Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112618 | N/A | An access issue was addressed with improved acces… |
Apple |
iOS and iPadOS |
2026-10-26T20:34:37.983Z | 2026-10-29T13:12:23.856Z |
| cve-2026-57142 | PraisonAI recipe workflow policy can be bypassed by de… |
MervinPraison |
PraisonAI |
2026-10-23T12:07:46.547Z | 2026-10-29T13:12:14.267Z | |
| cve-2026-113896 | N/A | A race condition was addressed with additional va… |
Apple |
iOS and iPadOS |
2026-10-26T20:35:55.612Z | 2026-10-29T13:10:54.100Z |
| cve-2026-112547 | N/A | A type confusion issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:33:24.592Z | 2026-10-29T13:10:13.737Z |
| cve-2026-57114 | PraisonAI: Jobs webhook SSRF protection bypass via DNS… |
MervinPraison |
PraisonAI |
2026-10-23T12:04:29.966Z | 2026-10-29T13:09:28.257Z | |
| cve-2026-119054 | 5.1 (v4.0) 5.4 (v3.1) | Multiple Pages Generator by Themeisle before 4.2.5 Sto… |
Themeisle |
Multiple Pages Generator by Themeisle |
2026-10-29T13:08:54.249Z | 2026-10-29T13:08:54.249Z |
| cve-2026-119052 | 8.7 (v4.0) 7.5 (v3.1) | llama.cpp b2877 before b11935 ggml-rpc Server DoS via … |
ggml-org |
llama.cpp |
2026-10-29T13:08:52.886Z | 2026-10-29T13:08:52.886Z |
| cve-2026-119051 | 8.2 (v4.0) 5.9 (v3.1) | flat through 6.0.1 Denial of Service via unflatten() N… |
hughsk |
flat |
2026-10-29T13:08:52.215Z | 2026-10-29T13:08:52.215Z |
| cve-2026-119050 | 9.2 (v4.0) 8.1 (v3.1) | Agno through 3.1.11 Code Execution via PandasTools Uns… |
agno-agi |
agno |
2026-10-29T13:08:51.517Z | 2026-10-29T13:08:51.517Z |
| cve-2026-119048 | 2.3 (v4.0) 4.2 (v3.1) | JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module |
thinkgem |
JeeSite |
2026-10-29T13:08:50.215Z | 2026-10-29T13:08:50.215Z |
| cve-2019-25781 | 8.7 (v4.0) 7.5 (v3.1) | Python-Markdown 3.0 through 3.11.2 Denial of Service v… |
Python-Markdown |
Markdown |
2026-10-29T13:08:49.597Z | 2026-10-29T13:08:49.597Z |
| cve-2026-42922 | A authorization bypass vulnerability exists in th… |
frangoteam |
Frangoteam |
2026-10-29T02:59:51.711Z | 2026-10-29T13:07:12.686Z | |
| cve-2026-40063 | A information disclosure vulnerability exists in … |
frangoteam |
Frangoteam |
2026-10-29T02:59:52.226Z | 2026-10-29T13:07:12.544Z | |
| cve-2026-71569 | 4.8 (v3.1) | Apache Camel: Camel-A2A Push Notification Webhook Guar… |
Apache Software Foundation |
Apache Camel |
2026-10-29T10:31:01.478Z | 2026-10-29T13:07:12.410Z |
| cve-2026-5697 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:16:47.555Z | 2026-10-29T13:07:12.257Z |
| cve-2026-5698 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:16:52.469Z | 2026-10-29T13:07:12.103Z |
| cve-2026-5699 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:16:57.467Z | 2026-10-29T13:07:11.952Z |
| cve-2026-5700 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:17:02.161Z | 2026-10-29T13:07:11.804Z |
| cve-2026-5702 | 4.8 (v4.0) | Cross-Site Request Forgery (CSRF) vulnerability in SAB… |
SABBATIC |
SABBATIC app |
2026-10-29T11:17:09.384Z | 2026-10-29T13:07:11.657Z |
| cve-2026-56834 | PraisonAI dynamic-context artifact tools read arbitrar… |
MervinPraison |
PraisonAI |
2026-10-23T11:56:40.277Z | 2026-10-29T13:05:52.903Z | |
| cve-2026-115726 | 8.5 (v4.0) 7.8 (v3.1) | Aider through 0.86.2 Command Execution via Repository … |
Aider-AI |
aider |
2026-10-23T11:36:49.084Z | 2026-10-29T13:02:55.888Z |
| cve-2026-112616 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:22.746Z | 2026-10-29T13:02:33.245Z |
| cve-2026-115722 | 6.9 (v4.0) 6.1 (v3.1) | RPly through 1.1.4 Out-of-Bounds Function Pointer Inde… |
diegonehab |
rply |
2026-10-23T11:36:46.355Z | 2026-10-29T13:00:26.916Z |
| cve-2026-86925 | N/A | An authorization issue was addressed with improve… |
Apple |
iOS and iPadOS |
2026-10-26T20:44:37.328Z | 2026-10-29T13:00:13.783Z |
| cve-2026-113912 | N/A | An out-of-bounds access issue was addressed with … |
Apple |
iOS and iPadOS |
2026-10-26T20:44:27.691Z | 2026-10-29T12:59:33.991Z |
| cve-2026-86055 | Part-DB: Password Reset Link Poisoning via Host Header… |
Part-DB |
Part-DB-server |
2026-10-23T04:09:27.051Z | 2026-10-29T12:56:48.256Z | |
| cve-2026-59188 | Part-DB: SVG Sanitization Bypass via Extension Spoofin… |
Part-DB |
Part-DB-server |
2026-10-23T03:59:11.068Z | 2026-10-29T12:49:30.293Z | |
| cve-2026-112344 | 7.6 (v4.0) 6.8 (v3.1) | Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape |
Syncplify, Inc. |
Syncplify Server! |
2026-10-26T15:56:29.273Z | 2026-10-29T12:48:46.424Z |
| cve-2026-112343 | 8.6 (v4.0) 8.1 (v3.1) | Syncplify Server! < 8.8.0 Permission Override Bypass v… |
Syncplify, Inc. |
Syncplify Server! |
2026-10-26T15:54:12.544Z | 2026-10-29T12:48:36.207Z |
| cve-2026-93006 | 6.8 (v3.1) | Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale h… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T12:47:23.431Z | 2026-10-29T12:47:23.431Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000188 | Breadcrumb trail in Cybozu Office vulnerable vulnerable to browse restriction bypass | 2016-10-03T15:43+09:00 | 2017-04-24T15:10+09:00 |
| jvndb-2016-000186 | "Schedule" function in Cybozu Office vulnerable to cross-site scripting | 2016-10-03T15:43+09:00 | 2017-04-24T15:10+09:00 |
| jvndb-2016-000191 | Cybozu Office vulnerable to information disclosure | 2016-10-03T15:43+09:00 | 2017-04-24T15:05+09:00 |
| jvndb-2016-000190 | Cybozu Office vulnerable to mail header injection | 2016-10-03T15:43+09:00 | 2017-04-24T15:05+09:00 |
| jvndb-2016-000187 | "Project" function in Cybozu Office vulnerable vulnerable to access restriction bypass | 2016-10-03T15:43+09:00 | 2017-04-24T15:05+09:00 |
| jvndb-2016-000185 | "Project" function in Cybozu Office vulnerable to cross-site scripting | 2016-10-03T15:43+09:00 | 2017-04-24T15:05+09:00 |
| jvndb-2016-000184 | "Customapp" function in Cybozu Office vulnerable to cross-site scripting | 2016-10-03T15:43+09:00 | 2017-04-24T15:05+09:00 |
| jvndb-2017-000066 | The API in Cybozu Office vulnerable to denial-of-service (DoS) | 2017-04-11T16:05+09:00 | 2017-04-11T16:05+09:00 |
| jvndb-2016-006450 | Vulnerability in JP1/Cm2/Network Node Manager i | 2017-03-30T15:01+09:00 | 2017-03-30T15:01+09:00 |
| jvndb-2016-000158 | Zend Framework vulnerable to SQL injection | 2016-09-15T14:11+09:00 | 2017-03-16T14:15+09:00 |
| jvndb-2017-000013 | Nessus vulnerable to cross-site scripting | 2017-01-24T13:38+09:00 | 2017-02-20T17:44+09:00 |
| jvndb-2016-000096 | Apache Struts 1 vulnerability that allows unintended remote operations against components on memory | 2016-06-07T16:26+09:00 | 2017-02-20T15:42+09:00 |
| jvndb-2017-000025 | Apache Brooklyn vulnerable to cross-site scripting | 2017-02-15T16:20+09:00 | 2017-02-15T16:20+09:00 |
| jvndb-2017-000015 | Norton Download Manager may insecurely load Dynamic Link Libraries | 2017-02-10T14:58+09:00 | 2017-02-10T14:58+09:00 |
| jvndb-2017-000012 | Java (OGNL) code execution in Apache Struts 2 when devMode is enabled | 2017-01-20T14:01+09:00 | 2017-01-20T14:01+09:00 |
| jvndb-2014-000048 | OpenSSL improper handling of Change Cipher Spec message | 2014-06-06T13:48+09:00 | 2016-12-27T11:49+09:00 |
| jvndb-2014-000017 | Apache Commons FileUpload vulnerable to denial-of-service (DoS) | 2014-02-10T17:21+09:00 | 2016-12-27T11:49+09:00 |
| jvndb-2016-000097 | Apache Struts 1 vulnerable to input validation bypass | 2016-06-07T16:26+09:00 | 2016-12-05T16:59+09:00 |
| jvndb-2016-002331 | ManageEngine Password Manager Pro fails to restrict access permissions | 2016-12-05T15:02+09:00 | 2016-12-05T15:02+09:00 |
| jvndb-2016-002298 | Keitai Kit for Movable Type vulnerable to OS command injection | 2016-12-05T15:02+09:00 | 2016-12-05T15:02+09:00 |
| jvndb-2016-005655 | Vulnerabilitie in JP1/IT Desktop Management 2 - Manager and JP1/NETM/DM | 2016-11-10T16:59+09:00 | 2016-11-10T16:59+09:00 |
| jvndb-2016-000151 | YoruFukurou (NightOwl) vulnerable to denial-of-service (DoS) | 2016-08-24T14:14+09:00 | 2016-10-27T09:43+09:00 |
| jvndb-2016-000134 | Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery | 2016-08-08T12:28+09:00 | 2016-10-24T18:27+09:00 |
| jvndb-2007-000226 | BASP21 vulnerable to mail header injection | 2008-05-21T00:00+09:00 | 2016-10-13T14:45+09:00 |
| jvndb-2016-000195 | Cryptography API: Next Generation (CNG) vulnerable to denial-of-service (DoS) | 2016-10-07T14:11+09:00 | 2016-10-07T14:11+09:00 |
| jvndb-2016-004496 | Information Disclosure Vulnerability in Hitachi Automation Director and JP1/Automatic Operation | 2016-09-02T16:09+09:00 | 2016-09-30T09:47+09:00 |
| jvndb-2016-000166 | Trend Micro Internet Security vulnerability where files may be excluded as scan targets | 2016-09-16T14:31+09:00 | 2016-09-16T14:31+09:00 |
| jvndb-2016-003527 | Information Disclosure Vulnerability in Hitachi Command Suite | 2016-08-02T13:50+09:00 | 2016-09-14T18:18+09:00 |
| jvndb-2016-001472 | Remote File Inclusion Vulnerability in Hitachi Command Suite | 2016-02-25T16:09+09:00 | 2016-09-14T18:18+09:00 |
| jvndb-2015-006130 | Vulnerability in JP1/Automatic Job Management System 3 | 2015-12-17T16:19+09:00 | 2016-09-14T18:18+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0666 | Multiples vulnérabilités dans Microsoft Azure | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0665 | Multiples vulnérabilités dans Microsoft Office | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0664 | Multiples vulnérabilités dans Microsoft Edge | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0663 | Multiples vulnérabilités dans GnuTLS | 2025-08-08T00:00:00.000000 | 2025-08-08T00:00:00.000000 |
| certfr-2025-avi-0662 | Multiples vulnérabilités dans les produits Centreon | 2025-08-07T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-avi-0661 | Multiples vulnérabilités dans les produits Splunk | 2025-08-07T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-avi-0660 | Vulnérabilité dans Tenable Identity Exposure | 2025-08-07T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-avi-0659 | Vulnérabilité dans Microsoft Exchange Server | 2025-08-07T00:00:00.000000 | 2025-08-07T00:00:00.000000 |
| certfr-2025-avi-0658 | Multiples vulnérabilités dans Trend Micro Apex One | 2025-08-06T00:00:00.000000 | 2025-08-06T00:00:00.000000 |
| certfr-2025-avi-0657 | Multiples vulnérabilités dans Google Chrome | 2025-08-06T00:00:00.000000 | 2025-08-06T00:00:00.000000 |
| certfr-2025-avi-0656 | Vulnérabilité dans Google Pixel | 2025-08-06T00:00:00.000000 | 2025-08-06T00:00:00.000000 |
| certfr-2025-avi-0655 | Multiples vulnérabilités dans les produits Liferay | 2025-08-05T00:00:00.000000 | 2025-08-05T00:00:00.000000 |
| certfr-2025-avi-0654 | Multiples vulnérabilités dans les produits Netgate | 2025-08-05T00:00:00.000000 | 2025-08-05T00:00:00.000000 |
| certfr-2025-avi-0653 | Multiples vulnérabilités dans Google Android | 2025-08-05T00:00:00.000000 | 2025-08-05T00:00:00.000000 |
| certfr-2025-avi-0652 | Vulnérabilité dans le greffon "WASM Client" pour Traefik | 2025-08-04T00:00:00.000000 | 2025-08-04T00:00:00.000000 |
| certfr-2025-avi-0651 | Multiples vulnérabilités dans les produits IBM | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0650 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0649 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0648 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0647 | Vulnérabilité dans Squid | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0646 | Vulnérabilité dans Microsoft Edge | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0645 | Multiples vulnérabilités dans Asterisk | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0644 | Vulnérabilité dans Progress MOVEit Transfer | 2025-08-01T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0539 | Multiples vulnérabilités dans Cisco Identity Services Engine | 2025-06-26T00:00:00.000000 | 2025-08-01T00:00:00.000000 |
| certfr-2025-avi-0642 | Multiples vulnérabilités dans Apple Safari | 2025-07-31T00:00:00.000000 | 2025-07-31T00:00:00.000000 |
| certfr-2025-avi-0641 | Multiples vulnérabilités dans les produits Splunk | 2025-07-31T00:00:00.000000 | 2025-07-31T00:00:00.000000 |
| certfr-2025-avi-0640 | Multiples vulnérabilités dans les produits Apple | 2025-07-30T00:00:00.000000 | 2025-07-31T00:00:00.000000 |
| certfr-2025-avi-0639 | Multiples vulnérabilités dans Google Chrome | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0638 | Vulnérabilité dans les produits Sonicwall | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0637 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |