Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108697 | 5.3 (v4.0) 4.3 (v3.1) | CoreShop through 2026.2.2 Missing Authorization via Re… |
CoreShop |
CoreShop |
2026-10-11T13:25:58.117Z | 2026-10-13T13:38:06.767Z |
| cve-2026-108681 | zhayujie CowAgent Web Console web_channel.py denial of… |
zhayujie |
CowAgent |
2026-10-11T13:15:14.693Z | 2026-10-13T19:43:53.264Z | |
| cve-2026-108584 | FunnyWolf Viper config hard-coded credentials |
FunnyWolf |
Viper |
2026-10-11T13:00:16.972Z | 2026-10-15T15:17:57.929Z | |
| cve-2026-108578 | Neterbit NW-431F Embedded Web Server sms.json informat… |
Neterbit |
NW-431F |
2026-10-11T12:45:13.726Z | 2026-10-13T13:36:25.224Z | |
| cve-2026-108577 | Konstanty Bialkowski libmodplug ABC Music Format load_… |
Konstanty Bialkowski |
libmodplug |
2026-10-11T12:30:10.914Z | 2026-10-14T16:43:47.579Z | |
| cve-2026-108760 | 7.2 (v4.0) 7.6 (v3.1) | LlamaFarm through 0.0.34 Unauthenticated API Exposed o… |
llama-farm |
llamafarm |
2026-10-11T12:19:57.155Z | 2026-10-14T16:43:03.444Z |
| cve-2026-108759 | 7.6 (v4.0) 6.8 (v3.1) | mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Syml… |
EricLBuehler |
mistral.rs |
2026-10-11T12:19:56.496Z | 2026-10-18T11:53:05.908Z |
| cve-2026-108758 | 8.8 (v4.0) 8.2 (v3.1) | Easy!Appointments through 1.6.0 Authorization Bypass v… |
alextselegidis |
easyappointments |
2026-10-11T12:19:55.847Z | 2026-10-13T20:01:31.926Z |
| cve-2026-108757 | 7.1 (v4.0) 6.5 (v3.1) | Nexting pinclaw through 0.3.0 Missing Authentication v… |
Nexting |
pinclaw |
2026-10-11T12:19:55.198Z | 2026-10-13T17:00:05.814Z |
| cve-2026-108756 | 5.3 (v4.0) 5.4 (v3.1) | Abilityai Trinity through 0.9.5 Missing Authorization … |
Abilityai |
trinity |
2026-10-11T12:19:54.615Z | 2026-10-13T13:57:52.331Z |
| cve-2026-108755 | 6.9 (v4.0) 5.3 (v3.1) | Hatchet through 0.110.5 Unauthenticated Memory Exhaust… |
hatchet-dev |
hatchet |
2026-10-11T12:19:53.976Z | 2026-10-14T16:41:59.714Z |
| cve-2026-108754 | 4.8 (v4.0) 3.3 (v3.1) | GPT-Load through 1.4.11 Cleartext Proxy Key Logging vi… |
tbphp |
gpt-load |
2026-10-11T12:19:53.343Z | 2026-10-18T11:53:06.056Z |
| cve-2026-108753 | 9.3 (v4.0) 9.4 (v3.1) | Agnaistic agnai through 1.0.555 Hard-Coded Credentials… |
agnaistic |
agnai |
2026-10-11T12:19:52.688Z | 2026-10-13T19:44:48.384Z |
| cve-2026-108752 | 2.3 (v4.0) 4.2 (v3.1) | JupyterHub through 6.0.1 OAuth Client ID Collision via… |
jupyterhub |
jupyterhub |
2026-10-11T12:19:51.996Z | 2026-10-13T17:00:17.356Z |
| cve-2026-108751 | 4.8 (v4.0) 4.4 (v3.1) | MoAI-ADK through 3.1.2 Symlink Following via moai init… |
modu-ai |
moai-adk |
2026-10-11T12:19:51.354Z | 2026-10-13T13:33:19.284Z |
| cve-2026-108750 | 5.3 (v4.0) 4.3 (v3.1) | OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS… |
OpenDocMan |
OpenDocMan |
2026-10-11T12:19:50.653Z | 2026-10-14T13:30:48.335Z |
| cve-2026-108749 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-16T11:32:14.374Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}} | N/A | N/A | 2026-10-11T12:19:49.965Z | 2026-10-16T11:32:14.374Z |
| cve-2026-108748 | 6.9 (v4.0) 5.3 (v3.1) | Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaus… |
quarkiverse |
quarkus-langchain4j |
2026-10-11T12:19:49.295Z | 2026-10-13T19:45:41.159Z |
| cve-2026-108747 | 2.3 (v4.0) 4.2 (v3.1) | Lightdash through 2.556.0 Authorization Bypass via Per… |
Lightdash |
lightdash |
2026-10-11T12:19:48.672Z | 2026-10-13T17:00:23.907Z |
| cve-2026-108746 | 8.7 (v4.0) 8.8 (v3.1) | Vearch 3.5.2 through 3.5.9 Incorrect Authorization via… |
Vearch |
vearch |
2026-10-11T12:19:48.014Z | 2026-10-13T13:31:24.440Z |
| cve-2026-108745 | 2.3 (v4.0) 3.1 (v3.1) | CloudBeaver through 25.3.5 Missing Authorization via /… |
DBeaver |
CloudBeaver |
2026-10-11T12:19:47.387Z | 2026-10-14T13:29:34.913Z |
| cve-2026-108744 | 7.3 (v4.0) 7 (v3.1) | pbi-cli 3.10.1 through 3.12.0 OS Command Injection via… |
MinaSaad1 |
pbi-cli |
2026-10-11T12:19:46.798Z | 2026-10-18T11:53:06.203Z |
| cve-2026-108742 | 5.3 (v4.0) 4.3 (v3.1) | CloudBeaver through 25.3.5 Missing Authorization via i… |
DBeaver |
CloudBeaver |
2026-10-11T12:19:46.154Z | 2026-10-13T19:46:24.849Z |
| cve-2026-108741 | 2.3 (v4.0) 3.1 (v3.1) | Shepherd through 0.3.1 SSRF via DNS Rebinding in Citat… |
shepherd-agents |
Shepherd |
2026-10-11T12:19:45.494Z | 2026-10-13T17:00:35.001Z |
| cve-2026-108740 | 7.2 (v4.0) 8.3 (v3.1) | GoatCounter through 2.7.0 Privilege Escalation via /us… |
arp242 |
GoatCounter |
2026-10-11T12:19:44.911Z | 2026-10-13T13:28:05.697Z |
| cve-2026-108739 | 8.7 (v4.0) 7.5 (v3.1) | OpenAgents Workspace through launcher-v1.0.17 Unauthen… |
openagents-org |
OpenAgents |
2026-10-11T12:19:44.257Z | 2026-10-14T13:28:40.918Z |
| cve-2026-108738 | 2.3 (v4.0) 4.2 (v3.1) | Traccar 5.7 through 6.16.0 Login CSRF via OpenID Conne… |
Traccar |
Traccar |
2026-10-11T12:19:43.602Z | 2026-10-18T11:53:06.374Z |
| cve-2026-108737 | 7.6 (v4.0) 6.8 (v3.1) | Traccar through 6.16.0 Weak Password Recovery via Toke… |
Traccar |
Traccar |
2026-10-11T12:19:42.967Z | 2026-10-13T19:47:31.147Z |
| cve-2026-108736 | 6.3 (v4.0) 3.7 (v3.1) | Speedtest Tracker through 1.15.0 IP Allowlist Bypass v… |
alexjustesen |
speedtest-tracker |
2026-10-11T12:19:42.324Z | 2026-10-13T17:00:42.169Z |
| cve-2026-108735 | 5.3 (v4.0) 4.3 (v3.1) | Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL |
miniflux |
miniflux |
2026-10-11T12:19:41.662Z | 2026-10-13T13:24:24.851Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-260 | Vulnérabilité dans Microsoft Visio | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-259 | Vulnérabilité de Outlook Express et Mail | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-258 | Vulnérabilité dans l'API Win32 | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-257 | Vulnérabilité dans Cisco Trust Agent | 2007-06-12T00:00:00.000000 | 2007-06-12T00:00:00.000000 |
| certa-2007-avi-256 | Multiples vulnérabilités dans le noyau Linux | 2007-06-08T00:00:00.000000 | 2007-06-08T00:00:00.000000 |
| certa-2007-avi-255 | Multiples vulnérabilités dans la machine virtuelle Java de Sun | 2007-06-07T00:00:00.000000 | 2007-06-07T00:00:00.000000 |
| certa-2007-avi-254 | Vulnérabilités de Symantec Ghost | 2007-06-07T00:00:00.000000 | 2007-06-07T00:00:00.000000 |
| certa-2007-avi-253 | Multiples vulnérabilités du serveur CIFS de HP-UX | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-252 | Multiples vulnérabilités de produits Computer Associates | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-251 | Vulnérabilité dans Sun Solaris Management Console | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-250 | Vulnérabilités dans Symantec Reporting Server | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-249 | Vulnérabilité dans IBM Lotus Domino | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-248 | Vulnérabilités dans Symantec Veritas Storage | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-247 | Vulnérabilité dans inetd sur Sun Solaris | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-246 | Vulnérabilité dans Novell Groupwise | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-245 | Multiples vulnérabilités dans les produits Mozilla | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-244 | Multiples vulnérabilités des produits F-Secure | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-243 | Vulnérabilité des produits Nortel | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-242 | Vulnérabilité dans libpng | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-241 | Multiples vulnérabilités dans IBM AIX | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-240 | Vulnérabilité dans GIMP | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-238 | Vulnérabilité dans Sun Java Web Start | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-239 | Multiples vulnérabilités dans HP System Management Homepage | 2007-05-31T00:00:00.000000 | 2007-05-31T00:00:00.000000 |
| certa-2007-avi-237 | Vulnérabilité de Sun Solaris | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-236 | Vulnérabilités sur Sun Java System Web Proxy Server | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-235 | Vulnérabilités dans Avast! Antivirus | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-234 | Multiples vulnérabilités dans Apple Mac OS X | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-233 | Vulnérabilités dans Apple QuickTime | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-232 | Multiples vulnérabilités d'Antivir | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-231 | Vulnérabilité dans Symantec Enterprise Security Manager | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |