Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115325 | 8.7 (v4.0) 8.3 (v3.1) | Netmaker through 1.7.0 Authorization Bypass via update… |
gravitl |
netmaker |
2026-10-22T10:57:43.846Z | 2026-10-23T15:05:01.043Z |
| cve-2026-115329 | 6 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Cross-Organization IDOR via Subsc… |
uselotus |
lotus |
2026-10-22T10:57:46.708Z | 2026-10-23T15:04:20.467Z |
| cve-2026-115333 | 8.2 (v4.0) 5.9 (v3.1) | Lotus through 0.10.2 Improper Authentication via Event… |
uselotus |
lotus |
2026-10-22T10:57:49.499Z | 2026-10-23T15:03:54.486Z |
| cve-2026-114515 | OCO-Server: Self-Service Portal uninstall-job authoriz… |
schorschii |
OCO-Server |
2026-10-22T14:58:02.272Z | 2026-10-23T15:03:45.075Z | |
| cve-2026-114607 | better-auth: OAuth state can be used as a Magic Link t… |
better-auth |
better-auth |
2026-10-22T16:47:27.480Z | 2026-10-23T15:02:40.820Z | |
| cve-2026-115356 | 5.3 (v4.0) 5.4 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes… |
openbao |
openbao |
2026-10-22T19:13:32.611Z | 2026-10-23T15:02:35.215Z |
| cve-2026-115364 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.3 Missing Header Check on Agent/Pro… |
openbao |
openbao |
2026-10-22T19:13:38.282Z | 2026-10-23T15:02:16.016Z |
| cve-2026-115370 | 5.3 (v4.0) 4.3 (v3.1) | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1… |
lxc |
incus |
2026-10-22T19:13:41.181Z | 2026-10-23T15:01:52.150Z |
| cve-2026-115374 | 7.1 (v4.0) 7.1 (v3.1) | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsign… |
lxc |
incus |
2026-10-22T19:13:43.999Z | 2026-10-23T15:01:34.195Z |
| cve-2026-115378 | 6.9 (v4.0) 5.8 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:47.035Z | 2026-10-23T15:01:16.157Z |
| cve-2026-115382 | 5.9 (v4.0) 4.8 (v3.1) | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:49.956Z | 2026-10-23T15:01:00.837Z |
| cve-2026-115386 | 2.1 (v4.0) 2.6 (v3.1) | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:52.931Z | 2026-10-23T15:00:52.816Z |
| cve-2026-115390 | 6.9 (v4.0) 5.7 (v3.1) | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.910Z | 2026-10-23T15:00:44.401Z |
| cve-2026-115394 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra through 12.2 Denial of Service via BinaryField … |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:00.068Z | 2026-10-23T15:00:37.926Z |
| cve-2026-115398 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via TAR and ZIP F… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:03.058Z | 2026-10-23T15:00:30.147Z |
| cve-2026-115449 | 3.5 (v3.1) | Libslirp: libslirp: icmp echo reply length desynchroni… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:20:56.855Z | 2026-10-23T15:00:22.267Z |
| cve-2026-114617 | Authlib: ID token can disable its own nonce validation… |
authlib |
authlib |
2026-10-22T21:25:31.732Z | 2026-10-23T15:00:16.051Z | |
| cve-2026-54615 | Part-DB: Stored XSS / HTML injection in activity-log E… |
Part-DB |
Part-DB-server |
2026-10-23T03:45:02.512Z | 2026-10-23T15:00:09.748Z | |
| cve-2026-86020 | Part-DB: Spreadsheet Formula Injection in XLSX Part Exports |
Part-DB |
Part-DB-server |
2026-10-23T04:05:24.420Z | 2026-10-23T14:59:59.159Z | |
| cve-2026-115723 | 8.3 (v4.0) 7.4 (v3.1) | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and … |
davenardella |
snap7 |
2026-10-23T11:36:47.011Z | 2026-10-23T14:59:52.690Z |
| cve-2026-57113 | PraisonAI GitHub template cache path traversal allows … |
MervinPraison |
PraisonAI |
2026-10-23T12:04:04.048Z | 2026-10-23T14:59:39.455Z | |
| cve-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:27.854Z | 2026-10-23T14:59:32.712Z | |
| cve-2026-63120 | PGHoard: Incomplete Path Traversal fix in restore.py a… |
Aiven-Open |
pghoard |
2026-10-23T12:16:36.584Z | 2026-10-23T14:59:26.366Z | |
| cve-2026-55889 | XDG Desktop Portal: Drag-and-drop and copy-paste theft… |
flatpak |
xdg-desktop-portal |
2026-10-23T12:35:05.502Z | 2026-10-23T14:59:19.599Z | |
| cve-2026-112857 | 9.8 (v3.1) | WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio… |
axiomthemes |
Reprizo |
2026-10-23T13:00:17.920Z | 2026-10-23T14:59:12.653Z |
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-115481 | baserCMS: BcCustomContent file fields can be configure… |
baserproject |
basercms |
2026-10-23T13:34:26.038Z | 2026-10-23T14:58:03.802Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-090 | Vulnérabilité de in.lpd sous Solaris | 2001-09-03T00:00:00.000000 | 2001-09-03T00:00:00.000000 |
| certa-2001-avi-087 | Vulnérabilité de HP Openview NNM | 2001-08-28T00:00:00.000000 | 2001-08-28T00:00:00.000000 |
| certa-2001-avi-086 | Multiples vulnérabilités dans Cisco CBOS | 2001-08-27T00:00:00.000000 | 2001-08-27T00:00:00.000000 |
| certa-2001-avi-085 | Vulnérabilité dans sendmail | 2001-08-23T00:00:00.000000 | 2001-08-23T00:00:00.000000 |
| certa-2001-avi-083 | Débordement de mémoire de Windows Media Player | 2001-07-27T00:00:00.000000 | 2001-07-27T00:00:00.000000 |
| certa-2001-avi-082 | Vulnérabilité dans le serveur Terminal sous Windows NT et 2000 | 2001-07-26T00:00:00.000000 | 2001-07-26T00:00:00.000000 |
| certa-2001-avi-080 | Vulnérabilité dans Microsoft Services pour Unix 2.0 | 2001-07-25T00:00:00.000000 | 2001-07-25T00:00:00.000000 |
| certa-2001-avi-079 | Vulnérabilité dans SSH Secure Shell 3.0.0 | 2001-07-24T00:00:00.000000 | 2001-07-24T00:00:00.000000 |
| certa-2001-avi-078 | Vulnérabilité de l'identification SMTP sous Windows 2000 | 2001-07-19T00:00:00.000000 | 2001-07-19T00:00:00.000000 |
| certa-2001-avi-077 | Vulnérabilité dans xloadimage | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-076 | Vulnérabilité dans PPTP sous CISCO IOS | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-075 | Vulnérabilité de Firewall-1 | 2001-07-13T00:00:00.000000 | 2001-07-13T00:00:00.000000 |
| certa-2001-avi-074 | Vulnérabilités dans les Cisco VN 5420 | 2001-07-12T00:00:00.000000 | 2001-07-12T00:00:00.000000 |
| certa-2001-avi-073 | Vulnérabilité d'Oracle | 2001-07-05T00:00:00.000000 | 2001-07-05T00:00:00.000000 |
| certa-2001-avi-072 | Vulnérabilité dans ypbind sous SunOS | 2001-07-05T00:00:00.000000 | 2001-07-05T00:00:00.000000 |
| certa-2001-avi-071 | Vulnérabilité du serveur HTTP IOS | 2001-06-28T00:00:00.000000 | 2001-06-28T00:00:00.000000 |
| certa-2001-avi-070 | Vulnérabilité dans Exim | 2001-06-27T00:00:00.000000 | 2001-06-27T00:00:00.000000 |
| certa-2001-avi-069 | Vulnérabilité dans Samba | 2001-06-27T00:00:00.000000 | 2001-06-27T00:00:00.000000 |
| certa-2001-avi-068 | Vulnérabilité de LDAP sous Microsoft Windows 2000 | 2001-06-27T00:00:00.000000 | 2001-06-27T00:00:00.000000 |
| certa-2001-avi-067 | Vulnérabilité dans fetchmail | 2001-06-27T00:00:00.000000 | 2001-06-27T00:00:00.000000 |
| certa-2001-avi-066 | Vulnérabilité des Extensions FrontPage de Microsoft IIS | 2001-06-26T00:00:00.000000 | 2001-06-26T00:00:00.000000 |
| certa-2001-avi-065 | Vulnérabilité dans la gestion des macros dans Microsoft Word | 2001-06-25T00:00:00.000000 | 2001-06-25T00:00:00.000000 |
| certa-2001-avi-064 | Vulnérabilité dans le serveur d'indéxation Windows | 2001-06-19T00:00:00.000000 | 2001-06-19T00:00:00.000000 |
| certa-2001-avi-063 | Vulnérabilité de MS SQL Server | 2001-06-13T00:00:00.000000 | 2001-06-13T00:00:00.000000 |
| certa-2001-avi-062 | Vulnérabilité de Xinetd | 2001-06-11T00:00:00.000000 | 2001-06-11T00:00:00.000000 |
| certa-2001-avi-061 | Vulnérabilité de Qpopper | 2001-06-08T00:00:00.000000 | 2001-06-08T00:00:00.000000 |
| certa-2001-avi-060 | Multiples vulnérabilités du service telnet sous Windows 2000 | 2001-06-08T00:00:00.000000 | 2001-06-08T00:00:00.000000 |
| certa-2001-avi-059 | Vulnérabilité d'Exchange 2000 | 2001-06-07T00:00:00.000000 | 2001-06-07T00:00:00.000000 |
| certa-2001-avi-058 | Vulnérabilités dans Windows Media Player | 2001-05-29T00:00:00.000000 | 2001-05-29T00:00:00.000000 |
| certa-2001-avi-057 | Vulnérabilité dans IOS version 12.1(2)T et 12.1(3)T | 2001-05-25T00:00:00.000000 | 2001-05-25T00:00:00.000000 |