Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111323 | 6.9 (v4.0) 5.3 (v3.1) | RedAmon through 7.0.1 Unauthenticated SSRF via /tradec… |
samugit83 |
RedAmon |
2026-10-15T21:43:31.708Z | 2026-10-16T18:02:23.421Z |
| cve-2026-111322 | 9.3 (v4.0) 9.8 (v3.1) | Archon 0.2.13 through 0.11.1 Missing Authentication vi… |
coleam00 |
Archon |
2026-10-15T21:43:31.045Z | 2026-10-16T19:41:55.935Z |
| cve-2026-111321 | 5.3 (v4.0) 5.4 (v3.1) | TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].ur… |
TaskingAI |
TaskingAI |
2026-10-15T21:43:30.254Z | 2026-10-16T17:08:55.995Z |
| cve-2026-111320 | 6.9 (v4.0) 6.5 (v3.1) | ValueCell through 0.1.20 Unauthenticated SSRF via /api… |
ValueCell-ai |
ValueCell |
2026-10-15T21:43:29.519Z | 2026-10-16T14:31:07.040Z |
| cve-2026-111313 | 7.1 (v4.0) 6.5 (v3.1) | JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch |
DaKheera47 |
JobOps |
2026-10-15T21:43:28.822Z | 2026-10-21T01:41:31.540Z |
| cve-2026-111312 | 9.2 (v4.0) 7.7 (v3.1) | OpenHealth through 0.2.0 Missing Authentication via /a… |
OpenHealthForAll |
OpenHealth |
2026-10-15T21:43:28.153Z | 2026-10-23T19:49:35.185Z |
| cve-2026-111284 | 5.1 (v4.0) 5.4 (v3.1) | Aureus ERP through 1.6.0 Stored XSS via Time Off Holid… |
Webkul |
Aureus ERP |
2026-10-15T21:43:27.434Z | 2026-10-16T19:42:44.500Z |
| cve-2026-111283 | 9.5 (v4.0) 9 (v3.1) | BMC Helix Network Management 26.3.00 before 26.3.01 Au… |
BMC Helix |
BMC Helix Network Management |
2026-10-15T21:43:26.742Z | 2026-10-20T10:46:34.636Z |
| cve-2026-111282 | 8.8 (v4.0) 8.2 (v3.1) | iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0… |
driftregion |
iso14229 |
2026-10-15T21:43:26.018Z | 2026-10-16T18:57:41.530Z |
| cve-2026-111281 | 9.3 (v4.0) 9.8 (v3.1) | Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode … |
Jooan |
JA-A12 |
2026-10-15T21:43:25.321Z | 2026-10-21T01:40:14.038Z |
| cve-2026-111280 | 8.3 (v4.0) 7.4 (v3.1) | snap7 through 1.4.3 Out-of-Bounds Write via TSnap7Micr… |
davenardella |
snap7 |
2026-10-15T21:43:24.650Z | 2026-10-29T16:55:58.134Z |
| cve-2026-111279 | 8.7 (v4.0) 7.5 (v3.1) | Dragonfly through 2.0.2 Unbounded Memory Allocation vi… |
dragonflydb |
dragonfly |
2026-10-15T21:43:23.862Z | 2026-10-16T19:43:45.103Z |
| cve-2026-111278 | 6.9 (v4.0) 5.3 (v3.1) | NivoCart through 2.5.1 CAPTCHA Bypass via Answer Discl… |
nivocart |
nivocart |
2026-10-15T21:43:23.205Z | 2026-10-16T17:09:17.598Z |
| cve-2026-111277 | 8.7 (v4.0) 7.5 (v3.1) | NivoCart through 2.5.1 Guest Order Invoice Disclosure … |
nivocart |
nivocart |
2026-10-15T21:43:22.473Z | 2026-10-16T14:36:04.161Z |
| cve-2026-111275 | 6.9 (v4.0) 6.1 (v3.1) | nifti_clib through 3.0.1 Stack Out-of-Bounds Access vi… |
NIFTI-Imaging |
nifti_clib |
2026-10-15T21:43:21.786Z | 2026-10-21T01:37:40.421Z |
| cve-2026-111274 | 6.8 (v4.0) 5.5 (v3.1) | unarr through 1.1.1 Heap Out-of-Bounds Read via zip_pa… |
selmf |
unarr |
2026-10-15T21:43:20.415Z | 2026-11-02T02:21:48.872Z |
| cve-2026-111273 | 6.9 (v4.0) 6.1 (v3.1) | unarr through 1.1.1 Off-by-One Heap Buffer Overflow vi… |
selmf |
unarr |
2026-10-15T21:43:19.717Z | 2026-10-16T19:39:08.849Z |
| cve-2026-111272 | 6.8 (v4.0) 5.5 (v3.1) | LibRaw through 0.22.2 Heap Out-of-Bounds Read via pars… |
LibRaw |
LibRaw |
2026-10-15T21:43:19.039Z | 2026-10-16T17:09:25.683Z |
| cve-2026-111271 | 6.8 (v4.0) 5.5 (v3.1) | libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via… |
Konstanty Bialkowski |
libmodplug |
2026-10-15T21:43:18.348Z | 2026-10-16T14:39:25.166Z |
| cve-2026-111270 | 6.9 (v4.0) 6.1 (v3.1) | libmodplug through 0.8.9.1 Heap Out-of-Bounds Write vi… |
Konstanty Bialkowski |
libmodplug |
2026-10-15T21:43:17.665Z | 2026-10-21T01:33:42.918Z |
| cve-2026-111269 | 6.9 (v4.0) 6.1 (v3.1) | libical through 4.0.6 Heap Out-of-Bounds Read via ical… |
libical |
libical |
2026-10-15T21:43:16.966Z | 2026-10-26T14:15:58.734Z |
| cve-2024-58397 | 6.9 (v4.0) 6.1 (v3.1) | MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4Fil… |
enzo1982 |
mp4v2 |
2026-10-15T21:43:16.269Z | 2026-10-16T19:45:43.877Z |
| cve-2026-94135 | Apache Airflow SFTP provider: Async SFTP hook disables… |
Apache Software Foundation |
Apache Airflow SFTP provider |
2026-10-15T21:40:24.810Z | 2026-10-16T14:46:22.385Z | |
| cve-2026-96806 | Apache Airflow Keycloak provider: Keycloak auth manage… |
Apache Software Foundation |
Apache Airflow Keycloak provider |
2026-10-15T21:40:20.555Z | 2026-10-16T14:50:50.600Z | |
| cve-2026-94134 | Apache Airflow SSH provider, Apache Airflow SFTP provi… |
Apache Software Foundation |
Apache Airflow SSH provider |
2026-10-15T21:39:03.081Z | 2026-10-16T14:53:59.032Z | |
| cve-2026-92228 | Apache Airflow Keycloak provider: Keycloak multi-team … |
Apache Software Foundation |
Apache Airflow Keycloak provider |
2026-10-15T21:37:54.612Z | 2026-10-16T14:56:07.947Z | |
| cve-2026-109468 | 7.5 (v3.1) | ASP.NET Core Denial of Service Vulnerability |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-15T20:57:33.441Z | 2026-10-31T18:01:16.234Z |
| cve-2026-108455 | 6.5 (v3.1) | Microsoft Office PowerPoint Information Disclosure Vul… |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-15T20:57:31.802Z | 2026-10-31T18:01:11.444Z |
| cve-2026-108454 | 6.5 (v3.1) | Microsoft Office PowerPoint Information Disclosure Vul… |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-15T20:57:31.358Z | 2026-10-31T18:01:10.860Z |
| cve-2026-108453 | 6.5 (v3.1) | Microsoft Office PowerPoint Information Disclosure Vul… |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-15T20:57:30.741Z | 2026-10-31T18:01:10.251Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-346 | Multiples vulnérabilités dans Microsoft SQL Server | 2014-08-13T00:00:00.000000 | 2014-08-13T00:00:00.000000 |
| certfr-2014-avi-345 | Vulnérabilité dans Microsoft Windows Media Player | 2014-08-13T00:00:00.000000 | 2014-08-13T00:00:00.000000 |
| certfr-2014-avi-344 | Multiples vulnérabilités dans OpenSSL | 2014-08-07T00:00:00.000000 | 2014-08-07T00:00:00.000000 |
| certfr-2014-avi-343 | Vulnérabilité dans Drupal | 2014-08-07T00:00:00.000000 | 2014-08-07T00:00:00.000000 |
| certfr-2014-avi-342 | Multiples vulnérabilités dans WordPress | 2014-08-07T00:00:00.000000 | 2014-08-07T00:00:00.000000 |
| certfr-2014-avi-341 | Vulnérabilité dans les produits Cisco | 2014-08-07T00:00:00.000000 | 2014-08-07T00:00:00.000000 |
| certfr-2014-avi-340 | Vulnérabilité dans Huawei HiLink | 2014-08-07T00:00:00.000000 | 2014-08-07T00:00:00.000000 |
| certfr-2014-avi-339 | Vulnérabilité dans Samba | 2014-08-04T00:00:00.000000 | 2014-08-04T00:00:00.000000 |
| certfr-2014-avi-338 | Multiples vulnérabilités dans Wireshark | 2014-08-01T00:00:00.000000 | 2014-08-01T00:00:00.000000 |
| certfr-2014-avi-337 | Vulnérabilité dans IBM Tivoli Network Manager | 2014-08-01T00:00:00.000000 | 2014-08-01T00:00:00.000000 |
| certfr-2014-avi-336 | Multiples vulnérabilités dans IBM WebSphere Portal | 2014-08-01T00:00:00.000000 | 2014-08-01T00:00:00.000000 |
| certfr-2014-avi-335 | Multiples vulnérabilités dans des produits HP et H3C | 2014-07-31T00:00:00.000000 | 2014-07-31T00:00:00.000000 |
| certfr-2014-avi-334 | Multiples vulnérabilités dans le système SCADA SIMATIC WinCC de Siemens | 2014-07-30T00:00:00.000000 | 2014-07-30T00:00:00.000000 |
| certfr-2014-avi-333 | Multiples vulnérabilités dans noyau Linux Red Hat Enterprise Linux | 2014-07-30T00:00:00.000000 | 2014-07-30T00:00:00.000000 |
| certfr-2014-avi-332 | Multiples vulnérabilités dans noyau Linux de Debian | 2014-07-30T00:00:00.000000 | 2014-07-30T00:00:00.000000 |
| certfr-2014-avi-331 | Multiples vulnérabilités dans les produits Mozilla | 2014-07-23T00:00:00.000000 | 2014-07-23T00:00:00.000000 |
| certfr-2014-avi-330 | Multiples vulnérabilités dans phpMyAdmin | 2014-07-21T00:00:00.000000 | 2014-07-21T00:00:00.000000 |
| certfr-2014-avi-329 | Multiples vulnérabilités dans F5 BigIP Analytics | 2014-07-21T00:00:00.000000 | 2014-07-21T00:00:00.000000 |
| certfr-2014-avi-328 | Multiples vulnérabilités dans Cisco Wireless Residential Gateway | 2014-07-17T00:00:00.000000 | 2014-07-17T00:00:00.000000 |
| certfr-2014-avi-327 | Multiples vulnérabilités dans Google Chrome | 2014-07-17T00:00:00.000000 | 2014-07-17T00:00:00.000000 |
| certfr-2014-avi-326 | Multiples vulnérabilités dans Drupal | 2014-07-17T00:00:00.000000 | 2014-07-17T00:00:00.000000 |
| certfr-2014-avi-325 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-07-17T00:00:00.000000 | 2014-07-17T00:00:00.000000 |
| certfr-2014-avi-324 | Multiples vulnérabilités dans Citrix XenServer | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-323 | Multiples vulnérabilités dans Oracle MySQL Product Suite | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-322 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-321 | Multiples vulnérabilités dans Oracle and Sun Systems Products Suite | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-320 | Multiples vulnérabilités dans Oracle Java SE | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-319 | Multiples vulnérabilités dans Oracle Retail | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-318 | Multiples vulnérabilités dans Oracle Communications Applications | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |
| certfr-2014-avi-317 | Multiples vulnérabilités dans Oracle Siebel | 2014-07-16T00:00:00.000000 | 2014-07-16T00:00:00.000000 |