Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116672 | Authlib RFC 7592 examples omit registration-access-tok… |
authlib |
authlib |
2026-10-27T16:31:48.429Z | 2026-10-30T20:15:42.022Z | |
| cve-2026-114620 | Authlib: Unvalidated request_uri fetch in JWT-secured … |
authlib |
authlib |
2026-10-22T21:34:11.909Z | 2026-10-30T20:14:29.752Z | |
| cve-2026-58412 | Filecoin Pin: Fork bypass in the privileged GitHub Act… |
filecoin-project |
filecoin-pin |
2026-10-30T20:12:50.288Z | 2026-10-30T20:12:50.288Z | |
| cve-2026-59387 | 8.8 (v3.1) | Broken access control restriction in Cloud Controller API |
Cloud Foundry |
CAPI (Cloud Controller API) |
2026-10-30T08:47:59.006Z | 2026-10-30T20:10:53.458Z |
| cve-2026-119337 | RAGFlow: OpenAI-compatible agent completion bypasses p… |
infiniflow |
ragflow |
2026-10-30T20:10:27.373Z | 2026-10-30T20:10:27.373Z | |
| cve-2026-59396 | 6.9 (v4.0) 4.9 (v3.1) | DoS Vulnerability in UAA Related to JWKS URI Handling |
Cloud Foundry |
UAA |
2026-10-30T08:24:47.718Z | 2026-10-30T20:10:01.484Z |
| cve-2026-107267 | N/A | DKAN - Moderately critical - Access bypass - SA-CONTRI… |
Drupal |
DKAN |
2026-10-30T03:10:07.093Z | 2026-10-30T20:09:13.860Z |
| cve-2026-107268 | N/A | Two Factor Authentication - TFA / Passwordless Login -… |
Drupal |
Two Factor Authentication - TFA / Passwordless Login |
2026-10-30T03:10:08.179Z | 2026-10-30T20:08:45.383Z |
| cve-2026-96389 | N/A | Xray Audit - Moderately critical - Access bypass - SA-… |
Drupal |
Xray Audit |
2026-10-30T03:10:09.246Z | 2026-10-30T20:08:09.645Z |
| cve-2026-114616 | Authlib accepts an empty HMAC key, allowing JWS/JWT si… |
authlib |
authlib |
2026-10-22T21:14:03.060Z | 2026-10-30T20:07:37.170Z | |
| cve-2026-107265 | N/A | Leaflet - Moderately critical - Cross site scripting -… |
Drupal |
Leaflet |
2026-10-30T03:10:11.422Z | 2026-10-30T20:07:36.234Z |
| cve-2026-100517 | 7.5 (v3.1) | WordPress Photo Reviews for WooCommerce plugin <= 1.2.… |
VillaTheme |
Photo Reviews for WooCommerce |
2026-10-01T14:34:05.498Z | 2026-10-30T20:07:13.094Z |
| cve-2026-107264 | N/A | Inline Formatter Field - Moderately critical - Server-… |
Drupal |
Inline Formatter Field |
2026-10-30T03:10:12.569Z | 2026-10-30T20:06:44.137Z |
| cve-2026-107263 | N/A | Gutenberg - Moderately critical - Access bypass - SA-C… |
Drupal |
Gutenberg |
2026-10-30T03:10:13.713Z | 2026-10-30T20:06:20.756Z |
| cve-2026-107261 | N/A | Authenticator Login Plus (2FA) - Moderately critical -… |
Drupal |
Authenticator Login Plus (2FA) |
2026-10-30T03:10:14.755Z | 2026-10-30T20:05:50.940Z |
| cve-2026-115957 | 6.5 (v3.1) | WordPress WP Discussion Board plugin <= 2.6.0 - Cross … |
WP Discussion Board |
WP Discussion Board |
2026-10-28T13:00:12.485Z | 2026-10-30T20:05:31.800Z |
| cve-2026-107259 | N/A | Linked Field - Moderately critical - Server-side templ… |
Drupal |
Linked Field |
2026-10-30T03:10:15.793Z | 2026-10-30T20:05:19.615Z |
| cve-2026-107258 | N/A | Inline Entity Form Dialog - Moderately critical - Acce… |
Drupal |
Inline Entity Form Dialog |
2026-10-30T03:10:16.826Z | 2026-10-30T20:04:49.660Z |
| cve-2026-109697 | 6.5 (v3.1) | WordPress SureCart plugin <= 4.9.4 - Cross Site Script… |
Brainstorm Force |
SureCart |
2026-10-13T08:41:17.199Z | 2026-10-30T20:04:49.375Z |
| cve-2026-119086 | 6.5 (v3.1) 8.2 (v4.0) | Missing type validation in xQueueSelectFromSet in Free… |
FreeRTOS |
FreeRTOS-Kernel |
2026-10-30T17:33:51.535Z | 2026-10-30T20:04:33.929Z |
| cve-2026-114622 | baserCMS: Encoded path traversal bypass in the theme f… |
baserproject |
basercms |
2026-10-23T13:41:33.272Z | 2026-10-30T20:04:28.351Z | |
| cve-2026-111411 | 9.3 (v3.1) | WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQ… |
Aman |
FunnelKit Automations |
2026-10-28T13:00:13.279Z | 2026-10-30T20:04:18.969Z |
| cve-2026-107250 | N/A | ECA Helper - Critical - Unsupported - SA-CONTRIB-2026-193 |
Drupal |
ECA Helper |
2026-10-30T03:10:23.038Z | 2026-10-30T20:04:17.822Z |
| cve-2026-107253 | N/A | Orphans Media - Critical - Unsupported - SA-CONTRIB-2026-196 |
Drupal |
Orphans Media |
2026-10-30T03:10:19.921Z | 2026-10-30T20:03:41.322Z |
| cve-2026-62335 | OpenVM's OpenVmHalo2Verifier accepts non-canonical app… |
openvm-org |
openvm |
2026-10-30T20:03:14.543Z | 2026-10-30T20:03:14.543Z | |
| cve-2026-115479 | baserCMS: Mail-form auto-replies accept multiple visit… |
baserproject |
basercms |
2026-10-23T13:36:01.655Z | 2026-10-30T20:03:07.037Z | |
| cve-2026-78403 | 9.3 (v4.0) 9.8 (v3.1) | Unauthenticated Stack Buffer Overflow in Sentinel Keys… |
Thalesgroup |
Sentinel Keys Server |
2026-10-30T19:12:56.080Z | 2026-10-30T20:02:33.210Z |
| cve-2026-112677 | N/A | An authorization issue was addressed with improve… |
Apple |
macOS |
2026-10-26T20:43:20.413Z | 2026-10-30T20:02:26.419Z |
| cve-2026-79858 | 9.8 (v3.1) | Unauthenticated SQL Injection Vulnerability in the PAP… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:08.166Z | 2026-10-30T20:02:13.175Z |
| cve-2026-79846 | 10 (v3.1) | Unauthenticated Command Injection Vulnerabilities in AOS-8 |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:47.248Z | 2026-10-30T20:02:01.019Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-avi-012 | Multiples vulnérabilités dans Cisco Email Security Appliance (ESA) | 2019-01-10T00:00:00.000000 | 2019-01-10T00:00:00.000000 |
| certfr-2019-avi-011 | Multiples vulnérabilités dans les produits Microsoft | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-010 | Multiples vulnérabilités dans Microsoft .Net | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-009 | Multiples vulnérabilités dans Microsoft Windows | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-008 | Multiples vulnérabilités dans Microsoft Office | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-007 | Multiples vulnérabilités dans Microsoft Edge | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-006 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-005 | Multiples vulnérabilités dans Wireshark | 2019-01-09T00:00:00.000000 | 2019-01-09T00:00:00.000000 |
| certfr-2019-avi-004 | SCADA Multiples vulnérabilités dans les produits Siemens | 2019-01-08T00:00:00.000000 | 2019-01-08T00:00:00.000000 |
| certfr-2019-avi-003 | Multiples vulnérabilités dans Google Android | 2019-01-08T00:00:00.000000 | 2019-01-08T00:00:00.000000 |
| certfr-2019-avi-002 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2019-01-04T00:00:00.000000 | 2019-01-04T00:00:00.000000 |
| certfr-2019-avi-001 | SCADA Vulnérabilité dans Schneider Electric Zelio Soft | 2019-01-03T00:00:00.000000 | 2019-01-03T00:00:00.000000 |
| certfr-2018-avi-612 | SCADA Vulnérabilité dans Schneider Electric Power Monitoring Expert et Energy Expert | 2018-12-26T00:00:00.000000 | 2018-12-26T00:00:00.000000 |
| certfr-2018-avi-611 | Multiples vulnérabilités dans Fortinet FortiClient | 2018-12-24T00:00:00.000000 | 2018-12-24T00:00:00.000000 |
| certfr-2018-avi-610 | SCADA Multiples vulnérabilités dans les produits Schneider Electric | 2018-12-24T00:00:00.000000 | 2018-12-24T00:00:00.000000 |
| certfr-2018-avi-609 | Multiples vulnérabilités dans F5 BIG-IP | 2018-12-21T00:00:00.000000 | 2018-12-21T00:00:00.000000 |
| certfr-2018-avi-608 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-12-21T00:00:00.000000 | 2018-12-21T00:00:00.000000 |
| certfr-2018-avi-607 | Multiples vulnérabilités dans Tenable Nessus | 2018-12-21T00:00:00.000000 | 2018-12-21T00:00:00.000000 |
| certfr-2018-avi-603 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-12-18T00:00:00.000000 | 2018-12-21T00:00:00.000000 |
| certfr-2018-avi-606 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2018-12-20T00:00:00.000000 |
| certfr-2018-avi-605 | Vulnérabilité dans le logiciel Cisco ASA | 2018-12-20T00:00:00.000000 | 2018-12-20T00:00:00.000000 |
| certfr-2018-avi-604 | Vulnérabilité dans VMware vRealize Operations | 2018-12-19T00:00:00.000000 | 2018-12-19T00:00:00.000000 |
| certfr-2018-avi-602 | Multiples vulnérabilités dans Google Chrome OS | 2018-12-18T00:00:00.000000 | 2018-12-18T00:00:00.000000 |
| certfr-2018-avi-601 | Multiples vulnérabilités dans Moxa NPort | 2018-12-13T00:00:00.000000 | 2018-12-13T00:00:00.000000 |
| certfr-2018-avi-600 | Multiples vulnérabilités dans WordPress | 2018-12-13T00:00:00.000000 | 2018-12-13T00:00:00.000000 |
| certfr-2018-avi-599 | Vulnérabilité dans Google Chrome | 2018-12-13T00:00:00.000000 | 2018-12-13T00:00:00.000000 |
| certfr-2018-avi-598 | Multiples vulnérabilités dans les produits Microsoft | 2018-12-12T00:00:00.000000 | 2018-12-12T00:00:00.000000 |
| certfr-2018-avi-597 | Multiples vulnérabilités dans Microsoft .Net | 2018-12-12T00:00:00.000000 | 2018-12-12T00:00:00.000000 |
| certfr-2018-avi-596 | Multiples vulnérabilités dans Microsoft Windows | 2018-12-12T00:00:00.000000 | 2018-12-12T00:00:00.000000 |
| certfr-2018-avi-595 | Multiples vulnérabilités dans Microsoft Office | 2018-12-12T00:00:00.000000 | 2018-12-12T00:00:00.000000 |