Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118475 | 3.6 (v3.1) | Eog: eye of gnome: buffer overrun when parsing malicio… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-30T01:24:43.195Z | 2026-10-30T17:00:01.226Z |
| cve-2026-61803 | Frappe LMS: Client-controlled price allows paid-course… |
frappe |
lms |
2026-10-30T16:50:08.737Z | 2026-10-30T16:59:19.940Z | |
| cve-2026-78066 | Apache bRPC: Resource Exhaustion via Unbounded Decompr… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:53:42.058Z | 2026-10-30T16:59:10.006Z | |
| cve-2026-82104 | 9.4 (v4.0) | API permission bypass via logic bug |
Teltonika Networks |
RUT |
2026-10-30T08:01:55.034Z | 2026-10-30T16:57:57.063Z |
| cve-2026-59386 | 6.5 (v3.1) | Credential exposure to space supporter |
Cloud Foundry |
Cloud Foundry Controller (CAPI) |
2026-10-30T08:35:20.435Z | 2026-10-30T16:56:57.050Z |
| cve-2026-59388 | 6.5 (v3.1) | Cloud Controller exposes secrets in audit log |
Cloud Foundry Foundation |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:40:39.058Z | 2026-10-30T16:56:09.310Z |
| cve-2026-59385 | 2.7 (v3.1) | Space Developer can extract space-scoped broker credentials |
Cloud Foundry |
CAPI (Cloud Foundry Controller) |
2026-10-30T08:44:45.681Z | 2026-10-30T16:55:29.935Z |
| cve-2026-78058 | Apache bRPC: Unbounded Resource Consumption and Crash … |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:52:57.984Z | 2026-10-30T16:55:00.165Z | |
| cve-2026-119299 | gopacket: SCTP chunk sub-decoder out-of-bounds panics … |
gopacket |
gopacket |
2026-10-30T16:23:51.655Z | 2026-10-30T16:54:01.623Z | |
| cve-2026-109821 | 6.3 (v4.0) | Unbounded port parsing in URI.parse/1 enables CPU exha… |
elixir-lang |
elixir |
2026-10-30T08:54:07.752Z | 2026-10-30T16:52:43.052Z |
| cve-2026-115274 | 6.9 (v4.0) | Unbounded integer parsing in JSON.decode/1 enables CPU… |
elixir-lang |
elixir |
2026-10-30T08:57:16.847Z | 2026-10-30T16:51:45.396Z |
| cve-2024-7557 | 8.8 (v3.1) | Odh-dashboard: odh-model-controller: cross-model authe… |
|
|
2024-08-08T21:33:14.505Z | 2026-10-30T16:50:57.000Z |
| cve-2026-97209 | 5.4 (v4.0) | Insecure temporary file in mix deps.partition lets a l… |
elixir-lang |
elixir |
2026-10-30T08:59:17.615Z | 2026-10-30T16:50:46.465Z |
| cve-2026-78048 | Apache bRPC: Remote Denial of Service via Out-of-Bound… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:51:58.752Z | 2026-10-30T16:49:25.386Z | |
| cve-2026-14467 | 8.2 (v4.0) | Display of information in the Forocoches comments editor |
Forocoches |
Forocoches comments editor |
2026-10-30T09:52:32.373Z | 2026-10-30T16:49:11.234Z |
| cve-2026-55551 | ZAC: Missing per-zaaktype authorization on by-ID decis… |
infonl |
dimpact-zaakafhandelcomponent |
2026-10-30T16:48:51.352Z | 2026-10-30T16:48:51.352Z | |
| cve-2026-85268 | 8.7 (v4.0) | Cross-Site Scripting (XSS) in Firebase Auth Handler vi… |
Google Cloud |
Identity Platform and Firebase Authentication |
2026-10-30T10:20:06.249Z | 2026-10-30T16:48:22.519Z |
| cve-2026-74758 | Apache bRPC: Heap Use-After-Free in RTMP Abort Message… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:48:23.883Z | 2026-10-30T16:47:23.207Z | |
| cve-2026-77884 | 7.1 (v4.0) | Gallery - Private Photo Vault 1.0.41 - Unauthenticated… |
Brain Trust |
Gallery - Private Photo Vault |
2026-09-14T18:02:16.329Z | 2026-10-30T16:43:09.535Z |
| cve-2026-87095 | 9.1 (v3.0) | Sensitive information disclosure and manipulation… |
Acronis |
Acronis Cyber Infrastructure |
2026-10-21T10:14:03.375Z | 2026-10-30T16:41:25.736Z |
| cve-2026-87941 | N/A | Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 |
Drupal |
Patreon |
2026-10-22T01:22:01.192Z | 2026-10-30T16:40:44.058Z |
| cve-2026-119466 | 5.4 (v3.1) | WordPress APIExperts Square for WooCommerce plugin <= … |
WPExperts |
APIExperts Square for WooCommerce |
2026-10-30T16:16:28.198Z | 2026-10-30T16:39:18.607Z |
| cve-2026-119290 | Zuke: Resolved secret() values are written to GITHUB_S… |
zuke-build |
zuke |
2026-10-30T15:50:46.959Z | 2026-10-30T16:38:54.900Z | |
| cve-2012-5562 | 8.6 (v3.1) | Rhn-proxy: rhn-satellite: rhn-proxy: information discl… |
Red Hat |
Red Hat Satellite Proxy v 5.6 |
2019-12-02T18:12:41.000Z | 2026-10-30T16:38:15.122Z |
| cve-2026-119414 | 5.3 (v4.0) 4.3 (v3.1) | Bitwarden Server before 2026.10.1 Authorization Bypass… |
bitwarden |
server |
2026-10-30T11:30:47.330Z | 2026-10-30T16:37:45.394Z |
| cve-2026-116366 | 9.5 (v4.0) | Unauthenticated RCE vulnerability against ClickHouse Server |
ClickHouse |
ClickHouse |
2026-10-30T11:00:11.115Z | 2026-10-30T16:36:32.335Z |
| cve-2026-22110 | 8.7 (v4.0) | Missing authentication check on POST/PUT requests |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:24.151Z | 2026-10-30T16:35:40.502Z |
| cve-2026-86589 | Apache Answer: User Center integration does not revoke… |
Apache Software Foundation |
Apache Answer |
2026-10-19T09:35:27.540Z | 2026-10-30T16:35:36.307Z | |
| cve-2026-70386 | 8.5 (v4.0) | OnePlus OxygenOS improper neutralization of special el… |
OnePlus |
OxygenOS |
2026-10-21T08:51:24.522Z | 2026-10-30T16:35:07.653Z |
| cve-2026-22105 | 8.7 (v4.0) | Use of default password based on serial number |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:23.081Z | 2026-10-30T16:35:01.858Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-125 | Multiples vulnérabilités dans les produits Cisco | 2015-03-26T00:00:00.000000 | 2015-03-26T00:00:00.000000 |
| certfr-2015-avi-124 | Vulnérabilité dans Cisco IOS XR | 2015-03-25T00:00:00.000000 | 2015-03-25T00:00:00.000000 |
| certfr-2015-avi-123 | Vulnérabilité dans Cisco WebEx Meetings Server | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-122 | Vulnérabilité dans Cisco IOS | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-121 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-03-24T00:00:00.000000 | 2015-03-24T00:00:00.000000 |
| certfr-2015-avi-120 | Vulnérabilité dans IBM Rational ClearCase | 2015-03-23T00:00:00.000000 | 2015-03-23T00:00:00.000000 |
| certfr-2015-avi-119 | Multiples vulnérabilités dans Mozilla Firefox | 2015-03-23T00:00:00.000000 | 2015-03-23T00:00:00.000000 |
| certfr-2015-avi-118 | Multiples vulnérabilités dans Mac OS X Yosemite | 2015-03-20T00:00:00.000000 | 2015-03-20T00:00:00.000000 |
| certfr-2015-avi-117 | Multiples vulnérabilités dans OpenSSL | 2015-03-19T00:00:00.000000 | 2015-03-19T00:00:00.000000 |
| certfr-2015-avi-116 | Multiples vulnérabilités dans Drupal | 2015-03-19T00:00:00.000000 | 2015-03-19T00:00:00.000000 |
| certfr-2015-avi-115 | Multiples vulnérabilités dans Moodle | 2015-03-16T00:00:00.000000 | 2015-03-16T00:00:00.000000 |
| certfr-2015-avi-114 | Multiples vulnérabilités dans Adobe Flash Flayer | 2015-03-13T00:00:00.000000 | 2015-03-13T00:00:00.000000 |
| certfr-2015-avi-113 | Vulnérabilité dans Xen | 2015-03-13T00:00:00.000000 | 2015-03-13T00:00:00.000000 |
| certfr-2015-avi-112 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2015-03-12T00:00:00.000000 | 2015-03-12T00:00:00.000000 |
| certfr-2015-avi-111 | Multiples vulnérabilités dans les produits Cisco | 2015-03-12T00:00:00.000000 | 2015-03-12T00:00:00.000000 |
| certfr-2015-avi-110 | Multiples vulnérabilités dans Citrix XenServer | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-109 | Multiples vulnérabilités dans Xen | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-108 | Multiples vulnérabilités dans les produits Cisco | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-107 | Vulnérabilité dans le composant Schannel de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-106 | Vulnérabilité dans le protocole RDP de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-105 | Vulnérabilité dans le traitement des fichiers JPEG de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-104 | Vulnérabilité dans le composant Task Scheduler de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-103 | Vulnérabilité dans le service Netlogon de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-102 | Multiples vulnérabilités dans Microsoft Exchange Server | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-101 | Multiples vulnérabilités dans le noyau de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-100 | Vulnérabilité dans le traitement des images PNG de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-099 | Multiples vulnérabilités dans le noyau de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-098 | Multiples vulnérabilités dans Microsoft Office | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-097 | Multiples vulnérabilités dans le pilote de fontes Adobe de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-096 | Multiples vulnérabilités dans Microsoft Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |