Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-83831 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:26.445Z | 2026-10-31T18:01:11.998Z |
| cve-2026-116775 | pageant: unbounded frame buffering on peer-controlled … |
Eugeny |
russh |
2026-10-27T20:27:30.852Z | 2026-10-27T20:27:30.852Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z | |
| cve-2026-116773 | russh's SSH client is susceptible to unbounded allocat… |
Eugeny |
russh |
2026-10-27T20:23:25.559Z | 2026-10-30T15:17:49.289Z | |
| cve-2026-116696 | russh's SSH agent server is susceptible to unbound all… |
Eugeny |
russh |
2026-10-27T20:14:32.973Z | 2026-10-27T20:14:32.973Z | |
| cve-2026-116695 | Crass: Incorrect tokenization of bad URLs enables CSS … |
rgrove |
crass |
2026-10-27T20:10:34.010Z | 2026-10-27T20:10:34.010Z | |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-116692 | MLflow: Remote code execution on unauthenticated MLflo… |
mlflow |
mlflow |
2026-10-27T20:03:49.661Z | 2026-10-27T20:03:49.661Z | |
| cve-2026-103995 | 2 (v4.0) | Lenient parsing of integers for response body and chun… |
Python Software Foundation |
CPython |
2026-10-27T19:58:52.521Z | 2026-10-28T00:33:14.944Z |
| cve-2026-116691 | MLflow CrewAI autologging records LLM provider API key… |
mlflow |
mlflow |
2026-10-27T19:56:22.083Z | 2026-10-27T19:56:22.083Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-10-27T19:43:42.029Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-10-27T19:43:01.386Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-10-27T19:36:28.906Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-10-27T19:33:11.074Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-10-27T19:12:24.255Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-10-27T18:25:50.885Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| cve-2026-118177 | N/A | Calendar discovery accepted local file and remote netw… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.083Z | 2026-10-27T18:27:49.964Z |
| cve-2026-118176 | N/A | Bypass of remote UNC path restriction in mailbox: URLs |
Mozilla |
Thunderbird |
2026-10-27T18:16:30.272Z | 2026-10-27T18:27:48.875Z |
| cve-2026-118175 | N/A | Content of other messages could be included when reply… |
Mozilla |
Thunderbird |
2026-10-27T18:16:29.537Z | 2026-10-27T18:27:47.611Z |
| cve-2026-118174 | N/A | Displaying a message could load an attacker-chosen URL… |
Mozilla |
Thunderbird |
2026-10-27T18:16:28.729Z | 2026-10-27T18:27:46.521Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000136 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:24+09:00 | 2014-12-09T15:31+09:00 |
| jvndb-2014-000135 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:18+09:00 | 2014-12-09T15:32+09:00 |
| jvndb-2014-000141 | FAST/TOOLS vulnerable to improper restriction of XML external entity references | 2014-11-28T14:54+09:00 | 2014-12-10T10:16+09:00 |
| jvndb-2014-000134 | BSD Operating Systems vulnerable to denial-of-service (DoS) | 2014-11-21T14:10+09:00 | 2014-12-16T17:08+09:00 |
| jvndb-2014-000133 | iLogScanner vulnerable to cross-site scripting | 2014-11-14T14:38+09:00 | 2014-11-18T18:22+09:00 |
| jvndb-2014-000118 | Direct Web Remoting (DWR) vulnerable to cross-site scripting | 2014-11-14T14:37+09:00 | 2014-11-25T17:51+09:00 |
| jvndb-2014-000117 | Direct Web Remoting (DWR) vulnerable to XML external entity injection | 2014-11-14T14:33+09:00 | 2014-11-25T17:50+09:00 |
| jvndb-2014-000131 | Ichitaro series vulnerable to arbitrary code execution | 2014-11-13T16:52+09:00 | 2014-11-27T17:58+09:00 |
| jvndb-2014-004833 | Vulnerability in JP1/NETM/DM and Job Management Partner 1/Software Distribution data reproduction functionality | 2014-11-11T15:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-000130 | Multiple Cybozu products vulnerable to buffer overflow | 2014-11-11T13:36+09:00 | 2014-11-25T17:52+09:00 |
| jvndb-2014-000129 | OpenAM vulnerable to denial-of-service (DoS) | 2014-11-10T14:23+09:00 | 2014-11-20T10:09+09:00 |
| jvndb-2014-000126 | QNAP QTS vulnerable to OS command injection | 2014-10-28T14:39+09:00 | 2015-12-25T13:47+09:00 |
| jvndb-2014-000125 | SumaHo for Android fails to verify SSL/TLS server certificates | 2014-10-23T13:43+09:00 | 2018-03-07T14:24+09:00 |
| jvndb-2014-000123 | GIGAPOD vulnerable to denial-of-service (DoS) | 2014-10-16T13:51+09:00 | 2024-05-13T18:10+09:00 |
| jvndb-2014-000122 | Aflax vulnerable to cross-site scripting | 2014-10-16T13:35+09:00 | 2014-10-24T18:32+09:00 |
| jvndb-2014-000121 | BirdBlog vulnerable to cross-site scripting | 2014-10-16T13:26+09:00 | 2014-10-16T13:26+09:00 |
| jvndb-2014-000120 | Huawei E5332 vulnerable to denial-of-service (DoS) | 2014-10-10T14:03+09:00 | 2014-10-21T15:11+09:00 |
| jvndb-2014-000119 | Huawei E5332 vulnerable to denial-of-service (DoS) | 2014-10-10T14:02+09:00 | 2014-10-21T15:15+09:00 |
| jvndb-2014-004316 | Safari issue in handling application cache | 2014-09-25T14:54+09:00 | 2014-09-25T14:54+09:00 |
| jvndb-2014-000116 | Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates | 2014-09-25T14:54+09:00 | 2014-09-25T14:54+09:00 |
| jvndb-2014-000112 | N-Media file uploader vulnerability in handling uploaded files | 2014-09-25T14:53+09:00 | 2014-09-29T11:39+09:00 |
| jvndb-2014-000108 | jigbrowser+ for iOS same origin policy bypass | 2014-09-25T14:52+09:00 | 2014-09-29T11:47+09:00 |
| jvndb-2014-000107 | SLFileManager for Android vulnerable to directory traversal | 2014-09-25T14:52+09:00 | 2015-07-31T16:30+09:00 |
| jvndb-2014-000111 | Yuko Yuko App for Android fails to verify SSL server certificates | 2014-09-22T13:50+09:00 | 2014-09-22T13:50+09:00 |
| jvndb-2014-000110 | Dotclear vulnerable to cross-site scripting | 2014-09-19T13:42+09:00 | 2014-09-25T17:52+09:00 |
| jvndb-2014-000109 | Bump for Android vulnerable in handling of implicit intents | 2014-09-19T13:41+09:00 | 2014-09-25T17:44+09:00 |
| jvndb-2014-000114 | FileMaker Pro fails to verify SSL server certificates | 2014-09-18T20:36+09:00 | 2014-09-24T18:47+09:00 |
| jvndb-2014-000113 | FileMaker Pro vulnerable to cross-site scripting | 2014-09-18T20:36+09:00 | 2015-05-22T11:37+09:00 |
| jvndb-2014-000106 | 365 Links series vulnerable to cross-site scripting | 2014-09-17T15:23+09:00 | 2014-09-19T13:33+09:00 |
| jvndb-2014-000105 | Help Page in multiple Adobe products vulnerable to cross-site scripting | 2014-09-12T14:00+09:00 | 2014-09-29T11:42+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0324 | Vulnérabilité dans Oracle Weblogic | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0323 | Multiples vulnérabilités dans Oracle Virtualization | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0322 | Multiples vulnérabilités dans Oracle Systems | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0321 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0320 | Multiples vulnérabilités dans Oracle MySQL | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0319 | Multiples vulnérabilités dans Oracle Java SE | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0318 | Multiples vulnérabilités dans Oracle Database Server | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0317 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0316 | Multiples vulnérabilités dans les produits Atlassian | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0315 | Multiples vulnérabilités dans Google Chrome | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0314 | Vulnérabilité dans les produits Microsoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0313 | Vulnérabilité dans SolarWinds Serv-U | 2025-04-15T00:00:00.000000 | 2025-04-15T00:00:00.000000 |
| certfr-2025-avi-0312 | Multiples vulnérabilités dans les produits Mattermost | 2025-04-15T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0311 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0310 | Vulnérabilité dans Microsoft Edge | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0309 | Multiples vulnérabilités dans les produits IBM | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0308 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0307 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0306 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0305 | Multiples vulnérabilités dans Google Pixel | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0304 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0303 | Multiples vulnérabilités dans les produits Splunk | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0302 | Multiples vulnérabilités dans Sonicwall NetExtender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0301 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0300 | Multiples vulnérabilités dans GitLab | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0299 | Multiples vulnérabilités dans les produits Bitdefender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0298 | Multiples vulnérabilités dans les produits Elastic | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0297 | Vulnérabilité dans Spring Cloud Config | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0296 | Multiples vulnérabilités dans Joomla! | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0295 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |