Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-119367 | 5.4 (v3.1) | WordPress The Events Calendar plugin <= 6.18.2 - Broke… |
Liquid Web / StellarWP |
The Events Calendar |
2026-10-30T16:10:10.603Z | 2026-10-30T17:18:21.825Z |
| cve-2026-119365 | 6.5 (v3.1) | WordPress Media Player Addons for Elementor – Media Pl… |
bPlugins |
Media Player Addons for Elementor – Media Player widget for WP |
2026-10-30T16:11:00.627Z | 2026-10-30T17:18:21.690Z |
| cve-2026-62055 | 4.3 (v3.1) | WordPress Event Tickets plugin <= 5.30.2 - Broken Acce… |
Liquid Web / StellarWP |
Event Tickets |
2026-10-30T16:11:26.969Z | 2026-10-30T17:18:21.560Z |
| cve-2026-65566 | 8.8 (v3.1) | WordPress AI Engine plugin <= 3.8.8 - Cross Site Reque… |
Meow Apps |
AI Engine |
2026-10-30T16:15:59.202Z | 2026-10-30T17:18:21.422Z |
| cve-2026-116566 | 5.3 (v4.0) | socket.getaddrinfo() accepts embedded null bytes in ho… |
Python Software Foundation |
CPython |
2026-10-29T17:45:47.583Z | 2026-10-30T17:18:15.574Z |
| cve-2026-110322 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Untruste… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:26:21.735Z | 2026-10-30T17:18:13.773Z |
| cve-2026-105960 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Improper… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:28:12.533Z | 2026-10-30T17:17:53.241Z |
| cve-2026-110803 | 8.7 (v4.0) | Session Lock Leak on an Invalid UI Id Allows Denial of… |
vaadin |
framework |
2026-10-21T18:22:59.789Z | 2026-10-30T17:17:47.911Z |
| cve-2026-112712 | 9.1 (v3.1) | @fastify/middie vulnerable to path-scoped middleware b… |
@fastify/middie |
@fastify/middie |
2026-10-20T20:43:48.681Z | 2026-10-30T17:17:28.727Z |
| cve-2026-11587 | 7.2 (v3.1) | Authenticated SQL Injection via PHP Array Key in ACL M… |
Centreon |
Centreon |
2026-10-29T16:38:39.793Z | 2026-10-30T17:17:16.870Z |
| cve-2023-7357 | 8.6 (v4.0) | FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability |
Revera |
FlexNet Publisher |
2026-10-29T16:38:37.007Z | 2026-10-30T17:16:40.079Z |
| cve-2026-107588 | 8.4 (v4.0) | Multiple Vulnerabilities in the Highcharts Library Bun… |
vaadin |
vaadin |
2026-10-21T18:22:47.593Z | 2026-10-30T17:16:23.814Z |
| cve-2026-106781 | N/A | An issue in WCH CH340/CH341 USB-to-Serial Windows… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:16:20.207Z |
| cve-2025-12523 | 6.5 (v3.1) | Broken Object Level Authorization in Users Configurati… |
Centreon |
Centreon |
2026-10-29T16:29:20.074Z | 2026-10-30T17:16:11.153Z |
| cve-2026-107080 | N/A | OpenJPEG 2.4.0 through 2.5.4, and git master thro… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:16:04.344Z |
| cve-2026-116638 | N/A | The Windows Recovery Environment (WinRE) in Windo… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:15:33.765Z |
| cve-2026-90871 | 5.3 (v3.1) | Path Traversal Leading to File Deletion in Ad Hoc Tran… |
Progress Software |
WS_FTP Server |
2026-10-29T15:56:34.762Z | 2026-10-30T17:15:33.651Z |
| cve-2026-119619 | 37954679 cak-filemanagement-system save_student.php my… |
37954679 |
cak-filemanagement-system |
2026-10-30T17:15:15.085Z | 2026-10-30T17:15:15.085Z | |
| cve-2026-104594 | N/A | libosmocore through 1.14.1 contains out-of-bounds… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:15:09.899Z |
| cve-2026-90870 | 5.3 (v3.1) | Unauthenticated Ad Hoc Transfer Resource Exhaustion in… |
Progress Software |
WS_FTP Server |
2026-10-29T15:55:43.950Z | 2026-10-30T17:15:05.940Z |
| cve-2026-107067 | N/A | An issue in Shirt Pocket's SuperDuper! 4.0.9 and … |
n/a |
n/a |
2026-10-27T00:00:00.000Z | 2026-10-30T17:14:50.522Z |
| cve-2026-90869 | 7.5 (v3.1) | Pre-Authentication SSH Denial of Service via Malformed… |
Progress Software |
WS_FTP Server |
2026-10-29T15:54:48.769Z | 2026-10-30T17:14:35.864Z |
| cve-2026-106972 | N/A | Uncontrolled recursion in MessagePack\BufferUnpac… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-30T17:14:25.522Z |
| cve-2026-90862 | 4.3 (v3.1) | Web Transfer Module Multi-Factor Authentication Bypass… |
Progress Software |
WS_FTP Server |
2026-10-29T15:48:42.885Z | 2026-10-30T17:14:03.885Z |
| cve-2026-51905 | N/A | TransformerOptimus SuperAGI v0.0.14 is vulnerable… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T17:13:57.738Z |
| cve-2026-93290 | 6.8 (v4.0) 5.5 (v3.1) | Use of Hard-coded Credentials in Eufy Omni C20 |
Eufy |
Omni C20 |
2026-09-24T19:26:36.445Z | 2026-10-30T17:13:52.811Z |
| cve-2026-118759 | Kubeflow Pipelines: Run log streaming endpoint bypasse… |
kubeflow |
pipelines |
2026-10-29T16:30:25.711Z | 2026-10-30T17:13:29.148Z | |
| cve-2026-119325 | 7.5 (v3.1) | Bricks Theme Broken Access Control via load_popup_content |
Bricks |
Bricks Theme |
2026-10-29T20:34:52.827Z | 2026-10-30T17:13:16.422Z |
| cve-2026-118763 | @sigstore/oci sends the registry Authorization header … |
sigstore |
sigstore-js |
2026-10-29T17:01:40.294Z | 2026-10-30T17:13:12.761Z | |
| cve-2026-119207 | pypdf: Possible large memory usage for exceptions in s… |
py-pdf |
pypdf |
2026-10-29T20:38:54.611Z | 2026-10-30T17:12:40.743Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-335 | Multiples vulnérabilités dans Microsoft Office | 2015-08-12T00:00:00.000000 | 2015-08-12T00:00:00.000000 |
| certfr-2015-avi-334 | Multiples vulnérabilités dans le composant Microsoft Graphics | 2015-08-12T00:00:00.000000 | 2015-08-12T00:00:00.000000 |
| certfr-2015-avi-333 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-08-12T00:00:00.000000 | 2015-08-12T00:00:00.000000 |
| certfr-2015-avi-332 | Multiples vulnérabilités dans IBM Tivoli Monitoring | 2015-08-11T00:00:00.000000 | 2015-08-11T00:00:00.000000 |
| certfr-2015-avi-331 | Multiples vulnérabilités dans le noyau Linux Debian | 2015-08-07T00:00:00.000000 | 2015-08-07T00:00:00.000000 |
| certfr-2015-avi-330 | Multiples vulnérabilités dans PHP | 2015-08-07T00:00:00.000000 | 2015-08-07T00:00:00.000000 |
| certfr-2015-avi-329 | Vulnérabilité dans Mozilla Firefox | 2015-08-07T00:00:00.000000 | 2015-08-07T00:00:00.000000 |
| certfr-2015-avi-328 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-08-07T00:00:00.000000 | 2015-08-07T00:00:00.000000 |
| certfr-2015-avi-327 | Multiples vulnérabilités dans les produits Huawei | 2015-08-05T00:00:00.000000 | 2015-08-05T00:00:00.000000 |
| certfr-2015-avi-326 | Multiples vulnérabilités dans Wordpress | 2015-08-04T00:00:00.000000 | 2015-08-04T00:00:00.000000 |
| certfr-2015-avi-325 | Multiples vulnérabilités dans Xen | 2015-08-04T00:00:00.000000 | 2015-08-04T00:00:00.000000 |
| certfr-2015-avi-324 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-07-31T00:00:00.000000 | 2015-07-31T00:00:00.000000 |
| certfr-2015-avi-323 | Vulnérabilité dans Cisco IOS XE | 2015-07-31T00:00:00.000000 | 2015-07-31T00:00:00.000000 |
| certfr-2015-avi-322 | Vulnérabilité dans ISC Bind | 2015-07-30T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| certfr-2015-avi-321 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-07-28T00:00:00.000000 | 2015-07-28T00:00:00.000000 |
| certfr-2015-avi-320 | Vulnérabilité dans Citrix XenServer | 2015-07-28T00:00:00.000000 | 2015-07-28T00:00:00.000000 |
| certfr-2015-avi-319 | Vulnérabilité dans Xen | 2015-07-28T00:00:00.000000 | 2015-07-28T00:00:00.000000 |
| certfr-2015-avi-318 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-07-24T00:00:00.000000 | 2015-07-24T00:00:00.000000 |
| certfr-2015-avi-317 | Multiples vulnérabilités dans les produits BlueCoat | 2015-07-24T00:00:00.000000 | 2015-07-24T00:00:00.000000 |
| certfr-2015-avi-316 | Vulnérabilité dans WordPress | 2015-07-24T00:00:00.000000 | 2015-07-24T00:00:00.000000 |
| certfr-2015-avi-315 | Multiples vulnérabilités dans les produits SCADA Schneider | 2015-07-23T00:00:00.000000 | 2015-07-23T00:00:00.000000 |
| certfr-2015-avi-314 | Multiples vulnérabilités dans les produits SCADA Siemens | 2015-07-23T00:00:00.000000 | 2015-07-23T00:00:00.000000 |
| certfr-2015-avi-313 | Multiples vulnérabilités dans les produits Cisco | 2015-07-23T00:00:00.000000 | 2015-07-23T00:00:00.000000 |
| certfr-2015-avi-312 | Multiples vulnérabilités dans Google Chrome | 2015-07-22T00:00:00.000000 | 2015-07-22T00:00:00.000000 |
| certfr-2015-avi-311 | Vulnérabilité dans le noyau Linux Red Hat | 2015-07-16T00:00:00.000000 | 2015-07-16T00:00:00.000000 |
| certfr-2015-avi-310 | Multiples vulnérabilités dans Adobe Shockwave Player | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-309 | Multiples vulnérabilités dans Adobe Flash Player | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-308 | Multiples vulnérabilités dans Oracle Solaris | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-307 | Multiples vulnérabilités dans Oracle Berkeley DB | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-306 | Multiples vulnérabilités dans Oracle Sun Systems | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |