Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115321 | 5.3 (v4.0) 4.3 (v3.1) | Bytebase before 3.16.0 Authorization Bypass via Update… |
bytebase |
bytebase |
2026-10-22T10:57:40.982Z | 2026-10-23T15:05:29.678Z |
| cve-2026-115325 | 8.7 (v4.0) 8.3 (v3.1) | Netmaker through 1.7.0 Authorization Bypass via update… |
gravitl |
netmaker |
2026-10-22T10:57:43.846Z | 2026-10-23T15:05:01.043Z |
| cve-2026-115329 | 6 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Cross-Organization IDOR via Subsc… |
uselotus |
lotus |
2026-10-22T10:57:46.708Z | 2026-10-23T15:04:20.467Z |
| cve-2026-115333 | 8.2 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Improper Authentication via Event… |
uselotus |
lotus |
2026-10-22T10:57:49.499Z | 2026-10-23T15:03:54.486Z |
| cve-2026-114515 | OCO-Server: Self-Service Portal uninstall-job authoriz… |
schorschii |
OCO-Server |
2026-10-22T14:58:02.272Z | 2026-10-23T15:03:45.075Z | |
| cve-2026-114607 | better-auth: OAuth state can be used as a Magic Link t… |
better-auth |
better-auth |
2026-10-22T16:47:27.480Z | 2026-10-23T15:02:40.820Z | |
| cve-2026-115356 | 5.3 (v4.0) 5.4 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes… |
openbao |
openbao |
2026-10-22T19:13:32.611Z | 2026-10-23T15:02:35.215Z |
| cve-2026-115364 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.3 Missing Header Check on Agent/Pro… |
openbao |
openbao |
2026-10-22T19:13:38.282Z | 2026-10-23T15:02:16.016Z |
| cve-2026-115370 | 5.3 (v4.0) 4.3 (v3.1) | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1… |
lxc |
incus |
2026-10-22T19:13:41.181Z | 2026-10-23T15:01:52.150Z |
| cve-2026-115374 | 7.1 (v4.0) 7.1 (v3.1) | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsign… |
lxc |
incus |
2026-10-22T19:13:43.999Z | 2026-10-23T15:01:34.195Z |
| cve-2026-115378 | 6.9 (v4.0) 5.8 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:47.035Z | 2026-10-23T15:01:16.157Z |
| cve-2026-115382 | 5.9 (v4.0) 4.8 (v3.1) | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:49.956Z | 2026-10-23T15:01:00.837Z |
| cve-2026-115386 | 2.1 (v4.0) 2.6 (v3.1) | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:52.931Z | 2026-10-23T15:00:52.816Z |
| cve-2026-115390 | 6.9 (v4.0) 5.7 (v3.1) | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.910Z | 2026-10-23T15:00:44.401Z |
| cve-2026-115394 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra through 12.2 Denial of Service via BinaryField … |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:00.068Z | 2026-10-23T15:00:37.926Z |
| cve-2026-115398 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via TAR and ZIP F… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:03.058Z | 2026-10-23T15:00:30.147Z |
| cve-2026-115449 | 3.5 (v3.1) | Libslirp: libslirp: icmp echo reply length desynchroni… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:20:56.855Z | 2026-10-23T15:00:22.267Z |
| cve-2026-114617 | Authlib: ID token can disable its own nonce validation… |
authlib |
authlib |
2026-10-22T21:25:31.732Z | 2026-10-23T15:00:16.051Z | |
| cve-2026-54615 | Part-DB: Stored XSS / HTML injection in activity-log E… |
Part-DB |
Part-DB-server |
2026-10-23T03:45:02.512Z | 2026-10-23T15:00:09.748Z | |
| cve-2026-86020 | Part-DB: Spreadsheet Formula Injection in XLSX Part Exports |
Part-DB |
Part-DB-server |
2026-10-23T04:05:24.420Z | 2026-10-23T14:59:59.159Z | |
| cve-2026-115723 | 8.3 (v4.0) 7.4 (v3.1) | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and … |
davenardella |
snap7 |
2026-10-23T11:36:47.011Z | 2026-10-23T14:59:52.690Z |
| cve-2026-57113 | PraisonAI GitHub template cache path traversal allows … |
MervinPraison |
PraisonAI |
2026-10-23T12:04:04.048Z | 2026-10-23T14:59:39.455Z | |
| cve-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:27.854Z | 2026-10-23T14:59:32.712Z | |
| cve-2026-63120 | PGHoard: Incomplete Path Traversal fix in restore.py a… |
Aiven-Open |
pghoard |
2026-10-23T12:16:36.584Z | 2026-10-23T14:59:26.366Z | |
| cve-2026-55889 | XDG Desktop Portal: Drag-and-drop and copy-paste theft… |
flatpak |
xdg-desktop-portal |
2026-10-23T12:35:05.502Z | 2026-10-23T14:59:19.599Z | |
| cve-2026-112857 | 9.8 (v3.1) | WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio… |
axiomthemes |
Reprizo |
2026-10-23T13:00:17.920Z | 2026-10-23T14:59:12.653Z |
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-196 | Vulnérabilite de HylaFAX | 2002-08-30T00:00:00.000000 | 2002-08-30T00:00:00.000000 |
| certa-2002-avi-195 | Vulnérabilité de xinetd | 2002-08-29T00:00:00.000000 | 2002-08-29T00:00:00.000000 |
| certa-2002-avi-194 | Vulnérabilité dans un contrôle ActiveX sur Windows | 2002-08-29T00:00:00.000000 | 2002-08-29T00:00:00.000000 |
| certa-2002-avi-191 | Vulnérabilité sur Oracle Net | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-190 | Vulnérabilité sur la barre d'outils Google | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-188 | Multiples vulnérabilités dans le client VPN CISCO | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-187 | Multiples vulnérabilités dans Internet Explorer | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-186 | Vulnérabilité dans le contrôle ActiveX TSAC | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-185 | Débordement de mémoire dans le gestionnaire de ressources partagées sous Windows | 2002-08-23T00:00:00.000000 | 2002-08-23T00:00:00.000000 |
| certa-2002-avi-183 | Vulnérabilité dans la gestion des mots de passe sous Oracle Entreprise Manager Web site | 2002-08-22T00:00:00.000000 | 2002-08-22T00:00:00.000000 |
| certa-2002-avi-166 | Vulnérabilité dans la bibliotheque libpng | 2002-08-02T00:00:00.000000 | 2002-08-20T00:00:00.000000 |
| certa-2002-avi-182 | Vulnérabilité dans le démon L2TPD | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-181 | Vulnérabilité des commutateurs Cisco CSS séries 11000 | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-180 | Vulnérabilités sur Oracle Net Listener | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-179 | Vulnérabilité de l'appel système ptrace sous HP-UX | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-178 | Vulnérabilité dans le gestionnaire de connexions réseau sous Windows 2000 | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-177 | Vulnérabilités dans Microsoft SQL Server | 2002-08-19T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-139 | Vulnérabilité de souches client DNS | 2002-06-28T00:00:00.000000 | 2002-08-19T00:00:00.000000 |
| certa-2002-avi-176 | Vulnérabilité du serveur Apache 2.0 | 2002-08-13T00:00:00.000000 | 2002-08-13T00:00:00.000000 |
| certa-2002-avi-175 | Vulnérabilité dans Bulk Data Service (BDS) sous Irix | 2002-08-13T00:00:00.000000 | 2002-08-13T00:00:00.000000 |
| certa-2002-avi-174 | Vulnérabilité de l'agent SNMP de SunNet Manager | 2002-08-13T00:00:00.000000 | 2002-08-13T00:00:00.000000 |
| certa-2002-avi-172 | Multiples vulnérabilités sur les serveurs Web SunONE, iPlanet et Netscape | 2002-08-09T00:00:00.000000 | 2002-08-09T00:00:00.000000 |
| certa-2002-avi-171 | Vulnérabilités dans Macromedia Flash Player | 2002-08-09T00:00:00.000000 | 2002-08-09T00:00:00.000000 |
| certa-2002-avi-170 | Vulnérabilité de WS_FTP SERVER | 2002-08-09T00:00:00.000000 | 2002-08-09T00:00:00.000000 |
| certa-2002-avi-169 | Vulnérabilité sur VPN 5000 de CISCO | 2002-08-08T00:00:00.000000 | 2002-08-08T00:00:00.000000 |
| certa-2002-avi-168 | Vulnérabilités dans Microsoft Content Manager Server 2001 | 2002-08-08T00:00:00.000000 | 2002-08-08T00:00:00.000000 |
| certa-2002-avi-167 | Problème de gestion des descripteurs de fichier sous BSD | 2002-08-05T00:00:00.000000 | 2002-08-05T00:00:00.000000 |
| certa-2002-avi-165 | Vulnerabilité de la bibliothèque libmm | 2002-08-01T00:00:00.000000 | 2002-08-01T00:00:00.000000 |
| certa-2002-avi-164 | Débordement de mémoire dans MDAC pour Microsoft SQL Server | 2002-08-01T00:00:00.000000 | 2002-08-01T00:00:00.000000 |
| certa-2002-avi-161 | Vulnérabilité du serveur TFTP dans CISCO IOS | 2002-07-31T00:00:00.000000 | 2002-07-31T00:00:00.000000 |