Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-74848 | 7 (v4.0) | Apache APISIX: Cross-user response poisoning in server… |
Apache Software Foundation |
Apache APISIX |
2026-08-27T09:16:06.985Z | 2026-08-27T12:05:30.790Z |
| cve-2026-75005 | 8.7 (v4.0) | Apache APISIX: Unauthenticated CPU-exhaustion DoS |
Apache Software Foundation |
Apache APISIX |
2026-08-27T09:15:32.196Z | 2026-08-27T12:06:27.060Z |
| cve-2026-75020 | 7 (v4.0) | Apache APISIX: ldap-auth plugin cross-subtree identity… |
Apache Software Foundation |
Apache APISIX |
2026-08-27T09:14:33.099Z | 2026-08-27T12:09:54.558Z |
| cve-2026-81625 | 8.7 (v4.0) 8.8 (v3.1) | Stack buffer overflow in Greenbone OS and openvas-scanner |
Greenbone |
Greenbone OS |
2026-08-27T09:06:44.122Z | 2026-08-27T12:12:02.884Z |
| cve-2026-81277 | 8.5 (v3.1) | WordPress Suggestion Engine for WooCommerce plugin <= … |
VillaTheme |
Suggestion Engine for WooCommerce |
2026-08-27T09:00:10.584Z | 2026-08-27T14:31:08.991Z |
| cve-2026-81276 | 5.3 (v3.1) | WordPress Kali Forms plugin <= 2.4.23 - Broken Access … |
WP Chill |
Kali Forms |
2026-08-27T09:00:09.884Z | 2026-08-28T18:35:56.466Z |
| cve-2026-81274 | 5.3 (v3.1) | WordPress Ditty plugin <= 3.1.67 - Broken Access Contr… |
metaphorcreations |
Ditty |
2026-08-27T09:00:09.177Z | 2026-08-27T12:31:07.802Z |
| cve-2026-81273 | 8.1 (v3.1) | WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Si… |
WP Manage Ninja |
FluentBooking Pro |
2026-08-27T09:00:08.436Z | 2026-08-27T15:00:53.378Z |
| cve-2026-81272 | 4.9 (v3.1) | WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Ac… |
WP Manage Ninja |
FluentPlayer Pro |
2026-08-27T09:00:07.759Z | 2026-08-27T12:16:35.326Z |
| cve-2026-81271 | 8.8 (v3.1) | WordPress GeoDirectory plugin <= 2.8.176 - Cross Site … |
Paolo |
GeoDirectory |
2026-08-27T09:00:07.037Z | 2026-08-27T14:31:22.769Z |
| cve-2026-80433 | 7.5 (v3.1) | WordPress SureFeedback Client Site plugin <= 1.2.12 - … |
Brainstorm Force |
SureFeedback Client Site |
2026-08-27T09:00:06.310Z | 2026-08-28T18:35:56.613Z |
| cve-2026-78293 | 7.1 (v3.1) | WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site … |
axew3 |
WP w3all phpBB |
2026-08-27T09:00:05.589Z | 2026-08-27T12:34:46.504Z |
| cve-2026-78292 | 9.8 (v3.1) | WordPress Hash Form plugin <= 1.4.1 - PHP Object Injec… |
hashthemes |
Hash Form |
2026-08-27T09:00:04.876Z | 2026-08-27T15:01:46.688Z |
| cve-2026-78289 | 7.1 (v3.1) | WordPress CozyStay theme <= 1.10.0 - Cross Site Script… |
LoftOcean |
CozyStay |
2026-08-27T09:00:04.174Z | 2026-08-27T12:17:17.638Z |
| cve-2026-78288 | 9.3 (v3.1) | WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 -… |
Jonathan de Jong |
Beautiful Taxonomy Filters |
2026-08-27T09:00:03.442Z | 2026-08-27T14:31:34.403Z |
| cve-2026-78286 | 9.8 (v3.1) | WordPress Geo Controller plugin <= 8.9.8 - PHP Object … |
INFINITUM FORM |
Geo Controller |
2026-08-27T09:00:02.731Z | 2026-08-28T18:35:56.758Z |
| cve-2026-78285 | 8.5 (v3.1) | WordPress Like Button Rating plugin <= 2.6.61 - SQL In… |
LikeBtn |
Like Button Rating |
2026-08-27T09:00:02.000Z | 2026-08-27T12:35:27.910Z |
| cve-2026-78283 | 7.1 (v3.1) | WordPress Music Player for WooCommerce plugin <= 1.8.9… |
codepeople |
Music Player for WooCommerce |
2026-08-27T09:00:01.262Z | 2026-08-27T14:57:20.125Z |
| cve-2026-78281 | 7.1 (v3.1) | WordPress CP Media Player plugin <= 1.3.0 - Cross Site… |
codepeople |
CP Media Player |
2026-08-27T09:00:00.322Z | 2026-08-27T12:17:56.974Z |
| cve-2026-78276 | 7.2 (v3.1) | WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Obj… |
WP Manage Ninja |
Fluent Boards Pro |
2026-08-27T08:59:59.412Z | 2026-08-27T14:31:45.079Z |
| cve-2026-78275 | 6.8 (v3.1) | WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitra… |
WP Manage Ninja |
Fluent Boards Pro |
2026-08-27T08:59:58.666Z | 2026-08-28T18:35:56.902Z |
| cve-2026-78274 | 9.1 (v3.1) | WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitra… |
WP Manage Ninja |
Fluent Boards Pro |
2026-08-27T08:59:57.951Z | 2026-08-27T12:35:47.806Z |
| cve-2026-78273 | 6.5 (v3.1) | WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross S… |
WP Manage Ninja |
Fluent Boards Pro |
2026-08-27T08:59:57.217Z | 2026-08-27T14:58:28.038Z |
| cve-2026-78271 | 7.2 (v3.1) | WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege E… |
WP Manage Ninja |
FluentCRM Pro |
2026-08-27T08:59:56.487Z | 2026-08-27T12:18:28.265Z |
| cve-2026-78261 | 7.1 (v3.1) | WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 … |
Realtyna |
Realtyna Organic IDX plugin |
2026-08-27T08:59:55.779Z | 2026-08-27T14:31:54.357Z |
| cve-2026-78260 | 9.3 (v3.1) | WordPress Epayco plugin <= 8.4.6 - SQL Injection vulne… |
ePayco |
Epayco |
2026-08-27T08:59:55.061Z | 2026-08-28T18:35:57.056Z |
| cve-2026-78257 | 8.8 (v3.1) | WordPress Booking and Rental Manager plugin <= 2.7.5 -… |
magepeopleteam |
Booking and Rental Manager |
2026-08-27T08:59:54.300Z | 2026-08-27T12:36:34.010Z |
| cve-2026-32566 | 9.8 (v3.1) | WordPress ACPT (Pro) - Custom Post Types Plugin for Wo… |
ACPT |
ACPT (Pro) - Custom Post Types Plugin for WordPress |
2026-08-27T08:59:53.588Z | 2026-08-27T14:59:23.882Z |
| cve-2026-32564 | 8.5 (v3.1) | WordPress ACPT (Pro) - Custom Post Types Plugin for Wo… |
ACPT |
ACPT (Pro) - Custom Post Types Plugin for WordPress |
2026-08-27T08:59:52.862Z | 2026-08-27T12:37:19.730Z |
| cve-2026-32550 | 8.5 (v3.1) | WordPress Kadence Shop Kit plugin <= 3.0.6 - SQL Injec… |
Liquid Web, LLC |
Kadence Shop Kit |
2026-08-27T08:59:52.137Z | 2026-08-27T14:32:04.233Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-010851 | Clickjacking Vulnerability in Hitachi Automation Director | 2018-12-26T12:09+09:00 | 2019-01-24T18:37+09:00 |
| jvndb-2018-000135 | WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting | 2018-12-25T16:19+09:00 | 2019-08-27T15:12+09:00 |
| jvndb-2018-000136 | Installer of Mapping Tool may insecurely load Dynamic Link Libraries | 2018-12-25T16:18+09:00 | 2019-08-27T16:36+09:00 |
| jvndb-2018-000133 | cordova-plugin-ionic-webview vulnerable to path traversal | 2018-12-21T14:17+09:00 | 2019-08-28T10:04+09:00 |
| jvndb-2018-000134 | PgpoolAdmin fails to restrict access permissions | 2018-12-21T14:10+09:00 | 2019-08-27T17:41+09:00 |
| jvndb-2018-000132 | Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway | 2018-12-19T15:20+09:00 | 2019-08-28T10:45+09:00 |
| jvndb-2018-000131 | Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR | 2018-12-14T14:53+09:00 | 2019-08-27T11:33+09:00 |
| jvndb-2018-000126 | Multiple vulnerabilities in Cybozu Remote Service | 2018-12-10T14:26+09:00 | 2019-08-27T11:48+09:00 |
| jvndb-2018-000130 | Cybozu Garoon access restriction bypass vulnerability | 2018-12-10T14:14+09:00 | 2019-08-27T16:54+09:00 |
| jvndb-2018-000129 | Multiple vulnerabilities in i-FILTER | 2018-12-07T14:30+09:00 | 2019-08-27T11:45+09:00 |
| jvndb-2018-000128 | Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners | 2018-12-06T16:19+09:00 | 2019-09-27T09:55+09:00 |
| jvndb-2018-010028 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor | 2018-12-04T16:53+09:00 | 2019-01-24T18:35+09:00 |
| jvndb-2018-010027 | Problem with directory permissions in JP1/Operations Analytics | 2018-12-04T16:53+09:00 | 2019-01-24T18:36+09:00 |
| jvndb-2018-000123 | Panasonic applications register unquoted service paths | 2018-11-29T14:45+09:00 | 2019-09-27T10:31+09:00 |
| jvndb-2018-000125 | The installer of MARKET SPEED may insecurely load Dynamic Link Libraries | 2018-11-28T17:27+09:00 | 2019-08-28T10:01+09:00 |
| jvndb-2018-000127 | EC-CUBE vulnerable to open redirect | 2018-11-28T17:24+09:00 | 2019-08-28T09:42+09:00 |
| jvndb-2018-000124 | Multiple vulnerabilities in RICOH Interactive Whiteboard | 2018-11-27T15:26+09:00 | 2019-08-27T17:01+09:00 |
| jvndb-2018-009387 | Mizuho Bank Mizuho Direct App for Android fails to verify SSL server certificates | 2018-11-19T15:44+09:00 | 2019-08-27T16:48+09:00 |
| jvndb-2018-009328 | Multiple Vulnerabilities in JP1/VERITAS | 2018-11-15T17:16+09:00 | 2018-11-20T18:16+09:00 |
| jvndb-2018-000121 | Cybozu Dezie vulnerable to directory traversal | 2018-11-14T15:42+09:00 | 2019-08-27T12:25+09:00 |
| jvndb-2018-000120 | Multiple directory traversal vulnerabilities in Cybozu Office | 2018-11-14T15:38+09:00 | 2019-08-27T12:28+09:00 |
| jvndb-2018-000119 | Cybozu Mailwise vulnerable to directory traversal | 2018-11-14T15:34+09:00 | 2019-08-27T13:37+09:00 |
| jvndb-2018-000118 | The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries | 2018-11-09T16:13+09:00 | 2019-08-27T18:03+09:00 |
| jvndb-2018-000117 | Multiple vulnerabilities in WordPress plugin "LearnPress" | 2018-11-09T16:13+09:00 | 2019-08-27T11:35+09:00 |
| jvndb-2018-000115 | WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting | 2018-11-02T14:56+09:00 | 2019-08-27T15:15+09:00 |
| jvndb-2018-000116 | Mail app for iOS vulnerable to denial-of-service (DoS) | 2018-11-02T14:42+09:00 | 2018-11-02T14:42+09:00 |
| jvndb-2018-000114 | Confluence Server vulnerable to script injection | 2018-10-29T13:36+09:00 | 2018-10-29T13:36+09:00 |
| jvndb-2018-000113 | Multiple vulnerabilities in OpenDolphin | 2018-10-26T16:16+09:00 | 2019-07-26T14:35+09:00 |
| jvndb-2018-000111 | BlueStacks App Player fails to restrict access permissions | 2018-10-24T16:13+09:00 | 2019-08-27T10:35+09:00 |
| jvndb-2018-000112 | SecureCore Standard Edition vulnerable to authentication bypass | 2018-10-24T16:07+09:00 | 2019-08-06T17:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0899 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0898 | Vulnérabilité dans Microsoft Edge | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0897 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0896 | Multiples vulnérabilités dans les produits IBM | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0895 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0894 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0893 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0892 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0891 | Vulnérabilité dans MongoDB Connector for BI pour Windows | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0890 | Multiples vulnérabilités dans les produits Moxa | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |