Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-74036 | 8.6 (v4.0) 7.2 (v3.1) | Wazuh 4.3.0 before 4.14.8 Remote Code Execution via SC… |
Wazuh |
wazuh-agent |
2026-10-13T13:27:29.251Z | 2026-10-26T14:15:46.248Z |
| cve-2026-74035 | 8.6 (v4.0) 7.2 (v3.1) | Wazuh 4.6.0 before 4.14.8 Authentication Bypass via Em… |
Wazuh |
wazuh-manager |
2026-10-13T13:27:28.652Z | 2026-10-26T14:15:45.534Z |
| cve-2026-74034 | 8.7 (v4.0) 7.5 (v3.1) | Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgr… |
Wazuh |
wazuh-manager |
2026-10-13T13:27:28.086Z | 2026-10-26T14:15:44.779Z |
| cve-2026-74033 | 8.4 (v4.0) 6.1 (v3.1) | Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB L… |
Wazuh |
wazuh-manager |
2026-10-13T13:27:27.451Z | 2026-10-26T14:15:43.987Z |
| cve-2026-74032 | 5.3 (v4.0) 4.3 (v3.1) | Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass vi… |
Wazuh |
wazuh-manager |
2026-10-13T13:27:26.781Z | 2026-10-26T14:15:43.237Z |
| cve-2026-74031 | 7 (v4.0) 6.5 (v3.1) | Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion… |
Wazuh |
wazuh-manager |
2026-10-13T13:27:26.116Z | 2026-10-26T14:15:42.554Z |
| cve-2026-74030 | 6.9 (v4.0) 4.9 (v3.1) | Wazuh 3.9.0 before 4.14.8 Memory Exhaustion via SCA YA… |
Wazuh |
wazuh-agent |
2026-10-13T13:27:25.427Z | 2026-10-13T16:43:37.400Z |
| cve-2026-109963 | 5.3 (v4.0) 4.3 (v3.1) | Froxlor before 2.3.14 IDOR in Email Template Editor vi… |
froxlor |
froxlor |
2026-10-13T13:27:24.803Z | 2026-10-14T14:48:02.226Z |
| cve-2026-109962 | 5.3 (v4.0) 4.3 (v3.1) | Froxlor 0.10.0 before 2.3.14 Missing Authorization in … |
froxlor |
froxlor |
2026-10-13T13:27:24.126Z | 2026-10-16T21:51:24.862Z |
| cve-2026-109961 | 8.4 (v4.0) 8.5 (v3.1) | Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftp… |
froxlor |
froxlor |
2026-10-13T13:27:23.522Z | 2026-10-26T19:44:32.588Z |
| cve-2026-109960 | 8.7 (v4.0) 7.7 (v3.1) | Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Th… |
froxlor |
froxlor |
2026-10-13T13:27:22.841Z | 2026-10-13T13:50:33.228Z |
| cve-2026-109959 | 5.3 (v4.0) 4.3 (v3.1) | EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypas… |
espocrm |
espocrm |
2026-10-13T13:27:22.182Z | 2026-10-13T16:43:44.609Z |
| cve-2026-109958 | 5.3 (v4.0) 4.3 (v3.1) | EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass … |
espocrm |
espocrm |
2026-10-13T13:27:21.504Z | 2026-10-14T14:08:18.404Z |
| cve-2026-109957 | 5.3 (v4.0) 4.3 (v3.1) | EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter |
espocrm |
espocrm |
2026-10-13T13:27:20.821Z | 2026-10-16T21:50:27.085Z |
| cve-2026-109956 | 8.3 (v4.0) 7 (v3.1) | NLTK through 3.10.3 Path Traversal via WekaClassifier … |
nltk |
nltk |
2026-10-13T13:27:20.244Z | 2026-10-26T19:46:30.241Z |
| cve-2026-109955 | 6.9 (v4.0) 5.3 (v3.1) | Hono 4.12.4 before 4.13.11 Middleware Bypass via serve… |
honojs |
hono |
2026-10-13T13:27:19.610Z | 2026-10-13T13:51:43.403Z |
| cve-2026-109954 | 8.3 (v4.0) 6.5 (v3.1) | Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional… |
parse-community |
parse-server |
2026-10-13T13:27:19.012Z | 2026-10-13T16:43:51.636Z |
| cve-2026-109953 | 6 (v4.0) 5.3 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Discl… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:18.351Z | 2026-10-14T14:07:26.958Z |
| cve-2026-109952 | 6 (v4.0) 5.3 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrad… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:17.758Z | 2026-10-16T21:49:38.610Z |
| cve-2026-109951 | 6.9 (v4.0) 5.3 (v3.1) | FreeRDP 3.17.1 before 3.32.0 Heap Buffer Over-Read via… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:17.101Z | 2026-10-18T12:09:30.284Z |
| cve-2026-109950 | 5.3 (v4.0) 4.3 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read vi… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:16.432Z | 2026-10-13T13:47:09.491Z |
| cve-2026-109949 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.0.0 before 3.32.0 PIN Brute-Force via Virtua… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:15.776Z | 2026-10-13T16:43:58.209Z |
| cve-2026-109948 | 5.3 (v4.0) 4.3 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCar… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:15.087Z | 2026-10-14T14:06:41.648Z |
| cve-2026-109947 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via … |
FreeRDP |
FreeRDP |
2026-10-13T13:27:14.425Z | 2026-10-16T21:48:39.582Z |
| cve-2026-109946 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.11.0 before 3.32.0 Reachable Assertion via A… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:13.792Z | 2026-10-18T12:08:53.452Z |
| cve-2026-109945 | 6 (v4.0) 5.3 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free v… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:13.201Z | 2026-10-13T13:54:06.324Z |
| cve-2026-109944 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.0.0 before 3.32.0 Reachable Assertion via St… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:12.553Z | 2026-10-13T16:44:06.124Z |
| cve-2026-109943 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Upd… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:11.928Z | 2026-10-14T14:05:17.824Z |
| cve-2026-109942 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference v… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:11.301Z | 2026-10-16T21:47:43.702Z |
| cve-2026-109941 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gatew… |
FreeRDP |
FreeRDP |
2026-10-13T13:27:10.704Z | 2026-10-18T12:08:12.069Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-277 | Vulnérabilité dans Virtual PC et Virtual Server | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-276 | Vulnérabilité de ISA Server | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-275 | Vulnérabilité de Microsoft Office Publisher | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-274 | Multiples vulnérabilités dans Microsoft Windows Embedded OpenType | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-273 | Multiples vulnérabilités dans Microsoft DirectShow | 2009-07-15T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-avi-272 | Vulnérabilité de Apache mod_proxy | 2009-07-13T00:00:00.000000 | 2009-07-28T00:00:00.000000 |
| certa-2009-avi-271 | Multiples vulnérabilités dans Apple Safari | 2009-07-10T00:00:00.000000 | 2009-07-10T00:00:00.000000 |
| certa-2009-avi-270 | Vulnérabilité dans VMware ESX Service Console | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-269 | Vulnérabilité dans VLC | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-268 | Multiples vulnérabilités dans Sun Solaris | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-267 | Vulnérabilités de IBM Tivoli Identity Manager | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-266 | Multiples vulnérabilités dans FCKeditor | 2009-07-07T00:00:00.000000 | 2009-07-07T00:00:00.000000 |
| certa-2009-avi-265 | Multiples vulnérabilités dans Drupal | 2009-07-06T00:00:00.000000 | 2009-07-06T00:00:00.000000 |
| certa-2009-avi-264 | Vulnérabilité dans HP-UX | 2009-07-02T00:00:00.000000 | 2009-07-02T00:00:00.000000 |
| certa-2009-avi-263 | Multiples vulnérabilités dans Joomla! | 2009-07-01T00:00:00.000000 | 2009-07-01T00:00:00.000000 |
| certa-2009-avi-262 | Vulnérabilité de Sun Java System Access Manager | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-261 | Vulnérabilités de Sun Java Web Console | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-260 | Multiples vulnérabilités dans Cisco Adaptive Security Appliance | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-259 | Vulnérabilité du serveur Samba | 2009-06-30T00:00:00.000000 | 2009-10-01T00:00:00.000000 |
| certa-2009-avi-258 | Vulnérabilité du client Samba | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-257 | Multiples vulnérabilité de HP-UX Apache Web Server Suite | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-256 | Vulnérabilité du pilote Intel PRO/1000 | 2009-06-30T00:00:00.000000 | 2009-06-30T00:00:00.000000 |
| certa-2009-avi-255 | Vulnérabilités de produits Cisco Video Surveillance | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |
| certa-2009-avi-254 | Vulnérabilité dans Cisco Physical Access Gateway | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |
| certa-2009-avi-253 | Vulnérabilité dans Adobe Shockwave Player | 2009-06-25T00:00:00.000000 | 2009-06-25T00:00:00.000000 |
| certa-2009-avi-252 | Multiples vulnérabilités du lecteur Foxit Reader | 2009-06-24T00:00:00.000000 | 2009-06-24T00:00:00.000000 |
| certa-2009-avi-251 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2009-06-24T00:00:00.000000 | 2009-06-24T00:00:00.000000 |
| certa-2009-avi-250 | Vulnérabilités dans OCS Inventory NG Server | 2009-06-24T00:00:00.000000 | 2009-06-24T00:00:00.000000 |
| certa-2009-avi-249 | Vulnérabilité dans Nagios | 2009-06-24T00:00:00.000000 | 2009-06-24T00:00:00.000000 |
| certa-2009-avi-248 | Vulnérabilités dans Solaris Event Port API | 2009-06-24T00:00:00.000000 | 2009-06-24T00:00:00.000000 |