Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107249 | N/A | Block AJAX - Highly critical - PHP object injection - … |
Drupal |
Block AJAX |
2026-10-30T03:10:24.115Z | 2026-10-30T19:38:37.015Z |
| cve-2026-95673 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:37:06.679Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE users should reference CVE-2026-92243 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:37:06.679Z | |
| cve-2026-97631 | 9.5 (v4.0) | Pre-boot RCE in EDK II PXE driver |
TianoCore |
EDK2 |
2026-10-22T16:32:27.619Z | 2026-10-30T19:34:40.851Z |
| cve-2026-114487 | N/A | Missing authorization in the PAM AD computer impo… |
Devolutions |
Server |
2026-10-22T15:48:35.922Z | 2026-10-30T19:33:39.484Z |
| cve-2026-115419 | 8.1 (v3.1) 8.6 (v4.0) | Unintended disclosure of data element to wrong session… |
AWS |
strands-agents |
2026-10-22T20:04:04.191Z | 2026-10-30T19:30:50.901Z |
| cve-2026-114655 | 6 (v4.0) 5.9 (v3.1) | KMS request injection via unsanitized key vault and pr… |
MongoDB |
libmongocrypt |
2026-10-22T19:14:00.708Z | 2026-10-30T19:30:19.252Z |
| cve-2026-114654 | 6.9 (v4.0) 6.5 (v3.1) | BSON output corruption via out-of-range binary subtype… |
MongoDB |
C# Driver |
2026-10-22T19:13:59.597Z | 2026-10-30T19:27:57.892Z |
| cve-2026-114653 | 7.1 (v4.0) 6.5 (v3.1) | Silent client-side encryption bypass via unescaped fie… |
MongoDB |
C# Driver |
2026-10-22T19:13:58.414Z | 2026-10-30T19:27:22.054Z |
| cve-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content |
franklioxygen |
MyTube |
2026-10-30T19:26:59.821Z | 2026-10-30T19:26:59.821Z | |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-114136 | Django REST framework: JSONParser applies an attacker-… |
encode |
django-rest-framework |
2026-10-21T20:02:41.030Z | 2026-10-30T19:24:46.203Z | |
| cve-2026-79884 | 8.2 (v3.1) | Authentication Bypass leads to Sensitive Information D… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:06.236Z | 2026-10-30T19:24:08.780Z |
| cve-2026-79883 | 8.3 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:05.048Z | 2026-10-30T19:23:20.891Z |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-79882 | 8.3 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:58.892Z | 2026-10-30T19:21:58.048Z |
| cve-2026-118264 | Echo: Rejected WebSocket upgrades can bypass Echo rout… |
labstack |
echo |
2026-10-28T19:03:01.533Z | 2026-10-30T19:21:07.156Z | |
| cve-2026-79881 | 8.5 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:52.551Z | 2026-10-30T19:20:40.960Z |
| cve-2026-118260 | Echo: BodyDump captures request and response bodies wi… |
labstack |
echo |
2026-10-28T18:56:56.747Z | 2026-10-30T19:19:59.727Z | |
| cve-2026-79880 | 8.7 (v3.1) | Authenticated Server-Side Request Forgery leads to Rem… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:51.352Z | 2026-10-30T19:19:17.886Z |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-79879 | 8.8 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:49.285Z | 2026-10-30T19:17:50.418Z |
| cve-2026-79878 | 8.8 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:48.100Z | 2026-10-30T19:16:43.724Z |
| cve-2026-114510 | Flexible GraphRAG: Cypher/Graph Injection via broken s… |
stevereiner |
flexible-graphrag |
2026-10-22T14:46:52.353Z | 2026-10-30T19:16:29.340Z | |
| cve-2026-119763 | 6.9 (v4.0) 5.3 (v3.1) | changelog.com before commit 7b35e829 Missing Authoriza… |
thechangelog |
changelog.com |
2026-10-30T17:19:55.269Z | 2026-10-30T19:15:19.502Z |
| cve-2026-79877 | 8.8 (v3.1) | Unauthenticated Adjacent Remote Code Execution Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:46.912Z | 2026-10-30T19:14:45.772Z |
| cve-2026-79876 | 9.3 (v3.1) | Unauthenticated Adjacent Sensitive Information Disclos… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:45.563Z | 2026-10-30T19:13:38.215Z |
| cve-2026-79875 | 9.3 (v3.1) | Authentication Bypass in the PAPI Protocol of AOS-8 Al… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:43.906Z | 2026-10-30T19:12:17.655Z |
| cve-2026-79868 | 9.6 (v3.1) | Authentication Bypass Vulnerabilities lead to Complete… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:28.687Z | 2026-10-30T19:11:15.364Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-143 | Vulnérabilité dans MikroTik RouterOS | 2018-03-22T00:00:00.000000 | 2018-03-22T00:00:00.000000 |
| certfr-2018-avi-142 | Multiples vulnérabilités dans GitLab | 2018-03-22T00:00:00.000000 | 2018-03-22T00:00:00.000000 |
| certfr-2018-avi-141 | Vulnérabilité dans Google Chrome | 2018-03-21T00:00:00.000000 | 2018-03-21T00:00:00.000000 |
| certfr-2018-avi-140 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-03-21T00:00:00.000000 | 2018-03-21T00:00:00.000000 |
| certfr-2018-avi-139 | Vulnérabilité dans Tenable Nessus | 2018-03-21T00:00:00.000000 | 2018-03-21T00:00:00.000000 |
| certfr-2018-avi-138 | Multiples vulnérabilités dans Intel SGX | 2018-03-21T00:00:00.000000 | 2018-03-21T00:00:00.000000 |
| certfr-2018-avi-137 | Multiples vulnérabilités dans Mozilla Firefox | 2018-03-19T00:00:00.000000 | 2018-03-19T00:00:00.000000 |
| certfr-2018-avi-136 | Multiples vulnérabilités dans SCADA Schneider Electric MGE SNMP/Web Card 66074 | 2018-03-19T00:00:00.000000 | 2018-03-19T00:00:00.000000 |
| certfr-2018-avi-135 | Vulnérabilité dans VMware Workstation et Fusion | 2018-03-16T00:00:00.000000 | 2018-03-16T00:00:00.000000 |
| certfr-2018-avi-134 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-03-15T00:00:00.000000 | 2018-03-15T00:00:00.000000 |
| certfr-2018-avi-133 | Multiples vulnérabilités dans les produits Microsoft | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-132 | Multiples vulnérabilités dans Microsoft .Net | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-131 | Multiples vulnérabilités dans Microsoft Windows | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-130 | Multiples vulnérabilités dans Microsoft Office | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-129 | Multiples vulnérabilités dans Microsoft Edge | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-128 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-127 | Multiples vulnérabilités dans Adobe Flash Player | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-126 | Multiples vulnérabilités dans Google Chrome | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-125 | Vulnérabilité dans Joomla! | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-124 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-123 | Multiples vulnérabilités dans Mozilla Firefox | 2018-03-14T00:00:00.000000 | 2018-03-14T00:00:00.000000 |
| certfr-2018-avi-122 | Vulnérabilité dans Moxa MXview | 2018-03-13T00:00:00.000000 | 2018-03-13T00:00:00.000000 |
| certfr-2018-avi-121 | Multiples vulnérabilités dans Samba | 2018-03-13T00:00:00.000000 | 2018-03-13T00:00:00.000000 |
| certfr-2018-avi-120 | Multiples vulnérabilités dans Moxa OnCell | 2018-03-12T00:00:00.000000 | 2018-03-12T00:00:00.000000 |
| certfr-2018-avi-119 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-03-12T00:00:00.000000 | 2018-03-12T00:00:00.000000 |
| certfr-2018-avi-118 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2018-03-12T00:00:00.000000 | 2018-03-12T00:00:00.000000 |
| certfr-2018-avi-117 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-03-09T00:00:00.000000 | 2018-03-09T00:00:00.000000 |
| certfr-2018-avi-116 | Multiples vulnérabilités dans les produits Cisco | 2018-03-08T00:00:00.000000 | 2018-03-08T00:00:00.000000 |
| certfr-2018-avi-115 | Multiples vulnérabilités dans Juniper Junos OS | 2018-03-08T00:00:00.000000 | 2018-03-08T00:00:00.000000 |
| certfr-2018-avi-114 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2018-03-08T00:00:00.000000 | 2018-03-08T00:00:00.000000 |