8 casos · pág. 1/1
CERT-FR published advisory CERTFR-2026-AVI-1367 on multiple vulnerabilities in Node.js. According to the advisory, some of them allow an attacker to achieve remote arbitrary code execution, bypass the security policy, or trigger an additional security issue that the vendor has not specified. The advisory is based on the Node.js october-20…
The CERT-FR published advisory CERTFR-2026-AVI-1363 on multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE). Exploitation can lead to remote arbitrary code execution, breach of data confidentiality and security policy bypass. The advisory relays the vendor's security bulletin of 21 October 2026 and lists 1…
CERT-FR advisory CERTFR-2026-AVI-1320, published 15 October 2026, reports multiple vulnerabilities in SonicWall Network Security Manager (NSM) On-Prem that allow a remote attacker to execute arbitrary code and bypass the security policy. The advisory references CVE-2026-100232 and CVE-2026-96540, based on SonicWall bulletin SNWLID-2026-00…
CERT-FR has published advisory CERTFR-2026-AVI-1352 on multiple vulnerabilities in Oracle PeopleSoft. The advisory says some flaws allow an attacker to achieve remote arbitrary code execution, remote denial of service and breaches of data confidentiality. It also lists data integrity violations and security policy bypass as impacts. The a…
CERT-FR advisory CERTFR-2026-AVI-1315 reports multiple vulnerabilities in Microsoft Azure components, published on 14 October 2026. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft published the corresponding security bulletins on 13 October 2026. …
CERT-FR has published advisory CERTFR-2026-AVI-1345 on multiple vulnerabilities in Stormshield products. According to the advisory, some flaws allow an attacker to achieve arbitrary code execution, remote denial of service and breaches of data confidentiality. Others allow security policy bypass and indirect remote code injection (XSS). T…
CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…
CERT-FR advisory CERTFR-2026-AVI-1340 reports multiple vulnerabilities in Roundcube Webmail. According to the advisory, an attacker could exploit them to achieve remote arbitrary code execution, server-side request forgery (SSRF) and cross-site scripting (XSS). The advisory's impact list also includes CSRF and security policy bypass. Fixe…
