Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-80462 |
10 (3.1)
|
Privilege Escalation in Progress Chef Automate |
Progress Software |
Chef Automate |
2026-09-11T12:28:49.216Z | 2026-09-11T12:50:02.154Z |
| CVE-2026-84390 |
9.6 (3.1)
|
A inclusion of sensitive information in source co… |
Fortinet |
FortiMonitorOnSight |
2026-09-11T12:13:15.262Z | 2026-09-11T12:44:39.194Z |
| CVE-2026-86793 |
N/A
|
CVE-2026-86793 |
SGLang |
SGLang |
2026-09-11T11:35:20.812Z | 2026-09-11T11:35:20.812Z |
| CVE-2024-12145 |
4.3 (3.1)
|
BuddyPress <= 14.3.3 - Insecure Direct Object Referenc… |
buddypress |
BuddyPress |
2026-09-11T11:28:52.377Z | 2026-09-11T11:28:52.377Z |
| CVE-2026-87776 |
7.5 (3.1)
|
compression vulnerable to Denial of Service via memory… |
compression |
compression |
2026-09-11T11:24:55.150Z | 2026-09-11T11:24:55.150Z |
| CVE-2026-89259 |
9.3 (4.0)
9.8 (3.1)
|
Hugo before v0.165.0 Insufficient Permission Restricti… |
gohugoio |
hugo |
2026-09-11T11:15:35.062Z | 2026-09-11T11:15:35.062Z |
| CVE-2026-89258 |
9.3 (4.0)
6.3 (3.1)
|
Hugo before v0.165.0 Symlink Confinement Bypass via re… |
gohugoio |
hugo |
2026-09-11T11:15:34.357Z | 2026-09-11T12:18:15.839Z |
| CVE-2026-89257 |
5.3 (4.0)
5.4 (3.1)
|
AVideo through 29.0 Cross-User Category Asset Deletion… |
WWBN |
AVideo |
2026-09-11T11:15:33.630Z | 2026-09-11T11:15:33.630Z |
| CVE-2026-89256 |
9.3 (4.0)
8.7 (3.1)
|
AVideo Bookmark Plugin Stored XSS via Chapter Names |
WWBN |
AVideo |
2026-09-11T11:15:32.943Z | 2026-09-11T11:15:32.943Z |
| CVE-2026-89255 |
9.3 (4.0)
8.7 (3.1)
|
AVideo LoginControl Stored XSS via PGP Public Key |
WWBN |
AVideo |
2026-09-11T11:15:32.263Z | 2026-09-11T11:15:32.263Z |
| CVE-2026-89254 |
9.3 (4.0)
8.7 (3.1)
|
AVideo CustomizeUser Stored XSS via field_name Parameter |
WWBN |
AVideo |
2026-09-11T11:15:31.566Z | 2026-09-11T11:15:31.566Z |
| CVE-2026-89253 |
9.3 (4.0)
8.7 (3.1)
|
AVideo Stored XSS via donationLink in watch page button |
WWBN |
AVideo |
2026-09-11T11:15:30.865Z | 2026-09-11T12:26:39.480Z |
| CVE-2026-89252 |
7.1 (4.0)
6.5 (3.1)
|
AVideo Missing Authorization in addLiveLink.php LiveLi… |
WWBN |
AVideo |
2026-09-11T11:15:30.163Z | 2026-09-11T11:15:30.163Z |
| CVE-2026-89251 |
7.1 (4.0)
6.5 (3.1)
|
AVideo Missing Authorization via AD_Server log.php Wal… |
WWBN |
AVideo |
2026-09-11T11:15:29.431Z | 2026-09-11T11:15:29.431Z |
| CVE-2026-89250 |
8.7 (4.0)
7.5 (3.1)
|
WWBN AVideo Unauthenticated File Read via getRecordedF… |
WWBN |
AVideo |
2026-09-11T11:15:28.713Z | 2026-09-11T11:15:28.713Z |
| CVE-2026-89249 |
9.3 (4.0)
8.7 (3.1)
|
AVideo YPTWallet Stored XSS via CryptoWallet Configuration |
WWBN |
AVideo |
2026-09-11T11:15:27.995Z | 2026-09-11T11:15:27.995Z |
| CVE-2026-89248 |
6.9 (4.0)
5.3 (3.1)
|
AVideo WebRTC Plugin Information Disclosure via status… |
WWBN |
AVideo |
2026-09-11T11:15:27.273Z | 2026-09-11T12:33:32.464Z |
| CVE-2026-89247 |
5.3 (4.0)
6.1 (3.1)
|
WWBN AVideo XML Injection via plugin/AD_Server/VMAP.php |
WWBN |
AVideo |
2026-09-11T11:15:26.580Z | 2026-09-11T11:15:26.580Z |
| CVE-2026-89246 |
5.1 (4.0)
5.4 (3.1)
|
WWBN AVideo CSV Formula Injection via myComments.downl… |
WWBN |
AVideo |
2026-09-11T11:15:25.872Z | 2026-09-11T11:15:25.872Z |
| CVE-2026-89245 |
7.1 (4.0)
6.5 (3.1)
|
WWBN AVideo Cross-Site Request Forgery via playlistRem… |
WWBN |
AVideo |
2026-09-11T11:15:25.123Z | 2026-09-11T11:15:25.123Z |
| CVE-2026-89244 |
5.3 (4.0)
6.1 (3.1)
|
WWBN AVideo Reflected XSS via Gallery Category getBackURL |
WWBN |
AVideo |
2026-09-11T11:15:24.432Z | 2026-09-11T11:15:24.432Z |
| CVE-2026-89243 |
9.2 (4.0)
8.1 (3.1)
|
WWBN AVideo Stored XSS via UserGroups setGroup_name |
WWBN |
AVideo |
2026-09-11T11:15:23.750Z | 2026-09-11T12:42:57.021Z |
| CVE-2026-89242 |
6.9 (4.0)
7.2 (3.1)
|
WWBN AVideo Unauthenticated SSRF via login.json.php |
WWBN |
AVideo |
2026-09-11T11:15:23.057Z | 2026-09-11T11:15:23.057Z |
| CVE-2026-89241 |
5.3 (4.0)
6.1 (3.1)
|
WWBN AVideo Reflected XSS via confirmLivePassword.php |
WWBN |
AVideo |
2026-09-11T11:15:22.359Z | 2026-09-11T11:15:22.359Z |
| CVE-2026-89240 |
5.3 (4.0)
6.1 (3.1)
|
WWBN AVideo Reflected XSS via confirmLivePassword.php |
WWBN |
AVideo |
2026-09-11T11:15:21.650Z | 2026-09-11T11:15:21.650Z |
| CVE-2026-89239 |
5.3 (4.0)
6.1 (3.1)
|
WWBN AVideo Reflected XSS via Referer Header Comment B… |
WWBN |
AVideo |
2026-09-11T11:15:20.971Z | 2026-09-11T11:15:20.971Z |
| CVE-2026-89148 |
5.1 (4.0)
5.4 (3.1)
|
AVideo Open Redirect via playlistSort.php Referer Header |
WWBN |
AVideo |
2026-09-11T11:15:20.243Z | 2026-09-11T12:50:13.116Z |
| CVE-2026-86813 |
4.8 (3.1)
|
MetForm < 4.1.9 - Unauthenticated Email Header Injecti… |
Unknown |
MetForm |
2026-09-11T10:56:37.490Z | 2026-09-11T12:06:35.387Z |
| CVE-2026-86809 |
5.3 (3.1)
|
Persian Elementor < 2.8.2 - Unauthenticated ZarinPal P… |
Unknown |
Persian Elementor |
2026-09-11T10:56:36.867Z | 2026-09-11T12:06:50.953Z |
| CVE-2026-85116 |
6.5 (3.1)
|
Simple CAPTCHA with Cloudflare Turnstile 1.2.2 - 1.42.… |
Unknown |
Simple CAPTCHA with Cloudflare Turnstile |
2026-09-11T10:56:36.199Z | 2026-09-11T12:07:09.031Z |