Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-53918 | odhcpd DHCPv6 IA dangling first pointer use-after-free |
openwrt |
odhcpd |
2026-10-23T13:21:00.665Z | 2026-10-30T17:42:21.816Z | |
| cve-2026-115922 | ONNX: Denial of service via unchecked expansion of pac… |
onnx |
onnx |
2026-10-26T17:31:03.716Z | 2026-10-30T17:40:32.752Z | |
| cve-2026-75525 | OpenReception: unauthenticated ML-KEM key injection in… |
open-reception |
appointment-booking-software |
2026-10-23T20:42:21.394Z | 2026-10-30T17:38:14.992Z | |
| cve-2026-65824 | OpenReception: invite confirmation token is replayable… |
open-reception |
appointment-booking-software |
2026-10-23T20:27:52.852Z | 2026-10-30T17:36:49.674Z | |
| cve-2026-112378 | 4.3 (v3.1) | Use of Less Trusted Source in GitLab |
GitLab |
GitLab |
2026-10-21T23:33:50.429Z | 2026-10-30T17:35:25.066Z |
| cve-2025-8444 | Animation Addons for Elementor – GSAP Powered Elemento… |
wealcoder |
Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates |
2026-06-10T04:31:00.888Z | 2026-10-30T17:34:11.183Z | |
| cve-2026-112212 | 7.5 (v3.1) | Inconsistent Interpretation of HTTP Requests ('HTTP Re… |
GitLab |
GitLab |
2026-10-21T23:33:45.429Z | 2026-10-30T17:33:45.464Z |
| cve-2026-112326 | 3.1 (v3.1) | Improper Cleanup on Thrown Exception in GitLab |
GitLab |
GitLab |
2026-10-21T23:33:40.603Z | 2026-10-30T17:30:54.664Z |
| cve-2026-100420 | 6.8 (v4.0) | Information disclosure vulnerability in the cloud-clie… |
TP-Link Systems Inc. |
Deco BE63 V2.0 |
2026-10-21T23:04:28.083Z | 2026-10-30T17:29:22.081Z |
| cve-2026-89052 | 5.9 (v4.0) | Hardcoded AES encryption key in Archer C6 |
TP-Link Systems Inc. |
Archer C6 V2 |
2026-10-21T22:40:16.165Z | 2026-10-30T17:27:59.216Z |
| cve-2026-103090 | 8.8 (v4.0) | Unauthenticated Biscuit Credential Disclosure via GET … |
Google |
SAM |
2026-10-21T22:16:59.777Z | 2026-10-30T17:26:26.361Z |
| cve-2026-13747 | Meow Gallery <= 5.5.4 - Missing Authorization to Authe… |
tigroumeow |
Meow Gallery |
2026-10-30T17:15:25.089Z | 2026-10-30T17:26:22.628Z | |
| cve-2026-93291 | 9.3 (v4.0) 9.4 (v3.1) | Improper certificate validation in Eufy Omni C20 |
Eufy |
Omni C20 |
2026-09-24T19:27:54.311Z | 2026-10-30T17:26:20.708Z |
| cve-2026-116552 | Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticat… |
likebtn |
Like Button Rating ♥ LikeBtn |
2026-10-30T17:15:26.489Z | 2026-10-30T17:26:01.617Z | |
| cve-2026-112921 | N/A | Robots::Validate versions from 0.4.3 before 0.4.10 for… |
|
|
2026-10-21T21:37:54.278Z | 2026-10-30T17:25:36.728Z |
| cve-2026-107630 | Email Templates Customizer and Designer for WordPress … |
saadiqbal |
Email Templates Customizer and Designer for WordPress and WooCommerce |
2026-10-30T17:15:27.201Z | 2026-10-30T17:25:36.608Z | |
| cve-2026-110533 | FV Flowplayer Video Player <= 7.5.55.7212 - Authentica… |
foliovision |
FV Flowplayer Video Player |
2026-10-30T17:15:28.997Z | 2026-10-30T17:25:10.191Z | |
| cve-2026-102905 | Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shor… |
spacetime |
Ad Inserter – Ad Manager & AdSense Ads |
2026-10-30T17:15:29.355Z | 2026-10-30T17:24:48.214Z | |
| cve-2026-61806 | Frappe LMS allows unpublished certificate access |
frappe |
lms |
2026-10-30T17:02:55.465Z | 2026-10-30T17:24:19.803Z | |
| cve-2025-13050 | 5.4 (v3.1) | Broken Function Level Authorization — `postcommand.php… |
Centreon |
Centreon |
2026-10-29T15:58:50.079Z | 2026-10-30T17:23:25.626Z |
| cve-2026-69855 | 7.7 (v3.1) | Microsoft Copilot in Azure Information Disclosure Vuln… |
Microsoft |
Microsoft Copilot in Azure |
2026-08-20T21:47:13.054Z | 2026-10-30T17:23:20.440Z |
| cve-2026-69543 | 8.5 (v3.1) | Azure Virtual Machines Elevation of Privilege Vulnerability |
Microsoft |
Azure Virtual Machines |
2026-08-20T21:47:12.454Z | 2026-10-30T17:23:19.831Z |
| cve-2026-69558 | 8.6 (v3.1) | Microsoft Partner Center Information Disclosure Vulner… |
Microsoft |
Microsoft Partner Center |
2026-08-20T21:47:11.900Z | 2026-10-30T17:23:19.287Z |
| cve-2026-69555 | 10 (v3.1) | Azure Arc Elevation of Privilege Vulnerability |
Microsoft |
Azure ARC |
2026-08-20T21:47:11.349Z | 2026-10-30T17:23:18.741Z |
| cve-2026-69400 | 9.6 (v3.1) | Azure Logic Apps Elevation of Privilege Vulnerability |
Microsoft |
Azure Logic Apps |
2026-08-20T21:47:10.756Z | 2026-10-30T17:23:18.137Z |
| cve-2026-69502 | 10 (v3.1) | Azure SQL Database Elevation of Privilege Vulnerability |
Microsoft |
Azure SQL Database |
2026-08-21T16:03:56.685Z | 2026-10-30T17:23:17.586Z |
| cve-2026-69419 | 8.5 (v3.1) | Azure Data Manager for Energy Remote Code Execution Vu… |
Microsoft |
Azure Data Manager for Energy |
2026-08-20T21:47:09.643Z | 2026-10-30T17:23:17.011Z |
| cve-2026-68782 | 9.9 (v3.1) | Azure SQL Database Elevation of Privilege Vulnerability |
Microsoft |
Azure SQL Database |
2026-08-20T21:47:09.026Z | 2026-10-30T17:23:16.486Z |
| cve-2026-66800 | 8.6 (v3.1) | Azure Data Factory Information Disclosure Vulnerability |
Microsoft |
Azure Data Factory |
2026-08-20T21:47:08.385Z | 2026-10-30T17:23:15.965Z |
| cve-2026-66309 | 9.1 (v3.1) | Azure SQL Database Elevation of Privilege Vulnerability |
Microsoft |
Azure SQL Database |
2026-08-20T21:47:07.832Z | 2026-10-30T17:23:15.348Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-026 | Multiples vulnérabilités dans le noyau Linux de Suse | 2017-01-23T00:00:00.000000 | 2017-01-23T00:00:00.000000 |
| certfr-2017-avi-025 | Vulnérabilité dans Adobe Acrobat | 2017-01-23T00:00:00.000000 | 2017-01-23T00:00:00.000000 |
| certfr-2017-avi-024 | Vulnérabilité dans SCADA Schneider homeLYnk Controller | 2017-01-20T00:00:00.000000 | 2017-01-20T00:00:00.000000 |
| certfr-2017-avi-023 | Multiples vulnérabilités dans Cisco WebEx Meetings Server et Center | 2017-01-19T00:00:00.000000 | 2017-01-19T00:00:00.000000 |
| certfr-2017-avi-022 | Multiples vulnérabilités dans Juniper Network and Security Manager | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-021 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-020 | Multiples vulnérabilités dans Oracle Database Server | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-019 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-018 | Multiples vulnérabilités dans Oracle MySQL | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-017 | Multiples vulnérabilités dans Oracle Java SE | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-016 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-01-18T00:00:00.000000 | 2017-01-18T00:00:00.000000 |
| certfr-2017-avi-015 | Multiples vulnérabilités dans Citrix Provisionning Services | 2017-01-17T00:00:00.000000 | 2017-01-17T00:00:00.000000 |
| certfr-2017-avi-014 | Multiples vulnérabilités dans Moodle | 2017-01-17T00:00:00.000000 | 2017-01-17T00:00:00.000000 |
| certfr-2017-avi-013 | Multiples vulnérabilités dans ISC BIND | 2017-01-16T00:00:00.000000 | 2017-01-16T00:00:00.000000 |
| certfr-2017-avi-012 | Multiples vulnérabilités dans les produits Juniper | 2017-01-12T00:00:00.000000 | 2017-01-12T00:00:00.000000 |
| certfr-2017-avi-011 | Multiples vulnérabilités dans WordPress | 2017-01-12T00:00:00.000000 | 2017-01-12T00:00:00.000000 |
| certfr-2017-avi-010 | Vulnérabilité dans Microsoft Windows | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-009 | Vulnérabilité dans Microsoft Office | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-008 | Multiples vulnérabilités dans Microsoft Edge | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-007 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-006 | Multiples vulnérabilités dans Adobe Flash Player | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-005 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-004 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-01-11T00:00:00.000000 | 2017-01-11T00:00:00.000000 |
| certfr-2017-avi-003 | Multiples vulnérabilités dans SCADA les produits Rockwell Automation | 2017-01-10T00:00:00.000000 | 2017-01-10T00:00:00.000000 |
| certfr-2017-avi-002 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-01-05T00:00:00.000000 | 2017-01-05T00:00:00.000000 |
| certfr-2017-avi-001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-01-02T00:00:00.000000 | 2017-01-02T00:00:00.000000 |
| certfr-2016-avi-431 | Multiples vulnérabilités dans Mozilla Thunderbird | 2016-12-29T00:00:00.000000 | 2016-12-29T00:00:00.000000 |
| certfr-2016-avi-430 | Vulnérabilité dans les routeurs Netgear | 2016-12-26T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| certfr-2016-avi-420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2016-12-15T00:00:00.000000 | 2016-12-23T00:00:00.000000 |
| certfr-2016-avi-407 | Multiples vulnérabilités dans le noyau Linux de Suse | 2016-12-13T00:00:00.000000 | 2016-12-23T00:00:00.000000 |