Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75524 | OpenReception: race condition in add-to-tunnel and cre… |
open-reception |
appointment-booking-software |
2026-10-23T20:29:52.583Z | 2026-10-29T14:33:55.695Z | |
| cve-2026-19610 | 6.5 (v3.1) | Wildfly-platform-mbean: wildfly-platform-mbean: rbac s… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7 |
2026-10-29T06:07:32.569Z | 2026-10-29T14:24:04.416Z |
| cve-2026-115877 | Twisted: HTTP Request Smuggling in twisted.web via a B… |
twisted |
twisted |
2026-10-23T20:25:12.031Z | 2026-10-29T14:23:05.736Z | |
| cve-2026-100404 | Zulip: Guests can read new messages in non-subscribed … |
zulip |
zulip |
2026-10-14T15:50:00.354Z | 2026-10-29T14:20:18.766Z | |
| cve-2026-115774 | Twisted: Denial of Service in the Twisted IMAP4 Server… |
twisted |
twisted |
2026-10-23T20:14:07.480Z | 2026-10-29T14:20:15.738Z | |
| cve-2026-67414 | RabbitMQ AMQP 1.0 parser: amplification memory-exhaust… |
rabbitmq |
rabbitmq-server |
2026-10-14T16:04:07.449Z | 2026-10-29T14:19:15.193Z | |
| cve-2026-115797 | Tenda F6 Web Management cleartext transmission |
Tenda |
F6 |
2026-10-23T20:00:16.370Z | 2026-10-29T14:19:14.179Z | |
| cve-2026-115572 | pypdf: Possible long runtimes for repeated references … |
py-pdf |
pypdf |
2026-10-23T19:24:51.055Z | 2026-10-29T14:18:40.569Z | |
| cve-2025-62839 | 8.7 (v4.0) | Hard-coded Cryptographic Key #1 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:39:53.736Z | 2026-10-29T14:17:58.115Z |
| cve-2026-77564 | Talos Linux: Support bundle does not redact registry c… |
siderolabs |
talos |
2026-10-14T16:09:11.330Z | 2026-10-29T14:17:38.468Z | |
| cve-2025-62841 | 8.7 (v4.0) | Hard-coded Cryptographic Key #2 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:40:02.766Z | 2026-10-29T14:16:06.907Z |
| cve-2026-114358 | 9.3 (v4.0) | SQL Injection Vulnerability in Radius Xenia M2M Platform |
Radius Synergies |
Radius Xenia M2M Platform |
2026-10-29T08:53:05.549Z | 2026-10-29T14:13:51.533Z |
| cve-2026-115810 | 6.3 (v4.0) 7.7 (v3.1) | Tandoor Recipes before 2.7.0 SSRF via Pestle Importer … |
TandoorRecipes |
recipes |
2026-10-23T16:12:12.359Z | 2026-10-29T14:13:20.506Z |
| cve-2026-117611 | Trust of compromised eMudhra root CA in bundled CA stores |
Checkmk GmbH |
Checkmk |
2026-10-29T09:32:57.964Z | 2026-10-29T14:13:09.797Z | |
| cve-2026-97860 | 6.7 (v3.0) 8.4 (v4.0) | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corpo… |
Yamaha Corporation |
YMS-VPN8 |
2026-10-29T11:33:10.955Z | 2026-10-29T14:12:18.004Z |
| cve-2026-54668 | Kitodo.Production: XXE in XMLUtils EAD/XML upload pars… |
kitodo |
kitodo-production |
2026-10-23T14:54:35.530Z | 2026-10-29T14:11:07.235Z | |
| cve-2026-103665 | 7.8 (v3.0) 8.4 (v4.0) | The installer for Yamaha LAN Monitor for Windows … |
Yamaha Corporation |
Yamaha LAN Monitor for Windows |
2026-10-29T11:33:30.885Z | 2026-10-29T14:10:50.402Z |
| cve-2026-119028 | 8.7 (v4.0) 8.8 (v3.1) | oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non… |
oapi-codegen |
oapi-codegen |
2026-10-29T11:36:34.692Z | 2026-10-29T14:08:24.785Z |
| cve-2026-113688 | 5.3 (v4.0) | Server-Side Request Forgery in BMC ITSM SmartIT |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:01:46.475Z | 2026-10-29T14:06:49.262Z |
| cve-2026-113689 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Work Notes |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:02:34.909Z | 2026-10-29T14:06:24.850Z |
| cve-2026-113690 | 4.8 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Attachments |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:03:06.288Z | 2026-10-29T14:05:55.037Z |
| cve-2026-39902 | Cacti: Authenticated RCE on Data Input |
Cacti |
cacti |
2026-10-23T14:42:45.710Z | 2026-10-29T14:04:38.453Z | |
| cve-2026-113691 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Knowledge Articles |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:07:03.816Z | 2026-10-29T14:03:20.544Z |
| cve-2026-119049 | 7.2 (v4.0) 7.6 (v3.1) | FreeMail before 5.3.2 Authorization Bypass via /api/cr… |
idinging |
FreeMail |
2026-10-29T13:08:50.838Z | 2026-10-29T14:02:26.966Z |
| cve-2026-119053 | 6.9 (v4.0) 5.3 (v3.1) | lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read… |
lwIP |
lwIP |
2026-10-29T13:08:53.560Z | 2026-10-29T14:01:51.233Z |
| cve-2026-113692 | 6.9 (v4.0) | Path Traversal in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:08:54.995Z | 2026-10-29T14:00:48.538Z |
| cve-2026-55463 | Goobi viewer: WebSocket endpoints lack server-side aut… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:06.825Z | 2026-10-29T13:59:55.819Z | |
| cve-2026-113693 | 5.3 (v4.0) | System Account Credential Disclosure in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:09:39.803Z | 2026-10-29T13:59:33.397Z |
| cve-2026-46347 | Goobi viewer: Predictable Replacement Password Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:51.802Z | 2026-10-29T13:57:32.624Z | |
| cve-2026-55442 | Goobi viewer: cleanUpQuery double-brace bypass allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:26.455Z | 2026-10-29T13:56:19.871Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-346 | Vulnérabilité dans le client IBM AFS pour Linux | 2009-08-25T00:00:00.000000 | 2009-08-25T00:00:00.000000 |
| certa-2009-avi-345 | Vulnérabilité dans Cisco Firewall Services Module | 2009-08-24T00:00:00.000000 | 2009-08-24T00:00:00.000000 |
| certa-2009-avi-344 | Vulnérabilités de Cisco IOS XR | 2009-08-21T00:00:00.000000 | 2009-08-21T00:00:00.000000 |
| certa-2009-avi-338 | Vulnérabilité de cURL et libcurl | 2009-08-17T00:00:00.000000 | 2009-08-21T00:00:00.000000 |
| certa-2009-avi-337 | Vulnérabilité du noyau Linux | 2009-08-14T00:00:00.000000 | 2009-08-21T00:00:00.000000 |
| certa-2009-avi-336 | Vulnérabilité dans GnuTLS | 2009-08-13T00:00:00.000000 | 2009-08-21T00:00:00.000000 |
| certa-2009-avi-343 | Vulnérabilité dans CA Internet Security Suite | 2009-08-19T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-342 | Vulnérabilité dans CA Host-Based Intrusion Prevention System | 2009-08-19T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-334 | Vulnérabilité dans WordPress | 2009-08-12T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-316 | Vulnérabilité dans Fetchmail | 2009-08-07T00:00:00.000000 | 2009-08-19T00:00:00.000000 |
| certa-2009-avi-341 | Vulnérabilités dans IBM WebSphere Application Server | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-340 | Multiples vulnérabilités dans Adobe ColdFusion | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-339 | Vulnérabilités dans JRun | 2009-08-18T00:00:00.000000 | 2009-08-18T00:00:00.000000 |
| certa-2009-avi-333 | Vulnérabilités de Safari | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-332 | Multiples vulnérabilités dans la Connexion Bureau à distance Microsoft | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-331 | Multiples vulnérabilités dans Microsoft Office Web Components | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-330 | Vulnérabilité dans Microsoft Telnet | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-329 | Vulnérabilité dans le Service Station de Travail Microsoft Windows | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-328 | Vulnérabilité dans le service MSMQ Microsoft Windows | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-327 | Vulnérabilités dans Microsoft WINS | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-326 | Vulnérabilités dans le traitement de fichiers Windows Media | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-325 | Vulnérabilités de la bibliothèque ATL de Microsoft Windows | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-324 | Vulnérabilité dans ASP.NET de Microsoft Windows | 2009-08-12T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-avi-322 | Multiples vulnérabilités dans Asterisk | 2009-08-11T00:00:00.000000 | 2009-08-11T00:00:00.000000 |
| certa-2009-avi-321 | Vulnérabilité dans libvorbis | 2009-08-11T00:00:00.000000 | 2009-08-11T00:00:00.000000 |
| certa-2009-avi-320 | Multiples vulnérabilités dans Subversion | 2009-08-11T00:00:00.000000 | 2009-08-11T00:00:00.000000 |
| certa-2009-avi-319 | Vulnérabilités dans Zope | 2009-08-10T00:00:00.000000 | 2009-08-10T00:00:00.000000 |
| certa-2009-avi-318 | Vulnérabilité dans CA Unicenter | 2009-08-10T00:00:00.000000 | 2009-08-10T00:00:00.000000 |
| certa-2009-avi-317 | Vulnérabilité dans CA Data Transport Services | 2009-08-10T00:00:00.000000 | 2009-08-10T00:00:00.000000 |
| certa-2009-avi-315 | Multiples vulnérabilités dans WordPress | 2009-08-07T00:00:00.000000 | 2009-08-07T00:00:00.000000 |