cve-2026-71492 | Banks: Path traversal in `DirectoryPromptRegistry.set(… |
masci |
banks |
2026-08-20T16:13:55.578Z | 2026-08-20T17:11:10.125Z | |
| cve-2026-18267 | 6.8 (v3.0) | Kenwood DNR1007XR Firmware Update Link Following Code … |
Kenwood |
DNR1007XR |
2026-08-20T16:13:51.813Z | 2026-08-26T19:49:46.798Z |
| cve-2026-18265 | 9.8 (v3.0) | OSNEXUS QuantaStor Missing Authentication Remote Code … |
OSNEXUS |
QuantaStor |
2026-08-20T16:13:34.177Z | 2026-08-26T19:50:02.042Z |
| cve-2026-18264 | 8.8 (v3.0) | NoMachine getstat Command Injection Remote Code Execut… |
NoMachine |
NoMachine |
2026-08-20T16:13:11.390Z | 2026-08-26T19:50:17.572Z |
| cve-2026-54616 | NanaZip: Heap out-of-bounds read in NanaZip SquashFS L… |
M2Team |
NanaZip |
2026-08-20T16:11:54.192Z | 2026-08-20T19:52:07.850Z | |
| cve-2026-54449 | LangBot: Authenticated RCE Via MCP Configuration |
langbot-app |
LangBot |
2026-08-20T16:10:25.169Z | 2026-08-21T21:47:30.890Z | |
| cve-2026-77004 | Comfast CF-N1-S mbox-config sprintf command injection |
Comfast |
CF-N1-S |
2026-08-20T16:00:09.986Z | 2026-08-20T17:10:13.138Z | |
| cve-2026-19611 | 7.4 (v3.1) | Wildfly-elytron: org.wildfly.security/wildfly-elytron-… |
Red Hat |
Red Hat build of Apache Camel 4 for Quarkus 3 |
2026-08-20T15:58:24.190Z | 2026-09-03T17:28:05.298Z |
| cve-2026-63044 | Apache InLong: Authenticated SSRF via POST /api/node/t… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:57:02.234Z | 2026-08-21T18:57:30.703Z | |
| cve-2026-75140 | 8.7 (v4.0) 7.5 (v3.1) | jsoup Uncontrolled Resource Consumption in XmlTreeBuilder |
jhy |
soup |
2026-08-20T15:56:50.377Z | 2026-08-21T11:21:02.259Z |
| cve-2026-63043 | Apache InLong: Agent path traversal via unvalidated fi… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:53:11.930Z | 2026-08-24T16:57:47.311Z | |
| cve-2026-63042 | Apache InLong: Missing authorization on DataNode manag… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:50:06.733Z | 2026-08-24T16:57:08.270Z | |
| cve-2026-63040 | Apache InLong: Missing authorization in StreamSource f… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:48:53.042Z | 2026-08-24T16:56:31.345Z | |
| cve-2026-76999 | SourceCodester CET Automated Grading System with AI Pr… |
SourceCodester |
CET Automated Grading System with AI Predictive Analytics |
2026-08-20T15:45:08.190Z | 2026-08-20T17:43:57.887Z | |
| cve-2026-63039 | Apache InLong: SQL Injection via Unvalidated MyBatis D… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:43:55.637Z | 2026-08-24T16:55:35.826Z | |
| cve-2026-63038 | Apache InLong: SQL Injection via String Concatenation … |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:42:47.028Z | 2026-08-24T16:55:01.857Z | |
| cve-2026-63037 | Apache InLong: Unauthenticated SQL injection in Manage… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:37:35.375Z | 2026-08-24T16:54:16.354Z | |
| cve-2026-63016 | Apache InLong: Ordinary users can create new packages |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:33:01.461Z | 2026-08-20T17:09:14.898Z | |
| cve-2026-63015 | Apache InLong: Non-template responsible persons can vi… |
Apache Software Foundation |
Apache InLong |
2026-08-20T15:31:28.560Z | 2026-08-20T17:09:13.663Z | |
| cve-2026-76998 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-20T15:30:10.345Z | 2026-08-21T16:04:17.070Z | |
| cve-2026-76997 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-20T15:15:12.503Z | 2026-08-21T16:40:45.151Z | |
| cve-2026-76996 | SourceCodester Simple Online Food Ordering System view… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-20T15:00:10.067Z | 2026-08-25T14:43:41.813Z | |
| cve-2026-63490 | Handlebars.java: Arbitrary file read in `SpringTemplat… |
jknack |
handlebars.java |
2026-08-20T14:45:35.727Z | 2026-08-25T14:41:57.989Z | |
| cve-2026-76995 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-20T14:45:07.980Z | 2026-08-20T17:00:26.843Z | |
| cve-2026-49825 | lxml: javascript: URL bypass in Cleaner via xlink:href |
lxml |
lxml |
2026-08-20T14:42:30.748Z | 2026-08-21T16:41:54.849Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-967 | Vulnérabilité dans F5 BIG-IP | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-966 | Multiples vulnérabilités dans F-Secure SAFE Browser | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-965 | Vulnérabilité dans VMware Workspace ONE UEM console | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-964 | Vulnérabilité dans F5 NGINX Swagger UI | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-963 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-962 | Vulnérabilité dans MongoDB | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-961 | Multiples vulnérabilités dans les produits Microsoft | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-960 | Multiples vulnérabilités dans Microsoft .Net | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-959 | Multiples vulnérabilités dans Microsoft Windows | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-958 | Multiples vulnérabilités dans Microsoft Office | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-957 | Multiples vulnérabilités dans Microsoft Edge | 2021-12-15T00:00:00.000000 | 2021-12-20T00:00:00.000000 |
| certfr-2021-avi-956 | Multiples vulnérabilités dans Apple Safari | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-955 | Vulnérabilité dans OpenSSL | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-954 | Vulnérabilité dans Moxa NPort | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-953 | Multiples vulnérabilités dans les produits Schneider | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-952 | Multiples vulnérabilités dans les produits IBM | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-951 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-950 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-949 | Multiples vulnérabilités dans les produits Siemens | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-948 | Multiples vulnérabilités dans les produits SAP | 2021-12-14T00:00:00.000000 | 2021-12-14T00:00:00.000000 |
| certfr-2021-avi-946 | Multiples vulnérabilités dans Google Chrome | 2021-12-14T00:00:00.000000 | 2021-12-14T00:00:00.000000 |
| certfr-2021-avi-945 | Multiples vulnérabilités dans les produits Apple | 2021-12-14T00:00:00.000000 | 2021-12-14T00:00:00.000000 |
| certfr-2021-avi-944 | Multiples vulnérabilités dans Microsoft Edge | 2021-12-13T00:00:00.000000 | 2021-12-13T00:00:00.000000 |
| certfr-2021-avi-943 | Multiples vulnérabilités dans les produits IBM | 2021-12-13T00:00:00.000000 | 2021-12-13T00:00:00.000000 |
| certfr-2021-avi-942 | Multiples vulnérabilités dans les produits GitLab | 2021-12-13T00:00:00.000000 | 2021-12-13T00:00:00.000000 |
| certfr-2021-avi-941 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-13T00:00:00.000000 | 2021-12-13T00:00:00.000000 |
| certfr-2021-avi-940 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-12-10T00:00:00.000000 | 2021-12-10T00:00:00.000000 |
| certfr-2021-avi-934 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-10T00:00:00.000000 | 2021-12-10T00:00:00.000000 |
| certfr-2021-avi-933 | Vulnérabilité dans les produits QNAP | 2021-12-10T00:00:00.000000 | 2021-12-10T00:00:00.000000 |
| certfr-2021-avi-932 | Multiples vulnérabilités dans les produits IBM | 2021-12-10T00:00:00.000000 | 2021-12-10T00:00:00.000000 |