Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18620 | 7.1 (v3.1) | Data-sciences-pipeline: user-controlled serviceaccount… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:45:43.411Z | 2026-08-27T15:21:27.567Z |
| cve-2026-18611 | 7.5 (v3.1) | Data-science-pipelines-operator: dspo: cryptographical… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:45:35.180Z | 2026-08-27T15:21:21.153Z |
| cve-2026-15218 | 7.9 (v3.1) | Models-as-a-service: red hat openshift ai: maas-api an… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-08-17T13:39:18.673Z | 2026-08-27T15:21:12.613Z |
| cve-2026-55228 | Weblate:: WebIDOR in GroupViewSet allows authenticated… |
WeblateOrg |
weblate |
2026-08-26T20:14:02.713Z | 2026-08-27T15:20:40.892Z | |
| cve-2026-79108 | N/A | UI misrepresentation in Web Authentication (Passk… |
Google |
Chrome |
2026-08-25T20:10:54.601Z | 2026-08-27T15:19:44.940Z |
| cve-2026-77507 | Weblate: Object-scoped RSS feeds disclose private chan… |
WeblateOrg |
weblate |
2026-08-26T20:45:23.951Z | 2026-08-27T15:19:25.959Z | |
| cve-2026-55540 | PraisonAI: [Path Traversal] agent tools escape the con… |
MervinPraison |
PraisonAI |
2026-08-25T14:54:32.407Z | 2026-08-27T15:19:10.382Z | |
| cve-2026-81202 | itsourcecode Payroll System CRUD Operation ajax.php de… |
itsourcecode |
Payroll System |
2026-08-26T21:30:11.519Z | 2026-08-27T15:18:33.470Z | |
| cve-2026-78980 | N/A | Improper input validation in ReaderMode in Google… |
Google |
Chrome |
2026-08-25T20:10:55.151Z | 2026-08-27T15:18:26.804Z |
| cve-2026-55534 | PraisonAI serve agents --api-key is ignored, allowing … |
MervinPraison |
PraisonAI |
2026-08-25T14:41:13.869Z | 2026-08-27T15:18:13.151Z | |
| cve-2026-47665 | Penpot: Stored XSS via comment content, innerHTML rend… |
penpot |
penpot |
2026-08-26T22:50:34.362Z | 2026-08-27T15:16:47.257Z | |
| cve-2026-78947 | N/A | Incomplete cleanup in Chromium in Google Chrome p… |
Google |
Chrome |
2026-08-25T20:10:55.353Z | 2026-08-27T15:15:51.016Z |
| cve-2026-47850 | 4.3 (v3.1) | Spring Data REST allows mutation of the version proper… |
Spring |
Spring Data REST |
2026-08-26T23:28:40.729Z | 2026-08-27T15:15:43.277Z |
| cve-2026-55529 | PraisonAI: Origin validation bypass in MCP HTTP Stream… |
MervinPraison |
PraisonAI |
2026-08-25T14:26:30.692Z | 2026-08-27T15:15:14.217Z | |
| cve-2026-47851 | 7.5 (v3.1) | Unbounded recursion over attacker-controlled PDF outli… |
Spring |
Spring AI |
2026-08-26T23:28:41.732Z | 2026-08-27T15:14:42.087Z |
| cve-2026-79406 | macrozheng mall quantity OmsCartItemServiceImpl.update… |
macrozheng |
mall |
2026-08-25T13:00:09.821Z | 2026-08-27T15:14:14.547Z | |
| cve-2026-47852 | 7.5 (v3.1) | Predictable cache directory location allows local ONNX… |
Spring |
Spring AI |
2026-08-26T23:28:42.767Z | 2026-08-27T15:13:55.925Z |
| cve-2026-47856 | 6.3 (v3.1) | JsonToObjectTransformer resolves the json__TypeId__ me… |
Spring |
Spring Integration |
2026-08-26T23:28:43.829Z | 2026-08-27T15:12:42.355Z |
| cve-2026-79666 | 7.1 (v4.0) 6.5 (v3.1) | Ech0 before 4.4.3 Missing Authorization via dashboard … |
lin-snow |
Ech0 |
2026-08-25T11:33:28.747Z | 2026-08-27T15:11:56.193Z |
| cve-2026-79661 | 6.9 (v4.0) 6.5 (v3.1) | Ech0 before 4.7.3 Unauthenticated fav_count Modification |
lin-snow |
Ech0 |
2026-08-25T11:33:25.369Z | 2026-08-27T15:10:35.322Z |
| cve-2026-79021 | N/A | Missing authorization in InterestGroups in Google… |
Google |
Chrome |
2026-08-25T20:10:57.838Z | 2026-08-27T15:07:53.241Z |
| cve-2026-47857 | 5.9 (v3.1) | Reactor Core windowTimeout fair-backpressure stream ha… |
Spring |
Reactor Core |
2026-08-26T23:28:44.743Z | 2026-08-27T15:07:38.775Z |
| cve-2026-18982 | 8.8 (v3.1) | Odh-training-operator-rhel9: rhoai fork aggregates tra… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:45:19.349Z | 2026-08-27T15:07:01.477Z |
| cve-2026-18951 | 8.8 (v3.1) | Odh-training-operator-rhel9: [trainer v2 security] trn… |
Red Hat |
Red Hat OpenShift AI 3.3 |
2026-08-10T20:45:10.112Z | 2026-08-27T15:06:57.539Z |
| cve-2026-18948 | 9.9 (v3.1) | Feast: feast: unsafe dill deserialization of registry-… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:56.502Z | 2026-08-27T15:06:49.889Z |
| cve-2026-19949 | All-in-One WP Migration and Backup <= 7.109 - Unauthen… |
servmask |
All-in-One WP Migration and Backup |
2026-08-25T11:27:11.038Z | 2026-08-27T15:06:46.926Z | |
| cve-2026-18621 | 7.6 (v3.1) | Data-sciences-pipeline: dsp: v1 argo template path acc… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:37.373Z | 2026-08-27T15:06:44.923Z |
| cve-2026-18617 | 8.8 (v3.1) | Data-science-pipelines-operator: dspo: mysql dsn param… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:33.507Z | 2026-08-27T15:06:39.282Z |
| cve-2026-47880 | 5.4 (v3.1) | DefaultJmsHeaderMapper copies all JMS user properties … |
Spring |
Spring Integration |
2026-08-27T05:20:25.359Z | 2026-08-27T15:06:37.711Z |
| cve-2026-18608 | 8.7 (v3.1) | Data-science-pipelines-operator: dspo: operator cluste… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:28.339Z | 2026-08-27T15:06:34.493Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2020-avi-822 | Multiples vulnérabilités dans les produits Kaspersky | 2020-12-15T00:00:00.000000 | 2020-12-15T00:00:00.000000 |
| certfr-2020-avi-821 | Multiples vulnérabilités dans les produits Apple | 2020-12-15T00:00:00.000000 | 2020-12-15T00:00:00.000000 |
| certfr-2020-avi-820 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2020-12-14T00:00:00.000000 | 2020-12-14T00:00:00.000000 |
| certfr-2020-avi-819 | Vulnérabilité dans F5 BIG-IP | 2020-12-14T00:00:00.000000 | 2020-12-14T00:00:00.000000 |
| certfr-2020-avi-818 | Multiples vulnérabilités dans Cisco Jabber | 2020-12-11T00:00:00.000000 | 2020-12-11T00:00:00.000000 |
| certfr-2020-avi-817 | Vulnérabilité dans F5 BIG-IP | 2020-12-11T00:00:00.000000 | 2020-12-11T00:00:00.000000 |
| certfr-2020-avi-816 | Vulnérabilité dans IBM Db2 | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-815 | Multiples vulnérabilités dans Palo Alto Cortex XDR | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-814 | Vulnérabilité dans Adobe Acrobat et Acrobat Reader | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-813 | Multiples vulnérabilités dans Foxit Reader et PhantomPDF | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-812 | Vulnérabilité dans Apache Struts | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-811 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-810 | Vulnérabilité dans le noyau Linux de Red Hat | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-809 | Multiples vulnérabilités dans Citrix Secure Mail pour Android | 2020-12-10T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-796 | Multiples vulnérabilités dans GitLab CE et EE | 2020-12-08T00:00:00.000000 | 2020-12-10T00:00:00.000000 |
| certfr-2020-avi-808 | Multiples vulnérabilités dans les produits Microsoft | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-807 | Multiples vulnérabilités dans Microsoft Windows | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-806 | Multiples vulnérabilités dans Microsoft Office | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-805 | Multiples vulnérabilités dans Microsoft Edge | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-804 | Multiples vulnérabilités dans Symantec Messaging Gateway | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-803 | Vulnérabilité dans OpenSSL | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-802 | Multiples vulnérabilités dans les produits Schneider Modicon | 2020-12-09T00:00:00.000000 | 2020-12-09T00:00:00.000000 |
| certfr-2020-avi-801 | Multiples vulnérabilités dans les produits Schneider | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-800 | Multiples vulnérabilités dans les produits Siemens | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-799 | Multiples vulnérabilités dans les produits SAP | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-798 | Multiples vulnérabilités dans IBM Db2 | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-797 | Vulnérabilité dans Tenable Nessus | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-795 | Multiples vulnérabilités dans Google Android | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-794 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2020-12-08T00:00:00.000000 | 2020-12-08T00:00:00.000000 |
| certfr-2020-avi-753 | [MàJ] Multiples vulnérabilités dans Cisco Security Manager | 2020-11-17T00:00:00.000000 | 2020-12-08T00:00:00.000000 |