Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72741 | 8.6 (v4.0) 8.1 (v3.1) | Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Te… |
goodrain |
rainbond |
2026-08-13T17:59:25.934Z | 2026-08-18T01:31:05.060Z |
| cve-2026-73647 | Quasar Framework: Prototype pollution in Quasar extend… |
quasarframework |
quasar |
2026-08-13T17:57:09.014Z | 2026-08-13T18:41:21.421Z | |
| cve-2026-73645 | OpenZeppelin Confidential Contracts ERC7984ERC20Wrappe… |
OpenZeppelin |
openzeppelin-confidential-contracts |
2026-08-13T17:54:42.793Z | 2026-08-14T18:09:13.903Z | |
| cve-2026-19730 | 4.2 (v3.1) | Podman: podman: quadlet install --replace non-truncati… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-13T17:53:37.029Z | 2026-08-13T18:41:20.204Z |
| cve-2026-73644 | OpenDJ: Authorization bypass in SASL PLAIN allowing a … |
OpenIdentityPlatform |
OpenDJ |
2026-08-13T17:52:48.641Z | 2026-08-18T01:30:06.653Z | |
| cve-2026-73643 | js-yaml: Exponential parsing time in the flow collecti… |
nodeca |
js-yaml |
2026-08-13T17:47:30.404Z | 2026-08-14T16:44:08.839Z | |
| cve-2026-73569 | fast-xml-parser: Repeated DOCTYPE declarations reset e… |
NaturalIntelligence |
fast-xml-parser |
2026-08-13T17:45:25.045Z | 2026-08-13T18:40:13.283Z | |
| cve-2026-73568 | py-libp2p: yamux connection DoS via oversized data frame |
libp2p |
py-libp2p |
2026-08-13T17:43:26.065Z | 2026-08-13T18:06:37.488Z | |
| cve-2026-73567 | sm-crypto: Predictable SM2 key generation in Node.js: … |
JuneAndGreen |
sm-crypto |
2026-08-13T17:40:54.016Z | 2026-08-14T18:09:20.763Z | |
| cve-2026-73566 | node-tar: Uncontrolled recursion in mapHas/filesFilter… |
isaacs |
node-tar |
2026-08-13T17:39:05.796Z | 2026-08-21T19:08:31.345Z | |
| cve-2026-73565 | @hono/node-server: Unauthenticated memory-leak DoS via… |
honojs |
node-server |
2026-08-13T17:37:28.579Z | 2026-08-14T16:45:25.711Z | |
| cve-2026-73564 | frp: Unauthenticated Remote Denial of Service in the f… |
fatedier |
frp |
2026-08-13T17:35:46.762Z | 2026-08-13T17:53:06.534Z | |
| cve-2026-18428 | 8.7 (v4.0) 8.8 (v3.1) | SQL Query Validation Bypass in OpenSearch Direct Query |
AWS |
Opensearch |
2026-08-13T17:32:48.455Z | 2026-08-13T17:57:51.408Z |
| cve-2026-73563 | Backstage: Unauthenticated OAuth account takeover via … |
backstage |
backstage |
2026-08-13T17:32:39.535Z | 2026-08-13T18:07:45.624Z | |
| cve-2026-73562 | Mongoose: Prototype pollution in the update casting vi… |
Automattic |
mongoose |
2026-08-13T17:27:09.914Z | 2026-08-14T18:09:27.112Z | |
| cve-2026-73561 | Hub: Unauthenticated WebSocket RPC Waiter Resource Exh… |
anephenix |
hub |
2026-08-13T17:24:34.761Z | 2026-08-18T01:27:12.169Z | |
| cve-2019-25765 | 8.7 (v4.0) 7.5 (v3.1) | ASP-CMS SQL Injection via commentList.asp id Parameter |
ASP-CMS Project |
ASP-CMS |
2026-08-13T17:21:38.584Z | 2026-08-14T18:48:07.536Z |
| cve-2024-58374 | 8.7 (v4.0) 7.5 (v3.1) | Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree |
Hongjing Century |
e-HR |
2026-08-13T17:21:22.909Z | 2026-08-13T17:56:17.621Z |
| cve-2026-12236 | 6.5 (v3.1) | Infinite loop (DoS) in Bluetooth GATT client parsing o… |
zephyrproject |
zephyr |
2026-08-13T17:19:58.346Z | 2026-08-13T17:58:32.374Z |
| cve-2026-67613 | 6.9 (v4.0) 4.9 (v3.1) | CyberPanel < 3.0.0 Path Traversal File Read via cloudA… |
usmannasir |
cyberpanel |
2026-08-13T17:09:05.229Z | 2026-08-14T18:09:34.128Z |
| cve-2026-67614 | 9.3 (v4.0) 9.8 (v3.1) | CyberPanel < 3.0.0 Hard-coded JWT Secret Authenticatio… |
usmannasir |
cyberpanel |
2026-08-13T17:08:40.038Z | 2026-08-14T16:51:02.511Z |
| cve-2026-24059 | N/A | Gitea runner registration-token GET endpoint performs … |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:48:52.623Z | 2026-08-14T17:10:45.377Z |
| cve-2026-24791 | N/A | Public-only tokens bypass private-resource restriction… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:48:52.255Z | 2026-08-13T18:48:01.037Z |
| cve-2026-59765 | N/A | SSRF via Migration Asset Downloads Bypasses hostmatche… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:59.148Z | 2026-08-14T19:01:54.065Z |
| cve-2026-59763 | N/A | Unbounded Arch package file metadata can cause resourc… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.792Z | 2026-08-13T18:49:48.864Z |
| cve-2026-58511 | N/A | Webhook Authorization Header Returned in Plaintext via API |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.442Z | 2026-08-13T18:50:39.280Z |
| cve-2026-58510 | N/A | GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied t… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:58.092Z | 2026-08-13T19:14:00.411Z |
| cve-2026-58508 | N/A | Two SSRF vulnerabilities in Gitea migration/mirror (DN… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.726Z | 2026-08-14T19:04:47.409Z |
| cve-2026-58507 | N/A | Private Repository Existence Disclosure via go-get Met… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:57.367Z | 2026-08-14T19:06:32.423Z |
| cve-2026-58445 | N/A | Cross-repository label-ID enumeration oracle via unsco… |
Gitea |
Gitea Open Source Git Server |
2026-08-13T16:44:56.978Z | 2026-08-14T19:08:41.522Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-125 | Vulnérabilité de Cisco IPSEC VPN Services Module | 2004-04-09T00:00:00.000000 | 2004-04-09T00:00:00.000000 |
| certa-2004-avi-124 | Faille de l'outil Portage sous Gentoo Linux | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-123 | Vulnérabilité du service IKE racoon | 2004-04-08T00:00:00.000000 | 2004-05-13T00:00:00.000000 |
| certa-2004-avi-122 | Vulnérabilité dans le serveur FTPD d'IRIX SGI | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-121 | Vulnérabilité du programme login de util-linux | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-120 | Vulnérabilités dans Microsoft SharePoint Portal Server 2001 | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-119 | Vulnérabilités dans HP Web JetAdmin | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-118 | Vulnérabilité dans les équipements WLSE et HSE de Cisco | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-117 | Vulnérabilités dans MIMEsweeper de F-Secure | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-116 | Vulnérabilité dans l'application Oracle OSSO | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-115 | Vulnérabilité de RealPlayer | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-114 | Vulnérabilité dans PERL WIN32 | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-113 | Vulnérabilité sur Dreamweaver | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-112 | Vulnérabilité dans F-Secure BackWeb | 2004-04-08T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-111 | Mise à jour de sécurité MacOSX | 2004-04-07T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-110 | Vulnérabilité dans InterScan VirusWall NT de TrendMicro | 2004-04-07T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-109 | Vulnérabilité de Winamp | 2004-04-06T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-108 | Vulnérabilité sur Citrix MetaFrame Password Manager | 2004-04-06T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-107 | Vulnérabilité dans MPlayer | 2004-04-02T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-106 | Vulnérabilités de tcpdump | 2004-03-31T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-105 | Vulnérabilité de la fonction setsockopt() sous FreeBSD | 2004-03-30T00:00:00.000000 | 2004-03-30T00:00:00.000000 |
| certa-2004-avi-104 | Multiples vulnérabilités dans SD-UX de HP-UX | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-103 | Vulnérabilité dans l'utilitaire nslookup de IBM AIX | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-102 | Vulnérabilité sur Novell Netware 6.5 | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-101 | Vulnérabilité du module mod_survey | 2004-03-25T00:00:00.000000 | 2004-03-25T00:00:00.000000 |
| certa-2004-avi-100 | Multiples vulnérabilités de isakmpd sous OpenBSD | 2004-03-24T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-099 | Vulnérabilités dans Ethereal | 2004-03-24T00:00:00.000000 | 2004-06-01T00:00:00.000000 |
| certa-2004-avi-098 | Vulnérabilité de Clamav | 2004-03-23T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-097 | Vulnérabilités dans Norton Internet Security et Norton AntiSpam | 2004-03-22T00:00:00.000000 | 2004-03-22T00:00:00.000000 |
| certa-2004-avi-096 | Vulnérabilité des produits Proventia, BlackICE et RealSecure d'ISS | 2004-03-19T00:00:00.000000 | 2004-03-22T00:00:00.000000 |