Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108874 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:37.191Z | 2026-10-18T12:13:30.887Z |
| cve-2026-108873 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:36.531Z | 2026-10-13T19:37:22.136Z |
| cve-2026-108872 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:35.914Z | 2026-10-13T16:59:10.059Z |
| cve-2026-108871 | 5.3 (v4.0) 5.4 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via POST… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:35.304Z | 2026-10-13T13:47:58.434Z |
| cve-2026-108870 | 5.3 (v4.0) 5.4 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via POST… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:34.664Z | 2026-10-14T16:54:52.253Z |
| cve-2026-108869 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:33.998Z | 2026-10-18T11:53:05.139Z |
| cve-2026-108868 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:33.366Z | 2026-10-13T19:38:35.953Z |
| cve-2026-108867 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:32.673Z | 2026-10-13T16:59:21.132Z |
| cve-2026-108866 | 5.3 (v4.0) 4.3 (v3.1) | JeecgBoot through 3.9.5 Missing Authorization via /sys… |
jeecgboot |
JeecgBoot |
2026-10-11T14:33:31.967Z | 2026-10-13T13:46:39.798Z |
| cve-2026-108683 | zhayujie CowAgent Media Download memory allocation |
zhayujie |
CowAgent |
2026-10-11T14:30:23.145Z | 2026-10-13T13:45:23.936Z | |
| cve-2026-108682 | zhayujie CowAgent Web Console upload read denial of service |
zhayujie |
CowAgent |
2026-10-11T14:15:19.490Z | 2026-10-14T16:52:57.819Z | |
| cve-2026-108865 | 8.8 (v4.0) 8.2 (v3.1) | AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypa… |
AmoyLab |
Unla |
2026-10-11T13:26:10.714Z | 2026-10-14T16:48:20.518Z |
| cve-2026-108864 | 2.3 (v4.0) 4.2 (v3.1) | iFlytek Astron Agent through 1.1.2 Authorization Bypas… |
iflytek |
astron-agent |
2026-10-11T13:26:10.083Z | 2026-10-18T11:53:05.294Z |
| cve-2026-108863 | 8.7 (v4.0) 7.5 (v3.1) | Katanemo Plano through 0.4.37 Missing Authentication o… |
Katanemo |
Plano |
2026-10-11T13:26:09.409Z | 2026-10-13T19:40:23.092Z |
| cve-2026-108862 | 6 (v4.0) 5.3 (v3.1) | APIPark through 1.9.7-beta IDOR via application author… |
APIParkLab |
APIPark |
2026-10-11T13:26:08.793Z | 2026-10-13T16:59:29.160Z |
| cve-2026-108861 | 5.3 (v4.0) 4.3 (v3.1) | Odoo MCP 1.0.0 through 1.3.2 Information Disclosure vi… |
erpipe-org |
Odoo MCP |
2026-10-11T13:26:08.085Z | 2026-10-13T13:43:54.538Z |
| cve-2026-108860 | 9.3 (v4.0) 9.1 (v3.1) | BotSharp through 5.2.0 Authentication Bypass via Hard-… |
SciSharp |
BotSharp |
2026-10-11T13:26:07.369Z | 2026-10-14T16:47:26.986Z |
| cve-2026-108859 | 8.7 (v4.0) 7.5 (v3.1) | mcp-go through 1.2.1 Denial of Service via Unbounded P… |
mark3labs |
mcp-go |
2026-10-11T13:26:06.450Z | 2026-10-18T11:53:05.441Z |
| cve-2026-108858 | 6.8 (v4.0) 5.5 (v3.1) | Predibase LoRAX through 0.12.1 API Token Exposure via … |
Predibase |
LoRAX |
2026-10-11T13:26:05.793Z | 2026-10-13T19:41:34.574Z |
| cve-2026-108857 | 4.8 (v4.0) 3.3 (v3.1) | Hugging Face Text Embeddings Inference through 1.9.4 C… |
Hugging Face |
Text Embeddings Inference |
2026-10-11T13:26:05.169Z | 2026-10-13T16:59:39.344Z |
| cve-2026-108856 | 2.3 (v4.0) 4.2 (v3.1) | UnicomAI Wanwu through 0.6.5 Authorization Bypass via … |
UnicomAI |
Wanwu |
2026-10-11T13:26:04.558Z | 2026-10-13T13:41:14.911Z |
| cve-2026-108855 | 5.3 (v4.0) 5.4 (v3.1) | UnicomAI Wanwu through 0.6.5 Missing Authorization via… |
UnicomAI |
Wanwu |
2026-10-11T13:26:03.944Z | 2026-10-14T16:46:15.433Z |
| cve-2026-108854 | 5.3 (v4.0) 5.4 (v3.1) | Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1… |
UnicomAI |
Wanwu |
2026-10-11T13:26:03.304Z | 2026-10-18T11:53:05.593Z |
| cve-2026-108853 | 7.2 (v4.0) 8.1 (v3.1) | UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app |
UnicomAI |
Wanwu |
2026-10-11T13:26:02.706Z | 2026-10-13T19:42:30.136Z |
| cve-2026-108852 | 2.1 (v4.0) 4.7 (v3.1) | Deep Chat through 2.5.1 XSS via Markdown Link Validati… |
OvidijusParsiunas |
Deep Chat |
2026-10-11T13:26:02.055Z | 2026-10-13T16:59:47.203Z |
| cve-2026-108851 | 4.8 (v4.0) 3.3 (v3.1) | phpMyFAQ through 4.1.10 Missing Authorization via MCP … |
thorsten |
phpMyFAQ |
2026-10-11T13:26:01.436Z | 2026-10-13T13:39:25.428Z |
| cve-2026-108850 | 6.9 (v4.0) 5.3 (v3.1) | Company Research Agent through 2.2.0 SSRF via /generat… |
guy-hartstein |
company-research-agent |
2026-10-11T13:26:00.798Z | 2026-10-14T16:44:46.375Z |
| cve-2026-108839 | 2.3 (v4.0) 4.2 (v3.1) | thClaws through 0.141.0 Symlink Following File Write v… |
thClaws |
thClaws |
2026-10-11T13:26:00.141Z | 2026-10-18T11:53:05.751Z |
| cve-2026-108699 | 8.3 (v4.0) 6.5 (v3.1) | hyper-mcp through 0.8.3 Improper Signature Verificatio… |
hyper-mcp-rs |
hyper-mcp |
2026-10-11T13:25:59.469Z | 2026-10-13T19:35:43.889Z |
| cve-2026-108698 | 8.3 (v4.0) 6.5 (v3.1) | hyper-mcp through 0.8.3 OCI Plugin Signature Verificat… |
hyper-mcp-rs |
hyper-mcp |
2026-10-11T13:25:58.805Z | 2026-10-13T16:59:55.905Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-290 | Vulnérabilités dans GIMP | 2007-07-10T00:00:00.000000 | 2007-08-27T00:00:00.000000 |
| certa-2007-avi-289 | Vulnérabilité dans Winpcap | 2007-07-10T00:00:00.000000 | 2007-07-10T00:00:00.000000 |
| certa-2007-avi-288 | Multiples vulnérabilités dans les produits SAP | 2007-07-10T00:00:00.000000 | 2007-07-10T00:00:00.000000 |
| certa-2007-avi-287 | Vulnérabilité dans Citrix Presentation Server Client | 2007-07-10T00:00:00.000000 | 2007-07-10T00:00:00.000000 |
| certa-2007-avi-286 | Vulnérabilité dans HP Instant Support - Driver Check | 2007-07-06T00:00:00.000000 | 2007-07-06T00:00:00.000000 |
| certa-2007-avi-285 | Vulnérabilité de Java Web Start | 2007-07-06T00:00:00.000000 | 2007-07-06T00:00:00.000000 |
| certa-2007-avi-284 | Vulnérabilités dans MIT Kerberos 5 | 2007-06-28T00:00:00.000000 | 2007-07-27T00:00:00.000000 |
| certa-2007-avi-283 | Vulnérabilité de produits Symantec | 2007-06-28T00:00:00.000000 | 2007-06-28T00:00:00.000000 |
| certa-2007-avi-282 | Vulnérabilités dans des produits Check Point | 2007-06-28T00:00:00.000000 | 2007-06-28T00:00:00.000000 |
| certa-2007-avi-281 | Vulnérabilité dans Wordpress | 2007-06-28T00:00:00.000000 | 2007-06-28T00:00:00.000000 |
| certa-2007-avi-280 | Vulnérabilité d'IBM Websphere | 2007-06-28T00:00:00.000000 | 2007-06-28T00:00:00.000000 |
| certa-2007-avi-279 | Vulnérabilités dans Trend Micro OfficeScan | 2007-06-27T00:00:00.000000 | 2007-06-27T00:00:00.000000 |
| certa-2007-avi-278 | Vulnérabilités dans Wireshark | 2007-06-27T00:00:00.000000 | 2007-08-22T00:00:00.000000 |
| certa-2007-avi-277 | Plusieurs vulnérabilités dans Apple MacOS X | 2007-06-26T00:00:00.000000 | 2007-06-26T00:00:00.000000 |
| certa-2007-avi-276 | Vulnérabilité de produit McAfee | 2007-06-25T00:00:00.000000 | 2007-06-25T00:00:00.000000 |
| certa-2007-avi-275 | Multiples vulnérabilités dans Ingres | 2007-06-22T00:00:00.000000 | 2007-06-25T00:00:00.000000 |
| certa-2007-avi-274 | Vulnérabilité dans PHPMailer | 2007-06-20T00:00:00.000000 | 2007-06-20T00:00:00.000000 |
| certa-2007-avi-273 | Vulnérabilités dans VLC Media Player | 2007-06-20T00:00:00.000000 | 2007-06-20T00:00:00.000000 |
| certa-2007-avi-272 | Vulnérabilité dans les produits F-Secure | 2007-06-20T00:00:00.000000 | 2007-06-20T00:00:00.000000 |
| certa-2007-avi-271 | Vulnérabilités dans IBM WebSphere Application Server | 2007-06-19T00:00:00.000000 | 2007-06-19T00:00:00.000000 |
| certa-2007-avi-270 | Vulnérabilité dans HP System Management Homepage | 2007-06-19T00:00:00.000000 | 2007-06-19T00:00:00.000000 |
| certa-2007-avi-269 | Vulnérabilités dans Astaro Security Gateway | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-268 | Vulnérabilité dans Apache SpamAssassin | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-267 | Vulnérabilité de Tomcat | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-266 | Vulnérabilité dans Novell NetWare | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-265 | Vulnérabilités dans Safari pour Windows | 2007-06-15T00:00:00.000000 | 2007-06-15T00:00:00.000000 |
| certa-2007-avi-264 | Vulnérabilité dans OpenOffice | 2007-06-15T00:00:00.000000 | 2007-06-25T00:00:00.000000 |
| certa-2007-avi-263 | Multiples vulnérabilités dans Internet Explorer | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-262 | Vulnérabilité dans Windows Vista | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-261 | Vulnérabilité dans Microsoft Schannel | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |