Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116672 | Authlib RFC 7592 examples omit registration-access-tok… |
authlib |
authlib |
2026-10-27T16:31:48.429Z | 2026-10-30T20:15:42.022Z | |
| cve-2026-117512 | oretnom23 php-travel-agency-system employee_insert.php… |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:30:18.263Z | 2026-10-28T16:15:55.262Z | |
| cve-2026-109088 | 6.5 (v3.1) | libXtst RECORD EnableContext Reply Endless Loop |
X.org |
libXtst |
2026-10-27T16:26:20.597Z | 2026-10-27T16:26:20.597Z |
| cve-2026-48380 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.580Z | 2026-10-28T16:16:04.990Z |
| cve-2026-48379 | 7.8 (v3.1) | Substance3D - Painter | Stack-based Buffer Overflow (C… |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.363Z | 2026-10-29T10:45:45.823Z |
| cve-2026-104349 | 7.3 (v3.1) | Creative Cloud Desktop | Uncontrolled Search Path Elem… |
Adobe |
Creative Cloud Desktop Application |
2026-10-27T16:21:54.690Z | 2026-10-29T10:45:45.965Z |
| cve-2025-64394 | A vulnerability allowing a low-privileged local u… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.979Z | 2026-10-27T16:16:58.979Z | |
| cve-2026-108141 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.971Z | 2026-10-27T16:16:58.971Z | |
| cve-2026-106078 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.925Z | 2026-10-27T16:16:58.925Z | |
| cve-2026-107671 | A vulnerability allowing an attacker with valid A… |
Veeam |
ONE |
2026-10-27T16:16:58.921Z | 2026-10-27T16:16:58.921Z | |
| cve-2026-108142 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.907Z | 2026-10-27T16:16:58.907Z | |
| cve-2026-106077 | A vulnerability allowing a user with the Veeam Ba… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.905Z | 2026-10-27T16:16:58.905Z | |
| cve-2026-106076 | A vulnerability allowing an authenticated organiz… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.882Z | 2026-10-27T16:16:58.882Z | |
| cve-2026-108140 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.797Z | 2026-10-27T16:16:58.797Z | |
| cve-2026-105477 | A vulnerability in Veeam Agent for Linux allows f… |
Veeam |
Agent for Linux |
2026-10-27T16:16:58.785Z | 2026-10-27T16:16:58.785Z | |
| cve-2026-82984 | When a team was configured as "visible to everyon… |
Nextcloud |
Server |
2026-10-27T16:15:34.831Z | 2026-10-27T16:15:34.831Z | |
| cve-2026-77167 | Abusing the federated share endpoint, an attacker… |
Nextcloud |
server |
2026-10-27T16:15:34.778Z | 2026-10-27T16:15:34.778Z | |
| cve-2026-77173 | A user could create a docx or odt file with a # i… |
Nextcloud |
Files Confidential |
2026-10-27T16:15:34.777Z | 2026-10-27T16:15:34.777Z | |
| cve-2026-67400 | A missing token type check allowed to retrieve mo… |
Nextcloud |
Richdocuments |
2026-10-27T16:15:34.773Z | 2026-10-27T16:15:34.773Z | |
| cve-2026-77171 | A public shared collective always allowed recipie… |
Nextcloud |
Collectives |
2026-10-27T16:15:34.770Z | 2026-10-27T16:15:34.770Z | |
| cve-2026-77172 | App passwords were allowed to bypass password con… |
Nextcloud |
Server |
2026-10-27T16:15:34.765Z | 2026-10-27T16:15:34.765Z | |
| cve-2026-87897 | A SSRF vulnerability found that enables access to… |
Nextcloud |
whiteboard |
2026-10-27T16:15:34.742Z | 2026-10-27T16:15:34.742Z | |
| cve-2026-82983 | The Tables app's share-listing endpoint (GET /app… |
Nextcloud |
Tables |
2026-10-27T16:15:34.683Z | 2026-10-27T16:15:34.683Z | |
| cve-2026-82986 | The user in a group can bypass the group restrict… |
Nextcloud |
Tables |
2026-10-27T16:15:34.671Z | 2026-10-27T16:15:34.671Z | |
| cve-2026-54462 | knative.dev/pkg admission webhooks allow unbounded req… |
knative |
pkg |
2026-10-27T16:12:32.516Z | 2026-11-02T19:29:02.459Z | |
| cve-2026-112353 | 6.2 (v4.0) 8.2 (v3.1) | GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI USA, LLC |
GFI KerioConnect |
2026-10-27T16:10:08.568Z | 2026-10-28T16:16:12.399Z |
| cve-2026-113775 | 7.8 (v3.1) | Dynamic Library Loading Process Control in Autodesk Fu… |
Autodesk |
Fusion |
2026-10-27T16:06:22.013Z | 2026-10-29T10:45:46.129Z |
| cve-2026-109089 | 7.5 (v3.1) | libXi XGetDeviceControl Control Type Mismatch Heap Buf… |
X.Org |
libXi |
2026-10-27T16:05:56.113Z | 2026-10-27T16:05:56.113Z |
| cve-2026-102638 | 7.1 (v3.1) | Electronic Library Description Stored Cross-Site Scrip… |
Autodesk |
Fusion |
2026-10-27T16:05:47.605Z | 2026-10-27T16:05:47.605Z |
| cve-2026-102637 | 7.1 (v3.1) | Fusion Protocol URL Reflected Cross-Site Scripting (XS… |
Autodesk |
Fusion |
2026-10-27T16:05:20.237Z | 2026-10-27T16:05:20.237Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000038 | Internet Explorer vulnerable to cross-site scripting | 2011-06-16T12:21+09:00 | 2011-06-16T12:21+09:00 |
| jvndb-2011-000037 | Clipboard contents alteration vulnerability in Internet Explorer | 2011-06-16T12:18+09:00 | 2011-06-16T12:18+09:00 |
| jvndb-2011-000036 | Microsoft Windows VBScript implementation file name disclosure vulnerability | 2011-06-16T12:11+09:00 | 2011-06-16T12:11+09:00 |
| jvndb-2011-000035 | Java Web Start may insecurely load dynamic libraries | 2011-06-10T16:23+09:00 | 2013-03-26T15:14+09:00 |
| jvndb-2011-000034 | Java Web Start may insecurely load settings files | 2011-06-10T16:23+09:00 | 2013-03-26T14:46+09:00 |
| jvndb-2011-000033 | Java Web Start may insecurely load policy files | 2011-06-10T16:22+09:00 | 2013-03-29T14:50+09:00 |
| jvndb-2011-000032 | WalRack upload file handilng vulnerability | 2011-05-26T13:37+09:00 | 2011-05-26T13:37+09:00 |
| jvndb-2011-000031 | Movable Type vulnerable to cross-site scripting | 2011-05-25T17:37+09:00 | 2011-05-25T17:37+09:00 |
| jvndb-2011-000030 | iVIEW Suite vulnerable to SQL injection | 2011-05-19T16:49+09:00 | 2011-05-19T16:49+09:00 |
| jvndb-2011-000028 | Virus Buster 2009 key input encryption function vulnerability | 2011-05-17T17:17+09:00 | 2011-05-17T17:17+09:00 |
| jvndb-2011-000026 | Applications that use the Windows Help function may be vulnerable to privilege escalation | 2011-05-13T19:36+09:00 | 2011-05-13T19:36+09:00 |
| jvndb-2011-000027 | La Fonera+ vulnerable to denial-of-service (DoS) | 2011-05-13T19:17+09:00 | 2011-05-13T19:17+09:00 |
| jvndb-2011-000029 | EC-CUBE vulnerable to cross-site request forgery | 2011-05-11T08:44+09:00 | 2011-05-11T08:44+09:00 |
| jvndb-2011-000025 | Multiple Buffalo routers vulnerable to cross-site request forgery | 2011-05-11T08:37+09:00 | 2011-05-11T08:37+09:00 |
| jvndb-2011-000024 | Multiple Yamaha routers vulnerable to denial-of-service (DoS) | 2011-05-11T08:32+09:00 | 2011-05-31T10:39+09:00 |
| jvndb-2011-000023 | Password Vault Web Access vulnerable to cross-site scripting | 2011-04-08T14:09+09:00 | 2011-04-08T14:09+09:00 |
| jvndb-2011-001156 | Hitachi Tuning Manager Software Cross-Site Scripting Vulnerability | 2011-04-01T15:52+09:00 | 2011-04-01T15:52+09:00 |
| jvndb-2011-000022 | Picasa may insecurely load executable files | 2011-03-28T08:11+09:00 | 2011-03-28T08:11+09:00 |
| jvndb-2011-000021 | e107 vulnerable to cross-site scripting | 2011-03-28T08:06+09:00 | 2011-03-28T08:06+09:00 |
| jvndb-2011-000020 | IBM Tivoli vulnerable to denial-of-service (DoS) | 2011-03-10T16:38+09:00 | 2018-02-07T17:10+09:00 |
| jvndb-2011-001145 | JP1/NETM/DM Denial of Service (DoS) Vulnerability | 2011-03-08T10:25+09:00 | 2011-03-08T10:25+09:00 |
| jvndb-2011-000019 | OTRS vulnerable to OS command injection | 2011-03-07T18:19+09:00 | 2011-03-07T18:19+09:00 |
| jvndb-2011-000017 | IBM WebSphere Application Server vulnerable to denial-of-service (DoS) | 2011-03-04T19:29+09:00 | 2018-02-07T17:10+09:00 |
| jvndb-2011-000016 | IBM DB2 vulnerable to denial-of-service (DoS) | 2011-03-04T19:29+09:00 | 2018-02-07T17:10+09:00 |
| jvndb-2011-000018 | IBM Lotus vulnerable to denial-of-service (DoS) | 2011-03-04T19:28+09:00 | 2018-02-07T17:10+09:00 |
| jvndb-2011-000015 | Multiple Things CGI products vulnerable to cross-site scripting | 2011-03-02T17:27+09:00 | 2011-03-02T17:27+09:00 |
| jvndb-2011-000014 | SEIL Series routers vulnerable to buffer overflow | 2011-02-28T17:17+09:00 | 2011-02-28T17:17+09:00 |
| jvndb-2011-000012 | Lunascape may insecurely load executable files | 2011-02-23T15:41+09:00 | 2011-02-23T15:41+09:00 |
| jvndb-2011-000013 | F-Secure Internet Gatekeeper for Linux authentication issue | 2011-02-17T10:27+09:00 | 2011-02-17T10:27+09:00 |
| jvndb-2011-000011 | EC-CUBE vulnerable to cross-site scripting | 2011-02-02T14:54+09:00 | 2011-02-02T14:54+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0963 | Multiples vulnérabilités dans Xen | 2024-11-12T00:00:00.000000 | 2024-11-12T00:00:00.000000 |
| certfr-2024-avi-0962 | Multiples vulnérabilités dans les produits SAP | 2024-11-12T00:00:00.000000 | 2024-11-12T00:00:00.000000 |
| certfr-2024-avi-0961 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-11-12T00:00:00.000000 | 2024-11-12T00:00:00.000000 |
| certfr-2024-avi-0960 | Multiples vulnérabilités dans les produits Synology | 2024-11-12T00:00:00.000000 | 2024-11-12T00:00:00.000000 |
| certfr-2024-avi-0959 | Multiples vulnérabilités dans les produits NetApp | 2024-11-12T00:00:00.000000 | 2024-11-12T00:00:00.000000 |
| certfr-2024-avi-0958 | Multiples vulnérabilités dans les produits IBM | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0957 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0956 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0955 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0954 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0953 | Multiples vulnérabilités dans Moxa EDS-P510 Series | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0952 | Vulnérabilité dans les produits F5 | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |