Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107857 | Mindwtr: Cloud token and WebDAV password stored in pla… |
dongdongbh |
Mindwtr |
2026-10-09T20:33:19.334Z | 2026-10-13T20:25:47.980Z | |
| cve-2026-107856 | CiviForm: Trusted-Intermediary IDOR discloses any citi… |
civiform |
civiform |
2026-10-09T20:32:10.885Z | 2026-10-13T11:21:50.989Z | |
| cve-2026-107854 | Jexactyl: Free-billing order endpoint renews and unsus… |
Jexactyl |
Jexactyl |
2026-10-09T20:31:02.541Z | 2026-10-13T16:01:00.513Z | |
| cve-2026-107852 | Jexactyl: Stripe checkout confirmation accepts mismatc… |
Jexactyl |
Jexactyl |
2026-10-09T20:28:06.513Z | 2026-10-14T02:11:26.450Z | |
| cve-2026-107851 | Contao: Improper access control in the table access voter |
contao |
contao |
2026-10-09T20:26:31.329Z | 2026-10-13T17:03:02.847Z | |
| cve-2026-107850 | Contao: Improper access control in the preview links module |
contao |
contao |
2026-10-09T20:25:02.286Z | 2026-10-13T20:25:58.184Z | |
| cve-2026-107848 | Contao: Cross-site request forgery in custom backend actions |
contao |
contao |
2026-10-09T20:22:12.778Z | 2026-10-13T11:20:32.388Z | |
| cve-2026-107845 | Contao: Cross-site scripting in the comments bundle |
contao |
contao |
2026-10-09T19:29:55.396Z | 2026-10-09T19:51:45.890Z | |
| cve-2026-107844 | Contao: Path traversal in the images controller |
contao |
contao |
2026-10-09T19:24:02.625Z | 2026-10-14T02:10:01.161Z | |
| cve-2026-107843 | Contao: The registration module re-sends activation ma… |
contao |
contao |
2026-10-09T19:21:32.011Z | 2026-10-13T17:08:23.664Z | |
| cve-2026-107842 | Contao: Protected page content is disclosed to anonymo… |
contao |
contao |
2026-10-09T19:02:30.677Z | 2026-10-13T20:26:18.278Z | |
| cve-2026-107841 | pacioli: A submit consent marker licensed cancellation… |
john-broadway |
pacioli |
2026-10-09T18:11:07.226Z | 2026-10-09T18:41:50.092Z | |
| cve-2026-108096 | 6.5 (v3.1) 7.1 (v4.0) | Improper authorization in query resolvers for SQL-back… |
AWS |
aws-amplify/graphql-index-transformer |
2026-10-09T18:10:24.488Z | 2026-10-20T18:10:23.104Z |
| cve-2026-107840 | yopass Prometheus metrics middleware allows remote mem… |
jhaals |
yopass |
2026-10-09T18:08:29.059Z | 2026-10-09T19:25:28.403Z | |
| cve-2026-107839 | ageLANServer: Unbounded JSON Array Allocation in AoE3 … |
luskaner |
ageLANServer |
2026-10-09T17:58:09.801Z | 2026-10-14T02:08:46.377Z | |
| cve-2026-107838 | RIOT: nanocoap_fileserver ignores response initializat… |
RIOT-OS |
RIOT |
2026-10-09T17:55:34.670Z | 2026-10-13T17:07:38.700Z | |
| cve-2026-107837 | RIOT: Out-of-Bounds Read in RIOT OS 6LoWPAN SFF Fragme… |
RIOT-OS |
RIOT |
2026-10-09T17:53:47.707Z | 2026-10-13T20:26:34.327Z | |
| cve-2026-107836 | RIOT: nanoCoAP Block2 client slice handling underflows… |
RIOT-OS |
RIOT |
2026-10-09T17:49:41.120Z | 2026-10-09T18:00:37.637Z | |
| cve-2026-107835 | OWASP Coraza WAF: Cookie Parser Confusion |
corazawaf |
coraza |
2026-10-09T17:46:58.890Z | 2026-10-09T18:24:00.100Z | |
| cve-2026-107824 | x64dbg-MCP Server exposes debugger operations to unaut… |
duty1g |
x64dbg-mcp-server |
2026-10-09T17:45:17.458Z | 2026-10-14T02:07:08.699Z | |
| cve-2026-107820 | x64dbg-MCP Server vulnerable to pre-authentication den… |
duty1g |
x64dbg-mcp-server |
2026-10-09T17:42:45.100Z | 2026-10-13T17:05:59.249Z | |
| cve-2026-107834 | OWASP Coraza WAF: Resource exhaustion via deferred fil… |
corazawaf |
coraza |
2026-10-09T17:41:07.802Z | 2026-10-13T20:26:52.261Z | |
| cve-2026-107833 | OWASP Coraza WAF: Unbounded recursion in JSON response… |
corazawaf |
coraza |
2026-10-09T17:39:48.049Z | 2026-10-09T18:02:08.775Z | |
| cve-2026-107826 | OWASP Coraza WAF: JSON body processor: argument-limit … |
corazawaf |
coraza |
2026-10-09T17:33:49.389Z | 2026-10-09T17:55:14.751Z | |
| cve-2026-107825 | OWASP Coraza WAF: ProcessURI silently drops QUERY_STRI… |
corazawaf |
coraza |
2026-10-09T17:32:11.506Z | 2026-10-14T02:04:18.247Z | |
| cve-2026-107823 | MariaDB: privilege escalation via incorrect view frm parsing |
MariaDB |
server |
2026-10-09T17:30:36.062Z | 2026-10-13T17:04:53.917Z | |
| cve-2026-107822 | MariaDB: database privilege escalation via user / role… |
MariaDB |
server |
2026-10-09T17:28:47.578Z | 2026-10-13T20:27:06.868Z | |
| cve-2026-107821 | MariaDB: insufficient validation of binary frm data wh… |
MariaDB |
server |
2026-10-09T17:27:16.316Z | 2026-10-09T17:42:29.482Z | |
| cve-2026-107819 | MariaDB Connector/C: libmariadb allowed cleartext pass… |
MariaDB |
server |
2026-10-09T17:25:45.082Z | 2026-10-09T17:59:15.334Z | |
| cve-2026-107818 | MariaDB: environment injection via wsrep bootstrap in … |
MariaDB |
server |
2026-10-09T17:23:58.543Z | 2026-10-14T02:02:34.303Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-230 | Vulnérabilité de Sun StorADE | 2006-06-07T00:00:00.000000 | 2006-06-07T00:00:00.000000 |
| certa-2006-avi-229 | Vulnérabilité dans SquirrelMail | 2006-06-07T00:00:00.000000 | 2006-08-02T00:00:00.000000 |
| certa-2006-avi-228 | Vulnérabilités dans Claroline | 2006-06-06T00:00:00.000000 | 2006-06-06T00:00:00.000000 |
| certa-2006-avi-227 | Multiples vulnérabilités dans les produits Mozilla | 2006-06-02T00:00:00.000000 | 2007-10-15T00:00:00.000000 |
| certa-2006-avi-226 | Multiples vulnérabilités dans FreeBSD | 2006-06-02T00:00:00.000000 | 2006-06-02T00:00:00.000000 |
| certa-2006-avi-506 | Vulnérabilité dans libpng | 2006-06-01T00:00:00.000000 | 2006-11-17T00:00:00.000000 |
| certa-2006-avi-225 | Vulnérabilité dans F-Secure Anti-Virus pour Microsoft Exchange | 2006-06-01T00:00:00.000000 | 2006-06-01T00:00:00.000000 |
| certa-2006-avi-224 | Multiples Vulnérabilités dans libTIFF | 2006-06-01T00:00:00.000000 | 2006-06-01T00:00:00.000000 |
| certa-2006-avi-223 | Vulnérabilité de Plume CMS | 2006-05-31T00:00:00.000000 | 2006-05-31T00:00:00.000000 |
| certa-2006-avi-222 | Vulnérabilités de cURL | 2006-05-29T00:00:00.000000 | 2006-09-28T00:00:00.000000 |
| certa-2006-avi-221 | Vulnérabilité dans Symantec AntiVirus et Client Security | 2006-05-28T00:00:00.000000 | 2006-06-12T00:00:00.000000 |
| certa-2006-avi-220 | Vulnérabilité dans le client VPN de Cisco | 2006-05-26T00:00:00.000000 | 2006-05-26T00:00:00.000000 |
| certa-2006-avi-219 | Vulnérabilités dans Drupal | 2006-05-26T00:00:00.000000 | 2006-05-26T00:00:00.000000 |
| certa-2006-avi-218 | Multiples vulnérabilités dans Tor | 2006-05-26T00:00:00.000000 | 2006-05-26T00:00:00.000000 |
| certa-2006-avi-217 | Vulnérabilité de WebObjects pour Apple Xcode Tools | 2006-05-24T00:00:00.000000 | 2006-05-24T00:00:00.000000 |
| certa-2006-avi-216 | Vulnérabilités dans PostgreSQL | 2006-05-24T00:00:00.000000 | 2006-08-21T00:00:00.000000 |
| certa-2006-avi-215 | Plusieurs vulnérabilités dans les produits HP OpenView | 2006-05-24T00:00:00.000000 | 2006-05-24T00:00:00.000000 |
| certa-2006-avi-214 | Vulnérabilité de GNU Binutils | 2006-05-23T00:00:00.000000 | 2006-05-23T00:00:00.000000 |
| certa-2006-avi-213 | Vulnérabilité dans Xoops | 2006-05-23T00:00:00.000000 | 2006-05-23T00:00:00.000000 |
| certa-2006-avi-212 | Vulnérabilité des routeurs Linksys WRT54G | 2006-05-23T00:00:00.000000 | 2006-05-24T00:00:00.000000 |
| certa-2006-avi-211 | Vulnérabilité de Dia | 2006-05-23T00:00:00.000000 | 2006-06-08T00:00:00.000000 |
| certa-2006-avi-210 | Vulnérabilité dans Cyrus IMAP Server | 2006-05-23T00:00:00.000000 | 2006-05-23T00:00:00.000000 |
| certa-2006-avi-209 | Vulnérabilité de Skype pour Microsoft Windows | 2006-05-22T00:00:00.000000 | 2006-05-22T00:00:00.000000 |
| certa-2006-avi-208 | Vulnérabilité de SAP SAPDBA | 2006-05-22T00:00:00.000000 | 2006-05-22T00:00:00.000000 |
| certa-2006-avi-207 | Vulnérabilité de Sun Java System Server et Sun ONE Server | 2006-05-19T00:00:00.000000 | 2006-05-19T00:00:00.000000 |
| certa-2006-avi-205 | Vulnérabilité dans iMonitor de Novell eDirectory | 2006-05-18T00:00:00.000000 | 2006-05-18T00:00:00.000000 |
| certa-2006-avi-204 | Vulnérabilité de Novell NetWare | 2006-05-18T00:00:00.000000 | 2006-05-18T00:00:00.000000 |
| certa-2006-avi-203 | Multiples vulnérabilités de BEA WebLogic | 2006-05-17T00:00:00.000000 | 2006-05-17T00:00:00.000000 |
| certa-2006-avi-202 | Vulnérabilité du contrôle ActiveX I-Nav de Verisign | 2006-05-17T00:00:00.000000 | 2006-05-17T00:00:00.000000 |
| certa-2006-avi-201 | Vulnérabilité dans Cisco AVS | 2006-05-16T00:00:00.000000 | 2006-05-16T00:00:00.000000 |