Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-110644 | 9.3 (v4.0) 9.8 (v3.1) | nodejs-whisper through 0.3.1 OS Command Injection via … |
ChetanXpro |
nodejs-whisper |
2026-10-14T14:17:13.817Z | 2026-10-14T17:35:48.971Z |
| cve-2026-110643 | 9.3 (v4.0) 9.8 (v3.1) | transcribe2texts through 1.0.6 OS Command Injection vi… |
kky-ykk |
transcribe2texts |
2026-10-14T14:17:13.152Z | 2026-10-16T17:15:48.105Z |
| cve-2026-110642 | 8.5 (v4.0) 7.8 (v3.1) | xhtml2pdf before 0.2.19 OS Command Injection via start… |
xhtml2pdf |
xhtml2pdf |
2026-10-14T14:17:12.576Z | 2026-10-14T18:18:52.884Z |
| cve-2026-110641 | 8.7 (v4.0) 8.8 (v3.1) | @runnerty/executor-decompress through 3.1.1 OS Command… |
runnerty |
@runnerty/executor-decompress |
2026-10-14T14:17:11.966Z | 2026-10-20T01:23:08.052Z |
| cve-2026-110640 | 9.3 (v4.0) 9.8 (v3.1) | Whisper-node through 1.1.1 OS Command Injection via fi… |
ariym |
whisper-node |
2026-10-14T14:17:11.249Z | 2026-10-26T16:08:42.838Z |
| cve-2026-110639 | 9.3 (v4.0) 9.8 (v3.1) | @mborne/extract before 0.2.1 OS Command Injection via … |
mborne |
@mborne/extract |
2026-10-14T14:17:10.540Z | 2026-10-14T17:34:58.061Z |
| cve-2026-110638 | 9.3 (v4.0) 9.8 (v3.1) | doc-recog through 1.1.6 OS Command Injection via DocDa… |
zepspaiva |
doc-recog |
2026-10-14T14:17:09.820Z | 2026-10-16T17:15:54.950Z |
| cve-2026-110637 | 8.5 (v4.0) 7.8 (v3.1) | buildebooks before 0.2.2 OS Command Injection via kind… |
wastemobile |
buildebooks |
2026-10-14T14:17:09.098Z | 2026-10-14T18:16:18.303Z |
| cve-2026-110636 | 9.3 (v4.0) 9.8 (v3.1) | pypdftk through 0.5 OS Command Injection via PDF and O… |
revolunet |
pypdftk |
2026-10-14T14:17:08.465Z | 2026-10-20T01:21:31.597Z |
| cve-2026-110635 | 9.3 (v4.0) 9.8 (v3.1) | webp-converter before 3.0.0 OS Command Injection via F… |
scionoftech |
webp-converter |
2026-10-14T14:17:07.752Z | 2026-10-26T16:10:32.954Z |
| cve-2026-110634 | 9.3 (v4.0) 9.8 (v3.1) | git-diff before 2.0.7 OS Command Injection via gitDiff… |
danday74 |
git-diff |
2026-10-14T14:17:07.089Z | 2026-10-14T17:34:01.053Z |
| cve-2026-110633 | 8.5 (v4.0) 7.8 (v3.1) | MyReport Updater through 2.1.1 Local Privilege Escalat… |
Report One |
MyReport Updater |
2026-10-14T14:17:06.454Z | 2026-10-14T14:17:06.454Z |
| cve-2026-110632 | 9.2 (v4.0) 8.1 (v3.1) | Report One MyReport Updater through 2.1.1 Unauthentica… |
Report One |
MyReport Updater |
2026-10-14T14:17:05.863Z | 2026-10-14T18:15:09.958Z |
| cve-2026-110631 | 9.3 (v4.0) 9.8 (v3.1) | Komodo through 2.3.3 Periphery Agent Unauthenticated R… |
moghtech |
komodo |
2026-10-14T14:17:05.199Z | 2026-10-20T01:20:12.584Z |
| cve-2026-110630 | 7 (v4.0) 6.5 (v3.1) | VentureDrake Laravel CRM before 2.4.0 Privilege Escala… |
venturedrake |
laravel-crm |
2026-10-14T14:17:04.557Z | 2026-10-14T20:20:11.778Z |
| cve-2026-110629 | 7.1 (v4.0) 6.5 (v3.1) | VentureDrake Laravel CRM before 2.4.0 Missing Authoriz… |
venturedrake |
laravel-crm |
2026-10-14T14:17:03.868Z | 2026-10-14T17:32:32.663Z |
| cve-2026-110628 | 9.2 (v4.0) 8.6 (v3.1) | Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/… |
kanbn |
kan |
2026-10-14T14:17:03.232Z | 2026-10-16T17:16:01.554Z |
| cve-2026-110627 | 2.1 (v4.0) 4.7 (v3.1) | ClipBucket v5 through 5.5.3-#206 Reflected XSS via add… |
MacWarrior |
clipbucket-v5 |
2026-10-14T14:17:02.639Z | 2026-10-14T18:13:26.073Z |
| cve-2026-110626 | 5.1 (v4.0) 6.1 (v3.1) | ClipBucket v5 through 5.5.3-#206 Reflected XSS via edi… |
MacWarrior |
clipbucket-v5 |
2026-10-14T14:17:01.968Z | 2026-10-20T01:17:40.484Z |
| cve-2026-110625 | 5.1 (v4.0) 6.1 (v3.1) | ClipBucket v5 through 5.5.3-#206 Reflected XSS via typ… |
MacWarrior |
clipbucket-v5 |
2026-10-14T14:17:01.287Z | 2026-10-14T20:25:39.213Z |
| cve-2026-110624 | 2.3 (v4.0) 3.1 (v3.1) | Papermerge Core through 3.5.3 Missing Authorization vi… |
papermerge |
papermerge-core |
2026-10-14T14:17:00.623Z | 2026-10-14T16:15:28.906Z |
| cve-2026-110623 | 7.7 (v4.0) 7.5 (v3.1) | Papermerge Core through 3.5.3 Missing Authorization in… |
papermerge |
papermerge-core |
2026-10-14T14:16:59.957Z | 2026-10-16T17:16:11.037Z |
| cve-2026-110622 | 7.7 (v4.0) 7.5 (v3.1) | Papermerge Core through 3.5.3 Missing Authorization in… |
papermerge |
papermerge-core |
2026-10-14T14:16:59.250Z | 2026-10-14T18:08:00.313Z |
| cve-2026-110621 | 8.7 (v4.0) 8.8 (v3.1) | Swetrix Cloud before 5.1.0 Missing Authorization via P… |
Swetrix |
swetrix |
2026-10-14T14:16:58.557Z | 2026-10-20T01:15:55.134Z |
| cve-2026-110620 | 6.1 (v4.0) 6.8 (v3.1) | Formbricks before 4.9.0 Cross-Organization IDOR in Ser… |
formbricks |
formbricks |
2026-10-14T14:16:57.917Z | 2026-10-26T16:12:38.788Z |
| cve-2026-110619 | 6.3 (v4.0) 4.8 (v3.1) | frp 0.41.0 through 0.71.1 Missing Authentication for p… |
fatedier |
frp |
2026-10-14T14:16:57.271Z | 2026-10-14T16:18:40.293Z |
| cve-2026-110618 | 8.6 (v4.0) 8.1 (v3.1) | SmsForwarder through 3.5.0 Missing Authentication in H… |
pppscn |
SmsForwarder |
2026-10-14T14:16:56.635Z | 2026-10-16T17:16:18.856Z |
| cve-2026-110617 | 6.3 (v4.0) 4.8 (v3.1) | we-mp-rss through 1.5.3 Missing Authorization via Expo… |
rachelos |
we-mp-rss |
2026-10-14T14:16:55.915Z | 2026-10-14T18:05:57.783Z |
| cve-2026-110616 | 9.2 (v4.0) 8.1 (v3.1) | NullHub through 2026.5.29 Missing Authentication for /… |
nullclaw |
NullHub |
2026-10-14T14:16:55.237Z | 2026-10-20T01:14:30.401Z |
| cve-2026-110615 | 7.1 (v4.0) 7.1 (v3.1) | jshERP through 3.6 Missing Authorization via /user/bat… |
jishenghua |
jshERP |
2026-10-14T14:16:54.603Z | 2026-10-18T12:03:17.953Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-012 | Vulnérabilité dans Microsoft Windows | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-011 | Multiples vulnérabilités dans Microsoft XML Core Services | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-010 | Vulnérabilité dans les pilotes en mode noyau de Windows | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-009 | Vulnérabilité dans Microsoft .NET Framework | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-008 | Multiples vulnérabilités dans System Center Operations Manager de Microsoft | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-007 | Vulnérabilité dans les composants du spouleur d'impression Windows | 2013-01-09T00:00:00.000000 | 2013-01-09T00:00:00.000000 |
| certa-2013-avi-006 | Vulnérabilité dans ProFTPD | 2013-01-08T00:00:00.000000 | 2013-01-08T00:00:00.000000 |
| certa-2013-avi-005 | Vulnérabilité dans EMC NetWorker | 2013-01-08T00:00:00.000000 | 2013-01-08T00:00:00.000000 |
| certa-2013-avi-029 | Multiples vulnérabilités dans Adobe ColdFusion | 2013-01-07T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2013-avi-004 | Vulnérabilité dans RPM Package Manager | 2013-01-07T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2013-avi-003 | Vulnérabilités dans Asterisk | 2013-01-03T00:00:00.000000 | 2013-01-03T00:00:00.000000 |
| certa-2013-avi-002 | Vulnérabilités dans Symfony | 2013-01-02T00:00:00.000000 | 2013-01-02T00:00:00.000000 |
| certa-2013-avi-001 | Vulnérabilité dans IBM SPSS Modeler | 2013-01-02T00:00:00.000000 | 2013-01-02T00:00:00.000000 |
| certa-2012-avi-766 | Vulnérabilité dans Symantec Entreprise Security Manager | 2012-12-27T00:00:00.000000 | 2012-12-27T00:00:00.000000 |
| certa-2012-avi-765 | Vulnérabilité dans EMC Data Protection Advisor | 2012-12-27T00:00:00.000000 | 2012-12-27T00:00:00.000000 |
| certa-2012-avi-764 | Vulnérabilités dans Tiki Wiki CMS Groupware | 2012-12-27T00:00:00.000000 | 2012-12-27T00:00:00.000000 |
| certa-2012-avi-763 | Vulnérabilité dans IBM Tivoli NetView | 2012-12-27T00:00:00.000000 | 2012-12-27T00:00:00.000000 |
| certa-2012-avi-762 | Multiples vulnérabilités dans les produits IBM Rational | 2012-12-26T00:00:00.000000 | 2012-12-26T00:00:00.000000 |
| certa-2012-avi-761 | Multiples vulnérabilités dans Opera | 2012-12-24T00:00:00.000000 | 2012-12-24T00:00:00.000000 |
| certa-2012-avi-760 | Vulnérabilités dans CA IdentityMinder | 2012-12-24T00:00:00.000000 | 2012-12-24T00:00:00.000000 |
| certa-2012-avi-759 | Multiples vulnérabilités dans VMware | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-758 | Multiples vulnérabilités dans IBM InfoSphere Streams | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-757 | Multiples vulnérabilités dans IBM Tivoli | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-756 | Vulnérabilité dans IBM WebSphere | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-755 | Multiples vulnérabilités dans Drupal | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-754 | Vulnérabilités dans IBM Rational Policy Tester et IBM AppScan Entreprise | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-753 | Vulnérabilité dans LemonLDAP::NG | 2012-12-21T00:00:00.000000 | 2012-12-21T00:00:00.000000 |
| certa-2012-avi-752 | Vulnérabilité dans Zend Framework | 2012-12-20T00:00:00.000000 | 2012-12-20T00:00:00.000000 |
| certa-2012-avi-751 | Vulnérabilités dans IBM Tivoli Storage Manager | 2012-12-20T00:00:00.000000 | 2012-12-20T00:00:00.000000 |
| certa-2012-avi-750 | Vulnérabilités dans IBM InfoSphere BigInsights | 2012-12-19T00:00:00.000000 | 2012-12-19T00:00:00.000000 |