Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-110614 | 7.1 (v4.0) 6.5 (v3.1) | Yiuman citrus through 0.15.0 ORDER BY SQL Injection vi… |
Yiuman |
citrus |
2026-10-14T14:16:53.888Z | 2026-10-14T16:21:39.504Z |
| cve-2026-110613 | 7.1 (v4.0) 6.5 (v3.1) | youlai-mall through commit 9f62de8 Order Information D… |
youlaitech |
youlai-mall |
2026-10-14T14:16:53.257Z | 2026-10-27T01:30:45.127Z |
| cve-2026-110612 | 9.3 (v4.0) 9.8 (v3.1) | vlife through 2.0.1 Authentication Bypass via Hardcode… |
wwwlike |
vlife |
2026-10-14T14:16:52.666Z | 2026-10-14T18:04:15.576Z |
| cve-2026-110611 | 6 (v4.0) 5.9 (v3.1) | REBUILD through 4.5.0 Authorization Bypass via aibot2 … |
getrebuild |
rebuild |
2026-10-14T14:16:51.948Z | 2026-10-20T01:10:36.770Z |
| cve-2026-110610 | 5.3 (v4.0) 5.4 (v3.1) | ruoyi-vue-pro through 2026.09 SSRF via Midjourney refe… |
YunaiV |
ruoyi-vue-pro |
2026-10-14T14:16:51.176Z | 2026-10-26T16:14:17.162Z |
| cve-2026-110609 | 7.1 (v4.0) 6.5 (v3.1) | Dromara Skyeye through commit 65d3ddcede70 SQL Injecti… |
dromara |
skyeye |
2026-10-14T14:16:50.552Z | 2026-10-14T16:20:46.586Z |
| cve-2026-110608 | 5.3 (v4.0) 5.4 (v3.1) | BizSpring Shop through commit cf22d39daaf1 IDOR via /m… |
BizSpring |
BizSpring Shop |
2026-10-14T14:16:49.839Z | 2026-10-16T17:16:36.942Z |
| cve-2026-110607 | 7.1 (v4.0) 6.5 (v3.1) | BizSpring Shop through commit cf22d39daaf1 Payment Byp… |
BizSpring |
BizSpring Shop |
2026-10-14T14:16:47.014Z | 2026-10-14T18:02:45.647Z |
| cve-2026-110606 | 4.8 (v4.0) 3.3 (v3.1) | LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds … |
LibreCAD |
libdxfrw |
2026-10-14T14:16:46.382Z | 2026-10-20T01:07:40.851Z |
| cve-2026-110605 | 6.8 (v4.0) 5.5 (v3.1) | libschrift through 0.10.2 Divide by Zero via unitsPerE… |
tomolt |
libschrift |
2026-10-14T14:16:45.714Z | 2026-10-26T16:17:20.314Z |
| cve-2026-110604 | 2 (v4.0) 3.6 (v3.1) | Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write… |
Michael R Sweet |
Mini-XML |
2026-10-14T14:16:44.995Z | 2026-10-14T16:19:42.263Z |
| cve-2026-110603 | 5.8 (v4.0) 6.3 (v3.1) | LASzip through 3.5.0 Invalid Free via Truncated VLR He… |
rapidlasso |
LASzip |
2026-10-14T14:16:44.360Z | 2026-10-16T17:16:44.388Z |
| cve-2026-110602 | 5.8 (v4.0) 6.3 (v3.1) | libmspack through 0.11alpha Uninitialized Pointer Free… |
kyz |
libmspack |
2026-10-14T14:16:43.661Z | 2026-10-14T18:01:09.032Z |
| cve-2026-110601 | 5.8 (v4.0) 6.3 (v3.1) | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 Heap… |
saitoha |
libsixel |
2026-10-14T14:16:43.022Z | 2026-10-20T01:04:11.699Z |
| cve-2026-110600 | 6.8 (v4.0) 5.5 (v3.1) | xlsxio through 0.2.37 NULL Pointer Dereference via Wor… |
brechtsanders |
xlsxio |
2026-10-14T14:16:42.374Z | 2026-10-14T20:43:54.196Z |
| cve-2026-110599 | 6.9 (v4.0) 7.1 (v3.1) | L-SMASH through 2.14.5 Double Free in HEVC and H.264 I… |
l-smash |
l-smash |
2026-10-14T14:16:41.692Z | 2026-10-14T16:16:31.026Z |
| cve-2026-110598 | 6.9 (v4.0) 6.1 (v3.1) | Libyal libpff through 20260926 heap out-of-bounds read… |
libyal |
libpff |
2026-10-14T14:16:40.986Z | 2026-10-27T01:30:44.414Z |
| cve-2026-110597 | 6.9 (v4.0) 6.1 (v3.1) | Tinyexr through 3.2.0 Heap Out-of-Bounds Read via Pars… |
syoyo |
tinyexr |
2026-10-14T14:16:40.331Z | 2026-10-14T17:57:39.792Z |
| cve-2026-110596 | 6.8 (v4.0) 5.5 (v3.1) | quirc through 1.2 Denial of Service via find_alignment… |
dlbeer |
quirc |
2026-10-14T14:16:39.681Z | 2026-10-20T01:02:45.791Z |
| cve-2026-110595 | 5.3 (v4.0) 4.3 (v3.1) | BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Co… |
MicroPyramid |
BottleCRM |
2026-10-14T14:16:39.045Z | 2026-10-26T16:19:41.642Z |
| cve-2026-110594 | 6.9 (v4.0) 4.9 (v3.1) | BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing R… |
MicroPyramid |
BottleCRM |
2026-10-14T14:16:38.449Z | 2026-10-16T11:39:00.692Z |
| cve-2026-110593 | 5.3 (v4.0) 5.4 (v3.1) | BottleCRM through 1.14.5 Server-Side Template Injectio… |
MicroPyramid |
BottleCRM |
2026-10-14T14:16:37.842Z | 2026-10-16T11:38:59.795Z |
| cve-2026-110592 | 5.1 (v4.0) 3.5 (v3.1) | BottleCRM 0.30 through 1.14.5 HTML Injection via Custo… |
MicroPyramid |
BottleCRM |
2026-10-14T14:16:37.199Z | 2026-10-16T11:38:58.882Z |
| cve-2026-110591 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumpti… |
OW2 |
ASM |
2026-10-14T14:16:36.219Z | 2026-10-20T01:01:50.990Z |
| cve-2026-110270 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 3.0 before 9.11 Exponential Memory Allocation … |
OW2 |
ASM |
2026-10-14T14:16:35.587Z | 2026-10-26T16:22:47.113Z |
| cve-2026-110263 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in Sign… |
OW2 |
ASM |
2026-10-14T14:16:34.949Z | 2026-10-14T16:12:42.824Z |
| cve-2026-110262 | 4.8 (v4.0) 3.3 (v3.1) | OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in… |
OW2 |
ASM |
2026-10-14T14:16:34.273Z | 2026-10-14T15:55:12.005Z |
| cve-2026-110261 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via … |
OW2 |
ASM |
2026-10-14T14:16:33.613Z | 2026-10-14T18:01:52.492Z |
| cve-2026-110260 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation vi… |
OW2 |
ASM |
2026-10-14T14:16:32.915Z | 2026-10-20T00:59:41.535Z |
| cve-2026-110259 | 6.8 (v4.0) 5.5 (v3.1) | OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via Cla… |
OW2 |
ASM |
2026-10-14T14:16:32.252Z | 2026-10-26T16:24:12.006Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-749 | Vulnérabilité dans Axway SecureTransport | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-avi-748 | Vulnérabilités dans RealPlayer | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-avi-747 | Vulnérabilité dans Squid | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-avi-746 | Multiples vulnérabilités dans HP-UX | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-745 | Multiples vulnérabilités dans Huawei E585 | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-744 | Vulnérabilité dans VMware View | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-743 | Vulnérabilité dans IBM Lotus Notes | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-742 | Vulnérabilité dans IBM FB4WKSTNS | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-741 | Vulnérabilité dans IBM ClearQuest | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-740 | Vulnérabilité dans TWiki | 2012-12-17T00:00:00.000000 | 2012-12-17T00:00:00.000000 |
| certa-2012-avi-739 | Multiples vulnérabilités dans Avaya Aura System Manager | 2012-12-14T00:00:00.000000 | 2012-12-14T00:00:00.000000 |
| certa-2012-avi-738 | Vulnérabilités dans Adobe Photoshop Camera Raw | 2012-12-14T00:00:00.000000 | 2012-12-14T00:00:00.000000 |
| certa-2012-avi-737 | Multiples vulnérabilités dans Bluecoat Reporter | 2012-12-14T00:00:00.000000 | 2012-12-14T00:00:00.000000 |
| certa-2012-avi-736 | Vulnérabilités dans IBM Lotus Fondations | 2012-12-14T00:00:00.000000 | 2012-12-14T00:00:00.000000 |
| certa-2012-avi-735 | Multiples vulnérabilités dans IBM Rational Publishing Engine | 2012-12-14T00:00:00.000000 | 2012-12-14T00:00:00.000000 |
| certa-2012-avi-734 | Vulnérabilité dans les produits Avaya | 2012-12-13T00:00:00.000000 | 2012-12-13T00:00:00.000000 |
| certa-2012-avi-733 | Vulnérabilité dans Citrix XenApp | 2012-12-13T00:00:00.000000 | 2012-12-13T00:00:00.000000 |
| certa-2012-avi-732 | Vulnérabilité dans Citrix XenDesktop | 2012-12-13T00:00:00.000000 | 2012-12-13T00:00:00.000000 |
| certa-2012-avi-731 | Vulnérabilité dans IBM SPSS Modeler Premium | 2012-12-13T00:00:00.000000 | 2012-12-13T00:00:00.000000 |
| certa-2012-avi-730 | Vulnérabilité dans le système SCADA Siemens Automation License Manager | 2012-12-13T00:00:00.000000 | 2012-12-13T00:00:00.000000 |
| certa-2012-avi-729 | Vulnérabilités dans Bluecoat IntelligenceCenter et ProxySG | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-728 | Vulnérabilités dans Symantec Endpoint Protection | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-727 | Vulnérabilités dans HP OpenVMS LOGIN et ACMELOGIN | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-726 | Multiples vulnérabilités dans Adobe Flash Player | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-725 | Vulnérabilité dans Adobe ColdFusion | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-724 | Multiples vulnérabilités dans Google Chrome | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-723 | Vulnérabilité dans le composant Windows IP-HTTPS | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-722 | Vulnérabilité dans Microsoft Windows DirectPlay | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-721 | Vulnérabilité dans le composant de traitement des fichiers dans Windows | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |
| certa-2012-avi-720 | Multiples vulnérabilités dans les pilotes en mode noyau de Windows | 2012-12-12T00:00:00.000000 | 2012-12-12T00:00:00.000000 |