Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115606 | 7.1 (v3.1) | WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scr… |
Crowd Favorite |
DXP ToolKit |
2026-10-28T13:00:11.719Z | 2026-10-29T13:47:39.191Z |
| cve-2026-115609 | 7.1 (v3.1) | WordPress GetPaid plugin <= 2.8.62 - Cross Site Script… |
Stiofan |
GetPaid |
2026-10-28T13:00:11.577Z | 2026-10-29T13:47:39.348Z |
| cve-2026-55369 | Waline login accepts a non-string email as a match-all… |
walinejs |
waline |
2026-10-28T12:56:15.822Z | 2026-10-28T12:56:15.822Z | |
| cve-2026-115904 | Topluyo Desktop for Linux has an OS Command Injection issue |
topluyo |
App |
2026-10-28T12:55:04.432Z | 2026-10-28T12:55:04.432Z | |
| cve-2026-93515 | 6.8 (v4.0) | .Org Server Present Extension Use-After-Free |
X.org |
xorg-x11-server |
2026-10-28T12:39:44.890Z | 2026-10-28T12:39:44.890Z |
| cve-2026-21830 | 3.7 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:37:35.527Z | 2026-10-28T12:37:35.527Z |
| cve-2026-118037 | 7.5 (v3.1) | Uncontrolled Resource Consumption in Telerik Document … |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:34:09.534Z | 2026-10-28T12:34:09.534Z |
| cve-2026-118036 | 7.5 (v3.1) | Uncontrolled Resource Consumption in Telerik Document … |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:33:04.373Z | 2026-10-28T12:33:04.373Z |
| cve-2026-118035 | 7.5 (v3.1) | Uncontrolled Resource Consumption in Telerik Document … |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:31:56.249Z | 2026-10-28T12:31:56.249Z |
| cve-2026-118040 | 7.5 (v3.1) | Improper Signature and Certificate Validation in Teler… |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:30:41.623Z | 2026-10-28T12:30:41.623Z |
| cve-2026-118039 | 7.5 (v3.1) | XML External Entity Reference in Telerik Document Proc… |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:29:35.667Z | 2026-10-28T12:29:35.667Z |
| cve-2026-118038 | 7.1 (v3.1) | Path Traversal in Telerik Document Processing Librarie… |
Progress Software |
Telerik Document Processing Libraries |
2026-10-28T12:27:47.560Z | 2026-10-28T12:27:47.560Z |
| cve-2026-67077 | 4.2 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:26:30.628Z | 2026-10-28T12:26:30.628Z |
| cve-2026-67079 | 6.4 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:25:55.234Z | 2026-10-28T12:25:55.234Z |
| cve-2026-67080 | 6.5 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:25:19.455Z | 2026-10-28T12:25:19.455Z |
| cve-2026-67073 | 8.6 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:24:30.101Z | 2026-10-28T12:24:30.101Z |
| cve-2026-67074 | 9.1 (v3.1) | HCL BigFix AEX is affected by multiple security vulner… |
HCL Software |
BigFix AEX |
2026-10-28T12:22:54.795Z | 2026-10-28T12:22:54.795Z |
| cve-2026-102790 | 8.6 (v4.0) | Joomla Extension - icagenda.com - Authenticated Store… |
icagenda.com |
iCagenda extension for Joomla |
2026-10-28T11:56:12.050Z | 2026-10-28T11:56:12.050Z |
| cve-2026-81472 | 4.2 (v3.1) | Dell iDRAC Service Module (iSM) for Windows, Dell… |
Dell |
iDRAC Service Module for Windows |
2026-10-28T11:55:34.088Z | 2026-10-29T10:45:43.551Z |
| cve-2026-114278 | 9.8 (v3.1) | Unauthenticated Command Injection via kubeconfig Usern… |
Eclipse Foundation |
Eclipse Che |
2026-10-28T11:55:05.600Z | 2026-10-28T11:55:05.600Z |
| cve-2026-102799 | 5.3 (v4.0) | Joomla Extension - icagenda.com - CSV formula injectio… |
icagenda.com |
iCagenda extension for Joomla |
2026-10-28T11:53:05.596Z | 2026-10-28T11:53:05.596Z |
| cve-2026-118485 | 7 (v4.0) 8.1 (v3.1) | Axel Download Accelerator Path Traversal via URL Filen… |
Axel Download Accelerator |
Axel |
2026-10-28T11:26:59.053Z | 2026-10-28T11:26:59.053Z |
| cve-2026-116855 | 5.4 (v3.1) | WordPress My auctions allegro plugin <= 4.0.3 - Broken… |
wphocus |
My auctions allegro |
2026-10-28T11:17:47.505Z | 2026-10-29T13:47:39.509Z |
| cve-2026-118477 | 8.7 (v4.0) 9.8 (v3.1) | KaliFast Project Management Platform ei_git_repo_url O… |
EISGE |
Kalifast |
2026-10-28T11:09:58.882Z | 2026-10-28T11:09:58.882Z |
| cve-2026-6064 | 7.3 (v3.1) | Norton, Avast, and AVG local privilege escalation via … |
Gen Digital |
Norton Antivirus |
2026-10-28T10:47:51.974Z | 2026-10-28T10:47:51.974Z |
| cve-2026-115223 | Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Pop… |
Unknown |
Smart Popup by Supsystic |
2026-10-28T10:45:14.251Z | 2026-10-28T17:47:59.351Z | |
| cve-2026-110508 | Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthe… |
Unknown |
Essential Addons for Elementor |
2026-10-28T10:45:13.617Z | 2026-10-28T17:47:59.601Z | |
| cve-2026-106648 | Royal Elementor Addons < 1.7.1070 - Unauthenticated Ar… |
Unknown |
Royal Elementor Addons |
2026-10-28T10:45:12.999Z | 2026-10-28T17:47:59.741Z | |
| cve-2026-103330 | Sadad QA Payment 1.28 - Unauthenticated Arbitrary Orde… |
Unknown |
Sadad QA Payment |
2026-10-28T10:45:12.352Z | 2026-10-28T17:47:59.887Z | |
| cve-2026-103313 | BitPay Gateway for WooCommerce <= 4.1.3 - Unauthentica… |
Unknown |
BitPay Gateway for WooCommerce |
2026-10-28T10:45:11.700Z | 2026-10-28T17:48:00.036Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2023-000081 | "Rikunabi NEXT" App for Android fails to restrict custom URL schemes properly | 2023-08-09T12:45+09:00 | 2024-03-28T18:01+09:00 |
| jvndb-2023-000080 | "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly | 2023-08-07T17:39+09:00 | 2024-03-28T17:54+09:00 |
| jvndb-2023-000079 | Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API | 2023-08-07T15:15+09:00 | 2024-03-28T18:08+09:00 |
| jvndb-2023-000077 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext | 2023-08-04T17:31+09:00 | 2024-04-03T17:19+09:00 |
| jvndb-2023-002787 | OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS) | 2023-08-03T13:45+09:00 | 2023-08-03T13:45+09:00 |
| jvndb-2023-002786 | Multiple vulnerabilities in OMRON CX-Programmer | 2023-08-03T13:42+09:00 | 2024-04-05T17:39+09:00 |
| jvndb-2023-000076 | SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS) | 2023-08-02T14:55+09:00 | 2024-04-19T17:27+09:00 |
| jvndb-2023-002725 | Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers | 2023-07-28T18:24+09:00 | 2024-05-07T18:15+09:00 |
| jvndb-2023-002722 | Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass | 2023-07-27T18:12+09:00 | 2024-04-19T18:07+09:00 |
| jvndb-2023-000074 | Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials | 2023-07-26T18:00+09:00 | 2024-04-12T18:04+09:00 |
| jvndb-2023-000075 | Improper restriction of XML external entity references (XXE) in Applicant Programme | 2023-07-24T15:44+09:00 | 2024-04-22T14:20+09:00 |
| jvndb-2023-000073 | GBrowse vulnerable to unrestricted upload of files with dangerous types | 2023-07-21T15:02+09:00 | 2024-04-12T17:31+09:00 |
| jvndb-2023-000070 | Multiple vulnerabilities in WordPress Plugin "TS Webfonts for SAKURA" | 2023-07-20T16:05+09:00 | 2024-04-17T17:20+09:00 |
| jvndb-2023-002512 | EL Injection Vulnerability in Hitachi Replication Manager | 2023-07-19T14:48+09:00 | 2024-04-26T12:24+09:00 |
| jvndb-2023-002511 | File and Directory Permissions Vulnerability in Hitachi Command Suite | 2023-07-19T14:48+09:00 | 2024-04-26T12:29+09:00 |
| jvndb-2023-002510 | Multiple Vulnerabilities in Hitachi Device Manager | 2023-07-19T14:48+09:00 | 2023-07-19T14:48+09:00 |
| jvndb-2023-000072 | Improper restriction of XML external entity references (XXE) in XBRL data create application | 2023-07-18T15:22+09:00 | 2024-03-19T18:11+09:00 |
| jvndb-2023-002413 | Multiple vulnerabilities in ELECOM and LOGITEC wireless LAN routers | 2023-07-12T16:15+09:00 | 2024-04-22T16:18+09:00 |
| jvndb-2023-000071 | Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters | 2023-07-11T15:37+09:00 | 2024-03-29T15:28+09:00 |
| jvndb-2023-000069 | Multiple vulnerabilities in SoftEther VPN and PacketiX VPN | 2023-07-03T15:07+09:00 | 2024-05-22T17:47+09:00 |
| jvndb-2023-000068 | "NewsPicks" App uses a hard-coded API key for an external service | 2023-06-30T15:06+09:00 | 2024-04-30T18:09+09:00 |
| jvndb-2023-002270 | Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server | 2023-06-30T11:49+09:00 | 2024-04-22T16:07+09:00 |
| jvndb-2023-000067 | WordPress Plugin "Snow Monkey Forms" vulnerable to directory traversal | 2023-06-27T17:05+09:00 | 2024-04-26T17:56+09:00 |
| jvndb-2023-000065 | Multiple vulnerabilities in WAVLINK WL-WN531AX2 | 2023-06-27T16:50+09:00 | 2023-06-27T16:50+09:00 |
| jvndb-2023-000066 | Multiple vulnerabilities in Aterm series | 2023-06-27T15:12+09:00 | 2024-05-22T18:16+09:00 |
| jvndb-2023-000060 | Multiple vulnerabilities in Pleasanter | 2023-06-22T15:49+09:00 | 2024-05-07T14:10+09:00 |
| jvndb-2023-000064 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS) | 2023-06-20T14:48+09:00 | 2024-04-26T18:03+09:00 |
| jvndb-2023-000063 | Multiple vulnerabilities in Panasonic AiSEG2 | 2023-06-16T14:05+09:00 | 2023-06-16T14:05+09:00 |
| jvndb-2023-002111 | Printer Driver Packager NX creates driver installation packages without modification detection | 2023-06-15T16:06+09:00 | 2024-05-23T15:45+09:00 |
| jvndb-2023-002100 | Security updates for multiple Trend Micro products for enterprises (June 2023) | 2023-06-14T14:47+09:00 | 2024-05-23T15:23+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0687 | Multiples vulnérabilités dans Synology Chat Server pour DSM | 2026-06-04T00:00:00.000000 | 2026-06-04T00:00:00.000000 |
| certfr-2026-avi-0686 | Multiples vulnérabilités dans les produits NetApp | 2026-06-04T00:00:00.000000 | 2026-06-04T00:00:00.000000 |
| certfr-2026-avi-0685 | Multiples vulnérabilités dans Microsoft Azure Linux | 2026-06-03T00:00:00.000000 | 2026-06-03T00:00:00.000000 |
| certfr-2026-avi-0684 | Multiples vulnérabilités dans Mozilla Firefox | 2026-06-03T00:00:00.000000 | 2026-06-03T00:00:00.000000 |
| certfr-2026-avi-0683 | Vulnérabilité dans HPE Aruba Networking AOS-CX | 2026-06-03T00:00:00.000000 | 2026-06-03T00:00:00.000000 |
| certfr-2026-avi-0682 | Vulnérabilité dans les produits Laravel | 2026-06-03T00:00:00.000000 | 2026-06-03T00:00:00.000000 |
| certfr-2026-avi-0681 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0680 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0679 | Multiples vulnérabilités dans Google Android | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0678 | Vulnérabilité dans Apache Kafka | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0677 | Vulnérabilité dans les produits Ivanti | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0676 | Multiples vulnérabilités dans Mozilla Firefox | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0675 | Multiples vulnérabilités dans GLPI | 2026-06-02T00:00:00.000000 | 2026-06-02T00:00:00.000000 |
| certfr-2026-avi-0674 | Multiples vulnérabilités dans les produits Microsoft | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0673 | Vulnérabilité dans Microsoft Azure | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0672 | Multiples vulnérabilités dans les produits Mitel | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0671 | Multiples vulnérabilités dans les produits NetApp | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0670 | Vulnérabilité dans Laravel | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0669 | Vulnérabilité dans Keycloak | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0668 | Vulnérabilité dans Kaspersky Anti Targeted Attack Platform | 2026-06-01T00:00:00.000000 | 2026-06-01T00:00:00.000000 |
| certfr-2026-avi-0667 | Multiples vulnérabilités dans les produits IBM | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0666 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0665 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0664 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0663 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0662 | Multiples vulnérabilités dans Oracle Database Server | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0661 | Multiples vulnérabilités dans Elastic Kibana | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0660 | Multiples vulnérabilités dans les produits Mattermost | 2026-05-29T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-0659 | Multiples vulnérabilités dans Centreon Web | 2026-05-29T00:00:00.000000 | 2026-05-29T00:00:00.000000 |
| certfr-2026-avi-0658 | Multiples vulnérabilités dans GitLab | 2026-05-28T00:00:00.000000 | 2026-05-28T00:00:00.000000 |