Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109610 | 7.1 (v4.0) 6.5 (v3.1) | Frappe ERPNext before 15.119.1 Missing Authorization A… |
frappe |
erpnext |
2026-10-12T22:21:58.500Z | 2026-10-13T16:45:51.673Z |
| cve-2026-109609 | 7.1 (v4.0) 6.5 (v3.1) | Frappe ERPNext before 15.119.1 SQL Injection via Missi… |
frappe |
erpnext |
2026-10-12T22:21:57.854Z | 2026-10-14T12:09:51.248Z |
| cve-2026-109608 | 8.7 (v4.0) 8.8 (v3.1) | Frappe ERPNext before 15.121.0 SQL Injection via Unval… |
frappe |
erpnext |
2026-10-12T22:21:57.198Z | 2026-10-15T14:09:06.332Z |
| cve-2026-109604 | 8.5 (v4.0) 7.3 (v3.1) | ERPNext before 15.112.0 Stored XSS via Tool View Recor… |
frappe |
erpnext |
2026-10-12T22:21:56.499Z | 2026-10-18T12:13:29.087Z |
| cve-2026-109603 | 4.8 (v4.0) 3.3 (v3.1) | Frappe Framework before 16.17.0 Authenticated SSRF and… |
frappe |
frappe |
2026-10-12T22:21:55.804Z | 2026-10-13T13:35:40.012Z |
| cve-2026-109602 | 5.1 (v4.0) 5.4 (v3.1) | Frappe before v16.31.0 Stored XSS via Dashboard Chart … |
frappe |
frappe |
2026-10-12T22:21:55.160Z | 2026-10-13T16:45:58.408Z |
| cve-2026-109601 | 7.1 (v4.0) 6.5 (v3.1) | Frappe Framework before v16.30.0 Arbitrary File Read v… |
frappe |
frappe |
2026-10-12T22:21:54.472Z | 2026-10-14T12:09:15.734Z |
| cve-2026-109600 | 6.9 (v4.0) 5.3 (v3.1) | Frappe before 16.31.0 Improper Access Control in Docum… |
frappe |
frappe |
2026-10-12T22:21:53.808Z | 2026-10-15T14:07:32.304Z |
| cve-2026-109599 | 5.3 (v4.0) 4.3 (v3.1) | Frappe before 15.113.3 Missing Authorization Allows Un… |
frappe |
frappe |
2026-10-12T22:21:53.213Z | 2026-10-18T12:13:29.238Z |
| cve-2026-109598 | 5.3 (v4.0) 4.3 (v3.1) | Frappe before 16.33.0 Broken Authorization via send_sm… |
frappe |
frappe |
2026-10-12T22:21:52.587Z | 2026-10-13T13:34:45.996Z |
| cve-2026-109597 | 5.1 (v4.0) 5.4 (v3.1) | Hugo v0.60.0 before v0.167.0 Stored XSS via Table of C… |
gohugoio |
hugo |
2026-10-12T22:21:51.941Z | 2026-10-13T16:46:06.110Z |
| cve-2026-109596 | 6.7 (v4.0) 5.5 (v3.1) | Hugo from v0.162.0 before v0.167.0 Symlink File Disclo… |
gohugoio |
hugo |
2026-10-12T22:21:51.306Z | 2026-10-14T12:07:23.109Z |
| cve-2026-109595 | 6.7 (v4.0) 5.5 (v3.1) | Hugo v0.84.0 before v0.167.0 Path Traversal via js.Bui… |
gohugoio |
hugo |
2026-10-12T22:21:50.696Z | 2026-10-15T14:06:24.829Z |
| cve-2026-109574 | 6.7 (v4.0) 5.5 (v3.1) | Hugo before v0.167.0 Path Traversal via css.Sass Impor… |
gohugoio |
hugo |
2026-10-12T22:21:50.021Z | 2026-10-26T16:46:47.336Z |
| cve-2026-109573 | 9.2 (v4.0) 8.1 (v3.1) | phpMyFAQ before 4.1.9 SQL Injection via api/autocomple… |
thorsten |
phpMyFAQ |
2026-10-12T22:21:49.354Z | 2026-10-13T13:52:56.940Z |
| cve-2026-109572 | 7.2 (v4.0) 7.6 (v3.1) | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation vi… |
open-webui |
open-webui |
2026-10-12T22:21:48.699Z | 2026-10-23T21:58:00.807Z |
| cve-2025-71432 | 8.6 (v4.0) 8.1 (v3.1) | Frappe ERPNext before 15.83.0 Reflected XSS Leading to… |
frappe |
erpnext |
2026-10-12T22:21:47.881Z | 2026-10-14T12:02:32.981Z |
| cve-2025-71431 | 6.3 (v4.0) 5.3 (v3.1) | Frappe before 15.86.0 LDAP Injection via Unsanitized E… |
frappe |
frappe |
2026-10-12T22:21:47.075Z | 2026-10-15T14:05:34.349Z |
| cve-2025-71430 | 5.1 (v4.0) 5.4 (v3.1) | Frappe before 15.91.1 Stored XSS via Leaderboard User Names |
frappe |
frappe |
2026-10-12T22:21:46.441Z | 2026-10-18T12:13:29.396Z |
| cve-2024-58391 | 5.3 (v4.0) 4.3 (v3.1) | Frappe before 15.4.0 XSS via Printview Parameters |
frappe |
frappe |
2026-10-12T22:21:45.089Z | 2026-10-13T13:33:51.735Z |
| cve-2024-58390 | 8.7 (v4.0) 8.8 (v3.1) | Frappe before 15.41.0 Privilege Escalation via Documen… |
frappe |
frappe |
2026-10-12T22:21:44.339Z | 2026-10-13T16:46:20.450Z |
| cve-2023-54412 | 7.1 (v4.0) 6.5 (v3.1) | Frappe before 13.46.3 Improper Access Control for Emai… |
frappe |
frappe |
2026-10-12T22:21:43.610Z | 2026-10-14T11:58:58.719Z |
| cve-2023-54411 | 8.2 (v4.0) 5.9 (v3.1) | Frappe before 13.32.0 Weak Authentication via Print View Key |
frappe |
frappe |
2026-10-12T22:21:42.973Z | 2026-10-15T14:04:43.661Z |
| cve-2023-54410 | 5.3 (v4.0) 4.3 (v3.1) | Frappe before 13.22.0 Improper Authorization via Docum… |
frappe |
frappe |
2026-10-12T22:21:42.075Z | 2026-10-18T12:13:29.550Z |
| cve-2023-54409 | 5.9 (v4.0) 4.8 (v3.1) | Frappe before 13.46.1 XSS via html2text Weak Sanitization |
frappe |
frappe |
2026-10-12T22:21:41.415Z | 2026-10-13T13:33:19.267Z |
| cve-2023-54408 | 5.1 (v4.0) 6.1 (v3.1) | Frappe before 14.31.0 HTML Injection via Weak Escaping |
frappe |
frappe |
2026-10-12T22:21:40.719Z | 2026-10-13T16:46:27.105Z |
| cve-2023-54407 | 6.9 (v4.0) 4.9 (v3.1) | Frappe 14.x before 14.45.0 Information Disclosure via … |
frappe |
frappe |
2026-10-12T22:21:40.021Z | 2026-10-14T11:55:13.234Z |
| cve-2023-54406 | 6.9 (v4.0) 4.9 (v3.1) | Frappe before 14.59.0 Safe Execution Flag Bypass in Se… |
frappe |
frappe |
2026-10-12T22:21:38.705Z | 2026-10-15T14:03:30.211Z |
| cve-2026-108935 | Edimax BR-6208AC Port Forwarding formPortFw cross site… |
Edimax |
BR-6208AC |
2026-10-12T22:15:11.734Z | 2026-10-15T14:02:03.883Z | |
| cve-2026-108934 | Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting |
Edimax |
BR-6208AC |
2026-10-12T22:00:16.792Z | 2026-10-13T13:44:20.684Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-441 | Multiples vulnérabilités des équipements Cisco ASA et PIX. | 2008-09-04T00:00:00.000000 | 2008-09-04T00:00:00.000000 |
| certa-2008-avi-440 | Multiples vulnérabilités dans VLC | 2008-09-04T00:00:00.000000 | 2008-09-04T00:00:00.000000 |
| certa-2008-avi-439 | Vulnérabilité du noyau FreeBSD pour plateforme amd64 | 2008-09-04T00:00:00.000000 | 2008-09-04T00:00:00.000000 |
| certa-2008-avi-438 | Vulnérabilité dans IBM AIX | 2008-09-04T00:00:00.000000 | 2008-09-04T00:00:00.000000 |
| certa-2008-avi-437 | Vulnérabilité dans ClamAV | 2008-09-04T00:00:00.000000 | 2008-09-04T00:00:00.000000 |
| certa-2008-avi-436 | Vulnérabilité dans IBM WebSphere | 2008-09-02T00:00:00.000000 | 2008-09-02T00:00:00.000000 |
| certa-2008-avi-435 | Vulnérabilités de AWStats Totals | 2008-09-02T00:00:00.000000 | 2008-09-02T00:00:00.000000 |
| certa-2008-avi-434 | Vulnérabilité de HP Enterprise Discovery | 2008-08-29T00:00:00.000000 | 2008-08-29T00:00:00.000000 |
| certa-2008-avi-433 | Vulnérabilité dans libxml2 | 2008-08-29T00:00:00.000000 | 2008-08-29T00:00:00.000000 |
| certa-2008-avi-432 | Vulnérabilités dans Red Hat Directory Server | 2008-08-29T00:00:00.000000 | 2008-08-29T00:00:00.000000 |
| certa-2008-avi-431 | Vulnérabilité de IBM DB2 | 2008-08-27T00:00:00.000000 | 2008-08-27T00:00:00.000000 |
| certa-2008-avi-430 | Vulnérabilité dans Ruby | 2008-08-27T00:00:00.000000 | 2008-08-27T00:00:00.000000 |
| certa-2008-avi-429 | Vulnérabilité de Xen | 2008-08-27T00:00:00.000000 | 2008-08-27T00:00:00.000000 |
| certa-2008-avi-428 | Vulnérabilités dans des mises à jour d'OpenSSH sous Red Hat | 2008-08-22T00:00:00.000000 | 2008-08-29T00:00:00.000000 |
| certa-2008-avi-427 | Vulnérabilité dans divers produits Trend Micro | 2008-08-22T00:00:00.000000 | 2008-08-22T00:00:00.000000 |
| certa-2008-avi-426 | Multiples vulnérabilités dans Opera | 2008-08-20T00:00:00.000000 | 2008-08-20T00:00:00.000000 |
| certa-2008-avi-425 | Vulnérabilité dans IBM WebSphere | 2008-08-20T00:00:00.000000 | 2008-08-20T00:00:00.000000 |
| certa-2008-avi-424 | Vulnérabilité dans GnuTLS | 2008-08-20T00:00:00.000000 | 2008-08-20T00:00:00.000000 |
| certa-2008-avi-423 | Vulnérabilité dans Ovidentia | 2008-08-20T00:00:00.000000 | 2008-08-20T00:00:00.000000 |
| certa-2008-avi-422 | Multiples vulnérabilités dans xine | 2008-08-19T00:00:00.000000 | 2008-08-19T00:00:00.000000 |
| certa-2008-avi-421 | Vulnérabilité de VMware VirtualCenter | 2008-08-19T00:00:00.000000 | 2008-08-19T00:00:00.000000 |
| certa-2008-avi-420 | Vulnérabilités de Postfix | 2008-08-19T00:00:00.000000 | 2008-08-19T00:00:00.000000 |
| certa-2008-avi-419 | Vulnérabilité dans Symantec Storage Foundation for Windows | 2008-08-18T00:00:00.000000 | 2008-08-18T00:00:00.000000 |
| certa-2008-avi-418 | Multiples vulnérabilités dans Drupal | 2008-08-14T00:00:00.000000 | 2008-08-14T00:00:00.000000 |
| certa-2008-avi-417 | Multiples vulnérabilités dans PHP | 2008-08-14T00:00:00.000000 | 2008-08-14T00:00:00.000000 |
| certa-2008-avi-416 | Vulnérabilité dans Apache Tomcat | 2008-08-14T00:00:00.000000 | 2008-08-14T00:00:00.000000 |
| certa-2008-avi-415 | Vulnérabilité d'Alcatel OmniSwitch | 2008-08-14T00:00:00.000000 | 2008-08-14T00:00:00.000000 |
| certa-2008-avi-414 | Vulnérabilité dans Joomla! | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-413 | Vulnérabilité dans le contrôle ActiveX Snapshot Viewer d'Access | 2008-08-13T00:00:00.000000 | 2008-10-15T00:00:00.000000 |
| certa-2008-avi-412 | Multiples vulnérabilités dans Internet Explorer | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |