Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-63385 | Libevent: HTTP header handling bugs create risk of acc… |
libevent |
libevent |
2026-08-20T17:55:36.214Z | 2026-08-21T21:46:26.752Z | |
| cve-2026-63003 | django CMS: Broken access control in page *Duplicate* … |
django-cms |
django-cms |
2026-08-20T18:09:13.988Z | 2026-08-21T21:46:19.864Z | |
| cve-2026-66002 | Frappe: User Enumeration via PDDR |
frappe |
frappe |
2026-08-20T18:29:40.872Z | 2026-08-21T21:46:12.905Z | |
| cve-2026-53586 | libgit2: HTTP transport can leak credentials to an off… |
libgit2 |
libgit2 |
2026-08-20T18:40:08.673Z | 2026-08-21T21:46:05.425Z | |
| cve-2026-77151 | lin-snow Ech0 crypto.go MD5Encrypt risky encryption |
lin-snow |
Ech0 |
2026-08-20T19:45:10.732Z | 2026-08-21T21:45:57.804Z | |
| cve-2026-72861 | 5.8 (v3.1) 6.9 (v4.0) | Appwrite Templates github-issue-bot Skips Webhook Sign… |
appwrite |
templates |
2026-08-20T19:48:51.102Z | 2026-08-21T21:45:50.993Z |
| cve-2026-70652 | libvips: Possible heap-based buffer read overflow when… |
libvips |
libvips |
2026-08-20T21:04:51.898Z | 2026-08-21T21:45:43.586Z | |
| cve-2026-67445 | Mailpit: SMTP command parser buffers unbounded command… |
axllent |
mailpit |
2026-08-20T21:13:27.481Z | 2026-08-21T21:45:36.467Z | |
| cve-2026-55893 | Capstone SH disassembler `set_reg_n` heap buffer overf… |
capstone-engine |
capstone |
2026-08-20T21:32:46.718Z | 2026-08-21T21:45:29.340Z | |
| cve-2026-46682 | BigBlueButton: Blind SQL Injection AUTH (Moderator) |
bigbluebutton |
bigbluebutton |
2026-08-20T21:33:56.431Z | 2026-08-21T21:45:22.172Z | |
| cve-2026-54508 | TREK: Blind SSRF via unvalidated redirect-following in… |
mauriceboe |
TREK |
2026-08-20T21:46:51.288Z | 2026-08-21T21:45:07.846Z | |
| cve-2026-49244 | SFTPGo: Path confinement bypass in public browsable sh… |
drakkan |
sftpgo |
2026-08-20T21:53:12.098Z | 2026-08-21T21:44:58.013Z | |
| cve-2026-72843 | 9.3 (v4.0) 9.8 (v3.1) | EverShop Missing Authorization on PATCH /api/customers… |
evershopcommerce |
evershop |
2026-08-20T21:57:34.880Z | 2026-08-21T21:44:50.920Z |
| cve-2026-77686 | Dolibarr Account card.php improper authorization |
n/a |
Dolibarr |
2026-08-21T11:00:13.604Z | 2026-08-21T21:44:44.037Z | |
| cve-2026-77763 | 6.5 (v3.1) 7.1 (v4.0) | JuiceFS Local Filestore Backend Joins Object Keys onto… |
juicedata |
juicefs |
2026-08-21T11:05:13.650Z | 2026-08-21T21:44:37.044Z |
| cve-2026-77776 | 9.1 (v3.1) 9.3 (v4.0) | Headroom Proxy Treats the Client-Supplied x-headroom-u… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.779Z | 2026-08-21T21:44:30.707Z |
| cve-2026-48756 | Incus: CreateCustomVolumeFromBackup nil-pointer derefe… |
lxc |
incus |
2026-08-21T14:10:34.151Z | 2026-08-21T21:44:23.844Z | |
| cve-2026-48755 | Incus has an argument injection in backup compression … |
lxc |
incus |
2026-08-21T14:37:25.389Z | 2026-08-21T21:44:16.989Z | |
| cve-2026-62867 | Incus has an argument injection in storage volume bloc… |
lxc |
incus |
2026-08-21T14:45:35.859Z | 2026-08-21T21:44:10.367Z | |
| cve-2026-63343 | Arbitrary File Read/Write: metadata.yaml symlink in im… |
lxc |
incus |
2026-08-21T14:53:26.109Z | 2026-08-21T21:44:03.623Z | |
| cve-2026-62677 | Omnigent: Unvalidated os_env.cwd in agent bundle yield… |
omnigent-ai |
omnigent |
2026-08-21T17:44:37.312Z | 2026-08-21T21:43:48.824Z | |
| cve-2026-71862 | Checkmate: Sensitive Bearer Token Exposure via Public … |
bluewave-labs |
Checkmate |
2026-08-21T18:00:32.871Z | 2026-08-21T21:43:42.303Z | |
| cve-2026-63466 | Unleash: Global Mustache.escape override disables HTML… |
Unleash |
unleash |
2026-08-21T18:21:46.526Z | 2026-08-21T21:43:35.526Z | |
| cve-2026-54071 | BabelDOC: Arbitrary Code Execution via CMap Pickle Des… |
funstory-ai |
BabelDOC |
2026-08-21T18:55:42.248Z | 2026-08-21T21:43:28.162Z | |
| cve-2026-27463 | Combodo iTop: Version disclosure via login page logo |
Combodo |
iTop |
2026-08-21T19:57:40.427Z | 2026-08-21T21:43:20.794Z | |
| cve-2026-68508 | Hydra: hydra.utils.instantiate with untrusted config c… |
facebookresearch |
hydra |
2026-08-21T20:09:26.113Z | 2026-08-21T21:43:13.889Z | |
| cve-2026-30826 | Combodo iTop: Reflected XSS in run_query.php |
Combodo |
iTop |
2026-08-21T20:15:42.604Z | 2026-08-21T21:43:06.834Z | |
| cve-2026-77219 | 6.9 (v4.0) 7.1 (v3.1) | GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Ima… |
GNU |
Emacs |
2026-08-21T20:20:45.314Z | 2026-08-21T21:42:58.824Z |
| cve-2026-62283 | Nezha Monitoring: Cross-tenant terminal/file-manager s… |
nezhahq |
nezha |
2026-08-21T20:21:28.712Z | 2026-08-21T21:42:51.779Z | |
| cve-2026-53656 | FiftyOne App server uses wildcard CORS (Access-Control… |
voxel51 |
fiftyone |
2026-08-21T20:34:55.783Z | 2026-08-21T21:42:44.374Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-283 | Vulnérabilité dans Novell Access Manager | 2009-07-21T00:00:00.000000 | 2009-07-21T00:00:00.000000 |
| certa-2009-avi-282 | Vulnérabilité dans Firefox | 2009-07-17T00:00:00.000000 | 2009-07-17T00:00:00.000000 |
| certa-2009-avi-281 | Multiples vulnérabilités dans WordPress | 2009-07-16T00:00:00.000000 | 2009-07-16T00:00:00.000000 |
| certa-2009-avi-280 | Vulnérabilité dans DHCP Dhclient | 2009-07-16T00:00:00.000000 | 2009-07-16T00:00:00.000000 |
| certa-2009-avi-279 | Multiples vulnérabilités dans des produits Oracle | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-278 | Vulnérabilité dans le contrôle ActiveX Microsoft Video | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-277 | Vulnérabilité dans Virtual PC et Virtual Server | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-276 | Vulnérabilité de ISA Server | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-275 | Vulnérabilité de Microsoft Office Publisher | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-274 | Multiples vulnérabilités dans Microsoft Windows Embedded OpenType | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-273 | Multiples vulnérabilités dans Microsoft DirectShow | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-271 | Multiples vulnérabilités dans Apple Safari | 2009-07-10T00:00:00.000000 | 2009-07-10T00:00:00.000000 |
| certa-2009-avi-270 | Vulnérabilité dans VMware ESX Service Console | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-269 | Vulnérabilité dans VLC | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-268 | Multiples vulnérabilités dans Sun Solaris | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-267 | Vulnérabilités de IBM Tivoli Identity Manager | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-266 | Multiples vulnérabilités dans FCKeditor | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-265 | Multiples vulnérabilités dans Drupal | 2009-07-06T00:00:00.000000 | 2009-07-06T00:00:00.000000 |
| certa-2009-avi-264 | Vulnérabilité dans HP-UX | 2009-07-02T00:00:00.000000 | 2009-07-02T00:00:00.000000 |
| certa-2009-avi-263 | Multiples vulnérabilités dans Joomla! | 2009-07-01T00:00:00.000000 | 2009-07-01T00:00:00.000000 |
| certa-2009-avi-262 | Vulnérabilité de Sun Java System Access Manager | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-261 | Vulnérabilités de Sun Java Web Console | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-260 | Multiples vulnérabilités dans Cisco Adaptive Security Appliance | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-258 | Vulnérabilité du client Samba | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-257 | Multiples vulnérabilité de HP-UX Apache Web Server Suite | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-256 | Vulnérabilité du pilote Intel PRO/1000 | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-192 | Vulnérabilités dans OpenSSL | 2009-05-19T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-255 | Vulnérabilités de produits Cisco Video Surveillance | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |
| certa-2009-avi-254 | Vulnérabilité dans Cisco Physical Access Gateway | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |
| certa-2009-avi-253 | Vulnérabilité dans Adobe Shockwave Player | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |