Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76049 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-19T03:15:10.152Z | 2026-08-21T21:49:44.635Z | |
| cve-2026-71871 | Orval: Import-time RCE via header-parameter default ->… |
orval-labs |
orval |
2026-08-19T17:33:56.011Z | 2026-08-21T21:49:37.465Z | |
| cve-2026-71865 | Orval: Import-time RCE via query parameter name -> com… |
orval-labs |
orval |
2026-08-19T17:36:47.668Z | 2026-08-21T21:49:30.476Z | |
| cve-2026-55648 | FreeRDP: Integer Overflow in `freerdp_image_copy_from_… |
FreeRDP |
FreeRDP |
2026-08-19T17:48:51.223Z | 2026-08-21T21:49:23.791Z | |
| cve-2026-49870 | Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Lim… |
grokability |
snipe-it |
2026-08-19T18:13:05.368Z | 2026-08-21T21:49:16.895Z | |
| cve-2026-55519 | Snipe-IT: Improper Authorization in File Deletion (IDOR) |
grokability |
snipe-it |
2026-08-19T18:20:14.732Z | 2026-08-21T21:49:10.597Z | |
| cve-2026-68899 | Wekan: File Upload MIME Type Validation Bypass — Store… |
wekan |
wekan |
2026-08-19T19:26:06.041Z | 2026-08-21T21:49:01.859Z | |
| cve-2026-55087 | Etherpad: x-proxy-path header reflected into admin HTM… |
ether |
etherpad |
2026-08-19T19:29:16.221Z | 2026-08-21T21:48:54.703Z | |
| cve-2026-55088 | Etherpad: Device-to-device author-token transfer endpo… |
ether |
etherpad |
2026-08-19T19:30:20.288Z | 2026-08-21T21:48:47.361Z | |
| cve-2026-63188 | logto-tunnel serves files outside --experience-path vi… |
logto-io |
logto |
2026-08-19T19:47:05.155Z | 2026-08-21T21:48:40.521Z | |
| cve-2026-54739 | Lemmy: Login Endpoint User Enumeration via HTTP Respon… |
LemmyNet |
lemmy |
2026-08-19T20:16:01.050Z | 2026-08-21T21:48:33.495Z | |
| cve-2026-54738 | Lemmy: Rate limit bypass via X-Forwarded-For header sp… |
LemmyNet |
lemmy |
2026-08-19T20:27:45.162Z | 2026-08-21T21:48:26.962Z | |
| cve-2026-76582 | TRENDnet TEW-821DAP ssi ping.cgi system command injection |
TRENDnet |
TEW-821DAP |
2026-08-19T20:30:10.876Z | 2026-08-21T21:48:20.571Z | |
| cve-2026-53545 | Termix: Remote Code Execution via Tunnel Disconnect pk… |
Termix-SSH |
Termix |
2026-08-19T20:36:51.990Z | 2026-08-21T21:48:14.099Z | |
| cve-2026-68552 | Coturn: uint16_t truncation overflow in STUN message l… |
coturn |
coturn |
2026-08-19T20:39:14.822Z | 2026-08-21T21:48:07.059Z | |
| cve-2026-69222 | LiquidJS: Uncontrolled Resource Consumption in `join` … |
harttle |
liquidjs |
2026-08-19T20:51:44.218Z | 2026-08-21T21:47:58.206Z | |
| cve-2026-76591 | TRENDnet TEW-755AP ssi email.cgi log_email_server comm… |
TRENDnet |
TEW-755AP |
2026-08-19T22:00:11.212Z | 2026-08-21T21:47:51.540Z | |
| cve-2026-14949 | 8.5 (v4.0) 6.5 (v3.1) | Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is v… |
Frauscher Sensortechnik |
FDS 102 |
2026-08-20T08:19:11.070Z | 2026-08-21T21:47:44.069Z |
| cve-2026-44725 | EMQX: Stale plugins allow grants amplify a compromised… |
emqx |
emqx |
2026-08-20T14:35:11.726Z | 2026-08-21T21:47:37.335Z | |
| cve-2026-54449 | LangBot: Authenticated RCE Via MCP Configuration |
langbot-app |
LangBot |
2026-08-20T16:10:25.169Z | 2026-08-21T21:47:30.890Z | |
| cve-2026-63481 | Hurl: Cookies in Cookies section leak when redirecting… |
Orange-OpenSource |
hurl |
2026-08-20T16:28:24.282Z | 2026-08-21T21:47:24.233Z | |
| cve-2026-55586 | SumatraPDF: Heap out-of-bounds write in vendored CHMLi… |
sumatrapdfreader |
sumatrapdf |
2026-08-20T16:35:07.359Z | 2026-08-21T21:47:17.240Z | |
| cve-2026-77022 | Comfast CF-N1-S SSID Configuration mbox-config sub_44B… |
Comfast |
CF-N1-S |
2026-08-20T16:45:07.012Z | 2026-08-21T21:47:09.947Z | |
| cve-2026-54136 | Windmill: Resource-scoped API tokens can read script c… |
windmill-labs |
windmill |
2026-08-20T16:47:41.918Z | 2026-08-21T21:47:02.821Z | |
| cve-2026-72844 | 6.3 (v3.1) 6.8 (v4.0) | Lean 4 Kernel Type Checking Bypass via Mismatched Stru… |
leanprover |
lean4 |
2026-08-20T17:19:34.054Z | 2026-08-21T21:46:54.936Z |
| cve-2026-73256 | Mongoose: HTTP/1.0 detection off-by-one enables reques… |
cesanta |
mongoose |
2026-08-20T17:37:54.505Z | 2026-08-21T21:46:47.832Z | |
| cve-2026-63388 | Libevent: Heap out-of-bounds write in bufferevent_sock… |
libevent |
libevent |
2026-08-20T17:44:18.435Z | 2026-08-21T21:46:40.675Z | |
| cve-2026-63381 | Libevent: Dangling Pointer in `evbuffer_add_buffer_ref… |
libevent |
libevent |
2026-08-20T17:50:09.322Z | 2026-08-21T21:46:33.792Z | |
| cve-2026-63385 | Libevent: HTTP header handling bugs create risk of acc… |
libevent |
libevent |
2026-08-20T17:55:36.214Z | 2026-08-21T21:46:26.752Z | |
| cve-2026-63003 | django CMS: Broken access control in page *Duplicate* … |
django-cms |
django-cms |
2026-08-20T18:09:13.988Z | 2026-08-21T21:46:19.864Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-302 | Vulnérabilité dans ISC BIND | 2009-07-29T00:00:00.000000 | 2009-08-07T00:00:00.000000 |
| certa-2009-avi-313 | Vulnérabilité de la plateforme Java sous Windows | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-312 | Multiples vulnérabilités dans Sun Java JDK/JRE | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-311 | Vulnérabilité dans Sun VirtualBox | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-310 | Vulnérabilité dans SPIP | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-309 | Multiples vulnérabilités du système d'exploitation Apple MacOS X | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-308 | Multiples vulnérabilités des cartes mère Intel | 2009-08-06T00:00:00.000000 | 2009-08-06T00:00:00.000000 |
| certa-2009-avi-307 | Vulnérabilité de l'OS iPhone d'Apple | 2009-08-05T00:00:00.000000 | 2009-08-05T00:00:00.000000 |
| certa-2009-avi-306 | Vulnérabilités dans Firefox | 2009-08-04T00:00:00.000000 | 2009-08-04T00:00:00.000000 |
| certa-2009-avi-305 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2009-07-31T00:00:00.000000 | 2009-07-31T00:00:00.000000 |
| certa-2009-avi-304 | Multiples vulnérabilités dans le routage BGP des équipements Cisco | 2009-07-30T00:00:00.000000 | 2009-07-30T00:00:00.000000 |
| certa-2009-avi-296 | Vulnérabilité dans VLC | 2009-07-28T00:00:00.000000 | 2009-07-30T00:00:00.000000 |
| certa-2009-avi-303 | Vulnérabilité dans des produits CISCO | 2009-07-29T00:00:00.000000 | 2009-07-29T00:00:00.000000 |
| certa-2009-avi-301 | Multiples vulnérabilités dans Cisco WLC | 2009-07-29T00:00:00.000000 | 2009-07-29T00:00:00.000000 |
| certa-2009-avi-300 | Multiples vulnérabilités dans Microsoft Visual Studio | 2009-07-29T00:00:00.000000 | 2009-07-29T00:00:00.000000 |
| certa-2009-avi-299 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2009-07-29T00:00:00.000000 | 2009-07-29T00:00:00.000000 |
| certa-2009-avi-298 | Multiples vulnérabilités dans Squid | 2009-07-28T00:00:00.000000 | 2009-07-28T00:00:00.000000 |
| certa-2009-avi-297 | Vulnérabilité dans les produits Kaspersky | 2009-07-28T00:00:00.000000 | 2009-07-28T00:00:00.000000 |
| certa-2009-avi-272 | Vulnérabilité de Apache mod_proxy | 2009-07-13T00:00:00.000000 | 2009-07-28T00:00:00.000000 |
| certa-2009-avi-295 | Vulnérabilité dans Sun Java System Access Manager Policy Agent | 2009-07-27T00:00:00.000000 | 2009-07-27T00:00:00.000000 |
| certa-2009-avi-294 | Multiples vulnérabilités dans Cisco Unified Contact Center Express | 2009-07-27T00:00:00.000000 | 2009-07-27T00:00:00.000000 |
| certa-2009-avi-293 | Vulnérabilité dans Novell Privileged User Manager | 2009-07-27T00:00:00.000000 | 2009-07-27T00:00:00.000000 |
| certa-2009-avi-291 | Vulnérabilité dans IBM Tivoli Identity Manager | 2009-07-24T00:00:00.000000 | 2009-07-24T00:00:00.000000 |
| certa-2009-avi-290 | Mulitples vulnérabilités dans Mozilla Firefox | 2009-07-24T00:00:00.000000 | 2009-07-24T00:00:00.000000 |
| certa-2009-avi-289 | Vulnérabilités dans Joomla! | 2009-07-24T00:00:00.000000 | 2009-07-24T00:00:00.000000 |
| certa-2009-avi-288 | Multiples vulnérabilités de Common Data Format | 2009-07-24T00:00:00.000000 | 2009-07-24T00:00:00.000000 |
| certa-2009-avi-287 | Vulnérabilité dans WordPress | 2009-07-22T00:00:00.000000 | 2009-07-22T00:00:00.000000 |
| certa-2009-avi-286 | Vulnérabilités dans Wireshark | 2009-07-22T00:00:00.000000 | 2009-07-22T00:00:00.000000 |
| certa-2009-avi-285 | Multiples vulnérabilités dans Sun Solaris | 2009-07-21T00:00:00.000000 | 2009-07-21T00:00:00.000000 |
| certa-2009-avi-284 | Vulnérabilités dans la bibliothèque libtiff | 2009-07-21T00:00:00.000000 | 2009-07-21T00:00:00.000000 |