Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-19295 | 9.9 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:53:00.278Z | 2026-08-28T20:53:00.278Z |
| cve-2026-19294 | 6.4 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:52:38.719Z | 2026-08-28T20:52:38.719Z |
| cve-2026-19286 | 9.8 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:52:24.166Z | 2026-08-28T20:52:24.166Z |
| cve-2026-18904 | 8.2 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:52:08.372Z | 2026-08-28T20:52:08.372Z |
| cve-2026-18899 | 7.5 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:51:48.083Z | 2026-08-28T20:51:48.083Z |
| cve-2026-18891 | 8.2 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:51:27.834Z | 2026-08-28T20:51:27.834Z |
| cve-2026-18729 | 8.8 (v3.1) | Langflow is affected by multiple remote code execution… |
IBM |
Langflow OSS |
2026-08-28T20:49:43.600Z | 2026-08-28T20:49:43.600Z |
| cve-2026-18545 | 4.3 (v3.1) | Langflow is affected by multiple authentication bypass… |
IBM |
Langflow OSS |
2026-08-28T20:49:25.781Z | 2026-08-28T20:49:25.781Z |
| cve-2026-18527 | 9.9 (v3.1) | IBM Application Runtime Expert (ARE) for IBM i is vuln… |
IBM |
Administration Runtime Expert for i |
2026-08-28T20:48:33.957Z | 2026-08-28T20:48:33.957Z |
| cve-2026-17203 | 7.5 (v3.1) | IBM Application Runtime Expert (ARE) for IBM i is vuln… |
IBM |
Administration Runtime Expert for i |
2026-08-28T20:43:25.520Z | 2026-08-28T20:43:25.520Z |
| cve-2026-16821 | 7 (v3.1) | Vulnerabilities in IBM AIX and PowerVM VIOS |
IBM |
AIX |
2026-08-28T20:43:04.351Z | 2026-08-28T20:43:04.351Z |
| cve-2025-64649 | 5.9 (v3.1) | Multiple Vulnerabilities in IBM Concert Software |
IBM |
Concert |
2026-08-28T20:42:47.328Z | 2026-08-28T20:42:47.328Z |
| cve-2025-36290 | 5.9 (v3.1) | IBM Integrated Analytics System (IIAS) is affected by … |
IBM |
Integrated Analytics System |
2026-08-28T20:42:23.682Z | 2026-08-28T20:42:23.682Z |
| cve-2025-36271 | 5.9 (v3.1) | IBM Integrated Analytics System (IIAS) is affected by … |
IBM |
Integrated Analytics System |
2026-08-28T20:41:58.142Z | 2026-08-28T20:41:58.142Z |
| cve-2026-13735 | 3.7 (v3.1) | WireGuard keepalive transport-data messages accepted w… |
zephyrproject |
zephyr |
2026-08-28T20:38:50.695Z | 2026-08-28T20:38:50.695Z |
| cve-2026-13734 | 6.5 (v3.1) | Zephyr WireGuard mutates peer state before anti-replay… |
zephyrproject |
zephyr |
2026-08-28T20:38:49.617Z | 2026-08-28T20:38:49.617Z |
| cve-2026-55678 | Arc: Unauthenticated cluster node admission when `clus… |
Basekick-Labs |
arc |
2026-08-28T20:32:23.103Z | 2026-08-28T20:32:23.103Z | |
| cve-2026-75118 | 8.7 (v4.0) | http_gdpr_decrypt Pre-Authentication Stack-Based Buffe… |
TP-Link Systems Inc. |
TL-MR100 v3.20 |
2026-08-28T20:31:03.977Z | 2026-08-28T20:31:03.977Z |
| cve-2026-81533 | 6 (v4.0) 7.1 (v3.1) | MongoDB BI Connector ODBC Driver Memory-Safety Issue W… |
MongoDB |
BI Connector ODBC Driver |
2026-08-28T20:28:02.666Z | 2026-08-28T20:28:02.666Z |
| cve-2026-55763 | Klever-Go: Percentage-transfer royalty skips the sourc… |
klever-io |
klever-go |
2026-08-28T20:26:43.720Z | 2026-08-28T20:26:43.720Z | |
| cve-2026-81532 | 8.7 (v4.0) 8.8 (v3.1) | BI Connector ODBC Driver Improper Bounds Checking on C… |
MongoDB |
BI Connector ODBC Driver |
2026-08-28T20:26:05.939Z | 2026-08-28T20:26:05.939Z |
| cve-2026-55891 | PrivateBin: Reflected JSON injection in backend respon… |
PrivateBin |
PrivateBin |
2026-08-28T20:23:50.477Z | 2026-08-28T20:23:50.477Z | |
| cve-2026-81520 | 8.7 (v4.0) 7.5 (v3.1) | MongoDB Connector for BI Unbounded Authentication Nego… |
MongoDB |
BI Connector |
2026-08-28T20:22:42.151Z | 2026-08-28T20:22:42.151Z |
| cve-2026-55696 | PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerab… |
PrivateBin |
PrivateBin |
2026-08-28T20:20:53.934Z | 2026-08-28T20:20:53.934Z | |
| cve-2026-76651 | 5.3 (v4.0) | Pre-Authentication Multipart Boundary Buffer Overflow … |
TP-Link System Inc. |
TL-WR841N v14 |
2026-08-28T20:19:09.293Z | 2026-08-28T20:19:09.293Z |
| cve-2026-76650 | 5.3 (v4.0) | Pre-Authentication NULL Pointer Dereference in UPnP SO… |
TP-Link System Inc. |
TL-WR841N v14 |
2026-08-28T20:19:03.475Z | 2026-08-28T20:19:03.475Z |
| cve-2026-76649 | 5.3 (v4.0) | Pre-Authentication NULL Pointer Dereference in UPnP SO… |
TP-Link System Inc. |
TL-WR841N v14 |
2026-08-28T20:18:57.764Z | 2026-08-28T20:18:57.764Z |
| cve-2026-81518 | 8.7 (v4.0) 7.5 (v3.1) | BI Connector Optional Client Certificate Verification … |
MongoDB |
BI Connector |
2026-08-28T20:18:14.870Z | 2026-08-28T20:18:14.870Z |
| cve-2026-81517 | 8.7 (v4.0) 7.5 (v3.1) | MongoDB Connector for BI Improper Error Handling of Lo… |
MongoDB |
BI Connector |
2026-08-28T20:14:06.438Z | 2026-08-28T20:14:06.438Z |
| cve-2026-82333 | 7.5 (v3.1) | multer vulnerable to Denial of Service via oversized a… |
multer |
multer |
2026-08-28T20:12:21.355Z | 2026-08-28T20:12:21.355Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-004359 | Security information for Hitachi Disk Array Systems | 2026-02-20T18:35+09:00 | 2026-02-20T18:35+09:00 |
| jvndb-2026-000027 | WordPress Plugin "Survey Maker" vulnerable to cross-site scripting | 2026-02-20T12:32+09:00 | 2026-02-20T12:32+09:00 |
| jvndb-2026-000028 | Installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool may insecurely load Dynamic Link Libraries | 2026-02-20T12:31+09:00 | 2026-02-20T12:31+09:00 |
| jvndb-2026-003912 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003911 | Vulnerability in Cosminexus HTTP Server | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003910 | Multiple Vulnerabilities in Cosminexus HTTP Server | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003909 | Multiple Vulnerabilities in Hitachi Command Suite products | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003908 | Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003907 | Multiple Vulnerabilities in JP1 | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003906 | Multiple Vulnerabilities in Cosminexus | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-003905 | Multiple Vulnerabilities in Cosminexus HTTP Server and Hitachi Web Server | 2026-02-17T20:46+09:00 | 2026-02-17T20:46+09:00 |
| jvndb-2026-000025 | Joomla! CMS vulnerable to cross-site scripting | 2026-02-17T12:46+09:00 | 2026-02-17T12:46+09:00 |
| jvndb-2026-000023 | FileZen vulnerable to OS command injection | 2026-02-13T16:51+09:00 | 2026-02-13T17:08+09:00 |
| jvndb-2026-000024 | Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries | 2026-02-12T13:32+09:00 | 2026-02-12T13:32+09:00 |
| jvndb-2026-000022 | Oki Electric Industry products and OEM products register Windows services with unquoted file paths | 2026-02-09T15:21+09:00 | 2026-02-09T15:21+09:00 |
| jvndb-2026-000021 | web2py vulnerable to open redirect | 2026-02-05T15:01+09:00 | 2026-02-05T15:01+09:00 |
| jvndb-2026-000020 | Multiple vulnerabilities in Movable Type | 2026-02-04T16:15+09:00 | 2026-02-04T16:15+09:00 |
| jvndb-2026-000019 | Multiple vulnerabilities in ELECOM wireless LAN products | 2026-02-03T14:57+09:00 | 2026-05-14T12:24+09:00 |
| jvndb-2026-000017 | Improper file access permission settings in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows | 2026-02-03T14:57+09:00 | 2026-02-05T14:41+09:00 |
| jvndb-2026-000016 | Installer for Roland Cloud Manager may insecurely load Dynamic Link Libraries | 2026-02-03T14:57+09:00 | 2026-02-04T12:39+09:00 |
| jvndb-2026-000015 | Sonatype Nexus Repository vulnerable to server-side request forgery | 2026-02-02T15:18+09:00 | 2026-02-02T15:18+09:00 |
| jvndb-2026-000014 | OS command injection in raspap-webgui | 2026-02-02T15:18+09:00 | 2026-02-02T15:18+09:00 |
| jvndb-2026-000013 | Multiple Microsoft Office products vulnerable to untrusted search path | 2026-02-02T15:18+09:00 | 2026-02-02T15:18+09:00 |
| jvndb-2026-000012 | Multiple vulnerabilities in Cybozu Garoon | 2026-02-02T15:18+09:00 | 2026-02-02T15:18+09:00 |
| jvndb-2026-000018 | Undocumented "TelnetEnable" functionality of End of Service NETGEAR products | 2026-01-30T14:23+09:00 | 2026-01-30T14:23+09:00 |
| jvndb-2026-002119 | Multiple vulnerabilities in BROTHER MFPs (multifunction printers) | 2026-01-30T11:26+09:00 | 2026-01-30T11:26+09:00 |
| jvndb-2026-002030 | Multiple Vulnerabilities in Cosminexus | 2026-01-29T10:32+09:00 | 2026-01-29T10:32+09:00 |
| jvndb-2026-001972 | Archer MR600 vulnerable to OS command injection | 2026-01-28T10:41+09:00 | 2026-01-28T10:41+09:00 |
| jvndb-2026-000011 | beat-access for Windows may insecurely load Dynamic Link Libraries | 2026-01-27T18:22+09:00 | 2026-01-27T18:22+09:00 |
| jvndb-2026-001732 | Multiple Brother software installers may insecurely load Dynamic Link Libraries | 2026-01-26T16:04+09:00 | 2026-01-26T16:04+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0945 | Multiples vulnérabilités dans Google Chrome | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0944 | Vulnérabilité dans CPython | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0943 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0942 | Multiples vulnérabilités dans Xen | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0941 | Multiples vulnérabilités dans Citrix XenServer | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0940 | Vulnérabilité dans Apache Tomcat | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0939 | Multiples vulnérabilités dans Samba | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0938 | Multiples vulnérabilités dans les produits Apple | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0937 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0936 | Vulnérabilité dans Traefik | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0935 | Multiples vulnérabilités dans GLPI | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0934 | Multiples vulnérabilités dans les produits Atlassian | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0933 | Multiples vulnérabilités dans les produits IBM | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0932 | Multiples vulnérabilités dans les produits ESET | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0931 | Vulnérabilité dans les produits Moxa | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0930 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0929 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0928 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0927 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0926 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0925 | Multiples vulnérabilités dans Google Chrome | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0924 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0923 | Vulnérabilité dans NetApp ONTAP 9 | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0922 | Multiples vulnérabilités dans MongoDB | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0921 | Vulnérabilité dans Moodle | 2026-07-23T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0920 | Multiples vulnérabilités dans Oracle Weblogic | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0919 | Multiples vulnérabilités dans Oracle Virtualization | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0918 | Multiples vulnérabilités dans Oracle Systems | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0917 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0916 | Multiples vulnérabilités dans Oracle MySQL | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-ale-011 | Campagne de messages électroniques non sollicités de type Jaff | 2017-05-14T00:00:00.000000 | 2017-06-27T00:00:00.000000 |
| certfr-2017-ale-010 | Propagation d'un rançongiciel exploitant les vulnérabilités MS17-010 | 2017-05-12T00:00:00.000000 | 2017-06-27T00:00:00.000000 |
| certfr-2017-ale-009 | Vulnérabilité dans Microsoft Malware Protection Engine | 2017-05-09T00:00:00.000000 | 2017-05-15T00:00:00.000000 |
| certfr-2017-ale-008 | Multiples vulnérabilités dans Microsoft Windows XP et Windows Server 2003 | 2017-04-14T00:00:00.000000 | 2017-09-06T00:00:00.000000 |
| certfr-2017-ale-007 | Vulnérabilité dans Microsoft Office | 2017-04-10T00:00:00.000000 | 2017-04-12T00:00:00.000000 |
| certfr-2017-ale-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |
| certfr-2017-ale-005 | Vulnérabilité dans les commutateurs Cisco | 2017-03-20T00:00:00.000000 | 2017-05-10T00:00:00.000000 |
| certfr-2017-ale-004 | Vulnérabilité dans Apache Struts | 2017-03-10T00:00:00.000000 | 2017-05-10T00:00:00.000000 |
| certfr-2017-ale-003 | Vulnérabilité dans les navigateurs Microsoft | 2017-02-27T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-002 | Vulnérabilité dans Microsoft Windows | 2017-02-20T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-ale-001 | Vulnérabilité dans Cisco WebEx | 2017-01-25T00:00:00.000000 | 2017-01-31T00:00:00.000000 |
| certfr-2016-ale-010 | Vulnérabilité dans les routeurs Netgear | 2016-12-13T00:00:00.000000 | 2016-12-26T00:00:00.000000 |
| certfr-2016-ale-009 | Campagne d'attaque contre des routeurs DSL | 2016-12-01T00:00:00.000000 | 2017-01-26T00:00:00.000000 |
| certfr-2016-ale-008 | Vulnérabilité dans Microsoft Windows | 2016-11-02T00:00:00.000000 | 2016-11-09T00:00:00.000000 |
| certfr-2016-ale-007 | Vulnérabilité dans Cisco IOS, IOS XE et IOS XR | 2016-09-19T00:00:00.000000 | 2016-09-19T00:00:00.000000 |
| certfr-2016-ale-006 | Campagne de messages électroniques non sollicités de type Zepto/Odin | 2016-09-05T00:00:00.000000 | 2016-11-17T00:00:00.000000 |
| certfr-2016-ale-005 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-08-18T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-ale-004 | Vulnérabilité dans Adobe Flash Player | 2016-06-15T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-ale-003 | Vulnérabilité dans Adobe Flash Player | 2016-05-11T00:00:00.000000 | 2016-05-12T00:00:00.000000 |
| certfr-2016-ale-002 | Vulnérabilité dans Adobe Flash Player | 2016-04-06T00:00:00.000000 | 2016-04-08T00:00:00.000000 |
| certfr-2016-ale-001 | Campagne de messages électroniques non sollicités de type Locky | 2016-02-19T00:00:00.000000 | 2016-04-07T00:00:00.000000 |
| certfr-2015-ale-015 | Campagne de messages électroniques non sollicités de type TeslaCrypt | 2015-12-21T00:00:00.000000 | 2016-03-10T00:00:00.000000 |
| certfr-2015-ale-014 | Vulnérabilité dans Juniper ScreenOS | 2015-12-18T00:00:00.000000 | 2016-04-11T00:00:00.000000 |
| certfr-2015-ale-013 | Vulnérabilité dans Joomla! | 2015-12-14T00:00:00.000000 | 2016-08-01T00:00:00.000000 |
| certfr-2015-ale-012 | Campagne de messages électroniques non sollicités de type Dridex | 2015-10-23T00:00:00.000000 | 2015-11-26T00:00:00.000000 |
| certfr-2015-ale-011 | Vulnérabilité dans Adobe Flash Player | 2015-10-14T00:00:00.000000 | 2015-10-19T00:00:00.000000 |
| certfr-2015-ale-010 | Multiples vulnérabilités dans Google Android | 2015-07-28T00:00:00.000000 | 2015-10-06T00:00:00.000000 |
| certfr-2015-ale-009 | Vulnérabilité dans Apple Mac OS X | 2015-07-24T00:00:00.000000 | 2015-12-22T00:00:00.000000 |
| certfr-2015-ale-008 | Vulnérabilité dans le pilote de gestion des polices de caractères de Microsoft Windows | 2015-07-20T00:00:00.000000 | 2015-07-30T00:00:00.000000 |
| certfr-2015-ale-007 | Vulnérabilité dans Oracle Java SE | 2015-07-13T00:00:00.000000 | 2015-07-20T00:00:00.000000 |