Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111658 | 5.1 (v4.0) 3.8 (v3.1) | SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio… |
SiteServer |
SSCMS |
2026-10-16T17:39:23.461Z | 2026-10-23T15:58:20.254Z |
| cve-2026-111663 | 9.2 (v4.0) 8.6 (v3.1) | Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.910Z | 2026-10-23T15:56:17.575Z |
| cve-2026-24401 | Avahi has Uncontrolled Recursion in lookup_handle_cnam… |
avahi |
avahi |
2026-01-24T01:25:02.294Z | 2026-10-23T15:54:16.116Z | |
| cve-2014-125133 | 8.7 (v4.0) 7.5 (v3.1) | NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do… |
imithemes |
NativeChurch |
2026-10-20T20:31:22.824Z | 2026-10-23T15:33:12.495Z |
| cve-2012-20003 | 5.1 (v4.0) 6.1 (v3.1) | Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v… |
Web Updates KMU |
Custom Tables |
2026-10-20T20:31:19.033Z | 2026-10-23T15:25:44.876Z |
| cve-2015-20128 | 8.8 (v4.0) 8.2 (v3.1) | FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx |
FooSun |
DotNetCMS |
2026-10-20T20:31:26.220Z | 2026-10-23T15:21:40.984Z |
| cve-2016-20104 | 8.7 (v4.0) 7.5 (v3.1) | EyeLock nano NXT 3.05.1193 Path Traversal via logdownl… |
EyeLock |
nano NXT |
2026-10-20T20:31:29.589Z | 2026-10-23T15:15:18.506Z |
| cve-2026-113788 | Lagoon core ssh service vulnerable to remote code execution |
uselagoon |
lagoon |
2026-10-21T15:31:24.574Z | 2026-10-23T15:13:02.016Z | |
| cve-2026-113792 | pypdf: Possible infinite loop in PdfWriter.find_outline_item |
py-pdf |
pypdf |
2026-10-21T15:55:55.976Z | 2026-10-23T15:12:47.568Z | |
| cve-2026-113796 | Electron: SameSite cookie restrictions are not applied… |
electron |
electron |
2026-10-21T16:04:42.688Z | 2026-10-23T15:12:14.165Z | |
| cve-2026-113800 | Electron: HID and USB permission checks can be attribu… |
electron |
electron |
2026-10-21T16:16:45.808Z | 2026-10-23T15:12:01.887Z | |
| cve-2026-114124 | Electron: Off-screen rendering on macOS trusts GPU-sup… |
electron |
electron |
2026-10-21T17:03:26.765Z | 2026-10-23T15:11:35.835Z | |
| cve-2026-114128 | Astro: Reflected/Stored XSS via unescaped <script>/<st… |
withastro |
astro |
2026-10-21T17:32:28.466Z | 2026-10-23T15:11:02.457Z | |
| cve-2026-114132 | Nuxt: Server-side route rules (`redirect`, `headers`, … |
nuxt |
nuxt |
2026-10-21T17:50:11.250Z | 2026-10-23T15:10:37.684Z | |
| cve-2026-110744 | 7.2 (v3.1) | Multicluster-global-hub-operator-bundle: operator serv… |
Red Hat |
Multicluster Global Hub |
2026-10-21T17:52:40.314Z | 2026-10-23T15:10:10.054Z |
| cve-2026-114492 | 7 (v4.0) 6.5 (v3.1) | gin-vue-admin through 2.9.2 Path Traversal via removeP… |
flipped-aurora |
gin-vue-admin |
2026-10-21T17:54:16.906Z | 2026-10-23T15:09:41.469Z |
| cve-2026-114361 | HarnessRouter Identity Mode app.py improper authorization |
n/a |
HarnessRouter |
2026-10-21T19:00:18.743Z | 2026-10-23T15:09:14.205Z | |
| cve-2026-114137 | Django REST framework: TokenProxy.delete() reports suc… |
encode |
django-rest-framework |
2026-10-21T20:06:57.790Z | 2026-10-23T15:08:55.473Z | |
| cve-2026-114145 | GitPython validates a submodule's ".git" path only aft… |
gitpython-developers |
GitPython |
2026-10-21T20:35:06.548Z | 2026-10-23T15:08:48.132Z | |
| cve-2026-76287 | 5.4 (v3.1) | Authorization Bypass in the Data Management REST API i… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:49.096Z | 2026-10-23T15:08:38.358Z |
| cve-2026-76303 | 5.7 (v3.1) | Stored Cross-Site Scripting (XSS) through App Document… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:04.809Z | 2026-10-23T15:08:29.705Z |
| cve-2026-76307 | 7.2 (v3.1) | Sensitive Information Disclosure through REST API Quer… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:10.654Z | 2026-10-23T15:08:20.736Z |
| cve-2026-114634 | 5.3 (v4.0) 4.3 (v3.1) | WWBN AVideo before 29.4.0 Blind SSRF via getHeaderCont… |
WWBN |
AVideo |
2026-10-22T01:43:35.830Z | 2026-10-23T15:08:11.068Z |
| cve-2026-114638 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via aut… |
traefik |
traefik |
2026-10-22T01:43:38.571Z | 2026-10-23T15:08:01.405Z |
| cve-2026-114642 | 7 (v4.0) 8.7 (v3.1) | Traefik before 2.11.58 and 3.7.14 TLS Config Bypass vi… |
traefik |
traefik |
2026-10-22T01:43:41.355Z | 2026-10-23T15:07:43.191Z |
| cve-2025-60497 | N/A | A segmentation violation in the GetESD function (… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:33.099Z |
| cve-2025-60492 | N/A | A stack overflow in the gf_bifs_dec_node function… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:30.908Z |
| cve-2026-114659 | 7.1 (v4.0) 6.5 (v3.1) | Grav Flex Objects 1.4.0 before 1.4.17 Authorization By… |
getgrav |
grav-plugin-flex-objects |
2026-10-22T01:43:44.133Z | 2026-10-23T15:07:07.168Z |
| cve-2026-114663 | 8.6 (v4.0) 8.4 (v3.1) | Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Import… |
vyperlang |
vyper |
2026-10-22T01:43:46.942Z | 2026-10-23T15:06:28.237Z |
| cve-2026-115321 | 5.3 (v4.0) 4.3 (v3.1) | Bytebase before 3.16.0 Authorization Bypass via Update… |
bytebase |
bytebase |
2026-10-22T10:57:40.982Z | 2026-10-23T15:05:29.678Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-123 | Vulnérabilités dans procmail | 2001-10-22T00:00:00.000000 | 2001-10-22T00:00:00.000000 |
| certa-2001-avi-122 | Déni de service sur Citrix MetaFrame | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-121 | Vulnérabilité des Cisco IOS et CatOS sous le protocole CDP | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-120 | Vulnérabilité dans Xlock sous Solaris | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-119 | Vulnérabilité de l'interface Web du serveur Novell GroupWise | 2001-10-19T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-115 | Faille de sécurité dans Zope | 2001-10-12T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-104 | Vulnérabilités multiples dans l'implémentation OpenSSH du protocole SSH v2 | 2001-09-28T00:00:00.000000 | 2001-10-19T00:00:00.000000 |
| certa-2001-avi-117 | Vulnérabilité de Norton Antivirus LiveUpdate | 2001-10-18T00:00:00.000000 | 2001-10-18T00:00:00.000000 |
| certa-2001-avi-114 | Vulnérabilité dans le moteur d'indexation ht://Dig | 2001-10-12T00:00:00.000000 | 2001-10-12T00:00:00.000000 |
| certa-2001-avi-113 | Vulnérabilité dans PhpNuke | 2001-10-08T00:00:00.000000 | 2001-10-08T00:00:00.000000 |
| certa-2001-avi-112 | Vulnérabilité de yppasswd | 2001-10-08T00:00:00.000000 | 2001-10-08T00:00:00.000000 |
| certa-2001-avi-111 | Vulnérabilité dans les logiciels Excel et PowerPoint de Microsoft | 2001-10-05T00:00:00.000000 | 2001-10-05T00:00:00.000000 |
| certa-2001-avi-110 | Vulnérabilité de Network Node Manager sous HP Openview | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-109 | Vulnérabilité dans <TT>rpcbind</TT> sous HP | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-108 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-10-04T00:00:00.000000 | 2001-10-04T00:00:00.000000 |
| certa-2001-avi-106 | Multiples vulnérabilités dans Sendmail | 2001-10-02T00:00:00.000000 | 2001-10-02T00:00:00.000000 |
| certa-2001-avi-105 | Vulnérabilité dans les agents de supervision Compaq | 2001-10-01T00:00:00.000000 | 2001-10-01T00:00:00.000000 |
| certa-2001-avi-103 | Vulnérabilité dans le proxy Squid | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-102 | Vulnérabilité dans le garde-barrière PIX de Cisco | 2001-09-28T00:00:00.000000 | 2001-09-28T00:00:00.000000 |
| certa-2001-avi-101 | Vulnérabilité dans le paquetage setserial | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-100 | Vulnérabilité de Microsoft Exchange 2000 Server Outlook Web Access | 2001-09-27T00:00:00.000000 | 2001-09-27T00:00:00.000000 |
| certa-2001-avi-099 | Vulnérabilité dans ArcServe pour Windows NT | 2001-09-25T00:00:00.000000 | 2001-09-25T00:00:00.000000 |
| certa-2001-avi-098 | Vulnérabilités dans le logiciel Interscan eManager de Trend Micro | 2001-09-24T00:00:00.000000 | 2001-09-24T00:00:00.000000 |
| certa-2001-avi-097 | Vulnérabilités de SSH sur CISCO | 2001-09-21T00:00:00.000000 | 2001-09-21T00:00:00.000000 |
| certa-2001-avi-096 | Serveurs DNS Microsoft : corruption de cache possible. | 2001-09-20T00:00:00.000000 | 2001-09-20T00:00:00.000000 |
| certa-2001-avi-095 | Vulnérabilité des <SPAN class= "textit">daemons</SPAN> <TT>smap/smapd</TT> ( ou <TT>CSMAP</TT>) | 2001-09-13T00:00:00.000000 | 2001-09-13T00:00:00.000000 |
| certa-2001-avi-094 | Attaques non détectées par certains IDS | 2001-09-13T00:00:00.000000 | 2001-09-13T00:00:00.000000 |
| certa-2001-avi-093 | Vulnérabilité dans le serveur RPC sous Windows NT 4.0 | 2001-09-12T00:00:00.000000 | 2001-09-12T00:00:00.000000 |
| certa-2001-avi-092 | Vulnérabilité dans Microsoft Exchange 5.5 | 2001-09-07T00:00:00.000000 | 2001-09-07T00:00:00.000000 |
| certa-2001-avi-091 | Vulnérabilité de rlpdaemon sous HP-UX | 2001-09-05T00:00:00.000000 | 2001-09-05T00:00:00.000000 |