Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72823 | 5.3 (v4.0) 5.4 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via DemoCo… |
getgrav |
grav |
2026-08-14T11:35:32.238Z | 2026-08-17T16:09:06.929Z |
| cve-2026-72822 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Authentication Bypass via disable2fa |
getgrav |
grav |
2026-08-14T11:35:31.592Z | 2026-08-24T10:28:31.192Z |
| cve-2026-72821 | 5.1 (v4.0) 5.4 (v3.1) | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle |
getgrav |
grav |
2026-08-14T11:35:30.847Z | 2026-08-18T01:56:55.524Z |
| cve-2026-72820 | 6.9 (v4.0) 4.9 (v3.1) | Grav 2.0.11 Path Traversal via Backup Profile Configuration |
getgrav |
grav |
2026-08-14T11:35:30.155Z | 2026-08-14T18:05:45.073Z |
| cve-2026-72819 | 8.7 (v4.0) 8.8 (v3.1) | Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload |
getgrav |
grav |
2026-08-14T11:35:29.507Z | 2026-08-14T14:44:04.272Z |
| cve-2026-72817 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwar… |
go-chi |
chi |
2026-08-14T11:35:28.824Z | 2026-08-17T16:09:15.028Z |
| cve-2026-72816 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware |
go-chi |
chi |
2026-08-14T11:35:28.145Z | 2026-08-14T15:22:35.592Z |
| cve-2026-72815 | 6.9 (v4.0) | go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header |
go-chi |
chi |
2026-08-14T11:35:27.496Z | 2026-08-18T01:55:20.208Z |
| cve-2026-72814 | 6.3 (v4.0) | actix-web before 0.6.10 Information Disclosure via Files |
actix |
actix-web |
2026-08-14T11:35:26.816Z | 2026-08-14T19:39:40.649Z |
| cve-2026-72813 | 6.9 (v4.0) | actix-files before 0.6.10 Denial of Service via empty … |
actix |
actix-web |
2026-08-14T11:35:26.123Z | 2026-08-14T14:41:51.141Z |
| cve-2026-72812 | 6.9 (v4.0) 6.5 (v3.1) | SiYuan before v3.7.4 Missing Authorization via refresh… |
siyuan-note |
siyuan |
2026-08-14T11:35:25.455Z | 2026-08-17T16:09:23.114Z |
| cve-2026-72811 | 9.9 (v4.0) 10 (v3.1) | SiYuan before v3.7.4 SQL Injection via backlink search |
siyuan-note |
siyuan |
2026-08-14T11:35:24.767Z | 2026-08-14T16:52:14.903Z |
| cve-2026-72810 | 9.2 (v4.0) 8.6 (v3.1) | SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket |
siyuan-note |
siyuan |
2026-08-14T11:35:24.086Z | 2026-08-18T02:26:57.244Z |
| cve-2025-71405 | 5.1 (v4.0) | go-chi chi before v5.2.2 Open Redirect via RedirectSlashes |
go-chi |
chi |
2026-08-14T11:35:23.411Z | 2026-08-14T18:57:43.537Z |
| cve-2026-19822 | Tenda W20E QoS Edit editQos lstAdd stack-based overflow |
Tenda |
W20E |
2026-08-14T11:30:11.772Z | 2026-08-14T14:53:31.615Z | |
| cve-2026-19821 | Tenda AC12 httpd web management interface SetSysAutoRe… |
Tenda |
AC12 |
2026-08-14T11:00:10.537Z | 2026-08-18T01:53:10.669Z | |
| cve-2026-19815 | TOTOLINK A800R firewall.so cstecgi.cgi setParentalRule… |
TOTOLINK |
A800R |
2026-08-14T08:30:10.309Z | 2026-08-14T10:25:08.237Z | |
| cve-2026-19814 | TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack… |
TOTOLINK |
A800R |
2026-08-14T08:15:09.994Z | 2026-08-14T15:04:42.067Z | |
| cve-2026-19813 | TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRul… |
TOTOLINK |
A800R |
2026-08-14T08:00:11.323Z | 2026-08-18T13:39:16.628Z | |
| cve-2026-19794 | WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site S… |
gamerz |
WP-Stats |
2026-08-14T07:39:28.891Z | 2026-08-14T10:25:41.585Z | |
| cve-2026-19812 | TOTOLINK A800R product.so cstecgi.cgi UploadCustomModu… |
TOTOLINK |
A800R |
2026-08-14T07:30:10.447Z | 2026-08-14T14:54:28.616Z | |
| cve-2026-19811 | TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules s… |
TOTOLINK |
A800R |
2026-08-14T06:15:11.415Z | 2026-08-18T01:52:00.688Z | |
| cve-2026-18039 | N/A | Essential Addons for Elementor < 6.7.2 - Unauthenticat… |
Unknown |
Essential Addons for Elementor |
2026-08-14T06:00:11.664Z | 2026-08-14T15:26:44.367Z |
| cve-2026-16739 | N/A | Epeken All Kurir <= 2.1.4 - Unauthenticated Order Paym… |
Unknown |
Epeken All Kurir for Woocommerce |
2026-08-14T06:00:11.497Z | 2026-08-31T09:08:34.173Z |
| cve-2026-15205 | N/A | Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL I… |
Unknown |
Paymob for WooCommerce |
2026-08-14T06:00:11.326Z | 2026-08-14T15:40:20.932Z |
| cve-2026-14290 | N/A | Embed Google Photos Album Easily <= 2.2.1 - Contributo… |
Unknown |
Embed Google Photos album |
2026-08-14T06:00:11.109Z | 2026-08-14T15:47:13.683Z |
| cve-2026-19617 | 5.5 (v3.1) | Libdm: lvm2: libdm: denial of service via uncontrolled… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-14T05:59:29.626Z | 2026-09-01T12:48:22.619Z |
| cve-2026-12743 | affiliate-toolkit <= 3.8.8 - Authenticated (Administra… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-08-14T05:30:44.371Z | 2026-08-14T14:00:47.042Z | |
| cve-2026-12949 | Wishlist Member X <= 3.34.1 - Unauthenticated Account … |
Wishlist Member |
Wishlist Member |
2026-08-14T05:30:43.982Z | 2026-08-14T14:59:09.168Z | |
| cve-2026-16810 | Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL… |
bitpressadmin |
Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder |
2026-08-14T05:30:43.447Z | 2026-08-17T16:09:31.208Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-041 | Vulnérabilité dans FFmpeg | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-040 | Vulnérabilité dans Sun Solaris | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-039 | Vulnérabilité des serveurs SunFire X2100 M2 et X2200 M2 | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-038 | Vulnérabilité dans Sun Java System Access Manager | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-037 | Vulnérabilité dans IMP | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-036 | Vulnérabilités dans Horde | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-035 | Vulnérabilité dans VNC Viewer | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-034 | Vulnérabilité dans Sun Solaris | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-033 | Multiples vulnérabilités dans CA Anti-Virus | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-032 | Multiples vulnérabilités dans CA Cohesion Application Configuration Manager | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-031 | Vulnérabilité des Serveurs Sun Serie M | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-030 | Vulnérabilité dans Cisco Unified Communications Manager | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-029 | Multiples vulnérabilités dans Apple QuickTime | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-028 | Vulnérabilité dans Cisco Security Manager | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-027 | Multiples vulnérabilités dans HP OpenView | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-026 | Multiples vulnérabilités dans Trend Micro OfficeScan | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-025 | Vulnérabilités dans des produits Horde | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-024 | Multiples vulnérabilités dans TYPO3 | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-023 | Multiples vulnérabilités dans Drupal | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-022 | Multiples vulnérabilités dans Sun Java System Access Manager | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-021 | Vulnérabilité dans IBM HMC | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-020 | Vulnérabilité dans Sophos Anti-Virus | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-019 | Vulnérabilité dans Symantec AppStream | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-018 | Vulnérabilité dans les produits Cisco ONS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-017 | Vulnérabilités dans Cisco IOS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-016 | Multiples vulnérabilités dans Cisco IronPort | 2009-01-15T00:00:00.000000 | 2009-01-16T00:00:00.000000 |
| certa-2009-avi-015 | Vulnérabilité dans Avira Antivir | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-014 | Multiples vulnérabilités dans IBM DB2 | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |
| certa-2009-avi-013 | Vulnérabilités des produits Oracle | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |
| certa-2009-avi-012 | Plusieurs vulnérabilités de SMB dans Windows | 2009-01-13T00:00:00.000000 | 2009-01-13T00:00:00.000000 |