Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77086 | 9.4 (v4.0) 9.1 (v3.1) | SiYuan before v3.7.4 Path Traversal via packageName |
siyuan-note |
siyuan |
2026-08-21T11:05:12.989Z | 2026-08-21T11:46:26.985Z |
| cve-2026-77775 | 8.6 (v3.1) 7.7 (v4.0) | Headroom Proxy Sends Upstream Requests to a Client-Sup… |
Headroom Labs |
Headroom |
2026-08-21T11:22:51.107Z | 2026-08-21T11:44:34.968Z |
| cve-2026-70654 | libvips: A well-crafted PPM image processed via a cust… |
libvips |
libvips |
2026-08-20T21:07:25.540Z | 2026-08-21T11:35:46.559Z | |
| cve-2026-68921 | DiceBear: SVG injection via the unescaped rotate optio… |
dicebear |
dicebear |
2026-08-20T21:08:43.813Z | 2026-08-21T11:32:29.303Z | |
| cve-2026-59089 | 5.5 (v3.1) | Gimp: gimp: denial of service via integer overflow in … |
|
|
2026-07-06T19:38:16.905Z | 2026-08-21T11:32:15.707Z |
| cve-2026-59088 | 5.5 (v3.1) | Gimp: gimp: denial of service via signed integer overf… |
|
|
2026-08-10T10:53:03.754Z | 2026-08-21T11:32:14.438Z |
| cve-2026-14544 | 9.8 (v3.1) | Hplip: incomplete fix for cve-2026-8631 |
HP |
HPLIP |
2026-07-03T07:26:00.402Z | 2026-08-21T11:31:34.139Z |
| cve-2026-67448 | Mailpit: WebSocket origin check bypass via percent-enc… |
axllent |
mailpit |
2026-08-20T21:29:06.185Z | 2026-08-21T11:31:27.439Z | |
| cve-2026-55489 | BigBlueButton: IDOR on BBB through /api/graphql via PO… |
bigbluebutton |
bigbluebutton |
2026-08-20T21:36:35.127Z | 2026-08-21T11:23:38.257Z | |
| cve-2026-77085 | 6.3 (v4.0) | n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool |
n8n-io |
n8n |
2026-08-20T11:21:15.741Z | 2026-08-21T11:21:24.116Z |
| cve-2026-77083 | 6 (v4.0) | n8n before 1.123.69 Code Node Sandbox Escape via Funct… |
n8n-io |
n8n |
2026-08-20T11:21:14.377Z | 2026-08-21T11:21:22.795Z |
| cve-2026-77081 | 5.1 (v4.0) | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node |
n8n-io |
n8n |
2026-08-20T11:21:13.006Z | 2026-08-21T11:21:21.502Z |
| cve-2026-77080 | 8.7 (v4.0) | n8n before 1.123.69 Arbitrary File Read and Write via … |
n8n-io |
n8n |
2026-08-20T11:21:12.357Z | 2026-08-21T11:21:20.831Z |
| cve-2026-77077 | 7.2 (v4.0) | n8n before 1.123.69 Remote Code Execution via EventEmi… |
n8n-io |
n8n |
2026-08-20T11:21:10.939Z | 2026-08-21T11:21:19.488Z |
| cve-2026-77075 | 8.4 (v4.0) | n8n before 1.123.69 Expression Injection via Resource … |
n8n-io |
n8n |
2026-08-20T11:21:09.583Z | 2026-08-21T11:21:18.192Z |
| cve-2026-77074 | 6 (v4.0) | n8n before 1.123.69 SSRF via Edit Image Node |
n8n-io |
n8n |
2026-08-20T11:21:08.910Z | 2026-08-21T11:21:17.551Z |
| cve-2026-77072 | 8.4 (v4.0) | n8n before 1.123.69 Stored XSS via Form Completion Page |
n8n-io |
n8n |
2026-08-20T11:21:07.588Z | 2026-08-21T11:21:16.263Z |
| cve-2026-77070 | 7.1 (v4.0) | n8n before 1.123.69 NoSQL Injection via MongoDB Node |
n8n-io |
n8n |
2026-08-20T11:21:06.262Z | 2026-08-21T11:21:14.972Z |
| cve-2026-77069 | 2.3 (v4.0) | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 |
n8n-io |
n8n |
2026-08-20T11:21:05.599Z | 2026-08-21T11:21:14.301Z |
| cve-2026-76850 | 9.3 (v4.0) 9.8 (v3.1) | LMDeploy Remote Code Execution via Unsafe Pickle Deser… |
InternLM |
lmdeploy |
2026-08-19T21:41:28.068Z | 2026-08-21T11:21:12.965Z |
| cve-2026-76641 | 8.7 (v4.0) 7.5 (v3.1) | Expat Out-of-Bounds Read via dtdCopy |
libexpat |
libexpat |
2026-08-20T17:31:10.610Z | 2026-08-21T11:21:12.314Z |
| cve-2026-76239 | 5.3 (v4.0) 6.3 (v3.1) | Stigmem before 0.9.0a11 SSRF via unvalidated webhook d… |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:17.336Z | 2026-08-21T11:21:10.397Z |
| cve-2026-76237 | 8.6 (v4.0) | stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:15.899Z | 2026-08-21T11:21:09.073Z |
| cve-2026-76234 | 8.7 (v4.0) 7.5 (v3.1) | libcrux before 0.0.6 Cryptographic Implementation Bug Fixes |
celabshq |
libcrux-ecdh |
2026-08-19T14:02:14.481Z | 2026-08-21T11:21:07.741Z |
| cve-2026-76226 | 6.8 (v4.0) 6.3 (v3.1) | Renovate 43.65.0 through 43.102.11 Remote Code Executi… |
renovatebot |
renovate |
2026-08-19T14:02:08.689Z | 2026-08-21T11:21:07.057Z |
| cve-2026-76214 | 9.1 (v4.0) 7.4 (v3.1) | phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge |
thorsten |
phpMyFAQ |
2026-08-19T14:01:59.917Z | 2026-08-21T11:21:06.337Z |
| cve-2026-75898 | 8.4 (v4.0) 8.5 (v3.1) | RAGFlow < 0.26.3 - Server-Side Request Forgery via Age… |
infiniflow |
ragflow |
2026-08-18T14:24:06.089Z | 2026-08-21T11:21:04.965Z |
| cve-2026-75583 | 2.3 (v4.0) 3.5 (v3.1) | keeper.sh Calendar version prior to 2.18.14 SSRF Guard… |
ridafkih |
keeper.sh |
2026-08-19T16:35:53.999Z | 2026-08-21T11:21:04.300Z |
| cve-2026-75148 | 6.9 (v4.0) 6.1 (v3.1) | cgltf 1.15 Integer Overflow via cgltf_validate() Acces… |
jkuhlmann |
cgltf |
2026-08-19T13:37:42.321Z | 2026-08-21T11:21:02.923Z |
| cve-2026-75140 | 8.7 (v4.0) 7.5 (v3.1) | jsoup Uncontrolled Resource Consumption in XmlTreeBuilder |
jhy |
soup |
2026-08-20T15:56:50.377Z | 2026-08-21T11:21:02.259Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-131 | Vulnérabilités du serveur Apache | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-130 | Vulnérabilité d'IGMP sous SGI Irix | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-129 | Vulnérabilité dans la machine virtuelle java (JRE) de SUN. | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-128 | Vulnérabilité d'Internet Explorer 5.1 sous Mac OS X | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-127 | Vulnérabilité sous Mac OS X | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-126 | Vulnérabilité dans le protocole RDP sous Windows 2000 et NT Server | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-125 | Débordement de mémoire de Oracle 9iAS Web Cache | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-116 | Vulnérabilité de Microsoft Internet Explorer | 2001-10-16T00:00:00.000000 | 2001-10-23T00:00:00.000000 |
| certa-2001-avi-123 | Vulnérabilités dans procmail | 2001-10-22T00:00:00.000000 | 2001-10-22T00:00:00.000000 |
| certa-2001-avi-122 | Déni de service sur Citrix MetaFrame | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-121 | Vulnérabilité des Cisco IOS et CatOS sous le protocole CDP | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-120 | Vulnérabilité dans Xlock sous Solaris | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-119 | Vulnérabilité de l'interface Web du serveur Novell GroupWise | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-115 | Faille de sécurité dans Zope | 2001-10-12T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-104 | Vulnérabilités multiples dans l'implémentation OpenSSH du protocole SSH v2 | 2001-09-28T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-117 | Vulnérabilité de Norton Antivirus LiveUpdate | 2001-10-18T00:00:00.000000 | 2001-10-18T00:00:00.000000 |
| certa-2001-avi-114 | Vulnérabilité dans le moteur d'indexation ht://Dig | 2001-10-12T00:00:00.000000 | 2001-10-12T00:00:00.000000 |
| certa-2001-avi-113 | Vulnérabilité dans PhpNuke | 2001-10-08T00:00:00.000000 | 2001-10-08T00:00:00.000000 |
| certa-2001-avi-112 | Vulnérabilité de yppasswd | 2001-10-08T00:00:00.000000 | 2001-10-08T00:00:00.000000 |
| certa-2001-avi-111 | Vulnérabilité dans les logiciels Excel et PowerPoint de Microsoft | 2001-10-05T00:00:00.000000 | 2001-10-05T00:00:00.000000 |
| certa-2001-avi-110 | Vulnérabilité de Network Node Manager sous HP Openview | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-109 | Vulnérabilité dans <TT>rpcbind</TT> sous HP | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-108 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-106 | Multiples vulnérabilités dans Sendmail | 2001-10-02T00:00:00.000000 | 2001-10-02T00:00:00.000000 |
| certa-2001-avi-105 | Vulnérabilité dans les agents de supervision Compaq | 2001-10-01T00:00:00.000000 | 2001-10-01T00:00:00.000000 |
| certa-2001-avi-103 | Vulnérabilité dans le proxy Squid | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-102 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-101 | Vulnérabilité dans le paquetage setserial | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-100 | Vulnérabilité de Microsoft Exchange 2000 Server Outlook Web Access | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-099 | Vulnérabilité dans ArcServe pour Windows NT | 2001-09-25T00:00:00.000000 | 2001-09-25T00:00:00.000000 |