Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113877 | N/A | HTTP::Headers::ActionPack versions before 0.10 for Per… |
|
|
2026-10-23T20:07:20.677Z | 2026-11-02T15:59:52.574Z |
| cve-2026-115797 | Tenda F6 Web Management cleartext transmission |
Tenda |
F6 |
2026-10-23T20:00:16.370Z | 2026-10-29T14:19:14.179Z | |
| cve-2026-79982 | 8.8 (v3.1) | Out-of-bounds write in the USB Bluetooth HCI transport… |
zephyrproject |
zephyr |
2026-10-23T19:56:19.432Z | 2026-11-04T05:01:26.698Z |
| cve-2026-79981 | 6.5 (v3.1) | DNS resolver reuses a single UDP source port for all q… |
zephyrproject |
zephyr |
2026-10-23T19:56:18.319Z | 2026-11-02T13:57:40.720Z |
| cve-2026-79980 | 5.6 (v3.1) | Predictable and reused DHCPv4 transaction identifier a… |
zephyrproject |
zephyr |
2026-10-23T19:56:17.213Z | 2026-11-02T13:55:59.073Z |
| cve-2026-79979 | 7.8 (v3.1) | Stale TLB entries after demand-paging page-out let arm… |
zephyrproject |
zephyr |
2026-10-23T19:56:16.111Z | 2026-11-02T13:54:45.589Z |
| cve-2026-79978 | 3.6 (v3.1) | Out-of-bounds write in the ADXL345 sensor driver RTIO … |
zephyrproject |
zephyr |
2026-10-23T19:56:14.995Z | 2026-11-04T05:01:28.120Z |
| cve-2026-79977 | 8.2 (v3.1) | WireGuard peer endpoint learned from unauthenticated t… |
zephyrproject |
zephyr |
2026-10-23T19:56:13.873Z | 2026-11-04T05:01:25.272Z |
| cve-2026-19741 | 7.5 (v3.1) | OpenThread joiner autostart uses a publicly documented… |
zephyrproject |
zephyr |
2026-10-23T19:56:12.805Z | 2026-11-04T05:01:23.860Z |
| cve-2026-115796 | Tenda F6 Web Management cross-site request forgery |
Tenda |
F6 |
2026-10-23T19:45:19.860Z | 2026-10-29T18:12:23.630Z | |
| cve-2026-115586 | virtualenv: Bash activator leaves the --prompt value u… |
pypa |
virtualenv |
2026-10-23T19:34:46.391Z | 2026-10-23T20:55:42.764Z | |
| cve-2026-115585 | pypdf: Possible long runtimes for repeated malformed c… |
py-pdf |
pypdf |
2026-10-23T19:31:52.598Z | 2026-10-30T15:56:32.681Z | |
| cve-2026-115580 | pypdf: Possible long runtimes for large xref table hea… |
py-pdf |
pypdf |
2026-10-23T19:29:49.845Z | 2026-10-29T18:01:23.279Z | |
| cve-2026-115572 | pypdf: Possible long runtimes for repeated references … |
py-pdf |
pypdf |
2026-10-23T19:24:51.055Z | 2026-10-29T14:18:40.569Z | |
| cve-2026-115845 | 6.4 (v3.1) 5.3 (v4.0) | Incomplete validation in the run_script Python sandbox… |
AWS |
AWS MCP Server |
2026-10-23T19:04:44.790Z | 2026-11-02T13:46:34.164Z |
| cve-2026-91093 | 8.5 (v4.0) | HP One Agent Software – Security Update |
HP Inc. |
HP One Agent Software |
2026-10-23T18:33:58.401Z | 2026-10-29T10:45:48.007Z |
| cve-2026-112342 | 7.1 (v4.0) 7.1 (v3.1) | Tandoor Recipes < 2.7.0 Cross-Space Permission Cache P… |
Tandoor Recipes |
Tandoor Recipes |
2026-10-23T18:15:16.426Z | 2026-10-27T10:14:04.889Z |
| cve-2026-115570 | Electron: Mitigation for compromised eMudhra intermedi… |
electron |
electron |
2026-10-23T18:13:53.961Z | 2026-10-23T20:56:26.712Z | |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-115863 | 7.6 (v3.1) | ConnMan through 2.0 has a stack-based buffer over… |
ConnMan |
ConnMan |
2026-10-23T17:35:18.517Z | 2026-11-02T16:52:00.300Z |
| cve-2026-115813 | 5.8 (v3.1) 6.9 (v4.0) | Server-side request forgery in the model download path… |
AWS |
multi-model-server |
2026-10-23T17:35:14.102Z | 2026-11-02T13:39:42.306Z |
| cve-2026-115812 | 9.8 (v3.1) 9.3 (v4.0) | Relative path traversal during model archive extractio… |
AWS |
multi-model-server |
2026-10-23T17:33:53.542Z | 2026-11-02T13:36:07.033Z |
| cve-2026-115567 | Tokio: Race condition in `tokio::time::Interval` |
tokio-rs |
tokio |
2026-10-23T17:13:16.161Z | 2026-10-29T17:59:47.636Z | |
| cve-2026-110975 | 7.4 (v3.1) | Autotune: kruize/autotune: kruize/autotune: datasource… |
|
|
2026-10-23T17:10:46.396Z | 2026-11-02T08:11:23.512Z |
| cve-2026-106069 | A flaw in Node.js TLS hostname verification can c… |
nodejs |
node |
2026-10-23T16:15:05.850Z | 2026-11-02T13:31:52.012Z | |
| cve-2026-105481 | A flaw in Node.js HTTP Agent connection reuse can… |
nodejs |
node |
2026-10-23T16:15:05.837Z | 2026-11-02T15:54:45.159Z | |
| cve-2026-105482 | A flaw in Node.js DNS resolution allows hostnames… |
nodejs |
node |
2026-10-23T16:15:05.831Z | 2026-11-02T15:51:54.058Z | |
| cve-2026-106074 | A flaw in Node.js `crypto` causes the internal en… |
nodejs |
node |
2026-10-23T16:15:05.829Z | 2026-11-02T15:48:44.599Z | |
| cve-2026-106071 | A flaw in Node.js Permission Model filesystem enf… |
nodejs |
node |
2026-10-23T16:15:05.791Z | 2026-11-02T15:40:27.184Z | |
| cve-2026-106072 | A flaw in Node.js TLS hostname verification allow… |
nodejs |
node |
2026-10-23T16:15:05.783Z | 2026-11-02T15:39:59.537Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-495 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-494 | Multiples vulnérabilités dans les produits IBM | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-493 | Vulnérabilité dans VMware Tools | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-492 | Vulnérabilité dans le noyau Linux de Red Hat | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-491 | Multiples vulnérabilités dans Google Chrome OS | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-490 | Vulnérabilité dans le noyau Linux de SUSE | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-489 | Multiples vulnérabilités dans IBM Spectrum Scale | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-488 | Multiples vulnérabilités dans les produits F-Secure | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-487 | Multiples vulnérabilités dans les produits IBM | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-486 | Vulnérabilité dans le noyau Linux de SUSE | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-485 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-484 | Multiples vulnérabilités dans Mozilla Firefox et Firefox ESR | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-483 | Multiples vulnérabilités dans les produits Nextcloud | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-482 | Vulnérabilité dans Oracle E-Business Suite | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-481 | Multiples vulnérabilités dans les produits IBM | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-480 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-479 | Vulnérabilité dans Grafana Enterprise | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-478 | Vulnérabilité dans le noyau Linux de Red Hat | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-477 | Vulnérabilité dans IBM PowerVC | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-476 | Multiples vulnérabilités dans les produits VMware | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-475 | Multiples vulnérabilités dans Trend Micro Apex One | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-474 | Vulnérabilité dans ISC Bind | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-473 | Multiples vulnérabilités dans les produits Aruba | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-472 | Multiples vulnérabilités dans les produits IBM | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-471 | Vulnérabilité dans SolarWinds Serv-U | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-470 | Vulnérabilité dans VMware Sping Security | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-469 | Vulnérabilité dans SonicWall SSL-VPN SMA100 | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-468 | Multiples vulnérabilités dans Moodle | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-467 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |
| certfr-2022-avi-466 | Multiples vulnérabilités dans les produits Apple | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |