Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-111100 | 5.3 (v3.1) 6.9 (v4.0) | Kiloview E3 NDI Encoder Missing Authentication for Cri… |
Kiloview |
E3 Firmware |
2026-10-22T21:53:44.787Z | 2026-10-23T10:56:09.381Z |
| cve-2026-109122 | 9.1 (v3.1) 9.4 (v4.0) | Kiloview E3 NDI Encoder OS Command Injection |
Kiloview |
E3 Firmware |
2026-10-22T21:50:47.777Z | 2026-10-23T10:56:09.531Z |
| cve-2026-110063 | 10 (v3.1) | VM Inspector for Azure Virtual Machines Elevation of P… |
Microsoft |
VM Inspector for Azure Virtual Machines |
2026-10-22T21:44:42.868Z | 2026-10-31T18:00:20.423Z |
| cve-2026-83938 | 10 (v3.1) | Azure Kubernetes Configuration Service Elevation of Pr… |
Microsoft |
Azure Kubernetes Configuration Service |
2026-10-22T21:44:42.272Z | 2026-10-31T18:00:19.877Z |
| cve-2026-96185 | 7.5 (v3.1) | Microsoft Exchange Online Remote Code Execution Vulner… |
Microsoft |
Microsoft Exchange Online |
2026-10-22T21:44:41.837Z | 2026-10-31T18:00:19.270Z |
| cve-2026-97785 | 10 (v3.1) | AAD App Proxy Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Entra application proxy |
2026-10-22T21:44:41.227Z | 2026-10-31T18:00:18.695Z |
| cve-2026-108456 | 7.7 (v3.1) | Azure AI Foundry Elevation of Privilege Vulnerability |
Microsoft |
Azure AI Foundry |
2026-10-22T21:44:40.650Z | 2026-10-31T18:00:18.195Z |
| cve-2026-105014 | 9.1 (v3.1) | Azure Pipelines Remote Code Execution Vulnerability |
Microsoft |
Azure Pipelines |
2026-10-22T21:44:40.069Z | 2026-10-31T18:00:17.364Z |
| cve-2026-111594 | 8.1 (v3.1) 9.2 (v4.0) | InterSystems Corporation InterSystems IRIS for Health … |
InterSystems |
IRIS for Health |
2026-10-22T21:39:47.105Z | 2026-11-02T12:36:15.892Z |
| cve-2026-114620 | Authlib: Unvalidated request_uri fetch in JWT-secured … |
authlib |
authlib |
2026-10-22T21:34:11.909Z | 2026-10-30T20:14:29.752Z | |
| cve-2026-114619 | Authlib: OpenID implicit grant checks raw scope instea… |
authlib |
authlib |
2026-10-22T21:31:02.929Z | 2026-10-29T02:40:27.668Z | |
| cve-2026-114618 | Authlib: Default JWT bearer grant accepts assertions f… |
authlib |
authlib |
2026-10-22T21:28:37.879Z | 2026-10-29T12:29:17.976Z | |
| cve-2026-114617 | Authlib: ID token can disable its own nonce validation… |
authlib |
authlib |
2026-10-22T21:25:31.732Z | 2026-10-23T15:00:16.051Z | |
| cve-2026-115449 | 3.5 (v3.1) | Libslirp: libslirp: icmp echo reply length desynchroni… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:20:56.855Z | 2026-10-23T15:00:22.267Z |
| cve-2026-114616 | Authlib accepts an empty HMAC key, allowing JWS/JWT si… |
authlib |
authlib |
2026-10-22T21:14:03.060Z | 2026-10-30T20:07:37.170Z | |
| cve-2026-115221 | 5.4 (v3.1) | Ipa: freeipa: freeipa uses subject cn as proof of cert… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-22T21:13:30.521Z | 2026-10-26T16:46:46.166Z |
| cve-2026-115424 | 5.5 (v3.1) | Oc: oc: symlink/hardlink target validation bypass in o… |
Red Hat |
Red Hat OpenShift Container Platform 4 |
2026-10-22T21:12:27.259Z | 2026-11-02T21:01:29.263Z |
| cve-2026-114615 | Authlib incomplete algorithm-confusion fix permits HMA… |
authlib |
authlib |
2026-10-22T21:10:02.023Z | 2026-10-29T02:38:05.175Z | |
| cve-2026-114614 | Authlib: is_secure_transport() loopback exemption can … |
authlib |
authlib |
2026-10-22T21:00:14.354Z | 2026-10-29T13:49:50.607Z | |
| cve-2026-114583 | 6.9 (v4.0) | tar filter allows writing outside destination via empt… |
Python Software Foundation |
CPython |
2026-10-22T20:57:36.019Z | 2026-11-02T12:32:42.085Z |
| cve-2026-114625 | 9.9 (v3.1) 9.4 (v4.0) | Security Advisory 0199 |
Arista Networks |
VeloCloud Orchestrator |
2026-10-22T20:47:56.427Z | 2026-10-24T03:55:14.884Z |
| cve-2026-115417 | 7.5 (v3.1) 8.2 (v4.0) | Memory allocation with excessive size value in the MQT… |
AWS |
aws-c-mqtt |
2026-10-22T20:34:50.961Z | 2026-10-29T01:52:06.755Z |
| cve-2026-115419 | 8.1 (v3.1) 8.6 (v4.0) | Unintended disclosure of data element to wrong session… |
AWS |
strands-agents |
2026-10-22T20:04:04.191Z | 2026-10-30T19:30:50.901Z |
| cve-2026-112332 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 Denial of Service via JsonNet Deser… |
GDATASoftwareAG |
motornet |
2026-10-22T19:42:17.808Z | 2026-10-29T02:37:09.398Z |
| cve-2026-112331 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 Kafka Denial of Service via Structu… |
GDATASoftwareAG |
motornet |
2026-10-22T19:41:15.973Z | 2026-11-04T20:20:35.941Z |
| cve-2026-112330 | 8.7 (v4.0) 7.5 (v3.1) | Motor.NET < 0.19.0 RabbitMQ Denial of Service via Clou… |
GDATASoftwareAG |
motornet |
2026-10-22T19:40:15.180Z | 2026-10-23T21:06:22.759Z |
| cve-2026-115509 | 2.3 (v4.0) 4.2 (v3.1) | Jitsu Console before 2.14.0-beta.41 Cross-Workspace Au… |
jitsucom |
jitsu |
2026-10-22T19:14:08.632Z | 2026-10-29T12:24:50.785Z |
| cve-2026-115508 | 7.1 (v4.0) 6.5 (v3.1) | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields |
unclecode |
crawl4ai |
2026-10-22T19:14:07.893Z | 2026-10-29T02:36:22.691Z |
| cve-2026-115507 | 5.1 (v4.0) 3.5 (v3.1) | Vikunja 2.2.0 before 2.7.1 HTML Injection via Notifica… |
go-vikunja |
vikunja |
2026-10-22T19:14:07.157Z | 2026-11-04T15:45:55.888Z |
| cve-2026-115506 | 8.7 (v4.0) 7.5 (v3.1) | libexpat through 2.9.0 Denial of Service via Billion L… |
libexpat |
libexpat |
2026-10-22T19:14:06.001Z | 2026-10-23T21:06:43.010Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-015 | Multiples vulnérabilités dans Belden Tofino | 2022-01-11T00:00:00.000000 | 2022-01-11T00:00:00.000000 |
| certfr-2022-avi-014 | Vulnérabilité dans Samba | 2022-01-11T00:00:00.000000 | 2022-01-11T00:00:00.000000 |
| certfr-2022-avi-013 | Vulnérabilité dans la base de données H2 | 2022-01-10T00:00:00.000000 | 2022-01-10T00:00:00.000000 |
| certfr-2022-avi-012 | Multiples vulnérabilités dans Microsoft Edge | 2022-01-07T00:00:00.000000 | 2022-01-07T00:00:00.000000 |
| certfr-2022-avi-011 | Vulnérabilité dans IBM AIX | 2022-01-07T00:00:00.000000 | 2022-01-07T00:00:00.000000 |
| certfr-2022-avi-010 | Multiples vulnérabilités dans WordPress | 2022-01-07T00:00:00.000000 | 2022-01-11T00:00:00.000000 |
| certfr-2022-avi-009 | Multiples vulnérabilités dans les produits QNAP | 2022-01-07T00:00:00.000000 | 2022-01-07T00:00:00.000000 |
| certfr-2022-avi-008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-01-07T00:00:00.000000 | 2022-01-07T00:00:00.000000 |
| certfr-2022-avi-007 | Multiples vulnérabilités dans les produits Moxa | 2022-01-06T00:00:00.000000 | 2022-01-06T00:00:00.000000 |
| certfr-2022-avi-006 | Multiples vulnérabilités dans les produits Tenable | 2022-01-06T00:00:00.000000 | 2022-01-06T00:00:00.000000 |
| certfr-2022-avi-005 | Multiples vulnérabilités dans Spring Framework | 2022-01-06T00:00:00.000000 | 2022-01-06T00:00:00.000000 |
| certfr-2022-avi-004 | Multiples vulnérabilités dans SonicWall SonicOS | 2022-01-06T00:00:00.000000 | 2022-01-06T00:00:00.000000 |
| certfr-2022-avi-003 | Multiples vulnérabilités dans Google Chrome | 2022-01-05T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2022-avi-002 | Multiples vulnérabilités dans Google Android | 2022-01-05T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2022-avi-001 | Vulnérabilité dans les produits VMware | 2022-01-05T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-avi-991 | Vulnérabilité dans le noyau Linux de SUSE | 2021-12-31T00:00:00.000000 | 2021-12-31T00:00:00.000000 |
| certfr-2021-avi-990 | Vulnérabilité dans F5 BIG-IP | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-989 | Multiples vulnérabilités dans Wireshark | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-988 | Multiples vulnérabilités dans les produits Moxa | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-987 | Vulnérabilité dans QNAP QTS | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-986 | Multiples vulnérabilités dans Trend Micro Apex One et Worry-Free Business Security | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-985 | Vulnérabilité dans Stormshield Network Security | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-984 | Vulnérabilité dans Fortinet FortiAuthenticator | 2021-12-30T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-983 | Multiples vulnérabilités dans les produits Moxa | 2021-12-28T00:00:00.000000 | 2021-12-30T00:00:00.000000 |
| certfr-2021-avi-982 | Vulnérabilité dans Moxa MGate | 2021-12-27T00:00:00.000000 | 2021-12-27T00:00:00.000000 |
| certfr-2021-avi-981 | Multiples vulnérabilités dans SolarWinds Web Help Desk | 2021-12-27T00:00:00.000000 | 2021-12-27T00:00:00.000000 |
| certfr-2021-avi-980 | Vulnérabilité dans les produits F-Secure | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |
| certfr-2021-avi-979 | Multiples vulnérabilités dans SonicWall SMA100 | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |
| certfr-2021-avi-978 | Vulnérabilité dans le noyau Linux de Red Hat | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |
| certfr-2021-avi-977 | Multiples vulnérabilités dans Stormshield Endpoint Security | 2021-12-22T00:00:00.000000 | 2021-12-22T00:00:00.000000 |