Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103593 | Fireware OS Stack Buffer Overflow in Logging Service A… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:28.244Z | 2026-10-29T10:45:46.609Z | |
| cve-2026-90465 | Fireware OS Missing Authentication in FireCluster Sync… |
WatchGuard |
Fireware OS |
2026-10-27T15:52:29.859Z | 2026-10-29T10:45:46.468Z | |
| cve-2026-107672 | 8.8 (v3.1) | Stack File Trusted Markdown Injection in Autodesk Fusi… |
Autodesk |
Fusion Post Processor Utility |
2026-10-27T16:04:04.713Z | 2026-10-29T10:45:46.291Z |
| cve-2026-113775 | 7.8 (v3.1) | Dynamic Library Loading Process Control in Autodesk Fu… |
Autodesk |
Fusion |
2026-10-27T16:06:22.013Z | 2026-10-29T10:45:46.129Z |
| cve-2026-104349 | 7.3 (v3.1) | Creative Cloud Desktop | Uncontrolled Search Path Elem… |
Adobe |
Creative Cloud Desktop Application |
2026-10-27T16:21:54.690Z | 2026-10-29T10:45:45.965Z |
| cve-2026-48379 | 7.8 (v3.1) | Substance3D - Painter | Stack-based Buffer Overflow (C… |
Adobe |
Adobe Substance 3D Painter |
2026-10-27T16:23:08.363Z | 2026-10-29T10:45:45.823Z |
| cve-2026-102814 | 8.7 (v4.0) | Improper Authentication in TP-Link TDDP v2 Allows Root… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:43.627Z | 2026-10-29T10:45:45.682Z |
| cve-2026-102815 | 6.9 (v4.0) | Command Injection in tmpServer Allows Local Privilege … |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:59.514Z | 2026-10-29T10:45:45.539Z |
| cve-2026-86384 | 9.8 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T09:51:07.110Z | 2026-10-29T10:45:44.969Z |
| cve-2026-86379 | 7.2 (v3.1) | Dell PowerProtect Data Domain Management Center, … |
Dell |
PowerProtect Data Domain Management Center |
2026-10-28T10:01:35.942Z | 2026-10-29T10:45:44.831Z |
| cve-2026-86378 | 8.8 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T10:05:06.420Z | 2026-10-29T10:45:44.691Z |
| cve-2026-87103 | 7.4 (v3.0) | Sensitive information disclosure and manipulation… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:08:45.683Z | 2026-10-29T10:45:44.554Z |
| cve-2026-87880 | 6.8 (v3.0) | Sensitive information disclosure due to missing S… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:09:09.456Z | 2026-10-29T10:45:44.416Z |
| cve-2025-30414 | 7.1 (v3.0) | Local privilege escalation due to improper authen… |
Acronis |
Acronis Cyber Protect Cloud Agent |
2026-10-28T10:09:55.733Z | 2026-10-29T10:45:44.259Z |
| cve-2026-87102 | 7.4 (v3.0) | Sensitive information disclosure and manipulation… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:11:31.104Z | 2026-10-29T10:45:44.118Z |
| cve-2026-87878 | 6.3 (v3.0) | Linux binaries have executable stack attribute en… |
Acronis |
Acronis Cyber Protect 17 |
2026-10-28T10:11:49.731Z | 2026-10-29T10:45:43.972Z |
| cve-2026-103780 | 9.8 (v3.1) | Dell PowerProtect Data Domain, Feature Release ve… |
Dell |
PowerProtect Data Domain |
2026-10-28T10:14:39.716Z | 2026-10-29T10:45:43.826Z |
| cve-2026-103792 | 9.6 (v3.1) | Dell PowerProtect Data Domain Management Center, … |
Dell |
PowerProtect Data Domain Management Center |
2026-10-28T10:26:41.330Z | 2026-10-29T10:45:43.691Z |
| cve-2026-81472 | 4.2 (v3.1) | Dell iDRAC Service Module (iSM) for Windows, Dell… |
Dell |
iDRAC Service Module for Windows |
2026-10-28T11:55:34.088Z | 2026-10-29T10:45:43.551Z |
| cve-2026-109516 | Bot for Telegram on WooCommerce <= 1.3.0 - Unauthentic… |
guruteam |
Bot for Telegram on WooCommerce |
2026-10-29T03:39:13.121Z | 2026-10-29T10:45:43.403Z | |
| cve-2026-96741 | DSGVO All in one for WP <= 5.0 - Unauthenticated Store… |
mlfactory |
DSGVO All in one for WP |
2026-10-29T03:39:13.622Z | 2026-10-29T10:45:43.246Z | |
| cve-2026-96669 | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Sit… |
wpscripts |
Food Store – Online Food Delivery & Pickup |
2026-10-29T03:39:13.993Z | 2026-10-29T10:45:43.106Z | |
| cve-2026-93855 | SendPress Newsletters <= 1.26.1.20 - Unauthenticated S… |
brewlabs |
SendPress Newsletters |
2026-10-29T03:39:14.346Z | 2026-10-29T10:45:42.961Z | |
| cve-2026-93904 | Social Web Suite <= 4.1.12 - Unauthenticated SQL Injec… |
dejanmarkovic |
Social Web Suite – Social Media Auto Post, Social Media Auto Publish |
2026-10-29T03:39:14.706Z | 2026-10-29T10:45:42.823Z | |
| cve-2026-96666 | Schema App Structured Data <= 2.3.2 - Unauthenticated … |
vberkel |
Schema App Structured Data |
2026-10-29T03:39:15.064Z | 2026-10-29T10:45:42.686Z | |
| cve-2026-96228 | SSL Wireless SMS Notification <= 3.8.1 - Unauthenticat… |
sslplugins |
SSL Wireless SMS Notification |
2026-10-29T03:39:15.430Z | 2026-10-29T10:45:42.545Z | |
| cve-2026-93757 | Wild Apricot Login <= 1.0.18 - Authentication Bypass v… |
wild-apricot |
Wild Apricot Login |
2026-10-29T03:39:15.801Z | 2026-10-29T10:45:42.405Z | |
| cve-2026-93293 | Password Protected <= 2.8.4 - Authenticated (Subscribe… |
saadiqbal |
Password Protected – Protect Your Site Content With a Password |
2026-10-29T05:30:31.921Z | 2026-10-29T10:45:42.261Z | |
| cve-2026-103485 | Extensions for Leaflet Map <= 5.4 - Unauthenticated St… |
hupe13 |
Extensions for Leaflet Map |
2026-10-29T09:25:32.060Z | 2026-10-29T10:45:42.096Z | |
| cve-2026-118192 | JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL… |
beardev |
JoomSport – for Sports: Team & League, Football, Hockey & more |
2026-10-29T09:25:32.674Z | 2026-10-29T10:45:41.954Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000175 | ISUCON5 qualifier portal web application (eventapp) vulnerable to OS command injection | 2015-11-02T14:10+09:00 | 2015-11-11T15:33+09:00 |
| jvndb-2015-000176 | SonicWall TotalSecure TZ 100 Series vulnerable to denial-of-service (DoS) | 2015-11-06T12:30+09:00 | 2015-11-09T10:47+09:00 |
| jvndb-2015-000174 | Multiple TYPE-MOON games vulnerable to OS command injection | 2015-11-05T14:11+09:00 | 2015-11-09T10:39+09:00 |
| jvndb-2015-000170 | Enisys Gw fails to restrict access permissions | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000169 | Enisys Gw vulnerable to cross-site scripting | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000168 | Enisys Gw vulnerable to arbitrary file creation | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000167 | Enisys Gw vulnerable to SQL injection | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000171 | HTML::Scrubber vulnerable to cross-site scripting | 2015-10-30T15:16+09:00 | 2015-10-30T15:16+09:00 |
| jvndb-2013-004446 | Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU) | 2013-10-30T16:32+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-001665 | Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS) | 2013-10-30T16:08+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2015-000162 | AirDroid for Android vulnerable in handling of implicit intents | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000160 | Avast vulnerable to directory traversal | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000126 | eXtplorer vulnerable to cross-site request forgery | 2015-10-15T12:24+09:00 | 2015-10-19T15:55+09:00 |
| jvndb-2015-000158 | Pref Shimane CMS vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000154 | phpRechnung vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000153 | Dojo Toolkit vulnerable to cross-site scripting | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000130 | applican vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-14T16:30+09:00 |
| jvndb-2015-000149 | gollum vulnerable to file exposure | 2015-10-02T13:36+09:00 | 2015-10-08T15:26+09:00 |
| jvndb-2015-000146 | MATCHA SNS access restriction bypass vulnerability | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000145 | MATCHA SNS vulnerable to code injection | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000144 | MATCHA INVOICE vulnerable to code injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000143 | MATCHA INVOICE vulnerable to SQL injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000141 | Python for Windows may insecurely load dynamic libraries | 2015-10-01T14:11+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000147 | AjaXplorer vulnerable to directory traversal | 2015-10-01T14:11+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000139 | baserCMS vulnerable to SQL injection | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000138 | baserCMS fails to restrict access permissions | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000148 | Dotclear vulnerable to cross-site scripting | 2015-10-02T13:36+09:00 | 2015-10-06T18:02+09:00 |
| jvndb-2015-000140 | Canary Labs Trend Web Server vulnerable to buffer overflow | 2015-10-01T14:11+09:00 | 2015-10-06T18:00+09:00 |
| jvndb-2015-000136 | H2O vulnerable to directory traversal | 2015-09-17T13:36+09:00 | 2015-10-05T17:32+09:00 |
| jvndb-2015-000133 | Koritore vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0484 | Vulnérabilité dans les produits HPE Aruba Networking | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0483 | Vulnérabilité dans Mozilla VPN | 2025-06-10T00:00:00.000000 | 2025-06-10T00:00:00.000000 |
| certfr-2025-avi-0482 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0481 | Multiples vulnérabilités dans les produits IBM | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0480 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-06-06T00:00:00.000000 | 2025-06-06T00:00:00.000000 |
| certfr-2025-avi-0479 | Multiples vulnérabilités dans les produits Cisco | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0478 | Vulnérabilité dans Wireshark | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0477 | Multiples vulnérabilités dans les produits VMware | 2025-06-05T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0468 | Vulnérabilité dans Roundcube | 2025-06-02T00:00:00.000000 | 2025-06-05T00:00:00.000000 |
| certfr-2025-avi-0476 | Vulnérabilité dans cURL | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |
| certfr-2025-avi-0475 | Multiples vulnérabilités dans Python | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |
| certfr-2025-avi-0474 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-04T00:00:00.000000 | 2025-06-04T00:00:00.000000 |
| certfr-2025-avi-0473 | Multiples vulnérabilités dans les produits Splunk | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0472 | Multiples vulnérabilités dans Google Android | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0471 | Multiples vulnérabilités dans Google Chrome | 2025-06-03T00:00:00.000000 | 2025-06-03T00:00:00.000000 |
| certfr-2025-avi-0470 | Vulnérabilité dans les produits Moxa | 2025-06-02T00:00:00.000000 | 2025-06-02T00:00:00.000000 |
| certfr-2025-avi-0469 | Vulnérabilité dans les produits Synology | 2025-06-02T00:00:00.000000 | 2025-06-02T00:00:00.000000 |
| certfr-2025-avi-0467 | Multiples vulnérabilités dans IBM Db2 | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0466 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0465 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0464 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0463 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0462 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0461 | Vulnérabilité dans Apache Tomcat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0460 | Vulnérabilité dans Spring Cloud Gateway Server | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0459 | Multiples vulnérabilités dans ISC Kea DHCP | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0401 | Multiples vulnérabilités dans Juniper Networks Secure Analytics | 2025-05-14T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0458 | Multiples vulnérabilités dans Curl | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0457 | Vulnérabilité dans Traefik | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0456 | Multiples vulnérabilités dans Citrix et Xen | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |