Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-86375 | 6.2 (v3.1) | Dell Application Installer, versions prior to 26.… |
Dell |
Application Installer, |
2026-10-19T14:51:49.544Z | 2026-10-19T18:19:59.198Z |
| cve-2026-112329 | 5.3 (v4.0) 4.3 (v3.1) | Sensei LMS 4.26.4 Broken Access Control via save_new_message |
Automattic |
Sensei LMS |
2026-10-19T14:45:24.844Z | 2026-10-27T10:14:04.227Z |
| cve-2026-112150 | vraj404 Criminal-Management-System search.php sql injection |
vraj404 |
Criminal-Management-System |
2026-10-19T14:45:18.145Z | 2026-10-22T02:56:43.621Z | |
| cve-2026-112328 | 5.3 (v4.0) 4.3 (v3.1) | Sensei LMS 4.26.4 Broken Access Control via add_new_mo… |
Automattic |
Sensei LMS |
2026-10-19T14:44:00.760Z | 2026-10-27T10:14:03.607Z |
| cve-2026-112149 | vraj404 Criminal-Management-System home.php move_uploa… |
vraj404 |
Criminal-Management-System |
2026-10-19T14:30:16.739Z | 2026-10-19T16:44:41.590Z | |
| cve-2026-112147 | ai-genius-automations octoally index.ts information di… |
ai-genius-automations |
octoally |
2026-10-19T14:15:16.138Z | 2026-10-19T16:34:10.892Z | |
| cve-2026-112146 | D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded c… |
D-Link |
E15 |
2026-10-19T14:00:20.611Z | 2026-10-19T17:45:45.319Z | |
| cve-2026-112296 | 9.3 (v4.0) 9.8 (v3.1) | FlyCms through commit edfdf724 Default Super Administr… |
sunkaifei |
FlyCms |
2026-10-19T13:55:36.847Z | 2026-10-27T10:14:02.985Z |
| cve-2026-112295 | 5.3 (v4.0) 5.4 (v3.1) | FlyCms through commit edfdf724 Mass Assignment via /uc… |
sunkaifei |
FlyCms |
2026-10-19T13:55:36.176Z | 2026-10-27T10:14:02.317Z |
| cve-2026-112294 | 5.3 (v4.0) 4.3 (v3.1) | FlyCms through commit edfdf724 Missing Authorization v… |
sunkaifei |
FlyCms |
2026-10-19T13:55:35.493Z | 2026-10-27T10:14:01.624Z |
| cve-2026-112293 | 5.3 (v4.0) 5.4 (v3.1) | BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authoriz… |
BoxyHQ |
saas-starter-kit |
2026-10-19T13:55:34.785Z | 2026-10-22T02:55:49.317Z |
| cve-2026-112292 | 9.3 (v4.0) 9.8 (v3.1) | CheckCle through 1.6.0 Missing Authorization via Empty… |
operacle |
checkcle |
2026-10-19T13:55:34.097Z | 2026-10-19T18:27:55.844Z |
| cve-2026-112291 | 6.9 (v4.0) 5.3 (v3.1) | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-bet… |
Flarum |
Extension Manager |
2026-10-19T13:55:33.404Z | 2026-10-19T14:18:17.505Z |
| cve-2026-112290 | 2.3 (v4.0) 4.7 (v3.1) | MI6 @ukic/canary-web-components 3.0.0-canary.12 before… |
MI6 |
Intelligence Community UI Kit canary web components |
2026-10-19T13:55:32.741Z | 2026-10-19T16:34:26.673Z |
| cve-2026-112289 | 5.1 (v4.0) 5.4 (v3.1) | Koalixcrm through 1.14.0 Stored XSS via Task Title in … |
KoalixSwitzerland |
koalixcrm |
2026-10-19T13:55:32.059Z | 2026-10-19T17:52:26.383Z |
| cve-2026-112288 | 2.1 (v4.0) 3.3 (v3.1) | Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via D… |
krayin |
laravel-crm |
2026-10-19T13:55:31.283Z | 2026-10-22T02:54:40.630Z |
| cve-2026-112287 | 7.1 (v4.0) 7.1 (v3.1) | Krayin CRM before 2.2.7 Broken Object Level Authorizat… |
krayin |
laravel-crm |
2026-10-19T13:55:30.623Z | 2026-10-19T18:30:27.530Z |
| cve-2026-112286 | 7.1 (v4.0) 6.5 (v3.1) | Krayin CRM before 2.2.7 IDOR via Quote Search and Lead… |
krayin |
laravel-crm |
2026-10-19T13:55:29.924Z | 2026-10-19T14:19:36.695Z |
| cve-2026-112285 | 5.3 (v4.0) 4.3 (v3.1) | Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypas… |
Thelia |
Thelia |
2026-10-19T13:55:29.184Z | 2026-10-19T16:34:33.839Z |
| cve-2026-112284 | 4.8 (v4.0) 3.3 (v3.1) | libaribcaption 1.1.0 through 1.1.2 Out-of-Bounds Read … |
xqq |
libaribcaption |
2026-10-19T13:55:28.447Z | 2026-10-19T17:55:16.813Z |
| cve-2026-112283 | 6.8 (v4.0) 5.5 (v3.1) | libbluray through 1.5.1 Uncontrolled Memory Allocation… |
VideoLAN |
libbluray |
2026-10-19T13:55:27.741Z | 2026-10-22T02:53:35.556Z |
| cve-2026-112282 | 6.8 (v4.0) 5.5 (v3.1) | VideoLAN libbluray through 1.5.1 Out-of-Bounds Read vi… |
VideoLAN |
libbluray |
2026-10-19T13:55:27.008Z | 2026-10-19T18:42:52.370Z |
| cve-2026-112281 | 6.9 (v4.0) 6.1 (v3.1) | libaribb24 through 1.0.3 Stack Buffer Overflow via dec… |
nkoriyama |
aribb24 |
2026-10-19T13:55:26.323Z | 2026-10-19T14:20:24.874Z |
| cve-2026-112280 | 6.9 (v4.0) 6.1 (v3.1) | libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflo… |
nkoriyama |
aribb24 |
2026-10-19T13:55:25.644Z | 2026-10-19T16:34:41.023Z |
| cve-2026-112279 | 7.1 (v4.0) 6.5 (v3.1) | rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:24.937Z | 2026-10-19T17:56:06.184Z |
| cve-2026-112278 | 7.1 (v4.0) 6.5 (v3.1) | rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:24.239Z | 2026-10-22T02:52:31.934Z |
| cve-2026-112277 | 7.1 (v4.0) 6.5 (v3.1) | rdesktop through 1.9.0 Heap Out-of-Bounds Read via pro… |
rdesktop |
rdesktop |
2026-10-19T13:55:23.436Z | 2026-10-19T19:28:48.290Z |
| cve-2026-112276 | 6.9 (v4.0) 6.1 (v3.1) | Netpbm through 11.16.00 Heap Out-of-Bounds Read via ra… |
Netpbm |
Netpbm |
2026-10-19T13:55:22.723Z | 2026-10-19T14:13:40.705Z |
| cve-2026-112275 | 6.9 (v4.0) 6.1 (v3.1) | Netpbm through 11.16.00 Heap Out-of-Bounds Write via r… |
Netpbm |
Netpbm |
2026-10-19T13:55:22.019Z | 2026-10-19T16:34:48.175Z |
| cve-2026-112274 | 6.3 (v4.0) 3.7 (v3.1) | libtins through 4.6 Out-of-Bounds Read via DNS::soa_re… |
libtins |
libtins |
2026-10-19T13:55:21.345Z | 2026-10-19T17:57:12.363Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-236 | Multiples vulnérabilités dans Google Chrome | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-235 | Multiples vulnérabilités dans Joomla! | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-234 | Vulnérabilité dans les produits Citrix | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-233 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-07-21T00:00:00.000000 | 2017-07-31T00:00:00.000000 |
| certfr-2017-avi-232 | Vulnérabilité dans le noyau Linux de SUSE | 2017-07-20T00:00:00.000000 | 2017-07-25T00:00:00.000000 |
| certfr-2017-avi-231 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-230 | Vulnérabilité dans Cisco Web Security Appliance | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-229 | Multiples vulnérabilités dans les produits Apple | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-228 | Multiples vulnérabilités dans SCADA Schneider Electric Trio TView | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-227 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-226 | Multiples vulnérabilités dans Oracle Database Server | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-225 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-224 | Multiples vulnérabilités dans Oracle MySQL | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-223 | Multiples vulnérabilités dans Oracle Java SE | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-222 | Multiples vulnérabilités dans Wireshark | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-221 | Multiples vulnérabilités dans les produits Cisco | 2017-07-18T00:00:00.000000 | 2017-07-18T00:00:00.000000 |
| certfr-2017-avi-220 | Multiples vulnérabilités dans Moodle | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-219 | Multiples vulnérabilités dans SCADA Siemens Android App SIMATIC Sm@rtClient | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-218 | Multiples vulnérabilités dans Apache | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-217 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-216 | Multiples vulnérabilités dans F5 BIG-IP | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-215 | Multiples vulnérabilités dans SCADA les produits OSIsoft | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-214 | Vulnérabilité dans Samba | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-213 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-212 | Multiples vulnérabilités dans les produits Juniper | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-211 | Vulnérabilité dans Nginx | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-210 | Multiples vulnérabilités dans les produits Microsoft | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-209 | Multiples vulnérabilités dans Microsoft Windows | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-208 | Multiples vulnérabilités dans Microsoft Office | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-207 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |