Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107745 | AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limit… |
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
2026-10-28T02:29:59.766Z | 2026-10-29T01:51:59.196Z | |
| cve-2026-109209 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Sub… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:59.405Z | 2026-10-29T01:51:59.353Z | |
| cve-2026-111314 | affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cr… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T02:29:59.059Z | 2026-10-29T01:51:59.496Z | |
| cve-2026-97019 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Si… |
mohammed_kaludi |
AMP for WP – Accelerated Mobile Pages |
2026-10-28T02:29:58.709Z | 2026-10-29T01:51:59.638Z | |
| cve-2026-109999 | AI Marketing Expert <= 1.2.8 - Unauthenticated Stored … |
nalam-1 |
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot |
2026-10-28T02:29:58.364Z | 2026-10-28T16:11:01.240Z | |
| cve-2026-109974 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Con… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:57.994Z | 2026-10-29T01:51:59.778Z | |
| cve-2026-84999 | Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbi… |
Pie Register |
Pie Register Premium |
2026-10-28T02:29:57.638Z | 2026-10-29T01:51:59.919Z | |
| cve-2026-107625 | Ultimate Member <= 2.14.0 - Authenticated (Subscriber+… |
ultimatemember |
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin |
2026-10-28T02:29:57.142Z | 2026-10-28T16:11:08.360Z | |
| cve-2026-115624 | 5.3 (v3.0) 6.9 (v4.0) | GROWI contains a missing authorization check vuln… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:49.154Z | 2026-10-28T02:21:49.154Z |
| cve-2026-109848 | 4.2 (v3.0) 2.3 (v4.0) | GROWI contains an authorization bypass vulnerabil… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:37.093Z | 2026-10-28T02:21:37.093Z |
| cve-2026-105272 | 4.2 (v3.0) 2.3 (v4.0) | GROWI contains an authorization bypass vulnerabil… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:24.458Z | 2026-10-28T02:21:24.458Z |
| cve-2026-118378 | 8.5 (v4.0) 7.8 (v3.1) | Tabularis before 0.28.0 SQL Injection via MCP describe… |
TabularisDB |
tabularis |
2026-10-28T02:03:24.996Z | 2026-10-28T02:03:24.996Z |
| cve-2026-118377 | 8.7 (v4.0) 7.5 (v3.1) | mews/pos through 2.0.0 Missing Hash Verification in 3D… |
mewebstudio |
pos |
2026-10-28T02:03:24.283Z | 2026-10-28T02:03:24.283Z |
| cve-2026-118376 | 6 (v4.0) 5.3 (v3.1) | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 … |
Tencent |
WeKnora |
2026-10-28T02:03:23.589Z | 2026-10-28T16:11:20.194Z |
| cve-2026-118375 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp b8841 before b11865 Stack-based Buffer Overf… |
ggml-org |
llama.cpp |
2026-10-28T02:03:22.895Z | 2026-10-28T02:03:22.895Z |
| cve-2026-118374 | 8.2 (v4.0) 5.9 (v3.1) | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:22.183Z | 2026-10-28T02:03:22.183Z |
| cve-2026-118373 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 Cleartext Transmissio… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:21.525Z | 2026-10-28T02:03:21.525Z |
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118371 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.152Z | 2026-10-28T02:03:20.152Z |
| cve-2026-118370 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 Integer Overflow in storeAtts v… |
libexpat |
libexpat |
2026-10-28T02:03:19.447Z | 2026-10-28T02:03:19.447Z |
| cve-2026-117610 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 NULL Pointer Dereference via Ex… |
libexpat |
libexpat |
2026-10-28T02:03:18.766Z | 2026-10-28T02:03:18.766Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-117608 | 6.9 (v4.0) 6.1 (v3.1) | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 I… |
assimp |
assimp |
2026-10-28T02:03:17.365Z | 2026-10-28T02:03:17.365Z |
| cve-2026-117607 | 8.6 (v4.0) 7.2 (v3.1) | Xerte Online Toolkits through 3.15.5 RCE via Language … |
thexerteproject |
xerteonlinetoolkits |
2026-10-28T02:03:16.664Z | 2026-10-28T02:03:16.664Z |
| cve-2026-117606 | 5.3 (v4.0) 5.4 (v3.1) | NexoPOS through 6.3.0 Missing Authorization via Cash R… |
Blair2004 |
NexoPOS |
2026-10-28T02:03:15.947Z | 2026-10-28T02:03:15.947Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2015-20129 | 8.6 (v4.0) 8.8 (v3.1) | CrushFTP before 7.3.0 Cross-Site Request Forgery via /… |
CrushFTP |
CrushFTP |
2026-10-28T02:03:14.501Z | 2026-10-28T02:03:14.501Z |
| cve-2014-125138 | 8.7 (v4.0) 8.8 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.805Z | 2026-10-28T02:03:13.805Z |
| cve-2014-125137 | 7.1 (v4.0) 6.5 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.087Z | 2026-10-28T02:03:13.087Z |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000097 | Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X | 2021-10-29T15:22+09:00 | 2022-04-20T14:03+09:00 |
| jvndb-2021-000096 | Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent | 2021-10-29T15:11+09:00 | 2021-10-29T15:11+09:00 |
| jvndb-2021-000098 | ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS) | 2021-10-29T14:58+09:00 | 2021-10-29T14:58+09:00 |
| jvndb-2021-000095 | Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter | 2021-10-28T15:03+09:00 | 2021-10-28T15:03+09:00 |
| jvndb-2021-003385 | Trend Micro Endpoint security products for enterprises vulnerable to privilege escalation | 2021-10-26T12:35+09:00 | 2021-10-26T12:35+09:00 |
| jvndb-2021-000093 | Movable Type XMLRPC API vulnerable to OS command injection | 2021-10-20T17:38+09:00 | 2021-12-17T17:36+09:00 |
| jvndb-2021-003080 | OMRON CX-Supervisor vulnerable to out-of-bounds read | 2021-10-18T15:26+09:00 | 2021-11-01T15:37+09:00 |
| jvndb-2021-000091 | 128 Technology Session Smart Router vulnerable to authentication bypass | 2021-10-18T14:58+09:00 | 2021-10-18T14:58+09:00 |
| jvndb-2021-000090 | Apache HTTP Server vulnerable to directory traversal | 2021-10-11T18:07+09:00 | 2021-10-11T18:07+09:00 |
| jvndb-2021-000089 | Nike App fails to restrict custom URL schemes properly | 2021-10-08T14:32+09:00 | 2021-10-08T14:32+09:00 |
| jvndb-2021-002810 | Information Disclosure Vulnerability in Hitachi Tuning Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2021-10-05T15:37+09:00 | 2021-10-05T15:37+09:00 |
| jvndb-2021-002774 | Trend Micro ServerProtect family vulnerable to authentication bypass | 2021-10-01T14:42+09:00 | 2021-10-01T14:42+09:00 |
| jvndb-2021-000088 | Multiple vulnerabilities in Cybozu Remote Service | 2021-09-30T16:03+09:00 | 2024-04-08T18:09+09:00 |
| jvndb-2021-002752 | Trend Micro HouseCall for Home Networks vulnerable to privilege escalation | 2021-09-30T13:56+09:00 | 2021-09-30T13:56+09:00 |
| jvndb-2021-000085 | SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification | 2021-09-28T15:18+09:00 | 2021-09-28T15:18+09:00 |
| jvndb-2021-000086 | WordPress Plugin "OG Tags" vulnerable to cross-site request forgery | 2021-09-28T15:11+09:00 | 2021-09-28T15:11+09:00 |
| jvndb-2021-000084 | InBody App vulnerable to information disclosure | 2021-09-28T14:27+09:00 | 2021-09-28T14:27+09:00 |
| jvndb-2021-000081 | Multiple vulnerabilities in Sharp NEC Display Solutions' public displays | 2021-09-17T15:13+09:00 | 2025-12-10T10:24+09:00 |
| jvndb-2021-000083 | EC-CUBE plugin "Order Status Batch Change Plug-in" vulnerable to cross-site scripting | 2021-09-16T14:33+09:00 | 2021-09-16T14:33+09:00 |
| jvndb-2021-000082 | EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting | 2021-09-13T14:24+09:00 | 2021-09-13T14:24+09:00 |
| jvndb-2021-000074 | Multiple vulnerabilities in RevoWorks Browser | 2021-09-10T15:44+09:00 | 2021-09-10T15:44+09:00 |
| jvndb-2021-002342 | Trend Micro Security family vulnerable to improper handling of Directory Junction | 2021-09-03T16:10+09:00 | 2021-09-03T16:10+09:00 |
| jvndb-2021-000080 | baserCMS vulnerable to cross-site scripting | 2021-08-27T13:29+09:00 | 2021-08-27T13:29+09:00 |
| jvndb-2021-000079 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-08-25T14:54+09:00 | 2021-08-25T14:54+09:00 |
| jvndb-2021-000078 | The installers of multiple Sony products may insecurely load Dynamic Link Libraries | 2021-08-24T14:30+09:00 | 2021-08-24T14:30+09:00 |
| jvndb-2021-002282 | Multiple vulnerabilities in Navigate CMS | 2021-08-20T14:25+09:00 | 2021-08-20T14:25+09:00 |
| jvndb-2021-002279 | Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises | 2021-08-19T15:01+09:00 | 2021-08-19T15:01+09:00 |
| jvndb-2021-000077 | Huawei EchoLife HG8045Q vulnerable to OS command injection | 2021-08-17T14:24+09:00 | 2021-08-17T14:24+09:00 |
| jvndb-2021-002273 | Multiple vulnerabilities in D-Link router DSL-2750U | 2021-08-17T14:09+09:00 | 2021-08-17T14:09+09:00 |
| jvndb-2021-000076 | Plone vulnerable to open redirect | 2021-08-12T14:05+09:00 | 2021-08-12T14:05+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0387 | Multiples vulnérabilités dans les produits Netgate | 2026-04-02T00:00:00.000000 | 2026-04-02T00:00:00.000000 |
| certfr-2026-avi-0386 | Multiples vulnérabilités dans les produits Microsoft | 2026-04-01T00:00:00.000000 | 2026-04-01T00:00:00.000000 |
| certfr-2026-avi-0385 | Multiples vulnérabilités dans Google Chrome | 2026-04-01T00:00:00.000000 | 2026-04-01T00:00:00.000000 |
| certfr-2026-avi-0384 | Multiples vulnérabilités dans Joomla! | 2026-04-01T00:00:00.000000 | 2026-04-01T00:00:00.000000 |
| certfr-2026-avi-0383 | Multiples vulnérabilités dans Sonicwall Email Security | 2026-04-01T00:00:00.000000 | 2026-04-01T00:00:00.000000 |
| certfr-2026-avi-0382 | Multiples vulnérabilités dans les produits FoxIT | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0381 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0380 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0379 | Vulnérabilité dans Elastic OpenTelemetry Java | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0378 | Vulnérabilité dans Symantec Data Loss Prevention (DLP) | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0377 | Multiples vulnérabilités dans Papercut | 2026-03-31T00:00:00.000000 | 2026-03-31T00:00:00.000000 |
| certfr-2026-avi-0376 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-30T00:00:00.000000 | 2026-03-30T00:00:00.000000 |
| certfr-2026-avi-0375 | Multiples vulnérabilités dans Microsoft Edge | 2026-03-30T00:00:00.000000 | 2026-03-30T00:00:00.000000 |
| certfr-2026-avi-0374 | Vulnérabilité dans Docker Desktop | 2026-03-30T00:00:00.000000 | 2026-03-30T00:00:00.000000 |
| certfr-2026-avi-0373 | Vulnérabilité dans Roundcube | 2026-03-30T00:00:00.000000 | 2026-04-08T00:00:00.000000 |
| certfr-2026-avi-0372 | Multiples vulnérabilités dans les produits IBM | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0371 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0370 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0369 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0368 | Vulnérabilité dans les produits Microsoft | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0367 | Multiples vulnérabilités dans Zabbix | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0366 | Multiples vulnérabilités dans Traefik | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0365 | Multiples vulnérabilités dans Spring AI | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0364 | Multiples vulnérabilités dans les produits Siemens | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0363 | Multiples vulnérabilités dans les produits NetApp | 2026-03-27T00:00:00.000000 | 2026-03-27T00:00:00.000000 |
| certfr-2026-avi-0362 | Multiples vulnérabilités dans les produits Microsoft | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0361 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0360 | Multiples vulnérabilités dans ISC BIND | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0359 | Multiples vulnérabilités dans Grafana | 2026-03-26T00:00:00.000000 | 2026-03-26T00:00:00.000000 |
| certfr-2026-avi-0358 | Vulnérabilité dans Citrix XenServer | 2026-03-25T00:00:00.000000 | 2026-03-25T00:00:00.000000 |