Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-53921 | odhcpd: Stack buffer overflow in DHCPv6 IA reply seria… |
openwrt |
odhcpd |
2026-10-23T13:20:30.249Z | 2026-10-29T13:28:11.455Z | |
| cve-2026-93629 | 5.3 (v3.1) | Zimbra Collaboration Suite Calendar Processing Authent… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:19:26.405Z | 2026-10-28T19:51:47.292Z |
| cve-2026-93628 | 5.3 (v3.1) | Zimbra Collaboration Suite Calendar Processing Authent… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:18:16.368Z | 2026-10-28T20:02:01.885Z |
| cve-2026-93627 | 5.3 (v3.1) | Zimbra Collaboration Suite Calendar Processing Authent… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:17:00.739Z | 2026-10-28T20:02:13.577Z |
| cve-2026-50053 | 8.7 (v3.1) | Zimbra Collaboration Suite RestFilter Request Attribut… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:15:44.976Z | 2026-10-28T20:02:22.353Z |
| cve-2026-10632 | 8.7 (v3.1) | Zimbra Collaboration Suite Classic Web Client Reflecte… |
Zimbra |
Zimbra Collaboration Suite |
2026-10-23T13:14:04.118Z | 2026-10-28T20:02:30.433Z |
| cve-2026-115752 | 2.3 (v4.0) 4.2 (v3.1) | Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via A… |
SignalK |
signalk-server |
2026-10-23T13:03:34.217Z | 2026-10-29T13:25:03.492Z |
| cve-2026-115751 | 6.3 (v4.0) 3.7 (v3.1) | mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts … |
agentfront |
mcp-from-openapi |
2026-10-23T13:03:33.492Z | 2026-10-29T17:42:32.687Z |
| cve-2026-115750 | 6.3 (v4.0) 3.7 (v3.1) | mcp-from-openapi from 2.5.0 before 2.9.0 Credential Le… |
agentfront |
mcp-from-openapi |
2026-10-23T13:03:32.783Z | 2026-11-04T20:36:16.897Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-112848 | 9.8 (v3.1) | WordPress Hostme v2 theme <= 7.0 - PHP Object Injectio… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:20.030Z | 2026-10-24T14:46:59.432Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-112850 | 8.1 (v3.1) | WordPress Your Dress theme <= 1.4.1 - Local File Inclu… |
AncoraThemes |
Your Dress |
2026-10-23T13:00:19.609Z | 2026-10-24T14:46:59.580Z |
| cve-2026-112854 | 9.8 (v3.1) | WordPress Holistic Center theme <= 1.2.6 - PHP Object … |
axiomthemes |
Holistic Center |
2026-10-23T13:00:19.251Z | 2026-10-24T14:46:59.714Z |
| cve-2026-112847 | 9.8 (v3.1) | WordPress ZenSoul theme <= 1.13 - PHP Object Injection… |
ThemeREX |
ZenSoul |
2026-10-23T13:00:19.203Z | 2026-10-24T14:46:59.854Z |
| cve-2026-112846 | 9.8 (v3.1) | WordPress Save Life theme <= 1.2.14 - PHP Object Injec… |
ThemeREX Group |
Save Life |
2026-10-23T13:00:18.841Z | 2026-10-24T14:47:00.039Z |
| cve-2026-112851 | 9.8 (v3.1) | WordPress HotLock theme <= 1.3.9 - PHP Object Injectio… |
ThemeREX Group |
HotLock |
2026-10-23T13:00:18.778Z | 2026-10-24T14:47:00.303Z |
| cve-2026-112852 | 8.1 (v3.1) | WordPress Helion theme <= 1.1.12 - PHP Object Injectio… |
ThemeREX Group |
Helion |
2026-10-23T13:00:18.393Z | 2026-10-24T14:47:00.462Z |
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112856 | 9.8 (v3.1) | WordPress Vagabonds theme <= 1.3.10 - PHP Object Injec… |
ThemeREX Group |
Vagabonds |
2026-10-23T13:00:17.961Z | 2026-10-24T14:47:00.597Z |
| cve-2026-112857 | 9.8 (v3.1) | WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio… |
axiomthemes |
Reprizo |
2026-10-23T13:00:17.920Z | 2026-10-23T14:59:12.653Z |
| cve-2026-112858 | 9.8 (v3.1) | WordPress Rhodos theme <= 1.3.3 - PHP Object Injection… |
axiomthemes |
Rhodos |
2026-10-23T13:00:17.505Z | 2026-10-24T14:47:00.738Z |
| cve-2026-112859 | 9.8 (v3.1) | WordPress Little Birdies theme <= 1.3.16 - PHP Object … |
ThemeREX Group |
Little Birdies |
2026-10-23T13:00:17.469Z | 2026-10-24T14:47:00.875Z |
| cve-2026-112855 | 9.8 (v3.1) | WordPress Redy theme <= 1.3.5 - PHP Object Injection v… |
axiomthemes |
Redy |
2026-10-23T13:00:16.938Z | 2026-10-24T14:47:01.013Z |
| cve-2026-112863 | 7.1 (v3.1) | WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripti… |
Hogash |
KALLYAS |
2026-10-23T13:00:16.927Z | 2026-10-24T14:46:57.865Z |
| cve-2026-115730 | 2.3 (v4.0) 3.1 (v3.1) | i18next-http-backend 4.0.2 Protocol-Relative URL Injec… |
i18next |
i18next-http-backend |
2026-10-23T12:55:09.891Z | 2026-10-29T13:19:15.108Z |
| cve-2026-115729 | 8.9 (v4.0) 6.8 (v3.1) | @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeTo… |
pdfme |
common |
2026-10-23T12:55:09.157Z | 2026-10-29T17:40:19.138Z |
| cve-2026-115728 | 8.7 (v4.0) 7.5 (v3.1) | @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.dis… |
hapijs |
@hapi/content |
2026-10-23T12:55:08.425Z | 2026-10-26T19:58:39.933Z |
| cve-2026-99087 | N/A | dm-integrity: fix NULL pointer dereference when the 'R… |
Linux |
Linux |
2026-10-23T12:45:05.714Z | 2026-10-23T12:45:05.714Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-405 | Multiples vulnérabilités dans Google Android | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-404 | Vulnérabilité dans Moxa MXview Series | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-403 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-402 | Multiples vulnérabilités dans Microsoft Edge | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-401 | Multiples vulnérabilités dans les produits IBM | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-400 | Multiples vulnérabilités dans Nagios XI | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-399 | Multiples vulnérabilités dans les produits Cisco | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-398 | Vulnérabilité dans les produits Sophos | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-397 | Multiples vulnérabilités dans Liferay Portal | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-396 | Multiples vulnérabilités dans les produits SonicWall | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-395 | Multiples vulnérabilités dans les produits Nextcloud | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-394 | Multiples vulnérabilités dans MISP | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-393 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-392 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-391 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-390 | Multiples vulnérabilités dans Google Chrome | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-389 | Multiples vulnérabilités dans Ruby on Rails | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-388 | Vulnérabilité dans SolarWinds DPA | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-387 | Vulnérabilité dans Nextcloud Server | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-386 | Multiples vulnérabilités dans IBM QRadar SIEM | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-385 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-384 | Multiples vulnérabilités dans FreeRADIUS Server | 2022-04-25T00:00:00.000000 | 2022-04-25T00:00:00.000000 |
| certfr-2022-avi-383 | Vulnérabilité dans Liferay Portal | 2022-04-25T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-382 | Vulnérabilité dans Atlassian Jira | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-381 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-380 | Vulnérabilité dans MongoDB Server | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-379 | Multiples vulnérabilités dans Stormshield Network VPN Client | 2022-04-22T00:00:00.000000 | 2022-04-22T00:00:00.000000 |
| certfr-2022-avi-378 | Vulnérabilité dans Grafana Enterprise | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-377 | Vulnérabilité dans VMware Spring Security OAuth | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |
| certfr-2022-avi-376 | Multiples vulnérabilités dans Fortinet FortiSOAR | 2022-04-21T00:00:00.000000 | 2022-04-21T00:00:00.000000 |