Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-103995 | 2 (v4.0) | Lenient parsing of integers for response body and chun… |
Python Software Foundation |
CPython |
2026-10-27T19:58:52.521Z | 2026-10-28T00:33:14.944Z |
| cve-2026-116691 | MLflow CrewAI autologging records LLM provider API key… |
mlflow |
mlflow |
2026-10-27T19:56:22.083Z | 2026-10-27T19:56:22.083Z | |
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-10-27T19:43:42.029Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-10-27T19:43:01.386Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-10-27T19:36:28.906Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-10-27T19:33:11.074Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-10-27T19:12:24.255Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-10-27T18:25:50.885Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| cve-2026-118177 | N/A | Calendar discovery accepted local file and remote netw… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.083Z | 2026-10-27T18:27:49.964Z |
| cve-2026-118176 | N/A | Bypass of remote UNC path restriction in mailbox: URLs |
Mozilla |
Thunderbird |
2026-10-27T18:16:30.272Z | 2026-10-27T18:27:48.875Z |
| cve-2026-118175 | N/A | Content of other messages could be included when reply… |
Mozilla |
Thunderbird |
2026-10-27T18:16:29.537Z | 2026-10-27T18:27:47.611Z |
| cve-2026-118174 | N/A | Displaying a message could load an attacker-chosen URL… |
Mozilla |
Thunderbird |
2026-10-27T18:16:28.729Z | 2026-10-27T18:27:46.521Z |
| cve-2026-118173 | 6.1 (v4.0) | MISP Guard Incomplete Tag Validation Allows Non-Allowe… |
MISP |
misp-guard |
2026-10-27T18:11:51.815Z | 2026-10-27T18:11:51.815Z |
| cve-2026-115413 | 7.8 (v3.1) 7.3 (v4.0) | AWS API MCP Server OAuth Token Audience Validation Bypass |
AWS |
aws-api-mcp-server |
2026-10-27T18:10:28.758Z | 2026-10-27T18:10:28.758Z |
| cve-2026-118171 | N/A | CVE-2026-118171 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:05:18.037Z | 2026-10-27T18:05:18.037Z |
| cve-2026-118172 | N/A | CVE-2026-118172 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:04:13.270Z | 2026-10-27T18:04:13.270Z |
| cve-2026-118170 | N/A | CVE-2026-118170 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:02:55.025Z | 2026-10-27T18:02:55.025Z |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-116682 | FileBrowser Quantum: Symlink following escapes user sc… |
gtsteffaniak |
filebrowser |
2026-10-27T17:48:04.364Z | 2026-10-27T17:48:04.364Z | |
| cve-2026-117526 | reduxjs redux-devtools Remotedev Server evalAction cod… |
reduxjs |
redux-devtools |
2026-10-27T17:45:15.061Z | 2026-10-28T11:19:16.821Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000104 | Movable Type vulnerable to cross-site scripting | 2014-09-09T15:02+09:00 | 2014-09-11T16:56+09:00 |
| jvndb-2014-000084 | WisePoint vulnerable to session fixation | 2014-09-04T16:46+09:00 | 2014-09-09T15:02+09:00 |
| jvndb-2014-000103 | EmFTP may insecurely load executable files | 2014-09-04T16:36+09:00 | 2014-09-09T15:15+09:00 |
| jvndb-2014-000102 | Kindle App for Android fails to verify SSL server certificates | 2014-08-29T13:38+09:00 | 2014-09-03T18:25+09:00 |
| jvndb-2014-000101 | MailPoet Newsletters vulnerable to cross-site request forgery | 2014-08-26T13:33+09:00 | 2014-08-28T18:13+09:00 |
| jvndb-2014-000099 | Advance-Flow vulnerable to SQL injection | 2014-08-19T12:35+09:00 | 2014-08-20T16:26+09:00 |
| jvndb-2014-000100 | Cakifo vulnerable to cross-site scripting | 2014-08-18T13:32+09:00 | 2014-08-20T16:30+09:00 |
| jvndb-2014-000096 | Shutter vulnerable to cross-site scripting | 2014-08-15T13:27+09:00 | 2014-08-19T16:27+09:00 |
| jvndb-2014-000095 | Shutter vulnerable to SQL injection | 2014-08-15T13:24+09:00 | 2015-01-15T17:47+09:00 |
| jvndb-2014-000098 | Ameba for Android contains an issue where it fails to verify SSL server certificates | 2014-08-14T12:32+09:00 | 2014-08-18T12:22+09:00 |
| jvndb-2014-000097 | Dominion KX2-101 vulnerable to denial-of-service (DoS) | 2014-08-12T14:03+09:00 | 2014-08-18T09:44+09:00 |
| jvndb-2014-000094 | Piwigo vulnerable to SQL injection | 2014-08-08T13:57+09:00 | 2014-08-08T13:57+09:00 |
| jvndb-2014-000093 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:52+09:00 | 2014-08-19T16:48+09:00 |
| jvndb-2014-000092 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:49+09:00 | 2014-08-15T13:35+09:00 |
| jvndb-2014-000085 | GOM Player vulnerable to denial-of-service (DoS) | 2014-08-06T15:22+09:00 | 2014-08-13T18:29+09:00 |
| jvndb-2014-000091 | ServerView Operations Manager vulnerable to cross-site scripting | 2014-08-01T15:42+09:00 | 2014-08-18T10:05+09:00 |
| jvndb-2014-000086 | Outlook.com for Android contains an issue where it fails to verify SSL server certificates | 2014-07-30T15:11+09:00 | 2014-08-18T10:09+09:00 |
| jvndb-2014-000087 | Multiple I-O DATA IP Cameras vulnerable to authentication bypass | 2014-07-29T14:24+09:00 | 2014-08-01T18:30+09:00 |
| jvndb-2014-000088 | PerlMailer vulnerable to cross-site scripting | 2014-07-29T14:20+09:00 | 2014-08-01T18:28+09:00 |
| jvndb-2014-000089 | acmailer contains a cross-site request forgery vulnerability | 2014-07-29T14:15+09:00 | 2014-08-01T18:29+09:00 |
| jvndb-2013-002240 | Arbitrary program execution vulnerability in TrendLink ActiveX control | 2014-07-25T14:44+09:00 | 2014-07-25T14:44+09:00 |
| jvndb-2014-000082 | FuelPHP vulnerable to remote code execution | 2014-07-18T13:50+09:00 | 2014-07-23T11:03+09:00 |
| jvndb-2014-000081 | File Explorer vulnerable to directory traversal | 2014-07-18T13:48+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000080 | Meridian vulnerable to cross-site scripting | 2014-07-18T13:47+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000079 | Multifunctional MailForm Free vulnerable to cross-site scripting | 2014-07-16T15:13+09:00 | 2014-07-23T11:02+09:00 |
| jvndb-2014-000078 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:47+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000077 | Cybozu Garoon vulnerable to access restriction bypass | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000076 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:46+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000075 | Cybozu Garoon vulnerable to cross-site scritping | 2014-07-15T14:45+09:00 | 2014-07-23T11:01+09:00 |
| jvndb-2014-000074 | Cybozu Garoon 3 API access restriction bypass vulnerability | 2014-07-15T14:45+09:00 | 2014-07-23T11:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0294 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-04-09T00:00:00.000000 | 2025-04-11T00:00:00.000000 |
| certfr-2025-avi-0293 | Multiples vulnérabilités dans les produits Fortinet | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0292 | Multiples vulnérabilités dans les produits Adobe | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0291 | Multiples vulnérabilités dans les produits Microsoft | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0290 | Multiples vulnérabilités dans Microsoft Azure | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0289 | Vulnérabilité dans Microsoft .Net | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0288 | Multiples vulnérabilités dans Microsoft Windows | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0287 | Multiples vulnérabilités dans Microsoft Office | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0286 | Vulnérabilité dans Google Chrome | 2025-04-09T00:00:00.000000 | 2025-04-09T00:00:00.000000 |
| certfr-2025-avi-0285 | Multiples vulnérabilités dans les produits SAP | 2025-04-08T00:00:00.000000 | 2025-04-25T00:00:00.000000 |
| certfr-2025-avi-0284 | Multiples vulnérabilités dans les produits Siemens | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0283 | Multiples vulnérabilités dans VMware Tanzu Greenplum | 2025-04-08T00:00:00.000000 | 2025-04-10T00:00:00.000000 |
| certfr-2025-avi-0282 | Multiples vulnérabilités dans Schneider Electric ConneXium Network Manager | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0281 | Multiples vulnérabilités dans Google Android | 2025-04-08T00:00:00.000000 | 2025-04-08T00:00:00.000000 |
| certfr-2025-avi-0280 | Vulnérabilité dans les produits ESET | 2025-04-07T00:00:00.000000 | 2025-04-07T00:00:00.000000 |
| certfr-2025-avi-0279 | Multiples vulnérabilités dans les produits IBM | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0278 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0277 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0276 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0275 | Multiples vulnérabilités dans Microsoft Edge | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0274 | Multiples vulnérabilités dans MISP | 2025-04-04T00:00:00.000000 | 2025-04-04T00:00:00.000000 |
| certfr-2025-avi-0273 | Vulnérabilité dans les produits Ivanti | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0272 | Multiples vulnérabilités dans les produits Splunk | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0271 | Vulnérabilité dans Tenable Nessus Agent | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0270 | Multiples vulnérabilités dans les produits Cisco | 2025-04-03T00:00:00.000000 | 2025-04-03T00:00:00.000000 |
| certfr-2025-avi-0269 | Multiples vulnérabilités dans les produits Moxa | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0268 | Vulnérabilité dans les produits VMware | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0267 | Multiples vulnérabilités dans MongoDB Server | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0266 | Multiples vulnérabilités dans les produits Mozilla | 2025-04-02T00:00:00.000000 | 2025-04-02T00:00:00.000000 |
| certfr-2025-avi-0265 | Multiples vulnérabilités dans Google Chrome | 2025-04-02T00:00:00.000000 | 2025-04-11T00:00:00.000000 |