Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-27401 | 5.3 (v3.1) | WordPress YITH PayPal Express Checkout for WooCommerce… |
YITH |
YITH PayPal Express Checkout for WooCommerce |
2026-10-29T11:28:05.240Z | 2026-10-29T12:36:50.510Z |
| cve-2026-97854 | 9.8 (v3.1) 9.3 (v4.0) | Yamaha wireless LAN router NWR100 provided by Yam… |
Yamaha Corporation |
NWR100 |
2026-10-29T11:33:51.649Z | 2026-10-29T12:36:50.361Z |
| cve-2026-109822 | 6.5 (v3.1) 7.1 (v4.0) | Yamaha wireless LAN router NWR100 provided by Yam… |
Yamaha Corporation |
NWR100 |
2026-10-29T11:34:08.429Z | 2026-10-29T12:36:50.215Z |
| cve-2026-21157 | 8.3 (v4.0) | Improper input validation in Bixby prior to versi… |
Samsung Mobile |
Bixby |
2026-10-29T01:01:58.516Z | 2026-10-29T12:35:23.592Z |
| cve-2026-115536 | gedelumbung HospitalManagement Admin Routing routing_p… |
gedelumbung |
HospitalManagement |
2026-10-23T01:15:15.697Z | 2026-10-29T12:34:42.937Z | |
| cve-2026-93008 | 6.8 (v3.1) | Dnsmasq: dnsmasq: out-of-bailiwick cache injection thr… |
Red Hat |
Red Hat Ceph Storage 9 |
2026-10-29T12:33:22.941Z | 2026-10-29T12:33:22.941Z |
| cve-2026-42949 | A authorization bypass vulnerability exists in th… |
frangoteam |
Frangoteam |
2026-10-29T02:59:52.571Z | 2026-10-29T12:32:40.787Z | |
| cve-2026-115485 | 6.3 (v3.1) | Open-iscsi: open-iscsi: dhcpv6 vendor option strlen he… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-23T00:16:30.006Z | 2026-10-29T12:31:19.784Z |
| cve-2026-114618 | Authlib: Default JWT bearer grant accepts assertions f… |
authlib |
authlib |
2026-10-22T21:28:37.879Z | 2026-10-29T12:29:17.976Z | |
| cve-2026-94109 | 8.6 (v4.0) 8 (v3.1) | openEQUELLA < 2026.1.0 Authenticated Stored SSTI via F… |
openequella |
openEQUELLA |
2026-09-20T11:33:55.754Z | 2026-10-29T12:27:38.736Z |
| cve-2026-67615 | 8.7 (v4.0) 8.8 (v3.1) | openEQUELLA < 2026.1.0 Authenticated RCE via Java Dese… |
Apereo Foundation |
openEQUELLA |
2026-09-22T20:30:55.804Z | 2026-10-29T12:26:19.723Z |
| cve-2026-115509 | 2.3 (v4.0) 4.2 (v3.1) | Jitsu Console before 2.14.0-beta.41 Cross-Workspace Au… |
jitsucom |
jitsu |
2026-10-22T19:14:08.632Z | 2026-10-29T12:24:50.785Z |
| cve-2026-115505 | 7.2 (v4.0) 7.6 (v3.1) | libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Dec… |
sahlberg |
libsmb2 |
2026-10-22T19:14:05.297Z | 2026-10-29T12:22:44.734Z |
| cve-2026-115397 | 6.8 (v4.0) 5.5 (v3.1) | Ghidra before 12.2 Denial of Service via Extension Arc… |
NationalSecurityAgency |
ghidra |
2026-10-22T19:14:02.326Z | 2026-10-29T12:21:16.552Z |
| cve-2026-96889 | 7.8 (v3.1) | Librsvg: use-after-free when xml includes have duplica… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-09-23T19:40:14.793Z | 2026-10-29T12:16:37.994Z |
| cve-2026-115393 | 1 (v4.0) 3.8 (v3.1) | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:59.314Z | 2026-10-29T12:16:18.355Z |
| cve-2026-10757 | 9.8 (v3.1) | BUG-000187511 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:05:59.365Z | 2026-10-29T12:15:56.185Z |
| cve-2026-87302 | Vulnerability in the Oracle WebLogic Server produ… |
Oracle Corporation |
Oracle WebLogic Server |
2026-10-20T21:23:55.953Z | 2026-10-29T12:13:51.704Z | |
| cve-2026-96512 | 7.8 (v3.1) | Sudo: sudo: tz environment variable allows bypass of n… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-09-23T13:22:33.080Z | 2026-10-29T12:12:09.486Z |
| cve-2026-115389 | 1 (v4.0) 2.3 (v3.1) | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.… |
bytecodealliance |
wasmtime |
2026-10-22T19:13:55.163Z | 2026-10-29T12:12:04.439Z |
| cve-2026-107092 | N/A | NexoPOS v6.2.4 is vulnerable to Directory Travers… |
n/a |
n/a |
2026-10-26T00:00:00.000Z | 2026-10-29T12:11:50.978Z |
| cve-2026-52356 | N/A | An OS command injection vulnerability in the /htd… |
n/a |
n/a |
2026-10-23T00:00:00.000Z | 2026-10-29T12:11:29.441Z |
| cve-2026-87373 | Vulnerability in the Oracle WebCenter Content pro… |
Oracle Corporation |
Oracle WebCenter Content |
2026-10-20T21:24:21.454Z | 2026-10-29T12:10:59.477Z | |
| cve-2026-87352 | Vulnerability in the PeopleSoft Enterprise People… |
Oracle Corporation |
PeopleSoft Enterprise PeopleTools |
2026-10-20T21:24:14.519Z | 2026-10-29T12:10:40.961Z | |
| cve-2026-43840 | 6.9 (v4.0) | A NULL pointer dereference vulnerability in the l… |
Advantech |
ADAM-3600 |
2026-10-20T08:28:32.330Z | 2026-10-29T12:10:14.990Z |
| cve-2026-91476 | Vulnerability in the PeopleSoft Enterprise FIN Co… |
Oracle Corporation |
PeopleSoft Enterprise FIN Common Objects Brazil |
2026-10-20T21:26:09.775Z | 2026-10-29T12:09:54.093Z | |
| cve-2026-91400 | Vulnerability in the Oracle Java SE, Oracle Graal… |
Oracle Corporation |
Oracle Java SE |
2026-10-20T21:25:46.374Z | 2026-10-29T12:09:28.628Z | |
| cve-2026-101974 | 6.5 (v3.1) 7.1 (v4.0) | Junos OS and Junos OS Evolved: Malformed OSPF packets … |
Juniper Networks |
Junos OS |
2026-10-14T16:19:41.668Z | 2026-10-29T12:08:35.753Z |
| cve-2026-42693 | 7.1 (v3.1) | WordPress Jannah theme < 7.6.8 - Cross Site Scripting … |
TieLabs |
Jannah |
2026-10-10T19:35:07.750Z | 2026-10-29T12:08:20.728Z |
| cve-2026-101987 | 6.5 (v3.1) 7.1 (v4.0) | Junos OS and Junos OS Evolved: A specific IS-IS SRv6 p… |
Juniper Networks |
Junos OS |
2026-10-14T16:33:12.658Z | 2026-10-29T12:08:18.174Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000079 | Cybozu Garoon vulnerable to information disclosure | 2016-05-30T16:18+09:00 | 2016-06-28T17:01+09:00 |
| jvndb-2016-000077 | Cybozu Garoon mail function vulnerable to access restriction bypass | 2016-05-30T16:18+09:00 | 2016-06-28T17:01+09:00 |
| jvndb-2016-000087 | Multiple Buffalo wireless LAN routers vulnerable to information disclosure | 2016-05-27T13:53+09:00 | 2016-06-27T14:59+09:00 |
| jvndb-2016-000086 | Multiple Buffalo wireless LAN routers vulnerable to directory traversal | 2016-05-27T13:53+09:00 | 2016-06-27T14:58+09:00 |
| jvndb-2016-000099 | DX Library vulnerable to remote code execution | 2016-06-08T14:30+09:00 | 2016-06-27T11:32+09:00 |
| jvndb-2016-000098 | TERASOLUNA Server Framework for Java(WEB) access restriction bypass vulnerability in the file extention filter | 2016-06-07T16:26+09:00 | 2016-06-27T11:32+09:00 |
| jvndb-2016-000095 | Cybozu Garoon logging function vulnerable to directory traversal | 2016-05-30T16:18+09:00 | 2016-06-23T17:49+09:00 |
| jvndb-2016-000085 | Cybozu Garoon fails to restrict access permissions | 2016-05-30T16:18+09:00 | 2016-06-23T17:43+09:00 |
| jvndb-2016-000078 | Cybozu Garoon function "Files" vulnerable to directory traversal | 2016-05-30T16:18+09:00 | 2016-06-23T17:40+09:00 |
| jvndb-2016-000076 | Japan Connected-free Wi-Fi vulnerable to API execution | 2016-05-27T13:51+09:00 | 2016-06-23T17:38+09:00 |
| jvndb-2016-000082 | Cybozu Garoon fails to restrict access permissions | 2016-05-30T16:18+09:00 | 2016-06-23T17:35+09:00 |
| jvndb-2016-000091 | H2O use-after-free vulnerability | 2016-05-27T13:46+09:00 | 2016-06-23T17:23+09:00 |
| jvndb-2016-000100 | ETX-R vulnerable to cross-site request forgery | 2016-06-14T13:55+09:00 | 2016-06-23T17:12+09:00 |
| jvndb-2016-000084 | Cybozu Garoon vulnerable to cross-site scripting | 2016-05-30T16:18+09:00 | 2016-06-23T17:09+09:00 |
| jvndb-2016-000081 | Cybozu Garoon vulnerable to open redirect | 2016-05-30T16:18+09:00 | 2016-06-23T17:06+09:00 |
| jvndb-2016-000083 | Cybozu Garoon vulnerable to cross-site scripting | 2016-05-30T16:18+09:00 | 2016-06-23T17:05+09:00 |
| jvndb-2016-000090 | Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal | 2016-05-30T14:07+09:00 | 2016-06-23T15:13+09:00 |
| jvndb-2016-000075 | NetCommons vulnerable to privilege escalation | 2016-05-26T14:30+09:00 | 2016-06-23T15:13+09:00 |
| jvndb-2014-000054 | Spring Framework vulnerable to directory traversal | 2014-06-13T12:40+09:00 | 2016-06-23T13:45+09:00 |
| jvndb-2016-000101 | ETX-R vulnerable to denial-of-service (DoS) | 2016-06-14T14:00+09:00 | 2016-06-23T12:20+09:00 |
| jvndb-2016-000073 | Trend Micro Internet Security access restriction flaw | 2016-06-02T16:18+09:00 | 2016-06-22T18:12+09:00 |
| jvndb-2016-000088 | Trend Micro Internet Security vulnerable to arbitrary script execution | 2016-06-02T16:18+09:00 | 2016-06-22T18:08+09:00 |
| jvndb-2016-000089 | Trend Micro enterprise products HTTP header injection vulnerability | 2016-06-02T16:18+09:00 | 2016-06-22T17:58+09:00 |
| jvndb-2016-000074 | Trend Micro enterprise products directory traversal vulnerability | 2016-06-02T16:18+09:00 | 2016-06-22T17:56+09:00 |
| jvndb-2016-000001 | DX Library vulnerable to buffer overflow | 2016-01-05T14:26+09:00 | 2016-06-08T18:06+09:00 |
| jvndb-2016-000072 | WebARENA formmail vulnerable to cross-site scripting | 2016-05-27T13:54+09:00 | 2016-06-08T17:47+09:00 |
| jvndb-2016-000071 | WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting | 2016-05-25T14:37+09:00 | 2016-06-08T17:23+09:00 |
| jvndb-2016-000070 | php-contact-form vulnerable to cross-site scripting | 2016-05-24T12:27+09:00 | 2016-06-08T17:23+09:00 |
| jvndb-2016-000069 | MP Form Mail CGI Professional Edition vulnerable to directory traversal | 2016-05-20T14:22+09:00 | 2016-06-08T17:23+09:00 |
| jvndb-2016-000068 | HumHub vulnerable to cross-site scripting | 2016-05-24T12:24+09:00 | 2016-06-08T17:23+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0605 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0604 | Multiples vulnérabilités dans Oracle Weblogic | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0603 | Multiples vulnérabilités dans Oracle Virtualization | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0602 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0601 | Multiples vulnérabilités dans Oracle MySQL | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0600 | Multiples vulnérabilités dans Oracle Java SE | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0599 | Multiples vulnérabilités dans Oracle Database Server | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0597 | Multiples vulnérabilités dans Grafana | 2025-07-18T00:00:00.000000 | 2025-07-18T00:00:00.000000 |
| certfr-2025-avi-0596 | Multiples vulnérabilités dans ISC BIND | 2025-07-17T00:00:00.000000 | 2025-07-17T00:00:00.000000 |
| certfr-2025-avi-0595 | Vulnérabilité dans Cisco Unified Intelligence Center | 2025-07-17T00:00:00.000000 | 2025-07-17T00:00:00.000000 |
| certfr-2025-avi-0594 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-17T00:00:00.000000 | 2025-07-17T00:00:00.000000 |
| certfr-2025-avi-0577 | Multiples vulnérabilités dans Microsoft Windows | 2025-07-09T00:00:00.000000 | 2025-07-17T00:00:00.000000 |
| certfr-2025-avi-0593 | Multiples vulnérabilités dans les produits Atlassian | 2025-07-16T00:00:00.000000 | 2025-07-16T00:00:00.000000 |
| certfr-2025-avi-0592 | Multiples vulnérabilités dans les produits VMware | 2025-07-16T00:00:00.000000 | 2025-07-16T00:00:00.000000 |
| certfr-2025-avi-0591 | Multiples vulnérabilités dans Google Chrome | 2025-07-16T00:00:00.000000 | 2025-07-16T00:00:00.000000 |
| certfr-2025-avi-0590 | Multiples vulnérabilités dans les produits IBM | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0589 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0588 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0587 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0586 | Multiples vulnérabilités dans Apache HTTP Server | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0585 | Multiples vulnérabilités dans VMware Tanzu | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0584 | Multiples vulnérabilités dans Apache Tomcat | 2025-07-11T00:00:00.000000 | 2025-07-11T00:00:00.000000 |
| certfr-2025-avi-0583 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-07-10T00:00:00.000000 | 2025-07-10T00:00:00.000000 |
| certfr-2025-avi-0582 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-07-10T00:00:00.000000 | 2025-07-10T00:00:00.000000 |
| certfr-2025-avi-0581 | Multiples vulnérabilités dans GitLab | 2025-07-10T00:00:00.000000 | 2025-07-10T00:00:00.000000 |
| certfr-2025-avi-0580 | Multiples vulnérabilités dans VMware Tanzu | 2025-07-10T00:00:00.000000 | 2025-07-10T00:00:00.000000 |
| certfr-2025-avi-0579 | Multiples vulnérabilités dans les produits Microsoft | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0578 | Multiples vulnérabilités dans Microsoft Azure | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0576 | Multiples vulnérabilités dans Microsoft Office | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0575 | Multiples vulnérabilités dans les produits Fortinet | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |