Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108583 | 2.3 (v4.0) 4.2 (v3.1) | zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_b… |
54yyyu |
zotero-mcp |
2026-10-10T15:57:51.278Z | 2026-10-13T12:45:23.851Z |
| cve-2026-108582 | 6.8 (v4.0) 5.5 (v3.1) | GenOffice through 0.11.505 Insecure Permissions in HTT… |
genspark-ai |
GenOffice |
2026-10-10T15:57:50.632Z | 2026-10-14T02:24:00.367Z |
| cve-2026-108581 | 7.1 (v4.0) 6.5 (v3.1) | Octop through 1.0.2b6 Missing Authorization Exposes Pr… |
TencentCloud |
Octop |
2026-10-10T15:57:49.956Z | 2026-10-18T11:53:09.137Z |
| cve-2026-108580 | 6.9 (v4.0) 6.5 (v3.1) | AniWorld Downloader before 5.3.0 WebUI Login Brute For… |
phoenixthrush |
AniWorld Downloader |
2026-10-10T15:57:49.256Z | 2026-10-13T18:57:02.001Z |
| cve-2026-108579 | 2.3 (v4.0) 4.2 (v3.1) | OpenPanel through 2.3.0 CSV Formula Injection via Coho… |
Openpanel-dev |
openpanel |
2026-10-10T15:57:48.583Z | 2026-10-14T16:03:21.836Z |
| cve-2026-108555 | 2.3 (v4.0) 4.2 (v3.1) | PairDrop through 1.11.2 IP Spoofing via cf-connecting-… |
schlagmichdoch |
PairDrop |
2026-10-10T14:49:39.990Z | 2026-10-13T11:37:21.958Z |
| cve-2026-108554 | 6.9 (v4.0) 5.3 (v3.1) | PDFMathTranslate through 1.9.11 SSRF via Gradio Web GU… |
PDFMathTranslate |
PDFMathTranslate |
2026-10-10T14:49:39.371Z | 2026-10-14T02:22:46.173Z |
| cve-2026-108553 | 7.7 (v4.0) 7.5 (v3.1) | OpenRefine through 3.10.1 CSRF to RCE via get-rows Command |
OpenRefine |
OpenRefine |
2026-10-10T14:49:38.768Z | 2026-10-18T11:53:09.288Z |
| cve-2026-108551 | 9.3 (v4.0) 9.8 (v3.1) | openapi-typescript-codegen through 0.31.0 Code Injecti… |
ferdikoomen |
openapi-typescript-codegen |
2026-10-10T14:35:05.552Z | 2026-10-13T18:27:49.183Z |
| cve-2026-108550 | 8.7 (v4.0) 8.8 (v3.1) | SkillHub before 0.2.22 Account Takeover via Account Me… |
iflytek |
skillhub |
2026-10-10T14:35:04.943Z | 2026-10-14T16:03:31.727Z |
| cve-2026-108549 | 9.2 (v4.0) 8.1 (v3.1) | cc-connect through 1.5.0 Missing Authentication via MA… |
chenhg5 |
cc-connect |
2026-10-10T14:35:04.291Z | 2026-10-13T11:36:36.083Z |
| cve-2026-108548 | 6.9 (v4.0) 7.3 (v3.1) | AstronRPA through 1.1.6 Authentication Bypass via Arbi… |
iflytek |
astron-rpa |
2026-10-10T14:35:03.690Z | 2026-10-14T02:19:47.005Z |
| cve-2026-108547 | 7.1 (v4.0) 6.5 (v3.1) | AstronRPA through 1.1.6 Cross-Tenant Shared Variable D… |
iflytek |
astron-rpa |
2026-10-10T14:35:03.098Z | 2026-10-18T11:53:09.444Z |
| cve-2026-108546 | 7.7 (v4.0) 7.5 (v3.1) | Spotweb through 1.5.8 OS Command Injection via Spot Ti… |
spotweb |
spotweb |
2026-10-10T14:15:52.852Z | 2026-10-13T18:28:41.075Z |
| cve-2026-108545 | 8.2 (v4.0) 5.9 (v3.1) | SillyTavern 1.12.13 through 1.19.0 Pre-Authentication … |
SillyTavern |
SillyTavern |
2026-10-10T14:15:52.273Z | 2026-10-14T16:03:47.394Z |
| cve-2026-108115 | 2.3 (v4.0) 4.9 (v3.1) | Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass vi… |
kortix-ai |
suna |
2026-10-10T14:15:51.603Z | 2026-10-13T11:34:51.645Z |
| cve-2026-108114 | 5.3 (v4.0) 4.3 (v3.1) | Strapi 5.47.0 through 5.57.0 Improper Authorization vi… |
strapi |
strapi |
2026-10-10T14:15:50.908Z | 2026-10-14T02:18:14.320Z |
| cve-2026-66435 | 5.9 (v3.1) | WordPress WP Rollback plugin <= 3.1.2 - Sensitive Data… |
Devin Walker |
WP Rollback |
2026-10-10T14:00:13.260Z | 2026-10-11T12:13:37.438Z |
| cve-2026-97264 | 7.1 (v3.1) | WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scrip… |
Greg Winiarski |
WPAdverts |
2026-10-10T14:00:13.151Z | 2026-10-11T11:42:54.561Z |
| cve-2026-97263 | 7.1 (v3.1) | WordPress WPAdverts plugin <= 2.3.4 - Cross Site Scrip… |
Greg Winiarski |
WPAdverts |
2026-10-10T14:00:12.696Z | 2026-10-11T11:42:54.692Z |
| cve-2026-94676 | 7.2 (v3.1) | WordPress Tainacan plugin <= 1.3.0 - PHP Object Inject… |
Tainacan Community |
Tainacan |
2026-10-10T14:00:12.587Z | 2026-10-11T12:13:37.549Z |
| cve-2026-105885 | 8.8 (v3.1) | WordPress Slider by 10Web plugin <= 1.2.62 - PHP Objec… |
10Web |
Slider by 10Web |
2026-10-10T14:00:10.868Z | 2026-10-11T12:13:38.290Z |
| cve-2026-102388 | 7.1 (v3.1) | WordPress Forminator plugin <= 1.57.3 - Cross Site Scr… |
WPMU DEV |
Forminator |
2026-10-10T14:00:10.087Z | 2026-10-11T11:42:54.822Z |
| cve-2026-108165 | 5.3 (v4.0) 4.3 (v3.1) | Immich through 3.3.1 Missing Authorization in Partner … |
immich-app |
immich |
2026-10-10T13:55:15.503Z | 2026-10-18T11:53:09.614Z |
| cve-2026-108164 | 7.1 (v4.0) 6.5 (v3.1) | Open Source Social Network (OSSN) through 10.1 IDOR vi… |
opensource-socialnetwork |
opensource-socialnetwork |
2026-10-10T13:55:14.834Z | 2026-10-13T18:29:24.342Z |
| cve-2026-108163 | 6.9 (v4.0) 6.5 (v3.1) | Pingvin Share X before 1.22.0 Ineffective Authenticati… |
smp46 |
pingvin-share-x |
2026-10-10T13:55:14.177Z | 2026-10-14T16:03:55.032Z |
| cve-2026-108162 | 6.9 (v4.0) 6.5 (v3.1) | Pingvin Share X before 1.22.0 Rate Limit Bypass via Sp… |
smp46 |
pingvin-share-x |
2026-10-10T13:55:13.470Z | 2026-10-13T11:32:31.911Z |
| cve-2026-108161 | 7.7 (v4.0) 7.5 (v3.1) | FusionPBX through 5.6.5 OS Command Injection via Calle… |
fusionpbx |
fusionpbx |
2026-10-10T13:55:12.788Z | 2026-10-14T02:17:20.624Z |
| cve-2026-107794 | N/A | ExtUtils::Typemaps::STL::List versions before 1.07 for… |
|
|
2026-10-10T12:45:19.991Z | 2026-10-16T19:25:02.591Z |
| cve-2013-10076 | N/A | ExtUtils::Typemaps::STL::Vector versions before 1.05 f… |
|
|
2026-10-10T12:44:48.076Z | 2026-10-16T15:42:48.709Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-440 | Multiples vulnérabilités dans Microsoft Word | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-439 | Multiples vulnérabilités dans Microsoft Excel | 2006-10-11T00:00:00.000000 | 2006-12-15T00:00:00.000000 |
| certa-2006-avi-438 | Multiples vulnérabilités dans Microsoft PowerPoint | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-437 | Vulnérabilité dans la gestion ActiveX par l'Explorateur Windows | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-436 | Vulnérabilité dans Microsoft ASP.NET Framework | 2006-10-11T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-avi-435 | Vulnérabilité dans Python | 2006-10-10T00:00:00.000000 | 2006-10-23T00:00:00.000000 |
| certa-2006-avi-434 | Vulnérabilité du serveur FTP Serv-U | 2006-10-10T00:00:00.000000 | 2006-10-10T00:00:00.000000 |
| certa-2006-avi-433 | Vulnérabilité dans PHP | 2006-10-10T00:00:00.000000 | 2006-10-10T00:00:00.000000 |
| certa-2006-avi-432 | Vulnérabilité dans Invision Power Board | 2006-10-09T00:00:00.000000 | 2006-10-09T00:00:00.000000 |
| certa-2006-avi-431 | Vulnérabilité dans les produits Symantec | 2006-10-06T00:00:00.000000 | 2006-10-06T00:00:00.000000 |
| certa-2006-avi-430 | Vulnérabilités dans CA BrightStor ARCserve Backup | 2006-10-06T00:00:00.000000 | 2006-10-23T00:00:00.000000 |
| certa-2006-avi-429 | Vulnérabilité dans Novell GroupWise Messenger Agent | 2006-10-05T00:00:00.000000 | 2006-10-05T00:00:00.000000 |
| certa-2006-avi-428 | Vulnérabilité dans CA Unicenter WSDM | 2006-10-05T00:00:00.000000 | 2006-10-05T00:00:00.000000 |
| certa-2006-avi-427 | Vulnérabilité de certains produits McAfee | 2006-10-05T00:00:00.000000 | 2006-10-05T00:00:00.000000 |
| certa-2006-avi-426 | Multiples Vulnérabilités dans Mailman | 2006-10-05T00:00:00.000000 | 2006-10-05T00:00:00.000000 |
| certa-2006-avi-425 | Vulnérabilité dans IBM WebSphere Application Server | 2006-10-04T00:00:00.000000 | 2006-10-04T00:00:00.000000 |
| certa-2006-avi-424 | Vulnérabilité du serveur Ignite-UX d'HP-UX | 2006-10-04T00:00:00.000000 | 2006-10-04T00:00:00.000000 |
| certa-2006-avi-423 | Vulnérabilité dans Skype | 2006-10-04T00:00:00.000000 | 2006-10-04T00:00:00.000000 |
| certa-2006-avi-422 | Vulnérabilité dans ws_ftp | 2006-10-04T00:00:00.000000 | 2006-10-04T00:00:00.000000 |
| certa-2006-avi-421 | Multiples Vulnérabilités dans OpenSSL | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-420 | Vulnérabilités dans phpMyAdmin | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-419 | Vulnérabilité de HP-UX SLP | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-418 | Vulnérabilité du logiciel TYPO3 | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-417 | Vulnérabilité du serveur CIFS de HP-UX | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-416 | Plusieurs vulnérabilités dans Apple Mac OS X et des applications associées | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-415 | Multiples vulnérabilités dans IBM AIX | 2006-10-03T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2006-avi-414 | Multiples vulnérabilités dans Sun Solaris | 2006-09-29T00:00:00.000000 | 2006-09-29T00:00:00.000000 |
| certa-2006-avi-413 | Multiples vulnérabilités dans gzip | 2006-09-28T00:00:00.000000 | 2006-09-28T00:00:00.000000 |
| certa-2006-avi-412 | Vulnérabilité dans GnuTLS | 2006-09-28T00:00:00.000000 | 2006-09-28T00:00:00.000000 |
| certa-2006-avi-411 | Vulnérabilité dans OpenSSH | 2006-09-28T00:00:00.000000 | 2008-03-13T00:00:00.000000 |