Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55826 | Customer Order Data Exposed via Unauthenticated gtm_se… |
stape-io |
gtm-server-side-wordpress-plugin |
2026-10-23T13:27:45.250Z | 2026-10-29T13:32:21.226Z | |
| cve-2024-42360 | Command Injection in sequenceserver |
wurmlab |
sequenceserver |
2024-08-14T19:50:09.469Z | 2026-10-29T13:29:01.622Z | |
| cve-2026-53921 | odhcpd: Stack buffer overflow in DHCPv6 IA reply seria… |
openwrt |
odhcpd |
2026-10-23T13:20:30.249Z | 2026-10-29T13:28:11.455Z | |
| cve-2026-112609 | N/A | This issue was addressed with improved checks. Th… |
Apple |
iOS and iPadOS |
2026-10-26T20:36:27.792Z | 2026-10-29T13:27:20.436Z |
| cve-2026-112706 | N/A | A permissions issue was addressed with additional… |
Apple |
iOS and iPadOS |
2026-10-26T20:35:30.955Z | 2026-10-29T13:27:20.295Z |
| cve-2026-112675 | N/A | This issue was addressed with additional entitlem… |
Apple |
macOS |
2026-10-26T20:35:01.395Z | 2026-10-29T13:27:20.140Z |
| cve-2026-112506 | N/A | A permissions issue was addressed with improved v… |
Apple |
macOS |
2026-10-26T20:33:15.709Z | 2026-10-29T13:27:19.992Z |
| cve-2026-112678 | N/A | A permissions issue was addressed with additional… |
Apple |
iOS and iPadOS |
2026-10-26T20:33:17.689Z | 2026-10-29T13:27:19.842Z |
| cve-2026-115752 | 2.3 (v4.0) 4.2 (v3.1) | Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via A… |
SignalK |
signalk-server |
2026-10-23T13:03:34.217Z | 2026-10-29T13:25:03.492Z |
| cve-2026-106484 | N/A | Insufficient policy enforcement in chrome-devtool… |
Google |
chrome-devtools-mcp |
2026-10-28T18:04:06.666Z | 2026-10-29T13:22:37.480Z |
| cve-2026-60874 | Vulnerability in the PeopleSoft Enterprise People… |
Oracle Corporation |
PeopleSoft Enterprise PeopleTools |
2026-10-20T21:23:27.445Z | 2026-10-29T13:21:45.832Z | |
| cve-2026-91303 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:11.878Z | 2026-10-29T13:21:08.862Z | |
| cve-2026-112617 | N/A | An information disclosure issue was addressed wit… |
Apple |
macOS |
2026-10-26T20:41:52.626Z | 2026-10-29T13:20:44.204Z |
| cve-2026-113908 | N/A | A privacy issue was addressed by removing sensiti… |
Apple |
iOS and iPadOS |
2026-10-26T20:43:41.890Z | 2026-10-29T13:20:02.972Z |
| cve-2026-115730 | 2.3 (v4.0) 3.1 (v3.1) | i18next-http-backend 4.0.2 Protocol-Relative URL Injec… |
i18next |
i18next-http-backend |
2026-10-23T12:55:09.891Z | 2026-10-29T13:19:15.108Z |
| cve-2026-65397 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:38:03.518Z | 2026-10-29T13:17:17.633Z |
| cve-2026-112455 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:33:27.547Z | 2026-10-29T13:17:17.483Z |
| cve-2026-112701 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:36:57.372Z | 2026-10-29T13:17:17.340Z |
| cve-2026-86920 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:37:11.101Z | 2026-10-29T13:17:17.187Z |
| cve-2026-112559 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:39:21.217Z | 2026-10-29T13:17:17.035Z |
| cve-2026-112685 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:40:01.497Z | 2026-10-29T13:17:16.892Z |
| cve-2026-113914 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:40:42.234Z | 2026-10-29T13:17:16.749Z |
| cve-2026-43736 | N/A | An authorization issue was addressed with improve… |
Apple |
macOS |
2026-10-26T20:43:28.280Z | 2026-10-29T13:17:16.611Z |
| cve-2026-86987 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:43:36.993Z | 2026-10-29T13:17:16.467Z |
| cve-2026-112533 | N/A | An authorization issue was addressed with improve… |
Apple |
macOS |
2026-10-26T20:43:38.966Z | 2026-10-29T13:17:16.319Z |
| cve-2026-57209 | Heimdall: Forwarded Header Injection via Unsanitized H… |
dadrus |
heimdall |
2026-10-23T12:27:19.621Z | 2026-10-29T13:16:52.579Z | |
| cve-2026-55190 | Event Schedule Vulnerable to SSRF: isUrlSafe() bypassa… |
eventschedule |
eventschedule |
2026-10-23T12:24:27.295Z | 2026-10-29T13:14:00.254Z | |
| cve-2026-93009 | 4.3 (v3.1) | Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 op… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T13:13:34.504Z | 2026-10-29T13:13:34.504Z |
| cve-2026-93010 | 4.3 (v3.1) | Dnsmasq: dnsmasq: --leasequery without address argumen… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T13:13:23.430Z | 2026-10-29T13:13:23.430Z |
| cve-2026-112658 | N/A | This issue was addressed with improved input vali… |
Apple |
iOS and iPadOS |
2026-10-26T20:34:29.088Z | 2026-10-29T13:12:57.993Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000056 | kintone mobile for Android fails to verify SSL server certificates | 2016-04-25T15:36+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000050 | Photopt App fails to verify SSL server certificates | 2016-04-19T13:44+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000049 | Tokyo Star bank App fails to verify SSL server certificates | 2016-04-13T14:30+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000004 | Shoplat App for iOS issue in the verification of SSL certificates | 2016-01-18T14:24+09:00 | 2017-05-23T13:57+09:00 |
| jvndb-2016-000047 | a-blog cms vulnerable to session management | 2016-05-16T14:48+09:00 | 2017-05-23T13:44+09:00 |
| jvndb-2016-000046 | a-blog cms vulnerable to cross-site scripting | 2016-05-16T14:48+09:00 | 2017-05-23T13:44+09:00 |
| jvndb-2016-000019 | Akerun - Smart Lock Robot App for iOS fails to verify SSL server certificates | 2016-02-12T15:59+09:00 | 2017-05-23T12:25+09:00 |
| jvndb-2016-000137 | Cybozu Mailwise vulnerable to information disclosure | 2016-08-16T14:14+09:00 | 2017-05-23T12:02+09:00 |
| jvndb-2016-000136 | Cybozu Mailwise vulnerable to information disclosure | 2016-08-16T14:14+09:00 | 2017-05-23T12:02+09:00 |
| jvndb-2016-000149 | Cybozu Garoon fails to restrict access permissions | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000148 | Cybozu Garoon vulnerable to authentication bypass | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000147 | Cybozu Garoon vulnerable to SQL injection | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000146 | "Check available times" function in Cybozu Garoon vulnerable to cross-site scripting | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000145 | "New appointment" function in Cybozu Garoon vulnerable to cross-site scripting | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000144 | "User details" function in Cybozu Garoon vulnerable to cross-site scripting | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000143 | "Response request" function in Cybozu Garoon vulnerable to cross-site scripting | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000142 | Cybozu Garoon vulnerable to open redirect | 2016-08-22T15:16+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2016-000138 | Cybozu Mailwise contains issue in preventing clickjacking attacks | 2016-08-16T14:14+09:00 | 2017-05-23T12:01+09:00 |
| jvndb-2014-000069 | RockDisk vulnerable to cross-site scripting | 2014-07-02T14:40+09:00 | 2017-05-17T17:07+09:00 |
| jvndb-2016-000201 | SetucoCMS vulnerable to session management | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000200 | SetucoCMS vulnerable to code injection | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000199 | SetucoCMS vulnerable to denial-of-service (DoS) | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000198 | SetucoCMS vulnerable to SQL injection | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000197 | SetucoCMS vulnerable to cross-site scripting | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000196 | SetucoCMS vulnerable to cross-site request forgery | 2016-10-07T15:04+09:00 | 2017-05-17T14:44+09:00 |
| jvndb-2016-000202 | Usermin cross-site scripting vulnerabilties | 2016-10-07T13:50+09:00 | 2017-05-16T17:52+09:00 |
| jvndb-2017-000033 | PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries | 2017-03-01T15:53+09:00 | 2017-05-15T11:27+09:00 |
| jvndb-2016-000193 | Cybozu Office vulnerable to Reflected File Download (RFD) | 2016-10-03T15:47+09:00 | 2017-04-24T15:10+09:00 |
| jvndb-2016-000192 | Cybozu Office vulnerable to denial-of-service (DoS) | 2016-10-03T15:46+09:00 | 2017-04-24T15:10+09:00 |
| jvndb-2016-000189 | "Project" function in Cybozu Office vulnerable vulnerable to operation restriction bypass | 2016-10-03T15:43+09:00 | 2017-04-24T15:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0696 | Vulnérabilité dans Spring Framework | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0695 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0694 | Vulnérabilité dans Apache Tomcat | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0693 | Multiples vulnérabilités dans VMware Tanzu | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0692 | Multiples vulnérabilités dans Ruby on Rails | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0691 | Vulnérabilité dans Nginx | 2025-08-14T00:00:00.000000 | 2025-08-14T00:00:00.000000 |
| certfr-2025-avi-0690 | Multiples vulnérabilités dans GitLab | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0689 | Multiples vulnérabilités dans les produits Microsoft | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0688 | Multiples vulnérabilités dans Microsoft Azure | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0687 | Multiples vulnérabilités dans Microsoft Windows | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0686 | Multiples vulnérabilités dans Microsoft Office | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0685 | Multiples vulnérabilités dans Microsoft Edge | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0684 | Multiples vulnérabilités dans les produits Intel | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0683 | Multiples vulnérabilités dans les produits Ivanti | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0682 | Multiples vulnérabilités dans Liferay | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0681 | Multiples vulnérabilités dans Google Chrome | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0680 | Multiples vulnérabilités dans les produits FoxIT | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0679 | Multiples vulnérabilités dans les produits Fortinet | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0678 | Multiples vulnérabilités dans les produits Adobe | 2025-08-13T00:00:00.000000 | 2025-08-13T00:00:00.000000 |
| certfr-2025-avi-0677 | Multiples vulnérabilités dans les produits Siemens | 2025-08-12T00:00:00.000000 | 2025-08-12T00:00:00.000000 |
| certfr-2025-avi-0676 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-08-12T00:00:00.000000 | 2025-08-12T00:00:00.000000 |
| certfr-2025-avi-0675 | Vulnérabilité dans Liferay | 2025-08-12T00:00:00.000000 | 2025-08-12T00:00:00.000000 |
| certfr-2025-avi-0674 | Multiples vulnérabilités dans les produits SAP | 2025-08-12T00:00:00.000000 | 2025-08-12T00:00:00.000000 |
| certfr-2025-avi-0673 | Vulnérabilité dans Centreon Gorgone | 2025-08-12T00:00:00.000000 | 2025-08-12T00:00:00.000000 |
| certfr-2025-avi-0672 | Multiples vulnérabilités dans Liferay | 2025-08-11T00:00:00.000000 | 2025-08-11T00:00:00.000000 |
| certfr-2025-avi-0671 | Multiples vulnérabilités dans les produits IBM | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0670 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0669 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0668 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0667 | Multiples vulnérabilités dans Juniper Secure Analytics | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |