Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118305 | N/A | Memory corruption in Turbolev in Google Chrome pr… |
Google |
Chrome |
2026-10-27T23:03:11.199Z | 2026-10-28T17:37:52.934Z |
| cve-2026-118339 | N/A | Use after free in Animation in Google Chrome prio… |
Google |
Chrome |
2026-10-27T23:03:10.980Z | 2026-10-29T03:56:20.340Z |
| cve-2026-118350 | N/A | Use after free in Turbolev in Google Chrome prior… |
Google |
Chrome |
2026-10-27T23:03:10.539Z | 2026-10-29T03:56:21.913Z |
| cve-2026-118318 | N/A | Improper access control in V8 in Google Chrome pr… |
Google |
Chrome |
2026-10-27T23:03:10.313Z | 2026-10-29T14:14:05.516Z |
| cve-2026-118357 | N/A | Use after free in FileSystem in Google Chrome pri… |
Google |
Chrome |
2026-10-27T23:03:10.088Z | 2026-10-29T03:56:23.359Z |
| cve-2026-118344 | N/A | Use after free in Layout in Google Chrome prior t… |
Google |
Chrome |
2026-10-27T23:03:09.848Z | 2026-10-29T03:56:24.832Z |
| cve-2026-118348 | N/A | Improper input validation in Skia in Google Chrom… |
Google |
Chrome |
2026-10-27T23:03:09.516Z | 2026-10-29T03:56:31.370Z |
| cve-2026-118331 | N/A | Improper input validation in FileAPI in Google Ch… |
Google |
Chrome |
2026-10-27T23:03:09.097Z | 2026-10-29T03:56:27.737Z |
| cve-2026-118306 | N/A | Memory corruption in FileSystem in Google Chrome … |
Google |
Chrome |
2026-10-27T23:03:08.662Z | 2026-10-28T17:37:53.096Z |
| cve-2026-50571 | WebSub: Reflected script execution through intent-veri… |
w3c |
websub |
2026-10-27T22:40:54.912Z | 2026-10-28T16:12:40.129Z | |
| cve-2026-59158 | Nuxt Ollama: public runtime configuration discloses th… |
thoda-dev |
nuxt-ollama |
2026-10-27T22:36:09.750Z | 2026-10-29T18:23:47.915Z | |
| cve-2026-58257 | GRR vulnerable to Arbitrary File Read and Deletion |
JeromeDevome |
GRR |
2026-10-27T22:34:47.670Z | 2026-11-02T19:47:13.898Z | |
| cve-2026-58256 | GRR vulnerable to Remote Code Execution Via PHP Code I… |
JeromeDevome |
GRR |
2026-10-27T22:32:12.589Z | 2026-11-03T12:16:33.287Z | |
| cve-2026-58255 | Cronicle: Non-admin uid/gid injection in create_event/… |
jhuckaby |
Cronicle |
2026-10-27T22:30:09.563Z | 2026-10-28T16:12:46.274Z | |
| cve-2026-58205 | GRR has a Reflected XSS issue |
JeromeDevome |
GRR |
2026-10-27T22:26:14.705Z | 2026-10-29T18:22:43.499Z | |
| cve-2026-22063 | 6 (v4.0) | CVE-2026-22063 eMudhra CA Certificate Compromise in Ne… |
NetApp |
ONTAP 9 |
2026-10-27T22:20:43.242Z | 2026-10-27T22:20:43.242Z |
| cve-2026-58496 | ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via… |
thorvg |
thorvg |
2026-10-27T22:18:34.301Z | 2026-11-02T19:46:26.453Z | |
| cve-2026-118128 | a2aproject a2a-js Task Status Update result_manager.ts… |
a2aproject |
a2a-js |
2026-10-27T22:15:19.102Z | 2026-10-28T16:12:56.611Z | |
| cve-2026-57199 | Asterisk: Asterisk app_sms.c copies externally control… |
asterisk |
asterisk |
2026-10-27T21:52:42.436Z | 2026-11-03T13:58:43.338Z | |
| cve-2026-57203 | Asterisk: Local privilege escalation through ast_loggr… |
asterisk |
asterisk |
2026-10-27T21:48:40.078Z | 2026-10-29T18:22:00.568Z | |
| cve-2026-57190 | Asterisk: SQL Injection in cel_pgsql and cel_tds via C… |
asterisk |
asterisk |
2026-10-27T21:45:50.075Z | 2026-10-28T16:13:06.105Z | |
| cve-2026-97045 | N/A | Check all ancestor namespace transitions when renderin… |
golang.org/x/net |
golang.org/x/net/html |
2026-10-27T21:38:56.700Z | 2026-10-27T21:38:56.700Z |
| cve-2026-78661 | N/A | Avoid quadratic complexity when coalescing text nodes … |
golang.org/x/net |
golang.org/x/net/html |
2026-10-27T21:38:56.517Z | 2026-10-27T21:38:56.517Z |
| cve-2026-62765 | 7.5 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T21:37:20.753Z | 2026-10-31T18:13:36.551Z |
| cve-2026-57191 | Asterisk: Stack buffer overflow in MWI NOTIFY Message-… |
asterisk |
asterisk |
2026-10-27T21:32:23.714Z | 2026-11-02T19:45:36.758Z | |
| cve-2026-57192 | Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to… |
asterisk |
asterisk |
2026-10-27T21:25:40.363Z | 2026-11-03T12:15:09.199Z | |
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass all… |
asterisk |
asterisk |
2026-10-27T21:13:03.777Z | 2026-10-30T20:18:00.957Z | |
| cve-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest … |
asterisk |
asterisk |
2026-10-27T21:04:25.747Z | 2026-11-02T19:44:27.494Z | |
| cve-2026-85898 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:28.112Z | 2026-10-31T18:01:13.467Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2006-000634 | ServerView directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000633 | ServerView cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000632 | ATutor cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000631 | ACollab SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000630 | Wiki clone products vulnerable to denial of service attacks | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000629 | Wiki clone products vulnerable to denial of service attacks | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000628 | Wiki clone products vulnerable to denial of service attacks | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000627 | Phorum cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000626 | dotProject cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000625 | CGI RESCUE WebFORM allows unauthorized email transmission | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000624 | CGI RESCUE WebFORM allows unauthorized email transmission | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000623 | Joomla! cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000622 | dotProject cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000621 | RWiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000620 | RWiki arbitrary Ruby script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000619 | MyWeb SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000617 | Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000616 | DonutP and UnDonut confirmation dialog display vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000615 | Apache Struts Validator allows to bypass input data validation | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000614 | Winny buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000613 | Trac cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000612 | FreeStyleWiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000611 | QUICK CART cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000610 | QUICK CART OS command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000609 | CAFEMILK Shopping Cart CGI cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000606 | Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000605 | Hyper NIKKI System allows unauthorized email submission | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000604 | Nagasaki Electronic Prefectural Office System SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000603 | Hatena Toolbar sends URL information unecnrypted | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000602 | Multiple email clients vulnerable in handling an attachement inapropriately | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0457 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0456 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0455 | Multiples vulnérabilités dans les produits Trend Micro | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0454 | Multiples vulnérabilités dans Google Chrome | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0453 | Vulnérabilité dans Ivanti Endpoint Manager | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0452 | Multiples vulnérabilités dans StormShield SSL VPN Client | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0451 | Vulnérabilité dans Mitel MiVoice MX-ONE | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0450 | Multiples vulnérabilités dans Nginx | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0449 | Vulnérabilité dans les produits Check Point | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0448 | Multiples vulnérabilités dans Nagios XI | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0447 | Vulnérabilité dans SPIP | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0438 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0437 | Vulnérabilité dans Google Chrome | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0436 | Multiples vulnérabilités dans les produits Mitel | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0435 | Multiples vulnérabilités dans les produits Cisco | 2024-05-23T00:00:00.000000 | 2024-05-23T00:00:00.000000 |
| certfr-2024-avi-0434 | Multiples vulnérabilités dans les produits Ivanti | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0433 | Multiples vulnérabilités dans GitLab | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0432 | Multiples vulnérabilités dans les produits Atlassian | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0431 | Multiples vulnérabilités dans les produits Veeam | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0430 | Multiples vulnérabilités dans Google Chrome | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0429 | Vulnérabilité dans les produits SolarWinds | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0428 | Multiples vulnérabilités dans les produits Qnap | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |