Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82018 | 6.8 (v4.0) 6.1 (v3.1) | IGEL OS 12 / 11 Secure Boot Bypass via Unsigned igel.c… |
IGEL |
IGEL OS 12 |
2026-08-28T21:11:24.911Z | 2026-08-28T21:11:43.223Z |
| cve-2026-82017 | 8.6 (v4.0) 7.6 (v3.1) | IGEL OS 12 / 11 Boot Registry Parameter Injection via … |
IGEL |
IGEL OS 12 |
2026-08-28T21:09:01.253Z | 2026-08-28T21:09:01.253Z |
| cve-2026-3686 | 6.2 (v3.1) | Vulnerabilities exists in IBM Cloud Pak for Data System |
IBM |
Cloud Pak for Data System |
2026-08-28T20:54:02.208Z | 2026-08-28T20:54:02.208Z |
| cve-2026-3627 | 9.1 (v3.1) | Multiple Vulnerabilities in IBM Concert Software |
IBM |
Concert |
2026-08-28T20:53:37.759Z | 2026-08-28T20:53:37.759Z |
| cve-2026-19295 | 9.9 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:53:00.278Z | 2026-08-28T20:53:00.278Z |
| cve-2026-19294 | 6.4 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:52:38.719Z | 2026-08-28T20:52:38.719Z |
| cve-2026-19286 | 9.8 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:52:24.166Z | 2026-08-28T20:52:24.166Z |
| cve-2026-18904 | 8.2 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:52:08.372Z | 2026-08-28T20:52:08.372Z |
| cve-2026-18899 | 7.5 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:51:48.083Z | 2026-08-28T20:51:48.083Z |
| cve-2026-18891 | 8.2 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:51:27.834Z | 2026-08-28T20:51:27.834Z |
| cve-2026-18729 | 8.8 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:49:43.600Z | 2026-08-28T20:49:43.600Z |
| cve-2026-18545 | 4.3 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:49:25.781Z | 2026-08-28T20:49:25.781Z |
| cve-2026-18527 | 9.9 (v3.1) | IBM Application Runtime Expert (ARE) for IBM i is vuln… |
IBM |
Administration Runtime Expert for i |
2026-08-28T20:48:33.957Z | 2026-08-28T20:48:33.957Z |
| cve-2026-17203 | 7.5 (v3.1) | IBM Application Runtime Expert (ARE) for IBM i is vuln… |
IBM |
Administration Runtime Expert for i |
2026-08-28T20:43:25.520Z | 2026-08-28T20:43:25.520Z |
| cve-2026-16821 | 7 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-28T20:43:04.351Z | 2026-08-28T20:43:04.351Z |
| cve-2025-64649 | 5.9 (v3.1) | Multiple Vulnerabilities in IBM Concert Software |
IBM |
Concert |
2026-08-28T20:42:47.328Z | 2026-08-28T20:42:47.328Z |
| cve-2025-36290 | 5.9 (v3.1) | IBM Integrated Analytics System (IIAS) is affected by … |
IBM |
Integrated Analytics System |
2026-08-28T20:42:23.682Z | 2026-08-28T20:42:23.682Z |
| cve-2025-36271 | 5.9 (v3.1) | IBM Integrated Analytics System (IIAS) is affected by … |
IBM |
Integrated Analytics System |
2026-08-28T20:41:58.142Z | 2026-08-28T20:41:58.142Z |
| cve-2026-13735 | 3.7 (v3.1) | WireGuard keepalive transport-data messages accepted w… |
zephyrproject |
zephyr |
2026-08-28T20:38:50.695Z | 2026-08-28T20:38:50.695Z |
| cve-2026-13734 | 6.5 (v3.1) | Zephyr WireGuard mutates peer state before anti-replay… |
zephyrproject |
zephyr |
2026-08-28T20:38:49.617Z | 2026-08-28T20:38:49.617Z |
| cve-2026-55678 | Arc: Unauthenticated cluster node admission when `clus… |
Basekick-Labs |
arc |
2026-08-28T20:32:23.103Z | 2026-08-28T20:32:23.103Z | |
| cve-2026-75118 | 8.7 (v4.0) | http_gdpr_decrypt Pre-Authentication Stack-Based Buffe… |
TP-Link Systems Inc. |
TL-MR100 v3.20 |
2026-08-28T20:31:03.977Z | 2026-08-28T20:31:03.977Z |
| cve-2026-81533 | 6 (v4.0) 7.1 (v3.1) | MongoDB BI Connector ODBC Driver Memory-Safety Issue W… |
MongoDB |
BI Connector ODBC Driver |
2026-08-28T20:28:02.666Z | 2026-08-28T20:28:02.666Z |
| cve-2026-55763 | Klever-Go: Percentage-transfer royalty skips the sourc… |
klever-io |
klever-go |
2026-08-28T20:26:43.720Z | 2026-08-28T20:26:43.720Z | |
| cve-2026-81532 | 8.7 (v4.0) 8.8 (v3.1) | BI Connector ODBC Driver Improper Bounds Checking on C… |
MongoDB |
BI Connector ODBC Driver |
2026-08-28T20:26:05.939Z | 2026-08-28T20:26:05.939Z |
| cve-2026-55891 | PrivateBin: Reflected JSON injection in backend respon… |
PrivateBin |
PrivateBin |
2026-08-28T20:23:50.477Z | 2026-08-28T20:23:50.477Z | |
| cve-2026-81520 | 8.7 (v4.0) 7.5 (v3.1) | MongoDB Connector for BI Unbounded Authentication Nego… |
MongoDB |
BI Connector |
2026-08-28T20:22:42.151Z | 2026-08-28T20:22:42.151Z |
| cve-2026-55696 | PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerab… |
PrivateBin |
PrivateBin |
2026-08-28T20:20:53.934Z | 2026-08-28T20:20:53.934Z | |
| cve-2026-76651 | 5.3 (v4.0) | Pre-Authentication Multipart Boundary Buffer Overflow … |
TP-Link System Inc. |
TL-WR841N v14 |
2026-08-28T20:19:09.293Z | 2026-08-28T20:19:09.293Z |
| cve-2026-76650 | 5.3 (v4.0) | Pre-Authentication NULL Pointer Dereference in UPnP SO… |
TP-Link System Inc. |
TL-WR841N v14 |
2026-08-28T20:19:03.475Z | 2026-08-28T20:19:03.475Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-009148 | Open Redirect Vulnerability in Hitachi Ops Center Administrator | 2026-03-27T18:17+09:00 | 2026-03-27T18:17+09:00 |
| jvndb-2026-000047 | Multiple vulnerabilities in baserCMS | 2026-03-27T18:00+09:00 | 2026-03-27T18:00+09:00 |
| jvndb-2026-000045 | WordPress Plugin "OpenStreetMap" vulnerable to cross-site scripting | 2026-03-27T17:34+09:00 | 2026-03-27T17:34+09:00 |
| jvndb-2026-000046 | Multiple vulnerabilities in BUFFALO Wi-Fi routers | 2026-03-27T17:18+09:00 | 2026-03-27T17:18+09:00 |
| jvndb-2026-000044 | Multiple vulnerabilities in the installer of RATOC RAID Monitoring Manager for Windows | 2026-03-26T17:41+09:00 | 2026-03-26T17:41+09:00 |
| jvndb-2026-000042 | Digital Photo Frame GH-WDF10A vulnerable to improper access restriction | 2026-03-26T17:41+09:00 | 2026-03-26T17:41+09:00 |
| jvndb-2026-000043 | SHARP routers missing authentication for some web APIs | 2026-03-25T18:41+09:00 | 2026-03-25T18:41+09:00 |
| jvndb-2026-000040 | Installer of OM Workspace (Windows Edition) may insecurely load Dynamic Link Libraries | 2026-03-25T18:13+09:00 | 2026-03-25T18:13+09:00 |
| jvndb-2026-000041 | SANYO DENKI SANUPS SOFTWARE registers Windows services with unquoted file paths | 2026-03-25T17:58+09:00 | 2026-03-25T17:58+09:00 |
| jvndb-2026-007973 | Multiple vulnerabilities in Xerox FreeFlow Core (XRX26-005) | 2026-03-23T14:54+09:00 | 2026-04-09T13:55+09:00 |
| jvndb-2026-007524 | Vulnerability in Hitachi Command Suite | 2026-03-17T16:42+09:00 | 2026-03-17T16:42+09:00 |
| jvndb-2026-000038 | Installer for IBM Trusteer Rapport may insecurely load Dynamic Link Libraries | 2026-03-17T14:57+09:00 | 2026-03-17T14:57+09:00 |
| jvndb-2026-000039 | Missing authorization in the OpenAI thread/message API endpoints of GROWI | 2026-03-16T17:18+09:00 | 2026-03-16T17:18+09:00 |
| jvndb-2026-000037 | OpenLiteSpeed and LSWS Enterprise vulnerable to OS command injection | 2026-03-16T17:18+09:00 | 2026-03-16T17:18+09:00 |
| jvndb-2026-006887 | Multiple vulnerabilities in Micro Research MR-GM5L-S1 and MR-GM5A-L1 | 2026-03-12T17:22+09:00 | 2026-03-12T17:22+09:00 |
| jvndb-2026-000036 | Improper file access permission settings in multiple Digital Arts products | 2026-03-09T14:57+09:00 | 2026-03-09T16:23+09:00 |
| jvndb-2026-000035 | Installer for Qsee Client may insecurely load Dynamic Link Libraries | 2026-03-09T14:57+09:00 | 2026-03-09T14:57+09:00 |
| jvndb-2026-006102 | Security issues in ESC/POS | 2026-03-06T10:31+09:00 | 2026-03-06T10:31+09:00 |
| jvndb-2026-000034 | django-allauth vulnerable to open redirect | 2026-03-05T12:36+09:00 | 2026-03-05T12:36+09:00 |
| jvndb-2026-000033 | EC-CUBE vulnerable to multi-factor authentication bypass | 2026-03-05T12:36+09:00 | 2026-03-05T12:36+09:00 |
| jvndb-2026-000032 | Multiple vulnerabilities in Dell UPS Multi-UPS Management Console (MUMC) | 2026-03-04T12:20+09:00 | 2026-03-04T12:20+09:00 |
| jvndb-2026-005746 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (February 2026) | 2026-03-04T10:40+09:00 | 2026-03-04T10:40+09:00 |
| jvndb-2026-005744 | Canon IJ Scan Utility registers Windows services with unquoted file paths | 2026-03-04T10:40+09:00 | 2026-03-04T10:40+09:00 |
| jvndb-2026-005259 | Out-of-bounds write vulnerability in Fujitsu BIOS Driver (fbiosdrv.sys) | 2026-03-02T11:46+09:00 | 2026-03-02T11:46+09:00 |
| jvndb-2026-000031 | Improper file access permission settings in the installers for multiple Soliton Systems products | 2026-02-27T15:41+09:00 | 2026-02-27T15:41+09:00 |
| jvndb-2026-000030 | IM-LogicDesigner module of intra-mart Accel Platform vulnerable to untrusted data deserialization | 2026-02-27T15:41+09:00 | 2026-03-03T10:06+09:00 |
| jvndb-2026-000029 | Multiple vulnerabilities in the installer of FinalCode Client | 2026-02-26T14:24+09:00 | 2026-02-26T14:24+09:00 |
| jvndb-2026-004811 | Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager | 2026-02-26T11:02+09:00 | 2026-02-26T11:02+09:00 |
| jvndb-2026-004810 | Vulnerability in Hitachi Configuration Manager and Hitachi Ops Center API Configuration Manager | 2026-02-26T11:02+09:00 | 2026-02-26T11:02+09:00 |
| jvndb-2026-000026 | Lanscope Endpoint Manager (On-Premises) vulnerable to path traversal | 2026-02-25T15:14+09:00 | 2026-02-25T15:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0975 | Multiples vulnérabilités dans les produits Cisco | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0974 | Multiples vulnérabilités dans les produits Wallix | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0973 | Multiples vulnérabilités dans les produits Nextcloud | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0972 | Vulnérabilité dans Sonicwall SonicOS | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0971 | Vulnérabilité dans Mozilla Firefox pour Android | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0970 | Multiples vulnérabilités dans Google Pixel | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0969 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Orchestrator | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0968 | Multiples vulnérabilités dans les produits Veeam | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0967 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0966 | Multiples vulnérabilités dans LibreNMS | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0965 | Vulnérabilité dans les produits Check Point | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0964 | Multiples vulnérabilités dans Traefik | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0963 | Multiples vulnérabilités dans Google Android | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0962 | Multiples vulnérabilités dans les produits Tenable | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0961 | Vulnérabilité dans Microsoft Office | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0960 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0959 | Multiples vulnérabilités dans Papercut | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0958 | Multiples vulnérabilités dans les produits IBM | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0957 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0956 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0955 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0954 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0953 | Vulnérabilité dans Microsoft Azure | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0952 | Multiples vulnérabilités dans PHP | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0951 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0950 | Vulnérabilité dans Cisco Firewall Management Center | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0949 | Multiples vulnérabilités dans les produits VMware | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0948 | Vulnérabilité dans Ruby on Rails activestorage | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0947 | Multiples vulnérabilités dans Node.js | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0946 | Multiples vulnérabilités dans GitLab | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-ale-008 | Vulnérabilité dans Microsoft SharePoint Server | 2019-05-29T00:00:00.000000 | 2019-07-23T00:00:00.000000 |
| certfr-2019-ale-006 | Vulnérabilité dans Microsoft Remote Desktop Services | 2019-05-22T00:00:00.000000 | 2019-10-25T00:00:00.000000 |
| certfr-2019-ale-007 | Vulnérabilité dans le serveur DHCP de Windows | 2019-05-15T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-005 | Vulnérabilité dans Oracle WebLogic | 2019-04-26T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-004 | Multiples vulnérabilités dans Microsoft Edge et Internet Explorer | 2019-04-01T00:00:00.000000 | 2019-04-17T00:00:00.000000 |
| certfr-2019-ale-003 | Campagnes de rançongiciels | 2019-01-31T00:00:00.000000 | 2019-06-20T00:00:00.000000 |
| certfr-2019-ale-002 | Vulnérabilités affectant l'écosystème Microsoft Exchange et Active Directory | 2019-01-30T00:00:00.000000 | 2019-03-06T00:00:00.000000 |
| certfr-2019-ale-001 | Vulnérabilité dans le gestionnaire de paquets APT | 2019-01-22T00:00:00.000000 | 2019-02-27T00:00:00.000000 |
| certfr-2018-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-ale-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-ale-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2018-ale-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2018-ale-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2017-ale-020 | Vulnérabilité dans des implémentations de TLS | 2017-12-13T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2017-ale-019 | Vulnérabilité d'usurpation d'identité dans plusieurs clients de messagerie | 2017-12-05T00:00:00.000000 | 2018-03-07T00:00:00.000000 |
| certfr-2017-ale-018 | Vulnérabilité dans Apple MacOS High Sierra | 2017-11-29T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-ale-017 | Vulnérabilité dans le serveur de messagerie Exim | 2017-11-27T00:00:00.000000 | 2018-02-01T00:00:00.000000 |
| certfr-2017-ale-016 | Campagne de rançongiciel Bad Rabbit | 2017-10-25T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-ale-014 | Vulnérabilité dans le protocole WPA/WPA2 | 2017-10-18T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-ale-015 | Vulnérabilités dans la bibliothèque Infineon RSA | 2017-10-16T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-ale-013 | Présence de code malveillant dans Piriform CCleaner | 2017-09-18T00:00:00.000000 | 2017-10-09T00:00:00.000000 |
| certfr-2017-ale-012 | Campagne de maliciels prenant l'apparence d'un rançongiciel à multiples capacités de propagation | 2017-06-27T00:00:00.000000 | 2017-08-03T00:00:00.000000 |