Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-64862 | Frappe HR: Missing Authorization on PWA API Endpoints … |
frappe |
hrms |
2026-10-16T20:52:53.666Z | 2026-10-19T16:40:58.253Z | |
| cve-2026-55796 | Frappe HR: SQL Injection in HRMS Salary Payments via E… |
frappe |
hrms |
2026-10-16T20:50:01.927Z | 2026-10-21T21:29:08.361Z | |
| cve-2026-108373 | ERPNext: Unauthorised access to financial data due to … |
frappe |
erpnext |
2026-10-16T20:48:46.241Z | 2026-10-19T21:26:03.462Z | |
| cve-2026-108374 | ERPNext: Unauthorised status modification due to missi… |
frappe |
erpnext |
2026-10-16T20:38:32.806Z | 2026-10-19T14:29:00.708Z | |
| cve-2026-102834 | JavaCV: Integer Overflow in IPCameraFrameGrabber Cause… |
bytedeco |
javacv |
2026-10-16T19:51:57.641Z | 2026-10-28T17:53:35.339Z | |
| cve-2026-108743 | Apache Kylin: spark job OS command injection |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:44:37.833Z | 2026-10-20T12:58:48.518Z | |
| cve-2026-96620 | Claude Agent SDK: Argument Injection via resume Option… |
anthropics |
claude-agent-sdk-python |
2026-10-16T19:44:01.260Z | 2026-10-21T21:28:24.631Z | |
| cve-2026-30971 | ZoneMinder: Authenticated RCE via command injection in… |
ZoneMinder |
zoneminder |
2026-10-16T19:40:51.681Z | 2026-10-16T19:57:11.752Z | |
| cve-2026-108709 | Apache Kylin: Unauthenticated Metadata Broadcast (insi… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:38:21.601Z | 2026-10-20T18:06:59.378Z | |
| cve-2026-69080 | Apache Kylin: Broken Access Control in QuerySQLBlackli… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:37:50.174Z | 2026-10-20T18:04:54.819Z | |
| cve-2026-102608 | ZoneMinder: Authenticated OS Command Injection via uns… |
ZoneMinder |
zoneminder |
2026-10-16T19:35:36.862Z | 2026-10-19T16:41:08.186Z | |
| cve-2026-69077 | Apache Kylin: JobController allows unauthorized cross-… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:33:20.218Z | 2026-10-20T18:03:35.109Z | |
| cve-2026-69076 | Apache Kylin: Unauthorized cross-project job discard |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:39.538Z | 2026-10-20T18:02:18.110Z | |
| cve-2026-68573 | Apache Kylin: Unauthenticated Metastore Cleanup |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:22.205Z | 2026-10-20T17:59:10.444Z | |
| cve-2026-68572 | Apache Kylin: Unauthorized SQL execution to Spark SQL env |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:03.193Z | 2026-10-20T17:50:19.415Z | |
| cve-2026-102607 | ZoneMinder: Authenticated OS Command Injection (RCE) v… |
ZoneMinder |
zoneminder |
2026-10-16T19:29:58.131Z | 2026-10-19T14:26:23.072Z | |
| cve-2026-59970 | Tandoor Recipes: Blind SSRF via AI provider URL (api_base) |
TandoorRecipes |
recipes |
2026-10-16T19:21:07.358Z | 2026-10-21T21:26:53.503Z | |
| cve-2026-61726 | Tandoor Recipes: Private recipe authorization bypass v… |
TandoorRecipes |
recipes |
2026-10-16T19:19:57.552Z | 2026-10-28T18:00:30.729Z | |
| cve-2026-59966 | Tandoor Recipes: ReDoS (Regular Expression Denial of S… |
TandoorRecipes |
recipes |
2026-10-16T19:18:57.453Z | 2026-10-16T19:40:13.402Z | |
| cve-2026-59963 | Tandoor Recipes: Private recipe file and share-link au… |
TandoorRecipes |
recipes |
2026-10-16T19:17:25.148Z | 2026-10-16T21:16:08.364Z | |
| cve-2026-17068 | 5.4 (v3.1) | IBM i is Affected By Improper Authorization and Access… |
IBM |
i |
2026-10-16T18:39:45.465Z | 2026-10-16T21:16:16.013Z |
| cve-2026-17073 | 5.4 (v3.1) | IBM i is Affected By Improper Authorization and Access… |
IBM |
i |
2026-10-16T18:39:33.190Z | 2026-10-21T21:25:39.003Z |
| cve-2026-17275 | 3.7 (v3.1) | IBM i is Affected by an Improper Validation Vulnerability |
IBM |
i |
2026-10-16T18:39:21.610Z | 2026-10-16T19:09:21.358Z |
| cve-2026-17488 | 4.3 (v3.1) | IBM i is Affected By An Improper Authentication Vulner… |
IBM |
i |
2026-10-16T18:38:13.974Z | 2026-10-19T14:53:56.464Z |
| cve-2026-17491 | 5.4 (v3.1) | IBM i is Affected By An Improper Privilege Management … |
IBM |
i |
2026-10-16T18:38:02.880Z | 2026-10-19T14:23:45.270Z |
| cve-2026-102917 | 7.8 (v3.1) | IBM i is Affected By An Improper Privilege Management … |
IBM |
i |
2026-10-16T18:37:54.693Z | 2026-10-20T13:05:49.605Z |
| cve-2026-111793 | 4.3 (v3.1) | Openwave Webtop Media Transcoder does not enforce… |
Openwave Messaging (Ireland) Limited |
Webtop Media Transcoder |
2026-10-16T18:28:10.170Z | 2026-10-19T15:27:38.728Z |
| cve-2026-85977 | 5.3 (v3.1) | Libtirpc: libtirpc: denial of service via unbounded me… |
Red Hat |
Red Hat Hardened Images |
2026-10-16T18:20:43.454Z | 2026-10-19T14:21:52.857Z |
| cve-2026-85231 | 6.5 (v3.1) | Libtirpc: libtirpc: denial of service via unbounded me… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T18:20:40.761Z | 2026-10-30T07:21:52.547Z |
| cve-2026-107674 | 5.1 (v3.1) | IBM i is Affected by a Denial of Service in Digital Ce… |
IBM |
i |
2026-10-16T18:00:59.693Z | 2026-10-19T14:55:31.510Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-275 | Multiples vulnérabilités dans Apple iTunes | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-274 | Multiples vulnérabilités dans Apple Quicktime | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-273 | Multiples vulnérabilités dans Apple OSX | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-272 | Multiples vulnérabilités dans Apple iOS | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-271 | Multiples vulnérabilités dans Apple Mac EFI | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-270 | Vulnérabilité dans Schneider SCADA SAGE Remote Terminal Units | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-269 | Vulnérabilité dans le noyau Linux de Fedora | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-268 | Multiples vulnérabilités dans les produits Citrix Netscaler | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-267 | Vulnérabilité dans le module de communication Siemens Climatix BACnet/IP | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-266 | Multiples vulnérabilités dans les produits Cisco | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-265 | Multiples vulnérabilités dans PHP | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-264 | Vulnérabilité dans GnuTLS | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-263 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-262 | Vulnérabilité dans Adobe Flash Player | 2015-06-23T00:00:00.000000 | 2015-06-23T00:00:00.000000 |
| certfr-2015-avi-261 | Multiples vulnérabilités dans le noyau Linux Debian | 2015-06-22T00:00:00.000000 | 2015-06-22T00:00:00.000000 |
| certfr-2015-avi-260 | Multiples vulnérabilités dans Drupal | 2015-06-18T00:00:00.000000 | 2015-06-18T00:00:00.000000 |
| certfr-2015-avi-259 | Multiples vulnérabilités dans les produits BlueCoat | 2015-06-17T00:00:00.000000 | 2015-06-17T00:00:00.000000 |
| certfr-2015-avi-258 | Vulnérabilité dans Huawei E5756s | 2015-06-16T00:00:00.000000 | 2015-06-16T00:00:00.000000 |
| certfr-2015-avi-257 | Multiples vulnérabilités dans OpenSSL | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-256 | Vulnérabilité dans Cisco IOS XR | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-255 | Multiples vulnérabilités dans Citrix XenServer | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-254 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-06-11T00:00:00.000000 | 2015-06-11T00:00:00.000000 |
| certfr-2015-avi-253 | Multiples vulnérabilités dans Adobe Flash Player | 2015-06-11T00:00:00.000000 | 2015-06-11T00:00:00.000000 |
| certfr-2015-avi-252 | Vulnérabilité dans QEMU | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-251 | Multiples vulnérabilités dans Microsoft Exchange Server | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-250 | Vulnérabilité dans le noyau de Microsoft Windows | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-249 | Vulnérabilité dans Microsoft Active Directory Federation Services | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-248 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-247 | Vulnérabilité dans Microsoft Common Controls | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-246 | Multiples vulnérabilités dans Microsoft Office | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |