Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112891 | Pillow: Quadratic GIF comment copying during save |
python-pillow |
Pillow |
2026-10-19T21:33:32.180Z | 2026-10-20T13:54:10.370Z | |
| cve-2026-112406 | Pillow: Infinite loop in PdfParser.rewrite_pages on pa… |
python-pillow |
Pillow |
2026-10-19T21:31:49.946Z | 2026-10-20T16:08:57.551Z | |
| cve-2026-112360 | Netis EAP930 CGI Endpoint debug return200 backdoor |
Netis |
EAP930 |
2026-10-19T21:30:19.739Z | 2026-10-20T16:09:08.320Z | |
| cve-2026-112405 | Pillow: NULL pointer dereference in Image.merge via an… |
python-pillow |
Pillow |
2026-10-19T21:29:53.515Z | 2026-10-20T15:56:29.299Z | |
| cve-2026-112404 | Pillow: OOB read in TiffDecode.c tile and RGBA paths l… |
python-pillow |
Pillow |
2026-10-19T21:27:56.705Z | 2026-10-28T15:18:51.938Z | |
| cve-2026-105815 | 7.1 (v4.0) | Credential Material Exposure Leading to Unauthorized S… |
TP-Link Systems Inc. |
Tapo C210 v3.6 |
2026-10-19T21:27:02.599Z | 2026-10-20T19:22:38.887Z |
| cve-2026-105814 | 5.3 (v4.0) | Order-Dependent Authentication Bypass in the DS JSON A… |
TP-Link Systems Inc. |
Tapo C210 v3.6 |
2026-10-19T21:26:57.630Z | 2026-10-20T19:23:12.975Z |
| cve-2026-112403 | Pillow: Heap buffer overflow in ImagingJpegDecode |
python-pillow |
Pillow |
2026-10-19T21:22:21.077Z | 2026-10-22T21:08:58.141Z | |
| cve-2026-112402 | Pillow: Double free in ImagingScaleAffine on calloc fa… |
python-pillow |
Pillow |
2026-10-19T21:18:57.027Z | 2026-10-19T21:37:35.120Z | |
| cve-2026-112397 | Pillow: Out-of-bounds access in _imagingmorph on a zer… |
python-pillow |
Pillow |
2026-10-19T21:17:35.684Z | 2026-10-19T21:38:18.176Z | |
| cve-2026-112392 | Pillow: NULL dereference in ImagingExpand via rank fil… |
python-pillow |
Pillow |
2026-10-19T21:17:18.908Z | 2026-10-20T14:50:31.632Z | |
| cve-2026-112401 | Pillow: Quadratic GIF comment concatenation allows DoS… |
python-pillow |
Pillow |
2026-10-19T21:15:21.484Z | 2026-10-20T16:09:15.499Z | |
| cve-2026-112358 | TiBillet Lespass APIv1 serializers.py get_img_from_url… |
TiBillet |
Lespass |
2026-10-19T21:15:15.519Z | 2026-10-20T14:58:56.991Z | |
| cve-2026-112400 | Pillow: GIF seek keeps rejected size after Decompressi… |
python-pillow |
Pillow |
2026-10-19T21:12:37.401Z | 2026-10-20T14:59:57.147Z | |
| cve-2026-112399 | Pillow: APNG background disposal allocates full canvas… |
python-pillow |
Pillow |
2026-10-19T21:10:11.266Z | 2026-10-28T15:21:14.748Z | |
| cve-2026-112398 | Pillow: Heap buffer overflow in FlashPix (FPX) JPEG de… |
python-pillow |
Pillow |
2026-10-19T21:07:25.229Z | 2026-10-22T21:06:17.285Z | |
| cve-2026-53995 | 8.8 (v4.0) 8.2 (v3.1) | MLflow 3.17.1 and prior Path Traversal via Trace ID API |
mlflow |
mlflow |
2026-10-19T21:05:16.530Z | 2026-11-02T16:11:13.675Z |
| cve-2026-112396 | Pillow: Heap use-after-free when encoding TIFF to an i… |
python-pillow |
Pillow |
2026-10-19T21:02:15.197Z | 2026-10-20T16:09:21.913Z | |
| cve-2026-112302 | kiwilan php-archive Extraction ArchiveZip.php extract … |
kiwilan |
php-archive |
2026-10-19T21:00:23.649Z | 2026-10-22T21:05:07.719Z | |
| cve-2026-112395 | Pillow tiled-TIFF decoder reads past tile buffer in co… |
python-pillow |
Pillow |
2026-10-19T20:59:15.098Z | 2026-10-28T15:24:49.805Z | |
| cve-2026-111946 | N/A | Plack::Middleware::ETag versions from 0.04 before 0.06… |
|
|
2026-10-19T20:54:56.964Z | 2026-10-29T17:21:25.384Z |
| cve-2026-112394 | Pillow: P;2L and P;4L decoders may read 1 to 3 bytes p… |
python-pillow |
Pillow |
2026-10-19T20:48:28.141Z | 2026-10-22T21:04:15.766Z | |
| cve-2026-112393 | Pillow: Heap buffer overflow in _tiffWriteProc when sa… |
python-pillow |
Pillow |
2026-10-19T20:46:40.784Z | 2026-10-19T21:17:41.571Z | |
| cve-2026-112301 | orbitale imagemagick-php Command.php font os command i… |
orbitale |
imagemagick-php |
2026-10-19T20:45:16.274Z | 2026-10-19T21:18:21.595Z | |
| cve-2026-112391 | Pillow: PdfParser can recurse without limit in get_val… |
python-pillow |
Pillow |
2026-10-19T20:40:36.285Z | 2026-10-20T16:09:28.294Z | |
| cve-2026-76788 | 8.8 (v3.1) | Stack out-of-bounds write in the OSDP Control Panel re… |
zephyrproject |
zephyr |
2026-10-19T20:39:22.074Z | 2026-11-04T05:01:12.497Z |
| cve-2026-76787 | 5.9 (v3.1) | NULL pointer dereference in the UpdateHub FOTA client … |
zephyrproject |
zephyr |
2026-10-19T20:39:20.425Z | 2026-11-04T05:01:11.074Z |
| cve-2026-112390 | Pillow: Infinite loop in MIC n_frames when the embedded TIFF |
python-pillow |
Pillow |
2026-10-19T20:35:39.189Z | 2026-10-20T15:02:38.367Z | |
| cve-2026-112300 | DiffSK configobj __init__.py _sectionmarker redos |
DiffSK |
configobj |
2026-10-19T20:30:18.020Z | 2026-10-20T16:09:34.927Z | |
| cve-2026-112299 | smrealms smr Album Website AlbumEditProcessor.php isUr… |
smrealms |
smr |
2026-10-19T20:15:27.596Z | 2026-10-20T15:04:50.594Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-446 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-445 | Multiples vulnérabilités dans Apache Struts 2 | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-444 | Multiples vulnérabilités dans Citrix XenServer | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-443 | Vulnérabilité dans Asterisk | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-442 | Multiples vulnérabilités dans Wireshark | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-441 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-440 | Vulnérabilité dans le noyau Linux de RedHat | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-439 | Multiples vulnérabilités dans PHP | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-438 | Multiples vulnérabilités dans WordPress | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-437 | Multiples vulnérabilités dans SCADA Siemens SWT3000 | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-436 | Multiples vulnérabilités dans Cisco WebEx Network Recording Player | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-435 | Vulnérabilité dans Apple macOS High Sierra | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-434 | Multiples vulnérabilités dans Magento | 2017-11-29T00:00:00.000000 | 2017-11-29T00:00:00.000000 |
| certfr-2017-avi-433 | Multiples vulnérabilités dans Xen | 2017-11-28T00:00:00.000000 | 2017-11-28T00:00:00.000000 |
| certfr-2017-avi-430 | Vulnérabilité dans Cisco Unified Computing System Manager et Firepower 9000 | 2017-11-28T00:00:00.000000 | 2017-11-28T00:00:00.000000 |
| certfr-2017-avi-432 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-27T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-431 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-11-27T00:00:00.000000 | 2017-11-27T00:00:00.000000 |
| certfr-2017-avi-429 | Vulnérabilité dans Fortinet FortiOS | 2017-11-24T00:00:00.000000 | 2017-11-24T00:00:00.000000 |
| certfr-2017-avi-428 | Vulnérabilité dans SCADA les produits Siemens | 2017-11-24T00:00:00.000000 | 2017-11-24T00:00:00.000000 |
| certfr-2017-avi-427 | Multiples vulnérabilités dans PHP | 2017-11-24T00:00:00.000000 | 2017-11-24T00:00:00.000000 |
| certfr-2017-avi-426 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-11-22T00:00:00.000000 | 2017-11-22T00:00:00.000000 |
| certfr-2017-avi-425 | Multiples vulnérabilités dans Samba | 2017-11-21T00:00:00.000000 | 2017-11-21T00:00:00.000000 |
| certfr-2017-avi-424 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-11-21T00:00:00.000000 | 2017-11-22T00:00:00.000000 |
| certfr-2017-avi-423 | Multiples vulnérabilités dans les microgiciels Intel | 2017-11-21T00:00:00.000000 | 2017-11-21T00:00:00.000000 |
| certfr-2017-avi-422 | Vulnérabilité dans Moodle | 2017-11-20T00:00:00.000000 | 2017-11-20T00:00:00.000000 |
| certfr-2017-avi-421 | Vulnérabilité dans F5 BIG-IP | 2017-11-20T00:00:00.000000 | 2017-11-20T00:00:00.000000 |
| certfr-2017-avi-420 | Vulnérabilité dans Fortinet FortiWeb | 2017-11-20T00:00:00.000000 | 2017-11-20T00:00:00.000000 |
| certfr-2017-avi-419 | Multiples vulnérabilités dans Oracle Tuxedo | 2017-11-17T00:00:00.000000 | 2017-11-17T00:00:00.000000 |
| certfr-2017-avi-418 | Multiples vulnérabilités dans Apple iOS | 2017-11-17T00:00:00.000000 | 2017-11-17T00:00:00.000000 |
| certfr-2017-avi-417 | Multiples vulnérabilités dans VMware Workstation, Fusion et Horizon View Client | 2017-11-17T00:00:00.000000 | 2017-11-17T00:00:00.000000 |