Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115516 | N/A | {'providerMetadata': {'orgId': '296541fb-a0e3-4ca7-ab3d-683e666d143e', 'shortName': 'KNIME', 'dateUpdated': '2026-10-23T07:48:51.748Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}} | N/A | N/A | 2026-10-22T17:47:19.059Z | 2026-10-23T07:48:51.748Z |
| cve-2026-77156 | 6.4 (v3.1) 6.3 (v4.0) | ast-cli: Path traversal in tar extraction on Linux/mac… |
Checkmarx |
github.com/checkmarx/ast-cli |
2026-10-22T17:44:34.313Z | 2026-11-02T12:07:03.121Z |
| cve-2026-108357 | PhpSpreadsheet: XmlScanner Bypass via Double-Encoded u… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:38:16.098Z | 2026-10-23T21:08:17.784Z | |
| cve-2026-13599 | 7.8 (v3.1) 5.8 (v4.0) | ABB Ability Edgenius | Missing Authentication in Edgen… |
ABB |
Ability Edgenius |
2026-10-22T17:36:17.225Z | 2026-10-22T19:00:30.651Z |
| cve-2026-114611 | OCO-Server: MDM /profile endpoint accepts self-signed … |
schorschii |
OCO-Server |
2026-10-22T17:33:13.611Z | 2026-10-29T02:23:10.004Z | |
| cve-2026-108359 | PhpSpreadsheet ODS Reader: Unbounded number-rows-repea… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:32:49.724Z | 2026-10-29T11:51:32.420Z | |
| cve-2026-93336 | 7.1 (v4.0) | Missing authorization in the unit resources download r… |
Canonical |
Juju |
2026-10-22T17:32:13.820Z | 2026-11-02T12:06:25.813Z |
| cve-2026-108358 | PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape … |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:29:56.449Z | 2026-10-23T21:08:28.517Z | |
| cve-2026-108360 | PhpSpreadsheet: SSRF whitelist bypass via unre-validat… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:26:59.148Z | 2026-10-29T11:50:16.342Z | |
| cve-2026-54238 | Supabase Realtime: Expired JWTs with string exp are ac… |
supabase |
realtime |
2026-10-22T17:22:50.862Z | 2026-10-30T15:11:34.608Z | |
| cve-2026-114610 | fpdf2: Exponential SVG '<use>' expansion causes CPU an… |
py-pdf |
fpdf2 |
2026-10-22T17:21:11.788Z | 2026-10-29T02:22:14.998Z | |
| cve-2026-114609 | fpdf2 implicitly loads external URLs and local image p… |
py-pdf |
fpdf2 |
2026-10-22T17:18:22.802Z | 2026-10-29T02:19:57.646Z | |
| cve-2026-54532 | CloudPirates Open Source Helm Charts: pull_request_tar… |
CloudPirates-io |
helm-charts |
2026-10-22T17:16:38.540Z | 2026-10-30T19:47:13.018Z | |
| cve-2026-115513 | 6.3 (v4.0) 8.7 (v3.1) | OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel |
opencats |
OpenCATS |
2026-10-22T16:52:10.542Z | 2026-11-04T19:28:58.659Z |
| cve-2026-115416 | 7.7 (v3.1) 6.3 (v4.0) | Incorrect authorization checks in Amazon Athena engine… |
AWS |
Amazon Athena |
2026-10-22T16:50:18.238Z | 2026-11-02T12:04:50.864Z |
| cve-2026-114608 | Pylint: Arbitrary code execution via pickle deserializ… |
pylint-dev |
pylint |
2026-10-22T16:50:02.569Z | 2026-10-29T11:49:18.315Z | |
| cve-2026-114607 | better-auth: OAuth state can be used as a Magic Link t… |
better-auth |
better-auth |
2026-10-22T16:47:27.480Z | 2026-10-23T15:02:40.820Z | |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-97631 | 9.5 (v4.0) | Pre-boot RCE in EDK II PXE driver |
TianoCore |
EDK2 |
2026-10-22T16:32:27.619Z | 2026-10-30T19:34:40.851Z |
| cve-2026-115502 | 6.3 (v4.0) | DataApp links without login expose job information to … |
KNIME |
KNIME Business Hub |
2026-10-22T16:32:13.145Z | 2026-10-23T09:31:02.963Z |
| cve-2026-104068 | 8.6 (v4.0) 7.2 (v3.1) | JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitra… |
JetBackup |
JetBackup |
2026-10-22T16:27:11.748Z | 2026-10-27T01:30:31.057Z |
| cve-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use |
rthalley |
dnspython |
2026-10-22T16:25:32.509Z | 2026-10-29T02:19:02.339Z | |
| cve-2026-75507 | GraphQL-core: Denial of service via quadratic complexi… |
graphql-python |
graphql-core |
2026-10-22T16:12:38.424Z | 2026-10-23T21:08:40.217Z | |
| cve-2026-75508 | GraphQL-core: Denial of service via comment tokens byp… |
graphql-python |
graphql-core |
2026-10-22T16:10:17.124Z | 2026-10-29T11:47:15.190Z | |
| cve-2026-115496 | 6.9 (v4.0) | Workflow names may be leaked to unauthenticated users … |
KNIME |
KNIME Business Hub |
2026-10-22T15:56:48.222Z | 2026-10-22T19:00:30.950Z |
| cve-2026-114487 | N/A | Missing authorization in the PAM AD computer impo… |
Devolutions |
Server |
2026-10-22T15:48:35.922Z | 2026-10-30T19:33:39.484Z |
| cve-2026-115494 | 5.3 (v4.0) | CSRF protection could be tricked by forged X-Forwarded… |
KNIME |
KNIME Business Hub |
2026-10-22T15:43:29.246Z | 2026-10-22T19:00:31.097Z |
| cve-2026-114486 | N/A | Incorrect authorization in the Devolutions Gatewa… |
Devolutions |
Server |
2026-10-22T15:38:55.177Z | 2026-10-30T18:53:01.286Z |
| cve-2026-114485 | N/A | Insufficient protection of sensitive information … |
Devolutions |
Server |
2026-10-22T15:37:16.071Z | 2026-10-30T18:51:20.872Z |
| cve-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in … |
open-telemetry |
opentelemetry-python |
2026-10-22T15:29:25.108Z | 2026-10-29T02:17:42.817Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-820 | Multiples vulnérabilités dans Juniper Junos OS et Junos OS Evolved | 2021-10-26T00:00:00.000000 | 2021-10-26T00:00:00.000000 |
| certfr-2021-avi-819 | Multiples vulnérabilités dans les produits Nextcloud | 2021-10-25T00:00:00.000000 | 2021-10-25T00:00:00.000000 |
| certfr-2021-avi-818 | Vulnérabilité dans Pulse Connect Secure | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-817 | Multiples vulnérabilités dans Microsoft Edge | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-816 | Vulnérabilité dans les produits QNAP | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-815 | Vulnérabilité dans PHP | 2021-10-22T00:00:00.000000 | 2021-10-25T00:00:00.000000 |
| certfr-2021-avi-814 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-813 | Multiples vulnérabilités dans Google Chrome OS | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-812 | Vulnérabilité dans les produits IBM | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-811 | Multiples vulnérabilités dans les produits SolarWinds | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-810 | Vulnérabilité dans les produits ESET | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-809 | Vulnérabilité dans Cisco IOS XE SD-WAN | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-808 | Multiples vulnérabilités dans Google Chrome | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-807 | Vulnérabilité dans VMware vRealize Operations | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-806 | Multiples vulnérabilités dans Oracle Virtualization | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-805 | Multiples vulnérabilités dans les produits Oracle Systems | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-804 | Multiples vulnérabilités dans Oracle PeopleSoft | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-803 | Multiples vulnérabilités dans Oracle Java SE | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-802 | Multiples vulnérabilités dans Oracle Database | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-801 | Multiples vulnérabilités dans Oracle MySQL | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-800 | Multiples vulnérabilités dans Tenable.sc | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-799 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-798 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-797 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-796 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-10-19T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-avi-795 | Vulnérabilité dans NetApp Clustered Data ONTAP | 2021-10-19T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-avi-794 | Vulnérabilité dans Check Point Mobile Access Portal Agent | 2021-10-18T00:00:00.000000 | 2021-10-18T00:00:00.000000 |
| certfr-2021-avi-793 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-10-15T00:00:00.000000 | 2021-10-15T00:00:00.000000 |
| certfr-2021-avi-792 | Multiples vulnérabilités dans Google Chrome OS | 2021-10-15T00:00:00.000000 | 2021-10-15T00:00:00.000000 |
| certfr-2021-avi-791 | Multiples vulnérabilités dans les produits IBM | 2021-10-15T00:00:00.000000 | 2021-10-15T00:00:00.000000 |