Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107743 | Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cros… |
mapster |
Mapster WP Maps |
2026-10-29T09:25:36.733Z | 2026-10-29T10:35:36.566Z | |
| cve-2026-111318 | HT Mega Addons for Elementor <= 3.2.7 - Unauthenticate… |
devitemsllc |
HT Mega Addons for Elementor – Elementor Widgets & Template Builder |
2026-10-29T09:25:37.098Z | 2026-10-29T10:35:36.425Z | |
| cve-2026-105192 | 9.8 (v3.1) | LMCache Unauthenticated RCE in multiprocess mode via p… |
LMCache |
LMCache |
2026-10-07T09:40:11.449Z | 2026-10-29T10:24:45.984Z |
| cve-2026-73581 | Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementat… |
Apache Software Foundation |
Apache Tomcat |
2026-09-23T11:08:53.212Z | 2026-10-29T10:01:34.970Z | |
| cve-2026-37982 | 6.8 (v3.1) | Keycloak: org.keycloak.authentication: keycloak: unaut… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-05-19T10:52:32.486Z | 2026-10-29T09:29:09.736Z |
| cve-2026-37979 | 6.5 (v3.1) | Keycloak: keycloak: information disclosure via oidc to… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-05-19T10:52:30.442Z | 2026-10-29T09:29:05.708Z |
| cve-2023-3397 | 7 (v3.1) | Kernel: slab-use-after-free write in txend due to race… |
Red Hat |
Red Hat Enterprise Linux 6 |
2023-11-01T19:05:39.080Z | 2026-10-29T08:13:40.877Z |
| cve-2026-117174 | N/A | {'providerMetadata': {'orgId': 'db201096-a0cc-46c7-9a55-61d9e221bf01', 'shortName': 'synology', 'dateUpdated': '2026-10-29T08:01:21.518Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'VUL-2026-008368 為先回報之相同問題'}]} | N/A | N/A | 2026-10-29T08:01:21.518Z | |
| cve-2026-39991 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) in Note Station file… |
QNAP Systems Inc. |
Notes Station 3 |
2026-10-15T09:37:51.830Z | 2026-10-29T07:41:10.166Z |
| cve-2024-0340 | 4.4 (v3.1) | Kernel: information disclosure in vhost/vhost.c:vhost_… |
|
|
2024-01-09T17:36:11.578Z | 2026-10-29T07:23:10.649Z |
| cve-2026-32557 | 9.3 (v3.1) | WordPress WooCommerce Appointments plugin <= 5.3.2 - S… |
BookingWP |
WooCommerce Appointments |
2026-10-06T08:33:58.564Z | 2026-10-29T07:21:07.586Z |
| cve-2026-97324 | YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment … |
YunaiV |
ruoyi-vue-pro |
2026-09-24T19:15:12.105Z | 2026-10-29T06:57:47.676Z | |
| cve-2026-97320 | YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnow… |
YunaiV |
ruoyi-vue-pro |
2026-09-24T18:15:08.463Z | 2026-10-29T06:31:30.524Z | |
| cve-2026-86385 | 8.8 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T09:47:44.687Z | 2026-10-29T03:57:22.936Z |
| cve-2026-86380 | 7.2 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T09:58:22.935Z | 2026-10-29T03:57:20.755Z |
| cve-2026-103779 | 8.3 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T10:22:38.482Z | 2026-10-29T03:57:07.897Z |
| cve-2026-110541 | 7.2 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T10:33:32.058Z | 2026-10-29T03:57:05.465Z |
| cve-2026-74580 | vhost: reset the vring metadata cache on vring reconfi… |
Linux |
Linux |
2026-08-21T16:31:54.076Z | 2026-10-29T03:57:01.255Z | |
| cve-2026-41709 | 2.7 (v3.1) | ESX insufficient logging vulnerability |
VMware |
Cloud Foundation |
2026-07-30T12:45:02.292Z | 2026-10-29T03:56:50.795Z |
| cve-2026-94346 | 7.2 (v3.1) | PowerProtect Data Domain Virtual Edition, Feature… |
Dell |
PowerProtect Data Domain Virtual Edition |
2026-10-27T13:23:56.292Z | 2026-10-29T03:56:49.680Z |
| cve-2026-48360 | 9.6 (v3.1) | Adobe Connect | Improper Control of Generation of Code… |
Adobe |
Adobe Connect Desktop App |
2026-10-27T16:38:56.785Z | 2026-10-29T03:56:34.974Z |
| cve-2026-46300 | net: skbuff: preserve shared-frag marker during coalescing |
Linux |
Linux |
2026-05-23T11:44:02.231Z | 2026-10-29T03:55:37.330Z | |
| cve-2026-57210 | Heimdall: IP Spoofing via Unvalidated Forwarding Headers |
dadrus |
heimdall |
2026-10-23T12:28:09.427Z | 2026-10-29T02:57:12.693Z | |
| cve-2026-55422 | conda-forge.org: Stored DOM XSS via unsanitized danger… |
conda-forge |
conda-forge.github.io |
2026-10-23T12:21:12.529Z | 2026-10-29T02:56:16.728Z | |
| cve-2026-57144 | PraisonAI SandlockSandbox falls back to unrestricted s… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:55.583Z | 2026-10-29T02:55:07.333Z | |
| cve-2026-57116 | PraisonAI: AgentOS remains unauthenticated after GHSA-… |
MervinPraison |
PraisonAI |
2026-10-23T12:06:55.544Z | 2026-10-29T02:53:53.826Z | |
| cve-2026-56840 | PraisonAI: HTTPApproval dashboard renders tool argumen… |
MervinPraison |
PraisonAI |
2026-10-23T11:58:24.568Z | 2026-10-29T02:52:55.374Z | |
| cve-2026-56835 | PraisonAI Slack app_mention bypasses configured user/c… |
MervinPraison |
PraisonAI |
2026-10-23T11:57:11.852Z | 2026-10-29T02:50:43.187Z | |
| cve-2026-112904 | Vvveb: Path Traversal in nextRestore() and nextBackup() |
givanz |
Vvveb |
2026-10-23T11:45:55.139Z | 2026-10-29T02:49:35.598Z | |
| cve-2026-115725 | 2.3 (v4.0) 4.2 (v3.1) | Chatwoot before 4.17.0 Cross-Account Authorization Byp… |
chatwoot |
chatwoot |
2026-10-23T11:36:48.394Z | 2026-10-29T02:48:49.269Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-042 | Vulnérabilité dans AIX | 2009-01-30T00:00:00.000000 | 2009-01-30T00:00:00.000000 |
| certa-2009-avi-041 | Vulnérabilité dans FFmpeg | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-040 | Vulnérabilité dans Sun Solaris | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-039 | Vulnérabilité des serveurs SunFire X2100 M2 et X2200 M2 | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-038 | Vulnérabilité dans Sun Java System Access Manager | 2009-01-29T00:00:00.000000 | 2009-01-29T00:00:00.000000 |
| certa-2009-avi-037 | Vulnérabilité dans IMP | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-036 | Vulnérabilités dans Horde | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-035 | Vulnérabilité dans VNC Viewer | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-034 | Vulnérabilité dans Sun Solaris | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-033 | Multiples vulnérabilités dans CA Anti-Virus | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-032 | Multiples vulnérabilités dans CA Cohesion Application Configuration Manager | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-031 | Vulnérabilité des Serveurs Sun Serie M | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-030 | Vulnérabilité dans Cisco Unified Communications Manager | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-029 | Multiples vulnérabilités dans Apple QuickTime | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-028 | Vulnérabilité dans Cisco Security Manager | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-027 | Multiples vulnérabilités dans HP OpenView | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-026 | Multiples vulnérabilités dans Trend Micro OfficeScan | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-025 | Vulnérabilités dans des produits Horde | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-024 | Multiples vulnérabilités dans TYPO3 | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-023 | Multiples vulnérabilités dans Drupal | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-022 | Multiples vulnérabilités dans Sun Java System Access Manager | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-021 | Vulnérabilité dans IBM HMC | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-020 | Vulnérabilité dans Sophos Anti-Virus | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-019 | Vulnérabilité dans Symantec AppStream | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-016 | Multiples vulnérabilités dans Cisco IronPort | 2009-01-15T00:00:00.000000 | 2009-01-16T00:00:00.000000 |
| certa-2009-avi-018 | Vulnérabilité dans les produits Cisco ONS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-017 | Vulnérabilités dans Cisco IOS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-015 | Vulnérabilité dans Avira Antivir | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-014 | Multiples vulnérabilités dans IBM DB2 | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |
| certa-2009-avi-013 | Vulnérabilités des produits Oracle | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |