Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-19223 | N/A | Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connec… |
Unknown |
Smush |
2026-08-27T06:00:17.560Z | 2026-08-27T14:23:47.838Z |
| cve-2026-19225 | N/A | Defender Security < 6.2.0 - Admin+ Network-Wide RCE vi… |
Unknown |
Defender Security |
2026-08-27T06:00:17.755Z | 2026-08-27T14:23:47.663Z |
| cve-2026-19454 | N/A | JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Netwo… |
Unknown |
JetBackup |
2026-08-27T06:00:17.928Z | 2026-08-27T14:23:47.496Z |
| cve-2026-19715 | N/A | WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token … |
Unknown |
WP OAuth Server ( Login with WordPress ) |
2026-08-27T06:00:18.109Z | 2026-08-27T14:23:47.322Z |
| cve-2026-76549 | N/A | UpdraftPlus < 1.26.7 - Backup Restoration via CSRF |
Unknown |
UpdraftPlus: WP Backup & Migration Plugin |
2026-08-27T06:00:18.707Z | 2026-08-27T14:23:47.167Z |
| cve-2026-77016 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:18.880Z | 2026-08-27T14:23:47.005Z |
| cve-2026-77017 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:19.059Z | 2026-08-27T14:23:46.847Z |
| cve-2026-77018 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:19.247Z | 2026-08-27T14:23:46.675Z |
| cve-2026-78125 | N/A | LearnPress – Sepay Payment < 4.0.3 - Unauthenticated O… |
Unknown |
LearnPress |
2026-08-27T06:00:19.414Z | 2026-08-27T14:23:46.503Z |
| cve-2026-78137 | N/A | StoreGrowth: Smart Sales Booster for WooCommerce < 2.1… |
Unknown |
StoreGrowth |
2026-08-27T06:00:19.587Z | 2026-08-27T14:23:46.341Z |
| cve-2026-78138 | N/A | Finale Lite < 2.21.0 - Subscriber+ Campaign Configurat… |
Unknown |
Finale Lite |
2026-08-27T06:00:19.760Z | 2026-08-27T14:23:46.167Z |
| cve-2026-78139 | N/A | Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscript… |
Unknown |
Notifima |
2026-08-27T06:00:19.934Z | 2026-08-27T14:23:45.997Z |
| cve-2026-78333 | N/A | 12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated … |
Unknown |
12 Step Meeting List |
2026-08-27T06:00:20.111Z | 2026-08-27T14:23:45.831Z |
| cve-2026-15973 | 8.4 (v4.0) | LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries |
LimeSurvey |
LimeSurvey |
2026-08-26T20:42:44.008Z | 2026-08-27T14:23:20.858Z |
| cve-2026-47881 | 5.9 (v3.1) | Denial of Service in Spring Batch FlatFileItemReader v… |
Spring |
Spring Batch |
2026-08-27T05:20:26.323Z | 2026-08-27T14:21:14.631Z |
| cve-2026-32559 | 9.9 (v3.1) | WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File … |
tophive |
UltimateAI |
2026-08-24T21:31:27.138Z | 2026-08-27T14:19:57.548Z |
| cve-2026-45404 | OpenTelemetry-Go: Unsynchronized baggage map can panic… |
open-telemetry |
opentelemetry-go |
2026-08-24T21:19:00.617Z | 2026-08-27T14:18:58.878Z | |
| cve-2026-77573 | Weblate: DNS rebinding in VCS operations allows server… |
WeblateOrg |
weblate |
2026-08-26T20:48:48.146Z | 2026-08-27T14:18:46.470Z | |
| cve-2026-47894 | 4.9 (v3.1) | Spring Cloud Config Server Native Environment Reposito… |
Spring |
Spring Cloud Config |
2026-08-27T05:20:32.282Z | 2026-08-27T14:18:07.039Z |
| cve-2026-77298 | SeaweedFS S3 OIDC Bearer authentication bypasses IAM r… |
seaweedfs |
seaweedfs |
2026-08-26T21:16:51.165Z | 2026-08-27T14:17:48.966Z | |
| cve-2026-77567 | Filament: App-based MFA can be bypassed when recovery … |
filamentphp |
filament |
2026-08-24T20:10:58.326Z | 2026-08-27T14:17:29.291Z | |
| cve-2026-59271 | 5.3 (v3.1) | Admin password disclosed in BrokerNotAliveException message |
Spring |
Spring AMQP |
2026-08-27T05:20:34.133Z | 2026-08-27T14:15:39.893Z |
| cve-2026-59274 | 6.5 (v3.1) | Unbounded decompression in UnZipTransformer enables zi… |
Spring |
Spring Integration |
2026-08-27T05:20:35.041Z | 2026-08-27T14:13:56.857Z |
| cve-2025-62341 | 3.7 (v3.1) | HCL Connections is vulnerable to server-side request f… |
HCLSoftware |
Connections |
2026-08-26T22:15:56.136Z | 2026-08-27T14:13:47.312Z |
| cve-2026-40877 | Combodo iTop: PHP Object Injection Leading to Remote C… |
Combodo |
iTop |
2026-08-24T18:57:55.017Z | 2026-08-27T14:10:34.908Z | |
| cve-2026-47666 | Penpot: Stored XSS via custom font family name injecte… |
penpot |
penpot |
2026-08-26T22:47:49.788Z | 2026-08-27T14:08:58.826Z | |
| cve-2026-80183 | 7.1 (v4.0) | In OpenStack Keystone before 29.0.3, any authenti… |
OpenStack |
Keystone |
2026-08-26T23:16:43.059Z | 2026-08-27T14:08:09.543Z |
| cve-2026-47845 | 5.3 (v3.1) | Reactor Netty HTTP Server may incorrectly evaluate pro… |
Spring |
Reactor Netty |
2026-08-26T23:28:39.360Z | 2026-08-27T14:02:35.899Z |
| cve-2026-81421 | ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-… |
ddfourtwo |
sentry-selfhosted-mcp |
2026-08-26T23:45:09.560Z | 2026-08-27T14:01:32.252Z | |
| cve-2026-71941 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:04.706Z | 2026-08-27T13:53:21.910Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-294 | Multiples vulnérabilités dans le noyau Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-293 | Vulnérabilité dans le service d'installation de Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-292 | Multiples vulnérabilités dans Microsoft Windows OLE | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-291 | Vulnérabilité dans Microsoft Remote Procedure Call | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-290 | Vulnérabilité dans le pilote de police Adobe Type Manager | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-289 | Multiples vulnérabilités dans Microsoft SQL Server | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-288 | Multiples vulnérabilités dans Moodle | 2015-07-13T00:00:00.000000 | 2015-07-13T00:00:00.000000 |
| certfr-2015-avi-287 | Vulnérabilité dans VMware Workstation | 2015-07-10T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-avi-286 | Multiples vulnérabilités dans les produits Juniper | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-285 | Vulnérabilité dans OpenSSL | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-284 | Multiples vulnérabilités dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-283 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-282 | Multiples vulnérabilités dans OpenSSH | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-281 | Vulnérabilité dans MariaDB | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-280 | Multiples vulnérabilités dans Schneider Electric Wonderware System Platform | 2015-07-06T00:00:00.000000 | 2015-07-06T00:00:00.000000 |
| certfr-2015-avi-279 | Multiples vulnérabilités dans les produits Mozilla | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-278 | Vulnérabilité dans Cisco Unified Communications Domain Manager | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-277 | Vulnérabilité dans BlueCoat Malware Analysis Appliance | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-276 | Multiples vulnérabilités dans Apple Safari | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-275 | Multiples vulnérabilités dans Apple iTunes | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-274 | Multiples vulnérabilités dans Apple Quicktime | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-273 | Multiples vulnérabilités dans Apple OSX | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-272 | Multiples vulnérabilités dans Apple iOS | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-271 | Multiples vulnérabilités dans Apple Mac EFI | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-270 | Vulnérabilité dans Schneider SCADA SAGE Remote Terminal Units | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-269 | Vulnérabilité dans le noyau Linux de Fedora | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-268 | Multiples vulnérabilités dans les produits Citrix Netscaler | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-267 | Vulnérabilité dans le module de communication Siemens Climatix BACnet/IP | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-266 | Multiples vulnérabilités dans les produits Cisco | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-265 | Multiples vulnérabilités dans PHP | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |