Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55527 | PraisonAI: Arbitrary file write via unsanitized `user_… |
MervinPraison |
PraisonAI |
2026-08-25T15:09:07.500Z | 2026-08-25T19:21:08.622Z | |
| cve-2026-55539 | PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/a… |
MervinPraison |
PraisonAI |
2026-08-25T15:14:07.109Z | 2026-08-25T19:20:57.949Z | |
| cve-2026-78379 | 9.2 (v4.0) 8.1 (v3.1) | Consent bypass in python_repl tool via batch kwargs fo… |
Amazon |
strands-agents-tools |
2026-08-25T19:05:57.779Z | 2026-08-25T19:20:51.512Z |
| cve-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/… |
cbcoutinho |
nextcloud-mcp-server |
2026-08-25T16:03:28.085Z | 2026-08-25T19:20:43.689Z | |
| cve-2026-59184 | OpenEXR: OpenEXRUtil FlatImageChannel row nonzero data… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:28:47.827Z | 2026-08-25T19:20:34.302Z | |
| cve-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 pl… |
AcademySoftwareFoundation |
openexr |
2026-08-25T17:59:25.292Z | 2026-08-25T19:20:27.685Z | |
| cve-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses i… |
GOVCERT-LU |
eml_parser |
2026-08-25T18:24:29.921Z | 2026-08-25T19:20:15.362Z | |
| cve-2026-62440 | Apache CloudStack: Improper access control in Kubernet… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:23:55.427Z | 2026-08-25T19:20:14.393Z | |
| cve-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:27:19.057Z | 2026-08-25T19:20:04.216Z | |
| cve-2026-18420 | 8.8 (v3.1) 8.7 (v4.0) | RCE via Prototype Pollution in OpenSearch Dashboards |
AWS |
Amazon OpenSearch Service |
2026-08-20T20:40:40.709Z | 2026-08-25T19:19:07.471Z |
| cve-2026-32561 | 8.8 (v3.1) | WordPress Booking Hub plugin <= 1.3.0 - Privilege Esca… |
LiquidThemes |
Booking Hub |
2026-08-24T21:31:28.568Z | 2026-08-25T19:17:36.940Z |
| cve-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE de… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:16:37.986Z | 2026-08-25T19:16:49.514Z | |
| cve-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unva… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:58:25.871Z | 2026-08-25T19:16:25.169Z | |
| cve-2026-77354 | kin-openapi: Uncontrolled resource consumption in open… |
getkin |
kin-openapi |
2026-08-21T20:44:47.792Z | 2026-08-25T19:15:23.235Z | |
| cve-2026-80049 | 8.7 (v4.0) 8.8 (v3.1) | Airbyte Platform through 2.0.0 Cross-Workspace Authori… |
airbytehq |
airbyte-platform |
2026-08-25T18:23:16.504Z | 2026-08-25T19:15:04.934Z |
| cve-2026-78434 | Faveo Helpdesk post-ticket-reply Endpoint FormControll… |
Faveo |
Helpdesk |
2026-08-24T21:30:08.526Z | 2026-08-25T19:14:49.643Z | |
| cve-2026-75910 | 6.5 (v3.1) 7.1 (v4.0) | Incorrect privilege assignment in the Amazon aws-athen… |
AWS |
Athena Federated Query Clickhouse Connector deployment template |
2026-08-20T20:06:54.217Z | 2026-08-25T19:13:06.552Z |
| cve-2026-32554 | 9.3 (v3.1) | WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 … |
WBW |
WooBeWoo Product Filter Pro |
2026-08-24T21:31:25.000Z | 2026-08-25T19:12:24.665Z |
| cve-2026-77506 | 4.8 (v3.1) | Znuny before LTS 6.5.22 allows AgentTicketEmailRe… |
Znuny |
Znuny |
2026-08-20T20:18:55.670Z | 2026-08-25T19:12:24.097Z |
| cve-2026-19755 | 6.9 (v4.0) | NoSleep 1.5.1 - Unauthorized disclosure of root-owned … |
NoSleep |
NoSleep |
2026-08-20T20:26:12.423Z | 2026-08-25T19:11:30.734Z |
| cve-2026-77584 | 7 (v3.1) | Tor before 0.4.9.10 did not reject a CONFLUX_LINK… |
torproject |
Tor |
2026-08-20T20:38:42.159Z | 2026-08-25T19:09:53.308Z |
| cve-2026-77587 | 5.9 (v3.1) | Tor before 0.4.9.11 is prone to a use-after-free … |
torproject |
Tor |
2026-08-20T20:47:39.964Z | 2026-08-25T19:09:06.542Z |
| cve-2026-77751 | 8.8 (v4.0) | Path Traversal in MISP Object Template Resolution Duri… |
misp |
misp-stix |
2026-08-21T09:48:20.168Z | 2026-08-25T19:08:25.414Z |
| cve-2026-7141 | vLLM KV Block kv_cache_interface.py has_mamba_layers u… |
n/a |
vLLM |
2026-04-27T16:45:12.662Z | 2026-08-25T19:07:56.947Z | |
| cve-2026-12999 | 5.3 (v3.1) | Infineon Airoc Wi-Fi driver leaks TX buffers on send f… |
zephyrproject |
zephyr |
2026-08-22T20:35:40.445Z | 2026-08-25T19:07:22.689Z |
| cve-2026-9728 | 6.4 (v3.1) | TOCTOU race in mbox_send syscall verifier allows users… |
zephyrproject |
zephyr |
2026-08-24T14:28:46.429Z | 2026-08-25T19:06:35.431Z |
| cve-2024-5647 | Multiple Plugins <= (Various Versions) - Authenticated… |
blossomthemes |
BlossomThemes Social Feed |
2025-07-03T09:22:19.308Z | 2026-08-25T19:06:26.772Z | |
| cve-2026-78264 | 7.1 (v3.1) | WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site… |
Site Building with Toolset |
Toolset Blocks |
2026-08-24T21:31:32.102Z | 2026-08-25T19:06:19.855Z |
| cve-2026-78282 | 7.1 (v3.1) | WordPress Stripe Payments plugin <= 2.1.2 - Cross Site… |
mra13 |
Stripe Payments |
2026-08-24T21:31:35.725Z | 2026-08-25T19:05:40.876Z |
| cve-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bou… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:45:02.860Z | 2026-08-25T19:05:14.664Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-415 | Vulnérabilités dans Google Chrome | 2012-08-02T00:00:00.000000 | 2012-08-02T00:00:00.000000 |
| certa-2012-avi-414 | Vulnérabilités dans IBM Rational Directory Server | 2012-08-01T00:00:00.000000 | 2012-08-01T00:00:00.000000 |
| certa-2012-avi-413 | Vulnérabilité dans SIMATIC S7-400 CPU | 2012-08-01T00:00:00.000000 | 2012-08-01T00:00:00.000000 |
| certa-2012-avi-412 | Vulnérabilités dans Django | 2012-08-01T00:00:00.000000 | 2012-08-01T00:00:00.000000 |
| certa-2012-avi-411 | Vulnérabilité dans IBM WebSphere | 2012-07-30T00:00:00.000000 | 2012-07-30T00:00:00.000000 |
| certa-2012-avi-410 | Vulnérabilité dans IBM AIX | 2012-07-30T00:00:00.000000 | 2012-07-30T00:00:00.000000 |
| certa-2012-avi-409 | Vulnérabilité dans Ruby on Rails | 2012-07-30T00:00:00.000000 | 2012-07-30T00:00:00.000000 |
| certa-2012-avi-408 | Vulnérabilités dans Bugzilla | 2012-07-30T00:00:00.000000 | 2012-07-30T00:00:00.000000 |
| certa-2012-avi-407 | Vulnérabilités dans IBM SONAS | 2012-07-30T00:00:00.000000 | 2012-07-30T00:00:00.000000 |
| certa-2012-avi-406 | Vulnérabilités dans ISC DHCP | 2012-07-26T00:00:00.000000 | 2012-07-26T00:00:00.000000 |
| certa-2012-avi-405 | Vulnérabilités dans ISC BIND | 2012-07-26T00:00:00.000000 | 2012-07-26T00:00:00.000000 |
| certa-2012-avi-404 | Multiples vulnérabilités dans Safari | 2012-07-26T00:00:00.000000 | 2012-07-26T00:00:00.000000 |
| certa-2012-avi-403 | Vulnérabilité dans Bash | 2012-07-26T00:00:00.000000 | 2012-07-26T00:00:00.000000 |
| certa-2012-avi-402 | Vulnérabilités dans Siemens SIMATIC STEP et PCS | 2012-07-25T00:00:00.000000 | 2012-07-25T00:00:00.000000 |
| certa-2012-avi-401 | Vulnérabilités dans Wireshark | 2012-07-25T00:00:00.000000 | 2012-07-25T00:00:00.000000 |
| certa-2012-avi-400 | Vulnérabilités dans Red Hat Certificate System v8 | 2012-07-24T00:00:00.000000 | 2012-07-24T00:00:00.000000 |
| certa-2012-avi-399 | Vulnérabilités dans Symantec System Recovery 2011 et Backup Exec System Recovery 2010 | 2012-07-24T00:00:00.000000 | 2012-07-24T00:00:00.000000 |
| certa-2012-avi-398 | Multiples vulnérabilités dans Symantec Web Gateway | 2012-07-24T00:00:00.000000 | 2012-07-24T00:00:00.000000 |
| certa-2012-avi-397 | Vulnérabilité dans PHP | 2012-07-24T00:00:00.000000 | 2012-07-24T00:00:00.000000 |
| certa-2012-avi-396 | Vulnérabilités dans Moodle | 2012-07-20T00:00:00.000000 | 2012-07-20T00:00:00.000000 |
| certa-2012-avi-395 | Vulnérabilités dans HP Network Node Manager i | 2012-07-18T00:00:00.000000 | 2012-07-18T00:00:00.000000 |
| certa-2012-avi-394 | Multiples vulnérabilités dans Mozilla Firefox et Thunderbird | 2012-07-18T00:00:00.000000 | 2012-07-18T00:00:00.000000 |
| certa-2012-avi-393 | Multiples vulnérabilités dans les produits Oracle | 2012-07-18T00:00:00.000000 | 2012-07-18T00:00:00.000000 |
| certa-2012-avi-392 | Vulnérabilité dans libexif | 2012-07-17T00:00:00.000000 | 2012-07-17T00:00:00.000000 |
| certa-2012-avi-391 | Vulnérabilités dans IBM WebSphere | 2012-07-17T00:00:00.000000 | 2012-07-17T00:00:00.000000 |
| certa-2012-avi-305 | Vulnérabilité dans BIND | 2012-06-04T00:00:00.000000 | 2012-07-17T00:00:00.000000 |
| certa-2012-avi-390 | Vulnérabilité dans HP AssetManager | 2012-07-16T00:00:00.000000 | 2012-07-16T00:00:00.000000 |
| certa-2012-avi-389 | Vulnérabilité dans divers produits EMC | 2012-07-13T00:00:00.000000 | 2012-07-13T00:00:00.000000 |
| certa-2012-avi-388 | Vulnérabilité dans GLPI | 2012-07-13T00:00:00.000000 | 2012-07-13T00:00:00.000000 |
| certa-2012-avi-387 | Multiples vulnérabilités dans VMware ESXi | 2012-07-13T00:00:00.000000 | 2012-07-13T00:00:00.000000 |