Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-47665 | Penpot: Stored XSS via comment content, innerHTML rend… |
penpot |
penpot |
2026-08-26T22:50:34.362Z | 2026-08-27T15:16:47.257Z | |
| cve-2026-78947 | N/A | Incomplete cleanup in Chromium in Google Chrome p… |
Google |
Chrome |
2026-08-25T20:10:55.353Z | 2026-08-27T15:15:51.016Z |
| cve-2026-47850 | 4.3 (v3.1) | Spring Data REST allows mutation of the version proper… |
Spring |
Spring Data REST |
2026-08-26T23:28:40.729Z | 2026-08-27T15:15:43.277Z |
| cve-2026-55529 | PraisonAI: Origin validation bypass in MCP HTTP Stream… |
MervinPraison |
PraisonAI |
2026-08-25T14:26:30.692Z | 2026-08-27T15:15:14.217Z | |
| cve-2026-47851 | 7.5 (v3.1) | Unbounded recursion over attacker-controlled PDF outli… |
Spring |
Spring AI |
2026-08-26T23:28:41.732Z | 2026-08-27T15:14:42.087Z |
| cve-2026-79406 | macrozheng mall quantity OmsCartItemServiceImpl.update… |
macrozheng |
mall |
2026-08-25T13:00:09.821Z | 2026-08-27T15:14:14.547Z | |
| cve-2026-47852 | 7.5 (v3.1) | Predictable cache directory location allows local ONNX… |
Spring |
Spring AI |
2026-08-26T23:28:42.767Z | 2026-08-27T15:13:55.925Z |
| cve-2026-47856 | 6.3 (v3.1) | JsonToObjectTransformer resolves the json__TypeId__ me… |
Spring |
Spring Integration |
2026-08-26T23:28:43.829Z | 2026-08-27T15:12:42.355Z |
| cve-2026-79666 | 7.1 (v4.0) 6.5 (v3.1) | Ech0 before 4.4.3 Missing Authorization via dashboard … |
lin-snow |
Ech0 |
2026-08-25T11:33:28.747Z | 2026-08-27T15:11:56.193Z |
| cve-2026-79661 | 6.9 (v4.0) 6.5 (v3.1) | Ech0 before 4.7.3 Unauthenticated fav_count Modification |
lin-snow |
Ech0 |
2026-08-25T11:33:25.369Z | 2026-08-27T15:10:35.322Z |
| cve-2026-79021 | N/A | Missing authorization in InterestGroups in Google… |
Google |
Chrome |
2026-08-25T20:10:57.838Z | 2026-08-27T15:07:53.241Z |
| cve-2026-47857 | 5.9 (v3.1) | Reactor Core windowTimeout fair-backpressure stream ha… |
Spring |
Reactor Core |
2026-08-26T23:28:44.743Z | 2026-08-27T15:07:38.775Z |
| cve-2026-18982 | 8.8 (v3.1) | Odh-training-operator-rhel9: rhoai fork aggregates tra… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:45:19.349Z | 2026-08-27T15:07:01.477Z |
| cve-2026-18951 | 8.8 (v3.1) | Odh-training-operator-rhel9: [trainer v2 security] trn… |
Red Hat |
Red Hat OpenShift AI 3.3 |
2026-08-10T20:45:10.112Z | 2026-08-27T15:06:57.539Z |
| cve-2026-18948 | 9.9 (v3.1) | Feast: feast: unsafe dill deserialization of registry-… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:56.502Z | 2026-08-27T15:06:49.889Z |
| cve-2026-19949 | All-in-One WP Migration and Backup <= 7.109 - Unauthen… |
servmask |
All-in-One WP Migration and Backup |
2026-08-25T11:27:11.038Z | 2026-08-27T15:06:46.926Z | |
| cve-2026-18621 | 7.6 (v3.1) | Data-sciences-pipeline: dsp: v1 argo template path acc… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:37.373Z | 2026-08-27T15:06:44.923Z |
| cve-2026-18617 | 8.8 (v3.1) | Data-science-pipelines-operator: dspo: mysql dsn param… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:33.507Z | 2026-08-27T15:06:39.282Z |
| cve-2026-47880 | 5.4 (v3.1) | DefaultJmsHeaderMapper copies all JMS user properties … |
Spring |
Spring Integration |
2026-08-27T05:20:25.359Z | 2026-08-27T15:06:37.711Z |
| cve-2026-18608 | 8.7 (v3.1) | Data-science-pipelines-operator: dspo: operator cluste… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:28.339Z | 2026-08-27T15:06:34.493Z |
| cve-2026-16745 | 8.8 (v3.1) | Odh-dashboard: odh-dashboard: backend port 8080 trusts… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-07-23T10:41:30.121Z | 2026-08-27T15:06:29.192Z |
| cve-2026-15581 | 8 (v3.1) | Trustyai-service-operator: trustyai-service-operator: … |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:18.319Z | 2026-08-27T15:06:23.537Z |
| cve-2026-15467 | 8.1 (v3.1) | Trustyai-service-operator: trustyai-service-operator: … |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:12.686Z | 2026-08-27T15:06:18.175Z |
| cve-2026-15378 | 9.3 (v3.1) | Guardrails-detectors: guardrails-detectors: ssrf and l… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-07-10T09:29:55.593Z | 2026-08-27T15:06:13.501Z |
| cve-2026-78863 | liketrek TREK Pre-2FA mfa_token authService.ts loginUs… |
liketrek |
TREK |
2026-08-25T11:00:10.236Z | 2026-08-27T15:06:04.339Z | |
| cve-2026-14450 | 9.9 (v3.1) | Maas-billing: maas api: privilege escalation via forge… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-08-10T20:44:06.818Z | 2026-08-27T15:06:04.247Z |
| cve-2026-13717 | 8.8 (v3.1) | Rhoai maas: llm-d: maas/llm-d inference gateway: defau… |
|
|
2026-08-10T20:44:01.309Z | 2026-08-27T15:06:00.355Z |
| cve-2026-63587 | 8.8 (v4.0) 8.6 (v3.1) | SMS Password Authorization Bypass via Failed Attempt Counter |
Weidmueller Interface |
IE-SR-2TX-WL-4G-EU |
2026-08-25T08:55:12.442Z | 2026-08-27T15:04:29.396Z |
| cve-2026-65641 | A vulnerability allowing an unauthenticated netwo… |
Veeam |
One |
2026-08-26T21:21:40.955Z | 2026-08-27T15:04:11.392Z | |
| cve-2026-58070 | A vulnerability that records guest OS processing … |
Veeam |
Backup and Replication |
2026-08-26T21:21:41.107Z | 2026-08-27T15:04:11.211Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-377 | Vulnérabilité dans Xen | 2017-10-24T00:00:00.000000 | 2017-10-24T00:00:00.000000 |
| certfr-2017-avi-374 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-20T00:00:00.000000 | 2017-10-23T00:00:00.000000 |
| certfr-2017-avi-376 | Vulnérabilité dans F5 BIG-IP | 2017-10-20T00:00:00.000000 | 2017-10-20T00:00:00.000000 |
| certfr-2017-avi-375 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2017-10-20T00:00:00.000000 | 2017-10-20T00:00:00.000000 |
| certfr-2017-avi-373 | Multiples vulnérabilités dans RedHat wpa_supplicant | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-372 | Multiples vulnérabilités dans les produits Cisco | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-371 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-370 | Multiples vulnérabilités dans Oracle Database Server | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-369 | Multiples vulnérabilités dans la suite de produits Oracle Sun System | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-368 | Multiples vulnérabilités dans Oracle Virtualization | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-367 | Multiples vulnérabilités dans Oracle MySQL | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-366 | Multiples vulnérabilités dans Oracle Java SE | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-365 | Multiples vulnérabilités dans Juniper Junos Space | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-364 | Multiples vulnérabilités dans Google Chrome | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-363 | Multiples vulnérabilités dans SUSE wpa_supplicant | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-362 | Multiples vulnérabilités dans NVIDIA Tegra Jetson L4T | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-361 | Multiples vulnérabilités dans les produits Juniper utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-360 | Multiples vulnérabilités dans les produits Fortinet utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-359 | Multiples vulnérabilités dans Ubuntu wpa_supplicant et hostpad | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-358 | Multiples vulnérabilités dans Debian sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-357 | Vulnérabilité dans Microsoft Windows sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-356 | Multiples vulnérabilités dans Adobe ColdFusion | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-355 | Multiples vulnérabilités dans Adobe Flash Player | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-354 | Multiples vulnérabilités dans Adobe RoboHelp | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-353 | Vulnérabilité dans le noyau Linux de SUSE | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-352 | Multiples vulnérabilités dans Fortinet FortiWLC et FortiMail | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-351 | Multiples vulnérabilités dans Xen | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-350 | Multiples vulnérabilités dans Citrix XenServer | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-349 | Vulnérabilité dans SCADA Siemens BACnet field panels | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-348 | Multiples vulnérabilités dans les produits Juniper | 2017-10-12T00:00:00.000000 | 2017-10-12T00:00:00.000000 |