Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75837 | 9.3 (v4.0) 9.1 (v3.1) | Grav before 2.0.14 Privilege Escalation via Group Acce… |
getgrav |
grav |
2026-08-18T11:19:47.200Z | 2026-08-19T14:22:08.426Z |
| cve-2026-75836 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin before 1.0.14 Missing Authorization |
getgrav |
grav |
2026-08-18T11:19:46.463Z | 2026-08-18T14:45:43.674Z |
| cve-2026-75835 | 9.3 (v4.0) 4.3 (v3.1) | Grav API Plugin before 1.0.14 Missing Authorization |
getgrav |
grav |
2026-08-18T11:19:45.775Z | 2026-08-18T15:10:06.230Z |
| cve-2026-75834 | 5.1 (v4.0) 5.4 (v3.1) | Grav before 2.0.14 Stored XSS via Invalid UTF-8 Byte |
getgrav |
grav |
2026-08-18T11:19:45.094Z | 2026-08-18T13:36:10.448Z |
| cve-2026-75833 | 8.6 (v4.0) 4.2 (v3.1) | Grav API Plugin Open Redirect via Backslash Bypass |
getgrav |
grav |
2026-08-18T11:19:44.425Z | 2026-08-18T13:42:25.284Z |
| cve-2026-75832 | 9.3 (v4.0) 4.3 (v3.1) | Grav API Plugin before 1.0.14 Authorization Bypass |
getgrav |
grav |
2026-08-18T11:19:43.757Z | 2026-08-19T14:21:09.712Z |
| cve-2026-75831 | 5.1 (v4.0) 7.6 (v3.1) | Grav before 2.0.15 Stored XSS via audio/video source URL |
getgrav |
grav |
2026-08-18T11:19:43.062Z | 2026-08-18T13:55:32.341Z |
| cve-2026-75830 | 7.1 (v4.0) 7.1 (v3.1) | grav-plugin-api before 1.0.15 Path Traversal via batchCopy |
getgrav |
grav |
2026-08-18T11:19:42.375Z | 2026-08-18T15:09:11.660Z |
| cve-2026-75829 | 8.6 (v4.0) 8.1 (v3.1) | grav-plugin-api before 1.0.15 Twig SSTI via translate … |
getgrav |
grav |
2026-08-18T11:19:41.673Z | 2026-08-18T13:36:16.104Z |
| cve-2026-75828 | 9.3 (v4.0) 8.7 (v3.1) | Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass |
getgrav |
grav |
2026-08-18T11:19:41.001Z | 2026-08-18T13:45:54.239Z |
| cve-2026-75827 | 9.3 (v4.0) 8.8 (v3.1) | Grav before 2.0.15 Arbitrary File Write via error_log |
getgrav |
grav |
2026-08-18T11:19:40.317Z | 2026-08-19T14:12:40.407Z |
| cve-2026-75107 | 5.1 (v4.0) 5.4 (v3.1) | Grav Form Plugin before 9.1.19 Stored XSS via Field Pr… |
getgrav |
grav |
2026-08-18T11:19:39.644Z | 2026-08-18T14:14:24.355Z |
| cve-2026-74908 | 5.1 (v4.0) 4.6 (v3.1) | Grav plugin-api before 1.0.15 Script Injection via SVG |
getgrav |
grav |
2026-08-18T11:19:38.977Z | 2026-08-18T15:08:29.903Z |
| cve-2026-74907 | 8.2 (v4.0) 5.9 (v3.1) | Grav before 2.0.15 Path Traversal via plugin-asset-map.php |
getgrav |
grav |
2026-08-18T11:19:38.302Z | 2026-08-18T13:36:23.049Z |
| cve-2026-74906 | 8.7 (v4.0) 7.5 (v3.1) | SiYuan before v3.7.4 Incorrect Authorization via Publi… |
siyuan-note |
siyuan |
2026-08-18T11:19:37.608Z | 2026-08-18T13:52:07.150Z |
| cve-2026-74905 | 6.9 (v4.0) 7.1 (v3.1) | SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass |
siyuan-note |
siyuan |
2026-08-18T11:19:36.761Z | 2026-08-19T14:10:27.258Z |
| cve-2026-74904 | 8.7 (v4.0) 7.5 (v3.1) | SiYuan before v3.7.4 Missing Authorization via block API |
siyuan-note |
siyuan |
2026-08-18T11:19:36.090Z | 2026-08-18T15:04:46.974Z |
| cve-2026-74903 | 5.3 (v4.0) 4.3 (v3.1) | SiYuan before v3.7.4 Insufficient Access Control via s… |
siyuan-note |
siyuan |
2026-08-18T11:19:35.404Z | 2026-08-18T15:05:34.564Z |
| cve-2026-74902 | 9.3 (v4.0) 8.6 (v3.1) | SiYuan before v3.7.4 XSS-to-RCE via malicious filename… |
siyuan-note |
siyuan |
2026-08-18T11:19:34.741Z | 2026-08-18T13:36:31.175Z |
| cve-2026-75774 | karakeep-app karakeep OAuth Sign-In auth.ts improper a… |
karakeep-app |
karakeep |
2026-08-18T11:15:09.946Z | 2026-08-18T13:59:32.590Z | |
| cve-2026-19608 | 5.3 (v3.1) | Keycloak-services: keycloak-services: name-only group … |
Red Hat |
Red Hat Build of Keycloak |
2026-08-18T11:08:20.247Z | 2026-08-18T13:36:37.870Z |
| cve-2026-75773 | karakeep-app karakeep Login Endpoint auth.ts authorize… |
karakeep-app |
karakeep |
2026-08-18T11:00:12.342Z | 2026-08-19T13:40:09.189Z | |
| cve-2026-19447 | 5.4 (v3.1) | Stored XSS in Fileorbis Informatics's FileOrbis |
Fileorbis Informatics Services Trade Inc. |
FileOrbis |
2026-08-18T10:53:16.719Z | 2026-08-19T07:41:44.020Z |
| cve-2026-75627 | 9.3 (v4.0) 9.8 (v3.1) | Bastillion Authentication Bypass via Path-Prefix Routi… |
bastillion-io |
Bastillion |
2026-08-18T10:46:54.674Z | 2026-08-18T18:06:41.815Z |
| cve-2026-75626 | 9.3 (v4.0) 9.3 (v3.1) | SpiderFoot Stored Cross-Site Scripting via Correlation… |
smicallef |
spiderfoot |
2026-08-18T10:46:54.005Z | 2026-08-19T14:08:31.754Z |
| cve-2024-14046 | OpenBoxes Document Upload Controller DocumentControlle… |
n/a |
OpenBoxes |
2026-08-18T10:30:12.051Z | 2026-08-18T13:36:43.592Z | |
| cve-2026-18929 | 6.9 (v4.0) | Resource Exhaustion in Carbone |
Carbone |
Carbone |
2026-08-18T09:11:38.105Z | 2026-08-18T14:08:58.089Z |
| cve-2026-43971 | 6.3 (v4.0) | Link Header Directive Smuggling via Unescaped target/r… |
ninenines |
cowlib |
2026-08-18T09:01:53.199Z | 2026-08-18T15:58:46.271Z |
| cve-2024-14045 | OpenBoxes Product Supplier Edit Controller RoleInterce… |
n/a |
OpenBoxes |
2026-08-18T08:45:10.555Z | 2026-08-18T13:30:09.395Z | |
| cve-2026-34884 | Apache SkyWalking MCP: SSRF via set_skywalking_url Too… |
Apache Software Foundation |
Apache SkyWalking MCP |
2026-08-18T07:26:38.352Z | 2026-08-19T13:28:04.910Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-628 | Multiples vulnérabilités dans Adobe Flash Player | 2012-11-07T00:00:00.000000 | 2012-11-08T00:00:00.000000 |
| certa-2012-avi-626 | Vulnérabilité dans vBulletin | 2012-11-06T00:00:00.000000 | 2012-11-06T00:00:00.000000 |
| certa-2012-avi-625 | Vulnérabilité dans Webmin | 2012-11-06T00:00:00.000000 | 2012-11-06T00:00:00.000000 |
| certa-2012-avi-624 | Multiples vulnérabilités dans IBM Tivoli Federated Identity Manager | 2012-11-06T00:00:00.000000 | 2012-11-06T00:00:00.000000 |
| certa-2012-avi-623 | Vulnérabilité dans IBM WebSphere DataPower | 2012-11-06T00:00:00.000000 | 2012-11-06T00:00:00.000000 |
| certa-2012-avi-622 | Vulnérabilité dans IBM Rational | 2012-11-06T00:00:00.000000 | 2012-11-06T00:00:00.000000 |
| certa-2012-avi-627 | Multiples vulnérabilités dans Sophos | 2012-11-05T00:00:00.000000 | 2012-11-05T00:00:00.000000 |
| certa-2012-avi-621 | Vulnérabilité dans libtiff | 2012-11-05T00:00:00.000000 | 2012-11-05T00:00:00.000000 |
| certa-2012-avi-620 | Multiples vulnérabilités dans HP Performance Insight | 2012-11-05T00:00:00.000000 | 2012-11-05T00:00:00.000000 |
| certa-2012-avi-619 | Multiples vulnérabilités dans Apple Safari | 2012-11-05T00:00:00.000000 | 2012-11-05T00:00:00.000000 |
| certa-2012-avi-618 | Multiples vulnérabilités dans Apple iOS | 2012-11-05T00:00:00.000000 | 2012-11-05T00:00:00.000000 |
| certa-2012-avi-617 | Multiples vulnérabilités dans Hitachi JP1 | 2012-11-02T00:00:00.000000 | 2012-11-02T00:00:00.000000 |
| certa-2012-avi-616 | Vulnérabilité dans Avaya Aura Session Manager | 2012-11-02T00:00:00.000000 | 2012-11-02T00:00:00.000000 |
| certa-2012-avi-615 | Multiples vulnérabilités dans Cisco Unified MeetingPlace Web Conferencing | 2012-11-02T00:00:00.000000 | 2012-11-02T00:00:00.000000 |
| certa-2012-avi-614 | Vulnérabilité dans Cisco Prime Data Center Network Manager | 2012-11-02T00:00:00.000000 | 2012-11-02T00:00:00.000000 |
| certa-2012-avi-613 | Vulnérabilité dans EMC Avamar | 2012-10-31T00:00:00.000000 | 2012-10-31T00:00:00.000000 |
| certa-2012-avi-612 | Vulnérabilités dans phpMyAdmin | 2012-10-30T00:00:00.000000 | 2012-10-30T00:00:00.000000 |
| certa-2012-avi-611 | Vulnérabilité dans Tiki wiki CMS groupware | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-610 | Multiples vulnérabilités dans Request Tracker | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-609 | Multiples vulnérabilités dans les produits Mozilla | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-608 | Vulnérabilité dans Exim DKIM | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-607 | Multiples vulnérabilités dans IBM WebSphere MQ | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-606 | Multiples vulnérabilités dans IBM InfoSphere | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-605 | Vulnérabilité dans Xen | 2012-10-29T00:00:00.000000 | 2012-10-29T00:00:00.000000 |
| certa-2012-avi-604 | Vulnérabilité dans des produits HP, 3COM et H3C | 2012-10-26T00:00:00.000000 | 2012-10-26T00:00:00.000000 |
| certa-2012-avi-603 | Vulnérabilité dans ISC BIND | 2012-10-25T00:00:00.000000 | 2012-10-25T00:00:00.000000 |
| certa-2012-avi-602 | Vulnérabilité dans AIX BIND | 2012-10-25T00:00:00.000000 | 2012-10-25T00:00:00.000000 |
| certa-2012-avi-601 | Multiples vulnérabilités dans HP-UX | 2012-10-25T00:00:00.000000 | 2012-10-25T00:00:00.000000 |
| certa-2012-avi-600 | Vulnérabilité dans F5 FirePass | 2012-10-24T00:00:00.000000 | 2012-10-24T00:00:00.000000 |
| certa-2012-avi-599 | Multiples vulnérabilités dans Adobe Shockwave Player | 2012-10-24T00:00:00.000000 | 2012-10-24T00:00:00.000000 |