Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-42692 | 7.1 (v3.1) | WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site… |
Themeum |
WP Crowdfunding |
2026-10-29T15:23:59.420Z | 2026-10-29T19:39:42.399Z |
| cve-2026-67205 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-29T19:39:11.643Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-29T19:39:11.643Z | |
| cve-2026-18894 | 6.5 (v3.1) | Langflow OSS is affected by multiple vulnerabilities |
IBM |
Langflow OSS |
2026-10-29T15:19:09.963Z | 2026-10-29T19:38:15.803Z |
| cve-2026-104309 | 6.5 (v3.1) | Langflow OSS is affected by multiple vulnerabilities |
IBM |
Langflow OSS |
2026-10-29T15:17:56.851Z | 2026-10-29T19:37:22.227Z |
| cve-2026-104316 | 6.5 (v3.1) | Langflow OSS is affected by multiple vulnerabilities |
IBM |
Langflow OSS |
2026-10-29T15:17:16.705Z | 2026-10-29T19:36:52.416Z |
| cve-2026-25448 | 4.3 (v3.1) | WordPress WP ERP plugin <= 1.17.10 - Broken Access Con… |
weDevs |
WP ERP |
2026-10-29T14:55:02.968Z | 2026-10-29T19:34:34.063Z |
| cve-2026-118097 | 6.5 (v3.1) | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross… |
bPlugins |
Flash & HTML5 Video |
2026-10-29T14:39:07.281Z | 2026-10-29T19:34:06.345Z |
| cve-2026-105923 | 4 (v4.0) | Null-pointer dereference in QTriangulator reachable th… |
qt |
Qt |
2026-10-21T09:21:05.197Z | 2026-10-29T19:10:32.263Z |
| cve-2026-70387 | 8.4 (v4.0) | OnePlus OxygenOS exposed dangerous method vulnerability |
OnePlus |
OxygenOS |
2026-10-21T09:07:56.492Z | 2026-10-29T19:09:35.392Z |
| cve-2026-97206 | 7.5 (v3.1) | DNS-over-QUIC (DoQ) path-migration can lead to use-aft… |
NLnet Labs |
Unbound |
2026-10-21T08:57:41.106Z | 2026-10-29T19:08:32.470Z |
| cve-2026-96405 | 5.3 (v3.1) | Aggregate DNS name chained pointer decompression work … |
NLnet Labs |
Unbound |
2026-10-21T08:57:26.986Z | 2026-10-29T19:07:33.197Z |
| cve-2026-50106 | 6.5 (v3.1) | Possible insecure NXDOMAIN for non-existing records un… |
NLnet Labs |
Unbound |
2026-10-21T08:57:11.040Z | 2026-10-29T19:06:43.165Z |
| cve-2026-35501 | 3.7 (v3.1) | Bypass of a configured island trust anchor underneath … |
NLnet Labs |
Unbound |
2026-10-21T08:56:55.811Z | 2026-10-29T19:05:26.623Z |
| cve-2026-109125 | 5.3 (v3.1) | Possible cache poisoning vulnerability via a cache sid… |
NLnet Labs |
Unbound |
2026-10-21T08:56:35.696Z | 2026-10-29T19:05:06.036Z |
| cve-2026-92387 | N/A | never-ending loop via server response omission |
curl |
curl |
2026-10-20T20:19:14.672Z | 2026-10-29T19:02:50.636Z |
| cve-2026-101103 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Classic … |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:19:10.646Z | 2026-10-29T19:01:16.074Z |
| cve-2026-92386 | N/A | server-set cookie aborts cookie jar load |
curl |
curl |
2026-10-20T20:17:37.356Z | 2026-10-29T19:00:33.876Z |
| cve-2026-87866 | N/A | wolfSSL public-key pinning bypass |
curl |
curl |
2026-10-20T20:16:30.866Z | 2026-10-29T18:59:00.981Z |
| cve-2026-114696 | 5.3 (v3.1) | WordPress Page Restriction WordPress (WP) plugin <= 1.… |
miniOrange |
Page Restriction WordPress (WP) |
2026-10-22T08:46:29.875Z | 2026-10-29T18:51:12.133Z |
| cve-2026-109576 | 5.5 (v3.1) 6.8 (v4.0) | HMS Networks PEAK-System PCAN Windows drivers Out-of-b… |
HMS Networks |
PEAK-System Device Driver Setup |
2026-10-20T20:16:18.220Z | 2026-10-29T18:50:02.535Z |
| cve-2026-112380 | 9.9 (v3.1) 9 (v4.0) | Missing authorization in the WhatsApp channel in Kiro Crew |
Amazon |
Kiro Crew |
2026-10-20T20:05:28.394Z | 2026-10-29T18:48:02.141Z |
| cve-2026-86412 | N/A | server-set cookie erases cookie jar |
curl |
curl |
2026-10-20T20:03:28.200Z | 2026-10-29T18:46:02.464Z |
| cve-2026-86411 | N/A | FTP connection reuse inherits client-certificate |
curl |
curl |
2026-10-20T20:02:03.431Z | 2026-10-29T18:42:03.095Z |
| cve-2026-59959 | SAIL: WebP decoder division by zero through malformed … |
HappySeaFox |
sail |
2026-10-28T13:17:29.214Z | 2026-10-29T18:39:38.355Z | |
| cve-2026-47235 | SimulationCraft: Heap-Based Buffer Overflow / Out-of-B… |
simulationcraft |
simc |
2026-10-28T15:38:21.113Z | 2026-10-29T18:38:47.642Z | |
| cve-2026-58120 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-29T18:38:37.289Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-29T18:38:37.289Z | |
| cve-2026-58119 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-29T18:38:32.766Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-29T18:38:32.766Z | |
| cve-2026-58118 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-29T18:38:28.902Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-29T18:38:28.902Z | |
| cve-2026-116776 | USB Test: Heap-based Buffer Overflow in getSectorSize … |
n-romanovich |
usb-test |
2026-10-28T15:42:11.023Z | 2026-10-29T18:37:18.070Z | |
| cve-2026-86410 | N/A | redirect to SFTP or SCP bypasses host verification |
curl |
curl |
2026-10-20T19:59:26.502Z | 2026-10-29T18:36:17.740Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-705 | Vulnérabilités dans Adobe Reader et Acrobat Reader | 2011-12-19T00:00:00.000000 | 2011-12-19T00:00:00.000000 |
| certa-2011-avi-704 | Vulnérabilité dans un produit Hitachi | 2011-12-16T00:00:00.000000 | 2011-12-16T00:00:00.000000 |
| certa-2011-avi-703 | Vulnérabilités dans JBoss | 2011-12-16T00:00:00.000000 | 2011-12-16T00:00:00.000000 |
| certa-2011-avi-702 | Vulnérabilités dans AIX | 2011-12-16T00:00:00.000000 | 2011-12-16T00:00:00.000000 |
| certa-2011-avi-701 | Vulnérabilité dans RSA SecurID Software Token | 2011-12-16T00:00:00.000000 | 2011-12-16T00:00:00.000000 |
| certa-2011-avi-700 | Vulnérabilités dans Splunk | 2011-12-16T00:00:00.000000 | 2011-12-16T00:00:00.000000 |
| certa-2011-avi-699 | Multiples vulnérabilités dans Cacti | 2011-12-15T00:00:00.000000 | 2011-12-15T00:00:00.000000 |
| certa-2011-avi-698 | Vulnérabilités dans Google Chrome | 2011-12-15T00:00:00.000000 | 2011-12-15T00:00:00.000000 |
| certa-2011-avi-697 | Vulnérabilités dans Adobe ColdFusion | 2011-12-15T00:00:00.000000 | 2011-12-15T00:00:00.000000 |
| certa-2011-avi-696 | Multiples vulnérabilités dans Internet Explorer | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-695 | Vulnérabilité dans le noyau Windows | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-694 | Vulnérabilité dans Microsoft Windows | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-693 | Vulnérabilité dans Microsoft Excel | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-692 | Vulnérabilité dans Active Directory | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-691 | Vulnérabilités dans Microsoft PowerPoint | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-690 | Vulnérabilité dans OLE | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-689 | Vulnérabilité dans Windows Media Player | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-688 | Vulnérabilités dans Microsoft Publisher | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-687 | Vulnérabilité dans Microsoft Time | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-686 | Vulnérabilité dans Microsoft Office | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-685 | Vulnérabilité dans Microsoft Office | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-684 | Vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-12-14T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-avi-683 | Vulnérabilité dans acpid | 2011-12-13T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-682 | Vulnérabilités dans Asterisk | 2011-12-13T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-681 | Vulnérabilité dans Apache Struts | 2011-12-13T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-680 | Vulnérabilité dans Trend Micro Control Manager | 2011-12-13T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-679 | Vulnérabilité dans CA SiteMinder | 2011-12-13T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-531 | Multiple vulnérabilités dans Adobe Flash Player | 2011-09-22T00:00:00.000000 | 2011-12-13T00:00:00.000000 |
| certa-2011-avi-678 | Vulnérabilité dans Novell ZENworks | 2011-12-09T00:00:00.000000 | 2011-12-09T00:00:00.000000 |
| certa-2011-avi-677 | Vulnérabilité dans ISC DHCP | 2011-12-08T00:00:00.000000 | 2011-12-08T00:00:00.000000 |