Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-91257 | Vulnerability in the iSupport product of Oracle E… |
Oracle Corporation |
iSupport |
2026-10-20T21:24:56.023Z | 2026-10-28T20:36:29.887Z | |
| cve-2026-91256 | Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-10-20T21:24:55.683Z | 2026-10-28T20:35:31.026Z | |
| cve-2026-118663 | @hono/node-server: `serveStatic` decodes the request p… |
honojs |
node-server |
2026-10-28T20:35:22.948Z | 2026-10-28T20:35:22.948Z | |
| cve-2026-91253 | Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-10-20T21:24:54.586Z | 2026-10-28T20:34:44.144Z | |
| cve-2026-91252 | Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-10-20T21:24:54.240Z | 2026-10-28T20:33:46.565Z | |
| cve-2026-118662 | Vite: `server.fs.deny` bypassed with queries |
vitejs |
vite |
2026-10-28T20:33:36.440Z | 2026-10-28T20:33:36.440Z | |
| cve-2026-91251 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:53.905Z | 2026-10-28T20:32:41.368Z | |
| cve-2026-91250 | Vulnerability in the Oracle SOA Suite product of … |
Oracle Corporation |
Oracle SOA Suite |
2026-10-20T21:24:53.556Z | 2026-10-28T20:31:53.540Z | |
| cve-2026-91249 | Vulnerability in the Oracle Solaris product of Or… |
Oracle Corporation |
Oracle Solaris |
2026-10-20T21:24:53.206Z | 2026-10-28T20:31:04.330Z | |
| cve-2026-118661 | Happy DOM: Cookie scope forgery: no DNS-label boundary… |
capricorn86 |
happy-dom |
2026-10-28T20:30:23.868Z | 2026-10-28T20:30:23.868Z | |
| cve-2026-91272 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:00.972Z | 2026-10-28T20:29:38.610Z | |
| cve-2026-91271 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:00.594Z | 2026-10-28T20:28:22.615Z | |
| cve-2026-91270 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:00.253Z | 2026-10-28T20:27:15.013Z | |
| cve-2026-91269 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:24:59.898Z | 2026-10-28T20:26:12.423Z | |
| cve-2026-91268 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:24:59.556Z | 2026-10-28T20:24:48.370Z | |
| cve-2026-118660 | Happy DOM: SSRF via iframe and link stylesheet when pa… |
capricorn86 |
happy-dom |
2026-10-28T20:23:10.122Z | 2026-10-28T20:23:10.122Z | |
| cve-2026-91267 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:24:59.218Z | 2026-10-28T20:22:13.909Z | |
| cve-2026-91266 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:24:58.846Z | 2026-10-28T20:21:03.977Z | |
| cve-2026-118659 | @happy-dom/server-renderer: ServerRendererServer Targe… |
capricorn86 |
happy-dom |
2026-10-28T20:20:29.561Z | 2026-10-28T20:20:29.561Z | |
| cve-2026-91264 | Vulnerability in the PeopleSoft Enterprise SCM Ma… |
Oracle Corporation |
PeopleSoft Enterprise SCM Manufacturing |
2026-10-20T21:24:58.142Z | 2026-10-28T20:19:32.709Z | |
| cve-2026-91263 | Vulnerability in the PeopleSoft Enterprise People… |
Oracle Corporation |
PeopleSoft Enterprise PeopleTools |
2026-10-20T21:24:57.775Z | 2026-10-28T20:18:29.170Z | |
| cve-2026-91262 | Vulnerability in the Oracle WebCenter Content pro… |
Oracle Corporation |
Oracle WebCenter Content |
2026-10-20T21:24:57.433Z | 2026-10-28T20:17:37.675Z | |
| cve-2026-118658 | Echo: Arbitrary Scheme Injection in WWWRedirect/NonWWW… |
labstack |
echo |
2026-10-28T20:17:11.083Z | 2026-10-28T20:17:11.083Z | |
| cve-2026-77468 | Lychee: Missing Authentication for Critical Function a… |
LycheeOrg |
Lychee |
2026-10-15T16:35:21.137Z | 2026-10-28T20:16:47.871Z | |
| cve-2026-91282 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:04.685Z | 2026-10-28T20:16:27.290Z | |
| cve-2026-91281 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:04.333Z | 2026-10-28T20:15:35.896Z | |
| cve-2026-55103 | Discourse ActivityPub: Fix inbound actor validation an… |
discourse |
discourse-activity-pub |
2026-10-15T17:05:41.414Z | 2026-10-28T20:15:11.416Z | |
| cve-2026-91280 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:03.887Z | 2026-10-28T20:14:38.603Z | |
| cve-2026-118657 | Echo: HTTPS Redirect and HSTS Bypass via Unconditional… |
labstack |
echo |
2026-10-28T20:14:09.883Z | 2026-10-28T20:14:09.883Z | |
| cve-2026-91279 | Vulnerability in the JD Edwards EnterpriseOne Too… |
Oracle Corporation |
JD Edwards EnterpriseOne Tools |
2026-10-20T21:25:03.513Z | 2026-10-28T20:13:57.803Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000106 | EC-CUBE information disclosure vulnerability | 2013-11-20T16:14+09:00 | 2013-11-22T14:18+09:00 |
| jvndb-2013-000107 | EC-CUBE vulnerable to cross-site scripting | 2013-11-20T15:56+09:00 | 2013-11-22T13:57+09:00 |
| jvndb-2011-003557 | ASP.NET vulnerable to open redirect | 2013-11-15T15:54+09:00 | 2013-11-15T15:54+09:00 |
| jvndb-2013-000103 | Ichitaro series vulnerable to arbitrary code execution | 2013-11-12T14:33+09:00 | 2013-11-15T10:22+09:00 |
| jvndb-2013-000101 | TOWN (modified version) vulnerable to cross-site scripting | 2013-11-07T13:59+09:00 | 2013-11-11T16:34+09:00 |
| jvndb-2013-000100 | Tiki Wiki CMS Groupware vulnerable to SQL injection | 2013-11-05T15:11+09:00 | 2013-11-07T17:57+09:00 |
| jvndb-2013-000099 | Tiki Wiki CMS Groupware vulnerable to cross-site scripting | 2013-11-05T15:05+09:00 | 2013-11-07T17:55+09:00 |
| jvndb-2013-000102 | Page Scroller vulnerable to cross-site scripting | 2013-11-07T14:03+09:00 | 2013-11-07T14:03+09:00 |
| jvndb-2013-000095 | HDL-A and HDL2-A Series vulnerable in session management | 2013-10-18T14:30+09:00 | 2013-10-22T17:56+09:00 |
| jvndb-2013-000093 | Internet Explorer vulnerable to arbitrary code execution | 2013-09-19T14:39+09:00 | 2013-10-10T18:12+09:00 |
| jvndb-2013-000091 | SEIL Series routers vulnerable in RADIUS authentication | 2013-09-20T14:52+09:00 | 2013-10-08T15:36+09:00 |
| jvndb-2013-000094 | Accela BizSearch vulnerable to cross-site scripting | 2013-10-04T12:36+09:00 | 2013-10-08T14:56+09:00 |
| jvndb-2013-004410 | Arbitrary Commands Execution Vulnerability in JP1/Base | 2013-10-03T19:26+09:00 | 2013-10-03T19:26+09:00 |
| jvndb-2013-004409 | Arbitrary Commands Execution Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | 2013-10-03T19:24+09:00 | 2013-10-03T19:24+09:00 |
| jvndb-2013-000092 | SEIL Series routers vulnerable to buffer overflow | 2013-09-20T14:57+09:00 | 2013-09-30T16:46+09:00 |
| jvndb-2013-000090 | D-Link DES-3810 Series vulnerable to denial-of-service (DoS) | 2013-09-20T15:12+09:00 | 2013-09-30T15:52+09:00 |
| jvndb-2013-000089 | D-Link DWL-2100AP vulnerable to denial-of-service (DoS) | 2013-09-20T15:07+09:00 | 2013-09-30T15:47+09:00 |
| jvndb-2013-004319 | Multiple vulnerabilities in Java bundled with Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:51+09:00 | 2013-09-27T14:51+09:00 |
| jvndb-2013-004318 | Multiple vulnerabilities in Hitachi JP1/Cm2/Network Node Manager i | 2013-09-27T14:49+09:00 | 2013-09-27T14:49+09:00 |
| jvndb-2013-000088 | ChamaCargo vulnerable to cross-site scripting | 2013-09-13T12:21+09:00 | 2013-09-18T16:12+09:00 |
| jvndb-2013-000086 | Opera vulnerable to cross-site scripting | 2013-09-12T14:13+09:00 | 2013-09-17T14:20+09:00 |
| jvndb-2013-000085 | VMware ESX and ESXi vulnerable to buffer overflow | 2013-09-06T14:03+09:00 | 2013-09-11T14:06+09:00 |
| jvndb-2013-000084 | VMware ESX and ESXi vulnerable to directory traversal | 2013-09-06T13:59+09:00 | 2013-09-11T13:59+09:00 |
| jvndb-2013-000082 | Cybozu Office vulnerable to cross-site scripting | 2013-09-10T13:56+09:00 | 2013-09-11T13:34+09:00 |
| jvndb-2013-000081 | EC-CUBE vulnerable to directory traversal when used in Windows | 2013-08-30T14:38+09:00 | 2013-09-02T18:25+09:00 |
| jvndb-2013-000071 | Oracle Outside In vulnerable to denial-of-service (DoS) | 2013-07-17T13:56+09:00 | 2013-08-28T14:31+09:00 |
| jvndb-2013-000078 | Yafuoku! contains an issue where it fails to verify SSL server certificates | 2013-08-19T15:35+09:00 | 2013-08-23T18:43+09:00 |
| jvndb-2013-000079 | Yahoo! Japan Shopping for Android contains an issue where it fails to verify SSL server certificates | 2013-08-19T15:50+09:00 | 2013-08-23T18:42+09:00 |
| jvndb-2013-000080 | PHP OpenID Library vulnerable to XML external entity injection | 2013-08-21T14:26+09:00 | 2013-08-23T18:38+09:00 |
| jvndb-2013-000077 | Cybozu Mailwise vulnerable to information disclosure | 2013-08-13T12:22+09:00 | 2013-08-20T11:37+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0150 | Multiples vulnérabilités dans Tenable Identity Exposure | 2025-02-21T00:00:00.000000 | 2025-02-21T00:00:00.000000 |
| certfr-2025-avi-0149 | Multiples vulnérabilités dans Drupal | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0148 | Vulnérabilité dans Microsoft Power Pages | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0147 | Vulnérabilité dans les produits Moxa | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0146 | Vulnérabilité dans Symantec Diagnostic Tool | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0145 | Vulnérabilité dans Wireshark | 2025-02-20T00:00:00.000000 | 2025-02-20T00:00:00.000000 |
| certfr-2025-avi-0144 | Multiples vulnérabilités dans les produits Atlassian | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0143 | Multiples vulnérabilités dans Google Chrome | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0142 | Multiples vulnérabilités dans les produits Citrix | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0141 | Vulnérabilité dans Joomla! | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0140 | Vulnérabilité dans Mozilla Firefox | 2025-02-19T00:00:00.000000 | 2025-02-19T00:00:00.000000 |
| certfr-2025-avi-0139 | Multiples vulnérabilités dans OpenSSH | 2025-02-18T00:00:00.000000 | 2025-02-18T00:00:00.000000 |
| certfr-2025-avi-0138 | Multiples vulnérabilités dans Moodle | 2025-02-18T00:00:00.000000 | 2025-02-18T00:00:00.000000 |
| certfr-2025-avi-0137 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-17T00:00:00.000000 | 2025-02-17T00:00:00.000000 |
| certfr-2025-avi-0136 | Multiples vulnérabilités dans Synology Active Backup for Business | 2025-02-17T00:00:00.000000 | 2025-02-17T00:00:00.000000 |
| certfr-2025-avi-0129 | Multiples vulnérabilités dans OpenSSL | 2025-02-13T00:00:00.000000 | 2025-02-17T00:00:00.000000 |
| certfr-2025-avi-0135 | Multiples vulnérabilités dans IBM QRadar Deployment Intelligence App | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0134 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0133 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0132 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0131 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0130 | Vulnérabilité dans PostgreSQL | 2025-02-14T00:00:00.000000 | 2025-02-14T00:00:00.000000 |
| certfr-2025-avi-0128 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-02-13T00:00:00.000000 | 2025-02-13T00:00:00.000000 |
| certfr-2025-avi-0127 | Multiples vulnérabilités dans Google Chrome | 2025-02-13T00:00:00.000000 | 2025-02-13T00:00:00.000000 |
| certfr-2025-avi-0123 | Multiples vulnérabilités dans GitLab | 2025-02-12T00:00:00.000000 | 2025-02-13T00:00:00.000000 |
| certfr-2025-avi-0063 | Multiples vulnérabilités dans GitLab | 2025-01-23T00:00:00.000000 | 2025-02-13T00:00:00.000000 |
| certfr-2025-avi-0126 | Vulnérabilité dans les produits Juniper Networks | 2025-02-12T00:00:00.000000 | 2025-02-12T00:00:00.000000 |
| certfr-2025-avi-0125 | Multiples vulnérabilités dans les produits SolarWinds | 2025-02-12T00:00:00.000000 | 2025-02-12T00:00:00.000000 |
| certfr-2025-avi-0124 | Vulnérabilité dans le greffon "Saisies pour formulaire" pour SPIP | 2025-02-12T00:00:00.000000 | 2025-02-12T00:00:00.000000 |
| certfr-2025-avi-0122 | Multiples vulnérabilités dans les produits Adobe | 2025-02-12T00:00:00.000000 | 2025-02-12T00:00:00.000000 |