Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64285 |
5.4 (3.1)
|
WordPress Premmerce Wholesale Pricing for WooCommerce … |
Premmerce |
Premmerce Wholesale Pricing for WooCommerce |
2025-10-29T08:38:13.449Z | 2026-01-20T14:28:21.833Z |
| CVE-2025-64257 |
4.3 (3.1)
|
WordPress My Tickets plugin <= 2.1.0 - Broken Access C… |
Joe Dolson |
My Tickets |
2025-12-09T14:13:52.568Z | 2026-01-20T14:28:21.812Z |
| CVE-2025-64283 |
6.5 (3.1)
|
WordPress RTMKit plugin <= 1.6.7 - Insecure Direct Obj… |
Rometheme |
RTMKit |
2025-10-29T08:38:12.413Z | 2026-01-20T14:28:21.799Z |
| CVE-2025-64286 |
4.3 (3.1)
|
WordPress WP Rentals theme <= 3.13.1 - Cross Site Requ… |
WpEstate |
WP Rentals |
2025-10-29T08:38:13.920Z | 2026-01-20T14:28:21.779Z |
| CVE-2025-64284 |
7.5 (3.1)
|
WordPress Majestic Support plugin <= 1.1.1 - Local Fil… |
Majestic Support |
Majestic Support |
2025-10-29T08:38:12.876Z | 2026-01-20T14:28:21.739Z |
| CVE-2025-64261 |
6.5 (3.1)
|
WordPress Appointment Booking Calendar plugin <= 1.3.9… |
codepeople |
Appointment Booking Calendar |
2025-11-13T09:24:27.476Z | 2026-01-20T14:28:21.721Z |
| CVE-2025-64282 |
4.3 (3.1)
|
WordPress Radius Blocks plugin <= 2.2.1 - Insecure Dir… |
RadiusTheme |
Radius Blocks |
2025-12-18T16:18:54.393Z | 2026-01-20T14:28:21.561Z |
| CVE-2025-64271 |
6.5 (3.1)
|
WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Si… |
HasThemes |
WP Plugin Manager |
2025-11-13T09:24:30.639Z | 2026-01-20T14:28:21.446Z |
| CVE-2025-64249 |
4.8 (3.1)
|
WordPress Protect WP Admin plugin <= 4.1 - Broken Acce… |
WP-EXPERTS.IN |
Protect WP Admin |
2025-12-16T08:12:49.485Z | 2026-01-20T14:28:21.330Z |
| CVE-2025-64248 |
4.3 (3.1)
|
WordPress Request a Quote plugin <= 2.5.3 - Broken Acc… |
emarket-design |
Request a Quote |
2025-12-16T08:12:49.290Z | 2026-01-20T14:28:21.329Z |
| CVE-2025-64268 |
7.5 (3.1)
|
WordPress Timetics plugin <= 1.0.44 - Broken Access Co… |
Arraytics |
Timetics |
2025-12-18T07:22:14.683Z | 2026-01-20T14:28:21.327Z |
| CVE-2025-64263 |
5.4 (3.1)
|
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… |
PluginEver |
WP Content Pilot |
2025-11-13T09:24:28.383Z | 2026-01-20T14:28:21.298Z |
| CVE-2025-64272 |
6.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.080Z | 2026-01-20T14:28:21.293Z |
| CVE-2025-64265 |
4.3 (3.1)
|
WordPress Frontend File Manager plugin <= 23.2 - Broke… |
N-Media |
Frontend File Manager |
2025-11-13T09:24:29.310Z | 2026-01-20T14:28:21.291Z |
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64276 |
6.5 (3.1)
|
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… |
Ays Pro |
Survey Maker |
2025-11-13T09:24:31.911Z | 2026-01-20T14:28:21.160Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64273 |
7.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.266Z | 2026-01-20T14:28:21.096Z |
| CVE-2025-64270 |
6.5 (3.1)
|
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … |
masteriyo |
Masteriyo - LMS |
2025-12-18T07:22:14.865Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64274 |
4.3 (3.1)
|
WordPress WPKoi Templates for Elementor plugin <= 3.4.… |
wpkoithemes |
WPKoi Templates for Elementor |
2025-11-13T09:24:31.061Z | 2026-01-20T14:28:21.083Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64277 |
5.3 (3.1)
|
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… |
QuantumCloud |
ChatBot |
2025-11-13T09:24:32.345Z | 2026-01-20T14:28:21.020Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-37079 |
9.8 (3.1)
|
vCenter Server contains a heap-overflow vulnerabi… |
n/a |
VMware vCenter Server |
2024-06-18T05:43:06.619Z | 2026-01-24T04:55:16.029Z |
| CVE-2024-4296 |
4.9 (3.1)
|
HGiga iSherlock - Arbitrary File Download |
HGiga |
iSherlock 4.5 |
2024-04-29T02:08:23.300Z | 2025-07-14T02:15:08.879Z |
| CVE-2024-4297 |
4.9 (3.1)
|
HGiga iSherlock - Arbitrary File Download |
HGiga |
iSherlock 4.5 |
2024-04-29T02:28:24.526Z | 2025-07-14T02:17:55.601Z |
| CVE-2024-4298 |
7.2 (3.1)
|
HGiga iSherlock - Command Injection |
HGiga |
iSherlock 4.5 |
2024-04-29T02:39:04.580Z | 2025-07-14T02:19:23.281Z |
| CVE-2024-4299 |
7.2 (3.1)
|
HGiga iSherlock - Command Injection |
HGiga |
iSherlock 4.5 |
2024-04-29T03:15:18.038Z | 2025-07-14T02:21:35.775Z |
| CVE-2025-54890 |
6.8 (3.1)
|
A user with elevated privileges can inject XSS in the … |
Centreon |
Infra Monitoring |
2025-12-22T11:07:28.095Z | 2026-01-05T09:51:16.625Z |
| CVE-2024-2301 |
7.6 (3.1)
|
Certain HP LaserJet Pro devices are potentially v… |
HP Inc. |
Certain HP LaserJet Pro Devices |
2024-05-23T16:53:24.873Z | 2025-03-14T00:42:36.618Z |
| CVE-2025-10023 |
6.2 (3.1)
|
A user with elevated privileges can inject XSS in the … |
Centreon |
Infra Monitoring |
2025-10-27T15:07:21.621Z | 2025-10-30T13:48:16.904Z |
| CVE-2024-5143 |
6.8 (3.1)
|
A user with device administrative privileges can … |
HP Inc. |
Certain HP LaserJet Pro Printers |
2024-05-23T16:58:15.462Z | 2024-10-31T14:48:58.413Z |
| CVE-2024-5399 |
7.2 (3.1)
|
Openfind Mail2000 - OS Command Injection |
Openfind |
Mail2000 V7.0 |
2024-05-27T03:32:29.744Z | 2024-08-01T21:11:12.667Z |
| CVE-2024-5400 |
8.8 (3.1)
|
Openfind Mail2000 - OS Command Injection |
Openfind |
Mail2000 V8.0 |
2024-05-27T05:36:44.672Z | 2024-08-01T21:11:12.528Z |
| CVE-2025-3864 |
2.3 (4.0)
|
Connection pool exhaustion in hackney |
hackney |
hackney |
2025-05-28T11:19:15.208Z | 2026-01-26T12:13:02.411Z |
| CVE-2025-64775 |
N/A
|
Apache Struts: File leak in multipart request processi… |
Apache Software Foundation |
Apache Struts |
2025-12-01T16:07:36.573Z | 2025-12-01T18:23:17.469Z |
| CVE-2025-52694 |
10 (3.1)
|
Execution of arbitrary SQL commands |
Advantech |
IoTSuite and IoT Edge Products |
2026-01-12T02:27:16.744Z | 2026-01-26T02:50:33.837Z |
| CVE-2022-48620 |
9.8 (3.1)
|
uev (aka libuev) before 2.4.1 has a buffer overfl… |
n/a |
n/a |
2024-01-12T00:00:00.000Z | 2026-01-25T20:04:27.125Z |
| CVE-2023-47466 |
2.9 (3.1)
|
TagLib before 2.0 allows a segmentation violation… |
TagLib |
TagLib |
2025-05-22T00:00:00.000Z | 2026-01-24T21:03:55.780Z |
| CVE-2022-0699 |
9.8 (3.1)
|
A double-free condition exists in contrib/shpsort… |
n/a |
shapelib |
2022-10-17T00:00:00.000Z | 2026-01-24T21:03:54.738Z |
| CVE-2025-14178 |
6.5 (3.1)
|
Heap buffer overflow in array_merge() |
PHP Group |
PHP |
2025-12-27T19:27:41.691Z | 2026-01-24T11:04:01.892Z |
| CVE-2026-24649 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:04.964Z | |
| CVE-2026-24648 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:05.476Z | |
| CVE-2026-24647 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:05.945Z | |
| CVE-2026-24646 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:06.427Z | |
| CVE-2026-24645 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:07.022Z | |
| CVE-2026-24644 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:07.522Z | |
| CVE-2026-24643 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:07.969Z | |
| CVE-2026-24642 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:08.413Z | |
| CVE-2026-24402 |
N/A
|
GitHub cannot issue a CVE for this Security Advisory because this advisory includes information about more than one vulnerability. According to [rule 4.2.11 of the CVE CNA rules](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-2_CVE_ID_Assignment): > 4.2.6 CNAs SHOULD assign different CVE IDs to separate Vulnerabilities, as determined using the guidance in [4.1](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-1_Vulnerability_Determination). > 4.2.11 CNAs SHOULD assign different CVE IDs to different, Independently Fixable Vulnerabilities. You can move forward in one of two ways: - If you agree that this Security Advisory concerns more than one independently fixable vulnerability, split each vulnerability into its own advisory and request one CVE for each vulnerability. - If you do not agree that these vulnerabilities are independently fixable, resubmit the CVE request with a section clarifying how they are dependent and should have the same CVE. Thank you for making the open source ecosystem more secure by fixing and responsibly disclosing these vulnerabilities. | N/A | N/A | 2026-01-24T00:27:07.708Z | |
| CVE-2026-0991 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-23T22:19:31.431Z | |
| CVE-2025-12780 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-23T22:19:31.233Z | |
| CVE-2025-0103 |
9.2 (4.0)
|
Expedition: SQL Injection Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T02:59:51.177Z | 2025-01-13T19:52:47.949Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-37079 | vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol.… | 2024-06-18T06:15:11.350 | 2026-01-26T14:52:05.833 |
| fkie_cve-2024-4296 | The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditShe… | 2024-04-29T02:15:06.153 | 2026-01-26T14:46:45.520 |
| fkie_cve-2024-4297 | The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditS… | 2024-04-29T03:15:09.613 | 2026-01-26T14:42:44.507 |
| fkie_cve-2024-4298 | The email search interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSherlock) … | 2024-04-29T03:15:09.810 | 2026-01-26T14:29:17.947 |
| fkie_cve-2024-4299 | The system configuration interface of HGiga iSherlock (including MailSherlock, SpamSherock, AuditSh… | 2024-04-29T04:15:08.623 | 2026-01-26T14:27:50.970 |
| fkie_cve-2025-54890 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2025-12-22T11:15:57.947 | 2026-01-26T14:05:50.800 |
| fkie_cve-2024-2301 | Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack v… | 2024-05-23T17:15:28.810 | 2026-01-26T14:02:48.033 |
| fkie_cve-2025-10023 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2025-10-27T16:15:35.287 | 2026-01-26T14:02:33.173 |
| fkie_cve-2024-5143 | A user with device administrative privileges can change existing SMTP server settings on the device… | 2024-05-23T17:15:31.560 | 2026-01-26T13:53:04.387 |
| fkie_cve-2024-5399 | Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with admini… | 2024-05-27T04:15:09.300 | 2026-01-26T13:49:40.630 |
| fkie_cve-2024-5400 | Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regula… | 2024-05-27T06:15:10.620 | 2026-01-26T13:42:45.840 |
| fkie_cve-2025-3864 | Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirec… | 2025-05-28T12:15:19.760 | 2026-01-26T13:16:11.073 |
| fkie_cve-2025-64775 | Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes … | 2025-12-01T16:15:56.873 | 2026-01-26T11:30:04.700 |
| fkie_cve-2025-52694 | Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote at… | 2026-01-12T03:16:07.127 | 2026-01-26T03:15:49.177 |
| fkie_cve-2022-48620 | uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. | 2024-01-12T04:15:08.123 | 2026-01-25T20:15:48.177 |
| fkie_cve-2023-47466 | TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a cr… | 2025-05-22T14:16:01.743 | 2026-01-24T21:15:54.740 |
| fkie_cve-2022-0699 | A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issu… | 2022-10-17T16:15:20.567 | 2026-01-24T21:15:54.537 |
| fkie_cve-2025-14178 | In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16,… | 2025-12-27T20:15:40.570 | 2026-01-24T11:15:49.520 |
| fkie_cve-2026-24649 | Rejected reason: Not used | 2026-01-24T04:15:50.890 | 2026-01-24T04:15:50.890 |
| fkie_cve-2026-24648 | Rejected reason: Not used | 2026-01-24T04:15:50.827 | 2026-01-24T04:15:50.827 |
| fkie_cve-2026-24647 | Rejected reason: Not used | 2026-01-24T04:15:50.773 | 2026-01-24T04:15:50.773 |
| fkie_cve-2026-24646 | Rejected reason: Not used | 2026-01-24T04:15:50.703 | 2026-01-24T04:15:50.703 |
| fkie_cve-2026-24645 | Rejected reason: Not used | 2026-01-24T04:15:50.643 | 2026-01-24T04:15:50.643 |
| fkie_cve-2026-24644 | Rejected reason: Not used | 2026-01-24T04:15:50.570 | 2026-01-24T04:15:50.570 |
| fkie_cve-2026-24643 | Rejected reason: Not used | 2026-01-24T04:15:50.507 | 2026-01-24T04:15:50.507 |
| fkie_cve-2026-24642 | Rejected reason: Not used | 2026-01-24T04:15:50.400 | 2026-01-24T04:15:50.400 |
| fkie_cve-2026-24402 | Rejected reason: GitHub cannot issue a CVE for this Security Advisory because this advisory include… | 2026-01-24T01:15:50.543 | 2026-01-24T01:15:50.543 |
| fkie_cve-2026-0991 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-23T23:15:54.280 | 2026-01-23T23:15:54.280 |
| fkie_cve-2025-12780 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-23T23:15:53.470 | 2026-01-23T23:15:53.470 |
| fkie_cve-2025-0103 | An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker t… | 2025-01-11T03:15:22.020 | 2026-01-23T22:03:57.657 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-phr8-9mwv-gr25 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Listify listify allows Cross Site Req… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-jw7j-6gfh-6frg |
6.1 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist … | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-j85p-xhp3-8v7h |
4.3 (3.1)
|
Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-att… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-j7pg-j64q-rmmm |
4.3 (3.1)
|
Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Inco… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-hhph-4qfr-mpv6 |
4.3 (3.1)
|
Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting I… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-gh72-jv5j-v57j |
6.5 (3.1)
|
Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Explo… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-f9j2-m9rw-5mc5 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Yoav Farhi RTL Tester rtl-tester allows Cross Si… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-f2ff-x4pv-cq59 |
4.3 (3.1)
|
Missing Authorization vulnerability in emarket-design Request a Quote request-a-quote allows Exploi… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-c7hm-x6c7-r443 |
4.3 (3.1)
|
Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Secti… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-99m8-4fhj-qqmr |
4.9 (3.1)
|
Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-ch… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-82v3-qrf7-cxg9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site … | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-7chc-h92q-cv66 |
4.3 (3.1)
|
Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings a… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-4hpr-jq62-3rv4 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Graham Quick Interest Slider quick-interest-slid… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:13Z |
| ghsa-42hg-rvqc-fhf5 |
4.9 (3.1)
|
Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Ex… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-38mm-37q5-m94p |
4.3 (3.1)
|
Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-2xmw-984x-wv9r |
4.8 (3.1)
|
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Explo… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-297g-gfvh-fg6g |
4.7 (3.1)
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-x9qg-qg5q-w7wm |
2.7 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree … | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-w462-84xq-4265 |
5.3 (3.1)
|
Missing Authorization vulnerability in ThemeAtelier IDonate idonate allows Exploiting Incorrectly C… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-vwff-x332-54cr |
5.3 (3.1)
|
Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-v3p3-x59h-hh4x |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-i… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-rv24-x99m-5fww |
5.3 (3.1)
|
Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exp… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-rgqg-hgw2-9cww |
5.3 (3.1)
|
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Co… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-r9vg-qvpj-r6fq |
4.3 (3.1)
|
Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploit… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-qhmm-q668-fm4x |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cros… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-pc9f-26mf-x8r8 |
5.3 (3.1)
|
Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking all… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p8fx-rcmw-3w3v |
5.3 (3.1)
|
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allow… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p3x2-xc39-x94f |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-m5p4-vfqp-hgph |
2.6 (3.1)
|
Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-fronten… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-jv2p-gvm2-g823 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Str… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-30063 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.203897Z |
| gsd-2024-30614 | An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information… | 2024-04-03T05:02:29.203685Z |
| gsd-2024-30183 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.203042Z |
| gsd-2024-30229 | Deserialization of Untrusted Data vulnerability in GiveWP.This issue affects GiveWP: from… | 2024-04-03T05:02:29.202346Z |
| gsd-2024-30166 | In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information di… | 2024-04-03T05:02:29.201648Z |
| gsd-2024-30916 | An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker … | 2024-04-03T05:02:29.201388Z |
| gsd-2024-30065 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.201193Z |
| gsd-2024-30057 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.200991Z |
| gsd-2024-30433 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.200390Z |
| gsd-2024-30558 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.199755Z |
| gsd-2024-30854 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.199402Z |
| gsd-2024-30043 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.199128Z |
| gsd-2024-30811 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.198907Z |
| gsd-2024-30884 | Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allo… | 2024-04-03T05:02:29.198684Z |
| gsd-2024-30512 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.198487Z |
| gsd-2024-30071 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.198287Z |
| gsd-2024-30468 | Cross-Site Request Forgery (CSRF) vulnerability in All In One WP Security & Firewall Team… | 2024-04-03T05:02:29.197679Z |
| gsd-2024-30473 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.197390Z |
| gsd-2024-30042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.197198Z |
| gsd-2024-30088 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.197002Z |
| gsd-2024-30866 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php. | 2024-04-03T05:02:29.196626Z |
| gsd-2024-30032 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.196206Z |
| gsd-2024-30482 | Cross-Site Request Forgery (CSRF) vulnerability in Brice CAPOBIANCO Simple Revisions Dele… | 2024-04-03T05:02:29.195560Z |
| gsd-2024-30321 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.195097Z |
| gsd-2024-30516 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.194875Z |
| gsd-2024-30123 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.194637Z |
| gsd-2024-30128 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.194429Z |
| gsd-2024-30965 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability … | 2024-04-03T05:02:29.194026Z |
| gsd-2024-30159 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.193766Z |
| gsd-2024-30909 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.193565Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-190987 | Malicious code in prime-one-table (npm) | 2025-11-24T22:21:38Z | 2025-11-25T00:36:51Z |
| mal-2025-190986 | Malicious code in pico-uid (npm) | 2025-11-24T21:51:48Z | 2025-11-25T00:36:51Z |
| mal-2025-190985 | Malicious code in pdf-annotation (npm) | 2025-11-24T21:51:18Z | 2025-11-25T00:36:51Z |
| mal-2025-190984 | Malicious code in parcel-plugin-asset-copier (npm) | 2025-11-24T21:51:03Z | 2025-11-25T00:36:51Z |
| mal-2025-190983 | Malicious code in package-tester (npm) | 2025-11-24T21:50:28Z | 2025-11-25T00:36:51Z |
| mal-2025-190982 | Malicious code in orchestrix (npm) | 2025-11-24T21:50:13Z | 2025-11-25T00:36:51Z |
| mal-2025-190981 | Malicious code in next-styled-nprogress (npm) | 2025-11-24T22:20:48Z | 2025-11-25T00:36:51Z |
| mal-2025-190980 | Malicious code in next-simple-google-analytics (npm) | 2025-11-24T22:19:26Z | 2025-11-25T00:36:51Z |
| mal-2025-190979 | Malicious code in next-circular-dependency (npm) | 2025-11-24T22:17:35Z | 2025-11-25T00:36:51Z |
| mal-2025-190978 | Malicious code in nanoreset (npm) | 2025-11-24T22:15:27Z | 2025-11-25T00:36:51Z |
| mal-2025-190977 | Malicious code in n8n-nodes-vercel-ai-sdk (npm) | 2025-11-24T22:13:51Z | 2025-11-25T00:36:51Z |
| mal-2025-190976 | Malicious code in mon-package-react-typescript (npm) | 2025-11-24T22:12:36Z | 2025-11-25T00:36:51Z |
| mal-2025-190975 | Malicious code in mod10-check-digit (npm) | 2025-11-24T22:11:23Z | 2025-11-25T00:36:51Z |
| mal-2025-190926 | Malicious code in posthog-react-native (npm) | 2025-11-24T16:31:47Z | 2025-11-25T00:36:51Z |
| mal-2025-190925 | Malicious code in posthog-node (npm) | 2025-11-24T16:31:47Z | 2025-11-25T00:36:51Z |
| mal-2025-190924 | Malicious code in posthog-docusaurus (npm) | 2025-11-24T16:31:47Z | 2025-11-25T00:36:51Z |
| mal-2025-190856 | Malicious code in poper-react-sdk (npm) | 2025-11-24T15:13:07Z | 2025-11-25T00:36:51Z |
| mal-2025-190855 | Malicious code in orbit-soap (npm) | 2025-11-24T14:41:10Z | 2025-11-25T00:36:51Z |
| mal-2025-190854 | Malicious code in orbit-boxicons (npm) | 2025-11-24T15:04:21Z | 2025-11-25T00:36:51Z |
| mal-2025-190853 | Malicious code in open2internet (npm) | 2025-11-24T14:42:48Z | 2025-11-25T00:36:51Z |
| mal-2025-190852 | Malicious code in n8n-nodes-tmdb (npm) | 2025-11-24T15:04:37Z | 2025-11-25T00:36:51Z |
| mal-2025-190778 | Malicious code in posthog-plugin-hello-world (npm) | 2025-11-24T14:12:09Z | 2025-11-25T00:36:51Z |
| mal-2025-190777 | Malicious code in orbit-nebula-editor (npm) | 2025-11-24T13:46:05Z | 2025-11-25T00:36:51Z |
| mal-2025-190698 | Malicious code in orbit-nebula-draw-tools (npm) | 2025-11-24T13:18:02Z | 2025-11-25T00:36:51Z |
| mal-2025-190649 | Malicious code in posthog-react-native-session-replay (npm) | 2025-11-24T12:06:10Z | 2025-11-25T00:36:51Z |
| mal-2025-190974 | Malicious code in jacob-zuma (npm) | 2025-11-24T22:02:20Z | 2025-11-25T00:36:50Z |
| mal-2025-190973 | Malicious code in itobuz-angular-button (npm) | 2025-11-24T22:01:45Z | 2025-11-25T00:36:50Z |
| mal-2025-190972 | Malicious code in itobuz-angular-auth (npm) | 2025-11-24T22:01:14Z | 2025-11-25T00:36:50Z |
| mal-2025-190971 | Malicious code in itobuz-angular (npm) | 2025-11-24T22:00:54Z | 2025-11-25T00:36:50Z |
| mal-2025-190970 | Malicious code in ito-button (npm) | 2025-11-24T22:00:39Z | 2025-11-25T00:36:50Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-1590 | HCL BigFix: Mehrere Schwachstellen | 2024-07-10T22:00:00.000+00:00 | 2024-12-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0605 | Fortinet FortiClientEMS: Mehrere Schwachstellen ermöglichen Codeausführung | 2024-03-12T23:00:00.000+00:00 | 2024-12-18T23:00:00.000+00:00 |
| wid-sec-w-2022-0941 | Red Hat OpenShift: Mehrere Schwachstellen | 2021-08-09T22:00:00.000+00:00 | 2024-12-18T23:00:00.000+00:00 |
| wid-sec-w-2022-0033 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2022-03-30T22:00:00.000+00:00 | 2024-12-18T23:00:00.000+00:00 |
| wid-sec-w-2024-3721 | Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3720 | HCL BigFix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3719 | Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3718 | Elasticsearch: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3717 | IBM FileNet und Content Manager: Mehrere Schwachstellen | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3716 | IBM Security Guardium: Mehrere Schwachstellen ermöglichen die Offenlegung von Informationen | 2024-12-17T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3704 | Moodle: Mehrere Schwachstellen | 2024-12-16T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-2083 | Red Hat OpenShift Keycloak: Mehrere Schwachstellen | 2024-09-09T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-2046 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-09-03T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1350 | Keycloak: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2024-06-11T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-1012 | pgAdmin: Mehrere Schwachstellen | 2024-05-01T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0947 | Red Hat OpenShift: Mehrere Schwachstellen | 2024-04-22T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0914 | Red Hat Enterprise Linux (keycloak): Mehrere Schwachstellen | 2024-04-16T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0576 | pgAdmin: Schwachstelle ermöglicht Codeausführung | 2024-03-06T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-0203 | Red Hat Enterprise Linux Quarkus: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-01-25T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2023-3072 | Red Hat Enterprise Linux(Cryostat): Mehrere Schwachstellen | 2023-12-06T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2023-0893 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-04-10T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2023-0444 | python-setuptools: Schwachstelle ermöglicht Denial of Service | 2023-02-21T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2022-2302 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2022-12-13T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2022-2219 | H2: Schwachstelle ermöglicht Privilegieneskalation | 2022-12-01T23:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2022-1836 | Red Hat Enterprise Linux (BlueZ): Schwachstelle ermöglicht Denial of Service | 2022-05-10T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2022-0028 | IBM Java: Mehrere Schwachstellen | 2022-06-01T22:00:00.000+00:00 | 2024-12-17T23:00:00.000+00:00 |
| wid-sec-w-2024-3708 | Hitachi Ops Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-16T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3707 | Siemens TIA Portal: Schwachstelle ermöglicht Codeausführung | 2024-12-16T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3705 | Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-16T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0598 | Adobe ColdFusion: Mehrere Schwachstellen | 2024-03-12T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:21463 | Red Hat Security Advisory: kernel security update | 2025-11-17T08:34:08+00:00 | 2026-01-27T20:23:53+00:00 |
| rhsa-2025:16459 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 OpenShift Jenkins security update | 2025-09-23T09:47:46+00:00 | 2026-01-27T19:45:18+00:00 |
| rhsa-2025:17567 | Red Hat Security Advisory: Red Hat AMQ Broker 7.13.2 release and security update | 2025-10-08T14:48:34+00:00 | 2026-01-27T19:45:17+00:00 |
| rhsa-2025:16989 | Red Hat Security Advisory: Red Hat Offline Knowledge Portal update | 2025-09-29T17:36:18+00:00 | 2026-01-27T19:45:17+00:00 |
| rhsa-2025:16462 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update | 2025-09-23T10:09:56+00:00 | 2026-01-27T19:45:17+00:00 |
| rhsa-2025:16461 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update | 2025-09-23T10:10:12+00:00 | 2026-01-27T19:45:16+00:00 |
| rhsa-2025:16460 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update | 2025-09-23T10:09:41+00:00 | 2026-01-27T19:45:16+00:00 |
| rhsa-2025:16457 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 OpenShift Jenkins security update | 2025-09-23T09:44:56+00:00 | 2026-01-27T19:45:14+00:00 |
| rhsa-2025:14911 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.6 for Spring Boot release. | 2025-08-28T18:38:33+00:00 | 2026-01-27T19:45:14+00:00 |
| rhsa-2025:16456 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update | 2025-09-23T09:44:51+00:00 | 2026-01-27T19:45:13+00:00 |
| rhsa-2025:16455 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 Openshift Jenkins security update | 2025-09-23T09:40:23+00:00 | 2026-01-27T19:45:12+00:00 |
| rhsa-2025:16454 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.19 OpenShift Jenkins security update | 2025-09-23T09:44:32+00:00 | 2026-01-27T19:45:12+00:00 |
| rhsa-2025:9430 | Red Hat Security Advisory: krb5 security update | 2025-06-24T08:42:13+00:00 | 2026-01-27T18:53:38+00:00 |
| rhsa-2025:9418 | Red Hat Security Advisory: krb5 security update | 2025-06-24T00:42:44+00:00 | 2026-01-27T18:53:37+00:00 |
| rhsa-2025:8411 | Red Hat Security Advisory: krb5 security update | 2025-06-03T01:28:14+00:00 | 2026-01-27T18:53:31+00:00 |
| rhsa-2025:2753 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.19.0 release | 2025-03-13T16:40:08+00:00 | 2026-01-27T18:53:07+00:00 |
| rhsa-2025:21136 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T15:08:24+00:00 | 2026-01-27T18:52:33+00:00 |
| rhsa-2025:21128 | Red Hat Security Advisory: kernel-rt security update | 2025-11-12T13:52:24+00:00 | 2026-01-27T18:52:28+00:00 |
| rhsa-2025:21091 | Red Hat Security Advisory: kernel security update | 2025-11-12T08:15:53+00:00 | 2026-01-27T18:52:28+00:00 |
| rhsa-2025:21083 | Red Hat Security Advisory: kernel security update | 2025-11-12T05:21:13+00:00 | 2026-01-27T18:52:25+00:00 |
| rhsa-2025:21051 | Red Hat Security Advisory: kernel security update | 2025-11-12T00:40:37+00:00 | 2026-01-27T18:52:24+00:00 |
| rhsa-2025:15004 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:57:04+00:00 | 2026-01-27T18:52:20+00:00 |
| rhsa-2025:15003 | Red Hat Security Advisory: krb5 security update | 2025-09-02T02:59:04+00:00 | 2026-01-27T18:52:19+00:00 |
| rhsa-2025:15002 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:00:09+00:00 | 2026-01-27T18:52:18+00:00 |
| rhsa-2025:15001 | Red Hat Security Advisory: krb5 security update | 2025-09-02T04:13:59+00:00 | 2026-01-27T18:52:17+00:00 |
| rhsa-2025:15000 | Red Hat Security Advisory: krb5 security update | 2025-09-02T03:01:09+00:00 | 2026-01-27T18:52:17+00:00 |
| rhsa-2025:13777 | Red Hat Security Advisory: krb5 security update | 2025-08-13T05:03:10+00:00 | 2026-01-27T18:52:17+00:00 |
| rhsa-2025:13664 | Red Hat Security Advisory: krb5 security update | 2025-08-12T01:10:37+00:00 | 2026-01-27T18:52:14+00:00 |
| rhsa-2024:11146 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2024-12-17T04:04:43+00:00 | 2026-01-27T18:51:24+00:00 |
| rhsa-2024:11144 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update | 2024-12-16T20:23:48+00:00 | 2026-01-27T18:51:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-9143 | Low-level invalid GF(2^m) parameters lead to OOB memory access | 2024-10-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-56171 | libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. | 2025-02-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-50602 | An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. | 2024-10-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-49769 | Waitress has a denial of service leading to high CPU usage/resource exhaustion | 2024-10-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-45492 | An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | 2024-08-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-45491 | An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX). | 2024-08-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-45490 | An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. | 2024-08-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-43802 | heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697 | 2024-08-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-4032 | Incorrect IPv4 and IPv6 private ranges | 2024-06-02T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-39695 | Exiv2 has an out-of-bounds read in AsfVideo::streamProperties | 2024-07-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-36039 | PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. | 2024-05-02T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-34403 | An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string. | 2024-05-02T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-34402 | An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. | 2024-05-02T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-30161 | In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.) | 2024-03-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-28757 | libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). | 2024-03-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-28180 | Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) | 2024-03-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-25112 | Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2 | 2024-02-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-25062 | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled processing crafted XML documents can lead to an xmlValidatePopElement use-after-free. | 2024-02-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-24826 | Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2 | 2024-02-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2024-12797 | RFC7250 handshakes with unauthenticated servers don't abort as expected | 2025-02-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-6992 | Memory corruption issues is Cloudflare zlib implementation | 2024-01-01T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-52160 | The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks. | 2024-02-02T08:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-44398 | Out-of-bounds write in exiv2 | 2023-11-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-40305 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. | 2023-08-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-39976 | log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. | 2023-08-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-35789 | An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments. | 2023-06-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-28370 | Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. | 2023-05-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-25567 | GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information | 2023-02-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-25566 | GSS-NTLMSSP vulnerable to memory leak when parsing usernames | 2023-02-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-25565 | GSS-NTLMSSP vulnerable to incorrect free when decoding target information | 2023-02-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202505-4062 | Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unint… | 2025-06-27T23:05:13.902000Z |
| var-202506-1771 | HP Color LaserJet Pro M252n is a laser printer under HP (HP). HP Color LaserJet Pro M252… | 2025-06-27T23:05:12.871000Z |
| var-202506-2187 | Shanghai Huanchuang Communication Technology Co., Ltd. is a high-tech enterprise focusing… | 2025-06-27T23:05:12.665000Z |
| var-202506-2586 | DIR-823X (AX3000) is a dual-band wireless router that supports the WiFi 6 standard and ha… | 2025-06-27T23:05:12.456000Z |
| var-202506-2796 | Xerox Altalink B415 is a multi-function laser printer with printing, copying, scanning an… | 2025-06-27T23:05:12.354000Z |
| var-202506-0908 | Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote at… | 2025-06-27T23:03:27.505000Z |
| var-202506-1769 | FH451 is a 450Mbps home wireless router launched by Tenda. Shenzhen Jixiang Tenda Techno… | 2025-06-27T23:03:26.214000Z |
| var-202506-2380 | L6490 is a series of printer products. Epson (China) Co., Ltd. L6490 has a logic defect … | 2025-06-27T23:03:25.909000Z |
| var-202506-2588 | Fujifilm (China) Investment Co., Ltd. was established in 2001. It is a branch of Fujifilm… | 2025-06-27T23:03:25.809000Z |
| var-202506-2798 | H3C Magic NX15 is a home wireless router. H3C Magic NX15 of H3C Technologies Co., Ltd. h… | 2025-06-27T23:03:25.699000Z |
| var-202506-2989 | Quanxun Huiju Network Technology (Beijing) Co., Ltd. was established in 2013. iKuai is th… | 2025-06-27T23:03:25.581000Z |
| var-202505-2599 | Servlet injection vulnerabilities in ASPECT allow remote code execution if session admini… | 2025-06-27T23:01:51.207000Z |
| var-202506-1786 | R9000 is a high-end smart wireless router. NETGEAR R9000 has an unauthorized access vuln… | 2025-06-27T23:01:49.890000Z |
| var-202502-2917 | TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability… | 2025-06-27T22:59:28.063000Z |
| var-202505-4019 | Remote Code Execution vulnerabilities are present in ASPECT if session administrator cred… | 2025-06-27T22:59:27.468000Z |
| var-202506-0762 | A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1… | 2025-06-27T22:59:27.339000Z |
| var-202506-1770 | EG3000CE is a new generation of high-performance integrated gateway. Beijing Xingwang Ru… | 2025-06-27T22:59:25.660000Z |
| var-202506-2587 | Xerox Altalink C8245 is a multi-function laser printer with high-speed printing, copying … | 2025-06-27T22:59:25.267000Z |
| var-202506-2797 | Fujifilm Xerox(R) C230 Color Printer is a color laser printer, mainly used for printing n… | 2025-06-27T22:59:25.156000Z |
| var-202506-0937 | A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified … | 2025-06-27T22:57:43.223000Z |
| var-202506-2180 | PX4 is an open source autopilot. PX4 has a logic flaw vulnerability that can be exploite… | 2025-06-27T22:57:42.699000Z |
| var-202506-2577 | DI-500WF-WT is a wireless network coverage device produced by D-Link of China. D-Link DI… | 2025-06-27T22:57:42.487000Z |
| var-202506-2787 | DI-8200 is an enterprise-level router from China's D-Link. D-Link DI-8200 has a command … | 2025-06-27T22:57:38.747000Z |
| var-202506-2997 | DIR-823X (AX3000) is a dual-band wireless router that supports the WiFi 6 standard and ha… | 2025-06-27T22:57:38.646000Z |
| var-202505-2576 | Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor cre… | 2025-06-27T19:34:00.690000Z |
| var-202506-1776 | MP C3004 is a color multifunction digital copier with copy, print, scan and other functio… | 2025-06-27T19:33:56.291000Z |
| var-202506-2381 | ACTi provides a full range of surveillance products - IP cameras, video management system… | 2025-06-27T19:33:56.008000Z |
| var-202506-2383 | H3C NX15 is a home wireless router. H3C NX15 of H3C Technologies Co., Ltd. has a command… | 2025-06-27T19:33:55.997000Z |
| var-202506-0864 | A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as c… | 2025-06-26T23:38:39.995000Z |
| var-202505-4072 | DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the… | 2025-06-26T23:37:11.389000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2024:2643-1 | Security update for orc | 2024-07-30T08:05:06Z | 2024-07-30T08:05:06Z |
| suse-su-2024:2639-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 2024-07-30T07:20:52Z | 2024-07-30T07:20:52Z |
| suse-su-2024:2638-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2024-07-30T07:20:29Z | 2024-07-30T07:20:29Z |
| suse-su-2024:2636-1 | Security update for bind | 2024-07-30T07:14:23Z | 2024-07-30T07:14:23Z |
| suse-su-2024:2635-1 | Security update for openssl-3 | 2024-07-30T07:14:10Z | 2024-07-30T07:14:10Z |
| suse-su-2024:2634-1 | Security update for gtk2 | 2024-07-30T07:13:54Z | 2024-07-30T07:13:54Z |
| suse-su-2024:2633-1 | Security update for gtk3 | 2024-07-30T07:13:35Z | 2024-07-30T07:13:35Z |
| suse-su-2024:2632-1 | Security update for espeak-ng | 2024-07-30T07:13:18Z | 2024-07-30T07:13:18Z |
| suse-su-2024:2631-1 | Security update for freerdp | 2024-07-30T07:12:56Z | 2024-07-30T07:12:56Z |
| suse-su-2024:2630-1 | Security update for shadow | 2024-07-30T07:12:45Z | 2024-07-30T07:12:45Z |
| suse-su-2024:2629-1 | Security update for java-11-openjdk | 2024-07-30T07:11:50Z | 2024-07-30T07:11:50Z |
| suse-su-2024:2628-1 | Security update for java-17-openjdk | 2024-07-30T07:09:17Z | 2024-07-30T07:09:17Z |
| suse-su-2024:2627-1 | Security update for ghostscript | 2024-07-30T07:08:06Z | 2024-07-30T07:08:06Z |
| suse-su-2024:2626-1 | Security update for python-dnspython | 2024-07-30T07:07:40Z | 2024-07-30T07:07:40Z |
| suse-su-2024:2625-1 | Security update for p7zip | 2024-07-30T07:06:50Z | 2024-07-30T07:06:50Z |
| suse-su-2024:2624-1 | Security update for apache2 | 2024-07-30T07:04:58Z | 2024-07-30T07:04:58Z |
| suse-su-2024:2621-1 | Security update for devscripts | 2024-07-30T04:17:53Z | 2024-07-30T04:17:53Z |
| suse-su-2024:2619-1 | Security update for libgit2 | 2024-07-30T00:08:06Z | 2024-07-30T00:08:06Z |
| suse-su-2024:2618-1 | Security update for gnome-shell | 2024-07-30T00:07:43Z | 2024-07-30T00:07:43Z |
| suse-su-2024:2616-1 | Security update for python-Django | 2024-07-29T10:33:46Z | 2024-07-29T10:33:46Z |
| suse-su-2024:2612-1 | Security update for gtk3 | 2024-07-29T08:13:56Z | 2024-07-29T08:13:56Z |
| suse-su-2024:2611-1 | Security update for gtk2 | 2024-07-29T08:11:06Z | 2024-07-29T08:11:06Z |
| suse-su-2024:2610-1 | Security update for libgit2 | 2024-07-27T14:43:06Z | 2024-07-27T14:43:06Z |
| suse-su-2024:2607-1 | Security update for giflib | 2024-07-25T21:52:04Z | 2024-07-25T21:52:04Z |
| suse-su-2024:2605-1 | Security update for python-dnspython | 2024-07-25T09:43:52Z | 2024-07-25T09:43:52Z |
| suse-su-2024:2603-1 | Security update for shadow | 2024-07-23T10:37:18Z | 2024-07-23T10:37:18Z |
| suse-su-2024:2600-1 | Security update for mozilla-nss | 2024-07-23T07:16:10Z | 2024-07-23T07:16:10Z |
| suse-su-2024:2599-1 | Security update for git | 2024-07-23T07:05:02Z | 2024-07-23T07:05:02Z |
| suse-su-2024:2598-1 | Security update for libgit2 | 2024-07-23T07:04:49Z | 2024-07-23T07:04:49Z |
| suse-su-2024:2597-1 | Security update for apache2 | 2024-07-23T07:04:00Z | 2024-07-23T07:04:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:11657-1 | libruby2_7-2_7-2.7.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11656-1 | nodejs-electron-13.6.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11655-1 | strongswan-5.9.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11654-1 | libzapojit-0_0-0-0.0.3-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11653-1 | dnsmasq-2.86-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11652-1 | ceph-16.2.6.463+g22e7612f9ad-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11651-1 | grafana-7.5.11-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11650-1 | cargo1.56-1.56.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11649-1 | matrix-synapse-1.47.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11648-1 | libmariadbd-devel-10.6.5-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11647-1 | docker-20.10.11_ce-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11646-1 | containerd-1.4.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11645-1 | libnss_slurm2-21.08.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11644-1 | python3-mailman-3.3.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11643-1 | opensc-0.22.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11642-1 | aom-tools-3.2.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11641-1 | libwireshark14-3.4.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11640-1 | php7-7.4.26-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11639-1 | tor-0.4.6.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11638-1 | php8-8.0.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11637-1 | corepack16-16.13.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11636-1 | gmp-devel-32bit-6.2.1-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11635-1 | liblldpctl4-1.0.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11634-1 | binutils-2.37-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11633-1 | barrier-2.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11632-1 | libspeex1-1.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11631-1 | ctdb-4.15.2+git.193.a4d6307f1fd-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11630-1 | jupyter-nbdime-6.1.2-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11629-1 | libecpg6-14.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11628-1 | postgresql13-13.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-20848 | QNAP Systems File Station 5资源分配无限制漏洞（CNVD-2025-20848） | 2025-09-02 | 2025-09-08 |
| cnvd-2025-20847 | QNAP Systems File Station 5资源分配无限制漏洞 | 2025-09-02 | 2025-09-08 |
| cnvd-2025-20846 | QNAP Systems File Station 5拒绝服务漏洞 | 2025-09-02 | 2025-09-08 |
| cnvd-2025-20845 | DELL Alienware Command Center链接跟随漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20793 | TOTOLINK A702R缓冲区溢出漏洞 | 2025-08-26 | 2025-09-08 |
| cnvd-2025-20792 | TOTOLINK A702R /boafrm/formFilter缓冲区溢出漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20791 | TOTOLINK A702R /boafrm/formParentControl文件缓冲区溢出漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20790 | TOTOLINK A702R /boafrm/formOneKeyAccessButton文件缓冲区溢出漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20789 | TOTOLINK A702R /boafrm/formIpQoS文件缓冲区溢出漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20788 | TOTOLINK A702R sub_4162DC函数缓冲区溢出漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20775 | Akinsoft QR Menü存在未明漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20774 | Akinsoft QR Menü开放重定向漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20773 | Akinsoft QR Menü跨站请求伪造漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20772 | Akinsoft QR Menü跨站脚本漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20770 | Akinsoft QR Menü安全绕过漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20769 | Akinsoft ProKuafor跨站脚本漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20768 | Akinsoft ProKuafor安全绕过漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20767 | Akinsoft OctoCloud跨站脚本漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20766 | Akinsoft OctoCloud源验证错误漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20765 | Akinsoft OctoCloud安全绕过漏洞（CNVD-2025-20765） | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20764 | Akinsoft OctoCloud安全绕过漏洞 | 2025-09-04 | 2025-09-08 |
| cnvd-2025-20718 | Tenda AC8 sub_4a79ec函数缓冲区溢出漏洞 | 2023-06-07 | 2025-09-05 |
| cnvd-2025-20717 | Tenda AC8 get_parentControl_list_Info函数缓冲区溢出漏洞 | 2023-06-07 | 2025-09-05 |
| cnvd-2025-20716 | Tenda AC8 save_virtualser_data函数缓冲区溢出漏洞 | 2023-08-24 | 2025-09-05 |
| cnvd-2025-20715 | Tenda AC8 /goform/SetStaticRouteCfg缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20714 | Tenda AC8 /goform/SetFirewallCfg缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20713 | Tenda AC8 /goform/SetNetControlList缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20712 | Tenda AC8 /goform/SetSysTimeCfg缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20711 | Tenda AC8 /goform/setMacFilterCfg缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20710 | Tenda AC8 /goform/GetParentControlInfo缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-909 | Multiples vulnérabilités dans les produits Sophos | 2021-11-30T00:00:00.000000 | 2021-11-30T00:00:00.000000 |
| certfr-2021-avi-908 | Vulnérabilité dans VMware Spring AMQP | 2021-11-30T00:00:00.000000 | 2021-11-30T00:00:00.000000 |
| certfr-2021-avi-907 | Vulnérabilité dans Fortinet FortiSIEM | 2021-11-29T00:00:00.000000 | 2021-11-29T00:00:00.000000 |
| certfr-2021-avi-906 | Multiples vulnérabilités dans Qnap QVR | 2021-11-29T00:00:00.000000 | 2021-11-29T00:00:00.000000 |
| certfr-2021-avi-905 | Vulnérabilité dans F-Secure | 2021-11-26T00:00:00.000000 | 2021-11-26T00:00:00.000000 |
| certfr-2021-avi-904 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-11-26T00:00:00.000000 | 2021-11-26T00:00:00.000000 |
| certfr-2021-avi-903 | Multiples vulnérabilités dans MongoDB | 2021-11-25T00:00:00.000000 | 2021-11-25T00:00:00.000000 |
| certfr-2021-avi-902 | Multiples vulnérabilités dans Symfony | 2021-11-24T00:00:00.000000 | 2021-11-24T00:00:00.000000 |
| certfr-2021-avi-901 | Multiples vulnérabilités dans Xen | 2021-11-24T00:00:00.000000 | 2021-11-24T00:00:00.000000 |
| certfr-2021-avi-900 | Multiples vulnérabilités dans les produits VMware | 2021-11-24T00:00:00.000000 | 2021-11-24T00:00:00.000000 |
| certfr-2021-avi-899 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2021-11-24T00:00:00.000000 | 2021-11-24T00:00:00.000000 |
| certfr-2021-avi-898 | Multiples vulnérabilités dans Roundcube Webmail | 2021-11-23T00:00:00.000000 | 2021-11-23T00:00:00.000000 |
| certfr-2021-avi-897 | Multiples vulnérabilités dans Zimbra | 2021-11-23T00:00:00.000000 | 2021-11-23T00:00:00.000000 |
| certfr-2021-avi-896 | Multiples vulnérabilités dans les produits Moxa | 2021-11-23T00:00:00.000000 | 2021-11-23T00:00:00.000000 |
| certfr-2021-avi-895 | Multiples vulnérabilités dans les produits Kaspersky | 2021-11-22T00:00:00.000000 | 2021-11-22T00:00:00.000000 |
| certfr-2021-avi-894 | Multiples vulnérabilités dans Microsoft Edge | 2021-11-22T00:00:00.000000 | 2021-11-22T00:00:00.000000 |
| certfr-2021-avi-893 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-11-22T00:00:00.000000 | 2021-11-22T00:00:00.000000 |
| certfr-2021-avi-892 | Vulnérabilité dans Xen | 2021-11-22T00:00:00.000000 | 2021-11-22T00:00:00.000000 |
| certfr-2021-avi-891 | Multiples vulnérabilités dans les produits QNAP | 2021-11-19T00:00:00.000000 | 2021-11-19T00:00:00.000000 |
| certfr-2021-avi-890 | Multiples vulnérabilités dans PHP | 2021-11-19T00:00:00.000000 | 2021-11-19T00:00:00.000000 |
| certfr-2021-avi-889 | Multiples vulnérabilités dans PostgreSQL Pgpool-II | 2021-11-19T00:00:00.000000 | 2021-11-19T00:00:00.000000 |
| certfr-2021-avi-888 | Vulnérabilité dans les produits IBM | 2021-11-19T00:00:00.000000 | 2021-11-19T00:00:00.000000 |
| certfr-2021-avi-887 | Multiples vulnérabilités dans les produits F5 | 2021-11-19T00:00:00.000000 | 2021-11-19T00:00:00.000000 |
| certfr-2021-avi-886 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-11-18T00:00:00.000000 | 2021-11-18T00:00:00.000000 |
| certfr-2021-avi-885 | Multiples vulnérabilités dans Stormshield Management Center | 2021-11-18T00:00:00.000000 | 2021-11-18T00:00:00.000000 |
| certfr-2021-avi-884 | Vulnérabilité dans Microsoft Azure Active Directory | 2021-11-18T00:00:00.000000 | 2021-11-18T00:00:00.000000 |
| certfr-2021-avi-883 | Multiples vulnérabilités dans Drupal | 2021-11-18T00:00:00.000000 | 2021-11-18T00:00:00.000000 |
| certfr-2021-avi-882 | Multiples vulnérabilités dans Wireshark | 2021-11-18T00:00:00.000000 | 2021-11-18T00:00:00.000000 |
| certfr-2021-avi-881 | Multiples vulnérabilités dans les produits IBM | 2021-11-17T00:00:00.000000 | 2021-11-17T00:00:00.000000 |
| certfr-2021-avi-880 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-11-17T00:00:00.000000 | 2021-11-17T00:00:00.000000 |