Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-86018 | Part-DB: Authenticated Disk Exhaustion via Unbounded S… |
Part-DB |
Part-DB-server |
2026-10-23T04:00:19.188Z | 2026-10-29T02:47:47.732Z | |
| cve-2026-54631 | Part-DB: Hardcoded APP_SECRET enables forged remember-… |
Part-DB |
Part-DB-server |
2026-10-23T03:53:33.833Z | 2026-10-29T02:46:18.989Z | |
| cve-2026-115535 | gedelumbung HospitalManagement Settings sistem.php sim… |
gedelumbung |
HospitalManagement |
2026-10-23T00:15:18.401Z | 2026-10-29T02:44:26.788Z | |
| cve-2025-45528 | N/A | An issue in Nitro Software, Inc Nitro PDF Pro for… |
n/a |
n/a |
2026-10-23T00:00:00.000Z | 2026-10-29T02:43:32.846Z |
| cve-2026-106764 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a r… |
n/a |
n/a |
2026-10-23T00:00:00.000Z | 2026-10-29T02:41:54.499Z | |
| cve-2026-114619 | Authlib: OpenID implicit grant checks raw scope instea… |
authlib |
authlib |
2026-10-22T21:31:02.929Z | 2026-10-29T02:40:27.668Z | |
| cve-2026-114615 | Authlib incomplete algorithm-confusion fix permits HMA… |
authlib |
authlib |
2026-10-22T21:10:02.023Z | 2026-10-29T02:38:05.175Z | |
| cve-2026-112332 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 Denial of Service via JsonNet Deser… |
GDATASoftwareAG |
motornet |
2026-10-22T19:42:17.808Z | 2026-10-29T02:37:09.398Z |
| cve-2026-115508 | 7.1 (v4.0) 6.5 (v3.1) | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields |
unclecode |
crawl4ai |
2026-10-22T19:14:07.893Z | 2026-10-29T02:36:22.691Z |
| cve-2026-115504 | 8.5 (v4.0) 7.8 (v3.1) | CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 … |
HEASARC |
cfitsio |
2026-10-22T19:14:04.552Z | 2026-10-29T02:35:24.229Z |
| cve-2026-115396 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra 10.3 before 12.2 Denial of Service via Compress… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:01.562Z | 2026-10-29T02:33:07.412Z |
| cve-2026-115392 | 8.8 (v4.0) 7.9 (v3.1) | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:58.512Z | 2026-10-29T02:32:06.275Z |
| cve-2026-115388 | 6.9 (v4.0) 6.2 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:54.430Z | 2026-10-29T02:31:21.887Z |
| cve-2026-115384 | 9.4 (v4.0) 9.9 (v3.1) | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:51.422Z | 2026-10-29T02:30:40.462Z |
| cve-2026-115376 | 8.3 (v4.0) 7.7 (v3.1) | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Projec… |
lxc |
incus |
2026-10-22T19:13:45.489Z | 2026-10-29T02:29:39.726Z |
| cve-2026-115372 | 9 (v4.0) 8.5 (v3.1) | Incus 7.3.0 before 7.5.0 Project Restriction Bypass vi… |
lxc |
incus |
2026-10-22T19:13:42.624Z | 2026-10-29T02:28:30.115Z |
| cve-2026-115362 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired Ap… |
openbao |
openbao |
2026-10-22T19:13:36.857Z | 2026-10-29T02:27:07.016Z |
| cve-2026-115358 | 2 (v4.0) 2 (v3.1) | OpenBao before 2.6.3 Sensitive Data Leak in Audit Log … |
openbao |
openbao |
2026-10-22T19:13:34.006Z | 2026-10-29T02:26:32.401Z |
| cve-2026-115354 | 7.1 (v4.0) 6.5 (v3.1) | Mistune before 3.3.0 Arbitrary Local File Read via Inc… |
lepture |
mistune |
2026-10-22T19:13:31.132Z | 2026-10-29T02:25:47.787Z |
| cve-2026-115350 | 5.3 (v4.0) 6.1 (v3.1) | Mistune before 3.3.0 Stored XSS via Include Directive … |
lepture |
mistune |
2026-10-22T19:13:26.891Z | 2026-10-29T02:24:58.381Z |
| cve-2022-51026 | 9.3 (v4.0) 9.8 (v3.1) | Bytebase 0.12.0 before 1.0.1 Authentication Bypass via… |
bytebase |
bytebase |
2026-10-22T19:13:18.259Z | 2026-10-29T02:24:08.646Z |
| cve-2026-114611 | OCO-Server: MDM /profile endpoint accepts self-signed … |
schorschii |
OCO-Server |
2026-10-22T17:33:13.611Z | 2026-10-29T02:23:10.004Z | |
| cve-2026-114610 | fpdf2: Exponential SVG '<use>' expansion causes CPU an… |
py-pdf |
fpdf2 |
2026-10-22T17:21:11.788Z | 2026-10-29T02:22:14.998Z | |
| cve-2026-114609 | fpdf2 implicitly loads external URLs and local image p… |
py-pdf |
fpdf2 |
2026-10-22T17:18:22.802Z | 2026-10-29T02:19:57.646Z | |
| cve-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use |
rthalley |
dnspython |
2026-10-22T16:25:32.509Z | 2026-10-29T02:19:02.339Z | |
| cve-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in … |
open-telemetry |
opentelemetry-python |
2026-10-22T15:29:25.108Z | 2026-10-29T02:17:42.817Z | |
| cve-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write… |
rsyslog |
rsyslog |
2026-10-22T13:32:56.695Z | 2026-10-29T02:15:30.165Z | |
| cve-2026-115248 | subhajitkhan online-clinic-management-system Booking p… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:30:10.769Z | 2026-10-29T02:14:19.530Z | |
| cve-2026-115400 | 6.7 (v4.0) 4.4 (v3.1) | crawlseo before 0.2.5 Cleartext Storage of Google OAut… |
crawlseo |
crawlseo |
2026-10-22T13:23:38.856Z | 2026-10-29T02:13:18.485Z |
| cve-2026-115331 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Metric Property… |
uselotus |
lotus |
2026-10-22T10:57:48.115Z | 2026-10-29T02:11:42.284Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-012 | Plusieurs vulnérabilités de SMB dans Windows | 2009-01-13T00:00:00.000000 | 2009-01-13T00:00:00.000000 |
| certa-2009-avi-011 | Multiples vulnérabilités dans les produits BlackBerry | 2009-01-13T00:00:00.000000 | 2009-01-13T00:00:00.000000 |
| certa-2009-avi-009 | Vulnérabilité de ISC BIND | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-008 | Vulnérabilité dans Cisco Global Site Selector | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-007 | Vulnérabilité dans CA Service Metric Analysis et CA Service Level Management | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-006 | Vulnérabilité dans OpenSSL | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-005 | Vulnérabilités dans Symantec Mail Security pour SMTP | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-004 | Vulnérabilité dans Check Point VPN-1 | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2008-avi-512 | Multiples vulnérabilités dans Adobe Flash Player | 2008-10-16T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-003 | Vulnérabilité de Solaris | 2009-01-06T00:00:00.000000 | 2009-01-06T00:00:00.000000 |
| certa-2009-avi-002 | Vulnérabilité dans xterm | 2009-01-05T00:00:00.000000 | 2009-01-05T00:00:00.000000 |
| certa-2009-avi-001 | Vulnérabilité dans Samba | 2009-01-05T00:00:00.000000 | 2009-01-05T00:00:00.000000 |
| certa-2008-avi-612 | Vulnérabilités dans SPIP | 2008-12-26T00:00:00.000000 | 2009-01-05T00:00:00.000000 |
| certa-2008-avi-593 | Vulnérabilité dans PHP | 2008-12-11T00:00:00.000000 | 2009-01-05T00:00:00.000000 |
| certa-2008-avi-614 | Vulnérabilité du noyau FreeBSD | 2008-12-30T00:00:00.000000 | 2008-12-30T00:00:00.000000 |
| certa-2008-avi-613 | Vulnérabilité de phpPgAdmin | 2008-12-29T00:00:00.000000 | 2008-12-29T00:00:00.000000 |
| certa-2008-avi-578 | Vulnérabilités de la machine virtuelle Java | 2008-12-03T00:00:00.000000 | 2008-12-24T00:00:00.000000 |
| certa-2008-avi-611 | Vulnérabilité dans des produits Sophos | 2008-12-23T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-610 | Multiples vulnérabilités dans Novell Identity Manager | 2008-12-23T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-609 | Vulnérabilité Sun Solaris | 2008-12-23T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-608 | Vulnérabilité dans Moodle | 2008-12-19T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-366 | Multiples vulnérabilités dans la machine virtuelle Java de Sun | 2008-07-11T00:00:00.000000 | 2008-12-23T00:00:00.000000 |
| certa-2008-avi-607 | Vulnérabilités dans Sympa | 2008-12-19T00:00:00.000000 | 2008-12-19T00:00:00.000000 |
| certa-2008-avi-606 | Multiples vulnérabilités des produits Mozilla | 2008-12-18T00:00:00.000000 | 2008-12-18T00:00:00.000000 |
| certa-2008-avi-605 | Vulnérabilité dans Adobe Flash Player pour Linux | 2008-12-18T00:00:00.000000 | 2008-12-18T00:00:00.000000 |
| certa-2008-avi-604 | Vulnérabilité dans Microsoft Internet Explorer | 2008-12-17T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2008-avi-603 | Vulnérabilités dans Mac OS X | 2008-12-17T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2008-avi-602 | Multiples vulnérabilités dans IBM WebSphere Portal | 2008-12-17T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2008-avi-601 | Vulnérabilité dans IBM Tivoli Provisioning Manager | 2008-12-17T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2008-avi-574 | Vulnérabilité dans ClamAV | 2008-12-02T00:00:00.000000 | 2008-12-16T00:00:00.000000 |