Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55453 | CUPS ipp backend status-line injection can update queu… |
OpenPrinting |
cups |
2026-10-15T17:11:21.208Z | 2026-10-16T17:12:58.110Z | |
| cve-2026-84731 | 9.3 (v4.0) 9.8 (v3.1) 10 (v2.0) | Pre-Authentication Admin Bypass and Remote Code Execut… |
Nutanix |
Acropolis Operating System (AOS) |
2026-10-15T17:10:29.432Z | 2026-10-15T19:14:57.185Z |
| cve-2026-55480 | CUPS copy_model() creates a predictable PPD tempfile w… |
OpenPrinting |
cups |
2026-10-15T17:09:33.878Z | 2026-10-20T02:59:10.167Z | |
| cve-2026-55467 | CUPS fax option values bypass the CVE-2026-34980 contr… |
OpenPrinting |
cups |
2026-10-15T17:08:24.374Z | 2026-10-15T17:49:26.673Z | |
| cve-2026-55246 | bincookie: Heap buffer overflow via unvalidated `num_p… |
Tatsh |
bincookie |
2026-10-15T17:06:59.783Z | 2026-10-15T18:27:40.897Z | |
| cve-2026-55103 | Discourse ActivityPub: Fix inbound actor validation an… |
discourse |
discourse-activity-pub |
2026-10-15T17:05:41.414Z | 2026-10-28T20:15:11.416Z | |
| cve-2026-105065 | 7.1 (v3.1) | WordPress XStore theme < 9.7.9 - Cross Site Scripting … |
8theme.com |
XStore |
2026-10-15T17:00:15.222Z | 2026-10-16T14:39:07.063Z |
| cve-2026-100409 | OpenNext Cloudflare: Cache interception can bypass mid… |
opennextjs |
opennextjs-cloudflare |
2026-10-15T16:57:50.999Z | 2026-10-15T17:50:33.255Z | |
| cve-2026-102527 | Nuxt OG Image cache poisoning through derivable cache … |
nuxt-modules |
og-image |
2026-10-15T16:55:23.150Z | 2026-10-16T17:13:07.014Z | |
| cve-2026-102631 | 5.9 (v4.0) | authd: Account takeover via username fallback in ident… |
Canonical |
authd |
2026-10-15T16:42:19.368Z | 2026-10-16T20:16:49.275Z |
| cve-2026-77466 | Lychee: Webshop payment bypass via unrestricted "Dummy… |
LycheeOrg |
Lychee |
2026-10-15T16:36:58.410Z | 2026-10-15T17:57:21.560Z | |
| cve-2026-77470 | Lychee: Webshop checkout lets the client override the … |
LycheeOrg |
Lychee |
2026-10-15T16:36:09.597Z | 2026-10-15T18:30:17.464Z | |
| cve-2026-77468 | Lychee: Missing Authentication for Critical Function a… |
LycheeOrg |
Lychee |
2026-10-15T16:35:21.137Z | 2026-10-28T20:16:47.871Z | |
| cve-2026-77467 | Lychee: A single 383-byte PDF causes ~184 seconds of C… |
LycheeOrg |
Lychee |
2026-10-15T16:34:35.236Z | 2026-10-20T02:50:18.889Z | |
| cve-2026-110812 | 9.9 (v3.1) 9.4 (v4.0) | Deserialization of untrusted data in the Gremlin graph… |
AWS |
Amazon Neptune Engine |
2026-10-15T16:34:03.381Z | 2026-10-16T18:54:14.092Z |
| cve-2026-62679 | Lychee: Path traversal in `SecurePathController` allow… |
LycheeOrg |
Lychee |
2026-10-15T16:33:43.958Z | 2026-10-16T17:13:13.881Z | |
| cve-2026-61838 | Lychee: Album password bypass in ZIP downloads |
LycheeOrg |
Lychee |
2026-10-15T16:32:37.392Z | 2026-10-15T18:31:13.925Z | |
| cve-2026-61610 | Lychee: unauthenticated photo starring reveals existen… |
LycheeOrg |
Lychee |
2026-10-15T16:26:16.585Z | 2026-10-20T02:48:31.094Z | |
| cve-2026-61611 | Lychee: Missing rate limiting on album password unlock… |
LycheeOrg |
Lychee |
2026-10-15T16:25:24.968Z | 2026-10-29T13:40:09.476Z | |
| cve-2026-57569 | Lychee: Distinct post-fix SSRF variant in Photo::fromU… |
LycheeOrg |
Lychee |
2026-10-15T16:24:34.652Z | 2026-10-15T17:58:10.062Z | |
| cve-2026-57568 | Lychee: Stored XSS via Markdown javascript: Links in P… |
LycheeOrg |
Lychee |
2026-10-15T16:22:30.323Z | 2026-10-16T17:13:21.565Z | |
| cve-2026-85634 | 8.8 (v3.1) | Wildfly-core: wildfly-core: deployer rbac role privile… |
Red Hat |
Red Hat Fuse 7 |
2026-10-15T16:08:26.875Z | 2026-11-03T16:13:54.148Z |
| cve-2026-100353 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: T… |
getkin |
kin-openapi |
2026-10-15T16:03:50.514Z | 2026-10-29T13:41:31.986Z | |
| cve-2026-100354 | kin-openapi: Uncontrolled Recursion on Circular allOf/… |
getkin |
kin-openapi |
2026-10-15T16:02:00.566Z | 2026-10-15T18:31:51.798Z | |
| cve-2026-100352 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guard… |
getkin |
kin-openapi |
2026-10-15T15:54:25.834Z | 2026-10-20T02:46:20.849Z | |
| cve-2026-100351 | kin-openapi: ValidationHandler security-requirement by… |
getkin |
kin-openapi |
2026-10-15T15:52:30.041Z | 2026-10-15T16:09:36.650Z | |
| cve-2026-100349 | kin-openapi openapi3filter: nil-pointer panic in Valid… |
getkin |
kin-openapi |
2026-10-15T15:50:37.453Z | 2026-10-16T17:13:28.236Z | |
| cve-2026-100350 | kin-openapi deepObject query decoding repeatedly compi… |
getkin |
kin-openapi |
2026-10-15T15:37:19.077Z | 2026-10-15T18:32:57.402Z | |
| cve-2026-92982 | 8.5 (v3.1) | Ansible-operator-plugins: ansible operator plugins: ar… |
Red Hat |
Red Hat Ansible Automation Platform 2.6 |
2026-10-15T15:36:57.191Z | 2026-10-30T03:10:33.755Z |
| cve-2026-100347 | kin-openapi: Unauthenticated panic (DoS) in openapi3fi… |
getkin |
kin-openapi |
2026-10-15T15:35:43.874Z | 2026-10-15T16:21:33.027Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-136 | Vulnérabilité dans nginx | 2014-03-20T00:00:00.000000 | 2014-03-20T00:00:00.000000 |
| certfr-2014-avi-135 | Vulnérabilité dans EMC Connectrix Manager | 2014-03-20T00:00:00.000000 | 2014-03-20T00:00:00.000000 |
| certfr-2014-avi-134 | Vulnérabilité dans Cisco AsyncOS | 2014-03-20T00:00:00.000000 | 2014-03-20T00:00:00.000000 |
| certfr-2014-avi-133 | Multiples vulnérabilités dans les produits Mozilla | 2014-03-19T00:00:00.000000 | 2014-03-19T00:00:00.000000 |
| certfr-2014-avi-132 | Multiples vulnérabilités dans PHP | 2014-03-19T00:00:00.000000 | 2014-03-19T00:00:00.000000 |
| certfr-2014-avi-131 | Multiples vulnérabilités dans Apache httpd | 2014-03-19T00:00:00.000000 | 2014-03-19T00:00:00.000000 |
| certfr-2014-avi-130 | Vulnérabilité dans les produits Huawei | 2014-03-18T00:00:00.000000 | 2014-03-18T00:00:00.000000 |
| certfr-2014-avi-129 | Multiples vulnérabilités dans Google Chrome | 2014-03-17T00:00:00.000000 | 2014-03-17T00:00:00.000000 |
| certfr-2014-avi-128 | Multiples vulnérabilités dans Moodle | 2014-03-17T00:00:00.000000 | 2014-03-17T00:00:00.000000 |
| certfr-2014-avi-127 | Multiples vulnérabilités dans Spip | 2014-03-14T00:00:00.000000 | 2014-03-14T00:00:00.000000 |
| certfr-2014-avi-126 | Multiples vulnérabilités dans le système SCADA Siemens SIMATIC | 2014-03-14T00:00:00.000000 | 2014-03-14T00:00:00.000000 |
| certfr-2014-avi-125 | Multiples vulnérabilités dans Asterisk | 2014-03-13T00:00:00.000000 | 2014-03-13T00:00:00.000000 |
| certfr-2014-avi-124 | Vulnérabilité dans Adobe Shockwave Player | 2014-03-13T00:00:00.000000 | 2014-03-13T00:00:00.000000 |
| certfr-2014-avi-123 | Multiples vulnérabilités dans Juniper | 2014-03-13T00:00:00.000000 | 2014-03-13T00:00:00.000000 |
| certfr-2014-avi-122 | Vulnérabilité dans le protocole Microsoft Security Account Manager Remote | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-121 | Multiples vulnérabilités dans le noyau de Microsoft Windows | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-120 | Vulnérabilité dans Microsoft Silverlight | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-119 | Vulnérabilité dans Microsoft DirectShow | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-118 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-117 | Multiples vulnérabilités dans VMware vSphere | 2014-03-12T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certfr-2014-avi-116 | Multiples vulnérabilités dans les produits Apple | 2014-03-11T00:00:00.000000 | 2014-03-11T00:00:00.000000 |
| certfr-2014-avi-115 | Multiples vulnérabilités dans Adobe Flash | 2014-03-11T00:00:00.000000 | 2014-03-11T00:00:00.000000 |
| certfr-2014-avi-114 | Multiples vulnérabilités dans Google Chrome | 2014-03-11T00:00:00.000000 | 2014-03-11T00:00:00.000000 |
| certfr-2014-avi-113 | Vulnérabilité dans Squid | 2014-03-11T00:00:00.000000 | 2014-03-11T00:00:00.000000 |
| certfr-2014-avi-112 | Multiples vulnérabilités dans Oracle Solaris | 2014-03-10T00:00:00.000000 | 2014-03-10T00:00:00.000000 |
| certfr-2014-avi-111 | Multiples vulnérabilités dans Apache Struts | 2014-03-10T00:00:00.000000 | 2014-03-10T00:00:00.000000 |
| certfr-2014-avi-110 | Multiples vulnérabilités dans Wireshark | 2014-03-10T00:00:00.000000 | 2014-03-10T00:00:00.000000 |
| certfr-2014-avi-109 | Vulnérabilité dans IBM WPAR ftp pour AIX | 2014-03-10T00:00:00.000000 | 2014-03-10T00:00:00.000000 |
| certfr-2014-avi-108 | Vulnérabilité dans Huawei eSpace Meeting | 2014-03-10T00:00:00.000000 | 2014-03-10T00:00:00.000000 |
| certfr-2014-avi-107 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-03-07T00:00:00.000000 | 2014-03-07T00:00:00.000000 |