10 casos · pág. 1/1
CERT-FR advisory CERTFR-2026-AVI-1337 reports multiple vulnerabilities in Juniper Networks Session Smart Router (SSR) that let an attacker cause a security issue the vendor has not specified. The advisory is based on Juniper security bulletin JSA112528 of 16 October 2026. It gives no CVE identifiers, exploitation status, technical root ca…
CERT-FR advisory CERTFR-2026-AVI-1338 reports a vulnerability in Mattermost Server that lets an attacker cause a security issue the vendor has not specified. It affects Mattermost Server 11.7.x versions earlier than 11.7.12. The advisory is based on Mattermost security bulletin MMSA-2026-00709 of 16 October 2026. It gives no CVE identifie…
CERT-FR advisory CERTFR-2026-AVI-1327, published 16 October 2026, reports multiple vulnerabilities in the Moxa AIG-302 Series industrial computing products. Per the advisory, some of them allow an attacker to compromise data confidentiality, compromise data integrity and bypass the security policy. The affected versions are all AIG-302 Se…
CERT-FR advisory CERTFR-2026-AVI-1329, published 16 October 2026, reports multiple vulnerabilities in Google Chrome. The advisory says they allow an attacker to cause a security problem that the vendor has not specified. It covers 15 CVEs and refers to the Google security bulletins of 15 October 2026 for the fixes. It gives no exploitatio…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2…
CERT-FR advisory CERTFR-2026-AVI-1318, published 15 October 2026, reports multiple vulnerabilities in Moodle that allow a remote attacker to perform cross-site scripting (XSS) and bypass the security policy. The advisory references CVE-2026-47759, CVE-2026-47761 and CVE-2026-47762, based on two Moodle security bulletins dated 15 October 2…
CERT-FR advisory CERTFR-2026-AVI-1324, published 15 October 2026, reports multiple vulnerabilities in Symfony components that allow a remote attacker to cause a denial of service. The affected components are symfony/expression-language, symfony/http-foundation, symfony/symfony and symfony/yaml, across the 5.4, 6.x, 7.x and 8.x branches. T…
CERT-FR advisory CERTFR-2026-AVI-1309 reports a vulnerability in Zabbix that allows an attacker to compromise data confidentiality. The advisory covers several supported branches and refers to the vendor bulletin ZBX-28169, published on 14 October 2026. No CVE identifier, exploitation status, technical detail or attribution is provided in…
CERT-FR advisory CERTFR-2026-AVI-1308, published on 14 October 2026, reports multiple vulnerabilities in Google Chrome. Google released the corresponding security bulletins on 13 October 2026 for the Stable and Extended Stable desktop channels. The advisory says only that an attacker could cause a security issue "not specified by the vend…
