Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2023-39417 | 7.5 (v3.1) | Postgresql: extension script @substitutions@ within qu… |
Red Hat |
Red Hat Advanced Cluster Security 4.2 |
2023-08-11T12:19:15.108Z | 2026-11-01T03:02:04.380Z |
| cve-2023-3255 | 6.5 (v3.1) | Qemu: vnc: infinite loop in inflate_buffer() leads to … |
Red Hat |
Red Hat Enterprise Linux 8 |
2023-09-13T16:12:52.294Z | 2026-11-01T03:01:56.984Z |
| cve-2026-120195 | WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_… |
WAVLINK |
WL-WN579A3-A |
2026-11-01T03:00:27.095Z | 2026-11-01T03:00:27.095Z | |
| cve-2026-15563 | 7.4 (v3.1) | Wildfly-iiop-openjdk: missing authentication on eap's … |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:54.409Z | 2026-11-01T01:22:51.472Z |
| cve-2026-120251 | 6.8 (v4.0) 5.5 (v3.1) | imagecodecs 2026.3.6 through 2026.10.10 Infinite Loop … |
cgohlke |
imagecodecs |
2026-11-01T00:57:14.911Z | 2026-11-01T00:57:14.911Z |
| cve-2026-120250 | 6 (v4.0) 5.3 (v3.1) | OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate … |
marketcalls |
OpenAlgo |
2026-11-01T00:57:14.226Z | 2026-11-01T00:57:14.226Z |
| cve-2026-120247 | 6.8 (v4.0) 5.5 (v3.1) | FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized… |
FFmpeg |
FFmpeg |
2026-11-01T00:57:12.137Z | 2026-11-01T00:57:12.137Z |
| cve-2026-120246 | 6.8 (v4.0) 5.5 (v3.1) | FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosu… |
FFmpeg |
FFmpeg |
2026-11-01T00:57:11.435Z | 2026-11-01T00:57:11.435Z |
| cve-2026-120243 | 6.8 (v4.0) 5.5 (v3.1) | FFmpeg 2.0 through 9.0.2 Information Disclosure via G2… |
FFmpeg |
FFmpeg |
2026-11-01T00:57:09.338Z | 2026-11-01T00:57:09.338Z |
| cve-2026-120190 | PostyBirb Plus Submission Description Editor Descripti… |
n/a |
PostyBirb Plus |
2026-11-01T00:30:25.292Z | 2026-11-01T00:30:25.292Z | |
| cve-2026-86404 | 8.8 (v3.1) | Artemis-server: artemis-jms-client: artemis-core-clien… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 8.1.8.GA |
2026-09-07T11:35:04.324Z | 2026-11-01T00:13:41.842Z |
| cve-2026-15567 | 7.5 (v3.1) | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-au… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:59.564Z | 2026-11-01T00:11:59.754Z |
| cve-2026-15565 | 7.5 (v3.1) | Undertow: undertow-websockets: undertow: pre-auth dos … |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:58.552Z | 2026-11-01T00:11:56.504Z |
| cve-2026-15562 | 7.5 (v3.1) | Jboss-remoting: jboss-remoting: integer overflow in me… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:50.045Z | 2026-11-01T00:11:47.194Z |
| cve-2026-15561 | 7.5 (v3.1) | Undertow-core: oom via missing limits in chunked trail… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:49.419Z | 2026-11-01T00:11:43.736Z |
| cve-2026-15560 | 8.1 (v3.1) | Openjdk-orb: unauthed class loading via iiop in eap |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:45.288Z | 2026-11-01T00:11:42.582Z |
| cve-2026-15556 | 8.1 (v3.1) | Picketlink-federation: picketlink saml 2.0 auth bypass… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:44.388Z | 2026-11-01T00:11:37.116Z |
| cve-2026-15555 | 8.8 (v3.1) | Jboss-marshalling-river: wildfly-clustering-infinispan… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:40.634Z | 2026-11-01T00:11:32.415Z |
| cve-2026-15554 | 7.4 (v3.1) | Undertow-core: undertow: authentication bypass via ajp… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:40.484Z | 2026-11-01T00:11:29.115Z |
| cve-2026-10579 | 9.8 (v3.1) | Picketlink-federation: auth bypass in picketlink saml … |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7.4.25 |
2026-08-11T08:49:35.062Z | 2026-11-01T00:11:23.651Z |
| cve-2025-32914 | 7.4 (v3.1) | Libsoup: oob read on libsoup through function "soup_m… |
|
|
2025-04-14T14:45:46.300Z | 2026-11-01T00:10:14.484Z |
| cve-2025-32049 | 7.5 (v3.1) | Libsoup: denial of service attack to websocket server |
|
|
2025-04-03T13:36:13.035Z | 2026-11-01T00:10:12.521Z |
| cve-2025-2784 | 7 (v3.1) | Libsoup: heap buffer over-read in `skip_insignificant_… |
|
|
2025-04-03T01:40:12.164Z | 2026-11-01T00:10:09.647Z |
| cve-2026-120189 | D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_fi… |
D-Link |
DIR-505 |
2026-11-01T00:00:23.604Z | 2026-11-01T00:00:23.604Z | |
| cve-2026-115946 | N/A | XS::libbrotli versions before 1.2.1.0 for Perl bundle … |
|
|
2026-10-31T23:49:36.583Z | 2026-10-31T23:49:36.583Z |
| cve-2026-120135 | 8.2 (v4.0) | Apache Thrift: Java TProtocolUtil.skip() does not limi… |
Apache Software Foundation |
Apache Thrift |
2026-10-31T20:33:00.088Z | 2026-10-31T21:08:29.726Z |
| cve-2026-118636 | 9.8 (v3.1) | Apache MINA: Unsafe Deserialization (CWE-502) in JavaN… |
Apache Software Foundation |
Apache MINA |
2026-10-31T20:17:11.191Z | 2026-10-31T21:08:27.192Z |
| cve-2026-41636 | 8.7 (v4.0) | Apache Thrift: Node.js skip() recursion |
Apache Software Foundation |
Apache Thrift |
2026-04-28T09:22:14.639Z | 2026-10-31T20:36:23.426Z |
| cve-2026-88077 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Elevation of Privilege… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-29T15:21:51.829Z | 2026-10-31T18:13:40.054Z |
| cve-2026-97781 | 8.8 (v3.1) | Microsoft Office OneNote Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:01:45.787Z | 2026-10-31T18:13:39.476Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-414 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-05T00:00:00.000000 | 2022-05-05T00:00:00.000000 |
| certfr-2022-avi-413 | Multiples vulnérabilités dans Belden Provize Basic | 2022-05-05T00:00:00.000000 | 2022-05-05T00:00:00.000000 |
| certfr-2022-avi-412 | Multiples vulnérabilités dans les produits Mitel | 2022-05-04T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-avi-411 | Multiples vulnérabilités dans OpenSSL | 2022-05-04T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-avi-410 | Multiples vulnérabilités dans les produits Fortinet | 2022-05-04T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-avi-409 | Multiples vulnérabilités dans Mozilla Firefox et Firefox ESR | 2022-05-04T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-avi-408 | Multiples vulnérabilités dans Google Pixel | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-407 | Vulnérabilité dans IBM Spectrum Scale | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-406 | Multiples vulnérabilités dans les produits Gitlab | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-405 | Multiples vulnérabilités dans Google Android | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-404 | Vulnérabilité dans Moxa MXview Series | 2022-05-03T00:00:00.000000 | 2022-05-03T00:00:00.000000 |
| certfr-2022-avi-403 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-402 | Multiples vulnérabilités dans Microsoft Edge | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-401 | Multiples vulnérabilités dans les produits IBM | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-400 | Multiples vulnérabilités dans Nagios XI | 2022-04-29T00:00:00.000000 | 2022-04-29T00:00:00.000000 |
| certfr-2022-avi-399 | Multiples vulnérabilités dans les produits Cisco | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-398 | Vulnérabilité dans les produits Sophos | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-397 | Multiples vulnérabilités dans Liferay Portal | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-396 | Multiples vulnérabilités dans les produits SonicWall | 2022-04-28T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-383 | Vulnérabilité dans Liferay Portal | 2022-04-25T00:00:00.000000 | 2022-04-28T00:00:00.000000 |
| certfr-2022-avi-395 | Multiples vulnérabilités dans les produits Nextcloud | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-394 | Multiples vulnérabilités dans MISP | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-393 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-392 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-391 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-390 | Multiples vulnérabilités dans Google Chrome | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-389 | Multiples vulnérabilités dans Ruby on Rails | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-388 | Vulnérabilité dans SolarWinds DPA | 2022-04-27T00:00:00.000000 | 2022-04-27T00:00:00.000000 |
| certfr-2022-avi-387 | Vulnérabilité dans Nextcloud Server | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |
| certfr-2022-avi-386 | Multiples vulnérabilités dans IBM QRadar SIEM | 2022-04-26T00:00:00.000000 | 2022-04-26T00:00:00.000000 |