Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116727 | 4.8 (v4.0) 3.3 (v3.1) | gbsplay through 0.0.103 Heap Out-of-Bounds Read via vg… |
mmitch |
gbsplay |
2026-10-26T21:52:30.198Z | 2026-10-26T21:52:30.198Z |
| cve-2026-116726 | 4.8 (v4.0) 3.3 (v3.1) | gbsplay through 0.0.103 Heap Out-of-Bounds Read via gb… |
mmitch |
gbsplay |
2026-10-26T21:52:29.528Z | 2026-10-27T14:17:32.379Z |
| cve-2026-116725 | 6.8 (v4.0) 5.5 (v3.1) | gbsplay through 0.0.103 Out-of-Bounds Read via mapper_… |
mmitch |
gbsplay |
2026-10-26T21:52:28.842Z | 2026-10-26T21:52:28.842Z |
| cve-2026-116724 | 8.5 (v4.0) 7.8 (v3.1) | FLTK through 1.4.5 Heap Buffer Overflow via Fl_BMP_Ima… |
fltk |
fltk |
2026-10-26T21:52:28.153Z | 2026-10-26T21:52:28.153Z |
| cve-2026-116723 | 8.5 (v4.0) 7.8 (v3.1) | FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Im… |
fltk |
fltk |
2026-10-26T21:52:27.469Z | 2026-10-26T21:52:27.469Z |
| cve-2026-116590 | snappy-java: JVM crash from unchecked ranges in Snappy… |
xerial |
snappy-java |
2026-10-26T21:48:15.468Z | 2026-10-26T21:48:15.468Z | |
| cve-2026-116514 | itsourcecode Airline Reservation System book_flight.ph… |
itsourcecode |
Airline Reservation System |
2026-10-26T21:45:14.583Z | 2026-10-26T21:45:14.583Z | |
| cve-2026-116508 | TOTOLINK A950RG Device-Information CGI infostat.cgi su… |
TOTOLINK |
A950RG |
2026-10-26T21:30:18.376Z | 2026-10-26T21:30:18.376Z | |
| cve-2026-116589 | Datadog dd-trace-py: IAST instrumentation can lead to … |
DataDog |
dd-trace-py |
2026-10-26T21:26:58.832Z | 2026-10-26T21:26:58.832Z | |
| cve-2026-116588 | Datadog dd-trace-py: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-py |
2026-10-26T21:22:46.130Z | 2026-10-26T21:22:46.130Z | |
| cve-2026-116507 | TOTOLINK A950RG global.so getLanguageCfg information d… |
TOTOLINK |
A950RG |
2026-10-26T21:15:18.291Z | 2026-10-27T14:17:44.541Z | |
| cve-2026-116587 | Go JOSE: DoS when parsing JWKs that contain RSA keys |
go-jose |
go-jose |
2026-10-26T21:12:21.326Z | 2026-10-27T14:17:50.939Z | |
| cve-2026-116586 | Go JOSE: Panics in JSON parsing |
go-jose |
go-jose |
2026-10-26T21:09:26.349Z | 2026-10-26T21:09:26.349Z | |
| cve-2026-116585 | Go JOSE: Panic during CBC-HMAC processing |
go-jose |
go-jose |
2026-10-26T21:06:35.189Z | 2026-10-26T21:06:35.189Z | |
| cve-2026-116506 | TOTOLINK A950RG firewall.so apmib_set command injection |
TOTOLINK |
A950RG |
2026-10-26T21:00:16.563Z | 2026-10-26T21:00:16.563Z | |
| cve-2026-116584 | Seroval `fromJSON`/`fromCrossJSON` denial of service v… |
lxsmnsyc |
seroval |
2026-10-26T20:52:38.339Z | 2026-10-26T20:52:38.339Z | |
| cve-2026-116583 | Seroval: Code injection through a typed array's own co… |
lxsmnsyc |
seroval |
2026-10-26T20:49:35.952Z | 2026-10-27T14:18:01.418Z | |
| cve-2026-116582 | Seroval: Script injection through RegExp sources in se… |
lxsmnsyc |
seroval |
2026-10-26T20:46:46.069Z | 2026-10-26T20:46:46.069Z | |
| cve-2026-116505 | TOTOLINK A950RG device-information udhcpd.leases getDe… |
TOTOLINK |
A950RG |
2026-10-26T20:45:18.066Z | 2026-10-26T20:45:18.066Z | |
| cve-2026-86925 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:37.328Z | 2026-10-29T13:00:13.783Z |
| cve-2026-84627 | N/A | A buffer overflow was addressed with improved bou… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:35.462Z | 2026-10-26T20:44:35.462Z |
| cve-2026-113945 | N/A | An out-of-bounds read was addressed with improved… |
Apple |
macOS |
2026-10-26T20:44:34.502Z | 2026-10-26T20:44:34.502Z |
| cve-2026-65327 | N/A | A logic issue was addressed with improved checks.… |
Apple |
macOS |
2026-10-26T20:44:33.440Z | 2026-10-27T03:56:20.484Z |
| cve-2026-112529 | N/A | An out-of-bounds read was addressed with improved… |
Apple |
macOS |
2026-10-26T20:44:32.508Z | 2026-10-26T20:44:32.508Z |
| cve-2026-86972 | N/A | A buffer overflow was addressed with improved siz… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:31.556Z | 2026-10-26T20:44:31.556Z |
| cve-2026-112483 | N/A | A path handling issue was addressed with improved… |
Apple |
macOS |
2026-10-26T20:44:29.682Z | 2026-10-26T20:44:29.682Z |
| cve-2026-113912 | N/A | An out-of-bounds access issue was addressed with … |
Apple |
iOS and iPadOS |
2026-10-26T20:44:27.691Z | 2026-10-29T12:59:33.991Z |
| cve-2026-112495 | N/A | An out-of-bounds read was addressed with improved… |
Apple |
macOS |
2026-10-26T20:44:26.733Z | 2026-10-26T20:44:26.733Z |
| cve-2026-86964 | N/A | A null pointer dereference was addressed with imp… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:25.787Z | 2026-10-26T20:44:25.787Z |
| cve-2026-113904 | N/A | A use-after-free issue was addressed with improve… |
Apple |
Safari |
2026-10-26T20:44:23.809Z | 2026-10-26T20:44:23.809Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000042 | OneThird CMS vulnerable to cross-site scripting | 2017-03-08T09:57+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000041 | Multiple I-O DATA network camera products vulnerable to buffer overflow | 2017-03-02T14:36+09:00 | 2017-06-05T11:10+09:00 |
| jvndb-2017-000040 | Multiple I-O DATA network camera products vulnerable to OS command injection | 2017-03-02T14:36+09:00 | 2017-06-06T15:52+09:00 |
| jvndb-2017-000039 | Multiple I-O DATA network camera products vulnerable to HTTP header injection | 2017-03-02T14:36+09:00 | 2017-06-06T15:52+09:00 |
| jvndb-2017-000034 | Access CX App fails to verify SSL server certificates | 2017-03-01T16:31+09:00 | 2017-06-05T11:26+09:00 |
| jvndb-2017-000033 | PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries | 2017-03-01T15:53+09:00 | 2017-05-15T11:27+09:00 |
| jvndb-2017-000037 | WBCE CMS vulnerable to SQL injection | 2017-02-28T14:22+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000036 | WBCE CMS vulnerable to directory traversal | 2017-02-28T14:21+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000035 | WBCE CMS vulnerable to cross-site scripting | 2017-02-28T14:21+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000038 | CubeCart vulnerable to directory traversal | 2017-02-28T14:13+09:00 | 2017-06-01T12:18+09:00 |
| jvndb-2017-000032 | Cybozu Garoon fails to restrict access permission in the mail function | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000031 | Cybozu Garoon fails to restrict access permission in Workflow and the function "MultiReport" | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000030 | Cybozu Garoon vulnerable to information disclosure | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000029 | Cybozu Garoon vulnerable to cross-site scripting | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000028 | Cybozu Garoon fails to restrict access permission in the Phone Messages function | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000027 | Cybozu Garoon vulnerable to SQL injection | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000024 | Self-Extracting Archives created by 7-ZIP32.DLL may insecurely load Dynamic Link Libraries | 2017-02-17T15:13+09:00 | 2017-06-05T11:55+09:00 |
| jvndb-2017-000026 | Apache Brooklyn vulnerable to cross-site request forgery | 2017-02-15T16:20+09:00 | 2018-03-07T14:35+09:00 |
| jvndb-2017-000025 | Apache Brooklyn vulnerable to cross-site scripting | 2017-02-15T16:20+09:00 | 2017-02-15T16:20+09:00 |
| jvndb-2017-000023 | TVer App for Android fails to verify SSL server certificates | 2017-02-10T15:14+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000015 | Norton Download Manager may insecurely load Dynamic Link Libraries | 2017-02-10T14:58+09:00 | 2017-02-10T14:58+09:00 |
| jvndb-2017-000019 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding | 2017-02-09T14:47+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000018 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-02-09T14:47+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000021 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to cross-site request forgery | 2017-02-09T14:40+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000020 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to authentication bypass | 2017-02-09T14:39+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000022 | Multiple cross-site scripting vulnerabilities in Webmin | 2017-02-09T14:06+09:00 | 2017-06-02T18:04+09:00 |
| jvndb-2017-000017 | Business LaLa Call App for Android fails to verify SSL server certificates | 2017-02-03T13:58+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000016 | LaLa Call App for Android fails to verify SSL server certificates | 2017-02-03T13:31+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000014 | CubeCart vulnerable to directory traversal | 2017-01-27T13:49+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000011 | Knowledge vulnerable to cross-site request forgery | 2017-01-24T14:12+09:00 | 2017-06-06T14:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0834 | Multiples vulnérabilités dans Mozilla Firefox | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0833 | Multiples vulnérabilités dans Joomla! | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0832 | Multiples vulnérabilités dans les produits VMware | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0831 | Vulnérabilité dans les produits Apple | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0830 | Vulnérabilité dans Tenable Patch Management | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0829 | Vulnérabilité dans Apereo CAS | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0828 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0827 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0826 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0825 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0824 | Multiples vulnérabilités dans les produits FoxIT | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0823 | Vulnérabilité dans Liferay | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0822 | Multiples vulnérabilités dans Tenable Security Center | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0821 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0820 | Multiples vulnérabilités dans GitLab | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0819 | Multiples vulnérabilités dans les produits Cisco | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0818 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0817 | Vulnérabilité dans Microsoft OmniParser | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0816 | Vulnérabilité dans StormShield Network Security | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0815 | Vulnérabilité dans Liferay | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0814 | Multiples vulnérabilités dans Google Chrome | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0813 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0812 | Vulnérabilité dans Synology Safe Access pour SRM | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0811 | Multiples vulnérabilités dans Liferay | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0810 | Vulnérabilité dans Liferay | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0809 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0807 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0805 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |