Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-85655 | Enable Media Replace <= 4.2.2 - Missing Authorization … |
shortpixel |
Enable Media Replace |
2026-10-28T07:48:29.420Z | 2026-10-29T01:41:49.939Z | |
| cve-2026-113957 | N/A | An attacker who controls the registry, a mirror, … |
Apple |
container |
2026-10-29T00:01:44.984Z | 2026-10-29T00:01:44.984Z |
| cve-2026-118590 | nipy nibabel Header volumeutils.py array_from_file mem… |
nipy |
nibabel |
2026-10-29T00:00:21.707Z | 2026-10-29T00:00:21.707Z | |
| cve-2026-118589 | nschloe meshio VTK Reader _vtk_42.py memory allocation |
nschloe |
meshio |
2026-10-28T23:45:18.675Z | 2026-10-28T23:45:18.675Z | |
| cve-2026-118586 | dfm feedfinder2 feedfinder2.py find_feeds server-side … |
dfm |
feedfinder2 |
2026-10-28T23:30:17.619Z | 2026-10-28T23:30:17.619Z | |
| cve-2026-118585 | configuroweb inventariobasico Add Product addlist.php … |
configuroweb |
inventariobasico |
2026-10-28T23:15:19.868Z | 2026-10-28T23:15:19.868Z | |
| cve-2026-86983 | N/A | A remote attacker may be able to terminate a proc… |
Apple |
swift-crypto |
2026-10-28T23:01:59.598Z | 2026-10-28T23:02:44.171Z |
| cve-2026-118579 | D-Link DIR-505 Web Management CGI secmark1524.cgi main… |
D-Link |
DIR-505 |
2026-10-28T23:00:15.627Z | 2026-10-28T23:00:15.627Z | |
| cve-2026-82411 | Objects API: Cross-object-type authorization bypass on… |
maykinmedia |
open-object |
2026-10-28T22:40:13.728Z | 2026-10-28T22:40:13.728Z | |
| cve-2026-55561 | InvoicePlane: Guest user IDOR in quote approval and re… |
InvoicePlane |
InvoicePlane |
2026-10-28T22:33:47.140Z | 2026-10-28T22:33:47.140Z | |
| cve-2026-75520 | Domoticz: Missing authorization and path traversal in … |
domoticz |
domoticz |
2026-10-28T22:30:59.693Z | 2026-10-28T22:30:59.693Z | |
| cve-2026-111478 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-28T22:18:55.623Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-28T22:18:55.623Z | |
| cve-2026-111486 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-28T22:18:55.500Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-28T22:18:55.500Z | |
| cve-2026-111575 | N/A | {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-28T22:18:55.361Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-10-28T22:18:55.361Z | |
| cve-2026-72694 | 7.1 (v3.1) | Mrtg: mrtg daemon symlink-following chown allows local… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-08-11T08:37:55.392Z | 2026-10-28T22:05:04.718Z |
| cve-2026-118538 | a2ui-project a2ui Renderer root.js Root.renderComponen… |
a2ui-project |
a2ui |
2026-10-28T22:00:18.460Z | 2026-10-28T22:00:18.460Z | |
| cve-2026-61575 | AVideo-Encoder vulnerable to stored DOM cross-site scr… |
WWBN |
AVideo-Encoder |
2026-10-28T21:57:55.205Z | 2026-10-28T21:57:55.205Z | |
| cve-2026-54453 | OpenCATS: Authenticated Remote Code Execution via Sett… |
opencats |
OpenCATS |
2026-10-28T21:53:24.736Z | 2026-10-28T21:53:24.736Z | |
| cve-2026-61571 | AVideo-Encoder: missing authentication on control and … |
WWBN |
AVideo-Encoder |
2026-10-28T21:49:16.840Z | 2026-10-28T21:49:16.840Z | |
| cve-2026-61573 | AVideo-Encoder: reflected cross-site scripting in the … |
WWBN |
AVideo-Encoder |
2026-10-28T21:46:18.413Z | 2026-10-28T21:46:18.413Z | |
| cve-2026-118537 | a2ui Image Player/Video Player/Audio Player Image.js i… |
n/a |
a2ui |
2026-10-28T21:45:16.400Z | 2026-10-28T21:45:16.400Z | |
| cve-2026-54455 | OpenCATS: Authenticated SQL injection in activity Data… |
opencats |
OpenCATS |
2026-10-28T21:45:00.241Z | 2026-10-28T21:45:00.241Z | |
| cve-2026-61567 | AVideo-Encoder: unauthenticated command execution thro… |
WWBN |
AVideo-Encoder |
2026-10-28T21:43:48.515Z | 2026-10-28T21:43:48.515Z | |
| cve-2026-0631 | 8.5 (v4.0) | Authenticated Command Injection Vulnerability in Surfs… |
TP-Link Systems Inc. |
Archer BE230 v1.2 |
2026-02-02T17:48:21.791Z | 2026-10-28T21:43:06.598Z |
| cve-2026-61564 | AVideo-Encoder: unauthenticated installer PHP code injection |
WWBN |
AVideo-Encoder |
2026-10-28T21:42:42.397Z | 2026-10-28T21:42:42.397Z | |
| cve-2026-57448 | Blombooru: administrator image-proxy server-side reque… |
mrblomblo |
blombooru |
2026-10-28T21:41:21.557Z | 2026-10-28T21:41:21.557Z | |
| cve-2026-61546 | AnkiMCP: DNS rebinding reaches unauthenticated local A… |
ankimcp |
anki-mcp-server-addon |
2026-10-28T21:40:16.081Z | 2026-10-28T21:40:16.081Z | |
| cve-2026-118804 | 7.5 (v3.1) | Bricks Broken Access Control via query_result Endpoint |
Bricks |
Bricks Builder |
2026-10-28T21:18:28.475Z | 2026-10-28T21:18:28.475Z |
| cve-2023-54404 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-28T21:17:22.423Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.'}]}], 'x_generator': {'engine': 'vulncheck'}} | N/A | N/A | 2026-10-01T17:11:13.762Z | 2026-10-28T21:17:22.423Z |
| cve-2026-83596 | 8.8 (v3.1) | Webkitgtk: validate the full featurelist array once in… |
WebKit |
WebKit |
2026-08-31T20:46:24.116Z | 2026-10-28T21:14:39.982Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000039 | Cybozu Remote Service Manager vulnerable to denial-of-service (DoS) | 2014-04-18T13:40+09:00 | 2014-04-28T18:13+09:00 |
| jvndb-2014-000037 | AndExplorer vulnerable to directory traversal | 2014-04-18T12:39+09:00 | 2014-04-28T18:12+09:00 |
| jvndb-2014-000038 | TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery | 2014-04-18T14:30+09:00 | 2014-04-28T18:11+09:00 |
| jvndb-2014-000036 | Content Provider in CamiApp for Android fails to restrict access permissions | 2014-04-14T13:45+09:00 | 2014-04-21T18:34+09:00 |
| jvndb-2014-000035 | SD Card Manager vulnerable to directory traversal | 2014-04-11T13:43+09:00 | 2014-04-16T18:22+09:00 |
| jvndb-2014-000041 | Redmine vulnerable to open redirect | 2014-04-16T15:06+09:00 | 2014-04-16T15:06+09:00 |
| jvndb-2014-000029 | sp mode mail vulnerability where Java methods may be executed | 2014-03-18T14:09+09:00 | 2014-03-25T19:25+09:00 |
| jvndb-2014-000028 | sp mode mail issue where emails in the process of creation may be accessed | 2014-03-18T14:08+09:00 | 2014-03-25T19:24+09:00 |
| jvndb-2014-000027 | sp mode mail issue when accessing attachments in incoming mail | 2014-03-18T14:07+09:00 | 2014-03-24T19:04+09:00 |
| jvndb-2014-000033 | ES File Explorer vulnerable to directory traversal | 2014-03-20T14:05+09:00 | 2014-03-24T18:50+09:00 |
| jvndb-2014-000032 | Silex vulnerable to cross-site scripting | 2014-03-20T14:02+09:00 | 2014-03-24T18:27+09:00 |
| jvndb-2014-000031 | Unzipper vulnerable to directory traversal | 2014-03-17T13:45+09:00 | 2014-03-19T15:15+09:00 |
| jvndb-2014-000030 | Demaecan for Android. contains an issue where it fails to verify SSL server certificates | 2014-03-17T13:43+09:00 | 2014-03-19T15:14+09:00 |
| jvndb-2013-000111 | Android OS vulnerable to arbitrary Java method execution | 2013-12-17T13:57+09:00 | 2014-03-05T17:27+09:00 |
| jvndb-2014-000025 | XooNIps vulnerable to cross-site scripting | 2014-02-26T15:19+09:00 | 2014-03-03T18:50+09:00 |
| jvndb-2014-000022 | Denny's App for Android. contains an issue where it fails to verify SSL server certificates | 2014-02-26T15:21+09:00 | 2014-03-03T18:49+09:00 |
| jvndb-2014-000026 | Norman Security Suite vulnerable to privilege escalation | 2014-02-26T15:20+09:00 | 2014-03-03T18:47+09:00 |
| jvndb-2014-000021 | Cybozu Garoon vulnerable to session management | 2014-02-26T15:21+09:00 | 2014-03-03T18:45+09:00 |
| jvndb-2014-000023 | Cybozu Garoon vulnerable to directory traversal | 2014-02-26T15:22+09:00 | 2014-03-03T18:44+09:00 |
| jvndb-2014-000024 | Cybozu Garoon vulnerable to SQL injection | 2014-02-26T15:23+09:00 | 2014-03-03T18:42+09:00 |
| jvndb-2014-000012 | Blackboard Vista/CE vulnerable to cross-site scripting | 2014-02-21T14:12+09:00 | 2014-02-25T16:40+09:00 |
| jvndb-2014-000019 | AutoCAD vulnerable to arbitrary VBScript execution | 2014-02-21T14:16+09:00 | 2014-02-25T16:39+09:00 |
| jvndb-2014-000020 | AutoCAD may insecurely load dynamic libraries | 2014-02-21T14:19+09:00 | 2014-02-25T16:38+09:00 |
| jvndb-2013-000070 | Oracle Outside In vulnerable to buffer overflow | 2013-07-17T13:45+09:00 | 2014-02-24T16:38+09:00 |
| jvndb-2014-000015 | phpMyFAQ vulnerable to cross-site scripting | 2014-02-07T12:25+09:00 | 2014-02-20T14:00+09:00 |
| jvndb-2014-000016 | phpMyFAQ vulnerable to cross-site request forgery | 2014-02-07T12:26+09:00 | 2014-02-20T13:58+09:00 |
| jvndb-2014-000014 | Opera browser for Android issue in handling intent scheme URL's | 2014-02-06T12:20+09:00 | 2014-02-10T19:09+09:00 |
| jvndb-2014-000013 | Joyful Note vulnerable to cross-site scripting | 2014-01-31T13:41+09:00 | 2014-02-04T17:38+09:00 |
| jvndb-2014-000011 | Sanshiro Series vulnerable to arbitrary code execution | 2014-01-28T14:48+09:00 | 2014-01-30T14:24+09:00 |
| jvndb-2014-000010 | Multiple SQL injection vulnerabilities in Cybozu Garoon | 2014-01-28T14:40+09:00 | 2014-01-30T14:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0210 | Multiples vulnérabilités dans VMware Tanzu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0209 | Multiples vulnérabilités dans PHP | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0208 | Vulnérabilité dans Microsoft Dataverse | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0207 | Multiples vulnérabilités dans Cisco IOS XR | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0206 | Vulnérabilité dans Juniper Networks Junos OS | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0205 | Multiples vulnérabilités dans GitLab | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0204 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0203 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0202 | Vulnérabilité dans Joomla! | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0201 | Multiples vulnérabilités dans les produits Adobe | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0200 | Vulnérabilité dans Apache Tomcat | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0199 | Vulnérabilité dans les produits Apple | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0198 | Multiples vulnérabilités dans les produits Ivanti | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0197 | Multiples vulnérabilités dans les produits Fortinet | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0196 | Multiples vulnérabilités dans les produits Microsoft | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0195 | Multiples vulnérabilités dans Microsoft Azure | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0194 | Vulnérabilité dans Microsoft .Net | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0193 | Multiples vulnérabilités dans Microsoft Windows | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0192 | Multiples vulnérabilités dans Microsoft Office | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0191 | Multiples vulnérabilités dans les produits Siemens | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0190 | Multiples vulnérabilités dans les produits SAP | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0189 | Multiples vulnérabilités dans Google Chrome | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0188 | Multiples vulnérabilités dans les produits Qnap | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| certfr-2025-avi-0187 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| certfr-2025-avi-0186 | Multiples vulnérabilités dans les produits IBM | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0185 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0184 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0183 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0182 | Vulnérabilité dans Nagios XI | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0178 | Vulnérabilité dans Elastic Kibana | 2025-03-05T00:00:00.000000 | 2025-03-07T00:00:00.000000 |