Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109213 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:07:08.177Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-113499. Reason: This candidate is a reservation duplicate of CVE-2026-113499. Notes: All CVE users should reference CVE-2026-113499 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:07:08.177Z | |
| cve-2026-79865 | 9.6 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:23.329Z | 2026-10-30T19:05:15.216Z |
| cve-2026-73322 | Apache Pinot: Incorrect authorization in the single-st… |
Apache Software Foundation |
Apache Pinot |
2026-10-30T18:10:09.341Z | 2026-10-30T19:04:44.187Z | |
| cve-2026-79864 | 9.6 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:22.080Z | 2026-10-30T19:01:54.305Z |
| cve-2026-79863 | 9.6 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerabiliti… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:20.425Z | 2026-10-30T19:00:32.477Z |
| cve-2026-27062 | 4.3 (v3.1) | WordPress WPFunnels plugin <= 3.13.5 - Cross Site Requ… |
WPFunnels Team |
WPFunnels |
2026-10-29T14:38:48.633Z | 2026-10-30T19:00:21.175Z |
| cve-2026-54852 | 5.3 (v3.1) | WordPress Page Restriction WordPress (WP) plugin <= 1.… |
miniOrange |
Page Restriction WordPress (WP) |
2026-10-29T14:40:27.236Z | 2026-10-30T19:00:20.999Z |
| cve-2026-42691 | 5.4 (v3.1) | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access… |
EventPrime |
EventPrime |
2026-10-29T14:40:48.838Z | 2026-10-30T19:00:20.857Z |
| cve-2026-62057 | 5.3 (v3.1) | WordPress Divi Contact Form 7 plugin <= 4.1.0 - Conten… |
Fahim Reza |
Divi Contact Form 7 |
2026-10-30T18:08:54.944Z | 2026-10-30T19:00:20.717Z |
| cve-2026-52710 | 5.3 (v3.1) | WordPress GIFTiT – Free Gifts for WooCommerce pl… |
ithemelandco |
GIFTiT – Free Gifts for WooCommerce |
2026-10-30T18:09:43.100Z | 2026-10-30T19:00:20.558Z |
| cve-2026-119526 | 9.8 (v3.1) | WordPress Royal Event theme <= 2.0 - PHP Object Inject… |
ThemeREX |
Royal Event |
2026-10-30T18:30:31.153Z | 2026-10-30T19:00:20.359Z |
| cve-2026-27061 | 6.5 (v3.1) | WordPress User Registration plugin <= 5.3.0 - Cross Si… |
wpeverest |
User Registration |
2026-10-30T18:30:31.909Z | 2026-10-30T19:00:20.210Z |
| cve-2026-39732 | 9.3 (v3.1) | WordPress Transliterator plugin <= 2.5.13 - SQL Inject… |
Ivijan-Stefan Stipic |
Transliterator |
2026-10-30T18:30:33.419Z | 2026-10-30T19:00:20.047Z |
| cve-2026-39734 | 7.5 (v3.1) | WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal … |
Saad Iqbal |
WP EasyPay |
2026-10-30T18:30:34.168Z | 2026-10-30T19:00:19.915Z |
| cve-2026-39786 | 7.1 (v3.1) | WordPress BA Book Everything plugin <= 1.8.33 - Cross … |
bookingalgorithms |
BA Book Everything |
2026-10-30T18:30:35.811Z | 2026-10-30T19:00:19.629Z |
| cve-2026-54850 | 6.5 (v3.1) | WordPress Booking and Rental Manager plugin <= 2.8.2 -… |
magepeopleteam |
Booking and Rental Manager |
2026-10-30T18:30:37.392Z | 2026-10-30T19:00:19.472Z |
| cve-2026-54854 | 6.3 (v3.1) | WordPress Profile Builder plugin <= 4.0.5 - Privilege … |
Cozmoslabs |
Profile Builder |
2026-10-30T18:30:38.149Z | 2026-10-30T19:00:19.289Z |
| cve-2026-54855 | 7.1 (v3.1) | WordPress Profile Builder plugin <= 4.0.5 - Cross Site… |
Cozmoslabs |
Profile Builder |
2026-10-30T18:30:38.911Z | 2026-10-30T19:00:19.152Z |
| cve-2026-73186 | 8.8 (v3.1) | WordPress Enable Media Replace plugin <= 4.2.2 - PHP O… |
ShortPixel |
Enable Media Replace |
2026-10-30T18:30:39.660Z | 2026-10-30T19:00:19.002Z |
| cve-2026-90888 | 9.8 (v3.1) | WordPress LeadSnap plugin <= 1.25 - PHP Object Injecti… |
leadsnap |
LeadSnap |
2026-10-30T18:30:41.184Z | 2026-10-30T19:00:18.867Z |
| cve-2026-94175 | 7.1 (v3.1) | WordPress All In One Login plugin <= 2.4.1 - Cross Sit… |
Saad Iqbal |
All In One Login |
2026-10-30T18:30:41.949Z | 2026-10-30T19:00:18.724Z |
| cve-2026-105077 | 7.1 (v3.1) | WordPress Ad Inserter plugin <= 2.8.19 - Cross Site Sc… |
Spacetime |
Ad Inserter |
2026-10-30T18:30:42.711Z | 2026-10-30T19:00:18.568Z |
| cve-2026-79862 | 9.6 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerabiliti… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:18.613Z | 2026-10-30T18:59:54.584Z |
| cve-2026-79861 | 9.8 (v3.1) | Unauthenticated Command Injection Vulnerability in the… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:17.012Z | 2026-10-30T18:59:00.409Z |
| cve-2026-7003 | 6.9 (v4.0) 5.3 (v3.1) | WIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials… |
WIT |
SynApps Runtime |
2026-10-30T18:58:29.306Z | 2026-10-30T18:58:29.306Z |
| cve-2026-62303 | Pistache: DoS via stack exhaustion in REST router path… |
pistacheio |
pistache |
2026-10-30T18:58:10.308Z | 2026-10-30T18:58:10.308Z | |
| cve-2026-79860 | 9.8 (v3.1) | Unauthenticated Buffer Overflow Vulnerabilities lead t… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:10.749Z | 2026-10-30T18:57:33.546Z |
| cve-2026-79859 | 9.8 (v3.1) | Unauthenticated Buffer Overflow Vulnerabilities lead t… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:09.507Z | 2026-10-30T18:55:52.340Z |
| cve-2026-114486 | N/A | Incorrect authorization in the Devolutions Gatewa… |
Devolutions |
Server |
2026-10-22T15:38:55.177Z | 2026-10-30T18:53:01.286Z |
| cve-2012-5605 | 3.3 (v3.1) | Grinder: red hat cloudforms: grinder in red hat cloudf… |
Red Hat |
CloudForms for RHEL 6 |
2013-01-04T22:00:00.000Z | 2026-10-30T18:52:20.667Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-083 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-082 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-081 | Vulnérabilité dans Google Chrome | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-080 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-12T00:00:00.000000 | 2018-02-12T00:00:00.000000 |
| certfr-2018-avi-079 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-02-12T00:00:00.000000 | 2018-02-12T00:00:00.000000 |
| certfr-2018-avi-078 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-02-12T00:00:00.000000 | 2018-02-12T00:00:00.000000 |
| certfr-2018-avi-077 | Multiples vulnérabilités dans les produits VMware | 2018-02-12T00:00:00.000000 | 2018-02-12T00:00:00.000000 |
| certfr-2018-avi-076 | Multiples vulnérabilités dans les produits Cisco | 2018-02-08T00:00:00.000000 | 2018-02-08T00:00:00.000000 |
| certfr-2018-avi-075 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-08T00:00:00.000000 | 2018-02-08T00:00:00.000000 |
| certfr-2018-avi-074 | Vulnérabilité dans SCADA les logiciels Schneider Electric IGSS SCADA | 2018-02-07T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-avi-073 | Vulnérabilité dans SCADA CODESYS Web Server | 2018-02-07T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-avi-072 | Multiples vulnérabilités dans les produits Microsoft Windows utilisant le composant Adobe Flash Player | 2018-02-07T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-avi-071 | Multiples vulnérabilité dans Adobe Flash Player | 2018-02-07T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-avi-070 | Vulnérabilité dans F5 BIG-IP | 2018-02-06T00:00:00.000000 | 2018-02-06T00:00:00.000000 |
| certfr-2018-avi-069 | Multiples vulnérabilités dans Google Chrome OS | 2018-02-06T00:00:00.000000 | 2018-02-06T00:00:00.000000 |
| certfr-2018-avi-068 | Vulnérabilité dans Juniper Junos OS | 2018-02-06T00:00:00.000000 | 2018-02-06T00:00:00.000000 |
| certfr-2018-avi-067 | Multiples vulnérabilités dans Google Android | 2018-02-06T00:00:00.000000 | 2018-02-06T00:00:00.000000 |
| certfr-2018-avi-066 | Multiples vulnérabilités dans PHP | 2018-02-05T00:00:00.000000 | 2018-02-05T00:00:00.000000 |
| certfr-2018-avi-060 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-01-29T00:00:00.000000 | 2018-02-05T00:00:00.000000 |
| certfr-2018-avi-065 | Multiples vulnérabilités dans Google Chrome et Chrome OS | 2018-02-02T00:00:00.000000 | 2018-02-02T00:00:00.000000 |
| certfr-2018-avi-064 | Vulnérabilité dans Cisco Aggregation Services Router (ASR) 9000 Series | 2018-02-01T00:00:00.000000 | 2018-02-01T00:00:00.000000 |
| certfr-2018-avi-063 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-01-30T00:00:00.000000 | 2018-01-30T00:00:00.000000 |
| certfr-2018-avi-062 | Vulnérabilité dans Mozilla Firefox | 2018-01-30T00:00:00.000000 | 2018-01-30T00:00:00.000000 |
| certfr-2018-avi-059 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-01-29T00:00:00.000000 | 2018-01-30T00:00:00.000000 |
| certfr-2018-avi-061 | Multiples vulnérabilités dans les produits VMware | 2018-01-29T00:00:00.000000 | 2018-01-29T00:00:00.000000 |
| certfr-2018-avi-058 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-01-26T00:00:00.000000 | 2018-01-26T00:00:00.000000 |
| certfr-2018-avi-057 | Multiples vulnérabilités dans SCADA Siemens TeleControl Server Basic | 2018-01-26T00:00:00.000000 | 2018-01-26T00:00:00.000000 |
| certfr-2018-avi-056 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-01-26T00:00:00.000000 | 2018-01-26T00:00:00.000000 |
| certfr-2018-avi-055 | Vulnérabilité dans SCADA Siemens Desigo PXC | 2018-01-25T00:00:00.000000 | 2018-01-25T00:00:00.000000 |
| certfr-2018-avi-054 | Multiples vulnérabilités dans Google Chrome | 2018-01-25T00:00:00.000000 | 2018-01-25T00:00:00.000000 |