Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115776 | Twisted: Unauthenticated Remote Denial of Service in t… |
twisted |
twisted |
2026-10-23T20:18:38.342Z | 2026-10-30T14:27:25.835Z | |
| cve-2026-82210 | Apache bRPC: Remote denial of service (crash) via malf… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T12:01:31.264Z | 2026-10-30T14:25:54.253Z | |
| cve-2026-116678 | Vaultwarden: Icon endpoint SSRF fix bypass via second-… |
dani-garcia |
vaultwarden |
2026-10-27T17:27:03.509Z | 2026-10-30T14:24:42.185Z | |
| cve-2026-61729 | SOCFortress CoPilot: Hardcoded Default Header Secret -… |
socfortress |
CoPilot |
2026-10-30T14:24:04.762Z | 2026-10-30T14:24:04.762Z | |
| cve-2026-115914 | vLLM DeepSeek-OCR image processing vulnerable to denia… |
vllm-project |
vllm |
2026-10-26T17:08:20.839Z | 2026-10-30T14:23:21.521Z | |
| cve-2026-115918 | vLLM: Responses API bypasses trust_request_chat_templa… |
vllm-project |
vllm |
2026-10-26T17:21:49.719Z | 2026-10-30T14:22:20.698Z | |
| cve-2026-61728 | SOCFortress CoPilot: Stored comment and SOC-field XSS … |
socfortress |
CoPilot |
2026-10-30T14:22:18.332Z | 2026-10-30T14:22:18.332Z | |
| cve-2026-81755 | Apache bRPC: Uncontrolled Resource Consumption via Exc… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:58:26.104Z | 2026-10-30T14:22:06.684Z | |
| cve-2026-111487 | 4.3 (v4.0) | Out-of-bounds write vulnerability in the assimp scene … |
qt |
Qt Framework |
2026-10-30T14:21:23.428Z | 2026-10-30T14:21:23.428Z |
| cve-2026-119682 | 7.9 (v4.0) | Improper Access Control in Multi-Factor Authentication… |
ManageEngine |
SharePoint Manager Plus |
2026-10-30T14:21:21.154Z | 2026-10-30T14:21:21.154Z |
| cve-2026-115911 | vLLM: DoS via unbounded chat_template Jinja2 rendering… |
vllm-project |
vllm |
2026-10-26T16:47:59.377Z | 2026-10-30T14:20:51.484Z | |
| cve-2026-118256 | Vue I18n: `escapeParameter` does not escape named valu… |
intlify |
vue-i18n |
2026-10-28T18:20:14.644Z | 2026-10-30T14:19:32.716Z | |
| cve-2026-80463 | Apache bRPC: Unbounded Memory Accumulation in Stream M… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:57:30.211Z | 2026-10-30T14:18:35.910Z | |
| cve-2026-108696 | 5.3 (v4.0) 4.3 (v3.1) | CoreShop through 1.5.5 Authorization Bypass via OrderC… |
CoreUnion |
CoreShop |
2026-10-11T01:35:45.561Z | 2026-10-30T14:18:10.621Z |
| cve-2026-55888 | XDG Desktop Portal: Arbitrary file access via SaveFile… |
flatpak |
xdg-desktop-portal |
2026-10-23T12:35:23.077Z | 2026-10-30T14:18:08.807Z | |
| cve-2026-119664 | 5.3 (v4.0) 4.3 (v3.1) | Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypa… |
wannabespace |
tamery |
2026-10-30T14:16:24.007Z | 2026-10-30T14:16:24.007Z |
| cve-2026-119660 | 9.3 (v4.0) 9.8 (v3.1) | MuseBot before 2.0.0 Authentication Bypass via Hard-Co… |
yincongcyincong |
MuseBot |
2026-10-30T14:16:21.246Z | 2026-10-30T14:16:21.246Z |
| cve-2026-119656 | 8.7 (v4.0) 7.5 (v3.1) | CoreShop through 1.5.5 SQL Injection via order Paramet… |
CoreUnion |
CoreShop |
2026-10-30T14:16:18.408Z | 2026-10-30T14:16:18.408Z |
| cve-2026-119652 | 5.3 (v4.0) 4.3 (v3.1) | HuLa-Server through 3.0.7 IDOR via /user/friend/page F… |
HuLaSpark |
HuLa-Server |
2026-10-30T14:16:15.521Z | 2026-10-30T14:16:15.521Z |
| cve-2026-119648 | 5.3 (v4.0) 4.3 (v3.1) | BlueKing CMDB through 3.14.6 Missing Authorization via… |
TencentBlueKing |
bk-cmdb |
2026-10-30T14:16:12.678Z | 2026-10-30T14:16:12.678Z |
| cve-2026-119644 | 5.3 (v4.0) 5.4 (v3.1) | Blossom through 1.17.1 Authorization Bypass via Pictur… |
blossom-editor |
Blossom |
2026-10-30T14:16:08.905Z | 2026-10-30T14:16:08.905Z |
| cve-2026-119680 | 8.5 (v4.0) | Stored Cross-Site Scripting (XSS) in SharePoint Manage… |
ManageEngine |
SharePoint Manager Plus |
2026-10-30T14:14:24.193Z | 2026-10-30T14:14:24.193Z |
| cve-2026-61916 | Apache bRPC: Out-of-bounds Read in URL and Header Look… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:42:46.023Z | 2026-10-30T14:14:07.721Z | |
| cve-2026-115907 | zip: legacy Shrink/Reduce/Implode decoder: denial of s… |
zip-rs |
zip2 |
2026-10-26T16:32:15.373Z | 2026-10-30T14:13:49.386Z | |
| cve-2026-61902 | Apache bRPC: Memory Exhaustion Through Inconsistent Me… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:41:56.277Z | 2026-10-30T14:10:48.052Z | |
| cve-2026-100355 | Campfire vulnerable to SSRF via incomplete private-net… |
basecamp |
once-campfire |
2026-10-30T14:10:34.695Z | 2026-10-30T14:10:34.695Z | |
| cve-2026-111498 | 4.7 (v3.1) | OpenManage Enterprise, versions prior to 4.8.0, c… |
Dell |
OpenManage Enterprise |
2026-10-30T13:43:46.711Z | 2026-10-30T14:09:53.946Z |
| cve-2026-86715 | 7.1 (v3.1) | Clear Text Storage of Password in Crypttech's Vatos DLP |
Crypttech Crypto and Informatics Technologies Industry and Trade Inc. |
Vatos DLP |
2026-10-30T13:41:49.240Z | 2026-10-30T14:09:21.809Z |
| cve-2026-119599 | 5.3 (v4.0) 4.3 (v3.1) | AxonHub through 1.0.0-beta11 Privilege Escalation via … |
looplj |
AxonHub |
2026-10-30T13:18:18.486Z | 2026-10-30T14:07:11.920Z |
| cve-2026-58064 | Apache bRPC: Denial of Service via Unbounded Redis Inl… |
Apache Software Foundation |
Apache bRPC |
2026-10-21T11:41:13.666Z | 2026-10-30T14:05:38.961Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-459 | Multiples vulnérabilités dans le noyau linux de Debian | 2014-11-03T00:00:00.000000 | 2014-11-03T00:00:00.000000 |
| certfr-2014-avi-458 | Multiples vulnérabilités dans Aruba Networks ClearPass | 2014-10-31T00:00:00.000000 | 2014-10-31T00:00:00.000000 |
| certfr-2014-avi-457 | Multiples vulnérabilités dans Cisco Unified Communications Manager | 2014-10-31T00:00:00.000000 | 2014-10-31T00:00:00.000000 |
| certfr-2014-avi-456 | Multiples vulnérabilités dans le noyau Linux Ubuntu | 2014-10-31T00:00:00.000000 | 2014-10-31T00:00:00.000000 |
| certfr-2014-avi-455 | Multiples vulnérabilités dans le noyau linux de Red Hat | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-454 | Vulnérabilité dans les produits Cisco | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-453 | Vulnérabilité dans GNU Wget | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-452 | Multiples vulnérabilités dans Qemu | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-451 | Vulnérabilité dans Nginx | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-450 | Multiples vulnérabilités dans Oracle Linux | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-449 | Multiples vulnérabilités dans IBM Tivoli Management Framework | 2014-10-29T00:00:00.000000 | 2014-10-29T00:00:00.000000 |
| certfr-2014-avi-448 | Multiples vulnérabilités dans MariaDB | 2014-10-28T00:00:00.000000 | 2014-10-28T00:00:00.000000 |
| certfr-2014-avi-447 | Vulnérabilité dans EMC Avamar Data Store et Virtual Edition | 2014-10-28T00:00:00.000000 | 2014-10-28T00:00:00.000000 |
| certfr-2014-avi-446 | Vulnérabilité dans EMC NetWorker Module | 2014-10-28T00:00:00.000000 | 2014-10-28T00:00:00.000000 |
| certfr-2014-avi-445 | Vulnérabilité dans le noyau Linux de Red Hat | 2014-10-28T00:00:00.000000 | 2014-10-28T00:00:00.000000 |
| certfr-2014-avi-444 | Multiples vulnérabilités dans les produits Huawei | 2014-10-27T00:00:00.000000 | 2014-10-27T00:00:00.000000 |
| certfr-2014-avi-443 | Multiples vulnérabilités dans TYPO3 | 2014-10-27T00:00:00.000000 | 2014-10-27T00:00:00.000000 |
| certfr-2014-avi-442 | Multiples vulnérabilités dans DokuWiki | 2014-10-27T00:00:00.000000 | 2014-10-27T00:00:00.000000 |
| certfr-2014-avi-441 | Multiples vulnérabilités dans Apple QuickTime | 2014-10-23T00:00:00.000000 | 2014-10-23T00:00:00.000000 |
| certfr-2014-avi-440 | Vulnérabilité dans VMWare VSphere Data Protection | 2014-10-23T00:00:00.000000 | 2014-10-23T00:00:00.000000 |
| certfr-2014-avi-439 | Multiples vulnérabilités dans Apple iOS | 2014-10-23T00:00:00.000000 | 2014-10-23T00:00:00.000000 |
| certfr-2014-avi-438 | Multiples vulnérabilités dans Pidgin | 2014-10-23T00:00:00.000000 | 2014-10-23T00:00:00.000000 |
| certfr-2014-avi-437 | Vulnérabilité dans Huawei Mobile Partner | 2014-10-22T00:00:00.000000 | 2014-10-22T00:00:00.000000 |
| certfr-2014-avi-436 | Multiples vulnérabilités dans les produits Apple | 2014-10-17T00:00:00.000000 | 2014-10-20T00:00:00.000000 |
| certfr-2014-avi-435 | Multiples vulnérabilités dans OpenSSL | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-434 | Vulnérabilité dans Drupal | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-433 | Multiples vulnérabilités dans les produits Cisco | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-432 | Multiples vulnérabilités dans les produits Mozilla | 2014-10-15T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-431 | Multiples vulnérabilités dans Adobe Flash Player | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-430 | Multiples vulnérabilités dans Adobe ColdFusion | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |