Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107366 | 8.3 (v3.1) | Langflow OSS Authorization Bypass Through User-Control… |
IBM |
Langflow OSS |
2026-10-19T23:49:23.120Z | 2026-10-21T03:56:18.876Z |
| cve-2026-107400 | 8.8 (v3.1) | Security Vulnerability identified in IBM TRIRIGA - GWT… |
IBM |
TRIRIGA Application Platform |
2026-10-19T23:46:46.720Z | 2026-10-20T13:51:15.010Z |
| cve-2026-109126 | 8.8 (v3.1) | IBM Verify Identity Access and IBM Security Verify Acc… |
IBM |
Verify Identity Access |
2026-10-19T23:43:19.165Z | 2026-10-20T14:35:23.500Z |
| cve-2026-8355 | N/A | IBM ContextForge MCP Gateway is affected by server-sid… |
IBM |
ContextForge MCP Gateway |
2026-10-19T23:42:01.778Z | 2026-10-20T14:37:15.968Z |
| cve-2026-112373 | H3C Magic NX15 usrlist sub_416874 stack-based overflow |
H3C |
Magic NX15 |
2026-10-19T23:00:16.156Z | 2026-10-20T13:51:59.801Z | |
| cve-2025-36061 | 6.5 (v3.1) | TS4500 Tape Library Denial of Service |
IBM |
Storage TS4500 Library |
2026-10-19T22:51:04.688Z | 2026-10-20T14:41:22.294Z |
| cve-2025-36069 | 5.5 (v3.1) | TS4500 Tape Library Insufficient Session Expiration |
IBM |
Storage TS4500 Library |
2026-10-19T22:50:54.345Z | 2026-10-20T16:08:12.399Z |
| cve-2025-36252 | 6.3 (v3.1) | TS4500 Tape Library Insufficient Session Expiration |
IBM |
Storage TS4500 Library |
2026-10-19T22:50:46.164Z | 2026-10-22T21:15:40.159Z |
| cve-2026-19178 | 6.8 (v3.1) | TS4500 Tape Library Race Condition |
IBM |
Storage TS4500 Library |
2026-10-19T22:50:34.565Z | 2026-10-20T13:52:27.830Z |
| cve-2026-77684 | 5.7 (v3.1) | Bluetooth Classic HFP Hands-Free: TX buffer leak on RF… |
zephyrproject |
zephyr |
2026-10-19T22:49:41.900Z | 2026-11-04T05:01:15.337Z |
| cve-2026-19595 | 6.1 (v3.1) | Zephyr RTIO syscall verifier validates output paramete… |
zephyrproject |
zephyr |
2026-10-19T22:49:40.334Z | 2026-11-04T05:01:16.762Z |
| cve-2026-112372 | H3C Magic NX15 upload importprofile path traversal |
H3C |
Magic NX15 |
2026-10-19T22:45:19.358Z | 2026-10-20T16:08:20.868Z | |
| cve-2026-112371 | H3C Magic NX15 RPC esps write code injection |
H3C |
Magic NX15 |
2026-10-19T22:30:17.115Z | 2026-10-20T14:42:20.665Z | |
| cve-2026-112991 | 6.3 (v4.0) | MISP html_to_markdown Module SSRF via Incomplete IP Ra… |
MISP |
misp-modules |
2026-10-19T22:19:50.011Z | 2026-10-20T19:22:15.189Z |
| cve-2026-112370 | H3C Magic NX15 usrlist sub_416874 os command injection |
H3C |
Magic NX15 |
2026-10-19T22:15:15.054Z | 2026-10-22T21:15:05.627Z | |
| cve-2026-112901 | Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls … |
python-pillow |
Pillow |
2026-10-19T22:09:52.614Z | 2026-10-20T16:08:29.821Z | |
| cve-2026-112900 | Pillow: Argument Injection in Ghostscript call, potent… |
python-pillow |
Pillow |
2026-10-19T22:07:50.418Z | 2026-10-20T14:43:44.563Z | |
| cve-2026-112898 | Pillow: Image.quantize() with empty palette leaks unin… |
python-pillow |
Pillow |
2026-10-19T22:04:23.462Z | 2026-10-28T15:15:44.187Z | |
| cve-2026-112897 | Pillow: TiffDecode returns uninitialized memory as pix… |
python-pillow |
Pillow |
2026-10-19T22:00:52.749Z | 2026-10-22T21:13:16.428Z | |
| cve-2026-112896 | Pillow: TIFF encoder ColorMap plane-size mismatch caus… |
python-pillow |
Pillow |
2026-10-19T21:59:17.743Z | 2026-10-20T13:55:36.949Z | |
| cve-2026-112895 | Pillow: Unbounded recursion parsing a PDF page tree or… |
python-pillow |
Pillow |
2026-10-19T21:57:14.207Z | 2026-10-20T16:08:43.138Z | |
| cve-2026-112894 | Pillow: Quadratic-time DoS in PDF save_all (PdfParser.… |
python-pillow |
Pillow |
2026-10-19T21:55:19.424Z | 2026-10-20T14:46:13.675Z | |
| cve-2026-112893 | Pillow: Invalid free in FreeType glyph rendering when … |
python-pillow |
Pillow |
2026-10-19T21:53:49.979Z | 2026-10-28T15:12:48.729Z | |
| cve-2026-112361 | Dolibarr CSP document.php protection mechanism |
n/a |
Dolibarr |
2026-10-19T21:45:06.736Z | 2026-10-20T13:53:23.490Z | |
| cve-2026-112261 | 7.8 (v3.1) | Gimp: gimp: use-after-free in xcf loader via prop_sele… |
Red Hat |
Red Hat Enterprise Linux 9 |
2026-10-19T21:37:25.644Z | 2026-11-04T21:54:58.082Z |
| cve-2026-112258 | 7.8 (v3.1) | Gimp: gimp: use-after-free in xcf loader via prop_link… |
Red Hat |
Red Hat Enterprise Linux 9 |
2026-10-19T21:37:20.179Z | 2026-11-04T21:54:53.485Z |
| cve-2026-112257 | 7.8 (v3.1) | Gimp: gimp: heap out-of-bounds read/write in psd thumb… |
Red Hat |
Red Hat Enterprise Linux 8 |
2026-10-19T21:37:19.467Z | 2026-11-05T10:02:03.812Z |
| cve-2026-112892 | Pillow: MSP RLE decoder expands a tiny file into unbou… |
python-pillow |
Pillow |
2026-10-19T21:35:25.797Z | 2026-10-22T21:11:24.689Z | |
| cve-2026-112891 | Pillow: Quadratic GIF comment copying during save |
python-pillow |
Pillow |
2026-10-19T21:33:32.180Z | 2026-10-20T13:54:10.370Z | |
| cve-2026-112406 | Pillow: Infinite loop in PdfParser.rewrite_pages on pa… |
python-pillow |
Pillow |
2026-10-19T21:31:49.946Z | 2026-10-20T16:08:57.551Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-476 | Vulnérabilité dans Citrix XenServer | 2017-12-18T00:00:00.000000 | 2017-12-18T00:00:00.000000 |
| certfr-2017-avi-475 | Multiples vulnérabilités dans Google Chrome | 2017-12-15T00:00:00.000000 | 2017-12-15T00:00:00.000000 |
| certfr-2017-avi-474 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-15T00:00:00.000000 | 2017-12-18T00:00:00.000000 |
| certfr-2017-avi-473 | Vulnérabilité dans Asterisk | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-472 | Vulnérabilité dans VMWare AirWatch Console | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-471 | Vulnérabilité dans Fortinet FortiClient | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-470 | Vulnérabilité dans Apache Struts 2 | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-469 | Multiples vulnérabilités dans les produits Apple | 2017-12-14T00:00:00.000000 | 2017-12-14T00:00:00.000000 |
| certfr-2017-avi-468 | Multiples vulnérabilités dans les produits Microsoft | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-467 | Multiples vulnérabilités dans Microsoft Windows | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-466 | Multiples vulnérabilités dans Microsoft Office | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-465 | Multiples vulnérabilités dans Microsoft Edge | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-464 | Multiples vulnérabilités dans Microsoft IE | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-463 | Vulnérabilité dans les produits F5 | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-462 | Multiples vulnérabilités dans les produits Citrix | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-461 | Vulnérabilité dans Adobe Flash | 2017-12-13T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-460 | Multiples vulnérabilités dans Xen | 2017-12-12T00:00:00.000000 | 2017-12-12T00:00:00.000000 |
| certfr-2017-avi-459 | Multiples vulnérabilités dans les produits Fortinet | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-11T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-457 | Multiples vulnérabilités dans SCADA Schneider Electric EcoStruxure Substation Operation | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-456 | Multiples vulnérabilités dans Microsoft Malware Protection Engine | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-455 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-454 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-453 | Vulnérabilité dans Fortinet FortiClient | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-452 | Multiples vulnérabilités dans OpenSSL | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-451 | Multiples vulnérabilités dans les produits Apple | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-450 | Multiples vulnérabilités dans Google Chrome | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-449 | Multiples vulnérabilités dans Google Android | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-448 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-05T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-447 | Multiples vulnérabilités dans SCADA Schneider Electric Pelco VideoXpert Enterprise | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |