Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113869 | N/A | Use-after-free in S/MIME decryption during a security … |
Mozilla |
Thunderbird |
2026-10-20T19:14:55.862Z | 2026-10-27T18:30:32.292Z |
| cve-2026-110247 | N/A | Integer overflow in libmime buffer growth could lead t… |
Mozilla |
Thunderbird |
2026-10-13T18:08:37.608Z | 2026-10-27T18:27:45.455Z |
| cve-2026-100801 | N/A | Privilege escalation in the DLL Services component |
Mozilla |
Thunderbird |
2026-09-29T12:36:19.049Z | 2026-10-27T18:27:44.371Z |
| cve-2026-116469 | 7.1 (v4.0) | MISP Guard Case-Sensitive Policy Bypass Allows Unautho… |
MISP |
misp-guard |
2026-10-26T10:35:51.992Z | 2026-10-27T18:14:58.333Z |
| cve-2026-14255 | 5.5 (v3.1) | IFC File Parsing Uncontrolled Recursion in Certain Aut… |
Autodesk |
Shared Components |
2026-09-02T14:29:56.099Z | 2026-10-27T17:46:26.857Z |
| cve-2026-18330 | 6.1 (v4.0) | Hardcoded Shared RSA-1024 Private Key in Web Login in … |
TP-Link Systems Inc. |
RE305 v3 |
2026-09-03T22:24:45.430Z | 2026-10-27T17:39:53.630Z |
| cve-2026-76473 | Cisco Unified Communications Products Hardening Releas… |
Cisco |
Cisco Emergency Responder |
2026-10-21T16:14:31.067Z | 2026-10-27T17:30:04.477Z | |
| cve-2026-111054 | N/A | {'providerMetadata': {'orgId': 'a0819718-46f1-4df5-94e2-005712e83aaa', 'shortName': 'GitHub_M', 'dateUpdated': '2026-10-27T17:06:01.354Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a duplicate of CVE-2026-112374. Notes: All CVE users should reference CVE-2026-112374 instead of this candidate.'}], 'replacedBy': ['CVE-2026-112374']} | N/A | N/A | 2026-10-27T17:06:01.354Z | |
| cve-2026-18349 | 7.3 (v4.0) | SAMA5D44 Fault Injection Vulnerability |
Microchip |
SAMA5D4 |
2026-08-24T16:07:45.500Z | 2026-10-27T16:40:02.564Z |
| cve-2026-109431 | 8.6 (v4.0) 8.1 (v3.1) | Camunda Missing Authorization in Task Sub-Resources |
Camunda |
Camunda 7 |
2026-10-19T15:06:00.780Z | 2026-10-27T16:16:21.231Z |
| cve-2024-38564 | bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcem… |
Linux |
Linux |
2024-06-19T13:35:32.222Z | 2026-10-27T15:53:48.399Z | |
| cve-2026-99090 | N/A | drm/amdgpu: serialize vblank counter reads against GPU reset |
Linux |
Linux |
2026-10-26T14:51:59.654Z | 2026-10-27T15:53:00.938Z |
| cve-2026-107458 | N/A | {'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-27T15:22:49.940Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE has been rejected by Upstream, as they failed to create a meaningful exploit'}]} | N/A | N/A | 2026-10-27T15:22:49.940Z | |
| cve-2026-114693 | 6.5 (v3.1) | WordPress All-in-One Video Gallery plugin <= 4.9.7 - C… |
Plugins360 Labs |
All-in-One Video Gallery |
2026-10-24T08:00:12.874Z | 2026-10-27T15:06:40.501Z |
| cve-2026-28167 | 7.5 (v3.1) | WordPress Super Forms plugin <= 6.3.316 - Arbitrary Fi… |
WebRehab |
Super Forms |
2026-08-24T11:54:48.479Z | 2026-10-27T14:46:39.454Z |
| cve-2026-115927 | Tornado: Event loop blocking and excess memory use fro… |
tornadoweb |
tornado |
2026-10-26T19:37:40.584Z | 2026-10-27T14:18:44.227Z | |
| cve-2026-116479 | a2aproject a2a-java JSON-RPC Error getMessage informat… |
a2aproject |
a2a-java |
2026-10-26T19:45:11.028Z | 2026-10-27T14:18:35.499Z | |
| cve-2026-83398 | Vulnerability in the Oracle Data Integrator produ… |
Oracle Corporation |
Oracle Data Integrator |
2026-10-20T21:23:45.825Z | 2026-10-27T14:18:34.451Z | |
| cve-2026-116575 | Mem0: Cross-tenant conversation leak via unescaped del… |
mem0ai |
mem0 |
2026-10-26T20:15:01.875Z | 2026-10-27T14:18:25.039Z | |
| cve-2026-116579 | Autobahn Python: permessage-brotli inflates a whole fr… |
crossbario |
autobahn-python |
2026-10-26T20:29:22.906Z | 2026-10-27T14:18:18.772Z | |
| cve-2026-116504 | TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgra… |
TOTOLINK |
A950RG |
2026-10-26T20:30:16.475Z | 2026-10-27T14:18:09.375Z | |
| cve-2026-116583 | Seroval: Code injection through a typed array's own co… |
lxsmnsyc |
seroval |
2026-10-26T20:49:35.952Z | 2026-10-27T14:18:01.418Z | |
| cve-2026-116587 | Go JOSE: DoS when parsing JWKs that contain RSA keys |
go-jose |
go-jose |
2026-10-26T21:12:21.326Z | 2026-10-27T14:17:50.939Z | |
| cve-2026-116507 | TOTOLINK A950RG global.so getLanguageCfg information d… |
TOTOLINK |
A950RG |
2026-10-26T21:15:18.291Z | 2026-10-27T14:17:44.541Z | |
| cve-2026-116726 | 4.8 (v4.0) 3.3 (v3.1) | gbsplay through 0.0.103 Heap Out-of-Bounds Read via gb… |
mmitch |
gbsplay |
2026-10-26T21:52:29.528Z | 2026-10-27T14:17:32.379Z |
| cve-2026-116730 | 6.8 (v4.0) 5.5 (v3.1) | Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTra… |
tildearrow |
furnace |
2026-10-26T21:52:32.251Z | 2026-10-27T14:17:14.912Z |
| cve-2026-116734 | 6.3 (v4.0) 3.7 (v3.1) | flatcc through 0.6.4 Out-of-Bounds Read via verifier c… |
dvidelabs |
flatcc |
2026-10-26T21:52:34.998Z | 2026-10-27T14:17:08.680Z |
| cve-2026-116738 | 8.7 (v4.0) 8.8 (v3.1) | VMime through 0.9.2 Stack-Based Buffer Overflow via uu… |
kisli |
vmime |
2026-10-26T21:52:37.804Z | 2026-10-27T14:16:56.633Z |
| cve-2026-116742 | 4.8 (v4.0) 4.4 (v3.1) | HTSlib through 1.24 Heap Out-of-Bounds Write via Trunc… |
samtools |
htslib |
2026-10-26T21:52:41.511Z | 2026-10-27T14:16:48.820Z |
| cve-2026-116746 | 6.9 (v4.0) 5.3 (v3.1) | QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review … |
qloapps |
qloapps |
2026-10-26T21:52:44.250Z | 2026-10-27T14:16:39.214Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-133 | Vulnérabilités dans BrightStor ARCserve | 2007-03-16T00:00:00.000000 | 2007-03-16T00:00:00.000000 |
| certa-2007-avi-132 | Vulnérabilités dans Horde Application Framework | 2007-03-16T00:00:00.000000 | 2007-03-16T00:00:00.000000 |
| certa-2007-avi-131 | Vulnérabilité dans Horde IMP | 2007-03-16T00:00:00.000000 | 2007-03-16T00:00:00.000000 |
| certa-2007-avi-130 | Vulnérabilité de Websphere | 2007-03-16T00:00:00.000000 | 2007-03-16T00:00:00.000000 |
| certa-2007-avi-126 | Vulnérabilités dans Sun Java System Web Server | 2007-03-15T00:00:00.000000 | 2007-03-16T00:00:00.000000 |
| certa-2007-avi-128 | Vulnérabilités dans PMB | 2007-03-15T00:00:00.000000 | 2007-03-15T00:00:00.000000 |
| certa-2007-avi-127 | Vulnérabilité dans les produits Trend Micro | 2007-03-15T00:00:00.000000 | 2007-03-15T00:00:00.000000 |
| certa-2007-avi-076 | Multiples vulnérabilités dans php | 2007-02-09T00:00:00.000000 | 2007-03-15T00:00:00.000000 |
| certa-2007-avi-024 | Multiples vulnérabilités dans Adobe Acrobat | 2007-01-10T00:00:00.000000 | 2007-03-15T00:00:00.000000 |
| certa-2007-avi-125 | Vulnérabilité dans Adobe JRun et ColdFusion MX | 2007-03-14T00:00:00.000000 | 2007-03-14T00:00:00.000000 |
| certa-2007-avi-124 | Vulnérabilités dans MacOS X | 2007-03-14T00:00:00.000000 | 2007-03-14T00:00:00.000000 |
| certa-2007-avi-123 | Vulnérabilités dans le noyau Linux | 2007-03-14T00:00:00.000000 | 2007-03-14T00:00:00.000000 |
| certa-2007-avi-121 | Vulnérabilité de la machine Java sous HP-UX | 2007-03-13T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-120 | Vulnérabilité du protocole IPv6 dans le noyau Linux | 2007-03-13T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-113 | Vulnérabilité dans OpenBSD | 2007-03-09T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-095 | Vulnérabilité de Snort | 2007-02-20T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-094 | Vulnérabilité dans SpamAssassin | 2007-02-16T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-093 | Multiples vulnérabilités dans ClamAV | 2007-02-16T00:00:00.000000 | 2007-03-13T00:00:00.000000 |
| certa-2007-avi-119 | Vulnérabilité dans Wordpress | 2007-03-12T00:00:00.000000 | 2007-03-12T00:00:00.000000 |
| certa-2007-avi-118 | Vulnérabilité dans MySQL | 2007-03-12T00:00:00.000000 | 2007-03-12T00:00:00.000000 |
| certa-2007-avi-117 | Vulnérabilité de PMB | 2007-03-12T00:00:00.000000 | 2007-03-12T00:00:00.000000 |
| certa-2007-avi-116 | Vulnérabilité dans Novell NetMail | 2007-03-09T00:00:00.000000 | 2007-03-09T00:00:00.000000 |
| certa-2007-avi-115 | Vulnérabilité de Computer Associates eTrust Admin | 2007-03-09T00:00:00.000000 | 2007-03-09T00:00:00.000000 |
| certa-2007-avi-112 | Multiples vulnérabilités dans Apple QuickTime | 2007-03-07T00:00:00.000000 | 2007-03-07T00:00:00.000000 |
| certa-2007-avi-110 | Vulnérabilité de Novell Access Manager | 2007-03-06T00:00:00.000000 | 2007-03-06T00:00:00.000000 |
| certa-2007-avi-109 | Vulnérabilité de Symantec Mail Security | 2007-03-05T00:00:00.000000 | 2007-03-05T00:00:00.000000 |
| certa-2007-avi-107 | Vulnérabilité de Wordpress | 2007-03-05T00:00:00.000000 | 2007-03-05T00:00:00.000000 |
| certa-2007-avi-106 | Vulnérabilité dans Citrix Presentation Server | 2007-03-01T00:00:00.000000 | 2007-03-01T00:00:00.000000 |
| certa-2007-avi-105 | Vulnérabilité dans McAfee Virex | 2007-03-01T00:00:00.000000 | 2007-03-01T00:00:00.000000 |
| certa-2007-avi-104 | Vulnérabilités dans les Cisco Catalyst | 2007-03-01T00:00:00.000000 | 2007-03-01T00:00:00.000000 |