Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-54084 | Wazuh agent enrollment NULL pointer dereference via ma… |
wazuh |
wazuh |
2026-08-27T23:12:20.239Z | 2026-08-28T15:27:56.072Z | |
| cve-2026-82072 | N/A | Out of bounds read in V8 in Google Chrome prior t… |
Google |
Chrome |
2026-08-27T23:04:56.296Z | 2026-08-29T03:55:59.351Z |
| cve-2026-81851 | Fireware OS Heap-Based Buffer Overflow in iked Allows … |
WatchGuard |
Fireware OS |
2026-08-27T22:58:26.855Z | 2026-08-28T15:57:26.539Z | |
| cve-2026-54085 | Wazuh: Missing input validation in multiple active res… |
wazuh |
wazuh |
2026-08-27T22:55:18.883Z | 2026-08-27T22:55:18.883Z | |
| cve-2026-54083 | Wazuh: Path traversal in ip-customblock active respons… |
wazuh |
wazuh |
2026-08-27T22:45:37.326Z | 2026-08-28T17:40:47.904Z | |
| cve-2026-77358 | cpp-httplib: Use-after-free of TLS session in WebSocke… |
yhirose |
cpp-httplib |
2026-08-27T22:37:14.339Z | 2026-08-27T22:37:14.339Z | |
| cve-2026-81848 | cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pa… |
cyberchitta |
scrapling-fetch-mcp |
2026-08-27T22:30:13.710Z | 2026-08-28T17:44:17.988Z | |
| cve-2026-17610 | 6 (v4.0) | RAIL 802.15.4 Mux missing ACK can lead to DoS |
Silicon Labs |
SiSDK |
2026-08-27T22:17:09.467Z | 2026-08-28T15:29:13.052Z |
| cve-2026-77341 | cpp-httplib: CRLF injection via unvalidated HTTP trail… |
yhirose |
cpp-httplib |
2026-08-27T22:16:45.356Z | 2026-08-28T15:30:02.142Z | |
| cve-2026-81847 | MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal |
MAA-AI |
MaaMCP |
2026-08-27T22:15:13.010Z | 2026-08-28T15:34:36.405Z | |
| cve-2026-5706 | 8.9 (v4.0) | Buffer overflow in Bluetooth Mesh SDK when handling ex… |
Silicon Labs |
BT Mesh SDK |
2026-08-27T22:13:56.225Z | 2026-08-28T15:58:36.339Z |
| cve-2026-44629 | 7.9 (v3.1) | Improper access control to the Synergis Softwire … |
Genetec Inc. |
Synergis Softwire |
2026-08-27T22:08:52.736Z | 2026-08-28T15:32:08.304Z |
| cve-2026-77977 | 8.1 (v3.1) 7.2 (v4.0) | Ebyte NE2-D11 Missing Authentication for Critical Function |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:56:10.086Z | 2026-08-28T14:13:50.784Z |
| cve-2026-76943 | 9.8 (v3.1) 9.3 (v4.0) | Xiiaozet LK100W Authentication Bypass Using an Alterna… |
Xiiaozet |
Xiiaozet LK100W |
2026-08-27T21:50:49.310Z | 2026-08-28T14:13:50.949Z |
| cve-2026-78239 | 9.8 (v3.1) 9.3 (v4.0) | Xiiaozet LK100W Missing Authentication for Critical Function |
Xiiaozet |
Xiiaozet LK100W |
2026-08-27T21:48:30.879Z | 2026-08-28T14:13:51.112Z |
| cve-2026-78037 | 8.8 (v3.1) 8.7 (v4.0) | Xiiaozet LK100W OS Command Injection |
Xiiaozet |
Xiiaozet LK100W |
2026-08-27T21:46:32.067Z | 2026-08-28T14:13:51.266Z |
| cve-2026-81845 | arben-adm mcp-sequential-thinking Import Session/Expor… |
arben-adm |
mcp-sequential-thinking |
2026-08-27T21:45:10.504Z | 2026-08-27T21:45:10.504Z | |
| cve-2026-69658 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Cleartext Transmission of Sensitive Info… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:37:26.881Z | 2026-08-28T14:13:51.549Z |
| cve-2026-76945 | 7.5 (v3.1) 8.7 (v4.0) | Ebyte NE2-D11 Use of Client-Side Authentication |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:35:38.060Z | 2026-08-28T14:13:51.722Z |
| cve-2026-75813 | 7.5 (v3.1) 8.7 (v4.0) | Ebyte NE2-D11 Missing Authorization |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:33:40.124Z | 2026-08-28T14:13:51.879Z |
| cve-2026-75548 | 5.4 (v3.1) 5.3 (v4.0) | Ebyte NE2-D11 Improper Restriction of Rendered UI Laye… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:30:55.643Z | 2026-08-28T14:13:52.031Z |
| cve-2026-81837 | RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts p… |
RooCodeInc |
Roo-Code |
2026-08-27T21:30:11.939Z | 2026-08-28T15:32:48.327Z | |
| cve-2026-76940 | 7.5 (v3.1) 8.7 (v4.0) | Ebyte NE2-D11 Improper Restriction of Excessive Authen… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:28:01.127Z | 2026-08-28T14:13:52.195Z |
| cve-2026-75814 | 8.8 (v3.1) 8.6 (v4.0) | Ebyte NE2-D11 Cross-Site Request Forgery |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:25:36.709Z | 2026-08-28T14:13:52.366Z |
| cve-2026-76179 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Use of GET Request Method With Sensitive… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:22:53.600Z | 2026-08-28T14:13:52.510Z |
| cve-2026-71187 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Use of Client-Side Authentication |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:20:04.394Z | 2026-08-28T14:13:52.670Z |
| cve-2026-73839 | 4.6 (v3.1) 5.1 (v4.0) | Ebyte NE2-D11 Insufficiently Protected Credentials |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:18:13.771Z | 2026-08-28T14:13:52.903Z |
| cve-2026-73809 | 7.5 (v3.1) 8.7 (v4.0) | Ebyte NE2-D11 Cleartext Transmission of Sensitive Info… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:15:43.738Z | 2026-08-28T14:13:53.089Z |
| cve-2026-81836 | RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext … |
RooCodeInc |
Roo-Code |
2026-08-27T21:15:08.722Z | 2026-08-27T21:15:08.722Z | |
| cve-2026-80179 | 5.9 (v3.1) | Jwcrypto: jwcrypto: denial of service via malformed jw… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-27T21:14:23.428Z | 2026-08-28T15:34:24.662Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000091 | WordPress Plugin "WordPress Popular Posts" accepts untrusted external inputs to update certain internal variables | 2022-11-18T15:14+09:00 | 2022-11-18T15:14+09:00 |
| jvndb-2022-000089 | RICOH Aficio SP 4210N vulnerable to cross-site scripting | 2022-11-17T11:15+09:00 | 2022-11-17T11:15+09:00 |
| jvndb-2022-000090 | Multiple vulnerabilities in Movable Type | 2022-11-16T17:07+09:00 | 2024-06-03T15:31+09:00 |
| jvndb-2022-000088 | TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation | 2022-11-14T16:45+09:00 | 2024-06-06T16:11+09:00 |
| jvndb-2022-000086 | Aiphone Video Multi-Tenant System Entrance Stations vulnerable to information disclosure | 2022-11-10T13:40+09:00 | 2024-06-06T17:37+09:00 |
| jvndb-2022-002691 | Multiple vulnerabilities in OMRON products | 2022-11-10T09:46+09:00 | 2022-11-10T09:46+09:00 |
| jvndb-2022-000085 | WordPress Plugin "Salon booking system" vulnerable to cross-site scripting | 2022-11-08T15:07+09:00 | 2024-06-05T18:07+09:00 |
| jvndb-2022-000087 | Multiple vulnerabilities in WordPress | 2022-11-08T14:59+09:00 | 2024-06-06T16:27+09:00 |
| jvndb-2022-000079 | Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers | 2022-11-01T14:51+09:00 | 2024-06-06T17:01+09:00 |
| jvndb-2022-000084 | Multiple vulnerabilities in FUJI SOFT network devices | 2022-10-28T15:12+09:00 | 2024-06-06T16:48+09:00 |
| jvndb-2022-000083 | Multiple vulnerabilities in SHIRASAGI | 2022-10-25T15:10+09:00 | 2024-06-05T16:06+09:00 |
| jvndb-2022-000082 | Multiple vulnerabilities in nadesiko3 | 2022-10-20T16:58+09:00 | 2024-06-05T17:28+09:00 |
| jvndb-2022-002544 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-10-20T16:18+09:00 | 2024-06-13T13:58+09:00 |
| jvndb-2022-002537 | Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE | 2022-10-19T16:23+09:00 | 2024-06-12T16:54+09:00 |
| jvndb-2022-000081 | Lemon8 App fails to restrict access permissions | 2022-10-19T14:08+09:00 | 2024-06-12T16:39+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2022-002451 | Multiple vulnerabilities in SVMPC1 and SVMPC2 | 2022-10-13T17:27+09:00 | 2024-05-30T16:38+09:00 |
| jvndb-2022-000078 | bingo!CMS vulnerable to authentication bypass | 2022-10-11T17:49+09:00 | 2024-05-30T17:57+09:00 |
| jvndb-2022-002448 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security agents for Windows | 2022-10-11T17:02+09:00 | 2024-06-13T14:30+09:00 |
| jvndb-2022-000077 | The installer of Sony Content Transfer may insecurely load Dynamic Link Libraries | 2022-10-11T15:08+09:00 | 2024-06-12T12:12+09:00 |
| jvndb-2022-000076 | Growi vulnerable to improper access control | 2022-10-07T14:30+09:00 | 2024-06-12T12:04+09:00 |
| jvndb-2022-000075 | IPFire WebUI vulnerable to cross-site scripting | 2022-10-06T13:05+09:00 | 2024-06-12T14:28+09:00 |
| jvndb-2022-002444 | Multiple vulnerabilities in Buffalo network devices | 2022-10-05T17:44+09:00 | 2022-10-13T16:28+09:00 |
| jvndb-2022-002443 | Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter | 2022-10-05T17:28+09:00 | 2022-10-05T17:28+09:00 |
| jvndb-2022-000074 | BookStack vulnerable to cross-site scripting | 2022-09-30T14:48+09:00 | 2024-06-12T14:07+09:00 |
| jvndb-2022-002367 | OpenAM (OpenAM Consortium Edition) vulnerable to open redirect | 2022-09-16T15:30+09:00 | 2024-06-13T11:39+09:00 |
| jvndb-2022-000073 | Multiple vulnerabilities in EC-CUBE | 2022-09-15T16:30+09:00 | 2024-06-13T11:09+09:00 |
| jvndb-2022-000072 | EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files | 2022-09-15T16:13+09:00 | 2024-06-13T11:03+09:00 |
| jvndb-2022-000071 | Multiple vulnerabilities in Trend Micro Apex One and Trend Micro Apex One as a Service | 2022-09-14T18:15+09:00 | 2024-06-13T11:34+09:00 |
| jvndb-2022-002364 | DoS Vulnerability in uCosminexus TP1/Client/J and Cosminexus Service Coordinator | 2022-09-14T11:34+09:00 | 2022-09-14T11:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0285 | Vulnérabilité dans Python | 2026-03-13T00:00:00.000000 | 2026-03-13T00:00:00.000000 |
| certfr-2026-avi-0284 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0283 | Vulnérabilité dans Microsoft Edge | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0282 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0281 | Multiples vulnérabilités dans les produits Splunk | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0280 | Multiples vulnérabilités dans les produits Apple | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0279 | Multiples vulnérabilités dans Cisco IOS XR | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0278 | Multiples vulnérabilités dans Google Chrome | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0277 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0276 | Multiples vulnérabilités dans GitLab | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0275 | Vulnérabilité dans GLPI | 2026-03-12T00:00:00.000000 | 2026-03-12T00:00:00.000000 |
| certfr-2026-avi-0274 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0273 | Multiples vulnérabilités dans Microsoft Azure | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0272 | Multiples vulnérabilités dans Microsoft .Net | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0271 | Multiples vulnérabilités dans Microsoft Windows | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0270 | Multiples vulnérabilités dans Microsoft Office | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0269 | Multiples vulnérabilités dans Curl | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0268 | Multiples vulnérabilités dans Traefik | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0267 | Multiples vulnérabilités dans Mozilla Firefox | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0266 | Multiples vulnérabilités dans VMware Tanzu | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0265 | Multiples vulnérabilités dans les produits Fortinet | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0264 | Multiples vulnérabilités dans les produits Adobe | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0263 | Vulnérabilité dans Ivanti Desktop and Server Management (DSM) | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0262 | Multiples vulnérabilités dans HPE Aruba Networking AOS-CX | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0261 | Multiples vulnérabilités dans les produits Intel | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0260 | Multiples vulnérabilités dans WordPress | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0259 | Multiples vulnérabilités dans Stormshield Network Security | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0258 | Vulnérabilité dans Microsoft CBL-Mariner | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0257 | Vulnérabilité dans Mozilla Focus | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0256 | Multiples vulnérabilités dans les produits SAP | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |