Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111636 | 9.2 (v4.0) 8.1 (v3.1) | OpenBMB StaffDeck through 0.5.6 Authentication Bypass … |
OpenBMB |
StaffDeck |
2026-10-16T17:39:08.257Z | 2026-10-16T21:19:00.346Z |
| cve-2026-111635 | 5.3 (v4.0) 4.3 (v3.1) | Helical Insight through 7.0.0 Path Traversal via /getE… |
helicalinsight |
helicalinsight |
2026-10-16T17:39:07.571Z | 2026-10-19T13:09:49.000Z |
| cve-2026-111634 | 8.6 (v4.0) 8.1 (v3.1) | Helical Insight through 7.0.0 SQL Injection via /execu… |
helicalinsight |
helicalinsight |
2026-10-16T17:39:06.906Z | 2026-10-21T20:44:36.649Z |
| cve-2026-111633 | 8.8 (v4.0) 8.6 (v3.1) | ZKEACMS through 4.4 Authentication Bypass via Hard-Cod… |
SeriaWei |
ZKEACMS |
2026-10-16T17:39:06.226Z | 2026-10-23T18:31:57.561Z |
| cve-2026-111632 | 5.3 (v4.0) 5.4 (v3.1) | Aureus ERP through 1.6.0 Multi-Company Authorization B… |
aureuserp |
aureuserp |
2026-10-16T17:39:05.550Z | 2026-10-16T19:33:21.197Z |
| cve-2026-111631 | 5.3 (v4.0) 5.4 (v3.1) | Distributor before 2.3.2 Missing Authorization in Exte… |
10up |
Distributor |
2026-10-16T17:39:04.861Z | 2026-10-16T21:19:10.473Z |
| cve-2026-111630 | 5.3 (v4.0) 5.4 (v3.1) | abp-next-admin 10.2.0 through 10.6.0 IDOR in AIManagem… |
colinin |
abp-next-admin |
2026-10-16T17:39:04.184Z | 2026-10-19T13:09:02.973Z |
| cve-2026-111629 | 5.3 (v4.0) 4.3 (v3.1) | IoTSharp through 3.6.1 Cross-Tenant Data Exposure via … |
IoTSharp |
IoTSharp |
2026-10-16T17:39:03.518Z | 2026-10-21T20:43:22.568Z |
| cve-2026-111628 | 2.3 (v4.0) 5 (v3.1) | 10up Distributor before 2.3.2 PHP Object Injection via… |
10up |
Distributor |
2026-10-16T17:39:02.847Z | 2026-10-23T18:34:49.579Z |
| cve-2026-111627 | 8.6 (v4.0) 7.2 (v3.1) | HestiaCP before 1.10.5 Protected Admin Bypass via Cron… |
hestiacp |
hestiacp |
2026-10-16T17:39:02.155Z | 2026-10-16T19:32:00.506Z |
| cve-2026-111626 | 9.3 (v4.0) 9.8 (v3.1) | Webreaper Damselfly through 4.5.3 Missing Authenticati… |
Webreaper |
Damselfly |
2026-10-16T17:39:01.458Z | 2026-10-16T21:19:19.069Z |
| cve-2026-111625 | 5.3 (v4.0) 5 (v3.1) | 10up Distributor before 2.3.2 Missing Authorization vi… |
10up |
Distributor |
2026-10-16T17:39:00.780Z | 2026-10-19T13:05:49.838Z |
| cve-2026-111624 | 6.3 (v4.0) 3.7 (v3.1) | Umbraco CMS before 17.7.1 and 18.2.1 Missing Authoriza… |
umbraco |
Umbraco-CMS |
2026-10-16T17:39:00.093Z | 2026-10-21T20:41:26.462Z |
| cve-2026-111623 | 6.3 (v4.0) 5.6 (v3.1) | Xiaozhi-esp32-server-java through 6.1.0 Authentication… |
joey-zhou |
xiaozhi-esp32-server-java |
2026-10-16T17:38:59.425Z | 2026-10-23T18:36:30.866Z |
| cve-2026-111622 | 7.6 (v4.0) 6.8 (v3.1) | smart-sso through 2.1.1 OAuth2 Authorization Code Thef… |
a466350665 |
smart-sso |
2026-10-16T17:38:58.736Z | 2026-10-16T19:29:48.555Z |
| cve-2026-111621 | 5.3 (v4.0) 4.3 (v3.1) | TDuck Survey Form through 5.3 Missing Authorization vi… |
TDuckCloud |
tduck-survey-form |
2026-10-16T17:38:58.051Z | 2026-10-16T21:19:28.058Z |
| cve-2026-111620 | 6 (v4.0) 5.3 (v3.1) | O2OA through 10.0.2-ce Cross-Work Attachment Read via … |
O2OA |
O2OA |
2026-10-16T17:38:57.366Z | 2026-10-19T13:02:47.413Z |
| cve-2026-111619 | 7.1 (v4.0) 6.5 (v3.1) | FilePress through 3.0.1 SQL Injection via asc Paramete… |
zyx0814 |
FilePress |
2026-10-16T17:38:56.671Z | 2026-10-21T20:39:17.187Z |
| cve-2026-111618 | 6.9 (v4.0) 5.3 (v3.1) | CoAI through 4.0.0 Unauthenticated Path Traversal via … |
coaidev |
CoAI |
2026-10-16T17:38:55.985Z | 2026-10-23T18:38:09.146Z |
| cve-2026-111617 | 6.9 (v4.0) 6.5 (v3.1) | WHartTest through 2.8.1 Missing Authentication on UI-A… |
MGdaasLab |
WHartTest |
2026-10-16T17:38:55.285Z | 2026-10-16T19:28:17.272Z |
| cve-2026-111616 | 6.9 (v4.0) 4.9 (v3.1) | Oqtane Framework through 10.2.6 Cross-Site Settings Di… |
Oqtane |
Oqtane Framework |
2026-10-16T17:38:54.615Z | 2026-10-16T21:19:35.462Z |
| cve-2026-111615 | 7.1 (v4.0) 6.5 (v3.1) | Mall4cloud through 4.0 IDOR Exposing Buyer Addresses v… |
gz-yami |
mall4cloud |
2026-10-16T17:38:53.890Z | 2026-10-19T13:01:07.851Z |
| cve-2026-111614 | 7.1 (v4.0) 6.5 (v3.1) | DataCap through 2025.1.1 IDOR via BaseController.getIn… |
devlive-community |
DataCap |
2026-10-16T17:38:53.190Z | 2026-10-21T20:37:34.593Z |
| cve-2026-111613 | 8.7 (v4.0) 7.5 (v3.1) | AllData through 0.7.1 Unauthenticated JDBC Injection v… |
alldatacenter |
alldata |
2026-10-16T17:38:52.517Z | 2026-10-23T18:39:50.789Z |
| cve-2026-111612 | 8.7 (v4.0) 7.5 (v3.1) | netdisk-fast-download through 0.4.8 Credential Disclos… |
qaiu |
netdisk-fast-download |
2026-10-16T17:38:51.828Z | 2026-10-16T19:27:08.464Z |
| cve-2026-111611 | 5.3 (v4.0) 5.4 (v3.1) | roncoo-education through 25.0.0-RELEASE IDOR via Order… |
roncoo |
roncoo-education |
2026-10-16T17:38:51.139Z | 2026-10-16T21:19:45.346Z |
| cve-2026-111610 | 5.3 (v4.0) 5.4 (v3.1) | B3log Solo through 4.4.0 Missing Authorization in Arti… |
b3log |
Solo |
2026-10-16T17:38:50.451Z | 2026-10-19T12:58:25.595Z |
| cve-2026-111609 | 5.1 (v4.0) 3.8 (v3.1) | PKP Open Journal Systems through 3.5.0-5 Cross-Journal… |
PKP |
Open Journal Systems |
2026-10-16T17:38:49.767Z | 2026-10-21T02:31:53.986Z |
| cve-2026-111608 | 2.3 (v4.0) 4.2 (v3.1) | Jeepay through 3.2.9 IDOR via DELETE /api/divisionRece… |
jeequan |
jeepay |
2026-10-16T17:38:49.058Z | 2026-10-23T18:44:58.148Z |
| cve-2026-111607 | 7.1 (v4.0) 7.1 (v3.1) | Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs |
jeequan |
jeepay |
2026-10-16T17:38:48.333Z | 2026-10-16T19:26:11.339Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-155 | Vulnérabilité dans le gestionnnaire des tâches de Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-154 | Multiples vulnérabilités dans Microsoft SharePoint Server | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-153 | Multiples vulnérabilités dans le moteur de rendu graphique de Microsoft | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-152 | Vulnérabilité dans Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-151 | Multiples vulnérabilités dans Microsoft Office | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-150 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-149 | Multiples vulnérabilités dans les produits Huawei | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-148 | Multiples vulnérabilités dans les produits Cisco | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-147 | Multiples vulnérabilités dans les produits Apple | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-146 | Multiples vulnérabilités dans les produits Juniper | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-145 | Multiples vulnérabilités dans IBM Systems Director Storage Control | 2015-04-10T00:00:00.000000 | 2015-04-10T00:00:00.000000 |
| certfr-2015-avi-144 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-04-10T00:00:00.000000 | 2015-04-10T00:00:00.000000 |
| certfr-2015-avi-143 | Vulnérabilité dans les produits Cisco | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-142 | Multiples vulnérabilités dans les produits Cisco | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-141 | Multiples vulnérabilités dans Apple Safari | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-140 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-139 | Multiples vulnérabilités dans Apple Macintosh OS X | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-138 | Multiples vulnérabilités dans SCADA Siemens SIMATIC | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-137 | Vulnérabilité dans IBM Tivoli Storage Manager FastBack | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-136 | Multiples vulnérabilités dans Red Hat Enterprise Linux Server | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-135 | Vulnérabilité dans Cisco Prime DCNM | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-134 | Multiples vulnérabilités dans Cisco Unity Connection | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-133 | Multiples vulnérabilités dans Google Chrome | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-132 | Multiples vulnérabilités dans les produits Schneider Electric | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-131 | Multiples vulnérabilités dans les produits Mozilla | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-130 | Multiples vulnérabilités dans Xen | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-129 | Vulnérabilité dans Huawei Campus Switch | 2015-03-31T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| certfr-2015-avi-128 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2015-03-27T00:00:00.000000 | 2015-03-27T00:00:00.000000 |
| certfr-2015-avi-127 | Multiples vulnérabilités dans Citrix Command Center | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |
| certfr-2015-avi-126 | Vulnérabilité dans EMC Isilon OneFS | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |