Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-75486 | 8.5 (v4.0) 8 (v3.1) | Synk Sweater Comb < 3.8.8 Command Injection via .verve… |
snyk |
sweater-comb |
2026-08-28T15:47:21.519Z | 2026-08-29T11:47:47.089Z |
| cve-2026-73108 | 8.7 (v4.0) 7.5 (v3.1) | RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS vi… |
rustdesk |
rustdesk |
2026-08-26T13:00:29.283Z | 2026-08-29T11:47:46.413Z |
| cve-2026-73102 | 6.9 (v4.0) 5.7 (v3.1) | RustDesk Path Traversal via macOS Clipboard File-Paste |
rustdesk |
rustdesk |
2026-08-26T13:00:00.405Z | 2026-08-29T11:47:45.736Z |
| cve-2026-72711 | 6.8 (v4.0) 6.3 (v3.1) | Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration… |
leanprover |
lean4 |
2026-08-24T20:08:33.219Z | 2026-08-29T11:47:45.059Z |
| cve-2026-72705 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover before 9.2.0 Guard Checker Accepts Fixpoin… |
rocq-prover |
rocq |
2026-08-24T20:08:32.535Z | 2026-08-29T11:47:44.348Z |
| cve-2026-72704 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover through 9.2.0 Guard Checker Trusts Corrupt… |
rocq-prover |
rocq |
2026-08-24T20:08:31.787Z | 2026-08-29T11:47:43.676Z |
| cve-2026-72703 | 6.8 (v4.0) 6.3 (v3.1) | Rocq Prover 8.20 before 9.2.0 Guard Checker Accepts No… |
rocq-prover |
rocq |
2026-08-24T20:08:30.607Z | 2026-08-29T11:47:43.005Z |
| cve-2026-72699 | 9.3 (v4.0) 5.3 (v3.1) | Grav Login Plugin before 3.9.1 Email Enumeration via R… |
getgrav |
grav-plugin-login |
2026-08-25T01:30:21.863Z | 2026-08-29T11:47:42.332Z |
| cve-2026-71511 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Members REST API Sensitive Data Expo… |
Dolibarr |
dolibarr |
2026-08-24T19:06:35.183Z | 2026-08-29T11:47:41.626Z |
| cve-2026-71510 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Users REST API SQL Injection via fil… |
Dolibarr |
dolibarr |
2026-08-24T19:05:39.848Z | 2026-08-29T11:47:40.942Z |
| cve-2026-71509 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 Expense Report REST API Improper Aut… |
Dolibarr |
dolibarr |
2026-08-24T19:04:52.122Z | 2026-08-29T11:47:40.171Z |
| cve-2026-71508 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Improper Authorization via … |
Dolibarr |
dolibarr |
2026-08-24T19:03:59.694Z | 2026-08-29T11:47:38.779Z |
| cve-2026-71507 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:03:01.493Z | 2026-08-29T11:47:38.074Z |
| cve-2026-71506 | 7.2 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Payments REST API Improper Authoriza… |
Dolibarr |
dolibarr |
2026-08-24T19:01:47.408Z | 2026-08-29T11:47:37.389Z |
| cve-2026-71505 | 7.1 (v4.0) 7.1 (v3.1) | Dolibarr < 24.0.0 REST API Broken Object-Level Authori… |
Dolibarr |
dolibarr |
2026-08-24T19:00:47.470Z | 2026-08-29T11:47:36.700Z |
| cve-2026-71504 | 8.6 (v4.0) 8.1 (v3.1) | Dolibarr < 24.0.0 Members REST API Improper Authorizat… |
Dolibarr |
dolibarr |
2026-08-24T18:57:47.028Z | 2026-08-29T11:47:36.048Z |
| cve-2026-71503 | 5.1 (v4.0) 6.1 (v3.1) | Dolibarr < 24.0.0 Reflected XSS via Extra Fields Admin… |
Dolibarr |
dolibarr |
2026-08-24T18:57:05.485Z | 2026-08-29T11:47:35.368Z |
| cve-2026-6827 | 5.1 (v4.0) 6.1 (v3.1) | justhtml before 1.17.0 Multiple Cross-Site Scripting V… |
EmilStenstrom |
justhtml |
2026-08-23T13:34:11.236Z | 2026-08-29T11:47:34.707Z |
| cve-2026-67602 | 9.3 (v4.0) 9.1 (v3.1) | phpIPAM < 1.8.2 Authentication Bypass via REST API Obj… |
phpipam |
phpipam |
2026-08-24T13:57:42.191Z | 2026-08-29T11:47:34.046Z |
| cve-2026-67204 | 5.3 (v4.0) 5.4 (v3.1) | BookStack < 26.05.4 Broken Access Control via Image Ga… |
BookStackApp |
BookStack |
2026-08-24T15:33:13.649Z | 2026-08-29T11:47:33.393Z |
| cve-2026-65053 | 5.1 (v4.0) 6.1 (v3.1) | Horde IMP before 7.2.0 Stored Cross-Site Scripting via… |
horde |
imp |
2026-08-24T14:53:43.219Z | 2026-08-29T11:47:32.704Z |
| cve-2026-62388 | 8.7 (v4.0) 7.5 (v3.1) | NLTK before 3.10.0 Insecure Default Configuration in p… |
nltk |
nltk |
2026-08-22T14:12:38.647Z | 2026-08-29T11:47:32.048Z |
| cve-2026-58474 | 8.6 (v4.0) 8.8 (v3.1) | whichllm < 0.5.16 Code Injection via run and snippet c… |
Andyyyy64 |
whichllm |
2026-08-26T17:49:04.041Z | 2026-08-29T11:47:31.365Z |
| cve-2026-57998 | 8.5 (v4.0) 7.8 (v3.1) | better-npm-audit OS Command Injection via registry flag |
jeemok |
better-npm-audit |
2026-08-22T12:26:30.536Z | 2026-08-29T11:47:30.693Z |
| cve-2026-56100 | 8.6 (v4.0) 8.1 (v3.1) | SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exp… |
SpringBlade |
SpringBlade |
2026-08-28T18:00:36.953Z | 2026-08-29T11:47:29.998Z |
| cve-2026-10036 | 8.7 (v4.0) 8.8 (v3.1) | SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.… |
speechbrain |
speechbrain |
2026-08-27T19:36:57.357Z | 2026-08-29T11:47:29.345Z |
| cve-2026-14494 | Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthentic… |
bdthemes |
SigmaForms Pro – AI Generated Forms |
2026-08-29T11:30:17.164Z | 2026-08-29T11:30:17.164Z | |
| cve-2026-82364 | macrozheng mall Order Submission submit race condition |
macrozheng |
mall |
2026-08-29T11:00:08.359Z | 2026-08-29T11:00:08.359Z | |
| cve-2026-80725 | N/A | net: gro: properly validate BIG TCP aggregation criteria |
Linux |
Linux |
2026-08-29T06:39:35.212Z | 2026-08-29T06:40:30.300Z |
| cve-2026-80723 | of: reserved_mem: prevent OOB when too many dynamic re… |
Linux |
Linux |
2026-08-28T06:53:18.485Z | 2026-08-29T06:22:40.126Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2024-002050 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2024-02-07T15:39+09:00 | 2024-03-08T18:05+09:00 |
| jvndb-2024-000030 | a-blog cms vulnerable to directory traversal | 2024-03-08T15:27+09:00 | 2024-03-08T15:27+09:00 |
| jvndb-2024-002942 | OMRON NJ/NX series vulnerable to path traversal | 2024-03-08T14:16+09:00 | 2024-03-08T14:16+09:00 |
| jvndb-2024-000027 | FUJIFILM Business Innovation Corp. printers vulnerable to cross-site request forgery | 2024-03-06T18:24+09:00 | 2024-03-06T18:24+09:00 |
| jvndb-2024-000026 | Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management | 2024-03-06T18:12+09:00 | 2024-03-06T18:12+09:00 |
| jvndb-2024-000029 | Toyoko Inn official App vulnerable to improper server certificate verification | 2024-03-06T13:53+09:00 | 2024-03-06T13:53+09:00 |
| jvndb-2024-000005 | "Mercari" App for Android fails to restrict custom URL schemes properly | 2024-01-24T13:46+09:00 | 2024-03-04T18:01+09:00 |
| jvndb-2024-000025 | Protection mechanism failure in RevoWorks | 2024-02-29T15:40+09:00 | 2024-02-29T15:40+09:00 |
| jvndb-2024-000024 | OET-213H-BTS1 missing authorization check in the initial configuration | 2024-02-29T14:59+09:00 | 2024-02-29T14:59+09:00 |
| jvndb-2024-000023 | OpenPNE plugin "opTimelinePlugin" vulnerable to cross-site scripting | 2024-02-29T13:12+09:00 | 2024-02-29T13:12+09:00 |
| jvndb-2024-000022 | Multiple vulnerabilities in baserCMS | 2024-02-27T14:25+09:00 | 2024-02-27T14:25+09:00 |
| jvndb-2024-002832 | EL Injection Vulnerability in Hitachi Global Link Manager | 2024-02-21T15:53+09:00 | 2024-02-21T15:53+09:00 |
| jvndb-2024-002560 | Android App "Mopria Print Service" vulnerable to improper intent handling | 2024-02-15T15:26+09:00 | 2024-02-15T15:26+09:00 |
| jvndb-2024-000019 | a-blog cms vulnerable to URL spoofing | 2024-02-15T14:12+09:00 | 2024-02-15T14:12+09:00 |
| jvndb-2022-002775 | Multiple vulnerabilities in Buffalo network devices | 2022-12-12T15:28+09:00 | 2024-02-14T15:45+09:00 |
| jvndb-2020-013805 | Zeroshell vulnerable to OS command injection | 2024-02-07T13:38+09:00 | 2024-02-07T13:38+09:00 |
| jvndb-2024-001462 | File and Directory Permissions Vulnerability in Hitachi Tuning Manager | 2024-02-05T14:54+09:00 | 2024-02-05T14:54+09:00 |
| jvndb-2024-001161 | Multiple vulnerabilities in SHARP Energy Management Controller with Cloud Services | 2024-01-31T16:01+09:00 | 2024-01-31T16:01+09:00 |
| jvndb-2024-000014 | Oracle WebLogic Server vulnerable to HTTP header injection | 2024-01-24T13:53+09:00 | 2024-01-24T13:53+09:00 |
| jvndb-2023-000121 | RakRak Document Plus vulnerable to path traversal | 2023-12-04T13:45+09:00 | 2024-01-24T12:06+09:00 |
| jvndb-2024-000003 | Pleasanter vulnerable to cross-site scripting | 2024-01-15T15:59+09:00 | 2024-01-15T15:59+09:00 |
| jvndb-2024-001001 | Multiple vulnerabilities in Panasonic Control FPWIN Pro7 | 2024-01-10T13:46+09:00 | 2024-01-10T13:46+09:00 |
| jvndb-2023-009966 | FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection Critical | 2023-12-07T15:09+09:00 | 2023-12-25T16:54+09:00 |
| jvndb-2023-009619 | OS command injection vulnerability in DT900 | 2023-12-06T14:43+09:00 | 2023-12-06T14:43+09:00 |
| jvndb-2023-000117 | Multiple vulnerabilities in LuxCal Web Calendar | 2023-11-20T17:15+09:00 | 2023-11-20T17:15+09:00 |
| jvndb-2021-000018 | The installers of E START products may insecurely load Dynamic Link Libraries | 2021-03-05T17:03+09:00 | 2023-11-16T15:41+09:00 |
| jvndb-2020-000025 | Toshiba Electronic Devices & Storage software registers unquoted service paths | 2020-04-20T17:13+09:00 | 2023-11-08T16:44+09:00 |
| jvndb-2019-000023 | Multiple vulnerabilities in Cybozu Garoon | 2019-04-25T17:13+09:00 | 2023-11-08T16:39+09:00 |
| jvndb-2023-004790 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2023-11-02T12:14+09:00 | 2023-11-02T12:14+09:00 |
| jvndb-2023-004754 | MCL Technologies MCL-Net vulnerable to directory traversal | 2023-11-01T16:49+09:00 | 2023-11-01T16:49+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0261 | Multiples vulnérabilités dans les produits Intel | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0260 | Multiples vulnérabilités dans WordPress | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0259 | Multiples vulnérabilités dans Stormshield Network Security | 2026-03-11T00:00:00.000000 | 2026-03-11T00:00:00.000000 |
| certfr-2026-avi-0258 | Vulnérabilité dans Microsoft CBL-Mariner | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0257 | Vulnérabilité dans Mozilla Focus | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0256 | Multiples vulnérabilités dans les produits SAP | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0255 | Multiples vulnérabilités dans les produits Siemens | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0254 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-03-10T00:00:00.000000 | 2026-03-10T00:00:00.000000 |
| certfr-2026-avi-0253 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0252 | Multiples vulnérabilités dans les produits Moxa | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0251 | Multiples vulnérabilités dans Apache Zookeeper | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0250 | Vulnérabilité dans Apereo CAS | 2026-03-09T00:00:00.000000 | 2026-03-09T00:00:00.000000 |
| certfr-2026-avi-0249 | Multiples vulnérabilités dans les produits IBM | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0248 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0247 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0246 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0245 | Vulnérabilité dans Zabbix | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0244 | Vulnérabilité dans Nextcloud Flow | 2026-03-06T00:00:00.000000 | 2026-03-06T00:00:00.000000 |
| certfr-2026-avi-0242 | Multiples vulnérabilités dans les produits Cisco | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0241 | Vulnérabilité dans ClamAV | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0240 | Vulnérabilité dans CPython | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0239 | Multiples vulnérabilités dans Google Chrome | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0238 | Vulnérabilité dans NetApp ONTAP 9 | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0237 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0236 | Multiples vulnérabilités dans Traefik | 2026-03-05T00:00:00.000000 | 2026-03-05T00:00:00.000000 |
| certfr-2026-avi-0235 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0234 | Vulnérabilité dans Tenable Nessus Manager | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0233 | Multiples vulnérabilités dans Google Pixel | 2026-03-04T00:00:00.000000 | 2026-03-04T00:00:00.000000 |
| certfr-2026-avi-0232 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-03T00:00:00.000000 | 2026-03-03T00:00:00.000000 |
| certfr-2026-avi-0231 | Multiples vulnérabilités dans Google Android | 2026-03-03T00:00:00.000000 | 2026-03-03T00:00:00.000000 |