Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-98875 | N/A | drm/nouveau/gsp: add SEC2 to GA100 chip table |
Linux |
Linux |
2026-10-23T11:37:19.955Z | 2026-10-26T06:55:57.445Z |
| cve-2026-98874 | N/A | wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o n… |
Linux |
Linux |
2026-10-23T11:37:18.847Z | 2026-10-26T06:55:56.228Z |
| cve-2026-98873 | N/A | netfilter: nf_conntrack_expect: zero at allocation time |
Linux |
Linux |
2026-10-23T11:37:14.109Z | 2026-10-26T06:55:54.978Z |
| cve-2026-98872 | N/A | freevxfs: don't BUG() on unknown typed-extent type |
Linux |
Linux |
2026-10-23T11:37:11.214Z | 2026-10-26T06:55:53.758Z |
| cve-2026-98871 | N/A | crypto: ccp - Fix possible deadlock in SEV init failure path |
Linux |
Linux |
2026-10-23T11:37:09.369Z | 2026-10-23T11:37:09.369Z |
| cve-2026-98870 | ksmbd: remove stale channels from all sessions on teardown |
Linux |
Linux |
2026-10-23T11:37:07.113Z | 2026-10-24T14:09:26.805Z | |
| cve-2026-115727 | 9.2 (v4.0) 8.1 (v3.1) | AgenticSeek before commit 409840c RCE via Exposed Werk… |
Fosowl |
AgenticSeek |
2026-10-23T11:36:49.751Z | 2026-10-27T10:14:06.207Z |
| cve-2026-115726 | 8.5 (v4.0) 7.8 (v3.1) | Aider through 0.86.2 Command Execution via Repository … |
Aider-AI |
aider |
2026-10-23T11:36:49.084Z | 2026-10-29T13:02:55.888Z |
| cve-2026-115725 | 2.3 (v4.0) 4.2 (v3.1) | Chatwoot before 4.17.0 Cross-Account Authorization Byp… |
chatwoot |
chatwoot |
2026-10-23T11:36:48.394Z | 2026-10-29T02:48:49.269Z |
| cve-2026-115724 | 2.1 (v4.0) 2.9 (v3.1) | VLC for Android before 3.7.2 File Overwrite via Spoofe… |
VideoLAN |
VLC for Android |
2026-10-23T11:36:47.719Z | 2026-11-04T15:43:44.940Z |
| cve-2026-115723 | 8.3 (v4.0) 7.4 (v3.1) | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and … |
davenardella |
snap7 |
2026-10-23T11:36:47.011Z | 2026-10-23T14:59:52.690Z |
| cve-2026-115722 | 6.9 (v4.0) 6.1 (v3.1) | RPly through 1.1.4 Out-of-Bounds Function Pointer Inde… |
diegonehab |
rply |
2026-10-23T11:36:46.355Z | 2026-10-29T13:00:26.916Z |
| cve-2026-107685 | 9.1 (v4.0) | WebSocket sessions do not verify TLS certificates, exp… |
agentjido |
req_llm |
2026-10-23T11:00:38.975Z | 2026-11-02T15:24:51.535Z |
| cve-2026-95620 | 2.1 (v4.0) | Use-after-free vulnerability in QNetworkAccessManager … |
qt |
qt |
2026-10-23T10:56:15.281Z | 2026-11-02T15:21:58.478Z |
| cve-2026-94263 | Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - U… |
Unknown |
Advanced Custom Fields: Extended |
2026-10-23T10:44:12.568Z | 2026-10-23T10:52:24.979Z | |
| cve-2026-111965 | Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment re… |
Unknown |
Profile Builder |
2026-10-23T10:44:11.950Z | 2026-10-23T10:52:44.545Z | |
| cve-2026-105963 | 5.1 (v4.0) | Secret key base exposed in stack trace arguments on wr… |
elixir-plug |
plug |
2026-10-23T09:56:58.885Z | 2026-10-23T13:39:29.887Z |
| cve-2026-16762 | 8.7 (v4.0) | Denial-of-service vulnerability in the Qt Core QXmlStr… |
qt |
qt |
2026-10-23T08:58:40.028Z | 2026-10-23T10:56:05.830Z |
| cve-2026-89320 | 8.8 (v4.0) | HmacShaCryptor.Hash never hashes its input — returns c… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:56:20.140Z | 2026-11-02T13:29:45.468Z |
| cve-2026-25784 | 9.3 (v4.0) 9.8 (v3.1) | bluespice/wiki container: Insecure default configurati… |
Hallo Welt! GmbH |
BlueSpice |
2026-10-23T08:54:57.880Z | 2026-11-02T13:26:03.282Z |
| cve-2026-89319 | 6.3 (v4.0) | JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:54:37.681Z | 2026-11-02T13:22:22.590Z |
| cve-2026-25716 | 7.1 (v4.0) 7.1 (v3.1) | BlueSpiceUserManager: Missing authorization in REST en… |
Hallo Welt! GmbH |
BlueSpice |
2026-10-23T08:53:47.208Z | 2026-10-29T01:52:06.615Z |
| cve-2026-89318 | 6.9 (v4.0) | JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on att… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:51:55.194Z | 2026-11-02T13:18:54.247Z |
| cve-2026-89317 | 6.3 (v4.0) | JwtVerifierImpl.Verify does not enforce the JWS `crit`… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:50:22.987Z | 2026-11-02T13:17:29.417Z |
| cve-2026-89316 | 6.3 (v4.0) | LoadPublicKey panics on kty/alg mismatch (kty=EC with … |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:48:08.682Z | 2026-11-02T13:16:12.850Z |
| cve-2026-89315 | 6.9 (v4.0) | JwtClaims.MarshalJSON panics via reflect.StructOf when… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:46:30.146Z | 2026-11-02T12:59:14.783Z |
| cve-2026-89314 | 6.9 (v4.0) | Quadratic-time key_ops duplicate check lets a sub-1 MB… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:43:38.475Z | 2026-11-02T12:51:43.036Z |
| cve-2026-89313 | 6.3 (v4.0) | JwksTrustStore.Get returns the last fetched JWKS key (… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:40:55.499Z | 2026-11-02T12:49:31.095Z |
| cve-2026-89312 | 6.9 (v4.0) | AesGcmCryptor.Open passes attacker-controlled nonce to… |
Eclipse Foundation |
Eclipse KeyPont - GOSE |
2026-10-23T08:36:53.971Z | 2026-11-02T12:46:35.266Z |
| cve-2025-58403 | 5.1 (v4.0) | Reflected Cross-Site Scripting (XSS) in CGM CLININET |
CGM |
CGM CLININET |
2026-10-23T08:23:44.568Z | 2026-10-28T20:02:37.736Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-135 | Multiples vulnérabilités dans Stormshield Network Security | 2022-02-10T00:00:00.000000 | 2022-02-10T00:00:00.000000 |
| certfr-2022-avi-134 | Multiples vulnérabilités dans Tenable Nessus | 2022-02-10T00:00:00.000000 | 2022-02-10T00:00:00.000000 |
| certfr-2022-avi-133 | Multiples vulnérabilités dans Citrix Hypervisor | 2022-02-10T00:00:00.000000 | 2022-02-10T00:00:00.000000 |
| certfr-2022-avi-132 | Multiples vulnérabilités dans les produits Microsoft | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-131 | Vulnérabilité dans Microsoft .Net | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-130 | Multiples vulnérabilités dans Microsoft Windows | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-129 | Multiples vulnérabilités dans Microsoft Office | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-128 | Vulnérabilité dans les produits F-Secure | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-127 | Multiples vulnérabilités dans les produits Intel | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-126 | Multiples vulnérabilités dans Mozilla Firefox | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-125 | Multiples vulnérabilités dans les produits SAP | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-124 | Multiples vulnérabilités dans les produits Siemens | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-123 | Multiples vulnérabilités dans les produits Schneider | 2022-02-09T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-122 | Multiples vulnérabilités dans Google Android | 2022-02-08T00:00:00.000000 | 2022-02-08T00:00:00.000000 |
| certfr-2022-avi-121 | Multiples vulnérabilités dans Google Chrome OS | 2022-02-08T00:00:00.000000 | 2022-02-08T00:00:00.000000 |
| certfr-2022-avi-120 | Vulnérabilité dans Red Hat Gluster Storage Server | 2022-02-08T00:00:00.000000 | 2022-02-08T00:00:00.000000 |
| certfr-2022-avi-119 | Vulnérabilité dans SonicWall SMA1000 | 2022-02-08T00:00:00.000000 | 2022-02-08T00:00:00.000000 |
| certfr-2022-avi-118 | [MàJ] Multiples vulnérabilités dans Zimbra | 2022-02-07T00:00:00.000000 | 2022-02-09T00:00:00.000000 |
| certfr-2022-avi-117 | Multiples vulnérabilités dans Postfix | 2022-02-07T00:00:00.000000 | 2022-02-07T00:00:00.000000 |
| certfr-2022-avi-116 | Vulnérabilité dans MongoDB | 2022-02-07T00:00:00.000000 | 2022-02-07T00:00:00.000000 |
| certfr-2022-avi-115 | Vulnérabilité dans IBM WebSphere | 2022-02-07T00:00:00.000000 | 2022-02-07T00:00:00.000000 |
| certfr-2022-avi-114 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-07T00:00:00.000000 | 2022-02-07T00:00:00.000000 |
| certfr-2022-avi-113 | Multiples vulnérabilités dans les produits NetApp | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-112 | Multiples vulnérabilités dans les produits GitLab | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-111 | Multiples vulnérabilités dans F5 BIG-IP et BIG-IQ | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-110 | Multiples vulnérabilités dans Microsoft Edge | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-109 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-108 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-04T00:00:00.000000 | 2022-02-04T00:00:00.000000 |
| certfr-2022-avi-107 | Multiples vulnérabilités dans Cisco Small Business RV | 2022-02-03T00:00:00.000000 | 2022-02-03T00:00:00.000000 |
| certfr-2022-avi-106 | Vulnérabilité dans PostgreSQL JDBC | 2022-02-03T00:00:00.000000 | 2022-02-03T00:00:00.000000 |