Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-65379 | N/A | The issue was addressed with improved handling of… |
Apple |
macOS |
2026-10-20T00:50:22.118Z | 2026-10-26T20:36:26.834Z |
| cve-2026-65372 | N/A | A race condition was addressed with additional va… |
Apple |
macOS |
2026-10-20T00:50:20.546Z | 2026-10-26T20:35:19.951Z |
| cve-2026-65356 | N/A | An access issue was addressed with improved acces… |
Apple |
macOS |
2026-10-20T00:50:18.455Z | 2026-10-26T20:40:59.228Z |
| cve-2026-28854 | N/A | The issue was addressed with additional app bundl… |
Apple |
macOS |
2026-10-20T00:50:04.838Z | 2026-10-29T17:25:26.960Z |
| cve-2026-28853 | N/A | The issue was addressed with improved checks. Thi… |
Apple |
macOS |
2026-10-20T00:50:04.575Z | 2026-10-26T20:42:57.357Z |
| cve-2026-28850 | N/A | An authorization issue was addressed with improve… |
Apple |
macOS |
2026-10-20T00:50:04.249Z | 2026-10-26T20:34:57.306Z |
| cve-2026-105298 | 6.3 (v4.0) | Pingora HTTP/2 :authority and Host header mismatch ena… |
Cloudflare |
https://github.com/cloudflare/pingora |
2026-10-20T00:46:21.902Z | 2026-10-20T19:20:10.015Z |
| cve-2026-77938 | 7.1 (v4.0) 6.5 (v3.1) | Letta through 0.16.8 Credential Exposure via Tool Sand… |
letta-ai |
letta |
2026-10-20T00:46:15.564Z | 2026-10-20T13:47:53.481Z |
| cve-2026-77937 | 8.6 (v4.0) 8.1 (v3.1) | Letta through 0.16.8 Cross-Tenant Impersonation via us… |
letta-ai |
letta |
2026-10-20T00:46:14.829Z | 2026-10-20T13:48:37.840Z |
| cve-2026-77936 | 9.3 (v4.0) 9.8 (v3.1) | Letta through 0.16.8 Insecure Default Configuration Un… |
letta-ai |
letta |
2026-10-20T00:46:14.144Z | 2026-10-20T16:07:28.161Z |
| cve-2026-77935 | 8.7 (v4.0) 8.3 (v3.1) | Coze Studio through 0.5.1 Cross-Space Workflow IDOR vi… |
coze-dev |
coze-studio |
2026-10-20T00:46:13.474Z | 2026-10-20T13:29:43.391Z |
| cve-2026-77934 | 8.7 (v4.0) 8.8 (v3.1) | Coze Studio before 0.5.0 RCE via Unsandboxed Local Pyt… |
coze-dev |
coze-studio |
2026-10-20T00:46:12.780Z | 2026-10-20T14:29:04.949Z |
| cve-2026-77933 | 9.3 (v4.0) 9.8 (v3.1) | DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials … |
eosphoros-ai |
DB-GPT |
2026-10-20T00:46:12.076Z | 2026-10-20T13:49:14.362Z |
| cve-2026-77932 | 9.3 (v4.0) 9.8 (v3.1) | DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/c… |
eosphoros-ai |
DB-GPT |
2026-10-20T00:46:11.410Z | 2026-10-20T13:49:48.138Z |
| cve-2026-77930 | 9.3 (v4.0) 9.8 (v3.1) | EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass … |
EvoScientist |
EvoScientist |
2026-10-20T00:46:10.763Z | 2026-10-22T21:09:21.545Z |
| cve-2026-77926 | 8.7 (v4.0) 8.8 (v3.1) | Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent… |
apconw |
Aix-DB |
2026-10-20T00:46:09.952Z | 2026-10-20T14:33:10.813Z |
| cve-2026-75128 | 9.3 (v4.0) 9.8 (v3.1) | Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE… |
chatchat-space |
Langchain-Chatchat |
2026-10-20T00:46:08.977Z | 2026-10-20T14:34:07.343Z |
| cve-2026-109444 | 9.3 (v4.0) 9.8 (v3.1) | OpenSRE through 0.1.2026.10.19 Approval Gate Bypass vi… |
Tracer-Cloud |
opensre |
2026-10-20T00:46:07.986Z | 2026-10-22T21:10:29.956Z |
| cve-2026-109443 | 8.7 (v4.0) 8.8 (v3.1) | JoySafeter through 1.0.0 Authenticated RCE via Copilot… |
jd-opensource |
JoySafeter |
2026-10-20T00:46:07.343Z | 2026-10-22T21:04:54.787Z |
| cve-2026-109442 | 9.3 (v4.0) 9.8 (v3.1) | piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Cha… |
cas-bigdatalab |
piflow |
2026-10-20T00:46:06.694Z | 2026-10-20T16:07:55.823Z |
| cve-2026-109441 | 6.9 (v4.0) 5.8 (v3.1) | LangAlpha through 2026.09.07 Cross-Tenant Sandbox Expo… |
ginlix-ai |
LangAlpha |
2026-10-20T00:46:06.033Z | 2026-10-20T14:34:42.144Z |
| cve-2026-109440 | 8.7 (v4.0) 8.8 (v3.1) | LangAlpha through 2026.09.07 Indirect Prompt Injection… |
ginlix-ai |
LangAlpha |
2026-10-20T00:46:05.334Z | 2026-10-22T21:16:20.124Z |
| cve-2026-109395 | 8.8 (v4.0) 9.1 (v3.1) | Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Ac… |
ning |
compress-lzf |
2026-10-20T00:46:04.633Z | 2026-10-20T14:29:50.505Z |
| cve-2026-105297 | 7.5 (v3.1) | Pingora HTTP/2 server memory exhaustion through unboun… |
Cloudflare |
https://github.com/cloudflare/pingora |
2026-10-20T00:40:27.300Z | 2026-10-20T19:20:35.542Z |
| cve-2026-95168 | N/A | An issue in nvbn thefuck v.3.32 allows a local at… |
n/a |
n/a |
2026-10-20T00:00:00.000Z | 2026-10-21T19:17:42.649Z |
| cve-2025-60496 | N/A | A Floating-Point Exception (FPE) in the reframer_… |
n/a |
n/a |
2026-10-20T00:00:00.000Z | 2026-10-26T15:44:28.502Z |
| cve-2025-60494 | N/A | A segmentation violation in the gf_props_equal_in… |
n/a |
n/a |
2026-10-20T00:00:00.000Z | 2026-10-26T17:28:23.182Z |
| cve-2025-60475 | N/A | A buffer overflow in the gf_ac4_parser_bs functio… |
n/a |
n/a |
2026-10-20T00:00:00.000Z | 2026-10-28T03:07:03.383Z |
| cve-2026-105453 | 8.4 (v3.1) | IBM Sterling Connect:Direct for Unix Improper Privileg… |
IBM |
Sterling Connect Direct for Unix |
2026-10-19T23:56:06.910Z | 2026-10-21T03:56:17.640Z |
| cve-2026-107366 | 8.3 (v3.1) | Langflow OSS Authorization Bypass Through User-Control… |
IBM |
Langflow OSS |
2026-10-19T23:49:23.120Z | 2026-10-21T03:56:18.876Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-022 | Multiples vulnérabilités dans Microsoft Windows | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-021 | Multiples vulnérabilités dans Microsoft Office | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-020 | Multiples vulnérabilités dans Microsoft Edge | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-019 | Multiples vulnérabilités dans Microsoft IE | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-018 | Multiples vulnérabilités dans le noyau Linux de Debian | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-017 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-01-10T00:00:00.000000 | 2018-01-11T00:00:00.000000 |
| certfr-2018-avi-016 | Vulnérabilité dans les produits VMware | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-015 | Vulnérabilité dans Adobe Flash Player | 2018-01-10T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-014 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-01-09T00:00:00.000000 | 2018-01-10T00:00:00.000000 |
| certfr-2018-avi-013 | Multiples vulnérabilités dans les produits Apple | 2018-01-09T00:00:00.000000 | 2018-01-09T00:00:00.000000 |
| certfr-2018-avi-012 | Vulnérabilité dans les microgiciels Intel et AMD pour les systèmes RedHat | 2018-01-08T00:00:00.000000 | 2018-01-08T00:00:00.000000 |
| certfr-2018-avi-011 | Vulnérabilité dans Xen | 2018-01-08T00:00:00.000000 | 2018-01-08T00:00:00.000000 |
| certfr-2018-avi-010 | Multiples vulnérabilités dans les produits VMware | 2018-01-08T00:00:00.000000 | 2018-01-08T00:00:00.000000 |
| certfr-2018-avi-009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-01-08T00:00:00.000000 | 2018-01-08T00:00:00.000000 |
| certfr-2018-avi-008 | Multiples vulnérabilités dans Mozilla Firefox | 2018-01-05T00:00:00.000000 | 2018-01-05T00:00:00.000000 |
| certfr-2018-avi-007 | Multiples vulnérabilités dans PHP | 2018-01-05T00:00:00.000000 | 2018-01-05T00:00:00.000000 |
| certfr-2018-avi-006 | Multiples vulnérabilités dans les produits VMware | 2018-01-04T00:00:00.000000 | 2018-01-05T00:00:00.000000 |
| certfr-2018-avi-005 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-01-04T00:00:00.000000 | 2018-01-04T00:00:00.000000 |
| certfr-2018-avi-004 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-01-04T00:00:00.000000 | 2018-01-05T00:00:00.000000 |
| certfr-2018-avi-003 | Multiples vulnérabilités dans VMware vSphere Data Protection | 2018-01-03T00:00:00.000000 | 2018-01-03T00:00:00.000000 |
| certfr-2018-avi-002 | Multiples vulnérabilités dans Google Android | 2018-01-03T00:00:00.000000 | 2018-01-03T00:00:00.000000 |
| certfr-2018-avi-001 | Vulnérabilité dans phpMyAdmin | 2018-01-03T00:00:00.000000 | 2018-01-03T00:00:00.000000 |
| certfr-2017-avi-484 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-12-26T00:00:00.000000 | 2017-12-26T00:00:00.000000 |
| certfr-2017-avi-483 | Vulnérabilité dans Asterisk | 2017-12-26T00:00:00.000000 | 2017-12-26T00:00:00.000000 |
| certfr-2017-avi-482 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-22T00:00:00.000000 | 2017-12-22T00:00:00.000000 |
| certfr-2017-avi-481 | Multiples vulnérabilités dans F5 BIG-IP | 2017-12-21T00:00:00.000000 | 2017-12-21T00:00:00.000000 |
| certfr-2017-avi-480 | Multiples vulnérabilités dans les produits VMware | 2017-12-21T00:00:00.000000 | 2017-12-21T00:00:00.000000 |
| certfr-2017-avi-479 | Multiples vulnérabilités dans F5 BIG-IP | 2017-12-20T00:00:00.000000 | 2017-12-20T00:00:00.000000 |
| certfr-2017-avi-478 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-12-20T00:00:00.000000 | 2017-12-20T00:00:00.000000 |
| certfr-2017-avi-477 | Multiples vulnérabilités dans Google Chrome OS | 2017-12-18T00:00:00.000000 | 2017-12-18T00:00:00.000000 |