Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118265 | Echo: X-Real-IP extractor trusts the header value inst… |
labstack |
echo |
2026-10-28T19:03:56.934Z | 2026-10-28T19:03:56.934Z | |
| cve-2026-118264 | Echo: Rejected WebSocket upgrades can bypass Echo rout… |
labstack |
echo |
2026-10-28T19:03:01.533Z | 2026-10-28T19:03:01.533Z | |
| cve-2026-118263 | Echo: BodyDump can discard BodyLimit overflow errors f… |
labstack |
echo |
2026-10-28T19:01:30.268Z | 2026-10-28T19:01:30.268Z | |
| cve-2026-118262 | Echo: WebSocket proxy can retain connections and handl… |
labstack |
echo |
2026-10-28T19:00:12.315Z | 2026-10-28T19:00:12.315Z | |
| cve-2026-118688 | 8.8 (v4.0) 7.9 (v3.1) | Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.… |
bytecodealliance |
wasmtime |
2026-10-28T18:59:56.965Z | 2026-10-28T18:59:56.965Z |
| cve-2026-118687 | 8.3 (v4.0) 6.5 (v3.1) | Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.3… |
coder |
coder |
2026-10-28T18:59:56.265Z | 2026-10-28T18:59:56.265Z |
| cve-2026-118686 | 8.7 (v4.0) 7.5 (v3.1) | EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denia… |
espocrm |
espocrm |
2026-10-28T18:59:55.556Z | 2026-10-28T18:59:55.556Z |
| cve-2026-118685 | 6.9 (v4.0) 6.5 (v3.1) | ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass v… |
ToolJet |
ToolJet |
2026-10-28T18:59:54.863Z | 2026-10-28T18:59:54.863Z |
| cve-2026-118684 | 8.2 (v4.0) 5.9 (v3.1) | MONAI before 1.6.1 Missing Integrity Verification via … |
Project-MONAI |
MONAI |
2026-10-28T18:59:54.186Z | 2026-10-28T18:59:54.186Z |
| cve-2026-118683 | 8.6 (v4.0) 8.8 (v3.1) | MONAI 1.2.0 before 1.6.1 Code Execution via bundle con… |
Project-MONAI |
MONAI |
2026-10-28T18:59:53.203Z | 2026-10-28T18:59:53.203Z |
| cve-2026-118681 | 6.3 (v4.0) 3.7 (v3.1) | go-chi chi before 5.5.0 Authentication Bypass via Supr… |
go-chi |
chi |
2026-10-28T18:59:52.523Z | 2026-10-28T18:59:52.523Z |
| cve-2026-118680 | 5.9 (v4.0) 4.4 (v3.1) | SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALRO… |
siyuan-note |
siyuan |
2026-10-28T18:59:51.831Z | 2026-10-28T18:59:51.831Z |
| cve-2026-118679 | 6.9 (v4.0) 7.5 (v3.1) | n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Ex… |
n8n-io |
n8n |
2026-10-28T18:59:51.136Z | 2026-10-28T18:59:51.136Z |
| cve-2026-118678 | 7.1 (v4.0) 7.1 (v3.1) | n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS v… |
n8n-io |
n8n |
2026-10-28T18:59:50.449Z | 2026-10-28T18:59:50.449Z |
| cve-2026-118677 | 5.9 (v4.0) 5.9 (v3.1) | n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link S… |
n8n-io |
n8n |
2026-10-28T18:59:49.747Z | 2026-10-28T18:59:49.747Z |
| cve-2026-118676 | 5.1 (v4.0) 7.1 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Per… |
n8n-io |
n8n |
2026-10-28T18:59:49.071Z | 2026-10-28T18:59:49.071Z |
| cve-2026-118675 | 5.1 (v4.0) 7.1 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Gua… |
n8n-io |
n8n |
2026-10-28T18:59:48.389Z | 2026-10-28T18:59:48.389Z |
| cve-2026-118649 | 8.7 (v4.0) 8.3 (v3.1) | n8n before 2.43.5 and 2.44.1 Authorization Bypass via … |
n8n-io |
n8n |
2026-10-28T18:59:47.664Z | 2026-10-28T18:59:47.664Z |
| cve-2026-118648 | 8.4 (v4.0) 7.3 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via… |
n8n-io |
n8n |
2026-10-28T18:59:46.959Z | 2026-10-28T18:59:46.959Z |
| cve-2026-118647 | 5.3 (v4.0) 8.2 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigg… |
n8n-io |
n8n |
2026-10-28T18:59:46.290Z | 2026-10-28T18:59:46.290Z |
| cve-2026-118646 | 7.1 (v4.0) 6.5 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read… |
n8n-io |
n8n |
2026-10-28T18:59:45.637Z | 2026-10-28T18:59:45.637Z |
| cve-2026-118645 | 7 (v4.0) 8.7 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injecti… |
n8n-io |
n8n |
2026-10-28T18:59:44.935Z | 2026-10-28T18:59:44.935Z |
| cve-2026-118644 | 5.1 (v4.0) 7.7 (v3.1) | n8n before 2.41.5 and 2.42.2 Credential Theft via Erro… |
n8n-io |
n8n |
2026-10-28T18:59:44.266Z | 2026-10-28T18:59:44.266Z |
| cve-2026-118643 | 5.3 (v4.0) 8.2 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exp… |
n8n-io |
n8n |
2026-10-28T18:59:41.954Z | 2026-10-28T18:59:41.954Z |
| cve-2026-118642 | 5.1 (v4.0) 7.1 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Per… |
n8n-io |
n8n |
2026-10-28T18:59:40.775Z | 2026-10-28T18:59:40.775Z |
| cve-2026-118641 | 6.9 (v4.0) 7.5 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 OData $filter … |
n8n-io |
n8n |
2026-10-28T18:59:40.104Z | 2026-10-28T18:59:40.104Z |
| cve-2026-118640 | 5.3 (v4.0) 5.4 (v3.1) | n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Autho… |
n8n-io |
n8n |
2026-10-28T18:59:39.419Z | 2026-10-28T18:59:39.419Z |
| cve-2026-118261 | Echo: Decompress permits unbounded gzip expansion in v4 |
labstack |
echo |
2026-10-28T18:58:43.504Z | 2026-10-28T18:58:43.504Z | |
| cve-2026-118260 | Echo: BodyDump captures request and response bodies wi… |
labstack |
echo |
2026-10-28T18:56:56.747Z | 2026-10-28T18:56:56.747Z | |
| cve-2026-118259 | opentelemetry-java: Quadratic CPU consumption in W3C t… |
open-telemetry |
opentelemetry-java |
2026-10-28T18:53:25.875Z | 2026-10-28T18:53:25.875Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000077 | FFRI AMC vulnerable to OS command injection | 2024-07-30T16:40+09:00 | 2024-07-30T16:40+09:00 |
| jvndb-2024-000078 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2024-07-30T15:34+09:00 | 2026-05-14T18:19+09:00 |
| jvndb-2024-000081 | EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting | 2024-07-30T14:06+09:00 | 2024-07-30T14:06+09:00 |
| jvndb-2024-000080 | EC-CUBE 4 Series improper input validation when installing plugins | 2024-07-30T13:56+09:00 | 2024-07-30T13:56+09:00 |
| jvndb-2024-004595 | Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series | 2024-07-29T17:51+09:00 | 2025-06-30T09:56+09:00 |
| jvndb-2024-000076 | SDoP contains a stack-based buffer overflow vulnerability. | 2024-07-29T17:24+09:00 | 2024-07-29T17:24+09:00 |
| jvndb-2024-000074 | Multiple vulnerabilities in SKYSEA Client View | 2024-07-29T15:28+09:00 | 2026-08-25T12:15+09:00 |
| jvndb-2024-004623 | Multiple products from Check Point Software Technologies vulnerable to information disclosure | 2024-07-29T10:23+09:00 | 2024-10-24T16:37+09:00 |
| jvndb-2024-000075 | ORC vulnerable to stack-based buffer overflow | 2024-07-26T13:55+09:00 | 2024-07-26T13:55+09:00 |
| jvndb-2024-000073 | Assimp vulnerable to heap-based buffer overflow | 2024-07-18T13:44+09:00 | 2024-07-18T13:44+09:00 |
| jvndb-2024-000072 | Cybozu Garoon vulnerable to cross-site scripting | 2024-07-16T16:14+09:00 | 2024-07-16T16:14+09:00 |
| jvndb-2024-000071 | FUJITSU Network Edgiot GW1500 vulnerable to path traversal | 2024-07-16T14:41+09:00 | 2024-07-16T14:41+09:00 |
| jvndb-2024-000070 | Out-of-bounds write vulnerability in Ricoh MFPs and printers | 2024-07-10T14:16+09:00 | 2024-07-10T14:16+09:00 |
| jvndb-2024-000059 | Multiple vulnerabilities in multiple Webmin products | 2024-07-09T14:27+09:00 | 2024-07-09T14:27+09:00 |
| jvndb-2024-000069 | Cleartext transmission issue in TONE store App to TONE store | 2024-07-08T13:43+09:00 | 2024-07-08T13:43+09:00 |
| jvndb-2024-000068 | JP1/Extensible SNMP Agent fails to restrict access permissions | 2024-07-03T14:57+09:00 | 2024-07-03T14:57+09:00 |
| jvndb-2024-003831 | Multiple TP-Link products vulnerable to OS command injection | 2024-06-28T17:38+09:00 | 2024-06-28T17:38+09:00 |
| jvndb-2024-000067 | "Piccoma" App uses a hard-coded API key for an external service | 2024-06-28T13:18+09:00 | 2024-06-28T13:18+09:00 |
| jvndb-2024-000066 | WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery | 2024-06-26T14:25+09:00 | 2024-06-26T14:25+09:00 |
| jvndb-2024-003699 | LINE client for iOS vulnerable to universal cross-site scripting | 2024-06-24T11:05+09:00 | 2024-06-24T11:05+09:00 |
| jvndb-2024-003645 | Multiple vulnerabilities in multiple Trend Micro products | 2024-06-20T14:59+09:00 | 2024-06-20T14:59+09:00 |
| jvndb-2024-000065 | "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly | 2024-06-19T16:04+09:00 | 2024-06-19T16:04+09:00 |
| jvndb-2024-000064 | WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page | 2024-06-19T14:25+09:00 | 2024-06-19T14:25+09:00 |
| jvndb-2024-000061 | Multiple vulnerabilities in Ricoh Streamline NX PC Client | 2024-06-18T14:56+09:00 | 2024-06-18T14:56+09:00 |
| jvndb-2024-000063 | Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR | 2024-06-18T13:43+09:00 | 2024-06-18T13:43+09:00 |
| jvndb-2024-003539 | Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs | 2024-06-17T15:21+09:00 | 2024-06-17T15:21+09:00 |
| jvndb-2024-000062 | Denial-of-service (DoS) vulnerability in IPCOM WAF function | 2024-06-12T15:03+09:00 | 2024-06-12T15:03+09:00 |
| jvndb-2024-000058 | WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection | 2024-06-07T15:24+09:00 | 2024-06-10T17:08+09:00 |
| jvndb-2024-000060 | Multiple vulnerabilities in "FreeFrom - the nostr client" App | 2024-06-07T14:51+09:00 | 2024-06-07T14:51+09:00 |
| jvndb-2024-000057 | Multiple vulnerabilities in UNIVERSAL PASSPORT RX | 2024-06-03T15:32+09:00 | 2024-06-03T15:32+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0897 | Multiples vulnérabilités dans Google Chrome | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0896 | Multiples vulnérabilités dans les produits Microsoft | 2026-07-17T00:00:00.000000 | 2026-07-17T00:00:00.000000 |
| certfr-2026-avi-0895 | Multiples vulnérabilités dans Microsoft Windows | 2026-07-17T00:00:00.000000 | 2026-07-20T00:00:00.000000 |
| certfr-2026-avi-0894 | Multiples vulnérabilités dans les produits F5 | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0893 | Vulnérabilité dans Traefik | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0892 | Vulnérabilité dans les produits ESET | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0891 | Vulnérabilité dans Ruby on Rails | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0890 | Multiples vulnérabilités dans Cisco RoomOS | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0889 | Multiples vulnérabilités dans Drupal | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0888 | Multiples vulnérabilités dans les produits Splunk | 2026-07-16T00:00:00.000000 | 2026-07-16T00:00:00.000000 |
| certfr-2026-avi-0887 | Multiples vulnérabilités dans Mozilla Firefox | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0886 | Vulnérabilité dans Tenable Nessus Agent | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0885 | Multiples vulnérabilités dans les produits Citrix | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0884 | Vulnérabilité dans Xen XAPI | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0883 | Multiples vulnérabilités dans Progress LoadMaster | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0882 | Vulnérabilité dans ESET Inspect Connector | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0881 | Vulnérabilité dans Schneider Electric EcoStruxure | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0880 | Multiples vulnérabilités dans les produits Siemens | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0879 | Multiples vulnérabilités dans les produits Fortinet | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0878 | Vulnérabilité dans Veeam Backup & Replication | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0877 | Multiples vulnérabilités dans les produits SAP | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0876 | Multiples vulnérabilités dans Apache Tomcat | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0875 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access 1000 | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0874 | Multiples vulnérabilités dans Google Chrome | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0873 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0872 | Multiples vulnérabilités dans les produits Microsoft | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0871 | Multiples vulnérabilités dans Microsoft Azure | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0870 | Multiples vulnérabilités dans Microsoft .Net | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0869 | Multiples vulnérabilités dans Microsoft Windows | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0868 | Multiples vulnérabilités dans Microsoft Office | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |