Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-33924 | 7.5 (v4.0) 7.2 (v3.1) | Authenticated RCE in update functionality in Guardian/… |
Nozomi Networks |
Guardian |
2026-10-29T10:46:35.814Z | 2026-10-29T12:36:53.161Z |
| cve-2026-118989 | 5.1 (v4.0) 5.5 (v3.1) | WebToffee Product Import Export for WooCommerce 2.5.1 … |
WebToffee |
Product Import Export for WooCommerce |
2026-10-29T10:57:40.767Z | 2026-10-29T12:36:53.008Z |
| cve-2026-115963 | 7.1 (v3.1) | WordPress Broadcast Live Video plugin <= 7.3.9 - Broke… |
VideoWhisper.com |
Broadcast Live Video |
2026-10-29T11:00:23.604Z | 2026-10-29T12:36:52.863Z |
| cve-2026-115967 | 8.8 (v3.1) | WordPress Login with phone number plugin <= 1.8.78 - B… |
Hamid Alinia |
Login with phone number |
2026-10-29T11:00:23.638Z | 2026-10-29T12:36:52.709Z |
| cve-2026-115965 | 8.5 (v3.1) | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection … |
BuddyPress |
BuddyPress |
2026-10-29T11:00:24.136Z | 2026-10-29T12:36:52.568Z |
| cve-2026-115599 | 7.5 (v3.1) | WordPress LearnPress plugin <= 4.4.11 - Broken Access … |
ThimPress |
LearnPress |
2026-10-29T11:00:24.169Z | 2026-10-29T12:36:52.417Z |
| cve-2026-114193 | 7.5 (v3.1) | WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken … |
Eyal Fitoussi |
GEO my WordPress |
2026-10-29T11:00:24.744Z | 2026-10-29T12:36:52.272Z |
| cve-2026-112827 | 7.1 (v3.1) | WordPress HANDMADE – Dropshipping for Etsy and WooComm… |
VillaTheme |
HANDMADE – Dropshipping for Etsy and WooCommerce |
2026-10-29T11:00:24.746Z | 2026-10-29T12:36:52.128Z |
| cve-2026-115592 | 7.1 (v3.1) | WordPress OceanWP theme <= 4.2.7 - Cross Site Scriptin… |
OceanWP |
OceanWP |
2026-10-29T11:00:25.353Z | 2026-10-29T12:36:51.841Z |
| cve-2026-115962 | 4.3 (v3.1) | WordPress myCred plugin <= 4.0.1 - Bypass Vulnerabilit… |
myCred |
myCred |
2026-10-29T11:00:25.822Z | 2026-10-29T12:36:51.694Z |
| cve-2026-115964 | 9.3 (v3.1) | WordPress Motors plugin <= 1.4.126 - SQL Injection vul… |
StylemixThemes |
Motors |
2026-10-29T11:00:25.837Z | 2026-10-29T12:36:51.554Z |
| cve-2026-115611 | 7.1 (v3.1) | WordPress TableOn plugin <= 1.0.7 - Cross Site Scripti… |
PluginUs.Net |
TableOn |
2026-10-29T11:00:26.280Z | 2026-10-29T12:36:51.406Z |
| cve-2026-96767 | NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site… |
webaways |
NEX-Forms – Ultimate Forms Plugin for WordPress |
2026-10-29T11:27:14.333Z | 2026-10-29T12:36:51.254Z | |
| cve-2026-109216 | Meta Box <= 5.15.2 - Authenticated (Subscriber+) Store… |
metabox |
Meta Box – A Framework for Dynamic Websites |
2026-10-29T11:27:14.853Z | 2026-10-29T12:36:51.108Z | |
| cve-2026-92086 | MW WP Form <= 5.1.7 - Unauthenticated Sensitive Inform… |
websoudan |
MW WP Form |
2026-10-29T11:27:15.236Z | 2026-10-29T12:36:50.947Z | |
| cve-2026-110184 | Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via… |
blazethemes |
Newsmatic |
2026-10-29T11:27:15.602Z | 2026-10-29T12:36:50.798Z | |
| cve-2026-115821 | NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Si… |
newsmanapp |
NewsmanApp |
2026-10-29T11:27:15.965Z | 2026-10-29T12:36:50.654Z | |
| cve-2026-27401 | 5.3 (v3.1) | WordPress YITH PayPal Express Checkout for WooCommerce… |
YITH |
YITH PayPal Express Checkout for WooCommerce |
2026-10-29T11:28:05.240Z | 2026-10-29T12:36:50.510Z |
| cve-2026-97854 | 9.8 (v3.1) 9.3 (v4.0) | Yamaha wireless LAN router NWR100 provided by Yam… |
Yamaha Corporation |
NWR100 |
2026-10-29T11:33:51.649Z | 2026-10-29T12:36:50.361Z |
| cve-2026-109822 | 6.5 (v3.1) 7.1 (v4.0) | Yamaha wireless LAN router NWR100 provided by Yam… |
Yamaha Corporation |
NWR100 |
2026-10-29T11:34:08.429Z | 2026-10-29T12:36:50.215Z |
| cve-2026-115536 | gedelumbung HospitalManagement Admin Routing routing_p… |
gedelumbung |
HospitalManagement |
2026-10-23T01:15:15.697Z | 2026-10-29T12:34:42.937Z | |
| cve-2026-42949 | A authorization bypass vulnerability exists in th… |
frangoteam |
Frangoteam |
2026-10-29T02:59:52.571Z | 2026-10-29T12:32:40.787Z | |
| cve-2026-114618 | Authlib: Default JWT bearer grant accepts assertions f… |
authlib |
authlib |
2026-10-22T21:28:37.879Z | 2026-10-29T12:29:17.976Z | |
| cve-2026-94109 | 8.6 (v4.0) 8 (v3.1) | openEQUELLA < 2026.1.0 Authenticated Stored SSTI via F… |
openequella |
openEQUELLA |
2026-09-20T11:33:55.754Z | 2026-10-29T12:27:38.736Z |
| cve-2026-67615 | 8.7 (v4.0) 8.8 (v3.1) | openEQUELLA < 2026.1.0 Authenticated RCE via Java Dese… |
Apereo Foundation |
openEQUELLA |
2026-09-22T20:30:55.804Z | 2026-10-29T12:26:19.723Z |
| cve-2026-115509 | 2.3 (v4.0) 4.2 (v3.1) | Jitsu Console before 2.14.0-beta.41 Cross-Workspace Au… |
jitsucom |
jitsu |
2026-10-22T19:14:08.632Z | 2026-10-29T12:24:50.785Z |
| cve-2026-115505 | 7.2 (v4.0) 7.6 (v3.1) | libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Dec… |
sahlberg |
libsmb2 |
2026-10-22T19:14:05.297Z | 2026-10-29T12:22:44.734Z |
| cve-2026-115397 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via Extension Arc… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:02.326Z | 2026-10-29T12:21:16.552Z |
| cve-2026-115393 | 1 (v4.0) 3.8 (v3.1) | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:59.314Z | 2026-10-29T12:16:18.355Z |
| cve-2026-10757 | 9.8 (v3.1) | BUG-000187511 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:05:59.365Z | 2026-10-29T12:15:56.185Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-287 | Vulnérabilité dans syslog-ng | 2011-05-12T00:00:00.000000 | 2011-05-12T00:00:00.000000 |
| certa-2011-avi-286 | Vulnérabilités dans Xen | 2011-05-11T00:00:00.000000 | 2011-05-11T00:00:00.000000 |
| certa-2011-avi-285 | Vulnérabilités dans les produits VMware | 2011-05-11T00:00:00.000000 | 2011-05-11T00:00:00.000000 |
| certa-2011-avi-284 | Vulnérabilité dans Skype | 2011-05-11T00:00:00.000000 | 2011-05-11T00:00:00.000000 |
| certa-2011-avi-282 | Vulnérabilités dans Microsoft PowerPoint | 2011-05-11T00:00:00.000000 | 2011-05-11T00:00:00.000000 |
| certa-2011-avi-281 | Vulnérabilité dans le service WINS de Windows | 2011-05-11T00:00:00.000000 | 2011-05-11T00:00:00.000000 |
| certa-2011-avi-279 | Vulnérabilité dans ISC BIND | 2011-05-06T00:00:00.000000 | 2011-05-06T00:00:00.000000 |
| certa-2011-avi-278 | Vulnérabilité dans le paquet Ubuntu usb-creator | 2011-05-06T00:00:00.000000 | 2011-05-06T00:00:00.000000 |
| certa-2011-avi-276 | Vulnérabilité dans OpenSSH | 2011-05-06T00:00:00.000000 | 2011-05-06T00:00:00.000000 |
| certa-2011-avi-275 | Vulnérabilités dans Horde | 2011-05-05T00:00:00.000000 | 2011-05-05T00:00:00.000000 |
| certa-2011-avi-274 | Vulnérabilités dans HP Insight Control Performance Management | 2011-05-05T00:00:00.000000 | 2011-05-05T00:00:00.000000 |
| certa-2011-avi-267 | Multiples vulnérabilités dans les produits Mozilla | 2011-04-29T00:00:00.000000 | 2011-05-05T00:00:00.000000 |
| certa-2011-avi-272 | Vulnérabilité dans des produits BlueCoat | 2011-05-04T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-249 | Multiples vulnérabilités dans Asterisk | 2011-04-22T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-196 | Vulnérabilité dans SPIP | 2011-04-07T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-176 | Vulnérabilité dans rsync | 2011-03-30T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-156 | Vulnérabilités dans Asterisk | 2011-03-17T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-098 | Multiples vulnérabilités dans Asterisk | 2011-02-22T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-073 | Vulnérabilité dans OpenSSL | 2011-02-09T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2010-avi-590 | Vulnérabilités dans OpenSSL | 2010-12-14T00:00:00.000000 | 2011-05-04T00:00:00.000000 |
| certa-2011-avi-271 | Vulnérabilités dans VMware ESX et ESXi | 2011-04-29T00:00:00.000000 | 2011-04-29T00:00:00.000000 |
| certa-2011-avi-270 | Vulnérabilité dans Cisco IOS | 2011-04-29T00:00:00.000000 | 2011-04-29T00:00:00.000000 |
| certa-2011-avi-269 | Vulnérabilité dans HP Network Automation | 2011-04-29T00:00:00.000000 | 2011-04-29T00:00:00.000000 |
| certa-2011-avi-268 | Vulnérabilité dans FFmpeg | 2011-04-29T00:00:00.000000 | 2011-04-29T00:00:00.000000 |
| certa-2011-avi-266 | Multiples vulnérabilités dans Google Chrome | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |
| certa-2011-avi-265 | Vulnérabilité dans JBoss | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |
| certa-2011-avi-264 | Vulnérabilités dans OpenSUSE Build Service | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |
| certa-2011-avi-263 | Multiples vulnérabilités dans Cisco Unified Communications Manager | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |
| certa-2011-avi-262 | Vulnérabilité dans Cisco Wireless Lan Controllers | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |
| certa-2011-avi-261 | Multiples vulnérabilités dans MediaWiki | 2011-04-28T00:00:00.000000 | 2011-04-28T00:00:00.000000 |