Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-104005 | 7.1 (v4.0) 6.5 (v3.1) | Incorrect authorization in MongoDB Server router for b… |
MongoDB |
MongoDB Server |
2026-10-13T15:38:42.407Z | 2026-10-15T19:14:57.316Z |
| cve-2026-104004 | 7.1 (v4.0) 6.5 (v3.1) | Collection validators using collation-accepting expres… |
MongoDB |
MongoDB Server |
2026-10-13T15:36:14.952Z | 2026-10-15T19:14:57.446Z |
| cve-2026-102981 | Plane: Unauthenticated Workspace Invitation Token Leakage |
makeplane |
plane |
2026-10-13T15:34:25.761Z | 2026-10-16T22:03:39.209Z | |
| cve-2026-103965 | 5.3 (v4.0) 5.4 (v3.1) | Fixed values in MongoDB Server $bucket stage may be mi… |
MongoDB |
MongoDB Server |
2026-10-13T15:33:20.112Z | 2026-10-13T16:20:06.145Z |
| cve-2026-102982 | Plane: XSS in work item comments |
makeplane |
plane |
2026-10-13T15:32:10.754Z | 2026-10-13T16:21:12.046Z | |
| cve-2026-104935 | 8.6 (v3.1) | Authentication bypass by spoofing in ICS before v… |
Ivanti |
Connect Secure |
2026-10-13T15:31:07.757Z | 2026-10-13T19:58:23.946Z |
| cve-2026-102988 | Plane: ORM Field Injection via Unvalidated `order_by` … |
makeplane |
plane |
2026-10-13T15:30:42.543Z | 2026-10-14T15:02:20.891Z | |
| cve-2026-109526 | HBAI-Ltd Toonflow-app exportData Endpoint information … |
HBAI-Ltd |
Toonflow-app |
2026-10-13T15:30:12.762Z | 2026-10-16T22:02:27.551Z | |
| cve-2026-102734 | asteval sandbox escape: arbitrary native memory read/w… |
lmfit |
asteval |
2026-10-13T15:29:49.209Z | 2026-10-13T20:22:29.684Z | |
| cve-2026-96299 | 7.1 (v4.0) 6.5 (v3.1) | Missing Authorization Check on Internal Aggregation St… |
MongoDB |
MongoDB Server |
2026-10-13T15:27:57.250Z | 2026-10-13T16:31:19.871Z |
| cve-2026-96297 | 6 (v4.0) 6.5 (v3.1) | MongoDB Server may disclose process memory via a craft… |
MongoDB |
MongoDB Server |
2026-10-13T15:23:57.051Z | 2026-10-13T16:20:06.406Z |
| cve-2026-69150 | KeePassXC: Heap use-after-free in KeePass1 (KDB) impor… |
keepassxreboot |
keepassxc |
2026-10-13T15:23:36.744Z | 2026-10-13T20:22:44.545Z | |
| cve-2026-102832 | JupyterLab: Command link trust prompt in JupyterLab ca… |
jupyterlab |
jupyterlab |
2026-10-13T15:19:40.699Z | 2026-10-13T16:09:02.990Z | |
| cve-2026-55675 | Salty documentation workflow executes fork-controlled … |
saltyorg |
docs |
2026-10-13T15:15:25.023Z | 2026-10-13T16:22:51.021Z | |
| cve-2026-109525 | girishsaraf Online-Appointment-Booking-System submit2 … |
girishsaraf |
Online-Appointment-Booking-System |
2026-10-13T15:15:17.321Z | 2026-10-13T15:24:17.093Z | |
| cve-2026-55376 | heym Python Tool Sandbox Escape |
heymrun |
heym |
2026-10-13T15:12:49.604Z | 2026-10-16T22:00:50.339Z | |
| cve-2026-105460 | 5.5 (v3.1) | Bluez: bluez: stack-based out-of-bounds read in btmon … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-13T15:12:19.969Z | 2026-10-15T15:12:03.547Z |
| cve-2026-81507 | ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosur… |
espressif |
esp-idf |
2026-10-13T15:12:01.010Z | 2026-10-14T15:00:34.785Z | |
| cve-2026-109524 | girishsaraf Online-Appointment-Booking-System Admin Di… |
girishsaraf |
Online-Appointment-Booking-System |
2026-10-13T15:00:14.312Z | 2026-10-15T15:12:14.182Z | |
| cve-2026-106108 | Quasar Framework: App Vite SSG page output paths can e… |
quasarframework |
quasar |
2026-10-13T14:55:50.358Z | 2026-10-13T20:22:56.330Z | |
| cve-2026-103028 | SFTPGo source-side file-pattern filter bypass during c… |
drakkan |
sftpgo |
2026-10-13T14:54:47.246Z | 2026-10-14T14:58:43.810Z | |
| cve-2026-77375 | SFTPGo: Denial of service via malformed SSH channel request |
drakkan |
sftpgo |
2026-10-13T14:52:46.056Z | 2026-10-13T15:24:59.888Z | |
| cve-2026-102250 | 8.6 (v4.0) | CWE-345: Insufficient Verification of Data Authen… |
Schneider Electric |
Sage RTU 1410 |
2026-10-13T14:51:48.442Z | 2026-10-13T16:20:06.528Z |
| cve-2026-107918 | 4.3 (v4.0) 4.5 (v3.1) | Insufficient input validation vulnerability in NETGEAR R7300 |
NETGEAR |
R7300DST |
2026-10-13T14:50:33.244Z | 2026-10-16T14:31:46.667Z |
| cve-2026-107917 | 4.3 (v4.0) 4.5 (v3.1) | Insufficient input validation vulnerability in NETGEAR… |
NETGEAR |
R7300DST |
2026-10-13T14:46:32.629Z | 2026-10-16T14:28:26.559Z |
| cve-2026-109523 | girishsaraf Online-Appointment-Booking-System AJAX End… |
girishsaraf |
Online-Appointment-Booking-System |
2026-10-13T14:45:19.660Z | 2026-10-14T14:56:53.425Z | |
| cve-2026-104192 | DragonflyDB stream RDB deserialization double-free |
dragonflydb |
dragonfly |
2026-10-13T14:42:54.248Z | 2026-10-13T15:26:00.663Z | |
| cve-2026-11732 | 6.3 (v4.0) 8.8 (v3.1) | Insufficient input validation vulnerability exists in … |
NETGEAR |
CAX30 |
2026-10-13T14:42:50.698Z | 2026-10-16T14:10:44.857Z |
| cve-2026-11731 | 6.3 (v4.0) 8.8 (v3.1) | Authentication Bypass Vulnerability in Certain NETGEAR… |
NETGEAR |
RAX30 |
2026-10-13T14:41:42.298Z | 2026-10-16T13:58:30.825Z |
| cve-2026-11730 | 2.1 (v4.0) 5.4 (v3.1) | Insufficient session randomness vulnerability exists i… |
NETGEAR |
EX3700 |
2026-10-13T14:38:16.110Z | 2026-10-19T19:02:53.835Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-367 | Vulnérabilité dans IBM Tivoli Identity Manager | 2009-09-07T00:00:00.000000 | 2009-09-07T00:00:00.000000 |
| certa-2009-avi-366 | Vulnérabilité Java de Mac OS X | 2009-09-04T00:00:00.000000 | 2009-09-04T00:00:00.000000 |
| certa-2009-avi-365 | Vulnérabilités dans IBM Java | 2009-09-03T00:00:00.000000 | 2009-09-03T00:00:00.000000 |
| certa-2009-avi-364 | Vulnérabilité dans Qt | 2009-09-03T00:00:00.000000 | 2009-09-03T00:00:00.000000 |
| certa-2009-avi-363 | Vulnérabilité de wget | 2009-09-02T00:00:00.000000 | 2009-12-04T00:00:00.000000 |
| certa-2009-avi-362 | Vulnérabilités dans OpenOffice.org | 2009-09-01T00:00:00.000000 | 2009-09-07T00:00:00.000000 |
| certa-2009-avi-361 | Vulnérabilité dans Dnsmasq | 2009-09-01T00:00:00.000000 | 2009-09-01T00:00:00.000000 |
| certa-2009-avi-360 | Multiples vulnérabilités dans Opera | 2009-09-01T00:00:00.000000 | 2009-09-01T00:00:00.000000 |
| certa-2009-avi-359 | Vulnérabilité dans Norton AntiVirus et Symantec Client Security Email | 2009-08-28T00:00:00.000000 | 2009-08-28T00:00:00.000000 |
| certa-2009-avi-358 | Vulnérabilité dans Sun Solaris | 2009-08-27T00:00:00.000000 | 2009-08-27T00:00:00.000000 |
| certa-2009-avi-357 | Vulnérabilités de Cisco Unified Communications Manager | 2009-08-27T00:00:00.000000 | 2009-08-27T00:00:00.000000 |
| certa-2009-avi-356 | Multiples vulnérabilités dans Symantec Altiris Deployment Solution | 2009-08-27T00:00:00.000000 | 2009-08-27T00:00:00.000000 |
| certa-2009-avi-355 | Multiples vulnérabilités du navigateur Google Chrome | 2009-08-27T00:00:00.000000 | 2009-08-27T00:00:00.000000 |
| certa-2009-avi-354 | Vulnérabilité dans Sun Solaris Print Service | 2009-08-26T00:00:00.000000 | 2009-08-26T00:00:00.000000 |
| certa-2009-avi-353 | Vulnérabilité dans Lotus Notes | 2009-08-26T00:00:00.000000 | 2009-08-26T00:00:00.000000 |
| certa-2009-avi-352 | Vulnérabilité dans Xerox WorkCentre | 2009-08-26T00:00:00.000000 | 2009-08-26T00:00:00.000000 |
| certa-2009-avi-351 | Vulnérabilité dans les produits Symantec | 2009-08-26T00:00:00.000000 | 2009-08-26T00:00:00.000000 |
| certa-2009-avi-350 | Vulnérabilité du client de messagerie Mozilla Thunderbird | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-349 | Vulnérabilité dans Radix Antirootkit | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-348 | Vulnérabilité dans les produits VMware | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-347 | Vulnérabilités dans la bibliothèque neon | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-346 | Vulnérabilité dans le client IBM AFS pour Linux | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-345 | Vulnérabilité dans Cisco Firewall Services Module | 2009-08-24T00:00:00.000000 | 2009-08-24T00:00:00.000000 |
| certa-2009-avi-344 | Vulnérabilités de Cisco IOS XR | 2009-08-21T00:00:00.000000 | 2009-08-21T00:00:00.000000 |
| certa-2009-avi-343 | Vulnérabilité dans CA Internet Security Suite | 2009-08-19T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-342 | Vulnérabilité dans CA Host-Based Intrusion Prevention System | 2009-08-19T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-341 | Vulnérabilités dans IBM WebSphere Application Server | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-340 | Multiples vulnérabilités dans Adobe ColdFusion | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-339 | Vulnérabilités dans JRun | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-338 | Vulnérabilité de cURL et libcurl | 2009-08-17T00:00:00.000000 | 2009-08-21T00:00:00.000000 |