Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109325 | 8.7 (v4.0) 7.5 (v3.1) | Grav from 2.0.22 before 2.1.7 Clockwork Profiler Authe… |
getgrav |
grav |
2026-10-12T16:05:16.676Z | 2026-10-13T18:12:51.809Z |
| cve-2026-109324 | 7.1 (v4.0) 6.5 (v3.1) | Grav before 2.1.7 Memory Exhaustion via Oversized Imag… |
getgrav |
grav |
2026-10-12T16:05:15.404Z | 2026-10-13T16:54:24.396Z |
| cve-2026-109323 | 6.9 (v4.0) 5.3 (v3.1) | Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-S… |
getgrav |
grav-plugin-star-ratings |
2026-10-12T16:05:14.772Z | 2026-10-13T15:50:34.726Z |
| cve-2026-109322 | 5.3 (v4.0) 6.1 (v3.1) | Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagina… |
getgrav |
grav-plugin-guestbook |
2026-10-12T16:05:14.089Z | 2026-10-15T02:45:15.941Z |
| cve-2026-109321 | 9.3 (v4.0) 9.1 (v3.1) | Grav Login OAuth Plugin before 1.4.3 Predictable Local… |
getgrav |
grav-plugin-login-oauth |
2026-10-12T16:05:13.414Z | 2026-10-18T12:13:29.858Z |
| cve-2026-109320 | 5.3 (v4.0) 5.4 (v3.1) | Grav API Plugin before 1.0.36 Disabled Account Session… |
getgrav |
grav-plugin-api |
2026-10-12T16:05:12.807Z | 2026-10-13T18:12:07.342Z |
| cve-2026-109319 | 5.3 (v4.0) 4.3 (v3.1) | Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authoriz… |
getgrav |
grav-plugin-guestbook |
2026-10-12T16:05:12.179Z | 2026-10-13T16:54:36.148Z |
| cve-2026-109318 | 8.7 (v4.0) 8.8 (v3.1) | Grav Git Sync 1.0.2 through 3.4.12 Command Injection v… |
trilbymedia |
grav-plugin-git-sync |
2026-10-12T16:05:11.496Z | 2026-10-13T15:49:07.805Z |
| cve-2026-109317 | 8.6 (v4.0) 7.2 (v3.1) | Grav API Plugin before 1.0.36 Privilege Escalation via… |
getgrav |
grav-plugin-api |
2026-10-12T16:05:10.826Z | 2026-10-15T02:44:33.219Z |
| cve-2026-109316 | 6.9 (v4.0) 6.5 (v3.1) | Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated … |
getgrav |
grav-plugin-data-manager |
2026-10-12T16:05:10.145Z | 2026-10-18T11:53:09.767Z |
| cve-2026-109315 | 7.1 (v4.0) 6.5 (v3.1) | Grav 2.0.22 before 2.1.7 Clockwork Debugger Token Disc… |
getgrav |
grav |
2026-10-12T16:05:09.498Z | 2026-10-13T18:11:16.527Z |
| cve-2026-109314 | 8.5 (v4.0) 7.3 (v3.1) | Grav Login Plugin 1.2.0 before 3.9.9 Password Reset To… |
getgrav |
grav-plugin-login |
2026-10-12T16:05:08.920Z | 2026-10-13T16:54:44.893Z |
| cve-2026-109313 | 8.6 (v4.0) 8.1 (v3.1) | Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Re… |
getgrav |
grav-plugin-login |
2026-10-12T16:05:08.299Z | 2026-10-13T15:47:59.719Z |
| cve-2026-109312 | 8.6 (v4.0) 8.1 (v3.1) | Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Pr… |
getgrav |
grav-plugin-login |
2026-10-12T16:05:07.605Z | 2026-10-15T02:43:42.835Z |
| cve-2026-109311 | 7.1 (v4.0) 6.5 (v3.1) | vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Tr… |
vllm-project |
vllm |
2026-10-12T16:05:06.956Z | 2026-10-18T11:51:50.426Z |
| cve-2026-109310 | 7.1 (v4.0) 6.5 (v3.1) | SiYuan v3.1.12 before v3.8.6 Denial of Service via get… |
siyuan-note |
siyuan |
2026-10-12T16:05:06.076Z | 2026-10-13T18:10:38.950Z |
| cve-2026-109309 | 6.9 (v4.0) 6.5 (v3.1) | SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Pl… |
siyuan-note |
siyuan |
2026-10-12T16:05:05.359Z | 2026-10-13T16:54:55.029Z |
| cve-2026-109308 | 8.7 (v4.0) 8.8 (v3.1) | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14… |
craftcms |
cms |
2026-10-12T16:05:04.666Z | 2026-10-13T15:47:12.028Z |
| cve-2026-109307 | 2.1 (v4.0) 4.7 (v3.1) | Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl i… |
craftcms |
cms |
2026-10-12T16:05:04.027Z | 2026-10-15T02:43:02.789Z |
| cve-2026-109306 | 6 (v4.0) 5.9 (v3.1) | Craft CMS 5.0.0 before 5.10.14 Missing Authorization v… |
craftcms |
cms |
2026-10-12T16:05:03.382Z | 2026-10-18T11:53:09.921Z |
| cve-2026-109305 | 8.7 (v4.0) 8.8 (v3.1) | Craft CMS 5.10.2 before 5.10.14 Twig Sandbox Bypass RC… |
craftcms |
cms |
2026-10-12T16:05:01.545Z | 2026-10-13T18:05:59.274Z |
| cve-2026-109304 | 6.9 (v4.0) 4.9 (v3.1) | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14… |
craftcms |
cms |
2026-10-12T16:05:00.860Z | 2026-10-13T16:55:02.469Z |
| cve-2026-109303 | 5.3 (v4.0) 4.3 (v3.1) | Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alp… |
parse-community |
parse-server |
2026-10-12T16:05:00.257Z | 2026-10-13T16:00:25.994Z |
| cve-2026-109302 | 6.3 (v4.0) 3.7 (v3.1) | Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10… |
parse-community |
parse-server |
2026-10-12T16:04:59.591Z | 2026-10-15T02:42:20.486Z |
| cve-2026-109301 | 8.2 (v4.0) 5.9 (v3.1) | Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alp… |
parse-community |
parse-server |
2026-10-12T16:04:58.887Z | 2026-10-18T11:53:10.067Z |
| cve-2026-109300 | 5.1 (v4.0) 4.6 (v3.1) | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Ca… |
open-webui |
open-webui |
2026-10-12T16:04:58.200Z | 2026-10-13T18:09:47.634Z |
| cve-2026-109299 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.9.0 before 0.11.4 Denial of Service via R… |
open-webui |
open-webui |
2026-10-12T16:04:57.527Z | 2026-10-23T21:58:00.118Z |
| cve-2026-109298 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via … |
open-webui |
open-webui |
2026-10-12T16:04:56.895Z | 2026-10-23T21:57:59.402Z |
| cve-2026-109297 | 7.1 (v4.0) 6.5 (v3.1) | Open WebUI 0.11.0 before 0.11.4 Denial of Service via … |
open-webui |
open-webui |
2026-10-12T16:04:56.082Z | 2026-10-23T21:57:58.716Z |
| cve-2026-109296 | 5.3 (v4.0) 4.3 (v3.1) | Open WebUI before 0.11.4 Missing Authorization via Bac… |
open-webui |
open-webui |
2026-10-12T16:04:55.400Z | 2026-10-23T21:57:58.019Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-107 | Vulnérabilités dans Symantec Decomposer | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-106 | Vulnérabilité dans Sun Solaris | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-105 | Vulnérabilité dans Thunderbird | 2008-02-27T00:00:00.000000 | 2008-02-27T00:00:00.000000 |
| certa-2008-avi-104 | Vulnérabilité dans Joomla! | 2008-02-25T00:00:00.000000 | 2008-02-25T00:00:00.000000 |
| certa-2008-avi-103 | Multiples vulnérabilités dans VMware ESX Server | 2008-02-22T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-102 | Multiples vulnérabilités dans IBM AIX | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-101 | Vulnérabilités dans Netscape | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-100 | Vulnérabilités dans Symantec Veritas Storage Foundation | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-099 | Vulnérabilités de BEA Weblogic | 2008-02-21T00:00:00.000000 | 2008-02-21T00:00:00.000000 |
| certa-2008-avi-098 | Multiples vulnérabilités du noyau Linux | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-097 | Multiples Vulnérabilités dans Opera | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-096 | Vulnérabilités dans Kerio MailServer | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-095 | Vulnérabilité d'IBM DB2 | 2008-02-19T00:00:00.000000 | 2008-02-19T00:00:00.000000 |
| certa-2008-avi-094 | Multiples vulnérabilités dans Claroline | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-093 | Vulnérabilité dans sendfile sous FreeBSD | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-092 | Multiples vulnérabilités dans Dokeos | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-091 | Multiples vulnérabilités dans les équipements Cisco Unified IP Phone | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-090 | Vulnérabilité dans HP Ignite-UX et DynRootDisk | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-089 | Vulnérabilité dans Cisco Unified Communications Manager | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-088 | Multiples vulnérabilités dans MySQL | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-087 | Multiples vulnérabilités dans Adobe Flash Media Server | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-086 | Multiples vulnérabilités dans Joomla! | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-085 | Vulnérabilité des produits F-Secure | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-084 | Vulnérabilité de PCRE | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-083 | Multiples vulnérabilités dans ClamAV | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-082 | Multiples vulnérabilités dans Cacti | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-081 | Vulnérabilité dans OpenLDAP | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-080 | Vulnérabilité du traitement DHCP par Windows Vista | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-079 | Vulnérabilité dans Microsoft Active Directory | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-078 | Vulnérabilité dans le mini-redirecteur WebDAV | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |