Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-85958 | 7.5 (v3.1) | Improper OAuth token validation in Progress MarkLogic Server |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:02:09.038Z | 2026-10-15T18:06:29.079Z |
| cve-2026-85957 | 7.5 (v3.1) | Improper XML external entity restriction in Progress M… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:01:34.049Z | 2026-10-16T17:19:55.107Z |
| cve-2026-85956 | 9.6 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T16:00:29.400Z | 2026-10-14T10:51:06.580Z |
| cve-2026-108906 | Netcore NR268 filter_arp_put_file.cgi filter_arp_put_f… |
Netcore |
NR268 |
2026-10-12T16:00:15.070Z | 2026-10-15T02:26:24.557Z | |
| cve-2026-85955 | 9.9 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:59:28.496Z | 2026-10-14T10:51:06.699Z |
| cve-2026-85954 | 8.6 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:58:40.360Z | 2026-10-14T10:51:06.821Z |
| cve-2026-85953 | 8.5 (v3.1) | Path traversal and privilege management flaws in Progr… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:58:02.995Z | 2026-10-15T18:06:41.738Z |
| cve-2026-85952 | 8.5 (v3.1) | Server-side request forgery in Progress MarkLogic Serv… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:55:41.435Z | 2026-10-15T19:14:59.518Z |
| cve-2026-85951 | 8.5 (v3.1) | Server-side request forgery in Progress MarkLogic Serv… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:54:35.663Z | 2026-10-15T19:14:59.642Z |
| cve-2026-81856 | 2.3 (v4.0) | Terminal escape sequence injection in Hex via unneutra… |
hexpm |
hex |
2026-10-12T15:46:12.146Z | 2026-10-16T17:47:15.339Z |
| cve-2026-108901 | Shenzhen HCC Technology MPOS M6 PLUS Display QR Code R… |
Shenzhen HCC Technology |
MPOS M6 PLUS |
2026-10-12T15:45:06.567Z | 2026-10-13T18:19:22.595Z | |
| cve-2026-103060 | 7.5 (v4.0) | Path traversal in rebar3 via unvalidated dependency ap… |
erlang |
rebar3 |
2026-10-12T15:43:57.636Z | 2026-10-16T17:44:16.145Z |
| cve-2026-85950 | 8.4 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:42:22.190Z | 2026-10-14T10:51:07.490Z |
| cve-2026-96612 | 7.5 (v4.0) | Path traversal in Hex via unvalidated dependency app names |
hexpm |
hex |
2026-10-12T15:39:49.862Z | 2026-10-16T17:41:58.545Z |
| cve-2026-85949 | 8.1 (v3.1) | Sensitive information exposure in Progress MarkLogic S… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:36:31.613Z | 2026-10-16T17:40:16.383Z |
| cve-2026-85948 | 9.9 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:35:05.124Z | 2026-10-14T10:51:07.611Z |
| cve-2026-85947 | 9.9 (v3.1) | Improper privilege management in Progress MarkLogic Se… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:34:01.239Z | 2026-10-14T10:51:07.728Z |
| cve-2026-9191 | 9.6 (v3.1) | Insufficient isolation of user-supplied code in Progre… |
Progress Software Corporation |
MarkLogic Server |
2026-10-12T15:32:46.475Z | 2026-10-14T10:51:07.851Z |
| cve-2026-105668 | 7.1 (v4.0) | Hex release-age cooldown is lifted package-wide when t… |
hexpm |
hex |
2026-10-12T15:31:58.926Z | 2026-10-16T17:38:34.235Z |
| cve-2026-108900 | Exponent CMS XML-RPC xmlrpc.php userLogin sql injection |
Exponent |
CMS |
2026-10-12T15:30:19.217Z | 2026-10-15T15:14:57.119Z | |
| cve-2026-105280 | 6.9 (v4.0) | Hex writes unverified package tarballs to standard out… |
hexpm |
hex |
2026-10-12T15:30:14.126Z | 2026-10-16T17:37:21.498Z |
| cve-2026-96618 | 2.1 (v4.0) | Hex exhausts memory and disk on oversized or compresse… |
hexpm |
hex |
2026-10-12T15:29:19.117Z | 2026-10-16T17:33:51.114Z |
| cve-2026-109195 | 3.1 (v3.1) | Quay: repository auto-prune policy uuid idor in quay api |
Red Hat |
Red Hat Quay 3 |
2026-10-12T15:27:03.366Z | 2026-10-14T15:33:11.286Z |
| cve-2026-109194 | 6.4 (v3.1) | Quay: build trigger uuid idor in quay api |
Red Hat |
Red Hat Quay 3 |
2026-10-12T15:27:03.175Z | 2026-10-13T15:25:21.637Z |
| cve-2026-103503 | 5.9 (v4.0) | Hex trusts its bundled CA certificates when cacerts_pa… |
hexpm |
hex |
2026-10-12T15:17:45.545Z | 2026-10-16T17:32:45.735Z |
| cve-2026-109399 | 9.2 (v4.0) 8.1 (v3.1) | SWUpdate through 2026.05.1 CMS Signature Verification … |
sbabic |
swupdate |
2026-10-12T15:16:44.440Z | 2026-10-18T12:03:15.694Z |
| cve-2026-109398 | 8.7 (v4.0) 7.5 (v3.1) | Gumlet php-image-resize before 3.0.1 Denial of Service… |
gumlet |
php-image-resize |
2026-10-12T15:16:43.793Z | 2026-10-13T18:20:30.276Z |
| cve-2026-109397 | 8.6 (v4.0) 7.2 (v3.1) | Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload… |
Thelia |
Thelia |
2026-10-12T15:16:43.107Z | 2026-10-13T16:57:16.106Z |
| cve-2026-109396 | 2.3 (v4.0) 4.2 (v3.1) | Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula… |
Thelia |
Thelia |
2026-10-12T15:16:41.909Z | 2026-10-13T15:22:23.047Z |
| cve-2026-109394 | 9.1 (v4.0) 7.4 (v3.1) | Thirty bees through 1.7.0 Account Takeover via Passwor… |
thirty bees |
thirty bees |
2026-10-12T15:16:41.257Z | 2026-10-15T02:25:32.283Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-017 | Vulnérabilité dans IBM Tivoli Storage Manager Express | 2008-01-11T00:00:00.000000 | 2008-01-11T00:00:00.000000 |
| certa-2008-avi-016 | Vulnérabilité dans IBM Lotus Domino | 2008-01-10T00:00:00.000000 | 2008-01-10T00:00:00.000000 |
| certa-2008-avi-015 | Vulnérabilité dans McAfee E-Business Server | 2008-01-10T00:00:00.000000 | 2008-01-10T00:00:00.000000 |
| certa-2008-avi-014 | Vulnérabilité dans l'environnement d'exécution Java (JRE) | 2008-01-10T00:00:00.000000 | 2008-01-10T00:00:00.000000 |
| certa-2008-avi-013 | Vulnérabilité dans Novell Client | 2008-01-10T00:00:00.000000 | 2008-01-10T00:00:00.000000 |
| certa-2008-avi-012 | Vulnérabilité d'IBM Websphere Application Server | 2008-01-10T00:00:00.000000 | 2008-01-10T00:00:00.000000 |
| certa-2008-avi-011 | Multiples vulnérabilités dans Apache | 2008-01-09T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-010 | Vulnérabilité dans LSASS de Windows | 2008-01-09T00:00:00.000000 | 2008-01-09T00:00:00.000000 |
| certa-2008-avi-009 | Vulnérabilités protocolaires dans Microsoft Windows | 2008-01-09T00:00:00.000000 | 2008-01-09T00:00:00.000000 |
| certa-2008-avi-008 | Multiples vulnérabilités dans les produits VMware | 2008-01-08T00:00:00.000000 | 2008-01-08T00:00:00.000000 |
| certa-2008-avi-007 | Multiples vulnérabilités dans Xerox WorkCentre | 2008-01-08T00:00:00.000000 | 2008-01-08T00:00:00.000000 |
| certa-2008-avi-006 | Vulnérabilité dans Asterisk | 2008-01-08T00:00:00.000000 | 2008-01-08T00:00:00.000000 |
| certa-2008-avi-005 | Vulnérabilités dans PostgreSQL | 2008-01-08T00:00:00.000000 | 2008-01-08T00:00:00.000000 |
| certa-2008-avi-004 | Vulnérabilité dans AIX | 2008-01-08T00:00:00.000000 | 2008-01-08T00:00:00.000000 |
| certa-2008-avi-003 | Vulnérabilité dans Novell ZENworks Endpoint Security Management | 2008-01-07T00:00:00.000000 | 2008-01-07T00:00:00.000000 |
| certa-2008-avi-002 | Vulnérabilité dans PHP 4 | 2008-01-04T00:00:00.000000 | 2008-01-04T00:00:00.000000 |
| certa-2008-avi-001 | Vulnérabilité dans Qt | 2008-01-03T00:00:00.000000 | 2008-01-03T00:00:00.000000 |
| certa-2007-avi-573 | Vulnérabilité dans Dovecot | 2007-12-31T00:00:00.000000 | 2007-12-31T00:00:00.000000 |
| certa-2007-avi-572 | Vulnérabilité dans Syslog-ng | 2007-12-31T00:00:00.000000 | 2007-12-31T00:00:00.000000 |
| certa-2007-avi-571 | Vulnérabilité de Mantis | 2007-12-31T00:00:00.000000 | 2007-12-31T00:00:00.000000 |
| certa-2007-avi-570 | Vulnérabilité dans IBM DB2 Content Manager | 2007-12-28T00:00:00.000000 | 2007-12-28T00:00:00.000000 |
| certa-2007-avi-569 | Vulnérabilité de Tomcat | 2007-12-28T00:00:00.000000 | 2007-12-28T00:00:00.000000 |
| certa-2007-avi-568 | Multiples vulnérabilités dans VLC Media Player | 2007-12-27T00:00:00.000000 | 2007-12-27T00:00:00.000000 |
| certa-2007-avi-567 | Vulnérabilité dans Novell Identity Manager | 2007-12-27T00:00:00.000000 | 2007-12-27T00:00:00.000000 |
| certa-2007-avi-566 | Multiples vulnérabilités dans Mambo | 2007-12-27T00:00:00.000000 | 2007-12-27T00:00:00.000000 |
| certa-2007-avi-565 | Vulnérabilité dans Novell Groupwise | 2007-12-26T00:00:00.000000 | 2007-12-26T00:00:00.000000 |
| certa-2007-avi-564 | Vulnérabilités dans Dokeos | 2007-12-26T00:00:00.000000 | 2007-12-26T00:00:00.000000 |
| certa-2007-avi-563 | Plusieurs vulnérabilités de Sun Java System Web Proxy Server | 2007-12-24T00:00:00.000000 | 2007-12-24T00:00:00.000000 |
| certa-2007-avi-562 | Vulnérabilité dans Asterisk | 2007-12-24T00:00:00.000000 | 2007-12-24T00:00:00.000000 |
| certa-2007-avi-561 | Vulnérabilité de Websense Enterprise | 2007-12-24T00:00:00.000000 | 2007-12-24T00:00:00.000000 |