Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111666 | 5.3 (v4.0) 4.3 (v3.1) | Steedos Platform through 3.0.15-beta.51 Cross-Tenant I… |
steedos |
steedos-platform |
2026-10-16T17:39:28.959Z | 2026-10-16T21:18:06.427Z |
| cve-2026-111665 | 5.3 (v4.0) 5.4 (v3.1) | Piranha CMS through 12.2 Missing Authorization in Mana… |
PiranhaCMS |
Piranha CMS |
2026-10-16T17:39:28.253Z | 2026-10-19T13:23:30.162Z |
| cve-2026-111664 | 4.8 (v4.0) 4.4 (v3.1) | Safing Portmaster before 2.2.5 Unauthenticated Forced … |
safing |
portmaster |
2026-10-16T17:39:27.588Z | 2026-10-21T20:58:29.603Z |
| cve-2026-111663 | 9.2 (v4.0) 8.6 (v3.1) | Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.910Z | 2026-10-23T15:56:17.575Z |
| cve-2026-111662 | 6.9 (v4.0) 5.8 (v3.1) | Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.219Z | 2026-10-16T19:13:57.537Z |
| cve-2026-111661 | 6.9 (v4.0) 5.3 (v3.1) | waynboot-mall through 2.0.0 Missing Authentication via… |
wayn111 |
waynboot-mall |
2026-10-16T17:39:25.521Z | 2026-10-16T21:18:14.959Z |
| cve-2026-111660 | 6.9 (v4.0) 6.5 (v3.1) | waynboot-mall through 2.0.0 Missing Authentication via… |
wayn111 |
waynboot-mall |
2026-10-16T17:39:24.825Z | 2026-10-19T13:22:09.770Z |
| cve-2026-111659 | 6.9 (v4.0) 6.5 (v3.1) | Waynboot-mall through 2.0.0 Unauthenticated Order Forg… |
wayn111 |
waynboot-mall |
2026-10-16T17:39:24.138Z | 2026-10-21T20:56:19.053Z |
| cve-2026-111658 | 5.1 (v4.0) 3.8 (v3.1) | SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio… |
SiteServer |
SSCMS |
2026-10-16T17:39:23.461Z | 2026-10-23T15:58:20.254Z |
| cve-2026-111657 | 5.3 (v4.0) 4.3 (v3.1) | BeikeShop through 2.0.0.31 IDOR via RMA mark_as_shippe… |
beikeshop |
beikeshop |
2026-10-16T17:39:22.798Z | 2026-10-16T19:15:51.541Z |
| cve-2026-111656 | 5.3 (v4.0) 5.4 (v3.1) | ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filt… |
zhimaAi |
chatwiki |
2026-10-16T17:39:22.093Z | 2026-10-16T21:18:25.806Z |
| cve-2026-111655 | 5.1 (v4.0) 3.8 (v3.1) | ThinkAdmin think-plugs-admin through 1.0.81 IDOR via a… |
zoujingli |
think-plugs-admin |
2026-10-16T17:39:21.412Z | 2026-10-19T13:20:25.246Z |
| cve-2026-111654 | 5.3 (v4.0) 6.3 (v3.1) | FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints |
kerwincui |
FastBee |
2026-10-16T17:39:20.715Z | 2026-10-21T20:53:32.854Z |
| cve-2026-111653 | 6.9 (v4.0) 5.3 (v3.1) | 53AIHub through 0.5.3 Missing Authentication via PUT /… |
53AI |
53AIHub |
2026-10-16T17:39:20.030Z | 2026-10-23T16:02:24.828Z |
| cve-2026-111652 | 6.9 (v4.0) 5.3 (v3.1) | Engineercms through 2.0.5 Missing Authorization via At… |
3xxx |
engineercms |
2026-10-16T17:39:19.344Z | 2026-10-16T19:17:31.852Z |
| cve-2026-111651 | 7.1 (v4.0) 6.5 (v3.1) | Risesoft Digital-Infrastructure through 9.6.11 Cross-T… |
risesoft-y9 |
Digital-Infrastructure |
2026-10-16T17:39:18.666Z | 2026-10-16T21:18:33.584Z |
| cve-2026-111650 | 8.8 (v4.0) 8.6 (v3.1) | ChronoFrame through 1.0.0 Missing Authentication via S… |
HoshinoSuzumi |
chronoframe |
2026-10-16T17:39:17.995Z | 2026-10-19T13:19:39.585Z |
| cve-2026-111649 | 7.1 (v4.0) 6.5 (v3.1) | Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via Downl… |
rocboss |
paopao-ce |
2026-10-16T17:39:17.296Z | 2026-10-21T20:51:20.277Z |
| cve-2026-111648 | 5.1 (v4.0) 2.7 (v3.1) | BuildAdmin through 2.3.9 IDOR via routine/adminInfo/ed… |
build-admin |
buildadmin |
2026-10-16T17:39:16.585Z | 2026-10-23T16:20:19.266Z |
| cve-2026-111647 | 5.3 (v4.0) 4.3 (v3.1) | PickMall lilishop through 5.0.0 IDOR via /buyer/trade/… |
PickMall |
lilishop |
2026-10-16T17:39:15.886Z | 2026-10-16T19:19:42.403Z |
| cve-2026-111646 | 8.2 (v4.0) 5.9 (v3.1) | SurveyKing before 1.13.0 Unauthenticated File Download… |
javahuang |
SurveyKing |
2026-10-16T17:39:15.125Z | 2026-10-16T21:18:43.318Z |
| cve-2026-111645 | 5.3 (v4.0) 5.4 (v3.1) | MrDoc through 1.1.1 Missing Authorization via api/impo… |
zmister2016 |
MrDoc |
2026-10-16T17:39:14.432Z | 2026-10-19T13:13:46.523Z |
| cve-2026-111644 | 6.9 (v4.0) 7.3 (v3.1) | Misaka Danmu Server through 2.8.9 Missing Authenticati… |
l429609201 |
misaka_danmu_server |
2026-10-16T17:39:13.747Z | 2026-10-21T20:47:20.877Z |
| cve-2026-111643 | 9.3 (v4.0) 9.8 (v3.1) | Misaka Danmu Server through 2.8.9 Authentication Bypas… |
l429609201 |
misaka_danmu_server |
2026-10-16T17:39:13.043Z | 2026-10-23T16:08:12.073Z |
| cve-2026-111642 | 8.7 (v4.0) 8.8 (v3.1) | FastapiAdmin through 3.0 Hard-Coded JWT Secret Privile… |
fastapiadmin |
FastapiAdmin |
2026-10-16T17:39:12.365Z | 2026-10-16T19:21:12.720Z |
| cve-2026-111641 | 9.3 (v4.0) 9.8 (v3.1) | FastapiAdmin through 3.0 Authentication Bypass via Aut… |
fastapiadmin |
FastapiAdmin |
2026-10-16T17:39:11.674Z | 2026-10-16T21:18:51.468Z |
| cve-2026-111640 | 5.3 (v4.0) 5.4 (v3.1) | DooTask through 1.9.66 Missing Authorization in OKR Co… |
kuaifan |
dootask |
2026-10-16T17:39:10.978Z | 2026-10-19T13:10:53.878Z |
| cve-2026-111639 | 8.6 (v4.0) 8.1 (v3.1) | bbs-go through 4.4.6 Account Takeover via Google One T… |
mlogclub |
bbs-go |
2026-10-16T17:39:10.284Z | 2026-10-21T20:45:39.318Z |
| cve-2026-111638 | 8.3 (v4.0) 7.7 (v3.1) | sshportal through 1.19.5 Missing Authorization in 'key… |
moul |
sshportal |
2026-10-16T17:39:09.600Z | 2026-10-23T16:11:02.880Z |
| cve-2026-111637 | 6.9 (v4.0) 5.3 (v3.1) | NexoPOS through 6.2.4 Unauthenticated Transaction Disc… |
Blair2004 |
NexoPOS |
2026-10-16T17:39:08.931Z | 2026-10-16T19:12:40.180Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-185 | Multiples vulnérabilités dans IBM Security Network Intrusion Prevention System | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-184 | Vulnérabilité dans IBM Security Privileged Identity Manager Virtual Appliance | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-183 | Vulnérabilité dans IBM Domino | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-182 | Vulnérabilité dans IBM InfoSphere BigInsights | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-181 | Multiples vulnérabilités dans BlueCoat Malware Analysis Appliance (MAA) | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-180 | Vulnérabilité dans GnuTLS | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-179 | Vulnérabilité dans Asterisk | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-178 | Vulnérabilité dans ProFTPD | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-177 | Multiples vulnérabilités dans IBM AIX et Virtual I/O Server | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-176 | Vulnérabilité dans Cisco Secure Desktop | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-175 | Vulnérabilité dans Cisco IOS XR | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-174 | Multiples vulnérabilités dans les produits Oracle Sun Systems | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-173 | Multiples vulnérabilités dans Oracle MySQL | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-172 | Multiples vulnérabilités dans Oracle Java | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-171 | Multiples vulnérabilités dans Oracle PeopleSoft | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-170 | Multiples vulnérabilités dans Oracle Database Server | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-169 | Multiples vulnérabilités dans Oracle Solaris | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-168 | Vulnérabilité dans BlueCoat ProxySG | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-167 | Multiples vulnérabilités dans Google Chrome | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-166 | Multiples vulnérabilités dans les produits Adobe | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-165 | Multiples vulnérabilités dans le noyau Linux de Suse | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-164 | Multiples vulnérabilités dans le noyau Linux de Red-Hat | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-163 | Vulnérabilité dans Red Hat JBoss | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-162 | Multiples vulnérabilités dans les produits F5 | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-161 | Multiples vulnérabilités dans Citrix XenServer | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-160 | Vulnérabilité dans Microsoft Windows Hyper-V | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-159 | Vulnérabilité dans Microsoft .NET | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-158 | Vulnérabilité dans Microsoft Active Directory Federation Services | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-157 | Vulnérabilité dans Microsoft XML Core Services | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-156 | Multiples vulnérabilités dans Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |