Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59307 | 8 (v3.1) | Deserialization allow-list silently bypassed: setBeanC… |
Spring |
Spring Integration |
2026-08-27T17:58:02.683Z | 2026-08-29T03:55:53.369Z |
| cve-2026-80211 | 8.2 (v4.0) 5.9 (v3.1) | FrontAccounting through 2.4.20 Use of Unsalted MD5 for… |
FrontAccounting |
FrontAccounting |
2026-08-27T14:50:31.799Z | 2026-08-29T02:59:12.859Z |
| cve-2026-40526 | 7.1 (v4.0) 6.5 (v3.1) | Volmarg Personal Management System Path Traversal via … |
Volmarg |
personal-management-system |
2026-08-27T13:12:50.291Z | 2026-08-29T02:57:39.410Z |
| cve-2026-81560 | blackms aistack Static File server.ts path traversal |
blackms |
aistack |
2026-08-27T10:30:11.125Z | 2026-08-29T02:56:31.506Z | |
| cve-2026-65956 | KubePi: Unauthenticated SSO/OIDC configuration allows … |
1Panel-dev |
KubePi |
2026-08-26T22:40:55.741Z | 2026-08-29T02:55:41.323Z | |
| cve-2026-81203 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-26T22:30:11.700Z | 2026-08-29T02:54:22.387Z | |
| cve-2026-77317 | SeaweedFS: SFTP path ACL literal prefix match permits … |
seaweedfs |
seaweedfs |
2026-08-26T21:25:46.531Z | 2026-08-29T02:53:27.656Z | |
| cve-2026-61792 | Weblate path traversal allows a project administrator … |
WeblateOrg |
weblate |
2026-08-26T20:26:27.810Z | 2026-08-29T02:51:38.553Z | |
| cve-2026-79921 | amqp091-go has a Potential Memory Exhaustion/Protocol … |
rabbitmq |
amqp091-go |
2026-08-26T20:24:58.115Z | 2026-08-29T02:50:25.822Z | |
| cve-2026-75601 | Static Web Server: Authentication bypass on /metrics e… |
static-web-server |
static-web-server |
2026-08-26T19:53:29.160Z | 2026-08-29T02:48:59.562Z | |
| cve-2026-46370 | Fleet has observer-level enrollment secret extraction … |
fleetdm |
fleet |
2026-08-26T18:54:31.761Z | 2026-08-29T02:47:37.283Z | |
| cve-2026-32639 | Winter: Broken access control in `Cms\Controllers\Inde… |
wintercms |
winter |
2026-08-26T17:50:32.102Z | 2026-08-29T02:46:44.275Z | |
| cve-2026-81036 | 8.5 (v4.0) 8.1 (v3.1) | Stalwart Mail Server through 0.16.19 Authorization Cod… |
stalwartlabs |
stalwart |
2026-08-26T15:45:02.931Z | 2026-08-29T02:45:24.847Z |
| cve-2026-81031 | 8.6 (v4.0) 7.2 (v3.1) | IDURAR ERP CRM through 4.1.1 Account Takeover via Unve… |
idurar |
idurar-erp-crm |
2026-08-26T15:44:59.362Z | 2026-08-29T02:43:32.712Z |
| cve-2026-80428 | 9.3 (v4.0) 9.8 (v3.1) | ILIAS before 9.22, 10.10 and 11.3 Unauthenticated PHP … |
ILIAS-eLearning e.V. |
ILIAS |
2026-08-26T15:44:55.917Z | 2026-08-29T02:41:40.892Z |
| cve-2026-54614 | DebugKit: MailPreview contains unsafe reflection |
cakephp |
debug_kit |
2026-08-26T15:30:23.966Z | 2026-08-29T02:40:09.901Z | |
| cve-2026-54556 | Http4s: HTTP/2 Denial of Service with Ember Backend |
http4s |
http4s |
2026-08-26T14:10:22.349Z | 2026-08-29T02:38:44.725Z | |
| cve-2026-3129 | LiteSpeed Cache <= 7.7 - Authenticated (Author+) Store… |
litespeedtech |
LiteSpeed Cache |
2026-08-28T03:39:35.416Z | 2026-08-28T23:18:59.081Z | |
| cve-2026-80203 | 9.3 (v4.0) 9.8 (v3.1) | Grav before 1.0.18 Authentication Bypass via Scoped API Key |
getgrav |
grav |
2026-08-26T10:28:12.996Z | 2026-08-28T22:48:35.508Z |
| cve-2026-59299 | 3.1 (v3.1) | Composition lookup can potentially poison base functio… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:56.024Z | 2026-08-28T22:48:12.246Z |
| cve-2026-59300 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.010Z | 2026-08-28T22:48:05.882Z |
| cve-2026-59301 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud F… |
Spring |
Spring Cloud Function |
2026-08-27T17:57:57.960Z | 2026-08-28T22:47:58.312Z |
| cve-2026-59302 | 3.1 (v3.1) | Potential for logging sensitive data in Spring Cloud Stream |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:58.899Z | 2026-08-28T22:47:52.531Z |
| cve-2026-59303 | 3.1 (v3.1) | Dynamic destination cache size is not properly bound i… |
Spring |
Spring Cloud Stream |
2026-08-27T17:57:59.869Z | 2026-08-28T22:47:44.786Z |
| cve-2026-59304 | 3.1 (v3.1) | Improper caching of the original content type in Sprin… |
Spring |
Spring Cloud Stream |
2026-08-27T17:58:00.802Z | 2026-08-28T22:47:36.173Z |
| cve-2026-59311 | 6.8 (v3.1) | Fixed predictable /tmp/ziptransformer work directory e… |
Spring |
Spring Integration |
2026-08-27T18:04:40.084Z | 2026-08-28T22:47:29.614Z |
| cve-2026-59315 | 5.3 (v3.1) | Spring Cloud Config Monitor Denial of Service |
Spring |
Spring Cloud Config |
2026-08-27T18:04:42.065Z | 2026-08-28T22:47:23.491Z |
| cve-2026-80346 | 7.1 (v4.0) 7.1 (v3.1) | StarRocks through 4.0.13 Missing Authorization on DROP… |
StarRocks |
StarRocks |
2026-08-26T10:09:47.301Z | 2026-08-28T22:47:20.732Z |
| cve-2026-59316 | 8.2 (v3.1) | Spring Authorization Server Default Consent Page is vu… |
Spring |
Spring Authorization Server |
2026-08-27T18:04:44.963Z | 2026-08-28T22:47:16.884Z |
| cve-2026-59317 | 6.5 (v3.1) | In Spring for Apache Kafka, missing header validation … |
Spring |
Spring for Apache Kafka |
2026-08-27T18:04:46.006Z | 2026-08-28T22:47:09.357Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0003 | Vulnérabilité dans Synology Router Manager | 2024-01-04T00:00:00.000000 | 2024-01-04T00:00:00.000000 |
| certfr-2024-avi-0001 | Vulnérabilité dans StormShield Network Security | 2024-01-02T00:00:00.000000 | 2024-01-03T00:00:00.000000 |
| certfr-2024-avi-0002 | Multiples vulnérabilités dans Moxa OnCell G3150A-LTE Series | 2024-01-02T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-avi-1061 | Multiples vulnérabilités dans Apache OpenOffice | 2023-12-29T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-avi-1062 | Multiples vulnérabilités dans Juniper Secure Analytics | 2023-12-29T00:00:00.000000 | 2023-12-29T00:00:00.000000 |
| certfr-2023-avi-1060 | Vulnérabilité dans NetApp Active IQ Unified Manager | 2023-12-28T00:00:00.000000 | 2023-12-28T00:00:00.000000 |
| certfr-2023-avi-1059 | Multiples vulnérabilités dans Moxa ioLogik E1200 | 2023-12-26T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1058 | Vulnérabilité dans Stormshield Network Security | 2023-12-26T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1057 | Vulnérabilité dans Postfix | 2023-12-22T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1056 | Vulnérabilité dans Microsoft Edge | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1055 | Multiples vulnérabilités dans les produits IBM | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1054 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1053 | Vulnérabilité dans les produits ESET | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1052 | Vulnérabilité dans SolarWinds Access Rights Manager | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1051 | Vulnérabilité dans Google Chrome | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1050 | Multiples vulnérabilités dans Moodle | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1049 | Multiples vulnérabilités dans Ivanti Avalanche | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1048 | Multiples vulnérabilités dans les produits Mozilla | 2023-12-20T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-1047 | Vulnérabilité dans macOS Sonoma | 2023-12-20T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-0770 | Multiples vulnérabilités dans les produits Tenable | 2023-09-22T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-0695 | Multiples vulnérabilités dans les produits Mozilla | 2023-08-30T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2021-avi-343 | Multiples vulnérabilités dans les produits Fortinet | 2021-05-05T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2020-avi-717 | Multiples vulnérabilités dans les produits Apple | 2020-11-06T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2018-avi-489 | Multiples vulnérabilités dans les produits Intel | 2018-10-12T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2017-avi-393 | Vulnérabilité dans Cisco IOS XE | 2017-11-06T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-1046 | Vulnérabilité dans Stormshield Network VPN Client | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1045 | Vulnérabilité dans SPIP | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1044 | Multiples vulnérabilités dans OpenSSH | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1043 | Multiples vulnérabilités dans Zimbra Collaboration | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1042 | Vulnérabilités dans MISP | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |