Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-62292 | libheif: Out-of-bounds read in uncompressed unci tile … |
strukturag |
libheif |
2026-08-18T21:20:24.933Z | 2026-08-25T01:43:35.289Z | |
| cve-2026-71128 | Vulnerability in the Oracle VM VirtualBox product… |
Oracle Corporation |
Oracle VM VirtualBox |
2026-08-18T21:03:39.533Z | 2026-08-25T01:23:04.573Z | |
| cve-2026-73325 | 8.4 (v4.0) 7.8 (v3.1) | Fujitsu OneCompression < 1.2.1 Arbitrary Code Executio… |
Fujitsu Research |
OneCompression |
2026-08-12T15:35:51.299Z | 2026-08-25T01:15:34.892Z |
| cve-2026-39458 | 7.5 (v3.1) 8.7 (v4.0) | BIG-IP DNS Cache vulnerability |
F5 |
BIG-IP |
2026-05-13T14:12:42.079Z | 2026-08-24T21:39:14.540Z |
| cve-2026-19685 | 7.1 (v3.1) | Networkmanager: networkmanager: 802-1x ca-path and pha… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-24T16:12:38.297Z | 2026-08-24T20:47:26.062Z |
| cve-2025-43873 | 8.7 (v4.0) | iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Ed… |
Johnson Control |
iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 |
2025-12-17T15:53:04.477Z | 2026-08-24T20:33:56.817Z |
| cve-2026-52902 | 4.7 (v3.1) | Awxkit: path traversal via yaml !include directive |
Red Hat |
Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
2026-06-09T09:33:40.154Z | 2026-08-24T20:25:03.281Z |
| cve-2025-68825 | 7.5 (v3.1) | HCL Hive is affected by incorrect default permissions |
HCLSoftware |
HCL Hive |
2026-08-24T15:37:00.819Z | 2026-08-24T20:22:57.951Z |
| cve-2026-21752 | 7.5 (v3.1) | HCL Hive is affected by a use of vulnerable third-part… |
HCLSoftware |
HCL Hive |
2026-08-24T15:21:00.797Z | 2026-08-24T20:21:59.411Z |
| cve-2026-78414 | 8 (v3.1) | Cross-site scripting in Nx Witness VMS Web Administrat… |
Network Optix |
Nx Witness VMS |
2026-08-24T14:51:08.681Z | 2026-08-24T20:21:30.345Z |
| cve-2026-13343 | 5.3 (v3.1) | Uninitialised stack memory disclosure in the MIDI 2.0 … |
zephyrproject |
zephyr |
2026-08-24T15:43:36.665Z | 2026-08-24T20:20:44.618Z |
| cve-2026-13212 | 8.8 (v3.1) | Zephyr virtio driver calls an arbitrary function point… |
zephyrproject |
zephyr |
2026-08-24T15:43:37.762Z | 2026-08-24T20:19:35.081Z |
| cve-2026-18349 | 7.3 (v4.0) | SAMA5D44 Fault Injection Vulnerability |
Microchip |
SAMA5D4 |
2026-08-24T16:07:45.500Z | 2026-08-24T20:18:42.750Z |
| cve-2026-76098 | Mistune has Denial of Service — RecursionError via Exc… |
lepture |
mistune |
2026-08-24T20:05:00.932Z | 2026-08-24T20:17:07.057Z | |
| cve-2026-13213 | 5.3 (v3.1) | Bluetooth HAS: NULL-pointer dereference DoS when a bon… |
zephyrproject |
zephyr |
2026-08-24T17:10:37.182Z | 2026-08-24T20:10:43.892Z |
| cve-2026-43980 | Malla: Stored XSS via Meshtastic node names in multipl… |
zenitraM |
malla |
2026-08-21T21:17:45.430Z | 2026-08-24T20:10:33.215Z | |
| cve-2026-53524 | WeeChat has a Decompression Bomb in Relay WebSocket (DoS) |
weechat |
weechat |
2026-08-21T22:18:23.432Z | 2026-08-24T20:09:16.871Z | |
| cve-2026-78551 | 8.8 (v4.0) | RansomLook Login Endpoint Allows Timing-Based Username… |
ransomlook |
ransomlook |
2026-08-24T19:20:03.145Z | 2026-08-24T20:07:41.242Z |
| cve-2026-78553 | 7 (v4.0) | Insecure Flask Secret-Key File Permissions Allow Local… |
ransomlook |
ransomlook |
2026-08-24T19:28:49.323Z | 2026-08-24T20:07:07.041Z |
| cve-2026-78555 | 9.4 (v4.0) | RansomLook API Key Disclosure Through /admin/apikeys H… |
ransomlook |
ransomlook |
2026-08-24T19:38:50.437Z | 2026-08-24T20:05:50.104Z |
| cve-2026-53530 | ratex-parser panics on `\verb` with a multibyte delimi… |
erweixin |
RaTeX |
2026-08-21T21:31:12.665Z | 2026-08-24T20:05:00.628Z | |
| cve-2026-19874 | N/A | Konami's Metal Gear Online 3 contains a heap-based buf… |
Konami |
Metal Gear Online 3 |
2026-08-24T15:02:51.022Z | 2026-08-24T20:04:13.828Z |
| cve-2026-53541 | OliveTin has Unvalidated `ot_`-prefixed Arguments that… |
OliveTin |
OliveTin |
2026-08-21T22:51:52.752Z | 2026-08-24T20:03:47.277Z | |
| cve-2026-4245 | Post Duplicator <= 3.0.11 - Authorization Bypass to Au… |
metaphorcreations |
Post Duplicator |
2026-08-22T11:30:40.062Z | 2026-08-24T20:01:34.600Z | |
| cve-2026-50719 | N/A | The Ingenic T41, and probably also T32, T40, and … |
n/a |
n/a |
2026-08-19T00:00:00.000Z | 2026-08-24T20:01:19.565Z |
| cve-2026-50720 | N/A | The Ingenic T31 SoC boot ROM flash-boot verificat… |
n/a |
n/a |
2026-08-19T00:00:00.000Z | 2026-08-24T19:59:08.374Z |
| cve-2026-78430 | sworddut mcp-ffmpeg-helper Tool handlers.ts handleTool… |
sworddut |
mcp-ffmpeg-helper |
2026-08-24T19:45:08.359Z | 2026-08-24T19:58:40.163Z | |
| cve-2026-39975 | Combodo iTop: Remote code execution using external aut… |
Combodo |
iTop |
2026-08-24T18:50:48.920Z | 2026-08-24T19:58:25.146Z | |
| cve-2026-51366 | N/A | SQL Injection vulnerability in Bottinelli Informa… |
n/a |
n/a |
2026-08-19T00:00:00.000Z | 2026-08-24T19:57:07.437Z |
| cve-2026-71939 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:03.232Z | 2026-08-24T19:56:54.713Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-625 | Vulnérabilité de produits Kerio | 2010-12-21T00:00:00.000000 | 2010-12-21T00:00:00.000000 |
| certa-2010-avi-624 | Vulnérabilités dans MyBB | 2010-12-21T00:00:00.000000 | 2010-12-21T00:00:00.000000 |
| certa-2010-avi-623 | Vulnérabilité dans ISC DHCP | 2010-12-20T00:00:00.000000 | 2010-12-20T00:00:00.000000 |
| certa-2010-avi-622 | Vulnérabilités dans IBM Rational ClearQuest | 2010-12-20T00:00:00.000000 | 2010-12-20T00:00:00.000000 |
| certa-2010-avi-621 | Vulnérabilités dans IBM Tivoli Storage Manager | 2010-12-20T00:00:00.000000 | 2010-12-20T00:00:00.000000 |
| certa-2010-avi-620 | Vulnérabilités dans AirPort Extreme Base Station et Time Capsule | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-619 | Vulnérabilité dans le noyau Linux | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-618 | Vulnérabilités dans PHP | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-617 | Vulnérabilité dans Symantec Endpoint Protection | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-616 | Vulnérabilité dans phpMyFAQ | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-615 | Multiples vulnérabilités dans Opera | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-614 | Multiples vulnérabilités dans TYPO3 | 2010-12-17T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-avi-613 | Vulnérabilité dans les produits F-Secure | 2010-12-16T00:00:00.000000 | 2010-12-16T00:00:00.000000 |
| certa-2010-avi-611 | Vulnérabilité dans des produits TIBCO | 2010-12-16T00:00:00.000000 | 2010-12-16T00:00:00.000000 |
| certa-2010-avi-610 | Vulnérabilité dans BlackBerry Enterprise Server | 2010-12-16T00:00:00.000000 | 2010-12-16T00:00:00.000000 |
| certa-2010-avi-609 | Vulnérabilité dans Microsoft Exchange Server | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-608 | Vulnérabilités dans Microsoft Office | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-607 | Vulnérabilité dans Microsoft Office SharePoint Server | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-606 | Vulnérabilités dans Microsoft Publisher | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-605 | Vulnérabilité dans Microsoft Windows Hyper-V VMBus | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-604 | Vulnérabilité dans le service Netlogon de Microsoft Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-603 | Vulnérabilité dans l'interface utilisateur Microsoft | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-602 | Vulnérabilité dans le noyau de Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-601 | Multiples vulnérabilités dans le sous-système graphique Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-600 | Vulnérabilité dans l'assistant de connexion Internet Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-599 | Vulnérabilité dans le carnet d'adresses Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-598 | Vulnérabilité dans Windows | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-597 | Vulnérabilité dans le codeur Windows Media | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-596 | Vulnérabilité dans Microsoft Movie Maker | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |
| certa-2010-avi-595 | Vulnérabilités dans le pilote de police OpenType | 2010-12-15T00:00:00.000000 | 2010-12-15T00:00:00.000000 |