Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-65976 | Deskflow: Clipboard receiver can accumulate data beyon… |
deskflow |
deskflow |
2026-08-17T21:00:41.175Z | 2026-08-18T17:47:20.730Z | |
| cve-2026-75531 | 7 (v4.0) | Stored Cross-Site Scripting in URL Observables via Loo… |
pandora-analysis |
pandora |
2026-08-17T21:00:12.848Z | 2026-08-18T15:20:24.522Z |
| cve-2026-65832 | Deskflow - Unauthenticated server-controlled out-of-bo… |
deskflow |
deskflow |
2026-08-17T20:59:08.714Z | 2026-08-18T15:40:26.686Z | |
| cve-2026-63409 | Deskflow: Odd-length DSOP options vector causes out-of… |
deskflow |
deskflow |
2026-08-17T20:57:19.326Z | 2026-08-18T15:18:00.706Z | |
| cve-2026-65640 | WordPress is vulnerable to a remote code executio… |
WordPress |
WordPress |
2026-08-17T20:55:33.162Z | 2026-08-18T15:17:13.043Z | |
| cve-2026-47683 | vm2: bufferAllocLimit cap bypassed by Buffer.concat an… |
patriksimek |
vm2 |
2026-08-17T20:55:32.019Z | 2026-08-18T15:38:37.608Z | |
| cve-2026-47686 | vm2: Missing Error.cause Sanitization Enables VM2 Sand… |
patriksimek |
vm2 |
2026-08-17T20:54:39.406Z | 2026-08-19T03:56:00.965Z | |
| cve-2026-47698 | vm2: Sandbox Breakout Using Dangerous Host Proto Mutators |
patriksimek |
vm2 |
2026-08-17T20:53:09.218Z | 2026-08-19T03:56:02.855Z | |
| cve-2026-75529 | 6.9 (v4.0) | Stored Cross-Site Scripting via MIME-Type Confusion in… |
pandora-analysis |
pandora |
2026-08-17T20:52:42.520Z | 2026-08-18T15:16:47.908Z |
| cve-2026-34398 | FreeCAD: Arbitrary Code Execution via eval() on untrus… |
FreeCAD |
FreeCAD |
2026-08-17T20:51:56.717Z | 2026-08-19T03:56:09.964Z | |
| cve-2026-34399 | FreeCAD: Arbitrary Code Execution via eval() on untrus… |
FreeCAD |
FreeCAD |
2026-08-17T20:50:19.829Z | 2026-08-19T03:56:11.095Z | |
| cve-2026-68765 | 5.2 (v4.0) 6.1 (v3.1) | hashcat KeePass KDBX v4 Module Heap Buffer Overflow vi… |
hashcat |
hashcat |
2026-08-17T20:48:17.215Z | 2026-08-21T11:20:56.382Z |
| cve-2026-34789 | FreeCAD: Arbitrary code execution via unsandboxed PyIm… |
FreeCAD |
FreeCAD |
2026-08-17T20:47:52.373Z | 2026-08-19T03:56:12.224Z | |
| cve-2026-65822 | ERPNext: SQL Injection in "Inactive Customers" report … |
frappe |
erpnext |
2026-08-17T20:45:45.647Z | 2026-08-18T13:01:42.822Z | |
| cve-2026-66795 | 9.9 (v3.1) | Managedcluster-import-controller: csr auto-approver do… |
Red Hat |
multicluster engine for Kubernetes 2.1 |
2026-08-17T20:45:33.786Z | 2026-09-08T12:15:09.394Z |
| cve-2026-65974 | ERPNext: Server-Side Template Injection leading to Rem… |
frappe |
erpnext |
2026-08-17T20:44:20.818Z | 2026-08-18T14:17:47.852Z | |
| cve-2026-40506 | 7 (v4.0) 6.5 (v3.1) | OpenEMR Path Traversal Arbitrary Directory Deletion vi… |
openemr |
openemr |
2026-08-17T20:39:03.333Z | 2026-08-21T11:20:51.181Z |
| cve-2026-75483 | 4.8 (v4.0) 3.3 (v3.1) | powerlevel10k Control Character Injection via package.… |
romkatv |
powerlevel10k |
2026-08-17T20:36:08.150Z | 2026-08-20T15:24:24.081Z |
| cve-2026-75482 | 8.7 (v4.0) 7.5 (v3.1) | SWE-agent Trajectory Inspector Path Traversal File Dis… |
SWE-agent |
SWE-agent |
2026-08-17T20:36:07.463Z | 2026-08-18T12:55:51.320Z |
| cve-2026-75481 | 8.7 (v4.0) 8.8 (v3.1) | SkyPilot Authentication Bypass via Service Account Rol… |
skypilot-org |
skypilot |
2026-08-17T20:36:06.800Z | 2026-08-18T15:35:57.357Z |
| cve-2026-75480 | 7.1 (v4.0) 6.5 (v3.1) | OpenViking Debug Vector Endpoints Multi-tenant Data Exposure |
volcengine |
OpenViking |
2026-08-17T20:36:06.111Z | 2026-08-18T15:17:00.517Z |
| cve-2026-75479 | 8.7 (v4.0) 7.5 (v3.1) | JimuReport Unauthenticated Report Listing and Share To… |
jeecgboot |
jimureport |
2026-08-17T20:36:05.442Z | 2026-08-18T14:16:07.605Z |
| cve-2026-75111 | 8.7 (v4.0) 7.5 (v3.1) | Evidently UI Path Traversal via Dataset Materializatio… |
evidentlyai |
evidently |
2026-08-17T20:36:04.764Z | 2026-08-20T15:24:29.705Z |
| cve-2026-75110 | 9.3 (v4.0) 9.8 (v3.1) | MemOS Authentication Bypass via Unset INTERNAL_SERVICE… |
MemTensor |
MemOS |
2026-08-17T20:36:04.095Z | 2026-08-18T12:51:49.539Z |
| cve-2026-75109 | 7.1 (v4.0) 7.1 (v3.1) | Determined Missing Authorization Check on Generic Task… |
determined-ai |
determined |
2026-08-17T20:36:03.396Z | 2026-08-18T15:34:45.934Z |
| cve-2026-75108 | 5.3 (v4.0) 5.4 (v3.1) | Next Terminal Missing Per-Asset Authorization on Porta… |
next-terminal |
next-terminal |
2026-08-17T20:36:02.740Z | 2026-08-18T15:13:37.037Z |
| cve-2026-75106 | 9.3 (v4.0) 9.1 (v3.1) | OpnForm Editable Submission Secret Derivation via Empt… |
OpnForm |
OpnForm |
2026-08-17T20:36:02.092Z | 2026-08-21T11:21:01.592Z |
| cve-2026-75105 | 8.7 (v4.0) 7.5 (v3.1) | phpIPAM Temporary Subnet Share Information Disclosure … |
phpipam |
phpipam |
2026-08-17T20:36:01.403Z | 2026-08-21T11:21:00.953Z |
| cve-2026-75104 | 6.8 (v4.0) 5.5 (v3.1) | Hugging Face Transformers Path Traversal via Checkpoin… |
huggingface |
transformers |
2026-08-17T20:36:00.721Z | 2026-08-18T12:40:32.385Z |
| cve-2026-75103 | 8.7 (v4.0) 8.8 (v3.1) | Crawlab Missing Authorization on Password Change Endpo… |
crawlab-team |
crawlab |
2026-08-17T20:36:00.054Z | 2026-08-18T15:32:54.562Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-508 | Vulnérabilité dans le système SCADA Siemens S7-1200 | 2012-09-17T00:00:00.000000 | 2012-09-17T00:00:00.000000 |
| certa-2012-avi-507 | Multiples vulnérabilités dans système SCADA Siemens WinCC | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-506 | Multiples vulnérabilités dans Apple iTunes | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-505 | Multiples vulnérabilités dans Google Chrome pour Android | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-504 | Vulnérabilité dans Citrix Receiver | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-503 | Vulnérabilité dans Cisco Unified Presence et Jabber Extensible Communication Platform | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-502 | Vulnérabilité dans Cisco ASA-CX et PRSM | 2012-09-14T00:00:00.000000 | 2012-09-14T00:00:00.000000 |
| certa-2012-avi-501 | Vulnérabilité dans ISC DHCP | 2012-09-13T00:00:00.000000 | 2012-09-13T00:00:00.000000 |
| certa-2012-avi-500 | Vulnérabilité dans ISC BIND | 2012-09-13T00:00:00.000000 | 2012-09-13T00:00:00.000000 |
| certa-2012-avi-499 | Vulnérabilité dans RSA BSAFE Micro Edition Suite | 2012-09-13T00:00:00.000000 | 2012-09-13T00:00:00.000000 |
| certa-2012-avi-498 | Vulnérabilités dans RSA BSAFE SSL-C | 2012-09-13T00:00:00.000000 | 2012-09-13T00:00:00.000000 |
| certa-2012-avi-497 | Vulnérabilités dans McAfee Firewall Enterprise | 2012-09-13T00:00:00.000000 | 2012-09-13T00:00:00.000000 |
| certa-2012-avi-496 | Vulnérabilité dans ColdFusion | 2012-09-12T00:00:00.000000 | 2012-09-12T00:00:00.000000 |
| certa-2012-avi-495 | Vulnérabilité dans System Center Configuration Manager | 2012-09-12T00:00:00.000000 | 2012-09-12T00:00:00.000000 |
| certa-2012-avi-494 | Vulnérabilité dans Visual Studio Team Foundation Server | 2012-09-12T00:00:00.000000 | 2012-09-12T00:00:00.000000 |
| certa-2012-avi-493 | Vulnérabilité dans FreeRADIUS | 2012-09-11T00:00:00.000000 | 2012-09-11T00:00:00.000000 |
| certa-2012-avi-492 | Vulnérabilité dans le système SCADA Honeywell HMIWeb | 2012-09-10T00:00:00.000000 | 2012-09-10T00:00:00.000000 |
| certa-2012-avi-491 | Vulnérabilités dans WordPress | 2012-09-10T00:00:00.000000 | 2012-09-10T00:00:00.000000 |
| certa-2012-avi-490 | Vulnérabilité dans Xen | 2012-09-10T00:00:00.000000 | 2012-09-10T00:00:00.000000 |
| certa-2012-avi-489 | Multiples vulnérabilités dans IBM Asset and Service Mgmt | 2012-09-07T00:00:00.000000 | 2012-09-07T00:00:00.000000 |
| certa-2012-avi-488 | Multiples vulnérabilités dans HP Business Availability Center | 2012-09-07T00:00:00.000000 | 2012-09-07T00:00:00.000000 |
| certa-2012-avi-487 | Vulnérabilité dans le système SCADA WAGO SYSTEM 758 | 2012-09-06T00:00:00.000000 | 2012-09-06T00:00:00.000000 |
| certa-2012-avi-486 | Vulnérabilité dans le système SCADA InduSoft ISSymbol | 2012-09-06T00:00:00.000000 | 2012-09-06T00:00:00.000000 |
| certa-2012-avi-485 | Multiples vulnérabilités dans Xen | 2012-09-06T00:00:00.000000 | 2012-09-06T00:00:00.000000 |
| certa-2012-avi-484 | Multiples vulnérabilités dans Typo3 | 2012-09-04T00:00:00.000000 | 2012-09-04T00:00:00.000000 |
| certa-2012-avi-483 | Vulnérabilité dans PGP Universal Server | 2012-09-03T00:00:00.000000 | 2012-09-03T00:00:00.000000 |
| certa-2012-avi-482 | Vulnérabilités dans Adobe Photoshop CS6 | 2012-09-03T00:00:00.000000 | 2012-09-03T00:00:00.000000 |
| certa-2012-avi-481 | Vulnérabilité dans EMC NetWorker | 2012-09-03T00:00:00.000000 | 2012-09-03T00:00:00.000000 |
| certa-2012-avi-480 | Multiples vulnérabilités dans MediaWiki | 2012-09-03T00:00:00.000000 | 2012-09-03T00:00:00.000000 |
| certa-2012-avi-479 | Multiples vulnérabilités dans VMware | 2012-09-03T00:00:00.000000 | 2012-09-03T00:00:00.000000 |