Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113399 | N/A | Incorrect boundary conditions in the SVG component |
Mozilla |
Firefox |
2026-10-20T12:58:14.968Z | 2026-10-29T17:44:03.368Z |
| cve-2026-113470 | N/A | Cryptographic issue in the Security Block-lists, Allow… |
Mozilla |
Firefox |
2026-10-20T12:58:14.250Z | 2026-10-21T19:20:41.189Z |
| cve-2026-113391 | DrayTek Vigor2960 Upload Endpoint mainfunction.cgi upl… |
DrayTek |
Vigor2960 |
2026-10-20T12:45:19.982Z | 2026-10-20T15:52:14.652Z | |
| cve-2026-113620 | 9.8 (v3.1) | Eclipse ioFog operator WebSocket accepts an unverified JWT |
Eclipse Foundation |
Eclipse ioFog |
2026-10-20T12:34:08.238Z | 2026-10-20T15:33:16.426Z |
| cve-2026-113390 | DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os co… |
DrayTek |
Vigor2960 |
2026-10-20T12:30:17.628Z | 2026-10-22T21:23:26.169Z | |
| cve-2026-113619 | 7.5 (v3.1) | Eclipse ioFog renders request templates before authent… |
Eclipse Foundation |
Eclipse ioFog |
2026-10-20T12:23:27.962Z | 2026-10-20T15:35:01.372Z |
| cve-2026-34485 | N/A | A CLI ACL Bypass vulnerability in Nokia 1830 Global Ex… |
Nokia |
Nokia 1830 Global Express (GX) |
2026-10-20T12:13:17.792Z | 2026-10-29T17:40:16.968Z |
| cve-2026-34484 | N/A | A Shell Privilege Escalation vulnerability in Nokia 18… |
Nokia |
Nokia 1830 Global Express (GX) |
2026-10-20T12:10:44.965Z | 2026-10-29T17:37:38.761Z |
| cve-2026-113389 | DrayTek Vigor2960 CGI Process mainfunction.cgi set_tab… |
DrayTek |
Vigor2960 |
2026-10-20T12:00:14.778Z | 2026-10-20T13:41:08.841Z | |
| cve-2026-113388 | opensource-socialnetwork Cache Settings dynamic.php in… |
n/a |
opensource-socialnetwork |
2026-10-20T11:45:15.583Z | 2026-10-20T16:06:22.411Z | |
| cve-2026-113583 | 5.3 (v4.0) 6.1 (v3.1) | Cypht 2.0.0 through 2.12.2 Stored DOM XSS via external… |
cypht-org |
cypht |
2026-10-20T11:35:29.543Z | 2026-10-23T13:28:33.480Z |
| cve-2026-105949 | 8.8 (v3.1) | Cruise-control: streams for apache kafka cruise contro… |
|
|
2026-10-20T11:30:29.296Z | 2026-11-03T16:53:52.611Z |
| cve-2026-105312 | 9.9 (v3.1) | Console-operator: streams for apache kafka console: te… |
Red Hat |
StreamsHub Console for Apache Kafka® |
2026-10-20T11:30:20.850Z | 2026-11-03T16:54:01.585Z |
| cve-2026-105311 | 7.7 (v3.1) | Console-operator: streams for apache kafka console: cr… |
Red Hat |
StreamsHub Console for Apache Kafka® |
2026-10-20T11:30:09.568Z | 2026-11-03T16:53:56.145Z |
| cve-2026-18205 | 6.1 (v3.1) | XSS in Ticimax Informatics' Ticimax E-Commerce Platform |
Ticimax Informatics Technologies Inc. |
Ticimax E-Commerce Platform |
2026-10-20T11:24:49.050Z | 2026-10-20T15:34:08.899Z |
| cve-2026-113385 | LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Cla… |
LeeDrOiD Labs |
Shortcutter 2 App |
2026-10-20T11:15:14.699Z | 2026-10-20T13:24:51.599Z | |
| cve-2026-113496 | 5 (v3.1) | Cockpit-machines: cockpit-appstream: vnc console passw… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-20T11:09:12.095Z | 2026-11-05T16:29:30.041Z |
| cve-2026-113495 | 5 (v3.1) | Cockpit-machines: cockpit-appstream: rhsm access-token… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-20T11:09:07.286Z | 2026-11-05T16:29:25.163Z |
| cve-2026-14933 | 8.6 (v4.0) | Unblu Spark Cross-Site Scripting in Embedded Co-Browsing |
Unblu inc. |
Unblu Spark |
2026-10-20T11:08:43.830Z | 2026-10-20T15:28:15.051Z |
| cve-2026-9589 | 9.3 (v4.0) 8.9 (v4.0) | Unblu Spark Authorization Bypass in Configuration Casc… |
Unblu inc. |
Unblu Spark |
2026-10-20T11:01:14.409Z | 2026-10-20T15:36:00.992Z |
| cve-2026-113384 | Optimal IdM OptimalCloud social redirect |
Optimal IdM |
OptimalCloud |
2026-10-20T11:00:12.874Z | 2026-10-22T21:20:39.735Z | |
| cve-2026-113383 | Optimal IdM OptimalCloud Login cross site scripting |
Optimal IdM |
OptimalCloud |
2026-10-20T10:45:12.816Z | 2026-10-20T13:42:01.165Z | |
| cve-2026-113358 | 8.7 (v4.0) 7.5 (v3.1) | LavaLite CMS through 10.1.2 Missing Authentication via… |
lavalite |
cms |
2026-10-20T10:41:42.303Z | 2026-10-20T14:31:08.984Z |
| cve-2026-113357 | 5.1 (v4.0) 3.5 (v3.1) | @e2e-dev/github before 0.4.1 CI Report Hijacking via P… |
tester-army |
@e2e-dev/github |
2026-10-20T10:41:41.607Z | 2026-10-20T13:42:52.211Z |
| cve-2026-113356 | 7.7 (v4.0) 7.5 (v3.1) | DokuWiki before 2026-07-14c PHP Object Injection via D… |
DokuWiki |
DokuWiki |
2026-10-20T10:41:40.897Z | 2026-10-20T16:06:40.238Z |
| cve-2026-113355 | 4.8 (v4.0) 4.8 (v3.1) | Chatwoot before 4.14.0 Stored XSS via Help Center Vide… |
chatwoot |
chatwoot |
2026-10-20T10:41:40.212Z | 2026-10-20T13:25:35.524Z |
| cve-2026-113354 | 7.1 (v4.0) 6.5 (v3.1) | Dockhand before 1.0.46 Arbitrary File Read via /api/sy… |
Finsys |
dockhand |
2026-10-20T10:41:39.517Z | 2026-10-22T21:19:59.100Z |
| cve-2026-113353 | 5.3 (v4.0) 5.4 (v3.1) | LearnPress before 4.4.10 Missing Authorization via Leg… |
ThimPress |
LearnPress |
2026-10-20T10:41:38.826Z | 2026-10-20T14:32:51.446Z |
| cve-2026-113352 | 7.7 (v4.0) 7.5 (v3.1) | uTox through 0.18.1 Path Traversal via Auto-Accepted F… |
uTox |
uTox |
2026-10-20T10:41:38.136Z | 2026-10-20T13:43:42.347Z |
| cve-2026-113351 | 8.2 (v4.0) 5.9 (v3.1) | libexpat 2.7.2 through 2.9.0 Denial of Service via XML… |
libexpat |
libexpat |
2026-10-20T10:41:37.468Z | 2026-10-20T16:06:48.218Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-202 | Multiples vulnérabilités dans SCADA Schneider Electric Pelco Sarix Professional | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-201 | Multiples vulnérabilités dans les produits Apple | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-200 | Vulnérabilité dans le noyau Linux de RedHat | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-199 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-24T00:00:00.000000 | 2018-04-24T00:00:00.000000 |
| certfr-2018-avi-198 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-04-24T00:00:00.000000 | 2018-04-24T00:00:00.000000 |
| certfr-2018-avi-197 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-23T00:00:00.000000 | 2018-04-23T00:00:00.000000 |
| certfr-2018-avi-192 | Vulnérabilité dans Squid | 2018-04-23T00:00:00.000000 | 2018-04-23T00:00:00.000000 |
| certfr-2018-avi-196 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-20T00:00:00.000000 | 2018-04-20T00:00:00.000000 |
| certfr-2018-avi-195 | Vulnérabilité dans VMware Horizon DaaS | 2018-04-20T00:00:00.000000 | 2018-04-20T00:00:00.000000 |
| certfr-2018-avi-194 | Multiples vulnérabilités dans les produits Cisco | 2018-04-19T00:00:00.000000 | 2018-04-19T00:00:00.000000 |
| certfr-2018-avi-193 | Vulnérabilité dans Drupal | 2018-04-19T00:00:00.000000 | 2018-04-19T00:00:00.000000 |
| certfr-2018-avi-191 | Multiples vulnérabilités dans Oracle MySQL | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-190 | Multiples vulnérabilités dans Oracle Virtualization | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-189 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-188 | Multiples vulnérabilités dans Oracle Java SE | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-187 | Multiples vulnérabilités dans Oracle Database Server | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-186 | Multiples vulnérabilités dans Google Chrome | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-185 | Multiples vulnérabilités dans SCADA Moxa EDR-810 | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-184 | Multiples vulnérabilités dans les produits Juniper | 2018-04-16T00:00:00.000000 | 2018-04-16T00:00:00.000000 |
| certfr-2018-avi-183 | Multiples vulnérabilités dans VMware vRealize Automation | 2018-04-13T00:00:00.000000 | 2018-04-13T00:00:00.000000 |
| certfr-2018-avi-182 | Multiples vulnérabilités dans F5 BIG-IP | 2018-04-13T00:00:00.000000 | 2018-04-13T00:00:00.000000 |
| certfr-2018-avi-181 | Multiples vulnérabilités dans les produits Microsoft | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-180 | Multiples vulnérabilités dans Microsoft Windows | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-179 | Multiples vulnérabilités dans Microsoft Office | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-178 | Multiples vulnérabilités dans Microsoft Edge | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-177 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-176 | Multiples vulnérabilités dans les produits Adobe | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-175 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-04-10T00:00:00.000000 | 2018-04-10T00:00:00.000000 |
| certfr-2018-avi-174 | Multiples vulnérabilités dans Google Chrome OS | 2018-04-10T00:00:00.000000 | 2018-04-10T00:00:00.000000 |
| certfr-2018-avi-173 | Multiples vulnérabilités dans SCADA les produits Moxa | 2018-04-06T00:00:00.000000 | 2018-04-13T00:00:00.000000 |