Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81026 | N/A | MasterStudy LMS < 3.7.40 - Unauthenticated Payment Byp… |
Unknown |
MasterStudy LMS WordPress Plugin |
2026-08-29T06:00:23.592Z | 2026-08-30T00:56:50.594Z |
| cve-2026-80488 | N/A | WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSE… |
Unknown |
WP Ultimate CSV Importer |
2026-08-29T06:00:23.413Z | 2026-08-30T00:56:50.749Z |
| cve-2026-80311 | N/A | Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Cu… |
Unknown |
Stripe Payment Forms by WP Full Pay |
2026-08-29T06:00:23.240Z | 2026-08-30T00:56:50.898Z |
| cve-2026-77786 | N/A | Rank Math SEO < 1.0.277 - Editor+ Core Settings Modifi… |
Unknown |
Rank Math SEO |
2026-08-29T06:00:22.804Z | 2026-08-30T00:56:51.060Z |
| cve-2026-77704 | N/A | Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment S… |
Unknown |
Booking for Appointments and Events Calendar |
2026-08-29T06:00:22.631Z | 2026-08-30T00:56:51.214Z |
| cve-2026-77012 | N/A | Icollect <= 1.0.0 - Unauthenticated Arbitrary File Rea… |
Unknown |
爱采集数据采集和发布插件 |
2026-08-29T06:00:22.458Z | 2026-08-30T00:56:51.369Z |
| cve-2026-77010 | N/A | HEL Online Classroom: AI-powered Online Classrooms <= … |
Unknown |
HEL Online Classroom: AI-powered Online Classrooms |
2026-08-29T06:00:22.286Z | 2026-08-30T00:56:51.517Z |
| cve-2026-77008 | N/A | HEL Online Classroom: AI-powered Online Classrooms <= … |
Unknown |
HEL Online Classroom: AI-powered Online Classrooms |
2026-08-29T06:00:22.114Z | 2026-08-30T00:56:51.674Z |
| cve-2026-77007 | N/A | HEL Online Classroom: AI-powered Online Classrooms <= … |
Unknown |
HEL Online Classroom: AI-powered Online Classrooms |
2026-08-29T06:00:21.937Z | 2026-08-30T00:56:51.821Z |
| cve-2026-76586 | N/A | BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking P… |
Unknown |
Appointment Booking Calendar Plugin and Scheduling Plugin |
2026-08-29T06:00:21.763Z | 2026-08-30T00:56:51.964Z |
| cve-2026-76548 | N/A | Profile Builder < 4.0.1 - Unauthenticated Unpublished … |
Unknown |
User Profile Builder |
2026-08-29T06:00:20.799Z | 2026-08-30T00:56:52.128Z |
| cve-2026-76547 | N/A | Profile Builder < 4.0.1 - Admin+ PHP Object Injection … |
Unknown |
User Profile Builder |
2026-08-29T06:00:20.618Z | 2026-08-30T00:56:52.277Z |
| cve-2026-76546 | N/A | Profile Builder < 4.0.1 - Contributor+ Stored XSS via … |
Unknown |
User Profile Builder |
2026-08-29T06:00:20.446Z | 2026-08-30T00:56:52.426Z |
| cve-2026-19430 | N/A | CatFolders Document Gallery Pro < 2.0.7 - Unauthentica… |
Unknown |
Catfolders Document Gallery Pro |
2026-08-29T06:00:20.269Z | 2026-08-30T00:56:52.572Z |
| cve-2026-18234 | N/A | MStore API < 4.21.1 - Subscriber+ Arbitrary Order Paym… |
Unknown |
MStore API |
2026-08-29T06:00:20.085Z | 2026-08-30T00:56:52.716Z |
| cve-2026-18233 | N/A | MStore API < 4.21.1 - Subscriber+ Arbitrary Order Completion |
Unknown |
MStore API |
2026-08-29T06:00:19.902Z | 2026-08-30T00:56:52.868Z |
| cve-2026-17522 | N/A | Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF |
Unknown |
Newsletters |
2026-08-29T06:00:19.726Z | 2026-08-30T00:56:53.030Z |
| cve-2026-17520 | N/A | Newsletters < 4.17 - Unauthenticated API Access via Pr… |
Unknown |
Newsletters |
2026-08-29T06:00:19.539Z | 2026-08-30T00:56:53.189Z |
| cve-2026-16947 | N/A | Total Processing Card Payments for WooCommerce <= 7.3 … |
Unknown |
Total processing card payments for WooCommerce |
2026-08-29T06:00:19.359Z | 2026-08-30T00:56:53.342Z |
| cve-2026-16600 | N/A | SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Reques… |
Unknown |
SmartAIPress |
2026-08-29T06:00:19.184Z | 2026-08-30T00:56:53.491Z |
| cve-2026-16259 | N/A | Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Es… |
Unknown |
Uix UserCenter |
2026-08-29T06:00:18.968Z | 2026-08-30T00:56:53.643Z |
| cve-2026-16061 | N/A | Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom… |
Unknown |
Rest Routes |
2026-08-29T06:00:18.773Z | 2026-08-30T00:56:53.798Z |
| cve-2026-10522 | N/A | Simple User Registration <= 6.9 - Unauthenticated Priv… |
Unknown |
MemberHero |
2026-08-29T06:00:18.586Z | 2026-08-29T06:00:18.586Z |
| cve-2026-41012 | 7.7 (v3.1) | BOSH vSphere CPI Improper Cert Validation |
Cloud Foundry |
bosh-vsphere-cpi-release |
2026-08-29T02:15:11.400Z | 2026-08-29T02:15:11.400Z |
| cve-2026-55860 | MariaDB Connector/R2DBC: Cleartext password disclosure… |
mariadb-corporation |
mariadb-connector-r2dbc |
2026-08-28T22:50:30.896Z | 2026-08-28T22:50:30.896Z | |
| cve-2026-55859 | MariaDB Connector/R2DBC: Inappropriate Encoding for Ou… |
mariadb-corporation |
mariadb-connector-r2dbc |
2026-08-28T22:48:41.592Z | 2026-08-28T22:48:41.592Z | |
| cve-2026-55858 | MariaDB Connector/J: Inappropriate Encoding for Output… |
mariadb-corporation |
mariadb-connector-j |
2026-08-28T22:46:40.114Z | 2026-08-28T22:46:40.114Z | |
| cve-2026-55857 | MariaDB Connector/J: Cleartext Transmission of Sensiti… |
mariadb-corporation |
mariadb-connector-j |
2026-08-28T22:44:24.351Z | 2026-08-28T22:44:24.351Z | |
| cve-2026-55856 | MariaDB Connector/J: Cleartext password disclosure to … |
mariadb-corporation |
mariadb-connector-j |
2026-08-28T22:41:14.376Z | 2026-08-28T22:41:14.376Z | |
| cve-2026-55848 | mapfish-print: XXE on MapFish Print allows reading arb… |
mapfish |
mapfish-print |
2026-08-28T22:31:26.705Z | 2026-08-28T22:31:26.705Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2026-018943 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2026-06-10T11:16+09:00 | 2026-06-10T11:16+09:00 |
| jvndb-2026-000083 | CamView installer insecurely loads Dynamic Link Libraries | 2026-06-09T14:07+09:00 | 2026-06-09T14:07+09:00 |
| jvndb-2026-000082 | Multiple TP-Link products vulnerable to cleartext transmission of sensitive information | 2026-06-05T14:05+09:00 | 2026-06-05T14:05+09:00 |
| jvndb-2026-018098 | Security information for Hitachi Disk Array Systems | 2026-06-04T17:26+09:00 | 2026-06-04T17:26+09:00 |
| jvndb-2026-017436 | TP-Link Archer BE450 and BE7200 vulnerable to OS command injection | 2026-06-03T17:08+09:00 | 2026-06-03T17:08+09:00 |
| jvndb-2026-000081 | WordPress Plugin "Zoho Mail for WordPress" vulnerable to cross-site request forgery | 2026-06-03T14:10+09:00 | 2026-06-03T14:10+09:00 |
| jvndb-2026-017322 | Link following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOS | 2026-06-01T17:37+09:00 | 2026-06-01T17:37+09:00 |
| jvndb-2026-000077 | Multiple vulnerabilities in ServerView Agents for Windows | 2026-06-01T17:34+09:00 | 2026-06-01T17:34+09:00 |
| jvndb-2026-000080 | Jupyter Server vulnerable to open redirect | 2026-05-28T13:42+09:00 | 2026-05-28T13:42+09:00 |
| jvndb-2026-016983 | Multiple Vulnerabilities in Cosminexus | 2026-05-27T15:09+09:00 | 2026-05-27T15:09+09:00 |
| jvndb-2026-016982 | Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2026-05-27T15:09+09:00 | 2026-05-27T15:09+09:00 |
| jvndb-2026-016981 | Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint | 2026-05-27T15:09+09:00 | 2026-05-27T15:09+09:00 |
| jvndb-2026-000079 | NEC Aterm series vulnerable to OS command injection (NV26-003) | 2026-05-25T15:35+09:00 | 2026-05-25T18:14+09:00 |
| jvndb-2026-000078 | NEC Aterm series vulnerable to cross-site scripting (NV26-002) | 2026-05-25T15:35+09:00 | 2026-05-25T18:06+09:00 |
| jvndb-2026-016976 | Security information for Hitachi Disk Array Systems | 2026-05-25T11:39+09:00 | 2026-05-25T11:39+09:00 |
| jvndb-2026-016802 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026) | 2026-05-22T16:44+09:00 | 2026-05-25T15:38+09:00 |
| jvndb-2026-016626 | Android App "RoboForm Password Manager" insufficient validation of Android intents | 2026-05-21T17:22+09:00 | 2026-05-21T17:22+09:00 |
| jvndb-2026-000076 | Movable Type vulnerable to missing authorization | 2026-05-20T15:21+09:00 | 2026-05-20T15:21+09:00 |
| jvndb-2026-000054 | Multiple vulnerabilities in "Musetheque V4 Information Disclosure for IPKNOWLEDGE" | 2026-05-15T13:57+09:00 | 2026-05-15T13:57+09:00 |
| jvndb-2026-000074 | WPS Office improper access restriction to its named pipe | 2026-05-14T16:16+09:00 | 2026-05-14T16:16+09:00 |
| jvndb-2026-000075 | Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries | 2026-05-13T15:41+09:00 | 2026-05-13T15:41+09:00 |
| jvndb-2026-000072 | GUARDIANWALL MailSuite vulnerable to stack-based buffer overflow | 2026-05-13T15:41+09:00 | 2026-05-15T15:37+09:00 |
| jvndb-2026-000069 | Android App "Anshin Filter for au" vulnerable to cleartext transmission of sensitive information | 2026-05-13T15:41+09:00 | 2026-05-13T15:41+09:00 |
| jvndb-2026-000073 | Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026) | 2026-05-12T15:16+09:00 | 2026-07-29T15:19+09:00 |
| jvndb-2026-015132 | Canon Production Printers and Office Multifunction Printers vulnerable to information disclosure | 2026-05-12T14:04+09:00 | 2026-05-12T14:04+09:00 |
| jvndb-2026-000071 | GROWI vulnerable to path traversal | 2026-05-11T18:20+09:00 | 2026-05-11T18:20+09:00 |
| jvndb-2026-000070 | libXpm vulnerable to out-of-bounds read | 2026-05-11T18:20+09:00 | 2026-05-11T18:20+09:00 |
| jvndb-2026-000068 | Lhaz and Lhaz+ vulnerable to path traversal | 2026-05-11T18:20+09:00 | 2026-05-11T18:20+09:00 |
| jvndb-2026-000067 | "Kura Sushi Official App" vulnerable to improper certificate validation | 2026-05-11T18:20+09:00 | 2026-05-11T18:20+09:00 |
| jvndb-2026-000066 | Open redirect vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2026-04-30T17:02+09:00 | 2026-04-30T17:02+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-1035 | Multiples vulnérabilités dans les produits Microsoft | 2026-08-17T00:00:00.000000 | 2026-08-17T00:00:00.000000 |
| certfr-2026-avi-1034 | Multiples vulnérabilités dans Microsoft Edge | 2026-08-17T00:00:00.000000 | 2026-08-17T00:00:00.000000 |
| certfr-2026-avi-1033 | Vulnérabilité dans SPIP | 2026-08-17T00:00:00.000000 | 2026-08-24T00:00:00.000000 |
| certfr-2026-avi-1032 | Multiples vulnérabilités dans les produits IBM | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1031 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1030 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1029 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1028 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1027 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1026 | Vulnérabilité dans OpenSSL | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1025 | Vulnérabilité dans les produits Sophos | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1024 | Multiples vulnérabilités dans PostgreSQL | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1023 | Multiples vulnérabilités dans Tenable Security Center | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1022 | Multiples vulnérabilités dans les produits Netgate | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1021 | Multiples vulnérabilités dans Stormshield Network Security | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1020 | Multiples vulnérabilités dans Elastic Kibana | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1019 | Multiples vulnérabilités dans les produits Mattermost | 2026-08-14T00:00:00.000000 | 2026-08-14T00:00:00.000000 |
| certfr-2026-avi-1018 | Vulnérabilité dans WordPress | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1017 | Multiples vulnérabilités dans les produits Adobe | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1016 | Vulnérabilité dans les produits Foxit | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1015 | Multiples vulnérabilités dans les produits Fortinet | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1014 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1013 | Multiples vulnérabilités dans GitLab | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1012 | Multiples vulnérabilités dans Wireshark | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1011 | Multiples vulnérabilités dans Progress MOVEit WAF | 2026-08-13T00:00:00.000000 | 2026-08-13T00:00:00.000000 |
| certfr-2026-avi-1010 | Vulnérabilité dans les produits Cisco | 2026-08-12T00:00:00.000000 | 2026-08-12T00:00:00.000000 |
| certfr-2026-avi-1009 | Multiples vulnérabilités dans les produits Siemens | 2026-08-12T00:00:00.000000 | 2026-08-12T00:00:00.000000 |
| certfr-2026-avi-1008 | Multiples vulnérabilités dans Google Chrome | 2026-08-12T00:00:00.000000 | 2026-08-12T00:00:00.000000 |
| certfr-2026-avi-1007 | Multiples vulnérabilités dans les produits Ivanti | 2026-08-12T00:00:00.000000 | 2026-08-12T00:00:00.000000 |
| certfr-2026-avi-1006 | Multiples vulnérabilités dans les produits SonicWall | 2026-08-12T00:00:00.000000 | 2026-08-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-ale-005 | [MàJ] Vulnérabilité dans Microsoft Windows | 2022-05-31T00:00:00.000000 | 2022-09-16T00:00:00.000000 |
| certfr-2022-ale-004 | Vulnérabilité dans F5 BIG-IP | 2022-05-11T00:00:00.000000 | 2022-09-16T00:00:00.000000 |
| certfr-2022-ale-003 | [MàJ] Vulnérabilité dans l'implémentation du protocole RPC par Microsoft | 2022-04-13T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-ale-002 | Vulnérabilité dans VMware Spring Cloud Gateway | 2022-03-03T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-ale-001 | [MaJ] Vulnérabilité dans Microsoft Windows | 2022-01-12T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-022 | [MaJ] Vulnérabilité dans Apache Log4j | 2021-12-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-021 | Vulnérabilité dans Microsoft Exchange | 2021-11-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-020 | [Maj] Multiples vulnérabilités dans Microsoft Azure Open Management Infrastructure | 2021-09-17T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-019 | [MaJ] Vulnérabilité dans Microsoft Windows | 2021-09-08T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-018 | Vulnérabilité dans Atlassian Confluence Server et Data Center | 2021-09-06T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-017 | Multiples vulnérabilités dans Microsoft Exchange | 2021-08-27T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-016 | Vulnérabilité dans SonicWall | 2021-07-15T00:00:00.000000 | 2021-08-19T00:00:00.000000 |
| certfr-2021-ale-015 | Multiples vulnérabilités dans SolarWinds Serv-U | 2021-07-13T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-014 | [MaJ] Multiples vulnérabilités dans Microsoft Windows | 2021-07-02T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-013 | [MaJ] Vulnérabilité dans Microsoft Windows | 2021-06-30T00:00:00.000000 | 2021-07-02T00:00:00.000000 |
| certfr-2021-ale-012 | Multiples vulnérabilités dans Microsoft Windows | 2021-06-09T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-011 | Vulnérabilité dans VMware vCenter Server | 2021-06-07T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-010 | Vulnérabilité dans Adobe Acrobat et Acrobat Reader | 2021-05-12T00:00:00.000000 | 2021-06-29T00:00:00.000000 |
| certfr-2021-ale-009 | [MàJ] Vulnérabilité dans Microsoft Windows | 2021-05-12T00:00:00.000000 | 2021-06-10T00:00:00.000000 |
| certfr-2021-ale-008 | Multiples vulnérabilités dans Exim | 2021-05-05T00:00:00.000000 | 2021-06-10T00:00:00.000000 |
| certfr-2021-ale-007 | [MàJ] Vulnérabilité dans Pulse Connect Secure | 2021-04-20T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-ale-006 | [MàJ] Vulnérabilité dans F5 BIG-IP | 2021-03-22T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2021-ale-005 | Multiples vulnérabilités dans Microsoft DNS server | 2021-03-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| certfr-2021-ale-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2021-ale-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2020-ale-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2020-ale-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| certfr-2020-ale-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |