Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105960 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Improper… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:28:12.533Z | 2026-10-30T17:17:53.241Z |
| cve-2026-110803 | 8.7 (v4.0) | Session Lock Leak on an Invalid UI Id Allows Denial of… |
vaadin |
framework |
2026-10-21T18:22:59.789Z | 2026-10-30T17:17:47.911Z |
| cve-2026-112712 | 9.1 (v3.1) | @fastify/middie vulnerable to path-scoped middleware b… |
@fastify/middie |
@fastify/middie |
2026-10-20T20:43:48.681Z | 2026-10-30T17:17:28.727Z |
| cve-2026-11587 | 7.2 (v3.1) | Authenticated SQL Injection via PHP Array Key in ACL M… |
Centreon |
Centreon |
2026-10-29T16:38:39.793Z | 2026-10-30T17:17:16.870Z |
| cve-2023-7357 | 8.6 (v4.0) | FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability |
Revera |
FlexNet Publisher |
2026-10-29T16:38:37.007Z | 2026-10-30T17:16:40.079Z |
| cve-2026-107588 | 8.4 (v4.0) | Multiple Vulnerabilities in the Highcharts Library Bun… |
vaadin |
vaadin |
2026-10-21T18:22:47.593Z | 2026-10-30T17:16:23.814Z |
| cve-2026-106781 | N/A | An issue in WCH CH340/CH341 USB-to-Serial Windows… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:16:20.207Z |
| cve-2025-12523 | 6.5 (v3.1) | Broken Object Level Authorization in Users Configurati… |
Centreon |
Centreon |
2026-10-29T16:29:20.074Z | 2026-10-30T17:16:11.153Z |
| cve-2026-107080 | N/A | OpenJPEG 2.4.0 through 2.5.4, and git master thro… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:16:04.344Z |
| cve-2026-116638 | N/A | The Windows Recovery Environment (WinRE) in Windo… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:15:33.765Z |
| cve-2026-90871 | 5.3 (v3.1) | Path Traversal Leading to File Deletion in Ad Hoc Tran… |
Progress Software |
WS_FTP Server |
2026-10-29T15:56:34.762Z | 2026-10-30T17:15:33.651Z |
| cve-2026-119619 | 37954679 cak-filemanagement-system save_student.php my… |
37954679 |
cak-filemanagement-system |
2026-10-30T17:15:15.085Z | 2026-10-30T17:15:15.085Z | |
| cve-2026-104594 | N/A | libosmocore through 1.14.1 contains out-of-bounds… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-30T17:15:09.899Z |
| cve-2026-90870 | 5.3 (v3.1) | Unauthenticated Ad Hoc Transfer Resource Exhaustion in… |
Progress Software |
WS_FTP Server |
2026-10-29T15:55:43.950Z | 2026-10-30T17:15:05.940Z |
| cve-2026-107067 | N/A | An issue in Shirt Pocket's SuperDuper! 4.0.9 and … |
n/a |
n/a |
2026-10-27T00:00:00.000Z | 2026-10-30T17:14:50.522Z |
| cve-2026-90869 | 7.5 (v3.1) | Pre-Authentication SSH Denial of Service via Malformed… |
Progress Software |
WS_FTP Server |
2026-10-29T15:54:48.769Z | 2026-10-30T17:14:35.864Z |
| cve-2026-106972 | N/A | Uncontrolled recursion in MessagePack\BufferUnpac… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-30T17:14:25.522Z |
| cve-2026-90862 | 4.3 (v3.1) | Web Transfer Module Multi-Factor Authentication Bypass… |
Progress Software |
WS_FTP Server |
2026-10-29T15:48:42.885Z | 2026-10-30T17:14:03.885Z |
| cve-2026-51905 | N/A | TransformerOptimus SuperAGI v0.0.14 is vulnerable… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-30T17:13:57.738Z |
| cve-2026-93290 | 6.8 (v4.0) 5.5 (v3.1) | Use of Hard-coded Credentials in Eufy Omni C20 |
Eufy |
Omni C20 |
2026-09-24T19:26:36.445Z | 2026-10-30T17:13:52.811Z |
| cve-2026-118759 | Kubeflow Pipelines: Run log streaming endpoint bypasse… |
kubeflow |
pipelines |
2026-10-29T16:30:25.711Z | 2026-10-30T17:13:29.148Z | |
| cve-2026-119325 | 7.5 (v3.1) | Bricks Theme Broken Access Control via load_popup_content |
Bricks |
Bricks Theme |
2026-10-29T20:34:52.827Z | 2026-10-30T17:13:16.422Z |
| cve-2026-118763 | @sigstore/oci sends the registry Authorization header … |
sigstore |
sigstore-js |
2026-10-29T17:01:40.294Z | 2026-10-30T17:13:12.761Z | |
| cve-2026-119207 | pypdf: Possible large memory usage for exceptions in s… |
py-pdf |
pypdf |
2026-10-29T20:38:54.611Z | 2026-10-30T17:12:40.743Z | |
| cve-2026-118767 | Botan: Python binding bcrypt APIs truncate passwords c… |
randombit |
botan |
2026-10-29T17:17:24.323Z | 2026-10-30T17:12:36.136Z | |
| cve-2026-118773 | Glob: AbortSignal cancellation bypass allows post-time… |
isaacs |
node-glob |
2026-10-29T18:27:47.480Z | 2026-10-30T17:12:23.906Z | |
| cve-2026-39910 | 7.7 (v4.0) 8.8 (v3.1) | STACKIT IaaS API Privilege Escalation via Service Acco… |
STACKIT |
IaaS API |
2026-06-08T16:16:09.469Z | 2026-10-30T17:12:16.705Z |
| cve-2026-118777 | Forge: Prototype Pollution in forge.http cookie handli… |
digitalbazaar |
forge |
2026-10-29T18:42:06.079Z | 2026-10-30T17:12:06.088Z | |
| cve-2026-119276 | MariaDB Connector/J: Rogue server can drive large heap… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:47:32.086Z | 2026-10-30T17:11:51.081Z | |
| cve-2024-5563 | 4.8 (v3.1) | Incomplete reCaptcha Implementation in Authentication … |
WSO2 |
WSO2 Identity Server |
2026-10-21T13:44:40.480Z | 2026-10-30T17:11:39.685Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-305 | Multiples vulnérabilités dans Oracle Java SE | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-304 | Multiples vulnérabilités dans Oracle MySQL | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-303 | Multiples vulnérabilités dans Oracle Database Server | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-302 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-301 | Vulnérabilité dans le moteur de script VBscript | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-300 | Vulnérabilité dans Microsoft RDP | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-299 | Multiples vulnérabilités dans Microsoft Hyper-v | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-298 | Multiples vulnérabilités dans Microsoft Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-297 | Multiples vulnérabilités dans Microsoft Office | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-296 | Vulnérabilité dans Microsoft Netlogon | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-295 | Vulnérabilité dans le composant Microsoft Graphics | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-294 | Multiples vulnérabilités dans le noyau Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-293 | Vulnérabilité dans le service d'installation de Windows | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-292 | Multiples vulnérabilités dans Microsoft Windows OLE | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-291 | Vulnérabilité dans Microsoft Remote Procedure Call | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-290 | Vulnérabilité dans le pilote de police Adobe Type Manager | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-289 | Multiples vulnérabilités dans Microsoft SQL Server | 2015-07-15T00:00:00.000000 | 2015-07-15T00:00:00.000000 |
| certfr-2015-avi-288 | Multiples vulnérabilités dans Moodle | 2015-07-13T00:00:00.000000 | 2015-07-13T00:00:00.000000 |
| certfr-2015-avi-287 | Vulnérabilité dans VMware Workstation | 2015-07-10T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-avi-286 | Multiples vulnérabilités dans les produits Juniper | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-285 | Vulnérabilité dans OpenSSL | 2015-07-09T00:00:00.000000 | 2015-07-09T00:00:00.000000 |
| certfr-2015-avi-284 | Multiples vulnérabilités dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-283 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-07-08T00:00:00.000000 | 2015-07-08T00:00:00.000000 |
| certfr-2015-avi-282 | Multiples vulnérabilités dans OpenSSH | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-281 | Vulnérabilité dans MariaDB | 2015-07-07T00:00:00.000000 | 2015-07-07T00:00:00.000000 |
| certfr-2015-avi-280 | Multiples vulnérabilités dans Schneider Electric Wonderware System Platform | 2015-07-06T00:00:00.000000 | 2015-07-06T00:00:00.000000 |
| certfr-2015-avi-279 | Multiples vulnérabilités dans les produits Mozilla | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-278 | Vulnérabilité dans Cisco Unified Communications Domain Manager | 2015-07-03T00:00:00.000000 | 2015-07-03T00:00:00.000000 |
| certfr-2015-avi-277 | Vulnérabilité dans BlueCoat Malware Analysis Appliance | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-276 | Multiples vulnérabilités dans Apple Safari | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |