Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-50571 | WebSub: Reflected script execution through intent-veri… |
w3c |
websub |
2026-10-27T22:40:54.912Z | 2026-10-28T16:12:40.129Z | |
| cve-2026-59158 | Nuxt Ollama: public runtime configuration discloses th… |
thoda-dev |
nuxt-ollama |
2026-10-27T22:36:09.750Z | 2026-10-29T18:23:47.915Z | |
| cve-2026-58257 | GRR vulnerable to Arbitrary File Read and Deletion |
JeromeDevome |
GRR |
2026-10-27T22:34:47.670Z | 2026-11-02T19:47:13.898Z | |
| cve-2026-58256 | GRR vulnerable to Remote Code Execution Via PHP Code I… |
JeromeDevome |
GRR |
2026-10-27T22:32:12.589Z | 2026-11-03T12:16:33.287Z | |
| cve-2026-58255 | Cronicle: Non-admin uid/gid injection in create_event/… |
jhuckaby |
Cronicle |
2026-10-27T22:30:09.563Z | 2026-10-28T16:12:46.274Z | |
| cve-2026-58205 | GRR has a Reflected XSS issue |
JeromeDevome |
GRR |
2026-10-27T22:26:14.705Z | 2026-10-29T18:22:43.499Z | |
| cve-2026-22063 | 6 (v4.0) | CVE-2026-22063 eMudhra CA Certificate Compromise in Ne… |
NetApp |
ONTAP 9 |
2026-10-27T22:20:43.242Z | 2026-10-27T22:20:43.242Z |
| cve-2026-58496 | ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via… |
thorvg |
thorvg |
2026-10-27T22:18:34.301Z | 2026-11-02T19:46:26.453Z | |
| cve-2026-118128 | a2aproject a2a-js Task Status Update result_manager.ts… |
a2aproject |
a2a-js |
2026-10-27T22:15:19.102Z | 2026-10-28T16:12:56.611Z | |
| cve-2026-57199 | Asterisk: Asterisk app_sms.c copies externally control… |
asterisk |
asterisk |
2026-10-27T21:52:42.436Z | 2026-11-03T13:58:43.338Z | |
| cve-2026-57203 | Asterisk: Local privilege escalation through ast_loggr… |
asterisk |
asterisk |
2026-10-27T21:48:40.078Z | 2026-10-29T18:22:00.568Z | |
| cve-2026-57190 | Asterisk: SQL Injection in cel_pgsql and cel_tds via C… |
asterisk |
asterisk |
2026-10-27T21:45:50.075Z | 2026-10-28T16:13:06.105Z | |
| cve-2026-97045 | N/A | Check all ancestor namespace transitions when renderin… |
golang.org/x/net |
golang.org/x/net/html |
2026-10-27T21:38:56.700Z | 2026-10-27T21:38:56.700Z |
| cve-2026-78661 | N/A | Avoid quadratic complexity when coalescing text nodes … |
golang.org/x/net |
golang.org/x/net/html |
2026-10-27T21:38:56.517Z | 2026-10-27T21:38:56.517Z |
| cve-2026-62765 | 7.5 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T21:37:20.753Z | 2026-10-31T18:13:36.551Z |
| cve-2026-57191 | Asterisk: Stack buffer overflow in MWI NOTIFY Message-… |
asterisk |
asterisk |
2026-10-27T21:32:23.714Z | 2026-11-02T19:45:36.758Z | |
| cve-2026-57192 | Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to… |
asterisk |
asterisk |
2026-10-27T21:25:40.363Z | 2026-11-03T12:15:09.199Z | |
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass all… |
asterisk |
asterisk |
2026-10-27T21:13:03.777Z | 2026-10-30T20:18:00.957Z | |
| cve-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest … |
asterisk |
asterisk |
2026-10-27T21:04:25.747Z | 2026-11-02T19:44:27.494Z | |
| cve-2026-85898 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:28.112Z | 2026-10-31T18:01:13.467Z |
| cve-2026-83831 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:26.445Z | 2026-10-31T18:01:11.998Z |
| cve-2026-116775 | pageant: unbounded frame buffering on peer-controlled … |
Eugeny |
russh |
2026-10-27T20:27:30.852Z | 2026-11-03T12:14:14.017Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z | |
| cve-2026-116773 | russh's SSH client is susceptible to unbounded allocat… |
Eugeny |
russh |
2026-10-27T20:23:25.559Z | 2026-10-30T15:17:49.289Z | |
| cve-2026-116696 | russh's SSH agent server is susceptible to unbound all… |
Eugeny |
russh |
2026-10-27T20:14:32.973Z | 2026-11-02T19:43:36.484Z | |
| cve-2026-116695 | Crass: Incorrect tokenization of bad URLs enables CSS … |
rgrove |
crass |
2026-10-27T20:10:34.010Z | 2026-11-03T12:13:04.293Z | |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-116692 | MLflow: Remote code execution on unauthenticated MLflo… |
mlflow |
mlflow |
2026-10-27T20:03:49.661Z | 2026-11-02T19:42:28.160Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2005-000783 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000782 | WirelessIP5000 has multiple vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000781 | Common Management Agent 3.x vulnerable to information leakage | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000780 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000779 | Hiki cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000778 | QRcode Perl CGI & PHP script vulnerable to denial of service attack | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000777 | tDiary cross-site request forgery vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000776 | Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000775 | Vulnerability involving security zone handling in applications using Internet Explorer components | 2008-05-21T00:00+09:00 | 2010-10-12T16:44+09:00 |
| jvndb-2005-000774 | SFS cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000773 | desknet's cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000772 | Inappropriate interpretation of mailto URL scheme by mail client software | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000771 | Wiki clone cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000770 | Virus Security memory leak vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000769 | Virus Security heap overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000768 | Movable Type session management vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000767 | WebUD arbitrary program execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000766 | w3ml cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000765 | Buffalo router configuration management interface vulnerable to remote access and password leakage | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000764 | Website connection problem when a mobile phone terminal uses specific QR code | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000763 | ppBlog cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000762 | Norton AntiVirus causes abnormal OS termination when scanning illegal files | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000761 | Norton AntiVirus causes abnormal OS termination when a user edits a shared network file | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000760 | McAfee VirusScan Engine buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000759 | McAfee VirusScan Engine buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000758 | msearch directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000757 | Cybozu Office browser script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000756 | Tsuru-Kame Mail vulnerable in S/MIME signature verification | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2005-000727 | mod_imap cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2014-05-22T18:03+09:00 |
| jvndb-2005-000707 | Fujitsu Java Runtime Environment reflection API vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0397 | Multiples vulnérabilités dans les produits Intel | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0396 | Multiples vulnérabilités dans les produits Mozilla | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0395 | Multiples vulnérabilités dans les produits SAP | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0394 | Multiples vulnérabilités dans les produits Typo3 | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0393 | Multiples vulnérabilités dans les produits Siemens | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0392 | Multiples vulnérabilités dans les produits Apple | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0391 | Vulnérabilité dans Google Chrome | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0390 | Vulnérabilité dans StrongSwan | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0389 | Multiples vulnérabilités dans les produits Belden | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0388 | Multiples vulnérabilités dans Moodle | 2024-05-13T00:00:00.000000 | 2024-05-13T00:00:00.000000 |
| certfr-2024-avi-0387 | Multiples vulnérabilités dans VMware Avi Load Balancer | 2024-05-13T00:00:00.000000 | 2024-05-13T00:00:00.000000 |
| certfr-2024-avi-0386 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-13T00:00:00.000000 | 2024-05-13T00:00:00.000000 |
| certfr-2024-avi-0385 | Multiples vulnérabilités dans les produits IBM | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0384 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0383 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0382 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0381 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0380 | Multiples vulnérabilités dans les produits NetApp | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0379 | Vulnérabilité dans HPE Aruba Networking AOS-CX | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0378 | Multiples vulnérabilités dans Juniper Junos OS | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0377 | Multiples vulnérabilités dans les produits F5 | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0376 | Multiples vulnérabilités dans GitLab | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0375 | Vulnérabilité dans Xen | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0374 | Vulnérabilité dans Veeam Service Provider Console | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0373 | Vulnérabilité dans PostgreSQL | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0372 | Multiples vulnérabilités dans Google Chrome | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0371 | Multiples vulnérabilités dans Google Android | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0370 | Vulnérabilité dans iTunes pour Windows | 2024-05-10T00:00:00.000000 | 2024-05-10T00:00:00.000000 |
| certfr-2024-avi-0369 | Multiples vulnérabilités dans les produits GLPI | 2024-05-07T00:00:00.000000 | 2024-05-07T00:00:00.000000 |
| certfr-2024-avi-0368 | Vulnérabilité dans Moxa NPort | 2024-05-07T00:00:00.000000 | 2024-05-07T00:00:00.000000 |