Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-119661 | 2.3 (v4.0) 4.2 (v3.1) | ShowDoc through 3.9.5 Authorization Bypass via paramDe… |
star7th |
ShowDoc |
2026-10-30T14:16:21.954Z | 2026-10-30T15:52:32.619Z |
| cve-2026-119665 | 5.3 (v4.0) 6.3 (v3.1) | WHartTest 2.2.0 through 2.8.1 Missing Authorization vi… |
MGdaasLab |
WHartTest |
2026-10-30T14:16:24.683Z | 2026-10-30T15:52:24.404Z |
| cve-2026-61708 | SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Sto… |
socfortress |
CoPilot |
2026-10-30T14:20:17.885Z | 2026-10-30T15:52:19.134Z | |
| cve-2026-45145 | Chamilo LMS: Database-backed PHP object injection in c… |
chamilo |
chamilo-lms |
2026-10-30T14:29:05.283Z | 2026-10-30T15:51:30.372Z | |
| cve-2026-61737 | ng-antd-admin: Hardcoded JWT Secret allows Authenticat… |
huajian123 |
ng-antd-admin |
2026-10-30T14:34:03.817Z | 2026-10-30T15:51:24.314Z | |
| cve-2026-61627 | libass: Out-of-bounds read and write in wrap_lines_measure |
libass |
libass |
2026-10-30T14:55:45.500Z | 2026-10-30T15:51:10.521Z | |
| cve-2026-119371 | 6.8 (v4.0) 5.5 (v3.1) | SQLite before 3.54.0 Stack Exhaustion via CTE Chain in… |
SQLite |
SQLite |
2026-10-30T11:30:37.740Z | 2026-10-30T15:51:05.359Z |
| cve-2026-116407 | 5.4 (v3.1) | WordPress Webba Booking plugin <= 6.5.4 - Broken Acces… |
Webba Plugins |
Webba Booking |
2026-10-30T15:08:52.909Z | 2026-10-30T15:50:49.510Z |
| cve-2026-113811 | N/A | Algorithm::UrataniTakeda versions from 0.1.5 before 0.… |
|
|
2026-10-21T20:58:36.873Z | 2026-10-30T15:49:54.511Z |
| cve-2026-104615 | 7.9 (v3.1) | Cluster identity takeover in Fleet cluster registratio… |
SUSE |
Rancher |
2026-10-30T15:49:01.402Z | 2026-10-30T15:49:01.402Z |
| cve-2026-119289 | Zuke: githubWorkflow adopts any workflow run whose tit… |
zuke-build |
zuke |
2026-10-30T15:48:59.726Z | 2026-10-30T15:48:59.726Z | |
| cve-2026-110799 | Vvveb: Authentication Bypass via PHP Array Injection l… |
givanz |
Vvveb |
2026-10-30T14:19:17.309Z | 2026-10-30T15:48:43.788Z | |
| cve-2010-20125 | 8.7 (v4.0) 7.5 (v3.1) | DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php |
DedeCMS |
DedeCMS |
2026-10-30T14:23:34.726Z | 2026-10-30T15:47:58.288Z |
| cve-2026-61730 | SOCFortress CoPilot: Unauthenticated Exposure of Scout… |
socfortress |
CoPilot |
2026-10-30T14:25:53.976Z | 2026-10-30T15:47:21.224Z | |
| cve-2026-82987 | N/A | CVE-2026-82987 |
Viewsonic |
vCast |
2026-10-21T20:48:10.861Z | 2026-10-30T15:46:25.624Z |
| cve-2026-45141 | Chamilo LMS: CSRF in destructive skill-management AJAX… |
chamilo |
chamilo-lms |
2026-10-30T14:30:44.438Z | 2026-10-30T15:46:07.156Z | |
| cve-2026-61739 | SOCFortress CoPilot: Authentication Bypass and Missing… |
socfortress |
CoPilot |
2026-10-30T14:50:23.292Z | 2026-10-30T15:45:17.745Z | |
| cve-2026-48164 | Collabora Online: Reflected HTML injection through hos… |
CollaboraOnline |
online |
2026-10-30T14:57:18.378Z | 2026-10-30T15:44:29.766Z | |
| cve-2026-119369 | 6.5 (v3.1) | WordPress The Events Calendar plugin <= 6.18.2 - Cross… |
Liquid Web / StellarWP |
The Events Calendar |
2026-10-30T15:10:13.570Z | 2026-10-30T15:43:43.340Z |
| cve-2026-119722 | 8.5 (v4.0) 7.8 (v3.1) | Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of… |
Blender Foundation |
Blender |
2026-10-30T15:16:18.421Z | 2026-10-30T15:43:14.258Z |
| cve-2026-119718 | 8.5 (v4.0) 7.8 (v3.1) | Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer… |
Blender Foundation |
Blender |
2026-10-30T15:16:15.633Z | 2026-10-30T15:42:41.053Z |
| cve-2026-119714 | 6.9 (v4.0) 6.5 (v3.1) | My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortc… |
joedolson |
My Calendar - Accessible Event Manager |
2026-10-30T15:16:12.860Z | 2026-10-30T15:42:00.197Z |
| cve-2026-10843 | 7.2 (v3.1) | Cloud-credential-operator: cco mint-mode credentialsre… |
Red Hat |
Red Hat OpenShift Container Platform 4 |
2026-06-04T12:04:49.706Z | 2026-10-30T15:41:06.705Z |
| cve-2026-119710 | 7.1 (v4.0) 7.1 (v3.1) | PipesHub 0.3.0 before 0.10.0 Connector Deletion via Cr… |
pipeshub-ai |
pipeshub-ai |
2026-10-30T15:16:10.174Z | 2026-10-30T15:41:02.299Z |
| cve-2026-112408 | 8.1 (v3.1) 9.4 (v4.0) | Missing bucket ownership verification in Amazon SageMa… |
AWS |
Amazon SageMaker Python SDK |
2026-10-21T19:36:06.802Z | 2026-10-30T15:40:47.396Z |
| cve-2026-119702 | 6.9 (v4.0) 6.5 (v3.1) | WPGraphQL before 2.24.1 Missing Authorization via crea… |
WPGraphQL |
WPGraphQL |
2026-10-30T15:16:03.297Z | 2026-10-30T15:39:13.528Z |
| cve-2026-92207 | 8.8 (v3.0) | MindsDB OpenBBtable Code Injection Remote Code Executi… |
MindsDB |
MindsDB |
2026-10-21T17:17:42.063Z | 2026-10-30T15:36:32.104Z |
| cve-2026-92206 | 8.8 (v3.0) | CrewAI crewAI Framework Agent Loading Unsafe Reflectio… |
CrewAI |
CrewAI |
2026-10-21T17:17:33.262Z | 2026-10-30T15:35:08.028Z |
| cve-2026-117182 | N/A | An authenticated cross-site scripting (XSS) vulne… |
n/a |
n/a |
2026-10-30T00:00:00.000Z | 2026-10-30T15:33:57.827Z |
| cve-2026-92205 | 6.1 (v3.0) | BusyBox libarchive Symlink Directory Traversal Arbitra… |
BusyBox |
BusyBox |
2026-10-21T17:17:22.583Z | 2026-10-30T15:33:17.542Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-005 | Vulnérabilité dans strongSwan | 2015-01-06T00:00:00.000000 | 2015-01-06T00:00:00.000000 |
| certfr-2015-avi-004 | Multiples vulnérabilités dans IBM Infosphere BigInsights | 2015-01-05T00:00:00.000000 | 2015-01-05T00:00:00.000000 |
| certfr-2015-avi-003 | Vulnérabilité dans F5 BIG-IP ASM | 2015-01-05T00:00:00.000000 | 2015-01-05T00:00:00.000000 |
| certfr-2015-avi-002 | Vulnérabilité dans Noyau Linux | 2015-01-02T00:00:00.000000 | 2015-01-02T00:00:00.000000 |
| certfr-2015-avi-001 | Vulnérabilité dans IBM Sterling Connect:Direct for UNIX | 2015-01-02T00:00:00.000000 | 2015-01-02T00:00:00.000000 |
| certfr-2014-avi-544 | Multiples vulnérabilités dans GNU project GnuPG | 2014-12-31T00:00:00.000000 | 2014-12-31T00:00:00.000000 |
| certfr-2014-avi-543 | Vulnérabilité dans IBM i | 2014-12-30T00:00:00.000000 | 2014-12-30T00:00:00.000000 |
| certfr-2014-avi-542 | Multiples vulnérabilités dans IBM Security Network Intrusion Prevention System | 2014-12-30T00:00:00.000000 | 2014-12-30T00:00:00.000000 |
| certfr-2014-avi-541 | Multiples vulnérabilités dans Huawei | 2014-12-24T00:00:00.000000 | 2014-12-24T00:00:00.000000 |
| certfr-2014-avi-540 | Vulnérabilité dans PHP | 2014-12-24T00:00:00.000000 | 2014-12-24T00:00:00.000000 |
| certfr-2014-avi-539 | Multiples vulnérabilités dans Apple OS X | 2014-12-23T00:00:00.000000 | 2014-12-23T00:00:00.000000 |
| certfr-2014-avi-538 | Multiples vulnérabilités dans les produits Cisco | 2014-12-23T00:00:00.000000 | 2014-12-23T00:00:00.000000 |
| certfr-2014-avi-537 | Multiples vulnérabilités dans NTP ntpd | 2014-12-22T00:00:00.000000 | 2014-12-22T00:00:00.000000 |
| certfr-2014-avi-536 | Multiples vulnérabilités dans Huawei RomPager | 2014-12-19T00:00:00.000000 | 2014-12-19T00:00:00.000000 |
| certfr-2014-avi-535 | Vulnérabilité dans Apple Xcode | 2014-12-19T00:00:00.000000 | 2014-12-19T00:00:00.000000 |
| certfr-2014-avi-534 | Multiples vulnérabilités dans Huawei eSpace Desktop | 2014-12-18T00:00:00.000000 | 2014-12-18T00:00:00.000000 |
| certfr-2014-avi-533 | Vulnérabilité dans les produits F5 | 2014-12-18T00:00:00.000000 | 2014-12-18T00:00:00.000000 |
| certfr-2014-avi-532 | Multiples vulnérabilités dans le noyau linux RedHat | 2014-12-17T00:00:00.000000 | 2014-12-17T00:00:00.000000 |
| certfr-2014-avi-531 | Vulnérabilité dans Struts | 2014-12-17T00:00:00.000000 | 2014-12-17T00:00:00.000000 |
| certfr-2014-avi-530 | Vulnérabilité dans les produits Huawei | 2014-12-15T00:00:00.000000 | 2014-12-15T00:00:00.000000 |
| certfr-2014-avi-529 | Multiples vulnérabilités dans les produits F5 | 2014-12-15T00:00:00.000000 | 2014-12-15T00:00:00.000000 |
| certfr-2014-avi-528 | Multiples vulnérabilités dans le noyau Linux | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-527 | Vulnérabilité dans TYPO3 | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-526 | Vulnérabilité dans les produits Cisco | 2014-12-12T00:00:00.000000 | 2014-12-12T00:00:00.000000 |
| certfr-2014-avi-525 | Multiples vulnérabilités dans les produits IBM | 2014-12-11T00:00:00.000000 | 2014-12-11T00:00:00.000000 |
| certfr-2014-avi-524 | Vulnérabilité dans VMware vCloud Automation Center | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-523 | Multiples vulnérabilités dans Adobe Reader | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-522 | Multiples vulnérabilités dans Adobe Flash | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-521 | Multiples vulnérabilités dans Microsoft Excel | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-520 | Vulnérabilité dans Microsoft Office | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |