Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-6732 | 6.5 (v3.1) | Libxml2: libxml2: denial of service via crafted xsd-va… |
Red Hat |
Red Hat Hardened Images |
2026-04-23T22:19:34.322Z | 2026-08-31T11:15:35.301Z |
| cve-2024-58379 | 6.9 (v4.0) 5.3 (v3.1) | nodemailer before 6.9.9 ReDoS via attachDataUrls parameter |
nodemailer |
nodemailer |
2026-08-31T08:46:24.228Z | 2026-08-31T11:02:23.257Z |
| cve-2026-82853 | 6.9 (v4.0) 4.9 (v3.1) | Nodemailer before 8.0.5 SMTP Command Injection via CRLF |
nodemailer |
nodemailer |
2026-08-31T08:46:27.706Z | 2026-08-31T11:00:28.826Z |
| cve-2026-82688 | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi… |
D-Link |
DNS-340L |
2026-08-31T11:00:10.874Z | 2026-08-31T11:00:10.874Z | |
| cve-2026-82858 | 9.3 (v4.0) 9.8 (v3.1) | @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance |
hulumi |
drift |
2026-08-31T08:46:31.177Z | 2026-08-31T10:59:29.949Z |
| cve-2026-82678 | diem-project diem Administrative Console actions.class… |
diem-project |
diem |
2026-08-31T10:15:09.519Z | 2026-08-31T10:57:35.371Z | |
| cve-2026-82863 | 8.7 (v4.0) 3.3 (v3.1) | @hulumi/baseline before 1.3.2 CloudTrail Selector Tamp… |
hulumi |
baseline |
2026-08-31T08:46:34.583Z | 2026-08-31T10:55:23.605Z |
| cve-2026-82881 | 5.1 (v4.0) 5.4 (v3.1) | Aix-DB through 1.2.4 Stored Cross-Site Scripting via M… |
apconw |
Aix-DB |
2026-08-31T10:51:06.572Z | 2026-08-31T10:51:06.572Z |
| cve-2026-82879 | 5.3 (v4.0) 6.3 (v3.1) | DataEase before 2.10.26 Access Control Bypass via Shar… |
dataease |
dataease |
2026-08-31T10:51:05.222Z | 2026-08-31T10:51:05.222Z |
| cve-2026-82877 | 7.1 (v4.0) 6.5 (v3.1) | ILIAS before 9.22 Arbitrary File Read via SOAP addFile |
ILIAS-eLearning e.V. |
ILIAS |
2026-08-31T10:51:03.778Z | 2026-08-31T10:51:03.778Z |
| cve-2026-82876 | 9.3 (v4.0) 8.2 (v3.1) | Phison PS3111-S11 Controller Firmware Signature Verifi… |
Phison Electronics Corporation |
PS3111-S11 Controller Firmware |
2026-08-31T10:51:03.110Z | 2026-08-31T10:51:03.110Z |
| cve-2026-82868 | 5.3 (v4.0) 6.1 (v3.1) | @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG |
pdfme |
schemas |
2026-08-31T08:46:38.149Z | 2026-08-31T10:50:12.466Z |
| cve-2026-82873 | 5.3 (v4.0) 5 (v3.1) | ToolJet through 3.0.0-ee-beta.2 Cross-workspace Schema… |
ToolJet |
ToolJet |
2026-08-31T08:46:41.702Z | 2026-08-31T10:30:36.611Z |
| cve-2026-82679 | diem-project diem Widget Editor dmWidgetContentBaseMed… |
diem-project |
diem |
2026-08-31T10:30:09.492Z | 2026-08-31T10:30:09.492Z | |
| cve-2026-49003 | 9.6 (v3.1) | Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V… |
ZTE |
ZXDU68 S202 V5.0 |
2026-08-31T09:43:24.266Z | 2026-08-31T10:30:01.649Z |
| cve-2026-82668 | klaussilveira GitList Git Command Line CommandLine.php… |
klaussilveira |
GitList |
2026-08-31T09:00:12.007Z | 2026-08-31T10:26:49.683Z | |
| cve-2026-14380 | N/A | DBI versions before 1.650 for Perl are vulnerable to c… |
|
|
2026-07-07T22:04:49.078Z | 2026-08-31T10:12:09.285Z |
| cve-2026-16106 | 4.9 (v3.1) | Keycloak-services: keycloak-services: incorrect author… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-17T16:43:16.461Z | 2026-08-31T10:04:15.325Z |
| cve-2026-16105 | 4.9 (v3.1) | Keycloak-services: keycloak-services: missing per-role… |
Red Hat |
Red Hat Build of Keycloak |
2026-07-31T07:03:36.107Z | 2026-08-31T10:04:11.007Z |
| cve-2026-14613 | 4.3 (v3.1) | Keycloak-services: keycloak-services: keycloak: fgap v… |
Red Hat |
Red Hat build of Keycloak 26.6 |
2026-07-03T15:16:44.640Z | 2026-08-31T09:46:25.656Z |
| cve-2026-82671 | IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys… |
IObit |
Unlocker |
2026-08-31T09:45:08.230Z | 2026-08-31T09:45:08.230Z | |
| cve-2026-15573 | 8.1 (v3.1) | Keycloak-services: keycloak-services: authorization by… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-08-05T13:50:03.530Z | 2026-08-31T09:43:55.904Z |
| cve-2026-82669 | klaussilveira GitList XML Parsing CommandLine.php Simp… |
klaussilveira |
GitList |
2026-08-31T09:15:10.349Z | 2026-08-31T09:15:10.349Z | |
| cve-2026-12965 | N/A | Super Store Finder < 7.11 - Unauthenticated SQL Inject… |
Unknown |
Super Store Finder WordPress |
2026-08-03T06:00:11.747Z | 2026-08-31T09:12:39.093Z |
| cve-2026-16739 | N/A | Epeken All Kurir <= 2.1.4 - Unauthenticated Order Paym… |
Unknown |
Epeken All Kurir for Woocommerce |
2026-08-14T06:00:11.497Z | 2026-08-31T09:08:34.173Z |
| cve-2026-81624 | 7.5 (v3.1) | Undertow-core: undertow: websocketcontainer defaults f… |
Red Hat |
Red Hat build of Apache Camel for Spring Boot 4 |
2026-08-31T08:47:51.752Z | 2026-08-31T08:47:51.752Z |
| cve-2026-82874 | 2.4 (v4.0) 9.9 (v3.1) | ToolJet before v3.16.208 Cross-Tenant Authorization By… |
ToolJet |
ToolJet |
2026-08-31T08:46:42.384Z | 2026-08-31T08:46:42.384Z |
| cve-2026-82872 | 7.1 (v4.0) 9.1 (v3.1) | ToolJet before v3.16.208 Cross-Workspace Authorization… |
ToolJet |
ToolJet |
2026-08-31T08:46:40.926Z | 2026-08-31T08:46:40.926Z |
| cve-2026-82871 | 8.2 (v4.0) 7.7 (v3.1) | ToolJet before v3.16.208 Cross-Organization Data Read … |
ToolJet |
ToolJet |
2026-08-31T08:46:40.261Z | 2026-08-31T08:46:40.261Z |
| cve-2026-82869 | 8.2 (v4.0) 7.7 (v3.1) | ToolJet Database before v3.16.44 Privilege Escalation … |
ToolJet |
ToolJet |
2026-08-31T08:46:38.842Z | 2026-08-31T08:46:38.842Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000008 | AWMS Mobile App vulnerable to improper server certificate verification | 2020-01-31T12:30+09:00 | 2021-04-12T13:30+09:00 |
| jvndb-2019-000052 | ApeosWare Management Suite and ApeosWare Management Suite 2 contain open redirect vulnerability | 2019-08-15T14:29+09:00 | 2021-04-12T13:30+09:00 |
| jvndb-2017-000219 | Multiple Fuji Xerox products may insecurely load Dynamic Link Libraries | 2017-08-31T16:35+09:00 | 2021-04-12T13:30+09:00 |
| jvndb-2021-000028 | Multiple vulnerabilities in multiple Aterm products | 2021-04-09T17:16+09:00 | 2021-04-09T17:16+09:00 |
| jvndb-2021-000030 | Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP | 2021-04-09T16:42+09:00 | 2021-04-09T16:42+09:00 |
| jvndb-2021-000029 | Archive collectively operation utility vulnerable to directory traversal | 2021-04-01T14:44+09:00 | 2021-04-01T14:44+09:00 |
| jvndb-2021-000027 | Multiple vulnerabilities in baserCMS | 2021-03-26T14:25+09:00 | 2021-03-26T14:25+09:00 |
| jvndb-2021-000908 | rNote vulnerable to cross-site scripting | 2021-03-25T18:14+09:00 | 2021-03-25T18:14+09:00 |
| jvndb-2021-000907 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:12+09:00 | 2021-03-25T18:12+09:00 |
| jvndb-2021-000906 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:06+09:00 | 2021-03-25T18:06+09:00 |
| jvndb-2021-000905 | Yomi-Search vulnerable to cross-site scripting | 2021-03-25T18:01+09:00 | 2021-03-25T18:01+09:00 |
| jvndb-2021-000904 | Click Ranker vulnerable to cross-site scripting | 2021-03-25T17:52+09:00 | 2021-03-25T17:52+09:00 |
| jvndb-2021-000903 | Kagemai vulnerable to cross-site request forgery | 2021-03-25T17:50+09:00 | 2021-03-25T17:50+09:00 |
| jvndb-2021-000902 | Kagemai vulnerable to cross-site scripting | 2021-03-25T17:46+09:00 | 2021-03-25T17:46+09:00 |
| jvndb-2021-000901 | Kagemai vulnerable to cross-site scripting | 2021-03-25T17:43+09:00 | 2021-03-25T17:43+09:00 |
| jvndb-2021-000900 | MagazinegerZ vulnerable to cross-site scripting | 2021-03-25T17:32+09:00 | 2021-03-25T17:32+09:00 |
| jvndb-2021-000023 | UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS) | 2021-03-22T14:57+09:00 | 2021-03-22T14:57+09:00 |
| jvndb-2021-000025 | WordPress plugin "Paid Memberships Pro" vulnerable to SQL injection | 2021-03-17T16:24+09:00 | 2021-03-17T16:24+09:00 |
| jvndb-2021-000021 | M-System DL8 contains multiple vulnerabilities | 2021-03-12T15:59+09:00 | 2021-03-12T15:59+09:00 |
| jvndb-2021-000020 | Installer of MagicConnect Client program may insecurely load Dynamic Link Libraries | 2021-03-11T14:53+09:00 | 2021-03-11T14:53+09:00 |
| jvndb-2021-000019 | Multiple cross-site scripting vulnerabilities in GROWI | 2021-03-10T16:11+09:00 | 2021-03-10T16:11+09:00 |
| jvndb-2021-001122 | Trend Micro Security (Consumer) vulnerable to code injection | 2021-03-08T17:26+09:00 | 2021-03-08T17:26+09:00 |
| jvndb-2021-000015 | FileZen vulnerable to OS command injection | 2021-02-16T15:07+09:00 | 2021-03-05T17:31+09:00 |
| jvndb-2021-000016 | Multiple vulnerabilities in SolarView Compact | 2021-02-19T16:44+09:00 | 2021-02-25T15:31+09:00 |
| jvndb-2021-000017 | Multiple cross-site scripting vulnerabilities in Movable Type | 2021-02-24T15:20+09:00 | 2021-02-24T15:20+09:00 |
| jvndb-2021-001026 | Multiple Vulnerabilities in JP1/Automatic Operation | 2021-02-16T17:23+09:00 | 2021-02-16T17:23+09:00 |
| jvndb-2021-000014 | Calsos CSDJ fails to restrict access permissions | 2021-02-15T15:52+09:00 | 2021-02-15T15:52+09:00 |
| jvndb-2021-000013 | Wekan vulnerable to cross-site scripting | 2021-02-10T14:01+09:00 | 2021-02-10T14:01+09:00 |
| jvndb-2021-001022 | Cross-site Scripting Vulnerability in Hitachi Application Server Help | 2021-02-09T15:08+09:00 | 2021-02-09T15:08+09:00 |
| jvndb-2021-001021 | Improper access control vulnerability in JP1/IT Desktop Management 2 - Manager and JP1/NETM/Asset Information Manager | 2021-02-09T15:08+09:00 | 2021-02-09T15:08+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0020 | Multiples vulnérabilités dans les produits IBM | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0019 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0018 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0017 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0016 | Vulnérabilité dans les produits Moxa | 2026-01-09T00:00:00.000000 | 2026-01-09T00:00:00.000000 |
| certfr-2026-avi-0015 | Multiples vulnérabilités dans les produits Centreon | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0014 | Multiples vulnérabilités dans GitLab | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0013 | Vulnérabilité dans Tenable Nessus Agent | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0012 | Multiples vulnérabilités dans Trend Micro Apex Central | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0011 | Vulnérabilité dans Google Android | 2026-01-08T00:00:00.000000 | 2026-01-08T00:00:00.000000 |
| certfr-2026-avi-0010 | Multiples vulnérabilités dans Curl | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0009 | Vulnérabilité dans Google Chrome | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0008 | Multiples vulnérabilités dans Joomla! | 2026-01-07T00:00:00.000000 | 2026-01-07T00:00:00.000000 |
| certfr-2026-avi-0007 | Vulnérabilité dans Stormshield Network Security | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0006 | Multiples vulnérabilités dans Veeam Backup & Replication | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0005 | Multiples vulnérabilités dans Centreon Open Tickets | 2026-01-06T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2025-avi-1097 | Vulnérabilité dans les produits Mitel | 2025-12-11T00:00:00.000000 | 2026-01-06T00:00:00.000000 |
| certfr-2026-avi-0004 | Vulnérabilité dans MariaDB | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0003 | Multiples vulnérabilités dans les produits Qnap | 2026-01-05T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2025-avi-1111 | Multiples vulnérabilités dans Roundcube | 2025-12-15T00:00:00.000000 | 2026-01-05T00:00:00.000000 |
| certfr-2026-avi-0002 | Multiples vulnérabilités dans les produits IBM | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| certfr-2026-avi-0001 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-01-02T00:00:00.000000 | 2026-01-02T00:00:00.000000 |
| certfr-2025-avi-1142 | Multiples vulnérabilités dans Moxa NPort | 2025-12-31T00:00:00.000000 | 2025-12-31T00:00:00.000000 |
| certfr-2025-avi-1141 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1140 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1139 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1138 | Multiples vulnérabilités dans VMware Tanzu Platform | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1137 | Multiples vulnérabilités dans les produits IBM | 2025-12-26T00:00:00.000000 | 2025-12-26T00:00:00.000000 |
| certfr-2025-avi-1076 | Multiples vulnérabilités dans MISP | 2025-12-08T00:00:00.000000 | 2025-12-24T00:00:00.000000 |
| certfr-2025-avi-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |