Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103401 | 8.8 (v3.1) | Session Smart Router and Session Smart Conductor: An a… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:34:44.566Z | 2026-10-28T16:34:44.566Z |
| cve-2026-103400 | 5.5 (v3.1) | Session Smart Router and Session Smart Conductor: Craf… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:34:29.792Z | 2026-10-29T01:52:03.696Z |
| cve-2026-103394 | 3.7 (v3.1) | Session Smart Router: An incomplete operator causes th… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:34:16.486Z | 2026-10-29T01:52:03.984Z |
| cve-2026-103393 | 4.3 (v3.1) | Session Smart Router: An attacker can cause an out-of-… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:34:00.167Z | 2026-10-28T16:34:00.167Z |
| cve-2026-103392 | 4.8 (v3.1) | Session Smart Router: A SACK option causes out-of-boun… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:33:46.534Z | 2026-10-28T16:33:46.534Z |
| cve-2026-93536 | 5.3 (v3.1) | X.Org Server GestureBuildSprite Use-After-Free |
x.org |
xorg-x11-server |
2026-10-28T16:33:33.815Z | 2026-10-28T16:33:33.815Z |
| cve-2026-103391 | 5.3 (v3.1) | Session Smart Router: An attacker-controlled TCP optio… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:33:32.354Z | 2026-10-28T16:33:32.354Z |
| cve-2026-103390 | 5.3 (v3.1) | Session Smart Router and Session Smart Conductor: A ma… |
Juniper Networks |
Session Smart Router |
2026-10-28T16:33:16.471Z | 2026-10-29T01:52:04.374Z |
| cve-2026-93524 | 6.9 (v4.0) | X.Org Server XKB SetMap Key Width/Action Count Desync … |
x.org |
xorg-x11-server |
2026-10-28T16:24:52.508Z | 2026-10-28T16:24:52.508Z |
| cve-2026-93523 | 7.8 (v3.1) | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T16:16:42.058Z | 2026-10-28T16:16:42.058Z |
| cve-2026-118510 | 7.7 (v4.0) 8.8 (v3.1) | Laravel MongoDB `whereDoesntHave` misses deny records … |
MongoDB |
Laravel MongoDB |
2026-10-28T16:15:08.426Z | 2026-10-28T16:15:08.426Z |
| cve-2026-93522 | 7.8 (v3.1) | X.Org Server Glamor CopyArea Heap Buffer Overflow |
x.org |
xorg-x11-server |
2026-10-28T16:03:56.072Z | 2026-10-28T16:03:56.072Z |
| cve-2026-116778 | FOG: Authenticated low-privileged API user can modify … |
FOGProject |
fogproject |
2026-10-28T15:49:59.899Z | 2026-10-28T16:06:35.677Z | |
| cve-2026-116776 | USB Test: Heap-based Buffer Overflow in getSectorSize … |
n-romanovich |
usb-test |
2026-10-28T15:42:11.023Z | 2026-10-28T15:42:11.023Z | |
| cve-2026-56828 | Shopper: read-only team permissions allow administrato… |
shopperlabs |
shopper |
2026-10-28T15:40:39.294Z | 2026-10-28T15:40:39.294Z | |
| cve-2026-47235 | SimulationCraft: Heap-Based Buffer Overflow / Out-of-B… |
simulationcraft |
simc |
2026-10-28T15:38:21.113Z | 2026-10-28T15:38:21.113Z | |
| cve-2026-93521 | 7.8 (v3.1) | X.Org Server RandR ChangeProviderProperty Heap Buffer … |
x.org |
xorg-x11-server |
2026-10-28T15:37:43.432Z | 2026-10-28T15:37:43.432Z |
| cve-2026-59979 | YosemiteCrew: Missing organization authorization on se… |
YosemiteCrew |
Yosemite-Crew |
2026-10-28T15:36:57.833Z | 2026-10-28T15:36:57.833Z | |
| cve-2026-44179 | XWiki Pro Macros: excerpt-include title and content in… |
xwikisas |
xwiki-pro-macros |
2026-10-28T15:35:45.630Z | 2026-10-28T15:35:45.630Z | |
| cve-2026-50542 | Xibo: IDOR (Broken Object-Level Authorization) on GET … |
xibosignage |
xibo-cms |
2026-10-28T15:34:27.453Z | 2026-10-28T16:06:41.811Z | |
| cve-2026-118029 | 5.9 (v4.0) 5.9 (v3.1) | Unverified ownership of the default Athena query resul… |
aws |
aws-sdk-pandas |
2026-10-28T15:32:56.602Z | 2026-10-28T15:32:56.602Z |
| cve-2026-50543 | Xibo: Missing Authorization on POST /displaygroup/crit… |
xibosignage |
xibo-cms |
2026-10-28T15:32:51.861Z | 2026-10-28T15:32:51.861Z | |
| cve-2026-112357 | 8.5 (v4.0) 7.8 (v3.1) | GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation |
GFI USA, LLC |
GFI KerioConnect |
2026-10-28T15:32:47.972Z | 2026-10-28T18:53:58.772Z |
| cve-2026-50539 | Xibo: Missing Object-Level Authorization on /notificat… |
xibosignage |
xibo-cms |
2026-10-28T15:31:12.074Z | 2026-10-28T16:06:48.627Z | |
| cve-2026-112356 | 5.1 (v4.0) 6.1 (v3.1) | GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter |
GFI USA, LLC |
GFI KerioConnect |
2026-10-28T15:26:52.847Z | 2026-10-28T18:03:52.733Z |
| cve-2026-67187 | 5.1 (v4.0) 7.1 (v3.1) | Ninja Forms WordPress Plugin < 3.15.4 Server-Side Vali… |
Saturday Drive |
Ninja Forms |
2026-10-28T15:19:16.649Z | 2026-10-28T15:19:16.649Z |
| cve-2026-115402 | 5.7 (v4.0) | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows … |
OpenVPN |
ovpn-dco-win |
2026-10-28T15:00:23.951Z | 2026-10-28T15:00:23.951Z |
| cve-2026-93520 | 7.8 (v3.1) | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write |
x.org |
xorg-x11-server |
2026-10-28T14:59:50.140Z | 2026-10-28T14:59:50.140Z |
| cve-2026-93519 | 7.8 (v3.1) | X.Org Server XFixes Pointer Barrier Event List Buffer … |
x.org |
xorg-x11-server |
2026-10-28T14:41:33.873Z | 2026-10-28T14:41:33.873Z |
| cve-2026-93518 | 7.8 (v3.1) | X.Org Server XKB ResizeKeyType Numeric Truncation |
x.org |
xorg-x11-server |
2026-10-28T14:32:01.702Z | 2026-10-28T14:32:01.702Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000118 | Multiple vulnerabilities in CubeCart | 2023-11-17T14:22+09:00 | 2024-04-30T18:15+09:00 |
| jvndb-2023-006588 | Multiple vulnerabilities in ELECOM and LOGITEC routers | 2023-11-15T18:27+09:00 | 2024-04-26T15:22+09:00 |
| jvndb-2023-006578 | ASUSTeK COMPUTER RT-AC87U vulnerable to improper access control | 2023-11-15T17:44+09:00 | 2024-04-30T18:08+09:00 |
| jvndb-2023-000115 | OSS Calendar vulnerable to SQL injection | 2023-11-14T14:05+09:00 | 2024-05-01T17:38+09:00 |
| jvndb-2023-006199 | Multiple security updates for Trend Micro Apex One and Apex One as a Service (November 2023) | 2023-11-13T17:28+09:00 | 2024-03-13T17:28+09:00 |
| jvndb-2023-000112 | Multiple vulnerabilities in Pleasanter | 2023-11-13T15:57+09:00 | 2024-04-22T17:56+09:00 |
| jvndb-2023-000114 | Multiple vulnerabilities in Cisco Firepower Management Center Software | 2023-11-13T14:01+09:00 | 2024-05-07T15:07+09:00 |
| jvndb-2023-000113 | HOTELDRUID vulnerable to cross-site scripting | 2023-11-10T14:41+09:00 | 2024-05-01T17:47+09:00 |
| jvndb-2023-000111 | Remarshal unlimitedly expanding YAML alias nodes | 2023-11-10T14:41+09:00 | 2024-05-08T17:53+09:00 |
| jvndb-2023-000107 | EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution | 2023-11-07T13:47+09:00 | 2024-05-09T17:17+09:00 |
| jvndb-2023-004919 | FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength | 2023-11-02T17:21+09:00 | 2024-05-07T15:25+09:00 |
| jvndb-2023-000110 | Improper restriction of XML external entity references (XXE) in e-Tax software | 2023-11-02T13:38+09:00 | 2024-05-01T18:41+09:00 |
| jvndb-2023-004790 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2023-11-02T12:14+09:00 | 2023-11-02T12:14+09:00 |
| jvndb-2023-004754 | MCL Technologies MCL-Net vulnerable to directory traversal | 2023-11-01T16:49+09:00 | 2023-11-01T16:49+09:00 |
| jvndb-2023-000109 | Cybozu Remote Service vulnerable to uncontrolled resource consumption | 2023-10-31T13:43+09:00 | 2024-05-07T15:51+09:00 |
| jvndb-2023-000108 | Inkdrop vulnerable to code injection | 2023-10-30T13:48+09:00 | 2024-05-07T16:09+09:00 |
| jvndb-2023-004294 | Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL | 2023-10-27T16:10+09:00 | 2024-05-20T17:49+09:00 |
| jvndb-2023-000106 | Multiple vulnerabilities in baserCMS | 2023-10-27T14:46+09:00 | 2024-05-07T15:59+09:00 |
| jvndb-2023-000105 | Movable Type vulnerable to cross-site scripting | 2023-10-25T15:18+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-003956 | Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer | 2023-10-24T16:11+09:00 | 2024-05-10T17:47+09:00 |
| jvndb-2023-000103 | HP ThinUpdate vulnerable to improper server certificate verification | 2023-10-23T14:26+09:00 | 2023-10-23T14:26+09:00 |
| jvndb-2023-000102 | Multiple vulnerabilities in JustSystems products | 2023-10-19T15:16+09:00 | 2024-05-16T16:44+09:00 |
| jvndb-2023-000104 | Improper restriction of XML external entity references (XXE) in Proself | 2023-10-18T18:00+09:00 | 2024-05-15T17:08+09:00 |
| jvndb-2023-003913 | Multiple vulnerabilities in JTEKT ELECTRONICS OnSinView2 | 2023-10-18T14:13+09:00 | 2024-05-16T17:28+09:00 |
| jvndb-2023-000101 | web2py vulnerable to OS command injection | 2023-10-16T16:11+09:00 | 2024-05-22T17:58+09:00 |
| jvndb-2023-000100 | Scanning evasion issue in Cisco Secure Email Gateway | 2023-10-16T16:11+09:00 | 2023-10-27T15:52+09:00 |
| jvndb-2023-003788 | Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER | 2023-10-11T15:23+09:00 | 2024-05-16T17:09+09:00 |
| jvndb-2023-000098 | e-Gov Client Application fails to restrict custom URL schemes properly | 2023-10-06T14:57+09:00 | 2024-05-17T17:55+09:00 |
| jvndb-2023-003771 | File and Directory Permissions Vulnerability in JP1/Performance Management | 2023-10-04T15:23+09:00 | 2023-10-04T15:23+09:00 |
| jvndb-2023-003770 | DoS Vulnerability in Hitachi Ops Center Common Services | 2023-10-04T15:23+09:00 | 2024-05-22T15:31+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0747 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0746 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0745 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0744 | Multiples vulnérabilités dans les produits Spring | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0743 | Vulnérabilité dans les produits Moxa | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0742 | Multiples vulnérabilités dans les produits NetApp | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0741 | Vulnérabilité dans MongoDB | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0740 | Multiples vulnérabilités dans Google Chrome | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0739 | Multiples vulnérabilités dans les produits Spring | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0738 | Vulnérabilité dans Traefik | 2026-06-11T00:00:00.000000 | 2026-07-28T00:00:00.000000 |
| certfr-2026-avi-0737 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0736 | Multiples vulnérabilités dans les produits Splunk | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0735 | Multiples vulnérabilités dans MongoDB | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0734 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0733 | Multiples vulnérabilités dans GitLab | 2026-06-11T00:00:00.000000 | 2026-06-11T00:00:00.000000 |
| certfr-2026-avi-0732 | Vulnérabilité dans LibreNMS | 2026-06-11T00:00:00.000000 | 2026-08-10T00:00:00.000000 |
| certfr-2026-avi-0731 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0730 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0729 | Multiples vulnérabilités dans Microsoft .Net | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0728 | Multiples vulnérabilités dans Microsoft Windows | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0727 | Multiples vulnérabilités dans Microsoft Office | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0726 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0725 | Multiples vulnérabilités dans les produits Fortinet | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0724 | Multiples vulnérabilités dans les produits Ivanti | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0723 | Vulnérabilité dans Stormshield Network Security | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0722 | Multiples vulnérabilités dans Typo3 | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0721 | Multiples vulnérabilités dans Xen | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0720 | Multiples vulnérabilités dans les produits Adobe | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0719 | Multiples vulnérabilités dans les produits Spring | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0718 | Vulnérabilité dans PostgreSQL | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |