Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75106 | 9.3 (v4.0) 9.1 (v3.1) | OpnForm Editable Submission Secret Derivation via Empt… |
OpnForm |
OpnForm |
2026-08-17T20:36:02.092Z | 2026-08-21T11:21:01.592Z |
| cve-2026-75105 | 8.7 (v4.0) 7.5 (v3.1) | phpIPAM Temporary Subnet Share Information Disclosure … |
phpipam |
phpipam |
2026-08-17T20:36:01.403Z | 2026-08-21T11:21:00.953Z |
| cve-2026-75104 | 6.8 (v4.0) 5.5 (v3.1) | Hugging Face Transformers Path Traversal via Checkpoin… |
huggingface |
transformers |
2026-08-17T20:36:00.721Z | 2026-08-18T12:40:32.385Z |
| cve-2026-75103 | 8.7 (v4.0) 8.8 (v3.1) | Crawlab Missing Authorization on Password Change Endpo… |
crawlab-team |
crawlab |
2026-08-17T20:36:00.054Z | 2026-08-18T15:32:54.562Z |
| cve-2026-54356 | Budibase authenticated arbitrary S3 signed upload URL … |
Budibase |
budibase |
2026-08-17T20:32:05.691Z | 2026-08-18T13:33:04.062Z | |
| cve-2026-35219 | Budibase: SSRF in Automation Steps - Webhook, Zapier, … |
Budibase |
budibase |
2026-08-17T20:28:40.828Z | 2026-08-18T12:37:02.273Z | |
| cve-2026-73410 | Budibase: SSRF via DNS rebinding in the REST datasourc… |
Budibase |
budibase |
2026-08-17T20:27:24.080Z | 2026-08-17T22:01:01.232Z | |
| cve-2026-64657 | Budibase: Database Connector SQL Injections in Postgre… |
Budibase |
budibase |
2026-08-17T20:24:59.700Z | 2026-08-18T15:30:33.751Z | |
| cve-2026-19589 | 7.1 (v3.1) | Packer vulnerable to arbitrary file write via crafted … |
HashiCorp |
Packer |
2026-08-17T20:22:19.057Z | 2026-08-17T20:46:47.743Z |
| cve-2026-73560 | vLLM: SSRF + arbitrary local file read in MiMoV2OmniMu… |
vllm-project |
vllm |
2026-08-17T20:17:25.769Z | 2026-08-18T16:00:35.302Z | |
| cve-2026-71486 | vLLM: Derender endpoints decode caller-supplied Genera… |
vllm-project |
vllm |
2026-08-17T20:13:06.289Z | 2026-08-18T12:34:44.986Z | |
| cve-2026-57233 | Notepad++: Path Traversal (Zip Slip) in WinGup Plugin … |
notepad-plus-plus |
notepad-plus-plus |
2026-08-17T20:10:37.698Z | 2026-08-18T18:53:27.639Z | |
| cve-2026-52886 | Notepad++: session.xml backupFilePath starts_with Bypass |
notepad-plus-plus |
notepad-plus-plus |
2026-08-17T20:09:32.188Z | 2026-08-18T15:20:41.005Z | |
| cve-2026-71858 | Notepad++: shortcuts.xml Macro HMAC Bypass Enables Con… |
notepad-plus-plus |
notepad-plus-plus |
2026-08-17T20:08:21.140Z | 2026-08-17T20:26:38.601Z | |
| cve-2026-54758 | Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs |
notepad-plus-plus |
notepad-plus-plus |
2026-08-17T20:05:51.923Z | 2026-08-17T22:01:11.798Z | |
| cve-2026-19650 | 7.1 (v3.1) | Cross-Site Request Forgery (CSRF) in GitLab |
GitLab |
GitLab |
2026-08-17T20:04:56.287Z | 2026-08-17T20:44:54.963Z |
| cve-2026-19478 | 9.4 (v3.1) | Improper Control of Generation of Code ('Code Injectio… |
GitLab |
GitLab |
2026-08-17T20:04:46.400Z | 2026-08-17T20:44:03.074Z |
| cve-2026-71553 | ApostropheCMS: 2nd-order prototype pollution via PATCH… |
apostrophecms |
apostrophe |
2026-08-17T20:03:37.883Z | 2026-08-17T20:14:15.721Z | |
| cve-2026-63667 | ApostropheCMS: Arbitrary file read via import-export a… |
apostrophecms |
apostrophe |
2026-08-17T19:56:07.436Z | 2026-08-17T20:05:42.231Z | |
| cve-2026-63670 | ApostropheCMS: Mutation-XSS / allowedTags bypass via l… |
apostrophecms |
apostrophe |
2026-08-17T19:49:51.903Z | 2026-08-18T18:08:30.331Z | |
| cve-2026-75014 | SourceCodester Pet Grooming Management Software get_ba… |
SourceCodester |
Pet Grooming Management Software |
2026-08-17T19:45:09.243Z | 2026-08-17T19:53:30.061Z | |
| cve-2026-63669 | ApostropheCMS: Missing destination-parent authorizatio… |
apostrophecms |
apostrophe |
2026-08-17T19:41:52.574Z | 2026-08-17T22:01:18.244Z | |
| cve-2026-74234 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-26T13:12:08.798Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'vulncheck'}} | N/A | N/A | 2026-08-17T19:38:05.767Z | 2026-08-26T13:12:08.798Z |
| cve-2026-57485 | Stirling-PDF: Internal Service Account API Key Disclos… |
Stirling-Tools |
Stirling-PDF |
2026-08-17T19:31:30.833Z | 2026-08-18T15:19:14.801Z | |
| cve-2026-75013 | TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer… |
TOTOLINK |
EX1200L |
2026-08-17T19:30:11.074Z | 2026-08-18T14:54:44.857Z | |
| cve-2026-71472 | 9.1 (v3.1) | Acm-search-v2-rhel9: search-v2-operator: shell-command… |
Red Hat |
Red Hat Advanced Cluster Management for Kubernetes 2.11 |
2026-08-17T19:28:43.057Z | 2026-09-05T14:24:27.774Z |
| cve-2026-70495 | 8.8 (v3.1) | Search-v2-operator: search-v2-operator: cluster-wide i… |
Red Hat |
Red Hat Advanced Cluster Management for Kubernetes 2.11 |
2026-08-17T19:28:37.995Z | 2026-09-05T14:24:02.182Z |
| cve-2026-75012 | TOTOLINK EX1200L Password Configuration cstecgi.cgi se… |
TOTOLINK |
EX1200L |
2026-08-17T19:15:09.293Z | 2026-08-18T12:31:41.299Z | |
| cve-2026-17639 | 6.9 (v4.0) | Certain HP Smart Tank All in One – Potential Denial of… |
HP Inc |
HP Smart Tank 5101 All-in-One Printer |
2026-08-17T18:35:32.360Z | 2026-08-17T18:59:22.318Z |
| cve-2026-45698 | Netatalk has Integer Underflow → Stack Buffer Overflow… |
Netatalk |
netatalk |
2026-08-17T18:21:19.925Z | 2026-08-17T19:29:54.873Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-478 | Vulnérabilités dans Asterisk | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-477 | Vulnérabilité dans le système SCADA GarrettCom Magnum | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-476 | Multiples vulnérabilités dans Google Chrome | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-475 | Vulnérabilité dans IBM WebSphere Application Server | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-474 | Multiples vulnérabilités dans IBM AppScan Enterprise and Policy Tester | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-473 | Vulnérabilité dans Oracle Java | 2012-08-31T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-avi-472 | Vulnérabilités dans IBM Infosphere Guardium | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-471 | Vulnérabilité dans EMC Cloud Tiering Appliance | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-470 | Vulnérabilité dans HP Intelligent Management Center | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-469 | Vulnérabilité dans HP iNode Management Center | 2012-08-30T00:00:00.000000 | 2012-08-30T00:00:00.000000 |
| certa-2012-avi-468 | Multiples vulnérabilités dans Symantec Messaging Gateway | 2012-08-29T00:00:00.000000 | 2012-08-29T00:00:00.000000 |
| certa-2012-avi-467 | Multiples vulnérabilités dans les produits Mozilla et Icedove | 2012-08-29T00:00:00.000000 | 2012-10-09T00:00:00.000000 |
| certa-2012-avi-466 | Vulnérabilité dans les produits EMC ApplicationXtender | 2012-08-28T00:00:00.000000 | 2012-08-28T00:00:00.000000 |
| certa-2012-avi-465 | Vulnérabilité dans le système SCADA RUGGEDCOM Rugged Operating System | 2012-08-28T00:00:00.000000 | 2012-08-28T00:00:00.000000 |
| certa-2012-avi-464 | Vulnérabilité dans IBM Power Hardware Management Console | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-463 | Vulnérabilité dans certains produits Avaya | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-462 | Vulnérabilité dans HP Serviceguard | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-461 | Multiples vulnérabilités dans Lotus Domino | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-460 | Multiples vulnérabilités dans Apache Web Server | 2012-08-23T00:00:00.000000 | 2012-08-23T00:00:00.000000 |
| certa-2012-avi-459 | Multiples vulnérabilités dans Adobe Flash Player | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-458 | Vulnérabilités dans Xen | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-457 | Multiples vulnérabilités dans Wireshark | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-456 | Vulnérabilité dans Apple Remote Desktop | 2012-08-22T00:00:00.000000 | 2012-08-22T00:00:00.000000 |
| certa-2012-avi-455 | Vulnérabilités dans PostgreSQL | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-454 | Vulnérabilités dans Roundcube | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-453 | Vulnérabilité dans HP Integrity Server | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-452 | Multiples vulnérabilités dans Java pour HP-UX | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-451 | Vulnérabilité dans HP Service Manager Web Tier et HP Service Center Tier | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-450 | Vulnérabilité dans HP Service Manager Server et HP Service Center Server | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |
| certa-2012-avi-449 | Vulnérabilité dans phpMyAdmin | 2012-08-20T00:00:00.000000 | 2012-08-20T00:00:00.000000 |