Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Cross-site Scripting (XSS)CVE-2026-116206
Affects yeswiki/yeswiki | Versions >=4.2.0, <4.7.0
Has fix
ComposerPublished 26 Oct 2026
- M
Cross-site Scripting (XSS)CVE-2026-116203
Affects yeswiki/yeswiki | Versions <4.7.0
Has fix
ComposerPublished 26 Oct 2026
- H
SQL InjectionCVE-2026-116207
Affects yeswiki/yeswiki | Versions >=4.6.0, <4.7.0
Has fix
ComposerPublished 26 Oct 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-116205
Affects yeswiki/yeswiki | Versions <4.7.0
Has fix
ComposerPublished 26 Oct 2026
- M
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-112361
Affects dolibarr/dolibarr | Versions >=0.0.0
Has fix
ComposerPublished 26 Oct 2026
Affects netweavex | Versions [1.1.0][1.1.1][1.1.2]
Has fix
pipPublished 26 Oct 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-108395
Affects io.modelcontextprotocol.sdk:mcp-core | Versions [0.18.0, 0.18.4)[1.0.0, 1.1.4)[2.0.0,2.0.1)
Has fix
MavenPublished 26 Oct 2026
- H
Memory Allocation with Excessive Size ValueCVE-2026-63772
Affects github.com/apache/thrift/lib/go/thrift | Versions <0.25.0
Has fix
GoPublished 26 Oct 2026
- M
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-73179
Affects org.apache.cxf:cxf-rt-rs-security-oauth2 | Versions [,3.6.13)[4.1.0,4.1.9)[4.2.0,4.2.4)
Has fix
MavenPublished 26 Oct 2026
- H
Acceptance of Extraneous Untrusted Data With Trusted DataCVE-2026-100227
Affects org.apache.cxf:cxf-rt-rs-security-xml | Versions [,3.6.13)[4.0.0,4.1.9)[4.2.0,4.2.4)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin-charts-flow | Versions [23.0.0 ,23.6.14)[24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin-core | Versions [24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects com.vaadin:vaadin | Versions [23.0.0 ,23.6.14)[24.0.0 ,24.9.21)[24.10.0 ,24.10.10)[25.0.0 ,25.1.12)[25.2.0 ,25.2.7)
Has fix
MavenPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects @vaadin/component-base | Versions >=24.7.0 <24.9.17>=24.10.0 <24.10.4>=25.0.0 <25.1.11>=25.2.0 <25.2.9
Has fix
npmPublished 26 Oct 2026
- M
Prototype PollutionCVE-2026-91860
Affects @vaadin/charts | Versions >=23.0.0 <23.6.5>=24.0.0 <24.9.18>=24.10.0 <24.10.5>=25.0.0 <25.1.12>=25.2.0 <25.2.9
Has fix
npmPublished 26 Oct 2026
- H
Insertion of Sensitive Information Into Sent DataCVE-2026-107714
Affects mechanize | Versions <2.14.1
Has fix
RubyGemsPublished 26 Oct 2026
- M
Insertion of Sensitive Information Into Sent DataCVE-2026-107399
Affects mechanize | Versions <2.14.1
Has fix
RubyGemsPublished 26 Oct 2026
- M
Insertion of Sensitive Information Into Sent DataCVE-2026-107715
Affects mechanize | Versions <2.14.1
Has fix
RubyGemsPublished 26 Oct 2026
- M
NULL Pointer DereferenceCVE-2026-111373
Affects freerdp/freerdp | Versions [,3.32.0)
Has fix
Unmanaged (C/C++)Published 26 Oct 2026
- H
Integer Overflow or WraparoundCVE-2026-95616
Affects org.apache.wss4j:wss4j-ws-security-common | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- L
Replay AttackCVE-2026-92899
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- L
Replay AttackCVE-2026-92899
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- M
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- H
Improperly Implemented Security Check for StandardCVE-2026-92121
Affects org.apache.wss4j:wss4j-ws-security-stax | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
- H
Authentication Bypass by Assumed-Immutable DataCVE-2026-88920
Affects org.apache.wss4j:wss4j-ws-security-dom | Versions [,2.4.4)[3.0.0,3.0.6)[4.0.0,4.0.2)
Has fix
MavenPublished 26 Oct 2026
Affects zagents-framework | Versions [99.25.30.10b5][6.25.30.10b5]
Has fix
pipPublished 26 Oct 2026
Affects changes-lxc-wrapper | Versions [0.1.0][0.0.0]
Has fix
pipPublished 26 Oct 2026