Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-50106 | 6.5 (v3.1) | Possible insecure NXDOMAIN for non-existing records un… |
NLnet Labs |
Unbound |
2026-10-21T08:57:11.040Z | 2026-10-29T19:06:43.165Z |
| cve-2026-35501 | 3.7 (v3.1) | Bypass of a configured island trust anchor underneath … |
NLnet Labs |
Unbound |
2026-10-21T08:56:55.811Z | 2026-10-29T19:05:26.623Z |
| cve-2026-109125 | 5.3 (v3.1) | Possible cache poisoning vulnerability via a cache sid… |
NLnet Labs |
Unbound |
2026-10-21T08:56:35.696Z | 2026-10-29T19:05:06.036Z |
| cve-2026-70386 | 8.5 (v4.0) | OnePlus OxygenOS improper neutralization of special el… |
OnePlus |
OxygenOS |
2026-10-21T08:51:24.522Z | 2026-10-30T16:35:07.653Z |
| cve-2026-85683 | Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Sto… |
Unknown |
Jane Menu |
2026-10-21T08:39:00.033Z | 2026-10-21T10:14:54.800Z | |
| cve-2026-14556 | HappyForms < 1.26.15 - Unauthenticated HTML Injection … |
Unknown |
HappyForms |
2026-10-21T08:38:59.379Z | 2026-10-21T10:14:54.939Z | |
| cve-2026-107447 | Contest Gallery < 34.0.1 - Unauthenticated Vote Restri… |
Unknown |
Contest Gallery |
2026-10-21T08:38:58.748Z | 2026-10-21T10:14:55.080Z | |
| cve-2026-105256 | LatePoint < 5.7.5 - Unauthenticated Payment Bypass via… |
Unknown |
LatePoint |
2026-10-21T08:38:58.118Z | 2026-10-21T10:14:55.218Z | |
| cve-2026-104642 | Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Pric… |
Unknown |
Simple Shopping Cart |
2026-10-21T08:38:57.475Z | 2026-10-21T10:14:55.356Z | |
| cve-2026-104641 | Simple Shopping Cart < 5.3.3 - Unauthenticated Payment… |
Unknown |
Simple Shopping Cart |
2026-10-21T08:38:56.835Z | 2026-10-21T10:14:55.498Z | |
| cve-2026-103301 | Payment Gateway for Telcell < 2.0.5 - Unauthenticated … |
Unknown |
Payment Gateway for Telcell |
2026-10-21T08:38:56.211Z | 2026-10-21T10:14:55.631Z | |
| cve-2026-101138 | CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unau… |
Unknown |
CMP – Coming Soon & Maintenance |
2026-10-21T08:38:55.566Z | 2026-10-21T10:14:55.768Z | |
| cve-2026-114236 | 3.3 (v3.1) | Podman: goroutine/file-descriptor leak in storage/pkg/… |
Red Hat |
Confidential Compute Attestation |
2026-10-21T08:04:32.529Z | 2026-10-30T08:22:40.441Z |
| cve-2026-110938 | 8.7 (v4.0) | JITServer: Multiple Denial of Service vulnerabilities … |
Eclipse Foundation |
Eclipse OpenJ9 |
2026-10-21T08:03:26.062Z | 2026-10-26T17:57:34.803Z |
| cve-2026-111075 | 8.7 (v4.0) | JITServer: Pre-authentication remote crash via integer… |
Eclipse Foundation |
Eclipse OpenJ9 |
2026-10-21T08:00:32.804Z | 2026-10-26T17:57:34.946Z |
| cve-2026-110899 | 7.1 (v3.1) | WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Sc… |
Kevin Stover |
Ninja Forms |
2026-10-21T08:00:20.542Z | 2026-10-30T20:01:11.038Z |
| cve-2026-107435 | 7.1 (v3.1) | WordPress Strong Testimonials plugin <= 3.3.12 - Cross… |
WP Chill |
Strong Testimonials |
2026-10-21T08:00:15.941Z | 2026-10-21T10:35:07.464Z |
| cve-2026-17557 | 6.5 (v3.1) | Lm-evaluation-harness: lm-evaluation-harness: ssrf via… |
Red Hat |
Red Hat OpenShift AI (RHOAI) |
2026-10-21T07:59:10.543Z | 2026-10-21T13:38:59.538Z |
| cve-2026-111074 | 8.7 (v4.0) | JITServer: Pre-authentication remote Denial of Service… |
Eclipse Foundation |
Eclipse OpenJ9 |
2026-10-21T07:57:16.912Z | 2026-10-26T17:57:35.098Z |
| cve-2026-96901 | N/A | Cart Abandonment Recovery for WooCommerce < 2.2.0 - Un… |
Unknown |
Cart Abandonment Recovery for WooCommerce |
2026-10-21T06:00:26.262Z | 2026-10-21T10:35:00.799Z |
| cve-2026-92999 | N/A | Click n Chat 1.0.4 - 1.1.2 - Unauthenticated Lead Data… |
Unknown |
Click n Chat (Chat Widget Integration) |
2026-10-21T06:00:26.088Z | 2026-10-21T10:35:00.944Z |
| cve-2026-92998 | N/A | Click n Chat 1.0.4 - 1.1.2 - Unauthenticated SQLi via … |
Unknown |
Click n Chat (Chat Widget Integration) |
2026-10-21T06:00:25.917Z | 2026-10-21T10:35:01.086Z |
| cve-2026-92997 | N/A | Click n Chat < 1.1.3 - Unauthenticated SQLi via 'datac… |
Unknown |
Click n Chat (Chat Widget Integration) |
2026-10-21T06:00:25.739Z | 2026-10-21T10:35:01.264Z |
| cve-2026-88784 | N/A | Weglot < 6.4.3 - Unauthenticated Stored XSS via Transl… |
Unknown |
Translate WordPress with Weglot 2.0 |
2026-10-21T06:00:25.557Z | 2026-10-21T10:35:01.419Z |
| cve-2026-87838 | N/A | Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Merchant … |
Unknown |
Wava Payment Plugin |
2026-10-21T06:00:25.381Z | 2026-10-21T10:35:01.578Z |
| cve-2026-87837 | N/A | Wava Payment 0.3.1 - 0.3.9 - Unauthenticated Order Sta… |
Unknown |
Wava Payment Plugin |
2026-10-21T06:00:25.208Z | 2026-10-21T10:35:01.724Z |
| cve-2026-86611 | N/A | Download Manager (Free & Pro) - Privacy Settings Updat… |
Unknown |
Download Manager |
2026-10-21T06:00:25.028Z | 2026-10-21T10:35:01.870Z |
| cve-2026-85642 | N/A | Formidable Forms 6.5 - 6.35 - Unauthenticated Payment … |
Unknown |
Formidable Forms |
2026-10-21T06:00:24.595Z | 2026-10-21T10:35:02.018Z |
| cve-2026-81813 | N/A | Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CD… |
Unknown |
Elementor Website Builder |
2026-10-21T06:00:24.425Z | 2026-10-21T10:35:02.168Z |
| cve-2026-81812 | N/A | Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload |
Unknown |
Elementor Website Builder |
2026-10-21T06:00:24.247Z | 2026-10-21T10:35:02.313Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-158 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-03-03T00:00:00.000000 | 2021-03-03T00:00:00.000000 |
| certfr-2021-avi-157 | Multiples vulnérabilités dans Tenable.sc | 2021-03-03T00:00:00.000000 | 2021-03-03T00:00:00.000000 |
| certfr-2021-avi-156 | Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-03-03T00:00:00.000000 |
| certfr-2021-avi-155 | Multiples vulnérabilités dans Google Android | 2021-03-02T00:00:00.000000 | 2021-03-02T00:00:00.000000 |
| certfr-2021-avi-154 | Multiples vulnérabilités dans SaltStack | 2021-03-02T00:00:00.000000 | 2021-03-02T00:00:00.000000 |
| certfr-2021-avi-153 | Vulnérabilité dans Stormshield Network Security | 2021-03-02T00:00:00.000000 | 2021-03-03T00:00:00.000000 |
| certfr-2021-avi-152 | Multiples vulnérabilités dans Citrix Hypervisor | 2021-03-01T00:00:00.000000 | 2021-03-01T00:00:00.000000 |
| certfr-2021-avi-151 | Multiples vulnérabilités dans mongoDB et mongoDB Ops Manager | 2021-03-01T00:00:00.000000 | 2021-03-01T00:00:00.000000 |
| certfr-2021-avi-150 | Vulnérabilité dans IBM Qradar | 2021-03-01T00:00:00.000000 | 2021-03-01T00:00:00.000000 |
| certfr-2021-avi-149 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-02-26T00:00:00.000000 | 2021-02-26T00:00:00.000000 |
| certfr-2021-avi-148 | Multiples vulnérabilités dans Nagios XI | 2021-02-26T00:00:00.000000 | 2021-02-26T00:00:00.000000 |
| certfr-2021-avi-147 | Multiples vulnérabilités dans les produits Cisco | 2021-02-25T00:00:00.000000 | 2021-02-25T00:00:00.000000 |
| certfr-2021-avi-146 | Multiples vulnérabilités dans F5 BIG-IP | 2021-02-25T00:00:00.000000 | 2021-02-25T00:00:00.000000 |
| certfr-2021-avi-145 | Multiples vulnérabilités dans les produits VMWare | 2021-02-24T00:00:00.000000 | 2021-02-24T00:00:00.000000 |
| certfr-2021-avi-144 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-02-24T00:00:00.000000 | 2021-03-01T00:00:00.000000 |
| certfr-2021-avi-143 | Multiples vulnérabilités dans Mozilla Firefox | 2021-02-24T00:00:00.000000 | 2021-02-24T00:00:00.000000 |
| certfr-2021-avi-142 | Multiples vulnérabilités dans les produits Aruba | 2021-02-24T00:00:00.000000 | 2021-02-24T00:00:00.000000 |
| certfr-2021-avi-141 | Vulnérabilité dans F5 BIG-IP | 2021-02-24T00:00:00.000000 | 2021-02-24T00:00:00.000000 |
| certfr-2021-avi-140 | Vulnérabilité dans Python | 2021-02-22T00:00:00.000000 | 2021-02-22T00:00:00.000000 |
| certfr-2021-avi-139 | Multiples vulnérabilités dans F5 BIG-IP | 2021-02-22T00:00:00.000000 | 2021-02-22T00:00:00.000000 |
| certfr-2021-avi-138 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-02-22T00:00:00.000000 | 2021-02-22T00:00:00.000000 |
| certfr-2021-avi-137 | Vulnérabilité dans IBM WebSphere Cast Iron | 2021-02-22T00:00:00.000000 | 2021-02-22T00:00:00.000000 |
| certfr-2021-avi-136 | Multiples vulnérabilités dans Asterisk | 2021-02-19T00:00:00.000000 | 2021-02-19T00:00:00.000000 |
| certfr-2021-avi-135 | Vulnérabilité dans Xen | 2021-02-19T00:00:00.000000 | 2021-02-19T00:00:00.000000 |
| certfr-2021-avi-134 | Multiples vulnérabilités dans Microsoft Edge | 2021-02-18T00:00:00.000000 | 2021-02-18T00:00:00.000000 |
| certfr-2021-avi-133 | Multiples vulnérabilités dans Google Chrome OS | 2021-02-18T00:00:00.000000 | 2021-02-18T00:00:00.000000 |
| certfr-2021-avi-132 | Vulnérabilité dans BIND | 2021-02-18T00:00:00.000000 | 2021-02-18T00:00:00.000000 |
| certfr-2021-avi-131 | Vulnérabilité dans Cisco AnyConnect Secure Mobility Client | 2021-02-18T00:00:00.000000 | 2021-02-18T00:00:00.000000 |
| certfr-2021-avi-130 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2021-02-18T00:00:00.000000 | 2021-02-18T00:00:00.000000 |
| certfr-2021-avi-129 | Vulnérabilité dans les produits Kaspersky | 2021-02-17T00:00:00.000000 | 2021-02-17T00:00:00.000000 |