Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55547 | Yamcs: Missing Authorization on Role and Privilege Enu… |
yamcs |
yamcs |
2026-08-28T17:11:34.332Z | 2026-08-28T20:30:11.670Z | |
| cve-2026-55545 | Yamcs: WebSocket subscription handlers omit the privil… |
yamcs |
yamcs |
2026-08-28T17:09:53.114Z | 2026-08-28T17:09:53.114Z | |
| cve-2026-55521 | Yamcs : Multiple Missing Function Level Access Control… |
yamcs |
yamcs |
2026-08-28T17:08:16.725Z | 2026-08-28T19:52:43.290Z | |
| cve-2026-77939 | 7.1 (v4.0) 6.5 (v3.1) | Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint |
flextype |
flextype |
2026-08-28T17:06:51.132Z | 2026-08-29T11:47:55.894Z |
| cve-2026-55511 | Yamcs: Authenticated RCE via StreamSQL aggregate-compi… |
yamcs |
yamcs |
2026-08-28T17:05:02.307Z | 2026-08-28T17:05:02.307Z | |
| cve-2026-55068 | free5GC: NRF nnrf-nfm lacks NF Profile input validatio… |
free5gc |
free5gc |
2026-08-28T16:57:12.269Z | 2026-08-28T16:57:12.269Z | |
| cve-2026-55067 | Vikunja: Authenticated cross-tenant kanban-bucket relo… |
go-vikunja |
vikunja |
2026-08-28T16:53:59.656Z | 2026-08-28T19:55:24.677Z | |
| cve-2026-55066 | Vikunja: Cross-tenant IDOR in kanban move-task endpoin… |
go-vikunja |
vikunja |
2026-08-28T16:51:48.114Z | 2026-08-28T16:51:48.114Z | |
| cve-2026-55065 | Vikunja: Improper Authorization and Authorization Bypa… |
go-vikunja |
vikunja |
2026-08-28T16:40:27.706Z | 2026-08-28T16:40:27.706Z | |
| cve-2026-55064 | Vikunja incomplete fix for CVE-2026-35595: Write-only … |
go-vikunja |
vikunja |
2026-08-28T16:38:38.293Z | 2026-08-28T20:29:30.143Z | |
| cve-2026-54766 | Vikunja: Project duplication bypasses write-permission… |
go-vikunja |
vikunja |
2026-08-28T16:36:57.857Z | 2026-08-28T19:59:25.820Z | |
| cve-2026-54788 | dd-trace-rs: Unbounded W3C tracestate parsing may lead… |
DataDog |
dd-trace-rs |
2026-08-28T16:33:49.032Z | 2026-08-28T16:33:49.032Z | |
| cve-2026-55834 | Pocket ID: Open Redirect on the OIDC /authorize page v… |
pocket-id |
pocket-id |
2026-08-28T16:27:58.324Z | 2026-08-28T20:28:38.924Z | |
| cve-2026-55569 | aqua: Archive extraction in aqua follows attacker-plan… |
aquaproj |
aqua |
2026-08-28T16:26:51.328Z | 2026-08-28T16:26:51.328Z | |
| cve-2026-82343 | 6.1 (v3.1) | Gimp: heap out-of-bounds read and stack out-of-bounds … |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-28T16:26:13.284Z | 2026-08-28T16:26:13.284Z |
| cve-2026-54755 | Klever-Go: Integer overflow in split-royalty validatio… |
klever-io |
klever-go |
2026-08-28T16:23:44.276Z | 2026-08-28T16:23:44.276Z | |
| cve-2026-54754 | Klever-Go: Marketplace settlement mints KLV when refer… |
klever-io |
klever-go |
2026-08-28T16:20:06.585Z | 2026-08-28T16:20:06.585Z | |
| cve-2026-82306 | 6.5 (v3.1) | StarRocks Query Detail Endpoint Returns Every User's Q… |
StarRocks |
starrocks |
2026-08-28T16:19:08.668Z | 2026-08-28T16:19:08.668Z |
| cve-2026-82291 | 8.1 (v3.1) | HeyForm Reflects Any Origin in CORS Responses While Al… |
heyform |
heyform |
2026-08-28T16:19:07.930Z | 2026-08-29T11:48:21.218Z |
| cve-2026-82290 | 6 (v4.0) 5.3 (v3.1) | Chainlit Feedback Endpoints Missing Ownership Validation |
Chainlit |
chainlit |
2026-08-28T16:19:07.258Z | 2026-08-28T16:19:07.258Z |
| cve-2026-82289 | 8.3 (v4.0) 7.4 (v3.1) | Gitingest Prefix-Based Git Host Check Enables Request … |
coderamp-labs |
gitingest |
2026-08-28T16:19:06.587Z | 2026-08-28T20:21:01.003Z |
| cve-2026-82288 | 8.7 (v4.0) 7.5 (v3.1) | Stable Diffusion WebUI Credential Disclosure via /sdap… |
AUTOMATIC1111 |
stable-diffusion-webui |
2026-08-28T16:19:05.909Z | 2026-08-28T20:22:40.670Z |
| cve-2026-82287 | 8.6 (v4.0) 8.1 (v3.1) | Rybbit Reflects Any Origin in CORS Responses While All… |
rybbit-io |
rybbit |
2026-08-28T16:19:05.231Z | 2026-08-28T16:19:05.231Z |
| cve-2026-82286 | 8.8 (v4.0) 8.6 (v3.1) | gpt-crawler Arbitrary File Write via outputFileName Pa… |
BuilderIO |
gpt-crawler |
2026-08-28T16:19:04.531Z | 2026-08-28T16:19:04.531Z |
| cve-2026-82285 | 8.8 (v4.0) 8.2 (v3.1) | BISHENG Unauthenticated Server-Side Request Forgery vi… |
dataelement |
bisheng |
2026-08-28T16:19:03.833Z | 2026-08-28T16:19:03.833Z |
| cve-2026-82284 | 8.6 (v4.0) 8.1 (v3.1) | Quivr Chat Endpoints Missing Ownership Validation |
QuivrHQ |
quivr |
2026-08-28T16:19:03.152Z | 2026-08-28T20:23:13.732Z |
| cve-2026-82283 | 8.6 (v4.0) 8.1 (v3.1) | VoltAgent Memory API Handlers Missing Ownership Checks |
VoltAgent |
voltagent |
2026-08-28T16:19:02.446Z | 2026-08-28T20:27:20.972Z |
| cve-2026-82282 | 8.8 (v4.0) 8 (v3.1) | Atlantis GitHub App Setup Endpoint Returns App Credent… |
runatlantis |
atlantis |
2026-08-28T16:19:01.750Z | 2026-08-28T16:19:01.750Z |
| cve-2026-82281 | 9.1 (v4.0) 7.4 (v3.1) | Kotaemon Missing Ownership Check in Conversation Functions |
Cinnamon |
kotaemon |
2026-08-28T16:19:01.076Z | 2026-08-28T16:19:01.076Z |
| cve-2026-82280 | 7.1 (v4.0) 7.1 (v3.1) | Quivr Prompt Endpoints Missing Ownership Validation |
QuivrHQ |
quivr |
2026-08-28T16:19:00.389Z | 2026-08-28T16:19:00.389Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000083 | BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path | 2025-10-10T13:56+09:00 | 2025-10-10T13:56+09:00 |
| jvndb-2025-015451 | Multiple vulnerabilities in FUJI Electric V-SFT | 2025-10-09T13:39+09:00 | 2025-10-09T13:39+09:00 |
| jvndb-2025-000082 | The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries | 2025-10-06T15:38+09:00 | 2025-10-06T15:38+09:00 |
| jvndb-2025-015061 | Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation | 2025-10-06T13:52+09:00 | 2025-10-06T13:52+09:00 |
| jvndb-2025-014967 | Multiple vulnerabilities in multiple Keyence products | 2025-10-03T11:19+09:00 | 2025-12-23T14:36+09:00 |
| jvndb-2025-014793 | NIHON KOHDEN Central Monitor CNS-6201 vulnerable to NULL pointer dereference | 2025-10-01T11:35+09:00 | 2025-10-27T12:28+09:00 |
| jvndb-2025-014642 | Multiple vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers | 2025-09-30T11:50+09:00 | 2025-09-30T11:50+09:00 |
| jvndb-2025-000081 | DataSpider Servista improper restriction of XML external entity references | 2025-09-29T14:44+09:00 | 2025-10-07T16:54+09:00 |
| jvndb-2025-014105 | OMRON SOCIAL SOLUTIONS Uninterruptible Power Supply (UPS) management application registers a Windows service with an unquoted file path | 2025-09-19T16:21+09:00 | 2025-09-19T16:21+09:00 |
| jvndb-2025-014104 | Multiple vulnerabilities in I-O DATA wireless LAN routers | 2025-09-19T14:58+09:00 | 2025-09-19T14:58+09:00 |
| jvndb-2025-014081 | Multiple Brother and its OEM products with weak initial administrator passwords | 2025-09-19T10:52+09:00 | 2025-09-19T10:52+09:00 |
| jvndb-2025-000079 | UNIVERGE IX/IX-R/IX-V series routers provided by NEC Corporation vulnerable to cross-site scripting | 2025-09-18T17:43+09:00 | 2025-09-18T17:43+09:00 |
| jvndb-2025-000078 | Century HW RAID Manager registers a Windows service with an unquoted file path | 2025-09-17T13:45+09:00 | 2025-09-17T13:45+09:00 |
| jvndb-2025-000048 | WTW-EAGLE App vulnerable to improper server certificate validation | 2025-09-12T13:57+09:00 | 2025-09-12T13:57+09:00 |
| jvndb-2025-000077 | RICOH Streamline NX vulnerable to tampering with operation history | 2025-09-08T13:42+09:00 | 2025-09-24T16:53+09:00 |
| jvndb-2025-000072 | Obsidian GitHub Copilot Plugin stores sensitive information in cleartext | 2025-09-05T16:52+09:00 | 2025-09-05T16:52+09:00 |
| jvndb-2025-000073 | RATOC RAID Monitoring Manager for Windows registers a Windows service with an unquoted file path | 2025-09-05T16:20+09:00 | 2025-09-05T16:20+09:00 |
| jvndb-2025-000071 | "Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly | 2025-09-05T15:12+09:00 | 2025-09-05T15:12+09:00 |
| jvndb-2025-000075 | Multiple vulnerabilities in TkEasyGUI | 2025-09-05T14:53+09:00 | 2025-09-05T14:53+09:00 |
| jvndb-2025-000069 | Web Caster V130 vulnerable to cross-site request forgery | 2025-09-03T14:23+09:00 | 2025-09-03T14:23+09:00 |
| jvndb-2025-000070 | "Gunosy" App vulnerable to insertion of sensitive information into sent data | 2025-09-02T14:20+09:00 | 2025-09-09T09:51+09:00 |
| jvndb-2025-000068 | Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection | 2025-09-01T16:21+09:00 | 2025-09-01T16:21+09:00 |
| jvndb-2025-012659 | Denial-of-service (DoS) vulnerability in Konica Minolta bizhub series | 2025-09-01T15:22+09:00 | 2025-09-01T15:22+09:00 |
| jvndb-2025-000067 | Multiple vulnerabilities in multiple iND products | 2025-08-29T14:47+09:00 | 2025-08-29T14:47+09:00 |
| jvndb-2025-000066 | Improper file access permission settings in multiple i-FILTER products | 2025-08-27T19:50+09:00 | 2025-09-29T13:45+09:00 |
| jvndb-2025-000064 | Multiple vulnerabilities in SS1 | 2025-08-27T15:13+09:00 | 2025-08-27T15:13+09:00 |
| jvndb-2025-000065 | ScanSnap Manager installers vulnerable to privilege escalation | 2025-08-27T14:22+09:00 | 2025-08-27T14:22+09:00 |
| jvndb-2025-000063 | Western Digital Kitfox registers a Windows service with an unquoted file path | 2025-08-22T13:37+09:00 | 2025-08-22T13:37+09:00 |
| jvndb-2025-000062 | Multiple vulnerabilities in Group-Office | 2025-08-21T14:03+09:00 | 2025-08-21T14:03+09:00 |
| jvndb-2025-011884 | FUJIFILM Healthcare Americas Synapse Mobility vulnerable to Privilege Escalation | 2025-08-21T11:49+09:00 | 2025-08-25T10:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0855 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0854 | Vulnérabilité dans Microsoft Edge | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0853 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0852 | Multiples vulnérabilités dans les produits Juniper Networks | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0851 | Multiples vulnérabilités dans Traefik | 2026-07-09T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0850 | Multiples vulnérabilités dans GitLab | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0849 | Multiples vulnérabilités dans Wireshark | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0848 | Multiples vulnérabilités dans Google Chrome | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0847 | Multiples vulnérabilités dans Joomla! | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0846 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0845 | Multiples vulnérabilités dans les produits Foxit | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0844 | Vulnérabilité dans Synacor Zimbra Collaboration | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0843 | Multiples vulnérabilités dans PHP | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0842 | Multiples vulnérabilités dans Postfix | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0841 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0840 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0839 | Vulnérabilité dans Mozilla Firefox pour iOS | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0838 | Multiples vulnérabilités dans SPIP | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0837 | Vulnérabilité dans PostgreSQL JDBC | 2026-07-06T00:00:00.000000 | 2026-07-06T00:00:00.000000 |
| certfr-2026-avi-0836 | Multiples vulnérabilités dans OpenSSH | 2026-07-06T00:00:00.000000 | 2026-07-06T00:00:00.000000 |
| certfr-2026-avi-0835 | Multiples vulnérabilités dans Roundcube | 2026-07-06T00:00:00.000000 | 2026-07-21T00:00:00.000000 |
| certfr-2026-avi-0834 | Multiples vulnérabilités dans les produits IBM | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0833 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0832 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0831 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0830 | Vulnérabilité dans FreeBSD | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0829 | Multiples vulnérabilités dans Google Chrome | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0828 | Vulnérabilité dans CPython | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0827 | Multiples vulnérabilités dans Mozilla Thunderbird | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0826 | Multiples vulnérabilités dans les produits Elastic | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-ale-004 | Vulnérabilité dans Microsoft Internet Explorer | 2010-03-10T00:00:00.000000 | 2010-03-31T00:00:00.000000 |
| certa-2010-ale-003 | Vulnérabilité dans Microsoft VBScript | 2010-03-02T00:00:00.000000 | 2010-04-13T00:00:00.000000 |
| certa-2010-ale-002 | Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows | 2010-01-21T00:00:00.000000 | 2010-02-10T00:00:00.000000 |
| certa-2010-ale-001 | Vulnérabilité dans Microsoft Internet Explorer | 2010-01-15T00:00:00.000000 | 2010-01-22T00:00:00.000000 |
| certa-2009-ale-023 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-12-15T00:00:00.000000 | 2010-01-13T00:00:00.000000 |
| certa-2009-ale-022 | Vulnérabilité dans TANDBERG MXP | 2009-12-11T00:00:00.000000 | 2009-12-11T00:00:00.000000 |
| certa-2009-ale-021 | Vulnérabilité dans Adobe Illustrator | 2009-12-10T00:00:00.000000 | 2010-01-08T00:00:00.000000 |
| certa-2009-ale-020 | Vulnérabilité dans Internet Explorer | 2009-11-21T00:00:00.000000 | 2009-12-09T00:00:00.000000 |
| certa-2009-ale-019 | Vulnérabilité dans Windows 7 et Windows Server 2008 R2 | 2009-11-16T00:00:00.000000 | 2010-06-10T00:00:00.000000 |
| certa-2009-ale-018 | Vulnérabilité dans Adobe Reader et Adobe Acrobat | 2009-10-09T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-017 | Vulnérabilités dans l'implémentation TCP/IP de divers produits | 2009-09-09T00:00:00.000000 | 2013-02-19T00:00:00.000000 |
| certa-2009-ale-016 | Vulnérabilité de SMBv2 dans Microsoft Windows | 2009-09-09T00:00:00.000000 | 2009-10-13T00:00:00.000000 |
| certa-2009-ale-015 | Vulnérabilités du serveur FTP de Microsoft IIS | 2009-09-01T00:00:00.000000 | 2009-10-14T00:00:00.000000 |
| certa-2009-ale-014 | Multiples vulnérabilités du client de messagerie Mozilla Thunderbird | 2009-08-07T00:00:00.000000 | 2013-02-05T00:00:00.000000 |
| certa-2009-ale-013 | Vulnérabilité Shockwave Flash pour les produits Adobe | 2009-07-23T00:00:00.000000 | 2009-07-31T00:00:00.000000 |
| certa-2009-ale-012 | Vulnérabilité dans Mozilla Firefox | 2009-07-15T00:00:00.000000 | 2009-07-17T00:00:00.000000 |
| certa-2009-ale-011 | Vulnérabilité dans Microsoft Office Web Components Control | 2009-07-13T00:00:00.000000 | 2009-08-12T00:00:00.000000 |
| certa-2009-ale-010 | Vulnérabilité dans le contrôle ActiveX Microsoft Video | 2009-07-07T00:00:00.000000 | 2009-07-15T00:00:00.000000 |
| certa-2009-ale-009 | Vulnérabilité dans Microsoft DirectShow | 2009-05-29T00:00:00.000000 | 2009-07-14T00:00:00.000000 |
| certa-2009-ale-008 | Vulnérabilité Java de Mac OS X | 2009-05-20T00:00:00.000000 | 2009-06-17T00:00:00.000000 |
| certa-2009-ale-007 | Vulnérabilité WebDAV sous Microsoft IIS | 2009-05-18T00:00:00.000000 | 2009-06-10T00:00:00.000000 |
| certa-2009-ale-006 | Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat | 2009-04-28T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-005 | Vulnérabilité de PowerPoint | 2009-04-03T00:00:00.000000 | 2009-05-13T00:00:00.000000 |
| certa-2009-ale-004 | Vulnérabilité dans Mozilla Firefox | 2009-03-27T00:00:00.000000 | 2009-03-30T00:00:00.000000 |
| certa-2009-ale-003 | Vulnérabilité dans Apple Mac OS X | 2009-03-24T00:00:00.000000 | 2009-06-02T00:00:00.000000 |
| certa-2009-ale-002 | Vulnérabilité dans Microsoft Excel | 2009-02-25T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-ale-001 | Vulnérabilité dans l'interprétation JBIG2 des produits Adobe | 2009-02-20T00:00:00.000000 | 2009-03-20T00:00:00.000000 |
| certa-2008-ale-017 | Vulnérabilité dans Microsoft SQL Server | 2008-12-12T00:00:00.000000 | 2009-02-11T00:00:00.000000 |
| certa-2008-ale-016 | Vulnérabilité dans Microsoft Internet Explorer | 2008-12-10T00:00:00.000000 | 2008-12-17T00:00:00.000000 |
| certa-2008-ale-015 | Vulnérabilité dans le convertisseur de texte de WordPad | 2008-12-10T00:00:00.000000 | 2009-04-15T00:00:00.000000 |