Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-119709 | 6.9 (v4.0) 5.8 (v3.1) | Grimoire before 1.0.0 Unauthenticated SSRF via /api/fe… |
goniszewski |
grimoire |
2026-10-30T15:16:09.484Z | 2026-10-30T18:36:35.797Z |
| cve-2026-119713 | 8.7 (v4.0) 8.8 (v3.1) | Paperclip 2026.403.0 before 2026.416.0 RCE via Executi… |
paperclipai |
@paperclipai/server |
2026-10-30T15:16:12.174Z | 2026-10-30T18:36:27.401Z |
| cve-2026-119721 | 6.9 (v4.0) 6.1 (v3.1) | Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Boun… |
Blender Foundation |
Blender |
2026-10-30T15:16:17.738Z | 2026-10-30T18:36:11.655Z |
| cve-2026-119288 | Zuke: Argument injection on Windows: batch shims are l… |
zuke-build |
zuke |
2026-10-30T15:47:23.790Z | 2026-10-30T18:36:00.991Z | |
| cve-2026-21811 | 3.8 (v3.1) | Multiple security vulnerabilities affect HCL AppScan A… |
HCL Software |
AppScan Integration with Azure Boards for ASoC & A360 |
2026-10-22T09:06:29.465Z | 2026-10-30T18:35:58.616Z |
| cve-2026-119298 | croc: Overwrite-confirmation bypass via a crafted "cro… |
schollz |
croc |
2026-10-30T16:12:49.765Z | 2026-10-30T18:35:53.606Z | |
| cve-2026-39375 | Frappe LMS has Stored XSS in Course Meta |
frappe |
lms |
2026-10-30T16:46:58.127Z | 2026-10-30T18:35:46.027Z | |
| cve-2026-50000 | SecureDrop: API session token reuse against the Journa… |
freedomofpress |
securedrop |
2026-10-30T17:11:13.250Z | 2026-10-30T18:35:34.990Z | |
| cve-2026-104744 | Independent Analytics Pro <= 2.15.5 - Unauthenticated … |
Independent Analytics |
Independent Analytics Pro |
2026-10-30T17:15:31.809Z | 2026-10-30T18:35:23.501Z | |
| cve-2026-119762 | 8.7 (v4.0) 7.5 (v3.1) | Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2… |
Axigen |
Axigen Mail Server |
2026-10-30T17:19:54.568Z | 2026-10-30T18:35:08.753Z |
| cve-2026-119620 | 37954679 cak-filemanagement-system add_logs.php move_u… |
37954679 |
cak-filemanagement-system |
2026-10-30T17:45:15.786Z | 2026-10-30T18:34:44.346Z | |
| cve-2026-119979 | 8.7 (v4.0) 8.8 (v3.1) | LM Studio before 0.4.22+1 Path Traversal via Model Dow… |
Element Labs |
LM Studio |
2026-10-30T17:48:43.705Z | 2026-10-30T18:34:20.363Z |
| cve-2026-114460 | 5.3 (v3.1) | Mod_qos: query truncation during json body merging per… |
pbuchbinder |
mod_qos |
2026-10-22T06:37:07.818Z | 2026-10-30T18:34:08.202Z |
| cve-2026-39739 | 6.5 (v3.1) | WordPress Ultimate Addons for Elementor - Lite plugin … |
Brainstorm Force |
Ultimate Addons for Elementor - Lite |
2026-10-30T18:11:41.349Z | 2026-10-30T18:34:07.113Z |
| cve-2026-62056 | 5.3 (v3.1) | WordPress Fluent CRM plugin <= 3.2.6 - Broken Access C… |
WP ManageNinja LLC |
Fluent CRM |
2026-10-30T18:14:58.428Z | 2026-10-30T18:33:56.893Z |
| cve-2026-62264 | PDF Reader MCP: HTTP transport accepts unauthenticated… |
SylphxAI |
pdf-reader-mcp |
2026-10-30T18:32:18.093Z | 2026-10-30T18:32:18.093Z | |
| cve-2026-92744 | 8.7 (v4.0) | Delinea Privilege Manager agent unauthenticated remote… |
Delinea |
Privilege Manager |
2026-10-29T22:56:09.879Z | 2026-10-30T18:31:46.118Z |
| cve-2025-57848 | 6.4 (v3.1) | Container-native-virtualization: privilege escalation … |
Red Hat |
RHEL-8-CNV-4.12 |
2025-10-23T20:10:31.311Z | 2026-10-30T18:31:21.149Z |
| cve-2026-114223 | 6.7 (v4.0) 5.5 (v3.1) | NewType Infortech｜NT OneAPP - Exposure of Sensitive In… |
NewType Infortech |
NT OneAPP |
2026-10-22T04:27:26.780Z | 2026-10-30T18:31:08.171Z |
| cve-2025-11537 | 5 (v3.1) | Keycloak-services: sensitive headers shown in the http… |
Red Hat |
Red Hat build of Keycloak 26.4.2 |
2026-02-10T10:53:28.147Z | 2026-10-30T18:31:04.417Z |
| cve-2026-114222 | 6.9 (v4.0) 6.2 (v3.1) | NewType Infortech｜NT OneAPP - Authentication Bypass |
NewType Infortech |
NT OneAPP |
2026-10-22T04:27:06.190Z | 2026-10-30T18:29:55.059Z |
| cve-2026-114221 | 5.9 (v4.0) 7.4 (v3.1) | NewType Infortech｜NT OneAPP - Credential Disclosure |
NewType Infortech |
NT OneAPP |
2026-10-22T04:26:43.979Z | 2026-10-30T18:28:58.149Z |
| cve-2025-6017 | 5.5 (v3.1) | Rhacm: users with clusterreader role can see credentia… |
|
|
2025-07-02T06:36:47.171Z | 2026-10-30T18:28:00.342Z |
| cve-2026-115943 | N/A | Spreadsheet::XLSX versions before 0.19 for Perl allow … |
|
|
2026-10-29T21:37:40.697Z | 2026-10-30T18:27:48.508Z |
| cve-2026-61854 | VoiceSentinel: Race condition in report buffer cleanup… |
jackh54 |
VoiceSentinel |
2026-10-30T18:25:28.484Z | 2026-10-30T18:25:28.484Z | |
| cve-2026-113870 | 8.8 (v3.1) 8.6 (v4.0) | Improper Encoding of Server-Supplied JavaScript Values… |
MongoDB |
Compass |
2026-10-21T18:04:30.607Z | 2026-10-30T18:23:34.095Z |
| cve-2026-118248 | Highcharts Dashboards: editableOptions.propertyPath wr… |
highcharts |
highcharts |
2026-10-28T17:55:47.520Z | 2026-10-30T18:21:14.325Z | |
| cve-2026-105931 | 2.3 (v4.0) | Apache Pulsar: Missing authorization on transaction ad… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:02:31.976Z | 2026-10-30T18:20:46.202Z |
| cve-2026-118252 | Highcharts Dashboards: sidebar component labels are pa… |
highcharts |
highcharts |
2026-10-28T18:08:33.407Z | 2026-10-30T18:20:14.175Z | |
| cve-2026-118244 | Highcharts Core: AST `DOMParser` fallback assigns unsa… |
highcharts |
highcharts |
2026-10-28T17:36:43.768Z | 2026-10-30T18:19:13.077Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-237 | Multiples vulnérabilités dans Fortinet FortiOS et FortiAnalyzer | 2017-07-27T00:00:00.000000 | 2017-07-27T00:00:00.000000 |
| certfr-2017-avi-236 | Multiples vulnérabilités dans Google Chrome | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-235 | Multiples vulnérabilités dans Joomla! | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-234 | Vulnérabilité dans les produits Citrix | 2017-07-26T00:00:00.000000 | 2017-07-26T00:00:00.000000 |
| certfr-2017-avi-232 | Vulnérabilité dans le noyau Linux de SUSE | 2017-07-20T00:00:00.000000 | 2017-07-25T00:00:00.000000 |
| certfr-2017-avi-231 | Multiples vulnérabilités dans Oracle VM Server pour x86 et Oracle Linux | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-230 | Vulnérabilité dans Cisco Web Security Appliance | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-229 | Multiples vulnérabilités dans les produits Apple | 2017-07-20T00:00:00.000000 | 2017-07-20T00:00:00.000000 |
| certfr-2017-avi-228 | Multiples vulnérabilités dans SCADA Schneider Electric Trio TView | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-227 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-226 | Multiples vulnérabilités dans Oracle Database Server | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-225 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-224 | Multiples vulnérabilités dans Oracle MySQL | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-223 | Multiples vulnérabilités dans Oracle Java SE | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-222 | Multiples vulnérabilités dans Wireshark | 2017-07-19T00:00:00.000000 | 2017-07-19T00:00:00.000000 |
| certfr-2017-avi-221 | Multiples vulnérabilités dans les produits Cisco | 2017-07-18T00:00:00.000000 | 2017-07-18T00:00:00.000000 |
| certfr-2017-avi-220 | Multiples vulnérabilités dans Moodle | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-219 | Multiples vulnérabilités dans SCADA Siemens Android App SIMATIC Sm@rtClient | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-218 | Multiples vulnérabilités dans Apache | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-217 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-07-17T00:00:00.000000 | 2017-07-17T00:00:00.000000 |
| certfr-2017-avi-216 | Multiples vulnérabilités dans F5 BIG-IP | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-215 | Multiples vulnérabilités dans SCADA les produits OSIsoft | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-214 | Vulnérabilité dans Samba | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-213 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-07-13T00:00:00.000000 | 2017-07-13T00:00:00.000000 |
| certfr-2017-avi-212 | Multiples vulnérabilités dans les produits Juniper | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-211 | Vulnérabilité dans Nginx | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-210 | Multiples vulnérabilités dans les produits Microsoft | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-209 | Multiples vulnérabilités dans Microsoft Windows | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-208 | Multiples vulnérabilités dans Microsoft Office | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-207 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |