Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103332 | N/A | Payex Payment Gateway for WooCommerce <= 1.2.10 - Unau… |
Unknown |
Payex Payment Gateway for Woocommerce |
2026-10-27T06:00:19.925Z | 2026-10-28T17:58:10.127Z |
| cve-2026-117472 | 4.3 (v3.1) | URL prefix handling permits API key read-scope bypass … |
esaqa GmbH |
Psono |
2026-10-27T05:56:16.775Z | 2026-10-27T05:56:16.775Z |
| cve-2026-117471 | 5.4 (v3.1) | User-controlled Duo host permits authenticated SSRF in… |
esaqa GmbH |
Psono |
2026-10-27T05:55:07.068Z | 2026-10-27T05:55:07.068Z |
| cve-2026-117470 | 6.5 (v3.1) | WebAuthn assertion replay permits second-factor bypass… |
esaqa GmbH |
Psono |
2026-10-27T05:53:41.709Z | 2026-10-27T05:53:41.709Z |
| cve-2026-117469 | 5.4 (v3.1) | File-transfer type confusion permits unauthorized repo… |
esaqa GmbH |
Psono |
2026-10-27T05:52:24.709Z | 2026-10-27T05:52:24.709Z |
| cve-2026-117468 | 6.5 (v3.1) | Device-code claim permits restricted token escalation … |
esaqa GmbH |
Psono |
2026-10-27T05:41:30.742Z | 2026-10-27T05:59:08.920Z |
| cve-2026-111820 | Analytics Insights <= 6.3.12 - Unauthenticated Stored … |
deconf |
Analytics Insights – Google Analytics Dashboard for WordPress |
2026-10-27T05:30:30.909Z | 2026-10-29T01:52:00.940Z | |
| cve-2026-88781 | 6.8 (v4.0) | Untrusted Pointer Dereference in ASUS certain mot… |
ASUS |
motherboards firmware |
2026-10-27T02:01:00.588Z | 2026-10-27T02:01:00.588Z |
| cve-2026-116640 | Saruf-Ratul HR-Payroll-Management-System chat.php cros… |
Saruf-Ratul |
HR-Payroll-Management-System |
2026-10-27T01:30:24.793Z | 2026-10-27T14:13:53.511Z | |
| cve-2026-116639 | MD-MAFUJUL-HASAN Online-Payroll-Management-System chat… |
MD-MAFUJUL-HASAN |
Online-Payroll-Management-System |
2026-10-27T01:15:24.435Z | 2026-10-27T01:15:24.435Z | |
| cve-2026-116839 | 7.1 (v3.1) | A malicious actor who lures an authenticated user… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:51:23.745Z | 2026-10-29T01:52:06.475Z |
| cve-2026-116838 | 8.8 (v3.1) | A malicious actor who lures an authenticated user… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:48:17.932Z | 2026-10-27T00:48:17.932Z |
| cve-2026-116623 | code-projects Simple Content Management System Admin w… |
code-projects |
Simple Content Management System |
2026-10-27T00:45:20.926Z | 2026-10-27T00:45:20.926Z | |
| cve-2026-116837 | 8.8 (v3.1) | A malicious actor with access to the adjacent net… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:44:48.129Z | 2026-10-27T00:44:48.129Z |
| cve-2026-116844 | 6.3 (v4.0) 4.8 (v3.1) | Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES … |
fclairamb |
ftpserverlib |
2026-10-27T00:34:02.373Z | 2026-10-29T10:52:21.022Z |
| cve-2026-116843 | 8.7 (v4.0) 8.8 (v3.1) | Mistral Vibe before 3.0.3 RCE via Git Filter Drivers i… |
mistralai |
mistral-vibe |
2026-10-27T00:34:01.754Z | 2026-10-27T00:34:01.754Z |
| cve-2026-116842 | 6.9 (v4.0) 6.1 (v3.1) | DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow v… |
diasurgical |
DevilutionX |
2026-10-27T00:34:01.167Z | 2026-10-27T00:34:01.167Z |
| cve-2026-116841 | 6.8 (v4.0) 5.5 (v3.1) | DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via… |
diasurgical |
DevilutionX |
2026-10-27T00:34:00.513Z | 2026-10-27T00:34:00.513Z |
| cve-2026-116840 | 6.9 (v4.0) 6.1 (v3.1) | llama.cpp b5854 before b11275 Integer Overflow in gguf… |
ggml-org |
llama.cpp |
2026-10-27T00:33:59.834Z | 2026-10-27T14:14:10.931Z |
| cve-2026-116829 | 6.9 (v4.0) 6.6 (v3.1) | llama.cpp b10398 before b11301 Integer Overflow in ggu… |
ggml-org |
llama.cpp |
2026-10-27T00:33:59.223Z | 2026-10-27T00:33:59.223Z |
| cve-2026-116816 | 8.5 (v4.0) 7.8 (v3.1) | llama.cpp b5899 before b10261 Heap Out-of-Bounds Write… |
ggml-org |
llama.cpp |
2026-10-27T00:33:58.581Z | 2026-10-27T00:33:58.581Z |
| cve-2025-71439 | 6.8 (v4.0) 5.5 (v3.1) | llama.cpp before b5649 Heap Out-of-Bounds Read via lla… |
ggml-org |
llama.cpp |
2026-10-27T00:33:57.956Z | 2026-10-27T00:33:57.956Z |
| cve-2024-58400 | 8.8 (v4.0) 8.2 (v3.1) | llama.cpp before b3701 Out-of-Bounds Read in llama_dec… |
ggml-org |
llama.cpp |
2026-10-27T00:33:57.354Z | 2026-10-27T14:14:21.519Z |
| cve-2024-58399 | 6.9 (v4.0) 6.1 (v3.1) | llama.cpp before b2731 Out-of-Bounds Read via GGUF Ten… |
ggml-org |
llama.cpp |
2026-10-27T00:33:56.695Z | 2026-10-27T00:33:56.695Z |
| cve-2026-116836 | 8.8 (v3.1) | A malicious actor with access to the adjacent net… |
Ubiquiti Inc |
airMAX M |
2026-10-27T00:32:06.956Z | 2026-10-27T00:32:06.956Z |
| cve-2026-116620 | Tencent RapidJSON Regex stream.h Take out-of-bounds |
Tencent |
RapidJSON |
2026-10-27T00:30:22.548Z | 2026-10-27T14:14:50.011Z | |
| cve-2026-116608 | DAMO Academy VideoLLaMA2 Model Loading __init__.py loa… |
DAMO Academy |
VideoLLaMA2 |
2026-10-27T00:15:18.298Z | 2026-10-27T00:15:18.298Z | |
| cve-2026-116605 | SourceCodester Online Food Ordering System order.php c… |
SourceCodester |
Online Food Ordering System |
2026-10-27T00:00:20.582Z | 2026-10-27T00:00:20.582Z | |
| cve-2026-78845 | N/A | Aidot products Linkind Matter Smart Plug 1.01.32,… |
n/a |
n/a |
2026-10-27T00:00:00.000Z | 2026-10-27T14:17:16.840Z |
| cve-2026-107067 | N/A | An issue in Shirt Pocket's SuperDuper! 4.0.9 and … |
n/a |
n/a |
2026-10-27T00:00:00.000Z | 2026-10-27T13:57:41.003Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000149 | Hard-coded credentials vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:23+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000148 | Improper access control vulnerability in Toshiba Lighting & Technology Corporation Home gateway | 2017-06-28T10:23+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000144 | Denshi Nyusatsu Check Tool provided by Ministry of Education, Culture, Sports, Science and Technology may insecurely load Dynamic Link Libraries | 2017-06-26T14:28+09:00 | 2018-02-07T13:40+09:00 |
| jvndb-2017-000142 | Installer of Charamin OMP may insecurely load Dynamic Link Libraries | 2017-06-23T14:38+09:00 | 2018-02-07T12:32+09:00 |
| jvndb-2017-000120 | [Simeji for Windows] installer may insecurely load Dynamic Link Libraries | 2017-06-21T18:15+09:00 | 2017-06-21T18:15+09:00 |
| jvndb-2017-000138 | HOME SPOT CUBE2 vulnerable to improper authentication in WebUI | 2017-06-21T13:45+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000137 | HOME SPOT CUBE2 vulnerable to OS command injection in WebUI | 2017-06-21T13:45+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000136 | HOME SPOT CUBE2 vulnerable to buffer overflow in WebUI | 2017-06-21T13:44+09:00 | 2018-02-14T11:59+09:00 |
| jvndb-2017-000135 | HOME SPOT CUBE2 vulnerable to OS command injection in clock settings | 2017-06-21T13:44+09:00 | 2018-02-14T11:54+09:00 |
| jvndb-2017-000141 | Multiple I-O DATA network camera products vulnerable to cross-site request forgery | 2017-06-20T13:59+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000140 | WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting | 2017-06-20T13:58+09:00 | 2018-02-14T12:10+09:00 |
| jvndb-2017-000139 | WordPress plugin "WP Job Manager" fails to restrict access permissions | 2017-06-15T14:32+09:00 | 2017-06-15T14:32+09:00 |
| jvndb-2017-000133 | Source code security studying tool iCodeChecker vulnerable to cross-site scripting | 2017-06-13T14:50+09:00 | 2018-02-14T13:48+09:00 |
| jvndb-2017-000132 | WordPress plugin "WP-Members" vulnerable to cross-site scripting | 2017-06-13T14:50+09:00 | 2018-02-07T11:52+09:00 |
| jvndb-2017-000128 | Open redirect vulnerability in WordPress plugin "WordPress Download Manager" | 2017-06-13T14:11+09:00 | 2018-01-24T12:21+09:00 |
| jvndb-2017-000127 | Cross-site scripting vulnerability in WordPress plugin "WordPress Download Manager" | 2017-06-13T14:11+09:00 | 2018-01-24T12:24+09:00 |
| jvndb-2017-000116 | Installer of QuickTime for Windows may insecurely load Dynamic Link Libraries | 2017-06-13T13:51+09:00 | 2018-02-14T11:58+09:00 |
| jvndb-2017-000130 | Installer of electronic tendering and bid opening system provided by Acquisition, Technology & Logistics Agency may insecurely invoke an executable file | 2017-06-12T14:49+09:00 | 2018-02-14T13:52+09:00 |
| jvndb-2017-000131 | Cybozu KUNAI for Android vulnerable to cross-site scripting | 2017-06-12T13:36+09:00 | 2018-01-24T12:34+09:00 |
| jvndb-2017-000129 | Installer of "Setup file of advance preparation" may insecurely load Dinamic Link Libraries | 2017-06-09T15:59+09:00 | 2018-02-14T13:55+09:00 |
| jvndb-2017-000126 | Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) may insecurely load Dynamic Link Libraries | 2017-06-09T15:48+09:00 | 2018-02-14T14:00+09:00 |
| jvndb-2017-000117 | Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries | 2017-06-09T13:49+09:00 | 2018-02-14T11:58+09:00 |
| jvndb-2017-000124 | The installer of SemiDynaEXE provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries | 2017-06-08T15:31+09:00 | 2018-01-24T12:15+09:00 |
| jvndb-2017-000123 | The installer of TKY2JGD provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries | 2017-06-08T15:31+09:00 | 2018-01-24T12:15+09:00 |
| jvndb-2017-000122 | The installer of PatchJGD(Hyoko) provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries | 2017-06-08T15:31+09:00 | 2018-01-24T12:15+09:00 |
| jvndb-2017-000121 | The installer of PatchJGD provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries | 2017-06-08T15:31+09:00 | 2018-01-24T12:15+09:00 |
| jvndb-2017-000125 | AppCheck may insecurely invoke an executable file | 2017-06-07T14:54+09:00 | 2018-01-24T12:15+09:00 |
| jvndb-2017-000115 | WordPress plugin "Multi Feed Reader" vulnerable to SQL injection | 2017-06-06T14:54+09:00 | 2018-01-17T13:58+09:00 |
| jvndb-2017-000113 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:21+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000112 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure | 2017-06-06T14:20+09:00 | 2017-11-27T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0924 | Multiples vulnérabilités dans les produits IBM | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0923 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0922 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0921 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0920 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0919 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0918 | Multiples vulnérabilités dans Liferay | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0917 | Multiples vulnérabilités dans les produits Moxa | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0916 | Vulnérabilité dans le pilote MongoDB Pilote Atlas SQL ODBC | 2025-10-24T00:00:00.000000 | 2025-10-24T00:00:00.000000 |
| certfr-2025-avi-0915 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0914 | Multiples vulnérabilités dans les produits Centreon | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0913 | Multiples vulnérabilités dans ISC BIND | 2025-10-23T00:00:00.000000 | 2025-10-23T00:00:00.000000 |
| certfr-2025-avi-0912 | Vulnérabilité dans SolarWinds Observability | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0911 | Multiples vulnérabilités dans Oracle Weblogic | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0910 | Multiples vulnérabilités dans Oracle Virtualization | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0909 | Multiples vulnérabilités dans Oracle Systems | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0908 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0907 | Multiples vulnérabilités dans Oracle MySQL | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0906 | Multiples vulnérabilités dans Oracle Java SE | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0905 | Multiples vulnérabilités dans Oracle Database Server | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0904 | Multiples vulnérabilités dans GitLab | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0903 | Multiples vulnérabilités dans les produits Atlassian | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0902 | Multiples vulnérabilités dans Xen | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0901 | Vulnérabilité dans Google Chrome | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0900 | Multiples vulnérabilités dans Centreon Web | 2025-10-22T00:00:00.000000 | 2025-10-22T00:00:00.000000 |
| certfr-2025-avi-0899 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0898 | Vulnérabilité dans Microsoft Edge | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0897 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-10-20T00:00:00.000000 | 2025-10-20T00:00:00.000000 |
| certfr-2025-avi-0896 | Multiples vulnérabilités dans les produits IBM | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0895 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |