Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76226 | 6.8 (v4.0) 6.3 (v3.1) | Renovate 43.65.0 through 43.102.11 Remote Code Executi… |
renovatebot |
renovate |
2026-08-19T14:02:08.689Z | 2026-08-21T11:21:07.057Z |
| cve-2026-76214 | 9.1 (v4.0) 7.4 (v3.1) | phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge |
thorsten |
phpMyFAQ |
2026-08-19T14:01:59.917Z | 2026-08-21T11:21:06.337Z |
| cve-2026-75898 | 8.4 (v4.0) 8.5 (v3.1) | RAGFlow < 0.26.3 - Server-Side Request Forgery via Age… |
infiniflow |
ragflow |
2026-08-18T14:24:06.089Z | 2026-08-21T11:21:04.965Z |
| cve-2026-75583 | 2.3 (v4.0) 3.5 (v3.1) | keeper.sh Calendar version prior to 2.18.14 SSRF Guard… |
ridafkih |
keeper.sh |
2026-08-19T16:35:53.999Z | 2026-08-21T11:21:04.300Z |
| cve-2026-75148 | 6.9 (v4.0) 6.1 (v3.1) | cgltf 1.15 Integer Overflow via cgltf_validate() Acces… |
jkuhlmann |
cgltf |
2026-08-19T13:37:42.321Z | 2026-08-21T11:21:02.923Z |
| cve-2026-75140 | 8.7 (v4.0) 7.5 (v3.1) | jsoup Uncontrolled Resource Consumption in XmlTreeBuilder |
jhy |
soup |
2026-08-20T15:56:50.377Z | 2026-08-21T11:21:02.259Z |
| cve-2026-75106 | 9.3 (v4.0) 9.1 (v3.1) | OpnForm Editable Submission Secret Derivation via Empt… |
OpnForm |
OpnForm |
2026-08-17T20:36:02.092Z | 2026-08-21T11:21:01.592Z |
| cve-2026-75105 | 8.7 (v4.0) 7.5 (v3.1) | phpIPAM Temporary Subnet Share Information Disclosure … |
phpipam |
phpipam |
2026-08-17T20:36:01.403Z | 2026-08-21T11:21:00.953Z |
| cve-2026-72818 | 8.7 (v4.0) 7.5 (v3.1) | NLTK TweetTokenizer URL Pattern Backtracks Catastrophi… |
nltk |
nltk |
2026-08-20T21:57:34.230Z | 2026-08-21T11:20:57.674Z |
| cve-2026-71518 | 8.7 (v4.0) 7.5 (v3.1) | Typemill < 2.26.0 Authorization Bypass via Media File … |
typemill |
typemill |
2026-08-17T21:05:10.836Z | 2026-08-21T11:20:57.023Z |
| cve-2026-68765 | 5.2 (v4.0) 6.1 (v3.1) | hashcat KeePass KDBX v4 Module Heap Buffer Overflow vi… |
hashcat |
hashcat |
2026-08-17T20:48:17.215Z | 2026-08-21T11:20:56.382Z |
| cve-2026-66046 | 8.7 (v4.0) 7.5 (v3.1) | Expat Denial of Service via storeAtts() Quadratic Complexity |
libexpat project |
libexpat |
2026-08-18T14:10:05.176Z | 2026-08-21T11:20:55.742Z |
| cve-2026-63722 | 8.7 (v4.0) 9.8 (v3.1) | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php |
ICEcoder |
ICEcoder |
2026-08-19T19:13:45.090Z | 2026-08-21T11:20:55.075Z |
| cve-2026-40509 | 5.3 (v4.0) 4.3 (v3.1) | OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter |
openemr |
openemr |
2026-08-19T14:53:21.612Z | 2026-08-21T11:20:53.071Z |
| cve-2026-40508 | 5.1 (v4.0) 5.4 (v3.1) | OpenEMR < 8.3.0 Stored XSS via Patient Portal Template… |
openemr |
openemr |
2026-08-19T14:51:01.748Z | 2026-08-21T11:20:52.421Z |
| cve-2026-40506 | 7 (v4.0) 6.5 (v3.1) | OpenEMR Path Traversal Arbitrary Directory Deletion vi… |
openemr |
openemr |
2026-08-17T20:39:03.333Z | 2026-08-21T11:20:51.181Z |
| cve-2026-55769 | CloudNativePG: Overriding operators can lead to privil… |
cloudnative-pg |
cloudnative-pg |
2026-08-20T21:41:51.369Z | 2026-08-21T11:20:22.436Z | |
| cve-2026-16972 | 6.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-20T21:46:10.813Z | 2026-08-21T11:18:14.016Z |
| cve-2026-17007 | 6.7 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-20T21:49:30.720Z | 2026-08-21T11:11:10.691Z |
| cve-2026-17165 | 7.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-20T21:56:16.513Z | 2026-08-21T11:06:27.089Z |
| cve-2026-18670 | 8.2 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-20T21:59:50.937Z | 2026-08-21T11:02:10.837Z |
| cve-2026-77392 | SourceCodester Dynamic Input Field Generator Using HTM… |
SourceCodester |
Dynamic Input Field Generator Using HTML, CSS, and PHP |
2026-08-21T01:45:11.812Z | 2026-08-21T10:56:20.372Z | |
| cve-2026-77264 | Automation Web Platform <= 4.8.6 - Unauthenticated Aut… |
101gen |
Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code |
2026-08-21T07:39:24.523Z | 2026-08-21T10:55:25.315Z | |
| cve-2026-71574 | 8.5 (v4.0) | Joomla! Core - [20260803] - Inconsistent ACL checks fo… |
Joomla! Project |
Joomla! CMS |
2026-08-18T16:02:54.574Z | 2026-08-21T08:59:30.380Z |
| cve-2026-32967 | Apache DolphinScheduler: The `/v2` experimental interf… |
Apache Software Foundation |
Apache DolphinScheduler |
2026-06-17T08:57:55.852Z | 2026-08-21T08:31:39.389Z | |
| cve-2026-75952 | 4.6 (v4.0) | Joomla Extension - cmsjunkie.com - Cross-site request… |
cmsjunkie.com |
J-BusinessDirectory extension for Joomla |
2026-08-19T14:46:52.882Z | 2026-08-21T04:51:45.373Z |
| cve-2026-76610 | 6.9 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated tag … |
yootheme.com |
Zoo extension for Joomla |
2026-08-20T08:54:46.853Z | 2026-08-21T04:51:12.935Z |
| cve-2026-67364 | 10 (v4.0) | Joomla Extension - balbooa.com - Pre-auth PHP Code Inj… |
balbooa.com |
Balbooa Forms extension for Joomla |
2026-08-19T13:00:55.029Z | 2026-08-21T04:48:22.825Z |
| cve-2026-74803 | 10 (v4.0) | Joomla Extension - yootheme.com - Unauthenticated arbi… |
yootheme.com |
Zoo extension for Joomla |
2026-08-19T13:39:24.213Z | 2026-08-21T04:48:18.227Z |
| cve-2026-67363 | 7.7 (v4.0) | Joomla Extension - balbooa.com - Pre-auth Payment Amou… |
balbooa.com |
Balbooa Forms extension for Joomla |
2026-08-19T13:00:45.652Z | 2026-08-21T04:48:10.876Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-073 | Vulnérabilité dans Microsoft MSN Messenger | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-072 | Vulnérabilité dans Microsoft Outlook | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-071 | Vulnérabilité dans Windows Media Services | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-070 | Vulnérabilité dans le gestionnaire de base de données IBM DB2 | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2003-avi-206 | Vulnérabilité de rsync | 2003-12-04T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-069 | Vulnérabilité de la commande passwd sur Sun | 2004-03-08T00:00:00.000000 | 2004-03-08T00:00:00.000000 |
| certa-2004-avi-068 | Vulnérabilité sur les produits VPN NetScreen 5000 | 2004-03-05T00:00:00.000000 | 2004-03-05T00:00:00.000000 |
| certa-2004-avi-067 | Déni de service des commutateurs Cisco CSS 11000 | 2004-03-05T00:00:00.000000 | 2004-03-05T00:00:00.000000 |
| certa-2004-avi-066 | Vulnérabilité dans le serveur WFTPD pour Windows | 2004-03-04T00:00:00.000000 | 2004-03-04T00:00:00.000000 |
| certa-2004-avi-064 | Vulnérabilité sur Proftpd | 2004-03-04T00:00:00.000000 | 2004-03-04T00:00:00.000000 |
| certa-2004-avi-063 | Vulnérabilité dans Symantec Gateway Security | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-060 | Vulnérabilité sur Novell Client Firewall 2.x | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-059 | Déni de service sous FreeBSD | 2004-03-03T00:00:00.000000 | 2004-03-03T00:00:00.000000 |
| certa-2004-avi-058 | Vulnérabilité des mtools sous Unix | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-057 | Vulnérabilité sur jail_attach sous FreeBSD | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-055 | Vulnérabilité de la commande conv_fix de Solaris | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-054 | Vulnérabilité de la commande passwd sous Solaris | 2004-03-01T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-052 | Vulnérabilité dans le navigateur Mozilla | 2004-02-27T00:00:00.000000 | 2004-03-01T00:00:00.000000 |
| certa-2004-avi-053 | Vulnérabilité des produits Proventia, BlackICE et RealSecure d'ISS | 2004-02-27T00:00:00.000000 | 2004-02-27T00:00:00.000000 |
| certa-2004-avi-049 | Vulnérabilité dans nCipher | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2004-avi-048 | Vulnérabilités sur Trillian | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2004-avi-047 | Multiples vulnérabilités sous Mac OS X | 2004-02-25T00:00:00.000000 | 2004-02-25T00:00:00.000000 |
| certa-2004-avi-046 | Vulnérabilité dans Oracle9i Application et Dabase Server | 2004-02-23T00:00:00.000000 | 2004-02-23T00:00:00.000000 |
| certa-2003-avi-177 | Vulnérabilités du serveur HTTP Apache | 2003-10-30T00:00:00.000000 | 2004-02-23T00:00:00.000000 |
| certa-2004-avi-045 | Vulnérabilité dans Ipswitch Imail Server | 2004-02-20T00:00:00.000000 | 2004-02-20T00:00:00.000000 |
| certa-2004-avi-028 | Vulnérabilité IPv6 dans les noyaux BSD | 2004-02-10T00:00:00.000000 | 2004-02-20T00:00:00.000000 |
| certa-2004-avi-010 | Vulnérabilité de isakmpd | 2004-01-15T00:00:00.000000 | 2004-02-20T00:00:00.000000 |
| certa-2004-avi-044 | Vulnérabilité de plusieurs logiciels de Zone Labs | 2004-02-19T00:00:00.000000 | 2004-02-19T00:00:00.000000 |
| certa-2004-avi-023 | Vulnérabilité de shmat sur les noyaux BSD | 2004-02-06T00:00:00.000000 | 2004-02-19T00:00:00.000000 |
| certa-2004-avi-041 | Vulnérabilité de Clamav | 2004-02-18T00:00:00.000000 | 2004-02-18T00:00:00.000000 |