Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-107686 | N/A | Gitea reactions accepted on locked issues and comments |
Gitea |
Gitea |
2026-10-18T18:56:59.087Z | 2026-10-29T12:07:54.065Z |
| cve-2025-52097 | N/A | Cross Site Scripting vulnerability in InstantASP … |
n/a |
n/a |
2026-10-16T00:00:00.000Z | 2026-10-29T12:06:57.435Z |
| cve-2026-88648 | N/A | Incomplete X.509 implementation in GnuTLS v3.8.13… |
n/a |
n/a |
2026-10-08T00:00:00.000Z | 2026-10-29T12:05:47.061Z |
| cve-2026-21589 | This is a vulnerability in Bitbucket Data Center,… |
Atlassian |
Bamboo Data Center |
2026-10-05T21:30:00.390Z | 2026-10-29T12:04:46.110Z | |
| cve-2026-115377 | 9.4 (v4.0) 9.9 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:46.305Z | 2026-10-29T12:04:13.696Z |
| cve-2026-115373 | 7 (v4.0) 6.3 (v3.1) | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo… |
lxc |
incus |
2026-10-22T19:13:43.300Z | 2026-10-29T11:57:51.417Z |
| cve-2026-115369 | 2.1 (v4.0) 2.2 (v3.1) | OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr By… |
openbao |
openbao |
2026-10-22T19:13:40.448Z | 2026-10-29T11:56:36.361Z |
| cve-2026-115363 | 2.1 (v4.0) 3.3 (v3.1) | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 ACME… |
openbao |
openbao |
2026-10-22T19:13:37.600Z | 2026-10-29T11:56:00.897Z |
| cve-2026-115359 | 6.3 (v4.0) 3.7 (v3.1) | OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Role-Based… |
openbao |
openbao |
2026-10-22T19:13:34.716Z | 2026-10-29T11:54:37.275Z |
| cve-2026-115351 | 5.3 (v4.0) 4.7 (v3.1) | Mistune 3.2.1 before 3.3.0 CSS Injection via Figure Di… |
lepture |
mistune |
2026-10-22T19:13:27.678Z | 2026-10-29T11:53:14.490Z |
| cve-2026-108359 | PhpSpreadsheet ODS Reader: Unbounded number-rows-repea… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:32:49.724Z | 2026-10-29T11:51:32.420Z | |
| cve-2026-108360 | PhpSpreadsheet: SSRF whitelist bypass via unre-validat… |
PHPOffice |
PhpSpreadsheet |
2026-10-22T17:26:59.148Z | 2026-10-29T11:50:16.342Z | |
| cve-2026-114608 | Pylint: Arbitrary code execution via pickle deserializ… |
pylint-dev |
pylint |
2026-10-22T16:50:02.569Z | 2026-10-29T11:49:18.315Z | |
| cve-2026-75508 | GraphQL-core: Denial of service via comment tokens byp… |
graphql-python |
graphql-core |
2026-10-22T16:10:17.124Z | 2026-10-29T11:47:15.190Z | |
| cve-2026-61791 | OCO-Server: Stored XSS through agent hostnames in comm… |
schorschii |
OCO-Server |
2026-10-22T14:55:54.269Z | 2026-10-29T11:46:11.262Z | |
| cve-2026-115249 | subhajitkhan online-clinic-management-system Appointme… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:45:15.849Z | 2026-10-29T11:41:57.646Z | |
| cve-2026-115411 | 5.3 (v4.0) 5 (v3.1) | crawlseo before 0.2.4 Server-Side Request Forgery via … |
crawlseo |
crawlseo |
2026-10-22T13:20:01.875Z | 2026-10-29T11:38:10.900Z |
| cve-2026-119027 | 7.7 (v4.0) 7.5 (v3.1) | oapi-codegen 2.5.0 before 2.8.1 Code Injection via ser… |
oapi-codegen |
oapi-codegen |
2026-10-29T11:36:34.029Z | 2026-10-29T11:36:34.029Z |
| cve-2026-25439 | 8.1 (v3.1) | WordPress Booknetic plugin < 5.10.3 - Broken Authentic… |
Booknetic |
Booknetic |
2026-06-17T09:50:41.863Z | 2026-10-29T11:36:02.240Z |
| cve-2026-39746 | 9.3 (v3.1) | WordPress Booknetic plugin < 5.10.3 - SQL Injection vu… |
Booknetic |
Booknetic |
2026-10-06T08:34:17.195Z | 2026-10-29T11:35:28.523Z |
| cve-2026-115246 | subhajitkhan online-clinic-management-system patdocmsg… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:00:19.637Z | 2026-10-29T11:27:28.126Z | |
| cve-2026-115332 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Subscription Fi… |
uselotus |
lotus |
2026-10-22T10:57:48.791Z | 2026-10-29T11:25:42.720Z |
| cve-2026-119025 | 7.7 (v4.0) 7.5 (v3.1) | open 7.2.0 before 11.0.0 OS Command Injection via Powe… |
sindresorhus |
open |
2026-10-29T11:24:18.723Z | 2026-10-29T11:24:18.723Z |
| cve-2026-115324 | 9.2 (v4.0) 8.1 (v3.1) | mem0 0.1.117 before 1.0.8 SQL Injection via Databricks… |
mem0ai |
mem0 |
2026-10-22T10:57:43.136Z | 2026-10-29T11:23:41.895Z |
| cve-2026-115319 | 2 (v4.0) 2.5 (v3.1) | fzf 0.36.0 through 0.74.5 Denial of Service via maskAc… |
junegunn |
fzf |
2026-10-22T10:57:40.288Z | 2026-10-29T11:21:21.376Z |
| cve-2024-58394 | 5.1 (v4.0) 6.1 (v3.1) | Retool 3.88.0 XSS via /api/imageProxy SVG Proxying |
Retool |
Retool |
2026-10-22T10:57:37.409Z | 2026-10-29T11:19:55.226Z |
| cve-2022-51024 | 8.7 (v4.0) 7.5 (v3.1) | Kavita < 0.5.4.1 Unauthenticated Path Traversal via co… |
Kareadita |
Kavita |
2026-10-22T10:57:34.599Z | 2026-10-29T11:17:48.365Z |
| cve-2021-48017 | 8.7 (v4.0) 7.5 (v3.1) | OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal vi… |
OrbiTeam |
BSCW Server |
2026-10-22T10:57:31.855Z | 2026-10-29T11:16:33.337Z |
| cve-2021-48013 | 8.7 (v4.0) 7.5 (v3.1) | Weaver E-cology 8.0 Unauthenticated Path Traversal via… |
Weaver Network Co., Ltd. |
E-cology |
2026-10-22T10:57:29.018Z | 2026-10-29T11:13:18.528Z |
| cve-2026-115942 | Apache Qpid Proton C: Verifying non compliant TLS wild… |
Apache Software Foundation |
Apache Qpid Proton C |
2026-10-29T10:19:58.757Z | 2026-10-29T11:09:37.028Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000066 | Web Mailing List vulnerable to cross-site scripting | 2016-05-19T13:37+09:00 | 2016-06-08T17:23+09:00 |
| jvndb-2016-000026 | Cybozu Office vulnerable to cross-site scripting | 2016-02-15T16:21+09:00 | 2016-06-06T15:00+09:00 |
| jvndb-2015-000152 | Cybozu Garoon vulnerable to LDAP injection | 2015-10-07T14:48+09:00 | 2016-06-02T19:15+09:00 |
| jvndb-2016-000058 | Apache Cordova fails to restrict access permissions | 2016-05-11T14:16+09:00 | 2016-06-02T17:49+09:00 |
| jvndb-2016-000063 | FileMaker server issue where PHP source code may be viewable | 2016-05-13T14:27+09:00 | 2016-06-02T09:43+09:00 |
| jvndb-2016-000064 | WordPress plugin "Ninja Forms" vulnerable to PHP object injection | 2016-05-13T14:27+09:00 | 2016-06-01T17:00+09:00 |
| jvndb-2016-000061 | WN-GDN/R3 Series does not limit authentication attempts | 2016-05-12T14:34+09:00 | 2016-06-01T16:52+09:00 |
| jvndb-2016-000062 | WN-G300R Series vulnerable to cross-site scripting | 2016-05-12T14:34+09:00 | 2016-06-01T16:48+09:00 |
| jvndb-2016-000059 | Apache Cordova vulnerable to arbitrary plugin execution | 2016-05-11T14:16+09:00 | 2016-06-01T16:30+09:00 |
| jvndb-2016-000055 | kintone mobile for Android information management vulnerability | 2016-04-25T15:35+09:00 | 2016-06-01T16:21+09:00 |
| jvndb-2016-000054 | Electron may insecurely load Node modules | 2016-04-22T13:49+09:00 | 2016-06-01T15:56+09:00 |
| jvndb-2016-000052 | EC-CUBE fails to restrict access permissions | 2016-04-26T13:56+09:00 | 2016-05-31T17:41+09:00 |
| jvndb-2016-000051 | EC-CUBE fails to restrict access permissions | 2016-04-26T13:56+09:00 | 2016-05-31T17:41+09:00 |
| jvndb-2016-000053 | EC-CUBE vulnerable to cross-site request forgery | 2016-04-26T14:24+09:00 | 2016-05-31T17:40+09:00 |
| jvndb-2015-000151 | Multiple PHP code execution vulnerabilitles in Cybozu Garoon | 2015-10-07T14:48+09:00 | 2016-05-30T15:34+09:00 |
| jvndb-2015-000115 | Japan Connected-free Wi-Fi vulnerable to allow URL whitelist bypass | 2015-09-11T14:16+09:00 | 2016-05-27T14:32+09:00 |
| jvndb-2016-000057 | Multiple shiro8 Co., Ltd. freearea_ addition_plugins for EC-CUBE vulnerable to cross-site scripting | 2016-04-26T14:18+09:00 | 2016-05-25T17:48+09:00 |
| jvndb-2015-000101 | PHP for Windows vulnerable to OS command injection | 2015-07-17T14:44+09:00 | 2016-05-19T17:43+09:00 |
| jvndb-2016-000048 | EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting | 2016-04-08T12:31+09:00 | 2016-05-06T16:13+09:00 |
| jvndb-2016-000038 | ActiveX control for EVA Animator vulnerable to buffer overflow | 2016-04-04T15:30+09:00 | 2016-04-20T09:38+09:00 |
| jvndb-2016-000035 | Aterm WF800HP vulnerable to cross-site request forgery | 2016-03-30T14:49+09:00 | 2016-04-18T15:42+09:00 |
| jvndb-2016-000036 | Aterm WG300HP vulnerable to cross-site request forgery | 2016-03-30T14:49+09:00 | 2016-04-18T15:41+09:00 |
| jvndb-2016-000045 | baserCMS plugin "Casebook Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000044 | baserCMS plugin "Casebook Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000043 | baserCMS plugin "Menubook Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000042 | baserCMS plugin "Menubook Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000041 | baserCMS plugin "Recruit Plugin" vulnerable to cross-site request forgery | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000040 | baserCMS plugin "Recruit Plugin" vulnerable to cross-site scripting | 2016-04-06T15:29+09:00 | 2016-04-08T16:51+09:00 |
| jvndb-2016-000039 | AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery | 2016-04-04T15:30+09:00 | 2016-04-07T12:05+09:00 |
| jvndb-2016-000037 | WisePoint contains issue in preventing clickjacking attacks | 2016-04-04T15:30+09:00 | 2016-04-07T12:05+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0574 | Multiples vulnérabilités dans les produits Ivanti | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0573 | Multiples vulnérabilités dans Node.js | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0572 | Multiples vulnérabilités dans Suricata | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0571 | Multiples vulnérabilités dans Xen | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0570 | Multiples vulnérabilités dans MongoDB | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0569 | Multiples vulnérabilités dans Adobe ColdFusion | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0568 | Multiples vulnérabilités dans les produits Citrix | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0567 | Multiples vulnérabilités dans HPE Aruba Networking Instant On | 2025-07-09T00:00:00.000000 | 2025-07-09T00:00:00.000000 |
| certfr-2025-avi-0566 | Multiples vulnérabilités dans les produits Siemens | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0565 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0564 | Multiples vulnérabilités dans les produits SAP | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0563 | Multiples vulnérabilités dans les produits Splunk | 2025-07-08T00:00:00.000000 | 2025-07-08T00:00:00.000000 |
| certfr-2025-avi-0562 | Multiples vulnérabilités dans les produits IBM | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0561 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0560 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0559 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0558 | Multiples vulnérabilités dans PHP | 2025-07-04T00:00:00.000000 | 2025-07-04T00:00:00.000000 |
| certfr-2025-avi-0557 | Vulnérabilité dans Microsoft Edge | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0556 | Vulnérabilité dans Citrix XenServer | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0555 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0554 | Multiples vulnérabilités dans Grafana | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0553 | Vulnérabilité dans les produits Cisco | 2025-07-03T00:00:00.000000 | 2025-07-03T00:00:00.000000 |
| certfr-2025-avi-0552 | Multiples vulnérabilités dans Microsoft Edge | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0551 | Vulnérabilité dans Xen | 2025-07-02T00:00:00.000000 | 2025-07-02T00:00:00.000000 |
| certfr-2025-avi-0550 | Multiples vulnérabilités dans les produits Tenable | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0549 | Vulnérabilité dans Google Chrome | 2025-07-01T00:00:00.000000 | 2025-07-01T00:00:00.000000 |
| certfr-2025-avi-0548 | Multiples vulnérabilités dans MongoDB Server | 2025-06-30T00:00:00.000000 | 2025-06-30T00:00:00.000000 |
| certfr-2025-avi-0547 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0546 | Multiples vulnérabilités dans les produits IBM | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0545 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |