Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106036 | 6.9 (v4.0) | Improper certificate validation in Szafir |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:08:02.788Z | 2026-10-29T15:08:02.788Z |
| cve-2026-93571 | 2.3 (v4.0) | Path Traversal in Szafir |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:07:53.572Z | 2026-10-29T15:07:53.572Z |
| cve-2026-93570 | 8.2 (v4.0) | XML External Entity injection in Szafir and Szafir Wer… |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:07:48.053Z | 2026-10-29T15:07:48.053Z |
| cve-2026-85749 | MailWatch: IDOR lets any authenticated user release or… |
mailwatch |
MailWatch |
2026-10-28T22:37:38.513Z | 2026-10-29T14:46:47.666Z | |
| cve-2026-116010 | 5.3 (v4.0) 4.3 (v3.1) | RosarioSIS before 12.9.1 Missing Authorization in Teac… |
francoisjacquet |
RosarioSIS |
2026-10-24T11:40:29.488Z | 2026-10-29T14:46:14.817Z |
| cve-2026-104875 | Ente: Accepted emergency contact can bypass the recove… |
ente |
ente |
2026-10-13T19:10:06.908Z | 2026-10-29T14:45:31.633Z | |
| cve-2026-115802 | InternScience InternAgent LoRA Loading experiment.py t… |
InternScience |
InternAgent |
2026-10-24T06:30:15.142Z | 2026-10-29T14:44:54.077Z | |
| cve-2026-115892 | Wasmtime: Panic lowering a host-created component mode… |
bytecodealliance |
wasmtime |
2026-10-23T21:26:54.528Z | 2026-10-29T14:44:33.323Z | |
| cve-2026-86016 | VNote: Stored XSS via YAML Frontmatter Leading to Loca… |
vnotex |
vnote |
2026-10-13T19:15:21.682Z | 2026-10-29T14:44:07.158Z | |
| cve-2026-115885 | LangGraph CLI prints the registry push token in `langg… |
langchain-ai |
langgraph |
2026-10-23T21:15:09.944Z | 2026-10-29T14:43:01.864Z | |
| cve-2026-101897 | Angular DevTools (Local DoS) |
angular |
angular |
2026-10-14T15:03:36.405Z | 2026-10-29T14:40:53.404Z | |
| cve-2026-100394 | Nezha Monitoring: Whole-instance DoS in Nezha dashboar… |
nezhahq |
nezha |
2026-10-14T15:38:47.079Z | 2026-10-29T14:39:43.451Z | |
| cve-2026-39742 | 6.5 (v3.1) | WordPress Gutenberg Blocks by Kadence Blocks plugin <=… |
Liquid Web / StellarWP |
Gutenberg Blocks by Kadence Blocks |
2026-10-29T14:20:45.598Z | 2026-10-29T14:37:20.747Z |
| cve-2026-75524 | OpenReception: race condition in add-to-tunnel and cre… |
open-reception |
appointment-booking-software |
2026-10-23T20:29:52.583Z | 2026-10-29T14:33:55.695Z | |
| cve-2026-19610 | 6.5 (v3.1) | Wildfly-platform-mbean: wildfly-platform-mbean: rbac s… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7 |
2026-10-29T06:07:32.569Z | 2026-10-29T14:24:04.416Z |
| cve-2026-115877 | Twisted: HTTP Request Smuggling in twisted.web via a B… |
twisted |
twisted |
2026-10-23T20:25:12.031Z | 2026-10-29T14:23:05.736Z | |
| cve-2026-100404 | Zulip: Guests can read new messages in non-subscribed … |
zulip |
zulip |
2026-10-14T15:50:00.354Z | 2026-10-29T14:20:18.766Z | |
| cve-2026-115774 | Twisted: Denial of Service in the Twisted IMAP4 Server… |
twisted |
twisted |
2026-10-23T20:14:07.480Z | 2026-10-29T14:20:15.738Z | |
| cve-2026-67414 | RabbitMQ AMQP 1.0 parser: amplification memory-exhaust… |
rabbitmq |
rabbitmq-server |
2026-10-14T16:04:07.449Z | 2026-10-29T14:19:15.193Z | |
| cve-2026-115797 | Tenda F6 Web Management cleartext transmission |
Tenda |
F6 |
2026-10-23T20:00:16.370Z | 2026-10-29T14:19:14.179Z | |
| cve-2026-118030 | 4.2 (v3.1) | Keycloak-services: keycloak-services: hotp race condit… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-29T06:22:11.871Z | 2026-10-29T14:18:44.865Z |
| cve-2026-115572 | pypdf: Possible long runtimes for repeated references … |
py-pdf |
pypdf |
2026-10-23T19:24:51.055Z | 2026-10-29T14:18:40.569Z | |
| cve-2025-62839 | 8.7 (v4.0) | Hard-coded Cryptographic Key #1 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:39:53.736Z | 2026-10-29T14:17:58.115Z |
| cve-2026-77564 | Talos Linux: Support bundle does not redact registry c… |
siderolabs |
talos |
2026-10-14T16:09:11.330Z | 2026-10-29T14:17:38.468Z | |
| cve-2025-62841 | 8.7 (v4.0) | Hard-coded Cryptographic Key #2 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:40:02.766Z | 2026-10-29T14:16:06.907Z |
| cve-2026-114358 | 9.3 (v4.0) | SQL Injection Vulnerability in Radius Xenia M2M Platform |
Radius Synergies |
Radius Xenia M2M Platform |
2026-10-29T08:53:05.549Z | 2026-10-29T14:13:51.533Z |
| cve-2026-115810 | 6.3 (v4.0) 7.7 (v3.1) | Tandoor Recipes before 2.7.0 SSRF via Pestle Importer … |
TandoorRecipes |
recipes |
2026-10-23T16:12:12.359Z | 2026-10-29T14:13:20.506Z |
| cve-2026-117611 | Trust of compromised eMudhra root CA in bundled CA stores |
Checkmk GmbH |
Checkmk |
2026-10-29T09:32:57.964Z | 2026-10-29T14:13:09.797Z | |
| cve-2026-97860 | 6.7 (v3.0) 8.4 (v4.0) | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corpo… |
Yamaha Corporation |
YMS-VPN8 |
2026-10-29T11:33:10.955Z | 2026-10-29T14:12:18.004Z |
| cve-2026-54668 | Kitodo.Production: XXE in XMLUtils EAD/XML upload pars… |
kitodo |
kitodo-production |
2026-10-23T14:54:35.530Z | 2026-10-29T14:11:07.235Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-434 | Vulnérabilités dans le serveur Windows DNS | 2011-08-10T00:00:00.000000 | 2011-08-10T00:00:00.000000 |
| certa-2011-avi-433 | Multiples vulnérabilités dans Internet Explorer | 2011-08-10T00:00:00.000000 | 2011-08-10T00:00:00.000000 |
| certa-2011-avi-432 | Multiples vulnérabilités dans TYPO3 | 2011-08-09T00:00:00.000000 | 2011-08-09T00:00:00.000000 |
| certa-2011-avi-431 | Vulnérabilités dans Moodle | 2011-08-09T00:00:00.000000 | 2011-08-09T00:00:00.000000 |
| certa-2011-avi-430 | Multiples vulnérabilités dans Bugzilla | 2011-08-05T00:00:00.000000 | 2011-08-05T00:00:00.000000 |
| certa-2011-avi-428 | Multiples vulnérabilités dans Google Chrome | 2011-08-03T00:00:00.000000 | 2011-08-03T00:00:00.000000 |
| certa-2011-avi-427 | Multiples vulnérabilités dans HP SiteScope | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-426 | Multiples vulnérabilités dans SAP NetWeaver | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-425 | Vulnérabilités dans HP Network Automation | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-424 | Vulnérabilité dans Citrix XenApp et XenDesktop | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-423 | Multiples vulnérabilités dans VMware ESX | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-422 | Vulnérabilité dans Cisco TelePresence | 2011-08-01T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-081 | Multiples vulnérabilités dans Apache Tomcat | 2011-02-10T00:00:00.000000 | 2011-08-01T00:00:00.000000 |
| certa-2011-avi-421 | Vulnérabilité dans Drupal | 2011-07-29T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-420 | Vulnérabilités dans IBM Lotus Symphony | 2011-07-29T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-419 | Vulnérabilité dans des produits Citrix | 2011-07-29T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-418 | Multiples vulnérabilités dans EMC Captiva eInput | 2011-07-29T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-417 | Vulnérabilité dans EMC Data Protection Advisor | 2011-07-29T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-405 | Vulnérabilité dans Joomla! | 2011-07-21T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-396 | Vulnérabilités dans Citrix Access Gateway Plug-in | 2011-07-19T00:00:00.000000 | 2011-07-29T00:00:00.000000 |
| certa-2011-avi-415 | Vulnérabilité dans ClamAV | 2011-07-27T00:00:00.000000 | 2011-07-27T00:00:00.000000 |
| certa-2011-avi-414 | Vulnérabilités dans Nagios | 2011-07-27T00:00:00.000000 | 2011-07-27T00:00:00.000000 |
| certa-2011-avi-413 | Vulnérabilités dans iWork | 2011-07-26T00:00:00.000000 | 2011-07-26T00:00:00.000000 |
| certa-2011-avi-412 | Vulnérabilité dans Apple iOS | 2011-07-26T00:00:00.000000 | 2011-07-26T00:00:00.000000 |
| certa-2011-avi-411 | Vulnérabilités dans phpMyAdmin | 2011-07-26T00:00:00.000000 | 2011-07-26T00:00:00.000000 |
| certa-2011-avi-410 | Vulnérabilités dans SquirrelMail | 2011-07-25T00:00:00.000000 | 2011-07-25T00:00:00.000000 |
| certa-2011-avi-409 | Vulnérabilités dans Foxit Reader | 2011-07-22T00:00:00.000000 | 2011-07-22T00:00:00.000000 |
| certa-2011-avi-408 | Vulnérabilité dans Google Picasa | 2011-07-21T00:00:00.000000 | 2011-07-21T00:00:00.000000 |
| certa-2011-avi-406 | Vulnérabilité dans Cisco ASR 9000 Series Routers | 2011-07-21T00:00:00.000000 | 2011-07-21T00:00:00.000000 |
| certa-2011-avi-404 | Vulnérabilités dans les produits Cisco SA 500 Series Security Appliances | 2011-07-21T00:00:00.000000 | 2011-07-21T00:00:00.000000 |