Rechercher

ID	Vulnérabilité	Classée depuis	Publiée
CVE-2026-116260 élevée	libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive	27 oct. 2026build de 07:13 UTC	26 oct. 2026
CVE-2026-104849 élevée	tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options	27 oct. 2026build de 07:13 UTC	2 oct. 2026
CVE-2024-8928 élevée	Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8928: php: Erroneous p	27 oct. 2026build de 07:13 UTC
CVE-2026-116124 élevée	libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser	27 oct. 2026build de 01:25 UTC	26 oct. 2026
CVE-2026-105483 élevée	nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames	27 oct. 2026build de 01:25 UTC	23 oct. 2026
CVE-2026-55888 élevée	xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames	27 oct. 2026build de 01:25 UTC	23 oct. 2026
CVE-2026-110354 élevée	haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request	27 oct. 2026build de 01:25 UTC	22 oct. 2026
CVE-2026-110353 élevée	haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame	27 oct. 2026build de 01:25 UTC	22 oct. 2026
CVE-2026-98869 élevée	kernel: bpf: Infer zext_dst based on static register liveness analysis	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2023-7356 élevée	kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2026-111943 élevée	crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates	27 oct. 2026build de 01:25 UTC	21 oct. 2026
CVE-2026-113812 élevée	perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates	27 oct. 2026build de 01:25 UTC	20 oct. 2026
CVE-2025-71436 élevée	raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling	27 oct. 2026build de 01:25 UTC	20 oct. 2026
CVE-2026-112396 élevée	pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112258 élevée	gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112395 élevée	pillow: pillow: Information disclosure via crafted tiled TIFF image	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-112394 élevée	pillow: pillow: Information disclosure via out-of-bounds read in raw decoders	27 oct. 2026build de 01:25 UTC	19 oct. 2026
CVE-2026-98857 élevée	kernel: ipvs: bound LBLCR and LBLC cache growth	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98853 élevée	kernel: net: gso: limit recursive IP-in-IP segmentation	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98769 élevée	kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98725 élevée	kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98718 élevée	kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98715 élevée	kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98639 élevée	kernel: KVM: riscv: Fix NACL hfence entry update order	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98621 élevée	kernel: net: gue: reject invalid REMCSUM offsets	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98614 élevée	kernel: sctp: avoid livelock while updating retransmit path	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-98466 élevée	kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2	27 oct. 2026build de 01:25 UTC	18 oct. 2026
CVE-2026-110752 élevée	perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector	27 oct. 2026build de 01:25 UTC	16 oct. 2026
CVE-2026-92262 élevée	mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.	27 oct. 2026build de 01:25 UTC	16 oct. 2026
CVE-2026-85746 élevée	mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections	27 oct. 2026build de 01:25 UTC	16 oct. 2026
CVE-2026-104715 élevée	cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	27 oct. 2026build de 01:25 UTC	16 oct. 2026
CVE-2026-98417 élevée	kernel: net: xfrm: reject unrepresentable espintcp transport headers	27 oct. 2026build de 01:25 UTC	14 oct. 2026
CVE-2026-86476 élevée	gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize	27 oct. 2026build de 01:25 UTC	14 oct. 2026
CVE-2026-106062 élevée	gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file	27 oct. 2026build de 01:25 UTC	6 oct. 2026
CVE-2019-25777 élevée	perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment	27 oct. 2026build de 01:25 UTC	5 oct. 2026
CVE-2017-20285 élevée	perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document	27 oct. 2026build de 01:25 UTC	5 oct. 2026
CVE-2026-103226 élevée	ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data	27 oct. 2026build de 01:25 UTC	30 sept. 2026
CVE-2026-109411 élevée	samba: Access control bypass via vfs_ceph_rgw case-insensitive open	27 oct. 2026build de 01:25 UTC
GHSA-qpg5-fx6p-8cq3 élevée	Using port forwarding silently enables server access to the local SSH agent	27 oct. 2026build de 01:25 UTC
GHSA-vxj5-fg65-x765 élevée	net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)	27 oct. 2026build de 01:25 UTC
CVE-2026-116191 élevée	github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service	26 oct. 2026build de 19:14 UTC	25 oct. 2026
CVE-2026-116189 élevée	github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass	26 oct. 2026build de 19:14 UTC	25 oct. 2026
CVE-2026-68476 élevée	kernel: ipvs: reload ip header after head reallocation	26 oct. 2026build de 19:14 UTC	15 août 2026
CVE-2026-14803 élevée	Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder	26 oct. 2026build de 19:14 UTC	6 juil. 2026
GHSA-h7x6-9mqf-vgmx élevée	Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)	26 oct. 2026build de 19:14 UTC
GHSA-vxc9-rm8f-p56j élevée	Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params	26 oct. 2026build de 19:14 UTC
openSUSE-SU-2026:12261-1 élevée	git-bug-0.11.0-3.1 on GA media	26 oct. 2026build de 19:14 UTC
openSUSE-SU-2026:12262-1 élevée	istioctl-1.31.3-1.1 on GA media	26 oct. 2026build de 19:14 UTC
openSUSE-SU-2026:12264-1 élevée	okteto-3.24.1-1.1 on GA media	26 oct. 2026build de 19:14 UTC
openSUSE-SU-2026:22158-1 élevée	Security update for docker	26 oct. 2026build de 19:14 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.