Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-26897 | N/A | An issue in EcoOnline EHS (com.airsweb.v10) appli… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-27T14:10:00.620Z |
| cve-2026-26459 | N/A | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 co… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-27T13:49:48.225Z |
| cve-2026-26457 | N/A | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 co… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-27T13:49:14.721Z |
| cve-2026-26456 | N/A | A null pointer dereference vulnerability exists i… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-31T17:35:30.112Z |
| cve-2026-26453 | N/A | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 co… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-27T13:46:37.416Z |
| cve-2026-26452 | N/A | ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lc… |
n/a |
n/a |
2026-08-27T00:00:00.000Z | 2026-08-27T13:45:38.203Z |
| cve-2026-47874 | 5.3 (v3.1) | Reactor Netty HTTP Server Denial of Service With Pipel… |
Spring |
Reactor Netty |
2026-08-26T23:49:26.907Z | 2026-08-27T13:12:29.108Z |
| cve-2026-47861 | 6.3 (v3.1) | UDP adapter sends ack to attacker-supplied host:port p… |
Spring |
Spring Integration |
2026-08-26T23:49:25.980Z | 2026-08-27T13:14:00.079Z |
| cve-2026-81421 | ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-… |
ddfourtwo |
sentry-selfhosted-mcp |
2026-08-26T23:45:09.560Z | 2026-08-27T14:01:32.252Z | |
| cve-2026-47863 | 5.9 (v3.1) | Reactor Core bufferTimeout fair-backpressure pipeline … |
Spring |
Reactor Core |
2026-08-26T23:28:48.599Z | 2026-08-27T14:45:41.473Z |
| cve-2026-47862 | 5.4 (v3.1) | ZipTransformer uses file_name header to build workDire… |
Spring |
Spring Integration |
2026-08-26T23:28:47.655Z | 2026-08-27T14:47:11.989Z |
| cve-2026-47860 | 6.5 (v3.1) | Unbounded decompression of attacker-supplied compresse… |
Spring |
Spring AMQP |
2026-08-26T23:28:46.607Z | 2026-08-27T14:48:04.818Z |
| cve-2026-47859 | 5.4 (v3.1) | Unbounded memory allocation in RFC6587SyslogDeserializ… |
Spring |
Spring Integration |
2026-08-26T23:28:45.659Z | 2026-08-27T14:48:52.190Z |
| cve-2026-47857 | 5.9 (v3.1) | Reactor Core windowTimeout fair-backpressure stream ha… |
Spring |
Reactor Core |
2026-08-26T23:28:44.743Z | 2026-08-27T15:07:38.775Z |
| cve-2026-47856 | 6.3 (v3.1) | JsonToObjectTransformer resolves the json__TypeId__ me… |
Spring |
Spring Integration |
2026-08-26T23:28:43.829Z | 2026-08-27T15:12:42.355Z |
| cve-2026-47852 | 7.5 (v3.1) | Predictable cache directory location allows local ONNX… |
Spring |
Spring AI |
2026-08-26T23:28:42.767Z | 2026-08-27T15:13:55.925Z |
| cve-2026-47851 | 7.5 (v3.1) | Unbounded recursion over attacker-controlled PDF outli… |
Spring |
Spring AI |
2026-08-26T23:28:41.732Z | 2026-08-27T15:14:42.087Z |
| cve-2026-47850 | 4.3 (v3.1) | Spring Data REST allows mutation of the version proper… |
Spring |
Spring Data REST |
2026-08-26T23:28:40.729Z | 2026-08-27T15:15:43.277Z |
| cve-2026-47845 | 5.3 (v3.1) | Reactor Netty HTTP Server may incorrectly evaluate pro… |
Spring |
Reactor Netty |
2026-08-26T23:28:39.360Z | 2026-08-27T14:02:35.899Z |
| cve-2026-80183 | 7.1 (v4.0) | In OpenStack Keystone before 29.0.3, any authenti… |
OpenStack |
Keystone |
2026-08-26T23:16:43.059Z | 2026-08-27T14:08:09.543Z |
| cve-2026-47665 | Penpot: Stored XSS via comment content, innerHTML rend… |
penpot |
penpot |
2026-08-26T22:50:34.362Z | 2026-08-27T15:16:47.257Z | |
| cve-2026-47666 | Penpot: Stored XSS via custom font family name injecte… |
penpot |
penpot |
2026-08-26T22:47:49.788Z | 2026-08-27T14:08:58.826Z | |
| cve-2026-65956 | KubePi: Unauthenticated SSO/OIDC configuration allows … |
1Panel-dev |
KubePi |
2026-08-26T22:40:55.741Z | 2026-08-29T02:55:41.323Z | |
| cve-2026-81203 | SourceCodester Simple Online Food Ordering System ajax… |
SourceCodester |
Simple Online Food Ordering System |
2026-08-26T22:30:11.700Z | 2026-08-29T02:54:22.387Z | |
| cve-2025-62341 | 3.7 (v3.1) | HCL Connections is vulnerable to server-side request f… |
HCLSoftware |
Connections |
2026-08-26T22:15:56.136Z | 2026-08-27T14:13:47.312Z |
| cve-2026-80158 | 5.5 (v3.1) | Ansible-collection-community-general: community.genera… |
Red Hat |
Red Hat Ceph Storage 5 |
2026-08-26T22:06:07.301Z | 2026-08-31T06:55:08.052Z |
| cve-2026-69129 | KubePi: Insufficient per-cluster authorization checks … |
1Panel-dev |
KubePi |
2026-08-26T22:04:03.301Z | 2026-08-27T14:32:23.251Z | |
| cve-2026-21808 | 4.1 (v3.1) | HCL BigFix Quantum Risk Analyzer is affected by loggin… |
HCLSoftware |
BigFix Quantum Risk Analyzer |
2026-08-26T22:03:20.294Z | 2026-08-27T16:06:56.837Z |
| cve-2026-21807 | 3.9 (v3.1) | HCL BigFix Quantum Risk Analyzer is affected by a stac… |
HCLSoftware |
BigFix Quantum Risk Analyzer |
2026-08-26T22:02:27.455Z | 2026-08-27T16:05:13.677Z |
| cve-2026-61617 | Pterodactyl Wings SFTP write path does not enforce dis… |
pterodactyl |
wings |
2026-08-26T21:56:41.379Z | 2026-08-27T16:05:48.675Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000238 | Robotic appliance COCOROBO vulnerable to session management | 2017-11-16T14:03+09:00 | 2018-03-14T14:09+09:00 |
| jvndb-2017-000237 | Multiple vulnerabilities in BOOK WALKER for Windows/Mac | 2017-11-14T15:19+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000236 | WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references | 2017-11-14T13:26+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000235 | CS-Cart Japanese Edition vulnerable to cross-site scripting | 2017-11-13T15:30+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000234 | Installer of HYPER SBI may insecurely load Dynamic Link Libraries | 2017-11-09T12:29+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000233 | I-O DATA LAN DISK Connect vulnerable to denial-of-service (DoS) | 2017-11-06T13:48+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000232 | Wi-Fi STATION L-02F vulnerable to buffer overflow | 2017-11-06T13:48+09:00 | 2018-03-07T14:00+09:00 |
| jvndb-2017-000213 | Installer of "Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries | 2017-11-02T13:57+09:00 | 2018-03-14T13:48+09:00 |
| jvndb-2017-000231 | OpenAM (Open Source Edition) vulnerable to authentication bypass | 2017-11-01T15:36+09:00 | 2018-03-14T14:03+09:00 |
| jvndb-2017-008629 | Memory corruption vulnerability in Rakuraku Hagaki and Rakuraku Hagaki Select for Ichitaro | 2017-10-25T12:17+09:00 | 2018-03-14T14:01+09:00 |
| jvndb-2017-008411 | XXE Vulnerability in Hitachi Command Suite | 2017-10-18T14:22+09:00 | 2017-11-07T15:06+09:00 |
| jvndb-2017-000229 | Home unit KX-HJB1000 contains multiple vulnerabilities | 2017-10-17T17:22+09:00 | 2018-03-07T14:24+09:00 |
| jvndb-2017-008370 | Information Disclosure Vulnerability in Hitachi Automation Director | 2017-10-17T17:01+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008369 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor | 2017-10-17T16:58+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008364 | RMI Vulnerability in Hitachi Tuning Manager | 2017-10-17T16:26+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008363 | Information Disclosure Vulnerability in Hitachi Global Link Manager | 2017-10-17T16:26+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-000228 | Installer of HIBUN Confidential File Viewer may insecurely load Dynamic Link Libraries and invoke executable files | 2017-10-11T16:43+09:00 | 2018-03-07T12:09+09:00 |
| jvndb-2017-000227 | HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries | 2017-10-11T16:43+09:00 | 2018-03-07T12:06+09:00 |
| jvndb-2017-000226 | HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries | 2017-10-11T16:43+09:00 | 2018-03-07T12:12+09:00 |
| jvndb-2017-000225 | Cybozu Office fails to restrict access permissions | 2017-10-11T14:28+09:00 | 2018-03-07T12:21+09:00 |
| jvndb-2017-007767 | Self-Decrypting Confidential Files created by JP1/HIBUN may insecurely load Dynamic Link Libraries | 2017-10-03T11:18+09:00 | 2017-10-06T11:36+09:00 |
| jvndb-2017-000223 | Install program and Installer of i-filter 6.0 may insecurely load Dynamic Link Libraries and invoke executable files | 2017-09-29T13:54+09:00 | 2017-09-29T13:54+09:00 |
| jvndb-2017-000146 | Marp vulnerable to improper access control in JavaScript execution | 2017-09-29T13:54+09:00 | 2018-02-07T11:52+09:00 |
| jvndb-2017-007582 | jwt-scala fails to verify token signatures | 2017-09-26T15:37+09:00 | 2018-03-07T12:23+09:00 |
| jvndb-2017-007422 | InterScan Web Security Virtual Appliance vulnerable to code injection | 2017-09-21T15:58+09:00 | 2018-03-07T14:32+09:00 |
| jvndb-2017-000218 | Wi-Fi STATION L-02F fails to restrict access permissions | 2017-09-12T14:35+09:00 | 2018-02-28T14:09+09:00 |
| jvndb-2017-000217 | Backdoor access issue in Wi-Fi STATION L-02F | 2017-09-12T14:34+09:00 | 2018-02-28T14:11+09:00 |
| jvndb-2017-000222 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2017-09-11T15:19+09:00 | 2018-02-28T14:12+09:00 |
| jvndb-2017-000221 | Installer of FENCE-Explorer may insecurely load Dynamic Link Libraries and invoke executable files | 2017-09-11T14:55+09:00 | 2018-02-28T13:58+09:00 |
| jvndb-2017-000220 | Multiple vulnerabilities in CG-WLR300NM | 2017-09-08T14:14+09:00 | 2018-02-28T12:21+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0739 | Multiples vulnérabilités dans Asterisk | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0738 | Multiples vulnérabilités dans les produits Elastic | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0737 | Multiples vulnérabilités dans les produits Cisco | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0736 | Multiples vulnérabilités dans GitLab | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0735 | Vulnérabilité dans GLPI | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0734 | Vulnérabilité dans ISC Kea DHCP | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0733 | Vulnérabilité dans Nagios XI | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0732 | Vulnérabilité dans Google Chrome | 2025-08-27T00:00:00.000000 | 2025-08-27T00:00:00.000000 |
| certfr-2025-avi-0731 | Vulnérabilité dans Shibboleth Identity Provider | 2025-08-27T00:00:00.000000 | 2025-08-27T00:00:00.000000 |
| certfr-2025-avi-0730 | Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway | 2025-08-26T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-avi-0729 | Multiples vulnérabilités dans Qnap File Station | 2025-08-26T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-avi-0728 | Vulnérabilité dans Centreon Web | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0727 | Multiples vulnérabilités dans les produits ESET | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0726 | Vulnérabilité dans les produits Moxa | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0725 | Vulnérabilité dans Liferay | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0724 | Multiples vulnérabilités dans les produits IBM | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0723 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0722 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0721 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0720 | Multiples vulnérabilités dans Microsoft Windows | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0719 | Vulnérabilité dans Microsoft Edge | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0718 | Multiples vulnérabilités dans les produits Liferay | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0717 | Vulnérabilité dans Elastic Beats | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0716 | Vulnérabilité dans les produits Apple | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0715 | Multiples vulnérabilités dans les produits Liferay | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0714 | Multiples vulnérabilités dans les produits Mozilla | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0713 | Multiples vulnérabilités dans les produits Liferay | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0712 | Vulnérabilité dans Apereo CAS | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0711 | Vulnérabilité dans Google Chrome | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0710 | Multiples vulnérabilités dans les produits F5 | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |