Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116800 | 6.9 (v4.0) 6.2 (v3.1) | WWBN AVideo before 29.5.0 Local PHP File Inclusion via… |
WWBN |
AVideo |
2026-10-26T23:05:33.044Z | 2026-10-26T23:05:33.044Z |
| cve-2026-116602 | SourceCodester Online Food Ordering System delete.php … |
SourceCodester |
Online Food Ordering System |
2026-10-26T23:00:08.972Z | 2026-10-26T23:00:08.972Z | |
| cve-2026-116556 | Argilla TextField.vue cross site scripting |
n/a |
Argilla |
2026-10-26T22:45:06.821Z | 2026-10-27T14:16:13.865Z | |
| cve-2026-116555 | Argilla Sandbox.vue cross site scripting |
n/a |
Argilla |
2026-10-26T22:30:16.499Z | 2026-10-26T22:30:16.499Z | |
| cve-2026-2270 | 5.9 (v3.1) | StatefulSet and ControllerRevision write permissions a… |
Kubernetes |
Kubernetes |
2026-10-26T22:30:02.445Z | 2026-10-29T10:45:47.863Z |
| cve-2026-76654 | 5.8 (v3.1) | Subpath symlinking on Windows nodes permits NTLM coercion |
Kubernetes |
Kubernetes |
2026-10-26T22:29:23.944Z | 2026-10-26T23:10:47.018Z |
| cve-2026-116554 | Argilla Settings SettingsInfo.vue Dataset.from_disk cr… |
n/a |
Argilla |
2026-10-26T22:15:08.212Z | 2026-10-26T22:15:08.212Z | |
| cve-2026-116515 | itsourcecode Online Book Store book.php sql injection |
itsourcecode |
Online Book Store |
2026-10-26T22:00:17.488Z | 2026-10-27T14:16:22.247Z | |
| cve-2026-116591 | compress zstd: Panic on two-block frames |
klauspost |
compress |
2026-10-26T21:54:33.109Z | 2026-10-27T14:16:30.395Z | |
| cve-2026-116748 | 8.7 (v4.0) 8.8 (v3.1) | Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks … |
transmission |
transmission |
2026-10-26T21:52:45.799Z | 2026-10-26T21:52:45.799Z |
| cve-2026-116747 | 9.2 (v4.0) 8.1 (v3.1) | Kener 3.0.0 before 4.1.10 Authentication Bypass via Ha… |
rajnandan1 |
kener |
2026-10-26T21:52:45.058Z | 2026-10-26T21:52:45.058Z |
| cve-2026-116746 | 6.9 (v4.0) 5.3 (v3.1) | QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review … |
qloapps |
qloapps |
2026-10-26T21:52:44.250Z | 2026-10-27T14:16:39.214Z |
| cve-2026-116745 | 6.9 (v4.0) 6.5 (v3.1) | QloApps through 1.7.0 Guest Order Disclosure via id_ca… |
qloapps |
qloapps |
2026-10-26T21:52:43.567Z | 2026-10-26T21:52:43.567Z |
| cve-2026-116744 | 6.9 (v4.0) 5.3 (v3.1) | ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther … |
ntop |
nDPI |
2026-10-26T21:52:42.875Z | 2026-10-26T21:52:42.875Z |
| cve-2026-116743 | 6.8 (v4.0) 5.5 (v3.1) | libyal libmsiecf through 20260525 Double Free via libm… |
libyal |
libmsiecf |
2026-10-26T21:52:42.185Z | 2026-10-26T21:52:42.185Z |
| cve-2026-116742 | 4.8 (v4.0) 4.4 (v3.1) | HTSlib through 1.24 Heap Out-of-Bounds Write via Trunc… |
samtools |
htslib |
2026-10-26T21:52:41.511Z | 2026-10-27T14:16:48.820Z |
| cve-2026-116741 | 8.3 (v4.0) 6.5 (v3.1) | Speex through 1.2.1 Out-of-Bounds Write via speex_bits… |
xiph |
speex |
2026-10-26T21:52:40.782Z | 2026-10-26T21:52:40.782Z |
| cve-2026-116740 | 7.1 (v4.0) 6.5 (v3.1) | libcss through 0.9.2 NULL Pointer Dereference via Medi… |
netsurf-browser |
libcss |
2026-10-26T21:52:39.177Z | 2026-10-26T21:52:39.177Z |
| cve-2026-116739 | 5.3 (v4.0) 4.3 (v3.1) | VMime through 0.9.2 Uninitialized Stack Memory Disclos… |
kisli |
vmime |
2026-10-26T21:52:38.496Z | 2026-10-26T21:52:38.496Z |
| cve-2026-116738 | 8.7 (v4.0) 8.8 (v3.1) | VMime through 0.9.2 Stack-Based Buffer Overflow via uu… |
kisli |
vmime |
2026-10-26T21:52:37.804Z | 2026-10-27T14:16:56.633Z |
| cve-2026-116737 | 6.9 (v4.0) 6.1 (v3.1) | libphdi through 20260902 Heap Out-of-Bounds Read via E… |
libyal |
libphdi |
2026-10-26T21:52:37.080Z | 2026-10-26T21:52:37.080Z |
| cve-2026-116736 | 6.9 (v4.0) 6.1 (v3.1) | libpff through 20260926 Heap Out-of-Bounds Read via li… |
libyal |
libpff |
2026-10-26T21:52:36.380Z | 2026-10-27T10:14:07.473Z |
| cve-2026-116735 | 6.9 (v4.0) 6.1 (v3.1) | libpff through 20260926 Heap Out-of-Bounds Read via li… |
libyal |
libpff |
2026-10-26T21:52:35.680Z | 2026-10-27T10:14:06.821Z |
| cve-2026-116734 | 6.3 (v4.0) 3.7 (v3.1) | flatcc through 0.6.4 Out-of-Bounds Read via verifier c… |
dvidelabs |
flatcc |
2026-10-26T21:52:34.998Z | 2026-10-27T14:17:08.680Z |
| cve-2026-116733 | 6.3 (v4.0) 3.7 (v3.1) | flatcc through 0.6.4 Out-of-Bounds Read via __flatcc_j… |
dvidelabs |
flatcc |
2026-10-26T21:52:34.304Z | 2026-10-26T21:52:34.304Z |
| cve-2026-116732 | 4.8 (v4.0) 4.4 (v3.1) | libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwa… |
davea42 |
libdwarf |
2026-10-26T21:52:33.622Z | 2026-10-26T21:52:33.622Z |
| cve-2026-116731 | 6.9 (v4.0) 6.1 (v3.1) | Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTr… |
tildearrow |
furnace |
2026-10-26T21:52:32.953Z | 2026-10-26T21:52:32.953Z |
| cve-2026-116730 | 6.8 (v4.0) 5.5 (v3.1) | Furnace through 0.6.8.3 Out-of-Bounds Read via FamiTra… |
tildearrow |
furnace |
2026-10-26T21:52:32.251Z | 2026-10-27T14:17:14.912Z |
| cve-2026-116729 | 4.8 (v4.0) 3.3 (v3.1) | libfvde through 20260923 Heap Out-of-Bounds Read via l… |
libyal |
libfvde |
2026-10-26T21:52:31.564Z | 2026-10-26T21:52:31.564Z |
| cve-2026-116728 | 6.8 (v4.0) 5.5 (v3.1) | libfvde through 20260923 Heap Out-of-Bounds Read via l… |
libyal |
libfvde |
2026-10-26T21:52:30.883Z | 2026-10-26T21:52:30.883Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000072 | WNC01WH vulnerable to OS command injection | 2017-04-21T13:44+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000076 | Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries | 2017-04-20T15:11+09:00 | 2017-06-01T13:40+09:00 |
| jvndb-2017-000074 | WordPress plugin "Booking Calendar" vulnerable to cross-site scripting | 2017-04-20T15:11+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000073 | WordPress plugin "Booking Calendar" vulnerable to directory traversal | 2017-04-20T15:11+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000075 | Hoozin Viewer vulnerable to buffer overflow | 2017-04-20T14:48+09:00 | 2017-06-01T13:40+09:00 |
| jvndb-2017-000071 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2017-04-19T14:43+09:00 | 2017-06-06T14:50+09:00 |
| jvndb-2017-000055 | NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control | 2017-04-18T13:42+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000069 | Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries | 2017-04-14T14:09+09:00 | 2017-12-21T17:50+09:00 |
| jvndb-2017-000070 | WN-AC1167GR vulnerable to cross-site scripting | 2017-04-14T13:55+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000068 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-13T13:49+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000067 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-13T13:49+09:00 | 2017-06-01T15:23+09:00 |
| jvndb-2017-000066 | The API in Cybozu Office vulnerable to denial-of-service (DoS) | 2017-04-11T16:05+09:00 | 2017-04-11T16:05+09:00 |
| jvndb-2017-000065 | Cybozu Office fails to restrict access permission in the templates delete function in "customapp" | 2017-04-11T16:05+09:00 | 2017-06-01T12:18+09:00 |
| jvndb-2017-000064 | Cybozu Office fails to restrict access permission in the file export function in "customapp" | 2017-04-11T16:05+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000063 | The design setting screen in Cybozu Office vulnerable to cross-site scripting | 2017-04-11T16:05+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000054 | ASSETBASE vulnerable to cross-site scripting | 2017-04-11T13:37+09:00 | 2017-06-01T17:16+09:00 |
| jvndb-2017-000057 | CS-Cart Japanese Edition vulnerable to cross-site request forgery | 2017-04-10T18:13+09:00 | 2018-01-24T13:49+09:00 |
| jvndb-2017-000056 | CS-Cart Japanese Edition fails to restrict access permissions | 2017-04-10T18:13+09:00 | 2017-06-01T17:39+09:00 |
| jvndb-2017-000062 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-10T13:47+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000061 | CS-Cart Japanese Edition fails to restrict access permissions | 2017-04-10T13:47+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000060 | WN-G300R3 vulnerable to stack based buffer overflow | 2017-04-10T13:40+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000059 | WN-G300R3 vulnerable to OS command injection | 2017-04-10T13:36+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000058 | Tablacus Explorer vulnerable to script injection | 2017-04-07T14:47+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2016-006450 | Vulnerability in JP1/Cm2/Network Node Manager i | 2017-03-30T15:01+09:00 | 2017-03-30T15:01+09:00 |
| jvndb-2017-000044 | CentreCOM AR260S V2 vulnerable to privilege escalation | 2017-03-30T14:37+09:00 | 2017-06-05T10:51+09:00 |
| jvndb-2017-000050 | WordPress plugin "YOP Poll" vulnerable to cross-site scripting | 2017-03-23T12:23+09:00 | 2017-06-01T15:08+09:00 |
| jvndb-2017-000049 | Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries | 2017-03-22T14:43+09:00 | 2017-06-01T17:16+09:00 |
| jvndb-2017-000047 | Security guide for website operators vulnerable to OS command injection | 2017-03-16T13:32+09:00 | 2017-06-01T15:08+09:00 |
| jvndb-2017-000045 | Cybozu KUNAI for Android information management vulnerability | 2017-03-13T13:42+09:00 | 2017-06-02T18:04+09:00 |
| jvndb-2017-000043 | OneThird CMS vulnerable to cross-site scripting | 2017-03-08T09:57+09:00 | 2017-06-01T15:08+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0864 | Multiples vulnérabilités dans VMware Tanzu | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |
| certfr-2025-avi-0863 | Vulnérabilité dans Belden HiOS Switch Platform | 2025-10-13T00:00:00.000000 | 2025-10-13T00:00:00.000000 |
| certfr-2025-avi-0862 | Multiples vulnérabilités dans Microsoft Edge | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0861 | Multiples vulnérabilités dans les produits IBM | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0860 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0859 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0858 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-10T00:00:00.000000 | 2025-10-10T00:00:00.000000 |
| certfr-2025-avi-0857 | Vulnérabilité dans Wireshark | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0856 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0855 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0854 | Vulnérabilité dans les produits Moxa | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0853 | Multiples vulnérabilités dans GitLab | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0852 | Vulnérabilité dans Tenable Security Center | 2025-10-09T00:00:00.000000 | 2025-10-09T00:00:00.000000 |
| certfr-2025-avi-0851 | Vulnérabilité dans Python | 2025-10-08T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0850 | Multiples vulnérabilités dans Google Chrome | 2025-10-08T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0849 | Multiples vulnérabilités dans les produits Elastic | 2025-10-07T00:00:00.000000 | 2025-10-07T00:00:00.000000 |
| certfr-2025-avi-0848 | Vulnérabilité dans OpenSSH | 2025-10-06T00:00:00.000000 | 2025-10-07T00:00:00.000000 |
| certfr-2025-avi-0847 | Vulnérabilité dans les produits Liferay | 2025-10-06T00:00:00.000000 | 2025-10-08T00:00:00.000000 |
| certfr-2025-avi-0846 | Multiples vulnérabilités dans les produits Qnap | 2025-10-06T00:00:00.000000 | 2025-10-06T00:00:00.000000 |
| certfr-2025-avi-0845 | Multiples vulnérabilités dans Zabbix | 2025-10-06T00:00:00.000000 | 2025-10-06T00:00:00.000000 |
| certfr-2025-avi-0844 | Multiples vulnérabilités dans IBM Sterling Connect | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0843 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0842 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0841 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0840 | Multiples vulnérabilités dans Zabbix | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0839 | Multiples vulnérabilités dans Microsoft Edge | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0838 | Multiples vulnérabilités dans les produits Splunk | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0837 | Multiples vulnérabilités dans Google Chrome | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0836 | Multiples vulnérabilités dans les produits Tenable | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0835 | Multiples vulnérabilités dans OpenSSL | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |