Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-62146 | 7.8 (v3.1) | Cri-o: cri-o: sandbox state poisoning via pod annotati… |
Red Hat |
Red Hat OpenShift Container Platform 4.16 |
2026-09-30T11:49:20.363Z | 2026-10-30T15:29:27.031Z |
| cve-2025-68395 | 5.1 (v4.0) | Stored XSS in Protectel |
ARKETEAM |
PROTECTELMAJ |
2026-10-30T11:37:48.062Z | 2026-10-30T15:29:11.101Z |
| cve-2025-68394 | 8.4 (v4.0) | SQL Injection in Protectel |
ARKETEAM |
PROTECTELMAJ |
2026-10-30T11:37:46.506Z | 2026-10-30T15:28:41.579Z |
| cve-2025-68393 | 8.4 (v4.0) | SQL Injection in Protectel |
ARKETEAM |
PROTECTELMAJ |
2026-10-30T11:37:45.042Z | 2026-10-30T15:28:04.300Z |
| cve-2025-68392 | 5.1 (v4.0) | Incorrect authorization in Protectel |
ARKETEAM |
PROTECTELMAJ |
2026-10-30T11:37:43.427Z | 2026-10-30T15:27:21.077Z |
| cve-2026-92204 | 7.7 (v3.0) | Airbyte OneDrive Connector _get_shared_drive_object Se… |
Airbyte |
Airbyte |
2026-10-21T17:17:14.805Z | 2026-10-30T15:27:03.936Z |
| cve-2025-68391 | 5.3 (v4.0) | Arbitrary File Upload in Protectel |
ARKETEAM |
PROTECTELMAJ |
2026-10-30T11:37:29.261Z | 2026-10-30T15:26:48.082Z |
| cve-2026-92203 | 7.7 (v3.0) | Airbyte SharePoint Connector _get_shared_drive_object … |
Airbyte |
Airbyte |
2026-10-21T17:17:06.504Z | 2026-10-30T15:25:34.464Z |
| cve-2026-105924 | 4.3 (v4.0) | NULL pointer dereference vulnerability in QCborValue t… |
qt |
Qt |
2026-10-30T12:04:22.186Z | 2026-10-30T15:25:08.893Z |
| cve-2026-92210 | 7.2 (v3.0) | NoMachine nxhtd Server-Side Request Forgery Informatio… |
NoMachine |
NoMachine |
2026-10-21T17:16:22.236Z | 2026-10-30T15:24:58.451Z |
| cve-2026-75882 | 8.5 (v4.0) | Improper access control vulnerability in ESET Encrypti… |
ESET spol. s.r.o. |
ESET Endpoint Encryption |
2026-10-30T12:40:44.859Z | 2026-10-30T15:22:56.675Z |
| cve-2026-114462 | 6 (v4.0) | Arbitrary File Read via Symlink in Velneo vServer HTT… |
Velneo |
vServer |
2026-10-21T15:02:31.893Z | 2026-10-30T15:22:33.408Z |
| cve-2026-119712 | 5.3 (v4.0) 6.4 (v3.1) | PipesHub before 0.10.0 SSRF via Image URLs in Indexed … |
pipeshub-ai |
pipeshub-ai |
2026-10-30T15:16:11.556Z | 2026-10-30T15:19:20.964Z |
| cve-2026-119700 | 6.9 (v4.0) 5.3 (v3.1) | WPGraphQL before 2.24.2 Object Existence Disclosure vi… |
WPGraphQL |
WPGraphQL |
2026-10-30T15:16:01.901Z | 2026-10-30T15:19:18.275Z |
| cve-2026-116773 | russh's SSH client is susceptible to unbounded allocat… |
Eugeny |
russh |
2026-10-27T20:23:25.559Z | 2026-10-30T15:17:49.289Z | |
| cve-2026-119570 | 2.3 (v4.0) 3.1 (v3.1) | Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Fie… |
parse-community |
parse-server |
2026-10-30T13:18:10.194Z | 2026-10-30T15:17:47.332Z |
| cve-2026-119574 | 8.2 (v4.0) 5.9 (v3.1) | Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial… |
traefik |
traefik |
2026-10-30T13:18:12.970Z | 2026-10-30T15:17:13.625Z |
| cve-2026-114463 | N/A | CVE-2026-114463 |
Nous Research |
Hermes Agent |
2026-10-21T15:01:02.634Z | 2026-10-30T15:16:36.992Z |
| cve-2026-116582 | Seroval: Script injection through RegExp sources in se… |
lxsmnsyc |
seroval |
2026-10-26T20:46:46.069Z | 2026-10-30T15:16:29.460Z | |
| cve-2026-119720 | 6.8 (v4.0) 5.5 (v3.1) | Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Boun… |
Blender Foundation |
Blender |
2026-10-30T15:16:17.041Z | 2026-10-30T15:16:17.041Z |
| cve-2026-119708 | 7.1 (v4.0) 6.5 (v3.1) | abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File… |
colinin |
abp-next-admin |
2026-10-30T15:16:08.776Z | 2026-10-30T15:16:08.776Z |
| cve-2026-119704 | 5.3 (v4.0) 6.8 (v3.1) | Bastille through 1.4.4 Jail Escape via Symlink Followi… |
BastilleBSD |
bastille |
2026-10-30T15:16:04.687Z | 2026-10-30T15:16:04.687Z |
| cve-2026-113799 | Slack Morphism verifier errors disclose valid HMACs in… |
abdolence |
slack-morphism-rust |
2026-10-21T16:15:10.051Z | 2026-10-30T15:14:24.016Z | |
| cve-2026-116590 | snappy-java: JVM crash from unchecked ranges in Snappy… |
xerial |
snappy-java |
2026-10-26T21:48:15.468Z | 2026-10-30T15:12:40.754Z | |
| cve-2024-6423 | 4 (v3.1) | Sensitive Data Exposure via URL Parameters in Multiple… |
WSO2 |
WSO2 API Manager |
2026-10-21T13:56:26.552Z | 2026-10-30T15:11:58.008Z |
| cve-2026-54238 | Supabase Realtime: Expired JWTs with string exp are ac… |
supabase |
realtime |
2026-10-22T17:22:50.862Z | 2026-10-30T15:11:34.608Z | |
| cve-2026-46652 | Path traversal via HTTP `Content-Disposition` header i… |
intranda |
goobi-viewer-core |
2026-10-23T14:15:46.415Z | 2026-10-30T15:10:02.376Z | |
| cve-2026-55486 | Goobi viewer: IIIF Auth 2.0 origin parameter unsanitiz… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:42.732Z | 2026-10-30T15:08:40.244Z | |
| cve-2025-31704 | 9.8 (v3.1) | Dahua Intelligent Connection Center command injection |
Dahua |
Intelligent Connection Center |
2026-10-30T10:25:46.561Z | 2026-10-30T15:07:34.049Z |
| cve-2026-101209 | 2.7 (v3.1) | Dell OpenManage Enterprise, versions prior to 4.8… |
Dell |
OpenManage Enterprise |
2026-10-30T12:07:14.750Z | 2026-10-30T15:07:33.251Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-519 | Multiples vulnérabilités dans Microsoft Word et Microsoft Office Web Apps | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-518 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-517 | Multiples vulnérabilités dans Microsoft Exchange Server Could | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-516 | Vulnérabilité dans le composant graphique de Microsoft Windows | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-515 | Vulnérabilité dans Microsoft VBScript Scripting Engine | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-514 | Vulnérabilité dans Cisco Unified Communications Domain Manager | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-513 | Multiples vulnérabilités dans les produits IBM | 2014-12-10T00:00:00.000000 | 2014-12-10T00:00:00.000000 |
| certfr-2014-avi-512 | Multiples vulnérabilités dans plusieurs produits DNS | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-511 | Vulnérabilité dans Cisco Unified Computing System Manager | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-510 | Vulnérabilité dans Citrix CloudPlatform | 2014-12-09T00:00:00.000000 | 2014-12-09T00:00:00.000000 |
| certfr-2014-avi-509 | Multiples vulnérabilités dans les produits IBM | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-508 | Multiples vulnérabilités dans MediaWiki | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-507 | Multiples vulnérabilités dans VMware | 2014-12-08T00:00:00.000000 | 2014-12-08T00:00:00.000000 |
| certfr-2014-avi-506 | Multiples vulnérabilités dans phpMyAdmin | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-505 | Multiples vulnérabilités dans Apple Safari | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-504 | Multiples vulnérabilités dans Citrix XenServer | 2014-12-05T00:00:00.000000 | 2014-12-05T00:00:00.000000 |
| certfr-2014-avi-503 | Multiples vulnérabilités dans les produits Mozilla | 2014-12-02T00:00:00.000000 | 2014-12-02T00:00:00.000000 |
| certfr-2014-avi-502 | Multiples vulnérabilités dans les produits F5 | 2014-11-28T00:00:00.000000 | 2014-11-28T00:00:00.000000 |
| certfr-2014-avi-501 | Multiples vulnérabilités dans Wordpress | 2014-11-28T00:00:00.000000 | 2014-11-28T00:00:00.000000 |
| certfr-2014-avi-500 | Multiples vulnérabilités dans les systèmes SCADA Siemens | 2014-11-27T00:00:00.000000 | 2014-11-27T00:00:00.000000 |
| certfr-2014-avi-499 | Multiples vulnérabilités dans les produits F5 | 2014-11-27T00:00:00.000000 | 2014-11-27T00:00:00.000000 |
| certfr-2014-avi-498 | Multiples vulnérabilités dans Docker | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-497 | Vulnérabilité dans Google Chrome | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-496 | Vulnérabilité dans Adobe Flash Player | 2014-11-26T00:00:00.000000 | 2014-11-26T00:00:00.000000 |
| certfr-2014-avi-495 | Multiples vulnérabilités dans le noyau linux Ubuntu | 2014-11-25T00:00:00.000000 | 2014-11-25T00:00:00.000000 |
| certfr-2014-avi-494 | Multiples vulnérabilités dans phpMyAdmin | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-493 | Multiples vulnérabilités dans Asterisk | 2014-11-24T00:00:00.000000 | 2014-11-24T00:00:00.000000 |
| certfr-2014-avi-492 | Vulnérabilité dans Xen | 2014-11-21T00:00:00.000000 | 2014-11-21T00:00:00.000000 |
| certfr-2014-avi-491 | Vulnérabilité dans le smartphone P7 Huawei | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |
| certfr-2014-avi-490 | Multiples vulnérabilités dans Drupal | 2014-11-20T00:00:00.000000 | 2014-11-20T00:00:00.000000 |