Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-62681 | Orval: RCE via OpenAPI path -> unescaped request-URL t… |
orval-labs |
orval |
2026-08-19T17:31:02.756Z | 2026-08-21T19:42:09.266Z | |
| cve-2026-75149 | 8.7 (v4.0) 8.8 (v3.1) | marimo < 0.23.15 Code Injection via MCP Server Configuration |
marimo-team |
marimo |
2026-08-19T17:48:46.525Z | 2026-08-21T19:41:11.333Z |
| cve-2026-48024 | Wazuh: merged-file header path traversal in cluster sy… |
wazuh |
wazuh |
2026-08-19T16:14:20.847Z | 2026-08-21T19:39:56.536Z | |
| cve-2026-44252 | Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation |
wazuh |
wazuh |
2026-08-19T16:04:00.758Z | 2026-08-21T19:38:50.521Z | |
| cve-2026-62673 | Grav: .htaccess file extension rules bypass via case v… |
getgrav |
grav |
2026-08-19T15:46:59.472Z | 2026-08-21T19:37:41.694Z | |
| cve-2026-77795 | Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveCont… |
Dromara |
RuoYi-Vue-Plus |
2026-08-21T18:30:07.737Z | 2026-08-21T19:36:40.600Z | |
| cve-2026-62666 | Grav API Plugin: non-super api.users.write manager -> … |
getgrav |
grav-plugin-api |
2026-08-19T15:36:37.169Z | 2026-08-21T19:36:19.063Z | |
| cve-2026-61607 | Grav API Plugin: Stored XSS via SVG Upload - API Media… |
getgrav |
grav-plugin-api |
2026-08-19T15:18:15.354Z | 2026-08-21T19:35:00.839Z | |
| cve-2026-53451 | Ground Station: Unauthenticated arbitrary file write (… |
sgoudelis |
ground-station |
2026-08-19T14:45:23.951Z | 2026-08-21T19:32:38.317Z | |
| cve-2026-54073 | VeraCrypt: Hidden volume quick format weakens plausibl… |
veracrypt |
VeraCrypt |
2026-08-21T18:51:58.855Z | 2026-08-21T19:32:34.830Z | |
| cve-2026-49253 | electerm: Path Traversal in Zmodem and Trzsz Download … |
electerm |
electerm |
2026-08-19T14:31:55.683Z | 2026-08-21T19:31:45.169Z | |
| cve-2026-76614 | 5.3 (v4.0) 4.3 (v3.1) | OpenEMR < 8.3.0 Path Traversal Information Disclosure … |
openemr |
openemr |
2026-08-19T14:55:56.729Z | 2026-08-21T19:30:41.910Z |
| cve-2026-76241 | 7.3 (v4.0) | stigmem Plugin Signature Enforcement Bypass via Config… |
eidetic-labs |
stigmem |
2026-08-19T14:02:18.743Z | 2026-08-21T19:29:28.273Z |
| cve-2026-76230 | 8.4 (v4.0) 6.7 (v3.1) | Renovate 35.63.0 before 40.33.0 Command Injection via npm |
renovatebot |
renovate |
2026-08-19T14:02:11.620Z | 2026-08-21T19:28:44.635Z |
| cve-2026-76225 | 8.3 (v4.0) 7.7 (v3.1) | ArcadeDB before 26.8.1 Server-Side Request Forgery via… |
ArcadeData |
arcadedb |
2026-08-19T14:02:07.968Z | 2026-08-21T19:27:51.765Z |
| cve-2026-76215 | 6.9 (v4.0) 5.3 (v3.1) | phpMyFAQ before 4.1.7 Missing Authorization via child … |
thorsten |
phpMyFAQ |
2026-08-19T14:02:00.603Z | 2026-08-21T19:26:45.651Z |
| cve-2026-75978 | xianrendzw EasyReport QueryerFactory DataSourceControl… |
xianrendzw |
EasyReport |
2026-08-19T00:00:13.664Z | 2026-08-21T19:24:51.463Z | |
| cve-2026-75987 | SPLWare esProc SocketData.java ObjectInputStream.readU… |
SPLWare |
esProc |
2026-08-19T01:45:09.722Z | 2026-08-21T19:24:11.632Z | |
| cve-2026-71494 | Infracost: Terraform Cloud and registry token disclosu… |
infracost |
infracost |
2026-08-21T17:50:43.655Z | 2026-08-21T19:23:57.520Z | |
| cve-2026-76048 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-19T03:00:11.436Z | 2026-08-21T19:23:14.325Z | |
| cve-2026-75900 | 6.1 (v3.1) | Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkh… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-19T07:44:35.968Z | 2026-08-21T19:22:41.001Z |
| cve-2026-63004 | Unleash: Addon webhook URL is dialed server-side with … |
Unleash |
unleash |
2026-08-21T18:05:20.458Z | 2026-08-21T19:22:22.158Z | |
| cve-2026-75916 | 9.3 (v4.0) 8.6 (v3.1) | SiYuan XSS-to-RCE via unescaped block metadata in hint popup |
siyuan-note |
siyuan |
2026-08-19T14:01:50.370Z | 2026-08-21T19:22:16.263Z |
| cve-2026-76612 | 8.6 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated stor… |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:17:08.946Z | 2026-08-21T19:22:11.591Z |
| cve-2026-76205 | 8.6 (v4.0) 8.1 (v3.1) | phpMyFAQ before 4.1.7 SQL Injection via Glossary |
thorsten |
phpMyFAQ |
2026-08-19T14:01:53.887Z | 2026-08-21T19:21:08.640Z |
| cve-2026-75955 | 5.1 (v4.0) | Joomla Extension - cmsjunkie.com - Reflected XSS / XML… |
cmsjunkie.com |
J-BusinessDirectory extension for Joomla |
2026-08-19T14:45:23.106Z | 2026-08-21T19:21:07.383Z |
| cve-2026-76611 | 6.9 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated arbi… |
yootheme.com |
Zoo extension for Joomla |
2026-08-21T12:15:01.640Z | 2026-08-21T19:20:00.136Z |
| cve-2026-76210 | 7.1 (v4.0) 6.5 (v3.1) | phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export |
thorsten |
phpMyFAQ |
2026-08-19T14:01:57.242Z | 2026-08-21T19:19:16.246Z |
| cve-2026-75115 | 7 (v4.0) | Joomla Extension - yootheme.com - Authenticated, privi… |
yootheme.com |
YOOtheme Pro extension for Joomla |
2026-08-21T12:14:13.260Z | 2026-08-21T19:19:09.831Z |
| cve-2026-52873 | Streambert: Global CSP Removal in Wyzie Redeem Window … |
truelockmc |
streambert |
2026-08-18T21:28:18.806Z | 2026-08-21T19:18:23.077Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-167 | Vulnérabilités dans des produits Symantec | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |
| certa-2009-avi-166 | Vulnérabilité dans Mozilla Firefox | 2009-04-28T00:00:00.000000 | 2009-04-28T00:00:00.000000 |
| certa-2009-avi-165 | Vulnérabilité dans FreeBSD | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-164 | Vulnérabilités dans apt | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-163 | Multiples vulnérabilités dans HP StorageWorks | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-162 | Vulnérabilité dans Google Chrome | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-161 | Vulnérabilités dans Symantec Brightmail Gateway | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-160 | Vulnérabilité dans Citrix Presentation Server | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-159 | Vulnérabilité dans Plone | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-158 | Vulnérabilité dans Dokeos | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-157 | Multiples vulnérabilités dans Mozilla Firefox | 2009-04-22T00:00:00.000000 | 2009-04-22T00:00:00.000000 |
| certa-2009-avi-155 | Multiples vulnérabilités du gestionnaire de périphériques udev | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-154 | Multiples vulnérabilités des produits Oracle | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-153 | Vulnérabilité du noyau Linux | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-152 | Vulnérabilité dans Apache Tomcat mod_jk | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-151 | Multiples vulnérabilités dans IBM BladeCenter Advanced Management Module | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-150 | Vulnérabilité dans IBM AIX | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-148 | Vulnérabilité dans phpMyAdmin | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-094 | Vulnérabilité dans l'interprétation JBIG2 dans le format PDF | 2009-03-11T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-147 | Vulnérabilité dans Microsoft Excel | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-146 | Vulnérabilité dans Microsoft ISA Server | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-145 | Vulnérabilité dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-144 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-143 | Vulnérabilités dans les services HTTP Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-142 | Vulnérabilités dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-141 | Vulnérabilité dans Microsoft DirectX | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-140 | Vulnérabilités dans les convertisseurs de texte WordPad et Office | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-138 | Multiples vulnérabilités dans SPIP | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-137 | Multiples vulnérabilités des produits VMWare | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-136 | Vulnérabilité du pare-feu Packet Filter d'OpenBSD | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |