Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107252 | N/A | MathJax: LaTeX for Drupal - Critical - Cross site scri… |
Drupal |
MathJax: LaTeX for Drupal |
2026-10-30T03:10:20.994Z | 2026-10-30T19:40:27.567Z |
| cve-2026-107251 | N/A | Entity Reference Manager (Merge entities) - Critical -… |
Drupal |
Entity Reference Manager (Merge entities) |
2026-10-30T03:10:22.038Z | 2026-10-30T19:39:48.437Z |
| cve-2026-62160 | Daptin: ParseAcceptLanguage `_` separator bypass enabl… |
daptin |
daptin |
2026-10-30T18:26:29.248Z | 2026-10-30T19:39:33.382Z | |
| cve-2026-107249 | N/A | Block AJAX - Highly critical - PHP object injection - … |
Drupal |
Block AJAX |
2026-10-30T03:10:24.115Z | 2026-10-30T19:38:37.015Z |
| cve-2026-95673 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:37:06.679Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE users should reference CVE-2026-92243 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:37:06.679Z | |
| cve-2026-97631 | 9.5 (v4.0) | Pre-boot RCE in EDK II PXE driver |
TianoCore |
EDK2 |
2026-10-22T16:32:27.619Z | 2026-10-30T19:34:40.851Z |
| cve-2026-114487 | N/A | Missing authorization in the PAM AD computer impo… |
Devolutions |
Server |
2026-10-22T15:48:35.922Z | 2026-10-30T19:33:39.484Z |
| cve-2026-115419 | 8.1 (v3.1) 8.6 (v4.0) | Unintended disclosure of data element to wrong session… |
AWS |
strands-agents |
2026-10-22T20:04:04.191Z | 2026-10-30T19:30:50.901Z |
| cve-2026-114655 | 6 (v4.0) 5.9 (v3.1) | KMS request injection via unsanitized key vault and pr… |
MongoDB |
libmongocrypt |
2026-10-22T19:14:00.708Z | 2026-10-30T19:30:19.252Z |
| cve-2026-114654 | 6.9 (v4.0) 6.5 (v3.1) | BSON output corruption via out-of-range binary subtype… |
MongoDB |
C# Driver |
2026-10-22T19:13:59.597Z | 2026-10-30T19:27:57.892Z |
| cve-2026-114653 | 7.1 (v4.0) 6.5 (v3.1) | Silent client-side encryption bypass via unescaped fie… |
MongoDB |
C# Driver |
2026-10-22T19:13:58.414Z | 2026-10-30T19:27:22.054Z |
| cve-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content |
franklioxygen |
MyTube |
2026-10-30T19:26:59.821Z | 2026-10-30T19:26:59.821Z | |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-114136 | Django REST framework: JSONParser applies an attacker-… |
encode |
django-rest-framework |
2026-10-21T20:02:41.030Z | 2026-10-30T19:24:46.203Z | |
| cve-2026-79884 | 8.2 (v3.1) | Authentication Bypass leads to Sensitive Information D… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:06.236Z | 2026-10-30T19:24:08.780Z |
| cve-2026-79883 | 8.3 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:05.048Z | 2026-10-30T19:23:20.891Z |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-79882 | 8.3 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:58.892Z | 2026-10-30T19:21:58.048Z |
| cve-2026-118264 | Echo: Rejected WebSocket upgrades can bypass Echo rout… |
labstack |
echo |
2026-10-28T19:03:01.533Z | 2026-10-30T19:21:07.156Z | |
| cve-2026-79881 | 8.5 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:52.551Z | 2026-10-30T19:20:40.960Z |
| cve-2026-118260 | Echo: BodyDump captures request and response bodies wi… |
labstack |
echo |
2026-10-28T18:56:56.747Z | 2026-10-30T19:19:59.727Z | |
| cve-2026-79880 | 8.7 (v3.1) | Authenticated Server-Side Request Forgery leads to Rem… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:51.352Z | 2026-10-30T19:19:17.886Z |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-79879 | 8.8 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:49.285Z | 2026-10-30T19:17:50.418Z |
| cve-2026-79878 | 8.8 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:48.100Z | 2026-10-30T19:16:43.724Z |
| cve-2026-114510 | Flexible GraphRAG: Cypher/Graph Injection via broken s… |
stevereiner |
flexible-graphrag |
2026-10-22T14:46:52.353Z | 2026-10-30T19:16:29.340Z | |
| cve-2026-119763 | 6.9 (v4.0) 5.3 (v3.1) | changelog.com before commit 7b35e829 Missing Authoriza… |
thechangelog |
changelog.com |
2026-10-30T17:19:55.269Z | 2026-10-30T19:15:19.502Z |
| cve-2026-79877 | 8.8 (v3.1) | Unauthenticated Adjacent Remote Code Execution Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:46.912Z | 2026-10-30T19:14:45.772Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-473 | Vulnérabilité dans Moxa EDR-810 | 2018-10-08T00:00:00.000000 | 2018-10-08T00:00:00.000000 |
| certfr-2018-avi-472 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-08T00:00:00.000000 | 2018-10-08T00:00:00.000000 |
| certfr-2018-avi-471 | Vulnérabilité dans VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) | 2018-10-05T00:00:00.000000 | 2018-10-05T00:00:00.000000 |
| certfr-2018-avi-470 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-05T00:00:00.000000 | 2018-10-05T00:00:00.000000 |
| certfr-2018-avi-469 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-10-05T00:00:00.000000 | 2018-10-05T00:00:00.000000 |
| certfr-2018-avi-468 | Multiples vulnérabilités dans les produits Cisco | 2018-10-04T00:00:00.000000 | 2018-10-04T00:00:00.000000 |
| certfr-2018-avi-467 | Multiples vulnérabilités dans Mozilla Firefox | 2018-10-03T00:00:00.000000 | 2018-10-03T00:00:00.000000 |
| certfr-2018-avi-466 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-03T00:00:00.000000 | 2018-10-03T00:00:00.000000 |
| certfr-2018-avi-462 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-10-02T00:00:00.000000 | 2018-10-03T00:00:00.000000 |
| certfr-2018-avi-465 | Multiples vulnérabilités dans Google Android | 2018-10-02T00:00:00.000000 | 2018-10-02T00:00:00.000000 |
| certfr-2018-avi-464 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2018-10-02T00:00:00.000000 | 2018-10-02T00:00:00.000000 |
| certfr-2018-avi-463 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-02T00:00:00.000000 | 2018-10-02T00:00:00.000000 |
| certfr-2018-avi-461 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-01T00:00:00.000000 | 2018-10-01T00:00:00.000000 |
| certfr-2018-avi-460 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-28T00:00:00.000000 | 2018-09-28T00:00:00.000000 |
| certfr-2018-avi-459 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-27T00:00:00.000000 | 2018-09-27T00:00:00.000000 |
| certfr-2018-avi-458 | Multiples vulnérabilités dans les produits Cisco | 2018-09-27T00:00:00.000000 | 2018-09-27T00:00:00.000000 |
| certfr-2018-avi-457 | Multiples vulnérabilités dans le noyau linux de RedHat | 2018-09-26T00:00:00.000000 | 2018-09-26T00:00:00.000000 |
| certfr-2018-avi-456 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-26T00:00:00.000000 | 2018-09-26T00:00:00.000000 |
| certfr-2018-avi-455 | Multiples vulnérabilités dans Apple macOS | 2018-09-25T00:00:00.000000 | 2018-09-25T00:00:00.000000 |
| certfr-2018-avi-454 | Multiples vulnérabilités dans Cisco Identity Services Engine | 2018-09-25T00:00:00.000000 | 2018-09-25T00:00:00.000000 |
| certfr-2018-avi-453 | Vulnérabilité dans Bind | 2018-09-24T00:00:00.000000 | 2018-09-24T00:00:00.000000 |
| certfr-2018-avi-452 | Vulnérabilité dans Asterisk | 2018-09-24T00:00:00.000000 | 2018-09-24T00:00:00.000000 |
| certfr-2018-avi-451 | Multiples vulnérabilités dans Mozilla Firefox | 2018-09-24T00:00:00.000000 | 2018-09-24T00:00:00.000000 |
| certfr-2018-avi-450 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-24T00:00:00.000000 | 2018-09-24T00:00:00.000000 |
| certfr-2018-avi-449 | Vulnérabilité dans Cisco Video Surveillance Manager | 2018-09-24T00:00:00.000000 | 2018-09-24T00:00:00.000000 |
| certfr-2018-avi-448 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-21T00:00:00.000000 | 2018-09-21T00:00:00.000000 |
| certfr-2018-avi-447 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2018-09-20T00:00:00.000000 | 2018-09-20T00:00:00.000000 |
| certfr-2018-avi-446 | Multiples vulnérabilités dans Cisco Webex Network Recording Player | 2018-09-20T00:00:00.000000 | 2018-09-20T00:00:00.000000 |
| certfr-2018-avi-445 | Multiples vulnérabilités dans Citrix ShareFile StorageZones Controller | 2018-09-20T00:00:00.000000 | 2018-09-20T00:00:00.000000 |
| certfr-2018-avi-444 | Multiples vulnérabilités dans Google Chrome OS | 2018-09-19T00:00:00.000000 | 2018-09-19T00:00:00.000000 |