Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82421 | itsourcecode Sales and Inventory System emp_edit.php s… |
itsourcecode |
Sales and Inventory System |
2026-08-29T21:00:12.247Z | 2026-08-29T21:00:12.247Z | |
| cve-2026-15369 | Custom User Registration Fields for WooCommerce <= 2.2… |
Addify |
Custom User Registration Fields for WooCommerce |
2026-08-29T19:26:34.288Z | 2026-08-29T19:26:34.288Z | |
| cve-2026-75807 | SAML Single Sign On <= 5.4.6 - Unauthenticated Authent… |
cyberlord92 |
SAML Single Sign On – SSO Login |
2026-08-29T17:25:48.408Z | 2026-08-29T17:25:48.408Z | |
| cve-2026-82476 | 6.9 (v4.0) 5.3 (v3.1) | Memos through 0.30.0 SSRF via Omitted CGNAT Address Range |
usememos |
memos |
2026-08-29T16:35:36.039Z | 2026-08-29T16:35:36.039Z |
| cve-2026-82475 | 8.6 (v4.0) 8.1 (v3.1) | iFlytek astron-agent through 1.1.1 Workflow Hijacking … |
iflytek |
astron-agent |
2026-08-29T16:35:34.514Z | 2026-08-29T16:35:34.514Z |
| cve-2026-82474 | 8.5 (v4.0) 7.8 (v3.1) | Sudo through 1.9.17p2 Intercept Policy Bypass via execveat |
sudo-project |
sudo |
2026-08-29T16:35:33.836Z | 2026-08-29T16:35:33.836Z |
| cve-2026-82473 | 8.8 (v4.0) 8.2 (v3.1) | KubeEdge CloudCore through 1.23.1 Missing Authenticati… |
kubeedge |
kubeedge |
2026-08-29T16:35:33.159Z | 2026-08-29T16:35:33.159Z |
| cve-2026-82472 | 8.7 (v4.0) 7.5 (v3.1) | Documenso before 2.13.0 Unauthenticated File Upload vi… |
documenso |
documenso |
2026-08-29T16:35:32.453Z | 2026-08-29T16:35:32.453Z |
| cve-2026-82470 | 5.1 (v4.0) 5.4 (v3.1) | Rodauth before 2.47.0 TOTP Code Reuse via Drift Window |
jeremyevans |
rodauth |
2026-08-29T16:35:31.777Z | 2026-08-29T16:35:31.777Z |
| cve-2026-82469 | 5.1 (v4.0) 5.4 (v3.1) | Rodauth before 2.47.0 Authentication Bypass via jwt_refresh |
jeremyevans |
rodauth |
2026-08-29T16:35:31.100Z | 2026-08-29T16:35:31.100Z |
| cve-2026-82468 | 4.9 (v4.0) 4.7 (v3.1) | Rodauth before 2.47.0 CSRF Protection Bypass via Conte… |
jeremyevans |
rodauth |
2026-08-29T16:35:30.408Z | 2026-08-29T16:35:30.408Z |
| cve-2026-82467 | 4.9 (v4.0) 4.7 (v3.1) | Rodauth before 2.47.0 Open Redirect via Return-to Path |
jeremyevans |
rodauth |
2026-08-29T16:35:29.723Z | 2026-08-29T16:35:29.723Z |
| cve-2026-82466 | 9.4 (v4.0) 8.7 (v3.1) | Rodauth before 2.46.0 Authentication Bypass via webaut… |
jeremyevans |
rodauth |
2026-08-29T16:35:29.026Z | 2026-08-29T16:35:29.026Z |
| cve-2026-82465 | 6.9 (v4.0) 5.3 (v3.1) | pac4j-saml before 6.5.6 Session Destruction via Unsign… |
pac4j |
pac4j |
2026-08-29T16:35:28.321Z | 2026-08-29T16:35:28.321Z |
| cve-2026-82464 | 5.3 (v4.0) 6.1 (v3.1) | pac4j-core before 6.5.6 Open Redirect via Backslash Logout |
pac4j |
pac4j |
2026-08-29T16:35:27.609Z | 2026-08-29T16:35:27.609Z |
| cve-2026-82463 | 8.6 (v4.0) 8.1 (v3.1) | pac4j-core before 6.5.6 Authorization Bypass via Rever… |
pac4j |
pac4j |
2026-08-29T16:35:26.904Z | 2026-08-29T16:35:26.904Z |
| cve-2026-82462 | 6.9 (v4.0) 6.5 (v3.1) | pac4j-oidc before 6.5.6 Authentication Bypass via Acce… |
pac4j |
pac4j |
2026-08-29T16:35:26.177Z | 2026-08-29T16:35:26.177Z |
| cve-2026-82461 | 8.6 (v4.0) 8.1 (v3.1) | pac4j-oidc before 6.5.6 Privilege Escalation via Unver… |
pac4j |
pac4j |
2026-08-29T16:35:25.482Z | 2026-08-29T16:35:25.482Z |
| cve-2026-82460 | 9.3 (v4.0) 9.8 (v3.1) | Cloud Commander before 19.20.2 Directory Traversal via… |
coderaiser |
cloudcmd |
2026-08-29T16:35:24.787Z | 2026-08-29T16:35:24.787Z |
| cve-2026-82481 | 8.7 (v4.0) | The cohttp package before 6.3.0 for OCaml allows … |
mirage |
cohttp |
2026-08-29T14:43:52.887Z | 2026-08-29T14:43:52.887Z |
| cve-2026-82477 | 5.8 (v3.1) | In MITRE SAF Heimdall 2.11.6 through 2.13.x befor… |
MITRE |
Heimdall |
2026-08-29T14:12:42.797Z | 2026-08-29T14:12:42.797Z |
| cve-2026-82457 | 8.5 (v4.0) 7.8 (v3.1) | su-exec through 0.3 Privilege Escalation via Numeric User ID |
ncopa |
su-exec |
2026-08-29T13:47:58.176Z | 2026-08-29T13:47:58.176Z |
| cve-2026-82456 | 10 (v4.0) 10 (v3.1) | argocd-mcp 0.8.0 Authentication Bypass via Unauthentic… |
argoproj-labs |
argocd-mcp |
2026-08-29T13:47:57.447Z | 2026-08-29T13:47:57.447Z |
| cve-2026-82455 | 6.9 (v4.0) 7.1 (v3.1) | RubyGems before 4.0.13 Path Traversal via Symlink Resolution |
ruby |
rubygems |
2026-08-29T13:47:56.760Z | 2026-08-29T13:47:56.760Z |
| cve-2026-82454 | 9.3 (v4.0) 9.1 (v3.1) | Omnivore before android-0.227.0 Authentication Bypass … |
omnivore-app |
omnivore |
2026-08-29T13:47:56.108Z | 2026-08-29T13:47:56.108Z |
| cve-2026-82453 | 8.7 (v4.0) 7.5 (v3.1) | rust-iot-platform Cleartext Password Storage via User Model |
iot-ecology |
rust-iot-platform |
2026-08-29T13:47:55.410Z | 2026-08-29T13:47:55.410Z |
| cve-2026-82452 | 9.3 (v4.0) 9.8 (v3.1) | rust-iot-platform Authentication Bypass via Missing Re… |
iot-ecology |
rust-iot-platform |
2026-08-29T13:47:54.696Z | 2026-08-29T13:47:54.696Z |
| cve-2026-82451 | 5.3 (v4.0) 6.1 (v3.1) | Formwork through 2.3.14 Stored XSS via Referer Header |
getformwork |
Formwork |
2026-08-29T13:47:54.007Z | 2026-08-29T13:47:54.007Z |
| cve-2026-82450 | 8.7 (v4.0) 8.8 (v3.1) | BookStack before 26.05.4 Remote Code Execution via Boo… |
bookstackapp |
bookstack |
2026-08-29T13:47:53.312Z | 2026-08-29T13:47:53.312Z |
| cve-2026-82449 | 6.9 (v4.0) 5.3 (v3.1) | Cockpit CMS before 2.14.1 Account Enumeration via Auth… |
cockpit-hq |
cockpit |
2026-08-29T12:05:35.516Z | 2026-08-29T12:05:35.516Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-000125 | Multiple vulnerabilities in SOY series | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000124 | Zabbix agent may insecurely load Dynamic Link Libraries | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000089 | Multiple vulnerabilities in GROWI | 2026-08-28T15:52+09:00 | 2026-08-28T15:52+09:00 |
| jvndb-2026-000110 | Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries | 2026-08-27T14:30+09:00 | 2026-08-27T14:30+09:00 |
| jvndb-2026-030097 | FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration | 2026-08-26T16:04+09:00 | 2026-08-26T16:04+09:00 |
| jvndb-2026-000123 | Android App "Myna Point" vulnerable to improper access restriction | 2026-08-26T14:42+09:00 | 2026-08-26T14:42+09:00 |
| jvndb-2026-000122 | Multiple vulnerabilities in CorvusSKK | 2026-08-26T14:42+09:00 | 2026-08-26T14:42+09:00 |
| jvndb-2026-000121 | Apache Struts 2 vulnerable to resource exhaustion | 2026-08-25T14:00+09:00 | 2026-08-25T14:00+09:00 |
| jvndb-2026-029749 | Security information for Hitachi Disk Array Systems | 2026-08-24T17:04+09:00 | 2026-08-24T17:04+09:00 |
| jvndb-2026-029751 | Multiple vulnerabilities in Yamaha VOCALOID6 Editor | 2026-08-24T16:31+09:00 | 2026-08-24T16:31+09:00 |
| jvndb-2026-000115 | Sakura Editor vulnerable to OS command injection | 2026-08-24T16:21+09:00 | 2026-08-24T16:21+09:00 |
| jvndb-2026-000097 | Multiple vulnerabilities in SKYSEA Client View and SKYMEC IT Manager | 2026-08-24T16:21+09:00 | 2026-08-25T12:15+09:00 |
| jvndb-2026-029323 | Multiple SEIKO EPSON printers and scanners keep already revoked root certificates | 2026-08-21T15:55+09:00 | 2026-08-21T15:55+09:00 |
| jvndb-2026-000120 | Miraikan Assist App vulnerable to cross-site scripting | 2026-08-21T15:39+09:00 | 2026-08-21T15:39+09:00 |
| jvndb-2026-000119 | UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function | 2026-08-21T15:39+09:00 | 2026-08-21T15:39+09:00 |
| jvndb-2026-000118 | Multiple vulnerabilities in acmailer | 2026-08-19T14:06+09:00 | 2026-08-19T14:06+09:00 |
| jvndb-2026-000116 | Apache Allura vulnerable to server-side request forgery | 2026-08-18T13:43+09:00 | 2026-08-18T13:43+09:00 |
| jvndb-2026-000113 | Improper file access permission settings in Synology Assistant | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000112 | F-RevoCRM vulnerable to cross-site scripting | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000111 | miChecker improper restriction of XML external entity references | 2026-08-17T16:45+09:00 | 2026-08-17T16:45+09:00 |
| jvndb-2026-000114 | VoiceTra vulnerable to incorrectly specified destination in a communication channel | 2026-08-13T13:36+09:00 | 2026-08-13T13:36+09:00 |
| jvndb-2026-000109 | Installer for LINE for Windows insecurely loads Dynamic Link Libraries | 2026-08-10T16:37+09:00 | 2026-08-10T16:37+09:00 |
| jvndb-2026-000108 | Multiple vulnerabilities in NetKids iMark | 2026-08-05T15:41+09:00 | 2026-08-05T15:41+09:00 |
| jvndb-2026-026853 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026852 | Multiple Vulnerabilities in Hitachi Ops Center Common Services | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026851 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026850 | Vulnerability in Cosminexus HTTP Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-026849 | Vulnerability in Cosminexus HTTP Server | 2026-08-05T10:11+09:00 | 2026-08-05T10:11+09:00 |
| jvndb-2026-000107 | freo2 vulnerable to unrestricted upload of file with dangerous type | 2026-08-04T14:15+09:00 | 2026-08-04T14:15+09:00 |
| jvndb-2026-026400 | Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App | 2026-08-04T14:10+09:00 | 2026-08-05T12:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-1095 | Multiples vulnérabilités dans Papercut | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1094 | Multiples vulnérabilités dans les produits IBM | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1093 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1092 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1091 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1090 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1089 | Multiples vulnérabilités dans Tenable Enclave Security | 2026-08-28T00:00:00.000000 | 2026-08-28T00:00:00.000000 |
| certfr-2026-avi-1088 | Multiples vulnérabilités dans Traefik | 2026-08-27T00:00:00.000000 | 2026-08-27T00:00:00.000000 |
| certfr-2026-avi-1087 | Vulnérabilité dans CPython | 2026-08-27T00:00:00.000000 | 2026-08-27T00:00:00.000000 |
| certfr-2026-avi-1086 | Multiples vulnérabilités dans GitLab | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1085 | Multiples vulnérabilités dans Redmine | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1084 | Multiples vulnérabilités dans SonicWall NetExtender | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1083 | Multiples vulnérabilités dans Apache Tomcat | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1082 | Vulnérabilité dans Apereo CAS | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1081 | Multiples vulnérabilités dans Google Chrome | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1080 | Multiples vulnérabilités dans les produits Veeam | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1079 | Multiples vulnérabilités dans OpenSSL | 2026-08-26T00:00:00.000000 | 2026-08-26T00:00:00.000000 |
| certfr-2026-avi-1078 | Multiples vulnérabilités dans Keycloak | 2026-08-25T00:00:00.000000 | 2026-08-25T00:00:00.000000 |
| certfr-2026-avi-1077 | Multiples vulnérabilités dans Cisco IOS XE | 2026-08-25T00:00:00.000000 | 2026-08-25T00:00:00.000000 |
| certfr-2026-avi-1076 | Multiples vulnérabilités dans LibreNMS | 2026-08-24T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1075 | Multiples vulnérabilités dans Metabase | 2026-08-24T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1074 | Vulnérabilité dans Microsoft Entra ID | 2026-08-21T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1073 | Multiples vulnérabilités dans les produits Microsoft | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1072 | Vulnérabilité dans Microsoft Office | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1071 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1070 | Multiples vulnérabilités dans Traefik | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1069 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1068 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1067 | Multiples vulnérabilités dans les produits IBM | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| certfr-2026-avi-1066 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-21T00:00:00.000000 | 2026-08-21T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-ale-008 | Multiples vulnérabilités dans Microsoft Sharepoint | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-ale-007 | Multiples vulnérabilités dans WordPress | 2026-07-20T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-ale-006 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2026-07-15T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-ale-005 | [Màj] Vulnérabilité dans Microsoft Exchange Server | 2026-05-15T00:00:00.000000 | 2026-07-13T00:00:00.000000 |
| certfr-2026-ale-004 | Vulnérabilité dans F5 BIG-IP Access Policy Manager | 2026-03-31T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-ale-003 | Note d’alerte – Ciblage des messageries instantanées | 2026-03-20T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-ale-002 | [MàJ] Vulnérabilité dans Cisco Catalyst SD-WAN | 2026-02-25T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-ale-001 | [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile | 2026-01-30T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2025-ale-014 | [MàJ] Vulnérabilité dans React Server Components | 2025-12-05T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2025-ale-013 | [MàJ] Multiples vulnérabilités dans Cisco ASA et FTD | 2025-09-25T00:00:00.000000 | 2025-12-09T00:00:00.000000 |
| certfr-2025-ale-012 | Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway | 2025-08-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-ale-011 | Incidents de sécurité dans les pare-feux SonicWall | 2025-08-05T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-ale-010 | [MàJ] Multiples vulnérabilités dans Microsoft SharePoint | 2025-07-21T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-ale-009 | Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway | 2025-07-01T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-ale-008 | [MàJ] Vulnérabilité dans Roundcube | 2025-06-05T00:00:00.000000 | 2025-07-21T00:00:00.000000 |
| certfr-2025-ale-007 | Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-14T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-006 | Vulnérabilité dans les produits Fortinet | 2025-05-13T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-005 | Vulnérabilité dans SAP NetWeaver | 2025-04-28T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-004 | Activités de post-exploitation dans Fortinet FortiGate | 2025-04-11T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-ale-003 | [MàJ] Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-ale-002 | [MàJ] Vulnérabilité dans les produits Fortinet | 2025-01-14T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2025-ale-001 | [MàJ] Vulnérabilité dans les produits Ivanti | 2025-01-09T00:00:00.000000 | 2025-05-07T00:00:00.000000 |
| certfr-2024-ale-015 | [MàJ] Multiples vulnérabilités sur l'interface d'administration des équipements Palo Alto Networks | 2024-11-15T00:00:00.000000 | 2025-01-27T00:00:00.000000 |
| certfr-2024-ale-014 | [MàJ] Multiples vulnérabilités dans Fortinet FortiManager | 2024-10-23T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2024-ale-013 | Exploitations de vulnérabilités dans Ivanti Cloud Services Appliance (CSA) | 2024-10-22T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2024-ale-012 | [MàJ] Vulnérabilités affectant OpenPrinting CUPS | 2024-09-27T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-ale-011 | Vulnérabilité dans SonicWall | 2024-09-10T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-ale-010 | Multiples vulnérabilités dans Roundcube | 2024-08-09T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| certfr-2024-ale-009 | Vulnérabilité dans OpenSSH | 2024-07-01T00:00:00.000000 | 2024-10-07T00:00:00.000000 |
| certfr-2024-ale-008 | [MàJ] Vulnérabilité dans les produits Check Point | 2024-05-30T00:00:00.000000 | 2024-07-01T00:00:00.000000 |