Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-64944 | Apache Answer: Stored XSS via unsanitized HTML in impo… |
Apache Software Foundation |
Apache Answer |
2026-10-19T09:26:52.224Z | 2026-11-03T22:33:15.016Z | |
| cve-2026-64943 | Apache Answer: API keys logged in plaintext during aut… |
Apache Software Foundation |
Apache Answer |
2026-10-19T09:26:13.696Z | 2026-10-20T18:57:09.507Z | |
| cve-2026-112188 | 7.1 (v4.0) | MISP Server Settings Lookup Exposes Sensitive Configur… |
MISP |
MISP |
2026-10-19T09:22:37.880Z | 2026-10-28T20:05:58.430Z |
| cve-2026-108837 | Apache Kylin: Potential computed-column resource exhaustion |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:22:03.856Z | 2026-11-03T22:33:20.553Z | |
| cve-2026-108833 | Apache Kylin: default startup profile miss security settings |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:54.065Z | 2026-11-04T17:47:07.525Z | |
| cve-2026-108823 | Apache Kylin: Potential unauthenticated job metadata r… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:30.729Z | 2026-11-03T22:33:31.652Z | |
| cve-2026-108780 | Apache Kylin: Potential JDBC source configuration vali… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:19.963Z | 2026-10-30T16:34:27.855Z | |
| cve-2026-108776 | Apache Kylin: tables/names SparkSQL injection |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:09.051Z | 2026-10-30T16:32:51.344Z | |
| cve-2026-108771 | Apache Kylin: unauthenticated broadcast API and polymo… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:59.076Z | 2026-10-30T16:31:42.241Z | |
| cve-2026-108766 | Apache Kylin: missing JDBC-config authorization |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:48.058Z | 2026-10-30T16:30:46.005Z | |
| cve-2026-112184 | 4.8 (v4.0) | MISP Workflow Module: Reflected XSS via Unescaped misp… |
MISP |
MISP |
2026-10-19T09:19:45.056Z | 2026-10-19T17:14:52.401Z |
| cve-2026-108764 | Apache Kylin: job-driver UI proxy SSRF |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:18:57.199Z | 2026-10-30T16:29:19.621Z | |
| cve-2026-108762 | Apache Kylin: delete metadata backup path-confinement bypass |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:16:25.736Z | 2026-10-30T16:28:09.058Z | |
| cve-2026-112183 | 4.8 (v4.0) | MISP CSS Injection via Remote Tag Colour in Event Preview |
MISP |
MISP |
2026-10-19T09:15:47.453Z | 2026-10-19T17:15:45.687Z |
| cve-2026-112100 | DeepPavlov multitask_preprocessor.py MultiTaskPipeline… |
n/a |
DeepPavlov |
2026-10-19T09:15:19.570Z | 2026-10-22T02:38:58.820Z | |
| cve-2026-110887 | 9.9 (v3.1) | WordPress HivePress plugin <= 1.7.32 - Remote Code Exe… |
HivePress |
HivePress |
2026-10-19T09:09:19.849Z | 2026-10-19T16:51:04.682Z |
| cve-2026-111398 | 7.7 (v3.1) | WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Del… |
PT Norther Lights Production |
MapSVG |
2026-10-19T09:09:19.440Z | 2026-10-19T17:17:11.133Z |
| cve-2026-110898 | 6.4 (v3.1) | WordPress Essential Addons for Elementor plugin <= 6.8… |
WPDeveloper |
Essential Addons for Elementor |
2026-10-19T09:09:19.416Z | 2026-10-19T16:50:35.254Z |
| cve-2026-111407 | 6.5 (v3.1) | WordPress Tutor LMS plugin <= 4.1.2 - Cross Site Scrip… |
Themeum |
Tutor LMS |
2026-10-19T09:09:19.001Z | 2026-10-19T12:49:03.673Z |
| cve-2026-111408 | 8.8 (v3.1) | WordPress Quiz And Survey Master plugin <= 11.2.7 - PH… |
ExpressTech |
Quiz And Survey Master |
2026-10-19T09:09:18.970Z | 2026-10-19T17:17:55.950Z |
| cve-2026-110379 | 7.1 (v3.1) | WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site S… |
Ays Pro |
Quiz Maker |
2026-10-19T09:09:18.538Z | 2026-10-19T12:49:30.765Z |
| cve-2026-111406 | 9.9 (v3.1) | WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upl… |
PT Norther Lights Production |
MapSVG |
2026-10-19T09:09:18.419Z | 2026-10-19T16:54:29.679Z |
| cve-2026-112098 | DeepPavlov Config Reference Resolver params.py resolve… |
n/a |
DeepPavlov |
2026-10-19T09:00:19.171Z | 2026-10-19T17:19:09.502Z | |
| cve-2026-112180 | 5.1 (v4.0) | MISP Incomplete Event Deletion Leaves Orphaned Sensiti… |
MISP |
MISP |
2026-10-19T09:00:13.049Z | 2026-10-19T17:19:56.212Z |
| cve-2026-112179 | 5.3 (v4.0) | MISP Event Synchronization Exposes Non-Exportable Tags… |
MISP |
MISP |
2026-10-19T08:53:57.689Z | 2026-10-19T18:32:29.985Z |
| cve-2026-112178 | 7.1 (v4.0) | MISP Proposal ACL Bypass: Incomplete Distribution Leve… |
MISP |
MISP |
2026-10-19T08:50:52.402Z | 2026-10-19T17:20:40.642Z |
| cve-2026-112097 | SourceCodester Inventory System Sales Management trans… |
SourceCodester |
Inventory System |
2026-10-19T08:45:14.782Z | 2026-10-19T16:36:07.532Z | |
| cve-2026-13695 | 8.8 (v4.0) | SQL Injection in the Integratec Application |
Integratec |
Integratec |
2026-10-19T08:37:47.737Z | 2026-10-19T17:21:16.872Z |
| cve-2026-104679 | 7.1 (v3.1) 6.9 (v4.0) | VOCALOID6 Editor provided by Yamaha Corporation i… |
Yamaha Corporation |
VOCALOID6 Editor |
2026-10-19T08:31:40.984Z | 2026-10-20T18:16:31.692Z |
| cve-2026-112096 | SourceCodester Inventory System Purchase Records trans… |
SourceCodester |
Inventory System |
2026-10-19T08:30:19.861Z | 2026-10-19T16:50:09.536Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-086 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-03-16T00:00:00.000000 | 2017-03-16T00:00:00.000000 |
| certfr-2017-avi-085 | Multiples vulnérabilités dans Drupal | 2017-03-16T00:00:00.000000 | 2017-03-16T00:00:00.000000 |
| certfr-2017-avi-084 | Multiples vulnérabilités dans les produits Cisco | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-083 | Vulnérabilité dans Xen | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-082 | Multiples vulnérabilités dans Microsoft Windows | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-081 | Multiples vulnérabilités dans Microsoft Office | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-080 | Multiples vulnérabilités dans Microsoft Edge | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-079 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-078 | Vulnérabilité dans Adobe Shockwave Player | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-077 | Multiples vulnérabilités dans Adobe Flash Player | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-076 | Vulnérabilité dans VMware Workstation et Fusion | 2017-03-14T00:00:00.000000 | 2017-03-14T00:00:00.000000 |
| certfr-2017-avi-075 | Vulnérabilité dans SCADA Wonderware by Schneider Electric Tableau Server | 2017-03-13T00:00:00.000000 | 2017-03-13T00:00:00.000000 |
| certfr-2017-avi-074 | Multiples vulnérabilités dans VMware Workstation | 2017-03-10T00:00:00.000000 | 2017-03-10T00:00:00.000000 |
| certfr-2017-avi-073 | Multiples vulnérabilités dans Google Chrome | 2017-03-10T00:00:00.000000 | 2017-03-10T00:00:00.000000 |
| certfr-2017-avi-072 | Vulnérabilité dans SPIP | 2017-03-09T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-071 | Vulnérabilité dans Apache Struts | 2017-03-09T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-070 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2017-03-08T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-069 | Multiples vulnérabilités dans Mozilla Firefox | 2017-03-08T00:00:00.000000 | 2017-03-08T00:00:00.000000 |
| certfr-2017-avi-068 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-03-08T00:00:00.000000 | 2017-03-08T00:00:00.000000 |
| certfr-2017-avi-067 | Multiples vulnérabilités dans WordPress | 2017-03-07T00:00:00.000000 | 2017-03-07T00:00:00.000000 |
| certfr-2017-avi-066 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-03-07T00:00:00.000000 | 2017-03-07T00:00:00.000000 |
| certfr-2017-avi-065 | Multiples vulnérabilités dans Wireshark | 2017-03-06T00:00:00.000000 | 2017-03-06T00:00:00.000000 |
| certfr-2017-avi-064 | Vulnérabilité dans VMware Horizon DaaS | 2017-03-03T00:00:00.000000 | 2017-03-03T00:00:00.000000 |
| certfr-2017-avi-063 | Multiples vulnérabilités dans SCADA les produits Schneider | 2017-03-03T00:00:00.000000 | 2017-03-03T00:00:00.000000 |
| certfr-2017-avi-062 | Vulnérabilité dans SCADA Siemens SINUMERIK Integrate | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |
| certfr-2017-avi-061 | Vulnérabilité dans Cisco NetFlow Generation Appliance | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |
| certfr-2017-avi-060 | Multiples vulnérabilités dans le noyau Linux SUSE | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |
| certfr-2017-avi-059 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM NMS | 2017-02-23T00:00:00.000000 | 2017-02-23T00:00:00.000000 |
| certfr-2017-avi-058 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-02-22T00:00:00.000000 | 2017-02-22T00:00:00.000000 |
| certfr-2017-avi-057 | Multiples vulnérabilités dans Citrix XenServer | 2017-02-22T00:00:00.000000 | 2017-02-22T00:00:00.000000 |