Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111459 | 7.6 (v4.0) | Unauthenticated server-supplied OpenVPN configuration … |
Moxa |
Moxa Remote Connect Suite (MRC Client) |
2026-10-27T07:08:17.598Z | 2026-11-04T15:00:47.536Z |
| cve-2026-106174 | 6.7 (v3.1) | A improper locking vulnerability in Fortinet Fort… |
Fortinet |
FortiOS |
2026-10-27T06:54:54.066Z | 2026-10-27T10:13:38.390Z |
| cve-2026-105946 | 5.3 (v4.0) | Out-of-bounds read vulnerability in NTLM authenticatio… |
qt |
qt |
2026-10-27T06:45:36.400Z | 2026-11-04T15:00:53.736Z |
| cve-2026-103325 | TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthen… |
Unknown |
TiendaCrypto para WooCommerce |
2026-10-27T06:42:43.940Z | 2026-10-28T17:36:08.352Z | |
| cve-2026-103359 | PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthent… |
Unknown |
PayDunya WooCommerce Payment Gateway |
2026-10-27T06:42:43.340Z | 2026-10-28T17:35:39.229Z | |
| cve-2026-110910 | 3.7 (v3.1) 6.3 (v4.0) | qs.stringify with allowEmptyArrays does not encode the… |
ljharb |
qs |
2026-10-27T06:42:42.365Z | 2026-11-04T15:01:07.679Z |
| cve-2026-75891 | Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Objec… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-27T06:40:42.359Z | 2026-10-29T01:52:00.797Z | |
| cve-2026-103312 | N/A | Payment Integration Wompi <= 4.0.1 - Unauthenticated P… |
Unknown |
Payment Integration Wompi |
2026-10-27T06:00:20.103Z | 2026-10-28T17:58:09.938Z |
| cve-2026-103332 | N/A | Payex Payment Gateway for WooCommerce <= 1.2.10 - Unau… |
Unknown |
Payex Payment Gateway for Woocommerce |
2026-10-27T06:00:19.925Z | 2026-10-28T17:58:10.127Z |
| cve-2026-117472 | 4.3 (v3.1) | URL prefix handling permits API key read-scope bypass … |
esaqa GmbH |
Psono |
2026-10-27T05:56:16.775Z | 2026-11-04T15:01:13.544Z |
| cve-2026-117471 | 5.4 (v3.1) | User-controlled Duo host permits authenticated SSRF in… |
esaqa GmbH |
Psono |
2026-10-27T05:55:07.068Z | 2026-11-04T15:01:19.922Z |
| cve-2026-117470 | 6.5 (v3.1) | WebAuthn assertion replay permits second-factor bypass… |
esaqa GmbH |
Psono |
2026-10-27T05:53:41.709Z | 2026-11-04T15:01:28.290Z |
| cve-2026-117469 | 5.4 (v3.1) | File-transfer type confusion permits unauthorized repo… |
esaqa GmbH |
Psono |
2026-10-27T05:52:24.709Z | 2026-11-04T15:01:37.599Z |
| cve-2026-117468 | 6.5 (v3.1) | Device-code claim permits restricted token escalation … |
esaqa GmbH |
Psono |
2026-10-27T05:41:30.742Z | 2026-11-04T15:01:45.819Z |
| cve-2026-111820 | Analytics Insights <= 6.3.12 - Unauthenticated Stored … |
deconf |
Analytics Insights – Google Analytics Dashboard for WordPress |
2026-10-27T05:30:30.909Z | 2026-10-29T01:52:00.940Z | |
| cve-2026-88781 | 6.8 (v4.0) | Untrusted Pointer Dereference in ASUS certain mot… |
ASUS |
motherboards firmware |
2026-10-27T02:01:00.588Z | 2026-11-03T20:23:44.203Z |
| cve-2026-116640 | Saruf-Ratul HR-Payroll-Management-System chat.php cros… |
Saruf-Ratul |
HR-Payroll-Management-System |
2026-10-27T01:30:24.793Z | 2026-10-27T14:13:53.511Z | |
| cve-2026-116639 | MD-MAFUJUL-HASAN Online-Payroll-Management-System chat… |
MD-MAFUJUL-HASAN |
Online-Payroll-Management-System |
2026-10-27T01:15:24.435Z | 2026-11-02T19:00:23.984Z | |
| cve-2026-116839 | 7.1 (v3.1) | A malicious actor who lures an authenticated user… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:51:23.745Z | 2026-10-29T01:52:06.475Z |
| cve-2026-116838 | 8.8 (v3.1) | A malicious actor who lures an authenticated user… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:48:17.932Z | 2026-11-03T20:24:31.073Z |
| cve-2026-116623 | code-projects Simple Content Management System Admin w… |
code-projects |
Simple Content Management System |
2026-10-27T00:45:20.926Z | 2026-10-31T02:29:02.083Z | |
| cve-2026-116837 | 8.8 (v3.1) | A malicious actor with access to the adjacent net… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:44:48.129Z | 2026-11-03T20:25:24.601Z |
| cve-2026-116844 | 6.3 (v4.0) 4.8 (v3.1) | Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES … |
fclairamb |
ftpserverlib |
2026-10-27T00:34:02.373Z | 2026-10-29T10:52:21.022Z |
| cve-2026-116843 | 8.7 (v4.0) 8.8 (v3.1) | Mistral Vibe before 3.0.3 RCE via Git Filter Drivers i… |
mistralai |
mistral-vibe |
2026-10-27T00:34:01.754Z | 2026-11-02T18:57:45.553Z |
| cve-2026-116842 | 6.9 (v4.0) 6.1 (v3.1) | DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow v… |
diasurgical |
DevilutionX |
2026-10-27T00:34:01.167Z | 2026-10-31T02:27:46.916Z |
| cve-2026-116841 | 6.8 (v4.0) 5.5 (v3.1) | DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via… |
diasurgical |
DevilutionX |
2026-10-27T00:34:00.513Z | 2026-10-27T00:34:00.513Z |
| cve-2026-116840 | 6.9 (v4.0) 6.1 (v3.1) | llama.cpp b5854 before b11275 Integer Overflow in gguf… |
ggml-org |
llama.cpp |
2026-10-27T00:33:59.834Z | 2026-10-27T14:14:10.931Z |
| cve-2026-116829 | 6.9 (v4.0) 6.6 (v3.1) | llama.cpp b10398 before b11301 Integer Overflow in ggu… |
ggml-org |
llama.cpp |
2026-10-27T00:33:59.223Z | 2026-11-02T18:56:09.937Z |
| cve-2026-116816 | 8.5 (v4.0) 7.8 (v3.1) | llama.cpp b5899 before b10261 Heap Out-of-Bounds Write… |
ggml-org |
llama.cpp |
2026-10-27T00:33:58.581Z | 2026-10-31T02:24:46.005Z |
| cve-2025-71439 | 6.8 (v4.0) 5.5 (v3.1) | llama.cpp before b5649 Heap Out-of-Bounds Read via lla… |
ggml-org |
llama.cpp |
2026-10-27T00:33:57.956Z | 2026-10-27T00:33:57.956Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0452 | Multiples vulnérabilités dans les produits Schneider Electric | 2023-06-13T00:00:00.000000 | 2023-06-13T00:00:00.000000 |
| certfr-2023-avi-0451 | Multiples vulnérabilités dans les produits Fortinet | 2023-06-13T00:00:00.000000 | 2023-06-13T00:00:00.000000 |
| certfr-2023-avi-0450 | Multiples vulnérabilités dans Mozilla Thunderbird | 2023-06-12T00:00:00.000000 | 2023-06-12T00:00:00.000000 |
| certfr-2023-avi-0449 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0448 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0447 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0446 | Multiples vulnérabilités dans les produits IBM | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0445 | Multiples vulnérabilités dans le noyau Linux de DebianLTS | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0444 | Multiples vulnérabilités dans les produits IBM | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0443 | Multiples vulnérabilités dans les produits Cisco | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0442 | Vulnérabilité dans SPIP | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0441 | Multiples vulnérabilités dans VMware Aria Operations for Networks | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0440 | Vulnérabilité dans Microsoft Edge | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0439 | Multiples vulnérabilités dans Trend Micro Apex One | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0438 | Multiples vulnérabilités dans Mozilla Firefox et Firefox ESR | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0437 | Multiples vulnérabilités dans Postfix | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0436 | Multiples vulnérabilités dans GitLab | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0435 | Vulnérabilité dans Google Chrome | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0434 | Vulnérabilité dans SolarWinds Serv-U | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0433 | Vulnérabilité dans Moxa CN2600 Series | 2023-06-05T00:00:00.000000 | 2023-06-05T00:00:00.000000 |
| certfr-2023-avi-0432 | Multiples vulnérabilités dans Microsoft Edge | 2023-06-05T00:00:00.000000 | 2023-06-05T00:00:00.000000 |
| certfr-2023-avi-0431 | Vulnérabilité dans le noyau Linux de RedHat | 2023-06-02T00:00:00.000000 | 2023-06-02T00:00:00.000000 |
| certfr-2023-avi-0430 | Multiples vulnérabilités dans Stormshield Network Security | 2023-06-02T00:00:00.000000 | 2023-06-02T00:00:00.000000 |
| certfr-2023-avi-0429 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-02T00:00:00.000000 | 2023-06-02T00:00:00.000000 |
| certfr-2023-avi-0428 | Multiples vulnérabilités dans les produits Splunk | 2023-06-02T00:00:00.000000 | 2023-06-02T00:00:00.000000 |
| certfr-2023-avi-0427 | Multiples vulnérabilités dans les produits IBM | 2023-06-01T00:00:00.000000 | 2023-06-01T00:00:00.000000 |
| certfr-2023-avi-0426 | Vulnérabilité dans SPIP | 2023-06-01T00:00:00.000000 | 2023-06-01T00:00:00.000000 |
| certfr-2023-avi-0425 | Vulnérabilité dans OpenSSL | 2023-05-31T00:00:00.000000 | 2023-05-31T00:00:00.000000 |
| certfr-2023-avi-0424 | Vulnérabilité dans les produits VMware | 2023-05-31T00:00:00.000000 | 2023-05-31T00:00:00.000000 |
| certfr-2023-avi-0423 | Multiples vulnérabilités dans Joomla! | 2023-05-31T00:00:00.000000 | 2023-05-31T00:00:00.000000 |