Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78661 | N/A | Avoid quadratic complexity when coalescing text nodes … |
golang.org/x/net |
golang.org/x/net/html |
2026-10-27T21:38:56.517Z | 2026-10-27T21:38:56.517Z |
| cve-2026-62765 | 7.5 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T21:37:20.753Z | 2026-10-31T18:13:36.551Z |
| cve-2026-57191 | Asterisk: Stack buffer overflow in MWI NOTIFY Message-… |
asterisk |
asterisk |
2026-10-27T21:32:23.714Z | 2026-11-02T19:45:36.758Z | |
| cve-2026-57192 | Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to… |
asterisk |
asterisk |
2026-10-27T21:25:40.363Z | 2026-11-03T12:15:09.199Z | |
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass all… |
asterisk |
asterisk |
2026-10-27T21:13:03.777Z | 2026-10-30T20:18:00.957Z | |
| cve-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest … |
asterisk |
asterisk |
2026-10-27T21:04:25.747Z | 2026-11-02T19:44:27.494Z | |
| cve-2026-85898 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:28.112Z | 2026-10-31T18:01:13.467Z |
| cve-2026-83831 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:26.445Z | 2026-10-31T18:01:11.998Z |
| cve-2026-116775 | pageant: unbounded frame buffering on peer-controlled … |
Eugeny |
russh |
2026-10-27T20:27:30.852Z | 2026-11-03T12:14:14.017Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z | |
| cve-2026-116773 | russh's SSH client is susceptible to unbounded allocat… |
Eugeny |
russh |
2026-10-27T20:23:25.559Z | 2026-10-30T15:17:49.289Z | |
| cve-2026-116696 | russh's SSH agent server is susceptible to unbound all… |
Eugeny |
russh |
2026-10-27T20:14:32.973Z | 2026-11-02T19:43:36.484Z | |
| cve-2026-116695 | Crass: Incorrect tokenization of bad URLs enables CSS … |
rgrove |
crass |
2026-10-27T20:10:34.010Z | 2026-11-03T12:13:04.293Z | |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-116692 | MLflow: Remote code execution on unauthenticated MLflo… |
mlflow |
mlflow |
2026-10-27T20:03:49.661Z | 2026-11-02T19:42:28.160Z | |
| cve-2026-103995 | 2 (v4.0) | Lenient parsing of integers for response body and chun… |
Python Software Foundation |
CPython |
2026-10-27T19:58:52.521Z | 2026-10-28T00:33:14.944Z |
| cve-2026-116691 | MLflow CrewAI autologging records LLM provider API key… |
mlflow |
mlflow |
2026-10-27T19:56:22.083Z | 2026-11-03T12:09:45.326Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-11-03T12:08:37.621Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-11-02T19:41:38.553Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-11-02T19:40:48.630Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-11-03T12:07:27.484Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-11-02T19:40:02.808Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2006-000601 | Eudora Japanese version stops working after the application crashes | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000600 | Nagasaki Electronic Prefectural Office System authentication information vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000599 | Nagasaki Electronic Prefectural Office System vulnerable to bypass authentication | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000540 | Microsoft Windows Indexing Service cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000392 | Ruby contains a vulnerability that prevents safe level 4 from functioning as a sandbox. | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000345 | Microsoft Internet Explorer address bar spoofing vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000326 | Mozilla Firefox vulnerable to HTTP response splitting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000293 | Sun Java System Web Server cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000251 | SquirrelMail cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000864 | XOOPS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000805 | nProtect Netizen has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000804 | Tomcat vulnerable in request processing | 2008-05-21T00:00+09:00 | 2008-07-07T18:04+09:00 |
| jvndb-2005-000802 | BBSNote cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000801 | WebNote Clip vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000800 | Opera bookmark function vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000799 | Problem with referer header handling on mobile phone web browsers | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000798 | MitakeSearch cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000797 | Multiple vulnerabilities in FreeStyleWiki including cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000796 | Multiple vulnerabilities in FreeStyleWiki including cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000795 | HTTPD-User-Manage cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000794 | Kent Web PostMail vulnerable to third party mail relay | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000793 | Hyper Estraier directory traversal/denial of service vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000792 | eBASEweb SQL injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000791 | Cross-site scripting vulnerability in the Unicode version of msearch | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000789 | Hyper NIKKI System cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000788 | FreeStyleWiki command injection vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000787 | Pochy denial-of-service (DoS) vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000786 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000785 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000784 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0427 | Multiples vulnérabilités dans les produits VMware | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0426 | Multiples vulnérabilités dans Roundcube | 2024-05-21T00:00:00.000000 | 2024-10-22T00:00:00.000000 |
| certfr-2024-avi-0425 | Vulnérabilité dans Ruby on Rails | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0424 | Vulnérabilité dans Asterisk | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0423 | Multiples vulnérabilités dans les produits NetApp | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0422 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0421 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0419 | Multiples vulnérabilités dans les produits IBM | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0418 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0417 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0416 | Vulnérabilité dans OpenSSL | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0415 | Multiples vulnérabilités dans les produits Tenable | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0414 | Vulnérabilité dans les produits Palo Alto Networks | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0413 | Multiples vulnérabilités dans les produits MongoDB | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0412 | Multiples vulnérabilités dans les produits Mitel | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0411 | Multiples vulnérabilités dans Wireshark | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0410 | Multiples vulnérabilités dans Google Chrome | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0409 | Multiples vulnérabilités dans les produits Cisco | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0408 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0407 | Vulnérabilité dans LibreOffice | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0406 | Multiples vulnérabilités dans les produits Adobe | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0405 | Multiples vulnérabilités dans les produits VMware | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0404 | Multiples vulnérabilités dans les produits Fortinet | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0403 | Multiples vulnérabilités dans les produits Microsoft | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0402 | Vulnérabilité dans Microsoft Azure Migrate | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0401 | Vulnérabilité dans Microsoft .Net | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0400 | Multiples vulnérabilités dans Microsoft Windows | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0399 | Vulnérabilité dans Microsoft Office | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0398 | Vulnérabilité dans Microsoft Edge | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |