Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103875 | Media Library Assistant <= 3.42 - Reflected Cross-Site… |
dglingren |
Media Library Assistant |
2026-10-29T09:25:33.216Z | 2026-10-29T10:45:41.805Z | |
| cve-2026-110707 | RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated S… |
themeisle |
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator |
2026-10-29T09:25:33.811Z | 2026-10-29T10:45:41.659Z | |
| cve-2026-107629 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Base… |
wpsoul |
Greenshift – animation and page builder blocks |
2026-10-29T09:25:34.184Z | 2026-10-29T10:45:41.516Z | |
| cve-2026-107627 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Base… |
wpsoul |
Greenshift – animation and page builder blocks |
2026-10-29T09:25:34.542Z | 2026-10-29T10:45:41.367Z | |
| cve-2026-91152 | Everest Forms <= 3.6.2 - Reflected Cross-Site Scriptin… |
wpeverest |
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI |
2026-10-29T09:25:34.908Z | 2026-10-29T10:45:41.225Z | |
| cve-2026-109215 | LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+)… |
litespeedtech |
LiteSpeed Cache |
2026-10-29T09:25:35.290Z | 2026-10-29T10:45:41.071Z | |
| cve-2026-104727 | Sequential Order Numbers for WooCommerce <= 3.6.5 - Au… |
berocket |
Sequential Order Numbers for WooCommerce |
2026-10-29T09:25:35.676Z | 2026-10-29T10:45:40.925Z | |
| cve-2026-116763 | LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cros… |
litespeedtech |
LiteSpeed Cache |
2026-10-29T09:25:36.034Z | 2026-10-29T10:45:40.785Z | |
| cve-2026-91153 | Everest Forms <= 3.6.2 - Unauthenticated Sensitive Inf… |
wpeverest |
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI |
2026-10-29T09:25:36.385Z | 2026-10-29T10:45:40.641Z | |
| cve-2026-111422 | Apache Airflow SSH provider: SSHRemoteJobOperator: `en… |
Apache Software Foundation |
Apache Airflow SSH provider |
2026-10-26T23:29:30.363Z | 2026-10-29T10:38:09.290Z | |
| cve-2026-107743 | Mapster WP Maps <= 2.0.5 - Unauthenticated Stored Cros… |
mapster |
Mapster WP Maps |
2026-10-29T09:25:36.733Z | 2026-10-29T10:35:36.566Z | |
| cve-2026-111318 | HT Mega Addons for Elementor <= 3.2.7 - Unauthenticate… |
devitemsllc |
HT Mega Addons for Elementor – Elementor Widgets & Template Builder |
2026-10-29T09:25:37.098Z | 2026-10-29T10:35:36.425Z | |
| cve-2026-105192 | 9.8 (v3.1) | LMCache Unauthenticated RCE in multiprocess mode via p… |
LMCache |
LMCache |
2026-10-07T09:40:11.449Z | 2026-10-29T10:24:45.984Z |
| cve-2026-73581 | Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementat… |
Apache Software Foundation |
Apache Tomcat |
2026-09-23T11:08:53.212Z | 2026-10-29T10:01:34.970Z | |
| cve-2026-37982 | 6.8 (v3.1) | Keycloak: org.keycloak.authentication: keycloak: unaut… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-05-19T10:52:32.486Z | 2026-10-29T09:29:09.736Z |
| cve-2026-37979 | 6.5 (v3.1) | Keycloak: keycloak: information disclosure via oidc to… |
Red Hat |
Red Hat build of Keycloak 26.4 |
2026-05-19T10:52:30.442Z | 2026-10-29T09:29:05.708Z |
| cve-2026-114236 | 3.3 (v3.1) | Podman: goroutine/file-descriptor leak in storage/pkg/… |
Red Hat |
Confidential Compute Attestation |
2026-10-21T08:04:32.529Z | 2026-10-29T08:42:24.114Z |
| cve-2025-49794 | 9.1 (v3.1) | Libxml: heap use after free (uaf) leads to denial of s… |
|
|
2025-06-16T15:24:31.020Z | 2026-10-29T08:18:53.384Z |
| cve-2023-6270 | 7 (v3.1) | Kernel: aoe: improper reference count leads to use-aft… |
Red Hat |
Red Hat Enterprise Linux 6 |
2024-01-04T17:01:51.165Z | 2026-10-29T08:13:42.280Z |
| cve-2023-3397 | 7 (v3.1) | Kernel: slab-use-after-free write in txend due to race… |
Red Hat |
Red Hat Enterprise Linux 6 |
2023-11-01T19:05:39.080Z | 2026-10-29T08:13:40.877Z |
| cve-2026-117174 | N/A | {'providerMetadata': {'orgId': 'db201096-a0cc-46c7-9a55-61d9e221bf01', 'shortName': 'synology', 'dateUpdated': '2026-10-29T08:01:21.518Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'VUL-2026-008368 為先回報之相同問題'}]} | N/A | N/A | 2026-10-29T08:01:21.518Z | |
| cve-2026-39991 | 4.8 (v4.0) | Stored Cross-Site Scripting (XSS) in Note Station file… |
QNAP Systems Inc. |
Notes Station 3 |
2026-10-15T09:37:51.830Z | 2026-10-29T07:41:10.166Z |
| cve-2024-0340 | 4.4 (v3.1) | Kernel: information disclosure in vhost/vhost.c:vhost_… |
|
|
2024-01-09T17:36:11.578Z | 2026-10-29T07:23:10.649Z |
| cve-2026-32557 | 9.3 (v3.1) | WordPress WooCommerce Appointments plugin <= 5.3.2 - S… |
BookingWP |
WooCommerce Appointments |
2026-10-06T08:33:58.564Z | 2026-10-29T07:21:07.586Z |
| cve-2026-97324 | YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment … |
YunaiV |
ruoyi-vue-pro |
2026-09-24T19:15:12.105Z | 2026-10-29T06:57:47.676Z | |
| cve-2024-3056 | 7.7 (v3.1) | Podman: kernel: containers in shared ipc namespace are… |
|
|
2024-08-02T20:37:59.053Z | 2026-10-29T06:31:41.169Z |
| cve-2026-97320 | YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnow… |
YunaiV |
ruoyi-vue-pro |
2026-09-24T18:15:08.463Z | 2026-10-29T06:31:30.524Z | |
| cve-2024-3727 | 8.3 (v3.1) | Containers/image: digest type does not guarantee valid type |
|
|
2024-05-09T14:57:21.327Z | 2026-10-29T06:24:37.072Z |
| cve-2026-117859 | 5.4 (v3.1) | Keycloak-services: keycloak-services: par single-use b… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-29T06:22:11.710Z | 2026-10-29T06:22:11.710Z |
| cve-2026-117688 | 5.3 (v3.1) | Keycloak-services: keycloak-services: vault secret dis… |
Red Hat |
Red Hat Build of Keycloak |
2026-10-29T06:22:06.480Z | 2026-10-29T06:22:06.480Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000132 | MEGAPHONE MUSIC vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000134 | Reversi vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:18+09:00 |
| jvndb-2015-000135 | Photon vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:15+09:00 |
| jvndb-2015-000131 | Auction Camera vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-09-16T16:58+09:00 |
| jvndb-2015-000129 | PIXMA MG7500 Series vulnerable to cross-site request forgery | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000116 | Japan Connected-free Wi-Fi vulnerable to script injection | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000302 | hitSuji (rktSNS2) vulnetable to cross-site scripting | 2015-09-03T14:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000301 | BBS X102 vulnerable to cross-site scripting | 2015-09-03T15:00+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000128 | OpenDocMan vulnerable to cross-site scripting | 2015-09-04T18:13+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000127 | ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow | 2015-09-07T13:38+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000123 | NScripter vulnerable to buffer overflow | 2015-09-02T15:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000122 | desknet's NEO vulnerable to directory traversal | 2015-09-01T12:36+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000121 | Twit BBS vulnerable to cross-site scripting | 2015-09-01T14:18+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000119 | File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | 2015-08-27T15:03+09:00 | 2015-09-02T17:57+09:00 |
| jvndb-2015-000117 | Multiple I-O DATA LAN routers vulnerable in UPnP functionality | 2015-08-18T15:21+09:00 | 2015-08-28T17:29+09:00 |
| jvndb-2015-000118 | Apache Tapestry deserializes untrusted data | 2015-08-20T15:53+09:00 | 2015-08-26T17:51+09:00 |
| jvndb-2015-000113 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting | 2015-08-12T15:13+09:00 | 2015-08-26T17:38+09:00 |
| jvndb-2015-000114 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery | 2015-08-12T15:13+09:00 | 2015-08-26T17:28+09:00 |
| jvndb-2015-000009 | NP-BBRM vulnerable in UPnP functionality | 2015-01-26T13:42+09:00 | 2015-08-18T14:36+09:00 |
| jvndb-2015-000112 | Microsoft Office discloses a file path of a local file | 2015-08-12T15:13+09:00 | 2015-08-12T15:13+09:00 |
| jvndb-2013-003469 | Apache Struts vulnerable to remote command execution | 2013-09-06T14:12+09:00 | 2015-08-11T15:19+09:00 |
| jvndb-2015-000110 | Yodobashi App for Android vulnerable to arbitrary Java method execution | 2015-08-07T13:50+09:00 | 2015-08-11T12:22+09:00 |
| jvndb-2014-000107 | SLFileManager for Android vulnerable to directory traversal | 2014-09-25T14:52+09:00 | 2015-07-31T16:30+09:00 |
| jvndb-2015-000109 | yoyaku_v41 vulnerable to OS command injection | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000108 | yoyaku_v41 vulnerable to authentication bypass | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000107 | yoyaku_v41 vulnerable to arbitrary file creation | 2015-07-29T14:58+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000106 | Gazou BBS plus vulnerability in file upload processing | 2015-07-28T13:47+09:00 | 2015-07-30T15:14+09:00 |
| jvndb-2015-000103 | Welcart vulnerable to cross-site scripting | 2015-07-24T14:33+09:00 | 2015-07-28T17:51+09:00 |
| jvndb-2015-000104 | Research Artisan Lite vulnerable to cross-site scripting | 2015-07-24T14:36+09:00 | 2015-07-28T17:29+09:00 |
| jvndb-2015-000105 | Research Artisan Lite does not properly perform authentication | 2015-07-24T14:46+09:00 | 2015-07-28T17:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0455 | Multiples vulnérabilités dans Google Chrome | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0454 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0452 | Multiples vulnérabilités dans les produits IBM | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0451 | Vulnérabilité dans Microsoft Edge | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0450 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0449 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0448 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0447 | Multiples vulnérabilités dans Grafana | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0446 | Multiples vulnérabilités dans Asterisk | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0445 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0444 | Vulnérabilité dans OpenSSL | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0443 | Vulnérabilité dans VMware Avi Load Balancer | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0442 | Vulnérabilité dans Mozilla Firefox pour iOS | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0440 | Vulnérabilité dans Grafana | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0439 | Multiples vulnérabilités dans Google Chrome | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0438 | Multiples vulnérabilités dans les produits Cisco | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0437 | Multiples vulnérabilités dans GitLab | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0436 | Vulnérabilité dans ISC BIND | 2025-05-22T00:00:00.000000 | 2025-05-22T00:00:00.000000 |
| certfr-2025-avi-0435 | Multiples vulnérabilités dans les produits Atlassian | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0434 | Multiples vulnérabilités dans Node.js | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0433 | Multiples vulnérabilités dans Adobe ColdFusion | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0432 | Vulnérabilité dans Schneider Electric EcoStruxure Power Build Rapsody | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0431 | Vulnérabilité dans Mitel OpenScapeXpressions | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0430 | Multiples vulnérabilités dans les produits VMware | 2025-05-21T00:00:00.000000 | 2025-05-21T00:00:00.000000 |
| certfr-2025-avi-0429 | Multiples vulnérabilités dans Typo3 | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0428 | Multiples vulnérabilités dans VMware Cloud Foundation | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0427 | Vulnérabilité dans Spring Security | 2025-05-20T00:00:00.000000 | 2025-05-20T00:00:00.000000 |
| certfr-2025-avi-0426 | Vulnérabilité dans Juniper Networks Junos OS | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0425 | Vulnérabilité dans les produits Synology | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |
| certfr-2025-avi-0424 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-19T00:00:00.000000 | 2025-05-19T00:00:00.000000 |