Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111064 | aiohttp server lacks an initial request/header timeout |
aio-libs |
aiohttp |
2026-10-19T16:47:35.036Z | 2026-10-28T15:29:24.279Z | |
| cve-2026-111750 | AIOHTTP: Pure-Python parser request smuggling |
aio-libs |
aiohttp |
2026-10-19T17:06:37.997Z | 2026-10-28T15:27:37.704Z | |
| cve-2026-114064 | 5.1 (v4.0) 5.5 (v3.1) | Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook T… |
grokability |
snipe-it |
2026-10-21T00:36:37.528Z | 2026-10-28T15:26:51.249Z |
| cve-2026-114076 | 5.3 (v4.0) 5.4 (v3.1) | Trigger.dev before 4.5.2 Blind SSRF via Alert Channel … |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:45.853Z | 2026-10-28T15:24:51.788Z |
| cve-2026-112395 | Pillow tiled-TIFF decoder reads past tile buffer in co… |
python-pillow |
Pillow |
2026-10-19T20:59:15.098Z | 2026-10-28T15:24:49.805Z | |
| cve-2026-114081 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 Cross-Tenant SQL Injection vi… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:49.268Z | 2026-10-28T15:23:47.837Z |
| cve-2026-114059 | 7.7 (v4.0) 7.5 (v3.1) | ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine … |
ArcadeData |
arcadedb |
2026-10-21T00:36:34.029Z | 2026-10-28T15:23:18.757Z |
| cve-2026-114086 | 6.9 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.5 Unauthenticated Realtime Stre… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:52.744Z | 2026-10-28T15:22:48.613Z |
| cve-2026-114071 | 2.3 (v4.0) 3.1 (v3.1) | Trigger.dev before 4.5.12 Authorization Bypass via Wai… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:42.336Z | 2026-10-28T15:22:08.976Z |
| cve-2026-114066 | 7.2 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.7.0 Missing Authorization via Bat… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:38.884Z | 2026-10-28T15:21:20.734Z |
| cve-2026-112399 | Pillow: APNG background disposal allocates full canvas… |
python-pillow |
Pillow |
2026-10-19T21:10:11.266Z | 2026-10-28T15:21:14.748Z | |
| cve-2026-114061 | 2.3 (v4.0) 4.7 (v3.1) | SvelteKit before 3.0.0 XSS via Cache-Control Header in… |
sveltejs |
kit |
2026-10-21T00:36:35.456Z | 2026-10-28T15:19:51.281Z |
| cve-2026-112404 | Pillow: OOB read in TiffDecode.c tile and RGBA paths l… |
python-pillow |
Pillow |
2026-10-19T21:27:56.705Z | 2026-10-28T15:18:51.938Z | |
| cve-2026-114056 | 5.3 (v4.0) 4.3 (v3.1) | ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypa… |
ArcadeData |
arcadedb |
2026-10-21T00:36:31.923Z | 2026-10-28T15:17:25.140Z |
| cve-2026-114054 | 7.1 (v4.0) 6.5 (v3.1) | vLLM before 0.31.0 Cross-Request Cache Aliasing via EX… |
vllm-project |
vllm |
2026-10-21T00:36:30.509Z | 2026-10-28T15:16:15.124Z |
| cve-2026-114051 | 7.1 (v4.0) 7.5 (v3.1) | vLLM before 0.31.0 Denial of Service via min_tokens in… |
vllm-project |
vllm |
2026-10-21T00:36:28.373Z | 2026-10-28T15:15:55.536Z |
| cve-2026-112898 | Pillow: Image.quantize() with empty palette leaks unin… |
python-pillow |
Pillow |
2026-10-19T22:04:23.462Z | 2026-10-28T15:15:44.187Z | |
| cve-2026-114049 | 6.3 (v4.0) 3.7 (v3.1) | vLLM before 0.31.0 Stale allowed_token_ids Mask via In… |
vllm-project |
vllm |
2026-10-21T00:36:26.938Z | 2026-10-28T15:13:24.706Z |
| cve-2026-112893 | Pillow: Invalid free in FreeType glyph rendering when … |
python-pillow |
Pillow |
2026-10-19T21:53:49.979Z | 2026-10-28T15:12:48.729Z | |
| cve-2026-114044 | 6.9 (v4.0) 5.3 (v3.1) | FreeRDP before 3.32.1 Android Client Heap OOB Read via… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:23.406Z | 2026-10-28T15:12:48.361Z |
| cve-2021-48020 | 8.3 (v4.0) 6.5 (v3.1) | Vyper before 0.3.0 Memory Corruption via Internal Func… |
vyperlang |
vyper |
2026-10-21T00:36:19.625Z | 2026-10-28T15:11:17.839Z |
| cve-2026-112911 | filelock: StrictSoftFileLock and SoftReadWriteLock ado… |
tox-dev |
filelock |
2026-10-20T14:21:24.480Z | 2026-10-28T15:09:43.507Z | |
| cve-2026-114091 | 6 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disc… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:56.273Z | 2026-10-28T15:05:28.082Z |
| cve-2026-115402 | 5.7 (v4.0) | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows … |
OpenVPN |
ovpn-dco-win |
2026-10-28T15:00:23.951Z | 2026-10-28T15:00:23.951Z |
| cve-2020-37287 | 8.2 (v4.0) 5.9 (v3.1) | Vyper before 0.2.6 Call Stack Corruption via Complex T… |
vyperlang |
vyper |
2026-10-21T00:36:16.257Z | 2026-10-28T15:00:19.800Z |
| cve-2026-93520 | 7.8 (v3.1) | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T14:59:50.140Z | 2026-10-28T14:59:50.140Z |
| cve-2026-113738 | R6410418 Jackrong-llm-finetuning-guide MTP weight_map … |
R6410418 |
Jackrong-llm-finetuning-guide |
2026-10-21T00:30:24.180Z | 2026-10-28T14:58:54.924Z | |
| cve-2026-113707 | a2aproject a2a-rs inmemory.rs update race condition |
a2aproject |
a2a-rs |
2026-10-20T23:30:22.622Z | 2026-10-28T14:57:28.380Z | |
| cve-2026-113776 | virtualenv activation scripts run code from a path tha… |
pypa |
virtualenv |
2026-10-20T22:03:18.274Z | 2026-10-28T14:54:19.776Z | |
| cve-2026-87397 | Vulnerability in the Oracle Outside In Technology… |
Oracle Corporation |
Oracle Outside In Technology |
2026-10-20T21:24:29.820Z | 2026-10-28T14:53:09.369Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-173 | Vulnérabilité dans Microsoft Windows Media Services | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-172 | Multiples vulnérabilités dans Microsoft Exchange et Windows SMTP | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-171 | Vulnérabilité dans Microsoft Office Publisher | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-170 | Vulnérabilité dans Microsoft VBScript | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-169 | Vulnérabilités dans le noyau Windows | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-168 | Vulnérabilités dans le client SMB de Microsoft | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-167 | Vulnérabilités dans Microsoft Windows Authenticode Verification | 2010-04-14T00:00:00.000000 | 2010-04-14T00:00:00.000000 |
| certa-2010-avi-166 | Vulnérabilité dans F-Secure | 2010-04-13T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-avi-165 | Multiples vulnérabilités dans les produits VMware | 2010-04-13T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-avi-163 | Vulnérabilité dans TYPO3 | 2010-04-12T00:00:00.000000 | 2010-04-12T00:00:00.000000 |
| certa-2010-avi-162 | Multiples vulnérabilités dans les produits VMware | 2010-04-09T00:00:00.000000 | 2010-04-09T00:00:00.000000 |
| certa-2010-avi-161 | Multiples vulnérabilités dans McAfee Email Gateway | 2010-04-07T00:00:00.000000 | 2010-04-08T00:00:00.000000 |
| certa-2010-avi-160 | Vulnérabilités dans VMware ESX Server | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-159 | Vulnérabilité dans MediaWiki | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-158 | Multiples vulnérabilités dans ClamAV | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-157 | Vulnérabilité dans Emacs | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-156 | Multiples vulnérabilités dans CA XOsoft | 2010-04-07T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-093 | Vulnérabilité dans Asterisk | 2010-03-01T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2009-avi-448 | Vulnérabilités dans Xpdf et dérivés | 2009-10-16T00:00:00.000000 | 2010-04-07T00:00:00.000000 |
| certa-2010-avi-155 | Vulnérabilité dans Foxit Reader | 2010-04-02T00:00:00.000000 | 2010-04-02T00:00:00.000000 |
| certa-2010-avi-154 | Vulnérabilité dans Firefox | 2010-04-02T00:00:00.000000 | 2010-04-02T00:00:00.000000 |
| certa-2010-avi-153 | Multiples vulnérabilités dans Apple QuickTime | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-152 | Multiples vulnérabilités dans Oracle Java | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-151 | Vulnérabilités dans Apache ActiveMQ | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-150 | Multiples vulnérabilités dans Moodle | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-149 | Multiples vulnérabilités dans Firefox | 2010-04-01T00:00:00.000000 | 2010-04-01T00:00:00.000000 |
| certa-2010-avi-148 | Multiples vulnérabilités dans HP SOA Registry Fondation | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-147 | Multiples vulnérabilités dans Apple iTunes | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-146 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2010-03-31T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-avi-145 | Multiples vulnérabilités dans IBM Web Interface for Content Management | 2010-03-30T00:00:00.000000 | 2010-03-30T00:00:00.000000 |