Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116610 | Clean Login <= 1.20.1 - Missing Authorization to Authe… |
hornero |
Clean Login |
2026-10-28T06:45:15.107Z | 2026-10-28T16:09:40.610Z | |
| cve-2026-107710 | Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stor… |
wpmudev |
Hustle – Email Marketing, Lead Generation, Optins, Popups |
2026-10-28T06:45:18.336Z | 2026-10-28T16:09:34.692Z | |
| cve-2026-110185 | Bit Flows: AI Agent Automation & Integrations for Form… |
bitpressadmin |
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More |
2026-10-28T06:45:20.364Z | 2026-10-28T16:09:28.549Z | |
| cve-2026-115596 | 7.1 (v3.1) | WordPress eCommerce Product Catalog plugin <= 3.6.4 - … |
impleCode |
eCommerce Product Catalog |
2026-10-28T13:00:13.283Z | 2026-10-28T16:07:36.842Z |
| cve-2026-115612 | 7.1 (v3.1) | WordPress SliceWP plugin <= 1.2.13 - Cross Site Script… |
iova.mihai |
SliceWP |
2026-10-28T13:00:14.372Z | 2026-10-28T16:07:30.579Z |
| cve-2026-116393 | 7.5 (v3.1) | WordPress Optima Express + MarketBoost IDX Plugin plug… |
iHomefinder, Inc. |
Optima Express |
2026-10-28T13:00:28.337Z | 2026-10-28T16:07:23.809Z |
| cve-2026-59172 | Joker linter executed project-local .jokerd/linter.* f… |
candid82 |
joker |
2026-10-28T13:07:35.230Z | 2026-10-28T16:07:17.268Z | |
| cve-2026-59185 | identrail: Cross-tenant GitHub installation binding wi… |
identrail |
identrail |
2026-10-28T13:15:53.456Z | 2026-10-28T16:07:10.634Z | |
| cve-2026-115968 | 9.8 (v3.1) | WordPress Ultimate Member plugin <= 2.13.1 - PHP Objec… |
Ultimate Member |
Ultimate Member |
2026-10-28T14:02:57.496Z | 2026-10-28T16:07:03.811Z |
| cve-2026-50539 | Xibo: Missing Object-Level Authorization on /notificat… |
xibosignage |
xibo-cms |
2026-10-28T15:31:12.074Z | 2026-10-28T16:06:48.627Z | |
| cve-2026-50542 | Xibo: IDOR (Broken Object-Level Authorization) on GET … |
xibosignage |
xibo-cms |
2026-10-28T15:34:27.453Z | 2026-10-28T16:06:41.811Z | |
| cve-2026-116778 | FOG: Authenticated low-privileged API user can modify … |
FOGProject |
fogproject |
2026-10-28T15:49:59.899Z | 2026-10-28T16:06:35.677Z | |
| cve-2016-20103 | 8.7 (v4.0) 7.5 (v3.1) | Cherry Plugin for WordPress < 1.2.7 Path Traversal via… |
Cherry Team |
Cherry Plugin |
2026-10-20T20:31:28.909Z | 2026-10-28T15:57:22.592Z |
| cve-2026-114094 | 8.7 (v4.0) 8.8 (v3.1) | Dulwich before 1.2.9 Arbitrary File Write via DOS driv… |
jelmer |
dulwich |
2026-10-21T00:36:58.401Z | 2026-10-28T15:57:01.832Z |
| cve-2026-113731 | djust: Arbitrary absolute-path file read in the find_h… |
djust-org |
djust |
2026-10-20T21:31:28.008Z | 2026-10-28T15:54:09.246Z | |
| cve-2026-114089 | 8.7 (v4.0) 8.8 (v3.1) | Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leadin… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:54.860Z | 2026-10-28T15:52:55.169Z |
| cve-2026-81212 | 10 (v3.1) | DataStage on Cloud Pak for Data Improper Authorization |
IBM |
DataStage on Cloud Pak for Data |
2026-10-20T21:58:51.662Z | 2026-10-28T15:52:11.257Z |
| cve-2026-113705 | a2aproject a2a-rs error.rs information exposure |
a2aproject |
a2a-rs |
2026-10-20T22:45:09.343Z | 2026-10-28T15:49:45.112Z | |
| cve-2026-114069 | 8.6 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.6.0 Root Secret Disclosure via en… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:40.958Z | 2026-10-28T15:48:44.313Z |
| cve-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_pr… |
D-Link |
DHP-W610AV |
2026-10-21T00:00:32.718Z | 2026-10-28T15:46:10.838Z | |
| cve-2020-37289 | 6.3 (v4.0) 3.7 (v3.1) | Vyper before 0.3.1 Improper Input Validation of uint8 … |
vyperlang |
vyper |
2026-10-21T00:36:17.573Z | 2026-10-28T15:45:18.052Z |
| cve-2026-114041 | 6.9 (v4.0) 6.5 (v3.1) | FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD G… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:21.187Z | 2026-10-28T15:43:43.515Z |
| cve-2026-114046 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.0.0 before 3.32.0 null-pointer dereference v… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:24.797Z | 2026-10-28T15:42:09.948Z |
| cve-2026-93521 | 7.8 (v3.1) | X.Org Server RandR ChangeProviderProperty Heap Buffer … |
x.org |
xorg-x11-server |
2026-10-28T15:37:43.432Z | 2026-10-28T15:37:43.432Z |
| cve-2026-114084 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 SQL Injection via tags in Rea… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:51.356Z | 2026-10-28T15:36:39.961Z |
| cve-2026-118029 | 5.9 (v4.0) 5.9 (v3.1) | Unverified ownership of the default Athena query resul… |
aws |
aws-sdk-pandas |
2026-10-28T15:32:56.602Z | 2026-10-28T15:32:56.602Z |
| cve-2026-111044 | Disabled Sunshine clients can bypass revocation with a… |
LizardByte |
Sunshine |
2026-10-16T21:59:00.939Z | 2026-10-28T15:32:53.402Z | |
| cve-2026-114079 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.6 Cross-Environment Deployment … |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:47.902Z | 2026-10-28T15:31:57.770Z |
| cve-2026-111057 | Mercury: Unauthenticated Remote Code Execution in /api… |
mljar |
mercury |
2026-10-19T16:04:07.065Z | 2026-10-28T15:31:24.524Z | |
| cve-2026-114074 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.10 Webhook SSRF Protection Bypa… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:44.452Z | 2026-10-28T15:30:10.464Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-202 | Vulnérabilité de PCRE | 2010-05-07T00:00:00.000000 | 2010-05-07T00:00:00.000000 |
| certa-2010-avi-199 | Vulnérabilité dans Adobe Photoshop CS4 | 2010-05-03T00:00:00.000000 | 2010-05-03T00:00:00.000000 |
| certa-2010-avi-198 | Vulnérabilité dans Opera | 2010-05-03T00:00:00.000000 | 2010-05-03T00:00:00.000000 |
| certa-2010-avi-197 | Multipes vulnérabilités dans Google Chrome | 2010-04-29T00:00:00.000000 | 2010-04-29T00:00:00.000000 |
| certa-2010-avi-164 | Vulnérabilité dans TheGreenBow VPN Client | 2010-04-13T00:00:00.000000 | 2010-04-29T00:00:00.000000 |
| certa-2010-avi-020 | Vulnérabilité dans BIND DNSSEC | 2010-01-20T00:00:00.000000 | 2010-04-29T00:00:00.000000 |
| certa-2010-avi-201 | Vulnérabilité dans les imprimantes laser Lexmark | 2010-04-26T00:00:00.000000 | 2010-04-26T00:00:00.000000 |
| certa-2010-avi-196 | Multiples vulnérabilités de IBM DB2 | 2010-04-23T00:00:00.000000 | 2010-04-23T00:00:00.000000 |
| certa-2010-avi-195 | Vulnérabilité dans les routeurs 3Com H3C SR6600 | 2010-04-23T00:00:00.000000 | 2010-04-23T00:00:00.000000 |
| certa-2010-avi-194 | Vulnérabilité dans Cisco Small Business Video Surveillance Cameras | 2010-04-22T00:00:00.000000 | 2010-04-22T00:00:00.000000 |
| certa-2010-avi-193 | Vulnérabilité dans mod_auth_shadow pour Apache | 2010-04-22T00:00:00.000000 | 2010-04-22T00:00:00.000000 |
| certa-2010-avi-192 | Multiples vulnérabilités dans IBM Java | 2010-04-22T00:00:00.000000 | 2010-04-22T00:00:00.000000 |
| certa-2010-avi-191 | Multiples vulnérabilités dans VLC | 2010-04-22T00:00:00.000000 | 2010-04-22T00:00:00.000000 |
| certa-2010-avi-190 | Vulnérabilité de MIT Kerberos | 2010-04-21T00:00:00.000000 | 2010-04-21T00:00:00.000000 |
| certa-2010-avi-189 | Vulnérabilité dans HP Operation Manager pour Windows | 2010-04-21T00:00:00.000000 | 2010-04-21T00:00:00.000000 |
| certa-2010-avi-188 | Multiples vulnérabilités dans Google Chrome | 2010-04-21T00:00:00.000000 | 2010-04-21T00:00:00.000000 |
| certa-2010-avi-187 | Vulnérabilité dans KDM | 2010-04-19T00:00:00.000000 | 2010-04-19T00:00:00.000000 |
| certa-2010-avi-186 | Vulnérabilité des commutateurs 3Com | 2010-04-19T00:00:00.000000 | 2010-04-19T00:00:00.000000 |
| certa-2010-avi-185 | Vulnérabilités dans Oracle Sun Java | 2010-04-16T00:00:00.000000 | 2010-04-16T00:00:00.000000 |
| certa-2010-avi-184 | Vulnérabilité dans IBM BladeCenter Management Module | 2010-04-16T00:00:00.000000 | 2010-04-16T00:00:00.000000 |
| certa-2010-avi-183 | Vulnérabilité dans IBM WebSphere Portal | 2010-04-15T00:00:00.000000 | 2010-04-15T00:00:00.000000 |
| certa-2010-avi-182 | Multiples vulnérabilités dans CUPS | 2010-04-15T00:00:00.000000 | 2010-04-15T00:00:00.000000 |
| certa-2010-avi-181 | Vulnérabilité dans Apple Mac OS X | 2010-04-15T00:00:00.000000 | 2010-04-15T00:00:00.000000 |
| certa-2010-avi-180 | Vulnérabilité dans Cisco Secure Desktop | 2010-04-15T00:00:00.000000 | 2010-04-15T00:00:00.000000 |
| certa-2010-avi-179 | Multiples vulnérabilités dans les produits Oracle | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-178 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-177 | Vulnérabilités dans Microsoft Windows ISATAP | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-176 | Multiples vulnérabilités dans Microsoft Visio | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-175 | Vulnérabilité dans Windows Media Player | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-174 | Vulnérabilité du Codec Microsoft MPEG Layer-3 | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |