Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81518 | 8.7 (v4.0) 7.5 (v3.1) | BI Connector Optional Client Certificate Verification … |
MongoDB |
BI Connector |
2026-08-28T20:18:14.870Z | 2026-08-28T20:18:14.870Z |
| cve-2026-81517 | 8.7 (v4.0) 7.5 (v3.1) | MongoDB Connector for BI Improper Error Handling of Lo… |
MongoDB |
BI Connector |
2026-08-28T20:14:06.438Z | 2026-08-28T20:14:06.438Z |
| cve-2026-82333 | 7.5 (v3.1) | multer vulnerable to Denial of Service via oversized a… |
multer |
multer |
2026-08-28T20:12:21.355Z | 2026-08-28T20:12:21.355Z |
| cve-2026-81490 | 8.3 (v4.0) 7.7 (v3.1) | MongoDB Connector for BI Improper Error Handling Durin… |
MongoDB |
BI Connector |
2026-08-28T20:10:38.565Z | 2026-08-28T20:10:38.565Z |
| cve-2026-77078 | 7.5 (v3.1) | multer vulnerable to Denial of Service via crafted mul… |
multer |
multer |
2026-08-28T20:03:23.114Z | 2026-08-28T20:03:23.114Z |
| cve-2026-77063 | 3.7 (v3.1) | multer vulnerable to file size limit bypass via async … |
multer |
multer |
2026-08-28T19:54:58.473Z | 2026-08-28T19:54:58.473Z |
| cve-2026-77037 | 7.5 (v3.1) | multer vulnerable to Denial of Service via file descri… |
multer |
multer |
2026-08-28T19:44:23.501Z | 2026-08-28T19:44:23.501Z |
| cve-2026-77586 | 8.5 (v4.0) 8 (v3.1) | MongoDB Connector for BI Unescaped Object Names in Gen… |
MongoDB |
BI Connector |
2026-08-28T19:26:11.148Z | 2026-08-28T19:26:11.148Z |
| cve-2026-77184 | 5.6 (v4.0) 5.2 (v3.1) | MongoDB Connector for BI Incomplete Escaping of Stored… |
MongoDB |
BI Connector |
2026-08-28T19:25:23.494Z | 2026-08-28T19:25:23.494Z |
| cve-2026-76798 | 6.9 (v4.0) 6.3 (v3.1) | MongoSQL Transition Readiness Tool Improper Output Enc… |
MongoDB |
BI Connector Transition Readiness Report |
2026-08-28T19:24:46.039Z | 2026-08-28T19:24:46.039Z |
| cve-2026-76797 | 5.8 (v4.0) 6.3 (v3.1) | MongoSQL Transition Readiness Tool Improper Neutraliza… |
MongoDB |
BI Connector Transition Readiness Report |
2026-08-28T19:24:07.640Z | 2026-08-28T19:24:07.640Z |
| cve-2026-76794 | 4.8 (v4.0) 4.6 (v3.1) | MongoDB BI Connector Transition Readiness Report Impro… |
MongoDB |
BI Connector Transition Readiness Report |
2026-08-28T19:23:07.804Z | 2026-08-28T19:23:07.804Z |
| cve-2026-55484 | ALOS HTTP: Unauthenticated remote DoS: malformed path … |
guno1928 |
alos-http |
2026-08-28T19:19:19.749Z | 2026-08-28T20:00:26.302Z | |
| cve-2026-55634 | Pimcore: Remote Code Execution via DataObject Class-De… |
pimcore |
pimcore |
2026-08-28T19:16:20.078Z | 2026-08-28T20:06:15.024Z | |
| cve-2026-55220 | Pimcore Hotspotimage getDataFromResource() unrestricte… |
pimcore |
pimcore |
2026-08-28T19:12:43.739Z | 2026-08-28T19:12:43.739Z | |
| cve-2026-55215 | MariaDB Connector/Node.js: Connector leaks the clearte… |
mariadb-corporation |
mariadb-connector-nodejs |
2026-08-28T19:02:49.413Z | 2026-08-28T19:02:49.413Z | |
| cve-2026-55247 | plone.app.event: Denial of service via iCalendar import |
plone |
plone.app.event |
2026-08-28T18:59:01.212Z | 2026-08-28T18:59:01.212Z | |
| cve-2026-82021 | 9 (v4.0) 8.3 (v3.1) | Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain … |
NousResearch |
hermes-agent |
2026-08-28T18:50:38.180Z | 2026-08-29T11:48:19.100Z |
| cve-2026-82020 | 7.6 (v4.0) 6.8 (v3.1) | Hermes Agent 0.16.0 < 0.17.0 Credential Store Overwrit… |
NousResearch |
hermes-agent |
2026-08-28T18:47:06.377Z | 2026-08-29T11:48:18.426Z |
| cve-2026-55520 | Protego: Exponential backtracking ReDoS in robots.txt … |
scrapy |
protego |
2026-08-28T18:42:38.334Z | 2026-08-28T18:42:38.334Z | |
| cve-2026-55248 | plone.app.portlets: Denial of service via RSS feed portlet |
plone |
plone.app.portlets |
2026-08-28T18:40:50.582Z | 2026-08-28T20:35:21.851Z | |
| cve-2026-55673 | PowSyBl: Command Injection in LocalCommandExecutor-s |
powsybl |
powsybl-core |
2026-08-28T18:36:53.110Z | 2026-08-28T18:36:53.110Z | |
| cve-2026-55584 | phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoo… |
phpsysinfo |
phpsysinfo |
2026-08-28T18:29:36.723Z | 2026-08-28T18:29:36.723Z | |
| cve-2026-82329 | 9.8 (v3.1) | Potential authentication bypass leading to administrat… |
jfrog |
artifactory |
2026-08-28T18:27:43.632Z | 2026-08-28T18:27:43.632Z |
| cve-2026-55245 | Bifrost: SSRF deny-list incomplete: isPublicIP permits… |
maximhq |
bifrost |
2026-08-28T18:24:16.723Z | 2026-08-28T19:54:10.966Z | |
| cve-2026-55378 | JS Recon: Command injection in PR Branch Checker workf… |
shriyanss |
js-recon |
2026-08-28T18:15:41.125Z | 2026-08-28T18:15:41.125Z | |
| cve-2026-55485 | Piccolo Admin: Privilege escalation - admin to superus… |
piccolo-orm |
piccolo_admin |
2026-08-28T18:13:23.605Z | 2026-08-28T18:13:23.605Z | |
| cve-2026-55509 | WsgiDAV: Blind SQL injection in the MySQL provider |
mar10 |
wsgidav |
2026-08-28T18:11:54.402Z | 2026-08-28T20:34:38.686Z | |
| cve-2026-55425 | Graylog: System Catalog titles endpoint can be used to… |
Graylog2 |
graylog2-server |
2026-08-28T18:08:22.113Z | 2026-08-28T18:08:22.113Z | |
| cve-2026-81849 | 8.7 (v4.0) 8.8 (v3.1) | Path traversal in the aws:downloadContent plugin in am… |
amazon |
amazon-ssm-agent |
2026-08-28T18:02:33.468Z | 2026-08-28T18:02:33.468Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-000010 | Command injection vulnerability in ASUS routers | 2026-01-23T15:22+09:00 | 2026-01-23T15:22+09:00 |
| jvndb-2026-001663 | "iRMC S5/S6" implemented in PRIMERGY vulnerable to incorrect authorization | 2026-01-23T11:29+09:00 | 2026-01-23T11:29+09:00 |
| jvndb-2026-001662 | Multiple vulnerabilities in Trend Micro Apex Central (January 2026) | 2026-01-23T11:29+09:00 | 2026-01-23T11:29+09:00 |
| jvndb-2026-000009 | Installer of Fujitsu ServerView Agents for Windows may insecurely load Dynamic Link Libraries | 2026-01-21T15:17+09:00 | 2026-01-21T15:17+09:00 |
| jvndb-2026-000008 | Ruijie Networks AP180 series vulnerable to OS command injection | 2026-01-21T15:17+09:00 | 2026-01-21T15:17+09:00 |
| jvndb-2026-001582 | Security information for Hitachi Disk Array Systems | 2026-01-21T12:11+09:00 | 2026-01-21T12:11+09:00 |
| jvndb-2026-001578 | ETERNUS SF vulnerable to insertion of sensitive information into maintenance data | 2026-01-20T20:00+09:00 | 2026-01-20T20:00+09:00 |
| jvndb-2026-001380 | Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers | 2026-01-19T10:08+09:00 | 2026-01-19T10:08+09:00 |
| jvndb-2026-000007 | Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series | 2026-01-16T15:06+09:00 | 2026-01-16T15:06+09:00 |
| jvndb-2026-000006 | Chainlit vulnerable to improper access restriction | 2026-01-14T17:03+09:00 | 2026-01-14T17:03+09:00 |
| jvndb-2026-000005 | Multiple vulnerabilities in EATON UPS Companion | 2026-01-13T19:01+09:00 | 2026-01-13T19:01+09:00 |
| jvndb-2026-000003 | RICOH Streamline NX vulnerable to improper authorization | 2026-01-09T18:17+09:00 | 2026-01-09T18:17+09:00 |
| jvndb-2026-000004 | The installers for multiple PIONEER products may insecurely load Dynamic Link Libraries | 2026-01-08T13:47+09:00 | 2026-01-08T13:47+09:00 |
| jvndb-2026-000001 | Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2 | 2026-01-07T14:19+09:00 | 2026-01-07T14:19+09:00 |
| jvndb-2026-000002 | Multiple vulnerabilities in multiple NEC branded projectors manufactured by Sharp Display Solutions, Ltd. | 2026-01-07T14:10+09:00 | 2026-01-14T16:54+09:00 |
| jvndb-2026-001001 | Authentication bypass vulnerability in OpenBlocks series | 2026-01-07T10:46+09:00 | 2026-01-07T10:46+09:00 |
| jvndb-2025-022878 | Media Player MP-01 vulnerable to Missing Authentication for Critical Function | 2025-12-24T11:10+09:00 | 2026-01-15T11:10+09:00 |
| jvndb-2025-022400 | Ruijie Networks AP180 Series vulnerable to OS command injection | 2025-12-19T12:33+09:00 | 2025-12-19T12:33+09:00 |
| jvndb-2025-000118 | GROWI vulnerable to cross-site request forgery | 2025-12-17T13:04+09:00 | 2025-12-17T13:04+09:00 |
| jvndb-2025-022062 | Multiple vulnerabilities in CHOCO TEI WATCHER mini | 2025-12-17T11:28+09:00 | 2025-12-17T11:28+09:00 |
| jvndb-2025-000117 | SEIKO EPSON printer Web Config vulnerable to stack-based buffer overflow | 2025-12-16T15:31+09:00 | 2025-12-23T11:57+09:00 |
| jvndb-2025-000115 | QND vulnerable to privilege escalation | 2025-12-11T14:33+09:00 | 2025-12-11T14:33+09:00 |
| jvndb-2025-021305 | Android App "Brother iPrint&Scan" improper use of an external cache directory | 2025-12-09T17:25+09:00 | 2025-12-09T17:25+09:00 |
| jvndb-2025-000114 | ELECOM Clone for Windows registers a Windows service with an unquoted file path | 2025-12-09T17:16+09:00 | 2025-12-09T17:16+09:00 |
| jvndb-2025-000113 | Multiple vulnerabilities in GroupSession | 2025-12-08T17:48+09:00 | 2025-12-11T11:30+09:00 |
| jvndb-2025-000116 | GS Yuasa FULLBACK Manager Pro registers Windows services with unquoted file paths | 2025-12-08T14:06+09:00 | 2025-12-08T14:06+09:00 |
| jvndb-2025-000094 | Multiple vulnerabilities in ABB Terra AC Wallbox | 2025-12-05T14:12+09:00 | 2025-12-05T14:12+09:00 |
| jvndb-2025-000112 | Installer of INZONE Hub may insecurely load Dynamic Link Libraries | 2025-11-28T13:36+09:00 | 2025-11-28T13:36+09:00 |
| jvndb-2025-000111 | SwitchBot Smart Video Doorbell vulnerable to active debug code | 2025-11-26T14:35+09:00 | 2025-11-26T14:35+09:00 |
| jvndb-2025-000110 | Multiple vulnerabilities in Security Point (Windows) of MaLion | 2025-11-25T17:17+09:00 | 2025-11-25T17:17+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0915 | Multiples vulnérabilités dans Oracle Java SE | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0914 | Multiples vulnérabilités dans Oracle Database Server | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0913 | Multiples vulnérabilités dans Mozilla Thunderbird | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0912 | Multiples vulnérabilités dans les produits Check Point | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0911 | Multiples vulnérabilités dans les produits Mitel | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0910 | Multiples vulnérabilités dans les produits Mozilla | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0909 | Multiples vulnérabilités dans GLPI | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0908 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0907 | Multiples vulnérabilités dans Google Chrome | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0906 | Multiples vulnérabilités dans les produits Elastic | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0905 | Multiples vulnérabilités dans Tenable Security Center | 2026-07-21T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0904 | Multiples vulnérabilités dans WordPress | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0903 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0902 | Multiples vulnérabilités dans Mattermost Server | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0901 | Multiples vulnérabilités dans les produits IBM | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0900 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0899 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0898 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0897 | Multiples vulnérabilités dans Google Chrome | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0896 | Multiples vulnérabilités dans les produits Microsoft | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0895 | Multiples vulnérabilités dans Microsoft Windows | 2026-07-17T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0894 | Multiples vulnérabilités dans les produits F5 | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0893 | Vulnérabilité dans Traefik | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0892 | Vulnérabilité dans les produits ESET | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0891 | Vulnérabilité dans Ruby on Rails | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0890 | Multiples vulnérabilités dans Cisco RoomOS | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0889 | Multiples vulnérabilités dans Drupal | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0888 | Multiples vulnérabilités dans les produits Splunk | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0887 | Multiples vulnérabilités dans Mozilla Firefox | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0886 | Vulnérabilité dans Tenable Nessus Agent | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2015-ale-006 | Vulnérabilité dans Adobe Flash Player | 2015-07-11T00:00:00.000000 | 2015-07-20T00:00:00.000000 |
| certfr-2015-ale-005 | Vulnérabilité dans Adobe Flash Player | 2015-07-08T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2015-02-10T00:00:00.000000 | 2015-03-31T00:00:00.000000 |
| certfr-2015-ale-003 | Nouvelle campagne d'hameçonnage de type rançongiciel | 2015-02-05T00:00:00.000000 | 2015-07-10T00:00:00.000000 |
| certfr-2015-ale-002 | Vulnérabilité dans Adobe Flash Player | 2015-02-02T00:00:00.000000 | 2015-02-05T00:00:00.000000 |
| certfr-2015-ale-001 | Vulnérabilité dans Adobe Flash Player | 2015-01-22T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-011 | Vulnérabilité de l'implémentation Kerberos dans Microsoft Windows | 2014-11-18T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-010 | Vulnérabilité de l'implémentation des protocoles SSL/TLS dans Microsoft Windows | 2014-11-11T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-009 | Vulnérabilité dans Microsoft OLE | 2014-10-22T00:00:00.000000 | 2014-11-12T00:00:00.000000 |
| certfr-2014-ale-008 | Vulnérabilité dans Drupal | 2014-10-16T00:00:00.000000 | 2015-01-30T00:00:00.000000 |
| certfr-2014-ale-007 | Vulnérabilité dans SSLv3 | 2014-10-15T00:00:00.000000 | 2014-10-15T00:00:00.000000 |
| certfr-2014-ale-006 | Vulnérabilité dans GNU bash | 2014-09-25T00:00:00.000000 | 2014-09-30T00:00:00.000000 |
| certfr-2014-ale-005 | Vulnérabilité dans Microsoft Internet Explorer | 2014-04-28T00:00:00.000000 | 2014-05-02T00:00:00.000000 |
| certfr-2014-ale-004 | Vulnérabilité dans Apache Struts | 2014-04-25T00:00:00.000000 | 2014-04-29T00:00:00.000000 |
| certfr-2014-ale-003 | Vulnérabilité dans OpenSSL | 2014-04-08T00:00:00.000000 | 2014-07-30T00:00:00.000000 |
| certfr-2014-ale-002 | Vulnérabilité dans Microsoft Word | 2014-03-25T00:00:00.000000 | 2014-04-09T00:00:00.000000 |
| certfr-2014-ale-001 | Vulnérabilité dans Microsoft Internet Explorer | 2014-02-14T00:00:00.000000 | 2014-03-12T00:00:00.000000 |
| certa-2013-ale-008 | Vulnérabilité critique dans le noyau de Microsoft Windows | 2013-11-28T00:00:00.000000 | 2014-01-16T00:00:00.000000 |
| certa-2013-ale-007 | Vulnérabilité dans un composant graphique de Microsoft | 2013-11-06T00:00:00.000000 | 2013-12-10T00:00:00.000000 |
| certa-2013-ale-006 | Vulnérabilité dans Microsoft Internet Explorer | 2013-09-18T00:00:00.000000 | 2013-10-09T00:00:00.000000 |
| certa-2013-ale-005 | Vulnérabilité dans le noyau Linux | 2013-05-14T00:00:00.000000 | 2013-05-24T00:00:00.000000 |
| certa-2013-ale-004 | Vulnérabilité dans Adobe ColdFusion | 2013-05-10T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-003 | Vulnérabilité dans Microsoft Internet Explorer 8 | 2013-05-06T00:00:00.000000 | 2013-05-15T00:00:00.000000 |
| certa-2013-ale-002 | Vulnérabilités dans Adobe Reader et Acrobat | 2013-02-14T00:00:00.000000 | 2013-02-21T00:00:00.000000 |
| certa-2013-ale-001 | Vulnérabilités dans Oracle Java | 2013-01-10T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-010 | Vulnérabilité dans Internet Explorer | 2012-12-31T00:00:00.000000 | 2013-01-15T00:00:00.000000 |
| certa-2012-ale-009 | Vulnérabilité dans les pilotes NVidia | 2012-12-26T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-008 | Vulnérabilité dans certains terminaux Samsung | 2012-12-18T00:00:00.000000 | 2012-12-18T00:00:00.000000 |
| certa-2012-ale-007 | Vulnérabilité dans MySQL | 2012-12-06T00:00:00.000000 | 2013-01-07T00:00:00.000000 |
| certa-2012-ale-006 | Vulnérabilité dans Internet Explorer | 2012-09-18T00:00:00.000000 | 2012-09-21T00:00:00.000000 |