Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108457 | 8.1 (v3.1) | Microsoft Windows PDF Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 21H2 |
2026-10-13T18:59:24.552Z | 2026-10-31T18:00:15.145Z |
| cve-2026-108400 | 8.8 (v3.1) | HEVC Video Extensions Remote Code Execution Vulnerability |
Microsoft |
HEVC Video Extensions |
2026-10-13T18:59:24.362Z | 2026-10-31T18:00:14.672Z |
| cve-2026-105728 | 7.5 (v3.1) | Dynamics Business Central Information Disclosure Vulne… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:24.248Z | 2026-10-31T18:00:13.735Z |
| cve-2026-105727 | 8.8 (v3.1) | Microsoft Dynamics 365 Business Central Elevation of P… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:23.799Z | 2026-10-31T18:00:13.174Z |
| cve-2026-105725 | 7 (v3.1) | Windows Security App Elevation of Privilege Vulnerability |
Microsoft |
Windows Security App |
2026-10-13T18:59:23.648Z | 2026-10-31T18:00:12.283Z |
| cve-2026-103572 | 8.8 (v3.1) | Visual Studio Tools for Applications and SQL Server Ma… |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-13T18:56:39.614Z | 2026-10-31T18:00:11.253Z |
| cve-2026-102850 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:38.866Z | 2026-10-31T18:00:10.316Z |
| cve-2026-102849 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:35.500Z | 2026-10-31T18:00:08.757Z |
| cve-2026-110240 | 6.3 (v4.0) 4.8 (v3.1) | Lancet through 2.3.9 SSRF Protection Bypass via netuti… |
duke-git |
lancet |
2026-10-13T18:50:20.046Z | 2026-10-13T19:24:52.860Z |
| cve-2026-110239 | 2.1 (v4.0) 4.4 (v3.1) | Rapyd Admin before 9.20.0 Stored XSS via rich-text Component |
zofe |
rapyd-admin |
2026-10-13T18:50:19.369Z | 2026-10-14T15:57:06.011Z |
| cve-2026-110238 | 8.7 (v4.0) 8.8 (v3.1) | Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass v… |
zofe |
rapyd-admin |
2026-10-13T18:50:18.726Z | 2026-10-14T16:28:15.944Z |
| cve-2026-110237 | 7 (v4.0) 7.3 (v3.1) | Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Own… |
vifm |
vifm |
2026-10-13T18:50:18.056Z | 2026-10-17T00:38:50.515Z |
| cve-2026-110236 | 7.1 (v4.0) 7 (v3.1) | KDE Dolphin 24.08.0 through 26.08.2 OS Command Injecti… |
KDE |
Dolphin |
2026-10-13T18:50:17.460Z | 2026-10-26T18:16:16.535Z |
| cve-2026-110235 | 6.7 (v4.0) 5.5 (v3.1) | MP Manager through 1.1.0 Path Traversal via Archive Ex… |
Abdurazaaq Mohammed |
MP Manager |
2026-10-13T18:50:16.736Z | 2026-10-13T19:26:05.663Z |
| cve-2026-110234 | 4.1 (v4.0) 4.4 (v3.1) | Elio through 1.13.0 Insecure Temporary File Creation i… |
elio-fm |
elio |
2026-10-13T18:50:16.051Z | 2026-10-14T15:57:13.139Z |
| cve-2026-110233 | 8.4 (v4.0) 7.8 (v3.1) | rovr through 0.10.3 OS Command Injection via Unquoted … |
NSPC911 |
rovr |
2026-10-13T18:50:15.394Z | 2026-10-14T16:26:49.155Z |
| cve-2026-110232 | 4.6 (v4.0) 3.3 (v3.1) | Fossify File Manager through 1.6.2 Zip Slip Path Trave… |
Fossify |
Fossify File Manager |
2026-10-13T18:50:14.767Z | 2026-10-17T00:38:03.358Z |
| cve-2026-110231 | 5.6 (v4.0) 4.7 (v3.1) | muCommander through 1.6.2 Path Traversal via Archive E… |
muCommander |
muCommander |
2026-10-13T18:50:14.112Z | 2026-10-26T18:17:32.363Z |
| cve-2026-110230 | 5.3 (v4.0) 5.4 (v3.1) | XBackBone through 3.8.2 Missing Authorization via Uplo… |
sergix44 |
XBackBone |
2026-10-13T18:50:13.474Z | 2026-10-13T19:27:13.211Z |
| cve-2026-110229 | 5.3 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 Missing Hotel Access Restriction… |
Webkul |
QloApps |
2026-10-13T18:50:12.817Z | 2026-10-14T15:57:23.477Z |
| cve-2026-110228 | 5.1 (v4.0) 5.4 (v3.1) | wallabag 2.6.13 through 2.6.14 Stored XSS via Failed H… |
wallabag |
wallabag |
2026-10-13T18:50:12.210Z | 2026-10-14T16:23:45.608Z |
| cve-2026-110226 | 5.3 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 Authorization Bypass via id_hote… |
Webkul |
QloApps |
2026-10-13T18:50:11.477Z | 2026-10-16T22:32:49.105Z |
| cve-2026-110225 | 5.1 (v4.0) 2.7 (v3.1) | Shaarli through 0.16.9 SSRF via Thumbnail Retrieval up… |
shaarli |
Shaarli |
2026-10-13T18:50:10.481Z | 2026-10-26T18:27:10.583Z |
| cve-2026-110224 | 5.1 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 Reflected XSS via Search Alias V… |
Webkul |
QloApps |
2026-10-13T18:50:09.840Z | 2026-10-13T19:30:15.273Z |
| cve-2026-110223 | 2.3 (v4.0) 3.1 (v3.1) | Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via… |
Kareadita |
Kavita |
2026-10-13T18:50:09.202Z | 2026-10-14T15:57:31.688Z |
| cve-2026-110222 | 6.9 (v4.0) 5.3 (v3.1) | Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup |
Razorpay |
IFSC |
2026-10-13T18:50:08.557Z | 2026-10-14T16:22:04.586Z |
| cve-2026-110221 | 5.1 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 Reflected XSS via Advanced Price… |
Webkul |
QloApps |
2026-10-13T18:50:07.876Z | 2026-10-16T22:30:46.253Z |
| cve-2026-110220 | 7.1 (v4.0) 7.1 (v3.1) | Kubeflow Model Registry through 0.3.17 SSRF via Infere… |
Kubeflow |
Model Registry |
2026-10-13T18:50:07.237Z | 2026-10-26T18:31:35.835Z |
| cve-2026-110219 | 5.1 (v4.0) 5.4 (v3.1) | QloApps through 1.7.0 Reflected XSS via Additional Fac… |
Webkul |
QloApps |
2026-10-13T18:50:06.540Z | 2026-10-13T19:31:01.701Z |
| cve-2026-110218 | 6.3 (v4.0) 3.7 (v3.1) | Aureus ERP through 1.6.0 Unpublished Blog Post Disclos… |
Webkul |
Aureus ERP |
2026-10-13T18:50:05.890Z | 2026-10-14T15:57:41.429Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-015 | Vulnérabilité dans Solaris Trusted Extensions | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-014 | Vulnérabilité dans Zope | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-013 | Vulnérabilité dans MIT Kerberos | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-012 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-011 | Vulnérabilité dans Microsoft Windows | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-010 | Multiples vulnérabilités dans des produits Oracle | 2010-01-13T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-009 | Multiples vulnérabilités dans IBM Lotus Domino Web Access | 2010-01-08T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2010-avi-008 | Mulitples vulnérabilités dans VMware ESX | 2010-01-08T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2010-avi-007 | Vulnérabilités dans Adobe Illustrator | 2010-01-08T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2010-avi-006 | Vulnérabilité dans Novell iManager eDirectory | 2010-01-08T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2010-avi-005 | Vulnérabilité dans FreeBSD | 2010-01-07T00:00:00.000000 | 2010-01-07T00:00:00.000000 |
| certa-2010-avi-004 | Vulnérabilité dans MIT Kerberos 5 | 2010-01-07T00:00:00.000000 | 2010-01-07T00:00:00.000000 |
| certa-2010-avi-003 | Multiples vulnérabilités dans PowerDNS | 2010-01-07T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2010-avi-002 | Vulnérabilité dans NTPD | 2010-01-07T00:00:00.000000 | 2010-10-06T00:00:00.000000 |
| certa-2010-avi-001 | Vulnérabilités dans Xoops | 2010-01-05T00:00:00.000000 | 2010-01-05T00:00:00.000000 |
| certa-2009-avi-562 | Vulnérabilité dans Sendmail | 2009-12-31T00:00:00.000000 | 2009-12-31T00:00:00.000000 |
| certa-2009-avi-561 | Multiples vulnérabilités dans Directory Server Enterprise Edition | 2009-12-29T00:00:00.000000 | 2009-12-29T00:00:00.000000 |
| certa-2009-avi-560 | Vulnérabilité dans phpMyVisites | 2009-12-23T00:00:00.000000 | 2009-12-23T00:00:00.000000 |
| certa-2009-avi-559 | Vulnérabilités dans Winamp | 2009-12-22T00:00:00.000000 | 2009-12-22T00:00:00.000000 |
| certa-2009-avi-558 | Vulnérabilité dans IBM WebSphere Application Server Feature Pack for CEA | 2009-12-21T00:00:00.000000 | 2009-12-21T00:00:00.000000 |
| certa-2009-avi-557 | Vulnérabilités dans OSSIM | 2009-12-21T00:00:00.000000 | 2009-12-24T00:00:00.000000 |
| certa-2009-avi-556 | Multiples vulnérabilités dans IBM AIX | 2009-12-21T00:00:00.000000 | 2009-12-24T00:00:00.000000 |
| certa-2009-avi-555 | Vulnérabilités dans Adobe Flash Media Server | 2009-12-21T00:00:00.000000 | 2009-12-21T00:00:00.000000 |
| certa-2009-avi-554 | Multiples vulnérabilités dans Wireshark | 2009-12-18T00:00:00.000000 | 2009-12-24T00:00:00.000000 |
| certa-2009-avi-553 | Multiples vulnérabilités de PHP | 2009-12-18T00:00:00.000000 | 2009-12-18T00:00:00.000000 |
| certa-2009-avi-552 | Vulnérabilité dans des produits Horde | 2009-12-17T00:00:00.000000 | 2009-12-24T00:00:00.000000 |
| certa-2009-avi-551 | Multiples vulnérabilités dans IBM WebSphere | 2009-12-17T00:00:00.000000 | 2009-12-17T00:00:00.000000 |
| certa-2009-avi-550 | Multiples vulnérabilités dans Cisco WebEx WRF Player | 2009-12-17T00:00:00.000000 | 2009-12-17T00:00:00.000000 |
| certa-2009-avi-549 | Multiples vulnérabilités dans Drupal | 2009-12-17T00:00:00.000000 | 2009-12-24T00:00:00.000000 |
| certa-2009-avi-548 | Vulnérabilité dans VMware vCenter Lab Manager | 2009-12-17T00:00:00.000000 | 2009-12-17T00:00:00.000000 |