Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114501 | Pillow: Arrow export leaks stale heap memory when PILL… |
python-pillow |
Pillow |
2026-10-21T21:17:09.748Z | 2026-10-30T16:10:03.645Z | |
| cve-2026-119545 | 6.9 (v4.0) 5.3 (v3.1) | Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via O… |
forgejo |
forgejo |
2026-10-30T11:30:58.642Z | 2026-10-30T16:09:53.289Z |
| cve-2026-118781 | Forge: Denial of Service via infinite loop in BigInteg… |
digitalbazaar |
forge |
2026-10-29T18:49:28.661Z | 2026-10-30T16:09:30.153Z | |
| cve-2026-119188 | Forge: Denial of service in TLS record processing via … |
digitalbazaar |
forge |
2026-10-29T19:21:27.347Z | 2026-10-30T16:09:23.948Z | |
| cve-2026-119193 | PHPUnit vulnerable to code execution by other local us… |
sebastianbergmann |
phpunit |
2026-10-29T19:35:36.052Z | 2026-10-30T16:09:03.726Z | |
| cve-2026-119197 | pyasn1: Quadratic-complexity denial of service in bina… |
pyasn1 |
pyasn1 |
2026-10-29T19:48:52.470Z | 2026-10-30T16:08:50.120Z | |
| cve-2026-92092 | 7.4 (v3.1) | Openshift-ansible: openshift-ansible: installer contai… |
Red Hat |
Red Hat OpenShift Container Platform 4 |
2026-10-29T19:51:44.996Z | 2026-10-30T16:08:35.536Z |
| cve-2026-96636 | Pillow: Decompression-bomb protection bypass via multi… |
python-pillow |
Pillow |
2026-10-21T21:05:20.850Z | 2026-10-30T16:08:33.388Z | |
| cve-2026-61789 | DBHub: MySQL and MariaDB comment interpretation bypass… |
bytebase |
dbhub |
2026-10-30T16:08:24.224Z | 2026-10-30T16:08:24.224Z | |
| cve-2026-119201 | Nuxt dev server exposes generated appSecret through Vi… |
nuxt |
nuxt |
2026-10-29T20:21:27.895Z | 2026-10-30T16:08:10.079Z | |
| cve-2026-8374 | 8.5 (v4.0) | Misuse and Misconfiguration of Cryptographic Algorithm… |
SwitchBot |
SwitchBot Lock |
2026-10-09T12:09:07.506Z | 2026-10-30T16:07:44.121Z |
| cve-2026-96642 | Pillow: TarIO negative size field causes infinite CPU-… |
python-pillow |
Pillow |
2026-10-21T20:49:56.989Z | 2026-10-30T16:07:09.659Z | |
| cve-2026-119426 | 7.7 (v4.0) 7.5 (v3.1) | phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJA… |
phpMyAdmin |
phpMyAdmin |
2026-10-30T11:30:55.817Z | 2026-10-30T16:06:24.241Z |
| cve-2026-56836 | PraisonAI recipe serve Typer command bypasses the non-… |
MervinPraison |
PraisonAI |
2026-10-23T11:57:28.192Z | 2026-10-30T16:05:35.511Z | |
| cve-2026-119422 | 8.2 (v4.0) 5.9 (v3.1) | Hyperswitch before 1.128.0 Webhook Authentication Bypa… |
juspay |
hyperswitch |
2026-10-30T11:30:52.947Z | 2026-10-30T16:05:29.768Z |
| cve-2026-119418 | 9.2 (v4.0) 8.1 (v3.1) | CakePHP through 5.4.3 SQL Injection via WindowExpressi… |
cakephp |
cakephp |
2026-10-30T11:30:50.158Z | 2026-10-30T16:04:14.569Z |
| cve-2026-57146 | PraisonAI A2U incomplete authentication fix leaves cur… |
MervinPraison |
PraisonAI |
2026-10-23T12:08:16.479Z | 2026-10-30T16:03:24.728Z | |
| cve-2026-119379 | 8.5 (v4.0) 7.8 (v3.1) | SQLite before 3.54.0 Heap Buffer Overflow via Session … |
SQLite |
SQLite |
2026-10-30T11:30:43.335Z | 2026-10-30T16:02:09.331Z |
| cve-2026-56832 | PraisonAI DiscordApproval accepts unrelated channel me… |
MervinPraison |
PraisonAI |
2026-10-23T11:55:53.084Z | 2026-10-30T16:01:44.271Z | |
| cve-2026-119205 | pypdf: Possible infinite loop when cloning dictionaries |
py-pdf |
pypdf |
2026-10-29T20:35:33.902Z | 2026-10-30T16:00:42.997Z | |
| cve-2026-119209 | pypdf: Possible large memory usage when parsing cross-… |
py-pdf |
pypdf |
2026-10-29T20:43:03.072Z | 2026-10-30T16:00:30.516Z | |
| cve-2026-57117 | PraisonAI: Compute-bridged file tools allow shell comm… |
MervinPraison |
PraisonAI |
2026-10-23T12:10:18.920Z | 2026-10-30T16:00:13.763Z | |
| cve-2026-119278 | MariaDB Connector/J: Rogue server can crash the client… |
mariadb-corporation |
mariadb-connector-j |
2026-10-29T20:50:35.474Z | 2026-10-30T16:00:11.050Z | |
| cve-2026-61576 | Lightdash: Unauthenticated dbt Cloud webhook with path… |
lightdash |
lightdash |
2026-10-29T21:00:35.691Z | 2026-10-30T15:59:44.311Z | |
| cve-2026-61645 | Docat has Arbitrary File Upload exists in Upload API |
docat-org |
docat |
2026-10-29T21:17:37.532Z | 2026-10-30T15:59:29.551Z | |
| cve-2026-61707 | SOCFortress CoPilot: Stored case-report template injec… |
socfortress |
CoPilot |
2026-10-29T21:25:01.101Z | 2026-10-30T15:59:08.843Z | |
| cve-2026-119286 | GraphQL-core: Denial of service via memory leak in abo… |
graphql-python |
graphql-core |
2026-10-29T21:38:43.633Z | 2026-10-30T15:58:44.342Z | |
| cve-2026-113795 | pypdf: Possible large memory usage for streams with mu… |
py-pdf |
pypdf |
2026-10-21T16:01:22.314Z | 2026-10-30T15:58:32.072Z | |
| cve-2026-112922 | 3.3 (v3.1) | Ghostscript: out-of-bounds read in ghostscript shade_n… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-30T01:24:32.059Z | 2026-10-30T15:58:20.193Z |
| cve-2026-118500 | Cool FormKit Lite <= 2.7.9 - Authenticated (Contributo… |
coolplugins |
Cool FormKit Lite – Advanced Form Builder for Elementor |
2026-10-30T05:35:51.355Z | 2026-10-30T15:57:46.333Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-avi-065 | Vulnérabilité dans la stratégie de groupe (GPO) de Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-064 | Vulnérabilité dans Microsoft Office | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-063 | Multiples vulnérabilités dans Microsoft Office | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-062 | Vulnérabilité dans la stratégie de groupe (GPO) de Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-061 | Multiples vulnérabilités dans le pilote en mode noyau Microsoft Windows | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-060 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2015-02-11T00:00:00.000000 | 2015-02-11T00:00:00.000000 |
| certfr-2015-avi-059 | Vulnérabilité dans Moodle | 2015-02-09T00:00:00.000000 | 2015-02-09T00:00:00.000000 |
| certfr-2015-avi-058 | Multiples vulnérabilités dans Google Chrome | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-057 | Multiples vulnérabilités dans les produits IBM | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-056 | Vulnérabilité dans Cisco WebEx Meetings Server | 2015-02-06T00:00:00.000000 | 2015-02-06T00:00:00.000000 |
| certfr-2015-avi-055 | Vulnérabilité dans Adobe Flash Player | 2015-02-05T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| certfr-2015-avi-054 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2015-02-04T00:00:00.000000 | 2015-02-04T00:00:00.000000 |
| certfr-2015-avi-053 | Multiples vulnérabilités dans VLC Media Player | 2015-02-03T00:00:00.000000 | 2015-02-03T00:00:00.000000 |
| certfr-2015-avi-052 | Multiples vulnérabilités dans IBM Tivoli Storage Manager | 2015-02-03T00:00:00.000000 | 2015-02-03T00:00:00.000000 |
| certfr-2015-avi-051 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-050 | Multiples vulnérabilités dans les produits IBM | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-049 | Vulnérabilité dans EMC Avamar | 2015-02-02T00:00:00.000000 | 2015-02-02T00:00:00.000000 |
| certfr-2015-avi-048 | Vulnérabilité dans VMware VDP | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-047 | Vulnérabilité dans Xen | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-046 | Multiples vulnérabilités dans Asterisk | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-045 | Vulnérabilité dans Cisco Prime Service Catalog | 2015-01-30T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2015-avi-043 | Vulnérabilité dans glibc | 2015-01-28T00:00:00.000000 | 2015-01-29T00:00:00.000000 |
| certfr-2015-avi-044 | Multiples vulnérabilités dans VMware | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-042 | Multiples vulnérabilités dans Apple iOS | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-041 | Multiples vulnérabilités dans Apple Safari | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-040 | Multiples vulnérabilités dans Apple OS X | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-039 | Multiples vulnérabilités dans Adobe Flash Player | 2015-01-28T00:00:00.000000 | 2015-01-28T00:00:00.000000 |
| certfr-2015-avi-038 | Vulnérabilité dans les produits BlueCoat | 2015-01-26T00:00:00.000000 | 2015-01-26T00:00:00.000000 |
| certfr-2015-avi-037 | Vulnérabilité dans Adobe Flash Player | 2015-01-22T00:00:00.000000 | 2015-01-22T00:00:00.000000 |
| certfr-2015-avi-036 | Multiples vulnérabilités dans Google Chrome | 2015-01-22T00:00:00.000000 | 2015-01-22T00:00:00.000000 |