Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59354 | 9.6 (v3.1) | Spring Security OAuth2 Authorization Server: Insuffici… |
VMware by Broadcom |
Spring Security (OAuth2 Authorization Server module) |
2026-08-27T06:33:03.463Z | 2026-08-28T03:55:26.777Z |
| cve-2026-78333 | N/A | 12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated … |
Unknown |
12 Step Meeting List |
2026-08-27T06:00:20.111Z | 2026-08-27T14:23:45.831Z |
| cve-2026-78139 | N/A | Notifima < 3.1.4 - Subscriber+ Stock Alert Unsubscript… |
Unknown |
Notifima |
2026-08-27T06:00:19.934Z | 2026-08-27T14:23:45.997Z |
| cve-2026-78138 | N/A | Finale Lite < 2.21.0 - Subscriber+ Campaign Configurat… |
Unknown |
Finale Lite |
2026-08-27T06:00:19.760Z | 2026-08-27T14:23:46.167Z |
| cve-2026-78137 | N/A | StoreGrowth: Smart Sales Booster for WooCommerce < 2.1… |
Unknown |
StoreGrowth |
2026-08-27T06:00:19.587Z | 2026-08-27T14:23:46.341Z |
| cve-2026-78125 | N/A | LearnPress – Sepay Payment < 4.0.3 - Unauthenticated O… |
Unknown |
LearnPress |
2026-08-27T06:00:19.414Z | 2026-08-27T14:23:46.503Z |
| cve-2026-77018 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:19.247Z | 2026-08-27T14:23:46.675Z |
| cve-2026-77017 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:19.059Z | 2026-08-27T14:23:46.847Z |
| cve-2026-77016 | N/A | Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ A… |
Unknown |
Workeera |
2026-08-27T06:00:18.880Z | 2026-08-27T14:23:47.005Z |
| cve-2026-76549 | N/A | UpdraftPlus < 1.26.7 - Backup Restoration via CSRF |
Unknown |
UpdraftPlus: WP Backup & Migration Plugin |
2026-08-27T06:00:18.707Z | 2026-08-27T14:23:47.167Z |
| cve-2026-19715 | N/A | WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token … |
Unknown |
WP OAuth Server ( Login with WordPress ) |
2026-08-27T06:00:18.109Z | 2026-08-27T14:23:47.322Z |
| cve-2026-19454 | N/A | JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Netwo… |
Unknown |
JetBackup |
2026-08-27T06:00:17.928Z | 2026-08-27T14:23:47.496Z |
| cve-2026-19225 | N/A | Defender Security < 6.2.0 - Admin+ Network-Wide RCE vi… |
Unknown |
Defender Security |
2026-08-27T06:00:17.755Z | 2026-08-27T14:23:47.663Z |
| cve-2026-19223 | N/A | Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connec… |
Unknown |
Smush |
2026-08-27T06:00:17.560Z | 2026-08-27T14:23:47.838Z |
| cve-2026-16569 | N/A | ShopApper <= 0.4.62 - Subscriber+ Arbitrary Product St… |
Unknown |
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce |
2026-08-27T06:00:17.387Z | 2026-08-27T14:23:48.010Z |
| cve-2026-16568 | N/A | ShopApper <= 0.4.62 - Subscriber+ Customer Data Disclo… |
Unknown |
Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce |
2026-08-27T06:00:17.213Z | 2026-08-27T14:23:48.190Z |
| cve-2026-16567 | N/A | Document Embedder < 2.3.1 - Unauthenticated Private Do… |
Unknown |
Document Embedder |
2026-08-27T06:00:17.044Z | 2026-08-27T14:23:48.352Z |
| cve-2026-13416 | N/A | CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Sto… |
Unknown |
CMP |
2026-08-27T06:00:16.861Z | 2026-08-27T14:23:48.622Z |
| cve-2026-13415 | N/A | CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Pri… |
Unknown |
CMP |
2026-08-27T06:00:16.668Z | 2026-08-27T14:23:49.069Z |
| cve-2026-13414 | N/A | CMP - Coming Soon & Maintenance < 4.1.18 - Unauthentic… |
Unknown |
CMP |
2026-08-27T06:00:16.494Z | 2026-08-27T14:23:49.236Z |
| cve-2026-77991 | 9.4 (v4.0) | Joomla Extension - joomlaeventmanager.net - Privileged… |
joomlaeventmanager.net |
JEM - Joomla Event Manager extension for Joomla |
2026-08-27T05:50:13.521Z | 2026-08-28T07:47:57.914Z |
| cve-2026-77034 | 6.9 (v4.0) | Joomla Extension - joomlaeventmanager.net - Unauthenti… |
joomlaeventmanager.net |
JEM - Joomla Event Manager extension for Joomla |
2026-08-27T05:48:02.596Z | 2026-08-28T07:45:42.144Z |
| cve-2026-77990 | 5.3 (v4.0) | Joomla Extension - joomlaeventmanager.net - Attendee l… |
joomlaeventmanager.net |
JEM - Joomla Event Manager extension for Joomla |
2026-08-27T05:47:51.963Z | 2026-08-28T07:45:30.323Z |
| cve-2026-77035 | 5.1 (v4.0) | Joomla Extension - joomlaeventmanager.net - Cross-user… |
joomlaeventmanager.net |
JEM - Joomla Event Manager extension for Joomla |
2026-08-27T05:46:06.829Z | 2026-08-28T07:43:42.197Z |
| cve-2026-77989 | 5.3 (v4.0) | Joomla Extension - joomlaeventmanager.net - Reflected … |
joomlaeventmanager.net |
JEM - Joomla Event Manager extension for Joomla |
2026-08-27T05:43:56.550Z | 2026-08-28T07:41:28.744Z |
| cve-2026-47893 | N/A | Spring Framework Request Headers Included in Exception… |
Spring |
Spring Framework |
2026-08-27T05:21:41.124Z | 2026-08-28T19:12:43.970Z |
| cve-2026-47892 | N/A | Spring Framework Header Predicate Bypass in WebFlux Fu… |
Spring |
Spring Framework |
2026-08-27T05:21:40.168Z | 2026-08-28T19:11:09.411Z |
| cve-2026-47891 | N/A | Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder |
Spring |
Spring Framework |
2026-08-27T05:21:39.288Z | 2026-08-27T14:52:30.491Z |
| cve-2026-47890 | N/A | Spring Framework Server Sent Event stream corruption w… |
Spring |
Spring Framework |
2026-08-27T05:21:38.260Z | 2026-08-27T14:53:37.162Z |
| cve-2026-47889 | N/A | Spring Framework sameSite Attribute Dropped in JettyCo… |
Spring |
Spring Framework |
2026-08-27T05:21:37.305Z | 2026-08-27T14:57:20.579Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000073 | Installer of ChatWork Desktop App for Windows may insecurely load Dynamic Link Libraries | 2018-07-23T14:28+09:00 | 2019-07-25T16:50+09:00 |
| jvndb-2018-000082 | WL-330NUL vulnerable to cross-site request forgery | 2018-07-20T15:41+09:00 | 2019-07-25T14:38+09:00 |
| jvndb-2018-000074 | DLL planting vulnerability in multiple Yayoi 17 Series products | 2018-07-20T15:41+09:00 | 2019-07-25T15:04+09:00 |
| jvndb-2018-000081 | Multiple vulnerabilities in ORCA(Online Receipt Computer Advantage) | 2018-07-18T15:35+09:00 | 2019-07-25T16:59+09:00 |
| jvndb-2018-000080 | Movable Type plugin MTAppjQuery vulnerable to PHP code execution | 2018-07-18T15:35+09:00 | 2019-07-26T15:23+09:00 |
| jvndb-2018-000078 | WordPress plugin "FV Flowplayer Video Player" vulnerable to cross-site scripting | 2018-07-17T12:27+09:00 | 2019-07-25T17:12+09:00 |
| jvndb-2018-000079 | Explzh vulnerable to directory traversal | 2018-07-13T14:47+09:00 | 2019-07-25T16:26+09:00 |
| jvndb-2018-000077 | Multiple vulnerabilities in Aterm HC100RC | 2018-07-12T15:04+09:00 | 2019-08-27T13:52+09:00 |
| jvndb-2018-000076 | Multiple vulnerabilities in Aterm W300P | 2018-07-12T15:04+09:00 | 2019-08-27T16:56+09:00 |
| jvndb-2018-000075 | Multiple OS command injection vulnerabilities in Aterm WG1200HP | 2018-07-12T15:04+09:00 | 2019-08-27T13:44+09:00 |
| jvndb-2018-000072 | The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries | 2018-07-06T14:36+09:00 | 2019-07-05T17:38+09:00 |
| jvndb-2018-000071 | DHC Online Shop App for Android fails to verify SSL server certificates | 2018-07-06T14:36+09:00 | 2019-07-05T17:35+09:00 |
| jvndb-2018-000070 | Installer of Glary Utilities may insecurely load Dynamic Link Libraries | 2018-07-03T13:42+09:00 | 2019-07-05T17:52+09:00 |
| jvndb-2018-000069 | Cybozu Garoon vulnerable to SQL injection | 2018-07-02T15:22+09:00 | 2019-07-05T17:55+09:00 |
| jvndb-2018-000068 | Multiple vulnerabilities in Calsos CSDX and CSDJ series products | 2018-07-02T15:22+09:00 | 2019-07-24T14:31+09:00 |
| jvndb-2018-000067 | Mailman vulnerable to cross-site scripting | 2018-06-28T12:30+09:00 | 2019-07-24T15:21+09:00 |
| jvndb-2018-000066 | MemoCGI vulnerable to directory traversal | 2018-06-27T14:44+09:00 | 2019-07-05T17:58+09:00 |
| jvndb-2018-000065 | ANA App for iOS fails to verify SSL server certificates | 2018-06-15T14:40+09:00 | 2019-12-27T18:08+09:00 |
| jvndb-2018-000064 | Chrome Extension "5000 trillion yen converter" vulnerable to cross-site scripting | 2018-06-15T14:36+09:00 | 2018-06-15T14:36+09:00 |
| jvndb-2018-000062 | Local File Inclusion vulnerability in Zenphoto | 2018-06-13T15:11+09:00 | 2018-06-13T15:11+09:00 |
| jvndb-2018-000063 | LINE for Windows may insecurely load Dynamic Link Libraries | 2018-06-12T14:44+09:00 | 2018-06-12T14:44+09:00 |
| jvndb-2018-000061 | H2O vulnerable to buffer overflow | 2018-06-04T14:10+09:00 | 2018-06-04T14:10+09:00 |
| jvndb-2018-000060 | Multiple vulnerabilities in Pixelpost | 2018-05-31T14:07+09:00 | 2018-05-31T14:07+09:00 |
| jvndb-2018-000057 | The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely invoke an executable file | 2018-05-29T13:47+09:00 | 2019-12-27T18:09+09:00 |
| jvndb-2018-000059 | WordPress plugin "Site Reviews" vulnerable to cross-site scripting | 2018-05-28T14:11+09:00 | 2019-07-02T14:25+09:00 |
| jvndb-2018-000058 | WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting | 2018-05-28T14:11+09:00 | 2019-07-02T14:50+09:00 |
| jvndb-2018-003553 | Information Disclosure Vulnerability in Hitachi Automation Director | 2018-05-28T12:13+09:00 | 2018-07-31T12:16+09:00 |
| jvndb-2018-000046 | The installer of PlayMemories Home for Windows may insecurely load Dynamic Link Libraries | 2018-05-24T15:25+09:00 | 2019-07-02T14:31+09:00 |
| jvndb-2018-000056 | Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries | 2018-05-24T15:15+09:00 | 2019-07-02T14:53+09:00 |
| jvndb-2018-000054 | Multiple cross-site scripting vulnerabilities in Cybozu Mailwise | 2018-05-22T15:26+09:00 | 2018-08-30T17:47+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0859 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0858 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0857 | Vulnérabilité dans Wireshark | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0856 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0855 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0854 | Vulnérabilité dans les produits Moxa | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0853 | Multiples vulnérabilités dans GitLab | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0852 | Vulnérabilité dans Tenable Security Center | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0851 | Vulnérabilité dans Python | 2025-10-08T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0850 | Multiples vulnérabilités dans Google Chrome | 2025-10-08T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0849 | Multiples vulnérabilités dans les produits Elastic | 2025-10-07T00:00:00.000000 | 2025-10-07T00:00:00.000000 |
| certfr-2025-avi-0848 | Vulnérabilité dans OpenSSH | 2025-10-06T00:00:00.000000 | 2025-10-07T00:00:00.000000 |
| certfr-2025-avi-0847 | Vulnérabilité dans les produits Liferay | 2025-10-06T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0846 | Multiples vulnérabilités dans les produits Qnap | 2025-10-06T00:00:00.000000 | 2025-10-06T00:00:00.000000 |
| certfr-2025-avi-0845 | Multiples vulnérabilités dans Zabbix | 2025-10-06T00:00:00.000000 | 2025-10-06T00:00:00.000000 |
| certfr-2025-avi-0844 | Multiples vulnérabilités dans IBM Sterling Connect | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0843 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0842 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0841 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0840 | Multiples vulnérabilités dans Zabbix | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0839 | Multiples vulnérabilités dans Microsoft Edge | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0838 | Multiples vulnérabilités dans les produits Splunk | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0837 | Multiples vulnérabilités dans Google Chrome | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0836 | Multiples vulnérabilités dans les produits Tenable | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0835 | Multiples vulnérabilités dans OpenSSL | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0834 | Multiples vulnérabilités dans Mozilla Firefox | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0833 | Multiples vulnérabilités dans Joomla! | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0832 | Multiples vulnérabilités dans les produits VMware | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0831 | Vulnérabilité dans les produits Apple | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0830 | Vulnérabilité dans Tenable Patch Management | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |