Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2015-20128 | 8.8 (v4.0) 8.2 (v3.1) | FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx |
FooSun |
DotNetCMS |
2026-10-20T20:31:26.220Z | 2026-10-23T15:21:40.984Z |
| cve-2016-20104 | 8.7 (v4.0) 7.5 (v3.1) | EyeLock nano NXT 3.05.1193 Path Traversal via logdownl… |
EyeLock |
nano NXT |
2026-10-20T20:31:29.589Z | 2026-10-23T15:15:18.506Z |
| cve-2026-113788 | Lagoon core ssh service vulnerable to remote code execution |
uselagoon |
lagoon |
2026-10-21T15:31:24.574Z | 2026-10-23T15:13:02.016Z | |
| cve-2026-113792 | pypdf: Possible infinite loop in PdfWriter.find_outline_item |
py-pdf |
pypdf |
2026-10-21T15:55:55.976Z | 2026-10-23T15:12:47.568Z | |
| cve-2026-113796 | Electron: SameSite cookie restrictions are not applied… |
electron |
electron |
2026-10-21T16:04:42.688Z | 2026-10-23T15:12:14.165Z | |
| cve-2026-113800 | Electron: HID and USB permission checks can be attribu… |
electron |
electron |
2026-10-21T16:16:45.808Z | 2026-10-23T15:12:01.887Z | |
| cve-2026-114124 | Electron: Off-screen rendering on macOS trusts GPU-sup… |
electron |
electron |
2026-10-21T17:03:26.765Z | 2026-10-23T15:11:35.835Z | |
| cve-2026-114128 | Astro: Reflected/Stored XSS via unescaped <script>/<st… |
withastro |
astro |
2026-10-21T17:32:28.466Z | 2026-10-23T15:11:02.457Z | |
| cve-2026-114132 | Nuxt: Server-side route rules (`redirect`, `headers`, … |
nuxt |
nuxt |
2026-10-21T17:50:11.250Z | 2026-10-23T15:10:37.684Z | |
| cve-2026-110744 | 7.2 (v3.1) | Multicluster-global-hub-operator-bundle: operator serv… |
Red Hat |
Multicluster Global Hub |
2026-10-21T17:52:40.314Z | 2026-10-23T15:10:10.054Z |
| cve-2026-114492 | 7 (v4.0) 6.5 (v3.1) | gin-vue-admin through 2.9.2 Path Traversal via removeP… |
flipped-aurora |
gin-vue-admin |
2026-10-21T17:54:16.906Z | 2026-10-23T15:09:41.469Z |
| cve-2026-114361 | HarnessRouter Identity Mode app.py improper authorization |
n/a |
HarnessRouter |
2026-10-21T19:00:18.743Z | 2026-10-23T15:09:14.205Z | |
| cve-2026-114137 | Django REST framework: TokenProxy.delete() reports suc… |
encode |
django-rest-framework |
2026-10-21T20:06:57.790Z | 2026-10-23T15:08:55.473Z | |
| cve-2026-114145 | GitPython validates a submodule's ".git" path only aft… |
gitpython-developers |
GitPython |
2026-10-21T20:35:06.548Z | 2026-10-23T15:08:48.132Z | |
| cve-2026-76287 | 5.4 (v3.1) | Authorization Bypass in the Data Management REST API i… |
Splunk |
Splunk Enterprise |
2026-10-21T22:51:49.096Z | 2026-10-23T15:08:38.358Z |
| cve-2026-76303 | 5.7 (v3.1) | Stored Cross-Site Scripting (XSS) through App Document… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:04.809Z | 2026-10-23T15:08:29.705Z |
| cve-2026-76307 | 7.2 (v3.1) | Sensitive Information Disclosure through REST API Quer… |
Splunk |
Splunk SOAR |
2026-10-21T22:52:10.654Z | 2026-10-23T15:08:20.736Z |
| cve-2026-114634 | 5.3 (v4.0) 4.3 (v3.1) | WWBN AVideo before 29.4.0 Blind SSRF via getHeaderCont… |
WWBN |
AVideo |
2026-10-22T01:43:35.830Z | 2026-10-23T15:08:11.068Z |
| cve-2026-114638 | 7 (v4.0) 8.7 (v3.1) | Traefik v3.7.0 before v3.7.14 Client CA Mix-up via aut… |
traefik |
traefik |
2026-10-22T01:43:38.571Z | 2026-10-23T15:08:01.405Z |
| cve-2026-114642 | 7 (v4.0) 8.7 (v3.1) | Traefik before 2.11.58 and 3.7.14 TLS Config Bypass vi… |
traefik |
traefik |
2026-10-22T01:43:41.355Z | 2026-10-23T15:07:43.191Z |
| cve-2025-60497 | N/A | A segmentation violation in the GetESD function (… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:33.099Z |
| cve-2025-60492 | N/A | A stack overflow in the gf_bifs_dec_node function… |
n/a |
n/a |
2026-10-21T00:00:00.000Z | 2026-10-23T15:07:30.908Z |
| cve-2026-114659 | 7.1 (v4.0) 6.5 (v3.1) | Grav Flex Objects 1.4.0 before 1.4.17 Authorization By… |
getgrav |
grav-plugin-flex-objects |
2026-10-22T01:43:44.133Z | 2026-10-23T15:07:07.168Z |
| cve-2026-114663 | 8.6 (v4.0) 8.4 (v3.1) | Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Import… |
vyperlang |
vyper |
2026-10-22T01:43:46.942Z | 2026-10-23T15:06:28.237Z |
| cve-2026-115321 | 5.3 (v4.0) 4.3 (v3.1) | Bytebase before 3.16.0 Authorization Bypass via Update… |
bytebase |
bytebase |
2026-10-22T10:57:40.982Z | 2026-10-23T15:05:29.678Z |
| cve-2026-115325 | 8.7 (v4.0) 8.3 (v3.1) | Netmaker through 1.7.0 Authorization Bypass via update… |
gravitl |
netmaker |
2026-10-22T10:57:43.846Z | 2026-10-23T15:05:01.043Z |
| cve-2026-115329 | 6 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Cross-Organization IDOR via Subsc… |
uselotus |
lotus |
2026-10-22T10:57:46.708Z | 2026-10-23T15:04:20.467Z |
| cve-2026-115333 | 8.2 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Improper Authentication via Event… |
uselotus |
lotus |
2026-10-22T10:57:49.499Z | 2026-10-23T15:03:54.486Z |
| cve-2026-114515 | OCO-Server: Self-Service Portal uninstall-job authoriz… |
schorschii |
OCO-Server |
2026-10-22T14:58:02.272Z | 2026-10-23T15:03:45.075Z | |
| cve-2026-114607 | better-auth: OAuth state can be used as a Magic Link t… |
better-auth |
better-auth |
2026-10-22T16:47:27.480Z | 2026-10-23T15:02:40.820Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2000-avi-054 | Vulnérabilité dans le garde barrière PIX de CISCO | 2000-09-29T00:00:00.000000 | 2000-09-29T00:00:00.000000 |
| certa-2000-avi-053 | Vulnérabilité dans HP OpenView | 2000-09-28T00:00:00.000000 | 2000-09-28T00:00:00.000000 |
| certa-2000-avi-052 | Vulnérabilité sous Windows liée à l'ouverture d'un Document Office | 2000-09-25T00:00:00.000000 | 2000-09-25T00:00:00.000000 |
| certa-2000-avi-051 | Vulnérabilités dans CISCOSecure sous Windows NT Server | 2000-09-22T00:00:00.000000 | 2000-09-22T00:00:00.000000 |
| certa-2000-avi-050 | Vulnérabilité dans le démon klogd sous Linux | 2000-09-20T00:00:00.000000 | 2000-09-20T00:00:00.000000 |
| certa-2000-avi-049 | Virus FunnyStory | 2000-09-19T00:00:00.000000 | 2000-09-19T00:00:00.000000 |
| certa-2000-avi-048 | Vulnérabilité du client telnet sous Windows 2000 | 2000-09-15T00:00:00.000000 | 2000-09-15T00:00:00.000000 |
| certa-2000-avi-047 | Vulnérabilité de RPC sous Windows2000 | 2000-09-12T00:00:00.000000 | 2000-09-12T00:00:00.000000 |
| certa-2000-avi-046 | vulnérabilité du service imagerie sous Windows 2000 | 2000-09-11T00:00:00.000000 | 2000-09-11T00:00:00.000000 |
| certa-2000-avi-045 | Note concernant les correctifs ou mises à jour | 2000-09-07T00:00:00.000000 | 2000-09-07T00:00:00.000000 |
| certa-2000-avi-044 | Vulnérabilité de Windows NT4.0 affectant Internet Information Server | 2000-09-07T00:00:00.000000 | 2000-09-07T00:00:00.000000 |
| certa-2000-avi-043 | Vulnérabilité dans mgetty sous Unix | 2000-09-04T00:00:00.000000 | 2000-09-04T00:00:00.000000 |
| certa-2000-avi-042 | Vulnérabilité dans les extensions de fichiers sous Windows | 2000-09-04T00:00:00.000000 | 2000-09-04T00:00:00.000000 |
| certa-2000-avi-041 | Ver sous Windows : W32/Apology | 2000-08-31T00:00:00.000000 | 2000-08-31T00:00:00.000000 |
| certa-2000-avi-040 | Vulnérabilité sous PGP 5.5.x à 6.5.3 | 2000-08-31T00:00:00.000000 | 2000-08-31T00:00:00.000000 |
| certa-2000-avi-039 | vulnérabilités de RPC.statd sous Unix | 2000-08-30T00:00:00.000000 | 2000-08-30T00:00:00.000000 |
| certa-2000-avi-038 | Vulnérabilité sous ISS REAL SECURE | 2000-08-30T00:00:00.000000 | 2000-08-30T00:00:00.000000 |
| certa-2000-avi-037 | Vulnérabilité sous Windows 2000 dans la politique de sécurité locale | 2000-08-29T00:00:00.000000 | 2000-08-29T00:00:00.000000 |
| certa-2000-avi-036 | Cheval de Troie : Troj/qaz | 2000-08-29T00:00:00.000000 | 2000-08-29T00:00:00.000000 |
| certa-2000-avi-035 | Vulnérabilité dans Microsoft Information Server | 2000-08-28T00:00:00.000000 | 2000-08-28T00:00:00.000000 |
| certa-2000-avi-034 | Faille dans le serveur Internet Java de SUN | 2000-08-23T00:00:00.000000 | 2000-08-23T00:00:00.000000 |
| certa-2000-avi-033 | Vulnérabilité dans GNOME Updater | 2000-08-22T00:00:00.000000 | 2000-08-22T00:00:00.000000 |
| certa-2000-avi-032 | Vulnérabilité dans la machine virtuelle Java de Microsoft | 2000-08-22T00:00:00.000000 | 2000-08-22T00:00:00.000000 |
| certa-2000-avi-031 | Faille dans la commande newgrp sous HP-UX | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-030 | Vulnérabilité sous Internet Information Server 5.0 | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-029 | Faille dans le démon telnetd sous IRIX de SGI | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-028 | Vulnérabilité dans les permissions de fichiers sous IIS version 4.0 et 5.0 | 2000-08-16T00:00:00.000000 | 2000-08-16T00:00:00.000000 |
| certa-2000-avi-027 | Débordement de mémoire dans les documents HTML d'Office 2000 | 2000-08-16T00:00:00.000000 | 2000-08-16T00:00:00.000000 |
| certa-2000-avi-026 | Vulnérabilité de Netscape avec Java | 2000-08-09T00:00:00.000000 | 2000-08-09T00:00:00.000000 |
| certa-2000-avi-025 | Vulnérabilité de Windows 9x avec le protocole IPX | 2000-08-08T00:00:00.000000 | 2000-08-08T00:00:00.000000 |