Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-1928 | Rank Math SEO <= 1.0.276 - Authenticated (Contributor+… |
rankmath |
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings |
2026-10-28T03:42:54.378Z | 2026-10-29T01:41:55.325Z | |
| cve-2026-116613 | Animated Text Block <= 1.2.6 - Missing Authorization t… |
bplugins |
Animated Text Block – Add Typing and Looping Text Effects |
2026-10-28T03:42:54.035Z | 2026-10-29T01:41:55.485Z | |
| cve-2026-111255 | affiliate-toolkit <= 3.9.2 - Authenticated (Contributo… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T03:42:53.522Z | 2026-10-28T16:10:48.081Z | |
| cve-2026-118275 | a2ui-project a2ui Resolver data-context.ts DataContext… |
a2ui-project |
a2ui |
2026-10-28T03:30:18.509Z | 2026-10-28T16:10:54.352Z | |
| cve-2026-118384 | 6.1 (v3.1) | GNU mtools before 4.0.50 has an out-of-bounds wri… |
GNU |
mtools |
2026-10-28T02:53:38.786Z | 2026-10-31T15:14:13.418Z |
| cve-2026-118274 | a2ui-project a2ui Binder generic-binder.ts resource co… |
a2ui-project |
a2ui |
2026-10-28T02:45:10.858Z | 2026-10-28T02:45:10.858Z | |
| cve-2026-118273 | a2ui-project a2ui data-model.ts DataModel.set resource… |
a2ui-project |
a2ui |
2026-10-28T02:30:20.889Z | 2026-10-28T02:30:20.889Z | |
| cve-2026-107745 | AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limit… |
tigroumeow |
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini |
2026-10-28T02:29:59.766Z | 2026-10-29T01:51:59.196Z | |
| cve-2026-109209 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Sub… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:59.405Z | 2026-10-29T01:51:59.353Z | |
| cve-2026-111314 | affiliate-toolkit <= 3.9.2 - Unauthenticated Stored Cr… |
cservit |
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display |
2026-10-28T02:29:59.059Z | 2026-10-29T01:51:59.496Z | |
| cve-2026-97019 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Si… |
mohammed_kaludi |
AMP for WP – Accelerated Mobile Pages |
2026-10-28T02:29:58.709Z | 2026-10-29T01:51:59.638Z | |
| cve-2026-109999 | AI Marketing Expert <= 1.2.8 - Unauthenticated Stored … |
nalam-1 |
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot |
2026-10-28T02:29:58.364Z | 2026-10-28T16:11:01.240Z | |
| cve-2026-109974 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Con… |
plugins360 |
All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos |
2026-10-28T02:29:57.994Z | 2026-10-29T01:51:59.778Z | |
| cve-2026-84999 | Pie Register Premium <= 3.8.4.0 - Unauthenticated Arbi… |
Pie Register |
Pie Register Premium |
2026-10-28T02:29:57.638Z | 2026-10-29T01:51:59.919Z | |
| cve-2026-107625 | Ultimate Member <= 2.14.0 - Authenticated (Subscriber+… |
ultimatemember |
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin |
2026-10-28T02:29:57.142Z | 2026-10-28T16:11:08.360Z | |
| cve-2026-115624 | 5.3 (v3.0) 6.9 (v4.0) | GROWI contains a missing authorization check vuln… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:49.154Z | 2026-10-28T02:21:49.154Z |
| cve-2026-109848 | 4.2 (v3.0) 2.3 (v4.0) | GROWI contains an authorization bypass vulnerabil… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:37.093Z | 2026-10-28T02:21:37.093Z |
| cve-2026-105272 | 4.2 (v3.0) 2.3 (v4.0) | GROWI contains an authorization bypass vulnerabil… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:24.458Z | 2026-10-28T02:21:24.458Z |
| cve-2026-118378 | 8.5 (v4.0) 7.8 (v3.1) | Tabularis before 0.28.0 SQL Injection via MCP describe… |
TabularisDB |
tabularis |
2026-10-28T02:03:24.996Z | 2026-10-28T02:03:24.996Z |
| cve-2026-118377 | 8.7 (v4.0) 7.5 (v3.1) | mews/pos through 2.0.0 Missing Hash Verification in 3D… |
mewebstudio |
pos |
2026-10-28T02:03:24.283Z | 2026-10-28T02:03:24.283Z |
| cve-2026-118376 | 6 (v4.0) 5.3 (v3.1) | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 … |
Tencent |
WeKnora |
2026-10-28T02:03:23.589Z | 2026-10-28T16:11:20.194Z |
| cve-2026-118375 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp b8841 before b11865 Stack-based Buffer Overf… |
ggml-org |
llama.cpp |
2026-10-28T02:03:22.895Z | 2026-10-28T02:03:22.895Z |
| cve-2026-118374 | 8.2 (v4.0) 5.9 (v3.1) | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:22.183Z | 2026-10-28T02:03:22.183Z |
| cve-2026-118373 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 Cleartext Transmissio… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:21.525Z | 2026-10-28T02:03:21.525Z |
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118371 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.152Z | 2026-10-28T02:03:20.152Z |
| cve-2026-118370 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 Integer Overflow in storeAtts v… |
libexpat |
libexpat |
2026-10-28T02:03:19.447Z | 2026-10-28T02:03:19.447Z |
| cve-2026-117610 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 NULL Pointer Dereference via Ex… |
libexpat |
libexpat |
2026-10-28T02:03:18.766Z | 2026-10-28T02:03:18.766Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-117608 | 6.9 (v4.0) 6.1 (v3.1) | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 I… |
assimp |
assimp |
2026-10-28T02:03:17.365Z | 2026-10-28T02:03:17.365Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000132 | MEGAPHONE MUSIC vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000131 | Auction Camera vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-09-16T16:58+09:00 |
| jvndb-2015-000130 | applican vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-14T16:30+09:00 |
| jvndb-2015-000129 | PIXMA MG7500 Series vulnerable to cross-site request forgery | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000116 | Japan Connected-free Wi-Fi vulnerable to script injection | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000115 | Japan Connected-free Wi-Fi vulnerable to allow URL whitelist bypass | 2015-09-11T14:16+09:00 | 2016-05-27T14:32+09:00 |
| jvndb-2015-000127 | ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow | 2015-09-07T13:38+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000128 | OpenDocMan vulnerable to cross-site scripting | 2015-09-04T18:13+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000125 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2017-10-02T12:08+09:00 |
| jvndb-2015-000124 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2015-12-25T13:45+09:00 |
| jvndb-2015-000301 | BBS X102 vulnerable to cross-site scripting | 2015-09-03T15:00+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000302 | hitSuji (rktSNS2) vulnetable to cross-site scripting | 2015-09-03T14:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000123 | NScripter vulnerable to buffer overflow | 2015-09-02T15:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000121 | Twit BBS vulnerable to cross-site scripting | 2015-09-01T14:18+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000120 | Rakuten card App for iOS fails to verify SSL server certificates | 2015-09-01T14:18+09:00 | 2018-03-14T12:30+09:00 |
| jvndb-2015-000122 | desknet's NEO vulnerable to directory traversal | 2015-09-01T12:36+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000119 | File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | 2015-08-27T15:03+09:00 | 2015-09-02T17:57+09:00 |
| jvndb-2015-000118 | Apache Tapestry deserializes untrusted data | 2015-08-20T15:53+09:00 | 2015-08-26T17:51+09:00 |
| jvndb-2015-000117 | Multiple I-O DATA LAN routers vulnerable in UPnP functionality | 2015-08-18T15:21+09:00 | 2015-08-28T17:29+09:00 |
| jvndb-2015-000114 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery | 2015-08-12T15:13+09:00 | 2015-08-26T17:28+09:00 |
| jvndb-2015-000113 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting | 2015-08-12T15:13+09:00 | 2015-08-26T17:38+09:00 |
| jvndb-2015-000112 | Microsoft Office discloses a file path of a local file | 2015-08-12T15:13+09:00 | 2015-08-12T15:13+09:00 |
| jvndb-2015-000111 | Yodobashi App for Android fails to verify SSL server certificates | 2015-08-07T13:50+09:00 | 2018-04-04T12:28+09:00 |
| jvndb-2015-000110 | Yodobashi App for Android vulnerable to arbitrary Java method execution | 2015-08-07T13:50+09:00 | 2015-08-11T12:22+09:00 |
| jvndb-2015-000109 | yoyaku_v41 vulnerable to OS command injection | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000108 | yoyaku_v41 vulnerable to authentication bypass | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000107 | yoyaku_v41 vulnerable to arbitrary file creation | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000106 | Gazou BBS plus vulnerability in file upload processing | 2015-07-28T13:47+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2014-007612 | Welcart vulnerable to SQL injection | 2015-07-24T14:52+09:00 | 2015-07-24T14:52+09:00 |
| jvndb-2015-000105 | Research Artisan Lite does not properly perform authentication | 2015-07-24T14:46+09:00 | 2015-07-28T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0474 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |
| certfr-2025-avi-0473 | Multiples vulnérabilités dans les produits Splunk | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0472 | Multiples vulnérabilités dans Google Android | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0471 | Multiples vulnérabilités dans Google Chrome | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0470 | Vulnérabilité dans les produits Moxa | 2025-06-02T00:00:00.000000 | 2025-06-02T00:00:00.000000 |
| certfr-2025-avi-0469 | Vulnérabilité dans les produits Synology | 2025-06-02T00:00:00.000000 | 2025-06-02T00:00:00.000000 |
| certfr-2025-avi-0468 | Vulnérabilité dans Roundcube | 2025-06-02T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0467 | Multiples vulnérabilités dans IBM Db2 | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0466 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0465 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0464 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0463 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0462 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0461 | Vulnérabilité dans Apache Tomcat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0460 | Vulnérabilité dans Spring Cloud Gateway Server | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0459 | Multiples vulnérabilités dans ISC Kea DHCP | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0458 | Multiples vulnérabilités dans Curl | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0457 | Vulnérabilité dans Traefik | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0456 | Multiples vulnérabilités dans Citrix et Xen | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0455 | Multiples vulnérabilités dans Google Chrome | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0454 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0453 | Vulnérabilité dans Mattermost Server | 2025-05-27T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0452 | Multiples vulnérabilités dans les produits IBM | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0451 | Vulnérabilité dans Microsoft Edge | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0450 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0449 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0448 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0447 | Multiples vulnérabilités dans Grafana | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0446 | Multiples vulnérabilités dans Asterisk | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0445 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |