Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-5702 | 4.8 (v4.0) | Cross-Site Request Forgery (CSRF) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:17:09.384Z | 2026-10-29T13:07:11.657Z |
| cve-2026-56834 | PraisonAI dynamic-context artifact tools read arbitrar… |
MervinPraison |
PraisonAI |
2026-10-23T11:56:40.277Z | 2026-10-29T13:05:52.903Z | |
| cve-2026-115726 | 8.5 (v4.0) 7.8 (v3.1) | Aider through 0.86.2 Command Execution via Repository … |
Aider-AI |
aider |
2026-10-23T11:36:49.084Z | 2026-10-29T13:02:55.888Z |
| cve-2026-112616 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:22.746Z | 2026-10-29T13:02:33.245Z |
| cve-2026-115722 | 6.9 (v4.0) 6.1 (v3.1) | RPly through 1.1.4 Out-of-Bounds Function Pointer Inde… |
diegonehab |
rply |
2026-10-23T11:36:46.355Z | 2026-10-29T13:00:26.916Z |
| cve-2026-86925 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:37.328Z | 2026-10-29T13:00:13.783Z |
| cve-2026-113912 | N/A | An out-of-bounds access issue was addressed with … |
Apple |
iOS and iPadOS |
2026-10-26T20:44:27.691Z | 2026-10-29T12:59:33.991Z |
| cve-2026-86055 | Part-DB: Password Reset Link Poisoning via Host Header… |
Part-DB |
Part-DB-server |
2026-10-23T04:09:27.051Z | 2026-10-29T12:56:48.256Z | |
| cve-2026-59188 | Part-DB: SVG Sanitization Bypass via Extension Spoofin… |
Part-DB |
Part-DB-server |
2026-10-23T03:59:11.068Z | 2026-10-29T12:49:30.293Z | |
| cve-2026-90458 | 5.4 (v3.1) | OpenStack Ironic before 39.0.1 allows DELETE and … |
OpenStack |
Ironic |
2026-10-23T03:50:48.611Z | 2026-10-29T12:46:14.679Z |
| cve-2026-54630 | Part-DB: Authenticated RCE via .phar attachment upload… |
Part-DB |
Part-DB-server |
2026-10-23T03:48:59.951Z | 2026-10-29T12:43:48.850Z | |
| cve-2026-7190 | 5.1 (v4.0) | Reflected Cross-Site Scripting in ICT Innovations’ PHP… |
ICT Innovations |
ICT Innovations’ PHP-CGI/PHP-FPM configuration |
2026-10-29T09:00:02.158Z | 2026-10-29T12:36:54.332Z |
| cve-2026-111419 | 8.6 (v3.1) | Hardcoded API Token in Foxit Official Website |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:07.279Z | 2026-10-29T12:36:53.897Z |
| cve-2026-111418 | 7.5 (v3.1) | SSRF and JavaScript Execution in the Foxit Official We… |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:08.998Z | 2026-10-29T12:36:53.752Z |
| cve-2026-111417 | 7.5 (v3.1) | Cross-user Document Access on Foxit Official Website's… |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:11.736Z | 2026-10-29T12:36:53.601Z |
| cve-2026-118984 | 7 (v4.0) 5.5 (v3.1) | OmniRoute 3.8.0 before 3.8.52 Unverified Password Chan… |
cheaper-inference |
OmniRoute |
2026-10-29T10:44:39.676Z | 2026-10-29T12:36:53.458Z |
| cve-2026-33923 | 7.5 (v4.0) 7.2 (v3.1) | Update bundle signature bypass in Guardian/CMC before 26.4.0 |
Nozomi Networks |
Guardian |
2026-10-29T10:46:27.450Z | 2026-10-29T12:36:53.310Z |
| cve-2026-33924 | 7.5 (v4.0) 7.2 (v3.1) | Authenticated RCE in update functionality in Guardian/… |
Nozomi Networks |
Guardian |
2026-10-29T10:46:35.814Z | 2026-10-29T12:36:53.161Z |
| cve-2026-118989 | 5.1 (v4.0) 5.5 (v3.1) | WebToffee Product Import Export for WooCommerce 2.5.1 … |
WebToffee |
Product Import Export for WooCommerce |
2026-10-29T10:57:40.767Z | 2026-10-29T12:36:53.008Z |
| cve-2026-115963 | 7.1 (v3.1) | WordPress Broadcast Live Video plugin <= 7.3.9 - Broke… |
VideoWhisper.com |
Broadcast Live Video |
2026-10-29T11:00:23.604Z | 2026-10-29T12:36:52.863Z |
| cve-2026-115967 | 8.8 (v3.1) | WordPress Login with phone number plugin <= 1.8.78 - B… |
Hamid Alinia |
Login with phone number |
2026-10-29T11:00:23.638Z | 2026-10-29T12:36:52.709Z |
| cve-2026-115965 | 8.5 (v3.1) | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection … |
BuddyPress |
BuddyPress |
2026-10-29T11:00:24.136Z | 2026-10-29T12:36:52.568Z |
| cve-2026-115599 | 7.5 (v3.1) | WordPress LearnPress plugin <= 4.4.11 - Broken Access … |
ThimPress |
LearnPress |
2026-10-29T11:00:24.169Z | 2026-10-29T12:36:52.417Z |
| cve-2026-114193 | 7.5 (v3.1) | WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken … |
Eyal Fitoussi |
GEO my WordPress |
2026-10-29T11:00:24.744Z | 2026-10-29T12:36:52.272Z |
| cve-2026-112827 | 7.1 (v3.1) | WordPress HANDMADE – Dropshipping for Etsy and WooComm… |
VillaTheme |
HANDMADE – Dropshipping for Etsy and WooCommerce |
2026-10-29T11:00:24.746Z | 2026-10-29T12:36:52.128Z |
| cve-2026-115592 | 7.1 (v3.1) | WordPress OceanWP theme <= 4.2.7 - Cross Site Scriptin… |
OceanWP |
OceanWP |
2026-10-29T11:00:25.353Z | 2026-10-29T12:36:51.841Z |
| cve-2026-115962 | 4.3 (v3.1) | WordPress myCred plugin <= 4.0.1 - Bypass Vulnerabilit… |
myCred |
myCred |
2026-10-29T11:00:25.822Z | 2026-10-29T12:36:51.694Z |
| cve-2026-115964 | 9.3 (v3.1) | WordPress Motors plugin <= 1.4.126 - SQL Injection vul… |
StylemixThemes |
Motors |
2026-10-29T11:00:25.837Z | 2026-10-29T12:36:51.554Z |
| cve-2026-115611 | 7.1 (v3.1) | WordPress TableOn plugin <= 1.0.7 - Cross Site Scripti… |
PluginUs.Net |
TableOn |
2026-10-29T11:00:26.280Z | 2026-10-29T12:36:51.406Z |
| cve-2026-96767 | NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site… |
webaways |
NEX-Forms – Ultimate Forms Plugin for WordPress |
2026-10-29T11:27:14.333Z | 2026-10-29T12:36:51.254Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-195 | Vulnérabilités dans ntpd | 2009-05-19T00:00:00.000000 | 2009-06-11T00:00:00.000000 |
| certa-2009-avi-227 | Vulnérabilité dans le webmail de Kerio MailServer | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-226 | Vulnérabilité dans SonicWALL SSL-VPN | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-225 | Vulnérabilité de la bibliothèque libpng | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-224 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-223 | Multiples vulnérabilités dans Apple Safari | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-222 | Vulnérabilité de Microsoft Office | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-221 | Vulnérabilité de Windows RPC | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-220 | Vulnérabilités dans le noyau Windows | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-219 | Vulnérabilité dans Microsoft Works | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-218 | Vulnérabilité dans Microsoft Windows Search | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-217 | Vulnérabilités dans le gestionnaire de files d'impression de Microsoft Windows | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-216 | Vulnérabilités dans Microsoft Office Excel | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-215 | Vulnérabilités dans Internet Information Services (IIS) | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-214 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-213 | Vulnérabilité dans Microsoft Active Directory | 2009-06-10T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-avi-212 | Multiples vulnérabilités dans IBM WebSphere Application Server | 2009-06-08T00:00:00.000000 | 2009-06-08T00:00:00.000000 |
| certa-2009-avi-210 | Vulnérabilité dans Kerberos sous Sun Solaris | 2009-06-08T00:00:00.000000 | 2009-06-08T00:00:00.000000 |
| certa-2009-avi-209 | Multiples vulnérabilités dans Joomla! | 2009-06-04T00:00:00.000000 | 2009-06-08T00:00:00.000000 |
| certa-2009-avi-208 | Vulnérabilité dans Apache | 2009-06-03T00:00:00.000000 | 2009-06-03T00:00:00.000000 |
| certa-2009-avi-207 | Vulnérabilité dans iTunes | 2009-06-03T00:00:00.000000 | 2009-06-03T00:00:00.000000 |
| certa-2009-avi-206 | Multiples vulnérabilités dans Apple QuickTime | 2009-06-03T00:00:00.000000 | 2009-06-03T00:00:00.000000 |
| certa-2009-avi-205 | Vulnérabilité dans PostgreSQL | 2009-06-02T00:00:00.000000 | 2009-06-02T00:00:00.000000 |
| certa-2009-avi-204 | Vulnérabilité dans Citrix Password Manager | 2009-05-28T00:00:00.000000 | 2009-05-28T00:00:00.000000 |
| certa-2009-avi-203 | Vulnérabilités de libsndfile | 2009-05-28T00:00:00.000000 | 2009-05-28T00:00:00.000000 |
| certa-2009-avi-202 | Vulnérabilité dans Sun Java System Portal Server | 2009-05-28T00:00:00.000000 | 2009-05-28T00:00:00.000000 |
| certa-2009-avi-201 | Vulnérabilités dans des services BlackBerry | 2009-05-27T00:00:00.000000 | 2009-05-27T00:00:00.000000 |
| certa-2009-avi-200 | Multiples vulnérabilités de Novell GroupWise | 2009-05-27T00:00:00.000000 | 2009-05-27T00:00:00.000000 |
| certa-2009-avi-199 | Vulnérabilité dans DokuWiki | 2009-05-27T00:00:00.000000 | 2009-05-27T00:00:00.000000 |
| certa-2009-avi-198 | Vulnérabilité dans Wireshark | 2009-05-26T00:00:00.000000 | 2009-05-26T00:00:00.000000 |