Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-117618 | N/A | In Jenkins 2.587 and earlier, LTS 2.580.1 and ear… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:32.556Z | 2026-10-28T16:48:32.556Z |
| cve-2026-117617 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:31.962Z | 2026-10-28T16:48:31.962Z |
| cve-2026-117616 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:31.398Z | 2026-10-28T16:48:31.398Z |
| cve-2026-117615 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:30.831Z | 2026-10-28T16:48:30.831Z |
| cve-2026-117614 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:30.245Z | 2026-10-28T16:48:30.245Z |
| cve-2026-117613 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:29.684Z | 2026-10-28T16:48:29.684Z |
| cve-2026-117612 | N/A | Jenkins 2.587 and earlier, LTS 2.580.1 and earlie… |
Jenkins Project |
Jenkins |
2026-10-28T16:48:29.130Z | 2026-10-28T16:48:29.130Z |
| cve-2026-114349 | Apache Kafka: Denial of service via unbounded memory a… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:46:54.920Z | 2026-10-29T13:48:26.738Z | |
| cve-2026-112375 | Apache Kafka: Unauthorized principal can read arbitrar… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:46:38.006Z | 2026-10-28T16:46:38.006Z | |
| cve-2026-116593 | Apache Kafka: Kafka Connect configuration provider val… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:46:21.415Z | 2026-10-28T20:07:01.640Z | |
| cve-2026-115644 | Apache Kafka: Connect Admin REST API Authentication By… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:45:36.440Z | 2026-10-28T20:07:00.157Z | |
| cve-2026-111551 | Apache Kafka: Denial of service in Kafka Streams and c… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:45:25.163Z | 2026-10-28T20:06:57.172Z | |
| cve-2026-111496 | Apache Kafka: Kafka Streams StreamThread hang from int… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:45:08.114Z | 2026-10-28T20:06:55.726Z | |
| cve-2026-111115 | Apache Kafka: Broker OutOfMemoryError via tagged-field… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:44:53.268Z | 2026-10-28T20:06:54.294Z | |
| cve-2026-111108 | Apache Kafka: Broker OutOfMemoryError via array alloca… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:38:08.524Z | 2026-10-28T20:06:52.812Z | |
| cve-2026-111073 | Apache Kafka: PushTelemetry (KIP-714) metrics payloads… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:37:58.482Z | 2026-10-28T20:06:51.327Z | |
| cve-2026-106079 | 8.8 (v3.1) | Session Smart Router and Session Smart Conductor: Impr… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:37:49.668Z | 2026-10-28T16:37:49.668Z |
| cve-2026-110985 | Apache Kafka: Broker silently skips JWT signature veri… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:37:45.688Z | 2026-10-28T16:37:45.688Z | |
| cve-2026-103411 | 7.1 (v3.1) | Session Smart Router: A malicious DHCP server causes i… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:37:35.468Z | 2026-10-28T16:37:35.468Z |
| cve-2026-110952 | Apache Kafka: Broker does not enforce JWT issuer and a… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:37:34.723Z | 2026-10-28T16:37:34.723Z | |
| cve-2026-83525 | Apache Kafka: Incorrect boolean operator in FetchSnaps… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:37:19.893Z | 2026-10-28T20:07:03.066Z | |
| cve-2026-103410 | 7.5 (v3.1) | Session Smart Router: Integer overflow causes denial o… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:37:17.946Z | 2026-10-29T01:52:03.380Z |
| cve-2026-103409 | 9.8 (v3.1) | Session Smart Router: An attacker obtains administrati… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:36:46.539Z | 2026-10-28T16:36:46.539Z |
| cve-2026-103408 | 8.8 (v3.1) | Session Smart Router: An attacker-controlled input cau… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:36:33.095Z | 2026-10-28T16:36:33.095Z |
| cve-2026-103407 | 8.8 (v3.1) | Session Smart Router and Session Smart Conductor: Unsa… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:36:19.559Z | 2026-10-28T16:36:19.559Z |
| cve-2026-103406 | 9.8 (v3.1) | Session Smart Conductor: An unauthenticated attacker c… |
Juniper Networks |
Session Smart Conductor |
2026-10-28T16:35:53.323Z | 2026-10-28T16:35:53.323Z |
| cve-2026-103405 | 5.8 (v3.1) | Session Smart Router and Session Smart Conductor: Unsa… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:35:39.369Z | 2026-10-28T16:35:39.369Z |
| cve-2026-103404 | 6.8 (v3.1) | Session Smart Conductor: Insecure file permissions cau… |
Juniper Networks |
Session Smart Conductor |
2026-10-28T16:35:25.296Z | 2026-10-28T16:35:25.296Z |
| cve-2026-103403 | 8.8 (v3.1) | Session Smart Router and Session Smart Conductor: Unva… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:35:11.327Z | 2026-10-28T16:35:11.327Z |
| cve-2026-103402 | 8.8 (v3.1) | Session Smart Router and Session Smart Conductor: Lack… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:34:58.448Z | 2026-10-28T16:34:58.448Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-000005 | "Mercari" App for Android fails to restrict custom URL schemes properly | 2024-01-24T13:46+09:00 | 2024-03-04T18:01+09:00 |
| jvndb-2024-000008 | Improper restriction of XML external entity references (XXE) in MLIT "Electronic Delivery Check System" and "Electronic delivery item Inspection Support System" | 2024-01-23T16:57+09:00 | 2024-03-13T17:40+09:00 |
| jvndb-2024-000013 | Android App "Spoon" uses a hard-coded API key for an external service | 2024-01-23T16:53+09:00 | 2024-03-14T17:44+09:00 |
| jvndb-2024-000010 | Improper restriction of XML external entity references (XXE) in "Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version)" | 2024-01-23T15:25+09:00 | 2024-03-14T17:33+09:00 |
| jvndb-2024-000009 | Improper restriction of XML external entity references (XXE) in Electronic Deliverables Creation Support Tool provided by Ministry of Defense | 2024-01-23T15:13+09:00 | 2024-03-13T17:46+09:00 |
| jvndb-2024-000012 | Access analysis CGI An-Analyzer vulnerable to open redirect | 2024-01-22T15:57+09:00 | 2024-03-13T17:34+09:00 |
| jvndb-2024-000011 | Multiple vulnerabilities in a-blog cms | 2024-01-22T15:08+09:00 | 2024-03-13T17:50+09:00 |
| jvndb-2024-000006 | FusionPBX vulnerable to cross-site scripting | 2024-01-19T12:30+09:00 | 2024-03-12T17:31+09:00 |
| jvndb-2024-000007 | Multiple Dahua Technology products vulnerable to authentication bypass | 2024-01-18T13:43+09:00 | 2024-07-11T16:10+09:00 |
| jvndb-2024-000004 | Drupal vulnerable to improper handling of structural elements | 2024-01-16T13:41+09:00 | 2024-03-12T17:33+09:00 |
| jvndb-2024-000003 | Pleasanter vulnerable to cross-site scripting | 2024-01-15T15:59+09:00 | 2024-01-15T15:59+09:00 |
| jvndb-2024-000002 | Thermal camera TMC series vulnerable to insufficient technical documentation | 2024-01-15T15:19+09:00 | 2024-03-11T18:17+09:00 |
| jvndb-2024-000001 | Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin" | 2024-01-12T13:51+09:00 | 2024-03-14T12:28+09:00 |
| jvndb-2024-001002 | Multiple TP-Link products vulnerable to OS command injection | 2024-01-10T13:57+09:00 | 2024-03-14T13:52+09:00 |
| jvndb-2024-001001 | Multiple vulnerabilities in Panasonic Control FPWIN Pro7 | 2024-01-10T13:46+09:00 | 2024-01-10T13:46+09:00 |
| jvndb-2023-000126 | Multiple vulnerabilities in PowerCMS | 2023-12-26T16:46+09:00 | 2024-03-18T17:58+09:00 |
| jvndb-2023-000125 | Multiple vulnerabilities in BUFFALO VR-S1000 | 2023-12-26T15:51+09:00 | 2024-03-19T17:56+09:00 |
| jvndb-2023-014781 | Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access | 2023-12-26T09:27+09:00 | 2024-03-18T18:05+09:00 |
| jvndb-2023-012042 | WordPress plugin "MW WP Form" vulnerable to arbitrary file upload | 2023-12-15T15:17+09:00 | 2024-03-26T17:39+09:00 |
| jvndb-2023-000123 | Multiple vulnerabilities in GROWI | 2023-12-13T15:30+09:00 | 2024-03-19T17:46+09:00 |
| jvndb-2023-011403 | ELECOM wireless LAN routers vulnerable to OS command injection | 2023-12-13T15:06+09:00 | 2024-04-18T17:22+09:00 |
| jvndb-2023-000122 | Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series | 2023-12-11T14:12+09:00 | 2024-04-22T16:55+09:00 |
| jvndb-2023-009966 | FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection Critical | 2023-12-07T15:09+09:00 | 2023-12-25T16:54+09:00 |
| jvndb-2023-009619 | OS command injection vulnerability in DT900 | 2023-12-06T14:43+09:00 | 2023-12-06T14:43+09:00 |
| jvndb-2023-000121 | RakRak Document Plus vulnerable to path traversal | 2023-12-04T13:45+09:00 | 2024-01-24T12:06+09:00 |
| jvndb-2023-000119 | Ruckus Access Point contains a cross-site scripting vulnerability. | 2023-12-01T14:58+09:00 | 2024-04-23T17:51+09:00 |
| jvndb-2023-000117 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-11-20T17:15+09:00 | 2023-11-20T17:15+09:00 |
| jvndb-2023-007152 | Multiple vulnerabilities in EXPRESSCLUSTER X | 2023-11-20T14:09+09:00 | 2024-05-01T18:10+09:00 |
| jvndb-2023-007150 | Multiple vulnerabilities in First Corporation's DVRs | 2023-11-17T17:31+09:00 | 2024-07-11T17:05+09:00 |
| jvndb-2023-000116 | Redmine vulnerable to cross-site scripting | 2023-11-17T14:32+09:00 | 2024-05-09T17:55+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0777 | Multiples vulnérabilités dans Mattermost Desktop App | 2026-06-18T00:00:00.000000 | 2026-08-18T00:00:00.000000 |
| certfr-2026-avi-0776 | Vulnérabilité dans Synacor Zimbra Collaboration | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0775 | Multiples vulnérabilités dans Nginx | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0774 | Multiples vulnérabilités dans Splunk AI Toolkit | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0773 | Multiples vulnérabilités dans les produits Atlassian | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0772 | Multiples vulnérabilités dans les produits Cisco | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0771 | Multiples vulnérabilités dans Drupal | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0770 | Multiples vulnérabilités dans les produits Mitel | 2026-06-18T00:00:00.000000 | 2026-06-18T00:00:00.000000 |
| certfr-2026-avi-0769 | Multiples vulnérabilités dans Oracle Weblogic | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0768 | Multiples vulnérabilités dans Oracle Virtualization | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0767 | Multiples vulnérabilités dans Oracle Systems | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0766 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0765 | Multiples vulnérabilités dans Oracle MySQL | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0764 | Multiples vulnérabilités dans les produits Mozilla | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0763 | Vulnérabilité dans les produits Moxa | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0762 | Multiples vulnérabilités dans les produits Qnap | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0761 | Multiples vulnérabilités dans Google Chrome | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0760 | Multiples vulnérabilités dans les produits Moxa | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0759 | Multiples vulnérabilités dans les produits Spring | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0758 | Vulnérabilité dans Microsoft Azure | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0757 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0756 | Vulnérabilité dans Cisco Catalyst | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0755 | Vulnérabilité dans LibreNMS | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0754 | Multiples vulnérabilités dans Redmine | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0753 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0752 | Multiples vulnérabilités dans les produits Mattermost | 2026-06-15T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-0751 | Vulnérabilité dans Spring AI | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0750 | Vulnérabilité dans les produits HPE Aruba Networking | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0749 | Vulnérabilité dans Oracle PeopleSoft | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0748 | Multiples vulnérabilités dans les produits IBM | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |