Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113662 | ApostropheCMS import-export: NoSQL injection via updat… |
apostrophecms |
apostrophe |
2026-10-20T17:13:07.765Z | 2026-10-20T19:05:20.680Z | |
| cve-2026-113661 | ApostropheCMS: Incomplete CVE-2026-53606: `meta http-e… |
apostrophecms |
apostrophe |
2026-10-20T17:11:20.577Z | 2026-10-21T15:53:24.980Z | |
| cve-2026-113660 | ApostropheCMS: Authenticated Object-Level Authorizatio… |
apostrophecms |
apostrophe |
2026-10-20T17:04:06.548Z | 2026-10-20T17:43:51.404Z | |
| cve-2026-113659 | ApostropheCMS: Client-side Prototype Pollution in apos… |
apostrophecms |
apostrophe |
2026-10-20T17:00:59.007Z | 2026-10-28T13:59:49.929Z | |
| cve-2026-113658 | ApostropheCMS: Unauthenticated CSV import requests lea… |
apostrophecms |
apostrophe |
2026-10-20T16:56:01.862Z | 2026-10-23T01:55:01.966Z | |
| cve-2026-92539 | Cross-organization user modification and deletion via … |
Grafana |
Grafana Enterprise |
2026-10-20T16:55:17.875Z | 2026-10-20T18:08:00.621Z | |
| cve-2026-113657 | ApostropheCMS sanitize-html: SMIL animation namespace-… |
apostrophecms |
apostrophe |
2026-10-20T16:54:12.995Z | 2026-10-20T17:08:06.854Z | |
| cve-2026-113656 | ApostropheCMS: Unauthenticated unbounded multipart upl… |
apostrophecms |
apostrophe |
2026-10-20T16:49:36.239Z | 2026-10-21T15:53:31.741Z | |
| cve-2026-113649 | ApostropheCMS: Import API bypasses publication roles f… |
apostrophecms |
apostrophe |
2026-10-20T16:40:16.363Z | 2026-10-23T01:53:33.434Z | |
| cve-2026-113655 | ApostropheCMS: Same-parent page reorder in @apostrophe… |
apostrophecms |
apostrophe |
2026-10-20T16:38:27.002Z | 2026-10-20T17:19:00.773Z | |
| cve-2026-113654 | ApostropheCMS sanitize-html: nonTextTags discard regio… |
apostrophecms |
apostrophe |
2026-10-20T16:35:55.161Z | 2026-10-28T14:01:09.403Z | |
| cve-2026-113653 | ApostropheCMS: The general public can access @apostrop… |
apostrophecms |
apostrophe |
2026-10-20T16:30:48.998Z | 2026-10-20T17:00:29.913Z | |
| cve-2026-113652 | ApostropheCMS uploadfs Azure backend leaks account-lev… |
apostrophecms |
apostrophe |
2026-10-20T16:26:21.986Z | 2026-10-21T15:53:38.704Z | |
| cve-2026-28330 | 4.6 (v3.1) | SolarWinds Observability Self-Hosted Cross-Site Script… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:23:19.940Z | 2026-10-23T16:04:14.841Z |
| cve-2026-28329 | 6.4 (v3.1) | SolarWinds Observability Self-Hosted Server-Side Reque… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:22:48.111Z | 2026-10-23T16:00:53.960Z |
| cve-2026-113651 | ApostropheCMS: Path traversal in uploadfs |
apostrophecms |
apostrophe |
2026-10-20T16:22:30.842Z | 2026-10-20T17:20:31.152Z | |
| cve-2026-113650 | ApostropheCMS sanitize-html: unbounded recursion when … |
apostrophecms |
apostrophe |
2026-10-20T16:19:12.100Z | 2026-10-28T14:02:38.500Z | |
| cve-2026-28328 | 8.8 (v3.1) | SolarWinds Observability Self-Hosted broken authorizat… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:17:18.712Z | 2026-10-23T15:58:55.705Z |
| cve-2026-113505 | aaPanel Download Endpoint v2.py send_file path traversal |
n/a |
aaPanel |
2026-10-20T16:15:14.151Z | 2026-10-21T15:53:45.957Z | |
| cve-2026-28331 | 4.4 (v3.1) | SolarWinds Patch Manager Sensitive Information Exposur… |
SolarWinds |
Patch Manager |
2026-10-20T16:11:48.581Z | 2026-10-20T16:59:30.352Z |
| cve-2026-113648 | ApostropheCMS: Missing Authentication in `cleanExport` Route |
apostrophecms |
apostrophe |
2026-10-20T16:07:49.138Z | 2026-10-23T01:52:13.055Z | |
| cve-2026-112958 | ApostropheCMS: Stored XSS via Unescaped Widget Style A… |
apostrophecms |
apostrophe |
2026-10-20T16:03:53.041Z | 2026-10-20T16:59:06.566Z | |
| cve-2026-112957 | ApostropheCMS: GET /api/v1/@apostrophecms/page/:id byp… |
apostrophecms |
apostrophe |
2026-10-20T16:02:17.803Z | 2026-10-21T15:53:52.415Z | |
| cve-2026-112956 | ApostropheCMS: Archive duplicate continuation lets con… |
apostrophecms |
apostrophe |
2026-10-20T15:57:27.287Z | 2026-10-20T16:15:02.976Z | |
| cve-2026-113703 | 9.1 (v4.0) 9.3 (v3.1) | SuggestArr before 3.0.0 Authentication Bypass via X-Fo… |
giuseppe99barchetta |
SuggestArr |
2026-10-20T15:56:49.963Z | 2026-10-23T13:28:34.182Z |
| cve-2026-112955 | ApostropheCMS: Import archives can exhaust server stor… |
apostrophecms |
apostrophe |
2026-10-20T15:53:04.154Z | 2026-10-26T19:38:31.127Z | |
| cve-2026-112954 | ApostropheCMS: Unauthenticated publicApiProjection byp… |
apostrophecms |
apostrophe |
2026-10-20T15:51:01.621Z | 2026-10-23T01:50:55.523Z | |
| cve-2026-112953 | ApostropheCMS: Exposure of Sensitive Information via p… |
apostrophecms |
apostrophe |
2026-10-20T15:47:25.640Z | 2026-10-20T16:22:21.269Z | |
| cve-2026-112952 | ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTak… |
apostrophecms |
apostrophe |
2026-10-20T15:44:33.564Z | 2026-10-21T15:53:58.636Z | |
| cve-2026-107755 | 6 (v4.0) | Apache CouchDB: Credential Disclosure to Non-Owner Mem… |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:41:22.248Z | 2026-10-20T18:09:53.132Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-352 | Multiples vulnérabilités dans les produits Cisco | 2018-07-19T00:00:00.000000 | 2018-07-19T00:00:00.000000 |
| certfr-2018-avi-351 | Multiples vulnérabilités dans Oracle Virtualization | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-350 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-349 | Multiples vulnérabilités dans Oracle MySQL | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-348 | Multiples vulnérabilités dans Oracle Java SE | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-347 | Multiples vulnérabilités dans Oracle Database Server | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-346 | Vulnérabilité dans le noyau Linux de RedHat | 2018-07-18T00:00:00.000000 | 2018-07-18T00:00:00.000000 |
| certfr-2018-avi-345 | Vulnérabilité dans Juniper Junos OS | 2018-07-16T00:00:00.000000 | 2018-07-16T00:00:00.000000 |
| certfr-2018-avi-344 | Multiples vulnérabilités dans Moodle | 2018-07-16T00:00:00.000000 | 2018-07-16T00:00:00.000000 |
| certfr-2018-avi-343 | Multiples vulnérabilités dans les produits Fortinet | 2018-07-16T00:00:00.000000 | 2018-07-16T00:00:00.000000 |
| certfr-2018-avi-342 | Vulnérabilité dans le noyau Linux de SUSE | 2018-07-13T00:00:00.000000 | 2018-07-16T00:00:00.000000 |
| certfr-2018-avi-341 | Multiples vulnérabilités dans les produits Cisco | 2018-07-12T00:00:00.000000 | 2018-07-12T00:00:00.000000 |
| certfr-2018-avi-340 | Multiples vulnérabilités dans SCADA Siemens | 2018-07-12T00:00:00.000000 | 2018-07-12T00:00:00.000000 |
| certfr-2018-avi-339 | Multiples vulnérabilités dans les produits Juniper | 2018-07-12T00:00:00.000000 | 2018-07-12T00:00:00.000000 |
| certfr-2018-avi-338 | Multiples vulnérabilités dans les produits Microsoft | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-337 | Multiples vulnérabilités dans Microsoft .Net | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-336 | Multiples vulnérabilités dans Microsoft Windows | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-335 | Multiples vulnérabilités dans Microsoft Office | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-334 | Multiples vulnérabilités dans Microsoft Edge | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-333 | Multiples vulnérabilités dans Microsoft IE | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-332 | Multiples vulnérabilités dans Adobe Flash Player | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-331 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-330 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2018-07-11T00:00:00.000000 | 2018-07-11T00:00:00.000000 |
| certfr-2018-avi-329 | Multiples vulnérabilités dans les produits Apple | 2018-07-10T00:00:00.000000 | 2018-07-10T00:00:00.000000 |
| certfr-2018-avi-328 | Vulnérabilité dans Juniper Junos OS CLI | 2018-07-10T00:00:00.000000 | 2018-07-10T00:00:00.000000 |
| certfr-2018-avi-327 | Vulnérabilité dans WordPress | 2018-07-06T00:00:00.000000 | 2018-07-06T00:00:00.000000 |
| certfr-2018-avi-326 | Vulnérabilité dans Fortinet FortiManager et FortiAnalyzer | 2018-07-06T00:00:00.000000 | 2018-07-06T00:00:00.000000 |
| certfr-2018-avi-325 | Vulnérabilité dans TenableCore Web Application Scanner | 2018-07-06T00:00:00.000000 | 2018-07-06T00:00:00.000000 |
| certfr-2018-avi-324 | Multiples vulnérabilités dans Apple Wi-Fi Update for Boot Camp | 2018-07-06T00:00:00.000000 | 2018-07-06T00:00:00.000000 |
| certfr-2018-avi-323 | Vulnérabilité dans VideoLAN VLC | 2018-07-06T00:00:00.000000 | 2018-07-06T00:00:00.000000 |