Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111235 | 9.1 (v3.1) | OpenNMS REST authorization bypass via non-canonical HT… |
The OpenNMS Group |
Meridian |
2026-10-15T18:45:06.685Z | 2026-10-16T19:59:35.614Z |
| cve-2026-62322 | Python Social Auth: Login CSRF in LINE backend (LineOA… |
python-social-auth |
social-core |
2026-10-15T18:45:06.452Z | 2026-10-28T19:54:37.324Z | |
| cve-2026-108334 | 7.4 (v3.1) | Github.com/kuadrant/kuadrant-operator/internal/wasm: g… |
Red Hat |
Red Hat Connectivity Link 1.4 |
2026-10-15T18:44:42.472Z | 2026-11-05T16:46:05.317Z |
| cve-2026-109932 | 5.9 (v3.1) | undici WebSocket client vulnerable to Denial of Servic… |
undici |
undici |
2026-10-15T18:44:22.571Z | 2026-10-16T20:00:38.791Z |
| cve-2026-104150 | AdonisJS HTTP Server: Uncontrolled Resource Consumptio… |
adonisjs |
http-server |
2026-10-15T18:42:54.929Z | 2026-10-15T19:52:22.221Z | |
| cve-2026-57496 | NetLicensing MCP Server: REST Path Traversal Bypasses … |
Labs64 |
NetLicensing-MCP |
2026-10-15T18:40:16.558Z | 2026-10-21T01:06:14.636Z | |
| cve-2026-87018 | 7.5 (v3.1) | undici vulnerable to Denial of Service via TLS 1.2 cer… |
undici |
undici |
2026-10-15T18:38:25.613Z | 2026-10-16T20:01:29.402Z |
| cve-2026-105660 | 6.9 (v4.0) | Unvalidated HTTP/1 request-target authority lets a cli… |
mtrudel |
bandit |
2026-10-15T18:37:02.485Z | 2026-10-16T20:02:38.784Z |
| cve-2026-104828 | HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter… |
HtmlUnit |
htmlunit-neko |
2026-10-15T18:36:49.613Z | 2026-10-21T01:04:51.279Z | |
| cve-2026-92707 | MessagePack: Nested arrays can blow past buffer length… |
MessagePack-CSharp |
MessagePack-CSharp |
2026-10-15T18:35:49.074Z | 2026-10-15T20:12:15.468Z | |
| cve-2026-109383 | 7.4 (v3.1) | undici vulnerable to TLS certificate validation bypass… |
undici |
undici |
2026-10-15T18:34:01.468Z | 2026-10-16T20:03:30.839Z |
| cve-2026-57183 | Scoold: Forged JWT Accepted as Admin API Token Allowin… |
Erudika |
scoold |
2026-10-15T18:32:47.861Z | 2026-10-28T19:59:31.742Z | |
| cve-2026-55840 | Scoold: Open Redirect in getBackToUrl() allows phishin… |
Erudika |
scoold |
2026-10-15T18:31:57.916Z | 2026-10-15T20:16:08.554Z | |
| cve-2026-55842 | Scoold: CORS wildcard origin with credentials enabled … |
Erudika |
scoold |
2026-10-15T18:30:57.426Z | 2026-10-16T17:11:47.105Z | |
| cve-2026-102946 | joserfc: JWS signature verification bypass via empty s… |
authlib |
joserfc |
2026-10-15T18:28:06.913Z | 2026-10-15T19:53:09.069Z | |
| cve-2026-109829 | 7.4 (v3.1) | undici vulnerable to cache poisoning and cross-user di… |
undici |
undici |
2026-10-15T18:28:04.954Z | 2026-10-16T20:04:09.504Z |
| cve-2026-55872 | GYM One admin user list is vulnerable to stored cross-… |
mayerbalintdev |
GYM-One |
2026-10-15T18:27:06.595Z | 2026-10-21T01:03:46.364Z | |
| cve-2026-55871 | GYM One: Improper Neutralization of Special Elements u… |
mayerbalintdev |
GYM-One |
2026-10-15T18:24:55.748Z | 2026-10-15T19:54:37.343Z | |
| cve-2026-94621 | AliasVault: Server-Side Request Forgery via DNS rebind… |
aliasvault |
aliasvault |
2026-10-15T18:23:33.174Z | 2026-10-16T17:11:53.157Z | |
| cve-2026-109841 | 5.9 (v3.1) | undici vulnerable to Subresource Integrity bypass via … |
undici |
undici |
2026-10-15T18:22:06.283Z | 2026-10-16T20:04:41.388Z |
| cve-2026-55587 | AliasVault: Browser extension WebAuthn bridge accepts … |
aliasvault |
aliasvault |
2026-10-15T18:21:53.069Z | 2026-10-28T20:01:30.746Z | |
| cve-2026-110361 | 6.5 (v3.1) | WordPress Infinite Uploads plugin <= 3.4.1 - Sensitive… |
ClikIT |
Infinite Uploads |
2026-10-15T18:21:40.608Z | 2026-10-15T20:17:18.211Z |
| cve-2026-110362 | 5.3 (v3.1) | WordPress PlanetStudio Payment Gateway plugin <= 1.3.3… |
Planet studio |
PlanetStudio Payment Gateway |
2026-10-15T18:21:16.105Z | 2026-10-16T15:09:41.704Z |
| cve-2026-104827 | react/http: Unbounded HTTP Client Response Header Buff… |
reactphp |
http |
2026-10-15T18:19:32.785Z | 2026-10-16T17:11:59.859Z | |
| cve-2026-109893 | 6.5 (v3.1) | WordPress Presto Player plugin <= 4.5.3 - Cross Site S… |
Brainstorm Force |
Presto Player |
2026-10-15T18:18:56.045Z | 2026-10-16T17:12:08.141Z |
| cve-2026-110374 | 4.3 (v3.1) | WordPress Login with phone number plugin <= 1.8.77 - B… |
Hamid Alinia |
Login with phone number |
2026-10-15T18:18:13.194Z | 2026-10-15T18:32:12.140Z |
| cve-2026-108499 | 5.3 (v3.1) | WordPress Knowledge Base plugin <= 3.2.0 - Broken Acce… |
WebberZone |
Knowledge Base |
2026-10-15T18:17:52.974Z | 2026-10-15T20:19:57.344Z |
| cve-2026-97370 | Junrar: RarVM VM_JMP maxOpCount bypass causes infinite… |
junrar |
junrar |
2026-10-15T18:17:26.167Z | 2026-10-16T17:12:14.687Z | |
| cve-2026-110364 | 5.3 (v3.1) | WordPress Flexible Quantity – Measurement Price Calcul… |
WP Desk |
Flexible Quantity – Measurement Price Calculator for WooCommerce |
2026-10-15T18:16:51.303Z | 2026-10-15T20:39:16.095Z |
| cve-2026-109924 | 5.9 (v3.1) | undici vulnerable to Denial of Service via unbounded m… |
undici |
undici |
2026-10-15T18:16:48.452Z | 2026-10-16T20:05:22.386Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-196 | Multiples vulnérabilités dans MariaDB | 2014-04-18T00:00:00.000000 | 2014-04-18T00:00:00.000000 |
| certfr-2014-avi-195 | Multiples vulnérabilités dans le système SCADA Siemens SINEMA Server | 2014-04-18T00:00:00.000000 | 2014-04-18T00:00:00.000000 |
| certfr-2014-avi-194 | Multiples vulnérabilités dans EMC Cloud Tiering Appliance | 2014-04-17T00:00:00.000000 | 2014-04-17T00:00:00.000000 |
| certfr-2014-avi-193 | Multiples vulnérabilités dans Xerox FreeFlow Print Server | 2014-04-17T00:00:00.000000 | 2014-04-17T00:00:00.000000 |
| certfr-2014-avi-192 | Vulnérabilité dans HP Network Node Manager I | 2014-04-17T00:00:00.000000 | 2014-04-17T00:00:00.000000 |
| certfr-2014-avi-191 | Vulnérabilité dans les produits F5 | 2014-04-17T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-avi-190 | Vulnérabilité dans Drupal | 2014-04-17T00:00:00.000000 | 2014-04-17T00:00:00.000000 |
| certfr-2014-avi-189 | Vulnérabilité dans strongSwan | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-188 | Multiples vulnérabilités dans Oracle MySQL | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-187 | Multiples vulnérabilités dans Oracle Virtualization | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-186 | Multiples vulnérabilités dans Oracle Solaris | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-185 | Multiples vulnérabilités dans Oracle Java SE | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-184 | Multiples vulnérabilités dans les produits Oracle PeopleSoft | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-183 | Multiples vulnérabilités dans Oracle Database | 2014-04-16T00:00:00.000000 | 2014-04-16T00:00:00.000000 |
| certfr-2014-avi-182 | Multiples vulnérabilités dans F5 ARX | 2014-04-15T00:00:00.000000 | 2014-04-15T00:00:00.000000 |
| certfr-2014-avi-181 | Multiples vulnérabilités dans les produits VMware | 2014-04-15T00:00:00.000000 | 2014-04-15T00:00:00.000000 |
| certfr-2014-avi-180 | Vulnérabilité dans plusieurs produits F5 | 2014-04-11T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-179 | Vulnérabilité dans IBM AIX | 2014-04-11T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-178 | Vulnérabilité dans plusieurs produits Sophos | 2014-04-11T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-177 | Vulnérabilité dans plusieurs produits McAfee | 2014-04-11T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-176 | Multiples vulnérabilités dans VMWare vSphere | 2014-04-11T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-175 | Vulnérabilité dans Juniper Junos | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-174 | Vulnérabilité dans Juniper Junos | 2014-04-10T00:00:00.000000 | 2014-04-11T00:00:00.000000 |
| certfr-2014-avi-173 | Vulnérabilité dans Juniper Junos | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-172 | Vulnérabilité dans Juniper Junos | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-171 | Vulnérabilité dans Juniper Junos | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-170 | Vulnérabilité dans WireShark | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-169 | Vulnérabilité dans plusieurs produits Blue Coat | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-168 | Multiples vulnérabilités dans Cisco ASA | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |
| certfr-2014-avi-167 | Vulnérabilité dans OpenVPN Access Server | 2014-04-10T00:00:00.000000 | 2014-04-10T00:00:00.000000 |