Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78527 | 8.8 (v3.1) | WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP… |
GS Plugins |
GS Testimonial Slider |
2026-10-30T18:30:40.428Z | 2026-10-30T22:16:24.495Z |
| cve-2026-107868 | 5.3 (v3.1) | WordPress YITH WooCommerce Product Add-Ons plugin <= 4… |
YITHEMES |
YITH WooCommerce Product Add-Ons |
2026-10-30T18:30:43.460Z | 2026-10-30T22:16:09.766Z |
| cve-2026-116401 | 7.5 (v3.1) | WordPress HUSKY plugin <= 1.4.6 - Broken Access Contro… |
RealMag777 |
HUSKY |
2026-10-30T18:30:47.215Z | 2026-10-30T22:16:02.694Z |
| cve-2026-116852 | 9.1 (v3.1) | WordPress Widget Options plugin <= 4.2.5 - Remote Code… |
Marketing Fire |
Widget Options |
2026-10-30T18:30:50.961Z | 2026-10-30T22:15:55.746Z |
| cve-2026-118086 | 8.8 (v3.1) | WordPress WP BASE Booking plugin <= 6.5.2 - Privilege … |
Hakan Ozevin |
WP BASE Booking |
2026-10-30T18:30:54.718Z | 2026-10-30T22:15:49.368Z |
| cve-2026-61847 | Crass: A large number of adjacent CSS comments can tri… |
rgrove |
crass |
2026-10-30T18:44:22.330Z | 2026-10-30T22:15:42.844Z | |
| cve-2026-62298 | asn1c: ASAN crash with decode of open types |
mouse07410 |
asn1c |
2026-10-30T18:56:59.029Z | 2026-10-30T22:15:29.845Z | |
| cve-2026-63344 | Refitter: C# source injection through OpenAPI content-… |
christianhelle |
refitter |
2026-10-30T22:15:27.846Z | 2026-10-30T22:15:27.846Z | |
| cve-2026-7004 | 5.1 (v4.0) 6.1 (v3.1) | WIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter |
WIT |
SynApps Runtime |
2026-10-30T18:59:23.159Z | 2026-10-30T22:15:23.482Z |
| cve-2026-62284 | OSAC operator: Kubeconfig credential-plugin execution … |
osac-project |
osac-operator |
2026-10-30T19:23:39.257Z | 2026-10-30T22:15:16.751Z | |
| cve-2026-62302 | MyTube: Unauthenticated Media Access via Static Routes… |
franklioxygen |
MyTube |
2026-10-30T19:29:46.456Z | 2026-10-30T22:15:09.861Z | |
| cve-2026-119331 | Ladybird: Missing origin-clean enforcement in CSSStyle… |
LadybirdBrowser |
ladybird |
2026-10-30T19:56:01.743Z | 2026-10-30T22:14:59.829Z | |
| cve-2026-61620 | HoneySQL unchecked entity names can lead to SQL inject… |
seancorfield |
honeysql |
2026-10-30T19:56:19.987Z | 2026-10-30T22:14:44.078Z | |
| cve-2026-119336 | Pi-hole: arbitrary root file clobber / chmod / disclos… |
pi-hole |
pi-hole |
2026-10-30T20:05:40.100Z | 2026-10-30T22:14:23.468Z | |
| cve-2026-62334 | OpenVM's OpenVmHalo2Verifier self-call can bypass proo… |
openvm-org |
openvm |
2026-10-30T20:06:32.957Z | 2026-10-30T22:13:55.245Z | |
| cve-2026-119339 | Tesseract: Crafted LSTM model (`WeightMatrix` mode byt… |
tesseract-ocr |
tesseract |
2026-10-30T20:13:37.931Z | 2026-10-30T22:13:31.619Z | |
| cve-2026-62847 | Metalama: Local code execution via DLL planting in wor… |
metalama |
Metalama |
2026-10-30T20:23:50.882Z | 2026-10-30T22:13:12.107Z | |
| cve-2026-62849 | ThingLinks TDengine TDS APIs vulnerable to unauthentic… |
mqttsnet |
thinglinks |
2026-10-30T20:29:16.880Z | 2026-10-30T22:13:05.155Z | |
| cve-2026-62254 | LibreDWG: excessive class-decoding reallocation in R13… |
LibreDWG |
libredwg |
2026-10-30T20:36:09.037Z | 2026-10-30T22:12:55.917Z | |
| cve-2026-62250 | LibreDWG: unbounded allocation in pre-R13 DWG entity d… |
LibreDWG |
libredwg |
2026-10-30T20:37:47.927Z | 2026-10-30T22:12:48.952Z | |
| cve-2026-62968 | Dream Displays has command-line argument injection in … |
arsmotorin |
dreamdisplays |
2026-10-30T20:43:03.608Z | 2026-10-30T22:12:41.610Z | |
| cve-2026-62979 | jack: upstream error responses expose backend and peer… |
roziscoding |
jack |
2026-10-30T20:55:56.995Z | 2026-10-30T22:12:34.837Z | |
| cve-2026-107161 | 7.5 (v3.1) | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T19:29:28.164Z | 2026-10-30T22:07:48.836Z |
| cve-2026-63224 | OpenRemote has authenticated SQL injection in crosstab… |
openremote |
openremote |
2026-10-30T22:05:43.581Z | 2026-10-30T22:05:43.581Z | |
| cve-2026-55614 | uhttpd vulnerable to HTTP request smuggling via case-s… |
openwrt |
uhttpd |
2026-10-30T22:01:54.750Z | 2026-10-30T22:01:54.750Z | |
| cve-2026-63182 | LightSAML: Signature reference wrapping permits unsign… |
litesaml |
lightsaml |
2026-10-30T21:46:38.551Z | 2026-10-30T21:46:38.551Z | |
| cve-2026-55146 | LORIS has incorrect access checks in issue_tracker |
aces |
Loris |
2026-10-30T21:32:36.340Z | 2026-10-30T21:32:36.340Z | |
| cve-2026-118938 | 8.8 (v3.1) | Fickling check_safety() bypass: dotted __qualname__ in… |
trailofbits |
fickling |
2026-10-30T21:19:13.015Z | 2026-10-30T21:19:13.015Z |
| cve-2026-16760 | 8.8 (v3.1) | Fickling check_safety() bypass: likely_safe_imports gr… |
trailofbits |
fickling |
2026-10-30T21:16:31.353Z | 2026-10-30T21:16:31.353Z |
| cve-2026-59993 | Picotls has NULL pointer dereference during handshake,… |
h2o |
picotls |
2026-10-30T21:01:54.818Z | 2026-10-30T21:01:54.818Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-avi-072 | Multiples vulnérabilités dans Google Chrome OS | 2019-02-21T00:00:00.000000 | 2019-02-21T00:00:00.000000 |
| certfr-2019-avi-071 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-02-20T00:00:00.000000 | 2019-02-20T00:00:00.000000 |
| certfr-2019-avi-070 | Vulnérabilité dans les produits VMware | 2019-02-18T00:00:00.000000 | 2019-02-18T00:00:00.000000 |
| certfr-2019-avi-069 | Vulnérabilité dans Juniper Junos OS | 2019-02-18T00:00:00.000000 | 2019-02-18T00:00:00.000000 |
| certfr-2019-avi-068 | Multiples vulnérabilités dans Mozilla Thunderbird | 2019-02-15T00:00:00.000000 | 2019-02-15T00:00:00.000000 |
| certfr-2019-avi-067 | SCADA Multiples vulnérabilités dans les produits Schneider Electric | 2019-02-15T00:00:00.000000 | 2019-02-15T00:00:00.000000 |
| certfr-2019-avi-066 | Vulnérabilité dans Juniper Junos OS | 2019-02-14T00:00:00.000000 | 2019-02-14T00:00:00.000000 |
| certfr-2019-avi-058 | Multiples vulnérabilités dans Mozilla Firefox | 2019-02-13T00:00:00.000000 | 2019-02-14T00:00:00.000000 |
| certfr-2019-avi-051 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-02-12T00:00:00.000000 | 2019-02-14T00:00:00.000000 |
| certfr-2019-avi-065 | Multiples vulnérabilités dans Microsoft Exchange | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-064 | Multiples vulnérabilités dans les produits Microsoft | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-063 | Multiples vulnérabilités dans Microsoft .Net | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-062 | Multiples vulnérabilités dans Microsoft Windows | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-061 | Multiples vulnérabilités dans Microsoft Office | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-060 | Multiples vulnérabilités dans Microsoft Edge | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-059 | Multiples vulnérabilités dans Microsoft IE | 2019-02-13T00:00:00.000000 | 2019-02-13T00:00:00.000000 |
| certfr-2019-avi-057 | Vulnérabilité dans Adobe Flash Player | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-056 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-055 | Vulnérabilité dans Cisco Network Assurance Engine | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-054 | Multiples vulnérabilités dans Joomla! | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-053 | Multiples vulnérabilités dans Adobe ColdFusion | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-052 | SCADA Multiples vulnérabilités dans les produits Siemens | 2019-02-12T00:00:00.000000 | 2019-02-12T00:00:00.000000 |
| certfr-2019-avi-050 | Multiples vulnérabilités dans Google Chrome OS | 2019-02-11T00:00:00.000000 | 2019-02-11T00:00:00.000000 |
| certfr-2019-avi-044 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2019-02-05T00:00:00.000000 | 2019-02-11T00:00:00.000000 |
| certfr-2019-avi-042 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-02-04T00:00:00.000000 | 2019-02-11T00:00:00.000000 |
| certfr-2019-avi-049 | Vulnérabilité dans Fortinet | 2019-02-08T00:00:00.000000 | 2019-02-08T00:00:00.000000 |
| certfr-2019-avi-048 | Multiples vulnérabilités dans les produits Apple | 2019-02-08T00:00:00.000000 | 2019-02-08T00:00:00.000000 |
| certfr-2019-avi-047 | Vulnérabilité dans LibreOffice | 2019-02-08T00:00:00.000000 | 2019-02-08T00:00:00.000000 |
| certfr-2019-avi-046 | Vulnérabilité dans Nagios Core 4 | 2019-02-07T00:00:00.000000 | 2019-02-07T00:00:00.000000 |
| certfr-2019-avi-045 | Multiples vulnérabilités dans Google Android | 2019-02-05T00:00:00.000000 | 2019-02-05T00:00:00.000000 |