Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-117608 | 6.9 (v4.0) 6.1 (v3.1) | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 I… |
assimp |
assimp |
2026-10-28T02:03:17.365Z | 2026-10-28T02:03:17.365Z |
| cve-2026-117607 | 8.6 (v4.0) 7.2 (v3.1) | Xerte Online Toolkits through 3.15.5 RCE via Language … |
thexerteproject |
xerteonlinetoolkits |
2026-10-28T02:03:16.664Z | 2026-11-02T19:55:05.548Z |
| cve-2026-117606 | 5.3 (v4.0) 5.4 (v3.1) | NexoPOS through 6.3.0 Missing Authorization via Cash R… |
Blair2004 |
NexoPOS |
2026-10-28T02:03:15.947Z | 2026-10-28T02:03:15.947Z |
| cve-2026-117605 | 5.3 (v4.0) 4.3 (v3.1) | nopCommerce before 5.00.0 Missing Authorization via Ad… |
nopSolutions |
nopCommerce |
2026-10-28T02:03:15.191Z | 2026-10-28T16:12:20.568Z |
| cve-2015-20129 | 8.6 (v4.0) 8.8 (v3.1) | CrushFTP before 7.3.0 Cross-Site Request Forgery via /… |
CrushFTP |
CrushFTP |
2026-10-28T02:03:14.501Z | 2026-10-28T02:03:14.501Z |
| cve-2014-125138 | 8.7 (v4.0) 8.8 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.805Z | 2026-11-02T19:54:09.045Z |
| cve-2014-125137 | 7.1 (v4.0) 6.5 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:13.087Z | 2026-10-28T02:03:13.087Z |
| cve-2014-125136 | 8.2 (v4.0) 5.9 (v3.1) | C97net qEngine CMS through 6.0.0, Kemana Directory thr… |
C97net |
qEngine CMS |
2026-10-28T02:03:12.414Z | 2026-10-28T16:12:26.616Z |
| cve-2013-20009 | 4.8 (v4.0) 4.8 (v3.1) | Linksys WAG200G through 1.01.06 Stored XSS via policy_… |
Linksys |
WAG200G |
2026-10-28T02:03:11.721Z | 2026-10-28T02:03:11.721Z |
| cve-2013-20008 | 7 (v4.0) 6.8 (v3.1) | Linksys WAG200G through 1.01.06 Admin Password Change … |
Linksys |
WAG200G |
2026-10-28T02:03:11.024Z | 2026-11-02T19:50:18.154Z |
| cve-2013-20007 | 8.6 (v4.0) 7.2 (v3.1) | Linksys WAG200G through 1.01.06 OS Command Injection v… |
Linksys |
WAG200G |
2026-10-28T02:03:10.353Z | 2026-10-28T02:03:10.353Z |
| cve-2026-118272 | a2ui-project a2ui Error data-context.ts DataContext.di… |
a2ui-project |
a2ui |
2026-10-28T02:00:21.447Z | 2026-10-28T16:12:32.352Z | |
| cve-2026-106013 | Jupiter X Core <= 4.61.0 - Unauthenticated Authenticat… |
artbees |
Jupiter X Core |
2026-10-28T01:30:48.320Z | 2026-10-29T01:52:00.079Z | |
| cve-2026-118271 | a2ui-project a2ui data-context Resolver data-context.t… |
a2ui-project |
a2ui |
2026-10-28T01:30:47.285Z | 2026-10-28T01:30:47.285Z | |
| cve-2026-110879 | 9.8 (v3.1) | jackson-databind: PolymorphicTypeValidator bypass via … |
FasterXML |
jackson-databind |
2026-10-28T00:07:41.577Z | 2026-10-28T00:07:41.577Z |
| cve-2026-110747 | 7.5 (v3.1) | jackson-dataformat-protobuf: integer overflow in Proto… |
FasterXML |
jackson-dataformat-protobuf |
2026-10-28T00:02:32.462Z | 2026-10-28T00:02:32.462Z |
| cve-2026-104895 | 7.5 (v3.1) | jackson-dataformat-smile: unbounded eager byte[] alloc… |
FasterXML |
jackson-dataformat-smile |
2026-10-28T00:01:44.496Z | 2026-10-28T00:01:44.496Z |
| cve-2026-106972 | N/A | Uncontrolled recursion in MessagePack\BufferUnpac… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-30T17:14:25.522Z |
| cve-2026-106971 | N/A | An integer overflow in the MessagePack\BufferUnpa… |
n/a |
n/a |
2026-10-28T00:00:00.000Z | 2026-10-29T17:10:24.531Z |
| cve-2026-104016 | 7.5 (v3.1) | jackson-dataformat-protobuf: signed integer overflow i… |
FasterXML |
jackson-dataformat-protobuf |
2026-10-27T23:52:20.141Z | 2026-10-27T23:52:20.141Z |
| cve-2026-118129 | jeremyckahn Chitchatter PostMessage Bootstrap.tsx isCo… |
jeremyckahn |
Chitchatter |
2026-10-27T23:15:19.571Z | 2026-11-02T19:49:23.471Z | |
| cve-2026-118338 | N/A | Use after free in Animation in Google Chrome prio… |
Google |
Chrome |
2026-10-27T23:03:21.158Z | 2026-10-29T03:55:38.791Z |
| cve-2026-118312 | N/A | Memory corruption in Paint in Google Chrome prior… |
Google |
Chrome |
2026-10-27T23:03:20.918Z | 2026-10-28T17:37:51.486Z |
| cve-2026-118319 | N/A | Memory corruption in Skia in Google Chrome prior … |
Google |
Chrome |
2026-10-27T23:03:20.699Z | 2026-10-29T14:14:27.973Z |
| cve-2026-118309 | N/A | Improper input validation in UI in Google Chrome … |
Google |
Chrome |
2026-10-27T23:03:20.473Z | 2026-10-28T17:37:51.623Z |
| cve-2026-118356 | N/A | Use after free in WTF in Google Chrome prior to 1… |
Google |
Chrome |
2026-10-27T23:03:20.252Z | 2026-10-29T03:55:39.873Z |
| cve-2026-118315 | N/A | Improper input validation in SVG in Google Chrome… |
Google |
Chrome |
2026-10-27T23:03:20.026Z | 2026-10-29T03:55:40.935Z |
| cve-2026-118330 | N/A | Use after free in Browser in Google Chrome on on … |
Google |
Chrome |
2026-10-27T23:03:19.788Z | 2026-10-29T03:55:43.478Z |
| cve-2026-118341 | N/A | Use after free in Modularization in Google Chrome… |
Google |
Chrome |
2026-10-27T23:03:19.541Z | 2026-10-29T03:55:44.953Z |
| cve-2026-118347 | N/A | Use after free in FileSystem in Google Chrome pri… |
Google |
Chrome |
2026-10-27T23:03:19.320Z | 2026-10-29T03:55:46.396Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000025 | OpenWnn for Android vulnerable to information disclosure | 2013-03-29T13:58+09:00 | 2013-03-29T13:58+09:00 |
| jvndb-2013-000030 | Lotus Domino vulnerable to denial-of-service (DoS) | 2013-03-28T12:32+09:00 | 2013-03-28T12:32+09:00 |
| jvndb-2013-000028 | OpenWnn/Flick support vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000027 | COBIME vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000029 | Simeji vulnerable to information disclosure | 2013-03-26T14:51+09:00 | 2013-03-26T14:51+09:00 |
| jvndb-2013-000026 | ArtIME Japanese Input vulnerable to information disclosure | 2013-03-26T13:36+09:00 | 2013-03-26T13:36+09:00 |
| jvndb-2013-000024 | Multiple NEC mobile routers vulnerable to cross-site request forgery | 2013-03-19T13:45+09:00 | 2013-06-25T18:19+09:00 |
| jvndb-2013-000023 | VxWorks Web Server vulnerable to denial-of-service (DoS) | 2013-03-18T14:43+09:00 | 2013-06-25T18:15+09:00 |
| jvndb-2013-000022 | VxWorks WebCLI vulnerable to denial-of-service (DoS) | 2013-03-18T14:40+09:00 | 2013-06-25T18:10+09:00 |
| jvndb-2013-000021 | VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability | 2013-03-18T14:38+09:00 | 2013-06-25T18:06+09:00 |
| jvndb-2013-000018 | VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability | 2013-03-18T14:33+09:00 | 2013-06-25T17:54+09:00 |
| jvndb-2013-000019 | VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability | 2013-03-18T14:32+09:00 | 2013-06-25T17:57+09:00 |
| jvndb-2013-000020 | VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability | 2013-03-18T14:30+09:00 | 2013-06-25T18:01+09:00 |
| jvndb-2013-000017 | Multiple Cisco products vulnerable to denial-of-service (DoS) | 2013-03-07T14:13+09:00 | 2013-03-11T16:22+09:00 |
| jvndb-2013-000016 | Kingsoft Writer vulnerable to buffer overflow | 2013-03-01T14:47+09:00 | 2013-03-01T14:47+09:00 |
| jvndb-2013-000014 | dopvSTAR* vulnerable to cross-site scripting | 2013-02-28T13:46+09:00 | 2013-02-28T13:46+09:00 |
| jvndb-2013-000013 | dopvCOMET* vulnerable to cross-site scripting | 2013-02-28T13:37+09:00 | 2013-02-28T13:37+09:00 |
| jvndb-2013-000015 | Multiple JustSystems products vulnerable to arbitrary code execution | 2013-02-26T14:45+09:00 | 2013-02-26T14:45+09:00 |
| jvndb-2013-001605 | Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management | 2013-02-22T20:09+09:00 | 2013-02-22T20:09+09:00 |
| jvndb-2013-000012 | NEC Universal RAID Utility fails to restrict access permissions | 2013-02-21T13:54+09:00 | 2013-03-01T11:34+09:00 |
| jvndb-2013-000011 | 3DM (3ware Disk Manager) vulnerable to directory traversal | 2013-02-15T14:29+09:00 | 2013-02-15T14:29+09:00 |
| jvndb-2013-000010 | GREE for Android vulnerable to directory traversal | 2013-02-14T14:15+09:00 | 2013-02-14T14:15+09:00 |
| jvndb-2013-000009 | imgboard vulnerable to cross-site scripting | 2013-02-14T14:10+09:00 | 2013-02-14T14:10+09:00 |
| jvndb-2013-001470 | Accela BizSearch Gateway Option for TeamWARE Spoofing Vulnerability | 2013-02-13T16:47+09:00 | 2013-02-13T16:47+09:00 |
| jvndb-2013-001321 | User Authentication Vulnerability in Operational Management Function of Cosminexus | 2013-02-12T14:24+09:00 | 2013-02-12T14:24+09:00 |
| jvndb-2013-000007 | Cybozu Garoon vulnerable to SQL injection | 2013-02-08T13:58+09:00 | 2013-02-08T13:58+09:00 |
| jvndb-2013-000008 | Cybozu Garoon vulnerable to cross-site scripting | 2013-02-08T13:53+09:00 | 2013-02-08T13:53+09:00 |
| jvndb-2013-000006 | mora Downloader may insecurely load executable files | 2013-02-07T14:00+09:00 | 2013-02-07T14:00+09:00 |
| jvndb-2013-000005 | Weathernews Touch for Android stores location information in the system log file | 2013-01-31T13:38+09:00 | 2013-01-31T13:38+09:00 |
| jvndb-2013-000004 | WebSphere Application Server (WAS) vulnerable to cross-site scripting | 2013-01-25T12:32+09:00 | 2013-01-25T12:32+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0084 | Vulnérabilité dans Microsoft Edge | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2025-avi-0083 | Vulnérabilité dans Apple GarageBand | 2025-01-31T00:00:00.000000 | 2025-01-31T00:00:00.000000 |
| certfr-2025-avi-0082 | Vulnérabilité dans Sonicwall NetExtender | 2025-01-30T00:00:00.000000 | 2025-01-30T00:00:00.000000 |
| certfr-2025-avi-0081 | Multiples vulnérabilités dans ISC BIND | 2025-01-30T00:00:00.000000 | 2025-01-30T00:00:00.000000 |
| certfr-2025-avi-0080 | Vulnérabilité dans les produits Moxa | 2025-01-29T00:00:00.000000 | 2025-01-29T00:00:00.000000 |
| certfr-2025-avi-0079 | Multiples vulnérabilités dans Google Chrome | 2025-01-29T00:00:00.000000 | 2025-01-29T00:00:00.000000 |
| certfr-2025-avi-0078 | Vulnérabilité dans VMware Avi Load Balancer | 2025-01-29T00:00:00.000000 | 2025-01-29T00:00:00.000000 |
| certfr-2025-avi-0077 | Multiples vulnérabilités dans HPE Aruba Networking Fabric Composer | 2025-01-29T00:00:00.000000 | 2025-01-29T00:00:00.000000 |
| certfr-2025-avi-0076 | Vulnérabilité dans NetApp ONTAP | 2025-01-28T00:00:00.000000 | 2025-01-28T00:00:00.000000 |
| certfr-2025-avi-0075 | Multiples vulnérabilités dans les produits Apple | 2025-01-28T00:00:00.000000 | 2025-01-28T00:00:00.000000 |
| certfr-2025-avi-0074 | Vulnérabilité dans Synacor Zimbra Collaboration | 2025-01-28T00:00:00.000000 | 2025-04-28T00:00:00.000000 |
| certfr-2025-avi-0073 | Multiples vulnérabilités dans Microsoft Edge | 2025-01-27T00:00:00.000000 | 2025-01-28T00:00:00.000000 |
| certfr-2025-avi-0072 | Multiples vulnérabilités dans Juniper Secure Analytics | 2025-01-27T00:00:00.000000 | 2025-01-27T00:00:00.000000 |
| certfr-2025-avi-0071 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-24T00:00:00.000000 | 2025-01-24T00:00:00.000000 |
| certfr-2025-avi-0070 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-01-24T00:00:00.000000 | 2025-01-24T00:00:00.000000 |
| certfr-2025-avi-0069 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-24T00:00:00.000000 | 2025-01-24T00:00:00.000000 |
| certfr-2025-avi-0068 | Vulnérabilité dans ClamAV | 2025-01-24T00:00:00.000000 | 2025-01-24T00:00:00.000000 |
| certfr-2025-avi-0067 | Multiples vulnérabilités dans Qnap HBS 3 Hybrid Backup Sync | 2025-01-24T00:00:00.000000 | 2025-01-24T00:00:00.000000 |
| certfr-2025-avi-0066 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-01-23T00:00:00.000000 | 2025-01-23T00:00:00.000000 |
| certfr-2025-avi-0065 | Multiples vulnérabilités dans les produits Mitel | 2025-01-23T00:00:00.000000 | 2025-01-23T00:00:00.000000 |
| certfr-2025-avi-0064 | Multiples vulnérabilités dans les produits Cisco | 2025-01-23T00:00:00.000000 | 2025-01-23T00:00:00.000000 |
| certfr-2025-avi-0063 | Multiples vulnérabilités dans GitLab | 2025-01-23T00:00:00.000000 | 2025-02-13T00:00:00.000000 |
| certfr-2025-avi-0062 | Multiples vulnérabilités dans les produits Elastic | 2025-01-23T00:00:00.000000 | 2025-01-23T00:00:00.000000 |
| certfr-2025-avi-0061 | Multiples vulnérabilités dans Google Chrome | 2025-01-23T00:00:00.000000 | 2025-01-23T00:00:00.000000 |
| certfr-2025-avi-0060 | Multiples vulnérabilités dans Node.js | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0059 | Multiples vulnérabilités dans les produits Atlassian | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0058 | Multiples vulnérabilités dans Oracle Weblogic | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0057 | Multiples vulnérabilités dans Oracle Virtualization | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0056 | Vulnérabilité dans Oracle Systems | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0055 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |