Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-48572 | 7 (v3.1) | Windows App Package Installer Elevation of Privilege V… |
Microsoft |
Windows 11 version 23H2 |
2026-07-14T17:04:24.666Z | 2026-08-31T15:24:33.672Z |
| cve-2026-42990 | 9.8 (v3.1) | SQL Server ODBC driver Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-07-14T17:04:24.048Z | 2026-08-31T15:24:33.083Z |
| cve-2026-47303 | 8.8 (v3.1) | ASP.NET Core Elevation of Privilege Vulnerability |
Microsoft |
.NET 10.0 |
2026-07-14T18:45:33.438Z | 2026-08-31T15:24:32.451Z |
| cve-2026-47302 | 7.5 (v3.1) | .NET Denial of Service Vulnerability |
Microsoft |
.NET 10.0 |
2026-07-14T18:45:32.796Z | 2026-08-31T15:24:31.892Z |
| cve-2026-47300 | 8.8 (v3.1) | ASP.NET Core Elevation of Privilege Vulnerability |
Microsoft |
.NET 10.0 |
2026-07-14T18:20:12.225Z | 2026-08-31T15:24:31.218Z |
| cve-2026-42975 | 8 (v3.1) | Windows Bluetooth Port Driver Remote Code Execution |
Microsoft |
Windows 10 Version 1607 |
2026-07-14T17:04:21.605Z | 2026-08-31T15:24:30.758Z |
| cve-2026-45489 | 6.5 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:36.906Z | 2026-08-31T15:24:30.309Z |
| cve-2026-42900 | 8.1 (v3.1) | Microsoft Windows App Store Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1607 |
2026-07-14T17:04:20.414Z | 2026-08-31T15:24:29.690Z |
| cve-2026-34346 | 5.5 (v3.1) | Windows Ancillary Function Driver for WinSock Informat… |
Microsoft |
Windows 10 Version 1607 |
2026-07-14T17:04:19.569Z | 2026-08-31T15:24:29.098Z |
| cve-2026-34349 | 5.5 (v3.1) | Windows Media Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-07-14T17:04:19.019Z | 2026-08-31T15:24:28.584Z |
| cve-2026-66321 | 7.4 (v3.1) | Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:51:44.398Z | 2026-08-31T15:24:28.115Z |
| cve-2026-66318 | 8.1 (v3.1) | Microsoft Edge (Chromium-based) Information Disclosure… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-08-03T22:51:43.716Z | 2026-08-31T15:24:27.664Z |
| cve-2026-56160 | 9.1 (v3.1) | Azure Red Hat OpenShift (ARO) Elevation of Privilege V… |
Microsoft |
Azure Red Hat OpenShift (ARO) |
2026-07-23T23:55:13.691Z | 2026-08-31T15:24:27.065Z |
| cve-2026-54120 | 9.9 (v3.1) | Microsoft Surface Remote Code Execution Vulnerability |
Microsoft |
Surface Management Services |
2026-07-23T23:55:12.907Z | 2026-08-31T15:24:26.506Z |
| cve-2026-56165 | 9.8 (v3.1) | Microsoft Account Remote Code Execution Vulnerability |
Microsoft |
Microsoft Account |
2026-07-23T23:55:12.338Z | 2026-08-31T15:24:25.947Z |
| cve-2026-56163 | 10 (v3.1) | Microsoft Azure Kubernetes Service Elevation of Privil… |
Microsoft |
Azure Kubernetes Service |
2026-07-24T14:36:55.793Z | 2026-08-31T15:24:25.455Z |
| cve-2026-56167 | 8.5 (v3.1) | Azure AI Search Elevation of Privilege Vulnerability |
Microsoft |
Azure AI Search |
2026-07-23T23:55:11.014Z | 2026-08-31T15:24:24.061Z |
| cve-2026-59117 | 7.5 (v3.1) | Windows Terminal Remote Code Execution Vulnerability |
Microsoft |
Windows Terminal App |
2026-07-16T21:56:37.746Z | 2026-08-31T15:24:23.450Z |
| cve-2026-41106 | 9.3 (v3.1) | Microsoft 365 Copilot Elevation of Privilege Vulnerability |
Microsoft |
Microsoft 365 Copilot |
2026-07-02T22:18:57.629Z | 2026-08-31T15:24:22.908Z |
| cve-2026-54998 | 8.8 (v3.1) | Microsoft Exchange Online Elevation of Privilege Vulne… |
Microsoft |
Microsoft Exchange Online |
2026-07-02T22:18:58.222Z | 2026-08-31T15:24:22.274Z |
| cve-2026-57100 | 9.9 (v3.1) | Microsoft Entra Provisioning Service Elevation of Priv… |
Microsoft |
Microsoft Entra Provisioning Service |
2026-07-02T22:18:55.289Z | 2026-08-31T15:24:21.710Z |
| cve-2026-45499 | 9.9 (v3.1) | Azure OpenAI Elevation of Privilege Vulnerability |
Microsoft |
Azure Open AI |
2026-07-02T22:18:56.092Z | 2026-08-31T15:24:21.027Z |
| cve-2026-26145 | 4.8 (v3.1) | Microsoft Azure Synapse Elevation of Privilege Vulnerability |
Microsoft |
Azure Synapse |
2026-07-02T22:18:56.842Z | 2026-08-31T15:24:20.274Z |
| cve-2026-47296 | 7.5 (v3.1) | Microsoft SQL Server Elevation of Privilege Vulnerability |
Microsoft |
Microsoft SQL Server 2016 Service Pack 3 (GDR) |
2026-07-14T17:04:15.041Z | 2026-08-31T15:24:19.569Z |
| cve-2026-42982 | 7.8 (v3.1) | Windows Secure Kernel Mode Elevation of Privilege Vuln… |
Microsoft |
Windows 10 Version 1607 |
2026-07-14T17:04:14.496Z | 2026-08-31T15:24:18.701Z |
| cve-2026-45488 | 5.4 (v3.1) | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:18.605Z | 2026-08-31T15:24:17.334Z |
| cve-2026-48561 | 9.6 (v3.1) | Microsoft Edge Copilot Remote Code Execution Vulnerability |
Microsoft |
Microsoft Edge Copilot for Android |
2026-07-14T17:04:12.678Z | 2026-08-31T15:24:16.588Z |
| cve-2026-51705 | N/A | Incorrect access control in the setWiFiMeshName f… |
n/a |
n/a |
2026-08-31T00:00:00.000Z | 2026-08-31T15:23:54.328Z |
| cve-2026-18573 | 6.5 (v3.1) | Keycloak-services: keycloak-services: client access-ty… |
Red Hat |
Red Hat Build of Keycloak |
2026-08-02T05:28:43.444Z | 2026-08-31T15:23:52.467Z |
| cve-2026-18572 | 6.5 (v3.1) | Keycloak-services: keycloak-services: uma claim token … |
Red Hat |
Red Hat Build of Keycloak |
2026-08-02T05:18:58.904Z | 2026-08-31T15:23:45.064Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2009-000072 | Roundcube Webmail vulnerable to cross-site request forgery | 2009-11-04T15:27+09:00 | 2009-11-04T15:27+09:00 |
| jvndb-2009-000071 | Roundcube Webmail vulnerable to cross-site request forgery | 2009-11-04T15:27+09:00 | 2009-11-04T15:27+09:00 |
| jvndb-2009-000070 | SEIL/X Series and SEIL/B1 denial of service vulnerability | 2009-11-02T16:42+09:00 | 2009-11-02T16:42+09:00 |
| jvndb-2009-000069 | SEIL/X Series and SEIL/B1 buffer overflow vulnerability | 2009-11-02T16:42+09:00 | 2009-11-02T16:42+09:00 |
| jvndb-2008-000018 | Namazu cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2009-10-27T13:43+09:00 |
| jvndb-2009-000066 | Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting | 2009-10-20T15:56+09:00 | 2009-10-20T15:56+09:00 |
| jvndb-2009-000067 | Multiple Cybozu products vulnerable to cross-site scripting | 2009-10-15T15:21+09:00 | 2009-10-15T15:21+09:00 |
| jvndb-2009-000065 | SugarCRM vulnerable to cross-site scripting | 2009-10-02T16:02+09:00 | 2009-10-02T16:02+09:00 |
| jvndb-2009-000064 | Directory traversal vulnerability in multiple phpspot products | 2009-09-18T18:11+09:00 | 2009-09-18T18:11+09:00 |
| jvndb-2009-000063 | Cross-site scripting vulnerability in multiple phpspot products | 2009-09-18T18:11+09:00 | 2009-09-18T18:11+09:00 |
| jvndb-2009-000062 | XF-Section vulnerable to cross-site scripting | 2009-09-17T15:52+09:00 | 2009-09-17T15:52+09:00 |
| jvndb-2009-000061 | Third-party cookie issue in Opera | 2009-09-17T15:52+09:00 | 2009-09-17T15:52+09:00 |
| jvndb-2009-001968 | GIF File Processing Denial of Service Vulnerability in Multiple JP1 Products | 2009-09-14T10:31+09:00 | 2009-09-14T10:31+09:00 |
| jvndb-2009-001967 | Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP | 2009-09-14T10:31+09:00 | 2009-09-14T10:31+09:00 |
| jvndb-2009-000060 | Webservice-DIC yoyaku_v41 vulnerable to command injection | 2009-09-11T16:36+09:00 | 2009-09-11T16:36+09:00 |
| jvndb-2009-000059 | Buffer overflow vulnerability in Microsoft Windows | 2009-09-09T17:30+09:00 | 2009-09-09T17:30+09:00 |
| jvndb-2009-001931 | Issue of Access Control Failure in Hitachi Device Manager Server | 2009-08-31T15:52+09:00 | 2009-08-31T15:52+09:00 |
| jvndb-2009-001930 | Issue of Access Control Failure in Groupmax Scheduler Server | 2009-08-31T15:52+09:00 | 2009-08-31T15:52+09:00 |
| jvndb-2009-000058 | bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery | 2009-08-27T15:29+09:00 | 2009-08-27T15:29+09:00 |
| jvndb-2009-000055 | Site Calendar 'mycaljp' vulnerable to cross-site scripting | 2009-08-26T15:25+09:00 | 2009-08-26T15:25+09:00 |
| jvndb-2009-001893 | Hitachi Business Logic Cross-Site Scripting Vulnerability | 2009-08-25T10:50+09:00 | 2009-08-25T10:50+09:00 |
| jvndb-2009-000056 | SugarCRM vulnerable to SQL injection | 2009-08-24T16:25+09:00 | 2009-08-24T16:25+09:00 |
| jvndb-2009-000054 | ColdFusion vulnerable to cross-site scripting | 2009-08-19T16:33+09:00 | 2009-08-19T16:33+09:00 |
| jvndb-2007-000295 | APOP password recovery vulnerability | 2008-05-21T00:00+09:00 | 2009-08-06T11:39+09:00 |
| jvndb-2009-000053 | Cross-site request forgery vulnerability in FreeNAS | 2009-08-05T15:59+09:00 | 2009-08-05T15:59+09:00 |
| jvndb-2009-000052 | Cross-site scripting vulnerability in FreeNAS | 2009-08-05T15:58+09:00 | 2009-08-05T15:58+09:00 |
| jvndb-2009-000051 | Webservice-DIC yoyaku_v41 vulnerable to command injection | 2009-07-31T15:34+09:00 | 2009-07-31T15:34+09:00 |
| jvndb-2009-000050 | MySQL Connector/J vulnerable to SQL injection | 2009-07-29T15:30+09:00 | 2009-07-29T15:30+09:00 |
| jvndb-2009-000020 | Movable Type cross-site scripting vulnerability | 2009-04-28T16:18+09:00 | 2009-07-29T12:22+09:00 |
| jvndb-2009-000002 | Movable Type Enterprise cross-site scripting vulnerability | 2009-01-13T18:50+09:00 | 2009-07-29T12:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0507 | Vulnérabilité dans Spring Cloud Function | 2024-06-20T00:00:00.000000 | 2024-06-20T00:00:00.000000 |
| certfr-2024-avi-0506 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0505 | Multiples vulnérabilités dans Moodle | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0504 | Multiples vulnérabilités dans les produits Atlassian | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0503 | Multiples vulnérabilités dans Google Chrome | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0502 | Multiples vulnérabilités dans les produits VMware | 2024-06-18T00:00:00.000000 | 2024-06-18T00:00:00.000000 |
| certfr-2024-avi-0501 | Multiples vulnérabilités dans les produits Nextcloud | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0500 | Multiples vulnérabilités dans Elastic Kibana | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0499 | Vulnérabilité dans NetApp StorageGRID | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0498 | Multiples vulnérabilités dans les produits IBM | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0497 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0496 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0495 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0476 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-06-11T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0492 | Multiples vulnérabilités dans Google Android et Pixel | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0491 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0490 | Multiples vulnérabilités dans GitLab | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0489 | Multiples vulnérabilités dans les produits Microsoft | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0488 | Multiples vulnérabilités dans Microsoft Azure | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0487 | Multiples vulnérabilités dans Microsoft .Net | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0486 | Multiples vulnérabilités dans Microsoft Windows | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0485 | Multiples vulnérabilités dans Microsoft Office | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0484 | Multiples vulnérabilités dans les produits Fortinet | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0483 | Multiples vulnérabilités dans les produits Adobe | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0482 | Multiples vulnérabilités dans Mozilla Firefox | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0481 | Multiples vulnérabilités dans Google Chrome | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0480 | Vulnérabilité dans les produits Citrix | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0479 | Multiples vulnérabilités dans HPE Aruba Networking AirWave Management Platform | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0478 | Multiples vulnérabilités dans les produits Siemens | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0477 | Multiples vulnérabilités dans les produits SAP | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |