Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-69035 | 8.8 (v3.1) | WordPress Dental Care CPT plugin < 21.6 - PHP Object I… |
Strongholdthemes |
Dental Care CPT |
2026-01-22T16:52:16.979Z | 2026-10-26T15:25:25.233Z |
| cve-2026-77931 | 8.7 (v4.0) 8.8 (v3.1) | MoviePilot 3.1.5 Command Injection via ExecuteCommandTool |
jxxghp |
MoviePilot |
2026-10-15T01:24:26.265Z | 2026-10-26T15:25:18.338Z |
| cve-2026-110865 | 7.1 (v4.0) 7.1 (v3.1) | Renovate before 44.60.1 HTTP Header Allowlist Bypass v… |
renovatebot |
renovate |
2026-10-14T22:52:52.525Z | 2026-10-26T15:22:16.486Z |
| cve-2026-110870 | 6.9 (v4.0) 5.3 (v3.1) | Nodemailer before 10.0.13 Improper Input Validation vi… |
nodemailer |
nodemailer |
2026-10-14T22:52:58.787Z | 2026-10-26T15:20:53.532Z |
| cve-2026-65226 | N/A | {'providerMetadata': {'orgId': '44488dab-36db-4358-99f9-bc116477f914', 'shortName': 'runZero', 'dateUpdated': '2026-10-26T15:20:31.977Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected by runZero as unused.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected by runZero as unused.'}]}]} | N/A | N/A | 2026-10-26T15:20:31.977Z | |
| cve-2026-98166 | drm/ttm: fix swapped-out resources never leaving their… |
Linux |
Linux |
2026-10-06T08:44:11.927Z | 2026-10-26T15:12:59.824Z | |
| cve-2026-31775 | N/A | ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization |
Linux |
Linux |
2026-05-01T14:15:03.664Z | 2026-10-26T15:12:57.000Z |
| cve-2026-23353 | N/A | ice: fix crash in ethtool offline loopback test |
Linux |
Linux |
2026-03-25T10:27:38.167Z | 2026-10-26T15:12:55.677Z |
| cve-2025-71312 | N/A | fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super() |
Linux |
Linux |
2026-05-27T12:24:03.532Z | 2026-10-26T15:12:54.381Z |
| cve-2026-111216 | 8.6 (v4.0) 7.2 (v3.1) | Netgate pfSense CE through 2.9.0 OS Command Injection … |
Netgate |
pfSense CE |
2026-10-15T18:46:18.645Z | 2026-10-26T15:10:18.183Z |
| cve-2026-111221 | 7.5 (v4.0) 6.6 (v3.1) | Netgate pfSense CE through 2.9.0 Command Injection via… |
Netgate |
pfSense CE |
2026-10-15T18:46:21.847Z | 2026-10-26T15:08:34.818Z |
| cve-2026-111226 | 8.6 (v4.0) 7.2 (v3.1) | Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Inje… |
Netgate |
pfSense CE |
2026-10-15T18:46:25.792Z | 2026-10-26T15:07:37.949Z |
| cve-2026-111231 | 8.6 (v4.0) 7.2 (v3.1) | Netgate pfSense CE through 2.9.0 Authorization Bypass … |
Netgate |
pfSense CE |
2026-10-15T18:46:31.461Z | 2026-10-26T15:06:23.532Z |
| cve-2026-110875 | 6.9 (v4.0) 6.1 (v3.1) | AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer… |
adplug |
adplug |
2026-10-15T18:57:17.940Z | 2026-10-26T15:03:52.332Z |
| cve-2026-111124 | 6.9 (v4.0) 6.1 (v3.1) | CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Nega… |
HEASARC |
cfitsio |
2026-10-15T18:57:21.328Z | 2026-10-26T15:02:09.903Z |
| cve-2026-98943 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}], 'providerMetadata': {'orgId': '416baaa9-dc9f-4396-8d5f-8c081fb06d67', 'shortName': 'Linux', 'dateUpdated': '2026-10-26T14:54:27.822Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}} | N/A | N/A | 2026-10-23T12:19:01.620Z | 2026-10-26T14:54:27.822Z |
| cve-2026-99098 | N/A | dm-integrity: fix buffer overflow in inline mode with … |
Linux |
Linux |
2026-10-26T14:52:04.416Z | 2026-10-26T14:52:04.416Z |
| cve-2026-99097 | N/A | tee: shm: reject zero-sized allocations in tee_dyn_shm… |
Linux |
Linux |
2026-10-26T14:52:03.824Z | 2026-10-26T14:52:03.824Z |
| cve-2026-99096 | N/A | io_uring/register: don't exempt disabled rings from ta… |
Linux |
Linux |
2026-10-26T14:52:03.236Z | 2026-10-26T14:52:03.236Z |
| cve-2026-99093 | N/A | mm: don't schedule deferred kernel page table freeing … |
Linux |
Linux |
2026-10-26T14:52:01.450Z | 2026-10-26T14:52:01.450Z |
| cve-2026-99092 | N/A | riscv: patch: fix handling of bpf-jit execmem addresses |
Linux |
Linux |
2026-10-26T14:52:00.860Z | 2026-10-26T14:52:00.860Z |
| cve-2026-65547 | N/A | {'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-10-26T14:46:29.972Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to\xa0CVE-2026-3985.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-3985.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}} | N/A | N/A | 2026-08-06T14:27:33.488Z | 2026-10-26T14:46:29.972Z |
| cve-2026-84823 | 7.1 (v3.1) | Org.wildfly.core: wildfly: path traversal in take-snap… |
Red Hat |
Red Hat Enterprise Linux 8 |
2026-10-15T23:47:13.986Z | 2026-10-26T14:36:53.579Z |
| cve-2026-105930 | 6 (v4.0) | Apache Pulsar: Improper Authorization of Function, Sou… |
Apache Software Foundation |
Apache Pulsar |
2026-10-21T18:01:29.744Z | 2026-10-26T14:35:21.565Z |
| cve-2026-114214 | 6 (v4.0) | Loading a through relationship with a limit of 1 in As… |
ash-project |
ash |
2026-10-25T19:47:30.612Z | 2026-10-26T14:35:21.414Z |
| cve-2026-115635 | 6 (v4.0) | AshPostgres returns another tenant's record for a skip… |
ash-project |
ash_postgres |
2026-10-25T19:48:43.829Z | 2026-10-26T14:35:21.261Z |
| cve-2026-115627 | 6 (v4.0) | AshPostgres ignores attribute multitenancy on the join… |
ash-project |
ash_postgres |
2026-10-25T19:49:50.510Z | 2026-10-26T14:35:21.109Z |
| cve-2026-113345 | 7.8 (v3.0) 8.5 (v4.0) | Electronic delivery item Inspection Support Syste… |
Ministry of Land, Infrastructure, Transport and Tourism, Japan |
Electronic delivery item Inspection Support System |
2026-10-26T04:43:59.645Z | 2026-10-26T14:35:20.967Z |
| cve-2026-107894 | 7.8 (v3.1) 8.4 (v4.0) | V-SFT provided by FUJI ELECTRIC CO., LTD. contain… |
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. |
V-SFT |
2026-10-26T06:26:10.199Z | 2026-10-26T14:35:20.814Z |
| cve-2026-107895 | 7.8 (v3.1) 8.4 (v4.0) | V-SFT provided by FUJI ELECTRIC CO., LTD. contain… |
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. |
V-SFT |
2026-10-26T06:26:23.661Z | 2026-10-26T14:35:20.665Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-255 | Vulnérabilité de Pavuk | 2004-07-28T00:00:00.000000 | 2005-01-17T00:00:00.000000 |
| certa-2004-avi-198 | Multiples vulnérabilités sous IRIX | 2004-06-15T00:00:00.000000 | 2005-01-17T00:00:00.000000 |
| certa-2005-avi-015 | Multiples vulnérabilité dans IBM DB2 | 2005-01-14T00:00:00.000000 | 2005-01-14T00:00:00.000000 |
| certa-2005-avi-007 | Vulnérabilité du navigateur Mozilla | 2005-01-05T00:00:00.000000 | 2005-01-14T00:00:00.000000 |
| certa-2005-avi-013 | Vulnérabilité de poppassd_pam | 2005-01-13T00:00:00.000000 | 2005-01-13T00:00:00.000000 |
| certa-2005-avi-012 | Vulnérabilité dans le service d'indexation | 2005-01-12T00:00:00.000000 | 2005-01-12T00:00:00.000000 |
| certa-2005-avi-011 | Vulnérabilité dans la gestion du format du curseur et des icônes | 2005-01-12T00:00:00.000000 | 2005-01-12T00:00:00.000000 |
| certa-2005-avi-010 | Vulnérabilité dans le composant ActiveX <TT>HTML Help</TT> | 2005-01-12T00:00:00.000000 | 2005-01-12T00:00:00.000000 |
| certa-2005-avi-008 | Vulnérabilité dans SHOUTcast | 2005-01-05T00:00:00.000000 | 2005-01-07T00:00:00.000000 |
| certa-2004-avi-388 | Vulnérabilité dans imlib | 2004-12-08T00:00:00.000000 | 2005-01-07T00:00:00.000000 |
| certa-2004-avi-391 | Vulnérabilité de zip | 2004-12-10T00:00:00.000000 | 2005-01-06T00:00:00.000000 |
| certa-2005-avi-009 | Vulnérabilité de Netscape Directory Server sous HP-UX | 2005-01-05T00:00:00.000000 | 2005-01-05T00:00:00.000000 |
| certa-2005-avi-005 | Vulnérabilité du noyau NetBSD | 2005-01-04T00:00:00.000000 | 2005-01-04T00:00:00.000000 |
| certa-2005-avi-002 | Vulnérabilité de l'utilitaire SAM sous HP-UX | 2005-01-04T00:00:00.000000 | 2005-01-04T00:00:00.000000 |
| certa-2004-avi-417 | Vulnérabilité dans mpg123 | 2004-12-22T00:00:00.000000 | 2005-01-04T00:00:00.000000 |
| certa-2004-avi-414 | Vulnérabilités dans MPlayer | 2004-12-22T00:00:00.000000 | 2005-01-03T00:00:00.000000 |
| certa-2004-avi-412 | Vulnérabilité dans le service FTP sous HP-UX | 2004-12-22T00:00:00.000000 | 2005-01-03T00:00:00.000000 |
| certa-2004-avi-398 | Vulnérabilité de Adobe Acrobat Reader sous Unix | 2004-12-15T00:00:00.000000 | 2005-01-03T00:00:00.000000 |
| certa-2004-avi-143 | Vulnérabilité dans le protocole TCP | 2004-04-26T00:00:00.000000 | 2005-01-03T00:00:00.000000 |
| certa-2004-avi-413 | Multiples vulnérabilité dans Konqueror | 2004-12-22T00:00:00.000000 | 2004-12-23T00:00:00.000000 |
| certa-2004-avi-407 | Vulnérabilité de la commande file | 2004-12-20T00:00:00.000000 | 2004-12-23T00:00:00.000000 |
| certa-2004-avi-416 | Vulnérabilités dans Xine | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| certa-2004-avi-415 | Vulnérabilité dans a2ps | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| certa-2004-avi-410 | Plusieurs vulnérabilités sur AIX | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| certa-2004-avi-389 | Vulnérabilité de nfs-utils | 2004-12-08T00:00:00.000000 | 2004-12-21T00:00:00.000000 |
| certa-2004-avi-376 | Vulnérabilité de libXpm, XFree86 et X.Org | 2004-11-23T00:00:00.000000 | 2004-12-21T00:00:00.000000 |
| certa-2004-avi-352 | Vulnérabilité dans PostgreSQL | 2004-10-21T00:00:00.000000 | 2004-12-21T00:00:00.000000 |
| certa-2004-avi-206 | Vulnérabilité de Aspell | 2004-06-23T00:00:00.000000 | 2004-12-21T00:00:00.000000 |
| certa-2004-avi-408 | Vulnérabilité de la commande newgrp sous HP-UX | 2004-12-20T00:00:00.000000 | 2004-12-20T00:00:00.000000 |
| certa-2004-avi-406 | Vulnérabilité de KDE | 2004-12-20T00:00:00.000000 | 2004-12-20T00:00:00.000000 |