Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106493 | Backstage: Cloud storage catalog locations may cross c… |
backstage |
backstage |
2026-10-06T20:52:02.451Z | 2026-10-07T18:14:34.622Z | |
| cve-2026-106492 | Backstage: Improper preservation of access restriction… |
backstage |
backstage |
2026-10-06T20:48:05.896Z | 2026-10-09T01:51:07.252Z | |
| cve-2026-106584 | 2.5 (v3.1) | In ssh-keygen in OpenSSH before 10.6, certificate… |
OpenBSD |
OpenSSH |
2026-10-06T20:47:50.509Z | 2026-10-07T16:08:11.434Z |
| cve-2026-106491 | Backstage: Improper input validation in proxy-backend |
backstage |
backstage |
2026-10-06T20:45:08.067Z | 2026-10-07T17:52:11.914Z | |
| cve-2026-106490 | Backstage: Improper input validation in TechDocs stati… |
backstage |
backstage |
2026-10-06T20:41:26.668Z | 2026-10-07T17:06:57.542Z | |
| cve-2026-106489 | Backstage: Improper authorization enforcement for Tech… |
backstage |
backstage |
2026-10-06T20:39:50.992Z | 2026-10-07T15:29:13.363Z | |
| cve-2026-106488 | Backstage: Improper authentication in the OIDC provider |
backstage |
backstage |
2026-10-06T20:38:18.045Z | 2026-10-07T18:23:28.366Z | |
| cve-2026-104045 | 4.7 (v3.1) | Sssd: sssd: denial of service via race condition in au… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-06T20:37:41.257Z | 2026-11-05T15:53:06.205Z |
| cve-2026-106487 | Backstage: Unsupported catalog cluster authentication … |
backstage |
backstage |
2026-10-06T20:36:45.419Z | 2026-10-09T01:49:45.471Z | |
| cve-2026-106582 | 3.7 (v3.1) | In sshd and ssh in OpenSSH before 10.6, an LZ77 d… |
OpenBSD |
OpenSSH |
2026-10-06T20:35:32.577Z | 2026-10-07T14:05:31.972Z |
| cve-2026-106486 | Backstage: Improper filesystem validation in Bitbucket… |
backstage |
backstage |
2026-10-06T20:35:10.380Z | 2026-10-07T16:22:11.503Z | |
| cve-2026-106032 | 5.7 (v4.0) 5.7 (v3.1) | Server-side request forgery and local file read via un… |
aws |
bedrock-agentcore-starter-toolkit |
2026-10-06T20:34:54.576Z | 2026-10-07T15:18:42.915Z |
| cve-2026-105812 | 8.8 (v4.0) 9 (v3.1) | Code injection via unencoded configuration values duri… |
aws |
bedrock-agentcore-starter-toolkit |
2026-10-06T20:34:08.826Z | 2026-10-07T15:17:53.000Z |
| cve-2026-106463 | Backstage: Improper authorization in GitLab organizati… |
backstage |
backstage |
2026-10-06T20:32:45.755Z | 2026-10-07T17:07:07.595Z | |
| cve-2026-106462 | Backstage: Scaffolder credential handling may allow un… |
backstage |
backstage |
2026-10-06T20:30:28.855Z | 2026-10-07T15:13:57.430Z | |
| cve-2026-106555 | 2.2 (v3.1) | In sshd in OpenSSH before 10.6, GSSAPIAuthenticat… |
OpenBSD |
OpenSSH |
2026-10-06T20:28:56.022Z | 2026-10-09T01:48:54.705Z |
| cve-2026-106553 | 2.2 (v3.1) | In sshd in OpenSSH before 10.6, credentials can i… |
OpenBSD |
OpenSSH |
2026-10-06T20:25:45.854Z | 2026-10-07T16:23:00.151Z |
| cve-2026-106461 | Backstage: Incorrect authorization in scaffolder task … |
backstage |
backstage |
2026-10-06T20:25:32.100Z | 2026-10-07T16:23:06.058Z | |
| cve-2026-106460 | Backstage: Explicit negative email verification can be… |
backstage |
backstage |
2026-10-06T20:22:31.994Z | 2026-10-09T01:48:01.580Z | |
| cve-2026-106552 | 4.2 (v3.1) | In sftp in OpenSSH before 10.6, a server can trig… |
OpenBSD |
OpenSSH |
2026-10-06T20:20:31.186Z | 2026-10-07T22:06:29.194Z |
| cve-2026-106459 | Backstage: Improper input validation in Sentry scaffol… |
backstage |
backstage |
2026-10-06T20:19:37.541Z | 2026-10-07T16:24:39.671Z | |
| cve-2026-106458 | Backstage: Inconsistent repository filtering in Bitbuc… |
backstage |
backstage |
2026-10-06T20:16:12.035Z | 2026-10-07T17:07:16.596Z | |
| cve-2026-106547 | 8.5 (v4.0) | HDF5 heap buffer overflow in H5VM_array_fill via craft… |
The HDF Group |
HDF5 |
2026-10-06T20:14:41.443Z | 2026-10-07T15:11:20.673Z |
| cve-2026-106457 | Backstage: Insufficient audience validation in the Clo… |
backstage |
backstage |
2026-10-06T20:13:26.801Z | 2026-10-07T15:09:19.708Z | |
| cve-2026-106456 | Backstage: Inconsistent credential enforcement for ove… |
backstage |
backstage |
2026-10-06T20:10:41.795Z | 2026-10-07T18:24:34.406Z | |
| cve-2026-106550 | N/A | CVE-2026-106550 |
Mozilla |
Node-convict |
2026-10-06T20:09:55.919Z | 2026-10-07T19:33:03.505Z |
| cve-2026-43598 | 7.7 (v4.0) | Improper input validation in the AMD ROCm Communi… |
AMD |
AMD Instinct™ MI210 |
2026-10-06T20:06:56.948Z | 2026-10-07T15:02:11.914Z |
| cve-2026-106455 | Backstage: Improper validation of MkDocs plugin config… |
backstage |
backstage |
2026-10-06T20:06:06.505Z | 2026-10-09T01:46:59.251Z | |
| cve-2026-105811 | 7.1 (v4.0) 6.5 (v3.1) | Authorization bypass through a user-controlled key in … |
aws |
qnabot-on-aws |
2026-10-06T20:03:31.155Z | 2026-10-07T14:58:46.841Z |
| cve-2026-104046 | 6.2 (v3.1) | Sssd: sssd: denial of service via incomplete identity … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-06T20:03:06.080Z | 2026-11-05T15:53:06.973Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-081 | Vulnérabilités de Microsoft Internet Explorer | 2003-04-28T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-080 | Vulnérabilité dans Microsoft Outlook Express | 2003-04-28T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-079 | Vulnérabilité des commutateurs Catalyst de Cisco | 2003-04-25T00:00:00.000000 | 2003-04-25T00:00:00.000000 |
| certa-2003-avi-078 | Vulnérabilité dans le préprocesseur stream4 de Snort | 2003-04-18T00:00:00.000000 | 2003-04-18T00:00:00.000000 |
| certa-2003-avi-077 | Vulnérabilité dans la gestion des messages par le noyau Windows | 2003-04-17T00:00:00.000000 | 2003-04-17T00:00:00.000000 |
| certa-2003-avi-076 | Vulnérabilité dans "Eye of GNOME" | 2003-04-11T00:00:00.000000 | 2003-04-17T00:00:00.000000 |
| certa-2003-avi-075 | Vulnérabilité de Microsoft Winsock Proxy Service et de Microsoft ISA Firewall Service | 2003-04-11T00:00:00.000000 | 2003-04-11T00:00:00.000000 |
| certa-2003-avi-074 | Vulnérabilité de la machine virtuelle Java Microsoft | 2003-04-10T00:00:00.000000 | 2003-04-10T00:00:00.000000 |
| certa-2003-avi-073 | Vulnérabilité du serveur HTTP Apache | 2003-04-09T00:00:00.000000 | 2003-04-09T00:00:00.000000 |
| certa-2003-avi-072 | Vulnérabilité sur Samba | 2003-04-07T00:00:00.000000 | 2003-05-22T00:00:00.000000 |
| certa-2003-avi-071 | Vulnérabilité de Quicktime Player sous Windows | 2003-04-04T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-070 | Vulnérabilité de la commande lpq sous Solaris | 2003-04-02T00:00:00.000000 | 2003-04-02T00:00:00.000000 |
| certa-2003-avi-069 | Vulnérabilité de Sendmail | 2003-03-31T00:00:00.000000 | 2003-03-31T00:00:00.000000 |
| certa-2003-avi-068 | Deux vulnérabilités de Lotus Notes et Domino | 2003-03-28T00:00:00.000000 | 2003-03-28T00:00:00.000000 |
| certa-2003-avi-067 | Vulnérabilité dans les émulateurs de terminaux | 2003-03-28T00:00:00.000000 | 2004-04-29T00:00:00.000000 |
| certa-2003-avi-066 | Vulnérabilité dans les RPC sous Windows | 2003-03-27T00:00:00.000000 | 2003-03-27T00:00:00.000000 |
| certa-2003-avi-065 | Vulnérabilité sur le moteur de recherche "Aurweb" de la société Auracom | 2003-03-27T00:00:00.000000 | 2003-03-27T00:00:00.000000 |
| certa-2003-avi-064 | Vulnérabilité dans Ethereal | 2003-03-26T00:00:00.000000 | 2003-04-28T00:00:00.000000 |
| certa-2003-avi-063 | Vulnérabilités de Ximian Evolution | 2003-03-26T00:00:00.000000 | 2003-03-26T00:00:00.000000 |
| certa-2003-avi-062 | Faille dans McAfee "Security ePolicy Orchestrator" | 2003-03-26T00:00:00.000000 | 2003-03-26T00:00:00.000000 |
| certa-2003-avi-061 | Multiples vulnérabilités dans le paquetage Netpbm | 2003-03-26T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-060 | Vulnérabilité dans la bibliothèque zlib | 2003-03-26T00:00:00.000000 | 2003-03-27T00:00:00.000000 |
| certa-2003-avi-059 | Vulnérabilité dans certains clients FTP | 2003-03-25T00:00:00.000000 | 2003-03-25T00:00:00.000000 |
| certa-2003-avi-058 | Multiples vulnérabilités dans le serveur FTPD sous IRIX | 2003-03-25T00:00:00.000000 | 2003-03-25T00:00:00.000000 |
| certa-2003-avi-057 | Failles dans des implémentations de SSL/TLS | 2003-03-25T00:00:00.000000 | 2003-04-01T00:00:00.000000 |
| certa-2003-avi-056 | Vulnérabilités dans le garde-barrière Firewall-1 NG | 2003-03-24T00:00:00.000000 | 2003-03-24T00:00:00.000000 |
| certa-2003-avi-055 | Vulnérabilité du client de messagerie Mutt | 2003-03-21T00:00:00.000000 | 2003-04-04T00:00:00.000000 |
| certa-2003-avi-054 | Vulnérabilité de Windows Script Engine | 2003-03-20T00:00:00.000000 | 2003-03-20T00:00:00.000000 |
| certa-2003-avi-053 | Vulnérabilité de Microsoft ISA Server 2000 | 2003-03-20T00:00:00.000000 | 2003-03-20T00:00:00.000000 |
| certa-2003-avi-052 | Vulnérabilité dans les Sun RPC | 2003-03-20T00:00:00.000000 | 2003-05-30T00:00:00.000000 |