Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-100164 | 7.5 (v3.1) | User Enumeration in Rolantis Information Technologies'… |
Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. |
Agentis |
2026-10-27T12:03:27.458Z | 2026-10-27T12:03:27.458Z |
| cve-2026-106087 | 8.7 (v4.0) | TRO600 contains an arbitrary file read vulnerabil… |
Hitachi Energy |
TRO600 Series Firmware |
2026-10-27T11:56:54.738Z | 2026-10-27T11:56:54.738Z |
| cve-2026-10756 | 7.7 (v4.0) | TRO600 contains a vulnerability that allows an au… |
Hitachi Energy |
TRO600 Series Firmware |
2026-10-27T11:56:05.906Z | 2026-10-27T11:56:05.906Z |
| cve-2026-115408 | 5.5 (v3.1) | ML-KEM key-pair lookup can bind an unrelated or attack… |
Eclipse Foundation |
Eclipse KeyPont |
2026-10-27T11:55:15.600Z | 2026-10-27T11:55:15.600Z |
| cve-2026-13162 | 7.7 (v4.0) | An OS command vulnerability exists in CoreTec pro… |
Hitachi Energy |
CoreTec 5 |
2026-10-27T11:50:44.803Z | 2026-10-27T11:50:44.803Z |
| cve-2026-113644 | 5.5 (v4.0) | iofogctl command injection via Controller provisioning… |
Eclipse Foundation |
Eclipse ioFog |
2026-10-27T11:43:28.824Z | 2026-10-27T11:43:28.824Z |
| cve-2026-90728 | 6.3 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:39:36.832Z | 2026-10-29T10:45:47.578Z |
| cve-2026-105323 | 6.1 (v3.1) | Reflected XSS in Kulga Software's Kulga News Software |
Kulga Software and Telecommunications Limited Company |
Kulga News Software |
2026-10-27T11:39:34.238Z | 2026-10-27T11:39:34.238Z |
| cve-2026-90729 | 6.7 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:35:11.026Z | 2026-10-29T10:45:47.717Z |
| cve-2026-115216 | 9.1 (v4.0) | Eclipse ioFog Operator disables TLS certificate verifi… |
Eclipse Foundation |
Eclipse ioFog |
2026-10-27T11:34:47.619Z | 2026-10-27T11:34:47.619Z |
| cve-2026-41022 | 5.9 (v3.1) | Eaton easySoft improperly validates TLS certifica… |
Eaton |
easySoft |
2026-10-27T11:32:04.448Z | 2026-10-27T11:32:04.448Z |
| cve-2026-10752 | Advanced Custom Fields: Extended <= 0.9.2.6 - Missing … |
hwk-fr |
Advanced Custom Fields: Extended |
2026-10-27T11:32:04.243Z | 2026-10-29T01:52:00.370Z | |
| cve-2026-109995 | Advanced Views <= 3.9.6 - Unauthenticated Stored Cross… |
wplakeorg |
Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode |
2026-10-27T11:32:03.735Z | 2026-10-29T01:52:00.520Z | |
| cve-2026-90730 | 6.5 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:31:02.254Z | 2026-10-27T14:11:59.726Z |
| cve-2026-112362 | 9.1 (v3.1) | @fastify/express vulnerable to path-scoped middleware … |
@fastify/express |
@fastify/express |
2026-10-27T11:27:59.364Z | 2026-10-27T11:27:59.364Z |
| cve-2026-90731 | 4.9 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:26:19.331Z | 2026-10-29T01:52:06.174Z |
| cve-2026-41021 | 7.5 (v3.1) | Eaton easyE4 uses an insufficiently strong passwo… |
Eaton |
easyE4 |
2026-10-27T11:23:34.366Z | 2026-10-27T11:23:34.366Z |
| cve-2026-90732 | 4.9 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:21:01.459Z | 2026-10-29T01:52:06.323Z |
| cve-2026-117499 | 3.7 (v3.1) | @fastify/session vulnerable to session revocation bypa… |
@fastify/session |
@fastify/session |
2026-10-27T11:19:22.090Z | 2026-10-27T11:19:22.090Z |
| cve-2026-56084 | 5.8 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-27T11:15:06.091Z | 2026-10-27T11:15:06.091Z |
| cve-2026-102800 | 8.7 (v4.0) | Joomla Extension - dj-extensions.com - Unauthenticated… |
dj-extensions.com |
DJ-HelpfulArticles extension for Joomla |
2026-10-27T11:06:50.198Z | 2026-10-27T11:06:50.198Z |
| cve-2026-41020 | 7.5 (v3.1) | Eaton easyE4 uses a static nonce during authentic… |
Eaton |
easyE4 |
2026-10-27T11:05:51.545Z | 2026-10-27T11:05:51.545Z |
| cve-2026-4337 | 8.8 (v4.0) | Unrestricted Upload of File in PuMuKIT application |
PuMuKIT |
PuMuKIT |
2026-10-27T11:03:15.829Z | 2026-10-27T11:03:15.829Z |
| cve-2026-117541 | 6.9 (v4.0) 5.3 (v3.1) | svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicExcept… |
darylldoyle |
svg-sanitizer |
2026-10-27T10:59:34.783Z | 2026-10-27T14:12:13.476Z |
| cve-2026-117540 | 8.7 (v4.0) 7.5 (v3.1) | svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion Do… |
darylldoyle |
svg-sanitizer |
2026-10-27T10:59:34.119Z | 2026-10-27T10:59:34.119Z |
| cve-2026-117539 | 5.1 (v4.0) 3.5 (v3.1) | darylldoyle svg-sanitizer before 1.0.0 CSS Injection a… |
darylldoyle |
svg-sanitizer |
2026-10-27T10:59:33.466Z | 2026-10-27T10:59:33.466Z |
| cve-2026-117538 | 2.1 (v4.0) 4.1 (v3.1) | REDAXO before 5.21.0 Reflected XSS via Packages API fu… |
redaxo |
core |
2026-10-27T10:59:32.772Z | 2026-10-27T10:59:32.772Z |
| cve-2026-117537 | 2.1 (v4.0) 4.1 (v3.1) | REDAXO before 5.21.0 Reflected XSS via Metainfo API ty… |
redaxo |
core |
2026-10-27T10:59:32.121Z | 2026-10-27T14:12:21.902Z |
| cve-2026-117536 | 8.6 (v4.0) 8.8 (v3.1) | REDAXO before 5.21.3 CSRF Token Bypass via users/users… |
redaxo |
core |
2026-10-27T10:59:31.445Z | 2026-10-27T10:59:31.445Z |
| cve-2026-117535 | 5.1 (v4.0) 6.1 (v3.1) | REDAXO before 5.21.3 Reflected XSS via opener_link in … |
redaxo |
core |
2026-10-27T10:59:30.773Z | 2026-10-27T10:59:30.773Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-010236 | Cross-site Scripting Vulnerability in Fujitsu NetCOBOL | 2018-01-12T15:07+09:00 | 2018-01-12T15:07+09:00 |
| jvndb-2017-004687 | Cross-site Scripting Vulnerability in Fujitsu Interstage List Works | 2018-01-12T14:58+09:00 | 2018-01-12T14:58+09:00 |
| jvndb-2018-000001 | Lhaplus vulnerable to improper verification when expanding ZIP64 archives | 2018-01-11T14:18+09:00 | 2018-04-04T12:33+09:00 |
| jvndb-2017-000252 | MQTT.js issue in handling PUBLISH packets | 2017-12-25T14:00+09:00 | 2018-04-04T14:02+09:00 |
| jvndb-2017-000251 | The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries | 2017-12-22T15:50+09:00 | 2018-04-04T14:04+09:00 |
| jvndb-2017-000250 | The installer of Music Center for PC may insecurely load Dynamic Link Libraries | 2017-12-22T15:50+09:00 | 2018-04-04T13:53+09:00 |
| jvndb-2017-000248 | OneThird CMS vulnerable to directory traversal | 2017-12-19T13:48+09:00 | 2018-04-04T13:58+09:00 |
| jvndb-2017-000249 | Multiple vulnerabilities in H2O | 2017-12-18T15:17+09:00 | 2018-04-04T13:49+09:00 |
| jvndb-2017-010280 | Fluentd vulenrable to escape sequence injection | 2017-12-11T14:13+09:00 | 2017-12-11T14:13+09:00 |
| jvndb-2017-000247 | Qt for Android environment variables alteration | 2017-12-11T13:40+09:00 | 2018-03-14T13:44+09:00 |
| jvndb-2017-000246 | Qt for Android vulnerable to OS command injection | 2017-12-11T13:40+09:00 | 2018-03-14T13:48+09:00 |
| jvndb-2017-010275 | Cross-site Scripting Vulnerability in JP1/Service Support and JP1/Integrated Management - Service Support | 2017-12-11T11:46+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-000245 | The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries | 2017-12-06T14:42+09:00 | 2018-03-14T14:07+09:00 |
| jvndb-2017-000244 | Multiple vulnerabilities in multiple Buffalo broadband routers | 2017-12-01T16:17+09:00 | 2018-03-14T14:15+09:00 |
| jvndb-2017-010043 | Cross-site Scripting Vulnerability in JP1/Operations Analytics | 2017-12-01T14:59+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-000243 | Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection | 2017-11-30T15:50+09:00 | 2018-03-14T14:20+09:00 |
| jvndb-2017-000241 | Multiple vulnerabilities in Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1 | 2017-11-30T15:45+09:00 | 2018-03-14T14:13+09:00 |
| jvndb-2017-000242 | StreamRelay.net.exe and sDNSProxy.exe vulnerable to denial-of-service (DoS) | 2017-11-29T14:54+09:00 | 2018-03-14T14:26+09:00 |
| jvndb-2017-009884 | QND Advance/Standard vulnerable to directory traversal | 2017-11-28T11:26+09:00 | 2018-03-14T14:17+09:00 |
| jvndb-2017-000240 | PWR-Q200 vulnerable to DNS cache poisoning attacks | 2017-11-22T13:51+09:00 | 2018-03-14T14:19+09:00 |
| jvndb-2017-000239 | The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries | 2017-11-21T15:40+09:00 | 2018-03-14T14:25+09:00 |
| jvndb-2017-000238 | Robotic appliance COCOROBO vulnerable to session management | 2017-11-16T14:03+09:00 | 2018-03-14T14:09+09:00 |
| jvndb-2017-000237 | Multiple vulnerabilities in BOOK WALKER for Windows/Mac | 2017-11-14T15:19+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000236 | WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references | 2017-11-14T13:26+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000235 | CS-Cart Japanese Edition vulnerable to cross-site scripting | 2017-11-13T15:30+09:00 | 2018-03-07T13:36+09:00 |
| jvndb-2017-000234 | Installer of HYPER SBI may insecurely load Dynamic Link Libraries | 2017-11-09T12:29+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000233 | I-O DATA LAN DISK Connect vulnerable to denial-of-service (DoS) | 2017-11-06T13:48+09:00 | 2018-03-07T14:01+09:00 |
| jvndb-2017-000232 | Wi-Fi STATION L-02F vulnerable to buffer overflow | 2017-11-06T13:48+09:00 | 2018-03-07T14:00+09:00 |
| jvndb-2017-000213 | Installer of "Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries | 2017-11-02T13:57+09:00 | 2018-03-14T13:48+09:00 |
| jvndb-2017-000231 | OpenAM (Open Source Edition) vulnerable to authentication bypass | 2017-11-01T15:36+09:00 | 2018-03-14T14:03+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1044 | Vulnérabilité dans Mattermost Server | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1043 | Multiples vulnérabilités dans les produits Splunk | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1042 | Multiples vulnérabilités dans GitLab | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1041 | Vulnérabilité dans Synology ActiveProtect Agent | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1040 | Vulnérabilité dans Postfix | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1039 | Vulnérabilité dans Kaspersky Security Center | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1034 | Multiples vulnérabilités dans les produits IBM | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1033 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1032 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1031 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1030 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1029 | Vulnérabilité dans les produits Kaspersky | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1028 | Vulnérabilité dans GnuTLS | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1027 | Multiples vulnérabilités dans les produits SonicWall | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1026 | Multiples vulnérabilités dans Wireshark | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1025 | Multiples vulnérabilités dans les produits Atlassian | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1024 | Multiples vulnérabilités dans les produits VMware | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1023 | Multiples vulnérabilités dans les produits Fortinet | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1022 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1021 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1020 | Multiples vulnérabilités dans les produits SolarWinds | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1019 | Multiples vulnérabilités dans Mattermost Server | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1018 | Multiples vulnérabilités dans Google Chrome | 2025-11-18T00:00:00.000000 | 2025-11-18T00:00:00.000000 |
| certfr-2025-avi-1017 | Multiples vulnérabilités dans Mattermost Server | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1016 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |
| certfr-2025-avi-1015 | Multiples vulnérabilités dans les produits NetApp | 2025-11-17T00:00:00.000000 | 2025-11-17T00:00:00.000000 |