Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109174 | 7.1 (v4.0) 6.5 (v3.1) | MoguBlog through 6.2 Credential Disclosure via /oauth/… |
moxi624 |
MoguBlog |
2026-10-12T13:10:35.666Z | 2026-10-13T16:58:17.485Z |
| cve-2026-109173 | 5.3 (v4.0) 4.3 (v3.1) | yshop-crm through 2.1.3 Missing Authorization via invo… |
guchengwuyue |
yshop-crm |
2026-10-12T13:10:34.985Z | 2026-10-13T15:05:09.436Z |
| cve-2026-109172 | 5.3 (v4.0) 4.3 (v3.1) | yshop-crm through 2.1.3 Missing Authorization via cont… |
guchengwuyue |
yshop-crm |
2026-10-12T13:10:34.283Z | 2026-10-14T17:42:10.418Z |
| cve-2026-109171 | 5.3 (v4.0) 4.3 (v3.1) | yshop-crm through 2.1.3 Missing Authorization via /adm… |
guchengwuyue |
yshop-crm |
2026-10-12T13:10:33.592Z | 2026-10-26T16:46:49.010Z |
| cve-2026-109168 | 7.1 (v4.0) 6.5 (v3.1) | lamp-cloud through 5.10.1 IDOR via /anyone/appendix/li… |
dromara |
lamp-cloud |
2026-10-12T13:10:32.919Z | 2026-10-13T18:37:18.904Z |
| cve-2026-109167 | 5.3 (v4.0) 4.3 (v3.1) | TDuck survey form through 6.0 Authorization Bypass via… |
TDuckCloud |
tduck-survey-form |
2026-10-12T13:10:32.289Z | 2026-10-14T15:59:33.552Z |
| cve-2026-109166 | 7.1 (v4.0) 6.5 (v3.1) | lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById |
dromara |
lamp-cloud |
2026-10-12T13:10:31.628Z | 2026-10-13T15:01:32.090Z |
| cve-2026-109165 | 5.3 (v4.0) 4.3 (v3.1) | TDuck survey form through 6.0 Authorization Bypass via… |
TDuckCloud |
tduck-survey-form |
2026-10-12T13:10:30.927Z | 2026-10-14T17:41:17.318Z |
| cve-2026-109164 | 7.1 (v4.0) 7.1 (v3.1) | TDuck survey form through 6.0 Authorization Bypass via… |
TDuckCloud |
tduck-survey-form |
2026-10-12T13:10:30.268Z | 2026-10-26T16:46:49.190Z |
| cve-2026-105081 | 2 (v4.0) 3.6 (v3.1) | ImageMagick before 7.1.2-33 Policy Bypass via Symlink … |
ImageMagick |
ImageMagick |
2026-10-12T13:10:29.543Z | 2026-10-29T21:15:29.660Z |
| cve-2026-108889 | Yungengxin Cloud Billing IOCTL Process Termination LWB… |
Yungengxin |
Cloud Billing |
2026-10-12T13:00:15.760Z | 2026-10-14T17:40:20.494Z | |
| cve-2026-93695 | 7.4 (v3.1) | Arbitrary file write through remote file identifiers i… |
Progress |
ShareFile Storage Zones Controller |
2026-10-12T12:52:15.973Z | 2026-10-13T03:55:27.886Z |
| cve-2026-93694 | 4 (v3.1) | Untrusted request routing and forged acknowledgements … |
Progress |
ShareFile Storage Zones Controller |
2026-10-12T12:50:22.621Z | 2026-10-12T14:43:50.913Z |
| cve-2026-93693 | 6.5 (v3.1) | Unauthenticated queue manipulation through connector S… |
Progress |
ShareFile Storage Zones Controller |
2026-10-12T12:48:53.652Z | 2026-10-12T14:43:38.793Z |
| cve-2026-108836 | Ollama Pull API name.go IsValid server-side request forgery |
n/a |
Ollama |
2026-10-12T12:45:16.156Z | 2026-10-13T18:48:36.706Z | |
| cve-2026-108835 | Yungengxin Yun Jia Security Guard kgameprotect.sys sub… |
Yungengxin |
Yun Jia Security Guard |
2026-10-12T12:30:08.884Z | 2026-10-15T15:15:22.752Z | |
| cve-2026-52903 | 8.8 (v3.1) | YAML safe_load production fallback to unsafe_load enab… |
ManageIQ |
ManageIQ |
2026-10-12T12:16:00.508Z | 2026-10-14T17:39:19.350Z |
| cve-2026-108834 | Cairo-dock Glx-Dock Query Parameter ww_page.php cross … |
Cairo-dock |
Glx-Dock |
2026-10-12T12:15:13.123Z | 2026-10-13T15:00:26.495Z | |
| cve-2026-108953 | 8.5 (v4.0) 7.8 (v3.1) | mac-shell-mcp before 2.0.0 OS Command Injection via ex… |
cfdude |
mac-shell-mcp |
2026-10-12T12:13:05.422Z | 2026-10-13T16:58:27.456Z |
| cve-2026-108952 | 5.1 (v4.0) 4.6 (v3.1) | RT-Thread through 5.3.0 Memory Corruption via USB CDC … |
RT-Thread |
rt-thread |
2026-10-12T12:13:04.800Z | 2026-10-13T14:59:23.750Z |
| cve-2026-108951 | 7.1 (v4.0) 6.5 (v3.1) | LavaLite CMS through 10.1.2 Authorization Bypass via U… |
lavalite |
cms |
2026-10-12T12:13:04.153Z | 2026-10-14T17:37:47.167Z |
| cve-2026-108950 | 6.9 (v4.0) 5.3 (v3.1) | Open Source Social Network (OSSN) through 10.1 Missing… |
opensource-socialnetwork |
opensource-socialnetwork |
2026-10-12T12:13:03.464Z | 2026-10-18T12:23:33.743Z |
| cve-2026-108831 | meetecho janus-gateway Admin API admin.js hard-coded c… |
meetecho |
janus-gateway |
2026-10-12T12:00:15.592Z | 2026-10-14T17:36:43.912Z | |
| cve-2026-108830 | meetecho janus-gateway VideoRoom janus_videoroom.c rac… |
meetecho |
janus-gateway |
2026-10-12T11:45:13.627Z | 2026-10-13T18:49:15.876Z | |
| cve-2026-108829 | Zen Cart Module Configuration modules.php sql injection |
n/a |
Zen Cart |
2026-10-12T11:30:12.224Z | 2026-10-15T15:15:28.956Z | |
| cve-2026-105283 | 6.3 (v4.0) | Internal error terms inspected into AshTypescript RPC … |
ash-project |
ash_typescript |
2026-10-12T11:16:30.582Z | 2026-10-16T16:53:18.072Z |
| cve-2026-108828 | Zen Cart Admin Panel configuration.php eval sql injection |
n/a |
Zen Cart |
2026-10-12T11:15:05.037Z | 2026-10-13T14:56:59.039Z | |
| cve-2026-85499 | Apache SkyWalking BanyanDB: Canopy does not enforce re… |
Apache Software Foundation |
Apache SkyWalking BanyanDB |
2026-10-12T11:04:44.671Z | 2026-10-16T17:09:57.669Z | |
| cve-2026-108827 | Zen Cart Administrative Module Management general.php … |
n/a |
Zen Cart |
2026-10-12T11:00:09.272Z | 2026-10-14T17:35:08.972Z | |
| cve-2026-105412 | 7.1 (v3.1) | SQL Injection vulnerability affecting Tuleap Enterpris… |
Dassault Systèmes |
Tuleap Enterprise Edition |
2026-10-12T10:45:22.502Z | 2026-10-16T16:47:50.598Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-500 | Multiples vulnérabilités du Firewall Mac OS X 'Tiger' | 2007-11-16T00:00:00.000000 | 2007-11-16T00:00:00.000000 |
| certa-2007-avi-499 | Multiples vulnérabilités du système Mac OS X | 2007-11-15T00:00:00.000000 | 2007-11-15T00:00:00.000000 |
| certa-2007-avi-498 | Vulnérabilité du produit Adobe ColdFusion | 2007-11-15T00:00:00.000000 | 2007-11-15T00:00:00.000000 |
| certa-2007-avi-497 | Vulnérabilité dans OpenSSH | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-496 | Vulnérabilité dans HP-UX Aries PA-RISC Emulator | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-495 | Vulnérabilité du client Novell Netware pour Windows | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-494 | Multiples vulnérabilités dans phpMyAdmin | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-493 | Vulnérabilité dans WinPcap | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-492 | Vulnérabilités dans PHP | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-491 | Vulnérabilité dans les pilotes sans-fil MadWifi | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-490 | Vulnérabilité du serveur DNS de Microsoft Windows | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-489 | Vulnérabilité dans le traitement des URI sous Windows | 2007-11-14T00:00:00.000000 | 2007-11-14T00:00:00.000000 |
| certa-2007-avi-488 | Vulnérabilité dans gforge | 2007-11-09T00:00:00.000000 | 2007-11-09T00:00:00.000000 |
| certa-2007-avi-487 | Vulnérabilité de Cisco Unified MeetingPlace | 2007-11-09T00:00:00.000000 | 2007-11-09T00:00:00.000000 |
| certa-2007-avi-486 | Vulnérabilités d'IBM Informix | 2007-11-08T00:00:00.000000 | 2007-11-08T00:00:00.000000 |
| certa-2007-avi-485 | Vulnérabilités dans Mono | 2007-11-08T00:00:00.000000 | 2007-11-08T00:00:00.000000 |
| certa-2007-avi-484 | Multiples vulnérabilités dans gpdf et produits derivés | 2007-11-08T00:00:00.000000 | 2007-11-09T00:00:00.000000 |
| certa-2007-avi-483 | Vulnérabilité de Ghostscript | 2007-11-07T00:00:00.000000 | 2007-11-07T00:00:00.000000 |
| certa-2007-avi-482 | Vulnérabilité dans Plone | 2007-11-07T00:00:00.000000 | 2007-11-07T00:00:00.000000 |
| certa-2007-avi-481 | Vulnérabilité de Perl | 2007-11-07T00:00:00.000000 | 2007-11-07T00:00:00.000000 |
| certa-2007-avi-480 | Vulnérabilité dans Macrovision SafeDisc | 2007-11-06T00:00:00.000000 | 2007-11-07T00:00:00.000000 |
| certa-2007-avi-479 | Vulnérabilité de GNU Emacs | 2007-11-06T00:00:00.000000 | 2007-11-06T00:00:00.000000 |
| certa-2007-avi-478 | Vulnérabilité dans PWLib | 2007-11-06T00:00:00.000000 | 2007-11-06T00:00:00.000000 |
| certa-2007-avi-477 | Multiples vulnérabilités dans Apple QuickTime | 2007-11-06T00:00:00.000000 | 2007-11-06T00:00:00.000000 |
| certa-2007-avi-476 | Multiples vulnérabilités dans gFTP | 2007-11-05T00:00:00.000000 | 2007-11-05T00:00:00.000000 |
| certa-2007-avi-475 | Vulnérabilité dans Avaya | 2007-11-05T00:00:00.000000 | 2007-11-05T00:00:00.000000 |
| certa-2007-avi-474 | Vulnérabilité de l'antivirus Symantec | 2007-11-05T00:00:00.000000 | 2007-11-05T00:00:00.000000 |
| certa-2007-avi-473 | Multiples vulnérabilités dans les extensions de Nagios | 2007-11-02T00:00:00.000000 | 2007-11-02T00:00:00.000000 |
| certa-2007-avi-472 | Multiples vulnérabilités de SonicWALL SSL VPN | 2007-11-02T00:00:00.000000 | 2007-11-02T00:00:00.000000 |
| certa-2007-avi-471 | Vulnérabilité de Blue Coat Security Gateway OS | 2007-11-02T00:00:00.000000 | 2007-11-02T00:00:00.000000 |