Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77680 | 5.3 (v3.1) | Libsoup3: libsoup: quadratic cpu denial of service in … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-25T20:36:45.808Z | 2026-08-26T12:43:47.896Z |
| cve-2026-77554 | 10 (v3.1) | A malicious actor with access to the network coul… |
Ubiquiti Inc |
UniFi Talk Application |
2026-08-26T10:45:46.316Z | 2026-08-26T12:42:21.536Z |
| cve-2026-77557 | 9.8 (v3.1) | A malicious actor with access to the network coul… |
Ubiquiti Inc |
UniFi Protect AI Key |
2026-08-26T10:53:27.169Z | 2026-08-26T12:38:19.953Z |
| cve-2026-79793 | code-projects Online Shopping System sumit_form.php cr… |
code-projects |
Online Shopping System |
2026-08-25T21:00:11.819Z | 2026-08-26T12:37:35.552Z | |
| cve-2026-77532 | 9.6 (v3.1) | A malicious actor with access to an adjacent netw… |
Ubiquiti Inc |
EdgeMAX EdgeSwitch |
2026-08-26T11:01:30.309Z | 2026-08-26T12:36:20.285Z |
| cve-2026-62865 | TypeBot: Arbitrary server file read via Send Email blo… |
baptisteArno |
typebot.io |
2026-08-25T21:52:16.717Z | 2026-08-26T12:31:36.135Z | |
| cve-2026-63041 | 5.3 (v4.0) | Apache APISIX: attach-consumer-label does not strip cl… |
Apache Software Foundation |
Apache APISIX |
2026-08-26T11:34:59.724Z | 2026-08-26T12:31:31.308Z |
| cve-2026-15985 | Classified Listing - Mobile Number Verification <= 1.6… |
RadiusTheme |
Classified Listing - Mobile Number Verification |
2026-08-26T11:36:39.336Z | 2026-08-26T12:30:21.617Z | |
| cve-2026-80138 | 9.2 (v4.0) 9.8 (v3.1) | ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Inje… |
MacWarrior |
clipbucket-v5 |
2026-08-25T22:12:23.914Z | 2026-08-26T12:23:55.095Z |
| cve-2026-12600 | 8.7 (v4.0) | Uncontrolled memory usage in Innodata Labs’ Poppler JP… |
Poppler |
Innodata Labs |
2026-08-25T10:57:57.486Z | 2026-08-26T12:22:48.941Z |
| cve-2026-54757 | Trestle has Server-Side Template Injection (SSTI) via … |
oscal-compass |
compliance-trestle |
2026-08-25T23:02:12.422Z | 2026-08-26T12:21:23.031Z | |
| cve-2026-80194 | 8.7 (v4.0) 4.3 (v3.1) | Kimai before 2.64.0 Missing Authorization via ProjectV… |
kimai |
kimai |
2026-08-25T23:19:01.718Z | 2026-08-26T12:17:35.542Z |
| cve-2026-80199 | 6.3 (v4.0) 3.7 (v3.1) | Kimai before 2.54.0 Username Enumeration via Timing Oracle |
kimai |
kimai |
2026-08-25T23:19:05.166Z | 2026-08-26T12:12:39.269Z |
| cve-2026-3002 | Gutenverse <= 4.0.2 - Authenticated (Contributor+) Sto… |
jegstudio |
Gutenverse – WordPress Blocks, Page Builder & Site Editor |
2026-08-26T06:08:27.892Z | 2026-08-26T12:06:42.055Z | |
| cve-2026-80347 | 8.7 (v4.0) 7.5 (v3.1) | mcp-fetch through 1.6.3 Server-Side Request Forgery vi… |
kazuph |
mcp-fetch |
2026-08-26T10:09:47.977Z | 2026-08-26T12:05:24.996Z |
| cve-2026-42944 | 8.7 (v4.0) | Heap overflow with multiple NSID, COOKIE, PADDING EDNS… |
NLnet Labs |
Unbound |
2026-05-20T09:20:23.906Z | 2026-08-26T12:04:57.670Z |
| cve-2026-12992 | 7.4 (v3.1) | Apicurio/apicurio-registry: apicurio-registry: ssrf vi… |
Red Hat |
Red Hat build of Apicurio Registry 3.3.1 |
2026-06-25T21:16:11.720Z | 2026-08-26T12:04:56.516Z |
| cve-2026-12975 | 8.5 (v3.1) | Apicurio/apicurio-registry: apicurio-registry: unharde… |
Red Hat |
Red Hat build of Apicurio Registry 3.3.1 |
2026-06-25T21:12:31.301Z | 2026-08-26T12:04:54.899Z |
| cve-2026-46054 | selinux: fix overlayfs mmap() and mprotect() access checks |
Linux |
Linux |
2026-05-27T12:57:12.813Z | 2026-08-26T12:04:48.113Z | |
| cve-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling |
Linux |
Linux |
2026-06-24T07:14:18.646Z | 2026-08-26T12:04:46.663Z | |
| cve-2026-80204 | 9.3 (v4.0) 5.4 (v3.1) | Grav before 1.0.18 Authentication Bypass via Scoped API Key |
getgrav |
grav |
2026-08-26T10:28:13.671Z | 2026-08-26T12:03:55.898Z |
| cve-2026-18080 | ERP: Complete HR, Accounting & CRM Suite Built for Woo… |
wedevs |
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce |
2026-08-26T11:05:44.740Z | 2026-08-26T12:00:54.990Z | |
| cve-2026-56144 | 5.3 (v3.1) | Incorrect Authorization in Elasticsearch Leading to In… |
Elastic |
Elasticsearch |
2026-07-21T19:49:43.992Z | 2026-08-26T11:16:24.249Z |
| cve-2021-47644 | N/A | media: staging: media: zoran: move videodev alloc |
Linux |
Linux |
2025-02-26T01:54:14.179Z | 2026-08-26T11:00:35.437Z |
| cve-2020-36785 | media: atomisp: Fix use after free in atomisp_alloc_cs… |
Linux |
Linux |
2024-02-28T08:13:06.032Z | 2026-08-26T11:00:34.375Z | |
| cve-2026-66916 | 6.9 (v4.0) | Joomla Extension - joomgalleryfriends.net - Password-P… |
joomgalleryfriends.net |
JoomGallery extension for Joomla |
2026-08-22T11:16:35.832Z | 2026-08-26T07:01:22.531Z |
| cve-2026-74253 | 10 (v4.0) | Joomla Extension - regularlabs.com - Unauthenticated R… |
regularlabs.com |
Sourcerer extension for Joomla |
2026-08-17T17:12:55.129Z | 2026-08-26T06:57:48.917Z |
| cve-2026-77997 | 5.1 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-25T11:53:21.796Z | 2026-08-26T06:55:47.222Z |
| cve-2026-77996 | 7.5 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-25T11:52:16.807Z | 2026-08-26T06:54:36.136Z |
| cve-2026-77143 | 8.8 (v4.0) | Broken Access Control in extension "Forum" (pforum) |
TYPO3 |
Extension "Forum" |
2026-08-25T09:00:34.130Z | 2026-08-26T06:02:18.425Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-469 | Multiples vulnérabilités dans les produits Apple | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-468 | Multiples vulnérabilités dans les produits Microsoft | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-467 | Multiples vulnérabilités dans Microsoft Windows | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-466 | Multiples vulnérabilités dans Microsoft Office | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-465 | Multiples vulnérabilités dans Microsoft Edge | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-464 | Multiples vulnérabilités dans Microsoft IE | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-463 | Vulnérabilité dans les produits F5 | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-462 | Multiples vulnérabilités dans les produits Citrix | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-461 | Vulnérabilité dans Adobe Flash | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-11T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-460 | Multiples vulnérabilités dans Xen | 2017-12-12T00:00:00.000000 | 2017-12-12T00:00:00.000000 |
| certfr-2017-avi-459 | Multiples vulnérabilités dans les produits Fortinet | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-457 | Multiples vulnérabilités dans SCADA Schneider Electric EcoStruxure Substation Operation | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-456 | Multiples vulnérabilités dans Microsoft Malware Protection Engine | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-455 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-454 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-453 | Vulnérabilité dans Fortinet FortiClient | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-452 | Multiples vulnérabilités dans OpenSSL | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-451 | Multiples vulnérabilités dans les produits Apple | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-450 | Multiples vulnérabilités dans Google Chrome | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-448 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-05T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-449 | Multiples vulnérabilités dans Google Android | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-447 | Multiples vulnérabilités dans SCADA Schneider Electric Pelco VideoXpert Enterprise | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-446 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-445 | Multiples vulnérabilités dans Apache Struts 2 | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-444 | Multiples vulnérabilités dans Citrix XenServer | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-443 | Vulnérabilité dans Asterisk | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-442 | Multiples vulnérabilités dans Wireshark | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-441 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-440 | Vulnérabilité dans le noyau Linux de RedHat | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |