Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114381 | itsourcecode Online Cake Ordering System orderdetail.p… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T21:15:17.882Z | 2026-10-23T21:18:36.060Z | |
| cve-2026-114508 | Laravel relationship inclusion can trigger unauthorize… |
laravel |
framework |
2026-10-21T21:45:31.465Z | 2026-10-23T21:18:11.415Z | |
| cve-2026-114384 | itsourcecode Online Cake Ordering System transactionsa… |
itsourcecode |
Online Cake Ordering System |
2026-10-21T22:00:18.707Z | 2026-10-23T21:17:46.796Z | |
| cve-2026-114441 | oretnom23 php-travel-agency-system update.php sql injection |
oretnom23 |
php-travel-agency-system |
2026-10-21T22:45:18.510Z | 2026-10-23T21:17:17.273Z | |
| cve-2026-114576 | Linksys RE6250 Web Management strcmp random values |
Linksys |
RE6250 |
2026-10-22T01:30:21.675Z | 2026-10-23T21:16:58.599Z | |
| cve-2017-20289 | 7.7 (v4.0) 7.5 (v3.1) | Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local … |
Broadstreet |
Ad Widget |
2026-10-22T10:57:23.974Z | 2026-10-23T21:16:32.796Z |
| cve-2019-25778 | 8.8 (v4.0) 8.2 (v3.1) | SeaCMS 8.7 SQL Injection via comment/api/index.php rli… |
SeaCMS |
SeaCMS |
2026-10-22T10:57:26.733Z | 2026-10-23T21:16:06.927Z |
| cve-2021-48014 | 9.3 (v4.0) 9.8 (v3.1) | FineReport 9.0 Unauthenticated Path Traversal File Wri… |
FanRuan |
FineReport |
2026-10-22T10:57:29.782Z | 2026-10-23T21:15:46.961Z |
| cve-2022-51021 | 8.8 (v4.0) 8.2 (v3.1) | NotificationX WordPress Plugin < 2.3.12 Unauthenticate… |
WPDeveloper |
NotificationX |
2026-10-22T10:57:32.517Z | 2026-10-23T21:15:37.175Z |
| cve-2022-51025 | 7.1 (v4.0) 6.5 (v3.1) | Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Trave… |
Penta Security Systems |
WAPPLES |
2026-10-22T10:57:35.298Z | 2026-10-23T21:15:30.156Z |
| cve-2024-58396 | 8.7 (v4.0) 7.5 (v3.1) | YouDataSum CPAS Audit Management System V4 Path Traver… |
YouDataSum |
CPAS Audit Management System |
2026-10-22T10:57:38.109Z | 2026-10-23T21:15:23.595Z |
| cve-2026-115247 | subhajitkhan online-clinic-management-system patientre… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:15:19.125Z | 2026-10-23T21:15:01.427Z | |
| cve-2026-75507 | GraphQL-core: Denial of service via quadratic complexi… |
graphql-python |
graphql-core |
2026-10-22T16:12:38.424Z | 2026-10-23T21:08:40.217Z | |
| cve-2026-108358 | PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape … |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:29:56.449Z | 2026-10-23T21:08:28.517Z | |
| cve-2026-108357 | PhpSpreadsheet: XmlScanner Bypass via Double-Encoded u… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:38:16.098Z | 2026-10-23T21:08:17.784Z | |
| cve-2026-114613 | MessagePack: Unbounded memory leak in msgpack C extens… |
msgpack |
msgpack-python |
2026-10-22T18:22:40.544Z | 2026-10-23T21:08:06.271Z | |
| cve-2026-115348 | 8.7 (v4.0) 7.5 (v3.1) | Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text |
lepture |
mistune |
2026-10-22T19:13:25.416Z | 2026-10-23T21:07:57.729Z |
| cve-2026-115352 | 8.7 (v4.0) 7.5 (v3.1) | Mistune before 3.3.0 Quadratic-Time DoS via Unmatched … |
lepture |
mistune |
2026-10-22T19:13:28.427Z | 2026-10-23T21:07:23.519Z |
| cve-2026-115360 | 5.3 (v4.0) 4.7 (v3.1) | OpenBao before 2.6.3 Open Redirect via OIDC Identity P… |
openbao |
openbao |
2026-10-22T19:13:35.435Z | 2026-10-23T21:07:08.070Z |
| cve-2026-115506 | 8.7 (v4.0) 7.5 (v3.1) | libexpat through 2.9.0 Denial of Service via Billion L… |
libexpat |
libexpat |
2026-10-22T19:14:06.001Z | 2026-10-23T21:06:43.010Z |
| cve-2026-112330 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 RabbitMQ Denial of Service via Clou… |
GDATASoftwareAG |
motornet |
2026-10-22T19:40:15.180Z | 2026-10-23T21:06:22.759Z |
| cve-2026-115534 | gedelumbung HospitalManagement Contact Form contact.ph… |
gedelumbung |
HospitalManagement |
2026-10-22T23:45:15.462Z | 2026-10-23T21:06:00.059Z | |
| cve-2026-115537 | gedelumbung HospitalManagement URL Validation routing_… |
gedelumbung |
HospitalManagement |
2026-10-23T01:30:25.554Z | 2026-10-23T21:05:49.579Z | |
| cve-2026-55835 | Lookyloo: Potential sub-system DoS due to parameter mi… |
Lookyloo |
lookyloo |
2026-10-23T04:14:02.867Z | 2026-10-23T21:05:41.736Z | |
| cve-2026-56833 | PraisonAI Dynamic Context history and terminal tools r… |
MervinPraison |
PraisonAI |
2026-10-23T11:56:09.502Z | 2026-10-23T21:05:34.632Z | |
| cve-2026-56837 | PraisonAI LinearBot processes unsigned webhooks when L… |
MervinPraison |
PraisonAI |
2026-10-23T11:57:48.068Z | 2026-10-23T21:05:27.023Z | |
| cve-2026-57849 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-23T21:01:25.342Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-23T21:01:25.342Z | |
| cve-2026-53920 | odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure |
openwrt |
odhcpd |
2026-10-23T13:20:48.045Z | 2026-10-23T20:58:10.536Z | |
| cve-2026-46346 | Goobi viewer: Predictable Password Reset Token Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:39.197Z | 2026-10-23T20:58:03.501Z | |
| cve-2026-55222 | Isar: Unprivileged user ownership of trusted repositor… |
ilbers |
isar |
2026-10-23T14:31:41.863Z | 2026-10-23T20:57:39.282Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-088 | Vulnérabilité du Java Media Framework | 2003-05-19T00:00:00.000000 | 2003-05-19T00:00:00.000000 |
| certa-2003-avi-086 | Vulnérabilité du service d'impression sous IBM AIX | 2003-05-16T00:00:00.000000 | 2003-05-16T00:00:00.000000 |
| certa-2003-avi-085 | Vulnérabilité du Service Assurance Agent (SAA) sous Cisco IOS | 2003-05-16T00:00:00.000000 | 2003-05-16T00:00:00.000000 |
| certa-2003-avi-084 | Rappel sur les virus de messagerie | 2003-05-12T00:00:00.000000 | 2003-05-12T00:00:00.000000 |
| certa-2003-avi-083 | Vulnérabilités du serveur Microsoft BizTalk | 2003-05-12T00:00:00.000000 | 2003-05-12T00:00:00.000000 |
| certa-2003-avi-082 | Vulnérabilités dans la série des commutateurs CISCO VPN 3000 | 2003-05-12T00:00:00.000000 | 2003-05-12T00:00:00.000000 |
| certa-2003-avi-031 | Vulnérabilité du serveur VNC et TightVNC | 2003-02-28T00:00:00.000000 | 2003-05-12T00:00:00.000000 |
| certa-2003-avi-081 | Vulnérabilités de Microsoft Internet Explorer | 2003-04-28T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-080 | Vulnérabilité dans Microsoft Outlook Express | 2003-04-28T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-064 | Vulnérabilité dans Ethereal | 2003-03-26T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-079 | Vulnérabilité des commutateurs Catalyst de Cisco | 2003-04-25T00:00:00.000000 | 2003-04-25T00:00:00.000000 |
| certa-2003-avi-078 | Vulnérabilité dans le préprocesseur stream4 de Snort | 2003-04-18T00:00:00.000000 | 2003-04-18T00:00:00.000000 |
| certa-2003-avi-077 | Vulnérabilité dans la gestion des messages par le noyau Windows | 2003-04-17T00:00:00.000000 | 2003-04-17T00:00:00.000000 |
| certa-2003-avi-076 | Vulnérabilité dans "Eye of GNOME" | 2003-04-11T00:00:00.000000 | 2003-04-17T00:00:00.000000 |
| certa-2003-avi-075 | Vulnérabilité de Microsoft Winsock Proxy Service et de Microsoft ISA Firewall Service | 2003-04-11T00:00:00.000000 | 2003-04-11T00:00:00.000000 |
| certa-2003-avi-074 | Vulnérabilité de la machine virtuelle Java Microsoft | 2003-04-10T00:00:00.000000 | 2003-04-10T00:00:00.000000 |
| certa-2003-avi-073 | Vulnérabilité du serveur HTTP Apache | 2003-04-09T00:00:00.000000 | 2003-04-09T00:00:00.000000 |
| certa-2003-avi-026 | Vulnérabilités sur le serveur Lotus Domino 6.0 | 2003-02-20T00:00:00.000000 | 2003-04-07T00:00:00.000000 |
| certa-2003-avi-071 | Vulnérabilité de Quicktime Player sous Windows | 2003-04-04T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-061 | Multiples vulnérabilités dans le paquetage Netpbm | 2003-03-26T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-055 | Vulnérabilité du client de messagerie Mutt | 2003-03-21T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-070 | Vulnérabilité de la commande lpq sous Solaris | 2003-04-02T00:00:00.000000 | 2003-04-02T00:00:00.000000 |
| certa-2003-avi-057 | Failles dans des implémentations de SSL/TLS | 2003-03-25T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2003-avi-020 | Vulnérabilité sous JSSE, Java Plug-In et Java Web Start | 2003-02-07T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2003-avi-016 | Vulnérabilité de JSSE, du plug-in Java et de Java Web Start | 2003-01-28T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2003-avi-015 | Vulnérabilité de la machine virtuelle Java | 2003-01-28T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2002-avi-056 | Vulnérabilité de la machine virtuelle Java | 2002-03-19T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2003-avi-069 | Vulnérabilité de Sendmail | 2003-03-31T00:00:00.000000 | 2003-03-31T00:00:00.000000 |
| certa-2003-avi-068 | Deux vulnérabilités de Lotus Notes et Domino | 2003-03-28T00:00:00.000000 | 2003-03-28T00:00:00.000000 |
| certa-2003-avi-051 | Vulnérabilité des noyaux Linux 2.2 et 2.4 | 2003-03-18T00:00:00.000000 | 2003-03-28T00:00:00.000000 |