Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-27912 | 8 (v3.1) | Windows Kerberos Elevation of Privilege Vulnerability |
Microsoft |
Windows Server 2012 |
2026-04-14T16:58:07.073Z | 2026-04-21T19:20:14.337Z |
| cve-2026-27911 | 7.8 (v3.1) | Windows User Interface Core Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:06.493Z | 2026-04-21T19:20:13.729Z |
| cve-2026-27910 | 7.8 (v3.1) | Windows Installer Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:05.782Z | 2026-04-21T19:20:13.089Z |
| cve-2026-27909 | 7.8 (v3.1) | Windows Search Service Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:05.228Z | 2026-04-21T19:20:12.457Z |
| cve-2026-26184 | 7.8 (v3.1) | Windows Projected File System Elevation of Privilege V… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:58:04.498Z | 2026-04-21T19:20:11.416Z |
| cve-2026-26182 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:03.895Z | 2026-04-21T19:20:10.559Z |
| cve-2026-26178 | 8.8 (v3.1) | Windows Advanced Rasterization Platform Elevation of P… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:03.225Z | 2026-04-21T19:20:09.883Z |
| cve-2026-26177 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:02.355Z | 2026-04-21T19:20:09.279Z |
| cve-2026-26176 | 7.8 (v3.1) | Windows Client Side Caching driver (csc.sys) Elevation… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:01.441Z | 2026-04-21T19:20:08.776Z |
| cve-2026-26173 | 7 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:58:00.795Z | 2026-04-21T19:20:08.155Z |
| cve-2026-26172 | 7.8 (v3.1) | Windows Push Notifications Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 21H2 |
2026-04-14T16:58:00.062Z | 2026-04-21T19:20:07.548Z |
| cve-2026-26170 | 7.8 (v3.1) | PowerShell Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:59.294Z | 2026-04-21T19:20:06.886Z |
| cve-2026-26169 | 6.1 (v3.1) | Windows Kernel Memory Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:58.532Z | 2026-04-21T19:20:06.288Z |
| cve-2026-26168 | 7.8 (v3.1) | Windows Ancillary Function Driver for WinSock Elevatio… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:57.537Z | 2026-04-21T19:20:05.617Z |
| cve-2026-26163 | 7.8 (v3.1) | Windows Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:56.857Z | 2026-04-21T19:20:04.960Z |
| cve-2026-26159 | 7.8 (v3.1) | Remote Desktop Licensing Service Elevation of Privileg… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:56.121Z | 2026-04-21T19:20:04.249Z |
| cve-2026-26156 | 7.8 (v3.1) | Windows Hyper-V Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:55.532Z | 2026-04-21T19:20:03.253Z |
| cve-2026-26153 | 7.8 (v3.1) | Windows Encrypted File System (EFS) Elevation of Privi… |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:54.919Z | 2026-04-21T19:20:00.936Z |
| cve-2026-26152 | 7 (v3.1) | Microsoft Cryptographic Services Elevation of Privileg… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:54.238Z | 2026-04-21T19:20:00.319Z |
| cve-2026-26143 | 7.8 (v3.1) | Microsoft PowerShell Security Feature Bypass Vulnerability |
Microsoft |
PowerShell 7.4 |
2026-04-14T16:57:53.686Z | 2026-04-21T19:19:59.729Z |
| cve-2026-23666 | 7.5 (v3.1) | .NET Framework Denial of Service Vulnerability |
Microsoft |
Microsoft .NET Framework 3.5 |
2026-04-14T16:57:53.069Z | 2026-04-21T19:19:59.173Z |
| cve-2026-23657 | 7.8 (v3.1) | Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-04-14T16:57:52.448Z | 2026-04-21T19:19:58.619Z |
| cve-2026-20806 | 5.5 (v3.1) | Windows COM Server Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-04-14T16:57:51.820Z | 2026-04-21T19:19:57.899Z |
| cve-2026-20928 | 4.6 (v3.1) | Windows Recovery Environment Security Feature Bypass V… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:51.238Z | 2026-04-21T19:19:57.431Z |
| cve-2026-32212 | 5.5 (v3.1) | Universal Plug and Play (upnp.dll) Information Disclos… |
Microsoft |
Windows 10 Version 1607 |
2026-04-14T16:57:50.632Z | 2026-04-21T19:19:56.799Z |
| cve-2026-33826 | 8 (v3.1) | Windows Active Directory Remote Code Execution Vulnerability |
Microsoft |
Windows Server 2012 R2 |
2026-04-14T16:57:50.050Z | 2026-04-21T19:19:56.171Z |
| cve-2026-33825 | 7.8 (v3.1) | Microsoft Defender Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Defender Antimalware Platform |
2026-04-14T16:57:49.361Z | 2026-04-21T19:19:55.579Z |
| cve-2026-33822 | 6.1 (v3.1) | Microsoft Word Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-04-14T16:57:48.786Z | 2026-04-21T19:19:55.021Z |
| cve-2026-33120 | 8.8 (v3.1) | Microsoft SQL Server Remote Code Execution Vulnerability |
Microsoft |
Microsoft SQL Server 2022 (GDR) |
2026-04-14T16:57:48.207Z | 2026-04-21T19:19:54.330Z |
| cve-2026-33116 | 7.5 (v3.1) | .NET, .NET Framework, and Visual Studio Denial of Serv… |
Microsoft |
.NET 10.0 |
2026-04-14T16:57:47.626Z | 2026-04-21T19:19:53.692Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2024-000070 | Out-of-bounds write vulnerability in Ricoh MFPs and printers | 2024-07-10T14:16+09:00 | 2024-07-10T14:16+09:00 |
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2017-000194 | WSR-300HP vulnerable to arbitrary code execution | 2017-08-08T18:07+09:00 | 2024-07-02T17:55+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| jvndb-2016-002299 | SaAT Netizen fails to properly verify downloaded installation and update files | 2016-12-05T13:52+09:00 | 2024-06-27T13:59+09:00 |
| jvndb-2022-000080 | Android App "IIJ SmartKey" vulnerable to information disclosure | 2022-10-14T13:57+09:00 | 2024-06-27T13:40+09:00 |
| jvndb-2023-001774 | Multiple vulnerabilities in SolarView Compact | 2023-05-09T16:09+09:00 | 2024-06-27T13:30+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2022-000026 | WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery | 2022-04-15T13:15+09:00 | 2024-06-25T18:04+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2022-001372 | Trend Micro Antivirus for MAC vulnerable to privilege escalation | 2022-02-18T14:55+09:00 | 2024-06-21T18:04+09:00 |
| jvndb-2022-001381 | Multiple vulnerabilities in Trend Micro ServerProtect | 2022-03-03T14:42+09:00 | 2024-06-21T17:58+09:00 |
| jvndb-2022-000015 | EC-CUBE improperly handles HTTP Host header values | 2022-02-22T14:22+09:00 | 2024-06-21T17:39+09:00 |
| jvndb-2022-000013 | EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery | 2022-02-22T14:09+09:00 | 2024-06-21T14:05+09:00 |
| jvndb-2022-000023 | WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization | 2022-03-30T15:23+09:00 | 2024-06-21T12:25+09:00 |
| jvndb-2022-000020 | Multiple vulnerabilities in pfSense | 2022-03-15T14:58+09:00 | 2024-06-21T11:59+09:00 |
| jvndb-2022-000022 | AttacheCase may insecurely load Dynamic Link Libraries | 2022-03-30T14:00+09:00 | 2024-06-21T11:42+09:00 |
| jvndb-2022-001387 | Installer of WPS Office for Windows misconfigures the ACL for the installation directory | 2022-03-09T12:30+09:00 | 2024-06-21T11:37+09:00 |
| jvndb-2022-001384 | Multiple vulnerabilities in OMRON CX-Programmer | 2022-03-08T15:56+09:00 | 2024-06-21T11:32+09:00 |
| jvndb-2023-000008 | Pgpool-II vulnerable to information disclosure | 2023-01-23T16:35+09:00 | 2024-06-20T17:54+09:00 |
| jvndb-2022-000024 | Zero-channel BBS Plus vulnerable to cross-site scripting | 2022-03-30T15:36+09:00 | 2024-06-20T17:34+09:00 |
| jvndb-2022-000019 | pfSense-pkg-WireGuard vulnerable to directory traversal | 2022-03-03T15:08+09:00 | 2024-06-20T16:51+09:00 |
| jvndb-2022-000018 | MarkText vulnerable to cross-site scripting | 2022-03-03T14:40+09:00 | 2024-06-20T16:46+09:00 |
| jvndb-2022-000046 | Gitlab vulnerable to server-side request forgery | 2022-06-17T12:26+09:00 | 2024-06-20T15:39+09:00 |
| jvndb-2024-003645 | Multiple vulnerabilities in multiple Trend Micro products | 2024-06-20T14:59+09:00 | 2024-06-20T14:59+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0080 | Vulnérabilité dans Broadcom Web Security Services Agent | 2026-01-23T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2025-avi-0970 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2025-11-06T00:00:00.000000 | 2026-01-23T00:00:00.000000 |
| certfr-2026-avi-0079 | Vulnérabilité dans Python | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0078 | Vulnérabilité dans Ceph | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0077 | Multiples vulnérabilités dans les produits Symantec | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0076 | Vulnérabilité dans les produits Cisco | 2026-01-22T00:00:00.000000 | 2026-01-22T00:00:00.000000 |
| certfr-2026-avi-0075 | Multiples vulnérabilités dans GitLab | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0074 | Multiples vulnérabilités dans Oracle Weblogic | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0073 | Multiples vulnérabilités dans Oracle Virtualization | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0072 | Multiples vulnérabilités dans Oracle Systems | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0071 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0070 | Multiples vulnérabilités dans Oracle MySQL | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0069 | Multiples vulnérabilités dans Oracle Java SE | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0068 | Multiples vulnérabilités dans Oracle Database Server | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0067 | Multiples vulnérabilités dans Python | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0066 | Vulnérabilité dans Google Chrome | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0065 | Multiples vulnérabilités dans les produits Atlassian | 2026-01-21T00:00:00.000000 | 2026-01-21T00:00:00.000000 |
| certfr-2026-avi-0064 | Vulnérabilité Microsoft Power Apps | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0063 | Multiples vulnérabilités dans Microsoft Edge | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0062 | Vulnérabilité dans Mattermost Desktop App | 2026-01-19T00:00:00.000000 | 2026-01-19T00:00:00.000000 |
| certfr-2026-avi-0061 | Multiples vulnérabilités dans les produits IBM | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0060 | Vulnérabilité dans Apache Struts | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0059 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0058 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0057 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0056 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0055 | Multiples vulnérabilités dans GLPI | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0054 | Multiples vulnérabilités dans Centreon Infra Monitoring | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2026-avi-0053 | Vulnérabilité dans Traefik | 2026-01-16T00:00:00.000000 | 2026-01-16T00:00:00.000000 |
| certfr-2025-avi-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2026-01-16T00:00:00.000000 |