Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-68462 | bpf: Reject negative const offsets for buffer pointers |
Linux |
Linux |
2026-08-15T05:51:21.948Z | 2026-08-17T05:39:09.532Z | |
| cve-2026-68461 | device property: initialize the remaining fields of fw… |
Linux |
Linux |
2026-08-15T05:51:21.219Z | 2026-08-17T05:39:08.142Z | |
| cve-2026-68460 | N/A | f2fs: fix potential deadlock in f2fs_balance_fs() |
Linux |
Linux |
2026-08-15T05:51:20.463Z | 2026-08-18T06:56:06.773Z |
| cve-2026-68459 | N/A | f2fs: fix potential deadlock in gc_merge path of f2fs_… |
Linux |
Linux |
2026-08-15T05:51:19.713Z | 2026-08-17T05:06:00.080Z |
| cve-2026-68458 | binder: cache secctx size before release zeroes it |
Linux |
Linux |
2026-08-15T05:51:18.975Z | 2026-08-17T05:39:07.025Z | |
| cve-2026-68457 | ksmbd: use opener credentials for FSCTL mutations |
Linux |
Linux |
2026-08-15T05:51:18.233Z | 2026-08-18T06:56:05.565Z | |
| cve-2026-68456 | N/A | usb: atm: ueagle-atm: wait for pre-firmware load in .d… |
Linux |
Linux |
2026-08-15T05:51:17.487Z | 2026-08-17T05:05:56.711Z |
| cve-2026-68455 | N/A | liveupdate: validate session type before performing op… |
Linux |
Linux |
2026-08-15T05:51:16.745Z | 2026-08-17T05:05:55.589Z |
| cve-2026-16007 | 7.1 (v4.0) | Authenticated SQL Injection in AppFlowy |
AppFlowy-IO |
AppFlowy-Cloud |
2026-08-15T05:21:17.372Z | 2026-08-17T19:47:38.040Z |
| cve-2026-16145 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:59.974Z | 2026-08-18T19:38:54.953Z | |
| cve-2026-13360 | Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated… |
wplegalpages |
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode |
2026-08-15T03:25:59.613Z | 2026-08-18T19:34:40.413Z | |
| cve-2026-16146 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:59.272Z | 2026-08-17T15:56:34.024Z | |
| cve-2026-15948 | Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored … |
themefic |
Hydra Booking — Appointment Scheduling & Booking Calendar |
2026-08-15T03:25:58.930Z | 2026-08-17T16:07:11.999Z | |
| cve-2026-15453 | KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Inject… |
iqonicdesign |
KiviCare – Clinic & Patient Management System (EHR) |
2026-08-15T03:25:58.566Z | 2026-08-17T15:56:06.656Z | |
| cve-2026-16094 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:58.224Z | 2026-08-17T19:38:56.976Z | |
| cve-2026-16586 | Contest Gallery <= 30.0.6 - Authenticated (Author+) Se… |
contest-gallery |
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe |
2026-08-15T03:25:57.860Z | 2026-08-17T16:07:21.151Z | |
| cve-2026-15993 | Form Maker by 10Web <= 1.15.44 - Authenticated (Subscr… |
10web |
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder |
2026-08-15T03:25:57.492Z | 2026-08-17T17:49:49.371Z | |
| cve-2026-17090 | Beaver Builder Page Builder <= 2.10.2.2 - Authenticate… |
beaverbuilder |
Beaver Builder Page Builder – Drag and Drop Website Builder |
2026-08-15T03:25:57.142Z | 2026-08-17T17:54:40.992Z | |
| cve-2026-18387 | Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Inj… |
trainingbusinesspros |
Groundhogg — CRM, Newsletters, and Marketing Automation |
2026-08-15T03:25:56.628Z | 2026-08-17T19:38:57.145Z | |
| cve-2026-12128 | Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated… |
dotonpaper |
Pinpoint Booking System – Version 2 |
2026-08-15T02:26:18.228Z | 2026-08-17T19:38:57.332Z | |
| cve-2026-15341 | User Session Synchronizer <= 1.4.0 - Unauthenticated A… |
rafasashi |
User Session Synchronizer |
2026-08-15T02:26:17.894Z | 2026-08-17T15:55:36.127Z | |
| cve-2026-15001 | bLoyal: Loyalty & Promotions by bLoyal <= 3.1.611.78 -… |
connectordev |
bLoyal: Loyalty & Promotions by bLoyal |
2026-08-15T02:26:17.515Z | 2026-08-17T16:07:29.548Z | |
| cve-2026-15303 | 6Storage Rentals <= 2.27.0 - Unauthenticated Account T… |
sixstorage |
6Storage Rentals |
2026-08-15T02:26:17.172Z | 2026-08-17T19:38:57.481Z | |
| cve-2026-8840 | Booking calendar, Appointment Booking System <= 3.2.36… |
wpdevart |
Booking calendar, Appointment Booking System |
2026-08-15T02:26:16.822Z | 2026-08-17T19:38:57.632Z | |
| cve-2026-15162 | Object Sync for Salesforce <= 2.2.13 - Unauthenticated… |
minnpost |
Object Sync for Salesforce |
2026-08-15T02:26:16.488Z | 2026-08-17T17:57:30.953Z | |
| cve-2026-15965 | MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Up… |
sadathimel |
MaxUpload – Big File Uploads – Increase Maximum File Upload Size |
2026-08-15T02:26:16.138Z | 2026-08-17T16:07:38.949Z | |
| cve-2026-15312 | Propovoice: All-in-One Client Management System <= 1.7… |
fassionstorage |
Propovoice: All-in-One Client Management System |
2026-08-15T02:26:15.792Z | 2026-08-18T19:35:33.073Z | |
| cve-2026-14484 | RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Del… |
pietror91 |
RapiSafe – Secure Multi File Upload for Contact Form 7 |
2026-08-15T02:26:15.460Z | 2026-08-17T15:55:00.729Z | |
| cve-2026-16080 | Image Uploader for Welcart <= 1.4.6 - Authenticated (A… |
fishpie |
Image Uploader for Welcart |
2026-08-15T02:26:15.114Z | 2026-08-17T17:59:38.742Z | |
| cve-2026-14433 | Online Booking & Scheduling Calendar for WordPress by … |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2026-08-15T02:26:14.608Z | 2026-08-18T19:39:53.784Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-269 | Vulnérabilité du module mod_jk du serveur web Apache | 2002-12-16T00:00:00.000000 | 2002-12-16T00:00:00.000000 |
| certa-2002-avi-268 | Vulnérabilité de tcpdump | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-267 | Vulnérabilité du serveur Sun Cobalt RaQ 4 | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-266 | Vulnérabilité dans SMB (Service Message Block) de Microsoft | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-265 | Multiples vulnérabilités de la Machine Virtuelle de Microsoft | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-264 | Vulnérabilité dans le traitement des messages WM_TIMER sous Windows | 2002-12-13T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-263 | Vulnérabilité de wget | 2002-12-12T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-262 | Vulnérabilité de priocntl sous Solaris | 2002-12-11T00:00:00.000000 | 2002-12-11T00:00:00.000000 |
| certa-2002-avi-261 | Vulnérabilité de FreeS/WAN sous Debian | 2002-12-06T00:00:00.000000 | 2002-12-06T00:00:00.000000 |
| certa-2002-avi-260 | Vulnérabilité d'Internet Explorer 5.5 et 6.0 | 2002-12-05T00:00:00.000000 | 2002-12-05T00:00:00.000000 |
| certa-2002-avi-259 | Vulnérabilité dans Microsoft Outlook | 2002-12-05T00:00:00.000000 | 2002-12-05T00:00:00.000000 |
| certa-2002-avi-258 | Vulnérabilités sur Sybase Adaptive Server | 2002-12-04T00:00:00.000000 | 2002-12-04T00:00:00.000000 |
| certa-2002-avi-257 | Multiples vulnérabilités dans les pare-feux Netscreen | 2002-12-02T00:00:00.000000 | 2002-12-02T00:00:00.000000 |
| certa-2002-avi-256 | Vulnérabilité du client de messagerie Pine | 2002-12-02T00:00:00.000000 | 2003-01-13T00:00:00.000000 |
| certa-2002-avi-255 | Vulnérabilité de kdelibs | 2002-12-02T00:00:00.000000 | 2002-12-06T00:00:00.000000 |
| certa-2002-avi-254 | Vulnérabilités dans le lecteur RealPlayer | 2002-12-02T00:00:00.000000 | 2002-12-02T00:00:00.000000 |
| certa-2002-avi-253 | Vulnérabilité de XFS (XWindow Font Server) | 2002-11-27T00:00:00.000000 | 2004-01-20T00:00:00.000000 |
| certa-2002-avi-252 | Vulnérabilité de Samba | 2002-11-25T00:00:00.000000 | 2002-12-13T00:00:00.000000 |
| certa-2002-avi-251 | Vulnérabilité dans les commutateurs Alcatel OmniSwitch 7700/7800 AOS | 2002-11-22T00:00:00.000000 | 2002-11-22T00:00:00.000000 |
| certa-2002-avi-250 | Multiples vulnérabilités dans le garde-barrière PIX de CISCO | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-249 | Vulnérabilité des composants <TT>MDAC</TT> sous Microsoft Windows | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-248 | Correctif cumulatif pour Microsoft Internet Explorer | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-247 | Vulnérabilités de JRun et ColdFusion pour Microsoft IIS | 2002-11-15T00:00:00.000000 | 2002-11-15T00:00:00.000000 |
| certa-2002-avi-246 | Multiples vulnérabilités sur les serveurs DNS BIND 4 et 8 | 2002-11-13T00:00:00.000000 | 2002-11-19T00:00:00.000000 |
| certa-2002-avi-245 | Vulnérabilité sur iSQL*Plus dans Oracle 9i | 2002-11-12T00:00:00.000000 | 2002-11-12T00:00:00.000000 |
| certa-2002-avi-244 | Vulnérabilité de <TT>lprng</TT> et <TT>html2ps</TT> sous Linux | 2002-11-08T00:00:00.000000 | 2002-11-15T00:00:00.000000 |
| certa-2002-avi-243 | uudecode ne vérifie pas les liens symboliques | 2002-11-04T00:00:00.000000 | 2002-11-04T00:00:00.000000 |
| certa-2002-avi-242 | Vulnérabilité dans le module d'authentification pam_ldap | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-241 | Vulnérabilité du logiciel Web-Based Enterprise Management sous Solaris 8 | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-240 | Multiples vulnérabilités dans Microsoft Internet Information Service (IIS) | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |