Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116177 | 8.7 (v4.0) 7.5 (v3.1) | vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processo… |
vllm-project |
vllm |
2026-10-25T13:20:17.160Z | 2026-10-29T19:58:12.636Z |
| cve-2026-116169 | 5.1 (v4.0) 5.4 (v3.1) | SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href … |
siyuan-note |
siyuan |
2026-10-25T13:20:11.710Z | 2026-10-29T19:57:27.661Z |
| cve-2026-107052 | N/A | Insecure permissions in the AIDL interface of Pro… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T19:56:53.213Z |
| cve-2026-116165 | 8.8 (v4.0) | Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticat… |
parse-community |
parse-server |
2026-10-25T13:20:09.004Z | 2026-10-29T19:56:28.366Z |
| cve-2026-116161 | 6 (v4.0) | Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Inf… |
parse-community |
parse-server |
2026-10-25T13:20:06.298Z | 2026-10-29T19:55:35.620Z |
| cve-2026-107058 | N/A | An issue in Shelter versionCode 445 allows attack… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T19:54:43.834Z |
| cve-2026-116153 | 2 (v4.0) 2.5 (v3.1) | ImageMagick before 7.1.2-33 Heap Buffer Overflow via C… |
ImageMagick |
ImageMagick |
2026-10-25T13:20:01.069Z | 2026-10-29T19:54:06.897Z |
| cve-2026-96512 | 7.8 (v3.1) | Sudo: sudo: tz environment variable allows bypass of n… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-09-23T13:22:33.080Z | 2026-10-29T19:53:47.337Z |
| cve-2026-116149 | 7.2 (v4.0) 8.1 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 S… |
ImageMagick |
ImageMagick |
2026-10-25T13:19:58.386Z | 2026-10-29T19:53:21.313Z |
| cve-2026-116145 | 1.8 (v4.0) 3.9 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 S… |
ImageMagick |
ImageMagick |
2026-10-25T13:19:55.780Z | 2026-10-29T19:52:42.831Z |
| cve-2026-107015 | N/A | Insecure permissions in Simple Contacts Pro versi… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T19:52:34.924Z |
| cve-2026-116141 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder |
ImageMagick |
ImageMagick |
2026-10-25T13:19:53.057Z | 2026-10-29T19:51:45.323Z |
| cve-2026-116136 | 6 (v4.0) 5.9 (v3.1) | ProjectSend 2.0.0 through 2.7.1 Incorrect Authorizatio… |
projectsend |
ProjectSend |
2026-10-25T11:51:01.317Z | 2026-10-29T19:51:01.337Z |
| cve-2026-116070 | 6.9 (v4.0) 6.5 (v3.1) | Docker-Proxy through 5.1.9 Missing Authentication via … |
dqzboy |
Docker-Proxy |
2026-10-25T11:50:58.565Z | 2026-10-29T19:49:55.270Z |
| cve-2026-62013 | 9.8 (v3.1) | WordPress Edge Decor theme <= 2.9 - PHP Object Injecti… |
ThemeREX |
Edge Decor |
2026-10-29T15:24:22.290Z | 2026-10-29T19:49:22.240Z |
| cve-2026-116066 | 7 (v4.0) 6.8 (v3.1) | Firecrawl before 2.11.586 SSRF Protection Bypass via D… |
Firecrawl |
Firecrawl |
2026-10-25T11:50:55.818Z | 2026-10-29T19:48:49.188Z |
| cve-2026-62018 | 9.8 (v3.1) | WordPress Gunslinger theme <= 1.11 - PHP Object Inject… |
ThemeREX |
Gunslinger |
2026-10-29T15:24:26.009Z | 2026-10-29T19:48:00.882Z |
| cve-2026-116050 | krupalshah Employee Recruitment System Registration re… |
krupalshah |
Employee Recruitment System |
2026-10-25T08:45:18.342Z | 2026-10-29T19:47:44.517Z | |
| cve-2026-108494 | 7.1 (v3.1) | WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Sc… |
Bob |
Chained Quiz |
2026-10-29T15:24:27.520Z | 2026-10-29T19:46:58.960Z |
| cve-2026-116047 | Privoce Vocechat Query Parameter widget.html cross sit… |
Privoce |
Vocechat |
2026-10-25T07:30:12.541Z | 2026-10-29T19:46:46.623Z | |
| cve-2026-116044 | prasathmani TinyFileManager Remote URL File Upload tin… |
prasathmani |
TinyFileManager |
2026-10-25T05:45:16.032Z | 2026-10-29T19:46:00.515Z | |
| cve-2026-116868 | 8.8 (v3.1) | WordPress BuddyPress Xprofile Custom Field Types plugi… |
BuddyDev |
BuddyPress Xprofile Custom Field Types |
2026-10-29T15:24:31.253Z | 2026-10-29T19:45:42.553Z |
| cve-2026-118076 | 8.8 (v3.1) | WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object In… |
Frisbii |
Frisbii Pay |
2026-10-29T15:24:35.032Z | 2026-10-29T19:44:58.856Z |
| cve-2026-118081 | 8.8 (v3.1) | WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PH… |
10Web |
10Web Social Photo Feed |
2026-10-29T15:24:38.804Z | 2026-10-29T19:43:59.116Z |
| cve-2026-62008 | 9.8 (v3.1) | WordPress Orpheus theme <= 1.8 - PHP Object Injection … |
ThemeREX |
Orpheus |
2026-10-29T15:24:18.536Z | 2026-10-29T19:43:02.462Z |
| cve-2026-62002 | 9.8 (v3.1) | WordPress Meals & Wheels theme <= 1.1.13 - PHP Object … |
ThemeREX |
Meals & Wheels |
2026-10-29T15:24:14.783Z | 2026-10-29T19:42:29.362Z |
| cve-2026-61995 | 7.1 (v3.1) | WordPress YouTube Showcase plugin <= 4.1.0 - Cross Sit… |
emarket-design |
YouTube Showcase |
2026-10-29T15:24:10.950Z | 2026-10-29T19:41:43.590Z |
| cve-2026-67203 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-29T19:41:07.352Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-29T19:41:07.352Z | |
| cve-2026-61988 | 7.1 (v3.1) | WordPress Auction Nudge – Your eBay on Your Site plugi… |
morehawes |
Auction Nudge – Your eBay on Your Site |
2026-10-29T15:24:07.189Z | 2026-10-29T19:41:03.059Z |
| cve-2026-54859 | 9.8 (v3.1) | WordPress Preservation theme <= 1.15 - PHP Object Inje… |
ThemeREX |
Preservation |
2026-10-29T15:24:03.450Z | 2026-10-29T19:40:30.116Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-005 | Vulnérabilité dans les imprimantes HP LaserJet P3015 | 2012-01-10T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| certa-2012-avi-004 | Multiples vulnérabilités dans Google Chrome | 2012-01-10T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| certa-2012-avi-003 | Multiples vulnérabilités dans Apache Struts | 2012-01-05T00:00:00.000000 | 2012-01-05T00:00:00.000000 |
| certa-2012-avi-002 | Vulnérabilité dans WordPress | 2012-01-05T00:00:00.000000 | 2012-01-05T00:00:00.000000 |
| certa-2012-avi-001 | Vulnérabilité dans Arkoon FAST360 | 2012-01-04T00:00:00.000000 | 2012-01-04T00:00:00.000000 |
| certa-2011-avi-730 | Vulnérabilité dans Apache Tomcat | 2011-12-30T00:00:00.000000 | 2011-12-30T00:00:00.000000 |
| certa-2011-avi-729 | Vulnérabilité dans Ruby | 2011-12-30T00:00:00.000000 | 2011-12-30T00:00:00.000000 |
| certa-2011-avi-728 | Vulnérabilité dans PHP | 2011-12-30T00:00:00.000000 | 2011-12-30T00:00:00.000000 |
| certa-2011-avi-727 | Vulnérabilités dans l'implémentation ASP.Net du Microsoft .NET Framework | 2011-12-30T00:00:00.000000 | 2011-12-30T00:00:00.000000 |
| certa-2011-avi-726 | Multiples vulnérabilités dans F5 Enterprise Manager | 2011-12-28T00:00:00.000000 | 2011-12-28T00:00:00.000000 |
| certa-2011-avi-725 | Vulnérabilité dans IBM DB2 | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-724 | Vulnérabilité dans IBM Lotus Domino | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-723 | Multiples vulnérabilités dans les produits Websense | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-722 | Vulnérabilité dans pam_ssh sur FreeBSD | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-721 | Multiples vulnérabilités dans HP Managed Printing Administration | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-720 | Vulnérabilité dans phpMyAdmin | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-719 | Vulnérabilité dans phpMyAdmin | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-718 | Vulnérabilité dans telnetd sur FreeBSD | 2011-12-26T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-706 | Vulnérabilité dans OpenPAM | 2011-12-19T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-avi-717 | Vulnérabilités dans Moodle | 2011-12-23T00:00:00.000000 | 2011-12-23T00:00:00.000000 |
| certa-2011-avi-716 | Vulnérabilité dans le pilote NVIDIA Stereoscopic 3D | 2011-12-22T00:00:00.000000 | 2011-12-22T00:00:00.000000 |
| certa-2011-avi-715 | Vulnérabilité dans Tiki Wiki | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-714 | Vulnérabilité dans PuTTY | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-713 | Vulnérabilité dans VLC media player | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-712 | Vulnérabilités dans les produits Mozilla | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-711 | Vulnérabilité dans bzexe | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-710 | Vulnérabilité dans IBM Tivoli Federated Identity Manager | 2011-12-21T00:00:00.000000 | 2011-12-21T00:00:00.000000 |
| certa-2011-avi-709 | Multiples vulnérabilités dans Nagios | 2011-12-19T00:00:00.000000 | 2011-12-19T00:00:00.000000 |
| certa-2011-avi-708 | Vulnérabilité dans Intel TXT (solution de sécurité de processeurs Intel) SINIT | 2011-12-19T00:00:00.000000 | 2011-12-19T00:00:00.000000 |
| certa-2011-avi-707 | Vulnérabilité dans EMC RSA Adaptative Authentication On-Premise | 2011-12-19T00:00:00.000000 | 2011-12-19T00:00:00.000000 |