Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116689 | follow-redirects: Cross-realm sensitiveHeaders arrays … |
follow-redirects |
follow-redirects |
2026-10-27T19:38:46.034Z | 2026-10-30T18:47:54.616Z | |
| cve-2026-116688 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:36:28.906Z | 2026-11-02T19:40:48.630Z | |
| cve-2026-116687 | CKEditor: Cross-site scripting (XSS) in the engine package |
ckeditor |
ckeditor5 |
2026-10-27T19:33:11.074Z | 2026-10-27T19:33:11.074Z | |
| cve-2026-116686 | Model Context Protocol Python SDK: Client fetched serv… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:29:16.001Z | 2026-10-28T16:13:45.473Z | |
| cve-2026-116685 | Model Context Protocol Python SDK: HTTP client transpo… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:26:46.926Z | 2026-10-30T15:03:50.436Z | |
| cve-2026-112355 | 8.7 (v4.0) 7.5 (v3.1) | MembershipWorks WordPress Plugin < 6.17 Information Di… |
MembershipWorks |
MembershipWorks |
2026-10-27T19:15:49.546Z | 2026-10-27T19:15:49.546Z |
| cve-2026-116684 | Model Context Protocol Python SDK: Server bearer-token… |
modelcontextprotocol |
python-sdk |
2026-10-27T19:12:24.255Z | 2026-11-02T19:40:02.808Z | |
| cve-2026-116683 | CTFer.io's CTFd Terraform Provider allows a local or r… |
ctfer-io |
terraform-provider-ctfd |
2026-10-27T18:25:50.885Z | 2026-10-27T18:25:50.885Z | |
| cve-2026-118180 | N/A | Matrix homeserver could redirect the chat session to a… |
Mozilla |
Thunderbird |
2026-10-27T18:16:33.495Z | 2026-10-27T18:27:53.280Z |
| cve-2026-118179 | N/A | Request forgery via news: links |
Mozilla |
Thunderbird |
2026-10-27T18:16:32.658Z | 2026-10-27T18:27:52.176Z |
| cve-2026-118178 | N/A | RSS feed could redirect its subscription to a local fi… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.904Z | 2026-10-27T18:27:51.092Z |
| cve-2026-118177 | N/A | Calendar discovery accepted local file and remote netw… |
Mozilla |
Thunderbird |
2026-10-27T18:16:31.083Z | 2026-10-27T18:27:49.964Z |
| cve-2026-118176 | N/A | Bypass of remote UNC path restriction in mailbox: URLs |
Mozilla |
Thunderbird |
2026-10-27T18:16:30.272Z | 2026-10-27T18:27:48.875Z |
| cve-2026-118175 | N/A | Content of other messages could be included when reply… |
Mozilla |
Thunderbird |
2026-10-27T18:16:29.537Z | 2026-10-27T18:27:47.611Z |
| cve-2026-118174 | N/A | Displaying a message could load an attacker-chosen URL… |
Mozilla |
Thunderbird |
2026-10-27T18:16:28.729Z | 2026-10-27T18:27:46.521Z |
| cve-2026-118173 | 6.1 (v4.0) | MISP Guard Incomplete Tag Validation Allows Non-Allowe… |
MISP |
misp-guard |
2026-10-27T18:11:51.815Z | 2026-10-27T18:11:51.815Z |
| cve-2026-115413 | 7.8 (v3.1) 7.3 (v4.0) | AWS API MCP Server OAuth Token Audience Validation Bypass |
AWS |
aws-api-mcp-server |
2026-10-27T18:10:28.758Z | 2026-10-27T18:10:28.758Z |
| cve-2026-118171 | N/A | CVE-2026-118171 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:05:18.037Z | 2026-10-27T18:05:18.037Z |
| cve-2026-118172 | N/A | CVE-2026-118172 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:04:13.270Z | 2026-10-27T18:04:13.270Z |
| cve-2026-118170 | N/A | CVE-2026-118170 |
Strapi |
Strapi Open Source and Enterprise Headless CMS |
2026-10-27T18:02:55.025Z | 2026-10-27T18:02:55.025Z |
| cve-2026-57202 | Asterisk: ARI setChannelVar bypasses live_dangerously … |
asterisk |
asterisk |
2026-10-27T17:58:46.257Z | 2026-10-28T16:13:52.414Z | |
| cve-2026-57188 | Asterisk: Stack buffer overflow in res_xmpp XMPP names… |
asterisk |
asterisk |
2026-10-27T17:55:29.170Z | 2026-10-30T20:22:55.339Z | |
| cve-2026-116682 | FileBrowser Quantum: Symlink following escapes user sc… |
gtsteffaniak |
filebrowser |
2026-10-27T17:48:04.364Z | 2026-11-02T19:38:28.867Z | |
| cve-2026-117526 | reduxjs redux-devtools Remotedev Server evalAction cod… |
reduxjs |
redux-devtools |
2026-10-27T17:45:15.061Z | 2026-10-28T11:19:16.821Z | |
| cve-2026-116680 | Homebox generic notifier SSRF via HTTP redirect after … |
sysadminsmedia |
homebox |
2026-10-27T17:43:52.502Z | 2026-10-27T17:43:52.502Z | |
| cve-2026-88812 | 7.8 (v3.1) | X.Org Server XKB SetGeometry TextDoodad Double Free |
X.org |
xorg-x11-server |
2026-10-27T17:43:18.583Z | 2026-10-27T17:43:18.583Z |
| cve-2026-102816 | 5.3 (v4.0) | Unauthenticated Wireless Regulatory Region Configurati… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:41:21.636Z | 2026-10-27T17:41:21.636Z |
| cve-2026-102815 | 6.9 (v4.0) | Command Injection in tmpServer Allows Local Privilege … |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:59.514Z | 2026-10-29T10:45:45.539Z |
| cve-2026-102814 | 8.7 (v4.0) | Improper Authentication in TP-Link TDDP v2 Allows Root… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:43.627Z | 2026-10-29T10:45:45.682Z |
| cve-2026-102813 | 6.1 (v4.0) | Administrator Password Reset Through the Verification-… |
TP-Link Systems Inc. |
RE305 v3 |
2026-10-27T17:40:31.857Z | 2026-10-27T17:40:31.857Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000033 | TwitRocker2 (Android version) vulnerable in the WebView class | 2012-04-20T12:21+09:00 | 2012-04-20T12:21+09:00 |
| jvndb-2012-000031 | ActiveScriptRuby vulnerable to arbitrary Ruby script execution | 2012-04-13T14:08+09:00 | 2012-04-13T14:08+09:00 |
| jvndb-2012-000032 | Dokodemo Rikunabi 2013 vulnerable to cross-site scripting | 2012-04-13T14:03+09:00 | 2012-04-13T14:03+09:00 |
| jvndb-2012-001932 | Vulnerability in Fujitsu Interstage List Works Where Permissions Cannot Be Denied | 2012-04-11T11:45+09:00 | 2012-04-11T11:45+09:00 |
| jvndb-2012-000030 | SENCHA SNS vulnerable to session fixation | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000029 | SENCHA SNS vulnerable to cross-site request forgery | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000028 | TOSHIBA TEC e-Studio series vulnerable to authentication bypass | 2012-04-05T16:40+09:00 | 2012-04-05T16:40+09:00 |
| jvndb-2012-000027 | Janetter vulnerable to cross-site request forgery | 2012-03-19T14:31+09:00 | 2012-03-19T14:31+09:00 |
| jvndb-2012-000026 | Janetter vulnerable to information disclosure | 2012-03-19T14:27+09:00 | 2012-03-19T14:27+09:00 |
| jvndb-2012-001793 | JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability | 2012-03-19T12:04+09:00 | 2012-03-19T12:04+09:00 |
| jvndb-2012-000025 | Redmine vulnerable to cross-site scripting | 2012-03-13T13:39+09:00 | 2012-03-13T13:39+09:00 |
| jvndb-2012-000024 | twicca fails to restrict access permissions | 2012-03-13T13:36+09:00 | 2012-03-13T13:36+09:00 |
| jvndb-2012-000023 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:35+09:00 | 2012-03-09T14:35+09:00 |
| jvndb-2012-000022 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:28+09:00 | 2012-03-09T14:28+09:00 |
| jvndb-2012-000021 | SquirrelMail plugin Autocomplete vulnerable to cross-site scripting | 2012-03-09T14:18+09:00 | 2012-03-09T14:18+09:00 |
| jvndb-2012-000020 | ES File Explorer fails to restrict access permissions | 2012-03-05T15:50+09:00 | 2012-03-05T15:50+09:00 |
| jvndb-2012-000019 | Kingsoft Internet Security 2011 vulnerable to denial-of-service | 2012-03-01T14:03+09:00 | 2012-03-01T14:03+09:00 |
| jvndb-2012-000018 | Movable Type vulnerable to session hijacking | 2012-02-23T14:28+09:00 | 2012-02-23T14:28+09:00 |
| jvndb-2012-000017 | Movable Type vulnerable to OS command injection | 2012-02-23T14:21+09:00 | 2012-02-23T14:21+09:00 |
| jvndb-2012-000016 | Movable Type vulnerable to cross-site scripting | 2012-02-23T14:20+09:00 | 2012-02-23T14:20+09:00 |
| jvndb-2012-000015 | Movable Type vulnerable to cross-site request forgery | 2012-02-23T14:19+09:00 | 2012-02-23T14:19+09:00 |
| jvndb-2012-000014 | Multiple COOKPAD applications for Android vulnerable in WebView class | 2012-02-22T14:44+09:00 | 2012-02-29T10:56+09:00 |
| jvndb-2012-000013 | cforms II vulnerable to cross-site scripting | 2012-02-15T17:14+09:00 | 2012-02-15T17:14+09:00 |
| jvndb-2012-000011 | ALFTP may insecurely load executable files | 2012-02-13T15:58+09:00 | 2012-02-13T15:58+09:00 |
| jvndb-2012-000012 | Apache Struts 2 vulnerable to an arbitrary Java method execution | 2012-02-10T14:29+09:00 | 2012-02-10T14:29+09:00 |
| jvndb-2012-000010 | Pocket WiFi (GP02) vulnerable to cross-site request forgery | 2012-02-01T14:12+09:00 | 2012-02-01T14:12+09:00 |
| jvndb-2012-001191 | Arbitrary Code Execution Vulnerability in Hitachi COBOL2002 | 2012-01-27T10:44+09:00 | 2012-01-27T10:44+09:00 |
| jvndb-2012-001190 | Hitachi IT Operations Director Cross-Site Scripting Vulnerability | 2012-01-27T10:38+09:00 | 2012-01-27T10:38+09:00 |
| jvndb-2012-001189 | Hitachi IT Operations Analyzer Cross-Site Scripting Vulnerability | 2012-01-27T10:37+09:00 | 2012-01-27T10:37+09:00 |
| jvndb-2012-000008 | glucose 2 vulnerable to arbitrary script execution | 2012-01-23T18:27+09:00 | 2012-01-23T18:27+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1074 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1073 | Vulnérabilité dans les produits Mozilla | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1072 | Multiples vulnérabilités dans les produits Apple | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1071 | Multiples vulnérabilités dans les produits Tenable | 2024-12-12T00:00:00.000000 | 2024-12-12T00:00:00.000000 |
| certfr-2024-avi-1070 | Multiples vulnérabilités dans les produits Microsoft | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1069 | Multiples vulnérabilités dans Microsoft Windows | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1068 | Multiples vulnérabilités dans Microsoft Office | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1067 | Multiples vulnérabilités dans les produits Atlassian | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1066 | Vulnérabilité dans Apache Struts | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1065 | Multiples vulnérabilités dans GitLab | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1064 | Multiples vulnérabilités dans GLPI | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1063 | Vulnérabilité dans cURL et libcurl | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1062 | Multiples vulnérabilités dans les produits Siemens | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1061 | Multiples vulnérabilités dans les produits Splunk | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1060 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1059 | Multiples vulnérabilités dans les produits Intel | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1058 | Multiples vulnérabilités dans les produits Ivanti | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1057 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1056 | Multiples vulnérabilités dans les produits Adobe | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1055 | Multiples vulnérabilités dans Google Chrome | 2024-12-11T00:00:00.000000 | 2024-12-11T00:00:00.000000 |
| certfr-2024-avi-1054 | Multiples vulnérabilités dans les produits SAP | 2024-12-10T00:00:00.000000 | 2024-12-10T00:00:00.000000 |
| certfr-2024-avi-1053 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-12-10T00:00:00.000000 | 2024-12-10T00:00:00.000000 |
| certfr-2024-avi-1052 | Multiples vulnérabilités dans les produits Qnap | 2024-12-09T00:00:00.000000 | 2024-12-09T00:00:00.000000 |
| certfr-2024-avi-1051 | Multiples vulnérabilités dans les produits IBM | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1050 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1049 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1048 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1047 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1046 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1045 | Multiples vulnérabilités dans Google Pixel | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |