Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-112352 | 9.1 (v4.0) 9.1 (v3.1) | Sunhillo SureLine Authentication Bypass via Session Cookie |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:34.052Z | 2026-10-28T16:13:31.837Z |
| cve-2026-112351 | 8.7 (v4.0) 8.8 (v3.1) | Sunhillo SureLine OS Command Injection via networkDiag.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:19.355Z | 2026-10-27T19:43:42.029Z |
| cve-2026-112350 | 8.7 (v4.0) 7.5 (v3.1) | Sunhillo SureLine Path Traversal via radarUpdater.cgi |
Sunhillo Corporation |
SureLine |
2026-10-27T19:43:01.386Z | 2026-10-27T19:43:01.386Z |
| cve-2026-116690 | MLflow: Arbitrary file read on unauthenticated MLflow … |
mlflow |
mlflow |
2026-10-27T19:42:35.798Z | 2026-10-28T16:13:38.096Z | |
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-10-27T19:36:28.906Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-10-27T19:33:11.074Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-10-27T19:12:24.255Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-10-27T18:25:50.885Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| cve-2026-118177 | N/A | Calendar discovery accepted local file and remote netw… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.083Z | 2026-10-27T18:27:49.964Z |
| cve-2026-118176 | N/A | Bypass of remote UNC path restriction in mailbox: URLs |
Mozilla |
Thunderbird |
2026-10-27T18:16:30.272Z | 2026-10-27T18:27:48.875Z |
| cve-2026-118175 | N/A | Content of other messages could be included when reply… |
Mozilla |
Thunderbird |
2026-10-27T18:16:29.537Z | 2026-10-27T18:27:47.611Z |
| cve-2026-118174 | N/A | Displaying a message could load an attacker-chosen URL… |
Mozilla |
Thunderbird |
2026-10-27T18:16:28.729Z | 2026-10-27T18:27:46.521Z |
| cve-2026-118173 | 6.1 (v4.0) | MISP Guard Incomplete Tag Validation Allows Non-Allowe… |
MISP |
misp-guard |
2026-10-27T18:11:51.815Z | 2026-10-27T18:11:51.815Z |
| cve-2026-115413 | 7.8 (v3.1) 7.3 (v4.0) | AWS API MCP Server OAuth Token Audience Validation Bypass |
AWS |
aws-api-mcp-server |
2026-10-27T18:10:28.758Z | 2026-10-27T18:10:28.758Z |
| cve-2026-118171 | N/A | CVE-2026-118171 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:05:18.037Z | 2026-10-27T18:05:18.037Z |
| cve-2026-118172 | N/A | CVE-2026-118172 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:04:13.270Z | 2026-10-27T18:04:13.270Z |
| cve-2026-118170 | N/A | CVE-2026-118170 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:02:55.025Z | 2026-10-27T18:02:55.025Z |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-116682 | FileBrowser Quantum: Symlink following escapes user sc… |
gtsteffaniak |
filebrowser |
2026-10-27T17:48:04.364Z | 2026-10-27T17:48:04.364Z | |
| cve-2026-117526 | reduxjs redux-devtools Remotedev Server evalAction cod… |
reduxjs |
redux-devtools |
2026-10-27T17:45:15.061Z | 2026-10-28T11:19:16.821Z | |
| cve-2026-116680 | Homebox generic notifier SSRF via HTTP redirect after … |
sysadminsmedia |
homebox |
2026-10-27T17:43:52.502Z | 2026-10-27T17:43:52.502Z | |
| cve-2026-88812 | 7.8 (v3.1) | X.Org Server XKB SetGeometry TextDoodad Double Free |
X.org |
xorg-x11-server |
2026-10-27T17:43:18.583Z | 2026-10-27T17:43:18.583Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000109 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:50+09:00 | 2013-11-26T16:09+09:00 |
| jvndb-2013-000106 | EC-CUBE information disclosure vulnerability | 2013-11-20T16:14+09:00 | 2013-11-22T14:18+09:00 |
| jvndb-2013-000107 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:56+09:00 | 2013-11-22T13:57+09:00 |
| jvndb-2013-000098 | EC-CUBE information disclosure vulnerability | 2013-11-20T15:48+09:00 | 2013-11-22T14:35+09:00 |
| jvndb-2013-000097 | EC-CUBE vulnerable to cross-site request forgery | 2013-11-20T15:40+09:00 | 2013-11-22T14:37+09:00 |
| jvndb-2013-000105 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:34+09:00 | 2013-11-22T14:40+09:00 |
| jvndb-2013-000104 | EC-CUBE vulnerable to information disclosure | 2013-11-20T15:19+09:00 | 2013-11-22T14:42+09:00 |
| jvndb-2011-003557 | ASP.NET vulnerable to open redirect | 2013-11-15T15:54+09:00 | 2013-11-15T15:54+09:00 |
| jvndb-2013-000103 | Ichitaro series vulnerable to arbitrary code execution | 2013-11-12T14:33+09:00 | 2013-11-15T10:22+09:00 |
| jvndb-2013-000102 | Page Scroller vulnerable to cross-site scripting | 2013-11-07T14:03+09:00 | 2013-11-07T14:03+09:00 |
| jvndb-2013-000101 | TOWN (modified version) vulnerable to cross-site scripting | 2013-11-07T13:59+09:00 | 2013-11-11T16:34+09:00 |
| jvndb-2013-000100 | Tiki Wiki CMS Groupware vulnerable to SQL injection | 2013-11-05T15:11+09:00 | 2013-11-07T17:57+09:00 |
| jvndb-2013-000099 | Tiki Wiki CMS Groupware vulnerable to cross-site scripting | 2013-11-05T15:05+09:00 | 2013-11-07T17:55+09:00 |
| jvndb-2013-004446 | Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU) | 2013-10-30T16:32+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-001665 | Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS) | 2013-10-30T16:08+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-000096 | RockDisk vulnerable to cross-site scripting | 2013-10-29T14:40+09:00 | 2014-07-02T14:36+09:00 |
| jvndb-2013-000095 | HDL-A and HDL2-A Series vulnerable in session management | 2013-10-18T14:30+09:00 | 2013-10-22T17:56+09:00 |
| jvndb-2013-000094 | Accela BizSearch vulnerable to cross-site scripting | 2013-10-04T12:36+09:00 | 2013-10-08T14:56+09:00 |
| jvndb-2013-004410 | Arbitrary Commands Execution Vulnerability in JP1/Base | 2013-10-03T19:26+09:00 | 2013-10-03T19:26+09:00 |
| jvndb-2013-004409 | Arbitrary Commands Execution Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | 2013-10-03T19:24+09:00 | 2013-10-03T19:24+09:00 |
| jvndb-2013-004319 | Multiple vulnerabilities in Java bundled with Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:51+09:00 | 2013-09-27T14:51+09:00 |
| jvndb-2013-004318 | Multiple vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:49+09:00 | 2013-09-27T14:49+09:00 |
| jvndb-2013-000090 | D-Link DES-3810 Series vulnerable to denial-of-service (DoS) | 2013-09-20T15:12+09:00 | 2013-09-30T15:52+09:00 |
| jvndb-2013-000089 | D-Link DWL-2100AP vulnerable to denial-of-service (DoS) | 2013-09-20T15:07+09:00 | 2013-09-30T15:47+09:00 |
| jvndb-2013-000092 | SEIL Series routers vulnerable to buffer overflow | 2013-09-20T14:57+09:00 | 2013-09-30T16:46+09:00 |
| jvndb-2013-000091 | SEIL Series routers vulnerable in RADIUS authentication | 2013-09-20T14:52+09:00 | 2013-10-08T15:36+09:00 |
| jvndb-2013-000093 | Internet Explorer vulnerable to arbitrary code execution | 2013-09-19T14:39+09:00 | 2013-10-10T18:12+09:00 |
| jvndb-2013-000087 | Multiple broadband routers may behave as open resolvers | 2013-09-19T13:29+09:00 | 2014-08-28T18:10+09:00 |
| jvndb-2013-000088 | ChamaCargo vulnerable to cross-site scripting | 2013-09-13T12:21+09:00 | 2013-09-18T16:12+09:00 |
| jvndb-2013-000086 | Opera vulnerable to cross-site scripting | 2013-09-12T14:13+09:00 | 2013-09-17T14:20+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0174 | Multiples vulnérabilités dans Google Chrome | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0173 | Multiples vulnérabilités dans Google Pixel | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0172 | Multiples vulnérabilités dans Google Android | 2025-03-04T00:00:00.000000 | 2025-03-04T00:00:00.000000 |
| certfr-2025-avi-0171 | Vulnérabilité dans Python | 2025-03-03T00:00:00.000000 | 2025-03-03T00:00:00.000000 |
| certfr-2025-avi-0170 | Multiples vulnérabilités dans les produits IBM | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0169 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0168 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0167 | Vulnérabilité dans Synology DSM | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0166 | Multiples vulnérabilités dans MongoDB | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0165 | Vulnérabilité dans Xen | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0164 | Multiples vulnérabilités dans GitLab | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0163 | Vulnérabilité dans les commutateurs Cisco Nexus | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0162 | Multiples vulnérabilités dans GLPI | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0161 | Vulnérabilité dans LibreOffice | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0160 | Vulnérabilité dans Google Chrome | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0159 | Vulnérabilité dans Progress Telerik Reporting | 2025-02-25T00:00:00.000000 | 2025-02-25T00:00:00.000000 |
| certfr-2025-avi-0158 | Multiples vulnérabilités dans les produits NetApp | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0157 | Vulnérabilité dans Exim | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0156 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0155 | Vulnérabilité dans les produits Moxa | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0154 | Multiples vulnérabilités dans les produits IBM | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0153 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0152 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0151 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0150 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0149 | Multiples vulnérabilités dans Drupal | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0148 | Vulnérabilité dans Microsoft Power Pages | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0147 | Vulnérabilité dans les produits Moxa | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0146 | Vulnérabilité dans Symantec Diagnostic Tool | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0145 | Vulnérabilité dans Wireshark | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |