Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112247 | Wuxi Wubang Security Software Five-in-One Safety Produ… |
Wuxi Wubang Security Software |
Five-in-One Safety Production Management Information System |
2026-10-19T17:15:15.630Z | 2026-10-20T16:10:48.654Z | |
| cve-2026-6930 | 3.7 (v3.1) | IBM Concert Software Risky Cryptographic Algorithm |
IBM |
Concert |
2026-10-19T17:11:49.495Z | 2026-10-19T18:24:35.665Z |
| cve-2026-15661 | 5.3 (v3.1) | IBM Concert Software Improper Output Neutralization for Logs |
IBM |
Concert |
2026-10-19T17:11:39.981Z | 2026-10-22T20:53:27.978Z |
| cve-2026-111750 | AIOHTTP: Pure-Python parser request smuggling |
aio-libs |
aiohttp |
2026-10-19T17:06:37.997Z | 2026-10-28T15:27:37.704Z | |
| cve-2026-111749 | AIOHTTP: Cookie from subdomain can remove Host-Only Sc… |
aio-libs |
aiohttp |
2026-10-19T17:04:42.374Z | 2026-10-22T20:52:37.188Z | |
| cve-2026-111748 | AIOHTTP: Absolute-form request targets can spoof Reque… |
aio-libs |
aiohttp |
2026-10-19T17:02:21.289Z | 2026-10-19T18:22:09.618Z | |
| cve-2026-112195 | FusionPBX Dialplan Editor dialplan.php os command injection |
n/a |
FusionPBX |
2026-10-19T17:00:17.863Z | 2026-10-19T18:03:19.427Z | |
| cve-2026-111066 | AIOHTTP: File descriptor exhaustion in multipart requests |
aio-libs |
aiohttp |
2026-10-19T16:59:47.217Z | 2026-10-20T16:10:55.842Z | |
| cve-2024-4412 | 2.7 (v3.1) | Expression Language Injection via User Input in Multip… |
WSO2 |
WSO2 Enterprise Integrator |
2026-10-19T16:59:05.004Z | 2026-10-20T19:31:26.457Z |
| cve-2026-111065 | AIOHTTP: Connector pool exhaustion via Max-Age overflow |
aio-libs |
aiohttp |
2026-10-19T16:57:26.696Z | 2026-10-19T17:35:52.967Z | |
| cve-2025-13173 | 6.5 (v3.1) | Improper Token Revocation via Session-Bound Token Flow… |
WSO2 |
WSO2 API Control Plane |
2026-10-19T16:49:08.687Z | 2026-10-20T19:31:45.535Z |
| cve-2026-111064 | aiohttp server lacks an initial request/header timeout |
aio-libs |
aiohttp |
2026-10-19T16:47:35.036Z | 2026-10-28T15:29:24.279Z | |
| cve-2025-13591 | 5.3 (v3.1) | Username Enumeration via Authentication Endpoint in WS… |
WSO2 |
WSO2 Identity Server |
2026-10-19T16:45:59.519Z | 2026-10-20T19:32:03.360Z |
| cve-2026-112193 | Webkul Aureus ERP UserForm.php weak password |
Webkul |
Aureus ERP |
2026-10-19T16:45:10.250Z | 2026-10-22T20:51:29.159Z | |
| cve-2026-111063 | AIOHTTP: Secure attribute not enforced for shared cookie |
aio-libs |
aiohttp |
2026-10-19T16:44:31.331Z | 2026-10-22T20:50:40.634Z | |
| cve-2026-14511 | 6.5 (v3.1) | IBM MQ Denial of Service |
IBM |
MQ |
2026-10-19T16:43:22.662Z | 2026-10-20T16:11:08.437Z |
| cve-2026-10572 | 8.8 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:42.171Z | 2026-10-20T12:57:47.471Z |
| cve-2026-10574 | 8.8 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:34.104Z | 2026-10-20T12:57:57.696Z |
| cve-2026-10743 | 8.8 (v3.1) | IBM MQ Race Condition |
IBM |
MQ Operator |
2026-10-19T16:41:25.083Z | 2026-10-20T03:55:38.958Z |
| cve-2026-11828 | 5.9 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:17.597Z | 2026-10-19T17:58:40.361Z |
| cve-2026-11829 | 6.5 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:09.911Z | 2026-10-19T16:57:56.455Z |
| cve-2026-11831 | 5.4 (v3.1) | IBM MQ Heap-based Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:41:02.438Z | 2026-10-20T16:11:18.172Z |
| cve-2026-12148 | 7.5 (v3.1) | IBM MQ Deserialization of Untrusted Data |
IBM |
MQ Operator |
2026-10-19T16:40:55.117Z | 2026-10-20T12:58:09.900Z |
| cve-2026-12155 | 6.5 (v3.1) | IBM MQ Deserialization of Untrusted Data |
IBM |
MQ Operator |
2026-10-19T16:40:44.471Z | 2026-10-19T18:25:50.095Z |
| cve-2026-12343 | 6.5 (v3.1) | IBM MQ Denial of Service |
IBM |
MQ Operator |
2026-10-19T16:40:37.209Z | 2026-10-19T17:52:17.052Z |
| cve-2026-12350 | 6.5 (v3.1) | IBM MQ Deserialization of Untrusted Data |
IBM |
MQ Operator |
2026-10-19T16:40:28.489Z | 2026-10-19T16:58:34.572Z |
| cve-2025-10149 | 8.2 (v3.1) | Arbitrary Operations via SCIM Endpoints in Multiple WS… |
WSO2 |
WSO2 Identity Server as Key Manager |
2026-10-19T16:40:26.522Z | 2026-10-20T19:29:50.753Z |
| cve-2026-12660 | 2.7 (v3.1) | IBM MQ Path Traversal |
IBM |
MQ Operator |
2026-10-19T16:40:20.554Z | 2026-10-20T16:11:26.821Z |
| cve-2026-12665 | 8.1 (v3.1) | IBM MQ Buffer Overflow |
IBM |
MQ Operator |
2026-10-19T16:40:12.974Z | 2026-10-20T12:58:19.535Z |
| cve-2026-12669 | 3.1 (v3.1) | IBM MQ Out-of-bounds Read |
IBM |
MQ Operator |
2026-10-19T16:40:03.110Z | 2026-10-19T18:27:07.282Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-326 | Vulnérabilité dans SCADA Siemens Ruggedcom Discovery Protocol | 2017-09-29T00:00:00.000000 | 2017-09-29T00:00:00.000000 |
| certfr-2017-avi-325 | Multiples vulnérabilités dans les produits Cisco | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-324 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-28T00:00:00.000000 | 2017-09-28T00:00:00.000000 |
| certfr-2017-avi-323 | Vulnérabilité dans Schneider Electric InduSoft et InTouch Machine Edition | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-322 | Vulnérabilité dans Citrix NetScaler et CloudBridge | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-321 | Multiples vulnérabilités dans Apple iOS | 2017-09-27T00:00:00.000000 | 2017-09-27T00:00:00.000000 |
| certfr-2017-avi-320 | Multiples vulnérabilités dans les produits Apple | 2017-09-26T00:00:00.000000 | 2017-09-26T00:00:00.000000 |
| certfr-2017-avi-319 | Vulnérabilité dans Citrix NetScaler | 2017-09-25T00:00:00.000000 | 2017-09-25T00:00:00.000000 |
| certfr-2017-avi-318 | Multiples vulnérabilités dans Google Chrome | 2017-09-22T00:00:00.000000 | 2017-09-22T00:00:00.000000 |
| certfr-2017-avi-317 | Multiples vulnérabilités dans les produits Cisco | 2017-09-21T00:00:00.000000 | 2017-09-21T00:00:00.000000 |
| certfr-2017-avi-316 | Multiples vulnérabilités dans Samba | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-315 | Multiples vulnérabilités dans Joomla! | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-314 | Multiples vulnérabilités dans Apache Tomcat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-313 | Vulnérabilité dans Asterisk | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-312 | Multiples vulnérabilités dans WordPress | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-311 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-310 | Vulnérabilité dans le noyau Linux de RedHat | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-309 | Multiples vulnérabilités dans Moodle | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-308 | Multiples vulnérabilités dans les produits Apple | 2017-09-20T00:00:00.000000 | 2017-09-20T00:00:00.000000 |
| certfr-2017-avi-307 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-09-19T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-306 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-18T00:00:00.000000 | 2017-09-19T00:00:00.000000 |
| certfr-2017-avi-305 | Vulnérabilité dans SCADA Schneider Electric InduSoft Web Studio | 2017-09-18T00:00:00.000000 | 2017-09-18T00:00:00.000000 |
| certfr-2017-avi-304 | Multiples vulnérabilités dans les produits VMware | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-303 | Multiples vulnérabilités dans Magento | 2017-09-15T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-302 | Multiples vulnérabilités dans Citrix XenServer | 2017-09-14T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-301 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-09-14T00:00:00.000000 | 2017-09-15T00:00:00.000000 |
| certfr-2017-avi-300 | Vulnérabilité dans Cisco Meeting Server | 2017-09-14T00:00:00.000000 | 2017-09-14T00:00:00.000000 |
| certfr-2017-avi-299 | Multiples vulnérabilités dans Microsoft IE | 2017-09-13T00:00:00.000000 | 2017-09-13T00:00:00.000000 |
| certfr-2017-avi-298 | Multiples vulnérabilités dans Microsoft Edge | 2017-09-13T00:00:00.000000 | 2017-09-13T00:00:00.000000 |
| certfr-2017-avi-297 | Multiples vulnérabilités dans les produits Microsoft | 2017-09-13T00:00:00.000000 | 2017-09-13T00:00:00.000000 |