Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114110 | 8.7 (v4.0) 5.3 (v3.1) | Astral uv before 0.11.6 Arbitrary File Deletion via Wh… |
astral-sh |
uv |
2026-10-21T00:37:09.626Z | 2026-10-21T15:49:26.326Z |
| cve-2026-114109 | 8.7 (v4.0) 8.8 (v3.1) | uv before 0.11.15 Arbitrary File Write via Entry Point Names |
astral-sh |
uv |
2026-10-21T00:37:08.897Z | 2026-10-28T16:15:57.817Z |
| cve-2026-114108 | 9.3 (v4.0) 9.8 (v3.1) | HKUDS Vibe-Trading before 0.1.7 Missing Authentication… |
HKUDS |
Vibe-Trading |
2026-10-21T00:37:08.183Z | 2026-10-27T21:56:16.706Z |
| cve-2026-114107 | 8.7 (v4.0) 8.8 (v3.1) | HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt … |
HKUDS |
Vibe-Trading |
2026-10-21T00:37:07.448Z | 2026-10-22T16:04:12.586Z |
| cve-2026-114106 | 8.7 (v4.0) 7.5 (v3.1) | HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal v… |
HKUDS |
Vibe-Trading |
2026-10-21T00:37:06.744Z | 2026-10-28T13:50:32.354Z |
| cve-2026-114105 | 6.9 (v4.0) 6.2 (v3.1) | Adm-zip before 0.6.1 Privilege Escalation via keepOrig… |
cthackers |
adm-zip |
2026-10-21T00:37:06.018Z | 2026-10-21T15:49:32.206Z |
| cve-2026-114104 | 8.2 (v4.0) 5.9 (v3.1) | adm-zip before 0.6.1 Duplicate ZIP Entry Name Validati… |
cthackers |
adm-zip |
2026-10-21T00:37:05.291Z | 2026-10-28T16:14:55.229Z |
| cve-2026-114103 | 6.9 (v4.0) 5.3 (v3.1) | adm-zip 0.6.0 Decompression Bomb Guard Bypass via getD… |
cthackers |
adm-zip |
2026-10-21T00:37:04.594Z | 2026-10-27T21:54:59.911Z |
| cve-2026-114102 | 8.7 (v4.0) 7.5 (v3.1) | adm-zip before 0.6.1 Denial of Service via inflateAsyn… |
cthackers |
adm-zip |
2026-10-21T00:37:03.910Z | 2026-10-22T15:40:24.384Z |
| cve-2026-114101 | 6.3 (v4.0) 4 (v3.1) | Coraza before 3.8.1 Multipart filename* Charset Handli… |
corazawaf |
coraza |
2026-10-21T00:37:03.229Z | 2026-10-28T13:51:32.918Z |
| cve-2026-114100 | 6.9 (v4.0) 5.8 (v3.1) | Coraza from 3.0.4 before 3.8.1 Request Body Inspection… |
corazawaf |
coraza |
2026-10-21T00:37:02.537Z | 2026-10-21T15:49:38.588Z |
| cve-2026-114099 | 6.9 (v4.0) 5.8 (v3.1) | Coraza 3.0.0 before 3.8.1 WAF Bypass via JSON Key Collision |
corazawaf |
coraza |
2026-10-21T00:37:01.866Z | 2026-10-28T16:12:46.044Z |
| cve-2026-114098 | 7.3 (v4.0) 7.8 (v3.1) | Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash P… |
jelmer |
dulwich |
2026-10-21T00:37:01.150Z | 2026-10-27T21:54:10.359Z |
| cve-2026-114097 | 7.3 (v4.0) 7.8 (v3.1) | Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via… |
jelmer |
dulwich |
2026-10-21T00:37:00.461Z | 2026-10-22T15:51:35.497Z |
| cve-2026-114096 | 7.3 (v4.0) 7.8 (v3.1) | Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via … |
jelmer |
dulwich |
2026-10-21T00:36:59.763Z | 2026-10-28T13:46:53.993Z |
| cve-2026-114095 | 7.1 (v4.0) 6.5 (v3.1) | Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolv… |
jelmer |
dulwich |
2026-10-21T00:36:59.083Z | 2026-10-21T15:49:44.928Z |
| cve-2026-114094 | 8.7 (v4.0) 8.8 (v3.1) | Dulwich before 1.2.9 Arbitrary File Write via DOS driv… |
jelmer |
dulwich |
2026-10-21T00:36:58.401Z | 2026-10-28T15:57:01.832Z |
| cve-2026-114093 | 5.3 (v4.0) 4.3 (v3.1) | Trigger.dev before 4.5.6 Cross-Site Request Forgery vi… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:57.681Z | 2026-10-27T21:53:27.407Z |
| cve-2026-114092 | 8.3 (v4.0) 6.5 (v3.1) | Trigger.dev before 4.5.0 Missing Authentication in Das… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:56.982Z | 2026-10-22T15:54:22.195Z |
| cve-2026-114091 | 6 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disc… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:56.273Z | 2026-10-28T15:05:28.082Z |
| cve-2026-114090 | 7.6 (v4.0) 7.1 (v3.1) | Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authenticat… |
trigger.dev |
cli-v3 |
2026-10-21T00:36:55.567Z | 2026-10-21T15:49:51.905Z |
| cve-2026-114089 | 8.7 (v4.0) 8.8 (v3.1) | Trigger.dev before 4.5.2 CLI Auth-Code Phishing Leadin… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:54.860Z | 2026-10-28T15:52:55.169Z |
| cve-2026-114088 | 8.3 (v4.0) 6.5 (v3.1) | Trigger.dev before 4.5.4 Hardcoded Coordinator Secret … |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:54.157Z | 2026-10-27T21:52:33.402Z |
| cve-2026-114087 | 9.2 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.5.6 Authentication Bypass via Har… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:53.452Z | 2026-10-22T15:57:06.612Z |
| cve-2026-114086 | 6.9 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.5 Unauthenticated Realtime Stre… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:52.744Z | 2026-10-28T15:22:48.613Z |
| cve-2026-114085 | 8.8 (v4.0) 7.9 (v3.1) | Trigger.dev through 4.7.6 Missing Authentication in Su… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:52.041Z | 2026-10-21T15:49:59.313Z |
| cve-2026-114084 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 SQL Injection via tags in Rea… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:51.356Z | 2026-10-28T15:36:39.961Z |
| cve-2026-114083 | 8.6 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.5.0-rc.3 Path Traversal via Packe… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:50.649Z | 2026-10-27T21:51:39.382Z |
| cve-2026-114082 | 7.2 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.6.2 Overly Broad Realtime Session… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:49.960Z | 2026-10-22T17:42:10.280Z |
| cve-2026-114081 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 Cross-Tenant SQL Injection vi… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:49.268Z | 2026-10-28T15:23:47.837Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-068 | Vulnérabilité dans Siemens SIMATIC | 2021-01-29T00:00:00.000000 | 2021-01-29T00:00:00.000000 |
| certfr-2021-avi-067 | Multiples vulnérabilités dans les produits Trend Micro | 2021-01-29T00:00:00.000000 | 2021-01-29T00:00:00.000000 |
| certfr-2021-avi-066 | Multiples vulnérabilités dans Google Chrome OS | 2021-01-29T00:00:00.000000 | 2021-01-29T00:00:00.000000 |
| certfr-2021-avi-065 | Multiples vulnérabilités dans les produits Stormshield | 2021-01-28T00:00:00.000000 | 2021-01-29T00:00:00.000000 |
| certfr-2021-avi-064 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-01-28T00:00:00.000000 | 2021-01-28T00:00:00.000000 |
| certfr-2021-avi-063 | Vulnérabilité dans Sudo | 2021-01-27T00:00:00.000000 | 2021-01-27T00:00:00.000000 |
| certfr-2021-avi-062 | Multiples vulnérabilités dans les produits Apple | 2021-01-27T00:00:00.000000 | 2021-01-27T00:00:00.000000 |
| certfr-2021-avi-061 | Multiples vulnérabilités dans Trend Micro ServerProtect pour Linux | 2021-01-27T00:00:00.000000 | 2021-01-27T00:00:00.000000 |
| certfr-2021-avi-060 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-01-27T00:00:00.000000 | 2021-01-27T00:00:00.000000 |
| certfr-2021-avi-059 | Multiples vulnérabilités dans Mozilla Firefox | 2021-01-27T00:00:00.000000 | 2021-01-27T00:00:00.000000 |
| certfr-2021-avi-058 | Vulnérabilité dans Belden HiLCOS | 2021-01-26T00:00:00.000000 | 2021-01-26T00:00:00.000000 |
| certfr-2021-avi-057 | Multiples vulnérabilités dans Moodle | 2021-01-26T00:00:00.000000 | 2021-01-26T00:00:00.000000 |
| certfr-2021-avi-056 | Vulnérabilité dans Mitel BusinessCTI Enterprise | 2021-01-25T00:00:00.000000 | 2021-01-25T00:00:00.000000 |
| certfr-2021-avi-055 | Multiples vulnérabilités dans VLC media player | 2021-01-22T00:00:00.000000 | 2021-01-22T00:00:00.000000 |
| certfr-2021-avi-054 | Multiples vulnérabilités dans Microsoft Edge | 2021-01-22T00:00:00.000000 | 2021-01-22T00:00:00.000000 |
| certfr-2021-avi-053 | Vulnérabilité dans Xen | 2021-01-22T00:00:00.000000 | 2021-01-22T00:00:00.000000 |
| certfr-2021-avi-052 | Multiples vulnérabilités dans les produits Cisco | 2021-01-21T00:00:00.000000 | 2021-01-21T00:00:00.000000 |
| certfr-2021-avi-051 | Multiples vulnérabilités dans les produits Stormshield | 2021-01-21T00:00:00.000000 | 2021-01-28T00:00:00.000000 |
| certfr-2021-avi-050 | Vulnérabilité dans Drupal Core | 2021-01-21T00:00:00.000000 | 2021-01-21T00:00:00.000000 |
| certfr-2021-avi-049 | Vulnérabilité dans IBM WebSphere | 2021-01-21T00:00:00.000000 | 2021-01-21T00:00:00.000000 |
| certfr-2021-avi-048 | Multiples vulnérabilités dans Google Chrome | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-047 | Multiples vulnérabilités dans Oracle WebLogic | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-046 | Multiples vulnérabilités dans Oracle Virtualization | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-045 | Multiples vulnérabilités dans Oracle Systems | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-044 | Multiples vulnérabilités dans Oracle MySQL | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-043 | Vulnérabilité dans Oracle Java SE | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-042 | Multiples vulnérabilités dans Oracle Database Server | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-041 | Multiples vulnérabilités dans les produits Siemens | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-040 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-01-20T00:00:00.000000 | 2021-01-20T00:00:00.000000 |
| certfr-2021-avi-039 | Vulnérabilité dans Juniper Junos OS | 2021-01-19T00:00:00.000000 | 2021-01-19T00:00:00.000000 |