Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79666 | 7.1 (v4.0) 6.5 (v3.1) | Ech0 before 4.4.3 Missing Authorization via dashboard … |
lin-snow |
Ech0 |
2026-08-25T11:33:28.747Z | 2026-08-27T15:11:56.193Z |
| cve-2026-79661 | 6.9 (v4.0) 6.5 (v3.1) | Ech0 before 4.7.3 Unauthenticated fav_count Modification |
lin-snow |
Ech0 |
2026-08-25T11:33:25.369Z | 2026-08-27T15:10:35.322Z |
| cve-2026-79021 | N/A | Missing authorization in InterestGroups in Google… |
Google |
Chrome |
2026-08-25T20:10:57.838Z | 2026-08-27T15:07:53.241Z |
| cve-2026-47857 | 5.9 (v3.1) | Reactor Core windowTimeout fair-backpressure stream ha… |
Spring |
Reactor Core |
2026-08-26T23:28:44.743Z | 2026-08-27T15:07:38.775Z |
| cve-2026-18982 | 8.8 (v3.1) | Odh-training-operator-rhel9: rhoai fork aggregates tra… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:45:19.349Z | 2026-08-27T15:07:01.477Z |
| cve-2026-18951 | 8.8 (v3.1) | Odh-training-operator-rhel9: [trainer v2 security] trn… |
Red Hat |
Red Hat OpenShift AI 3.3 |
2026-08-10T20:45:10.112Z | 2026-08-27T15:06:57.539Z |
| cve-2026-18948 | 9.9 (v3.1) | Feast: feast: unsafe dill deserialization of registry-… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:56.502Z | 2026-08-27T15:06:49.889Z |
| cve-2026-19949 | All-in-One WP Migration and Backup <= 7.109 - Unauthen… |
servmask |
All-in-One WP Migration and Backup |
2026-08-25T11:27:11.038Z | 2026-08-27T15:06:46.926Z | |
| cve-2026-18621 | 7.6 (v3.1) | Data-sciences-pipeline: dsp: v1 argo template path acc… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:37.373Z | 2026-08-27T15:06:44.923Z |
| cve-2026-18617 | 8.8 (v3.1) | Data-science-pipelines-operator: dspo: mysql dsn param… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:33.507Z | 2026-08-27T15:06:39.282Z |
| cve-2026-47880 | 5.4 (v3.1) | DefaultJmsHeaderMapper copies all JMS user properties … |
Spring |
Spring Integration |
2026-08-27T05:20:25.359Z | 2026-08-27T15:06:37.711Z |
| cve-2026-18608 | 8.7 (v3.1) | Data-science-pipelines-operator: dspo: operator cluste… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:28.339Z | 2026-08-27T15:06:34.493Z |
| cve-2026-16745 | 8.8 (v3.1) | Odh-dashboard: odh-dashboard: backend port 8080 trusts… |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-07-23T10:41:30.121Z | 2026-08-27T15:06:29.192Z |
| cve-2026-15581 | 8 (v3.1) | Trustyai-service-operator: trustyai-service-operator: … |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:18.319Z | 2026-08-27T15:06:23.537Z |
| cve-2026-15467 | 8.1 (v3.1) | Trustyai-service-operator: trustyai-service-operator: … |
Red Hat |
Red Hat OpenShift AI 2.25 |
2026-08-10T20:44:12.686Z | 2026-08-27T15:06:18.175Z |
| cve-2026-15378 | 9.3 (v3.1) | Guardrails-detectors: guardrails-detectors: ssrf and l… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-07-10T09:29:55.593Z | 2026-08-27T15:06:13.501Z |
| cve-2026-78863 | liketrek TREK Pre-2FA mfa_token authService.ts loginUs… |
liketrek |
TREK |
2026-08-25T11:00:10.236Z | 2026-08-27T15:06:04.339Z | |
| cve-2026-14450 | 9.9 (v3.1) | Maas-billing: maas api: privilege escalation via forge… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-08-10T20:44:06.818Z | 2026-08-27T15:06:04.247Z |
| cve-2026-13717 | 8.8 (v3.1) | Rhoai maas: llm-d: maas/llm-d inference gateway: defau… |
|
|
2026-08-10T20:44:01.309Z | 2026-08-27T15:06:00.355Z |
| cve-2026-63587 | 8.8 (v4.0) 8.6 (v3.1) | SMS Password Authorization Bypass via Failed Attempt Counter |
Weidmueller Interface |
IE-SR-2TX-WL-4G-EU |
2026-08-25T08:55:12.442Z | 2026-08-27T15:04:29.396Z |
| cve-2026-65641 | A vulnerability allowing an unauthenticated netwo… |
Veeam |
One |
2026-08-26T21:21:40.955Z | 2026-08-27T15:04:11.392Z | |
| cve-2026-58070 | A vulnerability that records guest OS processing … |
Veeam |
Backup and Replication |
2026-08-26T21:21:41.107Z | 2026-08-27T15:04:11.211Z | |
| cve-2026-65646 | Improper neutralization of special elements in Pl… |
WebPros |
Plesk |
2026-08-26T21:21:41.144Z | 2026-08-27T15:04:11.031Z | |
| cve-2026-64632 | A vulnerability allowing a low-privileged user to… |
Veeam |
ONE |
2026-08-26T21:21:41.412Z | 2026-08-27T15:04:10.844Z | |
| cve-2026-17562 | 6.5 (v3.1) | IDOR in Zirve Security's AdisyonPro |
Summit Security Systems |
AdisyonPro |
2026-08-27T10:47:24.278Z | 2026-08-27T15:04:10.649Z |
| cve-2026-5218 | 4.3 (v3.1) | HTML Injection in Softtr's E-Commerce Pack |
Softtr Informatics Technology Trading Limited Company |
E-Commerce Pack |
2026-08-27T11:12:03.773Z | 2026-08-27T15:04:10.478Z |
| cve-2026-81672 | 9.3 (v4.0) | Multiple Vulnerabilities in TOOOLS' iSquad |
TOOOLS |
iSquad |
2026-08-27T11:53:35.259Z | 2026-08-27T15:04:10.313Z |
| cve-2026-47884 | N/A | Spring Framework Improper Path Limitation in XsltView |
Spring |
Spring Framework |
2026-08-27T05:21:32.920Z | 2026-08-27T15:03:29.767Z |
| cve-2021-47983 | 5.1 (v4.0) 6.4 (v3.1) | WordPress Plugin Stripe Payments < 2.0.40 Stored XSS v… |
mra13 |
Accept Stripe Payments |
2026-06-08T01:55:26.047Z | 2026-08-27T15:03:08.422Z |
| cve-2026-47883 | N/A | Spring Framework Open Redirect in UrlHandlerFilter |
Spring |
Spring Framework |
2026-08-27T05:21:32.084Z | 2026-08-27T15:02:25.563Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-330 | Multiples vulnérabilités dans Google Android | 2017-10-03T00:00:00.000000 | 2017-10-03T00:00:00.000000 |
| certfr-2017-avi-329 | Multiples vulnérabilités dans Dnsmasq | 2017-10-03T00:00:00.000000 | 2017-10-03T00:00:00.000000 |
| certfr-2017-avi-328 | Vulnérabilité dans Xen | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-327 | Multiples vulnérabilités dans Mozilla Firefox | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-326 | Vulnérabilité dans SCADA Siemens Ruggedcom Discovery Protocol | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-325 | Multiples vulnérabilités dans les produits Cisco | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-324 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-323 | Vulnérabilité dans Schneider Electric InduSoft et InTouch Machine Edition | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-322 | Vulnérabilité dans Citrix NetScaler et CloudBridge | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-321 | Multiples vulnérabilités dans Apple iOS | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-320 | Multiples vulnérabilités dans les produits Apple | 2017-09-26T00:00:00.000000 | 2017-09-26T00:00:00.000000 |
| certfr-2017-avi-319 | Vulnérabilité dans Citrix NetScaler | 2017-09-25T00:00:00.000000 | 2017-09-25T00:00:00.000000 |
| certfr-2017-avi-318 | Multiples vulnérabilités dans Google Chrome | 2017-09-22T00:00:00.000000 | 2017-09-22T00:00:00.000000 |
| certfr-2017-avi-317 | Multiples vulnérabilités dans les produits Cisco | 2017-09-21T00:00:00.000000 | 2017-09-21T00:00:00.000000 |
| certfr-2017-avi-316 | Multiples vulnérabilités dans Samba | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-315 | Multiples vulnérabilités dans Joomla! | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-314 | Multiples vulnérabilités dans Apache Tomcat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-313 | Vulnérabilité dans Asterisk | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-312 | Multiples vulnérabilités dans WordPress | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-311 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-310 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-309 | Multiples vulnérabilités dans Moodle | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-308 | Multiples vulnérabilités dans les produits Apple | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-307 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-09-19T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-306 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-18T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-305 | Vulnérabilité dans SCADA Schneider Electric InduSoft Web Studio | 2017-09-18T00:00:00.000000 | 2017-09-18T00:00:00.000000 |
| certfr-2017-avi-304 | Multiples vulnérabilités dans les produits VMware | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-303 | Multiples vulnérabilités dans Magento | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-301 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-14T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-302 | Multiples vulnérabilités dans Citrix XenServer | 2017-09-14T00:00:00.000000 | 2017-09-14T00:00:00.000000 |