Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103518 | FluentCart A New Era of eCommerce <= 1.7.0 - Authentic… |
wpmanageninja |
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler |
2026-10-16T03:38:40.123Z | 2026-10-16T15:09:41.350Z | |
| cve-2026-77829 | Cooked <= 1.16.1 - Authenticated (Contributor+) Stored… |
goratech |
Cooked – Recipe Management |
2026-10-16T03:38:39.787Z | 2026-10-16T16:20:03.763Z | |
| cve-2026-93535 | WP Dark Mode – Improve Accessibility with AI Powered D… |
wppool |
Dark Mode – Improve Accessibility with AI Powered Dark Theme |
2026-10-16T03:38:39.317Z | 2026-10-16T14:39:06.770Z | |
| cve-2026-111446 | 8.6 (v3.1) | Wheels 4.0.0 through 4.1.2 exposes password-less … |
Wheels |
Wheels |
2026-10-16T03:37:32.158Z | 2026-10-16T16:20:50.474Z |
| cve-2026-111445 | 8.1 (v3.1) | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces … |
Wheels |
Wheels |
2026-10-16T03:35:00.952Z | 2026-10-19T18:42:15.796Z |
| cve-2026-111444 | 9.8 (v3.1) | Wheels through 4.1.2 allows SQL injection on MySQ… |
Wheels |
Wheels |
2026-10-16T03:31:30.485Z | 2026-10-16T12:32:27.499Z |
| cve-2026-111443 | 6.5 (v3.1) | Wheels 4.0.6 through 4.1.2 lets an unauthenticate… |
Wheels |
Wheels |
2026-10-16T03:28:28.644Z | 2026-10-16T15:01:15.161Z |
| cve-2026-111442 | 5.3 (v4.0) | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x… |
BackdropCMS |
Backdrop |
2026-10-16T03:09:43.812Z | 2026-10-21T02:10:42.533Z |
| cve-2026-109813 | 8.6 (v4.0) | Shared Hard-coded Root CA Private Key |
Moxa |
AIG-302 Series |
2026-10-16T02:57:52.388Z | 2026-10-16T13:54:15.659Z |
| cve-2026-109812 | 6.9 (v4.0) | Missing Authorization on Secret Endpoints |
Moxa |
AIG-302 Series |
2026-10-16T02:54:46.573Z | 2026-10-16T16:21:35.405Z |
| cve-2026-100159 | Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Sh… |
ays-pro |
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups |
2026-10-16T02:26:09.256Z | 2026-10-16T15:09:41.509Z | |
| cve-2026-105228 | 7 (v4.0) | ISPSoft Out-of-Bounds Read Vulnerability |
Deltaww |
ISPSoft |
2026-10-16T01:27:55.508Z | 2026-10-16T16:22:08.950Z |
| cve-2026-105227 | 7 (v4.0) | ISPSoft Out-of-Bounds Read Vulnerability |
Deltaww |
ISPSoft |
2026-10-16T01:27:28.267Z | 2026-10-16T16:22:37.872Z |
| cve-2026-111389 | 8.3 (v4.0) 7.7 (v3.1) | Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Mi… |
frappe |
hrms |
2026-10-16T01:17:57.752Z | 2026-10-18T12:03:17.805Z |
| cve-2026-111388 | 5.3 (v4.0) 5.4 (v3.1) | Frappe before 16.33.0 restrict_ip Allowlist Bypass via… |
frappe |
frappe |
2026-10-16T01:17:56.859Z | 2026-10-16T16:23:33.709Z |
| cve-2026-111387 | 7.1 (v4.0) 6.5 (v3.1) | Nezha 2.2.5 before 2.3.15 Information Disclosure via D… |
nezhahq |
nezha |
2026-10-16T01:17:55.957Z | 2026-10-16T17:07:24.986Z |
| cve-2026-111386 | 5.3 (v4.0) 4.3 (v3.1) | Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enume… |
nezhahq |
nezha |
2026-10-16T01:17:54.995Z | 2026-10-16T13:56:01.330Z |
| cve-2026-111385 | 6.3 (v4.0) 4.8 (v3.1) | Nezha 2.1.0 before 2.3.15 Host Header Injection via MC… |
nezhahq |
nezha |
2026-10-16T01:17:54.057Z | 2026-10-21T02:07:31.134Z |
| cve-2026-111384 | 7.1 (v4.0) 6.5 (v3.1) | Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File M… |
nezhahq |
nezha |
2026-10-16T01:17:53.095Z | 2026-10-23T19:42:19.460Z |
| cve-2026-111383 | 7.1 (v4.0) 6.5 (v3.1) | Nezha 2.0.13 before 2.3.15 Denial of Service via /api/… |
nezhahq |
nezha |
2026-10-16T01:17:52.239Z | 2026-10-16T16:24:21.877Z |
| cve-2026-111382 | 8.7 (v4.0) 8.8 (v3.1) | FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC4… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:51.334Z | 2026-10-16T17:07:31.487Z |
| cve-2026-111381 | 7 (v4.0) 7.3 (v3.1) | FreeRDP before 3.32.0 Heap Buffer Overflow via Persist… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:50.516Z | 2026-10-28T19:04:03.455Z |
| cve-2026-111380 | 8.7 (v4.0) 8.8 (v3.1) | FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin A… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:48.329Z | 2026-10-21T02:06:15.611Z |
| cve-2026-111379 | 7 (v4.0) 7.3 (v3.1) | FreeRDP before 3.32.0 Heap Buffer Overflow via persist… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:47.354Z | 2026-10-28T19:04:34.300Z |
| cve-2026-111378 | 8.7 (v4.0) 7.5 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exh… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:46.340Z | 2026-10-16T16:25:12.637Z |
| cve-2026-111377 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Stat… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:45.045Z | 2026-10-16T17:07:38.827Z |
| cve-2026-111376 | 2.3 (v4.0) 5 (v3.1) | FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Window… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:43.621Z | 2026-10-16T13:58:15.578Z |
| cve-2026-111375 | 6.3 (v4.0) 4.8 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAI… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:42.614Z | 2026-10-21T02:02:11.431Z |
| cve-2026-111374 | 6 (v4.0) 5.3 (v3.1) | FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion … |
FreeRDP |
FreeRDP |
2026-10-16T01:17:41.556Z | 2026-10-16T18:05:37.109Z |
| cve-2026-111373 | 6.9 (v4.0) 5.3 (v3.1) | FreeRDP before 3.32.0 NULL Dereference via Zero-Length… |
FreeRDP |
FreeRDP |
2026-10-16T01:17:40.463Z | 2026-10-16T16:25:47.580Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-436 | Multiples vulnérabilités dans les produits Apple | 2014-10-17T00:00:00.000000 | 2014-10-20T00:00:00.000000 |
| certfr-2014-avi-435 | Multiples vulnérabilités dans OpenSSL | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-434 | Vulnérabilité dans Drupal | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-433 | Multiples vulnérabilités dans les produits Cisco | 2014-10-16T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-432 | Multiples vulnérabilités dans les produits Mozilla | 2014-10-15T00:00:00.000000 | 2014-10-16T00:00:00.000000 |
| certfr-2014-avi-431 | Multiples vulnérabilités dans Adobe Flash Player | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-430 | Multiples vulnérabilités dans Adobe ColdFusion | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-429 | Multiples vulnérabilités dans Oracle Java SE | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-428 | Multiples vulnérabilités dans Oracle Database Server | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-427 | Multiples vulnérabilités dans Oracle MySQL | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-426 | Multiples vulnérabilités dans les solutions de virtualisation d'Oracle | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-425 | Multiples vulnérabilités dans la suite de produits Sun de Oracle | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-424 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-423 | Multiples vulnérabilités dans Microsoft .NET Framework | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-422 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-421 | Vulnérabilité dans Microsoft ASP.NET MVC | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-420 | Vulnérabilité dans Microsoft Windows OLE | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-419 | Vulnérabilité dans Microsoft Word et Microsoft Office Web Apps | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-418 | Vulnérabilité dans le service Message Queuing de Microsoft Windows | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-417 | Vulnérabilité dans le pilote FAT32 de Microsoft Windows | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-416 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2014-10-14T00:00:00.000000 | 2014-10-14T00:00:00.000000 |
| certfr-2014-avi-415 | Multiples vulnérabilités dans les systèmes SCADA Siemens | 2014-10-13T00:00:00.000000 | 2014-10-13T00:00:00.000000 |
| certfr-2014-avi-414 | Vulnérabilité dans Huawei E355 | 2014-10-13T00:00:00.000000 | 2014-10-13T00:00:00.000000 |
| certfr-2014-avi-413 | Multiples vulnérabilités dans le noyau Ubuntu | 2014-10-10T00:00:00.000000 | 2014-10-10T00:00:00.000000 |
| certfr-2014-avi-412 | Multiples vulnérabilités dans Juniper | 2014-10-09T00:00:00.000000 | 2014-10-09T00:00:00.000000 |
| certfr-2014-avi-411 | Multiples vulnérabilités dans Huawei E5332 | 2014-10-09T00:00:00.000000 | 2014-10-09T00:00:00.000000 |
| certfr-2014-avi-410 | Multiples vulnérabilités dans Cisco ASA | 2014-10-09T00:00:00.000000 | 2014-10-09T00:00:00.000000 |
| certfr-2014-avi-409 | Multiples vulnérabilités dans Huawei | 2014-10-08T00:00:00.000000 | 2014-10-08T00:00:00.000000 |
| certfr-2014-avi-408 | Multiples vulnérabilités dans Google Chrome | 2014-10-08T00:00:00.000000 | 2014-10-08T00:00:00.000000 |
| certfr-2014-avi-407 | Multiples vulnérabilités dans Squid | 2014-10-08T00:00:00.000000 | 2014-10-08T00:00:00.000000 |