Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114459 | 3.7 (v3.1) | Mod_qos: out-of-bounds reads in response-body substrin… |
pbuchbinder |
mod_qos |
2026-10-22T06:37:06.357Z | 2026-10-26T19:38:30.652Z |
| cve-2026-114458 | 5.9 (v3.1) | Mod_qos: undersized connection-monitor scratch array p… |
pbuchbinder |
mod_qos |
2026-10-22T06:37:04.887Z | 2026-10-26T19:38:30.811Z |
| cve-2026-114457 | 3.7 (v3.1) | Mod_qos: missing nul termination in json value escapin… |
pbuchbinder |
mod_qos |
2026-10-22T06:37:03.333Z | 2026-10-26T19:38:30.961Z |
| cve-2026-97328 | N/A | WebP Express < 0.25.16 - Unauthenticated Stored XSS vi… |
Unknown |
WebP Express |
2026-10-22T06:00:18.825Z | 2026-10-22T11:06:28.335Z |
| cve-2026-88849 | N/A | MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrar… |
Unknown |
MasterStudy LMS WordPress Plugin |
2026-10-22T06:00:18.654Z | 2026-10-22T11:06:28.498Z |
| cve-2026-78392 | N/A | Link Library < 7.9.6 - Contributor+ Stored XSS via 'li… |
Unknown |
Link Library |
2026-10-22T06:00:18.482Z | 2026-10-22T11:06:28.662Z |
| cve-2026-111972 | N/A | Photo Engine < 6.5.8 - Author+ Arbitrary Attachment De… |
Unknown |
Photo Engine (Media Organizer & Lightroom) |
2026-10-22T06:00:18.311Z | 2026-10-22T11:06:28.821Z |
| cve-2026-111971 | N/A | Photo Engine < 6.5.8 - Author+ Stored XSS via Collecti… |
Unknown |
Photo Engine (Media Organizer & Lightroom) |
2026-10-22T06:00:18.131Z | 2026-10-22T11:06:28.988Z |
| cve-2026-111958 | N/A | Royal MCP < 1.5.7 - Authentication Bypass via Preview … |
Unknown |
Royal MCP |
2026-10-22T06:00:17.950Z | 2026-10-22T11:06:29.135Z |
| cve-2026-110011 | N/A | MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.… |
Unknown |
MB Custom Post Types & Custom Taxonomies |
2026-10-22T06:00:17.779Z | 2026-10-22T11:06:29.278Z |
| cve-2026-110010 | N/A | MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.… |
Unknown |
MB Custom Post Types & Custom Taxonomies |
2026-10-22T06:00:17.601Z | 2026-10-22T11:06:29.431Z |
| cve-2026-109987 | N/A | PixelYourSite (Free & Pro) - Unauthenticated Stored XS… |
Unknown |
PixelYourSite |
2026-10-22T06:00:17.429Z | 2026-10-22T11:06:29.603Z |
| cve-2026-109931 | N/A | Infility Global < 2.16.25 - Unauthenticated Google Tra… |
Unknown |
Infility Global |
2026-10-22T06:00:17.257Z | 2026-10-22T11:06:29.759Z |
| cve-2026-109927 | N/A | CM HIPAA Forms < 3.3.2 - hipaa_forms+ Privilege Escala… |
Unknown |
HIPAA Forms |
2026-10-22T06:00:17.082Z | 2026-10-22T11:06:29.917Z |
| cve-2026-103234 | N/A | WP Ultimate Review < 2.4.5 - Unauthenticated Arbitrary… |
Unknown |
WP Ultimate Review |
2026-10-22T06:00:16.908Z | 2026-10-22T11:06:30.095Z |
| cve-2026-100142 | N/A | FluentCart < 2.2.0 - Unauthenticated Customer Address … |
Unknown |
FluentCart A New Era of eCommerce |
2026-10-22T06:00:16.728Z | 2026-10-22T11:06:30.260Z |
| cve-2026-114570 | WordPress Core <= 7.0.2 - Authenticated (Contributor+)… |
WordPress Foundation |
WordPress |
2026-10-22T05:29:48.488Z | 2026-10-22T19:10:33.995Z | |
| cve-2026-114223 | 6.7 (v4.0) 5.5 (v3.1) | NewType Infortech｜NT OneAPP - Exposure of Sensitive In… |
NewType Infortech |
NT OneAPP |
2026-10-22T04:27:26.780Z | 2026-10-30T18:31:08.171Z |
| cve-2026-114222 | 6.9 (v4.0) 6.2 (v3.1) | NewType Infortech｜NT OneAPP - Authentication Bypass |
NewType Infortech |
NT OneAPP |
2026-10-22T04:27:06.190Z | 2026-10-30T18:29:55.059Z |
| cve-2026-114221 | 5.9 (v4.0) 7.4 (v3.1) | NewType Infortech｜NT OneAPP - Credential Disclosure |
NewType Infortech |
NT OneAPP |
2026-10-22T04:26:43.979Z | 2026-10-30T18:28:58.149Z |
| cve-2026-114220 | 9.3 (v4.0) 9.1 (v3.1) | NewType Infortech｜NT OneAPP - Improper Certificate Val… |
NewType Infortech |
NT OneAPP |
2026-10-22T04:26:20.542Z | 2026-10-22T19:10:34.145Z |
| cve-2026-114219 | 9.1 (v4.0) 7.4 (v3.1) | NewType Infortech｜NT OneAPP - Hard-coded Credentials |
NewType Infortech |
NT OneAPP |
2026-10-22T04:25:41.557Z | 2026-10-22T19:10:34.280Z |
| cve-2026-110353 | 7.5 (v3.1) | HAProxy 3.2 before 3.4.6 allows a remote unauthen… |
HAProxy |
HAProxy |
2026-10-22T02:53:33.198Z | 2026-10-22T19:10:34.428Z |
| cve-2026-110354 | 7.5 (v3.1) | HAProxy 3 before 3.4.6 allows a remote unauthenti… |
HAProxy |
HAProxy |
2026-10-22T02:46:38.255Z | 2026-10-22T19:10:34.563Z |
| cve-2026-114732 | 6.8 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:16:51.833Z | 2026-10-29T10:57:39.353Z |
| cve-2026-114731 | 5.3 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:12:34.577Z | 2026-11-02T15:58:52.667Z |
| cve-2026-114730 | 7.2 (v3.1) | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 … |
Roundcube |
Webmail |
2026-10-22T02:09:40.059Z | 2026-10-28T02:18:48.643Z |
| cve-2026-114729 | 5.3 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:05:39.669Z | 2026-10-26T19:39:00.590Z |
| cve-2026-114728 | 5.3 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:02:49.325Z | 2026-10-26T16:46:46.332Z |
| cve-2026-114577 | oretnom23 php-travel-agency-system Insertion insert.ph… |
oretnom23 |
php-travel-agency-system |
2026-10-22T02:00:19.008Z | 2026-10-28T02:17:54.687Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-670 | Multiples vulnérabilités dans les produits Elastic | 2021-09-02T00:00:00.000000 | 2021-09-02T00:00:00.000000 |
| certfr-2021-avi-669 | Multiples vulnérabilités dans les produits Moxa | 2021-09-01T00:00:00.000000 | 2021-09-01T00:00:00.000000 |
| certfr-2021-avi-668 | Multiples vulnérabilités dans les produits Aruba | 2021-09-01T00:00:00.000000 | 2021-09-01T00:00:00.000000 |
| certfr-2021-avi-667 | Multiples vulnérabilités dans les produits GitLab | 2021-09-01T00:00:00.000000 | 2021-09-01T00:00:00.000000 |
| certfr-2021-avi-666 | Multiples vulnérabilités dans Google Chrome | 2021-09-01T00:00:00.000000 | 2021-09-01T00:00:00.000000 |
| certfr-2021-avi-665 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-09-01T00:00:00.000000 | 2021-09-01T00:00:00.000000 |
| certfr-2021-avi-664 | Multiples vulnérabilités dans F5 BIG-IP | 2021-08-30T00:00:00.000000 | 2021-08-30T00:00:00.000000 |
| certfr-2021-avi-663 | Vulnérabilité dans l'extension set_user de PostgreSQL | 2021-08-30T00:00:00.000000 | 2021-08-30T00:00:00.000000 |
| certfr-2021-avi-662 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-08-27T00:00:00.000000 | 2021-08-27T00:00:00.000000 |
| certfr-2021-avi-661 | Multiples vulnérabilités dans F5 BIG-IP | 2021-08-26T00:00:00.000000 | 2021-08-27T00:00:00.000000 |
| certfr-2021-avi-660 | Multiples vulnérabilités dans Xen | 2021-08-26T00:00:00.000000 | 2021-08-26T00:00:00.000000 |
| certfr-2021-avi-659 | Vulnérabilité dans Stormshield Network Security | 2021-08-26T00:00:00.000000 | 2021-08-26T00:00:00.000000 |
| certfr-2021-avi-658 | Multiples vulnérabilités dans les produits Cisco | 2021-08-26T00:00:00.000000 | 2021-08-26T00:00:00.000000 |
| certfr-2021-avi-657 | Vulnérabilité dans les produits VMware | 2021-08-26T00:00:00.000000 | 2021-08-26T00:00:00.000000 |
| certfr-2021-avi-656 | Multiples vulnérabilités dans OpenSSL | 2021-08-25T00:00:00.000000 | 2021-08-25T00:00:00.000000 |
| certfr-2021-avi-655 | Multiples vulnérabilités dans les produits VMware | 2021-08-25T00:00:00.000000 | 2021-08-25T00:00:00.000000 |
| certfr-2021-avi-654 | Multiples vulnérabilités dans F5 BIG-IP | 2021-08-25T00:00:00.000000 | 2021-08-25T00:00:00.000000 |
| certfr-2021-avi-653 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-08-25T00:00:00.000000 | 2021-08-25T00:00:00.000000 |
| certfr-2021-avi-652 | Vulnérabilité dans Joomla! | 2021-08-24T00:00:00.000000 | 2021-08-24T00:00:00.000000 |
| certfr-2021-avi-651 | Multiples vulnérabilités dans les produits SolarWinds | 2021-08-23T00:00:00.000000 | 2021-08-23T00:00:00.000000 |
| certfr-2021-avi-650 | Vulnérabilité dans les produits F-Secure | 2021-08-23T00:00:00.000000 | 2021-08-23T00:00:00.000000 |
| certfr-2021-avi-649 | Vulnérabilité dans Stormshield Management Center | 2021-08-23T00:00:00.000000 | 2021-08-23T00:00:00.000000 |
| certfr-2021-avi-648 | Multiples vulnérabilités dans Microsoft Edge | 2021-08-20T00:00:00.000000 | 2021-08-20T00:00:00.000000 |
| certfr-2021-avi-647 | Vulnérabilité dans VMware Workspace | 2021-08-20T00:00:00.000000 | 2021-08-20T00:00:00.000000 |
| certfr-2021-avi-646 | Vulnérabilité dans Ruby on Rails | 2021-08-20T00:00:00.000000 | 2021-08-20T00:00:00.000000 |
| certfr-2021-avi-645 | Vulnérabilité dans le client Siemens SINEMA Remote Connect | 2021-08-19T00:00:00.000000 | 2021-08-19T00:00:00.000000 |
| certfr-2021-avi-644 | Vulnérabilité dans ISC BIND | 2021-08-19T00:00:00.000000 | 2021-08-27T00:00:00.000000 |
| certfr-2021-avi-643 | Multiples vulnérabilités dans IBM WebSphere Application Server | 2021-08-19T00:00:00.000000 | 2021-08-19T00:00:00.000000 |
| certfr-2021-avi-642 | Vulnérabilité dans les produits Cisco | 2021-08-19T00:00:00.000000 | 2021-08-19T00:00:00.000000 |
| certfr-2021-avi-641 | Multiples vulnérabilités dans le client Nextcloud Desktop | 2021-08-19T00:00:00.000000 | 2021-08-20T00:00:00.000000 |