Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-90800 | 8.1 (v4.0) | Apache CouchDB: Auth bypass in prefixed _users and _re… |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:40:47.497Z | 2026-10-20T18:10:09.013Z |
| cve-2026-113683 | 5.1 (v4.0) 6.1 (v3.1) | VPL for Moodle before 5.0.0 Reflected XSS via similari… |
jcrodriguez-dis |
moodle-mod_vpl |
2026-10-20T15:40:43.190Z | 2026-10-23T01:48:46.789Z |
| cve-2026-113682 | 9.1 (v4.0) 7.4 (v3.1) | Networknt light-4j 2.1.5 before 2.4.0 Authentication B… |
networknt |
light-4j |
2026-10-20T15:40:42.500Z | 2026-10-23T13:51:42.196Z |
| cve-2026-113681 | 6.8 (v4.0) 5.5 (v3.1) | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, an… |
AcademySoftwareFoundation |
OpenImageIO |
2026-10-20T15:40:41.797Z | 2026-10-22T09:49:36.614Z |
| cve-2026-113680 | 6.8 (v4.0) 5.5 (v3.1) | HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL … |
harfbuzz |
harfbuzz |
2026-10-20T15:40:41.101Z | 2026-10-21T15:54:08.462Z |
| cve-2026-113679 | 7.3 (v4.0) 7 (v3.1) | HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via … |
harfbuzz |
harfbuzz |
2026-10-20T15:40:40.379Z | 2026-10-20T16:21:50.578Z |
| cve-2026-113678 | 9.4 (v4.0) 9.9 (v3.1) | Froxlor before 2.3.15 Symlink Following Privilege Esca… |
froxlor |
froxlor |
2026-10-20T15:40:39.663Z | 2026-10-23T01:47:53.132Z |
| cve-2026-113677 | 5.3 (v4.0) 5.4 (v3.1) | Froxlor 0.10.0 before 2.3.15 Missing Authorization via… |
froxlor |
froxlor |
2026-10-20T15:40:38.974Z | 2026-10-20T18:10:52.493Z |
| cve-2026-113676 | 5.3 (v4.0) 4.3 (v3.1) | Froxlor 0.10.0 before 2.3.15 Authorization Bypass via … |
froxlor |
froxlor |
2026-10-20T15:40:38.273Z | 2026-10-20T16:20:58.011Z |
| cve-2026-113613 | 9.2 (v4.0) 8.1 (v3.1) | FlexGet before 3.20.7 Path Traversal (Zip Slip) via de… |
FlexGet |
FlexGet |
2026-10-20T15:40:37.585Z | 2026-10-21T15:54:14.661Z |
| cve-2026-113612 | 5.3 (v4.0) 5.4 (v3.1) | SparkyFitness before 0.17.0 Missing Authorization via … |
CodeWithCJ |
SparkyFitness |
2026-10-20T15:40:36.888Z | 2026-10-20T16:25:31.674Z |
| cve-2026-113611 | 6.9 (v4.0) 4.9 (v3.1) | Outline before 1.8.0 Information Disclosure via Orphan… |
outline |
outline |
2026-10-20T15:40:36.179Z | 2026-10-23T01:46:58.619Z |
| cve-2026-113610 | 5.3 (v4.0) 5.4 (v3.1) | Xen Orchestra before 6.9.0 Authorization Bypass via us… |
vatesfr |
xen-orchestra |
2026-10-20T15:40:35.476Z | 2026-10-20T18:19:50.195Z |
| cve-2026-113609 | 4.8 (v4.0) 3.3 (v3.1) | Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass … |
Bandisoft |
Bandizip |
2026-10-20T15:40:34.772Z | 2026-10-20T16:20:16.264Z |
| cve-2026-113608 | 6 (v4.0) 5.3 (v3.1) | Configurable Reports block for Moodle before 5.3.1 SQL… |
jleyva |
moodle-block_configurablereports |
2026-10-20T15:40:34.083Z | 2026-10-21T15:54:21.518Z |
| cve-2026-113607 | 7.1 (v4.0) 6.5 (v3.1) | Configurable Reports block for Moodle before 5.3.0 Aut… |
jleyva |
moodle-block_configurablereports |
2026-10-20T15:40:33.391Z | 2026-10-20T16:28:22.834Z |
| cve-2026-113606 | 7.1 (v4.0) 7.1 (v3.1) | Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass … |
Stirling-Tools |
Stirling-PDF |
2026-10-20T15:40:32.691Z | 2026-10-23T01:46:06.996Z |
| cve-2026-113605 | 8.6 (v4.0) 7.2 (v3.1) | Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypa… |
Stirling-Tools |
Stirling-PDF |
2026-10-20T15:40:32.050Z | 2026-10-20T18:06:57.644Z |
| cve-2026-113604 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra 10.2 through 12.1.4 Denial of Service via ELF L… |
NationalSecurityAgency |
ghidra |
2026-10-20T15:40:31.409Z | 2026-10-20T16:19:49.190Z |
| cve-2026-113603 | 6.9 (v4.0) 6.5 (v3.1) | x402 @x402/extensions 2.3.1 through 2.28.0 SIWX Paymen… |
x402-foundation |
@x402/extensions |
2026-10-20T15:40:30.742Z | 2026-10-21T15:54:28.895Z |
| cve-2026-113602 | 6.9 (v4.0) 5.3 (v3.1) | json-smart through 2.6.0 Strict-Mode Validation Bypass… |
json-smart |
json-smart |
2026-10-20T15:40:29.753Z | 2026-10-20T16:30:53.742Z |
| cve-2026-113601 | 5.3 (v4.0) 4.3 (v3.1) | Memos before 0.27.0 Missing Authorization via Activity… |
usememos |
memos |
2026-10-20T15:40:28.941Z | 2026-10-23T01:44:39.769Z |
| cve-2026-113600 | 5.3 (v4.0) 5.4 (v3.1) | Fat Free CRM before 0.26.0 IDOR via CommentsController… |
fatfreecrm |
fat_free_crm |
2026-10-20T15:40:28.303Z | 2026-10-23T13:53:31.012Z |
| cve-2026-113599 | 5.3 (v4.0) 5.4 (v3.1) | Modoboa before 2.8.0 IDOR via API v2 armessages Auto-R… |
modoboa |
modoboa |
2026-10-20T15:40:27.636Z | 2026-10-20T16:19:21.574Z |
| cve-2026-113598 | 5.3 (v4.0) 4.3 (v3.1) | Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete |
modoboa |
modoboa |
2026-10-20T15:40:26.960Z | 2026-10-21T15:54:34.976Z |
| cve-2026-113597 | 5.3 (v4.0) 5.4 (v3.1) | Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures |
blinkospace |
blinko |
2026-10-20T15:40:26.082Z | 2026-10-20T16:40:26.591Z |
| cve-2026-113596 | 2.3 (v4.0) 3.1 (v3.1) | Webstudio before 0.256.0 Information Disclosure via tR… |
webstudio-is |
webstudio |
2026-10-20T15:40:25.087Z | 2026-10-23T01:43:56.739Z |
| cve-2026-113595 | 5.3 (v4.0) 4.3 (v3.1) | Sharkord before 0.0.26 Missing Authorization via chang… |
Sharkord |
sharkord |
2026-10-20T15:40:24.447Z | 2026-10-23T13:55:55.388Z |
| cve-2026-113594 | 5.3 (v4.0) 5.4 (v3.1) | Sharkord before 0.0.8 Missing Authorization via update… |
Sharkord |
sharkord |
2026-10-20T15:40:23.782Z | 2026-10-20T16:17:58.243Z |
| cve-2026-113359 | 5.3 (v4.0) 4.3 (v3.1) | Baserow before 2.3.0 Cross-Workspace Data Disclosure v… |
Baserow |
Baserow |
2026-10-20T15:40:23.156Z | 2026-10-21T15:54:41.612Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-322 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-07-04T00:00:00.000000 | 2018-07-04T00:00:00.000000 |
| certfr-2018-avi-321 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-07-03T00:00:00.000000 | 2018-07-03T00:00:00.000000 |
| certfr-2018-avi-320 | Multiples vulnérabilités dans Google Android | 2018-07-03T00:00:00.000000 | 2018-07-03T00:00:00.000000 |
| certfr-2018-avi-319 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-07-02T00:00:00.000000 | 2018-07-02T00:00:00.000000 |
| certfr-2018-avi-318 | Multiples vulnérabilités dans Citrix XenServer | 2018-07-02T00:00:00.000000 | 2018-07-02T00:00:00.000000 |
| certfr-2018-avi-317 | Multiples vulnérabilités dans les produits VMware | 2018-07-02T00:00:00.000000 | 2018-07-02T00:00:00.000000 |
| certfr-2018-avi-316 | Multiples vulnérabilités dans Xen | 2018-07-02T00:00:00.000000 | 2018-07-02T00:00:00.000000 |
| certfr-2018-avi-315 | Vulnérabilité dans HPE Integrated Lights-Out (iLO) | 2018-06-28T00:00:00.000000 | 2018-06-28T00:00:00.000000 |
| certfr-2018-avi-314 | Multiples vulnérabilités dans Xen | 2018-06-28T00:00:00.000000 | 2018-06-28T00:00:00.000000 |
| certfr-2018-avi-313 | Vulnérabilité dans Apple SwiftNIO | 2018-06-28T00:00:00.000000 | 2018-06-28T00:00:00.000000 |
| certfr-2018-avi-312 | Vulnérabilité dans le noyau Linux de SUSE | 2018-06-28T00:00:00.000000 | 2018-06-28T00:00:00.000000 |
| certfr-2018-avi-311 | Multiples vulnérabilités dans Magento | 2018-06-28T00:00:00.000000 | 2018-06-28T00:00:00.000000 |
| certfr-2018-avi-310 | Multiples vulnérabilités dans Google Chrome OS | 2018-06-27T00:00:00.000000 | 2018-06-27T00:00:00.000000 |
| certfr-2018-avi-309 | Multiples vulnérabilités dans Mozilla Firefox | 2018-06-27T00:00:00.000000 | 2018-06-27T00:00:00.000000 |
| certfr-2018-avi-308 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-27T00:00:00.000000 | 2018-06-27T00:00:00.000000 |
| certfr-2018-avi-307 | Multiples vulnérabilités dans Joomla! | 2018-06-27T00:00:00.000000 | 2018-06-27T00:00:00.000000 |
| certfr-2018-avi-306 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-06-27T00:00:00.000000 | 2018-06-27T00:00:00.000000 |
| certfr-2018-avi-305 | Vulnérabilité dans SCADA les produits Siemens | 2018-06-26T00:00:00.000000 | 2018-06-26T00:00:00.000000 |
| certfr-2018-avi-304 | Multiples vulnérabilités dans Google Chrome | 2018-06-26T00:00:00.000000 | 2018-06-26T00:00:00.000000 |
| certfr-2018-avi-303 | Multiples vulnérabilités dans les produits Fortinet | 2018-06-25T00:00:00.000000 | 2018-06-25T00:00:00.000000 |
| certfr-2018-avi-302 | Multiples vulnérabilités dans PHP | 2018-06-22T00:00:00.000000 | 2018-06-25T00:00:00.000000 |
| certfr-2018-avi-301 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-22T00:00:00.000000 | 2018-06-22T00:00:00.000000 |
| certfr-2018-avi-300 | Multiples vulnérabilités dans phpMyAdmin | 2018-06-22T00:00:00.000000 | 2018-06-22T00:00:00.000000 |
| certfr-2018-avi-299 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-21T00:00:00.000000 | 2018-06-21T00:00:00.000000 |
| certfr-2018-avi-298 | Multiples vulnérabilités dans les produits Cisco | 2018-06-21T00:00:00.000000 | 2018-06-21T00:00:00.000000 |
| certfr-2018-avi-297 | Vulnérabilité dans Ruby On Rails | 2018-06-20T00:00:00.000000 | 2018-06-20T00:00:00.000000 |
| certfr-2018-avi-296 | Vulnérabilité dans le noyau Linux de RedHat | 2018-06-20T00:00:00.000000 | 2018-06-20T00:00:00.000000 |
| certfr-2018-avi-295 | Vulnérabilité dans Citrix XenServer | 2018-06-18T00:00:00.000000 | 2018-06-18T00:00:00.000000 |
| certfr-2018-avi-294 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |
| certfr-2018-avi-293 | Multiples vulnérabilités dans Tenable Nessus Agent | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |