Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-4057 | Download Manager <= 3.3.51 - Missing Authorization to … |
codename065 |
Download Manager |
2026-04-10T01:24:58.764Z | 2026-04-13T15:15:09.337Z | |
| cve-2026-3360 | Tutor LMS <= 3.9.7 - Missing Authorization to Unauthen… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-04-10T01:24:58.426Z | 2026-04-10T17:05:46.556Z | |
| cve-2026-2712 | WP-Optimize <= 4.5.0 - Missing Authorization to Authen… |
davidanderson |
WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance |
2026-04-10T01:24:57.952Z | 2026-04-10T13:46:16.718Z | |
| cve-2026-4664 | Customer Reviews for WooCommerce <= 5.103.0 - Unauthen… |
ivole |
Customer Reviews for WooCommerce |
2026-04-10T01:24:57.433Z | 2026-04-10T12:18:36.208Z | |
| cve-2026-25203 | 7.8 (v3.1) | Samsung MagicINFO 9 Server Incorrect Default Perm… |
Samsung Electronics |
MagicINFO 9 Server |
2026-04-10T01:24:07.308Z | 2026-04-14T03:55:38.631Z |
| cve-2026-5997 | Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg o… |
Totolink |
A7100RU |
2026-04-10T01:15:16.040Z | 2026-04-10T13:47:48.462Z | |
| cve-2026-5996 | Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow o… |
Totolink |
A7100RU |
2026-04-10T01:00:18.922Z | 2026-04-14T03:16:32.811Z | |
| cve-2026-5995 | Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow… |
Totolink |
A7100RU |
2026-04-10T00:45:13.953Z | 2026-04-10T12:19:00.502Z | |
| cve-2026-5994 | Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os comma… |
Totolink |
A7100RU |
2026-04-10T00:30:13.988Z | 2026-04-10T17:06:56.098Z | |
| cve-2026-5993 | Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os co… |
Totolink |
A7100RU |
2026-04-10T00:15:14.223Z | 2026-04-14T16:33:44.412Z | |
| cve-2026-5992 | Tenda F451 P2pListFilter fromP2pListFilter stack-based… |
Tenda |
F451 |
2026-04-10T00:00:21.425Z | 2026-04-10T13:48:20.916Z | |
| cve-2026-40212 | 5.4 (v3.1) | OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 … |
OpenStack |
Skyline |
2026-04-10T00:00:00.000Z | 2026-04-10T15:32:11.199Z |
| cve-2026-40200 | An issue was discovered in musl libc 0.7.10 throu… |
musl-libc |
musl |
2026-04-10T00:00:00.000Z | 2026-04-14T14:32:24.901Z | |
| cve-2026-36236 | N/A | SourceCodester Engineers Online Portal v1.0 is vu… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:25:25.580Z |
| cve-2026-36235 | N/A | A SQL injection vulnerability was found in the sc… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:04:25.315Z |
| cve-2026-36234 | N/A | itsourcecode Online Student Enrollment System v1.… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:02:19.446Z |
| cve-2026-36233 | N/A | A SQL injection vulnerability was found in the as… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:19:38.512Z |
| cve-2026-36232 | N/A | A SQL injection vulnerability was found in the in… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:14:30.652Z |
| cve-2026-33551 | An issue was discovered in OpenStack Keystone 14 … |
OpenStack |
Keystone |
2026-04-10T00:00:00.000Z | 2026-04-10T13:50:43.389Z | |
| cve-2026-31262 | N/A | Cross Site Scripting vulnerability in Altenar Spo… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:12:27.998Z |
| cve-2026-29861 | N/A | PHP-MYSQL-User-Login-System v1.0 was discovered t… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:08:36.518Z |
| cve-2026-23782 | N/A | An issue was discovered in BMC Control-M/MFT 9.0.… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:00:37.511Z |
| cve-2026-23781 | N/A | An issue was discovered in BMC Control-M/MFT 9.0.… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:29:17.309Z |
| cve-2026-23780 | N/A | An issue was discovered in BMC Control-M/MFT 9.0.… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T13:56:44.167Z |
| cve-2025-44560 | N/A | owntone-server 2ca10d9 is vulnerable to Buffer Ov… |
n/a |
n/a |
2026-04-10T00:00:00.000Z | 2026-04-14T14:06:50.236Z |
| cve-2026-5991 | Tenda F451 WrlExtraSet formWrlExtraSet stack-based overflow |
Tenda |
F451 |
2026-04-09T23:45:14.599Z | 2026-04-14T03:15:21.622Z | |
| cve-2026-5990 | Tenda F451 SafeEmailFilter fromSafeEmailFilter stack-b… |
Tenda |
F451 |
2026-04-09T23:30:14.352Z | 2026-04-10T12:25:23.555Z | |
| cve-2026-5460 | 6.3 (v4.0) | Heap Use-After-Free in PQC Hybrid KeyShare Error Clean… |
wolfSSL |
wolfSSL |
2026-04-09T23:29:27.577Z | 2026-04-10T13:51:18.283Z |
| cve-2026-5448 | 2.3 (v4.0) | 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore |
wolfSSL |
wolfSSL |
2026-04-09T23:18:15.780Z | 2026-04-10T13:51:56.742Z |
| cve-2026-5989 | Tenda F451 RouteStatic fromRouteStatic stack-based overflow |
Tenda |
F451 |
2026-04-09T23:15:16.054Z | 2026-04-10T17:07:39.974Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000090 | D-Link DES-3810 Series vulnerable to denial-of-service (DoS) | 2013-09-20T15:12+09:00 | 2013-09-30T15:52+09:00 |
| jvndb-2013-000089 | D-Link DWL-2100AP vulnerable to denial-of-service (DoS) | 2013-09-20T15:07+09:00 | 2013-09-30T15:47+09:00 |
| jvndb-2013-000092 | SEIL Series routers vulnerable to buffer overflow | 2013-09-20T14:57+09:00 | 2013-09-30T16:46+09:00 |
| jvndb-2013-000091 | SEIL Series routers vulnerable in RADIUS authentication | 2013-09-20T14:52+09:00 | 2013-10-08T15:36+09:00 |
| jvndb-2013-000093 | Internet Explorer vulnerable to arbitrary code execution | 2013-09-19T14:39+09:00 | 2013-10-10T18:12+09:00 |
| jvndb-2013-000087 | Multiple broadband routers may behave as open resolvers | 2013-09-19T13:29+09:00 | 2014-08-28T18:10+09:00 |
| jvndb-2013-000088 | ChamaCargo vulnerable to cross-site scripting | 2013-09-13T12:21+09:00 | 2013-09-18T16:12+09:00 |
| jvndb-2013-000086 | Opera vulnerable to cross-site scripting | 2013-09-12T14:13+09:00 | 2013-09-17T14:20+09:00 |
| jvndb-2013-000082 | Cybozu Office vulnerable to cross-site scripting | 2013-09-10T13:56+09:00 | 2013-09-11T13:34+09:00 |
| jvndb-2013-003469 | Apache Struts vulnerable to remote command execution | 2013-09-06T14:12+09:00 | 2015-08-11T15:19+09:00 |
| jvndb-2013-000085 | VMware ESX and ESXi vulnerable to buffer overflow | 2013-09-06T14:03+09:00 | 2013-09-11T14:06+09:00 |
| jvndb-2013-000084 | VMware ESX and ESXi vulnerable to directory traversal | 2013-09-06T13:59+09:00 | 2013-09-11T13:59+09:00 |
| jvndb-2013-000081 | EC-CUBE vulnerable to directory traversal when used in Windows | 2013-08-30T14:38+09:00 | 2013-09-02T18:25+09:00 |
| jvndb-2013-000080 | PHP OpenID Library vulnerable to XML external entity injection | 2013-08-21T14:26+09:00 | 2013-08-23T18:38+09:00 |
| jvndb-2013-000079 | Yahoo! Japan Shopping for Android contains an issue where it fails to verify SSL server certificates | 2013-08-19T15:50+09:00 | 2013-08-23T18:42+09:00 |
| jvndb-2013-000078 | Yafuoku! contains an issue where it fails to verify SSL server certificates | 2013-08-19T15:35+09:00 | 2013-08-23T18:43+09:00 |
| jvndb-2013-000077 | Cybozu Mailwise vulnerable to information disclosure | 2013-08-13T12:22+09:00 | 2013-08-20T11:37+09:00 |
| jvndb-2013-000075 | docomo overseas usage application vulnerability in the connection process | 2013-08-07T15:01+09:00 | 2013-08-14T14:17+09:00 |
| jvndb-2013-000076 | JP1/IT Desktop Management - Manager and Hitachi IT Operations Director vulnerable to privilege escalation | 2013-07-29T13:39+09:00 | 2013-08-02T18:17+09:00 |
| jvndb-2012-002110 | WordPress vulnerable to cross-site scripting | 2013-07-26T13:33+09:00 | 2013-07-26T13:33+09:00 |
| jvndb-2013-003391 | Oracle Enterprise Manager vulnerable to cross-site scripting | 2013-07-22T15:00+09:00 | 2013-07-22T15:00+09:00 |
| jvndb-2013-000072 | JBoss RichFaces vulnerable to remote code execution | 2013-07-19T12:32+09:00 | 2013-07-24T16:16+09:00 |
| jvndb-2013-000071 | Oracle Outside In vulnerable to denial-of-service (DoS) | 2013-07-17T13:56+09:00 | 2013-08-28T14:31+09:00 |
| jvndb-2013-000070 | Oracle Outside In vulnerable to buffer overflow | 2013-07-17T13:45+09:00 | 2014-02-24T16:38+09:00 |
| jvndb-2013-000069 | Cybozu Office session management vulnerability | 2013-07-16T12:27+09:00 | 2013-07-23T19:09+09:00 |
| jvndb-2013-000068 | AQUOS PhotoPlayer HN-PP150 vulnerable to denial-of-service (DoS) | 2013-07-11T15:39+09:00 | 2013-07-16T14:21+09:00 |
| jvndb-2013-000066 | POST-MAIL vulnerable to cross-site scripting | 2013-06-27T14:38+09:00 | 2013-07-02T15:47+09:00 |
| jvndb-2013-000067 | CLIP-MAIL vulnerable to cross-site scripting | 2013-06-27T14:35+09:00 | 2013-07-02T15:52+09:00 |
| jvndb-2013-000065 | EC-CUBE vulnerable to directory traversal | 2013-06-27T14:33+09:00 | 2013-07-02T16:15+09:00 |
| jvndb-2013-000064 | EC-CUBE vulnerable to cross-site scripting | 2013-06-27T14:31+09:00 | 2013-07-02T16:10+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0468 | Multiples vulnérabilités dans PHP | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0467 | Vulnérabilité dans SolarWinds Serv-U | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0466 | Multiples vulnérabilités dans les produits Elastic | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0465 | Vulnérabilité dans MongoDB PyMongo | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0464 | Multiples vulnérabilités dans SolarWinds Platform | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0463 | Multiples vulnérabilités dans Ruby on Rails | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0462 | Vulnérabilité dans SolarWinds Platform | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0461 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0460 | Vulnérabilité dans les caméras Synology | 2024-06-03T00:00:00.000000 | 2024-06-03T00:00:00.000000 |
| certfr-2024-avi-0459 | Multiples vulnérabilités dans les produits IBM | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0457 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0456 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0455 | Multiples vulnérabilités dans les produits Trend Micro | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0454 | Multiples vulnérabilités dans Google Chrome | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0453 | Vulnérabilité dans Ivanti Endpoint Manager | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0452 | Multiples vulnérabilités dans StormShield SSL VPN Client | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0451 | Vulnérabilité dans Mitel MiVoice MX-ONE | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0450 | Multiples vulnérabilités dans Nginx | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0449 | Vulnérabilité dans les produits Check Point | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0448 | Multiples vulnérabilités dans Nagios XI | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0447 | Vulnérabilité dans SPIP | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |