Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-15965 | MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Up… |
sadathimel |
MaxUpload – Big File Uploads – Increase Maximum File Upload Size |
2026-08-15T02:26:16.138Z | 2026-08-17T16:07:38.949Z | |
| cve-2026-15312 | Propovoice: All-in-One Client Management System <= 1.7… |
fassionstorage |
Propovoice: All-in-One Client Management System |
2026-08-15T02:26:15.792Z | 2026-08-18T19:35:33.073Z | |
| cve-2026-14484 | RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Del… |
pietror91 |
RapiSafe – Secure Multi File Upload for Contact Form 7 |
2026-08-15T02:26:15.460Z | 2026-08-17T15:55:00.729Z | |
| cve-2026-16080 | Image Uploader for Welcart <= 1.4.6 - Authenticated (A… |
fishpie |
Image Uploader for Welcart |
2026-08-15T02:26:15.114Z | 2026-08-17T17:59:38.742Z | |
| cve-2026-14433 | Online Booking & Scheduling Calendar for WordPress by … |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2026-08-15T02:26:14.608Z | 2026-08-18T19:39:53.784Z | |
| cve-2026-74250 | 6.3 (v3.1) | In OpenStack Ironic before 38.0.1, the autodetect… |
OpenStack |
Ironic |
2026-08-14T22:53:18.274Z | 2026-08-17T15:38:11.060Z |
| cve-2026-74247 | 4.2 (v3.1) | Quay: ssrf via build archive_url in quay build api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:15.488Z | 2026-08-17T15:51:28.477Z |
| cve-2026-74245 | 5.9 (v3.1) | Quay: unauthenticated exported logs download in quay |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:10.895Z | 2026-08-20T14:10:53.253Z |
| cve-2026-74244 | 5.9 (v3.1) | Quay: stripe webhook accepts forged events without sig… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.490Z | 2026-08-17T18:02:45.187Z |
| cve-2026-74243 | 6.5 (v3.1) | Quay: unauthenticated secscan notification endpoint in… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.342Z | 2026-08-18T02:17:27.523Z |
| cve-2026-74242 | 5.3 (v3.1) | Quay: repository notification uuid idor in quay api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:04.009Z | 2026-08-17T17:57:39.606Z |
| cve-2026-74241 | 4.8 (v3.1) | Quay: ldap referral filter injection in quay external … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:02.202Z | 2026-08-17T15:51:54.577Z |
| cve-2026-74240 | 5.4 (v3.1) | Quay: jwt claim validation bypasses in quay federated … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:01.103Z | 2026-08-20T14:12:03.863Z |
| cve-2026-63650 | 2 (v4.0) | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS al… |
OpenVPN |
OpenVPN |
2026-08-14T22:13:26.656Z | 2026-08-17T15:38:23.494Z |
| cve-2026-63649 | 4.1 (v4.0) | The Windows interactive service in OpenVPN 2.4.0 … |
OpenVPN |
OpenVPN |
2026-08-14T22:13:21.590Z | 2026-08-17T15:38:37.331Z |
| cve-2026-69414 | 7.8 (v3.1) | Microsoft Defender Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Malware Protection Engine |
2026-08-14T21:50:58.641Z | 2026-09-11T16:48:10.460Z |
| cve-2026-73683 | 8.1 (v3.1) 9.2 (v4.0) | Laravel Socialite Facebook Provider Authentication Byp… |
Laravel |
Socialite |
2026-08-14T21:32:18.055Z | 2026-08-18T02:16:58.252Z |
| cve-2026-73682 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-19T14:16:41.196Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\xa0CVE-2026-73294 published by GitHub', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}} | N/A | N/A | 2026-08-14T21:06:36.069Z | 2026-08-19T14:16:41.196Z |
| cve-2026-50523 | 7.8 (v3.1) | Microsoft PowerShell Remote Code Execution Vulnerability |
Microsoft |
PowerShell 7.4 |
2026-08-14T21:05:20.277Z | 2026-09-11T16:48:09.901Z |
| cve-2026-74248 | 4.3 (v3.1) | OpenStack Octavia through 18.0.0 mishandles quali… |
OpenStack |
Octavia |
2026-08-14T20:20:31.446Z | 2026-08-17T21:07:01.668Z |
| cve-2026-67366 | 5.3 (v4.0) | Joomla Extension - icagenda.com - CSRF on frontend reg… |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:08:50.344Z | 2026-08-18T08:01:20.974Z |
| cve-2026-71570 | 5.1 (v4.0) | Joomla Extension - icagenda.com - ACL bypass allowing … |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:08:35.335Z | 2026-08-18T08:01:05.188Z |
| cve-2026-71571 | 8.6 (v4.0) | Joomla Extension - icagenda.com - Authenticated SQL in… |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:06:08.617Z | 2026-08-18T18:22:08.235Z |
| cve-2026-67365 | 9.2 (v4.0) | Joomla Extension - icagenda.com - Unauthenticated SQL … |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:02:34.729Z | 2026-08-18T07:55:07.199Z |
| cve-2026-19910 | 7.5 (v3.0) | PAX Technology Q80 Application Installer Signature Ver… |
PAX Technology |
Q80 |
2026-08-14T20:01:08.308Z | 2026-08-17T19:50:02.572Z |
| cve-2026-19908 | 7.1 (v3.0) | PAX Technology Q80 XCB Daemon Missing Authentication V… |
PAX Technology |
Q80 |
2026-08-14T20:00:25.095Z | 2026-08-17T19:52:18.319Z |
| cve-2026-19909 | 7.5 (v3.0) | PAX Technology Q80 AIP File Parsing Link Following Rem… |
PAX Technology |
Q80 |
2026-08-14T20:00:21.721Z | 2026-08-17T19:51:38.655Z |
| cve-2026-73680 | 8.8 (v3.1) 8.7 (v4.0) | Cockpit CMS 2.14.0 Authenticated Command Injection via… |
Cockpit HQ |
Cockpit CMS |
2026-08-14T19:56:32.437Z | 2026-08-17T15:52:57.125Z |
| cve-2026-34492 | 7 (v4.0) | Airwall - Arbitrary file read |
Johnson Controls |
Airwall |
2026-08-14T19:32:25.047Z | 2026-08-14T19:49:52.871Z |
| cve-2026-64887 | 7 (v4.0) | Airwall - Hardcoded Secrets |
Johnson Controls |
Airwall |
2026-08-14T19:28:20.015Z | 2026-08-14T19:50:22.102Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-284 | Multiples vulnérabilités dans Tomcat sous HP-UX | 2010-06-23T00:00:00.000000 | 2010-06-23T00:00:00.000000 |
| certa-2010-avi-283 | Vulnérabilités dans Mozilla Thunderbird | 2010-06-23T00:00:00.000000 | 2010-06-23T00:00:00.000000 |
| certa-2010-avi-282 | Vulnérabilités dans Mozilla Firefox | 2010-06-23T00:00:00.000000 | 2010-08-17T00:00:00.000000 |
| certa-2010-avi-281 | Vulnérabilités dans LibTIFF | 2010-06-23T00:00:00.000000 | 2010-06-29T00:00:00.000000 |
| certa-2010-avi-280 | Multiples vulnérabilités dans Apple iOS | 2010-06-22T00:00:00.000000 | 2010-06-22T00:00:00.000000 |
| certa-2010-avi-279 | Vulnérabilité dans IBM WebSphere ILOG JRules | 2010-06-22T00:00:00.000000 | 2010-06-22T00:00:00.000000 |
| certa-2010-avi-278 | Vulnérabilités dans Moodle | 2010-06-22T00:00:00.000000 | 2010-06-29T00:00:00.000000 |
| certa-2010-avi-277 | Vulnérabilité dans pmount | 2010-06-22T00:00:00.000000 | 2010-06-22T00:00:00.000000 |
| certa-2010-avi-276 | Multiples vulnérabilités dans IBM Java | 2010-06-21T00:00:00.000000 | 2010-06-21T00:00:00.000000 |
| certa-2010-avi-275 | Vulnérabilités dans CUPS | 2010-06-21T00:00:00.000000 | 2010-06-21T00:00:00.000000 |
| certa-2010-avi-274 | Vulnérabilités dans Opera | 2010-06-21T00:00:00.000000 | 2010-06-21T00:00:00.000000 |
| certa-2010-avi-273 | Vulnérabilité dans Novell Administration Console | 2010-06-18T00:00:00.000000 | 2010-06-18T00:00:00.000000 |
| certa-2010-avi-272 | Vulnérabilité dans SAP J2EE | 2010-06-18T00:00:00.000000 | 2010-06-18T00:00:00.000000 |
| certa-2010-avi-271 | Vulnérabilité dans Symantec AppStream et Workspace Streaming | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-270 | Multiples vulnérabilités dans Apple iTunes | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-269 | Vulnérabilités dans AIX | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-268 | Multiples vulnérabilités dans HP SSL pour OpenVMS | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-267 | Vulnérabilité dans ISC DHCP | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-266 | Vulnérabilité dans Samba | 2010-06-16T00:00:00.000000 | 2010-11-29T00:00:00.000000 |
| certa-2010-avi-265 | Multiples vulnérabilités dans Apple Mac OS X | 2010-06-16T00:00:00.000000 | 2010-06-16T00:00:00.000000 |
| certa-2010-avi-264 | Multiples vulnérabilités dans Apache | 2010-06-14T00:00:00.000000 | 2010-08-02T00:00:00.000000 |
| certa-2010-avi-263 | Vulnérabilité dans des produits Juniper | 2010-06-14T00:00:00.000000 | 2010-06-15T00:00:00.000000 |
| certa-2010-avi-262 | Vulnérabilités dans LibTIFF | 2010-06-14T00:00:00.000000 | 2010-06-29T00:00:00.000000 |
| certa-2010-avi-261 | Multiples vulnérabilités dans Adobe Flash Player | 2010-06-11T00:00:00.000000 | 2010-06-11T00:00:00.000000 |
| certa-2010-avi-260 | Vulnérabilités dans Wireshark | 2010-06-11T00:00:00.000000 | 2010-07-02T00:00:00.000000 |
| certa-2010-avi-259 | Multiples vulnérabilités dans Google Chrome | 2010-06-11T00:00:00.000000 | 2010-06-16T00:00:00.000000 |
| certa-2010-avi-258 | Vulnérabilité dans Sophos Anti-Virus | 2010-06-11T00:00:00.000000 | 2010-06-11T00:00:00.000000 |
| certa-2010-avi-257 | Vulnérabilité dans Cisco Application Extension Platform | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-256 | Vulnérabilités dans Cisco Unified Contact Center Express | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-255 | Vulnérabilité dans McAfee UTM Firewall | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |