Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/… |
cbcoutinho |
nextcloud-mcp-server |
2026-08-25T16:03:28.085Z | 2026-08-25T19:20:43.689Z | |
| cve-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero data… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:28:47.827Z | 2026-08-25T19:20:34.302Z | |
| cve-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 pl… |
AcademySoftwareFoundation |
openexr |
2026-08-25T17:59:25.292Z | 2026-08-25T19:20:27.685Z | |
| cve-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses i… |
GOVCERT-LU |
eml_parser |
2026-08-25T18:24:29.921Z | 2026-08-25T19:20:15.362Z | |
| cve-2026-62440 | Apache CloudStack: Improper access control in Kubernet… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:23:55.427Z | 2026-08-25T19:20:14.393Z | |
| cve-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:27:19.057Z | 2026-08-25T19:20:04.216Z | |
| cve-2026-18420 | 8.8 (v3.1) 8.7 (v4.0) | RCE via Prototype Pollution in OpenSearch Dashboards |
AWS |
Amazon OpenSearch Service |
2026-08-20T20:40:40.709Z | 2026-08-25T19:19:07.471Z |
| cve-2026-32561 | 8.8 (v3.1) | WordPress Booking Hub plugin <= 1.3.0 - Privilege Esca… |
LiquidThemes |
Booking Hub |
2026-08-24T21:31:28.568Z | 2026-08-25T19:17:36.940Z |
| cve-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE de… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:16:37.986Z | 2026-08-25T19:16:49.514Z | |
| cve-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unva… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:58:25.871Z | 2026-08-25T19:16:25.169Z | |
| cve-2026-77354 | kin-openapi: Uncontrolled resource consumption in open… |
getkin |
kin-openapi |
2026-08-21T20:44:47.792Z | 2026-08-25T19:15:23.235Z | |
| cve-2026-80049 | 8.7 (v4.0) 8.8 (v3.1) | Airbyte Platform through 2.0.0 Cross-Workspace Authori… |
airbytehq |
airbyte-platform |
2026-08-25T18:23:16.504Z | 2026-08-25T19:15:04.934Z |
| cve-2026-78434 | Faveo Helpdesk post-ticket-reply Endpoint FormControll… |
Faveo |
Helpdesk |
2026-08-24T21:30:08.526Z | 2026-08-25T19:14:49.643Z | |
| cve-2026-75910 | 6.5 (v3.1) 7.1 (v4.0) | Incorrect privilege assignment in the Amazon aws-athen… |
AWS |
Athena Federated Query Clickhouse Connector deployment template |
2026-08-20T20:06:54.217Z | 2026-08-25T19:13:06.552Z |
| cve-2026-32554 | 9.3 (v3.1) | WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 … |
WBW |
WooBeWoo Product Filter Pro |
2026-08-24T21:31:25.000Z | 2026-08-25T19:12:24.665Z |
| cve-2026-77506 | 4.8 (v3.1) | Znuny before LTS 6.5.22 allows AgentTicketEmailRe… |
Znuny |
Znuny |
2026-08-20T20:18:55.670Z | 2026-08-25T19:12:24.097Z |
| cve-2026-19755 | 6.9 (v4.0) | NoSleep 1.5.1 - Unauthorized disclosure of root-owned … |
NoSleep |
NoSleep |
2026-08-20T20:26:12.423Z | 2026-08-25T19:11:30.734Z |
| cve-2026-77584 | 7 (v3.1) | Tor before 0.4.9.10 did not reject a CONFLUX_LINK… |
torproject |
Tor |
2026-08-20T20:38:42.159Z | 2026-08-25T19:09:53.308Z |
| cve-2026-77587 | 5.9 (v3.1) | Tor before 0.4.9.11 is prone to a use-after-free … |
torproject |
Tor |
2026-08-20T20:47:39.964Z | 2026-08-25T19:09:06.542Z |
| cve-2026-77751 | 8.8 (v4.0) | Path Traversal in MISP Object Template Resolution Duri… |
misp |
misp-stix |
2026-08-21T09:48:20.168Z | 2026-08-25T19:08:25.414Z |
| cve-2026-7141 | vLLM KV Block kv_cache_interface.py has_mamba_layers u… |
n/a |
vLLM |
2026-04-27T16:45:12.662Z | 2026-08-25T19:07:56.947Z | |
| cve-2026-12999 | 5.3 (v3.1) | Infineon Airoc Wi-Fi driver leaks TX buffers on send f… |
zephyrproject |
zephyr |
2026-08-22T20:35:40.445Z | 2026-08-25T19:07:22.689Z |
| cve-2026-9728 | 6.4 (v3.1) | TOCTOU race in mbox_send syscall verifier allows users… |
zephyrproject |
zephyr |
2026-08-24T14:28:46.429Z | 2026-08-25T19:06:35.431Z |
| cve-2024-5647 | Multiple Plugins <= (Various Versions) - Authenticated… |
blossomthemes |
BlossomThemes Social Feed |
2025-07-03T09:22:19.308Z | 2026-08-25T19:06:26.772Z | |
| cve-2026-78264 | 7.1 (v3.1) | WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site… |
Site Building with Toolset |
Toolset Blocks |
2026-08-24T21:31:32.102Z | 2026-08-25T19:06:19.855Z |
| cve-2026-78282 | 7.1 (v3.1) | WordPress Stripe Payments plugin <= 2.1.2 - Cross Site… |
mra13 |
Stripe Payments |
2026-08-24T21:31:35.725Z | 2026-08-25T19:05:40.876Z |
| cve-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bou… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:45:02.860Z | 2026-08-25T19:05:14.664Z | |
| cve-2026-77384 | libp2p: Circuit relay v2 server reservation refresh le… |
libp2p |
js-libp2p |
2026-08-24T21:06:39.909Z | 2026-08-25T19:04:25.322Z | |
| cve-2026-32556 | 7.1 (v3.1) | WordPress Boost plugin <= 2.0.4 - Cross Site Scripting… |
PixelYourSite Professional |
Boost |
2026-08-24T21:31:26.430Z | 2026-08-25T19:03:29.234Z |
| cve-2026-78259 | 7.3 (v3.1) | WordPress WPLegalPages plugin <= 3.7.0 - Broken Authen… |
WP Legal Pages |
WPLegalPages |
2026-08-24T21:31:29.978Z | 2026-08-25T19:03:02.064Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-442 | Vulnérabilité dans Microsoft Visio | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-441 | Multiples vulnérabilités dans Microsoft Exchange Server | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-440 | Vulnérabilité dans Microsoft Office | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-439 | Vulnérabilité dans les moteurs JScript et VBScript de Microsoft | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-438 | Vulnérabilité dans le noyau Windows | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-436 | Vulnérabilité dans Windows Remote Desktop Protocol | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-435 | Multiples vulnérabilités dans Internet Explorer | 2012-08-16T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-avi-437 | Multiples vulnérabilités dans les composants réseau Microsoft Windows | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-434 | Vulnérabilité dans libTIFF | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-433 | Vulnérabilité dans Cisco IOS | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-432 | Vulnérabilité dans Cisco Emergency Responder | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-431 | Vulnérabilités dans les produits IBM WebSphere | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-430 | Vulnérabilités dans PHP | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-429 | Vulnérabilité dans Oracle Database Server | 2012-08-14T00:00:00.000000 | 2012-08-14T00:00:00.000000 |
| certa-2012-avi-428 | Vulnérabilité dans Xen | 2012-08-13T00:00:00.000000 | 2012-08-13T00:00:00.000000 |
| certa-2012-avi-427 | Vulnérabilités dans Google Chrome | 2012-08-10T00:00:00.000000 | 2012-08-10T00:00:00.000000 |
| certa-2012-avi-426 | Vulnérabilité dans EMC Iomega StorCenter | 2012-08-09T00:00:00.000000 | 2012-08-09T00:00:00.000000 |
| certa-2012-avi-425 | Vulnérabilité des drivers NVidia | 2012-08-08T00:00:00.000000 | 2012-08-08T00:00:00.000000 |
| certa-2012-avi-424 | Vulnérabilité dans Siemens Synco OZW | 2012-08-08T00:00:00.000000 | 2012-08-08T00:00:00.000000 |
| certa-2012-avi-423 | Vulnérabilité dans HP Network Node Manager I | 2012-08-07T00:00:00.000000 | 2012-08-07T00:00:00.000000 |
| certa-2012-avi-421 | Vulnérabilité dans Adobe Flash Player | 2012-08-06T00:00:00.000000 | 2012-08-06T00:00:00.000000 |
| certa-2012-avi-252 | Vulnérabilité dans Adobe Flash Player | 2012-05-07T00:00:00.000000 | 2012-08-06T00:00:00.000000 |
| certa-2012-avi-176 | Vulnérabilités dans Adobe Flash Player | 2012-03-29T00:00:00.000000 | 2012-08-06T00:00:00.000000 |
| certa-2012-avi-115 | Vulnérabilités dans Adobe Flash Player | 2012-03-06T00:00:00.000000 | 2012-08-06T00:00:00.000000 |
| certa-2012-avi-084 | Vulnérabilités dans Adobe Flash Player | 2012-02-17T00:00:00.000000 | 2012-08-06T00:00:00.000000 |
| certa-2012-avi-420 | Vulnérabilités dans Opera | 2012-08-03T00:00:00.000000 | 2012-08-03T00:00:00.000000 |
| certa-2012-avi-419 | Multiples vulnérabilités dans IBM AIX | 2012-08-03T00:00:00.000000 | 2012-08-03T00:00:00.000000 |
| certa-2012-avi-418 | Vulnérablités dans IBM Eclipse Help System | 2012-08-03T00:00:00.000000 | 2012-08-03T00:00:00.000000 |
| certa-2012-avi-417 | Vulnérabilités dans Citrix Access Gateway | 2012-08-03T00:00:00.000000 | 2012-08-03T00:00:00.000000 |
| certa-2012-avi-416 | Vulnérabilités dans Kerberos | 2012-08-02T00:00:00.000000 | 2012-08-02T00:00:00.000000 |