Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72697 | 7.1 (v4.0) 6.5 (v3.1) | Grav CMS before 2.0.16 Path Traversal via media_directory |
getgrav |
grav |
2026-08-25T01:30:18.001Z | 2026-08-25T18:01:46.215Z |
| cve-2026-26211 | 4.8 (v4.0) 4.8 (v3.1) | Ekushey Project Manager CRM 5.0 Stored XSS via System … |
Creativeitem |
Ekushey Project Manager CRM |
2026-08-25T17:28:19.228Z | 2026-08-25T18:01:02.481Z |
| cve-2026-78887 | liketrek TREK Journey Photo Proxy validateShareTokenFo… |
liketrek |
TREK |
2026-08-25T12:45:10.723Z | 2026-08-25T17:59:31.339Z | |
| cve-2026-55571 | djust authentication bypass: a login_required / on_mou… |
djust-org |
djust |
2026-08-25T16:05:49.069Z | 2026-08-25T17:56:03.253Z | |
| cve-2026-59187 | OpenEXR: exrmetrics deep pixelmode heap buffer overflow |
AcademySoftwareFoundation |
openexr |
2026-08-25T16:38:51.404Z | 2026-08-25T17:52:03.356Z | |
| cve-2023-4010 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': 'Rejected because the CVE description attributes a vulnerability to a non-existent Linux kernel function (usb_giveback_urb()) and the reported issue cannot be mapped to any valid codebase.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-08-25T17:44:55.892Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}} | N/A | N/A | 2023-07-31T16:22:24.371Z | 2026-08-25T17:44:55.892Z |
| cve-2026-79771 | 6.9 (v4.0) 5.3 (v3.1) | Nokogiri before 1.19.3 Memory Leak via XSLT Transform |
sparklemotion |
nokogiri |
2026-08-25T15:16:03.736Z | 2026-08-25T17:44:08.629Z |
| cve-2026-62674 | Omnigent: Shared Agent Bundle Overwrite Leads to Authe… |
omnigent-ai |
omnigent |
2026-08-21T17:47:37.976Z | 2026-08-25T17:43:46.509Z | |
| cve-2026-69104 | 7.6 (v3.1) | Potential unauthorized repository migration in JFrog A… |
jfrog |
artifactory |
2026-08-25T15:09:29.369Z | 2026-08-25T17:43:24.784Z |
| cve-2026-79674 | 8.8 (v4.0) 8.2 (v3.1) | NLTK 3.10.2 Path Traversal via corpus-reader constructors |
nltk |
nltk |
2026-08-25T15:16:00.226Z | 2026-08-25T17:42:56.934Z |
| cve-2026-72714 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Universe Checking State Desy… |
rocq-prover |
rocq |
2026-08-24T20:08:33.917Z | 2026-08-25T17:41:24.594Z |
| cve-2026-72695 | 7.1 (v4.0) 8.1 (v3.1) | Grav before 2.0.16 Path Traversal via MediaUploadTrait… |
getgrav |
grav |
2026-08-25T01:30:11.868Z | 2026-08-25T17:38:09.024Z |
| cve-2026-63462 | Unleash: Unauthenticated single-request DoS via OpenAP… |
Unleash |
unleash |
2026-08-21T18:12:32.807Z | 2026-08-25T17:33:23.689Z | |
| cve-2026-34491 | 6.1 (v4.0) | Improper neutralization of input during web page … |
Johnson Controls |
Metasys 14 |
2026-08-24T17:24:25.732Z | 2026-08-25T17:33:18.447Z |
| cve-2026-54682 | DiscordChatExporter: Stored XSS in HTML export when ma… |
Tyrrrz |
DiscordChatExporter |
2026-08-21T18:40:05.196Z | 2026-08-25T17:31:36.280Z | |
| cve-2026-79670 | 4.8 (v4.0) 4.8 (v3.1) | Ech0 before 4.4.3 Stored XSS via SVG Upload |
lin-snow |
Ech0 |
2026-08-25T11:33:31.499Z | 2026-08-25T17:30:32.633Z |
| cve-2026-79781 | 6.9 (v4.0) 6.5 (v3.1) | rclone serve s3 Path Traversal via dot-dot object keys |
rclone |
rclone |
2026-08-25T15:16:10.471Z | 2026-08-25T17:29:20.262Z |
| cve-2026-30866 | Combodo iTop: Insecured access to uploaded images via … |
Combodo |
iTop |
2026-08-21T19:32:00.149Z | 2026-08-25T17:28:23.007Z | |
| cve-2026-79776 | 6.9 (v4.0) 5.3 (v3.1) | rclone before 1.75.0 Authentication Bypass via pprof |
rclone |
rclone |
2026-08-25T15:16:07.085Z | 2026-08-25T17:27:57.096Z |
| cve-2026-72700 | 8.7 (v4.0) 7.5 (v3.1) | Grav before 3.9.1 Timing Attack via Non-Constant-Time … |
getgrav |
grav |
2026-08-25T01:30:22.914Z | 2026-08-25T17:25:36.693Z |
| cve-2026-76876 | 8.2 (v4.0) 5.9 (v3.1) | Craftplan < 0.5.1 Broken Access Control Information Di… |
puemos |
craftplan |
2026-08-21T19:38:45.203Z | 2026-08-25T17:17:45.458Z |
| cve-2026-27490 | Combodo iTop: Weak secret generation for inline image |
Combodo |
iTop |
2026-08-21T19:59:29.384Z | 2026-08-25T17:16:32.291Z | |
| cve-2026-53572 | KEDA: PostgreSQL connection string parameter injection… |
kedacore |
keda |
2026-08-21T20:11:56.479Z | 2026-08-25T17:13:43.120Z | |
| cve-2026-71905 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:40.253Z | 2026-08-25T17:12:38.113Z |
| cve-2026-44517 | Buildah: Build breakout using malicious Containerfile … |
containers |
buildah |
2026-08-21T20:29:00.354Z | 2026-08-25T17:07:10.143Z | |
| cve-2026-64679 | Atlantis: Path Traversal in Atlantis Workspace Handlin… |
runatlantis |
atlantis |
2026-08-21T20:29:55.106Z | 2026-08-25T17:05:09.821Z | |
| cve-2026-55168 | Runtipi: Authenticated arbitrary file write via backup… |
runtipi |
runtipi |
2026-08-21T20:31:38.124Z | 2026-08-25T17:01:52.501Z | |
| cve-2026-77415 | JSONata: Arbitrary Code Execution via crafted JSONata … |
jsonata-js |
jsonata |
2026-08-21T21:01:09.203Z | 2026-08-25T16:55:27.467Z | |
| cve-2026-49849 | xShop: Unrestricted File Upload in File Attachment Mod… |
4xmen |
xshop |
2026-08-21T21:14:24.201Z | 2026-08-25T16:53:16.207Z | |
| cve-2026-53531 | ratex-parser has unbounded parser recursion that leads… |
erweixin |
RaTeX |
2026-08-21T21:34:16.017Z | 2026-08-25T16:51:41.853Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-584 | Vulnérabilités dans Cisco Show and Share | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-583 | Vulnérabilité dans CiscoWorks Common Services | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-582 | Vulnérabilités dans plusieurs produits Symantec | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-581 | Vulnérabilité dans IBM Websphere | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-579 | Multiples vulnérabilités dans Moodle | 2011-10-20T00:00:00.000000 | 2011-10-20T00:00:00.000000 |
| certa-2011-avi-578 | Vulnérabilité dans Opera | 2011-10-19T00:00:00.000000 | 2011-10-19T00:00:00.000000 |
| certa-2011-avi-577 | Vulnérabilités dans Joomla! | 2011-10-19T00:00:00.000000 | 2011-10-19T00:00:00.000000 |
| certa-2011-avi-576 | Vulnérabilités dans Symantec IM Manager | 2011-10-19T00:00:00.000000 | 2011-10-19T00:00:00.000000 |
| certa-2011-avi-575 | Vulnérabilité dans ClamAV | 2011-10-19T00:00:00.000000 | 2011-10-19T00:00:00.000000 |
| certa-2011-avi-574 | Multiples vulnérabilités dans Cisco Adaptive Security Appliances | 2011-10-18T00:00:00.000000 | 2011-10-18T00:00:00.000000 |
| certa-2011-avi-573 | Vulnérabilité dans Cisco Network Admission Control Manager | 2011-10-18T00:00:00.000000 | 2011-10-18T00:00:00.000000 |
| certa-2011-avi-572 | Vulnérabilités dans phpMyAdmin | 2011-10-18T00:00:00.000000 | 2011-10-18T00:00:00.000000 |
| certa-2011-avi-571 | Vulnérabilités dans VMWare ESX et ESXi | 2011-10-18T00:00:00.000000 | 2011-10-18T00:00:00.000000 |
| certa-2011-avi-570 | Vulnérabilité dans Asterisk | 2011-10-18T00:00:00.000000 | 2011-10-18T00:00:00.000000 |
| certa-2011-avi-569 | Multiples vulnérabilités dans Apple iTunes | 2011-10-17T00:00:00.000000 | 2011-10-17T00:00:00.000000 |
| certa-2011-avi-568 | Vulnérabilité dans Cisco TelePresence Video Communication Server | 2011-10-14T00:00:00.000000 | 2011-10-14T00:00:00.000000 |
| certa-2011-avi-567 | Vulnérabilités dans Apple iOS | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-566 | Multiples vulnérabilités dans Apple Safari | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-565 | Multiples vulnérabilités dans Cisco Firewall Services Module | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-564 | Multiples vulnérabilités dans Apple Mac OS X | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-563 | Vulnérabilités dans iWork pour iOS 1.5 | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-562 | Vulnérabilité dans Apache mod_proxy | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-561 | Vulnérabilité dans VLC | 2011-10-13T00:00:00.000000 | 2011-10-13T00:00:00.000000 |
| certa-2011-avi-560 | Vulnérabilités dans Cadic Intégrale | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-559 | Vulnérabilités dans Microsoft Host Integration Server | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-558 | Multiples vulnérabilités dans Internet Explorer | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-557 | Vulnérabilité dans Windows XP et Windows Server 2003 | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-556 | Vulnérabilités dans Microsoft Forefront Unified Access Gateway | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-555 | Vulnérabilité dans Microsoft .NET Framework et Microsoft Silverlight | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |
| certa-2011-avi-554 | Multiples vulnérabilités dans le sous-système win32k de Microsoft Windows | 2011-10-12T00:00:00.000000 | 2011-10-12T00:00:00.000000 |