Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103311 | Coinbase Commerce Payment Gateway for WooCommerce <= 1… |
Unknown |
Coinbase Commerce Payment Gateway for WooCommerce |
2026-10-19T06:46:13.617Z | 2026-10-19T09:31:22.100Z | |
| cve-2026-112089 | Dav-ee dairy-management-system delete.php mysqli_query… |
Dav-ee |
dairy-management-system |
2026-10-19T06:45:16.887Z | 2026-10-19T16:36:20.414Z | |
| cve-2026-16460 | 7.4 (v3.1) | Bootc: ostree: bootc/ostree: staged deployments not re… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-19T06:40:50.466Z | 2026-11-04T22:02:48.833Z |
| cve-2026-112088 | Dav-ee dairy-management-system add.php mysqli_query sq… |
Dav-ee |
dairy-management-system |
2026-10-19T06:30:16.024Z | 2026-10-19T16:46:53.655Z | |
| cve-2026-76740 | 7.2 (v3.1) | HPE Compute Scale-up Server 3200 and 3250 platforms, S… |
Hewlett Packard Enterprise |
HPE Compute Scale-up Server 3200 platform |
2026-10-19T06:25:55.088Z | 2026-10-21T03:56:22.565Z |
| cve-2026-112087 | itsourcecode Online Cake Ordering System confirm.php s… |
itsourcecode |
Online Cake Ordering System |
2026-10-19T06:15:13.605Z | 2026-10-22T02:35:54.390Z | |
| cve-2026-112086 | ESPnet Inference Model inference_model.py build_model … |
n/a |
ESPnet |
2026-10-19T06:00:25.807Z | 2026-10-19T17:32:44.974Z | |
| cve-2026-94273 | N/A | Snap Finance <= 3.11.0 - Unauthenticated Payment Confi… |
Unknown |
Snap Finance |
2026-10-19T06:00:13.365Z | 2026-10-19T09:31:19.231Z |
| cve-2026-106014 | N/A | Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Or… |
Unknown |
Gateway for Vantiv on WC |
2026-10-19T06:00:12.925Z | 2026-10-19T09:31:19.387Z |
| cve-2026-89286 | N/A | FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Se… |
Unknown |
FormFlow for GoHighLevel (GHL) |
2026-10-19T06:00:12.752Z | 2026-10-19T09:31:19.535Z |
| cve-2026-91047 | N/A | ElementsReady Addons for Elementor <= 6.7.2 - Unauthen… |
Unknown |
ElementsReady Addons for Elementor |
2026-10-19T06:00:12.572Z | 2026-10-19T09:31:19.699Z |
| cve-2026-91046 | N/A | ElementsReady Addons for Elementor <= 6.7.2 - Subscrib… |
Unknown |
ElementsReady Addons for Elementor |
2026-10-19T06:00:12.393Z | 2026-10-19T09:31:19.851Z |
| cve-2026-106933 | N/A | Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via … |
Unknown |
Blaze Demo Importer |
2026-10-19T06:00:12.213Z | 2026-10-19T09:31:20.009Z |
| cve-2026-106028 | N/A | ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated… |
Unknown |
ActiveTrail for WooCommerce |
2026-10-19T06:00:11.466Z | 2026-10-19T09:31:20.161Z |
| cve-2026-76739 | 4.3 (v3.1) | HPE Compute Scale-up Server 3200 and 3250 platforms an… |
Hewlett Packard Enterprise |
HPE Compute Scale-up Server 3200 platform |
2026-10-19T05:48:44.116Z | 2026-10-19T17:34:41.862Z |
| cve-2026-112083 | sgl-project SGLang Weight Exporter weight_exporter.py … |
sgl-project |
SGLang |
2026-10-19T05:45:18.578Z | 2026-10-19T16:36:26.379Z | |
| cve-2026-112082 | sgl-project SGLang Expert-Distribution Recording Endpo… |
sgl-project |
SGLang |
2026-10-19T05:30:22.073Z | 2026-10-19T16:45:48.503Z | |
| cve-2026-16487 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': 'Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common. bootc fetches images under /etc/containers/policy.json. The shipped default is insecureAcceptAnything for registries without an explicit signature requirement; registry.redhat.io and registry.access.redhat.com require signatures. Updating a mutable tag requires the ability to publish to the reference an administrator has already configured the host to follow. Requiring signatures is available through that policy and through bootc enforce-container-sigpolicy, which is off by default. Persistence of /var across bootc rollback is expected image-mode behavior.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:20:13.903Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}} | N/A | N/A | 2026-10-19T05:27:30.898Z | 2026-10-21T06:20:13.903Z |
| cve-2026-112081 | hankcs HanLP Model Config Loading reflection.py hanlp.… |
hankcs |
HanLP |
2026-10-19T05:15:14.456Z | 2026-10-22T02:35:10.809Z | |
| cve-2026-108120 | 7.7 (v4.0) | path traversal inKoozali - SME Server |
koozali |
SME Server |
2026-10-19T05:12:00.139Z | 2026-10-19T18:33:10.143Z |
| cve-2026-108121 | 6.9 (v4.0) | Koozali - SME Server Improper Input Validation in doma… |
Koozali |
SME Server |
2026-10-19T05:07:58.680Z | 2026-10-19T17:36:10.887Z |
| cve-2026-112080 | LlamaChinese Llama-Chinese Adapter Config chat_gradio_… |
LlamaChinese |
Llama-Chinese |
2026-10-19T05:00:18.385Z | 2026-10-19T17:38:29.836Z | |
| cve-2026-112079 | hankcs HanLP torch_util.py load_word2vec_as_vocab_tens… |
hankcs |
HanLP |
2026-10-19T04:45:08.929Z | 2026-10-19T16:36:33.443Z | |
| cve-2026-112078 | RVC-Project Retrieval-based-Voice-Conversion-WebUI web… |
RVC-Project |
Retrieval-based-Voice-Conversion-WebUI |
2026-10-19T04:30:19.922Z | 2026-10-19T16:40:29.435Z | |
| cve-2026-112077 | radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r… |
radareorg |
radare2 |
2026-10-19T04:15:17.808Z | 2026-10-22T02:34:10.802Z | |
| cve-2026-112076 | alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py … |
alexta69 |
MeTube |
2026-10-19T04:00:24.548Z | 2026-10-19T17:39:09.855Z | |
| cve-2026-111440 | 7 (v3.1) | JDBC LogFactory 任意类加载/构造导致潜在 RCE |
openGauss-server |
openGauss-connector-jdbc |
2026-10-19T03:55:19.107Z | 2026-10-19T17:39:59.272Z |
| cve-2026-112075 | unslothai unsloth sentence_transformer.py externally-c… |
unslothai |
unsloth |
2026-10-19T03:45:20.785Z | 2026-10-19T16:36:42.853Z | |
| cve-2026-112074 | Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb… |
Tencent |
ncnn |
2026-10-19T03:30:21.932Z | 2026-10-19T16:37:33.056Z | |
| cve-2026-112073 | Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds |
Tencent |
ncnn |
2026-10-19T03:15:18.986Z | 2026-10-22T02:31:41.124Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-026 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-01-23T00:00:00.000000 | 2017-01-23T00:00:00.000000 |
| certfr-2017-avi-025 | Vulnérabilité dans Adobe Acrobat | 2017-01-23T00:00:00.000000 | 2017-01-23T00:00:00.000000 |
| certfr-2017-avi-024 | Vulnérabilité dans SCADA Schneider homeLYnk Controller | 2017-01-20T00:00:00.000000 | 2017-01-20T00:00:00.000000 |
| certfr-2017-avi-023 | Multiples vulnérabilités dans Cisco WebEx Meetings Server et Center | 2017-01-19T00:00:00.000000 | 2017-01-19T00:00:00.000000 |
| certfr-2017-avi-022 | Multiples vulnérabilités dans Juniper Network and Security Manager | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-021 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-020 | Multiples vulnérabilités dans Oracle Database Server | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-019 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-018 | Multiples vulnérabilités dans Oracle MySQL | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-017 | Multiples vulnérabilités dans Oracle Java SE | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-016 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-015 | Multiples vulnérabilités dans Citrix Provisionning Services | 2017-01-17T00:00:00.000000 | 2017-01-17T00:00:00.000000 |
| certfr-2017-avi-014 | Multiples vulnérabilités dans Moodle | 2017-01-17T00:00:00.000000 | 2017-01-17T00:00:00.000000 |
| certfr-2017-avi-013 | Multiples vulnérabilités dans ISC BIND | 2017-01-16T00:00:00.000000 | 2017-01-16T00:00:00.000000 |
| certfr-2017-avi-012 | Multiples vulnérabilités dans les produits Juniper | 2017-01-12T00:00:00.000000 | 2017-01-12T00:00:00.000000 |
| certfr-2017-avi-011 | Multiples vulnérabilités dans WordPress | 2017-01-12T00:00:00.000000 | 2017-01-12T00:00:00.000000 |
| certfr-2017-avi-010 | Vulnérabilité dans Microsoft Windows | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-009 | Vulnérabilité dans Microsoft Office | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-008 | Multiples vulnérabilités dans Microsoft Edge | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-007 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-006 | Multiples vulnérabilités dans Adobe Flash Player | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-005 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-004 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-003 | Multiples vulnérabilités dans SCADA les produits Rockwell Automation | 2017-01-10T00:00:00.000000 | 2017-01-10T00:00:00.000000 |
| certfr-2017-avi-002 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-01-05T00:00:00.000000 | 2017-01-05T00:00:00.000000 |
| certfr-2017-avi-001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-01-02T00:00:00.000000 | 2017-01-02T00:00:00.000000 |
| certfr-2016-avi-431 | Multiples vulnérabilités dans Mozilla Thunderbird | 2016-12-29T00:00:00.000000 | 2016-12-29T00:00:00.000000 |
| certfr-2016-avi-430 | Vulnérabilité dans les routeurs Netgear | 2016-12-26T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| certfr-2016-avi-429 | Vulnérabilité dans Cisco CloudCenter Orchestrator Docker Engine | 2016-12-22T00:00:00.000000 | 2016-12-22T00:00:00.000000 |
| certfr-2016-avi-428 | Multiples vulnérabilités dans Citrix XenServer | 2016-12-21T00:00:00.000000 | 2016-12-21T00:00:00.000000 |