Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118170 | N/A | CVE-2026-118170 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:02:55.025Z | 2026-10-27T18:02:55.025Z |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-116682 | FileBrowser Quantum: Symlink following escapes user sc… |
gtsteffaniak |
filebrowser |
2026-10-27T17:48:04.364Z | 2026-10-27T17:48:04.364Z | |
| cve-2026-117526 | reduxjs redux-devtools Remotedev Server evalAction cod… |
reduxjs |
redux-devtools |
2026-10-27T17:45:15.061Z | 2026-10-28T11:19:16.821Z | |
| cve-2026-116680 | Homebox generic notifier SSRF via HTTP redirect after … |
sysadminsmedia |
homebox |
2026-10-27T17:43:52.502Z | 2026-10-27T17:43:52.502Z | |
| cve-2026-88812 | 7.8 (v3.1) | X.Org Server XKB SetGeometry TextDoodad Double Free |
X.org |
xorg-x11-server |
2026-10-27T17:43:18.583Z | 2026-10-27T17:43:18.583Z |
| cve-2026-102816 | 5.3 (v4.0) | Unauthenticated Wireless Regulatory Region Configurati… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:41:21.636Z | 2026-10-27T17:41:21.636Z |
| cve-2026-102815 | 6.9 (v4.0) | Command Injection in tmpServer Allows Local Privilege … |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:59.514Z | 2026-10-29T10:45:45.539Z |
| cve-2026-102814 | 8.7 (v4.0) | Improper Authentication in TP-Link TDDP v2 Allows Root… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:43.627Z | 2026-10-29T10:45:45.682Z |
| cve-2026-102813 | 6.1 (v4.0) | Administrator Password Reset Through the Verification-… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:31.857Z | 2026-10-27T17:40:31.857Z |
| cve-2026-102812 | 6.9 (v4.0) | Hardcoded AES-128 Key and Fixed IV in Configuration Ba… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:13.729Z | 2026-10-27T17:40:13.729Z |
| cve-2026-118132 | N/A | CVE-2026-118132 |
NextChat |
NextChat |
2026-10-27T17:38:13.552Z | 2026-10-27T17:38:13.552Z |
| cve-2026-108311 | Tanium addressed an insufficient logging vulnerability… |
Tanium |
Tanium Server |
2026-10-27T17:35:43.548Z | 2026-10-27T17:35:43.548Z | |
| cve-2026-108303 | Tanium addressed an unauthorized code execution vulner… |
Tanium |
Certificate Manager |
2026-10-27T17:35:43.298Z | 2026-10-27T17:35:43.298Z | |
| cve-2026-108316 | Tanium addressed an information disclosure vulnerabili… |
Tanium |
Tanium Server |
2026-10-27T17:35:43.092Z | 2026-10-27T17:35:43.092Z | |
| cve-2026-116656 | Tanium addressed an uncontrolled resource consumption … |
Tanium |
Enforce |
2026-10-27T17:35:42.916Z | 2026-10-27T17:35:42.916Z | |
| cve-2026-108325 | Tanium addressed an insertion of sensitive information… |
Tanium |
Reputation |
2026-10-27T17:35:42.735Z | 2026-10-27T17:35:42.735Z | |
| cve-2026-116659 | Tanium addressed an uncontrolled resource consumption … |
Tanium |
Enforce |
2026-10-27T17:35:42.543Z | 2026-10-27T17:35:42.543Z | |
| cve-2026-108302 | Tanium addressed an improper access controls vulnerabi… |
Tanium |
Comply |
2026-10-27T17:35:42.350Z | 2026-10-27T17:35:42.350Z | |
| cve-2026-108306 | Tanium addressed a local privilege escalation vulnerab… |
Tanium |
Endpoint Configuration Toolset Solution |
2026-10-27T17:35:42.154Z | 2026-10-27T17:35:42.154Z | |
| cve-2026-108329 | Tanium addressed an unauthorized code execution vulner… |
Tanium |
Threat Response |
2026-10-27T17:35:41.970Z | 2026-10-27T17:35:41.970Z | |
| cve-2026-108332 | Tanium addressed an improper link resolution before fi… |
Tanium |
Endpoint Configuration Toolset Solution |
2026-10-27T17:35:41.790Z | 2026-10-27T17:35:41.790Z | |
| cve-2026-108301 | Tanium addressed an improper access controls vulnerabi… |
Tanium |
Comply |
2026-10-27T17:35:24.243Z | 2026-10-27T17:35:24.243Z | |
| cve-2026-108304 | Tanium addressed a local privilege escalation vulnerab… |
Tanium |
Endpoint Configuration Toolset Solution |
2026-10-27T17:35:24.064Z | 2026-10-27T17:35:24.064Z | |
| cve-2026-87086 | Tanium addressed a denial of service vulnerability in … |
Tanium |
Provision |
2026-10-27T17:35:23.877Z | 2026-10-27T17:35:23.877Z | |
| cve-2026-108309 | Tanium addressed an uncontrolled resource consumption … |
Tanium |
Endpoint Configuration Toolset Solution |
2026-10-27T17:35:23.693Z | 2026-10-27T17:35:23.693Z | |
| cve-2026-116658 | Tanium addressed a denial of service vulnerability in … |
Tanium |
Enforce |
2026-10-27T17:35:23.506Z | 2026-10-27T17:35:23.506Z | |
| cve-2026-108313 | Tanium addressed an incorrect privilege assignment vul… |
Tanium |
Tanium Server |
2026-10-27T17:35:06.612Z | 2026-10-27T17:35:06.612Z | |
| cve-2026-116649 | Tanium addressed an improper output sanitization vulne… |
Tanium |
Enforce |
2026-10-27T17:35:06.420Z | 2026-10-27T17:35:06.420Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000073 | Cybozu Garoon CGI vulnerable to remote command execution | 2014-07-15T14:44+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000072 | Seasar S2Struts vulnerable to ClassLoader manipulation | 2014-07-15T14:44+09:00 | 2014-07-15T14:44+09:00 |
| jvndb-2014-000071 | Becky! Internet Mail vulnerable to buffer overflow | 2014-07-08T14:53+09:00 | 2014-07-10T17:05+09:00 |
| jvndb-2014-000066 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:20+09:00 | 2014-07-07T18:34+09:00 |
| jvndb-2014-000065 | SX-2000WG vulnerable to denial-of-service (DoS) | 2014-07-02T15:16+09:00 | 2014-07-07T18:28+09:00 |
| jvndb-2014-000069 | RockDisk vulnerable to cross-site scripting | 2014-07-02T14:40+09:00 | 2017-05-17T17:07+09:00 |
| jvndb-2014-000064 | Web Kyukincho vulnerable to cross-site request forgery | 2014-06-25T15:01+09:00 | 2014-07-01T16:07+09:00 |
| jvndb-2014-000063 | Web Kyukincho vulnerable to cross-site scripting | 2014-06-25T14:53+09:00 | 2014-07-01T16:08+09:00 |
| jvndb-2014-000062 | Login rebuilder vulnerable to cross-site request forgery | 2014-06-24T14:22+09:00 | 2014-06-24T14:22+09:00 |
| jvndb-2014-000061 | Sophos Disk Encryption vulnerable to authentication bypass | 2014-06-24T14:21+09:00 | 2014-06-26T17:46+09:00 |
| jvndb-2014-000060 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T11:00+09:00 |
| jvndb-2014-000059 | Webmin vulnerable to cross-site scripting | 2014-06-20T13:58+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000058 | Usermin vulnerable to cross-site scripting | 2014-06-20T13:56+09:00 | 2014-07-23T10:59+09:00 |
| jvndb-2014-000057 | Usermin vulnerable to OS command injection | 2014-06-20T13:56+09:00 | 2014-06-24T13:44+09:00 |
| jvndb-2014-000050 | JR East Japan App for Android. contains an issue where it fails to verify SSL server certificates | 2014-06-18T14:57+09:00 | 2014-06-23T11:06+09:00 |
| jvndb-2014-000056 | TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation | 2014-06-17T15:01+09:00 | 2015-01-22T15:50+09:00 |
| jvndb-2014-000049 | 050 plus for Android information management vulnerability | 2014-06-17T14:50+09:00 | 2014-06-23T11:03+09:00 |
| jvndb-2014-000055 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-06-13T12:44+09:00 | 2014-06-17T16:11+09:00 |
| jvndb-2014-000054 | Spring Framework vulnerable to directory traversal | 2014-06-13T12:40+09:00 | 2016-06-23T13:45+09:00 |
| jvndb-2014-002802 | Xml eXternal Entity Vulnerability in XML link function of Hitachi COBOL2002 | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002800 | Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-000051 | C-BOARD Moyuku vulnerable to cross-site scripting | 2014-06-11T14:22+09:00 | 2014-06-17T16:22+09:00 |
| jvndb-2014-000053 | JustSystems Online Update Program bundled with JustSystems products vulnerable to arbitrary code execution | 2014-06-11T12:22+09:00 | 2014-06-17T16:25+09:00 |
| jvndb-2014-000048 | OpenSSL improper handling of Change Cipher Spec message | 2014-06-06T13:48+09:00 | 2016-12-27T11:49+09:00 |
| jvndb-2014-000046 | CN8000 vulnerable to denial-of-service (DoS) | 2014-06-04T14:37+09:00 | 2014-06-06T18:35+09:00 |
| jvndb-2014-000047 | SOY CMS vulnerable to cross-site scripting | 2014-06-04T14:32+09:00 | 2014-06-06T18:34+09:00 |
| jvndb-2014-000044 | intra-mart vulnerable to open redirect | 2014-05-08T12:46+09:00 | 2014-05-12T17:45+09:00 |
| jvndb-2014-000042 | Cybozu Garoon Phone Messages vulnerable to denial-of-service (DoS) | 2014-04-30T15:14+09:00 | 2014-05-14T10:50+09:00 |
| jvndb-2014-000043 | Cybozu Garoon API access restriction bypass vulnerability | 2014-04-30T15:08+09:00 | 2014-05-08T18:06+09:00 |
| jvndb-2014-000045 | Apache Struts vulnerable to ClassLoader manipulation | 2014-04-25T15:37+09:00 | 2015-05-08T18:01+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0264 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0263 | Multiples vulnérabilités dans HPE Aruba Networking Virtual Intranet Access | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0262 | Multiples vulnérabilités dans les produits Kaspersky | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0261 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0260 | Multiples vulnérabilités dans Zabbix | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0259 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-01T00:00:00.000000 | 2025-04-01T00:00:00.000000 |
| certfr-2025-avi-0258 | Multiples vulnérabilités dans les produits Apple | 2025-04-01T00:00:00.000000 | 2025-04-30T00:00:00.000000 |
| certfr-2025-avi-0257 | Vulnérabilité dans Synology Mail Server | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0256 | Multiples vulnérabilités dans Broadcom VMware Tanzu Greenplum | 2025-03-31T00:00:00.000000 | 2025-03-31T00:00:00.000000 |
| certfr-2025-avi-0255 | Multiples vulnérabilités dans les produits IBM | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0254 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0253 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0252 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0251 | Vulnérabilité dans Mozilla Firefox | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0250 | Multiples vulnérabilités dans StormShield Network Security | 2025-03-28T00:00:00.000000 | 2025-03-28T00:00:00.000000 |
| certfr-2025-avi-0249 | Vulnérabilité dans StormShield Network Security | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0248 | Multiples vulnérabilités dans GitLab | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0247 | Vulnérabilité dans Microsoft Edge | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0246 | Vulnérabilité dans Mitel MiContact Center Business | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0245 | Multiples vulnérabilités dans les produits Splunk | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0244 | Vulnérabilité dans Exim | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0243 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0242 | Multiples vulnérabilités dans Moodle | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0241 | Vulnérabilité dans Google Chrome | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0240 | Vulnérabilité dans les produits VMware | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0239 | Multiples vulnérabilités dans Microsoft Azure Kubernetes Service | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0238 | Multiples vulnérabilités dans Laravel | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0237 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0236 | Vulnérabilité dans Qnap NAKIVO Backup & Replication | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0235 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |