Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2018-25439 | 8.7 (v4.0) 7.5 (v3.1) | MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via… |
MetInfo |
MetInfo |
2026-10-22T10:57:26.044Z | 2026-10-29T11:09:34.251Z |
| cve-2026-114230 | Apache Qpid Proton C: Potential authentication bypass:… |
Apache Software Foundation |
Apache Qpid Proton C |
2026-10-29T10:19:15.580Z | 2026-10-29T11:09:06.927Z | |
| cve-2026-105042 | Apache Qpid Proton C: Unbounded recursion in parsing A… |
Apache Software Foundation |
Apache Qpid Proton C |
2026-10-29T10:17:20.853Z | 2026-10-29T11:08:30.677Z | |
| cve-2026-105031 | Apache Qpid Proton C: The OpenSSL TLS implementation a… |
Apache Software Foundation |
Apache Qpid Proton C |
2026-10-29T10:16:41.384Z | 2026-10-29T11:08:28.567Z | |
| cve-2017-20288 | 5.1 (v4.0) 6.1 (v3.1) | QCubed 3.1.1 Reflected XSS via installer step_2.php |
QCubed |
QCubed |
2026-10-22T10:57:23.289Z | 2026-10-29T11:04:55.766Z |
| cve-2026-114732 | 6.8 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:16:51.833Z | 2026-10-29T10:57:39.353Z |
| cve-2026-115282 | N/A | Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticate… |
Unknown |
Recipe Card Blocks Lite |
2026-10-29T06:00:21.666Z | 2026-10-29T10:56:09.514Z |
| cve-2026-115299 | N/A | Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin … |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:21.839Z | 2026-10-29T10:56:09.360Z |
| cve-2026-115300 | N/A | Contact Form by Supsystic < 1.11.1 - Contact Submissio… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.014Z | 2026-10-29T10:56:09.201Z |
| cve-2026-115301 | N/A | Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via F… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.187Z | 2026-10-29T10:56:09.041Z |
| cve-2026-115302 | N/A | Contact Form by Supsystic < 1.11.1 - Unauthenticated A… |
Unknown |
Contact Form by Supsystic |
2026-10-29T06:00:22.361Z | 2026-10-29T10:56:08.890Z |
| cve-2026-78395 | N/A | Link Library < 7.10.0 - Unauthenticated Link Submissio… |
Unknown |
Link Library |
2026-10-29T06:00:22.791Z | 2026-10-29T10:56:08.732Z |
| cve-2026-78396 | N/A | Link Library < 7.10.0 - Unauthenticated Link Contact a… |
Unknown |
Link Library |
2026-10-29T06:00:22.964Z | 2026-10-29T10:56:08.584Z |
| cve-2026-88928 | N/A | PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated… |
Unknown |
PAYCOMET for WooCommerce |
2026-10-29T06:00:23.147Z | 2026-10-29T10:56:08.430Z |
| cve-2026-89216 | N/A | vTables < 0.3 - Unauthenticated SQL Injection via orde… |
Unknown |
vTables |
2026-10-29T06:00:23.322Z | 2026-10-29T10:56:08.266Z |
| cve-2024-3586 | N/A | LetterPress < 2.4.0 - Admin+ Stored XSS |
Unknown |
LetterPress |
2026-10-29T06:00:23.500Z | 2026-10-29T10:56:08.109Z |
| cve-2026-103693 | N/A | Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 -… |
Unknown |
Frontend Dashboard |
2026-10-29T06:00:23.681Z | 2026-10-29T10:56:07.950Z |
| cve-2026-105258 | N/A | LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form… |
Unknown |
Appointment Booking Plugin |
2026-10-29T06:00:23.853Z | 2026-10-29T10:56:07.796Z |
| cve-2026-108685 | N/A | WP Post Author < 4.2.0 - Unauthenticated Modification … |
Unknown |
WP Post Author |
2026-10-29T06:00:24.033Z | 2026-10-29T10:56:07.645Z |
| cve-2026-108686 | N/A | WP Post Author < 4.2.0 - Unauthenticated reCAPTCHA Sec… |
Unknown |
WP Post Author |
2026-10-29T06:00:24.208Z | 2026-10-29T10:56:07.495Z |
| cve-2026-108763 | N/A | Wallet System for WooCommerce < 2.8.2 - Subscriber+ KY… |
Unknown |
Wallet System for WooCommerce |
2026-10-29T06:00:24.396Z | 2026-10-29T10:56:07.338Z |
| cve-2026-110030 | N/A | Hide Price Until Login < 1.1.2 - Unauthenticated Accou… |
Unknown |
Hide Price Until Login |
2026-10-29T06:00:24.596Z | 2026-10-29T10:56:07.177Z |
| cve-2026-110504 | N/A | Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Autho… |
Unknown |
Enable SVG, WebP, and ICO Upload |
2026-10-29T06:00:24.769Z | 2026-10-29T10:56:07.031Z |
| cve-2026-110505 | N/A | Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Sto… |
Unknown |
Enable SVG, WebP, and ICO Upload |
2026-10-29T06:00:24.942Z | 2026-10-29T10:56:06.878Z |
| cve-2026-110983 | N/A | WP Photo Album Plus < 9.3.04.004 - Photo Comment Delet… |
Unknown |
WP Photo Album Plus |
2026-10-29T06:00:25.116Z | 2026-10-29T10:56:06.731Z |
| cve-2026-111739 | N/A | Two Factor Authentication < 1.17.0 and All-In-One Secu… |
Unknown |
Two Factor Authentication |
2026-10-29T06:00:25.291Z | 2026-10-29T10:56:06.577Z |
| cve-2026-113616 | N/A | LogixFast Auth < 1.0.4 - Unauthenticated Account Takeo… |
Unknown |
LogixFast Auth |
2026-10-29T06:00:25.482Z | 2026-10-29T10:56:06.421Z |
| cve-2026-113617 | N/A | Automated Import Products to Cart < 1.0.4 - Subscriber… |
Unknown |
Automated Import Products to Cart |
2026-10-29T06:00:25.656Z | 2026-10-29T10:56:06.251Z |
| cve-2026-114270 | N/A | GeoDirectory < 2.8.197 - Unauthenticated Password-Prot… |
Unknown |
GeoDirectory |
2026-10-29T06:00:25.828Z | 2026-10-29T10:56:06.088Z |
| cve-2026-115245 | N/A | Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitr… |
Unknown |
Chat AI with Dispatcher |
2026-10-29T06:00:26.002Z | 2026-10-29T10:56:05.928Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-001559 | Information Disclosure Vulnerability in Hitachi Compute Systems Manager | 2016-03-07T17:00+09:00 | 2016-03-31T17:50+09:00 |
| jvndb-2016-000034 | WordPress plugin "WP Favorite Posts" vulnerable to cross-site scripting | 2016-03-24T12:28+09:00 | 2016-03-29T15:40+09:00 |
| jvndb-2016-000015 | EXPRESSCLUSTER X vulnerable to directory traversal | 2016-01-29T13:45+09:00 | 2016-03-16T14:24+09:00 |
| jvndb-2016-000032 | Multiple Corega wireless LAN routers vulnerable to cross-site request forgery | 2016-03-02T14:52+09:00 | 2016-03-16T13:46+09:00 |
| jvndb-2016-000006 | Multiple Buffalo network devices vulnerable to cross-site scripting | 2016-01-22T14:36+09:00 | 2016-03-10T17:53+09:00 |
| jvndb-2016-000005 | Multiple Buffalo network devices vulnerable to cross-site request forgery | 2016-01-22T14:36+09:00 | 2016-03-10T17:53+09:00 |
| jvndb-2016-000029 | LINE for Windows and LINE for Mac OS vulnerable to denial-of-service (DoS) | 2016-02-19T14:43+09:00 | 2016-03-10T17:39+09:00 |
| jvndb-2016-000030 | baserCMS vulnerable to OS command injection | 2016-02-19T14:39+09:00 | 2016-03-07T15:51+09:00 |
| jvndb-2016-000017 | JOB-CUBE vulnerable to cross-site scripting | 2016-01-29T14:06+09:00 | 2016-03-04T17:47+09:00 |
| jvndb-2016-000027 | EC-CUBE plugin "Help plug-in" vulnerable to SQL injection | 2016-02-19T14:42+09:00 | 2016-03-03T17:51+09:00 |
| jvndb-2014-005987 | Multiple Vulnerabilities in JP1/Cm2/Network Node Manager i | 2014-12-16T17:31+09:00 | 2016-02-26T17:52+09:00 |
| jvndb-2014-005986 | Multiple buffer overflows in Hitachi JP1/Cm2/Network Node Manager i | 2014-12-16T17:30+09:00 | 2016-02-26T17:32+09:00 |
| jvndb-2016-000031 | Log-Chat vulnerable to cross-site scripting | 2016-02-22T14:56+09:00 | 2016-02-25T15:10+09:00 |
| jvndb-2016-000025 | Cybozu Office vulnerable to open redirect | 2016-02-15T16:20+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000024 | Cybozu Office vulnerable to cross-site request forgery | 2016-02-15T16:20+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000023 | Cybozu Office access restriction bypass vulnerability | 2016-02-15T15:45+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000022 | Cybozu Office vulnerable to information disclosure | 2016-02-15T15:44+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000021 | Cybozu Office vulnerable to information disclosure | 2016-02-15T15:44+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000020 | Cybozu Office vulnerable to denial-of-service (DoS) | 2016-02-15T15:43+09:00 | 2016-02-23T16:32+09:00 |
| jvndb-2016-000028 | Internet Explorer cross-domain policy bypass | 2016-02-19T14:39+09:00 | 2016-02-23T11:23+09:00 |
| jvndb-2016-000012 | HOME SPOT CUBE vulnerable to OS command injection | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000011 | HOME SPOT CUBE vulnerable to clickjacking | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000010 | HOME SPOT CUBE vulnerable to cross-site request forgery | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000009 | HOME SPOT CUBE vulnerable to HTTP header injection | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000008 | HOME SPOT CUBE vulnerable to open redirect | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000007 | HOME SPOT CUBE vulnerable to cross-site scripting | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000018 | Microsoft Producer for Microsoft Office PowerPoint vulnerable to cross-site scripting | 2016-02-15T09:56+09:00 | 2016-02-15T09:56+09:00 |
| jvndb-2015-000172 | Multiple routers contain issue in preventing clickjacking attacks | 2015-10-30T15:16+09:00 | 2016-02-12T17:16+09:00 |
| jvndb-2015-006527 | Cross-site Scripting Vulnerability in uCosminexus Portal Framework and Groupmax Collaboration | 2015-12-28T13:51+09:00 | 2016-02-10T14:36+09:00 |
| jvndb-2016-000016 | Vine MV vulnerable to cross-site scripting | 2016-01-29T13:50+09:00 | 2016-02-10T10:19+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0544 | Multiples vulnérabilités dans les produits Trend Micro | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0543 | Vulnérabilité dans VMware Tanzu | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0542 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-27T00:00:00.000000 | 2025-06-27T00:00:00.000000 |
| certfr-2025-avi-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0537 | Multiples vulnérabilités dans GitLab | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0536 | Multiples vulnérabilités dans les produits Mozilla | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0535 | Vulnérabilité dans VMware Tanzu | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0534 | Multiples vulnérabilités dans Google Chrome | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0533 | Multiples vulnérabilités dans Elastic Kibana | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0532 | Multiples vulnérabilités dans les produits Splunk | 2025-06-24T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-avi-0531 | Vulnérabilité dans Bitdefender SecurePass | 2025-06-23T00:00:00.000000 | 2025-06-23T00:00:00.000000 |
| certfr-2025-avi-0530 | Multiples vulnérabilités dans les produits IBM | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0528 | Multiples vulnérabilités dans les produits Citrix | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0527 | Vulnérabilité dans les produits Microsoft | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0526 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0524 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-19T00:00:00.000000 | 2025-06-19T00:00:00.000000 |
| certfr-2025-avi-0523 | Vulnérabilité dans Cisco Meraki MX | 2025-06-19T00:00:00.000000 | 2025-06-19T00:00:00.000000 |
| certfr-2025-avi-0522 | Multiples vulnérabilités dans ClamAV | 2025-06-19T00:00:00.000000 | 2025-06-19T00:00:00.000000 |
| certfr-2025-avi-0521 | Multiples vulnérabilités dans Synacor Zimbra Collaboration | 2025-06-18T00:00:00.000000 | 2025-06-18T00:00:00.000000 |
| certfr-2025-avi-0520 | Multiples vulnérabilités dans les produits Atlassian | 2025-06-18T00:00:00.000000 | 2025-06-18T00:00:00.000000 |
| certfr-2025-avi-0519 | Multiples vulnérabilités dans Moodle | 2025-06-18T00:00:00.000000 | 2025-06-18T00:00:00.000000 |
| certfr-2025-avi-0518 | Multiples vulnérabilités dans Google Chrome | 2025-06-18T00:00:00.000000 | 2025-06-18T00:00:00.000000 |
| certfr-2025-avi-0517 | Multiples vulnérabilités dans les produits Veeam | 2025-06-18T00:00:00.000000 | 2025-06-18T00:00:00.000000 |
| certfr-2025-avi-0516 | Multiples vulnérabilités dans Apache Tomcat | 2025-06-17T00:00:00.000000 | 2025-06-17T00:00:00.000000 |
| certfr-2025-avi-0515 | Vulnérabilité dans Grafana | 2025-06-16T00:00:00.000000 | 2025-06-16T00:00:00.000000 |
| certfr-2025-avi-0514 | Vulnérabilité dans PostgreSQL JDBC | 2025-06-16T00:00:00.000000 | 2025-06-16T00:00:00.000000 |
| certfr-2025-avi-0513 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-16T00:00:00.000000 | 2025-06-16T00:00:00.000000 |