Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-117514 | oretnom23 php-travel-agency-system Admin Record Pages … |
oretnom23 |
php-travel-agency-system |
2026-10-27T17:00:16.415Z | 2026-10-27T17:00:16.415Z | |
| cve-2026-57189 | Asterisk: Possible RED T.140 Generation Accumulation O… |
asterisk |
asterisk |
2026-10-27T16:59:46.057Z | 2026-10-28T16:14:48.359Z | |
| cve-2026-57201 | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via… |
asterisk |
asterisk |
2026-10-27T16:56:37.203Z | 2026-10-27T16:56:37.203Z | |
| cve-2026-114598 | 7.5 (v3.1) 8.7 (v4.0) | Access of resource using incompatible type ('type conf… |
The EPICS Community |
EPICS Base |
2026-10-27T16:53:28.775Z | 2026-10-27T16:53:28.775Z |
| cve-2026-108015 | 9.1 (v4.0) | eMudhra Compromised Certificate vulnerability impacts … |
HCLSoftware |
Notes Client |
2026-10-27T16:53:19.893Z | 2026-10-27T20:29:23.260Z |
| cve-2026-57194 | Asterisk: chan_unistim DIALPAGE digit handling can ove… |
asterisk |
asterisk |
2026-10-27T16:52:47.225Z | 2026-10-27T16:52:47.225Z | |
| cve-2026-114597 | 7.5 (v3.1) 8.7 (v4.0) | Improper handling of length parameter inconsistency in… |
The EPICS Community |
EPICS Base |
2026-10-27T16:51:59.240Z | 2026-10-27T16:51:59.240Z |
| cve-2026-114596 | 8.2 (v3.1) 8.8 (v4.0) | Integer overflow or wraparound in EPICS Base |
The EPICS Community |
EPICS Base |
2026-10-27T16:50:09.514Z | 2026-10-27T16:50:09.514Z |
| cve-2026-114595 | 9.8 (v3.1) 9.3 (v4.0) | Integer overflow or wraparound in EPICS Base |
The EPICS Community |
EPICS Base |
2026-10-27T16:48:37.138Z | 2026-10-27T16:48:37.138Z |
| cve-2026-57198 | Asterisk: Possible RED T.140 Heap Buffer Overflow |
asterisk |
asterisk |
2026-10-27T16:47:20.717Z | 2026-10-27T16:47:20.717Z | |
| cve-2026-116675 | TinyMCE Cross-Site Scripting (XSS) vulnerability using… |
tinymce |
tinymce |
2026-10-27T16:47:01.183Z | 2026-10-28T16:15:12.999Z | |
| cve-2026-117513 | oretnom23 php-travel-agency-system Admin Search Pages … |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:45:10.269Z | 2026-10-27T16:45:10.269Z | |
| cve-2026-116674 | systeminformation: Prototype pollution in `networkStat… |
sebhildebrandt |
systeminformation |
2026-10-27T16:40:46.246Z | 2026-10-27T16:40:46.246Z | |
| cve-2026-57185 | Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser |
asterisk |
asterisk |
2026-10-27T16:40:27.615Z | 2026-10-27T16:40:27.615Z | |
| cve-2026-48360 | 9.6 (v3.1) | Adobe Connect | Improper Control of Generation of Code… |
Adobe |
Adobe Connect Desktop App |
2026-10-27T16:38:56.785Z | 2026-10-29T03:56:34.974Z |
| cve-2026-116673 | systeminformation: Path traversal in Linux networkStat… |
sebhildebrandt |
systeminformation |
2026-10-27T16:38:15.558Z | 2026-10-28T16:15:47.864Z | |
| cve-2026-108014 | 9.1 (v4.0) | eMudhra Compromised Certificate vulnerability impacts … |
HCLSoftware |
Domino Server |
2026-10-27T16:36:57.891Z | 2026-10-27T20:41:13.359Z |
| cve-2026-57197 | Asterisk: Heap Buffer Overflow in OGG/Speex File Playb… |
asterisk |
asterisk |
2026-10-27T16:35:59.337Z | 2026-10-27T16:35:59.337Z | |
| cve-2026-109090 | 7.5 (v3.1) | libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow |
x.org |
libXi |
2026-10-27T16:32:56.867Z | 2026-10-27T16:32:56.867Z |
| cve-2026-116672 | Authlib RFC 7592 examples omit registration-access-tok… |
authlib |
authlib |
2026-10-27T16:31:48.429Z | 2026-10-27T16:31:48.429Z | |
| cve-2026-117512 | oretnom23 php-travel-agency-system employee_insert.php… |
oretnom23 |
php-travel-agency-system |
2026-10-27T16:30:18.263Z | 2026-10-28T16:15:55.262Z | |
| cve-2026-109088 | 6.5 (v3.1) | libXtst RECORD EnableContext Reply Endless Loop |
X.org |
libXtst |
2026-10-27T16:26:20.597Z | 2026-10-27T16:26:20.597Z |
| cve-2026-48380 | 5.5 (v3.1) | Substance3D - Painter | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.580Z | 2026-10-28T16:16:04.990Z |
| cve-2026-48379 | 7.8 (v3.1) | Substance3D - Painter | Stack-based Buffer Overflow (C… |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.363Z | 2026-10-29T10:45:45.823Z |
| cve-2026-104349 | 7.3 (v3.1) | Creative Cloud Desktop | Uncontrolled Search Path Elem… |
Adobe |
Creative Cloud Desktop Application |
2026-10-27T16:21:54.690Z | 2026-10-29T10:45:45.965Z |
| cve-2025-64394 | A vulnerability allowing a low-privileged local u… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.979Z | 2026-10-27T16:16:58.979Z | |
| cve-2026-108141 | A vulnerability allowing an authenticated user wi… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.971Z | 2026-10-27T16:16:58.971Z | |
| cve-2026-106078 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup for Microsoft 365 |
2026-10-27T16:16:58.925Z | 2026-10-27T16:16:58.925Z | |
| cve-2026-107671 | A vulnerability allowing an attacker with valid A… |
Veeam |
ONE |
2026-10-27T16:16:58.921Z | 2026-10-27T16:16:58.921Z | |
| cve-2026-108142 | A vulnerability allowing an unauthenticated attac… |
Veeam |
Backup and Replication |
2026-10-27T16:16:58.907Z | 2026-10-27T16:16:58.907Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2020-000028 | Sales Force Assistant vulnerable to cross-site scripting | 2020-04-28T15:49+09:00 | 2020-04-28T15:49+09:00 |
| jvndb-2020-000027 | Cybozu Garoon contains multiple vulnerabilities | 2020-04-28T14:48+09:00 | 2020-04-28T14:48+09:00 |
| jvndb-2020-003896 | Directory Permission Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer | 2020-04-28T12:21+09:00 | 2020-04-28T12:21+09:00 |
| jvndb-2020-000026 | Multiple SHARP Android devices vulnerable to information disclosure | 2020-04-24T15:32+09:00 | 2020-04-24T15:32+09:00 |
| jvndb-2020-000025 | Toshiba Electronic Devices & Storage software registers unquoted service paths | 2020-04-20T17:13+09:00 | 2023-11-08T16:44+09:00 |
| jvndb-2020-000022 | Multiple vulnerabilities in EasyBlocks IPv6 | 2020-04-08T16:12+09:00 | 2020-04-08T16:12+09:00 |
| jvndb-2020-000024 | Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads | 2020-04-07T14:49+09:00 | 2020-04-07T14:49+09:00 |
| jvndb-2020-000021 | Multiple Yamaha network devices vulnerable to denial-of-service (DoS) | 2020-03-31T17:44+09:00 | 2020-04-01T18:38+09:00 |
| jvndb-2020-002958 | Denial-of-service (DoS) vulnerability in Mitsubishi Electric MELSOFT transmission port | 2020-03-31T13:37+09:00 | 2020-04-01T14:45+09:00 |
| jvndb-2020-000907 | WL-Enq (WEB Enquete) vulnerable to OS command injection | 2020-03-25T09:50+09:00 | 2020-03-25T09:50+09:00 |
| jvndb-2020-000906 | WL-Enq (WEB Enquete) vulnerable to cross-site scripting | 2020-03-24T18:29+09:00 | 2023-10-30T17:52+09:00 |
| jvndb-2020-000908 | Keijiban Tsumiki vulnerable to OS command injection | 2020-03-24T18:14+09:00 | 2020-03-24T18:14+09:00 |
| jvndb-2020-000900 | mailform vulnerable to cross-site scripting | 2020-03-24T18:05+09:00 | 2020-03-24T18:05+09:00 |
| jvndb-2020-000901 | mailform vulnerable to PHP code execution | 2020-03-24T17:59+09:00 | 2020-03-24T17:59+09:00 |
| jvndb-2020-000902 | Multiple vulnerabilities in Shihonkanri Plus GOOUT | 2020-03-24T17:53+09:00 | 2020-03-24T17:53+09:00 |
| jvndb-2020-000903 | Shihonkanri Plus GOOUT vulnerable to OS command injection | 2020-03-24T17:47+09:00 | 2020-03-24T17:47+09:00 |
| jvndb-2020-000904 | CuteNews vulnerable to cross-site scripting | 2020-03-24T17:42+09:00 | 2020-03-24T17:42+09:00 |
| jvndb-2020-000905 | Cute News vulnerable to PHP code execution | 2020-03-24T17:40+09:00 | 2020-03-24T17:40+09:00 |
| jvndb-2020-002278 | Cross-site Scripting Vulnerability in JP1/Performance Management - Manager [Web Console] | 2020-03-11T14:16+09:00 | 2020-03-11T14:16+09:00 |
| jvndb-2020-002219 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center | 2020-03-09T11:23+09:00 | 2020-03-09T11:23+09:00 |
| jvndb-2020-002220 | Improper LDAPS Certificate Validation in Hitachi Ops Center Common Services | 2020-03-09T11:21+09:00 | 2020-03-09T11:21+09:00 |
| jvndb-2020-000020 | Multiple vulnerabilities in OpenBlocks IoT VX2 | 2020-03-03T17:50+09:00 | 2020-03-03T17:50+09:00 |
| jvndb-2020-000019 | GRANDIT vulnerable to session management | 2020-03-02T14:39+09:00 | 2020-03-02T14:39+09:00 |
| jvndb-2019-014138 | Improper Authentication Vulnerability in RICOH printers | 2020-02-25T15:47+09:00 | 2020-02-25T15:47+09:00 |
| jvndb-2019-014137 | Improper Access Control Vulnerability in RICOH printers | 2020-02-25T15:44+09:00 | 2020-02-25T15:44+09:00 |
| jvndb-2019-014437 | Privilege escalation vulnerability in multiple RICOH printer drivers | 2020-02-25T15:29+09:00 | 2020-02-25T15:29+09:00 |
| jvndb-2019-014031 | Cross-site Request Forgery Vulnerability in RICOH printers | 2020-02-25T14:06+09:00 | 2020-02-25T14:06+09:00 |
| jvndb-2019-014136 | Information Disclosure Vulnerability in RICOH printers | 2020-02-25T14:02+09:00 | 2020-02-25T14:02+09:00 |
| jvndb-2020-000016 | Multiple OS command injection vulnerabilities in Aterm WF1200C, Aterm WG1200CR, and Aterm WG2600HS | 2020-02-19T14:39+09:00 | 2020-02-19T14:39+09:00 |
| jvndb-2020-000015 | Multiple vulnerabilities in Aterm WG2600HS | 2020-02-19T14:34+09:00 | 2020-02-19T14:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0177 | Multiples vulnérabilités dans Moodle | 2026-02-17T00:00:00.000000 | 2026-02-17T00:00:00.000000 |
| certfr-2026-avi-0176 | Vulnérabilité dans Mattermost Server | 2026-02-17T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0175 | Multiples vulnérabilités dans les produits Mozilla | 2026-02-17T00:00:00.000000 | 2026-02-17T00:00:00.000000 |
| certfr-2026-avi-0174 | Multiples vulnérabilités dans LibreNMS | 2026-02-17T00:00:00.000000 | 2026-02-17T00:00:00.000000 |
| certfr-2026-avi-0173 | Multiples vulnérabilités dans les produits Mattermost | 2026-02-16T00:00:00.000000 | 2026-03-17T00:00:00.000000 |
| certfr-2026-avi-0172 | Vulnérabilité dans Google Chrome | 2026-02-16T00:00:00.000000 | 2026-02-16T00:00:00.000000 |
| certfr-2026-avi-0171 | Multiples vulnérabilités dans les produits IBM | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0170 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0169 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0168 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0167 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0166 | Multiples vulnérabilités dans le noyau Linux de Debian | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0165 | Vulnérabilité dans Mattermost Server | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0164 | Multiples vulnérabilités dans PostgreSQL | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0163 | Multiples vulnérabilités dans HAProxy | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0162 | Multiples vulnérabilités dans Juniper Networks Secure Analytics | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0161 | Vulnérabilité dans Tenable Nessus Agent | 2026-02-13T00:00:00.000000 | 2026-02-13T00:00:00.000000 |
| certfr-2026-avi-0160 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0159 | Multiples vulnérabilités dans Keycloak | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0158 | Multiples vulnérabilités dans les produits Apple | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0157 | Multiples vulnérabilités dans les produits Qnap | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0156 | Multiples vulnérabilités dans Google Chrome | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0155 | Multiples vulnérabilités dans SPIP | 2026-02-12T00:00:00.000000 | 2026-02-25T00:00:00.000000 |
| certfr-2026-avi-0154 | Vulnérabilité dans Traefik | 2026-02-12T00:00:00.000000 | 2026-02-12T00:00:00.000000 |
| certfr-2026-avi-0153 | Multiples vulnérabilités dans les produits Microsoft | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0152 | Multiples vulnérabilités dans Microsoft Azure | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0151 | Vulnérabilité dans Microsoft .Net | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0150 | Multiples vulnérabilités dans Microsoft Windows | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0149 | Multiples vulnérabilités dans Microsoft Office | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |
| certfr-2026-avi-0148 | Multiples vulnérabilités dans les produits Intel | 2026-02-11T00:00:00.000000 | 2026-02-11T00:00:00.000000 |