Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59319 | 4.3 (v3.1) | RediSearch Tag Injection in RedisChatMemoryRepository … |
Spring |
Spring AI |
2026-08-27T18:04:46.944Z | 2026-08-28T22:47:00.784Z |
| cve-2026-59320 | 6.5 (v3.1) | In Spring AMQP the link credit never replenished on li… |
Spring |
Spring AMQP |
2026-08-27T18:04:47.999Z | 2026-08-28T22:46:54.662Z |
| cve-2026-59321 | 4.2 (v3.1) | Shared JSR-223 ScriptEngine evaluated concurrently wit… |
Spring |
Spring Integration |
2026-08-27T18:04:49.035Z | 2026-08-28T22:46:47.321Z |
| cve-2026-59322 | 6.3 (v3.1) | EmbeddedHeadersJsonMessageMapper default gives wire pe… |
Spring |
Spring Integration |
2026-08-27T18:04:50.137Z | 2026-08-28T22:46:40.016Z |
| cve-2026-59324 | 8.2 (v3.1) | fluxTransform shared RequestMessageHolder causes cross… |
Spring |
Spring Integration |
2026-08-27T18:04:51.595Z | 2026-08-28T22:46:33.636Z |
| cve-2026-79654 | 4.3 (v3.1) | Ketello: katello content view history api cross-organi… |
Red Hat |
Red Hat Satellite 6 |
2026-08-26T05:37:38.450Z | 2026-08-28T22:44:59.380Z |
| cve-2026-3639 | PPWP – Password Protect Pages <= 1.9.21 - Authenticate… |
buildwps |
PPWP – Password Protect Pages |
2026-08-13T07:37:52.468Z | 2026-08-28T22:44:31.722Z | |
| cve-2026-80198 | 8.7 (v4.0) 7.5 (v3.1) | Kimai before 2.56.0 Information Disclosure via config(… |
kimai |
kimai |
2026-08-25T23:19:04.492Z | 2026-08-28T22:44:03.015Z |
| cve-2026-80193 | 8.7 (v4.0) 8.8 (v3.1) | Kimai before 2.62.0 Authorization Bypass via QuickEntry |
kimai |
kimai |
2026-08-25T23:19:01.048Z | 2026-08-28T22:42:25.572Z |
| cve-2026-57170 | Trestle SSTI in Jinja2 include tags allows arbitrary c… |
oscal-compass |
compliance-trestle |
2026-08-25T23:18:29.487Z | 2026-08-28T22:41:34.783Z | |
| cve-2026-63404 | Faktory: Insecure predictable /tmp/redis.conf enables … |
contribsys |
faktory |
2026-08-25T22:01:19.220Z | 2026-08-28T22:40:31.790Z | |
| cve-2026-79804 | SililaWijesinghe Food Ordering System search.php sql i… |
SililaWijesinghe |
Food Ordering System |
2026-08-25T21:30:09.580Z | 2026-08-28T22:39:23.398Z | |
| cve-2026-32637 | Velero vulnerable to file path traversal when extracti… |
velero-io |
velero |
2026-08-25T21:15:31.881Z | 2026-08-28T22:38:21.971Z | |
| cve-2026-59981 | OpenEXR: Heap OOB read in SampleCountChannel row when … |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:58:37.163Z | 2026-08-28T22:35:31.879Z | |
| cve-2026-68513 | OpenEXR: Heap buffer overflow in PyOpenEXR from litera… |
AcademySoftwareFoundation |
openexr |
2026-08-25T19:06:11.692Z | 2026-08-28T22:34:26.075Z | |
| cve-2026-79786 | 7 (v4.0) 7.1 (v3.1) | Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI … |
coroot |
coroot |
2026-08-25T18:23:14.494Z | 2026-08-28T22:33:16.534Z |
| cve-2026-55618 | eml_parser: URL extraction bypass via HTML entities in URLs |
GOVCERT-LU |
eml_parser |
2026-08-25T18:21:56.178Z | 2026-08-28T22:31:14.584Z | |
| cve-2026-55585 | QWED: Authenticated Remote Code Execution via Unsafe S… |
QWED-AI |
qwed-verification |
2026-08-25T16:23:39.334Z | 2026-08-28T22:29:45.812Z | |
| cve-2026-55582 | mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias |
sonirico |
mcp-shell |
2026-08-25T15:37:43.486Z | 2026-08-28T22:28:54.025Z | |
| cve-2026-55536 | Browser Server WebSocket origin validation bypass via … |
MervinPraison |
PraisonAI |
2026-08-25T15:21:53.387Z | 2026-08-28T22:27:40.534Z | |
| cve-2026-79782 | 9.3 (v4.0) 3.1 (v3.1) | rclone before 1.74.4 Security Token Disclosure via HTT… |
rclone |
rclone |
2026-08-25T15:16:11.136Z | 2026-08-28T22:26:44.440Z |
| cve-2026-79777 | 5.1 (v4.0) 2.7 (v3.1) | rclone before v1.75.0 Information Disclosure via RC API |
rclone |
rclone |
2026-08-25T15:16:07.745Z | 2026-08-28T22:25:36.423Z |
| cve-2026-79772 | 6.9 (v4.0) 5.3 (v3.1) | Nokogiri before 1.19.1 Unchecked Return Value canonicalize |
sparklemotion |
nokogiri |
2026-08-25T15:16:04.400Z | 2026-08-28T22:24:47.141Z |
| cve-2026-8715 | 9.6 (v3.1) | Vault Secrets Operator vulnerable to arbitrary file re… |
HashiCorp |
Tooling |
2026-08-13T20:27:39.489Z | 2026-08-28T22:07:19.694Z |
| cve-2026-82018 | 6.8 (v4.0) 6.1 (v3.1) | IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.c… |
IGEL |
IGEL OS 12 |
2026-08-28T21:11:24.911Z | 2026-08-28T21:11:43.223Z |
| cve-2026-55248 | plone.app.portlets: Denial of service via RSS feed portlet |
plone |
plone.app.portlets |
2026-08-28T18:40:50.582Z | 2026-08-28T20:35:21.851Z | |
| cve-2026-55509 | WsgiDAV: Blind SQL injection in the MySQL provider |
mar10 |
wsgidav |
2026-08-28T18:11:54.402Z | 2026-08-28T20:34:38.686Z | |
| cve-2026-55566 | Yamcs: DOM XSS in Extension Routing |
yamcs |
yamcs |
2026-08-28T17:31:39.197Z | 2026-08-28T20:31:29.178Z | |
| cve-2026-55547 | Yamcs: Missing Authorization on Role and Privilege Enu… |
yamcs |
yamcs |
2026-08-28T17:11:34.332Z | 2026-08-28T20:30:11.670Z | |
| cve-2026-55064 | Vikunja incomplete fix for CVE-2026-35595: Write-only … |
go-vikunja |
vikunja |
2026-08-28T16:38:38.293Z | 2026-08-28T20:29:30.143Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-1041 | Multiples vulnérabilités dans Nextcloud Server | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1040 | Multiples vulnérabilités dans les produits Asterisk | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1039 | Multiples vulnérabilités dans Stormshield Network Security | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1038 | Multiples vulnérabilités dans les produits IBM | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1037 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1036 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1035 | Multiples vulnérabilités dans Microsoft Edge | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1034 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1033 | Multiples vulnérabilités dans Tenable Security Center | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1027 | Multiples vulnérabilités dans GitLab | 2023-12-14T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1032 | Vulnérabilité dans Microsoft Azure | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1031 | Multiples vulnérabilités dans Google Chrome | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1030 | Vulnérabilité dans Squid | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1029 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1028 | Vulnérabilité dans les produits Wallix | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1026 | Vulnérabilité dans VMware Workspace ONE Launcher | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1025 | Multiples vulnérabilités dans les produits Microsoft | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1024 | Multiples vulnérabilités dans Microsoft Azure | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1023 | Multiples vulnérabilités dans Microsoft Windows | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1022 | Multiples vulnérabilités dans Microsoft Office | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1021 | Multiples vulnérabilités dans les produits PRIM'X | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1020 | Multiples vulnérabilités dans les produits SAP | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1018 | Multiples vulnérabilités dans les produits Fortinet | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1017 | Multiples vulnérabilités dans les produits ElasticSearch | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1005 | Vulnérabilité dans Apache Struts 2 | 2023-12-07T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2022-avi-853 | Vulnérabilité dans Sophos Firewall | 2022-09-26T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1016 | Vulnérabilité dans Xen | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1015 | Multiples vulnérabilités dans les produits Siemens | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1014 | Multiples vulnérabilités dans les produits Schneider Electric | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1013 | Multiples vulnérabilités dans les produits Apple | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |