Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78174 | WatchGuard Dimension Session Hijack via Exposed Sessio… |
WatchGuard |
Dimension |
2026-08-27T23:26:30.875Z | 2026-08-28T15:56:52.024Z | |
| cve-2026-78499 | Dimension SSRF via FTP Server Test Connection |
WatchGuard |
Dimension |
2026-08-27T23:26:30.962Z | 2026-08-28T15:56:45.148Z | |
| cve-2026-78610 | Dimension CSRF Vulnerability in Administrator Passphra… |
WatchGuard |
Dimension |
2026-08-27T23:26:31.006Z | 2026-08-28T15:56:36.349Z | |
| cve-2026-78047 | Dimension Stored XSS in Scheduled Report Task |
WatchGuard |
Dimension |
2026-08-27T23:26:31.142Z | 2026-08-28T15:56:28.158Z | |
| cve-2026-78617 | WatchGuard Dimension Web UI Authentication Brute-Force… |
WatchGuard |
Dimension |
2026-08-27T23:26:31.148Z | 2026-08-28T15:56:20.069Z | |
| cve-2026-18978 | LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cros… |
litespeedtech |
LiteSpeed Cache |
2026-08-28T03:39:34.235Z | 2026-08-28T15:56:13.204Z | |
| cve-2026-4246 | ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cro… |
wpmet |
ElementsKit Pro |
2026-08-28T05:30:45.369Z | 2026-08-28T15:56:07.074Z | |
| cve-2026-6128 | All-in-One WP Migration Unlimited Extension <= 2.84 - … |
servmask |
All-in-One WP Migration Unlimited Extension |
2026-08-28T07:40:16.550Z | 2026-08-28T15:55:58.355Z | |
| cve-2026-54713 | CakePHP Queue: Incomplete Comparison in getUniqueId vu… |
cakephp |
queue |
2026-08-27T17:03:31.580Z | 2026-08-28T15:55:52.105Z | |
| cve-2026-18393 | 5.4 (v3.1) | Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_curs… |
Red Hat |
Red Hat Enterprise Linux AI (RHEL AI) 3 |
2026-08-28T09:05:35.022Z | 2026-08-28T15:55:50.649Z |
| cve-2026-27852 | 7.5 (v3.1) | An attacker that can send mail to a user can craf… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:11.070Z | 2026-08-28T15:55:41.500Z |
| cve-2026-33263 | 4.3 (v3.1) | When mail_max_userip_connections is set (default … |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:12.032Z | 2026-08-28T15:55:33.617Z |
| cve-2026-47103 | 9.3 (v4.0) 9.8 (v3.1) | Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval()… |
fgmacedo |
python-statemachine |
2026-06-17T14:32:08.180Z | 2026-08-28T15:55:32.126Z |
| cve-2026-33604 | 5.9 (v3.1) | An attacker that can get Dovecot to relay a messa… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:12.996Z | 2026-08-28T15:55:26.026Z |
| cve-2026-33605 | 7.5 (v3.1) | An unauthenticated attacker can crash the ManageS… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:13.963Z | 2026-08-28T15:55:19.368Z |
| cve-2026-33606 | 4.8 (v3.1) | Mail content stored by a user can be crafted so t… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:14.932Z | 2026-08-28T15:55:05.515Z |
| cve-2026-33607 | 4.3 (v3.1) | An attacker that has valid credentials can use IM… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:15.779Z | 2026-08-28T15:54:47.683Z |
| cve-2026-40013 | 4.3 (v3.1) | An attacker that has valid credentials can submit… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:16.751Z | 2026-08-28T15:54:38.082Z |
| cve-2026-40014 | 6.5 (v3.1) | An attacker that can send mail to a user can craf… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:17.711Z | 2026-08-28T15:54:30.823Z |
| cve-2026-42007 | 9.1 (v3.1) | An attacker that has valid credentials can use a … |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:25.136Z | 2026-08-28T15:54:24.354Z |
| cve-2026-42008 | 4.3 (v3.1) | Forwarding information received from a host liste… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:26.018Z | 2026-08-28T15:54:17.203Z |
| cve-2026-9147 | 8.5 (v4.0) 7.8 (v3.1) | uproot 5.7.4 and prior Code Injection via TStreamerInf… |
scikit-hep |
uproot |
2026-07-18T12:46:26.694Z | 2026-08-28T15:54:16.312Z |
| cve-2026-42391 | 7.5 (v3.1) | An unauthenticated attacker can send an IMAP ID c… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:27.000Z | 2026-08-28T15:54:09.305Z |
| cve-2026-42392 | 4.3 (v3.1) | An attacker that has valid credentials can send a… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:27.979Z | 2026-08-28T15:53:58.772Z |
| cve-2026-42393 | 3.1 (v3.1) | The comparison used for the doveadm password and … |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:28.849Z | 2026-08-28T15:53:51.809Z |
| cve-2026-42395 | 4.3 (v3.1) | A host listed as a trusted proxy can send forward… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:29.710Z | 2026-08-28T15:53:43.599Z |
| cve-2026-52681 | 3.1 (v3.1) | Sieve CPU resource usage is tracked in the compil… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:30.766Z | 2026-08-28T15:53:36.937Z |
| cve-2026-52687 | 6.5 (v3.1) | An attacker that has valid credentials can select… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:31.701Z | 2026-08-28T15:53:30.084Z |
| cve-2026-73208 | 7.4 (v3.1) | An attacker that holds a token intended for a dif… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:32.679Z | 2026-08-28T15:53:21.257Z |
| cve-2026-76640 | 7.7 (v4.0) 7.5 (v3.1) | Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisionin… |
Unitree Robotics |
G1 EDU |
2026-08-27T17:52:11.749Z | 2026-08-28T15:53:16.149Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0710 | Multiples vulnérabilités dans SolarWinds Serv-U | 2023-09-05T00:00:00.000000 | 2023-09-05T00:00:00.000000 |
| certfr-2023-avi-0709 | Vulnérabilité dans Microsoft Edge | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0708 | Multiples vulnérabilités dans Moxa MXSecurity | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0707 | Multiples vulnérabilités dans GitLab | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0706 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0705 | Multiples vulnérabilités dans les produits IBM | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0704 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0703 | Multiples vulnérabilités dans Thunderbird | 2023-09-01T00:00:00.000000 | 2023-09-01T00:00:00.000000 |
| certfr-2023-avi-0702 | Vulnérabilité dans VMware Tools | 2023-08-31T00:00:00.000000 | 2023-08-31T00:00:00.000000 |
| certfr-2023-avi-0701 | Multiples vulnérabilités dans Splunk | 2023-08-31T00:00:00.000000 | 2023-08-31T00:00:00.000000 |
| certfr-2023-avi-0700 | Multiples vulnérabilités dans Aruba ArubaOS-Switch | 2023-08-30T00:00:00.000000 | 2023-08-30T00:00:00.000000 |
| certfr-2023-avi-0699 | Multiples vulnérabilités dans Trend Micro Mobile Security | 2023-08-30T00:00:00.000000 | 2023-08-30T00:00:00.000000 |
| certfr-2023-avi-0698 | Multiples vulnérabilités Tenable Nessus | 2023-08-30T00:00:00.000000 | 2023-08-30T00:00:00.000000 |
| certfr-2023-avi-0697 | Multiples vulnérabilités dans VMware Aria Operations for Networks | 2023-08-30T00:00:00.000000 | 2023-08-30T00:00:00.000000 |
| certfr-2023-avi-0696 | Vulnérabilité dans Juniper Junos-OS | 2023-08-30T00:00:00.000000 | 2023-08-30T00:00:00.000000 |
| certfr-2023-avi-0694 | Vulnérabilité dans les produits ClamAV | 2023-08-29T00:00:00.000000 | 2023-08-29T00:00:00.000000 |
| certfr-2023-avi-0693 | Vulnérabilité dans Synology SSL VPN Client | 2023-08-29T00:00:00.000000 | 2023-08-29T00:00:00.000000 |
| certfr-2023-avi-0692 | Vulnérabilité dans MISP | 2023-08-29T00:00:00.000000 | 2023-08-29T00:00:00.000000 |
| certfr-2023-avi-0691 | Vulnérabilité dans Apache Tomcat | 2023-08-28T00:00:00.000000 | 2023-08-28T00:00:00.000000 |
| certfr-2023-avi-0690 | Multiples vulnérabilités dans Microsoft Edge | 2023-08-28T00:00:00.000000 | 2023-08-28T00:00:00.000000 |
| certfr-2023-avi-0689 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0688 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0687 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0686 | Multiples vulnérabilités dans les produits IBM | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0685 | Multiples vulnérabilités dans Qnap QTS et QuTS hero | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0684 | Vulnérabilité dans SolarWinds Serv-U | 2023-08-25T00:00:00.000000 | 2023-08-25T00:00:00.000000 |
| certfr-2023-avi-0683 | Vulnérabilité dans les produits WithSecure | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0682 | Multiples vulnérabilités dans Mitel MiVoice Connect | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0681 | Multiples vulnérabilités dans les produits Cisco | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |
| certfr-2023-avi-0680 | Vulnérabilité dans MongoDB Server | 2023-08-24T00:00:00.000000 | 2023-08-24T00:00:00.000000 |