Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72826 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Scope Bypass via createApiKey |
getgrav |
grav |
2026-08-14T11:35:34.460Z | 2026-08-24T10:28:32.568Z |
| cve-2026-72825 | 7.2 (v4.0) 7.6 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via Report… |
getgrav |
grav |
2026-08-14T11:35:33.800Z | 2026-08-14T17:59:38.432Z |
| cve-2026-72824 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via PagesController |
getgrav |
grav |
2026-08-14T11:35:33.122Z | 2026-08-24T10:28:31.860Z |
| cve-2026-72823 | 5.3 (v4.0) 5.4 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via DemoCo… |
getgrav |
grav |
2026-08-14T11:35:32.238Z | 2026-08-17T16:09:06.929Z |
| cve-2026-72822 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Authentication Bypass via disable2fa |
getgrav |
grav |
2026-08-14T11:35:31.592Z | 2026-08-24T10:28:31.192Z |
| cve-2026-72821 | 5.1 (v4.0) 5.4 (v3.1) | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle |
getgrav |
grav |
2026-08-14T11:35:30.847Z | 2026-08-18T01:56:55.524Z |
| cve-2026-72820 | 6.9 (v4.0) 4.9 (v3.1) | Grav 2.0.11 Path Traversal via Backup Profile Configuration |
getgrav |
grav |
2026-08-14T11:35:30.155Z | 2026-08-14T18:05:45.073Z |
| cve-2026-72819 | 8.7 (v4.0) 8.8 (v3.1) | Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload |
getgrav |
grav |
2026-08-14T11:35:29.507Z | 2026-08-14T14:44:04.272Z |
| cve-2026-72817 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwar… |
go-chi |
chi |
2026-08-14T11:35:28.824Z | 2026-08-17T16:09:15.028Z |
| cve-2026-72816 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware |
go-chi |
chi |
2026-08-14T11:35:28.145Z | 2026-08-14T15:22:35.592Z |
| cve-2026-72815 | 6.9 (v4.0) | go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header |
go-chi |
chi |
2026-08-14T11:35:27.496Z | 2026-08-18T01:55:20.208Z |
| cve-2026-72814 | 6.3 (v4.0) | actix-web before 0.6.10 Information Disclosure via Files |
actix |
actix-web |
2026-08-14T11:35:26.816Z | 2026-08-14T19:39:40.649Z |
| cve-2026-72813 | 6.9 (v4.0) | actix-files before 0.6.10 Denial of Service via empty … |
actix |
actix-web |
2026-08-14T11:35:26.123Z | 2026-08-14T14:41:51.141Z |
| cve-2026-72812 | 6.9 (v4.0) 6.5 (v3.1) | SiYuan before v3.7.4 Missing Authorization via refresh… |
siyuan-note |
siyuan |
2026-08-14T11:35:25.455Z | 2026-08-17T16:09:23.114Z |
| cve-2026-72811 | 9.9 (v4.0) 10 (v3.1) | SiYuan before v3.7.4 SQL Injection via backlink search |
siyuan-note |
siyuan |
2026-08-14T11:35:24.767Z | 2026-08-14T16:52:14.903Z |
| cve-2026-72810 | 9.2 (v4.0) 8.6 (v3.1) | SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket |
siyuan-note |
siyuan |
2026-08-14T11:35:24.086Z | 2026-08-18T02:26:57.244Z |
| cve-2025-71405 | 5.1 (v4.0) | go-chi chi before v5.2.2 Open Redirect via RedirectSlashes |
go-chi |
chi |
2026-08-14T11:35:23.411Z | 2026-08-14T18:57:43.537Z |
| cve-2026-19822 | Tenda W20E QoS Edit editQos lstAdd stack-based overflow |
Tenda |
W20E |
2026-08-14T11:30:11.772Z | 2026-08-14T14:53:31.615Z | |
| cve-2026-19821 | Tenda AC12 httpd web management interface SetSysAutoRe… |
Tenda |
AC12 |
2026-08-14T11:00:10.537Z | 2026-08-18T01:53:10.669Z | |
| cve-2026-19815 | TOTOLINK A800R firewall.so cstecgi.cgi setParentalRule… |
TOTOLINK |
A800R |
2026-08-14T08:30:10.309Z | 2026-08-14T10:25:08.237Z | |
| cve-2026-19814 | TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack… |
TOTOLINK |
A800R |
2026-08-14T08:15:09.994Z | 2026-08-14T15:04:42.067Z | |
| cve-2026-19813 | TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRul… |
TOTOLINK |
A800R |
2026-08-14T08:00:11.323Z | 2026-08-18T13:39:16.628Z | |
| cve-2026-19794 | WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site S… |
gamerz |
WP-Stats |
2026-08-14T07:39:28.891Z | 2026-08-14T10:25:41.585Z | |
| cve-2026-19812 | TOTOLINK A800R product.so cstecgi.cgi UploadCustomModu… |
TOTOLINK |
A800R |
2026-08-14T07:30:10.447Z | 2026-08-14T14:54:28.616Z | |
| cve-2026-19811 | TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules s… |
TOTOLINK |
A800R |
2026-08-14T06:15:11.415Z | 2026-08-18T01:52:00.688Z | |
| cve-2026-18039 | N/A | Essential Addons for Elementor < 6.7.2 - Unauthenticat… |
Unknown |
Essential Addons for Elementor |
2026-08-14T06:00:11.664Z | 2026-08-14T15:26:44.367Z |
| cve-2026-16739 | N/A | Epeken All Kurir <= 2.1.4 - Unauthenticated Order Paym… |
Unknown |
Epeken All Kurir for Woocommerce |
2026-08-14T06:00:11.497Z | 2026-08-31T09:08:34.173Z |
| cve-2026-15205 | N/A | Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL I… |
Unknown |
Paymob for WooCommerce |
2026-08-14T06:00:11.326Z | 2026-08-14T15:40:20.932Z |
| cve-2026-14290 | N/A | Embed Google Photos Album Easily <= 2.2.1 - Contributo… |
Unknown |
Embed Google Photos album |
2026-08-14T06:00:11.109Z | 2026-08-14T15:47:13.683Z |
| cve-2026-19617 | 5.5 (v3.1) | Libdm: lvm2: libdm: denial of service via uncontrolled… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-14T05:59:29.626Z | 2026-09-01T12:48:22.619Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-043 | Multiples vulnérabilités dans les produits VMware | 2010-02-02T00:00:00.000000 | 2010-02-02T00:00:00.000000 |
| certa-2010-avi-042 | Vulnérabilité dans Cisco Secure Desktop | 2010-02-02T00:00:00.000000 | 2010-02-02T00:00:00.000000 |
| certa-2010-avi-041 | Multiples vulnérabilités dans Apache Tomcat | 2010-02-02T00:00:00.000000 | 2010-02-03T00:00:00.000000 |
| certa-2010-avi-465 | Vulnérabilité dans IBM DB2 Administration Server | 2010-02-01T00:00:00.000000 | 2010-10-01T00:00:00.000000 |
| certa-2010-avi-040 | Vulnérabilité dans Symantec Altiris Notification Server | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-039 | Vulnérabilité dans IBM DataPower | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-038 | Vulnérabilité dans Samba | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-037 | Vulnérabilité des produits Hitachi | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-036 | Vulnérabilité dans HP OpenView Storage Data Protector | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-035 | Multiples vulnérabilités dans Wireshark | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-034 | Multiples vulnérabilités dans Cisco Unified MeetingPlace | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-033 | Vulnérabilités dans Sun Java System Web Server | 2010-01-29T00:00:00.000000 | 2010-01-29T00:00:00.000000 |
| certa-2010-avi-032 | Vulnérabilité dans Apache mod_proxy | 2010-01-28T00:00:00.000000 | 2010-01-28T00:00:00.000000 |
| certa-2010-avi-031 | Vulnérabilité dans Citrix XenServer | 2010-01-27T00:00:00.000000 | 2010-01-27T00:00:00.000000 |
| certa-2010-avi-030 | Multiples vulnérabilités dans Google Chrome | 2010-01-27T00:00:00.000000 | 2010-01-27T00:00:00.000000 |
| certa-2010-avi-029 | Vulnérabilité dans CISCO IOS | 2010-01-22T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2010-avi-028 | Multiples vulnérabilités dans gzip | 2010-01-22T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2010-avi-027 | Multiples vulnérabilités dans HP Power Manager | 2010-01-22T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2010-avi-026 | Vulnérabilités des produits SAP | 2010-01-22T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2010-avi-025 | Multiples vulnérabilités dans Internet Explorer | 2010-01-22T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2010-avi-024 | Multiples vulnérabilités dans Mozilla Thunderbird 3.0 | 2010-01-21T00:00:00.000000 | 2010-01-21T00:00:00.000000 |
| certa-2010-avi-023 | Multiples vulnérabilités dans Realplayer et Helix Player | 2010-01-21T00:00:00.000000 | 2010-07-15T00:00:00.000000 |
| certa-2010-avi-022 | Multiples vulnérabilités dans Apple Mac OS X | 2010-01-20T00:00:00.000000 | 2010-01-20T00:00:00.000000 |
| certa-2010-avi-021 | Vulnérabilités dans Adobe Shockwave Player | 2010-01-20T00:00:00.000000 | 2010-01-20T00:00:00.000000 |
| certa-2010-avi-020 | Vulnérabilité dans BIND DNSSEC | 2010-01-20T00:00:00.000000 | 2010-04-29T00:00:00.000000 |
| certa-2010-avi-019 | Vulnérabilité dans TYPO3 | 2010-01-19T00:00:00.000000 | 2010-01-19T00:00:00.000000 |
| certa-2010-avi-018 | Multiples vulnérabilités dans Red Hat Linux | 2010-01-14T00:00:00.000000 | 2010-01-14T00:00:00.000000 |
| certa-2010-avi-017 | Vulnérabilité dans Novell ZENWorks Asset Management | 2010-01-14T00:00:00.000000 | 2010-01-14T00:00:00.000000 |
| certa-2010-avi-016 | Vulnérabilité dans Sun Identity Manager | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-015 | Vulnérabilité dans Solaris Trusted Extensions | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |