Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-64851 | Grav Shortcode Core Plugin: Stored XSS in shortcode-co… |
getgrav |
grav-plugin-shortcode-core |
2026-08-19T15:56:43.614Z | 2026-08-19T16:33:32.946Z | |
| cve-2026-63408 | Grav API Plugin: JWT Access Token Accepted via `?token… |
getgrav |
grav-plugin-api |
2026-08-19T15:53:08.681Z | 2026-08-19T18:18:38.809Z | |
| cve-2026-18430 | 7.2 (v4.0) | HumHub 1.18.4 - Stored XSS in comment-deletion notific… |
HumHub |
HumHub |
2026-08-19T15:52:49.273Z | 2026-08-19T19:21:03.424Z |
| cve-2026-63407 | Grav API Plugin: CORS 'Access-Control-Allow-Origin: *'… |
getgrav |
grav-plugin-api |
2026-08-19T15:51:36.784Z | 2026-08-25T02:12:10.329Z | |
| cve-2026-62671 | CSRF in grav-plugin-login: anonymous attacker rotates … |
getgrav |
grav-plugin-login |
2026-08-19T15:49:40.019Z | 2026-08-19T16:41:31.426Z | |
| cve-2026-62673 | Grav: .htaccess file extension rules bypass via case v… |
getgrav |
grav |
2026-08-19T15:46:59.472Z | 2026-08-21T19:37:41.694Z | |
| cve-2026-62672 | Grav: Authenticated ReDoS via regex_replace in Twig Sandbox |
getgrav |
grav |
2026-08-19T15:44:36.287Z | 2026-08-19T18:00:39.622Z | |
| cve-2026-62667 | Grav API Plugin : API Key 'scopes' Never Enforced - De… |
getgrav |
grav-plugin-api |
2026-08-19T15:43:19.382Z | 2026-08-25T02:10:10.736Z | |
| cve-2026-62669 | Grav Login Plugin: 2FA Bypass via 'login.regenerate2FA… |
getgrav |
grav |
2026-08-19T15:40:03.252Z | 2026-08-19T18:18:46.380Z | |
| cve-2026-62666 | Grav API Plugin: non-super api.users.write manager -> … |
getgrav |
grav-plugin-api |
2026-08-19T15:36:37.169Z | 2026-08-21T19:36:19.063Z | |
| cve-2026-62668 | Grav API Plugin: Webhook SSRF via Unrestricted cURL Pr… |
getgrav |
grav |
2026-08-19T15:29:24.452Z | 2026-08-19T18:44:04.914Z | |
| cve-2026-62670 | Fail-open authorization in grav-plugin-flex-objects ad… |
getgrav |
grav-plugin-flex-objects |
2026-08-19T15:26:27.341Z | 2026-08-19T15:41:54.614Z | |
| cve-2026-19672 | 6.3 (v4.0) | tarfile extraction filter bypass allows creation of di… |
Python Software Foundation |
CPython |
2026-08-19T15:24:08.616Z | 2026-08-27T19:41:14.871Z |
| cve-2026-61842 | Grav: Twig sandbox config exfiltration via grav.offset… |
getgrav |
grav |
2026-08-19T15:23:27.038Z | 2026-08-19T18:18:54.336Z | |
| cve-2026-61690 | Grav: Decompression Bomb via ZipArchiver - Missing Ext… |
getgrav |
grav |
2026-08-19T15:20:10.966Z | 2026-08-25T02:07:51.415Z | |
| cve-2026-61607 | Grav API Plugin: Stored XSS via SVG Upload - API Media… |
getgrav |
grav-plugin-api |
2026-08-19T15:18:15.354Z | 2026-08-21T19:35:00.839Z | |
| cve-2026-53654 | Grav: Unauthenticated open redirect via login twofa_ca… |
getgrav |
grav |
2026-08-19T15:15:30.263Z | 2026-08-19T15:42:49.046Z | |
| cve-2026-16819 | 7.7 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:07:27.262Z | 2026-08-21T16:16:25.714Z |
| cve-2026-53477 | 7.8 (v3.1) | Dell Command Update (DCU), versions prior to 5.7.… |
Dell |
Dell Command Update (DCU) |
2026-08-19T15:04:41.546Z | 2026-08-19T20:00:10.002Z |
| cve-2026-58564 | 7.8 (v3.1) | Dell Command Update (DCU), versions prior to 5.7.… |
Dell |
Dell Command Update (DCU) |
2026-08-19T15:03:14.331Z | 2026-08-20T15:57:08.917Z |
| cve-2026-16818 | 7.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:03:04.673Z | 2026-08-19T20:00:17.384Z |
| cve-2026-16817 | 7.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:02:38.196Z | 2026-08-19T15:17:19.639Z |
| cve-2026-67268 | 6.5 (v3.1) | Dell Command Update (DCU), versions prior to 5.7.… |
Dell |
Dell Command Update (DCU) |
2026-08-19T15:01:19.774Z | 2026-08-20T15:57:09.098Z |
| cve-2026-16816 | 9.9 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:01:14.495Z | 2026-08-20T18:28:11.981Z |
| cve-2026-16814 | 8.8 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:00:56.593Z | 2026-08-20T18:28:21.017Z |
| cve-2026-16706 | 7.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T15:00:18.395Z | 2026-08-20T15:57:09.257Z |
| cve-2026-16703 | 7.8 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T14:59:40.256Z | 2026-08-20T18:28:29.841Z |
| cve-2026-58565 | 8.8 (v3.1) | Dell Command Update (DCU), versions prior to 5.7.… |
Dell |
Dell Command Update (DCU) |
2026-08-19T14:59:19.591Z | 2026-08-20T15:57:09.415Z |
| cve-2026-16690 | 7.5 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-19T14:58:05.582Z | 2026-08-19T15:17:55.583Z |
| cve-2026-67266 | 5.5 (v3.1) | Dell Command Update (DCU), versions prior to 5.7.… |
Dell |
Dell Command Update (DCU) |
2026-08-19T14:57:22.746Z | 2026-08-20T15:22:02.311Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-375 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2017-10-20T00:00:00.000000 | 2017-10-20T00:00:00.000000 |
| certfr-2017-avi-374 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-20T00:00:00.000000 | 2017-10-23T00:00:00.000000 |
| certfr-2017-avi-373 | Multiples vulnérabilités dans RedHat wpa_supplicant | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-372 | Multiples vulnérabilités dans les produits Cisco | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-371 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-370 | Multiples vulnérabilités dans Oracle Database Server | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-369 | Multiples vulnérabilités dans la suite de produits Oracle Sun System | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-368 | Multiples vulnérabilités dans Oracle Virtualization | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-367 | Multiples vulnérabilités dans Oracle MySQL | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-366 | Multiples vulnérabilités dans Oracle Java SE | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-365 | Multiples vulnérabilités dans Juniper Junos Space | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-364 | Multiples vulnérabilités dans Google Chrome | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-363 | Multiples vulnérabilités dans SUSE wpa_supplicant | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-362 | Multiples vulnérabilités dans NVIDIA Tegra Jetson L4T | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-361 | Multiples vulnérabilités dans les produits Juniper utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-360 | Multiples vulnérabilités dans les produits Fortinet utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-359 | Multiples vulnérabilités dans Ubuntu wpa_supplicant et hostpad | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-358 | Multiples vulnérabilités dans Debian sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-357 | Vulnérabilité dans Microsoft Windows sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-356 | Multiples vulnérabilités dans Adobe ColdFusion | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-355 | Multiples vulnérabilités dans Adobe Flash Player | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-354 | Multiples vulnérabilités dans Adobe RoboHelp | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-353 | Vulnérabilité dans le noyau Linux de SUSE | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-352 | Multiples vulnérabilités dans Fortinet FortiWLC et FortiMail | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-351 | Multiples vulnérabilités dans Xen | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-350 | Multiples vulnérabilités dans Citrix XenServer | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-349 | Vulnérabilité dans SCADA Siemens BACnet field panels | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-348 | Multiples vulnérabilités dans les produits Juniper | 2017-10-12T00:00:00.000000 | 2017-10-12T00:00:00.000000 |
| certfr-2017-avi-347 | Vulnérabilité dans Apple iOS | 2017-10-12T00:00:00.000000 | 2017-10-12T00:00:00.000000 |
| certfr-2017-avi-346 | Multiples vulnérabilités dans les produits Microsoft | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |