Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116604 | SourceCodester Online Food Ordering System delete_admi… |
SourceCodester |
Online Food Ordering System |
2026-10-26T23:45:20.080Z | 2026-10-27T14:15:12.149Z | |
| cve-2026-116603 | SourceCodester Online Food Ordering System add_food.ph… |
SourceCodester |
Online Food Ordering System |
2026-10-26T23:30:13.680Z | 2026-10-26T23:30:13.680Z | |
| cve-2026-111422 | Apache Airflow SSH provider: SSHRemoteJobOperator: `en… |
Apache Software Foundation |
Apache Airflow SSH provider |
2026-10-26T23:29:30.363Z | 2026-10-29T10:38:09.290Z | |
| cve-2026-116828 | 6.9 (v4.0) 4.9 (v3.1) | YesWiki before 4.7.0 SQL Injection via despam.php INTE… |
YesWiki |
yeswiki |
2026-10-26T23:05:52.662Z | 2026-10-26T23:05:52.662Z |
| cve-2026-116827 | 8.2 (v4.0) 6.8 (v3.1) | YesWiki before 4.7.0 SSRF via copyUrlToLocalFile in Ba… |
YesWiki |
yeswiki |
2026-10-26T23:05:51.992Z | 2026-10-26T23:05:51.992Z |
| cve-2026-116826 | 8.2 (v4.0) 6.8 (v3.1) | YesWiki before 4.7.0 Authenticated SSRF via Page Dupli… |
YesWiki |
yeswiki |
2026-10-26T23:05:51.286Z | 2026-10-27T14:15:19.006Z |
| cve-2026-116825 | 8.3 (v4.0) 6.5 (v3.1) | YesWiki from 4.6.2 before 4.7.0 HTTP Signature Replay … |
YesWiki |
yeswiki |
2026-10-26T23:05:50.597Z | 2026-10-26T23:05:50.597Z |
| cve-2026-116824 | 5.3 (v4.0) 6.1 (v3.1) | YesWiki before 4.7.0 Stored XSS via Referer Header in … |
YesWiki |
yeswiki |
2026-10-26T23:05:49.898Z | 2026-10-26T23:05:49.898Z |
| cve-2026-116823 | 5.3 (v4.0) 6.1 (v3.1) | YesWiki before 4.7.0 Reflected XSS via BazarField $_RE… |
YesWiki |
yeswiki |
2026-10-26T23:05:49.182Z | 2026-10-26T23:05:49.182Z |
| cve-2026-116822 | 6.9 (v4.0) 5.3 (v3.1) | YesWiki before 4.7.0 Template Traversal via BazarListe… |
YesWiki |
yeswiki |
2026-10-26T23:05:48.458Z | 2026-10-27T14:15:27.706Z |
| cve-2026-116821 | 7.1 (v4.0) 6.5 (v3.1) | YesWiki before 4.7.0 Read-ACL Bypass via SQL LIKE Wild… |
YesWiki |
yeswiki |
2026-10-26T23:05:47.763Z | 2026-10-26T23:05:47.763Z |
| cve-2026-116820 | 6.9 (v4.0) 5.3 (v3.1) | YesWiki from 4.6.0 before 4.7.0 SQL Query Disclosure v… |
YesWiki |
yeswiki |
2026-10-26T23:05:47.054Z | 2026-10-26T23:05:47.054Z |
| cve-2026-116819 | 8.4 (v4.0) 8.5 (v3.1) | OpenPanel before 3.0.0 Credential Disclosure via notif… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:46.288Z | 2026-10-26T23:05:46.288Z |
| cve-2026-116818 | 8.8 (v4.0) 8.2 (v3.1) | OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL … |
Openpanel-dev |
openpanel |
2026-10-26T23:05:45.602Z | 2026-10-27T14:15:35.476Z |
| cve-2026-116817 | 6.9 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 Missing Authentication on Worke… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:44.806Z | 2026-10-26T23:05:44.806Z |
| cve-2026-116815 | 5.3 (v4.0) 4.3 (v3.1) | OpenPanel before 3.0.0 Improper ClickHouse Escaping in… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:44.097Z | 2026-10-26T23:05:44.097Z |
| cve-2026-116814 | 7.1 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 Sensitive Information Exposure … |
Openpanel-dev |
openpanel |
2026-10-26T23:05:43.404Z | 2026-10-26T23:05:43.404Z |
| cve-2026-116813 | 7.1 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 ClickHouse SQL Injection via co… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:41.783Z | 2026-10-27T14:15:43.266Z |
| cve-2026-116812 | 7.1 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 ClickHouse SQL Injection via co… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:41.107Z | 2026-10-26T23:05:41.107Z |
| cve-2026-116811 | 8.7 (v4.0) 8.8 (v3.1) | OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook … |
Openpanel-dev |
openpanel |
2026-10-26T23:05:40.470Z | 2026-10-26T23:05:40.470Z |
| cve-2026-116810 | 6.9 (v4.0) 5.3 (v3.1) | OpenPanel before 3.0.0 Missing Authorization via refer… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:39.854Z | 2026-10-26T23:05:39.854Z |
| cve-2026-116809 | 6.9 (v4.0) 5.3 (v3.1) | OpenPanel before 3.0.0 Missing Authorization in event.… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:39.208Z | 2026-10-27T14:15:52.170Z |
| cve-2026-116808 | 8.6 (v4.0) 7.2 (v3.1) | OpenPanel before 3.0.0 ClickHouse SQL Injection via pr… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:38.546Z | 2026-10-26T23:05:38.546Z |
| cve-2026-116807 | 7 (v4.0) 6.5 (v3.1) | OpenPanel before 3.0.0 ClickHouse SQL Injection via ev… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:37.872Z | 2026-10-26T23:05:37.872Z |
| cve-2026-116806 | 5.3 (v4.0) 5.4 (v3.1) | OpenPanel before 3.0.0 Privilege Escalation via onboar… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:37.220Z | 2026-10-26T23:05:37.220Z |
| cve-2026-116805 | 5.3 (v4.0) 4.3 (v3.1) | OpenPanel before 3.0.0 Information Disclosure of Inges… |
Openpanel-dev |
openpanel |
2026-10-26T23:05:36.532Z | 2026-10-27T14:15:58.367Z |
| cve-2026-116804 | 5.1 (v4.0) 6.1 (v3.1) | DOMPurify from 3.4.4 before 3.4.17 SAFE_FOR_TEMPLATES … |
cure53 |
DOMPurify |
2026-10-26T23:05:35.850Z | 2026-10-26T23:05:35.850Z |
| cve-2026-116803 | 5.1 (v4.0) 6.1 (v3.1) | DOMPurify before 3.4.17 DOM XSS via IN_PLACE Hook-Deta… |
cure53 |
DOMPurify |
2026-10-26T23:05:35.135Z | 2026-10-26T23:05:35.135Z |
| cve-2026-116802 | 5.1 (v4.0) 6.1 (v3.1) | DOMPurify before 3.4.17 XSS via SMIL attributeName Gua… |
cure53 |
DOMPurify |
2026-10-26T23:05:34.457Z | 2026-10-26T23:05:34.457Z |
| cve-2026-116801 | 5.3 (v4.0) 4.3 (v3.1) | Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass vi… |
parse-community |
parse-server |
2026-10-26T23:05:33.735Z | 2026-10-27T14:16:07.428Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000114 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000111 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000102 | The installer of the Ministry of Justice [The electronic authentication system based on the commercial registration system "The CRCA user's Software"] may insecurely load Dynamic Link Libraries | 2017-06-06T11:19+09:00 | 2018-01-17T13:58+09:00 |
| jvndb-2017-000119 | Installer of Houkokusyo Sakusei Shien Tool provided by Ministry of the Environment may insecurely load Dynamic Link Libraries | 2017-06-05T13:47+09:00 | 2018-01-17T13:49+09:00 |
| jvndb-2017-000110 | Installer of SaAT Personal may insecurely load Dynamic Link Libraries | 2017-06-02T14:00+09:00 | 2018-01-17T12:25+09:00 |
| jvndb-2017-000109 | Installer of SaAT Netizen may insecurely load Dynamic Link Libraries | 2017-06-02T14:00+09:00 | 2018-01-17T12:29+09:00 |
| jvndb-2017-000107 | RW-5100 tool to verify execution environment may insecurely load Dynamic Link Libraries | 2017-06-01T16:47+09:00 | 2018-01-24T14:03+09:00 |
| jvndb-2017-000106 | RW-5100 driver installer may insecurely load Dynamic Link Libraries | 2017-06-01T16:44+09:00 | 2018-01-24T14:15+09:00 |
| jvndb-2017-000105 | RW-4040 tool to verify execution environment may insecurely load Dynamic Link Libraries | 2017-06-01T16:40+09:00 | 2018-01-24T14:05+09:00 |
| jvndb-2017-000104 | RW-4040 driver installer may insecurely load Dynamic Link Libraries | 2017-06-01T16:25+09:00 | 2018-01-24T13:57+09:00 |
| jvndb-2017-000108 | Installer of Tera Term may insecurely load Dynamic Link Libraries | 2017-06-01T14:42+09:00 | 2018-01-24T14:20+09:00 |
| jvndb-2017-000103 | WordPress plugin "WP Live Chat Support" vulnerable to cross-site scripting | 2017-06-01T14:06+09:00 | 2017-11-27T16:47+09:00 |
| jvndb-2017-000101 | Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE may insecurely load Dynamic Link Libraries | 2017-05-25T14:14+09:00 | 2018-02-15T15:30+09:00 |
| jvndb-2017-000100 | Installer of electronic tendering and bid opening system provided by Acquisition, Technology & Logistics Agency may insecurely load Dynamic Link Libraries | 2017-05-25T14:14+09:00 | 2018-01-17T13:58+09:00 |
| jvndb-2017-000089 | GroupSession fails to restrict access permissions | 2017-05-25T14:14+09:00 | 2018-01-24T11:59+09:00 |
| jvndb-2017-000099 | SSL Visibility Appliance may generate illegal RST packets | 2017-05-24T14:41+09:00 | 2017-05-31T19:27+09:00 |
| jvndb-2017-000098 | The installer of Empirical Project Monitor - eXtended may insecurely load Dynamic Link Libraries | 2017-05-19T14:57+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000097 | Empirical Project Monitor - eXtended vulnerable to cross-site scripting | 2017-05-19T14:55+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000096 | Empirical Project Monitor - eXtended vulnerable to cross-site scripting | 2017-05-19T14:53+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000091 | FlashAir do not set credential information in PhotoShare | 2017-05-16T15:46+09:00 | 2017-12-21T19:16+09:00 |
| jvndb-2017-000090 | FlashAir fails to restrict access permissions in PhotoShare | 2017-05-16T15:34+09:00 | 2017-12-21T19:13+09:00 |
| jvndb-2017-000094 | Multiple BestWebSoft WordPress plugins vulnerable to cross-site scripting | 2017-05-16T14:00+09:00 | 2017-11-27T17:04+09:00 |
| jvndb-2017-000093 | WordPress plugin "MaxButtons" vulnerable to cross-site scripting | 2017-05-16T13:59+09:00 | 2018-01-17T12:28+09:00 |
| jvndb-2017-000092 | WordPress plugin "WP Booking System" vulnerable to cross-site scripting | 2017-05-16T13:58+09:00 | 2018-01-17T11:46+09:00 |
| jvndb-2017-000080 | PrimeDrive Desktop Application Installer may insecurely load executable files | 2017-05-12T13:36+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2017-000079 | The installer of SOY CMS vulnerable to cross-site scripting | 2017-05-11T13:37+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000078 | SOY CMS vulnerable to directory traversal | 2017-05-11T13:36+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000083 | The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries | 2017-05-09T13:52+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000082 | Nessus vulnerable to cross-site scripting | 2017-05-09T13:52+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2017-000077 | Installer of Vivaldi for Windows may insecurely load executable files | 2017-04-25T13:36+09:00 | 2017-06-06T15:04+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0894 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0893 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0892 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0891 | Vulnérabilité dans MongoDB Connector for BI pour Windows | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0890 | Multiples vulnérabilités dans les produits Moxa | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0889 | Vulnérabilité dans Squid | 2025-10-17T00:00:00.000000 | 2025-10-17T00:00:00.000000 |
| certfr-2025-avi-0888 | Multiples vulnérabilités dans les produits Mattermost | 2025-10-16T00:00:00.000000 | 2025-11-14T00:00:00.000000 |
| certfr-2025-avi-0887 | Vulnérabilité dans Synacor Zimbra Collaboration | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0886 | Multiples vulnérabilités dans les produits F5 | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0885 | Multiples vulnérabilités dans Samba | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0884 | Multiples vulnérabilités dans les produits Cisco | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0883 | Multiples vulnérabilités dans les produits Spring | 2025-10-16T00:00:00.000000 | 2025-10-16T00:00:00.000000 |
| certfr-2025-avi-0882 | Multiples vulnérabilités dans les produits Microsoft | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0881 | Multiples vulnérabilités dans Microsoft Azure | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0880 | Multiples vulnérabilités dans Microsoft .Net | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0879 | Multiples vulnérabilités dans Microsoft Windows | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0878 | Multiples vulnérabilités dans Microsoft Office | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0877 | Multiples vulnérabilités dans les produits Ivanti | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0876 | Multiples vulnérabilités dans les produits Adobe | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0875 | Vulnérabilité dans Google Chrome | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0874 | Vulnérabilité dans Schneider Electric EcoStruxure | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0873 | Multiples vulnérabilités dans les produits Mozilla | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0872 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0871 | Multiples vulnérabilités dans les produits Fortinet | 2025-10-15T00:00:00.000000 | 2025-10-15T00:00:00.000000 |
| certfr-2025-avi-0870 | Vulnérabilité dans Microsoft Azure | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0869 | Multiples vulnérabilités dans les produits Veeam | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0868 | Vulnérabilité dans Siemens SIMATIC | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0867 | Multiples vulnérabilités dans les produits SAP | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0866 | Vulnérabilité dans Elastic Cloud Enterprise | 2025-10-14T00:00:00.000000 | 2025-10-14T00:00:00.000000 |
| certfr-2025-avi-0865 | Vulnérabilité dans Oracle E-Business Suite | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |