Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115910 | Python Social Auth: OpenID Connect nonce is not bound … |
python-social-auth |
social-core |
2026-10-26T16:44:34.337Z | 2026-10-31T01:34:08.259Z | |
| cve-2026-114710 | 6.5 (v3.1) | WordPress Gallery PhotoBlocks plugin <= 1.3.7 - Cross … |
WP Chill |
Gallery PhotoBlocks |
2026-10-26T16:43:59.208Z | 2026-10-26T17:37:09.711Z |
| cve-2026-115597 | 5.4 (v3.1) | WordPress LearnPress plugin <= 4.4.11 - Broken Access … |
ThimPress |
LearnPress |
2026-10-26T16:43:22.281Z | 2026-10-26T17:37:09.885Z |
| cve-2026-116388 | 5.3 (v3.1) | WordPress Amelia plugin <= 2.4.10 - Broken Access Cont… |
TMS |
Amelia |
2026-10-26T16:42:54.795Z | 2026-10-26T17:37:10.026Z |
| cve-2026-116396 | 6.5 (v3.1) | WordPress Amelia plugin <= 2.4.12 - Cross Site Scripti… |
TMS |
Amelia |
2026-10-26T16:39:18.840Z | 2026-10-26T17:37:10.212Z |
| cve-2026-115418 | 7.3 (v3.1) 7 (v4.0) | SQL injection in the database-query custom resource ha… |
AWS |
aws-cdk/aws-redshift-alpha |
2026-10-26T16:39:08.909Z | 2026-11-02T21:23:48.736Z |
| cve-2026-115909 | zip: Unbounded Symlink-Target Handling Can Abort Or Ex… |
zip-rs |
zip2 |
2026-10-26T16:39:00.037Z | 2026-10-26T19:48:35.352Z | |
| cve-2026-116403 | 5.9 (v3.1) | WordPress Easy Digital Downloads plugin <= 3.7.1 - Rac… |
Awesomemotive |
Easy Digital Downloads |
2026-10-26T16:37:59.242Z | 2026-10-26T17:37:10.367Z |
| cve-2026-115908 | zip: Arbitrary file write outside the extraction direc… |
zip-rs |
zip2 |
2026-10-26T16:34:29.328Z | 2026-10-26T19:36:11.803Z | |
| cve-2026-115907 | zip: legacy Shrink/Reduce/Implode decoder: denial of s… |
zip-rs |
zip2 |
2026-10-26T16:32:15.373Z | 2026-10-30T14:13:49.386Z | |
| cve-2026-115906 | zip: AES Entry HMAC Authentication Bypass on Premature EOF |
zip-rs |
zip2 |
2026-10-26T16:30:30.954Z | 2026-10-31T01:32:55.292Z | |
| cve-2026-116371 | Akuvox Akubela HyPanel PS51 login improper authentication |
Akuvox |
Akubela HyPanel PS51 |
2026-10-26T16:30:18.290Z | 2026-10-27T13:29:15.385Z | |
| cve-2026-115905 | zip: Critical Parser Differential & Security Control B… |
zip-rs |
zip2 |
2026-10-26T16:24:44.760Z | 2026-11-02T17:47:27.682Z | |
| cve-2026-71456 | 8.5 (v4.0) | Use of hard-coded cryptographic key vulnerability… |
Johnson Controls |
Kantech Entrapass |
2026-10-26T16:20:31.605Z | 2026-11-02T19:43:05.947Z |
| cve-2026-71455 | 5.3 (v4.0) | Cleartext storage of sensitive information in mem… |
Johnson Controls |
Kantech Entrapass |
2026-10-26T16:17:47.898Z | 2026-11-02T19:43:06.089Z |
| cve-2026-116596 | N/A | CVE-2026-116596 |
Pyrus |
Pyrus Sync |
2026-10-26T16:17:29.178Z | 2026-10-26T16:17:29.178Z |
| cve-2026-116370 | 2K Games Sid Meier's Civilization VI Lua sandbox loads… |
2K Games |
Sid Meier's Civilization VI |
2026-10-26T16:15:11.957Z | 2026-11-02T17:45:24.361Z | |
| cve-2026-82390 | 3.7 (v3.1) | Cross-session AES key confusion in the Espressif ESP32… |
zephyrproject |
zephyr |
2026-10-26T16:08:54.724Z | 2026-11-04T05:01:33.860Z |
| cve-2026-82389 | 6.5 (v3.1) | Bluetooth Classic HFP AG wipes an object still linked … |
zephyrproject |
zephyr |
2026-10-26T16:08:53.604Z | 2026-10-26T17:37:10.685Z |
| cve-2026-82388 | 5.3 (v3.1) | Use of a released HFP HF object after a failed RFCOMM … |
zephyrproject |
zephyr |
2026-10-26T16:08:52.433Z | 2026-10-26T17:37:10.831Z |
| cve-2026-19742 | 3.7 (v3.1) | IPv6 stable and temporary interface identifiers derive… |
zephyrproject |
zephyr |
2026-10-26T16:08:51.255Z | 2026-11-04T05:01:32.376Z |
| cve-2026-81038 | 7.1 (v3.1) | Bluetooth OTS server discloses uninitialized stack mem… |
zephyrproject |
zephyr |
2026-10-26T16:08:50.091Z | 2026-11-04T05:01:29.545Z |
| cve-2026-81039 | 4.3 (v3.1) | Bluetooth Host connection reservation leak when multip… |
zephyrproject |
zephyr |
2026-10-26T16:08:48.940Z | 2026-11-04T05:01:30.948Z |
| cve-2026-116369 | Sunwood-ai-labs github-kanban-mcp-server issue-handler… |
Sunwood-ai-labs |
github-kanban-mcp-server |
2026-10-26T16:00:14.112Z | 2026-10-31T01:30:30.310Z | |
| cve-2026-116394 | 5.3 (v3.1) | WordPress WpEvently plugin <= 5.7.9 - Content Injectio… |
Magepeople inc. |
WpEvently |
2026-10-26T16:00:08.893Z | 2026-10-26T17:37:11.529Z |
| cve-2026-93846 | 3.8 (v3.1) | Team admin can escalate a team member's permissions vi… |
Mattermost |
Mattermost |
2026-10-26T15:58:14.443Z | 2026-11-02T19:43:06.229Z |
| cve-2026-112344 | 7.6 (v4.0) 6.8 (v3.1) | Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape |
Syncplify, Inc. |
Syncplify Server! |
2026-10-26T15:56:29.273Z | 2026-11-02T17:59:13.653Z |
| cve-2026-112343 | 8.6 (v4.0) 8.1 (v3.1) | Syncplify Server! < 8.8.0 Permission Override Bypass v… |
Syncplify, Inc. |
Syncplify Server! |
2026-10-26T15:54:12.544Z | 2026-10-31T01:29:13.634Z |
| cve-2026-115680 | N/A | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHC… |
Keil |
MDK-Middleware |
2026-10-26T15:49:30.643Z | 2026-10-26T16:25:13.217Z |
| cve-2026-115679 | N/A | Arm Keil MDK-Middleware 8.3.0 may allow out-of-bo… |
Keil |
MDK-Middleware |
2026-10-26T15:46:01.084Z | 2026-10-26T16:18:15.567Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-1037 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-17T00:00:00.000000 | 2022-11-17T00:00:00.000000 |
| certfr-2022-avi-1036 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-11-16T00:00:00.000000 | 2022-11-16T00:00:00.000000 |
| certfr-2022-avi-1035 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-16T00:00:00.000000 | 2022-11-16T00:00:00.000000 |
| certfr-2022-avi-1034 | Vulnérabilité dans Samba | 2022-11-16T00:00:00.000000 | 2022-11-16T00:00:00.000000 |
| certfr-2022-avi-1033 | Multiples vulnérabilités dans les produits Mozilla | 2022-11-16T00:00:00.000000 | 2022-11-16T00:00:00.000000 |
| certfr-2022-avi-1032 | Vulnérabilité dans Moxa NE-4100T | 2022-11-15T00:00:00.000000 | 2022-11-15T00:00:00.000000 |
| certfr-2022-avi-1031 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-14T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1030 | Multiples vulnérabilités dans Microsoft Edge | 2022-11-14T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1029 | Multiples vulnérabilités dans Moxa VPort | 2022-11-14T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1028 | Multiples vulnérabilités dans les produits Belden | 2022-11-14T00:00:00.000000 | 2022-11-16T00:00:00.000000 |
| certfr-2022-avi-1027 | Multiples vulnérabilités dans IBM Db2 | 2022-11-14T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1026 | Vulnérabilité dans Nextcloud Desktop | 2022-11-14T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1025 | Multiples vulnérabilités dans IBM QRadar | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1024 | Multiples vulnérabilités dans les produits Apple | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1023 | Vulnérabilité dans Palo Alto Networks Cortex XSOAR | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1022 | Multiples vulnérabilités dans les produits Cisco | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1021 | Multiples vulnérabilités dans TrendMicro Apex One | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1020 | Multiples vulnérabilités dans les produits SAP | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1019 | Multiples vulnérabilités dans Tenable Nessus | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1018 | Vulnérabilité dans Xen | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1017 | Vulnérabilité dans Python 3 | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1016 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-10T00:00:00.000000 | 2022-11-10T00:00:00.000000 |
| certfr-2022-avi-1015 | Multiples vulnérabilités dans les produits Microsoft | 2022-11-09T00:00:00.000000 | 2022-11-14T00:00:00.000000 |
| certfr-2022-avi-1014 | Multiples vulnérabilités dans Microsoft Azure | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1013 | Vulnérabilité dans Microsoft .Net | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1012 | Multiples vulnérabilités dans Microsoft Windows | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1011 | Multiples vulnérabilités dans Microsoft Office | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1009 | Multiples vulnérabilités dans les produits Intel | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1008 | Multiples vulnérabilités dans VMware Workspace ONE Assist | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1007 | Multiples vulnérabilités dans Google Chrome | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |