Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2020-37279 | 9.2 (v4.0) 8.1 (v3.1) | easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injectio… |
karuppiah7890 |
easy-pdf-merge |
2026-10-12T20:55:03.883Z | 2026-10-13T17:36:30.801Z |
| cve-2026-16678 | 4.5 (v3.1) | IBM Power Systems Firmware Denial of Service |
IBM |
Virtualization Management Interface |
2026-10-12T20:52:45.137Z | 2026-10-12T22:53:58.146Z |
| cve-2026-96261 | 7.3 (v3.1) | IBM Power Systems Firmware Buffer Overflow |
IBM |
PowerVM Hypervisor |
2026-10-12T20:52:36.496Z | 2026-10-12T22:53:58.291Z |
| cve-2026-96262 | 8.2 (v3.1) | IBM Power Systems Firmware Buffer Overflow |
IBM |
PowerVM Hypervisor |
2026-10-12T20:52:28.751Z | 2026-10-13T11:57:49.401Z |
| cve-2026-96263 | 8.2 (v3.1) | IBM Power Systems Firmware Buffer Overflow |
IBM |
PowerVM Hypervisor |
2026-10-12T20:52:20.625Z | 2026-10-13T11:57:49.528Z |
| cve-2026-96264 | 8.2 (v3.1) | IBM Power Systems Firmware Buffer Overflow |
IBM |
PowerVM Hypervisor |
2026-10-12T20:52:10.876Z | 2026-10-13T11:57:49.645Z |
| cve-2026-96265 | 8.2 (v3.1) | IBM Power Systems Firmware Improper Memory Buffer Rest… |
IBM |
PowerVM Hypervisor |
2026-10-12T20:52:00.904Z | 2026-10-13T11:57:49.766Z |
| cve-2026-96266 | 8.2 (v3.1) | IBM Power Systems Firmware Buffer Overflow |
IBM |
PowerVM Hypervisor |
2026-10-12T20:51:56.396Z | 2026-10-13T11:57:49.892Z |
| cve-2026-84313 | Nginx UI: TOTP / passkey enrolment requires no re-auth… |
0xJacky |
nginx-ui |
2026-10-12T20:51:44.751Z | 2026-10-15T13:48:40.557Z | |
| cve-2026-84321 | Nginx UI: Standalone short tokens survive administrati… |
0xJacky |
nginx-ui |
2026-10-12T20:49:36.955Z | 2026-10-13T15:50:29.123Z | |
| cve-2026-53997 | 9.1 (v4.0) 7.4 (v3.1) | Netherman Portal del Hermano Account Takeover via Pass… |
NetHerman |
Portal del Hermano (portaldelhermano.es) |
2026-10-12T20:48:31.361Z | 2026-10-15T13:47:26.687Z |
| cve-2026-84314 | Nginx UI: Account Takeover via Missing `RequireSecureS… |
0xJacky |
nginx-ui |
2026-10-12T20:47:51.561Z | 2026-10-13T17:32:02.947Z | |
| cve-2026-108930 | Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_lis… |
Netcore |
NR268 |
2026-10-12T20:45:12.622Z | 2026-10-13T15:53:31.469Z | |
| cve-2026-84320 | Nginx UI: Auto backup name allows path traversal outsi… |
0xJacky |
nginx-ui |
2026-10-12T20:44:39.471Z | 2026-10-13T20:24:05.329Z | |
| cve-2026-109427 | 7.1 (v4.0) 6.5 (v3.1) | Telegram-Stremio 5.1.0 Broken Object Authorization via… |
weebzone |
Telegram-Stremio |
2026-10-12T20:35:49.858Z | 2026-10-26T20:33:54.245Z |
| cve-2026-109426 | 8.2 (v4.0) 7.5 (v3.1) | Telegram-Stremio 5.1.0 Insecure Session Storage via en… |
weebzone |
Telegram-Stremio |
2026-10-12T20:34:18.671Z | 2026-10-13T15:54:08.333Z |
| cve-2026-108929 | Netcore NR268 DDNS DDNSset.cgi execvp argument injection |
Netcore |
NR268 |
2026-10-12T20:30:18.334Z | 2026-10-16T17:19:27.963Z | |
| cve-2026-84318 | Nginx UI: MCP `nginx_config_add` Bypasses Directive Va… |
0xJacky |
nginx-ui |
2026-10-12T20:20:18.595Z | 2026-10-13T14:59:04.180Z | |
| cve-2026-108928 | itsourcecode Online Admission System sum.php sql injection |
itsourcecode |
Online Admission System |
2026-10-12T20:15:14.118Z | 2026-10-13T17:29:45.463Z | |
| cve-2026-97691 | Convex: Unauthorized data access |
get-convex |
convex-backend |
2026-10-12T20:15:02.873Z | 2026-10-15T13:45:39.838Z | |
| cve-2026-106495 | Backstage: Improper access control in backend action i… |
backstage |
backstage |
2026-10-12T20:11:07.680Z | 2026-10-13T14:57:21.381Z | |
| cve-2026-92120 | Apache Allura: Oauth1 Replay Attack |
Apache Software Foundation |
Apache Allura |
2026-10-12T20:08:15.489Z | 2026-10-16T17:59:19.908Z | |
| cve-2026-92119 | Apache Allura: REST API Mass Assignment |
Apache Software Foundation |
Apache Allura |
2026-10-12T20:06:52.868Z | 2026-10-16T17:56:57.098Z | |
| cve-2026-84315 | Nginx UI OTP secure-session step-up is missing on sens… |
0xJacky |
nginx-ui |
2026-10-12T20:06:50.499Z | 2026-10-13T15:55:15.155Z | |
| cve-2026-92116 | Apache Allura: OAuth1 missing callback validation |
Apache Software Foundation |
Apache Allura |
2026-10-12T20:04:28.948Z | 2026-10-16T17:55:16.465Z | |
| cve-2026-41508 | OWASP Coraza WAF: Truncated multipart body bypasses MU… |
corazawaf |
coraza |
2026-10-12T20:01:09.451Z | 2026-10-13T20:24:17.217Z | |
| cve-2026-108927 | itsourcecode Baptism Information Management System pba… |
itsourcecode |
Baptism Information Management System |
2026-10-12T20:00:17.398Z | 2026-10-15T13:44:41.185Z | |
| cve-2026-41504 | OWASP Coraza WAF: Native audit-log format allows CRLF … |
corazawaf |
coraza |
2026-10-12T19:59:45.696Z | 2026-10-13T17:26:41.295Z | |
| cve-2026-104774 | OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape … |
corazawaf |
coraza |
2026-10-12T19:58:39.383Z | 2026-10-13T15:56:59.766Z | |
| cve-2026-41510 | OWASP Coraza WAF: Silent argument drop at ArgumentLimi… |
corazawaf |
coraza |
2026-10-12T19:57:39.658Z | 2026-10-15T13:43:31.551Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-351 | Vulnérabilité de Sun Solaris | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-350 | Multiples vulnérabilités dans Firefox 2 | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-349 | Multiples vulnérabilités dans Sun Solaris | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-348 | Vulnérabilité dans VLC Media Player | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-347 | Vulnérabilité de Sun Java System Access Manager | 2008-07-04T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-346 | Vulnérabilité dans Novell Client | 2008-07-02T00:00:00.000000 | 2008-07-02T00:00:00.000000 |
| certa-2008-avi-345 | Vulnérabilités dans Python | 2008-07-02T00:00:00.000000 | 2008-07-02T00:00:00.000000 |
| certa-2008-avi-344 | Vulnérabilité dans D-Bus | 2008-07-02T00:00:00.000000 | 2008-07-02T00:00:00.000000 |
| certa-2008-avi-343 | Multiples vulnérabilités dans Apple Mac OS X | 2008-07-02T00:00:00.000000 | 2008-07-02T00:00:00.000000 |
| certa-2008-avi-342 | Multiples vulnérabilités dans Ruby | 2008-06-27T00:00:00.000000 | 2008-06-27T00:00:00.000000 |
| certa-2008-avi-341 | Vulnérabilités dans Mambo | 2008-06-27T00:00:00.000000 | 2008-06-27T00:00:00.000000 |
| certa-2008-avi-340 | Vulnérabilité dans Cisco VPN Client | 2008-06-26T00:00:00.000000 | 2008-06-26T00:00:00.000000 |
| certa-2008-avi-339 | Vulnérabilités dans Cisco Unified Communications Manager | 2008-06-26T00:00:00.000000 | 2008-06-26T00:00:00.000000 |
| certa-2008-avi-338 | Vulnérabilité dans Cisco Wide Area Application Services | 2008-06-26T00:00:00.000000 | 2008-06-26T00:00:00.000000 |
| certa-2008-avi-337 | Multiples vulnérabilités du serveur CIFS de HP-UX | 2008-06-25T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-336 | Vulnérabilité dans les produits Adobe | 2008-06-25T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-335 | Vulnérabilité dans Novell GroupWise | 2008-06-25T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-334 | Vulnérabilité dans phpMyAdmin | 2008-06-24T00:00:00.000000 | 2008-06-27T00:00:00.000000 |
| certa-2008-avi-333 | Vulnérabilité dans Sun Solaris | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-332 | Multiples vulnérabilités dans HP Storage Management Appliance | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-331 | Vulnérabilité du navigateur Safari | 2008-06-20T00:00:00.000000 | 2008-07-04T00:00:00.000000 |
| certa-2008-avi-330 | Vulnérabilité de Novell eDirectory | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-329 | Vulnérabilité de l'implémentation TCP sous FreeBSD | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-328 | Vulnérabilité dans Sun Java System Calendar Server | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-327 | Vulnérabilité dans Perl | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-326 | Vulnérabilité dans Adobe Flex 3 | 2008-06-20T00:00:00.000000 | 2008-06-20T00:00:00.000000 |
| certa-2008-avi-325 | Vulnérabilité dans CA ARCserve Backup | 2008-06-19T00:00:00.000000 | 2008-06-19T00:00:00.000000 |
| certa-2008-avi-324 | Vulnérabilité dans Sun Solaris | 2008-06-18T00:00:00.000000 | 2008-06-18T00:00:00.000000 |
| certa-2008-avi-323 | Vulnérabilités dans Horde | 2008-06-17T00:00:00.000000 | 2008-06-27T00:00:00.000000 |
| certa-2008-avi-322 | Vulnérabilité dans rdesktop | 2008-06-17T00:00:00.000000 | 2008-06-17T00:00:00.000000 |