Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-16007 | 7.1 (v4.0) | Authenticated SQL Injection in AppFlowy |
AppFlowy-IO |
AppFlowy-Cloud |
2026-08-15T05:21:17.372Z | 2026-08-17T19:47:38.040Z |
| cve-2026-16145 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:59.974Z | 2026-08-18T19:38:54.953Z | |
| cve-2026-13360 | Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated… |
wplegalpages |
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode |
2026-08-15T03:25:59.613Z | 2026-08-18T19:34:40.413Z | |
| cve-2026-16146 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:59.272Z | 2026-08-17T15:56:34.024Z | |
| cve-2026-15948 | Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored … |
themefic |
Hydra Booking — Appointment Scheduling & Booking Calendar |
2026-08-15T03:25:58.930Z | 2026-08-17T16:07:11.999Z | |
| cve-2026-15453 | KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Inject… |
iqonicdesign |
KiviCare – Clinic & Patient Management System (EHR) |
2026-08-15T03:25:58.566Z | 2026-08-17T15:56:06.656Z | |
| cve-2026-16094 | Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (… |
matthiasnordwig |
Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms |
2026-08-15T03:25:58.224Z | 2026-08-17T19:38:56.976Z | |
| cve-2026-16586 | Contest Gallery <= 30.0.6 - Authenticated (Author+) Se… |
contest-gallery |
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe |
2026-08-15T03:25:57.860Z | 2026-08-17T16:07:21.151Z | |
| cve-2026-15993 | Form Maker by 10Web <= 1.15.44 - Authenticated (Subscr… |
10web |
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder |
2026-08-15T03:25:57.492Z | 2026-08-17T17:49:49.371Z | |
| cve-2026-17090 | Beaver Builder Page Builder <= 2.10.2.2 - Authenticate… |
beaverbuilder |
Beaver Builder Page Builder – Drag and Drop Website Builder |
2026-08-15T03:25:57.142Z | 2026-08-17T17:54:40.992Z | |
| cve-2026-18387 | Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Inj… |
trainingbusinesspros |
Groundhogg — CRM, Newsletters, and Marketing Automation |
2026-08-15T03:25:56.628Z | 2026-08-17T19:38:57.145Z | |
| cve-2026-12128 | Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated… |
dotonpaper |
Pinpoint Booking System – Version 2 |
2026-08-15T02:26:18.228Z | 2026-08-17T19:38:57.332Z | |
| cve-2026-15341 | User Session Synchronizer <= 1.4.0 - Unauthenticated A… |
rafasashi |
User Session Synchronizer |
2026-08-15T02:26:17.894Z | 2026-08-17T15:55:36.127Z | |
| cve-2026-15001 | bLoyal: Loyalty & Promotions by bLoyal <= 3.1.611.78 -… |
connectordev |
bLoyal: Loyalty & Promotions by bLoyal |
2026-08-15T02:26:17.515Z | 2026-08-17T16:07:29.548Z | |
| cve-2026-15303 | 6Storage Rentals <= 2.27.0 - Unauthenticated Account T… |
sixstorage |
6Storage Rentals |
2026-08-15T02:26:17.172Z | 2026-08-17T19:38:57.481Z | |
| cve-2026-8840 | Booking calendar, Appointment Booking System <= 3.2.36… |
wpdevart |
Booking calendar, Appointment Booking System |
2026-08-15T02:26:16.822Z | 2026-08-17T19:38:57.632Z | |
| cve-2026-15162 | Object Sync for Salesforce <= 2.2.13 - Unauthenticated… |
minnpost |
Object Sync for Salesforce |
2026-08-15T02:26:16.488Z | 2026-08-17T17:57:30.953Z | |
| cve-2026-15965 | MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Up… |
sadathimel |
MaxUpload – Big File Uploads – Increase Maximum File Upload Size |
2026-08-15T02:26:16.138Z | 2026-08-17T16:07:38.949Z | |
| cve-2026-15312 | Propovoice: All-in-One Client Management System <= 1.7… |
fassionstorage |
Propovoice: All-in-One Client Management System |
2026-08-15T02:26:15.792Z | 2026-08-18T19:35:33.073Z | |
| cve-2026-14484 | RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Del… |
pietror91 |
RapiSafe – Secure Multi File Upload for Contact Form 7 |
2026-08-15T02:26:15.460Z | 2026-08-17T15:55:00.729Z | |
| cve-2026-16080 | Image Uploader for Welcart <= 1.4.6 - Authenticated (A… |
fishpie |
Image Uploader for Welcart |
2026-08-15T02:26:15.114Z | 2026-08-17T17:59:38.742Z | |
| cve-2026-14433 | Online Booking & Scheduling Calendar for WordPress by … |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2026-08-15T02:26:14.608Z | 2026-08-18T19:39:53.784Z | |
| cve-2026-74250 | 6.3 (v3.1) | In OpenStack Ironic before 38.0.1, the autodetect… |
OpenStack |
Ironic |
2026-08-14T22:53:18.274Z | 2026-08-17T15:38:11.060Z |
| cve-2026-74247 | 4.2 (v3.1) | Quay: ssrf via build archive_url in quay build api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:15.488Z | 2026-08-17T15:51:28.477Z |
| cve-2026-74245 | 5.9 (v3.1) | Quay: unauthenticated exported logs download in quay |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:10.895Z | 2026-08-20T14:10:53.253Z |
| cve-2026-74244 | 5.9 (v3.1) | Quay: stripe webhook accepts forged events without sig… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.490Z | 2026-08-17T18:02:45.187Z |
| cve-2026-74243 | 6.5 (v3.1) | Quay: unauthenticated secscan notification endpoint in… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.342Z | 2026-08-18T02:17:27.523Z |
| cve-2026-74242 | 5.3 (v3.1) | Quay: repository notification uuid idor in quay api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:04.009Z | 2026-08-17T17:57:39.606Z |
| cve-2026-74241 | 4.8 (v3.1) | Quay: ldap referral filter injection in quay external … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:02.202Z | 2026-08-17T15:51:54.577Z |
| cve-2026-74240 | 5.4 (v3.1) | Quay: jwt claim validation bypasses in quay federated … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:01.103Z | 2026-08-20T14:12:03.863Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-535 | Vulnérabilité de Adobe Download Manager | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-534 | Vulnérabilités dans SAP Internet Graphics Service | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-533 | Multiples vulnérabilité du produit Trend Micro Office Scan | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-532 | Vulnérabilité de Citrix | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-531 | Vulnérabilité dans Novell ZENworks Patch Management | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-530 | Vulnérabilité dans Ruby | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-529 | Vulnérabilités dans IBM Tivoli | 2006-12-06T00:00:00.000000 | 2006-12-06T00:00:00.000000 |
| certa-2006-avi-528 | Vulnérabilité dans Sun Java System | 2006-12-05T00:00:00.000000 | 2006-12-05T00:00:00.000000 |
| certa-2006-avi-527 | Vulnérabilités dans F-Prot Antivirus pour UNIX | 2006-12-05T00:00:00.000000 | 2006-12-05T00:00:00.000000 |
| certa-2006-avi-526 | Vulnérabilités dans SquirrelMail | 2006-12-04T00:00:00.000000 | 2007-03-26T00:00:00.000000 |
| certa-2006-avi-525 | Vulnérabilité dans Novell ZENworks Asset Management | 2006-12-04T00:00:00.000000 | 2006-12-04T00:00:00.000000 |
| certa-2006-avi-524 | Multiples vulnérabilités de ProFTPD | 2006-12-04T00:00:00.000000 | 2006-12-04T00:00:00.000000 |
| certa-2006-avi-523 | Vulnérabilité du logiciel GnuPG | 2006-12-04T00:00:00.000000 | 2006-12-04T00:00:00.000000 |
| certa-2006-avi-522 | Multiples vulnérabilités de Xerox WorkCenter | 2006-12-01T00:00:00.000000 | 2006-12-01T00:00:00.000000 |
| certa-2006-avi-521 | Vulnérabilité dans F-Secure Antivirus et F-Secure Internet Gatekeeper | 2006-12-01T00:00:00.000000 | 2006-12-01T00:00:00.000000 |
| certa-2006-avi-520 | Vulnérabilité Novell | 2006-12-01T00:00:00.000000 | 2006-12-01T00:00:00.000000 |
| certa-2006-avi-519 | Vulnérabilité de Kronolith | 2006-12-01T00:00:00.000000 | 2006-12-01T00:00:00.000000 |
| certa-2006-avi-518 | Vulérabilité dans KOffice | 2006-12-01T00:00:00.000000 | 2006-12-01T00:00:00.000000 |
| certa-2006-avi-517 | Multiples vulnérabilités dans Apple Mac OS X | 2006-11-29T00:00:00.000000 | 2006-11-29T00:00:00.000000 |
| certa-2006-avi-516 | Vulnérabilité de GNU tar | 2006-11-29T00:00:00.000000 | 2007-01-25T00:00:00.000000 |
| certa-2006-avi-515 | Vulnérabilité dans Symantec NetBackup PureDisk | 2006-11-29T00:00:00.000000 | 2006-11-29T00:00:00.000000 |
| certa-2006-avi-514 | Vulnérabilité de GNU Radius | 2006-11-28T00:00:00.000000 | 2006-11-28T00:00:00.000000 |
| certa-2006-avi-513 | Vulnérabilités dans VMware | 2006-11-23T00:00:00.000000 | 2006-11-23T00:00:00.000000 |
| certa-2006-avi-512 | Vulnérabilité dans Kerio WinRoute Firewall | 2006-11-23T00:00:00.000000 | 2006-11-23T00:00:00.000000 |
| certa-2006-avi-511 | Vulnérabilité de CA personal Firewall | 2006-11-23T00:00:00.000000 | 2006-11-23T00:00:00.000000 |
| certa-2006-avi-510 | Vulnérabilité dans PHPMyAdmin | 2006-11-23T00:00:00.000000 | 2006-11-23T00:00:00.000000 |
| certa-2006-avi-508 | Vulnérabilité dans Apple MAC OS X | 2006-11-23T00:00:00.000000 | 2006-11-23T00:00:00.000000 |
| certa-2006-avi-509 | Vulnérabilité dans OpenBSD | 2006-11-22T00:00:00.000000 | 2006-11-22T00:00:00.000000 |
| certa-2006-avi-507 | Multiples vulnérabilités dans IBM Websphere | 2006-11-22T00:00:00.000000 | 2006-11-22T00:00:00.000000 |
| certa-2006-avi-505 | Multiples vulnérabilités dans Citrix Access Gateway | 2006-11-17T00:00:00.000000 | 2006-11-17T00:00:00.000000 |