Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114572 | N/A | Domain Login Restrict - Moderately critical - Access b… |
Drupal |
Domain Login Restrict |
2026-10-30T03:09:19.330Z | 2026-10-30T19:54:33.247Z |
| cve-2026-7005 | 5.3 (v4.0) 6.1 (v3.1) | WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via C… |
WIT |
SynApps Runtime |
2026-10-30T19:01:12.466Z | 2026-10-30T19:52:12.878Z |
| cve-2026-59978 | AdminNeo: version-cache array injection causes persist… |
adminneo-org |
adminneo |
2026-10-30T18:53:04.957Z | 2026-10-30T19:50:24.134Z | |
| cve-2026-49442 | Cacti: User Enumeration via Error Messages |
Cacti |
cacti |
2026-10-23T14:45:13.062Z | 2026-10-30T19:50:20.165Z | |
| cve-2026-119328 | Immich: Unauthenticated filesystem path injection (arb… |
immich-app |
immich |
2026-10-30T19:50:02.460Z | 2026-10-30T19:50:02.460Z | |
| cve-2026-54532 | CloudPirates Open Source Helm Charts: pull_request_tar… |
CloudPirates-io |
helm-charts |
2026-10-22T17:16:38.540Z | 2026-10-30T19:47:13.018Z | |
| cve-2026-62331 | praktor: Telegram upload traversal permits persistent … |
mtzanidakis |
praktor |
2026-10-30T19:00:25.777Z | 2026-10-30T19:46:25.082Z | |
| cve-2026-114123 | D365 F&O MCP Server: Official Azure one-click deployme… |
dynamics365ninja |
d365fo-mcp-server |
2026-10-21T16:57:47.278Z | 2026-10-30T19:46:02.748Z | |
| cve-2026-120007 | 6.9 (v4.0) 6.5 (v3.1) | NodeBB 1.18.0 through 4.16.5 Authorization Bypass via … |
NodeBB |
NodeBB |
2026-10-30T18:52:57.828Z | 2026-10-30T19:42:51.208Z |
| cve-2026-61845 | Crass: Large numeric exponents cause CPU and memory de… |
rgrove |
crass |
2026-10-30T18:41:58.369Z | 2026-10-30T19:41:24.227Z | |
| cve-2026-107252 | N/A | MathJax: LaTeX for Drupal - Critical - Cross site scri… |
Drupal |
MathJax: LaTeX for Drupal |
2026-10-30T03:10:20.994Z | 2026-10-30T19:40:27.567Z |
| cve-2026-107251 | N/A | Entity Reference Manager (Merge entities) - Critical -… |
Drupal |
Entity Reference Manager (Merge entities) |
2026-10-30T03:10:22.038Z | 2026-10-30T19:39:48.437Z |
| cve-2026-62160 | Daptin: ParseAcceptLanguage `_` separator bypass enabl… |
daptin |
daptin |
2026-10-30T18:26:29.248Z | 2026-10-30T19:39:33.382Z | |
| cve-2026-107249 | N/A | Block AJAX - Highly critical - PHP object injection - … |
Drupal |
Block AJAX |
2026-10-30T03:10:24.115Z | 2026-10-30T19:38:37.015Z |
| cve-2026-95673 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:37:06.679Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE users should reference CVE-2026-92243 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:37:06.679Z | |
| cve-2026-97631 | 9.5 (v4.0) | Pre-boot RCE in EDK II PXE driver |
TianoCore |
EDK2 |
2026-10-22T16:32:27.619Z | 2026-10-30T19:34:40.851Z |
| cve-2026-114487 | N/A | Missing authorization in the PAM AD computer impo… |
Devolutions |
Server |
2026-10-22T15:48:35.922Z | 2026-10-30T19:33:39.484Z |
| cve-2026-115419 | 8.1 (v3.1) 8.6 (v4.0) | Unintended disclosure of data element to wrong session… |
AWS |
strands-agents |
2026-10-22T20:04:04.191Z | 2026-10-30T19:30:50.901Z |
| cve-2026-114655 | 6 (v4.0) 5.9 (v3.1) | KMS request injection via unsanitized key vault and pr… |
MongoDB |
libmongocrypt |
2026-10-22T19:14:00.708Z | 2026-10-30T19:30:19.252Z |
| cve-2026-114654 | 6.9 (v4.0) 6.5 (v3.1) | BSON output corruption via out-of-range binary subtype… |
MongoDB |
C# Driver |
2026-10-22T19:13:59.597Z | 2026-10-30T19:27:57.892Z |
| cve-2026-114653 | 7.1 (v4.0) 6.5 (v3.1) | Silent client-side encryption bypass via unescaped fie… |
MongoDB |
C# Driver |
2026-10-22T19:13:58.414Z | 2026-10-30T19:27:22.054Z |
| cve-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content |
franklioxygen |
MyTube |
2026-10-30T19:26:59.821Z | 2026-10-30T19:26:59.821Z | |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-114136 | Django REST framework: JSONParser applies an attacker-… |
encode |
django-rest-framework |
2026-10-21T20:02:41.030Z | 2026-10-30T19:24:46.203Z | |
| cve-2026-79884 | 8.2 (v3.1) | Authentication Bypass leads to Sensitive Information D… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:06.236Z | 2026-10-30T19:24:08.780Z |
| cve-2026-79883 | 8.3 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:05.048Z | 2026-10-30T19:23:20.891Z |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-79882 | 8.3 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:58.892Z | 2026-10-30T19:21:58.048Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-535 | Multiples vulnérabilités dans Nginx | 2018-11-07T00:00:00.000000 | 2018-11-07T00:00:00.000000 |
| certfr-2018-avi-533 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-11-07T00:00:00.000000 | 2018-11-07T00:00:00.000000 |
| certfr-2018-avi-532 | Multiples vulnérabilités dans Ruby On Rails | 2018-11-06T00:00:00.000000 | 2018-11-06T00:00:00.000000 |
| certfr-2018-avi-531 | Vulnérabilité dans Apache Struts | 2018-11-06T00:00:00.000000 | 2018-11-06T00:00:00.000000 |
| certfr-2018-avi-530 | Multiples vulnérabilités dans Google Android | 2018-11-06T00:00:00.000000 | 2018-11-06T00:00:00.000000 |
| certfr-2018-avi-529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-11-06T00:00:00.000000 | 2018-11-06T00:00:00.000000 |
| certfr-2018-avi-528 | Vulnérabilité dans les points d'accès Cisco | 2018-11-02T00:00:00.000000 | 2018-11-02T00:00:00.000000 |
| certfr-2018-avi-527 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-11-02T00:00:00.000000 | 2018-11-02T00:00:00.000000 |
| certfr-2018-avi-526 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-11-02T00:00:00.000000 | 2018-11-02T00:00:00.000000 |
| certfr-2018-avi-525 | Multiples vulnérabilités dans F5 BIG IP | 2018-10-31T00:00:00.000000 | 2018-11-02T00:00:00.000000 |
| certfr-2018-avi-524 | Multiples vulnérabilités dans les produits Apple | 2018-10-31T00:00:00.000000 | 2018-10-31T00:00:00.000000 |
| certfr-2018-avi-523 | Vulnérabilité dans Juniper Junos OS | 2018-10-31T00:00:00.000000 | 2018-10-31T00:00:00.000000 |
| certfr-2018-avi-522 | Vulnérabilité dans Ruby on Rails | 2018-10-31T00:00:00.000000 | 2018-10-31T00:00:00.000000 |
| certfr-2018-avi-521 | Vulnérabilité dans SCADA Schneider Electric Software Update | 2018-10-29T00:00:00.000000 | 2018-10-29T00:00:00.000000 |
| certfr-2018-avi-520 | Vulnérabilité dans Citrix XenServer | 2018-10-29T00:00:00.000000 | 2018-10-29T00:00:00.000000 |
| certfr-2018-avi-519 | Multiples vulnérabilités dans Google Chrome OS | 2018-10-29T00:00:00.000000 | 2018-10-29T00:00:00.000000 |
| certfr-2018-avi-518 | Multiples vulnérabilités dans Squid | 2018-10-29T00:00:00.000000 | 2018-10-29T00:00:00.000000 |
| certfr-2018-avi-517 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-26T00:00:00.000000 | 2018-10-26T00:00:00.000000 |
| certfr-2018-avi-516 | Vulnérabilité dans F5 BIG-IP | 2018-10-26T00:00:00.000000 | 2018-10-26T00:00:00.000000 |
| certfr-2018-avi-515 | Multiples vulnérabilités dans HP iLO | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-514 | Vulnérabilité dans Xen | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-513 | Vulnérabilité dans Cisco Webex Meetings Desktop App | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-512 | Vulnérabilité dans Citrix NetScaler | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-511 | Vulnérabilité dans les produits Tenable | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-510 | Multiples vulnérabilités dans Mozilla Firefox | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-509 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-508 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-507 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-506 | Multiples vulnérabilités dans Citrix SD-WAN | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-505 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |