Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115329 | 6 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Cross-Organization IDOR via Subsc… |
uselotus |
lotus |
2026-10-22T10:57:46.708Z | 2026-10-23T15:04:20.467Z |
| cve-2026-115333 | 8.2 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Improper Authentication via Event… |
uselotus |
lotus |
2026-10-22T10:57:49.499Z | 2026-10-23T15:03:54.486Z |
| cve-2026-114515 | OCO-Server: Self-Service Portal uninstall-job authoriz… |
schorschii |
OCO-Server |
2026-10-22T14:58:02.272Z | 2026-10-23T15:03:45.075Z | |
| cve-2026-114607 | better-auth: OAuth state can be used as a Magic Link t… |
better-auth |
better-auth |
2026-10-22T16:47:27.480Z | 2026-10-23T15:02:40.820Z | |
| cve-2026-115356 | 5.3 (v4.0) 5.4 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes… |
openbao |
openbao |
2026-10-22T19:13:32.611Z | 2026-10-23T15:02:35.215Z |
| cve-2026-115364 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.3 Missing Header Check on Agent/Pro… |
openbao |
openbao |
2026-10-22T19:13:38.282Z | 2026-10-23T15:02:16.016Z |
| cve-2026-115370 | 5.3 (v4.0) 4.3 (v3.1) | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1… |
lxc |
incus |
2026-10-22T19:13:41.181Z | 2026-10-23T15:01:52.150Z |
| cve-2026-115374 | 7.1 (v4.0) 7.1 (v3.1) | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsign… |
lxc |
incus |
2026-10-22T19:13:43.999Z | 2026-10-23T15:01:34.195Z |
| cve-2026-115378 | 6.9 (v4.0) 5.8 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:47.035Z | 2026-10-23T15:01:16.157Z |
| cve-2026-115382 | 5.9 (v4.0) 4.8 (v3.1) | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:49.956Z | 2026-10-23T15:01:00.837Z |
| cve-2026-115386 | 2.1 (v4.0) 2.6 (v3.1) | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:52.931Z | 2026-10-23T15:00:52.816Z |
| cve-2026-115390 | 6.9 (v4.0) 5.7 (v3.1) | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.910Z | 2026-10-23T15:00:44.401Z |
| cve-2026-115394 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra through 12.2 Denial of Service via BinaryField … |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:00.068Z | 2026-10-23T15:00:37.926Z |
| cve-2026-115398 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via TAR and ZIP F… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:03.058Z | 2026-10-23T15:00:30.147Z |
| cve-2026-115449 | 3.5 (v3.1) | Libslirp: libslirp: icmp echo reply length desynchroni… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:20:56.855Z | 2026-10-23T15:00:22.267Z |
| cve-2026-114617 | Authlib: ID token can disable its own nonce validation… |
authlib |
authlib |
2026-10-22T21:25:31.732Z | 2026-10-23T15:00:16.051Z | |
| cve-2026-54615 | Part-DB: Stored XSS / HTML injection in activity-log E… |
Part-DB |
Part-DB-server |
2026-10-23T03:45:02.512Z | 2026-10-23T15:00:09.748Z | |
| cve-2026-86020 | Part-DB: Spreadsheet Formula Injection in XLSX Part Exports |
Part-DB |
Part-DB-server |
2026-10-23T04:05:24.420Z | 2026-10-23T14:59:59.159Z | |
| cve-2026-115723 | 8.3 (v4.0) 7.4 (v3.1) | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and … |
davenardella |
snap7 |
2026-10-23T11:36:47.011Z | 2026-10-23T14:59:52.690Z |
| cve-2026-57113 | PraisonAI GitHub template cache path traversal allows … |
MervinPraison |
PraisonAI |
2026-10-23T12:04:04.048Z | 2026-10-23T14:59:39.455Z | |
| cve-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:27.854Z | 2026-10-23T14:59:32.712Z | |
| cve-2026-63120 | PGHoard: Incomplete Path Traversal fix in restore.py a… |
Aiven-Open |
pghoard |
2026-10-23T12:16:36.584Z | 2026-10-23T14:59:26.366Z | |
| cve-2026-55889 | XDG Desktop Portal: Drag-and-drop and copy-paste theft… |
flatpak |
xdg-desktop-portal |
2026-10-23T12:35:05.502Z | 2026-10-23T14:59:19.599Z | |
| cve-2026-112857 | 9.8 (v3.1) | WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio… |
axiomthemes |
Reprizo |
2026-10-23T13:00:17.920Z | 2026-10-23T14:59:12.653Z |
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-115481 | baserCMS: BcCustomContent file fields can be configure… |
baserproject |
basercms |
2026-10-23T13:34:26.038Z | 2026-10-23T14:58:03.802Z | |
| cve-2026-57208 | Entire CLI: Path traversal in checkpoint session metad… |
entireio |
cli |
2026-10-23T13:37:40.983Z | 2026-10-23T14:57:55.652Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2002-avi-077 | Débordement de tampon dans « Netware Remote Manager » | 2002-04-15T00:00:00.000000 | 2002-04-15T00:00:00.000000 |
| certa-2002-avi-074 | Vulnérabilité de Cisco Aironet | 2002-04-10T00:00:00.000000 | 2002-04-10T00:00:00.000000 |
| certa-2002-avi-073 | Vulnérabilité sur le serveur SMTP Lotus Domino 5.0.8 | 2002-04-09T00:00:00.000000 | 2002-04-09T00:00:00.000000 |
| certa-2002-avi-072 | Vulnérabilité du service MUP sous Windows | 2002-04-05T00:00:00.000000 | 2002-04-05T00:00:00.000000 |
| certa-2002-avi-071 | Vulnérabilité de Windows 2000 | 2002-04-05T00:00:00.000000 | 2002-04-05T00:00:00.000000 |
| certa-2002-avi-070 | Vulnérabilités dans Cisco Secure ACS pour Windows | 2002-04-05T00:00:00.000000 | 2002-04-05T00:00:00.000000 |
| certa-2002-avi-068 | Vulnérabilité dans Squid | 2002-04-02T00:00:00.000000 | 2002-04-02T00:00:00.000000 |
| certa-2002-avi-067 | Dénis de service sous IRIX/SGI | 2002-04-02T00:00:00.000000 | 2002-04-02T00:00:00.000000 |
| certa-2002-avi-066 | Vulnérabilités dans Internet Explorer | 2002-03-29T00:00:00.000000 | 2002-03-29T00:00:00.000000 |
| certa-2002-avi-065 | Vulnérabilité du logiciel Analog | 2002-03-29T00:00:00.000000 | 2002-03-29T00:00:00.000000 |
| certa-2002-avi-064 | Vulnérabilité de CISCO CallManager 3.1 | 2002-03-28T00:00:00.000000 | 2002-03-28T00:00:00.000000 |
| certa-2000-avi-079 | Vulnérabilité de Netscape sous Unix | 2000-12-01T00:00:00.000000 | 2002-03-28T00:00:00.000000 |
| certa-2001-avi-139 | Vulnérabilité de CDE | 2001-11-13T00:00:00.000000 | 2002-03-27T00:00:00.000000 |
| certa-2002-avi-063 | Vulnérabilité dans GESTOR 2.21 | 2002-03-26T00:00:00.000000 | 2002-03-26T00:00:00.000000 |
| certa-2002-avi-062 | Vulnérabilité dans le service d'accès Web <SPAN class="textit">XWebMail</SPAN> de la société XandMail | 2002-03-26T00:00:00.000000 | 2002-03-26T00:00:00.000000 |
| certa-2002-avi-061 | Vulnérabilité sur webmin | 2002-03-25T00:00:00.000000 | 2002-03-25T00:00:00.000000 |
| certa-2002-avi-060 | Vulnérabilité dans le commutateur Alteon ACEdirector (AD) de Nortel Networks | 2002-03-25T00:00:00.000000 | 2002-03-25T00:00:00.000000 |
| certa-2002-avi-059 | Vulnérabilité sur les gestionnaires d'affichage X11 utilisant le protocole XDMCP | 2002-03-21T00:00:00.000000 | 2002-03-22T00:00:00.000000 |
| certa-2002-avi-058 | Vulnérabilité de l'agent SNMP sous Lotus Domino | 2002-03-20T00:00:00.000000 | 2002-03-20T00:00:00.000000 |
| certa-2002-avi-057 | Multiples vulnérabilités sur Lotus Domino 5.0 | 2002-03-20T00:00:00.000000 | 2002-03-20T00:00:00.000000 |
| certa-2002-avi-055 | Contournement de l'autentification pam-pgsql | 2002-03-19T00:00:00.000000 | 2002-03-19T00:00:00.000000 |
| certa-2002-avi-035 | Débordement de mémoire dans CUPS | 2002-02-18T00:00:00.000000 | 2002-03-19T00:00:00.000000 |
| certa-2002-avi-054 | Vulnérabilité dans Netscape Communicator 6.0 | 2002-03-15T00:00:00.000000 | 2002-03-15T00:00:00.000000 |
| certa-2002-avi-033 | Vulnérabilité du service <TT>SNMP</TT> sous Microsoft Windows | 2002-02-13T00:00:00.000000 | 2002-03-15T00:00:00.000000 |
| certa-2002-avi-053 | Débordement de mémoire dans OpenSSH v2 | 2002-03-12T00:00:00.000000 | 2002-03-12T00:00:00.000000 |
| certa-2002-avi-052 | Vulnérabilité dans la librairie <TT>zlib / libz</TT> | 2002-03-12T00:00:00.000000 | 2002-03-12T00:00:00.000000 |
| certa-2002-avi-051 | Vulnérabilité dans le shell Windows | 2002-03-08T00:00:00.000000 | 2002-03-08T00:00:00.000000 |
| certa-2002-avi-043 | Multiples Vulnérabilités sur squid | 2002-02-22T00:00:00.000000 | 2002-03-07T00:00:00.000000 |
| certa-2002-avi-021 | Mise à jour de la gestion des fragments dans Ipfilter | 2002-02-01T00:00:00.000000 | 2002-03-06T00:00:00.000000 |
| certa-2002-avi-049 | Vulnérabilité SSL sous Apache | 2002-03-05T00:00:00.000000 | 2002-03-05T00:00:00.000000 |