Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107145 | 6.3 (v4.0) | Lack of rate-limiting in 2fa code check mechanism in t… |
alexandregz |
twofactor_gauthenticator |
2026-10-27T09:34:36.692Z | 2026-10-27T09:34:36.692Z |
| cve-2026-102787 | 5.3 (v4.0) | Joomla Extension - phoca.cz - CSRF in category managem… |
phoca.cz |
Phoca Download extension for Joomla |
2026-10-27T09:32:09.184Z | 2026-10-27T09:32:09.184Z |
| cve-2026-102788 | 9.3 (v4.0) | Joomla Extension - balbooa.com - Unauthenticated SQL i… |
balbooa.com |
Gridbox extension for Joomla |
2026-10-27T09:30:08.133Z | 2026-10-27T09:30:08.133Z |
| cve-2026-102789 | 9.3 (v4.0) | Joomla Extension - balbooa.com - Missing Authorization… |
balbooa.com |
Gridbox extension for Joomla |
2026-10-27T09:23:55.679Z | 2026-10-27T09:23:55.679Z |
| cve-2026-117494 | 8.3 (v4.0) | Multiple vulnerabilities in Sisense’s Cloud BI Platform |
Sisense |
Cloud BI Platform |
2026-10-27T09:21:06.837Z | 2026-10-27T09:21:06.837Z |
| cve-2026-117493 | 8.3 (v4.0) | Multiple vulnerabilities in Sisense’s Cloud BI Platform |
Sisense |
Cloud BI Platform |
2026-10-27T09:15:40.736Z | 2026-10-27T09:17:28.701Z |
| cve-2026-85299 | 8.3 (v4.0) | Missing Authorization in Compute Engine allows Cross-P… |
Google Cloud |
Compute Engine |
2026-10-27T09:02:32.461Z | 2026-10-27T09:02:32.461Z |
| cve-2026-92885 | Qode Membership <= 2.0.6.2 - Authentication Bypass via… |
Qode Themes |
Qode Membership |
2026-10-27T08:28:43.933Z | 2026-10-27T14:13:43.451Z | |
| cve-2026-65213 | 6.6 (v3.1) | Supermicro BMC IPMI feature contains a Arbitrary Comma… |
SMCI |
MBD-X12SPI |
2026-10-27T08:15:32.294Z | 2026-10-27T08:15:32.294Z |
| cve-2026-65211 | 7.2 (v3.1) | Supermicro BMC IPMI feature contains Critical Privile… |
SMCI |
MBD-X12SPI |
2026-10-27T08:12:15.451Z | 2026-10-27T08:12:15.451Z |
| cve-2026-65210 | 4.9 (v3.1) | Supermicro BMC IPMI feature contains Arbitrary File Ac… |
SMCI |
MBD-X12SPI |
2026-10-27T08:07:16.704Z | 2026-10-27T08:07:16.704Z |
| cve-2026-65220 | 8.8 (v3.1) | Supermicro BMC IPMI feature contains a Privilege escal… |
SMCI |
MBD-X12SPI |
2026-10-27T08:02:49.783Z | 2026-10-27T08:02:49.783Z |
| cve-2026-65219 | 7.4 (v3.1) | Supermicro BMC contains Unordered RAKP Message 3 Grant… |
SMCI |
MBD-X12SPI |
2026-10-27T07:57:12.003Z | 2026-10-27T07:57:12.003Z |
| cve-2026-18451 | 3.1 (v3.1) | Supermicro BMC's iKVM feature is vulnerable to KVM ses… |
SMCI |
MBD-X12SPI |
2026-10-27T07:51:10.336Z | 2026-10-27T07:51:10.336Z |
| cve-2026-18450 | 9.8 (v3.1) | Supermicro BMC contains Unprotected IPMI Commands Acc… |
SMCI |
X12SPI |
2026-10-27T07:46:02.598Z | 2026-10-27T07:46:02.598Z |
| cve-2026-10511 | Jupiter X Core <= 4.61.0 - Authenticated (Contributor+… |
artbees |
Jupiter X Core |
2026-10-27T07:42:53.188Z | 2026-10-29T01:52:00.657Z | |
| cve-2026-18449 | 7.5 (v3.1) | Supermicro BMC contains a SMCRAKP Fixed Key vulnerability |
SMCI |
X12SPI |
2026-10-27T07:32:36.594Z | 2026-10-27T07:32:36.594Z |
| cve-2026-107472 | 4.3 (v4.0) | Out-of-bounds read vulnerability in QTextCodec TSCII e… |
qt |
Qt |
2026-10-27T07:32:31.991Z | 2026-10-27T07:32:31.991Z |
| cve-2026-16521 | 7.2 (v3.1) | Supermicro BMC's syslog feature contains a command inj… |
SMCI |
MBD-X12STW-F |
2026-10-27T07:22:05.661Z | 2026-10-27T07:22:05.661Z |
| cve-2026-111461 | 7.5 (v4.0) | SMS upgrade argument reaches system() unescaped in OnC… |
Moxa |
OnCell G3150A-LTE Series |
2026-10-27T07:17:01.566Z | 2026-10-27T07:17:01.566Z |
| cve-2026-101034 | 6.8 (v4.0) | Security Advisory for offline recovery of Symantec GSS… |
Broadcom |
Symantec Ghost Solution Suite |
2026-10-27T07:15:11.281Z | 2026-10-27T07:15:11.281Z |
| cve-2026-111460 | 7.7 (v4.0) | Static HTTPS private key and CA private key in firmwar… |
Moxa |
OnCell G3150A-LTE Series |
2026-10-27T07:13:51.550Z | 2026-10-27T07:13:51.550Z |
| cve-2026-111459 | 7.6 (v4.0) | Unauthenticated server-supplied OpenVPN configuration … |
Moxa |
Moxa Remote Connect Suite (MRC Client) |
2026-10-27T07:08:17.598Z | 2026-10-27T07:08:17.598Z |
| cve-2026-106174 | 6.7 (v3.1) | A improper locking vulnerability in Fortinet Fort… |
Fortinet |
FortiOS |
2026-10-27T06:54:54.066Z | 2026-10-27T10:13:38.390Z |
| cve-2026-105946 | 5.3 (v4.0) | Out-of-bounds read vulnerability in NTLM authenticatio… |
qt |
qt |
2026-10-27T06:45:36.400Z | 2026-10-27T06:45:36.400Z |
| cve-2026-103325 | TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthen… |
Unknown |
TiendaCrypto para WooCommerce |
2026-10-27T06:42:43.940Z | 2026-10-28T17:36:08.352Z | |
| cve-2026-103359 | PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthent… |
Unknown |
PayDunya WooCommerce Payment Gateway |
2026-10-27T06:42:43.340Z | 2026-10-28T17:35:39.229Z | |
| cve-2026-110910 | 3.7 (v3.1) 6.3 (v4.0) | qs.stringify with allowEmptyArrays does not encode the… |
ljharb |
qs |
2026-10-27T06:42:42.365Z | 2026-10-27T19:32:36.456Z |
| cve-2026-75891 | Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Objec… |
themeum |
Kirki – Freeform Page Builder, Website Builder & Customizer |
2026-10-27T06:40:42.359Z | 2026-10-29T01:52:00.797Z | |
| cve-2026-103312 | N/A | Payment Integration Wompi <= 4.0.1 - Unauthenticated P… |
Unknown |
Payment Integration Wompi |
2026-10-27T06:00:20.103Z | 2026-10-28T17:58:09.938Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000180 | Multiple vulnerabilities in multiple Buffalo wireless LAN routers | 2017-07-20T14:13+09:00 | 2018-01-24T12:34+09:00 |
| jvndb-2017-000179 | Multiple Buffalo wireless LAN access point devices do not properly perform authentication | 2017-07-20T14:12+09:00 | 2017-07-20T14:12+09:00 |
| jvndb-2017-005137 | Multiple Vulnerabilities in Hitachi Automation Director and Hitachi Infrastructure Analytics Advisor | 2017-07-19T15:44+09:00 | 2017-07-19T15:44+09:00 |
| jvndb-2017-000176 | SONY Portable Wireless Server WG-C10 fails to restrict access permissions | 2017-07-19T15:07+09:00 | 2018-02-14T12:02+09:00 |
| jvndb-2017-000175 | Multiple vulnerabilities SONY Portable Wireless Server WG-C10 | 2017-07-19T15:07+09:00 | 2018-01-24T12:34+09:00 |
| jvndb-2017-000174 | Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries | 2017-07-14T13:38+09:00 | 2022-03-31T17:43+09:00 |
| jvndb-2017-000172 | FileCapsule Deluxe Portable and Encrypted Files in Self-Decryption Format created by FileCapsule Deluxe Portable may insecurely load Dynamic Link Libraries | 2017-07-13T14:35+09:00 | 2018-02-07T16:48+09:00 |
| jvndb-2017-000173 | Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries | 2017-07-12T14:42+09:00 | 2018-02-07T16:48+09:00 |
| jvndb-2017-000171 | Installers of Mozilla Firefox and Thunderbird for Windows may insecurely load Dynamic Link Libraries | 2017-07-11T13:48+09:00 | 2018-08-30T18:03+09:00 |
| jvndb-2017-000170 | Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries | 2017-07-10T13:57+09:00 | 2018-02-16T13:26+09:00 |
| jvndb-2016-005802 | Microsoft IME may insecurely load Dynamic Link Libraries | 2017-07-07T15:47+09:00 | 2017-07-07T15:47+09:00 |
| jvndb-2017-000169 | Installers of Lhaz and Lhaz+, and Self-Extracting Archives created by Lhaz or Lhaz+ may insecurely load Dynamic Link Libraries | 2017-07-07T14:18+09:00 | 2018-02-07T12:19+09:00 |
| jvndb-2017-000164 | WordPress plugin "Shortcodes Ultimate" vulnerable to directory traversal | 2017-07-06T13:41+09:00 | 2018-02-07T11:52+09:00 |
| jvndb-2017-000162 | Installer of Douroshisetu Kihon Data Sakusei System may insecurely load Dynamic Link Libraries | 2017-07-04T14:43+09:00 | 2018-02-07T12:32+09:00 |
| jvndb-2017-000161 | Installer of Douro Kouji Kanseizutou Check Program may insecurely load Dynamic Link Libraries | 2017-07-04T14:43+09:00 | 2018-02-07T12:32+09:00 |
| jvndb-2017-000159 | WordPress plugin "Responsive Lightbox" vulnerable to cross-site scripting | 2017-07-04T14:02+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000160 | MFC-J960DWN vulnerable to cross-site request forgery | 2017-07-04T13:59+09:00 | 2018-02-07T11:52+09:00 |
| jvndb-2017-000157 | Cybozu Garoon vulnerable to cross-site scripting | 2017-07-03T15:23+09:00 | 2018-02-07T11:52+09:00 |
| jvndb-2017-000156 | Cybozu Garoon vulnerable to session fixation | 2017-07-03T15:22+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2017-000155 | Cybozu Garoon fails to restrict access permission | 2017-07-03T15:22+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2017-000158 | Installer and self-extracting archive containing the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system may insecurely load Dynamic Link Libraries | 2017-07-03T14:14+09:00 | 2018-02-07T12:20+09:00 |
| jvndb-2017-002225 | Cross-site Scripting Vulnerability in multiple Hitachi products | 2017-06-30T15:56+09:00 | 2017-06-30T15:56+09:00 |
| jvndb-2017-003108 | Multiple Vulnerabilities in Hitachi IT Operations Director and JP1/IT Desktop Management | 2017-06-30T15:55+09:00 | 2017-06-30T15:55+09:00 |
| jvndb-2016-008607 | Vulnerability in Cosminexus HTTP Server and Hitachi Web Server | 2017-06-30T15:55+09:00 | 2019-07-25T14:14+09:00 |
| jvndb-2017-000152 | Installer of Shinseiyou Sougou Soft provided by The Ministry of Justice may insecurely load Dynamic Link Libraries | 2017-06-30T14:19+09:00 | 2018-02-07T12:22+09:00 |
| jvndb-2017-000153 | Installer of PDF Digital Signature Plugin provided by the Ministry of Justice may insecurely load Dynamic Link Libraries | 2017-06-30T14:18+09:00 | 2018-02-07T12:21+09:00 |
| jvndb-2017-000145 | Installer of Setup file of advance preparation for e-Tax software (WEB version) may insecurely load Dynamic Link Libraries | 2017-06-28T16:40+09:00 | 2018-02-07T13:40+09:00 |
| jvndb-2017-000151 | Cross-site request forgery vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000150 | OS command injection vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000147 | Non-documented developer's screen in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:28+09:00 | 2018-02-14T12:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0954 | Multiples vulnérabilités dans Liferay | 2025-11-03T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0953 | Vulnérabilité dans Elastic Cloud Enterprise | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0952 | Vulnérabilité dans Mattermost Server | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0951 | Multiples vulnérabilités dans Axis OS | 2025-11-03T00:00:00.000000 | 2025-11-03T00:00:00.000000 |
| certfr-2025-avi-0950 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0949 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0948 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0947 | Multiples vulnérabilités dans les produits IBM | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0946 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0945 | Vulnérabilité dans Qnap NetBak PC Agent | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0944 | Vulnérabilité dans Liferay | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0943 | Multiples vulnérabilités dans les produits Centreon | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0942 | Vulnérabilité dans Dovecot | 2025-10-31T00:00:00.000000 | 2025-10-31T00:00:00.000000 |
| certfr-2025-avi-0941 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0940 | Vulnérabilité dans Liferay | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0939 | Multiples vulnérabilités dans les produits Splunk | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0938 | Multiples vulnérabilités dans les produits VMware | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0937 | Multiples vulnérabilités dans Google Chrome | 2025-10-30T00:00:00.000000 | 2025-10-30T00:00:00.000000 |
| certfr-2025-avi-0936 | Multiples vulnérabilités dans Mattermost Server | 2025-10-29T00:00:00.000000 | 2025-12-01T00:00:00.000000 |
| certfr-2025-avi-0935 | Multiples vulnérabilités dans les produits VMware | 2025-10-29T00:00:00.000000 | 2025-10-29T00:00:00.000000 |
| certfr-2025-avi-0934 | Vulnérabilité dans les produits Mozilla | 2025-10-29T00:00:00.000000 | 2025-10-29T00:00:00.000000 |
| certfr-2025-avi-0933 | Multiples vulnérabilités dans Apache Tomcat | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0932 | Multiples vulnérabilités dans Liferay | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0931 | Vulnérabilité dans StrongSwan | 2025-10-28T00:00:00.000000 | 2025-10-28T00:00:00.000000 |
| certfr-2025-avi-0930 | Vulnérabilité dans Microsoft Windows Server Update Service | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0929 | Vulnérabilité dans le client VPN de TheGreenBow | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0928 | Vulnérabilité dans Microsoft Configuration Manager | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0927 | Vulnérabilité dans Xen | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0926 | Vulnérabilité dans le pilote ODBC de MongoDB | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |
| certfr-2025-avi-0925 | Vulnérabilité dans les produits Belden | 2025-10-27T00:00:00.000000 | 2025-10-27T00:00:00.000000 |