Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-28328 | 8.8 (v3.1) | SolarWinds Observability Self-Hosted broken authorizat… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:17:18.712Z | 2026-10-23T15:58:55.705Z |
| cve-2026-111658 | 5.1 (v4.0) 3.8 (v3.1) | SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio… |
SiteServer |
SSCMS |
2026-10-16T17:39:23.461Z | 2026-10-23T15:58:20.254Z |
| cve-2026-111663 | 9.2 (v4.0) 8.6 (v3.1) | Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.910Z | 2026-10-23T15:56:17.575Z |
| cve-2026-24401 | Avahi has Uncontrolled Recursion in lookup_handle_cnam… |
avahi |
avahi |
2026-01-24T01:25:02.294Z | 2026-10-23T15:54:16.116Z | |
| cve-2014-125133 | 8.7 (v4.0) 7.5 (v3.1) | NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do… |
imithemes |
NativeChurch |
2026-10-20T20:31:22.824Z | 2026-10-23T15:33:12.495Z |
| cve-2012-20003 | 5.1 (v4.0) 6.1 (v3.1) | Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v… |
Web Updates KMU |
Custom Tables |
2026-10-20T20:31:19.033Z | 2026-10-23T15:25:44.876Z |
| cve-2015-20128 | 8.8 (v4.0) 8.2 (v3.1) | FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx |
FooSun |
DotNetCMS |
2026-10-20T20:31:26.220Z | 2026-10-23T15:21:40.984Z |
| cve-2016-20104 | 8.7 (v4.0) 7.5 (v3.1) | EyeLock nano NXT 3.05.1193 Path Traversal via logdownl… |
EyeLock |
nano NXT |
2026-10-20T20:31:29.589Z | 2026-10-23T15:15:18.506Z |
| cve-2026-113788 | Lagoon core ssh service vulnerable to remote code execution |
uselagoon |
lagoon |
2026-10-21T15:31:24.574Z | 2026-10-23T15:13:02.016Z | |
| cve-2026-113792 | pypdf: Possible infinite loop in PdfWriter.find_outline_item |
py-pdf |
pypdf |
2026-10-21T15:55:55.976Z | 2026-10-23T15:12:47.568Z | |
| cve-2026-113796 | Electron: SameSite cookie restrictions are not applied… |
electron |
electron |
2026-10-21T16:04:42.688Z | 2026-10-23T15:12:14.165Z | |
| cve-2026-113800 | Electron: HID and USB permission checks can be attribu… |
electron |
electron |
2026-10-21T16:16:45.808Z | 2026-10-23T15:12:01.887Z | |
| cve-2026-114124 | Electron: Off-screen rendering on macOS trusts GPU-sup… |
electron |
electron |
2026-10-21T17:03:26.765Z | 2026-10-23T15:11:35.835Z | |
| cve-2026-114128 | Astro: Reflected/Stored XSS via unescaped <script>/<st… |
withastro |
astro |
2026-10-21T17:32:28.466Z | 2026-10-23T15:11:02.457Z | |
| cve-2026-114132 | Nuxt: Server-side route rules (`redirect`, `headers`, … |
nuxt |
nuxt |
2026-10-21T17:50:11.250Z | 2026-10-23T15:10:37.684Z | |
| cve-2026-110744 | 7.2 (v3.1) | Multicluster-global-hub-operator-bundle: operator serv… |
Red Hat |
Multicluster Global Hub |
2026-10-21T17:52:40.314Z | 2026-10-23T15:10:10.054Z |
| cve-2026-114492 | 7 (v4.0) 6.5 (v3.1) | gin-vue-admin through 2.9.2 Path Traversal via removeP… |
flipped-aurora |
gin-vue-admin |
2026-10-21T17:54:16.906Z | 2026-10-23T15:09:41.469Z |
| cve-2026-114361 | HarnessRouter Identity Mode app.py improper authorization |
n/a |
HarnessRouter |
2026-10-21T19:00:18.743Z | 2026-10-23T15:09:14.205Z | |
| cve-2026-114137 | Django REST framework: TokenProxy.delete() reports suc… |
encode |
django-rest-framework |
2026-10-21T20:06:57.790Z | 2026-10-23T15:08:55.473Z | |
| cve-2026-114145 | GitPython validates a submodule's ".git" path only aft… |
gitpython-developers |
GitPython |
2026-10-21T20:35:06.548Z | 2026-10-23T15:08:48.132Z | |
| cve-2026-76287 | 5.4 (v3.1) | Authorization Bypass in the Data Management REST API i… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:49.096Z | 2026-10-23T15:08:38.358Z |
| cve-2026-76303 | 5.7 (v3.1) | Stored Cross-Site Scripting (XSS) through App Document… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:04.809Z | 2026-10-23T15:08:29.705Z |
| cve-2026-76307 | 7.2 (v3.1) | Sensitive Information Disclosure through REST API Quer… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:10.654Z | 2026-10-23T15:08:20.736Z |
| cve-2026-114634 | 5.3 (v4.0) 4.3 (v3.1) | WWBN AVideo before 29.4.0 Blind SSRF via getHeaderCont… |
WWBN |
AVideo |
2026-10-22T01:43:35.830Z | 2026-10-23T15:08:11.068Z |
| cve-2026-114638 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via aut… |
traefik |
traefik |
2026-10-22T01:43:38.571Z | 2026-10-23T15:08:01.405Z |
| cve-2026-114642 | 7 (v4.0) 8.7 (v3.1) | Traefik before 2.11.58 and 3.7.14 TLS Config Bypass vi… |
traefik |
traefik |
2026-10-22T01:43:41.355Z | 2026-10-23T15:07:43.191Z |
| cve-2025-60497 | N/A | A segmentation violation in the GetESD function (… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:33.099Z |
| cve-2025-60492 | N/A | A stack overflow in the gf_bifs_dec_node function… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:30.908Z |
| cve-2026-114659 | 7.1 (v4.0) 6.5 (v3.1) | Grav Flex Objects 1.4.0 before 1.4.17 Authorization By… |
getgrav |
grav-plugin-flex-objects |
2026-10-22T01:43:44.133Z | 2026-10-23T15:07:07.168Z |
| cve-2026-114663 | 8.6 (v4.0) 8.4 (v3.1) | Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Import… |
vyperlang |
vyper |
2026-10-22T01:43:46.942Z | 2026-10-23T15:06:28.237Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-220 | Multiples vulnérabilités dans MS-SQL | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-219 | Vulnérabilités dans les fonctions de décompression des dossiers sous Windows | 2002-10-03T00:00:00.000000 | 2002-10-03T00:00:00.000000 |
| certa-2002-avi-218 | Vulnérabilité dans le serveur Microsoft FrontPage | 2002-09-26T00:00:00.000000 | 2002-09-26T00:00:00.000000 |
| certa-2002-avi-162 | Multiples vulnérabilités dans OpenSSL | 2002-07-31T00:00:00.000000 | 2002-09-26T00:00:00.000000 |
| certa-2002-avi-217 | Vulnérabilité de PHP | 2002-09-20T00:00:00.000000 | 2002-09-20T00:00:00.000000 |
| certa-2002-avi-216 | Vulnérabilité des anti-virus pour passerelles de messagerie | 2002-09-20T00:00:00.000000 | 2002-09-20T00:00:00.000000 |
| certa-2002-avi-215 | Multiples Vulnérabilités dans Microsoft java | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-214 | Vulnérabilité d'ISS Scanner | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-213 | Vulnérabilité du protocole RDP dans les systèmes Windows | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-212 | Multiples vulnérabilités du client VPN 5000 de Cisco | 2002-09-19T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-209 | Vulnérabilités sur HP Tru64 Unix | 2002-09-17T00:00:00.000000 | 2002-09-19T00:00:00.000000 |
| certa-2002-avi-211 | Vulnérabilité du Help Center de Windows XP | 2002-09-18T00:00:00.000000 | 2002-09-18T00:00:00.000000 |
| certa-2002-avi-147 | Vulnérabilités de CDE Tooltalk | 2002-07-11T00:00:00.000000 | 2002-09-18T00:00:00.000000 |
| certa-2002-avi-210 | Vulnérabilité de <TT>aspppls</TT> sous solaris 8 | 2002-09-17T00:00:00.000000 | 2002-09-17T00:00:00.000000 |
| certa-2002-avi-207 | Contournement des règles de sécurité dans Konqueror | 2002-09-13T00:00:00.000000 | 2002-09-17T00:00:00.000000 |
| certa-2002-avi-173 | Vulnérabilité de ToolTalk | 2002-08-13T00:00:00.000000 | 2002-09-17T00:00:00.000000 |
| certa-2002-avi-208 | Vulnérabilité des cookies sécurisés dans KDE | 2002-09-13T00:00:00.000000 | 2002-09-13T00:00:00.000000 |
| certa-2002-avi-206 | Vulnérabilité de mhonarc | 2002-09-13T00:00:00.000000 | 2002-09-13T00:00:00.000000 |
| certa-2002-avi-203 | Vulnérabilité des certificats SSL dans KDE | 2002-09-06T00:00:00.000000 | 2002-09-13T00:00:00.000000 |
| certa-2002-avi-192 | Vulnérabilités de PostgreSQL | 2002-08-27T00:00:00.000000 | 2002-09-13T00:00:00.000000 |
| certa-2002-avi-205 | Vulnérabilités sur le client VPN Cisco | 2002-09-09T00:00:00.000000 | 2002-09-09T00:00:00.000000 |
| certa-2002-avi-204 | Vulnérabilité de PGP | 2002-09-09T00:00:00.000000 | 2002-09-09T00:00:00.000000 |
| certa-2002-avi-193 | Vulnérabilité de linuxconf | 2002-08-29T00:00:00.000000 | 2002-09-09T00:00:00.000000 |
| certa-2002-avi-189 | Vulnérabilité dans Ethereal | 2002-08-23T00:00:00.000000 | 2002-09-09T00:00:00.000000 |
| certa-2002-avi-202 | Mauvaise vérification des certificats dans les produits Microsoft | 2002-09-05T00:00:00.000000 | 2002-09-05T00:00:00.000000 |
| certa-2002-avi-201 | Exécution à distance de Visual FoxPro 6.0 ou des documents associés | 2002-09-05T00:00:00.000000 | 2002-09-05T00:00:00.000000 |
| certa-2002-avi-200 | Vulnérabilité de scrollkeeper | 2002-09-04T00:00:00.000000 | 2002-09-04T00:00:00.000000 |
| certa-2002-avi-199 | Multiples vulnérabilités des concentrateurs Cisco VPN 3000 | 2002-09-04T00:00:00.000000 | 2002-09-04T00:00:00.000000 |
| certa-2002-avi-198 | Vulnérabilités sur HP-UX | 2002-09-02T00:00:00.000000 | 2002-09-02T00:00:00.000000 |
| certa-2002-avi-197 | Vulnérabilité de mailman | 2002-08-30T00:00:00.000000 | 2002-08-30T00:00:00.000000 |