Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-93007 | 5.3 (v3.1) | Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T12:47:18.954Z | 2026-10-29T12:47:18.954Z |
| cve-2026-90458 | 5.4 (v3.1) | OpenStack Ironic before 39.0.1 allows DELETE and … |
OpenStack |
Ironic |
2026-10-23T03:50:48.611Z | 2026-10-29T12:46:14.679Z |
| cve-2026-54630 | Part-DB: Authenticated RCE via .phar attachment upload… |
Part-DB |
Part-DB-server |
2026-10-23T03:48:59.951Z | 2026-10-29T12:43:48.850Z | |
| cve-2026-49142 | 8.7 (v4.0) 8.8 (v3.1) | OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] |
openemr |
openemr |
2026-10-29T12:37:16.791Z | 2026-10-29T12:37:16.791Z |
| cve-2026-7190 | 5.1 (v4.0) | Reflected Cross-Site Scripting in ICT Innovations’ PHP… |
ICT Innovations |
ICT Innovations’ PHP-CGI/PHP-FPM configuration |
2026-10-29T09:00:02.158Z | 2026-10-29T12:36:54.332Z |
| cve-2026-85498 | 3.5 (v3.1) | Polkit: regression in cve-2026-4897 fix (polkit read_c… |
Red Hat |
Red Hat Hardened Images |
2026-10-29T09:02:35.845Z | 2026-10-29T12:36:54.191Z |
| cve-2026-88941 | 6.2 (v4.0) 5.2 (v3.1) | Kaspersky has fixed a vulnerability in the Networ… |
Kaspersky |
Network Agent |
2026-10-29T09:11:33.069Z | 2026-10-29T12:36:54.040Z |
| cve-2026-111419 | 8.6 (v3.1) | Hardcoded API Token in Foxit Official Website |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:07.279Z | 2026-10-29T12:36:53.897Z |
| cve-2026-111418 | 7.5 (v3.1) | SSRF and JavaScript Execution in the Foxit Official We… |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:08.998Z | 2026-10-29T12:36:53.752Z |
| cve-2026-111417 | 7.5 (v3.1) | Cross-user Document Access on Foxit Official Website's… |
Foxit Software Inc. |
foxit.com |
2026-10-29T09:45:11.736Z | 2026-10-29T12:36:53.601Z |
| cve-2026-118984 | 7 (v4.0) 5.5 (v3.1) | OmniRoute 3.8.0 before 3.8.52 Unverified Password Chan… |
cheaper-inference |
OmniRoute |
2026-10-29T10:44:39.676Z | 2026-10-29T12:36:53.458Z |
| cve-2026-33923 | 7.5 (v4.0) 7.2 (v3.1) | Update bundle signature bypass in Guardian/CMC before 26.4.0 |
Nozomi Networks |
Guardian |
2026-10-29T10:46:27.450Z | 2026-10-29T12:36:53.310Z |
| cve-2026-33924 | 7.5 (v4.0) 7.2 (v3.1) | Authenticated RCE in update functionality in Guardian/… |
Nozomi Networks |
Guardian |
2026-10-29T10:46:35.814Z | 2026-10-29T12:36:53.161Z |
| cve-2026-118989 | 5.1 (v4.0) 5.5 (v3.1) | WebToffee Product Import Export for WooCommerce 2.5.1 … |
WebToffee |
Product Import Export for WooCommerce |
2026-10-29T10:57:40.767Z | 2026-10-29T12:36:53.008Z |
| cve-2026-115963 | 7.1 (v3.1) | WordPress Broadcast Live Video plugin <= 7.3.9 - Broke… |
VideoWhisper.com |
Broadcast Live Video |
2026-10-29T11:00:23.604Z | 2026-10-29T12:36:52.863Z |
| cve-2026-115967 | 8.8 (v3.1) | WordPress Login with phone number plugin <= 1.8.78 - B… |
Hamid Alinia |
Login with phone number |
2026-10-29T11:00:23.638Z | 2026-10-29T12:36:52.709Z |
| cve-2026-115965 | 8.5 (v3.1) | WordPress BuddyPress plugin <= 14.5.2 - SQL Injection … |
BuddyPress |
BuddyPress |
2026-10-29T11:00:24.136Z | 2026-10-29T12:36:52.568Z |
| cve-2026-115599 | 7.5 (v3.1) | WordPress LearnPress plugin <= 4.4.11 - Broken Access … |
ThimPress |
LearnPress |
2026-10-29T11:00:24.169Z | 2026-10-29T12:36:52.417Z |
| cve-2026-114193 | 7.5 (v3.1) | WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken … |
Eyal Fitoussi |
GEO my WordPress |
2026-10-29T11:00:24.744Z | 2026-10-29T12:36:52.272Z |
| cve-2026-112827 | 7.1 (v3.1) | WordPress HANDMADE – Dropshipping for Etsy and WooComm… |
VillaTheme |
HANDMADE – Dropshipping for Etsy and WooCommerce |
2026-10-29T11:00:24.746Z | 2026-10-29T12:36:52.128Z |
| cve-2026-116409 | 7.1 (v3.1) | WordPress Upsell Order Bump Offer for WooCommerce plug… |
WP Swings |
Upsell Order Bump Offer for WooCommerce |
2026-10-29T11:00:25.348Z | 2026-10-29T12:36:51.988Z |
| cve-2026-115592 | 7.1 (v3.1) | WordPress OceanWP theme <= 4.2.7 - Cross Site Scriptin… |
OceanWP |
OceanWP |
2026-10-29T11:00:25.353Z | 2026-10-29T12:36:51.841Z |
| cve-2026-115962 | 4.3 (v3.1) | WordPress myCred plugin <= 4.0.1 - Bypass Vulnerabilit… |
myCred |
myCred |
2026-10-29T11:00:25.822Z | 2026-10-29T12:36:51.694Z |
| cve-2026-115964 | 9.3 (v3.1) | WordPress Motors plugin <= 1.4.126 - SQL Injection vul… |
StylemixThemes |
Motors |
2026-10-29T11:00:25.837Z | 2026-10-29T12:36:51.554Z |
| cve-2026-115611 | 7.1 (v3.1) | WordPress TableOn plugin <= 1.0.7 - Cross Site Scripti… |
PluginUs.Net |
TableOn |
2026-10-29T11:00:26.280Z | 2026-10-29T12:36:51.406Z |
| cve-2026-96767 | NEX-Forms <= 9.3.2 - Unauthenticated Stored Cross-Site… |
webaways |
NEX-Forms – Ultimate Forms Plugin for WordPress |
2026-10-29T11:27:14.333Z | 2026-10-29T12:36:51.254Z | |
| cve-2026-109216 | Meta Box <= 5.15.2 - Authenticated (Subscriber+) Store… |
metabox |
Meta Box – A Framework for Dynamic Websites |
2026-10-29T11:27:14.853Z | 2026-10-29T12:36:51.108Z | |
| cve-2026-92086 | MW WP Form <= 5.1.7 - Unauthenticated Sensitive Inform… |
websoudan |
MW WP Form |
2026-10-29T11:27:15.236Z | 2026-10-29T12:36:50.947Z | |
| cve-2026-110184 | Newsmatic <= 1.5.0 - Unauthenticated SQL Injection via… |
blazethemes |
Newsmatic |
2026-10-29T11:27:15.602Z | 2026-10-29T12:36:50.798Z | |
| cve-2026-115821 | NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Si… |
newsmanapp |
NewsmanApp |
2026-10-29T11:27:15.965Z | 2026-10-29T12:36:50.654Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-001632 | Arbitrary Data Insertion Vulnerability in Hitachi Web Server SSL/TLS Protocol | 2011-06-29T17:55+09:00 | 2016-09-08T17:05+09:00 |
| jvndb-2016-000154 | Multiple AKABEi SOFT2 LTD. games vulnerable to OS command injection | 2016-08-31T15:33+09:00 | 2016-09-05T17:56+09:00 |
| jvndb-2016-000152 | simple chat vulnerable to cross-site scripting | 2016-08-23T13:37+09:00 | 2016-09-05T17:45+09:00 |
| jvndb-2016-000140 | ClipBucket vulnerable to cross-site scripting | 2016-08-18T14:09+09:00 | 2016-09-05T17:41+09:00 |
| jvndb-2015-000052 | Seasar S2Struts vulnerable to input validation bypass | 2015-04-10T14:38+09:00 | 2016-08-26T16:39+09:00 |
| jvndb-2015-000042 | The Validator in TERASOLUNA Server Framework for Java(WEB) vulnerable to input validation bypass | 2015-03-24T14:10+09:00 | 2016-08-26T16:37+09:00 |
| jvndb-2016-000123 | LINE for Windows may insecurely load Dynamic Link Libraries | 2016-07-08T14:29+09:00 | 2016-08-19T17:44+09:00 |
| jvndb-2016-000125 | WordPress plugin "Nofollow Links" vulnerable to cross-site scripting | 2016-07-20T14:56+09:00 | 2016-08-05T17:40+09:00 |
| jvndb-2016-000127 | Android stock browser vulnerable to denial-of-service (DoS) | 2016-08-05T13:41+09:00 | 2016-08-05T13:41+09:00 |
| jvndb-2016-000126 | Vtiger CRM does not properly restrict access to application data | 2016-07-20T14:56+09:00 | 2016-08-04T18:02+09:00 |
| jvndb-2016-000130 | EC-CUBE plugin "Coupon Plugin" vulnerable to SQL injection | 2016-07-25T11:15+09:00 | 2016-08-04T17:55+09:00 |
| jvndb-2016-000114 | Apache Struts vulnerable to denial-of-service (DoS) | 2016-06-20T16:36+09:00 | 2016-08-03T16:20+09:00 |
| jvndb-2016-000110 | Apache Struts vulnerable to remote code execution | 2016-06-20T16:36+09:00 | 2016-08-03T16:19+09:00 |
| jvndb-2016-002716 | Cross-site Scripting Vulnerability in Hitachi Tuning Manager | 2016-05-24T16:43+09:00 | 2016-08-03T16:09+09:00 |
| jvndb-2016-002715 | Information Disclosure Vulnerability in Hitachi Command Suite | 2016-05-24T16:43+09:00 | 2016-08-03T16:09+09:00 |
| jvndb-2016-000106 | Multiple Hikari Denwa routers vulnerable to cross-site request forgery | 2016-06-27T14:19+09:00 | 2016-08-03T16:07+09:00 |
| jvndb-2016-000105 | Multiple Hikari Denwa routers vulnerable to OS command injection | 2016-06-27T14:10+09:00 | 2016-08-03T16:07+09:00 |
| jvndb-2016-000119 | QNAP QTS vulnerable to cross-site scripting | 2016-06-27T13:48+09:00 | 2016-08-03T14:55+09:00 |
| jvndb-2016-000128 | Android OS Contacts app fails to restrict access permissions | 2016-07-25T11:14+09:00 | 2016-07-25T11:14+09:00 |
| jvndb-2016-000103 | Deep Discovery Inspector vulnerable to remote code execution | 2016-06-16T14:03+09:00 | 2016-07-12T15:03+09:00 |
| jvndb-2015-000190 | EC-CUBE plugin BbAdminViewsControl vulnerable to SQL injection | 2015-12-03T14:26+09:00 | 2016-07-07T14:53+09:00 |
| jvndb-2016-000116 | WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting | 2016-06-24T13:43+09:00 | 2016-06-29T16:05+09:00 |
| jvndb-2016-000115 | WordPress plugin "Welcart e-Commerce" vulnerable to PHP object injection | 2016-06-24T13:43+09:00 | 2016-06-29T16:04+09:00 |
| jvndb-2016-000109 | CG-WLR300GNV Series does not limit authentication attempts | 2016-06-22T14:57+09:00 | 2016-06-29T16:04+09:00 |
| jvndb-2016-000108 | CG-WLBARAGM vulnerable to denial-of-service (DoS) | 2016-06-22T14:57+09:00 | 2016-06-29T16:04+09:00 |
| jvndb-2016-000107 | CG-WLBARGL vulnerable to command injection | 2016-06-22T14:56+09:00 | 2016-06-29T16:03+09:00 |
| jvndb-2016-000118 | WordPress plugin "Welcart e-Commerce" vulnerable to session management | 2016-06-24T14:12+09:00 | 2016-06-28T17:01+09:00 |
| jvndb-2016-000117 | WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting | 2016-06-24T14:12+09:00 | 2016-06-28T17:01+09:00 |
| jvndb-2016-000094 | Cybozu Garoon function "MultiReport" vulnerable to access restriction bypass | 2016-05-30T16:18+09:00 | 2016-06-28T17:01+09:00 |
| jvndb-2016-000093 | Cybozu Garoon function "Portlets" vulnerable to access restriction bypass | 2016-05-30T16:18+09:00 | 2016-06-28T17:01+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0636 | Multiples vulnérabilités dans les produits Elastic | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0635 | Vulnérabilité dans VMware vCenter | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0634 | Vulnérabilité dans Python | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0633 | Vulnérabilité dans Tenable Patch Management | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0632 | Multiples vulnérabilités dans GLPI | 2025-07-30T00:00:00.000000 | 2025-07-30T00:00:00.000000 |
| certfr-2025-avi-0631 | Vulnérabilité dans SolarWinds SWOSH | 2025-07-29T00:00:00.000000 | 2025-07-29T00:00:00.000000 |
| certfr-2025-avi-0630 | Vulnérabilité dans Palo Alto Networks GlobalProtect App | 2025-07-29T00:00:00.000000 | 2025-07-29T00:00:00.000000 |
| certfr-2025-avi-0629 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-28T00:00:00.000000 | 2025-07-28T00:00:00.000000 |
| certfr-2025-avi-0628 | Multiples vulnérabilités dans Synology BeeDrive | 2025-07-28T00:00:00.000000 | 2025-07-28T00:00:00.000000 |
| certfr-2025-avi-0627 | Multiples vulnérabilités dans les produits IBM | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0626 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0625 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0624 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0623 | Multiples vulnérabilités dans les produits ESET | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0622 | Multiples vulnérabilités dans les produits VMware | 2025-07-25T00:00:00.000000 | 2025-07-25T00:00:00.000000 |
| certfr-2025-avi-0621 | Multiples vulnérabilités dans les produits Tenable | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0620 | Vulnérabilité dans Apache HTTP Server | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0619 | Multiples vulnérabilités dans GitLab | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0617 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-07-24T00:00:00.000000 | 2025-07-24T00:00:00.000000 |
| certfr-2025-avi-0616 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0615 | Multiples vulnérabilités dans les produits Mozilla | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0613 | Multiples vulnérabilités dans Google Chrome | 2025-07-23T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0609 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2025-07-21T00:00:00.000000 | 2025-07-23T00:00:00.000000 |
| certfr-2025-avi-0612 | Multiples vulnérabilités dans Sophos Firewall | 2025-07-22T00:00:00.000000 | 2025-07-22T00:00:00.000000 |
| certfr-2025-avi-0611 | Multiples vulnérabilités dans les produits Microsoft | 2025-07-21T00:00:00.000000 | 2025-07-22T00:00:00.000000 |
| certfr-2025-avi-0598 | Multiples vulnérabilités dans Sophos Intercept X | 2025-07-18T00:00:00.000000 | 2025-07-22T00:00:00.000000 |
| certfr-2025-avi-0610 | Multiples vulnérabilités dans Microsoft Azure | 2025-07-21T00:00:00.000000 | 2025-07-21T00:00:00.000000 |
| certfr-2025-avi-0608 | Multiples vulnérabilités dans les produits IBM | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0607 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0606 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |