Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z | |
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57190 | Asterisk: SQL Injection in cel_pgsql and cel_tds via C… |
asterisk |
asterisk |
2026-10-27T21:45:50.075Z | 2026-10-28T16:13:06.105Z | |
| cve-2026-118128 | a2aproject a2a-js Task Status Update result_manager.ts… |
a2aproject |
a2a-js |
2026-10-27T22:15:19.102Z | 2026-10-28T16:12:56.611Z | |
| cve-2026-58255 | Cronicle: Non-admin uid/gid injection in create_event/… |
jhuckaby |
Cronicle |
2026-10-27T22:30:09.563Z | 2026-10-28T16:12:46.274Z | |
| cve-2026-114099 | 6.9 (v4.0) 5.8 (v3.1) | Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision |
corazawaf |
coraza |
2026-10-21T00:37:01.866Z | 2026-10-28T16:12:46.044Z |
| cve-2026-50571 | WebSub: Reflected script execution through intent-veri… |
w3c |
websub |
2026-10-27T22:40:54.912Z | 2026-10-28T16:12:40.129Z | |
| cve-2026-118272 | a2ui-project a2ui Error data-context.ts DataContext.di… |
a2ui-project |
a2ui |
2026-10-28T02:00:21.447Z | 2026-10-28T16:12:32.352Z | |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118376 | 6 (v4.0) 5.3 (v3.1) | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 … |
Tencent |
WeKnora |
2026-10-28T02:03:23.589Z | 2026-10-28T16:11:20.194Z |
| cve-2026-107625 | Ultimate Member <= 2.14.0 - Authenticated (Subscriber+… |
ultimatemember |
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin |
2026-10-28T02:29:57.142Z | 2026-10-28T16:11:08.360Z | |
| cve-2026-109999 | AI Marketing Expert <= 1.2.8 - Unauthenticated Stored … |
nalam-1 |
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot |
2026-10-28T02:29:58.364Z | 2026-10-28T16:11:01.240Z | |
| cve-2026-118275 | a2ui-project a2ui Resolver data-context.ts DataContext… |
a2ui-project |
a2ui |
2026-10-28T03:30:18.509Z | 2026-10-28T16:10:54.352Z | |
| cve-2026-111255 | affiliate-toolkit <= 3.9.2 - Authenticated (Contributo… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T03:42:53.522Z | 2026-10-28T16:10:48.081Z | |
| cve-2026-109236 | Customer Email Verification for WooCommerce <= 2.8.2 -… |
zorem |
Customer Email Verification for WooCommerce |
2026-10-28T05:33:31.213Z | 2026-10-28T16:10:40.810Z | |
| cve-2026-109381 | Event Booking Manager for WooCommerce <= 5.7.8 - Authe… |
magepeopleteam |
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar |
2026-10-28T06:45:05.954Z | 2026-10-28T16:10:34.580Z | |
| cve-2026-103996 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:06.903Z | 2026-10-28T16:10:28.642Z | |
| cve-2026-109972 | s2Member <= 261011 - Authenticated (Contributor+) Stor… |
clavaque |
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
2026-10-28T06:45:08.551Z | 2026-10-28T16:10:21.905Z | |
| cve-2026-76058 | PayPal Brasil para WooCommerce <= 1.7.8 - Missing Auth… |
odefranca |
PayPal Brasil para WooCommerce |
2026-10-28T06:45:08.964Z | 2026-10-28T16:10:15.959Z | |
| cve-2026-111120 | VikRentCar Car Rental Management System <= 1.4.8 - Cro… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:10.550Z | 2026-10-28T16:10:10.199Z | |
| cve-2026-118164 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:12.978Z | 2026-10-28T16:09:59.980Z | |
| cve-2026-109980 | Related Posts for WordPress <= 3.0.0 - Missing Authori… |
barrykooij |
Related Posts for WordPress |
2026-10-28T06:45:13.840Z | 2026-10-28T16:09:53.821Z | |
| cve-2026-92098 | Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.… |
webheadllc |
Webheadcoder Multi-Step Forms for Contact Form 7 |
2026-10-28T06:45:14.277Z | 2026-10-28T16:09:47.127Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-234 | Vulnérabilité dans Joomla! | 2010-06-03T00:00:00.000000 | 2010-06-03T00:00:00.000000 |
| certa-2010-avi-233 | Multiples vulnérabilités dans FreeBSD | 2010-05-28T00:00:00.000000 | 2010-05-28T00:00:00.000000 |
| certa-2010-avi-232 | Vulnérabilité dans HP MFP Digital Sending Software | 2010-05-28T00:00:00.000000 | 2010-05-28T00:00:00.000000 |
| certa-2010-avi-231 | Vulnérabilité dans IBM Communication Server pour AIX | 2010-05-28T00:00:00.000000 | 2010-05-28T00:00:00.000000 |
| certa-2010-avi-230 | Vulnérabilité dans Adobe Photoshop | 2010-05-27T00:00:00.000000 | 2010-05-27T00:00:00.000000 |
| certa-2010-avi-229 | Multiples vulnérabilités dans Cisco Network Building Mediator | 2010-05-27T00:00:00.000000 | 2010-05-27T00:00:00.000000 |
| certa-2010-avi-228 | Multiples vulnérabilités dans Google Chrome | 2010-05-27T00:00:00.000000 | 2010-05-27T00:00:00.000000 |
| certa-2010-avi-227 | Vulnérabilité dans ClamAV | 2010-05-27T00:00:00.000000 | 2010-05-27T00:00:00.000000 |
| certa-2010-avi-226 | Vulnérabilité dans Foxit Reader | 2010-05-25T00:00:00.000000 | 2010-05-25T00:00:00.000000 |
| certa-2010-avi-225 | Vulnérabilités dans IBM WebSphere Application Server | 2010-05-21T00:00:00.000000 | 2010-05-21T00:00:00.000000 |
| certa-2010-avi-224 | Vulnérabilité dans IBM AIX | 2010-05-21T00:00:00.000000 | 2010-05-21T00:00:00.000000 |
| certa-2010-avi-223 | Multiples vulnérabilités dans MySQL | 2010-05-21T00:00:00.000000 | 2010-05-21T00:00:00.000000 |
| certa-2010-avi-222 | Vulnérabilité dans les produits Palo Alto Networks | 2010-05-20T00:00:00.000000 | 2010-05-20T00:00:00.000000 |
| certa-2010-avi-221 | Vulnérabilité dans HP-UX | 2010-05-20T00:00:00.000000 | 2010-05-20T00:00:00.000000 |
| certa-2010-avi-220 | Multiples vulnérabilités dans HP Performance Manager | 2010-05-20T00:00:00.000000 | 2010-05-20T00:00:00.000000 |
| certa-2010-avi-218 | Vulnérabilités dans HP Insight Control Server Migration | 2010-05-19T00:00:00.000000 | 2010-05-19T00:00:00.000000 |
| certa-2010-avi-217 | Multiples vulnérabilités Java de Mac OS X | 2010-05-19T00:00:00.000000 | 2010-05-19T00:00:00.000000 |
| certa-2010-avi-216 | Multiples vulnérabilités dans Invision Power Board | 2010-05-18T00:00:00.000000 | 2010-05-18T00:00:00.000000 |
| certa-2010-avi-215 | Vulnérabilité dans Pidgin | 2010-05-18T00:00:00.000000 | 2010-05-18T00:00:00.000000 |
| certa-2010-avi-213 | Multiples vulnérabilités dans HP OpenView Network Node Manager (OV NNM) | 2010-05-18T00:00:00.000000 | 2010-05-18T00:00:00.000000 |
| certa-2010-avi-212 | Vulnérabilité dans HP Systems Insight Manager | 2010-05-18T00:00:00.000000 | 2010-05-18T00:00:00.000000 |
| certa-2010-avi-211 | Vulnérabilités dans le serveur HTTP d'IBM | 2010-05-14T00:00:00.000000 | 2010-05-14T00:00:00.000000 |
| certa-2010-avi-210 | Multiples vulnérabilités dans Cisco PGW Softswitch | 2010-05-14T00:00:00.000000 | 2010-05-14T00:00:00.000000 |
| certa-2010-avi-209 | Multiples vulnérabilités dans Adobe ColdFusion | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-208 | Vulnérabilité dans Cisco IronPort Desktop Flag Plug-in for Outlook | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-207 | Multiples vulnérabilités dans Adobe Shockwave Player | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-206 | Vulnérabilité dans Microsoft Visual Basic pour Applications | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-205 | Vulnérabilité dans Microsoft Outlook Express, Windows Mail et Windows Live Mail | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-204 | Vulnérabilité de produits 3Com | 2010-05-12T00:00:00.000000 | 2010-05-12T00:00:00.000000 |
| certa-2010-avi-203 | Vulnérabilité dans VMware View | 2010-05-07T00:00:00.000000 | 2010-05-07T00:00:00.000000 |