Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105273 | 7.5 (v3.1) 8.7 (v4.0) | J4Care dcm4che Loop with Unreachable Exit Condition |
J4Care |
dcm4chee-arc-light |
2026-10-16T14:21:12.116Z | 2026-10-16T15:20:19.042Z |
| cve-2026-107621 | 7.5 (v3.1) 8.7 (v4.0) | J4Care dcm4che Loop with Unreachable Exit Condition |
J4Care |
dcm4chee-arc-light |
2026-10-16T14:19:32.673Z | 2026-10-16T15:20:19.201Z |
| cve-2026-97851 | 9.1 (v3.1) 8.8 (v4.0) | J4Care dcm4che Missing Authorization |
J4Care |
dcm4chee-arc-light |
2026-10-16T14:16:55.229Z | 2026-10-16T15:20:19.499Z |
| cve-2026-105664 | 5.3 (v3.1) 6.9 (v4.0) | Guangzhou Juan IoT Technology EseeCloud Observable Res… |
Guangzhou Juan IoT Technology Co., Ltd. |
EseeCloud App |
2026-10-16T14:06:55.903Z | 2026-10-16T15:20:19.651Z |
| cve-2026-97858 | 5.3 (v3.1) 6.9 (v4.0) | Guangzhou Juan IoT Technology EseeCloud Improperly Con… |
Guangzhou Juan IoT Technology Co., Ltd. |
EseeCloud App |
2026-10-16T14:04:47.580Z | 2026-10-16T15:20:19.972Z |
| cve-2026-107617 | 9.8 (v3.1) 9.3 (v4.0) | Guangzhou Juan IoT Technology EseeCloud Use of Hard-co… |
Guangzhou Juan IoT Technology Co., Ltd. |
EseeCloud App |
2026-10-16T14:02:54.778Z | 2026-10-16T15:20:20.297Z |
| cve-2026-110805 | N/A | Server-side request forgery in PingOne groups end… |
Devolutions |
Server |
2026-10-16T13:46:53.212Z | 2026-10-16T15:08:11.754Z |
| cve-2026-110804 | N/A | Improperly controlled modification of JIT elevati… |
Devolutions |
Server |
2026-10-16T13:45:38.143Z | 2026-10-16T15:08:54.643Z |
| cve-2026-110806 | N/A | Incorrect authorization in add-on properties in D… |
Devolutions |
Server |
2026-10-16T13:44:20.481Z | 2026-10-16T15:09:31.579Z |
| cve-2026-110287 | N/A | Improper access control in asset contact password… |
Devolutions |
Server |
2026-10-16T13:43:25.516Z | 2026-10-16T15:10:08.692Z |
| cve-2026-18516 | 9.6 (v3.1) | Improper Encoding or Escaping of Output in Crafty Controller |
Arcadia Technology, LLC |
Crafty Controller |
2026-10-16T13:37:55.079Z | 2026-10-18T13:54:08.252Z |
| cve-2026-90821 | 5.4 (v3.1) | Improper Neutralization of Input During Web Page Gener… |
Arcadia Technology, LLC |
Crafty Controller |
2026-10-16T13:37:40.079Z | 2026-10-16T15:20:20.502Z |
| cve-2026-97470 | Tourfic <= 3.0.1 - Authenticated (Subscriber+) Stored … |
themefic |
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental |
2026-10-16T13:28:15.060Z | 2026-10-16T14:39:00.593Z | |
| cve-2026-111413 | 8.8 (v3.1) | WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cro… |
aThemeArt |
aThemeArt Theme Helper |
2026-10-16T13:02:14.161Z | 2026-10-16T13:32:40.971Z |
| cve-2026-110896 | 5.3 (v3.1) | WordPress Passster plugin <= 4.3.18 - Broken Access Co… |
WP Chill |
Passster |
2026-10-16T12:57:24.956Z | 2026-10-16T14:01:22.556Z |
| cve-2026-107564 | 8.7 (v4.0) 7.5 (v3.1) | gocsaf/csaf: csaf_provider prone to uncontrolled resou… |
gocsaf Development Community |
csaf_provider |
2026-10-16T12:55:24.565Z | 2026-10-16T14:01:53.235Z |
| cve-2026-111400 | 6.5 (v3.1) | WordPress PowerPack Addons for Elementor plugin <= 3.1… |
IdeaBox Creations |
PowerPack Addons for Elementor |
2026-10-16T12:55:17.830Z | 2026-10-16T15:04:12.871Z |
| cve-2026-111396 | 7.1 (v3.1) | WordPress Advanced Post Manager plugin <= 4.5.6 - Brok… |
Liquid Web / StellarWP |
Advanced Post Manager |
2026-10-16T12:54:50.256Z | 2026-10-16T13:44:30.141Z |
| cve-2026-111409 | 5.3 (v3.1) | WordPress YITH PayPal Express Checkout for WooCommerce… |
YITH |
YITH PayPal Express Checkout for WooCommerce |
2026-10-16T12:52:57.180Z | 2026-10-19T08:14:29.318Z |
| cve-2026-110903 | 6.5 (v3.1) | WordPress The Events Calendar plugin <= 6.18.1 - Cross… |
Liquid Web / StellarWP |
The Events Calendar |
2026-10-16T12:51:28.928Z | 2026-10-16T14:39:00.735Z |
| cve-2026-110900 | 5.3 (v3.1) | WordPress BookIt plugin <= 2.6.0.5 - Broken Access Con… |
Liquid Web / StellarWP |
BookIt |
2026-10-16T12:51:01.259Z | 2026-10-16T14:59:30.776Z |
| cve-2026-110901 | 5.4 (v3.1) | WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direc… |
WPMU DEV |
SmartCrawl |
2026-10-16T12:50:03.734Z | 2026-10-16T14:59:30.929Z |
| cve-2026-110380 | 5.3 (v3.1) | WordPress WP Event Solution plugin <= 4.1.26 - Broken … |
Arraytics |
WP Event Solution |
2026-10-16T12:31:15.231Z | 2026-10-16T14:59:31.070Z |
| cve-2026-111405 | 6.5 (v3.1) | WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripti… |
PT Norther Lights Production |
MapSVG |
2026-10-16T12:30:54.361Z | 2026-10-16T13:46:12.255Z |
| cve-2026-111399 | 8.5 (v3.1) | WordPress MapSVG plugin <= 8.16.1 - SQL Injection vuln… |
PT Norther Lights Production |
MapSVG |
2026-10-16T12:30:32.747Z | 2026-10-16T14:59:31.212Z |
| cve-2026-111397 | 5.3 (v3.1) | WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exp… |
PT Norther Lights Production |
MapSVG |
2026-10-16T12:29:35.561Z | 2026-10-16T14:02:23.262Z |
| cve-2026-111555 | 6 (v3.1) | Luksmeta: missing slot-range validation permits out-of… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-16T12:19:44.320Z | 2026-11-05T16:28:00.332Z |
| cve-2026-105958 | 7.5 (v3.1) | Spice-server: spice: heap oob read/write via unchecked… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-16T12:18:26.419Z | 2026-11-04T21:41:24.526Z |
| cve-2026-68571 | Apache Kylin: JDBC URL Whitelist Verification Bypass |
Apache Software Foundation |
Apache Kylin |
2026-10-16T12:16:12.526Z | 2026-10-19T10:31:10.638Z | |
| cve-2026-64959 | Apache Kylin: Missing authentication on certain cache … |
Apache Software Foundation |
Apache Kylin |
2026-10-16T12:16:00.359Z | 2026-10-20T15:18:33.054Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-065 | Vulnérabilité dans la stratégie de groupe (GPO) de Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-064 | Vulnérabilité dans Microsoft Office | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-063 | Multiples vulnérabilités dans Microsoft Office | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-062 | Vulnérabilité dans la stratégie de groupe (GPO) de Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-061 | Multiples vulnérabilités dans le pilote en mode noyau Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-060 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-059 | Vulnérabilité dans Moodle | 2015-02-09T00:00:00.000000 | 2015-02-09T00:00:00.000000 |
| certfr-2015-avi-058 | Multiples vulnérabilités dans Google Chrome | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-057 | Multiples vulnérabilités dans les produits IBM | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-056 | Vulnérabilité dans Cisco WebEx Meetings Server | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-055 | Vulnérabilité dans Adobe Flash Player | 2015-02-05T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| certfr-2015-avi-054 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-02-04T00:00:00.000000 | 2015-02-04T00:00:00.000000 |
| certfr-2015-avi-053 | Multiples vulnérabilités dans VLC Media Player | 2015-02-03T00:00:00.000000 | 2015-02-03T00:00:00.000000 |
| certfr-2015-avi-052 | Multiples vulnérabilités dans IBM Tivoli Storage Manager | 2015-02-03T00:00:00.000000 | 2015-02-03T00:00:00.000000 |
| certfr-2015-avi-051 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-050 | Multiples vulnérabilités dans les produits IBM | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-049 | Vulnérabilité dans EMC Avamar | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-048 | Vulnérabilité dans VMware VDP | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-047 | Vulnérabilité dans Xen | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-046 | Multiples vulnérabilités dans Asterisk | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-045 | Vulnérabilité dans Cisco Prime Service Catalog | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-044 | Multiples vulnérabilités dans VMware | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-043 | Vulnérabilité dans glibc | 2015-01-28T00:00:00.000000 | 2015-01-29T00:00:00.000000 |
| certfr-2015-avi-042 | Multiples vulnérabilités dans Apple iOS | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-041 | Multiples vulnérabilités dans Apple Safari | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-040 | Multiples vulnérabilités dans Apple OS X | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-039 | Multiples vulnérabilités dans Adobe Flash Player | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-038 | Vulnérabilité dans les produits BlueCoat | 2015-01-26T00:00:00.000000 | 2015-01-26T00:00:00.000000 |
| certfr-2015-avi-037 | Vulnérabilité dans Adobe Flash Player | 2015-01-22T00:00:00.000000 | 2015-01-22T00:00:00.000000 |
| certfr-2015-avi-036 | Multiples vulnérabilités dans Google Chrome | 2015-01-22T00:00:00.000000 | 2015-01-22T00:00:00.000000 |