Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76529 | N/A | Improper Protection of Alternate Path in Splunk SOAR |
Splunk |
Splunk SOAR |
2026-10-21T22:52:18.217Z | 2026-10-30T18:39:06.145Z |
| cve-2026-107017 | N/A | Insecure permissions in the ShortcutDispatchActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:55.888Z |
| cve-2026-107023 | N/A | Insecure permissions in the ContentProvider compo… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:47.840Z |
| cve-2026-107028 | N/A | Insecure permissions in wbpxre150 Shopping List v… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:39.719Z |
| cve-2026-107034 | N/A | Insecure permissions in LeafPad / Leaf Note v1.21… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:32.136Z |
| cve-2026-107039 | N/A | Insecure permissions in the ActivityMain componen… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:24.152Z |
| cve-2026-107044 | N/A | Insecure permissions in ProjectMAXS MAXS Main v0.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:14.936Z |
| cve-2026-107049 | N/A | An issue in Forkyz versionCode 8500000 allows att… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:38:05.715Z |
| cve-2026-107055 | N/A | Insecure permissions in the autosave component of… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:37:53.151Z |
| cve-2026-107060 | N/A | Insecure permissions in Tailscale versionCode 297… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T18:37:31.032Z |
| cve-2026-119701 | 6.9 (v4.0) 5.3 (v3.1) | WPGraphQL before 2.24.1 Email Flooding via Aliased sen… |
WPGraphQL |
WPGraphQL |
2026-10-30T15:16:02.605Z | 2026-10-30T18:36:52.042Z |
| cve-2026-119705 | 6.9 (v4.0) 5.3 (v3.1) | SerpBear before 3.1.1 Missing Authentication via POST … |
towfiqi |
serpbear |
2026-10-30T15:16:05.377Z | 2026-10-30T18:36:44.022Z |
| cve-2026-119709 | 6.9 (v4.0) 5.8 (v3.1) | Grimoire before 1.0.0 Unauthenticated SSRF via /api/fe… |
goniszewski |
grimoire |
2026-10-30T15:16:09.484Z | 2026-10-30T18:36:35.797Z |
| cve-2026-119713 | 8.7 (v4.0) 8.8 (v3.1) | Paperclip 2026.403.0 before 2026.416.0 RCE via Executi… |
paperclipai |
@paperclipai/server |
2026-10-30T15:16:12.174Z | 2026-10-30T18:36:27.401Z |
| cve-2026-119721 | 6.9 (v4.0) 6.1 (v3.1) | Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Boun… |
Blender Foundation |
Blender |
2026-10-30T15:16:17.738Z | 2026-10-30T18:36:11.655Z |
| cve-2026-119288 | Zuke: Argument injection on Windows: batch shims are l… |
zuke-build |
zuke |
2026-10-30T15:47:23.790Z | 2026-10-30T18:36:00.991Z | |
| cve-2026-21811 | 3.8 (v3.1) | Multiple security vulnerabilities affect HCL AppScan A… |
HCL Software |
AppScan Integration with Azure Boards for ASoC & A360 |
2026-10-22T09:06:29.465Z | 2026-10-30T18:35:58.616Z |
| cve-2026-119298 | croc: Overwrite-confirmation bypass via a crafted "cro… |
schollz |
croc |
2026-10-30T16:12:49.765Z | 2026-10-30T18:35:53.606Z | |
| cve-2026-39375 | Frappe LMS has Stored XSS in Course Meta |
frappe |
lms |
2026-10-30T16:46:58.127Z | 2026-10-30T18:35:46.027Z | |
| cve-2026-50000 | SecureDrop: API session token reuse against the Journa… |
freedomofpress |
securedrop |
2026-10-30T17:11:13.250Z | 2026-10-30T18:35:34.990Z | |
| cve-2026-104744 | Independent Analytics Pro <= 2.15.5 - Unauthenticated … |
Independent Analytics |
Independent Analytics Pro |
2026-10-30T17:15:31.809Z | 2026-10-30T18:35:23.501Z | |
| cve-2026-119762 | 8.7 (v4.0) 7.5 (v3.1) | Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2… |
Axigen |
Axigen Mail Server |
2026-10-30T17:19:54.568Z | 2026-10-30T18:35:08.753Z |
| cve-2026-119620 | 37954679 cak-filemanagement-system add_logs.php move_u… |
37954679 |
cak-filemanagement-system |
2026-10-30T17:45:15.786Z | 2026-10-30T18:34:44.346Z | |
| cve-2026-114691 | 5.9 (v3.1) | Gcc: integer wrap in `std |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-30T07:13:05.891Z | 2026-10-30T18:34:30.487Z |
| cve-2026-119979 | 8.7 (v4.0) 8.8 (v3.1) | LM Studio before 0.4.22+1 Path Traversal via Model Dow… |
Element Labs |
LM Studio |
2026-10-30T17:48:43.705Z | 2026-10-30T18:34:20.363Z |
| cve-2026-114460 | 5.3 (v3.1) | Mod_qos: query truncation during json body merging per… |
pbuchbinder |
mod_qos |
2026-10-22T06:37:07.818Z | 2026-10-30T18:34:08.202Z |
| cve-2026-39739 | 6.5 (v3.1) | WordPress Ultimate Addons for Elementor - Lite plugin … |
Brainstorm Force |
Ultimate Addons for Elementor - Lite |
2026-10-30T18:11:41.349Z | 2026-10-30T18:34:07.113Z |
| cve-2026-62056 | 5.3 (v3.1) | WordPress Fluent CRM plugin <= 3.2.6 - Broken Access C… |
WP ManageNinja LLC |
Fluent CRM |
2026-10-30T18:14:58.428Z | 2026-10-30T18:33:56.893Z |
| cve-2026-62264 | PDF Reader MCP: HTTP transport accepts unauthenticated… |
SylphxAI |
pdf-reader-mcp |
2026-10-30T18:32:18.093Z | 2026-10-30T18:32:18.093Z | |
| cve-2026-92744 | 8.7 (v4.0) | Delinea Privilege Manager agent unauthenticated remote… |
Delinea |
Privilege Manager |
2026-10-29T22:56:09.879Z | 2026-10-30T18:31:46.118Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-266 | Multiples vulnérabilités dans Citrix XenServer | 2017-08-16T00:00:00.000000 | 2017-08-16T00:00:00.000000 |
| certfr-2017-avi-247 | Multiples vulnérabilités dans le noyau Linux d' Ubuntu | 2017-08-04T00:00:00.000000 | 2017-08-16T00:00:00.000000 |
| certfr-2017-avi-265 | Vulnérabilité dans VMware NSX-V Edge | 2017-08-14T00:00:00.000000 | 2017-08-14T00:00:00.000000 |
| certfr-2017-avi-263 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-08-11T00:00:00.000000 | 2017-08-14T00:00:00.000000 |
| certfr-2017-avi-264 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-08-11T00:00:00.000000 | 2017-08-11T00:00:00.000000 |
| certfr-2017-avi-249 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-08-07T00:00:00.000000 | 2017-08-10T00:00:00.000000 |
| certfr-2017-avi-262 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-261 | Multiples vulnérabilités dans Microsoft Windows | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-260 | Vulnérabilité dans Microsoft SharePoint | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-259 | Vulnérabilité dans Microsoft SQL Server | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-258 | Multiples vulnérabilités dans Microsoft Edge | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-257 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-256 | Multiples vulnérabilités dans Mozilla Firefox | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-255 | Multiples vulnérabilités dans Adobe Flash Player | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-254 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-253 | Multiples vulnérabilités dans Fortinet FortiOS et FortiWeb | 2017-08-09T00:00:00.000000 | 2017-08-09T00:00:00.000000 |
| certfr-2017-avi-252 | Vulnérabilité dans les produits Netsarang | 2017-08-08T00:00:00.000000 | 2017-08-08T00:00:00.000000 |
| certfr-2017-avi-251 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-08-08T00:00:00.000000 | 2017-08-08T00:00:00.000000 |
| certfr-2017-avi-250 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-08-08T00:00:00.000000 | 2017-08-08T00:00:00.000000 |
| certfr-2017-avi-248 | Multiples vulnérabilités dans SCADA Siemens Mobilett Mira Max | 2017-08-07T00:00:00.000000 | 2017-08-07T00:00:00.000000 |
| certfr-2017-avi-246 | Multiples vulnérabilités dans PHP | 2017-08-03T00:00:00.000000 | 2017-08-04T00:00:00.000000 |
| certfr-2017-avi-245 | Vulnérabilité dans le noyau Linux de RedHat | 2017-08-03T00:00:00.000000 | 2017-08-03T00:00:00.000000 |
| certfr-2017-avi-244 | Vulnérabilité dans Google Chrome OS | 2017-08-03T00:00:00.000000 | 2017-08-03T00:00:00.000000 |
| certfr-2017-avi-243 | Multiples vulnérabilités dans les produits Cisco | 2017-08-03T00:00:00.000000 | 2017-08-03T00:00:00.000000 |
| certfr-2017-avi-242 | Multiples vulnérabilités dans FreeRDP | 2017-08-02T00:00:00.000000 | 2017-08-02T00:00:00.000000 |
| certfr-2017-avi-233 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-07-21T00:00:00.000000 | 2017-07-31T00:00:00.000000 |
| certfr-2017-avi-241 | Multiples vulnérabilités dans Microsoft Outlook | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-240 | Multiples vulnérabilités dans Fortinet FortiOS | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-239 | Multiples vulnérabilités dans les produits VMware | 2017-07-28T00:00:00.000000 | 2017-07-28T00:00:00.000000 |
| certfr-2017-avi-238 | Multiples vulnérabilités dans McAfee Web Gateway | 2017-07-27T00:00:00.000000 | 2017-07-27T00:00:00.000000 |