Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115603 | 8.5 (v3.1) | WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL… |
Advanced Ads GmbH |
Advanced Ads – Tracking |
2026-10-28T14:02:57.872Z | 2026-10-29T13:47:37.343Z |
| cve-2026-115968 | 9.8 (v3.1) | WordPress Ultimate Member plugin <= 2.13.1 - PHP Objec… |
Ultimate Member |
Ultimate Member |
2026-10-28T14:02:57.496Z | 2026-10-28T16:07:03.811Z |
| cve-2026-116390 | 7.2 (v3.1) | WordPress Filter Everything — WordPress & WooCommerce … |
stepasyuk |
Filter Everything — WordPress & WooCommerce Filters |
2026-10-28T14:02:57.098Z | 2026-10-29T13:47:37.495Z |
| cve-2026-116389 | 8.8 (v3.1) | WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP … |
crossi72 |
Phoenix Media Rename |
2026-10-28T14:02:56.685Z | 2026-10-29T13:47:37.643Z |
| cve-2026-115590 | 7.2 (v3.1) | WordPress Dokan plugin <= 5.3.1 - PHP Object Injection… |
weDevs |
Dokan |
2026-10-28T14:02:56.306Z | 2026-10-29T13:47:37.789Z |
| cve-2026-116078 | 8.7 (v4.0) | HTTP/2 request bodies made of 1-byte DATA frames ampli… |
mtrudel |
bandit |
2026-10-28T13:26:25.372Z | 2026-10-28T13:26:25.372Z |
| cve-2026-50541 | Xibo: IDOR (Broken Object-Level Authorization) on GET … |
xibosignage |
xibo-cms |
2026-10-28T13:25:10.271Z | 2026-10-28T13:25:10.271Z | |
| cve-2026-52729 | Xibo: IDOR (Broken Object-Level Authorization) on PUT/… |
xibosignage |
xibo-cms |
2026-10-28T13:23:13.291Z | 2026-10-28T13:23:13.291Z | |
| cve-2026-105420 | 9.4 (v4.0) | Path Traversal in Wing WFTP Server leading to Remote C… |
Wing Soft Technology |
Wing FTP Server |
2026-10-28T13:19:31.908Z | 2026-10-28T13:19:31.908Z |
| cve-2026-59959 | SAIL: WebP decoder division by zero through malformed … |
HappySeaFox |
sail |
2026-10-28T13:17:29.214Z | 2026-10-28T13:17:29.214Z | |
| cve-2026-93517 | 8.5 (v4.0) | X.Org Server GLX RenderLarge Heap Buffer Overflow |
x.orgg |
xorg-x11-server |
2026-10-28T13:16:39.431Z | 2026-10-28T13:16:39.431Z |
| cve-2026-59185 | identrail: Cross-tenant GitHub installation binding wi… |
identrail |
identrail |
2026-10-28T13:15:53.456Z | 2026-10-28T16:07:10.634Z | |
| cve-2026-59179 | OpenHop: Path Traversal in Flow ID File Operations |
naorsabag |
openhop |
2026-10-28T13:14:13.689Z | 2026-10-28T13:14:13.689Z | |
| cve-2026-59177 | ESPHome Device Builder allows unauthenticated dashboar… |
esphome |
device-builder |
2026-10-28T13:12:14.620Z | 2026-10-28T13:12:14.620Z | |
| cve-2026-59176 | Functype: MCP set_functype_version Package Alias RCE v… |
jordanburke |
functype |
2026-10-28T13:08:52.592Z | 2026-10-28T13:08:52.592Z | |
| cve-2026-59172 | Joker linter executed project-local .jokerd/linter.* f… |
candid82 |
joker |
2026-10-28T13:07:35.230Z | 2026-10-28T16:07:17.268Z | |
| cve-2026-59164 | NORA missing cross-user token-management authorization |
getnora-io |
nora |
2026-10-28T13:05:47.302Z | 2026-10-28T13:05:47.302Z | |
| cve-2026-93516 | 5.5 (v3.1) | .Org Server XInput Passive Grab Use-After-Free |
x.org |
xorg-x11-server |
2026-10-28T13:03:30.088Z | 2026-10-28T13:03:30.088Z |
| cve-2026-116391 | 8.8 (v3.1) | WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object … |
GS Plugins |
GS Logo Slider |
2026-10-28T13:00:28.765Z | 2026-10-29T13:47:37.936Z |
| cve-2026-116392 | 7.2 (v3.1) | WordPress Accordion plugin <= 2.3.25 - PHP Object Inje… |
PickPlugins |
Accordion |
2026-10-28T13:00:28.367Z | 2026-10-29T13:47:38.092Z |
| cve-2026-116393 | 7.5 (v3.1) | WordPress Optima Express + MarketBoost IDX Plugin plug… |
iHomefinder, Inc. |
Optima Express |
2026-10-28T13:00:28.337Z | 2026-10-28T16:07:23.809Z |
| cve-2026-116404 | 6.5 (v3.1) | WordPress Redux Framework plugin <= 4.5.16 - Broken Ac… |
David Anderson |
Redux Framework |
2026-10-28T13:00:27.971Z | 2026-10-29T13:47:38.245Z |
| cve-2026-111850 | 8.5 (v3.1) | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection … |
BuddyPress |
BuddyPress |
2026-10-28T13:00:27.940Z | 2026-10-29T13:47:38.415Z |
| cve-2026-115612 | 7.1 (v3.1) | WordPress SliceWP plugin <= 1.2.13 - Cross Site Script… |
iova.mihai |
SliceWP |
2026-10-28T13:00:14.372Z | 2026-10-28T16:07:30.579Z |
| cve-2026-115591 | 7.5 (v3.1) | WordPress Contact Form by Supsystic plugin <= 1.10.5 -… |
Supsystic |
Contact Form by Supsystic |
2026-10-28T13:00:13.962Z | 2026-10-29T13:47:38.566Z |
| cve-2026-115593 | 7.1 (v3.1) | WordPress Unlimited Elements For Elementor (Free Widge… |
Unlimited Elements |
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) |
2026-10-28T13:00:13.871Z | 2026-10-29T13:47:38.730Z |
| cve-2026-115596 | 7.1 (v3.1) | WordPress eCommerce Product Catalog plugin <= 3.6.4 - … |
impleCode |
eCommerce Product Catalog |
2026-10-28T13:00:13.283Z | 2026-10-28T16:07:36.842Z |
| cve-2026-111411 | 9.3 (v3.1) | WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQ… |
Aman |
FunnelKit Automations |
2026-10-28T13:00:13.279Z | 2026-10-28T16:07:43.581Z |
| cve-2026-115607 | 9.3 (v3.1) | WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection … |
Crowd Favorite |
DXP ToolKit |
2026-10-28T13:00:12.493Z | 2026-10-29T13:47:38.888Z |
| cve-2026-115957 | 6.5 (v3.1) | WordPress WP Discussion Board plugin <= 2.6.0 - Cross … |
WP Discussion Board |
WP Discussion Board |
2026-10-28T13:00:12.485Z | 2026-10-29T13:47:39.035Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-003769 | Information Exposure Vulnerability in Hitachi Ops Center Administrator | 2023-10-04T15:23+09:00 | 2024-05-22T15:20+09:00 |
| jvndb-2023-000097 | Citadel WebCit vulnerable to cross-site scripting on Instant Messaging facility | 2023-10-04T14:07+09:00 | 2024-05-21T17:08+09:00 |
| jvndb-2023-003767 | Multiple vulnerabilities in multiple FURUNO SYSTEMS wireless LAN access point devices in ST(Standalone) mode | 2023-10-03T14:26+09:00 | 2024-05-22T18:01+09:00 |
| jvndb-2023-000096 | Improper restriction of XML external entity references (XXE) in FD Application | 2023-10-02T12:36+09:00 | 2024-05-22T15:37+09:00 |
| jvndb-2023-003764 | Multiple vulnerabilities in Panasonic KW Watcher | 2023-09-27T14:44+09:00 | 2023-09-27T14:44+09:00 |
| jvndb-2023-000095 | Shihonkanri Plus vulnerable to relative path traversal | 2023-09-27T13:49+09:00 | 2024-05-21T17:16+09:00 |
| jvndb-2023-003757 | Trend Micro Mobile Security vulnerable to cross-site scripting | 2023-09-26T11:30+09:00 | 2024-03-13T18:07+09:00 |
| jvndb-2023-000094 | Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce" | 2023-09-22T13:51+09:00 | 2024-07-11T16:49+09:00 |
| jvndb-2023-003721 | Trend Micro Endpoint security products for enterprises vulnerable to arbitrary code execution | 2023-09-20T13:58+09:00 | 2024-05-09T18:22+09:00 |
| jvndb-2023-003592 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-09-13T15:02+09:00 | 2023-09-13T15:02+09:00 |
| jvndb-2023-000093 | Pyramid vulnerable to directory traversal | 2023-09-11T13:53+09:00 | 2024-05-16T16:52+09:00 |
| jvndb-2023-003335 | Vulnerability in JP1/VERITAS | 2023-09-06T15:35+09:00 | 2023-09-06T15:35+09:00 |
| jvndb-2023-000092 | "direct" Desktop App for macOS fails to restrict access permissions | 2023-09-06T14:33+09:00 | 2023-09-06T14:33+09:00 |
| jvndb-2023-000091 | Multiple vulnerabilities in F-RevoCRM | 2023-09-05T15:51+09:00 | 2024-05-14T18:06+09:00 |
| jvndb-2023-000090 | Multiple vulnerabilities in CGIs of PMailServer and PMailServer2 | 2023-09-05T14:55+09:00 | 2023-09-05T14:55+09:00 |
| jvndb-2023-000088 | Multiple vulnerabilities in SHIRASAGI | 2023-09-04T13:41+09:00 | 2024-05-14T17:58+09:00 |
| jvndb-2023-000089 | Multiple vulnerabilities in i-PRO VI Web Client | 2023-08-31T14:13+09:00 | 2024-05-14T18:05+09:00 |
| jvndb-2023-003028 | Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL | 2023-08-30T10:05+09:00 | 2024-04-24T11:43+09:00 |
| jvndb-2023-003023 | Vulnerability in HiRDB | 2023-08-29T15:55+09:00 | 2023-09-06T15:45+09:00 |
| jvndb-2023-000087 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS) | 2023-08-24T14:12+09:00 | 2024-05-15T17:12+09:00 |
| jvndb-2023-000085 | "Skylark" App fails to restrict custom URL schemes properly | 2023-08-24T13:34+09:00 | 2024-12-03T15:51+09:00 |
| jvndb-2023-000086 | Rakuten WiFi Pocket vulnerable to improper authentication | 2023-08-23T12:42+09:00 | 2024-03-27T13:43+09:00 |
| jvndb-2023-002906 | Multiple vulnerabilities in Panasonic Control FPWIN Pro7 | 2023-08-22T18:02+09:00 | 2024-04-18T17:31+09:00 |
| jvndb-2023-002905 | Multiple vulnerabilities in CBC digital video recorders | 2023-08-22T17:35+09:00 | 2024-04-10T17:39+09:00 |
| jvndb-2023-000084 | WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting | 2023-08-21T14:05+09:00 | 2024-03-25T17:55+09:00 |
| jvndb-2023-000083 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-08-21T13:29+09:00 | 2024-03-26T17:09+09:00 |
| jvndb-2023-000078 | Multiple vulnerabilities in Proself | 2023-08-18T13:47+09:00 | 2024-03-28T17:43+09:00 |
| jvndb-2023-000082 | EC-CUBE 2 series vulnerable to cross-site scripting | 2023-08-17T15:12+09:00 | 2024-03-25T18:07+09:00 |
| jvndb-2023-002797 | Multiple vulnerabilities in ELECOM and LOGITEC network devices | 2023-08-15T11:54+09:00 | 2026-05-15T19:42+09:00 |
| jvndb-2023-002796 | Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023) | 2023-08-10T16:04+09:00 | 2024-03-13T17:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0717 | Multiples vulnérabilités dans OpenSSL | 2026-06-10T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0716 | Multiples vulnérabilités dans FreeBSD | 2026-06-10T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0715 | Multiples vulnérabilités dans les produits SAP | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0714 | Multiples vulnérabilités dans les produits Siemens | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0713 | Vulnérabilité dans les produits Schneider Electric EcoStruxure IT Data Center Expert | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0712 | Vulnérabilité dans Veeam Backup & Replication | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0711 | Multiples vulnérabilités dans les VPN Check Point | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0710 | Multiples vulnérabilités dans Apache HTTP Server | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0709 | Vulnérabilité dans strongSwan | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0708 | Multiples vulnérabilités dans Google Chrome | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0707 | Vulnérabilité dans Moodle | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0706 | Multiples vulnérabilités dans Apereo CAS | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0705 | Multiples vulnérabilités dans les produits Spring | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0704 | Vulnérabilité dans CPython | 2026-06-09T00:00:00.000000 | 2026-06-09T00:00:00.000000 |
| certfr-2026-avi-0703 | Vulnérabilité dans Laravel | 2026-06-08T00:00:00.000000 | 2026-06-08T00:00:00.000000 |
| certfr-2026-avi-0702 | Multiples vulnérabilités dans Spring Micrometer | 2026-06-08T00:00:00.000000 | 2026-06-08T00:00:00.000000 |
| certfr-2026-avi-0701 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-08T00:00:00.000000 | 2026-06-08T00:00:00.000000 |
| certfr-2026-avi-0700 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-08T00:00:00.000000 | 2026-06-08T00:00:00.000000 |
| certfr-2026-avi-0699 | Vulnérabilité dans Cisco Catalyst SD-WAN | 2026-06-05T00:00:00.000000 | 2026-06-10T00:00:00.000000 |
| certfr-2026-avi-0698 | Multiples vulnérabilités dans les produits IBM | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0697 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0696 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0695 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0694 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0693 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0692 | Multiples vulnérabilités dans Google Chrome | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0691 | Multiples vulnérabilités dans CPython | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0690 | Multiples vulnérabilités dans Traefik | 2026-06-05T00:00:00.000000 | 2026-06-05T00:00:00.000000 |
| certfr-2026-avi-0689 | Vulnérabilité dans les produits Cisco | 2026-06-04T00:00:00.000000 | 2026-06-04T00:00:00.000000 |
| certfr-2026-avi-0688 | Multiples vulnérabilités dans FreeRadius | 2026-06-04T00:00:00.000000 | 2026-06-04T00:00:00.000000 |