Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-104674 | 4.3 (v3.1) | WordPress Booktics plugin <= 1.0.31 - Broken Access Co… |
Arraytics |
Booktics |
2026-10-30T18:12:56.057Z | 2026-10-30T18:49:58.474Z |
| cve-2026-62019 | 4.3 (v3.1) | WordPress BookIt plugin <= 2.6.0.6 - Broken Access Con… |
Liquid Web / StellarWP |
BookIt |
2026-10-30T18:13:23.687Z | 2026-10-30T18:49:58.331Z |
| cve-2026-62023 | 4.3 (v3.1) | WordPress Unlimited Elements For Elementor (Free Widge… |
Unlimited Elements |
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) |
2026-10-30T18:14:07.501Z | 2026-10-30T18:49:58.188Z |
| cve-2026-114690 | 6.2 (v3.1) | Gcc: confirmed out-of-bounds read/write in libstdc++ p… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-30T07:13:04.008Z | 2026-10-30T18:49:39.316Z |
| cve-2026-18477 | 4.4 (v3.1) | Tar: tar: toctou in incremental dumpdir 'x' rename han… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-03T15:34:36.627Z | 2026-10-30T18:49:29.535Z |
| cve-2026-115453 | 7.1 (v4.0) | Cross user deletion and modification of cart and wishl… |
MarcosCamara01 |
Ecommerce Template |
2026-10-22T15:22:09.445Z | 2026-10-30T18:49:27.205Z |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-115450 | 7.1 (v4.0) | Price manipulation in the Ecommerce Template checkout … |
MarcosCamara01 |
Ecommerce Template |
2026-10-22T15:13:37.089Z | 2026-10-30T18:47:42.157Z |
| cve-2026-116586 | Go JOSE: Panics in JSON parsing |
go-jose |
go-jose |
2026-10-26T21:09:26.349Z | 2026-10-30T18:46:23.244Z | |
| cve-2026-113582 | 8.7 (v4.0) 7.5 (v3.1) | Apache Abdera: XML external entity expansion in Atom d… |
Apache Software Foundation |
Apache Abdera |
2026-10-22T13:27:11.536Z | 2026-10-30T18:46:10.568Z |
| cve-2026-61848 | Crass: Non-ASCII characters cause superlinear CPU cons… |
rgrove |
crass |
2026-10-30T18:45:20.036Z | 2026-10-30T18:45:20.036Z | |
| cve-2026-115887 | graphql-scalars PhoneNumber scalar is vulnerable to re… |
graphql-hive |
graphql-scalars |
2026-10-23T21:19:42.561Z | 2026-10-30T18:45:04.885Z | |
| cve-2026-115895 | Happy DOM: Incomplete fix for CVE-2026-33943: unsaniti… |
capricorn86 |
happy-dom |
2026-10-23T21:32:24.999Z | 2026-10-30T18:43:41.641Z | |
| cve-2026-66026 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-30T18:42:19.607Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-30T18:42:19.607Z | |
| cve-2026-66025 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-30T18:40:49.327Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-30T18:40:49.327Z | |
| cve-2026-101360 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:22.858Z | 2026-10-30T18:39:59.176Z | |
| cve-2026-101361 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.215Z | 2026-10-30T18:39:50.501Z | |
| cve-2026-101362 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.558Z | 2026-10-30T18:39:40.939Z | |
| cve-2026-101363 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.887Z | 2026-10-30T18:39:32.938Z | |
| cve-2026-101364 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:24.238Z | 2026-10-30T18:39:24.564Z | |
| cve-2026-76408 | N/A | Improper Control of a Resource Through its Lifetime in… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:14.362Z | 2026-10-30T18:39:14.721Z |
| cve-2026-118084 | 6.5 (v3.1) | WordPress Hotel Booking plugin <= 3.8 - Insecure Direc… |
nicdark |
Hotel Booking |
2026-10-29T15:24:41.085Z | 2026-10-30T18:39:14.169Z |
| cve-2026-61996 | 8.5 (v3.1) | WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injec… |
favethemes |
MLS On The Fly |
2026-10-29T15:24:11.830Z | 2026-10-30T18:39:14.014Z |
| cve-2026-54865 | 6.5 (v3.1) | WordPress Podamibe Custom User Gravatar plugin <= 1.0.… |
Podamibe Nepal |
Podamibe Custom User Gravatar |
2026-10-29T15:24:05.681Z | 2026-10-30T18:39:13.879Z |
| cve-2026-115610 | 6.5 (v3.1) | WordPress PublishPress Authors plugin <= 4.17.0 - Cros… |
PublishPress |
PublishPress Authors |
2026-10-29T14:20:16.168Z | 2026-10-30T18:39:13.737Z |
| cve-2026-114706 | 6.5 (v3.1) | WordPress Strong Testimonials plugin <= 3.3.15 - Cross… |
WP Chill |
Strong Testimonials |
2026-10-29T14:32:29.513Z | 2026-10-30T18:39:13.589Z |
| cve-2026-116848 | 6.5 (v3.1) | WordPress The Plus Addons for Elementor Page Builder L… |
POSIMYTH Innovations |
The Plus Addons for Elementor Page Builder Lite |
2026-10-29T15:04:29.001Z | 2026-10-30T18:39:13.456Z |
| cve-2026-76529 | N/A | Improper Protection of Alternate Path in Splunk SOAR |
Splunk |
Splunk SOAR |
2026-10-21T22:52:18.217Z | 2026-10-30T18:39:06.145Z |
| cve-2026-107017 | N/A | Insecure permissions in the ShortcutDispatchActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:55.888Z |
| cve-2026-107023 | N/A | Insecure permissions in the ContentProvider compo… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:47.840Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-386 | Vulnérabilité dans MongoDB | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-385 | Multiples vulnérabilités dans les produits Apple | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-384 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-10-31T00:00:00.000000 | 2017-10-31T00:00:00.000000 |
| certfr-2017-avi-383 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-31T00:00:00.000000 | 2017-10-31T00:00:00.000000 |
| certfr-2017-avi-382 | Vulnérabilité dans Google Chrome | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-381 | Multiples vulnérabilités dans PHP | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-380 | Multiples vulnérabilités dans Apache OpenOffice | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-379 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-27T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-avi-378 | Vulnérabilité dans Citrix XenServer | 2017-10-24T00:00:00.000000 | 2017-10-24T00:00:00.000000 |
| certfr-2017-avi-377 | Vulnérabilité dans Xen | 2017-10-24T00:00:00.000000 | 2017-10-24T00:00:00.000000 |
| certfr-2017-avi-374 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-20T00:00:00.000000 | 2017-10-23T00:00:00.000000 |
| certfr-2017-avi-376 | Vulnérabilité dans F5 BIG-IP | 2017-10-20T00:00:00.000000 | 2017-10-20T00:00:00.000000 |
| certfr-2017-avi-375 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2017-10-20T00:00:00.000000 | 2017-10-20T00:00:00.000000 |
| certfr-2017-avi-373 | Multiples vulnérabilités dans RedHat wpa_supplicant | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-372 | Multiples vulnérabilités dans les produits Cisco | 2017-10-19T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-avi-371 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-370 | Multiples vulnérabilités dans Oracle Database Server | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-369 | Multiples vulnérabilités dans la suite de produits Oracle Sun System | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-368 | Multiples vulnérabilités dans Oracle Virtualization | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-367 | Multiples vulnérabilités dans Oracle MySQL | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-366 | Multiples vulnérabilités dans Oracle Java SE | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-365 | Multiples vulnérabilités dans Juniper Junos Space | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-364 | Multiples vulnérabilités dans Google Chrome | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-363 | Multiples vulnérabilités dans SUSE wpa_supplicant | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-362 | Multiples vulnérabilités dans NVIDIA Tegra Jetson L4T | 2017-10-18T00:00:00.000000 | 2017-10-18T00:00:00.000000 |
| certfr-2017-avi-361 | Multiples vulnérabilités dans les produits Juniper utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-360 | Multiples vulnérabilités dans les produits Fortinet utilisant le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-359 | Multiples vulnérabilités dans Ubuntu wpa_supplicant et hostpad | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-358 | Multiples vulnérabilités dans Debian sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-avi-357 | Vulnérabilité dans Microsoft Windows sur le protocole WPA/WPA2 | 2017-10-17T00:00:00.000000 | 2017-10-17T00:00:00.000000 |