Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118763 | @sigstore/oci sends the registry Authorization header … |
sigstore |
sigstore-js |
2026-10-29T17:01:40.294Z | 2026-10-30T17:13:12.761Z | |
| cve-2026-119207 | pypdf: Possible large memory usage for exceptions in s… |
py-pdf |
pypdf |
2026-10-29T20:38:54.611Z | 2026-10-30T17:12:40.743Z | |
| cve-2026-118767 | Botan: Python binding bcrypt APIs truncate passwords c… |
randombit |
botan |
2026-10-29T17:17:24.323Z | 2026-10-30T17:12:36.136Z | |
| cve-2026-118773 | Glob: AbortSignal cancellation bypass allows post-time… |
isaacs |
node-glob |
2026-10-29T18:27:47.480Z | 2026-10-30T17:12:23.906Z | |
| cve-2026-39910 | 7.7 (v4.0) 8.8 (v3.1) | STACKIT IaaS API Privilege Escalation via Service Acco… |
STACKIT |
IaaS API |
2026-06-08T16:16:09.469Z | 2026-10-30T17:12:16.705Z |
| cve-2026-118777 | Forge: Prototype Pollution in forge.http cookie handli… |
digitalbazaar |
forge |
2026-10-29T18:42:06.079Z | 2026-10-30T17:12:06.088Z | |
| cve-2026-119276 | MariaDB Connector/J: Rogue server can drive large heap… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:47:32.086Z | 2026-10-30T17:11:51.081Z | |
| cve-2024-5563 | 4.8 (v3.1) | Incomplete reCaptcha Implementation in Authentication … |
WSO2 |
WSO2 Identity Server |
2026-10-21T13:44:40.480Z | 2026-10-30T17:11:39.685Z |
| cve-2026-119203 | pypdf: Possible infinite loop when hitting EOF in stan… |
py-pdf |
pypdf |
2026-10-29T20:30:13.426Z | 2026-10-30T17:11:01.881Z | |
| cve-2026-93289 | 9 (v4.0) 7.5 (v3.1) | OS command injection in Eufy Omni C20, Omni X10 Pro |
Eufy |
Omni C20 |
2026-09-24T19:24:40.244Z | 2026-10-30T17:10:40.924Z |
| cve-2026-119280 | MariaDB Connector/J : XA recover() trusted server-supp… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:55:50.101Z | 2026-10-30T17:10:10.174Z | |
| cve-2024-4989 | 5.4 (v3.1) | Open Redirection via Callback URL in WSO2 API Manager … |
WSO2 |
WSO2 API Manager |
2026-10-21T13:41:06.765Z | 2026-10-30T17:09:39.922Z |
| cve-2026-13303 | 8.7 (v3.1) | Boundary vulnerable to server-side request forgery in … |
HashiCorp |
Boundary |
2026-10-29T21:03:41.322Z | 2026-10-30T17:08:58.961Z |
| cve-2026-119283 | joserfc: Unbounded JWE General JSON `recipients` Array… |
authlib |
joserfc |
2026-10-29T21:10:05.490Z | 2026-10-30T17:08:26.483Z | |
| cve-2026-115642 | 8.3 (v3.1) | In OpenStack keystonemiddleware before 13.0.2, by… |
OpenStack |
keystonemiddleware |
2026-10-30T16:23:23.404Z | 2026-10-30T17:07:49.860Z |
| cve-2026-119317 | 6.5 (v3.1) 6 (v4.0) | Incorrect Authorization |
Tenable, Inc. |
Plugin Feed |
2026-10-29T21:13:04.494Z | 2026-10-30T17:07:23.004Z |
| cve-2026-118238 | N/A | CVE-2026-118238 |
Tenda |
W18E |
2026-10-30T15:08:41.752Z | 2026-10-30T17:07:06.917Z |
| cve-2024-5139 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint in Mu… |
WSO2 |
WSO2 Enterprise Integrator |
2026-10-21T13:36:49.246Z | 2026-10-30T17:06:32.391Z |
| cve-2026-61671 | WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUES… |
LabRedesCefetRJ |
WeGIA |
2026-10-29T21:21:02.485Z | 2026-10-30T17:06:30.196Z | |
| cve-2026-86249 | Apache bRPC: Authentication bypass when a server sets … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T12:17:42.903Z | 2026-10-30T17:05:52.803Z | |
| cve-2026-119284 | joserfc: Compact JWS size guard allocates attacker-con… |
authlib |
joserfc |
2026-10-29T21:33:16.529Z | 2026-10-30T17:05:38.184Z | |
| cve-2026-61804 | myTinyWMS has Stored Cross-Site Scripting (XSS) in Pro… |
myTinyWMS |
myTinyWMS |
2026-10-30T17:04:33.294Z | 2026-10-30T17:04:33.294Z | |
| cve-2023-22793 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.594Z | 2026-10-30T17:04:18.232Z | |
| cve-2026-79704 | Apache bRPC: Out-of-bounds Read in Multi-stream RPC Re… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:56:20.309Z | 2026-10-30T17:03:38.510Z | |
| cve-2026-107239 | A vulnerability allowing a member of the Veeam Vi… |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.649Z | 2026-10-30T17:03:28.384Z | |
| cve-2026-107238 | A vulnerability allowing an authenticated domain … |
Veeam |
Management Pack for Microsoft System Center |
2026-10-29T22:55:37.666Z | 2026-10-30T17:02:59.654Z | |
| cve-2026-104368 | Export and Import Users and Customers <= 2.7.5 - Authe… |
webtoffee |
Export and Import Users and Customers |
2026-10-30T04:32:43.217Z | 2026-10-30T17:02:26.821Z | |
| cve-2026-118698 | JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL… |
beardev |
JoomSport – for Sports: Team & League, Football, Hockey & more |
2026-10-30T05:35:50.977Z | 2026-10-30T17:02:00.463Z | |
| cve-2026-116622 | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Sit… |
wpscripts |
Food Store – Online Food Delivery & Pickup |
2026-10-30T06:47:31.812Z | 2026-10-30T17:01:37.301Z | |
| cve-2026-78334 | Apache bRPC: Missing Authentication for Streaming RPC Frames |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:54:24.478Z | 2026-10-30T17:01:12.646Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-155 | Vulnérabilité dans le gestionnnaire des tâches de Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-154 | Multiples vulnérabilités dans Microsoft SharePoint Server | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-153 | Multiples vulnérabilités dans le moteur de rendu graphique de Microsoft | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-152 | Vulnérabilité dans Microsoft Windows | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-151 | Multiples vulnérabilités dans Microsoft Office | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-150 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-04-15T00:00:00.000000 | 2015-04-15T00:00:00.000000 |
| certfr-2015-avi-149 | Multiples vulnérabilités dans les produits Huawei | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-148 | Multiples vulnérabilités dans les produits Cisco | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-147 | Multiples vulnérabilités dans les produits Apple | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-146 | Multiples vulnérabilités dans les produits Juniper | 2015-04-13T00:00:00.000000 | 2015-04-13T00:00:00.000000 |
| certfr-2015-avi-145 | Multiples vulnérabilités dans IBM Systems Director Storage Control | 2015-04-10T00:00:00.000000 | 2015-04-10T00:00:00.000000 |
| certfr-2015-avi-144 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-04-10T00:00:00.000000 | 2015-04-10T00:00:00.000000 |
| certfr-2015-avi-143 | Vulnérabilité dans les produits Cisco | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-142 | Multiples vulnérabilités dans les produits Cisco | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-141 | Multiples vulnérabilités dans Apple Safari | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-140 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-139 | Multiples vulnérabilités dans Apple Macintosh OS X | 2015-04-09T00:00:00.000000 | 2015-04-09T00:00:00.000000 |
| certfr-2015-avi-138 | Multiples vulnérabilités dans SCADA Siemens SIMATIC | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-137 | Vulnérabilité dans IBM Tivoli Storage Manager FastBack | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-136 | Multiples vulnérabilités dans Red Hat Enterprise Linux Server | 2015-04-08T00:00:00.000000 | 2015-04-08T00:00:00.000000 |
| certfr-2015-avi-135 | Vulnérabilité dans Cisco Prime DCNM | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-134 | Multiples vulnérabilités dans Cisco Unity Connection | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-133 | Multiples vulnérabilités dans Google Chrome | 2015-04-02T00:00:00.000000 | 2015-04-02T00:00:00.000000 |
| certfr-2015-avi-132 | Multiples vulnérabilités dans les produits Schneider Electric | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-131 | Multiples vulnérabilités dans les produits Mozilla | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-130 | Multiples vulnérabilités dans Xen | 2015-04-01T00:00:00.000000 | 2015-04-01T00:00:00.000000 |
| certfr-2015-avi-129 | Vulnérabilité dans Huawei Campus Switch | 2015-03-31T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| certfr-2015-avi-128 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2015-03-27T00:00:00.000000 | 2015-03-27T00:00:00.000000 |
| certfr-2015-avi-127 | Multiples vulnérabilités dans Citrix Command Center | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |
| certfr-2015-avi-126 | Vulnérabilité dans EMC Isilon OneFS | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |