Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-117692 | N/A | {'providerMetadata': {'orgId': 'f16b083a-5664-49f3-a51e-8d479e5ed7fe', 'shortName': 'mozilla', 'dateUpdated': '2026-10-28T10:24:08.688Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'Reserved in error; never associated with a vulnerability.'}]} | N/A | N/A | 2026-10-28T10:24:08.688Z | |
| cve-2026-112198 | 8.3 (v4.0) | Improper Restriction of XML External Entity Reference … |
Tactis |
NoviGest Desktop App |
2026-10-28T10:20:06.729Z | 2026-10-28T10:21:56.415Z |
| cve-2026-112197 | 9.4 (v4.0) | Missing Authentication for Critical Function in Tactis… |
Tactis |
NoviGest Desktop App |
2026-10-28T10:17:12.401Z | 2026-10-28T10:17:12.401Z |
| cve-2026-87879 | 5.9 (v3.0) | Sensitive information disclosure due to improper … |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:12:07.066Z | 2026-10-28T10:12:07.066Z |
| cve-2026-87100 | 3.6 (v3.0) | Protection mechanism failure due to missing binar… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:11:11.891Z | 2026-10-28T10:11:11.891Z |
| cve-2026-87099 | 5.7 (v3.0) | Cross-site scripting (XSS) vulnerability due to i… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:10:24.198Z | 2026-10-28T10:10:24.198Z |
| cve-2026-87098 | 3.1 (v3.0) | Sensitive information disclosure due to improper … |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:09:30.508Z | 2026-10-28T10:09:30.508Z |
| cve-2026-87101 | 6.2 (v3.0) | Sensitive information disclosure due to improper … |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:08:23.100Z | 2026-10-28T10:08:23.100Z |
| cve-2026-87097 | 5.3 (v3.0) | Sensitive information disclosure due to insuffici… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:08:02.180Z | 2026-10-28T10:08:02.180Z |
| cve-2026-3415 | 8.7 (v3.1) | XML External Entity (XXE) Injection via Schema Validat… |
WSO2 |
WSO2 API Manager |
2026-08-06T17:32:10.722Z | 2026-10-28T08:08:15.153Z |
| cve-2025-13590 | 9.1 (v3.1) | Authenticated arbitrary file upload via a System REST … |
WSO2 |
WSO2 API Manager |
2026-02-19T10:05:06.083Z | 2026-10-28T08:06:33.742Z |
| cve-2026-118008 | N/A | Privilege escalation in the DOM: Navigation component |
Mozilla |
Firefox |
2026-10-27T14:05:59.374Z | 2026-10-28T03:55:51.977Z |
| cve-2026-48356 | 9.3 (v3.1) | Adobe Commerce | Unrestricted Upload of File with Dang… |
Adobe |
Adobe Commerce |
2026-07-14T19:44:17.036Z | 2026-10-28T03:55:44.631Z |
| cve-2025-60475 | N/A | A buffer overflow in the gf_ac4_parser_bs functio… |
n/a |
n/a |
2026-10-20T00:00:00.000Z | 2026-10-28T03:07:03.383Z |
| cve-2026-114730 | 7.2 (v3.1) | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 … |
Roundcube |
Webmail |
2026-10-22T02:09:40.059Z | 2026-10-28T02:18:48.643Z |
| cve-2026-114577 | oretnom23 php-travel-agency-system Insertion insert.ph… |
oretnom23 |
php-travel-agency-system |
2026-10-22T02:00:19.008Z | 2026-10-28T02:17:54.687Z | |
| cve-2026-114726 | 5.8 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:55:25.693Z | 2026-10-28T02:17:15.141Z |
| cve-2026-114661 | 9 (v4.0) 8.5 (v3.1) | OpenRemote 1.2.0 before 1.31.0 Missing Authorization i… |
openremote |
openremote |
2026-10-22T01:43:45.515Z | 2026-10-28T02:16:11.176Z |
| cve-2026-114657 | 6.9 (v4.0) 5.7 (v3.1) | Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosu… |
getgrav |
grav |
2026-10-22T01:43:42.747Z | 2026-10-28T02:15:08.666Z |
| cve-2026-114640 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via… |
traefik |
traefik |
2026-10-22T01:43:39.899Z | 2026-10-28T02:14:25.018Z |
| cve-2026-114636 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.13 Authentication Bypass via ssl-passthro… |
traefik |
traefik |
2026-10-22T01:43:37.186Z | 2026-10-28T02:13:42.620Z |
| cve-2026-114722 | 6.5 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:39:43.658Z | 2026-10-28T02:13:07.335Z |
| cve-2026-114718 | 4.7 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:24:46.941Z | 2026-10-28T02:12:35.708Z |
| cve-2026-114714 | 5.3 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:08:34.579Z | 2026-10-28T02:11:26.866Z |
| cve-2026-114574 | massCodeIO massCode Local HTTP Service index.ts inform… |
massCodeIO |
massCode |
2026-10-21T23:45:21.527Z | 2026-10-28T02:10:12.997Z | |
| cve-2026-76406 | 5.9 (v3.1) | Information Disclosure through REST API Authentication… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:12.496Z | 2026-10-28T02:08:31.206Z |
| cve-2026-76305 | 6.5 (v3.1) | Improper Access Control during App Downloads in Splunk SOAR |
Splunk |
Splunk SOAR |
2026-10-21T22:52:06.644Z | 2026-10-28T02:06:39.485Z |
| cve-2026-76301 | N/A | Security Hardening in Splunk Enterprise - October 2026 |
Splunk |
Splunk Enterprise |
2026-10-21T22:52:02.970Z | 2026-10-28T02:04:50.054Z |
| cve-2026-76297 | 4.2 (v3.1) | Federated Search Provider State Change through Cross-S… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:59.246Z | 2026-10-28T02:03:21.137Z |
| cve-2026-114439 | oretnom23 php-travel-agency-system Session session.php… |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:15:08.560Z | 2026-10-28T02:01:40.118Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-272 | Vulnérabilité dans les produits F-Secure | 2007-06-20T00:00:00.000000 | 2007-06-20T00:00:00.000000 |
| certa-2007-avi-271 | Vulnérabilités dans IBM WebSphere Application Server | 2007-06-19T00:00:00.000000 | 2007-06-19T00:00:00.000000 |
| certa-2007-avi-270 | Vulnérabilité dans HP System Management Homepage | 2007-06-19T00:00:00.000000 | 2007-06-19T00:00:00.000000 |
| certa-2007-avi-025 | Multiples vulnérabilités de X.org | 2007-01-10T00:00:00.000000 | 2007-06-19T00:00:00.000000 |
| certa-2007-avi-269 | Vulnérabilités dans Astaro Security Gateway | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-268 | Vulnérabilité dans Apache SpamAssassin | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-267 | Vulnérabilité de Tomcat | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-266 | Vulnérabilité dans Novell NetWare | 2007-06-18T00:00:00.000000 | 2007-06-18T00:00:00.000000 |
| certa-2007-avi-265 | Vulnérabilités dans Safari pour Windows | 2007-06-15T00:00:00.000000 | 2007-06-15T00:00:00.000000 |
| certa-2007-avi-263 | Multiples vulnérabilités dans Internet Explorer | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-262 | Vulnérabilité dans Windows Vista | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-261 | Vulnérabilité dans Microsoft Schannel | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-260 | Vulnérabilité dans Microsoft Visio | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-259 | Vulnérabilité de Outlook Express et Mail | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-258 | Vulnérabilité dans l'API Win32 | 2007-06-13T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-165 | Vulnérabilités dans Microsoft Content Management Server (CMS) | 2007-04-11T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-082 | Vulnérabilités de Microsoft concernant un objet OLE associé à un fichier RTF | 2007-02-14T00:00:00.000000 | 2007-06-13T00:00:00.000000 |
| certa-2007-avi-257 | Vulnérabilité dans Cisco Trust Agent | 2007-06-12T00:00:00.000000 | 2007-06-12T00:00:00.000000 |
| certa-2007-avi-256 | Multiples vulnérabilités dans le noyau Linux | 2007-06-08T00:00:00.000000 | 2007-06-08T00:00:00.000000 |
| certa-2007-avi-255 | Multiples vulnérabilités dans la machine virtuelle Java de Sun | 2007-06-07T00:00:00.000000 | 2007-06-07T00:00:00.000000 |
| certa-2007-avi-254 | Vulnérabilités de Symantec Ghost | 2007-06-07T00:00:00.000000 | 2007-06-07T00:00:00.000000 |
| certa-2007-avi-253 | Multiples vulnérabilités du serveur CIFS de HP-UX | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-252 | Multiples vulnérabilités de produits Computer Associates | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-251 | Vulnérabilité dans Sun Solaris Management Console | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-250 | Vulnérabilités dans Symantec Reporting Server | 2007-06-06T00:00:00.000000 | 2007-06-06T00:00:00.000000 |
| certa-2007-avi-249 | Vulnérabilité dans IBM Lotus Domino | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-248 | Vulnérabilités dans Symantec Veritas Storage | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-247 | Vulnérabilité dans inetd sur Sun Solaris | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-246 | Vulnérabilité dans Novell Groupwise | 2007-06-04T00:00:00.000000 | 2007-06-04T00:00:00.000000 |
| certa-2007-avi-245 | Multiples vulnérabilités dans les produits Mozilla | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |