Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-78376 | 8.8 (v3.1) | Webkitgtk: use-after-free of jscvalue function parameters |
WebKit |
WebKit |
2026-08-24T13:29:17.412Z | 2026-10-28T21:12:13.097Z |
| cve-2026-118803 | 7.5 (v3.1) | Bricks Theme Unauthenticated Dynamic Data Tag Injectio… |
Bricks |
Bricks Theme |
2026-10-28T21:11:32.437Z | 2026-10-28T21:11:32.437Z |
| cve-2026-118757 | 6.9 (v4.0) 6.5 (v3.1) | PiWeb Disable payment method / Partial payment for Woo… |
PI Websolution |
PiWeb Disable payment method / Partial payment for WooCommerce |
2026-10-28T21:11:24.955Z | 2026-10-28T21:11:24.955Z |
| cve-2026-118756 | 6.7 (v4.0) 5.5 (v3.1) | gopass before 1.17.0 Path Traversal via fs Storage Pru… |
gopasspw |
gopass |
2026-10-28T21:11:24.270Z | 2026-10-28T21:11:24.270Z |
| cve-2026-118755 | 8.6 (v4.0) 7.2 (v3.1) | Volmarg Personal Management System through 2.1.0 OS Co… |
Volmarg |
personal-management-system |
2026-10-28T21:11:23.608Z | 2026-10-28T21:11:23.608Z |
| cve-2026-118754 | 6.9 (v4.0) 5.3 (v3.1) | Dolibarr ERP CRM before 24.0.2 Missing Authorization v… |
Dolibarr |
Dolibarr ERP/CRM |
2026-10-28T21:11:22.905Z | 2026-10-28T21:11:22.905Z |
| cve-2026-118753 | 8.5 (v4.0) 7.8 (v3.1) | FreeImage (danoli3 fork) before 3.19.25 Heap Buffer Ov… |
danoli3 |
FreeImage |
2026-10-28T21:11:22.192Z | 2026-10-28T21:11:22.192Z |
| cve-2026-118752 | 8.5 (v4.0) 7.8 (v3.1) | FreeImage before 3.19.22 Heap Buffer Overflow via IFF/… |
danoli3 |
FreeImage |
2026-10-28T21:11:21.485Z | 2026-10-28T21:11:21.485Z |
| cve-2026-118694 | 8.7 (v4.0) 7.5 (v3.1) | python-markdown2 through 2.5.5 Denial of Service via U… |
trentm |
python-markdown2 |
2026-10-28T21:11:20.814Z | 2026-10-28T21:11:20.814Z |
| cve-2026-118693 | 5.6 (v4.0) 4.7 (v3.1) | CherryTree through 1.7.2 Local File Disclosure via Emb… |
giuspen |
cherrytree |
2026-10-28T21:11:20.057Z | 2026-10-28T21:11:20.057Z |
| cve-2026-118692 | 7.1 (v4.0) 7 (v3.1) | CherryTree through 1.7.2 OS Command Injection via Cust… |
giuspen |
cherrytree |
2026-10-28T21:11:19.351Z | 2026-10-28T21:11:19.351Z |
| cve-2026-118691 | 6.3 (v4.0) 3.7 (v3.1) | xianyu-auto-reply-fix through 2.0.7 Unauthenticated Me… |
GuDong2003 |
xianyu-auto-reply-fix |
2026-10-28T21:11:18.629Z | 2026-10-28T21:11:18.629Z |
| cve-2026-118690 | 9.3 (v4.0) 9.8 (v3.1) | Signal K Server before 2.33.0 Missing Authentication v… |
SignalK |
signalk-server |
2026-10-28T21:11:17.919Z | 2026-10-28T21:11:17.919Z |
| cve-2026-118689 | 8.7 (v4.0) 7.5 (v3.1) | OvenMediaEngine through 0.21.0 OVT Relay DoS via Overs… |
OvenMediaLabs |
OvenMediaEngine |
2026-10-28T21:11:17.232Z | 2026-10-28T21:11:17.232Z |
| cve-2026-118682 | 7.7 (v4.0) 7.5 (v3.1) | ClashMi through 1.0.32.1801 Disabled TLS Certificate V… |
KaringX |
clashmi |
2026-10-28T21:11:16.509Z | 2026-10-28T21:11:16.509Z |
| cve-2026-118669 | OAuthLib: Token grants can use attacker-supplied clien… |
oauthlib |
oauthlib |
2026-10-28T21:09:58.893Z | 2026-10-28T21:09:58.893Z | |
| cve-2026-118668 | LangGraph JavaScript custom authentication may permit … |
langchain-ai |
langgraph-api |
2026-10-28T21:06:43.157Z | 2026-10-28T21:06:43.157Z | |
| cve-2026-102479 | 8.7 (v4.0) | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1… |
Eclipse Foundation |
Eclipse Vert.x |
2026-10-14T18:43:54.623Z | 2026-10-28T21:06:12.367Z |
| cve-2026-118667 | LangGraph: Unencoded identifiers in LangGraph SDK v3 s… |
langchain-ai |
langgraph |
2026-10-28T20:51:46.657Z | 2026-10-28T20:51:46.657Z | |
| cve-2026-118666 | GraphQL Tools: Shared legacy executor routes one subsc… |
ardatan |
graphql-tools |
2026-10-28T20:45:58.056Z | 2026-10-28T20:45:58.056Z | |
| cve-2026-91243 | Vulnerability in the Oracle Business Process Mana… |
Oracle Corporation |
Oracle Business Process Management Suite |
2026-10-20T21:24:51.000Z | 2026-10-28T20:44:17.570Z | |
| cve-2026-91242 | Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-10-20T21:24:50.644Z | 2026-10-28T20:43:33.393Z | |
| cve-2026-91241 | Vulnerability in the Oracle Business Intelligence… |
Oracle Corporation |
Oracle Business Intelligence Enterprise Edition |
2026-10-20T21:24:50.301Z | 2026-10-28T20:42:14.100Z | |
| cve-2026-118665 | GraphQL Tools: Per-request connection parameters persi… |
ardatan |
graphql-tools |
2026-10-28T20:41:47.228Z | 2026-10-28T20:41:47.228Z | |
| cve-2026-91240 | Vulnerability in the Oracle WebCenter Sites produ… |
Oracle Corporation |
Oracle WebCenter Sites |
2026-10-20T21:24:49.963Z | 2026-10-28T20:41:30.199Z | |
| cve-2026-91239 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:49.629Z | 2026-10-28T20:40:37.395Z | |
| cve-2026-91261 | Vulnerability in the Oracle WebCenter Content pro… |
Oracle Corporation |
Oracle WebCenter Content |
2026-10-20T21:24:57.080Z | 2026-10-28T20:38:53.386Z | |
| cve-2026-91260 | Vulnerability in the iProcurement product of Orac… |
Oracle Corporation |
iProcurement |
2026-10-20T21:24:56.727Z | 2026-10-28T20:38:13.820Z | |
| cve-2026-91259 | Vulnerability in the Oracle Identity Manager prod… |
Oracle Corporation |
Oracle Identity Manager |
2026-10-20T21:24:56.380Z | 2026-10-28T20:37:22.895Z | |
| cve-2026-118664 | decode-uri-component: Denial of service via quadratic … |
SamVerschueren |
decode-uri-component |
2026-10-28T20:37:19.057Z | 2026-10-28T20:37:19.057Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000008 | SimZip (Simple Zip Viewer) vulnerable to directory traversal | 2014-01-24T12:34+09:00 | 2014-01-28T18:03+09:00 |
| jvndb-2014-000009 | OpenPNE vulnerable to PHP Object Injection | 2014-01-24T12:36+09:00 | 2014-01-28T18:02+09:00 |
| jvndb-2014-000005 | EC-CUBE vulnerable to information alteration | 2014-01-22T15:27+09:00 | 2014-01-27T09:51+09:00 |
| jvndb-2014-000007 | Information disclosure vulnerability in Sleipnir Mobile for Android | 2014-01-22T15:29+09:00 | 2014-01-27T09:47+09:00 |
| jvndb-2014-000004 | NeoFiler vulnerable to directory traversal | 2014-01-10T14:44+09:00 | 2014-01-15T12:32+09:00 |
| jvndb-2014-000003 | Security File Manager vulnerable to directory traversal | 2014-01-10T14:42+09:00 | 2014-01-10T14:42+09:00 |
| jvndb-2014-000002 | tetra filer vulnerable to directory traversal | 2014-01-10T14:41+09:00 | 2014-01-10T14:41+09:00 |
| jvndb-2014-000001 | ZIP with Pass vulnerable to directory traversal | 2014-01-10T14:34+09:00 | 2014-01-10T14:34+09:00 |
| jvndb-2013-000120 | IrfanView vulnerable to buffer overflow | 2013-12-24T15:02+09:00 | 2014-01-07T19:25+09:00 |
| jvndb-2013-000124 | Cybozu Garoon vulnerable to SQL injection | 2013-12-25T12:21+09:00 | 2014-01-07T19:22+09:00 |
| jvndb-2013-000125 | Cybozu Garoon Keitai vulnerable to authentication bypass | 2013-12-25T12:22+09:00 | 2014-01-07T16:12+09:00 |
| jvndb-2013-000126 | HP Autonomy Ultraseek vulnerable to cross-site scripting | 2013-12-26T12:32+09:00 | 2013-12-26T12:32+09:00 |
| jvndb-2013-005669 | Xml eXternal Entity Vulnerability in Hitachi Cosminexus | 2013-12-25T19:13+09:00 | 2013-12-25T19:13+09:00 |
| jvndb-2013-000123 | VMware ESX and ESXi may allow access to arbitrary files | 2013-12-24T15:02+09:00 | 2013-12-25T14:01+09:00 |
| jvndb-2013-005262 | Buffer Overflow Vulnerability in the log function of Interstage HTTP Server | 2013-11-28T16:38+09:00 | 2013-12-18T16:16+09:00 |
| jvndb-2013-000119 | Juniper ScreenOS vulnerable to denial-of-service (DoS) | 2013-12-13T12:23+09:00 | 2013-12-18T15:23+09:00 |
| jvndb-2013-000118 | Cybozu Dezie vulnerable to cross-site scripting | 2013-12-10T14:13+09:00 | 2013-12-18T14:51+09:00 |
| jvndb-2013-000117 | Cybozu Garoon vulnerable to session fixation | 2013-12-03T13:51+09:00 | 2013-12-06T10:52+09:00 |
| jvndb-2013-000116 | Cybozu Garoon vulnerable to mail header injection | 2013-12-03T13:49+09:00 | 2013-12-06T10:50+09:00 |
| jvndb-2013-000115 | Cybozu Garoon vulnerable to denial-of-service (DoS) | 2013-12-03T13:46+09:00 | 2013-12-06T10:48+09:00 |
| jvndb-2013-000114 | Cybozu Garoon vulnerable to SQL injection | 2013-12-03T13:45+09:00 | 2013-12-06T10:47+09:00 |
| jvndb-2013-000113 | Multiple cross-site scripting vulnerabilities in Cybozu Garoon | 2013-12-03T13:37+09:00 | 2013-12-06T10:42+09:00 |
| jvndb-2013-000112 | TOWN (modified version) vulnerable to directory traversal | 2013-11-29T14:23+09:00 | 2013-12-06T10:38+09:00 |
| jvndb-2013-000110 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:51+09:00 | 2013-11-26T16:15+09:00 |
| jvndb-2013-000109 | D-Link DES-3800 Series vulnerable to denial-of-service (DoS) | 2013-11-22T14:50+09:00 | 2013-11-26T16:09+09:00 |
| jvndb-2013-000108 | KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates | 2013-11-22T17:39+09:00 | 2013-11-26T16:02+09:00 |
| jvndb-2013-000104 | EC-CUBE vulnerable to information disclosure | 2013-11-20T15:19+09:00 | 2013-11-22T14:42+09:00 |
| jvndb-2013-000105 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:34+09:00 | 2013-11-22T14:40+09:00 |
| jvndb-2013-000097 | EC-CUBE vulnerable to cross-site request forgery | 2013-11-20T15:40+09:00 | 2013-11-22T14:37+09:00 |
| jvndb-2013-000098 | EC-CUBE information disclosure vulnerability | 2013-11-20T15:48+09:00 | 2013-11-22T14:35+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0181 | Vulnérabilité dans les produits Moxa | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0180 | Vulnérabilité dans Cisco Secure Client | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0179 | Vulnérabilité dans Symantec Carbon Black Cloud | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0177 | Multiples vulnérabilités dans les produits VMware | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0176 | Multiples vulnérabilités dans les produits Mozilla | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0175 | Vulnérabilité dans LibreOffice | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0174 | Multiples vulnérabilités dans Google Chrome | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0173 | Multiples vulnérabilités dans Google Pixel | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0172 | Multiples vulnérabilités dans Google Android | 2025-03-04T00:00:00.000000 | 2025-03-04T00:00:00.000000 |
| certfr-2025-avi-0171 | Vulnérabilité dans Python | 2025-03-03T00:00:00.000000 | 2025-03-03T00:00:00.000000 |
| certfr-2025-avi-0170 | Multiples vulnérabilités dans les produits IBM | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0169 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0168 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0167 | Vulnérabilité dans Synology DSM | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0166 | Multiples vulnérabilités dans MongoDB | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0165 | Vulnérabilité dans Xen | 2025-02-28T00:00:00.000000 | 2025-02-28T00:00:00.000000 |
| certfr-2025-avi-0164 | Multiples vulnérabilités dans GitLab | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0163 | Vulnérabilité dans les commutateurs Cisco Nexus | 2025-02-27T00:00:00.000000 | 2025-02-27T00:00:00.000000 |
| certfr-2025-avi-0162 | Multiples vulnérabilités dans GLPI | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0161 | Vulnérabilité dans LibreOffice | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0160 | Vulnérabilité dans Google Chrome | 2025-02-26T00:00:00.000000 | 2025-02-26T00:00:00.000000 |
| certfr-2025-avi-0159 | Vulnérabilité dans Progress Telerik Reporting | 2025-02-25T00:00:00.000000 | 2025-02-25T00:00:00.000000 |
| certfr-2025-avi-0158 | Multiples vulnérabilités dans les produits NetApp | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0157 | Vulnérabilité dans Exim | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0156 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0155 | Vulnérabilité dans les produits Moxa | 2025-02-24T00:00:00.000000 | 2025-02-24T00:00:00.000000 |
| certfr-2025-avi-0154 | Multiples vulnérabilités dans les produits IBM | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0153 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0152 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0151 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |