Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115377 | 9.4 (v4.0) 9.9 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:46.305Z | 2026-10-29T12:04:13.696Z |
| cve-2026-115373 | 7 (v4.0) 6.3 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:43.300Z | 2026-10-29T11:57:51.417Z |
| cve-2026-115369 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr By… |
openbao |
openbao |
2026-10-22T19:13:40.448Z | 2026-10-29T11:56:36.361Z |
| cve-2026-115363 | 2.1 (v4.0) 3.3 (v3.1) | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME… |
openbao |
openbao |
2026-10-22T19:13:37.600Z | 2026-10-29T11:56:00.897Z |
| cve-2026-115359 | 6.3 (v4.0) 3.7 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based… |
openbao |
openbao |
2026-10-22T19:13:34.716Z | 2026-10-29T11:54:37.275Z |
| cve-2026-115351 | 5.3 (v4.0) 4.7 (v3.1) | Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Di… |
lepture |
mistune |
2026-10-22T19:13:27.678Z | 2026-10-29T11:53:14.490Z |
| cve-2026-108359 | PhpSpreadsheet ODS Reader: Unbounded number-rows-repea… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:32:49.724Z | 2026-10-29T11:51:32.420Z | |
| cve-2026-108360 | PhpSpreadsheet: SSRF whitelist bypass via unre-validat… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:26:59.148Z | 2026-10-29T11:50:16.342Z | |
| cve-2026-114608 | Pylint: Arbitrary code execution via pickle deserializ… |
pylint-dev |
pylint |
2026-10-22T16:50:02.569Z | 2026-10-29T11:49:18.315Z | |
| cve-2026-75508 | GraphQL-core: Denial of service via comment tokens byp… |
graphql-python |
graphql-core |
2026-10-22T16:10:17.124Z | 2026-10-29T11:47:15.190Z | |
| cve-2026-61791 | OCO-Server: Stored XSS through agent hostnames in comm… |
schorschii |
OCO-Server |
2026-10-22T14:55:54.269Z | 2026-10-29T11:46:11.262Z | |
| cve-2026-115249 | subhajitkhan online-clinic-management-system Appointme… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:45:15.849Z | 2026-10-29T11:41:57.646Z | |
| cve-2026-115411 | 5.3 (v4.0) 5 (v3.1) | crawlseo before 0.2.4 Server-Side Request Forgery via … |
crawlseo |
crawlseo |
2026-10-22T13:20:01.875Z | 2026-10-29T11:38:10.900Z |
| cve-2026-25439 | 8.1 (v3.1) | WordPress Booknetic plugin < 5.10.3 - Broken Authentic… |
Booknetic |
Booknetic |
2026-06-17T09:50:41.863Z | 2026-10-29T11:36:02.240Z |
| cve-2026-39746 | 9.3 (v3.1) | WordPress Booknetic plugin < 5.10.3 - SQL Injection vu… |
Booknetic |
Booknetic |
2026-10-06T08:34:17.195Z | 2026-10-29T11:35:28.523Z |
| cve-2026-115246 | subhajitkhan online-clinic-management-system patdocmsg… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:00:19.637Z | 2026-10-29T11:27:28.126Z | |
| cve-2026-115332 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Subscription Fi… |
uselotus |
lotus |
2026-10-22T10:57:48.791Z | 2026-10-29T11:25:42.720Z |
| cve-2026-115324 | 9.2 (v4.0) 8.1 (v3.1) | mem0 0.1.117 before 1.0.8 SQL Injection via Databricks… |
mem0ai |
mem0 |
2026-10-22T10:57:43.136Z | 2026-10-29T11:23:41.895Z |
| cve-2026-115319 | 2 (v4.0) 2.5 (v3.1) | fzf 0.36.0 through 0.74.5 Denial of Service via maskAc… |
junegunn |
fzf |
2026-10-22T10:57:40.288Z | 2026-10-29T11:21:21.376Z |
| cve-2022-51024 | 8.7 (v4.0) 7.5 (v3.1) | Kavita < 0.5.4.1 Unauthenticated Path Traversal via co… |
Kareadita |
Kavita |
2026-10-22T10:57:34.599Z | 2026-10-29T11:17:48.365Z |
| cve-2021-48017 | 8.7 (v4.0) 7.5 (v3.1) | OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal vi… |
OrbiTeam |
BSCW Server |
2026-10-22T10:57:31.855Z | 2026-10-29T11:16:33.337Z |
| cve-2021-48013 | 8.7 (v4.0) 7.5 (v3.1) | Weaver E-cology 8.0 Unauthenticated Path Traversal via… |
Weaver Network Co., Ltd. |
E-cology |
2026-10-22T10:57:29.018Z | 2026-10-29T11:13:18.528Z |
| cve-2018-25439 | 8.7 (v4.0) 7.5 (v3.1) | MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via… |
MetInfo |
MetInfo |
2026-10-22T10:57:26.044Z | 2026-10-29T11:09:34.251Z |
| cve-2017-20288 | 5.1 (v4.0) 6.1 (v3.1) | QCubed 3.1.1 Reflected XSS via installer step_2.php |
QCubed |
QCubed |
2026-10-22T10:57:23.289Z | 2026-10-29T11:04:55.766Z |
| cve-2026-114732 | 6.8 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:16:51.833Z | 2026-10-29T10:57:39.353Z |
| cve-2026-115282 | N/A | Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticate… |
Unknown |
Recipe Card Blocks Lite |
2026-10-29T06:00:21.666Z | 2026-10-29T10:56:09.514Z |
| cve-2026-115299 | N/A | Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin … |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:21.839Z | 2026-10-29T10:56:09.360Z |
| cve-2026-115300 | N/A | Contact Form by Supsystic < 1.11.1 - Contact Submissio… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.014Z | 2026-10-29T10:56:09.201Z |
| cve-2026-115301 | N/A | Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via F… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.187Z | 2026-10-29T10:56:09.041Z |
| cve-2026-115302 | N/A | Contact Form by Supsystic < 1.11.1 - Unauthenticated A… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.361Z | 2026-10-29T10:56:08.890Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-168 | Multiples vulnérabilités dans des produits Symantec | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |
| certa-2009-avi-167 | Vulnérabilités dans des produits Symantec | 2009-04-29T00:00:00.000000 | 2009-04-29T00:00:00.000000 |
| certa-2009-avi-166 | Vulnérabilité dans Mozilla Firefox | 2009-04-28T00:00:00.000000 | 2009-04-28T00:00:00.000000 |
| certa-2009-avi-165 | Vulnérabilité dans FreeBSD | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-164 | Vulnérabilités dans apt | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-163 | Multiples vulnérabilités dans HP StorageWorks | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-162 | Vulnérabilité dans Google Chrome | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-161 | Vulnérabilités dans Symantec Brightmail Gateway | 2009-04-27T00:00:00.000000 | 2009-04-27T00:00:00.000000 |
| certa-2009-avi-160 | Vulnérabilité dans Citrix Presentation Server | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-159 | Vulnérabilité dans Plone | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-158 | Vulnérabilité dans Dokeos | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-157 | Multiples vulnérabilités dans Mozilla Firefox | 2009-04-22T00:00:00.000000 | 2009-04-22T00:00:00.000000 |
| certa-2009-avi-155 | Multiples vulnérabilités du gestionnaire de périphériques udev | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-154 | Multiples vulnérabilités des produits Oracle | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-153 | Vulnérabilité du noyau Linux | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-152 | Vulnérabilité dans Apache Tomcat mod_jk | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-151 | Multiples vulnérabilités dans IBM BladeCenter Advanced Management Module | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-150 | Vulnérabilité dans IBM AIX | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-148 | Vulnérabilité dans phpMyAdmin | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-094 | Vulnérabilité dans l'interprétation JBIG2 dans le format PDF | 2009-03-11T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-147 | Vulnérabilité dans Microsoft Excel | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-146 | Vulnérabilité dans Microsoft ISA Server | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-145 | Vulnérabilité dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-144 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-143 | Vulnérabilités dans les services HTTP Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-142 | Vulnérabilités dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-141 | Vulnérabilité dans Microsoft DirectX | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-140 | Vulnérabilités dans les convertisseurs de texte WordPad et Office | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-138 | Multiples vulnérabilités dans SPIP | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-137 | Multiples vulnérabilités des produits VMWare | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |