Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76295 | 4.3 (v3.1) | SPL Injection through the REST API in Splunk Secure Gateway |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:57.442Z | 2026-10-22T13:37:47.972Z |
| cve-2026-76294 | 4.3 (v3.1) | Improper Access Control in Field Extraction Management… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:56.520Z | 2026-10-22T13:37:48.124Z |
| cve-2026-76293 | 7.2 (v3.1) | Remote Code Execution (RCE) through Splunk Web Manager… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:55.643Z | 2026-10-23T03:55:21.204Z |
| cve-2026-76292 | 6.5 (v3.1) | Missing Authorization through REST API Endpoints in Sp… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:54.732Z | 2026-10-22T13:37:48.422Z |
| cve-2026-76291 | 8.8 (v3.1) | Improper Access Control through Scheduled Search Safeg… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:53.804Z | 2026-10-23T10:57:45.799Z |
| cve-2026-76290 | 7.5 (v3.1) | Denial of Service (DoS) through Unauthenticated Packag… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:52.864Z | 2026-10-22T13:37:48.564Z |
| cve-2026-76289 | 6.5 (v3.1) | Denial of Service (DoS) through the REST API in Splunk… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:51.849Z | 2026-10-22T13:37:48.707Z |
| cve-2026-76288 | 7.5 (v3.1) | Denial of Service (DoS) through Splunk Web Content-Typ… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:50.487Z | 2026-10-22T13:37:48.847Z |
| cve-2026-76287 | 5.4 (v3.1) | Authorization Bypass in the Data Management REST API i… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:49.096Z | 2026-10-23T15:08:38.358Z |
| cve-2026-114441 | oretnom23 php-travel-agency-system update.php sql injection |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:45:18.510Z | 2026-10-23T21:17:17.273Z | |
| cve-2026-89052 | 5.9 (v4.0) | Hardcoded AES encryption key in Archer C6 |
TP-Link Systems Inc. |
Archer C6 V2 |
2026-10-21T22:40:16.165Z | 2026-10-30T17:27:59.216Z |
| cve-2026-114440 | oretnom23 php-travel-agency-system delete.php sql injection |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:30:12.080Z | 2026-10-28T18:35:23.224Z | |
| cve-2026-103090 | 8.8 (v4.0) | Unauthenticated Biscuit Credential Disclosure via GET … |
Google |
SAM |
2026-10-21T22:16:59.777Z | 2026-10-30T17:26:26.361Z |
| cve-2026-114439 | oretnom23 php-travel-agency-system Session session.php… |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:15:08.560Z | 2026-10-28T02:01:40.118Z | |
| cve-2026-114384 | itsourcecode Online Cake Ordering System transactionsa… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T22:00:18.707Z | 2026-10-23T21:17:46.796Z | |
| cve-2026-114509 | Laravel TokenGuard authentication bypass through non-s… |
laravel |
framework |
2026-10-21T21:49:29.486Z | 2026-10-28T18:32:28.863Z | |
| cve-2026-114508 | Laravel relationship inclusion can trigger unauthorize… |
laravel |
framework |
2026-10-21T21:45:31.465Z | 2026-10-23T21:18:11.415Z | |
| cve-2026-114383 | TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddCo… |
TOTOLINK |
EX200 |
2026-10-21T21:45:18.906Z | 2026-10-28T18:28:02.178Z | |
| cve-2026-112921 | N/A | Robots::Validate versions from 0.4.3 before 0.4.10 for… |
|
|
2026-10-21T21:37:54.278Z | 2026-10-30T17:25:36.728Z |
| cve-2026-114382 | TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig … |
TOTOLINK |
EX200 |
2026-10-21T21:30:10.698Z | 2026-10-28T01:59:47.537Z | |
| cve-2026-91403 | Vulnerability in the Oracle Java SE, Oracle Graal… |
Oracle Corporation |
Oracle Java SE |
2026-10-21T21:23:28.057Z | 2026-10-24T20:01:56.993Z | |
| cve-2026-94423 | N/A | Net::LibSSH versions before 0.004 for Perl authenticat… |
|
|
2026-10-21T21:22:48.593Z | 2026-10-30T17:22:58.601Z |
| cve-2026-94140 | N/A | Rex versions through 1.16.1 for Perl accept an unknown… |
|
|
2026-10-21T21:22:19.577Z | 2026-10-30T15:52:33.360Z |
| cve-2026-114501 | Pillow: Arrow export leaks stale heap memory when PILL… |
python-pillow |
Pillow |
2026-10-21T21:17:09.748Z | 2026-10-30T16:10:03.645Z | |
| cve-2026-114381 | itsourcecode Online Cake Ordering System orderdetail.p… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T21:15:17.882Z | 2026-10-23T21:18:36.060Z | |
| cve-2026-96639 | Pillow multi-frame loaders can reuse stale native imag… |
python-pillow |
Pillow |
2026-10-21T21:06:42.111Z | 2026-10-29T10:51:37.735Z | |
| cve-2026-96636 | Pillow: Decompression-bomb protection bypass via multi… |
python-pillow |
Pillow |
2026-10-21T21:05:20.850Z | 2026-10-30T16:08:33.388Z | |
| cve-2026-29001 | 8.6 (v4.0) 7.2 (v3.1) | TastyIgniter 4.4.5 PHP Object Injection via Settings D… |
tastyigniter |
TastyIgniter |
2026-10-21T21:03:25.481Z | 2026-10-28T01:58:42.698Z |
| cve-2026-96640 | Pillow PDF append accepts malformed shared page-tree D… |
python-pillow |
Pillow |
2026-10-21T21:03:22.785Z | 2026-10-28T01:57:01.680Z | |
| cve-2026-96637 | Pillow: Decompression bomb check bypass in SpiderImage… |
python-pillow |
Pillow |
2026-10-21T21:01:20.249Z | 2026-10-23T21:18:59.858Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-488 | Multiples vulnérabilités dans Microsoft Edge | 2021-06-25T00:00:00.000000 | 2021-06-25T00:00:00.000000 |
| certfr-2021-avi-487 | Vulnérabilité dans Qnap QTS | 2021-06-25T00:00:00.000000 | 2021-06-25T00:00:00.000000 |
| certfr-2021-avi-486 | Multiples vulnérabilités dans IBM Db2 | 2021-06-24T00:00:00.000000 | 2021-06-24T00:00:00.000000 |
| certfr-2021-avi-485 | Multiples vulnérabilités dans Citrix Hypervisor | 2021-06-24T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2021-avi-484 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2021-06-24T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2021-avi-483 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-06-24T00:00:00.000000 | 2021-06-24T00:00:00.000000 |
| certfr-2021-avi-482 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2021-06-24T00:00:00.000000 | 2021-06-24T00:00:00.000000 |
| certfr-2021-avi-481 | Vulnérabilité dans Palo Alto Networks Cortex XSOAR | 2021-06-23T00:00:00.000000 | 2021-06-23T00:00:00.000000 |
| certfr-2021-avi-480 | Vulnérabilité dans SonicWall SonicOS | 2021-06-23T00:00:00.000000 | 2021-06-23T00:00:00.000000 |
| certfr-2021-avi-479 | Multiples vulnérabilités dans les produits VMware | 2021-06-23T00:00:00.000000 | 2021-06-23T00:00:00.000000 |
| certfr-2021-avi-478 | Multiples vulnérabilités dans les produits Symantec | 2021-06-22T00:00:00.000000 | 2021-06-22T00:00:00.000000 |
| certfr-2021-avi-477 | Multiples vulnérabilités dans Google Chrome OS | 2021-06-21T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-avi-476 | Multiples vulnérabilités dans Microsoft Edge | 2021-06-21T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-avi-475 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-06-21T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-avi-474 | Multiples vulnérabilités dans les produits IBM | 2021-06-18T00:00:00.000000 | 2021-06-18T00:00:00.000000 |
| certfr-2021-avi-473 | Multiples vulnérabilités dans Google Chrome | 2021-06-18T00:00:00.000000 | 2023-01-11T00:00:00.000000 |
| certfr-2021-avi-472 | Vulnérabilité dans VMware Tools | 2021-06-18T00:00:00.000000 | 2021-06-18T00:00:00.000000 |
| certfr-2021-avi-471 | Multiples vulnérabilités dans les produits IBM | 2021-06-17T00:00:00.000000 | 2021-06-17T00:00:00.000000 |
| certfr-2021-avi-470 | Multiples vulnérabilités dans les produits Cisco | 2021-06-17T00:00:00.000000 | 2021-06-17T00:00:00.000000 |
| certfr-2021-avi-469 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-06-17T00:00:00.000000 | 2021-06-17T00:00:00.000000 |
| certfr-2021-avi-468 | Vulnérabilité dans Mozilla Firefox | 2021-06-16T00:00:00.000000 | 2021-06-16T00:00:00.000000 |
| certfr-2021-avi-467 | Multiples vulnérabilités dans les produits IBM | 2021-06-16T00:00:00.000000 | 2021-06-16T00:00:00.000000 |
| certfr-2021-avi-466 | Multiples vulnérabilités dans les produits Tenable | 2021-06-16T00:00:00.000000 | 2021-06-16T00:00:00.000000 |
| certfr-2021-avi-465 | Vulnérabilité dans les produits Qnap | 2021-06-16T00:00:00.000000 | 2021-06-16T00:00:00.000000 |
| certfr-2021-avi-464 | Vulnérabilité dans Trend Micro InterScan Web Security Virtual Appliance | 2021-06-16T00:00:00.000000 | 2021-06-16T00:00:00.000000 |
| certfr-2021-avi-463 | Vulnérabilité dans les produits SonicWall | 2021-06-15T00:00:00.000000 | 2021-06-15T00:00:00.000000 |
| certfr-2021-avi-462 | Multiples vulnérabilités dans Apple iOS | 2021-06-15T00:00:00.000000 | 2021-06-15T00:00:00.000000 |
| certfr-2021-avi-461 | Multiples vulnérabilités dans Microsoft Edge | 2021-06-14T00:00:00.000000 | 2021-06-14T00:00:00.000000 |
| certfr-2021-avi-460 | Multiples vulnérabilités dans Citrix Hypervisor | 2021-06-11T00:00:00.000000 | 2021-06-11T00:00:00.000000 |
| certfr-2021-avi-459 | Multiples vulnérabilités dans les produits Qnap | 2021-06-11T00:00:00.000000 | 2021-06-11T00:00:00.000000 |