Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-104079 | 5.3 (v4.0) 4.3 (v3.1) | Envira Gallery Lite < 1.16.2 Missing Authorization via… |
Syed Balkhi |
Envira Gallery |
2026-10-09T12:07:10.357Z | 2026-10-27T01:30:35.421Z |
| cve-2026-104078 | 8.4 (v4.0) 7.8 (v3.1) | Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass |
Obsidian |
Obsidian Desktop |
2026-10-08T16:38:20.154Z | 2026-10-27T01:30:34.541Z |
| cve-2026-104077 | 8.5 (v4.0) 7.8 (v3.1) | Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown |
Obsidian |
Obsidian Desktop |
2026-10-08T16:27:08.486Z | 2026-10-27T01:30:33.849Z |
| cve-2026-104074 | 6.9 (v4.0) 5.3 (v3.1) | Coturn 4.10.0 Uninitialized Stack Memory Disclosure vi… |
coturn |
coturn |
2026-10-07T14:29:45.615Z | 2026-10-27T01:30:33.120Z |
| cve-2026-104073 | 6.9 (v4.0) 7.6 (v3.1) | NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links |
netbox-community |
netbox |
2026-10-06T18:50:28.326Z | 2026-10-27T01:30:32.403Z |
| cve-2026-104069 | 8.6 (v4.0) 7.2 (v3.1) | HortusFox < 6.2 Remote Code Execution via Theme Import |
danielbrendel |
hortusfox-web |
2026-10-06T14:55:07.137Z | 2026-10-27T01:30:31.714Z |
| cve-2026-104068 | 8.6 (v4.0) 7.2 (v3.1) | JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitra… |
JetBackup |
JetBackup |
2026-10-22T16:27:11.748Z | 2026-10-27T01:30:31.057Z |
| cve-2026-100640 | 8.6 (v4.0) 4.7 (v3.1) | SiYuan before v3.8.4 Clipboard Data Disclosure via IPC |
siyuan-note |
siyuan |
2026-09-26T13:23:13.287Z | 2026-10-27T01:30:30.357Z |
| cve-2026-100635 | 8.2 (v4.0) 5.9 (v3.1) | SiYuan before v3.8.4 Authentication Bypass via Plainte… |
siyuan-note |
siyuan |
2026-09-26T13:23:09.854Z | 2026-10-27T01:30:29.704Z |
| cve-2026-0993 | 8.7 (v4.0) 7.5 (v3.1) | SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multip… |
SODOLA |
SL902-SWTGW124AS |
2026-10-15T00:40:42.822Z | 2026-10-27T01:30:29.027Z |
| cve-2023-54402 | 8.7 (v4.0) 7.5 (v3.1) | iDocView SSRF via /doc/upload Endpoint Hardcoded Token |
iDocView |
iDocView |
2026-09-30T20:22:33.022Z | 2026-10-27T01:30:28.350Z |
| cve-2023-54328 | 5.1 (v4.0) 6.5 (v3.1) | AimOne Video Converter 2.04 Build 103 Buffer Overflow … |
Aimone-Video-Converter |
AimOne Video Converter |
2026-01-13T22:52:04.915Z | 2026-10-27T01:30:27.687Z |
| cve-2022-50926 | 8.7 (v4.0) 9.8 (v3.1) | WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation |
Wago |
WAGO 750-8212 PFC200 |
2026-01-13T22:51:57.087Z | 2026-10-27T01:30:26.855Z |
| cve-2021-47802 | 8.7 (v4.0) 7.5 (v3.1) | Tenda D151 & D301 - Configuration Download |
Shenzhen Tenda Technology Co.,Ltd. |
Tenda D151 & D301 |
2026-01-21T17:27:33.063Z | 2026-10-27T01:30:26.134Z |
| cve-2020-37281 | 9.2 (v4.0) 8.1 (v3.1) | Gravitee API Management through 4.12.22 Default JWT Se… |
Gravitee |
Gravitee API Management |
2026-10-14T14:16:28.167Z | 2026-10-27T01:30:25.397Z |
| cve-2020-37202 | 4.6 (v4.0) 7.5 (v3.1) | NetworkSleuth 3.0.0.0 - 'Key' Denial of Service |
Nsasoft |
Nsauditor NetworkSleuth |
2026-02-11T20:37:22.429Z | 2026-10-27T01:30:24.624Z |
| cve-2020-37201 | 4.6 (v4.0) 7.5 (v3.1) | NetShareWatcher 1.5.8.0 - 'Name' Denial Of Service |
Nsasoft |
Nsauditor NetShareWatcher |
2026-02-11T20:37:21.711Z | 2026-10-27T01:30:23.882Z |
| cve-2020-37200 | 4.6 (v4.0) 7.5 (v3.1) | NetShareWatcher 1.5.8.0 - 'Key' Denial of Service |
Nsasoft |
Nsauditor NetShareWatcher |
2026-02-11T20:37:20.791Z | 2026-10-27T01:30:23.163Z |
| cve-2019-25776 | 8.7 (v4.0) 7.5 (v3.1) | Weaver E-cology SQL Injection via SyncUserInfo.jsp |
Weaver Network Co., Ltd. |
E-cology |
2026-09-18T18:59:02.474Z | 2026-10-27T00:54:12.860Z |
| cve-2019-25765 | 8.7 (v4.0) 7.5 (v3.1) | ASP-CMS SQL Injection via commentList.asp id Parameter |
ASP-CMS Project |
ASP-CMS |
2026-08-13T17:21:38.584Z | 2026-10-27T00:54:12.162Z |
| cve-2019-25733 | 8.6 (v4.0) 8.4 (v3.1) | NetShareWatcher 1.5.8.0 SEH Buffer Overflow |
nsauditor |
NetShareWatcher |
2026-06-04T13:22:39.402Z | 2026-10-27T00:54:11.439Z |
| cve-2019-25712 | 6.9 (v4.0) 6.2 (v3.1) | BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service … |
NSauditor |
BlueAuditor |
2026-04-12T12:28:56.276Z | 2026-10-27T00:54:10.726Z |
| cve-2019-25705 | 8.6 (v4.0) 8.4 (v3.1) | Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field |
Sourceforge |
Echo Mirage |
2026-04-12T12:28:51.242Z | 2026-10-27T00:54:09.951Z |
| cve-2019-25654 | 8.7 (v4.0) 7.5 (v3.1) | Core FTP/SFTP Server 1.2 Denial of Service via Buffer … |
Coreftp |
Core FTP/SFTP Server |
2026-03-30T11:02:27.608Z | 2026-10-27T00:54:09.249Z |
| cve-2019-25276 | 8.5 (v4.0) 7.8 (v3.1) | Studio 5000 Logix Designer 30.01.00 - 'FactoryTalk Act… |
Rockwellautomation |
Studio |
2026-02-04T23:15:52.435Z | 2026-10-27T00:54:08.567Z |
| cve-2019-25269 | 8.5 (v4.0) 7.8 (v3.1) | Amiti Antivirus 25.0.640 - Unquoted Service Path Vulne… |
Netgate |
Amiti Antivirus |
2026-02-04T23:15:48.689Z | 2026-10-27T00:54:07.849Z |
| cve-2026-97028 | N/A | {'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-27T00:50:52.455Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'Maintainers determined it is not a vulnerability.'}]} | N/A | N/A | 2026-10-27T00:50:52.455Z | |
| cve-2018-25254 | 9.3 (v4.0) 9.8 (v3.1) | NICO-FTP 3.0.1.19 Buffer Overflow SEH |
nico-ftp |
NICO-FTP |
2026-04-04T13:51:17.803Z | 2026-10-27T00:40:48.181Z |
| cve-2017-20284 | 8.7 (v4.0) 7.5 (v3.1) | Caucho Resin resin-doc Unauthenticated Path Traversal … |
Caucho Technology, Inc. |
Resin |
2026-09-18T19:00:15.115Z | 2026-10-27T00:40:47.537Z |
| cve-2017-20252 | 8.8 (v4.0) 8.2 (v3.1) | Joomla NextGen Editor 2.1.0 SQL Injection via plname P… |
nextgeneditor |
NextGen Editor |
2026-06-19T15:17:18.066Z | 2026-10-27T00:40:46.876Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-309 | Vulnérabilité dans Password safe | 2006-07-25T00:00:00.000000 | 2006-07-25T00:00:00.000000 |
| certa-2006-avi-308 | Vulnérabilités dans Solaris | 2006-07-25T00:00:00.000000 | 2006-07-25T00:00:00.000000 |
| certa-2006-avi-307 | Vulnérabilité dans les produits TippingPoint | 2006-07-25T00:00:00.000000 | 2006-07-25T00:00:00.000000 |
| certa-2006-avi-268 | Vulnérabilité dans Mutt | 2006-06-29T00:00:00.000000 | 2006-07-24T00:00:00.000000 |
| certa-2006-avi-304 | Vulnérabilité sur zope | 2006-07-20T00:00:00.000000 | 2006-07-21T00:00:00.000000 |
| certa-2006-avi-275 | Vulnérabilité dans phpMyAdmin | 2006-07-07T00:00:00.000000 | 2006-07-21T00:00:00.000000 |
| certa-2006-avi-306 | Vulnérabilité dans Citrix MetaFrame | 2006-07-20T00:00:00.000000 | 2006-07-20T00:00:00.000000 |
| certa-2006-avi-305 | Multiples vulnérabilités dans Cisco CS-MARS | 2006-07-20T00:00:00.000000 | 2006-07-20T00:00:00.000000 |
| certa-2006-avi-303 | Multiples vulnérabilités sur Oracle | 2006-07-19T00:00:00.000000 | 2006-07-19T00:00:00.000000 |
| certa-2006-avi-302 | Vulnérabilité du Sun Solaris | 2006-07-19T00:00:00.000000 | 2006-07-19T00:00:00.000000 |
| certa-2006-avi-298 | Vulnérabilité du noyau Linux | 2006-07-18T00:00:00.000000 | 2006-07-19T00:00:00.000000 |
| certa-2006-avi-297 | Vulnérabilité sur les routeurs D-Link | 2006-07-18T00:00:00.000000 | 2006-07-18T00:00:00.000000 |
| certa-2006-avi-296 | Vulnérabilité sur McAfee ePolicy Orchestrator | 2006-07-18T00:00:00.000000 | 2006-07-18T00:00:00.000000 |
| certa-2006-avi-295 | Vulnérabilité de la fonction prctl du noyau Linux | 2006-07-18T00:00:00.000000 | 2006-07-18T00:00:00.000000 |
| certa-2006-avi-293 | Multiples vulnérabilités sur Cisco Unified Call Manager | 2006-07-13T00:00:00.000000 | 2006-07-13T00:00:00.000000 |
| certa-2006-avi-292 | Vulnérabilité sur Cisco Router Web Setup (CWRS) | 2006-07-13T00:00:00.000000 | 2006-07-13T00:00:00.000000 |
| certa-2006-avi-291 | Vulnérabilité du module webform de Drupal | 2006-07-13T00:00:00.000000 | 2006-07-13T00:00:00.000000 |
| certa-2006-avi-290 | Vulnérabilité de Cisco IPS | 2006-07-13T00:00:00.000000 | 2006-07-13T00:00:00.000000 |
| certa-2006-avi-289 | Vulnérabilité IPv6 dans JunOS de Juniper | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-288 | Vulnérabilité d'Adobe Acrobat | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-287 | Vulnérabilité du client DHCP de Microsoft Windows | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-286 | Plusieurs vulnérabilités dans les logiciels Microsoft | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-285 | Multiples vulnérabilités dans Microsoft Excel | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-284 | Vulnérabilités de certains filtres de Microsoft Office | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-283 | Multiples vulnérabilités du service Serveur de Microsoft Windows | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-282 | Vulnérabilité de Microsoft IIS utilisant ASP | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-281 | Vulnérabilité de Microsoft .NET Framework | 2006-07-12T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-avi-280 | Vulnérabilité de Qbik WinGate | 2006-07-11T00:00:00.000000 | 2006-07-11T00:00:00.000000 |
| certa-2006-avi-279 | Vulnérabilité de Shadow | 2006-07-10T00:00:00.000000 | 2006-07-10T00:00:00.000000 |
| certa-2006-avi-278 | Vulnérabilités dans WebEx | 2006-07-10T00:00:00.000000 | 2006-07-10T00:00:00.000000 |