Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115806 | Prime Mover <= 2.2.1 - Unauthenticated PHP Object Inje… |
codexonics |
Prime Mover – Backup and Migration |
2026-10-24T04:32:10.565Z | 2026-10-29T01:52:01.233Z | |
| cve-2026-115807 | User Profile Builder – Beautiful User Registration For… |
cozmoslabs |
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor |
2026-10-24T04:32:09.994Z | 2026-10-29T01:52:01.385Z | |
| cve-2026-115929 | 7.6 (v4.0) 6.8 (v3.1) | MongoDB Compass trusts certificates issued by recovera… |
MongoDB, Inc. |
Compass |
2026-10-24T00:31:30.633Z | 2026-11-02T16:03:07.841Z |
| cve-2026-115931 | 9.9 (v3.1) | Arbitrary file read and backend crash through unrestri… |
GitroomHQ |
postiz-app |
2026-10-23T22:02:21.717Z | 2026-11-02T15:07:14.710Z |
| cve-2026-115938 | 8.7 (v4.0) 8.8 (v3.1) | Low privilege condition filter escapes Twig sandbox, r… |
craftcms |
cms |
2026-10-23T21:58:51.816Z | 2026-11-02T15:03:03.061Z |
| cve-2026-115937 | 8.7 (v4.0) 7.5 (v3.1) | Unauthenticated payment reuse allows unpaid orders to … |
craftcms |
commerce-mollie |
2026-10-23T21:50:13.188Z | 2026-11-02T15:00:00.257Z |
| cve-2026-115801 | Kakao khaiii JSON Config File Linear.cpp open out-of-bounds |
Kakao |
khaiii |
2026-10-23T21:45:20.151Z | 2026-10-29T18:20:55.523Z | |
| cve-2026-115935 | 8.7 (v4.0) 8.8 (v3.1) | Control panel only API response emulation replaces "se… |
craftcms |
cms |
2026-10-23T21:40:57.592Z | 2026-11-02T14:45:41.313Z |
| cve-2026-115897 | Serialize JavaScript: Cross-site scripting (XSS) via u… |
yahoo |
serialize-javascript |
2026-10-23T21:37:41.097Z | 2026-10-26T17:41:50.594Z | |
| cve-2026-115895 | Happy DOM: Incomplete fix for CVE-2026-33943: unsaniti… |
capricorn86 |
happy-dom |
2026-10-23T21:32:24.999Z | 2026-10-30T18:43:41.641Z | |
| cve-2026-115893 | Wasmtime: Cranelift backend on aarch64 can jump to inc… |
bytecodealliance |
wasmtime |
2026-10-23T21:29:33.917Z | 2026-10-29T18:20:01.899Z | |
| cve-2026-115892 | Wasmtime: Panic lowering a host-created component mode… |
bytecodealliance |
wasmtime |
2026-10-23T21:26:54.528Z | 2026-10-29T14:44:33.323Z | |
| cve-2026-115889 | Wasmtime: Bit-packing in Cranelift compiler causes sil… |
bytecodealliance |
wasmtime |
2026-10-23T21:23:27.669Z | 2026-10-26T17:42:15.319Z | |
| cve-2026-115887 | graphql-scalars PhoneNumber scalar is vulnerable to re… |
graphql-hive |
graphql-scalars |
2026-10-23T21:19:42.561Z | 2026-10-30T18:45:04.885Z | |
| cve-2026-115886 | MLflow: SSRF on unauthenticated MLflow servers via thi… |
mlflow |
mlflow |
2026-10-23T21:17:21.462Z | 2026-10-29T18:18:21.052Z | |
| cve-2026-115885 | LangGraph CLI prints the registry push token in `langg… |
langchain-ai |
langgraph |
2026-10-23T21:15:09.944Z | 2026-10-29T14:43:01.864Z | |
| cve-2026-115883 | LangGraph: Namespace labels containing `.` reach other… |
langchain-ai |
langgraph |
2026-10-23T21:12:34.523Z | 2026-10-26T17:42:32.027Z | |
| cve-2026-113951 | N/A | If an attacker can write to the filesystem of a c… |
Apple |
Container |
2026-10-23T20:57:20.150Z | 2026-11-02T14:42:50.614Z |
| cve-2026-75525 | OpenReception: unauthenticated ML-KEM key injection in… |
open-reception |
appointment-booking-software |
2026-10-23T20:42:21.394Z | 2026-10-30T17:38:14.992Z | |
| cve-2026-115800 | UbiquitousLearning mllm Convertor __init__.py load_mod… |
UbiquitousLearning |
mllm |
2026-10-23T20:30:23.839Z | 2026-10-26T17:42:38.515Z | |
| cve-2026-75524 | OpenReception: race condition in add-to-tunnel and cre… |
open-reception |
appointment-booking-software |
2026-10-23T20:29:52.583Z | 2026-10-29T14:33:55.695Z | |
| cve-2026-65825 | OpenReception: one tenant's throttle row disables the … |
open-reception |
appointment-booking-software |
2026-10-23T20:29:17.174Z | 2026-10-26T17:45:38.981Z | |
| cve-2026-65824 | OpenReception: invite confirmation token is replayable… |
open-reception |
appointment-booking-software |
2026-10-23T20:27:52.852Z | 2026-10-30T17:36:49.674Z | |
| cve-2026-58202 | OpenReception: Confirmation-email links built from the… |
open-reception |
appointment-booking-software |
2026-10-23T20:27:36.090Z | 2026-10-29T18:16:47.209Z | |
| cve-2026-115877 | Twisted: HTTP Request Smuggling in twisted.web via a B… |
twisted |
twisted |
2026-10-23T20:25:12.031Z | 2026-10-29T14:23:05.736Z | |
| cve-2026-83813 | Twisted: DNS Response Spoofing in twisted.names Due to… |
twisted |
twisted |
2026-10-23T20:21:54.364Z | 2026-10-29T18:15:36.711Z | |
| cve-2026-115778 | Twisted: Unauthenticated Remote Denial of Service in t… |
twisted |
twisted |
2026-10-23T20:20:34.591Z | 2026-10-23T20:55:34.866Z | |
| cve-2026-115776 | Twisted: Unauthenticated Remote Denial of Service in t… |
twisted |
twisted |
2026-10-23T20:18:38.342Z | 2026-10-30T14:27:25.835Z | |
| cve-2026-115775 | Twisted: Unauthenticated Remote Denial of Service in t… |
twisted |
twisted |
2026-10-23T20:16:29.913Z | 2026-10-29T18:14:18.997Z | |
| cve-2026-115774 | Twisted: Denial of Service in the Twisted IMAP4 Server… |
twisted |
twisted |
2026-10-23T20:14:07.480Z | 2026-10-29T14:20:15.738Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-525 | Multiples vulnérabilités dans les produits Fortinet | 2022-06-08T00:00:00.000000 | 2022-06-08T00:00:00.000000 |
| certfr-2022-avi-524 | Multiples vulnérabilités dans Google Android | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-523 | Multiples vulnérabilités dans les produits IBM | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-522 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-07T00:00:00.000000 | 2022-06-07T00:00:00.000000 |
| certfr-2022-avi-521 | Vulnérabilité dans Atlassian Confluence | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-520 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-519 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-518 | Vulnérabilité dans Nextcloud richdocuments | 2022-06-03T00:00:00.000000 | 2022-06-03T00:00:00.000000 |
| certfr-2022-avi-517 | Multiples vulnérabilités dans GitLab | 2022-06-02T00:00:00.000000 | 2022-06-02T00:00:00.000000 |
| certfr-2022-avi-516 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-515 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-514 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-513 | Multiples vulnérabilités dans Google Chrome | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-512 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-511 | Multiples vulnérabilités dans Mozilla Firefox | 2022-06-01T00:00:00.000000 | 2022-06-02T00:00:00.000000 |
| certfr-2022-avi-510 | Multiples vulnérabilités dans IBM QRadar | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-509 | Vulnérabilité dans Elasticsearch | 2022-05-31T00:00:00.000000 | 2022-05-31T00:00:00.000000 |
| certfr-2022-avi-508 | Vulnérabilité dans Nextcloud Server | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-507 | Vulnérabilité dans Grafana | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-506 | Multiples vulnérabilités dans Ruby on Rails | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-505 | Multiples vulnérabilités dans Google Chrome OS | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-504 | Multiples vulnérabilités dans Tenable Nessus | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-503 | Vulnérabilité dans QNAP Proxy Server | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-502 | Vulnérabilité dans les produits F-Secure | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-501 | Vulnérabilité dans Drupal Core | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-500 | Vulnérabilité dans le client ownCloud Desktop | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-499 | Multiples vulnérabilités dans les produits Citrix | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-498 | Vulnérabilité dans IBM Spectrum Control | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-497 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-496 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |