Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109393 | 5.3 (v4.0) 6.3 (v3.1) | QloApps through 1.7.0 Insecure Direct Object Reference… |
Webkul |
QloApps |
2026-10-12T15:16:40.590Z | 2026-10-18T12:03:15.837Z |
| cve-2026-109392 | 5.1 (v4.0) 5.4 (v3.1) | Pimcore through 2026.3.1 Stored XSS via ExternalImage … |
Pimcore |
Pimcore |
2026-10-12T15:16:39.934Z | 2026-10-13T18:22:20.725Z |
| cve-2026-109391 | 9.2 (v4.0) 8.1 (v3.1) | Square Squash through commit e73f280 Unauthenticated Y… |
Square |
Squash |
2026-10-12T15:16:39.257Z | 2026-10-27T01:30:40.899Z |
| cve-2026-108899 | tobychui zoraxy Path Exception Matcher authProviders.g… |
tobychui |
zoraxy |
2026-10-12T15:15:12.313Z | 2026-10-13T15:20:57.423Z | |
| cve-2026-92681 | 9.3 (v4.0) | @neo4j/graphql: schema-level and type-level @authentic… |
Neo4j |
@neo4j/graphql |
2026-10-12T15:09:49.653Z | 2026-10-16T17:28:41.739Z |
| cve-2026-92682 | 8.6 (v4.0) | @neo4j/graphql: authorization relationship and connect… |
Neo4j |
@neo4j/graphql |
2026-10-12T15:07:44.638Z | 2026-10-16T17:27:47.458Z |
| cve-2026-107248 | N/A | CVE-2026-107248 |
Thelia |
Thelia |
2026-10-12T15:06:55.302Z | 2026-10-15T17:07:20.054Z |
| cve-2026-108898 | Netis WF2409E Wireless Settings cross site scripting |
Netis |
WF2409E |
2026-10-12T15:00:12.588Z | 2026-10-14T17:53:02.202Z | |
| cve-2026-103537 | N/A | CVE-2026-103537 |
Thelia |
Thelia |
2026-10-12T14:56:21.364Z | 2026-10-15T17:06:23.101Z |
| cve-2026-103535 | N/A | CVE-2026-103535 |
Thelia |
Thelia |
2026-10-12T14:55:58.210Z | 2026-10-15T17:03:58.233Z |
| cve-2026-103529 | N/A | CVE-2026-103529 |
Thelia |
Thelia |
2026-10-12T14:55:38.419Z | 2026-10-15T17:01:20.649Z |
| cve-2026-103528 | N/A | CVE-2026-103528 |
Thelia |
Thelia |
2026-10-12T14:55:14.883Z | 2026-10-15T17:00:30.807Z |
| cve-2026-103527 | N/A | CVE-2026-103527 |
Thelia |
Thelia |
2026-10-12T14:54:53.807Z | 2026-10-16T17:24:55.616Z |
| cve-2026-103526 | N/A | CVE-2026-103526 |
Thelia |
Thelia |
2026-10-12T14:54:35.007Z | 2026-10-12T14:58:40.777Z |
| cve-2026-103524 | N/A | CVE-2026-103524 |
Thelia |
Thelia |
2026-10-12T14:54:16.912Z | 2026-10-16T17:16:31.779Z |
| cve-2026-103523 | N/A | CVE-2026-103523 |
Thelia |
Thelia |
2026-10-12T14:53:54.845Z | 2026-10-16T17:12:29.027Z |
| cve-2026-103522 | N/A | CVE-2026-103522 |
Thelia |
Thelia |
2026-10-12T14:53:34.695Z | 2026-10-12T14:59:41.947Z |
| cve-2026-103521 | N/A | CVE-2026-103521 |
Thelia |
Thelia |
2026-10-12T14:52:56.850Z | 2026-10-12T15:00:39.229Z |
| cve-2026-108897 | Smart Media4U Technology SHAREit App WebView JS Bridge… |
Smart Media4U Technology |
SHAREit App |
2026-10-12T14:45:11.045Z | 2026-10-13T18:23:04.044Z | |
| cve-2026-108094 | 7.8 (v3.1) | Mutter: mutter: client-triggered use-after-free in way… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-12T14:43:09.674Z | 2026-11-06T08:15:58.976Z |
| cve-2026-109390 | 9.8 (v3.1) | AnyDesk before 8.0.3 allows unauthenticated remot… |
AnyDesk |
AnyDesk |
2026-10-12T14:40:10.223Z | 2026-10-13T03:55:34.743Z |
| cve-2026-108896 | Linksys E1700 setLinksysIpv6 os command injection |
Linksys |
E1700 |
2026-10-12T14:30:14.340Z | 2026-10-15T15:15:07.266Z | |
| cve-2026-92877 | 8.3 (v4.0) | The JAXB factory methods historically relied sole… |
Eclipse Foundation |
jaxb-ri (core) |
2026-10-12T14:19:28.195Z | 2026-10-16T17:05:38.314Z |
| cve-2026-108895 | Linksys E1700 setDMZ os command injection |
Linksys |
E1700 |
2026-10-12T14:15:10.292Z | 2026-10-13T15:20:05.087Z | |
| cve-2026-109229 | 8.7 (v4.0) 7.5 (v3.1) | SGLang through 0.5.21 Decompression Bomb DoS via NanoN… |
sgl-project |
sglang |
2026-10-12T14:04:32.719Z | 2026-10-13T15:19:28.915Z |
| cve-2026-109228 | 8.7 (v4.0) 7.5 (v3.1) | SGLang through 0.5.21 Resource Budget Bypass via GLM-V… |
sgl-project |
sglang |
2026-10-12T14:04:32.029Z | 2026-10-14T17:52:09.025Z |
| cve-2026-109227 | 8.7 (v4.0) 7.5 (v3.1) | SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-V… |
sgl-project |
sglang |
2026-10-12T14:04:31.362Z | 2026-10-18T11:46:21.400Z |
| cve-2026-109226 | 8.7 (v4.0) 7.5 (v3.1) | SGLang through 0.5.21 Audio Decompression Amplificatio… |
sgl-project |
sglang |
2026-10-12T14:04:30.674Z | 2026-10-13T18:24:26.414Z |
| cve-2026-109225 | 8.7 (v4.0) 7.5 (v3.1) | SGLang through 0.5.21 Memory Exhaustion DoS via /v1/au… |
sgl-project |
sglang |
2026-10-12T14:04:29.986Z | 2026-10-13T16:57:32.583Z |
| cve-2026-12613 | 8.8 (v3.1) | Insecure Deserialization Leading to Remote Code Execut… |
Ministry of Justice General Directorate of Information Technology |
UYAP Document Editor |
2026-10-12T14:01:38.527Z | 2026-10-14T13:24:33.618Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-560 | Vulnérabilités de serveur HTTP d'IBM | 2007-12-24T00:00:00.000000 | 2007-12-24T00:00:00.000000 |
| certa-2007-avi-559 | Multiples vulnérabilités dans Wireshark | 2007-12-20T00:00:00.000000 | 2007-12-31T00:00:00.000000 |
| certa-2007-avi-558 | Vulnérabilité dans les produits Computer Associates | 2007-12-20T00:00:00.000000 | 2007-12-20T00:00:00.000000 |
| certa-2007-avi-557 | Vulnérabilité d'un module CISCO | 2007-12-20T00:00:00.000000 | 2007-12-20T00:00:00.000000 |
| certa-2007-avi-556 | Multiples vulnérabilités dans HP Quick Launch Button (QLB) | 2007-12-19T00:00:00.000000 | 2007-12-19T00:00:00.000000 |
| certa-2007-avi-555 | Multiples vulnérabilités dans Opera | 2007-12-19T00:00:00.000000 | 2007-12-28T00:00:00.000000 |
| certa-2007-avi-554 | Vulnérabilité dans Citrix Web Interface | 2007-12-19T00:00:00.000000 | 2007-12-19T00:00:00.000000 |
| certa-2007-avi-553 | Multiples vulnérabilités d'Adobe Flash Player | 2007-12-19T00:00:00.000000 | 2007-12-19T00:00:00.000000 |
| certa-2007-avi-552 | Vulnérabilité dans ClamAV | 2007-12-19T00:00:00.000000 | 2007-12-31T00:00:00.000000 |
| certa-2007-avi-551 | Multiples vulnérabilités dans Apple Mac OS X | 2007-12-19T00:00:00.000000 | 2007-12-19T00:00:00.000000 |
| certa-2007-avi-550 | Vulnérabilité dans CUPS | 2007-12-18T00:00:00.000000 | 2007-12-18T00:00:00.000000 |
| certa-2007-avi-549 | Vulnérabilité dans BEA WebLogic Mobility Server | 2007-12-18T00:00:00.000000 | 2007-12-18T00:00:00.000000 |
| certa-2007-avi-548 | Vulnérabilité de JBoss | 2007-12-18T00:00:00.000000 | 2007-12-18T00:00:00.000000 |
| certa-2007-avi-547 | Vulnérabilité dans les produits Juniper | 2007-12-17T00:00:00.000000 | 2007-12-17T00:00:00.000000 |
| certa-2007-avi-546 | Multiples vulnérabilités dans Apple Mac OS X | 2007-12-17T00:00:00.000000 | 2007-12-17T00:00:00.000000 |
| certa-2007-avi-545 | Vulnérabilité de Sun Solaris | 2007-12-14T00:00:00.000000 | 2007-12-14T00:00:00.000000 |
| certa-2007-avi-544 | Multiples vulnérabilités d'Apple QuickTime | 2007-12-14T00:00:00.000000 | 2007-12-14T00:00:00.000000 |
| certa-2007-avi-543 | vulnérabilité dans TYPO3 | 2007-12-14T00:00:00.000000 | 2007-12-14T00:00:00.000000 |
| certa-2007-avi-542 | Vulnérabilité d'Emacs | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-541 | Vulnérabilité dans MySQL | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-540 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-539 | Vulnérabilité dans le format de fichier Windows Media | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-537 | Vulnérabilité du noyau Windows | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-536 | Vulnérabilité dans le service Message Queuing de Microsoft Windows | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-535 | Vulnérabilités dans Microsoft DirectX | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-534 | Vulnérabilité dans SMBv2 de Microsoft Windows | 2007-12-12T00:00:00.000000 | 2007-12-12T00:00:00.000000 |
| certa-2007-avi-538 | Vulnérabilité dans le pilote Macrovision | 2007-12-11T00:00:00.000000 | 2007-12-11T00:00:00.000000 |
| certa-2007-avi-533 | Vulnérabilité dans Drupal | 2007-12-10T00:00:00.000000 | 2007-12-10T00:00:00.000000 |
| certa-2007-avi-527 | Vulnérabilité dans plusieurs produits Avaya | 2007-12-10T00:00:00.000000 | 2007-12-10T00:00:00.000000 |
| certa-2007-avi-532 | Vulnérabilité dans Xen | 2007-12-07T00:00:00.000000 | 2007-12-07T00:00:00.000000 |