Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77083 | 6 (v4.0) | n8n before 1.123.69 Code Node Sandbox Escape via Funct… |
n8n-io |
n8n |
2026-08-20T11:21:14.377Z | 2026-08-21T11:21:22.795Z |
| cve-2026-77081 | 5.1 (v4.0) | n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node |
n8n-io |
n8n |
2026-08-20T11:21:13.006Z | 2026-08-21T11:21:21.502Z |
| cve-2026-77080 | 8.7 (v4.0) | n8n before 1.123.69 Arbitrary File Read and Write via … |
n8n-io |
n8n |
2026-08-20T11:21:12.357Z | 2026-08-21T11:21:20.831Z |
| cve-2026-77077 | 7.2 (v4.0) | n8n before 1.123.69 Remote Code Execution via EventEmi… |
n8n-io |
n8n |
2026-08-20T11:21:10.939Z | 2026-08-21T11:21:19.488Z |
| cve-2026-77075 | 8.4 (v4.0) | n8n before 1.123.69 Expression Injection via Resource … |
n8n-io |
n8n |
2026-08-20T11:21:09.583Z | 2026-08-21T11:21:18.192Z |
| cve-2026-77074 | 6 (v4.0) | n8n before 1.123.69 SSRF via Edit Image Node |
n8n-io |
n8n |
2026-08-20T11:21:08.910Z | 2026-08-21T11:21:17.551Z |
| cve-2026-77072 | 8.4 (v4.0) | n8n before 1.123.69 Stored XSS via Form Completion Page |
n8n-io |
n8n |
2026-08-20T11:21:07.588Z | 2026-08-21T11:21:16.263Z |
| cve-2026-77070 | 7.1 (v4.0) | n8n before 1.123.69 NoSQL Injection via MongoDB Node |
n8n-io |
n8n |
2026-08-20T11:21:06.262Z | 2026-08-21T11:21:14.972Z |
| cve-2026-77069 | 2.3 (v4.0) | n8n before 1.123.69 SSRF Protection Bypass via OAuth2 |
n8n-io |
n8n |
2026-08-20T11:21:05.599Z | 2026-08-21T11:21:14.301Z |
| cve-2026-76850 | 9.3 (v4.0) 9.8 (v3.1) | LMDeploy Remote Code Execution via Unsafe Pickle Deser… |
InternLM |
lmdeploy |
2026-08-19T21:41:28.068Z | 2026-08-21T11:21:12.965Z |
| cve-2026-76641 | 8.7 (v4.0) 7.5 (v3.1) | Expat Out-of-Bounds Read via dtdCopy |
libexpat |
libexpat |
2026-08-20T17:31:10.610Z | 2026-08-21T11:21:12.314Z |
| cve-2026-76239 | 5.3 (v4.0) 6.3 (v3.1) | Stigmem before 0.9.0a11 SSRF via unvalidated webhook d… |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:17.336Z | 2026-08-21T11:21:10.397Z |
| cve-2026-76237 | 8.6 (v4.0) | stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine |
eidetic-labs |
stigmem-node |
2026-08-19T14:02:15.899Z | 2026-08-21T11:21:09.073Z |
| cve-2026-76234 | 8.7 (v4.0) 7.5 (v3.1) | libcrux before 0.0.6 Cryptographic Implementation Bug Fixes |
celabshq |
libcrux-ecdh |
2026-08-19T14:02:14.481Z | 2026-08-21T11:21:07.741Z |
| cve-2026-76226 | 6.8 (v4.0) 6.3 (v3.1) | Renovate 43.65.0 through 43.102.11 Remote Code Executi… |
renovatebot |
renovate |
2026-08-19T14:02:08.689Z | 2026-08-21T11:21:07.057Z |
| cve-2026-76214 | 9.1 (v4.0) 7.4 (v3.1) | phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge |
thorsten |
phpMyFAQ |
2026-08-19T14:01:59.917Z | 2026-08-21T11:21:06.337Z |
| cve-2026-75898 | 8.4 (v4.0) 8.5 (v3.1) | RAGFlow < 0.26.3 - Server-Side Request Forgery via Age… |
infiniflow |
ragflow |
2026-08-18T14:24:06.089Z | 2026-08-21T11:21:04.965Z |
| cve-2026-75583 | 2.3 (v4.0) 3.5 (v3.1) | keeper.sh Calendar version prior to 2.18.14 SSRF Guard… |
ridafkih |
keeper.sh |
2026-08-19T16:35:53.999Z | 2026-08-21T11:21:04.300Z |
| cve-2026-75148 | 6.9 (v4.0) 6.1 (v3.1) | cgltf 1.15 Integer Overflow via cgltf_validate() Acces… |
jkuhlmann |
cgltf |
2026-08-19T13:37:42.321Z | 2026-08-21T11:21:02.923Z |
| cve-2026-75140 | 8.7 (v4.0) 7.5 (v3.1) | jsoup Uncontrolled Resource Consumption in XmlTreeBuilder |
jhy |
soup |
2026-08-20T15:56:50.377Z | 2026-08-21T11:21:02.259Z |
| cve-2026-75106 | 9.3 (v4.0) 9.1 (v3.1) | OpnForm Editable Submission Secret Derivation via Empt… |
OpnForm |
OpnForm |
2026-08-17T20:36:02.092Z | 2026-08-21T11:21:01.592Z |
| cve-2026-75105 | 8.7 (v4.0) 7.5 (v3.1) | phpIPAM Temporary Subnet Share Information Disclosure … |
phpipam |
phpipam |
2026-08-17T20:36:01.403Z | 2026-08-21T11:21:00.953Z |
| cve-2026-72818 | 8.7 (v4.0) 7.5 (v3.1) | NLTK TweetTokenizer URL Pattern Backtracks Catastrophi… |
nltk |
nltk |
2026-08-20T21:57:34.230Z | 2026-08-21T11:20:57.674Z |
| cve-2026-71518 | 8.7 (v4.0) 7.5 (v3.1) | Typemill < 2.26.0 Authorization Bypass via Media File … |
typemill |
typemill |
2026-08-17T21:05:10.836Z | 2026-08-21T11:20:57.023Z |
| cve-2026-68765 | 5.2 (v4.0) 6.1 (v3.1) | hashcat KeePass KDBX v4 Module Heap Buffer Overflow vi… |
hashcat |
hashcat |
2026-08-17T20:48:17.215Z | 2026-08-21T11:20:56.382Z |
| cve-2026-66046 | 8.7 (v4.0) 7.5 (v3.1) | Expat Denial of Service via storeAtts() Quadratic Complexity |
libexpat project |
libexpat |
2026-08-18T14:10:05.176Z | 2026-08-21T11:20:55.742Z |
| cve-2026-63722 | 8.7 (v4.0) 9.8 (v3.1) | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php |
ICEcoder |
ICEcoder |
2026-08-19T19:13:45.090Z | 2026-08-21T11:20:55.075Z |
| cve-2026-40509 | 5.3 (v4.0) 4.3 (v3.1) | OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter |
openemr |
openemr |
2026-08-19T14:53:21.612Z | 2026-08-21T11:20:53.071Z |
| cve-2026-40508 | 5.1 (v4.0) 5.4 (v3.1) | OpenEMR < 8.3.0 Stored XSS via Patient Portal Template… |
openemr |
openemr |
2026-08-19T14:51:01.748Z | 2026-08-21T11:20:52.421Z |
| cve-2026-40506 | 7 (v4.0) 6.5 (v3.1) | OpenEMR Path Traversal Arbitrary Directory Deletion vi… |
openemr |
openemr |
2026-08-17T20:39:03.333Z | 2026-08-21T11:20:51.181Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-064 | Vulnérabilité dans le serveur d'indéxation Windows | 2001-06-19T00:00:00.000000 | 2001-06-19T00:00:00.000000 |
| certa-2001-avi-063 | Vulnérabilité de MS SQL Server | 2001-06-13T00:00:00.000000 | 2001-06-13T00:00:00.000000 |
| certa-2001-avi-062 | Vulnérabilité de Xinetd | 2001-06-11T00:00:00.000000 | 2001-06-11T00:00:00.000000 |
| certa-2001-avi-061 | Vulnérabilité de Qpopper | 2001-06-08T00:00:00.000000 | 2001-06-08T00:00:00.000000 |
| certa-2001-avi-060 | Multiples vulnérabilités du service telnet sous Windows 2000 | 2001-06-08T00:00:00.000000 | 2001-06-08T00:00:00.000000 |
| certa-2001-avi-059 | Vulnérabilité d'Exchange 2000 | 2001-06-07T00:00:00.000000 | 2001-06-07T00:00:00.000000 |
| certa-2001-avi-058 | Vulnérabilités dans Windows Media Player | 2001-05-29T00:00:00.000000 | 2001-05-29T00:00:00.000000 |
| certa-2001-avi-057 | Vulnérabilité dans IOS version 12.1(2)T et 12.1(3)T | 2001-05-25T00:00:00.000000 | 2001-05-25T00:00:00.000000 |
| certa-2001-avi-056 | Vulnérabilité dans Word lors de l'ouverture de documents RTF | 2001-05-22T00:00:00.000000 | 2001-05-22T00:00:00.000000 |
| certa-2001-avi-055 | Vulnérabilités dans Internet Explorer 5.01 et 5.5 | 2001-05-18T00:00:00.000000 | 2001-05-18T00:00:00.000000 |
| certa-2001-avi-054 | Vulnérabilité de ESP sous SGI IRIX | 2001-05-15T00:00:00.000000 | 2001-05-15T00:00:00.000000 |
| certa-2001-avi-053 | Vulnérabilités dans Microsoft IIS 4.0 et 5.0 | 2001-05-15T00:00:00.000000 | 2001-05-15T00:00:00.000000 |
| certa-2001-avi-052 | Vulnérabilité du protocole HSRP sur les routeurs CISCO | 2001-05-14T00:00:00.000000 | 2001-05-14T00:00:00.000000 |
| certa-2001-avi-051 | Vulnérabilité de Vixie Cron | 2001-05-14T00:00:00.000000 | 2001-05-14T00:00:00.000000 |
| certa-2001-avi-050 | Vulnérabilités dans le serveur d'indexation Windows | 2001-05-11T00:00:00.000000 | 2001-05-11T00:00:00.000000 |
| certa-2001-avi-049 | Déni de service sur le contrôleur de domaine Windows 2000 | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| certa-2001-avi-048 | Vulnérabilité dans Microsoft IIS 5.0 | 2001-05-02T00:00:00.000000 | 2001-05-02T00:00:00.000000 |
| certa-2001-avi-047 | Vulnérabilité dans IPTables sous linux 2.4 | 2001-04-27T00:00:00.000000 | 2001-04-27T00:00:00.000000 |
| certa-2001-avi-046 | Vulnérabilité dans WebDAV Service Provider | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-044 | Vulnérabilité dans Microsoft ISA Server 2000 | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-043 | Vulnérabilité de la fonction glob() dans les serveurs FTP | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-042 | Vulnérabilité dans les commutateurs CISCO CSS 11050, 11150 et 11800 | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-040 | Vulnérabilité dans les concentrateurs CISCO VPN3000 | 2001-03-29T00:00:00.000000 | 2001-03-29T00:00:00.000000 |
| certa-2001-avi-039 | Vulnérabilité dans la protection des fichiers compressés sous Windows Plus!98 et Me | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-038 | Vulnérabilité dans Microsoft Visual Studio 6.0 | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-037 | Vulnérabilité des logiciels d'administration à distance de Compaq | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-036 | Certificats erronés délivrés par VeriSign | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-035 | Vulnérabilité de pcAnywhere. | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-034 | Vulnérabilité du serveur web Apache | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-033 | Vulnérabilité dans Mailsweeper version 4.2 | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |