Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116264 | N/A | MIME::Field::ParamVal versions before 5.521 for Perl a… |
|
|
2026-10-28T17:31:52.187Z | 2026-10-28T17:31:52.187Z |
| cve-2026-105620 | 6.5 (v3.1) | PostgreSQL Anonymizer: A masked role reads the authent… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:52.043Z | 2026-10-28T17:31:52.043Z |
| cve-2026-105619 | 4.8 (v3.1) | PostgreSQL Anonymizer: Masking rules of the tables are… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:49.949Z | 2026-10-28T17:31:49.949Z |
| cve-2026-105618 | 5.7 (v3.1) | PostgreSQL Anonymizer: Masked partitions and child tab… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:49.263Z | 2026-10-28T17:31:49.263Z |
| cve-2026-105617 | 5.7 (v3.1) | PostgreSQL Anonymizer: Cached plans bypass transparent… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:48.320Z | 2026-10-28T17:31:48.320Z |
| cve-2026-105616 | 5.7 (v3.1) | PostgreSQL Anonymizer: The secret salt and shift of an… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:47.686Z | 2026-10-28T17:31:47.686Z |
| cve-2026-105615 | 3.5 (v3.1) | PostgreSQL Anonymizer: Masked roles can read the stati… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:46.771Z | 2026-10-28T17:31:46.771Z |
| cve-2026-105614 | 4.7 (v3.1) | PostgreSQL Anonymizer: Unbounded image-decode memory a… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:45.821Z | 2026-10-28T17:31:45.821Z |
| cve-2026-105613 | 4.7 (v3.1) | PostgreSQL Anonymizer: Unbounded memory allocation (Do… |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:45.232Z | 2026-10-28T17:31:45.232Z |
| cve-2026-105612 | 3.5 (v3.1) | PostgreSQL Anonymizer: Data-modifying CTEs bypass the … |
DALIBO |
PostgreSQL Anonymizer |
2026-10-28T17:31:44.639Z | 2026-10-28T17:31:44.639Z |
| cve-2026-118242 | Highcharts Grid: custom icon definition objects writte… |
highcharts |
highcharts |
2026-10-28T17:30:55.383Z | 2026-10-28T17:30:55.383Z | |
| cve-2026-84725 | 8.1 (v3.1) | Openjdk-orb: incomplete fix for cve-2026-15560,unauthe… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7 |
2026-10-28T17:30:13.626Z | 2026-10-28T17:30:13.626Z |
| cve-2026-116797 | Highcharts Grid Pro: cell-renderer `attributes` map wr… |
highcharts |
highcharts |
2026-10-28T17:28:33.128Z | 2026-10-28T19:48:29.425Z | |
| cve-2026-79656 | OAuth and OIDC tokens written unredacted to server log… |
Grafana |
Grafana OSS |
2026-10-28T17:23:44.625Z | 2026-10-28T17:23:44.625Z | |
| cve-2026-116796 | Highcharts Core: `javascript:` URL in an `xlink:href` … |
highcharts |
highcharts |
2026-10-28T17:23:02.604Z | 2026-10-28T17:23:02.604Z | |
| cve-2026-58458 | 6.9 (v4.0) 6.5 (v3.1) | Don't Starve Together Memory Corruption via world_gen_data |
Klei Entertainment |
Don't Starve Together |
2026-10-28T17:17:37.710Z | 2026-10-28T17:17:37.710Z |
| cve-2026-117501 | N/A | HTTP::Body versions before 1.24_01 for Perl allow memo… |
|
|
2026-10-28T17:17:28.215Z | 2026-10-28T17:17:28.215Z |
| cve-2026-117500 | N/A | HTTP::Body versions before 1.24_01 for Perl allow CPU … |
|
|
2026-10-28T17:17:11.051Z | 2026-10-28T17:17:11.051Z |
| cve-2026-116531 | N/A | HTTP::Body versions before 1.23_01 for Perl lose track… |
|
|
2026-10-28T17:16:42.065Z | 2026-10-28T17:16:42.065Z |
| cve-2026-116285 | N/A | HTTP::Body versions before 1.23_01 for Perl allow CPU … |
|
|
2026-10-28T17:16:16.997Z | 2026-10-28T17:16:16.997Z |
| cve-2026-116135 | N/A | HTTP::Body versions before 1.23_01 for Perl drop mixed… |
|
|
2026-10-28T17:15:50.270Z | 2026-10-28T17:15:50.270Z |
| cve-2026-116134 | N/A | HTTP::Body versions before 1.23_01 for Perl allow memo… |
|
|
2026-10-28T17:15:31.799Z | 2026-10-28T17:15:31.799Z |
| cve-2026-116133 | N/A | HTTP::Body versions before 1.23_01 for Perl allow CPU … |
|
|
2026-10-28T17:15:16.522Z | 2026-10-28T17:15:16.522Z |
| cve-2026-116132 | N/A | HTTP::Body versions before 1.23_01 for Perl leave the … |
|
|
2026-10-28T17:15:00.711Z | 2026-10-28T17:15:00.711Z |
| cve-2026-116131 | N/A | HTTP::Body versions before 1.23_01 for Perl allow memo… |
|
|
2026-10-28T17:14:43.357Z | 2026-10-28T17:14:43.357Z |
| cve-2026-116795 | RE2JS: Quadratic-time denial of service in re2js lookb… |
le0pard |
re2js |
2026-10-28T17:14:15.988Z | 2026-10-28T17:14:15.988Z | |
| cve-2026-116794 | russh: Agent server never calls `Agent::confirm`, so k… |
Eugeny |
russh |
2026-10-28T17:06:57.542Z | 2026-10-28T17:06:57.542Z | |
| cve-2026-82962 | 6.5 (v3.1) | Out-of-bounds write in Zephyr Ethernet L2 when adding … |
zephyrproject |
zephyr |
2026-10-28T16:59:00.030Z | 2026-10-28T16:59:00.030Z |
| cve-2026-82961 | 7.8 (v3.1) | Unvalidated pin index in GPIO syscall handlers allows … |
zephyrproject |
zephyr |
2026-10-28T16:58:58.927Z | 2026-10-28T16:58:58.927Z |
| cve-2026-118619 | 8.8 (v3.0) | Ultralytics Google Drive Download Path Traversal Remot… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:34.850Z | 2026-10-28T16:54:34.850Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-014491 | LINE client for iOS vulnerable to improper server certificate verification | 2024-04-22T15:27+09:00 | 2024-04-22T15:27+09:00 |
| jvndb-2024-000041 | Multiple vulnerabilities in WordPress Plugin "Forminator" | 2024-04-18T13:53+09:00 | 2024-04-18T13:53+09:00 |
| jvndb-2022-017175 | Proscend Communications M330-W and M330-W5 vulnerable to OS command injection | 2024-04-16T14:30+09:00 | 2024-04-16T14:30+09:00 |
| jvndb-2024-000040 | Multiple vulnerabilities in BUFFALO wireless LAN routers | 2024-04-15T16:29+09:00 | 2024-04-15T16:29+09:00 |
| jvndb-2024-000039 | Multiple vulnerabilities in a-blog cms | 2024-04-10T13:55+09:00 | 2024-04-10T13:55+09:00 |
| jvndb-2024-000038 | Multiple vulnerabilities in WordPress Plugin "Ninja Forms" | 2024-04-08T13:44+09:00 | 2024-04-08T13:44+09:00 |
| jvndb-2024-003068 | Multiple vulnerabilities in Cente middleware | 2024-04-05T15:36+09:00 | 2024-09-24T15:00+09:00 |
| jvndb-2024-000037 | Multiple vulnerabilities in NEC Aterm series | 2024-04-05T14:53+09:00 | 2024-04-05T14:53+09:00 |
| jvndb-2024-003067 | Multiple vulnerabilities in PLANEX COMMUNICATIONS wireless LAN routers | 2024-04-05T14:17+09:00 | 2024-04-05T14:17+09:00 |
| jvndb-2024-003051 | FURUNO SYSTEMS Managed Switch ACERA 9010 running in non MS mode with the initial configuration has no password | 2024-04-02T18:03+09:00 | 2024-04-02T18:03+09:00 |
| jvndb-2024-003050 | KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries | 2024-04-01T14:44+09:00 | 2024-04-01T14:44+09:00 |
| jvndb-2024-003049 | Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 | 2024-04-01T12:31+09:00 | 2024-09-25T13:51+09:00 |
| jvndb-2024-000036 | "Yahoo! JAPAN" App vulnerable to cross-site scripting | 2024-03-29T13:28+09:00 | 2024-03-29T13:28+09:00 |
| jvndb-2024-003047 | SEEnergy SVR-116 vulnerable to OS command injection | 2024-03-28T11:38+09:00 | 2024-03-28T11:38+09:00 |
| jvndb-2024-003026 | Security information for Hitachi Disk Array Systems | 2024-03-27T15:52+09:00 | 2024-03-27T15:52+09:00 |
| jvndb-2024-000035 | Multiple vulnerabilities in WordPress Plugin "Survey Maker" | 2024-03-27T14:48+09:00 | 2024-03-27T14:48+09:00 |
| jvndb-2024-000034 | SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries | 2024-03-27T14:31+09:00 | 2024-03-27T14:31+09:00 |
| jvndb-2024-003025 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2024-03-27T14:26+09:00 | 2026-05-15T15:32+09:00 |
| jvndb-2024-000905 | Mini Thread vulnerable to cross-site scripting | 2024-03-26T17:43+09:00 | 2024-03-26T17:43+09:00 |
| jvndb-2024-000906 | ffBull vulnerable to OS command injection | 2024-03-26T16:07+09:00 | 2024-03-26T16:07+09:00 |
| jvndb-2024-000900 | "EasyRange" may insecurely load executable files | 2024-03-26T15:50+09:00 | 2024-03-26T15:50+09:00 |
| jvndb-2024-000907 | 0ch BBS Script (0ch) vulnerable to cross-site scripting | 2024-03-26T15:35+09:00 | 2024-03-26T15:35+09:00 |
| jvndb-2024-000902 | TvRock vulnerable to cross-site scripting | 2024-03-26T14:27+09:00 | 2024-03-26T14:27+09:00 |
| jvndb-2024-000904 | WebProxy vulnerable to OS command injection | 2024-03-26T14:19+09:00 | 2024-03-26T14:19+09:00 |
| jvndb-2023-025113 | BUFFALO LinkStation 200 series vulnerable to arbitrary code execution | 2024-03-25T18:16+09:00 | 2024-03-25T18:16+09:00 |
| jvndb-2024-003016 | Multiple vulnerabilities in home gateway HGW BL1500HM | 2024-03-25T17:28+09:00 | 2025-03-28T12:01+09:00 |
| jvndb-2024-000033 | WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery | 2024-03-25T13:31+09:00 | 2024-03-25T13:31+09:00 |
| jvndb-2024-003008 | Sangoma Technologies CG/MG family driver cg6kwin2k.sys vulnerable to insufficient access control on its IOCTL | 2024-03-22T13:50+09:00 | 2024-04-24T11:45+09:00 |
| jvndb-2024-000032 | Multiple vulnerabilities in FitNesse | 2024-03-18T14:08+09:00 | 2024-03-19T11:02+09:00 |
| jvndb-2024-000031 | "ABEMA" App for Android fails to restrict access permissions | 2024-03-15T16:37+09:00 | 2024-03-15T16:37+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0837 | Vulnérabilité dans PostgreSQL JDBC | 2026-07-06T00:00:00.000000 | 2026-07-06T00:00:00.000000 |
| certfr-2026-avi-0836 | Multiples vulnérabilités dans OpenSSH | 2026-07-06T00:00:00.000000 | 2026-07-06T00:00:00.000000 |
| certfr-2026-avi-0835 | Multiples vulnérabilités dans Roundcube | 2026-07-06T00:00:00.000000 | 2026-07-21T00:00:00.000000 |
| certfr-2026-avi-0834 | Multiples vulnérabilités dans les produits IBM | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0833 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0832 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0831 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0830 | Vulnérabilité dans FreeBSD | 2026-07-03T00:00:00.000000 | 2026-07-03T00:00:00.000000 |
| certfr-2026-avi-0829 | Multiples vulnérabilités dans Google Chrome | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0828 | Vulnérabilité dans CPython | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0827 | Multiples vulnérabilités dans Mozilla Thunderbird | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0826 | Multiples vulnérabilités dans les produits Elastic | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0825 | Multiples vulnérabilités dans les produits Cisco | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0824 | Multiples vulnérabilités dans ClamAV | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0823 | Multiples vulnérabilités dans Traefik | 2026-07-02T00:00:00.000000 | 2026-07-02T00:00:00.000000 |
| certfr-2026-avi-0822 | Multiples vulnérabilités dans les produits Citrix | 2026-07-01T00:00:00.000000 | 2026-07-01T00:00:00.000000 |
| certfr-2026-avi-0821 | Multiples vulnérabilités dans Adobe ColdFusion | 2026-07-01T00:00:00.000000 | 2026-07-01T00:00:00.000000 |
| certfr-2026-avi-0820 | Vulnérabilité dans Mozilla Firefox | 2026-07-01T00:00:00.000000 | 2026-07-01T00:00:00.000000 |
| certfr-2026-avi-0819 | Multiples vulnérabilités dans Synology MailPlus Server | 2026-06-30T00:00:00.000000 | 2026-06-30T00:00:00.000000 |
| certfr-2026-avi-0818 | Multiples vulnérabilités dans les produits Apple | 2026-06-30T00:00:00.000000 | 2026-06-30T00:00:00.000000 |
| certfr-2026-avi-0817 | Multiples vulnérabilités dans Apache Tomcat | 2026-06-30T00:00:00.000000 | 2026-06-30T00:00:00.000000 |
| certfr-2026-avi-0816 | Multiples vulnérabilités dans Stormshield Management Center | 2026-06-29T00:00:00.000000 | 2026-06-29T00:00:00.000000 |
| certfr-2026-avi-0815 | Multiples vulnérabilités dans KeyCloak | 2026-06-29T00:00:00.000000 | 2026-06-29T00:00:00.000000 |
| certfr-2026-avi-0814 | Vulnérabilité dans HAProxy | 2026-06-29T00:00:00.000000 | 2026-06-29T00:00:00.000000 |
| certfr-2026-avi-0813 | Multiples vulnérabilités dans Mattermost Server | 2026-06-29T00:00:00.000000 | 2026-07-15T00:00:00.000000 |
| certfr-2026-avi-0812 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-06-29T00:00:00.000000 | 2026-06-29T00:00:00.000000 |
| certfr-2026-avi-0811 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-29T00:00:00.000000 | 2026-06-29T00:00:00.000000 |
| certfr-2026-avi-0810 | Multiples vulnérabilités dans les produits IBM | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0809 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0808 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |