Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105944 | 10 (v4.0) | Apache Pulsar Manager: Missing authentication and auth… |
Apache Software Foundation |
Apache Pulsar Manager |
2026-10-21T18:17:37.844Z | 2026-10-23T21:57:46.976Z |
| cve-2026-114266 | ProjectWorlds Advanced Library Management System profi… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T18:15:13.700Z | 2026-10-23T21:57:56.027Z | |
| cve-2026-105942 | 7.7 (v4.0) | Apache Pulsar: Original principal of proxied requests … |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:14:35.996Z | 2026-10-23T21:58:05.657Z |
| cve-2026-105938 | 2.3 (v4.0) | Apache Pulsar: Subscription authorization policies not… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:13:35.337Z | 2026-10-23T21:58:15.976Z |
| cve-2026-105937 | 8.7 (v4.0) | Apache Pulsar: Missing authorization of the shadow top… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:12:51.420Z | 2026-10-23T21:58:44.482Z |
| cve-2026-113461 | mk-oracle: Local privilege escalation via insecure Ora… |
Checkmk GmbH |
Checkmk |
2026-10-21T18:11:34.774Z | 2026-10-23T11:06:22.616Z | |
| cve-2026-105936 | 5.3 (v4.0) | Apache Pulsar: Functions connectors list endpoint does… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:11:20.520Z | 2026-10-23T21:59:10.187Z |
| cve-2026-105935 | 4.9 (v4.0) | Apache Pulsar: Function trigger publishes to the input… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:10:24.056Z | 2026-10-23T21:59:37.544Z |
| cve-2026-105934 | 7.2 (v4.0) | Apache Pulsar: Missing tenant admin authorization chec… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:08:43.192Z | 2026-10-23T22:00:04.202Z |
| cve-2026-105933 | 2.3 (v4.0) | Apache Pulsar: Namespace encryption requirement not en… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:07:43.954Z | 2026-10-23T22:00:14.676Z |
| cve-2026-105932 | 2.3 (v4.0) | Apache Pulsar: Missing topic policy authorization on n… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:06:59.228Z | 2026-10-23T22:04:58.691Z |
| cve-2026-113870 | 8.8 (v3.1) 8.6 (v4.0) | Improper Encoding of Server-Supplied JavaScript Values… |
MongoDB |
Compass |
2026-10-21T18:04:30.607Z | 2026-10-30T18:23:34.095Z |
| cve-2026-111401 | 6.5 (v3.1) | WordPress Tailored Tools plugin <= 3.0.3 - Cross Site … |
Tailored Media |
Tailored Tools |
2026-10-21T18:02:35.731Z | 2026-10-22T10:56:17.445Z |
| cve-2026-105931 | 2.3 (v4.0) | Apache Pulsar: Missing authorization on transaction ad… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:02:31.976Z | 2026-10-30T18:20:46.202Z |
| cve-2026-105930 | 6 (v4.0) | Apache Pulsar: Improper Authorization of Function, Sou… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:01:29.744Z | 2026-10-26T14:35:21.565Z |
| cve-2026-112868 | 4.3 (v3.1) | WordPress H5P plugin <= 1.17.9 - Insecure Direct Objec… |
H5P |
H5P |
2026-10-21T18:01:00.900Z | 2026-10-22T10:56:17.592Z |
| cve-2026-105927 | 2.3 (v4.0) | Apache Pulsar: Improper authorization of WebSocket con… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:00:31.871Z | 2026-10-30T18:17:18.420Z |
| cve-2026-114265 | ProjectWorlds Advanced Library Management System Searc… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T18:00:15.205Z | 2026-10-28T17:58:07.213Z | |
| cve-2026-114176 | 4.3 (v3.1) | WordPress eRoom plugin <= 1.7.1 - Broken Access Contro… |
DigitalME |
eRoom |
2026-10-21T18:00:12.725Z | 2026-10-22T10:56:17.723Z |
| cve-2026-105926 | 5.3 (v4.0) | Apache Pulsar: Missing Topic Authorization on Binary P… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T17:59:55.207Z | 2026-10-30T18:15:49.239Z |
| cve-2026-105869 | 9.2 (v4.0) | Apache Pulsar: MultiRolesTokenAuthorizationProvider us… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T17:58:54.385Z | 2026-10-30T18:12:40.695Z |
| cve-2026-114493 | 9.2 (v4.0) 8.6 (v3.1) | LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via H… |
LocalAI |
LocalAI |
2026-10-21T17:54:17.584Z | 2026-10-21T19:50:15.052Z |
| cve-2026-114492 | 7 (v4.0) 6.5 (v3.1) | gin-vue-admin through 2.9.2 Path Traversal via removeP… |
flipped-aurora |
gin-vue-admin |
2026-10-21T17:54:16.906Z | 2026-10-23T15:09:41.469Z |
| cve-2026-114491 | 6.9 (v4.0) 5.3 (v3.1) | pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass v… |
bpampuch |
pdfmake |
2026-10-21T17:54:16.217Z | 2026-10-28T17:31:25.430Z |
| cve-2026-110744 | 7.2 (v3.1) | Multicluster-global-hub-operator-bundle: operator serv… |
Red Hat |
Multicluster Global Hub |
2026-10-21T17:52:40.314Z | 2026-10-23T15:10:10.054Z |
| cve-2026-114133 | Nuxt server islands render `useHeadSafe` input without… |
nuxt |
nuxt |
2026-10-21T17:52:09.381Z | 2026-10-28T17:23:40.538Z | |
| cve-2026-114132 | Nuxt: Server-side route rules (`redirect`, `headers`, … |
nuxt |
nuxt |
2026-10-21T17:50:11.250Z | 2026-10-23T15:10:37.684Z | |
| cve-2026-114264 | ProjectWorlds Advanced Library Management System edit_… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T17:45:14.657Z | 2026-10-28T01:30:59.530Z | |
| cve-2026-114131 | Nuxt: Route rules are matched against the raw request … |
nuxt |
nuxt |
2026-10-21T17:41:24.016Z | 2026-10-30T17:48:52.857Z | |
| cve-2026-114130 | Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javas… |
nuxt |
nuxt |
2026-10-21T17:37:58.400Z | 2026-10-28T01:29:47.913Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-398 | Multiples vulnérabilités dans les produits Apple | 2021-05-25T00:00:00.000000 | 2021-05-25T00:00:00.000000 |
| certfr-2021-avi-397 | Vulnérabilité dans les produits QNAP | 2021-05-21T00:00:00.000000 | 2021-05-21T00:00:00.000000 |
| certfr-2021-avi-396 | Multiples vulnérabilités dans les produits VMware | 2021-05-21T00:00:00.000000 | 2021-05-21T00:00:00.000000 |
| certfr-2021-avi-395 | Multiples vulnérabilités dans IBM Spectrum Control | 2021-05-21T00:00:00.000000 | 2021-05-21T00:00:00.000000 |
| certfr-2021-avi-394 | Multiples vulnérabilités dans les produits Cisco | 2021-05-20T00:00:00.000000 | 2021-05-20T00:00:00.000000 |
| certfr-2021-avi-393 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-05-20T00:00:00.000000 | 2021-05-20T00:00:00.000000 |
| certfr-2021-avi-392 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-05-20T00:00:00.000000 | 2021-05-20T00:00:00.000000 |
| certfr-2021-avi-391 | Multiples vulnérabilités dans Google Chrome OS | 2021-05-19T00:00:00.000000 | 2021-05-19T00:00:00.000000 |
| certfr-2021-avi-390 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-05-18T00:00:00.000000 | 2021-05-18T00:00:00.000000 |
| certfr-2021-avi-389 | Vulnérabilité dans Apple Boot Camp | 2021-05-18T00:00:00.000000 | 2021-05-18T00:00:00.000000 |
| certfr-2021-avi-388 | Vulnérabilité dans Stormshield Endpoint Security | 2021-05-18T00:00:00.000000 | 2021-05-18T00:00:00.000000 |
| certfr-2021-avi-387 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-05-18T00:00:00.000000 | 2021-05-18T00:00:00.000000 |
| certfr-2021-avi-386 | Multiples vulnérabilités dans Moodle | 2021-05-17T00:00:00.000000 | 2021-05-17T00:00:00.000000 |
| certfr-2021-avi-385 | Multiples vulnérabilités dans les produits Siemens | 2021-05-17T00:00:00.000000 | 2021-05-17T00:00:00.000000 |
| certfr-2021-avi-384 | [MaJ] Vulnérabilité dans Pulse Connect Secure | 2021-05-17T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-avi-383 | Multiples vulnérabilités dans Microsoft Edge | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-382 | Vulnérabilité dans MongoDB | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-381 | Multiples vulnérabilités dans PostgreSQL | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-380 | Vulnérabilité dans SonicWall Email Security Virtual Appliance | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-379 | Multiples vulnérabilités dans les produits Qnap | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-378 | Multiples vulnérabilités dans WordPress | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-377 | Vulnérabilité dans Belden HiOS et HiSecOS | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-376 | Multiples vulnérabilités dans Magento | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-375 | Multiples vulnérabilités dans les produits Wifi Intel | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-374 | Multiples vulnérabilités dans Tenable Nessus | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-373 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-372 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-371 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-05-14T00:00:00.000000 | 2021-05-14T00:00:00.000000 |
| certfr-2021-avi-370 | Multiples vulnérabilités dans les produits Schneider | 2021-05-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-avi-369 | Multiples vulnérabilités dans les produits Microsoft | 2021-05-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |