Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118687 | 8.3 (v4.0) 6.5 (v3.1) | Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.3… |
coder |
coder |
2026-10-28T18:59:56.265Z | 2026-10-29T20:54:16.473Z |
| cve-2026-118265 | Echo: X-Real-IP extractor trusts the header value inst… |
labstack |
echo |
2026-10-28T19:03:56.934Z | 2026-10-29T20:54:10.718Z | |
| cve-2026-118651 | Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-… |
labstack |
echo |
2026-10-28T19:30:01.320Z | 2026-10-29T20:53:54.404Z | |
| cve-2026-61529 | Endatix: Blind second-order SSRF via anonymous form-su… |
endatix |
endatix |
2026-10-28T19:43:17.490Z | 2026-10-29T20:53:45.092Z | |
| cve-2026-116124 | GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_met… |
GNOME |
libgsf |
2026-10-26T06:00:16.242Z | 2026-10-29T20:50:15.497Z | |
| cve-2026-116121 | NocoDB Registration users.service.ts race condition |
n/a |
NocoDB |
2026-10-26T05:15:16.078Z | 2026-10-29T20:49:36.116Z | |
| cve-2026-116118 | Z.ai Zcode Sed Command Filter os command injection |
Z.ai |
Zcode |
2026-10-26T04:30:43.827Z | 2026-10-29T20:48:50.790Z | |
| cve-2026-116115 | Yoosee GM8135S Camera WiFi Configuration wpa_supplican… |
Yoosee |
GM8135S Camera |
2026-10-26T03:45:19.003Z | 2026-10-29T20:47:46.895Z | |
| cve-2026-116112 | HashenUdara edoc-doctor-appointment-system add-new.php… |
HashenUdara |
edoc-doctor-appointment-system |
2026-10-26T03:00:16.607Z | 2026-10-29T20:47:07.249Z | |
| cve-2026-116109 | continuedev Continue MCP Server Transport ConfigHandle… |
continuedev |
Continue |
2026-10-26T02:15:18.141Z | 2026-10-29T20:46:27.780Z | |
| cve-2026-116106 | HeyCyan App FileProvider access control |
n/a |
HeyCyan App |
2026-10-26T01:30:20.653Z | 2026-10-29T20:45:50.085Z | |
| cve-2026-116103 | Sony Neural Network Libraries Encode Param encode_deco… |
Sony |
Neural Network Libraries |
2026-10-26T00:45:29.142Z | 2026-10-29T20:44:57.767Z | |
| cve-2026-119251 | 6.7 (v3.1) | A malicious actor with local access and high priv… |
Ubiquiti Inc |
WiFiman Desktop for macOS |
2026-10-29T18:29:46.417Z | 2026-10-29T20:39:44.834Z |
| cve-2026-103094 | 7.1 (v4.0) | Cleartext Storage of OAuth Credentials in ServiceNow A… |
ServiceNow |
ServiceNow AI Platform |
2026-10-29T18:40:52.681Z | 2026-10-29T20:38:39.043Z |
| cve-2026-6877 | 5.3 (v4.0) | Domain Separation Bypass in ServiceNow AI Platform |
ServiceNow |
ServiceNow AI Platform |
2026-10-29T18:49:37.752Z | 2026-10-29T20:37:31.040Z |
| cve-2026-103093 | 9.4 (v4.0) | Sandbox Escape via Table Rotation in ServiceNow AI Platform |
ServiceNow |
ServiceNow AI Platform |
2026-10-29T18:54:22.587Z | 2026-10-29T20:36:53.393Z |
| cve-2026-119199 | Nuxt dev server exposes private runtime config through… |
nuxt |
nuxt |
2026-10-29T20:14:07.854Z | 2026-10-29T20:27:59.121Z | |
| cve-2026-119195 | pyasn1: Quadratic-time denial of service in constructe… |
pyasn1 |
pyasn1 |
2026-10-29T19:41:37.352Z | 2026-10-29T20:26:31.801Z | |
| cve-2026-119190 | Forge: X.509 basicConstraints bypass in verifyCertific… |
digitalbazaar |
forge |
2026-10-29T19:25:09.677Z | 2026-10-29T20:25:04.131Z | |
| cve-2026-119186 | Forge: AES-GCM authentication bypass via unvalidated t… |
digitalbazaar |
forge |
2026-10-29T19:17:26.965Z | 2026-10-29T20:24:15.290Z | |
| cve-2026-118779 | Forge: Regular expression denial of service in PEM dec… |
digitalbazaar |
forge |
2026-10-29T18:45:55.093Z | 2026-10-29T20:23:11.602Z | |
| cve-2026-118775 | Forge: ASN.1 OID first arc truncation in asn1.oidToDer |
digitalbazaar |
forge |
2026-10-29T18:35:33.776Z | 2026-10-29T20:22:06.327Z | |
| cve-2026-118769 | Botan: Integer overflow when reporting block size in F… |
randombit |
botan |
2026-10-29T17:22:07.316Z | 2026-10-29T20:21:04.235Z | |
| cve-2026-13717 | 8.8 (v3.1) | Rhoai maas: llm-d: maas/llm-d inference gateway: defau… |
|
|
2026-08-10T20:44:01.309Z | 2026-10-29T20:20:11.572Z |
| cve-2026-116100 | gougucms User Level Level.php add cross site scripting |
n/a |
gougucms |
2026-10-26T00:00:24.725Z | 2026-10-29T20:20:08.630Z | |
| cve-2026-118765 | Botan: AutoSeeded_RNG can become reinitialized from pr… |
randombit |
botan |
2026-10-29T17:12:07.807Z | 2026-10-29T20:19:55.406Z | |
| cve-2026-104596 | N/A | libosmocore through 1.14.1 contains out-of-bounds… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-29T20:19:01.668Z |
| cve-2026-118761 | Kubeflow Pipelines: Pipeline archive upload allows dec… |
kubeflow |
pipelines |
2026-10-29T16:37:44.333Z | 2026-10-29T20:18:59.625Z | |
| cve-2026-118758 | Kubeflow: Unauthenticated path traversal to arbitrary … |
kubeflow |
pipelines |
2026-10-29T16:12:42.138Z | 2026-10-29T20:18:30.607Z | |
| cve-2026-104591 | N/A | libosmocore through 1.14.1 contains a buffer over… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-29T20:17:45.283Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-063 | Multiples vulnérabilités dans Apache pour HP-UX | 2012-02-08T00:00:00.000000 | 2012-02-08T00:00:00.000000 |
| certa-2012-avi-062 | Vulnérabilité dans IBM AIX | 2012-02-08T00:00:00.000000 | 2012-02-08T00:00:00.000000 |
| certa-2012-avi-032 | Vulnérabilités dans pcAnywhere | 2012-01-26T00:00:00.000000 | 2012-02-08T00:00:00.000000 |
| certa-2012-avi-060 | Vulnérabilité dans EMC Documentum xPlore | 2012-02-07T00:00:00.000000 | 2012-02-07T00:00:00.000000 |
| certa-2012-avi-059 | Vulnérabilités dans DotNetNuke | 2012-02-06T00:00:00.000000 | 2012-02-06T00:00:00.000000 |
| certa-2012-avi-058 | Vulnérabilité dans Skype | 2012-02-06T00:00:00.000000 | 2012-02-06T00:00:00.000000 |
| certa-2010-avi-555 | Vulnérabilité dans OpenSSL | 2010-11-17T00:00:00.000000 | 2012-02-06T00:00:00.000000 |
| certa-2012-avi-057 | Vulnérabilité dans EMC Documentum | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-056 | Vulnérabilités dans Blue Coat Reporter | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-055 | Vulnérabilité dans PHP | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-054 | Vulnérabilités dans Mac OS X | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-053 | Vulnérabilités dans Bugzilla | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-052 | Multiples vulnérabilités dans Drupal | 2012-02-03T00:00:00.000000 | 2012-02-03T00:00:00.000000 |
| certa-2012-avi-051 | Vulnérabilité dans HP Network Automation | 2012-02-02T00:00:00.000000 | 2012-02-02T00:00:00.000000 |
| certa-2012-avi-050 | Vulnérabilités dans Apache | 2012-02-02T00:00:00.000000 | 2012-02-02T00:00:00.000000 |
| certa-2012-avi-049 | Vulnérabilité dans Ubuntu AccountsService | 2012-02-01T00:00:00.000000 | 2012-02-01T00:00:00.000000 |
| certa-2012-avi-048 | Vulnérabilité dans Ubuntu Software Properties | 2012-02-01T00:00:00.000000 | 2012-02-01T00:00:00.000000 |
| certa-2012-avi-047 | Multiples vulnérabilités dans les produits Mozilla | 2012-02-01T00:00:00.000000 | 2012-02-01T00:00:00.000000 |
| certa-2012-avi-046 | Vulnérabilités dans VMware ESX et ESXi | 2012-02-01T00:00:00.000000 | 2012-02-01T00:00:00.000000 |
| certa-2012-avi-045 | Vulnérabilité dans des produits Oracle | 2012-02-01T00:00:00.000000 | 2012-02-01T00:00:00.000000 |
| certa-2012-avi-044 | Vulnérabilité dans RSA enVision | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-043 | Vulnérabilité dans IBM Web Experience Factory | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-042 | Vulnérabilité dans JBoss | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-041 | Vulnérabilités dans IBM DB2 Accessories Suite | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-040 | Vulnérabilités dans SAP NetWeaver | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-039 | Vulnérabilités dans FFmpeg | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-038 | Vulnérabilité dans Samba | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-037 | Vulnérabilité dans IBM solidDB | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-036 | Multiples vulnérabilités dans Postfix Admin | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |
| certa-2012-avi-035 | Vulnérabilité dans Cisco IP Video Phone E20 | 2012-01-31T00:00:00.000000 | 2012-01-31T00:00:00.000000 |