Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103995 | 2 (v4.0) | Lenient parsing of integers for response body and chun… |
Python Software Foundation |
CPython |
2026-10-27T19:58:52.521Z | 2026-10-28T00:33:14.944Z |
| cve-2026-116691 | MLflow CrewAI autologging records LLM provider API key… |
mlflow |
mlflow |
2026-10-27T19:56:22.083Z | 2026-11-03T12:09:45.326Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-11-03T12:08:37.621Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-11-02T19:41:38.553Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-11-02T19:40:48.630Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-11-03T12:07:27.484Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-11-02T19:40:02.808Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-11-03T12:06:37.143Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| cve-2026-118177 | N/A | Calendar discovery accepted local file and remote netw… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.083Z | 2026-10-27T18:27:49.964Z |
| cve-2026-118176 | N/A | Bypass of remote UNC path restriction in mailbox: URLs |
Mozilla |
Thunderbird |
2026-10-27T18:16:30.272Z | 2026-10-27T18:27:48.875Z |
| cve-2026-118175 | N/A | Content of other messages could be included when reply… |
Mozilla |
Thunderbird |
2026-10-27T18:16:29.537Z | 2026-10-27T18:27:47.611Z |
| cve-2026-118174 | N/A | Displaying a message could load an attacker-chosen URL… |
Mozilla |
Thunderbird |
2026-10-27T18:16:28.729Z | 2026-10-27T18:27:46.521Z |
| cve-2026-118173 | 6.1 (v4.0) | MISP Guard Incomplete Tag Validation Allows Non-Allowe… |
MISP |
misp-guard |
2026-10-27T18:11:51.815Z | 2026-10-27T18:11:51.815Z |
| cve-2026-115413 | 7.8 (v3.1) 7.3 (v4.0) | AWS API MCP Server OAuth Token Audience Validation Bypass |
AWS |
aws-api-mcp-server |
2026-10-27T18:10:28.758Z | 2026-10-27T18:10:28.758Z |
| cve-2026-118171 | N/A | CVE-2026-118171 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:05:18.037Z | 2026-10-27T18:05:18.037Z |
| cve-2026-118172 | N/A | CVE-2026-118172 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:04:13.270Z | 2026-10-27T18:04:13.270Z |
| cve-2026-118170 | N/A | CVE-2026-118170 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:02:55.025Z | 2026-10-27T18:02:55.025Z |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-116682 | FileBrowser Quantum: Symlink following escapes user sc… |
gtsteffaniak |
filebrowser |
2026-10-27T17:48:04.364Z | 2026-11-02T19:38:28.867Z | |
| cve-2026-117526 | reduxjs redux-devtools Remotedev Server evalAction cod… |
reduxjs |
redux-devtools |
2026-10-27T17:45:15.061Z | 2026-11-03T12:02:03.783Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2005-000706 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000705 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000695 | Ruby XMLRPC Server Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000601 | OpenSSL version rollback vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:04+09:00 |
| jvndb-2005-000538 | Ruby vulnerability allowing to bypass safe level 4 as a sandbox | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000537 | Webmin and Usermin authentication bypass vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000530 | Vulnerability in multiple web browsers allowing request spoofing attacks | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000396 | Ruby XMLRPC Arbitrary Command Execution Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000343 | DeleGate DNS Message Decompression Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000199 | Sylpheed Filename Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000183 | Apache Tomcat denial of service vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000163 | Sylpheed Email Header Buffer Overflow Vulnerability with non-ASCII Characters | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000594 | DNS cache servers resource consumption by TCP SYN_SENT states | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000593 | LDAP server update function vulnerable to buffer overflow | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000592 | Shuriken Pro3 S/MIME signature verification does not verify the certificate authenticity | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000591 | Shuriken Pro3 S/MIME signature verification does not verify the From address | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000590 | Becky! Internet Mail vulnerability in S/MIME signature verification | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000589 | Toshiba HDD & DVD video recorders can be accessed without authentication | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000588 | SSL-VPN products vulnerable to cookie theft | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000587 | desknet's buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000586 | Virus Buster Corporate Edition vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000554 | Namazu cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000511 | DeleGate Multiple Buffer Overflow Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000473 | Ruby cgi.rb Denial of Service Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000323 | Ruby CGI Session Management Insecure File Permission Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000231 | KAME Racoon eay_check_x509cert Improper Certificate Verification Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000197 | LHA extrace_one Vuffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000196 | LHA Buffer Overflow Vulnerability with lack of Path Length Validation | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000195 | LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2004-000179 | DeleGate SSLway Filter Buffer Overflow Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0367 | Vulnérabilité dans SolarWinds Serv-U | 2024-05-06T00:00:00.000000 | 2024-05-06T00:00:00.000000 |
| certfr-2024-avi-0366 | Multiples vulnérabilités dans les produits IBM | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0365 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0364 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0363 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0362 | Multiples vulnérabilités dans le greffon Media Streaming de Qnap | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0361 | Multiples vulnérabilités dans PostgreSQL pgAdmin | 2024-05-03T00:00:00.000000 | 2024-05-03T00:00:00.000000 |
| certfr-2024-avi-0360 | Multiples vulnérabilités dans SonicWall GMS | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0359 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0358 | Multiples vulnérabilités dans Google Chrome | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0357 | Multiples vulnérabilités dans Cisco IP Phone | 2024-05-02T00:00:00.000000 | 2024-05-02T00:00:00.000000 |
| certfr-2024-avi-0356 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2024-04-30T00:00:00.000000 | 2024-04-30T00:00:00.000000 |
| certfr-2024-avi-0355 | Multiples vulnérabilités dans Microsoft Edge | 2024-04-29T00:00:00.000000 | 2024-04-29T00:00:00.000000 |
| certfr-2024-avi-0354 | Multiples vulnérabilités dans les produits Qnap | 2024-04-29T00:00:00.000000 | 2024-04-29T00:00:00.000000 |
| certfr-2024-avi-0353 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0352 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0351 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0350 | Multiples vulnérabilités dans les produits IBM | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0349 | Vulnérabilité dans les produits Belden | 2024-04-26T00:00:00.000000 | 2024-04-26T00:00:00.000000 |
| certfr-2024-avi-0348 | Vulnérabilité dans les produits MongoDB | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0347 | Multiples vulnérabilités dans les produits Cisco | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0346 | Multiples vulnérabilités dans GitLab | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0345 | Vulnérabilité dans les produits Palo Alto Networks | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0344 | Multiples vulnérabilités dans les produits Mitel | 2024-04-25T00:00:00.000000 | 2024-04-25T00:00:00.000000 |
| certfr-2024-avi-0343 | Multiples vulnérabilités dans Google Chrome | 2024-04-24T00:00:00.000000 | 2024-04-24T00:00:00.000000 |
| certfr-2024-avi-0342 | Multiples vulnérabilités dans NagiosXI | 2024-04-24T00:00:00.000000 | 2024-04-24T00:00:00.000000 |
| certfr-2024-avi-0341 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0340 | Multiples vulnérabilités dans les produits Moxa | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0339 | Vulnérabilité dans Microsoft Edge | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |
| certfr-2024-avi-0338 | Vulnérabilité dans Siemens RUGGEDCOM APE1808 | 2024-04-22T00:00:00.000000 | 2024-04-22T00:00:00.000000 |