Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-45019 | Chainlit: SSRF via MCP SSE and streamable-http transpo… |
Chainlit |
chainlit |
2026-08-25T19:20:59.339Z | 2026-08-27T14:35:27.308Z | |
| cve-2026-55588 | ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Re… |
oras-project |
oras |
2026-08-25T20:32:18.677Z | 2026-08-27T14:35:19.147Z | |
| cve-2026-62861 | TypeBot: Cross-tenant custom-domain removal via unboun… |
baptisteArno |
typebot.io |
2026-08-25T21:46:24.861Z | 2026-08-27T14:35:10.158Z | |
| cve-2026-80186 | 7.6 (v3.1) | Bluez: stack overflow in name2utf8 causes dos and pote… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-25T21:58:16.875Z | 2026-08-27T14:34:59.323Z |
| cve-2026-70665 | Doorkeeper OpenID Connect: DCR endpoint persists unval… |
doorkeeper-gem |
doorkeeper-openid_connect |
2026-08-25T22:09:53.197Z | 2026-08-27T14:34:50.455Z | |
| cve-2026-79911 | TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-b… |
TOTOLINK |
N600R |
2026-08-25T22:15:13.200Z | 2026-08-27T14:34:41.311Z | |
| cve-2026-57171 | Trestle is vulnerable to arbitrary file write via path… |
oscal-compass |
compliance-trestle |
2026-08-25T23:39:16.186Z | 2026-08-27T14:34:33.261Z | |
| cve-2026-18431 | Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthentic… |
themefusion |
Avada (Fusion) Builder |
2026-08-26T06:08:28.442Z | 2026-08-27T14:34:23.749Z | |
| cve-2026-2388 | Reviews and Rating – Google Reviews <= 5.10 - Authenti… |
designextreme |
Reviews and Rating – Google Reviews |
2026-08-26T09:27:43.234Z | 2026-08-27T14:34:17.895Z | |
| cve-2026-15990 | Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary… |
Strategy11 |
Formidable Charts |
2026-08-26T13:28:08.896Z | 2026-08-27T14:34:07.818Z | |
| cve-2026-16434 | 2.3 (v4.0) | Adminer before 5.5.1 X-Forwarded-Prefix Backslash Bypass |
vrana |
adminer |
2026-08-25T01:29:57.018Z | 2026-08-27T14:34:04.155Z |
| cve-2026-54511 | @logtape/syslog: syslog log injection via unescaped co… |
dahlia |
logtape |
2026-08-26T14:27:27.910Z | 2026-08-27T14:33:57.212Z | |
| cve-2026-32257 | Winter: Stored XSS through Brand Settings custom styles |
wintercms |
winter |
2026-08-26T16:45:12.100Z | 2026-08-27T14:33:49.017Z | |
| cve-2026-54256 | Winter: Authenticated IDOR in backend FileUpload widge… |
wintercms |
winter |
2026-08-26T17:53:36.237Z | 2026-08-27T14:33:39.110Z | |
| cve-2026-67275 | 5.3 (v3.1) | Dell PowerProtect One, versions 20.1.0.0 and belo… |
Dell |
PowerProtect One |
2026-08-26T19:01:27.487Z | 2026-08-27T14:33:32.218Z |
| cve-2026-46371 | Fleet: Observer-level enrollment secret extraction via… |
fleetdm |
fleet |
2026-08-26T19:06:12.147Z | 2026-08-27T14:33:22.566Z | |
| cve-2026-74770 | 8.8 (v3.1) | Dell PowerProtect One, versions 20.1.0.0 and belo… |
Dell |
PowerProtect One |
2026-08-26T19:17:41.915Z | 2026-08-27T14:33:15.683Z |
| cve-2026-79938 | 7.6 (v3.1) | Dell PowerProtect Cyber Recovery, versions prior … |
Dell |
Power Protect Cyber Recovery |
2026-08-26T19:37:36.076Z | 2026-08-27T14:33:06.905Z |
| cve-2026-77508 | Weblate: Unverified REST API email changes |
WeblateOrg |
weblate |
2026-08-26T19:56:59.825Z | 2026-08-27T14:32:57.362Z | |
| cve-2026-62249 | Weblate: Restricted-component change history leaked to… |
WeblateOrg |
weblate |
2026-08-26T20:29:49.207Z | 2026-08-27T14:32:50.121Z | |
| cve-2026-77368 | SeaweedFS: Authenticated Cross-Prefix IDOR in Filer TU… |
seaweedfs |
seaweedfs |
2026-08-26T21:07:57.105Z | 2026-08-27T14:32:40.158Z | |
| cve-2026-45694 | LibreNMS: Reflected XSS in the Proxmox app view via un… |
librenms |
librenms |
2026-08-26T21:42:01.423Z | 2026-08-27T14:32:34.046Z | |
| cve-2026-47878 | 5.6 (v3.1) | Unsafe Java deserialization in DefaultExecutionContext… |
Spring |
Spring Batch |
2026-08-27T05:20:23.462Z | 2026-08-27T14:32:28.405Z |
| cve-2026-69129 | KubePi: Insufficient per-cluster authorization checks … |
1Panel-dev |
KubePi |
2026-08-26T22:04:03.301Z | 2026-08-27T14:32:23.251Z | |
| cve-2026-81485 | danielpopamd linkedin-ads-mcp Media Upload campaign-ma… |
danielpopamd |
linkedin-ads-mcp |
2026-08-27T01:00:14.610Z | 2026-08-27T14:32:12.639Z | |
| cve-2026-32550 | 8.5 (v3.1) | WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injec… |
Liquid Web, LLC |
Kadence Shop Kit |
2026-08-27T08:59:52.137Z | 2026-08-27T14:32:04.233Z |
| cve-2026-78261 | 7.1 (v3.1) | WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 … |
Realtyna |
Realtyna Organic IDX plugin |
2026-08-27T08:59:55.779Z | 2026-08-27T14:31:54.357Z |
| cve-2026-78276 | 7.2 (v3.1) | WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Obj… |
WP Manage Ninja |
Fluent Boards Pro |
2026-08-27T08:59:59.412Z | 2026-08-27T14:31:45.079Z |
| cve-2026-78288 | 9.3 (v3.1) | WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 -… |
Jonathan de Jong |
Beautiful Taxonomy Filters |
2026-08-27T09:00:03.442Z | 2026-08-27T14:31:34.403Z |
| cve-2026-81271 | 8.8 (v3.1) | WordPress GeoDirectory plugin <= 2.8.176 - Cross Site … |
Paolo |
GeoDirectory |
2026-08-27T09:00:07.037Z | 2026-08-27T14:31:22.769Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-241 | Multiples vulnérabilités dans Microsoft Outlook | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-240 | Multiples vulnérabilités dans Fortinet FortiOS | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-239 | Multiples vulnérabilités dans les produits VMware | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-238 | Multiples vulnérabilités dans McAfee Web Gateway | 2017-07-27T00:00:00.000000 | 2017-07-27T00:00:00.000000 |
| certfr-2017-avi-237 | Multiples vulnérabilités dans Fortinet FortiOS et FortiAnalyzer | 2017-07-27T00:00:00.000000 | 2017-07-27T00:00:00.000000 |
| certfr-2017-avi-236 | Multiples vulnérabilités dans Google Chrome | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-235 | Multiples vulnérabilités dans Joomla! | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-234 | Vulnérabilité dans les produits Citrix | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-232 | Vulnérabilité dans le noyau Linux de SUSE | 2017-07-20T00:00:00.000000 | 2017-07-25T00:00:00.000000 |
| certfr-2017-avi-231 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-230 | Vulnérabilité dans Cisco Web Security Appliance | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-229 | Multiples vulnérabilités dans les produits Apple | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-228 | Multiples vulnérabilités dans SCADA Schneider Electric Trio TView | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-227 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-226 | Multiples vulnérabilités dans Oracle Database Server | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-225 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-224 | Multiples vulnérabilités dans Oracle MySQL | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-223 | Multiples vulnérabilités dans Oracle Java SE | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-222 | Multiples vulnérabilités dans Wireshark | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-221 | Multiples vulnérabilités dans les produits Cisco | 2017-07-18T00:00:00.000000 | 2017-07-18T00:00:00.000000 |
| certfr-2017-avi-220 | Multiples vulnérabilités dans Moodle | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-219 | Multiples vulnérabilités dans SCADA Siemens Android App SIMATIC Sm@rtClient | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-218 | Multiples vulnérabilités dans Apache | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-217 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-216 | Multiples vulnérabilités dans F5 BIG-IP | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-215 | Multiples vulnérabilités dans SCADA les produits OSIsoft | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-214 | Vulnérabilité dans Samba | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-213 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-212 | Multiples vulnérabilités dans les produits Juniper | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-211 | Vulnérabilité dans Nginx | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |