Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-57186 | Asterisk: CVE-2022-37325 fix is absent from current ch… |
asterisk |
asterisk |
2026-10-27T21:21:55.833Z | 2026-10-28T16:13:12.086Z | |
| cve-2026-57200 | Asterisk: ARI REST-over-WebSocket read-only bypass all… |
asterisk |
asterisk |
2026-10-27T21:13:03.777Z | 2026-10-30T20:18:00.957Z | |
| cve-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest … |
asterisk |
asterisk |
2026-10-27T21:04:25.747Z | 2026-10-27T21:04:25.747Z | |
| cve-2026-85898 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:28.112Z | 2026-10-31T18:01:13.467Z |
| cve-2026-83831 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-10-27T20:37:26.445Z | 2026-10-31T18:01:11.998Z |
| cve-2026-116775 | pageant: unbounded frame buffering on peer-controlled … |
Eugeny |
russh |
2026-10-27T20:27:30.852Z | 2026-10-27T20:27:30.852Z | |
| cve-2026-116774 | russh: peer-declared zero maximum packet size permanen… |
Eugeny |
russh |
2026-10-27T20:25:26.914Z | 2026-10-28T16:13:18.607Z | |
| cve-2026-116773 | russh's SSH client is susceptible to unbounded allocat… |
Eugeny |
russh |
2026-10-27T20:23:25.559Z | 2026-10-30T15:17:49.289Z | |
| cve-2026-116696 | russh's SSH agent server is susceptible to unbound all… |
Eugeny |
russh |
2026-10-27T20:14:32.973Z | 2026-10-27T20:14:32.973Z | |
| cve-2026-116695 | Crass: Incorrect tokenization of bad URLs enables CSS … |
rgrove |
crass |
2026-10-27T20:10:34.010Z | 2026-10-27T20:10:34.010Z | |
| cve-2026-116694 | OpenTelemetry Python: Unbounded memory allocation in J… |
open-telemetry |
opentelemetry-python |
2026-10-27T20:09:06.484Z | 2026-10-28T16:13:25.340Z | |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-116692 | MLflow: Remote code execution on unauthenticated MLflo… |
mlflow |
mlflow |
2026-10-27T20:03:49.661Z | 2026-10-27T20:03:49.661Z | |
| cve-2026-103995 | 2 (v4.0) | Lenient parsing of integers for response body and chun… |
Python Software Foundation |
CPython |
2026-10-27T19:58:52.521Z | 2026-10-28T00:33:14.944Z |
| cve-2026-116691 | MLflow CrewAI autologging records LLM provider API key… |
mlflow |
mlflow |
2026-10-27T19:56:22.083Z | 2026-10-27T19:56:22.083Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-10-27T19:43:42.029Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-10-27T19:43:01.386Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-10-27T19:36:28.906Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-10-27T19:33:11.074Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-10-27T19:12:24.255Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-10-27T18:25:50.885Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000011 | Sanshiro Series vulnerable to arbitrary code execution | 2014-01-28T14:48+09:00 | 2014-01-30T14:24+09:00 |
| jvndb-2014-000010 | Multiple SQL injection vulnerabilities in Cybozu Garoon | 2014-01-28T14:40+09:00 | 2014-01-30T14:22+09:00 |
| jvndb-2014-000009 | OpenPNE vulnerable to PHP Object Injection | 2014-01-24T12:36+09:00 | 2014-01-28T18:02+09:00 |
| jvndb-2014-000008 | SimZip (Simple Zip Viewer) vulnerable to directory traversal | 2014-01-24T12:34+09:00 | 2014-01-28T18:03+09:00 |
| jvndb-2014-001203 | A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software | 2014-01-22T18:06+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-000007 | Information disclosure vulnerability in Sleipnir Mobile for Android | 2014-01-22T15:29+09:00 | 2014-01-27T09:47+09:00 |
| jvndb-2014-000006 | EC-CUBE vulnerable to authorization bypass | 2014-01-22T15:28+09:00 | 2024-05-15T14:59+09:00 |
| jvndb-2014-000005 | EC-CUBE vulnerable to information alteration | 2014-01-22T15:27+09:00 | 2014-01-27T09:51+09:00 |
| jvndb-2014-000004 | NeoFiler vulnerable to directory traversal | 2014-01-10T14:44+09:00 | 2014-01-15T12:32+09:00 |
| jvndb-2014-000003 | Security File Manager vulnerable to directory traversal | 2014-01-10T14:42+09:00 | 2014-01-10T14:42+09:00 |
| jvndb-2014-000002 | tetra filer vulnerable to directory traversal | 2014-01-10T14:41+09:00 | 2014-01-10T14:41+09:00 |
| jvndb-2014-000001 | ZIP with Pass vulnerable to directory traversal | 2014-01-10T14:34+09:00 | 2014-01-10T14:34+09:00 |
| jvndb-2013-000126 | HP Autonomy Ultraseek vulnerable to cross-site scripting | 2013-12-26T12:32+09:00 | 2013-12-26T12:32+09:00 |
| jvndb-2013-005669 | Xml eXternal Entity Vulnerability in Hitachi Cosminexus | 2013-12-25T19:13+09:00 | 2013-12-25T19:13+09:00 |
| jvndb-2013-000125 | Cybozu Garoon Keitai vulnerable to authentication bypass | 2013-12-25T12:22+09:00 | 2014-01-07T16:12+09:00 |
| jvndb-2013-000124 | Cybozu Garoon vulnerable to SQL injection | 2013-12-25T12:21+09:00 | 2014-01-07T19:22+09:00 |
| jvndb-2013-000123 | VMware ESX and ESXi may allow access to arbitrary files | 2013-12-24T15:02+09:00 | 2013-12-25T14:01+09:00 |
| jvndb-2013-000120 | IrfanView vulnerable to buffer overflow | 2013-12-24T15:02+09:00 | 2014-01-07T19:25+09:00 |
| jvndb-2013-000111 | Android OS vulnerable to arbitrary Java method execution | 2013-12-17T13:57+09:00 | 2014-03-05T17:27+09:00 |
| jvndb-2013-000119 | Juniper ScreenOS vulnerable to denial-of-service (DoS) | 2013-12-13T12:23+09:00 | 2013-12-18T15:23+09:00 |
| jvndb-2013-000118 | Cybozu Dezie vulnerable to cross-site scripting | 2013-12-10T14:13+09:00 | 2013-12-18T14:51+09:00 |
| jvndb-2013-000117 | Cybozu Garoon vulnerable to session fixation | 2013-12-03T13:51+09:00 | 2013-12-06T10:52+09:00 |
| jvndb-2013-000116 | Cybozu Garoon vulnerable to mail header injection | 2013-12-03T13:49+09:00 | 2013-12-06T10:50+09:00 |
| jvndb-2013-000115 | Cybozu Garoon vulnerable to denial-of-service (DoS) | 2013-12-03T13:46+09:00 | 2013-12-06T10:48+09:00 |
| jvndb-2013-000114 | Cybozu Garoon vulnerable to SQL injection | 2013-12-03T13:45+09:00 | 2013-12-06T10:47+09:00 |
| jvndb-2013-000113 | Multiple cross-site scripting vulnerabilities in Cybozu Garoon | 2013-12-03T13:37+09:00 | 2013-12-06T10:42+09:00 |
| jvndb-2013-000112 | TOWN (modified version) vulnerable to directory traversal | 2013-11-29T14:23+09:00 | 2013-12-06T10:38+09:00 |
| jvndb-2013-005262 | Buffer Overflow Vulnerability in the log function of Interstage HTTP Server | 2013-11-28T16:38+09:00 | 2013-12-18T16:16+09:00 |
| jvndb-2013-000108 | KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates | 2013-11-22T17:39+09:00 | 2013-11-26T16:02+09:00 |
| jvndb-2013-000110 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:51+09:00 | 2013-11-26T16:15+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0204 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0203 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0202 | Vulnérabilité dans Joomla! | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0201 | Multiples vulnérabilités dans les produits Adobe | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0200 | Vulnérabilité dans Apache Tomcat | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0199 | Vulnérabilité dans les produits Apple | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0198 | Multiples vulnérabilités dans les produits Ivanti | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0197 | Multiples vulnérabilités dans les produits Fortinet | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0196 | Multiples vulnérabilités dans les produits Microsoft | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0195 | Multiples vulnérabilités dans Microsoft Azure | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0194 | Vulnérabilité dans Microsoft .Net | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0193 | Multiples vulnérabilités dans Microsoft Windows | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0192 | Multiples vulnérabilités dans Microsoft Office | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0191 | Multiples vulnérabilités dans les produits Siemens | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0190 | Multiples vulnérabilités dans les produits SAP | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0189 | Multiples vulnérabilités dans Google Chrome | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0188 | Multiples vulnérabilités dans les produits Qnap | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| certfr-2025-avi-0187 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| certfr-2025-avi-0186 | Multiples vulnérabilités dans les produits IBM | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0185 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0184 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0183 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0182 | Vulnérabilité dans Nagios XI | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0181 | Vulnérabilité dans les produits Moxa | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0180 | Vulnérabilité dans Cisco Secure Client | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0179 | Vulnérabilité dans Symantec Carbon Black Cloud | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0178 | Vulnérabilité dans Elastic Kibana | 2025-03-05T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0177 | Multiples vulnérabilités dans les produits VMware | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0176 | Multiples vulnérabilités dans les produits Mozilla | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0175 | Vulnérabilité dans LibreOffice | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |