Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76301 | N/A | Security Hardening in Splunk Enterprise - October 2026 |
Splunk |
Splunk Enterprise |
2026-10-21T22:52:02.970Z | 2026-10-28T02:04:50.054Z |
| cve-2026-76297 | 4.2 (v3.1) | Federated Search Provider State Change through Cross-S… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:59.246Z | 2026-10-28T02:03:21.137Z |
| cve-2026-114439 | oretnom23 php-travel-agency-system Session session.php… |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:15:08.560Z | 2026-10-28T02:01:40.118Z | |
| cve-2026-114382 | TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig … |
TOTOLINK |
EX200 |
2026-10-21T21:30:10.698Z | 2026-10-28T01:59:47.537Z | |
| cve-2026-29001 | 8.6 (v4.0) 7.2 (v3.1) | TastyIgniter 4.4.5 PHP Object Injection via Settings D… |
tastyigniter |
TastyIgniter |
2026-10-21T21:03:25.481Z | 2026-10-28T01:58:42.698Z |
| cve-2026-96640 | Pillow PDF append accepts malformed shared page-tree D… |
python-pillow |
Pillow |
2026-10-21T21:03:22.785Z | 2026-10-28T01:57:01.680Z | |
| cve-2026-96778 | Pillow: Heap buffer overflow writing JPEG comment afte… |
python-pillow |
Pillow |
2026-10-21T20:58:24.238Z | 2026-10-28T01:53:22.401Z | |
| cve-2026-96641 | Pillow: Reachable undefined behavior in native integer… |
python-pillow |
Pillow |
2026-10-21T20:51:24.388Z | 2026-10-28T01:50:42.160Z | |
| cve-2026-114379 | EKKOLearnAI ekko-studio Media Generation API media.ts … |
EKKOLearnAI |
ekko-studio |
2026-10-21T20:45:17.247Z | 2026-10-28T01:47:44.231Z | |
| cve-2026-114143 | toml-node: Quadratic-complexity DoS via long dotted ke… |
BinaryMuse |
toml-node |
2026-10-21T20:31:01.539Z | 2026-10-28T01:45:01.590Z | |
| cve-2026-114139 | Sentry-Javascript: Middleware Bypass when using Tunnel route |
getsentry |
sentry-javascript |
2026-10-21T20:14:34.419Z | 2026-10-28T01:38:14.177Z | |
| cve-2026-114376 | leomoon-studios wiki-go API editor.go SourceHandler pa… |
leomoon-studios |
wiki-go |
2026-10-21T20:00:12.433Z | 2026-10-28T01:36:51.902Z | |
| cve-2026-114135 | Jupyter Server: Gateway WebSocket handler bypasses ker… |
jupyter-server |
jupyter_server |
2026-10-21T19:58:51.544Z | 2026-10-28T01:36:08.532Z | |
| cve-2026-114438 | 4.2 (v3.1) | Keycloak-services: keycloak-services: required otp enr… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-21T19:35:37.217Z | 2026-10-28T01:35:08.605Z |
| cve-2026-111809 | 9.3 (v3.1) 6.9 (v4.0) | Apache Traffic Server: HEAD requests carrying Content-… |
Apache Software Foundation |
Apache Traffic Server |
2026-10-21T19:16:16.439Z | 2026-10-28T01:34:23.820Z |
| cve-2026-114362 | HarnessRouter Targets Test Endpoint app.py server-side… |
n/a |
HarnessRouter |
2026-10-21T19:15:12.924Z | 2026-10-28T01:33:22.048Z | |
| cve-2026-114267 | SourceCodester Food Order Management System Admin Endp… |
SourceCodester |
Food Order Management System |
2026-10-21T18:30:12.152Z | 2026-10-28T01:32:11.560Z | |
| cve-2026-114264 | ProjectWorlds Advanced Library Management System edit_… |
ProjectWorlds |
Advanced Library Management System |
2026-10-21T17:45:14.657Z | 2026-10-28T01:30:59.530Z | |
| cve-2026-114130 | Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javas… |
nuxt |
nuxt |
2026-10-21T17:37:58.400Z | 2026-10-28T01:29:47.913Z | |
| cve-2026-114126 | Storybook dev server: devices on the same network can … |
storybookjs |
storybook |
2026-10-21T17:21:29.520Z | 2026-10-28T01:28:25.264Z | |
| cve-2026-89035 | 9.1 (v4.0) 7.4 (v3.1) | MikroTik RouterOS 7.24.5 WebFig Session Token Replay A… |
MikroTik |
RouterOS |
2026-10-21T17:16:40.843Z | 2026-10-28T01:25:56.959Z |
| cve-2026-114261 | MomoTommy file-management-system Files API FileControl… |
MomoTommy |
file-management-system |
2026-10-21T17:00:19.191Z | 2026-10-28T01:25:18.356Z | |
| cve-2026-114122 | Electron: Frame subscription trusts GPU-supplied frame… |
electron |
electron |
2026-10-21T16:26:34.550Z | 2026-10-28T01:24:21.033Z | |
| cve-2026-114258 | oretnom23 file-management-system-php File Management f… |
oretnom23 |
file-management-system-php |
2026-10-21T16:15:18.449Z | 2026-10-28T01:23:29.110Z | |
| cve-2026-113798 | Electron: Pointer lock permission requests can be attr… |
electron |
electron |
2026-10-21T16:12:35.548Z | 2026-10-28T01:22:13.623Z | |
| cve-2026-113794 | pypdf: Possible infinite loop when hitting EOF in stan… |
py-pdf |
pypdf |
2026-10-21T15:59:26.054Z | 2026-10-28T01:20:41.647Z | |
| cve-2026-113790 | pypdf: Possible large memory usage when parsing arrays… |
py-pdf |
pypdf |
2026-10-21T15:35:52.503Z | 2026-10-28T01:18:59.036Z | |
| cve-2026-114255 | oretnom23 file-management-system-php User Account Mana… |
oretnom23 |
file-management-system-php |
2026-10-21T15:30:14.365Z | 2026-10-28T01:17:10.564Z | |
| cve-2026-5821 | Image Optimizer <= 1.7.4 - Authenticated (Author+) Arb… |
elemntor |
Image Optimizer – Compress Images and Convert to WebP or AVIF |
2026-07-02T05:35:07.753Z | 2026-10-28T00:43:42.014Z | |
| cve-2026-11592 | Email Subscribers & Newsletters <= 5.9.27 - Missing Au… |
icegram |
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress |
2026-07-02T05:35:13.163Z | 2026-10-28T00:41:36.807Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-244 | Multiples vulnérabilités des produits F-Secure | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-243 | Vulnérabilité des produits Nortel | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-242 | Vulnérabilité dans libpng | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-241 | Multiples vulnérabilités dans IBM AIX | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-240 | Vulnérabilité dans GIMP | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-238 | Vulnérabilité dans Sun Java Web Start | 2007-06-01T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-122 | Vulnérabilité dans MPlayer et Xine-lib | 2007-03-13T00:00:00.000000 | 2007-06-01T00:00:00.000000 |
| certa-2007-avi-239 | Multiples vulnérabilités dans HP System Management Homepage | 2007-05-31T00:00:00.000000 | 2007-05-31T00:00:00.000000 |
| certa-2007-avi-237 | Vulnérabilité de Sun Solaris | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-236 | Vulnérabilités sur Sun Java System Web Proxy Server | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-235 | Vulnérabilités dans Avast! Antivirus | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-234 | Multiples vulnérabilités dans Apple Mac OS X | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-233 | Vulnérabilités dans Apple QuickTime | 2007-05-30T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-158 | Multiples vulnérabilités de Kerberos | 2007-04-04T00:00:00.000000 | 2007-05-30T00:00:00.000000 |
| certa-2007-avi-232 | Multiples vulnérabilités d'Antivir | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-231 | Vulnérabilité dans Symantec Enterprise Security Manager | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-230 | Vulnérabilités dans NOD32 | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-229 | Vulnérabilité dans Tomcat | 2007-05-29T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-225 | Vulnérabilité dans Vim | 2007-05-24T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-201 | Multiples vulnérabilités dans PHP | 2007-05-07T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-151 | Vulnérabilité mod_perl pour Apache | 2007-04-03T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2006-avi-501 | Multiples vulnérabilités dans les produits VMware | 2006-11-15T00:00:00.000000 | 2007-05-29T00:00:00.000000 |
| certa-2007-avi-228 | Vulnérabilité d'un produit Citrix | 2007-05-25T00:00:00.000000 | 2007-05-25T00:00:00.000000 |
| certa-2007-avi-227 | Vulnérabilité dans Opera | 2007-05-24T00:00:00.000000 | 2007-05-24T00:00:00.000000 |
| certa-2007-avi-224 | Multiples vulnérabilités dans des produits Cisco | 2007-05-24T00:00:00.000000 | 2007-05-24T00:00:00.000000 |
| certa-2007-avi-223 | Vulnérabilités dans les pilotes sans-fil MadWifi | 2007-05-24T00:00:00.000000 | 2007-05-24T00:00:00.000000 |
| certa-2007-avi-222 | Vulnérabilités dans MySQL | 2007-05-18T00:00:00.000000 | 2007-05-18T00:00:00.000000 |
| certa-2007-avi-221 | Vulnérabilité dans Norton Personal Firewall 2004 | 2007-05-18T00:00:00.000000 | 2007-05-18T00:00:00.000000 |
| certa-2007-avi-220 | Vulnérabilité dans HP Systems Insight Manager | 2007-05-16T00:00:00.000000 | 2007-05-16T00:00:00.000000 |
| certa-2007-avi-219 | Multiples vulnérabilités dans Samba | 2007-05-15T00:00:00.000000 | 2007-05-16T00:00:00.000000 |