Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111638 | 8.3 (v4.0) 7.7 (v3.1) | sshportal through 1.19.5 Missing Authorization in 'key… |
moul |
sshportal |
2026-10-16T17:39:09.600Z | 2026-10-23T16:11:02.880Z |
| cve-2026-111643 | 9.3 (v4.0) 9.8 (v3.1) | Misaka Danmu Server through 2.8.9 Authentication Bypas… |
l429609201 |
misaka_danmu_server |
2026-10-16T17:39:13.043Z | 2026-10-23T16:08:12.073Z |
| cve-2026-28330 | 4.6 (v3.1) | SolarWinds Observability Self-Hosted Cross-Site Script… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:23:19.940Z | 2026-10-23T16:04:14.841Z |
| cve-2026-111653 | 6.9 (v4.0) 5.3 (v3.1) | 53AIHub through 0.5.3 Missing Authentication via PUT /… |
53AI |
53AIHub |
2026-10-16T17:39:20.030Z | 2026-10-23T16:02:24.828Z |
| cve-2026-28329 | 6.4 (v3.1) | SolarWinds Observability Self-Hosted Server-Side Reque… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:22:48.111Z | 2026-10-23T16:00:53.960Z |
| cve-2026-28328 | 8.8 (v3.1) | SolarWinds Observability Self-Hosted broken authorizat… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:17:18.712Z | 2026-10-23T15:58:55.705Z |
| cve-2026-111658 | 5.1 (v4.0) 3.8 (v3.1) | SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio… |
SiteServer |
SSCMS |
2026-10-16T17:39:23.461Z | 2026-10-23T15:58:20.254Z |
| cve-2026-111663 | 9.2 (v4.0) 8.6 (v3.1) | Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.910Z | 2026-10-23T15:56:17.575Z |
| cve-2026-24401 | Avahi has Uncontrolled Recursion in lookup_handle_cnam… |
avahi |
avahi |
2026-01-24T01:25:02.294Z | 2026-10-23T15:54:16.116Z | |
| cve-2014-125133 | 8.7 (v4.0) 7.5 (v3.1) | NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do… |
imithemes |
NativeChurch |
2026-10-20T20:31:22.824Z | 2026-10-23T15:33:12.495Z |
| cve-2012-20003 | 5.1 (v4.0) 6.1 (v3.1) | Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v… |
Web Updates KMU |
Custom Tables |
2026-10-20T20:31:19.033Z | 2026-10-23T15:25:44.876Z |
| cve-2015-20128 | 8.8 (v4.0) 8.2 (v3.1) | FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx |
FooSun |
DotNetCMS |
2026-10-20T20:31:26.220Z | 2026-10-23T15:21:40.984Z |
| cve-2016-20104 | 8.7 (v4.0) 7.5 (v3.1) | EyeLock nano NXT 3.05.1193 Path Traversal via logdownl… |
EyeLock |
nano NXT |
2026-10-20T20:31:29.589Z | 2026-10-23T15:15:18.506Z |
| cve-2026-113788 | Lagoon core ssh service vulnerable to remote code execution |
uselagoon |
lagoon |
2026-10-21T15:31:24.574Z | 2026-10-23T15:13:02.016Z | |
| cve-2026-113792 | pypdf: Possible infinite loop in PdfWriter.find_outline_item |
py-pdf |
pypdf |
2026-10-21T15:55:55.976Z | 2026-10-23T15:12:47.568Z | |
| cve-2026-113796 | Electron: SameSite cookie restrictions are not applied… |
electron |
electron |
2026-10-21T16:04:42.688Z | 2026-10-23T15:12:14.165Z | |
| cve-2026-113800 | Electron: HID and USB permission checks can be attribu… |
electron |
electron |
2026-10-21T16:16:45.808Z | 2026-10-23T15:12:01.887Z | |
| cve-2026-114124 | Electron: Off-screen rendering on macOS trusts GPU-sup… |
electron |
electron |
2026-10-21T17:03:26.765Z | 2026-10-23T15:11:35.835Z | |
| cve-2026-114128 | Astro: Reflected/Stored XSS via unescaped <script>/<st… |
withastro |
astro |
2026-10-21T17:32:28.466Z | 2026-10-23T15:11:02.457Z | |
| cve-2026-114132 | Nuxt: Server-side route rules (`redirect`, `headers`, … |
nuxt |
nuxt |
2026-10-21T17:50:11.250Z | 2026-10-23T15:10:37.684Z | |
| cve-2026-110744 | 7.2 (v3.1) | Multicluster-global-hub-operator-bundle: operator serv… |
Red Hat |
Multicluster Global Hub |
2026-10-21T17:52:40.314Z | 2026-10-23T15:10:10.054Z |
| cve-2026-114492 | 7 (v4.0) 6.5 (v3.1) | gin-vue-admin through 2.9.2 Path Traversal via removeP… |
flipped-aurora |
gin-vue-admin |
2026-10-21T17:54:16.906Z | 2026-10-23T15:09:41.469Z |
| cve-2026-114361 | HarnessRouter Identity Mode app.py improper authorization |
n/a |
HarnessRouter |
2026-10-21T19:00:18.743Z | 2026-10-23T15:09:14.205Z | |
| cve-2026-114137 | Django REST framework: TokenProxy.delete() reports suc… |
encode |
django-rest-framework |
2026-10-21T20:06:57.790Z | 2026-10-23T15:08:55.473Z | |
| cve-2026-114145 | GitPython validates a submodule's ".git" path only aft… |
gitpython-developers |
GitPython |
2026-10-21T20:35:06.548Z | 2026-10-23T15:08:48.132Z | |
| cve-2026-76287 | 5.4 (v3.1) | Authorization Bypass in the Data Management REST API i… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:49.096Z | 2026-10-23T15:08:38.358Z |
| cve-2026-76303 | 5.7 (v3.1) | Stored Cross-Site Scripting (XSS) through App Document… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:04.809Z | 2026-10-23T15:08:29.705Z |
| cve-2026-76307 | 7.2 (v3.1) | Sensitive Information Disclosure through REST API Quer… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:10.654Z | 2026-10-23T15:08:20.736Z |
| cve-2026-114634 | 5.3 (v4.0) 4.3 (v3.1) | WWBN AVideo before 29.4.0 Blind SSRF via getHeaderCont… |
WWBN |
AVideo |
2026-10-22T01:43:35.830Z | 2026-10-23T15:08:11.068Z |
| cve-2026-114638 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via aut… |
traefik |
traefik |
2026-10-22T01:43:38.571Z | 2026-10-23T15:08:01.405Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-151 | Vulnérabilité de Xview sous Solaris | 2001-11-26T00:00:00.000000 | 2001-11-26T00:00:00.000000 |
| certa-2001-avi-150 | Vulnérabilité du serveur Xsun sous Solaris | 2001-11-26T00:00:00.000000 | 2001-11-26T00:00:00.000000 |
| certa-2001-avi-149 | Vulnérabilités dans le package susehelp de SuSE | 2001-11-26T00:00:00.000000 | 2001-11-26T00:00:00.000000 |
| certa-2001-avi-148 | Vulnérabilité dans le service d'impression sous HP-UX | 2001-11-22T00:00:00.000000 | 2001-11-22T00:00:00.000000 |
| certa-2001-avi-147 | Corruption de cache ARP des équipements CISCO | 2001-11-22T00:00:00.000000 | 2001-11-22T00:00:00.000000 |
| certa-2001-avi-124 | Vulnérabilités dans le noyau linux (2.2.x et 2.4.x) | 2001-10-23T00:00:00.000000 | 2001-11-22T00:00:00.000000 |
| certa-2001-avi-146 | Vulnérabilité dans Windows Media Player | 2001-11-20T00:00:00.000000 | 2001-11-20T00:00:00.000000 |
| certa-2001-avi-145 | Vulnérabilités dans le service d'impression lpsched sous IRIX | 2001-11-20T00:00:00.000000 | 2001-11-20T00:00:00.000000 |
| certa-2001-avi-144 | Vulnérabilités liées aux ACL dans les routeurs CISCO 12000 | 2001-11-20T00:00:00.000000 | 2001-11-20T00:00:00.000000 |
| certa-2001-avi-089 | Vulnérabilités dans le service d'impression BSD | 2001-08-31T00:00:00.000000 | 2001-11-19T00:00:00.000000 |
| certa-2001-avi-143 | Vulnérabilité dans les routeurs Cisco | 2001-11-16T00:00:00.000000 | 2001-11-16T00:00:00.000000 |
| certa-2001-avi-142 | Vulnérabilité des utilitaires 'ppp' | 2001-11-16T00:00:00.000000 | 2001-11-16T00:00:00.000000 |
| certa-2001-avi-141 | Vulnérabilités de Lotus domino Server 5.x | 2001-11-15T00:00:00.000000 | 2001-11-15T00:00:00.000000 |
| certa-2001-avi-140 | Vulnérabilités dans Internet Explorer | 2001-11-15T00:00:00.000000 | 2001-11-15T00:00:00.000000 |
| certa-2001-avi-138 | Vulnérabilité des SYNCOOKIES dans le noyau Linux | 2001-11-07T00:00:00.000000 | 2001-11-07T00:00:00.000000 |
| certa-2001-avi-137 | Vulnérabilité de UPnP sous Windows | 2001-11-06T00:00:00.000000 | 2001-11-06T00:00:00.000000 |
| certa-2001-avi-118 | Vulnérabilité dans login sous Linux | 2001-10-19T00:00:00.000000 | 2001-11-02T00:00:00.000000 |
| certa-2001-avi-136 | Vulnérabilités dans Oracle Label Security | 2001-10-31T00:00:00.000000 | 2001-10-31T00:00:00.000000 |
| certa-2001-avi-135 | Vulnérabilité dans sdiff | 2001-10-31T00:00:00.000000 | 2001-10-31T00:00:00.000000 |
| certa-2001-avi-134 | Multiples vulnérabilités dans le SGBD Oracle | 2001-10-31T00:00:00.000000 | 2001-10-31T00:00:00.000000 |
| certa-2001-avi-133 | Vulnérabilité de ufsrestore sous Solaris. | 2001-10-29T00:00:00.000000 | 2001-10-29T00:00:00.000000 |
| certa-2001-avi-132 | Vulnérabilités de webalizer | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-131 | Vulnérabilités du serveur Apache | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-130 | Vulnérabilité d'IGMP sous SGI Irix | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-129 | Vulnérabilité dans la machine virtuelle java (JRE) de SUN. | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-128 | Vulnérabilité d'Internet Explorer 5.1 sous Mac OS X | 2001-10-26T00:00:00.000000 | 2001-10-26T00:00:00.000000 |
| certa-2001-avi-127 | Vulnérabilité sous Mac OS X | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-126 | Vulnérabilité dans le protocole RDP sous Windows 2000 et NT Server | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-125 | Débordement de mémoire de Oracle 9iAS Web Cache | 2001-10-24T00:00:00.000000 | 2001-10-24T00:00:00.000000 |
| certa-2001-avi-116 | Vulnérabilité de Microsoft Internet Explorer | 2001-10-16T00:00:00.000000 | 2001-10-23T00:00:00.000000 |