Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18201 | 5.5 (v3.1) | Keycloak-services: keycloak-services: generic identity… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-29T08:34:47.979Z | 2026-08-31T15:01:20.712Z |
| cve-2026-16108 | 4.3 (v3.1) | Keycloak-services: keycloak-services: realm default-gr… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-17T16:43:14.900Z | 2026-08-31T15:01:16.080Z |
| cve-2026-16100 | 6.5 (v3.1) | Keycloak-services: keycloak-services: unbounded metric… |
Red Hat |
Red Hat build of Keycloak 26.6 |
2026-08-05T13:50:57.057Z | 2026-08-31T15:01:16.067Z |
| cve-2026-16104 | 4.3 (v3.1) | Keycloak-services: keycloak-services: authenticator co… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-17T16:43:54.168Z | 2026-08-31T15:01:15.327Z |
| cve-2026-16093 | 5.4 (v3.1) | Keycloak-services: keycloak-services: required signed-… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-17T16:42:52.407Z | 2026-08-31T15:01:13.408Z |
| cve-2026-16089 | 5.4 (v3.1) | Keycloak-services: keycloak-services: authorization co… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-17T14:15:43.476Z | 2026-08-31T15:01:09.229Z |
| cve-2026-81643 | 2.3 (v4.0) | Broken access control in AshGraphql subscription batch… |
ash-project |
ash_graphql |
2026-08-30T18:20:35.564Z | 2026-08-31T15:01:05.884Z |
| cve-2026-82630 | PowerJob Transport Endpoint TestController.java MuConn… |
n/a |
PowerJob |
2026-08-31T07:30:09.118Z | 2026-08-31T15:00:40.791Z | |
| cve-2026-77454 | 5.9 (v4.0) | exists/2 predicate silently dropped on limited relatio… |
ash-project |
ash_sql |
2026-08-30T12:01:23.862Z | 2026-08-31T15:00:02.165Z |
| cve-2026-81316 | 2.1 (v4.0) | Same-named aggregates with differing filters are confl… |
ash-project |
ash_sql |
2026-08-30T11:59:41.945Z | 2026-08-31T14:59:22.223Z |
| cve-2026-82667 | yaojingang GEOFlow GenericHttpEndpointResolver.php Dis… |
yaojingang |
GEOFlow |
2026-08-31T08:45:13.124Z | 2026-08-31T14:59:12.574Z | |
| cve-2026-78691 | 2.1 (v4.0) | Unescaped backslash allows LIKE wildcard injection in … |
ash-project |
ash_sql |
2026-08-30T11:55:20.331Z | 2026-08-31T14:57:41.423Z |
| cve-2026-80227 | 2.1 (v4.0) | SQL string_trim removes only spaces, diverging from in… |
ash-project |
ash_sql |
2026-08-30T11:53:35.548Z | 2026-08-31T14:56:51.710Z |
| cve-2026-78228 | 5.9 (v4.0) | Unbounded handle_error recursion enables denial of ser… |
ash-project |
ash_oban |
2026-08-30T11:51:49.621Z | 2026-08-31T14:56:07.859Z |
| cve-2026-78038 | 5.9 (v4.0) | Job argument injection via :args overrides primary_key… |
ash-project |
ash_oban |
2026-08-30T11:50:21.136Z | 2026-08-31T14:55:17.264Z |
| cve-2026-51692 | N/A | Incorrect access control in the setWiFiGuestCfg f… |
n/a |
n/a |
2026-08-31T00:00:00.000Z | 2026-08-31T14:54:55.303Z |
| cve-2026-77846 | 2.1 (v4.0) | JSON path injection via unescaped get_path segments in… |
ash-project |
ash_sqlite |
2026-08-30T02:52:12.562Z | 2026-08-31T14:54:22.261Z |
| cve-2026-51691 | N/A | Incorrect access control in the setUploadSetting … |
n/a |
n/a |
2026-08-31T00:00:00.000Z | 2026-08-31T14:54:03.926Z |
| cve-2026-71310 | rclone: Unbounded HTTP CONNECT Response Headers Can Ex… |
rclone |
rclone |
2026-08-05T20:17:14.858Z | 2026-08-31T14:53:51.616Z | |
| cve-2026-75759 | 7.6 (v4.0) | Encrypted ID token or JARM response accepted without a… |
erlef |
oidcc |
2026-08-30T01:12:43.435Z | 2026-08-31T14:53:35.902Z |
| cve-2026-63083 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-31T14:52:57.799Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-08-31T14:52:57.799Z | |
| cve-2026-77831 | 2.1 (v4.0) | Algorithmic-complexity denial of service in AshPaperTr… |
ash-project |
ash_paper_trail |
2026-08-30T00:18:38.078Z | 2026-08-31T14:52:45.550Z |
| cve-2026-77970 | 5.9 (v4.0) | Sensitive fields nested in embedded values are not red… |
ash-project |
ash_paper_trail |
2026-08-30T00:18:22.853Z | 2026-08-31T14:51:59.120Z |
| cve-2026-75757 | 8.3 (v4.0) | AshAdmin cookie reader matches names by substring, ena… |
ash-project |
ash_admin |
2026-08-31T02:20:17.985Z | 2026-08-31T14:50:59.043Z |
| cve-2026-82673 | 8.3 (v4.0) | Path traversal in AshAdmin file uploads via unsanitize… |
ash-project |
ash_admin |
2026-08-31T02:33:10.967Z | 2026-08-31T14:50:14.728Z |
| cve-2026-38468 | N/A | A SQL injection vulnerability in the country-code… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:50:00.408Z |
| cve-2026-82727 | 2.3 (v4.0) | AshPhoenix Form.Auto leaks submitted params in an unkn… |
ash-project |
ash_phoenix |
2026-08-31T03:03:58.982Z | 2026-08-31T14:49:25.154Z |
| cve-2026-16443 | 7.4 (v3.1) | Keycloak-services: keycloak-services: saml broker meta… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-08-05T13:44:09.557Z | 2026-08-31T14:47:51.247Z |
| cve-2026-16442 | 7.4 (v3.1) | Keycloak-services: keycloak-services: saml idp-initiat… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-08-05T15:00:39.236Z | 2026-08-31T14:47:48.991Z |
| cve-2026-82726 | 6.3 (v4.0) | AshPhoenix get_subdomain maps a crafted or differently… |
ash-project |
ash_phoenix |
2026-08-31T03:05:38.612Z | 2026-08-31T14:47:35.274Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-000021 | MiniBBS22 from CGI RESCUE allows unauthorized email transmission | 2009-04-28T16:35+09:00 | 2009-04-28T16:35+09:00 |
| jvndb-2009-000019 | Cross-site scripting vulnerability in apricot.php from LovPop.net | 2009-04-17T14:40+09:00 | 2009-04-17T14:40+09:00 |
| jvndb-2009-001135 | Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template | 2009-04-17T14:13+09:00 | 2009-04-17T14:13+09:00 |
| jvndb-2009-000017 | XOOPS Cube Legacy cross-site scripting vulnerability | 2009-04-07T17:06+09:00 | 2009-04-07T17:06+09:00 |
| jvndb-2009-000016 | Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges | 2009-03-31T16:08+09:00 | 2009-03-31T16:08+09:00 |
| jvndb-2008-001647 | Jasmine WebLink Template Multiple Vulnerabilities | 2008-09-18T11:48+09:00 | 2009-03-30T14:29+09:00 |
| jvndb-2009-001087 | Fujitsu Enhanced Support Facility HRM-S Hardware/Software Information Disclosure Vulnerability | 2009-03-24T17:35+09:00 | 2009-03-24T17:35+09:00 |
| jvndb-2009-000015 | Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x) | 2009-03-16T17:07+09:00 | 2009-03-16T17:07+09:00 |
| jvndb-2009-000014 | MP Form Mail CGI vulnerability allows third party to gain administrative privileges | 2009-03-13T16:25+09:00 | 2009-03-13T16:25+09:00 |
| jvndb-2009-000012 | Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras | 2009-03-09T16:27+09:00 | 2009-03-09T16:27+09:00 |
| jvndb-2009-000013 | PEAK XOOPS piCal cross-site scripting vulnerability | 2009-03-03T16:37+09:00 | 2009-03-03T16:37+09:00 |
| jvndb-2009-001033 | Multiple Vulnerabilities in uCosminexus Portal Framework | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-001032 | JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability | 2009-03-02T17:38+09:00 | 2009-03-02T17:38+09:00 |
| jvndb-2009-000010 | Apache Tomcat information disclosure vulnerability | 2009-02-26T15:28+09:00 | 2009-02-26T15:28+09:00 |
| jvndb-2009-001025 | Vulnerability allowing Viewing/Updating of Other Users' Information in Groupmax World Wide Web Desktop Version 6 | 2009-02-26T11:55+09:00 | 2009-02-26T11:55+09:00 |
| jvndb-2009-000009 | FAST ESP cross-site scripting vulnerability | 2009-02-17T11:55+09:00 | 2009-02-17T11:55+09:00 |
| jvndb-2009-000011 | Becky! Internet Mail buffer overflow vulnerability | 2009-02-12T17:28+09:00 | 2009-02-12T17:28+09:00 |
| jvndb-2007-000817 | Flash Player vulnerable in handling cross-domain policy files | 2008-05-21T00:00+09:00 | 2009-02-10T11:32+09:00 |
| jvndb-2009-000008 | Fulltext search CGI vulnerability allows third party to gain administrative privileges | 2009-01-28T15:25+09:00 | 2009-01-28T15:25+09:00 |
| jvndb-2009-000007 | Oracle WebLogic Server vulnerable to cross-site scripting | 2009-01-20T16:45+09:00 | 2009-01-20T16:45+09:00 |
| jvndb-2009-000006 | Cisco IOS cross-site scripting vulnerability | 2009-01-15T19:14+09:00 | 2009-01-15T19:14+09:00 |
| jvndb-2009-000005 | MODx vulnerable to SQL injection | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000004 | MODx cross-site request forgery vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000003 | MODx cross-site scripting vulnerability | 2009-01-09T15:54+09:00 | 2009-01-09T15:54+09:00 |
| jvndb-2009-000001 | MyNETS cross-site scripting vulnerability | 2009-01-08T11:34+09:00 | 2009-01-08T11:34+09:00 |
| jvndb-2008-000086 | BlackJumboDog authentication bypass vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000085 | Mayaa cross-site scripting vulnerability | 2008-12-25T16:22+09:00 | 2008-12-25T16:22+09:00 |
| jvndb-2008-000083 | Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe | 2008-12-17T15:30+09:00 | 2008-12-17T15:30+09:00 |
| jvndb-2008-001911 | Groupmax Workflow - Development Kit for Active Server Pages Cross-Site Scripting Vulnerability | 2008-12-05T11:35+09:00 | 2008-12-05T11:35+09:00 |
| jvndb-2008-001910 | Groupmax Collaboration - Schedule Mis-scheduling Problem: Unintended Members Included When Reservations are Made by Secretary | 2008-12-05T11:34+09:00 | 2008-12-05T11:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0451 | Vulnérabilité dans Mitel MiVoice MX-ONE | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0450 | Multiples vulnérabilités dans Nginx | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0449 | Vulnérabilité dans les produits Check Point | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0448 | Multiples vulnérabilités dans Nagios XI | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0447 | Vulnérabilité dans SPIP | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0438 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0437 | Vulnérabilité dans Google Chrome | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0436 | Multiples vulnérabilités dans les produits Mitel | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0435 | Multiples vulnérabilités dans les produits Cisco | 2024-05-23T00:00:00.000000 | 2024-05-23T00:00:00.000000 |
| certfr-2024-avi-0434 | Multiples vulnérabilités dans les produits Ivanti | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0433 | Multiples vulnérabilités dans GitLab | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0432 | Multiples vulnérabilités dans les produits Atlassian | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0431 | Multiples vulnérabilités dans les produits Veeam | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0430 | Multiples vulnérabilités dans Google Chrome | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0429 | Vulnérabilité dans les produits SolarWinds | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0428 | Multiples vulnérabilités dans les produits Qnap | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0427 | Multiples vulnérabilités dans les produits VMware | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0425 | Vulnérabilité dans Ruby on Rails | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0424 | Vulnérabilité dans Asterisk | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0423 | Multiples vulnérabilités dans les produits NetApp | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0422 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0421 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |