Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-62966 | ESPAsyncWebServer multipart parser has null-pointer write |
ESP32Async |
ESPAsyncWebServer |
2026-10-30T20:53:37.292Z | 2026-10-30T20:53:37.292Z | |
| cve-2026-62860 | Picsou vulnerable to login timing attack |
Zoeille |
picsou-finance |
2026-10-30T20:40:46.993Z | 2026-10-30T20:40:46.993Z | |
| cve-2026-107262 | N/A | Advanced Filesystem - Moderately critical - Cross-Site… |
Drupal |
Advanced Filesystem |
2026-10-30T03:09:56.247Z | 2026-10-30T20:40:11.922Z |
| cve-2026-107311 | N/A | Permissions by Term - Moderately critical - Informatio… |
Drupal |
Permissions by Term |
2026-10-30T03:10:00.554Z | 2026-10-30T20:38:03.847Z |
| cve-2026-107312 | N/A | Examples for Developers - Less critical - Allocation o… |
Drupal |
Examples for Developers |
2026-10-30T03:09:59.485Z | 2026-10-30T20:37:12.885Z |
| cve-2026-107310 | N/A | Freelinking - Moderately critical - Information Disclo… |
Drupal |
Freelinking |
2026-10-30T03:10:01.636Z | 2026-10-30T20:36:20.608Z |
| cve-2026-107309 | N/A | Easy Breadcrumb - Moderately critical - Information di… |
Drupal |
Easy Breadcrumb |
2026-10-30T03:10:02.716Z | 2026-10-30T20:35:36.354Z |
| cve-2026-107308 | N/A | Country - Moderately critical - Cross-site scripting -… |
Drupal |
Country |
2026-10-30T03:10:03.911Z | 2026-10-30T20:34:57.018Z |
| cve-2026-62863 | MoLing: unauthenticated SSE and wildcard CORS expose t… |
gojue |
moling |
2026-10-30T20:33:14.561Z | 2026-10-30T20:33:14.561Z | |
| cve-2026-62853 | ThingLinks vulnerable to authenticated remote code exe… |
mqttsnet |
thinglinks |
2026-10-30T20:28:07.829Z | 2026-10-30T20:28:07.829Z | |
| cve-2026-117645 | 5.3 (v4.0) | Phoenix.HTML vulnerable to attribute injection via unv… |
phoenixframework |
phoenix_html |
2026-10-30T20:25:06.758Z | 2026-10-30T20:25:06.758Z |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-117666 | 9.1 (v4.0) | ssl_verify_fun: partial-label wildcard certificate mat… |
deadtrickster |
ssl_verify_fun |
2026-10-30T20:22:16.466Z | 2026-10-30T20:22:16.466Z |
| cve-2026-57185 | Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser |
asterisk |
asterisk |
2026-10-27T16:40:27.615Z | 2026-10-30T20:21:55.599Z | |
| cve-2026-107307 | N/A | SmartLinker AI - Moderately critical - Information dis… |
Drupal |
SmartLinker AI |
2026-10-30T03:10:04.955Z | 2026-10-30T20:20:53.249Z |
| cve-2026-107306 | N/A | Menu Link Attributes - Moderately critical - Cross-sit… |
Drupal |
Menu Link Attributes |
2026-10-30T03:10:06.002Z | 2026-10-30T20:20:29.219Z |
| cve-2026-57201 | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via… |
asterisk |
asterisk |
2026-10-27T16:56:37.203Z | 2026-10-30T20:19:58.895Z | |
| cve-2026-62848 | Metalama's Visual Studio inter-process named pipe allo… |
metalama |
Metalama |
2026-10-30T20:19:55.876Z | 2026-10-30T20:19:55.876Z | |
| cve-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass all… |
asterisk |
asterisk |
2026-10-27T21:13:03.777Z | 2026-10-30T20:18:00.957Z | |
| cve-2026-114127 | Astro: Arbitrary CSS injection in Astro View Transitions |
withastro |
astro |
2026-10-21T17:30:03.860Z | 2026-10-30T20:16:50.619Z | |
| cve-2026-116672 | Authlib RFC 7592 examples omit registration-access-tok… |
authlib |
authlib |
2026-10-27T16:31:48.429Z | 2026-10-30T20:15:42.022Z | |
| cve-2026-114620 | Authlib: Unvalidated request_uri fetch in JWT-secured … |
authlib |
authlib |
2026-10-22T21:34:11.909Z | 2026-10-30T20:14:29.752Z | |
| cve-2026-58412 | Filecoin Pin: Fork bypass in the privileged GitHub Act… |
filecoin-project |
filecoin-pin |
2026-10-30T20:12:50.288Z | 2026-10-30T20:12:50.288Z | |
| cve-2026-59387 | 8.8 (v3.1) | Broken access control restriction in Cloud Controller API |
Cloud Foundry |
CAPI (Cloud Controller API) |
2026-10-30T08:47:59.006Z | 2026-10-30T20:10:53.458Z |
| cve-2026-119337 | RAGFlow: OpenAI-compatible agent completion bypasses p… |
infiniflow |
ragflow |
2026-10-30T20:10:27.373Z | 2026-10-30T20:10:27.373Z | |
| cve-2026-59396 | 6.9 (v4.0) 4.9 (v3.1) | DoS Vulnerability in UAA Related to JWKS URI Handling |
Cloud Foundry |
UAA |
2026-10-30T08:24:47.718Z | 2026-10-30T20:10:01.484Z |
| cve-2026-107267 | N/A | DKAN - Moderately critical - Access bypass - SA-CONTRI… |
Drupal |
DKAN |
2026-10-30T03:10:07.093Z | 2026-10-30T20:09:13.860Z |
| cve-2026-107268 | N/A | Two Factor Authentication - TFA / Passwordless Login -… |
Drupal |
Two Factor Authentication - TFA / Passwordless Login |
2026-10-30T03:10:08.179Z | 2026-10-30T20:08:45.383Z |
| cve-2026-96389 | N/A | Xray Audit - Moderately critical - Access bypass - SA-… |
Drupal |
Xray Audit |
2026-10-30T03:10:09.246Z | 2026-10-30T20:08:09.645Z |
| cve-2026-114616 | Authlib accepts an empty HMAC key, allowing JWS/JWT si… |
authlib |
authlib |
2026-10-22T21:14:03.060Z | 2026-10-30T20:07:37.170Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-avi-043 | Vulnérabilité dans Prim’X Zed! | 2019-02-04T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2019-avi-041 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2019-02-01T00:00:00.000000 | 2019-02-01T00:00:00.000000 |
| certfr-2019-avi-040 | Multiples vulnérabilités dans Mozilla Firefox | 2019-01-30T00:00:00.000000 | 2019-01-30T00:00:00.000000 |
| certfr-2019-avi-039 | Multiples vulnérabilités dans Mozilla Thunderbird | 2019-01-30T00:00:00.000000 | 2019-01-30T00:00:00.000000 |
| certfr-2019-avi-038 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-01-30T00:00:00.000000 | 2019-01-30T00:00:00.000000 |
| certfr-2019-avi-037 | Multiples vulnérabilités dans Google Chrome | 2019-01-30T00:00:00.000000 | 2019-01-30T00:00:00.000000 |
| certfr-2019-avi-036 | Multiples vulnérabilités dans IBM QRadar | 2019-01-30T00:00:00.000000 | 2019-01-30T00:00:00.000000 |
| certfr-2019-avi-035 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2019-01-29T00:00:00.000000 | 2019-01-29T00:00:00.000000 |
| certfr-2019-avi-034 | Multiples vulnérabilités dans les produits Cisco | 2019-01-24T00:00:00.000000 | 2019-01-24T00:00:00.000000 |
| certfr-2019-avi-033 | Vulnérabilité dans Citrix ADC et NetScaler Gateway | 2019-01-24T00:00:00.000000 | 2019-01-24T00:00:00.000000 |
| certfr-2019-avi-032 | Multiples vulnérabilités dans les produits Apple | 2019-01-23T00:00:00.000000 | 2019-01-23T00:00:00.000000 |
| certfr-2019-avi-031 | Multiples vulnérabilités dans Apache Httpd | 2019-01-23T00:00:00.000000 | 2019-01-23T00:00:00.000000 |
| certfr-2019-avi-030 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-01-22T00:00:00.000000 |
| certfr-2019-avi-029 | Multiples vulnérabilités dans Moodle | 2019-01-21T00:00:00.000000 | 2019-01-21T00:00:00.000000 |
| certfr-2019-avi-028 | Multiples vulnérabilités dans Google Chrome OS | 2019-01-17T00:00:00.000000 | 2019-01-17T00:00:00.000000 |
| certfr-2019-avi-027 | Multiples vulnérabilités dans Drupal | 2019-01-17T00:00:00.000000 | 2019-01-17T00:00:00.000000 |
| certfr-2019-avi-026 | Vulnérabilité dans Nagios | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-025 | Multiples vulnérabilités dans Oracle MySQL | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-024 | Multiples vulnérabilités dans Oracle Virtualization | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-023 | Multiples vulnérabilités dans Oracle Sun Systems | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-022 | Multiples vulnérabilités dans Oracle Java SE | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-021 | Multiples vulnérabilités dans Oracle Database Server | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-020 | Multiples vulnérabilités dans Joomla! | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-01-16T00:00:00.000000 | 2019-01-16T00:00:00.000000 |
| certfr-2019-avi-018 | Multiples vulnérabilités dans les produits IBM | 2019-01-14T00:00:00.000000 | 2019-01-14T00:00:00.000000 |
| certfr-2019-avi-017 | Multiples vulnérabilités dans Fortinet FortiOS et FortiClient | 2019-01-14T00:00:00.000000 | 2019-01-14T00:00:00.000000 |
| certfr-2019-avi-016 | Multiples vulnérabilités dans PHP | 2019-01-11T00:00:00.000000 | 2019-01-11T00:00:00.000000 |
| certfr-2019-avi-015 | Vulnérabilité dans Symantec Reporter | 2019-01-11T00:00:00.000000 | 2019-01-11T00:00:00.000000 |
| certfr-2019-avi-014 | Multiples vulnérabilités dans les produits Juniper | 2019-01-10T00:00:00.000000 | 2019-01-10T00:00:00.000000 |
| certfr-2019-avi-013 | Vulnérabilité dans Symantec Norton App Lock | 2019-01-10T00:00:00.000000 | 2019-01-10T00:00:00.000000 |