Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-97147 | 7.2 (v4.0) | In OpenStack Mistral through 23.0.0, several of t… |
OpenStack |
Mistral |
2026-10-08T17:41:29.934Z | 2026-10-14T01:07:30.221Z |
| cve-2026-93861 | 6 (v4.0) | In OpenStack Mistral through 23.0.0, the workflow… |
OpenStack |
Mistral |
2026-10-08T17:38:43.892Z | 2026-10-15T18:10:06.319Z |
| cve-2026-107375 | JHipster: SQL Injection in the Parameter of JHipster-G… |
jhipster |
generator-jhipster |
2026-10-08T17:36:48.905Z | 2026-10-09T15:14:52.235Z | |
| cve-2026-93860 | 7.1 (v4.0) | In OpenStack Mistral through 23.0.0, the /v2/main… |
OpenStack |
Mistral |
2026-10-08T17:35:43.653Z | 2026-10-09T11:42:46.119Z |
| cve-2026-107332 | 6.8 (v4.0) 5.5 (v3.1) | Insecure Default File Permissions on Cached Credential… |
aws |
aws-toolkit-vscode |
2026-10-08T17:33:30.417Z | 2026-10-09T16:18:46.826Z |
| cve-2026-107334 | 5.4 (v3.1) | Incorrect Authorization in Malcolm |
CISA |
Malcolm |
2026-10-08T17:32:00.480Z | 2026-10-14T19:35:58.181Z |
| cve-2026-107698 | 5.3 (v4.0) 5.4 (v3.1) | FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect H… |
FFmpeg |
FFmpeg |
2026-10-08T17:30:28.683Z | 2026-10-08T17:51:31.797Z |
| cve-2026-107697 | 5.3 (v4.0) 4.3 (v3.1) | FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass … |
FFmpeg |
FFmpeg |
2026-10-08T17:30:28.094Z | 2026-10-14T16:05:52.089Z |
| cve-2026-107696 | 7.1 (v4.0) 6.5 (v3.1) | FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect H… |
FFmpeg |
FFmpeg |
2026-10-08T17:30:27.515Z | 2026-10-09T11:41:54.683Z |
| cve-2026-107695 | 7.1 (v4.0) 6.5 (v3.1) | FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self… |
FFmpeg |
FFmpeg |
2026-10-08T17:30:26.951Z | 2026-10-14T01:03:34.781Z |
| cve-2026-107335 | 6.5 (v3.1) | Improper Handling of Highly Compressed Data in Malcolm |
CISA |
Malcolm |
2026-10-08T17:30:12.206Z | 2026-10-14T19:36:54.743Z |
| cve-2026-93858 | 8.7 (v4.0) | In OpenStack Mistral through 23.0.0, the std.ssh_… |
OpenStack |
Mistral |
2026-10-08T17:28:58.167Z | 2026-10-08T17:56:35.058Z |
| cve-2026-107337 | 7.1 (v3.1) | Cross-Site Request Forgery in Malcolm |
CISA |
Malcolm |
2026-10-08T17:28:23.458Z | 2026-10-14T19:40:29.072Z |
| cve-2026-107361 | 4.2 (v3.1) | Authentication Bypass Using an Alternate Path or Chann… |
CISA |
Malcolm |
2026-10-08T17:27:03.689Z | 2026-10-14T19:41:55.715Z |
| cve-2026-107362 | 7.1 (v3.1) | Server-Side Request Forgery in Malcolm |
CISA |
Malcolm |
2026-10-08T17:25:23.511Z | 2026-11-04T17:51:51.842Z |
| cve-2026-107333 | 8.1 (v3.1) | Incorrect Authorization in Malcolm |
CISA |
Malcolm |
2026-10-08T17:23:14.455Z | 2026-10-14T19:34:22.634Z |
| cve-2026-107303 | JHipster: Generated Applications Allow Stored XSS via … |
jhipster |
generator-jhipster |
2026-10-08T17:23:04.706Z | 2026-10-09T11:41:09.192Z | |
| cve-2026-107336 | 6.5 (v3.1) | Authentication Bypass by Spoofing in Malcolm |
CISA |
Malcolm |
2026-10-08T17:20:46.517Z | 2026-10-14T19:39:35.096Z |
| cve-2026-107302 | msgpack5: Truncated map32 headers throw an unexpected error |
mcollina |
msgpack5 |
2026-10-08T17:14:19.514Z | 2026-10-19T19:29:15.139Z | |
| cve-2026-107301 | msgpack5: Partial options disable prototype protection |
mcollina |
msgpack5 |
2026-10-08T17:13:00.613Z | 2026-10-14T01:02:53.277Z | |
| cve-2026-107300 | msgpack5: Many buffered values can exhaust the streami… |
mcollina |
msgpack5 |
2026-10-08T17:11:13.552Z | 2026-10-08T17:52:48.010Z | |
| cve-2026-107299 | msgpack5: Reserved byte can cause unbounded stream buffering |
mcollina |
msgpack5 |
2026-10-08T17:09:47.191Z | 2026-10-09T15:15:00.980Z | |
| cve-2026-107298 | msgpack5: Deeply nested input can exhaust the decoder stack |
mcollina |
msgpack5 |
2026-10-08T17:08:22.022Z | 2026-10-09T11:39:42.593Z | |
| cve-2026-107297 | msgpack5: Quadratic parsing in the streaming decoder |
mcollina |
msgpack5 |
2026-10-08T17:07:03.740Z | 2026-10-08T17:26:27.457Z | |
| cve-2026-107296 | msgpack5: Decoding negative int64 values mutates the i… |
mcollina |
msgpack5 |
2026-10-08T17:05:34.059Z | 2026-10-14T01:01:55.870Z | |
| cve-2026-107295 | `pydantic-ai-slim` web UI `/api/chat` accepts browser-… |
pydantic |
pydantic-ai |
2026-10-08T17:02:36.718Z | 2026-10-08T17:53:29.464Z | |
| cve-2026-105436 | 8.8 (v3.1) | WordPress MainWP Child plugin <= 6.2.1 - Deserializati… |
MainWP |
MainWP Child |
2026-10-08T17:00:12.300Z | 2026-10-09T15:15:11.490Z |
| cve-2026-107294 | Pydantic AI: Unbounded memory use when downloading rem… |
pydantic |
pydantic-ai |
2026-10-08T16:59:25.246Z | 2026-10-09T15:15:18.765Z | |
| cve-2026-107709 | N/A | Bower decompress-zip has a path traversal vulnerability |
Bower Decompress-Zip |
decompress-zip |
2026-10-08T16:59:10.419Z | 2026-10-08T20:23:46.370Z |
| cve-2026-107293 | Pydantic AI OpenTelemetry instrumentation: retry promp… |
pydantic |
pydantic-ai |
2026-10-08T16:57:24.841Z | 2026-10-08T17:14:30.659Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-227 | Multiples vulnérabilités de Cacti | 2005-06-23T00:00:00.000000 | 2005-07-21T00:00:00.000000 |
| certa-2005-avi-226 | Vulnérabilité dans l'utilitaire sudo | 2005-06-21T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-225 | Vulnérabilité dans SpamAssassin | 2005-06-17T00:00:00.000000 | 2005-07-11T00:00:00.000000 |
| certa-2005-avi-224 | Vulnérabilité de SquirrelMail | 2005-06-17T00:00:00.000000 | 2005-07-29T00:00:00.000000 |
| certa-2005-avi-223 | Vulnérabilité de Opera | 2005-06-17T00:00:00.000000 | 2005-06-23T00:00:00.000000 |
| certa-2005-avi-222 | Vulnérabilité de lpadmin sous Solaris | 2005-06-17T00:00:00.000000 | 2005-06-17T00:00:00.000000 |
| certa-2005-avi-221 | Vulnérabilité de gedit | 2005-06-16T00:00:00.000000 | 2006-02-24T00:00:00.000000 |
| certa-2005-avi-220 | Vulnérabilité dans des produits Adobe | 2005-06-15T00:00:00.000000 | 2005-06-20T00:00:00.000000 |
| certa-2005-avi-219 | Vulnérabilité dans le service WebClient de Microsoft | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-218 | Vulnérabilités dans Internet Explorer | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-217 | Vulnérabilité des systèmes Microsoft Windows | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-216 | Vulnérabilité des systèmes Microsoft Windows | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-215 | Vulnérabilité de Microsoft ISA Server 2000 | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-214 | Vulnérabilité du client Telnet Microsoft | 2005-06-15T00:00:00.000000 | 2005-10-06T00:00:00.000000 |
| certa-2005-avi-213 | Vulnérabilité dans SMB de Microsoft | 2005-06-15T00:00:00.000000 | 2005-06-17T00:00:00.000000 |
| certa-2005-avi-212 | Vulnérabilité dans l'aide HTML de Windows | 2005-06-15T00:00:00.000000 | 2005-06-17T00:00:00.000000 |
| certa-2005-avi-211 | Vulnérabilité de Outlook Web Access pour Microsoft Exchange Serveur 5.5 | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-210 | Vulnérabilité dans Microsoft Outlook Express | 2005-06-15T00:00:00.000000 | 2005-06-15T00:00:00.000000 |
| certa-2005-avi-209 | Vulnérabilités des versions Sun de Java 2 Standard Edition | 2005-06-14T00:00:00.000000 | 2005-06-23T00:00:00.000000 |
| certa-2005-avi-208 | Vulnérabilités de Novell iManager et Novell eDirectory | 2005-06-13T00:00:00.000000 | 2005-06-13T00:00:00.000000 |
| certa-2005-avi-207 | Vulnérabilité de GNU wget | 2005-06-13T00:00:00.000000 | 2005-09-29T00:00:00.000000 |
| certa-2005-avi-206 | Vulnérabilité de produits Adobe | 2005-06-13T00:00:00.000000 | 2005-06-13T00:00:00.000000 |
| certa-2005-avi-204 | Vulnérabilité dans Symantec pcAnywhere | 2005-06-13T00:00:00.000000 | 2005-06-13T00:00:00.000000 |
| certa-2005-avi-203 | Vulnérabilité d'ImageMagick et GraphicsMagick | 2005-06-13T00:00:00.000000 | 2005-06-29T00:00:00.000000 |
| certa-2005-avi-202 | Multiples vulnérabilités de Gaim | 2005-06-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-201 | Multiples vulnérabilités sur BEA Weblogic | 2005-06-09T00:00:00.000000 | 2005-08-26T00:00:00.000000 |
| certa-2005-avi-199 | Vulnérabilités de rpc.mountd sous SGI IRIX | 2005-06-09T00:00:00.000000 | 2005-06-09T00:00:00.000000 |
| certa-2005-avi-198 | Vulnérabilité d'IBM Websphere Application Server | 2005-06-09T00:00:00.000000 | 2005-06-09T00:00:00.000000 |
| certa-2005-avi-197 | Vulnérabilité de Sun ONE Application Server | 2005-06-09T00:00:00.000000 | 2005-06-09T00:00:00.000000 |
| certa-2005-avi-196 | Vulnérabilité de type injection SQL dans <TT>Mailutils</TT> | 2005-06-08T00:00:00.000000 | 2005-06-08T00:00:00.000000 |