Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113350 | 5.1 (v4.0) 5.4 (v3.1) | react-admin before 5.15.5 Stored XSS via UrlField and … |
marmelab |
react-admin |
2026-10-20T10:41:36.780Z | 2026-10-20T13:26:16.586Z |
| cve-2026-113349 | 5.3 (v4.0) 4.3 (v3.1) | OpenCATS before 0.10.0 Missing Authorization in Calend… |
opencats |
OpenCATS |
2026-10-20T10:41:36.105Z | 2026-10-22T21:19:07.705Z |
| cve-2026-112787 | 5.3 (v4.0) 4.3 (v3.1) | OpenCATS before 0.10.0 Missing Authorization in Report… |
opencats |
OpenCATS |
2026-10-20T10:41:35.393Z | 2026-10-20T15:34:19.374Z |
| cve-2026-112786 | 5.3 (v4.0) 5.4 (v3.1) | OpenCATS before 0.10.0 Missing Authorization via Impor… |
opencats |
OpenCATS |
2026-10-20T10:41:34.689Z | 2026-10-20T13:44:48.249Z |
| cve-2026-112785 | 5.3 (v4.0) 4.3 (v3.1) | OpenCATS before 0.10.0 Missing Authorization in Saved-… |
opencats |
OpenCATS |
2026-10-20T10:41:33.992Z | 2026-10-20T16:06:56.326Z |
| cve-2026-112784 | 5.3 (v4.0) 4.3 (v3.1) | OpenCATS before 0.10.0 Missing Authorization via ajax/… |
opencats |
OpenCATS |
2026-10-20T10:41:33.303Z | 2026-10-20T13:27:10.134Z |
| cve-2026-112783 | 5.3 (v4.0) 4.3 (v3.1) | OpenCATS before 0.10.0 Missing Authorization via Activ… |
opencats |
OpenCATS |
2026-10-20T10:41:32.643Z | 2026-10-22T21:18:06.358Z |
| cve-2026-108089 | Apache Cocoon: Unauthenticated access to diagnostic in… |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:25:54.169Z | 2026-10-20T18:09:56.937Z | |
| cve-2026-108088 | Apache Cocoon: Cross-user cache poisoning |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:25:33.049Z | 2026-10-29T17:33:40.096Z | |
| cve-2026-108087 | Apache Cocoon: SQL Injection |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:25:12.654Z | 2026-10-29T18:21:55.393Z | |
| cve-2026-108086 | Apache Cocoon: XEE could lead to SSRF and information … |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:24:53.426Z | 2026-10-29T18:19:05.421Z | |
| cve-2026-113382 | arizu-id fast-tunnel Plugin Installer api_plugins.php … |
arizu-id |
fast-tunnel |
2026-10-20T10:15:19.899Z | 2026-10-20T16:07:05.630Z | |
| cve-2026-107597 | 5.1 (v4.0) | jwks_uri from the OIDC discovery document is fetched w… |
Eclipse Foundation |
Eclipse CSI - PIA |
2026-10-20T10:06:37.127Z | 2026-10-20T15:36:50.392Z |
| cve-2026-108062 | 6.9 (v4.0) | Pre-authentication OIDC discovery and JWKS fetches run… |
Eclipse Foundation |
Eclipse CSI - PIA |
2026-10-20T10:04:35.382Z | 2026-10-20T15:41:39.646Z |
| cve-2026-111844 | 6.5 (v3.1) | WordPress Brizy plugin 2.8.23 - Cross Site Scripting (… |
Brizy |
Brizy |
2026-10-20T09:47:10.054Z | 2026-10-20T16:07:12.280Z |
| cve-2026-113381 | Osclass Item Model Item.php findUserItems sql injection |
n/a |
Osclass |
2026-10-20T09:45:06.205Z | 2026-10-20T13:28:23.121Z | |
| cve-2026-112069 | 6.3 (v4.0) | Broken Access Control in extension "FAL Protect" (fal_… |
TYPO3 |
Extension "FAL Protect" |
2026-10-20T09:30:57.192Z | 2026-10-20T15:42:06.502Z |
| cve-2026-112065 | 5.3 (v4.0) | Missing Authorization in extension "sgalinski Cookie C… |
TYPO3 |
Extension "sgalinski Cookie Consent" |
2026-10-20T09:30:56.537Z | 2026-10-20T15:42:28.575Z |
| cve-2026-112064 | 7.1 (v4.0) | SQL Injection in extension "sgalinski Cookie Consent" … |
TYPO3 |
Extension "sgalinski Cookie Consent" |
2026-10-20T09:30:55.821Z | 2026-10-24T07:24:17.633Z |
| cve-2026-112066 | 7.1 (v4.0) | Missing Authorization in extension "sgalinski Cookie C… |
TYPO3 |
Extension "sgalinski Cookie Consent" |
2026-10-20T09:30:55.117Z | 2026-10-20T15:43:32.519Z |
| cve-2026-112067 | 6.9 (v4.0) | Captcha Bypass in extension "Accessible Form Captcha" … |
TYPO3 |
Extension "Accessible Form Captcha" |
2026-10-20T09:30:54.371Z | 2026-10-24T07:24:57.721Z |
| cve-2026-112068 | 5.3 (v4.0) | Insecure Direct Object Reference in extension "Analyti… |
TYPO3 |
Extension "Analytics" |
2026-10-20T09:30:53.630Z | 2026-10-20T19:07:15.315Z |
| cve-2026-112237 | 6.9 (v4.0) | Server-Side Request Forgery in extension "Kitodo.Prese… |
TYPO3 |
Extension "Kitodo.Presentation" |
2026-10-20T09:30:52.452Z | 2026-10-20T19:06:47.976Z |
| cve-2026-112240 | 6.3 (v4.0) | Broken Access Control in extension "TYPO3 Fluid-Form b… |
TYPO3 |
Extension "TYPO3 Fluid-Form by coding.ms" |
2026-10-20T09:30:51.530Z | 2026-10-20T16:13:19.980Z |
| cve-2026-113442 | 5.3 (v4.0) | Cross-Site Scripting in extension "TYPO3 Fluid-Form by… |
TYPO3 |
Extension "TYPO3 Fluid-Form by coding.ms" |
2026-10-20T09:30:50.528Z | 2026-10-20T15:43:57.631Z |
| cve-2026-112238 | 8.7 (v4.0) | SQL Injection in extension "File manager" (ameos_filem… |
TYPO3 |
Extension "File manager" |
2026-10-20T09:30:48.389Z | 2026-10-20T15:44:32.296Z |
| cve-2026-112071 | 6.9 (v4.0) | Broken Access Control in extension "TYPO3 Shop by codi… |
TYPO3 |
Extension "TYPO3 Shop by coding.ms" |
2026-10-20T09:30:47.669Z | 2026-10-20T15:44:57.053Z |
| cve-2026-113468 | 6.9 (v4.0) | Broken Access Control in extension "TYPO3 Shop by codi… |
TYPO3 |
Extension "TYPO3 Shop by coding.ms" |
2026-10-20T09:30:46.881Z | 2026-10-20T15:45:26.410Z |
| cve-2026-112239 | 7.2 (v4.0) | Broken Access Control in extension "TYPO3 AI Integrati… |
TYPO3 |
Extension "TYPO3 AI Integration Extension" |
2026-10-20T09:30:46.019Z | 2026-10-20T15:45:50.344Z |
| cve-2026-113459 | 7.1 (v4.0) | Sensitive Data Exposure in extension "TYPO3 AI Integra… |
TYPO3 |
Extension "TYPO3 AI Integration Extension" |
2026-10-20T09:30:44.456Z | 2026-10-20T15:48:56.323Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-172 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-04-06T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-avi-171 | Multiples vulnérabilités dans Citrix XenServer | 2018-04-06T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-avi-170 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-04-05T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-avi-169 | Vulnérabilité dans les produits Microsoft | 2018-04-04T00:00:00.000000 | 2018-04-04T00:00:00.000000 |
| certfr-2018-avi-168 | Multiples vulnérabilités dans Microsoft Windows | 2018-04-04T00:00:00.000000 | 2018-04-04T00:00:00.000000 |
| certfr-2018-avi-167 | Multiples vulnérabilités dans WordPress | 2018-04-04T00:00:00.000000 | 2018-04-04T00:00:00.000000 |
| certfr-2018-avi-166 | Multiples vulnérabilités dans Wireshark | 2018-04-04T00:00:00.000000 | 2018-04-04T00:00:00.000000 |
| certfr-2018-avi-165 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-04-04T00:00:00.000000 | 2018-04-04T00:00:00.000000 |
| certfr-2018-avi-164 | Multiples vulnérabilités dans Google Android | 2018-04-03T00:00:00.000000 | 2018-04-03T00:00:00.000000 |
| certfr-2018-avi-163 | Vulnérabilité dans Microsoft Windows | 2018-03-30T00:00:00.000000 | 2018-03-30T00:00:00.000000 |
| certfr-2018-avi-162 | Multiples vulnérabilités dans les produits Apple | 2018-03-30T00:00:00.000000 | 2018-03-30T00:00:00.000000 |
| certfr-2018-avi-161 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-03-30T00:00:00.000000 | 2018-03-30T00:00:00.000000 |
| certfr-2018-avi-160 | Multiples vulnérabilités dans Citrix XenServer | 2018-03-30T00:00:00.000000 | 2018-03-30T00:00:00.000000 |
| certfr-2018-avi-159 | Multiples vulnérabilités dans PHP | 2018-03-30T00:00:00.000000 | 2018-03-30T00:00:00.000000 |
| certfr-2018-avi-158 | Vulnérabilité dans Drupal | 2018-03-29T00:00:00.000000 | 2018-03-29T00:00:00.000000 |
| certfr-2018-avi-157 | Multiples vulnérabilités dans les produits SCADA Siemens Building Technologies | 2018-03-29T00:00:00.000000 | 2018-03-29T00:00:00.000000 |
| certfr-2018-avi-156 | Multiples vulnérabilités dans les produits Cisco | 2018-03-29T00:00:00.000000 | 2018-03-29T00:00:00.000000 |
| certfr-2018-avi-155 | Multiples vulnérabilités dans OpenSSL | 2018-03-28T00:00:00.000000 | 2018-03-28T00:00:00.000000 |
| certfr-2018-avi-154 | Multiples vulnérabilités dans SCADA Schneider Electric Modicon | 2018-03-28T00:00:00.000000 | 2018-03-28T00:00:00.000000 |
| certfr-2018-avi-153 | Vulnérabilité dans Apache Struts 2 | 2018-03-28T00:00:00.000000 | 2018-03-28T00:00:00.000000 |
| certfr-2018-avi-152 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-03-27T00:00:00.000000 | 2018-03-27T00:00:00.000000 |
| certfr-2018-avi-151 | Vulnérabilité dans Mozilla Firefox | 2018-03-27T00:00:00.000000 | 2018-03-27T00:00:00.000000 |
| certfr-2018-avi-150 | Multiples vulnérabilités dans Moodle | 2018-03-26T00:00:00.000000 | 2018-03-26T00:00:00.000000 |
| certfr-2018-avi-149 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-03-26T00:00:00.000000 | 2018-03-26T00:00:00.000000 |
| certfr-2018-avi-148 | Multiples vulnérabilités dans Google Chrome OS | 2018-03-26T00:00:00.000000 | 2018-03-26T00:00:00.000000 |
| certfr-2018-avi-147 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-03-26T00:00:00.000000 | 2018-03-26T00:00:00.000000 |
| certfr-2018-avi-146 | Multiples vulnérabilités dans SCADA Schneider Electric Modicon | 2018-03-23T00:00:00.000000 | 2018-03-23T00:00:00.000000 |
| certfr-2018-avi-145 | Multiples vulnérabilités dans Citrix XenServer | 2018-03-22T00:00:00.000000 | 2018-03-22T00:00:00.000000 |
| certfr-2018-avi-144 | Multiples vulnérabilités dans Aruba ClearPass | 2018-03-22T00:00:00.000000 | 2018-03-22T00:00:00.000000 |
| certfr-2018-avi-143 | Vulnérabilité dans MikroTik RouterOS | 2018-03-22T00:00:00.000000 | 2018-03-22T00:00:00.000000 |