Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-14208 | 7.3 (v4.0) | Local Privilege Escalation via Insecure DLL Permission… |
Remote Utilities Pte. Ltd. |
Remote Utilities Host |
2026-08-21T10:51:07.262Z | 2026-08-21T11:54:27.254Z |
| cve-2026-15576 | Agent receiver accepts mTLS requests without a client … |
Checkmk GmbH |
Checkmk |
2026-08-21T11:10:00.856Z | 2026-08-21T11:53:45.355Z | |
| cve-2026-77759 | 8.7 (v4.0) | IDOR and missing authorization in the Prospero Flow CR… |
Roskus |
Prospero Flow CRM |
2026-08-21T11:29:43.550Z | 2026-08-21T11:53:17.782Z |
| cve-2026-77086 | 9.4 (v4.0) 9.1 (v3.1) | SiYuan before v3.7.4 Path Traversal via packageName |
siyuan-note |
siyuan |
2026-08-21T11:05:12.989Z | 2026-08-21T11:46:26.985Z |
| cve-2026-77775 | 8.6 (v3.1) 7.7 (v4.0) | Headroom Proxy Sends Upstream Requests to a Client-Sup… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.107Z | 2026-08-21T11:44:34.968Z |
| cve-2026-70654 | libvips: A well-crafted PPM image processed via a cust… |
libvips |
libvips |
2026-08-20T21:07:25.540Z | 2026-08-21T11:35:46.559Z | |
| cve-2026-68921 | DiceBear: SVG injection via the unescaped rotate optio… |
dicebear |
dicebear |
2026-08-20T21:08:43.813Z | 2026-08-21T11:32:29.303Z | |
| cve-2026-59089 | 5.5 (v3.1) | Gimp: gimp: denial of service via integer overflow in … |
|
|
2026-07-06T19:38:16.905Z | 2026-08-21T11:32:15.707Z |
| cve-2026-59088 | 5.5 (v3.1) | Gimp: gimp: denial of service via signed integer overf… |
|
|
2026-08-10T10:53:03.754Z | 2026-08-21T11:32:14.438Z |
| cve-2026-14544 | 9.8 (v3.1) | Hplip: incomplete fix for cve-2026-8631 |
HP |
HPLIP |
2026-07-03T07:26:00.402Z | 2026-08-21T11:31:34.139Z |
| cve-2026-67448 | Mailpit: WebSocket origin check bypass via percent-enc… |
axllent |
mailpit |
2026-08-20T21:29:06.185Z | 2026-08-21T11:31:27.439Z | |
| cve-2026-55489 | BigBlueButton: IDOR on BBB through /api/graphql via PO… |
bigbluebutton |
bigbluebutton |
2026-08-20T21:36:35.127Z | 2026-08-21T11:23:38.257Z | |
| cve-2026-77085 | 6.3 (v4.0) | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool |
n8n-io |
n8n |
2026-08-20T11:21:15.741Z | 2026-08-21T11:21:24.116Z |
| cve-2026-77083 | 6 (v4.0) | n8n before 1.123.69 Code Node Sandbox Escape via Funct… |
n8n-io |
n8n |
2026-08-20T11:21:14.377Z | 2026-08-21T11:21:22.795Z |
| cve-2026-77081 | 5.1 (v4.0) | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node |
n8n-io |
n8n |
2026-08-20T11:21:13.006Z | 2026-08-21T11:21:21.502Z |
| cve-2026-77080 | 8.7 (v4.0) | n8n before 1.123.69 Arbitrary File Read and Write via … |
n8n-io |
n8n |
2026-08-20T11:21:12.357Z | 2026-08-21T11:21:20.831Z |
| cve-2026-77077 | 7.2 (v4.0) | n8n before 1.123.69 Remote Code Execution via EventEmi… |
n8n-io |
n8n |
2026-08-20T11:21:10.939Z | 2026-08-21T11:21:19.488Z |
| cve-2026-77075 | 8.4 (v4.0) | n8n before 1.123.69 Expression Injection via Resource … |
n8n-io |
n8n |
2026-08-20T11:21:09.583Z | 2026-08-21T11:21:18.192Z |
| cve-2026-77074 | 6 (v4.0) | n8n before 1.123.69 SSRF via Edit Image Node |
n8n-io |
n8n |
2026-08-20T11:21:08.910Z | 2026-08-21T11:21:17.551Z |
| cve-2026-77072 | 8.4 (v4.0) | n8n before 1.123.69 Stored XSS via Form Completion Page |
n8n-io |
n8n |
2026-08-20T11:21:07.588Z | 2026-08-21T11:21:16.263Z |
| cve-2026-77070 | 7.1 (v4.0) | n8n before 1.123.69 NoSQL Injection via MongoDB Node |
n8n-io |
n8n |
2026-08-20T11:21:06.262Z | 2026-08-21T11:21:14.972Z |
| cve-2026-77069 | 2.3 (v4.0) | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 |
n8n-io |
n8n |
2026-08-20T11:21:05.599Z | 2026-08-21T11:21:14.301Z |
| cve-2026-76850 | 9.3 (v4.0) 9.8 (v3.1) | LMDeploy Remote Code Execution via Unsafe Pickle Deser… |
InternLM |
lmdeploy |
2026-08-19T21:41:28.068Z | 2026-08-21T11:21:12.965Z |
| cve-2026-76641 | 8.7 (v4.0) 7.5 (v3.1) | Expat Out-of-Bounds Read via dtdCopy |
libexpat |
libexpat |
2026-08-20T17:31:10.610Z | 2026-08-21T11:21:12.314Z |
| cve-2026-76239 | 5.3 (v4.0) 6.3 (v3.1) | Stigmem before 0.9.0a11 SSRF via unvalidated webhook d… |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:17.336Z | 2026-08-21T11:21:10.397Z |
| cve-2026-76237 | 8.6 (v4.0) | stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:15.899Z | 2026-08-21T11:21:09.073Z |
| cve-2026-76234 | 8.7 (v4.0) 7.5 (v3.1) | libcrux before 0.0.6 Cryptographic Implementation Bug Fixes |
celabshq |
libcrux-ecdh |
2026-08-19T14:02:14.481Z | 2026-08-21T11:21:07.741Z |
| cve-2026-76226 | 6.8 (v4.0) 6.3 (v3.1) | Renovate 43.65.0 through 43.102.11 Remote Code Executi… |
renovatebot |
renovate |
2026-08-19T14:02:08.689Z | 2026-08-21T11:21:07.057Z |
| cve-2026-76214 | 9.1 (v4.0) 7.4 (v3.1) | phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge |
thorsten |
phpMyFAQ |
2026-08-19T14:01:59.917Z | 2026-08-21T11:21:06.337Z |
| cve-2026-75898 | 8.4 (v4.0) 8.5 (v3.1) | RAGFlow < 0.26.3 - Server-Side Request Forgery via Age… |
infiniflow |
ragflow |
2026-08-18T14:24:06.089Z | 2026-08-21T11:21:04.965Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-110 | Vulnérabilité dans InterScan VirusWall NT de TrendMicro | 2004-04-07T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-085 | Vulnérabilité de sysstat | 2004-03-15T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-109 | Vulnérabilité de Winamp | 2004-04-06T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-108 | Vulnérabilité sur Citrix MetaFrame Password Manager | 2004-04-06T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-042 | Vulnérabilité du noyau linux | 2004-02-18T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2003-avi-110 | Vulnérabilité des pilotes de carte réseau Ethernet | 2003-07-15T00:00:00.000000 | 2004-04-06T00:00:00.000000 |
| certa-2004-avi-105 | Vulnérabilité de la fonction setsockopt() sous FreeBSD | 2004-03-30T00:00:00.000000 | 2004-03-30T00:00:00.000000 |
| certa-2004-avi-104 | Multiples vulnérabilités dans SD-UX de HP-UX | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-103 | Vulnérabilité dans l'utilitaire nslookup de IBM AIX | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-102 | Vulnérabilité sur Novell Netware 6.5 | 2004-03-26T00:00:00.000000 | 2004-03-26T00:00:00.000000 |
| certa-2004-avi-101 | Vulnérabilité du module mod_survey | 2004-03-25T00:00:00.000000 | 2004-03-25T00:00:00.000000 |
| certa-2004-avi-097 | Vulnérabilités dans Norton Internet Security et Norton AntiSpam | 2004-03-22T00:00:00.000000 | 2004-03-22T00:00:00.000000 |
| certa-2004-avi-096 | Vulnérabilité des produits Proventia, BlackICE et RealSecure d'ISS | 2004-03-19T00:00:00.000000 | 2004-03-22T00:00:00.000000 |
| certa-2004-avi-094 | Vulnérabilité sur plusieurs serveurs SOAP | 2004-03-18T00:00:00.000000 | 2004-03-18T00:00:00.000000 |
| certa-2004-avi-078 | Vulnérabilité sur gdk-pixbuf sous Linux | 2004-03-11T00:00:00.000000 | 2004-03-16T00:00:00.000000 |
| certa-2004-avi-056 | Vulnérabilité de WinZip | 2004-03-01T00:00:00.000000 | 2004-03-16T00:00:00.000000 |
| certa-2004-avi-093 | Vulnérabilité de Solaris | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-092 | Vulnérabilité de IPsec/IKE sous Tru64 UNIX | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-091 | Compromission possible de certificats sur <SPAN class="textit">HP HTTP Server</SPAN> | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-090 | Vulnérabilité dans Oracle Application Server Web Cache | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-089 | Vulnérabilité sur Novell GroupWise WebAccess | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-087 | Vulnérabilité de Antigen pour Lotus Domino | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-084 | Vulnérabilité de Calife | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-083 | Vulnérabilité de rexecd sous AIX | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-082 | Vulnérabilité de F-Secure pour Linux | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-081 | Vulnérabilité du navigateur Konqueror | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-077 | Vulnérabilités de uucp sous Sun Solaris | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-065 | Vulnérabilité d'Adobe Acrobat Reader | 2004-03-04T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2003-avi-156 | Failles dans des implémentations de SSL/TLS | 2003-09-30T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-075 | Vulnérabilité dans la pile TCP/IP de OpenBSD | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |