Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115189 | 8.8 (v3.1) | A server-side template injection vulnerability ex… |
|
|
2026-10-26T12:39:14.432Z | 2026-10-26T15:35:53.698Z |
| cve-2026-115190 | 8 (v3.1) | An insecure deserialization (PHP object injection… |
|
|
2026-10-26T12:41:17.370Z | 2026-10-26T15:35:53.561Z |
| cve-2026-115191 | 7.1 (v3.1) | A SQL injection vulnerability exists in a contact… |
|
|
2026-10-26T12:42:57.873Z | 2026-10-26T15:35:53.390Z |
| cve-2026-115192 | 7.1 (v3.1) | An SQL Injection vulnerability exists in the dash… |
|
|
2026-10-26T12:45:09.462Z | 2026-10-26T15:35:53.230Z |
| cve-2026-115193 | 8.2 (v3.1) | A stored Cross-Site Scripting (XSS) vulnerability… |
|
|
2026-10-26T12:46:35.447Z | 2026-10-26T15:35:53.085Z |
| cve-2026-115194 | 6.5 (v3.1) | A path traversal vulnerability exists in the Maut… |
|
|
2026-10-26T12:48:01.035Z | 2026-10-26T15:35:52.938Z |
| cve-2026-115195 | 6.5 (v3.1) | A broken access control vulnerability exists in t… |
|
|
2026-10-26T12:48:59.588Z | 2026-10-26T15:35:52.798Z |
| cve-2026-115196 | 5.4 (v3.1) | An Open Redirect vulnerability exists in the publ… |
|
|
2026-10-26T12:50:18.637Z | 2026-10-26T15:35:52.657Z |
| cve-2026-59106 | 9.3 (v4.0) 9.8 (v3.1) | Unauthenticated RCE Vulnerability in WolfProt interfac… |
WolfVision |
Cynap Pure (Next Gen), Cynap Bridge |
2026-10-26T13:15:02.436Z | 2026-10-26T15:35:52.374Z |
| cve-2026-108525 | 8.7 (v4.0) | HTTP/2 inbound flow control is not enforced, letting a… |
mtrudel |
bandit |
2026-10-26T13:29:42.520Z | 2026-10-26T15:35:52.227Z |
| cve-2026-115269 | 8.7 (v4.0) | HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the req… |
mtrudel |
bandit |
2026-10-26T13:30:24.621Z | 2026-10-26T15:35:52.079Z |
| cve-2026-114216 | 6.3 (v4.0) | Chunk extensions accept bare LF and CR, enabling reque… |
mtrudel |
bandit |
2026-10-26T13:30:41.225Z | 2026-10-26T15:35:51.933Z |
| cve-2026-114213 | 8.7 (v4.0) | WebSocket 1-byte continuation frames bypass `max_fragm… |
mtrudel |
bandit |
2026-10-26T13:30:58.262Z | 2026-10-26T15:35:51.785Z |
| cve-2026-113436 | 8.7 (v4.0) | Quadratic bignum parsing of Content-Length and Host po… |
mtrudel |
bandit |
2026-10-26T13:31:35.033Z | 2026-10-26T15:35:51.556Z |
| cve-2026-111101 | 8.7 (v4.0) | HTTP/1.1 chunked request bodies made of 1-byte chunks … |
mtrudel |
bandit |
2026-10-26T13:31:48.184Z | 2026-10-26T15:35:51.401Z |
| cve-2026-111103 | 8.2 (v4.0) | HTTP/2 StreamError recovery rolls back connection stat… |
mtrudel |
bandit |
2026-10-26T13:32:06.340Z | 2026-10-26T15:35:51.229Z |
| cve-2026-109584 | 8.7 (v4.0) | HTTP/2 cookie crumb join expands a small HPACK header … |
mtrudel |
bandit |
2026-10-26T13:32:22.359Z | 2026-10-26T15:35:51.081Z |
| cve-2026-110499 | 8.7 (v4.0) | Client-chosen HPACK encoder table size is applied unca… |
mtrudel |
bandit |
2026-10-26T13:32:38.613Z | 2026-10-26T15:35:50.929Z |
| cve-2026-108529 | 8.7 (v4.0) | SETTINGS and stream-0 WINDOW_UPDATE frames trigger qua… |
mtrudel |
bandit |
2026-10-26T13:35:26.080Z | 2026-10-26T15:35:50.781Z |
| cve-2026-112880 | 2.1 (v4.0) | CRLF injection in Proxy-Authorization header built fro… |
benoitc |
hackney |
2026-10-26T13:48:46.589Z | 2026-10-26T15:35:50.632Z |
| cve-2026-97200 | 8.2 (v4.0) | Unbounded response body buffering and decompression in… |
benoitc |
hackney |
2026-10-26T13:49:40.392Z | 2026-10-26T15:35:50.487Z |
| cve-2026-116516 | 6.5 (v3.1) | Insufficient length validation when parsing Zoom chat … |
Mattermost |
Mattermost |
2026-10-26T13:56:57.973Z | 2026-10-26T15:35:50.283Z |
| cve-2026-77059 | 8.8 (v4.0) | TOCTOU Race Condition in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:02.659Z | 2026-10-26T15:35:50.139Z |
| cve-2026-77060 | 6.8 (v4.0) | Incorrect Permission Assignment for Critical Resource … |
boneIO |
black_debian_images |
2026-10-26T14:46:06.547Z | 2026-10-26T15:35:49.996Z |
| cve-2026-77061 | 5.3 (v4.0) | Missing Authentication for Critical Function in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:09.722Z | 2026-10-26T15:35:49.857Z |
| cve-2026-94386 | 4.8 (v3.1) | Apache Camel: Camel-OAuth Cross-Scope Token Reuse via … |
Apache Software Foundation |
Apache Camel |
2026-10-26T14:46:11.551Z | 2026-10-26T15:35:49.712Z |
| cve-2026-77062 | 6.9 (v4.0) | Clickjacking in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:12.663Z | 2026-10-26T15:35:49.560Z |
| cve-2026-90885 | 7.5 (v3.1) | Apache Camel: Camel-Saxon XML External Entity Processi… |
Apache Software Foundation |
Apache Camel |
2026-10-26T14:47:03.155Z | 2026-10-26T15:35:49.414Z |
| cve-2026-110860 | 6.9 (v4.0) 6.1 (v3.1) | GitPython 3.1.62 before 3.2.0 Symlink Path Traversal v… |
gitpython-developers |
GitPython |
2026-10-14T22:52:44.690Z | 2026-10-26T15:27:14.246Z |
| cve-2025-69035 | 8.8 (v3.1) | WordPress Dental Care CPT plugin < 21.6 - PHP Object I… |
Strongholdthemes |
Dental Care CPT |
2026-01-22T16:52:16.979Z | 2026-10-26T15:25:25.233Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-054 | Vulnérabilité de l'interpréteur de commandes Windows | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-053 | Vulnérabilité dans le traitements des images PNG pour plusieurs applications Microsoft | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-052 | Vulnérabilités sur le traitement des objets OLE et COM | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-051 | Vunérabilté dans Microsoft Windows Licence Logging Service | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-050 | Vulnérabilité de Microsoft Office XP | 2005-02-09T00:00:00.000000 | 2005-02-09T00:00:00.000000 |
| certa-2005-avi-040 | Vulnérabilité de ncpfs | 2005-01-31T00:00:00.000000 | 2005-02-04T00:00:00.000000 |
| certa-2004-avi-402 | Vulnérabilité de Samba | 2004-12-17T00:00:00.000000 | 2005-02-04T00:00:00.000000 |
| certa-2005-avi-047 | Vulnérabilité des équipements IP/VC de Cisco | 2005-02-03T00:00:00.000000 | 2005-02-03T00:00:00.000000 |
| certa-2005-avi-045 | Vulnérabilité de Eudora | 2005-02-03T00:00:00.000000 | 2005-02-03T00:00:00.000000 |
| certa-2005-avi-043 | Vulérabilité sur Juniper | 2005-02-01T00:00:00.000000 | 2005-02-01T00:00:00.000000 |
| certa-2005-avi-039 | Vulnérabilité dans BlackBerry Enterprise Server | 2005-01-31T00:00:00.000000 | 2005-01-31T00:00:00.000000 |
| certa-2005-avi-036 | Vulnérabilité dans WinAMP | 2005-01-28T00:00:00.000000 | 2005-01-28T00:00:00.000000 |
| certa-2005-avi-032 | Vulnérabilité IPv6 dans Cisco IOS | 2005-01-27T00:00:00.000000 | 2005-01-27T00:00:00.000000 |
| certa-2005-avi-031 | Vulnérabilité les routeurs Cisco supportant MPLS | 2005-01-27T00:00:00.000000 | 2005-01-27T00:00:00.000000 |
| certa-2005-avi-030 | Vulnérabilités dans le traitement des paquets BGP par Cisco IOS | 2005-01-27T00:00:00.000000 | 2005-01-27T00:00:00.000000 |
| certa-2005-avi-017 | CUPS : vulnérabilité dans l'impression de certains documents PDF | 2005-01-19T00:00:00.000000 | 2005-01-27T00:00:00.000000 |
| certa-2005-avi-029 | Vulnérabilité du système d'exploitation Cisco IOS | 2005-01-26T00:00:00.000000 | 2005-01-26T00:00:00.000000 |
| certa-2005-avi-004 | Vulnérabilité dans Xine | 2005-01-04T00:00:00.000000 | 2005-01-25T00:00:00.000000 |
| certa-2004-avi-373 | Vulnérabilité de unarj | 2004-11-22T00:00:00.000000 | 2005-01-25T00:00:00.000000 |
| certa-2005-avi-028 | Failles dans les greffons Java de Sun | 2005-01-24T00:00:00.000000 | 2005-01-24T00:00:00.000000 |
| certa-2005-avi-026 | Vulnérabilité des points d'accès 3Com OfficeConnect Wireless 11g | 2005-01-24T00:00:00.000000 | 2005-01-24T00:00:00.000000 |
| certa-2005-avi-025 | Correctif de sécurité cumulatif pour les produits Oracle | 2005-01-24T00:00:00.000000 | 2005-01-24T00:00:00.000000 |
| certa-2005-avi-024 | Vulnérabilité de Veritas Backup Exec | 2005-01-24T00:00:00.000000 | 2005-01-24T00:00:00.000000 |
| certa-2005-avi-021 | Vulnérabilité dans la configuration du serveur de fax HylaFAX | 2005-01-20T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-409 | Nombreuses failles du noyau Linux | 2004-01-04T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-343 | Vulnérabilité du module mod_ssl du serveur HTTP Apache | 2004-10-14T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-265 | Vulnérabilité du noyau Linux | 2004-08-05T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-247 | Vulnérabilité du module Apache mod_ssl | 2004-07-16T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2005-avi-016 | iTunes : débordement de variable dans la gestion des listes de lecture | 2005-01-18T00:00:00.000000 | 2005-01-18T00:00:00.000000 |
| certa-2004-avi-372 | Vulnérabilité des noyaux Linux 2.4 et 2.6 | 2004-11-19T00:00:00.000000 | 2005-01-17T00:00:00.000000 |