Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107238 | A vulnerability allowing an authenticated domain … |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.666Z | 2026-10-30T17:02:59.654Z | |
| cve-2026-104368 | Export and Import Users and Customers <= 2.7.5 - Authe… |
webtoffee |
Export and Import Users and Customers |
2026-10-30T04:32:43.217Z | 2026-10-30T17:02:26.821Z | |
| cve-2026-118698 | JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL… |
beardev |
JoomSport – for Sports: Team & League, Football, Hockey & more |
2026-10-30T05:35:50.977Z | 2026-10-30T17:02:00.463Z | |
| cve-2026-116622 | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Sit… |
wpscripts |
Food Store – Online Food Delivery & Pickup |
2026-10-30T06:47:31.812Z | 2026-10-30T17:01:37.301Z | |
| cve-2026-78334 | Apache bRPC: Missing Authentication for Streaming RPC Frames |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:54:24.478Z | 2026-10-30T17:01:12.646Z | |
| cve-2026-118475 | 3.6 (v3.1) | Eog: eye of gnome: buffer overrun when parsing malicio… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-30T01:24:43.195Z | 2026-10-30T17:00:01.226Z |
| cve-2026-61803 | Frappe LMS: Client-controlled price allows paid-course… |
frappe |
lms |
2026-10-30T16:50:08.737Z | 2026-10-30T16:59:19.940Z | |
| cve-2026-78066 | Apache bRPC: Resource Exhaustion via Unbounded Decompr… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:53:42.058Z | 2026-10-30T16:59:10.006Z | |
| cve-2026-82104 | 9.4 (v4.0) | API permission bypass via logic bug |
Teltonika Networks |
RUT |
2026-10-30T08:01:55.034Z | 2026-10-30T16:57:57.063Z |
| cve-2026-59386 | 6.5 (v3.1) | Credential exposure to space supporter |
Cloud Foundry |
Cloud Foundry Controller (CAPI) |
2026-10-30T08:35:20.435Z | 2026-10-30T16:56:57.050Z |
| cve-2026-59388 | 6.5 (v3.1) | Cloud Controller exposes secrets in audit log |
Cloud Foundry Foundation |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:40:39.058Z | 2026-10-30T16:56:09.310Z |
| cve-2026-59385 | 2.7 (v3.1) | Space Developer can extract space-scoped broker credentials |
Cloud Foundry |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:44:45.681Z | 2026-10-30T16:55:29.935Z |
| cve-2026-78058 | Apache bRPC: Unbounded Resource Consumption and Crash … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:52:57.984Z | 2026-10-30T16:55:00.165Z | |
| cve-2026-119299 | gopacket: SCTP chunk sub-decoder out-of-bounds panics … |
gopacket |
gopacket |
2026-10-30T16:23:51.655Z | 2026-10-30T16:54:01.623Z | |
| cve-2026-109821 | 6.3 (v4.0) | Unbounded port parsing in URI.parse/1 enables CPU exha… |
elixir-lang |
elixir |
2026-10-30T08:54:07.752Z | 2026-10-30T16:52:43.052Z |
| cve-2026-115274 | 6.9 (v4.0) | Unbounded integer parsing in JSON.decode/1 enables CPU… |
elixir-lang |
elixir |
2026-10-30T08:57:16.847Z | 2026-10-30T16:51:45.396Z |
| cve-2024-7557 | 8.8 (v3.1) | Odh-dashboard: odh-model-controller: cross-model authe… |
|
|
2024-08-08T21:33:14.505Z | 2026-10-30T16:50:57.000Z |
| cve-2026-97209 | 5.4 (v4.0) | Insecure temporary file in mix deps.partition lets a l… |
elixir-lang |
elixir |
2026-10-30T08:59:17.615Z | 2026-10-30T16:50:46.465Z |
| cve-2026-78048 | Apache bRPC: Remote Denial of Service via Out-of-Bound… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:51:58.752Z | 2026-10-30T16:49:25.386Z | |
| cve-2026-14467 | 8.2 (v4.0) | Display of information in the Forocoches comments editor |
Forocoches |
Forocoches comments editor |
2026-10-30T09:52:32.373Z | 2026-10-30T16:49:11.234Z |
| cve-2026-55551 | ZAC: Missing per-zaaktype authorization on by-ID decis… |
infonl |
dimpact-zaakafhandelcomponent |
2026-10-30T16:48:51.352Z | 2026-10-30T16:48:51.352Z | |
| cve-2026-85268 | 8.7 (v4.0) | Cross-Site Scripting (XSS) in Firebase Auth Handler vi… |
Google Cloud |
Identity Platform and Firebase Authentication |
2026-10-30T10:20:06.249Z | 2026-10-30T16:48:22.519Z |
| cve-2026-74758 | Apache bRPC: Heap Use-After-Free in RTMP Abort Message… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:48:23.883Z | 2026-10-30T16:47:23.207Z | |
| cve-2026-77884 | 7.1 (v4.0) | Gallery - Private Photo Vault 1.0.41 - Unauthenticated… |
Brain Trust |
Gallery - Private Photo Vault |
2026-09-14T18:02:16.329Z | 2026-10-30T16:43:09.535Z |
| cve-2026-87095 | 9.1 (v3.0) | Sensitive information disclosure and manipulation… |
Acronis |
Acronis Cyber Infrastructure |
2026-10-21T10:14:03.375Z | 2026-10-30T16:41:25.736Z |
| cve-2026-87941 | N/A | Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 |
Drupal |
Patreon |
2026-10-22T01:22:01.192Z | 2026-10-30T16:40:44.058Z |
| cve-2026-119466 | 5.4 (v3.1) | WordPress APIExperts Square for WooCommerce plugin <= … |
WPExperts |
APIExperts Square for WooCommerce |
2026-10-30T16:16:28.198Z | 2026-10-30T16:39:18.607Z |
| cve-2026-119290 | Zuke: Resolved secret() values are written to GITHUB_S… |
zuke-build |
zuke |
2026-10-30T15:50:46.959Z | 2026-10-30T16:38:54.900Z | |
| cve-2012-5562 | 8.6 (v3.1) | Rhn-proxy: rhn-satellite: rhn-proxy: information discl… |
Red Hat |
Red Hat Satellite Proxy v 5.6 |
2019-12-02T18:12:41.000Z | 2026-10-30T16:38:15.122Z |
| cve-2026-119414 | 5.3 (v4.0) 4.3 (v3.1) | Bitwarden Server before 2026.10.1 Authorization Bypass… |
bitwarden |
server |
2026-10-30T11:30:47.330Z | 2026-10-30T16:37:45.394Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-215 | Vulnérabilité dans le gestionnaire de contrôle des services de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-214 | Vulnérabilité dans Microsoft Silverlight | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-213 | Multiples vulnérabilités dans Microsoft .NET | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-212 | Vulnérabilité dans Microsoft SharePoint Server | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-211 | Multiples vulnérabilités dans Microsoft Office | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-210 | Multiples vulnérabilités dans Microsoft Windows Journal | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-209 | Multiples vulnérabilités dans les pilotes de police de Microsoft Windows | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-208 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-05-13T00:00:00.000000 | 2015-05-13T00:00:00.000000 |
| certfr-2015-avi-207 | Multiples vulnérabilités dans WordPress | 2015-05-11T00:00:00.000000 | 2015-05-11T00:00:00.000000 |
| certfr-2015-avi-206 | Multiples vulnérabilités dans Apple Safari | 2015-05-07T00:00:00.000000 | 2015-05-07T00:00:00.000000 |
| certfr-2015-avi-205 | Vulnérabilité dans Cisco UCS Central Software | 2015-05-07T00:00:00.000000 | 2015-05-07T00:00:00.000000 |
| certfr-2015-avi-204 | Multiples vulnérabilités dans Apache Tomcat | 2015-05-06T00:00:00.000000 | 2015-05-06T00:00:00.000000 |
| certfr-2015-avi-203 | Vulnérabilité dans Citrix NetScaler | 2015-05-06T00:00:00.000000 | 2015-05-06T00:00:00.000000 |
| certfr-2015-avi-202 | Multiples vulnérabilités dans les produits Citrix | 2015-05-05T00:00:00.000000 | 2015-05-05T00:00:00.000000 |
| certfr-2015-avi-201 | Vulnérabilité dans IBM DB2 Connect | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-200 | Vulnérabilité dans Squid | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-199 | Multiples vulnérabilités dans ClamAV | 2015-05-04T00:00:00.000000 | 2015-05-04T00:00:00.000000 |
| certfr-2015-avi-198 | Multiples vulnérabilités dans le noyau Linux | 2015-04-30T00:00:00.000000 | 2015-04-30T00:00:00.000000 |
| certfr-2015-avi-197 | Vulnérabilité dans Huawei E587 Mobile WiFi | 2015-04-30T00:00:00.000000 | 2015-04-30T00:00:00.000000 |
| certfr-2015-avi-196 | Vulnérabilité dans Cisco IOS XE Software | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-195 | Multiples vulnérabilités dans Google Chrome | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-194 | Vulnérabilité dans IBM Websphere | 2015-04-29T00:00:00.000000 | 2015-04-29T00:00:00.000000 |
| certfr-2015-avi-193 | Vulnérabilité dans WordPress | 2015-04-28T00:00:00.000000 | 2015-04-28T00:00:00.000000 |
| certfr-2015-avi-192 | Vulnérabilité dans OpenOffice | 2015-04-27T00:00:00.000000 | 2015-04-27T00:00:00.000000 |
| certfr-2015-avi-191 | Vulnérabilité dans IBM Storwize | 2015-04-27T00:00:00.000000 | 2015-04-27T00:00:00.000000 |
| certfr-2015-avi-190 | Vulnérabilité dans le noyau Linux Red Hat | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-189 | Multiples vulnérabilités dans le noyau Linux Red Hat | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-188 | Multiples vulnérabilités dans Wordpress | 2015-04-23T00:00:00.000000 | 2015-04-23T00:00:00.000000 |
| certfr-2015-avi-187 | Multiples vulnérabilités dans PHP | 2015-04-21T00:00:00.000000 | 2015-04-21T00:00:00.000000 |
| certfr-2015-avi-186 | Vulnérabilité dans Mozilla Firefox | 2015-04-21T00:00:00.000000 | 2015-04-21T00:00:00.000000 |