Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112273 | 6.9 (v4.0) 5.3 (v3.1) | libtins through 4.6 Heap Out-of-Bounds Read via DNS::c… |
libtins |
libtins |
2026-10-19T13:55:20.684Z | 2026-10-22T02:51:25.912Z |
| cve-2026-112272 | 6.8 (v4.0) 5.5 (v3.1) | libdisplay-info 0.4.0 Heap Out-of-Bounds Read via Disp… |
emersion |
libdisplay-info |
2026-10-19T13:55:20.018Z | 2026-10-19T19:34:25.467Z |
| cve-2026-112271 | 6.8 (v4.0) 5.5 (v3.1) | libdisplay-info through 0.4.0 Heap Out-of-Bounds Read … |
emersion |
libdisplay-info |
2026-10-19T13:55:19.362Z | 2026-10-19T14:11:35.515Z |
| cve-2026-112270 | 7.1 (v4.0) 6.5 (v3.1) | SGLang through 0.5.22 Memory Exhaustion via Mooncake S… |
sgl-project |
sglang |
2026-10-19T13:55:18.694Z | 2026-10-19T16:34:55.350Z |
| cve-2026-112269 | 7.1 (v4.0) 6.5 (v3.1) | SGLang through 0.5.22 Memory Exhaustion via Unauthenti… |
sgl-project |
sglang |
2026-10-19T13:55:17.954Z | 2026-10-19T18:06:43.345Z |
| cve-2026-112268 | 5.3 (v4.0) 6.3 (v3.1) | sglang-router through 0.3.2 Authorization Bypass via M… |
sgl-project |
sglang-router |
2026-10-19T13:55:17.198Z | 2026-10-22T02:48:54.213Z |
| cve-2026-112267 | 6.9 (v4.0) 6.5 (v3.1) | SGLang through 0.5.22 SSRF via bootstrap_host and boot… |
sgl-project |
sglang |
2026-10-19T13:55:16.522Z | 2026-10-19T19:36:30.282Z |
| cve-2026-112266 | 8.2 (v4.0) 5.9 (v3.1) | SGLang through 0.5.22 Cross-Request Abort via rid Pref… |
sgl-project |
sglang |
2026-10-19T13:55:15.822Z | 2026-10-19T14:21:40.361Z |
| cve-2026-112265 | 8.3 (v4.0) 6.5 (v3.1) | LangBot through 4.11.0 Missing Lark/Feishu Webhook Aut… |
langbot-app |
LangBot |
2026-10-19T13:55:15.112Z | 2026-10-19T16:35:03.804Z |
| cve-2026-112264 | 8.5 (v4.0) 7.8 (v3.1) | BentoML through 1.4.39 Dockerfile Instruction Injectio… |
bentoml |
BentoML |
2026-10-19T13:55:14.430Z | 2026-10-19T18:08:19.307Z |
| cve-2026-112263 | 8.5 (v4.0) 7.8 (v3.1) | Television 0.15.0 through 0.15.9 OS Command Injection … |
alexpasmantier |
television |
2026-10-19T13:55:13.736Z | 2026-10-22T02:47:14.637Z |
| cve-2026-112262 | 7.1 (v4.0) 7.1 (v3.1) | RisingWave before 3.1.0 Missing Authorization via posi… |
risingwavelabs |
risingwave |
2026-10-19T13:55:13.053Z | 2026-10-19T19:30:17.015Z |
| cve-2026-111939 | 5.1 (v4.0) 4.6 (v3.1) | Frappe Helpdesk before 1.26.0 Authorization Bypass via… |
frappe |
helpdesk |
2026-10-19T13:55:12.366Z | 2026-10-19T14:23:03.987Z |
| cve-2026-111938 | 5.3 (v4.0) 4.3 (v3.1) | Frappe CRM before 1.74.0 Missing Authorization via add… |
frappe |
crm |
2026-10-19T13:55:11.692Z | 2026-10-19T16:35:11.497Z |
| cve-2026-111937 | 5.3 (v4.0) 5.4 (v3.1) | Frappe CRM before 1.81.2 Missing Authorization on CRM … |
frappe |
crm |
2026-10-19T13:55:10.989Z | 2026-10-19T18:11:17.821Z |
| cve-2026-111936 | 5.3 (v4.0) 4.3 (v3.1) | Sigma File Manager through 2.2.0 SSRF via Extension Do… |
aleksey-hoffman |
Sigma File Manager |
2026-10-19T13:55:10.311Z | 2026-10-22T02:46:37.174Z |
| cve-2026-111935 | 2.1 (v4.0) 2.6 (v3.1) | NoteGen through 0.38.3 Local File Disclosure via Chat … |
codexu |
NoteGen |
2026-10-19T13:55:09.563Z | 2026-10-19T18:58:39.107Z |
| cve-2026-111925 | 6.9 (v4.0) 5.3 (v3.1) | Mopidy before 4.0.5 Path Traversal via File Backend li… |
Mopidy |
Mopidy |
2026-10-19T13:55:08.874Z | 2026-10-19T14:24:41.987Z |
| cve-2026-111915 | 8.2 (v4.0) 5.9 (v3.1) | Yank Note before 3.93.1 Path Traversal via /api/help E… |
purocean |
Yank Note |
2026-10-19T13:55:08.190Z | 2026-10-19T16:35:17.856Z |
| cve-2026-111899 | 5.3 (v4.0) 4.3 (v3.1) | KitchenOwl through 0.7.10 SSRF via Recipe Import scrap… |
TomBursch |
kitchenowl |
2026-10-19T13:55:07.523Z | 2026-10-19T18:12:44.619Z |
| cve-2026-111883 | 5.3 (v4.0) 5.4 (v3.1) | Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset |
locustio |
locust |
2026-10-19T13:55:06.849Z | 2026-10-22T02:45:12.513Z |
| cve-2026-112145 | speaches-ai speaches Pyannote Diarization Model Loadin… |
speaches-ai |
speaches |
2026-10-19T13:45:17.561Z | 2026-10-22T02:43:07.609Z | |
| cve-2026-112144 | satya-vinay Events-Management-System project.sql file access |
satya-vinay |
Events-Management-System |
2026-10-19T13:30:20.857Z | 2026-10-19T14:25:40.803Z | |
| cve-2026-111828 | 4.3 (v3.1) | WordPress Classified Listing plugin <= 6.1.5 - Direct … |
Mamunur Rashid |
Classified Listing |
2026-10-19T13:29:02.276Z | 2026-10-19T18:13:06.617Z |
| cve-2026-112222 | 5.4 (v3.1) | WordPress Surfer plugin <= 1.8.0.744 - Broken Access C… |
Surfer |
Surfer |
2026-10-19T13:28:19.208Z | 2026-10-19T14:59:04.484Z |
| cve-2026-111829 | 6.5 (v3.1) | WordPress WP Mailster plugin <= 1.9.1.0 - Local File I… |
WP Mailster |
WP Mailster |
2026-10-19T13:27:57.467Z | 2026-10-19T18:14:19.288Z |
| cve-2026-110902 | 4.3 (v3.1) | WordPress Event Tickets plugin <= 5.30.1 - Insecure Di… |
Liquid Web / StellarWP |
Event Tickets |
2026-10-19T13:27:05.415Z | 2026-10-19T14:26:14.786Z |
| cve-2026-110008 | 4.2 (v3.1) | @fastify/oauth2 vulnerable to Login CSRF via OAuth sta… |
@fastify/oauth2 |
@fastify/oauth2 |
2026-10-19T13:24:27.988Z | 2026-10-19T14:26:45.991Z |
| cve-2026-112143 | satya-vinay Events-Management-System missing authentication |
satya-vinay |
Events-Management-System |
2026-10-19T13:15:20.213Z | 2026-10-19T16:35:25.242Z | |
| cve-2026-8168 | 7.1 (v4.0) | Denial-of-service vulnerability in the SVG parser and … |
qt |
qt |
2026-10-19T13:08:14.544Z | 2026-10-19T14:27:15.747Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-206 | Multiples vulnérabilités dans Microsoft Edge | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-205 | Multiples vulnérabilités dans Adobe Flash Player | 2017-07-12T00:00:00.000000 | 2017-07-12T00:00:00.000000 |
| certfr-2017-avi-204 | Multiples vulnérabilités dans PHP | 2017-07-07T00:00:00.000000 | 2017-07-07T00:00:00.000000 |
| certfr-2017-avi-203 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-07-06T00:00:00.000000 | 2017-07-06T00:00:00.000000 |
| certfr-2017-avi-202 | Multiples vulnérabilités dans les produits Cisco | 2017-07-06T00:00:00.000000 | 2017-07-06T00:00:00.000000 |
| certfr-2017-avi-201 | Multiples vulnérabilités dans Joomla! | 2017-07-06T00:00:00.000000 | 2017-07-06T00:00:00.000000 |
| certfr-2017-avi-200 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-07-05T00:00:00.000000 | 2017-07-05T00:00:00.000000 |
| certfr-2017-avi-199 | Vulnérabilité dans ISC BIND | 2017-07-04T00:00:00.000000 | 2017-07-04T00:00:00.000000 |
| certfr-2017-avi-198 | Multiples vulnérabilités dans SCADA les produits Schneider | 2017-07-03T00:00:00.000000 | 2017-07-03T00:00:00.000000 |
| certfr-2017-avi-197 | Multiples vulnérabilités dans SCADA les produits Siemens | 2017-07-03T00:00:00.000000 | 2017-07-03T00:00:00.000000 |
| certfr-2017-avi-196 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-06-29T00:00:00.000000 | 2017-06-30T00:00:00.000000 |
| certfr-2017-avi-195 | Multiples vulnérabilités dans Citrix XenServer | 2017-06-28T00:00:00.000000 | 2017-06-28T00:00:00.000000 |
| certfr-2017-avi-194 | Multiples vulnérabilités dans les produits Microsoft | 2017-06-26T00:00:00.000000 | 2017-06-26T00:00:00.000000 |
| certfr-2017-avi-193 | Vulnérabilité dans SCADA Siemens XHQ | 2017-06-26T00:00:00.000000 | 2017-06-26T00:00:00.000000 |
| certfr-2017-avi-192 | Multiples vulnérabilités dans Drupal | 2017-06-22T00:00:00.000000 | 2017-06-22T00:00:00.000000 |
| certfr-2017-avi-191 | Multiples vulnérabilités dans les produits Cisco | 2017-06-22T00:00:00.000000 | 2017-06-22T00:00:00.000000 |
| certfr-2017-avi-190 | Multiples vulnérabilités dans Xen | 2017-06-21T00:00:00.000000 | 2017-06-21T00:00:00.000000 |
| certfr-2017-avi-189 | Vulnérabilité dans SCADA Siemens SIMATIC CP 44x-1 RNA modules | 2017-06-21T00:00:00.000000 | 2017-06-21T00:00:00.000000 |
| certfr-2017-avi-188 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-06-20T00:00:00.000000 | 2017-06-21T00:00:00.000000 |
| certfr-2017-avi-187 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2017-06-20T00:00:00.000000 | 2017-06-20T00:00:00.000000 |
| certfr-2017-avi-186 | Multiples vulnérabilités dans Oracle Solaris | 2017-06-20T00:00:00.000000 | 2017-06-20T00:00:00.000000 |
| certfr-2017-avi-185 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-06-20T00:00:00.000000 | 2017-06-22T00:00:00.000000 |
| certfr-2017-avi-184 | Multiples vulnérabilités dans ISC BIND | 2017-06-16T00:00:00.000000 | 2017-06-16T00:00:00.000000 |
| certfr-2017-avi-183 | Multiples vulnérabilités dans Google Chrome | 2017-06-16T00:00:00.000000 | 2017-06-16T00:00:00.000000 |
| certfr-2017-avi-182 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-06-15T00:00:00.000000 | 2017-06-15T00:00:00.000000 |
| certfr-2017-avi-181 | Multiples vulnérabilités dans les systèmes d'exploitation Microsoft Windows obsolètes | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-180 | Multiples vulnérabilités dans Microsoft Windows | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-179 | Multiples vulnérabilités dans Microsoft Edge | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-178 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |
| certfr-2017-avi-177 | Multiples vulnérabilités dans Microsoft Office | 2017-06-14T00:00:00.000000 | 2017-06-14T00:00:00.000000 |