Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107017 | N/A | Insecure permissions in the ShortcutDispatchActiv… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:43:24.546Z |
| cve-2026-115885 | LangGraph CLI prints the registry push token in `langg… |
langchain-ai |
langgraph |
2026-10-23T21:15:09.944Z | 2026-10-29T14:43:01.864Z | |
| cve-2026-107016 | N/A | Insecure permissions in Fossify v1.3.0 allows una… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:42:15.598Z |
| cve-2026-42691 | 5.4 (v3.1) | WordPress EventPrime plugin <= 4.3.6.0 - Broken Access… |
EventPrime |
EventPrime |
2026-10-29T14:40:48.838Z | 2026-10-29T14:41:50.572Z |
| cve-2026-107015 | N/A | Insecure permissions in Simple Contacts Pro versi… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:41:25.197Z |
| cve-2026-101897 | Angular DevTools (Local DoS) |
angular |
angular |
2026-10-14T15:03:36.405Z | 2026-10-29T14:40:53.404Z | |
| cve-2026-97073 | 5.3 (v3.1) | WordPress myCred plugin <= 4.0.2 - Broken Access Contr… |
myCred |
myCred |
2026-10-29T14:39:40.470Z | 2026-10-29T14:40:42.387Z |
| cve-2026-54852 | 5.3 (v3.1) | WordPress Page Restriction WordPress (WP) plugin <= 1.… |
miniOrange |
Page Restriction WordPress (WP) |
2026-10-29T14:40:27.236Z | 2026-10-29T14:40:27.236Z |
| cve-2026-27062 | 4.3 (v3.1) | WordPress WPFunnels plugin <= 3.13.5 - Cross Site Requ… |
WPFunnels Team |
WPFunnels |
2026-10-29T14:38:48.633Z | 2026-10-29T14:39:50.003Z |
| cve-2026-100394 | Nezha Monitoring: Whole-instance DoS in Nezha dashboar… |
nezhahq |
nezha |
2026-10-14T15:38:47.079Z | 2026-10-29T14:39:43.451Z | |
| cve-2026-107014 | N/A | Insecure permissions in Bander Notepad (bander.no… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:39:41.536Z |
| cve-2026-118097 | 6.5 (v3.1) | WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross… |
bPlugins |
Flash & HTML5 Video |
2026-10-29T14:39:07.281Z | 2026-10-29T14:39:27.549Z |
| cve-2026-39742 | 6.5 (v3.1) | WordPress Gutenberg Blocks by Kadence Blocks plugin <=… |
Liquid Web / StellarWP |
Gutenberg Blocks by Kadence Blocks |
2026-10-29T14:20:45.598Z | 2026-10-29T14:37:20.747Z |
| cve-2026-75524 | OpenReception: race condition in add-to-tunnel and cre… |
open-reception |
appointment-booking-software |
2026-10-23T20:29:52.583Z | 2026-10-29T14:33:55.695Z | |
| cve-2026-114706 | 6.5 (v3.1) | WordPress Strong Testimonials plugin <= 3.3.15 - Cross… |
WP Chill |
Strong Testimonials |
2026-10-29T14:32:29.513Z | 2026-10-29T14:33:30.748Z |
| cve-2026-27063 | 5.3 (v3.1) | WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - … |
Kit |
Kit (formerly ConvertKit) |
2026-10-29T14:32:08.078Z | 2026-10-29T14:33:07.777Z |
| cve-2026-115601 | 5.3 (v3.1) | WordPress Custom Price for WooCommerce plugin <= 1.1.2… |
WP Desk |
Custom Price for WooCommerce |
2026-10-29T14:31:58.839Z | 2026-10-29T14:33:00.541Z |
| cve-2026-54853 | 5.3 (v3.1) | WordPress Profile Builder plugin <= 4.0.5 - Broken Acc… |
Cozmoslabs |
Profile Builder |
2026-10-29T14:32:35.962Z | 2026-10-29T14:32:35.962Z |
| cve-2026-118091 | 5.3 (v3.1) | WordPress WPFunnels plugin <= 3.13.5 - Broken Access C… |
WPFunnels Team |
WPFunnels |
2026-10-29T14:23:51.139Z | 2026-10-29T14:24:51.406Z |
| cve-2026-39737 | 6.5 (v3.1) | WordPress JetElements For Elementor plugin <= 2.9.2.6 … |
Crocoblock |
JetElements For Elementor |
2026-10-29T14:24:19.832Z | 2026-10-29T14:24:20.265Z |
| cve-2026-19610 | 6.5 (v3.1) | Wildfly-platform-mbean: wildfly-platform-mbean: rbac s… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 7 |
2026-10-29T06:07:32.569Z | 2026-10-29T14:24:04.416Z |
| cve-2026-116387 | 5.3 (v3.1) | WordPress SureForms plugin <= 2.12.9 - Broken Access C… |
Brainstorm Force |
SureForms |
2026-10-29T14:22:37.807Z | 2026-10-29T14:23:38.484Z |
| cve-2026-115877 | Twisted: HTTP Request Smuggling in twisted.web via a B… |
twisted |
twisted |
2026-10-23T20:25:12.031Z | 2026-10-29T14:23:05.736Z | |
| cve-2026-100404 | Zulip: Guests can read new messages in non-subscribed … |
zulip |
zulip |
2026-10-14T15:50:00.354Z | 2026-10-29T14:20:18.766Z | |
| cve-2026-115610 | 6.5 (v3.1) | WordPress PublishPress Authors plugin <= 4.17.0 - Cros… |
PublishPress |
PublishPress Authors |
2026-10-29T14:20:16.168Z | 2026-10-29T14:20:16.691Z |
| cve-2026-115774 | Twisted: Denial of Service in the Twisted IMAP4 Server… |
twisted |
twisted |
2026-10-23T20:14:07.480Z | 2026-10-29T14:20:15.738Z | |
| cve-2026-67414 | RabbitMQ AMQP 1.0 parser: amplification memory-exhaust… |
rabbitmq |
rabbitmq-server |
2026-10-14T16:04:07.449Z | 2026-10-29T14:19:15.193Z | |
| cve-2026-115797 | Tenda F6 Web Management cleartext transmission |
Tenda |
F6 |
2026-10-23T20:00:16.370Z | 2026-10-29T14:19:14.179Z | |
| cve-2026-92982 | 8.5 (v3.1) | Ansible-operator-plugins: ansible operator plugins: ar… |
Red Hat |
Red Hat Ansible Automation Platform 2.6 |
2026-10-15T15:36:57.191Z | 2026-10-29T14:19:00.748Z |
| cve-2026-118030 | 4.2 (v3.1) | Keycloak-services: keycloak-services: hotp race condit… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-29T06:22:11.871Z | 2026-10-29T14:18:44.865Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000216 | Multiple Corega wireless LAN routers vulnerable to cross-site scripting | 2016-11-11T14:45+09:00 | 2017-11-27T16:42+09:00 |
| jvndb-2016-000215 | Access restriction bypass vulnerability in WFS-SR01 | 2016-11-02T16:21+09:00 | 2017-11-27T16:42+09:00 |
| jvndb-2016-000214 | Command injection vulnerability in WFS-SR01 | 2016-11-02T16:20+09:00 | 2017-11-27T16:42+09:00 |
| jvndb-2016-000183 | baserCMS plugin Uploader vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000182 | baserCMS plugin Mail vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000181 | baserCMS plugin Feed vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000180 | baserCMS plugin Blog vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000179 | baserCMS vulnerable to cross-site scripting | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000178 | baserCMS vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000177 | baserCMS vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000176 | baserCMS plugin Blog vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000175 | baserCMS plugin Blog vulnerable to cross-site scripting | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000174 | baserCMS plugin Mail vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000173 | baserCMS plugin Mail vulnerable to cross-site scripting | 2016-09-29T16:04+09:00 | 2017-11-27T16:37+09:00 |
| jvndb-2016-000172 | baserCMS vulnerable to cross-site request forgery | 2016-09-29T16:04+09:00 | 2017-11-27T16:36+09:00 |
| jvndb-2016-000240 | WNC01WH vulnerable to directory traversal due to an issue in processing commands | 2016-12-02T14:45+09:00 | 2017-11-27T16:27+09:00 |
| jvndb-2016-000239 | WNC01WH vulnerable to enabling debug option | 2016-12-02T14:44+09:00 | 2017-11-27T16:27+09:00 |
| jvndb-2016-000238 | WNC01WH vulnerable to stored cross-site scripting | 2016-12-02T14:43+09:00 | 2017-11-27T16:27+09:00 |
| jvndb-2016-000237 | WNC01WH vulnerable to cross-site request forgery | 2016-12-02T14:43+09:00 | 2017-11-27T16:27+09:00 |
| jvndb-2016-000236 | WNC01WH vulnerable to denial-of-service (DoS) | 2016-12-02T14:43+09:00 | 2017-11-27T16:27+09:00 |
| jvndb-2017-008411 | XXE Vulnerability in Hitachi Command Suite | 2017-10-18T14:22+09:00 | 2017-11-07T15:06+09:00 |
| jvndb-2017-008370 | Information Disclosure Vulnerability in Hitachi Automation Director | 2017-10-17T17:01+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008369 | Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor | 2017-10-17T16:58+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008364 | RMI Vulnerability in Hitachi Tuning Manager | 2017-10-17T16:26+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-008363 | Information Disclosure Vulnerability in Hitachi Global Link Manager | 2017-10-17T16:26+09:00 | 2017-10-18T12:31+09:00 |
| jvndb-2017-007767 | Self-Decrypting Confidential Files created by JP1/HIBUN may insecurely load Dynamic Link Libraries | 2017-10-03T11:18+09:00 | 2017-10-06T11:36+09:00 |
| jvndb-2015-000125 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2017-10-02T12:08+09:00 |
| jvndb-2017-000223 | Install program and Installer of i-filter 6.0 may insecurely load Dynamic Link Libraries and invoke executable files | 2017-09-29T13:54+09:00 | 2017-09-29T13:54+09:00 |
| jvndb-2017-006769 | Denial-of-service (DoS) Vulnerability in JP1 and Hitachi IT Operations Director | 2017-09-04T12:14+09:00 | 2017-09-05T10:46+09:00 |
| jvndb-2017-006466 | Denial-of-service (DoS) Vulnerability in HiRDB | 2017-08-28T13:46+09:00 | 2017-09-05T10:46+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0811 | Multiples vulnérabilités dans Liferay | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0810 | Vulnérabilité dans Liferay | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0809 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0807 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0806 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0805 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0804 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0766 | Multiples vulnérabilités dans les produits Liferay | 2025-09-09T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| certfr-2025-avi-0803 | Vulnérabilité dans HPE Aruba Networking ClearPass Policy Manager | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0802 | Multiples vulnérabilités dans Google Chrome | 2025-09-18T00:00:00.000000 | 2025-09-18T00:00:00.000000 |
| certfr-2025-avi-0800 | Multiples vulnérabilités dans Liferay | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0799 | Vulnérabilité dans les produits Microsoft | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0798 | Vulnérabilité dans Microsoft Edge | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0797 | Multiples vulnérabilités dans les produits Mozilla | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0796 | Multiples vulnérabilités dans Suricata | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0795 | Multiples vulnérabilités dans HPE Aruba Networking EdgeConnect SD-WAN Gateways | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0794 | Multiples vulnérabilités dans les produits Atlassian | 2025-09-17T00:00:00.000000 | 2025-09-17T00:00:00.000000 |
| certfr-2025-avi-0793 | Multiples vulnérabilités dans Liferay | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0792 | Multiples vulnérabilités dans les produits Spring | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0791 | Multiples vulnérabilités dans les produits Apple | 2025-09-16T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0707 | Multiples vulnérabilités dans Mattermost Server | 2025-08-18T00:00:00.000000 | 2025-09-16T00:00:00.000000 |
| certfr-2025-avi-0790 | Multiples vulnérabilités dans Liferay | 2025-09-15T00:00:00.000000 | 2025-09-15T00:00:00.000000 |
| certfr-2025-avi-0789 | Multiples vulnérabilités dans les produits IBM | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0788 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0787 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0786 | Multiples vulnérabilités dans Zabbix | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0785 | Multiples vulnérabilités dans Liferay | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0784 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |
| certfr-2025-avi-0783 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-12T00:00:00.000000 | 2025-09-12T00:00:00.000000 |