Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112395 | Pillow tiled-TIFF decoder reads past tile buffer in co… |
python-pillow |
Pillow |
2026-10-19T20:59:15.098Z | 2026-10-28T15:24:49.805Z | |
| cve-2026-114081 | 8.3 (v4.0) 7.7 (v3.1) | Trigger.dev before 4.5.6 Cross-Tenant SQL Injection vi… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:49.268Z | 2026-10-28T15:23:47.837Z |
| cve-2026-114059 | 7.7 (v4.0) 7.5 (v3.1) | ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine … |
ArcadeData |
arcadedb |
2026-10-21T00:36:34.029Z | 2026-10-28T15:23:18.757Z |
| cve-2026-114086 | 6.9 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.5 Unauthenticated Realtime Stre… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:52.744Z | 2026-10-28T15:22:48.613Z |
| cve-2026-114071 | 2.3 (v4.0) 3.1 (v3.1) | Trigger.dev before 4.5.12 Authorization Bypass via Wai… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:42.336Z | 2026-10-28T15:22:08.976Z |
| cve-2026-114066 | 7.2 (v4.0) 8.1 (v3.1) | Trigger.dev before 4.7.0 Missing Authorization via Bat… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:38.884Z | 2026-10-28T15:21:20.734Z |
| cve-2026-112399 | Pillow: APNG background disposal allocates full canvas… |
python-pillow |
Pillow |
2026-10-19T21:10:11.266Z | 2026-10-28T15:21:14.748Z | |
| cve-2026-114061 | 2.3 (v4.0) 4.7 (v3.1) | SvelteKit before 3.0.0 XSS via Cache-Control Header in… |
sveltejs |
kit |
2026-10-21T00:36:35.456Z | 2026-10-28T15:19:51.281Z |
| cve-2026-112404 | Pillow: OOB read in TiffDecode.c tile and RGBA paths l… |
python-pillow |
Pillow |
2026-10-19T21:27:56.705Z | 2026-10-28T15:18:51.938Z | |
| cve-2026-114056 | 5.3 (v4.0) 4.3 (v3.1) | ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypa… |
ArcadeData |
arcadedb |
2026-10-21T00:36:31.923Z | 2026-10-28T15:17:25.140Z |
| cve-2026-114054 | 7.1 (v4.0) 6.5 (v3.1) | vLLM before 0.31.0 Cross-Request Cache Aliasing via EX… |
vllm-project |
vllm |
2026-10-21T00:36:30.509Z | 2026-10-28T15:16:15.124Z |
| cve-2026-114051 | 7.1 (v4.0) 7.5 (v3.1) | vLLM before 0.31.0 Denial of Service via min_tokens in… |
vllm-project |
vllm |
2026-10-21T00:36:28.373Z | 2026-10-28T15:15:55.536Z |
| cve-2026-112898 | Pillow: Image.quantize() with empty palette leaks unin… |
python-pillow |
Pillow |
2026-10-19T22:04:23.462Z | 2026-10-28T15:15:44.187Z | |
| cve-2026-114049 | 6.3 (v4.0) 3.7 (v3.1) | vLLM before 0.31.0 Stale allowed_token_ids Mask via In… |
vllm-project |
vllm |
2026-10-21T00:36:26.938Z | 2026-10-28T15:13:24.706Z |
| cve-2026-112893 | Pillow: Invalid free in FreeType glyph rendering when … |
python-pillow |
Pillow |
2026-10-19T21:53:49.979Z | 2026-10-28T15:12:48.729Z | |
| cve-2026-114044 | 6.9 (v4.0) 5.3 (v3.1) | FreeRDP before 3.32.1 Android Client Heap OOB Read via… |
FreeRDP |
FreeRDP |
2026-10-21T00:36:23.406Z | 2026-10-28T15:12:48.361Z |
| cve-2021-48020 | 8.3 (v4.0) 6.5 (v3.1) | Vyper before 0.3.0 Memory Corruption via Internal Func… |
vyperlang |
vyper |
2026-10-21T00:36:19.625Z | 2026-10-28T15:11:17.839Z |
| cve-2026-112911 | filelock: StrictSoftFileLock and SoftReadWriteLock ado… |
tox-dev |
filelock |
2026-10-20T14:21:24.480Z | 2026-10-28T15:09:43.507Z | |
| cve-2026-114091 | 6 (v4.0) 5.3 (v3.1) | Trigger.dev before 4.5.0 Cross-Tenant Run Payload Disc… |
triggerdotdev |
trigger.dev |
2026-10-21T00:36:56.273Z | 2026-10-28T15:05:28.082Z |
| cve-2026-115402 | 5.7 (v4.0) | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows … |
OpenVPN |
ovpn-dco-win |
2026-10-28T15:00:23.951Z | 2026-10-28T15:00:23.951Z |
| cve-2020-37287 | 8.2 (v4.0) 5.9 (v3.1) | Vyper before 0.2.6 Call Stack Corruption via Complex T… |
vyperlang |
vyper |
2026-10-21T00:36:16.257Z | 2026-10-28T15:00:19.800Z |
| cve-2026-93520 | 7.8 (v3.1) | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T14:59:50.140Z | 2026-10-28T14:59:50.140Z |
| cve-2026-113738 | R6410418 Jackrong-llm-finetuning-guide MTP weight_map … |
R6410418 |
Jackrong-llm-finetuning-guide |
2026-10-21T00:30:24.180Z | 2026-10-28T14:58:54.924Z | |
| cve-2026-113707 | a2aproject a2a-rs inmemory.rs update race condition |
a2aproject |
a2a-rs |
2026-10-20T23:30:22.622Z | 2026-10-28T14:57:28.380Z | |
| cve-2026-113776 | virtualenv activation scripts run code from a path tha… |
pypa |
virtualenv |
2026-10-20T22:03:18.274Z | 2026-10-28T14:54:19.776Z | |
| cve-2026-87397 | Vulnerability in the Oracle Outside In Technology… |
Oracle Corporation |
Oracle Outside In Technology |
2026-10-20T21:24:29.820Z | 2026-10-28T14:53:09.369Z | |
| cve-2026-87396 | Vulnerability in the Oracle Outside In Technology… |
Oracle Corporation |
Oracle Outside In Technology |
2026-10-20T21:24:29.474Z | 2026-10-28T14:51:50.142Z | |
| cve-2026-87394 | Vulnerability in the Oracle Outside In Technology… |
Oracle Corporation |
Oracle Outside In Technology |
2026-10-20T21:24:28.775Z | 2026-10-28T14:51:23.510Z | |
| cve-2026-87393 | Vulnerability in the Oracle Outside In Technology… |
Oracle Corporation |
Oracle Outside In Technology |
2026-10-20T21:24:28.429Z | 2026-10-28T14:49:54.493Z | |
| cve-2026-87392 | Vulnerability in the WebCenter Content: Imaging p… |
Oracle Corporation |
WebCenter Content: Imaging |
2026-10-20T21:24:28.085Z | 2026-10-28T14:48:58.996Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-061 | Symantec Ghost Solution Suite | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-060 | Vulnérabilité dans WordPress | 2008-02-08T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-044 | Vulnérabilité dans Sun Java Runtime Environment | 2008-02-04T00:00:00.000000 | 2008-02-08T00:00:00.000000 |
| certa-2008-avi-059 | Vulnérabilités dans Apple QuickTime et iPhoto | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-058 | Vulnérabilité dans IBM WebSphere Edge Server | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-057 | Multiples vulnérabilités dans HP Storage Essentials SRM | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-055 | Vulnérabilité dans Symantec Altiris Notification Server Agent | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-054 | Vulnérabilité dans ACDSee Photo Manager | 2008-02-07T00:00:00.000000 | 2008-02-07T00:00:00.000000 |
| certa-2008-avi-052 | Vulnérabilités dans des produits Novell | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-051 | Vulnérabilité dans Avaya Distributed Office | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-050 | Vulnérabilité dans HP OpenView Node Manager (OV NNM) | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-049 | Vulnérabilité dans des produits SAP | 2008-02-06T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-042 | Vulnérabilité d'UltraVNC | 2008-02-04T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2006-avi-083 | Vulnérabilité du logiciel ImageMagick | 2006-02-17T00:00:00.000000 | 2008-02-06T00:00:00.000000 |
| certa-2008-avi-048 | Plusieurs vulnérabilités dans IBM DB2 UDB | 2008-02-05T00:00:00.000000 | 2008-02-05T00:00:00.000000 |
| certa-2008-avi-047 | Vulnérabilité dans Symantec Backup Exec System Recovery Manager | 2008-02-05T00:00:00.000000 | 2008-02-05T00:00:00.000000 |
| certa-2008-avi-046 | Vulnérabilités dans IBM Informix Dynamic Server | 2008-02-05T00:00:00.000000 | 2008-02-05T00:00:00.000000 |
| certa-2008-avi-041 | Vulnérabilité dans Tripwire | 2008-02-01T00:00:00.000000 | 2008-02-05T00:00:00.000000 |
| certa-2008-avi-038 | Multiples vulnérabilités dans IBM AIX | 2008-01-25T00:00:00.000000 | 2008-02-05T00:00:00.000000 |
| certa-2008-avi-043 | Vulnérabilité dans Novell GroupWise WebAccess | 2008-02-04T00:00:00.000000 | 2008-02-04T00:00:00.000000 |
| certa-2008-avi-022 | Vulnérabilité dans libxml2 | 2008-01-15T00:00:00.000000 | 2008-02-04T00:00:00.000000 |
| certa-2007-avi-108 | Vulnérabilité dans Apache Tomcat | 2007-03-05T00:00:00.000000 | 2008-02-01T00:00:00.000000 |
| certa-2008-avi-040 | Multiples vulnérabilités dans IBM Informix | 2008-01-30T00:00:00.000000 | 2008-01-30T00:00:00.000000 |
| certa-2008-avi-029 | Mutiples vulnérabilités des produits Oracle | 2008-01-18T00:00:00.000000 | 2008-01-29T00:00:00.000000 |
| certa-2008-avi-039 | Vulnérabilité dans ISC BIND | 2008-01-28T00:00:00.000000 | 2008-01-28T00:00:00.000000 |
| certa-2008-avi-037 | Vulnérabilités dans des produits Cisco | 2008-01-24T00:00:00.000000 | 2008-01-24T00:00:00.000000 |
| certa-2008-avi-036 | Vulnérabilité dans HP-UX ARPA | 2008-01-24T00:00:00.000000 | 2008-01-24T00:00:00.000000 |
| certa-2008-avi-035 | Multiples vulnérabilités des produits IBM | 2008-01-23T00:00:00.000000 | 2008-01-23T00:00:00.000000 |
| certa-2008-avi-034 | Vulnérabilité dans Dreamweaver et Contribute | 2008-01-22T00:00:00.000000 | 2008-01-22T00:00:00.000000 |
| certa-2008-avi-033 | Vulnérabilité dans cPanel | 2008-01-21T00:00:00.000000 | 2008-01-21T00:00:00.000000 |