Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111764 | A2A Java SDK has a fail-open default task authorization |
a2aproject |
a2a-java |
2026-10-20T15:05:26.905Z | 2026-10-20T16:15:50.172Z | |
| cve-2026-93475 | 9.3 (v4.0) | Out-of-bounds Write via an Unbounded RSA Modulus in Ne… |
Eclipse Foundation |
Eclipse ThreadX - NetX Duo |
2026-10-20T15:04:30.044Z | 2026-10-20T17:02:52.372Z |
| cve-2026-112946 | Vite: Files outside `server.fs.allow` could be served … |
vitejs |
vite |
2026-10-20T15:03:55.196Z | 2026-10-20T16:46:18.810Z | |
| cve-2026-111763 | A2A Java SDK send client credentials under server-cont… |
a2aproject |
a2a-java |
2026-10-20T15:03:28.034Z | 2026-10-21T15:54:55.582Z | |
| cve-2026-91057 | 4.6 (v4.0) | Out-of-bounds read when a multi-line text view string … |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T15:01:30.043Z | 2026-10-20T17:01:50.314Z |
| cve-2026-112945 | Vite: Cross origin script execution through Vite custo… |
vitejs |
vite |
2026-10-20T15:00:58.170Z | 2026-10-28T14:11:03.638Z | |
| cve-2026-92454 | 6.1 (v3.1) 6.8 (v4.0) | JPEG decoder: truncated segments are read past the ima… |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:58:36.821Z | 2026-10-20T15:21:42.800Z |
| cve-2026-112944 | launch-editor: Editor CLI flag misinterpretation causi… |
vitejs |
launch-editor |
2026-10-20T14:57:38.728Z | 2026-10-20T15:23:12.248Z | |
| cve-2026-111762 | A2A Java SDK: Push notification credentials logged in … |
a2aproject |
a2a-java |
2026-10-20T14:56:57.632Z | 2026-10-28T14:12:15.553Z | |
| cve-2026-111761 | A2A Java SDK has Server-Side Request Forgery (SSRF) in… |
a2aproject |
a2a-java |
2026-10-20T14:54:46.950Z | 2026-10-22T21:30:39.670Z | |
| cve-2026-91059 | 6.8 (v4.0) | JPEG decoder: a duplicate SOF0 after SOS publishes a p… |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:54:37.119Z | 2026-10-20T15:24:14.860Z |
| cve-2026-112834 | 5.3 (v3.1) | WordPress Seriously Simple Podcasting plugin <= 3.17.0… |
Castos |
Seriously Simple Podcasting |
2026-10-20T14:53:47.737Z | 2026-10-21T10:28:09.573Z |
| cve-2026-91189 | 7.1 (v4.0) | GUIX binary resource loader: unvalidated glyph range c… |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:53:44.860Z | 2026-10-20T15:25:24.066Z |
| cve-2026-112943 | launch-editor: escapeCmdArgs() omits % escaping on Windows |
vitejs |
launch-editor |
2026-10-20T14:53:41.777Z | 2026-10-20T15:13:40.862Z | |
| cve-2026-112833 | 6.5 (v3.1) | WordPress Seriously Simple Podcasting plugin <= 3.17.0… |
Castos |
Seriously Simple Podcasting |
2026-10-20T14:53:14.184Z | 2026-10-20T15:14:09.857Z |
| cve-2026-92446 | 6.8 (v4.0) | GUIX binary resource loader reads past the end of a re… |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:52:45.765Z | 2026-10-20T15:26:36.082Z |
| cve-2026-92449 | 6.8 (v4.0) | Binary resource loader: unbounded map_id from a theme … |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:51:24.582Z | 2026-10-20T15:27:55.848Z |
| cve-2026-112942 | launch-editor: `fs.existsSync()` existence check can b… |
vitejs |
launch-editor |
2026-10-20T14:48:06.676Z | 2026-10-21T15:55:05.963Z | |
| cve-2026-91186 | 8.4 (v4.0) | PNG decoder: a duplicate IHDR chunk after IDAT resizes… |
Eclipse Foundation |
Eclipse ThreadX - GUIX |
2026-10-20T14:47:52.216Z | 2026-10-20T15:28:59.237Z |
| cve-2026-113466 | MinIO Embedded Console common-main.go SessionTokenAuth… |
n/a |
MinIO |
2026-10-20T14:45:12.542Z | 2026-10-20T15:31:34.898Z | |
| cve-2026-112941 | filelock: SoftReadWriteLock follows a lock tree swappe… |
tox-dev |
filelock |
2026-10-20T14:43:18.060Z | 2026-10-28T14:14:54.297Z | |
| cve-2026-112940 | filelock ReadWriteLock: SQLite reopens the lock databa… |
tox-dev |
filelock |
2026-10-20T14:41:49.555Z | 2026-10-22T21:29:27.209Z | |
| cve-2026-92162 | Flatpak vulnerable to path traversal via unvalidated "… |
flatpak |
flatpak |
2026-10-20T14:39:50.538Z | 2026-10-20T15:32:18.640Z | |
| cve-2026-112939 | filelock: SoftFileLock removes a live holder's marker … |
tox-dev |
filelock |
2026-10-20T14:38:52.373Z | 2026-10-20T15:14:56.836Z | |
| cve-2026-112937 | filelock: ReadWriteLock on the hard-link route deletes… |
tox-dev |
filelock |
2026-10-20T14:36:28.129Z | 2026-10-21T15:55:14.113Z | |
| cve-2026-95111 | 4.8 (v4.0) | Module queue front-send validates a word count as a by… |
Eclipse Foundation |
Eclipse ThreadX |
2026-10-20T14:35:40.629Z | 2026-10-20T15:34:45.488Z |
| cve-2026-112936 | filelock: ReadWriteLock follows a symlink at the lock … |
tox-dev |
filelock |
2026-10-20T14:34:47.210Z | 2026-10-20T16:47:39.872Z | |
| cve-2026-112935 | filelock: SoftFileLock stale-lock break removes a live… |
tox-dev |
filelock |
2026-10-20T14:32:25.740Z | 2026-10-28T14:17:06.745Z | |
| cve-2026-96402 | 5.2 (v4.0) | USBX PIMA/MTP host class reads past its receive buffer… |
Eclipse Foundation |
Eclipse ThreadX - USBX |
2026-10-20T14:31:34.182Z | 2026-10-20T15:36:16.427Z |
| cve-2026-112934 | filelock: SoftReadWriteLock holder refresh writes thro… |
tox-dev |
filelock |
2026-10-20T14:30:43.736Z | 2026-10-22T21:28:27.242Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-262 | Vulnérabilité dans VMware Horizon Client | 2018-05-30T00:00:00.000000 | 2018-05-30T00:00:00.000000 |
| certfr-2018-avi-261 | Multiples vulnérabilités dans Google Chrome | 2018-05-30T00:00:00.000000 | 2018-05-30T00:00:00.000000 |
| certfr-2018-avi-260 | Vulnérabilité dans Fortinet FortAuthenticator | 2018-05-30T00:00:00.000000 | 2018-05-30T00:00:00.000000 |
| certfr-2018-avi-259 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2018-05-30T00:00:00.000000 | 2018-05-30T00:00:00.000000 |
| certfr-2018-avi-258 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-05-25T00:00:00.000000 | 2018-05-25T00:00:00.000000 |
| certfr-2018-avi-257 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-05-25T00:00:00.000000 | 2018-05-25T00:00:00.000000 |
| certfr-2018-avi-256 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-05-25T00:00:00.000000 | 2018-05-25T00:00:00.000000 |
| certfr-2018-avi-255 | Multiples vulnérabilités dans VMware Workstation et Fusion | 2018-05-25T00:00:00.000000 | 2018-05-25T00:00:00.000000 |
| certfr-2018-avi-254 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-05-25T00:00:00.000000 | 2018-05-28T00:00:00.000000 |
| certfr-2018-avi-253 | Multiples vulnérabilités dans Moodle | 2018-05-25T00:00:00.000000 | 2018-05-25T00:00:00.000000 |
| certfr-2018-avi-252 | Vulnérabilité dans Microsoft PowerPoint | 2018-05-24T00:00:00.000000 | 2018-05-24T00:00:00.000000 |
| certfr-2018-avi-251 | Multiples vulnérabilités dans Wireshark | 2018-05-23T00:00:00.000000 | 2018-05-23T00:00:00.000000 |
| certfr-2018-avi-250 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-05-23T00:00:00.000000 | 2018-05-23T00:00:00.000000 |
| certfr-2018-avi-249 | Multiples vulnérabilités dans Joomla! | 2018-05-23T00:00:00.000000 | 2018-05-23T00:00:00.000000 |
| certfr-2018-avi-248 | Vulnérabilité dans le noyau Linux de RedHat | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-247 | Multiples vulnérabilités dans Citrix XenMobile | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-246 | Multiples vulnérabilités dans Fortinet FortiOS | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-245 | Multiples vulnérabilités dans Mozilla Thunderbird | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-244 | Multiples vulnérabilités dans BIND | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-243 | Multiples vulnérabilités dans Google Chrome OS | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-242 | Multiples vulnérabilités dans les produits Tenable | 2018-05-22T00:00:00.000000 | 2018-05-22T00:00:00.000000 |
| certfr-2018-avi-241 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-05-17T00:00:00.000000 | 2018-05-17T00:00:00.000000 |
| certfr-2018-avi-240 | Multiples vulnérabilités dans les produits Cisco | 2018-05-17T00:00:00.000000 | 2018-05-17T00:00:00.000000 |
| certfr-2018-avi-239 | Multiples vulnérabilités dans les produits Fortinet | 2018-05-17T00:00:00.000000 | 2018-05-17T00:00:00.000000 |
| certfr-2018-avi-238 | Vulnérabilité dans le client DHCP de RedHat | 2018-05-16T00:00:00.000000 | 2018-05-16T00:00:00.000000 |
| certfr-2018-avi-237 | Multiples vulnérabilités dans Tenable Nessus | 2018-05-16T00:00:00.000000 | 2018-05-16T00:00:00.000000 |
| certfr-2018-avi-236 | Vulnérabilité dans VMware NSX SD-WAN | 2018-05-15T00:00:00.000000 | 2018-05-15T00:00:00.000000 |
| certfr-2018-avi-235 | Vulnérabilité dans SCADA Siemens SIMATIC | 2018-05-15T00:00:00.000000 | 2018-05-15T00:00:00.000000 |
| certfr-2018-avi-234 | Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway | 2018-05-15T00:00:00.000000 | 2018-05-15T00:00:00.000000 |
| certfr-2018-avi-233 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2018-05-14T00:00:00.000000 | 2018-05-14T00:00:00.000000 |