Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-3336 | 7.5 (v3.1) 8.7 (v4.0) | PKCS7_verify Certificate Chain Validation Bypass in AWS-LC |
AWS |
AWS-LC |
2026-03-02T21:15:16.709Z | 2026-08-21T12:13:00.341Z |
| cve-2026-10649 | 8.6 (v3.1) | Pacemaker: pacemaker: denial of service via integer ov… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-06-16T15:57:38.911Z | 2026-08-21T12:12:59.238Z |
| cve-2026-3338 | 7.5 (v3.1) 8.7 (v4.0) | PKCS7_verify Signature Validation Bypass in AWS-LC |
AWS |
AWS-LC |
2026-03-02T21:22:41.954Z | 2026-08-21T12:12:53.379Z |
| cve-2026-70886 | Vulnerability in the Oracle Hyperion Data Relatio… |
Oracle Corporation |
Oracle Hyperion Data Relationship Management |
2026-08-18T21:02:20.437Z | 2026-08-21T12:10:31.731Z | |
| cve-2026-77755 | 8.7 (v4.0) | Denial of Service in MISP-STIX Import via Malformed or… |
misp |
misp-stix |
2026-08-21T09:55:11.079Z | 2026-08-21T12:09:16.956Z |
| cve-2024-5154 | 8.1 (v3.1) | Cri-o: malicious container can create symlink on host |
|
|
2024-06-12T08:51:43.565Z | 2026-08-21T12:08:03.465Z |
| cve-2024-1394 | 7.5 (v3.1) | Golang-fips/openssl: memory leaks in code encrypting a… |
Red Hat |
Red Hat Ansible Automation Platform 2.4 for RHEL 8 |
2024-03-21T12:16:38.790Z | 2026-08-21T12:07:41.500Z |
| cve-2026-16529 | 7.5 (v3.1) | Pcp: pcp: denial of service due to signed integer overflow |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-30T05:30:18.630Z | 2026-08-21T12:03:40.862Z |
| cve-2026-16527 | 7.3 (v3.1) | Pcp: pcp pmproxy: unauthenticated access to /store end… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-30T05:30:16.930Z | 2026-08-21T12:03:38.580Z |
| cve-2026-16526 | 8.8 (v3.1) | Pcp: pcp: privilege escalation to root via linux_socke… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-30T05:20:07.504Z | 2026-08-21T12:03:35.909Z |
| cve-2026-16524 | 7.8 (v3.1) | Pcp: pcp linux_sockets pmda: arbitrary command executi… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-30T05:15:15.277Z | 2026-08-21T12:03:30.827Z |
| cve-2026-77761 | 6.3 (v4.0) | Cross-Document Parser State Contamination in misp-stix |
misp |
misp-stix |
2026-08-21T10:11:54.840Z | 2026-08-21T12:00:49.313Z |
| cve-2026-14208 | 7.3 (v4.0) | Local Privilege Escalation via Insecure DLL Permission… |
Remote Utilities Pte. Ltd. |
Remote Utilities Host |
2026-08-21T10:51:07.262Z | 2026-08-21T11:54:27.254Z |
| cve-2026-15576 | Agent receiver accepts mTLS requests without a client … |
Checkmk GmbH |
Checkmk |
2026-08-21T11:10:00.856Z | 2026-08-21T11:53:45.355Z | |
| cve-2026-77759 | 8.7 (v4.0) | IDOR and missing authorization in the Prospero Flow CR… |
Roskus |
Prospero Flow CRM |
2026-08-21T11:29:43.550Z | 2026-08-21T11:53:17.782Z |
| cve-2026-77086 | 9.4 (v4.0) 9.1 (v3.1) | SiYuan before v3.7.4 Path Traversal via packageName |
siyuan-note |
siyuan |
2026-08-21T11:05:12.989Z | 2026-08-21T11:46:26.985Z |
| cve-2026-77775 | 8.6 (v3.1) 7.7 (v4.0) | Headroom Proxy Sends Upstream Requests to a Client-Sup… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.107Z | 2026-08-21T11:44:34.968Z |
| cve-2026-70654 | libvips: A well-crafted PPM image processed via a cust… |
libvips |
libvips |
2026-08-20T21:07:25.540Z | 2026-08-21T11:35:46.559Z | |
| cve-2026-68921 | DiceBear: SVG injection via the unescaped rotate optio… |
dicebear |
dicebear |
2026-08-20T21:08:43.813Z | 2026-08-21T11:32:29.303Z | |
| cve-2026-59089 | 5.5 (v3.1) | Gimp: gimp: denial of service via integer overflow in … |
|
|
2026-07-06T19:38:16.905Z | 2026-08-21T11:32:15.707Z |
| cve-2026-59088 | 5.5 (v3.1) | Gimp: gimp: denial of service via signed integer overf… |
|
|
2026-08-10T10:53:03.754Z | 2026-08-21T11:32:14.438Z |
| cve-2026-14544 | 9.8 (v3.1) | Hplip: incomplete fix for cve-2026-8631 |
HP |
HPLIP |
2026-07-03T07:26:00.402Z | 2026-08-21T11:31:34.139Z |
| cve-2026-67448 | Mailpit: WebSocket origin check bypass via percent-enc… |
axllent |
mailpit |
2026-08-20T21:29:06.185Z | 2026-08-21T11:31:27.439Z | |
| cve-2026-55489 | BigBlueButton: IDOR on BBB through /api/graphql via PO… |
bigbluebutton |
bigbluebutton |
2026-08-20T21:36:35.127Z | 2026-08-21T11:23:38.257Z | |
| cve-2026-77085 | 6.3 (v4.0) | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool |
n8n-io |
n8n |
2026-08-20T11:21:15.741Z | 2026-08-21T11:21:24.116Z |
| cve-2026-77083 | 6 (v4.0) | n8n before 1.123.69 Code Node Sandbox Escape via Funct… |
n8n-io |
n8n |
2026-08-20T11:21:14.377Z | 2026-08-21T11:21:22.795Z |
| cve-2026-77081 | 5.1 (v4.0) | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node |
n8n-io |
n8n |
2026-08-20T11:21:13.006Z | 2026-08-21T11:21:21.502Z |
| cve-2026-77080 | 8.7 (v4.0) | n8n before 1.123.69 Arbitrary File Read and Write via … |
n8n-io |
n8n |
2026-08-20T11:21:12.357Z | 2026-08-21T11:21:20.831Z |
| cve-2026-77077 | 7.2 (v4.0) | n8n before 1.123.69 Remote Code Execution via EventEmi… |
n8n-io |
n8n |
2026-08-20T11:21:10.939Z | 2026-08-21T11:21:19.488Z |
| cve-2026-77075 | 8.4 (v4.0) | n8n before 1.123.69 Expression Injection via Resource … |
n8n-io |
n8n |
2026-08-20T11:21:09.583Z | 2026-08-21T11:21:18.192Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-140 | Vulnérabilité dans Sendmail | 2002-06-28T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2002-avi-138 | Vulnérabilité CISCO aux scans SSH | 2002-06-28T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2001-avi-088 | Vulnérabilité de SnmpXdmid sur Sun | 2001-08-31T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2002-avi-137 | Vulnérabilité sur Oracle9iAS | 2002-06-27T00:00:00.000000 | 2002-06-27T00:00:00.000000 |
| certa-2002-avi-135 | Débordement de mémoire dans Microsoft Commerce Server 2000 et 2002 | 2002-06-27T00:00:00.000000 | 2002-06-27T00:00:00.000000 |
| certa-2002-avi-133 | Vulnérabilité sur ColdFusion MX de Macromedia | 2002-06-21T00:00:00.000000 | 2002-06-21T00:00:00.000000 |
| certa-2002-avi-132 | Multiples vulnérabilités dans Excel et Word pour Windows | 2002-06-21T00:00:00.000000 | 2002-06-21T00:00:00.000000 |
| certa-2002-avi-131 | Vulnérabilité du client VPN de Cisco | 2002-06-20T00:00:00.000000 | 2002-06-20T00:00:00.000000 |
| certa-2002-avi-128 | Vulnérabilité du service gopher dans Microsoft Internet Explorer, Proxy Server et ISA Server | 2002-06-13T00:00:00.000000 | 2002-06-18T00:00:00.000000 |
| certa-2002-avi-129 | Vulnérabilité de Ghostscript | 2002-06-14T00:00:00.000000 | 2002-06-14T00:00:00.000000 |
| certa-2002-avi-127 | Vulnérabilité sur Oracle Net | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-126 | Vulnérabilité dans Oracle 9iAS Reports Server | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-125 | Vulnérabilité des services snmpd et edd sur la console SSP (SUN Enterprise 10000) | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-124 | Vulnérabilité de Microsoft Internet Information Server | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-123 | Vulnérabilités dans Microsoft SQLXML | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-122 | Vulnérabilité dans l'annuaire des services RAS et RRAS de Windows | 2002-06-13T00:00:00.000000 | 2002-06-13T00:00:00.000000 |
| certa-2002-avi-121 | Vulnérabilité du module d'administration web du garde-barrière NetScreen-25 | 2002-06-12T00:00:00.000000 | 2002-06-12T00:00:00.000000 |
| certa-2002-avi-109 | Vulnérabilité dans talkd | 2002-05-23T00:00:00.000000 | 2002-06-12T00:00:00.000000 |
| certa-2001-avi-081 | Débordement de mémoire dans telnetd | 2001-07-25T00:00:00.000000 | 2002-06-11T00:00:00.000000 |
| certa-2002-avi-120 | Débordement de mémoire dans l'application <TT>ASP.NET</TT> de Microsoft | 2002-06-10T00:00:00.000000 | 2002-06-10T00:00:00.000000 |
| certa-2002-avi-119 | Vulnérabilité dans Software Distributor sous HP-UX | 2002-06-10T00:00:00.000000 | 2002-06-10T00:00:00.000000 |
| certa-2002-avi-050 | Vulnérabilité de la machine virtuelle Java | 2002-03-05T00:00:00.000000 | 2002-06-06T00:00:00.000000 |
| certa-2002-avi-118 | Vulnérabilité rpc.passwd sous IRIX | 2002-06-05T00:00:00.000000 | 2002-06-05T00:00:00.000000 |
| certa-2002-avi-117 | Vulnérabilité des agents SNMP sous Solaris | 2002-06-05T00:00:00.000000 | 2002-06-05T00:00:00.000000 |
| certa-2002-avi-116 | Déni de service sur BIND 9 | 2002-06-05T00:00:00.000000 | 2002-06-05T00:00:00.000000 |
| certa-2002-avi-096 | Vulnérabilité de rpc.rwalld sous Solaris | 2002-05-06T00:00:00.000000 | 2002-06-03T00:00:00.000000 |
| certa-2002-avi-076 | Vulnérabilité des équipements et applications CISCO sous SOLARIS | 2002-04-11T00:00:00.000000 | 2002-06-03T00:00:00.000000 |
| certa-2002-avi-115 | Vulnérabilité du serveur wu-imapd | 2002-05-31T00:00:00.000000 | 2002-05-31T00:00:00.000000 |
| certa-2002-avi-108 | Vulnérabilité du service ISC DHCPD | 2002-05-23T00:00:00.000000 | 2002-05-31T00:00:00.000000 |
| certa-2002-avi-104 | Vulnérabilités de tcpdump | 2002-05-17T00:00:00.000000 | 2002-05-31T00:00:00.000000 |