Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-57187 | Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SD… |
asterisk |
asterisk |
2026-10-26T19:31:52.937Z | 2026-11-02T18:07:20.728Z | |
| cve-2026-116478 | a2aproject a2a-go Push Notification agentexec.go Creat… |
a2aproject |
a2a-go |
2026-10-26T19:30:19.254Z | 2026-11-02T18:04:28.991Z | |
| cve-2026-57196 | Asterisk: Reflected XSS in Phone Provisioning HTTP Err… |
asterisk |
asterisk |
2026-10-26T19:27:35.360Z | 2026-10-26T20:13:49.872Z | |
| cve-2026-115924 | Rembg: Unauthenticated SAM model injection permits loc… |
danielgatis |
rembg |
2026-10-26T19:22:52.720Z | 2026-10-31T01:44:42.402Z | |
| cve-2026-116477 | a2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2… |
a2aproject |
a2a-dotnet |
2026-10-26T19:15:22.114Z | 2026-10-31T01:43:26.819Z | |
| cve-2014-125135 | OctoPrint Flask Secret Key hard-coded key |
n/a |
OctoPrint |
2026-10-26T19:00:19.803Z | 2026-10-26T19:34:15.433Z | |
| cve-2026-116476 | a2aproject a2a-dotnet TaskProjection TaskProjection.Ap… |
a2aproject |
a2a-dotnet |
2026-10-26T18:45:20.493Z | 2026-11-02T18:03:12.392Z | |
| cve-2026-110720 | 9.9 (v3.1) | Consul-k8s vulnerable to a cross-namespace authorizati… |
HashiCorp |
Tooling |
2026-10-26T18:38:14.209Z | 2026-10-26T19:38:28.240Z |
| cve-2026-116631 | N/A | External protocol handler (tel:) address bar spoof |
Mozilla |
Firefox for iOS |
2026-10-26T18:32:36.715Z | 2026-10-26T18:57:54.011Z |
| cve-2026-116632 | N/A | Facetime protocol handler enabled spoofing |
Mozilla |
Firefox for iOS |
2026-10-26T18:32:35.728Z | 2026-10-26T18:56:21.288Z |
| cve-2026-116471 | BKWLD Decoy Authorization Policy Policy.php privileges… |
BKWLD |
Decoy |
2026-10-26T18:30:15.152Z | 2026-10-31T01:42:29.614Z | |
| cve-2026-116467 | ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp … |
ggml-org |
llama.cpp |
2026-10-26T18:15:14.725Z | 2026-10-26T19:34:25.208Z | |
| cve-2026-115804 | 6.4 (v3.1) | Consul vulnerable to an authorization bypass in health… |
HashiCorp |
Consul |
2026-10-26T18:09:52.286Z | 2026-10-26T19:38:28.416Z |
| cve-2026-116634 | 8.2 (v4.0) 5.9 (v3.1) | OmniRoute 3.8.50 before 3.8.52 Missing Authentication … |
cheaper-inference |
OmniRoute |
2026-10-26T18:09:41.236Z | 2026-10-26T19:34:36.562Z |
| cve-2026-50096 | 6.1 (v3.1) | BUG-000187164 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:08:38.927Z | 2026-10-26T19:38:28.569Z |
| cve-2026-50095 | 6.1 (v3.1) | BUG-000187165 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:08:17.080Z | 2026-10-26T19:38:28.708Z |
| cve-2026-33522 | 5.3 (v3.1) | BUG-000182936 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:07:42.491Z | 2026-10-26T19:38:28.853Z |
| cve-2026-33521 | 7.5 (v3.1) | BUG-000186514 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:07:20.638Z | 2026-10-26T19:38:29.004Z |
| cve-2026-33520 | 6.1 (v3.1) | BUG-000185167 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:06:47.087Z | 2026-10-26T19:38:29.146Z |
| cve-2026-10757 | 9.8 (v3.1) | BUG-000187511 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:05:59.365Z | 2026-10-29T12:15:56.185Z |
| cve-2026-105626 | 7.5 (v3.1) | Consul vulnerable to a denial of service in HTTP APIs |
HashiCorp |
Consul |
2026-10-26T18:02:25.376Z | 2026-10-26T19:38:29.471Z |
| cve-2026-116463 | FastStone Image Viewer Box-Average Downsampler FUN_006… |
FastStone |
Image Viewer |
2026-10-26T18:00:15.404Z | 2026-11-02T18:01:40.292Z | |
| cve-2026-115923 | Backstage catalog rules can be bypassed for URL locati… |
backstage |
backstage |
2026-10-26T17:56:20.105Z | 2026-11-02T17:52:00.619Z | |
| cve-2026-105608 | 8.8 (v3.1) | Consul vulnerable to an authorization bypass in servic… |
HashiCorp |
Consul |
2026-10-26T17:52:33.021Z | 2026-10-26T19:38:29.607Z |
| cve-2026-70379 | 7.1 (v4.0) 6.5 (v3.1) | Unauthorized Access to vSolution Matrix RTSP |
WolfVision |
Cynap Pro, Cynap Core Pro |
2026-10-26T17:48:55.829Z | 2026-11-02T19:43:05.667Z |
| cve-2026-116461 | Omega Solution Restro POS sale-invoice logic error |
Omega Solution |
Restro POS |
2026-10-26T17:45:12.006Z | 2026-10-31T01:40:55.371Z | |
| cve-2026-105765 | 7.5 (v3.1) | Consul vulnerable to an authorization bypass in the ag… |
HashiCorp |
Consul |
2026-10-26T17:42:36.012Z | 2026-11-02T19:43:05.803Z |
| cve-2026-115922 | ONNX: Denial of service via unchecked expansion of pac… |
onnx |
onnx |
2026-10-26T17:31:03.716Z | 2026-10-30T17:40:32.752Z | |
| cve-2026-116408 | 6.5 (v3.1) | WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross … |
WP Chill |
Gallery PhotoBlocks |
2026-10-26T17:29:38.120Z | 2026-10-26T17:57:32.081Z |
| cve-2026-111404 | 3.7 (v3.1) | WordPress Photo Reviews for WooCommerce plugin <= 1.2.… |
VillaTheme |
Photo Reviews for WooCommerce |
2026-10-26T17:28:57.422Z | 2026-10-26T17:57:32.283Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-1097 | Multiples vulnérabilités dans Typo3 cms-core | 2022-12-14T00:00:00.000000 | 2022-12-14T00:00:00.000000 |
| certfr-2022-avi-1096 | Multiples vulnérabilités dans les produits VMware | 2022-12-14T00:00:00.000000 | 2022-12-14T00:00:00.000000 |
| certfr-2022-avi-1095 | Multiples vulnérabilités dans les produits Mozilla | 2022-12-14T00:00:00.000000 | 2022-12-14T00:00:00.000000 |
| certfr-2022-avi-1094 | Multiples vulnérabilités dans les produits Siemens | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1093 | Multiples vulnérabilités dans les produits Schneider | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1092 | Multiples vulnérabilités dans Foxit PDF Reader et Editor | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1091 | Vulnérabilité dans Citrix ADC et Gateway | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1090 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1089 | Vulnérabilité dans NetApp FAS/AFF BIOS | 2022-12-13T00:00:00.000000 | 2022-12-13T00:00:00.000000 |
| certfr-2022-avi-1088 | Multiples vulnérabilités dans Synology DSM et SRM | 2022-12-12T00:00:00.000000 | 2022-12-12T00:00:00.000000 |
| certfr-2022-avi-1087 | Multiples vulnérabilités dans Intel OpenIPC | 2022-12-12T00:00:00.000000 | 2022-12-12T00:00:00.000000 |
| certfr-2022-avi-1086 | Multiples vulnérabilités dans les produits VMware | 2022-12-09T00:00:00.000000 | 2022-12-09T00:00:00.000000 |
| certfr-2022-avi-1085 | Vulnérabilité dans le produit Cisco IP Phone | 2022-12-09T00:00:00.000000 | 2023-04-28T00:00:00.000000 |
| certfr-2022-avi-1084 | Multiples vulnérabilités dans Google Android | 2022-12-08T00:00:00.000000 | 2022-12-08T00:00:00.000000 |
| certfr-2022-avi-1083 | Multiples vulnérabilités dans Xen | 2022-12-08T00:00:00.000000 | 2023-01-23T00:00:00.000000 |
| certfr-2022-avi-1082 | Multiples vulnérabilités dans Wireshark | 2022-12-08T00:00:00.000000 | 2022-12-08T00:00:00.000000 |
| certfr-2022-avi-1081 | Multiples vulnérabilités dans les produits Fortinet | 2022-12-07T00:00:00.000000 | 2022-12-07T00:00:00.000000 |
| certfr-2022-avi-1080 | Multiples vulnérabilités dans Aruba ClearPass Policy Manager | 2022-12-07T00:00:00.000000 | 2022-12-07T00:00:00.000000 |
| certfr-2022-avi-1079 | Multiples vulnérabilités dans Microsoft Edge | 2022-12-06T00:00:00.000000 | 2022-12-06T00:00:00.000000 |
| certfr-2022-avi-1078 | Multiples vulnérabilités dans les produits Intel | 2022-12-06T00:00:00.000000 | 2022-12-06T00:00:00.000000 |
| certfr-2022-avi-1077 | Multiples vulnérabilités dans Sophos Firewall | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1076 | Vulnérabilité dans le noyau Linux de RedHat | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1074 | Vulnérabilité dans Google Chrome | 2022-12-05T00:00:00.000000 | 2022-12-05T00:00:00.000000 |
| certfr-2022-avi-1073 | Multiples vulnérabilités dans les produits NextCloud | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1072 | Multiples vulnérabilités dans TrendMicro Apex One | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1071 | Multiples vulnérabilités dans les produits Asterisk | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1070 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-12-02T00:00:00.000000 | 2022-12-02T00:00:00.000000 |
| certfr-2022-avi-1069 | Multiples vulnérabilités dans les produits IBM | 2022-12-01T00:00:00.000000 | 2022-12-01T00:00:00.000000 |
| certfr-2022-avi-1068 | Vulnérabilité dans Mozilla Thunderbird | 2022-12-01T00:00:00.000000 | 2022-12-01T00:00:00.000000 |