Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116641 | 7.6 (v4.0) 6.8 (v3.1) | The DB Tools trust certificates issued by recoverable … |
MongoDB |
Database Tools |
2026-10-28T21:48:52.581Z | 2026-10-29T15:13:15.811Z |
| cve-2026-61572 | AVideo-Encoder: unauthenticated full-response server-s… |
WWBN |
AVideo-Encoder |
2026-10-28T21:47:39.328Z | 2026-10-29T15:14:17.879Z | |
| cve-2026-61573 | AVideo-Encoder: reflected cross-site scripting in the … |
WWBN |
AVideo-Encoder |
2026-10-28T21:46:18.413Z | 2026-10-28T21:46:18.413Z | |
| cve-2026-118537 | a2ui Image Player/Video Player/Audio Player Image.js i… |
n/a |
a2ui |
2026-10-28T21:45:16.400Z | 2026-10-28T21:45:16.400Z | |
| cve-2026-54455 | OpenCATS: Authenticated SQL injection in activity Data… |
opencats |
OpenCATS |
2026-10-28T21:45:00.241Z | 2026-10-28T21:45:00.241Z | |
| cve-2026-61567 | AVideo-Encoder: unauthenticated command execution thro… |
WWBN |
AVideo-Encoder |
2026-10-28T21:43:48.515Z | 2026-10-28T21:43:48.515Z | |
| cve-2026-61564 | AVideo-Encoder: unauthenticated installer PHP code injection |
WWBN |
AVideo-Encoder |
2026-10-28T21:42:42.397Z | 2026-10-28T21:42:42.397Z | |
| cve-2026-57448 | Blombooru: administrator image-proxy server-side reque… |
mrblomblo |
blombooru |
2026-10-28T21:41:21.557Z | 2026-10-28T21:41:21.557Z | |
| cve-2026-93851 | 8 (v3.1) | Path traversal in Mattermost Agents plugin mention rem… |
Mattermost |
Mattermost |
2026-10-28T21:41:15.727Z | 2026-10-29T15:15:32.984Z |
| cve-2026-61546 | AnkiMCP: DNS rebinding reaches unauthenticated local A… |
ankimcp |
anki-mcp-server-addon |
2026-10-28T21:40:16.081Z | 2026-10-28T21:40:16.081Z | |
| cve-2026-118804 | 7.5 (v3.1) | Bricks Broken Access Control via query_result Endpoint |
Bricks |
Bricks Builder |
2026-10-28T21:18:28.475Z | 2026-10-28T21:18:28.475Z |
| cve-2026-118803 | 7.5 (v3.1) | Bricks Theme Unauthenticated Dynamic Data Tag Injectio… |
Bricks |
Bricks Theme |
2026-10-28T21:11:32.437Z | 2026-10-28T21:11:32.437Z |
| cve-2026-118757 | 6.9 (v4.0) 6.5 (v3.1) | PiWeb Disable payment method / Partial payment for Woo… |
PI Websolution |
PiWeb Disable payment method / Partial payment for WooCommerce |
2026-10-28T21:11:24.955Z | 2026-10-28T21:11:24.955Z |
| cve-2026-118756 | 6.7 (v4.0) 5.5 (v3.1) | gopass before 1.17.0 Path Traversal via fs Storage Pru… |
gopasspw |
gopass |
2026-10-28T21:11:24.270Z | 2026-10-28T21:11:24.270Z |
| cve-2026-118755 | 8.6 (v4.0) 7.2 (v3.1) | Volmarg Personal Management System through 2.1.0 OS Co… |
Volmarg |
personal-management-system |
2026-10-28T21:11:23.608Z | 2026-10-28T21:11:23.608Z |
| cve-2026-118754 | 6.9 (v4.0) 5.3 (v3.1) | Dolibarr ERP CRM before 24.0.2 Missing Authorization v… |
Dolibarr |
Dolibarr ERP/CRM |
2026-10-28T21:11:22.905Z | 2026-10-28T21:11:22.905Z |
| cve-2026-118753 | 8.5 (v4.0) 7.8 (v3.1) | FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Ov… |
danoli3 |
FreeImage |
2026-10-28T21:11:22.192Z | 2026-10-28T21:11:22.192Z |
| cve-2026-118752 | 8.5 (v4.0) 7.8 (v3.1) | FreeImage before 3.19.22 Heap Buffer Overflow via IFF/… |
danoli3 |
FreeImage |
2026-10-28T21:11:21.485Z | 2026-10-28T21:11:21.485Z |
| cve-2026-118694 | 8.7 (v4.0) 7.5 (v3.1) | python-markdown2 through 2.5.5 Denial of Service via U… |
trentm |
python-markdown2 |
2026-10-28T21:11:20.814Z | 2026-10-28T21:11:20.814Z |
| cve-2026-118693 | 5.6 (v4.0) 4.7 (v3.1) | CherryTree through 1.7.2 Local File Disclosure via Emb… |
giuspen |
cherrytree |
2026-10-28T21:11:20.057Z | 2026-10-28T21:11:20.057Z |
| cve-2026-118692 | 7.1 (v4.0) 7 (v3.1) | CherryTree through 1.7.2 OS Command Injection via Cust… |
giuspen |
cherrytree |
2026-10-28T21:11:19.351Z | 2026-10-28T21:11:19.351Z |
| cve-2026-118691 | 6.3 (v4.0) 3.7 (v3.1) | xianyu-auto-reply-fix through 2.0.7 Unauthenticated Me… |
GuDong2003 |
xianyu-auto-reply-fix |
2026-10-28T21:11:18.629Z | 2026-10-28T21:11:18.629Z |
| cve-2026-118690 | 9.3 (v4.0) 9.8 (v3.1) | Signal K Server before 2.33.0 Missing Authentication v… |
SignalK |
signalk-server |
2026-10-28T21:11:17.919Z | 2026-10-28T21:11:17.919Z |
| cve-2026-118689 | 8.7 (v4.0) 7.5 (v3.1) | OvenMediaEngine through 0.21.0 OVT Relay DoS via Overs… |
OvenMediaLabs |
OvenMediaEngine |
2026-10-28T21:11:17.232Z | 2026-10-28T21:11:17.232Z |
| cve-2026-118682 | 7.7 (v4.0) 7.5 (v3.1) | ClashMi through 1.0.32.1801 Disabled TLS Certificate V… |
KaringX |
clashmi |
2026-10-28T21:11:16.509Z | 2026-10-28T21:11:16.509Z |
| cve-2026-118669 | OAuthLib: Token grants can use attacker-supplied clien… |
oauthlib |
oauthlib |
2026-10-28T21:09:58.893Z | 2026-10-28T21:09:58.893Z | |
| cve-2026-118668 | LangGraph JavaScript custom authentication may permit … |
langchain-ai |
langgraph-api |
2026-10-28T21:06:43.157Z | 2026-10-28T21:06:43.157Z | |
| cve-2026-118667 | LangGraph: Unencoded identifiers in LangGraph SDK v3 s… |
langchain-ai |
langgraph |
2026-10-28T20:51:46.657Z | 2026-10-28T20:51:46.657Z | |
| cve-2026-118666 | GraphQL Tools: Shared legacy executor routes one subsc… |
ardatan |
graphql-tools |
2026-10-28T20:45:58.056Z | 2026-10-28T20:45:58.056Z | |
| cve-2026-118665 | GraphQL Tools: Per-request connection parameters persi… |
ardatan |
graphql-tools |
2026-10-28T20:41:47.228Z | 2026-10-28T20:41:47.228Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-011744 | REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers | 2024-11-01T13:49+09:00 | 2024-11-01T13:49+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| jvndb-2024-000116 | Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials | 2024-10-30T15:07+09:00 | 2024-10-30T15:07+09:00 |
| jvndb-2024-011256 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-10-28T17:33+09:00 | 2024-10-28T17:33+09:00 |
| jvndb-2024-000115 | Chatwork Desktop Application (Windows) uses a potentially dangerous function | 2024-10-28T14:29+09:00 | 2024-10-28T14:29+09:00 |
| jvndb-2024-000114 | Multiple vulnerabilities in baserCMS | 2024-10-25T15:07+09:00 | 2025-02-18T15:35+09:00 |
| jvndb-2024-010802 | Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector | 2024-10-22T13:02+09:00 | 2024-10-22T13:02+09:00 |
| jvndb-2024-000106 | Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software | 2024-10-21T11:58+09:00 | 2024-11-21T11:37+09:00 |
| jvndb-2024-000113 | N-LINE vulnerable to HTML injection | 2024-10-18T14:48+09:00 | 2024-10-25T16:48+09:00 |
| jvndb-2024-000112 | MUSASI version 3 performing authentication on client-side | 2024-10-18T14:40+09:00 | 2024-10-25T16:55+09:00 |
| jvndb-2024-000111 | SHIRASAGI vulnerable to path traversal | 2024-10-16T14:12+09:00 | 2024-10-23T17:35+09:00 |
| jvndb-2024-000110 | Multiple vulnerabilities in Exment | 2024-10-11T14:13+09:00 | 2024-10-11T14:13+09:00 |
| jvndb-2024-000109 | baserCMS plugin "BurgerEditor" vulnerable to directory listing | 2024-10-10T14:57+09:00 | 2024-11-06T14:45+09:00 |
| jvndb-2024-009667 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2024-10-03T13:42+09:00 | 2024-10-03T13:42+09:00 |
| jvndb-2024-000108 | Apache Tomcat improper handling of TLS handshake process data | 2024-10-01T17:51+09:00 | 2024-10-01T17:51+09:00 |
| jvndb-2024-009498 | Vulnerability in Cosminexus | 2024-10-01T16:01+09:00 | 2024-10-01T16:01+09:00 |
| jvndb-2024-009481 | Insecure initial password configuration issue in SEIKO EPSON Web Config | 2024-10-01T14:14+09:00 | 2024-11-12T10:25+09:00 |
| jvndb-2024-000107 | RevoWorks Cloud vulnerable to unintended process execution | 2024-09-30T15:17+09:00 | 2024-09-30T15:17+09:00 |
| jvndb-2024-003932 | File Permissions Vulnerability in Hitachi Ops Center Common Services | 2024-09-30T14:15+09:00 | 2024-09-30T14:15+09:00 |
| jvndb-2024-000105 | Multiple vulnerabilities in Smart-tab | 2024-09-30T14:14+09:00 | 2024-09-30T14:14+09:00 |
| jvndb-2024-009396 | SNMP service is enabled by default in Sharp NEC Display Solutions projectors | 2024-09-30T12:46+09:00 | 2024-09-30T12:46+09:00 |
| jvndb-2024-000104 | MF Teacher Performance Management System vulnerable to cross-site scripting | 2024-09-27T15:00+09:00 | 2024-10-10T11:14+09:00 |
| jvndb-2024-000103 | The installer of e-Tax software(common program) vulnerable to privilege escalation | 2024-09-24T16:12+09:00 | 2024-09-24T16:12+09:00 |
| jvndb-2024-000102 | Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions | 2024-09-24T16:00+09:00 | 2024-10-18T11:02+09:00 |
| jvndb-2024-000101 | Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices | 2024-09-24T15:26+09:00 | 2024-09-24T15:26+09:00 |
| jvndb-2024-008391 | Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders | 2024-09-19T14:07+09:00 | 2024-09-19T14:07+09:00 |
| jvndb-2024-000100 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2024-09-18T14:34+09:00 | 2024-09-18T14:34+09:00 |
| jvndb-2024-000099 | Assimp vulnerable to heap-based buffer overflow | 2024-09-18T14:20+09:00 | 2024-09-18T14:20+09:00 |
| jvndb-2020-018328 | Falsification and eavesdropping of contents across multiple websites via Web Rehosting services | 2024-09-12T12:23+09:00 | 2024-09-12T12:23+09:00 |
| jvndb-2023-027250 | Security Problem in Web Browser Permission Mechanism | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-35679 | Membership Management System 信息泄露漏洞 | 2024-09-30 | 2026-09-01 |
| cnvd-2026-35678 | Membership Management System跨站脚本漏洞（CNVD-2026-35678） | 2024-09-30 | 2026-09-01 |
| cnvd-2026-35677 | Membership Management System SQL注入漏洞（CNVD-2026-35677） | 2024-09-30 | 2026-09-01 |
| cnvd-2026-35680 | Membership Management System跨站脚本漏洞（CNVD-2026-35680） | 2024-09-11 | 2026-09-01 |
| cnvd-2026-39112 | Ivanti Endpoint Manager Mobile授权问题漏洞 | 2024-08-12 | 2026-09-24 |
| cnvd-2026-39111 | Ivanti Endpoint Manager Mobile认证不当漏洞 | 2024-08-12 | 2026-09-24 |
| cnvd-2026-36545 | D-Link DAR-7000-40代码问题漏洞（CNVD-2026-36545） | 2024-05-16 | 2026-09-11 |
| cnvd-2026-36544 | D-Link DAR-7000-40代码问题漏洞（CNVD-2026-36544） | 2024-05-16 | 2026-09-11 |
| cnvd-2026-36543 | D-Link DAR-7000-40代码问题漏洞（CNVD-2026-36543） | 2024-05-16 | 2026-09-11 |
| cnvd-2026-36542 | D-Link DAR-7000-40代码问题漏洞 | 2024-05-16 | 2026-09-11 |
| cnvd-2026-35681 | Membership Management System SQL注入漏洞（CNVD-2026-35681） | 2024-03-12 | 2026-09-01 |
| cnvd-2026-35683 | Membership Management System in PHP跨站脚本漏洞 | 2024-03-06 | 2026-09-01 |
| cnvd-2026-35682 | Membership Management System SQL注入漏洞（CNVD-2026-35682） | 2024-03-06 | 2026-09-01 |
| cnvd-2026-35689 | Membership Management System in PHP SQL注入漏洞（CNVD-2026-35689） | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35688 | Membership Management System in PHP SQL注入漏洞 | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35687 | Membership Management System in PHP文件上传漏洞 | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35686 | Membership Management System SQL注入漏洞（CNVD-2026-35686） | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35685 | Membership Management System文件上传漏洞（CNVD-2026-35685） | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35684 | Membership Management System文件上传漏洞（CNVD-2026-35684） | 2024-03-01 | 2026-09-01 |
| cnvd-2026-35217 | Real Estate Management System跨站脚本漏洞（CNVD-2026-35217） | 2024-02-02 | 2026-09-01 |
| cnvd-2026-35218 | Real Estate Management System SQL注入漏洞（CNVD-2026-35218） | 2024-01-24 | 2026-09-01 |
| cnvd-2026-35374 | Tenda W9堆栈缓冲区溢出漏洞 | 2023-12-28 | 2026-09-04 |
| cnvd-2026-35373 | Tenda W9命令注入漏洞（CNVD-2026-3537332） | 2023-12-28 | 2026-09-04 |
| cnvd-2026-35372 | Tenda W9命令注入漏洞 | 2023-12-28 | 2026-09-04 |
| cnvd-2026-35378 | Huawei HarmonyOS/EMUI未授权文件访问漏洞 | 2023-12-07 | 2026-09-04 |
| cnvd-2026-35377 | Huawei HarmonyOS/EMUI权限验证漏洞（CNVD-2026-3537773） | 2023-12-07 | 2026-09-04 |
| cnvd-2026-35376 | Huawei HarmonyOS/EMUI未授权访问漏洞（CNVD-2026-3537674） | 2023-12-07 | 2026-09-04 |
| cnvd-2026-35375 | Huawei HarmonyOS/EMUI未授权访问漏洞 | 2023-12-07 | 2026-09-04 |
| cnvd-2026-35379 | Huawei EMUI超出取值范围漏洞 | 2023-11-13 | 2026-09-04 |
| cnvd-2026-35383 | Huawei HarmonyOS/EMUI身份验证绕过漏洞 | 2023-11-06 | 2026-09-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0957 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0956 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0955 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0954 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0953 | Vulnérabilité dans Microsoft Azure | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0952 | Multiples vulnérabilités dans PHP | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0951 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0950 | Vulnérabilité dans Cisco Firewall Management Center | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0949 | Multiples vulnérabilités dans les produits VMware | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0948 | Vulnérabilité dans Ruby on Rails activestorage | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0947 | Multiples vulnérabilités dans Node.js | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0946 | Multiples vulnérabilités dans GitLab | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0945 | Multiples vulnérabilités dans Google Chrome | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0944 | Vulnérabilité dans CPython | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0943 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0942 | Multiples vulnérabilités dans Xen | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0941 | Multiples vulnérabilités dans Citrix XenServer | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0940 | Vulnérabilité dans Apache Tomcat | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0939 | Multiples vulnérabilités dans Samba | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0938 | Multiples vulnérabilités dans les produits Apple | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0937 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0936 | Vulnérabilité dans Traefik | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0935 | Multiples vulnérabilités dans GLPI | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0934 | Multiples vulnérabilités dans les produits Atlassian | 2026-07-27T00:00:00.000000 | 2026-07-27T00:00:00.000000 |
| certfr-2026-avi-0933 | Multiples vulnérabilités dans les produits IBM | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0932 | Multiples vulnérabilités dans les produits ESET | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0931 | Vulnérabilité dans les produits Moxa | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0930 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0929 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0928 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |