Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55673 | PowSyBl: Command Injection in LocalCommandExecutor-s |
powsybl |
powsybl-core |
2026-08-28T18:36:53.110Z | 2026-08-28T18:36:53.110Z | |
| cve-2026-55584 | phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoo… |
phpsysinfo |
phpsysinfo |
2026-08-28T18:29:36.723Z | 2026-08-28T18:29:36.723Z | |
| cve-2026-82329 | 9.8 (v3.1) | Potential authentication bypass leading to administrat… |
jfrog |
artifactory |
2026-08-28T18:27:43.632Z | 2026-08-28T18:27:43.632Z |
| cve-2026-55245 | Bifrost: SSRF deny-list incomplete: isPublicIP permits… |
maximhq |
bifrost |
2026-08-28T18:24:16.723Z | 2026-08-28T19:54:10.966Z | |
| cve-2026-55378 | JS Recon: Command injection in PR Branch Checker workf… |
shriyanss |
js-recon |
2026-08-28T18:15:41.125Z | 2026-08-28T18:15:41.125Z | |
| cve-2026-55485 | Piccolo Admin: Privilege escalation - admin to superus… |
piccolo-orm |
piccolo_admin |
2026-08-28T18:13:23.605Z | 2026-08-28T18:13:23.605Z | |
| cve-2026-55509 | WsgiDAV: Blind SQL injection in the MySQL provider |
mar10 |
wsgidav |
2026-08-28T18:11:54.402Z | 2026-08-28T20:34:38.686Z | |
| cve-2026-55425 | Graylog: System Catalog titles endpoint can be used to… |
Graylog2 |
graylog2-server |
2026-08-28T18:08:22.113Z | 2026-08-28T18:08:22.113Z | |
| cve-2026-81849 | 8.7 (v4.0) 8.8 (v3.1) | Path traversal in the aws:downloadContent plugin in am… |
amazon |
amazon-ssm-agent |
2026-08-28T18:02:33.468Z | 2026-08-28T18:02:33.468Z |
| cve-2026-56100 | 8.6 (v4.0) 8.1 (v3.1) | SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exp… |
SpringBlade |
SpringBlade |
2026-08-28T18:00:36.953Z | 2026-08-29T11:47:29.998Z |
| cve-2026-70309 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Security Feature Bypas… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:45:35.711Z | 2026-08-29T16:25:00.798Z |
| cve-2026-72984 | 8.8 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:45:35.161Z | 2026-08-30T00:58:18.418Z |
| cve-2026-66798 | 4.3 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:45:34.181Z | 2026-08-29T16:24:59.209Z |
| cve-2026-66324 | 6.5 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:45:32.991Z | 2026-08-29T16:24:58.696Z |
| cve-2026-66323 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:45:31.902Z | 2026-08-30T00:58:28.881Z |
| cve-2026-62904 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Information Disclosure… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:43:50.256Z | 2026-08-29T16:23:14.397Z |
| cve-2026-58616 | 4.4 (v3.1) | Copilot Chat (Microsoft Edge) Information Disclosure V… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:43:49.732Z | 2026-08-29T16:23:13.176Z |
| cve-2026-70331 | 5.4 (v3.1) | Microsoft Edge for iOS Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:41:29.160Z | 2026-08-29T16:21:04.793Z |
| cve-2026-55566 | Yamcs: DOM XSS in Extension Routing |
yamcs |
yamcs |
2026-08-28T17:31:39.197Z | 2026-08-28T20:31:29.178Z | |
| cve-2026-55565 | Yamcs: Authenticated remote code execution via unescap… |
yamcs |
yamcs |
2026-08-28T17:29:56.768Z | 2026-08-28T17:29:56.768Z | |
| cve-2026-55559 | Yamcs: Remote Code Execution via instance-template arg… |
yamcs |
yamcs |
2026-08-28T17:22:07.633Z | 2026-08-28T19:58:04.713Z | |
| cve-2026-55552 | Yamcs: Unauthenticated Directory Traversal |
yamcs |
yamcs |
2026-08-28T17:18:45.617Z | 2026-08-28T17:19:40.876Z | |
| cve-2026-55549 | Yamcs: Reflected XSS in the URL of the Authorize Endpoint |
yamcs |
yamcs |
2026-08-28T17:15:52.840Z | 2026-08-28T17:15:52.840Z | |
| cve-2026-55547 | Yamcs: Missing Authorization on Role and Privilege Enu… |
yamcs |
yamcs |
2026-08-28T17:11:34.332Z | 2026-08-28T20:30:11.670Z | |
| cve-2026-55545 | Yamcs: WebSocket subscription handlers omit the privil… |
yamcs |
yamcs |
2026-08-28T17:09:53.114Z | 2026-08-28T17:09:53.114Z | |
| cve-2026-55521 | Yamcs : Multiple Missing Function Level Access Control… |
yamcs |
yamcs |
2026-08-28T17:08:16.725Z | 2026-08-28T19:52:43.290Z | |
| cve-2026-77939 | 7.1 (v4.0) 6.5 (v3.1) | Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint |
flextype |
flextype |
2026-08-28T17:06:51.132Z | 2026-08-29T11:47:55.894Z |
| cve-2026-55511 | Yamcs: Authenticated RCE via StreamSQL aggregate-compi… |
yamcs |
yamcs |
2026-08-28T17:05:02.307Z | 2026-08-28T17:05:02.307Z | |
| cve-2026-55068 | free5GC: NRF nnrf-nfm lacks NF Profile input validatio… |
free5gc |
free5gc |
2026-08-28T16:57:12.269Z | 2026-08-28T16:57:12.269Z | |
| cve-2026-55067 | Vikunja: Authenticated cross-tenant kanban-bucket relo… |
go-vikunja |
vikunja |
2026-08-28T16:53:59.656Z | 2026-08-28T19:55:24.677Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000109 | Multiple vulnerabilities in SNC-CX600W | 2025-11-25T14:59+09:00 | 2025-11-25T14:59+09:00 |
| jvndb-2025-000108 | "FOD" App uses hard-coded cryptographic keys | 2025-11-25T14:15+09:00 | 2025-11-25T14:15+09:00 |
| jvndb-2025-000106 | Multiple vulnerabilities in LogStare Collector | 2025-11-21T16:27+09:00 | 2025-11-21T16:27+09:00 |
| jvndb-2025-019621 | EPSON WebConfig / Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts | 2025-11-21T15:31+09:00 | 2025-12-24T10:54+09:00 |
| jvndb-2025-000107 | Installer of RakurakuMusen Start EX for Windows may insecurely load Dynamic Link Libraries | 2025-11-19T16:22+09:00 | 2025-11-19T16:22+09:00 |
| jvndb-2025-000097 | "Dejira" App for iOS vulnerable to improper server certificate verification | 2025-11-17T14:09+09:00 | 2025-11-17T14:09+09:00 |
| jvndb-2025-000105 | NCP-HG100 vulnerable to OS command injection | 2025-11-14T15:26+09:00 | 2025-11-14T15:26+09:00 |
| jvndb-2025-000104 | Multiple vulnerabilities in GNU Libmicrohttpd | 2025-11-10T15:07+09:00 | 2025-11-10T15:07+09:00 |
| jvndb-2025-000103 | Use of password hash with insufficient computational effort vulnerability in BUFFALO Wi-Fi router "WSR-1800AX4 series" | 2025-11-07T15:39+09:00 | 2025-11-07T15:39+09:00 |
| jvndb-2025-000102 | CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to OS command injection | 2025-11-07T14:55+09:00 | 2025-11-07T14:55+09:00 |
| jvndb-2025-000101 | GROWI vulnerable to stored cross-site scripting | 2025-11-06T13:45+09:00 | 2025-11-06T13:45+09:00 |
| jvndb-2025-017972 | Multiple vulnerabilities in Century Systems FutureNet MA and IP-K series | 2025-11-04T16:37+09:00 | 2025-11-04T16:37+09:00 |
| jvndb-2025-000100 | Multiple Roboticsware products register Windows services with unquoted file paths | 2025-11-04T14:17+09:00 | 2025-11-04T14:17+09:00 |
| jvndb-2025-000098 | Optical Disc Archive Software (for Windows) registers a Windows service with an unquoted file path | 2025-11-04T13:51+09:00 | 2025-11-04T13:51+09:00 |
| jvndb-2025-000099 | Progress Flowmon vulnerable to authenticated OS command injection | 2025-11-04T12:47+09:00 | 2025-11-04T12:47+09:00 |
| jvndb-2025-000096 | Installer of WTW EAGLE (for Windows) may insecurely load Dynamic Link Libraries | 2025-10-29T14:17+09:00 | 2025-10-29T14:17+09:00 |
| jvndb-2025-000095 | MZK-DP300N uses hard-coded credentials | 2025-10-28T14:04+09:00 | 2025-10-28T14:04+09:00 |
| jvndb-2025-000093 | Multiple stored cross-site scripting vulnerabilities in Pleasanter | 2025-10-24T15:11+09:00 | 2025-10-24T15:11+09:00 |
| jvndb-2025-000084 | GROWI vulnerable to cross-site scripting | 2025-10-22T15:44+09:00 | 2025-10-22T15:44+09:00 |
| jvndb-2025-000091 | Multiple I-O DATA NAS management applications register Windows services with unquoted file paths | 2025-10-22T15:04+09:00 | 2025-12-10T16:20+09:00 |
| jvndb-2025-000090 | Multiple stored cross-site scripting vulnerabilities in Movable Type | 2025-10-22T13:54+09:00 | 2025-10-22T13:54+09:00 |
| jvndb-2025-000088 | Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel | 2025-10-20T16:17+09:00 | 2025-10-22T10:06+09:00 |
| jvndb-2025-000092 | ETERNUS SF vulnerable to incorrect default permissions | 2025-10-20T14:20+09:00 | 2025-10-20T14:20+09:00 |
| jvndb-2025-000089 | Installer of AutoDownloader may insecurely load Dynamic Link Libraries | 2025-10-17T13:38+09:00 | 2025-10-17T13:38+09:00 |
| jvndb-2025-000074 | Multiple vulnerabilities in desknet's NEO | 2025-10-16T17:30+09:00 | 2025-10-16T17:30+09:00 |
| jvndb-2025-000076 | Multiple vulnerabilities in ChatLuck | 2025-10-16T17:17+09:00 | 2025-10-16T17:17+09:00 |
| jvndb-2025-000087 | Ruijie Networks RG-EST300 undocumented SSH functionality | 2025-10-16T14:19+09:00 | 2025-10-16T14:19+09:00 |
| jvndb-2025-016124 | Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal | 2025-10-16T11:16+09:00 | 2025-10-16T11:16+09:00 |
| jvndb-2025-000085 | Multiple RSUPPORT products may insecurely load Dynamic Link Libraries | 2025-10-15T15:55+09:00 | 2025-10-15T15:55+09:00 |
| jvndb-2025-000086 | Phoenix Contact CHARX SEC-3xxx vulnerable to code injection | 2025-10-15T15:54+09:00 | 2025-10-15T15:54+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0885 | Multiples vulnérabilités dans les produits Citrix | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0884 | Vulnérabilité dans Xen XAPI | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0883 | Multiples vulnérabilités dans Progress LoadMaster | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0882 | Vulnérabilité dans ESET Inspect Connector | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0881 | Vulnérabilité dans Schneider Electric EcoStruxure | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0880 | Multiples vulnérabilités dans les produits Siemens | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0879 | Multiples vulnérabilités dans les produits Fortinet | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0878 | Vulnérabilité dans Veeam Backup & Replication | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0877 | Multiples vulnérabilités dans les produits SAP | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0876 | Multiples vulnérabilités dans Apache Tomcat | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0875 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access 1000 | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0874 | Multiples vulnérabilités dans Google Chrome | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0873 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0872 | Multiples vulnérabilités dans les produits Microsoft | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0871 | Multiples vulnérabilités dans Microsoft Azure | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0870 | Multiples vulnérabilités dans Microsoft .Net | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0869 | Multiples vulnérabilités dans Microsoft Windows | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0868 | Multiples vulnérabilités dans Microsoft Office | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0867 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0866 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0865 | Multiples vulnérabilités dans les produits IBM | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0864 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0863 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0862 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0861 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0860 | Multiples vulnérabilités dans les produits Siemens | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0859 | Multiples vulnérabilités dans Suricata | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0858 | Vulnérabilité dans CPython | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0857 | Vulnérabilité dans NetApp ONTAP 9 | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0856 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-ale-005 | Vulnérabilité dans Oracle Java | 2012-08-27T00:00:00.000000 | 2012-08-31T00:00:00.000000 |
| certa-2012-ale-004 | Vulnérabilité dans Microsoft Exchange et Fast Search Server 2010 | 2012-07-25T00:00:00.000000 | 2012-08-16T00:00:00.000000 |
| certa-2012-ale-003 | Vulnérabilité dans Microsoft XML Core Services | 2012-06-14T00:00:00.000000 | 2012-08-17T00:00:00.000000 |
| certa-2012-ale-002 | Vulnérabilité dans Windows RDP | 2012-03-14T00:00:00.000000 | 2012-04-13T00:00:00.000000 |
| certa-2012-ale-001 | Vulnérabilité dans Cisco IronPort | 2012-02-01T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2011-ale-008 | Vulnérabilité dans Adobe Reader et Acrobat | 2011-12-07T00:00:00.000000 | 2012-01-10T00:00:00.000000 |
| certa-2011-ale-007 | Vulnérabilité dans ftpd et ProFTPD sur FreeBSD | 2011-12-02T00:00:00.000000 | 2011-12-26T00:00:00.000000 |
| certa-2011-ale-006 | Exploitation d'une vulnérabilité dans la gestion des polices TrueType sur Windows | 2011-11-04T00:00:00.000000 | 2011-12-14T00:00:00.000000 |
| certa-2011-ale-005 | Exploitation malveillante d'une fonctionnalité du protocole SSL afin de provoquer un déni de service | 2011-10-27T00:00:00.000000 | 2011-10-27T00:00:00.000000 |
| certa-2011-ale-004 | Vulnérabilités dans Apple iOS | 2011-07-05T00:00:00.000000 | 2011-07-18T00:00:00.000000 |
| certa-2011-ale-003 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-04-12T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| certa-2011-ale-002 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-15T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-ale-001 | Vulnérabilité dans le moteur de rendu graphique de Windows | 2011-01-05T00:00:00.000000 | 2011-02-10T00:00:00.000000 |
| certa-2010-ale-021 | Vulnérabilité dans Microsoft Internet Explorer | 2010-12-22T00:00:00.000000 | 2011-02-09T00:00:00.000000 |
| certa-2010-ale-020 | Vulnérabilité dans Adobe Reader et Acrobat | 2010-11-05T00:00:00.000000 | 2010-11-17T00:00:00.000000 |
| certa-2010-ale-019 | Vulnérabilité dans Microsoft Internet Explorer | 2010-11-03T00:00:00.000000 | 2010-12-17T00:00:00.000000 |
| certa-2010-ale-018 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2010-10-28T00:00:00.000000 | 2010-11-18T00:00:00.000000 |
| certa-2010-ale-017 | Vulnérabilité dans Mozilla Firefox | 2010-10-27T00:00:00.000000 | 2010-10-28T00:00:00.000000 |
| certa-2010-ale-016 | Vulnérabilité Adobe Shockwave Player | 2010-10-22T00:00:00.000000 | 2010-10-29T00:00:00.000000 |
| certa-2010-ale-015 | Vulnérabilité dans Adobe Flash Player | 2010-09-14T00:00:00.000000 | 2010-09-21T00:00:00.000000 |
| certa-2010-ale-014 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2010-09-09T00:00:00.000000 | 2010-10-06T00:00:00.000000 |
| certa-2010-ale-013 | Vulnérabilité dans le contrôle ActiveX Apple QuickTime | 2010-08-31T00:00:00.000000 | 2010-09-17T00:00:00.000000 |
| certa-2010-ale-012 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2010-08-06T00:00:00.000000 | 2010-08-20T00:00:00.000000 |
| certa-2010-ale-011 | Vulnérabilités dans Apple iOS | 2010-08-04T00:00:00.000000 | 2010-08-12T00:00:00.000000 |
| certa-2010-ale-010 | Vulnérabilité dans le Shell de Microsoft Windows | 2010-07-19T00:00:00.000000 | 2010-08-03T00:00:00.000000 |
| certa-2010-ale-009 | Exploitation par un code malveillant d'une vulnérabilité Microsoft Windows non corrigée | 2010-07-16T00:00:00.000000 | 2010-08-03T00:00:00.000000 |
| certa-2010-ale-008 | Vulnérabilité dans le Centre d'aide et de support Windows | 2010-06-10T00:00:00.000000 | 2010-07-15T00:00:00.000000 |
| certa-2010-ale-007 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2010-06-05T00:00:00.000000 | 2010-06-30T00:00:00.000000 |
| certa-2010-ale-006 | Vulnérabilité de Safari | 2010-05-14T00:00:00.000000 | 2010-05-27T00:00:00.000000 |
| certa-2010-ale-005 | Vulnérabilité dans Java Deployment Toolkit | 2010-04-09T00:00:00.000000 | 2010-04-16T00:00:00.000000 |