Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-79706 | N/A | Breeze Cache < 2.5.13 - Unauthenticated File Creation … |
Unknown |
Breeze Cache |
2026-08-28T06:00:17.170Z | 2026-08-28T13:03:20.389Z |
| cve-2026-79615 | N/A | Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Q… |
Unknown |
Quiz and Survey Master (QSM) |
2026-08-28T06:00:17.000Z | 2026-08-28T13:03:20.541Z |
| cve-2026-77701 | N/A | WCFM Marketplace < 3.8.2 - Unauthenticated Refund Requ… |
Unknown |
WCFM Marketplace |
2026-08-28T06:00:16.799Z | 2026-08-28T13:03:20.688Z |
| cve-2026-19423 | N/A | Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privi… |
Unknown |
Ultimate Member |
2026-08-28T06:00:16.618Z | 2026-08-28T13:03:20.842Z |
| cve-2026-19084 | N/A | Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read |
Unknown |
shared-files-pro |
2026-08-28T06:00:16.188Z | 2026-08-28T13:03:21.003Z |
| cve-2026-14567 | N/A | WP User Frontend < 4.3.10 - Unauthenticated User Email… |
Unknown |
User Frontend |
2026-08-28T06:00:16.015Z | 2026-08-28T13:03:21.166Z |
| cve-2026-14558 | N/A | WP User Frontend < 4.3.10 - Editor+ PHP Object Injecti… |
Unknown |
User Frontend |
2026-08-28T06:00:15.842Z | 2026-08-28T13:03:21.317Z |
| cve-2026-12514 | N/A | Shared Files < 1.7.70 - Unauthenticated Limited File Upload |
Unknown |
Shared Files |
2026-08-28T06:00:15.667Z | 2026-08-28T13:03:21.464Z |
| cve-2026-12513 | N/A | Shared Files < 1.7.68 - Unauthenticated Arbitrary File… |
Unknown |
Shared Files |
2026-08-28T06:00:15.488Z | 2026-08-28T13:03:21.606Z |
| cve-2026-4246 | ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cro… |
wpmet |
ElementsKit Pro |
2026-08-28T05:30:45.369Z | 2026-08-28T15:56:07.074Z | |
| cve-2026-16654 | Avada (Fusion) Builder <= 3.15.6 - Authenticated (Cont… |
themefusion |
Avada (Fusion) Builder |
2026-08-28T04:28:23.478Z | 2026-08-28T18:35:56.172Z | |
| cve-2026-18983 | One User Avatar | User Profile Picture <= 2.5.4 - Auth… |
onedesigns |
One User Avatar | User Profile Picture |
2026-08-28T03:39:35.771Z | 2026-08-28T17:11:26.289Z | |
| cve-2026-3129 | LiteSpeed Cache <= 7.7 - Authenticated (Author+) Store… |
litespeedtech |
LiteSpeed Cache |
2026-08-28T03:39:35.416Z | 2026-08-28T23:18:59.081Z | |
| cve-2026-16759 | Tutor LMS <= 4.0.5 - Unauthenticated Remote Code Execu… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-08-28T03:39:35.072Z | 2026-08-28T15:22:17.595Z | |
| cve-2026-18324 | Forminator Forms <= 1.57.0.1 - Unauthenticated Stored … |
wpmudev |
Forminator Forms – Contact Form, Payment Form & Custom Form Builder |
2026-08-28T03:39:34.725Z | 2026-08-28T15:14:18.901Z | |
| cve-2026-18978 | LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cros… |
litespeedtech |
LiteSpeed Cache |
2026-08-28T03:39:34.235Z | 2026-08-28T15:56:13.204Z | |
| cve-2026-82090 | 9.2 (v4.0) | Pocket through 8.33.0.0 allows XSS because "Save … |
getpocket |
Pocket |
2026-08-28T03:36:23.687Z | 2026-08-28T16:17:06.780Z |
| cve-2026-82089 | 8.8 (v4.0) | The wallabag (aka fr.gaulupeau.apps.InThePoche) a… |
wallabag |
android-app |
2026-08-28T03:14:20.421Z | 2026-08-28T16:17:59.059Z |
| cve-2026-82082 | 9.3 (v4.0) 9.8 (v3.1) | Green-Computing｜NUMail - OS Command Injection |
Green-Computing |
NUMail |
2026-08-28T03:12:09.813Z | 2026-08-31T03:51:41.595Z |
| cve-2026-82081 | 6.4 (v3.1) | wallabag 2 through 2.6.14 allows SSRF because a c… |
wallabag |
wallabag |
2026-08-28T02:40:33.844Z | 2026-08-28T15:16:08.971Z |
| cve-2026-15798 | Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributo… |
nextendweb |
Smart Slider 3 |
2026-08-28T02:26:57.041Z | 2026-08-28T16:19:15.261Z | |
| cve-2026-77365 | Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site… |
optimole |
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization |
2026-08-28T02:26:56.688Z | 2026-08-28T15:17:13.576Z | |
| cve-2026-76053 | TranslatePress <= 3.3.3 - Unauthenticated Stored Cross… |
cozmoslabs |
TranslatePress – Translate Multilingual sites with AI Translation |
2026-08-28T02:26:56.181Z | 2026-08-28T15:23:52.929Z | |
| cve-2026-38822 | 7.6 (v3.1) | In openNDS before 11.0.0, the client_params.sh sc… |
openNDS |
openNDS |
2026-08-28T00:12:08.428Z | 2026-08-28T15:23:29.402Z |
| cve-2026-38821 | 7.1 (v3.1) | A heap-based buffer overflow vulnerability exists… |
openNDS |
openNDS |
2026-08-28T00:10:10.769Z | 2026-08-28T15:24:14.987Z |
| cve-2026-38820 | 8.3 (v3.1) | openNDS before 11.0.0 is susceptible to unauthent… |
openNDS |
openNDS |
2026-08-28T00:07:59.553Z | 2026-08-28T16:20:11.235Z |
| cve-2026-38819 | 5.3 (v3.1) | Multiple memory leaks in openNDS before 11.0.0 al… |
openNDS |
openNDS |
2026-08-28T00:03:48.909Z | 2026-08-28T16:21:20.631Z |
| cve-2026-51665 | N/A | Incorrect access control in the getTracerouteCfg … |
n/a |
n/a |
2026-08-28T00:00:00.000Z | 2026-08-28T19:43:09.024Z |
| cve-2026-51664 | N/A | Incorrect access control in the getTelnetCfg func… |
n/a |
n/a |
2026-08-28T00:00:00.000Z | 2026-08-28T19:41:44.019Z |
| cve-2026-51663 | N/A | Incorrect access control in the getWiFiApcliScan … |
n/a |
n/a |
2026-08-28T00:00:00.000Z | 2026-08-28T19:41:17.466Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-009966 | FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection Critical | 2023-12-07T15:09+09:00 | 2023-12-25T16:54+09:00 |
| jvndb-2023-009619 | OS command injection vulnerability in DT900 | 2023-12-06T14:43+09:00 | 2023-12-06T14:43+09:00 |
| jvndb-2023-000121 | RakRak Document Plus vulnerable to path traversal | 2023-12-04T13:45+09:00 | 2024-01-24T12:06+09:00 |
| jvndb-2023-000119 | Ruckus Access Point contains a cross-site scripting vulnerability. | 2023-12-01T14:58+09:00 | 2024-04-23T17:51+09:00 |
| jvndb-2023-000117 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-11-20T17:15+09:00 | 2023-11-20T17:15+09:00 |
| jvndb-2023-007152 | Multiple vulnerabilities in EXPRESSCLUSTER X | 2023-11-20T14:09+09:00 | 2024-05-01T18:10+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000116 | Redmine vulnerable to cross-site scripting | 2023-11-17T14:32+09:00 | 2024-05-09T17:55+09:00 |
| jvndb-2023-000118 | Multiple vulnerabilities in CubeCart | 2023-11-17T14:22+09:00 | 2024-04-30T18:15+09:00 |
| jvndb-2023-006588 | Multiple vulnerabilities in ELECOM and LOGITEC routers | 2023-11-15T18:27+09:00 | 2024-04-26T15:22+09:00 |
| jvndb-2023-006578 | ASUSTeK COMPUTER RT-AC87U vulnerable to improper access control | 2023-11-15T17:44+09:00 | 2024-04-30T18:08+09:00 |
| jvndb-2023-000115 | OSS Calendar vulnerable to SQL injection | 2023-11-14T14:05+09:00 | 2024-05-01T17:38+09:00 |
| jvndb-2023-006199 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (November 2023) | 2023-11-13T17:28+09:00 | 2024-03-13T17:28+09:00 |
| jvndb-2023-000112 | Multiple vulnerabilities in Pleasanter | 2023-11-13T15:57+09:00 | 2024-04-22T17:56+09:00 |
| jvndb-2023-000114 | Multiple vulnerabilities in Cisco Firepower Management Center Software | 2023-11-13T14:01+09:00 | 2024-05-07T15:07+09:00 |
| jvndb-2023-000113 | HOTELDRUID vulnerable to cross-site scripting | 2023-11-10T14:41+09:00 | 2024-05-01T17:47+09:00 |
| jvndb-2023-000111 | Remarshal unlimitedly expanding YAML alias nodes | 2023-11-10T14:41+09:00 | 2024-05-08T17:53+09:00 |
| jvndb-2023-000107 | EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution | 2023-11-07T13:47+09:00 | 2024-05-09T17:17+09:00 |
| jvndb-2023-004919 | FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength | 2023-11-02T17:21+09:00 | 2024-05-07T15:25+09:00 |
| jvndb-2023-000110 | Improper restriction of XML external entity references (XXE) in e-Tax software | 2023-11-02T13:38+09:00 | 2024-05-01T18:41+09:00 |
| jvndb-2023-004790 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2023-11-02T12:14+09:00 | 2023-11-02T12:14+09:00 |
| jvndb-2023-004754 | MCL Technologies MCL-Net vulnerable to directory traversal | 2023-11-01T16:49+09:00 | 2023-11-01T16:49+09:00 |
| jvndb-2023-000109 | Cybozu Remote Service vulnerable to uncontrolled resource consumption | 2023-10-31T13:43+09:00 | 2024-05-07T15:51+09:00 |
| jvndb-2023-000108 | Inkdrop vulnerable to code injection | 2023-10-30T13:48+09:00 | 2024-05-07T16:09+09:00 |
| jvndb-2023-004294 | Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL | 2023-10-27T16:10+09:00 | 2024-05-20T17:49+09:00 |
| jvndb-2023-000106 | Multiple vulnerabilities in baserCMS | 2023-10-27T14:46+09:00 | 2024-05-07T15:59+09:00 |
| jvndb-2023-000105 | Movable Type vulnerable to cross-site scripting | 2023-10-25T15:18+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-003956 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer | 2023-10-24T16:11+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-000103 | HP ThinUpdate vulnerable to improper server certificate verification | 2023-10-23T14:26+09:00 | 2023-10-23T14:26+09:00 |
| jvndb-2023-000102 | Multiple vulnerabilities in JustSystems products | 2023-10-19T15:16+09:00 | 2024-05-16T16:44+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0495 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0494 | Vulnérabilité dans les produits Microsoft | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0493 | Vulnérabilité dans Microsoft Edge | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0492 | Multiples vulnérabilités dans les produits IBM | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0491 | Multiples vulnérabilités dans Synology DSM | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0490 | Multiples vulnérabilités dans Traefik | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0489 | Vulnérabilité dans les produits Tenable | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0488 | Multiples vulnérabilités dans Spring Boot | 2026-04-24T00:00:00.000000 | 2026-04-24T00:00:00.000000 |
| certfr-2026-avi-0487 | Multiples vulnérabilités dans Google Chrome | 2026-04-23T00:00:00.000000 | 2026-04-28T00:00:00.000000 |
| certfr-2026-avi-0486 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0485 | Multiples vulnérabilités dans Mattermost Server | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0484 | Multiples vulnérabilités dans strongSwan | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0483 | Multiples vulnérabilités dans Stormshield Management Center | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0482 | Vulnérabilité dans CPython | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0481 | Vulnérabilité dans les produits Apple | 2026-04-23T00:00:00.000000 | 2026-04-23T00:00:00.000000 |
| certfr-2026-avi-0480 | Multiples vulnérabilités dans les produits Mozilla | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0479 | Multiples vulnérabilités dans les produits Atlassian | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0478 | Vulnérabilité dans Microsoft .Net | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0477 | Multiples vulnérabilités dans les produits Spring | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0476 | Multiples vulnérabilités dans les produits NetApp | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0475 | Multiples vulnérabilités dans GitLab | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0474 | Vulnérabilité dans Python | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0473 | Multiples vulnérabilités dans Oracle Weblogic | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0472 | Multiples vulnérabilités dans Oracle Virtualization | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0471 | Multiples vulnérabilités dans Oracle Systems | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0470 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0469 | Multiples vulnérabilités dans Oracle MySQL | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0468 | Multiples vulnérabilités dans Oracle Java SE | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0467 | Multiples vulnérabilités dans Oracle Database Server | 2026-04-22T00:00:00.000000 | 2026-04-22T00:00:00.000000 |
| certfr-2026-avi-0466 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-21T00:00:00.000000 | 2026-04-21T00:00:00.000000 |