Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118371 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.152Z | 2026-10-28T02:03:20.152Z |
| cve-2026-118370 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 Integer Overflow in storeAtts v… |
libexpat |
libexpat |
2026-10-28T02:03:19.447Z | 2026-10-28T02:03:19.447Z |
| cve-2026-117610 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 NULL Pointer Dereference via Ex… |
libexpat |
libexpat |
2026-10-28T02:03:18.766Z | 2026-10-28T02:03:18.766Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-117608 | 6.9 (v4.0) 6.1 (v3.1) | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 I… |
assimp |
assimp |
2026-10-28T02:03:17.365Z | 2026-10-28T02:03:17.365Z |
| cve-2026-117607 | 8.6 (v4.0) 7.2 (v3.1) | Xerte Online Toolkits through 3.15.5 RCE via Language … |
thexerteproject |
xerteonlinetoolkits |
2026-10-28T02:03:16.664Z | 2026-10-28T02:03:16.664Z |
| cve-2026-117606 | 5.3 (v4.0) 5.4 (v3.1) | NexoPOS through 6.3.0 Missing Authorization via Cash R… |
Blair2004 |
NexoPOS |
2026-10-28T02:03:15.947Z | 2026-10-28T02:03:15.947Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2015-20129 | 8.6 (v4.0) 8.8 (v3.1) | CrushFTP before 7.3.0 Cross-Site Request Forgery via /… |
CrushFTP |
CrushFTP |
2026-10-28T02:03:14.501Z | 2026-10-28T02:03:14.501Z |
| cve-2014-125138 | 8.7 (v4.0) 8.8 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.805Z | 2026-10-28T02:03:13.805Z |
| cve-2014-125137 | 7.1 (v4.0) 6.5 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.087Z | 2026-10-28T02:03:13.087Z |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| cve-2013-20009 | 4.8 (v4.0) 4.8 (v3.1) | Linksys WAG200G through 1.01.06 Stored XSS via policy_… |
Linksys |
WAG200G |
2026-10-28T02:03:11.721Z | 2026-10-28T02:03:11.721Z |
| cve-2013-20008 | 7 (v4.0) 6.8 (v3.1) | Linksys WAG200G through 1.01.06 Admin Password Change … |
Linksys |
WAG200G |
2026-10-28T02:03:11.024Z | 2026-10-28T02:03:11.024Z |
| cve-2013-20007 | 8.6 (v4.0) 7.2 (v3.1) | Linksys WAG200G through 1.01.06 OS Command Injection v… |
Linksys |
WAG200G |
2026-10-28T02:03:10.353Z | 2026-10-28T02:03:10.353Z |
| cve-2026-118272 | a2ui-project a2ui Error data-context.ts DataContext.di… |
a2ui-project |
a2ui |
2026-10-28T02:00:21.447Z | 2026-10-28T16:12:32.352Z | |
| cve-2026-106013 | Jupiter X Core <= 4.61.0 - Unauthenticated Authenticat… |
artbees |
Jupiter X Core |
2026-10-28T01:30:48.320Z | 2026-10-29T01:52:00.079Z | |
| cve-2026-118271 | a2ui-project a2ui data-context Resolver data-context.t… |
a2ui-project |
a2ui |
2026-10-28T01:30:47.285Z | 2026-10-28T01:30:47.285Z | |
| cve-2026-110879 | 9.8 (v3.1) | jackson-databind: PolymorphicTypeValidator bypass via … |
FasterXML |
jackson-databind |
2026-10-28T00:07:41.577Z | 2026-10-28T00:07:41.577Z |
| cve-2026-110747 | 7.5 (v3.1) | jackson-dataformat-protobuf: integer overflow in Proto… |
FasterXML |
jackson-dataformat-protobuf |
2026-10-28T00:02:32.462Z | 2026-10-28T00:02:32.462Z |
| cve-2026-104895 | 7.5 (v3.1) | jackson-dataformat-smile: unbounded eager byte[] alloc… |
FasterXML |
jackson-dataformat-smile |
2026-10-28T00:01:44.496Z | 2026-10-28T00:01:44.496Z |
| cve-2026-106972 | N/A | Uncontrolled recursion in MessagePack\BufferUnpac… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-30T17:14:25.522Z |
| cve-2026-106971 | N/A | An integer overflow in the MessagePack\BufferUnpa… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-29T17:10:24.531Z |
| cve-2026-104016 | 7.5 (v3.1) | jackson-dataformat-protobuf: signed integer overflow i… |
FasterXML |
jackson-dataformat-protobuf |
2026-10-27T23:52:20.141Z | 2026-10-27T23:52:20.141Z |
| cve-2026-118129 | jeremyckahn Chitchatter PostMessage Bootstrap.tsx isCo… |
jeremyckahn |
Chitchatter |
2026-10-27T23:15:19.571Z | 2026-10-27T23:15:19.571Z | |
| cve-2026-118338 | N/A | Use after free in Animation in Google Chrome prio… |
Google |
Chrome |
2026-10-27T23:03:21.158Z | 2026-10-29T03:55:38.791Z |
| cve-2026-118312 | N/A | Memory corruption in Paint in Google Chrome prior… |
Google |
Chrome |
2026-10-27T23:03:20.918Z | 2026-10-28T17:37:51.486Z |
| cve-2026-118319 | N/A | Memory corruption in Skia in Google Chrome prior … |
Google |
Chrome |
2026-10-27T23:03:20.699Z | 2026-10-29T14:14:27.973Z |
| cve-2026-118309 | N/A | Improper input validation in UI in Google Chrome … |
Google |
Chrome |
2026-10-27T23:03:20.473Z | 2026-10-28T17:37:51.623Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000104 | Research Artisan Lite vulnerable to cross-site scripting | 2015-07-24T14:36+09:00 | 2015-07-28T17:29+09:00 |
| jvndb-2015-000103 | Welcart vulnerable to cross-site scripting | 2015-07-24T14:33+09:00 | 2015-07-28T17:51+09:00 |
| jvndb-2015-000101 | PHP for Windows vulnerable to OS command injection | 2015-07-17T14:44+09:00 | 2016-05-19T17:43+09:00 |
| jvndb-2015-000099 | Thetis vulnerable to SQL injection | 2015-07-15T15:54+09:00 | 2015-07-27T15:07+09:00 |
| jvndb-2015-000098 | acmailer vulnerable to directory traversal | 2015-07-15T15:53+09:00 | 2015-07-27T15:12+09:00 |
| jvndb-2015-000095 | LINE@ vulnerable to script injection | 2015-07-10T14:50+09:00 | 2024-05-09T18:05+09:00 |
| jvndb-2015-000097 | Simple Oekaki BBS vulnerability where arbitrary files may be deleted | 2015-07-10T13:57+09:00 | 2015-07-14T18:11+09:00 |
| jvndb-2015-000096 | Simple Oekaki BBS vulnerable to cross-site scripting | 2015-07-10T13:57+09:00 | 2015-07-14T18:09+09:00 |
| jvndb-2015-000094 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-14T18:03+09:00 |
| jvndb-2014-002239 | Cacti vulnerable to cross-site request forgery | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2009-003901 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2015-000093 | Explorer+ File Manager vulnerable to directory traversal | 2015-06-30T13:56+09:00 | 2015-07-02T15:04+09:00 |
| jvndb-2015-000092 | OpenEMR vulnerable to authentication bypass | 2015-06-30T13:55+09:00 | 2015-07-14T17:16+09:00 |
| jvndb-2015-000091 | osCommerce Japanese version vulnerable to directory traversal | 2015-06-25T15:53+09:00 | 2015-06-30T11:53+09:00 |
| jvndb-2015-000090 | namshi/jose fails to verify token signatures | 2015-06-25T15:00+09:00 | 2015-07-14T17:18+09:00 |
| jvndb-2015-000089 | Symfony vulnerable to code injection | 2015-06-23T12:29+09:00 | 2015-06-25T17:34+09:00 |
| jvndb-2015-000088 | Ruby on Rails library Paperclip vulnerable to cross-site scripting | 2015-06-18T14:14+09:00 | 2015-07-14T18:15+09:00 |
| jvndb-2015-000077 | MilkyStep fails to restrict access permissions | 2015-06-12T14:13+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000087 | BloBee vulnerable to arbitrary file creation | 2015-06-12T14:12+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000086 | LoadLibrary function in Microsoft Windows fails to validate input properly | 2015-06-12T14:11+09:00 | 2015-06-12T14:11+09:00 |
| jvndb-2015-000083 | MilkyStep fails to restrict access permissions | 2015-06-09T14:16+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000082 | MilkyStep vulnerable to cross-site scripting | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000081 | MilkyStep vulnerable to SQL injection | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000080 | MilkyStep vulnerable to OS command injection | 2015-06-09T14:02+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000079 | MilkyStep vulnerable to cross-site request forgery | 2015-06-09T13:45+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000078 | MilkyStep fails to restrict access permissions | 2015-06-09T13:43+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000085 | Multiple Buffalo wireless LAN routers vulnerable to OS command injection | 2015-06-05T14:16+09:00 | 2015-06-10T17:54+09:00 |
| jvndb-2015-000076 | NetFlow Analyzer vulnerable to cross-site request forgery | 2015-06-05T14:14+09:00 | 2015-06-10T16:14+09:00 |
| jvndb-2015-000075 | NetFlow Analyzer fails to restrict access permissions | 2015-06-05T14:02+09:00 | 2015-06-10T16:10+09:00 |
| jvndb-2015-000074 | NetFlow Analyzer vulnerable to cross-site scripting | 2015-06-05T13:59+09:00 | 2015-06-10T16:06+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0444 | Vulnérabilité dans OpenSSL | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0443 | Vulnérabilité dans VMware Avi Load Balancer | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0442 | Vulnérabilité dans Mozilla Firefox pour iOS | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0441 | Vulnérabilité dans Mattermost Server | 2025-05-22T00:00:00.000000 | 2025-08-19T00:00:00.000000 |
| certfr-2025-avi-0440 | Vulnérabilité dans Grafana | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0439 | Multiples vulnérabilités dans Google Chrome | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0438 | Multiples vulnérabilités dans les produits Cisco | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0437 | Multiples vulnérabilités dans GitLab | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0436 | Vulnérabilité dans ISC BIND | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0435 | Multiples vulnérabilités dans les produits Atlassian | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0434 | Multiples vulnérabilités dans Node.js | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0433 | Multiples vulnérabilités dans Adobe ColdFusion | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0432 | Vulnérabilité dans Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0431 | Vulnérabilité dans Mitel OpenScapeXpressions | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0430 | Multiples vulnérabilités dans les produits VMware | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0429 | Multiples vulnérabilités dans Typo3 | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0428 | Multiples vulnérabilités dans VMware Cloud Foundation | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0427 | Vulnérabilité dans Spring Security | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0426 | Vulnérabilité dans Juniper Networks Junos OS | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0425 | Vulnérabilité dans les produits Synology | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0424 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0423 | Multiples vulnérabilités dans les produits Netgate | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0422 | Multiples vulnérabilités dans IBM QRadar SIEM | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0421 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0420 | Multiples vulnérabilités dans les produits Nextcloud | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0419 | Vulnérabilité dans Microsoft Defender pour Endpoint | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0418 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0417 | Vulnérabilité dans Spring Framework | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0416 | Vulnérabilité dans Synacor Zimbra Collaboration | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |
| certfr-2025-avi-0415 | Vulnérabilité dans Python | 2025-05-16T00:00:00.000000 | 2025-05-16T00:00:00.000000 |