Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2018-25308 | 8.7 (v4.0) 8.8 (v3.1) | BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary… |
donmik |
Buddypress Xprofile Custom Fields Type |
2026-04-29T19:24:39.324Z | 2026-10-29T21:15:01.677Z |
| cve-2017-20251 | 9.3 (v4.0) 9.8 (v3.1) | WordPress Insert PHP Plugin < 3.3.1 PHP Code Injection… |
Themeisle |
Woody Code Snippets |
2026-06-09T11:48:39.195Z | 2026-10-29T21:15:00.988Z |
| cve-2017-20243 | 8.8 (v4.0) 8.2 (v3.1) | WordPress Car Park Booking Plugin SQL Injection via space_id |
gurutechteam |
Car Park Booking WordPress Plugin |
2026-06-09T11:48:33.361Z | 2026-10-29T21:15:00.315Z |
| cve-2017-20238 | 7.1 (v3.1) 7.1 (v4.0) | Hirschmann Industrial HiVision Improper Authorization … |
Belden |
Hirschmann Industrial HiVision |
2026-04-03T22:10:18.157Z | 2026-10-29T21:14:59.636Z |
| cve-2016-20084 | 5.1 (v4.0) 7.2 (v3.1) | WordPress appointment-booking-calendar 1.1.24 Privileg… |
dwbooster |
Appointment Booking Calendar |
2026-06-15T12:00:49.912Z | 2026-10-29T21:14:58.960Z |
| cve-2026-102483 | 7.5 (v3.1) | Reachable Assertion in ntpsec |
NTPsec |
ntpsec |
2026-10-21T15:03:41.276Z | 2026-10-29T20:57:11.825Z |
| cve-2026-102484 | 6.4 (v3.1) | Heap-based Buffer Overflow in ntpsec |
NTPsec |
ntpsec |
2026-10-21T15:03:46.313Z | 2026-10-29T20:57:05.091Z |
| cve-2026-102485 | 5.2 (v3.1) | Out-of-bounds Read in ntpsec |
NTPsec |
ntpsec |
2026-10-21T15:03:51.277Z | 2026-10-29T20:56:57.697Z |
| cve-2026-102486 | 7.5 (v3.1) | Out-of-bounds Read in ntpsec |
NTPsec |
ntpsec |
2026-10-21T15:04:01.274Z | 2026-10-29T20:56:51.755Z |
| cve-2026-114470 | 5.3 (v3.1) | Cross-Site Request Forgery (CSRF) in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:11:20.847Z | 2026-10-29T20:56:45.205Z |
| cve-2026-114471 | 4.7 (v3.1) | Insertion of Sensitive Information into Log File in hM… |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:11:50.847Z | 2026-10-29T20:56:38.681Z |
| cve-2026-114472 | 3.7 (v3.1) | Insufficient Resource Pool in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:11:55.846Z | 2026-10-29T20:56:32.293Z |
| cve-2026-114473 | 5 (v3.1) | Incorrect Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:05.843Z | 2026-10-29T20:56:25.949Z |
| cve-2026-114474 | 5.9 (v3.1) | Use of Less Trusted Source in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:15.849Z | 2026-10-29T20:56:19.809Z |
| cve-2026-114475 | 6.5 (v3.1) | Missing Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:20.842Z | 2026-10-29T20:56:12.860Z |
| cve-2026-114476 | 7.5 (v3.1) | Incorrect Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:25.844Z | 2026-10-29T20:56:06.397Z |
| cve-2026-114477 | 4.3 (v3.1) | Missing Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:30.844Z | 2026-10-29T20:55:57.794Z |
| cve-2026-114478 | 5.9 (v3.1) | Unintended Proxy or Intermediary ('Confused Deputy') i… |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:12:35.847Z | 2026-10-29T20:55:51.043Z |
| cve-2026-114489 | 8.1 (v3.1) | Missing Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:34:06.371Z | 2026-10-29T20:55:43.979Z |
| cve-2026-114490 | 7.8 (v3.1) | Incorrect Authorization in hMailServer |
Progressive Robot Ltd |
hMailServer |
2026-10-21T15:34:11.363Z | 2026-10-29T20:55:36.300Z |
| cve-2026-118245 | Highcharts Dashboards: `chartConstructor` is an unchec… |
highcharts |
highcharts |
2026-10-28T17:44:51.571Z | 2026-10-29T20:55:28.922Z | |
| cve-2026-118249 | Highcharts: series column construction writes to Objec… |
highcharts |
highcharts |
2026-10-28T17:57:18.323Z | 2026-10-29T20:55:21.954Z | |
| cve-2026-118253 | Highcharts Dashboards: fullscreen labels are parsed as HTML |
highcharts |
highcharts |
2026-10-28T18:11:03.809Z | 2026-10-29T20:55:13.964Z | |
| cve-2026-118257 | Vue I18n: escapeParameter does not prevent XSS through… |
intlify |
vue-i18n |
2026-10-28T18:23:49.400Z | 2026-10-29T20:55:05.780Z | |
| cve-2026-118261 | Echo: Decompress permits unbounded gzip expansion in v4 |
labstack |
echo |
2026-10-28T18:58:43.504Z | 2026-10-29T20:54:55.973Z | |
| cve-2026-118641 | 6.9 (v4.0) 7.5 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter … |
n8n-io |
n8n |
2026-10-28T18:59:40.104Z | 2026-10-29T20:54:49.193Z |
| cve-2026-118645 | 7 (v4.0) 8.7 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injecti… |
n8n-io |
n8n |
2026-10-28T18:59:44.935Z | 2026-10-29T20:54:42.221Z |
| cve-2026-118649 | 8.7 (v4.0) 8.3 (v3.1) | n8n before 2.43.5 and 2.44.1 Authorization Bypass via … |
n8n-io |
n8n |
2026-10-28T18:59:47.664Z | 2026-10-29T20:54:35.672Z |
| cve-2026-118678 | 7.1 (v4.0) 7.1 (v3.1) | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS v… |
n8n-io |
n8n |
2026-10-28T18:59:50.449Z | 2026-10-29T20:54:29.021Z |
| cve-2026-118683 | 8.6 (v4.0) 8.8 (v3.1) | MONAI 1.2.0 before 1.6.1 Code Execution via bundle con… |
Project-MONAI |
MONAI |
2026-10-28T18:59:53.203Z | 2026-10-29T20:54:22.874Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-097 | Vulnérabilité dans Python | 2012-02-24T00:00:00.000000 | 2012-02-24T00:00:00.000000 |
| certa-2012-avi-096 | Multiples vulnérabilités dans CISCO SRP 500 Series | 2012-02-24T00:00:00.000000 | 2012-02-24T00:00:00.000000 |
| certa-2012-avi-095 | Vulnérabilité dans Bugzilla | 2012-02-23T00:00:00.000000 | 2012-02-23T00:00:00.000000 |
| certa-2012-avi-093 | Vulnérabilité dans phpMyAdmin | 2012-02-23T00:00:00.000000 | 2012-02-23T00:00:00.000000 |
| certa-2012-avi-087 | Vulnérabilité dans libpng | 2012-02-20T00:00:00.000000 | 2012-02-23T00:00:00.000000 |
| certa-2012-avi-092 | Vulnérabilité dans TYPO3 | 2012-02-20T00:00:00.000000 | 2012-02-20T00:00:00.000000 |
| certa-2012-avi-090 | Vulnérabilité dans Cisco IronPort | 2012-02-20T00:00:00.000000 | 2012-02-20T00:00:00.000000 |
| certa-2012-avi-089 | Vulnérabilité dans Cisco NX-OS | 2012-02-20T00:00:00.000000 | 2012-02-20T00:00:00.000000 |
| certa-2012-avi-088 | Vulnérabilités dans Google Chrome | 2012-02-20T00:00:00.000000 | 2012-02-20T00:00:00.000000 |
| certa-2012-avi-086 | Vulnérabilité dans les produits Mozilla | 2012-02-20T00:00:00.000000 | 2012-02-20T00:00:00.000000 |
| certa-2012-avi-083 | Vulnérabilités dans Citrix XenServer Web Self Service | 2012-02-17T00:00:00.000000 | 2012-02-17T00:00:00.000000 |
| certa-2012-avi-082 | Vulnérabilités dans le Framework Microsoft .Net et Microsoft Silverlight | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-081 | Multiples vulnérabilités dans Microsoft Visio Viewer | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-080 | Vulnérabilité dans le codec Indeo de Microsoft Windows | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-079 | Vulnérabilité dans la bibliothèque RunTime C Microsoft | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-078 | Vulnérabilité dans le panneau de configuration des couleurs de Microsoft Windows | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-077 | Vulnérabilités dans Microsoft Sharepoint | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-076 | Multiples vulnérabilités dans Internet Explorer | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-075 | Vulnérabilités dans le pilote de gestion des connexions réseau de Microsoft Windows | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-074 | Vulnérabilités dans les pilotes Windows | 2012-02-15T00:00:00.000000 | 2012-02-15T00:00:00.000000 |
| certa-2012-avi-073 | Vulnérabilité dans les produits Mozilla | 2012-02-13T00:00:00.000000 | 2012-02-13T00:00:00.000000 |
| certa-2012-avi-071 | Vulnérabilités dans Novell iPrint | 2012-02-10T00:00:00.000000 | 2012-02-10T00:00:00.000000 |
| certa-2012-avi-070 | Vulnérabilité dans Avaya Interaction Center | 2012-02-09T00:00:00.000000 | 2012-02-09T00:00:00.000000 |
| certa-2012-avi-069 | Vulnérabilités dans Google Chrome | 2012-02-09T00:00:00.000000 | 2012-02-09T00:00:00.000000 |
| certa-2012-avi-068 | Vulnérabilité dans Red Hat Network Proxy | 2012-02-09T00:00:00.000000 | 2012-02-09T00:00:00.000000 |
| certa-2012-avi-067 | Vulnérabilité dans Red Hat Network Satellite | 2012-02-09T00:00:00.000000 | 2012-02-09T00:00:00.000000 |
| certa-2011-avi-630 | Multiples vulnérabilités dans Adobe Flash Player | 2011-11-14T00:00:00.000000 | 2012-02-09T00:00:00.000000 |
| certa-2012-avi-066 | Vulnérabilité dans JBoss Enterprise Platform | 2012-02-08T00:00:00.000000 | 2012-02-08T00:00:00.000000 |
| certa-2012-avi-065 | Multiples vulnérabilités dans JBoss Operations Network | 2012-02-08T00:00:00.000000 | 2012-02-08T00:00:00.000000 |
| certa-2012-avi-064 | Vulnérabilités dans RealPlayer | 2012-02-08T00:00:00.000000 | 2012-02-08T00:00:00.000000 |