Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112390 | Pillow: Infinite loop in MIC n_frames when the embedded TIFF |
python-pillow |
Pillow |
2026-10-19T20:35:39.189Z | 2026-10-20T15:02:38.367Z | |
| cve-2026-112300 | DiffSK configobj __init__.py _sectionmarker redos |
DiffSK |
configobj |
2026-10-19T20:30:18.020Z | 2026-10-20T16:09:34.927Z | |
| cve-2026-112299 | smrealms smr Album Website AlbumEditProcessor.php isUr… |
smrealms |
smr |
2026-10-19T20:15:27.596Z | 2026-10-20T15:04:50.594Z | |
| cve-2026-111766 | markdown-it: Quadratic-time denial of service in inlin… |
markdown-it |
markdown-it |
2026-10-19T19:47:46.488Z | 2026-10-26T17:37:11.818Z | |
| cve-2026-112297 | ptbsare anx-calibre-manager LLM Configuration llm.py L… |
ptbsare |
anx-calibre-manager |
2026-10-19T19:45:05.618Z | 2026-10-22T21:03:05.179Z | |
| cve-2026-71169 | 7 (v3.1) | Dell Application Store, versions prior to 26.05.0… |
Dell |
Application Store |
2026-10-19T19:41:05.089Z | 2026-10-20T16:09:41.284Z |
| cve-2026-82166 | 8.8 (v3.1) | Dell Application Store, versions prior to 26.05.0… |
Dell |
Application Store |
2026-10-19T19:38:44.336Z | 2026-10-19T21:19:32.343Z |
| cve-2026-71170 | 7.8 (v3.1) | Dell Application Store, versions prior to 26.05.0… |
Dell |
Application Store |
2026-10-19T19:35:38.819Z | 2026-10-20T15:06:55.624Z |
| cve-2026-112254 | agit8or1 clientst0r Property URL Importer property_url… |
agit8or1 |
clientst0r |
2026-10-19T19:30:12.663Z | 2026-10-19T21:20:40.728Z | |
| cve-2026-112260 | 7.1 (v3.1) | Gimp: gimp: heap out-of-bounds read in xcf text-layer … |
Red Hat |
Red Hat Enterprise Linux 9 |
2026-10-19T19:24:49.017Z | 2026-11-04T21:54:55.483Z |
| cve-2026-112782 | 8.7 (v4.0) 7.5 (v3.1) | Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypas… |
getgrav |
grav |
2026-10-19T19:10:58.093Z | 2026-10-20T16:09:47.734Z |
| cve-2026-112781 | 8.7 (v4.0) 6.5 (v3.1) | Grav 2.0.0 before 2.2.2 Information Disclosure via For… |
getgrav |
grav |
2026-10-19T19:10:57.417Z | 2026-10-20T15:07:46.991Z |
| cve-2026-112780 | 9.3 (v4.0) 8.8 (v3.1) | Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call … |
getgrav |
grav |
2026-10-19T19:10:56.708Z | 2026-10-22T21:02:32.455Z |
| cve-2026-112779 | 9.3 (v4.0) 9.8 (v3.1) | Grav API Plugin before 1.0.42 Cache Exhaustion and Pag… |
getgrav |
grav-plugin-api |
2026-10-19T19:10:55.987Z | 2026-10-20T14:14:32.480Z |
| cve-2026-112778 | 6.4 (v4.0) | Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namesp… |
traefik |
traefik |
2026-10-19T19:10:55.264Z | 2026-10-19T21:16:12.196Z |
| cve-2026-112777 | 8.7 (v4.0) 7.2 (v3.1) | Craft CMS before 4.18.8 and 5.11.0 Twig create() Block… |
craftcms |
cms |
2026-10-19T19:10:54.567Z | 2026-10-20T16:09:54.518Z |
| cve-2026-112776 | 9.3 (v4.0) 9.8 (v3.1) | Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypas… |
craftcms |
cms |
2026-10-19T19:10:53.896Z | 2026-10-20T15:09:02.690Z |
| cve-2026-112775 | 8.7 (v4.0) 7.5 (v3.1) | Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse … |
craftcms |
cms |
2026-10-19T19:10:53.219Z | 2026-10-22T21:01:53.422Z |
| cve-2026-112774 | 8.7 (v4.0) 7.2 (v3.1) | Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlo… |
craftcms |
cms |
2026-10-19T19:10:52.576Z | 2026-10-20T14:36:01.519Z |
| cve-2026-112773 | 8.7 (v4.0) 8.8 (v3.1) | Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Beh… |
craftcms |
cms |
2026-10-19T19:10:51.883Z | 2026-10-19T21:23:32.874Z |
| cve-2026-112772 | 8.7 (v4.0) 8.8 (v3.1) | Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeTy… |
craftcms |
cms |
2026-10-19T19:10:51.181Z | 2026-10-20T16:10:01.251Z |
| cve-2026-112771 | 7.1 (v4.0) 6.5 (v3.1) | Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowl… |
craftcms |
cms |
2026-10-19T19:10:50.470Z | 2026-10-20T15:11:08.927Z |
| cve-2026-112770 | 8.7 (v4.0) 8.8 (v3.1) | Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE v… |
craftcms |
cms |
2026-10-19T19:10:49.743Z | 2026-10-22T20:59:49.756Z |
| cve-2026-112769 | 2.3 (v4.0) | Parse Server before 8.6.98 and 9.x before 9.10.3-alpha… |
parse-community |
parse-server |
2026-10-19T19:10:49.061Z | 2026-10-20T15:35:25.264Z |
| cve-2026-112768 | 6.9 (v4.0) | Parse Server before 8.6.99 and 9.x before 9.10.3-alpha… |
parse-community |
parse-server |
2026-10-19T19:10:48.394Z | 2026-10-19T21:24:16.538Z |
| cve-2026-112252 | Wuxi Wubang Security Software Wubang Five-in-One Safet… |
Wuxi Wubang Security Software |
Wubang Five-in-One Safety Production Management Information System |
2026-10-19T19:00:17.701Z | 2026-10-20T16:10:10.887Z | |
| cve-2026-112259 | 5.5 (v3.1) | Gimp: gimp: null pointer dereference in swatchbooker (… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-19T18:42:52.539Z | 2026-11-05T16:28:23.866Z |
| cve-2026-112251 | antoinersx clawhost Reverse Proxy reverseProxy.ts hand… |
antoinersx |
clawhost |
2026-10-19T18:30:17.553Z | 2026-10-19T18:49:54.959Z | |
| cve-2026-109437 | 9.2 (v4.0) 9.8 (v3.1) | Cognition < 0.13.0 Unauthenticated RCE via Local Shell… |
CognicellAI |
Cognition |
2026-10-19T18:22:57.431Z | 2026-10-23T13:28:30.752Z |
| cve-2026-112249 | grandnode grandnode2 Product Description Product.Layou… |
grandnode |
grandnode2 |
2026-10-19T18:15:20.969Z | 2026-10-22T20:57:30.197Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-416 | Vulnérabilité dans Cisco Voice Operating System | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-415 | Vulnérabilité dans Adobe Shockwave Player | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-414 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-413 | Multiples vulnérabilités dans Adobe Flash Player | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-412 | Multiples vulnérabilités dans Mozilla Firefox | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-411 | Multiples vulnérabilités dans les produits Microsoft | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-410 | Multiples vulnérabilités dans Microsoft .Net | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-409 | Multiples vulnérabilités dans Microsoft Windows | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-408 | Multiples vulnérabilités dans Microsoft Office | 2017-11-15T00:00:00.000000 | 2017-12-27T00:00:00.000000 |
| certfr-2017-avi-407 | Multiples vulnérabilités dans Microsoft Edge | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-406 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-11-15T00:00:00.000000 | 2017-11-15T00:00:00.000000 |
| certfr-2017-avi-405 | Vulnérabilité dans F5 BIG-IP | 2017-11-14T00:00:00.000000 | 2017-11-14T00:00:00.000000 |
| certfr-2017-avi-404 | Multiples vulnérabilités dans VMware vCenter Server | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-403 | Multiples vulnérabilités dans Apple iOS | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-402 | Vulnérabilité dans SCADA Schneider Electric InduSoft Web Studio et InTouch Machine Edition | 2017-11-10T00:00:00.000000 | 2017-11-10T00:00:00.000000 |
| certfr-2017-avi-401 | Multiples vulnérabilités dans Asterisk | 2017-11-09T00:00:00.000000 | 2017-11-09T00:00:00.000000 |
| certfr-2017-avi-400 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-09T00:00:00.000000 | 2017-11-09T00:00:00.000000 |
| certfr-2017-avi-399 | Vulnérabilité dans Schneider Electric EcoStruxure Power Monitoring Expert et EcoStruxure Building Operation | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-398 | Multiples vulnérabilités dans NVIDIA Shield Tablet | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-397 | Multiples vulnérabilités dans Magento | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-396 | Multiples vulnérabilités dans Joomla! | 2017-11-08T00:00:00.000000 | 2017-11-08T00:00:00.000000 |
| certfr-2017-avi-395 | Multiples vulnérabilités dans Google Chrome | 2017-11-07T00:00:00.000000 | 2017-11-07T00:00:00.000000 |
| certfr-2017-avi-394 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-11-07T00:00:00.000000 | 2017-11-07T00:00:00.000000 |
| certfr-2017-avi-393 | Vulnérabilité dans Cisco IOS XE | 2017-11-06T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2017-avi-392 | Multiples vulnérabilités dans Fortinet FortiOS | 2017-11-06T00:00:00.000000 | 2017-11-06T00:00:00.000000 |
| certfr-2017-avi-391 | Multiples vulnérabilités dans OpenSSL | 2017-11-03T00:00:00.000000 | 2017-11-03T00:00:00.000000 |
| certfr-2017-avi-390 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-03T00:00:00.000000 | 2017-11-03T00:00:00.000000 |
| certfr-2017-avi-389 | Multiples vulnérabilités dans les produits Cisco | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-388 | Vulnérabilité dans WordPress | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |
| certfr-2017-avi-387 | Vulnérabilité dans Fortinet FortiClient | 2017-11-02T00:00:00.000000 | 2017-11-02T00:00:00.000000 |