Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116393 | 7.5 (v3.1) | WordPress Optima Express + MarketBoost IDX Plugin plug… |
iHomefinder, Inc. |
Optima Express |
2026-10-28T13:00:28.337Z | 2026-10-28T16:07:23.809Z |
| cve-2026-59172 | Joker linter executed project-local .jokerd/linter.* f… |
candid82 |
joker |
2026-10-28T13:07:35.230Z | 2026-10-28T16:07:17.268Z | |
| cve-2026-59185 | identrail: Cross-tenant GitHub installation binding wi… |
identrail |
identrail |
2026-10-28T13:15:53.456Z | 2026-10-28T16:07:10.634Z | |
| cve-2026-115968 | 9.8 (v3.1) | WordPress Ultimate Member plugin <= 2.13.1 - PHP Objec… |
Ultimate Member |
Ultimate Member |
2026-10-28T14:02:57.496Z | 2026-10-28T16:07:03.811Z |
| cve-2026-50539 | Xibo: Missing Object-Level Authorization on /notificat… |
xibosignage |
xibo-cms |
2026-10-28T15:31:12.074Z | 2026-10-28T16:06:48.627Z | |
| cve-2026-50542 | Xibo: IDOR (Broken Object-Level Authorization) on GET … |
xibosignage |
xibo-cms |
2026-10-28T15:34:27.453Z | 2026-10-28T16:06:41.811Z | |
| cve-2026-116778 | FOG: Authenticated low-privileged API user can modify … |
FOGProject |
fogproject |
2026-10-28T15:49:59.899Z | 2026-10-28T16:06:35.677Z | |
| cve-2016-20103 | 8.7 (v4.0) 7.5 (v3.1) | Cherry Plugin for WordPress < 1.2.7 Path Traversal via… |
Cherry Team |
Cherry Plugin |
2026-10-20T20:31:28.909Z | 2026-10-28T15:57:22.592Z |
| cve-2026-114094 | 8.7 (v4.0) 8.8 (v3.1) | Dulwich before 1.2.9 Arbitrary File Write via DOS driv… |
jelmer |
dulwich |
2026-10-21T00:36:58.401Z | 2026-10-28T15:57:01.832Z |
| cve-2026-113731 | djust: Arbitrary absolute-path file read in the find_h… |
djust-org |
djust |
2026-10-20T21:31:28.008Z | 2026-10-28T15:54:09.246Z | |
| cve-2026-114089 | 8.7 (v4.0) 8.8 (v3.1) | Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leadin… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:54.860Z | 2026-10-28T15:52:55.169Z |
| cve-2026-81212 | 10 (v3.1) | DataStage on Cloud Pak for Data Improper Authorization |
IBM |
DataStage on Cloud Pak for Data |
2026-10-20T21:58:51.662Z | 2026-10-28T15:52:11.257Z |
| cve-2026-113705 | a2aproject a2a-rs error.rs information exposure |
a2aproject |
a2a-rs |
2026-10-20T22:45:09.343Z | 2026-10-28T15:49:45.112Z | |
| cve-2026-114069 | 8.6 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.6.0 Root Secret Disclosure via en… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:40.958Z | 2026-10-28T15:48:44.313Z |
| cve-2026-113736 | D-Link DHP-W610AV HNAP Login defaultvalue.xml login_pr… |
D-Link |
DHP-W610AV |
2026-10-21T00:00:32.718Z | 2026-10-28T15:46:10.838Z | |
| cve-2020-37289 | 6.3 (v4.0) 3.7 (v3.1) | Vyper before 0.3.1 Improper Input Validation of uint8 … |
vyperlang |
vyper |
2026-10-21T00:36:17.573Z | 2026-10-28T15:45:18.052Z |
| cve-2026-114041 | 6.9 (v4.0) 6.5 (v3.1) | FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD G… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:21.187Z | 2026-10-28T15:43:43.515Z |
| cve-2026-114046 | 7.1 (v4.0) 6.5 (v3.1) | FreeRDP 3.0.0 before 3.32.0 null-pointer dereference v… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:24.797Z | 2026-10-28T15:42:09.948Z |
| cve-2026-93521 | 7.8 (v3.1) | X.Org Server RandR ChangeProviderProperty Heap Buffer … |
x.org |
xorg-x11-server |
2026-10-28T15:37:43.432Z | 2026-10-28T15:37:43.432Z |
| cve-2026-114084 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 SQL Injection via tags in Rea… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:51.356Z | 2026-10-28T15:36:39.961Z |
| cve-2026-118029 | 5.9 (v4.0) 5.9 (v3.1) | Unverified ownership of the default Athena query resul… |
aws |
aws-sdk-pandas |
2026-10-28T15:32:56.602Z | 2026-10-28T15:32:56.602Z |
| cve-2026-111044 | Disabled Sunshine clients can bypass revocation with a… |
LizardByte |
Sunshine |
2026-10-16T21:59:00.939Z | 2026-10-28T15:32:53.402Z | |
| cve-2026-114079 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.6 Cross-Environment Deployment … |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:47.902Z | 2026-10-28T15:31:57.770Z |
| cve-2026-111057 | Mercury: Unauthenticated Remote Code Execution in /api… |
mljar |
mercury |
2026-10-19T16:04:07.065Z | 2026-10-28T15:31:24.524Z | |
| cve-2026-114074 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.10 Webhook SSRF Protection Bypa… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:44.452Z | 2026-10-28T15:30:10.464Z |
| cve-2026-111064 | aiohttp server lacks an initial request/header timeout |
aio-libs |
aiohttp |
2026-10-19T16:47:35.036Z | 2026-10-28T15:29:24.279Z | |
| cve-2026-111750 | AIOHTTP: Pure-Python parser request smuggling |
aio-libs |
aiohttp |
2026-10-19T17:06:37.997Z | 2026-10-28T15:27:37.704Z | |
| cve-2026-114064 | 5.1 (v4.0) 5.5 (v3.1) | Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook T… |
grokability |
snipe-it |
2026-10-21T00:36:37.528Z | 2026-10-28T15:26:51.249Z |
| cve-2026-114076 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.2 Blind SSRF via Alert Channel … |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:45.853Z | 2026-10-28T15:24:51.788Z |
| cve-2026-112395 | Pillow tiled-TIFF decoder reads past tile buffer in co… |
python-pillow |
Pillow |
2026-10-19T20:59:15.098Z | 2026-10-28T15:24:49.805Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-086 | Multiples vulnérabilités dans Joomla! | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-085 | Vulnérabilité des produits F-Secure | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-084 | Vulnérabilité de PCRE | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-056 | Vulnérabilité dans la pile IPv6 du projet KAME | 2008-02-07T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-011 | Multiples vulnérabilités dans Apache | 2008-01-09T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2007-avi-435 | Vulnérabilité dans HP System Management Homepage | 2007-10-10T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-083 | Multiples vulnérabilités dans ClamAV | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-082 | Multiples vulnérabilités dans Cacti | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-081 | Vulnérabilité dans OpenLDAP | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-080 | Vulnérabilité du traitement DHCP par Windows Vista | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-079 | Vulnérabilité dans Microsoft Active Directory | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-078 | Vulnérabilité dans le mini-redirecteur WebDAV | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-077 | Vulnérabilités dans Microsoft Internet Information Services (IIS) | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-076 | Vulnérabilité dans Microsoft Word | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-075 | Vulnérabilités dans Microsoft Office Publisher | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-074 | Plusieurs vulnérabilités dans le convertisseur de fichiers Microsoft Works | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-073 | Vulnérabilité dans Microsoft OLE Automation | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-072 | Multiples vulnérabilités dans Internet Explorer | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-071 | Vulnérabilité dans Microsoft Office | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-067 | Vulnérabilité du noyau Linux | 2008-02-11T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-045 | Vulnérabilités dans MPlayer et xine-lib | 2008-02-05T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-032 | Vulnérabilité de Horde3 | 2008-01-21T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-070 | Multiples vulnérabilités dans UltraVNC | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-069 | Vulnérabilité du client Novell pour Windows | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-068 | Vulnérabilités dans Mac OS X | 2008-02-12T00:00:00.000000 | 2008-02-12T00:00:00.000000 |
| certa-2008-avi-066 | Multiples vulnérabilités dans Apache Tomcat | 2008-02-11T00:00:00.000000 | 2008-02-11T00:00:00.000000 |
| certa-2008-avi-062 | Multiples vulnérabilités dans les produits Mozilla | 2008-02-08T00:00:00.000000 | 2008-02-11T00:00:00.000000 |
| certa-2008-avi-065 | Multiples vulnérabilités dans HP-UX | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-064 | Vulnérabilité dans Checkpoint SecureClient | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-063 | Vulnérabilité dans Novell Client | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |