Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114388 | 6.9 (v4.0) 5.3 (v3.1) | Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Au… |
chamilo |
chamilo-lms |
2026-10-21T12:39:45.276Z | 2026-10-28T16:23:32.198Z |
| cve-2026-113744 | Tenda AC19 httpd Web Management Service SetFirewallCfg… |
Tenda |
AC19 |
2026-10-21T01:30:24.075Z | 2026-10-28T16:21:28.084Z | |
| cve-2026-114119 | 9.3 (v4.0) 9.8 (v3.1) | Best Practice Software Bp Premier before 1.14.1.1128 H… |
Best Practice Software |
Bp Premier |
2026-10-21T00:37:16.230Z | 2026-10-28T16:19:31.357Z |
| cve-2026-114114 | 6 (v4.0) 5.3 (v3.1) | Vyper through 0.5.0b1 Literal Value Substitution via M… |
vyperlang |
vyper |
2026-10-21T00:37:12.518Z | 2026-10-28T16:17:33.395Z |
| cve-2026-117556 | 5.3 (v4.0) 4.3 (v3.1) | zchunk before 1.5.5 Heap Out-of-Bounds Read via read_p… |
zchunk |
zchunk |
2026-10-27T13:07:51.708Z | 2026-10-28T16:17:15.487Z |
| cve-2026-117560 | 8.5 (v4.0) 7.8 (v3.1) | ATXP Gemini CLI Extension through 1.0.0 OS Command Inj… |
atxp |
gemini-cli-extension |
2026-10-27T13:07:55.594Z | 2026-10-28T16:17:06.328Z |
| cve-2026-117564 | 9.3 (v4.0) 9.8 (v3.1) | nest-admin before 1.0.1 Authentication Bypass via Hard… |
buqiyuan |
nest-admin |
2026-10-27T13:07:58.360Z | 2026-10-28T16:16:56.709Z |
| cve-2026-117568 | 7.3 (v4.0) 7 (v3.1) | mcp-ffmpeg through 1.0.5 OS Command Injection via vide… |
bitscorp-mcp |
mcp-ffmpeg |
2026-10-27T13:08:01.183Z | 2026-10-28T16:16:50.835Z |
| cve-2026-117601 | 9.3 (v4.0) 7.5 (v3.1) | Electrum before 4.8.3 Missing Signature Verification o… |
spesmilo |
electrum |
2026-10-27T13:09:51.347Z | 2026-10-28T16:16:43.752Z |
| cve-2026-93523 | 7.8 (v3.1) | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T16:16:42.058Z | 2026-10-28T16:16:42.058Z |
| cve-2026-90726 | 6 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T13:37:21.805Z | 2026-10-28T16:16:30.645Z |
| cve-2026-117505 | a2aproject a2a-java ChildQueue queue.offer resource co… |
a2aproject |
a2a-java |
2026-10-27T14:30:19.859Z | 2026-10-28T16:16:24.531Z | |
| cve-2026-117509 | crownpku Rasa_NLU_Chi Model Persistor persistor.py Per… |
crownpku |
Rasa_NLU_Chi |
2026-10-27T15:30:18.930Z | 2026-10-28T16:16:18.865Z | |
| cve-2026-112353 | 6.2 (v4.0) 8.2 (v3.1) | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI USA, LLC |
GFI KerioConnect |
2026-10-27T16:10:08.568Z | 2026-10-28T16:16:12.399Z |
| cve-2026-48380 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.580Z | 2026-10-28T16:16:04.990Z |
| cve-2026-114109 | 8.7 (v4.0) 8.8 (v3.1) | uv before 0.11.15 Arbitrary File Write via Entry Point Names |
astral-sh |
uv |
2026-10-21T00:37:08.897Z | 2026-10-28T16:15:57.817Z |
| cve-2026-117512 | oretnom23 php-travel-agency-system employee_insert.php… |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:30:18.263Z | 2026-10-28T16:15:55.262Z | |
| cve-2026-116673 | systeminformation: Path traversal in Linux networkStat… |
sebhildebrandt |
systeminformation |
2026-10-27T16:38:15.558Z | 2026-10-28T16:15:47.864Z | |
| cve-2026-116675 | TinyMCE Cross-Site Scripting (XSS) vulnerability using… |
tinymce |
tinymce |
2026-10-27T16:47:01.183Z | 2026-10-28T16:15:12.999Z | |
| cve-2026-114104 | 8.2 (v4.0) 5.9 (v3.1) | adm-zip before 0.6.1 Duplicate ZIP Entry Name Validati… |
cthackers |
adm-zip |
2026-10-21T00:37:05.291Z | 2026-10-28T16:14:55.229Z |
| cve-2026-57189 | Asterisk: Possible RED T.140 Generation Accumulation O… |
asterisk |
asterisk |
2026-10-27T16:59:46.057Z | 2026-10-28T16:14:48.359Z | |
| cve-2026-104354 | 9.1 (v3.1) | Adobe Campaign Classic (ACC) | Improper Neutralization… |
Adobe |
Adobe Campaign Classic |
2026-10-27T17:03:34.305Z | 2026-10-28T16:14:22.371Z |
| cve-2026-117515 | oretnom23 php-travel-agency-system traceapplication.ph… |
oretnom23 |
php-travel-agency-system |
2026-10-27T17:15:14.553Z | 2026-10-28T16:14:08.352Z | |
| cve-2026-116679 | Neko: Authorization bypass in legacy WebRTC input handling |
m1k1o |
neko |
2026-10-27T17:33:35.883Z | 2026-10-28T16:13:59.494Z | |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-145 | Multiples vulnérabilités dans Safari | 2008-03-19T00:00:00.000000 | 2008-03-19T00:00:00.000000 |
| certa-2008-avi-144 | Vulnérabilité de la bibliothèque Perl Net::DNS | 2008-03-19T00:00:00.000000 | 2008-03-19T00:00:00.000000 |
| certa-2008-avi-143 | Vulnérabilité des produits F-Secure | 2008-03-18T00:00:00.000000 | 2008-03-18T00:00:00.000000 |
| certa-2008-avi-142 | Vulnérabilité dans Avaya Call Management System | 2008-03-18T00:00:00.000000 | 2008-03-18T00:00:00.000000 |
| certa-2008-avi-141 | Vulnérabilités dans les produits VMware | 2008-03-18T00:00:00.000000 | 2008-03-18T00:00:00.000000 |
| certa-2008-avi-140 | Multiples vulnérabilités dans CISCO ACS UCP | 2008-03-17T00:00:00.000000 | 2008-03-17T00:00:00.000000 |
| certa-2008-avi-139 | Vulnérabilité dans Novell Groupwise | 2008-03-17T00:00:00.000000 | 2008-03-17T00:00:00.000000 |
| certa-2008-avi-138 | Vulnérabilité dans CiscoWorks Internetwork Performance Monitor | 2008-03-14T00:00:00.000000 | 2008-03-14T00:00:00.000000 |
| certa-2008-avi-137 | Vulnérabilité dans Sun Java Desktop System | 2008-03-14T00:00:00.000000 | 2008-03-14T00:00:00.000000 |
| certa-2008-avi-136 | Vulnérabilité dans Nagios | 2008-03-14T00:00:00.000000 | 2008-03-14T00:00:00.000000 |
| certa-2008-avi-135 | Multiples vulnérabilités dans IBM AIX | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-134 | Vulnérabilités dans Adobe ColdFusion | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-133 | Multiples vulnérabilités dans Cisco User-Changeable Password | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-132 | Multiples vulnérabilités dans IBM WebSphere Application Server | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-131 | Vulnérabilité dans IBM WebSphere MQ pour HP NonStop | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-130 | Vulnérabilité dans Sun Java Server Faces | 2008-03-13T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2007-avi-502 | Vulnérabilités dans Samba | 2007-11-16T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2006-avi-411 | Vulnérabilité dans OpenSSH | 2006-09-28T00:00:00.000000 | 2008-03-13T00:00:00.000000 |
| certa-2008-avi-129 | Vulnérabilité dans MailEnable | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-128 | Vulnérabilité dans le module ipsecah de Sun Solaris | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-127 | Multiples vulnérabilités dans Microsoft Office Web Component | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-126 | Vulnérabilités dans Microsoft Office | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-125 | Multiples vulnérabilités dans Microsoft Excel | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-124 | Vulnérabilité dans Microsoft Outlook | 2008-03-12T00:00:00.000000 | 2008-03-12T00:00:00.000000 |
| certa-2008-avi-123 | Multiples vulnérabilités dans la bibliothèque Sun Solaris ICU | 2008-03-11T00:00:00.000000 | 2008-03-11T00:00:00.000000 |
| certa-2008-avi-122 | Vulnérabilité dans Sun Java Web Console | 2008-03-11T00:00:00.000000 | 2008-03-11T00:00:00.000000 |
| certa-2008-avi-121 | Vulnérabilité dans Horde | 2008-03-11T00:00:00.000000 | 2008-03-11T00:00:00.000000 |
| certa-2008-avi-120 | Vulnérabilité dans Check Point VPN-1 UTM Edge | 2008-03-10T00:00:00.000000 | 2008-03-10T00:00:00.000000 |
| certa-2008-avi-119 | Vulnérabilité dans AIX | 2008-03-10T00:00:00.000000 | 2008-03-10T00:00:00.000000 |
| certa-2008-avi-118 | Vulnérabilités de Java | 2008-03-07T00:00:00.000000 | 2008-03-07T00:00:00.000000 |