Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116404 | 6.5 (v3.1) | WordPress Redux Framework plugin <= 4.5.16 - Broken Ac… |
David Anderson |
Redux Framework |
2026-10-28T13:00:27.971Z | 2026-10-29T13:47:38.245Z |
| cve-2026-116392 | 7.2 (v3.1) | WordPress Accordion plugin <= 2.3.25 - PHP Object Inje… |
PickPlugins |
Accordion |
2026-10-28T13:00:28.367Z | 2026-10-29T13:47:38.092Z |
| cve-2026-116391 | 8.8 (v3.1) | WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object … |
GS Plugins |
GS Logo Slider |
2026-10-28T13:00:28.765Z | 2026-10-29T13:47:37.936Z |
| cve-2026-115590 | 7.2 (v3.1) | WordPress Dokan plugin <= 5.3.1 - PHP Object Injection… |
weDevs |
Dokan |
2026-10-28T14:02:56.306Z | 2026-10-29T13:47:37.789Z |
| cve-2026-116389 | 8.8 (v3.1) | WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP … |
crossi72 |
Phoenix Media Rename |
2026-10-28T14:02:56.685Z | 2026-10-29T13:47:37.643Z |
| cve-2026-116390 | 7.2 (v3.1) | WordPress Filter Everything — WordPress & WooCommerce … |
stepasyuk |
Filter Everything — WordPress & WooCommerce Filters |
2026-10-28T14:02:57.098Z | 2026-10-29T13:47:37.495Z |
| cve-2026-115603 | 8.5 (v3.1) | WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL… |
Advanced Ads GmbH |
Advanced Ads – Tracking |
2026-10-28T14:02:57.872Z | 2026-10-29T13:47:37.343Z |
| cve-2026-118093 | 5.3 (v3.1) | WordPress Product Feed Manager plugin <= 7.14.1 - Brok… |
WPFunnels Team |
Product Feed Manager |
2026-10-29T12:58:10.017Z | 2026-10-29T13:47:37.178Z |
| cve-2026-56056 | 6.5 (v3.1) | WordPress The Post Grid plugin <= 7.9.7 - Cross Site S… |
Mamunur Rashid |
The Post Grid |
2026-10-29T12:58:32.218Z | 2026-10-29T13:47:37.027Z |
| cve-2026-39735 | 6.5 (v3.1) | WordPress JetEngine plugin <= 3.9.0.1 - Broken Access … |
Crocoblock |
JetEngine |
2026-10-29T12:58:57.438Z | 2026-10-29T13:47:36.877Z |
| cve-2026-118094 | 6.5 (v3.1) | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Sc… |
Igor Funa |
Ad Inserter |
2026-10-29T12:59:46.185Z | 2026-10-29T13:47:36.720Z |
| cve-2026-118087 | 6.5 (v3.1) | WordPress Site Reviews plugin <= 8.3.5 - Cross Site Sc… |
Gemini Labs |
Site Reviews |
2026-10-29T13:01:05.153Z | 2026-10-29T13:47:36.553Z |
| cve-2026-42703 | 6.5 (v3.1) | WordPress Kali Forms plugin <= 2.4.27 - Broken Access … |
Kaliforms |
Kali Forms |
2026-10-29T13:01:49.395Z | 2026-10-29T13:47:36.384Z |
| cve-2026-24533 | 6.5 (v3.1) | WordPress Cozy Blocks plugin <= 2.2.27 - Cross Site Sc… |
CozyThemes |
Cozy Blocks |
2026-10-29T13:02:13.252Z | 2026-10-29T13:47:36.226Z |
| cve-2026-52709 | 6.5 (v3.1) | WordPress Video Gallery Block plugin <= 1.6.0 - Cross … |
bPlugins |
Video Gallery Block |
2026-10-29T13:03:56.761Z | 2026-10-29T13:47:36.058Z |
| cve-2026-22386 | 4.3 (v3.1) | WordPress WP Job Portal plugin <= 2.7.1 - Broken Acces… |
Ahmad |
WP Job Portal |
2026-10-29T13:04:17.195Z | 2026-10-29T13:47:35.898Z |
| cve-2026-48196 | 6.5 (v3.1) | WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scr… |
Kaliforms |
Kali Forms |
2026-10-29T13:04:39.022Z | 2026-10-29T13:47:35.754Z |
| cve-2026-39741 | 5.3 (v3.1) | WordPress Simple Cloudflare Turnstile plugin <= 1.44.0… |
RelyWP |
Simple Cloudflare Turnstile |
2026-10-29T13:06:11.953Z | 2026-10-29T13:47:35.579Z |
| cve-2026-48195 | 6.5 (v3.1) | WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scri… |
bPlugins |
PDF Poster |
2026-10-29T13:07:16.802Z | 2026-10-29T13:47:35.412Z |
| cve-2026-42707 | 4.3 (v3.1) | WordPress HivePress Claim Listings plugin <= 1.1.4 - B… |
HivePress |
HivePress Claim Listings |
2026-10-29T13:07:48.740Z | 2026-10-29T13:47:35.256Z |
| cve-2026-54862 | 6.5 (v3.1) | WordPress Import and export users and customers plugin… |
Codection |
Import and export users and customers |
2026-10-29T13:09:14.823Z | 2026-10-29T13:47:35.097Z |
| cve-2026-73261 | Mongoose: handle_opt() missing opts[1] > len check — 1… |
cesanta |
mongoose |
2026-10-14T18:25:41.102Z | 2026-10-29T13:46:18.474Z | |
| cve-2026-102682 | Pipecat: Public exposure of Pipecat’s development runn… |
pipecat-ai |
pipecat |
2026-10-14T18:30:07.020Z | 2026-10-29T13:44:39.699Z | |
| cve-2026-107445 | 5.4 (v3.1) | Rubygem-katello: katello: katello: katello flatpak rem… |
Red Hat |
Red Hat Hardened Images |
2026-10-08T03:43:03.553Z | 2026-10-29T13:43:30.930Z |
| cve-2026-104109 | FileRise: Authenticated ZIP extraction follows a pre-e… |
error311 |
FileRise |
2026-10-14T20:44:29.439Z | 2026-10-29T13:43:27.067Z | |
| cve-2026-74860 | 8.5 (v3.1) | Libxml2: double-free/uaf in libxml2 python bindings |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-09-08T11:27:45.158Z | 2026-10-29T13:43:03.785Z |
| cve-2026-100353 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: T… |
getkin |
kin-openapi |
2026-10-15T16:03:50.514Z | 2026-10-29T13:41:31.986Z | |
| cve-2026-61611 | Lychee: Missing rate limiting on album password unlock… |
LycheeOrg |
Lychee |
2026-10-15T16:25:24.968Z | 2026-10-29T13:40:09.476Z | |
| cve-2026-115328 | 8.7 (v4.0) 8.8 (v3.1) | JSON-SCADA before 0.65-alpha SQL Injection via OPC His… |
riclolsen |
json-scada |
2026-10-22T10:57:45.975Z | 2026-10-29T13:39:16.913Z |
| cve-2026-114624 | baserCMS: PHP object injection via unguarded unseriali… |
baserproject |
basercms |
2026-10-23T13:47:08.832Z | 2026-10-29T13:37:07.749Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-000065 | Cybozu Office fails to restrict access permission in the templates delete function in "customapp" | 2017-04-11T16:05+09:00 | 2017-06-01T12:18+09:00 |
| jvndb-2017-000038 | CubeCart vulnerable to directory traversal | 2017-02-28T14:13+09:00 | 2017-06-01T12:18+09:00 |
| jvndb-2017-000064 | Cybozu Office fails to restrict access permission in the file export function in "customapp" | 2017-04-11T16:05+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000063 | The design setting screen in Cybozu Office vulnerable to cross-site scripting | 2017-04-11T16:05+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000021 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to cross-site request forgery | 2017-02-09T14:40+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000020 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to authentication bypass | 2017-02-09T14:39+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000019 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding | 2017-02-09T14:47+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000018 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-02-09T14:47+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000014 | CubeCart vulnerable to directory traversal | 2017-01-27T13:49+09:00 | 2017-06-01T11:30+09:00 |
| jvndb-2017-000099 | SSL Visibility Appliance may generate illegal RST packets | 2017-05-24T14:41+09:00 | 2017-05-31T19:27+09:00 |
| jvndb-2016-000067 | Jetstar App for iOS fails to verify SSL server certificates | 2016-05-24T13:36+09:00 | 2017-05-29T11:45+09:00 |
| jvndb-2016-000065 | 105 BANK App fails to verify SSL server certificates | 2016-05-18T15:26+09:00 | 2017-05-29T11:45+09:00 |
| jvndb-2016-003380 | ManageEngine Password Manager Pro vulnerable to cross-site request forgery | 2016-12-05T14:32+09:00 | 2017-05-23T16:23+09:00 |
| jvndb-2016-000135 | Cybozu Mailwise vulnerable to mail header injection | 2016-08-16T14:10+09:00 | 2017-05-23T16:23+09:00 |
| jvndb-2016-000080 | Cybozu Garoon vulnerable to denial-of-service (DoS) | 2016-05-30T16:18+09:00 | 2017-05-23T16:23+09:00 |
| jvndb-2016-000060 | Cybozu KUNAI App fails to verify SSL server certificates | 2016-05-16T16:14+09:00 | 2017-05-23T16:23+09:00 |
| jvndb-2016-006038 | Multiple SONY network cameras vulnerable to sensitive information disclosure | 2016-12-05T14:33+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000171 | ManageEngine ServiceDesk Plus uses an insecure method for cookie generation | 2016-09-29T14:39+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000170 | ManageEngine ServiceDesk Plus fails to restrict access permissions | 2016-09-29T14:39+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000169 | ManageEngine ServiceDesk Plus vulnerable to cross-site scripting | 2016-09-29T14:39+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000167 | Multiple plugins for Geeklog IVYWE edition vulnerable to cross-site scripting | 2016-09-23T14:15+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000157 | CS-Cart add-on "Twigmo" vulnerable to PHP object injection | 2016-09-14T15:00+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000153 | LINE for Windows fails to properly verify downloaded files | 2016-08-25T14:26+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000150 | Geeklog IVYWE edition contains a cross-site scripting vulnerability | 2016-08-19T14:13+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000141 | OSSEC Web UI vulnerable to cross-site scripting | 2016-08-18T14:24+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000139 | Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries | 2016-08-17T16:12+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000133 | Coordinate Plus App fails to verify SSL server certificates | 2016-08-04T13:41+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000122 | Sushiro App fails to verify SSL server certificates | 2016-06-29T14:27+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000120 | DMM Movie Player App fails to verify SSL server certificates | 2016-06-27T14:23+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000092 | DMM.com Securities FX Apps for Android fail to verify SSL server certificates | 2016-05-30T14:21+09:00 | 2017-05-23T14:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0722 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0721 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0720 | Multiples vulnérabilités dans Microsoft Windows | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0719 | Vulnérabilité dans Microsoft Edge | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0718 | Multiples vulnérabilités dans les produits Liferay | 2025-08-22T00:00:00.000000 | 2025-08-22T00:00:00.000000 |
| certfr-2025-avi-0717 | Vulnérabilité dans Elastic Beats | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0716 | Vulnérabilité dans les produits Apple | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0715 | Multiples vulnérabilités dans les produits Liferay | 2025-08-21T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0614 | Multiples vulnérabilités dans les produits Mattermost | 2025-07-23T00:00:00.000000 | 2025-08-21T00:00:00.000000 |
| certfr-2025-avi-0714 | Multiples vulnérabilités dans les produits Mozilla | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0713 | Multiples vulnérabilités dans les produits Liferay | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0712 | Vulnérabilité dans Apereo CAS | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0711 | Vulnérabilité dans Google Chrome | 2025-08-20T00:00:00.000000 | 2025-08-20T00:00:00.000000 |
| certfr-2025-avi-0710 | Multiples vulnérabilités dans les produits F5 | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0709 | Multiples vulnérabilités dans les produits Liferay | 2025-08-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0525 | Multiples vulnérabilités dans Mattermost Server | 2025-06-19T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0453 | Vulnérabilité dans Mattermost Server | 2025-05-27T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0441 | Vulnérabilité dans Mattermost Server | 2025-05-22T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0355 | Multiples vulnérabilités dans Mattermost Server | 2025-04-30T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0708 | Multiples vulnérabilités dans les produits Cisco | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0706 | Multiples vulnérabilités dans Matrix | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0705 | Multiples vulnérabilités dans Microsoft Edge | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0704 | Vulnérabilité dans les produits Siemens | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0703 | Vulnérabilité dans Synology BeeDrive | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0702 | Multiples vulnérabilités dans PostgreSQL | 2025-08-18T00:00:00.000000 | 2025-08-18T00:00:00.000000 |
| certfr-2025-avi-0701 | Vulnérabilité dans IBM WebSphere | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0700 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0699 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0698 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0697 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |