Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111696 | 7.1 (v4.0) 6.5 (v3.1) | data-platform-open through commit efeacd3 Hardcoded AE… |
shaiwz |
data-platform-open |
2026-10-16T17:39:50.964Z | 2026-10-16T21:17:09.657Z |
| cve-2026-111695 | 7.1 (v4.0) 7.1 (v3.1) | Shaiwz data-platform-open through commit efeacd3 IDOR … |
shaiwz |
data-platform-open |
2026-10-16T17:39:50.272Z | 2026-10-19T13:36:34.574Z |
| cve-2026-111694 | 6.9 (v4.0) 5.3 (v3.1) | qKnow through 2.4.3 Missing Authentication via /flyflo… |
qiantongtech |
qKnow |
2026-10-16T17:39:49.601Z | 2026-10-21T21:12:49.599Z |
| cve-2026-111693 | 9.3 (v4.0) 9.8 (v3.1) | DataBuff ai-apm-web through 0.1.10 Hard-Coded Default … |
databufflabs |
databuff |
2026-10-16T17:39:48.920Z | 2026-10-23T13:57:59.704Z |
| cve-2026-111692 | 9.3 (v4.0) 9.8 (v3.1) | DataBuff ai-apm-web through 0.1.10 Authentication Bypa… |
databufflabs |
databuff |
2026-10-16T17:39:48.239Z | 2026-10-16T19:06:45.355Z |
| cve-2026-111691 | 9.1 (v4.0) 7.4 (v3.1) | WIMOOR through commit ec86736 Authentication Bypass vi… |
wimoor-erp |
wimoor |
2026-10-16T17:39:47.608Z | 2026-10-16T21:17:17.620Z |
| cve-2026-111690 | 9.3 (v4.0) 9.8 (v3.1) | Simple Admin Core through 1.8.7 Hard-Coded JWT Secret … |
suyuan32 |
simple-admin-core |
2026-10-16T17:39:46.960Z | 2026-10-19T13:35:10.955Z |
| cve-2026-111689 | 5.3 (v4.0) 4.3 (v3.1) | XBoot through 3.3.4 Authorization Bypass via getByDepa… |
Exrick |
xboot |
2026-10-16T17:39:46.265Z | 2026-10-21T21:11:19.211Z |
| cve-2026-111688 | 5.3 (v4.0) 4.3 (v3.1) | Exrick XBoot through 3.3.4 Data-Scope Bypass via openD… |
Exrick |
xboot |
2026-10-16T17:39:45.564Z | 2026-10-16T20:16:18.861Z |
| cve-2026-111687 | 9.3 (v4.0) 9.8 (v3.1) | WeRSS (we-mp-rss) through 1.5.3 RCE via template Param… |
rachelos |
we-mp-rss |
2026-10-16T17:39:44.866Z | 2026-10-16T19:05:43.558Z |
| cve-2026-111686 | 8.7 (v4.0) 7.5 (v3.1) | IceCMS through 4.1.5 SQL Injection via /WebArticle/fin… |
Thecosy |
IceCMS |
2026-10-16T17:39:44.117Z | 2026-10-16T21:17:27.385Z |
| cve-2026-111685 | 8.7 (v4.0) 7.5 (v3.1) | IceCMS through 4.1.5 SQL Injection via /WebResource/fi… |
Thecosy |
IceCMS |
2026-10-16T17:39:42.293Z | 2026-10-19T13:32:07.251Z |
| cve-2026-111684 | 7.2 (v4.0) 8.3 (v3.1) | Magistrala through 1.0.0 Cross-Tenant Authorization By… |
absmach |
magistrala |
2026-10-16T17:39:41.598Z | 2026-10-21T21:05:32.356Z |
| cve-2026-111683 | 5.3 (v4.0) 5.4 (v3.1) | Allegro Ralph through 20260902.1 Missing Authorization… |
allegro |
ralph |
2026-10-16T17:39:40.888Z | 2026-10-23T13:59:41.560Z |
| cve-2026-111682 | 7.1 (v4.0) 6.5 (v3.1) | EFAK 5.0.0 through 5.1.0 Missing Authorization via /ap… |
smartloli |
EFAK |
2026-10-16T17:39:40.095Z | 2026-10-16T19:04:04.560Z |
| cve-2026-111681 | 8.7 (v4.0) 8.8 (v3.1) | EFAK through 5.1.0 Privilege Escalation via /api/users… |
smartloli |
EFAK |
2026-10-16T17:39:39.410Z | 2026-10-16T21:17:35.235Z |
| cve-2026-111680 | 7.2 (v4.0) 8.3 (v3.1) | APIPark through 1.9.7-beta Cross-Team Authorization By… |
APIParkLab |
APIPark |
2026-10-16T17:39:38.720Z | 2026-10-19T13:30:28.317Z |
| cve-2026-111679 | 5.3 (v4.0) 5.4 (v3.1) | Ekko Studio through 0.7.36 Missing Authorization via /… |
EKKOLearnAI |
ekko-studio |
2026-10-16T17:39:38.049Z | 2026-10-21T21:02:10.862Z |
| cve-2026-111678 | 4.8 (v4.0) 3.3 (v3.1) | Antiword through 0.37 Stack Out-of-Bounds Read via pro… |
Adri van Os |
antiword |
2026-10-16T17:39:37.367Z | 2026-10-23T14:03:28.591Z |
| cve-2026-111677 | 6.8 (v4.0) 5.5 (v3.1) | Antiword through 0.37 Heap Out-of-Bounds Read via vGet… |
Adri van Os |
antiword |
2026-10-16T17:39:36.663Z | 2026-10-18T12:26:10.819Z |
| cve-2026-111676 | 5.3 (v4.0) 4.3 (v3.1) | Faveo Helpdesk through 2.0.3 Broken Access Control via… |
faveosuite |
faveo-helpdesk |
2026-10-16T17:39:35.960Z | 2026-10-16T21:17:46.687Z |
| cve-2026-111675 | 9.1 (v4.0) 7.4 (v3.1) | Course-tencent-cloud through 2.0.1 Verification Code B… |
xiaochong0302 |
course-tencent-cloud |
2026-10-16T17:39:35.253Z | 2026-10-19T13:27:20.007Z |
| cve-2026-111674 | 5.3 (v4.0) 4.3 (v3.1) | Tbed through 20240319 Missing Authorization via setImg… |
Hello-hao |
Tbed |
2026-10-16T17:39:34.559Z | 2026-10-21T21:01:08.491Z |
| cve-2026-111673 | 9.3 (v4.0) 9.8 (v3.1) | IceCMS through 4.1.5 Missing Authentication via /User … |
Thecosy |
IceCMS |
2026-10-16T17:39:33.876Z | 2026-10-16T19:53:09.859Z |
| cve-2026-111672 | 5.3 (v4.0) 4.3 (v3.1) | Cube-studio through 2026.09.01 IDOR via Pipeline View … |
data-infra |
cube-studio |
2026-10-16T17:39:33.162Z | 2026-10-16T18:27:10.186Z |
| cve-2026-111671 | 7.1 (v4.0) 7.1 (v3.1) | Cube-studio through 2026.09.01 IDOR via Notebook and S… |
data-infra |
cube-studio |
2026-10-16T17:39:32.472Z | 2026-10-16T21:17:54.276Z |
| cve-2026-111670 | 5.3 (v4.0) 4.3 (v3.1) | ClickVisual through 1.1.2 Missing Authorization in api… |
clickvisual |
clickvisual |
2026-10-16T17:39:31.782Z | 2026-10-19T13:25:08.275Z |
| cve-2026-111669 | 7.1 (v4.0) 6.5 (v3.1) | ZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo… |
izhaorui |
Zr.Admin.NET |
2026-10-16T17:39:31.080Z | 2026-10-21T20:59:36.503Z |
| cve-2026-111668 | 5.3 (v4.0) 5.4 (v3.1) | AIHelms through 0.1.25 Missing Authorization in Effici… |
beizhu-1209 |
AIHelms |
2026-10-16T17:39:30.328Z | 2026-10-23T14:07:02.761Z |
| cve-2026-111667 | 5.3 (v4.0) 4.3 (v3.1) | REBUILD through 4.5.0 Missing Authorization via /proje… |
getrebuild |
rebuild |
2026-10-16T17:39:29.644Z | 2026-10-16T18:25:28.071Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-215 | Vulnérabilité dans le gestionnaire de contrôle des services de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-214 | Vulnérabilité dans Microsoft Silverlight | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-213 | Multiples vulnérabilités dans Microsoft .NET | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-212 | Vulnérabilité dans Microsoft SharePoint Server | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-211 | Multiples vulnérabilités dans Microsoft Office | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-210 | Multiples vulnérabilités dans Microsoft Windows Journal | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-209 | Multiples vulnérabilités dans les pilotes de police de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-208 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-207 | Multiples vulnérabilités dans WordPress | 2015-05-11T00:00:00.000000 | 2015-05-11T00:00:00.000000 |
| certfr-2015-avi-206 | Multiples vulnérabilités dans Apple Safari | 2015-05-07T00:00:00.000000 | 2015-05-07T00:00:00.000000 |
| certfr-2015-avi-205 | Vulnérabilité dans Cisco UCS Central Software | 2015-05-07T00:00:00.000000 | 2015-05-07T00:00:00.000000 |
| certfr-2015-avi-204 | Multiples vulnérabilités dans Apache Tomcat | 2015-05-06T00:00:00.000000 | 2015-05-06T00:00:00.000000 |
| certfr-2015-avi-203 | Vulnérabilité dans Citrix NetScaler | 2015-05-06T00:00:00.000000 | 2015-05-06T00:00:00.000000 |
| certfr-2015-avi-202 | Multiples vulnérabilités dans les produits Citrix | 2015-05-05T00:00:00.000000 | 2015-05-05T00:00:00.000000 |
| certfr-2015-avi-201 | Vulnérabilité dans IBM DB2 Connect | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-200 | Vulnérabilité dans Squid | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-199 | Multiples vulnérabilités dans ClamAV | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-198 | Multiples vulnérabilités dans le noyau Linux | 2015-04-30T00:00:00.000000 | 2015-04-30T00:00:00.000000 |
| certfr-2015-avi-197 | Vulnérabilité dans Huawei E587 Mobile WiFi | 2015-04-30T00:00:00.000000 | 2015-04-30T00:00:00.000000 |
| certfr-2015-avi-196 | Vulnérabilité dans Cisco IOS XE Software | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-195 | Multiples vulnérabilités dans Google Chrome | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-194 | Vulnérabilité dans IBM Websphere | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-193 | Vulnérabilité dans WordPress | 2015-04-28T00:00:00.000000 | 2015-04-28T00:00:00.000000 |
| certfr-2015-avi-192 | Vulnérabilité dans OpenOffice | 2015-04-27T00:00:00.000000 | 2015-04-27T00:00:00.000000 |
| certfr-2015-avi-191 | Vulnérabilité dans IBM Storwize | 2015-04-27T00:00:00.000000 | 2015-04-27T00:00:00.000000 |
| certfr-2015-avi-190 | Vulnérabilité dans le noyau Linux Red Hat | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-189 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-188 | Multiples vulnérabilités dans Wordpress | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-187 | Multiples vulnérabilités dans PHP | 2015-04-21T00:00:00.000000 | 2015-04-21T00:00:00.000000 |
| certfr-2015-avi-186 | Vulnérabilité dans Mozilla Firefox | 2015-04-21T00:00:00.000000 | 2015-04-21T00:00:00.000000 |