Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-95710 | 7.1 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:58.154Z | 2026-10-23T19:14:09.744Z |
| cve-2026-79955 | 7.5 (v3.1) | Unauthenticated Memory Corruption Vulnerability leads … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:48.359Z | 2026-10-23T19:13:58.937Z |
| cve-2026-79895 | 7.5 (v3.1) | Unauthenticated Remote Denial-of-Service (DoS) Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:47.120Z | 2026-10-23T19:13:57.176Z |
| cve-2026-79894 | 7.5 (v3.1) | Unauthenticated Denial-of-Service (DoS) Vulnerability … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:45.891Z | 2026-10-23T19:13:55.728Z |
| cve-2026-79893 | 7.5 (v3.1) | Unauthenticated Memory Corruption Vulnerabilities lead… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:44.554Z | 2026-10-23T19:13:54.411Z |
| cve-2026-79851 | 10 (v3.1) | Unauthenticated Buffer Overflow Vulnerability leads to… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:58.382Z | 2026-10-23T19:12:45.211Z |
| cve-2026-79850 | 10 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:57.112Z | 2026-10-23T19:12:43.883Z |
| cve-2026-79849 | 10 (v3.1) | Unauthenticated SQL Injection Vulnerabilities allow Re… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:55.951Z | 2026-10-23T19:12:42.582Z |
| cve-2026-79848 | 10 (v3.1) | Unauthenticated SQL Injection Vulnerabilities allow Re… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:54.781Z | 2026-10-23T19:12:41.206Z |
| cve-2026-79847 | 10 (v3.1) | Unauthenticated Buffer Overflow Vulnerabilities leads … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:53.557Z | 2026-10-23T19:12:39.869Z |
| cve-2026-79844 | 10 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:44.829Z | 2026-10-23T19:12:30.616Z |
| cve-2026-111603 | 5.3 (v4.0) 4.3 (v3.1) | PlayEdu through 2.3 Missing Authorization via Student … |
PlayEdu |
PlayEdu |
2026-10-16T17:38:45.572Z | 2026-10-23T18:47:25.698Z |
| cve-2026-111608 | 2.3 (v4.0) 4.2 (v3.1) | Jeepay through 3.2.9 IDOR via DELETE /api/divisionRece… |
jeequan |
jeepay |
2026-10-16T17:38:49.058Z | 2026-10-23T18:44:58.148Z |
| cve-2026-111613 | 8.7 (v4.0) 7.5 (v3.1) | AllData through 0.7.1 Unauthenticated JDBC Injection v… |
alldatacenter |
alldata |
2026-10-16T17:38:52.517Z | 2026-10-23T18:39:50.789Z |
| cve-2026-111618 | 6.9 (v4.0) 5.3 (v3.1) | CoAI through 4.0.0 Unauthenticated Path Traversal via … |
coaidev |
CoAI |
2026-10-16T17:38:55.985Z | 2026-10-23T18:38:09.146Z |
| cve-2026-111623 | 6.3 (v4.0) 5.6 (v3.1) | Xiaozhi-esp32-server-java through 6.1.0 Authentication… |
joey-zhou |
xiaozhi-esp32-server-java |
2026-10-16T17:38:59.425Z | 2026-10-23T18:36:30.866Z |
| cve-2026-111628 | 2.3 (v4.0) 5 (v3.1) | 10up Distributor before 2.3.2 PHP Object Injection via… |
10up |
Distributor |
2026-10-16T17:39:02.847Z | 2026-10-23T18:34:49.579Z |
| cve-2026-114400 | 8.2 (v4.0) 5.9 (v3.1) | Trudesk through 1.2.11 Missing Authentication for Tick… |
polonel |
trudesk |
2026-10-21T12:39:53.511Z | 2026-10-23T18:32:44.884Z |
| cve-2026-111633 | 8.8 (v4.0) 8.6 (v3.1) | ZKEACMS through 4.4 Authentication Bypass via Hard-Cod… |
SeriaWei |
ZKEACMS |
2026-10-16T17:39:06.226Z | 2026-10-23T18:31:57.561Z |
| cve-2026-19754 | 8.6 (v4.0) | Baserow 2.2.0 through 2.3.3 - SQL injection in formula… |
Baserow |
Baserow |
2026-09-02T03:29:38.759Z | 2026-10-23T18:30:35.412Z |
| cve-2026-109219 | Mang Board - 2.4.4 - Unauthenticated Arbitrary File Up… |
kitae-park |
Mang Board |
2026-10-16T04:26:58.632Z | 2026-10-23T18:28:46.339Z | |
| cve-2026-84682 | 7.7 (v4.0) | TDDPv2 setProductVer Command Injection in Archer AX90 |
TP-Link Systems Inc. |
Archer AX90 v1 |
2026-10-01T18:48:42.953Z | 2026-10-23T16:43:53.663Z |
| cve-2026-18963 | 9.1 (v3.1) | Keycloak-services: keycloak-services: unauthenticated … |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-08-18T17:05:07.478Z | 2026-10-23T16:38:40.595Z |
| cve-2026-111648 | 5.1 (v4.0) 2.7 (v3.1) | BuildAdmin through 2.3.9 IDOR via routine/adminInfo/ed… |
build-admin |
buildadmin |
2026-10-16T17:39:16.585Z | 2026-10-23T16:20:19.266Z |
| cve-2026-109433 | 6 (v4.0) 6.5 (v3.1) | Camunda Broken Access Control via Cockpit |
Camunda |
Camunda 7 |
2026-10-19T15:10:59.006Z | 2026-10-23T16:16:49.778Z |
| cve-2026-111638 | 8.3 (v4.0) 7.7 (v3.1) | sshportal through 1.19.5 Missing Authorization in 'key… |
moul |
sshportal |
2026-10-16T17:39:09.600Z | 2026-10-23T16:11:02.880Z |
| cve-2026-111643 | 9.3 (v4.0) 9.8 (v3.1) | Misaka Danmu Server through 2.8.9 Authentication Bypas… |
l429609201 |
misaka_danmu_server |
2026-10-16T17:39:13.043Z | 2026-10-23T16:08:12.073Z |
| cve-2026-28330 | 4.6 (v3.1) | SolarWinds Observability Self-Hosted Cross-Site Script… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:23:19.940Z | 2026-10-23T16:04:14.841Z |
| cve-2026-111653 | 6.9 (v4.0) 5.3 (v3.1) | 53AIHub through 0.5.3 Missing Authentication via PUT /… |
53AI |
53AIHub |
2026-10-16T17:39:20.030Z | 2026-10-23T16:02:24.828Z |
| cve-2026-28329 | 6.4 (v3.1) | SolarWinds Observability Self-Hosted Server-Side Reque… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:22:48.111Z | 2026-10-23T16:00:53.960Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-249 | Vulnérabilité des composants <TT>MDAC</TT> sous Microsoft Windows | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-248 | Correctif cumulatif pour Microsoft Internet Explorer | 2002-11-21T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-163 | Vulnérabilité dans les Sun RPC | 2002-08-01T00:00:00.000000 | 2002-11-21T00:00:00.000000 |
| certa-2002-avi-246 | Multiples vulnérabilités sur les serveurs DNS BIND 4 et 8 | 2002-11-13T00:00:00.000000 | 2002-11-19T00:00:00.000000 |
| certa-2002-avi-247 | Vulnérabilités de JRun et ColdFusion pour Microsoft IIS | 2002-11-15T00:00:00.000000 | 2002-11-15T00:00:00.000000 |
| certa-2002-avi-244 | Vulnérabilité de <TT>lprng</TT> et <TT>html2ps</TT> sous Linux | 2002-11-08T00:00:00.000000 | 2002-11-15T00:00:00.000000 |
| certa-2002-avi-245 | Vulnérabilité sur iSQL*Plus dans Oracle 9i | 2002-11-12T00:00:00.000000 | 2002-11-12T00:00:00.000000 |
| certa-2002-avi-235 | Vulnérabilité des services <TT>ypserv</TT> et <TT>ypxfrd</TT> sous Unix | 2002-10-17T00:00:00.000000 | 2002-11-06T00:00:00.000000 |
| certa-2002-avi-243 | uudecode ne vérifie pas les liens symboliques | 2002-11-04T00:00:00.000000 | 2002-11-04T00:00:00.000000 |
| certa-2002-avi-242 | Vulnérabilité dans le module d'authentification pam_ldap | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-241 | Vulnérabilité du logiciel Web-Based Enterprise Management sous Solaris 8 | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-240 | Multiples vulnérabilités dans Microsoft Internet Information Service (IIS) | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-239 | Vulnérabilité du protocole PPTP sous Windows 2000 et Windows XP | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-238 | Problème de permissions sous Windows 2000 | 2002-10-31T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-229 | Vulnérabilité de fetchmail | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-227 | Débordement de variable dans gv | 2002-10-15T00:00:00.000000 | 2002-10-31T00:00:00.000000 |
| certa-2002-avi-237 | Vulnérabilité de la pile TCP sous Solaris | 2002-10-24T00:00:00.000000 | 2002-10-24T00:00:00.000000 |
| certa-2002-avi-236 | Multiples vulnérabilités de X Window sous SGI Irix | 2002-10-21T00:00:00.000000 | 2002-10-21T00:00:00.000000 |
| certa-2002-avi-234 | Vulnérabilité dans les applications Microsoft Word et Excel | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-233 | Vulnérabilité dans le système d'aide de Windows XP | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-232 | Elévation de privilèges dans SQL Server Web Tasks | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-231 | Vulnérabilité du serveur HTTP des commutateurs Catalyst de Cisco | 2002-10-17T00:00:00.000000 | 2002-10-17T00:00:00.000000 |
| certa-2002-avi-230 | Multiples vulnérabilités sous IRIX | 2002-10-16T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-225 | Vulnérabilité dans Oracle Listener | 2002-10-15T00:00:00.000000 | 2002-10-16T00:00:00.000000 |
| certa-2002-avi-228 | Vulnérabilité des systèmes AIX de IBM | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-226 | Vulnérabilité dans les gardes-barrières Symantec | 2002-10-15T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-224 | Vulnérabilités des serveurs HTTP Apache et Oracle | 2002-10-11T00:00:00.000000 | 2002-10-15T00:00:00.000000 |
| certa-2002-avi-223 | Vulnérabilité dans Microsoft Outlook Express | 2002-10-11T00:00:00.000000 | 2002-10-11T00:00:00.000000 |
| certa-2002-avi-222 | Multiples vulnérabilités dans <SPAN class="textit">Services for Unix</SPAN> 3.0 de Microsoft | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-221 | Vulnérabilités de la fonction d'aide sous Windows | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |