Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79880 | 8.7 (v3.1) | Authenticated Server-Side Request Forgery leads to Rem… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:51.352Z | 2026-10-30T19:19:17.886Z |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-79879 | 8.8 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:49.285Z | 2026-10-30T19:17:50.418Z |
| cve-2026-79878 | 8.8 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:48.100Z | 2026-10-30T19:16:43.724Z |
| cve-2026-114510 | Flexible GraphRAG: Cypher/Graph Injection via broken s… |
stevereiner |
flexible-graphrag |
2026-10-22T14:46:52.353Z | 2026-10-30T19:16:29.340Z | |
| cve-2026-119763 | 6.9 (v4.0) 5.3 (v3.1) | changelog.com before commit 7b35e829 Missing Authoriza… |
thechangelog |
changelog.com |
2026-10-30T17:19:55.269Z | 2026-10-30T19:15:19.502Z |
| cve-2026-79877 | 8.8 (v3.1) | Unauthenticated Adjacent Remote Code Execution Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:46.912Z | 2026-10-30T19:14:45.772Z |
| cve-2026-79876 | 9.3 (v3.1) | Unauthenticated Adjacent Sensitive Information Disclos… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:45.563Z | 2026-10-30T19:13:38.215Z |
| cve-2026-79875 | 9.3 (v3.1) | Authentication Bypass in the PAPI Protocol of AOS-8 Al… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:43.906Z | 2026-10-30T19:12:17.655Z |
| cve-2026-79868 | 9.6 (v3.1) | Authentication Bypass Vulnerabilities lead to Complete… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:28.687Z | 2026-10-30T19:11:15.364Z |
| cve-2026-79867 | 9.6 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:26.627Z | 2026-10-30T19:10:04.525Z |
| cve-2026-118992 | N/A | CallBackery versions before 0.62.0 for Perl allow OS c… |
|
|
2026-10-30T13:11:55.375Z | 2026-10-30T19:08:35.108Z |
| cve-2026-79866 | 9.6 (v3.1) | Unauthenticated Adjacent Path Traversal Vulnerability … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:24.966Z | 2026-10-30T19:07:54.612Z |
| cve-2026-109213 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:07:08.177Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a reservation duplicate of CVE-2026-113499. Notes: All CVE users should reference CVE-2026-113499 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:07:08.177Z | |
| cve-2026-79865 | 9.6 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:23.329Z | 2026-10-30T19:05:15.216Z |
| cve-2026-73322 | Apache Pinot: Incorrect authorization in the single-st… |
Apache Software Foundation |
Apache Pinot |
2026-10-30T18:10:09.341Z | 2026-10-30T19:04:44.187Z | |
| cve-2026-79864 | 9.6 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:22.080Z | 2026-10-30T19:01:54.305Z |
| cve-2026-79863 | 9.6 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerabiliti… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:20.425Z | 2026-10-30T19:00:32.477Z |
| cve-2026-27062 | 4.3 (v3.1) | WordPress WPFunnels plugin <= 3.13.5 - Cross Site Requ… |
WPFunnels Team |
WPFunnels |
2026-10-29T14:38:48.633Z | 2026-10-30T19:00:21.175Z |
| cve-2026-54852 | 5.3 (v3.1) | WordPress Page Restriction WordPress (WP) plugin <= 1.… |
miniOrange |
Page Restriction WordPress (WP) |
2026-10-29T14:40:27.236Z | 2026-10-30T19:00:20.999Z |
| cve-2026-42691 | 5.4 (v3.1) | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access… |
EventPrime |
EventPrime |
2026-10-29T14:40:48.838Z | 2026-10-30T19:00:20.857Z |
| cve-2026-62057 | 5.3 (v3.1) | WordPress Divi Contact Form 7 plugin <= 4.1.0 - Conten… |
Fahim Reza |
Divi Contact Form 7 |
2026-10-30T18:08:54.944Z | 2026-10-30T19:00:20.717Z |
| cve-2026-52710 | 5.3 (v3.1) | WordPress GIFTiT – Free Gifts for WooCommerce pl… |
ithemelandco |
GIFTiT – Free Gifts for WooCommerce |
2026-10-30T18:09:43.100Z | 2026-10-30T19:00:20.558Z |
| cve-2026-119526 | 9.8 (v3.1) | WordPress Royal Event theme <= 2.0 - PHP Object Inject… |
ThemeREX |
Royal Event |
2026-10-30T18:30:31.153Z | 2026-10-30T19:00:20.359Z |
| cve-2026-27061 | 6.5 (v3.1) | WordPress User Registration plugin <= 5.3.0 - Cross Si… |
wpeverest |
User Registration |
2026-10-30T18:30:31.909Z | 2026-10-30T19:00:20.210Z |
| cve-2026-39732 | 9.3 (v3.1) | WordPress Transliterator plugin <= 2.5.13 - SQL Inject… |
Ivijan-Stefan Stipic |
Transliterator |
2026-10-30T18:30:33.419Z | 2026-10-30T19:00:20.047Z |
| cve-2026-39734 | 7.5 (v3.1) | WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal … |
Saad Iqbal |
WP EasyPay |
2026-10-30T18:30:34.168Z | 2026-10-30T19:00:19.915Z |
| cve-2026-39786 | 7.1 (v3.1) | WordPress BA Book Everything plugin <= 1.8.33 - Cross … |
bookingalgorithms |
BA Book Everything |
2026-10-30T18:30:35.811Z | 2026-10-30T19:00:19.629Z |
| cve-2026-54850 | 6.5 (v3.1) | WordPress Booking and Rental Manager plugin <= 2.8.2 -… |
magepeopleteam |
Booking and Rental Manager |
2026-10-30T18:30:37.392Z | 2026-10-30T19:00:19.472Z |
| cve-2026-54854 | 6.3 (v3.1) | WordPress Profile Builder plugin <= 4.0.5 - Privilege … |
Cozmoslabs |
Profile Builder |
2026-10-30T18:30:38.149Z | 2026-10-30T19:00:19.289Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-113 | Multiples vulnérabilités dans Google Chrome et Chrome OS | 2018-03-07T00:00:00.000000 | 2018-03-07T00:00:00.000000 |
| certfr-2018-avi-112 | Multiples vulnérabilités dans Google Android | 2018-03-06T00:00:00.000000 | 2018-03-06T00:00:00.000000 |
| certfr-2018-avi-111 | Vulnérabilité dans les produits Pivotal | 2018-03-05T00:00:00.000000 | 2018-03-05T00:00:00.000000 |
| certfr-2018-avi-110 | Vulnérabilité dans le noyau Linux de SUSE | 2018-03-02T00:00:00.000000 | 2018-03-05T00:00:00.000000 |
| certfr-2018-avi-109 | Multiples vulnérabilités dans PHP | 2018-03-02T00:00:00.000000 | 2018-03-02T00:00:00.000000 |
| certfr-2018-avi-108 | Multiples vulnérabilités dans F5 BIG-IP | 2018-03-01T00:00:00.000000 | 2018-03-02T00:00:00.000000 |
| certfr-2018-avi-107 | Vulnérabilité dans le noyau Linux de SUSE | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-106 | Multiples vulnérabilités dans Citrix NetScaler Application Delivery Controller (ADC) et NetScaler Gateway | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-105 | Vulnérabilité dans ISC BIND | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-104 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-28T00:00:00.000000 | 2018-02-28T00:00:00.000000 |
| certfr-2018-avi-103 | Multiples vulnérabilités dans Magento | 2018-02-28T00:00:00.000000 | 2018-02-28T00:00:00.000000 |
| certfr-2018-avi-102 | Multiples vulnérabilités dans Xen | 2018-02-27T00:00:00.000000 | 2018-02-27T00:00:00.000000 |
| certfr-2018-avi-101 | Multiples vulnérabilités dans Google Chrome OS | 2018-02-26T00:00:00.000000 | 2018-02-26T00:00:00.000000 |
| certfr-2018-avi-100 | Multiples vulnérabilités dans Wireshark | 2018-02-26T00:00:00.000000 | 2018-02-26T00:00:00.000000 |
| certfr-2018-avi-094 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-02-22T00:00:00.000000 | 2018-02-23T00:00:00.000000 |
| certfr-2018-avi-099 | Multiples vulnérabilités dans Drupal | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-098 | Multiples vulnérabilités dans les produits Cisco | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-097 | Multiples vulnérabilités dans Asterisk | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-096 | Vulnérabilité dans SCADA Schneider Electric Saitel DP | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-095 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-093 | Vulnérabilité dans phpMyAdmin | 2018-02-21T00:00:00.000000 | 2018-02-21T00:00:00.000000 |
| certfr-2018-avi-092 | Vulnérabilité dans Juniper AppFormix | 2018-02-21T00:00:00.000000 | 2018-02-21T00:00:00.000000 |
| certfr-2018-avi-091 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-20T00:00:00.000000 | 2018-02-20T00:00:00.000000 |
| certfr-2018-avi-090 | Vulnérabilité dans les produits Apple | 2018-02-20T00:00:00.000000 | 2018-02-20T00:00:00.000000 |
| certfr-2018-avi-089 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-02-16T00:00:00.000000 | 2018-02-16T00:00:00.000000 |
| certfr-2018-avi-088 | Multiples vulnérabilités dans les produits Microsoft | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-087 | Multiples vulnérabilités dans Microsoft Windows | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-086 | Multiples vulnérabilités dans Microsoft Office | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-085 | Multiples vulnérabilités dans Microsoft Edge | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-084 | Multiples vulnérabilités dans Microsoft IE | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |