Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79671 | 5.1 (v4.0) 5.5 (v3.1) | Ech0 before 4.4.3 SSRF via DNS Resolution Bypass |
lin-snow |
Ech0 |
2026-08-25T11:33:32.174Z | 2026-08-29T11:48:00.599Z |
| cve-2026-78209 | 8.4 (v4.0) 8.2 (v3.1) | exceljs through 4.4.0 CSV Formula Injection via Unesca… |
exceljs |
exceljs |
2026-08-24T00:30:48.493Z | 2026-08-29T11:47:59.263Z |
| cve-2026-78208 | 8.7 (v4.0) 7.5 (v3.1) | exceljs through 4.4.0 Path Traversal via Unvalidated a… |
exceljs |
exceljs |
2026-08-24T00:30:47.795Z | 2026-08-29T11:47:58.602Z |
| cve-2026-78207 | 9.3 (v4.0) 9.4 (v3.1) | exceljs through 4.4.0 Prototype Pollution via deepMerg… |
exceljs |
exceljs |
2026-08-24T00:30:47.125Z | 2026-08-29T11:47:57.933Z |
| cve-2026-78206 | 8.7 (v4.0) 7.5 (v3.1) | exceljs through 4.4.0 Uncontrolled Resource Consumptio… |
exceljs |
exceljs |
2026-08-24T00:30:46.462Z | 2026-08-29T11:47:57.243Z |
| cve-2026-78122 | 8.3 (v4.0) 7.4 (v3.1) | docker-socket-proxy through 0.5.0 Insufficient Access … |
Tecnativa |
docker-socket-proxy |
2026-08-22T23:06:32.896Z | 2026-08-29T11:47:56.573Z |
| cve-2026-77939 | 7.1 (v4.0) 6.5 (v3.1) | Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint |
flextype |
flextype |
2026-08-28T17:06:51.132Z | 2026-08-29T11:47:55.894Z |
| cve-2026-77923 | 5.3 (v4.0) 4.3 (v3.1) | Dolibarr 21.0.0 < 24.0.0 Authorization Bypass via clon… |
Dolibarr |
dolibarr |
2026-08-24T19:23:28.160Z | 2026-08-29T11:47:55.204Z |
| cve-2026-77915 | 9.3 (v4.0) 9.8 (v3.1) | rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registr… |
rconfig |
rconfig |
2026-08-24T16:11:44.667Z | 2026-08-29T11:47:54.529Z |
| cve-2026-77914 | 7.1 (v4.0) 6.5 (v3.1) | rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Ex… |
rconfig |
rconfig |
2026-08-24T16:07:58.448Z | 2026-08-29T11:47:53.860Z |
| cve-2026-77088 | 5.3 (v4.0) 6.1 (v3.1) | justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via… |
EmilStenstrom |
justhtml |
2026-08-23T13:34:12.574Z | 2026-08-29T11:47:53.161Z |
| cve-2026-76842 | 8.8 (v4.0) 8.2 (v3.1) | Mercado Pago Node.js SDK through 3.4.0 Path Injection … |
mercadopago |
mercadopago |
2026-08-24T13:11:59.790Z | 2026-08-29T11:47:52.494Z |
| cve-2026-76841 | 8.7 (v4.0) 8.8 (v3.1) | Xinference through 2.11.0 Remote Code Execution via Ha… |
xorbitsai |
inference |
2026-08-24T13:11:59.094Z | 2026-08-29T11:47:51.824Z |
| cve-2026-76840 | 8.5 (v4.0) 9.6 (v3.1) | RustDesk through 1.4.9 Heap Buffer Overflow via Unvali… |
rustdesk |
rustdesk |
2026-08-24T13:11:58.408Z | 2026-08-29T11:47:51.166Z |
| cve-2026-76838 | 8.4 (v4.0) 8.5 (v3.1) | Hi.Events before 1.11.1-beta Server-Side Request Forge… |
HiEventsDev |
Hi.Events |
2026-08-24T17:36:02.928Z | 2026-08-29T11:47:50.490Z |
| cve-2026-76837 | 5.3 (v4.0) 6.4 (v3.1) | Baserow before 2.3.0 Stored Cross-Site Scripting via R… |
Baserow |
Baserow |
2026-08-24T17:36:02.268Z | 2026-08-29T11:47:49.784Z |
| cve-2026-76836 | 8.7 (v4.0) 8.8 (v3.1) | AzuraCast through 0.23.8 Liquidsoap Configuration Writ… |
AzuraCast |
AzuraCast |
2026-08-24T17:36:01.620Z | 2026-08-29T11:47:49.114Z |
| cve-2026-76835 | 9.3 (v4.0) 9.1 (v3.1) | OAuth2 Proxy 7.15.2 through 7.15.4 Authentication Bypa… |
oauth2-proxy |
oauth2-proxy |
2026-08-24T17:55:39.829Z | 2026-08-29T11:47:48.465Z |
| cve-2026-75575 | 6.9 (v4.0) 5.3 (v3.1) | Rocket.Chat Missing DDP Rate Limit on the sendForgotPa… |
RocketChat |
Rocket.Chat |
2026-08-25T01:30:29.898Z | 2026-08-29T11:47:47.758Z |
| cve-2026-75486 | 8.5 (v4.0) 8 (v3.1) | Synk Sweater Comb < 3.8.8 Command Injection via .verve… |
snyk |
sweater-comb |
2026-08-28T15:47:21.519Z | 2026-08-29T11:47:47.089Z |
| cve-2026-73108 | 8.7 (v4.0) 7.5 (v3.1) | RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS vi… |
rustdesk |
rustdesk |
2026-08-26T13:00:29.283Z | 2026-08-29T11:47:46.413Z |
| cve-2026-73102 | 6.9 (v4.0) 5.7 (v3.1) | RustDesk Path Traversal via macOS Clipboard File-Paste |
rustdesk |
rustdesk |
2026-08-26T13:00:00.405Z | 2026-08-29T11:47:45.736Z |
| cve-2026-72711 | 6.8 (v4.0) 6.3 (v3.1) | Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration… |
leanprover |
lean4 |
2026-08-24T20:08:33.219Z | 2026-08-29T11:47:45.059Z |
| cve-2026-72705 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoin… |
rocq-prover |
rocq |
2026-08-24T20:08:32.535Z | 2026-08-29T11:47:44.348Z |
| cve-2026-72704 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Guard Checker Trusts Corrupt… |
rocq-prover |
rocq |
2026-08-24T20:08:31.787Z | 2026-08-29T11:47:43.676Z |
| cve-2026-72703 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts No… |
rocq-prover |
rocq |
2026-08-24T20:08:30.607Z | 2026-08-29T11:47:43.005Z |
| cve-2026-72699 | 9.3 (v4.0) 5.3 (v3.1) | Grav Login Plugin before 3.9.1 Email Enumeration via R… |
getgrav |
grav-plugin-login |
2026-08-25T01:30:21.863Z | 2026-08-29T11:47:42.332Z |
| cve-2026-71511 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Members REST API Sensitive Data Expo… |
Dolibarr |
dolibarr |
2026-08-24T19:06:35.183Z | 2026-08-29T11:47:41.626Z |
| cve-2026-71510 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Users REST API SQL Injection via fil… |
Dolibarr |
dolibarr |
2026-08-24T19:05:39.848Z | 2026-08-29T11:47:40.942Z |
| cve-2026-71509 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Expense Report REST API Improper Aut… |
Dolibarr |
dolibarr |
2026-08-24T19:04:52.122Z | 2026-08-29T11:47:40.171Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000077 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext | 2023-08-04T17:31+09:00 | 2024-04-03T17:19+09:00 |
| jvndb-2024-003051 | FURUNO SYSTEMS Managed Switch ACERA 9010 running in non MS mode with the initial configuration has no password | 2024-04-02T18:03+09:00 | 2024-04-02T18:03+09:00 |
| jvndb-2024-003050 | KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries | 2024-04-01T14:44+09:00 | 2024-04-01T14:44+09:00 |
| jvndb-2023-000071 | Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters | 2023-07-11T15:37+09:00 | 2024-03-29T15:28+09:00 |
| jvndb-2024-000036 | "Yahoo! JAPAN" App vulnerable to cross-site scripting | 2024-03-29T13:28+09:00 | 2024-03-29T13:28+09:00 |
| jvndb-2023-000079 | Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API | 2023-08-07T15:15+09:00 | 2024-03-28T18:08+09:00 |
| jvndb-2023-000081 | "Rikunabi NEXT" App for Android fails to restrict custom URL schemes properly | 2023-08-09T12:45+09:00 | 2024-03-28T18:01+09:00 |
| jvndb-2023-000080 | "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly | 2023-08-07T17:39+09:00 | 2024-03-28T17:54+09:00 |
| jvndb-2023-000078 | Multiple vulnerabilities in Proself | 2023-08-18T13:47+09:00 | 2024-03-28T17:43+09:00 |
| jvndb-2024-003047 | SEEnergy SVR-116 vulnerable to OS command injection | 2024-03-28T11:38+09:00 | 2024-03-28T11:38+09:00 |
| jvndb-2024-003026 | Security information for Hitachi Disk Array Systems | 2024-03-27T15:52+09:00 | 2024-03-27T15:52+09:00 |
| jvndb-2024-000035 | Multiple vulnerabilities in WordPress Plugin "Survey Maker" | 2024-03-27T14:48+09:00 | 2024-03-27T14:48+09:00 |
| jvndb-2024-000034 | SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries | 2024-03-27T14:31+09:00 | 2024-03-27T14:31+09:00 |
| jvndb-2023-000086 | Rakuten WiFi Pocket vulnerable to improper authentication | 2023-08-23T12:42+09:00 | 2024-03-27T13:43+09:00 |
| jvndb-2024-000905 | Mini Thread vulnerable to cross-site scripting | 2024-03-26T17:43+09:00 | 2024-03-26T17:43+09:00 |
| jvndb-2023-012042 | WordPress plugin "MW WP Form" vulnerable to arbitrary file upload | 2023-12-15T15:17+09:00 | 2024-03-26T17:39+09:00 |
| jvndb-2023-000083 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-08-21T13:29+09:00 | 2024-03-26T17:09+09:00 |
| jvndb-2024-000906 | ffBull vulnerable to OS command injection | 2024-03-26T16:07+09:00 | 2024-03-26T16:07+09:00 |
| jvndb-2024-000900 | "EasyRange" may insecurely load executable files | 2024-03-26T15:50+09:00 | 2024-03-26T15:50+09:00 |
| jvndb-2024-000907 | 0ch BBS Script (0ch) vulnerable to cross-site scripting | 2024-03-26T15:35+09:00 | 2024-03-26T15:35+09:00 |
| jvndb-2024-000902 | TvRock vulnerable to cross-site scripting | 2024-03-26T14:27+09:00 | 2024-03-26T14:27+09:00 |
| jvndb-2024-000904 | WebProxy vulnerable to OS command injection | 2024-03-26T14:19+09:00 | 2024-03-26T14:19+09:00 |
| jvndb-2023-025113 | BUFFALO LinkStation 200 series vulnerable to arbitrary code execution | 2024-03-25T18:16+09:00 | 2024-03-25T18:16+09:00 |
| jvndb-2023-000082 | EC-CUBE 2 series vulnerable to cross-site scripting | 2023-08-17T15:12+09:00 | 2024-03-25T18:07+09:00 |
| jvndb-2023-000084 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2023-08-21T14:05+09:00 | 2024-03-25T17:55+09:00 |
| jvndb-2024-000033 | WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery | 2024-03-25T13:31+09:00 | 2024-03-25T13:31+09:00 |
| jvndb-2023-000055 | ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal | 2023-05-26T13:58+09:00 | 2024-03-21T17:15+09:00 |
| jvndb-2023-000053 | Tornado vulnerable to open redirect | 2023-05-22T13:30+09:00 | 2024-03-21T17:05+09:00 |
| jvndb-2023-000058 | Pleasanter vulnerable to cross-site scripting | 2023-05-31T15:34+09:00 | 2024-03-19T18:17+09:00 |
| jvndb-2023-002002 | Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS) | 2023-06-01T13:48+09:00 | 2024-03-19T18:13+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0319 | Vulnérabilité dans les produits Mitel | 2026-03-19T00:00:00.000000 | 2026-03-19T00:00:00.000000 |
| certfr-2026-avi-0318 | Multiples vulnérabilités dans Splunk Universal Forwarder | 2026-03-19T00:00:00.000000 | 2026-03-19T00:00:00.000000 |
| certfr-2026-avi-0317 | Vulnérabilité dans Python | 2026-03-19T00:00:00.000000 | 2026-03-19T00:00:00.000000 |
| certfr-2026-avi-0316 | Multiples vulnérabilités dans les produits VMware | 2026-03-19T00:00:00.000000 | 2026-03-19T00:00:00.000000 |
| certfr-2026-avi-0315 | Multiples vulnérabilités dans les produits VMware | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0314 | Multiples vulnérabilités dans les produits Atlassian | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0313 | Vulnérabilité dans les produits Apple | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0312 | Multiples vulnérabilités dans GLPI | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0311 | Vulnérabilité dans Citrix XenServer | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0310 | Multiples vulnérabilités dans MongoDB | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0309 | Multiples vulnérabilités dans Suricata | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0308 | Multiples vulnérabilités dans Node.js | 2026-03-18T00:00:00.000000 | 2026-03-18T00:00:00.000000 |
| certfr-2026-avi-0307 | Vulnérabilité dans les produits Microsoft | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0306 | Multiples vulnérabilités dans Redmine | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0305 | Multiples vulnérabilités dans Spring AI | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0304 | Multiples vulnérabilités dans Xen | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0303 | Vulnérabilité dans Microsoft Edge | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0302 | Multiples vulnérabilités dans Python | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0301 | Multiples vulnérabilités dans les produits Kaspersky | 2026-03-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0176 | Vulnérabilité dans Mattermost Server | 2026-02-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0173 | Multiples vulnérabilités dans les produits Mattermost | 2026-02-16T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0052 | Multiples vulnérabilités dans Mattermost Server | 2026-01-16T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0299 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-16T00:00:00.000000 | 2026-03-16T00:00:00.000000 |
| certfr-2026-avi-0298 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-16T00:00:00.000000 | 2026-03-16T00:00:00.000000 |
| certfr-2026-avi-0297 | Vulnérabilité dans Google Chrome | 2026-03-16T00:00:00.000000 | 2026-03-16T00:00:00.000000 |
| certfr-2026-avi-0296 | Vulnérabilité dans OpenSSL | 2026-03-16T00:00:00.000000 | 2026-03-16T00:00:00.000000 |
| certfr-2026-avi-0295 | Vulnérabilité dans les produits Microsoft | 2026-03-13T00:00:00.000000 | 2026-03-13T00:00:00.000000 |
| certfr-2026-avi-0294 | Vulnérabilité dans Microsoft Office | 2026-03-13T00:00:00.000000 | 2026-03-13T00:00:00.000000 |
| certfr-2026-avi-0293 | Vulnérabilité dans Microsoft Edge | 2026-03-13T00:00:00.000000 | 2026-03-13T00:00:00.000000 |
| certfr-2026-avi-0292 | Multiples vulnérabilités dans les produits IBM | 2026-03-13T00:00:00.000000 | 2026-03-13T00:00:00.000000 |