Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66083 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.750Z | 2026-01-20T14:28:23.721Z |
| CVE-2025-66068 |
6.5 (3.1)
|
WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken A… |
InstaWP |
InstaWP Connect |
2025-12-18T07:22:17.312Z | 2026-01-20T14:28:23.688Z |
| CVE-2025-66086 |
5.3 (3.1)
|
WordPress SMS Alert Order Notifications plugin <= 3.8.… |
Cozy Vision |
SMS Alert Order Notifications |
2025-11-21T12:29:58.296Z | 2026-01-20T14:28:23.427Z |
| CVE-2025-66084 |
4.3 (3.1)
|
WordPress FluentCommunity plugin <= 2.0.0 - Broken Acc… |
Shahjahan Jewel |
FluentCommunity |
2025-11-21T12:29:57.920Z | 2026-01-20T14:28:23.392Z |
| CVE-2025-66057 |
6.3 (3.1)
|
WordPress Bold Page Builder plugin <= 5.5.2 - Cross Si… |
boldthemes |
Bold Page Builder |
2025-11-21T12:29:54.209Z | 2026-01-20T14:28:23.380Z |
| CVE-2025-66073 |
6.5 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Inj… |
Cozmoslabs |
WP Webhooks |
2025-11-21T12:29:56.667Z | 2026-01-20T14:28:23.347Z |
| CVE-2025-64638 |
5.3 (3.1)
|
WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - … |
OnPay.io |
OnPay.io for WooCommerce |
2025-12-16T08:12:51.913Z | 2026-01-20T14:28:23.328Z |
| CVE-2025-66072 |
9.8 (3.1)
|
WordPress UsersWP plugin <= 1.2.47 - Broken Access Con… |
Stiofan |
UsersWP |
2025-11-21T12:29:56.382Z | 2026-01-20T14:28:23.321Z |
| CVE-2025-66059 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.426Z | 2026-01-20T14:28:23.317Z |
| CVE-2025-66082 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.578Z | 2026-01-20T14:28:23.316Z |
| CVE-2025-66056 |
4.3 (3.1)
|
WordPress Uncanny Automator plugin < 6.10.0 - Sensitiv… |
Uncanny Owl |
Uncanny Automator |
2025-11-21T12:29:54.000Z | 2026-01-20T14:28:23.283Z |
| CVE-2025-66062 |
3.7 (3.1)
|
WordPress WP YouTube Lyte plugin <= 1.7.28 - Open Redi… |
Frank Goossens |
WP YouTube Lyte |
2025-11-21T12:29:54.981Z | 2026-01-20T14:28:23.280Z |
| CVE-2025-66054 |
7.5 (3.1)
|
WordPress LearnPress plugin <= 4.2.9.4 - Broken Access… |
ThimPress |
LearnPress |
2025-12-18T07:22:17.129Z | 2026-01-20T14:28:23.253Z |
| CVE-2025-66060 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.618Z | 2026-01-20T14:28:23.244Z |
| CVE-2025-66055 |
7.2 (3.1)
|
WordPress Email Subscribers & Newsletters plugin <= 5.… |
Icegram |
Email Subscribers & Newsletters |
2025-11-21T12:29:53.666Z | 2026-01-20T14:28:23.237Z |
| CVE-2025-66064 |
5.3 (3.1)
|
WordPress Giveaways and Contests by RafflePress plugin… |
Syed Balkhi |
Giveaways and Contests by RafflePress |
2025-11-21T12:29:55.338Z | 2026-01-20T14:28:23.234Z |
| CVE-2025-66067 |
5.4 (3.1)
|
WordPress Funnel Builder by FunnelKit plugin <= 3.13.1… |
FunnelKit |
Funnel Builder by FunnelKit |
2025-11-21T12:29:55.849Z | 2026-01-20T14:28:23.233Z |
| CVE-2025-66075 |
4.2 (3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C… |
WP Legal Pages |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent |
2025-11-21T12:29:56.896Z | 2026-01-20T14:28:23.221Z |
| CVE-2025-66080 |
5.3 (3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C… |
WP Legal Pages |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent |
2025-12-30T16:10:40.664Z | 2026-01-20T14:28:23.215Z |
| CVE-2025-66069 |
4.3 (3.1)
|
WordPress PPOM for WooCommerce plugin <= 33.0.16 - Bro… |
Themeisle |
PPOM for WooCommerce |
2025-11-21T12:29:56.025Z | 2026-01-20T14:28:23.215Z |
| CVE-2025-64384 |
6.3 (3.1)
|
WordPress JetFormBuilder plugin <= 3.5.3 - Broken Acce… |
jetmonsters |
JetFormBuilder |
2025-11-13T09:24:36.292Z | 2026-01-20T14:28:23.177Z |
| CVE-2025-66074 |
9 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File… |
Cozmoslabs |
WP Webhooks |
2025-12-18T07:22:17.689Z | 2026-01-20T14:28:23.166Z |
| CVE-2025-66061 |
4.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.807Z | 2026-01-20T14:28:23.136Z |
| CVE-2025-66066 |
6.1 (3.1)
|
WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scr… |
EnvoThemes |
Envo Extra |
2025-11-21T12:29:55.680Z | 2026-01-20T14:28:23.127Z |
| CVE-2025-66070 |
7.5 (3.1)
|
WordPress wpForo Forum plugin <= 2.4.10 - Broken Acces… |
Tomdever |
wpForo Forum |
2025-12-18T07:22:17.491Z | 2026-01-20T14:28:23.120Z |
| CVE-2025-64634 |
8.8 (3.1)
|
WordPress Avada theme <= 7.13.1 - Broken Access Contro… |
ThemeFusion |
Avada |
2025-12-16T08:12:51.156Z | 2026-01-20T14:28:23.104Z |
| CVE-2025-66058 |
6.5 (3.1)
|
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3… |
PickPlugins |
Post Grid and Gutenberg Blocks |
2025-12-18T16:15:15.498Z | 2026-01-20T14:28:23.035Z |
| CVE-2025-64633 |
5.3 (3.1)
|
WordPress Norebro Extra plugin <= 1.6.8 - Content Inje… |
colabrio |
Norebro Extra |
2025-12-16T08:12:50.943Z | 2026-01-20T14:28:23.014Z |
| CVE-2025-66053 |
6.5 (3.1)
|
WordPress Enfold theme <= 7.1.2 - Cross Site Scripting… |
Kriesi |
Enfold |
2025-11-21T12:29:53.446Z | 2026-01-20T14:28:22.999Z |
| CVE-2025-66063 |
5.4 (3.1)
|
WordPress WP Google Review Slider plugin <= 17.4 - Bro… |
jgwhite33 |
WP Google Review Slider |
2025-11-21T12:29:55.169Z | 2026-01-20T14:28:22.981Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-59098 |
8.7 (4.0)
|
Trace Functionality Leaking Sensitive Data in dormakab… |
dormakaba |
Access Manager 92xx-k5 |
2026-01-26T10:04:51.022Z | 2026-01-26T16:07:50.727Z |
| CVE-2025-59097 |
9.3 (4.0)
|
Unauthenticated SOAP API in dormakaba access manager |
dormakaba |
Access Manager 92xx-k5 |
2026-01-26T10:04:38.742Z | 2026-01-26T16:09:59.007Z |
| CVE-2025-59096 |
4.6 (4.0)
|
Weak Default Password in dormakaba Kaba exos 9300 |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:04:24.548Z | 2026-01-26T16:10:20.331Z |
| CVE-2025-59095 |
6.8 (4.0)
|
Hard-coded Key for PIN Encryption in dormakaba Kaba ex… |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:04:15.107Z | 2026-01-26T17:16:38.862Z |
| CVE-2025-59094 |
8.4 (4.0)
|
Local Privilege Escalation in dormakaba Kaba exos 9300… |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:04:05.551Z | 2026-01-26T17:18:41.650Z |
| CVE-2025-59093 |
8.5 (4.0)
|
Insecure Password Derivation Function for Database Adm… |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:03:54.991Z | 2026-01-26T17:24:52.738Z |
| CVE-2025-59092 |
8.7 (4.0)
|
Unauthenticated RPC Service in dormakaba Kaba exos 9300 |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:03:44.324Z | 2026-01-26T17:25:26.111Z |
| CVE-2025-59091 |
9.3 (4.0)
|
Hardcoded Legacy Accounts Allowing Control Over Access… |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:03:34.142Z | 2026-01-26T17:26:08.713Z |
| CVE-2025-59090 |
9.3 (4.0)
|
Unauthenticated SOAP API in dormakaba Kaba exos 9300 |
dormakaba |
Kaba exos 9300 |
2026-01-26T10:03:21.868Z | 2026-01-26T15:38:17.362Z |
| CVE-2025-41083 |
5.1 (4.0)
|
Improper Neutralization in Altitude Communication Server |
Altitude |
Altitude Communication Server |
2026-01-26T09:42:42.532Z | 2026-01-26T13:49:41.248Z |
| CVE-2025-41082 |
6.9 (4.0)
|
HTTP Request/Response Smuggling in Altitude Communicat… |
Altitude |
Altitude Communication Server |
2026-01-26T09:24:20.607Z | 2026-01-26T13:55:47.853Z |
| CVE-2025-15516 |
4.3 (3.1)
|
All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Autho… |
plugins360 |
All-in-One Video Gallery |
2026-01-24T08:26:33.155Z | 2026-01-26T18:05:35.718Z |
| CVE-2025-14985 |
6.4 (3.1)
|
Alpha Blocks <= 1.5.0 - Authenticated (Contributor+) S… |
robiulawal40 |
Alpha Blocks |
2026-01-24T07:26:44.302Z | 2026-01-26T18:19:43.352Z |
| CVE-2025-14947 |
6.5 (3.1)
|
All-in-One Video Gallery <= 4.6.4 - Missing Authorizat… |
plugins360 |
All-in-One Video Gallery |
2026-01-23T17:26:06.739Z | 2026-01-23T18:20:37.750Z |
| CVE-2025-14941 |
6.4 (3.1)
|
GZSEO <= 2.0.11 - Authenticated (Contributor+) Authori… |
aminhashemy |
GZSEO |
2026-01-24T07:26:46.942Z | 2026-01-26T15:44:33.238Z |
| CVE-2025-14907 |
4.3 (3.1)
|
Moderate Selected Posts <= 1.4 - Cross-Site Request Fo… |
hallsofmontezuma |
Moderate Selected Posts |
2026-01-24T08:26:33.683Z | 2026-01-26T18:05:17.950Z |
| CVE-2025-14906 |
4.3 (3.1)
|
WP Youtube Video Gallery <= 1.0 - Cross-Site Request F… |
waqasvickey0071 |
WP Youtube Video Gallery |
2026-01-24T07:26:42.114Z | 2026-01-26T15:45:27.882Z |
| CVE-2025-14903 |
4.3 (3.1)
|
Simple Crypto Shortcodes <= 1.0.2 - Cross-Site Request… |
stefanristic |
Simple Crypto Shortcodes |
2026-01-24T07:26:40.557Z | 2026-01-26T15:45:49.695Z |
| CVE-2025-14843 |
5.3 (3.1)
|
Wizit Gateway for WooCommerce <= 1.2.9 - Missing Authe… |
wizit |
Wizit Gateway for WooCommerce |
2026-01-24T07:26:46.217Z | 2026-01-26T15:44:44.088Z |
| CVE-2025-14797 |
5.4 (3.1)
|
Same Category Posts <= 1.1.19 - Authenticated (Author+… |
kometschuh |
Same Category Posts |
2026-01-24T07:26:43.936Z | 2026-01-26T18:20:12.658Z |
| CVE-2025-14630 |
4.3 (3.1)
|
AdminQuickbar <= 1.9.3 - Cross-Site Request Forgery to… |
rtowebsites |
AdminQuickbar |
2026-01-24T08:26:35.023Z | 2026-01-26T15:44:27.719Z |
| CVE-2025-14629 |
5.3 (3.1)
|
Alchemist Ajax Upload <= 1.1 - Missing Authorization t… |
tandubhai |
Alchemist Ajax Upload |
2026-01-24T07:26:45.155Z | 2026-01-26T18:18:54.374Z |
| CVE-2025-14609 |
5.3 (3.1)
|
Wise Analytics <= 1.1.9 - Missing Authorization to Una… |
marcinlawrowski |
Wise Analytics |
2026-01-24T07:26:47.717Z | 2026-01-26T18:17:35.427Z |
| CVE-2025-13920 |
5.3 (3.1)
|
WP Directory Kit <= 1.4.9 - Unauthenticated Email Expo… |
wpdirectorykit |
WP Directory Kit |
2026-01-24T12:27:15.684Z | 2026-01-26T15:38:27.646Z |
| CVE-2025-13676 |
6.1 (3.1)
|
JustClick registration plugin <= 0.1 - Reflected Cross… |
ostin654 |
JustClick registration plugin |
2026-01-24T07:26:48.445Z | 2026-01-26T18:06:38.909Z |
| CVE-2025-13374 |
9.8 (3.1)
|
Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary F… |
irisideatechsolutions |
Kalrav AI Agent |
2026-01-24T07:26:42.836Z | 2026-01-26T15:45:16.947Z |
| CVE-2025-13205 |
4.3 (3.1)
|
SurveyJS: Drag & Drop WordPress Form Builder to create… |
devsoftbaltic |
SurveyJS: Drag & Drop Form Builder |
2026-01-24T09:08:09.131Z | 2026-01-26T15:44:21.874Z |
| CVE-2025-13194 |
4.3 (3.1)
|
SurveyJS: Drag & Drop WordPress Form Builder to create… |
devsoftbaltic |
SurveyJS: Drag & Drop Form Builder |
2026-01-24T09:08:08.275Z | 2026-01-26T17:39:41.909Z |
| CVE-2025-13139 |
4.3 (3.1)
|
SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.2… |
devsoftbaltic |
SurveyJS: Drag & Drop Form Builder |
2026-01-24T09:08:05.683Z | 2026-01-26T17:46:58.712Z |
| CVE-2025-12836 |
6.4 (3.1)
|
VK Google Job Posting Manager <= 1.2.20 - Authenticate… |
vektor-inc |
VK Google Job Posting Manager |
2026-01-24T07:26:41.692Z | 2026-01-26T15:45:33.120Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-14947 | The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of dat… | 2026-01-23T18:16:02.070 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14941 | The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site S… | 2026-01-24T08:16:06.593 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14907 | The Moderate Selected Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… | 2026-01-24T09:15:52.220 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14906 | The WP Youtube Video Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in al… | 2026-01-24T08:16:06.420 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14903 | The Simple Crypto Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in ve… | 2026-01-24T08:16:06.243 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14843 | The Wizit Gateway for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary O… | 2026-01-24T08:16:06.073 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14797 | The Same Category Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the w… | 2026-01-24T08:16:05.900 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14630 | The AdminQuickbar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions … | 2026-01-24T09:15:52.053 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14629 | The Alchemist Ajax Upload plugin for WordPress is vulnerable to unauthorized media file deletion du… | 2026-01-24T08:16:05.713 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-14609 | The Wise Analytics plugin for WordPress is vulnerable to Missing Authorization in all versions up t… | 2026-01-24T08:16:05.543 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13920 | The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… | 2026-01-24T13:15:54.013 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13676 | The JustClick registration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in … | 2026-01-24T08:16:05.367 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13374 | The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil… | 2026-01-24T08:16:05.173 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13205 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… | 2026-01-24T09:15:51.880 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13194 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… | 2026-01-24T09:15:51.713 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13139 | The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site R… | 2026-01-24T09:15:50.647 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-12836 | The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-01-24T08:16:03.870 | 2026-01-26T15:03:33.357 |
| fkie_cve-2022-25369 | An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user w… | 2026-01-23T17:16:04.753 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47906 | BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parame… | 2026-01-23T17:16:04.383 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47905 | MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletio… | 2026-01-23T17:16:04.180 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47904 | PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allo… | 2026-01-23T17:16:03.990 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47903 | LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in… | 2026-01-23T17:16:02.743 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47899 | YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allow… | 2026-01-23T17:16:02.120 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47898 | Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service r… | 2026-01-23T17:16:01.767 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47897 | PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter o… | 2026-01-23T17:16:01.523 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47896 | PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDi… | 2026-01-23T17:15:58.023 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47895 | Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the app… | 2026-01-23T17:15:57.390 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47894 | Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows atta… | 2026-01-23T17:15:57.020 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47893 | AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature … | 2026-01-23T17:15:56.717 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47892 | PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special… | 2026-01-23T17:15:56.517 | 2026-01-26T15:03:33.357 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-px4h-6x2v-vm6j |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-mfwj-8pw5-642f |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-9vgm-3f3w-c7rw |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-938w-hj6v-r8wq |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-8mrw-8xv9-5fhf |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-8jj5-5wqc-h9g2 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-7vhf-r2mp-6c2q |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-72h9-2q64-87rc |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:19Z |
| ghsa-x92w-9xj8-2283 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in SEMrush CY LTD Semrush Content Toolkit semrush-c… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-wrx6-q42m-ggpp |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-wrpg-rcg3-gqvp |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-vjgm-gc5x-m8hp |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-v2rh-m6wf-pp65 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-rg47-rm5j-49fx |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-r9pw-6xfq-5jqf |
6.5 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in jetmons… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-r7rh-fj9w-v2f9 |
5.9 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in e4jvikwp VikBooking Hotel Bookin… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-mr7g-crwh-57p5 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-j747-35f5-p69m |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-hqch-xp8p-9jmj |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Huger for Elementor huger-elementor allows Exploit… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-hmh9-g2h4-x75p |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-hg55-vr9x-wv56 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-hf35-jqfj-m86h |
6.5 (3.1)
|
Missing Authorization vulnerability in The African Boss Get Cash get-cash allows Exploiting Incorre… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-h37g-f3vg-p35h |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-gr4f-jhgx-hjhx |
6.5 (3.1)
|
Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Pag… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-gjrx-9m4x-8hq8 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Meks Meks Quick Plugin Disabler meks-quick-plugi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-f3vg-vfv2-qq64 |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Buttoner for Elementor buttoner-elementor allows E… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-f293-cv38-h9p6 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-cq3q-ph38-mjwc |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email con… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-c8ph-2xvf-c9p9 |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows E… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-9jm6-f8vm-2h74 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-30795 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.301271Z |
| gsd-2024-30078 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.301077Z |
| gsd-2024-30120 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.300880Z |
| gsd-2024-30393 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.300684Z |
| gsd-2024-30416 | Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful ex… | 2024-04-03T05:02:29.300471Z |
| gsd-2024-30520 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.299877Z |
| gsd-2024-30880 | Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote a… | 2024-04-03T05:02:29.299459Z |
| gsd-2024-30587 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of t… | 2024-04-03T05:02:29.299029Z |
| gsd-2024-30826 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.298735Z |
| gsd-2024-30548 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.298115Z |
| gsd-2024-30508 | Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP H… | 2024-04-03T05:02:29.297173Z |
| gsd-2024-30131 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.296892Z |
| gsd-2024-30276 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.296689Z |
| gsd-2024-30579 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.296489Z |
| gsd-2024-30787 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.296283Z |
| gsd-2024-30628 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the page parameter from … | 2024-04-03T05:02:29.295899Z |
| gsd-2024-30411 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.295478Z |
| gsd-2024-30388 | An Improper Isolation or Compartmentalization vulnerability in the Packet Forwarding Engi… | 2024-04-03T05:02:29.295268Z |
| gsd-2024-30561 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.294715Z |
| gsd-2024-30362 | Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability. Thi… | 2024-04-03T05:02:29.293900Z |
| gsd-2024-30215 | The Resource Settings page allows a high privilege attacker to load exploitable payload t… | 2024-04-03T05:02:29.293630Z |
| gsd-2024-30657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.293430Z |
| gsd-2024-30467 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.293207Z |
| gsd-2024-30616 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.292989Z |
| gsd-2024-30138 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.292777Z |
| gsd-2024-30968 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.292545Z |
| gsd-2024-30504 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-03T05:02:29.291880Z |
| gsd-2024-30585 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter … | 2024-04-03T05:02:29.291414Z |
| gsd-2024-30808 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free i… | 2024-04-03T05:02:29.290730Z |
| gsd-2024-30972 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.290464Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191335 | Malicious code in @voiceflow/base-types (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:27Z |
| mal-2025-191334 | Malicious code in @voiceflow/backend-utils (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:27Z |
| mal-2025-191333 | Malicious code in @voiceflow/api-sdk (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:27Z |
| mal-2025-191332 | Malicious code in @voiceflow/anthropic (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:27Z |
| mal-2025-191330 | Malicious code in @vishadtyagi/full-year-calendar (npm) | 2025-11-24T23:33:32Z | 2025-12-01T04:28:27Z |
| mal-2025-191329 | Malicious code in @viapip/eslint-config (npm) | 2025-11-24T23:32:56Z | 2025-12-01T04:28:27Z |
| mal-2025-191328 | Malicious code in @trpc-rate-limiter/hono (npm) | 2025-11-24T23:32:41Z | 2025-12-01T04:28:27Z |
| mal-2025-191327 | Malicious code in @trpc-rate-limiter/cloudflare (npm) | 2025-11-24T23:32:11Z | 2025-12-01T04:28:27Z |
| mal-2025-191326 | Malicious code in @trackstar/test-package (npm) | 2025-11-24T23:31:56Z | 2025-12-01T04:28:27Z |
| mal-2025-191325 | Malicious code in @trackstar/test-angular-package (npm) | 2025-11-24T23:31:25Z | 2025-12-01T04:28:27Z |
| mal-2025-191324 | Malicious code in @trackstar/react-trackstar-link-upgrade (npm) | 2025-11-24T23:30:50Z | 2025-12-01T04:28:27Z |
| mal-2025-191323 | Malicious code in @trackstar/react-trackstar-link (npm) | 2025-11-24T23:30:20Z | 2025-12-01T04:28:27Z |
| mal-2025-191322 | Malicious code in @trackstar/angular-trackstar-link (npm) | 2025-11-24T23:30:00Z | 2025-12-01T04:28:27Z |
| mal-2025-191080 | Malicious code in bytes-to-x (npm) | 2025-11-24T22:47:33Z | 2025-12-01T04:28:27Z |
| mal-2025-191079 | Malicious code in bun-plugin-httpfile (npm) | 2025-11-24T22:55:40Z | 2025-12-01T04:28:27Z |
| mal-2025-191078 | Malicious code in buffered-interpolation-babylon6 (npm) | 2025-11-24T22:55:03Z | 2025-12-01T04:28:27Z |
| mal-2025-191077 | Malicious code in blob-to-base64 (npm) | 2025-11-24T22:44:53Z | 2025-12-01T04:28:27Z |
| mal-2025-191076 | Malicious code in blinqio-executions-cli (npm) | 2025-11-24T22:45:43Z | 2025-12-01T04:28:27Z |
| mal-2025-191074 | Malicious code in better-queue-nedb (npm) | 2025-11-24T22:53:42Z | 2025-12-01T04:28:27Z |
| mal-2025-191073 | Malicious code in better-auth-nuxt (npm) | 2025-11-24T22:52:24Z | 2025-12-01T04:28:27Z |
| mal-2025-191072 | Malicious code in best_gpio_controller (npm) | 2025-11-24T22:51:34Z | 2025-12-01T04:28:27Z |
| mal-2025-191071 | Malicious code in benmostyn-frame-print (npm) | 2025-11-24T22:46:48Z | 2025-12-01T04:28:27Z |
| mal-2025-191070 | Malicious code in barebones-css (npm) | 2025-11-24T22:45:58Z | 2025-12-01T04:28:27Z |
| mal-2025-191069 | Malicious code in babel-preset-kinvey-flex-service (npm) | 2025-11-24T22:50:54Z | 2025-12-01T04:28:27Z |
| mal-2025-191068 | Malicious code in axios-timed (npm) | 2025-11-24T22:44:38Z | 2025-12-01T04:28:27Z |
| mal-2025-191067 | Malicious code in avvvatars-vue (npm) | 2025-11-24T22:43:33Z | 2025-12-01T04:28:27Z |
| mal-2025-191066 | Malicious code in automation_model (npm) | 2025-11-24T22:43:53Z | 2025-12-01T04:28:27Z |
| mal-2025-191065 | Malicious code in asciitranslator (npm) | 2025-11-24T22:44:18Z | 2025-12-01T04:28:27Z |
| mal-2025-191064 | Malicious code in arc-cli-fc (npm) | 2025-11-24T22:42:57Z | 2025-12-01T04:28:27Z |
| mal-2025-191063 | Malicious code in ai-crowl-shield (npm) | 2025-11-24T22:42:13Z | 2025-12-01T04:28:27Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0211 | Perl: Mehrere Schwachstellen | 2018-11-29T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0210 | TYPO3 "oidc" Extension: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0207 | Red Hat OpenShift (Service Mesh): Mehrere Schwachstellen | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0206 | Rockwell Automation FactoryTalk (View ME): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0205 | Rockwell Automation FactoryTalk (View SE): Mehrere Schwachstellen | 2025-01-28T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-3657 | Microsoft Windows: Mehrere Schwachstellen | 2024-12-10T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-3476 | Perl: Schwachstelle ermöglicht Codeausführung | 2021-08-09T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2024-2037 | Perl: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2020-11-19T23:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2023-1517 | VLC: mehrere Schwachstellen | 2020-05-17T22:00:00.000+00:00 | 2025-01-28T23:00:00.000+00:00 |
| wid-sec-w-2025-0204 | Red Hat Trusted Profile Analyzer: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0203 | TeamViewer: Schwachstelle ermöglicht Privilegieneskalation | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0199 | Apple Safari: Mehrere Schwachstellen | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0198 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-27T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0033 | GitLab: Mehrere Schwachstellen | 2025-01-08T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-3745 | Linux Kernel - BlueZ: Mehrere Schwachstellen | 2020-10-14T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-1894 | FRRouting Project FRRouting: Schwachstelle ermöglicht Denial of Service | 2024-08-21T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2024-0536 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-03-03T23:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2023-0953 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-12T22:00:00.000+00:00 | 2025-01-27T23:00:00.000+00:00 |
| wid-sec-w-2025-0197 | Apache Solr: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0196 | Microsoft Edge: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0195 | Apache Wicket: Schwachstelle ermöglicht Denial of Service | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0192 | Wind River VxWorks: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-26T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2024-1372 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-10-24T22:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2023-1250 | Linux Kernel: Mehrere Schwachstellen | 2023-05-18T22:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2022-0159 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-03-23T23:00:00.000+00:00 | 2025-01-26T23:00:00.000+00:00 |
| wid-sec-w-2025-0185 | Cambium Networks cnPilot und cnMaestro: Schwachstelle ermöglicht Codeausführung | 2025-01-23T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0184 | Checkmk: Schwachstelle ermöglicht Injektion von Kommandos | 2025-01-23T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0174 | SonicWall SMA: Schwachstelle ermöglicht Ausführung von Kommandos | 2025-01-22T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3709 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-12-16T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2024-3122 | Microsoft SystemCenter: Mehrere Schwachstellen | 2024-10-08T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2011:1797 | Red Hat Security Advisory: perl security update | 2011-12-08T18:56:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1780 | Red Hat Security Advisory: tomcat6 security and bug fix update | 2011-12-05T17:39:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1424 | Red Hat Security Advisory: perl security update | 2011-11-03T20:38:00+00:00 | 2026-01-28T22:34:18+00:00 |
| rhsa-2011:1392 | Red Hat Security Advisory: httpd security and bug fix update | 2011-10-20T16:50:00+00:00 | 2026-01-28T22:34:17+00:00 |
| rhsa-2011:1391 | Red Hat Security Advisory: httpd security and bug fix update | 2011-10-20T16:48:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1349 | Red Hat Security Advisory: rpm security update | 2011-10-03T20:08:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1300 | Red Hat Security Advisory: httpd security update | 2011-09-15T17:42:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:0896 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update | 2011-06-22T23:14:00+00:00 | 2026-01-28T22:34:16+00:00 |
| rhsa-2011:1330 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 security update | 2011-09-21T20:00:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2011:1329 | Red Hat Security Advisory: httpd and httpd22 security update | 2011-09-21T19:50:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2010:0861 | Red Hat Security Advisory: firefox security update | 2010-11-10T19:00:00+00:00 | 2026-01-28T22:34:14+00:00 |
| rhsa-2011:1294 | Red Hat Security Advisory: httpd security update | 2011-09-14T18:59:00+00:00 | 2026-01-28T22:34:13+00:00 |
| rhsa-2011:1245 | Red Hat Security Advisory: httpd security update | 2011-08-31T22:43:00+00:00 | 2026-01-28T22:34:12+00:00 |
| rhsa-2011:0897 | Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update | 2011-06-22T23:31:00+00:00 | 2026-01-28T22:34:12+00:00 |
| rhsa-2011:0858 | Red Hat Security Advisory: xerces-j2 security update | 2011-06-08T14:36:00+00:00 | 2026-01-28T22:34:11+00:00 |
| rhsa-2011:0791 | Red Hat Security Advisory: tomcat6 security and bug fix update | 2011-05-19T10:55:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2011:0568 | Red Hat Security Advisory: eclipse security, bug fix, and enhancement update | 2011-05-19T11:13:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2011:0434 | Red Hat Security Advisory: security update for Red Hat Network Satellite | 2011-04-11T20:24:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2010:0896 | Red Hat Security Advisory: thunderbird security update | 2010-11-17T15:14:00+00:00 | 2026-01-28T22:34:10+00:00 |
| rhsa-2010:0812 | Red Hat Security Advisory: thunderbird security update | 2010-10-29T02:46:00+00:00 | 2026-01-28T22:34:08+00:00 |
| rhsa-2010:0810 | Red Hat Security Advisory: seamonkey security update | 2010-10-27T23:54:00+00:00 | 2026-01-28T22:34:08+00:00 |
| rhsa-2010:0809 | Red Hat Security Advisory: xulrunner security update | 2010-10-27T23:22:00+00:00 | 2026-01-28T22:34:08+00:00 |
| rhsa-2010:0808 | Red Hat Security Advisory: firefox security update | 2010-10-27T23:20:00+00:00 | 2026-01-28T22:34:07+00:00 |
| rhsa-2010:0775 | Red Hat Security Advisory: cobbler security update | 2010-10-18T13:18:00+00:00 | 2026-01-28T22:34:07+00:00 |
| rhsa-2010:0693 | Red Hat Security Advisory: tomcat5 security update | 2010-09-10T08:34:00+00:00 | 2026-01-28T22:34:07+00:00 |
| rhsa-2010:0584 | Red Hat Security Advisory: jbossweb security update | 2010-08-02T20:18:00+00:00 | 2026-01-28T22:34:06+00:00 |
| rhsa-2010:0583 | Red Hat Security Advisory: tomcat5 security update | 2010-08-02T20:17:00+00:00 | 2026-01-28T22:34:06+00:00 |
| rhsa-2010:0582 | Red Hat Security Advisory: tomcat5 security update | 2010-08-02T20:17:00+00:00 | 2026-01-28T22:34:06+00:00 |
| rhsa-2010:0581 | Red Hat Security Advisory: tomcat5 and tomcat6 security update | 2010-08-02T20:39:00+00:00 | 2026-01-28T22:34:05+00:00 |
| rhsa-2010:0580 | Red Hat Security Advisory: tomcat5 security update | 2010-08-02T20:00:00+00:00 | 2026-01-28T22:34:05+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-3301 | Triggerable assertion due to race condition in hot-unplug | 2023-09-01T00:00:00.000Z | 2025-04-17T00:00:00.000Z |
| msrc_cve-2023-3255 | Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service | 2023-09-01T00:00:00.000Z | 2025-04-17T00:00:00.000Z |
| msrc_cve-2023-3180 | Heap buffer overflow in virtio_crypto_sym_op_helper() | 2023-08-01T00:00:00.000Z | 2025-04-17T00:00:00.000Z |
| msrc_cve-2023-3019 | Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() | 2023-07-01T07:00:00.000Z | 2025-04-17T00:00:00.000Z |
| msrc_cve-2025-31498 | c-ares has a use-after-free in read_answers() | 2025-04-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2025-30219 | RabbitMQ has XSS Vulnerability in an Error Message in Management UI | 2025-03-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2025-2588 | Hercules Augeas fa.c re_case_expand null pointer dereference | 2025-03-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2025-25186 | Net::IMAP vulnerable to possible DoS by memory exhaustion | 2025-02-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2024-53259 | quic-go affected by an ICMP Packet Too Large Injection Attack on Linux | 2024-12-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2024-53257 | Vitess allows HTML injection in /debug/querylogz & /debug/env | 2024-12-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2021-4217 | The vulnerability in unzip occurs due to improper handling of Unicode strings | 2022-08-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2015-7981 | The png_convert_to_rfc1123 function in png.c allows remote attackers to obtain sensitive process memory information | 2015-11-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2012-3425 | The png_push_read_zTXt function allows remote attackers to cause a denial of service | 2012-08-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2011-2691 | The png_err function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument, which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image. | 2011-07-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2011-2501 | The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources. | 2011-07-02T00:00:00.000Z | 2025-04-16T00:00:00.000Z |
| msrc_cve-2025-29822 | Microsoft OneNote Security Feature Bypass Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-29820 | Microsoft Word Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-29817 | Microsoft Power Automate Desktop Information Disclosure Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-29816 | Microsoft Word Security Feature Bypass Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-29793 | Microsoft SharePoint Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-29791 | Microsoft Excel Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27752 | Microsoft Excel Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27751 | Microsoft Excel Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27750 | Microsoft Excel Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27749 | Microsoft Office Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27748 | Microsoft Office Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27746 | Microsoft Office Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-27745 | Microsoft Office Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-26642 | Microsoft Office Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-15T07:00:00.000Z |
| msrc_cve-2025-1219 | libxml streams use wrong content-type header when requesting a redirected resource | 2025-03-02T00:00:00.000Z | 2025-04-15T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202507-0061 | A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809… | 2025-07-13T23:36:34.425000Z |
| var-202502-0237 | A vulnerability has been identified in SIMATIC IPC DiagBase (All versions), SIMATIC IPC D… | 2025-07-13T23:35:42.608000Z |
| var-202506-0579 | Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution… | 2025-07-13T23:35:40.714000Z |
| var-202502-0219 | A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS n… | 2025-07-13T23:33:57.145000Z |
| var-202310-1633 | An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute ar… | 2025-07-13T23:32:59.838000Z |
| var-202311-2460 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains f… | 2025-07-13T23:31:26.728000Z |
| var-202409-2441 | TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/p… | 2025-07-13T23:29:15.613000Z |
| var-202502-0121 | A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE … | 2025-07-13T23:26:44.664000Z |
| var-202502-0122 | A vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE … | 2025-07-13T23:26:44.649000Z |
| var-202506-1121 | A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.… | 2025-07-13T19:35:40.839000Z |
| var-202506-0598 | Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution… | 2025-07-12T23:24:15.864000Z |
| var-201212-0030 | The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass a… | 2025-07-12T23:23:39.091000Z |
| var-202506-0608 | Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerabili… | 2025-07-12T23:23:24.337000Z |
| var-202506-0614 | Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerab… | 2025-07-12T23:16:31.827000Z |
| var-202502-2329 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data … | 2025-07-12T23:14:25.942000Z |
| var-202407-1942 | D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to co… | 2025-07-12T23:03:27.860000Z |
| var-202312-2564 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow v… | 2025-07-12T23:01:27.950000Z |
| var-202506-0597 | Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability. This vulnerab… | 2025-07-12T19:35:18.972000Z |
| var-202504-3700 | A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interfa… | 2025-07-11T22:17:04.073000Z |
| var-202401-0075 | A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216… | 2025-07-10T23:12:28.769000Z |
| var-202401-1755 | An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arb… | 2025-07-10T23:12:28.678000Z |
| var-202401-2292 | TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the su… | 2025-07-10T23:06:58.845000Z |
| var-201212-0196 | Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source o… | 2025-07-10T23:04:36.246000Z |
| var-202312-1261 | TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via … | 2025-07-10T23:04:26.960000Z |
| var-202401-2395 | Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The … | 2025-07-10T23:04:01.666000Z |
| var-202401-2645 | TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeC… | 2025-07-10T23:03:36.984000Z |
| var-202312-0940 | TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via … | 2025-07-10T23:01:15.930000Z |
| var-202312-1593 | TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on t… | 2025-07-10T23:00:07.657000Z |
| var-202401-2354 | TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCf… | 2025-07-10T23:00:07.487000Z |
| var-202402-2149 | A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230… | 2025-07-10T23:00:07.363000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2024:3224-1 | Security update for postgresql16 | 2024-09-12T12:12:26Z | 2024-09-12T12:12:26Z |
| suse-su-2024:3222-1 | Security update for runc | 2024-09-12T11:21:15Z | 2024-09-12T11:21:15Z |
| suse-su-2024:3221-1 | Security update for containerd | 2024-09-12T11:18:44Z | 2024-09-12T11:18:44Z |
| suse-su-2024:3219-1 | Security update for colord | 2024-09-12T11:16:35Z | 2024-09-12T11:16:35Z |
| suse-su-2024:3218-1 | Security update for 389-ds | 2024-09-12T11:16:05Z | 2024-09-12T11:16:05Z |
| suse-su-2024:3217-1 | Security update for libpcap | 2024-09-12T11:06:09Z | 2024-09-12T11:06:09Z |
| suse-su-2024:3216-1 | Security update for expat | 2024-09-12T11:05:47Z | 2024-09-12T11:05:47Z |
| suse-su-2024:3214-1 | Security update for go1.23 | 2024-09-12T09:34:04Z | 2024-09-12T09:34:04Z |
| suse-su-2024:3213-1 | Security update for go1.22 | 2024-09-12T09:33:46Z | 2024-09-12T09:33:46Z |
| suse-su-2024:3211-1 | Security update for curl | 2024-09-11T15:40:15Z | 2024-09-11T15:40:15Z |
| suse-su-2024:3210-1 | Security update for libpcap | 2024-09-11T15:39:32Z | 2024-09-11T15:39:32Z |
| suse-su-2024:3209-1 | Security update for the Linux Kernel | 2024-09-11T15:39:03Z | 2024-09-11T15:39:03Z |
| suse-su-2024:3208-1 | Security update for glib2 | 2024-09-11T13:49:15Z | 2024-09-11T13:49:15Z |
| suse-su-2024:3204-1 | Security update for curl | 2024-09-11T08:55:24Z | 2024-09-11T08:55:24Z |
| suse-su-2024:3203-1 | Security update for curl | 2024-09-11T08:55:13Z | 2024-09-11T08:55:13Z |
| suse-su-2024:3202-1 | Security update for curl | 2024-09-11T08:54:52Z | 2024-09-11T08:54:52Z |
| suse-su-2024:3200-1 | Security update for python311 | 2024-09-11T06:48:43Z | 2024-09-11T06:48:43Z |
| suse-su-2024:3198-1 | Security update for gstreamer-plugins-bad | 2024-09-10T15:33:55Z | 2024-09-10T15:33:55Z |
| suse-su-2024:3197-1 | Security update for go1.23 | 2024-09-10T14:16:39Z | 2024-09-10T14:16:39Z |
| suse-su-2024:3196-1 | Security update for go1.22 | 2024-09-10T14:10:34Z | 2024-09-10T14:10:34Z |
| suse-su-2024:3195-1 | Security update for the Linux Kernel | 2024-09-10T14:10:24Z | 2024-09-10T14:10:24Z |
| suse-su-2024:3194-1 | Security update for the Linux Kernel | 2024-09-10T09:06:25Z | 2024-09-10T09:06:25Z |
| suse-su-2024:3192-1 | Security update for postgresql16 | 2024-09-10T08:47:09Z | 2024-09-10T08:47:09Z |
| suse-su-2024:3191-1 | Security update for postgresql16 | 2024-09-10T08:46:55Z | 2024-09-10T08:46:55Z |
| suse-su-2024:3190-1 | Security update for the Linux Kernel | 2024-09-10T08:46:37Z | 2024-09-10T08:46:37Z |
| suse-su-2024:3189-1 | Security update for the Linux Kernel | 2024-09-10T08:45:03Z | 2024-09-10T08:45:03Z |
| suse-su-2024:3188-1 | Security update for containerd | 2024-09-10T08:44:48Z | 2024-09-10T08:44:48Z |
| suse-su-2024:3187-1 | Security update for python-Django | 2024-09-10T08:44:31Z | 2024-09-10T08:44:31Z |
| suse-su-2024:3186-1 | Security update for buildah | 2024-09-10T07:43:19Z | 2024-09-10T07:43:19Z |
| suse-su-2024:3183-1 | Security update for java-1_8_0-ibm | 2024-09-09T21:11:58Z | 2024-09-09T21:11:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:11955-1 | pdns-recursor-4.6.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11954-1 | pdns-4.6.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11953-1 | cargo-audit-advisory-db-20220323-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11952-1 | 389-ds-2.0.14~git25.e6431d959-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11951-1 | libvlc5-3.0.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11950-1 | libxml2-2-2.9.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11949-1 | cyrus-sasl-2.1.28-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11948-1 | spotifyd-0.3.3-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11947-1 | apptainer-1.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11946-1 | parsec-tool-0.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11945-1 | parsec-1.0.0~rc3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11944-1 | libcrypto47-3.4.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11943-1 | abcm2ps-8.14.13-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11942-1 | python310-waitress-2.1.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11941-1 | kanidm-1.1.0~alpha7~git0.c8468199-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11940-1 | libtcmu2-1.5.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11939-1 | kernel-devel-5.16.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11938-1 | libwavpack1-32bit-5.4.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11937-1 | git-delta-0.12.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11936-1 | fish-3.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11935-1 | arm-trusted-firmware-2.6-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11934-1 | zabbix-agent-4.0.39-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11933-1 | libopenssl-1_1-devel-1.1.1n-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11932-1 | chromedriver-99.0.4844.74-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11931-1 | aws-nitro-enclaves-binaryblobs-upstream-1.2.0~git2.841ef94-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11930-1 | xen-4.16.0_06-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11929-1 | squid-5.4.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11928-1 | pleaser-0.5.1~git0.ce9627c-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11927-1 | libopenssl-3-devel-3.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11926-1 | grub2-2.06-18.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2020-13299 | 2024-03-06T11:22:37.550Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13298 | 2024-03-06T11:22:38.789Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13297 | 2024-03-06T11:22:40.028Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13296 | 2024-03-06T11:22:41.282Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13294 | 2024-03-06T11:22:42.497Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13293 | 2024-03-06T11:22:43.736Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13292 | 2024-03-06T11:22:45.050Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13291 | 2024-03-06T11:22:46.374Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13290 | 2024-03-06T11:22:47.645Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13289 | 2024-03-06T11:22:48.889Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13288 | 2024-03-06T11:22:50.137Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13287 | 2024-03-06T11:22:51.384Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13286 | 2024-03-06T11:22:52.654Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13285 | 2024-03-06T11:22:53.955Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13284 | 2024-03-06T11:22:55.215Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13283 | 2024-03-06T11:22:56.484Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13282 | 2024-03-06T11:22:57.722Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13281 | 2024-03-06T11:22:58.974Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13280 | 2024-03-06T11:23:00.208Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13277 | 2024-03-06T11:23:01.447Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13276 | 2024-03-06T11:23:02.719Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13275 | 2024-03-06T11:23:03.974Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13274 | 2024-03-06T11:23:05.224Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13273 | 2024-03-06T11:23:06.491Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13272 | 2024-03-06T11:23:07.764Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13271 | 2024-03-06T11:23:09.001Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13270 | 2024-03-06T11:23:10.258Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13269 | 2024-03-06T11:23:11.525Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13268 | 2024-03-06T11:23:12.820Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13267 | 2024-03-06T11:23:14.054Z | 2025-04-03T14:40:37.652Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-21272 | Ivanti Endpoint Manager代码执行漏洞（CNVD-2025-21272） | 2025-09-11 | 2025-09-15 |
| cnvd-2025-21271 | Ivanti Endpoint Manager代码执行漏洞 | 2025-09-11 | 2025-09-15 |
| cnvd-2025-21270 | WordPress AI ChatBot for WordPress plugin跨站脚本漏洞 | 2025-09-11 | 2025-09-15 |
| cnvd-2025-21269 | WordPress WP Import plugin未授权访问漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21268 | WordPress Responsive Filterable Portfolio plugin任意文件上传漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21267 | WordPress Testimonial Plugin SQL注入漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21266 | WordPress NitroPack plugin未授权修改漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21265 | WordPress MyBrain Utilities plugin跨站脚本漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21264 | WordPress Maspik plugin授权问题漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21263 | WordPress Maspik – Ultimate Spam Protection plugin跨站请求伪造漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21262 | WordPress Heateor Login plugin跨站脚本漏洞 | 2025-09-12 | 2025-09-15 |
| cnvd-2025-21256 | Cisco Webex Meetings跨站脚本漏洞（CNVD-2025-21256） | 2025-09-05 | 2025-09-12 |
| cnvd-2025-21255 | Cisco Integrated Management Controller跨站脚本漏洞 | 2025-09-09 | 2025-09-12 |
| cnvd-2025-21254 | Cisco Integrated Management Controller输入验证错误漏洞 | 2025-09-09 | 2025-09-12 |
| cnvd-2025-21253 | Cisco IOS XR资源管理错误漏洞（CNVD-2025-21253） | 2025-09-12 | 2025-09-12 |
| cnvd-2025-21252 | Cisco IOS XR数据伪造问题漏洞（CNVD-2025-21252） | 2025-09-12 | 2025-09-12 |
| cnvd-2025-21251 | Cisco IOS XR访问控制错误漏洞（CNVD-2025-21251） | 2025-09-12 | 2025-09-12 |
| cnvd-2025-21214 | Tenda G3 formSetStaticRoute函数堆栈缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21213 | Tenda G3 formSetDebugCfg函数堆栈缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21212 | Tenda G3 formModifyPppAuthWhiteMac函数堆栈缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21211 | Tenda G3 formIPMacBindModify函数堆栈缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21210 | Tenda G3 formDelPortMapping函数堆栈缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21209 | SAP NetWeaver ABAP Platform跨站脚本漏洞 | 2025-08-18 | 2025-09-12 |
| cnvd-2025-21208 | SAP NetWeaver Application Server ABAP HTML注入漏洞 | 2025-08-18 | 2025-09-12 |
| cnvd-2025-21207 | SAP NetWeaver Application Server for ABAP跨站脚本漏洞（CNVD-2025-21207） | 2025-08-18 | 2025-09-12 |
| cnvd-2025-21206 | SAP Supplier Relationship Management跨站脚本漏洞（CNVD-2025-21206） | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21205 | SAP NetWeaver反序列化漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21204 | SAP NetWeaver Application Server Java访问控制错误漏洞（CNVD-2025-21204） | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21203 | SAP NetWeaver ABAP Platform跨站脚本漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21202 | SAP Fiori App Manage Work Center Groups跨站请求伪造漏洞 | 2025-09-11 | 2025-09-12 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-227 | Multiples vulnérabilités dans les produits Microsoft | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-226 | Multiples vulnérabilités dans Microsoft .Net | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-225 | Multiples vulnérabilités dans Microsoft Windows | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-224 | Multiples vulnérabilités dans Microsoft Office | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-223 | Vulnérabilité dans les produits Moxa | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-222 | Multiples vulnérabilités dans les produits Intel | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-221 | Multiples vulnérabilités dans Xen | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-220 | Vulnérabilité dans Ruby on Rails | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-219 | Multiples vulnérabilités dans Mozilla Firefox | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-218 | Multiples vulnérabilités dans les produits Nextcloud | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-217 | Multiples vulnérabilités dans les produits Citrix | 2022-03-09T00:00:00.000000 | 2022-03-09T00:00:00.000000 |
| certfr-2022-avi-216 | Multiples vulnérabilités dans les produits Siemens | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-215 | Multiples vulnérabilités dans les produits Schneider | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-214 | Vulnérabilité dans SolarWinds Web Help Desk | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-213 | Multiples vulnérabilités dans Google Android | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-212 | Multiples vulnérabilités dans le noyau Linux de Debian | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-211 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-207 | Vulnérabilité dans Synology DiskStation Manager | 2022-03-08T00:00:00.000000 | 2022-03-08T00:00:00.000000 |
| certfr-2022-avi-210 | Multiples vulnérabilités dans les produits Mozilla | 2022-03-07T00:00:00.000000 | 2022-03-07T00:00:00.000000 |
| certfr-2022-avi-209 | Multiples vulnérabilités dans Google Chrome OS | 2022-03-07T00:00:00.000000 | 2022-03-07T00:00:00.000000 |
| certfr-2022-avi-208 | Multiples vulnérabilités dans Asterisk | 2022-03-07T00:00:00.000000 | 2022-03-07T00:00:00.000000 |
| certfr-2022-avi-195 | Multiples vulnérabilités dans VMware Spring | 2022-03-02T00:00:00.000000 | 2022-03-07T00:00:00.000000 |
| certfr-2022-avi-206 | Multiples vulnérabilités dans Microsoft Edge | 2022-03-04T00:00:00.000000 | 2022-03-04T00:00:00.000000 |
| certfr-2022-avi-205 | Multiples vulnérabilités dans les produits IBM | 2022-03-04T00:00:00.000000 | 2022-03-04T00:00:00.000000 |
| certfr-2022-avi-204 | Multiples vulnérabilités dans F-Secure SAFE Browser | 2022-03-04T00:00:00.000000 | 2022-03-04T00:00:00.000000 |
| certfr-2022-avi-203 | Vulnérabilité dans Sophos SSL VPN client | 2022-03-04T00:00:00.000000 | 2022-03-04T00:00:00.000000 |
| certfr-2022-avi-202 | Multiples vulnérabilités dans SolarWinds Serv-U | 2022-03-03T00:00:00.000000 | 2022-03-03T00:00:00.000000 |
| certfr-2022-avi-201 | Multiples vulnérabilités dans IBM WebSphere | 2022-03-03T00:00:00.000000 | 2022-03-03T00:00:00.000000 |
| certfr-2022-avi-200 | Multiples vulnérabilités dans les produits Cisco | 2022-03-03T00:00:00.000000 | 2022-03-03T00:00:00.000000 |
| certfr-2022-avi-199 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-03-03T00:00:00.000000 | 2022-03-03T00:00:00.000000 |