Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55422 | conda-forge.org: Stored DOM XSS via unsanitized danger… |
conda-forge |
conda-forge.github.io |
2026-10-23T12:21:12.529Z | 2026-10-29T02:56:16.728Z | |
| cve-2026-57144 | PraisonAI SandlockSandbox falls back to unrestricted s… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:55.583Z | 2026-10-29T02:55:07.333Z | |
| cve-2026-57116 | PraisonAI: AgentOS remains unauthenticated after GHSA-… |
MervinPraison |
PraisonAI |
2026-10-23T12:06:55.544Z | 2026-10-29T02:53:53.826Z | |
| cve-2026-56840 | PraisonAI: HTTPApproval dashboard renders tool argumen… |
MervinPraison |
PraisonAI |
2026-10-23T11:58:24.568Z | 2026-10-29T02:52:55.374Z | |
| cve-2026-56835 | PraisonAI Slack app_mention bypasses configured user/c… |
MervinPraison |
PraisonAI |
2026-10-23T11:57:11.852Z | 2026-10-29T02:50:43.187Z | |
| cve-2026-112904 | Vvveb: Path Traversal in nextRestore() and nextBackup() |
givanz |
Vvveb |
2026-10-23T11:45:55.139Z | 2026-10-29T02:49:35.598Z | |
| cve-2026-115725 | 2.3 (v4.0) 4.2 (v3.1) | Chatwoot before 4.17.0 Cross-Account Authorization Byp… |
chatwoot |
chatwoot |
2026-10-23T11:36:48.394Z | 2026-10-29T02:48:49.269Z |
| cve-2026-86018 | Part-DB: Authenticated Disk Exhaustion via Unbounded S… |
Part-DB |
Part-DB-server |
2026-10-23T04:00:19.188Z | 2026-10-29T02:47:47.732Z | |
| cve-2026-54631 | Part-DB: Hardcoded APP_SECRET enables forged remember-… |
Part-DB |
Part-DB-server |
2026-10-23T03:53:33.833Z | 2026-10-29T02:46:18.989Z | |
| cve-2026-115484 | 7.6 (v3.1) | Open-iscsi: open-iscsi: dhcpv4 option parser heap out-… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-23T00:16:28.943Z | 2026-10-29T02:44:58.365Z |
| cve-2026-115535 | gedelumbung HospitalManagement Settings sistem.php sim… |
gedelumbung |
HospitalManagement |
2026-10-23T00:15:18.401Z | 2026-10-29T02:44:26.788Z | |
| cve-2025-45528 | N/A | An issue in Nitro Software, Inc Nitro PDF Pro for… |
n/a |
n/a |
2026-10-23T00:00:00.000Z | 2026-10-29T02:43:32.846Z |
| cve-2026-106764 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a r… |
n/a |
n/a |
2026-10-23T00:00:00.000Z | 2026-10-29T02:41:54.499Z | |
| cve-2026-114619 | Authlib: OpenID implicit grant checks raw scope instea… |
authlib |
authlib |
2026-10-22T21:31:02.929Z | 2026-10-29T02:40:27.668Z | |
| cve-2026-114615 | Authlib incomplete algorithm-confusion fix permits HMA… |
authlib |
authlib |
2026-10-22T21:10:02.023Z | 2026-10-29T02:38:05.175Z | |
| cve-2026-112332 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 Denial of Service via JsonNet Deser… |
GDATASoftwareAG |
motornet |
2026-10-22T19:42:17.808Z | 2026-10-29T02:37:09.398Z |
| cve-2026-115508 | 7.1 (v4.0) 6.5 (v3.1) | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields |
unclecode |
crawl4ai |
2026-10-22T19:14:07.893Z | 2026-10-29T02:36:22.691Z |
| cve-2026-115504 | 8.5 (v4.0) 7.8 (v3.1) | CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 … |
HEASARC |
cfitsio |
2026-10-22T19:14:04.552Z | 2026-10-29T02:35:24.229Z |
| cve-2026-115396 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra 10.3 before 12.2 Denial of Service via Compress… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:01.562Z | 2026-10-29T02:33:07.412Z |
| cve-2026-115392 | 8.8 (v4.0) 7.9 (v3.1) | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:58.512Z | 2026-10-29T02:32:06.275Z |
| cve-2026-115388 | 6.9 (v4.0) 6.2 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:54.430Z | 2026-10-29T02:31:21.887Z |
| cve-2026-115384 | 9.4 (v4.0) 9.9 (v3.1) | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:51.422Z | 2026-10-29T02:30:40.462Z |
| cve-2026-115376 | 8.3 (v4.0) 7.7 (v3.1) | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Projec… |
lxc |
incus |
2026-10-22T19:13:45.489Z | 2026-10-29T02:29:39.726Z |
| cve-2026-115372 | 9 (v4.0) 8.5 (v3.1) | Incus 7.3.0 before 7.5.0 Project Restriction Bypass vi… |
lxc |
incus |
2026-10-22T19:13:42.624Z | 2026-10-29T02:28:30.115Z |
| cve-2026-115362 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Expired Ap… |
openbao |
openbao |
2026-10-22T19:13:36.857Z | 2026-10-29T02:27:07.016Z |
| cve-2026-115358 | 2 (v4.0) 2 (v3.1) | OpenBao before 2.6.3 Sensitive Data Leak in Audit Log … |
openbao |
openbao |
2026-10-22T19:13:34.006Z | 2026-10-29T02:26:32.401Z |
| cve-2026-115354 | 7.1 (v4.0) 6.5 (v3.1) | Mistune before 3.3.0 Arbitrary Local File Read via Inc… |
lepture |
mistune |
2026-10-22T19:13:31.132Z | 2026-10-29T02:25:47.787Z |
| cve-2026-115350 | 5.3 (v4.0) 6.1 (v3.1) | Mistune before 3.3.0 Stored XSS via Include Directive … |
lepture |
mistune |
2026-10-22T19:13:26.891Z | 2026-10-29T02:24:58.381Z |
| cve-2022-51026 | 9.3 (v4.0) 9.8 (v3.1) | Bytebase 0.12.0 before 1.0.1 Authentication Bypass via… |
bytebase |
bytebase |
2026-10-22T19:13:18.259Z | 2026-10-29T02:24:08.646Z |
| cve-2026-114611 | OCO-Server: MDM /profile endpoint accepts self-signed … |
schorschii |
OCO-Server |
2026-10-22T17:33:13.611Z | 2026-10-29T02:23:10.004Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000045 | Android OS may behave as an open resolver | 2015-03-27T14:12+09:00 | 2015-03-27T14:12+09:00 |
| jvndb-2015-000041 | MP Form Mail CGI eCommerce edition vulnerable to code injection | 2015-03-20T12:30+09:00 | 2015-03-24T15:11+09:00 |
| jvndb-2015-000039 | eXtplorer vulnerable to cross-site scripting | 2015-03-17T13:41+09:00 | 2015-03-20T14:30+09:00 |
| jvndb-2015-000037 | All In One WP Security & Firewall vulnerable to SQL injection | 2015-03-06T13:45+09:00 | 2015-03-11T17:55+09:00 |
| jvndb-2015-000038 | All In One WP Security & Firewall vulnerable to cross-site request forgery | 2015-03-06T13:46+09:00 | 2015-03-11T17:42+09:00 |
| jvndb-2015-000036 | Maroyaka Relay Novel vulnerable to cross-site scripting | 2015-03-04T14:49+09:00 | 2015-03-06T15:30+09:00 |
| jvndb-2015-000035 | Maroyaka Image Album vulnerable to cross-site scripting | 2015-03-04T14:49+09:00 | 2015-03-06T15:21+09:00 |
| jvndb-2015-000034 | Maroyaka Simple Board vulnerable to cross-site scripting | 2015-03-04T14:48+09:00 | 2015-03-06T15:07+09:00 |
| jvndb-2015-000019 | Squid input validation vulnerability | 2015-02-20T14:55+09:00 | 2015-03-06T14:57+09:00 |
| jvndb-2015-000031 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2015-02-27T15:39+09:00 | 2015-03-05T15:42+09:00 |
| jvndb-2015-000030 | Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:39+09:00 | 2015-03-04T15:23+09:00 |
| jvndb-2015-000029 | BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:38+09:00 | 2015-03-04T15:22+09:00 |
| jvndb-2015-001269 | Cross-site Scripting Vulnerability in Hitachi Application Server Help | 2015-02-16T11:21+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2015-001268 | Cross-site Scripting Vulnerability in Hitachi Command Suite Products | 2015-02-16T11:12+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-004833 | Vulnerability in JP1/NETM/DM and Job Management Partner 1/Software Distribution data reproduction functionality | 2014-11-11T15:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002802 | Xml eXternal Entity Vulnerability in XML link function of Hitachi COBOL2002 | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002800 | Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001594 | JP1/File Transmission Server / FTP vulnerable to access control violation | 2014-03-11T16:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001593 | JP1/Integrated Management - Service Support vulnerable to cross-site scripting | 2014-03-11T15:54+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001203 | A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software | 2014-01-22T18:06+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2015-000028 | KENT-WEB Clip Board vulnerability where arbitary files may be deleted | 2015-02-27T14:02+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000024 | Joyful Note vulnerability in handling files | 2015-02-27T13:57+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000033 | Vulnerability in the jBCrypt key stretching process | 2015-02-27T14:03+09:00 | 2015-03-03T15:58+09:00 |
| jvndb-2015-000032 | checkpw vulnerable to denial-of-service (DoS) | 2015-02-27T12:30+09:00 | 2015-03-03T15:57+09:00 |
| jvndb-2015-000026 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution | 2015-02-25T15:00+09:00 | 2015-03-02T14:23+09:00 |
| jvndb-2015-000027 | Zen Cart Japanese version vulnerable to cross-site scripting | 2015-02-25T15:09+09:00 | 2015-03-02T14:19+09:00 |
| jvndb-2015-001558 | Cross-site Scripting Vulnerability in Hitachi IT Operations Analyzer | 2015-02-27T15:57+09:00 | 2015-02-27T15:57+09:00 |
| jvndb-2015-001557 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management - Manager and Hitachi IT Operations Director | 2015-02-27T15:56+09:00 | 2015-02-27T15:56+09:00 |
| jvndb-2015-001556 | Multiple Cross-site Scripting Vulnerabilities in Hitachi Compute Systems Manager | 2015-02-27T15:55+09:00 | 2015-02-27T15:55+09:00 |
| jvndb-2015-000023 | Speed Software Root Explorer and Explorer vulnerable to directory traversal | 2015-02-24T14:35+09:00 | 2015-02-26T17:18+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0361 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0360 | Multiples vulnérabilités dans les produits Tenable | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0359 | Multiples vulnérabilités dans les produits Elastic | 2025-05-02T00:00:00.000000 | 2025-05-02T00:00:00.000000 |
| certfr-2025-avi-0358 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0357 | Vulnérabilité dans les produits Symantec | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0356 | Multiples vulnérabilités dans Splunk User Behavior Analytics (UBA) | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0354 | Multiples vulnérabilités dans Google Chrome | 2025-04-30T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0258 | Multiples vulnérabilités dans les produits Apple | 2025-04-01T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0353 | Multiples vulnérabilités dans les produits VMware | 2025-04-29T00:00:00.000000 | 2025-04-29T00:00:00.000000 |
| certfr-2025-avi-0352 | Multiples vulnérabilités dans Apache Tomcat | 2025-04-29T00:00:00.000000 | 2025-04-29T00:00:00.000000 |
| certfr-2025-avi-0351 | Vulnérabilité dans LibreOffice | 2025-04-28T00:00:00.000000 | 2025-04-28T00:00:00.000000 |
| certfr-2025-avi-0074 | Vulnérabilité dans Synacor Zimbra Collaboration | 2025-01-28T00:00:00.000000 | 2025-04-28T00:00:00.000000 |
| certfr-2025-avi-0349 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-25T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0348 | Vulnérabilité dans Spring Boot | 2025-04-25T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0347 | Vulnérabilité dans Sophos Taegis Endpoint Agent | 2025-04-25T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0285 | Multiples vulnérabilités dans les produits SAP | 2025-04-08T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0346 | Multiples vulnérabilités dans GitLab | 2025-04-24T00:00:00.000000 | 2025-04-24T00:00:00.000000 |
| certfr-2025-avi-0345 | Vulnérabilité dans Sonicwall SonicOS | 2025-04-24T00:00:00.000000 | 2025-04-24T00:00:00.000000 |
| certfr-2025-avi-0344 | Multiples vulnérabilités dans Grafana | 2025-04-23T00:00:00.000000 | 2025-04-23T00:00:00.000000 |
| certfr-2025-avi-0343 | Vulnérabilité dans Spring Security | 2025-04-23T00:00:00.000000 | 2025-04-23T00:00:00.000000 |
| certfr-2025-avi-0342 | Multiples vulnérabilités dans Google Chrome | 2025-04-23T00:00:00.000000 | 2025-04-23T00:00:00.000000 |
| certfr-2025-avi-0341 | Multiples vulnérabilités dans Traefik | 2025-04-22T00:00:00.000000 | 2025-04-22T00:00:00.000000 |
| certfr-2025-avi-0340 | Multiples vulnérabilités dans Moodle | 2025-04-22T00:00:00.000000 | 2025-04-22T00:00:00.000000 |
| certfr-2025-avi-0339 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-04-22T00:00:00.000000 | 2025-04-22T00:00:00.000000 |
| certfr-2025-avi-0338 | Vulnérabilité dans Tenable Security Center | 2025-04-22T00:00:00.000000 | 2025-04-22T00:00:00.000000 |
| certfr-2025-avi-0337 | Multiples vulnérabilités dans les produits IBM | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0336 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0335 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0334 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0333 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |