Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72824 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via PagesController |
getgrav |
grav |
2026-08-14T11:35:33.122Z | 2026-08-24T10:28:31.860Z |
| cve-2026-72823 | 5.3 (v4.0) 5.4 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via DemoCo… |
getgrav |
grav |
2026-08-14T11:35:32.238Z | 2026-08-17T16:09:06.929Z |
| cve-2026-72822 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Authentication Bypass via disable2fa |
getgrav |
grav |
2026-08-14T11:35:31.592Z | 2026-08-24T10:28:31.192Z |
| cve-2026-72821 | 5.1 (v4.0) 5.4 (v3.1) | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle |
getgrav |
grav |
2026-08-14T11:35:30.847Z | 2026-08-18T01:56:55.524Z |
| cve-2026-72820 | 6.9 (v4.0) 4.9 (v3.1) | Grav 2.0.11 Path Traversal via Backup Profile Configuration |
getgrav |
grav |
2026-08-14T11:35:30.155Z | 2026-08-14T18:05:45.073Z |
| cve-2026-72819 | 8.7 (v4.0) 8.8 (v3.1) | Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload |
getgrav |
grav |
2026-08-14T11:35:29.507Z | 2026-08-14T14:44:04.272Z |
| cve-2026-72817 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwar… |
go-chi |
chi |
2026-08-14T11:35:28.824Z | 2026-08-17T16:09:15.028Z |
| cve-2026-72816 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware |
go-chi |
chi |
2026-08-14T11:35:28.145Z | 2026-08-14T15:22:35.592Z |
| cve-2026-72815 | 6.9 (v4.0) | go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header |
go-chi |
chi |
2026-08-14T11:35:27.496Z | 2026-08-18T01:55:20.208Z |
| cve-2026-72814 | 6.3 (v4.0) | actix-web before 0.6.10 Information Disclosure via Files |
actix |
actix-web |
2026-08-14T11:35:26.816Z | 2026-08-14T19:39:40.649Z |
| cve-2026-72813 | 6.9 (v4.0) | actix-files before 0.6.10 Denial of Service via empty … |
actix |
actix-web |
2026-08-14T11:35:26.123Z | 2026-08-14T14:41:51.141Z |
| cve-2026-72812 | 6.9 (v4.0) 6.5 (v3.1) | SiYuan before v3.7.4 Missing Authorization via refresh… |
siyuan-note |
siyuan |
2026-08-14T11:35:25.455Z | 2026-08-17T16:09:23.114Z |
| cve-2026-72811 | 9.9 (v4.0) 10 (v3.1) | SiYuan before v3.7.4 SQL Injection via backlink search |
siyuan-note |
siyuan |
2026-08-14T11:35:24.767Z | 2026-08-14T16:52:14.903Z |
| cve-2026-72810 | 9.2 (v4.0) 8.6 (v3.1) | SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket |
siyuan-note |
siyuan |
2026-08-14T11:35:24.086Z | 2026-08-18T02:26:57.244Z |
| cve-2025-71405 | 5.1 (v4.0) | go-chi chi before v5.2.2 Open Redirect via RedirectSlashes |
go-chi |
chi |
2026-08-14T11:35:23.411Z | 2026-08-14T18:57:43.537Z |
| cve-2026-19822 | Tenda W20E QoS Edit editQos lstAdd stack-based overflow |
Tenda |
W20E |
2026-08-14T11:30:11.772Z | 2026-08-14T14:53:31.615Z | |
| cve-2026-19821 | Tenda AC12 httpd web management interface SetSysAutoRe… |
Tenda |
AC12 |
2026-08-14T11:00:10.537Z | 2026-08-18T01:53:10.669Z | |
| cve-2026-19815 | TOTOLINK A800R firewall.so cstecgi.cgi setParentalRule… |
TOTOLINK |
A800R |
2026-08-14T08:30:10.309Z | 2026-08-14T10:25:08.237Z | |
| cve-2026-19814 | TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack… |
TOTOLINK |
A800R |
2026-08-14T08:15:09.994Z | 2026-08-14T15:04:42.067Z | |
| cve-2026-19813 | TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRul… |
TOTOLINK |
A800R |
2026-08-14T08:00:11.323Z | 2026-08-18T13:39:16.628Z | |
| cve-2026-19794 | WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site S… |
gamerz |
WP-Stats |
2026-08-14T07:39:28.891Z | 2026-08-14T10:25:41.585Z | |
| cve-2026-19812 | TOTOLINK A800R product.so cstecgi.cgi UploadCustomModu… |
TOTOLINK |
A800R |
2026-08-14T07:30:10.447Z | 2026-08-14T14:54:28.616Z | |
| cve-2026-19811 | TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules s… |
TOTOLINK |
A800R |
2026-08-14T06:15:11.415Z | 2026-08-18T01:52:00.688Z | |
| cve-2026-18039 | N/A | Essential Addons for Elementor < 6.7.2 - Unauthenticat… |
Unknown |
Essential Addons for Elementor |
2026-08-14T06:00:11.664Z | 2026-08-14T15:26:44.367Z |
| cve-2026-16739 | N/A | Epeken All Kurir <= 2.1.4 - Unauthenticated Order Paym… |
Unknown |
Epeken All Kurir for Woocommerce |
2026-08-14T06:00:11.497Z | 2026-08-31T09:08:34.173Z |
| cve-2026-15205 | N/A | Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL I… |
Unknown |
Paymob for WooCommerce |
2026-08-14T06:00:11.326Z | 2026-08-14T15:40:20.932Z |
| cve-2026-14290 | N/A | Embed Google Photos Album Easily <= 2.2.1 - Contributo… |
Unknown |
Embed Google Photos album |
2026-08-14T06:00:11.109Z | 2026-08-14T15:47:13.683Z |
| cve-2026-19617 | 5.5 (v3.1) | Libdm: lvm2: libdm: denial of service via uncontrolled… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-14T05:59:29.626Z | 2026-09-01T12:48:22.619Z |
| cve-2026-12743 | affiliate-toolkit <= 3.8.8 - Authenticated (Administra… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-08-14T05:30:44.371Z | 2026-08-14T14:00:47.042Z | |
| cve-2026-12949 | Wishlist Member X <= 3.34.1 - Unauthenticated Account … |
Wishlist Member |
Wishlist Member |
2026-08-14T05:30:43.982Z | 2026-08-14T14:59:09.168Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-073 | Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-072 | Vulnérabilité dans Kerberos sous Microsoft Windows | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-071 | Vulnérabilité dans Microsoft DirectShow | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-070 | Multiples vulnérabilités dans Microsoft Windows SMB | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-069 | Vulnérabilité dans Microsoft Windows CSRSS | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-068 | Vulnérabilité dans Microsoft Hyper-V | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-067 | Multiples vulnérabilités dans Microsoft Windows TCP/IP | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-066 | Vulnérabilité dans certains contrôles ActiveX | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-065 | Vulnérabilité dans le gestionnaire de Shell Windows | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-064 | Vulnérabilités dans le client SMB de Microsoft Windows | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-063 | Vulnérabilité dans Microsoft Paint | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-062 | Vulnérabilités de Microsoft PowerPoint | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-061 | Vulnérabilité dans Microsoft Office | 2010-02-10T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-avi-060 | Vulnérabilité dans Novell eDirectory | 2010-02-09T00:00:00.000000 | 2010-02-09T00:00:00.000000 |
| certa-2010-avi-059 | Vulnérabilité dans OTRS | 2010-02-09T00:00:00.000000 | 2010-02-09T00:00:00.000000 |
| certa-2010-avi-058 | Vulnérabilité dans Oracle WebLogic Server | 2010-02-08T00:00:00.000000 | 2010-02-08T00:00:00.000000 |
| certa-2010-avi-057 | Vulnérabilités de DokuWiki | 2010-02-08T00:00:00.000000 | 2010-02-08T00:00:00.000000 |
| certa-2010-avi-056 | Vulnérabilité dans HP Enterprise Cluster Master Toolkit | 2010-02-05T00:00:00.000000 | 2010-02-05T00:00:00.000000 |
| certa-2010-avi-055 | Vulnérabilité dans lighttpd | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-054 | Vulnérabilité dans Apache HTTP Server | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-053 | Vulnérabilité dans Novell NetStorage | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-052 | Vulnérabilité dans Trend Micro OfficeScan | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-051 | Vulnérabilité dans Asterisk | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-050 | Vulnérabilité dans Fetchmail | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-049 | Vulnérabilité dans OpenVMS RMS | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-048 | Vulnérabilité dans Citrix XenServer | 2010-02-04T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2010-avi-047 | Vulnérabilité dans Adobe ColdFusion | 2010-02-03T00:00:00.000000 | 2010-02-03T00:00:00.000000 |
| certa-2010-avi-046 | Multiples vulnérabilités dans Apple iPhone OS | 2010-02-03T00:00:00.000000 | 2010-02-03T00:00:00.000000 |
| certa-2010-avi-045 | Vulnérabilités dans Squid | 2010-02-03T00:00:00.000000 | 2010-02-03T00:00:00.000000 |
| certa-2010-avi-044 | Vulnérabilité dans BIND avec DNSSEC | 2010-02-02T00:00:00.000000 | 2010-07-29T00:00:00.000000 |