Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108111 | 5.3 (v4.0) 4.3 (v3.1) | ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via… |
ageerle |
ruoyi-ai |
2026-10-09T15:04:58.390Z | 2026-10-13T01:36:43.781Z |
| cve-2026-108110 | 7.6 (v4.0) 6.8 (v3.1) | MOVO through 0.2.3 Authorization Bypass via Document E… |
himovo |
MOVO |
2026-10-09T15:04:57.720Z | 2026-10-14T01:55:25.986Z |
| cve-2026-107807 | Nginx UI: Node Secret Credential Exposure via URL Quer… |
0xJacky |
nginx-ui |
2026-10-09T15:04:18.109Z | 2026-10-09T17:57:31.880Z | |
| cve-2026-107806 | Nginx UI: Authenticated Remote Code Execution via Back… |
0xJacky |
nginx-ui |
2026-10-09T15:00:55.470Z | 2026-10-14T01:52:48.127Z | |
| cve-2026-108125 | 7.1 (v4.0) | WordPress Post Author Authenticated SQLi |
|
|
2026-10-09T14:59:48.932Z | 2026-10-09T18:11:02.232Z |
| cve-2026-15340 | 9.8 (v3.1) 9.3 (v4.0) | Savannah lwIP SMTP client Classic Buffer Overflow |
Savannah |
lwIP SMTP client |
2026-10-09T14:52:43.517Z | 2026-10-11T17:05:28.240Z |
| cve-2026-108124 | 4.9 (v3.1) | WordPress Post Author Authenticated SQLi |
|
|
2026-10-09T14:51:05.216Z | 2026-10-09T18:12:17.405Z |
| cve-2026-107805 | Nginx UI: Unauthenticated signed-request body staging … |
0xJacky |
nginx-ui |
2026-10-09T14:50:58.011Z | 2026-10-13T16:52:07.738Z | |
| cve-2026-107804 | Nginx UI: Bundled reverse proxy can bypass IP allowlis… |
0xJacky |
nginx-ui |
2026-10-09T14:49:20.145Z | 2026-10-09T15:09:10.128Z | |
| cve-2026-95702 | 8.5 (v4.0) | Code Execution in Host Sentry Process via Double Free … |
Google |
gVisor |
2026-10-09T14:44:35.711Z | 2026-10-15T18:15:18.924Z |
| cve-2026-33272 | 4.9 (v3.1) 6.8 (v4.0) | Red Lion Controls N-Tron 700 Series Authentication Byp… |
Red Lion Controls |
700 Series |
2026-10-09T14:44:26.429Z | 2026-10-11T17:05:28.353Z |
| cve-2026-39453 | 8.3 (v3.1) 8.5 (v4.0) | Red Lion Controls N-Tron 700 Series Reachable Assertion |
Red Lion Controls |
700 Series |
2026-10-09T14:42:18.998Z | 2026-10-11T17:05:28.474Z |
| cve-2026-29797 | 7.1 (v3.1) 8.4 (v4.0) | Red Lion Controls N-Tron 700 Series Download of Code W… |
Red Lion Controls |
700 Series |
2026-10-09T14:40:20.991Z | 2026-10-11T17:05:28.589Z |
| cve-2026-33367 | 8.1 (v3.1) 9.3 (v4.0) | Red Lion Controls N-Tron 700 Series Missing Authentica… |
Red Lion Controls |
700 Series |
2026-10-09T14:38:37.795Z | 2026-10-11T17:05:28.710Z |
| cve-2026-28745 | 7.5 (v3.1) 9.3 (v4.0) | Red Lion Controls N-Tron 700 Series Storing Passwords … |
Red Lion Controls |
700 Series |
2026-10-09T14:36:22.086Z | 2026-10-11T17:05:28.832Z |
| cve-2026-108109 | 9.3 (v4.0) 9.1 (v3.1) | PHPNuxBill through 2025.3.20 Account Takeover via Brut… |
hotspotbilling |
phpnuxbill |
2026-10-09T14:33:32.201Z | 2026-10-09T17:26:03.792Z |
| cve-2026-108108 | 7.1 (v4.0) 7.1 (v3.1) | PHPNuxBill through 2025.3.20 CHAP Authentication Bypas… |
hotspotbilling |
phpnuxbill |
2026-10-09T14:33:31.585Z | 2026-10-14T01:51:06.748Z |
| cve-2026-108107 | 9.3 (v4.0) 9.8 (v3.1) | PHPNuxBill through 2025.3.20 Unauthenticated SQL Injec… |
hotspotbilling |
phpnuxbill |
2026-10-09T14:33:30.389Z | 2026-10-09T14:46:56.077Z |
| cve-2026-108106 | 8.7 (v4.0) 7.5 (v3.1) | Xerial snappy-java before 1.1.10.9 Unbounded Memory Al… |
xerial |
snappy-java |
2026-10-09T14:33:29.499Z | 2026-10-13T16:51:17.678Z |
| cve-2026-108104 | 6.3 (v4.0) 4.8 (v3.1) | Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Rel… |
xerial |
snappy-java |
2026-10-09T14:33:28.705Z | 2026-10-14T16:04:36.744Z |
| cve-2026-39460 | 8.1 (v3.1) 9.3 (v4.0) | Red Lion Controls N-Tron 700 Series Insufficiently Pro… |
Red Lion Controls |
700 Series |
2026-10-09T14:30:47.942Z | 2026-10-12T22:54:01.598Z |
| cve-2026-104115 | 5.4 (v4.0) | Stack buffer overflow in illumos reparsed nfs-basic pl… |
illumos |
illumos-gate |
2026-10-09T14:24:52.028Z | 2026-10-15T18:13:25.024Z |
| cve-2026-32645 | 6 (v3.1) 9.2 (v4.0) | Red Lion Controls N-Tron 700 Series Use of Hard-Coded … |
Red Lion Controls |
700 Series |
2026-10-09T14:24:05.664Z | 2026-10-12T22:54:01.723Z |
| cve-2026-104114 | 5.4 (v4.0) | NULL pointer dereference in illumos nwamd door handler… |
illumos |
illumos-gate |
2026-10-09T14:22:14.611Z | 2026-10-09T16:45:28.800Z |
| cve-2026-104112 | 6.8 (v4.0) | Missing release of passed file descriptors in illumos … |
illumos |
illumos-gate |
2026-10-09T14:19:29.399Z | 2026-10-09T16:45:36.172Z |
| cve-2026-104116 | 1.9 (v4.0) | Missing authorization in illumos zonestatd allows loca… |
illumos |
illumos-gate |
2026-10-09T14:18:09.944Z | 2026-10-09T16:45:43.444Z |
| cve-2026-104113 | 5.4 (v4.0) | Double free in OmniOS and SmartOS ipmgmtd allows local… |
OmniOS |
OmniOS |
2026-10-09T14:17:00.527Z | 2026-10-09T16:45:51.552Z |
| cve-2026-104117 | 1.9 (v4.0) | Missing authorization in illumos ipmgmtd allows local … |
illumos |
illumos-gate |
2026-10-09T14:15:42.585Z | 2026-10-09T16:45:59.398Z |
| cve-2026-104081 | 7.2 (v4.0) 8.1 (v3.1) | KodExplorer < 4.55 Path Traversal via unzip_pre_name()… |
kalcaddle |
KodExplorer |
2026-10-09T14:13:49.992Z | 2026-10-09T17:26:54.797Z |
| cve-2026-102916 | 6.8 (v4.0) | Reachable assertion in illumos bhyve REP string instru… |
illumos |
illumos-gate |
2026-10-09T14:12:08.832Z | 2026-10-09T21:07:26.509Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2006-avi-171 | Multiples vulnérabilités dans PHP | 2006-04-27T00:00:00.000000 | 2006-04-27T00:00:00.000000 |
| certa-2006-avi-170 | Vulnérabilité dans le logiciel Ethereal | 2006-04-26T00:00:00.000000 | 2006-07-06T00:00:00.000000 |
| certa-2006-avi-169 | Vulnérabilités dans Symantec Scan Engine | 2006-04-24T00:00:00.000000 | 2006-04-24T00:00:00.000000 |
| certa-2006-avi-168 | Vulnérabilités dans Cisco CiscoWorks WLSE | 2006-04-20T00:00:00.000000 | 2006-04-20T00:00:00.000000 |
| certa-2006-avi-167 | Plusieurs vulnérabilités dans Cisco IOS XR | 2006-04-20T00:00:00.000000 | 2006-04-20T00:00:00.000000 |
| certa-2006-avi-166 | Vulnérabilité dans Symantec LiveUpdate pour Macintosh | 2006-04-20T00:00:00.000000 | 2006-04-20T00:00:00.000000 |
| certa-2006-avi-165 | Vulnérabilité dans AIX d'IBM | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-164 | Vulnérabilité dans EAServer de Sybase | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-163 | Vulnérabilité sur Plone | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-162 | Multiples vulnérabilités dans J2SE sous Mac OS X | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-161 | Vulnérabilités dans le noyau Linux | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-160 | Vulnérabilité dans Sun Java Studio Enterprise | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-159 | Vulnérabilité sur sh sous Solaris | 2006-04-19T00:00:00.000000 | 2006-04-19T00:00:00.000000 |
| certa-2006-avi-158 | Multiples vulnérabilités sur les logiciels Oracle | 2006-04-19T00:00:00.000000 | 2006-05-02T00:00:00.000000 |
| certa-2006-avi-157 | Vulnérabilité dans Dokeos | 2006-04-18T00:00:00.000000 | 2006-04-18T00:00:00.000000 |
| certa-2006-avi-156 | Multiples vulnérabilités dans Firefox | 2006-04-18T00:00:00.000000 | 2006-04-27T00:00:00.000000 |
| certa-2006-avi-155 | Vulnérabilité de LDAP2 sous Sun Solaris | 2006-04-13T00:00:00.000000 | 2006-04-13T00:00:00.000000 |
| certa-2006-avi-154 | Vulnérabilité de LDAP2 sous Sun Solaris | 2006-04-13T00:00:00.000000 | 2006-04-13T00:00:00.000000 |
| certa-2006-avi-153 | Vulnérabilité dans Horde Application Framework 3 | 2006-04-13T00:00:00.000000 | 2006-04-13T00:00:00.000000 |
| certa-2006-avi-152 | Vulnérabilité dans Microsoft FrontPage | 2006-04-12T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2006-avi-151 | Vulnérabilité sur la fonction Microsoft Data Access Components (MDAC) | 2006-04-12T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2006-avi-150 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2006-04-12T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2006-avi-149 | Vulnérabilité dans Microsoft Outlook Express | 2006-04-12T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2006-avi-148 | Vulnérabilité dans l'explorateur de Microsoft Windows | 2006-04-12T00:00:00.000000 | 2006-05-10T00:00:00.000000 |
| certa-2006-avi-147 | Vulnérabilité sur les commutateurs 11500 CISCO | 2006-04-10T00:00:00.000000 | 2006-04-10T00:00:00.000000 |
| certa-2006-avi-146 | Vulnérabilité dans Mailman | 2006-04-10T00:00:00.000000 | 2006-06-27T00:00:00.000000 |
| certa-2006-avi-145 | Vulnérabilités sur CACTI | 2006-04-10T00:00:00.000000 | 2006-04-20T00:00:00.000000 |
| certa-2006-avi-144 | Vulnérabilités dans phpBB | 2006-04-10T00:00:00.000000 | 2006-04-13T00:00:00.000000 |
| certa-2006-avi-142 | Vulnérabilité dans phpMyAdmin | 2006-04-07T00:00:00.000000 | 2006-04-11T00:00:00.000000 |
| certa-2006-avi-141 | Vulnérabilités dans Dokeos | 2006-04-07T00:00:00.000000 | 2006-04-07T00:00:00.000000 |