Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113280 | N/A | Use after free in Paint in Google Chrome prior to… |
Google |
Chrome |
2026-10-20T21:01:45.282Z | 2026-11-03T21:20:19.950Z |
| cve-2026-113072 | N/A | Use after free in CSS in Google Chrome prior to 1… |
Google |
Chrome |
2026-10-20T21:01:45.076Z | 2026-11-03T21:20:19.686Z |
| cve-2026-113279 | N/A | Use after free in Accessibility in Google Chrome … |
Google |
Chrome |
2026-10-20T21:01:44.528Z | 2026-11-03T21:20:19.410Z |
| cve-2026-113341 | N/A | Use after free in Skia in Google Chrome on on And… |
Google |
Chrome |
2026-10-20T21:01:44.083Z | 2026-11-03T21:20:19.121Z |
| cve-2026-112712 | 9.1 (v3.1) | @fastify/middie vulnerable to path-scoped middleware b… |
@fastify/middie |
@fastify/middie |
2026-10-20T20:43:48.681Z | 2026-10-30T17:17:28.727Z |
| cve-2026-112407 | 8.8 (v3.1) 8.7 (v4.0) | Incorrect privilege assignment in AWS CICD-toolchain-f… |
AWS |
CICD-toolchain-for-serverless-applications |
2026-10-20T20:34:40.192Z | 2026-10-28T20:04:37.868Z |
| cve-2016-20104 | 8.7 (v4.0) 7.5 (v3.1) | EyeLock nano NXT 3.05.1193 Path Traversal via logdownl… |
EyeLock |
nano NXT |
2026-10-20T20:31:29.589Z | 2026-10-23T15:15:18.506Z |
| cve-2016-20103 | 8.7 (v4.0) 7.5 (v3.1) | Cherry Plugin for WordPress < 1.2.7 Path Traversal via… |
Cherry Team |
Cherry Plugin |
2026-10-20T20:31:28.909Z | 2026-10-28T15:57:22.592Z |
| cve-2016-20102 | 5.1 (v4.0) 6.1 (v3.1) | JavaMelody < 1.60.0 Reflected XSS via monitoring graph… |
JavaMelody |
JavaMelody |
2026-10-20T20:31:28.188Z | 2026-10-21T15:52:04.853Z |
| cve-2016-20101 | 9.2 (v4.0) 8.1 (v3.1) | Issuu Panel WordPress Plugin < 1.6.6 File Inclusion vi… |
Pedro Marcelo |
Issuu Panel |
2026-10-20T20:31:27.518Z | 2026-10-27T11:05:45.289Z |
| cve-2016-20100 | 8.7 (v4.0) 7.5 (v3.1) | Memphis Documents Library WordPress Plugin < 3.1.6 Pat… |
Ian Howatson |
Memphis Documents Library |
2026-10-20T20:31:26.870Z | 2026-10-23T02:10:01.423Z |
| cve-2015-20128 | 8.8 (v4.0) 8.2 (v3.1) | FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx |
FooSun |
DotNetCMS |
2026-10-20T20:31:26.220Z | 2026-10-23T15:21:40.984Z |
| cve-2015-20125 | 8.7 (v4.0) 7.5 (v3.1) | Aspose PDF Exporter WordPress Plugin < 2.0 Path Traver… |
Aspose |
Aspose PDF Exporter |
2026-10-20T20:31:25.603Z | 2026-10-28T16:36:16.046Z |
| cve-2015-20124 | 8.7 (v4.0) 7.5 (v3.1) | Aspose Importer & Exporter WordPress Plugin < 3.0 Path… |
Aspose |
Aspose Importer & Exporter |
2026-10-20T20:31:24.966Z | 2026-10-21T15:52:13.050Z |
| cve-2015-20123 | 8.7 (v4.0) 7.5 (v3.1) | Aspose Doc Exporter WordPress Plugin < 2.0 Path Traver… |
Aspose |
Aspose Doc Exporter |
2026-10-20T20:31:24.275Z | 2026-10-27T11:04:49.594Z |
| cve-2014-125134 | 8.7 (v4.0) 7.5 (v3.1) | ChurcHope WordPress Theme < 2.2 Path Traversal via dow… |
ChurcHope |
ChurcHope |
2026-10-20T20:31:23.591Z | 2026-10-23T02:07:38.560Z |
| cve-2014-125133 | 8.7 (v4.0) 7.5 (v3.1) | NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do… |
imithemes |
NativeChurch |
2026-10-20T20:31:22.824Z | 2026-10-23T15:33:12.495Z |
| cve-2014-125132 | 5.1 (v4.0) 6.1 (v3.1) | Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS vi… |
Jason Newman |
Blogroll Fun |
2026-10-20T20:31:22.166Z | 2026-10-28T16:37:45.902Z |
| cve-2014-125131 | 5.1 (v4.0) 6.1 (v3.1) | DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in co… |
DedeCMS |
DedeCMS |
2026-10-20T20:31:21.514Z | 2026-10-21T15:52:20.155Z |
| cve-2012-20005 | 5.1 (v4.0) 6.1 (v3.1) | SocialFit WordPress Plugin 1.2.2 Reflected XSS via pop… |
Łukasz Więcek |
SocialFit |
2026-10-20T20:31:20.810Z | 2026-10-27T11:03:35.133Z |
| cve-2012-20004 | 5.1 (v4.0) 6.1 (v3.1) | K-news WordPress Plugin < 1.1.1 Reflected XSS via font… |
Carles Reverter |
K-news |
2026-10-20T20:31:19.801Z | 2026-10-23T02:04:53.688Z |
| cve-2012-20003 | 5.1 (v4.0) 6.1 (v3.1) | Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v… |
Web Updates KMU |
Custom Tables |
2026-10-20T20:31:19.033Z | 2026-10-23T15:25:44.876Z |
| cve-2012-20002 | 8.7 (v4.0) 7.5 (v3.1) | TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Pat… |
James Charlesworth |
TinyMCE Thumbnail Gallery |
2026-10-20T20:31:18.351Z | 2026-10-28T16:39:23.445Z |
| cve-2026-107929 | N/A | local interface connection reuse mixup |
curl |
curl |
2026-10-20T20:29:28.177Z | 2026-10-30T16:31:15.917Z |
| cve-2026-111758 | markdown-it: Quadratic-time rendering of a single mult… |
markdown-it |
markdown-it |
2026-10-20T20:28:40.677Z | 2026-10-28T16:40:33.483Z | |
| cve-2026-107928 | N/A | info leak uploading over WebSockets with GnuTLS |
curl |
curl |
2026-10-20T20:28:17.712Z | 2026-10-30T16:26:32.201Z |
| cve-2026-105960 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Improper… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:28:12.533Z | 2026-10-30T17:17:53.241Z |
| cve-2026-94266 | N/A | password leak in CURLINFO_EFFECTIVE_URL |
curl |
curl |
2026-10-20T20:27:21.585Z | 2026-10-30T16:22:24.369Z |
| cve-2026-110322 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Untruste… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:26:21.735Z | 2026-10-30T17:18:13.773Z |
| cve-2026-94265 | N/A | Authorization: Negotiate sent to foreign origin |
curl |
curl |
2026-10-20T20:26:18.061Z | 2026-10-30T16:19:18.095Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-502 | Multiples vulnérabilités dans les produits Cisco | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-501 | Multiples vulnérabilités dans Drupal | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-500 | Multiples vulnérabilités dans Moxa ThingsPro Gateway | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-499 | Vulnérabilité dans la bibliothèque libssh | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-498 | Multiples vulnérabilités dans Oracle MySQL | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-497 | Multiples vulnérabilités dans Oracle Virtualization | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-496 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-495 | Multiples vulnérabilités dans Oracle Java SE | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-494 | Multiples vulnérabilités dans Oracle Database | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-493 | Vulnérabilité dans VMware ESXi, Workstation et Fusion | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-492 | Multiples vulnérabilités dans Google Chrome | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-491 | Vulnérabilité dans Symantec Web Isolation | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-490 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-17T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-489 | Multiples vulnérabilités dans les produits Intel | 2018-10-12T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2018-avi-488 | Multiples vulnérabilités dans Wireshark | 2018-10-12T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-avi-487 | Multiples vulnérabilités dans les produits Juniper | 2018-10-11T00:00:00.000000 | 2018-10-11T00:00:00.000000 |
| certfr-2018-avi-486 | Multiples vulnérabilités dans les produits Microsoft | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-485 | Vulnérabilité dans Microsoft .Net | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-484 | Multiples vulnérabilités dans Microsoft Windows | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-483 | Multiples vulnérabilités dans Microsoft Office | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-482 | Multiples vulnérabilités dans Microsoft Edge | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-481 | Multiples vulnérabilités dans Microsoft IE | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-480 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-479 | Multiples vulnérabilités dans Joomla! | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-478 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-477 | Multiples vulnérabilités dans Google Chrome OS | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-476 | Multiples vulnérabilités dans SCADA Siemens | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |
| certfr-2018-avi-475 | Multiples vulnérabilités dans Apple iOS | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |
| certfr-2018-avi-474 | Multiples vulnérabilités dans Apple iCloud | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |
| certfr-2018-avi-473 | Vulnérabilité dans Moxa EDR-810 | 2018-10-08T00:00:00.000000 | 2018-10-08T00:00:00.000000 |