Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-69225 | 5.9 (v3.1) | information disclosure vulnerability in Esri Portal fo… |
Esri |
Portal for ArcGIS |
2026-08-21T20:46:39.386Z | 2026-08-24T13:01:25.294Z |
| cve-2026-69238 | 3.5 (v3.1) | HTML injection vulnerability in Esri Portal for ArcGIS |
Esri |
Portal for ArcGIS |
2026-08-21T20:46:03.539Z | 2026-08-24T13:01:25.446Z |
| cve-2026-69224 | 5.9 (v3.1) | information disclosure vulnerability in Esri Portal fo… |
Esri |
Portal for ArcGIS |
2026-08-21T20:45:03.056Z | 2026-08-24T13:01:25.595Z |
| cve-2026-77354 | kin-openapi: Uncontrolled resource consumption in open… |
getkin |
kin-openapi |
2026-08-21T20:44:47.792Z | 2026-08-25T19:15:23.235Z | |
| cve-2026-76905 | kin-openapi openai3filter: nil-pointer panic in Conver… |
getkin |
kin-openapi |
2026-08-21T20:43:07.066Z | 2026-08-25T14:21:42.702Z | |
| cve-2026-63135 | YOURLS: Stored XSS in referrer statistics chart via cr… |
YOURLS |
YOURLS |
2026-08-21T20:40:08.199Z | 2026-08-26T17:40:42.981Z | |
| cve-2026-30890 | Combodo iTop: Reflected XSS in synchro/synchro_import.php |
Combodo |
iTop |
2026-08-21T20:40:05.045Z | 2026-08-26T17:39:53.193Z | |
| cve-2026-30865 | Combodo iTop: Reflected XSS in dashboard save |
Combodo |
iTop |
2026-08-21T20:37:20.408Z | 2026-08-24T19:43:49.989Z | |
| cve-2026-61539 | Xinference: Remote code execution via unsafe `eval()` … |
xorbitsai |
inference |
2026-08-21T20:37:02.633Z | 2026-08-24T19:45:13.875Z | |
| cve-2026-53656 | FiftyOne App server uses wildcard CORS (Access-Control… |
voxel51 |
fiftyone |
2026-08-21T20:34:55.783Z | 2026-08-21T21:42:44.374Z | |
| cve-2026-54457 | TensorZero: Arbitrary file read and SSRF in TensorZero… |
tensorzero |
tensorzero |
2026-08-21T20:34:03.632Z | 2026-08-25T13:38:42.654Z | |
| cve-2026-55168 | Runtipi: Authenticated arbitrary file write via backup… |
runtipi |
runtipi |
2026-08-21T20:31:38.124Z | 2026-08-25T17:01:52.501Z | |
| cve-2026-64679 | Atlantis: Path Traversal in Atlantis Workspace Handlin… |
runatlantis |
atlantis |
2026-08-21T20:29:55.106Z | 2026-08-25T17:05:09.821Z | |
| cve-2026-44517 | Buildah: Build breakout using malicious Containerfile … |
containers |
buildah |
2026-08-21T20:29:00.354Z | 2026-08-25T17:07:10.143Z | |
| cve-2026-59989 | Phalcon Volt compiler `join` filter compile-time PHP c… |
phalcon |
cphalcon |
2026-08-21T20:25:44.767Z | 2026-08-27T16:24:50.700Z | |
| cve-2026-62283 | Nezha Monitoring: Cross-tenant terminal/file-manager s… |
nezhahq |
nezha |
2026-08-21T20:21:28.712Z | 2026-08-21T21:42:51.779Z | |
| cve-2026-77219 | 6.9 (v4.0) 7.1 (v3.1) | GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Ima… |
GNU |
Emacs |
2026-08-21T20:20:45.314Z | 2026-08-21T21:42:58.824Z |
| cve-2026-55185 | Miniflux 2: Open Redirect Bypass |
miniflux |
v2 |
2026-08-21T20:19:14.122Z | 2026-08-24T19:46:50.850Z | |
| cve-2026-62316 | Microsoft UFO: DNS Rebinding → Unauthenticated File Re… |
microsoft |
UFO |
2026-08-21T20:17:21.272Z | 2026-08-25T14:19:38.936Z | |
| cve-2026-30826 | Combodo iTop: Reflected XSS in run_query.php |
Combodo |
iTop |
2026-08-21T20:15:42.604Z | 2026-08-21T21:43:06.834Z | |
| cve-2026-63421 | Keystone: `graphql.maxTake` bypass with negative `take` |
keystonejs |
keystone |
2026-08-21T20:15:16.459Z | 2026-08-26T17:39:12.659Z | |
| cve-2026-76904 | GeoTools has unauthenticated SQL injection in the json… |
geotools |
geotools |
2026-08-21T20:13:20.536Z | 2026-08-27T16:24:50.888Z | |
| cve-2026-61824 | Defuddle: XSS via unescaped attribute interpolation i… |
kepano |
defuddle |
2026-08-21T20:12:53.225Z | 2026-08-24T19:48:53.974Z | |
| cve-2026-53572 | KEDA: PostgreSQL connection string parameter injection… |
kedacore |
keda |
2026-08-21T20:11:56.479Z | 2026-08-25T17:13:43.120Z | |
| cve-2026-68508 | Hydra: hydra.utils.instantiate with untrusted config c… |
facebookresearch |
hydra |
2026-08-21T20:09:26.113Z | 2026-08-21T21:43:13.889Z | |
| cve-2026-77811 | 8.7 (v3.1) 6.2 (v4.0) | Stored Cross-Site Scripting via Integration Template A… |
AWS |
Amazon OpenSearch Service |
2026-08-21T20:09:19.151Z | 2026-08-27T16:46:19.625Z |
| cve-2026-45099 | Terragrunt: Arbitrary File Deletion via Malicious Modu… |
gruntwork-io |
terragrunt |
2026-08-21T20:07:33.195Z | 2026-08-25T14:23:16.006Z | |
| cve-2026-30819 | Combodo iTop: Reflected XSS in /pages/ajax.render.php … |
Combodo |
iTop |
2026-08-21T20:05:47.126Z | 2026-08-21T20:21:48.873Z | |
| cve-2026-62960 | Git for Windows: Server-advertised bundle-uri can trig… |
git-for-windows |
git |
2026-08-21T20:05:45.099Z | 2026-08-26T17:38:14.501Z | |
| cve-2026-27490 | Combodo iTop: Weak secret generation for inline image |
Combodo |
iTop |
2026-08-21T19:59:29.384Z | 2026-08-25T17:16:32.291Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0520 | Multiples vulnérabilités dans Aruba ArubaOS | 2023-07-10T00:00:00.000000 | 2023-07-10T00:00:00.000000 |
| certfr-2023-avi-0519 | Multiples vulnérabilités dans Progress Software MOVEit Transfer | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0518 | Vulnérabilité dans les produits VMware | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0517 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0516 | Multiples vulnérabilités dans Google Android | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0515 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0514 | Multiples vulnérabilités dans les produits Tenable | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0513 | Multiples vulnérabilités dans les produits IBM | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0512 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-07-07T00:00:00.000000 | 2023-07-07T00:00:00.000000 |
| certfr-2023-avi-0511 | Vulnérabilité dans les produits GitLab Enterprise Edition | 2023-07-06T00:00:00.000000 | 2023-07-06T00:00:00.000000 |
| certfr-2023-avi-0510 | Vulnérabilité dans les produits Axis | 2023-07-05T00:00:00.000000 | 2023-07-05T00:00:00.000000 |
| certfr-2023-avi-0509 | Multiples vulnérabilités dans les produits Mozilla | 2023-07-05T00:00:00.000000 | 2023-07-05T00:00:00.000000 |
| certfr-2023-avi-0508 | Vulnérabilité dans les produits Moxa | 2023-07-03T00:00:00.000000 | 2023-07-03T00:00:00.000000 |
| certfr-2023-avi-0507 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0506 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0505 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0504 | Multiples vulnérabilités dans les produits IBM | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0503 | Multiples vulnérabilités dans Microsoft Edge | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0502 | Vulnérabilité dans Elasticsearch | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0501 | Multiples vulnérabilités dans GitLab | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0500 | Multiples vulnérabilités dans MongoDB | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0499 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2023-06-30T00:00:00.000000 | 2023-06-30T00:00:00.000000 |
| certfr-2023-avi-0498 | Multiples vulnérabilités dans Synology Mail Station | 2023-06-29T00:00:00.000000 | 2023-06-29T00:00:00.000000 |
| certfr-2023-avi-0497 | Multiples vulnérabilités dans Grafana | 2023-06-29T00:00:00.000000 | 2023-06-29T00:00:00.000000 |
| certfr-2023-avi-0496 | Multiples vulnérabilités dans Tenable Nessus | 2023-06-29T00:00:00.000000 | 2023-06-29T00:00:00.000000 |
| certfr-2023-avi-0495 | Multiples vulnérabilités dans Google Chrome | 2023-06-27T00:00:00.000000 | 2023-06-27T00:00:00.000000 |
| certfr-2023-avi-0494 | Multiples vulnérabilités dans Stormshield Endpoint Security | 2023-06-27T00:00:00.000000 | 2023-06-27T00:00:00.000000 |
| certfr-2023-avi-0493 | Vulnérabilité dans les produits Tenable | 2023-06-27T00:00:00.000000 | 2023-06-27T00:00:00.000000 |
| certfr-2023-avi-0492 | Vulnérabilité dans les produits Ivanti | 2023-06-27T00:00:00.000000 | 2023-06-27T00:00:00.000000 |
| certfr-2023-avi-0491 | Multiples vulnérabilités dans Liferay | 2023-06-26T00:00:00.000000 | 2023-06-26T00:00:00.000000 |