Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-101020 | 7.8 (v3.0) 8.5 (v4.0) | An incorrect permission assignment for critical r… |
Hammock Corporation |
AssetView |
2026-10-13T08:40:15.589Z | 2026-10-16T17:18:51.739Z |
| cve-2026-109691 | 6.5 (v3.1) | WordPress Prime Slider – Addons For Elementor plugin <… |
BdThemes |
Prime Slider – Addons For Elementor |
2026-10-13T08:39:18.284Z | 2026-10-13T12:07:53.947Z |
| cve-2026-89309 | 10 (v4.0) 10 (v3.1) | Missing Authentication Vulnerability in JTL-WMS |
JTL SW GmbH |
JTL-WMS |
2026-10-13T08:38:59.289Z | 2026-10-16T17:18:59.997Z |
| cve-2026-108488 | 6.5 (v3.1) | WordPress PowerPack Addons for Elementor plugin <= 3.1… |
IdeaBox Creations |
PowerPack Addons for Elementor |
2026-10-13T08:38:44.619Z | 2026-10-13T12:07:54.071Z |
| cve-2026-13138 | 8.6 (v3.1) | Improper Authorization in Divasoft Software's Biletiva… |
Divasoft Software and E-Commerce Inc. |
Biletiva Ticketing Platform |
2026-10-13T08:37:46.919Z | 2026-10-16T18:02:48.861Z |
| cve-2026-109696 | 5.4 (v3.1) | WordPress FluentBoards plugin <= 2.1.0 - Broken Access… |
WP ManageNinja LLC |
FluentBoards |
2026-10-13T08:36:20.364Z | 2026-10-13T12:07:54.186Z |
| cve-2026-108490 | 6.5 (v3.1) | WordPress Premium Addons for Elementor plugin <= 4.11.… |
LeapWorx |
Premium Addons for Elementor |
2026-10-13T08:35:52.144Z | 2026-10-13T12:07:54.303Z |
| cve-2026-109684 | 5.3 (v3.1) | WordPress Amelia plugin <= 2.4.10 - Broken Access Cont… |
TMS |
Amelia |
2026-10-13T08:34:34.941Z | 2026-10-13T12:07:54.433Z |
| cve-2026-108496 | 5.3 (v3.1) | WordPress WP User Manager plugin <= 2.9.24 - Broken Ac… |
WP User Manager |
WP User Manager |
2026-10-13T08:33:20.679Z | 2026-10-21T10:21:15.616Z |
| cve-2026-108493 | 5.3 (v3.1) | WordPress Pay for Payment for WooCommerce plugin <= 3.… |
Karolína Vyskočilová |
Pay for Payment for WooCommerce |
2026-10-13T08:32:30.517Z | 2026-10-13T12:07:54.689Z |
| cve-2026-108495 | 6.5 (v3.1) | WordPress SureForms plugin <= 2.12.7 - Cross Site Scri… |
Brainstorm Force |
SureForms |
2026-10-13T08:30:25.869Z | 2026-10-13T12:07:54.820Z |
| cve-2026-109115 | AdithyaYelloju Restaurant-Management-System Password R… |
AdithyaYelloju |
Restaurant-Management-System |
2026-10-13T08:30:17.607Z | 2026-10-16T21:39:37.598Z | |
| cve-2026-108492 | 5.3 (v3.1) | WordPress Quick Paypal Payments plugin <= 6.0.3 - Brok… |
Fullworks Plugins |
Quick Paypal Payments |
2026-10-13T08:29:26.631Z | 2026-10-19T08:14:59.464Z |
| cve-2026-109114 | AdithyaYelloju Restaurant-Management-System Login Form… |
AdithyaYelloju |
Restaurant-Management-System |
2026-10-13T08:15:15.240Z | 2026-10-13T13:16:14.323Z | |
| cve-2026-109110 | Wavlink WL-WN592AX6 wmapd system os command injection |
Wavlink |
WL-WN592AX6 |
2026-10-13T08:00:15.817Z | 2026-10-15T15:12:53.303Z | |
| cve-2026-14308 | 4.9 (v3.1) | Insufficient Signature Validation |
Zohocorp |
ManageEngine Malware Protection Plus |
2026-10-13T07:51:58.757Z | 2026-10-13T12:13:32.674Z |
| cve-2026-15399 | Animated Number Counters <= 3.0 - Authenticated (Edito… |
wpmart |
Animated Number Counters |
2026-10-13T07:46:23.915Z | 2026-10-13T13:16:47.378Z | |
| cve-2026-102007 | Bit integrations <= 2.10.6 - Unauthenticated Stored Cr… |
bitpressadmin |
Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation |
2026-10-13T07:46:23.568Z | 2026-10-14T18:25:28.431Z | |
| cve-2026-102562 | AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Si… |
acyba |
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress |
2026-10-13T07:46:23.207Z | 2026-10-15T16:43:51.862Z | |
| cve-2026-89097 | Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Se… |
spacetime |
Ad Inserter – Ad Manager & AdSense Ads |
2026-10-13T07:46:22.727Z | 2026-10-15T16:43:51.986Z | |
| cve-2026-109109 | Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSet… |
Wavlink |
WL-WN530BE1-A |
2026-10-13T07:45:17.295Z | 2026-10-14T13:39:21.755Z | |
| cve-2026-109703 | 5.3 (v3.1) | WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data … |
WPGraphQL |
WPGraphQL |
2026-10-13T07:32:54.095Z | 2026-10-13T12:07:55.100Z |
| cve-2026-109108 | Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command i… |
Wavlink |
WL-WN530BE1-A |
2026-10-13T07:30:21.992Z | 2026-10-16T21:38:50.808Z | |
| cve-2026-67165 | 5.4 (v3.1) | HCL Connections is vulnerable to cross-site scripting (XSS) |
HCLSoftware |
Connections |
2026-10-13T07:20:27.361Z | 2026-10-14T18:59:39.567Z |
| cve-2026-103417 | N/A | Saved credentials can be autofilled after cross-origin… |
Mozilla |
Firefox for iOS |
2026-10-13T07:19:10.454Z | 2026-10-13T12:09:24.689Z |
| cve-2026-103418 | N/A | Universal XSS via the HTML language attribute in Trans… |
Mozilla |
Firefox for iOS |
2026-10-13T07:19:09.898Z | 2026-10-14T03:58:53.731Z |
| cve-2026-109107 | Wavlink WL-WN592AX6 upload.cgi main null pointer dereference |
Wavlink |
WL-WN592AX6 |
2026-10-13T07:15:16.219Z | 2026-10-13T13:18:30.048Z | |
| cve-2026-109106 | Polaris Office App Document Intake com.infraware.servi… |
Polaris |
Office App |
2026-10-13T07:00:17.356Z | 2026-10-15T15:12:59.959Z | |
| cve-2026-75826 | 8.5 (v4.0) | Teltonika Command Injection in Backup function |
Teltonika Networks |
RUT |
2026-10-13T06:59:06.919Z | 2026-10-14T19:00:22.708Z |
| cve-2026-108975 | SourceCodester Library Management System add_admin.php… |
SourceCodester |
Library Management System |
2026-10-13T06:45:19.180Z | 2026-10-14T13:38:22.435Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-067 | Vulnérabilités de Safari | 2009-02-13T00:00:00.000000 | 2009-02-13T00:00:00.000000 |
| certa-2009-avi-066 | Vulnérabilité dans Sun Java System Directory Server | 2009-02-13T00:00:00.000000 | 2009-02-13T00:00:00.000000 |
| certa-2009-avi-065 | Vulnérabilité de la commande sudo | 2009-02-12T00:00:00.000000 | 2009-02-12T00:00:00.000000 |
| certa-2009-avi-064 | Vulnérabilité dans l'Autorun sur Windows | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-063 | Vulnérabilités de TYPO3 | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-062 | Multiples vulnérabilités dans Microsoft Visio | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-061 | Vulnérabilité dans Microsoft SQL | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-060 | Multiples vulnérabilités dans Microsoft Exchange | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-059 | Vulnérabilités dans Microsoft Internet Explorer | 2009-02-11T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2009-avi-058 | Vulnérabilité dans HP LaserJet et HP Digital Sender | 2009-02-10T00:00:00.000000 | 2009-02-10T00:00:00.000000 |
| certa-2009-avi-057 | Vulnérabilité dans Sun Solaris RPC | 2009-02-10T00:00:00.000000 | 2009-02-10T00:00:00.000000 |
| certa-2009-avi-056 | Vulnérabilité de la pile IPv6 dans Sun Solaris | 2009-02-10T00:00:00.000000 | 2009-02-10T00:00:00.000000 |
| certa-2009-avi-055 | Vulnérabilités dans Wireshark | 2009-02-10T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-054 | Vulnérabilités de Trend Micro Interscan Web Security Suite | 2009-02-10T00:00:00.000000 | 2009-02-10T00:00:00.000000 |
| certa-2009-avi-053 | Vulnérabilité dans HP OpenView Network Node Manager | 2009-02-09T00:00:00.000000 | 2009-02-09T00:00:00.000000 |
| certa-2009-avi-051 | Multiples vulnérabilités dans les Cisco Wireless LAN Controllers | 2009-02-06T00:00:00.000000 | 2009-02-06T00:00:00.000000 |
| certa-2009-avi-052 | Multiples vulnérabilités du système SCADA e-terrahabitat d'AREVA | 2009-02-05T00:00:00.000000 | 2009-02-05T00:00:00.000000 |
| certa-2009-avi-050 | Vulnérabilité dans Sun Java System Application Server | 2009-02-04T00:00:00.000000 | 2009-02-04T00:00:00.000000 |
| certa-2009-avi-049 | Vulnérabilité dans HP-UX | 2009-02-04T00:00:00.000000 | 2009-02-04T00:00:00.000000 |
| certa-2009-avi-048 | Multiples vulnérabilités dans Mozilla Firefox | 2009-02-04T00:00:00.000000 | 2009-02-04T00:00:00.000000 |
| certa-2009-avi-047 | Vulnérabilité dans Squid | 2009-02-04T00:00:00.000000 | 2009-03-06T00:00:00.000000 |
| certa-2009-avi-046 | Vulnérabilités de Bugzilla | 2009-02-03T00:00:00.000000 | 2009-02-03T00:00:00.000000 |
| certa-2009-avi-045 | Vulnérabilité du serveur Web de Xerox WorkCentre | 2009-02-03T00:00:00.000000 | 2009-02-03T00:00:00.000000 |
| certa-2009-avi-044 | Multiples vulnérabilités dans Novell GroupWise | 2009-02-03T00:00:00.000000 | 2009-02-03T00:00:00.000000 |
| certa-2009-avi-043 | Vulnérabilité dans VMware ESX et ESXi | 2009-02-03T00:00:00.000000 | 2009-02-03T00:00:00.000000 |
| certa-2009-avi-042 | Vulnérabilité dans AIX | 2009-01-30T00:00:00.000000 | 2009-01-30T00:00:00.000000 |
| certa-2009-avi-041 | Vulnérabilité dans FFmpeg | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-040 | Vulnérabilité dans Sun Solaris | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-039 | Vulnérabilité des serveurs SunFire X2100 M2 et X2200 M2 | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-038 | Vulnérabilité dans Sun Java System Access Manager | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |