Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66162 |
5.4 (3.1)
|
WordPress Spoter for Elementor plugin <= 1.04 - Broken… |
merkulove |
Spoter for Elementor |
2025-12-16T08:12:55.672Z | 2026-01-20T14:28:24.446Z |
| CVE-2025-66153 |
5.4 (3.1)
|
WordPress Headinger for Elementor plugin <= 1.1.4 - Br… |
merkulove |
Headinger for Elementor |
2025-12-31T18:31:21.816Z | 2026-01-20T14:28:24.444Z |
| CVE-2025-66526 |
4.3 (3.1)
|
WordPress Tablesome plugin <= 1.1.34 - Broken Access C… |
Essekia |
Tablesome |
2025-12-09T14:13:53.002Z | 2026-01-20T14:28:24.435Z |
| CVE-2025-66134 |
5.4 (3.1)
|
WordPress FileBird Pro plugin <= 6.4.9 - Broken Access… |
NinjaTeam |
FileBird Pro |
2025-12-16T08:12:55.088Z | 2026-01-20T14:28:24.432Z |
| CVE-2025-66166 |
5.4 (3.1)
|
WordPress Lottier for Elementor plugin <= 1.0.9 - Brok… |
merkulove |
Lottier for Elementor |
2025-12-16T08:12:56.603Z | 2026-01-20T14:28:24.430Z |
| CVE-2025-66163 |
5.4 (3.1)
|
WordPress Masker for Elementor plugin <= 1.1.4 - Broke… |
merkulove |
Masker for Elementor |
2025-12-16T08:12:55.859Z | 2026-01-20T14:28:24.419Z |
| CVE-2025-66154 |
5.4 (3.1)
|
WordPress Couponer for Elementor plugin <= 1.1.7 - Bro… |
merkulove |
Couponer for Elementor |
2025-12-31T17:01:26.537Z | 2026-01-20T14:28:24.410Z |
| CVE-2025-66126 |
5.3 (3.1)
|
WordPress Fix Media Library plugin <= 2.0 - Sensitive … |
wowpress.host |
Fix Media Library |
2025-12-16T08:12:53.301Z | 2026-01-20T14:28:24.341Z |
| CVE-2025-66124 |
5.3 (3.1)
|
WordPress Leaky Paywall plugin <= 4.22.5 - Broken Acce… |
ZEEN101 |
Leaky Paywall |
2025-12-16T08:12:52.912Z | 2026-01-20T14:28:24.250Z |
| CVE-2025-66120 |
5.3 (3.1)
|
WordPress CatFolders plugin <= 2.5.3 - Broken Access C… |
CatFolders |
CatFolders |
2025-12-16T08:12:52.307Z | 2026-01-20T14:28:24.074Z |
| CVE-2025-66116 |
7.5 (3.1)
|
WordPress Ultimate Member Widgets for Elementor plugin… |
UserElements |
Ultimate Member Widgets for Elementor |
2025-12-18T07:22:18.838Z | 2026-01-20T14:28:24.052Z |
| CVE-2025-66104 |
6.5 (3.1)
|
WordPress Offload, AI & Optimize with Cloudflare Image… |
Anton Vanyukov |
Offload, AI & Optimize with Cloudflare Images |
2025-12-18T07:22:18.646Z | 2026-01-20T14:28:24.032Z |
| CVE-2025-66117 |
7.5 (3.1)
|
WordPress Easy Form plugin <= 2.7.8 - Broken Access Co… |
Ays Pro |
Easy Form |
2025-12-18T07:22:19.016Z | 2026-01-20T14:28:24.031Z |
| CVE-2025-66097 |
4.3 (3.1)
|
WordPress I Order Terms plugin <= 1.5.0 - Cross Site R… |
Igor Jerosimić |
I Order Terms |
2025-11-21T12:29:59.986Z | 2026-01-20T14:28:24.031Z |
| CVE-2025-66121 |
5.3 (3.1)
|
WordPress SiteGround Security plugin <= 1.5.8 - Broken… |
SiteGround |
SiteGround Security |
2025-12-16T08:12:52.500Z | 2026-01-20T14:28:24.018Z |
| CVE-2025-66113 |
5.4 (3.1)
|
WordPress Better Chat Support for Messenger plugin <= … |
ThemeAtelier |
Better Chat Support for Messenger |
2025-11-21T12:30:05.951Z | 2026-01-20T14:28:24.016Z |
| CVE-2025-66115 |
6.6 (3.1)
|
WordPress Easy Invoice plugin <= 2.1.4 - Local File In… |
MatrixAddons |
Easy Invoice |
2025-11-21T12:30:06.442Z | 2026-01-20T14:28:24.013Z |
| CVE-2025-66087 |
5.3 (3.1)
|
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… |
Property Hive |
PropertyHive |
2025-11-21T12:29:58.540Z | 2026-01-20T14:28:24.013Z |
| CVE-2025-66119 |
7.1 (3.1)
|
WordPress Hostel plugin <= 1.1.5.9 - Cross Site Script… |
Bob |
Hostel |
2025-12-18T07:22:19.370Z | 2026-01-20T14:28:24.012Z |
| CVE-2025-66101 |
4.3 (3.1)
|
WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Br… |
Sabuj Kundu |
CBX Bookmark & Favorite |
2025-11-21T12:30:01.600Z | 2026-01-20T14:28:24.010Z |
| CVE-2025-66094 |
6.5 (3.1)
|
WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripti… |
dmccan |
Yada Wiki |
2025-12-30T16:17:26.055Z | 2026-01-20T14:28:24.009Z |
| CVE-2025-66088 |
7.5 (3.1)
|
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… |
Property Hive |
PropertyHive |
2025-12-18T07:22:18.084Z | 2026-01-20T14:28:24.007Z |
| CVE-2025-66118 |
7.1 (3.1)
|
WordPress Sprout Clients plugin <= 3.2.1 - Cross Site … |
BoldGrid |
Sprout Clients |
2025-12-18T07:22:19.186Z | 2026-01-20T14:28:24.006Z |
| CVE-2025-66092 |
6.5 (3.1)
|
WordPress Accordion Slider plugin <= 1.9.13 - Cross Si… |
bqworks |
Accordion Slider |
2025-11-21T12:29:59.275Z | 2026-01-20T14:28:24.005Z |
| CVE-2025-66114 |
5.3 (3.1)
|
WordPress Show Variations as Single Products Woocommer… |
theme funda |
Show Variations as Single Products Woocommerce |
2025-11-21T12:30:06.230Z | 2026-01-20T14:28:23.995Z |
| CVE-2025-66099 |
5.3 (3.1)
|
WordPress Chat Help plugin <= 3.1.3 - Broken Access Co… |
ThemeAtelier |
Chat Help |
2025-11-21T12:30:01.184Z | 2026-01-20T14:28:23.992Z |
| CVE-2025-66100 |
6.5 (3.1)
|
WordPress RestroPress plugin <= 3.2.3.5 - Broken Acces… |
Magnigenie |
RestroPress |
2025-12-18T07:22:18.263Z | 2026-01-20T14:28:23.990Z |
| CVE-2025-66093 |
6.5 (3.1)
|
WordPress Extensions for Leaflet Map plugin <= 4.8 - C… |
hupe13 |
Extensions for Leaflet Map |
2025-11-21T12:29:59.483Z | 2026-01-20T14:28:23.983Z |
| CVE-2025-66103 |
6.5 (3.1)
|
WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scri… |
Revmakx |
WPCal.io |
2025-12-30T16:43:38.792Z | 2026-01-20T14:28:23.972Z |
| CVE-2025-66112 |
4.3 (3.1)
|
WordPress Accessibility Toolkit by WebYes plugin <= 2.… |
WebToffee |
Accessibility Toolkit by WebYes |
2025-11-21T12:30:05.704Z | 2026-01-20T14:28:23.971Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1257 |
7.5 (3.1)
|
Administrative Shortcodes <= 0.3.4 - Authenticated (Co… |
shazdeh |
Administrative Shortcodes |
2026-01-24T07:26:39.850Z | 2026-01-26T15:45:54.702Z |
| CVE-2026-1208 |
4.3 (3.1)
|
Friendly Functions for Welcart <= 1.2.5 - Cross-Site R… |
mainichiweb |
Friendly Functions for Welcart |
2026-01-24T09:08:07.475Z | 2026-01-26T17:41:14.150Z |
| CVE-2026-1191 |
4.4 (3.1)
|
JavaScript Notifier <= 1.2.8 - Authenticated (Administ… |
freemp |
JavaScript Notifier |
2026-01-24T09:08:07.887Z | 2026-01-26T17:40:10.418Z |
| CVE-2026-1189 |
6.4 (3.1)
|
LeadBI Plugin for WordPress <= 1.7 - Authenticated (Co… |
leadbi |
LeadBI Plugin for WordPress |
2026-01-24T09:08:06.833Z | 2026-01-26T17:41:49.672Z |
| CVE-2026-1127 |
6.1 (3.1)
|
Timeline Event History <= 3.2 - Reflected Cross-Site S… |
wpdiscover |
Timeline Event History |
2026-01-24T09:08:08.726Z | 2026-01-26T17:38:57.038Z |
| CVE-2026-1103 |
5.4 (3.1)
|
AIKTP <= 5.0.04 - Missing Authorization to Authenticat… |
aiktp |
AIKTP |
2026-01-24T07:26:44.703Z | 2026-01-26T18:19:14.889Z |
| CVE-2026-1099 |
6.4 (3.1)
|
Administrative Shortcodes <= 0.3.4 - Authenticated (Co… |
shazdeh |
Administrative Shortcodes |
2026-01-24T07:26:48.103Z | 2026-01-26T18:07:08.791Z |
| CVE-2026-1098 |
6.4 (3.1)
|
CM CSS Columns <= 1.2.1 - Authenticated (Contributor+)… |
codemacher |
CM CSS Columns |
2026-01-24T08:26:36.215Z | 2026-01-26T17:47:29.505Z |
| CVE-2026-1097 |
6.4 (3.1)
|
ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Cont… |
themeruby |
ThemeRuby Multi Authors – Assign Multiple Writers to Posts |
2026-01-24T07:26:47.342Z | 2026-01-26T18:18:23.495Z |
| CVE-2026-1095 |
6.4 (3.1)
|
Canto Testimonials <= 1.0 - Authenticated (Contributor… |
cantothemes |
Canto Testimonials |
2026-01-24T07:26:43.567Z | 2026-01-26T15:45:04.535Z |
| CVE-2026-1088 |
4.3 (3.1)
|
Login Page Editor <= 1.2 - Cross-Site Request Forgery … |
zero1zerouk |
Login Page Editor |
2026-01-24T07:26:48.803Z | 2026-01-26T18:06:19.277Z |
| CVE-2026-1084 |
4.4 (3.1)
|
Cookie consent for developers <= 1.7.1 - Authenticated… |
lovor |
Cookie consent for developers |
2026-01-24T07:26:46.569Z | 2026-01-26T15:44:38.666Z |
| CVE-2026-1081 |
4.3 (3.1)
|
Set Bulk Post Categories <= 1.1 - Cross-Site Request F… |
sauravrox |
Set Bulk Post Categories |
2026-01-24T07:26:45.529Z | 2026-01-26T15:44:57.721Z |
| CVE-2026-1076 |
4.3 (3.1)
|
Star Review Manager <= 1.2.2 - Cross-Site Request Forg… |
bramdnl |
Star Review Manager |
2026-01-24T07:26:42.472Z | 2026-01-26T15:45:22.768Z |
| CVE-2026-1075 |
4.3 (3.1)
|
ZT Captcha <= 1.0.4 - Cross-Site Request Forgery to Se… |
teamzt |
ZT Captcha |
2026-01-24T07:26:45.884Z | 2026-01-26T15:44:51.869Z |
| CVE-2026-1070 |
4.3 (3.1)
|
Alex User Counter <= 6.0 - Cross-Site Request Forgery … |
adzbierajewski |
Alex User Counter |
2026-01-24T07:26:40.963Z | 2026-01-26T15:45:44.741Z |
| CVE-2026-0911 |
7.5 (3.1)
|
Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitr… |
wpmudev |
Hustle – Email Marketing, Lead Generation, Optins, Popups |
2026-01-24T12:27:15.063Z | 2026-01-26T15:44:15.167Z |
| CVE-2026-0862 |
6.1 (3.1)
|
Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cr… |
pdfcrowd |
Save as PDF Plugin by PDFCrowd |
2026-01-24T15:34:06.548Z | 2026-01-26T15:38:22.497Z |
| CVE-2026-0807 |
7.2 (3.1)
|
Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side … |
wpmessiah |
Frontis Blocks — Block Library for the Block Editor |
2026-01-24T07:26:41.330Z | 2026-01-26T15:45:39.333Z |
| CVE-2026-0806 |
4.9 (3.1)
|
WP-ClanWars <= 2.0.1 - Authenticated (Administrator+) … |
andddd |
WP-ClanWars |
2026-01-24T07:26:43.201Z | 2026-01-26T15:45:10.551Z |
| CVE-2026-0800 |
7.2 (3.1)
|
User Submitted Posts – Enable Users to Submit Posts fr… |
specialk |
User Submitted Posts – Enable Users to Submit Posts from the Front End |
2026-01-24T08:26:32.494Z | 2026-01-26T18:05:59.221Z |
| CVE-2026-0687 |
4.3 (3.1)
|
Meta-box GalleryMeta <= 3.0.1 - Missing Authorization … |
shahinurislam |
Meta-box GalleryMeta |
2026-01-24T08:26:34.512Z | 2026-01-26T18:01:57.710Z |
| CVE-2026-0633 |
3.7 (3.1)
|
MetForm – Contact Form, Survey, Quiz, & Custom Form Bu… |
roxnor |
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor |
2026-01-24T08:26:35.777Z | 2026-01-26T17:47:55.740Z |
| CVE-2026-0593 |
5.3 (3.1)
|
WP Go Maps (formerly WP Google Maps) <= 10.0.04 - Miss… |
wpgmaps |
WP Go Maps (formerly WP Google Maps) |
2026-01-24T16:25:51.700Z | 2026-01-26T17:37:40.408Z |
| CVE-2025-70983 |
9.9 (3.1)
|
Incorrect access control in the authRoutes functi… |
n/a |
n/a |
2026-01-23T00:00:00.000Z | 2026-01-23T19:46:37.743Z |
| CVE-2025-6461 |
4.3 (3.1)
|
CubeWP – All-in-One Dynamic Content Framework <= 1.1.2… |
cubewp1211 |
CubeWP Framework |
2026-01-25T02:22:37.167Z | 2026-01-26T17:37:01.515Z |
| CVE-2025-59108 |
9.2 (4.0)
|
Weak Default Passwords in dormakaba access manager |
dormakaba |
Access Manager 92xx-k5 |
2026-01-26T10:06:31.533Z | 2026-01-26T15:38:06.530Z |
| CVE-2025-59107 |
8.5 (4.0)
|
Static Firmware Encryption Password in dormakaba acces… |
dormakaba |
Access Manager 92xx-k5 |
2026-01-26T10:06:22.025Z | 2026-01-26T15:38:11.839Z |
| CVE-2025-59105 |
7 (4.0)
|
Unencrypted Flash Storage in dormakaba access manager |
dormakaba |
Access Manager 92xx-k5 |
2026-01-26T10:06:02.727Z | 2026-01-26T14:52:15.466Z |
| CVE-2025-59104 |
7 (4.0)
|
Unlocked Bootloader in dormakaba access manager |
dormakaba |
Access Manager 92xx-k7 |
2026-01-26T10:05:54.218Z | 2026-01-26T15:12:47.211Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-13920 | The WP Directory Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… | 2026-01-24T13:15:54.013 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13676 | The JustClick registration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in … | 2026-01-24T08:16:05.367 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13374 | The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil… | 2026-01-24T08:16:05.173 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13205 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… | 2026-01-24T09:15:51.880 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13194 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any c… | 2026-01-24T09:15:51.713 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-13139 | The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site R… | 2026-01-24T09:15:50.647 | 2026-01-26T15:03:33.357 |
| fkie_cve-2025-12836 | The VK Google Job Posting Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting… | 2026-01-24T08:16:03.870 | 2026-01-26T15:03:33.357 |
| fkie_cve-2022-25369 | An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user w… | 2026-01-23T17:16:04.753 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47906 | BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parame… | 2026-01-23T17:16:04.383 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47905 | MyBB Delete Account Plugin 1.4 contains a cross-site scripting vulnerability in the account deletio… | 2026-01-23T17:16:04.180 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47904 | PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allo… | 2026-01-23T17:16:03.990 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47903 | LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in… | 2026-01-23T17:16:02.743 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47899 | YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allow… | 2026-01-23T17:16:02.120 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47898 | Epson USB Display 1.6.0.0 contains an unquoted service path vulnerability in the EMP_UDSA service r… | 2026-01-23T17:16:01.767 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47897 | PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the address parameter o… | 2026-01-23T17:16:01.523 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47896 | PDF Complete Corporate Edition 4.1.45 contains an unquoted service path vulnerability in the pdfcDi… | 2026-01-23T17:15:58.023 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47895 | Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the app… | 2026-01-23T17:15:57.390 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47894 | Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows atta… | 2026-01-23T17:15:57.020 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47893 | AgataSoft PingMaster Pro 2.1 contains a denial of service vulnerability in the Trace Route feature … | 2026-01-23T17:15:56.717 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47892 | PEEL Shopping 9.3.0 contains a stored cross-site scripting vulnerability in the 'Comments / Special… | 2026-01-23T17:15:56.517 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47891 | Unified Remote 3.9.0.2463 contains a remote code execution vulnerability that allows attackers to s… | 2026-01-23T17:15:52.523 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47890 | LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service runni… | 2026-01-23T17:15:52.323 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47889 | Softros LAN Messenger 9.6.4 contains an unquoted service path vulnerability in the SoftrosSpellChec… | 2026-01-23T17:15:52.110 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47888 | Textpattern versions prior to 4.8.3 contain an authenticated remote code execution vulnerability th… | 2026-01-23T17:15:51.930 | 2026-01-26T15:03:33.357 |
| fkie_cve-2021-47881 | dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that all… | 2026-01-23T17:15:51.717 | 2026-01-26T15:03:33.357 |
| fkie_cve-2020-36937 | Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows se… | 2026-01-25T14:15:48.493 | 2026-01-26T15:03:33.357 |
| fkie_cve-2020-36936 | Magic Mouse 2 Utilities 2.20 contains an unquoted service path vulnerability in its Windows service… | 2026-01-25T14:15:48.330 | 2026-01-26T15:03:33.357 |
| fkie_cve-2020-36935 | KMSpico 17.1.0.0 contains an unquoted service path vulnerability in the Service KMSELDI configurati… | 2026-01-25T14:15:48.167 | 2026-01-26T15:03:33.357 |
| fkie_cve-2020-36934 | Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNet… | 2026-01-25T14:15:48.003 | 2026-01-26T15:03:33.357 |
| fkie_cve-2020-36933 | HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service conf… | 2026-01-25T14:15:47.803 | 2026-01-26T15:03:33.357 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-gjrx-9m4x-8hq8 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Meks Meks Quick Plugin Disabler meks-quick-plugi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-f3vg-vfv2-qq64 |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Buttoner for Elementor buttoner-elementor allows E… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-f293-cv38-h9p6 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-cq3q-ph38-mjwc |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email con… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-c8ph-2xvf-c9p9 |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows E… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-9jm6-f8vm-2h74 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-9c97-mqhv-6q84 |
8.5 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-8r89-g342-fxcq |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-8j59-pxfw-664p |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-7jg4-8pc3-8qw9 |
7.2 (3.1)
|
Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-76hm-28jx-qx25 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:24Z | 2026-01-20T15:32:18Z |
| ghsa-6qhr-c46w-3j7m |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-5xxr-4wwq-4pgv |
5.8 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in WPCenter eRoom eroom-zoom-meetin… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-5gpr-xg7c-9pmr |
5.4 (3.1)
|
Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-59jr-84cf-6w82 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-59cj-f4jq-939m |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-3rgf-x42q-9hg8 |
5.4 (3.1)
|
Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows E… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:18Z |
| ghsa-32jg-xqp8-jrc4 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-3223-3v8m-44cp |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-2x2x-xcc2-p46h |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-2fv4-c5wh-p3p5 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T09:30:25Z | 2026-01-20T15:32:18Z |
| ghsa-xgx6-92f3-rhqf |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-mrq7-p548-587h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-hjv3-73x3-fw6v |
6.5 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate ess… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-c9mq-fjcv-jc83 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-62wj-77q3-24px |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-48pp-2gg2-9jj6 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-3wxp-8m6g-m8x5 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-16T09:31:10Z | 2026-01-20T15:32:17Z |
| ghsa-wr7j-j478-jx7j |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-16T09:31:09Z | 2026-01-20T15:32:16Z |
| ghsa-w2mg-8545-27mj |
8.5 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-16T09:31:09Z | 2026-01-20T15:32:16Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-30052 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.290269Z |
| gsd-2024-30654 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.290070Z |
| gsd-2024-30238 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-03T05:02:29.289490Z |
| gsd-2024-30261 | Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the… | 2024-04-03T05:02:29.289111Z |
| gsd-2024-30444 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.288525Z |
| gsd-2024-30046 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.288246Z |
| gsd-2024-30607 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the… | 2024-04-03T05:02:29.287830Z |
| gsd-2024-30354 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulner… | 2024-04-03T05:02:29.287209Z |
| gsd-2024-30618 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.286917Z |
| gsd-2024-30228 | Deserialization of Untrusted Data vulnerability in Hercules Design Hercules Core.This iss… | 2024-04-03T05:02:29.286311Z |
| gsd-2024-30219 | ** UNSUPPPORTED WHEN ASSIGNED ** Active debug code vulnerability exists in MZK-MF300N all… | 2024-04-03T05:02:29.286033Z |
| gsd-2024-30404 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.285838Z |
| gsd-2024-30644 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.285634Z |
| gsd-2024-30127 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.285442Z |
| gsd-2024-30959 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.285246Z |
| gsd-2024-30731 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.285048Z |
| gsd-2024-30707 | Unauthorized node injection vulnerability in ROS2 Dashing Diademata in ROS_VERSION 2 and … | 2024-04-03T05:02:29.284803Z |
| gsd-2024-30206 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.284602Z |
| gsd-2024-30695 | An issue was discovered in the default configurations of ROS2 Galactic Geochelone version… | 2024-04-03T05:02:29.284408Z |
| gsd-2024-30942 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.284214Z |
| gsd-2024-30842 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.284021Z |
| gsd-2024-30678 | An issue has been discovered in ROS2 Iron Irwini ROS_VERSION 2 and ROS_PYTHON_VERSION 3, … | 2024-04-03T05:02:29.283815Z |
| gsd-2024-30408 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.283618Z |
| gsd-2024-30290 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.283400Z |
| gsd-2024-30500 | Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-O… | 2024-04-03T05:02:29.282763Z |
| gsd-2024-30720 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.282437Z |
| gsd-2024-30847 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.282236Z |
| gsd-2024-30673 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.282036Z |
| gsd-2024-30716 | An insecure logging vulnerability in ROS2 Dashing Diademata ROS_VERSION 2 and ROS_PYTHON_… | 2024-04-03T05:02:29.281760Z |
| gsd-2024-30343 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vuln… | 2024-04-03T05:02:29.281231Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191062 | Malicious code in @varsityvibe/validation-schemas (npm) | 2025-11-24T22:40:47Z | 2025-12-01T04:28:27Z |
| mal-2025-191061 | Malicious code in @varsityvibe/utils (npm) | 2025-11-24T22:40:07Z | 2025-12-01T04:28:27Z |
| mal-2025-191060 | Malicious code in @varsityvibe/api-client (npm) | 2025-11-24T22:39:57Z | 2025-12-01T04:28:27Z |
| mal-2025-191059 | Malicious code in @trigo/atrix-swagger (npm) | 2025-11-24T23:04:22Z | 2025-12-01T04:28:27Z |
| mal-2025-191058 | Malicious code in @trefox/sleekshop-js (npm) | 2025-11-24T23:03:51Z | 2025-12-01T04:28:27Z |
| mal-2025-191057 | Malicious code in @tiaanduplessis/react-progressbar (npm) | 2025-11-24T23:02:30Z | 2025-12-01T04:28:27Z |
| mal-2025-191056 | Malicious code in @tiaanduplessis/json (npm) | 2025-11-24T23:01:27Z | 2025-12-01T04:28:27Z |
| mal-2025-191055 | Malicious code in @thedelta/eslint-config (npm) | 2025-11-24T23:00:55Z | 2025-12-01T04:28:27Z |
| mal-2025-191468 | Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm) | 2025-11-26T02:42:38Z | 2025-12-01T04:28:26Z |
| mal-2025-191458 | Malicious code in @medusajs/medusa-oas-cli (npm) | 2025-11-24T23:53:16Z | 2025-12-01T04:28:26Z |
| mal-2025-191457 | Malicious code in @medusajs/medusa (npm) | 2025-11-24T23:52:26Z | 2025-12-01T04:28:26Z |
| mal-2025-191456 | Malicious code in @medusajs/analytics-posthog (npm) | 2025-11-24T23:51:46Z | 2025-12-01T04:28:26Z |
| mal-2025-191455 | Malicious code in @kong/spec-renderer (npm) | 2025-11-24T23:49:15Z | 2025-12-01T04:28:26Z |
| mal-2025-191454 | Malicious code in @freeday-ai/webchat (npm) | 2025-11-24T23:43:08Z | 2025-12-01T04:28:26Z |
| mal-2025-191453 | Malicious code in @flowfuse/flowfuse (npm) | 2025-11-24T23:42:58Z | 2025-12-01T04:28:26Z |
| mal-2025-191452 | Malicious code in @eventcatalog/generator-asyncapi (npm) | 2025-11-24T23:38:47Z | 2025-12-01T04:28:26Z |
| mal-2025-191451 | Malicious code in @devx-commerce/plugin-discounts (npm) | 2025-11-24T23:37:36Z | 2025-12-01T04:28:26Z |
| mal-2025-191450 | Malicious code in @axinom/mosaic-cli (npm) | 2025-11-25T00:13:44Z | 2025-12-01T04:28:26Z |
| mal-2025-191449 | Malicious code in @accordproject/markdown-cli (npm) | 2025-11-25T00:10:58Z | 2025-12-01T04:28:26Z |
| mal-2025-191321 | Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm) | 2025-11-24T23:29:10Z | 2025-12-01T04:28:26Z |
| mal-2025-191320 | Malicious code in @silgi/yoga (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:26Z |
| mal-2025-191319 | Malicious code in @silgi/scalar (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:26Z |
| mal-2025-191318 | Malicious code in @silgi/ratelimit (npm) | 2025-11-25T00:16:49Z | 2025-12-01T04:28:26Z |
| mal-2025-191317 | Malicious code in @silgi/permission (npm) | 2025-11-24T23:28:20Z | 2025-12-01T04:28:26Z |
| mal-2025-191316 | Malicious code in @silgi/openapi (npm) | 2025-11-24T23:27:50Z | 2025-12-01T04:28:26Z |
| mal-2025-191315 | Malicious code in @silgi/module-builder (npm) | 2025-11-24T23:27:00Z | 2025-12-01T04:28:26Z |
| mal-2025-191314 | Malicious code in @silgi/graphql (npm) | 2025-11-24T23:26:24Z | 2025-12-01T04:28:26Z |
| mal-2025-191313 | Malicious code in @silgi/ecosystem (npm) | 2025-11-24T23:25:50Z | 2025-12-01T04:28:26Z |
| mal-2025-191312 | Malicious code in @silgi/drizzle (npm) | 2025-11-24T23:25:34Z | 2025-12-01T04:28:26Z |
| mal-2025-191311 | Malicious code in @silgi/better-auth (npm) | 2025-11-24T23:25:04Z | 2025-12-01T04:28:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-1291 | cyrus imapd: Schwachstelle ermöglicht Denial of Service | 2024-06-04T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-2247 | Cacti: Schwachstelle ermöglicht Codeausführung | 2022-12-06T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0389 | cyrus imapd: Schwachstelle ermöglicht Denial of Service | 2021-08-31T22:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0388 | cyrus imapd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-11-19T23:00:00.000+00:00 | 2025-01-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0183 | Drupal: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0182 | Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0181 | M-Files Server: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0180 | Ubiquiti UniFi: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0179 | Kibana: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0176 | Cisco Meeting Management: Schwachstelle ermöglicht Privilegieneskalation | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0175 | Jenkins Plugins: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0171 | GitLab: Mehrere Schwachstellen | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0169 | Unify OpenScape 4000: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-01-22T23:00:00.000+00:00 | 2025-01-22T23:00:00.000+00:00 |
| wid-sec-w-2025-0168 | Oracle JD Edwards: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0165 | Oracle Retail Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0164 | Oracle Siebel CRM: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0163 | Oracle Supply Chain: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0162 | Oracle Systems: Schwachstelle gefährdet Integrität und Verfügbarkeit | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0161 | Oracle Utilities Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0160 | Oracle Virtualization: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0159 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0158 | Linksys Router: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0157 | Microsoft GitHub Enterprise: Schwachstelle ermöglicht Signatur-Spoofing | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0153 | Arista EOS: Schwachstelle ermöglicht Denial of Service | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0152 | Siemens SIMATIC S7: Schwachstelle ermöglicht Manipulation der Konfiguration | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0151 | HCL BigFix: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0149 | Oracle Java SE: Mehrere Schwachstellen | 2019-07-16T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0148 | Oracle Communications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0147 | Oracle Construction and Engineering: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0146 | Oracle E-Business Suite: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2010:0043 | Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update | 2010-01-14T16:32:00+00:00 | 2026-01-28T22:34:04+00:00 |
| rhsa-2009:1694 | Red Hat Security Advisory: java-1.6.0-ibm security update | 2009-12-23T17:33:00+00:00 | 2026-01-28T22:34:04+00:00 |
| rhsa-2009:1662 | Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update | 2009-12-11T13:42:00+00:00 | 2026-01-28T22:34:03+00:00 |
| rhsa-2009:1650 | Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP08 update | 2009-12-10T00:03:00+00:00 | 2026-01-28T22:34:03+00:00 |
| rhsa-2009:1649 | Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update | 2009-12-09T23:51:00+00:00 | 2026-01-28T22:34:03+00:00 |
| rhsa-2009:1551 | Red Hat Security Advisory: java-1.4.2-ibm security update | 2009-11-04T15:14:00+00:00 | 2026-01-28T22:34:03+00:00 |
| rhsa-2009:1637 | Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP08 update | 2009-12-09T23:32:00+00:00 | 2026-01-28T22:34:02+00:00 |
| rhsa-2009:1636 | Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP07 update | 2009-12-09T23:14:00+00:00 | 2026-01-28T22:34:01+00:00 |
| rhsa-2009:1615 | Red Hat Security Advisory: xerces-j2 security update | 2009-11-30T15:11:00+00:00 | 2026-01-28T22:34:00+00:00 |
| rhsa-2009:1582 | Red Hat Security Advisory: java-1.6.0-ibm security update | 2009-11-12T18:15:00+00:00 | 2026-01-28T22:34:00+00:00 |
| rhsa-2009:1505 | Red Hat Security Advisory: java-1.4.2-ibm security update | 2009-10-14T16:08:00+00:00 | 2026-01-28T22:34:00+00:00 |
| rhsa-2009:1428 | Red Hat Security Advisory: xmlsec1 security update | 2009-09-08T15:43:00+00:00 | 2026-01-28T22:33:59+00:00 |
| rhsa-2009:1236 | Red Hat Security Advisory: java-1.5.0-ibm security update | 2009-08-28T08:57:00+00:00 | 2026-01-28T22:33:58+00:00 |
| rhsa-2009:1201 | Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update | 2009-08-06T21:14:00+00:00 | 2026-01-28T22:33:58+00:00 |
| rhsa-2009:1200 | Red Hat Security Advisory: java-1.6.0-sun security update | 2009-08-06T20:41:00+00:00 | 2026-01-28T22:33:58+00:00 |
| rhsa-2009:1199 | Red Hat Security Advisory: java-1.5.0-sun security update | 2009-08-06T20:38:00+00:00 | 2026-01-28T22:33:57+00:00 |
| rhsa-2009:0466 | Red Hat Security Advisory: java-1.5.0-ibm security update | 2009-05-07T11:45:00+00:00 | 2026-01-28T22:33:57+00:00 |
| rhsa-2008:1025 | Red Hat Security Advisory: java-1.5.0-sun security update | 2008-12-04T15:45:00+00:00 | 2026-01-28T22:33:56+00:00 |
| rhsa-2009:0369 | Red Hat Security Advisory: java-1.6.0-ibm security update | 2009-03-25T14:52:00+00:00 | 2026-01-28T22:33:55+00:00 |
| rhsa-2009:0016 | Red Hat Security Advisory: java-1.5.0-ibm security update | 2009-01-13T21:39:00+00:00 | 2026-01-28T22:33:54+00:00 |
| rhsa-2008:1018 | Red Hat Security Advisory: java-1.6.0-sun security update | 2008-12-04T15:45:00+00:00 | 2026-01-28T22:33:50+00:00 |
| rhea-2014:1175 | Red Hat Enhancement Advisory: Release of Satellite 6.0 | 2014-09-10T13:09:19+00:00 | 2026-01-28T22:33:50+00:00 |
| rhba-2016:1500 | Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Base Libraries | 2016-07-27T08:24:38+00:00 | 2026-01-28T22:33:48+00:00 |
| rhsa-2022:6393 | Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update | 2022-09-08T11:31:04+00:00 | 2026-01-28T22:20:43+00:00 |
| rhsa-2022:6890 | Red Hat Security Advisory: OpenShift Virtualization 4.8.7 Images bug fixes and security update | 2022-10-11T16:02:33+00:00 | 2026-01-28T22:20:00+00:00 |
| rhsa-2022:6681 | Red Hat Security Advisory: OpenShift Virtualization 4.9.6 Images security and bug fix update | 2022-09-22T08:16:30+00:00 | 2026-01-28T22:19:59+00:00 |
| rhsa-2022:6351 | Red Hat Security Advisory: OpenShift Virtualization 4.10.5 Images security and bug fix update | 2022-09-06T14:00:38+00:00 | 2026-01-28T22:19:50+00:00 |
| rhsa-2024:6412 | Red Hat Security Advisory: OpenShift Container Platform 4.14.36 security update | 2024-09-11T18:52:41+00:00 | 2026-01-28T22:16:20+00:00 |
| rhsa-2024:5754 | Red Hat Security Advisory: OpenShift Container Platform 4.15.29 packages and security update | 2024-08-28T19:35:22+00:00 | 2026-01-28T22:16:19+00:00 |
| rhsa-2022:0655 | Red Hat Security Advisory: OpenShift Container Platform 4.9.23 bug fix and security update | 2022-02-28T20:49:34+00:00 | 2026-01-28T22:15:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-8176 | Libexpat: expat: improper restriction of xml entity expansion depth in libexpat | 2025-03-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2024-6345 | Remote Code Execution in pypa/setuptools | 2024-07-01T07:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2024-12133 | Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos | 2025-02-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2024-11053 | netrc and redirect credential leak | 2024-12-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2023-48795 | The SSH transport protocol with certain OpenSSH extensions found in OpenSSH before 9.6 and other products allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message) and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP) implemented by these extensions mishandles the handshake phase and mishandles use of sequence numbers. For example there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT Dropbear through 2022.83 Ssh before 5.1.1 in Erlang/OTP PuTTY before 0.80 AsyncSSH before 2.14.2 golang.org/x/crypto before 0.17.0 libssh before 0.10.6 libssh2 | 2023-12-01T08:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2023-0330 | Qemu: lsi53c895a: dma reentrancy issue leads to stack overflow | 2023-03-10T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2022-40897 | Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. | 2022-12-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2021-44647 | Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service. | 2022-01-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2015-1473 | The GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service | 2015-04-02T00:00:00.000Z | 2025-04-12T00:00:00.000Z |
| msrc_cve-2025-29834 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-11T07:00:00.000Z |
| msrc_cve-2025-31115 | XZ has a heap-use-after-free bug in threaded .xz decoder | 2025-04-02T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2025-30211 | KEX init error results with excessive memory usage | 2025-03-02T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2025-1795 | Mishandling of comma during folding and unicode-encoding of email headers | 2025-02-02T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2024-48615 | Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8. | 2025-03-02T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2024-2313 | If kernel headers need to be extracted bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. | 2024-03-02T08:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2024-12905 | An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. | 2025-03-02T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2023-2861 | Qemu: 9pfs: improper access control on special files | 2023-12-01T08:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2023-1544 | Qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() | 2023-03-10T00:00:00.000Z | 2025-04-11T00:00:00.000Z |
| msrc_cve-2025-29792 | Microsoft Office Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-27740 | Active Directory Certificate Services Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-27732 | Windows Graphics Component Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-27730 | Windows Digital Media Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-27476 | Windows Digital Media Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-27467 | Windows Digital Media Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-26647 | Windows Kerberos Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-10T07:00:00.000Z |
| msrc_cve-2025-29824 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-09T07:00:00.000Z |
| msrc_cve-2025-29810 | Active Directory Domain Services Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-09T07:00:00.000Z |
| msrc_cve-2025-29809 | Windows Kerberos Security Feature Bypass Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-09T07:00:00.000Z |
| msrc_cve-2025-27742 | NTFS Information Disclosure Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-09T07:00:00.000Z |
| msrc_cve-2025-27741 | NTFS Elevation of Privilege Vulnerability | 2025-04-08T07:00:00.000Z | 2025-04-09T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202312-2654 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow v… | 2025-07-10T22:57:14.140000Z |
| var-202403-2484 | A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Admi… | 2025-07-10T22:57:13.675000Z |
| var-202506-3367 | A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.… | 2025-07-10T22:57:10.805000Z |
| var-202401-1548 | An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allo… | 2025-07-10T22:55:27.600000Z |
| var-202506-0484 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu… | 2025-07-10T22:55:23.894000Z |
| var-202506-0482 | CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scriptin… | 2025-07-10T22:55:23.863000Z |
| var-202401-2676 | TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalR… | 2025-07-10T22:53:26.551000Z |
| var-202401-1037 | A vulnerability was found in Totolink T8 4.1.5cu.833_20220905. It has been rated as probl… | 2025-07-10T22:48:31.317000Z |
| var-202403-1743 | TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) … | 2025-07-10T22:48:30.918000Z |
| var-202506-0444 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… | 2025-07-10T22:48:27.877000Z |
| var-202506-0441 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… | 2025-07-10T22:48:27.862000Z |
| var-202506-0445 | CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service… | 2025-07-10T22:48:27.845000Z |
| var-202506-0443 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scriptin… | 2025-07-10T22:48:27.830000Z |
| var-202506-0440 | CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service… | 2025-07-10T22:48:27.813000Z |
| var-202401-0374 | A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220… | 2025-07-10T22:47:09.712000Z |
| var-202401-0479 | A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared a… | 2025-07-10T22:47:09.687000Z |
| var-202401-1088 | A vulnerability was found in Totolink N200RE V5 9.3.5u.6255_B20211224. It has been classi… | 2025-07-10T22:47:09.634000Z |
| var-202504-0860 | CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that… | 2025-07-10T22:47:06.942000Z |
| var-202312-2638 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow v… | 2025-07-10T22:40:11.215000Z |
| var-202405-0739 | Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to exe… | 2025-07-09T23:22:29.095000Z |
| var-202408-0176 | A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3… | 2025-07-09T23:22:28.673000Z |
| var-202501-2809 | Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmw… | 2025-07-09T23:22:27.884000Z |
| var-202502-2375 | A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier… | 2025-07-09T23:22:11.602000Z |
| var-202408-0044 | A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. It has been rated as… | 2025-07-09T23:21:00.412000Z |
| var-202507-0016 | A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B2… | 2025-07-09T23:20:54.715000Z |
| var-202403-1911 | TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) … | 2025-07-09T23:18:50.328000Z |
| var-202403-2459 | There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Ea… | 2025-07-09T23:18:50.284000Z |
| var-202407-2453 | A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic… | 2025-07-09T23:18:49.621000Z |
| var-202505-0056 | A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as proble… | 2025-07-09T23:18:23.119000Z |
| var-202403-2890 | TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)… | 2025-07-09T23:18:03.570000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2024:3182-1 | Security update for expat | 2024-09-09T14:41:45Z | 2024-09-09T14:41:45Z |
| suse-su-2024:3181-1 | Security update for postgresql16 | 2024-09-09T14:41:29Z | 2024-09-09T14:41:29Z |
| suse-su-2024:3174-1 | Security update for bubblewrap and flatpak | 2024-09-09T10:58:39Z | 2024-09-09T10:58:39Z |
| suse-su-2024:3173-1 | Security update for apache2 | 2024-09-09T10:56:51Z | 2024-09-09T10:56:51Z |
| suse-su-2024:3172-1 | Security update for apache2 | 2024-09-09T10:55:41Z | 2024-09-09T10:55:41Z |
| suse-su-2024:3171-1 | Security update for postgresql16 | 2024-09-09T10:53:34Z | 2024-09-09T10:53:34Z |
| suse-su-2024:3170-1 | Security update for postgresql16 | 2024-09-09T10:51:47Z | 2024-09-09T10:51:47Z |
| suse-su-2024:3169-1 | Security update for postgresql16 | 2024-09-09T10:49:55Z | 2024-09-09T10:49:55Z |
| suse-su-2024:3168-1 | Security update for postgresql16 | 2024-09-09T10:48:16Z | 2024-09-09T10:48:16Z |
| suse-su-2024:3165-1 | Security update for wireshark | 2024-09-09T07:25:24Z | 2024-09-09T07:25:24Z |
| suse-su-2024:3163-1 | Security update for gradle | 2024-09-06T10:18:54Z | 2024-09-06T10:18:54Z |
| suse-su-2024:3162-1 | Security update for java-1_8_0-ibm | 2024-09-06T10:18:01Z | 2024-09-06T10:18:01Z |
| suse-su-2024:3161-1 | Security update for python-Django | 2024-09-06T10:16:42Z | 2024-09-06T10:16:42Z |
| suse-su-2024:3160-1 | Security update for postgresql16 | 2024-09-06T10:16:20Z | 2024-09-06T10:16:20Z |
| suse-su-2024:3159-1 | Security update for postgresql16 | 2024-09-06T10:15:54Z | 2024-09-06T10:15:54Z |
| suse-su-2024:3158-1 | Security update for postgresql16 | 2024-09-06T10:15:33Z | 2024-09-06T10:15:33Z |
| suse-su-2024:3157-1 | Security update for MozillaFirefox | 2024-09-06T10:14:40Z | 2024-09-06T10:14:40Z |
| suse-su-2024:3156-1 | Security update for python312-pip | 2024-09-06T10:13:16Z | 2024-09-06T10:13:16Z |
| suse-su-2024:3155-1 | Security update for kubernetes1.26 | 2024-09-06T10:12:52Z | 2024-09-06T10:12:52Z |
| suse-su-2024:3154-1 | Security update for postgresql16 | 2024-09-06T09:23:43Z | 2024-09-06T09:23:43Z |
| suse-su-2024:3153-1 | Security update for postgresql16 | 2024-09-06T09:23:02Z | 2024-09-06T09:23:02Z |
| suse-su-2024:3152-1 | Security update for MozillaFirefox | 2024-09-06T09:22:29Z | 2024-09-06T09:22:29Z |
| suse-su-2024:3151-1 | Security update for buildah | 2024-09-06T08:23:40Z | 2024-09-06T08:23:40Z |
| suse-su-2024:3149-1 | Security update for systemd | 2024-09-05T15:05:38Z | 2024-09-05T15:05:38Z |
| suse-su-2024:3144-1 | Security update for hdf5, netcdf, trilinos | 2024-09-05T06:31:59Z | 2024-09-05T06:31:59Z |
| suse-su-2024:3140-1 | Security update for java-1_8_0-openj9 | 2024-09-04T10:16:43Z | 2024-09-04T10:16:43Z |
| suse-su-2024:3139-1 | Security update for python-Django | 2024-09-04T10:16:13Z | 2024-09-04T10:16:13Z |
| suse-su-2024:3136-1 | Security update for perl-DBI | 2024-09-04T06:52:40Z | 2024-09-04T06:52:40Z |
| suse-su-2024:3120-1 | Security update for buildah, docker | 2024-09-03T15:13:23Z | 2024-09-03T15:13:23Z |
| suse-su-2024:3119-1 | Security update for openssl-1_0_0 | 2024-09-03T15:10:41Z | 2024-09-03T15:10:41Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:11925-1 | firecracker-1.0.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11924-1 | cscreen-1.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11923-1 | sccache-0.2.15~git0.6b6d2f7-11.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11922-1 | rustup-1.24.3~0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11921-1 | rage-encryption-0.7.1+0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11920-1 | cargo-audit-0.16.0~git0.625c965-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11919-1 | apache2-2.4.53-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11918-1 | tuigreet-0.7.1-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11917-1 | treefetch-2.0.0~git0.5b3eac1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11916-1 | tealdeer-1.5.0+0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11915-1 | libblkid-devel-2.37.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11914-1 | macchina-6.0.6~git0.c21ce78-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11913-1 | juliaup-1.5.37-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11912-1 | ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11911-1 | etcd-3.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11910-1 | kernel-devel-5.16.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11909-1 | MozillaThunderbird-91.7.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11908-1 | MozillaFirefox-98.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11907-1 | qemu-6.2.0-41.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11906-1 | ruby3.1-rubygem-sprockets-4.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11905-1 | libopenssl-1_1-devel-1.1.1m-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11904-1 | cobbler-3.3.2.0+git.9044aa99-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11903-1 | ruby3.1-rubygem-activestorage-7.0-7.0.2.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11902-1 | fscrypt-0.3.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11901-1 | cyradm-2.4.22-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11900-1 | ruby3.1-rubygem-loofah-2.14.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11899-1 | ruby3.1-rubygem-actionpack-7.0-7.0.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11898-1 | libopenvswitch-2_17-0-2.17.0-12.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11897-1 | minidlna-1.3.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11896-1 | java-1_8_0-openj9-1.8.0.322-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2020-13266 | 2024-03-06T11:23:15.296Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13265 | 2024-03-06T11:23:16.561Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13264 | 2024-03-06T11:23:17.785Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13263 | 2024-03-06T11:23:19.027Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13262 | 2024-03-06T11:23:20.331Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-13261 | 2024-03-06T11:23:21.598Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-12448 | 2024-03-06T11:23:22.845Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-12277 | 2024-03-06T11:23:24.109Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-12276 | 2024-03-06T11:23:25.385Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-12275 | 2024-03-06T11:23:26.642Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-11649 | 2024-03-06T11:23:27.888Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-11506 | 2024-03-06T11:23:29.202Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-11505 | 2024-03-06T11:23:30.519Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10981 | 2024-03-06T11:23:31.761Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10980 | 2024-03-06T11:23:33.013Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10979 | 2024-03-06T11:23:34.248Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10978 | 2024-03-06T11:23:35.522Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10977 | 2024-03-06T11:23:36.866Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10976 | 2024-03-06T11:23:38.111Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10975 | 2024-03-06T11:23:39.384Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10956 | 2024-03-06T11:23:40.637Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10955 | 2024-03-06T11:23:41.904Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10954 | 2024-03-06T11:23:43.181Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10953 | 2024-03-06T11:23:44.411Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10952 | 2024-03-06T11:23:45.726Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10535 | 2024-03-06T11:23:47.028Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10092 | 2024-03-06T11:23:48.320Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10091 | 2024-03-06T11:23:49.610Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10090 | 2024-03-06T11:23:50.890Z | 2025-04-03T14:40:37.652Z | |
| bit-gitlab-2020-10089 | 2024-03-06T11:23:52.161Z | 2025-04-03T14:40:37.652Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-21201 | WordPress Duplicate Page and Post plugin SQL注入漏洞 | 2025-09-12 | 2025-09-12 |
| cnvd-2025-21195 | NVIDIA NvContainer信任管理问题漏洞 | 2025-05-07 | 2025-09-12 |
| cnvd-2025-21194 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21194) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21193 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21193) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21192 | NVIDIA GPU Display Driver信息泄露漏洞 | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21191 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21191) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21190 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21190) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21189 | Esri Portal For ArcGis跨站请求伪造漏洞 | 2025-06-11 | 2025-09-12 |
| cnvd-2025-21188 | esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21188) | 2025-08-27 | 2025-09-12 |
| cnvd-2025-21187 | esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21187) | 2025-08-27 | 2025-09-12 |
| cnvd-2025-21186 | esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞(CNVD-2025-21186) | 2025-08-27 | 2025-09-12 |
| cnvd-2025-21185 | esri Portal for ArcGIS Enterprise Sites跨站脚本漏洞 | 2025-08-27 | 2025-09-12 |
| cnvd-2025-21184 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21184) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21183 | NVIDIA GPU Display Driver存在未明漏洞(CNVD-2025-21183) | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21182 | NVIDIA GPU Display Driver存在未明漏洞 | 2025-08-10 | 2025-09-12 |
| cnvd-2025-21181 | NVIDIA DOCA存在未明漏洞 | 2025-09-08 | 2025-09-12 |
| cnvd-2025-21180 | NVIDIA DOCA存在未明漏洞(CNVD-2025-21180) | 2025-09-08 | 2025-09-12 |
| cnvd-2025-21179 | NVIDIA ConnectX存在未明漏洞(CNVD-2025-21179) | 2025-09-08 | 2025-09-12 |
| cnvd-2025-21178 | NVIDIA BlueField存在未明漏洞(CNVD-2025-21178) | 2025-09-08 | 2025-09-12 |
| cnvd-2025-21177 | NVIDIA NVDebug存在未明漏洞(CNVD-2025-21177) | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21175 | Fortinet FortiDDoS-F操作系统命令注入漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21174 | Rockwell Automation FactoryTalk Activation Manager数据泄露漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21173 | Adobe Experience Manager代码执行漏洞 | 2025-08-11 | 2025-09-12 |
| cnvd-2025-21172 | Adobe Experience Manager XML实体注入漏洞(CNVD-2025-21172) | 2025-08-11 | 2025-09-12 |
| cnvd-2025-21171 | Tenda CP6加密问题漏洞 | 2025-09-04 | 2025-09-12 |
| cnvd-2025-21170 | Tenda AC20缓冲区溢出漏洞 | 2025-09-04 | 2025-09-12 |
| cnvd-2025-21169 | Tenda AC20缓冲区溢出漏洞 | 2025-09-11 | 2025-09-12 |
| cnvd-2025-21167 | Adobe After Effects越界读取漏洞(CNVD-2025-21167) | 2021-12-27 | 2025-09-12 |
| cnvd-2025-21166 | Adobe After Effects越界读取漏洞(CNVD-2025-21166) | 2021-12-27 | 2025-09-12 |
| cnvd-2025-21165 | Adobe Experience Manager输入验证错误漏洞(CNVD-2025-21165) | 2025-09-11 | 2025-09-12 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-198 | Multiples vulnérabilités dans Google Chrome | 2022-03-02T00:00:00.000000 | 2022-03-02T00:00:00.000000 |
| certfr-2022-avi-197 | Multiples vulnérabilités dans les produits Fortinet | 2022-03-02T00:00:00.000000 | 2022-03-02T00:00:00.000000 |
| certfr-2022-avi-196 | Vulnérabilité dans VMware Tools | 2022-03-02T00:00:00.000000 | 2022-03-02T00:00:00.000000 |
| certfr-2022-avi-194 | Vulnérabilité dans F-Secure | 2022-03-01T00:00:00.000000 | 2022-03-01T00:00:00.000000 |
| certfr-2022-avi-193 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-03-01T00:00:00.000000 | 2022-03-01T00:00:00.000000 |
| certfr-2022-avi-192 | Multiples vulnérabilités dans IBM QRadar SIEM | 2022-03-01T00:00:00.000000 | 2022-03-01T00:00:00.000000 |
| certfr-2022-avi-191 | Multiples vulnérabilités dans ElasticSearch et Kibana | 2022-03-01T00:00:00.000000 | 2022-03-01T00:00:00.000000 |
| certfr-2022-avi-190 | Vulnérabilité dans NetApp SnapCenter | 2022-02-28T00:00:00.000000 | 2022-02-28T00:00:00.000000 |
| certfr-2022-avi-189 | Multiples vulnérabilités dans les produits GitLab | 2022-02-28T00:00:00.000000 | 2022-02-28T00:00:00.000000 |
| certfr-2022-avi-161 | Multiples vulnérabilités dans PHP | 2022-02-18T00:00:00.000000 | 2022-02-28T00:00:00.000000 |
| certfr-2022-avi-188 | Vulnérabilité dans Juniper Junos OS | 2022-02-25T00:00:00.000000 | 2022-02-25T00:00:00.000000 |
| certfr-2022-avi-187 | Multiples vulnérabilités dans le serveur HTTP d'IBM WebSphere | 2022-02-25T00:00:00.000000 | 2022-02-25T00:00:00.000000 |
| certfr-2022-avi-186 | Multiples vulnérabilités dans Qnap Proxy Server | 2022-02-25T00:00:00.000000 | 2022-02-25T00:00:00.000000 |
| certfr-2022-avi-185 | Vulnérabilité dans les produits ESET | 2022-02-25T00:00:00.000000 | 2022-02-25T00:00:00.000000 |
| certfr-2022-avi-184 | Vulnérabilité dans Juniper Junos OS | 2022-02-24T00:00:00.000000 | 2022-02-24T00:00:00.000000 |
| certfr-2022-avi-183 | Multiples vulnérabilités dans Cisco NX-OS et Nexus | 2022-02-24T00:00:00.000000 | 2022-02-24T00:00:00.000000 |
| certfr-2022-avi-182 | Vulnérabilité dans VMware Workspace ONE Boxer | 2022-02-24T00:00:00.000000 | 2022-02-24T00:00:00.000000 |
| certfr-2022-avi-181 | Vulnérabilité dans F5 BIG-IP | 2022-02-24T00:00:00.000000 | 2022-02-24T00:00:00.000000 |
| certfr-2022-avi-180 | Multiples vulnérabilités dans Siemens | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-178 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-177 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-176 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-175 | Multiples vulnérabilités dans Trend Micro ServerProtect et Worry-Free Business Security | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-174 | Vulnérabilité dans les produits Pulse Secure | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-172 | Vulnérabilité dans IBM Websphere | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-171 | Multiples vulnérabilités dans les commutateurs Aruba AOS-CX | 2022-02-23T00:00:00.000000 | 2022-02-23T00:00:00.000000 |
| certfr-2022-avi-170 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-22T00:00:00.000000 | 2022-02-22T00:00:00.000000 |
| certfr-2022-avi-168 | Multiples vulnérabilités dans les produits IBM | 2022-02-22T00:00:00.000000 | 2022-02-22T00:00:00.000000 |
| certfr-2022-avi-167 | Multiples vulnérabilités dans Adobe Commerce | 2022-02-21T00:00:00.000000 | 2022-02-21T00:00:00.000000 |
| certfr-2022-avi-166 | Vulnérabilité dans Juniper Junos OS | 2022-02-21T00:00:00.000000 | 2022-02-21T00:00:00.000000 |