Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77573 | Weblate: DNS rebinding in VCS operations allows server… |
WeblateOrg |
weblate |
2026-08-26T20:48:48.146Z | 2026-08-27T14:18:46.470Z | |
| cve-2026-47894 | 4.9 (v3.1) | Spring Cloud Config Server Native Environment Reposito… |
Spring |
Spring Cloud Config |
2026-08-27T05:20:32.282Z | 2026-08-27T14:18:07.039Z |
| cve-2026-77298 | SeaweedFS S3 OIDC Bearer authentication bypasses IAM r… |
seaweedfs |
seaweedfs |
2026-08-26T21:16:51.165Z | 2026-08-27T14:17:48.966Z | |
| cve-2026-77567 | Filament: App-based MFA can be bypassed when recovery … |
filamentphp |
filament |
2026-08-24T20:10:58.326Z | 2026-08-27T14:17:29.291Z | |
| cve-2026-59271 | 5.3 (v3.1) | Admin password disclosed in BrokerNotAliveException message |
Spring |
Spring AMQP |
2026-08-27T05:20:34.133Z | 2026-08-27T14:15:39.893Z |
| cve-2026-59274 | 6.5 (v3.1) | Unbounded decompression in UnZipTransformer enables zi… |
Spring |
Spring Integration |
2026-08-27T05:20:35.041Z | 2026-08-27T14:13:56.857Z |
| cve-2025-62341 | 3.7 (v3.1) | HCL Connections is vulnerable to server-side request f… |
HCLSoftware |
Connections |
2026-08-26T22:15:56.136Z | 2026-08-27T14:13:47.312Z |
| cve-2026-40877 | Combodo iTop: PHP Object Injection Leading to Remote C… |
Combodo |
iTop |
2026-08-24T18:57:55.017Z | 2026-08-27T14:10:34.908Z | |
| cve-2026-47666 | Penpot: Stored XSS via custom font family name injecte… |
penpot |
penpot |
2026-08-26T22:47:49.788Z | 2026-08-27T14:08:58.826Z | |
| cve-2026-80183 | 7.1 (v4.0) | In OpenStack Keystone before 29.0.3, any authenti… |
OpenStack |
Keystone |
2026-08-26T23:16:43.059Z | 2026-08-27T14:08:09.543Z |
| cve-2026-47845 | 5.3 (v3.1) | Reactor Netty HTTP Server may incorrectly evaluate pro… |
Spring |
Reactor Netty |
2026-08-26T23:28:39.360Z | 2026-08-27T14:02:35.899Z |
| cve-2026-81421 | ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-… |
ddfourtwo |
sentry-selfhosted-mcp |
2026-08-26T23:45:09.560Z | 2026-08-27T14:01:32.252Z | |
| cve-2026-71941 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:04.706Z | 2026-08-27T13:53:21.910Z |
| cve-2026-62326 | Weblate Has Uncontrolled Resource Consumption via |
WeblateOrg |
weblate |
2026-08-26T20:36:25.043Z | 2026-08-27T13:52:30.709Z | |
| cve-2026-71936 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:01.136Z | 2026-08-27T13:52:16.469Z |
| cve-2026-55227 | Observable object existence disclosure in private Webl… |
WeblateOrg |
weblate |
2026-08-26T20:10:39.333Z | 2026-08-27T13:51:40.681Z | |
| cve-2026-71931 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:57.684Z | 2026-08-27T13:51:25.835Z |
| cve-2026-71926 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:54.287Z | 2026-08-27T13:50:32.141Z |
| cve-2026-54245 | Fleet: SQL injection in Okta conditional access endpoi… |
fleetdm |
fleet |
2026-08-26T19:13:22.415Z | 2026-08-27T13:49:51.927Z | |
| cve-2026-71921 | 9.3 (v4.0) 9.8 (v3.1) | DrayTek VigorSwitch Multiple Models Pre-Authentication… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:50.939Z | 2026-08-27T13:49:51.843Z |
| cve-2026-71916 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:47.614Z | 2026-08-27T13:49:12.955Z |
| cve-2026-77611 | SeaweedFS: Authenticated S3 object-scope bypass in Put… |
seaweedfs |
seaweedfs |
2026-08-26T21:31:27.046Z | 2026-08-27T13:48:29.258Z | |
| cve-2026-55182 | LibreNMS: Remote Code Execution by Signal Alert Transp… |
librenms |
librenms |
2026-08-26T21:50:04.014Z | 2026-08-27T13:47:10.632Z | |
| cve-2026-74233 | 9.3 (v4.0) 9.8 (v3.1) | Zbtlink MQWrt infosrvd Command Injection |
Zbtlink |
WE1326 |
2026-08-27T10:40:11.313Z | 2026-08-27T13:41:32.924Z |
| cve-2026-79040 | N/A | Uninitialized resource in GPU in Google Chrome on… |
Google |
Chrome |
2026-08-25T20:10:51.182Z | 2026-08-27T13:38:31.458Z |
| cve-2026-59355 | 6.1 (v3.1) | Spring Authorization Server: Open Redirect via request… |
VMware |
Spring Authorization Server |
2026-08-27T06:35:09.607Z | 2026-08-27T13:37:30.618Z |
| cve-2026-19441 | 5.3 (v3.1) | Unauthenticated API Allows Analytics Data Manipulation… |
IKAS Technology Inc. |
Rush |
2026-08-21T07:55:42.402Z | 2026-08-27T13:37:13.859Z |
| cve-2026-79028 | N/A | Observable discrepancy in Network in Google Chrom… |
Google |
Chrome |
2026-08-25T20:10:16.864Z | 2026-08-27T13:35:22.092Z |
| cve-2026-81573 | 8.6 (v3.1) | Improper Access Control in Local-Only Configuration Commands |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:09:09.122Z | 2026-08-27T13:33:47.763Z |
| cve-2026-81574 | 8.2 (v3.1) | Format String Vulnerability in Logger |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:11:56.916Z | 2026-08-27T13:32:50.315Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-180 | Multiples vulnérabilités dans Microsoft Windows | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-179 | Multiples vulnérabilités dans Microsoft Edge | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-178 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-177 | Multiples vulnérabilités dans Microsoft Office | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-176 | Multiples vulnérabilités dans les produits Microsoft | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-175 | Multiples vulnérabilités dans Adobe Flash Player et Shockwave Player | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-174 | Multiples vulnérabilités dans Mozilla Firefox | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-173 | Vulnérabilité dans Google Chrome | 2017-06-12T00:00:00.000000 | 2017-06-12T00:00:00.000000 |
| certfr-2017-avi-172 | Vulnérabilité dans Citrix XenMobile Server | 2017-06-08T00:00:00.000000 | 2017-06-08T00:00:00.000000 |
| certfr-2017-avi-171 | Multiples vulnérabilités dans les produits Cisco | 2017-06-08T00:00:00.000000 | 2017-06-08T00:00:00.000000 |
| certfr-2017-avi-170 | Multiples vulnérabilités dans VMware vSphere Data Protection (VDP) | 2017-06-07T00:00:00.000000 | 2017-06-07T00:00:00.000000 |
| certfr-2017-avi-169 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-06-07T00:00:00.000000 | 2017-06-07T00:00:00.000000 |
| certfr-2017-avi-168 | Multiples vulnérabilités dans Google Chrome | 2017-06-06T00:00:00.000000 | 2017-06-06T00:00:00.000000 |
| certfr-2017-avi-167 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-06-06T00:00:00.000000 | 2017-06-06T00:00:00.000000 |
| certfr-2017-avi-166 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-05-29T00:00:00.000000 | 2017-05-29T00:00:00.000000 |
| certfr-2017-avi-165 | Vulnérabilité dans Samba | 2017-05-24T00:00:00.000000 | 2017-05-24T00:00:00.000000 |
| certfr-2017-avi-164 | Vulnérabilité dans F5 BIG-IP Azure cloud | 2017-05-23T00:00:00.000000 | 2017-05-23T00:00:00.000000 |
| certfr-2017-avi-163 | Multiples vulnérabilités dans Cisco Integrated Management Controller | 2017-05-23T00:00:00.000000 | 2017-05-23T00:00:00.000000 |
| certfr-2017-avi-162 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-05-22T00:00:00.000000 | 2017-05-22T00:00:00.000000 |
| certfr-2017-avi-161 | Multiples vulnérabilités dans VMware Workstation | 2017-05-19T00:00:00.000000 | 2017-05-19T00:00:00.000000 |
| certfr-2017-avi-160 | Multiples vulnérabilités dans les produits Cisco | 2017-05-18T00:00:00.000000 | 2017-05-18T00:00:00.000000 |
| certfr-2017-avi-159 | Vulnérabilité dans Joomla! | 2017-05-18T00:00:00.000000 | 2017-05-18T00:00:00.000000 |
| certfr-2017-avi-158 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-05-17T00:00:00.000000 | 2017-05-18T00:00:00.000000 |
| certfr-2017-avi-157 | Multiples vulnérabilités dans WordPress | 2017-05-17T00:00:00.000000 | 2017-05-17T00:00:00.000000 |
| certfr-2017-avi-156 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-05-16T00:00:00.000000 | 2017-05-17T00:00:00.000000 |
| certfr-2017-avi-155 | Multiples vulnérabilités dans les produits Apple | 2017-05-16T00:00:00.000000 | 2017-05-16T00:00:00.000000 |
| certfr-2017-avi-154 | Multiples vulnérabilités dans Microsoft Windows XP, Windows Server 2003 et Windows 8 | 2017-05-15T00:00:00.000000 | 2017-05-15T00:00:00.000000 |
| certfr-2017-avi-153 | Multiples vulnérabilités dans Moodle | 2017-05-15T00:00:00.000000 | 2017-05-15T00:00:00.000000 |
| certfr-2017-avi-152 | Multiples vulnérabilités dans Cisco WebEx Meetings Server | 2017-05-11T00:00:00.000000 | 2017-05-11T00:00:00.000000 |
| certfr-2017-avi-151 | Vulnérabilité dans Microsoft Malware Protection Engine | 2017-05-10T00:00:00.000000 | 2017-05-10T00:00:00.000000 |