Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105038 | 9.8 (v3.1) | EnergizeLab Eilik Unauthenticated AI Model Administrat… |
EnergizeLab |
FastAPI AI inference server |
2026-10-15T20:43:30.618Z | 2026-10-16T19:54:32.126Z |
| cve-2026-105037 | 9.9 (v3.1) | EnergizeLab Station Middleware Authenticated Path Trav… |
EnergizeLab |
station-middleware |
2026-10-15T20:43:13.599Z | 2026-10-16T19:53:45.885Z |
| cve-2026-105036 | 7.5 (v3.1) | EnergizeLab Firmware Updates Downloaded over HTTP With… |
EnergizeLab |
Robot firmware (mode 104000) |
2026-10-15T20:43:04.229Z | 2026-10-16T19:53:00.841Z |
| cve-2026-105035 | 7.8 (v3.1) | EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key |
EnergizeLab |
FirmwareUpdater |
2026-10-15T20:42:53.222Z | 2026-10-16T19:51:58.826Z |
| cve-2026-105034 | 8.2 (v3.1) | EnergizeLab Eilik Unauthenticated Device-Token Issuanc… |
EnergizeLab |
NestJS auth service |
2026-10-15T20:42:42.975Z | 2026-10-16T19:50:56.544Z |
| cve-2026-105033 | 8.8 (v3.1) | EnergizeLab AI Station Default Root Credentials with S… |
EnergizeLab |
AI Station firmware (RK3562) |
2026-10-15T20:42:34.038Z | 2026-10-16T19:50:15.092Z |
| cve-2026-105032 | 9.1 (v3.1) | EnergizeLab Eilik AI Skill Upload Unauthenticated Path… |
EnergizeLab |
FastAPI AI inference server |
2026-10-15T20:42:04.726Z | 2026-10-16T19:48:56.951Z |
| cve-2026-102764 | 9.3 (v4.0) | Improper Origin Validation in Internal Messaging Compo… |
BeyondTrust |
Remote Support |
2026-10-15T20:30:32.240Z | 2026-10-17T03:55:27.214Z |
| cve-2026-104198 | ZoneMinder failed token handling bypasses web authentication |
ZoneMinder |
zoneminder |
2026-10-15T19:48:52.831Z | 2026-10-15T20:34:55.708Z | |
| cve-2026-108126 | 6 (v4.0) | temporal-proxy payload decryption is not bound to the … |
Temporal Technologies, Inc. |
temporal-proxy |
2026-10-15T19:09:30.743Z | 2026-10-16T15:20:20.801Z |
| cve-2026-45165 | 8.6 (v4.0) | Idira Secrets Manager (Self-Hosted): Improper Authoriz… |
Palo Alto Networks |
Idira Secrets Manager (Self-Hosted) |
2026-10-15T19:00:55.521Z | 2026-10-15T20:23:40.239Z |
| cve-2026-111172 | 6 (v4.0) 5.3 (v3.1) | @casl/ability 6.7.5 before 7.0.2 Prototype Pollution v… |
stalniy |
@casl/ability |
2026-10-15T18:57:56.567Z | 2026-10-16T17:09:34.612Z |
| cve-2026-111171 | 6.3 (v4.0) 5.4 (v3.1) | Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.… |
ethereum |
web3.py |
2026-10-15T18:57:55.904Z | 2026-10-15T19:29:53.958Z |
| cve-2026-111170 | 7.1 (v4.0) 6.5 (v3.1) | kedro-datasets 9.3.0 through 9.6.0 Path Traversal via … |
kedro-org |
kedro-datasets |
2026-10-15T18:57:55.295Z | 2026-10-21T01:30:43.369Z |
| cve-2026-111169 | 2.3 (v4.0) 3.1 (v3.1) | La Suite Docs through 6.0.1 Authorization Bypass via C… |
suitenumerique |
docs |
2026-10-15T18:57:54.680Z | 2026-10-26T13:55:20.669Z |
| cve-2026-111168 | 5.1 (v4.0) 5.4 (v3.1) | LibreDesk before 2.9.0-rc.8 Stored XSS via SVG Upload … |
abhinavxd |
libredesk |
2026-10-15T18:57:54.024Z | 2026-10-15T19:40:44.232Z |
| cve-2026-111167 | 6.9 (v4.0) 6.1 (v3.1) | GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in a… |
GNU |
LibreDWG |
2026-10-15T18:57:53.338Z | 2026-10-16T17:09:43.819Z |
| cve-2026-111166 | 6.8 (v4.0) 5.5 (v3.1) | libmikmod through 3.3.15 Heap Out-of-Bounds Read via I… |
sezero |
libmikmod |
2026-10-15T18:57:52.637Z | 2026-10-15T19:31:56.158Z |
| cve-2026-111165 | 6.8 (v4.0) 5.5 (v3.1) | libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Loa… |
sezero |
libmikmod |
2026-10-15T18:57:51.926Z | 2026-10-21T01:27:50.397Z |
| cve-2026-111164 | 6.8 (v4.0) 5.5 (v3.1) | UADE through 3.05 Out-of-Bounds Read in uade_filemagic… |
UADE |
uade |
2026-10-15T18:57:51.235Z | 2026-10-26T13:56:54.071Z |
| cve-2026-111163 | 6.8 (v4.0) 5.5 (v3.1) | WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM… |
Mindwerks |
WildMIDI |
2026-10-15T18:57:50.508Z | 2026-10-15T19:41:27.303Z |
| cve-2026-111162 | 6.9 (v4.0) 6.1 (v3.1) | WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM… |
Mindwerks |
WildMIDI |
2026-10-15T18:57:49.774Z | 2026-10-16T17:09:53.897Z |
| cve-2026-111161 | 6.9 (v4.0) 6.1 (v3.1) | libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds W… |
Wohlstand |
libADLMIDI |
2026-10-15T18:57:49.073Z | 2026-10-15T19:33:17.206Z |
| cve-2026-111160 | 8.7 (v4.0) 7.5 (v3.1) | LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_t… |
ModelTC |
LightLLM |
2026-10-15T18:57:48.390Z | 2026-10-21T01:24:32.515Z |
| cve-2026-111159 | 6.9 (v4.0) 6.1 (v3.1) | libewf through 20260924 Heap Out-of-Bounds Read via L0… |
libyal |
libewf |
2026-10-15T18:57:47.615Z | 2026-10-26T13:57:57.611Z |
| cve-2026-111158 | 6.8 (v4.0) 5.5 (v3.1) | EarthScope libmseed through 3.5.4 Heap Out-of-Bounds R… |
EarthScope |
libmseed |
2026-10-15T18:57:46.924Z | 2026-10-15T19:42:14.325Z |
| cve-2026-111157 | 6.9 (v4.0) 6.1 (v3.1) | SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADP… |
SoX |
sox |
2026-10-15T18:57:46.205Z | 2026-10-16T17:10:07.533Z |
| cve-2026-111156 | 6.9 (v4.0) 6.1 (v3.1) | libTiMidity through 0.2.8 Out-of-Bounds Access via Sou… |
sezero |
libtimidity |
2026-10-15T18:57:45.506Z | 2026-10-15T19:35:40.462Z |
| cve-2026-111155 | 6.9 (v4.0) 6.1 (v3.1) | libTiMidity through 0.2.8 Out-of-Bounds Read via Sound… |
sezero |
libtimidity |
2026-10-15T18:57:43.192Z | 2026-10-21T01:23:29.143Z |
| cve-2026-111154 | 6.9 (v4.0) 6.1 (v3.1) | libTiMidity through 0.2.8 Stack Out-of-Bounds Write vi… |
sezero |
libtimidity |
2026-10-15T18:57:42.295Z | 2026-10-26T13:59:28.259Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-286 | Multiples vulnérabilités dans Solaris | 2014-06-30T00:00:00.000000 | 2014-06-30T00:00:00.000000 |
| certfr-2014-avi-285 | Vulnérabilité dans Wireshark | 2014-06-30T00:00:00.000000 | 2014-06-30T00:00:00.000000 |
| certfr-2014-avi-284 | Vulnérabilité dans Red Hat JBoss Web Framework Kit | 2014-06-27T00:00:00.000000 | 2014-06-27T00:00:00.000000 |
| certfr-2014-avi-283 | Vulnérabilité dans le noyau Linux de SUSE | 2014-06-26T00:00:00.000000 | 2014-06-26T00:00:00.000000 |
| certfr-2014-avi-282 | Multiples vulnérabilités dans VMware vCenter Operations Management Suite | 2014-06-25T00:00:00.000000 | 2014-06-25T00:00:00.000000 |
| certfr-2014-avi-281 | Multiples vulnérabilités dans phpMyAdmin | 2014-06-23T00:00:00.000000 | 2014-06-23T00:00:00.000000 |
| certfr-2014-avi-280 | Vulnérabilité dans Huawei eSap Platform | 2014-06-20T00:00:00.000000 | 2014-06-20T00:00:00.000000 |
| certfr-2014-avi-279 | Multiples vulnérabilités dans Juniper Junos OS | 2014-06-20T00:00:00.000000 | 2014-06-20T00:00:00.000000 |
| certfr-2014-avi-278 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2014-06-20T00:00:00.000000 | 2014-06-20T00:00:00.000000 |
| certfr-2014-avi-277 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-06-20T00:00:00.000000 | 2014-06-20T00:00:00.000000 |
| certfr-2014-avi-276 | Multiples vulnérabilités dans Xen | 2014-06-19T00:00:00.000000 | 2014-06-19T00:00:00.000000 |
| certfr-2014-avi-275 | Vulnérabilité dans F5 BIG-IP | 2014-06-18T00:00:00.000000 | 2014-06-18T00:00:00.000000 |
| certfr-2014-avi-274 | Multiples vulnérabilités dans les produits VMware | 2014-06-16T00:00:00.000000 | 2014-06-16T00:00:00.000000 |
| certfr-2014-avi-273 | Multiples vulnérabilités dans Puppet | 2014-06-13T00:00:00.000000 | 2014-06-13T00:00:00.000000 |
| certfr-2014-avi-272 | Vulnérabilité dans Cisco IOS XR | 2014-06-13T00:00:00.000000 | 2014-06-13T00:00:00.000000 |
| certfr-2014-avi-271 | Multiples vulnérabilités dans les produits Juniper | 2014-06-13T00:00:00.000000 | 2014-06-13T00:00:00.000000 |
| certfr-2014-avi-270 | Multiples vulnérabilités dans les produits Mozilla | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-269 | Multiples vulnérabilités dans Adobe Flash Player | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-268 | Multiples vulnérabilités dans Google Chrome | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-267 | Multiples vulnérabilités dans le composant Microsoft Graphics | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-266 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-265 | Vulnérabilité dans Microsoft Word | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-264 | Vulnérabilité dans Microsoft XML Core Services | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-263 | Vulnérabilité dans Microsoft Lync Server | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-262 | Vulnérabilité dans le protocole TCP de Microsoft Windows | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-261 | Vulnérabilité dans le Bureau à distance de Microsoft Windows | 2014-06-11T00:00:00.000000 | 2014-06-11T00:00:00.000000 |
| certfr-2014-avi-260 | Multiples vulnérabilités dans Blue Coat | 2014-06-10T00:00:00.000000 | 2014-06-10T00:00:00.000000 |
| certfr-2014-avi-259 | Multiples vulnérabilités dans EMC Documentum Digital Asset Manager | 2014-06-06T00:00:00.000000 | 2014-06-06T00:00:00.000000 |
| certfr-2014-avi-258 | Vulnérabilité dans Xen | 2014-06-06T00:00:00.000000 | 2014-06-06T00:00:00.000000 |
| certfr-2014-avi-257 | Multiples vulnérabilités dans les produits Huawei | 2014-06-06T00:00:00.000000 | 2014-06-06T00:00:00.000000 |