Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81733 | 5.1 (v4.0) | WWBN AVideo through 30.0 CSRF via myLiveControls.save.… |
WWBN |
AVideo |
2026-08-28T10:49:23.235Z | 2026-08-29T11:48:17.019Z |
| cve-2026-81732 | 6.9 (v4.0) | WWBN AVideo through 30.0 Information Disclosure via re… |
WWBN |
AVideo |
2026-08-28T10:49:22.529Z | 2026-08-29T11:48:16.299Z |
| cve-2026-81678 | 6.9 (v4.0) 7.5 (v3.1) | AVideo SSRF Guard Bypass via IPv6 Transition Addresses |
WWBN |
AVideo |
2026-08-27T14:50:45.173Z | 2026-08-29T11:48:15.601Z |
| cve-2026-81102 | 2.3 (v4.0) 3.1 (v3.1) | Dropbox Dash MCP Server DNS Rebinding via Missing Host… |
dropbox |
mcp-server-dash |
2026-08-27T14:50:41.263Z | 2026-08-29T11:48:14.917Z |
| cve-2026-81101 | 6.9 (v4.0) 6.5 (v3.1) | Airtable MCP CLI before 0.2.5 Credential Disclosure vi… |
Airtable |
airtable-mcp-cli |
2026-08-27T14:50:40.449Z | 2026-08-29T11:48:14.223Z |
| cve-2026-81100 | 7.6 (v4.0) 6.8 (v3.1) | Timescale tiger-gh-mcp-server DNS Rebinding via Disabl… |
timescale |
tiger-gh-mcp-server |
2026-08-27T14:50:39.728Z | 2026-08-29T11:48:13.548Z |
| cve-2026-81099 | 7.6 (v4.0) 6.8 (v3.1) | Timescale tiger-slack DNS Rebinding via Disabled Host … |
timescale |
tiger-slack |
2026-08-27T14:50:39.029Z | 2026-08-29T11:48:12.861Z |
| cve-2026-81098 | 9.3 (v4.0) 9.1 (v3.1) | Telnyx MCP Server through 6.83.0 Missing Authenticatio… |
team-telnyx |
telnyx-mcp |
2026-08-27T14:50:38.327Z | 2026-08-29T11:48:12.176Z |
| cve-2026-81097 | 8.6 (v4.0) 8.4 (v3.1) | rails-mcp-server 1.4.0 through 1.6.0 OS Command Execut… |
maquina-app |
rails-mcp-server |
2026-08-27T14:50:37.617Z | 2026-08-29T11:48:11.453Z |
| cve-2026-81096 | 9.3 (v4.0) 10 (v3.1) | ToolUniverse through 1.2.6 Unauthenticated Remote Code… |
mims-harvard |
ToolUniverse |
2026-08-27T14:50:36.897Z | 2026-08-29T11:48:10.764Z |
| cve-2026-81095 | 7.6 (v4.0) 6.8 (v3.1) | Timescale pg-aiguide through 0.5.0 DNS Rebinding via D… |
timescale |
pg-aiguide |
2026-08-27T14:50:36.212Z | 2026-08-29T11:48:10.092Z |
| cve-2026-81094 | 9.3 (v4.0) 9.1 (v3.1) | mcp-router CLI before 0.6.3 Binds the MCP Aggregator t… |
mcp-router |
mcp-router |
2026-08-27T14:50:34.879Z | 2026-08-29T11:48:09.437Z |
| cve-2026-81093 | 8.7 (v4.0) 8.6 (v3.1) | Apify Actors MCP Server before 0.9.12 Server-Side Requ… |
apify |
actors-mcp-server |
2026-08-27T14:50:34.013Z | 2026-08-29T11:48:08.801Z |
| cve-2026-81092 | 7.6 (v4.0) 6.8 (v3.1) | mcp-go before 0.56.0 Missing Host Header Validation En… |
mark3labs |
mcp-go |
2026-08-27T14:50:33.286Z | 2026-08-29T11:48:08.125Z |
| cve-2026-81091 | 8.7 (v4.0) 8.6 (v3.1) | mcp-use Inspector Proxy Server-Side Request Forgery vi… |
mcp-use |
mcp-use |
2026-08-27T14:50:32.568Z | 2026-08-29T11:48:07.418Z |
| cve-2026-80427 | 8.6 (v4.0) 8.4 (v3.1) | bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument I… |
nfriedly |
bestzip |
2026-08-26T15:44:55.220Z | 2026-08-29T11:48:06.751Z |
| cve-2026-80426 | 7 (v4.0) 7.1 (v3.1) | FiftyOne before 1.21.0 Stored Cross-Site Scripting via… |
voxel51 |
fiftyone |
2026-08-26T15:44:54.517Z | 2026-08-29T11:48:06.089Z |
| cve-2026-80350 | 7.1 (v4.0) 7.1 (v3.1) | OneUptime before 12.0.7 Server-Side Request Forgery vi… |
OneUptime |
OneUptime |
2026-08-26T10:09:50.075Z | 2026-08-29T11:48:05.396Z |
| cve-2026-80192 | 8.6 (v4.0) 8.1 (v3.1) | better-auth SSO before 1.6.27 Domain Ownership Authent… |
better-auth |
sso |
2026-08-25T23:19:00.371Z | 2026-08-29T11:48:04.728Z |
| cve-2026-80191 | 8.7 (v4.0) 7.5 (v3.1) | GROWI before 8.0.2 Missing Authorization on Attachment… |
GROWI, Inc. |
GROWI |
2026-08-25T23:18:59.672Z | 2026-08-29T11:48:04.052Z |
| cve-2026-80189 | 7.1 (v4.0) 6.5 (v3.1) | LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource C… |
perber |
leafwiki |
2026-08-25T23:18:58.993Z | 2026-08-29T11:48:03.392Z |
| cve-2026-80104 | 9.3 (v4.0) 9.8 (v3.1) | DB-GPT 0.8.0 Path Traversal Arbitrary File Write via S… |
eosphoros-ai |
DB-GPT |
2026-08-25T20:18:35.843Z | 2026-08-29T11:48:02.709Z |
| cve-2026-79785 | 8.2 (v4.0) 5.9 (v3.1) | X-AnyLabeling before 4.0.0-beta.9 Improper Certificate… |
CVHub520 |
X-AnyLabeling |
2026-08-25T16:03:20.305Z | 2026-08-29T11:48:02.041Z |
| cve-2026-79775 | 7.1 (v4.0) 6.5 (v3.1) | rclone Archive Backend SquashFS Parser Denial of Service |
rclone |
rclone |
2026-08-25T15:16:06.427Z | 2026-08-29T11:48:01.347Z |
| cve-2026-79671 | 5.1 (v4.0) 5.5 (v3.1) | Ech0 before 4.4.3 SSRF via DNS Resolution Bypass |
lin-snow |
Ech0 |
2026-08-25T11:33:32.174Z | 2026-08-29T11:48:00.599Z |
| cve-2026-78209 | 8.4 (v4.0) 8.2 (v3.1) | exceljs through 4.4.0 CSV Formula Injection via Unesca… |
exceljs |
exceljs |
2026-08-24T00:30:48.493Z | 2026-08-29T11:47:59.263Z |
| cve-2026-78208 | 8.7 (v4.0) 7.5 (v3.1) | exceljs through 4.4.0 Path Traversal via Unvalidated a… |
exceljs |
exceljs |
2026-08-24T00:30:47.795Z | 2026-08-29T11:47:58.602Z |
| cve-2026-78207 | 9.3 (v4.0) 9.4 (v3.1) | exceljs through 4.4.0 Prototype Pollution via deepMerg… |
exceljs |
exceljs |
2026-08-24T00:30:47.125Z | 2026-08-29T11:47:57.933Z |
| cve-2026-78206 | 8.7 (v4.0) 7.5 (v3.1) | exceljs through 4.4.0 Uncontrolled Resource Consumptio… |
exceljs |
exceljs |
2026-08-24T00:30:46.462Z | 2026-08-29T11:47:57.243Z |
| cve-2026-78122 | 8.3 (v4.0) 7.4 (v3.1) | docker-socket-proxy through 0.5.0 Insufficient Access … |
Tecnativa |
docker-socket-proxy |
2026-08-22T23:06:32.896Z | 2026-08-29T11:47:56.573Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000903 | TvRock vulnerable to denial-of-service (DoS) | 2024-04-23T18:21+09:00 | 2024-04-23T18:21+09:00 |
| jvndb-2023-000119 | Ruckus Access Point contains a cross-site scripting vulnerability. | 2023-12-01T14:58+09:00 | 2024-04-23T17:51+09:00 |
| jvndb-2023-000112 | Multiple vulnerabilities in Pleasanter | 2023-11-13T15:57+09:00 | 2024-04-22T17:56+09:00 |
| jvndb-2024-003108 | Armeria-saml improperly handles SAML messages | 2024-04-22T17:28+09:00 | 2024-04-22T17:28+09:00 |
| jvndb-2023-000122 | Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series | 2023-12-11T14:12+09:00 | 2024-04-22T16:55+09:00 |
| jvndb-2023-002413 | Multiple vulnerabilities in ELECOM and LOGITEC wireless LAN routers | 2023-07-12T16:15+09:00 | 2024-04-22T16:18+09:00 |
| jvndb-2023-002270 | Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server | 2023-06-30T11:49+09:00 | 2024-04-22T16:07+09:00 |
| jvndb-2023-014491 | LINE client for iOS vulnerable to improper server certificate verification | 2024-04-22T15:27+09:00 | 2024-04-22T15:27+09:00 |
| jvndb-2023-000075 | Improper restriction of XML external entity references (XXE) in Applicant Programme | 2023-07-24T15:44+09:00 | 2024-04-22T14:20+09:00 |
| jvndb-2023-002722 | Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass | 2023-07-27T18:12+09:00 | 2024-04-19T18:07+09:00 |
| jvndb-2023-000076 | SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS) | 2023-08-02T14:55+09:00 | 2024-04-19T17:27+09:00 |
| jvndb-2023-000062 | "WPS Office" vulnerable to OS command injection | 2023-06-12T12:57+09:00 | 2024-04-18T17:49+09:00 |
| jvndb-2023-000048 | ASUS Router RT-AX3000 vulnerable to using sensitive cookies without 'Secure' attribute | 2023-06-09T15:18+09:00 | 2024-04-18T17:44+09:00 |
| jvndb-2023-002022 | Multiple vulnerabilities in FUJI ELECTRIC FRENIC RHC Loader | 2023-06-05T15:55+09:00 | 2024-04-18T17:40+09:00 |
| jvndb-2023-002906 | Multiple vulnerabilities in Panasonic Control FPWIN Pro7 | 2023-08-22T18:02+09:00 | 2024-04-18T17:31+09:00 |
| jvndb-2023-011403 | ELECOM wireless LAN routers vulnerable to OS command injection | 2023-12-13T15:06+09:00 | 2024-04-18T17:22+09:00 |
| jvndb-2024-000041 | Multiple vulnerabilities in WordPress Plugin "Forminator" | 2024-04-18T13:53+09:00 | 2024-04-18T13:53+09:00 |
| jvndb-2023-000070 | Multiple vulnerabilities in WordPress Plugin "TS Webfonts for SAKURA" | 2023-07-20T16:05+09:00 | 2024-04-17T17:20+09:00 |
| jvndb-2022-017175 | Proscend Communications M330-W and M330-W5 vulnerable to OS command injection | 2024-04-16T14:30+09:00 | 2024-04-16T14:30+09:00 |
| jvndb-2024-000040 | Multiple vulnerabilities in BUFFALO wireless LAN routers | 2024-04-15T16:29+09:00 | 2024-04-15T16:29+09:00 |
| jvndb-2023-000074 | Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials | 2023-07-26T18:00+09:00 | 2024-04-12T18:04+09:00 |
| jvndb-2023-000073 | GBrowse vulnerable to unrestricted upload of files with dangerous types | 2023-07-21T15:02+09:00 | 2024-04-12T17:31+09:00 |
| jvndb-2023-002905 | Multiple vulnerabilities in CBC digital video recorders | 2023-08-22T17:35+09:00 | 2024-04-10T17:39+09:00 |
| jvndb-2024-000039 | Multiple vulnerabilities in a-blog cms | 2024-04-10T13:55+09:00 | 2024-04-10T13:55+09:00 |
| jvndb-2021-000088 | Multiple vulnerabilities in Cybozu Remote Service | 2021-09-30T16:03+09:00 | 2024-04-08T18:09+09:00 |
| jvndb-2024-000038 | Multiple vulnerabilities in WordPress Plugin "Ninja Forms" | 2024-04-08T13:44+09:00 | 2024-04-08T13:44+09:00 |
| jvndb-2022-002765 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-11-28T15:40+09:00 | 2024-04-05T18:15+09:00 |
| jvndb-2023-002786 | Multiple vulnerabilities in OMRON CX-Programmer | 2023-08-03T13:42+09:00 | 2024-04-05T17:39+09:00 |
| jvndb-2024-000037 | Multiple vulnerabilities in NEC Aterm series | 2024-04-05T14:53+09:00 | 2024-04-05T14:53+09:00 |
| jvndb-2024-003067 | Multiple vulnerabilities in PLANEX COMMUNICATIONS wireless LAN routers | 2024-04-05T14:17+09:00 | 2024-04-05T14:17+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0350 | Multiples vulnérabilités dans Squid | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0349 | Multiples vulnérabilités dans Ruby on Rails | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0348 | Vulnérabilité dans Trend Micro Deep Discovery Inspector | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0347 | Vulnérabilité dans Xen | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0346 | Vulnérabilité dans VMware Tanzu pour Postgres | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0345 | Vulnérabilité dans LibreNMS | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0344 | Vulnérabilité dans strongSwan | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0343 | Vulnérabilité dans Spring Cloud Config | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0342 | Multiples vulnérabilités dans Google Chrome | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0341 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0340 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0339 | Multiples vulnérabilités dans les produits VMware | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0338 | Vulnérabilité dans les produits Synology | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0337 | Multiples vulnérabilités dans les produits Citrix | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0336 | Multiples vulnérabilités dans les produits Qnap | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0335 | Vulnérabilité dans CPython | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0334 | Vulnérabilité dans les produits Microsoft | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0333 | Multiples vulnérabilités dans Traefik | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0332 | Vulnérabilité dans Oracle Identity Manager et Web Services Manager | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0331 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0330 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0329 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0328 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0327 | Multiples vulnérabilités dans les produits IBM | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0326 | Multiples vulnérabilités dans les produits VMware | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0325 | Multiples vulnérabilités dans les produits Elastic | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0324 | Multiples vulnérabilités dans Google Chrome | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0323 | Multiples vulnérabilités dans les produits Spring | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0322 | Multiples vulnérabilités dans les produits VMware | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |
| certfr-2026-avi-0321 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-19T00:00:00.000000 | 2026-03-19T00:00:00.000000 |