Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108931 | Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross … |
Netcore |
NR268 |
2026-10-12T21:00:15.658Z | 2026-10-15T13:56:40.661Z | |
| cve-2026-84317 | Nginx UI: MCP nginx_config_add skips config directive … |
0xJacky |
nginx-ui |
2026-10-12T20:59:58.019Z | 2026-10-13T17:50:15.931Z | |
| cve-2026-109571 | 2.3 (v4.0) 4.3 (v3.1) | Fire-Boltt BSW013 firmware through V0.0.8 Unauthentica… |
Fire-Boltt |
BSW013 |
2026-10-12T20:55:23.061Z | 2026-10-26T16:46:47.478Z |
| cve-2026-109570 | 5.3 (v4.0) 4.3 (v3.1) | Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE N… |
Fire-Boltt |
BSW013 |
2026-10-12T20:55:22.392Z | 2026-10-13T14:03:42.382Z |
| cve-2026-109569 | 9.3 (v4.0) 8.8 (v3.1) | sandboxed.sh through 1.3.0 Container Escape via nsente… |
Th0rgal |
sandboxed.sh |
2026-10-12T20:55:21.738Z | 2026-10-13T16:46:33.737Z |
| cve-2026-109568 | 7.1 (v4.0) 7.1 (v3.1) | Shaark 1.2.13 through 1.2.44 Missing Authorization via… |
MarceauKa |
Shaark |
2026-10-12T20:55:21.102Z | 2026-10-13T17:47:33.205Z |
| cve-2026-109567 | 8.6 (v4.0) 7.2 (v3.1) | Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalat… |
zofe |
rapyd-admin |
2026-10-12T20:55:20.456Z | 2026-10-15T13:55:31.753Z |
| cve-2026-109566 | 9.3 (v4.0) 9.8 (v3.1) | Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin… |
zofe |
rapyd-admin |
2026-10-12T20:55:19.825Z | 2026-10-26T16:46:47.619Z |
| cve-2026-109565 | 5.3 (v4.0) 6.1 (v3.1) | Rapyd Admin 9.4.0 before 9.20.0 Stored XSS via select-… |
zofe |
rapyd-admin |
2026-10-12T20:55:18.173Z | 2026-10-13T15:38:11.194Z |
| cve-2026-109564 | 2.3 (v4.0) 3.1 (v3.1) | LearnHouse before 1.4.0 Missing Authorization via Play… |
learnhouse |
LearnHouse |
2026-10-12T20:55:17.509Z | 2026-10-27T01:30:43.708Z |
| cve-2026-109563 | 8.7 (v4.0) 7.5 (v3.1) | N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex |
rdfjs |
N3.js |
2026-10-12T20:55:16.880Z | 2026-10-14T11:33:26.609Z |
| cve-2026-109562 | 5.3 (v4.0) 5.4 (v3.1) | SnapOtter 1.15.10 through 2.2.0 Missing Authorization … |
snapotter-hq |
SnapOtter |
2026-10-12T20:55:16.236Z | 2026-10-15T13:53:59.243Z |
| cve-2026-109561 | 2.3 (v4.0) 4.2 (v3.1) | goose from 1.28.0 before 1.44.0 Manual Approval Bypass… |
aaif-goose |
goose |
2026-10-12T20:55:15.574Z | 2026-10-26T17:37:12.108Z |
| cve-2026-109560 | 7.7 (v4.0) 7.5 (v3.1) | Continue CLI through 1.5.47 Bash Permission Rule Bypas… |
continuedev |
continue |
2026-10-12T20:55:14.911Z | 2026-10-13T15:39:07.306Z |
| cve-2026-109559 | 8.4 (v4.0) 8.7 (v3.1) | EdgeEver Desktop 1.6.26 through 1.112.0 Navigation All… |
tianma-if |
EdgeEver |
2026-10-12T20:55:14.269Z | 2026-10-13T16:52:15.376Z |
| cve-2026-109558 | 8.5 (v4.0) 8.7 (v3.1) | EdgeEver 1.6.0 through 1.112.0 Stored XSS via Template… |
tianma-if |
EdgeEver |
2026-10-12T20:55:13.683Z | 2026-10-13T17:45:41.208Z |
| cve-2026-109557 | 8.4 (v4.0) 8.7 (v3.1) | EdgeEver through 1.112.0 Stored XSS via setMemoDragPre… |
tianma-if |
EdgeEver |
2026-10-12T20:55:13.067Z | 2026-10-15T13:53:01.160Z |
| cve-2026-109556 | 7.3 (v4.0) 8 (v3.1) | EdgeEver Desktop 1.92.0 through 1.112.0 Local Program … |
tianma-if |
EdgeEver |
2026-10-12T20:55:12.388Z | 2026-10-26T20:30:03.558Z |
| cve-2026-109380 | 8.7 (v4.0) 7.5 (v3.1) | modern-tar 0.3.5 through 0.8.5 Memory Exhaustion via M… |
ayuhito |
modern-tar |
2026-10-12T20:55:11.774Z | 2026-10-13T15:40:11.463Z |
| cve-2026-109379 | 6.9 (v4.0) 5.3 (v3.1) | Cockpit CMS 2.14.1 Account Enumeration via Timing Disc… |
cockpit-hq |
cockpit |
2026-10-12T20:55:11.101Z | 2026-10-13T16:52:23.847Z |
| cve-2026-109378 | 5.3 (v4.0) 4.3 (v3.1) | SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url |
SPIP |
SPIP |
2026-10-12T20:55:10.466Z | 2026-10-13T17:40:53.702Z |
| cve-2026-109377 | 5.3 (v4.0) 4.3 (v3.1) | ERPNext 9.0.0 through 16.50.0 Missing Authorization in… |
Frappe |
ERPNext |
2026-10-12T20:55:09.844Z | 2026-10-15T13:51:52.605Z |
| cve-2026-109376 | 5.3 (v4.0) 4.3 (v3.1) | ERPNext 15.55.0 through 16.50.0 Incorrect Authorizatio… |
Frappe |
ERPNext |
2026-10-12T20:55:09.200Z | 2026-10-26T20:32:04.476Z |
| cve-2026-109375 | 4.9 (v4.0) 6.1 (v3.1) | Vercel deepsec before 1.1.17 Arbitrary File Write via … |
Vercel |
deepsec |
2026-10-12T20:55:08.596Z | 2026-10-13T15:45:01.735Z |
| cve-2025-71429 | 9.3 (v4.0) 9.8 (v3.1) | GPT-SoVITS through 20250606v2pro OS Command Injection … |
RVC-Boss |
GPT-SoVITS |
2026-10-12T20:55:07.939Z | 2026-10-13T16:52:35.566Z |
| cve-2024-58389 | 5.1 (v4.0) 6.1 (v3.1) | HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect vi… |
HoloViz |
Panel |
2026-10-12T20:55:07.301Z | 2026-10-13T17:39:31.645Z |
| cve-2022-51020 | 6 (v4.0) 5.9 (v3.1) | Flower before 2.2.0 CSRF via Worker and Task Control A… |
mher |
flower |
2026-10-12T20:55:06.611Z | 2026-10-15T13:49:48.409Z |
| cve-2021-48012 | 8.8 (v4.0) 8.2 (v3.1) | fast-toml through 0.5.4 Prototype Pollution via __prot… |
Gin-Quin |
fast-toml |
2026-10-12T20:55:05.966Z | 2026-10-26T17:37:12.265Z |
| cve-2021-48011 | 8.7 (v4.0) 7.5 (v3.1) | Servor 1.0.0 through 4.0.2 Unauthenticated Path Traver… |
lukejacksonn |
servor |
2026-10-12T20:55:05.305Z | 2026-10-13T15:46:58.068Z |
| cve-2020-37280 | 8.7 (v4.0) 7.5 (v3.1) | cbor-sync through 1.0.4 Memory Exhaustion via Unchecke… |
PelionIoT |
cbor-sync |
2026-10-12T20:55:04.662Z | 2026-10-13T16:52:41.604Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-381 | Vulnérabilité dans AVG Anti-Virus | 2008-07-29T00:00:00.000000 | 2008-07-29T00:00:00.000000 |
| certa-2008-avi-380 | Multiples vulnérabilités dans VMware ESX | 2008-07-29T00:00:00.000000 | 2008-07-29T00:00:00.000000 |
| certa-2008-avi-379 | Vulnérabilité de openSUSE | 2008-07-28T00:00:00.000000 | 2008-07-28T00:00:00.000000 |
| certa-2008-avi-378 | Multiples vulnérabilités dans RealPlayer | 2008-07-28T00:00:00.000000 | 2008-07-28T00:00:00.000000 |
| certa-2008-avi-377 | Vulnérabilité dans Drupal | 2008-07-25T00:00:00.000000 | 2008-07-25T00:00:00.000000 |
| certa-2008-avi-376 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2008-07-25T00:00:00.000000 | 2008-07-25T00:00:00.000000 |
| certa-2008-avi-375 | Multiples vulnéabilités dans dnsmasq | 2008-07-25T00:00:00.000000 | 2008-07-25T00:00:00.000000 |
| certa-2008-avi-374 | Vulnérabilités de Claroline | 2008-07-25T00:00:00.000000 | 2008-07-25T00:00:00.000000 |
| certa-2008-avi-373 | Multiples vulnérabilités dans les produits Asterisk | 2008-07-24T00:00:00.000000 | 2008-07-24T00:00:00.000000 |
| certa-2008-avi-372 | Vulnérabilité dans IBM WebSphere Application Server | 2008-07-18T00:00:00.000000 | 2008-07-18T00:00:00.000000 |
| certa-2008-avi-371 | Vulnérabilités de l'antivirus F-Prot | 2008-07-18T00:00:00.000000 | 2008-07-18T00:00:00.000000 |
| certa-2008-avi-370 | Vulnérabilité dans des produits BlackBerry | 2008-07-18T00:00:00.000000 | 2008-07-18T00:00:00.000000 |
| certa-2008-avi-369 | Multiples vulnérabilités dans Claroline | 2008-07-17T00:00:00.000000 | 2008-07-17T00:00:00.000000 |
| certa-2008-avi-368 | Vulnérabilités dans Mozilla Firefox | 2008-07-17T00:00:00.000000 | 2008-07-17T00:00:00.000000 |
| certa-2008-avi-367 | Multiples vulnérabilités dans les produits Oracle et Weblogic | 2008-07-16T00:00:00.000000 | 2008-07-16T00:00:00.000000 |
| certa-2008-avi-366 | Multiples vulnérabilités dans la machine virtuelle Java de Sun | 2008-07-11T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-365 | Multiples vulnérabilités dans Drupal | 2008-07-11T00:00:00.000000 | 2008-07-11T00:00:00.000000 |
| certa-2008-avi-364 | Vulnérabilité du langage Ruby | 2008-07-11T00:00:00.000000 | 2008-07-11T00:00:00.000000 |
| certa-2008-avi-363 | Vulnérabilité dans Novell eDirectory | 2008-07-10T00:00:00.000000 | 2008-07-10T00:00:00.000000 |
| certa-2008-avi-362 | Vulnérabilités dans Opera | 2008-07-10T00:00:00.000000 | 2008-07-10T00:00:00.000000 |
| certa-2008-avi-361 | Vulnérabilité dans PCRE | 2008-07-10T00:00:00.000000 | 2008-07-10T00:00:00.000000 |
| certa-2008-avi-360 | Vulnérabilité dans l'implémentation du protocole DNS par Juniper | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-359 | Vulnérabilités dans ISC BIND | 2008-07-09T00:00:00.000000 | 2008-07-25T00:00:00.000000 |
| certa-2008-avi-358 | Vulnérabilité dans les produits Cisco | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-357 | Vulnérabilités dans Joomla! | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-356 | Multiples vulnérabilités dans Microsoft SQL Server | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-355 | Vulnérabilités dans Open Web Access | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-354 | Vulnrabilité de l'explorateur de fichiers Windows | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-353 | Vulnérabilité DNS dans Microsoft Windows | 2008-07-09T00:00:00.000000 | 2008-07-09T00:00:00.000000 |
| certa-2008-avi-352 | Vulnérabilités dans Avaya Call Management System | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |