Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111606 | 8.6 (v4.0) 8.1 (v3.1) | Huly Platform through 0.7.432 Account Takeover via mer… |
hcengineering |
Huly Platform |
2026-10-16T17:38:47.643Z | 2026-10-16T21:19:52.033Z |
| cve-2026-111605 | 8.6 (v4.0) 8.1 (v3.1) | Jpom through 2.11.12 Cross-Workspace Authorization Byp… |
dromara |
Jpom |
2026-10-16T17:38:46.940Z | 2026-10-19T12:56:50.501Z |
| cve-2026-111604 | 5.1 (v4.0) 3.8 (v3.1) | eladmin through 2.7 Broken Access Control via /api/use… |
elunez |
eladmin |
2026-10-16T17:38:46.270Z | 2026-10-21T02:30:50.899Z |
| cve-2026-111603 | 5.3 (v4.0) 4.3 (v3.1) | PlayEdu through 2.3 Missing Authorization via Student … |
PlayEdu |
PlayEdu |
2026-10-16T17:38:45.572Z | 2026-10-23T18:47:25.698Z |
| cve-2026-111392 | 6.3 (v4.0) 4.8 (v3.1) | SGLang through 0.5.21 KV Cache Poisoning via mm_hashes… |
sgl-project |
sglang |
2026-10-16T17:38:44.867Z | 2026-10-16T19:24:54.109Z |
| cve-2026-109839 | 3.1 (v3.1) | IBM Db2 Genius Hub Missing Cryptographic Step |
IBM |
Db2 Genius Hub |
2026-10-16T17:37:58.609Z | 2026-10-16T19:23:47.475Z |
| cve-2026-102552 | 5.9 (v3.1) 8.2 (v4.0) | Improper verification of the source of a communication… |
FreeRTOS |
FreeRTOS-Plus-TCP |
2026-10-16T17:28:47.578Z | 2026-10-19T12:54:33.789Z |
| cve-2026-102551 | 7.7 (v3.1) 9.2 (v4.0) | Improper verification of the source of a communication… |
FreeRTOS |
FreeRTOS-Plus-TCP |
2026-10-16T17:27:38.483Z | 2026-10-19T12:51:13.488Z |
| cve-2026-80092 | 5.3 (v3.1) | Microsoft Identity Web Elevation of Privilege Vulnerability |
Microsoft |
microsoft-identity-web |
2026-10-16T17:12:01.521Z | 2026-10-31T18:13:31.111Z |
| cve-2026-109461 | 5.9 (v3.1) | Microsoft Authentication Library (MSAL) for Node.js In… |
Microsoft |
Microsoft Identity Client for NodeJS |
2026-10-16T17:11:24.532Z | 2026-10-31T18:13:30.541Z |
| cve-2026-109588 | 8.8 (v3.1) 9.3 (v4.0) | Numeric truncation in the MPU buffer authorization che… |
FreeRTOS |
FreeRTOS-Kernel |
2026-10-16T17:09:51.788Z | 2026-10-20T18:08:02.113Z |
| cve-2026-109587 | 8.8 (v3.1) 9.3 (v4.0) | Incorrect authorization in the Arm Cortex-R82 MPU port… |
FreeRTOS |
FreeRTOS-Kernel |
2026-10-16T17:08:07.685Z | 2026-10-20T15:16:10.707Z |
| cve-2026-59962 | Tandoor Recipes: ORM ORDER BY Injection via FK Travers… |
TandoorRecipes |
recipes |
2026-10-16T16:52:49.172Z | 2026-10-28T18:03:14.314Z | |
| cve-2026-59967 | Tandoor Recipes: Cross-user IDOR in /api/recipe-from-s… |
TandoorRecipes |
recipes |
2026-10-16T16:51:54.639Z | 2026-10-19T12:47:26.855Z | |
| cve-2026-49868 | RIOT: DHCPv6 client _parse_reply() missing sub-option … |
RIOT-OS |
RIOT |
2026-10-16T16:50:58.750Z | 2026-10-21T02:29:33.220Z | |
| cve-2026-102693 | RIOT: Remote Stack Buffer Overflow in ATWINC15x0 drive… |
RIOT-OS |
RIOT |
2026-10-16T16:49:45.584Z | 2026-10-16T19:23:03.423Z | |
| cve-2026-102692 | RIOT: Potential integer overflow in nanocoap Block2 ha… |
RIOT-OS |
RIOT |
2026-10-16T16:48:35.776Z | 2026-10-16T21:20:02.887Z | |
| cve-2026-62362 | PeerBanHelper: SQL injection via ${field} interpolatio… |
PBH-BTN |
PeerBanHelper |
2026-10-16T16:43:52.058Z | 2026-10-28T18:05:25.124Z | |
| cve-2026-86047 | MariaDB: Insufficient quoting in mariadb-dump and SHOW… |
MariaDB |
server |
2026-10-16T16:37:04.254Z | 2026-10-19T12:42:14.961Z | |
| cve-2026-85745 | MariaDB: Out-of-bound buffer read on in `ST_Area` of a… |
MariaDB |
server |
2026-10-16T16:30:30.866Z | 2026-10-19T12:39:16.848Z | |
| cve-2026-85748 | MariaDB: Use-after-free with a large number of SYS_REF… |
MariaDB |
server |
2026-10-16T16:28:55.829Z | 2026-10-16T16:54:40.841Z | |
| cve-2026-85746 | MariaDB: Out-of-bound buffer write on in `ST_AsText` o… |
MariaDB |
server |
2026-10-16T16:27:36.763Z | 2026-10-16T17:05:31.146Z | |
| cve-2026-92262 | MariaDB: Numerous issues caused by historical #mysql50… |
MariaDB |
server |
2026-10-16T16:25:46.964Z | 2026-10-21T02:28:14.389Z | |
| cve-2026-97380 | MariaDB: GRANT PROXY with empty password incorrectly c… |
MariaDB |
server |
2026-10-16T16:23:07.975Z | 2026-10-28T18:07:06.625Z | |
| cve-2026-85985 | MariaDB: Unauthorized file access via CONNECT engine UDFs |
MariaDB |
server |
2026-10-16T16:21:14.677Z | 2026-10-16T17:05:42.975Z | |
| cve-2026-86009 | Mailu: Domain managers can allow themselves to spoof o… |
Mailu |
Mailu |
2026-10-16T16:19:06.420Z | 2026-10-21T02:26:54.464Z | |
| cve-2026-86008 | Mailu domain managers can take over higher-privileged … |
Mailu |
Mailu |
2026-10-16T16:16:51.097Z | 2026-10-16T16:53:59.579Z | |
| cve-2026-57169 | Dockhand: Unauthenticated container exec via WebSocket… |
Finsys |
dockhand |
2026-10-16T16:13:20.542Z | 2026-10-28T18:17:58.881Z | |
| cve-2026-77474 | dcg: Exponential-time command-substitution preprocessi… |
Dicklesworthstone |
destructive_command_guard |
2026-10-16T16:10:57.120Z | 2026-10-19T12:38:04.696Z | |
| cve-2026-44977 | countly-server: Stored XSS in feedback upload enables … |
Countly |
countly-server |
2026-10-16T16:04:45.868Z | 2026-10-21T02:24:31.741Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-125 | Multiples vulnérabilités dans les produits Cisco | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |
| certfr-2015-avi-124 | Vulnérabilité dans Cisco IOS XR | 2015-03-25T00:00:00.000000 | 2015-03-25T00:00:00.000000 |
| certfr-2015-avi-123 | Vulnérabilité dans Cisco WebEx Meetings Server | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-122 | Vulnérabilité dans Cisco IOS | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-121 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-120 | Vulnérabilité dans IBM Rational ClearCase | 2015-03-23T00:00:00.000000 | 2015-03-23T00:00:00.000000 |
| certfr-2015-avi-119 | Multiples vulnérabilités dans Mozilla Firefox | 2015-03-23T00:00:00.000000 | 2015-03-23T00:00:00.000000 |
| certfr-2015-avi-118 | Multiples vulnérabilités dans Mac OS X Yosemite | 2015-03-20T00:00:00.000000 | 2015-03-20T00:00:00.000000 |
| certfr-2015-avi-117 | Multiples vulnérabilités dans OpenSSL | 2015-03-19T00:00:00.000000 | 2015-03-19T00:00:00.000000 |
| certfr-2015-avi-116 | Multiples vulnérabilités dans Drupal | 2015-03-19T00:00:00.000000 | 2015-03-19T00:00:00.000000 |
| certfr-2015-avi-115 | Multiples vulnérabilités dans Moodle | 2015-03-16T00:00:00.000000 | 2015-03-16T00:00:00.000000 |
| certfr-2015-avi-114 | Multiples vulnérabilités dans Adobe Flash Flayer | 2015-03-13T00:00:00.000000 | 2015-03-13T00:00:00.000000 |
| certfr-2015-avi-113 | Vulnérabilité dans Xen | 2015-03-13T00:00:00.000000 | 2015-03-13T00:00:00.000000 |
| certfr-2015-avi-112 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2015-03-12T00:00:00.000000 | 2015-03-12T00:00:00.000000 |
| certfr-2015-avi-111 | Multiples vulnérabilités dans les produits Cisco | 2015-03-12T00:00:00.000000 | 2015-03-12T00:00:00.000000 |
| certfr-2015-avi-110 | Multiples vulnérabilités dans Citrix XenServer | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-109 | Multiples vulnérabilités dans Xen | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-108 | Multiples vulnérabilités dans les produits Cisco | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-107 | Vulnérabilité dans le composant Schannel de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-106 | Vulnérabilité dans le protocole RDP de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-105 | Vulnérabilité dans le traitement des fichiers JPEG de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-104 | Vulnérabilité dans le composant Task Scheduler de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-103 | Vulnérabilité dans le service Netlogon de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-102 | Multiples vulnérabilités dans Microsoft Exchange Server | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-101 | Multiples vulnérabilités dans le noyau de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-100 | Vulnérabilité dans le traitement des images PNG de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-099 | Multiples vulnérabilités dans le noyau de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-098 | Multiples vulnérabilités dans Microsoft Office | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-097 | Multiples vulnérabilités dans le pilote de fontes Adobe de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-096 | Multiples vulnérabilités dans Microsoft Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |