Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108908 | Netcore NR268 Web UI l7_call_board_user_set.cgi eval c… |
Netcore |
NR268 |
2026-10-12T16:30:20.071Z | 2026-10-15T15:14:51.246Z | |
| cve-2026-85965 | 8 (v3.1) | Use-after-free in Progress MarkLogic Server JavaScript… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:30:00.120Z | 2026-10-15T18:05:30.987Z |
| cve-2026-85964 | 7.7 (v3.1) | Path traversal in Progress MarkLogic Server Query Console |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:29:18.206Z | 2026-10-15T18:05:42.014Z |
| cve-2026-85963 | 7.5 (v3.1) | Server-side request forgery and hard-coded key in Prog… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:28:11.381Z | 2026-10-15T18:05:49.934Z |
| cve-2026-94451 | 6.5 (v3.1) | Quarkus-hibernate-orm-rest-data-panache: quarkus-hiber… |
Red Hat |
Red Hat build of Quarkus 3.27.6.redhat |
2026-10-12T16:26:59.851Z | 2026-10-15T23:41:42.312Z |
| cve-2026-108907 | Netcore NR268 CGI Execution user_ok improper authentication |
Netcore |
NR268 |
2026-10-12T16:15:10.558Z | 2026-10-13T16:24:18.568Z | |
| cve-2026-85962 | 7.5 (v3.1) | Improper authentication in Progress MarkLogic Server S… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:12:26.825Z | 2026-10-15T18:06:02.073Z |
| cve-2026-85961 | 7.5 (v3.1) | Sensitive information exposure in Progress MarkLogic S… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:10:53.442Z | 2026-10-15T18:06:13.280Z |
| cve-2026-85960 | 7.5 (v3.1) | Cross-site request forgery in Progress MarkLogic Serve… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:09:50.674Z | 2026-10-14T10:51:06.456Z |
| cve-2026-85959 | 7.5 (v3.1) | Insufficient authentication logging in Progress MarkLo… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:08:48.107Z | 2026-10-15T18:06:20.986Z |
| cve-2026-109374 | 5.1 (v4.0) 5.5 (v3.1) | ZITADEL 3.0.0 before 4.19.2 Privilege Escalation via O… |
zitadel |
zitadel |
2026-10-12T16:05:46.811Z | 2026-10-13T17:27:50.947Z |
| cve-2026-109373 | 9.2 (v4.0) 8.1 (v3.1) | ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsig… |
zitadel |
zitadel |
2026-10-12T16:05:45.649Z | 2026-10-13T16:53:01.016Z |
| cve-2026-109372 | 9.3 (v4.0) 8.7 (v3.1) | ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML … |
zitadel |
zitadel |
2026-10-12T16:05:44.977Z | 2026-10-13T16:23:38.085Z |
| cve-2026-109371 | 8.8 (v4.0) 8.2 (v3.1) | ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username C… |
zitadel |
zitadel |
2026-10-12T16:05:44.304Z | 2026-10-15T02:55:04.399Z |
| cve-2026-109366 | 6.3 (v4.0) 3.7 (v3.1) | Zebra before 6.4.0 Gossiped Block Drop via Forged Coin… |
ZcashFoundation |
zebra |
2026-10-12T16:05:43.620Z | 2026-10-26T20:37:40.885Z |
| cve-2026-109365 | 6.3 (v4.0) 3.7 (v3.1) | Zebra before 6.4.0 Denial of Service via Same-Hash For… |
ZcashFoundation |
zebra |
2026-10-12T16:05:42.923Z | 2026-10-13T17:28:36.728Z |
| cve-2026-109364 | 6.9 (v4.0) 5.3 (v3.1) | Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying |
ZcashFoundation |
zebra |
2026-10-12T16:05:42.223Z | 2026-10-13T16:53:12.902Z |
| cve-2026-109363 | 8.7 (v4.0) 7.5 (v3.1) | Zebra 6.4.0 before 6.4.2 Denial of Service via Malform… |
ZcashFoundation |
zebra |
2026-10-12T16:05:41.576Z | 2026-10-13T16:22:00.063Z |
| cve-2026-109362 | 5.3 (v4.0) 5.4 (v3.1) | Heym v0.0.5 before v0.0.113 Broken Access Control via … |
heymrun |
heym |
2026-10-12T16:05:40.951Z | 2026-10-15T02:54:11.169Z |
| cve-2026-109361 | 7 (v4.0) 7.3 (v3.1) | MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE … |
Project-MONAI |
MONAI |
2026-10-12T16:05:40.286Z | 2026-10-26T20:38:53.960Z |
| cve-2026-109360 | 7.7 (v4.0) 7.5 (v3.1) | MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weig… |
Project-MONAI |
MONAI |
2026-10-12T16:05:39.587Z | 2026-10-13T17:29:37.331Z |
| cve-2026-109359 | 8.7 (v4.0) 7.7 (v3.1) | Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifes… |
edgelesssys |
contrast |
2026-10-12T16:05:38.925Z | 2026-10-13T16:53:24.261Z |
| cve-2026-109358 | 8.5 (v4.0) 7.8 (v3.1) | Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Wr… |
edgelesssys |
contrast |
2026-10-12T16:05:38.236Z | 2026-10-13T16:20:40.392Z |
| cve-2026-109357 | 9.2 (v4.0) 8.1 (v3.1) | LibreNMS before 26.9.0 LDAP Filter Injection Authentic… |
librenms |
librenms |
2026-10-12T16:05:37.653Z | 2026-10-15T02:53:11.147Z |
| cve-2026-109356 | 5.3 (v4.0) 4.3 (v3.1) | LibreNMS before 26.9.0 Missing Authorization in Port P… |
librenms |
librenms |
2026-10-12T16:05:37.065Z | 2026-10-26T16:46:47.760Z |
| cve-2026-109355 | 5.3 (v4.0) 6.1 (v3.1) | LibreNMS before 26.9.0 Stored XSS via Tools Oxidized N… |
librenms |
librenms |
2026-10-12T16:05:36.441Z | 2026-10-13T17:31:03.733Z |
| cve-2026-109354 | 5.3 (v4.0) 4.3 (v3.1) | LibreNMS before 26.9.0 Path Traversal via NFSen channe… |
librenms |
librenms |
2026-10-12T16:05:35.816Z | 2026-10-13T16:53:32.764Z |
| cve-2026-109353 | 7.1 (v4.0) 7.1 (v3.1) | LibreNMS before 26.9.0 SQL Injection via notification_… |
librenms |
librenms |
2026-10-12T16:05:35.123Z | 2026-10-13T16:19:23.695Z |
| cve-2026-109352 | 5.3 (v4.0) 6.1 (v3.1) | LibreNMS before 26.9.0 Stored XSS via wireless sensor … |
librenms |
librenms |
2026-10-12T16:05:34.483Z | 2026-10-15T02:51:47.970Z |
| cve-2026-109351 | 7.1 (v4.0) 6.5 (v3.1) | Gitoxide gix-pack before 0.75.0 Denial of Service via … |
GitoxideLabs |
gix-pack |
2026-10-12T16:05:33.808Z | 2026-10-26T16:46:47.900Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-227 | Vulnérabilité dans IBM Lotus Expeditor | 2008-05-02T00:00:00.000000 | 2008-05-02T00:00:00.000000 |
| certa-2008-avi-226 | Vulnérabilité dans IBM WebSphere Application Server | 2008-05-02T00:00:00.000000 | 2008-05-02T00:00:00.000000 |
| certa-2008-avi-225 | Multiples vulnérabilités dans PHP | 2008-05-02T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-224 | Vulnérabilité dans SNMPc | 2008-05-02T00:00:00.000000 | 2008-05-02T00:00:00.000000 |
| certa-2008-avi-223 | Vulnérabilité dans WordPress | 2008-05-02T00:00:00.000000 | 2008-05-02T00:00:00.000000 |
| certa-2008-avi-222 | Vulnérabilité dans phpMyAdmin | 2008-04-23T00:00:00.000000 | 2008-04-23T00:00:00.000000 |
| certa-2008-avi-221 | Vulnérabilité dans mplayer | 2008-04-21T00:00:00.000000 | 2008-09-18T00:00:00.000000 |
| certa-2008-avi-220 | Vulnérabilité dans Xpdf | 2008-04-18T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-219 | Vulnérabilité dans la bibliothèque speex | 2008-04-18T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-218 | Multiples vulnérabilités dans OpenOffice.org | 2008-04-18T00:00:00.000000 | 2008-05-19T00:00:00.000000 |
| certa-2008-avi-217 | Vulnérabilité dans BusinessObjects XI | 2008-04-18T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-216 | Multiples vulnérabilités dans BEA JRockit | 2008-04-18T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-215 | Vulnérabilité dans Dotclear | 2008-04-18T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-214 | Multiples vulnérabilités dans HP Openview | 2008-04-17T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-213 | Vulnérabilités dans IBM DB2 | 2008-04-17T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-212 | Vulnérabilité dans divers produits Computer Associates | 2008-04-17T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-211 | Multiples vulnérabilités dans Apple Safari | 2008-04-17T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-210 | Vulnérabilité dans Cisco NAC Appliance | 2008-04-17T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-209 | Vulnérabilité de Firefox | 2008-04-17T00:00:00.000000 | 2008-04-18T00:00:00.000000 |
| certa-2008-avi-208 | Multiples vulnérabilités dans les produits Oracle | 2008-04-16T00:00:00.000000 | 2008-04-17T00:00:00.000000 |
| certa-2008-avi-207 | Multiples vulnérabilités dans VMware ESX Server | 2008-04-16T00:00:00.000000 | 2008-04-16T00:00:00.000000 |
| certa-2008-avi-206 | Multiples vulnérabilités dans ClamAV | 2008-04-15T00:00:00.000000 | 2008-04-15T00:00:00.000000 |
| certa-2008-avi-205 | Vulnérabilité dans Symantec Altiris Deployment Solution | 2008-04-14T00:00:00.000000 | 2008-04-14T00:00:00.000000 |
| certa-2008-avi-204 | Vulnérabilités dans IBM HTTP Server | 2008-04-14T00:00:00.000000 | 2008-04-14T00:00:00.000000 |
| certa-2008-avi-203 | Vulnérabilité dans rsync | 2008-04-14T00:00:00.000000 | 2008-04-14T00:00:00.000000 |
| certa-2008-avi-202 | Vulnérabilité dans HP Storage Essentials | 2008-04-10T00:00:00.000000 | 2008-04-10T00:00:00.000000 |
| certa-2008-avi-201 | Vulnérabilités dans Drupal | 2008-04-10T00:00:00.000000 | 2008-04-10T00:00:00.000000 |
| certa-2008-avi-200 | Vulnérabilité du logiciel Adobe ColdFusion | 2008-04-10T00:00:00.000000 | 2008-04-10T00:00:00.000000 |
| certa-2008-avi-199 | Multiples vulnérabilités d'IBM Lotus Notes | 2008-04-10T00:00:00.000000 | 2008-04-10T00:00:00.000000 |
| certa-2008-avi-198 | Vulnérabilités dans Symantec Mail Security | 2008-04-10T00:00:00.000000 | 2008-04-10T00:00:00.000000 |