Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-22109 | 8.4 (v4.0) | Default WebUI passwords stored in plaintext |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:21.978Z | 2026-10-30T16:34:28.556Z |
| cve-2026-108780 | Apache Kylin: Potential JDBC source configuration vali… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:19.963Z | 2026-10-30T16:34:27.855Z | |
| cve-2026-22114 | 5.3 (v4.0) | Missing brute-force protection for web interface |
Delta Electronics |
Delta UFC500 |
2026-10-30T10:34:20.904Z | 2026-10-30T16:33:58.275Z |
| cve-2026-82819 | 7.1 (v4.0) | Universal Naming Convention (UNC) Path Injection in Ce… |
Cerberus |
Cerberus FTP Server |
2026-10-21T04:30:40.808Z | 2026-10-30T16:33:26.805Z |
| cve-2026-108776 | Apache Kylin: tables/names SparkSQL injection |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:21:09.051Z | 2026-10-30T16:32:51.344Z | |
| cve-2026-108771 | Apache Kylin: unauthenticated broadcast API and polymo… |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:59.076Z | 2026-10-30T16:31:42.241Z | |
| cve-2026-107929 | N/A | local interface connection reuse mixup |
curl |
curl |
2026-10-20T20:29:28.177Z | 2026-10-30T16:31:15.917Z |
| cve-2026-55600 | Part-DB: Stored HTML injection in BOM validation resul… |
Part-DB |
Part-DB-server |
2026-10-23T03:55:48.661Z | 2026-10-30T16:30:57.428Z | |
| cve-2026-108766 | Apache Kylin: missing JDBC-config authorization |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:20:48.058Z | 2026-10-30T16:30:46.005Z | |
| cve-2026-86019 | Part-DB: Attachment Size Limit Bypass via API Base64 Upload |
Part-DB |
Part-DB-server |
2026-10-23T04:04:02.426Z | 2026-10-30T16:29:23.553Z | |
| cve-2026-108764 | Apache Kylin: job-driver UI proxy SSRF |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:18:57.199Z | 2026-10-30T16:29:19.621Z | |
| cve-2026-108762 | Apache Kylin: delete metadata backup path-confinement bypass |
Apache Software Foundation |
Apache Kylin |
2026-10-19T09:16:25.736Z | 2026-10-30T16:28:09.058Z | |
| cve-2026-54711 | PGHoard: Password written to debug log |
Aiven-Open |
pghoard |
2026-10-23T12:16:38.258Z | 2026-10-30T16:27:50.805Z | |
| cve-2026-107928 | N/A | info leak uploading over WebSockets with GnuTLS |
curl |
curl |
2026-10-20T20:28:17.712Z | 2026-10-30T16:26:32.201Z |
| cve-2026-119557 | 8.2 (v4.0) 5.9 (v3.1) | n8n from 2.14.0 through 2.46.3 Path Traversal via Data… |
n8n-io |
n8n |
2026-10-30T11:31:06.894Z | 2026-10-30T16:22:27.929Z |
| cve-2026-94266 | N/A | password leak in CURLINFO_EFFECTIVE_URL |
curl |
curl |
2026-10-20T20:27:21.585Z | 2026-10-30T16:22:24.369Z |
| cve-2026-119561 | 7.6 (v4.0) 6.8 (v3.1) | phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentic… |
phpMyAdmin |
phpMyAdmin |
2026-10-30T11:31:09.654Z | 2026-10-30T16:21:29.456Z |
| cve-2026-119565 | 5.3 (v4.0) 4.3 (v3.1) | Plausible Analytics through 3.2.1 Mass Assignment via … |
Plausible |
Plausible Analytics |
2026-10-30T11:31:12.420Z | 2026-10-30T16:20:23.056Z |
| cve-2026-94265 | N/A | Authorization: Negotiate sent to foreign origin |
curl |
curl |
2026-10-20T20:26:18.061Z | 2026-10-30T16:19:18.095Z |
| cve-2026-119586 | 8.5 (v4.0) 7.8 (v3.1) | SQLite CLI through 3.54.1 Command Injection via .recov… |
SQLite |
SQLite |
2026-10-30T11:31:15.070Z | 2026-10-30T16:19:09.235Z |
| cve-2026-119646 | 5.3 (v4.0) 4.3 (v3.1) | Open Web Analytics before 1.14.1 Cross-Site Data Discl… |
Open Web Analytics |
Open Web Analytics |
2026-10-30T14:16:10.196Z | 2026-10-30T16:17:52.032Z |
| cve-2026-119654 | 8.7 (v4.0) 8.8 (v3.1) | DataCap through 2025.1.1 Privilege Escalation via allo… |
devlive-community |
DataCap |
2026-10-30T14:16:16.982Z | 2026-10-30T16:16:54.207Z |
| cve-2026-92391 | N/A | curl_mime_free stack overflow by recursion |
curl |
curl |
2026-10-20T20:24:10.745Z | 2026-10-30T16:16:14.958Z |
| cve-2026-119658 | 5.3 (v4.0) 4.3 (v3.1) | PowerDNS-Admin through 2026.08.1 Authorization Bypass … |
PowerDNS-Admin |
PowerDNS-Admin |
2026-10-30T14:16:19.832Z | 2026-10-30T16:15:55.020Z |
| cve-2026-119662 | 8.7 (v4.0) 8.8 (v3.1) | Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentia… |
songloft-org |
songloft |
2026-10-30T14:16:22.650Z | 2026-10-30T16:14:43.940Z |
| cve-2026-103672 | 7.1 (v3.1) 6.9 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Improper… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:23:18.471Z | 2026-10-30T16:13:32.415Z |
| cve-2026-119650 | 5.3 (v4.0) 5.4 (v3.1) | HuLa-Server through 3.0.7 IDOR via /privacy Endpoint i… |
HuLaSpark |
HuLa-Server |
2026-10-30T14:16:14.132Z | 2026-10-30T16:13:28.899Z |
| cve-2026-119553 | 7.1 (v4.0) 6.5 (v3.1) | Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 … |
Moodle Project |
moodle |
2026-10-30T11:31:04.114Z | 2026-10-30T16:12:09.728Z |
| cve-2026-119549 | 7.1 (v4.0) 7.1 (v3.1) | Jellyfin through 12.4 SSRF via Gzip-Compressed Data UR… |
jellyfin |
jellyfin |
2026-10-30T11:31:01.382Z | 2026-10-30T16:11:21.944Z |
| cve-2026-92390 | N/A | -J no-clobber guarantee bypassed with 103 early hints |
curl |
curl |
2026-10-20T20:23:08.900Z | 2026-10-30T16:10:17.142Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-095 | Vulnérabilité dans le moteur de script VBScript de Windows | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-094 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-03-11T00:00:00.000000 | 2015-03-11T00:00:00.000000 |
| certfr-2015-avi-093 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2015-03-10T00:00:00.000000 | 2015-03-10T00:00:00.000000 |
| certfr-2015-avi-092 | Multiples vulnérabilités dans les produits Apple | 2015-03-10T00:00:00.000000 | 2015-03-10T00:00:00.000000 |
| certfr-2015-avi-091 | Vulnérabilité dans VLC Media Player | 2015-03-09T00:00:00.000000 | 2015-03-09T00:00:00.000000 |
| certfr-2015-avi-090 | Multiples vulnérabilités dans les produits SCADA Siemens | 2015-03-09T00:00:00.000000 | 2015-03-09T00:00:00.000000 |
| certfr-2015-avi-089 | Multiples vulnérabilités dans OpenSSL | 2015-03-06T00:00:00.000000 | 2015-03-06T00:00:00.000000 |
| certfr-2015-avi-088 | Multiples vulnérabilités dans Xen | 2015-03-06T00:00:00.000000 | 2015-03-06T00:00:00.000000 |
| certfr-2015-avi-087 | Multiples vulnérabilités dans Wireshark | 2015-03-06T00:00:00.000000 | 2015-03-06T00:00:00.000000 |
| certfr-2015-avi-086 | Multiples vulnérabilités dans Google Chrome | 2015-03-04T00:00:00.000000 | 2015-03-04T00:00:00.000000 |
| certfr-2015-avi-085 | Multiples vulnérabilités dans le noyau Linux | 2015-03-04T00:00:00.000000 | 2015-03-04T00:00:00.000000 |
| certfr-2015-avi-081 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-02-27T00:00:00.000000 | 2015-03-04T00:00:00.000000 |
| certfr-2015-avi-084 | Multiples vulnérabilités dans les produits Avaya | 2015-03-03T00:00:00.000000 | 2015-03-03T00:00:00.000000 |
| certfr-2015-avi-083 | Vulnérabilité dans le pilote Nvidia | 2015-03-02T00:00:00.000000 | 2015-03-02T00:00:00.000000 |
| certfr-2015-avi-082 | Vulnérabilité dans le noyau Linux | 2015-03-02T00:00:00.000000 | 2015-03-02T00:00:00.000000 |
| certfr-2015-avi-080 | Vulnérabilité dans Huawei iMana | 2015-02-27T00:00:00.000000 | 2015-02-27T00:00:00.000000 |
| certfr-2015-avi-079 | Multiples vulnérabilités dans les produits Mozilla | 2015-02-25T00:00:00.000000 | 2015-02-25T00:00:00.000000 |
| certfr-2015-avi-078 | Vulnérabilité dans Samba | 2015-02-23T00:00:00.000000 | 2015-02-23T00:00:00.000000 |
| certfr-2015-avi-077 | Vulnérabilité dans Cisco IOS | 2015-02-23T00:00:00.000000 | 2015-02-23T00:00:00.000000 |
| certfr-2015-avi-076 | Multiples vulnérabilités dans les produits Cisco | 2015-02-20T00:00:00.000000 | 2015-02-20T00:00:00.000000 |
| certfr-2015-avi-075 | Vulnérabilité dans TYPO3 | 2015-02-18T00:00:00.000000 | 2015-02-18T00:00:00.000000 |
| certfr-2015-avi-074 | Multiples vulnérabilités dans PHP | 2015-02-17T00:00:00.000000 | 2015-02-17T00:00:00.000000 |
| certfr-2015-avi-073 | Multiples vulnérabilités dans les produits Cisco | 2015-02-17T00:00:00.000000 | 2015-02-17T00:00:00.000000 |
| certfr-2015-avi-072 | Multiples vulnérabilités dans les produits IBM | 2015-02-16T00:00:00.000000 | 2015-02-16T00:00:00.000000 |
| certfr-2015-avi-071 | Vulnérabilité dans les produits F5 BIG-IP | 2015-02-13T00:00:00.000000 | 2015-02-13T00:00:00.000000 |
| certfr-2015-avi-070 | Multiples vulnérabilités dans PostgreSQL | 2015-02-12T00:00:00.000000 | 2015-02-12T00:00:00.000000 |
| certfr-2015-avi-069 | Multiples vulnérabilités dans Google Chrome | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-068 | Vulnérabilité dans Microsoft Virtual Machine Manager | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-067 | Multiples vulnérabilités dans le composant Microsoft Graphics de Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-066 | Vulnérabilité dans Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |