Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-109425 | 6.9 (v4.0) 5.3 (v3.1) | Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWi… |
tink-crypto |
tink-go |
2026-10-12T19:55:37.215Z | 2026-10-27T01:30:42.123Z |
| cve-2026-95838 | containerd: Unpack DoS via repeated opaque whiteouts |
containerd |
containerd |
2026-10-12T19:53:24.599Z | 2026-10-13T20:24:33.956Z | |
| cve-2026-108926 | itsourcecode Baptism Information Management System eba… |
itsourcecode |
Baptism Information Management System |
2026-10-12T19:45:10.670Z | 2026-10-13T15:57:56.993Z | |
| cve-2026-95837 | containerd CRI plugin: Checkpoint restore bypasses des… |
containerd |
containerd |
2026-10-12T19:37:49.999Z | 2026-10-13T17:22:08.473Z | |
| cve-2026-109424 | 8.2 (v4.0) 5.9 (v3.1) | NetEase Cloud Music Weak Encryption via eapi/xeapi |
NetEase |
NetEase Cloud Music for Windows |
2026-10-12T19:35:20.198Z | 2026-10-13T17:19:55.260Z |
| cve-2026-109423 | 9.1 (v4.0) 7.4 (v3.1) | NetEase Cloud Music TLS Certificate Validation Bypass |
NetEase |
NetEase Cloud Music for Windows |
2026-10-12T19:34:31.770Z | 2026-10-15T13:42:28.896Z |
| cve-2026-109422 | 9.2 (v4.0) 8.1 (v3.1) | NetEase Cloud Music RCE via os.navigateExternal IPC |
NetEase |
NetEase Cloud Music for Windows |
2026-10-12T19:33:32.062Z | 2026-10-26T20:35:47.341Z |
| cve-2026-109575 | 9.8 (v3.1) | In HAProxy Data Plane API 2.2.0 through 3.4.3 (an… |
HAProxy |
Data Plane API EE |
2026-10-12T19:32:13.313Z | 2026-10-13T15:59:33.833Z |
| cve-2026-96012 | 9.9 (v3.1) | IBM Db2 Mirror for i Privilege Escalation |
IBM |
Db2 Mirror for i |
2026-10-12T19:30:55.621Z | 2026-10-13T11:57:50.005Z |
| cve-2026-108924 | getkirby Kirby Dynamic Option Generation OptionsQuery.… |
getkirby |
Kirby |
2026-10-12T19:30:14.551Z | 2026-10-16T17:19:37.353Z | |
| cve-2026-104364 | 3.3 (v3.1) | IBM® Db2® Denial of Service |
IBM |
Db2 |
2026-10-12T19:25:23.499Z | 2026-10-12T22:53:58.431Z |
| cve-2026-104332 | 5.5 (v3.1) | IBM® Db2® Denial of Service |
IBM |
Db2 |
2026-10-12T19:18:01.600Z | 2026-10-12T22:53:58.559Z |
| cve-2026-108923 | 1024-lab smart-admin Support Config Query queryByKey a… |
1024-lab |
smart-admin |
2026-10-12T19:15:12.593Z | 2026-10-13T17:14:38.321Z | |
| cve-2025-27895 | 6.1 (v3.1) | DB2 Recovery Expert for Linux, UNIX and Windows Cross-… |
IBM |
DB2 Recovery Expert for Linux, UNIX and Windows |
2026-10-12T19:07:08.547Z | 2026-10-12T22:53:58.685Z |
| cve-2025-27896 | 6.1 (v3.1) | IBM Db2 Recovery Expert for Linux, Unix and Windows Cr… |
IBM |
DB2 Recovery Expert for Linux, UNIX and Windows |
2026-10-12T19:06:53.450Z | 2026-10-12T22:53:58.821Z |
| cve-2026-108361 | Privasys Intra-handshake attested TLS implementation i… |
Privasys |
ra-tls-clients |
2026-10-12T19:06:20.005Z | 2026-10-15T13:41:30.986Z | |
| cve-2026-108362 | Privasys attested TLS accepted evidence from any unrev… |
Privasys |
ra-tls-clients |
2026-10-12T19:06:11.348Z | 2026-10-13T15:00:30.012Z | |
| cve-2025-27897 | 6.1 (v3.1) | IBM Db2 Recovery Expert for Linux, Unix and Windows Cr… |
IBM |
DB2 Recovery Expert for Linux, UNIX and Windows |
2026-10-12T19:05:52.937Z | 2026-10-12T22:53:58.952Z |
| cve-2025-27902 | 6.1 (v3.1) | IBM Db2 Recovery Expert for Linux, Unix and Windows In… |
IBM |
DB2 Recovery Expert for Linux, UNIX and Windows |
2026-10-12T19:04:45.574Z | 2026-10-12T22:53:59.104Z |
| cve-2026-108922 | KusalkaSilva Learning-Management-System upload_save.ph… |
KusalkaSilva |
Learning-Management-System |
2026-10-12T19:00:11.131Z | 2026-10-15T13:39:59.994Z | |
| cve-2026-65954 | PHPCSUtils: Remote code execution via eval() in Abstra… |
PHPCSStandards |
PHPCSUtils |
2026-10-12T18:51:01.522Z | 2026-10-13T16:00:35.790Z | |
| cve-2026-83535 | 7.4 (v3.1) | Openstack-network-exporter: basic-auth uses plaintext … |
Red Hat |
Red Hat OpenStack Platform 18.0 |
2026-10-12T18:50:25.262Z | 2026-10-13T16:09:30.111Z |
| cve-2026-83536 | 5.3 (v3.1) | Openstack-network-exporter: http.server has no readhea… |
Red Hat |
Red Hat OpenStack Platform 18.0 |
2026-10-12T18:50:23.855Z | 2026-10-13T16:36:36.948Z |
| cve-2026-85471 | 6.4 (v3.1) | Quay: quay: webhook notification ssrf -- hostname-stri… |
Red Hat |
mirror registry for Red Hat OpenShift |
2026-10-12T18:50:20.163Z | 2026-11-01T05:03:33.683Z |
| cve-2026-102663 | OpenList: Search metadata/count disclosure via Non-Sep… |
OpenListTeam |
OpenList |
2026-10-12T18:49:23.454Z | 2026-10-13T16:01:30.361Z | |
| cve-2026-57118 | PraisonAI AgentTeam.launch exposes unauthenticated rem… |
MervinPraison |
PraisonAI |
2026-10-12T18:48:22.664Z | 2026-10-15T13:38:59.225Z | |
| cve-2026-57143 | PraisonAI: Server-Side Request Forgery (SSRF) in Searx… |
MervinPraison |
praisonaiagents |
2026-10-12T18:48:00.429Z | 2026-10-13T15:50:26.330Z | |
| cve-2026-18166 | 7.7 (v3.1) | IBM® Db2® is vulnerable to arbitrary library loading v… |
IBM |
Db2 |
2026-10-12T18:47:16.980Z | 2026-10-12T22:53:59.246Z |
| cve-2026-105464 | 8.8 (v3.1) | IBM® Db2® is vulnerable to a local attacker with DBADM… |
IBM |
Db2 |
2026-10-12T18:46:15.251Z | 2026-10-13T11:57:50.126Z |
| cve-2026-108921 | KusalkaSilva Learning-Management-System State-Changing… |
KusalkaSilva |
Learning-Management-System |
2026-10-12T18:45:15.546Z | 2026-10-13T16:02:16.429Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-321 | Vulnérabilité de Xerox Work Centre web services | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-320 | Vulnérabilités dans le navigateur Opera | 2008-06-13T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-319 | Vulnérabilité de Xerox Work Centre web server | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-318 | Vulnérabilité du noyau Sun Solaris | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-317 | Multiples vulnérabilités dans X.Org | 2008-06-13T00:00:00.000000 | 2008-11-05T00:00:00.000000 |
| certa-2008-avi-316 | Vulnérabilité dans Sun Solaris | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-315 | Vulnérabilité dans Sun StarOffice et StarSuite | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-314 | Multiples vulnérabilités dans FreeType | 2008-06-13T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-313 | Vulnérabilité dans les produits Xerox Copier/Printer | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-312 | Vulnérabilité dans les produits Citect | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-311 | Vulnérabilités dans TYPO3 | 2008-06-13T00:00:00.000000 | 2008-06-13T00:00:00.000000 |
| certa-2008-avi-310 | Vulnérabilité dans les produits CISCO | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-309 | Vulnérabilité dans Active Directory | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-308 | Vulnérabilité liée au service de reconnaissance vocale Windows | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-307 | Vulnérabilités dans Microsoft DirectX | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-306 | Vulnérabilités protocolaires dans Windows (PGM) | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-305 | Vulnérabilité du service Microsoft WINS | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-304 | Vulnérabilités dans Microsoft Internet Explorer | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-303 | Vulnérabilité de la pile Bluetooth Windows | 2008-06-11T00:00:00.000000 | 2008-06-11T00:00:00.000000 |
| certa-2008-avi-302 | Vulnérabilité dans Net-SNMP | 2008-06-10T00:00:00.000000 | 2008-11-20T00:00:00.000000 |
| certa-2008-avi-301 | Multiples vulnérabilités dans Apple QuickTime | 2008-06-10T00:00:00.000000 | 2008-06-10T00:00:00.000000 |
| certa-2008-avi-300 | Vulnérabilité dans OpenOffice.org | 2008-06-10T00:00:00.000000 | 2008-06-25T00:00:00.000000 |
| certa-2008-avi-299 | Plusieurs vulnérabilités dans IBM DB2 | 2008-06-10T00:00:00.000000 | 2008-06-10T00:00:00.000000 |
| certa-2008-avi-298 | Vulnérabilité dans HP StorageWorks Storage Monitoring | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-297 | Vulnérabilité du noyau Linux | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-296 | Multiples vulnérabilités dans Novell GroupWise Messenger | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-295 | Multiples vulnérabilités dans VLC | 2008-06-09T00:00:00.000000 | 2008-06-09T00:00:00.000000 |
| certa-2008-avi-291 | Multiples vulnérabilités dans les produits VMware | 2008-06-05T00:00:00.000000 | 2008-06-05T00:00:00.000000 |
| certa-2008-avi-290 | Vulnérabilité dans des produits Kaspersky | 2008-06-05T00:00:00.000000 | 2008-06-05T00:00:00.000000 |
| certa-2008-avi-289 | Vulnérabilité dans IBM WebSphere Application Server | 2008-06-05T00:00:00.000000 | 2008-06-05T00:00:00.000000 |