Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-102989 | TanStack Router: Unauthenticated reflected XSS in TanS… |
TanStack |
router |
2026-10-13T16:13:13.105Z | 2026-10-14T15:20:08.563Z | |
| cve-2026-106042 | 9.9 (v3.1) | An External Control of File Name or Path vulnerab… |
Ivanti |
Xtraction |
2026-10-13T16:12:00.920Z | 2026-10-14T10:51:05.227Z |
| cve-2026-106035 | 5.5 (v3.1) | An Information Exposure Through Log Files vulnera… |
Ivanti |
Xtraction |
2026-10-13T16:09:07.593Z | 2026-10-13T19:31:30.935Z |
| cve-2026-54641 | OpenRemote: Cross-Realm User Information Disclosure in… |
openremote |
openremote |
2026-10-13T16:07:55.725Z | 2026-10-13T17:12:20.894Z | |
| cve-2026-69226 | 6.5 (v3.1) | Portal for ArcGIS has a security vulnerability |
Esri |
Portal for ArcGIS |
2026-10-13T16:06:23.982Z | 2026-10-13T19:31:31.076Z |
| cve-2026-10759 | 5.5 (v3.1) | BUG-000171040 Portal for ArcGIS has a security vulnerability |
Esri |
Portal for ArcGIS |
2026-10-13T16:04:54.961Z | 2026-10-26T18:10:50.581Z |
| cve-2026-106034 | 5 (v3.1) | A Path Traversal vulnerability in Ivanti Xtractio… |
Ivanti |
Xtraction |
2026-10-13T16:04:41.161Z | 2026-10-13T19:31:31.372Z |
| cve-2026-69227 | 9.8 (v3.1) | BUG-000187331 Portal for ArcGIS has a security vulnerability |
Esri |
Portal for ArcGIS |
2026-10-13T16:03:43.423Z | 2026-10-14T18:34:28.680Z |
| cve-2026-54640 | OpenRemote: XXE in KNXProtocol.startAssetImport() allo… |
openremote |
openremote |
2026-10-13T16:02:21.245Z | 2026-10-13T20:22:11.194Z | |
| cve-2026-109606 | SourceCodester Art Gallery Management System Account C… |
SourceCodester |
Art Gallery Management System |
2026-10-13T16:00:19.230Z | 2026-10-13T17:10:26.104Z | |
| cve-2026-54697 | ConnectBot SSH: Excessive allocation and integer overf… |
connectbot |
cbssh |
2026-10-13T15:54:48.714Z | 2026-10-13T16:07:53.782Z | |
| cve-2026-54700 | ConnectBot SSH: Unbounded SSH field lengths can cause … |
connectbot |
cbssh |
2026-10-13T15:53:47.361Z | 2026-10-16T22:06:09.220Z | |
| cve-2026-102672 | Electron: Local race condition in Squirrel.Mac update … |
electron |
electron |
2026-10-13T15:52:46.436Z | 2026-10-13T20:22:22.127Z | |
| cve-2026-55695 | FearlessCMS: Remote Code Execution via Unvalidated Upd… |
fearlessgeekmedia |
FearlessCMS |
2026-10-13T15:51:02.854Z | 2026-10-13T16:12:15.791Z | |
| cve-2026-101899 | Axios: CIDR-form NO_PROXY entries are ignored, causing… |
axios |
axios |
2026-10-13T15:49:51.223Z | 2026-10-14T15:18:02.684Z | |
| cve-2026-49264 | OAuthLib: Unsafe JSONP callback injection in Revocatio… |
oauthlib |
oauthlib |
2026-10-13T15:48:40.102Z | 2026-10-16T22:04:46.619Z | |
| cve-2026-49265 | OAuthLib: Timing Attack Vulnerability in PKCE code_ver… |
oauthlib |
oauthlib |
2026-10-13T15:47:11.854Z | 2026-10-13T16:19:39.092Z | |
| cve-2026-102700 | N/A | gnttab: cache-flush handling may cause page reference leak |
Xen |
Xen |
2026-10-13T15:45:27.794Z | 2026-10-20T17:16:15.958Z |
| cve-2026-102702 | N/A | Arm: multiple issues with GNTTABOP_cache_flush |
Xen |
Xen |
2026-10-13T15:45:13.125Z | 2026-10-20T17:28:13.480Z |
| cve-2026-102699 | N/A | Arm: multiple issues with GNTTABOP_cache_flush |
Xen |
Xen |
2026-10-13T15:45:13.073Z | 2026-10-20T17:30:12.740Z |
| cve-2026-109605 | SourceCodester Simple Cafe Billing System User Managem… |
SourceCodester |
Simple Cafe Billing System |
2026-10-13T15:45:10.652Z | 2026-10-14T15:04:19.655Z | |
| cve-2026-79611 | N/A | VMX: VMentry failure with branch tracing and blocked states |
Xen |
Xen |
2026-10-13T15:44:56.361Z | 2026-10-20T17:31:41.971Z |
| cve-2026-79610 | N/A | grant-table: double version change race |
Xen |
Xen |
2026-10-13T15:44:42.370Z | 2026-10-20T17:33:21.929Z |
| cve-2026-103928 | Metabase: Arbitrary File Read/Write via Unsafe H2 Buil… |
metabase |
metabase |
2026-10-13T15:44:37.906Z | 2026-10-13T16:08:31.731Z | |
| cve-2026-79609 | N/A | x86: XPTI may break on huge-memory systems |
Xen |
Xen |
2026-10-13T15:44:24.763Z | 2026-10-20T17:34:39.462Z |
| cve-2026-79608 | N/A | x86/AMD: ineffectual Zenbleed workaround |
Xen |
Xen |
2026-10-13T15:44:08.729Z | 2026-10-20T17:36:56.453Z |
| cve-2026-79607 | N/A | Xenstore: Guests can crash xenstored during Live Update |
Xen |
Xen |
2026-10-13T15:43:43.425Z | 2026-10-16T18:36:50.515Z |
| cve-2026-110025 | slackero phpwcms Extension Check cnt23.article.inc.php… |
slackero |
phpwcms |
2026-10-13T15:41:34.677Z | 2026-10-15T15:11:53.863Z | |
| cve-2026-104005 | 7.1 (v4.0) 6.5 (v3.1) | Incorrect authorization in MongoDB Server router for b… |
MongoDB |
MongoDB Server |
2026-10-13T15:38:42.407Z | 2026-10-15T19:14:57.316Z |
| cve-2026-104004 | 7.1 (v4.0) 6.5 (v3.1) | Collection validators using collation-accepting expres… |
MongoDB |
MongoDB Server |
2026-10-13T15:36:14.952Z | 2026-10-15T19:14:57.446Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-397 | Vulnérabilité dans VLC media player | 2009-09-24T00:00:00.000000 | 2009-09-24T00:00:00.000000 |
| certa-2009-avi-396 | Vulnérabilité dans Symantec Altiris | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-395 | Multiples vulnérabilités dans PHP | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-394 | Multiples vulnérabilités dans Wireshark | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-393 | Multiples vulnérabilités dans Drupal | 2009-09-23T00:00:00.000000 | 2009-09-23T00:00:00.000000 |
| certa-2009-avi-392 | Vulnérabilité de OpenSSL sous Debian | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-391 | Multiples vulnérabilités dans Bugzilla | 2009-09-18T00:00:00.000000 | 2009-10-19T00:00:00.000000 |
| certa-2009-avi-390 | Multiples vulnérabilités dans IBM Websphere MQ | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-389 | Multiples vulnérabilités dans VMware | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-388 | Multiples vulnérabilités dans Wireshark | 2009-09-18T00:00:00.000000 | 2009-09-18T00:00:00.000000 |
| certa-2009-avi-387 | Vulnérabilité dans bootpd sur HP-UX | 2009-09-16T00:00:00.000000 | 2009-09-16T00:00:00.000000 |
| certa-2009-avi-386 | Vulnérabilité dans Sun Solaris | 2009-09-16T00:00:00.000000 | 2009-09-16T00:00:00.000000 |
| certa-2009-avi-385 | Vulnérabilités dans Horde Application Framework | 2009-09-14T00:00:00.000000 | 2009-09-14T00:00:00.000000 |
| certa-2009-avi-384 | Vulnérabilité de FreeRADIUS | 2009-09-11T00:00:00.000000 | 2009-09-25T00:00:00.000000 |
| certa-2009-avi-383 | Multipleis vulnérabilités dans iPhone OS | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-382 | Multiples vulnérabilités dans MacOS X | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-381 | Vulnérabilité de Cyrus IMAP | 2009-09-11T00:00:00.000000 | 2009-09-11T00:00:00.000000 |
| certa-2009-avi-380 | Multiples vulnérabilités dans PostgreSQL | 2009-09-11T00:00:00.000000 | 2009-10-12T00:00:00.000000 |
| certa-2009-avi-379 | Vulnérabilités dans Mozilla Firefox | 2009-09-10T00:00:00.000000 | 2009-09-10T00:00:00.000000 |
| certa-2009-avi-378 | Multiples vulnérabilités dans Apple QuickTime | 2009-09-10T00:00:00.000000 | 2009-09-10T00:00:00.000000 |
| certa-2009-avi-377 | Vulnérabilités des produits Cisco | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-376 | Vulnérabilité dans les produits Check Point | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-375 | Vulnérabilité de Ruby on Rails | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-374 | Vulnérabilité dans Asterisk | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-373 | Vulnérabilité dans Microsoft Wireless LAN AutoConfig Service | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-372 | Multiples vulnérabilités dans TCP/IP sous Windows | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-371 | Vulnérabilités dans Windows Media Format | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-370 | Vulnérabilité dans le composant d'édition DHTML de Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-369 | Vulnérabilité de Microsoft JScript | 2009-09-09T00:00:00.000000 | 2009-09-09T00:00:00.000000 |
| certa-2009-avi-368 | Vulnérabilité dans IBM Lotus Domino Web Acess | 2009-09-07T00:00:00.000000 | 2009-09-07T00:00:00.000000 |