Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113791 | pypdf: Possible large memory usage when parsing conten… |
py-pdf |
pypdf |
2026-10-21T15:37:50.527Z | 2026-10-30T15:57:39.880Z | |
| cve-2026-97645 | Gravity Forms <= 3.1.2 - Unauthenticated Stored Cross-… |
Gravity Forms |
Gravity Forms |
2026-10-30T06:47:31.434Z | 2026-10-30T15:57:26.069Z | |
| cve-2026-103039 | Gravity Forms <= 3.1.2 - Unauthenticated PHP Object In… |
Gravity Forms |
Gravity Forms |
2026-10-30T06:47:32.599Z | 2026-10-30T15:57:19.794Z | |
| cve-2026-119364 | 6 (v4.0) 5.3 (v3.1) | ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink … |
ProFTPD Project |
ProFTPD |
2026-10-30T11:30:37.047Z | 2026-10-30T15:56:45.622Z |
| cve-2026-119374 | 8.5 (v4.0) 7.8 (v3.1) | SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts… |
SQLite |
SQLite |
2026-10-30T11:30:39.834Z | 2026-10-30T15:56:39.115Z |
| cve-2026-115585 | pypdf: Possible long runtimes for repeated malformed c… |
py-pdf |
pypdf |
2026-10-23T19:31:52.598Z | 2026-10-30T15:56:32.681Z | |
| cve-2026-119378 | 6.8 (v4.0) 5.5 (v3.1) | SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite() |
SQLite |
SQLite |
2026-10-30T11:30:42.626Z | 2026-10-30T15:56:16.807Z |
| cve-2026-119409 | 8.6 (v4.0) 7.2 (v3.1) | OPNsense before 26.7.8 Root Command Injection via Firm… |
opnsense |
core |
2026-10-30T11:30:46.595Z | 2026-10-30T15:55:57.541Z |
| cve-2026-119417 | 6.3 (v4.0) 3.7 (v3.1) | CakePHP through 5.4.3 Email Header Injection via Bare … |
cakephp |
cakephp |
2026-10-30T11:30:49.444Z | 2026-10-30T15:55:41.693Z |
| cve-2026-119421 | 8.2 (v4.0) 5.9 (v3.1) | Hyperswitch through 1.128.0 Missing Authorization in P… |
juspay |
hyperswitch |
2026-10-30T11:30:52.245Z | 2026-10-30T15:55:12.805Z |
| cve-2026-119425 | 5.3 (v4.0) 5.4 (v3.1) | OPNsense 26.1.6 through 26.7.7 Captive Portal Session … |
opnsense |
core |
2026-10-30T11:30:55.121Z | 2026-10-30T15:55:05.938Z |
| cve-2026-119429 | 5.3 (v4.0) 4.3 (v3.1) | phpMyAdmin through 5.2.3 Two-Factor Authentication Rem… |
phpMyAdmin |
phpMyAdmin |
2026-10-30T11:30:57.953Z | 2026-10-30T15:54:53.572Z |
| cve-2026-119548 | 2.3 (v4.0) 3.1 (v3.1) | Lago through 1.55.0 Cross-Organization Invoice Payment… |
getlago |
lago |
2026-10-30T11:31:00.682Z | 2026-10-30T15:54:44.148Z |
| cve-2026-119552 | 6.3 (v4.0) 4.8 (v3.1) | Uptime Kuma through 2.5.8 Race Condition Admin Creatio… |
louislam |
uptime-kuma |
2026-10-30T11:31:03.438Z | 2026-10-30T15:54:36.118Z |
| cve-2026-119556 | 5.3 (v4.0) 4.3 (v3.1) | Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 … |
Moodle Project |
moodle |
2026-10-30T11:31:06.200Z | 2026-10-30T15:54:25.966Z |
| cve-2026-119560 | 6 (v4.0) 5.9 (v3.1) | OPNsense core through 26.7.8 NTP Configuration Injecti… |
opnsense |
core |
2026-10-30T11:31:08.977Z | 2026-10-30T15:54:16.495Z |
| cve-2026-119564 | 6 (v4.0) 5.3 (v3.1) | Plausible Analytics through 3.2.1 Site Takeover via Ex… |
Plausible |
Plausible Analytics |
2026-10-30T11:31:11.750Z | 2026-10-30T15:54:10.078Z |
| cve-2026-119568 | 9.1 (v4.0) 7.4 (v3.1) | vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS… |
vsftpd |
vsftpd |
2026-10-30T11:31:14.408Z | 2026-10-30T15:54:01.560Z |
| cve-2026-119569 | 6 (v4.0) 5.3 (v3.1) | Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pol… |
parse-community |
parse-server |
2026-10-30T13:18:09.513Z | 2026-10-30T15:53:54.963Z |
| cve-2026-119573 | 2.1 (v4.0) 4.4 (v3.1) | Traefik 3.7.11 before 3.7.15 Cross-Namespace Authoriza… |
traefik |
traefik |
2026-10-30T13:18:12.280Z | 2026-10-30T15:53:49.154Z |
| cve-2026-119577 | 7.6 (v4.0) 6.8 (v3.1) | ArcadeDB before 26.10.2 Improper Session Revocation in… |
ArcadeData |
arcadedb |
2026-10-30T13:18:15.066Z | 2026-10-30T15:53:42.078Z |
| cve-2026-119598 | 5.3 (v4.0) 4.3 (v3.1) | Miaomiaowu before 0.9.3 Cross-User Proxy Provider Conf… |
iluobei |
miaomiaowu |
2026-10-30T13:18:17.785Z | 2026-10-30T15:53:35.836Z |
| cve-2026-119602 | 6.3 (v4.0) 3.7 (v3.1) | libmspack through 0.11alpha Uninitialized Memory Discl… |
kyz |
libmspack |
2026-10-30T13:18:20.547Z | 2026-10-30T15:53:29.159Z |
| cve-2026-119542 | 4.3 (v3.1) | Org.infinispan/infinispan-query: infinispan: deeply ne… |
Red Hat |
Red Hat build of Apache Camel 4 for Quarkus 3 |
2026-10-30T13:54:23.591Z | 2026-10-30T15:53:22.097Z |
| cve-2026-119645 | 7.1 (v4.0) 6.5 (v3.1) | ZenTao PMS through 22.6 Missing Authorization via doc.… |
easysoft |
zentaopms |
2026-10-30T14:16:09.559Z | 2026-10-30T15:53:14.646Z |
| cve-2026-119649 | 7.1 (v4.0) 7.1 (v3.1) | Orchard CMS 1.10.3 through 1.11 Improper Authorization… |
OrchardCMS |
Orchard |
2026-10-30T14:16:13.410Z | 2026-10-30T15:53:06.874Z |
| cve-2026-119375 | 6.8 (v4.0) 5.5 (v3.1) | SQLite before 3.54.0 Information Disclosure via WAL Pa… |
SQLite |
SQLite |
2026-10-30T11:30:40.533Z | 2026-10-30T15:52:57.646Z |
| cve-2026-119653 | 5.3 (v4.0) 4.3 (v3.1) | Nging through 5.3.5 Directory Listing Disclosure via /… |
admpub |
nging |
2026-10-30T14:16:16.291Z | 2026-10-30T15:52:54.964Z |
| cve-2026-119657 | 2.3 (v4.0) 5 (v3.1) | FilePress through 3.0.1 Missing Authorization in PicHo… |
zyx0814 |
FilePress |
2026-10-30T14:16:19.114Z | 2026-10-30T15:52:45.124Z |
| cve-2026-94140 | N/A | Rex versions through 1.16.1 for Perl accept an unknown… |
|
|
2026-10-21T21:22:19.577Z | 2026-10-30T15:52:33.360Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-035 | Vulnérabilité dans Huawei Quidway | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-034 | Multiples vulnérabilités dans Oracle Java SE | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-033 | Multiples vulnérabilités dans Oracle Database Server | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-032 | Multiples vulnérabilités dans Oracle MySQL | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-031 | Multiples vulnérabilités dans Oracle Virtualization | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-030 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2015-01-21T00:00:00.000000 | 2015-01-21T00:00:00.000000 |
| certfr-2015-avi-029 | Vulnérabilité dans PolarSSL | 2015-01-20T00:00:00.000000 | 2015-01-20T00:00:00.000000 |
| certfr-2015-avi-028 | Multiples vulnérabilités dans Moodle | 2015-01-19T00:00:00.000000 | 2015-01-19T00:00:00.000000 |
| certfr-2015-avi-027 | Vulnérabilité dans Samba | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-026 | Multiples vulnérabilités dans le noyau Linux de Debian | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-025 | Vulnérabilité dans IBM AIX | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-024 | Multiples vulnérabilités dans les produits BlueCoat | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-023 | Multiples vulnérabilités dans les produits Juniper | 2015-01-15T00:00:00.000000 | 2015-01-15T00:00:00.000000 |
| certfr-2015-avi-022 | Multiples vulnérabilités dans les systèmes SCADA Siemens | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-021 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-020 | Multiples vulnérabilités dans les produits Mozilla | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-019 | Multiples vulnérabilités dans Adobe Flash Player | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-018 | Vulnérabilité dans le pilote WebDAV de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-017 | Vulnérabilité dans le serveur de stratégie réseau de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-016 | Vulnérabilité dans le Rapport d'erreurs de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-015 | Vulnérabilité dans le service NLA de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-014 | Vulnérabilité dans le composant TS WebProxy de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-013 | Vulnérabilité dans le service de profil utilisateur de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-012 | Vulnérabilité dans le service Telnet de Microsoft Windows | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-011 | Vulnérabilité dans Microsoft Windows AppCompat | 2015-01-14T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-010 | Multiples vulnérabilités dans les systèmes SCADA Schneider Electric | 2015-01-13T00:00:00.000000 | 2015-01-14T00:00:00.000000 |
| certfr-2015-avi-009 | Multiples vulnérabilités dans Wireshark | 2015-01-08T00:00:00.000000 | 2015-01-08T00:00:00.000000 |
| certfr-2015-avi-008 | Multiples vulnérabilités dans OpenSSL | 2015-01-08T00:00:00.000000 | 2015-01-08T00:00:00.000000 |
| certfr-2015-avi-007 | Multiples vulnérabilités dans EMC Documentum Web Development Kit | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |
| certfr-2015-avi-006 | Vulnérabilité dans IBM Security Network Protection | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |