Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-90932 | 8.6 (v4.0) 7.2 (v3.1) | LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE |
laradashboard |
laradashboard |
2026-09-14T12:48:27.487Z | 2026-10-29T21:17:08.541Z |
| cve-2026-90931 | 5.1 (v4.0) 5.4 (v3.1) | LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload |
laradashboard |
laradashboard |
2026-09-14T12:48:26.835Z | 2026-10-29T21:17:07.867Z |
| cve-2026-86425 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 7.1.2-30 Heap-use-after-free via Layer |
ImageMagick |
ImageMagick |
2026-09-07T12:53:47.222Z | 2026-10-29T21:17:07.184Z |
| cve-2026-86424 | 2 (v4.0) 2.5 (v3.1) | ImageMagick before 7.1.2-30 Path Traversal via TOCTOU … |
ImageMagick |
ImageMagick |
2026-09-07T12:53:46.565Z | 2026-10-29T21:17:06.488Z |
| cve-2026-86423 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 7.1.2-30 Heap-use-after-free via GetList |
ImageMagick |
ImageMagick |
2026-09-07T12:53:45.900Z | 2026-10-29T21:17:05.794Z |
| cve-2026-86422 | 1 (v4.0) 3.3 (v3.1) | ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race |
ImageMagick |
ImageMagick |
2026-09-07T12:53:45.242Z | 2026-10-29T21:17:05.093Z |
| cve-2026-86421 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 7.1.2-30 Memory Leak via MSL decoder |
ImageMagick |
ImageMagick |
2026-09-07T12:53:44.535Z | 2026-10-29T21:17:04.411Z |
| cve-2026-86420 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 7.1.2-30 Denial of Service Memory Budget |
ImageMagick |
ImageMagick |
2026-09-07T12:53:43.875Z | 2026-10-29T21:17:03.724Z |
| cve-2026-85173 | 5.3 (v4.0) | n8n before 2.36.2 Missing Authorization via Insights API |
n8n-io |
n8n |
2026-09-03T11:22:21.419Z | 2026-10-29T21:17:03.022Z |
| cve-2026-85172 | 5.3 (v4.0) | n8n before 2.34.1 SSRF via Request Helper URI Validati… |
n8n-io |
n8n |
2026-09-03T11:22:20.733Z | 2026-10-29T21:17:02.331Z |
| cve-2026-85171 | 7.1 (v4.0) | n8n before 1.123.73 Credential Exposure via Error Logging |
n8n-io |
n8n |
2026-09-03T11:22:20.066Z | 2026-10-29T21:17:01.656Z |
| cve-2026-85170 | 7.1 (v4.0) | n8n before 1.123.73 Local File Read and SSRF via Gmail… |
n8n-io |
n8n |
2026-09-03T11:22:19.386Z | 2026-10-29T21:17:00.963Z |
| cve-2026-85169 | 8.7 (v4.0) | n8n before 1.123.73 Remote Code Execution via $fromAI … |
n8n-io |
n8n |
2026-09-03T11:22:18.688Z | 2026-10-29T21:17:00.267Z |
| cve-2026-85168 | 7.7 (v4.0) | n8n before 1.123.73 Remote Code Execution via Git Node |
n8n-io |
n8n |
2026-09-03T11:22:17.960Z | 2026-10-29T21:16:59.616Z |
| cve-2026-85167 | 6.3 (v4.0) | n8n before 2.36.2 Query Injection via Elasticsearch Fi… |
n8n-io |
n8n |
2026-09-03T11:22:17.297Z | 2026-10-29T21:16:58.921Z |
| cve-2026-85166 | 7.2 (v4.0) | n8n before 2.36.2 Credential Exfiltration via Workflow… |
n8n-io |
n8n |
2026-09-03T11:22:16.613Z | 2026-10-29T21:16:58.264Z |
| cve-2026-85165 | 7.2 (v4.0) | n8n before 2.36.2 Expression Sandbox Bypass via Spread… |
n8n-io |
n8n |
2026-09-03T11:22:15.903Z | 2026-10-29T21:16:57.572Z |
| cve-2026-84807 | 5.3 (v4.0) 5.4 (v3.1) | Kimai before 2.65.0 Authentication Bypass via Team Creation |
kimai |
kimai |
2026-09-02T11:11:19.729Z | 2026-10-29T21:16:56.900Z |
| cve-2026-82854 | 9.3 (v4.0) 9.8 (v3.1) | Nodemailer before 8.0.4 SMTP Command Injection via env… |
nodemailer |
nodemailer |
2026-08-31T08:46:28.405Z | 2026-10-29T21:16:56.214Z |
| cve-2026-81694 | 9.3 (v4.0) 3.3 (v3.1) | openssl-encrypt before 1.4.9 Output Injection via Unsa… |
jahlives |
openssl_encrypt |
2026-08-27T14:50:58.318Z | 2026-10-29T21:16:55.520Z |
| cve-2026-75913 | 8.5 (v4.0) 9.3 (v3.1) | CodeWhale before 0.8.64 Argument Injection via git_show |
Hmbown |
CodeWhale |
2026-08-18T15:22:01.505Z | 2026-10-29T21:16:54.792Z |
| cve-2026-75857 | 7.3 (v4.0) 7 (v3.1) | CodeWhale before 0.8.64 Privilege Escalation via exec_… |
Hmbown |
CodeWhale |
2026-08-18T15:21:56.357Z | 2026-10-29T21:16:54.116Z |
| cve-2026-73608 | 9.2 (v4.0) 8.6 (v3.1) | SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttr… |
siyuan-note |
siyuan |
2026-08-13T11:28:13.125Z | 2026-10-29T21:16:53.439Z |
| cve-2026-73051 | 6.3 (v4.0) | actix-http before 3.12.1 HTTP Request Smuggling via CL.TE |
actix |
actix-http |
2026-08-14T11:35:45.780Z | 2026-10-29T21:16:52.750Z |
| cve-2026-72832 | 5.1 (v4.0) 5.4 (v3.1) | Grav before 2.0.13 Stored XSS via quoted-attribute bypass |
getgrav |
grav |
2026-08-14T11:35:38.484Z | 2026-10-29T21:16:52.047Z |
| cve-2026-72831 | 8.7 (v4.0) 8.8 (v3.1) | Grav through 2.0.11 Authentication Bypass via Flex Objects |
getgrav |
grav |
2026-08-14T11:35:37.801Z | 2026-10-29T21:16:51.350Z |
| cve-2026-72826 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin before 1.0.13 Scope Bypass via createApiKey |
getgrav |
grav-plugin-api |
2026-08-14T11:35:34.460Z | 2026-10-29T21:16:50.591Z |
| cve-2026-72825 | 7.2 (v4.0) 7.6 (v3.1) | Grav API Plugin before 1.0.13 API-key scope cap bypass… |
getgrav |
grav-plugin-api |
2026-08-14T11:35:33.800Z | 2026-10-29T21:16:49.910Z |
| cve-2026-72814 | 6.3 (v4.0) | actix-files before 0.6.10 Information Disclosure via Files |
actix |
actix-files |
2026-08-14T11:35:26.816Z | 2026-10-29T21:16:49.247Z |
| cve-2026-72813 | 6.9 (v4.0) | actix-files before 0.6.10 Denial of Service via empty … |
actix |
actix-files |
2026-08-14T11:35:26.123Z | 2026-10-29T21:16:48.549Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-274 | Multiples vulnérabilités dans EMC Documentum Information Rights Management | 2012-05-11T00:00:00.000000 | 2012-05-11T00:00:00.000000 |
| certa-2012-avi-273 | Vulnérabilité dans IBM AIX | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-272 | Multiples vulnérabilités dans OS X Lion | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-271 | Multiples vulnérabilités dans Safari | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-270 | Vulnérabilités dans Horde IMP | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-269 | Vulnérabilité dans CiscoWorks Prime LAN Management | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-268 | Vulnérabilités dans HP Performance Insight | 2012-05-10T00:00:00.000000 | 2012-05-10T00:00:00.000000 |
| certa-2012-avi-267 | Vulnérabilités dans PHP | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-266 | Multiples vulnérabilités dans Adobe Shockwave Player | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-265 | Vulnérabilité dans Adobe Flash Professionnel | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-263 | Multiples vulnérabilités dans Adobe Illustrator | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-262 | Multiples vulnérabilités dans les produits Apple | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-261 | Vulnérabilités dans Pidgin | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-260 | Vulnérabilités dans .NET Framework | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-259 | Multiples vulnérabilités dans Office, Windows, .NET et Silverlight | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-258 | Vulnérabilité dans le gestionnaire de partitions de Windows | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-257 | Vulnérabilités dans la pile TCP/IP de Windows | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-256 | Vulnérabilité dans Microsoft Visio Viewer | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-255 | Vulnérabilités dans Microsoft Office | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-254 | Vulnérabilité dans Microsoft Office | 2012-05-09T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-224 | Vulnérabilité dans OpenSSL | 2012-04-20T00:00:00.000000 | 2012-05-09T00:00:00.000000 |
| certa-2012-avi-253 | Vulnérabilités dans FFmpeg | 2012-05-07T00:00:00.000000 | 2012-05-07T00:00:00.000000 |
| certa-2012-avi-251 | Vulnérabilité dans IBM AIX | 2012-05-07T00:00:00.000000 | 2012-05-07T00:00:00.000000 |
| certa-2012-avi-250 | Multiples vulnérabilités dans Drupal | 2012-05-04T00:00:00.000000 | 2012-05-04T00:00:00.000000 |
| certa-2012-avi-249 | Multiples vulnérabilités dans VMware | 2012-05-04T00:00:00.000000 | 2012-05-04T00:00:00.000000 |
| certa-2012-avi-248 | Vulnérabilités dans HP System Health Application and Command Line Utilities | 2012-05-04T00:00:00.000000 | 2012-05-04T00:00:00.000000 |
| certa-2012-avi-247 | Vulnérabilités dans HP Insight Management Agents | 2012-05-04T00:00:00.000000 | 2012-05-04T00:00:00.000000 |
| certa-2012-avi-246 | Vulnérabilité dans PHP | 2012-05-04T00:00:00.000000 | 2012-05-04T00:00:00.000000 |
| certa-2012-avi-245 | Vulnérabilité dans Citrix | 2012-05-03T00:00:00.000000 | 2012-05-03T00:00:00.000000 |
| certa-2012-avi-244 | Vulnérabilités dans PHP | 2012-05-03T00:00:00.000000 | 2012-05-03T00:00:00.000000 |