Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109838 | 5.1 (v3.1) | IBM Db2 Genius Hub Improper verification of cryptograp… |
IBM |
Db2 Genius Hub |
2026-10-16T17:44:26.027Z | 2026-10-16T19:11:28.518Z |
| cve-2026-89098 | 5.5 (v3.1) | Nfs-utils: nfs-utils: denial of service via assertion … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T17:43:21.720Z | 2026-10-19T14:19:34.274Z |
| cve-2026-111723 | 8.7 (v4.0) 8.8 (v3.1) | LingGuo-Drama through commit 8a6924a Broken Access Con… |
LingGuoAI |
LingGuo-Drama |
2026-10-16T17:40:09.757Z | 2026-10-20T15:10:52.945Z |
| cve-2026-111722 | 8.6 (v4.0) 8.1 (v3.1) | LingGuo-Drama through commit 8a6924a IDOR via /admin/v… |
LingGuoAI |
LingGuo-Drama |
2026-10-16T17:40:09.064Z | 2026-10-16T18:17:12.430Z |
| cve-2026-111721 | 5.3 (v4.0) 5.4 (v3.1) | Open WES through 1.0.0 Broken Access Control via Globa… |
jingsewu |
open-wes |
2026-10-16T17:40:08.350Z | 2026-10-16T21:16:25.789Z |
| cve-2026-111720 | 6.9 (v4.0) 5.3 (v3.1) | fish-island-backend through commit 7c61b78 SSRF via /a… |
lhccong |
fish-island-backend |
2026-10-16T17:40:07.659Z | 2026-10-19T14:13:29.044Z |
| cve-2026-111719 | 8.2 (v4.0) 5.9 (v3.1) | Roncoo-pay through commit 9428382 Information Disclosu… |
roncoo |
roncoo-pay |
2026-10-16T17:40:06.967Z | 2026-10-21T21:25:01.722Z |
| cve-2026-111718 | 7.1 (v4.0) 6.5 (v3.1) | AipexBase through commit 690adb9 SQL Injection via /ap… |
kuafuai |
aipexbase |
2026-10-16T17:40:06.267Z | 2026-10-16T19:56:23.952Z |
| cve-2026-111717 | 5.3 (v4.0) 4.3 (v3.1) | Arkon through 0.9.2 Missing Authorization via Skills V… |
nduckmink |
arkon |
2026-10-16T17:40:05.568Z | 2026-10-16T18:18:24.044Z |
| cve-2026-111716 | 5.3 (v4.0) 5.4 (v3.1) | Arkon through 0.9.2 Broken Access Control via Sources … |
nduckmink |
arkon |
2026-10-16T17:40:04.869Z | 2026-10-16T21:16:33.552Z |
| cve-2026-111715 | 5.3 (v4.0) 4.3 (v3.1) | Arkon through 0.9.2 Missing Authorization via Wiki Gra… |
nduckmink |
arkon |
2026-10-16T17:40:04.155Z | 2026-10-19T14:08:21.621Z |
| cve-2026-111714 | 2.3 (v4.0) 3.1 (v3.1) | tarteaucitron.js before 1.37.0 ReDoS via Unescaped Coo… |
AmauriC |
tarteaucitron.js |
2026-10-16T17:40:03.460Z | 2026-10-21T21:23:25.025Z |
| cve-2026-111713 | 5.1 (v4.0) 5.4 (v3.1) | tarteaucitron.js before 1.37.0 XSS via getElemAttr Att… |
AmauriC |
tarteaucitron.js |
2026-10-16T17:40:02.702Z | 2026-10-20T15:07:35.987Z |
| cve-2026-111712 | 6.9 (v4.0) 6.5 (v3.1) | Netcore NR256CN through 1.5.140116 Authentication Bypa… |
Netcore |
NR256CN |
2026-10-16T17:40:02.008Z | 2026-10-16T18:19:03.901Z |
| cve-2026-111711 | 9.3 (v4.0) 9.8 (v3.1) | Netcore NR256CN through 1.5.140116 Pre-Auth Stack Over… |
Netcore |
NR256CN |
2026-10-16T17:40:01.282Z | 2026-10-16T21:16:42.070Z |
| cve-2026-111710 | 8.7 (v4.0) 7.5 (v3.1) | Netcore NR256CN through 1.5.140116 Boa Web Server NULL… |
Netcore |
NR256CN |
2026-10-16T17:40:00.612Z | 2026-10-19T14:03:41.974Z |
| cve-2026-111709 | 5.3 (v4.0) 5.4 (v3.1) | WhaTicket Community through commit cf04795 IDOR via /t… |
canove |
whaticket-community |
2026-10-16T17:39:59.914Z | 2026-10-21T21:20:01.674Z |
| cve-2026-111708 | 9.3 (v4.0) 9.8 (v3.1) | WhaTicket Community through commit cf04795 Admin Self-… |
canove |
whaticket-community |
2026-10-16T17:39:59.242Z | 2026-10-16T19:45:36.979Z |
| cve-2026-111707 | 6.9 (v4.0) 5.3 (v3.1) | 99AI through 4.3.0 IDOR via /api/chatLog/querySingleCh… |
vastxie |
99AI |
2026-10-16T17:39:58.546Z | 2026-10-16T18:20:01.823Z |
| cve-2026-111706 | 8.7 (v4.0) 7.5 (v3.1) | 99AI through 4.3.0 Unauthenticated Information Disclos… |
vastxie |
99AI |
2026-10-16T17:39:57.886Z | 2026-10-16T21:16:51.203Z |
| cve-2026-111705 | 5.3 (v4.0) 4.3 (v3.1) | Fuint through commit 57ec018 IDOR via bookId in myBookDetail |
fushengqian |
fuint |
2026-10-16T17:39:57.175Z | 2026-10-19T13:43:38.931Z |
| cve-2026-111704 | 9.3 (v4.0) 9.8 (v3.1) | LangChat through commit 2a6285a Missing Authentication… |
LangChat |
langchat |
2026-10-16T17:39:56.489Z | 2026-10-21T21:18:21.966Z |
| cve-2026-111703 | 5.3 (v4.0) 6.3 (v3.1) | yshop-crm through 2.1.3 IDOR via CRM customer by-id en… |
guchengwuyue |
yshop-crm |
2026-10-16T17:39:55.802Z | 2026-10-16T19:51:05.638Z |
| cve-2026-111702 | 8.7 (v4.0) 7.5 (v3.1) | ChatOllama through commit 96c3ce5 IDOR Exposes Private… |
sugarforever |
chat-ollama |
2026-10-16T17:39:55.104Z | 2026-10-16T18:23:17.690Z |
| cve-2026-81452 | 7 (v3.1) | Dell Alienware Command Center (AWCC), versions pr… |
Dell |
Alienware Command Center (AWCC) |
2026-10-16T17:39:55.070Z | 2026-10-20T13:05:49.759Z |
| cve-2026-111701 | 8.3 (v4.0) 7 (v3.1) | OtterMind Nubase through 0.1.4 Missing Authentication … |
OtterMind |
Nubase |
2026-10-16T17:39:54.414Z | 2026-10-16T21:16:58.942Z |
| cve-2026-111700 | 7.1 (v4.0) 7.1 (v3.1) | WebVella ERP through 1.8.8 SQL Injection via EQL Query API |
WebVella |
WebVella-ERP |
2026-10-16T17:39:53.721Z | 2026-10-19T13:40:04.709Z |
| cve-2026-111699 | 6.3 (v4.0) 4.8 (v3.1) | Niefy wx-api through 0.8.2 Authentication Bypass via U… |
niefy |
wx-api |
2026-10-16T17:39:53.049Z | 2026-10-21T21:13:48.951Z |
| cve-2026-111698 | 7.1 (v4.0) 6.5 (v3.1) | HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Cred… |
roinli |
HUIZHI-ChargeOS-cloud |
2026-10-16T17:39:52.360Z | 2026-10-16T19:41:02.118Z |
| cve-2026-111697 | 7.1 (v4.0) 6.5 (v3.1) | HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Me… |
roinli |
HUIZHI-ChargeOS-cloud |
2026-10-16T17:39:51.674Z | 2026-10-16T18:15:00.443Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-245 | Vulnérabilité dans Microsoft Windows Media Player | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-244 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-243 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-06-09T00:00:00.000000 | 2015-06-09T00:00:00.000000 |
| certfr-2015-avi-242 | Multiples vulnérabilités dans Xen | 2015-06-03T00:00:00.000000 | 2015-06-03T00:00:00.000000 |
| certfr-2015-avi-241 | Multiples vulnérabilités dans Blue Coat SSL Visibility | 2015-06-02T00:00:00.000000 | 2015-06-02T00:00:00.000000 |
| certfr-2015-avi-240 | Vulnérabilité dans le produit SCADA Schneider OPC Factory Server | 2015-06-01T00:00:00.000000 | 2015-06-01T00:00:00.000000 |
| certfr-2015-avi-239 | Multiples vulnérabilités dans PostgreSQL | 2015-05-29T00:00:00.000000 | 2015-05-29T00:00:00.000000 |
| certfr-2015-avi-238 | Vulnérabilité dans le noyau Linux Red Hat | 2015-05-28T00:00:00.000000 | 2015-05-28T00:00:00.000000 |
| certfr-2015-avi-237 | Vulnérabilité dans le noyau Linux Ubuntu | 2015-05-26T00:00:00.000000 | 2015-05-26T00:00:00.000000 |
| certfr-2015-avi-236 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-235 | Vulnérabilité dans ProFTPd | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-234 | Multiples vulnérabilités dans PHP | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-233 | Multiples vulnérabilités dans Google Chrome | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-232 | Vulnérabilité dans BlueCoat XOS | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-231 | Vulnérabilité dans les produits Oracle | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-230 | Multiples vulnérabilités dans les systèmes SCADA Schneider | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-229 | Multiples vulnérabilités dans les systèmes SCADA OSISoft | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-228 | Multiples vulnérabilités dans Moodle | 2015-05-18T00:00:00.000000 | 2015-05-18T00:00:00.000000 |
| certfr-2015-avi-227 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-226 | Multiples vulnérabilités dans PHPMyAdmin | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-225 | Multiples vulnérabilités dans les produits Cisco | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-224 | Vulnérabilité dans Xen | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-223 | Multiples vulnérabilités dans Wireshark | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-222 | Multiples vulnérabilités dans Adobe Flash Player | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-221 | Multiples vulnérabilités dans les produits Mozilla | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-220 | Vulnérabilité dans la bibliothèque Schannel de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-219 | Vulnérabilité dans la console de gestion de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-218 | Multiples vulnérabilités dans les composants JScript et VBscript de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-217 | Vulnérabilité dans le noyau de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-216 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |