Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-71395 | 7.1 (v4.0) | SurrealDB before 2.2.2 Memory Exhaustion via string::replace |
surrealdb |
surrealdb |
2026-07-18T13:10:13.744Z | 2026-10-29T21:15:22.098Z |
| cve-2025-71394 | 2.3 (v4.0) | SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER |
surrealdb |
surrealdb |
2026-07-18T13:10:13.041Z | 2026-10-29T21:15:21.419Z |
| cve-2025-71393 | 6 (v4.0) | SurrealDB before 2.2.2 Memory Exhaustion via Nested Fu… |
surrealdb |
surrealdb |
2026-07-18T13:10:12.360Z | 2026-10-29T21:15:20.741Z |
| cve-2025-71392 | 9.4 (v4.0) | SurrealDB before 2.2.2 SurrealQL Injection via export |
surrealdb |
surrealdb |
2026-07-18T13:10:11.661Z | 2026-10-29T21:15:20.082Z |
| cve-2025-71391 | 7.1 (v4.0) | SurrealDB before 2.2.2 Denial of Service via /sql endpoint |
surrealdb |
surrealdb |
2026-07-18T13:10:10.977Z | 2026-10-29T21:15:19.413Z |
| cve-2025-71381 | 6.9 (v4.0) 6.5 (v3.1) | Hono - Vary Header Injection in CORS Middleware |
Hono |
Hono |
2026-06-30T22:08:21.523Z | 2026-10-29T21:15:18.744Z |
| cve-2025-71334 | 9.3 (v4.0) 9.8 (v3.1) | Flowise - Arbitrary File Access via Missing Chat Flow … |
Flowise |
Flowise |
2026-06-25T21:41:05.552Z | 2026-10-29T21:15:18.060Z |
| cve-2025-34509 | 7.5 (v3.1) | Sitecore XM and XP Hardcoded Credentials |
Sitecore |
Experience Manager |
2025-06-17T18:20:57.441Z | 2026-10-29T21:15:17.384Z |
| cve-2025-34506 | 8.6 (v4.0) | WBCE CMS <= 1.6.3 Authenticated Remote Code Execution … |
WBCE |
WBCE CMS |
2025-12-11T21:44:03.538Z | 2026-10-29T21:15:16.695Z |
| cve-2025-34458 | 8.7 (v4.0) | wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS |
wb2osz |
Dire Wolf |
2025-12-22T21:29:46.850Z | 2026-10-29T21:15:16.014Z |
| cve-2025-34457 | 8.7 (v4.0) | wb2osz/direwolf <= 1.8.1 Stack-based Buffer Overflow DoS |
wb2osz |
Dire Wolf |
2025-12-22T21:30:29.670Z | 2026-10-29T21:15:15.325Z |
| cve-2025-34253 | 5.1 (v4.0) | D-Link Nuclias Connect <= v1.3.1.4 Stored Cross-Site S… |
D-Link |
Nuclias Connect |
2025-10-16T18:53:49.731Z | 2026-10-29T21:15:14.655Z |
| cve-2025-34108 | 8.6 (v4.0) | Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow |
Flexense |
Disk Pulse Enterprise |
2025-07-15T13:01:40.516Z | 2026-10-29T21:15:14.014Z |
| cve-2025-34023 | 8.5 (v4.0) | Karel IP Phone IP1211 Path Traversal |
Karel |
Karel IP Phone IP1211 |
2025-06-20T18:37:45.496Z | 2026-10-29T21:15:13.388Z |
| cve-2025-30006 | 6.1 (v3.1) | Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting |
Xorcom |
CompletePBX |
2025-03-31T16:49:52.940Z | 2026-10-29T21:15:12.772Z |
| cve-2025-25034 | 9.3 (v4.0) | SugarCRM PHP Deserialization RCE |
SugarCRM |
SugarCRM |
2025-06-20T18:34:13.197Z | 2026-10-29T21:15:12.046Z |
| cve-2025-15620 | 8.6 (v3.1) 9.2 (v4.0) | HiOS Switch Platform Denial-of-Service via Web Interface |
Belden |
Hirschmann HiOS Switch Platform |
2026-04-02T20:28:08.711Z | 2026-10-29T21:15:11.362Z |
| cve-2024-8517 | 9.8 (v3.1) | SPIP Bigup Multipart File Upload OS Command Injection |
SPIP |
SPIP |
2024-09-06T15:55:35.349Z | 2026-10-29T21:15:10.704Z |
| cve-2024-58394 | 5.1 (v4.0) 6.1 (v3.1) | Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying |
Retool |
Retool |
2026-10-22T10:57:37.409Z | 2026-10-29T21:15:10.024Z |
| cve-2024-58366 | 9 (v4.0) 8.5 (v3.1) | SurrealDB before 1.1.1 Format String via Scripting Functions |
surrealdb |
surrealdb |
2026-07-18T13:10:06.939Z | 2026-10-29T21:15:09.355Z |
| cve-2024-58363 | 5.3 (v4.0) 6.3 (v3.1) | SurrealDB before 1.5.4 Authentication Bypass via Datab… |
surrealdb |
surrealdb |
2026-07-18T13:10:04.938Z | 2026-10-29T21:15:08.680Z |
| cve-2024-58300 | 8.7 (v4.0) | Siklu MultiHaul TG Series <= 2.0.0 Unauthenticated Cre… |
Siklu |
MultiHaul TG series |
2025-12-11T21:39:32.964Z | 2026-10-29T21:15:07.999Z |
| cve-2024-58296 | 5.3 (v4.0) | CE Phoenix v1.0.8.20 Stored Cross-Site Scripting via a… |
PhoenixCart |
CE Phoenix |
2025-12-11T21:38:04.687Z | 2026-10-29T21:15:07.289Z |
| cve-2024-58276 | 8.7 (v4.0) | Obi08-Enrollment System 1.0 get_subject.php SQL Injection |
Obi08/Enrollment System |
Obi08/Enrollment System |
2025-12-04T20:41:45.603Z | 2026-10-29T21:15:06.555Z |
| cve-2024-58275 | 8.7 (v4.0) | Easywall 0.3.1 - Authenticated Command Injection in /p… |
jpylypiw |
Easywall |
2025-12-04T20:41:13.750Z | 2026-10-29T21:15:05.818Z |
| cve-2024-23690 | 7.2 (v3.1) | EOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configurati… |
Netgear |
FVS336Gv3 |
2025-02-04T14:34:00.370Z | 2026-10-29T21:15:05.111Z |
| cve-2024-22047 | 3.1 (v3.1) | Audited Log Integrity Errors Due to Race Condition |
|
|
2024-01-04T20:32:02.771Z | 2026-10-29T21:15:04.448Z |
| cve-2023-53982 | 9.3 (v4.0) 7.5 (v3.1) | PMB 7.4.6 SQL Injection Vulnerability via Unsanitized … |
Sigb |
PMB |
2025-12-23T19:34:11.262Z | 2026-10-29T21:15:03.753Z |
| cve-2023-53937 | 8.5 (v4.0) 7.8 (v3.1) | Hubstaff 1.6.13 and 1.6.14 DLL Search Order Hijacking … |
Hubstaff |
Hubstaff |
2025-12-18T19:57:43.518Z | 2026-10-29T21:15:03.039Z |
| cve-2023-53907 | 7.1 (v4.0) 6.5 (v3.1) | Bludit < 3.13.0 Authenticated Arbitrary File Download … |
Bludit |
Backup Plugin |
2025-12-17T22:44:45.886Z | 2026-10-29T21:15:02.347Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-123 | Vulnérabilités dans TrueType | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-122 | Vulnérabilités IBM Maximo | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-121 | Vulnérabilités dans IBM DB2 | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-120 | Vulnérabilités dans IBM Tivoli | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-119 | Vulnérabilités dans Symantec Entreprise Vault | 2012-03-07T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-118 | Vulnérabilités dans MantisBT | 2012-03-07T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-094 | Vulnérabilité dans libxml2 | 2012-02-23T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-028 | Vulnérabilité dans OpenSSL | 2012-01-20T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2011-avi-013 | Vulnérabilité dans sudo | 2011-01-14T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-117 | Vulnérabilité dans Novell ZENworks | 2012-03-06T00:00:00.000000 | 2012-03-06T00:00:00.000000 |
| certa-2012-avi-116 | Vulnérabilité dans phpCAS | 2012-03-06T00:00:00.000000 | 2012-03-06T00:00:00.000000 |
| certa-2012-avi-114 | Vulnérabilités dans Google Chrome | 2012-03-06T00:00:00.000000 | 2012-03-06T00:00:00.000000 |
| certa-2012-avi-113 | Vulnérabilité dans Ruby on Rails | 2012-03-05T00:00:00.000000 | 2012-03-05T00:00:00.000000 |
| certa-2012-avi-112 | Vulnérabilité dans StoneGate | 2012-03-05T00:00:00.000000 | 2012-03-05T00:00:00.000000 |
| certa-2012-avi-091 | Vulnérabilité dans libvorbis | 2012-02-20T00:00:00.000000 | 2012-03-05T00:00:00.000000 |
| certa-2011-avi-465 | Vulnérabilité dans stunnel | 2011-08-23T00:00:00.000000 | 2012-03-05T00:00:00.000000 |
| certa-2012-avi-111 | Vulnérabilité dans Novell GroupWise | 2012-03-02T00:00:00.000000 | 2012-03-02T00:00:00.000000 |
| certa-2012-avi-110 | Vulnérabilités dans Dotclear | 2012-03-02T00:00:00.000000 | 2012-03-02T00:00:00.000000 |
| certa-2012-avi-109 | Vulnérabilités dans Cisco TelePresence Video Communication Server | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-108 | Multiples vulnérabilités dans Cisco Unity Connection | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-107 | Multiples vulnérabilités dans Cisco Wireless LAN Controllers | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-106 | Vulnérabilités dans Cisco Unified Communications Manager | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-105 | Vulnérabilité dans Cisco Cius | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-104 | Multiples vulnérabilités dans JP1/Cm2/Network Node Manager i | 2012-03-01T00:00:00.000000 | 2012-03-01T00:00:00.000000 |
| certa-2012-avi-103 | Vulnérabilité dans IBM Personal Communications | 2012-02-29T00:00:00.000000 | 2012-02-29T00:00:00.000000 |
| certa-2012-avi-102 | Vulnérabilités dans Avaya CMS | 2012-02-29T00:00:00.000000 | 2012-02-29T00:00:00.000000 |
| certa-2012-avi-101 | Multiples vulnérabilités dans PostgreSQL | 2012-02-28T00:00:00.000000 | 2012-02-28T00:00:00.000000 |
| certa-2012-avi-100 | Vulnérabilité dans IBM AIX | 2012-02-28T00:00:00.000000 | 2012-02-28T00:00:00.000000 |
| certa-2012-avi-099 | Vulnérabilité dans Samba | 2012-02-24T00:00:00.000000 | 2012-02-24T00:00:00.000000 |
| certa-2012-avi-098 | Vulnérabilité de CVS | 2012-02-24T00:00:00.000000 | 2012-02-24T00:00:00.000000 |