Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-66162
5.4 (3.1)
WordPress Spoter for Elementor plugin <= 1.04 - Broken… merkulove
Spoter for Elementor
2025-12-16T08:12:55.672Z 2026-01-20T14:28:24.446Z
CVE-2025-66153
5.4 (3.1)
WordPress Headinger for Elementor plugin <= 1.1.4 - Br… merkulove
Headinger for Elementor
2025-12-31T18:31:21.816Z 2026-01-20T14:28:24.444Z
CVE-2025-66526
4.3 (3.1)
WordPress Tablesome plugin <= 1.1.34 - Broken Access C… Essekia
Tablesome
2025-12-09T14:13:53.002Z 2026-01-20T14:28:24.435Z
CVE-2025-66134
5.4 (3.1)
WordPress FileBird Pro plugin <= 6.4.9 - Broken Access… NinjaTeam
FileBird Pro
2025-12-16T08:12:55.088Z 2026-01-20T14:28:24.432Z
CVE-2025-66166
5.4 (3.1)
WordPress Lottier for Elementor plugin <= 1.0.9 - Brok… merkulove
Lottier for Elementor
2025-12-16T08:12:56.603Z 2026-01-20T14:28:24.430Z
CVE-2025-66163
5.4 (3.1)
WordPress Masker for Elementor plugin <= 1.1.4 - Broke… merkulove
Masker for Elementor
2025-12-16T08:12:55.859Z 2026-01-20T14:28:24.419Z
CVE-2025-66154
5.4 (3.1)
WordPress Couponer for Elementor plugin <= 1.1.7 - Bro… merkulove
Couponer for Elementor
2025-12-31T17:01:26.537Z 2026-01-20T14:28:24.410Z
CVE-2025-66126
5.3 (3.1)
WordPress Fix Media Library plugin <= 2.0 - Sensitive … wowpress.host
Fix Media Library
2025-12-16T08:12:53.301Z 2026-01-20T14:28:24.341Z
CVE-2025-66124
5.3 (3.1)
WordPress Leaky Paywall plugin <= 4.22.5 - Broken Acce… ZEEN101
Leaky Paywall
2025-12-16T08:12:52.912Z 2026-01-20T14:28:24.250Z
CVE-2025-66120
5.3 (3.1)
WordPress CatFolders plugin <= 2.5.3 - Broken Access C… CatFolders
CatFolders
2025-12-16T08:12:52.307Z 2026-01-20T14:28:24.074Z
CVE-2025-66116
7.5 (3.1)
WordPress Ultimate Member Widgets for Elementor plugin… UserElements
Ultimate Member Widgets for Elementor
2025-12-18T07:22:18.838Z 2026-01-20T14:28:24.052Z
CVE-2025-66104
6.5 (3.1)
WordPress Offload, AI & Optimize with Cloudflare Image… Anton Vanyukov
Offload, AI &amp; Optimize with Cloudflare Images
2025-12-18T07:22:18.646Z 2026-01-20T14:28:24.032Z
CVE-2025-66117
7.5 (3.1)
WordPress Easy Form plugin <= 2.7.8 - Broken Access Co… Ays Pro
Easy Form
2025-12-18T07:22:19.016Z 2026-01-20T14:28:24.031Z
CVE-2025-66097
4.3 (3.1)
WordPress I Order Terms plugin <= 1.5.0 - Cross Site R… Igor Jerosimić
I Order Terms
2025-11-21T12:29:59.986Z 2026-01-20T14:28:24.031Z
CVE-2025-66121
5.3 (3.1)
WordPress SiteGround Security plugin <= 1.5.8 - Broken… SiteGround
SiteGround Security
2025-12-16T08:12:52.500Z 2026-01-20T14:28:24.018Z
CVE-2025-66113
5.4 (3.1)
WordPress Better Chat Support for Messenger plugin <= … ThemeAtelier
Better Chat Support for Messenger
2025-11-21T12:30:05.951Z 2026-01-20T14:28:24.016Z
CVE-2025-66115
6.6 (3.1)
WordPress Easy Invoice plugin <= 2.1.4 - Local File In… MatrixAddons
Easy Invoice
2025-11-21T12:30:06.442Z 2026-01-20T14:28:24.013Z
CVE-2025-66087
5.3 (3.1)
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… Property Hive
PropertyHive
2025-11-21T12:29:58.540Z 2026-01-20T14:28:24.013Z
CVE-2025-66119
7.1 (3.1)
WordPress Hostel plugin <= 1.1.5.9 - Cross Site Script… Bob
Hostel
2025-12-18T07:22:19.370Z 2026-01-20T14:28:24.012Z
CVE-2025-66101
4.3 (3.1)
WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Br… Sabuj Kundu
CBX Bookmark & Favorite
2025-11-21T12:30:01.600Z 2026-01-20T14:28:24.010Z
CVE-2025-66094
6.5 (3.1)
WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripti… dmccan
Yada Wiki
2025-12-30T16:17:26.055Z 2026-01-20T14:28:24.009Z
CVE-2025-66088
7.5 (3.1)
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… Property Hive
PropertyHive
2025-12-18T07:22:18.084Z 2026-01-20T14:28:24.007Z
CVE-2025-66118
7.1 (3.1)
WordPress Sprout Clients plugin <= 3.2.1 - Cross Site … BoldGrid
Sprout Clients
2025-12-18T07:22:19.186Z 2026-01-20T14:28:24.006Z
CVE-2025-66092
6.5 (3.1)
WordPress Accordion Slider plugin <= 1.9.13 - Cross Si… bqworks
Accordion Slider
2025-11-21T12:29:59.275Z 2026-01-20T14:28:24.005Z
CVE-2025-66114
5.3 (3.1)
WordPress Show Variations as Single Products Woocommer… theme funda
Show Variations as Single Products Woocommerce
2025-11-21T12:30:06.230Z 2026-01-20T14:28:23.995Z
CVE-2025-66099
5.3 (3.1)
WordPress Chat Help plugin <= 3.1.3 - Broken Access Co… ThemeAtelier
Chat Help
2025-11-21T12:30:01.184Z 2026-01-20T14:28:23.992Z
CVE-2025-66100
6.5 (3.1)
WordPress RestroPress plugin <= 3.2.3.5 - Broken Acces… Magnigenie
RestroPress
2025-12-18T07:22:18.263Z 2026-01-20T14:28:23.990Z
CVE-2025-66093
6.5 (3.1)
WordPress Extensions for Leaflet Map plugin <= 4.8 - C… hupe13
Extensions for Leaflet Map
2025-11-21T12:29:59.483Z 2026-01-20T14:28:23.983Z
CVE-2025-66103
6.5 (3.1)
WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scri… Revmakx
WPCal.io
2025-12-30T16:43:38.792Z 2026-01-20T14:28:23.972Z
CVE-2025-66112
4.3 (3.1)
WordPress Accessibility Toolkit by WebYes plugin <= 2.… WebToffee
Accessibility Toolkit by WebYes
2025-11-21T12:30:05.704Z 2026-01-20T14:28:23.971Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-1257
7.5 (3.1)
Administrative Shortcodes <= 0.3.4 - Authenticated (Co… shazdeh
Administrative Shortcodes
2026-01-24T07:26:39.850Z 2026-01-26T15:45:54.702Z
CVE-2026-1208
4.3 (3.1)
Friendly Functions for Welcart <= 1.2.5 - Cross-Site R… mainichiweb
Friendly Functions for Welcart
2026-01-24T09:08:07.475Z 2026-01-26T17:41:14.150Z
CVE-2026-1191
4.4 (3.1)
JavaScript Notifier <= 1.2.8 - Authenticated (Administ… freemp
JavaScript Notifier
2026-01-24T09:08:07.887Z 2026-01-26T17:40:10.418Z
CVE-2026-1189
6.4 (3.1)
LeadBI Plugin for WordPress <= 1.7 - Authenticated (Co… leadbi
LeadBI Plugin for WordPress
2026-01-24T09:08:06.833Z 2026-01-26T17:41:49.672Z
CVE-2026-1127
6.1 (3.1)
Timeline Event History <= 3.2 - Reflected Cross-Site S… wpdiscover
Timeline Event History
2026-01-24T09:08:08.726Z 2026-01-26T17:38:57.038Z
CVE-2026-1103
5.4 (3.1)
AIKTP <= 5.0.04 - Missing Authorization to Authenticat… aiktp
AIKTP
2026-01-24T07:26:44.703Z 2026-01-26T18:19:14.889Z
CVE-2026-1099
6.4 (3.1)
Administrative Shortcodes <= 0.3.4 - Authenticated (Co… shazdeh
Administrative Shortcodes
2026-01-24T07:26:48.103Z 2026-01-26T18:07:08.791Z
CVE-2026-1098
6.4 (3.1)
CM CSS Columns <= 1.2.1 - Authenticated (Contributor+)… codemacher
CM CSS Columns
2026-01-24T08:26:36.215Z 2026-01-26T17:47:29.505Z
CVE-2026-1097
6.4 (3.1)
ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Cont… themeruby
ThemeRuby Multi Authors – Assign Multiple Writers to Posts
2026-01-24T07:26:47.342Z 2026-01-26T18:18:23.495Z
CVE-2026-1095
6.4 (3.1)
Canto Testimonials <= 1.0 - Authenticated (Contributor… cantothemes
Canto Testimonials
2026-01-24T07:26:43.567Z 2026-01-26T15:45:04.535Z
CVE-2026-1088
4.3 (3.1)
Login Page Editor <= 1.2 - Cross-Site Request Forgery … zero1zerouk
Login Page Editor
2026-01-24T07:26:48.803Z 2026-01-26T18:06:19.277Z
CVE-2026-1084
4.4 (3.1)
Cookie consent for developers <= 1.7.1 - Authenticated… lovor
Cookie consent for developers
2026-01-24T07:26:46.569Z 2026-01-26T15:44:38.666Z
CVE-2026-1081
4.3 (3.1)
Set Bulk Post Categories <= 1.1 - Cross-Site Request F… sauravrox
Set Bulk Post Categories
2026-01-24T07:26:45.529Z 2026-01-26T15:44:57.721Z
CVE-2026-1076
4.3 (3.1)
Star Review Manager <= 1.2.2 - Cross-Site Request Forg… bramdnl
Star Review Manager
2026-01-24T07:26:42.472Z 2026-01-26T15:45:22.768Z
CVE-2026-1075
4.3 (3.1)
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Se… teamzt
ZT Captcha
2026-01-24T07:26:45.884Z 2026-01-26T15:44:51.869Z
CVE-2026-1070
4.3 (3.1)
Alex User Counter <= 6.0 - Cross-Site Request Forgery … adzbierajewski
Alex User Counter
2026-01-24T07:26:40.963Z 2026-01-26T15:45:44.741Z
CVE-2026-0911
7.5 (3.1)
Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitr… wpmudev
Hustle – Email Marketing, Lead Generation, Optins, Popups
2026-01-24T12:27:15.063Z 2026-01-26T15:44:15.167Z
CVE-2026-0862
6.1 (3.1)
Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cr… pdfcrowd
Save as PDF Plugin by PDFCrowd
2026-01-24T15:34:06.548Z 2026-01-26T15:38:22.497Z
CVE-2026-0807
7.2 (3.1)
Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side … wpmessiah
Frontis Blocks — Block Library for the Block Editor
2026-01-24T07:26:41.330Z 2026-01-26T15:45:39.333Z
CVE-2026-0806
4.9 (3.1)
WP-ClanWars <= 2.0.1 - Authenticated (Administrator+) … andddd
WP-ClanWars
2026-01-24T07:26:43.201Z 2026-01-26T15:45:10.551Z
CVE-2026-0800
7.2 (3.1)
User Submitted Posts – Enable Users to Submit Posts fr… specialk
User Submitted Posts – Enable Users to Submit Posts from the Front End
2026-01-24T08:26:32.494Z 2026-01-26T18:05:59.221Z
CVE-2026-0687
4.3 (3.1)
Meta-box GalleryMeta <= 3.0.1 - Missing Authorization … shahinurislam
Meta-box GalleryMeta
2026-01-24T08:26:34.512Z 2026-01-26T18:01:57.710Z
CVE-2026-0633
3.7 (3.1)
MetForm – Contact Form, Survey, Quiz, & Custom Form Bu… roxnor
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
2026-01-24T08:26:35.777Z 2026-01-26T17:47:55.740Z
CVE-2026-0593
5.3 (3.1)
WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Miss… wpgmaps
WP Go Maps (formerly WP Google Maps)
2026-01-24T16:25:51.700Z 2026-01-26T17:37:40.408Z
CVE-2025-70983
9.9 (3.1)
Incorrect access control in the authRoutes functi… n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T19:46:37.743Z
CVE-2025-6461
4.3 (3.1)
CubeWP – All-in-One Dynamic Content Framework <= 1.1.2… cubewp1211
CubeWP Framework
2026-01-25T02:22:37.167Z 2026-01-26T17:37:01.515Z
CVE-2025-59108
9.2 (4.0)
Weak Default Passwords in dormakaba access manager dormakaba
Access Manager 92xx-k5
2026-01-26T10:06:31.533Z 2026-01-26T15:38:06.530Z
CVE-2025-59107
8.5 (4.0)
Static Firmware Encryption Password in dormakaba acces… dormakaba
Access Manager 92xx-k5
2026-01-26T10:06:22.025Z 2026-01-26T15:38:11.839Z
CVE-2025-59105
7 (4.0)
Unencrypted Flash Storage in dormakaba access manager dormakaba
Access Manager 92xx-k5
2026-01-26T10:06:02.727Z 2026-01-26T14:52:15.466Z
CVE-2025-59104
7 (4.0)
Unlocked Bootloader in dormakaba access manager dormakaba
Access Manager 92xx-k7
2026-01-26T10:05:54.218Z 2026-01-26T15:12:47.211Z
ID Description Published Updated
fkie_cve-2025-13920 The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… 2026-01-24T13:15:54.013 2026-01-26T15:03:33.357
fkie_cve-2025-13676 The JustClick registration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in … 2026-01-24T08:16:05.367 2026-01-26T15:03:33.357
fkie_cve-2025-13374 The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil… 2026-01-24T08:16:05.173 2026-01-26T15:03:33.357
fkie_cve-2025-13205 The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… 2026-01-24T09:15:51.880 2026-01-26T15:03:33.357
fkie_cve-2025-13194 The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… 2026-01-24T09:15:51.713 2026-01-26T15:03:33.357
fkie_cve-2025-13139 The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site R… 2026-01-24T09:15:50.647 2026-01-26T15:03:33.357
fkie_cve-2025-12836 The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 2026-01-24T08:16:03.870 2026-01-26T15:03:33.357
fkie_cve-2022-25369 An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user w… 2026-01-23T17:16:04.753 2026-01-26T15:03:33.357
fkie_cve-2021-47906 BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parame… 2026-01-23T17:16:04.383 2026-01-26T15:03:33.357
fkie_cve-2021-47905 MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletio… 2026-01-23T17:16:04.180 2026-01-26T15:03:33.357
fkie_cve-2021-47904 PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allo… 2026-01-23T17:16:03.990 2026-01-26T15:03:33.357
fkie_cve-2021-47903 LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in… 2026-01-23T17:16:02.743 2026-01-26T15:03:33.357
fkie_cve-2021-47899 YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allow… 2026-01-23T17:16:02.120 2026-01-26T15:03:33.357
fkie_cve-2021-47898 Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service r… 2026-01-23T17:16:01.767 2026-01-26T15:03:33.357
fkie_cve-2021-47897 PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter o… 2026-01-23T17:16:01.523 2026-01-26T15:03:33.357
fkie_cve-2021-47896 PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDi… 2026-01-23T17:15:58.023 2026-01-26T15:03:33.357
fkie_cve-2021-47895 Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the app… 2026-01-23T17:15:57.390 2026-01-26T15:03:33.357
fkie_cve-2021-47894 Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows atta… 2026-01-23T17:15:57.020 2026-01-26T15:03:33.357
fkie_cve-2021-47893 AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature … 2026-01-23T17:15:56.717 2026-01-26T15:03:33.357
fkie_cve-2021-47892 PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special… 2026-01-23T17:15:56.517 2026-01-26T15:03:33.357
fkie_cve-2021-47891 Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to s… 2026-01-23T17:15:52.523 2026-01-26T15:03:33.357
fkie_cve-2021-47890 LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service runni… 2026-01-23T17:15:52.323 2026-01-26T15:03:33.357
fkie_cve-2021-47889 Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChec… 2026-01-23T17:15:52.110 2026-01-26T15:03:33.357
fkie_cve-2021-47888 Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability th… 2026-01-23T17:15:51.930 2026-01-26T15:03:33.357
fkie_cve-2021-47881 dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that all… 2026-01-23T17:15:51.717 2026-01-26T15:03:33.357
fkie_cve-2020-36937 Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows se… 2026-01-25T14:15:48.493 2026-01-26T15:03:33.357
fkie_cve-2020-36936 Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service… 2026-01-25T14:15:48.330 2026-01-26T15:03:33.357
fkie_cve-2020-36935 KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configurati… 2026-01-25T14:15:48.167 2026-01-26T15:03:33.357
fkie_cve-2020-36934 Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNet… 2026-01-25T14:15:48.003 2026-01-26T15:03:33.357
fkie_cve-2020-36933 HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service conf… 2026-01-25T14:15:47.803 2026-01-26T15:03:33.357
ID Severity Description Published Updated
ghsa-gjrx-9m4x-8hq8
5.4 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Meks Meks Quick Plugin Disabler meks-quick-plugi… 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-f3vg-vfv2-qq64
5.4 (3.1)
Missing Authorization vulnerability in merkulove Buttoner for Elementor buttoner-elementor allows E… 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-f293-cv38-h9p6
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-cq3q-ph38-mjwc
6.5 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email con… 2025-12-18T09:30:24Z 2026-01-20T15:32:18Z
ghsa-c8ph-2xvf-c9p9
5.4 (3.1)
Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows E… 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-9jm6-f8vm-2h74
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-9c97-mqhv-6q84
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-18T09:30:24Z 2026-01-20T15:32:18Z
ghsa-8r89-g342-fxcq
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-8j59-pxfw-664p
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-7jg4-8pc3-8qw9
7.2 (3.1)
Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-76hm-28jx-qx25
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:24Z 2026-01-20T15:32:18Z
ghsa-6qhr-c46w-3j7m
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-5xxr-4wwq-4pgv
5.8 (3.1)
Insertion of Sensitive Information Into Sent Data vulnerability in WPCenter eRoom eroom-zoom-meetin… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-5gpr-xg7c-9pmr
5.4 (3.1)
Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting … 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-59jr-84cf-6w82
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-59cj-f4jq-939m
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-3rgf-x42q-9hg8
5.4 (3.1)
Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows E… 2025-12-16T09:31:10Z 2026-01-20T15:32:18Z
ghsa-32jg-xqp8-jrc4
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-3223-3v8m-44cp
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-2x2x-xcc2-p46h
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-2fv4-c5wh-p3p5
8.1 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T09:30:25Z 2026-01-20T15:32:18Z
ghsa-xgx6-92f3-rhqf
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-mrq7-p548-587h
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-hjv3-73x3-fw6v
6.5 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate ess… 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-c9mq-fjcv-jc83
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-62wj-77q3-24px
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-48pp-2gg2-9jj6
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-3wxp-8m6g-m8x5
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-16T09:31:10Z 2026-01-20T15:32:17Z
ghsa-wr7j-j478-jx7j
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-16T09:31:09Z 2026-01-20T15:32:16Z
ghsa-w2mg-8545-27mj
8.5 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-16T09:31:09Z 2026-01-20T15:32:16Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-30052 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.290269Z
gsd-2024-30654 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.290070Z
gsd-2024-30238 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… 2024-04-03T05:02:29.289490Z
gsd-2024-30261 Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the… 2024-04-03T05:02:29.289111Z
gsd-2024-30444 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-03T05:02:29.288525Z
gsd-2024-30046 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.288246Z
gsd-2024-30607 Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the… 2024-04-03T05:02:29.287830Z
gsd-2024-30354 Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulner… 2024-04-03T05:02:29.287209Z
gsd-2024-30618 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.286917Z
gsd-2024-30228 Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This iss… 2024-04-03T05:02:29.286311Z
gsd-2024-30219 ** UNSUPPPORTED WHEN ASSIGNED ** Active debug code vulnerability exists in MZK-MF300N all… 2024-04-03T05:02:29.286033Z
gsd-2024-30404 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.285838Z
gsd-2024-30644 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.285634Z
gsd-2024-30127 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.285442Z
gsd-2024-30959 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.285246Z
gsd-2024-30731 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.285048Z
gsd-2024-30707 Unauthorized node injection vulnerability in ROS2 Dashing Diademata in ROS_VERSION 2 and … 2024-04-03T05:02:29.284803Z
gsd-2024-30206 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.284602Z
gsd-2024-30695 An issue was discovered in the default configurations of ROS2 Galactic Geochelone version… 2024-04-03T05:02:29.284408Z
gsd-2024-30942 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.284214Z
gsd-2024-30842 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.284021Z
gsd-2024-30678 An issue has been discovered in ROS2 Iron Irwini ROS_VERSION 2 and ROS_PYTHON_VERSION 3, … 2024-04-03T05:02:29.283815Z
gsd-2024-30408 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.283618Z
gsd-2024-30290 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.283400Z
gsd-2024-30500 Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-O… 2024-04-03T05:02:29.282763Z
gsd-2024-30720 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.282437Z
gsd-2024-30847 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.282236Z
gsd-2024-30673 The format of the source doesn't require a description, click on the link for more details. 2024-04-03T05:02:29.282036Z
gsd-2024-30716 An insecure logging vulnerability in ROS2 Dashing Diademata ROS_VERSION 2 and ROS_PYTHON_… 2024-04-03T05:02:29.281760Z
gsd-2024-30343 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vuln… 2024-04-03T05:02:29.281231Z
ID Description Published Updated
mal-2025-191062 Malicious code in @varsityvibe/validation-schemas (npm) 2025-11-24T22:40:47Z 2025-12-01T04:28:27Z
mal-2025-191061 Malicious code in @varsityvibe/utils (npm) 2025-11-24T22:40:07Z 2025-12-01T04:28:27Z
mal-2025-191060 Malicious code in @varsityvibe/api-client (npm) 2025-11-24T22:39:57Z 2025-12-01T04:28:27Z
mal-2025-191059 Malicious code in @trigo/atrix-swagger (npm) 2025-11-24T23:04:22Z 2025-12-01T04:28:27Z
mal-2025-191058 Malicious code in @trefox/sleekshop-js (npm) 2025-11-24T23:03:51Z 2025-12-01T04:28:27Z
mal-2025-191057 Malicious code in @tiaanduplessis/react-progressbar (npm) 2025-11-24T23:02:30Z 2025-12-01T04:28:27Z
mal-2025-191056 Malicious code in @tiaanduplessis/json (npm) 2025-11-24T23:01:27Z 2025-12-01T04:28:27Z
mal-2025-191055 Malicious code in @thedelta/eslint-config (npm) 2025-11-24T23:00:55Z 2025-12-01T04:28:27Z
mal-2025-191468 Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm) 2025-11-26T02:42:38Z 2025-12-01T04:28:26Z
mal-2025-191458 Malicious code in @medusajs/medusa-oas-cli (npm) 2025-11-24T23:53:16Z 2025-12-01T04:28:26Z
mal-2025-191457 Malicious code in @medusajs/medusa (npm) 2025-11-24T23:52:26Z 2025-12-01T04:28:26Z
mal-2025-191456 Malicious code in @medusajs/analytics-posthog (npm) 2025-11-24T23:51:46Z 2025-12-01T04:28:26Z
mal-2025-191455 Malicious code in @kong/spec-renderer (npm) 2025-11-24T23:49:15Z 2025-12-01T04:28:26Z
mal-2025-191454 Malicious code in @freeday-ai/webchat (npm) 2025-11-24T23:43:08Z 2025-12-01T04:28:26Z
mal-2025-191453 Malicious code in @flowfuse/flowfuse (npm) 2025-11-24T23:42:58Z 2025-12-01T04:28:26Z
mal-2025-191452 Malicious code in @eventcatalog/generator-asyncapi (npm) 2025-11-24T23:38:47Z 2025-12-01T04:28:26Z
mal-2025-191451 Malicious code in @devx-commerce/plugin-discounts (npm) 2025-11-24T23:37:36Z 2025-12-01T04:28:26Z
mal-2025-191450 Malicious code in @axinom/mosaic-cli (npm) 2025-11-25T00:13:44Z 2025-12-01T04:28:26Z
mal-2025-191449 Malicious code in @accordproject/markdown-cli (npm) 2025-11-25T00:10:58Z 2025-12-01T04:28:26Z
mal-2025-191321 Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm) 2025-11-24T23:29:10Z 2025-12-01T04:28:26Z
mal-2025-191320 Malicious code in @silgi/yoga (npm) 2025-11-25T00:16:49Z 2025-12-01T04:28:26Z
mal-2025-191319 Malicious code in @silgi/scalar (npm) 2025-11-25T00:16:49Z 2025-12-01T04:28:26Z
mal-2025-191318 Malicious code in @silgi/ratelimit (npm) 2025-11-25T00:16:49Z 2025-12-01T04:28:26Z
mal-2025-191317 Malicious code in @silgi/permission (npm) 2025-11-24T23:28:20Z 2025-12-01T04:28:26Z
mal-2025-191316 Malicious code in @silgi/openapi (npm) 2025-11-24T23:27:50Z 2025-12-01T04:28:26Z
mal-2025-191315 Malicious code in @silgi/module-builder (npm) 2025-11-24T23:27:00Z 2025-12-01T04:28:26Z
mal-2025-191314 Malicious code in @silgi/graphql (npm) 2025-11-24T23:26:24Z 2025-12-01T04:28:26Z
mal-2025-191313 Malicious code in @silgi/ecosystem (npm) 2025-11-24T23:25:50Z 2025-12-01T04:28:26Z
mal-2025-191312 Malicious code in @silgi/drizzle (npm) 2025-11-24T23:25:34Z 2025-12-01T04:28:26Z
mal-2025-191311 Malicious code in @silgi/better-auth (npm) 2025-11-24T23:25:04Z 2025-12-01T04:28:26Z
ID Description Published Updated
wid-sec-w-2024-1291 cyrus imapd: Schwachstelle ermöglicht Denial of Service 2024-06-04T22:00:00.000+00:00 2025-01-23T23:00:00.000+00:00
wid-sec-w-2022-2247 Cacti: Schwachstelle ermöglicht Codeausführung 2022-12-06T23:00:00.000+00:00 2025-01-23T23:00:00.000+00:00
wid-sec-w-2022-0389 cyrus imapd: Schwachstelle ermöglicht Denial of Service 2021-08-31T22:00:00.000+00:00 2025-01-23T23:00:00.000+00:00
wid-sec-w-2022-0388 cyrus imapd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2019-11-19T23:00:00.000+00:00 2025-01-23T23:00:00.000+00:00
wid-sec-w-2025-0183 Drupal: Mehrere Schwachstellen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0182 Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0181 M-Files Server: Mehrere Schwachstellen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0180 Ubiquiti UniFi: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0179 Kibana: Mehrere Schwachstellen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0176 Cisco Meeting Management: Schwachstelle ermöglicht Privilegieneskalation 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0175 Jenkins Plugins: Mehrere Schwachstellen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0171 GitLab: Mehrere Schwachstellen 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0169 Unify OpenScape 4000: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2025-01-22T23:00:00.000+00:00 2025-01-22T23:00:00.000+00:00
wid-sec-w-2025-0168 Oracle JD Edwards: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0165 Oracle Retail Applications: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0164 Oracle Siebel CRM: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0163 Oracle Supply Chain: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0162 Oracle Systems: Schwachstelle gefährdet Integrität und Verfügbarkeit 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0161 Oracle Utilities Applications: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0160 Oracle Virtualization: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0159 JetBrains TeamCity: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0158 Linksys Router: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0157 Microsoft GitHub Enterprise: Schwachstelle ermöglicht Signatur-Spoofing 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0153 Arista EOS: Schwachstelle ermöglicht Denial of Service 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0152 Siemens SIMATIC S7: Schwachstelle ermöglicht Manipulation der Konfiguration 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0151 HCL BigFix: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0149 Oracle Java SE: Mehrere Schwachstellen 2019-07-16T22:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0148 Oracle Communications: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0147 Oracle Construction and Engineering: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
wid-sec-w-2025-0146 Oracle E-Business Suite: Mehrere Schwachstellen 2025-01-21T23:00:00.000+00:00 2025-01-21T23:00:00.000+00:00
ID Description Published Updated
rhsa-2010:0043 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update 2010-01-14T16:32:00+00:00 2026-01-28T22:34:04+00:00
rhsa-2009:1694 Red Hat Security Advisory: java-1.6.0-ibm security update 2009-12-23T17:33:00+00:00 2026-01-28T22:34:04+00:00
rhsa-2009:1662 Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update 2009-12-11T13:42:00+00:00 2026-01-28T22:34:03+00:00
rhsa-2009:1650 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP08 update 2009-12-10T00:03:00+00:00 2026-01-28T22:34:03+00:00
rhsa-2009:1649 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update 2009-12-09T23:51:00+00:00 2026-01-28T22:34:03+00:00
rhsa-2009:1551 Red Hat Security Advisory: java-1.4.2-ibm security update 2009-11-04T15:14:00+00:00 2026-01-28T22:34:03+00:00
rhsa-2009:1637 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP08 update 2009-12-09T23:32:00+00:00 2026-01-28T22:34:02+00:00
rhsa-2009:1636 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update 2009-12-09T23:14:00+00:00 2026-01-28T22:34:01+00:00
rhsa-2009:1615 Red Hat Security Advisory: xerces-j2 security update 2009-11-30T15:11:00+00:00 2026-01-28T22:34:00+00:00
rhsa-2009:1582 Red Hat Security Advisory: java-1.6.0-ibm security update 2009-11-12T18:15:00+00:00 2026-01-28T22:34:00+00:00
rhsa-2009:1505 Red Hat Security Advisory: java-1.4.2-ibm security update 2009-10-14T16:08:00+00:00 2026-01-28T22:34:00+00:00
rhsa-2009:1428 Red Hat Security Advisory: xmlsec1 security update 2009-09-08T15:43:00+00:00 2026-01-28T22:33:59+00:00
rhsa-2009:1236 Red Hat Security Advisory: java-1.5.0-ibm security update 2009-08-28T08:57:00+00:00 2026-01-28T22:33:58+00:00
rhsa-2009:1201 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update 2009-08-06T21:14:00+00:00 2026-01-28T22:33:58+00:00
rhsa-2009:1200 Red Hat Security Advisory: java-1.6.0-sun security update 2009-08-06T20:41:00+00:00 2026-01-28T22:33:58+00:00
rhsa-2009:1199 Red Hat Security Advisory: java-1.5.0-sun security update 2009-08-06T20:38:00+00:00 2026-01-28T22:33:57+00:00
rhsa-2009:0466 Red Hat Security Advisory: java-1.5.0-ibm security update 2009-05-07T11:45:00+00:00 2026-01-28T22:33:57+00:00
rhsa-2008:1025 Red Hat Security Advisory: java-1.5.0-sun security update 2008-12-04T15:45:00+00:00 2026-01-28T22:33:56+00:00
rhsa-2009:0369 Red Hat Security Advisory: java-1.6.0-ibm security update 2009-03-25T14:52:00+00:00 2026-01-28T22:33:55+00:00
rhsa-2009:0016 Red Hat Security Advisory: java-1.5.0-ibm security update 2009-01-13T21:39:00+00:00 2026-01-28T22:33:54+00:00
rhsa-2008:1018 Red Hat Security Advisory: java-1.6.0-sun security update 2008-12-04T15:45:00+00:00 2026-01-28T22:33:50+00:00
rhea-2014:1175 Red Hat Enhancement Advisory: Release of Satellite 6.0 2014-09-10T13:09:19+00:00 2026-01-28T22:33:50+00:00
rhba-2016:1500 Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Base Libraries 2016-07-27T08:24:38+00:00 2026-01-28T22:33:48+00:00
rhsa-2022:6393 Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update 2022-09-08T11:31:04+00:00 2026-01-28T22:20:43+00:00
rhsa-2022:6890 Red Hat Security Advisory: OpenShift Virtualization 4.8.7 Images bug fixes and security update 2022-10-11T16:02:33+00:00 2026-01-28T22:20:00+00:00
rhsa-2022:6681 Red Hat Security Advisory: OpenShift Virtualization 4.9.6 Images security and bug fix update 2022-09-22T08:16:30+00:00 2026-01-28T22:19:59+00:00
rhsa-2022:6351 Red Hat Security Advisory: OpenShift Virtualization 4.10.5 Images security and bug fix update 2022-09-06T14:00:38+00:00 2026-01-28T22:19:50+00:00
rhsa-2024:6412 Red Hat Security Advisory: OpenShift Container Platform 4.14.36 security update 2024-09-11T18:52:41+00:00 2026-01-28T22:16:20+00:00
rhsa-2024:5754 Red Hat Security Advisory: OpenShift Container Platform 4.15.29 packages and security update 2024-08-28T19:35:22+00:00 2026-01-28T22:16:19+00:00
rhsa-2022:0655 Red Hat Security Advisory: OpenShift Container Platform 4.9.23 bug fix and security update 2022-02-28T20:49:34+00:00 2026-01-28T22:15:30+00:00
ID Description Published Updated
msrc_cve-2024-8176 Libexpat: expat: improper restriction of xml entity expansion depth in libexpat 2025-03-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2024-6345 Remote Code Execution in pypa/setuptools 2024-07-01T07:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2024-12133 Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos 2025-02-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2024-11053 netrc and redirect credential leak 2024-12-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2023-48795 The SSH transport protocol with certain OpenSSH extensions found in OpenSSH before 9.6 and other products allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message) and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP) implemented by these extensions mishandles the handshake phase and mishandles use of sequence numbers. For example there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT Dropbear through 2022.83 Ssh before 5.1.1 in Erlang/OTP PuTTY before 0.80 AsyncSSH before 2.14.2 golang.org/x/crypto before 0.17.0 libssh before 0.10.6 libssh2 2023-12-01T08:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2023-0330 Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow 2023-03-10T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2022-40897 Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. 2022-12-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2021-44647 Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service. 2022-01-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2015-1473 The GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service 2015-04-02T00:00:00.000Z 2025-04-12T00:00:00.000Z
msrc_cve-2025-29834 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2025-04-08T07:00:00.000Z 2025-04-11T07:00:00.000Z
msrc_cve-2025-31115 XZ has a heap-use-after-free bug in threaded .xz decoder 2025-04-02T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2025-30211 KEX init error results with excessive memory usage 2025-03-02T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2025-1795 Mishandling of comma during folding and unicode-encoding of email headers 2025-02-02T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2024-48615 Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8. 2025-03-02T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2024-2313 If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. 2024-03-02T08:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2024-12905 An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. 2025-03-02T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2023-2861 Qemu: 9pfs: improper access control on special files 2023-12-01T08:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2023-1544 Qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() 2023-03-10T00:00:00.000Z 2025-04-11T00:00:00.000Z
msrc_cve-2025-29792 Microsoft Office Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-27732 Windows Graphics Component Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-27730 Windows Digital Media Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-27476 Windows Digital Media Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-27467 Windows Digital Media Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-26647 Windows Kerberos Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-10T07:00:00.000Z
msrc_cve-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-09T07:00:00.000Z
msrc_cve-2025-29810 Active Directory Domain Services Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-09T07:00:00.000Z
msrc_cve-2025-29809 Windows Kerberos Security Feature Bypass Vulnerability 2025-04-08T07:00:00.000Z 2025-04-09T07:00:00.000Z
msrc_cve-2025-27742 NTFS Information Disclosure Vulnerability 2025-04-08T07:00:00.000Z 2025-04-09T07:00:00.000Z
msrc_cve-2025-27741 NTFS Elevation of Privilege Vulnerability 2025-04-08T07:00:00.000Z 2025-04-09T07:00:00.000Z
ID Description Updated
var-202312-2654 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow v… 2025-07-10T22:57:14.140000Z
var-202403-2484 A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Admi… 2025-07-10T22:57:13.675000Z
var-202506-3367 A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.… 2025-07-10T22:57:10.805000Z
var-202401-1548 An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allo… 2025-07-10T22:55:27.600000Z
var-202506-0484 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… 2025-07-10T22:55:23.894000Z
var-202506-0482 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scriptin… 2025-07-10T22:55:23.863000Z
var-202401-2676 TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalR… 2025-07-10T22:53:26.551000Z
var-202401-1037 A vulnerability was found in Totolink T8 4.1.5cu.833_20220905. It has been rated as probl… 2025-07-10T22:48:31.317000Z
var-202403-1743 TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) … 2025-07-10T22:48:30.918000Z
var-202506-0444 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… 2025-07-10T22:48:27.877000Z
var-202506-0441 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… 2025-07-10T22:48:27.862000Z
var-202506-0445 CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service… 2025-07-10T22:48:27.845000Z
var-202506-0443 CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… 2025-07-10T22:48:27.830000Z
var-202506-0440 CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service… 2025-07-10T22:48:27.813000Z
var-202401-0374 A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220… 2025-07-10T22:47:09.712000Z
var-202401-0479 A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared a… 2025-07-10T22:47:09.687000Z
var-202401-1088 A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classi… 2025-07-10T22:47:09.634000Z
var-202504-0860 CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that… 2025-07-10T22:47:06.942000Z
var-202312-2638 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow v… 2025-07-10T22:40:11.215000Z
var-202405-0739 Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to exe… 2025-07-09T23:22:29.095000Z
var-202408-0176 A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3… 2025-07-09T23:22:28.673000Z
var-202501-2809 Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmw… 2025-07-09T23:22:27.884000Z
var-202502-2375 A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier… 2025-07-09T23:22:11.602000Z
var-202408-0044 A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. It has been rated as… 2025-07-09T23:21:00.412000Z
var-202507-0016 A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B2… 2025-07-09T23:20:54.715000Z
var-202403-1911 TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) … 2025-07-09T23:18:50.328000Z
var-202403-2459 There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Ea… 2025-07-09T23:18:50.284000Z
var-202407-2453 A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic… 2025-07-09T23:18:49.621000Z
var-202505-0056 A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as proble… 2025-07-09T23:18:23.119000Z
var-202403-2890 TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)… 2025-07-09T23:18:03.570000Z
ID Description Updated
ID Description Published Updated
suse-su-2024:3182-1 Security update for expat 2024-09-09T14:41:45Z 2024-09-09T14:41:45Z
suse-su-2024:3181-1 Security update for postgresql16 2024-09-09T14:41:29Z 2024-09-09T14:41:29Z
suse-su-2024:3174-1 Security update for bubblewrap and flatpak 2024-09-09T10:58:39Z 2024-09-09T10:58:39Z
suse-su-2024:3173-1 Security update for apache2 2024-09-09T10:56:51Z 2024-09-09T10:56:51Z
suse-su-2024:3172-1 Security update for apache2 2024-09-09T10:55:41Z 2024-09-09T10:55:41Z
suse-su-2024:3171-1 Security update for postgresql16 2024-09-09T10:53:34Z 2024-09-09T10:53:34Z
suse-su-2024:3170-1 Security update for postgresql16 2024-09-09T10:51:47Z 2024-09-09T10:51:47Z
suse-su-2024:3169-1 Security update for postgresql16 2024-09-09T10:49:55Z 2024-09-09T10:49:55Z
suse-su-2024:3168-1 Security update for postgresql16 2024-09-09T10:48:16Z 2024-09-09T10:48:16Z
suse-su-2024:3165-1 Security update for wireshark 2024-09-09T07:25:24Z 2024-09-09T07:25:24Z
suse-su-2024:3163-1 Security update for gradle 2024-09-06T10:18:54Z 2024-09-06T10:18:54Z
suse-su-2024:3162-1 Security update for java-1_8_0-ibm 2024-09-06T10:18:01Z 2024-09-06T10:18:01Z
suse-su-2024:3161-1 Security update for python-Django 2024-09-06T10:16:42Z 2024-09-06T10:16:42Z
suse-su-2024:3160-1 Security update for postgresql16 2024-09-06T10:16:20Z 2024-09-06T10:16:20Z
suse-su-2024:3159-1 Security update for postgresql16 2024-09-06T10:15:54Z 2024-09-06T10:15:54Z
suse-su-2024:3158-1 Security update for postgresql16 2024-09-06T10:15:33Z 2024-09-06T10:15:33Z
suse-su-2024:3157-1 Security update for MozillaFirefox 2024-09-06T10:14:40Z 2024-09-06T10:14:40Z
suse-su-2024:3156-1 Security update for python312-pip 2024-09-06T10:13:16Z 2024-09-06T10:13:16Z
suse-su-2024:3155-1 Security update for kubernetes1.26 2024-09-06T10:12:52Z 2024-09-06T10:12:52Z
suse-su-2024:3154-1 Security update for postgresql16 2024-09-06T09:23:43Z 2024-09-06T09:23:43Z
suse-su-2024:3153-1 Security update for postgresql16 2024-09-06T09:23:02Z 2024-09-06T09:23:02Z
suse-su-2024:3152-1 Security update for MozillaFirefox 2024-09-06T09:22:29Z 2024-09-06T09:22:29Z
suse-su-2024:3151-1 Security update for buildah 2024-09-06T08:23:40Z 2024-09-06T08:23:40Z
suse-su-2024:3149-1 Security update for systemd 2024-09-05T15:05:38Z 2024-09-05T15:05:38Z
suse-su-2024:3144-1 Security update for hdf5, netcdf, trilinos 2024-09-05T06:31:59Z 2024-09-05T06:31:59Z
suse-su-2024:3140-1 Security update for java-1_8_0-openj9 2024-09-04T10:16:43Z 2024-09-04T10:16:43Z
suse-su-2024:3139-1 Security update for python-Django 2024-09-04T10:16:13Z 2024-09-04T10:16:13Z
suse-su-2024:3136-1 Security update for perl-DBI 2024-09-04T06:52:40Z 2024-09-04T06:52:40Z
suse-su-2024:3120-1 Security update for buildah, docker 2024-09-03T15:13:23Z 2024-09-03T15:13:23Z
suse-su-2024:3119-1 Security update for openssl-1_0_0 2024-09-03T15:10:41Z 2024-09-03T15:10:41Z
ID Description Published Updated
opensuse-su-2024:11925-1 firecracker-1.0.0-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11924-1 cscreen-1.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11923-1 sccache-0.2.15~git0.6b6d2f7-11.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11922-1 rustup-1.24.3~0-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11921-1 rage-encryption-0.7.1+0-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11920-1 cargo-audit-0.16.0~git0.625c965-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11919-1 apache2-2.4.53-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11918-1 tuigreet-0.7.1-4.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11917-1 treefetch-2.0.0~git0.5b3eac1-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11916-1 tealdeer-1.5.0+0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11915-1 libblkid-devel-2.37.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11914-1 macchina-6.0.6~git0.c21ce78-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11913-1 juliaup-1.5.37-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11912-1 ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11911-1 etcd-3.5.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11910-1 kernel-devel-5.16.14-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11909-1 MozillaThunderbird-91.7.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11908-1 MozillaFirefox-98.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11907-1 qemu-6.2.0-41.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11906-1 ruby3.1-rubygem-sprockets-4.0.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11905-1 libopenssl-1_1-devel-1.1.1m-4.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11904-1 cobbler-3.3.2.0+git.9044aa99-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11903-1 ruby3.1-rubygem-activestorage-7.0-7.0.2.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11902-1 fscrypt-0.3.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11901-1 cyradm-2.4.22-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11900-1 ruby3.1-rubygem-loofah-2.14.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11899-1 ruby3.1-rubygem-actionpack-7.0-7.0.2.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11898-1 libopenvswitch-2_17-0-2.17.0-12.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11897-1 minidlna-1.3.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:11896-1 java-1_8_0-openj9-1.8.0.322-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
bit-gitlab-2020-13266 2024-03-06T11:23:15.296Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-13265 2024-03-06T11:23:16.561Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-13264 2024-03-06T11:23:17.785Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-13263 2024-03-06T11:23:19.027Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-13262 2024-03-06T11:23:20.331Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-13261 2024-03-06T11:23:21.598Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-12448 2024-03-06T11:23:22.845Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-12277 2024-03-06T11:23:24.109Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-12276 2024-03-06T11:23:25.385Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-12275 2024-03-06T11:23:26.642Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-11649 2024-03-06T11:23:27.888Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-11506 2024-03-06T11:23:29.202Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-11505 2024-03-06T11:23:30.519Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10981 2024-03-06T11:23:31.761Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10980 2024-03-06T11:23:33.013Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10979 2024-03-06T11:23:34.248Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10978 2024-03-06T11:23:35.522Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10977 2024-03-06T11:23:36.866Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10976 2024-03-06T11:23:38.111Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10975 2024-03-06T11:23:39.384Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10956 2024-03-06T11:23:40.637Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10955 2024-03-06T11:23:41.904Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10954 2024-03-06T11:23:43.181Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10953 2024-03-06T11:23:44.411Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10952 2024-03-06T11:23:45.726Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10535 2024-03-06T11:23:47.028Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10092 2024-03-06T11:23:48.320Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10091 2024-03-06T11:23:49.610Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10090 2024-03-06T11:23:50.890Z 2025-04-03T14:40:37.652Z
bit-gitlab-2020-10089 2024-03-06T11:23:52.161Z 2025-04-03T14:40:37.652Z
ID Description Published Updated
cnvd-2025-21201 WordPress Duplicate Page and Post plugin SQL注入漏洞 2025-09-12 2025-09-12
cnvd-2025-21195 NVIDIA NvContainer信任管理问题漏洞 2025-05-07 2025-09-12
cnvd-2025-21194 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21194) 2025-08-10 2025-09-12
cnvd-2025-21193 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21193) 2025-08-10 2025-09-12
cnvd-2025-21192 NVIDIA GPU Display Driver信息泄露漏洞 2025-08-10 2025-09-12
cnvd-2025-21191 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21191) 2025-08-10 2025-09-12
cnvd-2025-21190 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21190) 2025-08-10 2025-09-12
cnvd-2025-21189 Esri Portal For ArcGis跨站请求伪造漏洞 2025-06-11 2025-09-12
cnvd-2025-21188 esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21188) 2025-08-27 2025-09-12
cnvd-2025-21187 esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21187) 2025-08-27 2025-09-12
cnvd-2025-21186 esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21186) 2025-08-27 2025-09-12
cnvd-2025-21185 esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞 2025-08-27 2025-09-12
cnvd-2025-21184 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21184) 2025-08-10 2025-09-12
cnvd-2025-21183 NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21183) 2025-08-10 2025-09-12
cnvd-2025-21182 NVIDIA GPU Display Driver存在未明漏洞 2025-08-10 2025-09-12
cnvd-2025-21181 NVIDIA DOCA存在未明漏洞 2025-09-08 2025-09-12
cnvd-2025-21180 NVIDIA DOCA存在未明漏洞(CNVD-2025-21180) 2025-09-08 2025-09-12
cnvd-2025-21179 NVIDIA ConnectX存在未明漏洞(CNVD-2025-21179) 2025-09-08 2025-09-12
cnvd-2025-21178 NVIDIA BlueField存在未明漏洞(CNVD-2025-21178) 2025-09-08 2025-09-12
cnvd-2025-21177 NVIDIA NVDebug存在未明漏洞(CNVD-2025-21177) 2025-09-11 2025-09-12
cnvd-2025-21175 Fortinet FortiDDoS-F操作系统命令注入漏洞 2025-09-11 2025-09-12
cnvd-2025-21174 Rockwell Automation FactoryTalk Activation Manager数据泄露漏洞 2025-09-11 2025-09-12
cnvd-2025-21173 Adobe Experience Manager代码执行漏洞 2025-08-11 2025-09-12
cnvd-2025-21172 Adobe Experience Manager XML实体注入漏洞(CNVD-2025-21172) 2025-08-11 2025-09-12
cnvd-2025-21171 Tenda CP6加密问题漏洞 2025-09-04 2025-09-12
cnvd-2025-21170 Tenda AC20缓冲区溢出漏洞 2025-09-04 2025-09-12
cnvd-2025-21169 Tenda AC20缓冲区溢出漏洞 2025-09-11 2025-09-12
cnvd-2025-21167 Adobe After Effects越界读取漏洞(CNVD-2025-21167) 2021-12-27 2025-09-12
cnvd-2025-21166 Adobe After Effects越界读取漏洞(CNVD-2025-21166) 2021-12-27 2025-09-12
cnvd-2025-21165 Adobe Experience Manager输入验证错误漏洞(CNVD-2025-21165) 2025-09-11 2025-09-12
ID Description Published Updated
certfr-2022-avi-198 Multiples vulnérabilités dans Google Chrome 2022-03-02T00:00:00.000000 2022-03-02T00:00:00.000000
certfr-2022-avi-197 Multiples vulnérabilités dans les produits Fortinet 2022-03-02T00:00:00.000000 2022-03-02T00:00:00.000000
certfr-2022-avi-196 Vulnérabilité dans VMware Tools 2022-03-02T00:00:00.000000 2022-03-02T00:00:00.000000
certfr-2022-avi-194 Vulnérabilité dans F-Secure 2022-03-01T00:00:00.000000 2022-03-01T00:00:00.000000
certfr-2022-avi-193 Multiples vulnérabilités dans le noyau Linux de SUSE 2022-03-01T00:00:00.000000 2022-03-01T00:00:00.000000
certfr-2022-avi-192 Multiples vulnérabilités dans IBM QRadar SIEM 2022-03-01T00:00:00.000000 2022-03-01T00:00:00.000000
certfr-2022-avi-191 Multiples vulnérabilités dans ElasticSearch et Kibana 2022-03-01T00:00:00.000000 2022-03-01T00:00:00.000000
certfr-2022-avi-190 Vulnérabilité dans NetApp SnapCenter 2022-02-28T00:00:00.000000 2022-02-28T00:00:00.000000
certfr-2022-avi-189 Multiples vulnérabilités dans les produits GitLab 2022-02-28T00:00:00.000000 2022-02-28T00:00:00.000000
certfr-2022-avi-161 Multiples vulnérabilités dans PHP 2022-02-18T00:00:00.000000 2022-02-28T00:00:00.000000
certfr-2022-avi-188 Vulnérabilité dans Juniper Junos OS 2022-02-25T00:00:00.000000 2022-02-25T00:00:00.000000
certfr-2022-avi-187 Multiples vulnérabilités dans le serveur HTTP d'IBM WebSphere 2022-02-25T00:00:00.000000 2022-02-25T00:00:00.000000
certfr-2022-avi-186 Multiples vulnérabilités dans Qnap Proxy Server 2022-02-25T00:00:00.000000 2022-02-25T00:00:00.000000
certfr-2022-avi-185 Vulnérabilité dans les produits ESET 2022-02-25T00:00:00.000000 2022-02-25T00:00:00.000000
certfr-2022-avi-184 Vulnérabilité dans Juniper Junos OS 2022-02-24T00:00:00.000000 2022-02-24T00:00:00.000000
certfr-2022-avi-183 Multiples vulnérabilités dans Cisco NX-OS et Nexus 2022-02-24T00:00:00.000000 2022-02-24T00:00:00.000000
certfr-2022-avi-182 Vulnérabilité dans VMware Workspace ONE Boxer 2022-02-24T00:00:00.000000 2022-02-24T00:00:00.000000
certfr-2022-avi-181 Vulnérabilité dans F5 BIG-IP 2022-02-24T00:00:00.000000 2022-02-24T00:00:00.000000
certfr-2022-avi-180 Multiples vulnérabilités dans Siemens 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-178 Multiples vulnérabilités dans le noyau Linux de SUSE 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-177 Multiples vulnérabilités dans le noyau Linux de Red Hat 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-176 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-175 Multiples vulnérabilités dans Trend Micro ServerProtect et Worry-Free Business Security 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-174 Vulnérabilité dans les produits Pulse Secure 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-172 Vulnérabilité dans IBM Websphere 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-171 Multiples vulnérabilités dans les commutateurs Aruba AOS-CX 2022-02-23T00:00:00.000000 2022-02-23T00:00:00.000000
certfr-2022-avi-170 Multiples vulnérabilités dans le noyau Linux de SUSE 2022-02-22T00:00:00.000000 2022-02-22T00:00:00.000000
certfr-2022-avi-168 Multiples vulnérabilités dans les produits IBM 2022-02-22T00:00:00.000000 2022-02-22T00:00:00.000000
certfr-2022-avi-167 Multiples vulnérabilités dans Adobe Commerce 2022-02-21T00:00:00.000000 2022-02-21T00:00:00.000000
certfr-2022-avi-166 Vulnérabilité dans Juniper Junos OS 2022-02-21T00:00:00.000000 2022-02-21T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated