Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76179 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Use of GET Request Method With Sensitive… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:22:53.600Z | 2026-08-28T14:13:52.510Z |
| cve-2026-71187 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Use of Client-Side Authentication |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:20:04.394Z | 2026-08-28T14:13:52.670Z |
| cve-2026-73839 | 4.6 (v3.1) 5.1 (v4.0) | Ebyte NE2-D11 Insufficiently Protected Credentials |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:18:13.771Z | 2026-08-28T14:13:52.903Z |
| cve-2026-73809 | 7.5 (v3.1) 8.7 (v4.0) | Ebyte NE2-D11 Cleartext Transmission of Sensitive Info… |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:15:43.738Z | 2026-08-28T14:13:53.089Z |
| cve-2026-81836 | RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext … |
RooCodeInc |
Roo-Code |
2026-08-27T21:15:08.722Z | 2026-08-27T21:15:08.722Z | |
| cve-2026-80179 | 5.9 (v3.1) | Jwcrypto: jwcrypto: denial of service via malformed jw… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-27T21:14:23.428Z | 2026-08-28T15:34:24.662Z |
| cve-2026-73125 | 9.8 (v3.1) 9.3 (v4.0) | Ebyte NE2-D11 Missing Authentication for Critical Function |
Ebyte |
Ebyte NE2-D11 Firmware |
2026-08-27T21:13:10.725Z | 2026-08-28T14:13:53.236Z |
| cve-2026-54330 | Ceph RGW SigV4 handler accepts unsigned x-amz-* header… |
ceph |
ceph |
2026-08-27T20:59:24.688Z | 2026-08-28T15:57:33.424Z | |
| cve-2026-67560 | 7.5 (v3.1) 7.7 (v4.0) | Stack-based Buffer Overflow in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:54:20.022Z | 2026-08-28T14:13:53.473Z |
| cve-2026-50152 | Ceph Monitor subscription handler improperly authorize… |
ceph |
ceph |
2026-08-27T20:53:42.353Z | 2026-08-28T15:06:15.096Z | |
| cve-2026-68967 | 6.5 (v3.1) 7.1 (v4.0) | Out-of-bounds Write in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:50:22.011Z | 2026-08-28T14:13:53.649Z |
| cve-2026-39944 | Ceph: CephX AES Authentication error |
ceph |
ceph |
2026-08-27T20:47:01.512Z | 2026-08-28T15:57:39.530Z | |
| cve-2026-71396 | 5.4 (v3.1) 5.3 (v4.0) | Use of Hard-coded Credentials in Bendix EC80 Brake ECU |
Bendix |
EC80ESP+ J1708 |
2026-08-27T20:45:52.804Z | 2026-08-28T15:57:46.738Z |
| cve-2026-81835 | RooCodeInc Roo-Code MCP Integration Trust Model malici… |
RooCodeInc |
Roo-Code |
2026-08-27T20:45:10.575Z | 2026-08-28T17:45:48.917Z | |
| cve-2025-30156 | Ceph: AES-CBC misuse in CephX and RADOSGW enables auth… |
ceph |
ceph |
2026-08-27T20:34:41.822Z | 2026-08-27T20:34:41.822Z | |
| cve-2026-18965 | 8.8 (v3.1) 8.7 (v4.0) | Missing Authorization in PayRange API |
PayRange |
PayRange API |
2026-08-27T20:34:16.692Z | 2026-08-28T15:57:53.992Z |
| cve-2026-76060 | 8.8 (v3.1) 8.7 (v4.0) | OS Command Injection in PayRange API |
Zoneminder |
Zoneminder |
2026-08-27T20:29:05.262Z | 2026-08-28T15:58:01.239Z |
| cve-2026-68929 | FastGPT: Unauthenticated WeChat channel hijack and den… |
labring |
FastGPT |
2026-08-27T20:21:30.866Z | 2026-08-28T17:48:00.135Z | |
| cve-2026-18717 | 7.4 (v3.1) 9.1 (v4.0) | Improper Certificate Validation in ASE 2000 |
Applied Systems Engineering |
ASE2000 V2 |
2026-08-27T20:20:23.451Z | 2026-08-28T15:58:08.375Z |
| cve-2026-81731 | 5.1 (v4.0) 5.4 (v3.1) | Frappe 15.11.0 through 16.32.0 Stored XSS via Workspac… |
frappe |
frappe |
2026-08-27T20:07:35.561Z | 2026-08-27T20:07:35.561Z |
| cve-2026-81730 | 8.8 (v4.0) 8.2 (v3.1) | Dolibarr 9.0.0 through 23.0.4 Path Traversal via Email… |
Dolibarr |
dolibarr |
2026-08-27T20:07:34.881Z | 2026-08-28T17:55:52.355Z |
| cve-2026-81729 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr before 23.0.4 Incorrect Authorization on REST… |
Dolibarr |
dolibarr |
2026-08-27T20:07:34.181Z | 2026-08-27T20:07:34.181Z |
| cve-2026-81728 | 8.6 (v4.0) 8.1 (v3.1) | Dolibarr before 24.0.0 SQL Injection via the CSV and X… |
Dolibarr |
dolibarr |
2026-08-27T20:07:33.503Z | 2026-08-28T14:08:40.368Z |
| cve-2026-81838 | 6.8 (v4.0) 7.1 (v3.1) | Zip Slip Arbitrary File Write in AWS diagram-as-code (… |
aws |
diagram-as-code |
2026-08-27T20:03:59.258Z | 2026-08-28T14:13:53.824Z |
| cve-2026-81834 | RooCodeInc Roo-Code README File ExecaTerminalProcess c… |
RooCodeInc |
Roo-Code |
2026-08-27T20:00:08.895Z | 2026-08-28T15:32:38.871Z | |
| cve-2026-77438 | Trilium unauthenticated share-search discloses passwor… |
TriliumNext |
Trilium |
2026-08-27T19:52:55.731Z | 2026-08-28T15:35:12.098Z | |
| cve-2026-53580 | Trilium arbitrary file read and denial of service via … |
TriliumNext |
Trilium |
2026-08-27T19:46:12.357Z | 2026-08-28T14:55:56.996Z | |
| cve-2026-81833 | RooCodeInc Roo-Code CodeIndexManager helpers.ts optimi… |
RooCodeInc |
Roo-Code |
2026-08-27T19:45:10.936Z | 2026-08-27T19:45:10.936Z | |
| cve-2026-81934 | Redis TLS pending-data list use-after-free |
Redis |
Redis |
2026-08-27T19:40:15.141Z | 2026-08-28T15:14:13.092Z | |
| cve-2026-10036 | 8.7 (v4.0) 8.8 (v3.1) | SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.… |
speechbrain |
speechbrain |
2026-08-27T19:36:57.357Z | 2026-08-29T11:47:29.345Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000070 | Movable Type plugin A-Form vulnerable to cross-site scripting | 2022-09-09T15:01+09:00 | 2024-06-13T13:49+09:00 |
| jvndb-2022-000068 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to information disclosure | 2022-09-05T15:22+09:00 | 2024-06-13T16:00+09:00 |
| jvndb-2022-002346 | Multiple vulnerabilities in Contec FLEXLAN FX3000 and FX2000 series | 2022-09-02T18:08+09:00 | 2022-09-02T18:08+09:00 |
| jvndb-2022-000069 | PowerCMS XMLRPC API vulnerable to command injection | 2022-09-02T15:49+09:00 | 2024-06-13T11:44+09:00 |
| jvndb-2022-000066 | Multiple vulnerabilities in CentreCOM AR260S V2 | 2022-08-29T17:37+09:00 | 2024-06-13T16:21+09:00 |
| jvndb-2022-000067 | Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries | 2022-08-29T15:57+09:00 | 2024-06-13T13:53+09:00 |
| jvndb-2022-000064 | Movable Type XMLRPC API vulnerable to command injection | 2022-08-24T15:58+09:00 | 2024-06-13T18:11+09:00 |
| jvndb-2022-000065 | Multiple vulnerabilities in Exment | 2022-08-24T14:23+09:00 | 2024-06-14T11:09+09:00 |
| jvndb-2022-002339 | Multiple vulnerabilities in PukiWiki | 2022-08-24T14:17+09:00 | 2024-06-14T11:55+09:00 |
| jvndb-2022-002338 | PLANEX MZK-DP150N contains hidden administrative functionality | 2022-08-23T15:02+09:00 | 2024-06-14T14:06+09:00 |
| jvndb-2022-000063 | PukiWiki vulnerable to cross-site scripting | 2022-08-23T14:40+09:00 | 2024-06-14T12:00+09:00 |
| jvndb-2022-002337 | UNIMO Technology digital video recorders vulnerable to missing authentication for critical functions | 2022-08-23T14:31+09:00 | 2024-06-14T10:24+09:00 |
| jvndb-2022-002295 | Multiple vulnerabilities in Trend Micro Security | 2022-08-19T11:42+09:00 | 2022-08-19T11:42+09:00 |
| jvndb-2022-002265 | Trend Micro Endpoint security products for enterprises vulnerable to Link Following Local Privilege Escalation | 2022-08-18T15:45+09:00 | 2024-06-14T17:11+09:00 |
| jvndb-2022-000062 | Kaitai Struct: compiler vulnerable to denial-of-service (DoS) | 2022-08-04T15:14+09:00 | 2022-08-04T15:14+09:00 |
| jvndb-2022-002112 | CONTEC SolarView Compact vulnerable to insufficient verification in uploading files | 2022-08-03T17:40+09:00 | 2024-06-14T15:21+09:00 |
| jvndb-2022-002143 | Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator | 2022-08-01T17:10+09:00 | 2022-08-01T17:10+09:00 |
| jvndb-2022-000056 | Multiple vulnerabilities in Nintendo Wi-Fi Network Adaptor WAP-001 | 2022-07-29T13:43+09:00 | 2024-06-14T16:27+09:00 |
| jvndb-2022-000061 | "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path | 2022-07-28T13:40+09:00 | 2022-07-28T13:40+09:00 |
| jvndb-2022-000060 | "Hulu" App for iOS vulnerable to improper server certificate verification | 2022-07-28T09:51+09:00 | 2024-06-14T12:25+09:00 |
| jvndb-2022-000059 | "Hulu" App for Android uses a hard-coded API key for an external service | 2022-07-28T09:14+09:00 | 2024-06-14T14:42+09:00 |
| jvndb-2022-000057 | WordPress Plugin "Newsletter" vulnerable to cross-site scripting | 2022-07-25T14:30+09:00 | 2024-06-18T11:21+09:00 |
| jvndb-2022-000058 | Multiple vulnerabilities in untangle | 2022-07-25T14:18+09:00 | 2024-06-17T11:03+09:00 |
| jvndb-2022-000055 | Booked vulnerable to open redirect | 2022-07-22T13:40+09:00 | 2024-06-14T17:43+09:00 |
| jvndb-2022-000054 | Multiple vulnerabilities in Cybozu Office | 2022-07-20T17:28+09:00 | 2024-06-14T14:02+09:00 |
| jvndb-2022-002017 | U-Boot squashfs filesystem implementation vulnerable to heap-based buffer overflow | 2022-07-14T15:59+09:00 | 2024-06-14T17:53+09:00 |
| jvndb-2022-000053 | Django Extract and Trunc functions vulnerable to SQL injection | 2022-07-12T13:47+09:00 | 2024-06-18T11:57+09:00 |
| jvndb-2022-000052 | Passage Drive vulnerable to insufficient data verification | 2022-07-08T13:42+09:00 | 2024-06-14T17:48+09:00 |
| jvndb-2022-000051 | Multiple vulnerabilities in Cybozu Garoon | 2022-07-04T14:17+09:00 | 2024-06-17T16:49+09:00 |
| jvndb-2022-000050 | LiteCart vulnerable to cross-site scripting | 2022-07-04T14:12+09:00 | 2024-06-17T10:39+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0255 | Multiples vulnérabilités dans les produits Siemens | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0254 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0253 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0252 | Multiples vulnérabilités dans les produits Moxa | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0251 | Multiples vulnérabilités dans Apache Zookeeper | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0250 | Vulnérabilité dans Apereo CAS | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0249 | Multiples vulnérabilités dans les produits IBM | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0248 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0247 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0246 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0245 | Vulnérabilité dans Zabbix | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0244 | Vulnérabilité dans Nextcloud Flow | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0243 | Vulnérabilité dans SPIP | 2026-03-06T00:00:00.000000 | 2026-04-20T00:00:00.000000 |
| certfr-2026-avi-0242 | Multiples vulnérabilités dans les produits Cisco | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0241 | Vulnérabilité dans ClamAV | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0240 | Vulnérabilité dans CPython | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0239 | Multiples vulnérabilités dans Google Chrome | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0238 | Vulnérabilité dans NetApp ONTAP 9 | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0237 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0236 | Multiples vulnérabilités dans Traefik | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0235 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0234 | Vulnérabilité dans Tenable Nessus Manager | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0233 | Multiples vulnérabilités dans Google Pixel | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0232 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-03T00:00:00.000000 | 2026-03-03T00:00:00.000000 |
| certfr-2026-avi-0231 | Multiples vulnérabilités dans Google Android | 2026-03-03T00:00:00.000000 | 2026-03-03T00:00:00.000000 |
| certfr-2026-avi-0230 | Multiples vulnérabilités dans Docker Desktop | 2026-03-03T00:00:00.000000 | 2026-03-03T00:00:00.000000 |
| certfr-2026-avi-0229 | Multiples vulnérabilités dans MISP | 2026-03-02T00:00:00.000000 | 2026-03-02T00:00:00.000000 |
| certfr-2026-avi-0228 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-02T00:00:00.000000 | 2026-03-02T00:00:00.000000 |
| certfr-2026-avi-0227 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-02-27T00:00:00.000000 | 2026-02-27T00:00:00.000000 |
| certfr-2026-avi-0226 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-02-27T00:00:00.000000 | 2026-02-27T00:00:00.000000 |