Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113870 | 8.8 (v3.1) 8.6 (v4.0) | Improper Encoding of Server-Supplied JavaScript Values… |
MongoDB |
Compass |
2026-10-21T18:04:30.607Z | 2026-10-30T18:23:34.095Z |
| cve-2026-118248 | Highcharts Dashboards: editableOptions.propertyPath wr… |
highcharts |
highcharts |
2026-10-28T17:55:47.520Z | 2026-10-30T18:21:14.325Z | |
| cve-2026-105931 | 2.3 (v4.0) | Apache Pulsar: Missing authorization on transaction ad… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:02:31.976Z | 2026-10-30T18:20:46.202Z |
| cve-2026-118252 | Highcharts Dashboards: sidebar component labels are pa… |
highcharts |
highcharts |
2026-10-28T18:08:33.407Z | 2026-10-30T18:20:14.175Z | |
| cve-2026-118244 | Highcharts Core: AST `DOMParser` fallback assigns unsa… |
highcharts |
highcharts |
2026-10-28T17:36:43.768Z | 2026-10-30T18:19:13.077Z | |
| cve-2026-114612 | LiteLLM: Privilege Escalation to Proxy Admin via Cross… |
BerriAI |
litellm |
2026-10-22T18:01:52.768Z | 2026-10-30T18:17:34.432Z | |
| cve-2026-105927 | 2.3 (v4.0) | Apache Pulsar: Improper authorization of WebSocket con… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:00:31.871Z | 2026-10-30T18:17:18.420Z |
| cve-2026-57207 | NetBox MCP Server: HTTP transport exposes all NetBox d… |
netboxlabs |
netbox-mcp-server |
2026-10-23T13:40:31.164Z | 2026-10-30T18:16:11.003Z | |
| cve-2026-105926 | 5.3 (v4.0) | Apache Pulsar: Missing Topic Authorization on Binary P… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T17:59:55.207Z | 2026-10-30T18:15:49.239Z |
| cve-2025-0750 | 6.6 (v3.1) | Cri-o: cri-o path traversal in log handling functions … |
|
|
2025-01-28T09:29:30.831Z | 2026-10-30T18:13:58.858Z |
| cve-2026-105869 | 9.2 (v4.0) | Apache Pulsar: MultiRolesTokenAuthorizationProvider us… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T17:58:54.385Z | 2026-10-30T18:12:40.695Z |
| cve-2026-104592 | N/A | libosmocore through 1.14.1 contains an out-of-bou… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T18:11:30.724Z |
| cve-2026-94482 | Next.js: Denial of Service in App Router using Server … |
vercel |
next.js |
2026-10-22T15:22:10.155Z | 2026-10-30T18:09:28.569Z | |
| cve-2026-5461 | Forminator Forms <= 1.55.0.2 - Unauthenticated Limited… |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-10-30T04:32:43.721Z | 2026-10-30T18:09:01.358Z | |
| cve-2026-118194 | Page and Post Restriction <= 1.6.1 - Unauthenticated A… |
cyberlord92 |
Page and Post Restriction |
2026-10-30T05:35:50.445Z | 2026-10-30T18:09:01.200Z | |
| cve-2026-118634 | Events Made Easy <= 3.3.1 - Authenticated (Contributor… |
liedekef |
Events Made Easy |
2026-10-30T05:35:51.705Z | 2026-10-30T18:09:01.062Z | |
| cve-2026-119059 | Content Egg <= 12.0.0 - Missing Authorization to Authe… |
keywordrush |
Content Egg – Affiliate Product Importer & Price Comparison |
2026-10-30T05:35:52.057Z | 2026-10-30T18:09:00.924Z | |
| cve-2026-119087 | Content Egg <= 12.0.0 - Missing Authorization to Authe… |
keywordrush |
Content Egg – Affiliate Product Importer & Price Comparison |
2026-10-30T05:35:52.429Z | 2026-10-30T18:09:00.780Z | |
| cve-2026-90437 | Gravity Forms <= 3.1.1 - Unauthenticated Stored Cross-… |
Gravity Forms |
Gravity Forms |
2026-10-30T06:47:30.530Z | 2026-10-30T18:09:00.650Z | |
| cve-2026-89435 | Formidable Forms <= 6.35 - Authenticated (Subscriber+)… |
strategy11team |
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder |
2026-10-30T06:47:31.045Z | 2026-10-30T18:09:00.504Z | |
| cve-2026-110732 | AI Engine – The Chatbot, AI Framework & MCP for WordPr… |
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
2026-10-30T06:47:32.210Z | 2026-10-30T18:09:00.341Z | |
| cve-2026-104623 | 6.3 (v3.1) | Authorization bypass on the local cluster shell endpoi… |
SUSE |
Rancher |
2026-10-30T16:11:30.079Z | 2026-10-30T18:09:00.059Z |
| cve-2026-119148 | 6.5 (v3.1) 8.2 (v4.0) | Unvalidated parent-supplied AWS Region in AWS aws-nitr… |
AWS |
aws-nitro-enclaves-sdk-c |
2026-10-30T16:12:06.479Z | 2026-10-30T18:08:59.904Z |
| cve-2026-119176 | CP Multi View Events Calendar <= 1.4.43 - Authenticate… |
codepeople |
CP Multi View Events Calendar |
2026-10-30T17:15:24.563Z | 2026-10-30T18:08:59.759Z | |
| cve-2025-8574 | Database Cleaner <= 1.4.7 - Authenticated (Administrat… |
tigroumeow |
Database Cleaner: Cleanup, Optimization & Repair |
2026-10-30T17:15:25.473Z | 2026-10-30T18:08:59.619Z | |
| cve-2026-110001 | FV Flowplayer Video Player <= 7.5.55.7212 - Unauthenti… |
foliovision |
FV Flowplayer Video Player |
2026-10-30T17:15:25.812Z | 2026-10-30T18:08:59.456Z | |
| cve-2026-110305 | Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthen… |
hwk-fr |
Advanced Custom Fields: Extended |
2026-10-30T17:15:26.153Z | 2026-10-30T18:08:59.282Z | |
| cve-2026-9239 | Meow Gallery <= 5.5.1 - Authenticated (Author+) Stored… |
tigroumeow |
Meow Gallery |
2026-10-30T17:15:26.845Z | 2026-10-30T18:08:58.980Z | |
| cve-2026-118635 | GeoDirectory <= 2.8.198 - Unauthenticated Shortcode In… |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-30T17:15:27.562Z | 2026-10-30T18:08:58.837Z | |
| cve-2026-97638 | Forminator Forms <= 1.57.3.1 - Insecure Direct Object … |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-10-30T17:15:27.922Z | 2026-10-30T18:08:58.688Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-203 | Multiples vulnérabilités dans Xen | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-202 | Multiples vulnérabilités dans SCADA Schneider Electric Pelco Sarix Professional | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-201 | Multiples vulnérabilités dans les produits Apple | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-200 | Vulnérabilité dans le noyau Linux de RedHat | 2018-04-25T00:00:00.000000 | 2018-04-25T00:00:00.000000 |
| certfr-2018-avi-199 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-24T00:00:00.000000 | 2018-04-24T00:00:00.000000 |
| certfr-2018-avi-198 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-04-24T00:00:00.000000 | 2018-04-24T00:00:00.000000 |
| certfr-2018-avi-197 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-23T00:00:00.000000 | 2018-04-23T00:00:00.000000 |
| certfr-2018-avi-192 | Vulnérabilité dans Squid | 2018-04-23T00:00:00.000000 | 2018-04-23T00:00:00.000000 |
| certfr-2018-avi-196 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-04-20T00:00:00.000000 | 2018-04-20T00:00:00.000000 |
| certfr-2018-avi-195 | Vulnérabilité dans VMware Horizon DaaS | 2018-04-20T00:00:00.000000 | 2018-04-20T00:00:00.000000 |
| certfr-2018-avi-194 | Multiples vulnérabilités dans les produits Cisco | 2018-04-19T00:00:00.000000 | 2018-04-19T00:00:00.000000 |
| certfr-2018-avi-193 | Vulnérabilité dans Drupal | 2018-04-19T00:00:00.000000 | 2018-04-19T00:00:00.000000 |
| certfr-2018-avi-191 | Multiples vulnérabilités dans Oracle MySQL | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-190 | Multiples vulnérabilités dans Oracle Virtualization | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-189 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-188 | Multiples vulnérabilités dans Oracle Java SE | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-187 | Multiples vulnérabilités dans Oracle Database Server | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-186 | Multiples vulnérabilités dans Google Chrome | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-185 | Multiples vulnérabilités dans SCADA Moxa EDR-810 | 2018-04-18T00:00:00.000000 | 2018-04-18T00:00:00.000000 |
| certfr-2018-avi-184 | Multiples vulnérabilités dans les produits Juniper | 2018-04-16T00:00:00.000000 | 2018-04-16T00:00:00.000000 |
| certfr-2018-avi-183 | Multiples vulnérabilités dans VMware vRealize Automation | 2018-04-13T00:00:00.000000 | 2018-04-13T00:00:00.000000 |
| certfr-2018-avi-182 | Multiples vulnérabilités dans F5 BIG-IP | 2018-04-13T00:00:00.000000 | 2018-04-13T00:00:00.000000 |
| certfr-2018-avi-173 | Multiples vulnérabilités dans SCADA les produits Moxa | 2018-04-06T00:00:00.000000 | 2018-04-13T00:00:00.000000 |
| certfr-2018-avi-181 | Multiples vulnérabilités dans les produits Microsoft | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-180 | Multiples vulnérabilités dans Microsoft Windows | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-179 | Multiples vulnérabilités dans Microsoft Office | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-178 | Multiples vulnérabilités dans Microsoft Edge | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-177 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-176 | Multiples vulnérabilités dans les produits Adobe | 2018-04-11T00:00:00.000000 | 2018-04-11T00:00:00.000000 |
| certfr-2018-avi-175 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-04-10T00:00:00.000000 | 2018-04-10T00:00:00.000000 |