Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79850 | 10 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:57.112Z | 2026-10-23T19:12:43.883Z |
| cve-2026-79849 | 10 (v3.1) | Unauthenticated SQL Injection Vulnerabilities allow Re… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:55.951Z | 2026-10-23T19:12:42.582Z |
| cve-2026-79848 | 10 (v3.1) | Unauthenticated SQL Injection Vulnerabilities allow Re… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:54.781Z | 2026-10-23T19:12:41.206Z |
| cve-2026-79847 | 10 (v3.1) | Unauthenticated Buffer Overflow Vulnerabilities leads … |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:53.557Z | 2026-10-23T19:12:39.869Z |
| cve-2026-79844 | 10 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:04:44.829Z | 2026-10-23T19:12:30.616Z |
| cve-2026-111603 | 5.3 (v4.0) 4.3 (v3.1) | PlayEdu through 2.3 Missing Authorization via Student … |
PlayEdu |
PlayEdu |
2026-10-16T17:38:45.572Z | 2026-10-23T18:47:25.698Z |
| cve-2026-111608 | 2.3 (v4.0) 4.2 (v3.1) | Jeepay through 3.2.9 IDOR via DELETE /api/divisionRece… |
jeequan |
jeepay |
2026-10-16T17:38:49.058Z | 2026-10-23T18:44:58.148Z |
| cve-2026-111613 | 8.7 (v4.0) 7.5 (v3.1) | AllData through 0.7.1 Unauthenticated JDBC Injection v… |
alldatacenter |
alldata |
2026-10-16T17:38:52.517Z | 2026-10-23T18:39:50.789Z |
| cve-2026-111618 | 6.9 (v4.0) 5.3 (v3.1) | CoAI through 4.0.0 Unauthenticated Path Traversal via … |
coaidev |
CoAI |
2026-10-16T17:38:55.985Z | 2026-10-23T18:38:09.146Z |
| cve-2026-111623 | 6.3 (v4.0) 5.6 (v3.1) | Xiaozhi-esp32-server-java through 6.1.0 Authentication… |
joey-zhou |
xiaozhi-esp32-server-java |
2026-10-16T17:38:59.425Z | 2026-10-23T18:36:30.866Z |
| cve-2026-111628 | 2.3 (v4.0) 5 (v3.1) | 10up Distributor before 2.3.2 PHP Object Injection via… |
10up |
Distributor |
2026-10-16T17:39:02.847Z | 2026-10-23T18:34:49.579Z |
| cve-2026-114400 | 8.2 (v4.0) 5.9 (v3.1) | Trudesk through 1.2.11 Missing Authentication for Tick… |
polonel |
trudesk |
2026-10-21T12:39:53.511Z | 2026-10-23T18:32:44.884Z |
| cve-2026-111633 | 8.8 (v4.0) 8.6 (v3.1) | ZKEACMS through 4.4 Authentication Bypass via Hard-Cod… |
SeriaWei |
ZKEACMS |
2026-10-16T17:39:06.226Z | 2026-10-23T18:31:57.561Z |
| cve-2026-19754 | 8.6 (v4.0) | Baserow 2.2.0 through 2.3.3 - SQL injection in formula… |
Baserow |
Baserow |
2026-09-02T03:29:38.759Z | 2026-10-23T18:30:35.412Z |
| cve-2026-109219 | Mang Board - 2.4.4 - Unauthenticated Arbitrary File Up… |
kitae-park |
Mang Board |
2026-10-16T04:26:58.632Z | 2026-10-23T18:28:46.339Z | |
| cve-2026-84682 | 7.7 (v4.0) | TDDPv2 setProductVer Command Injection in Archer AX90 |
TP-Link Systems Inc. |
Archer AX90 v1 |
2026-10-01T18:48:42.953Z | 2026-10-23T16:43:53.663Z |
| cve-2026-18963 | 9.1 (v3.1) | Keycloak-services: keycloak-services: unauthenticated … |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-08-18T17:05:07.478Z | 2026-10-23T16:38:40.595Z |
| cve-2026-111648 | 5.1 (v4.0) 2.7 (v3.1) | BuildAdmin through 2.3.9 IDOR via routine/adminInfo/ed… |
build-admin |
buildadmin |
2026-10-16T17:39:16.585Z | 2026-10-23T16:20:19.266Z |
| cve-2026-109433 | 6 (v4.0) 6.5 (v3.1) | Camunda Broken Access Control via Cockpit |
Camunda |
Camunda 7 |
2026-10-19T15:10:59.006Z | 2026-10-23T16:16:49.778Z |
| cve-2026-111638 | 8.3 (v4.0) 7.7 (v3.1) | sshportal through 1.19.5 Missing Authorization in 'key… |
moul |
sshportal |
2026-10-16T17:39:09.600Z | 2026-10-23T16:11:02.880Z |
| cve-2026-111643 | 9.3 (v4.0) 9.8 (v3.1) | Misaka Danmu Server through 2.8.9 Authentication Bypas… |
l429609201 |
misaka_danmu_server |
2026-10-16T17:39:13.043Z | 2026-10-23T16:08:12.073Z |
| cve-2026-28330 | 4.6 (v3.1) | SolarWinds Observability Self-Hosted Cross-Site Script… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:23:19.940Z | 2026-10-23T16:04:14.841Z |
| cve-2026-111653 | 6.9 (v4.0) 5.3 (v3.1) | 53AIHub through 0.5.3 Missing Authentication via PUT /… |
53AI |
53AIHub |
2026-10-16T17:39:20.030Z | 2026-10-23T16:02:24.828Z |
| cve-2026-28329 | 6.4 (v3.1) | SolarWinds Observability Self-Hosted Server-Side Reque… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:22:48.111Z | 2026-10-23T16:00:53.960Z |
| cve-2026-28328 | 8.8 (v3.1) | SolarWinds Observability Self-Hosted broken authorizat… |
SolarWinds |
SolarWinds Observability Self-Hosted |
2026-10-20T16:17:18.712Z | 2026-10-23T15:58:55.705Z |
| cve-2026-111658 | 5.1 (v4.0) 3.8 (v3.1) | SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio… |
SiteServer |
SSCMS |
2026-10-16T17:39:23.461Z | 2026-10-23T15:58:20.254Z |
| cve-2026-111663 | 9.2 (v4.0) 8.6 (v3.1) | Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL… |
chaskiq |
chaskiq |
2026-10-16T17:39:26.910Z | 2026-10-23T15:56:17.575Z |
| cve-2026-24401 | Avahi has Uncontrolled Recursion in lookup_handle_cnam… |
avahi |
avahi |
2026-01-24T01:25:02.294Z | 2026-10-23T15:54:16.116Z | |
| cve-2014-125133 | 8.7 (v4.0) 7.5 (v3.1) | NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do… |
imithemes |
NativeChurch |
2026-10-20T20:31:22.824Z | 2026-10-23T15:33:12.495Z |
| cve-2012-20003 | 5.1 (v4.0) 6.1 (v3.1) | Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v… |
Web Updates KMU |
Custom Tables |
2026-10-20T20:31:19.033Z | 2026-10-23T15:25:44.876Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2000-avi-085 | Vulnérabilités des bases de registres de Windows NT et 2000 | 2000-12-07T00:00:00.000000 | 2000-12-07T00:00:00.000000 |
| certa-2000-avi-084 | Vulnérabilités des serveurs Lotus Domino | 2000-12-06T00:00:00.000000 | 2000-12-06T00:00:00.000000 |
| certa-2000-avi-083 | Vulnérabilités dans les routeurs CISCO serie 600 | 2000-12-05T00:00:00.000000 | 2000-12-05T00:00:00.000000 |
| certa-2000-avi-082 | Vulnérabilités sous Microsoft Internet Explorer 5.x | 2000-12-05T00:00:00.000000 | 2000-12-05T00:00:00.000000 |
| certa-2000-avi-081 | Vulnérabilité sous Microsoft SQL SERVER | 2000-12-05T00:00:00.000000 | 2000-12-05T00:00:00.000000 |
| certa-2000-avi-080 | Vulnérabilité NetBIOS sous Windows 9x, NT et Me | 2000-12-01T00:00:00.000000 | 2000-12-01T00:00:00.000000 |
| certa-2000-avi-078 | Vulnérabilité dans la Machine Virtuelle de Sun : JDK/JRE | 2000-11-30T00:00:00.000000 | 2000-11-30T00:00:00.000000 |
| certa-2000-avi-077 | Vulnérabilité dans le lecteur multimédia Windows | 2000-11-27T00:00:00.000000 | 2000-11-27T00:00:00.000000 |
| certa-2000-avi-076 | Vulnérabilité de Vixie Cron | 2000-11-23T00:00:00.000000 | 2000-11-23T00:00:00.000000 |
| certa-2000-avi-075 | Vulnérabilité du logiciel InPerson sous IRIX | 2000-11-22T00:00:00.000000 | 2000-11-22T00:00:00.000000 |
| certa-2000-avi-074 | Vulnérabilité sous Windows 2000 dans l'authentification NTLM | 2000-11-22T00:00:00.000000 | 2000-11-22T00:00:00.000000 |
| certa-2000-avi-073 | Vulnérabilité sous HP-UX du script auto_parms | 2000-11-21T00:00:00.000000 | 2000-11-21T00:00:00.000000 |
| certa-2000-avi-072 | Vulnérabilité de Microsoft Exchange 2000 | 2000-11-17T00:00:00.000000 | 2000-11-17T00:00:00.000000 |
| certa-2000-avi-071 | Multiples vulnérabilités de BIND | 2000-11-14T00:00:00.000000 | 2000-11-14T00:00:00.000000 |
| certa-2000-avi-070 | Vulnérabilité sous Microsoft Windows NT4.0 Terminal Server | 2000-11-09T00:00:00.000000 | 2000-11-09T00:00:00.000000 |
| certa-2000-avi-069 | Vulnérabilité sous HP UX (dtterm) | 2000-11-06T00:00:00.000000 | 2000-11-06T00:00:00.000000 |
| certa-2000-avi-068 | Vulnérabilité dans un contrôle ActiveX de Windows 2000 | 2000-11-03T00:00:00.000000 | 2000-11-03T00:00:00.000000 |
| certa-2000-avi-067 | Vulnérabilité de Netmon sous Windows NT server et Windows 2000 server | 2000-11-02T00:00:00.000000 | 2000-11-02T00:00:00.000000 |
| certa-2000-avi-066 | Vulnérabilité de Microsoft Exchange | 2000-11-02T00:00:00.000000 | 2000-11-02T00:00:00.000000 |
| certa-2000-avi-065 | Vulnérabilité dans la Machine Virtuelle Java de Microsoft | 2000-10-27T00:00:00.000000 | 2000-10-27T00:00:00.000000 |
| certa-2000-avi-064 | Vol de cookies sous HTTPS avec les serveurs Microsoft Internet Information Server | 2000-10-24T00:00:00.000000 | 2000-10-24T00:00:00.000000 |
| certa-2000-avi-063 | Vulnérabilités dans les composants de Microsoft Windows | 2000-10-19T00:00:00.000000 | 2000-10-19T00:00:00.000000 |
| certa-2000-avi-062 | Vulnérabilités dans lpspool et ftpd sous HP-UX | 2000-10-19T00:00:00.000000 | 2000-10-19T00:00:00.000000 |
| certa-2000-avi-061 | Vulnérabilité dans Internet Information Server sous Windows NT et 2000 | 2000-10-17T00:00:00.000000 | 2000-10-17T00:00:00.000000 |
| certa-2000-avi-060 | Vulnérabilité dans le cache d'authentification d'Internet Explorer | 2000-10-13T00:00:00.000000 | 2000-10-13T00:00:00.000000 |
| certa-2000-avi-059 | Vulnérabilité dans la machine virtuelle Java de Microsoft | 2000-10-13T00:00:00.000000 | 2000-10-13T00:00:00.000000 |
| certa-2000-avi-058 | Vulnérabilité dans IPX/SPX de Microsoft sous Windows 9x/ME | 2000-10-12T00:00:00.000000 | 2000-10-12T00:00:00.000000 |
| certa-2000-avi-057 | Vulnérabilité dans les protections de fichiers sous Windows 9x et Me | 2000-10-11T00:00:00.000000 | 2000-10-11T00:00:00.000000 |
| certa-2000-avi-056 | Vulnérabilité dans la fonction de « fusion-publipostage » sous Word 97 et 2000 | 2000-10-09T00:00:00.000000 | 2000-10-09T00:00:00.000000 |
| certa-2000-avi-055 | Vulnérabilités des LPC sous Windows 2000 et NT | 2000-10-04T00:00:00.000000 | 2000-10-04T00:00:00.000000 |