Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106062 | 7.8 (v3.1) | Gimp: gimp: heap buffer overflow in dds loader on craf… |
Red Hat |
Red Hat Enterprise Linux 9 |
2026-10-06T20:02:52.466Z | 2026-11-04T21:41:29.455Z |
| cve-2026-101258 | 7.8 (v3.1) | Ghostscript: ghostscript: -dsafer sandbox bypass via t… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-06T20:02:24.398Z | 2026-11-04T21:43:31.186Z |
| cve-2026-19029 | 6.8 (v4.0) | HDF5 scale-offset filter heap buffer over-read via cra… |
The HDF Group |
HDF5 |
2026-10-06T20:01:36.340Z | 2026-10-07T16:05:28.833Z |
| cve-2026-106454 | Twisted: IMAP wildcardToRegexp() ReDoS |
twisted |
twisted |
2026-10-06T19:55:36.523Z | 2026-10-07T16:26:14.095Z | |
| cve-2026-106453 | yawkat LZ4 Java: LZ4DecompressorWithLength allocates t… |
yawkat |
lz4-java |
2026-10-06T19:54:04.124Z | 2026-10-07T17:07:33.181Z | |
| cve-2026-106452 | yawkat LZ4 Java: LZ4BlockInputStream allocates an unva… |
yawkat |
lz4-java |
2026-10-06T19:52:37.818Z | 2026-10-07T10:45:18.010Z | |
| cve-2026-105244 | 5.3 (v3.1) | Apache log4net: RemoteSyslogAppender silently deletes … |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:52:31.116Z | 2026-10-07T14:50:49.648Z |
| cve-2026-105243 | 5.3 (v3.1) | Apache log4net: Oversize EventLogAppender record silen… |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:51:25.116Z | 2026-10-07T14:49:41.976Z |
| cve-2026-106451 | yawkat LZ4 Java: Native library extraction to a shared… |
yawkat |
lz4-java |
2026-10-06T19:50:41.915Z | 2026-10-07T18:26:06.020Z | |
| cve-2026-105242 | 5.3 (v3.1) | Apache log4net: Request validation failure drops the e… |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:50:19.075Z | 2026-10-07T14:49:06.441Z |
| cve-2026-105241 | 5.3 (v3.1) | Apache log4net: Unencodable content discards a whole S… |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:49:03.994Z | 2026-10-07T14:45:58.074Z |
| cve-2026-106450 | yawkat LZ4 Java: LZ4FrameInputStream reallocates block… |
yawkat |
lz4-java |
2026-10-06T19:48:40.092Z | 2026-10-09T01:44:37.343Z | |
| cve-2026-105240 | 5.3 (v3.1) | Apache log4net: NUL character truncates OutputDebugStr… |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:47:44.900Z | 2026-10-07T16:27:16.989Z |
| cve-2026-105239 | 5.3 (v3.1) | Apache log4net: NUL character truncates EventLogAppend… |
Apache Software Foundation |
Apache log4net |
2026-10-06T19:46:33.357Z | 2026-10-07T06:11:55.256Z |
| cve-2026-106449 | yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyB… |
yawkat |
lz4-java |
2026-10-06T19:46:28.569Z | 2026-10-07T16:28:56.080Z | |
| cve-2026-106448 | StableLib: Prototype poisoning via `__proto__` map key… |
StableLib |
stablelib |
2026-10-06T19:45:02.616Z | 2026-10-07T17:07:38.703Z | |
| cve-2026-105111 | 4.7 (v3.1) 2.3 (v4.0) | Apache Commons BCEL: Class2HTML emits unescaped class … |
Apache Software Foundation |
Apache Commons BCEL |
2026-10-06T19:44:18.075Z | 2026-10-07T06:11:54.071Z |
| cve-2026-106447 | StableLib: Stack exhaustion denial of service via deep… |
StableLib |
stablelib |
2026-10-06T19:44:03.028Z | 2026-10-07T14:40:22.293Z | |
| cve-2026-94114 | 5.9 (v3.1) 8.2 (v4.0) | Apache Commons BCEL: Class repositories cache class fi… |
Apache Software Foundation |
Apache Commons BCEL |
2026-10-06T19:42:30.421Z | 2026-10-08T05:26:10.375Z |
| cve-2026-106446 | Handlebars: JavaScript Injection via AST Type Confusio… |
handlebars-lang |
handlebars.js |
2026-10-06T19:41:55.785Z | 2026-10-07T18:30:12.451Z | |
| cve-2026-102165 | 7.5 (v3.1) 7.7 (v4.0) | Security Advisory 0198 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:32.909Z | 2026-10-06T20:00:05.234Z |
| cve-2026-102167 | 7.5 (v3.1) 9 (v4.0) | Security Advisory 0197 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:32.432Z | 2026-10-06T20:00:36.697Z |
| cve-2026-102164 | 3.1 (v3.1) 2.3 (v4.0) | Security Advisory 0196 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:31.913Z | 2026-10-06T20:07:54.692Z |
| cve-2026-102163 | 8.8 (v3.1) 8.7 (v4.0) | Security Advisory 0195 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:31.435Z | 2026-10-06T20:07:33.630Z |
| cve-2026-102169 | 6.5 (v3.1) 7.1 (v4.0) | Security Advisory 0194 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:30.888Z | 2026-10-06T20:07:05.528Z |
| cve-2026-102168 | 6.5 (v3.1) 7.1 (v4.0) | Security Advisory 0194 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:30.345Z | 2026-10-06T20:06:39.424Z |
| cve-2026-102162 | 8.8 (v3.1) 9.4 (v4.0) | Security Advisory 0193 |
Arista Networks |
Wi-Fi Access Points |
2026-10-06T19:40:29.864Z | 2026-10-06T20:06:08.243Z |
| cve-2026-101157 | 8.7 (v3.1) 9.3 (v4.0) | Security Advisory 0192 |
Arista Networks |
CloudVision CUE |
2026-10-06T19:40:29.387Z | 2026-10-06T20:05:36.991Z |
| cve-2026-101156 | 8.4 (v3.1) 6.2 (v4.0) | Security Advisory 0192 |
Arista Networks |
CloudVision CUE |
2026-10-06T19:40:28.902Z | 2026-10-06T20:05:03.281Z |
| cve-2026-102156 | 6.8 (v3.1) 6.9 (v4.0) | Security Advisory 0191 |
Arista Networks |
CloudVision CUE |
2026-10-06T19:40:28.369Z | 2026-10-06T20:04:33.983Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2003-avi-051 | Vulnérabilité des noyaux Linux 2.2 et 2.4 | 2003-03-18T00:00:00.000000 | 2003-03-28T00:00:00.000000 |
| certa-2003-avi-050 | Vulnérabilité de Microsoft IIS 5.0 | 2003-03-18T00:00:00.000000 | 2003-03-18T00:00:00.000000 |
| certa-2003-avi-049 | Vulnérabilité sur le protocole d'authentification de Lotus Notes | 2003-03-17T00:00:00.000000 | 2003-03-17T00:00:00.000000 |
| certa-2003-avi-048 | Vulnérabilités de Samba | 2003-03-17T00:00:00.000000 | 2003-03-20T00:00:00.000000 |
| certa-2003-avi-047 | Vulnérabilité du serveur mandataire Web Retriever de Lotus Notes/Domino | 2003-03-14T00:00:00.000000 | 2003-03-14T00:00:00.000000 |
| certa-2003-avi-046 | Faille dans le système d'impression lpr | 2003-03-14T00:00:00.000000 | 2003-05-22T00:00:00.000000 |
| certa-2003-avi-045 | Vulnérabilité dans les garde-barrières NetScreen 5XP/5XT | 2003-03-14T00:00:00.000000 | 2003-03-14T00:00:00.000000 |
| certa-2003-avi-044 | Multiples vulnérabilités dans tcpdump | 2003-03-13T00:00:00.000000 | 2003-03-25T00:00:00.000000 |
| certa-2003-avi-043 | Vulnérabilité dans la gestion du fichier ".forward" de sendmail sous Solaris | 2003-03-13T00:00:00.000000 | 2003-03-13T00:00:00.000000 |
| certa-2003-avi-042 | Vulnérabilité de qpopper | 2003-03-13T00:00:00.000000 | 2003-03-24T00:00:00.000000 |
| certa-2003-avi-041 | Vulnérabilité de LDAP sous IBM AIX | 2003-03-12T00:00:00.000000 | 2003-03-12T00:00:00.000000 |
| certa-2003-avi-040 | Vulnérabilités de Novell eDirectory | 2003-03-10T00:00:00.000000 | 2003-03-10T00:00:00.000000 |
| certa-2003-avi-039 | Vulnérabilité sur la suite Novell GroupWise 6.0 | 2003-03-10T00:00:00.000000 | 2003-03-10T00:00:00.000000 |
| certa-2003-avi-038 | Vulnérabilité de la commande file | 2003-03-10T00:00:00.000000 | 2003-03-24T00:00:00.000000 |
| certa-2003-avi-037 | Débordements de mémoire dans de multiples fonctions de <TT>libmcrypt</TT> sous Linux | 2003-03-07T00:00:00.000000 | 2003-03-07T00:00:00.000000 |
| certa-2003-avi-036 | Multiples vulnérabilités de Macromedia Flash Player | 2003-03-07T00:00:00.000000 | 2003-03-07T00:00:00.000000 |
| certa-2003-avi-035 | Vulnérabilité dans le préprocesseur RPC de snort | 2003-03-04T00:00:00.000000 | 2003-03-04T00:00:00.000000 |
| certa-2003-avi-034 | Vulnérabilité de sendmail | 2003-03-04T00:00:00.000000 | 2003-03-14T00:00:00.000000 |
| certa-2003-avi-033 | Débordement de pile sur la commande ps | 2003-02-28T00:00:00.000000 | 2003-02-28T00:00:00.000000 |
| certa-2003-avi-032 | Vulnérabilité dans Lynx | 2003-02-28T00:00:00.000000 | 2003-02-28T00:00:00.000000 |
| certa-2003-avi-031 | Vulnérabilité du serveur VNC et TightVNC | 2003-02-28T00:00:00.000000 | 2003-05-12T00:00:00.000000 |
| certa-2003-avi-030 | Vulnérabilité du protocole d'aide en ligne de Windows Millenium Edition | 2003-02-27T00:00:00.000000 | 2003-02-27T00:00:00.000000 |
| certa-2003-avi-029 | Vulnérabilité dans SSL/TLS | 2003-02-21T00:00:00.000000 | 2003-03-07T00:00:00.000000 |
| certa-2003-avi-028 | Vulnérabilité de la commande mail sous Solaris | 2003-02-20T00:00:00.000000 | 2003-02-20T00:00:00.000000 |
| certa-2003-avi-027 | Déni de service sous Solaris | 2003-02-20T00:00:00.000000 | 2003-02-20T00:00:00.000000 |
| certa-2003-avi-026 | Vulnérabilités sur le serveur Lotus Domino 6.0 | 2003-02-20T00:00:00.000000 | 2003-04-07T00:00:00.000000 |
| certa-2003-avi-025 | Vulnérabilité dans PHP | 2003-02-18T00:00:00.000000 | 2003-02-21T00:00:00.000000 |
| certa-2003-avi-024 | Vulnérabilités dans Oracle9i Application Server | 2003-02-17T00:00:00.000000 | 2003-02-17T00:00:00.000000 |
| certa-2003-avi-023 | Multiples vulnérabilités dans Oracle Database Server | 2003-02-17T00:00:00.000000 | 2003-02-20T00:00:00.000000 |
| certa-2003-avi-022 | Vulnérabilité de la bibliothèque libIM.a sous IBM AIX | 2003-02-13T00:00:00.000000 | 2003-02-13T00:00:00.000000 |