Rechercher

ID	Vulnérabilité	Classée depuis	Publiée
CVE-2026-116154 moyenne	ImageMagick: ImageMagick: Denial of Service via XML parsing memory leak	26 oct. 2026build de 07:15 UTC	25 oct. 2026
CVE-2026-116141 moyenne	ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder	26 oct. 2026build de 07:15 UTC	25 oct. 2026
CVE-2026-80905 moyenne	kernel: net: tap: fix wrong transport_header when sending VLAN-tagged frame	26 oct. 2026build de 07:15 UTC	4 sept. 2026
CVE-2026-80887 moyenne	kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound	26 oct. 2026build de 07:15 UTC	4 sept. 2026
CVE-2026-80883 moyenne	kernel: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered	26 oct. 2026build de 07:15 UTC	4 sept. 2026
CVE-2026-72262 moyenne	kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get	26 oct. 2026build de 07:15 UTC	15 août 2026
CVE-2026-93453 moyenne	SOGo before 5.12.11 constructs password-reset links using the client-s ...	25 oct. 2026build de 19:10 UTC	18 sept. 2026
CVE-2024-56830 moyenne	The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builti ...	25 oct. 2026build de 19:10 UTC	2 janv. 2025
CVE-2024-31837 moyenne	DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string ...	25 oct. 2026build de 19:10 UTC	30 avr. 2024
CVE-2026-96405 moyenne	NLnet Labs Unbound up to and including version 1.26.1 limits compressi ...	25 oct. 2026build de 07:10 UTC	21 oct. 2026
CVE-2026-50106 moyenne	When NLnet Labs Unbound up to and including version 1.26.1 is configur ...	25 oct. 2026build de 07:10 UTC	21 oct. 2026
CVE-2026-35501 moyenne	When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is co ...	25 oct. 2026build de 07:10 UTC	21 oct. 2026
CVE-2026-109125 moyenne	In NLnet Labs Unbound up to and including version 1.26.1, an observabl ...	25 oct. 2026build de 07:10 UTC	21 oct. 2026
CVE-2026-101283 moyenne	iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflo ...	25 oct. 2026build de 07:10 UTC	30 sept. 2026
CVE-2026-63318 moyenne	ELSA-2026-500245: qemu-kvm security update (IMPORTANT)	25 oct. 2026build de 07:10 UTC
CVE-2026-65928 moyenne	ELSA-2026-500245: qemu-kvm security update (IMPORTANT)	25 oct. 2026build de 07:10 UTC
CVE-2026-98867 moyenne	kernel: dm-pcache: bound the logical key offset from persistent memory	24 oct. 2026build de 19:09 UTC	18 oct. 2026
CVE-2026-98865 moyenne	kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock held	24 oct. 2026build de 19:09 UTC	18 oct. 2026
CVE-2026-89810 moyenne	kernel: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram	24 oct. 2026build de 19:09 UTC	16 sept. 2026
CVE-2026-80891 moyenne	kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages	24 oct. 2026build de 19:09 UTC	4 sept. 2026
openSUSE-SU-2026:12231-1 moyenne	bind-9.20.30-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12232-1 moyenne	brotli-1.2.1-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12234-1 moyenne	chromedriver-156.0.8078.47-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12236-1 moyenne	docker-compose-5.6.1-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12237-1 moyenne	git-lfs-3.8.1-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12243-1 moyenne	libsndfile-devel-1.2.2-7.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12244-1 moyenne	libtirpc-devel-1.3.8-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12245-1 moyenne	libmariadbd-devel-12.3.2-3.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12246-1 moyenne	mihomo-1.19.33-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12247-1 moyenne	nano-9.3-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12248-1 moyenne	corepack24-24.22.1-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12249-1 moyenne	libopenscap33-1.4.6-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12250-1 moyenne	perl-Mozilla-CA-20261020.0.0-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12251-1 moyenne	python313-Pillow-13.0.0-2.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12252-1 moyenne	libruby4_0-4_0-4.0.9-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12254-1 moyenne	tomcat-9.0.123-1.1 on GA media	24 oct. 2026build de 19:09 UTC
openSUSE-SU-2026:12257-1 moyenne	libunbound8-1.26.2-1.1 on GA media	24 oct. 2026build de 19:09 UTC
CVE-2026-76654 moyenne	kubelet: kubelet: Subpath symlinking on Windows nodes permits NTLM coercion	au moins depuis le 24 oct. 2026build de 07:11 UTC	26 oct. 2026
CVE-2026-2270 moyenne	kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation	au moins depuis le 24 oct. 2026build de 07:11 UTC	26 oct. 2026
CVE-2026-115897 moyenne	serialize-javascript: serialize-javascript: Cross-Site Scripting via improper function escaping	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
CVE-2026-115892 moyenne	wasmtime: Wasmtime: Denial of Service via missing payload type validation in guest returns	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
CVE-2026-115886 moyenne	mlflow: mlflow: Server-Side Request Forgery via insecure scorer deserialization	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
CVE-2026-115883 moyenne	LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
GHSA-8c8m-p3m8-cjg8 moyenne	Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
GHSA-m943-m63m-w62w moyenne	Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
GHSA-85x2-q946-cp5h moyenne	Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
GHSA-7xgj-8392-5q4r moyenne	FastMCP: Post-transform component authorization is skipped on direct calls	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
GHSA-vqqp-x5qm-5qp4 moyenne	FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
CVE-2026-115877 moyenne	twisted: Twisted: HTTP request smuggling via improper header delimiter handling	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026
CVE-2026-115774 moyenne	twisted: twisted: Denial of Service via negative size in IMAP search command	au moins depuis le 24 oct. 2026build de 07:11 UTC	23 oct. 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.