Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-96939 | 7 (v3.1) | Servicing Stack Updates Elevation of Privilege Vulnerability |
Microsoft |
Windows 11 version 23H2 |
2026-10-13T19:01:25.959Z | 2026-10-29T15:19:52.485Z |
| cve-2026-96938 | 6.7 (v3.1) | Windows Distributed File System (DFS) Elevation of Pri… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.768Z | 2026-10-29T15:19:51.973Z |
| cve-2026-96937 | 7 (v3.1) | Microsoft Windows Search Component Elevation of Privil… |
Microsoft |
Windows 10 Version 21H2 |
2026-10-13T19:01:21.679Z | 2026-10-29T15:19:51.386Z |
| cve-2026-85866 | 4.7 (v3.1) | Windows ALPC Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-10-13T19:01:21.597Z | 2026-10-29T15:19:50.766Z |
| cve-2026-69675 | 5.5 (v3.1) | Windows Network File System Information Disclosure Vul… |
Microsoft |
Windows Server 2012 |
2026-10-13T19:01:21.512Z | 2026-10-29T15:19:50.244Z |
| cve-2026-96926 | 5.5 (v3.1) | Role: DNS Server Tampering Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.431Z | 2026-10-29T15:19:49.732Z |
| cve-2026-96929 | 7.8 (v3.1) | Windows Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.356Z | 2026-10-29T15:19:49.223Z |
| cve-2026-96931 | 7.8 (v3.1) | Windows NTFS Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.249Z | 2026-10-29T15:19:48.692Z |
| cve-2026-96932 | 7 (v3.1) | Windows Embedded Mode Service Elevation of Privilege V… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.154Z | 2026-10-29T15:19:48.071Z |
| cve-2026-96934 | 9.8 (v3.1) | Windows DHCP Server Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:21.033Z | 2026-10-29T15:19:47.459Z |
| cve-2026-96930 | 5.5 (v3.1) | Windows Universal Disk Format File System Driver (UDFS… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.926Z | 2026-10-29T15:19:46.854Z |
| cve-2026-96927 | 5.5 (v3.1) | Windows NTFS Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.853Z | 2026-10-29T15:19:46.397Z |
| cve-2026-96933 | 7.8 (v3.1) | Windows COM+ Event System Service Elevation of Privile… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.740Z | 2026-10-29T15:19:45.945Z |
| cve-2026-96924 | 9.8 (v3.1) | Windows OLE Remote Code Execution Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.654Z | 2026-10-29T15:19:45.334Z |
| cve-2026-96925 | 5.5 (v3.1) | Windows NTFS Information Disclosure Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.552Z | 2026-10-29T15:19:44.816Z |
| cve-2026-96923 | 7 (v3.1) | Windows Workstation Service Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:20.441Z | 2026-10-29T15:19:44.215Z |
| cve-2026-96919 | 7 (v3.1) | Windows Broadcast DVR User Service Elevation of Privil… |
Microsoft |
Windows 10 Version 1809 |
2026-10-13T19:01:20.333Z | 2026-10-29T15:19:43.695Z |
| cve-2026-96918 | 7.8 (v3.1) | Windows NTFS Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.920Z | 2026-10-29T15:19:43.110Z |
| cve-2026-96917 | 8.8 (v3.1) | Windows PCI Bus Driver Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-10-13T19:01:19.838Z | 2026-10-29T15:19:42.509Z |
| cve-2026-96914 | 8.8 (v3.1) | Windows Virtualization-Based Security (VBS) Enclave El… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.745Z | 2026-10-29T15:19:41.977Z |
| cve-2026-96915 | 7.8 (v3.1) | Windows Kernel-Mode Drivers Elevation of Privilege Vul… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.645Z | 2026-10-29T15:19:41.363Z |
| cve-2026-96913 | 8.8 (v3.1) | Windows Kernel Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2026-10-13T19:01:19.529Z | 2026-10-29T15:19:40.759Z |
| cve-2026-96912 | 7.8 (v3.1) | Windows Client License Service Elevation of Privilege … |
Microsoft |
Windows 10 Version 1809 |
2026-10-13T19:01:19.466Z | 2026-10-29T15:19:40.230Z |
| cve-2026-96910 | 5.5 (v3.1) | Microsoft Windows Search Component Information Disclos… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.383Z | 2026-10-29T15:19:39.723Z |
| cve-2026-96911 | 7.8 (v3.1) | Microsoft Windows Search Component Elevation of Privil… |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.309Z | 2026-10-29T15:19:39.207Z |
| cve-2026-96916 | 7.8 (v3.1) | Windows NTFS Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:19.211Z | 2026-10-29T15:19:38.758Z |
| cve-2026-96909 | 9.8 (v3.1) | Windows BitLocker Remote Code Execution Vulnerability |
Microsoft |
Windows 11 version 23H2 |
2026-10-13T19:01:19.106Z | 2026-10-29T15:19:38.150Z |
| cve-2026-96858 | 5.5 (v3.1) | Windows Security Account Manager Tampering Vulnerability |
Microsoft |
Windows 10 Version 21H2 |
2026-10-13T19:01:19.015Z | 2026-10-29T15:19:37.710Z |
| cve-2026-96853 | 4.7 (v3.1) | Windows Win32 Kernel Subsystem Information Disclosure … |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:18.922Z | 2026-10-29T15:19:37.182Z |
| cve-2026-96852 | 7 (v3.1) | Windows TCP/IP Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-10-13T19:01:18.837Z | 2026-10-29T15:19:36.599Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000085 | "Skylark" App fails to restrict custom URL schemes properly | 2023-08-24T13:34+09:00 | 2024-12-03T15:51+09:00 |
| jvndb-2024-000124 | Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers | 2024-12-02T16:38+09:00 | 2024-12-02T16:38+09:00 |
| jvndb-2024-000123 | Multiple FCNT Android devices vulnerable to authentication bypass | 2024-11-29T15:30+09:00 | 2024-11-29T15:30+09:00 |
| jvndb-2024-013702 | Multiple vulnerabilities in FUJI ELECTRIC products | 2024-11-29T14:42+09:00 | 2024-11-29T14:42+09:00 |
| jvndb-2024-000122 | HAProxy vulnerable to HTTP request/response smuggling | 2024-11-27T14:36+09:00 | 2024-11-27T14:36+09:00 |
| jvndb-2024-012461 | Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B | 2024-11-13T14:26+09:00 | 2024-11-26T16:11+09:00 |
| jvndb-2024-000020 | Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater | 2024-02-20T14:14+09:00 | 2024-11-26T15:26+09:00 |
| jvndb-2024-000121 | WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting | 2024-11-26T13:57+09:00 | 2024-11-26T13:57+09:00 |
| jvndb-2024-000106 | Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software | 2024-10-21T11:58+09:00 | 2024-11-21T11:37+09:00 |
| jvndb-2024-000120 | "Kura Sushi Official App Produced by EPARK" for Android uses a hard-coded cryptographic key | 2024-11-20T13:56+09:00 | 2024-11-20T13:56+09:00 |
| jvndb-2024-000119 | Multiple vulnerabilities in FitNesse | 2024-11-15T13:37+09:00 | 2024-11-20T11:18+09:00 |
| jvndb-2024-012941 | Multiple vulnerabilities in Rakuten Turbo 5G | 2024-11-19T10:41+09:00 | 2024-11-19T10:41+09:00 |
| jvndb-2024-000118 | WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting | 2024-11-13T13:50+09:00 | 2024-11-13T13:50+09:00 |
| jvndb-2024-009481 | Insecure initial password configuration issue in SEIKO EPSON Web Config | 2024-10-01T14:14+09:00 | 2024-11-12T10:25+09:00 |
| jvndb-2024-000109 | baserCMS plugin "BurgerEditor" vulnerable to directory listing | 2024-10-10T14:57+09:00 | 2024-11-06T14:45+09:00 |
| jvndb-2024-012017 | Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control | 2024-11-06T11:00+09:00 | 2024-11-06T11:00+09:00 |
| jvndb-2024-011833 | Incorrect authorization vulnerability in OMRON Sysmac Studio | 2024-11-05T15:29+09:00 | 2024-11-05T15:29+09:00 |
| jvndb-2024-011747 | Command injection vulnerability in Trend Micro Cloud Edge | 2024-11-01T14:28+09:00 | 2024-11-01T14:28+09:00 |
| jvndb-2024-011744 | REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers | 2024-11-01T13:49+09:00 | 2024-11-01T13:49+09:00 |
| jvndb-2024-000116 | Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials | 2024-10-30T15:07+09:00 | 2024-10-30T15:07+09:00 |
| jvndb-2024-011256 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-10-28T17:33+09:00 | 2024-10-28T17:33+09:00 |
| jvndb-2024-000115 | Chatwork Desktop Application (Windows) uses a potentially dangerous function | 2024-10-28T14:29+09:00 | 2024-10-28T14:29+09:00 |
| jvndb-2024-000112 | MUSASI version 3 performing authentication on client-side | 2024-10-18T14:40+09:00 | 2024-10-25T16:55+09:00 |
| jvndb-2024-000113 | N-LINE vulnerable to HTML injection | 2024-10-18T14:48+09:00 | 2024-10-25T16:48+09:00 |
| jvndb-2024-004623 | Multiple products from Check Point Software Technologies vulnerable to information disclosure | 2024-07-29T10:23+09:00 | 2024-10-24T16:37+09:00 |
| jvndb-2024-000111 | SHIRASAGI vulnerable to path traversal | 2024-10-16T14:12+09:00 | 2024-10-23T17:35+09:00 |
| jvndb-2024-010802 | Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector | 2024-10-22T13:02+09:00 | 2024-10-22T13:02+09:00 |
| jvndb-2024-000102 | Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions | 2024-09-24T16:00+09:00 | 2024-10-18T11:02+09:00 |
| jvndb-2024-000110 | Multiple vulnerabilities in Exment | 2024-10-11T14:13+09:00 | 2024-10-11T14:13+09:00 |
| jvndb-2024-000104 | MF Teacher Performance Management System vulnerable to cross-site scripting | 2024-09-27T15:00+09:00 | 2024-10-10T11:14+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-35054 | Online Classroom SQL注入漏洞（CNVD-2026-35054） | 2026-05-06 | 2026-08-31 |
| cnvd-2026-35053 | Online Classroom SQL注入漏洞（CNVD-2026-35053） | 2026-05-06 | 2026-08-31 |
| cnvd-2026-35052 | Online Classroom SQL注入漏洞（CNVD-2026-35052） | 2026-05-08 | 2026-08-31 |
| cnvd-2026-35051 | Online Classroom SQL注入漏洞 | 2026-07-24 | 2026-08-31 |
| cnvd-2026-35050 | Student Attendance Management System SQL注入漏洞（CNVD-2026-35050） | 2026-06-09 | 2026-08-31 |
| cnvd-2026-35049 | Student Attendance Management System SQL注入漏洞（CNVD-2026-35049） | 2026-06-09 | 2026-08-31 |
| cnvd-2026-35048 | Student Attendance Management System SQL注入漏洞（CNVD-2026-35048） | 2026-06-09 | 2026-08-31 |
| cnvd-2026-35047 | Student Attendance Management System SQL注入漏洞（CNVD-2026-35047） | 2026-06-09 | 2026-08-31 |
| cnvd-2026-35046 | Student Attendance Management System SQL注入漏洞 | 2026-06-22 | 2026-08-31 |
| cnvd-2026-34515 | Beauty Parlour Management System SQL注入漏洞 | 2026-02-11 | 2026-08-31 |
| cnvd-2026-34514 | Student Management System SQL注入漏洞 | 2026-03-02 | 2026-08-31 |
| cnvd-2026-34513 | Ivanti Endpoint Manager Mobile信任管理问题漏洞 | 2026-05-08 | 2026-08-31 |
| cnvd-2026-34512 | Ivanti Endpoint Manager Mobile访问控制不当漏洞 | 2026-05-08 | 2026-08-31 |
| cnvd-2026-34511 | Ivanti Endpoint Manager Mobile输入验证不当漏洞 | 2026-05-08 | 2026-08-31 |
| cnvd-2026-34510 | Ivanti Endpoint Manager Mobile信息泄露漏洞 | 2026-05-08 | 2026-08-31 |
| cnvd-2026-34509 | Ivanti Endpoint Manager信息泄露漏洞 | 2026-05-18 | 2026-08-31 |
| cnvd-2026-34508 | Ivanti Endpoint Manager SQL注入漏洞 | 2026-05-18 | 2026-08-31 |
| cnvd-2026-34507 | Ivanti Endpoint Manager权限提升漏洞 | 2026-05-18 | 2026-08-31 |
| cnvd-2026-34506 | Ivanti Endpoint Manager加密问题漏洞 | 2026-08-19 | 2026-08-31 |
| cnvd-2026-34505 | WordPress Fluent Forms plugin跨站脚本漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34504 | WordPress Ecwid by Lightspeed Ecommerce Shopping Cart plugin授权问题漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34503 | WordPress Booking for Appointments and Events Calendar plugin授权问题漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34502 | WordPress Customer Email Verification for WooCommerce plugin授权问题漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34501 | WordPress KiviCare plugin访问控制不当漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34500 | WordPress Food Menu plugin访问控制不当漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34499 | WordPress Royal Addons for Elementor plugin跨站脚本漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34498 | WordPress Order Sync with Zendesk for WooCommerce plugin信息泄露漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34497 | WordPress ProSolution WP Client plugin授权问题漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34496 | WordPress ProSolution WP Client plugin服务端请求伪造漏洞 | 2026-08-20 | 2026-08-31 |
| cnvd-2026-34495 | Cisco Crosswork PlanningSQL注入漏洞 | 2026-08-21 | 2026-08-31 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0966 | Multiples vulnérabilités dans LibreNMS | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0965 | Vulnérabilité dans les produits Check Point | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0964 | Multiples vulnérabilités dans Traefik | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0963 | Multiples vulnérabilités dans Google Android | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0962 | Multiples vulnérabilités dans les produits Tenable | 2026-08-04T00:00:00.000000 | 2026-08-04T00:00:00.000000 |
| certfr-2026-avi-0961 | Vulnérabilité dans Microsoft Office | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0960 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0959 | Multiples vulnérabilités dans Papercut | 2026-08-03T00:00:00.000000 | 2026-08-03T00:00:00.000000 |
| certfr-2026-avi-0958 | Multiples vulnérabilités dans les produits IBM | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0957 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0956 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0955 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0954 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0953 | Vulnérabilité dans Microsoft Azure | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0952 | Multiples vulnérabilités dans PHP | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0951 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2026-07-31T00:00:00.000000 | 2026-07-31T00:00:00.000000 |
| certfr-2026-avi-0950 | Vulnérabilité dans Cisco Firewall Management Center | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0949 | Multiples vulnérabilités dans les produits VMware | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0948 | Vulnérabilité dans Ruby on Rails activestorage | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0947 | Multiples vulnérabilités dans Node.js | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0946 | Multiples vulnérabilités dans GitLab | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0945 | Multiples vulnérabilités dans Google Chrome | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0944 | Vulnérabilité dans CPython | 2026-07-30T00:00:00.000000 | 2026-07-30T00:00:00.000000 |
| certfr-2026-avi-0943 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0942 | Multiples vulnérabilités dans Xen | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0941 | Multiples vulnérabilités dans Citrix XenServer | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0940 | Vulnérabilité dans Apache Tomcat | 2026-07-29T00:00:00.000000 | 2026-07-29T00:00:00.000000 |
| certfr-2026-avi-0939 | Multiples vulnérabilités dans Samba | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0938 | Multiples vulnérabilités dans les produits Apple | 2026-07-28T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0921 | Vulnérabilité dans Moodle | 2026-07-23T00:00:00.000000 | 2026-07-28T00:00:00.000000 |