Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-91246 | Vulnerability in the Oracle WebCenter Portal prod… |
Oracle Corporation |
Oracle WebCenter Portal |
2026-10-20T21:24:52.168Z | 2026-10-29T17:52:39.940Z | |
| cve-2026-46651 | Unauthenticated SSRF and local file inclusion via Down… |
intranda |
goobi-viewer-core |
2026-10-23T14:15:28.088Z | 2026-10-29T17:51:34.661Z | |
| cve-2026-80353 | Apache Tomcat: TOCTOU when setting specific permission… |
Apache Software Foundation |
Apache Tomcat |
2026-10-20T13:42:05.844Z | 2026-10-29T17:50:58.393Z | |
| cve-2026-115477 | obsidian-tc: Declined human-in-the-loop confirmations … |
The-40-Thieves |
obsidian-tc |
2026-10-23T14:04:33.518Z | 2026-10-29T17:50:19.455Z | |
| cve-2026-114621 | baserCMS: SQL injection in the admin panel and admin API |
baserproject |
basercms |
2026-10-23T13:39:42.762Z | 2026-10-29T17:48:17.842Z | |
| cve-2026-89009 | 8.8 (v4.0) 9.1 (v3.1) | WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File… |
WAVLINK Technology |
WN535M1 |
2026-09-11T14:56:10.246Z | 2026-10-29T17:47:40.792Z |
| cve-2026-74049 | Apache Tomcat: Jasper JSTL <c:redirect> plug-in implem… |
Apache Software Foundation |
Apache Tomcat |
2026-10-20T13:37:43.471Z | 2026-10-29T17:47:31.001Z | |
| cve-2026-89010 | 9.3 (v4.0) 9.8 (v3.1) | WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Inj… |
WAVLINK Technology |
WN535M1 |
2026-09-11T14:57:56.223Z | 2026-10-29T17:46:46.349Z |
| cve-2026-115480 | baserCMS: Public Web API mail-form submission bypasses… |
baserproject |
basercms |
2026-10-23T13:37:32.184Z | 2026-10-29T17:46:42.337Z | |
| cve-2026-74048 | Apache Tomcat: OpenSSL-FFM FIPS failure does not preve… |
Apache Software Foundation |
Apache Tomcat |
2026-10-20T13:36:36.859Z | 2026-10-29T17:45:04.109Z | |
| cve-2026-87743 | 7.5 (v3.1) | Quarkus-vertx-http: authorization bypass via path norm… |
Red Hat |
Red Hat build of Quarkus 3.27.5.SP2 |
2026-09-18T09:38:27.326Z | 2026-10-29T17:44:45.783Z |
| cve-2026-91248 | Vulnerability in the Oracle WebCenter Portal prod… |
Oracle Corporation |
Oracle WebCenter Portal |
2026-10-20T21:24:52.863Z | 2026-10-29T17:44:41.120Z | |
| cve-2026-113399 | N/A | Incorrect boundary conditions in the SVG component |
Mozilla |
Firefox |
2026-10-20T12:58:14.968Z | 2026-10-29T17:44:03.368Z |
| cve-2026-91217 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:41.565Z | 2026-10-29T17:43:47.458Z | |
| cve-2026-55606 | odhcpd: Stack buffer overread via DUID length endianne… |
openwrt |
odhcpd |
2026-10-23T13:21:21.038Z | 2026-10-29T17:43:41.478Z | |
| cve-2026-91216 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:41.210Z | 2026-10-29T17:42:58.368Z | |
| cve-2026-115751 | 6.3 (v4.0) 3.7 (v3.1) | mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts … |
agentfront |
mcp-from-openapi |
2026-10-23T13:03:33.492Z | 2026-10-29T17:42:32.687Z |
| cve-2026-115729 | 8.9 (v4.0) 6.8 (v3.1) | @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeTo… |
pdfme |
common |
2026-10-23T12:55:09.157Z | 2026-10-29T17:40:19.138Z |
| cve-2026-34485 | N/A | A CLI ACL Bypass vulnerability in Nokia 1830 Global Ex… |
Nokia |
Nokia 1830 Global Express (GX) |
2026-10-20T12:13:17.792Z | 2026-10-29T17:40:16.968Z |
| cve-2026-34484 | N/A | A Shell Privilege Escalation vulnerability in Nokia 18… |
Nokia |
Nokia 1830 Global Express (GX) |
2026-10-20T12:10:44.965Z | 2026-10-29T17:37:38.761Z |
| cve-2026-108088 | Apache Cocoon: Cross-user cache poisoning |
Apache Software Foundation |
Apache Cocoon |
2026-10-20T10:25:33.049Z | 2026-10-29T17:33:40.096Z | |
| cve-2026-15146 | N/A | CVE-2026-15146 |
GNU wget |
Wget |
2026-07-10T18:20:58.269Z | 2026-10-29T17:32:53.768Z |
| cve-2026-86977 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-20T00:50:57.440Z | 2026-10-29T17:29:14.555Z |
| cve-2026-86868 | N/A | An authentication issue was addressed with improv… |
Apple |
macOS |
2026-10-20T00:50:42.725Z | 2026-10-29T17:27:20.950Z |
| cve-2026-28854 | N/A | The issue was addressed with additional app bundl… |
Apple |
macOS |
2026-10-20T00:50:04.838Z | 2026-10-29T17:25:26.960Z |
| cve-2026-118656 | Echo: Open Redirect via Control-Character Prefix Defea… |
labstack |
echo |
2026-10-28T20:12:13.757Z | 2026-10-29T17:23:39.728Z | |
| cve-2026-118660 | Happy DOM: SSRF via iframe and link stylesheet when pa… |
capricorn86 |
happy-dom |
2026-10-28T20:23:10.122Z | 2026-10-29T17:23:32.163Z | |
| cve-2026-118664 | decode-uri-component: Denial of service via quadratic … |
SamVerschueren |
decode-uri-component |
2026-10-28T20:37:19.057Z | 2026-10-29T17:23:10.863Z | |
| cve-2026-118668 | LangGraph JavaScript custom authentication may permit … |
langchain-ai |
langgraph-api |
2026-10-28T21:06:43.157Z | 2026-10-29T17:22:55.674Z | |
| cve-2026-118690 | 9.3 (v4.0) 9.8 (v3.1) | Signal K Server before 2.33.0 Missing Authentication v… |
SignalK |
signalk-server |
2026-10-28T21:11:17.919Z | 2026-10-29T17:22:34.003Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-615 | Vulnérabilité dans Squid | 2011-11-03T00:00:00.000000 | 2011-11-03T00:00:00.000000 |
| certa-2011-avi-614 | Vulnérabilité dans Novell Messenger | 2011-11-03T00:00:00.000000 | 2011-11-03T00:00:00.000000 |
| certa-2011-avi-613 | Vulnérabilité dans les produits Cisco Small Business SRP500 Series | 2011-11-03T00:00:00.000000 | 2011-11-03T00:00:00.000000 |
| certa-2011-avi-612 | Multiples vulnérabilités dans Wireshark | 2011-11-02T00:00:00.000000 | 2011-11-02T00:00:00.000000 |
| certa-2011-avi-611 | Multiples vulnérabilités dans HP OpenView | 2011-11-02T00:00:00.000000 | 2011-11-02T00:00:00.000000 |
| certa-2011-avi-610 | Vulnérabilité dans IBM Lotus Sametime | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-609 | Multiples vulnérabilités dans les produits VMWare | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-608 | Vulnérabilité dans les produits D-Link | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-607 | Vulnérabilités dans Fujitsu Interstage HTTP Server | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-606 | Vulnérabilités dans Cisco Webex Player | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-605 | Vulnérabilités dans des produits CheckPoint | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-604 | Vulnérabilité dans Novell ZENworks | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-603 | Vulnérabilités dans Cisco Security Agent | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-602 | Vulnérabilité dans des caméras Cisco | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-601 | Vulnérabilité dans Cisco CUCM, UCCX et Unified IP-IVR | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-600 | Vulnérabilité dans Zope | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-599 | Vulnérabilité dans OpenLDAP | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-598 | Vulnérabilité dans Novell iPrint | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-597 | Vulnérabilités dans Apple QuickTime | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-596 | Vulnérabilité dans McAfee Web Gateway | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-595 | Vulnérabilités dans MIT Kerberos | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-594 | Vulnérabilités dans Alcatel OmniTouch Instant Communication Suite | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-593 | Vulnérabilités dans Google Chrome | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-592 | Vulnérabilités dans Linux-PAM | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-591 | Multiples vulnérabilités dans FFmpeg | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-590 | Vulnérabilité dans OCS Inventory | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-589 | Vulnérabilités dans LibreOffice | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-588 | Vulnérabilités dans HP Data Protector Notebook Extension | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-587 | Vulnérabilités dans Splunk | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-586 | Multiples vulnérabilités dans les produits Oracle | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |