Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78178 | jQWidgets jqx-all.js jqxBaseFramework.extend prototype… |
n/a |
jQWidgets |
2026-08-24T02:45:08.783Z | 2026-08-27T14:37:19.886Z | |
| cve-2026-78185 | itsourcecode Sales and Inventory System cust_edit.php … |
itsourcecode |
Sales and Inventory System |
2026-08-24T04:00:08.931Z | 2026-08-27T14:37:11.062Z | |
| cve-2026-78198 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-24T05:15:09.154Z | 2026-08-27T14:37:04.574Z | |
| cve-2026-78244 | itsourcecode Real Estate Management System search.php … |
itsourcecode |
Real Estate Management System |
2026-08-24T10:30:10.234Z | 2026-08-27T14:36:54.345Z | |
| cve-2026-78250 | bytebot-ai bytebot Agent Execution Workflow infinite loop |
bytebot-ai |
bytebot |
2026-08-24T13:15:08.660Z | 2026-08-27T14:36:46.920Z | |
| cve-2026-71364 | 7.2 (v3.1) | Awx: project archive extraction allows path traversal … |
Red Hat |
Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
2026-08-24T15:21:54.196Z | 2026-08-27T14:36:37.181Z |
| cve-2026-63693 | 6.6 (v3.1) | Dell Client BIOS contains an Improper Link Resolu… |
Dell |
Alienware Area 51m R2 |
2026-08-24T19:40:03.175Z | 2026-08-27T14:36:28.474Z |
| cve-2026-17113 | 6 (v3.1) | Cri-o: cri-o: unvalidated image env var causes daemon crash |
|
|
2026-08-24T21:22:49.638Z | 2026-08-27T14:36:20.534Z |
| cve-2026-78638 | peerigon unzip-crx/unzip-crx-3 Archive Extraction inde… |
peerigon |
unzip-crx |
2026-08-25T05:30:08.899Z | 2026-08-27T14:36:08.272Z | |
| cve-2026-56702 | 7.1 (v4.0) 8.8 (v3.1) | Adminer before 5.4.3 Unrestricted File Upload via Admi… |
vrana |
adminer |
2026-08-25T01:30:00.475Z | 2026-08-27T14:36:04.749Z |
| cve-2026-78885 | liketrek TREK OIDC Service oidcService.ts findOrCreate… |
liketrek |
TREK |
2026-08-25T12:15:08.513Z | 2026-08-27T14:35:57.758Z | |
| cve-2026-79623 | FishCodeTech Muteki Default Local Worker Backend setti… |
FishCodeTech |
Muteki |
2026-08-25T13:30:09.438Z | 2026-08-27T14:35:48.228Z | |
| cve-2026-79717 | 6.4 (v3.1) | Galaxy_ng: galaxy_ng: blind ssrf via namespace avatar_… |
Red Hat |
Red Hat Ansible Automation Platform 2 |
2026-08-25T14:53:45.382Z | 2026-08-27T14:35:40.044Z |
| cve-2026-45019 | Chainlit: SSRF via MCP SSE and streamable-http transpo… |
Chainlit |
chainlit |
2026-08-25T19:20:59.339Z | 2026-08-27T14:35:27.308Z | |
| cve-2026-55588 | ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Re… |
oras-project |
oras |
2026-08-25T20:32:18.677Z | 2026-08-27T14:35:19.147Z | |
| cve-2026-62861 | TypeBot: Cross-tenant custom-domain removal via unboun… |
baptisteArno |
typebot.io |
2026-08-25T21:46:24.861Z | 2026-08-27T14:35:10.158Z | |
| cve-2026-80186 | 7.6 (v3.1) | Bluez: stack overflow in name2utf8 causes dos and pote… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-25T21:58:16.875Z | 2026-08-27T14:34:59.323Z |
| cve-2026-70665 | Doorkeeper OpenID Connect: DCR endpoint persists unval… |
doorkeeper-gem |
doorkeeper-openid_connect |
2026-08-25T22:09:53.197Z | 2026-08-27T14:34:50.455Z | |
| cve-2026-79911 | TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-b… |
TOTOLINK |
N600R |
2026-08-25T22:15:13.200Z | 2026-08-27T14:34:41.311Z | |
| cve-2026-57171 | Trestle is vulnerable to arbitrary file write via path… |
oscal-compass |
compliance-trestle |
2026-08-25T23:39:16.186Z | 2026-08-27T14:34:33.261Z | |
| cve-2026-18431 | Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthentic… |
themefusion |
Avada (Fusion) Builder |
2026-08-26T06:08:28.442Z | 2026-08-27T14:34:23.749Z | |
| cve-2026-2388 | Reviews and Rating – Google Reviews <= 5.10 - Authenti… |
designextreme |
Reviews and Rating – Google Reviews |
2026-08-26T09:27:43.234Z | 2026-08-27T14:34:17.895Z | |
| cve-2026-15990 | Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary… |
Strategy11 |
Formidable Charts |
2026-08-26T13:28:08.896Z | 2026-08-27T14:34:07.818Z | |
| cve-2026-16434 | 2.3 (v4.0) | Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass |
vrana |
adminer |
2026-08-25T01:29:57.018Z | 2026-08-27T14:34:04.155Z |
| cve-2026-54511 | @logtape/syslog: syslog log injection via unescaped co… |
dahlia |
logtape |
2026-08-26T14:27:27.910Z | 2026-08-27T14:33:57.212Z | |
| cve-2026-32257 | Winter: Stored XSS through Brand Settings custom styles |
wintercms |
winter |
2026-08-26T16:45:12.100Z | 2026-08-27T14:33:49.017Z | |
| cve-2026-54256 | Winter: Authenticated IDOR in backend FileUpload widge… |
wintercms |
winter |
2026-08-26T17:53:36.237Z | 2026-08-27T14:33:39.110Z | |
| cve-2026-67275 | 5.3 (v3.1) | Dell PowerProtect One, versions 20.1.0.0 and belo… |
Dell |
PowerProtect One |
2026-08-26T19:01:27.487Z | 2026-08-27T14:33:32.218Z |
| cve-2026-46371 | Fleet: Observer-level enrollment secret extraction via… |
fleetdm |
fleet |
2026-08-26T19:06:12.147Z | 2026-08-27T14:33:22.566Z | |
| cve-2026-74770 | 8.8 (v3.1) | Dell PowerProtect One, versions 20.1.0.0 and belo… |
Dell |
PowerProtect One |
2026-08-26T19:17:41.915Z | 2026-08-27T14:33:15.683Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-409 | Multiples vulnérabilités dans Microsoft Windows | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-407 | Multiples vulnérabilités dans Microsoft Edge | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-406 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-405 | Vulnérabilité dans F5 BIG-IP | 2017-11-14T00:00:00.000000 | 2017-11-14T00:00:00.000000 |
| certfr-2017-avi-404 | Multiples vulnérabilités dans VMware vCenter Server | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-403 | Multiples vulnérabilités dans Apple iOS | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-402 | Vulnérabilité dans SCADA Schneider Electric InduSoft Web Studio et InTouch Machine Edition | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-401 | Multiples vulnérabilités dans Asterisk | 2017-11-09T00:00:00.000000 | 2017-11-09T00:00:00.000000 |
| certfr-2017-avi-400 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-09T00:00:00.000000 | 2017-11-09T00:00:00.000000 |
| certfr-2017-avi-399 | Vulnérabilité dans Schneider Electric EcoStruxure Power Monitoring Expert et EcoStruxure Building Operation | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-398 | Multiples vulnérabilités dans NVIDIA Shield Tablet | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-397 | Multiples vulnérabilités dans Magento | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-396 | Multiples vulnérabilités dans Joomla! | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-395 | Multiples vulnérabilités dans Google Chrome | 2017-11-07T00:00:00.000000 | 2017-11-07T00:00:00.000000 |
| certfr-2017-avi-394 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-11-07T00:00:00.000000 | 2017-11-07T00:00:00.000000 |
| certfr-2017-avi-392 | Multiples vulnérabilités dans Fortinet FortiOS | 2017-11-06T00:00:00.000000 | 2017-11-06T00:00:00.000000 |
| certfr-2017-avi-391 | Multiples vulnérabilités dans OpenSSL | 2017-11-03T00:00:00.000000 | 2017-11-03T00:00:00.000000 |
| certfr-2017-avi-390 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-03T00:00:00.000000 | 2017-11-03T00:00:00.000000 |
| certfr-2017-avi-389 | Multiples vulnérabilités dans les produits Cisco | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-388 | Vulnérabilité dans WordPress | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-387 | Vulnérabilité dans Fortinet FortiClient | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-386 | Vulnérabilité dans MongoDB | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-385 | Multiples vulnérabilités dans les produits Apple | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-384 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-10-31T00:00:00.000000 | 2017-10-31T00:00:00.000000 |
| certfr-2017-avi-383 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-31T00:00:00.000000 | 2017-10-31T00:00:00.000000 |
| certfr-2017-avi-382 | Vulnérabilité dans Google Chrome | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-381 | Multiples vulnérabilités dans PHP | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-380 | Multiples vulnérabilités dans Apache OpenOffice | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-379 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-378 | Vulnérabilité dans Citrix XenServer | 2017-10-24T00:00:00.000000 | 2017-10-24T00:00:00.000000 |