Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107817 | MariaDB: mysql_json plugin OOB reads |
MariaDB |
server |
2026-10-09T17:22:19.290Z | 2026-10-13T17:04:02.004Z | |
| cve-2026-107816 | MariaDB: `qc_info` plugin can do OOB reads if query co… |
MariaDB |
server |
2026-10-09T17:19:00.365Z | 2026-10-13T20:27:21.152Z | |
| cve-2026-42695 | 6.5 (v3.1) | WordPress FV Flowplayer Video Player plugin <= 7.5.54.… |
FolioVision |
FV Flowplayer Video Player |
2026-10-09T16:51:45.133Z | 2026-10-11T11:42:55.084Z |
| cve-2026-108119 | 6.3 (v3.1) | Busybox: busybox: tar extraction-root escape via defer… |
Red Hat |
Red Hat Hardened Images |
2026-10-09T16:45:59.735Z | 2026-11-05T15:56:00.857Z |
| cve-2026-108093 | 5.5 (v3.1) | Gimp: gimp: denial of service via null pointer derefer… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-09T16:45:57.667Z | 2026-11-05T15:55:57.947Z |
| cve-2026-55797 | Argo CD repo-server command injection via crafted SSH … |
argoproj |
argo-cd |
2026-10-09T16:43:35.954Z | 2026-10-09T17:53:53.357Z | |
| cve-2026-75597 | pyLoad: Unauthenticated access to /web/<path:filename>… |
pyload |
pyload |
2026-10-09T16:41:21.081Z | 2026-10-09T17:04:31.503Z | |
| cve-2026-48484 | pyLoad: Lack of Input Size Validation Leads to Denial … |
pyload |
pyload |
2026-10-09T16:26:37.728Z | 2026-10-14T02:00:47.553Z | |
| cve-2026-107815 | MariaDB: one byte OOB write in DOS tables of the CONNE… |
MariaDB |
server |
2026-10-09T16:05:49.046Z | 2026-10-13T17:01:48.035Z | |
| cve-2026-108160 | 7.7 (v4.0) 7.5 (v3.1) | AstronRPA through 1.1.6 Unsigned Update Installation v… |
iflytek |
astron-rpa |
2026-10-09T16:04:44.290Z | 2026-10-09T19:35:24.473Z |
| cve-2026-108159 | 7.7 (v4.0) 7.5 (v3.1) | AstronRPA through 1.1.6 RCE via Smart-Component Chat X… |
iflytek |
astron-rpa |
2026-10-09T16:04:42.687Z | 2026-10-13T16:58:15.751Z |
| cve-2026-108158 | 7.1 (v4.0) 6.5 (v3.1) | plugNmeet Server through 2.5.2 Path Traversal via /api… |
mynaparrot |
plugNmeet-server |
2026-10-09T16:04:41.634Z | 2026-10-14T16:04:06.935Z |
| cve-2026-108157 | 9.2 (v4.0) 8.1 (v3.1) | Pingvin Share X 0.19.0 before 1.22.0 Account Takeover … |
smp46 |
pingvin-share-x |
2026-10-09T16:04:41.138Z | 2026-10-09T17:14:05.839Z |
| cve-2026-108156 | 6.9 (v4.0) 7.1 (v3.1) | LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Direct… |
netease-youdao |
LobsterAI |
2026-10-09T16:04:40.625Z | 2026-10-14T01:59:13.568Z |
| cve-2016-20098 | 5.1 (v4.0) 5.4 (v3.1) | Moderator Toolbox before 4.0.14 Stored XSS via Removal… |
toolbox-team |
reddit-moderator-toolbox |
2026-10-09T16:04:40.081Z | 2026-10-09T19:37:15.194Z |
| cve-2026-107814 | MariaDB: Insecure $HOME in MariaDB rpm packages |
MariaDB |
server |
2026-10-09T16:02:25.544Z | 2026-10-09T16:45:15.295Z | |
| cve-2026-107813 | Nginx UI: Incomplete fix of CVE-2026-84315 - the api/c… |
0xJacky |
nginx-ui |
2026-10-09T15:47:33.503Z | 2026-10-09T17:16:22.934Z | |
| cve-2026-107812 | Nginx UI: Self-upgrade runs an unsigned binary verifie… |
0xJacky |
nginx-ui |
2026-10-09T15:41:04.107Z | 2026-10-09T19:07:43.373Z | |
| cve-2026-107783 | 5.9 (v3.1) 6.7 (v4.0) | Insertion of sensitive information into log file in AW… |
AWS |
aws-tools-for-powershell |
2026-10-09T15:38:20.252Z | 2026-10-09T18:08:43.690Z |
| cve-2026-107811 | 0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens … |
0xJacky |
nginx-ui |
2026-10-09T15:36:18.662Z | 2026-10-14T01:57:18.316Z | |
| cve-2026-107810 | Nginx UI: Backup restore follows crafted symlinks into… |
0xJacky |
nginx-ui |
2026-10-09T15:25:26.604Z | 2026-10-13T16:56:38.228Z | |
| cve-2026-90983 | 8.2 (v3.1) | OTP Code Exposure in Hayat Hospital's Hayat Mobile |
Hayat Health Facilities Inc. (Hayat Hospital) |
Hayat Mobile |
2026-10-09T15:22:11.424Z | 2026-10-09T18:09:02.119Z |
| cve-2026-107809 | Nginx-UI AuthRequired token cookie fallback enables CS… |
0xJacky |
nginx-ui |
2026-10-09T15:22:10.562Z | 2026-10-09T16:45:22.243Z | |
| cve-2026-107808 | Nginx UI: Authentication bypass: password login does n… |
0xJacky |
nginx-ui |
2026-10-09T15:11:44.387Z | 2026-10-09T17:19:53.438Z | |
| cve-2026-104084 | 8.7 (v4.0) 8.8 (v3.1) | SmarterMail < Build 9777 Stale JWT Role Claim Privileg… |
Smartertools |
Smartermail |
2026-10-09T15:08:23.453Z | 2026-10-27T01:30:37.477Z |
| cve-2026-102554 | 8.2 (v4.0) | Denial of Service via Eager Array Allocation During De… |
Google |
Guava |
2026-10-09T15:07:16.130Z | 2026-10-09T18:09:50.100Z |
| cve-2026-104083 | 5.3 (v4.0) 6.1 (v3.1) | SmarterMail < Build 9777 Stored Mutation XSS via MathM… |
Smartertools |
Smartermail |
2026-10-09T15:06:57.154Z | 2026-10-27T01:30:36.776Z |
| cve-2026-104082 | 8.6 (v4.0) 7.2 (v3.1) | SmarterMail < Build 9777 SysAdmin Remote Code Executio… |
Smartertools |
Smartermail |
2026-10-09T15:05:21.411Z | 2026-10-27T01:30:36.085Z |
| cve-2026-108113 | 8.7 (v4.0) 8.8 (v3.1) | ILIAS before 9.24, 10.12, and 11.5 Unrestricted File U… |
ILIAS-eLearning e.V. |
ILIAS |
2026-10-09T15:04:59.582Z | 2026-10-13T16:53:44.474Z |
| cve-2026-108112 | 5.3 (v4.0) 5.4 (v3.1) | ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via… |
ageerle |
ruoyi-ai |
2026-10-09T15:04:59.016Z | 2026-10-14T16:04:26.608Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-200 | Vulnérabilité dans FileZilla | 2006-05-16T00:00:00.000000 | 2006-05-16T00:00:00.000000 |
| certa-2006-avi-199 | Vulnérabilité de l'outil Nagios | 2006-05-16T00:00:00.000000 | 2006-05-24T00:00:00.000000 |
| certa-2006-avi-198 | Multiples vulnérabilités de RealVNC | 2006-05-16T00:00:00.000000 | 2006-05-19T00:00:00.000000 |
| certa-2006-avi-197 | Vulnérabilité dans phpMyAdmin | 2006-05-16T00:00:00.000000 | 2006-05-16T00:00:00.000000 |
| certa-2006-avi-196 | Vulnérabilité dans phpMyAgenda | 2006-05-15T00:00:00.000000 | 2006-05-15T00:00:00.000000 |
| certa-2006-avi-195 | Multiples vulnérabilités sous Mac OS X | 2006-05-12T00:00:00.000000 | 2006-05-12T00:00:00.000000 |
| certa-2006-avi-194 | Multiples vulnérabilités du logiciel QuickTime | 2006-05-12T00:00:00.000000 | 2006-05-12T00:00:00.000000 |
| certa-2006-avi-193 | Vulnérabilité dans Dokeos | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-192 | Vulnérabilités dans Claroline | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-191 | Vulnérabilité des antivirus Sophos | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-190 | Vulnérabilité dans Sun Solaris | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-189 | Multiples vulnérabilités du service Windows MSDTC | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-188 | Vulnérabilités dans Macromedia Flash Player sous Windows | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-187 | Vulnérabilité dans Microsoft Exchange | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-186 | Vulnérabilité dans les produits Cisco PIX, ASA et FWSM | 2006-05-10T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-185 | Vulnérabilité de l'outil de surveillance réseau Nagios | 2006-05-05T00:00:00.000000 | 2006-05-05T00:00:00.000000 |
| certa-2006-avi-184 | Vulnérabilité de AWStats | 2006-05-05T00:00:00.000000 | 2006-06-12T00:00:00.000000 |
| certa-2006-avi-206 | Vulnérabilité dans Invision Power Board | 2006-05-04T00:00:00.000000 | 2006-05-04T00:00:00.000000 |
| certa-2006-avi-183 | Vullnérabilités dans OpenVPN | 2006-05-04T00:00:00.000000 | 2006-05-04T00:00:00.000000 |
| certa-2006-avi-182 | Mutliples vulnérabilités sur MySQL | 2006-05-04T00:00:00.000000 | 2006-06-28T00:00:00.000000 |
| certa-2006-avi-181 | Multiples vulnérabilités dans Invision Power Board | 2006-05-04T00:00:00.000000 | 2006-05-04T00:00:00.000000 |
| certa-2006-avi-180 | Vulnérabilité dans l'outil Rsync | 2006-05-04T00:00:00.000000 | 2006-05-04T00:00:00.000000 |
| certa-2006-avi-179 | Multiples vulnérabilités du navigateur Firefox | 2006-05-03T00:00:00.000000 | 2006-05-22T00:00:00.000000 |
| certa-2006-avi-178 | Vulnérabilité dans Cisco Unity Express | 2006-05-03T00:00:00.000000 | 2006-05-03T00:00:00.000000 |
| certa-2006-avi-177 | Vulnérabilité dans X.Org/X11 | 2006-05-03T00:00:00.000000 | 2006-05-03T00:00:00.000000 |
| certa-2006-avi-176 | Vulnérabilité dans ClamAV | 2006-05-03T00:00:00.000000 | 2006-05-04T00:00:00.000000 |
| certa-2006-avi-175 | Vulnérabilité de la bibliothèque multimedia xine-lib | 2006-04-28T00:00:00.000000 | 2006-04-28T00:00:00.000000 |
| certa-2006-avi-174 | Vulnérabilité du logiciel client IVE de Juniper | 2006-04-27T00:00:00.000000 | 2006-04-27T00:00:00.000000 |
| certa-2006-avi-173 | Multiples vulnérabilités dans les mises en œuvres du protocole DNS | 2006-04-27T00:00:00.000000 | 2006-04-27T00:00:00.000000 |
| certa-2006-avi-172 | Vulnérabilité dans 3Com Baseline Switch 2848-SFP Plus | 2006-04-27T00:00:00.000000 | 2006-04-27T00:00:00.000000 |