Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-105272 | 4.2 (v3.0) 2.3 (v4.0) | GROWI contains an authorization bypass vulnerabil… |
GROWI, Inc. |
GROWI |
2026-10-28T02:21:24.458Z | 2026-10-28T02:21:24.458Z |
| cve-2026-118378 | 8.5 (v4.0) 7.8 (v3.1) | Tabularis before 0.28.0 SQL Injection via MCP describe… |
TabularisDB |
tabularis |
2026-10-28T02:03:24.996Z | 2026-11-02T20:08:49.001Z |
| cve-2026-118377 | 8.7 (v4.0) 7.5 (v3.1) | mews/pos through 2.0.0 Missing Hash Verification in 3D… |
mewebstudio |
pos |
2026-10-28T02:03:24.283Z | 2026-10-28T02:03:24.283Z |
| cve-2026-118376 | 6 (v4.0) 5.3 (v3.1) | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 … |
Tencent |
WeKnora |
2026-10-28T02:03:23.589Z | 2026-10-28T16:11:20.194Z |
| cve-2026-118375 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp b8841 before b11865 Stack-based Buffer Overf… |
ggml-org |
llama.cpp |
2026-10-28T02:03:22.895Z | 2026-10-28T02:03:22.895Z |
| cve-2026-118374 | 8.2 (v4.0) 5.9 (v3.1) | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:22.183Z | 2026-11-02T19:57:56.079Z |
| cve-2026-118373 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 Cleartext Transmissio… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:21.525Z | 2026-10-28T02:03:21.525Z |
| cve-2026-118372 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AI… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.849Z | 2026-10-28T16:11:41.029Z |
| cve-2026-118371 | 6.3 (v4.0) 3.7 (v3.1) | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq… |
OpenBSD |
LibreSSL |
2026-10-28T02:03:20.152Z | 2026-10-28T02:03:20.152Z |
| cve-2026-118370 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 Integer Overflow in storeAtts v… |
libexpat |
libexpat |
2026-10-28T02:03:19.447Z | 2026-11-02T19:56:23.246Z |
| cve-2026-117610 | 8.2 (v4.0) 5.9 (v3.1) | libexpat through 2.9.0 NULL Pointer Dereference via Ex… |
libexpat |
libexpat |
2026-10-28T02:03:18.766Z | 2026-10-28T02:03:18.766Z |
| cve-2026-117609 | 7.1 (v4.0) 7.1 (v3.1) | rtl_433 through 25.12 Stack-Based Buffer Overflow via … |
merbanan |
rtl_433 |
2026-10-28T02:03:18.083Z | 2026-10-28T16:12:02.323Z |
| cve-2026-117608 | 6.9 (v4.0) 6.1 (v3.1) | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 I… |
assimp |
assimp |
2026-10-28T02:03:17.365Z | 2026-10-28T02:03:17.365Z |
| cve-2026-117607 | 8.6 (v4.0) 7.2 (v3.1) | Xerte Online Toolkits through 3.15.5 RCE via Language … |
thexerteproject |
xerteonlinetoolkits |
2026-10-28T02:03:16.664Z | 2026-11-02T19:55:05.548Z |
| cve-2026-117606 | 5.3 (v4.0) 5.4 (v3.1) | NexoPOS through 6.3.0 Missing Authorization via Cash R… |
Blair2004 |
NexoPOS |
2026-10-28T02:03:15.947Z | 2026-10-28T02:03:15.947Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2015-20129 | 8.6 (v4.0) 8.8 (v3.1) | CrushFTP before 7.3.0 Cross-Site Request Forgery via /… |
CrushFTP |
CrushFTP |
2026-10-28T02:03:14.501Z | 2026-10-28T02:03:14.501Z |
| cve-2014-125138 | 8.7 (v4.0) 8.8 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.805Z | 2026-11-02T19:54:09.045Z |
| cve-2014-125137 | 7.1 (v4.0) 6.5 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.087Z | 2026-10-28T02:03:13.087Z |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| cve-2013-20009 | 4.8 (v4.0) 4.8 (v3.1) | Linksys WAG200G through 1.01.06 Stored XSS via policy_… |
Linksys |
WAG200G |
2026-10-28T02:03:11.721Z | 2026-10-28T02:03:11.721Z |
| cve-2013-20008 | 7 (v4.0) 6.8 (v3.1) | Linksys WAG200G through 1.01.06 Admin Password Change … |
Linksys |
WAG200G |
2026-10-28T02:03:11.024Z | 2026-11-02T19:50:18.154Z |
| cve-2013-20007 | 8.6 (v4.0) 7.2 (v3.1) | Linksys WAG200G through 1.01.06 OS Command Injection v… |
Linksys |
WAG200G |
2026-10-28T02:03:10.353Z | 2026-10-28T02:03:10.353Z |
| cve-2026-118272 | a2ui-project a2ui Error data-context.ts DataContext.di… |
a2ui-project |
a2ui |
2026-10-28T02:00:21.447Z | 2026-10-28T16:12:32.352Z | |
| cve-2026-106013 | Jupiter X Core <= 4.61.0 - Unauthenticated Authenticat… |
artbees |
Jupiter X Core |
2026-10-28T01:30:48.320Z | 2026-10-29T01:52:00.079Z | |
| cve-2026-118271 | a2ui-project a2ui data-context Resolver data-context.t… |
a2ui-project |
a2ui |
2026-10-28T01:30:47.285Z | 2026-10-28T01:30:47.285Z | |
| cve-2026-110879 | 9.8 (v3.1) | jackson-databind: PolymorphicTypeValidator bypass via … |
FasterXML |
jackson-databind |
2026-10-28T00:07:41.577Z | 2026-10-28T00:07:41.577Z |
| cve-2026-110747 | 7.5 (v3.1) | jackson-dataformat-protobuf: integer overflow in Proto… |
FasterXML |
jackson-dataformat-protobuf |
2026-10-28T00:02:32.462Z | 2026-10-28T00:02:32.462Z |
| cve-2026-104895 | 7.5 (v3.1) | jackson-dataformat-smile: unbounded eager byte[] alloc… |
FasterXML |
jackson-dataformat-smile |
2026-10-28T00:01:44.496Z | 2026-10-28T00:01:44.496Z |
| cve-2026-106972 | N/A | Uncontrolled recursion in MessagePack\BufferUnpac… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-30T17:14:25.522Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000057 | Orchard vulnerable to cross-site scripting | 2013-06-13T13:49+09:00 | 2013-06-17T12:01+09:00 |
| jvndb-2013-000056 | Galapagos Browser vulnerable in the WebView class | 2013-06-11T13:48+09:00 | 2013-06-18T17:55+09:00 |
| jvndb-2013-000055 | Angel Browser vulnerable in the WebView class | 2013-06-11T13:40+09:00 | 2013-06-18T17:52+09:00 |
| jvndb-2013-000054 | Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates | 2013-06-07T15:03+09:00 | 2013-06-07T15:03+09:00 |
| jvndb-2013-000053 | Internet Explorer vulnerable to information disclosure | 2013-06-07T13:59+09:00 | 2013-06-07T13:59+09:00 |
| jvndb-2013-000052 | HP ProCurve 1700 series switches vulnerable to cross-site request forgery | 2013-06-03T14:28+09:00 | 2013-06-03T14:28+09:00 |
| jvndb-2013-000051 | Adobe Reader X vulnerable to sandbox bypass | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000050 | Safari information disclosure vulnerability | 2013-05-31T15:44+09:00 | 2013-05-31T15:44+09:00 |
| jvndb-2013-000049 | FileMaker Pro vulnerable to cross-site scripting | 2013-05-31T15:43+09:00 | 2015-05-22T11:34+09:00 |
| jvndb-2013-000048 | FileMaker Pro fails to verify SSL server certificates | 2013-05-31T15:43+09:00 | 2014-09-18T21:08+09:00 |
| jvndb-2013-000047 | Content Provider in MovatwiTouch fails to restrict access permissions | 2013-05-29T15:32+09:00 | 2013-05-29T15:32+09:00 |
| jvndb-2013-000046 | Sleipnir Mobile for Android vulnerable to address bar spoofing | 2013-05-29T15:19+09:00 | 2013-05-29T15:19+09:00 |
| jvndb-2013-000045 | Yahoo! Browser vulnerable to address bar spoofing | 2013-05-27T15:04+09:00 | 2013-05-27T15:04+09:00 |
| jvndb-2013-002796 | Arbitrary Commands Execution Vulnerability in JP1/Integrated Management - TELstaff Alarm View | 2013-05-24T14:37+09:00 | 2013-05-24T14:37+09:00 |
| jvndb-2013-000044 | EC-CUBE vulnerable to information disclosure as a result of improper input checking | 2013-05-23T15:46+09:00 | 2013-05-23T15:46+09:00 |
| jvndb-2013-000043 | EC-CUBE fails to restrict access permissions | 2013-05-23T15:42+09:00 | 2013-06-03T16:13+09:00 |
| jvndb-2013-000042 | EC-CUBE vulnerable to session fixation | 2013-05-23T14:15+09:00 | 2013-05-23T14:15+09:00 |
| jvndb-2013-000041 | EC-CUBE vulnerable to cross-site scripting | 2013-05-23T14:11+09:00 | 2013-05-23T14:11+09:00 |
| jvndb-2013-002770 | Cross-site Scripting Vulnerability in JP1/Automatic Operation | 2013-05-21T15:45+09:00 | 2013-05-21T15:45+09:00 |
| jvndb-2013-000040 | Cross-site scripting vulnerability in the web2py social bookmarking widget | 2013-05-20T15:16+09:00 | 2013-05-20T15:16+09:00 |
| jvndb-2013-000039 | Wi-Fi Spot Configuration Software vulnerability in the connection process | 2013-05-15T14:25+09:00 | 2013-06-19T09:58+09:00 |
| jvndb-2013-000038 | OpenPNE vulnerable to cross-site scripting | 2013-05-13T13:39+09:00 | 2013-06-19T09:56+09:00 |
| jvndb-2013-000035 | Online Service Gate vulnerable in Office 365 password management | 2013-05-08T15:08+09:00 | 2013-05-08T15:08+09:00 |
| jvndb-2013-000037 | Yahoo! Browser vulnerable to address bar spoofing | 2013-04-26T15:50+09:00 | 2013-04-26T15:50+09:00 |
| jvndb-2013-000036 | jigbrowser+ for Android vulnerable to address bar spoofing | 2013-04-26T15:05+09:00 | 2013-04-26T15:05+09:00 |
| jvndb-2013-002427 | Buffer Overflow Vulnerability in Hitachi IT Operations Director | 2013-04-24T09:55+09:00 | 2013-04-24T09:55+09:00 |
| jvndb-2013-000034 | Multiple Cybozu products vulnerable to cross-site request forgery | 2013-04-15T17:08+09:00 | 2013-06-25T18:36+09:00 |
| jvndb-2013-000033 | Sleipnir Mobile for Android loads arbitrary Extension API | 2013-04-12T12:41+09:00 | 2013-04-12T12:41+09:00 |
| jvndb-2013-000032 | Sleipnir for Windows vulnerable to address bar spoofing | 2013-04-11T14:14+09:00 | 2013-04-11T14:14+09:00 |
| jvndb-2013-000031 | Active! mail vulnerable to information disclosure | 2013-04-04T14:43+09:00 | 2013-06-25T18:30+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0114 | Multiples vulnérabilités dans les produits SAP | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0113 | Multiples vulnérabilités dans les produits Siemens | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0112 | Vulnérabilité dans les produits Schneider Electric | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0111 | Multiples vulnérabilités dans les produits SolarWinds | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0110 | Vulnérabilité dans les produits Apple | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0109 | Vulnérabilité dans Nginx | 2025-02-11T00:00:00.000000 | 2025-02-11T00:00:00.000000 |
| certfr-2025-avi-0108 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0107 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0106 | Multiples vulnérabilités dans les produits IBM | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0105 | Multiples vulnérabilités dans Microsoft Edge | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0104 | Multiples vulnérabilités dans les produits Moxa | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0103 | Vulnérabilité dans les produits Synology | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0102 | Multiples vulnérabilités dans les produits Tenable | 2025-02-07T00:00:00.000000 | 2025-02-10T00:00:00.000000 |
| certfr-2025-avi-0101 | Vulnérabilité dans les produits Kaspersky | 2025-02-07T00:00:00.000000 | 2025-02-07T00:00:00.000000 |
| certfr-2025-avi-0100 | Multiples vulnérabilités dans les produits Cisco | 2025-02-06T00:00:00.000000 | 2025-02-06T00:00:00.000000 |
| certfr-2025-avi-0099 | Multiples vulnérabilités dans les produits F5 | 2025-02-06T00:00:00.000000 | 2025-02-06T00:00:00.000000 |
| certfr-2025-avi-0098 | Multiples vulnérabilités dans les produits Curl | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0097 | Multiples vulnérabilités dans les produits Mozilla | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0096 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0095 | Multiples vulnérabilités dans Google Chrome | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0094 | Vulnérabilité dans les produits Veeam | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0093 | Vulnérabilité dans Google Pixel | 2025-02-05T00:00:00.000000 | 2025-02-05T00:00:00.000000 |
| certfr-2025-avi-0092 | Multiples vulnérabilités dans ISC BIND | 2025-02-04T00:00:00.000000 | 2025-02-04T00:00:00.000000 |
| certfr-2025-avi-0091 | Multiples vulnérabilités dans Google Android | 2025-02-04T00:00:00.000000 | 2025-02-04T00:00:00.000000 |
| certfr-2025-avi-0090 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2025-02-03T00:00:00.000000 | 2025-02-03T00:00:00.000000 |
| certfr-2025-avi-0089 | Vulnérabilité dans Python | 2025-02-03T00:00:00.000000 | 2025-02-03T00:00:00.000000 |
| certfr-2025-avi-0088 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2025-avi-0087 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2025-avi-0086 | Multiples vulnérabilités dans les produits IBM | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2025-avi-0085 | Multiples vulnérabilités dans les produits VMware | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |