Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-83406 | Vulnerability in the Oracle Communications Billin… |
Oracle Corporation |
Oracle Communications Billing and Revenue Management |
2026-10-20T21:23:48.521Z | 2026-10-27T18:44:48.979Z | |
| cve-2026-83404 | Vulnerability in the MySQL Connectors product of … |
Oracle Corporation |
MySQL Connectors |
2026-10-20T21:23:48.172Z | 2026-10-27T18:43:16.741Z | |
| cve-2026-83403 | Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-10-20T21:23:47.817Z | 2026-10-27T18:41:26.488Z | |
| cve-2026-83402 | Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-10-20T21:23:47.458Z | 2026-10-27T18:39:36.064Z | |
| cve-2026-83401 | Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-10-20T21:23:47.010Z | 2026-10-27T18:37:17.612Z | |
| cve-2026-113869 | N/A | Use-after-free in S/MIME decryption during a security … |
Mozilla |
Thunderbird |
2026-10-20T19:14:55.862Z | 2026-10-27T18:30:32.292Z |
| cve-2026-110247 | N/A | Integer overflow in libmime buffer growth could lead t… |
Mozilla |
Thunderbird |
2026-10-13T18:08:37.608Z | 2026-10-27T18:27:45.455Z |
| cve-2026-100801 | N/A | Privilege escalation in the DLL Services component |
Mozilla |
Thunderbird |
2026-09-29T12:36:19.049Z | 2026-10-27T18:27:44.371Z |
| cve-2026-116469 | 7.1 (v4.0) | MISP Guard Case-Sensitive Policy Bypass Allows Unautho… |
MISP |
misp-guard |
2026-10-26T10:35:51.992Z | 2026-10-27T18:14:58.333Z |
| cve-2026-14255 | 5.5 (v3.1) | IFC File Parsing Uncontrolled Recursion in Certain Aut… |
Autodesk |
Shared Components |
2026-09-02T14:29:56.099Z | 2026-10-27T17:46:26.857Z |
| cve-2026-18330 | 6.1 (v4.0) | Hardcoded Shared RSA-1024 Private Key in Web Login in … |
TP-Link Systems Inc. |
RE305 v3 |
2026-09-03T22:24:45.430Z | 2026-10-27T17:39:53.630Z |
| cve-2026-76473 | Cisco Unified Communications Products Hardening Releas… |
Cisco |
Cisco Emergency Responder |
2026-10-21T16:14:31.067Z | 2026-10-27T17:30:04.477Z | |
| cve-2026-111054 | N/A | {'providerMetadata': {'orgId': 'a0819718-46f1-4df5-94e2-005712e83aaa', 'shortName': 'GitHub_M', 'dateUpdated': '2026-10-27T17:06:01.354Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a duplicate of CVE-2026-112374. Notes: All CVE users should reference CVE-2026-112374 instead of this candidate.'}], 'replacedBy': ['CVE-2026-112374']} | N/A | N/A | 2026-10-27T17:06:01.354Z | |
| cve-2026-18349 | 7.3 (v4.0) | SAMA5D44 Fault Injection Vulnerability |
Microchip |
SAMA5D4 |
2026-08-24T16:07:45.500Z | 2026-10-27T16:40:02.564Z |
| cve-2026-109431 | 8.6 (v4.0) 8.1 (v3.1) | Camunda Missing Authorization in Task Sub-Resources |
Camunda |
Camunda 7 |
2026-10-19T15:06:00.780Z | 2026-10-27T16:16:21.231Z |
| cve-2024-38564 | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcem… |
Linux |
Linux |
2024-06-19T13:35:32.222Z | 2026-10-27T15:53:48.399Z | |
| cve-2026-99090 | N/A | drm/amdgpu: serialize vblank counter reads against GPU reset |
Linux |
Linux |
2026-10-26T14:51:59.654Z | 2026-10-27T15:53:00.938Z |
| cve-2026-107458 | N/A | {'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-27T15:22:49.940Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE has been rejected by Upstream, as they failed to create a meaningful exploit'}]} | N/A | N/A | 2026-10-27T15:22:49.940Z | |
| cve-2026-114693 | 6.5 (v3.1) | WordPress All-in-One Video Gallery plugin <= 4.9.7 - C… |
Plugins360 Labs |
All-in-One Video Gallery |
2026-10-24T08:00:12.874Z | 2026-10-27T15:06:40.501Z |
| cve-2026-28167 | 7.5 (v3.1) | WordPress Super Forms plugin <= 6.3.316 - Arbitrary Fi… |
WebRehab |
Super Forms |
2026-08-24T11:54:48.479Z | 2026-10-27T14:46:39.454Z |
| cve-2026-115927 | Tornado: Event loop blocking and excess memory use fro… |
tornadoweb |
tornado |
2026-10-26T19:37:40.584Z | 2026-10-27T14:18:44.227Z | |
| cve-2026-116479 | a2aproject a2a-java JSON-RPC Error getMessage informat… |
a2aproject |
a2a-java |
2026-10-26T19:45:11.028Z | 2026-10-27T14:18:35.499Z | |
| cve-2026-83398 | Vulnerability in the Oracle Data Integrator produ… |
Oracle Corporation |
Oracle Data Integrator |
2026-10-20T21:23:45.825Z | 2026-10-27T14:18:34.451Z | |
| cve-2026-116575 | Mem0: Cross-tenant conversation leak via unescaped del… |
mem0ai |
mem0 |
2026-10-26T20:15:01.875Z | 2026-10-27T14:18:25.039Z | |
| cve-2026-116579 | Autobahn Python: permessage-brotli inflates a whole fr… |
crossbario |
autobahn-python |
2026-10-26T20:29:22.906Z | 2026-10-27T14:18:18.772Z | |
| cve-2026-116504 | TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgra… |
TOTOLINK |
A950RG |
2026-10-26T20:30:16.475Z | 2026-10-27T14:18:09.375Z | |
| cve-2026-116583 | Seroval: Code injection through a typed array's own co… |
lxsmnsyc |
seroval |
2026-10-26T20:49:35.952Z | 2026-10-27T14:18:01.418Z | |
| cve-2026-116587 | Go JOSE: DoS when parsing JWKs that contain RSA keys |
go-jose |
go-jose |
2026-10-26T21:12:21.326Z | 2026-10-27T14:17:50.939Z | |
| cve-2026-116507 | TOTOLINK A950RG global.so getLanguageCfg information d… |
TOTOLINK |
A950RG |
2026-10-26T21:15:18.291Z | 2026-10-27T14:17:44.541Z | |
| cve-2026-116726 | 4.8 (v4.0) 3.3 (v3.1) | gbsplay through 0.0.103 Heap Out-of-Bounds Read via gb… |
mmitch |
gbsplay |
2026-10-26T21:52:29.528Z | 2026-10-27T14:17:32.379Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-041 | Vulnérabilité de Xpdf et ses dérivés | 2007-01-19T00:00:00.000000 | 2007-01-19T00:00:00.000000 |
| certa-2007-avi-040 | Vulnérabilité IPv6 sur OpenBSD | 2007-01-19T00:00:00.000000 | 2007-01-19T00:00:00.000000 |
| certa-2007-avi-039 | Vulnérabilité dans les produits Cisco CS-MARS et ASDM | 2007-01-19T00:00:00.000000 | 2007-01-19T00:00:00.000000 |
| certa-2007-avi-038 | Vulnérabilités dans IBM WebSphere | 2007-01-19T00:00:00.000000 | 2007-01-19T00:00:00.000000 |
| certa-2007-avi-036 | Vulnérabilité de HP JetDirect | 2007-01-18T00:00:00.000000 | 2007-01-18T00:00:00.000000 |
| certa-2007-avi-034 | Vulnérabilité de Wordpress | 2007-01-17T00:00:00.000000 | 2007-01-17T00:00:00.000000 |
| certa-2007-avi-032 | Multiples vulnérabilités dans les produits Oracle | 2007-01-17T00:00:00.000000 | 2007-01-17T00:00:00.000000 |
| certa-2007-avi-031 | Vulnérabilités dans HP OpenView Network Node Manager | 2007-01-12T00:00:00.000000 | 2007-01-12T00:00:00.000000 |
| certa-2007-avi-030 | Vulnérabilité d'ordinateurs portables Acer | 2007-01-12T00:00:00.000000 | 2007-01-12T00:00:00.000000 |
| certa-2007-avi-029 | Vulnérabilités dans Computer Associates BrightStor ARCserve Backup | 2007-01-12T00:00:00.000000 | 2007-01-12T00:00:00.000000 |
| certa-2007-avi-028 | Vulnérabilité dans Cisco Unified Contact Center | 2007-01-12T00:00:00.000000 | 2007-01-12T00:00:00.000000 |
| certa-2007-avi-027 | Vulnérabilité dans Cisco IOS | 2007-01-12T00:00:00.000000 | 2007-01-12T00:00:00.000000 |
| certa-2007-avi-026 | Multiples vulnérabilités dans VMware | 2007-01-11T00:00:00.000000 | 2007-01-11T00:00:00.000000 |
| certa-2007-avi-023 | Vulnérabilité de PacketShaper | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-022 | Vulnérabilité dans ColdFusion | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-021 | Vulnérabilité de RPC de Solaris | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-019 | Vulnérabilités dans Kerberos | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-016 | Multiples vulnérabilités de Microsoft Excel | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-015 | Vulnérabilité de Microsoft Office 2003 | 2007-01-10T00:00:00.000000 | 2007-01-10T00:00:00.000000 |
| certa-2007-avi-018 | Vulnérabilité VML du système Microsoft Windows | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-017 | Vulnérabilités de Microsoft Outlook | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-014 | Vulnérabilités de AIX | 2007-01-09T00:00:00.000000 | 2007-01-09T00:00:00.000000 |
| certa-2007-avi-012 | Multiples vulnérabilités de Cisco secure ACS | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-011 | Multiples vulnérabilités dans Drupal | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-010 | Vulnérabilités dans WordPress | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-009 | Vulnérabilité de l'antivirus Kaspersky | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-008 | Vulnérabilité de Eudora Mail Server | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-007 | Vulnérabilité dans Novell Client | 2007-01-08T00:00:00.000000 | 2007-01-08T00:00:00.000000 |
| certa-2007-avi-006 | Vulnérabilité dans OpenBSD | 2007-01-05T00:00:00.000000 | 2007-01-05T00:00:00.000000 |
| certa-2007-avi-005 | Vulnérabilité dans OpenOffice.org | 2007-01-05T00:00:00.000000 | 2007-01-05T00:00:00.000000 |