CVEs we hold for Digital

Records whose assigning authority named Digital as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-85393node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Paddingdigitalbazaar forge

CVE-2026-78071Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0digital-peak.com DP Calendar extension for Joomla

CVE-2026-78070Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2digital-peak.com DP Calendar extension for Joomla

CVE-2026-73335no title heldDigital Agency Android App "Myna Point"

CVE-2026-68953Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-68950Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-68070Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-66890Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-66887Missing Authorization in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-66372Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog VG4 Recorder

CVE-2026-57831Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2digital-peak.com DP Calendar extension for Joomla

CVE-2026-5426KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey valueDigital Knowledge KnowledgeDeliver

CVE-2026-33896Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)digitalbazaar forge

CVE-2026-33895Forge has signature forgery in Ed25519 due to missing S > L checkdigitalbazaar forge

CVE-2026-33894Forge has signature forgery in RSA-PKCS due to ASN.1 extra fielddigitalbazaar forge

CVE-2026-33891Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Inputdigitalbazaar forge

CVE-2026-28267no title heldDigital Arts Inc. DigitalArts@Cloud Agent (for Windows)…

CVE-2026-25427WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerabilityDigitalME eRoom

CVE-2026-25405WordPress eRoom plugin <= 1.7.1 - SQL Injection vulnerabilityDigitalME eRoom

CVE-2026-25191no title heldDigital Arts Inc. FinalCode Ver.6 series

CVE-2026-23703no title heldDigital Arts Inc. FinalCode Ver.6 series

CVE-2025-66031node-forge ASN.1 Unbounded Recursiondigitalbazaar forge

CVE-2025-66030node-forge ASN.1 OID Integer Truncationdigitalbazaar forge

CVE-2025-62896WordPress Multilang Contact Form plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerabilitydigitaldonkey Multilang Contact Form

CVE-2025-59717no title heldDigitalOcean @digitalocean/do-markdownit

CVE-2025-5930WP2HTML <= 1.0.2 - Cross-Site Request Forgery to Settings Updatedigitalacornjp WP2HTML

CVE-2025-58851WordPress Boxed Content Plugin <= 1.0 - Cross Site Scripting (XSS) VulnerabilityDigitalCourt Boxed Content

CVE-2025-57846no title heldDigital Arts Inc. i-FILTER ブラウザー＆クラウド MultiAgent for…

CVE-2025-53226WordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerabilitydigitalzoomstudio Comments Capcha Box

CVE-2025-49919WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerabilityDigitalME eRoom

CVE-2025-47553WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerabilityDigital zoom studio DZS Video Gallery

CVE-2025-47552WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection VulnerabilityDigital zoom studio DZS Video Gallery

CVE-2025-47149no title heldDigital Arts Inc. i-FILTER

CVE-2025-34413Legality WHISTLEBLOWING Missing Critical HTTP Security HeadersDigitalPA S.r.l. Legality WHISTLEBLOWING

CVE-2025-32300WordPress DZS Video Gallery plugin <= 12.25 - Reflected Cross Site Scripting (XSS) vulnerabilityDigital zoom studio DZS Video Gallery

CVE-2025-31730WordPress Marketer Addons Plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerabilityDigitalCourt Marketer Addons

CVE-2025-3002Digital China DCME-520 mon_merge_stat_hist.php os command injectionDigital China DCME-520

CVE-2025-23581WordPress Demo User DZS plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilitydigitalzoomstudio Demo User DZS

CVE-2025-23579WordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerabilitydigitalzoomstudio DZS Ajaxer Lite

CVE-2025-23558WordPress Geotagged Media plugin <= 0.3.0 - CSRF to Stored XSS vulnerabilitydigitalfisherman Geotagged Media

CVE-2025-22795WordPress Multilang Contact Form Plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerabilitydigitaldonkey Multilang Contact Form

CVE-2025-22503WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerabilitydigitalzoomstudio Admin debug wordpress – enable debug

CVE-2025-13477OTP Bypass in Digital Operation Services' WifiBuradaDigital Operations Services Inc. WifiBurada

CVE-2025-12816CVE-2025-12816Digital Bazaar forge

CVE-2025-11760eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive…digitalmeactivecampaign eRoom – Webinar & Meeting Plugin…

CVE-2024-8475Protection Mechanism Failure in Digital Operation Services' WiFiBuradaDigital Operation Services WiFiBurada

CVE-2024-8429Improper Authentication in Digital Operation Services' WiFiBuradaDigital Operation Services WiFiBurada

CVE-2024-51848WordPress Parallaxer plugin <= 1.00 - Cross Site Scripting (XSS) vulnerabilitydigitalzoomstudio Parallaxer

CVE-2024-51694WordPress Geotagged Media plugin <= 0.3.0 - Reflected Cross Site Scripting (XSS) vulnerabilitydigitalfisherman Geotagged Media

CVE-2024-43988WordPress Mystique theme <= 2.5.7 - Cross Site Scripting (XSS) vulnerabilitydigitalnature Mystique

CVE-2024-3275eRoom – Zoom Meetings & Webinar <= 1.4.18 - Missing Authorization to Information Exposuredigitalmeactivecampaign eRoom – Webinar & Meeting Plugin…

CVE-2024-31995zcap has incomplete expiration checks in capability chains.digitalbazaar zcap

CVE-2024-21727Extension - digtal-peak.com - XSS vulnerability in DP Calendar component for Joomla 8.0.0-8.0.14digital-peak.com DP Calendar for Joomla

CVE-2023-6248Data leakage and arbitrary remote code execution in Syrus cloud devicesDigital Communications Technologies Syrus4 IoT Telematics…

CVE-2023-47164no title heldDigitalDruid.Net HOTELDRUID

CVE-2023-44689no title heldDigital Agency e-Gov Client Application (macOS version)

CVE-2023-3653Stored XSS in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software

CVE-2023-3652Reflected XSS in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software

CVE-2023-3651SQLi in Digital Ant E-Commerce SoftwareDigital Ant E-Commerce Software

CVE-2023-34854no title helddigitaldruid HotelDruid

CVE-2023-3376SQLi in Digital Strategys ZekiwebDigital Strategy Zekiweb

CVE-2023-2644DigitalPersona FPSensor DpHost.exe unquoted search pathDigitalPersona FPSensor

CVE-2023-25710WordPress Click to Call or Chat Buttons Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)DIGITALBLUE Click to Call or Chat Buttons

CVE-2023-22278no title heldDigital Arts Inc. m-FILTER Ver.5 Series and Ver.4 Series

CVE-2022-40204no title heldDigital Alert Systems DASDEC

CVE-2022-24773Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar forge

CVE-2022-24772Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar forge

CVE-2022-24771Improper Verification of Cryptographic Signature in node-forgedigitalbazaar forge

CVE-2022-2384Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site ScriptingUnknown Digital Publications by Supsystic

CVE-2022-21170no title heldDigital Arts Inc. i-FILTER, i-FILTER Browser & Cloud…

CVE-2022-0122Open Redirect in digitalbazaar/forgedigitalbazaar/forge

CVE-2020-37213TextCrawler Pro3.1.1 - Denial of ServiceDigitalVolcano Software TextCrawler Pro

CVE-2020-37198Duplicate Cleaner Pro 4 - Denial of ServiceDigitalVolcano Software Duplicate Cleaner Pro

CVE-2020-37189TaskCanvas 1.4.0 - 'Registration' Denial Of ServiceDigitalVolcano Software TaskCanvas

CVE-2019-18265no title heldDigital Alert Systems DASDEC

CVE-2018-16181no title heldDigital Arts Inc. i-FILTER

CVE-2018-16180no title heldDigital Arts Inc. i-FILTER

CVE-2017-7910no title heldn/a Digital Canal Structural Wind Analysis

CVE-2017-10860no title heldDigital Arts Inc. "i-filter 6.0 installer"

CVE-2017-10859no title heldDigital Arts Inc. "i-filter 6.0 installer"

CVE-2017-10858no title heldDigital Arts Inc. "i-filter 6.0 install program"

CVE-2010-20111Digital Music Pad <= 8.2.3.3.4 Stack Buffer OverflowDigital Music Pad

82 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.