Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-81034 | 8.3 (v4.0) 6.5 (v3.1) | Netmaker through 1.6.0 Improper Certificate Validation… |
gravitl |
netmaker |
2026-08-26T15:45:01.529Z | 2026-08-26T18:31:47.883Z |
| cve-2026-81033 | 6.9 (v4.0) 5.3 (v3.1) | Automatisch through 0.15.0 User Enumeration via Forgot… |
automatisch |
automatisch |
2026-08-26T15:45:00.826Z | 2026-08-28T16:00:31.483Z |
| cve-2026-81032 | 9.3 (v4.0) 9.8 (v3.1) | NebulaGraph through 3.8.0 Unauthenticated Read and Mod… |
vesoft-inc |
nebula |
2026-08-26T15:45:00.144Z | 2026-08-26T17:10:45.206Z |
| cve-2026-81031 | 8.6 (v4.0) 7.2 (v3.1) | IDURAR ERP CRM through 4.1.1 Account Takeover via Unve… |
idurar |
idurar-erp-crm |
2026-08-26T15:44:59.362Z | 2026-08-29T02:43:32.712Z |
| cve-2026-81030 | 7.1 (v4.0) 6.5 (v3.1) | Mage AI through 0.9.79 Arbitrary File Read via Unvalid… |
mage-ai |
mage-ai |
2026-08-26T15:44:58.663Z | 2026-08-26T16:05:12.110Z |
| cve-2026-81029 | 8.5 (v4.0) 8.1 (v3.1) | OpenMetadata before 2.0.0 JWT Disclosure via Unvalidat… |
open-metadata |
OpenMetadata |
2026-08-26T15:44:57.988Z | 2026-08-26T18:32:59.057Z |
| cve-2026-81028 | 6.9 (v4.0) 4.9 (v3.1) | ZLMediaKit downloadFile Root-Directory Confinement Byp… |
ZLMediaKit |
ZLMediaKit |
2026-08-26T15:44:57.303Z | 2026-08-28T16:00:38.893Z |
| cve-2026-81027 | 8.4 (v4.0) 8.5 (v3.1) | one-api through 0.6.10 Missing Authorization on URL-Pa… |
songquanpeng |
one-api |
2026-08-26T15:44:56.599Z | 2026-08-26T17:25:39.276Z |
| cve-2026-80428 | 9.3 (v4.0) 9.8 (v3.1) | ILIAS before 9.22, 10.10 and 11.3 Unauthenticated PHP … |
ILIAS-eLearning e.V. |
ILIAS |
2026-08-26T15:44:55.917Z | 2026-08-29T02:41:40.892Z |
| cve-2026-80427 | 8.6 (v4.0) 8.4 (v3.1) | bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument I… |
nfriedly |
bestzip |
2026-08-26T15:44:55.220Z | 2026-08-29T11:48:06.751Z |
| cve-2026-80426 | 7 (v4.0) 7.1 (v3.1) | FiftyOne before 1.21.0 Stored Cross-Site Scripting via… |
voxel51 |
fiftyone |
2026-08-26T15:44:54.517Z | 2026-08-29T11:48:06.089Z |
| cve-2026-48549 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:37:20.083Z | 2026-08-28T16:00:44.978Z |
| cve-2026-48548 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core CSRF via cmd.cgi |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:33:59.685Z | 2026-08-26T17:29:31.213Z |
| cve-2026-54614 | DebugKit: MailPreview contains unsafe reflection |
cakephp |
debug_kit |
2026-08-26T15:30:23.966Z | 2026-08-29T02:40:09.901Z | |
| cve-2026-54569 | SENAITE.CORE: Improper Neutralization of Directives in… |
senaite |
senaite.core |
2026-08-26T15:28:19.919Z | 2026-08-26T17:35:57.088Z | |
| cve-2026-54606 | SunEditor: DOM XSS in SunEditor Embed Plugin via Exter… |
JiHong88 |
suneditor |
2026-08-26T15:25:58.083Z | 2026-08-26T18:28:06.384Z | |
| cve-2026-75062 | 9.2 (v4.0) | Eval Injection in google/langfun via default lf.query … |
Google |
langfun |
2026-08-26T14:50:50.604Z | 2026-08-27T16:55:00.832Z |
| cve-2026-80589 | block: stop the timeout timer when releasing a never a… |
Linux |
Linux |
2026-08-26T14:37:43.293Z | 2026-08-27T05:02:10.391Z | |
| cve-2026-80588 | mptcp: reclaim forward-allocated memory on RX path errors |
Linux |
Linux |
2026-08-26T14:37:42.685Z | 2026-08-27T05:02:09.335Z | |
| cve-2026-80587 | mptcp: avoid combining some incoming suboptions |
Linux |
Linux |
2026-08-26T14:37:42.093Z | 2026-08-27T12:40:23.299Z | |
| cve-2026-80586 | mptcp: options: reset DSS fields in case of unexpected size |
Linux |
Linux |
2026-08-26T14:37:41.493Z | 2026-08-27T05:02:07.204Z | |
| cve-2026-80585 | mptcp: fastopen: only mark MPTFO subflows with SYN data |
Linux |
Linux |
2026-08-26T14:37:40.901Z | 2026-08-27T05:02:06.112Z | |
| cve-2026-80584 | s390/qeth: validate user buffer length in SNMP and ARP… |
Linux |
Linux |
2026-08-26T14:37:40.302Z | 2026-08-27T05:02:04.879Z | |
| cve-2026-80583 | ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses |
Linux |
Linux |
2026-08-26T14:37:39.704Z | 2026-08-27T12:40:21.902Z | |
| cve-2026-80582 | drm/shmem_helper: Check VMA boundaries for PMD mappings |
Linux |
Linux |
2026-08-26T14:37:39.113Z | 2026-08-27T05:02:02.758Z | |
| cve-2026-80581 | N/A | ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in … |
Linux |
Linux |
2026-08-26T14:37:38.510Z | 2026-08-27T12:40:20.576Z |
| cve-2026-80580 | fbdev: bound mode sysfs output to the sysfs buffer |
Linux |
Linux |
2026-08-26T14:37:37.917Z | 2026-08-27T05:02:01.683Z | |
| cve-2026-80579 | fbdev: clear fb_info->mode before deleting a videomode |
Linux |
Linux |
2026-08-26T14:37:37.320Z | 2026-08-27T05:02:00.629Z | |
| cve-2026-80578 | fbdev: core: Fix pointer desynchronization in fb_io_read() |
Linux |
Linux |
2026-08-26T14:37:36.722Z | 2026-08-27T05:01:59.582Z | |
| cve-2026-80577 | N/A | drm/panthor: skip zero-sized firmware sections |
Linux |
Linux |
2026-08-26T14:37:36.132Z | 2026-08-26T14:37:36.132Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000046 | a-blog cms vulnerable to cross-site scripting | 2016-05-16T14:48+09:00 | 2017-05-23T13:44+09:00 |
| jvndb-2016-000064 | WordPress plugin "Ninja Forms" vulnerable to PHP object injection | 2016-05-13T14:27+09:00 | 2016-06-01T17:00+09:00 |
| jvndb-2016-000063 | FileMaker server issue where PHP source code may be viewable | 2016-05-13T14:27+09:00 | 2016-06-02T09:43+09:00 |
| jvndb-2016-000062 | WN-G300R Series vulnerable to cross-site scripting | 2016-05-12T14:34+09:00 | 2016-06-01T16:48+09:00 |
| jvndb-2016-000061 | WN-GDN/R3 Series does not limit authentication attempts | 2016-05-12T14:34+09:00 | 2016-06-01T16:52+09:00 |
| jvndb-2016-000059 | Apache Cordova vulnerable to arbitrary plugin execution | 2016-05-11T14:16+09:00 | 2016-06-01T16:30+09:00 |
| jvndb-2016-000058 | Apache Cordova fails to restrict access permissions | 2016-05-11T14:16+09:00 | 2016-06-02T17:49+09:00 |
| jvndb-2016-000053 | EC-CUBE vulnerable to cross-site request forgery | 2016-04-26T14:24+09:00 | 2016-05-31T17:40+09:00 |
| jvndb-2016-000057 | Multiple shiro8 Co., Ltd. freearea_ addition_plugins for EC-CUBE vulnerable to cross-site scripting | 2016-04-26T14:18+09:00 | 2016-05-25T17:48+09:00 |
| jvndb-2016-000052 | EC-CUBE fails to restrict access permissions | 2016-04-26T13:56+09:00 | 2016-05-31T17:41+09:00 |
| jvndb-2016-000051 | EC-CUBE fails to restrict access permissions | 2016-04-26T13:56+09:00 | 2016-05-31T17:41+09:00 |
| jvndb-2016-000056 | kintone mobile for Android fails to verify SSL server certificates | 2016-04-25T15:36+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000055 | kintone mobile for Android information management vulnerability | 2016-04-25T15:35+09:00 | 2016-06-01T16:21+09:00 |
| jvndb-2016-000054 | Electron may insecurely load Node modules | 2016-04-22T13:49+09:00 | 2016-06-01T15:56+09:00 |
| jvndb-2016-000050 | Photopt App fails to verify SSL server certificates | 2016-04-19T13:44+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000049 | Tokyo Star bank App fails to verify SSL server certificates | 2016-04-13T14:30+09:00 | 2017-05-23T14:28+09:00 |
| jvndb-2016-000048 | EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting | 2016-04-08T12:31+09:00 | 2016-05-06T16:13+09:00 |
| jvndb-2016-000045 | baserCMS plugin "Casebook Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000044 | baserCMS plugin "Casebook Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000043 | baserCMS plugin "Menubook Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000042 | baserCMS plugin "Menubook Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000041 | baserCMS plugin "Recruit Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000040 | baserCMS plugin "Recruit Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000039 | AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery | 2016-04-04T15:30+09:00 | 2016-04-07T12:05+09:00 |
| jvndb-2016-000038 | ActiveX control for EVA Animator vulnerable to buffer overflow | 2016-04-04T15:30+09:00 | 2016-04-20T09:38+09:00 |
| jvndb-2016-000037 | WisePoint contains issue in preventing clickjacking attacks | 2016-04-04T15:30+09:00 | 2016-04-07T12:05+09:00 |
| jvndb-2016-000036 | Aterm WG300HP vulnerable to cross-site request forgery | 2016-03-30T14:49+09:00 | 2016-04-18T15:41+09:00 |
| jvndb-2016-000035 | Aterm WF800HP vulnerable to cross-site request forgery | 2016-03-30T14:49+09:00 | 2016-04-18T15:42+09:00 |
| jvndb-2016-000034 | WordPress plugin "WP Favorite Posts" vulnerable to cross-site scripting | 2016-03-24T12:28+09:00 | 2016-03-29T15:40+09:00 |
| jvndb-2016-001559 | Information Disclosure Vulnerability in Hitachi Compute Systems Manager | 2016-03-07T17:00+09:00 | 2016-03-31T17:50+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0319 | Multiples vulnérabilités dans Oracle Java SE | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0318 | Multiples vulnérabilités dans Oracle Database Server | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0317 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0316 | Multiples vulnérabilités dans les produits Atlassian | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0315 | Multiples vulnérabilités dans Google Chrome | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0314 | Vulnérabilité dans les produits Microsoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0313 | Vulnérabilité dans SolarWinds Serv-U | 2025-04-15T00:00:00.000000 | 2025-04-15T00:00:00.000000 |
| certfr-2025-avi-0312 | Multiples vulnérabilités dans les produits Mattermost | 2025-04-15T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0311 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0310 | Vulnérabilité dans Microsoft Edge | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0309 | Multiples vulnérabilités dans les produits IBM | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0308 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0307 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0306 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0305 | Multiples vulnérabilités dans Google Pixel | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0304 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0303 | Multiples vulnérabilités dans les produits Splunk | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0302 | Multiples vulnérabilités dans Sonicwall NetExtender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0301 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0300 | Multiples vulnérabilités dans GitLab | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0299 | Multiples vulnérabilités dans les produits Bitdefender | 2025-04-10T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0298 | Multiples vulnérabilités dans les produits Elastic | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0297 | Vulnérabilité dans Spring Cloud Config | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0296 | Multiples vulnérabilités dans Joomla! | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0295 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0294 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-04-09T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0293 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0292 | Multiples vulnérabilités dans les produits Adobe | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0291 | Multiples vulnérabilités dans les produits Microsoft | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0290 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |