Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112842 | 6.5 (v3.1) | WordPress Paid Member Subscriptions plugin <= 3.1.2 - … |
Cozmoslabs |
Paid Member Subscriptions |
2026-10-22T11:00:10.742Z | 2026-10-22T13:37:46.527Z |
| cve-2026-112822 | 8.5 (v3.1) | WordPress Workreap Core plugin < 3.4.4 - SQL Injection… |
AmentoTech |
Workreap Core |
2026-10-22T11:00:10.699Z | 2026-10-22T13:37:46.663Z |
| cve-2026-115334 | 7.6 (v4.0) 6.8 (v3.1) | Lotus through 0.10.2 Authorization Bypass via switch_o… |
uselotus |
lotus |
2026-10-22T10:57:50.195Z | 2026-11-04T20:59:55.360Z |
| cve-2026-115333 | 8.2 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Improper Authentication via Event… |
uselotus |
lotus |
2026-10-22T10:57:49.499Z | 2026-10-23T15:03:54.486Z |
| cve-2026-115332 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Subscription Fi… |
uselotus |
lotus |
2026-10-22T10:57:48.791Z | 2026-10-29T11:25:42.720Z |
| cve-2026-115331 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Metric Property… |
uselotus |
lotus |
2026-10-22T10:57:48.115Z | 2026-10-29T02:11:42.284Z |
| cve-2026-115330 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Custom SQL Bill… |
uselotus |
lotus |
2026-10-22T10:57:47.428Z | 2026-11-04T20:41:51.217Z |
| cve-2026-115329 | 6 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Cross-Organization IDOR via Subsc… |
uselotus |
lotus |
2026-10-22T10:57:46.708Z | 2026-10-23T15:04:20.467Z |
| cve-2026-115328 | 8.7 (v4.0) 8.8 (v3.1) | JSON-SCADA before 0.65-alpha SQL Injection via OPC His… |
riclolsen |
json-scada |
2026-10-22T10:57:45.975Z | 2026-10-29T13:39:16.913Z |
| cve-2026-115327 | 6 (v4.0) 5.3 (v3.1) | libyang through 6.4.13 Uninitialized Pointer Free in N… |
CESNET |
libyang |
2026-10-22T10:57:45.264Z | 2026-10-29T02:10:37.665Z |
| cve-2026-115326 | 5.3 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 IDOR via OrderDetailController R… |
Webkul |
QloApps |
2026-10-22T10:57:44.551Z | 2026-11-04T17:25:21.239Z |
| cve-2026-115325 | 8.7 (v4.0) 8.3 (v3.1) | Netmaker through 1.7.0 Authorization Bypass via update… |
gravitl |
netmaker |
2026-10-22T10:57:43.846Z | 2026-10-23T15:05:01.043Z |
| cve-2026-115324 | 9.2 (v4.0) 8.1 (v3.1) | mem0 0.1.117 before 1.0.8 SQL Injection via Databricks… |
mem0ai |
mem0 |
2026-10-22T10:57:43.136Z | 2026-10-29T11:23:41.895Z |
| cve-2026-115323 | 6.9 (v4.0) 7.3 (v3.1) | EverShop 1.2.2 before 2.2.1 Missing Authorization via … |
evershopcommerce |
evershop |
2026-10-22T10:57:42.424Z | 2026-10-29T02:08:25.891Z |
| cve-2026-115322 | 5.3 (v4.0) 4.3 (v3.1) | Bytebase before 3.16.0 Authorization Bypass via Rollou… |
bytebase |
bytebase |
2026-10-22T10:57:41.716Z | 2026-10-22T10:57:41.716Z |
| cve-2026-115321 | 5.3 (v4.0) 4.3 (v3.1) | Bytebase before 3.16.0 Authorization Bypass via Update… |
bytebase |
bytebase |
2026-10-22T10:57:40.982Z | 2026-10-23T15:05:29.678Z |
| cve-2026-115319 | 2 (v4.0) 2.5 (v3.1) | fzf 0.36.0 through 0.74.5 Denial of Service via maskAc… |
junegunn |
fzf |
2026-10-22T10:57:40.288Z | 2026-10-29T11:21:21.376Z |
| cve-2026-114665 | 7.1 (v4.0) 6.5 (v3.1) | Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrar… |
zhenorzz |
goploy |
2026-10-22T10:57:39.553Z | 2026-10-29T02:07:01.607Z |
| cve-2025-71434 | 8.8 (v4.0) 8.2 (v3.1) | Weaver E-cology < 10.76 Unauthenticated SQL Injection … |
Weaver Network Co., Ltd. |
E-cology |
2026-10-22T10:57:38.815Z | 2026-11-03T17:14:02.932Z |
| cve-2024-58396 | 8.7 (v4.0) 7.5 (v3.1) | YouDataSum CPAS Audit Management System V4 Path Traver… |
YouDataSum |
CPAS Audit Management System |
2026-10-22T10:57:38.109Z | 2026-10-23T21:15:23.595Z |
| cve-2024-58394 | 5.1 (v4.0) 6.1 (v3.1) | Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying |
Retool |
Retool |
2026-10-22T10:57:37.409Z | 2026-10-29T21:15:10.024Z |
| cve-2024-58393 | 8.8 (v4.0) 8.2 (v3.1) | i-Netsolution Readymade Unilevel Ecommerce MLM SQL Inj… |
i-Netsolution |
Readymade Unilevel Ecommerce MLM |
2026-10-22T10:57:36.699Z | 2026-10-29T02:05:25.721Z |
| cve-2023-54413 | 5.1 (v4.0) 6.1 (v3.1) | WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflect… |
OnTheGoSystems |
WPML Multilingual CMS |
2026-10-22T10:57:35.997Z | 2026-11-03T17:09:26.147Z |
| cve-2022-51025 | 7.1 (v4.0) 6.5 (v3.1) | Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Trave… |
Penta Security Systems |
WAPPLES |
2026-10-22T10:57:35.298Z | 2026-10-23T21:15:30.156Z |
| cve-2022-51024 | 8.7 (v4.0) 7.5 (v3.1) | Kavita < 0.5.4.1 Unauthenticated Path Traversal via co… |
Kareadita |
Kavita |
2026-10-22T10:57:34.599Z | 2026-10-29T11:17:48.365Z |
| cve-2022-51023 | 8.8 (v4.0) 8.2 (v3.1) | PHPOK < 5.4.081 SQL Injection via api.php sort Parameter |
PHPOK |
PHPOK |
2026-10-22T10:57:33.897Z | 2026-10-29T02:04:37.497Z |
| cve-2022-51022 | 8.8 (v4.0) 9.1 (v3.1) | YiShaAdmin 3.1 Unauthenticated Path Traversal via Down… |
liukuo362573 |
YiShaAdmin |
2026-10-22T10:57:33.205Z | 2026-11-03T16:20:23.419Z |
| cve-2022-51021 | 8.8 (v4.0) 8.2 (v3.1) | NotificationX WordPress Plugin < 2.3.12 Unauthenticate… |
WPDeveloper |
NotificationX |
2026-10-22T10:57:32.517Z | 2026-10-23T21:15:37.175Z |
| cve-2021-48017 | 8.7 (v4.0) 7.5 (v3.1) | OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal vi… |
OrbiTeam |
BSCW Server |
2026-10-22T10:57:31.855Z | 2026-10-29T11:16:33.337Z |
| cve-2021-48016 | 9.3 (v4.0) 9.8 (v3.1) | DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php |
DedeCMS |
DedeCMS |
2026-10-22T10:57:31.176Z | 2026-10-29T02:06:05.908Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-760 | Vulnérabilité dans Stormshield Network Security | 2021-10-07T00:00:00.000000 | 2021-10-07T00:00:00.000000 |
| certfr-2021-avi-759 | Multiples vulnérabilités dans Apache HTTP Server | 2021-10-06T00:00:00.000000 | 2021-10-11T00:00:00.000000 |
| certfr-2021-avi-758 | Multiples vulnérabilités dans les produits Fortinet | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-757 | Multiples vulnérabilités dans Typo3 | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-756 | Multiples vulnérabilités dans Aruba Instant Access Points | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-755 | Multiples vulnérabilités dans F5 BIG-IP | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-754 | Vulnérabilité dans Xen | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-753 | Multiples vulnérabilités dans Mozilla Firefox | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-752 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-10-06T00:00:00.000000 | 2021-10-06T00:00:00.000000 |
| certfr-2021-avi-751 | Multiples vulnérabilités dans Google Android | 2021-10-05T00:00:00.000000 | 2021-10-05T00:00:00.000000 |
| certfr-2021-avi-750 | Vulnérabilité dans les produits Trend Micro | 2021-10-05T00:00:00.000000 | 2021-10-05T00:00:00.000000 |
| certfr-2021-avi-749 | Multiples vulnérabilités dans Microsoft Edge | 2021-10-04T00:00:00.000000 | 2021-10-04T00:00:00.000000 |
| certfr-2021-avi-748 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-10-04T00:00:00.000000 | 2021-10-04T00:00:00.000000 |
| certfr-2021-avi-747 | Multiples vulnérabilités dans les produits Synology | 2021-10-01T00:00:00.000000 | 2021-10-01T00:00:00.000000 |
| certfr-2021-avi-746 | Multiples vulnérabilités dans les produits QNAP | 2021-10-01T00:00:00.000000 | 2021-10-01T00:00:00.000000 |
| certfr-2021-avi-745 | Vulnérabilité dans IBM Qradar | 2021-10-01T00:00:00.000000 | 2021-10-01T00:00:00.000000 |
| certfr-2021-avi-744 | Multiples vulnérabilités dans GitLab | 2021-10-01T00:00:00.000000 | 2021-10-01T00:00:00.000000 |
| certfr-2021-avi-743 | Multiples vulnérabilités dans Google Chrome | 2021-10-01T00:00:00.000000 | 2021-10-04T00:00:00.000000 |
| certfr-2021-avi-742 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-09-30T00:00:00.000000 | 2021-09-30T00:00:00.000000 |
| certfr-2021-avi-741 | Multiples vulnérabilités dans Google ChromeOS | 2021-09-30T00:00:00.000000 | 2021-09-30T00:00:00.000000 |
| certfr-2021-avi-740 | Multiples vulnérabilités dans F-Secure Internet Gatekeeper | 2021-09-28T00:00:00.000000 | 2021-09-28T00:00:00.000000 |
| certfr-2021-avi-739 | Multiples vulnérabilités dans Siemens Solid Edge | 2021-09-28T00:00:00.000000 | 2021-09-28T00:00:00.000000 |
| certfr-2021-avi-738 | Multiples vulnérabilités dans QNAP QVR | 2021-09-27T00:00:00.000000 | 2021-09-27T00:00:00.000000 |
| certfr-2021-avi-737 | Multiples vulnérabilités dans le noyau linux de Debian | 2021-09-27T00:00:00.000000 | 2021-09-27T00:00:00.000000 |
| certfr-2021-avi-736 | Multiples vulnérabilités dans Microsoft Edge | 2021-09-27T00:00:00.000000 | 2021-09-27T00:00:00.000000 |
| certfr-2021-avi-735 | Vulnérabilité dans Google Chrome | 2021-09-27T00:00:00.000000 | 2021-09-27T00:00:00.000000 |
| certfr-2021-avi-734 | Vulnérabilité dans Trendmicro ServerProtect | 2021-09-27T00:00:00.000000 | 2021-09-27T00:00:00.000000 |
| certfr-2021-avi-733 | Multiples vulnérabilités dans SonicWall SMA 100 | 2021-09-24T00:00:00.000000 | 2021-09-24T00:00:00.000000 |
| certfr-2021-avi-732 | Multiples vulnérabilités dans les produits Apple | 2021-09-24T00:00:00.000000 | 2021-09-24T00:00:00.000000 |
| certfr-2021-avi-731 | Multiples vulnérabilités dans PHP | 2021-09-24T00:00:00.000000 | 2021-09-24T00:00:00.000000 |