Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-54566 | Markdown Preview Enhanced: Remote Code Execution via V… |
shd101wyy |
vscode-markdown-preview-enhanced |
2026-10-14T19:08:43.663Z | 2026-10-14T19:45:22.736Z | |
| cve-2026-54525 | Markdown Preview Enhanced: One Click RCE via Markdown … |
shd101wyy |
vscode-markdown-preview-enhanced |
2026-10-14T19:06:59.440Z | 2026-10-15T15:05:57.227Z | |
| cve-2026-110667 | cemtan sar2html sar2html.py hard-coded credentials |
cemtan |
sar2html |
2026-10-14T19:00:18.273Z | 2026-10-14T19:37:44.471Z | |
| cve-2026-102354 | BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflar… |
alam00000 |
bentopdf |
2026-10-14T19:00:13.518Z | 2026-10-15T16:19:56.322Z | |
| cve-2026-102899 | Sentry: Improper authentication on SAML SSO process al… |
getsentry |
sentry |
2026-10-14T18:57:50.768Z | 2026-10-15T14:23:19.741Z | |
| cve-2026-102471 | 6.9 (v4.0) | CRLF header injection in vertx-mail-client allows mani… |
Eclipse Foundation |
Eclipse Vert.x |
2026-10-14T18:50:21.647Z | 2026-10-14T19:49:35.803Z |
| cve-2026-82402 | Gogs: Open Redirect in /redirect endpoint via backslas… |
gogs |
gogs |
2026-10-14T18:49:19.768Z | 2026-10-20T01:58:51.683Z | |
| cve-2026-110775 | 7.1 (v4.0) 6.5 (v3.1) | Nexent through 2.7.0 Cross-Tenant Knowledge-Base File … |
ModelEngine-Group |
nexent |
2026-10-14T18:48:05.425Z | 2026-10-16T17:15:27.094Z |
| cve-2026-110774 | 6 (v4.0) 5.3 (v3.1) | Blinko through 1.8.8 Private Attachment Read via /api/… |
blinkospace |
blinko |
2026-10-14T18:48:03.347Z | 2026-10-15T14:26:13.543Z |
| cve-2026-110773 | 5.3 (v4.0) 4.3 (v3.1) | GrowChief through 0.3.0 Missing Authorization via /use… |
growchief |
growchief |
2026-10-14T18:48:01.395Z | 2026-10-20T01:57:25.985Z |
| cve-2026-110772 | 5.3 (v4.0) 4.3 (v3.1) | Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization… |
we-promise |
sure |
2026-10-14T18:47:59.219Z | 2026-10-14T20:30:41.451Z |
| cve-2026-110771 | 5.3 (v4.0) 4.3 (v3.1) | Shopizer through 3.2.5 Authorization Bypass via Produc… |
Shopizer |
Shopizer |
2026-10-14T18:47:57.175Z | 2026-10-14T19:38:16.664Z |
| cve-2026-110770 | 9.2 (v4.0) 8.1 (v3.1) | Databasus 3.7.0 through 3.61.0 Account Takeover via Pa… |
databasus |
databasus |
2026-10-14T18:47:54.543Z | 2026-10-14T18:47:54.543Z |
| cve-2026-110769 | 8.3 (v4.0) 8.6 (v3.1) | holaOS through 2026.822.1 Missing Authorization in Cha… |
holaboss-ai |
holaOS |
2026-10-14T18:47:52.880Z | 2026-10-15T14:32:00.969Z |
| cve-2026-110768 | 6.3 (v4.0) 4.8 (v3.1) | holaOS through 2026.822.1 Authorization Bypass via Tel… |
holaboss-ai |
holaOS |
2026-10-14T18:47:50.568Z | 2026-10-20T01:56:39.029Z |
| cve-2026-110767 | 8.7 (v4.0) 7.5 (v3.1) | Gitingest through 0.3.1 Arbitrary File Read via Symlin… |
coderamp-labs |
gitingest |
2026-10-14T18:47:44.779Z | 2026-10-15T18:17:02.284Z |
| cve-2026-110766 | 5.3 (v4.0) 4.3 (v3.1) | Colanode Server through 0.4.7 Path Traversal via Avata… |
colanode |
colanode |
2026-10-14T18:47:43.182Z | 2026-10-14T19:38:51.634Z |
| cve-2026-110765 | 8.2 (v4.0) 5.9 (v3.1) | FlexPrice through 2.1.38 QuickBooks Webhook Signature … |
flexprice |
flexprice |
2026-10-14T18:47:41.613Z | 2026-10-14T18:47:41.613Z |
| cve-2026-110764 | 6 (v4.0) 5.3 (v3.1) | AstronRPA through 1.1.6 Cross-Tenant File Disclosure v… |
iflytek |
astron-rpa |
2026-10-14T18:47:40.054Z | 2026-10-15T14:35:55.977Z |
| cve-2026-110763 | 5.3 (v4.0) 4.3 (v3.1) | lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via… |
zuihou |
lamp-boot |
2026-10-14T18:47:39.046Z | 2026-10-20T01:55:41.647Z |
| cve-2026-110762 | 6.3 (v4.0) 3.7 (v3.1) | bbPress before 2.6.19 Information Disclosure via Buddy… |
bbPress |
bbPress |
2026-10-14T18:47:38.054Z | 2026-10-14T20:23:55.323Z |
| cve-2026-110761 | 8.7 (v4.0) 8.8 (v3.1) | ILIAS before 9.24, 10.12, and 11.5 PHP Object Injectio… |
ILIAS-eLearning e.V. |
ILIAS |
2026-10-14T18:47:35.995Z | 2026-10-14T19:39:51.874Z |
| cve-2026-102755 | DataEase Datasource/Dataset Folder Name Stored Cross-S… |
dataease |
dataease |
2026-10-14T18:45:25.350Z | 2026-10-14T19:40:35.484Z | |
| cve-2026-110666 | cemtan sar2html File Upload sar2html.py updateDb path … |
cemtan |
sar2html |
2026-10-14T18:45:13.058Z | 2026-10-15T15:06:09.740Z | |
| cve-2026-102756 | DataEase bar-horizontal Axis Label Tooltip Stored Cros… |
dataease |
dataease |
2026-10-14T18:44:42.811Z | 2026-10-20T01:53:42.428Z | |
| cve-2026-102479 | 8.7 (v4.0) | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1… |
Eclipse Foundation |
Eclipse Vert.x |
2026-10-14T18:43:54.623Z | 2026-10-28T21:06:12.367Z |
| cve-2026-104143 | DataEase: Stored SQL Injection via dateFormat field te… |
dataease |
dataease |
2026-10-14T18:43:34.275Z | 2026-10-15T15:06:18.660Z | |
| cve-2026-104142 | DataEase: Stored SQL Injection in group-field binning bounds |
dataease |
dataease |
2026-10-14T18:42:36.214Z | 2026-10-15T14:37:10.357Z | |
| cve-2026-104141 | DataEase: SQL Injection in datasource metadata identifiers |
dataease |
dataease |
2026-10-14T18:41:06.878Z | 2026-10-15T16:28:55.752Z | |
| cve-2026-82153 | 2.2 (v3.1) | Dell OS Recovery Tool, versions prior to 2.4.4, c… |
Dell |
OS Recovery Tool |
2026-10-14T18:40:15.996Z | 2026-10-14T19:42:58.701Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-403 | Vulnérabilité dans Microsoft Windows Media Format Runtime | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-402 | Vulnérabilité dans Microsoft DirectShow | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-401 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-400 | Vulnérabilité dans Microsoft GDI+ | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-399 | Multiples vulnérabilités dans le noyau Microsoft Windows | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-398 | Multiples vulnérabilités dans Microsoft Framework .net et Silverlight | 2013-07-10T00:00:00.000000 | 2013-07-10T00:00:00.000000 |
| certa-2013-avi-397 | Vulnérabilité dans QNX Software Development Platform | 2013-07-09T00:00:00.000000 | 2013-07-09T00:00:00.000000 |
| certa-2013-avi-396 | Vulnérabilité dans EMC RSA Authentication Manager | 2013-07-09T00:00:00.000000 | 2013-07-09T00:00:00.000000 |
| certa-2013-avi-395 | Vulnérabilité dans EMC Replication Manager | 2013-07-09T00:00:00.000000 | 2013-07-09T00:00:00.000000 |
| certa-2013-avi-394 | Vulnérabilité dans Citrix XenServer | 2013-07-08T00:00:00.000000 | 2013-07-08T00:00:00.000000 |
| certa-2013-avi-393 | Multiples vulnérabilités dans Apple OS X | 2013-07-08T00:00:00.000000 | 2013-07-08T00:00:00.000000 |
| certa-2013-avi-392 | Vulnérabilité dans Siemens COMOS | 2013-07-05T00:00:00.000000 | 2013-07-05T00:00:00.000000 |
| certa-2013-avi-391 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2013-07-04T00:00:00.000000 | 2013-07-04T00:00:00.000000 |
| certa-2013-avi-390 | Multiples vulnérabilités dans Barracuda SSL VPN | 2013-07-04T00:00:00.000000 | 2013-07-04T00:00:00.000000 |
| certa-2013-avi-389 | Vulnérabilité dans Alcatel-Lucent OmniTouch | 2013-07-03T00:00:00.000000 | 2013-07-03T00:00:00.000000 |
| certa-2013-avi-388 | Multiples vulnérabilités dans Symantec Security Information Manager | 2013-07-03T00:00:00.000000 | 2013-07-03T00:00:00.000000 |
| certa-2013-avi-387 | Multiples vulnérabilités dans Oracle Solaris | 2013-07-03T00:00:00.000000 | 2013-07-03T00:00:00.000000 |
| certa-2013-avi-386 | Multiples vulnérabilités dans HP ProCurve, H3C, 3COM | 2013-07-02T00:00:00.000000 | 2013-07-02T00:00:00.000000 |
| certa-2013-avi-385 | Vulnérabilité dans Atlassian Crowd | 2013-07-02T00:00:00.000000 | 2013-07-02T00:00:00.000000 |
| certa-2013-avi-384 | Vulnérabilité dans Ruby | 2013-07-01T00:00:00.000000 | 2013-07-01T00:00:00.000000 |
| certa-2013-avi-383 | Vulnérabilité dans F5 BIG-IP et FirePass | 2013-07-01T00:00:00.000000 | 2013-07-01T00:00:00.000000 |
| certa-2013-avi-382 | Multiples vulnérabilités dans WordPress | 2013-06-28T00:00:00.000000 | 2013-06-28T00:00:00.000000 |
| certa-2013-avi-381 | Multiples vulnérabilités dans Adobe Photoshop Camera Raw | 2013-06-28T00:00:00.000000 | 2013-06-28T00:00:00.000000 |
| certa-2013-avi-380 | Multiples vulnérabilités dans Citrix XenServer PV | 2013-06-28T00:00:00.000000 | 2013-06-28T00:00:00.000000 |
| certa-2013-avi-379 | Vulnérabilité dans Cisco ASA Next-Generation Firewall | 2013-06-27T00:00:00.000000 | 2013-06-27T00:00:00.000000 |
| certa-2013-avi-378 | Multiples vulnérabilités dans Cisco Web Security Appliance | 2013-06-27T00:00:00.000000 | 2013-06-27T00:00:00.000000 |
| certa-2013-avi-377 | Multiples vulnérabilités dans Cisco Email Security Appliance | 2013-06-27T00:00:00.000000 | 2013-06-27T00:00:00.000000 |
| certa-2013-avi-376 | Multiples vulnérabilités dans Cisco Content Security Management Appliance | 2013-06-27T00:00:00.000000 | 2013-06-27T00:00:00.000000 |
| certa-2013-avi-375 | Multiples vulnérabilités dans le noyau Linux de Mandriva | 2013-06-26T00:00:00.000000 | 2013-06-26T00:00:00.000000 |
| certa-2013-avi-374 | Multiples vulnérabilités dans les produits Mozilla | 2013-06-26T00:00:00.000000 | 2013-06-26T00:00:00.000000 |