Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-108400 | 8.8 (v3.1) | HEVC Video Extensions Remote Code Execution Vulnerability |
Microsoft |
HEVC Video Extensions |
2026-10-13T18:59:24.362Z | 2026-10-29T15:08:11.844Z |
| cve-2026-105728 | 7.5 (v3.1) | Dynamics Business Central Information Disclosure Vulne… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:24.248Z | 2026-10-29T15:08:11.109Z |
| cve-2026-105727 | 8.8 (v3.1) | Microsoft Dynamics 365 Business Central Elevation of P… |
Microsoft |
Microsoft Dynamics NAV 2018 |
2026-10-13T18:59:23.799Z | 2026-10-29T15:08:10.058Z |
| cve-2026-105725 | 7 (v3.1) | Windows Security App Elevation of Privilege Vulnerability |
Microsoft |
Windows Security App |
2026-10-13T18:59:23.648Z | 2026-10-29T15:08:08.737Z |
| cve-2026-103572 | 8.8 (v3.1) | Visual Studio Tools for Applications and SQL Server Ma… |
Microsoft |
Microsoft Visual Studio 2022 version 17.14 |
2026-10-13T18:56:39.614Z | 2026-10-29T15:08:08.027Z |
| cve-2026-102850 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:38.866Z | 2026-10-29T15:08:05.851Z |
| cve-2026-102849 | 8.8 (v3.1) | Microsoft Office Access Remote Code Execution Vulnerability |
Microsoft |
Microsoft 365 Apps for Enterprise |
2026-10-13T18:56:35.500Z | 2026-10-29T15:08:03.678Z |
| cve-2026-106036 | 6.9 (v4.0) | Improper certificate validation in Szafir |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:08:02.788Z | 2026-10-29T15:08:02.788Z |
| cve-2026-93571 | 2.3 (v4.0) | Path Traversal in Szafir |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:07:53.572Z | 2026-10-29T15:07:53.572Z |
| cve-2026-93570 | 8.2 (v4.0) | XML External Entity injection in Szafir and Szafir Wer… |
Krajowa Izba Rozliczeniowa |
Szafir |
2026-10-29T15:07:48.053Z | 2026-10-29T15:07:48.053Z |
| cve-2026-107027 | N/A | Insecure permissions in lz233 Tarnhelm v1.8.2 (ve… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:07:42.324Z |
| cve-2026-48200 | 5.3 (v3.1) | WordPress Document Library Lite plugin <= 1.3.0 - Sens… |
Barn2 Plugins |
Document Library Lite |
2026-10-29T15:04:50.615Z | 2026-10-29T15:05:51.249Z |
| cve-2026-107026 | N/A | Insecure permissions in Share to Clipboard v1.14.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:05:37.295Z |
| cve-2026-116848 | 6.5 (v3.1) | WordPress The Plus Addons for Elementor Page Builder L… |
POSIMYTH Innovations |
The Plus Addons for Elementor Page Builder Lite |
2026-10-29T15:04:29.001Z | 2026-10-29T15:05:28.277Z |
| cve-2026-42694 | 4.3 (v3.1) | WordPress Kirki plugin <= 6.4.0 - Content Injection vu… |
Themeum |
Kirki |
2026-10-29T15:05:18.749Z | 2026-10-29T15:05:18.749Z |
| cve-2026-109891 | 6.4 (v3.1) | WordPress Happy Addons for Elementor plugin <= 3.50.1 … |
weDevs |
Happy Addons for Elementor |
2026-10-29T15:04:03.409Z | 2026-10-29T15:04:05.267Z |
| cve-2026-107025 | N/A | Insecure permissions in WikiAndPad alpha/beta v0.… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:01:55.391Z |
| cve-2026-107024 | N/A | Insecure permissions in Share 2 Archive Today ver… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:01:05.247Z |
| cve-2026-107023 | N/A | Insecure permissions in the ContentProvider compo… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T15:00:11.788Z |
| cve-2026-107021 | N/A | Insecure permissions in the CardProvider content … |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:56:14.391Z |
| cve-2026-25448 | 4.3 (v3.1) | WordPress WP ERP plugin <= 1.17.10 - Broken Access Con… |
weDevs |
WP ERP |
2026-10-29T14:55:02.968Z | 2026-10-29T14:55:02.968Z |
| cve-2026-85749 | MailWatch: IDOR lets any authenticated user release or… |
mailwatch |
MailWatch |
2026-10-28T22:37:38.513Z | 2026-10-29T14:46:47.666Z | |
| cve-2026-107020 | N/A | An issue in the activity.LoadLinkLaterActivity co… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:46:18.474Z |
| cve-2026-116010 | 5.3 (v4.0) 4.3 (v3.1) | RosarioSIS before 12.9.1 Missing Authorization in Teac… |
francoisjacquet |
RosarioSIS |
2026-10-24T11:40:29.488Z | 2026-10-29T14:46:14.817Z |
| cve-2026-104875 | Ente: Accepted emergency contact can bypass the recove… |
ente |
ente |
2026-10-13T19:10:06.908Z | 2026-10-29T14:45:31.633Z | |
| cve-2026-107019 | N/A | Insecure permissions in the feiertage.ImportActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:45:30.102Z |
| cve-2026-115802 | InternScience InternAgent LoRA Loading experiment.py t… |
InternScience |
InternAgent |
2026-10-24T06:30:15.142Z | 2026-10-29T14:44:54.077Z | |
| cve-2026-107018 | N/A | Insecure permissions in Ghost Commander File Mana… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:44:40.204Z |
| cve-2026-115892 | Wasmtime: Panic lowering a host-created component mode… |
bytecodealliance |
wasmtime |
2026-10-23T21:26:54.528Z | 2026-10-29T14:44:33.323Z | |
| cve-2026-86016 | VNote: Stored XSS via YAML Frontmatter Leading to Loca… |
vnotex |
vnote |
2026-10-13T19:15:21.682Z | 2026-10-29T14:44:07.158Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000079 | The installer of SOY CMS vulnerable to cross-site scripting | 2017-05-11T13:37+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000078 | SOY CMS vulnerable to directory traversal | 2017-05-11T13:36+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2016-000159 | H2O use of externally-controlled format string | 2016-09-15T14:26+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000114 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000113 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:21+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000112 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure | 2017-06-06T14:20+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000111 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2016-000244 | Access restriction bypass to delete DBM files in Cybozu Dezie | 2016-12-12T14:49+09:00 | 2017-11-27T17:12+09:00 |
| jvndb-2016-000243 | Access restriction bypass to download DBM files in Cybozu Dezie | 2016-12-12T14:49+09:00 | 2017-11-27T17:12+09:00 |
| jvndb-2016-000241 | WNC01WH vulnerable to directory traversal due to an issue in processing POST request | 2016-12-02T14:46+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2016-000229 | Cybozu Garoon vulnerable to SQL injection | 2016-12-19T14:19+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2016-000228 | Cybozu Garoon vulnerable to directory traversal | 2016-12-19T13:44+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2017-000094 | Multiple BestWebSoft WordPress plugins vulnerable to cross-site scripting | 2017-05-16T14:00+09:00 | 2017-11-27T17:04+09:00 |
| jvndb-2016-000168 | Toshiba FlashAir does not require authentication in "Internet pass-thru Mode" | 2016-10-12T10:03+09:00 | 2017-11-27T17:04+09:00 |
| jvndb-2016-000227 | Cybozu Garoon vulnerable to cross-site request forgery | 2016-12-19T13:36+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000226 | Cybozu Garoon fails to restrict access permission in To-Dos of Space function | 2016-12-19T14:38+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000225 | Cybozu Garoon fails to restrict access permission in MultiReport filters | 2016-12-19T14:32+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000224 | Cybozu Garoon fails to restrict access permission in the RSS settings | 2016-12-19T14:29+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000223 | Cybozu Garoon vulnerable to information disclosure | 2016-12-19T12:29+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000222 | Cybozu Garoon vulnerable to cross-site scripting | 2016-12-19T12:22+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2017-000082 | Nessus vulnerable to cross-site scripting | 2017-05-09T13:52+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2017-000080 | PrimeDrive Desktop Application Installer may insecurely load executable files | 2017-05-12T13:36+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2016-000164 | Splunk Enterprise and Splunk Light vulnerable to open redirect | 2016-09-16T14:16+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2016-000163 | Splunk Enterprise and Splunk Light vulnerable to open redirect | 2016-09-16T14:08+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2016-000162 | Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting | 2016-09-16T13:56+09:00 | 2017-11-27T16:55+09:00 |
| jvndb-2016-000249 | SKYSEA Client View vulnerable to arbitrary code execution | 2016-12-22T14:26+09:00 | 2017-11-27T16:53+09:00 |
| jvndb-2016-000248 | H2O use-after-free vulnerability | 2016-12-22T14:26+09:00 | 2017-11-27T16:53+09:00 |
| jvndb-2017-000103 | WordPress plugin "WP Live Chat Support" vulnerable to cross-site scripting | 2017-06-01T14:06+09:00 | 2017-11-27T16:47+09:00 |
| jvndb-2016-000247 | BlueZ userland utilities vulnerable to buffer overflow | 2016-12-22T14:26+09:00 | 2017-11-27T16:47+09:00 |
| jvndb-2016-000156 | ADOdb vulnerable to cross-site scripting | 2016-09-06T13:45+09:00 | 2017-11-27T16:43+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0841 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0840 | Multiples vulnérabilités dans Zabbix | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0839 | Multiples vulnérabilités dans Microsoft Edge | 2025-10-03T00:00:00.000000 | 2025-10-03T00:00:00.000000 |
| certfr-2025-avi-0838 | Multiples vulnérabilités dans les produits Splunk | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0837 | Multiples vulnérabilités dans Google Chrome | 2025-10-02T00:00:00.000000 | 2025-10-02T00:00:00.000000 |
| certfr-2025-avi-0836 | Multiples vulnérabilités dans les produits Tenable | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0835 | Multiples vulnérabilités dans OpenSSL | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0834 | Multiples vulnérabilités dans Mozilla Firefox | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0833 | Multiples vulnérabilités dans Joomla! | 2025-10-01T00:00:00.000000 | 2025-10-01T00:00:00.000000 |
| certfr-2025-avi-0832 | Multiples vulnérabilités dans les produits VMware | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0831 | Vulnérabilité dans les produits Apple | 2025-09-30T00:00:00.000000 | 2025-09-30T00:00:00.000000 |
| certfr-2025-avi-0830 | Vulnérabilité dans Tenable Patch Management | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0829 | Vulnérabilité dans Apereo CAS | 2025-09-29T00:00:00.000000 | 2025-09-29T00:00:00.000000 |
| certfr-2025-avi-0828 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0827 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0826 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0825 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0824 | Multiples vulnérabilités dans les produits FoxIT | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0823 | Vulnérabilité dans Liferay | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0822 | Multiples vulnérabilités dans Tenable Security Center | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0821 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0820 | Multiples vulnérabilités dans GitLab | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0819 | Multiples vulnérabilités dans les produits Cisco | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0818 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0817 | Vulnérabilité dans Microsoft OmniParser | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0816 | Vulnérabilité dans StormShield Network Security | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0815 | Vulnérabilité dans Liferay | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0814 | Multiples vulnérabilités dans Google Chrome | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0813 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0812 | Vulnérabilité dans Synology Safe Access pour SRM | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |