Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77337 | CakePHP: Potential Authentication bypass with CookieAu… |
cakephp |
authentication |
2026-08-24T21:30:06.817Z | 2026-08-25T19:23:34.125Z | |
| cve-2026-27364 | 6.5 (v3.1) | WordPress Style Kits plugin <= 2.6.5 - Broken Access C… |
AnalogWP |
Style Kits |
2026-08-24T21:31:24.274Z | 2026-08-25T19:23:25.508Z |
| cve-2026-59780 | Apache CloudStack: LDAP provider configuration disclosure |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:27:16.849Z | 2026-08-25T19:23:16.262Z | |
| cve-2026-32560 | 8.8 (v3.1) | WordPress MagicAI for WordPress - AI Text, Image, Chat… |
LiquidThemes |
MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator |
2026-08-24T21:31:27.848Z | 2026-08-25T19:23:15.522Z |
| cve-2026-78263 | 7.1 (v3.1) | WordPress Event Tickets plugin <= 5.29.2.1 - Cross Sit… |
Nexcess |
Event Tickets |
2026-08-24T21:31:31.391Z | 2026-08-25T19:23:05.855Z |
| cve-2026-78268 | 7.5 (v3.1) | WordPress Lead Generation Contact Widget & AI Chatbot:… |
Extend Themes |
Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads |
2026-08-24T21:31:34.955Z | 2026-08-25T19:22:54.673Z |
| cve-2026-55371 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:31:35.995Z | 2026-08-25T19:22:48.186Z | |
| cve-2026-19801 | BetterLinks <= 3.1.0 - Missing Authorization to Authen… |
wpdevteam |
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP |
2026-08-25T01:26:44.025Z | 2026-08-25T19:22:38.068Z | |
| cve-2026-76063 | FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stor… |
roxnor |
FundEngine – Donation and Crowdfunding Platform |
2026-08-25T03:27:06.337Z | 2026-08-25T19:22:31.342Z | |
| cve-2026-80051 | 5.9 (v4.0) | github.com/graphql-go/graphql (GraphQL for Go) th… |
graphql-go project |
graphql-go |
2026-08-25T17:55:57.383Z | 2026-08-25T19:22:26.133Z |
| cve-2026-14280 | Events Manager <= 7.3.7.4 - Authenticated (Administrat… |
netweblogic |
Events Manager – Calendar, Bookings, Tickets, and more! |
2026-08-25T03:27:07.025Z | 2026-08-25T19:22:20.406Z | |
| cve-2026-61397 | Apache CloudStack: OAuth2 Token Cross-Request Leak |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:26:25.472Z | 2026-08-25T19:22:14.318Z | |
| cve-2026-18328 | Forminator Forms <= 1.57.0 - Unauthenticated DOM-Based… |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-08-25T07:39:50.754Z | 2026-08-25T19:22:02.061Z | |
| cve-2026-17587 | My Agile Privacy® <= 3.3.6 - Missing Authorization to … |
formulaagile |
My Agile Privacy® – CMP, Cookie Consent & Privacy Tools |
2026-08-25T11:27:11.761Z | 2026-08-25T19:21:42.990Z | |
| cve-2026-77824 | Media Sweep <= 1.1.3 - Authenticated (Administrator+) … |
wpcreatix |
Media Sweep – WordPress Media Cleaner |
2026-08-25T11:27:12.470Z | 2026-08-25T19:21:34.704Z | |
| cve-2026-55526 | PraisonAI: SSRF protection bypass in `spider_tools._ho… |
MervinPraison |
PraisonAI |
2026-08-25T14:36:09.934Z | 2026-08-25T19:21:26.954Z | |
| cve-2026-55541 | PraisonAI: `--api-key` flag on `praisonai serve` is no… |
MervinPraison |
PraisonAI |
2026-08-25T15:05:25.370Z | 2026-08-25T19:21:21.324Z | |
| cve-2026-61398 | Apache CloudStack: Cross-Site Scripting (XSS) Vulnerab… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:25:47.657Z | 2026-08-25T19:21:10.214Z | |
| cve-2026-55527 | PraisonAI: Arbitrary file write via unsanitized `user_… |
MervinPraison |
PraisonAI |
2026-08-25T15:09:07.500Z | 2026-08-25T19:21:08.622Z | |
| cve-2026-55539 | PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/a… |
MervinPraison |
PraisonAI |
2026-08-25T15:14:07.109Z | 2026-08-25T19:20:57.949Z | |
| cve-2026-78379 | 9.2 (v4.0) 8.1 (v3.1) | Consent bypass in python_repl tool via batch kwargs fo… |
Amazon |
strands-agents-tools |
2026-08-25T19:05:57.779Z | 2026-08-25T19:20:51.512Z |
| cve-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/… |
cbcoutinho |
nextcloud-mcp-server |
2026-08-25T16:03:28.085Z | 2026-08-25T19:20:43.689Z | |
| cve-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero data… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:28:47.827Z | 2026-08-25T19:20:34.302Z | |
| cve-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 pl… |
AcademySoftwareFoundation |
openexr |
2026-08-25T17:59:25.292Z | 2026-08-25T19:20:27.685Z | |
| cve-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses i… |
GOVCERT-LU |
eml_parser |
2026-08-25T18:24:29.921Z | 2026-08-25T19:20:15.362Z | |
| cve-2026-62440 | Apache CloudStack: Improper access control in Kubernet… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:23:55.427Z | 2026-08-25T19:20:14.393Z | |
| cve-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:27:19.057Z | 2026-08-25T19:20:04.216Z | |
| cve-2026-18420 | 8.8 (v3.1) 8.7 (v4.0) | RCE via Prototype Pollution in OpenSearch Dashboards |
AWS |
Amazon OpenSearch Service |
2026-08-20T20:40:40.709Z | 2026-08-25T19:19:07.471Z |
| cve-2026-32561 | 8.8 (v3.1) | WordPress Booking Hub plugin <= 1.3.0 - Privilege Esca… |
LiquidThemes |
Booking Hub |
2026-08-24T21:31:28.568Z | 2026-08-25T19:17:36.940Z |
| cve-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE de… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:16:37.986Z | 2026-08-25T19:16:49.514Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-473 | Vulnérabilité dans Oracle Java | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-472 | Vulnérabilités dans IBM Infosphere Guardium | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-471 | Vulnérabilité dans EMC Cloud Tiering Appliance | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-470 | Vulnérabilité dans HP Intelligent Management Center | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-469 | Vulnérabilité dans HP iNode Management Center | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-468 | Multiples vulnérabilités dans Symantec Messaging Gateway | 2012-08-29T00:00:00.000000 | 2012-08-29T00:00:00.000000 |
| certa-2012-avi-466 | Vulnérabilité dans les produits EMC ApplicationXtender | 2012-08-28T00:00:00.000000 | 2012-08-28T00:00:00.000000 |
| certa-2012-avi-465 | Vulnérabilité dans le système SCADA RUGGEDCOM Rugged Operating System | 2012-08-28T00:00:00.000000 | 2012-08-28T00:00:00.000000 |
| certa-2012-avi-464 | Vulnérabilité dans IBM Power Hardware Management Console | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-463 | Vulnérabilité dans certains produits Avaya | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-462 | Vulnérabilité dans HP Serviceguard | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-461 | Multiples vulnérabilités dans Lotus Domino | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-460 | Multiples vulnérabilités dans Apache Web Server | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-459 | Multiples vulnérabilités dans Adobe Flash Player | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-458 | Vulnérabilités dans Xen | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-457 | Multiples vulnérabilités dans Wireshark | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-456 | Vulnérabilité dans Apple Remote Desktop | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-455 | Vulnérabilités dans PostgreSQL | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-454 | Vulnérabilités dans Roundcube | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-453 | Vulnérabilité dans HP Integrity Server | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-452 | Multiples vulnérabilités dans Java pour HP-UX | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-451 | Vulnérabilité dans HP Service Manager Web Tier et HP Service Center Tier | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-450 | Vulnérabilité dans HP Service Manager Server et HP Service Center Server | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-449 | Vulnérabilité dans phpMyAdmin | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-448 | Vulnérabilités dans Adobe Reader X et Adobe Acrobat X | 2012-08-17T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-avi-447 | Vulnérabilités dans HP Fortify | 2012-08-17T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-avi-446 | Vulnérabilités dans Adobe Shockwave Player | 2012-08-17T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-avi-445 | Vulnérabilité dans Adobe Flash Player | 2012-08-17T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-avi-444 | Vulnérabilité dans Cisco IOS XR | 2012-08-17T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-avi-443 | Vulnérabilité dans Microsoft Common Controls | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |