Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-18477 | 4.4 (v3.1) | Tar: tar: toctou in incremental dumpdir 'x' rename han… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-03T15:34:36.627Z | 2026-10-30T18:49:29.535Z |
| cve-2026-115453 | 7.1 (v4.0) | Cross user deletion and modification of cart and wishl… |
MarcosCamara01 |
Ecommerce Template |
2026-10-22T15:22:09.445Z | 2026-10-30T18:49:27.205Z |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-115450 | 7.1 (v4.0) | Price manipulation in the Ecommerce Template checkout … |
MarcosCamara01 |
Ecommerce Template |
2026-10-22T15:13:37.089Z | 2026-10-30T18:47:42.157Z |
| cve-2026-116586 | Go JOSE: Panics in JSON parsing |
go-jose |
go-jose |
2026-10-26T21:09:26.349Z | 2026-10-30T18:46:23.244Z | |
| cve-2026-113582 | 8.7 (v4.0) 7.5 (v3.1) | Apache Abdera: XML external entity expansion in Atom d… |
Apache Software Foundation |
Apache Abdera |
2026-10-22T13:27:11.536Z | 2026-10-30T18:46:10.568Z |
| cve-2026-61848 | Crass: Non-ASCII characters cause superlinear CPU cons… |
rgrove |
crass |
2026-10-30T18:45:20.036Z | 2026-10-30T18:45:20.036Z | |
| cve-2026-115887 | graphql-scalars PhoneNumber scalar is vulnerable to re… |
graphql-hive |
graphql-scalars |
2026-10-23T21:19:42.561Z | 2026-10-30T18:45:04.885Z | |
| cve-2026-115895 | Happy DOM: Incomplete fix for CVE-2026-33943: unsaniti… |
capricorn86 |
happy-dom |
2026-10-23T21:32:24.999Z | 2026-10-30T18:43:41.641Z | |
| cve-2026-66026 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-30T18:42:19.607Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-30T18:42:19.607Z | |
| cve-2026-66025 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-30T18:40:49.327Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-30T18:40:49.327Z | |
| cve-2026-101360 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:22.858Z | 2026-10-30T18:39:59.176Z | |
| cve-2026-101361 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.215Z | 2026-10-30T18:39:50.501Z | |
| cve-2026-101362 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.558Z | 2026-10-30T18:39:40.939Z | |
| cve-2026-101363 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:23.887Z | 2026-10-30T18:39:32.938Z | |
| cve-2026-101364 | Vulnerability in Oracle REST Data Services (compo… |
Oracle Corporation |
Oracle REST Data Services |
2026-10-20T21:20:24.238Z | 2026-10-30T18:39:24.564Z | |
| cve-2026-76408 | N/A | Improper Control of a Resource Through its Lifetime in… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:14.362Z | 2026-10-30T18:39:14.721Z |
| cve-2026-118084 | 6.5 (v3.1) | WordPress Hotel Booking plugin <= 3.8 - Insecure Direc… |
nicdark |
Hotel Booking |
2026-10-29T15:24:41.085Z | 2026-10-30T18:39:14.169Z |
| cve-2026-61996 | 8.5 (v3.1) | WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injec… |
favethemes |
MLS On The Fly |
2026-10-29T15:24:11.830Z | 2026-10-30T18:39:14.014Z |
| cve-2026-54865 | 6.5 (v3.1) | WordPress Podamibe Custom User Gravatar plugin <= 1.0.… |
Podamibe Nepal |
Podamibe Custom User Gravatar |
2026-10-29T15:24:05.681Z | 2026-10-30T18:39:13.879Z |
| cve-2026-115610 | 6.5 (v3.1) | WordPress PublishPress Authors plugin <= 4.17.0 - Cros… |
PublishPress |
PublishPress Authors |
2026-10-29T14:20:16.168Z | 2026-10-30T18:39:13.737Z |
| cve-2026-114706 | 6.5 (v3.1) | WordPress Strong Testimonials plugin <= 3.3.15 - Cross… |
WP Chill |
Strong Testimonials |
2026-10-29T14:32:29.513Z | 2026-10-30T18:39:13.589Z |
| cve-2026-116848 | 6.5 (v3.1) | WordPress The Plus Addons for Elementor Page Builder L… |
POSIMYTH Innovations |
The Plus Addons for Elementor Page Builder Lite |
2026-10-29T15:04:29.001Z | 2026-10-30T18:39:13.456Z |
| cve-2026-76529 | N/A | Improper Protection of Alternate Path in Splunk SOAR |
Splunk |
Splunk SOAR |
2026-10-21T22:52:18.217Z | 2026-10-30T18:39:06.145Z |
| cve-2026-107017 | N/A | Insecure permissions in the ShortcutDispatchActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:55.888Z |
| cve-2026-107023 | N/A | Insecure permissions in the ContentProvider compo… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:47.840Z |
| cve-2026-107028 | N/A | Insecure permissions in wbpxre150 Shopping List v… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:39.719Z |
| cve-2026-107034 | N/A | Insecure permissions in LeafPad / Leaf Note v1.21… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:32.136Z |
| cve-2026-107039 | N/A | Insecure permissions in the ActivityMain componen… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:24.152Z |
| cve-2026-107044 | N/A | Insecure permissions in ProjectMAXS MAXS Main v0.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:14.936Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-326 | Vulnérabilité dans SCADA Siemens Ruggedcom Discovery Protocol | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-325 | Multiples vulnérabilités dans les produits Cisco | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-324 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-323 | Vulnérabilité dans Schneider Electric InduSoft et InTouch Machine Edition | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-322 | Vulnérabilité dans Citrix NetScaler et CloudBridge | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-321 | Multiples vulnérabilités dans Apple iOS | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-320 | Multiples vulnérabilités dans les produits Apple | 2017-09-26T00:00:00.000000 | 2017-09-26T00:00:00.000000 |
| certfr-2017-avi-319 | Vulnérabilité dans Citrix NetScaler | 2017-09-25T00:00:00.000000 | 2017-09-25T00:00:00.000000 |
| certfr-2017-avi-318 | Multiples vulnérabilités dans Google Chrome | 2017-09-22T00:00:00.000000 | 2017-09-22T00:00:00.000000 |
| certfr-2017-avi-317 | Multiples vulnérabilités dans les produits Cisco | 2017-09-21T00:00:00.000000 | 2017-09-21T00:00:00.000000 |
| certfr-2017-avi-316 | Multiples vulnérabilités dans Samba | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-315 | Multiples vulnérabilités dans Joomla! | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-314 | Multiples vulnérabilités dans Apache Tomcat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-313 | Vulnérabilité dans Asterisk | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-312 | Multiples vulnérabilités dans WordPress | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-311 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-310 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-309 | Multiples vulnérabilités dans Moodle | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-308 | Multiples vulnérabilités dans les produits Apple | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-307 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-09-19T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-306 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-18T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-305 | Vulnérabilité dans SCADA Schneider Electric InduSoft Web Studio | 2017-09-18T00:00:00.000000 | 2017-09-18T00:00:00.000000 |
| certfr-2017-avi-304 | Multiples vulnérabilités dans les produits VMware | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-303 | Multiples vulnérabilités dans Magento | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-301 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-14T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-302 | Multiples vulnérabilités dans Citrix XenServer | 2017-09-14T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-300 | Vulnérabilité dans Cisco Meeting Server | 2017-09-14T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-293 | Vulnérabilité dans le noyau Linux de SUSE | 2017-09-13T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-291 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2017-09-13T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-299 | Multiples vulnérabilités dans Microsoft IE | 2017-09-13T00:00:00.000000 | 2017-09-13T00:00:00.000000 |