Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-15567 | 7.5 (v3.1) | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-au… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:59.564Z | 2026-08-24T11:38:40.367Z |
| cve-2026-15565 | 7.5 (v3.1) | Undertow: undertow-websockets: undertow: pre-auth dos … |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:58.552Z | 2026-08-24T11:38:38.518Z |
| cve-2026-15562 | 7.5 (v3.1) | Jboss-remoting: jboss-remoting: integer overflow in me… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:50.045Z | 2026-08-24T11:38:34.732Z |
| cve-2026-15561 | 7.5 (v3.1) | Undertow-core: oom via missing limits in chunked trail… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:49.419Z | 2026-08-24T11:38:32.081Z |
| cve-2026-15556 | 8.1 (v3.1) | Picketlink-federation: picketlink saml 2.0 auth bypass… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:44.388Z | 2026-08-24T11:38:27.742Z |
| cve-2026-15555 | 8.8 (v3.1) | Jboss-marshalling-river: wildfly-clustering-infinispan… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:40.634Z | 2026-08-24T11:38:25.099Z |
| cve-2026-15554 | 7.4 (v3.1) | Undertow-core: undertow: authentication bypass via ajp… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:40.484Z | 2026-08-24T11:38:23.350Z |
| cve-2026-19264 | 9.8 (v3.1) 9.3 (v4.0) | Unauthenticated arbitrary file read via /uploads path … |
gitroomhq |
postiz-app |
2026-08-07T14:15:15.123Z | 2026-08-24T11:15:08.324Z |
| cve-2025-59060 | Apache Ranger: Hostname verification bypass in NiFiReg… |
Apache Software Foundation |
Apache Ranger |
2026-03-03T10:46:52.382Z | 2026-08-24T10:59:52.651Z | |
| cve-2026-72830 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin before 1.0.13 RCE via ConfigController… |
getgrav |
grav |
2026-08-14T11:35:37.166Z | 2026-08-24T10:28:33.958Z |
| cve-2026-72829 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via UsersController |
getgrav |
grav |
2026-08-14T11:35:36.482Z | 2026-08-24T10:28:33.284Z |
| cve-2026-72826 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Scope Bypass via createApiKey |
getgrav |
grav |
2026-08-14T11:35:34.460Z | 2026-08-24T10:28:32.568Z |
| cve-2026-72824 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via PagesController |
getgrav |
grav |
2026-08-14T11:35:33.122Z | 2026-08-24T10:28:31.860Z |
| cve-2026-72822 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Authentication Bypass via disable2fa |
getgrav |
grav |
2026-08-14T11:35:31.592Z | 2026-08-24T10:28:31.192Z |
| cve-2026-67340 | 8.6 (v4.0) 7.2 (v3.1) | ArcadeDB before 26.7.2 Remote Code Execution via Trigg… |
ArcadeData |
arcadedb |
2026-08-01T12:22:18.178Z | 2026-08-24T10:28:30.513Z |
| cve-2026-39910 | 8.7 (v4.0) 8.8 (v3.1) | STACKIT IaaS API Privilege Escalation via Service Acco… |
STACKIT |
IaaS API |
2026-06-08T16:16:09.469Z | 2026-08-24T10:28:29.842Z |
| cve-2026-34105 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via id Paramete… |
guardian |
language-system |
2026-07-01T16:15:01.201Z | 2026-08-24T10:28:29.093Z |
| cve-2026-34104 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via name Parame… |
guardian |
language-system |
2026-07-01T16:13:26.310Z | 2026-08-24T10:28:28.397Z |
| cve-2026-34103 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via id Paramete… |
guardian |
language-system |
2026-07-01T16:12:26.812Z | 2026-08-24T10:28:27.714Z |
| cve-2026-34102 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via id Paramete… |
guardian |
language-system |
2026-07-01T16:11:48.044Z | 2026-08-24T10:28:27.045Z |
| cve-2026-34101 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via id Paramete… |
guardian |
language-system |
2026-07-01T16:11:00.426Z | 2026-08-24T10:28:26.385Z |
| cve-2026-34100 | 8.7 (v4.0) 8.8 (v3.1) | Guardian Language-System SQL Injection via id Paramete… |
guardian |
language-system |
2026-07-01T16:10:07.054Z | 2026-08-24T10:28:25.732Z |
| cve-2026-26369 | 8.7 (v4.0) 8.8 (v3.1) | JUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Esca… |
JUNG |
eNet SMART HOME server |
2026-02-15T15:29:56.204Z | 2026-08-24T10:28:25.065Z |
| cve-2026-1630 | 5.1 (v4.0) | Reflected XSS in WEBCON BPS |
WEBCON |
WEBCON BPS |
2026-05-14T13:24:14.616Z | 2026-08-24T09:48:49.545Z |
| cve-2026-64612 | 7.5 (v3.1) | Libcupsfilters: cups-filters: libcupsfilters: cups ima… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-20T17:33:01.878Z | 2026-08-24T09:42:51.999Z |
| cve-2026-16249 | N/A | {'providerMetadata': {'orgId': '1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81', 'shortName': 'WPScan', 'dateUpdated': '2026-08-24T09:21:37.286Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID is a duplicate of CVE-2026-15303 and was never published. Both IDs were assigned to the same vulnerability in the 6Storage Rentals WordPress plugin. All CVE users should reference CVE-2026-15303 instead of this ID.'}], 'x_generator': {'engine': 'cvelib 1.8.0'}} | N/A | N/A | 2026-08-24T09:21:37.286Z | |
| cve-2026-74254 | 9.3 (v4.0) | Joomla Extension - joomlack.fr - SQL injection in Page… |
joomlack.fr |
Page Builder CK extension for Joomla |
2026-08-17T17:10:04.122Z | 2026-08-24T07:54:30.814Z |
| cve-2026-77812 | 9.4 (v4.0) | Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE |
DJI |
Neo |
2026-08-21T14:06:55.723Z | 2026-08-24T07:28:37.450Z |
| cve-2026-15706 | 9.8 (v3.1) | Missing Authentication for Critical Function in Manage… |
Baylan Measuring Instruments Industry and Trade Inc. |
Baylan Smart Meter Management Application (BMS) |
2026-08-20T13:27:51.370Z | 2026-08-24T07:23:15.383Z |
| cve-2026-50540 | Kata Containers: Config Path Annotation Arbitrary File… |
kata-containers |
kata-containers |
2026-08-07T20:56:26.209Z | 2026-08-24T06:13:27.182Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-172 | Multiples vulnérabilités dans Microsoft Exchange et Windows SMTP | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-171 | Vulnérabilité dans Microsoft Office Publisher | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-170 | Vulnérabilité dans Microsoft VBScript | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-169 | Vulnérabilités dans le noyau Windows | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-168 | Vulnérabilités dans le client SMB de Microsoft | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-167 | Vulnérabilités dans Microsoft Windows Authenticode Verification | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-166 | Vulnérabilité dans F-Secure | 2010-04-13T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-avi-165 | Multiples vulnérabilités dans les produits VMware | 2010-04-13T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-avi-163 | Vulnérabilité dans TYPO3 | 2010-04-12T00:00:00.000000 | 2010-04-12T00:00:00.000000 |
| certa-2010-avi-162 | Multiples vulnérabilités dans les produits VMware | 2010-04-09T00:00:00.000000 | 2010-04-09T00:00:00.000000 |
| certa-2010-avi-161 | Multiples vulnérabilités dans McAfee Email Gateway | 2010-04-07T00:00:00.000000 | 2010-04-08T00:00:00.000000 |
| certa-2010-avi-160 | Vulnérabilités dans VMware ESX Server | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-159 | Vulnérabilité dans MediaWiki | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-158 | Multiples vulnérabilités dans ClamAV | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-157 | Vulnérabilité dans Emacs | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-156 | Multiples vulnérabilités dans CA XOsoft | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-093 | Vulnérabilité dans Asterisk | 2010-03-01T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2009-avi-448 | Vulnérabilités dans Xpdf et dérivés | 2009-10-16T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-155 | Vulnérabilité dans Foxit Reader | 2010-04-02T00:00:00.000000 | 2010-04-02T00:00:00.000000 |
| certa-2010-avi-154 | Vulnérabilité dans Firefox | 2010-04-02T00:00:00.000000 | 2010-04-02T00:00:00.000000 |
| certa-2010-avi-153 | Multiples vulnérabilités dans Apple QuickTime | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-152 | Multiples vulnérabilités dans Oracle Java | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-151 | Vulnérabilités dans Apache ActiveMQ | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-150 | Multiples vulnérabilités dans Moodle | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-149 | Multiples vulnérabilités dans Firefox | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-148 | Multiples vulnérabilités dans HP SOA Registry Fondation | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-147 | Multiples vulnérabilités dans Apple iTunes | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-146 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-145 | Multiples vulnérabilités dans IBM Web Interface for Content Management | 2010-03-30T00:00:00.000000 | 2010-03-30T00:00:00.000000 |
| certa-2010-avi-144 | Vulnérabilité dans phpCAS | 2010-03-30T00:00:00.000000 | 2010-03-30T00:00:00.000000 |