Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-70276 | 7 (v3.1) | Microsoft Office Click-To-Run Elevation of Privilege V… |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:28.055Z | 2026-10-29T15:14:33.491Z |
| cve-2026-70287 | 8.8 (v3.1) | Microsoft Office Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.944Z | 2026-10-29T15:14:32.864Z |
| cve-2026-70266 | 8.8 (v3.1) | Microsoft Office SharePoint Elevation of Privilege Vul… |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2026-10-13T19:00:27.857Z | 2026-10-29T15:14:32.325Z |
| cve-2026-70259 | 6.5 (v3.1) | Microsoft Office SharePoint Information Disclosure Vul… |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2026-10-13T19:00:27.796Z | 2026-10-29T15:14:31.776Z |
| cve-2026-70263 | 6.5 (v3.1) | Microsoft Office Word Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.723Z | 2026-10-29T15:14:31.248Z |
| cve-2026-70282 | 8.8 (v3.1) | Microsoft Office Outlook Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.637Z | 2026-10-29T15:14:30.692Z |
| cve-2026-70257 | 8.8 (v3.1) | Microsoft Office Outlook Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.552Z | 2026-10-29T15:14:30.165Z |
| cve-2026-70269 | 8.1 (v3.1) | Microsoft Office Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.478Z | 2026-10-29T15:14:29.649Z |
| cve-2026-70251 | 7.5 (v3.1) | Microsoft Office SharePoint Elevation of Privilege Vul… |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2026-10-13T19:00:27.396Z | 2026-10-29T15:14:29.116Z |
| cve-2026-70206 | 6.5 (v3.1) | Microsoft Office Word Information Disclosure Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.324Z | 2026-10-29T15:14:28.499Z |
| cve-2026-70267 | 7.2 (v3.1) | Microsoft Office SharePoint Remote Code Execution Vuln… |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2026-10-13T19:00:27.220Z | 2026-10-29T15:14:27.989Z |
| cve-2026-70256 | 8.8 (v3.1) | Microsoft Office Outlook Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.149Z | 2026-10-29T15:14:27.402Z |
| cve-2026-70220 | 7.8 (v3.1) | Microsoft Office Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.078Z | 2026-10-29T15:14:26.822Z |
| cve-2026-70268 | 8.8 (v3.1) | Microsoft Office Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T19:00:27.013Z | 2026-10-29T15:14:26.303Z |
| cve-2026-70194 | 6.5 (v3.1) | .NET Framework Security Feature Bypass Vulnerability |
Microsoft |
.NET 11.0 runtime |
2026-10-13T19:00:26.934Z | 2026-10-29T15:14:25.769Z |
| cve-2026-70197 | 8.1 (v3.1) | .NET and Visual Studio Remote Code Execution Vulnerability |
Microsoft |
.NET 10.0 installed on Linux |
2026-10-13T19:00:26.869Z | 2026-10-29T15:14:25.157Z |
| cve-2026-70188 | 9.1 (v3.1) | ASP.NET Core Security Feature Bypass Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:26.806Z | 2026-10-29T15:14:24.719Z |
| cve-2026-70190 | 7.3 (v3.1) | .NET Elevation of Privilege Vulnerability |
Microsoft |
.NET 10.0 runtime |
2026-10-13T19:00:26.726Z | 2026-10-29T15:14:24.211Z |
| cve-2026-70183 | 7.5 (v3.1) | ASP.NET Core Elevation of Privilege Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:26.656Z | 2026-10-29T15:14:23.629Z |
| cve-2026-70181 | 7.5 (v3.1) | ASP.NET Core Denial of Service Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:26.578Z | 2026-10-29T15:14:23.075Z |
| cve-2026-70179 | 7.5 (v3.1) | ASP.NET Core Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-13T19:00:26.492Z | 2026-10-29T15:14:22.613Z |
| cve-2026-70196 | 5.9 (v3.1) | ASP.NET Core Denial of Service Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:26.412Z | 2026-10-29T15:14:22.096Z |
| cve-2026-70175 | 8.1 (v3.1) | ASP.NET Core Elevation of Privilege Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:26.329Z | 2026-10-29T15:14:21.430Z |
| cve-2026-70165 | 6.7 (v3.1) | .NET Elevation of Privilege Vulnerability |
Microsoft |
.NET 10.0 runtime |
2026-10-13T19:00:26.225Z | 2026-10-29T15:14:20.984Z |
| cve-2026-70161 | 7.3 (v3.1) | .NET Elevation of Privilege Vulnerability |
Microsoft |
.NET 10.0 runtime |
2026-10-13T19:00:26.144Z | 2026-10-29T15:14:20.408Z |
| cve-2026-70159 | 7.5 (v3.1) | ASP.NET Core Denial of Service Vulnerability |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-13T19:00:26.047Z | 2026-10-29T15:14:19.893Z |
| cve-2026-70174 | 8.8 (v3.1) | .NET Remote Code Execution Vulnerability |
Microsoft |
.NET 10.0 runtime |
2026-10-13T19:00:25.964Z | 2026-10-29T15:14:19.360Z |
| cve-2026-70186 | 7.5 (v3.1) | ASP.NET Core Denial of Service Vulnerability |
Microsoft |
ASP.NET Core 10.0 |
2026-10-13T19:00:25.877Z | 2026-10-29T15:14:18.770Z |
| cve-2026-70149 | 8.8 (v3.1) | Windows Client Side Caching driver (csc.sys) Elevation… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:00:25.630Z | 2026-10-29T15:14:18.200Z |
| cve-2026-61572 | AVideo-Encoder: unauthenticated full-response server-s… |
WWBN |
AVideo-Encoder |
2026-10-28T21:47:39.328Z | 2026-10-29T15:14:17.879Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-003080 | OMRON CX-Supervisor vulnerable to out-of-bounds read | 2021-10-18T15:26+09:00 | 2021-11-01T15:37+09:00 |
| jvndb-2021-000096 | Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent | 2021-10-29T15:11+09:00 | 2021-10-29T15:11+09:00 |
| jvndb-2021-000098 | ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS) | 2021-10-29T14:58+09:00 | 2021-10-29T14:58+09:00 |
| jvndb-2021-000095 | Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter | 2021-10-28T15:03+09:00 | 2021-10-28T15:03+09:00 |
| jvndb-2021-003385 | Trend Micro Endpoint security products for enterprises vulnerable to privilege escalation | 2021-10-26T12:35+09:00 | 2021-10-26T12:35+09:00 |
| jvndb-2021-000091 | 128 Technology Session Smart Router vulnerable to authentication bypass | 2021-10-18T14:58+09:00 | 2021-10-18T14:58+09:00 |
| jvndb-2021-000090 | Apache HTTP Server vulnerable to directory traversal | 2021-10-11T18:07+09:00 | 2021-10-11T18:07+09:00 |
| jvndb-2021-000089 | Nike App fails to restrict custom URL schemes properly | 2021-10-08T14:32+09:00 | 2021-10-08T14:32+09:00 |
| jvndb-2021-002810 | Information Disclosure Vulnerability in Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2021-10-05T15:37+09:00 | 2021-10-05T15:37+09:00 |
| jvndb-2021-002774 | Trend Micro ServerProtect family vulnerable to authentication bypass | 2021-10-01T14:42+09:00 | 2021-10-01T14:42+09:00 |
| jvndb-2021-002752 | Trend Micro HouseCall for Home Networks vulnerable to privilege escalation | 2021-09-30T13:56+09:00 | 2021-09-30T13:56+09:00 |
| jvndb-2021-000085 | SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification | 2021-09-28T15:18+09:00 | 2021-09-28T15:18+09:00 |
| jvndb-2021-000086 | WordPress Plugin "OG Tags" vulnerable to cross-site request forgery | 2021-09-28T15:11+09:00 | 2021-09-28T15:11+09:00 |
| jvndb-2021-000084 | InBody App vulnerable to information disclosure | 2021-09-28T14:27+09:00 | 2021-09-28T14:27+09:00 |
| jvndb-2021-001123 | Multiple vulnerabilities in GROWI | 2021-03-09T14:17+09:00 | 2021-09-24T13:34+09:00 |
| jvndb-2021-000083 | EC-CUBE plugin "Order Status Batch Change Plug-in" vulnerable to cross-site scripting | 2021-09-16T14:33+09:00 | 2021-09-16T14:33+09:00 |
| jvndb-2021-000082 | EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting | 2021-09-13T14:24+09:00 | 2021-09-13T14:24+09:00 |
| jvndb-2021-000074 | Multiple vulnerabilities in RevoWorks Browser | 2021-09-10T15:44+09:00 | 2021-09-10T15:44+09:00 |
| jvndb-2021-002342 | Trend Micro Security family vulnerable to improper handling of Directory Junction | 2021-09-03T16:10+09:00 | 2021-09-03T16:10+09:00 |
| jvndb-2020-000085 | Multiple vulnerabilities in GROWI | 2020-12-15T15:41+09:00 | 2021-08-30T16:29+09:00 |
| jvndb-2021-000080 | baserCMS vulnerable to cross-site scripting | 2021-08-27T13:29+09:00 | 2021-08-27T13:29+09:00 |
| jvndb-2021-000079 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-08-25T14:54+09:00 | 2021-08-25T14:54+09:00 |
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| jvndb-2021-000075 | WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting | 2021-08-10T14:40+09:00 | 2021-08-10T14:40+09:00 |
| jvndb-2021-002077 | Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises | 2021-08-04T11:15+09:00 | 2021-08-04T11:15+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0362 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0361 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0360 | Multiples vulnérabilités dans ISC BIND | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0359 | Multiples vulnérabilités dans Grafana | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0201 | Multiples vulnérabilités dans Mattermost Server | 2026-02-24T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0358 | Vulnérabilité dans Citrix XenServer | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0357 | Multiples vulnérabilités dans GitLab | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0356 | Vulnérabilité dans ISC Kea | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0355 | Multiples vulnérabilités dans les produits Apple | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0354 | Multiples vulnérabilités dans les produits Mozilla | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0353 | Multiples vulnérabilités dans Zabbix | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0352 | Multiples vulnérabilités dans les produits F5 | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0351 | Vulnérabilité dans Tenable OT Platform | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0350 | Multiples vulnérabilités dans Squid | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |
| certfr-2026-avi-0349 | Multiples vulnérabilités dans Ruby on Rails | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0348 | Vulnérabilité dans Trend Micro Deep Discovery Inspector | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0347 | Vulnérabilité dans Xen | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0346 | Vulnérabilité dans VMware Tanzu pour Postgres | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0345 | Vulnérabilité dans LibreNMS | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0344 | Vulnérabilité dans strongSwan | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0343 | Vulnérabilité dans Spring Cloud Config | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0342 | Multiples vulnérabilités dans Google Chrome | 2026-03-24T00:00:00.000000 | 2026-03-24T00:00:00.000000 |
| certfr-2026-avi-0341 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0340 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0339 | Multiples vulnérabilités dans les produits VMware | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0338 | Vulnérabilité dans les produits Synology | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0337 | Multiples vulnérabilités dans les produits Citrix | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0336 | Multiples vulnérabilités dans les produits Qnap | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0335 | Vulnérabilité dans CPython | 2026-03-23T00:00:00.000000 | 2026-03-23T00:00:00.000000 |
| certfr-2026-avi-0334 | Vulnérabilité dans les produits Microsoft | 2026-03-20T00:00:00.000000 | 2026-03-20T00:00:00.000000 |