Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-53549 | Termix: Server-Side Request Forgery via Proxy Connecti… |
Termix-SSH |
Termix |
2026-08-19T20:34:22.539Z | 2026-08-25T14:07:28.122Z | |
| cve-2026-77136 | 9.5 (v4.0) | Server-Side Template Injection in extension "powermail… |
TYPO3 |
Extension "powermail" |
2026-08-25T09:00:39.526Z | 2026-08-25T14:07:07.220Z |
| cve-2026-77137 | 7.7 (v4.0) | SQL Injection in extension "Forms Export" (frp_form_answers) |
TYPO3 |
Extension "Forms Export" |
2026-08-25T09:00:38.789Z | 2026-08-25T14:06:42.472Z |
| cve-2026-77128 | 6.3 (v4.0) | Broken Access Control in extension "Event management a… |
TYPO3 |
Extension "Event management and registration" |
2026-08-25T09:00:44.929Z | 2026-08-25T14:06:14.408Z |
| cve-2026-77138 | 9.3 (v4.0) | Remote Code Execution in extension "HTML5 Video Player… |
TYPO3 |
Extension "HTML5 Video Player vs. Powermail" |
2026-08-25T09:00:38.059Z | 2026-08-25T14:05:40.648Z |
| cve-2026-77139 | 6 (v4.0) | Path Traversal in extension "Mask" (mask) |
TYPO3 |
Extension "Mask" |
2026-08-25T09:00:37.199Z | 2026-08-25T14:04:39.871Z |
| cve-2026-75593 | BuildKit: Malicious client can bypass destination dire… |
moby |
buildkit |
2026-08-19T20:06:54.924Z | 2026-08-25T14:02:29.264Z | |
| cve-2026-56093 | 6.3 (v4.0) | Broken Access Control in extension "Apache Solr for TY… |
TYPO3 |
Extension "Apache Solr for TYPO3 - Enterprise Search" |
2026-08-25T09:00:48.858Z | 2026-08-25T14:02:05.915Z |
| cve-2026-76574 | code-projects Hospital Information System User Login U… |
code-projects |
Hospital Information System |
2026-08-19T20:00:10.295Z | 2026-08-25T14:01:32.167Z | |
| cve-2026-63187 | Logto: OS command injection vulnerability exists in th… |
logto-io |
logto |
2026-08-19T19:49:34.750Z | 2026-08-25T14:00:02.109Z | |
| cve-2026-56092 | 7.6 (v4.0) | Broken Access Control in extension "Apache Solr for TY… |
TYPO3 |
Extension "Apache Solr for TYPO3 - Enterprise Search" |
2026-08-25T09:00:49.567Z | 2026-08-25T13:59:54.064Z |
| cve-2026-12878 | 8.6 (v4.0) | In affected versions of the Codefresh platform an… |
Octopus Deploy |
Codefresh |
2026-08-25T09:02:15.246Z | 2026-08-25T13:59:09.902Z |
| cve-2026-55086 | Etherpad: Import/export use Math.random() for temp fil… |
ether |
etherpad |
2026-08-19T19:35:46.851Z | 2026-08-25T13:59:03.366Z | |
| cve-2026-75037 | 7 (v3.1) 7.3 (v4.0) | Polkit authentication bypass in LACT |
ilya-zlobintsev |
LACT |
2026-08-25T09:52:32.993Z | 2026-08-25T13:57:43.909Z |
| cve-2026-68561 | Wekan: a low-privilege board member escalates to board… |
wekan |
wekan |
2026-08-19T19:24:58.933Z | 2026-08-25T13:57:28.356Z | |
| cve-2026-67189 | 5.3 (v4.0) 6.1 (v3.1) | pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record |
Netgate |
pfSense Plus |
2026-08-19T19:18:50.158Z | 2026-08-25T13:56:21.621Z |
| cve-2026-78475 | 6.1 (v3.1) | Gimp: unbounded stack vla and 21-byte stack over-read … |
GNOME |
GIMP |
2026-08-24T17:20:48.050Z | 2026-08-25T13:46:20.344Z |
| cve-2026-78376 | 8.8 (v3.1) | Webkitgtk: use-after-free of jscvalue function parameters |
WebKit |
WebKit |
2026-08-24T13:29:17.412Z | 2026-08-25T13:46:08.141Z |
| cve-2026-54457 | TensorZero: Arbitrary file read and SSRF in TensorZero… |
tensorzero |
tensorzero |
2026-08-21T20:34:03.632Z | 2026-08-25T13:38:42.654Z | |
| cve-2026-55373 | OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can … |
AcademySoftwareFoundation |
openexr |
2026-08-25T00:39:45.185Z | 2026-08-25T13:37:33.398Z | |
| cve-2026-47735 | Arc has an authenticated arbitrary local-file read via… |
Basekick-Labs |
arc |
2026-08-21T22:42:55.886Z | 2026-08-25T13:35:54.838Z | |
| cve-2026-76816 | Netty: MQTT Topic Name and Client ID Validation Bypass |
netty |
netty |
2026-08-24T19:53:12.737Z | 2026-08-25T13:34:51.567Z | |
| cve-2026-77635 | CakePHP: FunctionsBuilder::jsonValue() vulerable to SQ… |
cakephp |
cakephp |
2026-08-24T20:30:34.492Z | 2026-08-25T13:31:40.225Z | |
| cve-2026-33240 | Combodo iTop: Reflected XSS in foreign key search criteria |
Combodo |
iTop |
2026-08-21T21:25:03.819Z | 2026-08-25T13:30:28.076Z | |
| cve-2026-79667 | 7.2 (v4.0) 7.6 (v3.1) | Ech0 before 4.4.3 Authentication Bypass via Scope Enfo… |
lin-snow |
Ech0 |
2026-08-25T11:33:29.421Z | 2026-08-25T13:28:12.131Z |
| cve-2026-21758 | 3.7 (v3.1) | HCL Hive is affected by multiple security vulnerabilities. |
HCL Software |
Hive |
2026-08-25T10:49:13.333Z | 2026-08-25T13:27:58.160Z |
| cve-2026-79652 | 5.9 (v3.1) | Keycloak-services: keycloak-services: jwt bearer autho… |
Red Hat |
Red Hat Build of Keycloak |
2026-08-25T11:07:48.988Z | 2026-08-25T13:26:20.259Z |
| cve-2026-79672 | 7 (v4.0) 5.5 (v3.1) | Ech0 before 4.4.3 Authentication Bypass via Comment Panel |
lin-snow |
Ech0 |
2026-08-25T11:33:32.848Z | 2026-08-25T13:21:08.330Z |
| cve-2026-78654 | cleverbrush framework/deep deepExtend.ts deepExtend pr… |
cleverbrush |
framework |
2026-08-25T06:00:13.406Z | 2026-08-25T13:17:33.100Z | |
| cve-2026-78003 | Mailgun for WordPress <= 2.2.0 - Unauthenticated Serve… |
mailgun |
Mailgun for WordPress |
2026-08-22T08:26:38.970Z | 2026-08-25T13:15:26.345Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-259 | Vulnérabilités dans IBM DB2 | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-258 | Vulnérabilités dans BestPractical RT | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-257 | Vulnérabilité dans HP SiteScope | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-256 | Vulnérabilités dans CA Arcot WebFort Versatile Authentication Server | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-255 | Vulnérabilité dans WordPress | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-254 | Vulnérabilité dans Hitachi Web Server | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-253 | Vulnérabilité dans Hitachi Web Server | 2011-04-27T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-190 | Vulnérabilité dans le client DHCP ISC | 2011-04-06T00:00:00.000000 | 2011-04-27T00:00:00.000000 |
| certa-2011-avi-252 | Vulnérabilité dans Webmin | 2011-04-26T00:00:00.000000 | 2011-04-26T00:00:00.000000 |
| certa-2011-avi-251 | Vulnérabilité dans des produits d'accès VPN de CheckPoint | 2011-04-26T00:00:00.000000 | 2011-04-26T00:00:00.000000 |
| certa-2011-avi-250 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-04-22T00:00:00.000000 | 2011-04-22T00:00:00.000000 |
| certa-2011-avi-248 | Vulnérabilités dans CA Output Management Web Viewer | 2011-04-22T00:00:00.000000 | 2011-04-22T00:00:00.000000 |
| certa-2011-avi-247 | Vulnérabilité dans CA SiteMinder | 2011-04-22T00:00:00.000000 | 2011-04-22T00:00:00.000000 |
| certa-2011-avi-246 | Vulnérabilité dans HP Performance Insight | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-245 | Vulnérabilité dans les systèmes FreeBSD | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-244 | Vulnérabilité dans HP Virtual Server Environment pour Windows | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-243 | Vulnérabilités dans IBM Lotus Symphony | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-242 | Multiples vulnérabilités dans HP Insight Control | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-241 | Multiples Vulnérabilités dans HP Systems Insight Manager | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-240 | Multiples Vulnérabilités dans HP Systems Management Homepage | 2011-04-21T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-218 | Vulnérabilité dans VLC | 2011-04-13T00:00:00.000000 | 2011-04-21T00:00:00.000000 |
| certa-2011-avi-239 | Multiples Vulnérabilités dans les produits Oracle Sun | 2011-04-20T00:00:00.000000 | 2011-04-20T00:00:00.000000 |
| certa-2011-avi-238 | Multiples Vulnérabilités dans les produits Oracle | 2011-04-20T00:00:00.000000 | 2011-04-20T00:00:00.000000 |
| certa-2011-avi-237 | Vulnérabilité dans HP Network Node Manager i | 2011-04-20T00:00:00.000000 | 2011-04-20T00:00:00.000000 |
| certa-2011-avi-236 | Vulnérabilité dans RSA Adaptive Authentication | 2011-04-19T00:00:00.000000 | 2011-04-19T00:00:00.000000 |
| certa-2011-avi-235 | Multiples vulnérabilités dans itunes | 2011-04-19T00:00:00.000000 | 2011-04-19T00:00:00.000000 |
| certa-2011-avi-234 | Vulnérabilité de Adobe Flash Player | 2011-04-19T00:00:00.000000 | 2011-04-19T00:00:00.000000 |
| certa-2011-avi-233 | Vulnérabilités dans SAP NetWeaver, SAP Web Application Server et SAP Enterprise Portal | 2011-04-19T00:00:00.000000 | 2011-04-19T00:00:00.000000 |
| certa-2011-avi-232 | Vulnérabilités dans Wireshark | 2011-04-19T00:00:00.000000 | 2011-04-19T00:00:00.000000 |
| certa-2011-avi-224 | Vulnérabilité dans IBM Tivoli Directory Server | 2011-04-15T00:00:00.000000 | 2011-04-19T00:00:00.000000 |