Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-30156 | Ceph: AES-CBC misuse in CephX and RADOSGW enables auth… |
ceph |
ceph |
2026-08-27T20:34:41.822Z | 2026-08-27T20:34:41.822Z | |
| cve-2026-18965 | 8.8 (v3.1) 8.7 (v4.0) | Missing Authorization in PayRange API |
PayRange |
PayRange API |
2026-08-27T20:34:16.692Z | 2026-08-28T15:57:53.992Z |
| cve-2026-76060 | 8.8 (v3.1) 8.7 (v4.0) | OS Command Injection in PayRange API |
Zoneminder |
Zoneminder |
2026-08-27T20:29:05.262Z | 2026-08-28T15:58:01.239Z |
| cve-2026-68929 | FastGPT: Unauthenticated WeChat channel hijack and den… |
labring |
FastGPT |
2026-08-27T20:21:30.866Z | 2026-08-28T17:48:00.135Z | |
| cve-2026-18717 | 7.4 (v3.1) 9.1 (v4.0) | Improper Certificate Validation in ASE 2000 |
Applied Systems Engineering |
ASE2000 V2 |
2026-08-27T20:20:23.451Z | 2026-08-28T15:58:08.375Z |
| cve-2026-81731 | 5.1 (v4.0) 5.4 (v3.1) | Frappe 15.11.0 through 16.32.0 Stored XSS via Workspac… |
frappe |
frappe |
2026-08-27T20:07:35.561Z | 2026-08-27T20:07:35.561Z |
| cve-2026-81730 | 8.8 (v4.0) 8.2 (v3.1) | Dolibarr 9.0.0 through 23.0.4 Path Traversal via Email… |
Dolibarr |
dolibarr |
2026-08-27T20:07:34.881Z | 2026-08-28T17:55:52.355Z |
| cve-2026-81729 | 7.1 (v4.0) 6.5 (v3.1) | Dolibarr before 23.0.4 Incorrect Authorization on REST… |
Dolibarr |
dolibarr |
2026-08-27T20:07:34.181Z | 2026-08-27T20:07:34.181Z |
| cve-2026-81728 | 8.6 (v4.0) 8.1 (v3.1) | Dolibarr before 24.0.0 SQL Injection via the CSV and X… |
Dolibarr |
dolibarr |
2026-08-27T20:07:33.503Z | 2026-08-28T14:08:40.368Z |
| cve-2026-81838 | 6.8 (v4.0) 7.1 (v3.1) | Zip Slip Arbitrary File Write in AWS diagram-as-code (… |
aws |
diagram-as-code |
2026-08-27T20:03:59.258Z | 2026-08-28T14:13:53.824Z |
| cve-2026-81834 | RooCodeInc Roo-Code README File ExecaTerminalProcess c… |
RooCodeInc |
Roo-Code |
2026-08-27T20:00:08.895Z | 2026-08-28T15:32:38.871Z | |
| cve-2026-77438 | Trilium unauthenticated share-search discloses passwor… |
TriliumNext |
Trilium |
2026-08-27T19:52:55.731Z | 2026-08-28T15:35:12.098Z | |
| cve-2026-53580 | Trilium arbitrary file read and denial of service via … |
TriliumNext |
Trilium |
2026-08-27T19:46:12.357Z | 2026-08-28T14:55:56.996Z | |
| cve-2026-81833 | RooCodeInc Roo-Code CodeIndexManager helpers.ts optimi… |
RooCodeInc |
Roo-Code |
2026-08-27T19:45:10.936Z | 2026-08-27T19:45:10.936Z | |
| cve-2026-81934 | Redis TLS pending-data list use-after-free |
Redis |
Redis |
2026-08-27T19:40:15.141Z | 2026-08-28T15:14:13.092Z | |
| cve-2026-10036 | 8.7 (v4.0) 8.8 (v3.1) | SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.… |
speechbrain |
speechbrain |
2026-08-27T19:36:57.357Z | 2026-08-29T11:47:29.345Z |
| cve-2026-81931 | 4.8 (v4.0) | Unrestricted upload of file with dangerous type in Pro… |
Roskus |
Prospero Flow CRM |
2026-08-27T19:33:27.288Z | 2026-08-28T15:36:24.352Z |
| cve-2026-53579 | Trilium: Note Import to RCE via Book Note |
TriliumNext |
Trilium |
2026-08-27T19:33:24.490Z | 2026-08-28T15:58:18.142Z | |
| cve-2026-53578 | Trilium: Note Import to RCE via Mind Elixir dangerousl… |
TriliumNext |
Trilium |
2026-08-27T19:21:21.331Z | 2026-08-27T19:21:21.331Z | |
| cve-2026-18374 | 4.9 (v3.1) | Passing an effectively empty string to the `,ccs=… |
The GNU C Library |
glibc |
2026-08-27T19:20:40.426Z | 2026-08-28T15:37:10.821Z |
| cve-2026-74820 | 10 (v4.0) | Unauthenticated SQL Injection via Dynamic Schema ORDER… |
ServiceNow |
ServiceNow AI Platform |
2026-08-27T19:05:04.612Z | 2026-08-29T03:56:10.853Z |
| cve-2026-18886 | 10 (v4.0) | Unauthenticated Privilege Escalation via System Config… |
ServiceNow |
ServiceNow AI Platform |
2026-08-27T19:00:01.715Z | 2026-08-29T03:56:09.659Z |
| cve-2026-18885 | 10 (v4.0) | Unauthenticated Remote Code Execution in GraphQL Compo… |
ServiceNow |
ServiceNow AI Platform |
2026-08-27T18:54:14.827Z | 2026-08-29T03:56:08.287Z |
| cve-2026-6876 | 8.7 (v4.0) | Sandbox Escape in Now Platform |
ServiceNow |
ServiceNow AI Platform |
2026-08-27T18:46:04.798Z | 2026-08-31T15:36:54.164Z |
| cve-2026-81893 | 4.7 (v3.1) | Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc prof… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-27T18:34:03.016Z | 2026-08-28T14:29:06.460Z |
| cve-2026-34616 | 5.5 (v3.1) | DNG SDK | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe DNG Software Development Kit (SDK) |
2026-08-27T18:33:58.874Z | 2026-08-28T15:42:40.150Z |
| cve-2026-34620 | 5.5 (v3.1) | DNG SDK | Out-of-bounds Write (CWE-787) |
Adobe |
Adobe DNG Software Development Kit (SDK) |
2026-08-27T18:33:58.189Z | 2026-08-27T22:15:57.269Z |
| cve-2026-81530 | 6.8 (v4.0) 5.6 (v3.1) | KMS master key exposure via unredacted credential seri… |
MongoDB |
C# Driver |
2026-08-27T18:32:32.877Z | 2026-08-28T15:44:10.176Z |
| cve-2026-81529 | 7.1 (v4.0) 7.1 (v3.1) | Connection-option injection via unescaped settings in … |
MongoDB |
C# Driver |
2026-08-27T18:32:31.650Z | 2026-08-28T16:37:37.138Z |
| cve-2026-81528 | 5.3 (v4.0) 5.4 (v3.1) | NoSQL injection via array replacement bypassing update… |
MongoDB |
C# Driver |
2026-08-27T18:32:30.215Z | 2026-08-28T15:45:22.840Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000009 | CSV+ vulnerable to cross-site scripting | 2022-02-08T16:33+09:00 | 2022-02-08T16:33+09:00 |
| jvndb-2022-000010 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2022-02-08T16:13+09:00 | 2022-02-08T16:13+09:00 |
| jvndb-2016-008013 | Multiple ESET products for macOS vulnerable to improper server certificate verification | 2022-02-07T14:18+09:00 | 2022-02-07T14:18+09:00 |
| jvndb-2022-000007 | Multiple vulnerabilities in TransmitMail | 2022-01-25T15:31+09:00 | 2022-01-25T15:31+09:00 |
| jvndb-2022-001097 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux | 2022-01-25T13:35+09:00 | 2022-01-25T13:35+09:00 |
| jvndb-2022-001087 | GROWI vulnerable to authorization bypass through user-controlled key | 2022-01-24T14:07+09:00 | 2022-01-24T14:07+09:00 |
| jvndb-2022-000006 | Multiple cross-site scripting vulnerabilities in php_mailform | 2022-01-20T15:42+09:00 | 2022-01-20T15:42+09:00 |
| jvndb-2022-000001 | Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting | 2022-01-19T14:00+09:00 | 2022-01-19T14:00+09:00 |
| jvndb-2022-000005 | PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption | 2022-01-13T15:26+09:00 | 2022-01-13T15:26+09:00 |
| jvndb-2022-000004 | Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials | 2022-01-13T15:21+09:00 | 2022-01-13T15:21+09:00 |
| jvndb-2022-000003 | Jimoty App for Android uses a hard-coded API key for an external service | 2022-01-12T15:37+09:00 | 2022-01-12T15:37+09:00 |
| jvndb-2022-000002 | Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master" | 2022-01-12T15:33+09:00 | 2022-01-12T15:33+09:00 |
| jvndb-2021-006146 | Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems | 2021-12-28T11:51+09:00 | 2021-12-28T11:51+09:00 |
| jvndb-2021-006117 | Multiple vulnerabilities in IDEC PLCs | 2021-12-27T16:54+09:00 | 2022-01-11T16:36+09:00 |
| jvndb-2021-006026 | TP-Link TL-WR802N V4(JP) vulnerable to OS command injection | 2021-12-24T15:31+09:00 | 2021-12-24T15:31+09:00 |
| jvndb-2021-005998 | Multiple vulnerabilities in QNAP VioStar NVR | 2021-12-24T10:58+09:00 | 2021-12-24T10:58+09:00 |
| jvndb-2021-003929 | Multiple vulnerabilities in multiple Yamaha routers | 2021-12-24T10:51+09:00 | 2021-12-24T10:51+09:00 |
| jvndb-2021-000112 | Android Apps developed using Yappli fails to restrict custom URL schemes properly | 2021-12-22T15:07+09:00 | 2021-12-22T15:07+09:00 |
| jvndb-2021-000111 | Multiple vulnerabilities in GroupSession | 2021-12-20T14:53+09:00 | 2021-12-21T14:20+09:00 |
| jvndb-2021-000110 | UNIVERGE DT Series vulnerable to missing encryption of sensitive data | 2021-12-17T16:57+09:00 | 2021-12-17T16:57+09:00 |
| jvndb-2021-005174 | Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer) | 2021-12-09T13:43+09:00 | 2021-12-09T13:43+09:00 |
| jvndb-2021-004912 | Multiple vulnerabilities in multiple ELECOM routers | 2021-12-02T17:16+09:00 | 2022-03-30T16:11+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2021-000108 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2021-11-30T16:23+09:00 | 2022-03-29T16:18+09:00 |
| jvndb-2021-000107 | Wi-Fi STATION SH-52A vulnerable to cross-site scripting | 2021-11-30T14:49+09:00 | 2021-11-30T14:49+09:00 |
| jvndb-2021-004716 | Trend Micro Antivirus for MAC vulnerable to improper access controls | 2021-11-29T13:52+09:00 | 2021-11-29T13:52+09:00 |
| jvndb-2021-000106 | Multiple vulnerabilities in baserCMS | 2021-11-26T14:59+09:00 | 2021-11-26T14:59+09:00 |
| jvndb-2021-000104 | WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery | 2021-11-25T14:31+09:00 | 2021-11-25T14:31+09:00 |
| jvndb-2021-000105 | PowerCMS XMLRPC API vulnerable to OS command injection | 2021-11-24T15:47+09:00 | 2024-07-26T15:22+09:00 |
| jvndb-2021-004432 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-11-22T16:10+09:00 | 2021-11-22T16:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0165 | Vulnérabilité dans Mattermost Server | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0164 | Multiples vulnérabilités dans PostgreSQL | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0163 | Multiples vulnérabilités dans HAProxy | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0162 | Multiples vulnérabilités dans Juniper Networks Secure Analytics | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0161 | Vulnérabilité dans Tenable Nessus Agent | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0160 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0159 | Multiples vulnérabilités dans Keycloak | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0158 | Multiples vulnérabilités dans les produits Apple | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0157 | Multiples vulnérabilités dans les produits Qnap | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0156 | Multiples vulnérabilités dans Google Chrome | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0155 | Multiples vulnérabilités dans SPIP | 2026-02-12T00:00:00.000000 | 2026-02-25T00:00:00.000000 |
| certfr-2026-avi-0154 | Vulnérabilité dans Traefik | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0153 | Multiples vulnérabilités dans les produits Microsoft | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0152 | Multiples vulnérabilités dans Microsoft Azure | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0151 | Vulnérabilité dans Microsoft .Net | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0150 | Multiples vulnérabilités dans Microsoft Windows | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0149 | Multiples vulnérabilités dans Microsoft Office | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0147 | Multiples vulnérabilités dans les produits Fortinet | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0146 | Multiples vulnérabilités dans GitLab | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0145 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0144 | Multiples vulnérabilités dans Ivanti Endpoint Manager | 2026-02-11T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0143 | Multiples vulnérabilités dans Synology Storage Manager | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0142 | Multiples vulnérabilités dans MongoDB | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0141 | Multiples vulnérabilités dans les produits SAP | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0140 | Multiples vulnérabilités dans les produits Axis | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0139 | Multiples vulnérabilités dans les produits Siemens | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0138 | Multiples vulnérabilités dans les produits Schneider Electric | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0137 | Multiples vulnérabilités dans GnuTLS | 2026-02-10T00:00:00.000000 | 2026-02-10T00:00:00.000000 |
| certfr-2026-avi-0136 | Vulnérabilité dans Fortinet FortiClientEMS | 2026-02-09T00:00:00.000000 | 2026-02-09T00:00:00.000000 |