Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-113387 8.6 (v3.1) The Ortto plugin for WordPress before 1.0.25 did … canva
ortto
2026-10-29T01:40:39.020Z 2026-10-29T02:02:12.845Z
cve-2026-66092 4.8 (v4.0) Stored XSS in pre-login notice via reachable legacy lo… Apereo Foundation
openEQUELLA
2026-10-29T01:39:28.582Z 2026-10-29T02:02:12.981Z
cve-2026-66091 6.9 (v4.0) Unauthenticated IDOR Enables Disclosure of Other Users… Apereo Foundation
openEQUELLA
2026-10-29T01:38:24.876Z 2026-10-29T02:02:13.127Z
cve-2026-66090 7.1 (v4.0) XML External Entity (XXE) Injection in Metadata Field … Apereo Foundation
openEQUELLA
2026-10-29T01:37:37.928Z 2026-10-29T02:02:13.278Z
cve-2026-66089 6.1 (v4.0) XML External Entity (XXE) Vulnerability in SOAP Interf… Apereo Foundation
openEQUELLA
2026-10-29T01:36:30.145Z 2026-10-29T02:02:13.415Z
cve-2026-66088 9.4 (v4.0) Unrestricted Command Execution via system.execute Apereo Foundation
openEQUELLA
2026-10-29T01:35:46.415Z 2026-10-29T02:02:13.562Z
cve-2026-16889 4.8 (v4.0) Stored XSS via Pre-Login Notice Image Upload Serves At… Apereo Foundation
openEQUELLA
2026-10-29T01:32:09.466Z 2026-10-29T02:02:13.700Z
cve-2026-21157 8.3 (v4.0) Improper input validation in Bixby prior to versi… Samsung Mobile
Bixby
2026-10-29T01:01:58.516Z 2026-10-29T12:35:23.592Z
cve-2026-113957 N/A An attacker who controls the registry, a mirror, … Apple
container
2026-10-29T00:01:44.984Z 2026-10-29T00:01:44.984Z
cve-2026-118590 nipy nibabel Header volumeutils.py array_from_file mem… nipy
nibabel
2026-10-29T00:00:21.707Z 2026-10-29T00:00:21.707Z
cve-2026-118589 nschloe meshio VTK Reader _vtk_42.py memory allocation nschloe
meshio
2026-10-28T23:45:18.675Z 2026-10-28T23:45:18.675Z
cve-2026-118586 dfm feedfinder2 feedfinder2.py find_feeds server-side … dfm
feedfinder2
2026-10-28T23:30:17.619Z 2026-10-28T23:30:17.619Z
cve-2026-118585 configuroweb inventariobasico Add Product addlist.php … configuroweb
inventariobasico
2026-10-28T23:15:19.868Z 2026-10-28T23:15:19.868Z
cve-2026-86983 N/A A remote attacker may be able to terminate a proc… Apple
swift-crypto
2026-10-28T23:01:59.598Z 2026-10-28T23:02:44.171Z
cve-2026-118579 D-Link DIR-505 Web Management CGI secmark1524.cgi main… D-Link
DIR-505
2026-10-28T23:00:15.627Z 2026-10-28T23:00:15.627Z
cve-2026-118578 maotoumao MusicFreeDesktop Request Forwarder informati… maotoumao
MusicFreeDesktop
2026-10-28T22:45:10.175Z 2026-10-28T22:45:10.175Z
cve-2026-82411 Objects API: Cross-object-type authorization bypass on… maykinmedia
open-object
2026-10-28T22:40:13.728Z 2026-10-28T22:40:13.728Z
cve-2026-85749 MailWatch: IDOR lets any authenticated user release or… mailwatch
MailWatch
2026-10-28T22:37:38.513Z 2026-10-28T22:37:38.513Z
cve-2026-55561 InvoicePlane: Guest user IDOR in quote approval and re… InvoicePlane
InvoicePlane
2026-10-28T22:33:47.140Z 2026-10-28T22:33:47.140Z
cve-2026-75520 Domoticz: Missing authorization and path traversal in … domoticz
domoticz
2026-10-28T22:30:59.693Z 2026-10-28T22:30:59.693Z
cve-2026-118577 maotoumao MusicFreeDesktop Request Forwarder server-si… maotoumao
MusicFreeDesktop
2026-10-28T22:15:17.877Z 2026-10-28T22:15:17.877Z
cve-2026-118538 a2ui-project a2ui Renderer root.js Root.renderComponen… a2ui-project
a2ui
2026-10-28T22:00:18.460Z 2026-10-28T22:00:18.460Z
cve-2026-61575 AVideo-Encoder vulnerable to stored DOM cross-site scr… WWBN
AVideo-Encoder
2026-10-28T21:57:55.205Z 2026-10-28T21:57:55.205Z
cve-2026-61569 AVideo-Encoder: pre-authentication streamer-login SQL … WWBN
AVideo-Encoder
2026-10-28T21:54:38.358Z 2026-10-28T21:54:38.358Z
cve-2026-54453 OpenCATS: Authenticated Remote Code Execution via Sett… opencats
OpenCATS
2026-10-28T21:53:24.736Z 2026-10-28T21:53:24.736Z
cve-2026-61571 AVideo-Encoder: missing authentication on control and … WWBN
AVideo-Encoder
2026-10-28T21:49:16.840Z 2026-10-28T21:49:16.840Z
cve-2026-116641 7.6 (v4.0) 6.8 (v3.1) The DB Tools trust certificates issued by recoverable … MongoDB
Database Tools
2026-10-28T21:48:52.581Z 2026-10-28T21:48:52.581Z
cve-2026-61572 AVideo-Encoder: unauthenticated full-response server-s… WWBN
AVideo-Encoder
2026-10-28T21:47:39.328Z 2026-10-28T21:47:39.328Z
cve-2026-61573 AVideo-Encoder: reflected cross-site scripting in the … WWBN
AVideo-Encoder
2026-10-28T21:46:18.413Z 2026-10-28T21:46:18.413Z
cve-2026-118537 a2ui Image Player/Video Player/Audio Player Image.js i… n/a
a2ui
2026-10-28T21:45:16.400Z 2026-10-28T21:45:16.400Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Published Updated
jvndb-2026-012056 Multiple vulnerabilities in silex technology SD-330AC and AMC Manager 2026-04-21T15:27+09:00 2026-04-23T17:57+09:00
jvndb-2026-000051 SKYSEA Client View and SKYMEC IT Manager improper file access permission settings 2026-04-20T14:47+09:00 2026-04-20T14:47+09:00
jvndb-2026-011472 OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries 2026-04-17T14:54+09:00 2026-04-17T14:54+09:00
jvndb-2026-000057 Multiple vulnerabilities in CubeCart 2026-04-17T13:32+09:00 2026-04-17T13:32+09:00
jvndb-2026-000056 Arcserve UDP Console vulnerable to redirect to a dummy URL 2026-04-16T17:29+09:00 2026-04-16T17:29+09:00
jvndb-2026-000055 GROWI vulnerable to stored cross-site scripting 2026-04-15T17:21+09:00 2026-04-15T17:21+09:00
jvndb-2026-010851 Stack-based buffer overflow vulnerability in Dynabook Bluetooth ACPI Drivers 2026-04-14T18:13+09:00 2026-04-14T18:13+09:00
jvndb-2026-000053 EmoCheck loads Dynamic Link Libraries insecurely 2026-04-10T13:38+09:00 2026-04-10T13:38+09:00
jvndb-2026-000052 Multiple vulnerabilities in MATCHA series 2026-04-08T16:15+09:00 2026-04-08T16:15+09:00
jvndb-2026-000050 Multiple vulnerabilities in Movable Type 2026-04-08T16:15+09:00 2026-04-08T16:15+09:00
jvndb-2026-010301 Multiple Vulnerabilities in JP1/IT Desktop Management 2 and JP1/NETM/DM 2026-04-08T12:11+09:00 2026-04-08T12:11+09:00
jvndb-2026-010300 Multiple Vulnerabilities in Hitachi Ops Center Viewpoint 2026-04-08T12:11+09:00 2026-04-08T12:11+09:00
jvndb-2026-010299 Multiple Vulnerabilities in Hitachi Ops Center Common Services 2026-04-08T12:11+09:00 2026-07-23T10:52+09:00
jvndb-2026-000049 Multiple vulnerabilities in NEC Aterm series (NV26-001) 2026-04-03T15:09+09:00 2026-04-03T15:09+09:00
jvndb-2026-009720 Multiple vulnerabilities in FUJI Electric V-SFT (April 2026) 2026-04-02T14:58+09:00 2026-04-03T15:50+09:00
jvndb-2026-009412 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009411 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009410 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009409 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009408 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009406 Security information for Hitachi Disk Array Systems 2026-03-31T15:53+09:00 2026-03-31T15:53+09:00
jvndb-2026-009147 Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer 2026-03-27T18:18+09:00 2026-03-27T18:18+09:00
jvndb-2026-009148 Open Redirect Vulnerability in Hitachi Ops Center Administrator 2026-03-27T18:17+09:00 2026-03-27T18:17+09:00
jvndb-2026-000047 Multiple vulnerabilities in baserCMS 2026-03-27T18:00+09:00 2026-03-27T18:00+09:00
jvndb-2026-000045 WordPress Plugin "OpenStreetMap" vulnerable to cross-site scripting 2026-03-27T17:34+09:00 2026-03-27T17:34+09:00
jvndb-2026-000046 Multiple vulnerabilities in BUFFALO Wi-Fi routers 2026-03-27T17:18+09:00 2026-03-27T17:18+09:00
jvndb-2026-000044 Multiple vulnerabilities in the installer of RATOC RAID Monitoring Manager for Windows 2026-03-26T17:41+09:00 2026-03-26T17:41+09:00
jvndb-2026-000042 Digital Photo Frame GH-WDF10A vulnerable to improper access restriction 2026-03-26T17:41+09:00 2026-03-26T17:41+09:00
jvndb-2026-000043 SHARP routers missing authentication for some web APIs 2026-03-25T18:41+09:00 2026-03-25T18:41+09:00
jvndb-2026-000040 Installer of OM Workspace (Windows Edition) may insecurely load Dynamic Link Libraries 2026-03-25T18:13+09:00 2026-03-25T18:13+09:00
ID Description Updated
ID Description
ID Description Published Updated
cnvd-2026-36099 TOTOLINK T6访问控制不当漏洞(CNVD-2026-36099) 2026-09-08 2026-09-10
cnvd-2026-36098 TOTOLINK T6访问控制不当漏洞(CNVD-2026-36098) 2026-09-08 2026-09-10
cnvd-2026-36097 TOTOLINK T6访问控制不当漏洞(CNVD-2026-36097) 2026-09-08 2026-09-10
cnvd-2026-36096 TOTOLINK T6访问控制不当漏洞 2026-09-08 2026-09-10
cnvd-2026-36356 Sales and Inventory System SQL注入漏洞(CNVD-2026-36356) 2026-09-02 2026-09-11
cnvd-2026-35007 Siemens kas加密问题漏洞 2026-09-02 2026-09-03
cnvd-2026-36361 Sales and Inventory System SQL注入漏洞(CNVD-2026-36361) 2026-08-31 2026-09-11
cnvd-2026-36360 Sales and Inventory System SQL注入漏洞(CNVD-2026-36360) 2026-08-31 2026-09-11
cnvd-2026-36359 Sales and Inventory System SQL注入漏洞(CNVD-2026-36359) 2026-08-31 2026-09-11
cnvd-2026-36358 Sales and Inventory System SQL注入漏洞(CNVD-2026-36358) 2026-08-31 2026-09-11
cnvd-2026-36357 Sales and Inventory System SQL注入漏洞(CNVD-2026-36357) 2026-08-31 2026-09-11
cnvd-2026-35398 DELL Power Protect Cyber Recovery身份验证不当漏洞 2026-08-31 2026-09-07
cnvd-2026-35397 DELL Power Protect Cyber Recovery UNIX符号链接跟随漏洞 2026-08-31 2026-09-07
cnvd-2026-35396 DELL Power Protect Cyber Recovery SQL注入漏洞 2026-08-31 2026-09-07
cnvd-2026-35395 DELL Cloud Disaster Recovery操作系统命令注入漏洞(CNVD-2026-35395) 2026-08-31 2026-09-07
cnvd-2026-35394 DELL Cloud Disaster Recovery服务端请求伪造漏洞 2026-08-31 2026-09-07
cnvd-2026-35393 DELL Cloud Disaster Recovery操作系统命令注入漏洞 2026-08-31 2026-09-07
cnvd-2026-36364 Sales and Inventory System SQL注入漏洞(CNVD-2026-36364) 2026-08-28 2026-09-11
cnvd-2026-36363 Sales and Inventory System SQL注入漏洞(CNVD-2026-36363) 2026-08-28 2026-09-11
cnvd-2026-36362 Sales and Inventory System SQL注入漏洞(CNVD-2026-36362) 2026-08-28 2026-09-11
cnvd-2026-35410 Google Chrome授权问题漏洞 2026-08-28 2026-09-07
cnvd-2026-35409 Google Chrome资源未初始化漏洞 2026-08-28 2026-09-07
cnvd-2026-35408 Google Chrome输入验证不当漏洞 2026-08-28 2026-09-07
cnvd-2026-35407 Google Chrome信息泄露漏洞(CNVD-2026-35407) 2026-08-28 2026-09-07
cnvd-2026-35406 Google Chrome释放后重用漏洞 2026-08-28 2026-09-07
cnvd-2026-35405 Google Chrome访问控制漏洞 2026-08-28 2026-09-07
cnvd-2026-35404 Google Chrome逻辑错误漏洞 2026-08-28 2026-09-07
cnvd-2026-35403 Google Chrome信息泄露漏洞(CNVD-2026-35403) 2026-08-28 2026-09-07
cnvd-2026-35402 Google Chrome资源管理错误漏洞 2026-08-28 2026-09-07
cnvd-2026-35401 Google Chrome代码执行漏洞 2026-08-28 2026-09-07
ID Description Published Updated
certfr-2026-avi-1257 Vulnérabilité dans Fortinet FortiMail 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1256 Multiples vulnérabilités dans les produits IBM 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1255 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1254 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1253 Multiples vulnérabilités dans le noyau Linux de Debian 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1252 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1251 Multiples vulnérabilités dans Microsoft Edge 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1250 Multiples vulnérabilités dans les produits Moxa 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1249 Multiples vulnérabilités dans les produits VMware 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1248 Multiples vulnérabilités dans Apache HTTP Server 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1247 Multiples vulnérabilités dans Tenable Nessus 2026-10-02T00:00:00.000000 2026-10-02T00:00:00.000000
certfr-2026-avi-1246 Vulnérabilité dans Cisco Catalyst SD-WAN 2026-10-01T00:00:00.000000 2026-10-01T00:00:00.000000
certfr-2026-avi-1245 Multiples vulnérabilités dans Redmine 2026-10-01T00:00:00.000000 2026-10-01T00:00:00.000000
certfr-2026-avi-1244 Multiples vulnérabilités dans Mozilla Thunderbird 2026-10-01T00:00:00.000000 2026-10-01T00:00:00.000000
certfr-2026-avi-1243 Multiples vulnérabilités dans CPython 2026-10-01T00:00:00.000000 2026-10-01T00:00:00.000000
certfr-2026-avi-1242 Multiples vulnérabilités dans GitLab 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1241 Multiples vulnérabilités dans OpenSSL 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1240 Multiples vulnérabilités dans les produits Mozilla 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1239 Vulnérabilité dans CPython 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1238 Multiples vulnérabilités dans HPE Aruba Networking Instant On 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1237 Multiples vulnérabilités dans Google Chrome 2026-09-30T00:00:00.000000 2026-09-30T00:00:00.000000
certfr-2026-avi-1236 Vulnérabilité dans les produits Apple 2026-09-29T00:00:00.000000 2026-09-29T00:00:00.000000
certfr-2026-avi-1235 Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway 2026-09-28T00:00:00.000000 2026-09-28T00:00:00.000000
certfr-2026-avi-1234 Multiples vulnérabilités dans MongoDB 2026-09-28T00:00:00.000000 2026-09-28T00:00:00.000000
certfr-2026-avi-1233 Multiples vulnérabilités dans les produits IBM 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
certfr-2026-avi-1232 Multiples vulnérabilités dans le noyau Linux de Debian LTS 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
certfr-2026-avi-1231 Multiples vulnérabilités dans le noyau Linux de SUSE 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
certfr-2026-avi-1230 Multiples vulnérabilités dans le noyau Linux de Red Hat 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
certfr-2026-avi-1229 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
certfr-2026-avi-1228 Multiples vulnérabilités dans les produits Elastic 2026-09-25T00:00:00.000000 2026-09-25T00:00:00.000000
ID Description Published Updated
certfr-2017-ale-017 Vulnérabilité dans le serveur de messagerie Exim 2017-11-27T00:00:00.000000 2018-02-01T00:00:00.000000
certfr-2017-ale-016 Campagne de rançongiciel Bad Rabbit 2017-10-25T00:00:00.000000 2017-10-27T00:00:00.000000
certfr-2017-ale-014 Vulnérabilité dans le protocole WPA/WPA2 2017-10-18T00:00:00.000000 2017-10-19T00:00:00.000000
certfr-2017-ale-015 Vulnérabilités dans la bibliothèque Infineon RSA 2017-10-16T00:00:00.000000 2017-10-17T00:00:00.000000
certfr-2017-ale-013 Présence de code malveillant dans Piriform CCleaner 2017-09-18T00:00:00.000000 2017-10-09T00:00:00.000000
certfr-2017-ale-012 Campagne de maliciels prenant l'apparence d'un rançongiciel à multiples capacités de propagation 2017-06-27T00:00:00.000000 2017-08-03T00:00:00.000000
certfr-2017-ale-011 Campagne de messages électroniques non sollicités de type Jaff 2017-05-14T00:00:00.000000 2017-06-27T00:00:00.000000
certfr-2017-ale-010 Propagation d'un rançongiciel exploitant les vulnérabilités MS17-010 2017-05-12T00:00:00.000000 2017-06-27T00:00:00.000000
certfr-2017-ale-009 Vulnérabilité dans Microsoft Malware Protection Engine 2017-05-09T00:00:00.000000 2017-05-15T00:00:00.000000
certfr-2017-ale-008 Multiples vulnérabilités dans Microsoft Windows XP et Windows Server 2003 2017-04-14T00:00:00.000000 2017-09-06T00:00:00.000000
certfr-2017-ale-007 Vulnérabilité dans Microsoft Office 2017-04-10T00:00:00.000000 2017-04-12T00:00:00.000000
certfr-2017-ale-006 Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I 2017-03-29T00:00:00.000000 2017-03-29T00:00:00.000000
certfr-2017-ale-005 Vulnérabilité dans les commutateurs Cisco 2017-03-20T00:00:00.000000 2017-05-10T00:00:00.000000
certfr-2017-ale-004 Vulnérabilité dans Apache Struts 2017-03-10T00:00:00.000000 2017-05-10T00:00:00.000000
certfr-2017-ale-003 Vulnérabilité dans les navigateurs Microsoft 2017-02-27T00:00:00.000000 2017-03-15T00:00:00.000000
certfr-2017-ale-002 Vulnérabilité dans Microsoft Windows 2017-02-20T00:00:00.000000 2017-03-15T00:00:00.000000
certfr-2017-ale-001 Vulnérabilité dans Cisco WebEx 2017-01-25T00:00:00.000000 2017-01-31T00:00:00.000000
certfr-2016-ale-010 Vulnérabilité dans les routeurs Netgear 2016-12-13T00:00:00.000000 2016-12-26T00:00:00.000000
certfr-2016-ale-009 Campagne d'attaque contre des routeurs DSL 2016-12-01T00:00:00.000000 2017-01-26T00:00:00.000000
certfr-2016-ale-008 Vulnérabilité dans Microsoft Windows 2016-11-02T00:00:00.000000 2016-11-09T00:00:00.000000
certfr-2016-ale-007 Vulnérabilité dans Cisco IOS, IOS XE et IOS XR 2016-09-19T00:00:00.000000 2016-09-19T00:00:00.000000
certfr-2016-ale-006 Campagne de messages électroniques non sollicités de type Zepto/Odin 2016-09-05T00:00:00.000000 2016-11-17T00:00:00.000000
certfr-2016-ale-005 Multiples vulnérabilités dans les pare-feux Cisco 2016-08-18T00:00:00.000000 2016-09-05T00:00:00.000000
certfr-2016-ale-004 Vulnérabilité dans Adobe Flash Player 2016-06-15T00:00:00.000000 2016-06-16T00:00:00.000000
certfr-2016-ale-003 Vulnérabilité dans Adobe Flash Player 2016-05-11T00:00:00.000000 2016-05-12T00:00:00.000000
certfr-2016-ale-002 Vulnérabilité dans Adobe Flash Player 2016-04-06T00:00:00.000000 2016-04-08T00:00:00.000000
certfr-2016-ale-001 Campagne de messages électroniques non sollicités de type Locky 2016-02-19T00:00:00.000000 2016-04-07T00:00:00.000000
certfr-2015-ale-015 Campagne de messages électroniques non sollicités de type TeslaCrypt 2015-12-21T00:00:00.000000 2016-03-10T00:00:00.000000
certfr-2015-ale-014 Vulnérabilité dans Juniper ScreenOS 2015-12-18T00:00:00.000000 2016-04-11T00:00:00.000000
certfr-2015-ale-013 Vulnérabilité dans Joomla! 2015-12-14T00:00:00.000000 2016-08-01T00:00:00.000000