Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-63190 | FearlessCMS: Unauthenticated debug scripts expose file… |
fearlessgeekmedia |
FearlessCMS |
2026-10-28T19:28:00.080Z | 2026-10-29T18:35:51.109Z | |
| cve-2026-116796 | Highcharts Core: `javascript:` URL in an `xlink:href` … |
highcharts |
highcharts |
2026-10-28T17:23:02.604Z | 2026-10-29T18:34:59.207Z | |
| cve-2026-86409 | N/A | stale SigV4 headers sent unintended |
curl |
curl |
2026-10-20T19:57:01.794Z | 2026-10-29T18:33:49.983Z |
| cve-2026-59179 | OpenHop: Path Traversal in Flow ID File Operations |
naorsabag |
openhop |
2026-10-28T13:14:13.689Z | 2026-10-29T18:33:40.230Z | |
| cve-2026-59164 | NORA missing cross-user token-management authorization |
getnora-io |
nora |
2026-10-28T13:05:47.302Z | 2026-10-29T18:32:53.555Z | |
| cve-2026-54162 | Ember: Unneutralised terminal escape/control sequences… |
alexandre-daubois |
ember |
2026-10-28T19:44:41.999Z | 2026-10-29T18:31:49.122Z | |
| cve-2026-116004 | onyx-dot-app Onyx PreviewTab.tsx cross site scripting |
onyx-dot-app |
Onyx |
2026-10-25T02:30:20.707Z | 2026-10-29T18:31:06.384Z | |
| cve-2026-115997 | pig-mesh pig SqlFilterArgumentResolver.java orderItem.… |
pig-mesh |
pig |
2026-10-24T23:45:22.667Z | 2026-10-29T18:30:18.087Z | |
| cve-2026-118655 | Echo: Static Middleware Double-Unescape Path Traversal |
labstack |
echo |
2026-10-28T20:03:56.897Z | 2026-10-29T18:29:50.622Z | |
| cve-2026-115982 | phpIPAM Rack Link Creation show-rack-popup.php create_… |
n/a |
phpIPAM |
2026-10-24T22:00:13.102Z | 2026-10-29T18:29:22.668Z | |
| cve-2026-113867 | N/A | Stanza injection in XMPP chat |
Mozilla |
Thunderbird |
2026-10-20T19:14:55.002Z | 2026-10-29T18:28:43.359Z |
| cve-2026-115972 | FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthC… |
FaveoSuite |
Faveo Helpdesk |
2026-10-24T18:00:18.162Z | 2026-10-29T18:28:35.718Z | |
| cve-2026-118659 | @happy-dom/server-renderer: ServerRendererServer Targe… |
capricorn86 |
happy-dom |
2026-10-28T20:20:29.561Z | 2026-10-29T18:27:45.701Z | |
| cve-2026-118663 | @hono/node-server: `serveStatic` decodes the request p… |
honojs |
node-server |
2026-10-28T20:35:22.948Z | 2026-10-29T18:26:42.881Z | |
| cve-2026-115969 | Travisun Opptrix Schedule API setup command injection |
Travisun |
Opptrix |
2026-10-24T15:30:11.184Z | 2026-10-29T18:26:27.412Z | |
| cve-2026-118667 | LangGraph: Unencoded identifiers in LangGraph SDK v3 s… |
langchain-ai |
langgraph |
2026-10-28T20:51:46.657Z | 2026-10-29T18:26:03.178Z | |
| cve-2026-61546 | AnkiMCP: DNS rebinding reaches unauthenticated local A… |
ankimcp |
anki-mcp-server-addon |
2026-10-28T21:40:16.081Z | 2026-10-29T18:24:59.680Z | |
| cve-2026-116017 | 5.3 (v4.0) 4.3 (v3.1) | Xiaozhi-esp32-server before 0.9.8 IDOR via device addr… |
xinnan-tech |
xiaozhi-esp32-server |
2026-10-24T11:40:34.247Z | 2026-10-29T18:24:38.990Z |
| cve-2026-111088 | 6.5 (v3.1) | Stored XSS in the VPN logs monitor |
Stormshield |
Stormshield Network Security |
2026-10-20T18:45:33.737Z | 2026-10-29T18:23:52.543Z |
| cve-2026-59158 | Nuxt Ollama: public runtime configuration discloses th… |
thoda-dev |
nuxt-ollama |
2026-10-27T22:36:09.750Z | 2026-10-29T18:23:47.915Z | |
| cve-2026-116013 | 6.3 (v4.0) 3.7 (v3.1) | OpenResty lua-resty-dns before 0.24 Denial of Service … |
openresty |
lua-resty-dns |
2026-10-24T11:40:31.527Z | 2026-10-29T18:23:41.998Z |
| cve-2026-58205 | GRR has a Reflected XSS issue |
JeromeDevome |
GRR |
2026-10-27T22:26:14.705Z | 2026-10-29T18:22:43.499Z | |
| cve-2026-116009 | 8.7 (v4.0) 8.8 (v3.1) | Camaleon CMS before 2.9.3 Path Traversal RCE via Media… |
owen2345 |
camaleon-cms |
2026-10-24T11:40:28.810Z | 2026-10-29T18:22:04.998Z |
| cve-2026-57203 | Asterisk: Local privilege escalation through ast_loggr… |
asterisk |
asterisk |
2026-10-27T21:48:40.078Z | 2026-10-29T18:22:00.568Z | |
| cve-2026-108087 | Apache Cocoon: SQL Injection |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:25:12.654Z | 2026-10-29T18:21:55.393Z | |
| cve-2026-115801 | Kakao khaiii JSON Config File Linear.cpp open out-of-bounds |
Kakao |
khaiii |
2026-10-23T21:45:20.151Z | 2026-10-29T18:20:55.523Z | |
| cve-2026-115893 | Wasmtime: Cranelift backend on aarch64 can jump to inc… |
bytecodealliance |
wasmtime |
2026-10-23T21:29:33.917Z | 2026-10-29T18:20:01.899Z | |
| cve-2026-108086 | Apache Cocoon: XEE could lead to SSRF and information … |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:24:53.426Z | 2026-10-29T18:19:05.421Z | |
| cve-2026-115886 | MLflow: SSRF on unauthenticated MLflow servers via thi… |
mlflow |
mlflow |
2026-10-23T21:17:21.462Z | 2026-10-29T18:18:21.052Z | |
| cve-2026-58202 | OpenReception: Confirmation-email links built from the… |
open-reception |
appointment-booking-software |
2026-10-23T20:27:36.090Z | 2026-10-29T18:16:47.209Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-676 | Vulnérabilité dans Foxit Reader | 2011-12-07T00:00:00.000000 | 2011-12-07T00:00:00.000000 |
| certa-2011-avi-675 | Vulnérabilités dans Opera | 2011-12-07T00:00:00.000000 | 2011-12-07T00:00:00.000000 |
| certa-2011-avi-674 | Vulnérabilité dans MIT Kerberos | 2011-12-07T00:00:00.000000 | 2011-12-07T00:00:00.000000 |
| certa-2011-avi-673 | Vulnérabilité dans libXfont | 2011-12-06T00:00:00.000000 | 2011-12-06T00:00:00.000000 |
| certa-2011-avi-672 | Vulnérabilité dans Blue Coat ProxyAV | 2011-12-06T00:00:00.000000 | 2011-12-06T00:00:00.000000 |
| certa-2011-avi-671 | Vulnérabilités dans JBoss | 2011-12-05T00:00:00.000000 | 2011-12-05T00:00:00.000000 |
| certa-2011-avi-670 | Vulnérabilité dans Adobe Flex | 2011-12-05T00:00:00.000000 | 2011-12-05T00:00:00.000000 |
| certa-2011-avi-669 | Vulnérabilité dans Lighttpd | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-668 | Vulnérabilité dans Novell Open Enterprise Server | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-667 | Vulnérabilité dans IBM Tivoli Netcool/Reporter | 2011-11-30T00:00:00.000000 | 2011-11-30T00:00:00.000000 |
| certa-2011-avi-666 | Vulnérabilité dans le module Digest pour Perl | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-665 | Vulnérabilité dans System Administration Manager pour systèmes HP-UX | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-664 | Multiples vulnérabilités dans FFmpeg | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-663 | Vulnérabilités dans HP-UX Tomcat Servlet Engine | 2011-11-24T00:00:00.000000 | 2011-11-24T00:00:00.000000 |
| certa-2011-avi-662 | Vulnérabilités dans TYPO3 | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-661 | Vulnérabilité dans syslog-ng Premium Edition | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-660 | Vulnérabilité dans CA Directory | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-659 | Vulnérabilité dans iBM Lotus Mobile Connect | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-658 | Vulnérabilité dans Ubuntu Software Center | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-657 | Vulnérabilités dans TikiWiki | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-656 | Multiples vulnérabilités dans RealPlayer | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-655 | Vulnérabilité dans Dovecot | 2011-11-22T00:00:00.000000 | 2011-11-22T00:00:00.000000 |
| certa-2011-avi-654 | Vulnérabilités dans SPIP | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-653 | Vulnérabilité dans Ruby on Rails | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-652 | Vulnérabilités dans SAP | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-651 | Vulnérabilités dans HP Network Node Manager | 2011-11-21T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-490 | Vulnérabilité dans Apache httpd | 2011-09-01T00:00:00.000000 | 2011-11-21T00:00:00.000000 |
| certa-2011-avi-650 | Vulnérabilité dans Juniper Junos | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-649 | Multiples vulnérabilités dans SAP NetWeaver | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |
| certa-2011-avi-648 | Vulnérabilité dans nginx | 2011-11-18T00:00:00.000000 | 2011-11-18T00:00:00.000000 |