Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-114610 | fpdf2: Exponential SVG '<use>' expansion causes CPU an… |
py-pdf |
fpdf2 |
2026-10-22T17:21:11.788Z | 2026-10-29T02:22:14.998Z | |
| cve-2026-114609 | fpdf2 implicitly loads external URLs and local image p… |
py-pdf |
fpdf2 |
2026-10-22T17:18:22.802Z | 2026-10-29T02:19:57.646Z | |
| cve-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use |
rthalley |
dnspython |
2026-10-22T16:25:32.509Z | 2026-10-29T02:19:02.339Z | |
| cve-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in … |
open-telemetry |
opentelemetry-python |
2026-10-22T15:29:25.108Z | 2026-10-29T02:17:42.817Z | |
| cve-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write… |
rsyslog |
rsyslog |
2026-10-22T13:32:56.695Z | 2026-10-29T02:15:30.165Z | |
| cve-2026-115248 | subhajitkhan online-clinic-management-system Booking p… |
subhajitkhan |
online-clinic-management-system |
2026-10-22T13:30:10.769Z | 2026-10-29T02:14:19.530Z | |
| cve-2026-115400 | 6.7 (v4.0) 4.4 (v3.1) | crawlseo before 0.2.5 Cleartext Storage of Google OAut… |
crawlseo |
crawlseo |
2026-10-22T13:23:38.856Z | 2026-10-29T02:13:18.485Z |
| cve-2026-115331 | 8.7 (v4.0) 8.8 (v3.1) | Lotus through 0.10.2 SQL Injection via Metric Property… |
uselotus |
lotus |
2026-10-22T10:57:48.115Z | 2026-10-29T02:11:42.284Z |
| cve-2026-115327 | 6 (v4.0) 5.3 (v3.1) | libyang through 6.4.13 Uninitialized Pointer Free in N… |
CESNET |
libyang |
2026-10-22T10:57:45.264Z | 2026-10-29T02:10:37.665Z |
| cve-2026-115323 | 6.9 (v4.0) 7.3 (v3.1) | EverShop 1.2.2 before 2.2.1 Missing Authorization via … |
evershopcommerce |
evershop |
2026-10-22T10:57:42.424Z | 2026-10-29T02:08:25.891Z |
| cve-2026-114665 | 7.1 (v4.0) 6.5 (v3.1) | Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrar… |
zhenorzz |
goploy |
2026-10-22T10:57:39.553Z | 2026-10-29T02:07:01.607Z |
| cve-2021-48016 | 9.3 (v4.0) 9.8 (v3.1) | DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php |
DedeCMS |
DedeCMS |
2026-10-22T10:57:31.176Z | 2026-10-29T02:06:05.908Z |
| cve-2024-58393 | 8.8 (v4.0) 8.2 (v3.1) | i-Netsolution Readymade Unilevel Ecommerce MLM SQL Inj… |
i-Netsolution |
Readymade Unilevel Ecommerce MLM |
2026-10-22T10:57:36.699Z | 2026-10-29T02:05:25.721Z |
| cve-2022-51023 | 8.8 (v4.0) 8.2 (v3.1) | PHPOK < 5.4.081 SQL Injection via api.php sort Parameter |
PHPOK |
PHPOK |
2026-10-22T10:57:33.897Z | 2026-10-29T02:04:37.497Z |
| cve-2025-14260 | 8.3 (v3.1) | Server Side Request Forgery in Multiple WSO2 Products … |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:32.066Z | 2026-10-29T02:02:14.426Z |
| cve-2026-11854 | 6.1 (v3.1) | Cross-Site Scripting via Authentication Endpoint Error… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:33.216Z | 2026-10-29T02:02:14.279Z |
| cve-2026-3583 | 3.1 (v3.1) | Improper Token Revocation via OAuth2 Scope Enforcement… |
WSO2 |
WSO2 API Manager |
2026-10-28T19:21:34.577Z | 2026-10-29T02:02:14.134Z |
| cve-2026-6647 | 7.4 (v3.1) | Incomplete OAuth Token Revocation via Case Mismatch in… |
WSO2 |
WSO2 Identity Server |
2026-10-28T19:21:35.702Z | 2026-10-29T02:02:13.994Z |
| cve-2026-78674 | 8.8 (v3.1) | Remote Code Execution via BPMN System REST APIs in Mul… |
WSO2 |
Enterprise Integrator (BPS profile) |
2026-10-28T19:21:38.203Z | 2026-10-29T02:02:13.846Z |
| cve-2026-16889 | 4.8 (v4.0) | Stored XSS via Pre-Login Notice Image Upload Serves At… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:32:09.466Z | 2026-10-29T02:02:13.700Z |
| cve-2026-66088 | 9.4 (v4.0) | Unrestricted Command Execution via system.execute |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:35:46.415Z | 2026-10-29T02:02:13.562Z |
| cve-2026-118426 | 5.3 (v4.0) | In affected versions of Octopus Server with the L… |
Octopus Deploy |
Octopus Server |
2026-10-29T02:02:13.443Z | 2026-10-29T02:02:13.443Z |
| cve-2026-66089 | 6.1 (v4.0) | XML External Entity (XXE) Vulnerability in SOAP Interf… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:36:30.145Z | 2026-10-29T02:02:13.415Z |
| cve-2026-66090 | 7.1 (v4.0) | XML External Entity (XXE) Injection in Metadata Field … |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:37:37.928Z | 2026-10-29T02:02:13.278Z |
| cve-2026-66091 | 6.9 (v4.0) | Unauthenticated IDOR Enables Disclosure of Other Users… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:38:24.876Z | 2026-10-29T02:02:13.127Z |
| cve-2026-66092 | 4.8 (v4.0) | Stored XSS in pre-login notice via reachable legacy lo… |
Apereo Foundation |
openEQUELLA |
2026-10-29T01:39:28.582Z | 2026-10-29T02:02:12.981Z |
| cve-2026-113387 | 8.6 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:40:39.020Z | 2026-10-29T02:02:12.845Z |
| cve-2026-114173 | 5.3 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:42:02.291Z | 2026-10-29T02:02:12.706Z |
| cve-2026-113409 | 4.8 (v3.1) | The Ortto plugin for WordPress before 1.0.25 did … |
canva |
ortto |
2026-10-29T01:43:11.787Z | 2026-10-29T02:02:12.553Z |
| cve-2025-65200 | N/A | An issue was discovered in localstack 4.9.2 allow… |
n/a |
n/a |
2026-10-22T00:00:00.000Z | 2026-10-29T01:56:35.051Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000020 | AL-Mail32 vulnerable to directory traversal | 2015-02-20T14:37+09:00 | 2015-02-24T16:38+09:00 |
| jvndb-2015-000021 | AL-Mail32 vulnerable to denial-of-service (DoS) | 2015-02-20T14:54+09:00 | 2015-02-24T16:37+09:00 |
| jvndb-2015-000022 | AL-Mail32 vulnerable to buffer overflow | 2015-02-20T14:55+09:00 | 2015-02-24T16:36+09:00 |
| jvndb-2015-000010 | Fumy News Clipper vulnerable to cross-site scripting | 2015-01-30T13:52+09:00 | 2015-02-16T15:55+09:00 |
| jvndb-2015-000007 | Arbitrary files may be overwritten in multiple VMware products | 2015-01-29T13:52+09:00 | 2015-02-16T15:34+09:00 |
| jvndb-2015-000006 | SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal | 2015-01-19T13:54+09:00 | 2015-02-13T15:09+09:00 |
| jvndb-2015-000014 | PerlTreeBBS vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| jvndb-2015-000013 | shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| jvndb-2015-000008 | shiromuku(bu2)BBS vulnerable to arbitrary file creation | 2015-01-23T14:22+09:00 | 2015-02-13T09:51+09:00 |
| jvndb-2015-000001 | Cybozu Remote Service Manager vulnerable to denial-of-service (DoS) | 2015-01-30T14:19+09:00 | 2015-01-30T14:19+09:00 |
| jvndb-2014-000132 | Multiple Allied Telesis products vulnerable to buffer overflow | 2014-12-18T14:47+09:00 | 2015-01-28T17:38+09:00 |
| jvndb-2014-000056 | TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation | 2014-06-17T15:01+09:00 | 2015-01-22T15:50+09:00 |
| jvndb-2014-000095 | Shutter vulnerable to SQL injection | 2014-08-15T13:24+09:00 | 2015-01-15T17:47+09:00 |
| jvndb-2014-000124 | TSUTAYA App for Android vulnerable to arbitrary Java method execution | 2014-12-18T13:41+09:00 | 2014-12-22T17:52+09:00 |
| jvndb-2014-000152 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:49+09:00 | 2014-12-22T17:33+09:00 |
| jvndb-2014-000151 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:48+09:00 | 2014-12-22T17:30+09:00 |
| jvndb-2014-000143 | "File Upload BBS" of i-HTTPD vulnerable to remote command execution | 2014-12-09T14:40+09:00 | 2014-12-16T17:10+09:00 |
| jvndb-2014-000144 | i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:41+09:00 | 2014-12-16T17:09+09:00 |
| jvndb-2014-000134 | BSD Operating Systems vulnerable to denial-of-service (DoS) | 2014-11-21T14:10+09:00 | 2014-12-16T17:08+09:00 |
| jvndb-2014-000150 | LinPHA vulnerable to cross-site scripting | 2014-12-12T13:48+09:00 | 2014-12-16T17:07+09:00 |
| jvndb-2014-000145 | "Omake BBS" of i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:44+09:00 | 2014-12-15T19:16+09:00 |
| jvndb-2014-000149 | Chyrp vulnerable to cross-site scripting | 2014-12-10T14:18+09:00 | 2014-12-15T18:06+09:00 |
| jvndb-2014-000141 | FAST/TOOLS vulnerable to improper restriction of XML external entity references | 2014-11-28T14:54+09:00 | 2014-12-10T10:16+09:00 |
| jvndb-2014-000137 | Multiple improper data validation vulnerabilities in Syslink driver for Texas Instruments OMAP mobile processors | 2014-12-02T13:56+09:00 | 2014-12-09T15:34+09:00 |
| jvndb-2014-000138 | OS command injection vulnerability in multiple FUJITSU Android devices | 2014-12-02T14:21+09:00 | 2014-12-09T15:33+09:00 |
| jvndb-2014-000135 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:18+09:00 | 2014-12-09T15:32+09:00 |
| jvndb-2014-000136 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:24+09:00 | 2014-12-09T15:31+09:00 |
| jvndb-2014-000146 | i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:45+09:00 | 2014-12-09T14:45+09:00 |
| jvndb-2014-000140 | LG Electronics mobile access routers lack access restrictions | 2014-12-02T14:27+09:00 | 2014-12-08T16:07+09:00 |
| jvndb-2014-000139 | ARROWS Me F-11D vulnerability where arbitrary areas may be accessed | 2014-12-02T14:26+09:00 | 2014-12-08T16:06+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0332 | Vulnérabilité dans Liferay | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0331 | Multiples vulnérabilités dans Microsoft Edge | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0330 | Vulnérabilité dans les produits Moxa | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0329 | Multiples vulnérabilités dans Tenable Nessus | 2025-04-18T00:00:00.000000 | 2025-04-18T00:00:00.000000 |
| certfr-2025-avi-0328 | Multiples vulnérabilités dans Tenable Security Center | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0327 | Vulnérabilité dans SonicWall Connect Tunnel | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0326 | Vulnérabilité dans Cisco Webex App | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0325 | Multiples vulnérabilités dans les produits Apple | 2025-04-17T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0220 | Vulnérabilité dans Mattermost Server | 2025-03-19T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0217 | Multiples vulnérabilités dans Mattermost Server | 2025-03-18T00:00:00.000000 | 2025-04-17T00:00:00.000000 |
| certfr-2025-avi-0324 | Vulnérabilité dans Oracle Weblogic | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0323 | Multiples vulnérabilités dans Oracle Virtualization | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0322 | Multiples vulnérabilités dans Oracle Systems | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0321 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0320 | Multiples vulnérabilités dans Oracle MySQL | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0319 | Multiples vulnérabilités dans Oracle Java SE | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0318 | Multiples vulnérabilités dans Oracle Database Server | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0317 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0316 | Multiples vulnérabilités dans les produits Atlassian | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0315 | Multiples vulnérabilités dans Google Chrome | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0314 | Vulnérabilité dans les produits Microsoft | 2025-04-16T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0312 | Multiples vulnérabilités dans les produits Mattermost | 2025-04-15T00:00:00.000000 | 2025-04-16T00:00:00.000000 |
| certfr-2025-avi-0313 | Vulnérabilité dans SolarWinds Serv-U | 2025-04-15T00:00:00.000000 | 2025-04-15T00:00:00.000000 |
| certfr-2025-avi-0311 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0310 | Vulnérabilité dans Microsoft Edge | 2025-04-14T00:00:00.000000 | 2025-04-14T00:00:00.000000 |
| certfr-2025-avi-0309 | Multiples vulnérabilités dans les produits IBM | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0308 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0307 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0306 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0305 | Multiples vulnérabilités dans Google Pixel | 2025-04-11T00:00:00.000000 | 2025-04-11T00:00:00.000000 |