Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-27770 | UpTrain vulnerable to Remote code execution at `/creat… |
uptrain-ai |
uptrain |
2026-08-17T15:43:21.416Z | 2026-08-18T14:44:57.135Z | |
| cve-2025-27621 | UpTrain has a Constant Default API Key |
uptrain-ai |
uptrain |
2026-08-17T15:42:30.681Z | 2026-08-17T15:58:21.403Z | |
| cve-2026-64859 | New API: User List API Leaks Root User Access Token Le… |
QuantumNous |
new-api |
2026-08-17T15:42:18.557Z | 2026-08-17T18:56:39.405Z | |
| cve-2026-73646 | PostCSS: Path Traversal in Previous Source Map Auto-Lo… |
postcss |
postcss |
2026-08-17T15:35:13.518Z | 2026-08-17T16:36:37.422Z | |
| cve-2026-53960 | Discourse: Hidden first-post excerpt is emitted in Q&A… |
discourse |
discourse |
2026-08-17T15:33:14.312Z | 2026-08-17T15:48:08.227Z | |
| cve-2026-55704 | Discourse: Shared-draft titles and excerpts leak throu… |
discourse |
discourse |
2026-08-17T15:31:41.130Z | 2026-08-17T22:02:06.167Z | |
| cve-2026-55674 | Discourse: Cache poisoning/XSS via color scheme cookies |
discourse |
discourse |
2026-08-17T15:30:17.691Z | 2026-08-18T14:43:21.430Z | |
| cve-2026-59829 | Discourse: Review queue exposes flag-related private m… |
discourse |
discourse |
2026-08-17T15:26:53.835Z | 2026-08-17T19:00:49.059Z | |
| cve-2026-74858 | jae-jae fetcher-mcp URL Validation security-credential… |
jae-jae |
fetcher-mcp |
2026-08-17T15:15:16.803Z | 2026-08-18T13:37:10.578Z | |
| cve-2026-73851 | Kiota: Path traversal in generated plugin manifest sta… |
microsoft |
kiota |
2026-08-17T15:11:39.724Z | 2026-08-17T15:26:40.140Z | |
| cve-2026-13202 | 7.3 (v4.0) | HTML Injection in OTDS Swagger UI |
OpenText |
Opentext Directory Services |
2026-08-17T15:04:49.181Z | 2026-09-11T13:03:37.189Z |
| cve-2026-71567 | 7.7 (v3.1) | User-controlled variables inserted unescaped into shel… |
openshift-metal3 |
fakefish |
2026-08-17T14:39:09.651Z | 2026-08-17T15:25:12.659Z |
| cve-2026-10527 | 6.3 (v3.1) | Boards plugin retains Board Admin rights for users dem… |
Mattermost |
Mattermost |
2026-08-17T14:37:46.253Z | 2026-08-17T15:25:25.134Z |
| cve-2026-15754 | 4.2 (v3.1) | Missing per-channel team-scope check in ABAC access co… |
Mattermost |
Mattermost |
2026-08-17T14:36:56.282Z | 2026-08-17T15:25:38.145Z |
| cve-2026-16044 | 3.9 (v3.1) | Insufficient validation of guest board admin privilege… |
Mattermost |
Mattermost |
2026-08-17T14:26:52.203Z | 2026-08-17T15:25:51.740Z |
| cve-2026-16045 | 2.7 (v3.1) | Delegated OAuth tokens could revoke unrelated OAuth ap… |
Mattermost |
Mattermost |
2026-08-17T14:26:22.724Z | 2026-08-17T15:26:05.729Z |
| cve-2026-16049 | 3.9 (v3.1) | _GitLab Plugin allows cross-channel post injection and… |
Mattermost |
Mattermost |
2026-08-17T14:25:45.816Z | 2026-08-17T15:26:18.140Z |
| cve-2026-16047 | 4.3 (v3.1) | Board channel linking without read channel permission … |
Mattermost |
Mattermost |
2026-08-17T14:25:08.338Z | 2026-08-17T15:26:34.376Z |
| cve-2026-16046 | 3.5 (v3.1) | Missing run-state validation on finished playbook runs |
Mattermost |
Mattermost |
2026-08-17T14:24:14.690Z | 2026-08-18T13:22:57.921Z |
| cve-2026-16048 | 6.3 (v3.1) | Channel member roles accept out-of-scope roles |
Mattermost |
Mattermost |
2026-08-17T14:22:43.940Z | 2026-08-17T15:37:17.479Z |
| cve-2026-71566 | 9.3 (v3.1) | KubeVirt backend is not authenticated |
openshift-metal3 |
fakefish |
2026-08-17T14:22:16.712Z | 2026-08-17T16:00:15.115Z |
| cve-2026-56089 | 3.3 (v3.1) | Dell ObjectScale, versions prior to 4.3.0.1, cont… |
Dell |
ObjectScale |
2026-08-17T13:55:27.655Z | 2026-08-17T14:47:37.577Z |
| cve-2026-59911 | 5.5 (v3.1) | Dell ObjectScale, versions prior to 4.3.0.1, cont… |
Dell |
ObjectScale |
2026-08-17T13:52:20.965Z | 2026-08-17T17:57:17.000Z |
| cve-2026-59909 | 7.1 (v3.1) | Dell ObjectScale, versions prior to 4.3.0.1, cont… |
Dell |
ObjectScale |
2026-08-17T13:48:56.890Z | 2026-08-18T14:42:25.444Z |
| cve-2026-56090 | 7.3 (v3.1) | Dell ObjectScale, versions prior to 4.3.0.1, cont… |
Dell |
ObjectScale |
2026-08-17T13:44:51.051Z | 2026-08-18T14:41:46.294Z |
| cve-2026-56685 | 7.3 (v3.1) | Dell ObjectScale, versions prior to 4.3.0.1, cont… |
Dell |
ObjectScale |
2026-08-17T13:40:04.595Z | 2026-08-17T17:57:23.682Z |
| cve-2026-15218 | 7.9 (v3.1) | Models-as-a-service: red hat openshift ai: maas-api an… |
Red Hat |
Red Hat OpenShift AI 3.4 |
2026-08-17T13:39:18.673Z | 2026-08-27T15:21:12.613Z |
| cve-2026-16137 | 7.2 (v3.1) | Path traversal via unsanitized upload filename leads t… |
Progress |
ShareFile Storage Zones Controller |
2026-08-17T13:32:45.100Z | 2026-08-18T03:55:24.727Z |
| cve-2026-16138 | 8 (v3.1) | Remote code execution via unsafe deserialization in Pr… |
Progress |
ShareFile Storage Zones Controller |
2026-08-17T13:32:01.432Z | 2026-08-18T03:55:25.792Z |
| cve-2026-16139 | 7.2 (v3.1) | Arbitrary file write via path traversal in Progress Sh… |
Progress |
ShareFile Storage Zones Controller |
2026-08-17T13:31:14.597Z | 2026-08-18T03:55:26.857Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-388 | Vulnérabilité dans GLPI | 2012-07-13T00:00:00.000000 | 2012-07-13T00:00:00.000000 |
| certa-2012-avi-387 | Multiples vulnérabilités dans VMware ESXi | 2012-07-13T00:00:00.000000 | 2012-07-13T00:00:00.000000 |
| certa-2012-avi-385 | Vulnérabilités dans Google Chrome | 2012-07-12T00:00:00.000000 | 2012-07-12T00:00:00.000000 |
| certa-2012-avi-384 | Multiples vulnérabilités dans les produits Cisco TelePresence | 2012-07-12T00:00:00.000000 | 2012-07-12T00:00:00.000000 |
| certa-2012-avi-383 | Vulnérabilité dans Microsoft Office pour Mac | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-382 | Vulnérabilité dans Microsoft SharePoint | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-381 | Vulnérabilité dans le protocole de chiffrement TLS | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-380 | Vulnérabilité dans l'interpréteur de commande Windows | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-379 | Vulnérabilités dans des pilotes du noyau Windows | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-378 | Vulnérabilité dans Microsoft Data Access Components | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-377 | Vulnérabilités dans Microsoft Internet Explorer | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-376 | Vulnérabilité Microsoft Visual Basic pour Applications | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-375 | Vulnérabilité dans Microsoft XML Core Services | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-374 | Vulnérabilités dans HP Operations Agent | 2012-07-11T00:00:00.000000 | 2012-07-11T00:00:00.000000 |
| certa-2012-avi-386 | Vulnérabilité dans Libpng | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-373 | Vulnérabilités dans VLC | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-372 | Vulnérabilité dans eZ Publish eZOE | 2012-07-10T00:00:00.000000 | 2012-07-10T00:00:00.000000 |
| certa-2012-avi-371 | Vulnérabilités dans Asterisk | 2012-07-09T00:00:00.000000 | 2012-07-09T00:00:00.000000 |
| certa-2012-avi-370 | Vulnérabilité dans Pidgin | 2012-07-09T00:00:00.000000 | 2012-07-09T00:00:00.000000 |
| certa-2012-avi-369 | Vulnérabilité dans HP ProtectTools Enterprise | 2012-07-06T00:00:00.000000 | 2012-07-06T00:00:00.000000 |
| certa-2012-avi-368 | Vulnérabilité dans RSA Access Manager | 2012-07-05T00:00:00.000000 | 2012-07-05T00:00:00.000000 |
| certa-2012-avi-367 | Vulnérabilité dans TYPO3 | 2012-07-05T00:00:00.000000 | 2012-07-05T00:00:00.000000 |
| certa-2012-avi-366 | Vulnérabilité dans SPIP | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-365 | Vulnérabilité dans Avaya IP Office Customer Call Reporter | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-364 | Vulnérabilité dans HP-UX | 2012-07-04T00:00:00.000000 | 2012-07-04T00:00:00.000000 |
| certa-2012-avi-363 | Vulnérabilité dans Novell GroupWise | 2012-07-03T00:00:00.000000 | 2012-07-03T00:00:00.000000 |
| certa-2012-avi-362 | Vulnérabilité dans Network Node Manager i | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-361 | Multiples vulnérabilités dans WordPress | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-360 | Multiples vulnérabilités dans IBM Support Assistant | 2012-07-02T00:00:00.000000 | 2012-07-02T00:00:00.000000 |
| certa-2012-avi-359 | Vulnérabilité dans des imprimantes HP Photosmart | 2012-06-29T00:00:00.000000 | 2012-06-29T00:00:00.000000 |