Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107028 | N/A | Insecure permissions in wbpxre150 Shopping List v… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:08:43.057Z |
| cve-2026-107027 | N/A | Insecure permissions in lz233 Tarnhelm v1.8.2 (ve… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:07:42.324Z |
| cve-2026-107026 | N/A | Insecure permissions in Share to Clipboard v1.14.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:05:37.295Z |
| cve-2026-107025 | N/A | Insecure permissions in WikiAndPad alpha/beta v0.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:01:55.391Z |
| cve-2026-107024 | N/A | Insecure permissions in Share 2 Archive Today ver… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:01:05.247Z |
| cve-2026-107023 | N/A | Insecure permissions in the ContentProvider compo… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:00:11.788Z |
| cve-2026-107021 | N/A | Insecure permissions in the CardProvider content … |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:56:14.391Z |
| cve-2026-107020 | N/A | An issue in the activity.LoadLinkLaterActivity co… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:46:18.474Z |
| cve-2026-107019 | N/A | Insecure permissions in the feiertage.ImportActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:45:30.102Z |
| cve-2026-107018 | N/A | Insecure permissions in Ghost Commander File Mana… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:44:40.204Z |
| cve-2026-107017 | N/A | Insecure permissions in the ShortcutDispatchActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:43:24.546Z |
| cve-2026-107016 | N/A | Insecure permissions in Fossify v1.3.0 allows una… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:42:15.598Z |
| cve-2026-107015 | N/A | Insecure permissions in Simple Contacts Pro versi… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:41:25.197Z |
| cve-2026-107014 | N/A | Insecure permissions in Bander Notepad (bander.no… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:39:41.536Z |
| cve-2026-118589 | nschloe meshio VTK Reader _vtk_42.py memory allocation |
nschloe |
meshio |
2026-10-28T23:45:18.675Z | 2026-10-28T23:45:18.675Z | |
| cve-2026-118586 | dfm feedfinder2 feedfinder2.py find_feeds server-side … |
dfm |
feedfinder2 |
2026-10-28T23:30:17.619Z | 2026-10-28T23:30:17.619Z | |
| cve-2026-118585 | configuroweb inventariobasico Add Product addlist.php … |
configuroweb |
inventariobasico |
2026-10-28T23:15:19.868Z | 2026-10-28T23:15:19.868Z | |
| cve-2026-86983 | N/A | A remote attacker may be able to terminate a proc… |
Apple |
swift-crypto |
2026-10-28T23:01:59.598Z | 2026-10-28T23:02:44.171Z |
| cve-2026-118579 | D-Link DIR-505 Web Management CGI secmark1524.cgi main… |
D-Link |
DIR-505 |
2026-10-28T23:00:15.627Z | 2026-10-28T23:00:15.627Z | |
| cve-2026-118578 | maotoumao MusicFreeDesktop Request Forwarder informati… |
maotoumao |
MusicFreeDesktop |
2026-10-28T22:45:10.175Z | 2026-10-29T15:51:30.534Z | |
| cve-2026-82411 | Objects API: Cross-object-type authorization bypass on… |
maykinmedia |
open-object |
2026-10-28T22:40:13.728Z | 2026-10-28T22:40:13.728Z | |
| cve-2026-85749 | MailWatch: IDOR lets any authenticated user release or… |
mailwatch |
MailWatch |
2026-10-28T22:37:38.513Z | 2026-10-29T14:46:47.666Z | |
| cve-2026-55561 | InvoicePlane: Guest user IDOR in quote approval and re… |
InvoicePlane |
InvoicePlane |
2026-10-28T22:33:47.140Z | 2026-10-28T22:33:47.140Z | |
| cve-2026-75520 | Domoticz: Missing authorization and path traversal in … |
domoticz |
domoticz |
2026-10-28T22:30:59.693Z | 2026-10-28T22:30:59.693Z | |
| cve-2026-118577 | maotoumao MusicFreeDesktop Request Forwarder server-si… |
maotoumao |
MusicFreeDesktop |
2026-10-28T22:15:17.877Z | 2026-10-29T15:52:21.877Z | |
| cve-2026-118538 | a2ui-project a2ui Renderer root.js Root.renderComponen… |
a2ui-project |
a2ui |
2026-10-28T22:00:18.460Z | 2026-10-28T22:00:18.460Z | |
| cve-2026-61575 | AVideo-Encoder vulnerable to stored DOM cross-site scr… |
WWBN |
AVideo-Encoder |
2026-10-28T21:57:55.205Z | 2026-10-28T21:57:55.205Z | |
| cve-2026-61569 | AVideo-Encoder: pre-authentication streamer-login SQL … |
WWBN |
AVideo-Encoder |
2026-10-28T21:54:38.358Z | 2026-10-29T15:11:35.842Z | |
| cve-2026-54453 | OpenCATS: Authenticated Remote Code Execution via Sett… |
opencats |
OpenCATS |
2026-10-28T21:53:24.736Z | 2026-10-28T21:53:24.736Z | |
| cve-2026-61571 | AVideo-Encoder: missing authentication on control and … |
WWBN |
AVideo-Encoder |
2026-10-28T21:49:16.840Z | 2026-10-28T21:49:16.840Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-001238 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2025-01-29T13:41+09:00 | 2025-05-27T16:06+09:00 |
| jvndb-2025-000006 | WordPress Plugin "Simple Image Sizes" vulnerable to cross-site scripting | 2025-01-28T13:44+09:00 | 2025-01-28T13:44+09:00 |
| jvndb-2025-000005 | EXIF Viewer Classic vulnerable to cross-site scripting | 2025-01-27T14:25+09:00 | 2025-01-27T14:25+09:00 |
| jvndb-2025-000004 | Multiple vulnerabilities in I-O DATA router UD-LT2 | 2025-01-22T13:55+09:00 | 2025-02-20T15:55+09:00 |
| jvndb-2025-000003 | FortiWeb vulnerable to SQL injection | 2025-01-21T15:59+09:00 | 2025-01-21T15:59+09:00 |
| jvndb-2025-001027 | Linux Ratfor vulnerable to stack-based buffer overflow | 2025-01-16T13:27+09:00 | 2025-01-16T13:27+09:00 |
| jvndb-2025-000001 | PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting | 2025-01-08T17:08+09:00 | 2025-01-08T17:08+09:00 |
| jvndb-2024-015471 | Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element | 2024-12-25T11:28+09:00 | 2024-12-25T11:28+09:00 |
| jvndb-2024-015393 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024) | 2024-12-23T12:52+09:00 | 2024-12-23T12:52+09:00 |
| jvndb-2024-014918 | Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2024-12-17T15:23+09:00 | 2024-12-17T15:23+09:00 |
| jvndb-2024-000128 | Multiple vulnerabilities in SHARP routers | 2024-12-17T07:54+09:00 | 2024-12-17T07:54+09:00 |
| jvndb-2024-000127 | "Shonen Jump+" App for Android fails to restrict custom URL schemes properly | 2024-12-16T15:07+09:00 | 2024-12-16T15:07+09:00 |
| jvndb-2024-014825 | WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting | 2024-12-16T13:57+09:00 | 2024-12-16T13:57+09:00 |
| jvndb-2024-014793 | Multiple vulnerabilities in FXC AE1021 and AE1021PE | 2024-12-16T11:51+09:00 | 2024-12-16T11:51+09:00 |
| jvndb-2024-014079 | Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection | 2024-12-06T12:11+09:00 | 2024-12-06T12:11+09:00 |
| jvndb-2024-000125 | Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX | 2024-12-04T15:22+09:00 | 2024-12-18T15:20+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-000122 | HAProxy vulnerable to HTTP request/response smuggling | 2024-11-27T14:36+09:00 | 2024-11-27T14:36+09:00 |
| jvndb-2024-000121 | WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting | 2024-11-26T13:57+09:00 | 2024-11-26T13:57+09:00 |
| jvndb-2024-013260 | Multiple vulnerabilities in Edgecross Basic Software for Windows | 2024-11-22T10:59+09:00 | 2025-11-04T16:41+09:00 |
| jvndb-2024-000120 | "Kura Sushi Official App Produced by EPARK" for Android uses a hard-coded cryptographic key | 2024-11-20T13:56+09:00 | 2024-11-20T13:56+09:00 |
| jvndb-2024-012941 | Multiple vulnerabilities in Rakuten Turbo 5G | 2024-11-19T10:41+09:00 | 2024-11-19T10:41+09:00 |
| jvndb-2024-000119 | Multiple vulnerabilities in FitNesse | 2024-11-15T13:37+09:00 | 2024-11-20T11:18+09:00 |
| jvndb-2024-012461 | Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B | 2024-11-13T14:26+09:00 | 2024-11-26T16:11+09:00 |
| jvndb-2024-000118 | WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2024-11-13T13:50+09:00 | 2024-11-13T13:50+09:00 |
| jvndb-2024-012017 | Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control | 2024-11-06T11:00+09:00 | 2024-11-06T11:00+09:00 |
| jvndb-2024-011833 | Incorrect authorization vulnerability in OMRON Sysmac Studio | 2024-11-05T15:29+09:00 | 2024-11-05T15:29+09:00 |
| jvndb-2024-011747 | Command injection vulnerability in Trend Micro Cloud Edge | 2024-11-01T14:28+09:00 | 2024-11-01T14:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-38236 | Grocery Sales and Inventory System SQL注入漏洞（CNVD-2026-38236） | 2025-09-16 | 2026-09-22 |
| cnvd-2026-38235 | Grocery Sales and Inventory System SQL注入漏洞（CNVD-2026-38235） | 2025-09-16 | 2026-09-22 |
| cnvd-2026-38240 | Grocery Sales and Inventory System跨站脚本漏洞（CNVD-2026-38240） | 2025-09-09 | 2026-09-22 |
| cnvd-2026-38239 | Grocery Sales and Inventory System SQL注入漏洞（CNVD-2026-38239） | 2025-09-09 | 2026-09-22 |
| cnvd-2026-38238 | Grocery Sales and Inventory System SQL注入漏洞（CNVD-2026-38238） | 2025-09-09 | 2026-09-22 |
| cnvd-2026-35206 | Real Estate Management System文件上传漏洞（CNVD-2026-35206） | 2025-09-08 | 2026-09-01 |
| cnvd-2026-35205 | Real Estate Management System文件上传漏洞 | 2025-09-08 | 2026-09-01 |
| cnvd-2026-35204 | Real Estate Management System跨站脚本漏洞（CNVD-2026-35204） | 2025-09-08 | 2026-09-01 |
| cnvd-2026-35203 | Real Estate Management System跨站脚本漏洞 | 2025-09-08 | 2026-09-01 |
| cnvd-2026-38242 | Sales and Inventory System跨站脚本漏洞（CNVD-2026-38242） | 2025-09-05 | 2026-09-22 |
| cnvd-2026-38241 | Sales and Inventory System跨站脚本漏洞（CNVD-2026-38241） | 2025-09-05 | 2026-09-22 |
| cnvd-2026-38243 | Computer Sales and Inventory System SQL注入漏洞（CNVD-2026-38243） | 2025-09-04 | 2026-09-22 |
| cnvd-2026-35207 | Ecommerce Website跨站脚本漏洞 | 2025-08-27 | 2026-08-31 |
| cnvd-2026-38244 | Sales and Inventory System SQL注入漏洞（CNVD-2026-38244 | 2025-07-23 | 2026-09-22 |
| cnvd-2026-39109 | Ivanti Endpoint Manager Mobile操作系统命令注入漏洞 | 2025-07-21 | 2026-09-24 |
| cnvd-2026-35213 | Real Estate Management System SQL注入漏洞（CNVD-2026-35213） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-35212 | Real Estate Management System SQL注入漏洞（CNVD-2026-35212） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-35211 | Real Estate Management System SQL注入漏洞（CNVD-2026-35211） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-35210 | Real Estate Management System SQL注入漏洞（CNVD-2026-35210） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-35209 | Real Estate Management System SQL注入漏洞（CNVD-2026-35209） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-35208 | Real Estate Management System SQL注入漏洞（CNVD-2026-35208） | 2025-06-11 | 2026-09-01 |
| cnvd-2026-36347 | Sales and Inventory System SQL注入漏洞（CNVD-2026-36347） | 2025-05-22 | 2026-09-11 |
| cnvd-2026-36346 | Sales and Inventory System SQL注入漏洞（CNVD-2026-36346） | 2025-05-22 | 2026-09-11 |
| cnvd-2026-35674 | Membership Management System SQL注入漏洞（CNVD-2026-35674） | 2025-05-07 | 2026-09-01 |
| cnvd-2026-35216 | Real Estate Management System SQL注入漏洞（CNVD-2026-35216） | 2024-11-13 | 2026-09-01 |
| cnvd-2026-35215 | Real Estate Management System文件上传漏洞（CNVD-2026-35215） | 2024-11-13 | 2026-09-01 |
| cnvd-2026-35214 | Real Estate Management System文件上传漏洞（CNVD-2026-35214） | 2024-11-13 | 2026-09-01 |
| cnvd-2026-35676 | Membership Management System跨站脚本漏洞（CNVD-2026-35676） | 2024-10-23 | 2026-09-01 |
| cnvd-2026-35675 | Membership Management System跨站脚本漏洞 | 2024-10-23 | 2026-09-01 |
| cnvd-2026-39110 | Ivanti Endpoint Manager Mobile权限问题漏洞 | 2024-10-13 | 2026-09-24 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0987 | Multiples vulnérabilités dans Roundcube | 2026-08-10T00:00:00.000000 | 2026-09-14T00:00:00.000000 |
| certfr-2026-avi-0986 | Multiples vulnérabilités dans les produits IBM | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0985 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0984 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0983 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0982 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0981 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0980 | Vulnérabilité dans Apple macOS | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0979 | Multiples vulnérabilités dans WordPress | 2026-08-07T00:00:00.000000 | 2026-08-10T00:00:00.000000 |
| certfr-2026-avi-0978 | Multiples vulnérabilités dans Google Chrome | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0977 | Multiples vulnérabilités dans Progress Telerik | 2026-08-07T00:00:00.000000 | 2026-08-07T00:00:00.000000 |
| certfr-2026-avi-0976 | Multiples vulnérabilités dans KeyCloak | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0975 | Multiples vulnérabilités dans les produits Cisco | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0974 | Multiples vulnérabilités dans les produits Wallix | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0973 | Multiples vulnérabilités dans les produits Nextcloud | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0972 | Vulnérabilité dans Sonicwall SonicOS | 2026-08-06T00:00:00.000000 | 2026-08-06T00:00:00.000000 |
| certfr-2026-avi-0971 | Vulnérabilité dans Mozilla Firefox pour Android | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0970 | Multiples vulnérabilités dans Google Pixel | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0969 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Orchestrator | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0968 | Multiples vulnérabilités dans les produits Veeam | 2026-08-05T00:00:00.000000 | 2026-08-05T00:00:00.000000 |
| certfr-2026-avi-0967 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0966 | Multiples vulnérabilités dans LibreNMS | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0965 | Vulnérabilité dans les produits Check Point | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0964 | Multiples vulnérabilités dans Traefik | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0963 | Multiples vulnérabilités dans Google Android | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0962 | Multiples vulnérabilités dans les produits Tenable | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0961 | Vulnérabilité dans Microsoft Office | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0960 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0959 | Multiples vulnérabilités dans Papercut | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0958 | Multiples vulnérabilités dans les produits IBM | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |