Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113359 | 5.3 (v4.0) 4.3 (v3.1) | Baserow before 2.3.0 Cross-Workspace Data Disclosure v… |
Baserow |
Baserow |
2026-10-20T15:40:23.156Z | 2026-10-21T15:54:41.612Z |
| cve-2025-71436 | 7.1 (v4.0) 7.1 (v3.1) | Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap B… |
librdf |
Raptor RDF Syntax Library |
2026-10-20T15:40:22.461Z | 2026-10-20T16:41:49.461Z |
| cve-2026-90799 | 1.3 (v4.0) | Apache CouchDB: Atom-table exhaustion in _changes sequ… |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:40:16.600Z | 2026-10-20T18:10:08.069Z |
| cve-2026-90798 | 0.6 (v4.0) | Apache CouchDB: Replicator follows redirects indefinitely |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:39:52.048Z | 2026-10-20T18:10:07.139Z |
| cve-2026-90797 | 7.7 (v4.0) | Apache CouchDB: Pre-authentication gzip decompression … |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:39:23.376Z | 2026-10-20T18:10:06.210Z |
| cve-2026-86471 | 9.3 (v4.0) | Apache CouchDB: Admin credentials leading to code exec… |
Apache Software Foundation |
Apache CouchDB |
2026-10-20T15:38:09.681Z | 2026-10-21T03:56:24.122Z |
| cve-2026-112951 | ApostropheCMS: Color field validation bypass allows st… |
apostrophecms |
apostrophe |
2026-10-20T15:33:09.945Z | 2026-10-20T16:43:32.126Z | |
| cve-2026-93003 | 6.9 (v4.0) | NetX Duo Web HTTP server interprets request body conte… |
Eclipse Foundation |
Eclipse ThreadX - NetX Duo |
2026-10-20T15:24:53.662Z | 2026-10-20T17:06:47.687Z |
| cve-2026-112950 | Vitest: Windows backslash traversal bypasses the @vite… |
vitest-dev |
vitest |
2026-10-20T15:21:32.396Z | 2026-10-28T14:04:58.744Z | |
| cve-2026-95107 | 7 (v4.0) | Module object allocation size overflow corrupts the ma… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:20:15.011Z | 2026-10-20T17:05:35.811Z |
| cve-2026-94202 | 4.8 (v4.0) | Module block-pool create validates two of the four par… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:19:43.014Z | 2026-10-20T17:04:52.595Z |
| cve-2026-95108 | 6.8 (v4.0) | Deleting a user-mode module thread leaks its privilege… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:19:16.940Z | 2026-10-20T17:06:10.079Z |
| cve-2026-112949 | Vitest: Code injection via unauthenticated manual mock… |
vitest-dev |
vitest |
2026-10-20T15:19:03.799Z | 2026-10-23T01:42:51.858Z | |
| cve-2026-94024 | 6.9 (v4.0) | Module Manager object lookup validates one byte of a m… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:18:28.242Z | 2026-10-20T17:01:07.513Z |
| cve-2026-94023 | 6.9 (v4.0) | Module delete dispatchers do not enforce kernel-object… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:18:09.957Z | 2026-10-20T17:03:48.170Z |
| cve-2026-95109 | 8.5 (v4.0) | Cortex-A7 module data validation checks only the first… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:17:20.023Z | 2026-10-20T17:07:15.973Z |
| cve-2026-94192 | 8.5 (v4.0) | Module object deallocation can free a live ThreadX ker… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T15:15:06.222Z | 2026-10-20T17:04:24.537Z |
| cve-2026-112948 | Vitest: Servers misapply `server.fs.deny`, serving `.e… |
vitest-dev |
vitest |
2026-10-20T15:15:01.927Z | 2026-10-20T16:16:59.623Z | |
| cve-2026-112823 | 4.3 (v3.1) | WordPress WP User Manager plugin <= 2.9.25 - Broken Ac… |
WP User Manager |
WP User Manager |
2026-10-20T15:14:13.192Z | 2026-10-21T10:35:08.137Z |
| cve-2026-112824 | 5.3 (v3.1) | WordPress Bus Ticket Booking with Seat Reservation plu… |
Magepeople inc. |
Bus Ticket Booking with Seat Reservation |
2026-10-20T15:13:47.804Z | 2026-10-20T16:16:17.587Z |
| cve-2026-92843 | 8.7 (v4.0) | Out-of-bounds Read via the TLS 1.3 Certificate extensi… |
Eclipse Foundation |
Eclipse ThreadX - NetX Duo |
2026-10-20T15:12:55.919Z | 2026-10-20T17:08:35.381Z |
| cve-2026-111843 | 6.5 (v3.1) | WordPress Rootblox plugin <= 1.0.7 - Cross Site Script… |
CozyThemes |
Rootblox |
2026-10-20T15:12:05.376Z | 2026-10-21T10:35:08.438Z |
| cve-2026-112829 | 5.3 (v3.1) | WordPress Booktics plugin <= 1.0.30 - Broken Access Co… |
Arraytics |
Booktics |
2026-10-20T15:11:43.228Z | 2026-10-21T10:35:08.582Z |
| cve-2026-112840 | 6.5 (v3.1) | WordPress SureCart plugin <= 4.9.5 - Cross Site Script… |
Brainstorm Force |
SureCart |
2026-10-20T15:10:54.998Z | 2026-10-21T10:35:08.866Z |
| cve-2026-111765 | A2A Java SDK: Android synchronous POST forwards creden… |
a2aproject |
a2a-java |
2026-10-20T15:10:51.321Z | 2026-10-22T21:32:18.921Z | |
| cve-2026-112947 | Vite: First 4 bytes of files outside of `server.fs` se… |
vitejs |
vite |
2026-10-20T15:10:51.025Z | 2026-10-21T15:54:49.530Z | |
| cve-2026-112836 | 8.8 (v3.1) | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Requ… |
e4jvikwp |
VikRentCar |
2026-10-20T15:10:13.770Z | 2026-10-20T16:44:17.508Z |
| cve-2026-92853 | 8.7 (v4.0) | Out-of-bounds Read via a Zero-length TLS 1.3 Certifica… |
Eclipse Foundation |
Eclipse ThreadX - NetX Duo |
2026-10-20T15:10:08.102Z | 2026-10-20T17:02:19.980Z |
| cve-2026-94018 | 8.8 (v4.0) | NetX Duo Web HTTP server releases an uninitialized pac… |
Eclipse Foundation |
Eclipse ThreadX - NetX Duo |
2026-10-20T15:10:08.098Z | 2026-10-20T17:03:21.440Z |
| cve-2026-109700 | 6.5 (v3.1) | WordPress Meta Box – WordPress Custom Fields Framework… |
eLightUp |
Meta Box – WordPress Custom Fields Framework |
2026-10-20T15:06:51.007Z | 2026-10-20T17:21:58.344Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-292 | Vulnérabilité dans le noyau Linux de RedHat | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |
| certfr-2018-avi-291 | Multiples vulnérabilités dans les produits SAP | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-290 | Vulnérabilité dans Xen | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-289 | Multiples vulnérabilités dans Apple Xcode | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-288 | Multiples vulnérabilités dans Tenable Nessus | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-287 | Multiples vulnérabilités dans Microsoft ChakraCore | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-286 | Multiples vulnérabilités dans Microsoft Windows | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-285 | Multiples vulnérabilités dans Microsoft Office | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-284 | Multiples vulnérabilités dans Microsoft Edge | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-283 | Multiples vulnérabilités dans Microsoft IE | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-282 | Multiples vulnérabilités dans Google Chrome et Chrome OS | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-281 | Vulnérabilité dans Bind | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-280 | Vulnérabilité dans le noyau Linux de Red Hat | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-279 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-278 | Vulnérabilité dans VMware AirWatch Agent | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-277 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-06-12T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-276 | Multiples vulnérabilités dans Asterisk | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-275 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-274 | Multiples vulnérabilités dans Google Chrome OS | 2018-06-08T00:00:00.000000 | 2018-06-08T00:00:00.000000 |
| certfr-2018-avi-273 | Multiples vulnérabilités dans Adobe Flash Player | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-272 | Multiples vulnérabilités dans Google Chrome | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-271 | Vulnérabilité dans Mozilla Firefox | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-270 | Multiples vulnérabilités dans les produits Cisco | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-269 | Vulnérabilité dans les produits F-Secure | 2018-06-06T00:00:00.000000 | 2018-06-06T00:00:00.000000 |
| certfr-2018-avi-268 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-06T00:00:00.000000 | 2018-06-06T00:00:00.000000 |
| certfr-2018-avi-267 | Multiples vulnérabilités dans Google Android | 2018-06-05T00:00:00.000000 | 2018-06-05T00:00:00.000000 |
| certfr-2018-avi-266 | Multiples vulnérabilités dans les produits Apple | 2018-06-04T00:00:00.000000 | 2018-06-04T00:00:00.000000 |
| certfr-2018-avi-265 | Multiples vulnérabilités dans SCADA Schneider Electric U.motion | 2018-06-01T00:00:00.000000 | 2018-06-01T00:00:00.000000 |
| certfr-2018-avi-264 | Multiples vulnérabilités dans Google Chrome OS | 2018-06-01T00:00:00.000000 | 2018-06-01T00:00:00.000000 |
| certfr-2018-avi-263 | Multiples vulnérabilités dans Git | 2018-05-30T00:00:00.000000 | 2018-05-30T00:00:00.000000 |