Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unva… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:58:25.871Z | 2026-08-25T19:16:25.169Z | |
| cve-2026-77354 | kin-openapi: Uncontrolled resource consumption in open… |
getkin |
kin-openapi |
2026-08-21T20:44:47.792Z | 2026-08-25T19:15:23.235Z | |
| cve-2026-80049 | 8.7 (v4.0) 8.8 (v3.1) | Airbyte Platform through 2.0.0 Cross-Workspace Authori… |
airbytehq |
airbyte-platform |
2026-08-25T18:23:16.504Z | 2026-08-25T19:15:04.934Z |
| cve-2026-78434 | Faveo Helpdesk post-ticket-reply Endpoint FormControll… |
Faveo |
Helpdesk |
2026-08-24T21:30:08.526Z | 2026-08-25T19:14:49.643Z | |
| cve-2026-75910 | 6.5 (v3.1) 7.1 (v4.0) | Incorrect privilege assignment in the Amazon aws-athen… |
AWS |
Athena Federated Query Clickhouse Connector deployment template |
2026-08-20T20:06:54.217Z | 2026-08-25T19:13:06.552Z |
| cve-2026-32554 | 9.3 (v3.1) | WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 … |
WBW |
WooBeWoo Product Filter Pro |
2026-08-24T21:31:25.000Z | 2026-08-25T19:12:24.665Z |
| cve-2026-77506 | 4.8 (v3.1) | Znuny before LTS 6.5.22 allows AgentTicketEmailRe… |
Znuny |
Znuny |
2026-08-20T20:18:55.670Z | 2026-08-25T19:12:24.097Z |
| cve-2026-19755 | 6.9 (v4.0) | NoSleep 1.5.1 - Unauthorized disclosure of root-owned … |
NoSleep |
NoSleep |
2026-08-20T20:26:12.423Z | 2026-08-25T19:11:30.734Z |
| cve-2026-77584 | 7 (v3.1) | Tor before 0.4.9.10 did not reject a CONFLUX_LINK… |
torproject |
Tor |
2026-08-20T20:38:42.159Z | 2026-08-25T19:09:53.308Z |
| cve-2026-77587 | 5.9 (v3.1) | Tor before 0.4.9.11 is prone to a use-after-free … |
torproject |
Tor |
2026-08-20T20:47:39.964Z | 2026-08-25T19:09:06.542Z |
| cve-2026-77751 | 8.8 (v4.0) | Path Traversal in MISP Object Template Resolution Duri… |
misp |
misp-stix |
2026-08-21T09:48:20.168Z | 2026-08-25T19:08:25.414Z |
| cve-2026-7141 | vLLM KV Block kv_cache_interface.py has_mamba_layers u… |
n/a |
vLLM |
2026-04-27T16:45:12.662Z | 2026-08-25T19:07:56.947Z | |
| cve-2026-12999 | 5.3 (v3.1) | Infineon Airoc Wi-Fi driver leaks TX buffers on send f… |
zephyrproject |
zephyr |
2026-08-22T20:35:40.445Z | 2026-08-25T19:07:22.689Z |
| cve-2026-9728 | 6.4 (v3.1) | TOCTOU race in mbox_send syscall verifier allows users… |
zephyrproject |
zephyr |
2026-08-24T14:28:46.429Z | 2026-08-25T19:06:35.431Z |
| cve-2024-5647 | Multiple Plugins <= (Various Versions) - Authenticated… |
blossomthemes |
BlossomThemes Social Feed |
2025-07-03T09:22:19.308Z | 2026-08-25T19:06:26.772Z | |
| cve-2026-78264 | 7.1 (v3.1) | WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site… |
Site Building with Toolset |
Toolset Blocks |
2026-08-24T21:31:32.102Z | 2026-08-25T19:06:19.855Z |
| cve-2026-78282 | 7.1 (v3.1) | WordPress Stripe Payments plugin <= 2.1.2 - Cross Site… |
mra13 |
Stripe Payments |
2026-08-24T21:31:35.725Z | 2026-08-25T19:05:40.876Z |
| cve-2026-59183 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bou… |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:45:02.860Z | 2026-08-25T19:05:14.664Z | |
| cve-2026-77384 | libp2p: Circuit relay v2 server reservation refresh le… |
libp2p |
js-libp2p |
2026-08-24T21:06:39.909Z | 2026-08-25T19:04:25.322Z | |
| cve-2026-32556 | 7.1 (v3.1) | WordPress Boost plugin <= 2.0.4 - Cross Site Scripting… |
PixelYourSite Professional |
Boost |
2026-08-24T21:31:26.430Z | 2026-08-25T19:03:29.234Z |
| cve-2026-78259 | 7.3 (v3.1) | WordPress WPLegalPages plugin <= 3.7.0 - Broken Authen… |
WP Legal Pages |
WPLegalPages |
2026-08-24T21:31:29.978Z | 2026-08-25T19:03:02.064Z |
| cve-2026-78266 | 6.5 (v3.1) | WordPress AutomatorWP plugin <= 5.8.3 - Broken Access … |
Ruben Garcia |
AutomatorWP |
2026-08-24T21:31:33.520Z | 2026-08-25T19:02:39.587Z |
| cve-2026-66109 | 7.8 (v3.0) 8.5 (v4.0) | A missing authorization vulnerability exists in S… |
Sky Co., LTD. |
SKYSEA Client View |
2026-08-25T06:27:50.328Z | 2026-08-25T19:02:20.730Z |
| cve-2026-55581 | mcp-shell: Secure Mode Allowlist Bypass via Default `/… |
sonirico |
mcp-shell |
2026-08-25T15:40:10.992Z | 2026-08-25T19:01:56.083Z | |
| cve-2026-55557 | browse-mcp: Arbitrary file write via unconfined downlo… |
That1Drifter |
browse-mcp |
2026-08-25T16:28:07.368Z | 2026-08-25T19:00:25.437Z | |
| cve-2026-59189 | OpenEXR: Out-of-bounds read in DeepImageChannel::row()… |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:51:31.110Z | 2026-08-25T18:59:12.883Z | |
| cve-2026-55663 | mediasoup: SCTP state cookie lacks cryptographic authe… |
versatica |
mediasoup |
2026-08-25T18:15:16.059Z | 2026-08-25T18:55:59.044Z | |
| cve-2026-79787 | 9.3 (v4.0) 9.8 (v3.1) | Alluxio through 2.9.5 S3 REST Proxy Authentication Byp… |
Alluxio |
alluxio |
2026-08-25T18:23:15.172Z | 2026-08-25T18:55:20.157Z |
| cve-2026-59984 | OpenEXR: Scratch buffer overflow decoding B44-compress… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:13:01.835Z | 2026-08-25T18:38:43.746Z | |
| cve-2026-59983 | OpenEXR: Out-of-bounds read in DeepTiledInputFile samp… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:02:42.977Z | 2026-08-25T18:32:39.465Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-646 | Vulnérabilité dans iTunes | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-644 | Vulnérabilité dans AIX | 2011-11-17T00:00:00.000000 | 2011-11-17T00:00:00.000000 |
| certa-2011-avi-643 | Vulnérabilité dans phpMyAdmin | 2011-11-17T00:00:00.000000 | 2011-11-17T00:00:00.000000 |
| certa-2011-avi-642 | Vulnérabilités dans Google Chrome | 2011-11-17T00:00:00.000000 | 2011-11-17T00:00:00.000000 |
| certa-2011-avi-635 | Vulnérabilité dans ProFTPd | 2011-11-14T00:00:00.000000 | 2011-11-17T00:00:00.000000 |
| certa-2011-avi-641 | HP Directories Support for ProLiant Management Processors | 2011-11-15T00:00:00.000000 | 2011-11-15T00:00:00.000000 |
| certa-2011-avi-640 | Vulnérabilités dans Joomla! | 2011-11-15T00:00:00.000000 | 2011-11-15T00:00:00.000000 |
| certa-2011-avi-639 | Vulnérabilités dans HP OpenVMS | 2011-11-15T00:00:00.000000 | 2011-11-15T00:00:00.000000 |
| certa-2011-avi-638 | Vulnérabilités dans des produits Cisco TelePresence et Tandberg | 2011-11-15T00:00:00.000000 | 2011-11-15T00:00:00.000000 |
| certa-2011-avi-637 | Vulnérabilité dans les produits Apple <SPAN class="textit">Time Capsule</SPAN> et <SPAN class="textit">AirPort Base Station</SPAN> | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-636 | Vulnérabilité dans HP StorageWorks P4000 Virtual SAN Appliance | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-634 | Vulnérabilités dans Apple iOS | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-633 | Vulnérabilité dans Juniper | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-632 | Vulnérabilité dans GnuTLS | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-631 | Vulnérabilités dans HP Network Node Manager i | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-629 | Vulnérabilités dans Novell ZENworks | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-628 | Multiples vulnérabilités dans l'hyperviseur <SPAN class="textit">Xen</SPAN> | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-627 | Vulnérabilité dans <SPAN class= "textit">DB2 Query Monitor Tool</SPAN> | 2011-11-14T00:00:00.000000 | 2011-11-14T00:00:00.000000 |
| certa-2011-avi-626 | Multiples vulnérabilités dans les produits Mozilla | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-625 | Multiples vulnérabilités dans Adobe Shockwave Player | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-624 | Vulnérabilité dans Microsoft Active Directory | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-623 | Vulnérabilité dans Windows Mail et l'espace de collaboration Windows | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-622 | Vulnérabilité dans Microsoft Windows | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-621 | Vulnérabilité dans la pile TCP/IP de Windows | 2011-11-09T00:00:00.000000 | 2011-11-09T00:00:00.000000 |
| certa-2011-avi-620 | Vulnérabilité dans RSA Key Manager Appliance | 2011-11-08T00:00:00.000000 | 2011-11-08T00:00:00.000000 |
| certa-2011-avi-619 | Vulnérabilité dans Juniper | 2011-11-08T00:00:00.000000 | 2011-11-08T00:00:00.000000 |
| certa-2011-avi-618 | Vulnérabilités dans HP OpenView Network Node Manager | 2011-11-08T00:00:00.000000 | 2011-11-08T00:00:00.000000 |
| certa-2011-avi-617 | Vulnérabilité EMC Documentum eRoom | 2011-11-07T00:00:00.000000 | 2011-11-07T00:00:00.000000 |
| certa-2011-avi-616 | Vulnérabilités dans IBM AIX Bind | 2011-11-03T00:00:00.000000 | 2011-11-03T00:00:00.000000 |
| certa-2011-avi-615 | Vulnérabilité dans Squid | 2011-11-03T00:00:00.000000 | 2011-11-03T00:00:00.000000 |