Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118664 | decode-uri-component: Denial of service via quadratic … |
SamVerschueren |
decode-uri-component |
2026-10-28T20:37:19.057Z | 2026-10-28T20:37:19.057Z | |
| cve-2026-118663 | @hono/node-server: `serveStatic` decodes the request p… |
honojs |
node-server |
2026-10-28T20:35:22.948Z | 2026-10-28T20:35:22.948Z | |
| cve-2026-118662 | Vite: `server.fs.deny` bypassed with queries |
vitejs |
vite |
2026-10-28T20:33:36.440Z | 2026-10-28T20:33:36.440Z | |
| cve-2026-118661 | Happy DOM: Cookie scope forgery: no DNS-label boundary… |
capricorn86 |
happy-dom |
2026-10-28T20:30:23.868Z | 2026-10-28T20:30:23.868Z | |
| cve-2026-118660 | Happy DOM: SSRF via iframe and link stylesheet when pa… |
capricorn86 |
happy-dom |
2026-10-28T20:23:10.122Z | 2026-10-28T20:23:10.122Z | |
| cve-2026-118659 | @happy-dom/server-renderer: ServerRendererServer Targe… |
capricorn86 |
happy-dom |
2026-10-28T20:20:29.561Z | 2026-10-28T20:20:29.561Z | |
| cve-2026-118658 | Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWW… |
labstack |
echo |
2026-10-28T20:17:11.083Z | 2026-10-28T20:17:11.083Z | |
| cve-2026-118657 | Echo: HTTPS Redirect and HSTS Bypass via Unconditional… |
labstack |
echo |
2026-10-28T20:14:09.883Z | 2026-10-28T20:14:09.883Z | |
| cve-2026-118656 | Echo: Open Redirect via Control-Character Prefix Defea… |
labstack |
echo |
2026-10-28T20:12:13.757Z | 2026-10-28T20:12:13.757Z | |
| cve-2026-76418 | Cisco Secure Firewall Adaptive Security Appliance and … |
Cisco |
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software |
2026-10-28T20:05:31.926Z | 2026-10-29T03:57:11.195Z | |
| cve-2026-118655 | Echo: Static Middleware Double-Unescape Path Traversal |
labstack |
echo |
2026-10-28T20:03:56.897Z | 2026-10-28T20:03:56.897Z | |
| cve-2026-117574 | 9.1 (v3.1) | Ai-gateway-payload-processing: ai-gateway-payload-proc… |
Red Hat |
Red Hat OpenShift AI (RHOAI) |
2026-10-28T20:02:14.895Z | 2026-10-28T20:02:14.895Z |
| cve-2026-118654 | Echo static file middleware route protection bypass vi… |
labstack |
echo |
2026-10-28T19:59:27.911Z | 2026-10-28T19:59:27.911Z | |
| cve-2026-13451 | 7.7 (v3.1) | Kserve: kserve: server-side request forgery via malici… |
Red Hat |
Red Hat OpenShift AI (RHOAI) |
2026-10-28T19:52:51.913Z | 2026-10-28T19:52:51.913Z |
| cve-2026-61542 | Gearboy advisory / Gearsystem body: Unauthenticated ne… |
drhelius |
Gearboy |
2026-10-28T19:48:42.991Z | 2026-10-28T19:48:42.991Z | |
| cve-2026-54162 | Ember: Unneutralised terminal escape/control sequences… |
alexandre-daubois |
ember |
2026-10-28T19:44:41.999Z | 2026-10-28T19:44:41.999Z | |
| cve-2026-61529 | Endatix: Blind second-order SSRF via anonymous form-su… |
endatix |
endatix |
2026-10-28T19:43:17.490Z | 2026-10-28T19:43:17.490Z | |
| cve-2026-118653 | Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For … |
labstack |
echo |
2026-10-28T19:42:05.556Z | 2026-10-28T19:42:05.556Z | |
| cve-2026-118652 | Echo: Reflected Cross-Site Scripting (XSS) via unsanit… |
labstack |
echo |
2026-10-28T19:35:47.103Z | 2026-10-28T19:35:47.103Z | |
| cve-2026-115415 | 5.9 (v4.0) 6.5 (v3.1) | Secret masking bypass in the environment tool in Stran… |
amazon |
strands-agents-tools |
2026-10-28T19:33:10.542Z | 2026-10-28T19:37:36.733Z |
| cve-2026-118651 | Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-… |
labstack |
echo |
2026-10-28T19:30:01.320Z | 2026-10-28T19:31:47.851Z | |
| cve-2026-63190 | FearlessCMS: Unauthenticated debug scripts expose file… |
fearlessgeekmedia |
FearlessCMS |
2026-10-28T19:28:00.080Z | 2026-10-28T19:28:00.080Z | |
| cve-2026-118650 | Echo: middleware.Static: `%2F`-encoded path bypasses r… |
labstack |
echo |
2026-10-28T19:25:02.952Z | 2026-10-28T19:25:02.952Z | |
| cve-2026-118266 | Echo: CSRF Protection Bypass via MethodOverride Rewrit… |
labstack |
echo |
2026-10-28T19:21:47.729Z | 2026-10-28T19:21:47.729Z | |
| cve-2026-78674 | 8.8 (v3.1) | Remote Code Execution via BPMN System REST APIs in Mul… |
WSO2 |
Enterprise Integrator (BPS profile) |
2026-10-28T19:21:38.203Z | 2026-10-29T02:02:13.846Z |
| cve-2026-6647 | 7.4 (v3.1) | Incomplete OAuth Token Revocation via Case Mismatch in… |
WSO2 |
WSO2 Identity Server |
2026-10-28T19:21:35.702Z | 2026-10-29T02:02:13.994Z |
| cve-2026-3583 | 3.1 (v3.1) | Improper Token Revocation via OAuth2 Scope Enforcement… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:34.577Z | 2026-10-29T02:02:14.134Z |
| cve-2026-11854 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint Error… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:33.216Z | 2026-10-29T02:02:14.279Z |
| cve-2025-14260 | 8.3 (v3.1) | Server Side Request Forgery in Multiple WSO2 Products … |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:32.066Z | 2026-10-29T02:02:14.426Z |
| cve-2026-109411 | 8.1 (v3.1) | Samba: access control bypass via vfs_ceph_rgw case-ins… |
Samba |
Samba |
2026-10-28T19:17:45.459Z | 2026-10-29T16:35:36.674Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-018327 | Malleability attack against executables encrypted by CBC mode with no integrity check | 2024-09-11T18:19+09:00 | 2024-09-11T18:19+09:00 |
| jvndb-2024-000095 | Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery | 2024-09-09T16:40+09:00 | 2024-09-09T16:40+09:00 |
| jvndb-2024-000096 | Pgpool-II vulnerable to information disclosure | 2024-09-09T14:58+09:00 | 2024-09-09T14:58+09:00 |
| jvndb-2024-000094 | "@cosme" App fails to restrict custom URL schemes properly | 2024-09-09T14:20+09:00 | 2024-09-09T14:20+09:00 |
| jvndb-2024-000097 | WordPress Plugin "Forminator" vulnerable to cross-site scripting | 2024-09-09T13:51+09:00 | 2024-09-09T13:51+09:00 |
| jvndb-2024-000098 | Multiple products from KINGSOFT JAPAN vulnerable to path traversal | 2024-09-06T15:07+09:00 | 2024-09-06T15:07+09:00 |
| jvndb-2024-000090 | Secure Boot bypass Vulnerability in PRIMERGY | 2024-09-06T14:39+09:00 | 2024-09-06T14:39+09:00 |
| jvndb-2024-000093 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2024-09-04T13:01+09:00 | 2024-09-04T13:01+09:00 |
| jvndb-2024-007002 | Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow | 2024-09-02T14:57+09:00 | 2024-09-02T14:57+09:00 |
| jvndb-2024-000091 | IPCOM vulnerable to information disclosure | 2024-08-30T14:56+09:00 | 2024-08-30T14:56+09:00 |
| jvndb-2024-000092 | Multiple vulnerabilities in WordPress plugin "Carousel Slider" | 2024-08-30T13:58+09:00 | 2024-08-30T13:58+09:00 |
| jvndb-2024-000089 | WindLDR and WindO/I-NV4 store sensitive information in cleartext | 2024-08-29T15:08+09:00 | 2024-09-24T17:14+09:00 |
| jvndb-2024-006787 | xfpt vulnerable to stack-based buffer overflow | 2024-08-29T14:07+09:00 | 2024-08-29T14:07+09:00 |
| jvndb-2024-000088 | Multiple vulnerabilities in ELECOM wireless LAN routers and access points | 2024-08-27T14:40+09:00 | 2026-07-29T15:19+09:00 |
| jvndb-2024-006646 | Authentication Bypass Vulnerability in Hitachi Ops Center Common Services | 2024-08-27T12:01+09:00 | 2024-08-27T12:01+09:00 |
| jvndb-2024-006367 | Unquoted Service Path in Hitachi Device Manager | 2024-08-26T16:27+09:00 | 2024-08-26T16:27+09:00 |
| jvndb-2024-000087 | BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection | 2024-08-23T14:17+09:00 | 2024-08-23T14:17+09:00 |
| jvndb-2024-000086 | Multiple Safie products vulnerable to improper server certificate verification | 2024-08-22T13:51+09:00 | 2024-08-29T12:23+09:00 |
| jvndb-2020-007305 | Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries | 2024-08-22T11:33+09:00 | 2024-08-22T11:33+09:00 |
| jvndb-2017-009536 | Packetbeat vulnerable to denial-of-service (DoS) | 2024-08-21T17:54+09:00 | 2024-08-21T17:54+09:00 |
| jvndb-2018-009127 | Multiple vulnerabilities in LogonTracer | 2024-08-21T17:37+09:00 | 2024-08-21T17:37+09:00 |
| jvndb-2020-002957 | A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit) | 2024-08-20T18:12+09:00 | 2024-08-20T18:12+09:00 |
| jvndb-2020-007306 | Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read | 2024-08-20T17:52+09:00 | 2024-08-20T17:52+09:00 |
| jvndb-2024-000085 | "Rakuten Ichiba App" fails to restrict custom URL schemes properly | 2024-08-20T16:56+09:00 | 2024-08-20T16:56+09:00 |
| jvndb-2024-005167 | EL Injection Vulnerability in Hitachi Tuning Manager | 2024-08-15T09:38+09:00 | 2024-08-15T09:38+09:00 |
| jvndb-2016-000124 | WAON service app for Android fails to verify SSL server certificates | 2024-08-15T09:36+09:00 | 2024-08-15T09:36+09:00 |
| jvndb-2024-000083 | Firmware update for RICOH JavaTM Platform resets the TLS configuration | 2024-08-06T15:13+09:00 | 2024-08-06T15:13+09:00 |
| jvndb-2024-000079 | Cybozu Office vulnerable to bypass browsing restrictions in Custom App | 2024-08-06T14:59+09:00 | 2024-08-06T14:59+09:00 |
| jvndb-2024-000082 | Pimax Play and PiTool accept WebSocket connections from unintended endpoints | 2024-08-05T13:58+09:00 | 2024-08-05T13:58+09:00 |
| jvndb-2024-000084 | Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN | 2024-08-05T13:46+09:00 | 2024-08-05T13:46+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-35382 | Huawei HarmonyOS/EMUI越界写入漏洞 | 2023-11-06 | 2026-09-04 |
| cnvd-2026-35381 | Huawei HarmonyOS/EMUI竞争条件漏洞 | 2023-11-06 | 2026-09-04 |
| cnvd-2026-35380 | Huawei HarmonyOS/EMUI权限控制不当漏洞 | 2023-11-06 | 2026-09-04 |
| cnvd-2026-35181 | Huawei HarmonyOS/EMUI未捕获异常漏洞 | 2023-11-06 | 2026-09-04 |
| cnvd-2026-36546 | D-Link DIR-645身份认证绕过漏洞 | 2023-08-03 | 2026-09-10 |
| cnvd-2026-35390 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35390） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35389 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35389） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35388 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35388） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35387 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35387） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35386 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35386） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35385 | Tenda F1202栈缓冲区溢出漏洞（CNVD-2026-35385） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-35384 | Tenda F1202堆栈缓冲区溢出漏洞（CNVD-2026-35384） | 2023-07-16 | 2026-09-03 |
| cnvd-2026-36547 | TOTOLINK A7100RU命令注入漏洞 | 2023-06-09 | 2026-09-10 |
| cnvd-2026-36550 | TOTOLINK X5000R认证后缓冲区溢出漏洞 | 2023-06-04 | 2026-09-08 |
| cnvd-2026-36549 | TOTOLINK X5000R命令注入漏洞（CNVD-2026-36549） | 2023-06-04 | 2026-09-08 |
| cnvd-2026-36548 | TOTOLINK X5000R命令注入漏洞（CNVD-2026-36548） | 2023-06-04 | 2026-09-08 |
| cnvd-2026-36551 | TOTOLINK A7100RU命令注入漏洞（CNVD-2026-36551） | 2023-03-11 | 2026-09-10 |
| cnvd-2026-36552 | TOTOLINK A7100RU命令注入漏洞（CNVD-2026-36552） | 2023-02-20 | 2026-09-10 |
| cnvd-2026-36553 | D-Link DIR 645A1栈缓冲区溢出漏洞 | 2023-01-30 | 2026-09-10 |
| cnvd-2026-38726 | Tenda AC6缓冲区溢出漏洞 | 2022-12-06 | 2026-09-24 |
| cnvd-2026-38725 | Tenda AC6缓冲区溢出漏洞（CNVD-2026-38725） | 2022-12-06 | 2026-09-24 |
| cnvd-2026-38724 | Tenda AC6缓冲区溢出漏洞（CNVD-2026-38724） | 2022-12-06 | 2026-09-24 |
| cnvd-2026-38723 | Tenda AC6缓冲区溢出漏洞 | 2022-12-06 | 2026-09-24 |
| cnvd-2026-36555 | TOTOLINK T6信任管理问题漏洞 | 2022-09-20 | 2026-09-10 |
| cnvd-2026-36554 | TOTOLINK T6缓冲区溢出漏洞 | 2022-09-20 | 2026-09-10 |
| cnvd-2026-36556 | D-Link DIR-645命令注入漏洞 | 2022-06-30 | 2026-09-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0927 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0926 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0925 | Multiples vulnérabilités dans Google Chrome | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0924 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0923 | Vulnérabilité dans NetApp ONTAP 9 | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0922 | Multiples vulnérabilités dans MongoDB | 2026-07-24T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0921 | Vulnérabilité dans Moodle | 2026-07-23T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0920 | Multiples vulnérabilités dans Oracle Weblogic | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0919 | Multiples vulnérabilités dans Oracle Virtualization | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0918 | Multiples vulnérabilités dans Oracle Systems | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0917 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0916 | Multiples vulnérabilités dans Oracle MySQL | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0915 | Multiples vulnérabilités dans Oracle Java SE | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0914 | Multiples vulnérabilités dans Oracle Database Server | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0913 | Multiples vulnérabilités dans Mozilla Thunderbird | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0912 | Multiples vulnérabilités dans les produits Check Point | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0911 | Multiples vulnérabilités dans les produits Mitel | 2026-07-23T00:00:00.000000 | 2026-07-23T00:00:00.000000 |
| certfr-2026-avi-0910 | Multiples vulnérabilités dans les produits Mozilla | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0909 | Multiples vulnérabilités dans GLPI | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0908 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0907 | Multiples vulnérabilités dans Google Chrome | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0906 | Multiples vulnérabilités dans les produits Elastic | 2026-07-22T00:00:00.000000 | 2026-07-22T00:00:00.000000 |
| certfr-2026-avi-0905 | Multiples vulnérabilités dans Tenable Security Center | 2026-07-21T00:00:00.000000 | 2026-07-24T00:00:00.000000 |
| certfr-2026-avi-0904 | Multiples vulnérabilités dans WordPress | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0903 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0902 | Multiples vulnérabilités dans Mattermost Server | 2026-07-20T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0901 | Multiples vulnérabilités dans les produits IBM | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0900 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0899 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0898 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |