Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-64610 | Apache Kylin: Redis unsafe Java deserialization |
Apache Software Foundation |
Apache Kylin |
2026-10-16T12:13:18.802Z | 2026-10-20T16:08:34.352Z | |
| cve-2026-63619 | Apache Kylin: Missing authorization and path-confineme… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T12:11:51.082Z | 2026-10-20T16:49:10.635Z | |
| cve-2026-63618 | Apache Kylin: Low-Privilege Config Exposure |
Apache Software Foundation |
Apache Kylin |
2026-10-16T12:11:35.468Z | 2026-10-16T14:03:00.915Z | |
| cve-2026-105959 | 7.5 (v3.1) | Spice-server: spice: heap buffer overflow via glz dict… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-10-16T11:53:00.840Z | 2026-11-04T21:41:27.104Z |
| cve-2026-111391 | 9.2 (v4.0) 8.1 (v3.1) | SGLang 0.5.10 through 0.5.22 Code Injection via Debug … |
sgl-project |
sglang |
2026-10-16T11:41:52.009Z | 2026-10-16T13:52:52.818Z |
| cve-2026-111390 | 6 (v4.0) 5.3 (v3.1) | Erupt through 2.3.0 HQL Injection via linkTreeVal in D… |
erupts |
erupt |
2026-10-16T11:38:02.147Z | 2026-10-21T02:18:10.357Z |
| cve-2026-107648 | WP Sessions Time Monitoring Full Automatic <= 1.1.5 - … |
switcorp |
WP Sessions Time Monitoring Full Automatic |
2026-10-16T11:28:51.492Z | 2026-10-16T14:39:00.868Z | |
| cve-2026-110029 | Squeeze < 1.8.1 - Subscriber+ Missing Authorization vi… |
Unknown |
Squeeze |
2026-10-16T11:08:04.000Z | 2026-10-16T14:49:19.421Z | |
| cve-2026-109930 | MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclo… |
Unknown |
MAIO |
2026-10-16T11:08:03.380Z | 2026-10-16T14:49:19.618Z | |
| cve-2026-109119 | 8.8 (v3.1) | Missing Authorization in rdiffweb |
ikus-soft |
rdiffweb |
2026-10-16T10:27:28.149Z | 2026-10-16T13:31:33.847Z |
| cve-2026-109118 | 4.6 (v3.1) | Improper Limitation of a Pathname to a Restricted Dire… |
ikus-soft |
rdiffweb |
2026-10-16T10:27:18.156Z | 2026-10-16T14:11:59.360Z |
| cve-2026-14452 | Open redirect and XSS via reset_url parameter |
Checkmk GmbH |
Checkmk |
2026-10-16T09:51:30.453Z | 2026-10-16T10:40:17.160Z | |
| cve-2026-106030 | 6.8 (v4.0) | Missing Authorization in NordVPN for Windows |
Nord Security |
NordVPN |
2026-10-16T09:47:20.977Z | 2026-10-16T10:40:51.408Z |
| cve-2026-107649 | Events Made Easy <= 3.2.22 - Unauthenticated Stored Cr… |
liedekef |
Events Made Easy |
2026-10-16T09:26:38.264Z | 2026-10-16T14:39:01.019Z | |
| cve-2026-110703 | GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) … |
paoltaia |
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory |
2026-10-16T09:26:37.351Z | 2026-10-16T14:13:09.355Z | |
| cve-2026-96768 | GoSMTP Pro <= 1.2.3 - Unauthenticated Stored Cross-Sit… |
softaculous |
GoSMTP Pro |
2026-10-16T09:26:36.859Z | 2026-10-16T14:39:01.181Z | |
| cve-2026-101300 | 7.1 (v4.0) | Server-Side Request Forgery in Wegow PDF export |
Wegow Technologies |
Wegow |
2026-10-16T08:56:02.923Z | 2026-10-16T11:19:56.435Z |
| cve-2026-15575 | 5.3 (v3.1) | Sensitive Information Disclosure Due to Enabled Debug … |
SFM Software Technologies Inc. |
Costifier |
2026-10-16T08:45:41.731Z | 2026-10-16T11:21:41.333Z |
| cve-2026-15219 | 6.5 (v3.1) | IDOR in SFM Software's Costifier |
SFM Software Technologies Inc. |
Costifier |
2026-10-16T08:42:32.579Z | 2026-10-16T11:22:24.068Z |
| cve-2026-111472 | 9.3 (v4.0) | SQL injection in TSG Profleet |
TSG |
Profleet |
2026-10-16T08:37:34.959Z | 2026-10-16T11:23:16.889Z |
| cve-2026-104003 | Paid Membership Plugin, Ecommerce, User Registration F… |
properfraction |
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress |
2026-10-16T08:27:43.226Z | 2026-10-16T14:59:31.371Z | |
| cve-2026-92766 | Vitepos <= 3.5.1 - Unauthenticated SQL Injection via '… |
appsbd |
Vitepos – Point of Sale (POS) for WooCommerce |
2026-10-16T08:27:42.866Z | 2026-10-16T14:59:31.665Z | |
| cve-2026-104726 | Name Directory <= 1.34.2 - Authenticated (Contributor+… |
jeroenpeters1986 |
Name Directory |
2026-10-16T08:27:42.514Z | 2026-10-16T14:39:01.336Z | |
| cve-2026-109224 | SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site … |
surecart |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments |
2026-10-16T08:27:42.175Z | 2026-10-16T14:39:01.492Z | |
| cve-2026-93681 | Tutor LMS <= 4.1.0 - Authenticated (Subscriber+) Store… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-10-16T08:27:41.284Z | 2026-10-16T14:39:01.644Z | |
| cve-2026-111311 | DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated … |
samuelgallegos |
DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More |
2026-10-16T08:27:40.819Z | 2026-10-16T14:14:12.730Z | |
| cve-2026-14177 | 7.5 (v3.1) | User Enumeration via Password Reset in IKAS Technology… |
IKAS Technology Inc. |
ikas E-Commerce Infrastructure |
2026-10-16T08:13:48.769Z | 2026-10-16T11:24:42.998Z |
| cve-2026-96870 | SureDash <= 1.12.0 - Authenticated (Subscriber+) Store… |
brainstormforce |
SureDash – Community, Courses & Member Dashboard |
2026-10-16T07:44:03.654Z | 2026-10-16T14:14:58.815Z | |
| cve-2026-100108 | Social Share Buttons <= 1.30 - Authenticated (Subscrib… |
maxfoundry |
Social Share Buttons |
2026-10-16T07:44:03.268Z | 2026-10-16T14:39:01.800Z | |
| cve-2026-100106 | FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Sto… |
damian-gora |
FiboSearch – Ajax Search for WooCommerce |
2026-10-16T07:44:02.898Z | 2026-10-16T14:15:55.302Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-035 | Vulnérabilité dans Huawei Quidway | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-034 | Multiples vulnérabilités dans Oracle Java SE | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-033 | Multiples vulnérabilités dans Oracle Database Server | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-032 | Multiples vulnérabilités dans Oracle MySQL | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-031 | Multiples vulnérabilités dans Oracle Virtualization | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-030 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-029 | Vulnérabilité dans PolarSSL | 2015-01-20T00:00:00.000000 | 2015-01-20T00:00:00.000000 |
| certfr-2015-avi-028 | Multiples vulnérabilités dans Moodle | 2015-01-19T00:00:00.000000 | 2015-01-19T00:00:00.000000 |
| certfr-2015-avi-027 | Vulnérabilité dans Samba | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-026 | Multiples vulnérabilités dans le noyau Linux de Debian | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-025 | Vulnérabilité dans IBM AIX | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-024 | Multiples vulnérabilités dans les produits BlueCoat | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-023 | Multiples vulnérabilités dans les produits Juniper | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-022 | Multiples vulnérabilités dans les systèmes SCADA Siemens | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-021 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-020 | Multiples vulnérabilités dans les produits Mozilla | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-019 | Multiples vulnérabilités dans Adobe Flash Player | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-018 | Vulnérabilité dans le pilote WebDAV de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-017 | Vulnérabilité dans le serveur de stratégie réseau de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-016 | Vulnérabilité dans le Rapport d'erreurs de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-015 | Vulnérabilité dans le service NLA de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-014 | Vulnérabilité dans le composant TS WebProxy de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-013 | Vulnérabilité dans le service de profil utilisateur de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-012 | Vulnérabilité dans le service Telnet de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-011 | Vulnérabilité dans Microsoft Windows AppCompat | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-010 | Multiples vulnérabilités dans les systèmes SCADA Schneider Electric | 2015-01-13T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-009 | Multiples vulnérabilités dans Wireshark | 2015-01-08T00:00:00.000000 | 2015-01-08T00:00:00.000000 |
| certfr-2015-avi-008 | Multiples vulnérabilités dans OpenSSL | 2015-01-08T00:00:00.000000 | 2015-01-08T00:00:00.000000 |
| certfr-2015-avi-007 | Multiples vulnérabilités dans EMC Documentum Web Development Kit | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |
| certfr-2015-avi-006 | Vulnérabilité dans IBM Security Network Protection | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |