Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59125 | 7 (v3.1) | Virtual Hard Disk (VHD) Miniport Driver Elevation of P… |
Microsoft |
Windows 10 Version 1607 |
2026-08-11T17:05:44.354Z | 2026-10-28T20:07:11.637Z |
| cve-2026-56171 | 7.1 (v3.1) | Windows Remote Desktop Protocol (RDP) Information Disc… |
Microsoft |
Remote Desktop Web Client |
2026-07-17T21:34:17.768Z | 2026-10-28T20:07:11.043Z |
| cve-2026-59122 | 7 (v3.1) | Windows Telephony Service Elevation of Privilege Vulne… |
Microsoft |
Windows 10 Version 1607 |
2026-08-11T17:05:43.770Z | 2026-10-28T20:07:11.006Z |
| cve-2026-59119 | 7.3 (v3.1) | PowerShell Elevation of Privilege Vulnerability |
Microsoft |
PowerShell 7.4 |
2026-08-11T17:05:43.222Z | 2026-10-28T20:07:10.525Z |
| cve-2026-58529 | 7.1 (v3.1) | Windows Active Directory Federation Services (ADFS) In… |
Microsoft |
Windows 11 version 26H1 |
2026-07-14T17:10:18.062Z | 2026-10-28T20:07:10.495Z |
| cve-2026-58651 | 7.8 (v3.1) | Microsoft Word Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-08-11T17:05:42.656Z | 2026-10-28T20:07:09.913Z |
| cve-2026-62870 | 8.8 (v3.1) | Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-08-03T22:58:03.448Z | 2026-10-28T20:07:09.840Z |
| cve-2026-66326 | 6.5 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:58:02.203Z | 2026-10-28T20:07:08.804Z |
| cve-2026-58641 | 7.8 (v3.1) | .NET Elevation of Privilege Vulnerability |
Microsoft |
SkiaSharp |
2026-08-11T17:05:42.089Z | 2026-10-28T20:07:08.803Z |
| cve-2026-54981 | 7.8 (v3.1) | Visual Studio Code Python Extension Security Feature B… |
Microsoft |
Python extension for Visual Studio Code |
2026-08-11T17:05:41.429Z | 2026-10-28T20:07:08.258Z |
| cve-2026-66325 | 6.1 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:55.034Z | 2026-10-28T20:07:08.215Z |
| cve-2026-42976 | 7.8 (v3.1) | Remote Access Management service/API (RPC server) Elev… |
Microsoft |
Windows 10 Version 1607 |
2026-08-11T17:05:40.777Z | 2026-10-28T20:07:07.793Z |
| cve-2026-66322 | 7.1 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:54.552Z | 2026-10-28T20:07:07.747Z |
| cve-2026-62904 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Information Disclosure… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:43:50.256Z | 2026-10-28T20:07:07.153Z |
| cve-2026-66317 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Tampering Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:54.002Z | 2026-10-28T20:07:07.151Z |
| cve-2026-66311 | 6.2 (v3.1) | Microsoft Edge (Chromium-based) Tampering Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:53.525Z | 2026-10-28T20:07:05.874Z |
| cve-2026-58616 | 4.4 (v3.1) | Copilot Chat (Microsoft Edge) Information Disclosure V… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-28T17:43:49.732Z | 2026-10-28T20:07:05.789Z |
| cve-2026-83525 | Apache Kafka: Incorrect boolean operator in FetchSnaps… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:37:19.893Z | 2026-10-28T20:07:03.066Z | |
| cve-2026-55013 | 7.1 (v3.1) | Windows Remote Help Defense Spoofing Vulnerability |
Microsoft |
Windows Remote Help |
2026-08-20T21:45:17.747Z | 2026-10-28T20:07:02.507Z |
| cve-2026-65804 | 6.1 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:52.969Z | 2026-10-28T20:07:02.208Z |
| cve-2026-55015 | 5.5 (v3.1) | Microsoft Remote Help Denial of Service Vulnerability |
Microsoft |
Windows Remote Help |
2026-08-20T21:45:17.240Z | 2026-10-28T20:07:01.908Z |
| cve-2026-65802 | 7.4 (v3.1) | Microsoft Edge for Android Information Disclosure Vuln… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:57:52.477Z | 2026-10-28T20:07:01.681Z |
| cve-2026-116593 | Apache Kafka: Kafka Connect configuration provider val… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:46:21.415Z | 2026-10-28T20:07:01.640Z | |
| cve-2026-69550 | 6.5 (v3.1) | Windows App for Mac Information Disclosure Vulnerability |
Microsoft |
Windows App for Mac |
2026-08-19T21:17:18.285Z | 2026-10-28T20:07:01.451Z |
| cve-2026-66803 | 10 (v3.1) | Azure Cosmos DB Remote Code Execution Vulnerability |
Microsoft |
Azure Cosmos DB |
2026-07-30T20:28:04.898Z | 2026-10-28T20:07:01.240Z |
| cve-2026-24301 | 8.8 (v3.1) | Microsoft Copilot Information Disclosure Vulnerability |
Microsoft |
Copilot Web |
2026-08-18T13:19:23.436Z | 2026-10-28T20:07:00.980Z |
| cve-2026-62828 | 5.4 (v3.1) | Microsoft Edge for Android (Chromium-based) Tampering … |
Microsoft |
Microsoft Edge for Android |
2026-07-28T15:07:06.891Z | 2026-10-28T20:07:00.715Z |
| cve-2026-69414 | 7.8 (v3.1) | Microsoft Defender Elevation of Privilege Vulnerability |
Microsoft |
Microsoft Malware Protection Engine |
2026-08-14T21:50:58.641Z | 2026-10-28T20:07:00.383Z |
| cve-2026-57989 | 7.4 (v3.1) | Microsoft Edge (Chromium-based) Information Disclosure… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-26T17:22:08.118Z | 2026-10-28T20:07:00.280Z |
| cve-2026-115644 | Apache Kafka: Connect Admin REST API Authentication By… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:45:36.440Z | 2026-10-28T20:07:00.157Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000002 | Cogent DataHub vulnerable to HTTP header injection | 2012-01-11T15:12+09:00 | 2012-01-13T16:08+09:00 |
| jvndb-2012-000001 | Cogent DataHub vulnerable to cross-site scripting | 2012-01-11T15:22+09:00 | 2012-01-13T15:57+09:00 |
| jvndb-2012-000003 | Wibu-Systems CodeMeter Runtime vulnerable to denial-of-service | 2012-01-11T15:02+09:00 | 2012-01-11T15:02+09:00 |
| jvndb-2011-002122 | An authentication information Exposure Vulnerability in JP1/IT Resource Management - Manager | 2012-01-06T19:53+09:00 | 2012-01-06T19:53+09:00 |
| jvndb-2011-003295 | JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability | 2012-01-06T19:51+09:00 | 2012-01-06T19:51+09:00 |
| jvndb-2011-000108 | Movable Type Plugin MailForm vulnerable to cross-site scripting | 2011-12-26T14:49+09:00 | 2011-12-26T14:49+09:00 |
| jvndb-2011-000109 | WordPress vulnerable to arbitrary PHP code execution | 2011-12-26T14:28+09:00 | 2011-12-26T14:28+09:00 |
| jvndb-2011-000110 | WordPress Japanese vulnerable to cross-site scripting | 2011-12-26T14:26+09:00 | 2011-12-26T14:26+09:00 |
| jvndb-2011-000107 | PukiWiki Plus! vulnerable to cross-site scripting | 2011-12-22T18:16+09:00 | 2011-12-22T18:16+09:00 |
| jvndb-2011-000106 | Apache Struts vulnerable to cross-site scripting | 2011-12-22T18:08+09:00 | 2011-12-22T18:08+09:00 |
| jvndb-2011-000102 | Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK | 2011-12-15T16:26+09:00 | 2011-12-20T18:14+09:00 |
| jvndb-2011-000099 | ChaSen vulnerable to buffer overflow | 2011-11-08T18:31+09:00 | 2011-12-20T18:13+09:00 |
| jvndb-2011-000105 | Safari for iOS vulnerable to denial-of-service | 2011-12-15T16:30+09:00 | 2011-12-15T16:30+09:00 |
| jvndb-2011-000104 | FFFTP may insecurely load executable files | 2011-12-09T17:08+09:00 | 2011-12-09T17:08+09:00 |
| jvndb-2011-000103 | phpWebSite vulnerable to cross-site scripting | 2011-12-08T17:15+09:00 | 2011-12-08T17:15+09:00 |
| jvndb-2011-000101 | Etomite vulnerable to cross-site scripting | 2011-12-06T17:45+09:00 | 2011-12-06T17:45+09:00 |
| jvndb-2011-000100 | PowerChute Business Edition vulnerable to cross-site scripting | 2011-12-06T16:49+09:00 | 2011-12-06T16:49+09:00 |
| jvndb-2011-000079 | Cybozu Office vulnerable in restricting access | 2011-10-11T09:11+09:00 | 2011-11-28T16:48+09:00 |
| jvndb-2011-000076 | Nikki vulnerable to OS command injection | 2011-11-21T18:23+09:00 | 2011-11-21T18:23+09:00 |
| jvndb-2011-000075 | Nikki vulnerable to directory traversal | 2011-11-21T18:22+09:00 | 2011-11-21T18:22+09:00 |
| jvndb-2011-000098 | Iwate Portal Bar vulnerable to arbitrary script execution | 2011-11-08T18:25+09:00 | 2011-11-08T18:25+09:00 |
| jvndb-2011-000094 | Multiple SKYARC System Co., Ltd. products vulnerable to cross-site request forgery | 2011-10-31T18:03+09:00 | 2011-11-08T17:38+09:00 |
| jvndb-2011-000093 | Multiple SKYARC System Co., Ltd. products fail to restrict access permissions | 2011-10-31T17:54+09:00 | 2011-11-08T17:38+09:00 |
| jvndb-2011-000097 | WebObjects vulnerable to cross-site scripting | 2011-11-04T17:36+09:00 | 2011-11-04T17:36+09:00 |
| jvndb-2011-000096 | Opengear console servers vulnerable to authentication bypass | 2011-11-04T17:34+09:00 | 2011-11-04T17:34+09:00 |
| jvndb-2011-000095 | CSWorks LiveData Service vulnerable to denial-of-service (DoS) | 2011-11-01T16:05+09:00 | 2011-11-02T14:42+09:00 |
| jvndb-2011-000089 | Touhou Hisouten vulnerable to denial-of-service | 2011-10-28T17:49+09:00 | 2011-10-28T17:49+09:00 |
| jvndb-2011-000092 | Multiple D-Link products vulnerable to buffer overflow | 2011-10-28T17:42+09:00 | 2011-10-28T17:42+09:00 |
| jvndb-2011-000091 | FFFTP may insecurely load executable files | 2011-10-28T17:39+09:00 | 2011-10-28T17:39+09:00 |
| jvndb-2011-000082 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:28+09:00 | 2011-10-25T13:46+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1019 | Multiples vulnérabilités dans Netgate pfSense | 2024-11-26T00:00:00.000000 | 2024-11-26T00:00:00.000000 |
| certfr-2024-avi-1018 | Multiples vulnérabilités dans les produits Qnap | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1017 | Multiples vulnérabilités dans Centreon Central server | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1016 | Vulnérabilité dans NetApp Brocade SAN Navigator | 2024-11-25T00:00:00.000000 | 2024-11-25T00:00:00.000000 |
| certfr-2024-avi-1015 | Multiples vulnérabilités dans les produits IBM | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1014 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1013 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1012 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1011 | Vulnérabilité dans Centreon Web | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1010 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-22T00:00:00.000000 | 2024-11-22T00:00:00.000000 |
| certfr-2024-avi-1009 | Multiples vulnérabilités dans Drupal | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1008 | Multiples vulnérabilités dans Wireshark | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1007 | Multiples vulnérabilités dans PHP | 2024-11-21T00:00:00.000000 | 2024-11-21T00:00:00.000000 |
| certfr-2024-avi-1006 | Multiples vulnérabilités dans les produits Atlassian | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1005 | Multiples vulnérabilités dans les produits Spring | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1004 | Multiples vulnérabilités dans les produits Apple | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1003 | Vulnérabilité dans Google Chrome | 2024-11-20T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-0969 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2024-11-13T00:00:00.000000 | 2024-11-20T00:00:00.000000 |
| certfr-2024-avi-1002 | Vulnérabilité dans les produits Trend Micro | 2024-11-19T00:00:00.000000 | 2024-11-19T00:00:00.000000 |
| certfr-2024-avi-1001 | Vulnérabilité dans les produits Palo Alto Networks | 2024-11-19T00:00:00.000000 | 2024-11-19T00:00:00.000000 |
| certfr-2024-avi-1000 | Multiples vulnérabilités dans Apache Tomcat | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0999 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0998 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0997 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0996 | Multiples vulnérabilités dans GLPI | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0995 | Multiples vulnérabilités dans les produits Nextcloud | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0994 | Vulnérabilité dans Microsoft Azure | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0993 | Vulnérabilité dans les caméras Synology | 2024-11-18T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0990 | Vulnérabilité dans les produits Palo Alto Networks | 2024-11-15T00:00:00.000000 | 2024-11-18T00:00:00.000000 |
| certfr-2024-avi-0992 | Multiples vulnérabilités dans les produits IBM | 2024-11-15T00:00:00.000000 | 2024-11-15T00:00:00.000000 |