Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55619 | eml_parser: Parser DoS via deeply nested parentheses i… |
GOVCERT-LU |
eml_parser |
2026-08-25T18:24:29.921Z | 2026-08-25T19:20:15.362Z | |
| cve-2026-80050 | 7.1 (v4.0) 6.5 (v3.1) | ContiNew Admin through 4.1.0 Missing Authorization and… |
continew-org |
continew-admin |
2026-08-25T18:23:17.205Z | 2026-08-26T13:58:42.277Z |
| cve-2026-80049 | 8.7 (v4.0) 8.8 (v3.1) | Airbyte Platform through 2.0.0 Cross-Workspace Authori… |
airbytehq |
airbyte-platform |
2026-08-25T18:23:16.504Z | 2026-08-25T19:15:04.934Z |
| cve-2026-79788 | 7.1 (v4.0) 7.1 (v3.1) | Dradis Community Edition 5.1.0 through 5.2.0 Server-Si… |
dradis |
dradis-ce |
2026-08-25T18:23:15.839Z | 2026-08-26T16:10:46.614Z |
| cve-2026-79787 | 9.3 (v4.0) 9.8 (v3.1) | Alluxio through 2.9.5 S3 REST Proxy Authentication Byp… |
Alluxio |
alluxio |
2026-08-25T18:23:15.172Z | 2026-08-25T18:55:20.157Z |
| cve-2026-79786 | 7 (v4.0) 7.1 (v3.1) | Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI … |
coroot |
coroot |
2026-08-25T18:23:14.494Z | 2026-08-28T22:33:16.534Z |
| cve-2026-55618 | eml_parser: URL extraction bypass via HTML entities in URLs |
GOVCERT-LU |
eml_parser |
2026-08-25T18:21:56.178Z | 2026-08-28T22:31:14.584Z | |
| cve-2026-61555 | OpenEXR: Empty multiView viewFromChannelName file crash |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:19:30.538Z | 2026-08-26T18:51:56.374Z | |
| cve-2026-59985 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE de… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:16:37.986Z | 2026-08-25T19:16:49.514Z | |
| cve-2026-55663 | mediasoup: SCTP state cookie lacks cryptographic authe… |
versatica |
mediasoup |
2026-08-25T18:15:16.059Z | 2026-08-25T18:55:59.044Z | |
| cve-2026-59984 | OpenEXR: Scratch buffer overflow decoding B44-compress… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:13:01.835Z | 2026-08-25T18:38:43.746Z | |
| cve-2026-55637 | genieacs-mcp: DNS rebinding reaches local GenieACS MCP… |
GeiserX |
genieacs-mcp |
2026-08-25T18:03:34.701Z | 2026-08-25T18:24:42.746Z | |
| cve-2026-59983 | OpenEXR: Out-of-bounds read in DeepTiledInputFile samp… |
AcademySoftwareFoundation |
openexr |
2026-08-25T18:02:42.977Z | 2026-08-25T18:32:39.465Z | |
| cve-2026-59982 | OpenEXR: DWAA InputFile AC buffer overflow on ILP32 pl… |
AcademySoftwareFoundation |
openexr |
2026-08-25T17:59:25.292Z | 2026-08-25T19:20:27.685Z | |
| cve-2026-75750 | 7.8 (v3.1) | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:15.938Z | 2026-08-27T22:32:50.548Z |
| cve-2026-75767 | 7.8 (v3.1) | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:15.230Z | 2026-08-27T22:32:37.580Z |
| cve-2026-75768 | 7.8 (v3.1) | Substance3D - Painter | Untrusted Search Path (CWE-426) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:14.535Z | 2026-08-27T22:32:56.620Z |
| cve-2026-75766 | 7.8 (v3.1) | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:13.842Z | 2026-08-27T22:32:43.689Z |
| cve-2026-75769 | 7.8 (v3.1) | Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:13.141Z | 2026-08-27T22:32:43.190Z |
| cve-2026-75770 | 7.8 (v3.1) | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:12.441Z | 2026-08-27T22:32:45.752Z |
| cve-2026-75752 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:11.743Z | 2026-08-31T15:13:21.766Z |
| cve-2026-75749 | 7.8 (v3.1) | Substance3D - Painter | Out-of-bounds Write (CWE-787) |
Adobe |
Substance3D - Painter |
2026-08-25T17:58:11.054Z | 2026-08-27T22:32:36.118Z |
| cve-2026-80051 | 5.9 (v4.0) | github.com/graphql-go/graphql (GraphQL for Go) th… |
graphql-go project |
graphql-go |
2026-08-25T17:55:57.383Z | 2026-08-25T19:22:26.133Z |
| cve-2026-71399 | 7.8 (v3.1) | Adobe XD | Buffer Overflow (CWE-120) |
Adobe |
Adobe XD |
2026-08-25T17:52:37.463Z | 2026-09-02T03:55:36.047Z |
| cve-2026-71441 | 5.5 (v3.1) | Illustrator | Out-of-bounds Read (CWE-125) |
Adobe |
Illustrator Desktop 2026 |
2026-08-25T17:49:59.846Z | 2026-08-27T22:32:57.349Z |
| cve-2026-48425 | 7.8 (v3.1) | Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Adobe Substance 3D Sampler |
2026-08-25T17:46:00.961Z | 2026-08-27T22:32:48.618Z |
| cve-2026-48421 | 7.8 (v3.1) | Substance3D - Sampler | Out-of-bounds Write (CWE-787) |
Adobe |
Adobe Substance 3D Sampler |
2026-08-25T17:46:00.191Z | 2026-08-27T22:32:37.116Z |
| cve-2026-48423 | 7.8 (v3.1) | Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) |
Adobe |
Adobe Substance 3D Sampler |
2026-08-25T17:45:59.484Z | 2026-08-27T22:32:55.079Z |
| cve-2026-48418 | 7.8 (v3.1) | Substance3D - Sampler | Out-of-bounds Write (CWE-787) |
Adobe |
Adobe Substance 3D Sampler |
2026-08-25T17:45:58.765Z | 2026-08-27T22:32:42.712Z |
| cve-2026-71382 | 7.8 (v3.1) | Substance3D - Sampler | Out-of-bounds Write (CWE-787) |
Adobe |
Adobe Substance 3D Sampler |
2026-08-25T17:45:58.067Z | 2026-08-27T22:32:52.440Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-000002 | Movable Type Enterprise cross-site scripting vulnerability | 2009-01-13T18:50+09:00 | 2009-07-29T12:22+09:00 |
| jvndb-2009-000005 | MODx vulnerable to SQL injection | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000004 | MODx cross-site request forgery vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000003 | MODx cross-site scripting vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000001 | MyNETS cross-site scripting vulnerability | 2009-01-08T11:34+09:00 | 2009-01-08T11:34+09:00 |
| jvndb-2008-000086 | BlackJumboDog authentication bypass vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000085 | Mayaa cross-site scripting vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000084 | PHP vulnerable to cross-site scripting | 2008-12-19T15:37+09:00 | 2010-10-19T17:40+09:00 |
| jvndb-2008-000083 | Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe | 2008-12-17T15:30+09:00 | 2008-12-17T15:30+09:00 |
| jvndb-2008-001911 | Groupmax Workflow - Development Kit for Active Server Pages Cross-Site Scripting Vulnerability | 2008-12-05T11:35+09:00 | 2008-12-05T11:35+09:00 |
| jvndb-2008-001910 | Groupmax Collaboration - Schedule Mis-scheduling Problem: Unintended Members Included When Reservations are Made by Secretary | 2008-12-05T11:34+09:00 | 2008-12-05T11:34+09:00 |
| jvndb-2008-000067 | Movable Type Enterprise cross-site scripting vulnerability | 2008-12-04T14:52+09:00 | 2008-12-04T14:52+09:00 |
| jvndb-2008-000079 | I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability | 2008-12-02T15:50+09:00 | 2008-12-02T15:50+09:00 |
| jvndb-2008-001895 | JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability | 2008-12-01T11:10+09:00 | 2008-12-01T11:10+09:00 |
| jvndb-2008-000078 | CGI RESCUE MiniBBS2000 directory traversal vulnerability | 2008-11-26T17:50+09:00 | 2009-04-30T15:35+09:00 |
| jvndb-2008-001877 | JP1/Integrated Management Service Support Cross-Site Scripting Vulnerability | 2008-11-21T10:16+09:00 | 2008-11-21T10:16+09:00 |
| jvndb-2008-000077 | GungHo LoadPrgAx vulnerable to arbitrary Java program execution | 2008-11-19T15:50+09:00 | 2008-11-19T15:50+09:00 |
| jvndb-2008-000076 | sISAPILocation vulnerability bypasses HTTP header rewrite function | 2008-11-10T13:29+09:00 | 2008-11-10T13:29+09:00 |
| jvndb-2008-000075 | EC-CUBE vulnerable to SQL injection | 2008-11-06T16:04+09:00 | 2009-06-25T15:44+09:00 |
| jvndb-2008-001779 | CA ARCserver Backup and CA ARCserve Backup Client Agent Denial of Service (DoS) Vulnerability | 2008-10-30T12:20+09:00 | 2008-10-30T12:20+09:00 |
| jvndb-2008-001778 | BrightStor ARCserve and eTrust Antivirus Arbitrary Code Execution Vulnerability | 2008-10-30T12:19+09:00 | 2008-10-30T12:19+09:00 |
| jvndb-2008-000074 | Snoopy command injection vulnerability | 2008-10-28T15:34+09:00 | 2008-11-28T13:54+09:00 |
| jvndb-2008-000071 | MyNETS cross-site scripting vulnerability | 2008-10-22T17:49+09:00 | 2008-10-22T17:49+09:00 |
| jvndb-2008-000070 | Internet Explorer vulnerable in handling CDO protocol | 2008-10-22T17:49+09:00 | 2008-10-22T17:49+09:00 |
| jvndb-2008-000072 | Movable Type cross-site scripting vulnerability | 2008-10-21T19:25+09:00 | 2011-05-31T10:57+09:00 |
| jvndb-2008-000068 | hisa_cart information disclosure vulnerability | 2008-10-21T19:25+09:00 | 2008-10-21T19:25+09:00 |
| jvndb-2008-000073 | Blosxom vulnerable to cross-site scripting | 2008-10-20T17:30+09:00 | 2008-10-20T17:30+09:00 |
| jvndb-2008-000069 | Apache Tomcat allows access from a non-permitted IP address | 2008-10-10T15:44+09:00 | 2009-07-08T11:38+09:00 |
| jvndb-2008-000066 | Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting | 2008-10-06T15:24+09:00 | 2008-10-06T15:24+09:00 |
| jvndb-2008-000063 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:32+09:00 | 2008-10-01T16:32+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0449 | Vulnérabilité dans les produits Check Point | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0448 | Multiples vulnérabilités dans Nagios XI | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0447 | Vulnérabilité dans SPIP | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0438 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0437 | Vulnérabilité dans Google Chrome | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0436 | Multiples vulnérabilités dans les produits Mitel | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0435 | Multiples vulnérabilités dans les produits Cisco | 2024-05-23T00:00:00.000000 | 2024-05-23T00:00:00.000000 |
| certfr-2024-avi-0434 | Multiples vulnérabilités dans les produits Ivanti | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0433 | Multiples vulnérabilités dans GitLab | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0432 | Multiples vulnérabilités dans les produits Atlassian | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0431 | Multiples vulnérabilités dans les produits Veeam | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0430 | Multiples vulnérabilités dans Google Chrome | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0429 | Vulnérabilité dans les produits SolarWinds | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0428 | Multiples vulnérabilités dans les produits Qnap | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0427 | Multiples vulnérabilités dans les produits VMware | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0426 | Multiples vulnérabilités dans Roundcube | 2024-05-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0425 | Vulnérabilité dans Ruby on Rails | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0424 | Vulnérabilité dans Asterisk | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0423 | Multiples vulnérabilités dans les produits NetApp | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0422 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0421 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |