Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115449 | 3.5 (v3.1) | Libslirp: libslirp: icmp echo reply length desynchroni… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:20:56.855Z | 2026-10-23T15:00:22.267Z |
| cve-2026-114617 | Authlib: ID token can disable its own nonce validation… |
authlib |
authlib |
2026-10-22T21:25:31.732Z | 2026-10-23T15:00:16.051Z | |
| cve-2026-54615 | Part-DB: Stored XSS / HTML injection in activity-log E… |
Part-DB |
Part-DB-server |
2026-10-23T03:45:02.512Z | 2026-10-23T15:00:09.748Z | |
| cve-2026-86020 | Part-DB: Spreadsheet Formula Injection in XLSX Part Exports |
Part-DB |
Part-DB-server |
2026-10-23T04:05:24.420Z | 2026-10-23T14:59:59.159Z | |
| cve-2026-115723 | 8.3 (v4.0) 7.4 (v3.1) | Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and … |
davenardella |
snap7 |
2026-10-23T11:36:47.011Z | 2026-10-23T14:59:52.690Z |
| cve-2026-57113 | PraisonAI GitHub template cache path traversal allows … |
MervinPraison |
PraisonAI |
2026-10-23T12:04:04.048Z | 2026-10-23T14:59:39.455Z | |
| cve-2026-57121 | PraisonAI: Missing ownership check on DELETE endpoints… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:27.854Z | 2026-10-23T14:59:32.712Z | |
| cve-2026-63120 | PGHoard: Incomplete Path Traversal fix in restore.py a… |
Aiven-Open |
pghoard |
2026-10-23T12:16:36.584Z | 2026-10-23T14:59:26.366Z | |
| cve-2026-55889 | XDG Desktop Portal: Drag-and-drop and copy-paste theft… |
flatpak |
xdg-desktop-portal |
2026-10-23T12:35:05.502Z | 2026-10-23T14:59:19.599Z | |
| cve-2026-112857 | 9.8 (v3.1) | WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio… |
axiomthemes |
Reprizo |
2026-10-23T13:00:17.920Z | 2026-10-23T14:59:12.653Z |
| cve-2026-112853 | 9.8 (v3.1) | WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec… |
axiomthemes |
Hallelujah |
2026-10-23T13:00:18.338Z | 2026-10-23T14:59:06.317Z |
| cve-2026-112849 | 7.1 (v3.1) | WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin… |
AivahThemes |
Hostme v2 |
2026-10-23T13:00:19.660Z | 2026-10-23T14:58:45.182Z |
| cve-2026-115749 | 4.8 (v4.0) 3.3 (v3.1) | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d… |
hydra-ecosystem |
hydra-ray-launcher |
2026-10-23T13:03:32.068Z | 2026-10-23T14:58:26.781Z |
| cve-2026-115754 | 2.3 (v4.0) 4.7 (v3.1) | serialize-javascript 7.0.1 before 7.1.3 XSS via unesca… |
yahoo |
serialize-javascript |
2026-10-23T13:20:43.932Z | 2026-10-23T14:58:11.402Z |
| cve-2026-115481 | baserCMS: BcCustomContent file fields can be configure… |
baserproject |
basercms |
2026-10-23T13:34:26.038Z | 2026-10-23T14:58:03.802Z | |
| cve-2026-57208 | Entire CLI: Path traversal in checkpoint session metad… |
entireio |
cli |
2026-10-23T13:37:40.983Z | 2026-10-23T14:57:55.652Z | |
| cve-2026-114623 | baserCMS: Path traversal in the BcThemeFile admin scre… |
baserproject |
basercms |
2026-10-23T13:45:29.675Z | 2026-10-23T14:57:47.887Z | |
| cve-2026-55459 | Goobi viewer: OpenID JWT audience not enforced by the … |
intranda |
goobi-viewer-core |
2026-10-23T14:16:44.995Z | 2026-10-23T14:57:39.675Z | |
| cve-2026-53942 | Conda Organization Infrastructure: Pwn Request in upda… |
conda |
infrastructure |
2026-10-23T14:25:00.085Z | 2026-10-23T14:57:32.991Z | |
| cve-2021-48018 | 8.3 (v4.0) 7.4 (v3.1) | Vyper 0.2.13 before 0.2.15 Storage Corruption via @non… |
vyperlang |
vyper |
2026-10-21T00:36:18.265Z | 2026-10-23T14:57:15.214Z |
| cve-2026-100886 | Seetong T8108/T8108P/T8116/T8232 Debug Service imprope… |
Seetong |
T8108 |
2026-09-27T23:00:09.011Z | 2026-10-23T14:43:10.196Z | |
| cve-2026-48539 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
GFI Software |
GFI Archiver |
2026-07-23T15:32:59.409Z | 2026-10-23T14:11:04.939Z |
| cve-2026-48530 | 5.1 (v4.0) 5.4 (v3.1) | GFI Archiver < 15.14 Stored XSS via CategorizationPoli… |
GFI Software |
GFI Archiver |
2026-07-23T15:23:16.097Z | 2026-10-23T14:09:57.681Z |
| cve-2026-111668 | 5.3 (v4.0) 5.4 (v3.1) | AIHelms through 0.1.25 Missing Authorization in Effici… |
beizhu-1209 |
AIHelms |
2026-10-16T17:39:30.328Z | 2026-10-23T14:07:02.761Z |
| cve-2026-111678 | 4.8 (v4.0) 3.3 (v3.1) | Antiword through 0.37 Stack Out-of-Bounds Read via pro… |
Adri van Os |
antiword |
2026-10-16T17:39:37.367Z | 2026-10-23T14:03:28.591Z |
| cve-2026-111683 | 5.3 (v4.0) 5.4 (v3.1) | Allegro Ralph through 20260902.1 Missing Authorization… |
allegro |
ralph |
2026-10-16T17:39:40.888Z | 2026-10-23T13:59:41.560Z |
| cve-2026-111693 | 9.3 (v4.0) 9.8 (v3.1) | DataBuff ai-apm-web through 0.1.10 Hard-Coded Default … |
databufflabs |
databuff |
2026-10-16T17:39:48.920Z | 2026-10-23T13:57:59.704Z |
| cve-2026-113595 | 5.3 (v4.0) 4.3 (v3.1) | Sharkord before 0.0.26 Missing Authorization via chang… |
Sharkord |
sharkord |
2026-10-20T15:40:24.447Z | 2026-10-23T13:55:55.388Z |
| cve-2026-113600 | 5.3 (v4.0) 5.4 (v3.1) | Fat Free CRM before 0.26.0 IDOR via CommentsController… |
fatfreecrm |
fat_free_crm |
2026-10-20T15:40:28.303Z | 2026-10-23T13:53:31.012Z |
| cve-2026-113682 | 9.1 (v4.0) 7.4 (v3.1) | Networknt light-4j 2.1.5 before 2.4.0 Authentication B… |
networknt |
light-4j |
2026-10-20T15:40:42.500Z | 2026-10-23T13:51:42.196Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2001-avi-056 | Vulnérabilité dans Word lors de l'ouverture de documents RTF | 2001-05-22T00:00:00.000000 | 2001-05-22T00:00:00.000000 |
| certa-2001-avi-055 | Vulnérabilités dans Internet Explorer 5.01 et 5.5 | 2001-05-18T00:00:00.000000 | 2001-05-18T00:00:00.000000 |
| certa-2001-avi-054 | Vulnérabilité de ESP sous SGI IRIX | 2001-05-15T00:00:00.000000 | 2001-05-15T00:00:00.000000 |
| certa-2001-avi-053 | Vulnérabilités dans Microsoft IIS 4.0 et 5.0 | 2001-05-15T00:00:00.000000 | 2001-05-15T00:00:00.000000 |
| certa-2001-avi-052 | Vulnérabilité du protocole HSRP sur les routeurs CISCO | 2001-05-14T00:00:00.000000 | 2001-05-14T00:00:00.000000 |
| certa-2001-avi-051 | Vulnérabilité de Vixie Cron | 2001-05-14T00:00:00.000000 | 2001-05-14T00:00:00.000000 |
| certa-2001-avi-050 | Vulnérabilités dans le serveur d'indexation Windows | 2001-05-11T00:00:00.000000 | 2001-05-11T00:00:00.000000 |
| certa-2001-avi-049 | Déni de service sur le contrôleur de domaine Windows 2000 | 2001-05-09T00:00:00.000000 | 2001-05-09T00:00:00.000000 |
| certa-2001-avi-048 | Vulnérabilité dans Microsoft IIS 5.0 | 2001-05-02T00:00:00.000000 | 2001-05-02T00:00:00.000000 |
| certa-2001-avi-047 | Vulnérabilité dans IPTables sous linux 2.4 | 2001-04-27T00:00:00.000000 | 2001-04-27T00:00:00.000000 |
| certa-2001-avi-046 | Vulnérabilité dans WebDAV Service Provider | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-044 | Vulnérabilité dans Microsoft ISA Server 2000 | 2001-04-20T00:00:00.000000 | 2001-04-20T00:00:00.000000 |
| certa-2001-avi-043 | Vulnérabilité de la fonction glob() dans les serveurs FTP | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-042 | Vulnérabilité dans les commutateurs CISCO CSS 11050, 11150 et 11800 | 2001-04-11T00:00:00.000000 | 2001-04-11T00:00:00.000000 |
| certa-2001-avi-040 | Vulnérabilité dans les concentrateurs CISCO VPN3000 | 2001-03-29T00:00:00.000000 | 2001-03-29T00:00:00.000000 |
| certa-2001-avi-039 | Vulnérabilité dans la protection des fichiers compressés sous Windows Plus!98 et Me | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-038 | Vulnérabilité dans Microsoft Visual Studio 6.0 | 2001-03-28T00:00:00.000000 | 2001-03-28T00:00:00.000000 |
| certa-2001-avi-037 | Vulnérabilité des logiciels d'administration à distance de Compaq | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-036 | Certificats erronés délivrés par VeriSign | 2001-03-23T00:00:00.000000 | 2001-03-23T00:00:00.000000 |
| certa-2001-avi-035 | Vulnérabilité de pcAnywhere. | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-034 | Vulnérabilité du serveur web Apache | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-033 | Vulnérabilité dans Mailsweeper version 4.2 | 2001-03-13T00:00:00.000000 | 2001-03-13T00:00:00.000000 |
| certa-2001-avi-032 | Vulnérabilité de IBM HTTP Server | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-031 | Vulnérabilité de HP OpenView OmniBack sous HP-UX et Windows NT/2000 | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-029 | Vulnérabilité de Microsoft Internet Information Serveur 5.0 | 2001-03-09T00:00:00.000000 | 2001-03-09T00:00:00.000000 |
| certa-2001-avi-028 | vulnérabilité de sudo sous Linux Debian | 2001-03-08T00:00:00.000000 | 2001-03-08T00:00:00.000000 |
| certa-2001-avi-027 | Vulnérabilités d'Internet Explorer et de Windows Scripting Host | 2001-03-07T00:00:00.000000 | 2001-03-07T00:00:00.000000 |
| certa-2001-avi-026 | Vulnérabilités dans les commutateurs CISCO IOS | 2001-03-05T00:00:00.000000 | 2001-03-05T00:00:00.000000 |
| certa-2001-avi-025 | Vulnérabilité d'Internet Information Server 5.0 et Exchange 2000 | 2001-03-02T00:00:00.000000 | 2001-03-02T00:00:00.000000 |
| certa-2001-avi-024 | Vulnérabilité dans la gestion des clients sous Lotus Notes | 2001-03-01T00:00:00.000000 | 2001-03-01T00:00:00.000000 |