Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75121 | 8.6 (v4.0) 7.2 (v3.1) | PLANET GS-4210-16P2S Command Injection via dispatcher.… |
PLANET Technology Corp. |
PLANET GS-4210-16P2S |
2026-08-28T15:29:54.168Z | 2026-08-28T15:29:54.168Z |
| cve-2026-56854 | N/A | Source-address critical option not enforced for non-pu… |
golang.org/x/crypto |
golang.org/x/crypto/ssh |
2026-08-28T15:14:26.918Z | 2026-08-28T20:17:17.397Z |
| cve-2026-4378 | 5.4 (v3.1) | Stored XSS in Akıllı Ticaret's E-Commerce Pack |
Akilli Ticaret Software Technologies Ltd. |
E-Commerce Pack |
2026-08-28T15:05:22.171Z | 2026-08-28T18:17:07.888Z |
| cve-2026-82330 | 6.1 (v3.1) | Gimp: heap out-of-bounds read in pvr vq (compressed) d… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-28T14:51:01.834Z | 2026-08-28T16:07:52.222Z |
| cve-2026-81341 | 6.5 (v3.1) | wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS … |
wolfSSL Inc. |
wolfEngine |
2026-08-28T14:43:43.099Z | 2026-08-28T18:17:50.111Z |
| cve-2026-81020 | 7.4 (v3.1) | wolfEngine reuses the AES-GCM nonce on every TLS 1.2 /… |
wolfSSL Inc. |
wolfEngine |
2026-08-28T14:42:59.202Z | 2026-08-28T18:19:58.580Z |
| cve-2026-81019 | 7.4 (v3.1) | wolfProvider reuses the AES-GCM nonce on every TLS 1.2… |
wolfSSL Inc. |
wolfProvider |
2026-08-28T14:42:01.361Z | 2026-08-28T18:22:34.803Z |
| cve-2026-82220 | 5.3 (v3.1) | WordPress Forminator plugin <= 1.57.1 - Other vulnerab… |
WPMU DEV |
Forminator |
2026-08-28T14:33:37.550Z | 2026-08-28T16:04:12.622Z |
| cve-2026-81767 | 7.5 (v3.1) | WordPress Simple Payment plugin <= 2.5.2 - Broken Acce… |
yalla ya! |
Simple Payment |
2026-08-28T14:33:36.833Z | 2026-08-28T16:04:28.368Z |
| cve-2026-81761 | 4.3 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:36.126Z | 2026-08-28T15:52:16.879Z |
| cve-2026-81760 | 7.1 (v3.1) | WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Sc… |
Crocoblock |
JetEngine |
2026-08-28T14:33:35.404Z | 2026-08-28T18:35:55.458Z |
| cve-2026-81759 | 5.4 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:34.687Z | 2026-08-28T16:08:16.510Z |
| cve-2026-81757 | 7.2 (v3.1) | WordPress Rank Math SEO plugin <= 1.0.276 - Remote Cod… |
Rank Math SEO |
Rank Math SEO |
2026-08-28T14:33:33.960Z | 2026-08-28T16:03:21.825Z |
| cve-2026-81299 | 4.3 (v3.1) | WordPress WP Job Portal plugin <= 2.5.9 - Insecure Dir… |
Ahmad |
WP Job Portal |
2026-08-28T14:33:33.228Z | 2026-08-28T16:06:39.220Z |
| cve-2026-81285 | 7.5 (v3.1) | WordPress Smush Image Compression and Optimization plu… |
WPMU DEV |
Smush Image Compression and Optimization |
2026-08-28T14:33:32.509Z | 2026-08-28T15:52:24.225Z |
| cve-2026-81284 | 4.3 (v3.1) | WordPress ACF Extended plugin <= 0.9.2.6 - Broken Acce… |
ACF Extended |
ACF Extended |
2026-08-28T14:33:31.799Z | 2026-08-28T18:35:55.627Z |
| cve-2026-82227 | 8.5 (v3.1) | WordPress WPBulky plugin <= 1.2.2 - SQL Injection vuln… |
VillaTheme |
WPBulky |
2026-08-28T14:33:31.083Z | 2026-08-28T16:08:35.467Z |
| cve-2026-82328 | 6.1 (v3.1) | Gimp: heap out-of-bounds read in ico loader via unvali… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-28T14:21:08.565Z | 2026-08-28T16:07:40.526Z |
| cve-2026-82327 | 5.5 (v3.1) | Libsolv: libsolv: out-of-bounds write in repo_write() … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-28T14:21:04.777Z | 2026-08-28T16:08:04.589Z |
| cve-2026-5953 | 6.1 (v3.1) | Reflected XSS in Ceviz Informatics's Web Design |
Ceviz Informatics Inc. |
Web Design |
2026-08-28T14:04:33.302Z | 2026-08-28T18:22:59.845Z |
| cve-2026-5800 | 6.1 (v3.1) | Reflected XSS in Dayneks Software's E-Commerce Platform |
Dayneks Software Industry and Trade Inc. |
E-Commerce Platform |
2026-08-28T13:58:21.087Z | 2026-08-28T18:23:25.795Z |
| cve-2026-82324 | 6.1 (v3.1) | Gimp: heap out-of-bounds reads in iff/ilbm loader from… |
Red Hat |
Red Hat Enterprise Linux 6 |
2026-08-28T13:47:25.623Z | 2026-08-28T13:47:25.623Z |
| cve-2026-15603 | 5.3 (v3.1) | morgan vulnerable to Log Forging via unescaped Unicode… |
morgan |
morgan |
2026-08-28T13:41:49.521Z | 2026-08-28T18:23:58.959Z |
| cve-2026-19412 | 8.7 (v4.0) | Hardcoded Credentials Vulnerability in CP Plus CP-XR-D… |
CP Plus |
CP-XR-DE21-S Router |
2026-08-28T13:39:47.514Z | 2026-08-28T18:24:37.115Z |
| cve-2026-13761 | 8.8 (v4.0) | Pega Platform versions 7.1.0 through 25.1.2 are affect… |
Pegasystems |
Pega Infinity |
2026-08-28T13:11:34.206Z | 2026-08-28T18:25:21.861Z |
| cve-2026-58107 | 5.5 (v4.0) | Authenticated Remote Denial of Service via Unbounded z… |
Ericsson |
CodeChecker |
2026-08-28T12:57:50.134Z | 2026-08-28T18:26:17.181Z |
| cve-2026-58106 | 2 (v4.0) | Incomplete fix for CVE-2025-40843: safe_strcpy is call… |
Ericsson |
CodeChecker |
2026-08-28T12:46:57.863Z | 2026-08-28T18:27:22.857Z |
| cve-2026-82181 | 6.8 (v4.0) 5.5 (v3.1) | Le-yan｜Medical Practice Management System - Sensitive … |
Le-yan |
Medical Practice Management System |
2026-08-28T11:52:48.669Z | 2026-08-28T18:27:53.436Z |
| cve-2026-82078 | 9.4 (v4.0) | PaperCut MF/NG: Unsafe Dynamic Class Loading in Databa… |
PaperCut |
PaperCut MF/NG |
2026-08-28T11:45:25.388Z | 2026-08-29T03:55:51.930Z |
| cve-2026-81578 | 8.8 (v4.0) | PaperCut MF/NG: Authentication Bypass |
PaperCut |
PaperCut MF/NG |
2026-08-28T11:39:45.402Z | 2026-08-29T03:55:50.126Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-007595 | Multiple vulnerabilities in Web Connection of Konica Minolta MFPs | 2025-07-01T14:02+09:00 | 2025-07-01T14:02+09:00 |
| jvndb-2025-000046 | SLNX Help Documentation of RICOH Streamline NX vulnerable to reflected cross-site scripting | 2025-06-30T15:45+09:00 | 2025-06-30T15:45+09:00 |
| jvndb-2025-007552 | Multiple vulnerabilities in TB-eye network recorders and AHD recorders | 2025-06-30T14:45+09:00 | 2025-06-30T14:45+09:00 |
| jvndb-2025-007521 | Multiple Brother driver installers for Windows vulnerable to privilege escalation | 2025-06-27T09:37+09:00 | 2025-08-19T11:29+09:00 |
| jvndb-2025-007519 | Multiple vulnerabilities in multiple BROTHER products | 2025-06-26T18:15+09:00 | 2025-09-22T10:16+09:00 |
| jvndb-2025-000043 | Multiple vulnerabilities in iroha Board | 2025-06-26T15:13+09:00 | 2025-06-26T15:13+09:00 |
| jvndb-2025-000044 | Denial-of-service (DoS) vulnerabilities in multiple Apache products | 2025-06-26T14:41+09:00 | 2025-10-01T14:18+09:00 |
| jvndb-2025-000042 | Inefficient regular expressions in GROWI | 2025-06-24T15:25+09:00 | 2025-06-24T15:25+09:00 |
| jvndb-2025-000041 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2025-06-24T14:50+09:00 | 2026-02-03T15:35+09:00 |
| jvndb-2025-007390 | Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385) | 2025-06-24T11:18+09:00 | 2025-06-24T11:18+09:00 |
| jvndb-2025-000040 | KCM3100 vulnerable to authentication bypass using an alternate path or channel | 2025-06-18T13:42+09:00 | 2025-06-18T13:42+09:00 |
| jvndb-2025-000039 | Multiple vulnerabilities in RICOH Streamline NX PC Client | 2025-06-13T16:09+09:00 | 2025-06-13T16:09+09:00 |
| jvndb-2025-000038 | UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints | 2025-06-12T15:56+09:00 | 2025-06-12T15:56+09:00 |
| jvndb-2025-000037 | Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery | 2025-06-06T13:56+09:00 | 2025-06-06T13:56+09:00 |
| jvndb-2025-000036 | TimeWorks vulnerable to path traversal | 2025-06-03T15:35+09:00 | 2025-06-03T15:35+09:00 |
| jvndb-2025-000035 | Improper file access permission settings in PC Time Tracer | 2025-06-03T14:40+09:00 | 2025-06-03T14:40+09:00 |
| jvndb-2025-000034 | Multiple vulnerabilities in wivia 5 | 2025-05-30T15:57+09:00 | 2025-05-30T15:57+09:00 |
| jvndb-2025-000032 | Mailform Pro CGI generating error messages containing sensitive information | 2025-05-26T14:22+09:00 | 2025-05-26T14:22+09:00 |
| jvndb-2025-000033 | Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' | 2025-05-23T15:36+09:00 | 2025-05-23T15:36+09:00 |
| jvndb-2025-005467 | Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers | 2025-05-22T15:03+09:00 | 2025-05-22T15:03+09:00 |
| jvndb-2025-005107 | Multiple vulnerabilities in V-SFT | 2025-05-16T14:32+09:00 | 2025-05-16T14:32+09:00 |
| jvndb-2025-005057 | Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' | 2025-05-15T18:27+09:00 | 2025-05-15T18:27+09:00 |
| jvndb-2025-005050 | Multiple vulnerabilities in a-blog cms | 2025-05-15T18:11+09:00 | 2025-05-15T18:11+09:00 |
| jvndb-2025-000031 | Pgpool-II vulnerable to authentication bypass by primary weakness | 2025-05-15T16:14+09:00 | 2025-05-15T16:14+09:00 |
| jvndb-2025-004863 | Panasonic IR Control Hub vulnerable to Unauthorised firmware loading | 2025-05-14T11:30+09:00 | 2025-05-14T11:30+09:00 |
| jvndb-2025-000030 | Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2025-05-12T18:00+09:00 | 2025-07-17T10:06+09:00 |
| jvndb-2025-004671 | Multiple vulnerabilities in GL-MT2500 and GL-MT2500A | 2025-05-12T17:52+09:00 | 2025-05-12T17:52+09:00 |
| jvndb-2025-004079 | Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS | 2025-04-30T11:46+09:00 | 2025-04-30T11:46+09:00 |
| jvndb-2025-004076 | Security Update for Trend Micro Trend Vision One (April 2025) | 2025-04-30T10:38+09:00 | 2025-04-30T10:38+09:00 |
| jvndb-2025-000029 | Multiple vulnerabilities in Quick Agent | 2025-04-25T13:49+09:00 | 2025-04-25T13:49+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0795 | Multiples vulnérabilités dans Squid | 2026-06-23T00:00:00.000000 | 2026-06-23T00:00:00.000000 |
| certfr-2026-avi-0794 | Multiples vulnérabilités dans Moodle | 2026-06-23T00:00:00.000000 | 2026-06-23T00:00:00.000000 |
| certfr-2026-avi-0793 | Multiples vulnérabilités dans Postfix | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0792 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0791 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0790 | Vulnérabilité dans CPython pour Windows | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0789 | Vulnérabilité dans PaperCut Print Deploy Client | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0788 | Multiples vulnérabilités dans les produits IBM | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0787 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0786 | Multiples vulnérabilités dans Node.js | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0785 | Vulnérabilité dans Traefik | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0784 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0783 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0782 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0781 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0780 | Vulnérabilité dans Apereo CAS | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0779 | Multiples vulnérabilités dans Google Pixel | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0778 | Multiples vulnérabilités dans Google Android 17 | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0777 | Multiples vulnérabilités dans Mattermost Desktop App | 2026-06-18T00:00:00.000000 | 2026-08-18T00:00:00.000000 |
| certfr-2026-avi-0776 | Vulnérabilité dans Synacor Zimbra Collaboration | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0775 | Multiples vulnérabilités dans Nginx | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0774 | Multiples vulnérabilités dans Splunk AI Toolkit | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0773 | Multiples vulnérabilités dans les produits Atlassian | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0772 | Multiples vulnérabilités dans les produits Cisco | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0771 | Multiples vulnérabilités dans Drupal | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0770 | Multiples vulnérabilités dans les produits Mitel | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0769 | Multiples vulnérabilités dans Oracle Weblogic | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0768 | Multiples vulnérabilités dans Oracle Virtualization | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0767 | Multiples vulnérabilités dans Oracle Systems | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0766 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-ale-001 | Vulnérablité dans Apple Quicktime | 2007-01-04T00:00:00.000000 | 2007-01-24T00:00:00.000000 |
| certa-2006-ale-014 | Vulnérabilités dans Microsoft Word | 2006-12-06T00:00:00.000000 | 2007-02-14T00:00:00.000000 |
| certa-2006-ale-013 | Vulnérabilité de MacOS X | 2006-11-23T00:00:00.000000 | 2007-02-16T00:00:00.000000 |
| certa-2006-ale-012 | Vulnérabilité de Microsoft PowerPoint | 2006-10-13T00:00:00.000000 | 2008-10-09T00:00:00.000000 |
| certa-2006-ale-011 | Multiples vulnérabilités de produits Microsoft | 2006-08-31T00:00:00.000000 | 2006-10-11T00:00:00.000000 |
| certa-2006-ale-010 | Vulnérabilité dans Internet Explorer | 2006-08-23T00:00:00.000000 | 2006-08-25T00:00:00.000000 |
| certa-2006-ale-009 | Vulnérabilité de la librairie MSO.DLL dans Microsoft Office | 2006-07-15T00:00:00.000000 | 2006-08-09T00:00:00.000000 |
| certa-2006-ale-008 | Vulnérabilité d'ExtCalendar | 2006-07-11T00:00:00.000000 | 2006-07-11T00:00:00.000000 |
| certa-2006-ale-007 | Vulnérabilité dans Microsoft Excel | 2006-06-16T00:00:00.000000 | 2006-07-12T00:00:00.000000 |
| certa-2006-ale-006 | Vulnérabilité dans Microsoft Word | 2006-05-20T00:00:00.000000 | 2006-06-14T00:00:00.000000 |
| certa-2006-ale-005 | Vulnérabilité dans Firefox | 2006-04-26T00:00:00.000000 | 2006-05-02T00:00:00.000000 |
| certa-2006-ale-004 | Multiples vulnérabilités sous Mac OS X d'Apple | 2006-04-22T00:00:00.000000 | 2006-05-12T00:00:00.000000 |
| certa-2006-ale-003 | Vulnérabilité de Sendmail | 2006-03-24T00:00:00.000000 | 2006-03-24T00:00:00.000000 |
| certa-2006-ale-002 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2006-03-23T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2006-ale-001 | Vulnérabilité dans le traitement de certains fichiers sous MAC OS X | 2006-02-22T00:00:00.000000 | 2006-03-02T00:00:00.000000 |
| certa-2005-ale-019 | Exploitation d'une vulnérabilité mal corrigée dans Microsoft Windows | 2005-12-28T00:00:00.000000 | 2006-01-06T00:00:00.000000 |
| certa-2005-ale-018 | Vulnérabilité du navigateur Firefox | 2005-12-08T00:00:00.000000 | 2005-12-08T00:00:00.000000 |
| certa-2005-ale-017 | Vulnérabilité de Microsoft Internet Explorer | 2005-11-21T00:00:00.000000 | 2005-12-14T00:00:00.000000 |
| certa-2005-ale-016 | Vulnérabilité de Microsoft Windows RPC | 2005-11-18T00:00:00.000000 | 2005-11-18T00:00:00.000000 |
| certa-2005-ale-014 | Vulnérabilité d'un grand nombre d'antivirus | 2005-10-11T00:00:00.000000 | 2005-10-11T00:00:00.000000 |
| certa-2005-ale-013 | Vulnérabilité dans Citrix Metaframe Presentation | 2005-10-07T00:00:00.000000 | 2013-06-06T00:00:00.000000 |
| certa-2005-ale-012 | Vulnérabilité de Netscape 8 | 2005-09-27T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2005-ale-011 | Vulnérabilité de HelixPlayer et RealPlayer | 2005-09-27T00:00:00.000000 | 2005-10-10T00:00:00.000000 |
| certa-2005-ale-010 | Vulnérabilité dans Qpopper | 2005-09-27T00:00:00.000000 | 2005-09-27T00:00:00.000000 |
| certa-2005-ale-009 | Vulnérabilité dans Mozilla Thunderbird | 2005-09-23T00:00:00.000000 | 2005-09-23T00:00:00.000000 |
| certa-2005-ale-008 | Possible vulnérabilité de la bibliothèque msdds.dll | 2005-08-19T00:00:00.000000 | 2006-04-12T00:00:00.000000 |
| certa-2005-ale-007 | Exploitation de la faille MS05-039 | 2005-08-16T00:00:00.000000 | 2005-08-16T00:00:00.000000 |
| certa-2005-ale-006 | Vulnérabilité du protocole RDP de Microsoft | 2005-07-18T00:00:00.000000 | 2005-08-10T00:00:00.000000 |
| certa-2005-ale-005 | Vulnérabilité d'Internet Explorer | 2005-07-02T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-ale-004 | Propagation du ver MYTOB | 2005-06-03T00:00:00.000000 | 2005-06-03T00:00:00.000000 |