Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-110101 | 5.1 (v4.0) 5.4 (v3.1) | Koillection through 1.8.4 Stored XSS via Datum File At… |
benjaminjonard |
Koillection |
2026-10-13T16:53:05.007Z | 2026-10-16T22:12:14.462Z |
| cve-2026-110100 | 5.3 (v4.0) 5.4 (v3.1) | Jorani before 1.0.4 Missing Authorization and SSRF via… |
Jorani |
Jorani |
2026-10-13T16:53:04.371Z | 2026-10-26T19:39:49.604Z |
| cve-2026-110099 | 5.3 (v4.0) 4.3 (v3.1) | Jorani before 1.0.4 Missing Authorization in HR Export… |
Jorani |
Jorani |
2026-10-13T16:53:03.744Z | 2026-10-13T17:25:10.430Z |
| cve-2026-110098 | 5.3 (v4.0) 5.4 (v3.1) | Jorani before 1.0.4 Insecure Direct Object Reference i… |
Jorani |
Jorani |
2026-10-13T16:53:03.119Z | 2026-10-14T15:59:23.621Z |
| cve-2026-110097 | 8.6 (v4.0) 8.1 (v3.1) | Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass … |
ikaros-dev |
ikaros |
2026-10-13T16:53:02.487Z | 2026-10-14T15:42:16.606Z |
| cve-2026-94603 | Podman: The `podman run` command can be instructed to … |
podman-container-tools |
podman |
2026-10-13T16:51:38.731Z | 2026-10-13T20:21:43.627Z | |
| cve-2026-55823 | Frappe: Possibility of SQL injection in reportview |
frappe |
frappe |
2026-10-13T16:49:28.128Z | 2026-10-13T17:51:54.927Z | |
| cve-2026-66057 | Frappe: Open Redirect via Unsanitized OAuth State Param. |
frappe |
frappe |
2026-10-13T16:48:03.798Z | 2026-10-14T15:37:34.866Z | |
| cve-2026-109827 | GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write |
n/a |
GPAC |
2026-10-13T16:45:16.965Z | 2026-10-15T15:11:47.862Z | |
| cve-2026-19940 | 6.5 (v3.1) | Bluetooth HFP AG reuses a connection slot while a dela… |
zephyrproject |
zephyr |
2026-10-13T16:40:10.541Z | 2026-11-04T05:01:03.741Z |
| cve-2026-19939 | 6.3 (v3.1) | Bluetooth Classic AVDTP: stale timeout work on signall… |
zephyrproject |
zephyr |
2026-10-13T16:39:16.681Z | 2026-11-04T05:01:05.176Z |
| cve-2026-104126 | JumpServer: Ansible Automation Template Rendering Allo… |
jumpserver |
jumpserver |
2026-10-13T16:36:23.801Z | 2026-10-16T22:11:06.927Z | |
| cve-2026-54454 | OpenCATS: Authenticated RCE in the Import module |
opencats |
OpenCATS |
2026-10-13T16:33:49.786Z | 2026-10-13T20:21:52.025Z | |
| cve-2026-103030 | Dio: Cross-origin redirect leaks sensitive request hea… |
cfug |
dio |
2026-10-13T16:31:34.989Z | 2026-10-13T17:53:14.033Z | |
| cve-2026-109620 | SourceCodester Online Reviewer System index.php prepar… |
SourceCodester |
Online Reviewer System |
2026-10-13T16:30:20.191Z | 2026-10-14T15:36:34.650Z | |
| cve-2026-61642 | Squid Request Smuggling in HTTP Transfer-Encoding |
squid-cache |
squid |
2026-10-13T16:29:37.325Z | 2026-10-13T17:54:31.020Z | |
| cve-2026-104250 | unstructured: Stored XSS via unescaped HTML generation |
Unstructured-IO |
unstructured |
2026-10-13T16:29:28.813Z | 2026-10-14T15:32:42.130Z | |
| cve-2026-77459 | Argo CD: AppProject destination-namespace and resource… |
argoproj |
argo-cd |
2026-10-13T16:26:47.088Z | 2026-10-14T15:29:55.346Z | |
| cve-2026-109412 | 9.9 (v3.1) | An exposed dangerous endpoint in Ivanti Neurons P… |
Ivanti |
Neurons Patch for Intune |
2026-10-13T16:23:41.494Z | 2026-10-14T18:50:00.417Z |
| cve-2026-85733 | FrankenPHP: Docker images serve phpinfo() as the defau… |
php |
frankenphp |
2026-10-13T16:23:07.177Z | 2026-10-13T17:15:18.579Z | |
| cve-2026-109898 | 5.3 (v3.1) | WordPress WP Event Solution plugin <= 4.1.25 - Broken … |
Arraytics |
WP Event Solution |
2026-10-13T16:23:02.114Z | 2026-10-15T16:43:51.594Z |
| cve-2026-109896 | 4.3 (v3.1) | WordPress Download Monitor integration for WooCommerce… |
WP Chill |
Download Monitor integration for WooCommerce |
2026-10-13T16:22:06.720Z | 2026-10-15T16:43:51.727Z |
| cve-2026-109890 | 5.3 (v3.1) | WordPress Premium Addons for Elementor plugin <= 4.11.… |
LeapWorx |
Premium Addons for Elementor |
2026-10-13T16:21:41.444Z | 2026-10-14T15:25:49.121Z |
| cve-2026-82416 | FrankenPHP: Cross-request PHP session ID leak in worke… |
php |
frankenphp |
2026-10-13T16:20:53.439Z | 2026-10-13T20:22:02.706Z | |
| cve-2026-55183 | RClone Manager: Unauthenticated RClone Daemon Enables … |
Zarestia-Dev |
rclone-manager |
2026-10-13T16:19:53.382Z | 2026-10-13T17:13:34.078Z | |
| cve-2026-106047 | 7.7 (v3.1) | A Path Traversal vulnerability in the template ex… |
Ivanti |
Xtraction |
2026-10-13T16:19:39.517Z | 2026-10-13T19:31:30.672Z |
| cve-2026-55562 | Cronicle: Stored XSS in admin Activity Log via account… |
jhuckaby |
Cronicle |
2026-10-13T16:18:55.780Z | 2026-10-16T22:10:09.702Z | |
| cve-2026-106043 | 7.5 (v3.1) | A Missing Authentication for Critical Function vu… |
Ivanti |
Xtraction |
2026-10-13T16:17:58.955Z | 2026-10-13T19:31:30.797Z |
| cve-2026-109607 | SourceCodester Online Exam System Login Endpoint login… |
SourceCodester |
Online Exam System |
2026-10-13T16:15:21.078Z | 2026-10-16T22:09:07.051Z | |
| cve-2026-85990 | Leantime: Any Authenticated User Can Self-Escalate to … |
Leantime |
leantime |
2026-10-13T16:15:09.529Z | 2026-10-16T22:08:17.288Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-427 | Vulnérabilité dans HP Remote Graphics Software | 2009-10-07T00:00:00.000000 | 2009-10-07T00:00:00.000000 |
| certa-2009-avi-426 | Vulnérabilité dans Xen | 2009-10-07T00:00:00.000000 | 2009-10-07T00:00:00.000000 |
| certa-2009-avi-425 | Multiples vulnérabilités de FreeBSD | 2009-10-07T00:00:00.000000 | 2009-10-07T00:00:00.000000 |
| certa-2009-avi-424 | Multiples vulnérabilités dans Apache | 2009-10-07T00:00:00.000000 | 2009-10-07T00:00:00.000000 |
| certa-2009-avi-423 | Multiples vulnérabilités dans Wireshark | 2009-10-06T00:00:00.000000 | 2009-10-06T00:00:00.000000 |
| certa-2009-avi-422 | Vulnérabilité dans Mc Afee Email and Web Security Appliance | 2009-10-06T00:00:00.000000 | 2009-10-06T00:00:00.000000 |
| certa-2009-avi-421 | Vulnérabilité dans OSIsoft PI server | 2009-10-02T00:00:00.000000 | 2009-10-02T00:00:00.000000 |
| certa-2009-avi-420 | Multiples vulnérabilités dans Samba | 2009-10-02T00:00:00.000000 | 2010-02-04T00:00:00.000000 |
| certa-2009-avi-419 | Multiples vulnérabilités du logiciel VMware Fusion | 2009-10-02T00:00:00.000000 | 2009-10-02T00:00:00.000000 |
| certa-2009-avi-418 | Vulnérabilité dans IBM Tivoli Composite Application Manager pour WebSphere | 2009-10-02T00:00:00.000000 | 2009-10-02T00:00:00.000000 |
| certa-2009-avi-417 | Vulnérabilités dans IBM AIX | 2009-10-01T00:00:00.000000 | 2009-10-01T00:00:00.000000 |
| certa-2009-avi-416 | Vulnérabilité dans HP StorageWorks | 2009-10-01T00:00:00.000000 | 2009-10-01T00:00:00.000000 |
| certa-2009-avi-415 | Vulnérabilité dans Novell NetWare | 2009-10-01T00:00:00.000000 | 2009-10-01T00:00:00.000000 |
| certa-2009-avi-414 | Vulnérabilité dans le navigateur Google Chrome | 2009-10-01T00:00:00.000000 | 2009-10-01T00:00:00.000000 |
| certa-2009-avi-413 | Vulnérabilités dans HP-UX | 2009-09-30T00:00:00.000000 | 2009-09-30T00:00:00.000000 |
| certa-2009-avi-412 | Vulnérabilités dans IBM DB2 | 2009-09-30T00:00:00.000000 | 2009-09-30T00:00:00.000000 |
| certa-2009-avi-411 | Vulnérabilité dans IBM Informix Dynamic Server | 2009-09-30T00:00:00.000000 | 2009-09-30T00:00:00.000000 |
| certa-2009-avi-410 | Vulnérabilité dans IBM Lotus Connections | 2009-09-29T00:00:00.000000 | 2009-09-29T00:00:00.000000 |
| certa-2009-avi-409 | Vulnérabilité du navigateur du terminal BlackBerry | 2009-09-29T00:00:00.000000 | 2009-09-29T00:00:00.000000 |
| certa-2009-avi-408 | Multiples vulnérabilités dans IBM HTTP Server | 2009-09-25T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-407 | Vulnérabilité de Apple Xsan | 2009-09-25T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-406 | Vulnérabilité du noyau Linux | 2009-09-25T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-405 | Vulnérabilité dans Apple iTunes | 2009-09-25T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-404 | Vulnérabilité de Snort | 2009-09-25T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-403 | Multiples vulnérabilités de Cisco Unified Communication Manager | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-402 | Multiples vulnérabilités dans Cisco IOS | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-401 | Mutiples vulnérabilités du navigateur Google Chrome | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-400 | Vulnérabilités de Firewall Builder | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-399 | Multiples vulnérabilités de StarOffice et StarSuite | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-398 | Multiples vulnérabilités dans IBM WebSphere | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |