Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79200 | N/A | Use after free in Aura in Google Chrome prior to … |
Google |
Chrome |
2026-08-25T20:09:58.762Z | 2026-08-27T03:56:10.528Z |
| cve-2026-79012 | N/A | Use after free in Safebrowsing in Google Chrome o… |
Google |
Chrome |
2026-08-25T20:09:58.541Z | 2026-08-27T03:56:11.966Z |
| cve-2026-78935 | N/A | Use of uninitialized variable in Mobile in Google… |
Google |
Chrome |
2026-08-25T20:09:58.351Z | 2026-08-27T03:57:28.807Z |
| cve-2026-79150 | N/A | Use after free in Views in Google Chrome on on Ma… |
Google |
Chrome |
2026-08-25T20:09:58.155Z | 2026-08-27T03:56:13.143Z |
| cve-2026-79052 | N/A | Use after free in Aura in Google Chrome prior to … |
Google |
Chrome |
2026-08-25T20:09:57.909Z | 2026-08-27T03:56:14.282Z |
| cve-2026-79224 | N/A | Use after free in Chromecast in Google Chrome pri… |
Google |
Chrome |
2026-08-25T20:09:57.714Z | 2026-08-27T03:56:15.441Z |
| cve-2026-79121 | N/A | Improper input validation in Chromecast in Google… |
Google |
Chrome |
2026-08-25T20:09:57.452Z | 2026-08-27T03:57:51.144Z |
| cve-2026-79054 | N/A | Use after free in Chromecast in Google Chrome pri… |
Google |
Chrome |
2026-08-25T20:09:57.261Z | 2026-08-27T03:56:16.645Z |
| cve-2026-79290 | N/A | Use after free in Aura in Google Chrome prior to … |
Google |
Chrome |
2026-08-25T20:09:57.061Z | 2026-08-27T03:56:17.762Z |
| cve-2026-79282 | N/A | Use after free in ANGLE in Google Chrome on on An… |
Google |
Chrome |
2026-08-25T20:09:56.717Z | 2026-08-27T03:56:18.882Z |
| cve-2026-77585 | Improper Validation of SSH Target in Okta Privileged A… |
Okta |
Okta Privileged Access Client |
2026-08-25T20:07:20.216Z | 2026-08-26T19:46:42.424Z | |
| cve-2026-74932 | WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Sto… |
Unknown |
WP Fastest Cache |
2026-08-25T20:05:20.084Z | 2026-08-26T14:43:11.140Z | |
| cve-2026-66153 | N/A | The NEService auto-upgrade process insecurely han… |
SonicWall |
NetExtender |
2026-08-25T20:01:15.598Z | 2026-08-27T03:55:46.887Z |
| cve-2026-66152 | N/A | A Path traversal vulnerability in the SonicWall N… |
SonicWall |
NetExtender |
2026-08-25T19:58:47.474Z | 2026-08-31T16:20:07.120Z |
| cve-2026-59981 | OpenEXR: Heap OOB read in SampleCountChannel row when … |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:58:37.163Z | 2026-08-28T22:35:31.879Z | |
| cve-2026-68514 | OpenEXR: Heap buffer overflow in PyOpenEXR from litera… |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:40:04.340Z | 2026-08-26T12:45:20.665Z | |
| cve-2026-68515 | OpenEXR: Heap out-of-bounds write in exrmultiview with… |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:34:15.496Z | 2026-08-26T14:47:10.539Z | |
| cve-2026-55099 | icalendar: Algorithmic Complexity in Equality |
collective |
icalendar |
2026-08-25T19:27:02.236Z | 2026-08-26T15:05:26.062Z | |
| cve-2026-65367 | N/A | A null pointer dereference was addressed with imp… |
Apple |
iOS and iPadOS |
2026-08-25T19:24:55.493Z | 2026-08-26T00:22:36.758Z |
| cve-2026-64705 | N/A | A buffer overflow was addressed with improved bou… |
Apple |
macOS |
2026-08-25T19:24:53.777Z | 2026-08-26T00:22:03.076Z |
| cve-2026-43657 | N/A | A permissions issue was addressed with additional… |
Apple |
iOS and iPadOS |
2026-08-25T19:24:52.020Z | 2026-08-26T00:21:24.132Z |
| cve-2026-43670 | N/A | A Content Security Policy bypass was addressed wi… |
Apple |
Safari |
2026-08-25T19:24:48.151Z | 2026-08-26T14:03:06.317Z |
| cve-2026-45019 | Chainlit: SSRF via MCP SSE and streamable-http transpo… |
Chainlit |
chainlit |
2026-08-25T19:20:59.339Z | 2026-08-27T14:35:27.308Z | |
| cve-2026-45018 | Chainlit: Command injection via MCP stdio transport al… |
Chainlit |
chainlit |
2026-08-25T19:18:46.439Z | 2026-08-25T19:33:30.993Z | |
| cve-2026-68513 | OpenEXR: Heap buffer overflow in PyOpenEXR from litera… |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:06:11.692Z | 2026-08-28T22:34:26.075Z | |
| cve-2026-78379 | 9.2 (v4.0) 8.1 (v3.1) | Consent bypass in python_repl tool via batch kwargs fo… |
Amazon |
strands-agents-tools |
2026-08-25T19:05:57.779Z | 2026-08-25T19:20:51.512Z |
| cve-2026-65979 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unva… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:58:25.871Z | 2026-08-25T19:16:25.169Z | |
| cve-2026-55609 | sublinear-time-solver: Arbitrary file write in conscio… |
ruvnet |
sublinear-time-solver |
2026-08-25T18:34:47.633Z | 2026-08-26T15:41:54.869Z | |
| cve-2026-62986 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:27:19.057Z | 2026-08-25T19:20:04.216Z | |
| cve-2026-55620 | eml_parser: DoS via deeply nested parens in Received headers |
GOVCERT-LU |
eml_parser |
2026-08-25T18:26:54.978Z | 2026-08-26T15:34:18.389Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-000030 | a-News from Appleple vulnerable to cross-site scripting | 2009-05-22T14:31+09:00 | 2009-05-22T14:31+09:00 |
| jvndb-2009-000029 | HP System Management Homepage vulnerable to cross-site scripting | 2009-05-20T16:01+09:00 | 2009-05-20T16:01+09:00 |
| jvndb-2009-000028 | Trees from CGI RESCUE vulnerable to cross-site scripting | 2009-05-19T13:41+09:00 | 2009-05-19T13:41+09:00 |
| jvndb-2009-000027 | Sun GlassFish Enterprise Server and Sun Java System Application Server vulnerable to cross-site scripting | 2009-05-13T15:37+09:00 | 2009-05-13T15:37+09:00 |
| jvndb-2009-000026 | SQL injection vulnerability in SKIP from SKIP User Group | 2009-05-12T17:50+09:00 | 2009-05-12T17:50+09:00 |
| jvndb-2009-000025 | Cross-site scripting vulnerability in SKIP from SKIP User Group | 2009-05-12T17:50+09:00 | 2009-05-12T17:50+09:00 |
| jvndb-2009-000024 | Web Mailer from CGI RESCUE vulnerable to HTTP header injection | 2009-04-28T16:36+09:00 | 2009-04-28T16:36+09:00 |
| jvndb-2009-000023 | FORM2MAIL from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000022 | Cross-site scripting vulnerability in MiniBBS from CGI RESCUE | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000021 | MiniBBS22 from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000020 | Movable Type cross-site scripting vulnerability | 2009-04-28T16:18+09:00 | 2009-07-29T12:22+09:00 |
| jvndb-2009-000019 | Cross-site scripting vulnerability in apricot.php from LovPop.net | 2009-04-17T14:40+09:00 | 2009-04-17T14:40+09:00 |
| jvndb-2009-001135 | Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template | 2009-04-17T14:13+09:00 | 2009-04-17T14:13+09:00 |
| jvndb-2009-000017 | XOOPS Cube Legacy cross-site scripting vulnerability | 2009-04-07T17:06+09:00 | 2009-04-07T17:06+09:00 |
| jvndb-2009-000016 | Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges | 2009-03-31T16:08+09:00 | 2009-03-31T16:08+09:00 |
| jvndb-2009-001087 | Fujitsu Enhanced Support Facility HRM-S Hardware/Software Information Disclosure Vulnerability | 2009-03-24T17:35+09:00 | 2009-03-24T17:35+09:00 |
| jvndb-2009-000015 | Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x) | 2009-03-16T17:07+09:00 | 2009-03-16T17:07+09:00 |
| jvndb-2009-000014 | MP Form Mail CGI vulnerability allows third party to gain administrative privileges | 2009-03-13T16:25+09:00 | 2009-03-13T16:25+09:00 |
| jvndb-2009-000012 | Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras | 2009-03-09T16:27+09:00 | 2009-03-09T16:27+09:00 |
| jvndb-2009-000013 | PEAK XOOPS piCal cross-site scripting vulnerability | 2009-03-03T16:37+09:00 | 2009-03-03T16:37+09:00 |
| jvndb-2009-001033 | Multiple Vulnerabilities in uCosminexus Portal Framework | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-001032 | JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-000010 | Apache Tomcat information disclosure vulnerability | 2009-02-26T15:28+09:00 | 2009-02-26T15:28+09:00 |
| jvndb-2009-001025 | Vulnerability allowing Viewing/Updating of Other Users' Information in Groupmax World Wide Web Desktop Version 6 | 2009-02-26T11:55+09:00 | 2009-02-26T11:55+09:00 |
| jvndb-2009-000009 | FAST ESP cross-site scripting vulnerability | 2009-02-17T11:55+09:00 | 2009-02-17T11:55+09:00 |
| jvndb-2009-000011 | Becky! Internet Mail buffer overflow vulnerability | 2009-02-12T17:28+09:00 | 2009-02-12T17:28+09:00 |
| jvndb-2006-000992 | Multiple Vulnerabilities Concerning Hitachi Web Server | 2009-02-04T17:42+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2009-000008 | Fulltext search CGI vulnerability allows third party to gain administrative privileges | 2009-01-28T15:25+09:00 | 2009-01-28T15:25+09:00 |
| jvndb-2009-000007 | Oracle WebLogic Server vulnerable to cross-site scripting | 2009-01-20T16:45+09:00 | 2009-01-20T16:45+09:00 |
| jvndb-2009-000006 | Cisco IOS cross-site scripting vulnerability | 2009-01-15T19:14+09:00 | 2009-01-15T19:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0479 | Multiples vulnérabilités dans HPE Aruba Networking AirWave Management Platform | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0478 | Multiples vulnérabilités dans les produits Siemens | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0477 | Multiples vulnérabilités dans les produits SAP | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0476 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-06-11T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0475 | Multiples vulnérabilités dans Tenable Security Center | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0474 | Vulnérabilité dans Veeam Recovery Orchestrator | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0473 | Vulnérabilité dans VMware Tanzu | 2024-06-10T00:00:00.000000 | 2024-06-10T00:00:00.000000 |
| certfr-2024-avi-0472 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0471 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0470 | Multiples vulnérabilités dans les produits IBM | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0469 | Vulnérabilité dans les produits Elastic | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0468 | Multiples vulnérabilités dans PHP | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0467 | Vulnérabilité dans SolarWinds Serv-U | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0466 | Multiples vulnérabilités dans les produits Elastic | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0465 | Vulnérabilité dans MongoDB PyMongo | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0464 | Multiples vulnérabilités dans SolarWinds Platform | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0463 | Multiples vulnérabilités dans Ruby on Rails | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0462 | Vulnérabilité dans SolarWinds Platform | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0461 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0460 | Vulnérabilité dans les caméras Synology | 2024-06-03T00:00:00.000000 | 2024-06-03T00:00:00.000000 |
| certfr-2024-avi-0459 | Multiples vulnérabilités dans les produits IBM | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0457 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0456 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0455 | Multiples vulnérabilités dans les produits Trend Micro | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0454 | Multiples vulnérabilités dans Google Chrome | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0453 | Vulnérabilité dans Ivanti Endpoint Manager | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0452 | Multiples vulnérabilités dans StormShield SSL VPN Client | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0451 | Vulnérabilité dans Mitel MiVoice MX-ONE | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0450 | Multiples vulnérabilités dans Nginx | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |