Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106434 | 5.3 (v4.0) 4.3 (v3.1) | Unrecognized payload acceptance in explicit decryption… |
MongoDB |
libmongocrypt |
2026-10-08T18:56:43.244Z | 2026-10-08T19:30:49.513Z |
| cve-2026-106433 | 8.7 (v4.0) 8.8 (v3.1) | Heap corruption via duplicate masterKey fields in Mong… |
MongoDB |
libmongocrypt |
2026-10-08T18:55:34.174Z | 2026-10-08T19:30:26.703Z |
| cve-2026-107386 | amqp091-go: Pre-negotiation frame limit is not enforce… |
rabbitmq |
amqp091-go |
2026-10-08T18:54:12.465Z | 2026-10-09T15:14:35.548Z | |
| cve-2026-106429 | 7.1 (v4.0) 6.5 (v3.1) | Application denial of service via malformed KMS endpoi… |
MongoDB |
libmongocrypt |
2026-10-08T18:54:10.237Z | 2026-10-08T19:30:01.396Z |
| cve-2026-105452 | 5.9 (v4.0) | Docker Sandboxes egress proxy could forward unrecogniz… |
Docker |
Docker Sandboxes |
2026-10-08T18:49:37.331Z | 2026-10-08T19:29:41.004Z |
| cve-2026-40804 | 7.1 (v3.1) | WordPress aBlocks plugin <= 2.16.0 - Cross Site Script… |
Kodezen LLC |
aBlocks |
2026-10-08T18:48:17.611Z | 2026-10-08T19:29:11.917Z |
| cve-2026-101998 | 5.9 (v4.0) | Fail-open response masking in Docker Sandboxes can exp… |
Docker |
Docker Sandboxes |
2026-10-08T18:47:28.551Z | 2026-10-08T19:27:49.633Z |
| cve-2026-105570 | 6.7 (v4.0) | Docker Sandboxes OAuth response masking could be bypas… |
Docker |
Docker Sandboxes |
2026-10-08T18:46:05.122Z | 2026-10-08T19:28:28.605Z |
| cve-2026-106430 | 6 (v4.0) 5.9 (v3.1) | Query and rename target confusion via embedded NUL tru… |
MongoDB |
C++ Driver |
2026-10-08T18:45:56.785Z | 2026-10-08T19:25:15.316Z |
| cve-2026-106438 | 5.1 (v4.0) 4 (v3.1) | Silent Decimal128 value corruption via incorrect exact… |
MongoDB |
C Driver |
2026-10-08T18:44:05.629Z | 2026-10-08T19:21:43.595Z |
| cve-2026-106437 | 5.9 (v4.0) 6.2 (v3.1) | Out-of-bounds read and write via undersized BSON buffe… |
MongoDB |
C Driver |
2026-10-08T18:42:14.552Z | 2026-10-08T19:20:23.562Z |
| cve-2026-106431 | 5.9 (v4.0) 5.7 (v3.1) | One-byte heap buffer overflow in BSON bulk document wr… |
MongoDB |
C Driver |
2026-10-08T18:40:32.206Z | 2026-10-08T19:19:51.552Z |
| cve-2026-107322 | 8.5 (v4.0) 7.8 (v3.1) | OS command injection in Amazon Agent Plugins for AWS d… |
aws |
databases-on-aws |
2026-10-08T18:39:27.623Z | 2026-10-08T19:19:24.257Z |
| cve-2026-107385 | MariaDB Connector/Node.js: SQL injection in the text p… |
mariadb-corporation |
mariadb-connector-nodejs |
2026-10-08T18:38:29.490Z | 2026-10-09T11:45:28.671Z | |
| cve-2026-107704 | 9.3 (v4.0) 9.8 (v3.1) | image_optimizer 1.3.0 through 1.9.0 OS Command Injecti… |
jtescher |
image_optimizer |
2026-10-08T18:36:37.394Z | 2026-10-09T14:05:27.930Z |
| cve-2026-107703 | 9.3 (v4.0) 9.8 (v3.1) | @enmaso/node-convert through 1.0.0 OS Command Injectio… |
enmaso |
@enmaso/node-convert |
2026-10-08T18:36:36.868Z | 2026-10-08T19:18:07.571Z |
| cve-2026-107701 | 8.8 (v4.0) 8.2 (v3.1) | dot-access through 1.0.0 Prototype Pollution via set()… |
ntharim |
dot-access |
2026-10-08T18:36:36.315Z | 2026-10-14T16:05:43.407Z |
| cve-2026-107700 | 9.3 (v4.0) 9.8 (v3.1) | dot-access 0.0.3 through 1.0.0 Code Injection via get(… |
ntharim |
dot-access |
2026-10-08T18:36:35.684Z | 2026-10-09T11:44:39.084Z |
| cve-2026-107699 | 9.3 (v4.0) 9.8 (v3.1) | ppt2png through 0.0.6 OS Command Injection via input a… |
tzwm |
ppt2png |
2026-10-08T18:36:35.066Z | 2026-10-14T01:12:55.896Z |
| cve-2026-106428 | 6.3 (v4.0) 3.7 (v3.1) | Out-of-bounds read in SCRAM response parsing in MongoD… |
MongoDB |
C Driver |
2026-10-08T18:35:02.300Z | 2026-10-08T19:17:15.607Z |
| cve-2026-107384 | MariaDB Connector/Node.js: SQL injection through objec… |
mariadb-corporation |
mariadb-connector-nodejs |
2026-10-08T18:32:30.156Z | 2026-10-09T18:36:29.260Z | |
| cve-2026-107383 | MariaDB Connector/Node.js exposes uninitialized proces… |
mariadb-corporation |
mariadb-connector-nodejs |
2026-10-08T18:27:02.543Z | 2026-10-14T01:11:23.281Z | |
| cve-2026-107382 | MariaDB Connector/Node.js: Uncaught exception crashes … |
mariadb-corporation |
mariadb-connector-nodejs |
2026-10-08T18:24:10.031Z | 2026-10-08T18:42:37.155Z | |
| cve-2026-107702 | 5.3 (v4.0) 4.3 (v3.1) | QloApps through 1.7.0 Authorization Bypass via id_hote… |
Webkul |
QloApps |
2026-10-08T18:08:52.874Z | 2026-10-08T18:21:05.356Z |
| cve-2026-107380 | enshrined/svg-sanitize: Stored XSS via DTD Entity / HT… |
darylldoyle |
svg-sanitizer |
2026-10-08T18:06:14.107Z | 2026-10-09T15:14:45.596Z | |
| cve-2026-107379 | enshrined/svg-sanitize: Denial of Service via DTD Attr… |
darylldoyle |
svg-sanitizer |
2026-10-08T18:04:42.293Z | 2026-10-09T11:43:37.808Z | |
| cve-2026-107378 | CairoSVG: Quadratic-time DoS parsing a crafted SVG <path> |
Kozea |
CairoSVG |
2026-10-08T17:59:09.505Z | 2026-10-08T18:31:17.147Z | |
| cve-2026-107377 | datamodel-code-generator: Protobuf weak-import path tr… |
datamodel-code-generator |
datamodel-code-generator |
2026-10-08T17:55:22.595Z | 2026-10-14T01:09:58.803Z | |
| cve-2026-107376 | webonyx graphql-php: Unbounded recursion in parser cau… |
webonyx |
graphql-php |
2026-10-08T17:49:57.113Z | 2026-10-08T18:39:56.356Z | |
| cve-2026-97147 | 7.2 (v4.0) | In OpenStack Mistral through 23.0.0, several of t… |
OpenStack |
Mistral |
2026-10-08T17:41:29.934Z | 2026-10-14T01:07:30.221Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-257 | Vulnérabilité de MIT Kerberos 5 | 2005-07-13T00:00:00.000000 | 2006-10-03T00:00:00.000000 |
| certa-2005-avi-256 | Multiples vulnérabilité dans les produits Mozilla | 2005-07-13T00:00:00.000000 | 2005-07-29T00:00:00.000000 |
| certa-2005-avi-255 | Multiples vulnérabilités dans les produits Oracle | 2005-07-13T00:00:00.000000 | 2005-07-25T00:00:00.000000 |
| certa-2005-avi-254 | Vulnérabilité dans le module de gestion des couleurs de Microsoft | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-253 | Vulnérabilité dans Microsoft Word | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-252 | Vulnérabilité de IBM Tivoli | 2005-07-12T00:00:00.000000 | 2005-07-12T00:00:00.000000 |
| certa-2005-avi-251 | Vulnérabilité de cpio | 2005-07-12T00:00:00.000000 | 2005-10-10T00:00:00.000000 |
| certa-2005-avi-250 | Vulnérabilité de dhcpcd | 2005-07-12T00:00:00.000000 | 2005-07-28T00:00:00.000000 |
| certa-2005-avi-249 | Vulnérabilité de Ruby | 2005-07-12T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-248 | Vulnérabilité d'Internet Explorer | 2005-07-07T00:00:00.000000 | 2005-07-07T00:00:00.000000 |
| certa-2005-avi-247 | Vulnérabilités dans Adobe Reader | 2005-07-06T00:00:00.000000 | 2005-07-15T00:00:00.000000 |
| certa-2005-avi-246 | Vulnérabilité de la bibliothèque zlib | 2005-07-06T00:00:00.000000 | 2005-08-01T00:00:00.000000 |
| certa-2005-avi-245 | Vulnérabilités dans OpenLDAP, nss_ldap et pam_ldap | 2005-07-06T00:00:00.000000 | 2005-07-19T00:00:00.000000 |
| certa-2005-avi-244 | Vulnérabilité dans les produits Nortel | 2005-07-06T00:00:00.000000 | 2005-07-06T00:00:00.000000 |
| certa-2005-avi-243 | Multiples vulnérabilités de Cacti | 2005-07-04T00:00:00.000000 | 2005-07-21T00:00:00.000000 |
| certa-2005-avi-242 | Vulnérabilités dans PHP PEAR | 2005-07-01T00:00:00.000000 | 2005-07-18T00:00:00.000000 |
| certa-2005-avi-241 | Vulnérabilités dans la pile <TT>TCP</TT> de FreeBSD | 2005-07-01T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-240 | Vulnérabilités FreeBSD (ipfw) | 2005-07-01T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-239 | Multiples vulnérabilité dans heimdal telnetd server | 2005-06-30T00:00:00.000000 | 2005-07-18T00:00:00.000000 |
| certa-2005-avi-238 | Vulnérabilité de RADIUS Authentication sous CISCO IOS | 2005-06-30T00:00:00.000000 | 2005-06-30T00:00:00.000000 |
| certa-2005-avi-237 | Vulnérabilité dans phpBB | 2005-06-29T00:00:00.000000 | 2005-07-05T00:00:00.000000 |
| certa-2005-avi-236 | Vulnérabilité du chargeur ld.so sous Solaris | 2005-06-29T00:00:00.000000 | 2005-06-29T00:00:00.000000 |
| certa-2005-avi-235 | Multiples vulnérabilités des produits Adobe pour Mac OS X | 2005-06-28T00:00:00.000000 | 2005-06-28T00:00:00.000000 |
| certa-2005-avi-234 | Vulnérabilité de ClamAV | 2005-06-28T00:00:00.000000 | 2005-07-12T00:00:00.000000 |
| certa-2005-avi-233 | Vulnérabilité dans la base de données DB2 | 2005-06-28T00:00:00.000000 | 2005-06-28T00:00:00.000000 |
| certa-2005-avi-232 | Vulnérabilité dans SGI IRIX | 2005-06-27T00:00:00.000000 | 2005-06-27T00:00:00.000000 |
| certa-2005-avi-231 | Multiples vulnérabilités dans le noyau Linux | 2005-06-27T00:00:00.000000 | 2005-06-27T00:00:00.000000 |
| certa-2005-avi-230 | Multiples vulnérabilités des lecteurs RealPlayer | 2005-06-24T00:00:00.000000 | 2005-07-06T00:00:00.000000 |
| certa-2005-avi-229 | Multiples vulnérabilités de Veritas Backup Exec | 2005-06-23T00:00:00.000000 | 2005-06-23T00:00:00.000000 |
| certa-2005-avi-228 | Vulnérabilité des produits webmail de SUN | 2005-06-23T00:00:00.000000 | 2005-06-23T00:00:00.000000 |