Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-71904 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:39.592Z | 2026-08-24T19:52:30.570Z |
| cve-2026-78140 | Dromara UJCMS web-file-template Endpoint WebFileTempla… |
Dromara |
UJCMS |
2026-08-23T19:45:07.529Z | 2026-08-24T19:51:47.518Z | |
| cve-2026-62381 | 6.9 (v4.0) 6.6 (v3.1) | luci-lib-px5g 2040-bit Certificate Signing Heap Buffer… |
openwrt |
luci |
2026-08-22T12:26:44.558Z | 2026-08-24T19:50:50.874Z |
| cve-2026-70626 | 8.6 (v4.0) 6.2 (v3.1) | NLTK before 3.9.4 Symlink Escape via CorpusReader |
nltk |
nltk |
2026-08-22T14:12:44.983Z | 2026-08-24T19:49:30.565Z |
| cve-2026-61824 | Defuddle: XSS via unescaped attribute interpolation i… |
kepano |
defuddle |
2026-08-21T20:12:53.225Z | 2026-08-24T19:48:53.974Z | |
| cve-2026-55185 | Miniflux 2: Open Redirect Bypass |
miniflux |
v2 |
2026-08-21T20:19:14.122Z | 2026-08-24T19:46:50.850Z | |
| cve-2026-61539 | Xinference: Remote code execution via unsafe `eval()` … |
xorbitsai |
inference |
2026-08-21T20:37:02.633Z | 2026-08-24T19:45:13.875Z | |
| cve-2026-30865 | Combodo iTop: Reflected XSS in dashboard save |
Combodo |
iTop |
2026-08-21T20:37:20.408Z | 2026-08-24T19:43:49.989Z | |
| cve-2026-77413 | JSONata: Arbitrary Code Execution via crafted JSONata … |
jsonata-js |
jsonata |
2026-08-21T20:47:08.457Z | 2026-08-24T19:42:37.844Z | |
| cve-2026-77220 | 7.1 (v4.0) 6.5 (v3.1) | PDFio < 1.6.5 Dangling Pointer via Dictionary String-F… |
michaelrsweet |
pdfio |
2026-08-21T20:54:34.762Z | 2026-08-24T19:40:48.624Z |
| cve-2026-50538 | libvncclient Tight decoder has an attacker-controlled … |
LibVNC |
libvncserver |
2026-08-21T21:03:58.147Z | 2026-08-24T19:39:57.811Z | |
| cve-2026-53468 | Typemill has Stored HTML Attribute Injection in Metada… |
typemill |
typemill |
2026-08-21T21:16:07.987Z | 2026-08-24T19:38:32.055Z | |
| cve-2026-62243 | 8.7 (v4.0) 7.5 (v3.1) | Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass |
netty |
netty |
2026-08-22T12:26:43.072Z | 2026-08-24T19:36:53.644Z |
| cve-2026-58003 | 7.1 (v4.0) 7.1 (v3.1) | WWBN AVideo Cross-Site Request Forgery via releaseVide… |
WWBN |
AVideo |
2026-08-22T12:26:32.568Z | 2026-08-24T19:31:58.555Z |
| cve-2026-30864 | Combodo iTop: Reflected XSS in dashboard revert |
Combodo |
iTop |
2026-08-24T18:52:43.685Z | 2026-08-24T19:31:23.588Z | |
| cve-2026-56380 | 6.9 (v4.0) 5.3 (v3.1) | AVideo feed/index.php Exposure of Channel Owner Email … |
WWBN |
AVideo |
2026-08-22T12:26:29.158Z | 2026-08-24T19:30:49.062Z |
| cve-2026-59808 | 8.7 (v4.0) 8.8 (v3.1) | AVideo Authentication Bypass via Unkeyed Video Hash Di… |
WWBN |
AVideo |
2026-08-22T12:26:33.886Z | 2026-08-24T19:26:40.233Z |
| cve-2026-60084 | 8.4 (v4.0) 8.7 (v3.1) | SiYuan before v3.7.4 Arbitrary File Deletion via remov… |
siyuan-note |
siyuan |
2026-08-22T12:26:41.175Z | 2026-08-24T19:22:04.001Z |
| cve-2026-65915 | 7.1 (v4.0) 6.5 (v3.1) | NLTK before 3.10.0 Arbitrary File Read via FileSystemP… |
nltk |
nltk |
2026-08-22T14:12:41.391Z | 2026-08-24T19:20:52.747Z |
| cve-2026-4559 | Image Photo Gallery Final Tiles Grid <= 3.6.12 - Authe… |
wpchill |
Image Photo Gallery Final Tiles Grid |
2026-08-22T13:27:16.137Z | 2026-08-24T19:19:46.524Z | |
| cve-2026-71514 | 2 (v4.0) 2.5 (v3.1) | NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanC… |
nltk |
nltk |
2026-08-22T13:34:08.493Z | 2026-08-24T19:18:14.123Z |
| cve-2026-63310 | 9.3 (v4.0) 7.1 (v3.1) | NLTK before 3.9.3 Missing Post-Download Integrity Veri… |
nltk |
nltk |
2026-08-22T14:12:39.360Z | 2026-08-24T19:14:11.560Z |
| cve-2026-62385 | 8.2 (v4.0) 5.9 (v3.1) | NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers |
nltk |
nltk |
2026-08-22T14:12:37.962Z | 2026-08-24T19:07:55.247Z |
| cve-2026-8445 | 9.3 (v4.0) 9.8 (v3.1) | justhtml before 1.12.0 Sanitizer Bypass via Markdown |
EmilStenstrom |
justhtml |
2026-08-23T13:34:13.886Z | 2026-08-24T19:06:17.094Z |
| cve-2026-59091 | 7.3 (v3.1) | Gimp: gimp: multiple vulnerabilities in file format pl… |
|
|
2026-08-10T18:48:36.509Z | 2026-08-24T19:05:19.297Z |
| cve-2026-71915 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:46.934Z | 2026-08-24T19:04:44.763Z |
| cve-2026-5751 | 5.1 (v4.0) 6.1 (v3.1) | justhtml before 1.14.0 Mutation XSS via custom sanitiz… |
EmilStenstrom |
justhtml |
2026-08-23T13:34:10.547Z | 2026-08-24T19:03:33.747Z |
| cve-2026-78205 | 6.9 (v4.0) 5.8 (v3.1) | BentoML 1.4.19 through 1.4.39 Server-Side Request Forg… |
bentoml |
BentoML |
2026-08-24T00:30:45.786Z | 2026-08-24T19:02:28.061Z |
| cve-2026-71907 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:41.591Z | 2026-08-24T19:02:15.607Z |
| cve-2026-71912 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models Buffer Overflow via ap… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:44.906Z | 2026-08-24T19:01:02.459Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-482 | Vulnérabilité du protocole SSL/TLS | 2009-11-06T00:00:00.000000 | 2010-11-29T00:00:00.000000 |
| certa-2010-avi-566 | Vulnérabilité dans PGP Desktop | 2010-11-24T00:00:00.000000 | 2010-11-24T00:00:00.000000 |
| certa-2010-avi-565 | Multiples vulnérabilités dans Apple iOS | 2010-11-24T00:00:00.000000 | 2010-11-24T00:00:00.000000 |
| certa-2010-avi-564 | Vulnérabilité dans les produits Horde | 2010-11-24T00:00:00.000000 | 2010-11-24T00:00:00.000000 |
| certa-2010-avi-563 | Vulnérabilité dans Trend Micro OfficeScan | 2010-11-24T00:00:00.000000 | 2010-11-24T00:00:00.000000 |
| certa-2010-avi-562 | Vulnérabilité dans DotNetNuke | 2010-11-23T00:00:00.000000 | 2010-11-23T00:00:00.000000 |
| certa-2010-avi-561 | Multiples vulnérabilités dans Cisco Videoconferencing | 2010-11-23T00:00:00.000000 | 2010-11-23T00:00:00.000000 |
| certa-2010-avi-560 | Vulnérabilités dans Wireshark | 2010-11-23T00:00:00.000000 | 2010-11-23T00:00:00.000000 |
| certa-2010-avi-559 | Vulnérabilité dans phpBB | 2010-11-23T00:00:00.000000 | 2010-11-23T00:00:00.000000 |
| certa-2010-avi-558 | Multiples vulnérabilités dans Apple Safari | 2010-11-19T00:00:00.000000 | 2010-11-19T00:00:00.000000 |
| certa-2010-avi-557 | Vulnérabilité dans Apple Mac OS X Server | 2010-11-19T00:00:00.000000 | 2010-11-19T00:00:00.000000 |
| certa-2010-avi-556 | Vulnérabilité dans VLC | 2010-11-19T00:00:00.000000 | 2010-11-19T00:00:00.000000 |
| certa-2010-avi-554 | Vulnérabilité dans LANDesk Management Gateway | 2010-11-17T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-avi-553 | Multiples vulnérabilités dans VMWare ESX et ESXi | 2010-11-17T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-avi-552 | Vulnérabilité dans les imprimantes HP LaserJet | 2010-11-17T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-avi-551 | Vulnérabilités dans Adobe Reader et Acrobat | 2010-11-17T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-avi-548 | Multiples vulnérabilités dans Mac OS X | 2010-11-12T00:00:00.000000 | 2010-11-12T00:00:00.000000 |
| certa-2010-avi-547 | Vulnérabilité dans Juniper IVE OS et Netscreen SSL VPN | 2010-11-10T00:00:00.000000 | 2010-11-10T00:00:00.000000 |
| certa-2010-avi-546 | Multiples vulnérabilités dans Adobe Flash Server | 2010-11-10T00:00:00.000000 | 2010-11-10T00:00:00.000000 |
| certa-2010-avi-545 | Vulnérabilités dans Microsoft Forefront Unified Access Gateway | 2010-11-10T00:00:00.000000 | 2010-11-10T00:00:00.000000 |
| certa-2010-avi-544 | Vulnérabilités dans Microsoft PowerPoint | 2010-11-10T00:00:00.000000 | 2010-11-10T00:00:00.000000 |
| certa-2010-avi-543 | Vulnérabilités dans Microsoft Office | 2010-11-10T00:00:00.000000 | 2010-11-10T00:00:00.000000 |
| certa-2010-avi-542 | Vulnérabilités dans Novell GroupWise | 2010-11-09T00:00:00.000000 | 2010-11-09T00:00:00.000000 |
| certa-2010-avi-541 | Vulnérabilités dans Joomla! | 2010-11-09T00:00:00.000000 | 2010-11-09T00:00:00.000000 |
| certa-2010-avi-540 | Vulnérabilité dans Cisco Unified Communications Manager | 2010-11-08T00:00:00.000000 | 2010-11-08T00:00:00.000000 |
| certa-2010-avi-539 | Multiples vulnérabilités dans Cisco Intelligent Contact Manager | 2010-11-08T00:00:00.000000 | 2010-11-08T00:00:00.000000 |
| certa-2010-avi-538 | Multiples vulnérabilités dans Adobe Flash Player | 2010-11-05T00:00:00.000000 | 2010-11-05T00:00:00.000000 |
| certa-2010-avi-537 | Vulnérabilité dans Intel Xeon Baseboard Management Component | 2010-11-05T00:00:00.000000 | 2010-11-05T00:00:00.000000 |
| certa-2010-avi-536 | Multiples Vulnérabilités dans Google Chrome | 2010-11-05T00:00:00.000000 | 2010-11-05T00:00:00.000000 |
| certa-2010-avi-535 | Vulnérabilité dans IBM WebSphere | 2010-11-05T00:00:00.000000 | 2010-11-05T00:00:00.000000 |