Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-55640 | N/A | A heap buffer overflow in the stbl_AddSize functi… |
n/a |
n/a |
2026-10-16T00:00:00.000Z | 2026-10-26T17:26:18.665Z |
| cve-2026-52167 | N/A | A stack overflow in the gensub_ParsePsb() functio… |
n/a |
n/a |
2026-10-15T00:00:00.000Z | 2026-10-26T17:19:43.948Z |
| cve-2026-15044 | 6.3 (v3.1) | Trustyai-service-operator: trustyai service operator: … |
TrustyAI |
trustyai-service-operator |
2026-07-08T14:37:22.054Z | 2026-10-26T17:08:02.622Z |
| cve-2026-116068 | 8.7 (v4.0) 8.8 (v3.1) | Dokploy through 0.30.10 Cross-Organization Authorizati… |
Dokploy |
dokploy |
2026-10-25T11:50:57.177Z | 2026-10-26T16:53:31.091Z |
| cve-2026-116072 | 5.3 (v4.0) 5.4 (v3.1) | Infinity for Reddit through 8.3.4 OAuth Login CSRF via… |
Docile-Alligator |
Infinity for Reddit |
2026-10-25T11:50:59.942Z | 2026-10-26T16:53:14.770Z |
| cve-2026-116139 | 5.1 (v4.0) 5.4 (v3.1) | WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment… |
WWBN |
AVideo |
2026-10-25T13:19:51.674Z | 2026-10-26T16:52:45.479Z |
| cve-2026-116143 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 P… |
ImageMagick |
ImageMagick |
2026-10-25T13:19:54.384Z | 2026-10-26T16:50:00.144Z |
| cve-2026-116147 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 N… |
ImageMagick |
ImageMagick |
2026-10-25T13:19:57.089Z | 2026-10-26T16:49:43.897Z |
| cve-2026-116151 | 6.3 (v4.0) 3.7 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 M… |
ImageMagick |
ImageMagick |
2026-10-25T13:19:59.697Z | 2026-10-26T16:49:17.981Z |
| cve-2026-116155 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 M… |
ImageMagick |
ImageMagick |
2026-10-25T13:20:02.349Z | 2026-10-26T16:48:51.205Z |
| cve-2026-116159 | 4.8 (v4.0) 3.3 (v3.1) | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 M… |
ImageMagick |
ImageMagick |
2026-10-25T13:20:04.937Z | 2026-10-26T16:48:24.183Z |
| cve-2026-116163 | 9.1 (v4.0) 7.4 (v3.1) | Parse Server 9.0.0 before 9.10.5-alpha.2 Authenticatio… |
parse-community |
parse-server |
2026-10-25T13:20:07.658Z | 2026-10-26T16:47:58.712Z |
| cve-2026-56721 | 8.7 (v4.0) 8.8 (v3.1) | CamaleonCMS 2.9.2 Privilege Escalation via Parameter C… |
owen2345 |
CamaleonCMS |
2026-08-11T15:48:59.409Z | 2026-10-26T16:47:54.211Z |
| cve-2026-116167 | 7.6 (v4.0) 6.8 (v3.1) | SiYuan 2.9.0 before 3.8.7 XSS via check-auth to Parameter |
siyuan-note |
siyuan |
2026-10-25T13:20:10.372Z | 2026-10-26T16:47:43.293Z |
| cve-2026-105773 | Canimaan Software ClamXAV local privilege escalation |
Canimaan Software |
ClamXAV |
2026-10-05T20:38:55.743Z | 2026-10-26T16:46:49.379Z | |
| cve-2026-109164 | 7.1 (v4.0) 7.1 (v3.1) | TDuck survey form through 6.0 Authorization Bypass via… |
TDuckCloud |
tduck-survey-form |
2026-10-12T13:10:30.268Z | 2026-10-26T16:46:49.190Z |
| cve-2026-109171 | 5.3 (v4.0) 4.3 (v3.1) | yshop-crm through 2.1.3 Missing Authorization via /adm… |
guchengwuyue |
yshop-crm |
2026-10-12T13:10:33.592Z | 2026-10-26T16:46:49.010Z |
| cve-2026-109176 | 5.3 (v4.0) 5.4 (v3.1) | MoguBlog through 6.2 IDOR Allows Deleting Other Admini… |
moxi624 |
MoguBlog |
2026-10-12T13:10:37.009Z | 2026-10-26T16:46:48.822Z |
| cve-2026-109331 | 7.5 (v4.0) 7.4 (v3.1) | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass vi… |
Jovancoding |
Network-AI |
2026-10-12T16:05:20.585Z | 2026-10-26T16:46:48.646Z |
| cve-2026-109336 | 5.3 (v4.0) 4.3 (v3.1) | SurrealDB before 3.3.0 Field Permission Bypass via LIV… |
surrealdb |
surrealdb |
2026-10-12T16:05:23.751Z | 2026-10-26T16:46:48.474Z |
| cve-2026-109341 | 7.1 (v4.0) 7.1 (v3.1) | SurrealDB before 3.3.0 Field Permission Bypass via PAT… |
surrealdb |
surrealdb |
2026-10-12T16:05:27.167Z | 2026-10-26T16:46:48.284Z |
| cve-2026-109346 | 8.5 (v4.0) 8.1 (v3.1) | better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Auth… |
better-auth |
better-auth |
2026-10-12T16:05:30.595Z | 2026-10-26T16:46:48.047Z |
| cve-2026-109351 | 7.1 (v4.0) 6.5 (v3.1) | Gitoxide gix-pack before 0.75.0 Denial of Service via … |
GitoxideLabs |
gix-pack |
2026-10-12T16:05:33.808Z | 2026-10-26T16:46:47.900Z |
| cve-2026-109356 | 5.3 (v4.0) 4.3 (v3.1) | LibreNMS before 26.9.0 Missing Authorization in Port P… |
librenms |
librenms |
2026-10-12T16:05:37.065Z | 2026-10-26T16:46:47.760Z |
| cve-2026-109566 | 9.3 (v4.0) 9.8 (v3.1) | Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin… |
zofe |
rapyd-admin |
2026-10-12T20:55:19.825Z | 2026-10-26T16:46:47.619Z |
| cve-2026-109571 | 2.3 (v4.0) 4.3 (v3.1) | Fire-Boltt BSW013 firmware through V0.0.8 Unauthentica… |
Fire-Boltt |
BSW013 |
2026-10-12T20:55:23.061Z | 2026-10-26T16:46:47.478Z |
| cve-2026-109574 | 6.7 (v4.0) 5.5 (v3.1) | Hugo before v0.167.0 Path Traversal via css.Sass Impor… |
gohugoio |
hugo |
2026-10-12T22:21:50.021Z | 2026-10-26T16:46:47.336Z |
| cve-2026-94402 | 6.1 (v3.1) | IBM vulnerable to cross-site scripting (XSS) via unsan… |
IBM |
@carbon/charts |
2026-10-20T21:31:46.027Z | 2026-10-26T16:46:47.189Z |
| cve-2026-76296 | 4.3 (v3.1) | Missing Authorization through Sourcetype Renaming in S… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:58.375Z | 2026-10-26T16:46:47.044Z |
| cve-2026-76304 | 4.3 (v3.1) | Sensitive Information Disclosure through Automation Br… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:05.722Z | 2026-10-26T16:46:46.904Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-037 | Vulnérabilité de Evolution | 2005-01-31T00:00:00.000000 | 2005-05-27T00:00:00.000000 |
| certa-2005-avi-200 | Multiples vulnérabilités sous Mac OS X | 2005-05-26T00:00:00.000000 | 2005-05-26T00:00:00.000000 |
| certa-2005-avi-177 | Multiples vulnérabilités dans Mac OS X | 2005-05-26T00:00:00.000000 | 2005-05-26T00:00:00.000000 |
| certa-2005-avi-168 | Vulnérabilité dans les produits Zone Labs | 2005-05-26T00:00:00.000000 | 2005-05-26T00:00:00.000000 |
| certa-2005-avi-176 | Vulnérabilité dans plusieurs produits de Computer Associates | 2005-05-25T00:00:00.000000 | 2005-05-25T00:00:00.000000 |
| certa-2005-avi-175 | Vulnérabilité du DNS de plusieurs produits Cisco | 2005-05-25T00:00:00.000000 | 2005-05-25T00:00:00.000000 |
| certa-2005-avi-172 | Vulnérabilité dans IBM HTTP Server | 2005-05-23T00:00:00.000000 | 2005-05-23T00:00:00.000000 |
| certa-2005-avi-171 | Multiples vulnérabilités de Novell ZENworks Remote Management | 2005-05-23T00:00:00.000000 | 2005-05-23T00:00:00.000000 |
| certa-2005-avi-169 | Multiples vulnérabilités dans Kerio Mail Server | 2005-05-23T00:00:00.000000 | 2005-05-23T00:00:00.000000 |
| certa-2005-avi-119 | Vulnérabilité du noyau Linux | 2005-03-22T00:00:00.000000 | 2005-05-23T00:00:00.000000 |
| certa-2005-avi-148 | Multiples vulnérabilités des produits Mozilla | 2005-04-18T00:00:00.000000 | 2005-05-17T00:00:00.000000 |
| certa-2005-avi-162 | Vulnérabilité de l'explorateur Windows | 2005-05-11T00:00:00.000000 | 2005-05-11T00:00:00.000000 |
| certa-2005-avi-160 | Vulnérabilité d'iTunes | 2005-05-10T00:00:00.000000 | 2005-05-10T00:00:00.000000 |
| certa-2005-avi-147 | Vulnérabilité dans OpenOffice | 2005-04-18T00:00:00.000000 | 2005-05-10T00:00:00.000000 |
| certa-2005-avi-159 | Multiples vulnérabilités dans Mac OS X | 2005-05-09T00:00:00.000000 | 2005-05-09T00:00:00.000000 |
| certa-2005-avi-151 | Vulnérabilité des lecteurs RealPlayer | 2005-04-21T00:00:00.000000 | 2005-05-02T00:00:00.000000 |
| certa-2005-avi-158 | Vulnérabilité dans HP OpenView | 2005-04-29T00:00:00.000000 | 2005-04-29T00:00:00.000000 |
| certa-2005-avi-103 | Vulnérabilités dans Ethereal | 2005-03-11T00:00:00.000000 | 2005-04-29T00:00:00.000000 |
| certa-2005-avi-156 | Multiples vulnérabilités dans MySQL | 2005-04-26T00:00:00.000000 | 2005-04-28T00:00:00.000000 |
| certa-2005-avi-155 | Vulnérabilité dans la pile TCP/IP sous HP-UX | 2005-04-26T00:00:00.000000 | 2005-04-26T00:00:00.000000 |
| certa-2005-avi-154 | Vulnérabilité dans phpBB | 2005-04-25T00:00:00.000000 | 2005-04-25T00:00:00.000000 |
| certa-2005-avi-152 | Vulnérabilité de Sun Java System Web Proxy (Sun ONE Proxy Server) | 2005-04-21T00:00:00.000000 | 2005-04-21T00:00:00.000000 |
| certa-2005-avi-049 | Vulnérabilité de PostgreSQL | 2005-02-09T00:00:00.000000 | 2005-04-21T00:00:00.000000 |
| certa-2005-avi-150 | Multiples vulnérabilités dans Mac OS X | 2005-04-19T00:00:00.000000 | 2005-04-19T00:00:00.000000 |
| certa-2005-avi-149 | Vulnérabilité dans Kerio MailServer | 2005-04-19T00:00:00.000000 | 2005-04-19T00:00:00.000000 |
| certa-2005-avi-146 | Vulnérabilité du serveur Lotus Domino | 2005-04-15T00:00:00.000000 | 2005-04-15T00:00:00.000000 |
| certa-2005-avi-145 | Multiples vulnérabilités de la machine virtuelle Java de SUN | 2005-04-15T00:00:00.000000 | 2005-04-15T00:00:00.000000 |
| certa-2005-avi-144 | Multiples vulnérabilités sur Oracle | 2005-04-15T00:00:00.000000 | 2005-04-15T00:00:00.000000 |
| certa-2005-avi-143 | Vulnérabilité dans BrightStor ARCserve | 2005-04-14T00:00:00.000000 | 2005-04-15T00:00:00.000000 |
| certa-2005-avi-142 | Multiples vulnérabilités dans GAIM | 2005-04-15T00:00:00.000000 | 2005-04-15T00:00:00.000000 |