Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-119203 | pypdf: Possible infinite loop when hitting EOF in stan… |
py-pdf |
pypdf |
2026-10-29T20:30:13.426Z | 2026-10-30T17:11:01.881Z | |
| cve-2026-93289 | 9 (v4.0) 7.5 (v3.1) | OS command injection in Eufy Omni C20, Omni X10 Pro |
Eufy |
Omni C20 |
2026-09-24T19:24:40.244Z | 2026-10-30T17:10:40.924Z |
| cve-2026-119280 | MariaDB Connector/J : XA recover() trusted server-supp… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:55:50.101Z | 2026-10-30T17:10:10.174Z | |
| cve-2024-4989 | 5.4 (v3.1) | Open Redirection via Callback URL in WSO2 API Manager … |
WSO2 |
WSO2 API Manager |
2026-10-21T13:41:06.765Z | 2026-10-30T17:09:39.922Z |
| cve-2026-13303 | 8.7 (v3.1) | Boundary vulnerable to server-side request forgery in … |
HashiCorp |
Boundary |
2026-10-29T21:03:41.322Z | 2026-10-30T17:08:58.961Z |
| cve-2026-119283 | joserfc: Unbounded JWE General JSON `recipients` Array… |
authlib |
joserfc |
2026-10-29T21:10:05.490Z | 2026-10-30T17:08:26.483Z | |
| cve-2026-115642 | 8.3 (v3.1) | In OpenStack keystonemiddleware before 13.0.2, by… |
OpenStack |
keystonemiddleware |
2026-10-30T16:23:23.404Z | 2026-10-30T17:07:49.860Z |
| cve-2026-119317 | 6.5 (v3.1) 6 (v4.0) | Incorrect Authorization |
Tenable, Inc. |
Plugin Feed |
2026-10-29T21:13:04.494Z | 2026-10-30T17:07:23.004Z |
| cve-2026-118238 | N/A | CVE-2026-118238 |
Tenda |
W18E |
2026-10-30T15:08:41.752Z | 2026-10-30T17:07:06.917Z |
| cve-2024-5139 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint in Mu… |
WSO2 |
WSO2 Enterprise Integrator |
2026-10-21T13:36:49.246Z | 2026-10-30T17:06:32.391Z |
| cve-2026-61671 | WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUES… |
LabRedesCefetRJ |
WeGIA |
2026-10-29T21:21:02.485Z | 2026-10-30T17:06:30.196Z | |
| cve-2026-86249 | Apache bRPC: Authentication bypass when a server sets … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T12:17:42.903Z | 2026-10-30T17:05:52.803Z | |
| cve-2026-119284 | joserfc: Compact JWS size guard allocates attacker-con… |
authlib |
joserfc |
2026-10-29T21:33:16.529Z | 2026-10-30T17:05:38.184Z | |
| cve-2026-61804 | myTinyWMS has Stored Cross-Site Scripting (XSS) in Pro… |
myTinyWMS |
myTinyWMS |
2026-10-30T17:04:33.294Z | 2026-10-30T17:04:33.294Z | |
| cve-2023-22793 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.594Z | 2026-10-30T17:04:18.232Z | |
| cve-2026-79704 | Apache bRPC: Out-of-bounds Read in Multi-stream RPC Re… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:56:20.309Z | 2026-10-30T17:03:38.510Z | |
| cve-2026-107239 | A vulnerability allowing a member of the Veeam Vi… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.649Z | 2026-10-30T17:03:28.384Z | |
| cve-2026-107238 | A vulnerability allowing an authenticated domain … |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.666Z | 2026-10-30T17:02:59.654Z | |
| cve-2026-104368 | Export and Import Users and Customers <= 2.7.5 - Authe… |
webtoffee |
Export and Import Users and Customers |
2026-10-30T04:32:43.217Z | 2026-10-30T17:02:26.821Z | |
| cve-2026-118698 | JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL… |
beardev |
JoomSport – for Sports: Team & League, Football, Hockey & more |
2026-10-30T05:35:50.977Z | 2026-10-30T17:02:00.463Z | |
| cve-2026-116622 | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Sit… |
wpscripts |
Food Store – Online Food Delivery & Pickup |
2026-10-30T06:47:31.812Z | 2026-10-30T17:01:37.301Z | |
| cve-2026-78334 | Apache bRPC: Missing Authentication for Streaming RPC Frames |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:54:24.478Z | 2026-10-30T17:01:12.646Z | |
| cve-2026-118475 | 3.6 (v3.1) | Eog: eye of gnome: buffer overrun when parsing malicio… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-30T01:24:43.195Z | 2026-10-30T17:00:01.226Z |
| cve-2026-61803 | Frappe LMS: Client-controlled price allows paid-course… |
frappe |
lms |
2026-10-30T16:50:08.737Z | 2026-10-30T16:59:19.940Z | |
| cve-2026-78066 | Apache bRPC: Resource Exhaustion via Unbounded Decompr… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:53:42.058Z | 2026-10-30T16:59:10.006Z | |
| cve-2026-82104 | 9.4 (v4.0) | API permission bypass via logic bug |
Teltonika Networks |
RUT |
2026-10-30T08:01:55.034Z | 2026-10-30T16:57:57.063Z |
| cve-2026-59386 | 6.5 (v3.1) | Credential exposure to space supporter |
Cloud Foundry |
Cloud Foundry Controller (CAPI) |
2026-10-30T08:35:20.435Z | 2026-10-30T16:56:57.050Z |
| cve-2026-59388 | 6.5 (v3.1) | Cloud Controller exposes secrets in audit log |
Cloud Foundry Foundation |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:40:39.058Z | 2026-10-30T16:56:09.310Z |
| cve-2026-59385 | 2.7 (v3.1) | Space Developer can extract space-scoped broker credentials |
Cloud Foundry |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:44:45.681Z | 2026-10-30T16:55:29.935Z |
| cve-2026-78058 | Apache bRPC: Unbounded Resource Consumption and Crash … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:52:57.984Z | 2026-10-30T16:55:00.165Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-275 | Multiples vulnérabilités dans Apple iTunes | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-274 | Multiples vulnérabilités dans Apple Quicktime | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-273 | Multiples vulnérabilités dans Apple OSX | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-272 | Multiples vulnérabilités dans Apple iOS | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-271 | Multiples vulnérabilités dans Apple Mac EFI | 2015-07-01T00:00:00.000000 | 2015-07-01T00:00:00.000000 |
| certfr-2015-avi-270 | Vulnérabilité dans Schneider SCADA SAGE Remote Terminal Units | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-269 | Vulnérabilité dans le noyau Linux de Fedora | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-268 | Multiples vulnérabilités dans les produits Citrix Netscaler | 2015-06-30T00:00:00.000000 | 2015-06-30T00:00:00.000000 |
| certfr-2015-avi-267 | Vulnérabilité dans le module de communication Siemens Climatix BACnet/IP | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-266 | Multiples vulnérabilités dans les produits Cisco | 2015-06-26T00:00:00.000000 | 2015-06-26T00:00:00.000000 |
| certfr-2015-avi-265 | Multiples vulnérabilités dans PHP | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-264 | Vulnérabilité dans GnuTLS | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-263 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-06-24T00:00:00.000000 | 2015-06-24T00:00:00.000000 |
| certfr-2015-avi-262 | Vulnérabilité dans Adobe Flash Player | 2015-06-23T00:00:00.000000 | 2015-06-23T00:00:00.000000 |
| certfr-2015-avi-261 | Multiples vulnérabilités dans le noyau Linux Debian | 2015-06-22T00:00:00.000000 | 2015-06-22T00:00:00.000000 |
| certfr-2015-avi-260 | Multiples vulnérabilités dans Drupal | 2015-06-18T00:00:00.000000 | 2015-06-18T00:00:00.000000 |
| certfr-2015-avi-259 | Multiples vulnérabilités dans les produits BlueCoat | 2015-06-17T00:00:00.000000 | 2015-06-17T00:00:00.000000 |
| certfr-2015-avi-258 | Vulnérabilité dans Huawei E5756s | 2015-06-16T00:00:00.000000 | 2015-06-16T00:00:00.000000 |
| certfr-2015-avi-257 | Multiples vulnérabilités dans OpenSSL | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-256 | Vulnérabilité dans Cisco IOS XR | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-255 | Multiples vulnérabilités dans Citrix XenServer | 2015-06-12T00:00:00.000000 | 2015-06-12T00:00:00.000000 |
| certfr-2015-avi-254 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-06-11T00:00:00.000000 | 2015-06-11T00:00:00.000000 |
| certfr-2015-avi-253 | Multiples vulnérabilités dans Adobe Flash Player | 2015-06-11T00:00:00.000000 | 2015-06-11T00:00:00.000000 |
| certfr-2015-avi-252 | Vulnérabilité dans QEMU | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-251 | Multiples vulnérabilités dans Microsoft Exchange Server | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-250 | Vulnérabilité dans le noyau de Microsoft Windows | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-249 | Vulnérabilité dans Microsoft Active Directory Federation Services | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-248 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-247 | Vulnérabilité dans Microsoft Common Controls | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-246 | Multiples vulnérabilités dans Microsoft Office | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |