Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-13081 | N/A | Drupal core - Moderately critical - Gadget chain - SA-… |
Drupal |
Drupal core |
2025-11-18T16:54:56.214Z | 2025-11-18T17:26:19.578Z |
| cve-2025-59113 | 6.9 (v4.0) | Bruteforce Protection Bypass in Windu CMS |
JCD |
Windu CMS |
2025-11-18T13:26:31.504Z | 2025-11-18T17:13:06.755Z |
| cve-2025-63829 | N/A | eProsima Fast-DDS v3.3 and before has an infinite… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:12:46.478Z |
| cve-2025-55796 | N/A | The openml/openml.org web application version v2.… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:11:57.544Z |
| cve-2025-63512 | N/A | kishan0725 Hospital Management System/ v4 is vuln… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:11:03.228Z |
| cve-2025-56527 | N/A | Plaintext password storage in Kotaemon 0.11.0 in … |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:10:26.332Z |
| cve-2025-56526 | N/A | Cross site scripting (XSS) vulnerability in Kotae… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:09:19.172Z |
| cve-2025-63800 | N/A | The password change endpoint in Open Source Point… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:08:08.461Z |
| cve-2025-63604 | N/A | A code injection vulnerability exists in baryhuan… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:06:05.260Z |
| cve-2025-63603 | N/A | A command injection vulnerability exists in the M… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:05:02.151Z |
| cve-2025-63602 | N/A | A vulnerability was discovered in Awesome Miner t… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:04:06.527Z |
| cve-2025-53843 | 6.9 (v3.1) | A stack-based buffer overflow in Fortinet FortiOS… |
Fortinet |
FortiOS |
2025-11-18T17:01:28.239Z | 2025-11-18T17:01:28.239Z |
| cve-2025-48839 | 6.3 (v3.1) | An Out-of-bounds Write vulnerability [CWE-787] in… |
Fortinet |
FortiADC |
2025-11-18T17:01:25.620Z | 2025-11-18T17:01:25.620Z |
| cve-2024-32122 | 2.1 (v3.1) | A storing passwords in a recoverable format in Fo… |
Fortinet |
FortiOS |
2025-04-08T14:02:57.071Z | 2025-11-18T17:01:21.727Z |
| cve-2025-54971 | 3.9 (v3.1) | An exposure of sensitive information to an unauth… |
Fortinet |
FortiADC |
2025-11-18T17:01:17.182Z | 2025-11-18T17:01:17.182Z |
| cve-2025-54972 | 3.9 (v3.1) | An improper neutralization of crlf sequences ('cr… |
Fortinet |
FortiMail |
2025-11-18T17:01:15.406Z | 2025-11-18T17:01:15.406Z |
| cve-2025-46373 | 7.1 (v3.1) | A Heap-based Buffer Overflow vulnerability [CWE-1… |
Fortinet |
FortiClientWindows |
2025-11-18T17:01:15.231Z | 2025-11-18T17:01:15.231Z |
| cve-2025-58692 | 7.7 (v3.1) | An improper neutralization of special elements us… |
Fortinet |
FortiVoice |
2025-11-18T17:01:13.626Z | 2025-11-18T17:01:13.626Z |
| cve-2025-58034 | 6.7 (v3.1) | An Improper Neutralization of Special Elements us… |
Fortinet |
FortiWeb |
2025-11-18T17:01:13.513Z | 2025-11-18T17:01:13.513Z |
| cve-2025-47761 | 7.1 (v3.1) | An Exposed IOCTL with Insufficient Access Control… |
Fortinet |
FortiClientWindows |
2025-11-18T17:01:11.767Z | 2025-11-18T17:01:11.767Z |
| cve-2025-63408 | N/A | Local Agent DVR versions thru 6.6.1.0 are vulnera… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T17:00:51.156Z |
| cve-2025-59114 | 5.1 (v4.0) | Cross-Site Request Forgery in Windu CMS |
JCD |
Windu CMS |
2025-11-18T13:26:31.881Z | 2025-11-18T16:59:27.031Z |
| cve-2025-33184 | 7.8 (v3.1) | NVIDIA Isaac-GR00T for all platforms contains a v… |
NVIDIA |
NVIDIA Isaac-GR00T N1.5 |
2025-11-18T16:57:43.346Z | 2025-11-18T16:57:43.346Z |
| cve-2025-12761 | N/A | Simple multi step form - Moderately critical - Cross-s… |
Drupal |
Simple multi step form |
2025-11-18T16:56:14.234Z | 2025-11-18T16:56:14.234Z |
| cve-2025-12760 | N/A | Email TFA - Moderately critical - Access bypass - SA-C… |
Drupal |
Email TFA |
2025-11-18T16:55:59.017Z | 2025-11-18T16:55:59.017Z |
| cve-2025-13083 | N/A | Drupal core - Moderately critical - Information disclo… |
Drupal |
Drupal core |
2025-11-18T16:55:37.269Z | 2025-11-18T16:55:37.269Z |
| cve-2025-13082 | N/A | Drupal core - Moderately critical - Defacement - SA-CO… |
Drupal |
Drupal core |
2025-11-18T16:55:16.062Z | 2025-11-18T16:55:16.062Z |
| cve-2025-63258 | N/A | A remote command execution (RCE) vulnerability wa… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T16:54:39.395Z |
| cve-2025-13080 | N/A | Drupal core - Moderately critical - Denial of Service … |
Drupal |
Drupal core |
2025-11-18T16:54:32.042Z | 2025-11-18T16:54:32.042Z |
| cve-2025-63513 | N/A | kishan0725 Hospital Management System v4 has an I… |
n/a |
n/a |
2025-11-18T00:00:00.000Z | 2025-11-18T16:51:10.586Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000038 | UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints | 2025-06-12T15:56+09:00 | 2025-06-12T15:56+09:00 |
| jvndb-2025-000037 | Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery | 2025-06-06T13:56+09:00 | 2025-06-06T13:56+09:00 |
| jvndb-2025-000036 | TimeWorks vulnerable to path traversal | 2025-06-03T15:35+09:00 | 2025-06-03T15:35+09:00 |
| jvndb-2025-000035 | Improper file access permission settings in PC Time Tracer | 2025-06-03T14:40+09:00 | 2025-06-03T14:40+09:00 |
| jvndb-2025-000034 | Multiple vulnerabilities in wivia 5 | 2025-05-30T15:57+09:00 | 2025-05-30T15:57+09:00 |
| jvndb-2025-001238 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2025-01-29T13:41+09:00 | 2025-05-27T16:06+09:00 |
| jvndb-2025-000032 | Mailform Pro CGI generating error messages containing sensitive information | 2025-05-26T14:22+09:00 | 2025-05-26T14:22+09:00 |
| jvndb-2025-000033 | Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' | 2025-05-23T15:36+09:00 | 2025-05-23T15:36+09:00 |
| jvndb-2025-005467 | Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers | 2025-05-22T15:03+09:00 | 2025-05-22T15:03+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| jvndb-2025-005107 | Multiple vulnerabilities in V-SFT | 2025-05-16T14:32+09:00 | 2025-05-16T14:32+09:00 |
| jvndb-2025-005057 | Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' | 2025-05-15T18:27+09:00 | 2025-05-15T18:27+09:00 |
| jvndb-2025-005050 | Multiple vulnerabilities in a-blog cms | 2025-05-15T18:11+09:00 | 2025-05-15T18:11+09:00 |
| jvndb-2025-000031 | Pgpool-II vulnerable to authentication bypass by primary weakness | 2025-05-15T16:14+09:00 | 2025-05-15T16:14+09:00 |
| jvndb-2025-004863 | Panasonic IR Control Hub vulnerable to Unauthorised firmware loading | 2025-05-14T11:30+09:00 | 2025-05-14T11:30+09:00 |
| jvndb-2025-004671 | Multiple vulnerabilities in GL-MT2500 and GL-MT2500A | 2025-05-12T17:52+09:00 | 2025-05-12T17:52+09:00 |
| jvndb-2025-001016 | OMRON NJ/NX series vulnerable to path traversal | 2025-02-06T18:27+09:00 | 2025-05-08T17:44+09:00 |
| jvndb-2025-004079 | Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS | 2025-04-30T11:46+09:00 | 2025-04-30T11:46+09:00 |
| jvndb-2025-004076 | Security Update for Trend Micro Trend Vision One (April 2025) | 2025-04-30T10:38+09:00 | 2025-04-30T10:38+09:00 |
| jvndb-2025-000029 | Multiple vulnerabilities in Quick Agent | 2025-04-25T13:49+09:00 | 2025-04-25T13:49+09:00 |
| jvndb-2025-000028 | i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key | 2025-04-24T13:50+09:00 | 2025-04-24T13:50+09:00 |
| jvndb-2025-000027 | Active! mail vulnerable to stack-based buffer overflow | 2025-04-18T16:50+09:00 | 2025-04-18T16:50+09:00 |
| jvndb-2016-000129 | Android OS issue where it is affected by the CRIME attack | 2016-07-25T11:15+09:00 | 2025-04-18T16:36+09:00 |
| jvndb-2025-003213 | TP-Link Deco BE65 Pro vulnerable to OS command injection | 2025-04-11T13:52+09:00 | 2025-04-11T13:52+09:00 |
| jvndb-2025-000026 | Multiple vulnerabilities in BizRobo! | 2025-04-10T15:36+09:00 | 2025-04-10T15:36+09:00 |
| jvndb-2025-003091 | Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (April 2025) | 2025-04-09T14:55+09:00 | 2025-04-09T14:55+09:00 |
| jvndb-2025-002990 | Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series' | 2025-04-07T17:44+09:00 | 2025-04-07T17:44+09:00 |
| jvndb-2025-002714 | Improper symbolic link file handling in FutureNet NXR series, VXR series and WXR series routers | 2025-03-31T16:59+09:00 | 2025-04-03T15:19+09:00 |
| jvndb-2025-000025 | WinRAR vulnerable to the symbolic link based "Mark of the Web" check bypass | 2025-04-03T12:29+09:00 | 2025-04-03T12:29+09:00 |
| jvndb-2025-000022 | Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products | 2025-04-02T15:12+09:00 | 2025-04-02T15:12+09:00 |