Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-41114 | Apache IoTDB JDBC driver: Large-scale Memory Exhaustio… |
Apache Software Foundation |
Apache IoTDB JDBC driver |
2026-10-21T11:07:24.947Z | 2026-10-30T17:49:40.907Z | |
| cve-2026-114131 | Nuxt: Route rules are matched against the raw request … |
nuxt |
nuxt |
2026-10-21T17:41:24.016Z | 2026-10-30T17:48:52.857Z | |
| cve-2026-115478 | obsidian-tc: Memory-lifecycle tools overwrite unowned … |
The-40-Thieves |
obsidian-tc |
2026-10-23T14:06:28.128Z | 2026-10-30T17:46:48.838Z | |
| cve-2026-58663 | Apache IoTDB: Auth Bypass in pipeTransfer() interface |
Apache Software Foundation |
Apache IoTDB |
2026-10-21T11:03:23.887Z | 2026-10-30T17:46:13.409Z | |
| cve-2026-113787 | odf-kit: HTML injection leading to XSS in odtToHtml() … |
GitHubNewbie0 |
odf-kit |
2026-10-21T15:25:43.527Z | 2026-10-30T17:45:30.891Z | |
| cve-2026-53918 | odhcpd DHCPv6 IA dangling first pointer use-after-free |
openwrt |
odhcpd |
2026-10-23T13:21:00.665Z | 2026-10-30T17:42:21.816Z | |
| cve-2026-115922 | ONNX: Denial of service via unchecked expansion of pac… |
onnx |
onnx |
2026-10-26T17:31:03.716Z | 2026-10-30T17:40:32.752Z | |
| cve-2026-75525 | OpenReception: unauthenticated ML-KEM key injection in… |
open-reception |
appointment-booking-software |
2026-10-23T20:42:21.394Z | 2026-10-30T17:38:14.992Z | |
| cve-2026-65824 | OpenReception: invite confirmation token is replayable… |
open-reception |
appointment-booking-software |
2026-10-23T20:27:52.852Z | 2026-10-30T17:36:49.674Z | |
| cve-2026-112378 | 4.3 (v3.1) | Use of Less Trusted Source in GitLab |
GitLab |
GitLab |
2026-10-21T23:33:50.429Z | 2026-10-30T17:35:25.066Z |
| cve-2025-8444 | Animation Addons for Elementor – GSAP Powered Elemento… |
wealcoder |
Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates |
2026-06-10T04:31:00.888Z | 2026-10-30T17:34:11.183Z | |
| cve-2026-112212 | 7.5 (v3.1) | Inconsistent Interpretation of HTTP Requests ('HTTP Re… |
GitLab |
GitLab |
2026-10-21T23:33:45.429Z | 2026-10-30T17:33:45.464Z |
| cve-2026-112326 | 3.1 (v3.1) | Improper Cleanup on Thrown Exception in GitLab |
GitLab |
GitLab |
2026-10-21T23:33:40.603Z | 2026-10-30T17:30:54.664Z |
| cve-2026-100420 | 6.8 (v4.0) | Information disclosure vulnerability in the cloud-clie… |
TP-Link Systems Inc. |
Deco BE63 V2.0 |
2026-10-21T23:04:28.083Z | 2026-10-30T17:29:22.081Z |
| cve-2026-89052 | 5.9 (v4.0) | Hardcoded AES encryption key in Archer C6 |
TP-Link Systems Inc. |
Archer C6 V2 |
2026-10-21T22:40:16.165Z | 2026-10-30T17:27:59.216Z |
| cve-2026-103090 | 8.8 (v4.0) | Unauthenticated Biscuit Credential Disclosure via GET … |
Google |
SAM |
2026-10-21T22:16:59.777Z | 2026-10-30T17:26:26.361Z |
| cve-2026-13747 | Meow Gallery <= 5.5.4 - Missing Authorization to Authe… |
tigroumeow |
Meow Gallery |
2026-10-30T17:15:25.089Z | 2026-10-30T17:26:22.628Z | |
| cve-2026-93291 | 9.3 (v4.0) 9.4 (v3.1) | Improper certificate validation in Eufy Omni C20 |
Eufy |
Omni C20 |
2026-09-24T19:27:54.311Z | 2026-10-30T17:26:20.708Z |
| cve-2026-116552 | Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticat… |
likebtn |
Like Button Rating ♥ LikeBtn |
2026-10-30T17:15:26.489Z | 2026-10-30T17:26:01.617Z | |
| cve-2026-112921 | N/A | Robots::Validate versions from 0.4.3 before 0.4.10 for… |
|
|
2026-10-21T21:37:54.278Z | 2026-10-30T17:25:36.728Z |
| cve-2026-107630 | Email Templates Customizer and Designer for WordPress … |
saadiqbal |
Email Templates Customizer and Designer for WordPress and WooCommerce |
2026-10-30T17:15:27.201Z | 2026-10-30T17:25:36.608Z | |
| cve-2026-110533 | FV Flowplayer Video Player <= 7.5.55.7212 - Authentica… |
foliovision |
FV Flowplayer Video Player |
2026-10-30T17:15:28.997Z | 2026-10-30T17:25:10.191Z | |
| cve-2026-102905 | Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shor… |
spacetime |
Ad Inserter – Ad Manager & AdSense Ads |
2026-10-30T17:15:29.355Z | 2026-10-30T17:24:48.214Z | |
| cve-2026-61806 | Frappe LMS allows unpublished certificate access |
frappe |
lms |
2026-10-30T17:02:55.465Z | 2026-10-30T17:24:19.803Z | |
| cve-2025-13050 | 5.4 (v3.1) | Broken Function Level Authorization — `postcommand.php… |
Centreon |
Centreon |
2026-10-29T15:58:50.079Z | 2026-10-30T17:23:25.626Z |
| cve-2026-69855 | 7.7 (v3.1) | Microsoft Copilot in Azure Information Disclosure Vuln… |
Microsoft |
Microsoft Copilot in Azure |
2026-08-20T21:47:13.054Z | 2026-10-30T17:23:20.440Z |
| cve-2026-69543 | 8.5 (v3.1) | Azure Virtual Machines Elevation of Privilege Vulnerability |
Microsoft |
Azure Virtual Machines |
2026-08-20T21:47:12.454Z | 2026-10-30T17:23:19.831Z |
| cve-2026-69558 | 8.6 (v3.1) | Microsoft Partner Center Information Disclosure Vulner… |
Microsoft |
Microsoft Partner Center |
2026-08-20T21:47:11.900Z | 2026-10-30T17:23:19.287Z |
| cve-2026-69555 | 10 (v3.1) | Azure Arc Elevation of Privilege Vulnerability |
Microsoft |
Azure ARC |
2026-08-20T21:47:11.349Z | 2026-10-30T17:23:18.741Z |
| cve-2026-69400 | 9.6 (v3.1) | Azure Logic Apps Elevation of Privilege Vulnerability |
Microsoft |
Azure Logic Apps |
2026-08-20T21:47:10.756Z | 2026-10-30T17:23:18.137Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-056 | Vulnérabilité dans Xen | 2017-02-22T00:00:00.000000 | 2017-02-22T00:00:00.000000 |
| certfr-2017-avi-055 | Multiples vulnérabilités dans Adobe Flash Player sur Windows | 2017-02-22T00:00:00.000000 | 2017-02-22T00:00:00.000000 |
| certfr-2017-avi-054 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-02-20T00:00:00.000000 | 2017-02-20T00:00:00.000000 |
| certfr-2017-avi-053 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-02-16T00:00:00.000000 | 2017-02-16T00:00:00.000000 |
| certfr-2017-avi-052 | Multiples vulnérabilités dans les produits Cisco | 2017-02-16T00:00:00.000000 | 2017-02-16T00:00:00.000000 |
| certfr-2017-avi-051 | Multiples vulnérabilités dans Adobe Flash Player | 2017-02-15T00:00:00.000000 | 2017-02-15T00:00:00.000000 |
| certfr-2017-avi-050 | Multiples vulnérabilités dans le noyau Linux SUSE | 2017-02-15T00:00:00.000000 | 2017-02-15T00:00:00.000000 |
| certfr-2017-avi-049 | Vulnérabilité dans SCADA Siemens SIMATIC Logon | 2017-02-15T00:00:00.000000 | 2017-02-15T00:00:00.000000 |
| certfr-2017-avi-048 | Vulnérabilité dans F5 BIG-IP | 2017-02-13T00:00:00.000000 | 2017-02-13T00:00:00.000000 |
| certfr-2017-avi-047 | Vulnérabilité dans Xen QEMU | 2017-02-13T00:00:00.000000 | 2017-02-13T00:00:00.000000 |
| certfr-2017-avi-046 | Multiples vulnérabilités dans Mozilla Firefox | 2017-02-10T00:00:00.000000 | 2017-02-10T00:00:00.000000 |
| certfr-2017-avi-045 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-02-10T00:00:00.000000 | 2017-02-10T00:00:00.000000 |
| certfr-2017-avi-044 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-02-10T00:00:00.000000 | 2017-02-10T00:00:00.000000 |
| certfr-2017-avi-043 | Multiples vulnérabilités dans les produits Cisco | 2017-02-09T00:00:00.000000 | 2017-02-09T00:00:00.000000 |
| certfr-2017-avi-042 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-02-07T00:00:00.000000 | 2017-02-07T00:00:00.000000 |
| certfr-2017-avi-041 | Multiples vulnérabilités dans les produits Citrix | 2017-02-07T00:00:00.000000 | 2017-02-07T00:00:00.000000 |
| certfr-2017-avi-040 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-02-07T00:00:00.000000 | 2017-02-07T00:00:00.000000 |
| certfr-2017-avi-039 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-02-03T00:00:00.000000 | 2017-02-03T00:00:00.000000 |
| certfr-2017-avi-038 | Vulnérabilité dans Cisco Prime Home | 2017-02-01T00:00:00.000000 | 2017-02-01T00:00:00.000000 |
| certfr-2017-avi-037 | Multiples vulnérabilités dans VMware Airwatch | 2017-02-01T00:00:00.000000 | 2017-02-01T00:00:00.000000 |
| certfr-2017-avi-036 | Vulnérabilité dans Cisco WebEx Browser Extension | 2017-01-31T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2017-avi-035 | Multiples vulnérabilités dans les produits Cisco | 2017-01-31T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2017-avi-034 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-01-31T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2017-avi-033 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-01-27T00:00:00.000000 | 2017-01-27T00:00:00.000000 |
| certfr-2017-avi-032 | Multiples vulnérabilités dans WordPress | 2017-01-27T00:00:00.000000 | 2017-01-27T00:00:00.000000 |
| certfr-2017-avi-031 | Multiples vulnérabilités dans les produits Cisco | 2017-01-26T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| certfr-2017-avi-030 | Multiples vulnérabilités dans Google Chrome | 2017-01-26T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| certfr-2017-avi-029 | Multiples vulnérabilités dans Mozilla Firefox | 2017-01-25T00:00:00.000000 | 2017-01-25T00:00:00.000000 |
| certfr-2017-avi-028 | Multiples vulnérabilités dans les produits Apple | 2017-01-24T00:00:00.000000 | 2017-01-24T00:00:00.000000 |
| certfr-2017-avi-027 | Multiples vulnérabilités dans Wireshark | 2017-01-24T00:00:00.000000 | 2017-01-24T00:00:00.000000 |