Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-106077 | A vulnerability allowing a user with the Veeam Ba… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.905Z | 2026-10-27T16:16:58.905Z | |
| cve-2026-106076 | A vulnerability allowing an authenticated organiz… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.882Z | 2026-10-27T16:16:58.882Z | |
| cve-2026-108140 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.797Z | 2026-10-27T16:16:58.797Z | |
| cve-2026-105477 | A vulnerability in Veeam Agent for Linux allows f… |
Veeam |
Agent for Linux |
2026-10-27T16:16:58.785Z | 2026-10-27T16:16:58.785Z | |
| cve-2026-82984 | When a team was configured as "visible to everyon… |
Nextcloud |
Server |
2026-10-27T16:15:34.831Z | 2026-10-27T16:15:34.831Z | |
| cve-2026-77167 | Abusing the federated share endpoint, an attacker… |
Nextcloud |
server |
2026-10-27T16:15:34.778Z | 2026-10-27T16:15:34.778Z | |
| cve-2026-77173 | A user could create a docx or odt file with a # i… |
Nextcloud |
Files Confidential |
2026-10-27T16:15:34.777Z | 2026-10-27T16:15:34.777Z | |
| cve-2026-67400 | A missing token type check allowed to retrieve mo… |
Nextcloud |
Richdocuments |
2026-10-27T16:15:34.773Z | 2026-10-27T16:15:34.773Z | |
| cve-2026-77171 | A public shared collective always allowed recipie… |
Nextcloud |
Collectives |
2026-10-27T16:15:34.770Z | 2026-10-27T16:15:34.770Z | |
| cve-2026-77172 | App passwords were allowed to bypass password con… |
Nextcloud |
Server |
2026-10-27T16:15:34.765Z | 2026-10-27T16:15:34.765Z | |
| cve-2026-87897 | A SSRF vulnerability found that enables access to… |
Nextcloud |
whiteboard |
2026-10-27T16:15:34.742Z | 2026-10-27T16:15:34.742Z | |
| cve-2026-82983 | The Tables app's share-listing endpoint (GET /app… |
Nextcloud |
Tables |
2026-10-27T16:15:34.683Z | 2026-10-27T16:15:34.683Z | |
| cve-2026-82986 | The user in a group can bypass the group restrict… |
Nextcloud |
Tables |
2026-10-27T16:15:34.671Z | 2026-10-27T16:15:34.671Z | |
| cve-2026-54462 | knative.dev/pkg admission webhooks allow unbounded req… |
knative |
pkg |
2026-10-27T16:12:32.516Z | 2026-11-02T19:29:02.459Z | |
| cve-2026-112353 | 6.2 (v4.0) 8.2 (v3.1) | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI USA, LLC |
GFI KerioConnect |
2026-10-27T16:10:08.568Z | 2026-10-28T16:16:12.399Z |
| cve-2026-113775 | 7.8 (v3.1) | Dynamic Library Loading Process Control in Autodesk Fu… |
Autodesk |
Fusion |
2026-10-27T16:06:22.013Z | 2026-10-29T10:45:46.129Z |
| cve-2026-109089 | 7.5 (v3.1) | libXi XGetDeviceControl Control Type Mismatch Heap Buf… |
X.Org |
libXi |
2026-10-27T16:05:56.113Z | 2026-10-27T16:05:56.113Z |
| cve-2026-102638 | 7.1 (v3.1) | Electronic Library Description Stored Cross-Site Scrip… |
Autodesk |
Fusion |
2026-10-27T16:05:47.605Z | 2026-10-27T16:05:47.605Z |
| cve-2026-102637 | 7.1 (v3.1) | Fusion Protocol URL Reflected Cross-Site Scripting (XS… |
Autodesk |
Fusion |
2026-10-27T16:05:20.237Z | 2026-10-27T16:05:20.237Z |
| cve-2026-102636 | 7.1 (v3.1) | Design Name Stored Cross-Site Scripting (XSS) in Autod… |
Autodesk |
Fusion |
2026-10-27T16:04:54.299Z | 2026-10-27T16:04:54.299Z |
| cve-2026-107672 | 8.8 (v3.1) | Stack File Trusted Markdown Injection in Autodesk Fusi… |
Autodesk |
Fusion Post Processor Utility |
2026-10-27T16:04:04.713Z | 2026-10-29T10:45:46.291Z |
| cve-2026-117511 | desmondmorris node-tesseract Command Builder tesseract… |
desmondmorris |
node-tesseract |
2026-10-27T16:00:16.451Z | 2026-11-02T19:26:28.971Z | |
| cve-2026-116863 | 9.6 (v3.1) | WordPress Newsletters plugin <= 4.18.2 - Cross Site Re… |
Tribulant Software |
Newsletters |
2026-10-27T15:56:41.312Z | 2026-10-29T13:47:39.657Z |
| cve-2026-115495 | Mobile VPN with SSL Client for Windows: Cleartext Tran… |
WatchGuard |
Mobile VPN with SSL Client |
2026-10-27T15:55:13.638Z | 2026-10-29T17:10:25.690Z | |
| cve-2026-90465 | Fireware OS Missing Authentication in FireCluster Sync… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:29.859Z | 2026-10-29T10:45:46.468Z | |
| cve-2026-93862 | Fireware OS Out-of-Bounds Read in FireCluster Sync All… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.633Z | 2026-10-29T01:52:05.734Z | |
| cve-2026-112709 | Fireware OS Heap Buffer Overflow in AD Authentication … |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.465Z | 2026-10-27T15:52:28.465Z | |
| cve-2026-90464 | Fireware OS Missing Command Validation allows Authenti… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.267Z | 2026-10-27T15:52:28.267Z | |
| cve-2026-103593 | Fireware OS Stack Buffer Overflow in Logging Service A… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.244Z | 2026-10-29T10:45:46.609Z | |
| cve-2026-113881 | Fireware OS Stack Buffer Overflow in VPN Network Acces… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.229Z | 2026-10-27T15:52:28.229Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0067 | Multiples vulnérabilités dans les produits NetApp | 2024-01-25T00:00:00.000000 | 2024-01-25T00:00:00.000000 |
| certfr-2024-avi-0066 | Vulnérabilité dans Squid | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0065 | Vulnérabilité dans Citrix Hypervisor | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0064 | Multiples vulnérabilités dans Google Chrome | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0063 | Multiples vulnérabilités dans les produits Mozilla | 2024-01-24T00:00:00.000000 | 2024-01-24T00:00:00.000000 |
| certfr-2024-avi-0062 | Multiples vulnérabilités dans les produits Apple | 2024-01-23T00:00:00.000000 | 2024-02-01T00:00:00.000000 |
| certfr-2024-avi-0061 | Multiples vulnérabilités dans les produits Splunk | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2024-avi-0060 | Vulnérabilité dans Xen | 2024-01-23T00:00:00.000000 | 2024-01-23T00:00:00.000000 |
| certfr-2024-avi-0059 | Vulnérabilité dans Spring Framework | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0058 | Vulnérabilité dans Postfix | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0057 | Multiples vulnérabilités dans les produits IBM | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0056 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0055 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0054 | Vulnérabilité dans Exim | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0053 | Multiples vulnérabilités dans les produits Nextcloud | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0052 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0051 | Vulnérabilité dans Drupal Core | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0050 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0049 | Multiples vulnérabilités dans Oracle Weblogic Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0048 | Multiples vulnérabilités dans Oracle Systems | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0047 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0046 | Multiples vulnérabilités dans Oracle Java SE | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0045 | Multiples vulnérabilités dans Oracle Database Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0044 | Multiples vulnérabilités dans Oracle MySQL | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0043 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0042 | Vulnérabilité dans MongoDB C-Driver | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0041 | Multiples vulnérabilités dans Google Chrome | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0040 | Multiples vulnérabilités dans Atlassian Confluence et Jira | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0039 | Multiples vulnérabilités dans les produits Citrix | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0038 | Vulnérabilité dans les produits SonicWall | 2024-01-16T00:00:00.000000 | 2024-01-18T00:00:00.000000 |