Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-19752 | EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts p… |
EnzoVezzaro |
mcp-dominican-layer |
2026-08-13T22:00:11.477Z | 2026-08-14T15:03:28.224Z | |
| cve-2026-73842 | OpenChoreo: cluster-gateway internal proxy performs no… |
openchoreo |
openchoreo |
2026-08-13T21:59:24.390Z | 2026-08-18T01:44:27.659Z | |
| cve-2026-56860 | N/A | Avoid quadratic complexity in resolvePath in net/url |
Go standard library |
net/url |
2026-08-13T21:58:53.731Z | 2026-08-14T16:14:39.166Z |
| cve-2026-56864 | N/A | Ignore unrelated, unauthenticated hashes in Lookup in … |
Go toolchain |
cmd/go |
2026-08-13T21:58:53.605Z | 2026-08-14T16:16:42.248Z |
| cve-2026-56865 | N/A | Fix transparency log tile verification bypass in golan… |
Go toolchain |
cmd/go |
2026-08-13T21:58:53.475Z | 2026-08-14T15:34:17.235Z |
| cve-2026-56858 | N/A | Fix Javascript regexp context tracking in html/template |
Go standard library |
html/template |
2026-08-13T21:58:53.354Z | 2026-08-14T15:32:29.852Z |
| cve-2026-56862 | N/A | Limit handshake messages we are willing to accept post… |
Go standard library |
crypto/tls |
2026-08-13T21:58:53.216Z | 2026-08-14T15:29:41.741Z |
| cve-2026-56853 | N/A | Apply ReadHeaderTimeout when doing unencrypted HTTP/2 … |
Go standard library |
net/http |
2026-08-13T21:58:53.092Z | 2026-08-14T15:23:18.680Z |
| cve-2026-56859 | N/A | Add recursion depth guard during decode in encoding/xml |
Go standard library |
encoding/xml |
2026-08-13T21:58:52.959Z | 2026-08-14T15:21:46.218Z |
| cve-2026-33818 | N/A | Enforce maximum recursion depth in encoding/asn1 |
Go standard library |
encoding/asn1 |
2026-08-13T21:58:52.821Z | 2026-09-17T17:35:10.847Z |
| cve-2026-73841 | OpenChoreo: Cross-project command execution and wirelo… |
openchoreo |
openchoreo |
2026-08-13T21:56:13.057Z | 2026-09-02T15:16:54.694Z | |
| cve-2026-72857 | 8.3 (v4.0) 7.7 (v3.1) | Budibase before 3.40.0 Credential Exposure via STRING Fields |
Budibase |
budibase |
2026-08-13T21:54:45.984Z | 2026-08-14T16:12:55.091Z |
| cve-2026-72856 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.40.0 Authentication Bypass via Tenan… |
Budibase |
budibase |
2026-08-13T21:54:45.304Z | 2026-08-17T16:09:39.599Z |
| cve-2026-72855 | 8.4 (v4.0) 8.5 (v3.1) | Budibase before 3.40.0 DNS Rebinding SSRF via OpenAPI … |
budibase |
server |
2026-08-13T21:54:44.625Z | 2026-08-14T16:21:40.818Z |
| cve-2026-72853 | 8.8 (v4.0) 7.6 (v3.1) | Budibase before 3.40.0 SQL Injection via Oracle connector |
Budibase |
budibase |
2026-08-13T21:54:43.945Z | 2026-08-18T01:43:22.355Z |
| cve-2026-72851 | 9 (v4.0) 10 (v3.1) | Budibase before 3.40.0 SQL Injection via Unauthenticat… |
budibase |
server |
2026-08-13T21:54:43.318Z | 2026-08-14T19:02:13.105Z |
| cve-2026-72850 | 9.4 (v4.0) 9.1 (v3.1) | Budibase before 3.40.0 Arbitrary File Write via Path T… |
budibase |
server |
2026-08-13T21:54:42.651Z | 2026-08-14T16:14:04.242Z |
| cve-2026-72849 | 8.7 (v4.0) 7.7 (v3.1) | Budibase before 3.40.0 Identity Confusion via Chat-Lin… |
budibase |
server |
2026-08-13T21:54:41.963Z | 2026-08-17T16:09:46.969Z |
| cve-2026-72842 | 9.4 (v4.0) 9.9 (v3.1) | OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass |
openwrt |
luci |
2026-08-13T21:54:41.307Z | 2026-08-14T16:52:21.458Z |
| cve-2026-72841 | 9.4 (v4.0) 9.9 (v3.1) | luci-app-openvpn Path Traversal RCE via instance_name2 |
openwrt |
luci |
2026-08-13T21:54:40.631Z | 2026-08-18T01:42:17.156Z |
| cve-2026-72840 | 8.7 (v4.0) 8.8 (v3.1) | OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via C… |
openwrt |
luci |
2026-08-13T21:54:39.948Z | 2026-08-14T19:03:37.329Z |
| cve-2026-72839 | 9.3 (v4.0) 9.8 (v3.1) | filebrowser through 2.63.16 Privilege Escalation via Signup |
filebrowser |
filebrowser |
2026-08-13T21:54:39.242Z | 2026-08-14T16:52:19.479Z |
| cve-2026-73840 | OpenChoreo: Unauthenticated build/workflow trigger via… |
openchoreo |
openchoreo |
2026-08-13T21:52:27.798Z | 2026-08-14T16:26:09.846Z | |
| cve-2026-19751 | EnzoVezzaro mcp-dominican-layer parse-csv tool index.t… |
EnzoVezzaro |
mcp-dominican-layer |
2026-08-13T21:45:08.825Z | 2026-08-18T13:39:43.702Z | |
| cve-2026-73667 | OpenChoreo: Authenticated OS command injection via Ope… |
openchoreo |
openchoreo |
2026-08-13T21:43:43.895Z | 2026-08-17T17:18:14.029Z | |
| cve-2026-73666 | OpenChoreo: Unauthenticated Backstage developer-portal… |
openchoreo |
backstage-plugins |
2026-08-13T21:40:13.597Z | 2026-08-14T18:06:57.292Z | |
| cve-2026-73039 | 5.3 (v4.0) 5.4 (v3.1) | streama Insecure Direct Object Reference via ViewingSt… |
streamaserver |
streama |
2026-08-13T21:34:04.344Z | 2026-08-14T18:07:09.070Z |
| cve-2026-73665 | FreePBX UCP: Unauthenticated remote code execution via… |
FreePBX |
ucp |
2026-08-13T21:32:02.059Z | 2026-08-18T01:41:24.526Z | |
| cve-2026-73664 | FreePBX: Authenticated Arbitrary SSH Key Injection via… |
FreePBX |
backup |
2026-08-13T21:30:37.573Z | 2026-08-14T16:16:24.751Z | |
| cve-2026-19750 | Tenda CH/CP/TX3 SSH hard-coded password |
Tenda |
CH |
2026-08-13T21:30:09.762Z | 2026-08-14T16:17:43.059Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-021 | Vulnérabilité sous Microsoft Outlook et Outlook Express | 2001-02-23T00:00:00.000000 | 2001-02-23T00:00:00.000000 |
| certa-2001-avi-020 | Vulnérabilité dans le contrôleur de domaine de Windows 2000 Server | 2001-02-21T00:00:00.000000 | 2001-02-21T00:00:00.000000 |
| certa-2001-avi-019 | Vulnérabilité de Vixie-cron sous Unix | 2001-02-21T00:00:00.000000 | 2001-02-21T00:00:00.000000 |
| certa-2001-avi-018 | Vulnérabilité sous Windows NT 4 dans le protocole PPTP | 2001-02-14T00:00:00.000000 | 2001-02-14T00:00:00.000000 |
| certa-2001-avi-017 | Vulnérabilité de SSH | 2001-02-12T00:00:00.000000 | 2001-02-12T00:00:00.000000 |
| certa-2001-avi-016 | Vulnérabilité des logiciels d'administration à distance de Compaq | 2001-02-12T00:00:00.000000 | 2001-02-12T00:00:00.000000 |
| certa-2001-avi-015 | Vulnérabilité de Windows NT 4 dans l'authentification NTLM | 2001-02-08T00:00:00.000000 | 2001-02-08T00:00:00.000000 |
| certa-2001-avi-014 | Vulnérabilité de l'agent NDDE de Microsoft Windows | 2001-02-07T00:00:00.000000 | 2001-02-07T00:00:00.000000 |
| certa-2001-avi-013 | Vulnérabilités sur les commutateurs CISCO série CSS | 2001-02-05T00:00:00.000000 | 2001-02-05T00:00:00.000000 |
| certa-2001-avi-012 | Vulnérabilité dans le protocole RDP sous Windows 2000 | 2001-02-01T00:00:00.000000 | 2001-02-01T00:00:00.000000 |
| certa-2001-avi-011 | Vulnérabilités de MySQL 3.23.31 et du module PHP d'apache sous Linux | 2001-01-31T00:00:00.000000 | 2001-01-31T00:00:00.000000 |
| certa-2001-avi-010 | Multiples vulnérabilités dans le serveur DNS BIND | 2001-01-30T00:00:00.000000 | 2001-11-30T00:00:00.000000 |
| certa-2001-avi-009 | Vulnérabilité dans les permissions d'accès sous Windows NT 4 | 2001-01-30T00:00:00.000000 | 2001-01-30T00:00:00.000000 |
| certa-2001-avi-008 | Vulnérabilité sous Lotus Notes (Domino 5) | 2001-01-25T00:00:00.000000 | 2001-01-25T00:00:00.000000 |
| certa-2001-avi-007 | Mise à jour de Wu-FTPd | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| certa-2001-avi-006 | Vulnérabilité sous Microsoft Power Point 2000 | 2001-01-24T00:00:00.000000 | 2001-01-24T00:00:00.000000 |
| certa-2001-avi-005 | Vulnérabilité du système d'internationalisation sous SGI Irix. | 2001-01-19T00:00:00.000000 | 2001-01-19T00:00:00.000000 |
| certa-2001-avi-004 | Vulnérabilité dans ARP sous SunOS | 2001-01-15T00:00:00.000000 | 2001-01-15T00:00:00.000000 |
| certa-2001-avi-003 | Accès privilégié oublié dans le code de Interbase Server de Borland | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2001-avi-002 | Vulnérabilité de l'authentification NTLM sous Windows | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2001-avi-001 | Vulnérabilité de Lotus Domino 5 | 2001-01-12T00:00:00.000000 | 2001-01-12T00:00:00.000000 |
| certa-2011-avi-005 | Multiples vulnérabilités dans evince | 2001-01-11T00:00:00.000000 | 2011-01-07T00:00:00.000000 |
| certa-2000-avi-093 | Vulnérabilité sous Microsoft IIS (Extensions FrontPage) | 2000-12-28T00:00:00.000000 | 2000-12-28T00:00:00.000000 |
| certa-2000-avi-092 | Vulnérabilités de Solaris | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-091 | Vulnérabilité de « Fast Mode » sous Firewall-1 | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-090 | Vulnérabilité dans le serveur d'indexation sous Microsoft | 2000-12-20T00:00:00.000000 | 2000-12-20T00:00:00.000000 |
| certa-2000-avi-089 | Vulnérabilité dans le serveur Média Windows | 2000-12-18T00:00:00.000000 | 2000-12-18T00:00:00.000000 |
| certa-2000-avi-088 | Vulnérabilité dans le service SSH des commutateurs CISCO 4000, 5000 ET 6000 | 2000-12-14T00:00:00.000000 | 2000-12-14T00:00:00.000000 |
| certa-2000-avi-087 | Problèmes de validation pour LPRng | 2000-12-13T00:00:00.000000 | 2000-12-13T00:00:00.000000 |
| certa-2000-avi-086 | Vulnérabilité dans les commutateurs CISCO Catalyst 4000, 5000 et 6000 | 2000-12-08T00:00:00.000000 | 2000-12-08T00:00:00.000000 |