Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bou… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:45:02.860Z | 2026-08-25T19:05:14.664Z | |
| cve-2026-77384 | libp2p: Circuit relay v2 server reservation refresh le… |
libp2p |
js-libp2p |
2026-08-24T21:06:39.909Z | 2026-08-25T19:04:25.322Z | |
| cve-2026-32556 | 7.1 (v3.1) | WordPress Boost plugin <= 2.0.4 - Cross Site Scripting… |
PixelYourSite Professional |
Boost |
2026-08-24T21:31:26.430Z | 2026-08-25T19:03:29.234Z |
| cve-2026-78259 | 7.3 (v3.1) | WordPress WPLegalPages plugin <= 3.7.0 - Broken Authen… |
WP Legal Pages |
WPLegalPages |
2026-08-24T21:31:29.978Z | 2026-08-25T19:03:02.064Z |
| cve-2026-78266 | 6.5 (v3.1) | WordPress AutomatorWP plugin <= 5.8.3 - Broken Access … |
Ruben Garcia |
AutomatorWP |
2026-08-24T21:31:33.520Z | 2026-08-25T19:02:39.587Z |
| cve-2026-66109 | 7.8 (v3.0) 8.5 (v4.0) | A missing authorization vulnerability exists in S… |
Sky Co., LTD. |
SKYSEA Client View |
2026-08-25T06:27:50.328Z | 2026-08-25T19:02:20.730Z |
| cve-2026-55581 | mcp-shell: Secure Mode Allowlist Bypass via Default `/… |
sonirico |
mcp-shell |
2026-08-25T15:40:10.992Z | 2026-08-25T19:01:56.083Z | |
| cve-2026-55557 | browse-mcp: Arbitrary file write via unconfined downlo… |
That1Drifter |
browse-mcp |
2026-08-25T16:28:07.368Z | 2026-08-25T19:00:25.437Z | |
| cve-2026-59189 | OpenEXR: Out-of-bounds read in DeepImageChannel::row()… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:51:31.110Z | 2026-08-25T18:59:12.883Z | |
| cve-2026-55663 | mediasoup: SCTP state cookie lacks cryptographic authe… |
versatica |
mediasoup |
2026-08-25T18:15:16.059Z | 2026-08-25T18:55:59.044Z | |
| cve-2026-79787 | 9.3 (v4.0) 9.8 (v3.1) | Alluxio through 2.9.5 S3 REST Proxy Authentication Byp… |
Alluxio |
alluxio |
2026-08-25T18:23:15.172Z | 2026-08-25T18:55:20.157Z |
| cve-2026-59984 | OpenEXR: Scratch buffer overflow decoding B44-compress… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:13:01.835Z | 2026-08-25T18:38:43.746Z | |
| cve-2026-59983 | OpenEXR: Out-of-bounds read in DeepTiledInputFile samp… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:02:42.977Z | 2026-08-25T18:32:39.465Z | |
| cve-2026-55624 | MintyItanium Lost-Auction takes items like barrier blo… |
MintyItanium |
Lost-Auction |
2026-08-25T14:56:11.409Z | 2026-08-25T18:27:35.700Z | |
| cve-2026-55546 | QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Exec… |
QWED-AI |
qwed-mcp |
2026-08-25T15:25:34.759Z | 2026-08-25T18:26:44.049Z | |
| cve-2026-55553 | urllib: Cross-origin redirects preserve credential-bea… |
node-modules |
urllib |
2026-08-25T16:18:21.519Z | 2026-08-25T18:25:40.662Z | |
| cve-2021-4090 | N/A | An out-of-bounds (OOB) memory write flaw was foun… |
Linux |
kernel |
2022-02-18T00:00:00.000Z | 2026-08-25T18:25:21.957Z |
| cve-2026-55637 | genieacs-mcp: DNS rebinding reaches local GenieACS MCP… |
GeiserX |
genieacs-mcp |
2026-08-25T18:03:34.701Z | 2026-08-25T18:24:42.746Z | |
| cve-2026-59186 | OpenEXR: Heap out-of-bounds write in TiledRgbaInputFil… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:35:58.364Z | 2026-08-25T18:18:53.138Z | |
| cve-2026-55528 | praisonaiagents: AgentServer declares auth_token but n… |
MervinPraison |
PraisonAI |
2026-08-25T14:32:05.929Z | 2026-08-25T18:17:51.763Z | |
| cve-2026-55535 | PraisonAI: Server-Side Request Forgery via DNS rebindi… |
MervinPraison |
PraisonAI |
2026-08-25T15:01:47.765Z | 2026-08-25T18:16:28.163Z | |
| cve-2026-56703 | 8.6 (v4.0) 7.2 (v3.1) | Adminer before 5.4.3 Remote Code Execution via SQLite … |
vrana |
adminer |
2026-08-25T01:30:01.161Z | 2026-08-25T18:13:21.776Z |
| cve-2026-18100 | MetForm <= 4.1.8 - Authenticated (Contributor+) Stored… |
roxnor |
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor |
2026-08-25T07:39:50.408Z | 2026-08-25T18:12:52.098Z | |
| cve-2026-19943 | Gutenverse <= 4.0.2 - Authenticated (Contributor+) Sto… |
jegstudio |
Gutenverse – WordPress Blocks, Page Builder & Site Editor |
2026-08-25T03:27:07.375Z | 2026-08-25T18:12:00.782Z | |
| cve-2026-75019 | Cozy Blocks <= 2.2.16 - Authenticated (Contributor+) S… |
cozythemes |
Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates |
2026-08-25T02:26:49.343Z | 2026-08-25T18:11:08.599Z | |
| cve-2026-10630 | WP Courses LMS <= 3.2.29 - Insecure Direct Object Refe… |
hookandhook |
WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses |
2026-08-25T01:26:43.510Z | 2026-08-25T18:10:00.099Z | |
| cve-2026-55623 | N/A | {'providerMetadata': {'orgId': 'a0819718-46f1-4df5-94e2-005712e83aaa', 'shortName': 'GitHub_M', 'dateUpdated': '2026-08-25T18:08:48.237Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE is a duplicate of another CVE.'}], 'replacedBy': ['CVE-2026-48853']} | N/A | N/A | 2026-08-25T18:08:48.237Z | |
| cve-2022-37315 | N/A | graphql-go (aka GraphQL for Go) through 0.8.0 has… |
n/a |
n/a |
2022-08-01T21:53:26.000Z | 2026-08-25T18:08:38.386Z |
| cve-2026-56708 | 6.9 (v4.0) 5.3 (v3.1) | Grav API Plugin before 1.0.16 SSRF via DNS Rebinding |
getgrav |
grav |
2026-08-25T01:30:08.721Z | 2026-08-25T18:07:04.185Z |
| cve-2026-75498 | Webkul QloApps SQL injection |
Webkul |
QloApps |
2026-08-25T16:37:43.725Z | 2026-08-25T18:06:22.590Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-385 | Vulnérabilités dans Google Chrome | 2012-07-12T00:00:00.000000 | 2012-07-12T00:00:00.000000 |
| certa-2012-avi-384 | Multiples vulnérabilités dans les produits Cisco TelePresence | 2012-07-12T00:00:00.000000 | 2012-07-12T00:00:00.000000 |
| certa-2012-avi-383 | Vulnérabilité dans Microsoft Office pour Mac | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-382 | Vulnérabilité dans Microsoft SharePoint | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-381 | Vulnérabilité dans le protocole de chiffrement TLS | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-380 | Vulnérabilité dans l'interpréteur de commande Windows | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-379 | Vulnérabilités dans des pilotes du noyau Windows | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-378 | Vulnérabilité dans Microsoft Data Access Components | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-377 | Vulnérabilités dans Microsoft Internet Explorer | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-376 | Vulnérabilité Microsoft Visual Basic pour Applications | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-375 | Vulnérabilité dans Microsoft XML Core Services | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-374 | Vulnérabilités dans HP Operations Agent | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-386 | Vulnérabilité dans Libpng | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-373 | Vulnérabilités dans VLC | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-372 | Vulnérabilité dans eZ Publish eZOE | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-371 | Vulnérabilités dans Asterisk | 2012-07-09T00:00:00.000000 | 2012-07-09T00:00:00.000000 |
| certa-2012-avi-370 | Vulnérabilité dans Pidgin | 2012-07-09T00:00:00.000000 | 2012-07-09T00:00:00.000000 |
| certa-2012-avi-369 | Vulnérabilité dans HP ProtectTools Enterprise | 2012-07-06T00:00:00.000000 | 2012-07-06T00:00:00.000000 |
| certa-2012-avi-368 | Vulnérabilité dans RSA Access Manager | 2012-07-05T00:00:00.000000 | 2012-07-05T00:00:00.000000 |
| certa-2012-avi-367 | Vulnérabilité dans TYPO3 | 2012-07-05T00:00:00.000000 | 2012-07-05T00:00:00.000000 |
| certa-2012-avi-366 | Vulnérabilité dans SPIP | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-365 | Vulnérabilité dans Avaya IP Office Customer Call Reporter | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-364 | Vulnérabilité dans HP-UX | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-344 | Vulnérabilités dans Joomla! | 2012-06-20T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-363 | Vulnérabilité dans Novell GroupWise | 2012-07-03T00:00:00.000000 | 2012-07-03T00:00:00.000000 |
| certa-2012-avi-362 | Vulnérabilité dans Network Node Manager i | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-361 | Multiples vulnérabilités dans WordPress | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-360 | Multiples vulnérabilités dans IBM Support Assistant | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-359 | Vulnérabilité dans des imprimantes HP Photosmart | 2012-06-29T00:00:00.000000 | 2012-06-29T00:00:00.000000 |
| certa-2012-avi-358 | Multiples vulnérabilités dans HP System Management Homepage | 2012-06-29T00:00:00.000000 | 2012-06-29T00:00:00.000000 |