Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-57197 | Asterisk: Heap Buffer Overflow in OGG/Speex File Playb… |
asterisk |
asterisk |
2026-10-27T16:35:59.337Z | 2026-11-02T19:27:17.564Z | |
| cve-2026-109090 | 7.5 (v3.1) | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow |
x.org |
libXi |
2026-10-27T16:32:56.867Z | 2026-10-27T16:32:56.867Z |
| cve-2026-116672 | Authlib RFC 7592 examples omit registration-access-tok… |
authlib |
authlib |
2026-10-27T16:31:48.429Z | 2026-10-30T20:15:42.022Z | |
| cve-2026-117512 | oretnom23 php-travel-agency-system employee_insert.php… |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:30:18.263Z | 2026-10-28T16:15:55.262Z | |
| cve-2026-109088 | 6.5 (v3.1) | libXtst RECORD EnableContext Reply Endless Loop |
X.org |
libXtst |
2026-10-27T16:26:20.597Z | 2026-10-27T16:26:20.597Z |
| cve-2026-48380 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.580Z | 2026-10-28T16:16:04.990Z |
| cve-2026-48379 | 7.8 (v3.1) | Substance3D - Painter | Stack-based Buffer Overflow (C… |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.363Z | 2026-10-29T10:45:45.823Z |
| cve-2026-104349 | 7.3 (v3.1) | Creative Cloud Desktop | Uncontrolled Search Path Elem… |
Adobe |
Creative Cloud Desktop Application |
2026-10-27T16:21:54.690Z | 2026-10-29T10:45:45.965Z |
| cve-2025-64394 | A vulnerability allowing a low-privileged local u… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.979Z | 2026-10-27T16:16:58.979Z | |
| cve-2026-108141 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.971Z | 2026-10-27T16:16:58.971Z | |
| cve-2026-106078 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.925Z | 2026-10-27T16:16:58.925Z | |
| cve-2026-107671 | A vulnerability allowing an attacker with valid A… |
Veeam |
ONE |
2026-10-27T16:16:58.921Z | 2026-10-27T16:16:58.921Z | |
| cve-2026-108142 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.907Z | 2026-10-27T16:16:58.907Z | |
| cve-2026-106077 | A vulnerability allowing a user with the Veeam Ba… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.905Z | 2026-10-27T16:16:58.905Z | |
| cve-2026-106076 | A vulnerability allowing an authenticated organiz… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.882Z | 2026-10-27T16:16:58.882Z | |
| cve-2026-108140 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.797Z | 2026-10-27T16:16:58.797Z | |
| cve-2026-105477 | A vulnerability in Veeam Agent for Linux allows f… |
Veeam |
Agent for Linux |
2026-10-27T16:16:58.785Z | 2026-10-27T16:16:58.785Z | |
| cve-2026-82984 | When a team was configured as "visible to everyon… |
Nextcloud |
Server |
2026-10-27T16:15:34.831Z | 2026-10-27T16:15:34.831Z | |
| cve-2026-77167 | Abusing the federated share endpoint, an attacker… |
Nextcloud |
server |
2026-10-27T16:15:34.778Z | 2026-10-27T16:15:34.778Z | |
| cve-2026-77173 | A user could create a docx or odt file with a # i… |
Nextcloud |
Files Confidential |
2026-10-27T16:15:34.777Z | 2026-10-27T16:15:34.777Z | |
| cve-2026-67400 | A missing token type check allowed to retrieve mo… |
Nextcloud |
Richdocuments |
2026-10-27T16:15:34.773Z | 2026-10-27T16:15:34.773Z | |
| cve-2026-77171 | A public shared collective always allowed recipie… |
Nextcloud |
Collectives |
2026-10-27T16:15:34.770Z | 2026-10-27T16:15:34.770Z | |
| cve-2026-77172 | App passwords were allowed to bypass password con… |
Nextcloud |
Server |
2026-10-27T16:15:34.765Z | 2026-10-27T16:15:34.765Z | |
| cve-2026-87897 | A SSRF vulnerability found that enables access to… |
Nextcloud |
whiteboard |
2026-10-27T16:15:34.742Z | 2026-10-27T16:15:34.742Z | |
| cve-2026-82983 | The Tables app's share-listing endpoint (GET /app… |
Nextcloud |
Tables |
2026-10-27T16:15:34.683Z | 2026-10-27T16:15:34.683Z | |
| cve-2026-82986 | The user in a group can bypass the group restrict… |
Nextcloud |
Tables |
2026-10-27T16:15:34.671Z | 2026-10-27T16:15:34.671Z | |
| cve-2026-54462 | knative.dev/pkg admission webhooks allow unbounded req… |
knative |
pkg |
2026-10-27T16:12:32.516Z | 2026-11-02T19:29:02.459Z | |
| cve-2026-112353 | 6.2 (v4.0) 8.2 (v3.1) | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI USA, LLC |
GFI KerioConnect |
2026-10-27T16:10:08.568Z | 2026-10-28T16:16:12.399Z |
| cve-2026-113775 | 7.8 (v3.1) | Dynamic Library Loading Process Control in Autodesk Fu… |
Autodesk |
Fusion |
2026-10-27T16:06:22.013Z | 2026-10-29T10:45:46.129Z |
| cve-2026-109089 | 7.5 (v3.1) | libXi XGetDeviceControl Control Type Mismatch Heap Buf… |
X.Org |
libXi |
2026-10-27T16:05:56.113Z | 2026-10-27T16:05:56.113Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0097 | Multiples vulnérabilités dans Veeam Recovery Orchestrator | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0096 | Multiples vulnérabilités dans les produits Tenable | 2024-02-07T00:00:00.000000 | 2024-02-07T00:00:00.000000 |
| certfr-2024-avi-0095 | Multiples vulnérabilités dans les produits Axis | 2024-02-06T00:00:00.000000 | 2024-02-06T00:00:00.000000 |
| certfr-2024-avi-0094 | Multiples vulnérabilités dans les produits Qnap | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |
| certfr-2024-avi-0093 | Vulnérabilité dans NetApp StorageGRID | 2024-02-05T00:00:00.000000 | 2024-02-05T00:00:00.000000 |
| certfr-2024-avi-0092 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0091 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0090 | Multiples vulnérabilités dans les produits IBM | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0089 | Vulnérabilité dans Kaspersky Security pour Linux Mail Server | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0088 | Multiples vulnérabilités dans Microsoft Edge | 2024-02-02T00:00:00.000000 | 2024-02-02T00:00:00.000000 |
| certfr-2024-avi-0087 | Multiples vulnérabilités dans les produits GLPI | 2024-02-01T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0086 | Multiples vulnérabilités dans Juniper | 2024-02-01T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0085 | Multiples vulnérabilités dans les produits Ivanti | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0084 | Multiples vulnérabilités dans Wordpress | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0083 | Vulnérabilité dans Microsoft Edge | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0082 | Multiples vulnérabilités dans les produits Xen | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0081 | Multiples vulnérabilités dans les produits Spring | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0080 | Multiples vulnérabilités dans les produits Splunk | 2024-01-31T00:00:00.000000 | 2024-01-31T00:00:00.000000 |
| certfr-2024-avi-0079 | Vulnérabilité dans les produits ESET | 2024-01-30T00:00:00.000000 | 2024-01-30T00:00:00.000000 |
| certfr-2024-avi-0078 | Vulnérabilité dans Progress MOVEit Transfer | 2024-01-30T00:00:00.000000 | 2024-01-30T00:00:00.000000 |
| certfr-2024-avi-0077 | Vulnérabilité dans les produits NetApp | 2024-01-29T00:00:00.000000 | 2024-01-29T00:00:00.000000 |
| certfr-2024-avi-0076 | Vulnérabilité dans Microsoft Edge | 2024-01-29T00:00:00.000000 | 2024-01-29T00:00:00.000000 |
| certfr-2024-avi-0075 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0074 | Multiples vulnérabilités dans les produits IBM | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0073 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0072 | Multiples vulnérabilités dans les produits Juniper | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0071 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0070 | Vulnérabilité dans Synology DiskStation Manager | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0069 | Multiples vulnérabilités dans Gitlab | 2024-01-26T00:00:00.000000 | 2024-01-26T00:00:00.000000 |
| certfr-2024-avi-0068 | Vulnérabilité dans Cisco Unified Communications | 2024-01-25T00:00:00.000000 | 2024-01-25T00:00:00.000000 |