Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-115572 | pypdf: Possible long runtimes for repeated references … |
py-pdf |
pypdf |
2026-10-23T19:24:51.055Z | 2026-10-29T14:18:40.569Z | |
| cve-2025-62839 | 8.7 (v4.0) | Hard-coded Cryptographic Key #1 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:39:53.736Z | 2026-10-29T14:17:58.115Z |
| cve-2026-77564 | Talos Linux: Support bundle does not redact registry c… |
siderolabs |
talos |
2026-10-14T16:09:11.330Z | 2026-10-29T14:17:38.468Z | |
| cve-2026-118092 | 4.3 (v3.1) | WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Ac… |
StylemixThemes |
MasterStudy LMS |
2026-10-29T14:17:28.380Z | 2026-10-29T14:17:28.853Z |
| cve-2025-62841 | 8.7 (v4.0) | Hard-coded Cryptographic Key #2 |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2026-10-29T07:40:02.766Z | 2026-10-29T14:16:06.907Z |
| cve-2026-118322 | N/A | Memory corruption in ANGLE in Google Chrome prior… |
Google |
Chrome |
2026-10-27T23:03:11.846Z | 2026-10-29T14:14:50.833Z |
| cve-2026-118319 | N/A | Memory corruption in Skia in Google Chrome prior … |
Google |
Chrome |
2026-10-27T23:03:20.699Z | 2026-10-29T14:14:27.973Z |
| cve-2026-118318 | N/A | Improper access control in V8 in Google Chrome pr… |
Google |
Chrome |
2026-10-27T23:03:10.313Z | 2026-10-29T14:14:05.516Z |
| cve-2026-114358 | 9.3 (v4.0) | SQL Injection Vulnerability in Radius Xenia M2M Platform |
Radius Synergies |
Radius Xenia M2M Platform |
2026-10-29T08:53:05.549Z | 2026-10-29T14:13:51.533Z |
| cve-2026-115810 | 6.3 (v4.0) 7.7 (v3.1) | Tandoor Recipes before 2.7.0 SSRF via Pestle Importer … |
TandoorRecipes |
recipes |
2026-10-23T16:12:12.359Z | 2026-10-29T14:13:20.506Z |
| cve-2026-117611 | Trust of compromised eMudhra root CA in bundled CA stores |
Checkmk GmbH |
Checkmk |
2026-10-29T09:32:57.964Z | 2026-10-29T14:13:09.797Z | |
| cve-2026-97860 | 6.7 (v3.0) 8.4 (v4.0) | YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corpo… |
Yamaha Corporation |
YMS-VPN8 |
2026-10-29T11:33:10.955Z | 2026-10-29T14:12:18.004Z |
| cve-2026-113143 | N/A | Memory corruption in ANGLE in Google Chrome prior… |
Google |
Chrome |
2026-10-20T21:02:35.049Z | 2026-10-29T14:12:02.020Z |
| cve-2026-54668 | Kitodo.Production: XXE in XMLUtils EAD/XML upload pars… |
kitodo |
kitodo-production |
2026-10-23T14:54:35.530Z | 2026-10-29T14:11:07.235Z | |
| cve-2026-103665 | 7.8 (v3.0) 8.4 (v4.0) | The installer for Yamaha LAN Monitor for Windows … |
Yamaha Corporation |
Yamaha LAN Monitor for Windows |
2026-10-29T11:33:30.885Z | 2026-10-29T14:10:50.402Z |
| cve-2026-115711 | 6.4 (v3.1) | Insertion of Sensitive Information into Externally-Acc… |
Elastic |
Elastic Cloud Enterprise |
2026-10-29T14:10:04.920Z | 2026-10-29T14:10:04.920Z |
| cve-2026-115709 | 8.2 (v3.1) | Improper Link Resolution Before File Access ('Link Fol… |
Elastic |
Elastic Cloud Enterprise |
2026-10-29T14:10:03.402Z | 2026-10-29T14:10:03.402Z |
| cve-2026-115708 | 7.2 (v3.1) | Improper Link Resolution Before File Access ('Link Fol… |
Elastic |
Elastic Cloud Enterprise |
2026-10-29T14:10:01.656Z | 2026-10-29T14:10:01.656Z |
| cve-2026-115707 | 6.4 (v3.1) | Insertion of Sensitive Information into Externally-Acc… |
Elastic |
Elastic Cloud Enterprise |
2026-10-29T14:09:59.890Z | 2026-10-29T14:09:59.890Z |
| cve-2026-115706 | 6.8 (v3.1) | Authorization Bypass Through User-Controlled Key in El… |
Elastic |
Elastic Cloud Enterprise |
2026-10-29T14:09:58.330Z | 2026-10-29T14:09:58.330Z |
| cve-2026-119028 | 8.7 (v4.0) 8.8 (v3.1) | oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non… |
oapi-codegen |
oapi-codegen |
2026-10-29T11:36:34.692Z | 2026-10-29T14:08:24.785Z |
| cve-2026-93011 | 5.3 (v3.1) | Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec v… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T12:47:10.170Z | 2026-10-29T14:07:20.766Z |
| cve-2026-113688 | 5.3 (v4.0) | Server-Side Request Forgery in BMC ITSM SmartIT |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:01:46.475Z | 2026-10-29T14:06:49.262Z |
| cve-2026-113689 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Work Notes |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:02:34.909Z | 2026-10-29T14:06:24.850Z |
| cve-2026-113690 | 4.8 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Attachments |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:03:06.288Z | 2026-10-29T14:05:55.037Z |
| cve-2026-39902 | Cacti: Authenticated RCE on Data Input |
Cacti |
cacti |
2026-10-23T14:42:45.710Z | 2026-10-29T14:04:38.453Z | |
| cve-2026-113691 | 5.1 (v4.0) | Stored Cross-Site Scripting in BMC ITSM Knowledge Articles |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:07:03.816Z | 2026-10-29T14:03:20.544Z |
| cve-2026-119049 | 7.2 (v4.0) 7.6 (v3.1) | FreeMail before 5.3.2 Authorization Bypass via /api/cr… |
idinging |
FreeMail |
2026-10-29T13:08:50.838Z | 2026-10-29T14:02:26.966Z |
| cve-2026-79589 | N/A | The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U… |
n/a |
n/a |
2026-10-29T00:00:00.000Z | 2026-10-29T14:02:04.041Z |
| cve-2026-119053 | 6.9 (v4.0) 5.3 (v3.1) | lwIP 2.0.0 through 2.2.1 SNMP Agent Out-of-Bounds Read… |
lwIP |
lwIP |
2026-10-29T13:08:53.560Z | 2026-10-29T14:01:51.233Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000211 | Installer of "Remote Support Tool (Enkaku Support Tool)" may insecurely load Dynamic Link Libraries | 2017-08-30T15:10+09:00 | 2017-08-30T15:10+09:00 |
| jvndb-2017-000183 | Multiple cross-site scripting vulnerabilities in ScreenOS | 2017-07-24T13:52+09:00 | 2017-08-09T11:23+09:00 |
| jvndb-2017-000179 | Multiple Buffalo wireless LAN access point devices do not properly perform authentication | 2017-07-20T14:12+09:00 | 2017-07-20T14:12+09:00 |
| jvndb-2017-005137 | Multiple Vulnerabilities in Hitachi Automation Director and Hitachi Infrastructure Analytics Advisor | 2017-07-19T15:44+09:00 | 2017-07-19T15:44+09:00 |
| jvndb-2016-005802 | Microsoft IME may insecurely load Dynamic Link Libraries | 2017-07-07T15:47+09:00 | 2017-07-07T15:47+09:00 |
| jvndb-2017-002225 | Cross-site Scripting Vulnerability in multiple Hitachi products | 2017-06-30T15:56+09:00 | 2017-06-30T15:56+09:00 |
| jvndb-2017-003108 | Multiple Vulnerabilities in Hitachi IT Operations Director and JP1/IT Desktop Management | 2017-06-30T15:55+09:00 | 2017-06-30T15:55+09:00 |
| jvndb-2017-000120 | [Simeji for Windows] installer may insecurely load Dynamic Link Libraries | 2017-06-21T18:15+09:00 | 2017-06-21T18:15+09:00 |
| jvndb-2017-000139 | WordPress plugin "WP Job Manager" fails to restrict access permissions | 2017-06-15T14:32+09:00 | 2017-06-15T14:32+09:00 |
| jvndb-2017-000009 | MaruUo Factory's multiple AttacheCase products vulnerable to directory traversal | 2017-01-16T14:41+09:00 | 2017-06-06T16:13+09:00 |
| jvndb-2017-000008 | AttacheCase vulnerable to directory traversal | 2017-01-16T14:35+09:00 | 2017-06-06T16:13+09:00 |
| jvndb-2017-000040 | Multiple I-O DATA network camera products vulnerable to OS command injection | 2017-03-02T14:36+09:00 | 2017-06-06T15:52+09:00 |
| jvndb-2017-000039 | Multiple I-O DATA network camera products vulnerable to HTTP header injection | 2017-03-02T14:36+09:00 | 2017-06-06T15:52+09:00 |
| jvndb-2017-000007 | Cybozu Remote Service Manager fails to verify client certificates | 2017-01-11T13:46+09:00 | 2017-06-06T15:52+09:00 |
| jvndb-2017-000010 | smalruby-editor vulnerable to OS command injection | 2017-01-24T13:34+09:00 | 2017-06-06T15:40+09:00 |
| jvndb-2017-000077 | Installer of Vivaldi for Windows may insecurely load executable files | 2017-04-25T13:36+09:00 | 2017-06-06T15:04+09:00 |
| jvndb-2017-000071 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2017-04-19T14:43+09:00 | 2017-06-06T14:50+09:00 |
| jvndb-2017-000011 | Knowledge vulnerable to cross-site request forgery | 2017-01-24T14:12+09:00 | 2017-06-06T14:38+09:00 |
| jvndb-2017-000061 | CS-Cart Japanese Edition fails to restrict access permissions | 2017-04-10T13:47+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000023 | TVer App for Android fails to verify SSL server certificates | 2017-02-10T15:14+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000017 | Business LaLa Call App for Android fails to verify SSL server certificates | 2017-02-03T13:58+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000016 | LaLa Call App for Android fails to verify SSL server certificates | 2017-02-03T13:31+09:00 | 2017-06-06T11:52+09:00 |
| jvndb-2017-000024 | Self-Extracting Archives created by 7-ZIP32.DLL may insecurely load Dynamic Link Libraries | 2017-02-17T15:13+09:00 | 2017-06-05T11:55+09:00 |
| jvndb-2017-000034 | Access CX App fails to verify SSL server certificates | 2017-03-01T16:31+09:00 | 2017-06-05T11:26+09:00 |
| jvndb-2017-000041 | Multiple I-O DATA network camera products vulnerable to buffer overflow | 2017-03-02T14:36+09:00 | 2017-06-05T11:10+09:00 |
| jvndb-2017-000044 | CentreCOM AR260S V2 vulnerable to privilege escalation | 2017-03-30T14:37+09:00 | 2017-06-05T10:51+09:00 |
| jvndb-2017-000045 | Cybozu KUNAI for Android information management vulnerability | 2017-03-13T13:42+09:00 | 2017-06-02T18:04+09:00 |
| jvndb-2017-000022 | Multiple cross-site scripting vulnerabilities in Webmin | 2017-02-09T14:06+09:00 | 2017-06-02T18:04+09:00 |
| jvndb-2017-000056 | CS-Cart Japanese Edition fails to restrict access permissions | 2017-04-10T18:13+09:00 | 2017-06-01T17:39+09:00 |
| jvndb-2017-000054 | ASSETBASE vulnerable to cross-site scripting | 2017-04-11T13:37+09:00 | 2017-06-01T17:16+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0782 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-09-11T00:00:00.000000 | 2025-09-11T00:00:00.000000 |
| certfr-2025-avi-0781 | Multiples vulnérabilités dans Cisco IOS XR | 2025-09-11T00:00:00.000000 | 2025-09-11T00:00:00.000000 |
| certfr-2025-avi-0780 | Multiples vulnérabilités dans les produits Microsoft | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0779 | Multiples vulnérabilités dans Microsoft Azure | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0778 | Multiples vulnérabilités dans Microsoft Windows | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0777 | Multiples vulnérabilités dans Microsoft Office | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0776 | Multiples vulnérabilités dans GitLab | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0775 | Multiples vulnérabilités dans Curl | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0774 | Vulnérabilité dans Liferay | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0773 | Multiples vulnérabilités dans les produits Fortinet | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0772 | Vulnérabilité dans les points d'accès Sophos AP6 | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0771 | Multiples vulnérabilités dans Xen | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0770 | Multiples vulnérabilités dans les produits Adobe | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0769 | Multiples vulnérabilités dans Google Chrome | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0768 | Multiples vulnérabilités dans les produits Ivanti | 2025-09-10T00:00:00.000000 | 2025-09-10T00:00:00.000000 |
| certfr-2025-avi-0767 | Vulnérabilité dans les produits Adobe | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0765 | Multiples vulnérabilités dans les produits Siemens | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0764 | Multiples vulnérabilités dans les produits SAP | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0763 | Vulnérabilité dans Spring Cloud Gateway | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0762 | Vulnérabilité dans SPIP | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0761 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0760 | Multiples vulnérabilités dans les produits IBM | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0759 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0758 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0757 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0756 | Multiples vulnérabilités dans les produits VMware | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0755 | Vulnérabilité dans les produits Synology | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0754 | Multiples vulnérabilités dans les produits VMware | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0753 | Vulnérabilité dans Shibboleth Service Provider | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0752 | Multiples vulnérabilités dans Google Pixel | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |