Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107315 | pgjdbc pads a value shorter than its declared length w… |
pgjdbc |
pgjdbc |
2026-10-07T23:03:18.315Z | 2026-10-08T14:41:49.791Z | |
| cve-2026-107314 | pgjdbc does not enforce requireAuth when the value exc… |
pgjdbc |
pgjdbc |
2026-10-07T23:03:01.500Z | 2026-10-08T14:47:31.949Z | |
| cve-2026-89322 | 7.2 (v3.1) | Vault ACL Policy Evaluation May Allow Bypass of Deny R… |
HashiCorp |
Vault |
2026-10-07T22:01:37.893Z | 2026-10-09T03:55:50.975Z |
| cve-2026-105820 | 5.4 (v3.1) | Vault ACL Policy Cache Vulnerable to Cross-Namespace P… |
HashiCorp |
Vault Enterprise |
2026-10-07T21:48:08.017Z | 2026-10-08T17:06:15.663Z |
| cve-2026-105816 | 8 (v3.1) | Vault Vulnerable to Arbitrary Code Execution via Plugi… |
HashiCorp |
Vault |
2026-10-07T21:37:03.913Z | 2026-10-09T03:55:51.648Z |
| cve-2026-107285 | AsyncHttpClient: WebSocket proxy credentials sent to t… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:28:34.620Z | 2026-10-08T17:57:33.271Z | |
| cve-2026-107284 | AsyncHttpClient: WebSocket handshake continues after a… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:27:03.257Z | 2026-10-08T14:54:57.517Z | |
| cve-2026-107283 | AsyncHttpClient: Digest authentication cnonce generate… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:24:56.640Z | 2026-10-08T14:00:20.347Z | |
| cve-2026-107282 | AsyncHttpClient: Replay to a different host sends the … |
AsyncHttpClient |
async-http-client |
2026-10-07T21:21:29.349Z | 2026-10-10T02:50:16.635Z | |
| cve-2026-105818 | 5.9 (v3.1) | Vault PKI ACME Issues Certificate With Unvalidated SANs |
HashiCorp |
Vault |
2026-10-07T21:21:05.675Z | 2026-10-08T17:07:02.834Z |
| cve-2026-107281 | AsyncHttpClient: Connection pool key omits the authent… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:19:09.292Z | 2026-10-08T17:58:10.542Z | |
| cve-2026-107280 | AsyncHttpClient: Cookie Domain attribute is not checke… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:15:13.870Z | 2026-10-08T17:57:38.975Z | |
| cve-2026-107279 | AsyncHttpClient: Digest mutual authentication is switc… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:10:26.049Z | 2026-10-08T15:02:48.131Z | |
| cve-2026-107232 | AsyncHttpClient: Origin credentials sent in cleartext … |
AsyncHttpClient |
async-http-client |
2026-10-07T21:09:03.284Z | 2026-10-08T14:01:19.523Z | |
| cve-2026-107231 | AsyncHttpClient: Digest challenge without a usable non… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:06:26.742Z | 2026-10-10T02:48:49.716Z | |
| cve-2026-107230 | AsyncHttpClient: Pooled connections can still be share… |
AsyncHttpClient |
async-http-client |
2026-10-07T21:00:47.997Z | 2026-10-08T17:59:43.962Z | |
| cve-2026-107229 | AsyncHttpClient: Incomplete origin checks in the defau… |
AsyncHttpClient |
async-http-client |
2026-10-07T20:57:36.676Z | 2026-10-08T17:57:44.807Z | |
| cve-2026-107228 | AsyncHttpClient CookieStore Silently Overrides Caller'… |
AsyncHttpClient |
async-http-client |
2026-10-07T20:54:34.703Z | 2026-10-08T16:08:44.837Z | |
| cve-2026-107227 | AsyncHttpClient: Unbounded WebSocket permessage-deflat… |
AsyncHttpClient |
async-http-client |
2026-10-07T20:51:04.823Z | 2026-10-08T14:02:28.739Z | |
| cve-2026-76286 | 5.3 (v3.1) | Server-Side Request Forgery (SSRF) through Custom API … |
Splunk |
Splunk MCP Server |
2026-10-07T20:46:40.297Z | 2026-10-08T18:00:27.987Z |
| cve-2026-76285 | N/A | Improper Adherence to Coding Standards in Splunk Enterprise |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:39.808Z | 2026-10-16T19:28:37.523Z |
| cve-2026-76284 | N/A | Improper Neutralization in Splunk Enterprise |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:39.281Z | 2026-10-16T17:55:32.276Z |
| cve-2026-76283 | N/A | Protection Mechanism Failure in Splunk Enterprise |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:38.794Z | 2026-10-16T17:55:31.267Z |
| cve-2026-76282 | N/A | Improper Control of a Resource Through its Lifetime in… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:38.324Z | 2026-10-16T17:55:30.573Z |
| cve-2026-76281 | N/A | Improper Access Control in Splunk Enterprise |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:37.805Z | 2026-10-27T20:08:36.638Z |
| cve-2026-76280 | 6.3 (v3.1) | Incorrect Permission Assignment for App Key Value Stor… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:37.327Z | 2026-10-09T16:47:52.058Z |
| cve-2026-76279 | 4.3 (v3.1) | Improper Input Validation of Index Names through the c… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:36.840Z | 2026-10-10T02:46:24.717Z |
| cve-2026-76278 | 4.3 (v3.1) | Authorization Bypass in SPL2 Module Permissions in Spl… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:36.393Z | 2026-10-08T13:31:03.418Z |
| cve-2026-76277 | 4.1 (v3.1) | Improper Input Validation of Native Splunk Usernames t… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:35.907Z | 2026-10-08T15:06:09.743Z |
| cve-2026-76276 | 4.3 (v3.1) | Information Disclosure in the Discover Splunk Observab… |
Splunk |
Splunk Enterprise |
2026-10-07T20:46:35.415Z | 2026-10-08T18:00:58.238Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-281 | Multiples vulnérabilités dans gaim | 2004-08-30T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-280 | Vulnérabilité dans divers produits Symantec | 2004-08-30T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-avi-279 | Multiples vulnérabilités dans Cisco Secure ACS | 2004-08-26T00:00:00.000000 | 2004-08-26T00:00:00.000000 |
| certa-2004-avi-278 | Vulnérabilité de la bibliothèque NSS | 2004-08-26T00:00:00.000000 | 2004-09-21T00:00:00.000000 |
| certa-2004-avi-277 | Vulnérabilité de Xine | 2004-08-25T00:00:00.000000 | 2004-08-25T00:00:00.000000 |
| certa-2004-avi-276 | Vulnérabilité dans Courier-IMAP | 2004-08-25T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-avi-275 | Vulnérabilité dans la bibliothèque Qt | 2004-08-24T00:00:00.000000 | 2004-09-01T00:00:00.000000 |
| certa-2004-avi-274 | Vulnérabilité de SpamAssassin | 2004-08-24T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-avi-273 | Vulnérabilité du système d'exploitation Cisco IOS | 2004-08-20T00:00:00.000000 | 2004-08-20T00:00:00.000000 |
| certa-2004-avi-272 | Vulnérabilités du serveur tnftpd | 2004-08-19T00:00:00.000000 | 2004-10-21T00:00:00.000000 |
| certa-2004-avi-271 | Vulnérabilité de rsync | 2004-08-17T00:00:00.000000 | 2004-09-02T00:00:00.000000 |
| certa-2004-avi-270 | Vulnérabilités d'Adobe Acrobat | 2004-08-17T00:00:00.000000 | 2004-09-02T00:00:00.000000 |
| certa-2004-avi-269 | Vulnérabilité de gaim | 2004-08-16T00:00:00.000000 | 2004-09-09T00:00:00.000000 |
| certa-2004-avi-268 | Vulnérabilité du navigateur Opera | 2004-08-06T00:00:00.000000 | 2004-08-31T00:00:00.000000 |
| certa-2004-avi-267 | Vulnérabilité dans PuTTY | 2004-08-05T00:00:00.000000 | 2004-08-06T00:00:00.000000 |
| certa-2004-avi-266 | Multiples vulnérabilités de la bibliothèque libpng | 2004-08-05T00:00:00.000000 | 2004-12-06T00:00:00.000000 |
| certa-2004-avi-265 | Vulnérabilité du noyau Linux | 2004-08-05T00:00:00.000000 | 2005-01-20T00:00:00.000000 |
| certa-2004-avi-264 | Vulnérabilité dans la machine virtuelle Java (JRE) de SUN | 2004-08-05T00:00:00.000000 | 2004-10-22T00:00:00.000000 |
| certa-2004-avi-263 | Multiples vulnérabilités dans SquirrelMail | 2004-08-04T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-262 | Vulnérabilité dans le ScreenOS des pare-feux NetScreen | 2004-08-04T00:00:00.000000 | 2004-08-04T00:00:00.000000 |
| certa-2004-avi-261 | Vulnérabilité des navigateurs Netscape et Mozilla | 2004-08-03T00:00:00.000000 | 2004-08-03T00:00:00.000000 |
| certa-2004-avi-260 | Multiples vulnérabilités dans Internet Explorer | 2004-07-31T00:00:00.000000 | 2004-07-31T00:00:00.000000 |
| certa-2004-avi-259 | Vulnérabilité de KAME Racoon | 2004-07-30T00:00:00.000000 | 2004-09-08T00:00:00.000000 |
| certa-2004-avi-258 | Vulnérabilité dans Checkpoint VPN-1 ASN.1 | 2004-07-29T00:00:00.000000 | 2004-07-29T00:00:00.000000 |
| certa-2004-avi-257 | Vulnérabilité de SoX | 2004-07-29T00:00:00.000000 | 2005-02-22T00:00:00.000000 |
| certa-2004-avi-256 | Vulnérabilité de subversion | 2004-07-28T00:00:00.000000 | 2004-07-28T00:00:00.000000 |
| certa-2004-avi-255 | Vulnérabilité de Pavuk | 2004-07-28T00:00:00.000000 | 2005-01-17T00:00:00.000000 |
| certa-2004-avi-254 | Multiples vulnérabilités sous HP-UX | 2004-07-27T00:00:00.000000 | 2004-07-27T00:00:00.000000 |
| certa-2004-avi-253 | Vulnérabilité du service RPC DCE | 2004-07-23T00:00:00.000000 | 2004-07-23T00:00:00.000000 |
| certa-2004-avi-252 | Vulnérabilité de Courier MTA, Courier-IMAP et Courier SqWebMail | 2004-07-23T00:00:00.000000 | 2004-07-23T00:00:00.000000 |