Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82112 | houtini-ai houtini-lm code_task_files index.ts path tr… |
houtini-ai |
houtini-lm |
2026-08-28T11:30:11.253Z | 2026-08-28T16:00:34.718Z | |
| cve-2026-6176 | Customer Reviews for WooCommerce <= 5.106.0 - Unauthen… |
ivole |
Customer Reviews for WooCommerce |
2026-08-28T11:29:29.483Z | 2026-08-28T15:59:10.529Z | |
| cve-2026-5096 | Everest Forms <= 3.4.4 - Unauthenticated Server-Side R… |
wpeverest |
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI |
2026-08-28T11:29:29.094Z | 2026-08-28T18:35:55.807Z | |
| cve-2026-5934 | WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-S… |
WP Media |
WP Rocket |
2026-08-28T11:29:28.699Z | 2026-08-28T15:58:57.068Z | |
| cve-2026-3423 | Envira Gallery <= 1.12.4 - Authenticated (Author+) Sto… |
smub |
Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More |
2026-08-28T11:29:28.138Z | 2026-08-28T16:09:20.421Z | |
| cve-2026-75758 | 5.9 (v4.0) | Unbounded recursion between Inspect.List charlist rend… |
elixir-lang |
elixir |
2026-08-28T11:28:53.505Z | 2026-08-28T18:29:23.745Z |
| cve-2026-82111 | iswalle getnote-mcp upload_image index.ts fs.readFileS… |
iswalle |
getnote-mcp |
2026-08-28T11:00:11.287Z | 2026-08-28T11:00:11.287Z | |
| cve-2026-82261 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 CPU Exhaustion via Remote Form… |
sveltejs |
kit |
2026-08-28T10:49:44.323Z | 2026-08-28T14:41:04.001Z |
| cve-2026-82260 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 Memory Exhaustion via Remote F… |
sveltejs |
kit |
2026-08-28T10:49:43.651Z | 2026-08-28T15:52:30.481Z |
| cve-2026-82259 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit 2.49.0 before 2.53.3 Denial of Service via form |
sveltejs |
kit |
2026-08-28T10:49:42.969Z | 2026-08-28T13:51:52.024Z |
| cve-2026-82258 | 5.9 (v4.0) | SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclos… |
sveltejs |
kit |
2026-08-28T10:49:42.085Z | 2026-08-28T10:49:42.085Z |
| cve-2026-82257 | 5.3 (v4.0) 4.3 (v3.1) | SvelteKit before 2.69.1 Prototype Pollution via File Input |
sveltejs |
kit |
2026-08-28T10:49:41.355Z | 2026-08-28T13:58:28.653Z |
| cve-2026-82256 | 6.9 (v4.0) 5.3 (v3.1) | SvelteKit before 2.69.1 Denial of Service via Remote Form |
sveltejs |
kit |
2026-08-28T10:49:40.634Z | 2026-08-28T14:41:47.444Z |
| cve-2026-82255 | 7.6 (v4.0) 6.8 (v3.1) | gitoxide 0.25.4 HTTP Credential Leak via Redirect |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:38.916Z | 2026-08-28T15:52:36.828Z |
| cve-2026-82254 | 8.7 (v4.0) 7.5 (v3.1) | gitoxide before 0.69.0 Denial of Service via gix-pack |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:38.250Z | 2026-08-28T13:59:07.704Z |
| cve-2026-82253 | 8.7 (v4.0) 7.5 (v3.1) | gitoxide before 0.82.0 Path Traversal via Submodule Na… |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:37.566Z | 2026-08-28T10:49:37.566Z |
| cve-2026-82252 | 8.7 (v4.0) 7.5 (v3.1) | gitoxide before 0.52.1 Repository Boundary Violation v… |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:36.897Z | 2026-08-29T13:38:27.910Z |
| cve-2026-82251 | 8.7 (v4.0) 7.5 (v3.1) | gitoxide before 0.52.1 Path Traversal via Submodule Name |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:36.185Z | 2026-08-29T13:38:27.250Z |
| cve-2026-82250 | 7.1 (v4.0) 6.5 (v3.1) | gitoxide gix-packetline before 0.21.5 Denial of Service |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:35.517Z | 2026-08-28T15:52:43.900Z |
| cve-2026-82249 | 2.3 (v4.0) 3.1 (v3.1) | gitoxide before 0.38.2 Credential Helper Protocol Fiel… |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:34.825Z | 2026-08-28T15:26:02.245Z |
| cve-2026-82248 | 6 (v4.0) 5.3 (v3.1) | gitoxide before 0.33.0 Path Traversal via symlink following |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:34.165Z | 2026-08-28T10:49:34.165Z |
| cve-2026-82247 | 8.7 (v4.0) 7.5 (v3.1) | gitoxide before 0.37.1 HTTP Basic credential leak via … |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:33.476Z | 2026-08-28T14:07:19.207Z |
| cve-2026-82246 | 7.1 (v4.0) 7.1 (v3.1) | Budibase Server before 3.41.3 SSRF via Query Import |
budibase |
server |
2026-08-28T10:49:32.768Z | 2026-08-28T14:45:27.847Z |
| cve-2026-82245 | 7.2 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Missing Authorization License M… |
budibase |
server |
2026-08-28T10:49:32.098Z | 2026-08-28T15:52:50.059Z |
| cve-2026-82244 | 9.4 (v4.0) 9.1 (v3.1) | Budibase before 3.41.3 Remote Code Execution via Plugi… |
budibase |
server |
2026-08-28T10:49:31.426Z | 2026-08-28T15:40:15.664Z |
| cve-2026-82243 | 8.3 (v4.0) 7.6 (v3.1) | Budibase Server before 3.41.3 SSRF with Credential Leakage |
budibase |
server |
2026-08-28T10:49:30.744Z | 2026-08-28T10:49:30.744Z |
| cve-2026-82242 | 8.3 (v4.0) 7.7 (v3.1) | Budibase before 3.41.3 Cross-Application Resource Inje… |
budibase |
server |
2026-08-28T10:49:30.049Z | 2026-08-28T14:02:53.417Z |
| cve-2026-82241 | 7.1 (v4.0) 7.1 (v3.1) | Budibase backend-core SSRF via incomplete default blacklist |
budibase |
server |
2026-08-28T10:49:29.355Z | 2026-08-28T14:46:56.389Z |
| cve-2026-82240 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Privilege Escalation via User U… |
budibase |
server |
2026-08-28T10:49:28.683Z | 2026-08-28T15:52:56.424Z |
| cve-2026-82239 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Authorization Bypass via dataso… |
budibase |
server |
2026-08-28T10:49:28.004Z | 2026-08-28T15:44:26.965Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000028 | i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key | 2025-04-24T13:50+09:00 | 2025-04-24T13:50+09:00 |
| jvndb-2025-000027 | Active! mail vulnerable to stack-based buffer overflow | 2025-04-18T16:50+09:00 | 2025-04-18T16:50+09:00 |
| jvndb-2025-003213 | TP-Link Deco BE65 Pro vulnerable to OS command injection | 2025-04-11T13:52+09:00 | 2025-04-11T13:52+09:00 |
| jvndb-2025-000026 | Multiple vulnerabilities in BizRobo! | 2025-04-10T15:36+09:00 | 2025-04-10T15:36+09:00 |
| jvndb-2025-003091 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025) | 2025-04-09T14:55+09:00 | 2025-04-09T14:55+09:00 |
| jvndb-2025-002990 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series' | 2025-04-07T17:44+09:00 | 2025-04-07T17:44+09:00 |
| jvndb-2025-000025 | WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass | 2025-04-03T12:29+09:00 | 2025-04-03T12:29+09:00 |
| jvndb-2025-000022 | Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products | 2025-04-02T15:12+09:00 | 2025-04-02T15:12+09:00 |
| jvndb-2025-002790 | Out-of-bounds Write vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers | 2025-04-02T15:05+09:00 | 2025-04-02T15:05+09:00 |
| jvndb-2025-000023 | WordPress plugin "Welcart e-Commerce" vulnerable to untrusted data deserialization | 2025-04-01T14:20+09:00 | 2025-04-01T14:20+09:00 |
| jvndb-2025-002714 | Improper symbolic link file handling in FutureNet NXR series, VXR series and WXR series routers | 2025-03-31T16:59+09:00 | 2025-04-03T15:19+09:00 |
| jvndb-2025-000024 | a-blog cms vulnerable to untrusted data deserialization | 2025-03-28T10:46+09:00 | 2025-03-28T10:46+09:00 |
| jvndb-2025-000021 | Multiple vulnerabilities in PowerCMS | 2025-03-26T18:13+09:00 | 2025-03-26T18:13+09:00 |
| jvndb-2025-002592 | Multiple vulnerabilities in CHOCO TEI WATCHER mini | 2025-03-26T13:25+09:00 | 2025-03-26T13:25+09:00 |
| jvndb-2025-000019 | Multiple vulnerabilities in AssetView | 2025-03-25T17:10+09:00 | 2025-03-25T17:10+09:00 |
| jvndb-2025-000018 | Multiple vulnerabilities in home gateway HGW-BL1500HM | 2025-03-19T15:33+09:00 | 2025-03-28T11:48+09:00 |
| jvndb-2025-000020 | +F FS010M vulnerable to OS command injection | 2025-03-18T15:01+09:00 | 2025-03-18T15:01+09:00 |
| jvndb-2025-000017 | hostapd vulnerable to improper processing of RADIUS packets | 2025-03-12T14:19+09:00 | 2025-03-12T14:19+09:00 |
| jvndb-2025-000016 | Multiple vulnerabilities in RemoteView Agent (for Windows) | 2025-03-06T14:27+09:00 | 2025-03-10T15:22+09:00 |
| jvndb-2025-001898 | Multiple vulnerabilities in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) | 2025-03-04T14:56+09:00 | 2025-03-04T14:56+09:00 |
| jvndb-2025-001605 | "RoboForm Password Manager" App for Android vulnerable to authentication bypass using an alternate path or channel | 2025-02-20T20:15+09:00 | 2025-02-20T20:15+09:00 |
| jvndb-2025-000014 | Multiple cross-site scripting vulnerabilities in Movable Type | 2025-02-19T16:19+09:00 | 2025-02-19T16:19+09:00 |
| jvndb-2025-000015 | RevoWorks SCVX and RevoWorks Browser vulnerable to incorrect resource transfer between spheres | 2025-02-19T14:51+09:00 | 2025-02-19T14:51+09:00 |
| jvndb-2025-001563 | Out-of-bounds write vulnerability in FUJIFILM Business Innovation Corp. MFPs | 2025-02-18T16:33+09:00 | 2025-02-18T16:33+09:00 |
| jvndb-2025-001562 | Out-of-bounds read vulnerability in OMRON CX-Programmer | 2025-02-18T16:24+09:00 | 2025-02-18T16:24+09:00 |
| jvndb-2025-001548 | Out-of-bounds read vulnerability in Cente middleware | 2025-02-17T18:22+09:00 | 2025-02-17T18:22+09:00 |
| jvndb-2025-000012 | Multiple vulnerabilities in The LuxCal Web Calendar | 2025-02-17T13:43+09:00 | 2025-02-17T13:43+09:00 |
| jvndb-2025-000013 | acmailer CGI and acmailer DB vulnerable to OS command injection | 2025-02-14T16:39+09:00 | 2025-02-14T16:39+09:00 |
| jvndb-2025-000002 | Multiple vulnerabilities in NEC Aterm series (NV25-003) | 2025-02-14T15:48+09:00 | 2025-02-14T15:48+09:00 |
| jvndb-2025-000011 | Multiple vulnerabilities in FileMegane | 2025-02-13T13:39+09:00 | 2025-02-13T13:39+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0765 | Multiples vulnérabilités dans Oracle MySQL | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0764 | Multiples vulnérabilités dans les produits Mozilla | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0763 | Vulnérabilité dans les produits Moxa | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0762 | Multiples vulnérabilités dans les produits Qnap | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0761 | Multiples vulnérabilités dans Google Chrome | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0760 | Multiples vulnérabilités dans les produits Moxa | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0759 | Multiples vulnérabilités dans les produits Spring | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0758 | Vulnérabilité dans Microsoft Azure | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0757 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0756 | Vulnérabilité dans Cisco Catalyst | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0755 | Vulnérabilité dans LibreNMS | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0754 | Multiples vulnérabilités dans Redmine | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0753 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0752 | Multiples vulnérabilités dans les produits Mattermost | 2026-06-15T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-0751 | Vulnérabilité dans Spring AI | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0750 | Vulnérabilité dans les produits HPE Aruba Networking | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0749 | Vulnérabilité dans Oracle PeopleSoft | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0748 | Multiples vulnérabilités dans les produits IBM | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0747 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0746 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0745 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0744 | Multiples vulnérabilités dans les produits Spring | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0743 | Vulnérabilité dans les produits Moxa | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0742 | Multiples vulnérabilités dans les produits NetApp | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0741 | Vulnérabilité dans MongoDB | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0740 | Multiples vulnérabilités dans Google Chrome | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0739 | Multiples vulnérabilités dans les produits Spring | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0738 | Vulnérabilité dans Traefik | 2026-06-11T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0737 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0736 | Multiples vulnérabilités dans les produits Splunk | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-ale-003 | Multiples vulnérabilités de Firefox | 2005-05-09T00:00:00.000000 | 2005-05-12T00:00:00.000000 |
| certa-2005-ale-002 | Exploitation d'une vulnérabilité dans Oracle Database Server | 2005-04-28T00:00:00.000000 | 2005-04-28T00:00:00.000000 |
| certa-2005-ale-001 | Vulnérabilité d'Internet Explorer | 2005-01-03T00:00:00.000000 | 2005-01-11T00:00:00.000000 |
| certa-2004-ale-014 | Exploitation massive d'une faille du forum phpBB | 2004-12-22T00:00:00.000000 | 2004-12-22T00:00:00.000000 |
| certa-2004-ale-013 | Vulnérabilité dans le composant ActiveX DHTML Edit d'Internet Explorer | 2004-12-20T00:00:00.000000 | 2004-12-20T00:00:00.000000 |
| certa-2004-ale-012 | Vulnérabilité d'Internet Explorer | 2004-11-09T00:00:00.000000 | 2004-12-02T00:00:00.000000 |
| certa-2004-ale-011 | Diffusion de programmes exploitant la faille GDI+ | 2004-09-23T00:00:00.000000 | 2004-09-23T00:00:00.000000 |
| certa-2004-ale-010 | Vulnérabilité du service Telnet de Cisco IOS | 2004-08-30T00:00:00.000000 | 2004-08-30T00:00:00.000000 |
| certa-2004-ale-009 | Vulnérabilités d'Internet Explorer | 2004-06-09T00:00:00.000000 | 2004-08-03T00:00:00.000000 |
| certa-2004-ale-008 | Vulnérabilité de Safari | 2004-05-19T00:00:00.000000 | 2004-05-24T00:00:00.000000 |
| certa-2004-ale-007 | Exploitation de la vulnérabilité LSASS sous Windows : appration du ver Sasser | 2004-05-02T00:00:00.000000 | 2004-05-02T00:00:00.000000 |
| certa-2004-ale-006 | Vulnérabilité SMB sous Windows | 2004-04-28T00:00:00.000000 | 2004-04-28T00:00:00.000000 |
| certa-2004-ale-005 | Vulnérabilité d'Internet Explorer | 2004-04-09T00:00:00.000000 | 2004-04-15T00:00:00.000000 |
| certa-2004-ale-004 | Vulnérabilité du composant dtlogin de CDE | 2004-03-26T00:00:00.000000 | 2004-08-05T00:00:00.000000 |
| certa-2004-ale-003 | Propagation du ver Phatbot | 2004-03-19T00:00:00.000000 | 2004-03-19T00:00:00.000000 |
| certa-2004-ale-002 | Propagation du virux Bizex | 2004-02-26T00:00:00.000000 | 2004-02-26T00:00:00.000000 |
| certa-2004-ale-001 | Obstacles à la résolution d'incidents | 2004-01-30T00:00:00.000000 | 2004-01-30T00:00:00.000000 |
| certa-2003-ale-006 | Vulnérabilité dans l'affichage des adresses réticulaires | 2003-12-19T00:00:00.000000 | 2004-02-03T00:00:00.000000 |
| certa-2003-ale-005 | Vulnérabilité de sadmind sur Solaris | 2003-09-19T00:00:00.000000 | 2003-09-19T00:00:00.000000 |
| certa-2003-ale-004 | Vulnérabilité d'Internet Explorer | 2003-09-10T00:00:00.000000 | 2003-10-06T00:00:00.000000 |
| certa-2003-ale-003 | Exploitation massive de la vulnérabilité « include PHP » | 2003-09-09T00:00:00.000000 | 2003-09-09T00:00:00.000000 |
| certa-2003-ale-002 | Exploitation d'une faille de Windows RPC | 2003-08-01T00:00:00.000000 | 2003-08-19T00:00:00.000000 |
| certa-2003-ale-001 | Vulnérabilité dans l'implémentation des logiciels de lecture des documents PDF | 2003-06-23T00:00:00.000000 | 2003-07-04T00:00:00.000000 |
| certa-2002-ale-007 | Cédérom Pages Pro | 2002-09-04T00:00:00.000000 | 2002-09-04T00:00:00.000000 |
| certa-2002-ale-006 | Propagation du ver Spida (Microsoft SQL Server) | 2002-05-22T00:00:00.000000 | 2002-06-04T00:00:00.000000 |
| certa-2002-ale-005 | Risque de compromission des auto-commutateurs (PABX) ALCATEL 4400 | 2002-02-20T00:00:00.000000 | 2002-02-20T00:00:00.000000 |
| certa-2002-ale-004 | Multiples implémentations de SNMP V1 vulnérables | 2002-02-13T00:00:00.000000 | 2002-02-13T00:00:00.000000 |
| certa-2002-ale-003 | Propagation importante du virus « W32.Myparty@mm » | 2002-01-29T00:00:00.000000 | 2002-01-29T00:00:00.000000 |
| certa-2002-ale-002 | Exploitation d'une faille de wu-ftpd | 2002-01-28T00:00:00.000000 | 2002-01-28T00:00:00.000000 |
| certa-2002-ale-001 | Exploitation massive d'une faille de CDE | 2002-01-24T00:00:00.000000 | 2002-01-24T00:00:00.000000 |