Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-74959 | N/A | Mitigation bypass in the Storage: Cache API component |
Mozilla |
Firefox |
2026-08-18T12:23:31.322Z | 2026-08-21T20:02:58.368Z |
| cve-2026-74960 | N/A | Site isolation issue in the WebExtensions component |
Mozilla |
Firefox |
2026-08-18T12:23:31.590Z | 2026-08-21T20:00:22.910Z |
| cve-2026-48507 | Snipe-IT: Bulk editing users allowed `ldap_import` and… |
grokability |
snipe-it |
2026-06-08T15:41:01.840Z | 2026-08-21T19:59:42.204Z | |
| cve-2026-42318 | GLPI Vulnerable to Arbitrary Item Deletion via Plannin… |
glpi-project |
glpi |
2026-06-03T15:17:16.756Z | 2026-08-21T19:59:12.818Z | |
| cve-2026-74945 | N/A | Information disclosure in the Graphics: Text component |
Mozilla |
Firefox |
2026-08-18T12:23:29.811Z | 2026-08-21T19:58:50.816Z |
| cve-2026-39878 | Chamilo stored XSS via user registration leads to admi… |
chamilo |
chamilo-lms |
2026-07-20T17:08:21.230Z | 2026-08-21T19:58:45.627Z | |
| cve-2026-35198 | HeyForm vulnerable to stored XSS via form field titles |
heyform |
heyform |
2026-07-20T15:47:21.255Z | 2026-08-21T19:58:19.726Z | |
| cve-2026-19501 | N/A | CVE-2026-19501 |
SureForms |
SureForms |
2026-08-18T15:21:36.115Z | 2026-08-21T19:57:23.064Z |
| cve-2026-50288 | @asymmetric-effort/specifyjs: URL parse failure silent… |
asymmetric-effort |
specifyjs |
2026-08-21T19:29:45.774Z | 2026-08-21T19:55:40.103Z | |
| cve-2026-74836 | 8.7 (v4.0) | HTTP/2 connection-window starvation pins Plug processe… |
mtrudel |
bandit |
2026-08-20T21:11:18.999Z | 2026-08-21T19:55:01.929Z |
| cve-2026-55850 | Element Web: A malicious homeserver can inject HTML in… |
element-hq |
element-web |
2026-08-21T18:30:12.251Z | 2026-08-21T19:54:55.604Z | |
| cve-2026-35163 | OctoPrint: XSS in Suppressed Command Notifications |
OctoPrint |
OctoPrint |
2026-08-21T18:25:49.564Z | 2026-08-21T19:53:55.905Z | |
| cve-2026-41424 | Wazuh: Privilege Escalation via Admin-Protection Bypas… |
wazuh |
wazuh |
2026-08-19T16:18:24.888Z | 2026-08-21T19:53:07.365Z | |
| cve-2026-75484 | 6.9 (v4.0) | HTTP/2 header field values containing CR, LF or NUL ar… |
mtrudel |
bandit |
2026-08-20T21:11:27.523Z | 2026-08-21T19:52:42.954Z |
| cve-2026-75145 | 5.8 (v4.0) 5.8 (v3.1) | FFmpeg Integer Narrowing Conversion OOB Memory Access … |
FFmpeg |
FFmpeg |
2026-08-19T16:27:33.120Z | 2026-08-21T19:52:12.755Z |
| cve-2026-76236 | 7.2 (v4.0) | stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:15.209Z | 2026-08-21T19:51:02.809Z |
| cve-2026-53425 | 7.6 (v4.0) | Missing InResponseTo validation in Samly allows accept… |
dropbox |
samly |
2026-08-20T17:26:35.537Z | 2026-08-21T19:50:34.320Z |
| cve-2026-53959 | 4gaBoards: Mass Information Disclosure (Internal PII L… |
RARgames |
4gaBoards |
2026-08-18T21:35:55.492Z | 2026-08-21T19:50:12.621Z | |
| cve-2026-55482 | Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update |
grokability |
snipe-it |
2026-08-19T18:18:35.455Z | 2026-08-21T19:49:02.437Z | |
| cve-2026-20679 | N/A | The issue was addressed with improved checks. Thi… |
Apple |
macOS |
2026-08-21T00:38:59.996Z | 2026-08-21T19:48:44.209Z |
| cve-2026-55703 | Snipe-IT: Maintenance Record Disclosure via Missing Au… |
grokability |
snipe-it |
2026-08-19T18:23:43.567Z | 2026-08-21T19:48:06.094Z | |
| cve-2026-55085 | Etherpad: Improper Neutralization of Input During Web … |
ether |
etherpad |
2026-08-19T19:34:27.269Z | 2026-08-21T19:47:13.022Z | |
| cve-2026-68560 | Wekan:hell Injection in External Antivirus Scanner Pat… |
wekan |
wekan |
2026-08-19T19:23:45.761Z | 2026-08-21T19:46:13.849Z | |
| cve-2026-66797 | Apache CloudStack: Unauthorised comment creation and d… |
Apache Software Foundation |
Apache CloudStack |
2026-08-21T08:21:58.452Z | 2026-08-21T19:45:45.850Z | |
| cve-2026-72717 | Orval: Import-time RCE via schema default -> zod modul… |
orval-labs |
orval |
2026-08-19T17:39:23.125Z | 2026-08-21T19:44:34.681Z | |
| cve-2026-71868 | Orval: Import-time RCE via enum-typed default -> zod m… |
orval-labs |
orval |
2026-08-19T17:37:34.092Z | 2026-08-21T19:43:39.471Z | |
| cve-2026-53424 | 9.1 (v4.0) | Missing one-time-use enforcement in Samly allows repla… |
dropbox |
samly |
2026-08-20T17:27:11.115Z | 2026-08-21T19:42:21.623Z |
| cve-2026-62681 | Orval: RCE via OpenAPI path -> unescaped request-URL t… |
orval-labs |
orval |
2026-08-19T17:31:02.756Z | 2026-08-21T19:42:09.266Z | |
| cve-2026-75149 | 8.7 (v4.0) 8.8 (v3.1) | marimo < 0.23.15 Code Injection via MCP Server Configuration |
marimo-team |
marimo |
2026-08-19T17:48:46.525Z | 2026-08-21T19:41:11.333Z |
| cve-2026-48024 | Wazuh: merged-file header path traversal in cluster sy… |
wazuh |
wazuh |
2026-08-19T16:14:20.847Z | 2026-08-21T19:39:56.536Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-196 | Vulnérabilités dans Sun Solaris | 2009-05-26T00:00:00.000000 | 2009-05-26T00:00:00.000000 |
| certa-2009-avi-194 | Vulnérabilité dans Cyrus SASL | 2009-05-19T00:00:00.000000 | 2009-05-19T00:00:00.000000 |
| certa-2009-avi-193 | Vulnérabilités dans Claroline | 2009-05-18T00:00:00.000000 | 2009-05-18T00:00:00.000000 |
| certa-2009-avi-191 | Vulnérabilité dans Xerox WorkCentre | 2009-05-18T00:00:00.000000 | 2009-05-18T00:00:00.000000 |
| certa-2009-avi-190 | Vulnérabilités dans IPsec Tools | 2009-05-15T00:00:00.000000 | 2009-05-15T00:00:00.000000 |
| certa-2009-avi-189 | Vulnérabilités dans Drupal | 2009-05-14T00:00:00.000000 | 2009-05-14T00:00:00.000000 |
| certa-2009-avi-188 | Multiples vulnérabilités dans SquirrelMail | 2009-05-13T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-187 | Multiples vulnérabilités dans Apple Safari | 2009-05-13T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-186 | Multiples vulnérabilités dans Apple Mac OS X | 2009-05-13T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-185 | Multiples vulnérabilités dans Microsoft PowerPoint | 2009-05-13T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-184 | Multiples vulnérabilités dans Dokeos | 2009-05-13T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-176 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2009-05-07T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-010 | Vulnérabilité dans Asterisk | 2009-01-09T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-avi-183 | Vulnérabilité dans ClamAV | 2009-05-12T00:00:00.000000 | 2009-05-12T00:00:00.000000 |
| certa-2009-avi-182 | Vulnérabilité dans Dokeos | 2009-05-12T00:00:00.000000 | 2009-05-12T00:00:00.000000 |
| certa-2009-avi-181 | Vulnérabilité du noyau Linux | 2009-05-12T00:00:00.000000 | 2009-05-12T00:00:00.000000 |
| certa-2009-avi-180 | Vulnérabilités dans Google Chrome | 2009-05-11T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-179 | Vulnérabilité dans FreeType | 2009-05-11T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-178 | Multiples vulnérabilités de Tivoli Storage Manager client | 2009-05-11T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-177 | Vulnérabilité dans les produits F-Secure | 2009-05-11T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-156 | Multiples vulnérabilités dans cups | 2009-04-21T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-139 | Vulnérabilités dans Wireshark | 2009-04-14T00:00:00.000000 | 2009-05-11T00:00:00.000000 |
| certa-2009-avi-175 | Vulnérabilités dans Drupal | 2009-05-07T00:00:00.000000 | 2009-05-07T00:00:00.000000 |
| certa-2009-avi-174 | Vulnérabilité dans Adobe Flash Media Server | 2009-05-06T00:00:00.000000 | 2009-05-06T00:00:00.000000 |
| certa-2009-avi-173 | Vulnérabilités dans HP OpenView Network Node Manager | 2009-05-05T00:00:00.000000 | 2009-05-05T00:00:00.000000 |
| certa-2009-avi-172 | Vulnérabilité dans les produits McAfee | 2009-05-05T00:00:00.000000 | 2009-05-05T00:00:00.000000 |
| certa-2009-avi-171 | Multiples vulnérabilités dans CA ARCserve Backup | 2009-05-05T00:00:00.000000 | 2009-05-05T00:00:00.000000 |
| certa-2009-avi-170 | Vulnérabilité dans HP-UX | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |
| certa-2009-avi-169 | Vulnérabilité dans Citrix Web Interface | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |
| certa-2009-avi-168 | Multiples vulnérabilités dans des produits Symantec | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |