Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-87901 | Improper sanitization in the registration module … |
phpBB |
phpBB |
2026-10-23T16:15:05.780Z | 2026-11-02T15:38:00.796Z | |
| cve-2026-105483 | A flaw in Node.js TLS hostname verification allow… |
nodejs |
node |
2026-10-23T16:15:05.773Z | 2026-11-02T15:37:11.172Z | |
| cve-2026-106070 | A flaw in the Node.js `zlib.ZipFile` API can caus… |
nodejs |
node |
2026-10-23T16:15:05.741Z | 2026-11-02T15:33:58.070Z | |
| cve-2026-106073 | A flaw in Node.js Permission Model filesystem enf… |
nodejs |
node |
2026-10-23T16:15:05.728Z | 2026-11-02T15:31:53.217Z | |
| cve-2026-115810 | 6.3 (v4.0) 7.7 (v3.1) | Tandoor Recipes before 2.7.0 SSRF via Pestle Importer … |
TandoorRecipes |
recipes |
2026-10-23T16:12:12.359Z | 2026-10-29T14:13:20.506Z |
| cve-2026-57845 | 8.7 (v4.0) 8.8 (v3.1) | Hugging Face Datasets through 5.1.0 Pickle Deserializa… |
huggingface |
datasets |
2026-10-23T15:14:20.497Z | 2026-10-29T17:58:32.566Z |
| cve-2026-54668 | Kitodo.Production: XXE in XMLUtils EAD/XML upload pars… |
kitodo |
kitodo-production |
2026-10-23T14:54:35.530Z | 2026-10-29T14:11:07.235Z | |
| cve-2026-58497 | Uni-CLI: Legacy HTTP MCP transport accepted browser-or… |
olo-dot-io |
Uni-CLI |
2026-10-23T14:49:42.619Z | 2026-10-23T20:57:14.612Z | |
| cve-2026-49442 | Cacti: User Enumeration via Error Messages |
Cacti |
cacti |
2026-10-23T14:45:13.062Z | 2026-10-30T19:50:20.165Z | |
| cve-2026-39902 | Cacti: Authenticated RCE on Data Input |
Cacti |
cacti |
2026-10-23T14:42:45.710Z | 2026-10-29T14:04:38.453Z | |
| cve-2026-46531 | Cacti: Authenticated Stored 2nd-Order SQL Injection in… |
Cacti |
cacti |
2026-10-23T14:42:27.937Z | 2026-10-29T17:56:17.459Z | |
| cve-2026-102786 | 8.6 (v4.0) | Joomla Extension - phoca.cz - Authenticated stored cro… |
phoca.cz |
Phoca Gallery extension for Joomla |
2026-10-23T14:34:55.227Z | 2026-11-02T18:52:52.364Z |
| cve-2026-55222 | Isar: Unprivileged user ownership of trusted repositor… |
ilbers |
isar |
2026-10-23T14:31:41.863Z | 2026-10-23T20:57:39.282Z | |
| cve-2026-53942 | Conda Organization Infrastructure: Pwn Request in upda… |
conda |
infrastructure |
2026-10-23T14:25:00.085Z | 2026-10-23T14:57:32.991Z | |
| cve-2026-55486 | Goobi viewer: IIIF Auth 2.0 origin parameter unsanitiz… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:42.732Z | 2026-10-30T15:08:40.244Z | |
| cve-2026-55465 | Goobi viewer: Solr injection via unvalidated region pa… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:27.529Z | 2026-10-29T17:55:19.956Z | |
| cve-2026-55463 | Goobi viewer: WebSocket endpoints lack server-side aut… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:06.825Z | 2026-10-29T13:59:55.819Z | |
| cve-2026-112333 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
GFI Software |
GFI Archiver |
2026-10-23T14:16:48.726Z | 2026-10-23T14:16:48.726Z |
| cve-2026-55459 | Goobi viewer: OpenID JWT audience not enforced by the … |
intranda |
goobi-viewer-core |
2026-10-23T14:16:44.995Z | 2026-10-23T14:57:39.675Z | |
| cve-2026-55457 | Goobi viewer: Empty webapi.authorization.token default… |
intranda |
goobi-viewer-core |
2026-10-23T14:16:27.063Z | 2026-10-30T15:05:13.543Z | |
| cve-2026-55444 | Goobi viewer: Solr query injection via the legacy RSS … |
intranda |
goobi-viewer-core |
2026-10-23T14:16:16.350Z | 2026-10-29T17:54:03.026Z | |
| cve-2026-46652 | Path traversal via HTTP `Content-Disposition` header i… |
intranda |
goobi-viewer-core |
2026-10-23T14:15:46.415Z | 2026-10-30T15:10:02.376Z | |
| cve-2026-46651 | Unauthenticated SSRF and local file inclusion via Down… |
intranda |
goobi-viewer-core |
2026-10-23T14:15:28.088Z | 2026-10-29T17:51:34.661Z | |
| cve-2026-46347 | Goobi viewer: Predictable Replacement Password Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:51.802Z | 2026-10-29T13:57:32.624Z | |
| cve-2026-46346 | Goobi viewer: Predictable Password Reset Token Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:39.197Z | 2026-10-23T20:58:03.501Z | |
| cve-2026-55442 | Goobi viewer: cleanUpQuery double-brace bypass allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:26.455Z | 2026-10-29T13:56:19.871Z | |
| cve-2026-115478 | obsidian-tc: Memory-lifecycle tools overwrite unowned … |
The-40-Thieves |
obsidian-tc |
2026-10-23T14:06:28.128Z | 2026-10-30T17:46:48.838Z | |
| cve-2026-115477 | obsidian-tc: Declined human-in-the-loop confirmations … |
The-40-Thieves |
obsidian-tc |
2026-10-23T14:04:33.518Z | 2026-10-29T17:50:19.455Z | |
| cve-2026-115457 | baserCMS: Unauthenticated Stored XSS via Shortcode Exp… |
baserproject |
basercms |
2026-10-23T14:00:33.254Z | 2026-10-29T13:55:12.435Z | |
| cve-2026-115786 | 6.5 (v3.1) | Zimbra Collaboration Suite Shared-File Mailbox Quota A… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:53:33.918Z | 2026-10-28T19:48:38.750Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-465 | Vulnérabilité dans VMware Spring Security | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |
| certfr-2022-avi-464 | Multiples vulnérabilités dans Microsoft Edge | 2022-05-16T00:00:00.000000 | 2022-05-16T00:00:00.000000 |
| certfr-2022-avi-463 | Vulnérabilité dans OpenLDAP | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-462 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-461 | Multiples vulnérabilités dans SonicWall SSLVPN SMA 1000 | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-460 | Vulnérabilité dans PostgreSQL | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-459 | Multiples vulnérabilités dans les produits IBM | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-458 | Multiples vulnérabilités dans les produits Check Point | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-457 | Vulnérabilité dans Stormshield Network Security | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-456 | Multiples vulnérabilités dans les produits SAP | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-455 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-454 | Multiples vulnérabilités dans VMware Spring | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-453 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-452 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-451 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-450 | Multiples vulnérabilités dans les produits Microsoft | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-449 | Multiples vulnérabilités dans Microsoft .Net | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-448 | Multiples vulnérabilités dans Microsoft Windows | 2022-05-11T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-447 | Multiples vulnérabilités dans Microsoft Office | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-446 | Multiples vulnérabilités dans Microsoft Edge | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-445 | Vulnérabilité dans F5 BIG-IP | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-444 | Multiples vulnérabilités dans les produits Intel | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-443 | Vulnérabilité dans Apache Tomcat | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-442 | Vulnérabilité dans Zimbra | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-441 | Vulnérabilité dans Adobe ColdFusion | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-440 | Multiples vulnérabilités dans Google Chrome | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-439 | Multiples vulnérabilités dans Axis OS | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-438 | Vulnérabilité dans Nextcloud Talk | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-437 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-436 | Multiples vulnérabilités dans les produits Schneider Electric | 2022-05-10T00:00:00.000000 | 2022-08-22T00:00:00.000000 |