Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-115481 | baserCMS: BcCustomContent file fields can be configure… |
baserproject |
basercms |
2026-10-23T13:34:26.038Z | 2026-10-23T14:58:03.802Z | |
| cve-2026-57208 | Entire CLI: Path traversal in checkpoint session metad… |
entireio |
cli |
2026-10-23T13:37:40.983Z | 2026-10-23T14:57:55.652Z | |
| cve-2026-114623 | baserCMS: Path traversal in the BcThemeFile admin scre… |
baserproject |
basercms |
2026-10-23T13:45:29.675Z | 2026-10-23T14:57:47.887Z | |
| cve-2026-55459 | Goobi viewer: OpenID JWT audience not enforced by the … |
intranda |
goobi-viewer-core |
2026-10-23T14:16:44.995Z | 2026-10-23T14:57:39.675Z | |
| cve-2026-53942 | Conda Organization Infrastructure: Pwn Request in upda… |
conda |
infrastructure |
2026-10-23T14:25:00.085Z | 2026-10-23T14:57:32.991Z | |
| cve-2021-48018 | 8.3 (v4.0) 7.4 (v3.1) | Vyper 0.2.13 before 0.2.15 Storage Corruption via @non… |
vyperlang |
vyper |
2026-10-21T00:36:18.265Z | 2026-10-23T14:57:15.214Z |
| cve-2026-100886 | Seetong T8108/T8108P/T8116/T8232 Debug Service imprope… |
Seetong |
T8108 |
2026-09-27T23:00:09.011Z | 2026-10-23T14:43:10.196Z | |
| cve-2026-48539 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
GFI Software |
GFI Archiver |
2026-07-23T15:32:59.409Z | 2026-10-23T14:11:04.939Z |
| cve-2026-48530 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via CategorizationPoli… |
GFI Software |
GFI Archiver |
2026-07-23T15:23:16.097Z | 2026-10-23T14:09:57.681Z |
| cve-2026-111668 | 5.3 (v4.0) 5.4 (v3.1) | AIHelms through 0.1.25 Missing Authorization in Effici… |
beizhu-1209 |
AIHelms |
2026-10-16T17:39:30.328Z | 2026-10-23T14:07:02.761Z |
| cve-2026-111678 | 4.8 (v4.0) 3.3 (v3.1) | Antiword through 0.37 Stack Out-of-Bounds Read via pro… |
Adri van Os |
antiword |
2026-10-16T17:39:37.367Z | 2026-10-23T14:03:28.591Z |
| cve-2026-111683 | 5.3 (v4.0) 5.4 (v3.1) | Allegro Ralph through 20260902.1 Missing Authorization… |
allegro |
ralph |
2026-10-16T17:39:40.888Z | 2026-10-23T13:59:41.560Z |
| cve-2026-111693 | 9.3 (v4.0) 9.8 (v3.1) | DataBuff ai-apm-web through 0.1.10 Hard-Coded Default … |
databufflabs |
databuff |
2026-10-16T17:39:48.920Z | 2026-10-23T13:57:59.704Z |
| cve-2026-113595 | 5.3 (v4.0) 4.3 (v3.1) | Sharkord before 0.0.26 Missing Authorization via chang… |
Sharkord |
sharkord |
2026-10-20T15:40:24.447Z | 2026-10-23T13:55:55.388Z |
| cve-2026-113600 | 5.3 (v4.0) 5.4 (v3.1) | Fat Free CRM before 0.26.0 IDOR via CommentsController… |
fatfreecrm |
fat_free_crm |
2026-10-20T15:40:28.303Z | 2026-10-23T13:53:31.012Z |
| cve-2026-113682 | 9.1 (v4.0) 7.4 (v3.1) | Networknt light-4j 2.1.5 before 2.4.0 Authentication B… |
networknt |
light-4j |
2026-10-20T15:40:42.500Z | 2026-10-23T13:51:42.196Z |
| cve-2026-105963 | 5.1 (v4.0) | Secret key base exposed in stack trace arguments on wr… |
elixir-plug |
plug |
2026-10-23T09:56:58.885Z | 2026-10-23T13:39:29.887Z |
| cve-2026-114407 | 5.1 (v4.0) 6.1 (v3.1) | e107 CMS before 2.3.13 Reflected XSS via search.php au… |
e107inc |
e107 |
2026-10-21T12:01:20.918Z | 2026-10-23T13:28:34.869Z |
| cve-2026-113703 | 9.1 (v4.0) 9.3 (v3.1) | SuggestArr before 3.0.0 Authentication Bypass via X-Fo… |
giuseppe99barchetta |
SuggestArr |
2026-10-20T15:56:49.963Z | 2026-10-23T13:28:34.182Z |
| cve-2026-113583 | 5.3 (v4.0) 6.1 (v3.1) | Cypht 2.0.0 through 2.12.2 Stored DOM XSS via external… |
cypht-org |
cypht |
2026-10-20T11:35:29.543Z | 2026-10-23T13:28:33.480Z |
| cve-2026-109437 | 9.2 (v4.0) 9.8 (v3.1) | Cognition < 0.13.0 Unauthenticated RCE via Local Shell… |
CognicellAI |
Cognition |
2026-10-19T18:22:57.431Z | 2026-10-23T13:28:30.752Z |
| cve-2026-99087 | N/A | dm-integrity: fix NULL pointer dereference when the 'R… |
Linux |
Linux |
2026-10-23T12:45:05.714Z | 2026-10-23T12:45:05.714Z |
| cve-2026-99086 | N/A | dm-integrity: validate the superblock on resume |
Linux |
Linux |
2026-10-23T12:45:04.496Z | 2026-10-23T12:45:04.496Z |
| cve-2026-99085 | N/A | sched_ext: Fix CPU hotplug hang when a dying CPU's tas… |
Linux |
Linux |
2026-10-23T12:45:03.465Z | 2026-10-23T12:45:03.465Z |
| cve-2026-99084 | N/A | readdir: take no inode lock on an immutable directory |
Linux |
Linux |
2026-10-23T12:45:02.631Z | 2026-10-23T12:45:02.631Z |
| cve-2026-99076 | N/A | ipv6: udp: Create exceptions before socket matching |
Linux |
Linux |
2026-10-23T12:23:19.727Z | 2026-10-23T12:23:19.727Z |
| cve-2026-99075 | N/A | rust_binder: reschedule node refcount update on thread exit |
Linux |
Linux |
2026-10-23T12:23:18.830Z | 2026-10-23T12:23:18.830Z |
| cve-2026-99073 | N/A | ipv4: stop exception dump when nexthop group shrinks |
Linux |
Linux |
2026-10-23T12:23:16.935Z | 2026-10-23T12:23:16.935Z |
| cve-2026-99069 | N/A | Input: ati_remote2 - fix type confusion in device attr… |
Linux |
Linux |
2026-10-23T12:23:12.396Z | 2026-10-23T12:23:12.396Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-048 | Multiples implémentations du protocole RADIUS vulnérables | 2002-03-05T00:00:00.000000 | 2002-03-05T00:00:00.000000 |
| certa-2002-avi-047 | Vulnérabilités de PHP | 2002-02-28T00:00:00.000000 | 2002-02-28T00:00:00.000000 |
| certa-2002-avi-046 | Multiples vulnérabilités de SMTP pour Microsoft Windows | 2002-02-28T00:00:00.000000 | 2002-02-28T00:00:00.000000 |
| certa-2002-avi-045 | Vulnérabilité dans CISCO CEF | 2002-02-28T00:00:00.000000 | 2002-02-28T00:00:00.000000 |
| certa-2002-avi-044 | Vulnérabilité dans Microsoft Commerce Server 2000 | 2002-02-22T00:00:00.000000 | 2002-02-22T00:00:00.000000 |
| certa-2002-avi-042 | Vulnérabilité de Internet Explorer liée aux VBScripts | 2002-02-22T00:00:00.000000 | 2002-02-22T00:00:00.000000 |
| certa-2002-avi-041 | Vulnérabilité du contrôle ActiveX XMLHTTP | 2002-02-22T00:00:00.000000 | 2002-02-22T00:00:00.000000 |
| certa-2002-avi-040 | Vulnérabilité dans Microsoft SQL Server 7.0 et 2000 | 2002-02-21T00:00:00.000000 | 2002-02-21T00:00:00.000000 |
| certa-2002-avi-038 | Vulnérabilité des agents SNMP pour les équipements HP | 2002-02-21T00:00:00.000000 | 2002-02-21T00:00:00.000000 |
| certa-2002-avi-030 | Multiples vulnérabilités d'Internet Explorer | 2002-02-12T00:00:00.000000 | 2002-02-21T00:00:00.000000 |
| certa-2002-avi-036 | Vulnérabilité de setrlimit sous HP-UX 11.11 | 2002-02-20T00:00:00.000000 | 2002-02-20T00:00:00.000000 |
| certa-2002-avi-037 | Vulnérabilité des équipements HP AdvanceStack | 2002-02-19T00:00:00.000000 | 2002-02-19T00:00:00.000000 |
| certa-2002-avi-032 | vulnérabilité de SNMP sur CISCO | 2002-02-13T00:00:00.000000 | 2002-02-13T00:00:00.000000 |
| certa-2002-avi-031 | Vulnérabilité de l'agent SNMP sous Solaris | 2002-02-13T00:00:00.000000 | 2002-02-13T00:00:00.000000 |
| certa-2002-avi-029 | Vulnérabilité de groff | 2002-02-12T00:00:00.000000 | 2002-02-12T00:00:00.000000 |
| certa-2002-avi-028 | Multiples vulnérabilités sur Oracle 9iAS v1.0.2.x | 2002-02-11T00:00:00.000000 | 2002-02-11T00:00:00.000000 |
| certa-2002-avi-027 | Déni de service dans Realsecure Server Sensor d'ISS | 2002-02-08T00:00:00.000000 | 2002-02-08T00:00:00.000000 |
| certa-2002-avi-026 | Vulnérabilité dans l'authentification sur Cisco Secure Access Control Server | 2002-02-08T00:00:00.000000 | 2002-02-08T00:00:00.000000 |
| certa-2002-avi-025 | Vulnérabilité dans le serveur Telnet Microsoft | 2002-02-08T00:00:00.000000 | 2002-02-08T00:00:00.000000 |
| certa-2002-avi-024 | Vulnérabilité dans Microsoft Office v.X pour Mac OS X | 2002-02-07T00:00:00.000000 | 2002-02-07T00:00:00.000000 |
| certa-2002-avi-023 | Vulnérabilité dans le serveur Web Lotus Domino | 2002-02-07T00:00:00.000000 | 2002-02-07T00:00:00.000000 |
| certa-2002-avi-022 | Vulnérabilités du serveur ProFTPD | 2002-02-04T00:00:00.000000 | 2002-02-04T00:00:00.000000 |
| certa-2002-avi-020 | Débordement de mémoire de RealPlayer | 2002-02-01T00:00:00.000000 | 2002-02-01T00:00:00.000000 |
| certa-2002-avi-019 | Vulnérabilités de gzip | 2002-02-01T00:00:00.000000 | 2002-02-01T00:00:00.000000 |
| certa-2002-avi-018 | Mauvaise gestion de l'appartenance à un domaine lors de l'authentification par SID sous Windows NT/2000 | 2002-01-31T00:00:00.000000 | 2002-01-31T00:00:00.000000 |
| certa-2002-avi-017 | Vulnérabilité de <TT>telnet</TT> sur les commutateurs Catalyst CISCO | 2002-01-30T00:00:00.000000 | 2002-01-30T00:00:00.000000 |
| certa-2002-avi-016 | Vulnérabilité de ptrace dans les systèmes BSD | 2002-01-28T00:00:00.000000 | 2002-01-28T00:00:00.000000 |
| certa-2002-avi-015 | Vulnérabilité dans rsync | 2002-01-28T00:00:00.000000 | 2002-01-28T00:00:00.000000 |
| certa-2002-avi-014 | Vulnérabilité dans les cookies sous Netscape et Mozilla | 2002-01-28T00:00:00.000000 | 2002-01-28T00:00:00.000000 |
| certa-2002-avi-013 | Vulnérabilité de OpenLDAP | 2002-01-25T00:00:00.000000 | 2002-01-25T00:00:00.000000 |