Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115384 | 9.4 (v4.0) 9.9 (v3.1) | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:51.422Z | 2026-10-29T02:30:40.462Z |
| cve-2026-115376 | 8.3 (v4.0) 7.7 (v3.1) | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Projec… |
lxc |
incus |
2026-10-22T19:13:45.489Z | 2026-10-29T02:29:39.726Z |
| cve-2026-115372 | 9 (v4.0) 8.5 (v3.1) | Incus 7.3.0 before 7.5.0 Project Restriction Bypass vi… |
lxc |
incus |
2026-10-22T19:13:42.624Z | 2026-10-29T02:28:30.115Z |
| cve-2026-115362 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired Ap… |
openbao |
openbao |
2026-10-22T19:13:36.857Z | 2026-10-29T02:27:07.016Z |
| cve-2026-115358 | 2 (v4.0) 2 (v3.1) | OpenBao before 2.6.3 Sensitive Data Leak in Audit Log … |
openbao |
openbao |
2026-10-22T19:13:34.006Z | 2026-10-29T02:26:32.401Z |
| cve-2026-115354 | 7.1 (v4.0) 6.5 (v3.1) | Mistune before 3.3.0 Arbitrary Local File Read via Inc… |
lepture |
mistune |
2026-10-22T19:13:31.132Z | 2026-10-29T02:25:47.787Z |
| cve-2026-115350 | 5.3 (v4.0) 6.1 (v3.1) | Mistune before 3.3.0 Stored XSS via Include Directive … |
lepture |
mistune |
2026-10-22T19:13:26.891Z | 2026-10-29T02:24:58.381Z |
| cve-2022-51026 | 9.3 (v4.0) 9.8 (v3.1) | Bytebase 0.12.0 before 1.0.1 Authentication Bypass via… |
bytebase |
bytebase |
2026-10-22T19:13:18.259Z | 2026-10-29T02:24:08.646Z |
| cve-2026-114611 | OCO-Server: MDM /profile endpoint accepts self-signed … |
schorschii |
OCO-Server |
2026-10-22T17:33:13.611Z | 2026-10-29T02:23:10.004Z | |
| cve-2026-114610 | fpdf2: Exponential SVG '<use>' expansion causes CPU an… |
py-pdf |
fpdf2 |
2026-10-22T17:21:11.788Z | 2026-10-29T02:22:14.998Z | |
| cve-2026-114609 | fpdf2 implicitly loads external URLs and local image p… |
py-pdf |
fpdf2 |
2026-10-22T17:18:22.802Z | 2026-10-29T02:19:57.646Z | |
| cve-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use |
rthalley |
dnspython |
2026-10-22T16:25:32.509Z | 2026-10-29T02:19:02.339Z | |
| cve-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in … |
open-telemetry |
opentelemetry-python |
2026-10-22T15:29:25.108Z | 2026-10-29T02:17:42.817Z | |
| cve-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write… |
rsyslog |
rsyslog |
2026-10-22T13:32:56.695Z | 2026-10-29T02:15:30.165Z | |
| cve-2026-115248 | subhajitkhan online-clinic-management-system Booking p… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:30:10.769Z | 2026-10-29T02:14:19.530Z | |
| cve-2026-115400 | 6.7 (v4.0) 4.4 (v3.1) | crawlseo before 0.2.5 Cleartext Storage of Google OAut… |
crawlseo |
crawlseo |
2026-10-22T13:23:38.856Z | 2026-10-29T02:13:18.485Z |
| cve-2026-115331 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Metric Property… |
uselotus |
lotus |
2026-10-22T10:57:48.115Z | 2026-10-29T02:11:42.284Z |
| cve-2026-115327 | 6 (v4.0) 5.3 (v3.1) | libyang through 6.4.13 Uninitialized Pointer Free in N… |
CESNET |
libyang |
2026-10-22T10:57:45.264Z | 2026-10-29T02:10:37.665Z |
| cve-2026-115323 | 6.9 (v4.0) 7.3 (v3.1) | EverShop 1.2.2 before 2.2.1 Missing Authorization via … |
evershopcommerce |
evershop |
2026-10-22T10:57:42.424Z | 2026-10-29T02:08:25.891Z |
| cve-2026-114665 | 7.1 (v4.0) 6.5 (v3.1) | Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrar… |
zhenorzz |
goploy |
2026-10-22T10:57:39.553Z | 2026-10-29T02:07:01.607Z |
| cve-2021-48016 | 9.3 (v4.0) 9.8 (v3.1) | DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php |
DedeCMS |
DedeCMS |
2026-10-22T10:57:31.176Z | 2026-10-29T02:06:05.908Z |
| cve-2024-58393 | 8.8 (v4.0) 8.2 (v3.1) | i-Netsolution Readymade Unilevel Ecommerce MLM SQL Inj… |
i-Netsolution |
Readymade Unilevel Ecommerce MLM |
2026-10-22T10:57:36.699Z | 2026-10-29T02:05:25.721Z |
| cve-2022-51023 | 8.8 (v4.0) 8.2 (v3.1) | PHPOK < 5.4.081 SQL Injection via api.php sort Parameter |
PHPOK |
PHPOK |
2026-10-22T10:57:33.897Z | 2026-10-29T02:04:37.497Z |
| cve-2026-11854 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint Error… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:33.216Z | 2026-10-29T02:02:14.279Z |
| cve-2026-3583 | 3.1 (v3.1) | Improper Token Revocation via OAuth2 Scope Enforcement… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:34.577Z | 2026-10-29T02:02:14.134Z |
| cve-2026-6647 | 7.4 (v3.1) | Incomplete OAuth Token Revocation via Case Mismatch in… |
WSO2 |
WSO2 Identity Server |
2026-10-28T19:21:35.702Z | 2026-10-29T02:02:13.994Z |
| cve-2026-78674 | 8.8 (v3.1) | Remote Code Execution via BPMN System REST APIs in Mul… |
WSO2 |
Enterprise Integrator (BPS profile) |
2026-10-28T19:21:38.203Z | 2026-10-29T02:02:13.846Z |
| cve-2026-16889 | 4.8 (v4.0) | Stored XSS via Pre-Login Notice Image Upload Serves At… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:32:09.466Z | 2026-10-29T02:02:13.700Z |
| cve-2026-66088 | 9.4 (v4.0) | Unrestricted Command Execution via system.execute |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:35:46.415Z | 2026-10-29T02:02:13.562Z |
| cve-2026-66089 | 6.1 (v4.0) | XML External Entity (XXE) Vulnerability in SOAP Interf… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:36:30.145Z | 2026-10-29T02:02:13.415Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-076 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-075 | Multiples vulnérabilités dans Adobe Shockwave Player | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-074 | Vulnérabilités dans Dokeos | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-072 | Vulnérabilité dans MediaWiki | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-071 | Multiples vulnérabilités dans WordPress | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-069 | Vulnérabilité de LSASS dans Microsoft Windows | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-068 | Vulnérabilité de Kerberos dans Microsoft Windows | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-067 | Vulnérabiltés dans les pilotes en mode noyau de Windows | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-066 | Vulnérabilité dans le noyau Windows | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-065 | Vulnérabilité dans le processus CSRSS de Windows | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-064 | Vulnérabilité dans les moteurs de JScript et VBScript | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-063 | Vulnérabilités dans Microsoft Visio | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-062 | Vulnérabilité dans le pilote Compact Font Format (CFF) OpenType | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-060 | Vulnérabilité dans Active Directory | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-059 | Vulnérabilité dans Microsoft Internet Information Server (IIS) | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-058 | Vulnérabilités dans Internet Explorer | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-057 | Vulnérabilité dans Majordomo 2 | 2011-02-09T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2010-avi-550 | Vulnérabilités dans IBM HTTP Server et WebSphere | 2010-11-15T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2011-avi-056 | Vulnérabilités dans Apache Subversion | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-055 | Vulnérabilité dans IBM Build Forge | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-054 | Vulnérabilité dans les produits TANDBERG | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-053 | Multiples vulnérabilités dans Google Chrome | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-052 | Vulnérabilité dans les produits BlueCoat | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-051 | Vulnérabilité dans HP OpenView Performance Insight | 2011-02-04T00:00:00.000000 | 2011-02-04T00:00:00.000000 |
| certa-2011-avi-050 | Multiples vulnérabilités dans Cisco WebEx Player | 2011-02-03T00:00:00.000000 | 2011-02-03T00:00:00.000000 |
| certa-2011-avi-049 | Vulnérabilité dans PMB | 2011-02-03T00:00:00.000000 | 2011-02-03T00:00:00.000000 |
| certa-2011-avi-048 | Vulnérabilité dans EMC NetWorker | 2011-02-02T00:00:00.000000 | 2011-02-02T00:00:00.000000 |
| certa-2011-avi-047 | Multiples vulnérabilités dans Apache CouchDB | 2011-02-02T00:00:00.000000 | 2011-02-02T00:00:00.000000 |
| certa-2011-avi-045 | Vulnérabilité dans Symantec IM Manager | 2011-02-02T00:00:00.000000 | 2011-02-02T00:00:00.000000 |
| certa-2011-avi-044 | Vulnérabilité dans le paquet exim4 | 2011-02-01T00:00:00.000000 | 2011-02-01T00:00:00.000000 |