Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-88838 | 5.5 (v3.1) | Busybox: busybox: non-root mount option filter bypass … |
Red Hat |
Red Hat Hardened Images |
2026-10-13T16:56:15.518Z | 2026-10-14T16:16:14.045Z |
| cve-2026-88833 | 6.5 (v3.1) | Busybox: busybox: udhcpc integer underflow in dhcp pac… |
Red Hat |
Red Hat Hardened Images |
2026-10-13T16:56:11.068Z | 2026-10-16T22:22:10.834Z |
| cve-2026-53562 | 8.5 (v4.0) | Local Privilege Escalation |
Citrix |
UniconOS |
2026-10-13T16:54:56.181Z | 2026-10-13T19:31:30.536Z |
| cve-2026-110131 | 6.9 (v4.0) 5.3 (v3.1) | ThriveX-Server through 4.0 Missing Authorization via A… |
LiuYuYang01 |
ThriveX-Server |
2026-10-13T16:53:23.021Z | 2026-10-14T15:58:26.570Z |
| cve-2026-110129 | 7.1 (v4.0) 6.5 (v3.1) | fuintCatering through commit 122c9e6 IDOR via /clientA… |
fushengqian |
fuintCatering |
2026-10-13T16:53:22.375Z | 2026-10-14T15:53:55.245Z |
| cve-2026-110128 | 8.7 (v4.0) 7.5 (v3.1) | fuint through commit 4c4bc8a Missing Authentication vi… |
fushengqian |
fuint |
2026-10-13T16:53:21.745Z | 2026-10-16T22:19:46.107Z |
| cve-2026-110127 | 5.3 (v4.0) 4.3 (v3.1) | waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints |
wayn111 |
waynboot-mall |
2026-10-13T16:53:21.047Z | 2026-10-26T19:27:01.469Z |
| cve-2026-110126 | 5.3 (v4.0) 5.4 (v3.1) | waynboot-mall through 2.0.0 IDOR via Mobile Address En… |
wayn111 |
waynboot-mall |
2026-10-13T16:53:20.427Z | 2026-10-13T17:17:38.595Z |
| cve-2026-110125 | 5.3 (v4.0) 6.3 (v3.1) | waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints |
wayn111 |
waynboot-mall |
2026-10-13T16:53:19.780Z | 2026-10-14T15:58:39.593Z |
| cve-2026-110124 | 8.6 (v4.0) 8.1 (v3.1) | FastBee through 2.1.0 IDOR via DeviceController /iot/d… |
kerwincui |
FastBee |
2026-10-13T16:53:19.145Z | 2026-10-14T15:52:32.042Z |
| cve-2026-110123 | 7.1 (v4.0) 7.1 (v3.1) | Makunet maku-boot 4.3.0 through 5.0.0 Missing Authoriz… |
makunet |
maku-boot |
2026-10-13T16:53:18.499Z | 2026-10-16T22:19:01.993Z |
| cve-2026-110122 | 5.3 (v4.0) 4.3 (v3.1) | PickMall lilishop through 4.4 IDOR via Goods Freight E… |
PickMall |
lilishop |
2026-10-13T16:53:17.861Z | 2026-10-26T19:29:42.529Z |
| cve-2026-110121 | 7.1 (v4.0) 6.5 (v3.1) | PickMall lilishop through 4.4 IDOR via Goods Edit Endpoint |
PickMall |
lilishop |
2026-10-13T16:53:17.247Z | 2026-10-13T17:18:39.680Z |
| cve-2026-110120 | 5.3 (v4.0) 5.4 (v3.1) | yshopmall through 2.0.0 IDOR via After-Sales API in St… |
guchengwuyue |
yshopmall |
2026-10-13T16:53:16.663Z | 2026-10-14T15:58:48.065Z |
| cve-2026-110119 | 7.1 (v4.0) 7.1 (v3.1) | yshopmall through 2.0.0 IDOR via Member Address API in… |
guchengwuyue |
yshopmall |
2026-10-13T16:53:15.977Z | 2026-10-14T15:49:20.051Z |
| cve-2026-110118 | 7.1 (v4.0) 6.5 (v3.1) | WorkFlow-Engine through 9.6.11 Missing Authorization v… |
risesoft-y9 |
WorkFlow-Engine |
2026-10-13T16:53:15.337Z | 2026-10-16T22:18:12.566Z |
| cve-2026-110117 | 7.1 (v4.0) 6.5 (v3.1) | SmartAdmin through 3.30.0 Missing Authorization via Ad… |
1024-lab |
SmartAdmin |
2026-10-13T16:53:14.709Z | 2026-10-26T19:32:05.571Z |
| cve-2026-110116 | 8.8 (v4.0) 9.1 (v3.1) | Digital-Infrastructure 9.6.5 through 9.6.11 Path Trave… |
risesoft-y9 |
Digital-Infrastructure |
2026-10-13T16:53:14.032Z | 2026-10-13T17:19:36.502Z |
| cve-2026-110115 | 8.7 (v4.0) 7.5 (v3.1) | Digital-Infrastructure 9.6.5 through 9.6.11 Path Trave… |
risesoft-y9 |
Digital-Infrastructure |
2026-10-13T16:53:13.376Z | 2026-10-14T15:58:57.719Z |
| cve-2026-110114 | 6.9 (v4.0) 6.5 (v3.1) | oms-erp through PRE Missing Authentication via skyer-g… |
FJ-OMS |
oms-erp |
2026-10-13T16:53:12.711Z | 2026-10-14T15:46:12.426Z |
| cve-2026-110113 | 5.3 (v4.0) 4.3 (v3.1) | PublicCMS through V6.202608.a IDOR via tradeAddress/sa… |
Sanluan |
PublicCMS |
2026-10-13T16:53:12.086Z | 2026-10-16T22:16:59.627Z |
| cve-2026-110110 | 5.3 (v4.0) 4.3 (v3.1) | JetLinks Community through 2.10.0 Missing Authorizatio… |
jetlinks |
JetLinks Community |
2026-10-13T16:53:11.419Z | 2026-10-26T19:34:05.592Z |
| cve-2026-110109 | 7.1 (v4.0) 6.5 (v3.1) | JetLinks Community through 2.10.0 Missing Authorizatio… |
jetlinks |
JetLinks Community |
2026-10-13T16:53:10.736Z | 2026-10-13T17:20:57.490Z |
| cve-2026-110108 | 8.6 (v4.0) 8.1 (v3.1) | MateCloud through 5.0.8 Missing Authorization via /api… |
mateaix |
MateCloud |
2026-10-13T16:53:09.830Z | 2026-10-14T15:59:07.138Z |
| cve-2026-110107 | 2.3 (v4.0) 4.2 (v3.1) | RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/u… |
dromara |
RuoYi-Cloud-Plus |
2026-10-13T16:53:09.067Z | 2026-10-14T15:45:13.163Z |
| cve-2026-110106 | 2.3 (v4.0) 4.2 (v3.1) | RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unl… |
dromara |
RuoYi-Vue-Plus |
2026-10-13T16:53:08.493Z | 2026-10-16T22:15:43.994Z |
| cve-2026-110105 | 6.9 (v4.0) 5.3 (v3.1) | B3log Symphony through 3.6.4 Missing Authorization in … |
b3log |
Symphony |
2026-10-13T16:53:07.878Z | 2026-10-26T19:38:00.743Z |
| cve-2026-110104 | 8.2 (v4.0) 5.9 (v3.1) | novel through 3.5.0 Unsalted MD5 Password Storage |
xxyopen |
novel |
2026-10-13T16:53:07.159Z | 2026-10-13T17:22:41.593Z |
| cve-2026-110103 | 5.1 (v4.0) 5.4 (v3.1) | bbs-go through 4.4.6 Stored XSS via Image Upload Conte… |
mlogclub |
bbs-go |
2026-10-13T16:53:06.263Z | 2026-10-14T15:59:17.370Z |
| cve-2026-110102 | 7.7 (v4.0) 7.5 (v3.1) | powerlevel10k through 1.20.0 Download of Code Without … |
romkatv |
powerlevel10k |
2026-10-13T16:53:05.596Z | 2026-10-14T15:43:53.158Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-457 | Vulnérabilité dans Asterisk | 2009-10-27T00:00:00.000000 | 2009-10-27T00:00:00.000000 |
| certa-2009-avi-456 | Vulnérabilité dans ProFTPD | 2009-10-26T00:00:00.000000 | 2009-10-26T00:00:00.000000 |
| certa-2009-avi-455 | Vulnérabilité dans IBM OS/400 HTTP Server | 2009-10-26T00:00:00.000000 | 2009-10-26T00:00:00.000000 |
| certa-2009-avi-454 | Multiples vulnérabilités dans TYPO3 | 2009-10-26T00:00:00.000000 | 2009-10-26T00:00:00.000000 |
| certa-2009-avi-453 | Multiples vulnérabilités dans WordPress | 2009-10-21T00:00:00.000000 | 2009-10-21T00:00:00.000000 |
| certa-2009-avi-452 | Multiples vulnérabilités des produits Oracle | 2009-10-21T00:00:00.000000 | 2009-10-21T00:00:00.000000 |
| certa-2009-avi-451 | Multiples vulnérabiltés dans les produits VMware | 2009-10-20T00:00:00.000000 | 2009-10-20T00:00:00.000000 |
| certa-2009-avi-450 | Vulnérabilité dans ZFS pour Sun Solaris et Sun OpenSolaris | 2009-10-16T00:00:00.000000 | 2009-10-16T00:00:00.000000 |
| certa-2009-avi-449 | Multiples vulnérabilités dans Cisco Unified Presence | 2009-10-16T00:00:00.000000 | 2009-10-16T00:00:00.000000 |
| certa-2009-avi-448 | Vulnérabilités dans Xpdf et dérivés | 2009-10-16T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2009-avi-447 | Vulnérabilités dans phpMyAdmin | 2009-10-16T00:00:00.000000 | 2009-10-16T00:00:00.000000 |
| certa-2009-avi-446 | Vulnérabilités dans Symantec SecurityExpressions | 2009-10-16T00:00:00.000000 | 2009-10-16T00:00:00.000000 |
| certa-2009-avi-445 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-444 | Multiples vulnérabilités dans Microsoft Windows Media Runtime | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-443 | Multiples vulnérabilités de SMBv2 dans Microsoft Windows | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-442 | Multiples vulnérabilités des produits Microsoft utilisant GDI+ | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-441 | Multiples vulnérabilités dans Microsoft .NET Common Language Runtime | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-440 | Multiples vulnérabilités dans Microsoft ATL ActiveX controls pour Microsoft Office | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-439 | Vulnérabilité dans Local Security Authority Subsystem Service | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-438 | Vulnérabilité dans Microsoft Windows | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-437 | Vulnérabilité dans le service d'indexation de Windows | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-436 | Vulnérabilités dans Windows CryptoAPI | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-435 | Vulnérabilité des composants ActiveX utilisant la bibliothèque ATL | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-434 | Multiples vulnérabilités de Microsoft Internet Explorer | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-433 | Vulnérabilités du serveur FTP de Microsoft IIS | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-432 | Vulnérabilité dans Microsoft Windows Media Player | 2009-10-14T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-avi-431 | Vulnérabilités dans CA Anti-Virus | 2009-10-12T00:00:00.000000 | 2009-10-12T00:00:00.000000 |
| certa-2009-avi-430 | Vulnérabilité des systèmes IBM AIX et VIOS | 2009-10-09T00:00:00.000000 | 2009-10-09T00:00:00.000000 |
| certa-2009-avi-429 | Vulnérabilité dans Sun Solaris clsetup | 2009-10-08T00:00:00.000000 | 2009-10-08T00:00:00.000000 |
| certa-2009-avi-428 | Multiples vulnérabilités dans Kerberos sous HP-UX | 2009-10-08T00:00:00.000000 | 2009-10-08T00:00:00.000000 |