Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18952 | 8.6 (v4.0) 8.1 (v3.1) | Missing Input Validation in Threat Intel Feed Parser i… |
AWS |
Opensearch |
2026-08-12T18:42:38.633Z | 2026-08-21T18:22:28.717Z |
| cve-2026-76576 | yangzongzhuan RuoYi-Vue Common Download Endpoint Commo… |
yangzongzhuan |
RuoYi-Vue |
2026-08-19T20:15:13.116Z | 2026-08-21T18:17:48.093Z | |
| cve-2026-54743 | Lemmy: Stored XSS via markdown image alt-text in lemmy… |
LemmyNet |
lemmy |
2026-08-19T20:18:43.124Z | 2026-08-21T18:17:01.041Z | |
| cve-2026-53548 | Termix: IDOR — Authenticated user can fetch SSH passwo… |
Termix-SSH |
Termix |
2026-08-19T20:35:35.557Z | 2026-08-21T18:16:07.440Z | |
| cve-2026-68555 | coturn: Chained mobility resumes allow authenticated r… |
coturn |
coturn |
2026-08-19T20:43:11.038Z | 2026-08-21T18:14:20.511Z | |
| cve-2026-54493 | Koel: Authenticated Full-Read SSRF via Subsonic Intern… |
koel |
koel |
2026-08-19T20:46:50.890Z | 2026-08-21T18:13:02.201Z | |
| cve-2026-62675 | Omnigent: Uploaded Agent Bundle Allows Authenticated R… |
omnigent-ai |
omnigent |
2026-08-21T17:49:00.242Z | 2026-08-21T18:11:40.698Z | |
| cve-2026-41449 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via run_command.sh |
tclahr |
uac |
2026-08-21T17:33:50.841Z | 2026-08-21T18:10:48.585Z |
| cve-2026-70656 | Checkmate: Regular Expression Denial of Service (ReDoS… |
bluewave-labs |
Checkmate |
2026-08-21T17:59:28.639Z | 2026-08-21T18:07:11.885Z | |
| cve-2026-69159 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-67306. Reason: This candidate is a duplicate of CVE-2026-67306. Notes: All CVE users should reference CVE-2026-67306 instead of this candidate.'}], 'replacedBy': ['CVE-2026-67306'], 'providerMetadata': {'orgId': 'a0819718-46f1-4df5-94e2-005712e83aaa', 'shortName': 'GitHub_M', 'dateUpdated': '2026-08-21T18:00:15.024Z'}} | N/A | N/A | 2026-08-19T18:02:01.016Z | 2026-08-21T18:00:15.024Z |
| cve-2026-41450 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via command_collector.sh |
tclahr |
uac |
2026-08-21T17:35:04.844Z | 2026-08-21T17:47:29.453Z |
| cve-2026-61268 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-08-18T20:59:56.274Z | 2026-08-21T17:46:21.249Z | |
| cve-2026-77806 | 9.8 (v3.1) | SPIP before 4.4.21 allows unauthenticated remote … |
SPIP |
SPIP |
2026-08-21T13:37:43.289Z | 2026-08-21T17:43:56.771Z |
| cve-2026-17251 | 7.1 (v4.0) | Unauthenticated Denial of Service via Null Pointer Der… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:45.791Z | 2026-08-21T17:40:36.098Z |
| cve-2025-2241 | 8.2 (v3.1) | Hive: exposure of vcenter credentials via clusterprovi… |
|
|
2025-03-17T16:27:20.598Z | 2026-08-21T17:39:30.384Z |
| cve-2026-72848 | 8.6 (v3.1) 7.7 (v4.0) | langchain-community SitemapLoader Does Not Apply restr… |
langchain-ai |
langchain-community |
2026-08-20T21:57:36.212Z | 2026-08-21T17:35:18.143Z |
| cve-2026-77814 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing is_path_trusted Prefix Compari… |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:08.589Z | 2026-08-21T17:33:29.308Z |
| cve-2026-77768 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.get Returns Any Report by Identifier … |
Openpanel-dev |
openpanel |
2026-08-21T11:05:14.998Z | 2026-08-21T17:31:03.513Z |
| cve-2026-53804 | 8.6 (v4.0) 7.2 (v3.1) | OTRS Community Edition OS Command Injection via PGP Co… |
Centuran Consulting |
OTRS Community Edition |
2026-08-20T21:13:24.493Z | 2026-08-21T17:29:18.783Z |
| cve-2026-77710 | 6.9 (v4.0) | STIX2 Parser Confusion and Mass Assignment Allow Unaut… |
MISP |
misp-stix |
2026-08-21T08:54:01.414Z | 2026-08-21T17:19:40.158Z |
| cve-2026-60822 | Vulnerability in the Oracle Enterprise Manager fo… |
Oracle Corporation |
Oracle Enterprise Manager for Systems Infrastructure |
2026-08-18T20:59:12.502Z | 2026-08-21T16:48:28.577Z | |
| cve-2026-61198 | Vulnerability in the Oracle Learning Management p… |
Oracle Corporation |
Oracle Learning Management |
2026-08-18T20:59:46.848Z | 2026-08-21T16:48:24.285Z | |
| cve-2026-61206 | Vulnerability in the Oracle Hyperion Calculation … |
Oracle Corporation |
Oracle Hyperion Calculation Manager |
2026-08-18T20:59:47.979Z | 2026-08-21T16:48:19.250Z | |
| cve-2026-59992 | Tina: Broken Access Control: arbitrary bucket-key writ… |
tinacms |
tinacms |
2026-08-19T21:30:51.975Z | 2026-08-21T16:48:12.641Z | |
| cve-2023-7344 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-21T16:48:07.656Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-08-21T16:48:07.656Z | |
| cve-2023-7336 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-21T16:48:02.943Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-08-21T16:48:02.943Z | |
| cve-2023-7310 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-21T16:47:53.694Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-08-21T16:47:53.694Z | |
| cve-2026-60977 | Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
Oracle WebLogic Server |
2026-08-18T20:59:27.774Z | 2026-08-21T16:47:28.566Z | |
| cve-2026-76590 | TRENDnet TEW-755AP ssi wan.cgi stack-based overflow |
TRENDnet |
TEW-755AP |
2026-08-19T21:45:07.641Z | 2026-08-21T16:47:12.380Z | |
| cve-2026-60969 | Vulnerability in the Oracle Unified Directory pro… |
Oracle Corporation |
Oracle Unified Directory |
2026-08-18T20:59:26.082Z | 2026-08-21T16:47:10.852Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-103 | Multiples vulnérabilités de Tivoli Storage Manager | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-102 | Vulnérabilité dans Asterisk | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-101 | Multiples vulnérabilités dans vim | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-100 | Vulnérabilité de JBoss | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-099 | Multiples vulnérabilités dans IBM DB2 | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-098 | Vulnérabilités dans iTunes | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-097 | Vulnérabilité dans des produits Symantec | 2009-03-18T00:00:00.000000 | 2009-03-18T00:00:00.000000 |
| certa-2009-avi-096 | Multiples vulnérabilités de ModSecurity | 2009-03-16T00:00:00.000000 | 2009-03-16T00:00:00.000000 |
| certa-2009-avi-095 | Vulnérabilité dans Cisco Unified Communications Manager | 2009-03-16T00:00:00.000000 | 2009-03-16T00:00:00.000000 |
| certa-2009-avi-093 | Vulnérabilités dans les serveurs Windows DNS et WINS | 2009-03-10T00:00:00.000000 | 2009-03-10T00:00:00.000000 |
| certa-2009-avi-092 | Vulnérabilité dans le composant d'authentification Secure Channel de Microsoft Windows | 2009-03-10T00:00:00.000000 | 2009-03-10T00:00:00.000000 |
| certa-2009-avi-091 | Vulnérabilités dans le noyau Microsoft Windows | 2009-03-10T00:00:00.000000 | 2009-03-10T00:00:00.000000 |
| certa-2009-avi-090 | Vulnérabilités dans Foxit Reader | 2009-03-10T00:00:00.000000 | 2009-03-10T00:00:00.000000 |
| certa-2009-avi-089 | Multiples vulnérabilités dans IBM DB2 | 2009-03-06T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-088 | Vulnérabilité dans IBM Websphere Application Server | 2009-03-06T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-087 | Vulnérabilité dans les routeurs Cisco 7600 Series | 2009-03-06T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-076 | Vulnérabilités d'Adobe Flash Player | 2009-02-25T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-055 | Vulnérabilités dans Wireshark | 2009-02-10T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-047 | Vulnérabilité dans Squid | 2009-02-04T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-086 | Vulnérabilités de Firefox | 2009-03-05T00:00:00.000000 | 2009-03-05T00:00:00.000000 |
| certa-2009-avi-085 | Multiples vulnérabilités dans Opera | 2009-03-05T00:00:00.000000 | 2009-03-05T00:00:00.000000 |
| certa-2009-avi-084 | Vulnérabilités dans Cisco Unified MeetingPlace Web Conferencing | 2009-03-03T00:00:00.000000 | 2009-03-03T00:00:00.000000 |
| certa-2009-avi-083 | Vulnérabilités dans PHP | 2009-03-03T00:00:00.000000 | 2009-03-03T00:00:00.000000 |
| certa-2009-avi-082 | Vulnérabilité dans Apache Tomcat | 2009-03-03T00:00:00.000000 | 2009-03-03T00:00:00.000000 |
| certa-2009-avi-081 | Vulnérabilité dans VMware ESX Server | 2009-03-03T00:00:00.000000 | 2009-03-03T00:00:00.000000 |
| certa-2009-avi-080 | Vulnérabilité dans Drupal | 2009-03-03T00:00:00.000000 | 2009-03-03T00:00:00.000000 |
| certa-2009-avi-079 | Vulnérabilités dans Cisco ANM | 2009-02-26T00:00:00.000000 | 2009-02-26T00:00:00.000000 |
| certa-2009-avi-078 | Multiples vulnérabilités dans Cisco ACE | 2009-02-26T00:00:00.000000 | 2009-02-26T00:00:00.000000 |
| certa-2009-avi-077 | Vulnérabilité dans IBM WebSphere MQ | 2009-02-25T00:00:00.000000 | 2009-02-25T00:00:00.000000 |
| certa-2009-avi-075 | Vulnérabilité dans IBM AIX | 2009-02-23T00:00:00.000000 | 2009-02-23T00:00:00.000000 |