Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57190 | Asterisk: SQL Injection in cel_pgsql and cel_tds via C… |
asterisk |
asterisk |
2026-10-27T21:45:50.075Z | 2026-10-28T16:13:06.105Z | |
| cve-2026-118128 | a2aproject a2a-js Task Status Update result_manager.ts… |
a2aproject |
a2a-js |
2026-10-27T22:15:19.102Z | 2026-10-28T16:12:56.611Z | |
| cve-2026-58255 | Cronicle: Non-admin uid/gid injection in create_event/… |
jhuckaby |
Cronicle |
2026-10-27T22:30:09.563Z | 2026-10-28T16:12:46.274Z | |
| cve-2026-114099 | 6.9 (v4.0) 5.8 (v3.1) | Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision |
corazawaf |
coraza |
2026-10-21T00:37:01.866Z | 2026-10-28T16:12:46.044Z |
| cve-2026-50571 | WebSub: Reflected script execution through intent-veri… |
w3c |
websub |
2026-10-27T22:40:54.912Z | 2026-10-28T16:12:40.129Z | |
| cve-2026-118272 | a2ui-project a2ui Error data-context.ts DataContext.di… |
a2ui-project |
a2ui |
2026-10-28T02:00:21.447Z | 2026-10-28T16:12:32.352Z | |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118376 | 6 (v4.0) 5.3 (v3.1) | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 … |
Tencent |
WeKnora |
2026-10-28T02:03:23.589Z | 2026-10-28T16:11:20.194Z |
| cve-2026-107625 | Ultimate Member <= 2.14.0 - Authenticated (Subscriber+… |
ultimatemember |
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin |
2026-10-28T02:29:57.142Z | 2026-10-28T16:11:08.360Z | |
| cve-2026-109999 | AI Marketing Expert <= 1.2.8 - Unauthenticated Stored … |
nalam-1 |
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot |
2026-10-28T02:29:58.364Z | 2026-10-28T16:11:01.240Z | |
| cve-2026-118275 | a2ui-project a2ui Resolver data-context.ts DataContext… |
a2ui-project |
a2ui |
2026-10-28T03:30:18.509Z | 2026-10-28T16:10:54.352Z | |
| cve-2026-111255 | affiliate-toolkit <= 3.9.2 - Authenticated (Contributo… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T03:42:53.522Z | 2026-10-28T16:10:48.081Z | |
| cve-2026-109236 | Customer Email Verification for WooCommerce <= 2.8.2 -… |
zorem |
Customer Email Verification for WooCommerce |
2026-10-28T05:33:31.213Z | 2026-10-28T16:10:40.810Z | |
| cve-2026-109381 | Event Booking Manager for WooCommerce <= 5.7.8 - Authe… |
magepeopleteam |
Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar |
2026-10-28T06:45:05.954Z | 2026-10-28T16:10:34.580Z | |
| cve-2026-103996 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:06.903Z | 2026-10-28T16:10:28.642Z | |
| cve-2026-109972 | s2Member <= 261011 - Authenticated (Contributor+) Stor… |
clavaque |
s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions |
2026-10-28T06:45:08.551Z | 2026-10-28T16:10:21.905Z | |
| cve-2026-76058 | PayPal Brasil para WooCommerce <= 1.7.8 - Missing Auth… |
odefranca |
PayPal Brasil para WooCommerce |
2026-10-28T06:45:08.964Z | 2026-10-28T16:10:15.959Z | |
| cve-2026-111120 | VikRentCar Car Rental Management System <= 1.4.8 - Cro… |
e4jvikwp |
VikRentCar Car Rental Management System |
2026-10-28T06:45:10.550Z | 2026-10-28T16:10:10.199Z | |
| cve-2026-118164 | If-So Dynamic Content <= 1.10.2 - Authenticated (Contr… |
ifso |
If-So Dynamic Content – Elementor & All Page Builders Personalization |
2026-10-28T06:45:12.978Z | 2026-10-28T16:09:59.980Z | |
| cve-2026-109980 | Related Posts for WordPress <= 3.0.0 - Missing Authori… |
barrykooij |
Related Posts for WordPress |
2026-10-28T06:45:13.840Z | 2026-10-28T16:09:53.821Z | |
| cve-2026-92098 | Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.… |
webheadllc |
Webheadcoder Multi-Step Forms for Contact Form 7 |
2026-10-28T06:45:14.277Z | 2026-10-28T16:09:47.127Z | |
| cve-2026-116610 | Clean Login <= 1.20.1 - Missing Authorization to Authe… |
hornero |
Clean Login |
2026-10-28T06:45:15.107Z | 2026-10-28T16:09:40.610Z | |
| cve-2026-107710 | Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stor… |
wpmudev |
Hustle – Email Marketing, Lead Generation, Optins, Popups |
2026-10-28T06:45:18.336Z | 2026-10-28T16:09:34.692Z | |
| cve-2026-110185 | Bit Flows: AI Agent Automation & Integrations for Form… |
bitpressadmin |
Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More |
2026-10-28T06:45:20.364Z | 2026-10-28T16:09:28.549Z | |
| cve-2026-115596 | 7.1 (v3.1) | WordPress eCommerce Product Catalog plugin <= 3.6.4 - … |
impleCode |
eCommerce Product Catalog |
2026-10-28T13:00:13.283Z | 2026-10-28T16:07:36.842Z |
| cve-2026-115612 | 7.1 (v3.1) | WordPress SliceWP plugin <= 1.2.13 - Cross Site Script… |
iova.mihai |
SliceWP |
2026-10-28T13:00:14.372Z | 2026-10-28T16:07:30.579Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-117 | Vulnérabilités dans Dokeos | 2008-03-07T00:00:00.000000 | 2008-03-07T00:00:00.000000 |
| certa-2008-avi-116 | Vulnérabilité de VMware ESX Server | 2008-03-06T00:00:00.000000 | 2008-03-06T00:00:00.000000 |
| certa-2008-avi-113 | Vulnérabilité de Ghostscript | 2008-03-03T00:00:00.000000 | 2008-03-06T00:00:00.000000 |
| certa-2008-avi-115 | Vulnérabilité dans IBM WebSphere MQ | 2008-03-04T00:00:00.000000 | 2008-03-04T00:00:00.000000 |
| certa-2008-avi-114 | Vulnérabilité dans phpMyAdmin | 2008-03-03T00:00:00.000000 | 2008-03-03T00:00:00.000000 |
| certa-2008-avi-112 | Vulnérabilités dans Symantec Backup Exec | 2008-03-03T00:00:00.000000 | 2008-03-03T00:00:00.000000 |
| certa-2008-avi-110 | Vulnérabilité dans Cadic Intégrale (Ex-Libris) | 2008-02-28T00:00:00.000000 | 2008-02-29T00:00:00.000000 |
| certa-2008-avi-111 | Vulnérabilités dans Mambo | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-109 | Vulnérabilité de OpenBSD | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-107 | Vulnérabilités dans Symantec Decomposer | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-106 | Vulnérabilité dans Sun Solaris | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-103 | Multiples vulnérabilités dans VMware ESX Server | 2008-02-22T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-105 | Vulnérabilité dans Thunderbird | 2008-02-27T00:00:00.000000 | 2008-02-27T00:00:00.000000 |
| certa-2008-avi-104 | Vulnérabilité dans Joomla! | 2008-02-25T00:00:00.000000 | 2008-02-25T00:00:00.000000 |
| certa-2008-avi-102 | Multiples vulnérabilités dans IBM AIX | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-101 | Vulnérabilités dans Netscape | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-100 | Vulnérabilités dans Symantec Veritas Storage Foundation | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-099 | Vulnérabilités de BEA Weblogic | 2008-02-21T00:00:00.000000 | 2008-02-21T00:00:00.000000 |
| certa-2008-avi-098 | Multiples vulnérabilités du noyau Linux | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-097 | Multiples Vulnérabilités dans Opera | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-096 | Vulnérabilités dans Kerio MailServer | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-095 | Vulnérabilité d'IBM DB2 | 2008-02-19T00:00:00.000000 | 2008-02-19T00:00:00.000000 |
| certa-2008-avi-094 | Multiples vulnérabilités dans Claroline | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-093 | Vulnérabilité dans sendfile sous FreeBSD | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-092 | Multiples vulnérabilités dans Dokeos | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-091 | Multiples vulnérabilités dans les équipements Cisco Unified IP Phone | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-090 | Vulnérabilité dans HP Ignite-UX et DynRootDisk | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-089 | Vulnérabilité dans Cisco Unified Communications Manager | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-088 | Multiples vulnérabilités dans MySQL | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-087 | Multiples vulnérabilités dans Adobe Flash Media Server | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |