Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114609 | fpdf2 implicitly loads external URLs and local image p… |
py-pdf |
fpdf2 |
2026-10-22T17:18:22.802Z | 2026-10-29T02:19:57.646Z | |
| cve-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use |
rthalley |
dnspython |
2026-10-22T16:25:32.509Z | 2026-10-29T02:19:02.339Z | |
| cve-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in … |
open-telemetry |
opentelemetry-python |
2026-10-22T15:29:25.108Z | 2026-10-29T02:17:42.817Z | |
| cve-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write… |
rsyslog |
rsyslog |
2026-10-22T13:32:56.695Z | 2026-10-29T02:15:30.165Z | |
| cve-2026-115248 | subhajitkhan online-clinic-management-system Booking p… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:30:10.769Z | 2026-10-29T02:14:19.530Z | |
| cve-2026-115400 | 6.7 (v4.0) 4.4 (v3.1) | crawlseo before 0.2.5 Cleartext Storage of Google OAut… |
crawlseo |
crawlseo |
2026-10-22T13:23:38.856Z | 2026-10-29T02:13:18.485Z |
| cve-2026-115331 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Metric Property… |
uselotus |
lotus |
2026-10-22T10:57:48.115Z | 2026-10-29T02:11:42.284Z |
| cve-2026-115327 | 6 (v4.0) 5.3 (v3.1) | libyang through 6.4.13 Uninitialized Pointer Free in N… |
CESNET |
libyang |
2026-10-22T10:57:45.264Z | 2026-10-29T02:10:37.665Z |
| cve-2026-115323 | 6.9 (v4.0) 7.3 (v3.1) | EverShop 1.2.2 before 2.2.1 Missing Authorization via … |
evershopcommerce |
evershop |
2026-10-22T10:57:42.424Z | 2026-10-29T02:08:25.891Z |
| cve-2026-114665 | 7.1 (v4.0) 6.5 (v3.1) | Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrar… |
zhenorzz |
goploy |
2026-10-22T10:57:39.553Z | 2026-10-29T02:07:01.607Z |
| cve-2021-48016 | 9.3 (v4.0) 9.8 (v3.1) | DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php |
DedeCMS |
DedeCMS |
2026-10-22T10:57:31.176Z | 2026-10-29T02:06:05.908Z |
| cve-2024-58393 | 8.8 (v4.0) 8.2 (v3.1) | i-Netsolution Readymade Unilevel Ecommerce MLM SQL Inj… |
i-Netsolution |
Readymade Unilevel Ecommerce MLM |
2026-10-22T10:57:36.699Z | 2026-10-29T02:05:25.721Z |
| cve-2022-51023 | 8.8 (v4.0) 8.2 (v3.1) | PHPOK < 5.4.081 SQL Injection via api.php sort Parameter |
PHPOK |
PHPOK |
2026-10-22T10:57:33.897Z | 2026-10-29T02:04:37.497Z |
| cve-2026-11854 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint Error… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:33.216Z | 2026-10-29T02:02:14.279Z |
| cve-2026-3583 | 3.1 (v3.1) | Improper Token Revocation via OAuth2 Scope Enforcement… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:34.577Z | 2026-10-29T02:02:14.134Z |
| cve-2026-6647 | 7.4 (v3.1) | Incomplete OAuth Token Revocation via Case Mismatch in… |
WSO2 |
WSO2 Identity Server |
2026-10-28T19:21:35.702Z | 2026-10-29T02:02:13.994Z |
| cve-2026-78674 | 8.8 (v3.1) | Remote Code Execution via BPMN System REST APIs in Mul… |
WSO2 |
Enterprise Integrator (BPS profile) |
2026-10-28T19:21:38.203Z | 2026-10-29T02:02:13.846Z |
| cve-2026-16889 | 4.8 (v4.0) | Stored XSS via Pre-Login Notice Image Upload Serves At… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:32:09.466Z | 2026-10-29T02:02:13.700Z |
| cve-2026-66088 | 9.4 (v4.0) | Unrestricted Command Execution via system.execute |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:35:46.415Z | 2026-10-29T02:02:13.562Z |
| cve-2026-66089 | 6.1 (v4.0) | XML External Entity (XXE) Vulnerability in SOAP Interf… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:36:30.145Z | 2026-10-29T02:02:13.415Z |
| cve-2026-66090 | 7.1 (v4.0) | XML External Entity (XXE) Injection in Metadata Field … |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:37:37.928Z | 2026-10-29T02:02:13.278Z |
| cve-2026-66091 | 6.9 (v4.0) | Unauthenticated IDOR Enables Disclosure of Other Users… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:38:24.876Z | 2026-10-29T02:02:13.127Z |
| cve-2026-66092 | 4.8 (v4.0) | Stored XSS in pre-login notice via reachable legacy lo… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:39:28.582Z | 2026-10-29T02:02:12.981Z |
| cve-2026-113387 | 8.6 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:40:39.020Z | 2026-10-29T02:02:12.845Z |
| cve-2026-114173 | 5.3 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:42:02.291Z | 2026-10-29T02:02:12.706Z |
| cve-2026-113409 | 4.8 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:43:11.787Z | 2026-10-29T02:02:12.553Z |
| cve-2025-65200 | N/A | An issue was discovered in localstack 4.9.2 allow… |
n/a |
n/a |
2026-10-22T00:00:00.000Z | 2026-10-29T01:56:35.051Z |
| cve-2026-114645 | 5.7 (v4.0) 5.2 (v3.1) | Heap overflow via 32-bit length wrap of the URI userna… |
MongoDB |
C Driver |
2026-10-22T19:13:49.867Z | 2026-10-29T01:52:06.895Z |
| cve-2026-115417 | 7.5 (v3.1) 8.2 (v4.0) | Memory allocation with excessive size value in the MQT… |
AWS |
aws-c-mqtt |
2026-10-22T20:34:50.961Z | 2026-10-29T01:52:06.755Z |
| cve-2026-25716 | 7.1 (v4.0) 7.1 (v3.1) | BlueSpiceUserManager: Missing authorization in REST en… |
Hallo Welt! GmbH |
BlueSpice |
2026-10-23T08:53:47.208Z | 2026-10-29T01:52:06.615Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-600 | Vulnérabilité dans OpenSSL de Sun Solaris | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-599 | Vulnérabilité dans Asterisk | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-598 | Vulnérabilité dans ARCserve Backup | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-597 | Vulnérabilité dans Sun Java System Portal Server | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-596 | Multiples vulnérabilités dans Drupal | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-595 | Vulnérabilité dans HP OpenView | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-594 | Multiples vulnérabilités dans IBM AIX | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-592 | Vulnérabilité dans phpMyAdmin | 2008-12-11T00:00:00.000000 | 2008-12-11T00:00:00.000000 |
| certa-2008-avi-591 | Vulnérabilité de Microsoft Office Sharepoint Server | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-590 | Vulnérabilités dans les composants Windows Media | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-589 | Multiples vulnérabilités de Windows Search | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-588 | Multiples vulnérabilités dans Microsoft Excel | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-587 | Vulnérabilités dans Microsoft Internet Explorer | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-586 | Multiples vulnérabilités de la suite logicielle Microsoft Office | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-585 | Multiples vulnérabilités dans la bibliothèque GDI de Microsoft Windows | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-584 | Multiples vulnérabilités dans Visual Basic | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-583 | Multiples vulnérabilités d'IBM WebSphere | 2008-12-09T00:00:00.000000 | 2008-12-09T00:00:00.000000 |
| certa-2008-avi-582 | Vulnérabilité dans Apache pour Novell Netware | 2008-12-08T00:00:00.000000 | 2008-12-08T00:00:00.000000 |
| certa-2008-avi-581 | Vulnérabilité dans PowerDNS | 2008-12-05T00:00:00.000000 | 2008-12-05T00:00:00.000000 |
| certa-2008-avi-580 | Vulnérabilité dans Nagios | 2008-12-05T00:00:00.000000 | 2008-12-05T00:00:00.000000 |
| certa-2008-avi-579 | Vulnérabilité dans SquirrelMail | 2008-12-04T00:00:00.000000 | 2008-12-04T00:00:00.000000 |
| certa-2008-avi-577 | Vulnérabilité des produits VMware ESX et ESXi | 2008-12-03T00:00:00.000000 | 2008-12-03T00:00:00.000000 |
| certa-2008-avi-576 | Vulnérabilité dans CUPS | 2008-12-03T00:00:00.000000 | 2008-12-03T00:00:00.000000 |
| certa-2008-avi-575 | Vulnérabilité dans imlib2 | 2008-12-03T00:00:00.000000 | 2008-12-03T00:00:00.000000 |
| certa-2008-avi-573 | Vulnérabilité de RSA enVision | 2008-12-01T00:00:00.000000 | 2008-12-01T00:00:00.000000 |
| certa-2008-avi-572 | Vulnérabilité de Samba | 2008-12-01T00:00:00.000000 | 2008-12-01T00:00:00.000000 |
| certa-2008-avi-571 | Vulnérabilité dans VLC media player | 2008-12-01T00:00:00.000000 | 2008-12-01T00:00:00.000000 |
| certa-2008-avi-570 | Multiples vulnérabilités dans IBM AIX | 2008-12-01T00:00:00.000000 | 2008-12-01T00:00:00.000000 |
| certa-2008-avi-569 | Vulnérabilité dans IBM Tivoli | 2008-11-27T00:00:00.000000 | 2008-11-27T00:00:00.000000 |
| certa-2008-avi-568 | Vulnérabilité dans WordPress | 2008-11-26T00:00:00.000000 | 2008-11-26T00:00:00.000000 |