Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107169 | 6.2 (v3.1) | M17n-lib: null-pointer write in read_mtext_element() o… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T14:34:50.043Z | 2026-11-05T15:55:04.303Z |
| cve-2026-107167 | 6.2 (v3.1) | M17n-lib: heap use-after-free write in re_init_ic() |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T14:34:45.597Z | 2026-11-05T15:55:03.796Z |
| cve-2026-106064 | 6.3 (v3.1) | Gimp: gimp: heap buffer overflow in gif export on over… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T14:34:40.565Z | 2026-11-05T15:53:56.244Z |
| cve-2026-104074 | 6.9 (v4.0) 5.3 (v3.1) | Coturn 4.10.0 Uninitialized Stack Memory Disclosure vi… |
coturn |
coturn |
2026-10-07T14:29:45.615Z | 2026-10-27T01:30:33.120Z |
| cve-2026-62179 | PraisonAI: Platform members can delete owner issue dep… |
MervinPraison |
praisonai-platform |
2026-10-07T14:29:02.988Z | 2026-10-07T17:04:38.364Z | |
| cve-2026-107202 | N/A | CVE-2026-107202 |
jonssonyan |
h-ui |
2026-10-07T14:26:49.905Z | 2026-10-07T20:39:57.719Z |
| cve-2026-107125 | XnView Classic FLI File heap-based overflow |
XnView |
Classic |
2026-10-07T14:15:10.846Z | 2026-10-07T17:20:44.931Z | |
| cve-2026-46438 | wger: Cross-User Data Corruption via Missing Ownership… |
wger-project |
wger |
2026-10-07T14:00:10.046Z | 2026-10-07T18:00:21.494Z | |
| cve-2026-46437 | wger: API credentials remain valid after logout/passwo… |
wger-project |
wger |
2026-10-07T13:58:34.529Z | 2026-10-10T02:24:34.332Z | |
| cve-2026-46434 | wger: Trainer Privilege Escalation - Improper Privileg… |
wger-project |
wger |
2026-10-07T13:55:19.566Z | 2026-10-07T14:35:38.960Z | |
| cve-2026-107194 | 9.2 (v4.0) | Sungrow iSolarCloud before 2026-08-25 allows auth… |
Sungrow |
iSolarCloud |
2026-10-07T13:54:45.211Z | 2026-10-19T14:03:48.206Z |
| cve-2026-45161 | wger: trainer_login accepts GET - CSRF bypass enables … |
wger-project |
wger |
2026-10-07T13:35:53.363Z | 2026-10-07T17:04:45.845Z | |
| cve-2026-107183 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp before b11393 Use-After-Free via common_chat… |
ggml-org |
llama.cpp |
2026-10-07T13:35:41.675Z | 2026-10-07T14:37:12.658Z |
| cve-2026-107181 | 8.6 (v4.0) 8.1 (v3.1) | Telegram Desktop before 7.2.9 IPC Record Injection Fil… |
Telegram |
Telegram Desktop |
2026-10-07T13:35:40.907Z | 2026-10-07T17:04:52.514Z |
| cve-2026-43976 | wger: cross-tenant admin notes/contracts leak via gym=… |
wger-project |
wger |
2026-10-07T13:33:11.008Z | 2026-10-07T17:26:56.782Z | |
| cve-2026-102258 | N/A | Post-authentication Stored Cross-Site Scripting (… |
SonicWall |
SMA1000 |
2026-10-07T13:16:31.279Z | 2026-10-07T14:37:48.768Z |
| cve-2026-102257 | N/A | A Zip Slip vulnerability in the in the SMA1000 Ap… |
SonicWall |
SMA1000 |
2026-10-07T13:12:25.319Z | 2026-10-08T03:55:24.797Z |
| cve-2026-102256 | N/A | Post-authentication Improper Neutralization of Sp… |
SonicWall |
SMA1000 |
2026-10-07T13:09:04.342Z | 2026-10-08T03:55:25.618Z |
| cve-2026-102255 | N/A | A Pre-authentication SSRF vulnerability exists in… |
SonicWall |
SMA1000 |
2026-10-07T13:07:13.384Z | 2026-10-07T15:51:00.007Z |
| cve-2026-98374 | tcp: fix use-after-free of retransmit_skb_hint in tcp_… |
Linux |
Linux |
2026-10-07T13:01:48.600Z | 2026-10-24T14:08:34.914Z | |
| cve-2026-98373 | N/A | mm/hugetlb: preserve mremap address delta when skippin… |
Linux |
Linux |
2026-10-07T13:01:47.433Z | 2026-10-30T12:38:03.639Z |
| cve-2026-41958 | A path traversal vulnerability exists in the unzi… |
visidata |
visidata |
2026-10-07T12:54:54.165Z | 2026-10-07T14:38:19.378Z | |
| cve-2026-42532 | A path traversal vulnerability exists in the Emai… |
visidata |
visidata |
2026-10-07T12:54:53.377Z | 2026-10-07T14:38:42.745Z | |
| cve-2026-103435 | Arbitrary File Write via Write-Time Symlink Following … |
Anthropic |
@anthropic-ai/claude-code |
2026-10-07T12:50:02.572Z | 2026-10-07T14:39:13.225Z | |
| cve-2026-107180 | 7.1 (v4.0) | MISP: Forced TOTP Enrolment Bypassed via Non-Browser R… |
MISP |
MISP |
2026-10-07T12:49:40.483Z | 2026-10-07T14:40:54.178Z |
| cve-2026-107177 | 7.4 (v4.0) 5.9 (v3.1) | Express Gateway through 1.16.11 Hardcoded Default ciph… |
ExpressGateway |
express-gateway |
2026-10-07T12:48:19.043Z | 2026-10-07T17:31:24.974Z |
| cve-2026-107162 | 7.6 (v4.0) 6.8 (v3.1) | Express Gateway through 1.16.11 OAuth 2.0 Refresh Toke… |
ExpressGateway |
express-gateway |
2026-10-07T12:48:18.499Z | 2026-10-10T02:22:18.863Z |
| cve-2026-107170 | 2.9 (v3.1) | M17n-lib: null dereference in minput_open_im() after f… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T12:41:33.159Z | 2026-10-07T17:41:54.130Z |
| cve-2026-107175 | 5.3 (v4.0) | MISP Correlation Engine Fails to Refresh When Event Di… |
MISP |
MISP |
2026-10-07T12:38:44.252Z | 2026-10-07T14:40:14.998Z |
| cve-2026-107168 | 6.2 (v3.1) | M17n-lib: parser infinite loop on malformed utf-8 in c… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-07T12:36:35.480Z | 2026-11-05T15:55:04.646Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2004-avi-101 | Vulnérabilité du module mod_survey | 2004-03-25T00:00:00.000000 | 2004-03-25T00:00:00.000000 |
| certa-2004-avi-100 | Multiples vulnérabilités de isakmpd sous OpenBSD | 2004-03-24T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-099 | Vulnérabilités dans Ethereal | 2004-03-24T00:00:00.000000 | 2004-06-01T00:00:00.000000 |
| certa-2004-avi-098 | Vulnérabilité de Clamav | 2004-03-23T00:00:00.000000 | 2004-04-08T00:00:00.000000 |
| certa-2004-avi-097 | Vulnérabilités dans Norton Internet Security et Norton AntiSpam | 2004-03-22T00:00:00.000000 | 2004-03-22T00:00:00.000000 |
| certa-2004-avi-096 | Vulnérabilité des produits Proventia, BlackICE et RealSecure d'ISS | 2004-03-19T00:00:00.000000 | 2004-03-22T00:00:00.000000 |
| certa-2004-avi-095 | Multiples vulnérabilités d'OpenSSL | 2004-03-18T00:00:00.000000 | 2004-05-07T00:00:00.000000 |
| certa-2004-avi-094 | Vulnérabilité sur plusieurs serveurs SOAP | 2004-03-18T00:00:00.000000 | 2004-03-18T00:00:00.000000 |
| certa-2004-avi-093 | Vulnérabilité de Solaris | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-092 | Vulnérabilité de IPsec/IKE sous Tru64 UNIX | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-091 | Compromission possible de certificats sur <SPAN class="textit">HP HTTP Server</SPAN> | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-090 | Vulnérabilité dans Oracle Application Server Web Cache | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-089 | Vulnérabilité sur Novell GroupWise WebAccess | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-088 | Vulnérabilité du serveur SAMBA | 2004-03-15T00:00:00.000000 | 2004-04-30T00:00:00.000000 |
| certa-2004-avi-087 | Vulnérabilité de Antigen pour Lotus Domino | 2004-03-15T00:00:00.000000 | 2004-03-15T00:00:00.000000 |
| certa-2004-avi-086 | Vulnérabilité du serveur HTTP Apache | 2004-03-15T00:00:00.000000 | 2004-05-18T00:00:00.000000 |
| certa-2004-avi-085 | Vulnérabilité de sysstat | 2004-03-15T00:00:00.000000 | 2004-04-07T00:00:00.000000 |
| certa-2004-avi-084 | Vulnérabilité de Calife | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-083 | Vulnérabilité de rexecd sous AIX | 2004-03-12T00:00:00.000000 | 2004-03-12T00:00:00.000000 |
| certa-2004-avi-082 | Vulnérabilité de F-Secure pour Linux | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-081 | Vulnérabilité du navigateur Konqueror | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-080 | Multiples vulnérabilités dans Mozilla | 2004-03-11T00:00:00.000000 | 2004-05-14T00:00:00.000000 |
| certa-2004-avi-079 | Vulnérabilité du serveur HTTP Apache | 2004-03-11T00:00:00.000000 | 2004-05-12T00:00:00.000000 |
| certa-2004-avi-078 | Vulnérabilité sur gdk-pixbuf sous Linux | 2004-03-11T00:00:00.000000 | 2004-03-16T00:00:00.000000 |
| certa-2004-avi-077 | Vulnérabilités de uucp sous Sun Solaris | 2004-03-11T00:00:00.000000 | 2004-03-11T00:00:00.000000 |
| certa-2004-avi-076 | Python 2.2 : Débordement de variable dans la gestion des réponses du DNS | 2004-03-10T00:00:00.000000 | 2004-09-03T00:00:00.000000 |
| certa-2004-avi-075 | Vulnérabilité dans la pile TCP/IP de OpenBSD | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-074 | Vulnérabilités du serveur wu-ftpd | 2004-03-10T00:00:00.000000 | 2004-07-17T00:00:00.000000 |
| certa-2004-avi-073 | Vulnérabilité dans Microsoft MSN Messenger | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |
| certa-2004-avi-072 | Vulnérabilité dans Microsoft Outlook | 2004-03-10T00:00:00.000000 | 2004-03-10T00:00:00.000000 |