Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-56860 | N/A | Avoid quadratic complexity in resolvePath in net/url |
Go standard library |
net/url |
2026-08-13T21:58:53.731Z | 2026-08-14T16:14:39.166Z |
| cve-2026-56864 | N/A | Ignore unrelated, unauthenticated hashes in Lookup in … |
Go toolchain |
cmd/go |
2026-08-13T21:58:53.605Z | 2026-08-14T16:16:42.248Z |
| cve-2026-56865 | N/A | Fix transparency log tile verification bypass in golan… |
Go toolchain |
cmd/go |
2026-08-13T21:58:53.475Z | 2026-08-14T15:34:17.235Z |
| cve-2026-56858 | N/A | Fix Javascript regexp context tracking in html/template |
Go standard library |
html/template |
2026-08-13T21:58:53.354Z | 2026-08-14T15:32:29.852Z |
| cve-2026-56862 | N/A | Limit handshake messages we are willing to accept post… |
Go standard library |
crypto/tls |
2026-08-13T21:58:53.216Z | 2026-08-14T15:29:41.741Z |
| cve-2026-56853 | N/A | Apply ReadHeaderTimeout when doing unencrypted HTTP/2 … |
Go standard library |
net/http |
2026-08-13T21:58:53.092Z | 2026-08-14T15:23:18.680Z |
| cve-2026-56859 | N/A | Add recursion depth guard during decode in encoding/xml |
Go standard library |
encoding/xml |
2026-08-13T21:58:52.959Z | 2026-08-14T15:21:46.218Z |
| cve-2026-33818 | N/A | Enforce maximum recursion depth in encoding/asn1 |
Go standard library |
encoding/asn1 |
2026-08-13T21:58:52.821Z | 2026-09-10T16:34:27.711Z |
| cve-2026-73841 | OpenChoreo: Cross-project command execution and wirelo… |
openchoreo |
openchoreo |
2026-08-13T21:56:13.057Z | 2026-09-02T15:16:54.694Z | |
| cve-2026-72857 | 8.3 (v4.0) 7.7 (v3.1) | Budibase before 3.40.0 Credential Exposure via STRING Fields |
Budibase |
budibase |
2026-08-13T21:54:45.984Z | 2026-08-14T16:12:55.091Z |
| cve-2026-72856 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.40.0 Authentication Bypass via Tenan… |
Budibase |
budibase |
2026-08-13T21:54:45.304Z | 2026-08-17T16:09:39.599Z |
| cve-2026-72855 | 8.4 (v4.0) 8.5 (v3.1) | Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI … |
budibase |
server |
2026-08-13T21:54:44.625Z | 2026-08-14T16:21:40.818Z |
| cve-2026-72853 | 8.8 (v4.0) 7.6 (v3.1) | Budibase before 3.40.0 SQL Injection via Oracle connector |
Budibase |
budibase |
2026-08-13T21:54:43.945Z | 2026-08-18T01:43:22.355Z |
| cve-2026-72851 | 9 (v4.0) 10 (v3.1) | Budibase before 3.40.0 SQL Injection via Unauthenticat… |
budibase |
server |
2026-08-13T21:54:43.318Z | 2026-08-14T19:02:13.105Z |
| cve-2026-72850 | 9.4 (v4.0) 9.1 (v3.1) | Budibase before 3.40.0 Arbitrary File Write via Path T… |
budibase |
server |
2026-08-13T21:54:42.651Z | 2026-08-14T16:14:04.242Z |
| cve-2026-72849 | 8.7 (v4.0) 7.7 (v3.1) | Budibase before 3.40.0 Identity Confusion via Chat-Lin… |
budibase |
server |
2026-08-13T21:54:41.963Z | 2026-08-17T16:09:46.969Z |
| cve-2026-72842 | 9.4 (v4.0) 9.9 (v3.1) | OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass |
openwrt |
luci |
2026-08-13T21:54:41.307Z | 2026-08-14T16:52:21.458Z |
| cve-2026-72841 | 9.4 (v4.0) 9.9 (v3.1) | luci-app-openvpn Path Traversal RCE via instance_name2 |
openwrt |
luci |
2026-08-13T21:54:40.631Z | 2026-08-18T01:42:17.156Z |
| cve-2026-72840 | 8.7 (v4.0) 8.8 (v3.1) | OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via C… |
openwrt |
luci |
2026-08-13T21:54:39.948Z | 2026-08-14T19:03:37.329Z |
| cve-2026-72839 | 9.3 (v4.0) 9.8 (v3.1) | filebrowser through 2.63.16 Privilege Escalation via Signup |
filebrowser |
filebrowser |
2026-08-13T21:54:39.242Z | 2026-08-14T16:52:19.479Z |
| cve-2026-73840 | OpenChoreo: Unauthenticated build/workflow trigger via… |
openchoreo |
openchoreo |
2026-08-13T21:52:27.798Z | 2026-08-14T16:26:09.846Z | |
| cve-2026-19751 | EnzoVezzaro mcp-dominican-layer parse-csv tool index.t… |
EnzoVezzaro |
mcp-dominican-layer |
2026-08-13T21:45:08.825Z | 2026-08-18T13:39:43.702Z | |
| cve-2026-73667 | OpenChoreo: Authenticated OS command injection via Ope… |
openchoreo |
openchoreo |
2026-08-13T21:43:43.895Z | 2026-08-17T17:18:14.029Z | |
| cve-2026-73666 | OpenChoreo: Unauthenticated Backstage developer-portal… |
openchoreo |
backstage-plugins |
2026-08-13T21:40:13.597Z | 2026-08-14T18:06:57.292Z | |
| cve-2026-73039 | 5.3 (v4.0) 5.4 (v3.1) | streama Insecure Direct Object Reference via ViewingSt… |
streamaserver |
streama |
2026-08-13T21:34:04.344Z | 2026-08-14T18:07:09.070Z |
| cve-2026-73665 | FreePBX UCP: Unauthenticated remote code execution via… |
FreePBX |
ucp |
2026-08-13T21:32:02.059Z | 2026-08-18T01:41:24.526Z | |
| cve-2026-73664 | FreePBX: Authenticated Arbitrary SSH Key Injection via… |
FreePBX |
backup |
2026-08-13T21:30:37.573Z | 2026-08-14T16:16:24.751Z | |
| cve-2026-19750 | Tenda CH/CP/TX3 SSH hard-coded password |
Tenda |
CH |
2026-08-13T21:30:09.762Z | 2026-08-14T16:17:43.059Z | |
| cve-2026-73663 | FreePBX: Unauthenticated SQL injection in FreePBX miss… |
FreePBX |
missedcall |
2026-08-13T21:29:14.452Z | 2026-08-14T16:27:05.654Z | |
| cve-2026-73662 | Authenticated FreePBX Music RCE via mpg123 and Asteris… |
FreePBX |
music |
2026-08-13T21:27:14.318Z | 2026-08-17T19:49:25.190Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-396 | Vulnérabilité dans Symantec Altiris | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-395 | Multiples vulnérabilités dans PHP | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-394 | Multiples vulnérabilités dans Wireshark | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-393 | Multiples vulnérabilités dans Drupal | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-392 | Vulnérabilité de OpenSSL sous Debian | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-391 | Multiples vulnérabilités dans Bugzilla | 2009-09-18T00:00:00.000000 | 2009-10-19T00:00:00.000000 |
| certa-2009-avi-390 | Multiples vulnérabilités dans IBM Websphere MQ | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-389 | Multiples vulnérabilités dans VMware | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-388 | Multiples vulnérabilités dans Wireshark | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-387 | Vulnérabilité dans bootpd sur HP-UX | 2009-09-16T00:00:00.000000 | 2009-09-16T00:00:00.000000 |
| certa-2009-avi-386 | Vulnérabilité dans Sun Solaris | 2009-09-16T00:00:00.000000 | 2009-09-16T00:00:00.000000 |
| certa-2009-avi-385 | Vulnérabilités dans Horde Application Framework | 2009-09-14T00:00:00.000000 | 2009-09-14T00:00:00.000000 |
| certa-2009-avi-384 | Vulnérabilité de FreeRADIUS | 2009-09-11T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-383 | Multipleis vulnérabilités dans iPhone OS | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-382 | Multiples vulnérabilités dans MacOS X | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-381 | Vulnérabilité de Cyrus IMAP | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-380 | Multiples vulnérabilités dans PostgreSQL | 2009-09-11T00:00:00.000000 | 2009-10-12T00:00:00.000000 |
| certa-2009-avi-379 | Vulnérabilités dans Mozilla Firefox | 2009-09-10T00:00:00.000000 | 2009-09-10T00:00:00.000000 |
| certa-2009-avi-378 | Multiples vulnérabilités dans Apple QuickTime | 2009-09-10T00:00:00.000000 | 2009-09-10T00:00:00.000000 |
| certa-2009-avi-377 | Vulnérabilités des produits Cisco | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-376 | Vulnérabilité dans les produits Check Point | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-375 | Vulnérabilité de Ruby on Rails | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-374 | Vulnérabilité dans Asterisk | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-373 | Vulnérabilité dans Microsoft Wireless LAN AutoConfig Service | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-372 | Multiples vulnérabilités dans TCP/IP sous Windows | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-371 | Vulnérabilités dans Windows Media Format | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-370 | Vulnérabilité dans le composant d'édition DHTML de Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-369 | Vulnérabilité de Microsoft JScript | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-368 | Vulnérabilité dans IBM Lotus Domino Web Acess | 2009-09-07T00:00:00.000000 | 2009-09-07T00:00:00.000000 |
| certa-2009-avi-367 | Vulnérabilité dans IBM Tivoli Identity Manager | 2009-09-07T00:00:00.000000 | 2009-09-07T00:00:00.000000 |