Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-71913 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:45.584Z | 2026-08-26T16:14:49.783Z |
| cve-2026-71918 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:48.959Z | 2026-08-26T16:14:41.340Z |
| cve-2026-71923 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:52.293Z | 2026-08-26T16:14:33.579Z |
| cve-2026-71928 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:55.618Z | 2026-08-26T16:14:22.015Z |
| cve-2026-71933 | 8.8 (v4.0) 9.1 (v3.1) | DrayTek VigorSwitch Multiple Models Missing Authorizat… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:59.089Z | 2026-08-26T16:14:12.954Z |
| cve-2026-71938 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:02.518Z | 2026-08-26T16:13:59.861Z |
| cve-2026-71943 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:06.077Z | 2026-08-26T16:13:51.710Z |
| cve-2026-76073 | 8.7 (v4.0) 8.8 (v3.1) | Label Studio through 1.23.0 Cross-Organization Annotat… |
HumanSignal |
label-studio |
2026-08-24T17:55:39.204Z | 2026-08-26T16:13:40.083Z |
| cve-2026-34964 | 6.9 (v4.0) 5.8 (v3.1) | Adminer before 5.5.0 SSRF via PDO DSN Injection |
vrana |
adminer |
2026-08-25T01:29:58.396Z | 2026-08-26T16:13:06.384Z |
| cve-2026-56704 | 5.3 (v4.0) 6.1 (v3.1) | Adminer before 5.4.3 Cross-Site Scripting via MySQL Ve… |
vrana |
adminer |
2026-08-25T01:30:02.831Z | 2026-08-26T16:12:57.028Z |
| cve-2026-56709 | 8.7 (v4.0) 7.5 (v3.1) | Grav before 3.9.2 Host Header Injection via sendInvita… |
getgrav |
grav |
2026-08-25T01:30:10.057Z | 2026-08-26T16:12:46.333Z |
| cve-2026-72698 | 7.1 (v4.0) 6.5 (v3.1) | Grav CMS before 2.0.16 Information Disclosure via Twig… |
getgrav |
grav |
2026-08-25T01:30:21.127Z | 2026-08-26T16:12:36.558Z |
| cve-2026-78676 | 9.3 (v4.0) 9.8 (v3.1) | GitPython before 3.1.59 Remote Code Execution via Conf… |
gitpython-developers |
GitPython |
2026-08-25T01:30:33.754Z | 2026-08-26T16:12:27.979Z |
| cve-2026-78681 | 8.7 (v4.0) 7.5 (v3.1) | NLTK before 3.10.3 Entity Expansion DoS via ElementTree |
nltk |
nltk |
2026-08-25T01:30:37.749Z | 2026-08-26T16:12:19.369Z |
| cve-2026-79663 | 4.8 (v4.0) 4.8 (v3.1) | Ech0 before 4.7.3 Stored XSS via RSS feed tag names |
lin-snow |
Ech0 |
2026-08-25T11:33:26.721Z | 2026-08-26T16:11:59.399Z |
| cve-2026-79668 | 6.9 (v4.0) 5.3 (v3.1) | Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric… |
lin-snow |
Ech0 |
2026-08-25T11:33:30.130Z | 2026-08-26T16:11:48.745Z |
| cve-2026-79673 | 8.5 (v4.0) 6.5 (v3.1) | Ech0 before 4.4.3 Scope Bypass via profile:read Token |
lin-snow |
Ech0 |
2026-08-25T11:33:33.528Z | 2026-08-26T16:11:39.207Z |
| cve-2026-79769 | 8.7 (v4.0) 5.5 (v3.1) | Nokogiri before 1.19.4 Invalid Memory Read via initial… |
sparklemotion |
nokogiri |
2026-08-25T15:16:02.372Z | 2026-08-26T16:11:11.096Z |
| cve-2026-79774 | 9.3 (v4.0) 8.4 (v3.1) | Winter CMS before 1.2.13 Twig Sandbox Escape via Secur… |
wintercms |
winter |
2026-08-25T15:16:05.738Z | 2026-08-26T16:11:03.275Z |
| cve-2026-79784 | 8.6 (v4.0) 8.8 (v3.1) | Vocos through 0.1.0 Arbitrary Code Execution via Unres… |
gemelo-ai |
vocos |
2026-08-25T15:16:12.456Z | 2026-08-26T16:10:54.750Z |
| cve-2026-79788 | 7.1 (v4.0) 7.1 (v3.1) | Dradis Community Edition 5.1.0 through 5.2.0 Server-Si… |
dradis |
dradis-ce |
2026-08-25T18:23:15.839Z | 2026-08-26T16:10:46.614Z |
| cve-2026-80195 | 8.7 (v4.0) 5.4 (v3.1) | Kimai before 2.63.0 Team Membership Removal via API |
kimai |
kimai |
2026-08-25T23:19:02.395Z | 2026-08-26T16:10:29.520Z |
| cve-2026-80348 | 8.7 (v4.0) 8.8 (v3.1) | TarsWeb through 3.0.16 Missing Authorization on Patch … |
TarsCloud |
TarsWeb |
2026-08-26T10:09:48.681Z | 2026-08-26T16:10:10.076Z |
| cve-2026-81035 | 7.2 (v4.0) 8.1 (v3.1) | Midday Missing Owner Check on Team Deletion |
midday-ai |
midday |
2026-08-26T15:45:02.234Z | 2026-08-26T16:06:39.105Z |
| cve-2026-81030 | 7.1 (v4.0) 6.5 (v3.1) | Mage AI through 0.9.79 Arbitrary File Read via Unvalid… |
mage-ai |
mage-ai |
2026-08-26T15:44:58.663Z | 2026-08-26T16:05:12.110Z |
| cve-2026-65088 | 5.5 (v3.1) | NVIDIA NemoClaw contains a vulnerability where an… |
NVIDIA |
NemoClaw |
2026-08-25T20:15:32.689Z | 2026-08-26T16:03:13.199Z |
| cve-2026-80214 | 8.6 (v4.0) | LibreNMS Virtualisation Discovery Module RCE |
librenms |
librenms |
2026-08-26T02:11:01.673Z | 2026-08-26T15:58:29.340Z |
| cve-2026-77801 | 6.5 (v3.1) | Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-08-26T13:35:45.203Z | 2026-08-26T15:55:52.127Z |
| cve-2025-43955 | TwsCachedXPathAPI in Convertigo versions before 8… |
Convertigo |
Convertigo |
2025-04-20T00:00:00.000Z | 2026-08-26T15:50:32.239Z | |
| cve-2026-77533 | 9.9 (v3.1) | A malicious actor with access to the network and … |
Ubiquiti Inc |
UniFi Protect Application |
2026-08-26T08:57:33.271Z | 2026-08-26T15:46:54.332Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-515 | Vulnérabilité dans Microsoft OLE | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-514 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-513 | Vulnérabilité dans Microsoft Outlook | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-512 | Multiples vulnérabilités dans Microsoft SharePoint Server | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-511 | Multiples vulnérabilités dans Adobe Shockwave Player | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-510 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-509 | Multiples vulnérabilités dans Adobe Flash Player | 2013-09-11T00:00:00.000000 | 2013-09-11T00:00:00.000000 |
| certa-2013-avi-508 | Multiples vulnérabilités dans les produits Juniper | 2013-09-10T00:00:00.000000 | 2013-09-10T00:00:00.000000 |
| certa-2013-avi-507 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2013-09-09T00:00:00.000000 | 2013-09-09T00:00:00.000000 |
| certa-2013-avi-506 | Vulnérabilité dans DNS Response Rate Limiting | 2013-09-09T00:00:00.000000 | 2013-09-09T00:00:00.000000 |
| certa-2013-avi-505 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2013-09-06T00:00:00.000000 | 2013-09-06T00:00:00.000000 |
| certa-2013-avi-504 | Vulnérabilité dans le système SCADA Schneider Electric OFS | 2013-09-05T00:00:00.000000 | 2013-09-05T00:00:00.000000 |
| certa-2013-avi-503 | Multiples vulnérabilités dans Cisco WebEx | 2013-09-05T00:00:00.000000 | 2013-09-05T00:00:00.000000 |
| certa-2013-avi-502 | Multiples vulnérabilités dans MediaWiki | 2013-09-04T00:00:00.000000 | 2013-09-04T00:00:00.000000 |
| certa-2013-avi-501 | Multiples vulnérabilités dans Citrix CloudPortal Services Manager | 2013-09-04T00:00:00.000000 | 2013-09-04T00:00:00.000000 |
| certa-2013-avi-500 | Multiples vulnérabilités dans Asterisk | 2013-09-04T00:00:00.000000 | 2013-09-04T00:00:00.000000 |
| certa-2013-avi-499 | Vulnérabilité dans VMware ESXi et ESX | 2013-09-02T00:00:00.000000 | 2013-09-02T00:00:00.000000 |
| certa-2013-avi-498 | Multiples vulnérabilités dans le noyau Linux de Debian | 2013-09-02T00:00:00.000000 | 2013-09-02T00:00:00.000000 |
| certa-2013-avi-497 | Vulnérabilité dans Cisco Secure Access Control Server | 2013-08-29T00:00:00.000000 | 2013-08-29T00:00:00.000000 |
| certa-2013-avi-496 | Multiples vulnérabilités dans Citrix XenClient XT | 2013-08-29T00:00:00.000000 | 2013-08-29T00:00:00.000000 |
| certa-2013-avi-495 | Multiples vulnérabilités dans Roundcube Webmail | 2013-08-28T00:00:00.000000 | 2013-08-28T00:00:00.000000 |
| certa-2013-avi-494 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2013-08-28T00:00:00.000000 | 2013-08-28T00:00:00.000000 |
| certa-2013-avi-493 | Multiples vulnérabilités dans RealNetworks realPlayer | 2013-08-26T00:00:00.000000 | 2013-08-26T00:00:00.000000 |
| certa-2013-avi-492 | Vulnérabilité dans VMware Workstation | 2013-08-23T00:00:00.000000 | 2013-08-23T00:00:00.000000 |
| certa-2013-avi-491 | Multiples vulnérabilités dans Cisco Prime Central | 2013-08-22T00:00:00.000000 | 2013-08-22T00:00:00.000000 |
| certa-2013-avi-490 | Vulnérabilité dans Cisco Unified Communications Manager IM et Presence Service | 2013-08-22T00:00:00.000000 | 2013-08-22T00:00:00.000000 |
| certa-2013-avi-489 | Multiples vulnérabilités dans Cisco Unified Communications Manager | 2013-08-22T00:00:00.000000 | 2013-08-22T00:00:00.000000 |
| certa-2013-avi-488 | Vulnérabilité dans EMC RSA | 2013-08-22T00:00:00.000000 | 2013-08-22T00:00:00.000000 |
| certa-2013-avi-487 | Vulnérabilité dans Check Point | 2013-08-22T00:00:00.000000 | 2013-08-22T00:00:00.000000 |
| certa-2013-avi-486 | Multiples vulnérabilités dans Google Chrome | 2013-08-21T00:00:00.000000 | 2013-08-21T00:00:00.000000 |