Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-72837 | 8.7 (v4.0) 8.8 (v3.1) | File Browser before 2.63.20 Privilege Escalation via P… |
filebrowser |
filebrowser |
2026-08-14T11:35:42.191Z | 2026-08-14T16:52:18.149Z |
| cve-2026-72836 | 9.2 (v4.0) 8.1 (v3.1) | FileBrowser before 2.63.19 Case Sensitivity Authentica… |
filebrowser |
filebrowser |
2026-08-14T11:35:41.491Z | 2026-08-18T02:00:53.619Z |
| cve-2026-72835 | 7.6 (v4.0) 6.8 (v3.1) | filebrowser before v2.63.21 Access Rule Bypass via Pat… |
filebrowser |
filebrowser |
2026-08-14T11:35:40.774Z | 2026-08-14T18:03:52.526Z |
| cve-2026-72834 | 5.3 (v4.0) 4.3 (v3.1) | filebrowser before 2.63.19 Permission Bypass via checksum |
filebrowser |
filebrowser |
2026-08-14T11:35:40.049Z | 2026-08-14T16:52:16.192Z |
| cve-2026-72833 | 8.7 (v4.0) 8.8 (v3.1) | Grav 1.0.6 through 1.0.11 Privilege Escalation via Sco… |
getgrav |
grav |
2026-08-14T11:35:39.243Z | 2026-08-17T16:08:47.630Z |
| cve-2026-72832 | 5.1 (v4.0) 5.4 (v3.1) | Grav before 2.0.12 Stored XSS via quoted-attribute bypass |
getgrav |
grav |
2026-08-14T11:35:38.484Z | 2026-08-14T14:38:24.175Z |
| cve-2026-72831 | 8.7 (v4.0) 8.8 (v3.1) | Grav through 2.0.11 Authentication Bypass via Flex Objects |
getgrav |
grav |
2026-08-14T11:35:37.801Z | 2026-08-28T15:18:30.795Z |
| cve-2026-72830 | 8.7 (v4.0) 8.8 (v3.1) | Grav API Plugin before 1.0.13 RCE via ConfigController… |
getgrav |
grav |
2026-08-14T11:35:37.166Z | 2026-08-24T10:28:33.958Z |
| cve-2026-72829 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via UsersController |
getgrav |
grav |
2026-08-14T11:35:36.482Z | 2026-08-24T10:28:33.284Z |
| cve-2026-72828 | 8.6 (v4.0) 7.2 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via Invitation… |
getgrav |
grav |
2026-08-14T11:35:35.810Z | 2026-08-17T16:08:58.522Z |
| cve-2026-72827 | 8.7 (v4.0) 8.8 (v3.1) | Grav CMS before 2.0.13 Remote Code Execution via Twig |
getgrav |
grav |
2026-08-14T11:35:35.138Z | 2026-08-14T14:41:54.451Z |
| cve-2026-72826 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Scope Bypass via createApiKey |
getgrav |
grav |
2026-08-14T11:35:34.460Z | 2026-08-24T10:28:32.568Z |
| cve-2026-72825 | 7.2 (v4.0) 7.6 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via Report… |
getgrav |
grav |
2026-08-14T11:35:33.800Z | 2026-08-14T17:59:38.432Z |
| cve-2026-72824 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 API Key Scope Bypass via PagesController |
getgrav |
grav |
2026-08-14T11:35:33.122Z | 2026-08-24T10:28:31.860Z |
| cve-2026-72823 | 5.3 (v4.0) 5.4 (v3.1) | Grav before 1.0.13 API-key scope cap bypass via DemoCo… |
getgrav |
grav |
2026-08-14T11:35:32.238Z | 2026-08-17T16:09:06.929Z |
| cve-2026-72822 | 8.7 (v4.0) 8.8 (v3.1) | Grav before 1.0.13 Authentication Bypass via disable2fa |
getgrav |
grav |
2026-08-14T11:35:31.592Z | 2026-08-24T10:28:31.192Z |
| cve-2026-72821 | 5.1 (v4.0) 5.4 (v3.1) | Grav Form Plugin before 9.1.15 Stored XSS via Radio Toggle |
getgrav |
grav |
2026-08-14T11:35:30.847Z | 2026-08-18T01:56:55.524Z |
| cve-2026-72820 | 6.9 (v4.0) 4.9 (v3.1) | Grav 2.0.11 Path Traversal via Backup Profile Configuration |
getgrav |
grav |
2026-08-14T11:35:30.155Z | 2026-08-14T18:05:45.073Z |
| cve-2026-72819 | 8.7 (v4.0) 8.8 (v3.1) | Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload |
getgrav |
grav |
2026-08-14T11:35:29.507Z | 2026-08-14T14:44:04.272Z |
| cve-2026-72817 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwar… |
go-chi |
chi |
2026-08-14T11:35:28.824Z | 2026-08-17T16:09:15.028Z |
| cve-2026-72816 | 6.9 (v4.0) 6.5 (v3.1) | go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware |
go-chi |
chi |
2026-08-14T11:35:28.145Z | 2026-08-14T15:22:35.592Z |
| cve-2026-72815 | 6.9 (v4.0) | go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header |
go-chi |
chi |
2026-08-14T11:35:27.496Z | 2026-08-18T01:55:20.208Z |
| cve-2026-72814 | 6.3 (v4.0) | actix-web before 0.6.10 Information Disclosure via Files |
actix |
actix-web |
2026-08-14T11:35:26.816Z | 2026-08-14T19:39:40.649Z |
| cve-2026-72813 | 6.9 (v4.0) | actix-files before 0.6.10 Denial of Service via empty … |
actix |
actix-web |
2026-08-14T11:35:26.123Z | 2026-08-14T14:41:51.141Z |
| cve-2026-72812 | 6.9 (v4.0) 6.5 (v3.1) | SiYuan before v3.7.4 Missing Authorization via refresh… |
siyuan-note |
siyuan |
2026-08-14T11:35:25.455Z | 2026-08-17T16:09:23.114Z |
| cve-2026-72811 | 9.9 (v4.0) 10 (v3.1) | SiYuan before v3.7.4 SQL Injection via backlink search |
siyuan-note |
siyuan |
2026-08-14T11:35:24.767Z | 2026-08-14T16:52:14.903Z |
| cve-2026-72810 | 9.2 (v4.0) 8.6 (v3.1) | SiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket |
siyuan-note |
siyuan |
2026-08-14T11:35:24.086Z | 2026-08-18T02:26:57.244Z |
| cve-2025-71405 | 5.1 (v4.0) | go-chi chi before v5.2.2 Open Redirect via RedirectSlashes |
go-chi |
chi |
2026-08-14T11:35:23.411Z | 2026-08-14T18:57:43.537Z |
| cve-2026-19822 | Tenda W20E QoS Edit editQos lstAdd stack-based overflow |
Tenda |
W20E |
2026-08-14T11:30:11.772Z | 2026-08-14T14:53:31.615Z | |
| cve-2026-19821 | Tenda AC12 httpd web management interface SetSysAutoRe… |
Tenda |
AC12 |
2026-08-14T11:00:10.537Z | 2026-08-18T01:53:10.669Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-112 | Vulnérabilité de yppasswd | 2001-10-08T00:00:00.000000 | 2001-10-08T00:00:00.000000 |
| certa-2001-avi-111 | Vulnérabilité dans les logiciels Excel et PowerPoint de Microsoft | 2001-10-05T00:00:00.000000 | 2001-10-05T00:00:00.000000 |
| certa-2001-avi-110 | Vulnérabilité de Network Node Manager sous HP Openview | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-109 | Vulnérabilité dans <TT>rpcbind</TT> sous HP | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-108 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-107 | Vulnérabilité dans le service RPC ToolTalk | 2001-10-04T00:00:00.000000 | 2001-12-07T00:00:00.000000 |
| certa-2001-avi-106 | Multiples vulnérabilités dans Sendmail | 2001-10-02T00:00:00.000000 | 2001-10-02T00:00:00.000000 |
| certa-2001-avi-105 | Vulnérabilité dans les agents de supervision Compaq | 2001-10-01T00:00:00.000000 | 2001-10-01T00:00:00.000000 |
| certa-2001-avi-104 | Vulnérabilités multiples dans l'implémentation OpenSSH du protocole SSH v2 | 2001-09-28T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-103 | Vulnérabilité dans le proxy Squid | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-102 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-101 | Vulnérabilité dans le paquetage setserial | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-100 | Vulnérabilité de Microsoft Exchange 2000 Server Outlook Web Access | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-099 | Vulnérabilité dans ArcServe pour Windows NT | 2001-09-25T00:00:00.000000 | 2001-09-25T00:00:00.000000 |
| certa-2001-avi-098 | Vulnérabilités dans le logiciel Interscan eManager de Trend Micro | 2001-09-24T00:00:00.000000 | 2001-09-24T00:00:00.000000 |
| certa-2001-avi-097 | Vulnérabilités de SSH sur CISCO | 2001-09-21T00:00:00.000000 | 2001-09-21T00:00:00.000000 |
| certa-2001-avi-096 | Serveurs DNS Microsoft : corruption de cache possible. | 2001-09-20T00:00:00.000000 | 2001-09-20T00:00:00.000000 |
| certa-2001-avi-095 | Vulnérabilité des <SPAN class= "textit">daemons</SPAN> <TT>smap/smapd</TT> ( ou <TT>CSMAP</TT>) | 2001-09-13T00:00:00.000000 | 2001-09-13T00:00:00.000000 |
| certa-2001-avi-094 | Attaques non détectées par certains IDS | 2001-09-13T00:00:00.000000 | 2001-09-13T00:00:00.000000 |
| certa-2001-avi-093 | Vulnérabilité dans le serveur RPC sous Windows NT 4.0 | 2001-09-12T00:00:00.000000 | 2001-09-12T00:00:00.000000 |
| certa-2001-avi-092 | Vulnérabilité dans Microsoft Exchange 5.5 | 2001-09-07T00:00:00.000000 | 2001-09-07T00:00:00.000000 |
| certa-2001-avi-091 | Vulnérabilité de rlpdaemon sous HP-UX | 2001-09-05T00:00:00.000000 | 2001-09-05T00:00:00.000000 |
| certa-2001-avi-090 | Vulnérabilité de in.lpd sous Solaris | 2001-09-03T00:00:00.000000 | 2001-09-03T00:00:00.000000 |
| certa-2001-avi-089 | Vulnérabilités dans le service d'impression BSD | 2001-08-31T00:00:00.000000 | 2001-11-19T00:00:00.000000 |
| certa-2001-avi-088 | Vulnérabilité de SnmpXdmid sur Sun | 2001-08-31T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2001-avi-087 | Vulnérabilité de HP Openview NNM | 2001-08-28T00:00:00.000000 | 2001-08-28T00:00:00.000000 |
| certa-2001-avi-086 | Multiples vulnérabilités dans Cisco CBOS | 2001-08-27T00:00:00.000000 | 2001-08-27T00:00:00.000000 |
| certa-2001-avi-085 | Vulnérabilité dans sendmail | 2001-08-23T00:00:00.000000 | 2001-08-23T00:00:00.000000 |
| certa-2001-avi-084 | Vulnérabilité dans les serveurs RPC sous Windows | 2001-07-27T00:00:00.000000 | 2002-04-24T00:00:00.000000 |
| certa-2001-avi-083 | Débordement de mémoire de Windows Media Player | 2001-07-27T00:00:00.000000 | 2001-07-27T00:00:00.000000 |