Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-73481 | 5.3 (v4.0) 5.4 (v3.1) | phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bou… |
phplist |
phplist3 |
2026-08-13T18:48:42.589Z | 2026-08-14T19:15:25.045Z |
| cve-2026-18071 | 7.8 (v3.1) | IBM i is Affected By An Improper Management Vulnerabil… |
IBM |
i |
2026-08-13T18:48:31.331Z | 2026-08-14T12:40:15.306Z |
| cve-2026-73038 | 5.3 (v4.0) 6.1 (v3.1) | NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.i… |
NodeBB |
NodeBB |
2026-08-13T18:41:49.275Z | 2026-08-14T16:52:23.442Z |
| cve-2026-72777 | 7.7 (v4.0) 8.6 (v3.1) | Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url |
DayuanJiang |
next-ai-draw-io |
2026-08-13T18:23:18.212Z | 2026-08-14T16:51:57.041Z |
| cve-2026-73653 | Vitest: Browser Mode provider commands bypass the file… |
vitest-dev |
vitest |
2026-08-13T18:19:00.452Z | 2026-08-13T18:42:42.750Z | |
| cve-2026-73037 | 5.1 (v4.0) 6.1 (v3.1) | Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsan… |
DayuanJiang |
next-ai-draw-io |
2026-08-13T18:18:57.753Z | 2026-08-14T19:45:25.604Z |
| cve-2026-73652 | vantage6: Algorithm developer can edit another develop… |
vantage6 |
vantage6 |
2026-08-13T18:15:55.367Z | 2026-08-13T18:57:28.520Z | |
| cve-2026-73651 | TypeORM: migration:generate template-literal code injection |
typeorm |
typeorm |
2026-08-13T18:11:14.613Z | 2026-08-14T18:09:07.215Z | |
| cve-2026-73650 | SVGO: removeScripts plugin leaves some executable scri… |
svg |
svgo |
2026-08-13T18:08:36.292Z | 2026-08-18T01:31:46.442Z | |
| cve-2026-73649 | Velocity.js: Remote Code Execution via property-read t… |
shepherdwind |
velocity.js |
2026-08-13T18:05:31.929Z | 2026-08-14T16:42:31.371Z | |
| cve-2026-73648 | rails-html-sanitizer: Possible XSS vulnerability with … |
rails |
rails-html-sanitizer |
2026-08-13T18:00:21.583Z | 2026-08-13T18:35:10.270Z | |
| cve-2026-72741 | 8.6 (v4.0) 8.1 (v3.1) | Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Te… |
goodrain |
rainbond |
2026-08-13T17:59:25.934Z | 2026-08-18T01:31:05.060Z |
| cve-2026-73647 | Quasar Framework: Prototype pollution in Quasar extend… |
quasarframework |
quasar |
2026-08-13T17:57:09.014Z | 2026-08-13T18:41:21.421Z | |
| cve-2026-73645 | OpenZeppelin Confidential Contracts ERC7984ERC20Wrappe… |
OpenZeppelin |
openzeppelin-confidential-contracts |
2026-08-13T17:54:42.793Z | 2026-08-14T18:09:13.903Z | |
| cve-2026-19730 | 4.2 (v3.1) | Podman: podman: quadlet install --replace non-truncati… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-13T17:53:37.029Z | 2026-08-13T18:41:20.204Z |
| cve-2026-73644 | OpenDJ: Authorization bypass in SASL PLAIN allowing a … |
OpenIdentityPlatform |
OpenDJ |
2026-08-13T17:52:48.641Z | 2026-08-18T01:30:06.653Z | |
| cve-2026-73643 | js-yaml: Exponential parsing time in the flow collecti… |
nodeca |
js-yaml |
2026-08-13T17:47:30.404Z | 2026-08-14T16:44:08.839Z | |
| cve-2026-73569 | fast-xml-parser: Repeated DOCTYPE declarations reset e… |
NaturalIntelligence |
fast-xml-parser |
2026-08-13T17:45:25.045Z | 2026-08-13T18:40:13.283Z | |
| cve-2026-73568 | py-libp2p: yamux connection DoS via oversized data frame |
libp2p |
py-libp2p |
2026-08-13T17:43:26.065Z | 2026-08-13T18:06:37.488Z | |
| cve-2026-73567 | sm-crypto: Predictable SM2 key generation in Node.js: … |
JuneAndGreen |
sm-crypto |
2026-08-13T17:40:54.016Z | 2026-08-14T18:09:20.763Z | |
| cve-2026-73566 | node-tar: Uncontrolled recursion in mapHas/filesFilter… |
isaacs |
node-tar |
2026-08-13T17:39:05.796Z | 2026-08-21T19:08:31.345Z | |
| cve-2026-73565 | @hono/node-server: Unauthenticated memory-leak DoS via… |
honojs |
node-server |
2026-08-13T17:37:28.579Z | 2026-08-14T16:45:25.711Z | |
| cve-2026-73564 | frp: Unauthenticated Remote Denial of Service in the f… |
fatedier |
frp |
2026-08-13T17:35:46.762Z | 2026-08-13T17:53:06.534Z | |
| cve-2026-18428 | 8.7 (v4.0) 8.8 (v3.1) | SQL Query Validation Bypass in OpenSearch Direct Query |
AWS |
Opensearch |
2026-08-13T17:32:48.455Z | 2026-08-13T17:57:51.408Z |
| cve-2026-73563 | Backstage: Unauthenticated OAuth account takeover via … |
backstage |
backstage |
2026-08-13T17:32:39.535Z | 2026-08-13T18:07:45.624Z | |
| cve-2026-73562 | Mongoose: Prototype pollution in the update casting vi… |
Automattic |
mongoose |
2026-08-13T17:27:09.914Z | 2026-08-14T18:09:27.112Z | |
| cve-2026-73561 | Hub: Unauthenticated WebSocket RPC Waiter Resource Exh… |
anephenix |
hub |
2026-08-13T17:24:34.761Z | 2026-08-18T01:27:12.169Z | |
| cve-2019-25765 | 8.7 (v4.0) 7.5 (v3.1) | ASP-CMS SQL Injection via commentList.asp id Parameter |
ASP-CMS Project |
ASP-CMS |
2026-08-13T17:21:38.584Z | 2026-08-14T18:48:07.536Z |
| cve-2024-58374 | 8.7 (v4.0) 7.5 (v3.1) | Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree |
Hongjing Century |
e-HR |
2026-08-13T17:21:22.909Z | 2026-08-13T17:56:17.621Z |
| cve-2026-12236 | 6.5 (v3.1) | Infinite loop (DoS) in Bluetooth GATT client parsing o… |
zephyrproject |
zephyr |
2026-08-13T17:19:58.346Z | 2026-08-13T17:58:32.374Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-304 | Vulnérabilité de mpg123 | 2004-09-08T00:00:00.000000 | 2004-10-15T00:00:00.000000 |
| certa-2004-avi-303 | Vulnérabilité de cdrecord | 2004-09-08T00:00:00.000000 | 2005-02-22T00:00:00.000000 |
| certa-2004-avi-302 | Vulnérabilité du serveur DNS de Sun Solaris 8 | 2004-09-07T00:00:00.000000 | 2004-09-07T00:00:00.000000 |
| certa-2004-avi-301 | Vulnérabilité dans le module mod_ssl du serveur web Apache | 2004-09-07T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-300 | Vulnérabilité de IBM DB2 | 2004-09-06T00:00:00.000000 | 2004-09-06T00:00:00.000000 |
| certa-2004-avi-299 | Vulnérabilité de xv | 2004-09-06T00:00:00.000000 | 2004-09-06T00:00:00.000000 |
| certa-2004-avi-298 | Vulnérabilité dans OpenBSD | 2004-09-03T00:00:00.000000 | 2004-09-03T00:00:00.000000 |
| certa-2004-avi-297 | Vulnérabilité de Squid | 2004-09-03T00:00:00.000000 | 2004-09-16T00:00:00.000000 |
| certa-2004-avi-296 | Vulnérabilités de WinZip | 2004-09-03T00:00:00.000000 | 2004-09-20T00:00:00.000000 |
| certa-2004-avi-295 | Vulnérabilité dans ImageMagick | 2004-09-02T00:00:00.000000 | 2004-10-21T00:00:00.000000 |
| certa-2004-avi-294 | Vulnérabilité de lha | 2004-09-02T00:00:00.000000 | 2004-09-28T00:00:00.000000 |
| certa-2004-avi-293 | Vulnérabilité de Sun xdm | 2004-09-02T00:00:00.000000 | 2004-09-02T00:00:00.000000 |
| certa-2004-avi-292 | Vulnérabilités de imlib et imlib2 | 2004-09-02T00:00:00.000000 | 2004-09-23T00:00:00.000000 |
| certa-2004-avi-291 | Vulnérabilités dans les produits Mozilla | 2004-09-01T00:00:00.000000 | 2004-09-15T00:00:00.000000 |
| certa-2004-avi-290 | Vulnérabilité du serveur icecast | 2004-09-01T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-289 | Vulnérabilité de gnome-vfs | 2004-09-01T00:00:00.000000 | 2005-02-22T00:00:00.000000 |
| certa-2004-avi-288 | Multiples vulnérabilités dans KDE | 2004-09-01T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-287 | Vulnérabilité du logiciel Winamp | 2004-09-01T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-286 | Vulnérabilités de MIT Kerberos 5 | 2004-09-01T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-285 | Vulnérabilité dans l'agent de messagerie dtmail de CDE | 2004-09-01T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-284 | Nombreuses vulnérabilités dans les produits Oracle | 2004-09-01T00:00:00.000000 | 2004-09-03T00:00:00.000000 |
| certa-2004-avi-385 | Vulnérabilité dans OpenSSL | 2004-08-31T00:00:00.000000 | 2004-12-06T00:00:00.000000 |
| certa-2004-avi-283 | Vulnérabilité dans MySQL | 2004-08-31T00:00:00.000000 | 2004-10-22T00:00:00.000000 |
| certa-2004-avi-282 | Vulnérabilité de la bibliothèque zlib | 2004-08-31T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-281 | Multiples vulnérabilités dans gaim | 2004-08-30T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-280 | Vulnérabilité dans divers produits Symantec | 2004-08-30T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-avi-279 | Multiples vulnérabilités dans Cisco Secure ACS | 2004-08-26T00:00:00.000000 | 2004-08-26T00:00:00.000000 |
| certa-2004-avi-278 | Vulnérabilité de la bibliothèque NSS | 2004-08-26T00:00:00.000000 | 2004-09-21T00:00:00.000000 |
| certa-2004-avi-277 | Vulnérabilité de Xine | 2004-08-25T00:00:00.000000 | 2004-08-25T00:00:00.000000 |
| certa-2004-avi-276 | Vulnérabilité dans Courier-IMAP | 2004-08-25T00:00:00.000000 | 2004-08-30T00:00:00.000000 |