Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-104734 | Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Ob… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-17T02:31:05.687Z | 2026-10-18T11:22:47.982Z | |
| cve-2026-107762 | Kirki <= 6.3.2 - Insecure Direct Object Reference to U… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-17T02:31:05.352Z | 2026-10-18T11:22:48.151Z | |
| cve-2026-107763 | Fastcache by Host.it <= 1.7.5 - Missing Authorization … |
hostspa |
Fastcache by Host.it |
2026-10-17T02:31:04.849Z | 2026-10-18T11:22:48.291Z | |
| cve-2026-111855 | 7.5 (v3.1) | An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:09:21.352Z | 2026-10-21T21:34:00.446Z |
| cve-2026-111854 | 8.1 (v3.1) | An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:08:50.037Z | 2026-10-19T21:27:31.886Z |
| cve-2026-111853 | 8.8 (v3.1) | An issue was discovered on Tektronix 3 Series MDO… |
Tektronix |
3 Series MDO |
2026-10-17T02:08:13.787Z | 2026-10-19T18:41:55.891Z |
| cve-2026-111823 | 9.8 (v3.1) | Mage OSS through 0.9.80 before 76c4f46 can procee… |
Mage |
mage-ai |
2026-10-16T23:16:29.244Z | 2026-10-19T14:37:19.362Z |
| cve-2026-89096 | 5.9 (v3.1) | Nfs-utils: nfs-utils: denial of service via memory lea… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:06:19.924Z | 2026-10-19T16:40:35.710Z |
| cve-2026-89088 | 5.5 (v3.1) | Parted: parted: denial of service via heap buffer over… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:06:18.907Z | 2026-10-19T15:04:58.470Z |
| cve-2026-89085 | 6.6 (v3.1) | Parted: parted: heap-based buffer overflow via crafted… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T23:04:28.673Z | 2026-10-19T15:08:57.567Z |
| cve-2026-110759 | N/A | Text::CSV_XS versions before 1.65 for Perl return a 0x… |
|
|
2026-10-16T22:08:23.781Z | 2026-10-20T18:36:33.803Z |
| cve-2026-110758 | N/A | Text::CSV_XS versions before 1.65 for Perl read before… |
|
|
2026-10-16T22:08:10.917Z | 2026-10-20T18:31:16.823Z |
| cve-2026-110757 | N/A | Text::CSV_XS versions before 1.65 for Perl allow recor… |
|
|
2026-10-16T22:07:56.450Z | 2026-10-20T18:28:25.925Z |
| cve-2026-110756 | N/A | Text::CSV_XS versions before 1.65 for Perl drop the en… |
|
|
2026-10-16T22:07:37.437Z | 2026-10-20T18:27:42.479Z |
| cve-2026-110755 | N/A | Text::CSV_XS versions before 1.65 for Perl allow quadr… |
|
|
2026-10-16T22:07:10.643Z | 2026-10-20T18:25:20.728Z |
| cve-2026-110754 | N/A | Text::CSV_XS versions before 1.65 for Perl leak the pa… |
|
|
2026-10-16T22:06:46.839Z | 2026-10-20T18:15:41.395Z |
| cve-2026-110753 | N/A | Text::CSV_XS versions from 1.46 before 1.65 for Perl h… |
|
|
2026-10-16T22:06:23.680Z | 2026-10-20T18:14:23.696Z |
| cve-2026-110752 | N/A | Text::CSV_XS versions before 1.65 for Perl allow memor… |
|
|
2026-10-16T22:06:03.622Z | 2026-10-20T18:12:38.953Z |
| cve-2026-111802 | 6.6 (v3.1) | Nautilus: nautilus: arbitrary file deletion via trash … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T22:03:50.287Z | 2026-11-01T03:49:46.578Z |
| cve-2026-17591 | 3.6 (v3.1) | Libarchive: libarchive: use-after-free via aliased mac… |
Red Hat |
Red Hat Hardened Images |
2026-10-16T22:03:40.603Z | 2026-10-19T21:28:22.621Z |
| cve-2026-111044 | Disabled Sunshine clients can bypass revocation with a… |
LizardByte |
Sunshine |
2026-10-16T21:59:00.939Z | 2026-10-28T15:32:53.402Z | |
| cve-2026-62438 | 6.1 (v3.1) | Gimp: gimp: paa integer overflow out-of-bounds read |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T21:56:18.452Z | 2026-10-19T16:40:42.906Z |
| cve-2026-62439 | 7 (v3.1) | Gimp: gimp: file-pvr plug-in pvr file parsing integer … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T21:54:49.538Z | 2026-11-04T22:52:41.368Z |
| cve-2026-108372 | LoopX serve-status permissive CORS policy exposes cont… |
huangruiteng |
loopx |
2026-10-16T21:29:13.757Z | 2026-10-21T21:31:36.971Z | |
| cve-2026-49410 | OpenHuman /auth/telegram CSRF allows attacker-controll… |
tinyhumansai |
openhuman |
2026-10-16T21:25:02.030Z | 2026-10-19T21:26:57.193Z | |
| cve-2026-96627 | Arcane: Delegated users:update permission allows admin… |
getarcaneapp |
arcane |
2026-10-16T21:13:16.717Z | 2026-10-19T14:34:05.584Z | |
| cve-2026-68498 | 7.5 (v3.1) | jackson-core: Delayed maxNameLength enforcement for ch… |
FasterXML |
jackson-core |
2026-10-16T21:11:03.551Z | 2026-10-20T18:08:01.960Z |
| cve-2026-96628 | Arcane: Environment access token bypasses the admin-re… |
getarcaneapp |
arcane |
2026-10-16T21:10:29.214Z | 2026-10-19T16:40:50.253Z | |
| cve-2026-96626 | Arcane: Container-registry credential exfiltration via… |
getarcaneapp |
arcane |
2026-10-16T21:07:39.570Z | 2026-10-28T17:50:38.766Z | |
| cve-2026-96542 | 5 (v3.1) | EA Javelin Anticheat Installer Local Privilege Escalation |
Electronic Arts |
EA Javelin Anticheat (EA Javelin Anticheat Installer) |
2026-10-16T21:00:54.224Z | 2026-10-19T14:31:10.432Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-305 | Multiples vulnérabilités dans Oracle Java SE | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-304 | Multiples vulnérabilités dans Oracle MySQL | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-303 | Multiples vulnérabilités dans Oracle Database Server | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-302 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-301 | Vulnérabilité dans le moteur de script VBscript | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-300 | Vulnérabilité dans Microsoft RDP | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-299 | Multiples vulnérabilités dans Microsoft Hyper-v | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-298 | Multiples vulnérabilités dans Microsoft Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-297 | Multiples vulnérabilités dans Microsoft Office | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-296 | Vulnérabilité dans Microsoft Netlogon | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-295 | Vulnérabilité dans le composant Microsoft Graphics | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-294 | Multiples vulnérabilités dans le noyau Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-293 | Vulnérabilité dans le service d'installation de Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-292 | Multiples vulnérabilités dans Microsoft Windows OLE | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-291 | Vulnérabilité dans Microsoft Remote Procedure Call | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-290 | Vulnérabilité dans le pilote de police Adobe Type Manager | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-289 | Multiples vulnérabilités dans Microsoft SQL Server | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-288 | Multiples vulnérabilités dans Moodle | 2015-07-13T00:00:00.000000 | 2015-07-13T00:00:00.000000 |
| certfr-2015-avi-287 | Vulnérabilité dans VMware Workstation | 2015-07-10T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-avi-286 | Multiples vulnérabilités dans les produits Juniper | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-285 | Vulnérabilité dans OpenSSL | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-284 | Multiples vulnérabilités dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-283 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-282 | Multiples vulnérabilités dans OpenSSH | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-281 | Vulnérabilité dans MariaDB | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-280 | Multiples vulnérabilités dans Schneider Electric Wonderware System Platform | 2015-07-06T00:00:00.000000 | 2015-07-06T00:00:00.000000 |
| certfr-2015-avi-279 | Multiples vulnérabilités dans les produits Mozilla | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-278 | Vulnérabilité dans Cisco Unified Communications Domain Manager | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-277 | Vulnérabilité dans BlueCoat Malware Analysis Appliance | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-276 | Multiples vulnérabilités dans Apple Safari | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |