Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116213 | 6.9 (v4.0) 4.9 (v3.1) | Webasyst Framework through 4.4.0 Arbitrary File Read v… |
Webasyst |
Webasyst Framework |
2026-10-26T13:08:46.452Z | 2026-10-26T16:16:21.761Z |
| cve-2026-116212 | 5.1 (v4.0) 5.4 (v3.1) | Webasyst Framework through 4.4.0 Stored XSS via Photos… |
Webasyst |
Webasyst Framework |
2026-10-26T13:08:45.751Z | 2026-11-02T17:34:19.524Z |
| cve-2026-116210 | 7.1 (v4.0) 6.5 (v3.1) | Webasyst Framework through 4.4.0 Photos App CSRF via B… |
Webasyst |
Webasyst Framework |
2026-10-26T13:08:45.044Z | 2026-10-31T01:19:35.986Z |
| cve-2026-116281 | Kameleo Profile Controller t.cs ListProfiles informati… |
n/a |
Kameleo |
2026-10-26T13:00:10.760Z | 2026-11-02T17:33:00.042Z | |
| cve-2026-107157 | 2 (v4.0) | Out-of-bounds read vulnerability in QCborValue::fromCb… |
qt |
Qt |
2026-10-26T12:52:26.628Z | 2026-10-27T07:52:45.806Z |
| cve-2026-115196 | 5.4 (v3.1) | An Open Redirect vulnerability exists in the publ… |
|
|
2026-10-26T12:50:18.637Z | 2026-10-26T15:35:52.657Z |
| cve-2026-115195 | 6.5 (v3.1) | A broken access control vulnerability exists in t… |
|
|
2026-10-26T12:48:59.588Z | 2026-10-26T15:35:52.798Z |
| cve-2026-115194 | 6.5 (v3.1) | A path traversal vulnerability exists in the Maut… |
|
|
2026-10-26T12:48:01.035Z | 2026-10-26T15:35:52.938Z |
| cve-2026-115193 | 8.2 (v3.1) | A stored Cross-Site Scripting (XSS) vulnerability… |
|
|
2026-10-26T12:46:35.447Z | 2026-10-26T15:35:53.085Z |
| cve-2026-115192 | 7.1 (v3.1) | An SQL Injection vulnerability exists in the dash… |
|
|
2026-10-26T12:45:09.462Z | 2026-10-26T15:35:53.230Z |
| cve-2026-116280 | Kameleo Proxy Validation f.cs InternalController.TestP… |
n/a |
Kameleo |
2026-10-26T12:45:07.213Z | 2026-10-31T01:17:00.287Z | |
| cve-2026-115191 | 7.1 (v3.1) | A SQL injection vulnerability exists in a contact… |
|
|
2026-10-26T12:42:57.873Z | 2026-10-26T15:35:53.390Z |
| cve-2026-115190 | 8 (v3.1) | An insecure deserialization (PHP object injection… |
|
|
2026-10-26T12:41:17.370Z | 2026-10-26T15:35:53.561Z |
| cve-2026-115189 | 8.8 (v3.1) | A server-side template injection vulnerability ex… |
|
|
2026-10-26T12:39:14.432Z | 2026-10-26T15:35:53.698Z |
| cve-2026-115188 | 9.9 (v3.1) | An unrestricted file upload vulnerability exists … |
|
|
2026-10-26T12:33:54.469Z | 2026-10-26T15:35:53.849Z |
| cve-2026-116275 | AllenAI AllenNLP Registrable Configuration Machinery r… |
AllenAI |
AllenNLP |
2026-10-26T12:30:19.254Z | 2026-10-26T16:16:35.290Z | |
| cve-2026-116492 | 7.1 (v4.0) 6.5 (v3.1) | Frappe CRM before 1.89.1 Missing Authorization via Pho… |
frappe |
crm |
2026-10-26T12:21:46.284Z | 2026-11-02T17:31:48.246Z |
| cve-2026-110475 | 9.3 (v4.0) | Improper Authentication Vulnerability in CreditNirvana… |
CreditNirvana |
CreditNirvana Collections Platform (CollectionWorkz) |
2026-10-26T12:20:36.675Z | 2026-11-02T16:22:24.697Z |
| cve-2026-116274 | JIZHICMS Front-end Order OrderController.php pay impro… |
n/a |
JIZHICMS |
2026-10-26T12:15:07.762Z | 2026-11-02T17:56:06.947Z | |
| cve-2026-110474 | 8.7 (v4.0) | Hardcoded API Key Vulnerability in CreditNirvana Agent… |
CreditNirvana |
Agentic AI Call Centre |
2026-10-26T12:08:43.439Z | 2026-11-02T16:21:21.282Z |
| cve-2026-115720 | 5.3 (v4.0) 5 (v3.1) | Frappe Builder before 1.36.1 SSRF Guard Bypass via HTT… |
frappe |
builder |
2026-10-26T12:02:25.906Z | 2026-10-26T19:48:35.644Z |
| cve-2026-116263 | HaschekSolutions PictShare File Upload core.php archit… |
HaschekSolutions |
PictShare |
2026-10-26T12:00:25.689Z | 2026-10-31T01:16:00.333Z | |
| cve-2026-105947 | 6.5 (v3.1) | Arbitrary File Read in Innotim Software's Logsign SIEM |
Innotim Software, Telecommunications, and Consulting Co. Ltd. |
Logsign SIEM |
2026-10-26T11:45:42.703Z | 2026-10-26T14:35:17.947Z |
| cve-2026-116262 | libimobiledevice Web Inspector webinspector.c webinspe… |
n/a |
libimobiledevice |
2026-10-26T11:45:13.241Z | 2026-10-26T16:16:49.617Z | |
| cve-2026-115717 | 6.3 (v4.0) 7.7 (v3.1) | Frappe Builder before 1.36.1 SSRF via convert_to_webp |
frappe |
builder |
2026-10-26T11:43:59.635Z | 2026-11-02T17:31:03.894Z |
| cve-2026-115718 | 5.3 (v4.0) 4.3 (v3.1) | Frappe Builder 1.33.0 before 1.36.0 Missing Authorizat… |
frappe |
builder |
2026-10-26T11:40:00.956Z | 2026-10-26T16:17:17.612Z |
| cve-2026-96432 | 2.1 (v4.0) | Null pointer dereference vulnerability in QNetworkAcce… |
qt |
qt |
2026-10-26T11:31:20.304Z | 2026-10-26T14:35:18.098Z |
| cve-2026-116261 | libimobiledevice AFC File afc.c afc_file_open out-of-bounds |
n/a |
libimobiledevice |
2026-10-26T11:30:10.544Z | 2026-11-02T17:30:12.813Z | |
| cve-2026-94380 | 8.1 (v3.1) | Host Header Injection in HAVELSAN's Liman MYS |
HAVELSAN Inc. |
Liman MYS |
2026-10-26T11:15:45.141Z | 2026-10-26T14:35:18.248Z |
| cve-2026-116260 | libimobiledevice AFC Service afc.c service_receive dou… |
n/a |
libimobiledevice |
2026-10-26T11:15:06.596Z | 2026-10-31T01:14:47.920Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-916 | Multiples vulnérabilités dans les produits Juniper | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-915 | Vulnérabilité dans SonicWall GMS | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-914 | Multiples vulnérabilités dans Grafana | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-913 | Multiples vulnérabilités dans Mitel Connect et MiCollab | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-912 | Vulnérabilité dans Palo Alto Networks PAN-OS | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-911 | Vulnérabilité dans OpenSSL | 2022-10-13T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-910 | Multiples vulnérabilités dans les produits Microsoft | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-909 | Multiples vulnérabilités dans Microsoft Azure | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-908 | Vulnérabilité dans Microsoft .Net | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-907 | Multiples vulnérabilités dans Microsoft Windows | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-906 | Multiples vulnérabilités dans Microsoft Office | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-905 | Multiples vulnérabilités dans Citrix Hypervisor | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-904 | Multiples vulnérabilités dans les produits SAP | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-903 | Multiples vulnérabilités dans Google Chrome | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-902 | Multiples vulnérabilités dans Zimbra Collaboration | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-901 | Multiples vulnérabilités dans Xen | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-900 | Vulnérabilité dans LibreOffice | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-899 | Vulnérabilité dans VMware vRealize Operations | 2022-10-12T00:00:00.000000 | 2022-10-13T00:00:00.000000 |
| certfr-2022-avi-898 | Multiples vulnérabilités dans Aruba EdgeConnect Enterprise Orchestrator | 2022-10-12T00:00:00.000000 | 2022-10-12T00:00:00.000000 |
| certfr-2022-avi-897 | Multiples vulnérabilités dans les produits Siemens | 2022-10-11T00:00:00.000000 | 2022-10-11T00:00:00.000000 |
| certfr-2022-avi-896 | Multiples vulnérabilités dans les produits Schneider Electric | 2022-10-11T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-895 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-11T00:00:00.000000 | 2022-10-11T00:00:00.000000 |
| certfr-2022-avi-894 | Multiples vulnérabilités dans les produits Fortinet | 2022-10-11T00:00:00.000000 | 2022-10-11T00:00:00.000000 |
| certfr-2022-avi-893 | Vulnérabilité dans Apple iOS | 2022-10-11T00:00:00.000000 | 2022-10-11T00:00:00.000000 |
| certfr-2022-avi-892 | Multiples vulnérabilités dans les produits VMWare | 2022-10-10T00:00:00.000000 | 2022-10-10T00:00:00.000000 |
| certfr-2022-avi-891 | Multiples vulnérabilités dans IBM QRadar | 2022-10-10T00:00:00.000000 | 2022-10-10T00:00:00.000000 |
| certfr-2022-avi-890 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-07T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-avi-889 | Multiples vulnérabilités dans IBM Security QRadar Analyst Workflow | 2022-10-07T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-avi-888 | Vulnérabilité dans les produits F5 | 2022-10-07T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-avi-887 | Multiples vulnérabilités dans Microsoft Edge | 2022-10-07T00:00:00.000000 | 2022-10-07T00:00:00.000000 |