Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64276 |
6.5 (3.1)
|
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… |
Ays Pro |
Survey Maker |
2025-11-13T09:24:31.911Z | 2026-01-20T14:28:21.160Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64273 |
7.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.266Z | 2026-01-20T14:28:21.096Z |
| CVE-2025-64270 |
6.5 (3.1)
|
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … |
masteriyo |
Masteriyo - LMS |
2025-12-18T07:22:14.865Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64274 |
4.3 (3.1)
|
WordPress WPKoi Templates for Elementor plugin <= 3.4.… |
wpkoithemes |
WPKoi Templates for Elementor |
2025-11-13T09:24:31.061Z | 2026-01-20T14:28:21.083Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64277 |
5.3 (3.1)
|
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… |
QuantumCloud |
ChatBot |
2025-11-13T09:24:32.345Z | 2026-01-20T14:28:21.020Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| CVE-2025-64254 |
8.8 (3.1)
|
WordPress Photo Block plugin <= 1.5.1 - Broken Access … |
Ronald Huereca |
Photo Block |
2025-12-09T14:13:51.839Z | 2026-01-20T14:28:20.954Z |
| CVE-2025-64251 |
4.9 (3.1)
|
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… |
azzaroco |
Ultimate Learning Pro |
2025-12-16T08:12:49.880Z | 2026-01-20T14:28:20.915Z |
| CVE-2025-64246 |
4.3 (3.1)
|
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… |
netopsae |
Accessibility by AudioEye |
2025-12-16T08:12:48.902Z | 2026-01-20T14:28:20.873Z |
| CVE-2025-64238 |
4.3 (3.1)
|
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… |
NicolasKulka |
WPS Bidouille |
2025-12-16T08:12:47.350Z | 2026-01-20T14:28:20.852Z |
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64207 |
7.1 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… |
TieLabs |
Jannah |
2025-12-18T07:22:11.630Z | 2026-01-20T14:28:20.368Z |
| CVE-2025-64243 |
4.3 (3.1)
|
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… |
e-plugins |
Directory Pro |
2025-12-16T08:12:48.343Z | 2026-01-20T14:28:20.367Z |
| CVE-2025-64214 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:12.176Z | 2026-01-20T14:28:20.339Z |
| CVE-2025-64211 |
5.3 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:08.406Z | 2026-01-20T14:28:20.264Z |
| CVE-2025-64223 |
8.1 (3.1)
|
WordPress PenNews theme < 6.7.3 - Local File Inclusion… |
PenciDesign |
PenNews |
2025-12-18T07:22:13.068Z | 2026-01-20T14:28:20.155Z |
| CVE-2025-64217 |
7.1 (3.1)
|
WordPress Photography theme <= 7.7.2 - Cross Site Scri… |
ThemeGoods |
Photography |
2025-12-18T07:22:12.346Z | 2026-01-20T14:28:20.087Z |
| CVE-2025-64226 |
4.3 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site … |
colabrio |
Stockie Extra |
2025-10-29T08:38:10.612Z | 2026-01-20T14:28:20.084Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24643 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:07.969Z | |
| CVE-2026-24642 |
N/A
|
Not used | N/A | N/A | 2026-01-24T03:55:08.413Z | |
| CVE-2026-24402 |
N/A
|
GitHub cannot issue a CVE for this Security Advisory because this advisory includes information about more than one vulnerability. According to [rule 4.2.11 of the CVE CNA rules](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-2_CVE_ID_Assignment): > 4.2.6 CNAs SHOULD assign different CVE IDs to separate Vulnerabilities, as determined using the guidance in [4.1](https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_4-1_Vulnerability_Determination). > 4.2.11 CNAs SHOULD assign different CVE IDs to different, Independently Fixable Vulnerabilities. You can move forward in one of two ways: - If you agree that this Security Advisory concerns more than one independently fixable vulnerability, split each vulnerability into its own advisory and request one CVE for each vulnerability. - If you do not agree that these vulnerabilities are independently fixable, resubmit the CVE request with a section clarifying how they are dependent and should have the same CVE. Thank you for making the open source ecosystem more secure by fixing and responsibly disclosing these vulnerabilities. | N/A | N/A | 2026-01-24T00:27:07.708Z | |
| CVE-2026-0991 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-23T22:19:31.431Z | |
| CVE-2025-12780 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-23T22:19:31.233Z | |
| CVE-2025-0103 |
9.2 (4.0)
|
Expedition: SQL Injection Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T02:59:51.177Z | 2025-01-13T19:52:47.949Z |
| CVE-2025-0104 |
7 (4.0)
|
Expedition: Cross-Site Scripting (XSS) Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T03:00:40.318Z | 2025-01-13T19:51:27.183Z |
| CVE-2012-5644 |
N/A
|
libuser has information disclosure when moving us… |
libuser |
libuser |
2019-11-25T14:28:24 | 2024-08-06T21:14:16.203Z |
| CVE-2025-0105 |
6.9 (4.0)
|
Expedition: Arbitrary File Deletion Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T03:01:24.168Z | 2025-01-13T19:50:31.391Z |
| CVE-2025-0106 |
6.9 (4.0)
|
Expedition: Wildcard Expansion Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T03:02:24.574Z | 2025-01-13T19:48:42.286Z |
| CVE-2025-0107 |
7.7 (4.0)
|
Expedition: OS Command Injection Vulnerability |
Palo Alto Networks |
Cloud NGFW |
2025-01-11T03:02:49.517Z | 2025-01-24T04:56:01.054Z |
| CVE-2025-30025 |
4.8 (4.0)
|
The communication protocol used between the serve… |
Axis Communications AB |
AXIS Device Manager |
2025-07-11T06:04:40.972Z | 2026-01-07T09:59:44.547Z |
| CVE-2025-30024 |
6.8 (3.1)
|
The communication protocol used between client an… |
Axis Communications AB |
AXIS Device Manager |
2025-07-11T06:03:29.926Z | 2025-07-11T16:28:42.727Z |
| CVE-2025-30023 |
9 (3.1)
|
The communication protocol used between client an… |
Axis Communications AB |
AXIS Camera Station Pro |
2025-07-11T06:02:00.620Z | 2025-07-11T16:36:45.516Z |
| CVE-2025-39945 |
N/A
|
cnic: Fix use-after-free bugs in cnic_delete_task |
Linux |
Linux |
2025-10-04T07:31:07.109Z | 2025-10-04T07:37:04.574Z |
| CVE-2024-7930 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
SourceCodester Clinics Patient Management System get_p… |
SourceCodester |
Clinics Patient Management System |
2024-08-19T22:00:04.921Z | 2024-09-03T17:15:47.974Z |
| CVE-2022-50494 |
N/A
|
thermal: intel_powerclamp: Use get_cpu() instead of sm… |
Linux |
Linux |
2025-10-04T15:43:46.562Z | 2025-12-23T13:29:40.081Z |
| CVE-2025-2913 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
HDF5 H5FL.c H5FL__blk_gc_list use after free |
n/a |
HDF5 |
2025-03-28T16:31:04.298Z | 2025-07-24T09:43:45.350Z |
| CVE-2025-2912 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
HDF5 H5Omessage.c H5O_msg_flush heap-based overflow |
n/a |
HDF5 |
2025-03-28T16:00:11.864Z | 2025-07-24T09:43:42.913Z |
| CVE-2025-6270 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow |
n/a |
HDF5 |
2025-06-19T16:31:06.224Z | 2025-06-23T19:30:54.188Z |
| CVE-2022-50493 |
N/A
|
scsi: qla2xxx: Fix crash when I/O abort times out |
Linux |
Linux |
2025-10-04T15:43:45.895Z | 2025-10-04T15:43:45.895Z |
| CVE-2022-50492 |
N/A
|
drm/msm: fix use-after-free on probe deferral |
Linux |
Linux |
2025-10-04T15:43:45.204Z | 2025-10-04T15:43:45.204Z |
| CVE-2023-53531 |
N/A
|
null_blk: fix poll request timeout handling |
Linux |
Linux |
2025-10-01T11:46:15.949Z | 2025-10-01T11:46:15.949Z |
| CVE-2025-32660 |
10 (3.1)
|
WordPress JS Job Manager plugin <= 2.0.2 - Arbitrary F… |
JoomSky |
JS Job Manager |
2025-04-17T15:47:02.285Z | 2025-04-17T18:35:54.349Z |
| CVE-2025-39941 |
N/A
|
zram: fix slot write race condition |
Linux |
Linux |
2025-10-04T07:31:04.080Z | 2025-10-04T07:31:04.080Z |
| CVE-2025-39940 |
N/A
|
dm-stripe: fix a possible integer overflow |
Linux |
Linux |
2025-10-04T07:31:03.309Z | 2026-01-02T15:32:41.795Z |
| CVE-2025-39938 |
N/A
|
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer derefer… |
Linux |
Linux |
2025-10-04T07:31:01.736Z | 2025-10-04T07:31:01.736Z |
| CVE-2025-39934 |
N/A
|
drm: bridge: anx7625: Fix NULL pointer dereference wit… |
Linux |
Linux |
2025-10-04T07:30:58.284Z | 2025-10-04T07:37:00.467Z |
| CVE-2025-38706 |
N/A
|
ASoC: core: Check for rtd == NULL in snd_soc_remove_pc… |
Linux |
Linux |
2025-09-04T15:32:57.456Z | 2026-01-02T15:31:28.995Z |
| CVE-2025-38702 |
N/A
|
fbdev: fix potential buffer overflow in do_register_fr… |
Linux |
Linux |
2025-09-04T15:32:53.990Z | 2026-01-02T15:31:24.690Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-24402 | Rejected reason: GitHub cannot issue a CVE for this Security Advisory because this advisory include… | 2026-01-24T01:15:50.543 | 2026-01-24T01:15:50.543 |
| fkie_cve-2026-0991 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-23T23:15:54.280 | 2026-01-23T23:15:54.280 |
| fkie_cve-2025-12780 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-23T23:15:53.470 | 2026-01-23T23:15:53.470 |
| fkie_cve-2025-0103 | An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker t… | 2025-01-11T03:15:22.020 | 2026-01-23T22:03:57.657 |
| fkie_cve-2025-0104 | A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attac… | 2025-01-11T03:15:22.183 | 2026-01-23T22:03:41.863 |
| fkie_cve-2012-5644 | libuser has information disclosure when moving user's home directory | 2019-11-25T15:15:12.167 | 2026-01-23T22:03:05.507 |
| fkie_cve-2025-0105 | An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticate… | 2025-01-11T03:15:22.317 | 2026-01-23T21:56:51.683 |
| fkie_cve-2025-0106 | A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attac… | 2025-01-11T03:15:22.490 | 2026-01-23T21:52:57.930 |
| fkie_cve-2025-0107 | An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated a… | 2025-01-11T03:15:22.637 | 2026-01-23T21:50:52.630 |
| fkie_cve-2025-30025 | The communication protocol used between the server process and the service control had a flaw that … | 2025-07-11T06:15:24.703 | 2026-01-23T21:49:32.683 |
| fkie_cve-2025-30024 | The communication protocol used between client and server had a flaw that could be leveraged to exe… | 2025-07-11T06:15:24.553 | 2026-01-23T21:15:29.250 |
| fkie_cve-2025-30023 | The communication protocol used between client and server had a flaw that could lead to an authenti… | 2025-07-11T06:15:24.257 | 2026-01-23T21:14:03.220 |
| fkie_cve-2025-39945 | In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs … | 2025-10-04T08:15:47.613 | 2026-01-23T20:56:32.720 |
| fkie_cve-2024-7930 | A vulnerability has been found in SourceCodester Clinics Patient Management System 1.0 and classifi… | 2024-08-19T22:15:06.720 | 2026-01-23T20:55:18.837 |
| fkie_cve-2022-50494 | In the Linux kernel, the following vulnerability has been resolved: thermal: intel_powerclamp: Use… | 2025-10-04T16:15:46.420 | 2026-01-23T20:54:23.520 |
| fkie_cve-2025-2913 | A vulnerability was found in HDF5 up to 1.14.6. It has been rated as critical. Affected by this iss… | 2025-03-28T17:15:30.260 | 2026-01-23T20:51:23.010 |
| fkie_cve-2025-2912 | A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by th… | 2025-03-28T16:15:30.540 | 2026-01-23T20:50:01.533 |
| fkie_cve-2025-6270 | A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by… | 2025-06-19T17:15:27.167 | 2026-01-23T20:49:00.920 |
| fkie_cve-2022-50493 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix crash when … | 2025-10-04T16:15:46.300 | 2026-01-23T20:44:34.307 |
| fkie_cve-2022-50492 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on… | 2025-10-04T16:15:46.190 | 2026-01-23T20:43:01.383 |
| fkie_cve-2023-53531 | In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request tim… | 2025-10-01T12:15:57.843 | 2026-01-23T20:41:00.390 |
| fkie_cve-2025-32660 | Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager allows Uplo… | 2025-04-17T16:15:49.817 | 2026-01-23T20:39:26.737 |
| fkie_cve-2025-39941 | In the Linux kernel, the following vulnerability has been resolved: zram: fix slot write race cond… | 2025-10-04T08:15:47.103 | 2026-01-23T20:37:16.010 |
| fkie_cve-2025-39940 | In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible inte… | 2025-10-04T08:15:46.973 | 2026-01-23T20:35:34.493 |
| fkie_cve-2025-39938 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: … | 2025-10-04T08:15:46.730 | 2026-01-23T20:34:30.367 |
| fkie_cve-2025-39934 | In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL… | 2025-10-04T08:15:46.210 | 2026-01-23T20:33:55.853 |
| fkie_cve-2025-38706 | In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == N… | 2025-09-04T16:15:39.550 | 2026-01-23T20:32:43.293 |
| fkie_cve-2025-38702 | In the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer ov… | 2025-09-04T16:15:38.990 | 2026-01-23T20:31:27.950 |
| fkie_cve-2023-47762 | Missing Authorization vulnerability in WPDeveloper BetterDocs allows Exploiting Incorrectly Configu… | 2024-12-09T13:15:30.113 | 2026-01-23T20:30:00.350 |
| fkie_cve-2026-1019 | Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, al… | 2026-01-16T03:16:18.363 | 2026-01-23T20:29:51.947 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-qhmm-q668-fm4x |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cros… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-pc9f-26mf-x8r8 |
5.3 (3.1)
|
Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking all… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p8fx-rcmw-3w3v |
5.3 (3.1)
|
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allow… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p3x2-xc39-x94f |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-m5p4-vfqp-hgph |
2.6 (3.1)
|
Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-fronten… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-jv2p-gvm2-g823 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Str… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-hxv7-g5hh-vf32 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Fre… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-hqgc-ccmj-47g6 |
5.3 (3.1)
|
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory all… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gwr4-mv8g-jwvr |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Reques… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gfhx-j544-rw6j |
5.3 (3.1)
|
Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gc4r-728m-28h6 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-fjwg-mp34-87hv |
5.3 (3.1)
|
Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiti… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-fcx4-3m37-4qj4 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cro… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-f6hw-687h-mj4j |
4.3 (3.1)
|
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocom… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-f3xx-fm5r-qhwx |
5.3 (3.1)
|
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System bookin… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-cxcv-g248-mppg |
5.3 (3.1)
|
Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Ex… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-cwmq-j8r4-3w7r |
4.3 (3.1)
|
Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Inco… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-chj6-62r4-7j53 |
5.3 (3.1)
|
Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Conf… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-c3p5-fcjv-492q |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-dire… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-9gj6-rwqc-4wvp |
4.3 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-98fv-j8hf-wx9g |
5.3 (3.1)
|
Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Inco… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-96gg-frg8-8w89 |
4.3 (3.1)
|
Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploit… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-89qm-72jr-4h8f |
5.3 (3.1)
|
Missing Authorization vulnerability in GSheetConnector by WesternDeal WPForms Google Sheet Connecto… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-85xv-hm5x-j45g |
5.3 (3.1)
|
Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Explo… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-85p4-5wq2-7vqh |
5.3 (3.1)
|
Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectl… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-6h34-3hxh-5x3j |
4.3 (3.1)
|
Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorre… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-69r3-vvfx-9ff9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cro… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-64jp-2fgh-jcqm |
4.3 (3.1)
|
Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting … | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-5cjc-j8vj-q9qv |
4.3 (3.1)
|
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-52v3-p44c-8m9p |
5.3 (3.1)
|
Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-con… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-30077 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.193340Z |
| gsd-2024-30689 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.193146Z |
| gsd-2024-30705 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.192949Z |
| gsd-2024-30562 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.192702Z |
| gsd-2024-30493 | Cross-Site Request Forgery (CSRF) vulnerability in Andy Moyle Church Admin.This issue aff… | 2024-04-03T05:02:29.192111Z |
| gsd-2024-30286 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.191824Z |
| gsd-2024-30463 | Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a … | 2024-04-03T05:02:29.191227Z |
| gsd-2024-30747 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.190931Z |
| gsd-2024-30432 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-03T05:02:29.190309Z |
| gsd-2024-30615 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.189932Z |
| gsd-2024-30928 | SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitr… | 2024-04-03T05:02:29.189737Z |
| gsd-2024-30794 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.189538Z |
| gsd-2024-30865 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php. | 2024-04-03T05:02:29.189154Z |
| gsd-2024-30891 | A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05… | 2024-04-03T05:02:29.188777Z |
| gsd-2024-30282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.188577Z |
| gsd-2024-30596 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter … | 2024-04-03T05:02:29.188202Z |
| gsd-2024-30709 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.187942Z |
| gsd-2024-30081 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.187733Z |
| gsd-2024-30600 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of… | 2024-04-03T05:02:29.187357Z |
| gsd-2024-30542 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.187091Z |
| gsd-2024-30904 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.186870Z |
| gsd-2024-30424 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.186626Z |
| gsd-2024-30608 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.186428Z |
| gsd-2024-30651 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.186224Z |
| gsd-2024-30543 | Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue… | 2024-04-03T05:02:29.185641Z |
| gsd-2024-30875 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.185280Z |
| gsd-2024-30885 | Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attack… | 2024-04-03T05:02:29.185086Z |
| gsd-2024-30935 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-03T05:02:29.184880Z |
| gsd-2024-30621 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the funct… | 2024-04-03T05:02:29.184499Z |
| gsd-2024-30568 | Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via th… | 2024-04-03T05:02:29.184224Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-190968 | Malicious code in image-to-uri (npm) | 2025-11-24T21:59:34Z | 2025-11-25T00:36:50Z |
| mal-2025-190967 | Malicious code in hyperterm-hipster (npm) | 2025-11-24T21:59:03Z | 2025-11-25T00:36:50Z |
| mal-2025-190966 | Malicious code in httpness (npm) | 2025-11-24T21:58:12Z | 2025-11-25T00:36:50Z |
| mal-2025-190923 | Malicious code in mcp-use (npm) | 2025-11-24T16:31:47Z | 2025-11-25T00:36:50Z |
| mal-2025-190851 | Malicious code in medusa-plugin-zalopay (npm) | 2025-11-24T14:38:49Z | 2025-11-25T00:36:50Z |
| mal-2025-190850 | Malicious code in medusa-plugin-momo (npm) | 2025-11-24T14:58:34Z | 2025-11-25T00:36:50Z |
| mal-2025-190849 | Malicious code in medusa-plugin-announcement (npm) | 2025-11-24T14:43:20Z | 2025-11-25T00:36:50Z |
| mal-2025-190848 | Malicious code in lite-serper-mcp-server (npm) | 2025-11-24T14:55:17Z | 2025-11-25T00:36:50Z |
| mal-2025-190847 | Malicious code in jan-browser (npm) | 2025-11-24T14:24:13Z | 2025-11-25T00:36:50Z |
| mal-2025-190776 | Malicious code in medusa-plugin-product-reviews-kvy (npm) | 2025-11-24T14:15:05Z | 2025-11-25T00:36:50Z |
| mal-2025-190775 | Malicious code in manual-billing-system-miniapp-api (npm) | 2025-11-24T14:22:01Z | 2025-11-25T00:36:50Z |
| mal-2025-190774 | Malicious code in korea-administrative-area-geo-json-util (npm) | 2025-11-24T14:21:26Z | 2025-11-25T00:36:50Z |
| mal-2025-190773 | Malicious code in iron-shield-miniapp (npm) | 2025-11-24T13:43:21Z | 2025-11-25T00:36:50Z |
| mal-2025-190965 | Malicious code in hover-design-prototype (npm) | 2025-11-24T21:57:56Z | 2025-11-25T00:36:49Z |
| mal-2025-190964 | Malicious code in hopedraw (npm) | 2025-11-24T21:57:39Z | 2025-11-25T00:36:49Z |
| mal-2025-190963 | Malicious code in hope-mapboxdraw (npm) | 2025-11-24T21:56:51Z | 2025-11-25T00:36:49Z |
| mal-2025-190961 | Malicious code in expressos (npm) | 2025-11-24T21:46:49Z | 2025-11-25T00:36:49Z |
| mal-2025-190960 | Malicious code in eslint-config-nitpicky (npm) | 2025-11-24T21:46:18Z | 2025-11-25T00:36:49Z |
| mal-2025-190959 | Malicious code in enforce-branch-name (npm) | 2025-11-24T21:46:03Z | 2025-11-25T00:36:49Z |
| mal-2025-190958 | Malicious code in email-deliverability-tester (npm) | 2025-11-24T21:45:47Z | 2025-11-25T00:36:49Z |
| mal-2025-190957 | Malicious code in dont-go (npm) | 2025-11-24T21:45:12Z | 2025-11-25T00:36:49Z |
| mal-2025-190956 | Malicious code in docusaurus-plugin-vanilla-extract (npm) | 2025-11-24T21:44:57Z | 2025-11-25T00:36:49Z |
| mal-2025-190846 | Malicious code in go-template (npm) | 2025-11-24T14:23:23Z | 2025-11-25T00:36:49Z |
| mal-2025-190844 | Malicious code in gate-evm-tools-test (npm) | 2025-11-24T15:04:06Z | 2025-11-25T00:36:49Z |
| mal-2025-190843 | Malicious code in gate-evm-check-code2 (npm) | 2025-11-24T14:56:23Z | 2025-11-25T00:36:49Z |
| mal-2025-190842 | Malicious code in expo-audio-session (npm) | 2025-11-24T15:02:26Z | 2025-11-25T00:36:49Z |
| mal-2025-190841 | Malicious code in evm-checkcode-cli (npm) | 2025-11-24T14:46:56Z | 2025-11-25T00:36:49Z |
| mal-2025-190840 | Malicious code in esbuild-plugin-eta (npm) | 2025-11-24T14:53:37Z | 2025-11-25T00:36:49Z |
| mal-2025-190772 | Malicious code in eslint-config-zeallat-base (npm) | 2025-11-24T13:43:53Z | 2025-11-25T00:36:49Z |
| mal-2025-190771 | Malicious code in esbuild-plugin-httpfile (npm) | 2025-11-24T14:11:49Z | 2025-11-25T00:36:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-3068 | UEFI BIOS: Mehrere Schwachstellen | 2023-12-06T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-1871 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-07-24T22:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-1571 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-06-26T22:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-1494 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-06-18T22:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-1404 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-06-08T22:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2023-0274 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-02-02T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1987 | Intel NUC Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2022-11-08T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1573 | ImageMagick: Mehrere Schwachstellen | 2021-02-15T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2022-1572 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2021-02-07T23:00:00.000+00:00 | 2024-12-16T23:00:00.000+00:00 |
| wid-sec-w-2024-3703 | Fortra GoAnywhere MFT: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-12-15T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3702 | CrushFTP: Schwachstelle ermöglicht Cross-Site Scripting | 2024-12-15T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3701 | IBM Storage Scale: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2024-12-15T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3700 | CyberPanel: Mehrere Schwachstellen | 2024-12-15T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3539 | Red Hat Enterprise Linux (perl-App-cpanminus): Schwachstelle ermöglicht Codeausführung | 2024-11-24T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3255 | Nvidia Treiber: Mehrere Schwachstellen | 2024-10-22T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-3138 | Mozilla Firefox, Firefox ESR und Thunderbird: Schwachstelle ermöglicht Codeausführung | 2024-10-09T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-1346 | Mozilla Firefox: Mehrere Schwachstellen | 2024-06-11T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0909 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2024-04-16T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0703 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen ermöglichen Codeausführung | 2024-03-24T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0669 | Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen | 2024-03-19T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0521 | IBM MQ: Mehrere Schwachstellen | 2024-02-29T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0443 | Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen | 2024-02-20T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0371 | AMD SEV-SNP Firmware für Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-02-13T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0185 | Mozilla Firefox: Mehrere Schwachstellen | 2024-01-23T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2995 | Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird: Mehrere Schwachstellen | 2023-11-21T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2916 | AMD Prozessor: Mehrere Schwachstellen | 2023-11-14T23:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2743 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2023-10-24T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2514 | Mozilla Firefox: Schwachstelle ermöglicht Codeausführung | 2023-09-28T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2448 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2023-09-26T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| wid-sec-w-2023-2202 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2023-08-29T22:00:00.000+00:00 | 2024-12-15T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:19224 | Red Hat Security Advisory: kernel security update | 2025-10-29T00:45:53+00:00 | 2026-01-27T17:13:16+00:00 |
| rhsa-2025:19223 | Red Hat Security Advisory: kernel-rt security update | 2025-10-29T00:20:39+00:00 | 2026-01-27T17:13:13+00:00 |
| rhsa-2025:19104 | Red Hat Security Advisory: kernel security update | 2025-10-27T16:41:00+00:00 | 2026-01-27T17:13:12+00:00 |
| rhsa-2024:7939 | Red Hat Security Advisory: OpenShift Container Platform 4.13.52 security update | 2024-10-16T19:54:57+00:00 | 2026-01-27T15:48:43+00:00 |
| rhsa-2024:7594 | Red Hat Security Advisory: OpenShift Container Platform 4.15.36 security update | 2024-10-09T19:34:52+00:00 | 2026-01-27T15:48:38+00:00 |
| rhsa-2024:7590 | Red Hat Security Advisory: OpenShift Container Platform 4.12.67 bug fix and security update | 2024-10-09T04:12:43+00:00 | 2026-01-27T15:48:31+00:00 |
| rhsa-2025:20801 | Red Hat Security Advisory: libtiff security update | 2025-11-11T09:33:14+00:00 | 2026-01-27T15:48:29+00:00 |
| rhsa-2024:7701 | Red Hat Security Advisory: git security update | 2024-10-07T01:13:46+00:00 | 2026-01-27T15:48:15+00:00 |
| rhsa-2024:8365 | Red Hat Security Advisory: python-idna security update | 2024-10-23T11:27:19+00:00 | 2026-01-27T15:48:14+00:00 |
| rhsa-2024:10208 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update | 2024-11-25T00:12:13+00:00 | 2026-01-27T15:47:36+00:00 |
| rhsa-2024:6028 | Red Hat Security Advisory: git security update | 2024-08-29T11:30:22+00:00 | 2026-01-27T15:47:35+00:00 |
| rhsa-2024:6027 | Red Hat Security Advisory: git security update | 2024-08-29T11:37:33+00:00 | 2026-01-27T15:47:35+00:00 |
| rhsa-2024:6610 | Red Hat Security Advisory: git security update | 2024-09-11T18:10:41+00:00 | 2026-01-27T15:47:32+00:00 |
| rhsa-2024:5662 | Red Hat Security Advisory: Satellite 6.15.3 Security Update | 2024-08-20T20:33:03+00:00 | 2026-01-27T15:47:30+00:00 |
| rhsa-2024:4499 | Red Hat Security Advisory: ruby security update | 2024-07-11T11:55:24+00:00 | 2026-01-27T15:46:35+00:00 |
| rhsa-2024:4579 | Red Hat Security Advisory: git security update | 2024-07-16T19:35:59+00:00 | 2026-01-27T15:46:34+00:00 |
| rhsa-2024:4368 | Red Hat Security Advisory: git security update | 2024-07-08T11:27:59+00:00 | 2026-01-27T15:46:32+00:00 |
| rhsa-2024:5079 | Red Hat Security Advisory: libtiff security update | 2024-08-07T11:17:09+00:00 | 2026-01-27T15:46:21+00:00 |
| rhsa-2024:4084 | Red Hat Security Advisory: git security update | 2024-06-25T08:24:01+00:00 | 2026-01-27T15:46:20+00:00 |
| rhsa-2024:4083 | Red Hat Security Advisory: git security update | 2024-06-25T08:30:30+00:00 | 2026-01-27T15:46:19+00:00 |
| rhsa-2024:3626 | Red Hat Security Advisory: libxml2 security update | 2024-06-05T10:40:16+00:00 | 2026-01-27T15:46:19+00:00 |
| rhsa-2024:3625 | Red Hat Security Advisory: libxml2 security update | 2024-06-05T10:19:16+00:00 | 2026-01-27T15:46:18+00:00 |
| rhsa-2024:3527 | Red Hat Security Advisory: Red Hat AMQ Streams 2.7.0 release and security update | 2024-05-30T20:24:46+00:00 | 2026-01-27T15:46:17+00:00 |
| rhsa-2024:3838 | Red Hat Security Advisory: ruby security update | 2024-06-11T19:56:47+00:00 | 2026-01-27T15:46:16+00:00 |
| rhsa-2024:3670 | Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update | 2024-06-06T09:32:03+00:00 | 2026-01-27T15:46:15+00:00 |
| rhsa-2024:3671 | Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update | 2024-06-06T14:03:07+00:00 | 2026-01-27T15:46:14+00:00 |
| rhsa-2024:3500 | Red Hat Security Advisory: ruby:3.0 security update | 2024-05-30T13:22:56+00:00 | 2026-01-27T15:46:14+00:00 |
| rhsa-2024:3299 | Red Hat Security Advisory: libxml2 security update | 2024-05-22T22:01:12+00:00 | 2026-01-27T15:46:13+00:00 |
| rhsa-2024:3303 | Red Hat Security Advisory: libxml2 security update | 2024-05-23T06:34:13+00:00 | 2026-01-27T15:46:12+00:00 |
| rhsa-2024:3466 | Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update | 2024-05-29T13:31:39+00:00 | 2026-01-27T15:44:07+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-25564 | GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings | 2023-02-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2023-25563 | GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields | 2023-02-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-43358 | Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS). | 2023-08-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-43357 | Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2. | 2023-08-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-37434 | zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g. see the nodejs/node reference). | 2022-08-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-31015 | Uncaught Exception (due to a data race) leads to process termination in Waitress | 2022-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-26592 | Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function. | 2023-08-01T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2022-24761 | HTTP Request Smuggling in waitress | 2022-03-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2020-14152 | In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption. | 2020-06-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2020-13435 | SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. | 2020-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2019-7317 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | 2019-02-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2019-25219 | Asio C++ Library lacks a fallback error code in the case of SSL_ERROR_SYSCALL | 2024-10-01T07:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2018-7263 | The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service | 2018-02-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2018-25032 | zlib before 1.2.12 allows memory corruption when deflating (i.e. when compressing) if the input has many distant matches. | 2022-03-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-12652 | libpng before 1.6.32 does not properly check the length of chunks against the user limit. | 2019-07-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-11551 | The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2017-11550 | The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9843 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9842 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9841 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-9840 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic | 2017-05-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2016-10087 | The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors | 2017-01-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2015-8472 | Buffer overflow in libpng allows remote attackers to cause a denial of service | 2016-01-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2015-8126 | Multiple buffer overflows in libpng allow remote attackers to cause a denial of service | 2015-11-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2015-2158 | Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service | 2017-10-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2004-2779 | id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS). | 2018-02-02T00:00:00.000Z | 2025-03-14T00:00:00.000Z |
| msrc_cve-2025-24997 | DirectX Graphics Kernel File Denial of Service Vulnerability | 2025-03-11T07:00:00.000Z | 2025-03-13T07:00:00.000Z |
| msrc_cve-2025-24084 | Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability | 2025-03-11T07:00:00.000Z | 2025-03-13T07:00:00.000Z |
| msrc_cve-2025-24053 | Microsoft Dataverse Elevation of Privilege Vulnerability | 2025-03-11T07:00:00.000Z | 2025-03-13T07:00:00.000Z |
| msrc_cve-2025-26618 | SSH SFTP packet size not verified properly in Erlang OTP | 2025-02-02T00:00:00.000Z | 2025-03-13T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202308-2222 | A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when th… | 2025-06-26T23:36:08.655000Z |
| var-202406-1455 | An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass auth… | 2025-06-26T23:36:07.305000Z |
| var-202505-0750 | Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in t… | 2025-06-26T23:36:05.720000Z |
| var-202403-2678 | An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK… | 2025-06-26T23:35:45.960000Z |
| var-202406-1057 | Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plai… | 2025-06-26T23:35:45.518000Z |
| var-202406-2007 | An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.… | 2025-06-26T23:30:34.427000Z |
| var-202406-2616 | Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for… | 2025-06-26T23:30:34.382000Z |
| var-202506-0044 | A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.… | 2025-06-26T23:29:27.685000Z |
| var-202403-2112 | An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgea… | 2025-06-26T23:27:23.351000Z |
| var-202505-3718 | Predictable filename vulnerabilities in ASPECT may expose sensitive information to a pote… | 2025-06-26T23:27:21.220000Z |
| var-202302-1213 | A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical.… | 2025-06-26T23:23:18.799000Z |
| var-202406-1250 | An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create pass… | 2025-06-26T23:23:12.326000Z |
| var-202506-0836 | A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulne… | 2025-06-26T23:22:37.028000Z |
| var-202412-2475 | A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as c… | 2025-06-26T23:20:50.288000Z |
| var-202506-0506 | A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as cri… | 2025-06-26T23:20:45.734000Z |
| var-202506-1094 | A vulnerability classified as critical has been found in D-Link DIR-619L 2.06B01. Affecte… | 2025-06-26T23:20:45.661000Z |
| var-202505-2760 | Serialized configuration information may be disclosed during device commissioning while u… | 2025-06-26T23:18:23.068000Z |
| var-202505-2939 | Large content vulnerabilities are present in ASPECT exposing a device to disk overutiliza… | 2025-06-26T19:34:19.737000Z |
| var-202506-0835 | A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Aff… | 2025-06-26T19:34:19.587000Z |
| var-202505-3350 | One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive informa… | 2025-06-25T23:27:30.820000Z |
| var-202505-2598 | Sensitive device logger information in ASPECT may be exposed if administrator credentials… | 2025-06-25T23:27:08.087000Z |
| var-202303-0879 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability… | 2025-06-25T23:24:13.344000Z |
| var-202303-1641 | A command execution vulnerability exists in the ubus backend communications functionality… | 2025-06-25T23:17:09.466000Z |
| var-202505-2938 | Log injection vulnerabilities in ASPECT provide attacker access to inject malicious brows… | 2025-06-25T23:17:05.551000Z |
| var-202303-0770 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that… | 2025-06-25T23:16:34.311000Z |
| var-202306-2299 | NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability. This vulnerabil… | 2025-06-25T23:16:33.766000Z |
| var-202309-0028 | Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote … | 2025-06-25T23:16:33.434000Z |
| var-202505-4071 | 2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulatio… | 2025-06-25T23:12:49.113000Z |
| var-202303-0894 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerabili… | 2025-06-25T23:10:58.597000Z |
| var-202505-4265 | SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials beco… | 2025-06-25T23:10:54.240000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2024:2592-1 | Security update for git | 2024-07-22T13:33:47Z | 2024-07-22T13:33:47Z |
| suse-su-2024:2591-1 | Security update for apache2 | 2024-07-22T12:41:41Z | 2024-07-22T12:41:41Z |
| suse-su-2024:2590-1 | Security update for java-11-openjdk | 2024-07-22T12:13:40Z | 2024-07-22T12:13:40Z |
| suse-su-2024:2589-1 | Security update for gnome-shell | 2024-07-22T12:06:07Z | 2024-07-22T12:06:07Z |
| suse-su-2024:2585-1 | Security update for kernel-firmware-nvidia-gspx-G06 | 2024-07-22T11:44:18Z | 2024-07-22T11:44:18Z |
| suse-su-2024:2584-1 | Security update for libgit2 | 2024-07-22T11:40:56Z | 2024-07-22T11:40:56Z |
| suse-su-2024:2583-1 | Security update for libgit2 | 2024-07-22T11:40:46Z | 2024-07-22T11:40:46Z |
| suse-su-2024:2579-1 | Security update for git | 2024-07-22T10:36:35Z | 2024-07-22T10:36:35Z |
| suse-su-2024:2578-1 | Security update for java-21-openjdk | 2024-07-22T10:36:16Z | 2024-07-22T10:36:16Z |
| suse-su-2024:2577-1 | Security update for python-Django | 2024-07-22T10:35:59Z | 2024-07-22T10:35:59Z |
| suse-su-2024:2576-1 | Security update for gnome-shell | 2024-07-22T10:35:48Z | 2024-07-22T10:35:48Z |
| suse-su-2024:2575-1 | Security update for kernel-firmware | 2024-07-22T10:35:34Z | 2024-07-22T10:35:34Z |
| suse-su-2024:2574-1 | Security update for nodejs20 | 2024-07-22T10:35:15Z | 2024-07-22T10:35:15Z |
| suse-su-2024:2572-1 | Security update for python312 | 2024-07-22T10:34:49Z | 2024-07-22T10:34:49Z |
| suse-su-2024:2571-1 | Security update for the Linux Kernel | 2024-07-22T10:34:18Z | 2024-07-22T10:34:18Z |
| suse-su-2024:2568-1 | Security update for mockito, snakeyaml, testng | 2024-07-22T03:19:30Z | 2024-07-22T03:19:30Z |
| suse-su-2024:2567-1 | Security update for emacs | 2024-07-19T17:52:48Z | 2024-07-19T17:52:48Z |
| suse-ru-2024:2564-1 | Recommended update for mozilla-nss | 2024-07-19T11:16:01Z | 2024-07-19T11:16:01Z |
| suse-su-2024:2561-1 | Security update for the Linux Kernel | 2024-07-18T14:04:33Z | 2024-07-18T14:04:33Z |
| suse-su-2024:2560-1 | Security update for apache2 | 2024-07-18T13:57:20Z | 2024-07-18T13:57:20Z |
| suse-su-2024:2559-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2024-07-18T09:05:12Z | 2024-07-18T09:05:12Z |
| suse-su-2024:2558-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5) | 2024-07-18T09:05:03Z | 2024-07-18T09:05:03Z |
| suse-su-2024:2549-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5) | 2024-07-18T09:04:30Z | 2024-07-18T09:04:30Z |
| suse-su-2024:2548-1 | Security update for podman | 2024-07-17T21:36:00Z | 2024-07-17T21:36:00Z |
| suse-su-2024:2547-1 | Security update for ghostscript | 2024-07-17T17:33:44Z | 2024-07-17T17:33:44Z |
| suse-su-2024:2546-1 | Security update for gnutls | 2024-07-17T12:44:32Z | 2024-07-17T12:44:32Z |
| suse-su-2024:2545-1 | Security update for python-Django | 2024-07-17T11:58:55Z | 2024-07-17T11:58:55Z |
| suse-su-2024:2543-1 | Security update for nodejs20 | 2024-07-17T07:51:52Z | 2024-07-17T07:51:52Z |
| suse-su-2024:2542-1 | Security update for nodejs18 | 2024-07-17T07:51:37Z | 2024-07-17T07:51:37Z |
| suse-su-2024:2541-1 | Security update for libndp | 2024-07-17T06:33:39Z | 2024-07-17T06:33:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:11627-1 | postgresql12-12.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11626-1 | postgresql11-11.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11625-1 | postgresql10-10.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11624-1 | xen-4.16.0_01-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11623-1 | libruby3_0-3_0-3.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11622-1 | libruby2_7-2_7-2.7.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11621-1 | libmariadbd-devel-10.6.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11620-1 | tar-1.34-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11619-1 | trivy-0.20.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11618-1 | tomcat-9.0.43-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11617-1 | php-composer2-2.1.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11616-1 | nodejs14-14.18.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11615-1 | mpop-1.4.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11614-1 | MozillaFirefox-94.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11613-1 | opensc-0.22.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11612-1 | java-1_8_0-openjdk-1.8.0.312-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11611-1 | htmldoc-1.9.12-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11610-1 | go1.17-1.17.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11609-1 | go1.16-1.16.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11608-1 | gfbgraph-devel-0.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11607-1 | MozillaThunderbird-91.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11606-1 | nodejs-electron-13.6.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11605-1 | libQt5Pdf5-5.15.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11604-1 | chromedriver-95.0.4638.69-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11603-1 | libssh-config-0.9.6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11602-1 | python36-Babel-2.9.1-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11601-1 | java-1_8_0-openj9-1.8.0.312-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11600-1 | libplib0-1.8.5+svn.2173-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11599-1 | librdkafka-devel-1.8.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:11598-1 | chromedriver-95.0.4638.54-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-20709 | Tenda AC8 /goform/SetIpMacBind栈溢出代码执行漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20665 | Tenda AC8 /goform/openSchedWifi栈溢出代码执行漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20664 | Tenda AC8 /goform/openSchedWifi缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20663 | Tenda AC8缓冲区溢出漏洞 | 2023-08-28 | 2025-09-05 |
| cnvd-2025-20626 | D-Link DIR-619L /bin/mini_upnpd缓冲区溢出漏洞 | 2023-09-15 | 2025-09-05 |
| cnvd-2025-20625 | D-Link DIR-619L FILECODE参数缓冲区溢出漏洞 | 2023-09-15 | 2025-09-05 |
| cnvd-2025-20624 | D-Link DIR-619L缓冲区溢出漏洞 | 2023-09-15 | 2025-09-05 |
| cnvd-2025-20602 | D-Link DIR-619L存在未明漏洞 | 2025-08-20 | 2025-09-05 |
| cnvd-2025-20601 | D-Link DIR-619L formWlanSetup函数缓冲区溢出漏洞 | 2025-08-26 | 2025-09-05 |
| cnvd-2025-20600 | D-Link DIR-619L formSysCmd函数缓冲区溢出漏洞 | 2025-08-26 | 2025-09-05 |
| cnvd-2025-20599 | D-Link DIR-619L缓冲区溢出漏洞 | 2025-08-26 | 2025-09-05 |
| cnvd-2025-20554 | Tenda AC7 fromSetWirelessRepeat方法缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20553 | Tenda AC7命令注入漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20552 | Tenda AC7 setSchedWifi方法缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20551 | Tenda AC7 formSetCfm方法缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20550 | Tenda AC7 fromSetWifiGusetBasic方法缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20549 | Tenda AC7 fromSetRouteStatic方法缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20548 | Tenda AC7缓冲区溢出漏洞 | 2024-03-28 | 2025-09-05 |
| cnvd-2025-20547 | Tenda AC7命令注入漏洞 | 2024-04-22 | 2025-09-05 |
| cnvd-2025-20467 | WordPress bidorbuy Store Integrator plugin代码注入漏洞 | 2025-08-31 | 2025-09-05 |
| cnvd-2025-20466 | WordPress BetPress plugin跨站请求伪造漏洞 | 2025-08-31 | 2025-09-05 |
| cnvd-2025-20465 | WordPress Ultimate Tag Warrior Importer plugin跨站请求伪造漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20464 | WordPress TablePress Plugin跨站脚本漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20463 | WordPress Solwin Blog Designer PRO plugin文件包含漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20462 | WordPress Slider Revolution plugin路径遍历漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20461 | WordPress Related Posts Lite plugin跨站请求伪造漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20460 | WordPress Pro Bulk Watermark plugin路径遍历漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20459 | WordPress OSM Map Widget for Elementor plugin跨站脚本漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20458 | WordPress Ocean Extra plugin跨站脚本漏洞 | 2025-09-02 | 2025-09-05 |
| cnvd-2025-20457 | WordPress Mojoomla School Management plugin文件上传漏洞 | 2025-09-02 | 2025-09-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-879 | Vulnérabilité dans Microsoft Windows | 2021-11-17T00:00:00.000000 | 2021-11-17T00:00:00.000000 |
| certfr-2021-avi-878 | Vulnérabilité dans Synology Mail Station | 2021-11-16T00:00:00.000000 | 2021-11-16T00:00:00.000000 |
| certfr-2021-avi-877 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-11-16T00:00:00.000000 | 2021-11-16T00:00:00.000000 |
| certfr-2021-avi-876 | Multiples vulnérabilités dans Moodle | 2021-11-16T00:00:00.000000 | 2021-11-16T00:00:00.000000 |
| certfr-2021-avi-862 | Multiples vulnérabilités dans Microsoft Windows | 2021-11-10T00:00:00.000000 | 2021-11-16T00:00:00.000000 |
| certfr-2021-avi-875 | Multiples vulnérabilités dans les produits Check Point | 2021-11-15T00:00:00.000000 | 2021-11-15T00:00:00.000000 |
| certfr-2021-avi-874 | Multiples vulnérabilités dans PostgreSQL Odyssey | 2021-11-15T00:00:00.000000 | 2021-11-15T00:00:00.000000 |
| certfr-2021-avi-873 | Vulnérabilité dans les produits QNAP | 2021-11-15T00:00:00.000000 | 2021-11-15T00:00:00.000000 |
| certfr-2021-avi-872 | Multiples vulnérabilités dans Google Chrome OS | 2021-11-15T00:00:00.000000 | 2021-11-15T00:00:00.000000 |
| certfr-2021-avi-871 | Vulnérabilité dans F5 NGINX Ingress Controller | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-870 | Vulnérabilité dans VMware Tanzu Application | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-869 | Multiples vulnérabilités dans SUSE le noyau Linux de SUSE | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-868 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-867 | Multiples vulnérabilités dans PostgreSQL | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-866 | Vulnérabilité dans WordPress | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-865 | Multiples vulnérabilités dans Palo Alto Networks PAN-OS | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-864 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-11-12T00:00:00.000000 | 2021-11-12T00:00:00.000000 |
| certfr-2021-avi-863 | Multiples vulnérabilités dans les produits Microsoft | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-861 | Multiples vulnérabilités dans Microsoft Office | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-860 | Vulnérabilité dans Microsoft Edge | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-859 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-858 | Multiples vulnérabilités dans les produits Intel | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-857 | Multiples vulnérabilités dans Samba | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-856 | Multiples vulnérabilités dans les produits Citrix | 2021-11-10T00:00:00.000000 | 2021-11-10T00:00:00.000000 |
| certfr-2021-avi-855 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |
| certfr-2021-avi-854 | Multiples vulnérabilités dans les produits Siemens | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |
| certfr-2021-avi-853 | Multiples vulnérabilités dans les produits Schneider | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |
| certfr-2021-avi-852 | Multiples vulnérabilités dans les produits SAP | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |
| certfr-2021-avi-851 | Vulnérabilité dans Postfix | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |
| certfr-2021-avi-850 | Multiples vulnérabilités dans IBM QRadar | 2021-11-09T00:00:00.000000 | 2021-11-09T00:00:00.000000 |