Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-53987 | 7.3 (v4.0) 6.4 (v3.1) | Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site… |
pluginsGLPI |
tag |
2026-07-09T15:44:04.474Z | 2026-10-29T21:15:42.701Z |
| cve-2026-47119 | 5.3 (v4.0) 6.1 (v3.1) | Agent Zero < 1.15 Stored XSS via image_get API Endpoint |
agent0ai |
agent-zero |
2026-05-27T14:26:46.948Z | 2026-10-29T21:15:41.939Z |
| cve-2026-43629 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp b4882–b9058 Buffer Overflow in KV Cache Stat… |
ggml-org |
llama.cpp |
2026-08-06T15:48:41.246Z | 2026-10-29T21:15:41.205Z |
| cve-2026-43628 | 8.5 (v4.0) 7.8 (v3.1) | llama.cpp b3978–b9058 Integer Underflow via DRY Sampler |
ggml-org |
llama.cpp |
2026-08-06T15:45:52.293Z | 2026-10-29T21:15:40.528Z |
| cve-2026-43627 | 8.5 (v4.0) 7.8 (v3.1) | llama.cpp b1283–b9058 Integer Overflow in llama_batch_… |
ggml-org |
llama.cpp |
2026-08-06T15:40:19.714Z | 2026-10-29T21:15:39.858Z |
| cve-2026-43622 | 8.5 (v4.0) 7.8 (v3.1) | llama.cpp b1886–b7445 Double Free via llama-android.cpp |
ggml-org |
llama.cpp |
2026-08-06T15:27:07.820Z | 2026-10-29T21:15:39.213Z |
| cve-2026-41401 | 6.9 (v4.0) 6.5 (v3.1) | libyang - Heap Use-After-Free Write in XML Metadata Parsing |
libyang |
libyang |
2026-05-26T14:08:48.973Z | 2026-10-29T21:15:38.538Z |
| cve-2026-40037 | 7.1 (v4.0) 6.5 (v3.1) | OpenClaw < 2026.4.8 - Unsafe Request Body Replay via f… |
OpenClaw |
OpenClaw |
2026-04-08T21:35:29.255Z | 2026-10-29T21:15:37.846Z |
| cve-2026-35632 | 6.9 (v4.0) 7.1 (v3.1) | OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.… |
OpenClaw |
OpenClaw |
2026-04-09T21:27:02.813Z | 2026-10-29T21:15:37.164Z |
| cve-2026-32989 | 8.6 (v4.0) 8.8 (v3.1) | Precurio Intranet Portal 4.4: Cross-Site Request Forge… |
Precurio |
Precurio Intranet Portal |
2026-03-20T15:50:16.884Z | 2026-10-29T21:15:36.482Z |
| cve-2026-22185 | 4.6 (v4.0) | OpenLDAP LMDB mdb_load Heap Buffer Underflow in readline() |
OpenLDAP Foundation |
OpenLDAP |
2026-01-07T20:26:30.054Z | 2026-10-29T21:15:35.807Z |
| cve-2026-109266 | 6.9 (v4.0) 5.3 (v3.1) | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 X… |
ImageMagick |
ImageMagick |
2026-10-12T16:04:34.642Z | 2026-10-29T21:15:35.106Z |
| cve-2026-105215 | 9.3 (v4.0) 9.1 (v3.1) | ZITADEL before 4.16.2 Account Pre-Hijacking via Forged… |
zitadel |
zitadel |
2026-10-04T13:10:07.389Z | 2026-10-29T21:15:34.442Z |
| cve-2026-105212 | 8.7 (v4.0) 7.5 (v3.1) | ZITADEL before 3.4.14 and 4.16.2 Account Takeover via … |
zitadel |
zitadel |
2026-10-04T13:10:05.215Z | 2026-10-29T21:15:33.747Z |
| cve-2026-105210 | 8.8 (v4.0) 8.2 (v3.1) | ZITADEL before 4.17.1 Unauthenticated MFA Enrollment v… |
zitadel |
zitadel |
2026-10-04T13:10:03.949Z | 2026-10-29T21:15:33.072Z |
| cve-2026-105209 | 9.3 (v4.0) 9.6 (v3.1) | ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Ac… |
zitadel |
zitadel |
2026-10-04T13:10:03.314Z | 2026-10-29T21:15:32.416Z |
| cve-2026-105208 | 8.7 (v4.0) 7.7 (v3.1) | ZITADEL before 4.17.3 Session Hijacking via Forgeable … |
zitadel |
zitadel |
2026-10-04T13:10:02.664Z | 2026-10-29T21:15:31.735Z |
| cve-2026-105207 | 9.3 (v4.0) 9.8 (v3.1) | ZITADEL before 4.17.3 Account Takeover via External Id… |
zitadel |
zitadel |
2026-10-04T13:10:02.024Z | 2026-10-29T21:15:31.050Z |
| cve-2026-105206 | 5.3 (v4.0) | ZITADEL before 4.17.3 Cross-Organization Authenticatio… |
zitadel |
zitadel |
2026-10-04T13:10:01.420Z | 2026-10-29T21:15:30.351Z |
| cve-2026-105081 | 2 (v4.0) 3.6 (v3.1) | ImageMagick before 7.1.2-33 Policy Bypass via Symlink … |
ImageMagick |
ImageMagick |
2026-10-12T13:10:29.543Z | 2026-10-29T21:15:29.660Z |
| cve-2026-104436 | 6.3 (v4.0) 3.7 (v3.1) | Zebra before 4.5.0 CPU Amplification via Uncapped getb… |
ZcashFoundation |
zebra |
2026-10-02T11:38:13.172Z | 2026-10-29T21:15:28.872Z |
| cve-2026-104085 | 8.7 (v4.0) 8.8 (v3.1) | odt2spip < 4.4.0 OS Command Injection via Document Filename |
odt2spip |
odt2spip |
2026-10-13T17:28:18.915Z | 2026-10-29T21:15:28.190Z |
| cve-2026-100834 | 8.2 (v4.0) 5.9 (v3.1) | http4k before 6.48.0.0 Digest Authentication Replay Pr… |
http4k |
http4k |
2026-09-27T01:28:32.781Z | 2026-10-29T21:15:27.491Z |
| cve-2026-100725 | 8.3 (v4.0) 6.5 (v3.1) | http4k before 6.48.0.0 Cookie Scoping Bypass via Basic… |
http4k |
http4k |
2026-09-27T01:28:31.397Z | 2026-10-29T21:15:26.791Z |
| cve-2026-100724 | 6.3 (v4.0) 5.4 (v3.1) | http4k before 6.49.0.0 Host Header Routing Bypass via … |
http4k |
http4k |
2026-09-27T01:28:30.710Z | 2026-10-29T21:15:26.111Z |
| cve-2026-100709 | 7.7 (v4.0) 7.5 (v3.1) | Froxlor before 2.3.11 2FA Bypass via Namespace Confusion |
froxlor |
froxlor |
2026-09-26T13:24:02.908Z | 2026-10-29T21:15:25.450Z |
| cve-2026-10031 | 5.3 (v4.0) 5.4 (v3.1) | SFTPGo < 2.7.4 Permission Bypass via Symbolic Link Creation |
drakkan |
SFTPGo |
2026-07-30T22:51:31.522Z | 2026-10-29T21:15:24.763Z |
| cve-2025-71398 | 5.8 (v4.0) | SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass |
surrealdb |
surrealdb |
2026-07-18T13:10:15.797Z | 2026-10-29T21:15:24.088Z |
| cve-2025-71397 | 7.1 (v4.0) | SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops |
surrealdb |
surrealdb |
2026-07-18T13:10:15.129Z | 2026-10-29T21:15:23.434Z |
| cve-2025-71396 | 2.3 (v4.0) | SurrealDB before 2.2.2 Denial of Service via JavaScrip… |
surrealdb |
surrealdb |
2026-07-18T13:10:14.441Z | 2026-10-29T21:15:22.783Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-152 | Vulnérabilités dans Joomla! | 2012-03-19T00:00:00.000000 | 2012-03-19T00:00:00.000000 |
| certa-2012-avi-151 | Multiples vulnérabilités dans VMware | 2012-03-19T00:00:00.000000 | 2012-03-19T00:00:00.000000 |
| certa-2012-avi-150 | Vulnérabilités dans Cisco 6500 et 5500 | 2012-03-16T00:00:00.000000 | 2012-03-16T00:00:00.000000 |
| certa-2012-avi-149 | Vulnérabilité dans Cisco Catalyst 6500 et 5500 | 2012-03-16T00:00:00.000000 | 2012-03-16T00:00:00.000000 |
| certa-2012-avi-148 | Multiples vulnérabilités dans les équipements XEROX | 2012-03-16T00:00:00.000000 | 2012-03-16T00:00:00.000000 |
| certa-2012-avi-147 | Vulnérabilité dans OpenLDAP | 2012-03-16T00:00:00.000000 | 2012-03-16T00:00:00.000000 |
| certa-2012-avi-146 | Multiples vulnérabilités dans HP Data Protector Express | 2012-03-15T00:00:00.000000 | 2012-03-15T00:00:00.000000 |
| certa-2012-avi-145 | Vulnérabilité dans Adobe ColdFusion | 2012-03-15T00:00:00.000000 | 2012-03-15T00:00:00.000000 |
| certa-2012-avi-144 | Vulnérabilité dans CISCO ASA 5500 | 2012-03-15T00:00:00.000000 | 2012-03-15T00:00:00.000000 |
| certa-2012-avi-143 | Multiples vulnérabilités dans McAfee EWS et MEG | 2012-03-15T00:00:00.000000 | 2012-03-15T00:00:00.000000 |
| certa-2012-avi-142 | Multiples vulnérabilités dans les produits Mozilla | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-141 | Multiples vulnérabilités dans Safari | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-140 | Vulnérabilité dans Microsoft Expression Design | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-139 | Vulnérabilité dans Microsoft Visual Studio | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-138 | Multiples vulnérabilités dans Remote Desktop Protocol | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-137 | Vulnérabilité dans Windows DirectWrite | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-136 | Vulnérabilité dans le noyau Microsoft Windows | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-135 | Vulnérabilité dans le DNS de Microsoft Windows | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-129 | Multiples vulnérabilités dans Google Chrome | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-134 | Vulnérabilités dans OpenSSL | 2012-03-13T00:00:00.000000 | 2012-03-13T00:00:00.000000 |
| certa-2012-avi-133 | Multiples vulnérabilités dans les produits VMware | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-132 | Vulnérabilités dans Joomla! | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-131 | Vulnérabilité dans Splunk | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-130 | Vulnérabilité dans VMware vCenter Chargeback Manager | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-128 | Vulnérabilité dans Barracuda WAF | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-127 | Vulnérabilités dans Apple iOS | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-126 | Vulnérabilités dans iTunes | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-061 | Vulnérabilité dans Xen | 2012-02-08T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-125 | Vulnérabilités dans ImageMagick | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-124 | Vulnérabilité dans RSA SecureID | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |