Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77460 | EspoCRM: Mass email template renderer leaks restricted… |
espocrm |
espocrm |
2026-10-15T14:58:44.457Z | 2026-10-15T15:12:29.848Z | |
| cve-2026-109413 | 8.7 (v4.0) | Symfony: Unbounded Recursion in the YAML Inline Lexer … |
sensiolabs |
symfony |
2026-10-15T14:57:00.211Z | 2026-10-15T18:06:55.183Z |
| cve-2026-63130 | EspoCRM: Admin path traversal in LabelManager (Custom … |
espocrm |
espocrm |
2026-10-15T14:56:57.122Z | 2026-10-15T15:51:06.560Z | |
| cve-2026-79843 | 6.5 (v3.1) | HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability |
Hewlett Packard Enterprise |
HPE NonStop SQL/MX EXE |
2026-10-15T14:53:42.364Z | 2026-10-15T18:07:39.639Z |
| cve-2026-59994 | EspoCRM: Pre-authentication stored HTML injection in s… |
espocrm |
espocrm |
2026-10-15T14:50:04.568Z | 2026-10-20T02:41:44.725Z | |
| cve-2026-55154 | EspoCRM: CSV/Formula Injection sanitizer bypass via le… |
espocrm |
espocrm |
2026-10-15T14:49:15.584Z | 2026-10-16T17:13:56.910Z | |
| cve-2026-55184 | EspoCRM: Stored XSS in wysiwyg template fields if CSP … |
espocrm |
espocrm |
2026-10-15T14:48:03.852Z | 2026-10-15T15:46:21.365Z | |
| cve-2026-53575 | EspoCRM: Persistent XSS via CSP nonce injection in app… |
espocrm |
espocrm |
2026-10-15T14:47:19.494Z | 2026-10-15T15:13:14.043Z | |
| cve-2026-108082 | 8.7 (v4.0) | Symfony: ReDoS in HeaderUtils::split() Reachable Throu… |
sensiolabs |
symfony |
2026-10-15T14:46:01.594Z | 2026-10-15T18:04:45.913Z |
| cve-2026-53574 | EspoCRM: Blind SQL injection via streamAttachments whe… |
espocrm |
espocrm |
2026-10-15T14:45:52.943Z | 2026-10-15T15:33:36.150Z | |
| cve-2026-110957 | Wavlink WL-WN530BE2-A Login Processing api.cgi sub_125… |
Wavlink |
WL-WN530BE2-A |
2026-10-15T14:45:15.760Z | 2026-10-20T02:40:46.273Z | |
| cve-2026-46691 | EspoCRM: IDOR in Import exportErrors Endpoint Leaks CS… |
espocrm |
espocrm |
2026-10-15T14:45:03.879Z | 2026-10-15T15:13:51.068Z | |
| cve-2026-46708 | EspoCRM: Target list Opt-Out actions allows opting out… |
espocrm |
espocrm |
2026-10-15T14:44:18.391Z | 2026-10-15T15:47:03.869Z | |
| cve-2026-79841 | 5.8 (v3.1) | HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory w… |
Hewlett Packard Enterprise |
HPE NonStop RDMA SERVICES NSK |
2026-10-15T14:43:23.831Z | 2026-10-15T18:03:22.464Z |
| cve-2026-47168 | EspoCRM: Authenticated RCE via Unsafe PHP Object Deser… |
espocrm |
espocrm |
2026-10-15T14:42:15.975Z | 2026-10-20T02:39:55.590Z | |
| cve-2026-103509 | 8.5 (v4.0) | Credential Disclosure in P4 Search Configuration API |
Perforce |
P4 (Helix core) |
2026-10-15T14:41:28.829Z | 2026-10-15T17:58:34.271Z |
| cve-2026-46694 | EspoCRM: Portal User ACL Bypass Exposes Internal Strea… |
espocrm |
espocrm |
2026-10-15T14:40:49.258Z | 2026-10-16T17:14:07.344Z | |
| cve-2026-79840 | 7.3 (v3.1) | HPE NonStop XABroker - Memory corruption vulnerability |
Hewlett Packard Enterprise |
HPE NonStop XABroker |
2026-10-15T14:36:18.512Z | 2026-10-15T18:08:45.467Z |
| cve-2026-79839 | 7.3 (v3.1) | HPE NonStop ODBC/MX Server - Memory corruption vulnerability |
Hewlett Packard Enterprise |
HPE NonStop ODBC/MX Server |
2026-10-15T14:32:13.723Z | 2026-10-15T18:09:59.904Z |
| cve-2026-79838 | 7.3 (v3.1) | HPE NonStop ODBC/MX Services - Memory corruption vulne… |
Hewlett Packard Enterprise |
HPE NonStop ODBC/MX Services |
2026-10-15T14:24:53.551Z | 2026-10-15T18:10:31.991Z |
| cve-2026-108116 | 7.5 (v3.1) | MDX and SOAP Injection in Kendo UI for jQuery |
Progress Software |
Kendo UI for jQuery |
2026-10-15T14:12:52.017Z | 2026-10-15T18:11:50.463Z |
| cve-2026-106153 | 5.4 (v3.1) | Cross-site Scripting (XSS) in Kendo UI for jQuery Cale… |
Progress Software |
Kendo UI for jQuery |
2026-10-15T14:12:05.941Z | 2026-10-15T18:24:48.793Z |
| cve-2026-106151 | 5.4 (v3.1) | Cross-Site Scripting in Validator Validation Messages … |
Progress Software |
Kendo UI for jQuery |
2026-10-15T14:11:08.537Z | 2026-10-15T18:12:49.751Z |
| cve-2026-106150 | 5.4 (v3.1) | Cross-site Scripting (XSS) in Kendo UI for jQuery Spli… |
Progress Software |
Kendo UI for jQuery |
2026-10-15T14:09:50.330Z | 2026-10-15T18:13:16.731Z |
| cve-2026-106149 | 5.4 (v3.1) | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu |
Progress Software |
Kendo UI for jQuery |
2026-10-15T14:08:43.628Z | 2026-10-15T18:13:44.008Z |
| cve-2026-110746 | N/A | CVE-2026-110746 |
TotalSecurity |
TotalAV |
2026-10-15T14:08:27.445Z | 2026-10-15T15:17:16.739Z |
| cve-2026-103508 | 7.3 (v4.0) | Path traversal via logging configuration in P4Search |
Perforce |
P4 (Helix core) |
2026-10-15T14:02:19.129Z | 2026-10-15T18:14:22.594Z |
| cve-2026-9703 | Viewer role can create, modify and delete Loki alertin… |
Grafana |
Grafana Enterprise |
2026-10-15T14:02:00.146Z | 2026-10-16T18:52:39.623Z | |
| cve-2026-110936 | A vulnerability has been identified in Siemens So… |
Siemens |
Siemens Software Center |
2026-10-15T14:01:17.797Z | 2026-10-21T03:56:21.823Z | |
| cve-2026-104024 | 4.6 (v4.0) | Incomplete dangerous-extension list in PeaZip object o… |
PeaZip |
PeaZip |
2026-10-15T13:30:13.885Z | 2026-10-16T18:47:51.852Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-076 | Vulnérabilité dans Citrix ShareFile Mobile | 2014-02-19T00:00:00.000000 | 2014-02-19T00:00:00.000000 |
| certfr-2014-avi-075 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-02-19T00:00:00.000000 | 2014-02-19T00:00:00.000000 |
| certfr-2014-avi-074 | Vulnérabilité dans Xen | 2014-02-18T00:00:00.000000 | 2014-02-18T00:00:00.000000 |
| certfr-2014-avi-073 | Multiples vulnérabilités dans le noyau Linux de Mandriva | 2014-02-18T00:00:00.000000 | 2014-02-18T00:00:00.000000 |
| certfr-2014-avi-072 | Multiples vulnérabilités dans Symantec Endpoint Protection Manager | 2014-02-17T00:00:00.000000 | 2014-02-17T00:00:00.000000 |
| certfr-2014-avi-071 | Vulnérabilité dans GnuTLS | 2014-02-17T00:00:00.000000 | 2014-02-17T00:00:00.000000 |
| certfr-2014-avi-070 | Vulnérabilité dans phpMyAdmin | 2014-02-17T00:00:00.000000 | 2014-02-17T00:00:00.000000 |
| certfr-2014-avi-069 | Multiples vulnérabilités dans les produits Juniper | 2014-02-13T00:00:00.000000 | 2014-02-13T00:00:00.000000 |
| certfr-2014-avi-068 | Vulnérabilité dans Apple Boot Camp | 2014-02-13T00:00:00.000000 | 2014-02-13T00:00:00.000000 |
| certfr-2014-avi-067 | Multiples vulnérabilités dans Adobe Shockwave Player | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-066 | Vulnérabilité dans le moteur de script VBScript de Microsoft | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-065 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-064 | Multiples vulnérabilités dans Microsoft .NET Framework | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-063 | Vulnérabilité dans Microsoft Forefront Protection | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-062 | Vulnérabilité dans Microsoft Direct2D | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-061 | Vulnérabilité dans la pile IPv6 de Microsoft Windows | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-060 | Vulnérabilité dans Microsoft XML Core Services | 2014-02-12T00:00:00.000000 | 2014-02-12T00:00:00.000000 |
| certfr-2014-avi-059 | Multiples vulnérabilités dans les produits Avaya | 2014-02-11T00:00:00.000000 | 2014-02-11T00:00:00.000000 |
| certfr-2014-avi-058 | Vulnérabilité dans le système SCADA Schneider Electric SCADA Expert ClearSCADA | 2014-02-11T00:00:00.000000 | 2014-02-11T00:00:00.000000 |
| certfr-2014-avi-057 | Vulnérabilité dans Hitachi Cosminexus | 2014-02-10T00:00:00.000000 | 2014-02-10T00:00:00.000000 |
| certfr-2014-avi-056 | Vulnérabilité dans le système SCADA Schneider Electric SCADAPack | 2014-02-10T00:00:00.000000 | 2014-02-10T00:00:00.000000 |
| certfr-2014-avi-055 | Multiples vulnérabilités dans Xen | 2014-02-10T00:00:00.000000 | 2014-02-10T00:00:00.000000 |
| certfr-2014-avi-054 | Vulnérabilité dans EMC Documentum Foundation Services | 2014-02-06T00:00:00.000000 | 2014-02-06T00:00:00.000000 |
| certfr-2014-avi-053 | Multiples vulnérabilités dans les produits Mozilla | 2014-02-05T00:00:00.000000 | 2014-02-05T00:00:00.000000 |
| certfr-2014-avi-052 | Vulnérabilité dans Adobe Flash Player | 2014-02-05T00:00:00.000000 | 2014-02-05T00:00:00.000000 |
| certfr-2014-avi-051 | Vulnérabilité dans F5 BIG-IP | 2014-02-05T00:00:00.000000 | 2014-02-05T00:00:00.000000 |
| certfr-2014-avi-050 | Vulnérabilité dans Citrix XenMobile | 2014-02-04T00:00:00.000000 | 2014-02-04T00:00:00.000000 |
| certfr-2014-avi-049 | Vulnérabilité dans Puppet | 2014-02-03T00:00:00.000000 | 2014-02-03T00:00:00.000000 |
| certfr-2014-avi-048 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2014-01-31T00:00:00.000000 | 2014-01-31T00:00:00.000000 |
| certfr-2014-avi-047 | Vulnérabilité dans MediaWiki | 2014-01-30T00:00:00.000000 | 2014-01-30T00:00:00.000000 |