Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82483 | coppermine-gallery Coppermine Photo Gallery Hidden Alb… |
coppermine-gallery |
Coppermine Photo Gallery |
2026-08-30T08:00:08.622Z | 2026-08-30T08:00:08.622Z | |
| cve-2026-82482 | coppermine-gallery Coppermine Photo Gallery edit_profi… |
coppermine-gallery |
Coppermine Photo Gallery |
2026-08-30T06:15:07.449Z | 2026-08-30T06:15:07.449Z | |
| cve-2026-81766 | N/A | Really Simple Security < 9.8.0 - Multisite Subsite Adm… |
Unknown |
Really Simple Security |
2026-08-30T06:00:18.989Z | 2026-08-30T06:00:18.989Z |
| cve-2026-81660 | N/A | Groundhogg < 4.5.13 - Unauthenticated Stored XSS via W… |
Unknown |
Groundhogg — CRM, Newsletters, and Marketing Automation |
2026-08-30T06:00:18.805Z | 2026-08-30T06:00:18.805Z |
| cve-2026-78364 | N/A | MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Da… |
Unknown |
MW WP Form |
2026-08-30T06:00:18.632Z | 2026-08-30T06:00:18.632Z |
| cve-2026-76585 | N/A | Customer Reviews for WooCommerce < 5.118.0 - Unauthent… |
Unknown |
Customer Reviews for WooCommerce |
2026-08-30T06:00:18.435Z | 2026-08-30T06:00:18.435Z |
| cve-2026-19722 | N/A | WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrar… |
Unknown |
WPvivid — Backup, Migration & Staging |
2026-08-30T06:00:18.252Z | 2026-08-30T06:00:18.252Z |
| cve-2026-14307 | N/A | Geotargeting WP < 3.5.6.2 - Reflected XSS |
Unknown |
geotargetingwp |
2026-08-30T06:00:18.078Z | 2026-08-30T06:00:18.078Z |
| cve-2026-14835 | N/A | SOGO Add Script to Individual Pages Header Footer <= 3… |
Unknown |
SOGO Add Script to Individual Pages Header Footer |
2026-08-30T06:00:17.612Z | 2026-08-30T06:00:17.612Z |
| cve-2026-82480 | NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUser… |
NASA |
cFS |
2026-08-30T05:30:09.275Z | 2026-08-30T05:30:09.275Z | |
| cve-2026-82479 | NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow |
NASA |
cFS |
2026-08-30T05:00:09.833Z | 2026-08-30T05:00:09.833Z | |
| cve-2026-15980 | MyHome Core <= 4.4.5 - Authentication Bypass to Accoun… |
TangibleWP |
MyHome Core |
2026-08-30T04:25:48.138Z | 2026-08-30T04:25:48.138Z | |
| cve-2026-82478 | NASA Trick TCP Socket JSONVariableServerThread.cpp par… |
NASA |
Trick |
2026-08-30T04:15:09.966Z | 2026-08-30T04:15:09.966Z | |
| cve-2026-77846 | 2.1 (v4.0) | JSON path injection via unescaped get_path segments in… |
ash-project |
ash_sqlite |
2026-08-30T02:52:12.562Z | 2026-08-30T02:52:12.562Z |
| cve-2026-75759 | 7.6 (v4.0) | Encrypted ID token or JARM response accepted without a… |
erlef |
oidcc |
2026-08-30T01:12:43.435Z | 2026-08-30T01:12:43.435Z |
| cve-2026-77831 | 2.1 (v4.0) | Algorithmic-complexity denial of service in AshPaperTr… |
ash-project |
ash_paper_trail |
2026-08-30T00:18:38.078Z | 2026-08-30T00:18:38.078Z |
| cve-2026-77970 | 5.9 (v4.0) | Sensitive fields nested in embedded values are not red… |
ash-project |
ash_paper_trail |
2026-08-30T00:18:22.853Z | 2026-08-30T00:18:22.853Z |
| cve-2026-75847 | 5.9 (v4.0) | Sensitive attribute values stored in a non-sensitive p… |
ash-project |
ash_paper_trail |
2026-08-30T00:18:05.390Z | 2026-08-30T00:18:05.390Z |
| cve-2026-82562 | 3.7 (v3.1) 6.3 (v4.0) | qs.parse does not enforce arrayLimit on comma groups u… |
ljharb |
qs |
2026-08-29T23:58:31.289Z | 2026-08-29T23:58:31.289Z |
| cve-2026-82417 | 5.3 (v3.1) 6.3 (v4.0) | qs.stringify throws TypeError on objects with a non-ca… |
ljharb |
qs |
2026-08-29T23:51:27.634Z | 2026-08-29T23:51:27.634Z |
| cve-2026-82424 | PHPGurukul Student Information System student_edit1.ph… |
PHPGurukul |
Student Information System |
2026-08-29T22:45:11.005Z | 2026-08-29T22:45:11.005Z | |
| cve-2026-82423 | macrozheng mall Payment Status Endpoint paySuccess beh… |
macrozheng |
mall |
2026-08-29T22:15:10.867Z | 2026-08-29T22:15:10.867Z | |
| cve-2026-82422 | itsourcecode Sales and Inventory System emp_del.php sq… |
itsourcecode |
Sales and Inventory System |
2026-08-29T21:45:09.789Z | 2026-08-29T21:45:09.789Z | |
| cve-2026-82421 | itsourcecode Sales and Inventory System emp_edit.php s… |
itsourcecode |
Sales and Inventory System |
2026-08-29T21:00:12.247Z | 2026-08-29T21:00:12.247Z | |
| cve-2026-15369 | Custom User Registration Fields for WooCommerce <= 2.2… |
Addify |
Custom User Registration Fields for WooCommerce |
2026-08-29T19:26:34.288Z | 2026-08-29T19:26:34.288Z | |
| cve-2026-75807 | SAML Single Sign On <= 5.4.6 - Unauthenticated Authent… |
cyberlord92 |
SAML Single Sign On – SSO Login |
2026-08-29T17:25:48.408Z | 2026-08-29T17:25:48.408Z | |
| cve-2026-82476 | 6.9 (v4.0) 5.3 (v3.1) | Memos through 0.30.0 SSRF via Omitted CGNAT Address Range |
usememos |
memos |
2026-08-29T16:35:36.039Z | 2026-08-29T16:35:36.039Z |
| cve-2026-82475 | 8.6 (v4.0) 8.1 (v3.1) | iFlytek astron-agent through 1.1.1 Workflow Hijacking … |
iflytek |
astron-agent |
2026-08-29T16:35:34.514Z | 2026-08-29T16:35:34.514Z |
| cve-2026-82474 | 8.5 (v4.0) 7.8 (v3.1) | Sudo through 1.9.17p2 Intercept Policy Bypass via execveat |
sudo-project |
sudo |
2026-08-29T16:35:33.836Z | 2026-08-29T16:35:33.836Z |
| cve-2026-82473 | 8.8 (v4.0) 8.2 (v3.1) | KubeEdge CloudCore through 1.23.1 Missing Authenticati… |
kubeedge |
kubeedge |
2026-08-29T16:35:33.159Z | 2026-08-29T16:35:33.159Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-000125 | Multiple vulnerabilities in SOY series | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000124 | Zabbix agent may insecurely load Dynamic Link Libraries | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000089 | Multiple vulnerabilities in GROWI | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000110 | Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries | 2026-08-27T14:30+09:00 | 2026-08-27T14:30+09:00 |
| jvndb-2026-030097 | FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration | 2026-08-26T16:04+09:00 | 2026-08-26T16:04+09:00 |
| jvndb-2026-000123 | Android App "Myna Point" vulnerable to improper access restriction | 2026-08-26T14:42+09:00 | 2026-08-26T14:42+09:00 |
| jvndb-2026-000122 | Multiple vulnerabilities in CorvusSKK | 2026-08-26T14:42+09:00 | 2026-08-26T14:42+09:00 |
| jvndb-2026-000121 | Apache Struts 2 vulnerable to resource exhaustion | 2026-08-25T14:00+09:00 | 2026-08-25T14:00+09:00 |
| jvndb-2026-029749 | Security information for Hitachi Disk Array Systems | 2026-08-24T17:04+09:00 | 2026-08-24T17:04+09:00 |
| jvndb-2026-029751 | Multiple vulnerabilities in Yamaha VOCALOID6 Editor | 2026-08-24T16:31+09:00 | 2026-08-24T16:31+09:00 |
| jvndb-2026-000115 | Sakura Editor vulnerable to OS command injection | 2026-08-24T16:21+09:00 | 2026-08-24T16:21+09:00 |
| jvndb-2026-000097 | Multiple vulnerabilities in SKYSEA Client View and SKYMEC IT Manager | 2026-08-24T16:21+09:00 | 2026-08-25T12:15+09:00 |
| jvndb-2026-029323 | Multiple SEIKO EPSON printers and scanners keep already revoked root certificates | 2026-08-21T15:55+09:00 | 2026-08-21T15:55+09:00 |
| jvndb-2026-000120 | Miraikan Assist App vulnerable to cross-site scripting | 2026-08-21T15:39+09:00 | 2026-08-21T15:39+09:00 |
| jvndb-2026-000119 | UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function | 2026-08-21T15:39+09:00 | 2026-08-21T15:39+09:00 |
| jvndb-2026-000118 | Multiple vulnerabilities in acmailer | 2026-08-19T14:06+09:00 | 2026-08-19T14:06+09:00 |
| jvndb-2026-000116 | Apache Allura vulnerable to server-side request forgery | 2026-08-18T13:43+09:00 | 2026-08-18T13:43+09:00 |
| jvndb-2026-000113 | Improper file access permission settings in Synology Assistant | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000112 | F-RevoCRM vulnerable to cross-site scripting | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000111 | miChecker improper restriction of XML external entity references | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000114 | VoiceTra vulnerable to incorrectly specified destination in a communication channel | 2026-08-13T13:36+09:00 | 2026-08-13T13:36+09:00 |
| jvndb-2026-000109 | Installer for LINE for Windows insecurely loads Dynamic Link Libraries | 2026-08-10T16:37+09:00 | 2026-08-10T16:37+09:00 |
| jvndb-2026-000108 | Multiple vulnerabilities in NetKids iMark | 2026-08-05T15:41+09:00 | 2026-08-05T15:41+09:00 |
| jvndb-2026-026853 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026852 | Multiple Vulnerabilities in Hitachi Ops Center Common Services | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026851 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026850 | Vulnerability in Cosminexus HTTP Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026849 | Vulnerability in Cosminexus HTTP Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-000107 | freo2 vulnerable to unrestricted upload of file with dangerous type | 2026-08-04T14:15+09:00 | 2026-08-04T14:15+09:00 |
| jvndb-2026-026400 | Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App | 2026-08-04T14:10+09:00 | 2026-08-05T12:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-1095 | Multiples vulnérabilités dans Papercut | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1094 | Multiples vulnérabilités dans les produits IBM | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1093 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1092 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1091 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1090 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1089 | Multiples vulnérabilités dans Tenable Enclave Security | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1088 | Multiples vulnérabilités dans Traefik | 2026-08-27T00:00:00.000000 | 2026-08-27T00:00:00.000000 |
| certfr-2026-avi-1087 | Vulnérabilité dans CPython | 2026-08-27T00:00:00.000000 | 2026-08-27T00:00:00.000000 |
| certfr-2026-avi-1086 | Multiples vulnérabilités dans GitLab | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1085 | Multiples vulnérabilités dans Redmine | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1084 | Multiples vulnérabilités dans SonicWall NetExtender | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1083 | Multiples vulnérabilités dans Apache Tomcat | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1082 | Vulnérabilité dans Apereo CAS | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1081 | Multiples vulnérabilités dans Google Chrome | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1080 | Multiples vulnérabilités dans les produits Veeam | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1079 | Multiples vulnérabilités dans OpenSSL | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1078 | Multiples vulnérabilités dans Keycloak | 2026-08-25T00:00:00.000000 | 2026-08-25T00:00:00.000000 |
| certfr-2026-avi-1077 | Multiples vulnérabilités dans Cisco IOS XE | 2026-08-25T00:00:00.000000 | 2026-08-25T00:00:00.000000 |
| certfr-2026-avi-1076 | Multiples vulnérabilités dans LibreNMS | 2026-08-24T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1075 | Multiples vulnérabilités dans Metabase | 2026-08-24T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1074 | Vulnérabilité dans Microsoft Entra ID | 2026-08-21T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1073 | Multiples vulnérabilités dans les produits Microsoft | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1072 | Vulnérabilité dans Microsoft Office | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1071 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1070 | Multiples vulnérabilités dans Traefik | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1069 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1068 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1067 | Multiples vulnérabilités dans les produits IBM | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1066 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-ale-008 | Multiples vulnérabilités dans Microsoft Sharepoint | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-ale-007 | Multiples vulnérabilités dans WordPress | 2026-07-20T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-ale-006 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2026-07-15T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-ale-005 | [Màj] Vulnérabilité dans Microsoft Exchange Server | 2026-05-15T00:00:00.000000 | 2026-07-13T00:00:00.000000 |
| certfr-2026-ale-004 | Vulnérabilité dans F5 BIG-IP Access Policy Manager | 2026-03-31T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-ale-003 | Note d’alerte – Ciblage des messageries instantanées | 2026-03-20T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-ale-002 | [MàJ] Vulnérabilité dans Cisco Catalyst SD-WAN | 2026-02-25T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-ale-001 | [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile | 2026-01-30T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2025-ale-014 | [MàJ] Vulnérabilité dans React Server Components | 2025-12-05T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2025-ale-013 | [MàJ] Multiples vulnérabilités dans Cisco ASA et FTD | 2025-09-25T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-ale-012 | Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway | 2025-08-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-ale-011 | Incidents de sécurité dans les pare-feux SonicWall | 2025-08-05T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-ale-010 | [MàJ] Multiples vulnérabilités dans Microsoft SharePoint | 2025-07-21T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-ale-009 | Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway | 2025-07-01T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-ale-008 | [MàJ] Vulnérabilité dans Roundcube | 2025-06-05T00:00:00.000000 | 2025-07-21T00:00:00.000000 |
| certfr-2025-ale-007 | Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-14T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-006 | Vulnérabilité dans les produits Fortinet | 2025-05-13T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-005 | Vulnérabilité dans SAP NetWeaver | 2025-04-28T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-004 | Activités de post-exploitation dans Fortinet FortiGate | 2025-04-11T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-ale-003 | [MàJ] Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-002 | [MàJ] Vulnérabilité dans les produits Fortinet | 2025-01-14T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-ale-001 | [MàJ] Vulnérabilité dans les produits Ivanti | 2025-01-09T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2024-ale-015 | [MàJ] Multiples vulnérabilités sur l'interface d'administration des équipements Palo Alto Networks | 2024-11-15T00:00:00.000000 | 2025-01-27T00:00:00.000000 |
| certfr-2024-ale-014 | [MàJ] Multiples vulnérabilités dans Fortinet FortiManager | 2024-10-23T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2024-ale-013 | Exploitations de vulnérabilités dans Ivanti Cloud Services Appliance (CSA) | 2024-10-22T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2024-ale-012 | [MàJ] Vulnérabilités affectant OpenPrinting CUPS | 2024-09-27T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-ale-011 | Vulnérabilité dans SonicWall | 2024-09-10T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-ale-010 | Multiples vulnérabilités dans Roundcube | 2024-08-09T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| certfr-2024-ale-009 | Vulnérabilité dans OpenSSH | 2024-07-01T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| certfr-2024-ale-008 | [MàJ] Vulnérabilité dans les produits Check Point | 2024-05-30T00:00:00.000000 | 2024-07-01T00:00:00.000000 |