Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content |
franklioxygen |
MyTube |
2026-10-30T19:26:59.821Z | 2026-10-30T19:26:59.821Z | |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-114136 | Django REST framework: JSONParser applies an attacker-… |
encode |
django-rest-framework |
2026-10-21T20:02:41.030Z | 2026-10-30T19:24:46.203Z | |
| cve-2026-79884 | 8.2 (v3.1) | Authentication Bypass leads to Sensitive Information D… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:06.236Z | 2026-10-30T19:24:08.780Z |
| cve-2026-79883 | 8.3 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:05.048Z | 2026-10-30T19:23:20.891Z |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-79882 | 8.3 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:58.892Z | 2026-10-30T19:21:58.048Z |
| cve-2026-118264 | Echo: Rejected WebSocket upgrades can bypass Echo rout… |
labstack |
echo |
2026-10-28T19:03:01.533Z | 2026-10-30T19:21:07.156Z | |
| cve-2026-79881 | 8.5 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:52.551Z | 2026-10-30T19:20:40.960Z |
| cve-2026-118260 | Echo: BodyDump captures request and response bodies wi… |
labstack |
echo |
2026-10-28T18:56:56.747Z | 2026-10-30T19:19:59.727Z | |
| cve-2026-79880 | 8.7 (v3.1) | Authenticated Server-Side Request Forgery leads to Rem… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:51.352Z | 2026-10-30T19:19:17.886Z |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-79879 | 8.8 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:49.285Z | 2026-10-30T19:17:50.418Z |
| cve-2026-79878 | 8.8 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:48.100Z | 2026-10-30T19:16:43.724Z |
| cve-2026-114510 | Flexible GraphRAG: Cypher/Graph Injection via broken s… |
stevereiner |
flexible-graphrag |
2026-10-22T14:46:52.353Z | 2026-10-30T19:16:29.340Z | |
| cve-2026-119763 | 6.9 (v4.0) 5.3 (v3.1) | changelog.com before commit 7b35e829 Missing Authoriza… |
thechangelog |
changelog.com |
2026-10-30T17:19:55.269Z | 2026-10-30T19:15:19.502Z |
| cve-2026-79877 | 8.8 (v3.1) | Unauthenticated Adjacent Remote Code Execution Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:46.912Z | 2026-10-30T19:14:45.772Z |
| cve-2026-79876 | 9.3 (v3.1) | Unauthenticated Adjacent Sensitive Information Disclos… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:45.563Z | 2026-10-30T19:13:38.215Z |
| cve-2026-79875 | 9.3 (v3.1) | Authentication Bypass in the PAPI Protocol of AOS-8 Al… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:43.906Z | 2026-10-30T19:12:17.655Z |
| cve-2026-79868 | 9.6 (v3.1) | Authentication Bypass Vulnerabilities lead to Complete… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:28.687Z | 2026-10-30T19:11:15.364Z |
| cve-2026-79867 | 9.6 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:26.627Z | 2026-10-30T19:10:04.525Z |
| cve-2026-118992 | N/A | CallBackery versions before 0.62.0 for Perl allow OS c… |
|
|
2026-10-30T13:11:55.375Z | 2026-10-30T19:08:35.108Z |
| cve-2026-79866 | 9.6 (v3.1) | Unauthenticated Adjacent Path Traversal Vulnerability … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:24.966Z | 2026-10-30T19:07:54.612Z |
| cve-2026-109213 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:07:08.177Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a reservation duplicate of CVE-2026-113499. Notes: All CVE users should reference CVE-2026-113499 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:07:08.177Z | |
| cve-2026-79865 | 9.6 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:23.329Z | 2026-10-30T19:05:15.216Z |
| cve-2026-73322 | Apache Pinot: Incorrect authorization in the single-st… |
Apache Software Foundation |
Apache Pinot |
2026-10-30T18:10:09.341Z | 2026-10-30T19:04:44.187Z | |
| cve-2026-79864 | 9.6 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:22.080Z | 2026-10-30T19:01:54.305Z |
| cve-2026-79863 | 9.6 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerabiliti… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:20.425Z | 2026-10-30T19:00:32.477Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-443 | Multiples vulnérabilités dans les produits Apple | 2018-09-18T00:00:00.000000 | 2018-09-19T00:00:00.000000 |
| certfr-2018-avi-442 | Vulnérabilité dans Google Chrome | 2018-09-18T00:00:00.000000 | 2018-09-18T00:00:00.000000 |
| certfr-2018-avi-441 | Multiples vulnérabilités dans Moodle | 2018-09-17T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-avi-440 | Vulnérabilité dans Prim'X Zed! | 2018-09-17T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-avi-439 | Multiples vulnérabilités dans PHP | 2018-09-14T00:00:00.000000 | 2018-09-14T00:00:00.000000 |
| certfr-2018-avi-438 | Multiples vulnérabilités dans les produits Microsoft | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-437 | Multiples vulnérabilités dans Microsoft .Net | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-436 | Multiples vulnérabilités dans Microsoft Windows | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-435 | Multiples vulnérabilités dans Microsoft Office | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-434 | Multiples vulnérabilités dans Microsoft Edge | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-433 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-432 | Multiples vulnérabilités dans les produits Intel | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-431 | Multiples vulnérabilités dans Google Chrome | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-430 | Multiples vulnérabilités dans Adobe Flash Player et Cold Fusion | 2018-09-12T00:00:00.000000 | 2018-09-12T00:00:00.000000 |
| certfr-2018-avi-429 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-428 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-427 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-11T00:00:00.000000 | 2018-09-11T00:00:00.000000 |
| certfr-2018-avi-426 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-07T00:00:00.000000 | 2018-09-07T00:00:00.000000 |
| certfr-2018-avi-425 | Multiples vulnérabilités dans VMware Content Locker et AirWatch Agent | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-424 | Multiples vulnérabilités dans Mozilla Firefox | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-423 | Multiples vulnérabilités dans les produits Cisco | 2018-09-06T00:00:00.000000 | 2018-09-06T00:00:00.000000 |
| certfr-2018-avi-422 | Multiples vulnérabilités dans Google Chrome | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-421 | Multiples vulnérabilités dans Google Android | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-420 | Vulnérabilité dans le noyau linux de RedHat | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-419 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-09-05T00:00:00.000000 | 2018-09-05T00:00:00.000000 |
| certfr-2018-avi-418 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-08-31T00:00:00.000000 | 2018-08-31T00:00:00.000000 |
| certfr-2018-avi-417 | Multiples vulnérabilités dans Wireshark | 2018-08-30T00:00:00.000000 | 2018-08-30T00:00:00.000000 |
| certfr-2018-avi-416 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-08-30T00:00:00.000000 | 2018-08-30T00:00:00.000000 |
| certfr-2018-avi-415 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-08-30T00:00:00.000000 | 2018-08-30T00:00:00.000000 |
| certfr-2018-avi-414 | Vulnérabilité dans Cisco Data Center Network Manager | 2018-08-29T00:00:00.000000 | 2018-08-29T00:00:00.000000 |