Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103665 | 7.8 (v3.0) 8.4 (v4.0) | The installer for Yamaha LAN Monitor for Windows … |
Yamaha Corporation |
Yamaha LAN Monitor for Windows |
2026-10-29T11:33:30.885Z | 2026-10-29T14:10:50.402Z |
| cve-2026-119028 | 8.7 (v4.0) 8.8 (v3.1) | oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non… |
oapi-codegen |
oapi-codegen |
2026-10-29T11:36:34.692Z | 2026-10-29T14:08:24.785Z |
| cve-2026-113688 | 5.3 (v4.0) | Server-Side Request Forgery in BMC ITSM SmartIT |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:01:46.475Z | 2026-10-29T14:06:49.262Z |
| cve-2026-113689 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Work Notes |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:02:34.909Z | 2026-10-29T14:06:24.850Z |
| cve-2026-113690 | 4.8 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Attachments |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:03:06.288Z | 2026-10-29T14:05:55.037Z |
| cve-2026-39902 | Cacti: Authenticated RCE on Data Input |
Cacti |
cacti |
2026-10-23T14:42:45.710Z | 2026-10-29T14:04:38.453Z | |
| cve-2026-113691 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Knowledge Articles |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:07:03.816Z | 2026-10-29T14:03:20.544Z |
| cve-2026-119049 | 7.2 (v4.0) 7.6 (v3.1) | FreeMail before 5.3.2 Authorization Bypass via /api/cr… |
idinging |
FreeMail |
2026-10-29T13:08:50.838Z | 2026-10-29T14:02:26.966Z |
| cve-2026-119053 | 6.9 (v4.0) 5.3 (v3.1) | lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read… |
lwIP |
lwIP |
2026-10-29T13:08:53.560Z | 2026-10-29T14:01:51.233Z |
| cve-2026-113692 | 6.9 (v4.0) | Path Traversal in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:08:54.995Z | 2026-10-29T14:00:48.538Z |
| cve-2026-55463 | Goobi viewer: WebSocket endpoints lack server-side aut… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:06.825Z | 2026-10-29T13:59:55.819Z | |
| cve-2026-113693 | 5.3 (v4.0) | System Account Credential Disclosure in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:09:39.803Z | 2026-10-29T13:59:33.397Z |
| cve-2026-46347 | Goobi viewer: Predictable Replacement Password Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:51.802Z | 2026-10-29T13:57:32.624Z | |
| cve-2026-55442 | Goobi viewer: cleanUpQuery double-brace bypass allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:26.455Z | 2026-10-29T13:56:19.871Z | |
| cve-2026-92152 | F´: Unvalidated Port Index in GenericHub |
nasa |
fprime |
2026-10-14T17:08:25.371Z | 2026-10-29T13:55:58.353Z | |
| cve-2026-115457 | baserCMS: Unauthenticated Stored XSS via Shortcode Exp… |
baserproject |
basercms |
2026-10-23T14:00:33.254Z | 2026-10-29T13:55:12.435Z | |
| cve-2026-92158 | F´: FpySequencer Integer Overflow in Stack Offset/Size… |
nasa |
fprime |
2026-10-14T17:14:17.994Z | 2026-10-29T13:54:17.108Z | |
| cve-2026-56838 | PraisonAI recipe.run_stream skips dangerous-tool polic… |
MervinPraison |
PraisonAI |
2026-10-23T11:58:01.475Z | 2026-10-29T13:53:23.978Z | |
| cve-2026-100413 | SeaweedFS: Hard-coded SSH host key can be presented by… |
seaweedfs |
seaweedfs |
2026-10-14T18:03:12.709Z | 2026-10-29T13:52:32.572Z | |
| cve-2026-113694 | 5.3 (v4.0) | Improper Authorization in BMC ITSM SmartIT Attachments |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:12:52.855Z | 2026-10-29T13:51:08.903Z |
| cve-2026-55572 | e107: SQL injection in alt_auth plugin (otherdb / e107… |
e107inc |
e107 |
2026-10-14T18:12:10.984Z | 2026-10-29T13:50:36.643Z | |
| cve-2026-113695 | 4.8 (v4.0) | Reflected Cross-Site Scripting in BMC ITSM SmartIT |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:14:32.009Z | 2026-10-29T13:50:29.419Z |
| cve-2026-113696 | 5.3 (v4.0) | Improper Authorization in BMC ITSM SmartIT Change Approvals |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:29:15.025Z | 2026-10-29T13:49:59.814Z |
| cve-2026-114614 | Authlib: is_secure_transport() loopback exemption can … |
authlib |
authlib |
2026-10-22T21:00:14.354Z | 2026-10-29T13:49:50.607Z | |
| cve-2026-113697 | 4.8 (v4.0) | Reflected Cross-Site Scripting in BMC Helix Operations… |
BMC |
BMC Helix Operations Management |
2026-10-29T13:31:46.427Z | 2026-10-29T13:49:18.392Z |
| cve-2026-55786 | Flyto2 Core: Unauthenticated Command Execution via HTT… |
flytohub |
flyto-core |
2026-10-14T18:14:39.210Z | 2026-10-29T13:49:14.344Z | |
| cve-2026-115355 | 8.7 (v4.0) 7.5 (v3.1) | Mistune before 3.3.0 Path Traversal and XSS via Includ… |
lepture |
mistune |
2026-10-22T19:13:31.904Z | 2026-10-29T13:48:43.278Z |
| cve-2026-116863 | 9.6 (v3.1) | WordPress Newsletters plugin <= 4.18.2 - Cross Site Re… |
Tribulant Software |
Newsletters |
2026-10-27T15:56:41.312Z | 2026-10-29T13:47:39.657Z |
| cve-2026-116855 | 5.4 (v3.1) | WordPress My auctions allegro plugin <= 4.0.3 - Broken… |
wphocus |
My auctions allegro |
2026-10-28T11:17:47.505Z | 2026-10-29T13:47:39.509Z |
| cve-2026-115609 | 7.1 (v3.1) | WordPress GetPaid plugin <= 2.8.62 - Cross Site Script… |
Stiofan |
GetPaid |
2026-10-28T13:00:11.577Z | 2026-10-29T13:47:39.348Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-403 | Multiples vulnérabilités dans Safari | 2011-07-21T00:00:00.000000 | 2011-07-21T00:00:00.000000 |
| certa-2011-avi-402 | Vulnérabilités dans IBM WebSphere | 2011-07-21T00:00:00.000000 | 2011-07-21T00:00:00.000000 |
| certa-2011-avi-407 | Vulnérabilité dans CA Gateway Security and Total Defense | 2011-07-20T00:00:00.000000 | 2011-07-20T00:00:00.000000 |
| certa-2011-avi-401 | Vulnérabilité dans JBoss | 2011-07-20T00:00:00.000000 | 2011-07-20T00:00:00.000000 |
| certa-2011-avi-400 | Multiples vulnérabilités dans les produits Oracle | 2011-07-20T00:00:00.000000 | 2011-07-20T00:00:00.000000 |
| certa-2011-avi-399 | Vulnérabilité de Check Point Multi-Domain Management / Provider-1 | 2011-07-19T00:00:00.000000 | 2011-07-19T00:00:00.000000 |
| certa-2011-avi-398 | Vulnérabilité dans ArcSight Connector Appliance | 2011-07-19T00:00:00.000000 | 2011-07-19T00:00:00.000000 |
| certa-2011-avi-397 | Vulnérabilités dans Wireshark | 2011-07-19T00:00:00.000000 | 2011-07-19T00:00:00.000000 |
| certa-2011-avi-395 | Vulnérabilités dans Apple iOS | 2011-07-18T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-avi-394 | Vulnérabilités dans VLC | 2011-07-18T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-avi-393 | Mise à jour du noyau Red Hat | 2011-07-18T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-avi-392 | Vulnérabilité dans BlackBerry Enterprise Server | 2011-07-18T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-avi-336 | Multiples vulnérabilités dans Java | 2011-06-09T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-avi-391 | Vulnérabilité dans Trend Micro Control Manager | 2011-07-13T00:00:00.000000 | 2011-07-13T00:00:00.000000 |
| certa-2011-avi-390 | Multiples vulnérabilités dans CSRSS de Microsoft Windows | 2011-07-13T00:00:00.000000 | 2011-07-13T00:00:00.000000 |
| certa-2011-avi-389 | Vulnérabilité dans Microsoft Visio | 2011-07-13T00:00:00.000000 | 2011-07-13T00:00:00.000000 |
| certa-2011-avi-388 | Vulnérabilités dans les pilotes en mode noyau du système Microsoft Windows | 2011-07-13T00:00:00.000000 | 2011-07-13T00:00:00.000000 |
| certa-2011-avi-387 | Vulnérabilité dans la pile Bluetooth des systèmes Windows | 2011-07-13T00:00:00.000000 | 2011-07-13T00:00:00.000000 |
| certa-2011-avi-386 | Vulnérabilité dans Trend Micro Control Manager | 2011-07-12T00:00:00.000000 | 2011-07-12T00:00:00.000000 |
| certa-2011-avi-385 | Vulnérabilité dans Symantec Web Gateway | 2011-07-12T00:00:00.000000 | 2011-07-12T00:00:00.000000 |
| certa-2011-avi-384 | Vulnérabilité dans Hitachi HiRDB | 2011-07-11T00:00:00.000000 | 2011-07-11T00:00:00.000000 |
| certa-2011-avi-383 | Vulnérabilité dans Qemu | 2011-07-07T00:00:00.000000 | 2011-07-07T00:00:00.000000 |
| certa-2011-avi-382 | Vulnérabilité dans Cisco Content Services Gateway | 2011-07-07T00:00:00.000000 | 2011-07-07T00:00:00.000000 |
| certa-2011-avi-380 | Multiples vulnérabilités dans phpMyAdmin | 2011-07-05T00:00:00.000000 | 2011-07-05T00:00:00.000000 |
| certa-2011-avi-379 | Vulnérabilité dans WordPress | 2011-07-01T00:00:00.000000 | 2011-07-01T00:00:00.000000 |
| certa-2011-avi-378 | Vulnérabilité dans Drupal | 2011-07-01T00:00:00.000000 | 2011-07-01T00:00:00.000000 |
| certa-2011-avi-377 | Vulnérabilité dans Zope et Plone | 2011-07-01T00:00:00.000000 | 2011-07-01T00:00:00.000000 |
| certa-2011-avi-376 | Vulnérabilités dans Opera | 2011-07-01T00:00:00.000000 | 2011-07-01T00:00:00.000000 |
| certa-2011-avi-375 | Vulnérabilité dans Novell File Reporter | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-374 | Multiples vulnérabilités dans Google Chrome | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |