Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-82615 | itsourcecode Online Medicine Delivery System Password … |
itsourcecode |
Online Medicine Delivery System |
2026-08-31T04:30:10.673Z | 2026-08-31T14:46:41.746Z | |
| cve-2026-66047 | 9.2 (v4.0) 8.1 (v3.1) | ProfilePress WordPress Plugin < 4.17.2 Unauthenticated… |
Proper Fraction |
ProfilePress |
2026-08-31T14:46:41.174Z | 2026-08-31T14:46:41.174Z |
| cve-2026-82610 | itsourcecode Online Medicine Delivery System Login log… |
itsourcecode |
Online Medicine Delivery System |
2026-08-31T03:15:08.792Z | 2026-08-31T14:46:04.872Z | |
| cve-2026-82875 | 5.1 (v4.0) 5.5 (v3.1) | ToolJet before v3.16.208 Authorization Bypass via orga… |
ToolJet |
ToolJet |
2026-08-31T08:46:43.077Z | 2026-08-31T14:45:27.214Z |
| cve-2026-82702 | Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system … |
Edimax |
BR-6214K |
2026-08-31T14:30:07.775Z | 2026-08-31T14:44:39.188Z | |
| cve-2026-82690 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection |
D-Link |
DNS-327L |
2026-08-31T11:30:10.597Z | 2026-08-31T14:44:32.928Z | |
| cve-2026-82870 | 7 (v4.0) 9.6 (v3.1) | ToolJet before v3.16.208 Cross-Tenant Database Manipulation |
ToolJet |
ToolJet |
2026-08-31T08:46:39.571Z | 2026-08-31T14:44:00.262Z |
| cve-2026-38465 | N/A | A Stored XSS vulnerability in the donor avatar mo… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:43:31.017Z |
| cve-2026-38472 | N/A | A Stored XSS vulnerability in forum reward commen… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:42:37.951Z |
| cve-2026-82865 | 2.1 (v4.0) 4.4 (v3.1) | pdfme schemas before 5.5.10 Cross-Site Scripting via i… |
pdfme |
schemas |
2026-08-31T08:46:35.945Z | 2026-08-31T14:41:53.897Z |
| cve-2026-38469 | N/A | A Stored XSS vulnerability in the custom bonus ti… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:41:19.240Z |
| cve-2026-82860 | 9.3 (v4.0) 9.8 (v3.1) | @hulumi/policies before 1.3.2 Admin Policy Bypass |
hulumi |
policies |
2026-08-31T08:46:32.506Z | 2026-08-31T14:41:07.457Z |
| cve-2026-82855 | 9.3 (v4.0) 9.8 (v3.1) | @hulumi/policies before 1.3.2 Evidence Validation Bypass |
hulumi |
policies |
2026-08-31T08:46:29.100Z | 2026-08-31T14:40:35.253Z |
| cve-2026-82660 | 5.3 (v4.0) 5.4 (v3.1) | Nodemailer jsonTransport bypasses disableFileAccess an… |
nodemailer |
nodemailer |
2026-08-31T08:46:25.605Z | 2026-08-31T14:39:52.418Z |
| cve-2026-82665 | yaojingang GEOFlow Image Library Cleanup ImageLibraryC… |
yaojingang |
GEOFlow |
2026-08-31T08:15:12.012Z | 2026-08-31T14:35:47.563Z | |
| cve-2026-82628 | Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys su… |
Colorful |
iGameCenter |
2026-08-31T07:00:08.968Z | 2026-08-31T14:34:57.895Z | |
| cve-2026-46517 | LMDeploy: Hardcoded trust_remote_code=True is an impli… |
InternLM |
lmdeploy |
2026-06-09T23:05:43.966Z | 2026-08-31T14:34:34.198Z | |
| cve-2026-40464 | N/A | A Stored Cross-Site Scripting (XSS) Vulnerability in N… |
Nokia |
NSP |
2026-08-31T06:35:32.425Z | 2026-08-31T14:33:52.270Z |
| cve-2026-58574 | 9.8 (v3.1) | Dell PowerStore contains a Missing Authentication… |
Dell |
PowerStore 500T |
2026-08-31T06:28:45.931Z | 2026-08-31T14:33:06.554Z |
| cve-2026-12894 | 8.8 (v3.1) | Quarkus-qute: io.quarkus.qute.reflectionvalueresolver:… |
Red Hat |
Red Hat build of Apache Camel 4 for Quarkus 3 |
2026-08-31T12:14:12.124Z | 2026-08-31T14:32:46.203Z |
| cve-2026-82621 | Soarkey StudentManagement/学生信息管理系统 Administrative Serv… |
Soarkey |
StudentManagement |
2026-08-31T05:45:09.136Z | 2026-08-31T14:32:31.693Z | |
| cve-2026-82680 | D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write |
D-Link |
DSM-G600 |
2026-08-31T10:45:09.874Z | 2026-08-31T14:30:14.320Z | |
| cve-2026-82695 | Tenda AC18 Telnet telnet missing authentication |
Tenda |
AC18 |
2026-08-31T12:45:09.596Z | 2026-08-31T14:29:57.559Z | |
| cve-2026-82670 | IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVIC… |
IObit |
Uninstaller |
2026-08-31T09:30:09.683Z | 2026-08-31T14:28:51.341Z | |
| cve-2026-82797 | 5.5 (v3.1) | Uncontrolled Recursion vulnerability in Samsung O… |
Samsung Open Source |
rlottie |
2026-08-31T11:28:08.147Z | 2026-08-31T14:27:19.437Z |
| cve-2026-38470 | N/A | A Broken access control vulnerability in the API … |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:27:18.229Z |
| cve-2026-38473 | N/A | A Stored XSS vulnerability in the subtitle deleti… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:26:00.472Z |
| cve-2026-19702 | 7.8 (v3.1) | OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair |
TÜBİTAK BİLGEM Software Technologies Research Institute |
Pardus Boot Repair |
2026-08-31T13:54:45.791Z | 2026-08-31T14:25:48.846Z |
| cve-2026-38466 | N/A | A Stored XSS vulnerability in the torrent remaste… |
n/a |
n/a |
2026-08-25T00:00:00.000Z | 2026-08-31T14:24:35.615Z |
| cve-2026-19616 | 7.5 (v3.1) | Information Disclosure in TBC Technology's KitLogistic |
TBC Technology Inc. |
KitLogistic |
2026-08-31T13:48:00.538Z | 2026-08-31T14:22:54.088Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000067 | Movable Type Enterprise cross-site scripting vulnerability | 2008-12-04T14:52+09:00 | 2008-12-04T14:52+09:00 |
| jvndb-2008-000079 | I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability | 2008-12-02T15:50+09:00 | 2008-12-02T15:50+09:00 |
| jvndb-2008-001895 | JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability | 2008-12-01T11:10+09:00 | 2008-12-01T11:10+09:00 |
| jvndb-2008-000074 | Snoopy command injection vulnerability | 2008-10-28T15:34+09:00 | 2008-11-28T13:54+09:00 |
| jvndb-2008-001312 | Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-11-21T12:20+09:00 |
| jvndb-2008-001311 | Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-11-21T12:20+09:00 |
| jvndb-2008-001043 | X.Org Foundation X server buffer overflow vulnerability | 2008-06-13T17:11+09:00 | 2008-11-21T12:19+09:00 |
| jvndb-2008-001877 | JP1/Integrated Management Service Support Cross-Site Scripting Vulnerability | 2008-11-21T10:16+09:00 | 2008-11-21T10:16+09:00 |
| jvndb-2008-000077 | GungHo LoadPrgAx vulnerable to arbitrary Java program execution | 2008-11-19T15:50+09:00 | 2008-11-19T15:50+09:00 |
| jvndb-2006-000808 | Denial of service vulnerability in Ruby CGI library (cgi.rb) | 2008-05-21T00:00+09:00 | 2008-11-14T12:20+09:00 |
| jvndb-2008-000076 | sISAPILocation vulnerability bypasses HTTP header rewrite function | 2008-11-10T13:29+09:00 | 2008-11-10T13:29+09:00 |
| jvndb-2008-001779 | CA ARCserver Backup and CA ARCserve Backup Client Agent Denial of Service (DoS) Vulnerability | 2008-10-30T12:20+09:00 | 2008-10-30T12:20+09:00 |
| jvndb-2008-001778 | BrightStor ARCserve and eTrust Antivirus Arbitrary Code Execution Vulnerability | 2008-10-30T12:19+09:00 | 2008-10-30T12:19+09:00 |
| jvndb-2008-000071 | MyNETS cross-site scripting vulnerability | 2008-10-22T17:49+09:00 | 2008-10-22T17:49+09:00 |
| jvndb-2008-000070 | Internet Explorer vulnerable in handling CDO protocol | 2008-10-22T17:49+09:00 | 2008-10-22T17:49+09:00 |
| jvndb-2008-000068 | hisa_cart information disclosure vulnerability | 2008-10-21T19:25+09:00 | 2008-10-21T19:25+09:00 |
| jvndb-2008-000073 | Blosxom vulnerable to cross-site scripting | 2008-10-20T17:30+09:00 | 2008-10-20T17:30+09:00 |
| jvndb-2008-000016 | Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations | 2008-05-21T00:00+09:00 | 2008-10-09T13:35+09:00 |
| jvndb-2008-000066 | Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting | 2008-10-06T15:24+09:00 | 2008-10-06T15:24+09:00 |
| jvndb-2008-000063 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:32+09:00 | 2008-10-01T16:32+09:00 |
| jvndb-2008-000062 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:32+09:00 | 2008-10-01T16:32+09:00 |
| jvndb-2008-000065 | EC-CUBE vulnerable to SQL injection | 2008-10-01T16:31+09:00 | 2008-10-01T16:31+09:00 |
| jvndb-2008-000064 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:31+09:00 | 2008-10-01T16:31+09:00 |
| jvndb-2008-000061 | phpMyAdmin cross-site scripting vulnerability | 2008-09-26T16:37+09:00 | 2008-09-26T16:37+09:00 |
| jvndb-2008-001665 | Data Transfer Control Process Cessation Issue in XFIT/S/JCA and XFIT/S/ZGN | 2008-09-24T12:03+09:00 | 2008-09-24T12:03+09:00 |
| jvndb-2008-000060 | Kantan WEB Server cross-site scripting vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000059 | Kantan WEB Server directory traversal vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000058 | Multiple Tor World CGI scripts vulnerable to arbitrary script execution | 2008-09-18T11:48+09:00 | 2008-09-18T11:48+09:00 |
| jvndb-2008-000057 | Sound Master 2nd from High Norm vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| jvndb-2008-000056 | Movable Type vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0419 | Multiples vulnérabilités dans les produits IBM | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0418 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0417 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0416 | Vulnérabilité dans OpenSSL | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0415 | Multiples vulnérabilités dans les produits Tenable | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0414 | Vulnérabilité dans les produits Palo Alto Networks | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0413 | Multiples vulnérabilités dans les produits MongoDB | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0412 | Multiples vulnérabilités dans les produits Mitel | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2022-avi-285 | [MàJ] Multiples vulnérabilités dans Joomla | 2022-03-30T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2021-avi-485 | Multiples vulnérabilités dans Citrix Hypervisor | 2021-06-24T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2021-avi-484 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2021-06-24T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0411 | Multiples vulnérabilités dans Wireshark | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0410 | Multiples vulnérabilités dans Google Chrome | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0409 | Multiples vulnérabilités dans les produits Cisco | 2024-05-16T00:00:00.000000 | 2024-05-16T00:00:00.000000 |
| certfr-2024-avi-0408 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0407 | Vulnérabilité dans LibreOffice | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0406 | Multiples vulnérabilités dans les produits Adobe | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0405 | Multiples vulnérabilités dans les produits VMware | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0404 | Multiples vulnérabilités dans les produits Fortinet | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0403 | Multiples vulnérabilités dans les produits Microsoft | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0402 | Vulnérabilité dans Microsoft Azure Migrate | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0401 | Vulnérabilité dans Microsoft .Net | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0400 | Multiples vulnérabilités dans Microsoft Windows | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0399 | Vulnérabilité dans Microsoft Office | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0398 | Vulnérabilité dans Microsoft Edge | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0397 | Multiples vulnérabilités dans les produits Intel | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0396 | Multiples vulnérabilités dans les produits Mozilla | 2024-05-15T00:00:00.000000 | 2024-05-15T00:00:00.000000 |
| certfr-2024-avi-0395 | Multiples vulnérabilités dans les produits SAP | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |
| certfr-2024-avi-0394 | Multiples vulnérabilités dans les produits Typo3 | 2024-05-14T00:00:00.000000 | 2024-05-14T00:00:00.000000 |