Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79670 | 4.8 (v4.0) 4.8 (v3.1) | Ech0 before 4.4.3 Stored XSS via SVG Upload |
lin-snow |
Ech0 |
2026-08-25T11:33:31.499Z | 2026-08-25T17:30:32.633Z |
| cve-2026-79781 | 6.9 (v4.0) 6.5 (v3.1) | rclone serve s3 Path Traversal via dot-dot object keys |
rclone |
rclone |
2026-08-25T15:16:10.471Z | 2026-08-25T17:29:20.262Z |
| cve-2026-30866 | Combodo iTop: Insecured access to uploaded images via … |
Combodo |
iTop |
2026-08-21T19:32:00.149Z | 2026-08-25T17:28:23.007Z | |
| cve-2026-79776 | 6.9 (v4.0) 5.3 (v3.1) | rclone before 1.75.0 Authentication Bypass via pprof |
rclone |
rclone |
2026-08-25T15:16:07.085Z | 2026-08-25T17:27:57.096Z |
| cve-2026-72700 | 8.7 (v4.0) 7.5 (v3.1) | Grav before 3.9.1 Timing Attack via Non-Constant-Time … |
getgrav |
grav |
2026-08-25T01:30:22.914Z | 2026-08-25T17:25:36.693Z |
| cve-2026-76876 | 8.2 (v4.0) 5.9 (v3.1) | Craftplan < 0.5.1 Broken Access Control Information Di… |
puemos |
craftplan |
2026-08-21T19:38:45.203Z | 2026-08-25T17:17:45.458Z |
| cve-2026-27490 | Combodo iTop: Weak secret generation for inline image |
Combodo |
iTop |
2026-08-21T19:59:29.384Z | 2026-08-25T17:16:32.291Z | |
| cve-2026-53572 | KEDA: PostgreSQL connection string parameter injection… |
kedacore |
keda |
2026-08-21T20:11:56.479Z | 2026-08-25T17:13:43.120Z | |
| cve-2026-71905 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:40.253Z | 2026-08-25T17:12:38.113Z |
| cve-2026-44517 | Buildah: Build breakout using malicious Containerfile … |
containers |
buildah |
2026-08-21T20:29:00.354Z | 2026-08-25T17:07:10.143Z | |
| cve-2026-64679 | Atlantis: Path Traversal in Atlantis Workspace Handlin… |
runatlantis |
atlantis |
2026-08-21T20:29:55.106Z | 2026-08-25T17:05:09.821Z | |
| cve-2026-55168 | Runtipi: Authenticated arbitrary file write via backup… |
runtipi |
runtipi |
2026-08-21T20:31:38.124Z | 2026-08-25T17:01:52.501Z | |
| cve-2026-77415 | JSONata: Arbitrary Code Execution via crafted JSONata … |
jsonata-js |
jsonata |
2026-08-21T21:01:09.203Z | 2026-08-25T16:55:27.467Z | |
| cve-2026-49849 | xShop: Unrestricted File Upload in File Attachment Mod… |
4xmen |
xshop |
2026-08-21T21:14:24.201Z | 2026-08-25T16:53:16.207Z | |
| cve-2026-53531 | ratex-parser has unbounded parser recursion that leads… |
erweixin |
RaTeX |
2026-08-21T21:34:16.017Z | 2026-08-25T16:51:41.853Z | |
| cve-2026-53487 | Kite has an authenticated cluster RBAC bypass in /api/… |
kite-org |
kite |
2026-08-21T21:35:41.451Z | 2026-08-25T16:47:05.989Z | |
| cve-2026-53525 | WeeChat has Non-Constant-Time Password Hash Comparison… |
weechat |
weechat |
2026-08-21T22:19:21.278Z | 2026-08-25T16:46:03.941Z | |
| cve-2026-48050 | Arc: Unauthenticated access to Go debug pprof endpoint… |
Basekick-Labs |
arc |
2026-08-21T22:40:12.771Z | 2026-08-25T16:44:36.584Z | |
| cve-2026-75509 | joserfc claim-validation bypass via array-typed single… |
authlib |
joserfc |
2026-08-24T20:08:07.088Z | 2026-08-25T16:42:19.769Z | |
| cve-2026-70696 | Vulnerability in the Oracle Payments product of O… |
Oracle Corporation |
Oracle Payments |
2026-08-18T21:01:03.847Z | 2026-08-25T16:37:37.129Z | |
| cve-2026-70700 | Vulnerability in the Oracle Payables product of O… |
Oracle Corporation |
Oracle Payables |
2026-08-18T21:01:05.148Z | 2026-08-25T16:37:29.445Z | |
| cve-2026-70702 | Vulnerability in the Oracle Payments product of O… |
Oracle Corporation |
Oracle Payments |
2026-08-18T21:01:05.793Z | 2026-08-25T16:37:18.858Z | |
| cve-2026-70721 | Vulnerability in the Oracle Hyperion Profitabilit… |
Oracle Corporation |
Oracle Hyperion Profitability and Cost Management |
2026-08-18T21:01:11.962Z | 2026-08-25T16:37:12.850Z | |
| cve-2026-70730 | Vulnerability in the Oracle Hyperion Profitabilit… |
Oracle Corporation |
Oracle Hyperion Profitability and Cost Management |
2026-08-18T21:01:15.167Z | 2026-08-25T16:36:58.808Z | |
| cve-2026-70739 | Vulnerability in the Oracle Hyperion Financial Re… |
Oracle Corporation |
Oracle Hyperion Financial Reporting |
2026-08-18T21:01:18.184Z | 2026-08-25T16:36:52.886Z | |
| cve-2026-70740 | Vulnerability in the Oracle Hyperion Financial Re… |
Oracle Corporation |
Oracle Hyperion Financial Reporting |
2026-08-18T21:01:18.502Z | 2026-08-25T16:36:46.135Z | |
| cve-2026-70741 | Vulnerability in the Oracle Hyperion Financial Re… |
Oracle Corporation |
Oracle Hyperion Financial Reporting |
2026-08-18T21:01:18.826Z | 2026-08-25T16:36:39.262Z | |
| cve-2026-70745 | Vulnerability in the Oracle Hyperion Financial Re… |
Oracle Corporation |
Oracle Hyperion Financial Reporting |
2026-08-18T21:01:20.112Z | 2026-08-25T16:36:32.406Z | |
| cve-2026-70752 | Vulnerability in the Oracle Hyperion Financial Re… |
Oracle Corporation |
Oracle Hyperion Financial Reporting |
2026-08-18T21:01:22.015Z | 2026-08-25T16:36:25.551Z | |
| cve-2026-55468 | Wagtail: Improper restriction handling on Pages admin API |
wagtail |
wagtail |
2026-08-24T20:37:36.460Z | 2026-08-25T16:32:43.104Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-503 | Multiples vulnérabilités dans Wireshark | 2011-09-12T00:00:00.000000 | 2011-09-20T00:00:00.000000 |
| certa-2011-avi-525 | Vulnérabilités dans Red Hat Network Satellite | 2011-09-19T00:00:00.000000 | 2011-09-19T00:00:00.000000 |
| certa-2011-avi-524 | Multiples vulnérabilités dans Blue Coat Director | 2011-09-19T00:00:00.000000 | 2011-09-19T00:00:00.000000 |
| certa-2011-avi-523 | Vulnérabilité dans HP Network Manager i | 2011-09-16T00:00:00.000000 | 2011-09-16T00:00:00.000000 |
| certa-2011-avi-522 | Vulnérabilités dans phpMyAdmin | 2011-09-16T00:00:00.000000 | 2011-09-16T00:00:00.000000 |
| certa-2011-avi-521 | Vulnérabilité dans JBoss | 2011-09-16T00:00:00.000000 | 2011-09-16T00:00:00.000000 |
| certa-2011-avi-496 | Vulnérabilités dans OpenSSL | 2011-09-07T00:00:00.000000 | 2011-09-16T00:00:00.000000 |
| certa-2011-avi-459 | Multiples vulnérabilités dans Ruby on Rails | 2011-08-18T00:00:00.000000 | 2011-09-16T00:00:00.000000 |
| certa-2011-avi-520 | Vulnérabilités dans CiscoWorks LAN Management Solution | 2011-09-15T00:00:00.000000 | 2011-09-15T00:00:00.000000 |
| certa-2011-avi-519 | Multiples vulnérabilités dans Django | 2011-09-15T00:00:00.000000 | 2011-09-15T00:00:00.000000 |
| certa-2011-avi-518 | Vulnérabilités dans Cisco Unified Service Monitor et Cisco Unified Operations Manager | 2011-09-15T00:00:00.000000 | 2011-09-15T00:00:00.000000 |
| certa-2011-avi-517 | Vulnérabilité dans Novell Cloud Manager | 2011-09-15T00:00:00.000000 | 2011-09-15T00:00:00.000000 |
| certa-2011-avi-516 | Vulnérabilité dans Apache | 2011-09-15T00:00:00.000000 | 2011-09-15T00:00:00.000000 |
| certa-2011-avi-515 | Vulnérabilités dans IBM WebSphere | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-514 | Vulnérabilités dans Microsoft SharePoint | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-513 | Vulnérabilités dans Microsoft Office | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-512 | Vulnérabilités dans Microsoft Excel | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-511 | Vulnérabilité dans des composants Windows | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-510 | Vulnérabilité dans Microsoft WINS | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-509 | Vulnérabilité dans EMC Avamar | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-508 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2011-09-14T00:00:00.000000 | 2011-09-14T00:00:00.000000 |
| certa-2011-avi-507 | Vulnérabilités dans FFmpeg | 2011-09-13T00:00:00.000000 | 2011-09-13T00:00:00.000000 |
| certa-2011-avi-504 | Vulnérabilités dans Spring Framework | 2011-09-13T00:00:00.000000 | 2011-09-13T00:00:00.000000 |
| certa-2011-avi-502 | Vulnérabilité dans libsvg | 2011-09-12T00:00:00.000000 | 2011-09-12T00:00:00.000000 |
| certa-2011-avi-501 | Vulnérabilités dans IBM Open Administration Tool | 2011-09-12T00:00:00.000000 | 2011-09-12T00:00:00.000000 |
| certa-2011-avi-493 | Certificats SSL frauduleux | 2011-09-02T00:00:00.000000 | 2011-09-12T00:00:00.000000 |
| certa-2011-avi-500 | Vulnérabilité dans Xen | 2011-09-08T00:00:00.000000 | 2011-09-08T00:00:00.000000 |
| certa-2011-avi-499 | Vulnérabilité dans les commutateurs Cisco Nexus 5000 et 3000 series | 2011-09-08T00:00:00.000000 | 2011-09-08T00:00:00.000000 |
| certa-2011-avi-498 | Vulnérabilité dans Bluecoat Reporter | 2011-09-08T00:00:00.000000 | 2011-09-08T00:00:00.000000 |
| certa-2011-avi-497 | Vulnérabilité dans IBM OmniFind | 2011-09-07T00:00:00.000000 | 2011-09-07T00:00:00.000000 |