Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103391 | 5.3 (v3.1) | Session Smart Router: An attacker-controlled TCP optio… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:33:32.354Z | 2026-10-28T16:33:32.354Z |
| cve-2026-114403 | 9.2 (v4.0) 8.1 (v3.1) | PHPOffice PHPPresentation through 1.2.0 Deserializatio… |
PHPOffice |
PHPPresentation |
2026-10-21T12:39:55.570Z | 2026-10-28T16:31:14.653Z |
| cve-2026-114398 | 5.1 (v4.0) 5.4 (v3.1) | Trudesk through 1.2.11 Unrestricted File Upload via /s… |
polonel |
trudesk |
2026-10-21T12:39:52.147Z | 2026-10-28T16:27:59.714Z |
| cve-2026-114393 | 5.3 (v4.0) 4.3 (v3.1) | Trudesk through 1.2.11 Authorization Bypass via Ticket… |
polonel |
trudesk |
2026-10-21T12:39:48.745Z | 2026-10-28T16:26:00.884Z |
| cve-2026-93524 | 6.9 (v4.0) | X.Org Server XKB SetMap Key Width/Action Count Desync … |
x.org |
xorg-x11-server |
2026-10-28T16:24:52.508Z | 2026-10-28T16:24:52.508Z |
| cve-2026-114388 | 6.9 (v4.0) 5.3 (v3.1) | Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Au… |
chamilo |
chamilo-lms |
2026-10-21T12:39:45.276Z | 2026-10-28T16:23:32.198Z |
| cve-2026-113744 | Tenda AC19 httpd Web Management Service SetFirewallCfg… |
Tenda |
AC19 |
2026-10-21T01:30:24.075Z | 2026-10-28T16:21:28.084Z | |
| cve-2026-114119 | 9.3 (v4.0) 9.8 (v3.1) | Best Practice Software Bp Premier before 1.14.1.1128 H… |
Best Practice Software |
Bp Premier |
2026-10-21T00:37:16.230Z | 2026-10-28T16:19:31.357Z |
| cve-2026-114114 | 6 (v4.0) 5.3 (v3.1) | Vyper through 0.5.0b1 Literal Value Substitution via M… |
vyperlang |
vyper |
2026-10-21T00:37:12.518Z | 2026-10-28T16:17:33.395Z |
| cve-2026-117556 | 5.3 (v4.0) 4.3 (v3.1) | zchunk before 1.5.5 Heap Out-of-Bounds Read via read_p… |
zchunk |
zchunk |
2026-10-27T13:07:51.708Z | 2026-10-28T16:17:15.487Z |
| cve-2026-117560 | 8.5 (v4.0) 7.8 (v3.1) | ATXP Gemini CLI Extension through 1.0.0 OS Command Inj… |
atxp |
gemini-cli-extension |
2026-10-27T13:07:55.594Z | 2026-10-28T16:17:06.328Z |
| cve-2026-117564 | 9.3 (v4.0) 9.8 (v3.1) | nest-admin before 1.0.1 Authentication Bypass via Hard… |
buqiyuan |
nest-admin |
2026-10-27T13:07:58.360Z | 2026-10-28T16:16:56.709Z |
| cve-2026-117568 | 7.3 (v4.0) 7 (v3.1) | mcp-ffmpeg through 1.0.5 OS Command Injection via vide… |
bitscorp-mcp |
mcp-ffmpeg |
2026-10-27T13:08:01.183Z | 2026-10-28T16:16:50.835Z |
| cve-2026-117601 | 9.3 (v4.0) 7.5 (v3.1) | Electrum before 4.8.3 Missing Signature Verification o… |
spesmilo |
electrum |
2026-10-27T13:09:51.347Z | 2026-10-28T16:16:43.752Z |
| cve-2026-93523 | 7.8 (v3.1) | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T16:16:42.058Z | 2026-10-28T16:16:42.058Z |
| cve-2026-90726 | 6 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T13:37:21.805Z | 2026-10-28T16:16:30.645Z |
| cve-2026-117505 | a2aproject a2a-java ChildQueue queue.offer resource co… |
a2aproject |
a2a-java |
2026-10-27T14:30:19.859Z | 2026-10-28T16:16:24.531Z | |
| cve-2026-117509 | crownpku Rasa_NLU_Chi Model Persistor persistor.py Per… |
crownpku |
Rasa_NLU_Chi |
2026-10-27T15:30:18.930Z | 2026-10-28T16:16:18.865Z | |
| cve-2026-112353 | 6.2 (v4.0) 8.2 (v3.1) | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI USA, LLC |
GFI KerioConnect |
2026-10-27T16:10:08.568Z | 2026-10-28T16:16:12.399Z |
| cve-2026-48380 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.580Z | 2026-10-28T16:16:04.990Z |
| cve-2026-114109 | 8.7 (v4.0) 8.8 (v3.1) | uv before 0.11.15 Arbitrary File Write via Entry Point Names |
astral-sh |
uv |
2026-10-21T00:37:08.897Z | 2026-10-28T16:15:57.817Z |
| cve-2026-117512 | oretnom23 php-travel-agency-system employee_insert.php… |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:30:18.263Z | 2026-10-28T16:15:55.262Z | |
| cve-2026-116673 | systeminformation: Path traversal in Linux networkStat… |
sebhildebrandt |
systeminformation |
2026-10-27T16:38:15.558Z | 2026-10-28T16:15:47.864Z | |
| cve-2026-116675 | TinyMCE Cross-Site Scripting (XSS) vulnerability using… |
tinymce |
tinymce |
2026-10-27T16:47:01.183Z | 2026-10-28T16:15:12.999Z | |
| cve-2026-114104 | 8.2 (v4.0) 5.9 (v3.1) | adm-zip before 0.6.1 Duplicate ZIP Entry Name Validati… |
cthackers |
adm-zip |
2026-10-21T00:37:05.291Z | 2026-10-28T16:14:55.229Z |
| cve-2026-57189 | Asterisk: Possible RED T.140 Generation Accumulation O… |
asterisk |
asterisk |
2026-10-27T16:59:46.057Z | 2026-10-28T16:14:48.359Z | |
| cve-2026-104354 | 9.1 (v3.1) | Adobe Campaign Classic (ACC) | Improper Neutralization… |
Adobe |
Adobe Campaign Classic |
2026-10-27T17:03:34.305Z | 2026-10-28T16:14:22.371Z |
| cve-2026-117515 | oretnom23 php-travel-agency-system traceapplication.ph… |
oretnom23 |
php-travel-agency-system |
2026-10-27T17:15:14.553Z | 2026-10-28T16:14:08.352Z | |
| cve-2026-116679 | Neko: Authorization bypass in legacy WebRTC input handling |
m1k1o |
neko |
2026-10-27T17:33:35.883Z | 2026-10-28T16:13:59.494Z | |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-268 | Multiples vulnérabilités dans HP SSL pour OpenVMS | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-267 | Vulnérabilité dans ISC DHCP | 2010-06-17T00:00:00.000000 | 2010-06-17T00:00:00.000000 |
| certa-2010-avi-265 | Multiples vulnérabilités dans Apple Mac OS X | 2010-06-16T00:00:00.000000 | 2010-06-16T00:00:00.000000 |
| certa-2010-avi-259 | Multiples vulnérabilités dans Google Chrome | 2010-06-11T00:00:00.000000 | 2010-06-16T00:00:00.000000 |
| certa-2010-avi-263 | Vulnérabilité dans des produits Juniper | 2010-06-14T00:00:00.000000 | 2010-06-15T00:00:00.000000 |
| certa-2010-avi-261 | Multiples vulnérabilités dans Adobe Flash Player | 2010-06-11T00:00:00.000000 | 2010-06-11T00:00:00.000000 |
| certa-2010-avi-258 | Vulnérabilité dans Sophos Anti-Virus | 2010-06-11T00:00:00.000000 | 2010-06-11T00:00:00.000000 |
| certa-2010-avi-200 | Vulnérabilité dans Wireshark | 2010-05-06T00:00:00.000000 | 2010-06-11T00:00:00.000000 |
| certa-2010-avi-257 | Vulnérabilité dans Cisco Application Extension Platform | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-256 | Vulnérabilités dans Cisco Unified Contact Center Express | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-255 | Vulnérabilité dans McAfee UTM Firewall | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-254 | Vulnérabilité dans IBM WebSphere | 2010-06-10T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2010-avi-253 | Vulnérabilité dans Microsoft .NET | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-252 | Vulnérabilité dans Microsfot IIS | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-251 | Vulnérabilités dans Microsoft SharePoint | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-250 | Multiples vulnérabilités dans Microsoft Office Excel | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-249 | Vulnérabilité dans le pilote CFF de Windows | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-248 | Vulnérabilité dans Microsoft Office | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-247 | Vulnérabilité dans Internet Explorer | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-246 | Vulnérabilité dans certains contrôles ActiveX | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-245 | Multiples vulnérabilités dans la décompression de fichiers multimédia sous Windows | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-244 | Multiples vulnérabilités dans les pilotes noyaux de Windows | 2010-06-09T00:00:00.000000 | 2010-06-09T00:00:00.000000 |
| certa-2010-avi-243 | Multiples vulnérabilités dans Apple Safari | 2010-06-08T00:00:00.000000 | 2010-06-08T00:00:00.000000 |
| certa-2010-avi-241 | Vulnérabilités dans OpenOffice.org | 2010-06-07T00:00:00.000000 | 2010-06-08T00:00:00.000000 |
| certa-2010-avi-242 | Multiples vulnérabilités dans Novell eDirectory | 2010-06-07T00:00:00.000000 | 2010-06-07T00:00:00.000000 |
| certa-2010-avi-240 | Vulnérabilité dans CA ARCserve Backup | 2010-06-07T00:00:00.000000 | 2010-06-07T00:00:00.000000 |
| certa-2010-avi-239 | Vulnérabilités dans IBM DB2 | 2010-06-04T00:00:00.000000 | 2010-06-04T00:00:00.000000 |
| certa-2010-avi-238 | Multiples vulnérabilités dans MySQL Enterprise Monitor | 2010-06-04T00:00:00.000000 | 2010-06-04T00:00:00.000000 |
| certa-2010-avi-236 | Vulnérabilité dans HP StorageWorks Storage Mirroring | 2010-06-04T00:00:00.000000 | 2010-06-04T00:00:00.000000 |
| certa-2010-avi-235 | Multiples vulnérabilités dans IBM Lotus Connections | 2010-06-03T00:00:00.000000 | 2010-06-03T00:00:00.000000 |