Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18387 | Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Inj… |
trainingbusinesspros |
Groundhogg — CRM, Newsletters, and Marketing Automation |
2026-08-15T03:25:56.628Z | 2026-08-17T19:38:57.145Z | |
| cve-2026-12128 | Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated… |
dotonpaper |
Pinpoint Booking System – Version 2 |
2026-08-15T02:26:18.228Z | 2026-08-17T19:38:57.332Z | |
| cve-2026-15341 | User Session Synchronizer <= 1.4.0 - Unauthenticated A… |
rafasashi |
User Session Synchronizer |
2026-08-15T02:26:17.894Z | 2026-08-17T15:55:36.127Z | |
| cve-2026-15001 | bLoyal: Loyalty & Promotions by bLoyal <= 3.1.611.78 -… |
connectordev |
bLoyal: Loyalty & Promotions by bLoyal |
2026-08-15T02:26:17.515Z | 2026-08-17T16:07:29.548Z | |
| cve-2026-15303 | 6Storage Rentals <= 2.27.0 - Unauthenticated Account T… |
sixstorage |
6Storage Rentals |
2026-08-15T02:26:17.172Z | 2026-08-17T19:38:57.481Z | |
| cve-2026-8840 | Booking calendar, Appointment Booking System <= 3.2.36… |
wpdevart |
Booking calendar, Appointment Booking System |
2026-08-15T02:26:16.822Z | 2026-08-17T19:38:57.632Z | |
| cve-2026-15162 | Object Sync for Salesforce <= 2.2.13 - Unauthenticated… |
minnpost |
Object Sync for Salesforce |
2026-08-15T02:26:16.488Z | 2026-08-17T17:57:30.953Z | |
| cve-2026-15965 | MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Up… |
sadathimel |
MaxUpload – Big File Uploads – Increase Maximum File Upload Size |
2026-08-15T02:26:16.138Z | 2026-08-17T16:07:38.949Z | |
| cve-2026-15312 | Propovoice: All-in-One Client Management System <= 1.7… |
fassionstorage |
Propovoice: All-in-One Client Management System |
2026-08-15T02:26:15.792Z | 2026-08-18T19:35:33.073Z | |
| cve-2026-14484 | RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Del… |
pietror91 |
RapiSafe – Secure Multi File Upload for Contact Form 7 |
2026-08-15T02:26:15.460Z | 2026-08-17T15:55:00.729Z | |
| cve-2026-16080 | Image Uploader for Welcart <= 1.4.6 - Authenticated (A… |
fishpie |
Image Uploader for Welcart |
2026-08-15T02:26:15.114Z | 2026-08-17T17:59:38.742Z | |
| cve-2026-14433 | Online Booking & Scheduling Calendar for WordPress by … |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2026-08-15T02:26:14.608Z | 2026-08-18T19:39:53.784Z | |
| cve-2026-74250 | 6.3 (v3.1) | In OpenStack Ironic before 38.0.1, the autodetect… |
OpenStack |
Ironic |
2026-08-14T22:53:18.274Z | 2026-08-17T15:38:11.060Z |
| cve-2026-74247 | 4.2 (v3.1) | Quay: ssrf via build archive_url in quay build api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:15.488Z | 2026-08-17T15:51:28.477Z |
| cve-2026-74245 | 5.9 (v3.1) | Quay: unauthenticated exported logs download in quay |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:10.895Z | 2026-08-20T14:10:53.253Z |
| cve-2026-74244 | 5.9 (v3.1) | Quay: stripe webhook accepts forged events without sig… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.490Z | 2026-08-17T18:02:45.187Z |
| cve-2026-74243 | 6.5 (v3.1) | Quay: unauthenticated secscan notification endpoint in… |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:06.342Z | 2026-08-18T02:17:27.523Z |
| cve-2026-74242 | 5.3 (v3.1) | Quay: repository notification uuid idor in quay api |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:04.009Z | 2026-08-17T17:57:39.606Z |
| cve-2026-74241 | 4.8 (v3.1) | Quay: ldap referral filter injection in quay external … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:02.202Z | 2026-08-17T15:51:54.577Z |
| cve-2026-74240 | 5.4 (v3.1) | Quay: jwt claim validation bypasses in quay federated … |
Red Hat |
Red Hat OpenShift Update Service |
2026-08-14T22:43:01.103Z | 2026-08-20T14:12:03.863Z |
| cve-2026-63650 | 2 (v4.0) | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS al… |
OpenVPN |
OpenVPN |
2026-08-14T22:13:26.656Z | 2026-08-17T15:38:23.494Z |
| cve-2026-63649 | 4.1 (v4.0) | The Windows interactive service in OpenVPN 2.4.0 … |
OpenVPN |
OpenVPN |
2026-08-14T22:13:21.590Z | 2026-08-17T15:38:37.331Z |
| cve-2026-69414 | 7.8 (v3.1) | Microsoft Defender Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Malware Protection Engine |
2026-08-14T21:50:58.641Z | 2026-09-16T16:25:09.558Z |
| cve-2026-73683 | 8.1 (v3.1) 9.2 (v4.0) | Laravel Socialite Facebook Provider Authentication Byp… |
Laravel |
Socialite |
2026-08-14T21:32:18.055Z | 2026-08-18T02:16:58.252Z |
| cve-2026-73682 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-19T14:16:41.196Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\xa0CVE-2026-73294 published by GitHub', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}} | N/A | N/A | 2026-08-14T21:06:36.069Z | 2026-08-19T14:16:41.196Z |
| cve-2026-50523 | 7.8 (v3.1) | Microsoft PowerShell Remote Code Execution Vulnerability |
Microsoft |
PowerShell 7.4 |
2026-08-14T21:05:20.277Z | 2026-09-16T16:25:09.026Z |
| cve-2026-74248 | 4.3 (v3.1) | OpenStack Octavia through 18.0.0 mishandles quali… |
OpenStack |
Octavia |
2026-08-14T20:20:31.446Z | 2026-08-17T21:07:01.668Z |
| cve-2026-67366 | 5.3 (v4.0) | Joomla Extension - icagenda.com - CSRF on frontend reg… |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:08:50.344Z | 2026-08-18T08:01:20.974Z |
| cve-2026-71570 | 5.1 (v4.0) | Joomla Extension - icagenda.com - ACL bypass allowing … |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:08:35.335Z | 2026-08-18T08:01:05.188Z |
| cve-2026-71571 | 8.6 (v4.0) | Joomla Extension - icagenda.com - Authenticated SQL in… |
icagenda.com |
iCagenda extension for Joomla |
2026-08-14T20:06:08.617Z | 2026-08-18T18:22:08.235Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-239 | Vulnérabilité du protocole PPTP sous Windows 2000 et Windows XP | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-238 | Problème de permissions sous Windows 2000 | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-237 | Vulnérabilité de la pile TCP sous Solaris | 2002-10-24T00:00:00.000000 | 2002-10-24T00:00:00.000000 |
| certa-2002-avi-236 | Multiples vulnérabilités de X Window sous SGI Irix | 2002-10-21T00:00:00.000000 | 2002-10-21T00:00:00.000000 |
| certa-2002-avi-235 | Vulnérabilité des services <TT>ypserv</TT> et <TT>ypxfrd</TT> sous Unix | 2002-10-17T00:00:00.000000 | 2002-11-06T00:00:00.000000 |
| certa-2002-avi-234 | Vulnérabilité dans les applications Microsoft Word et Excel | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-233 | Vulnérabilité dans le système d'aide de Windows XP | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-232 | Elévation de privilèges dans SQL Server Web Tasks | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-231 | Vulnérabilité du serveur HTTP des commutateurs Catalyst de Cisco | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-230 | Multiples vulnérabilités sous IRIX | 2002-10-16T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-229 | Vulnérabilité de fetchmail | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-228 | Vulnérabilité des systèmes AIX de IBM | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-227 | Débordement de variable dans gv | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-226 | Vulnérabilité dans les gardes-barrières Symantec | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-225 | Vulnérabilité dans Oracle Listener | 2002-10-15T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-224 | Vulnérabilités des serveurs HTTP Apache et Oracle | 2002-10-11T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-223 | Vulnérabilité dans Microsoft Outlook Express | 2002-10-11T00:00:00.000000 | 2002-10-11T00:00:00.000000 |
| certa-2002-avi-222 | Multiples vulnérabilités dans <SPAN class="textit">Services for Unix</SPAN> 3.0 de Microsoft | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-221 | Vulnérabilités de la fonction d'aide sous Windows | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-220 | Multiples vulnérabilités dans MS-SQL | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-219 | Vulnérabilités dans les fonctions de décompression des dossiers sous Windows | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-218 | Vulnérabilité dans le serveur Microsoft FrontPage | 2002-09-26T00:00:00.000000 | 2002-09-26T00:00:00.000000 |
| certa-2002-avi-217 | Vulnérabilité de PHP | 2002-09-20T00:00:00.000000 | 2002-09-20T00:00:00.000000 |
| certa-2002-avi-216 | Vulnérabilité des anti-virus pour passerelles de messagerie | 2002-09-20T00:00:00.000000 | 2002-09-20T00:00:00.000000 |
| certa-2002-avi-215 | Multiples Vulnérabilités dans Microsoft java | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-214 | Vulnérabilité d'ISS Scanner | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-213 | Vulnérabilité du protocole RDP dans les systèmes Windows | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-212 | Multiples vulnérabilités du client VPN 5000 de Cisco | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-211 | Vulnérabilité du Help Center de Windows XP | 2002-09-18T00:00:00.000000 | 2002-09-18T00:00:00.000000 |
| certa-2002-avi-210 | Vulnérabilité de <TT>aspppls</TT> sous solaris 8 | 2002-09-17T00:00:00.000000 | 2002-09-17T00:00:00.000000 |