Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106110 | ImageSharp: TIFF CCITT T4 encoder can write past its c… |
SixLabors |
ImageSharp |
2026-10-06T17:42:02.099Z | 2026-10-09T01:19:50.868Z | |
| cve-2026-106109 | Quasar Framework: App Vite build cleanup can recursive… |
quasarframework |
quasar |
2026-10-06T17:32:08.136Z | 2026-10-06T19:43:35.076Z | |
| cve-2026-106107 | Quasar Framework: App Vite SSR and SSG nonce attribute… |
quasarframework |
quasar |
2026-10-06T17:26:19.769Z | 2026-10-06T19:29:55.266Z | |
| cve-2026-106106 | Quasar Framework: SSR/SSG dev error page discloses the… |
quasarframework |
quasar |
2026-10-06T17:24:07.788Z | 2026-10-06T18:22:44.948Z | |
| cve-2026-106105 | Quasar Framework: Development TLS private keys are cac… |
quasarframework |
quasar |
2026-10-06T17:20:36.923Z | 2026-10-06T17:53:57.230Z | |
| cve-2026-106104 | Quasar Framework: Super-linear regex backtracking on U… |
quasarframework |
quasar |
2026-10-06T17:14:45.817Z | 2026-10-09T01:18:50.675Z | |
| cve-2026-106103 | Quasar Framework: Path Traversal / Arbitrary File Writ… |
quasarframework |
quasar |
2026-10-06T17:11:03.821Z | 2026-10-06T19:42:52.902Z | |
| cve-2026-106102 | Quasar Framework: Stored/Reflected XSS via unescaped S… |
quasarframework |
quasar |
2026-10-06T17:07:55.498Z | 2026-10-06T17:39:02.751Z | |
| cve-2026-106101 | Quasar Framework: DOM Clobbering in Quasar openURL() S… |
quasarframework |
quasar |
2026-10-06T17:04:39.673Z | 2026-10-06T17:26:21.581Z | |
| cve-2026-106100 | Payload: Field-level write access bypass in Payload on… |
payloadcms |
payload |
2026-10-06T16:56:55.715Z | 2026-10-06T17:28:55.961Z | |
| cve-2026-105868 | Payload: Uploaded XML files could execute same-origin … |
payloadcms |
payload |
2026-10-06T16:51:34.054Z | 2026-10-09T01:17:45.783Z | |
| cve-2026-105867 | Payload: Client uploads could overwrite S3 objects |
payloadcms |
payload |
2026-10-06T16:49:12.532Z | 2026-10-06T17:24:39.913Z | |
| cve-2026-105866 | Payload: Unauthenticated account-lockout denial of service |
payloadcms |
payload |
2026-10-06T16:46:31.069Z | 2026-10-06T17:39:09.686Z | |
| cve-2026-105865 | Payload: Incomplete validation during the upload file … |
payloadcms |
payload |
2026-10-06T16:45:09.932Z | 2026-10-06T17:11:18.423Z | |
| cve-2026-105864 | Payload: Cross-tenant create in @payloadcms/plugin-mul… |
payloadcms |
payload |
2026-10-06T16:42:27.942Z | 2026-10-06T17:25:18.758Z | |
| cve-2026-105863 | Payload authentication token field handling issue |
payloadcms |
payload |
2026-10-06T16:39:44.912Z | 2026-10-09T01:15:33.512Z | |
| cve-2026-105862 | Payload: Bypassed sanitization of user uploaded SVGs |
payloadcms |
payload |
2026-10-06T16:37:59.487Z | 2026-10-06T17:24:09.513Z | |
| cve-2026-105861 | Payload external upload trust validation issue |
payloadcms |
payload |
2026-10-06T16:34:41.622Z | 2026-10-06T17:39:16.866Z | |
| cve-2026-105860 | Payload: Tenant authorization bypass in Multi-Tenant Plugin |
payloadcms |
payload |
2026-10-06T16:33:20.213Z | 2026-10-06T17:15:03.137Z | |
| cve-2026-106219 | 6.5 (v3.1) | In JetBrains TeamCity before 2026.2.1 missing val… |
JetBrains |
TeamCity |
2026-10-06T16:33:06.849Z | 2026-10-06T17:17:34.067Z |
| cve-2026-106218 | 8.8 (v3.1) | In JetBrains TeamCity before 2026.1.3 2025.11.7 k… |
JetBrains |
TeamCity |
2026-10-06T16:33:06.018Z | 2026-10-07T03:55:22.189Z |
| cve-2026-105859 | Payload: Unauthorized update to collection documents |
payloadcms |
payload |
2026-10-06T16:31:52.275Z | 2026-10-06T17:37:22.423Z | |
| cve-2026-105858 | Payload: Remote Code Execution through first-register |
payloadcms |
payload |
2026-10-06T16:29:52.420Z | 2026-10-09T01:14:15.431Z | |
| cve-2026-105857 | Payload: RCE in Payload Form Builder |
payloadcms |
payload |
2026-10-06T16:26:54.885Z | 2026-10-06T17:23:32.964Z | |
| cve-2026-105856 | Payload: SQL injection in SQLite/Postgres |
payloadcms |
payload |
2026-10-06T16:23:58.643Z | 2026-10-06T17:39:22.911Z | |
| cve-2026-105855 | Payload: Field-level password update restrictions were… |
payloadcms |
payload |
2026-10-06T16:18:53.672Z | 2026-10-06T17:18:56.091Z | |
| cve-2026-105854 | Payload: ReDoS in Multipart Content-Type Validation |
payloadcms |
payload |
2026-10-06T16:17:30.893Z | 2026-10-06T17:30:01.567Z | |
| cve-2026-105853 | Payload: Token refresh and password reset responses ma… |
payloadcms |
payload |
2026-10-06T16:16:14.512Z | 2026-10-09T01:12:54.335Z | |
| cve-2026-104070 | 9.3 (v4.0) 9.8 (v3.1) | SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE |
SPIP |
SPIP Crayons Plugin |
2026-10-06T16:16:07.042Z | 2026-10-09T01:11:15.811Z |
| cve-2026-105852 | Payload relationship-query authorization bypass |
payloadcms |
payload |
2026-10-06T16:15:03.763Z | 2026-10-06T17:22:49.268Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-051 | Vulnérabilité de Vixie Cron | 2001-05-14T00:00:00.000000 | 2001-05-14T00:00:00.000000 |
| certa-2001-avi-050 | Vulnérabilités dans le serveur d'indexation Windows | 2001-05-11T00:00:00.000000 | 2001-05-11T00:00:00.000000 |
| certa-2001-avi-049 | Déni de service sur le contrôleur de domaine Windows 2000 | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| certa-2001-avi-048 | Vulnérabilité dans Microsoft IIS 5.0 | 2001-05-02T00:00:00.000000 | 2001-05-02T00:00:00.000000 |
| certa-2001-avi-047 | Vulnérabilité dans IPTables sous linux 2.4 | 2001-04-27T00:00:00.000000 | 2001-04-27T00:00:00.000000 |
| certa-2001-avi-046 | Vulnérabilité dans WebDAV Service Provider | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-045 | Débordement de mémoire dans NTPd | 2001-04-20T00:00:00.000000 | 2002-12-20T00:00:00.000000 |
| certa-2001-avi-044 | Vulnérabilité dans Microsoft ISA Server 2000 | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-043 | Vulnérabilité de la fonction glob() dans les serveurs FTP | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-042 | Vulnérabilité dans les commutateurs CISCO CSS 11050, 11150 et 11800 | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-041 | Vulnérabilité dans Internet Explorer 5.01 et 5.5 | 2001-03-30T00:00:00.000000 | 2002-07-16T00:00:00.000000 |
| certa-2001-avi-040 | Vulnérabilité dans les concentrateurs CISCO VPN3000 | 2001-03-29T00:00:00.000000 | 2001-03-29T00:00:00.000000 |
| certa-2001-avi-039 | Vulnérabilité dans la protection des fichiers compressés sous Windows Plus!98 et Me | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-038 | Vulnérabilité dans Microsoft Visual Studio 6.0 | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-037 | Vulnérabilité des logiciels d'administration à distance de Compaq | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-036 | Certificats erronés délivrés par VeriSign | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-035 | Vulnérabilité de pcAnywhere. | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-034 | Vulnérabilité du serveur web Apache | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-033 | Vulnérabilité dans Mailsweeper version 4.2 | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-032 | Vulnérabilité de IBM HTTP Server | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-031 | Vulnérabilité de HP OpenView OmniBack sous HP-UX et Windows NT/2000 | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-029 | Vulnérabilité de Microsoft Internet Information Serveur 5.0 | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-028 | vulnérabilité de sudo sous Linux Debian | 2001-03-08T00:00:00.000000 | 2001-03-08T00:00:00.000000 |
| certa-2001-avi-027 | Vulnérabilités d'Internet Explorer et de Windows Scripting Host | 2001-03-07T00:00:00.000000 | 2001-03-07T00:00:00.000000 |
| certa-2001-avi-026 | Vulnérabilités dans les commutateurs CISCO IOS | 2001-03-05T00:00:00.000000 | 2001-03-05T00:00:00.000000 |
| certa-2001-avi-025 | Vulnérabilité d'Internet Information Server 5.0 et Exchange 2000 | 2001-03-02T00:00:00.000000 | 2001-03-02T00:00:00.000000 |
| certa-2001-avi-024 | Vulnérabilité dans la gestion des clients sous Lotus Notes | 2001-03-01T00:00:00.000000 | 2001-03-01T00:00:00.000000 |
| certa-2001-avi-023 | Dépassement de mémoire dans l'observateur d'événements de Windows 2000 | 2001-02-28T00:00:00.000000 | 2001-02-28T00:00:00.000000 |
| certa-2001-avi-022 | Vulnérabilité dans le <SPAN class= "textit">Java Runtime Environment</SPAN> (JRE) de Sun | 2001-02-27T00:00:00.000000 | 2001-02-27T00:00:00.000000 |
| certa-2001-avi-021 | Vulnérabilité sous Microsoft Outlook et Outlook Express | 2001-02-23T00:00:00.000000 | 2001-02-23T00:00:00.000000 |