CVE Program partner

INCD

Israel National Cyber Directorate (INCD)

API
CVEs, 365 days28275 all time, 1 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationIsrael National Cyber Directorate (INCD)
RoleCNA
TypeCERT
Reports tomitre
ScopeVulnerability assignment related to its vulnerability coordination role.
Advisorieshttps://www.gov.il/en/departments/faq/cve_advisories

Latest CVEs · RSS

  • CVE-2026-45452 2026-10-15 · CVSS 8.3
    Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic:
  • CVE-2026-45451 2026-10-15 · CVSS 8.3
    : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniSt
  • CVE-2026-45450 2026-10-15 · CVSS 8.3
    : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Uni
  • CVE-2026-45449 2026-10-15 · CVSS 8.3
    : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. Thi
  • CVE-2026-108925 2026-10-11 · CVSS 6.1
    Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This is
  • CVE-2026-59508 2026-10-11 · CVSS 5.9
    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0.
  • CVE-2026-59507 2026-08-13 · CVSS 9.3
    : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generato
  • CVE-2026-59506 2026-08-13 · CVSS 9.3
    : Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affec
  • CVE-2026-59505 2026-08-13 · CVSS 8.6
    : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator a
  • CVE-2026-59504 2026-08-13 · CVSS 9.1
    : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue af
  • CVE-2026-59503 2026-08-13 · CVSS 9.1
    : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Porta
  • CVE-2026-59502 2026-08-13 · CVSS 5.3
    : Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator ad
  • CVE-2026-59501 2026-08-13 · CVSS 8.2
    : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator a
  • CVE-2026-59500 2026-08-13 · CVSS 10.0
    : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions). This issue affects Portal Generator a
  • CVE-2026-59499 2026-08-13 · CVSS 8.6
    : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).. T
  • CVE-2026-45448 2026-05-14 · CVSS 4.3
    CWE-601 URL redirection to untrusted site ('open redirect')
  • CVE-2026-6923 2026-05-14 · CVSS 3.8
    A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.
  • CVE-2025-55065 2026-01-01 · CVSS 7.5
    CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
  • CVE-2025-55064 2025-12-29 · CVSS 4.8
    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
  • CVE-2025-55063 2025-12-29 · CVSS 4.8
    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
  • CVE-2025-55062 2025-12-29 · CVSS 4.8
    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
  • CVE-2025-55061 2025-12-29 · CVSS 8.8
    CWE-434 Unrestricted Upload of File with Dangerous Type
  • CVE-2025-55060 2025-12-29 · CVSS 6.1
    CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
  • CVE-2025-55059 2025-11-17 · CVSS 4.8
    CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
  • CVE-2025-55058 2025-11-17 · CVSS 4.5
    CWE-20 Improper Input Validation

All CVE Program partners