Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-119203 | pypdf: Possible infinite loop when hitting EOF in stan… |
py-pdf |
pypdf |
2026-10-29T20:30:13.426Z | 2026-10-30T17:11:01.881Z | |
| cve-2026-93289 | 9 (v4.0) 7.5 (v3.1) | OS command injection in Eufy Omni C20, Omni X10 Pro |
Eufy |
Omni C20 |
2026-09-24T19:24:40.244Z | 2026-10-30T17:10:40.924Z |
| cve-2026-119280 | MariaDB Connector/J : XA recover() trusted server-supp… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:55:50.101Z | 2026-10-30T17:10:10.174Z | |
| cve-2024-4989 | 5.4 (v3.1) | Open Redirection via Callback URL in WSO2 API Manager … |
WSO2 |
WSO2 API Manager |
2026-10-21T13:41:06.765Z | 2026-10-30T17:09:39.922Z |
| cve-2026-13303 | 8.7 (v3.1) | Boundary vulnerable to server-side request forgery in … |
HashiCorp |
Boundary |
2026-10-29T21:03:41.322Z | 2026-10-30T17:08:58.961Z |
| cve-2026-119283 | joserfc: Unbounded JWE General JSON `recipients` Array… |
authlib |
joserfc |
2026-10-29T21:10:05.490Z | 2026-10-30T17:08:26.483Z | |
| cve-2026-115642 | 8.3 (v3.1) | In OpenStack keystonemiddleware before 13.0.2, by… |
OpenStack |
keystonemiddleware |
2026-10-30T16:23:23.404Z | 2026-10-30T17:07:49.860Z |
| cve-2026-119317 | 6.5 (v3.1) 6 (v4.0) | Incorrect Authorization |
Tenable, Inc. |
Plugin Feed |
2026-10-29T21:13:04.494Z | 2026-10-30T17:07:23.004Z |
| cve-2026-118238 | N/A | CVE-2026-118238 |
Tenda |
W18E |
2026-10-30T15:08:41.752Z | 2026-10-30T17:07:06.917Z |
| cve-2024-5139 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint in Mu… |
WSO2 |
WSO2 Enterprise Integrator |
2026-10-21T13:36:49.246Z | 2026-10-30T17:06:32.391Z |
| cve-2026-61671 | WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUES… |
LabRedesCefetRJ |
WeGIA |
2026-10-29T21:21:02.485Z | 2026-10-30T17:06:30.196Z | |
| cve-2026-86249 | Apache bRPC: Authentication bypass when a server sets … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T12:17:42.903Z | 2026-10-30T17:05:52.803Z | |
| cve-2026-119284 | joserfc: Compact JWS size guard allocates attacker-con… |
authlib |
joserfc |
2026-10-29T21:33:16.529Z | 2026-10-30T17:05:38.184Z | |
| cve-2026-61804 | myTinyWMS has Stored Cross-Site Scripting (XSS) in Pro… |
myTinyWMS |
myTinyWMS |
2026-10-30T17:04:33.294Z | 2026-10-30T17:04:33.294Z | |
| cve-2023-22793 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.594Z | 2026-10-30T17:04:18.232Z | |
| cve-2026-79704 | Apache bRPC: Out-of-bounds Read in Multi-stream RPC Re… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:56:20.309Z | 2026-10-30T17:03:38.510Z | |
| cve-2026-107239 | A vulnerability allowing a member of the Veeam Vi… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.649Z | 2026-10-30T17:03:28.384Z | |
| cve-2026-107238 | A vulnerability allowing an authenticated domain … |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.666Z | 2026-10-30T17:02:59.654Z | |
| cve-2026-104368 | Export and Import Users and Customers <= 2.7.5 - Authe… |
webtoffee |
Export and Import Users and Customers |
2026-10-30T04:32:43.217Z | 2026-10-30T17:02:26.821Z | |
| cve-2026-118698 | JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL… |
beardev |
JoomSport – for Sports: Team & League, Football, Hockey & more |
2026-10-30T05:35:50.977Z | 2026-10-30T17:02:00.463Z | |
| cve-2026-116622 | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Sit… |
wpscripts |
Food Store – Online Food Delivery & Pickup |
2026-10-30T06:47:31.812Z | 2026-10-30T17:01:37.301Z | |
| cve-2026-78334 | Apache bRPC: Missing Authentication for Streaming RPC Frames |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:54:24.478Z | 2026-10-30T17:01:12.646Z | |
| cve-2026-118475 | 3.6 (v3.1) | Eog: eye of gnome: buffer overrun when parsing malicio… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-30T01:24:43.195Z | 2026-10-30T17:00:01.226Z |
| cve-2026-61803 | Frappe LMS: Client-controlled price allows paid-course… |
frappe |
lms |
2026-10-30T16:50:08.737Z | 2026-10-30T16:59:19.940Z | |
| cve-2026-78066 | Apache bRPC: Resource Exhaustion via Unbounded Decompr… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:53:42.058Z | 2026-10-30T16:59:10.006Z | |
| cve-2026-82104 | 9.4 (v4.0) | API permission bypass via logic bug |
Teltonika Networks |
RUT |
2026-10-30T08:01:55.034Z | 2026-10-30T16:57:57.063Z |
| cve-2026-59386 | 6.5 (v3.1) | Credential exposure to space supporter |
Cloud Foundry |
Cloud Foundry Controller (CAPI) |
2026-10-30T08:35:20.435Z | 2026-10-30T16:56:57.050Z |
| cve-2026-59388 | 6.5 (v3.1) | Cloud Controller exposes secrets in audit log |
Cloud Foundry Foundation |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:40:39.058Z | 2026-10-30T16:56:09.310Z |
| cve-2026-59385 | 2.7 (v3.1) | Space Developer can extract space-scoped broker credentials |
Cloud Foundry |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:44:45.681Z | 2026-10-30T16:55:29.935Z |
| cve-2026-78058 | Apache bRPC: Unbounded Resource Consumption and Crash … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:52:57.984Z | 2026-10-30T16:55:00.165Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-245 | Vulnérabilité dans Microsoft Windows Media Player | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-244 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-06-10T00:00:00.000000 | 2015-06-10T00:00:00.000000 |
| certfr-2015-avi-243 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-06-09T00:00:00.000000 | 2015-06-09T00:00:00.000000 |
| certfr-2015-avi-242 | Multiples vulnérabilités dans Xen | 2015-06-03T00:00:00.000000 | 2015-06-03T00:00:00.000000 |
| certfr-2015-avi-241 | Multiples vulnérabilités dans Blue Coat SSL Visibility | 2015-06-02T00:00:00.000000 | 2015-06-02T00:00:00.000000 |
| certfr-2015-avi-240 | Vulnérabilité dans le produit SCADA Schneider OPC Factory Server | 2015-06-01T00:00:00.000000 | 2015-06-01T00:00:00.000000 |
| certfr-2015-avi-239 | Multiples vulnérabilités dans PostgreSQL | 2015-05-29T00:00:00.000000 | 2015-05-29T00:00:00.000000 |
| certfr-2015-avi-238 | Vulnérabilité dans le noyau Linux Red Hat | 2015-05-28T00:00:00.000000 | 2015-05-28T00:00:00.000000 |
| certfr-2015-avi-237 | Vulnérabilité dans le noyau Linux Ubuntu | 2015-05-26T00:00:00.000000 | 2015-05-26T00:00:00.000000 |
| certfr-2015-avi-236 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-235 | Vulnérabilité dans ProFTPd | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-234 | Multiples vulnérabilités dans PHP | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-233 | Multiples vulnérabilités dans Google Chrome | 2015-05-20T00:00:00.000000 | 2015-05-20T00:00:00.000000 |
| certfr-2015-avi-232 | Vulnérabilité dans BlueCoat XOS | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-231 | Vulnérabilité dans les produits Oracle | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-230 | Multiples vulnérabilités dans les systèmes SCADA Schneider | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-229 | Multiples vulnérabilités dans les systèmes SCADA OSISoft | 2015-05-19T00:00:00.000000 | 2015-05-19T00:00:00.000000 |
| certfr-2015-avi-228 | Multiples vulnérabilités dans Moodle | 2015-05-18T00:00:00.000000 | 2015-05-18T00:00:00.000000 |
| certfr-2015-avi-227 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-226 | Multiples vulnérabilités dans PHPMyAdmin | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-225 | Multiples vulnérabilités dans les produits Cisco | 2015-05-15T00:00:00.000000 | 2015-05-15T00:00:00.000000 |
| certfr-2015-avi-224 | Vulnérabilité dans Xen | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-223 | Multiples vulnérabilités dans Wireshark | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-222 | Multiples vulnérabilités dans Adobe Flash Player | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-221 | Multiples vulnérabilités dans les produits Mozilla | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-220 | Vulnérabilité dans la bibliothèque Schannel de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-219 | Vulnérabilité dans la console de gestion de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-218 | Multiples vulnérabilités dans les composants JScript et VBscript de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-217 | Vulnérabilité dans le noyau de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-216 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |