Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116591 | compress zstd: Panic on two-block frames |
klauspost |
compress |
2026-10-26T21:54:33.109Z | 2026-10-27T14:16:30.395Z | |
| cve-2026-116515 | itsourcecode Online Book Store book.php sql injection |
itsourcecode |
Online Book Store |
2026-10-26T22:00:17.488Z | 2026-10-27T14:16:22.247Z | |
| cve-2026-116556 | Argilla TextField.vue cross site scripting |
n/a |
Argilla |
2026-10-26T22:45:06.821Z | 2026-10-27T14:16:13.865Z | |
| cve-2026-116801 | 5.3 (v4.0) 4.3 (v3.1) | Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass vi… |
parse-community |
parse-server |
2026-10-26T23:05:33.735Z | 2026-10-27T14:16:07.428Z |
| cve-2026-116805 | 5.3 (v4.0) 4.3 (v3.1) | OpenPanel before 3.0.0 Information Disclosure of Inges… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:36.532Z | 2026-10-27T14:15:58.367Z |
| cve-2026-116809 | 6.9 (v4.0) 5.3 (v3.1) | OpenPanel before 3.0.0 Missing Authorization in event.… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:39.208Z | 2026-10-27T14:15:52.170Z |
| cve-2026-116813 | 7.1 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 ClickHouse SQL Injection via co… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:41.783Z | 2026-10-27T14:15:43.266Z |
| cve-2026-116818 | 8.8 (v4.0) 8.2 (v3.1) | OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL … |
Openpanel-dev |
openpanel |
2026-10-26T23:05:45.602Z | 2026-10-27T14:15:35.476Z |
| cve-2026-116822 | 6.9 (v4.0) 5.3 (v3.1) | YesWiki before 4.7.0 Template Traversal via BazarListe… |
YesWiki |
yeswiki |
2026-10-26T23:05:48.458Z | 2026-10-27T14:15:27.706Z |
| cve-2026-116826 | 8.2 (v4.0) 6.8 (v3.1) | YesWiki before 4.7.0 Authenticated SSRF via Page Dupli… |
YesWiki |
yeswiki |
2026-10-26T23:05:51.286Z | 2026-10-27T14:15:19.006Z |
| cve-2026-116604 | SourceCodester Online Food Ordering System delete_admi… |
SourceCodester |
Online Food Ordering System |
2026-10-26T23:45:20.080Z | 2026-10-27T14:15:12.149Z | |
| cve-2026-116620 | Tencent RapidJSON Regex stream.h Take out-of-bounds |
Tencent |
RapidJSON |
2026-10-27T00:30:22.548Z | 2026-10-27T14:14:50.011Z | |
| cve-2024-58400 | 8.8 (v4.0) 8.2 (v3.1) | llama.cpp before b3701 Out-of-Bounds Read in llama_dec… |
ggml-org |
llama.cpp |
2026-10-27T00:33:57.354Z | 2026-10-27T14:14:21.519Z |
| cve-2026-116840 | 6.9 (v4.0) 6.1 (v3.1) | llama.cpp b5854 before b11275 Integer Overflow in gguf… |
ggml-org |
llama.cpp |
2026-10-27T00:33:59.834Z | 2026-10-27T14:14:10.931Z |
| cve-2026-116640 | Saruf-Ratul HR-Payroll-Management-System chat.php cros… |
Saruf-Ratul |
HR-Payroll-Management-System |
2026-10-27T01:30:24.793Z | 2026-10-27T14:13:53.511Z | |
| cve-2026-92885 | Qode Membership <= 2.0.6.2 - Authentication Bypass via… |
Qode Themes |
Qode Membership |
2026-10-27T08:28:43.933Z | 2026-10-27T14:13:43.451Z | |
| cve-2026-116874 | 5.3 (v4.0) 6.1 (v3.1) | SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via… |
SemanticMediaWiki |
SemanticMediaWiki |
2026-10-27T10:23:28.295Z | 2026-10-27T14:13:33.657Z |
| cve-2026-83394 | Vulnerability in the Oracle Demand Planning produ… |
Oracle Corporation |
Oracle Demand Planning |
2026-10-20T21:23:44.347Z | 2026-10-27T14:13:26.364Z | |
| cve-2026-116878 | 8.7 (v4.0) 7.5 (v3.1) | Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaust… |
SemanticMediaWiki |
SemanticMediaWiki |
2026-10-27T10:23:30.985Z | 2026-10-27T14:13:22.135Z |
| cve-2026-116882 | 4.8 (v4.0) 4.8 (v3.1) | Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via F… |
SemanticMediaWiki |
SemanticMediaWiki |
2026-10-27T10:23:33.731Z | 2026-10-27T14:13:13.223Z |
| cve-2026-116886 | 5.3 (v4.0) 5.4 (v3.1) | Semantic MediaWiki before 7.3.1 Stored XSS via Externa… |
SemanticMediaWiki |
SemanticMediaWiki |
2026-10-27T10:23:36.490Z | 2026-10-27T14:13:01.153Z |
| cve-2026-116890 | 6.9 (v4.0) 7.3 (v3.1) | Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authoriz… |
SemanticMediaWiki |
SemanticMediaWiki |
2026-10-27T10:23:39.191Z | 2026-10-27T14:12:54.564Z |
| cve-2026-116894 | 2.3 (v4.0) 4.2 (v3.1) | REDAXO before 5.21.5 Insufficient Session Expiration o… |
redaxo |
core |
2026-10-27T10:59:24.060Z | 2026-10-27T14:12:45.367Z |
| cve-2026-116898 | 7.1 (v4.0) 7.1 (v3.1) | REDAXO before 5.21.4 Missing Authorization in Media Po… |
redaxo |
core |
2026-10-27T10:59:26.830Z | 2026-10-27T14:12:38.103Z |
| cve-2026-117533 | 2.1 (v4.0) 4.4 (v3.1) | REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized… |
redaxo |
core |
2026-10-27T10:59:29.443Z | 2026-10-27T14:12:29.808Z |
| cve-2026-117537 | 2.1 (v4.0) 4.1 (v3.1) | REDAXO before 5.21.0 Reflected XSS via Metainfo API ty… |
redaxo |
core |
2026-10-27T10:59:32.121Z | 2026-10-27T14:12:21.902Z |
| cve-2026-117541 | 6.9 (v4.0) 5.3 (v3.1) | svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicExcept… |
darylldoyle |
svg-sanitizer |
2026-10-27T10:59:34.783Z | 2026-10-27T14:12:13.476Z |
| cve-2026-90730 | 6.5 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:31:02.254Z | 2026-10-27T14:11:59.726Z |
| cve-2026-83392 | Vulnerability in the Oracle Applications Manager … |
Oracle Corporation |
Oracle Applications Manager |
2026-10-20T21:23:43.597Z | 2026-10-27T14:11:45.641Z | |
| cve-2026-83391 | Vulnerability in the Oracle HRMS (US) product of … |
Oracle Corporation |
Oracle HRMS (US) |
2026-10-20T21:23:43.234Z | 2026-10-27T14:10:58.430Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-103 | Vulnérabilité de eTrust | 2007-02-28T00:00:00.000000 | 2007-02-28T00:00:00.000000 |
| certa-2007-avi-090 | Multiples vulnérabilités de produits Cisco | 2007-02-16T00:00:00.000000 | 2007-02-27T00:00:00.000000 |
| certa-2007-avi-101 | Vulnérabilité dans Novell ZENworks | 2007-02-23T00:00:00.000000 | 2007-02-23T00:00:00.000000 |
| certa-2007-avi-100 | Vulnérabilité dans IBM DB2 | 2007-02-23T00:00:00.000000 | 2007-02-23T00:00:00.000000 |
| certa-2007-avi-099 | Vulnérabilité de TYPO3 | 2007-02-23T00:00:00.000000 | 2007-02-23T00:00:00.000000 |
| certa-2007-avi-098 | Multiples vulnérabilités dans les équipements CISCO Unified IP | 2007-02-22T00:00:00.000000 | 2007-02-22T00:00:00.000000 |
| certa-2007-avi-097 | Vulnérabilités dans Cisco Secure Services Client | 2007-02-22T00:00:00.000000 | 2007-02-22T00:00:00.000000 |
| certa-2007-avi-096 | Vulnérabilité de TrendMicro ServerProtect | 2007-02-22T00:00:00.000000 | 2007-02-22T00:00:00.000000 |
| certa-2007-avi-033 | Vulnérabilité dans la machine virtuelle Java de Sun | 2007-01-17T00:00:00.000000 | 2007-02-19T00:00:00.000000 |
| certa-2007-avi-092 | Vulnérabilité dans Apple UserNotification | 2007-02-16T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2007-avi-091 | Multiples vulnérabilités dans Apple iChat | 2007-02-16T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2007-avi-089 | Multiples vulnérabilités du module IPS de Cisco IOS | 2007-02-16T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2007-avi-088 | Vulnérabilité de HP-UX SLS | 2007-02-16T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2007-avi-087 | Vulnérabilité dans la mise en oeuvre du protocole TCP sous Sun Solaris | 2007-02-16T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2007-avi-086 | Vulnérabilités dans ColdFusion | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-085 | Vulnérabilités dans des composants ActiveX de Microsoft Windows | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-084 | Multiples vulnérabilités du navigateur Internet Explorer de Microsoft | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-083 | Multiples vulnérabilités de Microsoft Office | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-081 | Vulnérabilité du moteur de protection mpengine.dll de Microsoft Windows | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-080 | Vulnérabilité de l'Acquisition d'Image Windows (WIA) | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-079 | Vulnérabilité du service Microsoft de détection matériel noyau | 2007-02-14T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2007-avi-078 | Vulnérabilité dans la commande rm de Sun Solaris | 2007-02-09T00:00:00.000000 | 2007-02-09T00:00:00.000000 |
| certa-2007-avi-077 | Vulnérabilité dans HP OpenView | 2007-02-09T00:00:00.000000 | 2007-02-09T00:00:00.000000 |
| certa-2007-avi-075 | Vulnérabilité dans les produits HP Mercury | 2007-02-09T00:00:00.000000 | 2007-02-09T00:00:00.000000 |
| certa-2007-avi-074 | Vulnérabilité dans Avast Server | 2007-02-08T00:00:00.000000 | 2007-02-08T00:00:00.000000 |
| certa-2007-avi-073 | Vulnérabilités des produits Trend Micro | 2007-02-08T00:00:00.000000 | 2007-02-08T00:00:00.000000 |
| certa-2007-avi-072 | Vulnérabilité dans WinRAR et RAR | 2007-02-08T00:00:00.000000 | 2007-02-08T00:00:00.000000 |
| certa-2007-avi-071 | Vulnérabilité de BlueCoat WinProxy | 2007-02-06T00:00:00.000000 | 2007-02-06T00:00:00.000000 |
| certa-2007-avi-070 | Vulnérabilité dans Mambo | 2007-02-06T00:00:00.000000 | 2007-02-06T00:00:00.000000 |
| certa-2007-avi-067 | Multiples vulnérabilités de Wireshark (Ethereal) | 2007-02-05T00:00:00.000000 | 2007-02-05T00:00:00.000000 |