Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-80202 | 9.3 (v4.0) 8.8 (v3.1) | Kimai before 2.56.0 Authorization Bypass via TimesheetVoter |
kimai |
kimai |
2026-08-25T23:19:07.165Z | 2026-08-26T13:55:11.219Z |
| cve-2026-80201 | 2 (v4.0) 2 (v3.1) | Kimai before 2.53.0 API Token Leakage via Invoice Template |
kimai |
kimai |
2026-08-25T23:19:06.486Z | 2026-08-26T14:16:34.776Z |
| cve-2026-80200 | 5.3 (v4.0) 4.7 (v3.1) | Kimai before 2.53.0 Open Redirect via RelayState |
kimai |
kimai |
2026-08-25T23:19:05.809Z | 2026-08-28T15:18:32.829Z |
| cve-2026-80199 | 6.3 (v4.0) 3.7 (v3.1) | Kimai before 2.54.0 Username Enumeration via Timing Oracle |
kimai |
kimai |
2026-08-25T23:19:05.166Z | 2026-08-26T12:12:39.269Z |
| cve-2026-80198 | 8.7 (v4.0) 7.5 (v3.1) | Kimai before 2.56.0 Information Disclosure via config(… |
kimai |
kimai |
2026-08-25T23:19:04.492Z | 2026-08-28T22:44:03.015Z |
| cve-2026-80197 | 8.7 (v4.0) 4.3 (v3.1) | Kimai before 2.57.0 Improper Authorization via Favorit… |
kimai |
kimai |
2026-08-25T23:19:03.788Z | 2026-08-26T13:46:10.280Z |
| cve-2026-80196 | 8.7 (v4.0) 7.5 (v3.1) | Kimai before 2.58.0 Authentication Bypass via Password… |
kimai |
kimai |
2026-08-25T23:19:03.107Z | 2026-08-26T14:17:15.767Z |
| cve-2026-80195 | 8.7 (v4.0) 5.4 (v3.1) | Kimai before 2.63.0 Team Membership Removal via API |
kimai |
kimai |
2026-08-25T23:19:02.395Z | 2026-08-26T16:10:29.520Z |
| cve-2026-80194 | 8.7 (v4.0) 4.3 (v3.1) | Kimai before 2.64.0 Missing Authorization via ProjectV… |
kimai |
kimai |
2026-08-25T23:19:01.718Z | 2026-08-26T12:17:35.542Z |
| cve-2026-80193 | 8.7 (v4.0) 8.8 (v3.1) | Kimai before 2.62.0 Authorization Bypass via QuickEntry |
kimai |
kimai |
2026-08-25T23:19:01.048Z | 2026-08-28T22:42:25.572Z |
| cve-2026-80192 | 8.6 (v4.0) 8.1 (v3.1) | better-auth SSO before 1.6.27 Domain Ownership Authent… |
better-auth |
sso |
2026-08-25T23:19:00.371Z | 2026-08-29T11:48:04.728Z |
| cve-2026-80191 | 8.7 (v4.0) 7.5 (v3.1) | GROWI before 8.0.2 Missing Authorization on Attachment… |
GROWI, Inc. |
GROWI |
2026-08-25T23:18:59.672Z | 2026-08-29T11:48:04.052Z |
| cve-2026-80189 | 7.1 (v4.0) 6.5 (v3.1) | LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource C… |
perber |
leafwiki |
2026-08-25T23:18:58.993Z | 2026-08-29T11:48:03.392Z |
| cve-2026-57170 | Trestle SSTI in Jinja2 include tags allows arbitrary c… |
oscal-compass |
compliance-trestle |
2026-08-25T23:18:29.487Z | 2026-08-28T22:41:34.783Z | |
| cve-2026-52776 | Trestle URLSecurityValidator SSRF allowlist bypass via… |
oscal-compass |
compliance-trestle |
2026-08-25T23:12:24.647Z | 2026-08-26T14:23:57.204Z | |
| cve-2026-54757 | Trestle has Server-Side Template Injection (SSTI) via … |
oscal-compass |
compliance-trestle |
2026-08-25T23:02:12.422Z | 2026-08-26T12:21:23.031Z | |
| cve-2026-44476 | Doorkeeper OpenID Connect: Dynamic Client Registration… |
doorkeeper-gem |
doorkeeper-openid_connect |
2026-08-25T22:47:54.774Z | 2026-08-26T15:38:48.102Z | |
| cve-2026-41707 | 7.4 (v3.1) | Spring Security DPoPProofJwtDecoderFactory vulnerable … |
Spring |
Spring Security |
2026-08-25T22:34:30.570Z | 2026-08-27T03:57:13.462Z |
| cve-2026-79912 | TOTOLINK N600R cstecgi.cgi getCurrentTime command injection |
TOTOLINK |
N600R |
2026-08-25T22:30:12.494Z | 2026-08-26T14:10:47.522Z | |
| cve-2026-15916 | N/A | Drupal core - Moderately critical - Information disclo… |
Drupal |
Drupal core |
2026-08-25T22:22:27.131Z | 2026-08-26T14:48:00.296Z |
| cve-2026-15917 | N/A | Drupal core - Moderately critical - Cross-site scripti… |
Drupal |
Drupal core |
2026-08-25T22:22:23.680Z | 2026-08-26T14:48:20.519Z |
| cve-2026-55805 | N/A | Drupal core - Moderately critical - Cross-site scripti… |
Drupal |
Drupal core |
2026-08-25T22:22:20.763Z | 2026-08-26T17:49:10.444Z |
| cve-2026-16638 | N/A | Media Folders - Moderately critical - Cross site scrip… |
Drupal |
Media Folders |
2026-08-25T22:22:17.992Z | 2026-08-26T14:28:00.402Z |
| cve-2026-16639 | N/A | Internationalization Single Sign-On - Critical - Acces… |
Drupal |
Internationalization Single Sign-On |
2026-08-25T22:22:12.799Z | 2026-08-26T15:23:15.811Z |
| cve-2026-16640 | N/A | Search API Autocomplete - Moderately critical - Cross-… |
Drupal |
Search API Autocomplete |
2026-08-25T22:22:09.308Z | 2026-08-26T14:29:52.215Z |
| cve-2026-16646 | N/A | PanKM - Critical - Unsupported - SA-CONTRIB-2026-083 |
Drupal |
PanKM |
2026-08-25T22:22:05.938Z | 2026-08-26T14:49:58.454Z |
| cve-2026-16641 | N/A | Commerce Elavon - Critical - Unsupported - SA-CONTRIB-… |
Drupal |
Commerce Elavon |
2026-08-25T22:22:02.591Z | 2026-08-26T18:09:19.251Z |
| cve-2026-16642 | N/A | Email Login OTP - Critical - Unsupported - SA-CONTRIB-… |
Drupal |
Email Login OTP |
2026-08-25T22:21:59.242Z | 2026-08-26T18:55:46.788Z |
| cve-2026-16643 | N/A | Lunr exposed filters - Critical - Unsupported - SA-CO… |
Drupal |
Lunr exposed filters |
2026-08-25T22:21:55.035Z | 2026-08-26T18:52:41.696Z |
| cve-2026-16644 | N/A | Webform REST - Moderately critical - Access bypass - S… |
Drupal |
Webform REST |
2026-08-25T22:21:51.345Z | 2026-08-26T18:40:31.903Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000065 | EC-CUBE vulnerable to directory traversal | 2013-06-27T14:33+09:00 | 2013-07-02T16:15+09:00 |
| jvndb-2013-000064 | EC-CUBE vulnerable to cross-site scripting | 2013-06-27T14:31+09:00 | 2013-07-02T16:10+09:00 |
| jvndb-2013-000063 | EC-CUBE vulnerable to cross-site scripting | 2013-06-27T14:31+09:00 | 2013-07-02T16:06+09:00 |
| jvndb-2013-000062 | EC-CUBE vulnerable to code injection | 2013-06-27T14:29+09:00 | 2013-07-02T16:01+09:00 |
| jvndb-2013-000061 | EC-CUBE vulnerable to directory traversal | 2013-06-27T14:29+09:00 | 2013-07-02T15:57+09:00 |
| jvndb-2013-003074 | Cross-site Scripting Vulnerability in Hitachi Command Suite Products | 2013-06-20T14:37+09:00 | 2013-06-20T14:37+09:00 |
| jvndb-2013-003073 | Vulnerability in JP1/HIBUN Advanced Edition Information Cypher Removable Media Encryption | 2013-06-20T14:24+09:00 | 2013-06-20T14:24+09:00 |
| jvndb-2013-000060 | Cybozu Live for Android vulnerable in the WebView class | 2013-06-18T15:20+09:00 | 2013-06-26T14:43+09:00 |
| jvndb-2013-000059 | Cybozu Live for Android vulnerable to arbitrary Java method execution | 2013-06-18T15:19+09:00 | 2013-06-26T14:46+09:00 |
| jvndb-2013-000058 | Ichitaro series vulnerable to arbitrary code execution | 2013-06-18T15:17+09:00 | 2013-06-26T14:49+09:00 |
| jvndb-2013-000057 | Orchard vulnerable to cross-site scripting | 2013-06-13T13:49+09:00 | 2013-06-17T12:01+09:00 |
| jvndb-2013-000056 | Galapagos Browser vulnerable in the WebView class | 2013-06-11T13:48+09:00 | 2013-06-18T17:55+09:00 |
| jvndb-2013-000055 | Angel Browser vulnerable in the WebView class | 2013-06-11T13:40+09:00 | 2013-06-18T17:52+09:00 |
| jvndb-2013-000054 | Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates | 2013-06-07T15:03+09:00 | 2013-06-07T15:03+09:00 |
| jvndb-2013-000053 | Internet Explorer vulnerable to information disclosure | 2013-06-07T13:59+09:00 | 2013-06-07T13:59+09:00 |
| jvndb-2013-000052 | HP ProCurve 1700 series switches vulnerable to cross-site request forgery | 2013-06-03T14:28+09:00 | 2013-06-03T14:28+09:00 |
| jvndb-2013-000051 | Adobe Reader X vulnerable to sandbox bypass | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000050 | Safari information disclosure vulnerability | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000049 | FileMaker Pro vulnerable to cross-site scripting | 2013-05-31T15:43+09:00 | 2015-05-22T11:34+09:00 |
| jvndb-2013-000048 | FileMaker Pro fails to verify SSL server certificates | 2013-05-31T15:43+09:00 | 2014-09-18T21:08+09:00 |
| jvndb-2013-000047 | Content Provider in MovatwiTouch fails to restrict access permissions | 2013-05-29T15:32+09:00 | 2013-05-29T15:32+09:00 |
| jvndb-2013-000046 | Sleipnir Mobile for Android vulnerable to address bar spoofing | 2013-05-29T15:19+09:00 | 2013-05-29T15:19+09:00 |
| jvndb-2013-000045 | Yahoo! Browser vulnerable to address bar spoofing | 2013-05-27T15:04+09:00 | 2013-05-27T15:04+09:00 |
| jvndb-2013-002796 | Arbitrary Commands Execution Vulnerability in JP1/Integrated Management - TELstaff Alarm View | 2013-05-24T14:37+09:00 | 2013-05-24T14:37+09:00 |
| jvndb-2013-000044 | EC-CUBE vulnerable to information disclosure as a result of improper input checking | 2013-05-23T15:46+09:00 | 2013-05-23T15:46+09:00 |
| jvndb-2013-000043 | EC-CUBE fails to restrict access permissions | 2013-05-23T15:42+09:00 | 2013-06-03T16:13+09:00 |
| jvndb-2013-000042 | EC-CUBE vulnerable to session fixation | 2013-05-23T14:15+09:00 | 2013-05-23T14:15+09:00 |
| jvndb-2013-000041 | EC-CUBE vulnerable to cross-site scripting | 2013-05-23T14:11+09:00 | 2013-05-23T14:11+09:00 |
| jvndb-2013-002770 | Cross-site Scripting Vulnerability in JP1/Automatic Operation | 2013-05-21T15:45+09:00 | 2013-05-21T15:45+09:00 |
| jvndb-2013-000040 | Cross-site scripting vulnerability in the web2py social bookmarking widget | 2013-05-20T15:16+09:00 | 2013-05-20T15:16+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0954 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0953 | Multiples vulnérabilités dans Moxa EDS-P510 Series | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0952 | Vulnérabilité dans les produits F5 | 2024-11-08T00:00:00.000000 | 2024-11-08T00:00:00.000000 |
| certfr-2024-avi-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0933 | Multiples vulnérabilités dans les produits Qnap | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0932 | Multiples vulnérabilités dans les produits Apple | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0931 | Multiples vulnérabilités dans Google Chrome | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0930 | Vulnérabilité dans MongoDB | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0929 | Multiples vulnérabilités dans les produits Apple | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0928 | Vulnérabilité dans Squid | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| certfr-2024-avi-0927 | Multiples vulnérabilités dans les produits Synology | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| certfr-2024-avi-0926 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0925 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |