Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-115481 | baserCMS: BcCustomContent file fields can be configure… |
baserproject |
basercms |
2026-10-23T13:34:26.038Z | 2026-10-23T14:58:03.802Z | |
| cve-2026-57208 | Entire CLI: Path traversal in checkpoint session metad… |
entireio |
cli |
2026-10-23T13:37:40.983Z | 2026-10-23T14:57:55.652Z | |
| cve-2026-114623 | baserCMS: Path traversal in the BcThemeFile admin scre… |
baserproject |
basercms |
2026-10-23T13:45:29.675Z | 2026-10-23T14:57:47.887Z | |
| cve-2026-55459 | Goobi viewer: OpenID JWT audience not enforced by the … |
intranda |
goobi-viewer-core |
2026-10-23T14:16:44.995Z | 2026-10-23T14:57:39.675Z | |
| cve-2026-53942 | Conda Organization Infrastructure: Pwn Request in upda… |
conda |
infrastructure |
2026-10-23T14:25:00.085Z | 2026-10-23T14:57:32.991Z | |
| cve-2021-48018 | 8.3 (v4.0) 7.4 (v3.1) | Vyper 0.2.13 before 0.2.15 Storage Corruption via @non… |
vyperlang |
vyper |
2026-10-21T00:36:18.265Z | 2026-10-23T14:57:15.214Z |
| cve-2026-100886 | Seetong T8108/T8108P/T8116/T8232 Debug Service imprope… |
Seetong |
T8108 |
2026-09-27T23:00:09.011Z | 2026-10-23T14:43:10.196Z | |
| cve-2026-48539 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
GFI Software |
GFI Archiver |
2026-07-23T15:32:59.409Z | 2026-10-23T14:11:04.939Z |
| cve-2026-48530 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via CategorizationPoli… |
GFI Software |
GFI Archiver |
2026-07-23T15:23:16.097Z | 2026-10-23T14:09:57.681Z |
| cve-2026-111668 | 5.3 (v4.0) 5.4 (v3.1) | AIHelms through 0.1.25 Missing Authorization in Effici… |
beizhu-1209 |
AIHelms |
2026-10-16T17:39:30.328Z | 2026-10-23T14:07:02.761Z |
| cve-2026-111678 | 4.8 (v4.0) 3.3 (v3.1) | Antiword through 0.37 Stack Out-of-Bounds Read via pro… |
Adri van Os |
antiword |
2026-10-16T17:39:37.367Z | 2026-10-23T14:03:28.591Z |
| cve-2026-111683 | 5.3 (v4.0) 5.4 (v3.1) | Allegro Ralph through 20260902.1 Missing Authorization… |
allegro |
ralph |
2026-10-16T17:39:40.888Z | 2026-10-23T13:59:41.560Z |
| cve-2026-111693 | 9.3 (v4.0) 9.8 (v3.1) | DataBuff ai-apm-web through 0.1.10 Hard-Coded Default … |
databufflabs |
databuff |
2026-10-16T17:39:48.920Z | 2026-10-23T13:57:59.704Z |
| cve-2026-113595 | 5.3 (v4.0) 4.3 (v3.1) | Sharkord before 0.0.26 Missing Authorization via chang… |
Sharkord |
sharkord |
2026-10-20T15:40:24.447Z | 2026-10-23T13:55:55.388Z |
| cve-2026-113600 | 5.3 (v4.0) 5.4 (v3.1) | Fat Free CRM before 0.26.0 IDOR via CommentsController… |
fatfreecrm |
fat_free_crm |
2026-10-20T15:40:28.303Z | 2026-10-23T13:53:31.012Z |
| cve-2026-113682 | 9.1 (v4.0) 7.4 (v3.1) | Networknt light-4j 2.1.5 before 2.4.0 Authentication B… |
networknt |
light-4j |
2026-10-20T15:40:42.500Z | 2026-10-23T13:51:42.196Z |
| cve-2026-105963 | 5.1 (v4.0) | Secret key base exposed in stack trace arguments on wr… |
elixir-plug |
plug |
2026-10-23T09:56:58.885Z | 2026-10-23T13:39:29.887Z |
| cve-2026-114407 | 5.1 (v4.0) 6.1 (v3.1) | e107 CMS before 2.3.13 Reflected XSS via search.php au… |
e107inc |
e107 |
2026-10-21T12:01:20.918Z | 2026-10-23T13:28:34.869Z |
| cve-2026-113703 | 9.1 (v4.0) 9.3 (v3.1) | SuggestArr before 3.0.0 Authentication Bypass via X-Fo… |
giuseppe99barchetta |
SuggestArr |
2026-10-20T15:56:49.963Z | 2026-10-23T13:28:34.182Z |
| cve-2026-113583 | 5.3 (v4.0) 6.1 (v3.1) | Cypht 2.0.0 through 2.12.2 Stored DOM XSS via external… |
cypht-org |
cypht |
2026-10-20T11:35:29.543Z | 2026-10-23T13:28:33.480Z |
| cve-2026-109437 | 9.2 (v4.0) 9.8 (v3.1) | Cognition < 0.13.0 Unauthenticated RCE via Local Shell… |
CognicellAI |
Cognition |
2026-10-19T18:22:57.431Z | 2026-10-23T13:28:30.752Z |
| cve-2026-99087 | N/A | dm-integrity: fix NULL pointer dereference when the 'R… |
Linux |
Linux |
2026-10-23T12:45:05.714Z | 2026-10-23T12:45:05.714Z |
| cve-2026-99086 | N/A | dm-integrity: validate the superblock on resume |
Linux |
Linux |
2026-10-23T12:45:04.496Z | 2026-10-23T12:45:04.496Z |
| cve-2026-99085 | N/A | sched_ext: Fix CPU hotplug hang when a dying CPU's tas… |
Linux |
Linux |
2026-10-23T12:45:03.465Z | 2026-10-23T12:45:03.465Z |
| cve-2026-99084 | N/A | readdir: take no inode lock on an immutable directory |
Linux |
Linux |
2026-10-23T12:45:02.631Z | 2026-10-23T12:45:02.631Z |
| cve-2026-99076 | N/A | ipv6: udp: Create exceptions before socket matching |
Linux |
Linux |
2026-10-23T12:23:19.727Z | 2026-10-23T12:23:19.727Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-160 | Débordement de mémoire dans XSun sous Solaris | 2002-07-31T00:00:00.000000 | 2002-07-31T00:00:00.000000 |
| certa-2002-avi-159 | Vulnérabilité du paquetage util-linux | 2002-07-30T00:00:00.000000 | 2002-07-30T00:00:00.000000 |
| certa-2002-avi-134 | Multiples vulnérabilités dans Windows Media Player | 2002-06-27T00:00:00.000000 | 2002-07-26T00:00:00.000000 |
| certa-2002-avi-158 | Vulnérabilité dans Microsoft Metadirectory Services | 2002-07-25T00:00:00.000000 | 2002-07-25T00:00:00.000000 |
| certa-2002-avi-156 | Vulnérabilités dans MS SQL Server 2000 et MSDE 2000 | 2002-07-25T00:00:00.000000 | 2002-07-25T00:00:00.000000 |
| certa-2002-avi-155 | Vulnérabilité de Microsoft Exchange Server 5.5 | 2002-07-25T00:00:00.000000 | 2002-07-25T00:00:00.000000 |
| certa-2002-avi-154 | Vulnérabilités sur PHP | 2002-07-23T00:00:00.000000 | 2002-07-23T00:00:00.000000 |
| certa-2002-avi-153 | Vulnérabilités dans Netmail | 2002-07-19T00:00:00.000000 | 2002-07-19T00:00:00.000000 |
| certa-2002-avi-152 | Vulnérabilités sur HP Compaq Tru64 Unix | 2002-07-19T00:00:00.000000 | 2002-07-19T00:00:00.000000 |
| certa-2002-avi-142 | Vulnérabilité sur Squid | 2002-07-05T00:00:00.000000 | 2002-07-19T00:00:00.000000 |
| certa-2002-avi-151 | Vulnérabilité de pkgadd sur Solaris | 2002-07-16T00:00:00.000000 | 2002-07-16T00:00:00.000000 |
| certa-2002-avi-150 | Vulnérabilité de vold sous Solaris | 2002-07-16T00:00:00.000000 | 2002-07-16T00:00:00.000000 |
| certa-2001-avi-041 | Vulnérabilité dans Internet Explorer 5.01 et 5.5 | 2001-03-30T00:00:00.000000 | 2002-07-16T00:00:00.000000 |
| certa-2002-avi-149 | Vulnérabilité des Web Applications | 2002-07-12T00:00:00.000000 | 2002-07-12T00:00:00.000000 |
| certa-2002-avi-148 | Multiples vulnérabilités dans Apache Tomcat | 2002-07-12T00:00:00.000000 | 2002-07-12T00:00:00.000000 |
| certa-2002-avi-146 | Vulnérabilités sur iPlanet Webserver | 2002-07-11T00:00:00.000000 | 2002-07-11T00:00:00.000000 |
| certa-2002-avi-145 | Multiples vulnérabilités dans Microsoft SQL Server | 2002-07-11T00:00:00.000000 | 2002-07-11T00:00:00.000000 |
| certa-2002-avi-130 | Vulnérabilité sur Apache | 2002-06-18T00:00:00.000000 | 2002-07-11T00:00:00.000000 |
| certa-2002-avi-144 | Vulnérabilité dans CIPE | 2002-07-08T00:00:00.000000 | 2002-07-08T00:00:00.000000 |
| certa-2002-avi-143 | Vulnérabilité ICMP dans le noyau Linux | 2002-07-08T00:00:00.000000 | 2002-07-08T00:00:00.000000 |
| certa-2002-avi-136 | Vulnérabilités dans OpenSSH v2 et v3 | 2002-06-27T00:00:00.000000 | 2002-07-08T00:00:00.000000 |
| certa-2002-avi-141 | Vulnérabilité dans CISCO Secure ACS pour UNIX | 2002-07-04T00:00:00.000000 | 2002-07-04T00:00:00.000000 |
| certa-2002-avi-140 | Vulnérabilité dans Sendmail | 2002-06-28T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2002-avi-138 | Vulnérabilité CISCO aux scans SSH | 2002-06-28T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2001-avi-088 | Vulnérabilité de SnmpXdmid sur Sun | 2001-08-31T00:00:00.000000 | 2002-06-28T00:00:00.000000 |
| certa-2002-avi-137 | Vulnérabilité sur Oracle9iAS | 2002-06-27T00:00:00.000000 | 2002-06-27T00:00:00.000000 |
| certa-2002-avi-135 | Débordement de mémoire dans Microsoft Commerce Server 2000 et 2002 | 2002-06-27T00:00:00.000000 | 2002-06-27T00:00:00.000000 |
| certa-2002-avi-133 | Vulnérabilité sur ColdFusion MX de Macromedia | 2002-06-21T00:00:00.000000 | 2002-06-21T00:00:00.000000 |
| certa-2002-avi-132 | Multiples vulnérabilités dans Excel et Word pour Windows | 2002-06-21T00:00:00.000000 | 2002-06-21T00:00:00.000000 |
| certa-2002-avi-131 | Vulnérabilité du client VPN de Cisco | 2002-06-20T00:00:00.000000 | 2002-06-20T00:00:00.000000 |