Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-102596 | Nango: Production flow RBAC bypass on private flow-rea… |
NangoHQ |
nango |
2026-10-12T21:58:26.250Z | 2026-10-14T11:49:26.276Z | |
| cve-2026-44828 | Qexo initialization endpoint can reset setup state and… |
Qexo |
Qexo |
2026-10-12T21:56:35.696Z | 2026-10-13T20:23:19.895Z | |
| cve-2026-54459 | FileRise: Missing CSRF enforcement for file creation a… |
error311 |
FileRise |
2026-10-12T21:55:15.872Z | 2026-10-13T13:45:09.011Z | |
| cve-2026-104140 | QGIS: Stored XSS in WFS3 getFeatures HTML page via une… |
qgis |
QGIS |
2026-10-12T21:53:29.041Z | 2026-10-13T14:55:49.324Z | |
| cve-2026-108933 | Edimax BR-6208AC formFilter cross site scripting |
Edimax |
BR-6208AC |
2026-10-12T21:45:11.710Z | 2026-10-16T17:19:10.453Z | |
| cve-2026-90911 | 7.5 (v3.1) | Maximo AI Service Denial of Service |
IBM |
Maximo AI Service |
2026-10-12T21:43:59.019Z | 2026-10-13T14:39:09.115Z |
| cve-2026-90912 | 7.5 (v3.1) | Maximo AI Service Denial of Service |
IBM |
Maximo AI Service |
2026-10-12T21:43:46.968Z | 2026-10-13T13:45:36.291Z |
| cve-2026-90920 | 9.8 (v3.1) | Maximo AI Service Code Injection |
IBM |
Maximo AI Service |
2026-10-12T21:43:33.003Z | 2026-10-13T14:39:09.252Z |
| cve-2026-90921 | 7.5 (v3.1) | Maximo AI Service Denial of Service |
IBM |
Maximo AI Service |
2026-10-12T21:42:46.414Z | 2026-10-13T14:39:09.378Z |
| cve-2026-92876 | 7.5 (v3.1) | IBM Maximo Application Suite - IoT Component Denial of… |
IBM |
Maximo Application Suite - IoT Component |
2026-10-12T21:42:42.280Z | 2026-10-16T17:19:19.257Z |
| cve-2026-49484 | Code for IBM i: Temporary files are visible to all users |
codefori |
vscode-ibmi |
2026-10-12T21:37:50.356Z | 2026-10-15T14:00:01.442Z | |
| cve-2026-49483 | Code for IBMi: Uses IBM i components with blind check … |
codefori |
vscode-ibmi |
2026-10-12T21:36:10.390Z | 2026-10-13T20:23:40.075Z | |
| cve-2026-53922 | odhcpd: pre-auth remote DoS via size_t underflow in dh… |
openwrt |
odhcpd |
2026-10-12T21:31:24.809Z | 2026-10-13T13:59:31.626Z | |
| cve-2026-108932 | Netcore NR268 DHCP Hostname filter_hosts_dump.cgi eval… |
Netcore |
NR268 |
2026-10-12T21:30:15.257Z | 2026-10-14T11:47:03.103Z | |
| cve-2026-41210 | Moonlight Qt: Remote heap buffer overflow in Moonlight… |
moonlight-stream |
moonlight-qt |
2026-10-12T21:25:03.303Z | 2026-10-13T15:02:18.935Z | |
| cve-2026-103658 | GNU Aspell 0.60.8.2 (first vulnerable version is … |
GNU |
Aspell |
2026-10-12T21:24:48.600Z | 2026-10-14T19:15:47.603Z | |
| cve-2026-102539 | Super Productivity: SuperSync E2EE setup uploads and s… |
super-productivity |
super-productivity |
2026-10-12T21:22:04.409Z | 2026-10-15T13:58:11.796Z | |
| cve-2026-84312 | Nginx UI: Casdoor SSO callback uses a constant `state`… |
0xJacky |
nginx-ui |
2026-10-12T21:16:56.072Z | 2026-10-14T11:36:49.978Z | |
| cve-2026-84360 | Nginx UI: OTP secure-session step-up can be bypassed v… |
0xJacky |
nginx-ui |
2026-10-12T21:08:04.687Z | 2026-10-13T14:00:35.965Z | |
| cve-2026-84316 | Nginx UI: nginx config directive denylist (ValidateCon… |
0xJacky |
nginx-ui |
2026-10-12T21:05:06.173Z | 2026-10-13T14:48:55.998Z | |
| cve-2026-84319 | Nginx UI: MCP configuration tools bypass restricted di… |
0xJacky |
nginx-ui |
2026-10-12T21:03:36.112Z | 2026-10-13T20:23:50.083Z | |
| cve-2026-18513 | 7.2 (v3.1) | IBM Maximo Application Suite - Location Service for Es… |
IBM |
Maximo Application Suite - Location Service for Esri Component |
2026-10-12T21:01:37.878Z | 2026-10-14T03:59:13.353Z |
| cve-2026-18517 | 7.7 (v3.1) | IBM Maximo Application Suite - Location Service for Es… |
IBM |
Maximo Application Suite - Location Service for Esri Component |
2026-10-12T21:01:30.355Z | 2026-10-13T14:39:09.498Z |
| cve-2026-18529 | 8.7 (v3.1) | IBM Maximo Application Suite - Location Service for Es… |
IBM |
Maximo Application Suite - Location Service for Esri Component |
2026-10-12T21:01:26.065Z | 2026-10-14T03:58:56.589Z |
| cve-2026-18533 | 6.5 (v3.1) | IBM Maximo Application Suite - Location Service for Es… |
IBM |
Maximo Application Suite - Location Service for Esri Component |
2026-10-12T21:01:22.257Z | 2026-10-14T03:59:14.071Z |
| cve-2026-18537 | 8.7 (v3.1) | IBM Maximo Application Suite - Location Service for Es… |
IBM |
Maximo Application Suite - Location Service for Esri Component |
2026-10-12T21:01:15.083Z | 2026-10-14T03:59:14.775Z |
| cve-2026-75881 | 7.5 (v3.1) | IBM Maximo Application Suite - IoT Component Denial of… |
IBM |
Maximo Application Suite - IoT Component |
2026-10-12T21:01:10.322Z | 2026-10-13T13:48:38.585Z |
| cve-2026-78673 | 7.5 (v3.1) | Maximo AI Service Improper Input Validation |
IBM |
Maximo AI Service |
2026-10-12T21:01:06.397Z | 2026-10-13T14:39:09.613Z |
| cve-2026-105052 | 7.5 (v3.1) | IBM Maximo Application Suite Information Disclosure |
IBM |
Maximo Application Suite |
2026-10-12T21:01:02.786Z | 2026-10-13T13:48:38.703Z |
| cve-2026-108931 | Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross … |
Netcore |
NR268 |
2026-10-12T21:00:15.658Z | 2026-10-15T13:56:40.661Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-411 | Multiples vulnérabilité de Microsoft PowerPoint | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-410 | Vulnérabilité dans Windows Messenger | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-409 | Multiples vulnérabilités dans le système d'événements de Microsoft Windows | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-408 | Vulnérabilité dans Outlook Express et Windows Mail | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-407 | Vulnérabilité dans Windows IPsec | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-406 | Vulnérabilité dans Windows Color Management System | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-405 | Multiples vulnérabilités dans des filtres Microsoft Office | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-404 | Vulnérabilités dans Microsoft Excel | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-403 | Vulnérabilité dans Microsoft Word | 2008-08-13T00:00:00.000000 | 2008-08-13T00:00:00.000000 |
| certa-2008-avi-402 | Multiples vulnérabilités dans Ruby | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-401 | Plusieurs vulnérabilités dans des produits CA | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-400 | Vulnérabilité de Solaris Trusted Extensions | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-399 | Vulnérabilité de McAfee Encrypted USB Manager | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-398 | Vulnérabilités dans Adobe Presenter | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-397 | Vulnérabilités dans Cygwin | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-396 | Vulnérabilité de PowerDNS Authoritative Server | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-395 | Vulnérabilité dans IBM Rational ClearQuest | 2008-08-12T00:00:00.000000 | 2008-08-12T00:00:00.000000 |
| certa-2008-avi-394 | Vulnérabilité dans Oracle BEA WebLogic Server | 2008-08-08T00:00:00.000000 | 2008-08-08T00:00:00.000000 |
| certa-2008-avi-393 | Vulnérabilité dans HP-UX libc | 2008-08-07T00:00:00.000000 | 2008-08-07T00:00:00.000000 |
| certa-2008-avi-392 | Multiples vulnérabilités dans Apache Tomcat | 2008-08-07T00:00:00.000000 | 2008-10-06T00:00:00.000000 |
| certa-2008-avi-391 | Vulnérabilités de Python | 2008-08-06T00:00:00.000000 | 2008-08-06T00:00:00.000000 |
| certa-2008-avi-390 | Multiples vulnérabilités dans Ingres | 2008-08-05T00:00:00.000000 | 2008-08-05T00:00:00.000000 |
| certa-2008-avi-389 | Faiblesse du Microsoft Protected Storage | 2008-08-05T00:00:00.000000 | 2008-08-05T00:00:00.000000 |
| certa-2008-avi-388 | Multiples vulnérabilités dans Mac OS X | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-387 | Vulnérabilité de libxslt | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-386 | Vulnérabilité CA ARCserve Backup | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-385 | Vulnérabilité dans HP-UX | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-384 | Vulnérabilité dans SAP MaxDB | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-383 | Vulnérabilités de phpMyAdmin | 2008-08-01T00:00:00.000000 | 2008-08-01T00:00:00.000000 |
| certa-2008-avi-382 | Multiples vulnérabilités de l'antivirus ClamAV | 2008-07-29T00:00:00.000000 | 2008-07-29T00:00:00.000000 |