Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-87095 | 9.1 (v3.0) | Sensitive information disclosure and manipulation… |
Acronis |
Acronis Cyber Infrastructure |
2026-10-21T10:14:03.375Z | 2026-10-30T16:41:25.736Z |
| cve-2026-87941 | N/A | Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 |
Drupal |
Patreon |
2026-10-22T01:22:01.192Z | 2026-10-30T16:40:44.058Z |
| cve-2026-119466 | 5.4 (v3.1) | WordPress APIExperts Square for WooCommerce plugin <= … |
WPExperts |
APIExperts Square for WooCommerce |
2026-10-30T16:16:28.198Z | 2026-10-30T16:39:18.607Z |
| cve-2026-119290 | Zuke: Resolved secret() values are written to GITHUB_S… |
zuke-build |
zuke |
2026-10-30T15:50:46.959Z | 2026-10-30T16:38:54.900Z | |
| cve-2012-5562 | 8.6 (v3.1) | Rhn-proxy: rhn-satellite: rhn-proxy: information discl… |
Red Hat |
Red Hat Satellite Proxy v 5.6 |
2019-12-02T18:12:41.000Z | 2026-10-30T16:38:15.122Z |
| cve-2026-119414 | 5.3 (v4.0) 4.3 (v3.1) | Bitwarden Server before 2026.10.1 Authorization Bypass… |
bitwarden |
server |
2026-10-30T11:30:47.330Z | 2026-10-30T16:37:45.394Z |
| cve-2026-116366 | 9.5 (v4.0) | Unauthenticated RCE vulnerability against ClickHouse Server |
ClickHouse |
ClickHouse |
2026-10-30T11:00:11.115Z | 2026-10-30T16:36:32.335Z |
| cve-2026-22110 | 8.7 (v4.0) | Missing authentication check on POST/PUT requests |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:24.151Z | 2026-10-30T16:35:40.502Z |
| cve-2026-86589 | Apache Answer: User Center integration does not revoke… |
Apache Software Foundation |
Apache Answer |
2026-10-19T09:35:27.540Z | 2026-10-30T16:35:36.307Z | |
| cve-2026-70386 | 8.5 (v4.0) | OnePlus OxygenOS improper neutralization of special el… |
OnePlus |
OxygenOS |
2026-10-21T08:51:24.522Z | 2026-10-30T16:35:07.653Z |
| cve-2026-22105 | 8.7 (v4.0) | Use of default password based on serial number |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:23.081Z | 2026-10-30T16:35:01.858Z |
| cve-2026-22109 | 8.4 (v4.0) | Default WebUI passwords stored in plaintext |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:21.978Z | 2026-10-30T16:34:28.556Z |
| cve-2026-108780 | Apache Kylin: Potential JDBC source configuration vali… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:19.963Z | 2026-10-30T16:34:27.855Z | |
| cve-2026-22114 | 5.3 (v4.0) | Missing brute-force protection for web interface |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:20.904Z | 2026-10-30T16:33:58.275Z |
| cve-2026-82819 | 7.1 (v4.0) | Universal Naming Convention (UNC) Path Injection in Ce… |
Cerberus |
Cerberus FTP Server |
2026-10-21T04:30:40.808Z | 2026-10-30T16:33:26.805Z |
| cve-2026-108776 | Apache Kylin: tables/names SparkSQL injection |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:09.051Z | 2026-10-30T16:32:51.344Z | |
| cve-2026-108771 | Apache Kylin: unauthenticated broadcast API and polymo… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:59.076Z | 2026-10-30T16:31:42.241Z | |
| cve-2026-107929 | N/A | local interface connection reuse mixup |
curl |
curl |
2026-10-20T20:29:28.177Z | 2026-10-30T16:31:15.917Z |
| cve-2026-55600 | Part-DB: Stored HTML injection in BOM validation resul… |
Part-DB |
Part-DB-server |
2026-10-23T03:55:48.661Z | 2026-10-30T16:30:57.428Z | |
| cve-2026-108766 | Apache Kylin: missing JDBC-config authorization |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:48.058Z | 2026-10-30T16:30:46.005Z | |
| cve-2026-86019 | Part-DB: Attachment Size Limit Bypass via API Base64 Upload |
Part-DB |
Part-DB-server |
2026-10-23T04:04:02.426Z | 2026-10-30T16:29:23.553Z | |
| cve-2026-108764 | Apache Kylin: job-driver UI proxy SSRF |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:18:57.199Z | 2026-10-30T16:29:19.621Z | |
| cve-2026-108762 | Apache Kylin: delete metadata backup path-confinement bypass |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:16:25.736Z | 2026-10-30T16:28:09.058Z | |
| cve-2026-54711 | PGHoard: Password written to debug log |
Aiven-Open |
pghoard |
2026-10-23T12:16:38.258Z | 2026-10-30T16:27:50.805Z | |
| cve-2026-107928 | N/A | info leak uploading over WebSockets with GnuTLS |
curl |
curl |
2026-10-20T20:28:17.712Z | 2026-10-30T16:26:32.201Z |
| cve-2026-119557 | 8.2 (v4.0) 5.9 (v3.1) | n8n from 2.14.0 through 2.46.3 Path Traversal via Data… |
n8n-io |
n8n |
2026-10-30T11:31:06.894Z | 2026-10-30T16:22:27.929Z |
| cve-2026-94266 | N/A | password leak in CURLINFO_EFFECTIVE_URL |
curl |
curl |
2026-10-20T20:27:21.585Z | 2026-10-30T16:22:24.369Z |
| cve-2026-119561 | 7.6 (v4.0) 6.8 (v3.1) | phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentic… |
phpMyAdmin |
phpMyAdmin |
2026-10-30T11:31:09.654Z | 2026-10-30T16:21:29.456Z |
| cve-2026-119565 | 5.3 (v4.0) 4.3 (v3.1) | Plausible Analytics through 3.2.1 Mass Assignment via … |
Plausible |
Plausible Analytics |
2026-10-30T11:31:12.420Z | 2026-10-30T16:20:23.056Z |
| cve-2026-94265 | N/A | Authorization: Negotiate sent to foreign origin |
curl |
curl |
2026-10-20T20:26:18.061Z | 2026-10-30T16:19:18.095Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-185 | Multiples vulnérabilités dans IBM Security Network Intrusion Prevention System | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-184 | Vulnérabilité dans IBM Security Privileged Identity Manager Virtual Appliance | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-183 | Vulnérabilité dans IBM Domino | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-182 | Vulnérabilité dans IBM InfoSphere BigInsights | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-181 | Multiples vulnérabilités dans BlueCoat Malware Analysis Appliance (MAA) | 2015-04-17T00:00:00.000000 | 2015-04-17T00:00:00.000000 |
| certfr-2015-avi-180 | Vulnérabilité dans GnuTLS | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-179 | Vulnérabilité dans Asterisk | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-178 | Vulnérabilité dans ProFTPD | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-177 | Multiples vulnérabilités dans IBM AIX et Virtual I/O Server | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-176 | Vulnérabilité dans Cisco Secure Desktop | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-175 | Vulnérabilité dans Cisco IOS XR | 2015-04-16T00:00:00.000000 | 2015-04-16T00:00:00.000000 |
| certfr-2015-avi-174 | Multiples vulnérabilités dans les produits Oracle Sun Systems | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-173 | Multiples vulnérabilités dans Oracle MySQL | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-172 | Multiples vulnérabilités dans Oracle Java | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-171 | Multiples vulnérabilités dans Oracle PeopleSoft | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-170 | Multiples vulnérabilités dans Oracle Database Server | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-169 | Multiples vulnérabilités dans Oracle Solaris | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-168 | Vulnérabilité dans BlueCoat ProxySG | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-167 | Multiples vulnérabilités dans Google Chrome | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-166 | Multiples vulnérabilités dans les produits Adobe | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-165 | Multiples vulnérabilités dans le noyau Linux de Suse | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-164 | Multiples vulnérabilités dans le noyau Linux de Red-Hat | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-163 | Vulnérabilité dans Red Hat JBoss | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-162 | Multiples vulnérabilités dans les produits F5 | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-161 | Multiples vulnérabilités dans Citrix XenServer | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-160 | Vulnérabilité dans Microsoft Windows Hyper-V | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-159 | Vulnérabilité dans Microsoft .NET | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-158 | Vulnérabilité dans Microsoft Active Directory Federation Services | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-157 | Vulnérabilité dans Microsoft XML Core Services | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-156 | Multiples vulnérabilités dans Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |