Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-11837 | 7.3 (v3.1) | Ansible-collection-ansible-posix: ansible.posix author… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-06-10T05:03:05.734Z | 2026-10-29T14:01:46.054Z |
| cve-2026-113692 | 6.9 (v4.0) | Path Traversal in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:08:54.995Z | 2026-10-29T14:00:48.538Z |
| cve-2026-55463 | Goobi viewer: WebSocket endpoints lack server-side aut… |
intranda |
goobi-viewer-core |
2026-10-23T14:17:06.825Z | 2026-10-29T13:59:55.819Z | |
| cve-2026-113693 | 5.3 (v4.0) | System Account Credential Disclosure in BMC ITSM |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:09:39.803Z | 2026-10-29T13:59:33.397Z |
| cve-2026-118425 | 6.8 (v3.1) | Keycloak-services: keycloak-services: redirect uri dom… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-29T13:58:32.731Z | 2026-10-29T13:58:32.731Z |
| cve-2026-46347 | Goobi viewer: Predictable Replacement Password Allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:51.802Z | 2026-10-29T13:57:32.624Z | |
| cve-2026-55442 | Goobi viewer: cleanUpQuery double-brace bypass allows … |
intranda |
goobi-viewer-core |
2026-10-23T14:14:26.455Z | 2026-10-29T13:56:19.871Z | |
| cve-2026-92152 | F´: Unvalidated Port Index in GenericHub |
nasa |
fprime |
2026-10-14T17:08:25.371Z | 2026-10-29T13:55:58.353Z | |
| cve-2026-115457 | baserCMS: Unauthenticated Stored XSS via Shortcode Exp… |
baserproject |
basercms |
2026-10-23T14:00:33.254Z | 2026-10-29T13:55:12.435Z | |
| cve-2026-92158 | F´: FpySequencer Integer Overflow in Stack Offset/Size… |
nasa |
fprime |
2026-10-14T17:14:17.994Z | 2026-10-29T13:54:17.108Z | |
| cve-2026-56838 | PraisonAI recipe.run_stream skips dangerous-tool polic… |
MervinPraison |
PraisonAI |
2026-10-23T11:58:01.475Z | 2026-10-29T13:53:23.978Z | |
| cve-2026-100413 | SeaweedFS: Hard-coded SSH host key can be presented by… |
seaweedfs |
seaweedfs |
2026-10-14T18:03:12.709Z | 2026-10-29T13:52:32.572Z | |
| cve-2026-113694 | 5.3 (v4.0) | Improper Authorization in BMC ITSM SmartIT Attachments |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:12:52.855Z | 2026-10-29T13:51:08.903Z |
| cve-2026-55572 | e107: SQL injection in alt_auth plugin (otherdb / e107… |
e107inc |
e107 |
2026-10-14T18:12:10.984Z | 2026-10-29T13:50:36.643Z | |
| cve-2026-113695 | 4.8 (v4.0) | Reflected Cross-Site Scripting in BMC ITSM SmartIT |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:14:32.009Z | 2026-10-29T13:50:29.419Z |
| cve-2026-113696 | 5.3 (v4.0) | Improper Authorization in BMC ITSM SmartIT Change Approvals |
BMC |
BMC IT Service Management Suite |
2026-10-29T13:29:15.025Z | 2026-10-29T13:49:59.814Z |
| cve-2026-114614 | Authlib: is_secure_transport() loopback exemption can … |
authlib |
authlib |
2026-10-22T21:00:14.354Z | 2026-10-29T13:49:50.607Z | |
| cve-2026-113697 | 4.8 (v4.0) | Reflected Cross-Site Scripting in BMC Helix Operations… |
BMC |
BMC Helix Operations Management |
2026-10-29T13:31:46.427Z | 2026-10-29T13:49:18.392Z |
| cve-2026-55786 | Flyto2 Core: Unauthenticated Command Execution via HTT… |
flytohub |
flyto-core |
2026-10-14T18:14:39.210Z | 2026-10-29T13:49:14.344Z | |
| cve-2026-115355 | 8.7 (v4.0) 7.5 (v3.1) | Mistune before 3.3.0 Path Traversal and XSS via Includ… |
lepture |
mistune |
2026-10-22T19:13:31.904Z | 2026-10-29T13:48:43.278Z |
| cve-2026-114349 | Apache Kafka: Denial of service via unbounded memory a… |
Apache Software Foundation |
Apache Kafka |
2026-10-28T16:46:54.920Z | 2026-10-29T13:48:26.738Z | |
| cve-2026-116863 | 9.6 (v3.1) | WordPress Newsletters plugin <= 4.18.2 - Cross Site Re… |
Tribulant Software |
Newsletters |
2026-10-27T15:56:41.312Z | 2026-10-29T13:47:39.657Z |
| cve-2026-116855 | 5.4 (v3.1) | WordPress My auctions allegro plugin <= 4.0.3 - Broken… |
wphocus |
My auctions allegro |
2026-10-28T11:17:47.505Z | 2026-10-29T13:47:39.509Z |
| cve-2026-115609 | 7.1 (v3.1) | WordPress GetPaid plugin <= 2.8.62 - Cross Site Script… |
Stiofan |
GetPaid |
2026-10-28T13:00:11.577Z | 2026-10-29T13:47:39.348Z |
| cve-2026-115606 | 7.1 (v3.1) | WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scr… |
Crowd Favorite |
DXP ToolKit |
2026-10-28T13:00:11.719Z | 2026-10-29T13:47:39.191Z |
| cve-2026-115957 | 6.5 (v3.1) | WordPress WP Discussion Board plugin <= 2.6.0 - Cross … |
WP Discussion Board |
WP Discussion Board |
2026-10-28T13:00:12.485Z | 2026-10-29T13:47:39.035Z |
| cve-2026-115607 | 9.3 (v3.1) | WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection … |
Crowd Favorite |
DXP ToolKit |
2026-10-28T13:00:12.493Z | 2026-10-29T13:47:38.888Z |
| cve-2026-115593 | 7.1 (v3.1) | WordPress Unlimited Elements For Elementor (Free Widge… |
Unlimited Elements |
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) |
2026-10-28T13:00:13.871Z | 2026-10-29T13:47:38.730Z |
| cve-2026-115591 | 7.5 (v3.1) | WordPress Contact Form by Supsystic plugin <= 1.10.5 -… |
Supsystic |
Contact Form by Supsystic |
2026-10-28T13:00:13.962Z | 2026-10-29T13:47:38.566Z |
| cve-2026-111850 | 8.5 (v3.1) | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection … |
BuddyPress |
BuddyPress |
2026-10-28T13:00:27.940Z | 2026-10-29T13:47:38.415Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000049 | Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries | 2017-03-22T14:43+09:00 | 2017-06-01T17:16+09:00 |
| jvndb-2017-000003 | Olive Diary DX vulnerable to cross-site scripting | 2017-01-06T14:02+09:00 | 2017-06-01T15:58+09:00 |
| jvndb-2017-000002 | WEB SCHEDULE vulnerable to cross-site scripting | 2017-01-06T14:01+09:00 | 2017-06-01T15:58+09:00 |
| jvndb-2017-000001 | Olive Blog vulnerable to cross-site scripting | 2017-01-06T13:56+09:00 | 2017-06-01T15:58+09:00 |
| jvndb-2017-000062 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-10T13:47+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000059 | WN-G300R3 vulnerable to OS command injection | 2017-04-10T13:36+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000058 | Tablacus Explorer vulnerable to script injection | 2017-04-07T14:47+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000055 | NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control | 2017-04-18T13:42+09:00 | 2017-06-01T15:24+09:00 |
| jvndb-2017-000067 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-13T13:49+09:00 | 2017-06-01T15:23+09:00 |
| jvndb-2017-000050 | WordPress plugin "YOP Poll" vulnerable to cross-site scripting | 2017-03-23T12:23+09:00 | 2017-06-01T15:08+09:00 |
| jvndb-2017-000047 | Security guide for website operators vulnerable to OS command injection | 2017-03-16T13:32+09:00 | 2017-06-01T15:08+09:00 |
| jvndb-2017-000043 | OneThird CMS vulnerable to cross-site scripting | 2017-03-08T09:57+09:00 | 2017-06-01T15:08+09:00 |
| jvndb-2017-000032 | Cybozu Garoon fails to restrict access permission in the mail function | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000031 | Cybozu Garoon fails to restrict access permission in Workflow and the function "MultiReport" | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000030 | Cybozu Garoon vulnerable to information disclosure | 2017-02-20T15:40+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000029 | Cybozu Garoon vulnerable to cross-site scripting | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000028 | Cybozu Garoon fails to restrict access permission in the Phone Messages function | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000027 | Cybozu Garoon vulnerable to SQL injection | 2017-02-20T15:38+09:00 | 2017-06-01T15:05+09:00 |
| jvndb-2017-000074 | WordPress plugin "Booking Calendar" vulnerable to cross-site scripting | 2017-04-20T15:11+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000073 | WordPress plugin "Booking Calendar" vulnerable to directory traversal | 2017-04-20T15:11+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000072 | WNC01WH vulnerable to OS command injection | 2017-04-21T13:44+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000070 | WN-AC1167GR vulnerable to cross-site scripting | 2017-04-14T13:55+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000068 | WordPress plugin "WP Statistics" vulnerable to cross-site scripting | 2017-04-13T13:49+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000060 | WN-G300R3 vulnerable to stack based buffer overflow | 2017-04-10T13:40+09:00 | 2017-06-01T13:53+09:00 |
| jvndb-2017-000076 | Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries | 2017-04-20T15:11+09:00 | 2017-06-01T13:40+09:00 |
| jvndb-2017-000075 | Hoozin Viewer vulnerable to buffer overflow | 2017-04-20T14:48+09:00 | 2017-06-01T13:40+09:00 |
| jvndb-2017-000042 | OneThird CMS vulnerable to cross-site scripting | 2017-03-08T09:57+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000037 | WBCE CMS vulnerable to SQL injection | 2017-02-28T14:22+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000036 | WBCE CMS vulnerable to directory traversal | 2017-02-28T14:21+09:00 | 2017-06-01T12:28+09:00 |
| jvndb-2017-000035 | WBCE CMS vulnerable to cross-site scripting | 2017-02-28T14:21+09:00 | 2017-06-01T12:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0751 | Multiples vulnérabilités dans les produits VMware | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0750 | Multiples vulnérabilités dans Google Android | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0749 | Multiples vulnérabilités dans Google Chrome | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0748 | Vulnérabilité dans les produits Liferay | 2025-09-02T00:00:00.000000 | 2025-09-02T00:00:00.000000 |
| certfr-2025-avi-0747 | Multiples vulnérabilités dans les produits Qnap | 2025-09-01T00:00:00.000000 | 2025-09-01T00:00:00.000000 |
| certfr-2025-avi-0746 | Multiples vulnérabilités dans les produits IBM | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0745 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0744 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0743 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0742 | Vulnérabilité dans Microsoft Edge | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0741 | Vulnérabilité dans Wireshark | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0740 | Multiples vulnérabilités dans Tenable Security Center | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0739 | Multiples vulnérabilités dans Asterisk | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0738 | Multiples vulnérabilités dans les produits Elastic | 2025-08-29T00:00:00.000000 | 2025-08-29T00:00:00.000000 |
| certfr-2025-avi-0737 | Multiples vulnérabilités dans les produits Cisco | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0736 | Multiples vulnérabilités dans GitLab | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0735 | Vulnérabilité dans GLPI | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0734 | Vulnérabilité dans ISC Kea DHCP | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0733 | Vulnérabilité dans Nagios XI | 2025-08-28T00:00:00.000000 | 2025-08-28T00:00:00.000000 |
| certfr-2025-avi-0732 | Vulnérabilité dans Google Chrome | 2025-08-27T00:00:00.000000 | 2025-08-27T00:00:00.000000 |
| certfr-2025-avi-0731 | Vulnérabilité dans Shibboleth Identity Provider | 2025-08-27T00:00:00.000000 | 2025-08-27T00:00:00.000000 |
| certfr-2025-avi-0730 | Multiples vulnérabilités dans Citrix NetScaler ADC et NetScaler Gateway | 2025-08-26T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-avi-0729 | Multiples vulnérabilités dans Qnap File Station | 2025-08-26T00:00:00.000000 | 2025-08-26T00:00:00.000000 |
| certfr-2025-avi-0728 | Vulnérabilité dans Centreon Web | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0727 | Multiples vulnérabilités dans les produits ESET | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0726 | Vulnérabilité dans les produits Moxa | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0725 | Vulnérabilité dans Liferay | 2025-08-25T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0643 | Vulnérabilité dans Mattermost Server | 2025-07-31T00:00:00.000000 | 2025-08-25T00:00:00.000000 |
| certfr-2025-avi-0724 | Multiples vulnérabilités dans les produits IBM | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0723 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |