Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-3303 | 3.7 (v3.1) | IBM Concert Software Permissive Cross-domain Security Policy |
IBM |
Concert |
2026-10-19T17:17:45.343Z | 2026-10-20T16:10:39.862Z |
| cve-2026-3628 | 5.3 (v3.1) | IBM Concert Software Information Disclosure |
IBM |
Concert |
2026-10-19T17:17:36.917Z | 2026-10-22T20:53:57.630Z |
| cve-2026-4405 | 4 (v3.1) | IBM Concert Software Use of Web Browser Cache Containi… |
IBM |
Concert |
2026-10-19T17:17:27.412Z | 2026-10-19T18:23:21.592Z |
| cve-2026-4413 | 6.1 (v3.1) | IBM Concert Software Cross-Site Scripting |
IBM |
Concert |
2026-10-19T17:17:18.567Z | 2026-10-19T17:57:13.032Z |
| cve-2026-6719 | 7.5 (v3.1) | IBM Concert Software Use of Insufficiently Random Values |
IBM |
Concert |
2026-10-19T17:17:08.395Z | 2026-10-19T18:02:41.810Z |
| cve-2026-112247 | Wuxi Wubang Security Software Five-in-One Safety Produ… |
Wuxi Wubang Security Software |
Five-in-One Safety Production Management Information System |
2026-10-19T17:15:15.630Z | 2026-10-20T16:10:48.654Z | |
| cve-2026-6930 | 3.7 (v3.1) | IBM Concert Software Risky Cryptographic Algorithm |
IBM |
Concert |
2026-10-19T17:11:49.495Z | 2026-10-19T18:24:35.665Z |
| cve-2026-15661 | 5.3 (v3.1) | IBM Concert Software Improper Output Neutralization for Logs |
IBM |
Concert |
2026-10-19T17:11:39.981Z | 2026-10-22T20:53:27.978Z |
| cve-2026-111750 | AIOHTTP: Pure-Python parser request smuggling |
aio-libs |
aiohttp |
2026-10-19T17:06:37.997Z | 2026-10-28T15:27:37.704Z | |
| cve-2026-111749 | AIOHTTP: Cookie from subdomain can remove Host-Only Sc… |
aio-libs |
aiohttp |
2026-10-19T17:04:42.374Z | 2026-10-22T20:52:37.188Z | |
| cve-2026-111748 | AIOHTTP: Absolute-form request targets can spoof Reque… |
aio-libs |
aiohttp |
2026-10-19T17:02:21.289Z | 2026-10-19T18:22:09.618Z | |
| cve-2026-112195 | FusionPBX Dialplan Editor dialplan.php os command injection |
n/a |
FusionPBX |
2026-10-19T17:00:17.863Z | 2026-10-19T18:03:19.427Z | |
| cve-2026-111066 | AIOHTTP: File descriptor exhaustion in multipart requests |
aio-libs |
aiohttp |
2026-10-19T16:59:47.217Z | 2026-10-20T16:10:55.842Z | |
| cve-2024-4412 | 2.7 (v3.1) | Expression Language Injection via User Input in Multip… |
WSO2 |
WSO2 Enterprise Integrator |
2026-10-19T16:59:05.004Z | 2026-10-20T19:31:26.457Z |
| cve-2026-111065 | AIOHTTP: Connector pool exhaustion via Max-Age overflow |
aio-libs |
aiohttp |
2026-10-19T16:57:26.696Z | 2026-10-19T17:35:52.967Z | |
| cve-2025-13173 | 6.5 (v3.1) | Improper Token Revocation via Session-Bound Token Flow… |
WSO2 |
WSO2 API Control Plane |
2026-10-19T16:49:08.687Z | 2026-10-20T19:31:45.535Z |
| cve-2026-111064 | aiohttp server lacks an initial request/header timeout |
aio-libs |
aiohttp |
2026-10-19T16:47:35.036Z | 2026-10-28T15:29:24.279Z | |
| cve-2025-13591 | 5.3 (v3.1) | Username Enumeration via Authentication Endpoint in WS… |
WSO2 |
WSO2 Identity Server |
2026-10-19T16:45:59.519Z | 2026-10-20T19:32:03.360Z |
| cve-2026-112193 | Webkul Aureus ERP UserForm.php weak password |
Webkul |
Aureus ERP |
2026-10-19T16:45:10.250Z | 2026-10-22T20:51:29.159Z | |
| cve-2026-111063 | AIOHTTP: Secure attribute not enforced for shared cookie |
aio-libs |
aiohttp |
2026-10-19T16:44:31.331Z | 2026-10-22T20:50:40.634Z | |
| cve-2026-14511 | 6.5 (v3.1) | IBM MQ Denial of Service |
IBM |
MQ |
2026-10-19T16:43:22.662Z | 2026-10-20T16:11:08.437Z |
| cve-2026-10572 | 8.8 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:42.171Z | 2026-10-20T12:57:47.471Z |
| cve-2026-10574 | 8.8 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:34.104Z | 2026-10-20T12:57:57.696Z |
| cve-2026-10743 | 8.8 (v3.1) | IBM MQ Race Condition |
IBM |
MQ Operator |
2026-10-19T16:41:25.083Z | 2026-10-20T03:55:38.958Z |
| cve-2026-11828 | 5.9 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:17.597Z | 2026-10-19T17:58:40.361Z |
| cve-2026-11829 | 6.5 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:09.911Z | 2026-10-19T16:57:56.455Z |
| cve-2026-11831 | 5.4 (v3.1) | IBM MQ Heap-based Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:02.438Z | 2026-10-20T16:11:18.172Z |
| cve-2026-12148 | 7.5 (v3.1) | IBM MQ Deserialization of Untrusted Data |
IBM |
MQ Operator |
2026-10-19T16:40:55.117Z | 2026-10-20T12:58:09.900Z |
| cve-2026-12155 | 6.5 (v3.1) | IBM MQ Deserialization of Untrusted Data |
IBM |
MQ Operator |
2026-10-19T16:40:44.471Z | 2026-10-19T18:25:50.095Z |
| cve-2026-12343 | 6.5 (v3.1) | IBM MQ Denial of Service |
IBM |
MQ Operator |
2026-10-19T16:40:37.209Z | 2026-10-19T17:52:17.052Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-356 | Multiples vulnérabilités dans Adobe ColdFusion | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-355 | Multiples vulnérabilités dans Adobe Flash Player | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-354 | Multiples vulnérabilités dans Adobe RoboHelp | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-353 | Vulnérabilité dans le noyau Linux de SUSE | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-352 | Multiples vulnérabilités dans Fortinet FortiWLC et FortiMail | 2017-10-16T00:00:00.000000 | 2017-10-16T00:00:00.000000 |
| certfr-2017-avi-351 | Multiples vulnérabilités dans Xen | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-350 | Multiples vulnérabilités dans Citrix XenServer | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-349 | Vulnérabilité dans SCADA Siemens BACnet field panels | 2017-10-13T00:00:00.000000 | 2017-10-13T00:00:00.000000 |
| certfr-2017-avi-348 | Multiples vulnérabilités dans les produits Juniper | 2017-10-12T00:00:00.000000 | 2017-10-12T00:00:00.000000 |
| certfr-2017-avi-347 | Vulnérabilité dans Apple iOS | 2017-10-12T00:00:00.000000 | 2017-10-12T00:00:00.000000 |
| certfr-2017-avi-346 | Multiples vulnérabilités dans les produits Microsoft | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-345 | Multiples vulnérabilités dans Microsoft Windows | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-344 | Multiples vulnérabilités dans Microsoft Office | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-343 | Multiples vulnérabilités dans Microsoft Edge | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-342 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-341 | Multiples vulnérabilités dans Wireshark | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-340 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-339 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-10-11T00:00:00.000000 | 2017-10-12T00:00:00.000000 |
| certfr-2017-avi-338 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-337 | Vulnérabilité dans le noyau Linux de RedHat | 2017-10-11T00:00:00.000000 | 2017-10-11T00:00:00.000000 |
| certfr-2017-avi-336 | Vulnérabilité dans Apache Httpd | 2017-10-06T00:00:00.000000 | 2017-10-06T00:00:00.000000 |
| certfr-2017-avi-335 | Vulnérabilité dans SCADA Siemens 7KT PAC1200 data manager | 2017-10-06T00:00:00.000000 | 2017-10-06T00:00:00.000000 |
| certfr-2017-avi-334 | Multiples vulnérabilités dans les produits Apple | 2017-10-06T00:00:00.000000 | 2017-10-06T00:00:00.000000 |
| certfr-2017-avi-333 | Multiples vulnérabilités dans les produits Cisco | 2017-10-05T00:00:00.000000 | 2017-10-05T00:00:00.000000 |
| certfr-2017-avi-332 | Vulnérabilité dans Apache Tomcat | 2017-10-04T00:00:00.000000 | 2017-10-04T00:00:00.000000 |
| certfr-2017-avi-331 | Multiples vulnérabilités dans Apple iOS | 2017-10-04T00:00:00.000000 | 2017-10-04T00:00:00.000000 |
| certfr-2017-avi-330 | Multiples vulnérabilités dans Google Android | 2017-10-03T00:00:00.000000 | 2017-10-03T00:00:00.000000 |
| certfr-2017-avi-329 | Multiples vulnérabilités dans Dnsmasq | 2017-10-03T00:00:00.000000 | 2017-10-03T00:00:00.000000 |
| certfr-2017-avi-328 | Vulnérabilité dans Xen | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-327 | Multiples vulnérabilités dans Mozilla Firefox | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |