Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115505 | 7.2 (v4.0) 7.6 (v3.1) | libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Dec… |
sahlberg |
libsmb2 |
2026-10-22T19:14:05.297Z | 2026-10-29T12:22:44.734Z |
| cve-2026-115504 | 8.5 (v4.0) 7.8 (v3.1) | CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 … |
HEASARC |
cfitsio |
2026-10-22T19:14:04.552Z | 2026-10-29T02:35:24.229Z |
| cve-2026-115503 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via Compressed Ex… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:03.831Z | 2026-10-22T19:14:03.831Z |
| cve-2026-115398 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via TAR and ZIP F… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:03.058Z | 2026-10-23T15:00:30.147Z |
| cve-2026-115397 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via Extension Arc… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:02.326Z | 2026-10-29T12:21:16.552Z |
| cve-2026-115396 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra 10.3 before 12.2 Denial of Service via Compress… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:01.562Z | 2026-10-29T02:33:07.412Z |
| cve-2026-115395 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra 10.3 before 12.2 Denial of Service via ThemeRea… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:00.814Z | 2026-10-22T19:14:00.814Z |
| cve-2026-114655 | 6 (v4.0) 5.9 (v3.1) | KMS request injection via unsanitized key vault and pr… |
MongoDB |
libmongocrypt |
2026-10-22T19:14:00.708Z | 2026-10-30T19:30:19.252Z |
| cve-2026-115394 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra through 12.2 Denial of Service via BinaryField … |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:00.068Z | 2026-10-23T15:00:37.926Z |
| cve-2026-114654 | 6.9 (v4.0) 6.5 (v3.1) | BSON output corruption via out-of-range binary subtype… |
MongoDB |
C# Driver |
2026-10-22T19:13:59.597Z | 2026-10-30T19:27:57.892Z |
| cve-2026-115393 | 1 (v4.0) 3.8 (v3.1) | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:59.314Z | 2026-10-29T12:16:18.355Z |
| cve-2026-115392 | 8.8 (v4.0) 7.9 (v3.1) | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:58.512Z | 2026-10-29T02:32:06.275Z |
| cve-2026-114653 | 7.1 (v4.0) 6.5 (v3.1) | Silent client-side encryption bypass via unescaped fie… |
MongoDB |
C# Driver |
2026-10-22T19:13:58.414Z | 2026-10-30T19:27:22.054Z |
| cve-2026-115391 | 6.9 (v4.0) 5.8 (v3.1) | Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:57.752Z | 2026-11-04T15:13:21.840Z |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-115390 | 6.9 (v4.0) 5.7 (v3.1) | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.910Z | 2026-10-23T15:00:44.401Z |
| cve-2026-115389 | 1 (v4.0) 2.3 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.163Z | 2026-10-29T12:12:04.439Z |
| cve-2026-114650 | 6.9 (v4.0) 5.9 (v3.1) | Plaintext exposure of encrypted fields via ANSI code-p… |
MongoDB |
C# Driver |
2026-10-22T19:13:55.159Z | 2026-11-02T12:29:15.032Z |
| cve-2026-115388 | 6.9 (v4.0) 6.2 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:54.430Z | 2026-10-29T02:31:21.887Z |
| cve-2026-114649 | 7.6 (v4.0) 6.8 (v3.1) | Authentication bypass via issuer-and-serial-only certi… |
MongoDB |
C# Driver |
2026-10-22T19:13:54.140Z | 2026-11-02T12:25:25.603Z |
| cve-2026-115387 | 6.9 (v4.0) 6.2 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:53.696Z | 2026-11-04T15:09:34.734Z |
| cve-2026-114648 | 7.2 (v4.0) 7.6 (v3.1) | NoSQL injection via dot and dollar characters in LINQ … |
MongoDB |
C# Driver |
2026-10-22T19:13:53.086Z | 2026-11-02T12:23:48.614Z |
| cve-2026-115386 | 2.1 (v4.0) 2.6 (v3.1) | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:52.931Z | 2026-10-23T15:00:52.816Z |
| cve-2026-115385 | 6.9 (v4.0) 6.2 (v3.1) | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:52.184Z | 2026-10-26T19:38:29.749Z |
| cve-2026-114647 | 5.3 (v4.0) 4.3 (v3.1) | NoSQL operator injection via unvalidated replacement d… |
MongoDB |
C# Driver |
2026-10-22T19:13:51.972Z | 2026-11-02T12:19:43.566Z |
| cve-2026-115384 | 9.4 (v4.0) 9.9 (v3.1) | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:51.422Z | 2026-10-29T02:30:40.462Z |
| cve-2026-114646 | 6.9 (v4.0) 6.5 (v3.1) | NoSQL command injection via mismatched raw BSON length… |
MongoDB |
C# Driver |
2026-10-22T19:13:50.935Z | 2026-11-02T14:37:54.708Z |
| cve-2026-115383 | 5.9 (v4.0) 4.8 (v3.1) | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:50.687Z | 2026-11-04T15:10:40.456Z |
| cve-2026-115382 | 5.9 (v4.0) 4.8 (v3.1) | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:49.956Z | 2026-10-23T15:01:00.837Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-976 | Vulnérabilité dans le client ownCloud | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |
| certfr-2021-avi-975 | Vulnérabilité dans NetApp StorageGRID | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |
| certfr-2021-avi-974 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-12-21T00:00:00.000000 | 2021-12-21T00:00:00.000000 |
| certfr-2021-avi-973 | Multiples vulnérabilités dans Xen | 2021-12-21T00:00:00.000000 | 2021-12-21T00:00:00.000000 |
| certfr-2021-avi-972 | Multiples vulnérabilités dans Apache httpd | 2021-12-21T00:00:00.000000 | 2021-12-21T00:00:00.000000 |
| certfr-2021-avi-971 | Multiples vulnérabilités dans SolarWinds Orion | 2021-12-21T00:00:00.000000 | 2021-12-21T00:00:00.000000 |
| certfr-2021-avi-970 | Multiples vulnérabilités dans les produits VMware | 2021-12-20T00:00:00.000000 | 2021-12-20T00:00:00.000000 |
| certfr-2021-avi-969 | Multiples vulnérabilités dans le noyau Linux de Debian | 2021-12-20T00:00:00.000000 | 2021-12-20T00:00:00.000000 |
| certfr-2021-avi-968 | Vulnérabilité dans RedHat OpenShift Container Platform | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-967 | Vulnérabilité dans F5 BIG-IP | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-966 | Multiples vulnérabilités dans F-Secure SAFE Browser | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-965 | Vulnérabilité dans VMware Workspace ONE UEM console | 2021-12-17T00:00:00.000000 | 2021-12-17T00:00:00.000000 |
| certfr-2021-avi-964 | Vulnérabilité dans F5 NGINX Swagger UI | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-963 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-962 | Vulnérabilité dans MongoDB | 2021-12-16T00:00:00.000000 | 2021-12-16T00:00:00.000000 |
| certfr-2021-avi-961 | Multiples vulnérabilités dans les produits Microsoft | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-960 | Multiples vulnérabilités dans Microsoft .Net | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-959 | Multiples vulnérabilités dans Microsoft Windows | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-958 | Multiples vulnérabilités dans Microsoft Office | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-957 | Multiples vulnérabilités dans Microsoft Edge | 2021-12-15T00:00:00.000000 | 2021-12-20T00:00:00.000000 |
| certfr-2021-avi-956 | Multiples vulnérabilités dans Apple Safari | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-955 | Vulnérabilité dans OpenSSL | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-954 | Vulnérabilité dans Moxa NPort | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-953 | Multiples vulnérabilités dans les produits Schneider | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-952 | Multiples vulnérabilités dans les produits IBM | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-951 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-950 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-949 | Multiples vulnérabilités dans les produits Siemens | 2021-12-15T00:00:00.000000 | 2021-12-15T00:00:00.000000 |
| certfr-2021-avi-948 | Multiples vulnérabilités dans les produits SAP | 2021-12-14T00:00:00.000000 | 2021-12-14T00:00:00.000000 |
| certfr-2021-avi-946 | Multiples vulnérabilités dans Google Chrome | 2021-12-14T00:00:00.000000 | 2021-12-14T00:00:00.000000 |