Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-117573 | 8.5 (v4.0) 7.8 (v3.1) | hagent through commit 761eec6 OS Command Injection via… |
masc-ucsc |
hagent |
2026-10-27T13:08:03.276Z | 2026-10-27T13:08:03.276Z |
| cve-2026-117570 | 4.8 (v4.0) 5.2 (v3.1) | nmap-mcp through commit 3636afa Permissive NSE Script … |
Vorota-ai |
nmap-mcp |
2026-10-27T13:08:02.571Z | 2026-10-27T13:08:02.571Z |
| cve-2026-117569 | 8.5 (v4.0) 7.8 (v3.1) | Kali-GPT through commit a608c74 OS Command Injection v… |
alishahid74 |
kali-gpt |
2026-10-27T13:08:01.873Z | 2026-10-27T13:08:01.873Z |
| cve-2026-117568 | 7.3 (v4.0) 7 (v3.1) | mcp-ffmpeg through 1.0.5 OS Command Injection via vide… |
bitscorp-mcp |
mcp-ffmpeg |
2026-10-27T13:08:01.183Z | 2026-10-28T16:16:50.835Z |
| cve-2026-117567 | 8.5 (v4.0) 7.8 (v3.1) | esp-mcp through commit 28afddf OS Command Injection vi… |
horw |
esp-mcp |
2026-10-27T13:08:00.469Z | 2026-10-27T13:08:00.469Z |
| cve-2026-117566 | 6.9 (v4.0) 5.3 (v3.1) | EasyImages2.0 through 2.8.6 Unauthenticated Path Trave… |
icret |
EasyImages2.0 |
2026-10-27T13:07:59.767Z | 2026-10-27T13:07:59.767Z |
| cve-2026-117565 | 6.9 (v4.0) 5.3 (v3.1) | Artalk before 2.10.1 Unauthenticated SSRF via Comment … |
ArtalkJS |
Artalk |
2026-10-27T13:07:59.080Z | 2026-10-27T13:07:59.080Z |
| cve-2026-117564 | 9.3 (v4.0) 9.8 (v3.1) | nest-admin before 1.0.1 Authentication Bypass via Hard… |
buqiyuan |
nest-admin |
2026-10-27T13:07:58.360Z | 2026-10-28T16:16:56.709Z |
| cve-2026-117563 | 5.3 (v4.0) 5.4 (v3.1) | MrDoc through 1.1.1 Broken Access Control via manage_d… |
zmister2016 |
MrDoc |
2026-10-27T13:07:57.656Z | 2026-10-27T13:07:57.656Z |
| cve-2026-117562 | 6.9 (v4.0) 5.3 (v3.1) | rssant 1.9.0 through 1.9.1 Information Disclosure via … |
anyant |
rssant |
2026-10-27T13:07:56.982Z | 2026-10-27T13:07:56.982Z |
| cve-2026-117561 | 8.5 (v4.0) 7.8 (v3.1) | sf-mcp through 1.3.2 OS Command Injection via Salesfor… |
codefriar |
sf-mcp |
2026-10-27T13:07:56.281Z | 2026-10-27T13:07:56.281Z |
| cve-2026-117560 | 8.5 (v4.0) 7.8 (v3.1) | ATXP Gemini CLI Extension through 1.0.0 OS Command Inj… |
atxp |
gemini-cli-extension |
2026-10-27T13:07:55.594Z | 2026-10-28T16:17:06.328Z |
| cve-2026-117559 | 8.5 (v4.0) 7.8 (v3.1) | DroidMind through 0.4.0 Command Injection via Shell Al… |
hyperb1iss |
droidmind |
2026-10-27T13:07:53.788Z | 2026-10-27T13:07:53.788Z |
| cve-2026-117558 | 8.5 (v4.0) 7.8 (v3.1) | ai-sdlc MCP Server through 0.31.2 Command Injection vi… |
ai-sdlc-framework |
ai-sdlc |
2026-10-27T13:07:53.099Z | 2026-10-27T13:07:53.099Z |
| cve-2026-117557 | 6.9 (v4.0) 6.1 (v3.1) | SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds… |
libsdl-org |
SDL_image |
2026-10-27T13:07:52.419Z | 2026-10-27T13:07:52.419Z |
| cve-2026-117556 | 5.3 (v4.0) 4.3 (v3.1) | zchunk before 1.5.5 Heap Out-of-Bounds Read via read_p… |
zchunk |
zchunk |
2026-10-27T13:07:51.708Z | 2026-10-28T16:17:15.487Z |
| cve-2026-117555 | 6.9 (v4.0) 6.1 (v3.1) | GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read vi… |
GreycLab |
CImg |
2026-10-27T13:07:51.020Z | 2026-10-27T13:07:51.020Z |
| cve-2026-117554 | 5.3 (v4.0) 4.3 (v3.1) | Admidio before 5.0.17 Event Guest Restriction Bypass v… |
admidio |
admidio |
2026-10-27T13:07:50.357Z | 2026-10-27T13:07:50.357Z |
| cve-2026-117553 | 7.7 (v4.0) 7.5 (v3.1) | Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover … |
umbraco |
Umbraco-CMS |
2026-10-27T13:07:49.671Z | 2026-10-27T13:07:49.671Z |
| cve-2026-92546 | 7.5 (v3.1) | Authentication Bypass with X-Agentic-Ally-Token in Kee… |
Keepnet Labs Cybersecurity Inc. |
Agentic AI / Agentic Ally |
2026-10-27T12:58:42.332Z | 2026-10-27T12:58:42.332Z |
| cve-2026-116627 | N/A | Improper neutralization of input during web page … |
Devolutions |
PowerShell Universal |
2026-10-27T12:45:34.223Z | 2026-10-27T12:45:34.223Z |
| cve-2026-15586 | 5.3 (v3.1) | OTP Brute-Force Account Takeover in Idvlabs Software's… |
İdvlabs Software and Consulting Services Inc. |
Ontime |
2026-10-27T12:32:04.384Z | 2026-10-27T12:32:04.384Z |
| cve-2026-114409 | 5.7 (v4.0) | Docker Desktop logs can expose stored third-party cred… |
Docker |
Docker Desktop |
2026-10-27T12:25:57.894Z | 2026-10-27T12:25:57.894Z |
| cve-2026-107590 | 1.9 (v4.0) | Out-of-bounds write vulnerability in QTextCodec iconv-… |
qt |
Qt |
2026-10-27T12:24:53.005Z | 2026-10-27T12:24:53.005Z |
| cve-2026-47486 | 7.8 (v3.1) | NVIDIA PhysX for all platforms contains a vulnera… |
NVIDIA |
PhysX |
2026-10-27T12:17:18.717Z | 2026-10-29T10:45:47.441Z |
| cve-2026-65145 | 10 (v3.1) | NVIDIA NeMo Agent Toolkit contains a vulnerabilit… |
NVIDIA |
NeMo Agent Toolkit |
2026-10-27T12:16:45.287Z | 2026-10-27T12:16:45.287Z |
| cve-2026-65151 | 8.4 (v3.1) | NVIDIA NeMo Agent Toolkit contains vulnerability … |
NVIDIA |
NeMo Agent Toolkit |
2026-10-27T12:16:44.388Z | 2026-10-27T12:16:44.388Z |
| cve-2026-65120 | 7.1 (v3.1) | NVIDIA TensorRT-LLM contains a vulnerability wher… |
NVIDIA |
TensorRT-LLM |
2026-10-27T12:15:07.629Z | 2026-10-27T12:15:07.629Z |
| cve-2026-24269 | 7.1 (v3.1) | NVIDIA TensorRT-LLM contains a vulnerability wher… |
NVIDIA |
TensorRT-LLM |
2026-10-27T12:15:06.731Z | 2026-10-27T12:15:06.731Z |
| cve-2026-65119 | 8.4 (v3.1) | NVIDIA TensorRT-LLM for any platform contains a v… |
NVIDIA |
TensorRT-LLM |
2026-10-27T12:15:05.891Z | 2026-10-27T12:15:05.891Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000902 | QQQ SYSTEMS vulnerable to cross-site scripting | 2018-03-13T16:43+09:00 | 2018-06-14T13:39+09:00 |
| jvndb-2018-000901 | QQQ SYSTEMS vulnerable to cross-site scripting | 2018-03-13T16:43+09:00 | 2018-06-14T12:31+09:00 |
| jvndb-2018-000024 | Multiple vulnerabilities in CG-WGR1200 | 2018-03-09T13:56+09:00 | 2018-06-14T13:54+09:00 |
| jvndb-2018-000023 | WordPress plugin "WP All Import" vulnerable to cross-site scripting | 2018-03-08T14:10+09:00 | 2018-06-14T12:27+09:00 |
| jvndb-2018-000022 | WordPress plugin "WP All Import" vulnerable to cross-site scripting | 2018-03-08T14:10+09:00 | 2018-06-14T12:26+09:00 |
| jvndb-2018-000021 | Installer of WinShot may insecurely load Dynamic Link Libraries | 2018-03-05T15:10+09:00 | 2018-06-14T13:43+09:00 |
| jvndb-2018-000020 | Installer of JTrim may insecurely load Dynamic Link Libraries | 2018-03-05T14:07+09:00 | 2018-06-14T13:46+09:00 |
| jvndb-2018-000019 | Multiple vulnerabilities in Jubatus | 2018-03-02T13:45+09:00 | 2018-06-14T13:57+09:00 |
| jvndb-2018-000017 | Multiple vulnerabilities in WXR-1900DHP2 | 2018-02-26T14:10+09:00 | 2018-06-14T13:49+09:00 |
| jvndb-2018-000016 | LINE for iOS fails to verify SSL server certificates | 2018-02-22T15:29+09:00 | 2018-06-14T12:23+09:00 |
| jvndb-2018-000015 | Multiple vulnerabilities in FS010W | 2018-02-22T15:29+09:00 | 2018-04-11T12:31+09:00 |
| jvndb-2018-000013 | Insecure DLL Loading issue in multiple Trend Micro products | 2018-02-15T16:39+09:00 | 2018-04-11T12:23+09:00 |
| jvndb-2018-001389 | XXE Vulnerability in Hitachi Device Manager | 2018-02-14T14:59+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2018-001388 | Multiple Vulnerabilities in Hitachi Command Suite | 2018-02-14T14:58+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2018-000014 | Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries | 2018-02-13T15:43+09:00 | 2018-04-11T12:28+09:00 |
| jvndb-2018-000012 | Installer of "FLET'S Azukeru Backup Tool" may insecurely load Dynamic Link Libraries | 2018-02-13T15:37+09:00 | 2018-04-11T12:25+09:00 |
| jvndb-2018-000011 | MP Form Mail CGI eCommerce Edition vulnerable to OS command injection | 2018-02-08T12:21+09:00 | 2018-04-11T11:57+09:00 |
| jvndb-2018-000009 | The installer of Anshin net security for Windows may insecurely load Dynamic Link Libraries | 2018-02-06T15:05+09:00 | 2018-04-11T12:13+09:00 |
| jvndb-2018-000007 | Multiple I-O DATA network devices incorporating "MagicalFinder" vulnerable to OS command injection | 2018-02-06T14:22+09:00 | 2018-04-11T11:51+09:00 |
| jvndb-2018-000010 | WordPress plugin "MTS Simple Booking C" vulnerable to cross-site scripting | 2018-02-02T13:39+09:00 | 2018-04-11T11:53+09:00 |
| jvndb-2018-000008 | Spring Security and Spring Framework vulnerable to authentication bypass | 2018-02-02T12:28+09:00 | 2018-06-14T13:48+09:00 |
| jvndb-2018-000006 | Multiple vulnerabilities in epg search result viewer(kkcald) | 2018-02-01T13:58+09:00 | 2018-04-11T11:49+09:00 |
| jvndb-2017-004607 | Deep Discovery Email Inspector vulnerable to arbitrary code execution | 2018-01-31T13:43+09:00 | 2018-01-31T13:43+09:00 |
| jvndb-2018-000005 | WordPress plugin "WP Retina 2x" vulnerable to cross-site scripting | 2018-01-30T12:30+09:00 | 2018-04-11T11:53+09:00 |
| jvndb-2018-000004 | The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely load Dynamic Link Libraries | 2018-01-22T14:17+09:00 | 2018-04-11T11:44+09:00 |
| jvndb-2018-000003 | GroupSession vulnerable to open redirect | 2018-01-19T14:19+09:00 | 2018-04-11T11:37+09:00 |
| jvndb-2018-000002 | Nootka App for Android vulnerable to OS command injection | 2018-01-19T14:19+09:00 | 2018-04-11T11:46+09:00 |
| jvndb-2017-005606 | Multiple vulnerabilities in Deep Discovery Email Inspector | 2018-01-17T16:15+09:00 | 2018-01-17T16:15+09:00 |
| jvndb-2017-002290 | Trend Micro Control Manager vulnerable to SQL injection | 2018-01-17T16:15+09:00 | 2018-01-17T16:15+09:00 |
| jvndb-2017-010584 | AssetView and AssetView PLATINUM contain multiple vulnerabilities | 2018-01-12T15:32+09:00 | 2018-01-12T15:32+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1074 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1073 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1072 | Multiples vulnérabilités dans les produits IBM | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1071 | Multiples vulnérabilités dans Apache HTTP Server | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1070 | Multiples vulnérabilités dans Microsoft CBL Mariner | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1069 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1068 | Vulnérabilité dans Python | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1067 | Vulnérabilité dans Apache Struts | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1066 | Multiples vulnérabilités dans les produits Nextcloud | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1065 | Multiples vulnérabilités dans NetApp ONTAP | 2025-12-05T00:00:00.000000 | 2025-12-05T00:00:00.000000 |
| certfr-2025-avi-1064 | Multiples vulnérabilités dans les produits Microsoft | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1063 | Multiples vulnérabilités dans les produits Splunk | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1062 | Multiples vulnérabilités dans Wireshark | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1061 | Vulnérabilité dans PostgreSQL PgBouncer | 2025-12-04T00:00:00.000000 | 2025-12-04T00:00:00.000000 |
| certfr-2025-avi-1060 | Multiples vulnérabilités dans Python | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1059 | Multiples vulnérabilités dans Google Pixel | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1058 | Multiples vulnérabilités dans Google Chrome | 2025-12-03T00:00:00.000000 | 2025-12-03T00:00:00.000000 |
| certfr-2025-avi-1057 | Multiples vulnérabilités dans les produits VMware | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| certfr-2025-avi-1056 | Multiples vulnérabilités dans Google Android | 2025-12-02T00:00:00.000000 | 2025-12-02T00:00:00.000000 |
| certfr-2025-avi-1055 | Multiples vulnérabilités dans Zabbix | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1054 | Multiples vulnérabilités dans les produits VMware | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1053 | Vulnérabilité dans Stormshield Network VPN Client | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1052 | Vulnérabilité dans Mattermost Server | 2025-12-01T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-1051 | Multiples vulnérabilités dans les produits IBM | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1050 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1049 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1048 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1046 | Multiples vulnérabilités dans les produits Moxa | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1045 | Vulnérabilité dans MISP | 2025-11-27T00:00:00.000000 | 2025-11-28T00:00:00.000000 |