Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118618 | 7.8 (v3.0) | Ultralytics parse_model Code Injection Remote Code Exe… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:29.943Z | 2026-10-28T16:54:29.943Z |
| cve-2026-118617 | 7.8 (v3.0) | Ultralytics load_dataset_cache_file Deserialization of… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:24.766Z | 2026-10-28T16:54:24.766Z |
| cve-2026-118616 | 7.8 (v3.0) | Ultralytics parse_model Code Injection Remote Code Exe… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:20.598Z | 2026-10-28T16:54:20.598Z |
| cve-2026-118615 | 7.8 (v3.0) | Ultralytics torch_safe_load Command Injection Remote C… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:16.852Z | 2026-10-28T16:54:16.852Z |
| cve-2026-118614 | 7.8 (v3.0) | Ultralytics check_det_dataset Code Injection Remote Co… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:13.021Z | 2026-10-28T16:54:13.021Z |
| cve-2026-118613 | 7.8 (v3.0) | Ultralytics torch_load Deserialization of Untrusted Da… |
Ultralytics |
Ultralytics |
2026-10-28T16:54:09.055Z | 2026-10-28T16:54:09.055Z |
| cve-2026-118581 | 6.9 (v4.0) 6.5 (v3.1) | NoSQL injection via mismatched BSON size prefix in raw… |
MongoDB |
Java Driver |
2026-10-28T16:51:21.960Z | 2026-10-28T16:51:21.960Z |
| cve-2026-118611 | 6.8 (v3.0) | Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-ba… |
Alpine |
iLX-F511 |
2026-10-28T16:50:49.460Z | 2026-10-28T16:50:49.460Z |
| cve-2026-118610 | 8.8 (v3.0) | Alpine iLX-F511 Android Auto Service Stack-based Buffe… |
Alpine |
iLX-F511 |
2026-10-28T16:50:44.667Z | 2026-10-28T16:50:44.667Z |
| cve-2026-118609 | 6.8 (v3.0) | Alpine iLX-F511 Android Auto Connection Handler Stack-… |
Alpine |
iLX-F511 |
2026-10-28T16:50:39.557Z | 2026-10-28T16:50:39.557Z |
| cve-2026-118608 | 3.5 (v3.0) | Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process… |
Alpine |
iLX-F511 |
2026-10-28T16:50:34.964Z | 2026-10-28T16:50:34.964Z |
| cve-2026-118607 | 6.8 (v3.0) | Alpine iLX-F511 diagapp Command Injection Vulnerability |
Alpine |
iLX-F511 |
2026-10-28T16:50:30.502Z | 2026-10-28T16:50:30.502Z |
| cve-2026-103506 | SSO settings authorization bypass |
Grafana |
Grafana Enterprise |
2026-10-28T16:50:30.111Z | 2026-10-28T16:50:30.111Z | |
| cve-2026-118606 | 8.8 (v3.0) | Alpine iLX-F511 Framework Service Exposed Dangerous Fu… |
Alpine |
iLX-F511 |
2026-10-28T16:50:23.951Z | 2026-10-28T16:50:23.951Z |
| cve-2026-118605 | 8 (v3.0) | Alpine iLX-F511 prh_sdp_service_search_decode Stack-ba… |
Alpine |
iLX-F511 |
2026-10-28T16:50:18.217Z | 2026-10-28T16:50:18.217Z |
| cve-2026-88858 | Server-side expression parser denial of service |
Grafana |
Grafana OSS |
2026-10-28T16:50:17.291Z | 2026-10-28T16:50:17.291Z | |
| cve-2026-118604 | 6.8 (v3.0) | Alpine iLX-F511 Framework Service Stack-based Buffer O… |
Alpine |
iLX-F511 |
2026-10-28T16:50:11.011Z | 2026-10-28T16:50:11.011Z |
| cve-2026-118603 | 8 (v3.0) | Alpine iLX-F511 vCard Parsing Stack-based Buffer Overf… |
Alpine |
iLX-F511 |
2026-10-28T16:50:07.173Z | 2026-10-28T16:50:07.173Z |
| cve-2026-118602 | 7.8 (v3.0) | Alpine iLX-F511 Fiv.System Exposed Dangerous Method Lo… |
Alpine |
iLX-F511 |
2026-10-28T16:50:03.229Z | 2026-10-28T16:50:03.229Z |
| cve-2026-118601 | 6.3 (v3.0) | Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code… |
Alpine |
iLX-F511 |
2026-10-28T16:49:59.319Z | 2026-10-28T16:49:59.319Z |
| cve-2026-88967 | Azure Monitor access token disclosure via SSRF |
Grafana |
Grafana Enterprise |
2026-10-28T16:49:57.393Z | 2026-10-28T16:49:57.393Z | |
| cve-2026-100105 | Alerting contact point authorization bypass via schema… |
Grafana |
Grafana Enterprise |
2026-10-28T16:48:58.880Z | 2026-10-28T16:48:58.880Z | |
| cve-2026-117626 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:37.200Z | 2026-10-28T16:48:37.200Z |
| cve-2026-117625 | N/A | A missing permission check in Jenkins 2.587 and e… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:36.625Z | 2026-10-28T16:48:36.625Z |
| cve-2026-117624 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:36.029Z | 2026-10-28T16:48:36.029Z |
| cve-2026-117623 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:35.438Z | 2026-10-28T16:48:35.438Z |
| cve-2026-117622 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:34.850Z | 2026-10-28T16:48:34.850Z |
| cve-2026-117621 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:34.260Z | 2026-10-28T16:48:34.260Z |
| cve-2026-117620 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:33.708Z | 2026-10-28T16:48:33.708Z |
| cve-2026-117619 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:33.134Z | 2026-10-28T16:48:33.134Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-002961 | Information Exposure Vulnerability in Cosminexus Component Container | 2024-03-13T12:10+09:00 | 2024-03-13T12:10+09:00 |
| jvndb-2024-000030 | a-blog cms vulnerable to directory traversal | 2024-03-08T15:27+09:00 | 2024-03-08T15:27+09:00 |
| jvndb-2024-002942 | OMRON NJ/NX series vulnerable to path traversal | 2024-03-08T14:16+09:00 | 2024-03-08T14:16+09:00 |
| jvndb-2024-000028 | Multiple vulnerabilities in SKYSEA Client View | 2024-03-07T16:09+09:00 | 2024-07-29T18:13+09:00 |
| jvndb-2024-000027 | FUJIFILM Business Innovation Corp. printers vulnerable to cross-site request forgery | 2024-03-06T18:24+09:00 | 2024-03-06T18:24+09:00 |
| jvndb-2024-000026 | Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management | 2024-03-06T18:12+09:00 | 2024-03-06T18:12+09:00 |
| jvndb-2024-000029 | Toyoko Inn official App vulnerable to improper server certificate verification | 2024-03-06T13:53+09:00 | 2024-03-06T13:53+09:00 |
| jvndb-2024-000025 | Protection mechanism failure in RevoWorks | 2024-02-29T15:40+09:00 | 2024-02-29T15:40+09:00 |
| jvndb-2024-000024 | OET-213H-BTS1 missing authorization check in the initial configuration | 2024-02-29T14:59+09:00 | 2024-02-29T14:59+09:00 |
| jvndb-2024-000023 | OpenPNE plugin "opTimelinePlugin" vulnerable to cross-site scripting | 2024-02-29T13:12+09:00 | 2024-02-29T13:12+09:00 |
| jvndb-2024-000022 | Multiple vulnerabilities in baserCMS | 2024-02-27T14:25+09:00 | 2024-02-27T14:25+09:00 |
| jvndb-2024-002831 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-02-22T08:15+09:00 | 2026-02-04T12:02+09:00 |
| jvndb-2024-002832 | EL Injection Vulnerability in Hitachi Global Link Manager | 2024-02-21T15:53+09:00 | 2024-02-21T15:53+09:00 |
| jvndb-2024-000020 | Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater | 2024-02-20T14:14+09:00 | 2024-11-26T15:26+09:00 |
| jvndb-2024-002560 | Android App "Mopria Print Service" vulnerable to improper intent handling | 2024-02-15T15:26+09:00 | 2024-02-15T15:26+09:00 |
| jvndb-2024-000019 | a-blog cms vulnerable to URL spoofing | 2024-02-15T14:12+09:00 | 2024-02-15T14:12+09:00 |
| jvndb-2024-002050 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2024-02-07T15:39+09:00 | 2024-03-08T18:05+09:00 |
| jvndb-2024-001882 | Sharp NEC Display Solutions' public displays vulnerable to local file inclusion | 2024-02-07T14:25+09:00 | 2024-07-11T14:27+09:00 |
| jvndb-2020-013805 | Zeroshell vulnerable to OS command injection | 2024-02-07T13:38+09:00 | 2024-02-07T13:38+09:00 |
| jvndb-2024-001804 | Multiple buffer overflow vulnerabilities in HOME SPOT CUBE2 | 2024-02-06T15:02+09:00 | 2024-03-11T17:32+09:00 |
| jvndb-2024-001785 | Incorrect permission assignment vulnerability in Trend Micro uiAirSupport | 2024-02-06T14:46+09:00 | 2024-03-11T17:42+09:00 |
| jvndb-2024-000017 | Cybozu KUNAI for Android vulnerable to denial-of-service (DoS) | 2024-02-06T13:25+09:00 | 2024-06-27T13:28+09:00 |
| jvndb-2024-001462 | File and Directory Permissions Vulnerability in Hitachi Tuning Manager | 2024-02-05T14:54+09:00 | 2024-02-05T14:54+09:00 |
| jvndb-2024-000016 | Group Office vulnerable to cross-site scripting | 2024-02-01T13:48+09:00 | 2024-03-11T18:04+09:00 |
| jvndb-2024-000015 | Payment EX vulnerable to information disclosure | 2024-02-01T13:41+09:00 | 2024-03-11T17:42+09:00 |
| jvndb-2024-001161 | Multiple vulnerabilities in SHARP Energy Management Controller with Cloud Services | 2024-01-31T16:01+09:00 | 2024-01-31T16:01+09:00 |
| jvndb-2024-001160 | File and Directory Permissions Vulnerability in Hitachi Storage Plug-in for VMware vCenter | 2024-01-31T15:25+09:00 | 2024-03-11T17:41+09:00 |
| jvndb-2024-001062 | Yamaha wireless LAN access point devices vulnerable to active debug code | 2024-01-24T17:16+09:00 | 2024-03-13T17:24+09:00 |
| jvndb-2024-001061 | ELECOM wireless LAN routers vulnerable to OS command injection | 2024-01-24T17:16+09:00 | 2026-05-15T15:32+09:00 |
| jvndb-2024-000014 | Oracle WebLogic Server vulnerable to HTTP header injection | 2024-01-24T13:53+09:00 | 2024-01-24T13:53+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0807 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0805 | Multiples vulnérabilités dans Asterisk | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0804 | Multiples vulnérabilités dans Tenable Nessus | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0803 | Multiples vulnérabilités dans Google Chrome | 2026-06-26T00:00:00.000000 | 2026-06-26T00:00:00.000000 |
| certfr-2026-avi-0802 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-06-25T00:00:00.000000 | 2026-06-25T00:00:00.000000 |
| certfr-2026-avi-0801 | Multiples vulnérabilités dans Google Chrome | 2026-06-25T00:00:00.000000 | 2026-06-25T00:00:00.000000 |
| certfr-2026-avi-0800 | Multiples vulnérabilités dans CPython | 2026-06-25T00:00:00.000000 | 2026-06-25T00:00:00.000000 |
| certfr-2026-avi-0799 | Multiples vulnérabilités dans GitLab | 2026-06-25T00:00:00.000000 | 2026-06-25T00:00:00.000000 |
| certfr-2026-avi-0798 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-06-24T00:00:00.000000 | 2026-06-24T00:00:00.000000 |
| certfr-2026-avi-0797 | Multiples vulnérabilités dans cURL et libcurl | 2026-06-24T00:00:00.000000 | 2026-06-24T00:00:00.000000 |
| certfr-2026-avi-0796 | Multiples vulnérabilités dans Tenable Identity Exposure | 2026-06-24T00:00:00.000000 | 2026-06-24T00:00:00.000000 |
| certfr-2026-avi-0795 | Multiples vulnérabilités dans Squid | 2026-06-23T00:00:00.000000 | 2026-06-23T00:00:00.000000 |
| certfr-2026-avi-0794 | Multiples vulnérabilités dans Moodle | 2026-06-23T00:00:00.000000 | 2026-06-23T00:00:00.000000 |
| certfr-2026-avi-0793 | Multiples vulnérabilités dans Postfix | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0792 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0791 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0790 | Vulnérabilité dans CPython pour Windows | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0789 | Vulnérabilité dans PaperCut Print Deploy Client | 2026-06-22T00:00:00.000000 | 2026-06-22T00:00:00.000000 |
| certfr-2026-avi-0788 | Multiples vulnérabilités dans les produits IBM | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0787 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0786 | Multiples vulnérabilités dans Node.js | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0785 | Vulnérabilité dans Traefik | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0784 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0783 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0782 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0781 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0780 | Vulnérabilité dans Apereo CAS | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0779 | Multiples vulnérabilités dans Google Pixel | 2026-06-19T00:00:00.000000 | 2026-06-19T00:00:00.000000 |
| certfr-2026-avi-0778 | Multiples vulnérabilités dans Google Android 17 | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |