Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-89209 | A vulnerability has been identified in Mendix SAM… |
Siemens |
Mendix SAML (Mendix 10 compatible) |
2026-10-26T10:41:01.088Z | 2026-10-31T01:13:36.246Z | |
| cve-2026-116257 | BillaBear Installation InstallController.php processIn… |
n/a |
BillaBear |
2026-10-26T10:30:14.810Z | 2026-10-31T01:12:22.619Z | |
| cve-2026-116254 | rathena FluxCP PayPal IPN PaymentNotifyRequest.php ver… |
rathena |
FluxCP |
2026-10-26T09:45:18.399Z | 2026-10-31T01:11:14.188Z | |
| cve-2026-116236 | Oray Pugongying X5 Pro PPPoE WAN Setting upload_files … |
Oray |
Pugongying X5 Pro |
2026-10-26T09:00:21.600Z | 2026-10-31T01:10:09.769Z | |
| cve-2026-116233 | Oray Pugongying X5 Pro Dnsmasq crlf injection |
Oray |
Pugongying X5 Pro |
2026-10-26T08:15:14.847Z | 2026-10-31T01:08:40.753Z | |
| cve-2026-116230 | Ndemic Creations Plague Inc Evolved Workshop Scenario … |
Ndemic Creations |
Plague Inc Evolved |
2026-10-26T07:30:18.027Z | 2026-10-31T01:07:50.371Z | |
| cve-2026-116227 | Edimax BR-6208AC Virtual Server cross site scripting |
Edimax |
BR-6208AC |
2026-10-26T06:45:12.525Z | 2026-10-31T01:05:50.138Z | |
| cve-2026-111578 | 7.5 (v3.1) | PDF Invoices & Packing Slips for WooCommerce 5.16.2 - … |
Unknown |
PDF Invoices & Packing Slips for WooCommerce |
2026-10-30T21:17:55.672Z | 2026-10-31T00:53:29.904Z |
| cve-2026-110176 | 8.7 (v4.0) | File Force Download for Drupal 7 Access Bypass via Unc… |
Drupal |
File Force Download |
2026-10-31T00:01:51.979Z | 2026-10-31T00:01:51.979Z |
| cve-2026-77152 | 5.3 (v4.0) | Field Collection for Drupal 7 access bypass via missin… |
Drupal |
Field Collection for Drupal 7 |
2026-10-30T23:56:29.862Z | 2026-10-30T23:56:29.862Z |
| cve-2026-117656 | 9.3 (v4.0) | Unverified Sign in with Apple callback parameter can o… |
pow-auth |
assent |
2026-10-30T23:55:23.426Z | 2026-10-30T23:55:23.426Z |
| cve-2026-110264 | 10 (v3.1) | Integer Overflow or Wraparound in GitLab |
GitLab |
GitLab |
2026-10-22T00:33:48.179Z | 2026-10-30T23:20:24.882Z |
| cve-2026-93577 | 9.9 (v3.1) | Integer Overflow or Wraparound in GitLab |
GitLab |
GitLab |
2026-09-23T23:04:45.296Z | 2026-10-30T23:19:55.304Z |
| cve-2026-89078 | 9.9 (v3.1) | Double Free in GitLab |
GitLab |
GitLab |
2026-09-23T23:05:20.132Z | 2026-10-30T23:19:15.012Z |
| cve-2026-97229 | 10 (v3.1) | Integer Overflow or Wraparound in GitLab |
GitLab |
GitLab |
2026-10-13T01:05:46.166Z | 2026-10-30T23:18:16.598Z |
| cve-2026-14476 | 8 (v3.1) | Sssd: sssd: gpo cache path traversal via unsanitized g… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-07-07T09:12:52.180Z | 2026-10-30T22:52:03.569Z |
| cve-2026-63400 | Coop sessions are not invalidated on password reset |
roostorg |
coop |
2026-10-30T22:46:10.154Z | 2026-10-30T22:46:10.154Z | |
| cve-2026-63399 | Coop: Unauthenticated org provisioning via GraphQL Mut… |
roostorg |
coop |
2026-10-30T22:40:29.297Z | 2026-10-30T22:40:29.297Z | |
| cve-2026-63338 | IXP Manager has Broken Object-Level Authorization |
inex |
IXP-Manager |
2026-10-30T22:24:52.299Z | 2026-10-30T22:24:52.299Z | |
| cve-2026-111477 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-30T22:19:12.011Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-30T22:19:12.011Z | |
| cve-2026-61840 | Quest Bot: Server Side Request Forgery in the Image to… |
vantern-org |
questbot |
2026-10-30T18:23:22.213Z | 2026-10-30T22:17:17.865Z | |
| cve-2026-62162 | Hydra: Deposit Claim omits Head state-token spending r… |
cardano-scaling |
hydra |
2026-10-30T18:30:20.005Z | 2026-10-30T22:17:11.419Z | |
| cve-2026-48201 | 7.1 (v3.1) | WordPress Fast Velocity Minify plugin <= 3.5.7 - Cross… |
Raul P. |
Fast Velocity Minify |
2026-10-30T18:30:36.622Z | 2026-10-30T22:16:45.956Z |
| cve-2026-78527 | 8.8 (v3.1) | WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP… |
GS Plugins |
GS Testimonial Slider |
2026-10-30T18:30:40.428Z | 2026-10-30T22:16:24.495Z |
| cve-2026-107868 | 5.3 (v3.1) | WordPress YITH WooCommerce Product Add-Ons plugin <= 4… |
YITHEMES |
YITH WooCommerce Product Add-Ons |
2026-10-30T18:30:43.460Z | 2026-10-30T22:16:09.766Z |
| cve-2026-116401 | 7.5 (v3.1) | WordPress HUSKY plugin <= 1.4.6 - Broken Access Contro… |
RealMag777 |
HUSKY |
2026-10-30T18:30:47.215Z | 2026-10-30T22:16:02.694Z |
| cve-2026-116852 | 9.1 (v3.1) | WordPress Widget Options plugin <= 4.2.5 - Remote Code… |
Marketing Fire |
Widget Options |
2026-10-30T18:30:50.961Z | 2026-10-30T22:15:55.746Z |
| cve-2026-118086 | 8.8 (v3.1) | WordPress WP BASE Booking plugin <= 6.5.2 - Privilege … |
Hakan Ozevin |
WP BASE Booking |
2026-10-30T18:30:54.718Z | 2026-10-30T22:15:49.368Z |
| cve-2026-61847 | Crass: A large number of adjacent CSS comments can tri… |
rgrove |
crass |
2026-10-30T18:44:22.330Z | 2026-10-30T22:15:42.844Z | |
| cve-2026-62298 | asn1c: ASAN crash with decode of open types |
mouse07410 |
asn1c |
2026-10-30T18:56:59.029Z | 2026-10-30T22:15:29.845Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-avi-103 | Multiples vulnérabilités dans Microsoft Office | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-102 | Multiples vulnérabilités dans Microsoft Edge | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-101 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-100 | Multiples vulnérabilités dans WordPress | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-099 | Multiples vulnérabilités dans Chrome | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-097 | Multiples vulnérabilités dans Joomla! | 2019-03-13T00:00:00.000000 | 2019-03-13T00:00:00.000000 |
| certfr-2019-avi-096 | Multiples vulnérabilités dans les produits Adobe | 2019-03-12T00:00:00.000000 | 2019-03-12T00:00:00.000000 |
| certfr-2019-avi-095 | Vulnérabilité dans Citrix Application Delivery Management (ADM) | 2019-03-12T00:00:00.000000 | 2019-03-12T00:00:00.000000 |
| certfr-2019-avi-094 | SCADA Vulnérabilité dans Siemens Scalance | 2019-03-12T00:00:00.000000 | 2019-03-12T00:00:00.000000 |
| certfr-2019-avi-090 | Multiples vulnérabilités dans Google Chrome | 2019-03-06T00:00:00.000000 | 2019-03-08T00:00:00.000000 |
| certfr-2019-avi-093 | Multiples vulnérabilités dans PHP | 2019-03-07T00:00:00.000000 | 2019-03-07T00:00:00.000000 |
| certfr-2019-avi-092 | Multiples vulnérabilités dans les produits Cisco | 2019-03-07T00:00:00.000000 | 2019-03-07T00:00:00.000000 |
| certfr-2019-avi-091 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2019-03-06T00:00:00.000000 | 2019-03-07T00:00:00.000000 |
| certfr-2019-avi-089 | Multiples vulnérabilités dans Xen | 2019-03-05T00:00:00.000000 | 2019-03-05T00:00:00.000000 |
| certfr-2019-avi-088 | Multiples vulnérabilités dans Google Android | 2019-03-05T00:00:00.000000 | 2019-03-05T00:00:00.000000 |
| certfr-2019-avi-087 | Vulnérabilité dans Adobe ColdFusion | 2019-03-04T00:00:00.000000 | 2019-03-04T00:00:00.000000 |
| certfr-2019-avi-086 | Multiples vulnérabilités dans IBM InfoSphere | 2019-03-04T00:00:00.000000 | 2019-03-04T00:00:00.000000 |
| certfr-2019-avi-085 | Vulnérabilité dans Asterisk | 2019-03-01T00:00:00.000000 | 2019-03-01T00:00:00.000000 |
| certfr-2019-avi-084 | Vulnérabilité dans Palo Alto Expedition | 2019-03-01T00:00:00.000000 | 2019-03-01T00:00:00.000000 |
| certfr-2019-avi-083 | Multiples vulnérabilités dans Aruba Instant | 2019-02-28T00:00:00.000000 | 2019-02-28T00:00:00.000000 |
| certfr-2019-avi-082 | Multiples vulnérabilités dans les produits Cisco | 2019-02-28T00:00:00.000000 | 2019-02-28T00:00:00.000000 |
| certfr-2019-avi-081 | Multiples vulnérabilités dans Wireshark | 2019-02-28T00:00:00.000000 | 2019-02-28T00:00:00.000000 |
| certfr-2019-avi-080 | Vulnérabilité dans OpenSSL | 2019-02-27T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| certfr-2019-avi-079 | Vulnérabilité dans le noyau Linux de RedHat | 2019-02-26T00:00:00.000000 | 2019-02-26T00:00:00.000000 |
| certfr-2019-avi-078 | SCADA Multiples vulnérabilités dans Siemens WinCC OA | 2019-02-26T00:00:00.000000 | 2019-02-26T00:00:00.000000 |
| certfr-2019-avi-077 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-02-25T00:00:00.000000 | 2019-02-25T00:00:00.000000 |
| certfr-2019-avi-076 | Vulnérabilité dans ISC Bind | 2019-02-22T00:00:00.000000 | 2019-02-22T00:00:00.000000 |
| certfr-2019-avi-075 | Vulnérabilité dans Adobe Acrobat et Reader | 2019-02-22T00:00:00.000000 | 2019-02-22T00:00:00.000000 |
| certfr-2019-avi-074 | Vulnérabilité dans Drupal | 2019-02-21T00:00:00.000000 | 2019-02-21T00:00:00.000000 |
| certfr-2019-avi-073 | Multiples vulnérabilités dans les produits Cisco | 2019-02-21T00:00:00.000000 | 2019-02-21T00:00:00.000000 |