Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105865 | Payload: Incomplete validation during the upload file … |
payloadcms |
payload |
2026-10-06T16:45:09.932Z | 2026-10-06T17:11:18.423Z | |
| cve-2026-105864 | Payload: Cross-tenant create in @payloadcms/plugin-mul… |
payloadcms |
payload |
2026-10-06T16:42:27.942Z | 2026-10-06T17:25:18.758Z | |
| cve-2026-105863 | Payload authentication token field handling issue |
payloadcms |
payload |
2026-10-06T16:39:44.912Z | 2026-10-09T01:15:33.512Z | |
| cve-2026-105862 | Payload: Bypassed sanitization of user uploaded SVGs |
payloadcms |
payload |
2026-10-06T16:37:59.487Z | 2026-10-06T17:24:09.513Z | |
| cve-2026-105861 | Payload external upload trust validation issue |
payloadcms |
payload |
2026-10-06T16:34:41.622Z | 2026-10-06T17:39:16.866Z | |
| cve-2026-105860 | Payload: Tenant authorization bypass in Multi-Tenant Plugin |
payloadcms |
payload |
2026-10-06T16:33:20.213Z | 2026-10-06T17:15:03.137Z | |
| cve-2026-106219 | 6.5 (v3.1) | In JetBrains TeamCity before 2026.2.1 missing val… |
JetBrains |
TeamCity |
2026-10-06T16:33:06.849Z | 2026-10-06T17:17:34.067Z |
| cve-2026-106218 | 8.8 (v3.1) | In JetBrains TeamCity before 2026.1.3 2025.11.7 k… |
JetBrains |
TeamCity |
2026-10-06T16:33:06.018Z | 2026-10-07T03:55:22.189Z |
| cve-2026-105859 | Payload: Unauthorized update to collection documents |
payloadcms |
payload |
2026-10-06T16:31:52.275Z | 2026-10-06T17:37:22.423Z | |
| cve-2026-105858 | Payload: Remote Code Execution through first-register |
payloadcms |
payload |
2026-10-06T16:29:52.420Z | 2026-10-09T01:14:15.431Z | |
| cve-2026-105857 | Payload: RCE in Payload Form Builder |
payloadcms |
payload |
2026-10-06T16:26:54.885Z | 2026-10-06T17:23:32.964Z | |
| cve-2026-105856 | Payload: SQL injection in SQLite/Postgres |
payloadcms |
payload |
2026-10-06T16:23:58.643Z | 2026-10-06T17:39:22.911Z | |
| cve-2026-105855 | Payload: Field-level password update restrictions were… |
payloadcms |
payload |
2026-10-06T16:18:53.672Z | 2026-10-06T17:18:56.091Z | |
| cve-2026-105854 | Payload: ReDoS in Multipart Content-Type Validation |
payloadcms |
payload |
2026-10-06T16:17:30.893Z | 2026-10-06T17:30:01.567Z | |
| cve-2026-105853 | Payload: Token refresh and password reset responses ma… |
payloadcms |
payload |
2026-10-06T16:16:14.512Z | 2026-10-09T01:12:54.335Z | |
| cve-2026-104070 | 9.3 (v4.0) 9.8 (v3.1) | SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE |
SPIP |
SPIP Crayons Plugin |
2026-10-06T16:16:07.042Z | 2026-10-09T01:11:15.811Z |
| cve-2026-105852 | Payload relationship-query authorization bypass |
payloadcms |
payload |
2026-10-06T16:15:03.763Z | 2026-10-06T17:22:49.268Z | |
| cve-2026-105851 | Payload: Field access control bypass on auth collections |
payloadcms |
payload |
2026-10-06T16:13:11.367Z | 2026-10-06T17:39:29.558Z | |
| cve-2026-105850 | Payload: Order confirmation validation issue in Payloa… |
payloadcms |
payload |
2026-10-06T16:11:54.196Z | 2026-10-06T16:28:23.101Z | |
| cve-2026-105849 | Payload: API key disclosure through ordinary document reads |
payloadcms |
payload |
2026-10-06T16:09:49.402Z | 2026-10-06T17:26:23.270Z | |
| cve-2026-104850 | MCP TypeScript SDK: OAuth client could send credential… |
modelcontextprotocol |
typescript-sdk |
2026-10-06T16:08:21.514Z | 2026-10-06T16:28:53.097Z | |
| cve-2026-105848 | Payload: Insufficient Access Control in Stripe REST Proxy |
payloadcms |
payload |
2026-10-06T16:07:53.896Z | 2026-10-09T01:10:22.727Z | |
| cve-2026-105847 | Payload: Polymorphic join queries could disclose hidde… |
payloadcms |
payload |
2026-10-06T16:02:55.117Z | 2026-10-06T17:22:16.944Z | |
| cve-2026-105846 | Payload: Untrusted redirect URL parameter exploit |
payloadcms |
payload |
2026-10-06T16:01:30.370Z | 2026-10-06T17:39:36.818Z | |
| cve-2026-105957 | SourceCodester Performance Indicator System view_produ… |
SourceCodester |
Performance Indicator System |
2026-10-06T16:00:18.510Z | 2026-10-09T01:09:16.584Z | |
| cve-2026-105845 | Payload: SQL Injection in SQLite and Postgres |
payloadcms |
payload |
2026-10-06T15:58:51.232Z | 2026-10-06T17:27:31.326Z | |
| cve-2026-105844 | Payload: Prototype pollution in Payload Import Export plugin |
payloadcms |
payload |
2026-10-06T15:57:05.371Z | 2026-10-09T01:08:17.955Z | |
| cve-2026-105806 | Payload: Improper access control for MCP API keys |
payloadcms |
payload |
2026-10-06T15:35:17.028Z | 2026-10-06T17:39:44.197Z | |
| cve-2026-26287 | External Secrets Operator: label enforcement bypass in… |
external-secrets |
external-secrets |
2026-10-06T15:31:56.088Z | 2026-10-06T17:21:44.292Z | |
| cve-2026-105950 | getformwork URI Sanitizer DomSanitizer.php sanitizeNod… |
getformwork |
formwork |
2026-10-06T15:30:18.854Z | 2026-10-06T17:20:55.264Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2000-avi-036 | Cheval de Troie : Troj/qaz | 2000-08-29T00:00:00.000000 | 2000-08-29T00:00:00.000000 |
| certa-2000-avi-035 | Vulnérabilité dans Microsoft Information Server | 2000-08-28T00:00:00.000000 | 2000-08-28T00:00:00.000000 |
| certa-2000-avi-034 | Faille dans le serveur Internet Java de SUN | 2000-08-23T00:00:00.000000 | 2000-08-23T00:00:00.000000 |
| certa-2000-avi-033 | Vulnérabilité dans GNOME Updater | 2000-08-22T00:00:00.000000 | 2000-08-22T00:00:00.000000 |
| certa-2000-avi-032 | Vulnérabilité dans la machine virtuelle Java de Microsoft | 2000-08-22T00:00:00.000000 | 2000-08-22T00:00:00.000000 |
| certa-2000-avi-031 | Faille dans la commande newgrp sous HP-UX | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-030 | Vulnérabilité sous Internet Information Server 5.0 | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-029 | Faille dans le démon telnetd sous IRIX de SGI | 2000-08-17T00:00:00.000000 | 2000-08-17T00:00:00.000000 |
| certa-2000-avi-028 | Vulnérabilité dans les permissions de fichiers sous IIS version 4.0 et 5.0 | 2000-08-16T00:00:00.000000 | 2000-08-16T00:00:00.000000 |
| certa-2000-avi-027 | Débordement de mémoire dans les documents HTML d'Office 2000 | 2000-08-16T00:00:00.000000 | 2000-08-16T00:00:00.000000 |
| certa-2000-avi-026 | Vulnérabilité de Netscape avec Java | 2000-08-09T00:00:00.000000 | 2000-08-09T00:00:00.000000 |
| certa-2000-avi-025 | Vulnérabilité de Windows 9x avec le protocole IPX | 2000-08-08T00:00:00.000000 | 2000-08-08T00:00:00.000000 |
| certa-2000-avi-024 | Vulnérabilités dans les programmes et librairies d'impression sous Solaris | 2000-08-08T00:00:00.000000 | 2000-08-08T00:00:00.000000 |
| certa-2000-avi-023 | Vulnérabilité dans le « Service Control Manager » de Windows 2000 | 2000-08-07T00:00:00.000000 | 2000-08-07T00:00:00.000000 |
| certa-2000-avi-022 | Vulnérabilités sous Firewall-1 | 2000-08-03T00:00:00.000000 | 2000-08-03T00:00:00.000000 |
| certa-2000-avi-021 | Vulnérabilité dans le protocole NBNS sous Windows NT et 2000 | 2000-07-28T00:00:00.000000 | 2000-07-28T00:00:00.000000 |
| certa-2000-avi-020 | Vulnérabilité sous Adobe Acrobat | 2000-07-27T00:00:00.000000 | 2000-07-27T00:00:00.000000 |
| certa-2000-avi-019 | Virus sous Autocad2000 | 2000-07-27T00:00:00.000000 | 2000-07-27T00:00:00.000000 |
| certa-2000-avi-018 | Vulnérabilité sous Netscape 4.73 et antérieures | 2000-07-27T00:00:00.000000 | 2000-07-27T00:00:00.000000 |
| certa-2000-avi-017 | Vulnérabilité du service Telnet sous Windows 2000 | 2000-07-25T00:00:00.000000 | 2000-07-25T00:00:00.000000 |
| certa-2000-avi-016 | Vulnérabilités dans Internet Explorer 4.01, Office 2000 et PowerPoint 97 | 2000-07-19T00:00:00.000000 | 2000-07-19T00:00:00.000000 |
| certa-2000-avi-015 | Vulnérabilité dans l'en-tête des mèls sous Outlook | 2000-07-19T00:00:00.000000 | 2000-07-19T00:00:00.000000 |
| certa-2000-avi-014 | Vulnérabilité dans l'utilitaire makewhatis sous Unix | 2000-07-13T00:00:00.000000 | 2000-07-13T00:00:00.000000 |
| certa-2000-avi-013 | Vulnérabilité dans Microsoft SQL Serveur | 2000-07-11T00:00:00.000000 | 2000-07-11T00:00:00.000000 |
| certa-2000-avi-012 | Vulnérabilité dans « Workshop » cvconnect sous IRIX | 2000-06-29T00:00:00.000000 | 2000-06-29T00:00:00.000000 |
| certa-2000-avi-011 | Problèmes de privilèges dans les extensions de FrontPage | 2000-06-27T00:00:00.000000 | 2000-06-27T00:00:00.000000 |
| certa-2000-avi-010 | Débordement de pile dans le programme <TT>splitVT</TT> | 2000-06-20T00:00:00.000000 | 2000-06-20T00:00:00.000000 |
| certa-2000-avi-009 | Exécution de fichiers locaux grâce aux fichiers d'aides de Microsoft Windows | 2000-06-20T00:00:00.000000 | 2000-06-20T00:00:00.000000 |
| certa-2000-avi-008 | Vulnérabilité sous Windows 2000 | 2000-06-19T00:00:00.000000 | 2000-06-19T00:00:00.000000 |
| certa-2000-avi-007 | Vulnérabilités sur le serveur FTP utilisant Kerberos 5 | 2000-06-15T00:00:00.000000 | 2000-06-15T00:00:00.000000 |