Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118633 | 8.1 (v3.1) 9.2 (v4.0) | A path traversal vulnerability allows a remote un… |
Sophos |
SG UTM |
2026-10-28T18:45:59.892Z | 2026-10-28T18:45:59.892Z |
| cve-2026-118258 | i18next-http-backend: Query-parameter injection throug… |
i18next |
i18next-http-backend |
2026-10-28T18:33:30.672Z | 2026-10-28T18:33:30.672Z | |
| cve-2026-118257 | Vue I18n: escapeParameter does not prevent XSS through… |
intlify |
vue-i18n |
2026-10-28T18:23:49.400Z | 2026-10-28T18:23:49.400Z | |
| cve-2026-118256 | Vue I18n: `escapeParameter` does not escape named valu… |
intlify |
vue-i18n |
2026-10-28T18:20:14.644Z | 2026-10-28T18:20:14.644Z | |
| cve-2026-118255 | Highcharts Grid: javascript: URL in credits.href runs … |
highcharts |
highcharts |
2026-10-28T18:17:14.543Z | 2026-10-28T18:17:14.543Z | |
| cve-2026-118254 | Highcharts Grid: pagination language options are parse… |
highcharts |
highcharts |
2026-10-28T18:13:20.084Z | 2026-10-28T18:13:20.084Z | |
| cve-2026-118253 | Highcharts Dashboards: fullscreen labels are parsed as HTML |
highcharts |
highcharts |
2026-10-28T18:11:03.809Z | 2026-10-28T18:11:03.809Z | |
| cve-2026-118252 | Highcharts Dashboards: sidebar component labels are pa… |
highcharts |
highcharts |
2026-10-28T18:08:33.407Z | 2026-10-28T18:08:33.407Z | |
| cve-2026-106484 | N/A | Insufficient policy enforcement in chrome-devtool… |
Google |
chrome-devtools-mcp |
2026-10-28T18:04:06.666Z | 2026-10-29T13:22:37.480Z |
| cve-2026-118251 | Highcharts: javascript: URL in credits.href runs scrip… |
highcharts |
highcharts |
2026-10-28T18:02:46.576Z | 2026-10-28T18:02:46.576Z | |
| cve-2026-118250 | Highcharts: dotted series.keys paths write to Object.p… |
highcharts |
highcharts |
2026-10-28T17:59:48.828Z | 2026-10-28T17:59:48.828Z | |
| cve-2026-118249 | Highcharts: series column construction writes to Objec… |
highcharts |
highcharts |
2026-10-28T17:57:18.323Z | 2026-10-28T17:57:18.323Z | |
| cve-2026-118248 | Highcharts Dashboards: editableOptions.propertyPath wr… |
highcharts |
highcharts |
2026-10-28T17:55:47.520Z | 2026-10-28T17:55:47.520Z | |
| cve-2026-118247 | Highcharts Dashboards / Grid Pro: `DataTable.setCell` … |
highcharts |
highcharts |
2026-10-28T17:50:59.526Z | 2026-10-28T17:50:59.526Z | |
| cve-2026-118246 | Highcharts Core: `breadcrumbs.style` keys become SVG e… |
highcharts |
highcharts |
2026-10-28T17:47:18.817Z | 2026-10-28T17:47:18.817Z | |
| cve-2026-118245 | Highcharts Dashboards: `chartConstructor` is an unchec… |
highcharts |
highcharts |
2026-10-28T17:44:51.571Z | 2026-10-28T17:44:51.571Z | |
| cve-2026-118244 | Highcharts Core: AST `DOMParser` fallback assigns unsa… |
highcharts |
highcharts |
2026-10-28T17:36:43.768Z | 2026-10-28T17:36:43.768Z | |
| cve-2026-116273 | N/A | MIME::Parser versions before 5.521 for Perl set no lim… |
|
|
2026-10-28T17:34:44.660Z | 2026-10-28T17:34:44.660Z |
| cve-2026-116272 | N/A | MIME::Field::ParamVal versions before 5.521 for Perl d… |
|
|
2026-10-28T17:34:25.862Z | 2026-10-28T17:34:25.862Z |
| cve-2026-116271 | N/A | MIME::Parser::FileUnder versions before 5.521 for Perl… |
|
|
2026-10-28T17:34:06.757Z | 2026-10-28T17:34:06.757Z |
| cve-2026-116270 | N/A | MIME::Words versions before 5.521 for Perl allow memor… |
|
|
2026-10-28T17:33:48.187Z | 2026-10-28T17:33:48.187Z |
| cve-2026-118243 | Highcharts Dashboards: `__proto__` data table id write… |
highcharts |
highcharts |
2026-10-28T17:33:31.422Z | 2026-10-28T17:33:31.422Z | |
| cve-2026-116269 | N/A | MIME::Field::ParamVal versions before 5.521 for Perl t… |
|
|
2026-10-28T17:33:22.332Z | 2026-10-28T17:33:22.332Z |
| cve-2026-116268 | N/A | MIME::Field::ParamVal versions before 5.521 for Perl a… |
|
|
2026-10-28T17:33:04.336Z | 2026-10-28T17:33:04.336Z |
| cve-2026-116267 | N/A | MIME::Parser versions before 5.521 for Perl allow memo… |
|
|
2026-10-28T17:32:45.677Z | 2026-10-28T17:32:45.677Z |
| cve-2026-116266 | N/A | MIME::Head versions from 5.518 before 5.521 for Perl d… |
|
|
2026-10-28T17:32:28.565Z | 2026-10-28T17:32:28.565Z |
| cve-2026-116265 | N/A | MIME::Field::ParamVal versions before 5.521 for Perl d… |
|
|
2026-10-28T17:32:11.827Z | 2026-10-28T17:32:11.827Z |
| cve-2026-110183 | 4.3 (v3.1) | PostgreSQL Anonymizer: statistics can expose some of t… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:53.824Z | 2026-10-28T17:31:53.824Z |
| cve-2026-110182 | 4.3 (v3.1) | PostgreSQL Anonymizer: anon.partial() and anon.partial… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:53.230Z | 2026-10-28T17:31:53.230Z |
| cve-2026-110181 | 6.5 (v3.1) | PostgreSQL Anonymizer: Function declared with SQL-stan… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:52.642Z | 2026-10-28T17:31:52.642Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-003254 | Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection | 2024-06-03T14:53+09:00 | 2024-06-03T14:53+09:00 |
| jvndb-2024-003253 | Multiple vulnerabilities in Sharp and Toshiba Tec MFPs | 2024-06-03T14:36+09:00 | 2024-06-03T14:36+09:00 |
| jvndb-2024-000056 | awkblog vulnerable to OS command injection | 2024-05-30T14:39+09:00 | 2024-05-30T14:39+09:00 |
| jvndb-2024-000055 | Redmine DMSF Plugin vulnerable to path traversal | 2024-05-29T14:13+09:00 | 2024-05-29T14:13+09:00 |
| jvndb-2024-000054 | EC-Orange vulnerable to authorization bypass | 2024-05-29T14:06+09:00 | 2024-05-29T14:06+09:00 |
| jvndb-2024-003249 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-05-29T12:33+09:00 | 2024-05-29T12:33+09:00 |
| jvndb-2024-000053 | Multiple vulnerabilities in Unifier and Unifier Cast | 2024-05-28T14:47+09:00 | 2024-05-28T14:47+09:00 |
| jvndb-2024-000052 | Multiple vulnerabilities in UTAU | 2024-05-28T14:23+09:00 | 2024-05-28T14:23+09:00 |
| jvndb-2024-003242 | OMRON NJ/NX series vulnerable to insufficient verification of data authenticity | 2024-05-28T12:28+09:00 | 2024-07-26T16:27+09:00 |
| jvndb-2024-000051 | Splunk Config Explorer vulnerable to cross-site scripting | 2024-05-24T13:50+09:00 | 2024-05-24T13:50+09:00 |
| jvndb-2024-000050 | WordPress Plugin "WP Booking" vulnerable to cross-site scripting | 2024-05-24T13:41+09:00 | 2024-05-24T13:41+09:00 |
| jvndb-2024-000046 | Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification | 2024-05-21T13:33+09:00 | 2024-05-21T13:33+09:00 |
| jvndb-2024-003188 | Panasonic KW Watcher vulnerable to memory buffer error | 2024-05-17T15:46+09:00 | 2024-05-17T15:46+09:00 |
| jvndb-2023-021762 | Ruijie BCR810W/BCR860 vulnerable to OS command injection | 2024-05-17T13:54+09:00 | 2024-05-17T13:54+09:00 |
| jvndb-2024-000049 | WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal | 2024-05-17T13:33+09:00 | 2024-05-17T13:33+09:00 |
| jvndb-2024-003187 | Multiple vulnerabilities in Field Logic DataCube | 2024-05-17T12:05+09:00 | 2024-05-17T12:05+09:00 |
| jvndb-2024-002342 | Central Dogma vulnerable to cross-site scripting | 2024-05-13T17:27+09:00 | 2024-05-13T17:27+09:00 |
| jvndb-2024-000047 | Multiple vulnerabilities in Cybozu Garoon | 2024-05-13T15:19+09:00 | 2024-05-13T15:19+09:00 |
| jvndb-2024-000045 | "OfferBox" App uses a hard-coded secret key | 2024-05-10T15:11+09:00 | 2024-05-10T15:11+09:00 |
| jvndb-2024-003181 | Hidden Functionality vulnerability in DT900 | 2024-05-10T13:59+09:00 | 2024-05-10T13:59+09:00 |
| jvndb-2024-000048 | Phormer vulnerable to cross-site scripting | 2024-05-10T13:48+09:00 | 2024-05-10T13:48+09:00 |
| jvndb-2024-000043 | Multiple vulnerabilities in MosP kintai kanri | 2024-05-09T14:10+09:00 | 2024-05-09T14:10+09:00 |
| jvndb-2024-000044 | WordPress Plugin "Heateor Social Login WordPress" vulnerable to cross-site scripting | 2024-05-08T13:43+09:00 | 2024-05-08T13:43+09:00 |
| jvndb-2024-003178 | Trend Micro Maximum Security vulnerable to improper link resolution (CVE-2024-32849) | 2024-05-08T10:19+09:00 | 2024-05-08T10:19+09:00 |
| jvndb-2024-003119 | NETGEAR routers vulnerable to buffer overflow | 2024-04-25T11:21+09:00 | 2024-04-25T11:21+09:00 |
| jvndb-2024-000042 | Multiple vulnerabilities in RoamWiFi R10 | 2024-04-24T13:44+09:00 | 2024-04-24T13:44+09:00 |
| jvndb-2024-003116 | Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer | 2024-04-24T10:13+09:00 | 2024-04-24T10:13+09:00 |
| jvndb-2024-000901 | TvRock vulnerable to cross-site request forgery | 2024-04-23T18:22+09:00 | 2024-04-23T18:22+09:00 |
| jvndb-2024-000903 | TvRock vulnerable to denial-of-service (DoS) | 2024-04-23T18:21+09:00 | 2024-04-23T18:21+09:00 |
| jvndb-2024-003108 | Armeria-saml improperly handles SAML messages | 2024-04-22T17:28+09:00 | 2024-04-22T17:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0867 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-15T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0866 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0865 | Multiples vulnérabilités dans les produits IBM | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0864 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0863 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0862 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0861 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0860 | Multiples vulnérabilités dans les produits Siemens | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0859 | Multiples vulnérabilités dans Suricata | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0858 | Vulnérabilité dans CPython | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0857 | Vulnérabilité dans NetApp ONTAP 9 | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0856 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2026-07-10T00:00:00.000000 | 2026-07-10T00:00:00.000000 |
| certfr-2026-avi-0855 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0854 | Vulnérabilité dans Microsoft Edge | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0853 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0852 | Multiples vulnérabilités dans les produits Juniper Networks | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0851 | Multiples vulnérabilités dans Traefik | 2026-07-09T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0850 | Multiples vulnérabilités dans GitLab | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0849 | Multiples vulnérabilités dans Wireshark | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0848 | Multiples vulnérabilités dans Google Chrome | 2026-07-09T00:00:00.000000 | 2026-07-09T00:00:00.000000 |
| certfr-2026-avi-0847 | Multiples vulnérabilités dans Joomla! | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0846 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0845 | Multiples vulnérabilités dans les produits Foxit | 2026-07-08T00:00:00.000000 | 2026-07-08T00:00:00.000000 |
| certfr-2026-avi-0844 | Vulnérabilité dans Synacor Zimbra Collaboration | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0843 | Multiples vulnérabilités dans PHP | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0842 | Multiples vulnérabilités dans Postfix | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0841 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0840 | Multiples vulnérabilités dans Microsoft Edge | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0839 | Vulnérabilité dans Mozilla Firefox pour iOS | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |
| certfr-2026-avi-0838 | Multiples vulnérabilités dans SPIP | 2026-07-07T00:00:00.000000 | 2026-07-07T00:00:00.000000 |