Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-62913
5.4 (3.1)
WordPress Opal Service plugin <= 1.9.1 - Cross Site Sc… wpopal
Opal Service
2025-10-27T01:33:54.900Z 2026-01-20T14:28:16.742Z
CVE-2025-62911
5.4 (3.1)
WordPress Rock Convert plugin <= 3.0.1 - Cross Site Sc… Rock Content
Rock Convert
2025-10-27T01:33:54.127Z 2026-01-20T14:28:16.742Z
CVE-2025-62907
5.4 (3.1)
WordPress Custom Post Type Attachment plugin <= 3.4.6 … aviplugins.com
Custom Post Type Attachment
2025-10-27T01:33:52.564Z 2026-01-20T14:28:16.710Z
CVE-2025-62917
5.4 (3.1)
WordPress Tooltipy plugin <= 5.5.9 - Cross Site Script… Jamel.Z
Tooltipy
2025-10-27T01:33:56.091Z 2026-01-20T14:28:16.702Z
CVE-2025-62916
8.8 (3.1)
WordPress Flights & Hotels Booking WP Plugin plugin <=… adivaha®
Flights &amp; Hotels Booking WP Plugin
2025-10-27T01:33:55.688Z 2026-01-20T14:28:16.697Z
CVE-2025-62910
5.4 (3.1)
WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cro… deshine
Video Gallery by Huzzaz
2025-10-27T01:33:53.748Z 2026-01-20T14:28:16.670Z
CVE-2025-62900
5.4 (3.1)
WordPress Popular Posts by Webline plugin <= 1.1.1 - C… WeblineIndia
Popular Posts by Webline
2025-10-27T01:33:50.140Z 2026-01-20T14:28:16.667Z
CVE-2025-62906
9.8 (3.1)
WordPress Referral Link Tracker plugin <= 1.1.4 - Brok… epiphanyit321
Referral Link Tracker
2025-10-27T01:33:52.110Z 2026-01-20T14:28:16.664Z
CVE-2025-62898
5.4 (3.1)
WordPress Links shortcode plugin <= 1.8.3 - Cross Site… Maarten
Links shortcode
2025-10-27T01:33:49.376Z 2026-01-20T14:28:16.664Z
CVE-2025-62901
6.5 (3.1)
WordPress WP Microdata plugin <= 1.0 - Cross Site Scri… Tormorten
WP Microdata
2025-12-21T21:11:56.857Z 2026-01-20T14:28:16.660Z
CVE-2025-62904
5.4 (3.1)
WordPress WP Geo plugin <= 3.5.1 - Cross Site Scriptin… Ben Huson
WP Geo
2025-10-27T01:33:51.339Z 2026-01-20T14:28:16.653Z
CVE-2025-62912
5.4 (3.1)
WordPress SiteGround Email Marketing plugin <= 1.7.1 -… SiteGround
SiteGround Email Marketing
2025-10-27T01:33:54.526Z 2026-01-20T14:28:16.652Z
CVE-2025-62903
5.4 (3.1)
WordPress WPC Smart Messages for WooCommerce plugin <=… WPClever
WPC Smart Messages for WooCommerce
2025-10-27T01:33:50.952Z 2026-01-20T14:28:16.645Z
CVE-2025-62896
8.8 (3.1)
WordPress Multilang Contact Form plugin <= 1.5 - Cross… digitaldonkey
Multilang Contact Form
2025-10-27T01:33:48.644Z 2026-01-20T14:28:16.638Z
CVE-2025-62905
5.4 (3.1)
WordPress Query Posts plugin <= 0.3.2 - Cross Site Scr… Justin Tadlock
Query Posts
2025-10-27T01:33:51.717Z 2026-01-20T14:28:16.637Z
CVE-2025-62894
5.4 (3.1)
WordPress ACF Recent Posts Widget plugin <= 5.9.3 - Cr… magicoders
ACF Recent Posts Widget
2025-10-27T01:33:47.856Z 2026-01-20T14:28:16.537Z
CVE-2025-62895
7.5 (3.1)
WordPress Atarim plugin <= 4.2 - Sensitive Data Exposu… Vito Peleg
Atarim
2025-10-27T01:33:48.249Z 2026-01-20T14:28:16.515Z
CVE-2025-62892
9.1 (3.1)
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken… sunshinephotocart
Sunshine Photo Cart
2025-10-27T01:33:47.085Z 2026-01-20T14:28:16.510Z
CVE-2025-62890
8.8 (3.1)
WordPress Premmerce Brands for WooCommerce plugin <= 1… Premmerce
Premmerce Brands for WooCommerce
2025-10-27T01:33:46.308Z 2026-01-20T14:28:16.461Z
CVE-2025-62891
8.8 (3.1)
WordPress Off-Canvas Sidebars & Menus (Slidebars) plug… Jory Hogeveen
Off-Canvas Sidebars & Menus (Slidebars)
2025-10-27T01:33:46.691Z 2026-01-20T14:28:16.451Z
CVE-2025-62881
4.3 (3.1)
WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Br… WP Lab
WP-Lister Lite for eBay
2025-10-27T01:33:42.812Z 2026-01-20T14:28:16.411Z
CVE-2025-62883
4.3 (3.1)
WordPress Premmerce User Roles plugin <= 1.0.13 - Brok… Premmerce
Premmerce User Roles
2025-10-27T01:33:43.581Z 2026-01-20T14:28:16.387Z
CVE-2025-62872
4.3 (3.1)
WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross… JK
Social Photo Fetcher
2025-12-09T14:52:24.849Z 2026-01-20T14:28:16.381Z
CVE-2025-62889
8.8 (3.1)
WordPress King Addons for Elementor plugin <= 51.1.37 … KingAddons.com
King Addons for Elementor
2025-10-27T01:33:45.909Z 2026-01-20T14:28:16.379Z
CVE-2025-62886
8.8 (3.1)
WordPress Pricing Table builder plugin <= 1.5.1 - Cros… wpdevart
Pricing Table builder
2025-10-27T01:33:44.741Z 2026-01-20T14:28:16.371Z
CVE-2025-62870
5.3 (3.1)
WordPress Eupago Gateway For Woocommerce plugin <= 4.6… Eupago
Eupago Gateway For Woocommerce
2025-12-09T14:52:24.458Z 2026-01-20T14:28:16.371Z
CVE-2025-62880
4.3 (3.1)
WordPress Custom 404 Pro plugin <= 3.12.0 - Cross Site… Kunal Nagar
Custom 404 Pro
2025-12-22T09:31:35.354Z 2026-01-20T14:28:16.367Z
CVE-2025-62887
5.4 (3.1)
WordPress King Addons for Elementor plugin <= 51.1.37 … KingAddons.com
King Addons for Elementor
2025-10-27T01:33:45.420Z 2026-01-20T14:28:16.351Z
CVE-2025-62873
4.3 (3.1)
WordPress WP Flashy Marketing Automation plugin <= 2.0… Flashyapp
WP Flashy Marketing Automation
2025-12-09T14:52:25.051Z 2026-01-20T14:28:16.351Z
CVE-2025-62885
6.5 (3.1)
WordPress WP VR plugin <= 8.5.42 - Cross Site Scriptin… RexTheme
WP VR
2025-10-27T01:33:44.357Z 2026-01-20T14:28:16.346Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-0531
6.5 (3.1)
Allocation of Resources Without Limits or Throttling i… Elastic
Kibana
2026-01-13T21:05:51.994Z 2026-01-13T21:25:44.808Z
CVE-2026-0530
6.5 (3.1)
Allocation of Resources Without Limits or Throttling i… Elastic
Kibana
2026-01-13T21:03:13.655Z 2026-01-13T21:25:28.056Z
CVE-2022-50497
N/A
binfmt_misc: fix shift-out-of-bounds in check_special_flags Linux
Linux
2025-10-04T15:43:48.656Z 2025-12-23T13:29:41.395Z
CVE-2026-0528
6.5 (3.1)
Improper Input Validation in Metricbeat Leading to Den… Elastic
Metricbeat
2026-01-13T21:02:18.501Z 2026-01-13T21:25:10.446Z
CVE-2022-50498
N/A
eth: alx: take rtnl_lock on resume Linux
Linux
2025-10-04T15:43:49.383Z 2025-10-04T15:43:49.383Z
CVE-2022-50499
N/A
media: dvb-core: Fix double free in dvb_register_device() Linux
Linux
2025-10-04T15:43:50.064Z 2025-10-04T15:43:50.064Z
CVE-2022-50500
N/A
netdevsim: fix memory leak in nsim_drv_probe() when ns… Linux
Linux
2025-10-04T15:43:50.792Z 2025-10-04T15:43:50.792Z
CVE-2024-32107
4.3 (3.1)
WordPress Finale Lite plugin <= 2.18.0 - Cross Site Re… XLPlugins
Finale Lite
2024-04-11T12:59:29.374Z 2024-08-02T02:06:43.686Z
CVE-2023-47180
6.5 (3.1)
WordPress Finale Lite – Sales Countdown Timer & Discou… XLPlugins
Finale Lite
2025-01-02T12:00:29.545Z 2025-01-03T19:04:55.609Z
CVE-2024-32104
4.3 (3.1)
WordPress NextMove Lite plugin <= 2.18.1 - Cross Site … XLPlugins
NextMove Lite
2024-04-15T08:43:16.358Z 2024-08-02T02:06:43.592Z
CVE-2025-15503
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Sangfor Operation and Maintenance Management System co… Sangfor
Operation and Maintenance Management System
2026-01-10T09:02:06.233Z 2026-01-12T14:37:45.873Z
CVE-2025-62969
6.5 (3.1)
WordPress NextMove Lite plugin <= 2.21.0 - Cross Site … XLPlugins
NextMove Lite
2025-10-27T01:34:14.860Z 2026-01-20T14:28:17.472Z
CVE-2022-50501
N/A
media: coda: Add check for dcoda_iram_alloc Linux
Linux
2025-10-04T15:43:51.498Z 2025-10-04T15:43:51.498Z
CVE-2022-50503
N/A
mtd: lpddr2_nvm: Fix possible null-ptr-deref Linux
Linux
2025-10-04T15:43:52.845Z 2025-10-04T15:43:52.845Z
CVE-2022-50504
N/A
powerpc/rtas: avoid scheduling in rtas_os_term() Linux
Linux
2025-10-04T15:43:53.523Z 2025-12-23T13:29:42.710Z
CVE-2025-15502
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Sangfor Operation and Maintenance Management System se… Sangfor
Operation and Maintenance Management System
2026-01-10T08:02:06.438Z 2026-01-12T14:38:32.534Z
CVE-2025-15501
9.3 (4.0)
9.8 (3.1)
9.8 (3.0)
Sangfor Operation and Maintenance Management System ge… Sangfor
Operation and Maintenance Management System
2026-01-09T22:32:05.839Z 2026-01-12T19:14:37.055Z
CVE-2024-32706
8.5 (3.1)
WordPress ARForms plugin <= 6.4 - Auth. SQL Injection … Repute info systems
ARForms
2024-04-24T08:12:03.672Z 2024-08-02T02:20:35.134Z
CVE-2024-32702
7.1 (3.1)
WordPress ARForms plugin <= 6.4 - Reflected Cross Site… Repute info systems
ARForms
2024-04-24T10:13:23.385Z 2024-08-02T02:20:34.481Z
CVE-2024-54216
7.7 (3.1)
WordPress ARForms plugin <= 6.4.1 - Arbitrary File Rea… Repute InfoSystems
ARForms
2024-12-06T13:07:17.500Z 2024-12-20T13:06:44.001Z
CVE-2024-54217
5.4 (3.1)
WordPress ARForms plugin <= 6.4.1 - Plugin Settings Ch… Repute info systems
ARForms
2024-12-09T12:58:59.338Z 2024-12-09T18:37:23.310Z
CVE-2025-14071
7.5 (3.1)
Live Composer – Free WordPress Website Builder <= 2.0.… livecomposer
Live Composer – Free WordPress Website Builder
2025-12-21T02:20:31.199Z 2026-01-22T18:15:30.101Z
CVE-2025-10180
6.4 (3.1)
Markdown Shortcode <= 0.2.1 - Authenticated (Contribut… jhoppe
Markdown Shortcode
2025-09-26T06:43:29.077Z 2026-01-22T18:11:25.433Z
CVE-2026-0892
9.8 (3.1)
Memory safety bugs fixed in Firefox 147 and Thunderbird 147 Mozilla
Firefox
2026-01-13T13:30:59.874Z 2026-01-15T09:31:17.329Z
CVE-2026-0891
8.1 (3.1)
Memory safety bugs fixed in Firefox ESR 140.7, Thunder… Mozilla
Firefox
2026-01-13T13:30:59.454Z 2026-01-15T09:31:16.819Z
CVE-2026-0890
5.4 (3.1)
Spoofing issue in the DOM: Copy & Paste and Drag & Dro… Mozilla
Firefox
2026-01-13T13:30:59.089Z 2026-01-15T15:30:48.870Z
CVE-2026-0889
7.5 (3.1)
Denial-of-service in the DOM: Service Workers component Mozilla
Firefox
2026-01-13T13:30:58.675Z 2026-01-15T09:31:15.710Z
CVE-2026-0888
5.3 (3.1)
Information disclosure in the XML component Mozilla
Firefox
2026-01-13T13:30:58.296Z 2026-01-15T09:31:15.094Z
CVE-2026-0887
4.3 (3.1)
Clickjacking issue, information disclosure in the PDF … Mozilla
Firefox
2026-01-13T13:30:57.847Z 2026-01-15T15:32:44.439Z
CVE-2022-50496
N/A
dm cache: Fix UAF in destroy() Linux
Linux
2025-10-04T15:43:47.948Z 2025-10-04T15:43:47.948Z
ID Description Published Updated
fkie_cve-2022-50504 In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling… 2025-10-04T16:15:47.607 2026-01-22T19:44:50.620
fkie_cve-2025-15502 A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. … 2026-01-10T08:15:48.753 2026-01-22T19:43:53.410
fkie_cve-2025-15501 A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. … 2026-01-09T23:15:54.773 2026-01-22T19:36:00.063
fkie_cve-2024-32706 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2024-04-24T09:15:06.690 2026-01-22T19:26:14.663
fkie_cve-2024-32702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-04-24T11:15:47.060 2026-01-22T19:24:19.117
fkie_cve-2024-54216 Path Traversal: '.../...//' vulnerability in Repute InfoSystems ARForms allows Path Traversal.This … 2024-12-06T14:15:26.633 2026-01-22T19:22:22.953
fkie_cve-2024-54217 Missing Authorization vulnerability in Repute info systems ARForms.This issue affects ARForms: from… 2024-12-09T13:15:41.997 2026-01-22T19:20:20.050
fkie_cve-2025-14071 The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object… 2025-12-21T03:15:52.487 2026-01-22T19:15:52.987
fkie_cve-2025-10180 The Markdown Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl… 2025-09-26T07:15:40.627 2026-01-22T19:15:52.180
fkie_cve-2026-0892 Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence o… 2026-01-13T14:16:39.723 2026-01-22T19:14:32.277
fkie_cve-2026-0891 Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird… 2026-01-13T14:16:39.627 2026-01-22T19:13:32.147
fkie_cve-2026-0890 Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability affects Firef… 2026-01-13T14:16:39.523 2026-01-22T19:11:13.930
fkie_cve-2026-0889 Denial-of-service in the DOM: Service Workers component. This vulnerability affects Firefox < 147 a… 2026-01-13T14:16:39.437 2026-01-22T19:09:57.530
fkie_cve-2026-0888 Information disclosure in the XML component. This vulnerability affects Firefox < 147 and Thunderbi… 2026-01-13T14:16:39.340 2026-01-22T19:07:51.813
fkie_cve-2026-0887 Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects … 2026-01-13T14:16:39.240 2026-01-22T19:07:12.840
fkie_cve-2022-50496 In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy()… 2025-10-04T16:15:46.657 2026-01-22T19:06:12.297
fkie_cve-2026-0886 Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox < 147, … 2026-01-13T14:16:39.140 2026-01-22T19:05:46.630
fkie_cve-2026-0883 Information disclosure in the Networking component. This vulnerability affects Firefox < 147, Firef… 2026-01-13T14:16:38.853 2026-01-22T19:03:40.607
fkie_cve-2026-0884 Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 147, Firefo… 2026-01-13T14:16:38.950 2026-01-22T19:02:41.157
fkie_cve-2026-0885 Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox < 147, Firefox E… 2026-01-13T14:16:39.050 2026-01-22T19:01:42.443
fkie_cve-2026-0878 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vu… 2026-01-13T14:16:38.367 2026-01-22T18:59:48.930
fkie_cve-2026-0877 Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox < 147, Firefox… 2026-01-13T14:16:38.270 2026-01-22T18:52:01.917
fkie_cve-2026-0881 Sandbox escape in the Messaging System component. This vulnerability affects Firefox < 147 and Thun… 2026-01-13T14:16:38.657 2026-01-22T18:50:33.053
fkie_cve-2026-0513 Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM … 2026-01-13T02:15:53.957 2026-01-22T18:48:53.343
fkie_cve-2026-0506 Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an… 2026-01-13T02:15:53.277 2026-01-22T18:48:00.860
fkie_cve-2026-0500 Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (Wor… 2026-01-13T02:15:52.633 2026-01-22T18:47:22.450
fkie_cve-2026-0882 Use-after-free in the IPC component. This vulnerability affects Firefox < 147, Firefox ESR < 115.32… 2026-01-13T14:16:38.750 2026-01-22T18:46:44.603
fkie_cve-2025-29329 Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4… 2026-01-12T22:16:07.660 2026-01-22T18:46:41.067
fkie_cve-2021-41074 A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's… 2026-01-12T21:15:57.340 2026-01-22T18:45:07.997
fkie_cve-2026-0880 Sandbox escape due to integer overflow in the Graphics component. This vulnerability affects Firefo… 2026-01-13T14:16:38.557 2026-01-22T18:44:44.393
ID Severity Description Published Updated
ghsa-jjqv-ccq3-8rqv
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-help… 2025-10-22T15:31:18Z 2026-01-20T15:31:31Z
ghsa-j8j8-v88w-qcp9
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privi… 2025-10-22T15:31:19Z 2026-01-20T15:31:31Z
ghsa-j55j-j468-484h
7.1 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerc… 2025-10-22T15:31:19Z 2026-01-20T15:31:31Z
ghsa-ggrj-hrpf-2qjw
8.8 (3.1)
Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property all… 2025-10-22T15:31:18Z 2026-01-20T15:31:31Z
ghsa-8rvx-f5jr-g8mx
7.6 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-10-22T15:31:19Z 2026-01-20T15:31:31Z
ghsa-2v22-4548-2w5h
4.3 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN C… 2025-10-22T15:31:19Z 2026-01-20T15:31:31Z
ghsa-2m57-2jcm-c3xj
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object… 2025-10-22T15:31:18Z 2026-01-20T15:31:31Z
ghsa-wwwh-93v4-hf5m
6.5 (3.1)
Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce s… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-wvwj-rfxp-q9cw
6.5 (3.1)
Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trad… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-vh6r-3wc8-6gm7
6.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-qrmp-x6cw-44g4
5.3 (3.1)
Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injecti… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-q974-rx8r-xw34
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Inject… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-jvh9-4236-xcvj
8.2 (3.1)
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-g2vm-hcjg-cch9
8.2 (3.1)
Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes Alone alone … 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-9x25-566j-qh74
5.3 (3.1)
Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-8x9p-2cgp-47v6
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Obje… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-8wj2-xx8c-cq7r
8.2 (3.1)
Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalati… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-8r69-vq96-g59q
8.6 (3.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Thi… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-89xc-2ppw-m4hv
8.8 (3.1)
Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.T… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-7whr-6g3c-2m6g
6.5 (3.1)
Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-dow… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-6qr9-qvc2-68jc
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-57mf-v9w2-f657
9.8 (3.1)
Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-4rpr-5rmh-668h
5.3 (3.1)
Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - … 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-4pqf-xf6q-8mf6
5.3 (3.1)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypr… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-4gg8-fw6h-7j43
5.3 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in integrationshotelrunner HotelRunner Booking Widg… 2025-10-22T15:31:17Z 2026-01-20T15:31:30Z
ghsa-3x9q-xwx4-hhr3
5.3 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Tusko Trush Advanced Custom Fields : CPT Options… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-36jx-769r-m5fx
6.5 (3.1)
Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing evere… 2025-10-22T15:31:18Z 2026-01-20T15:31:30Z
ghsa-wx23-gjgp-3rgc
9.3 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-10-22T15:31:17Z 2026-01-20T15:31:29Z
ghsa-v544-8m2p-8j2r
4.4 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:31:17Z 2026-01-20T15:31:29Z
ghsa-rwgh-gfm4-665g
7.5 (3.1)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Hub… 2025-10-22T15:31:17Z 2026-01-20T15:31:29Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-29275 SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attacke… 2024-04-02T05:02:57.658687Z
gsd-2024-29351 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.658324Z
gsd-2024-29738 In gov_init, there is a possible out of bounds read due to a missing bounds check. This c… 2024-04-02T05:02:57.658089Z
gsd-2024-29232 Improper neutralization of special elements used in an SQL command ('SQL Injection') vuln… 2024-04-02T05:02:57.657678Z
gsd-2024-29189 PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD … 2024-04-02T05:02:57.656893Z
gsd-2024-29438 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.656554Z
gsd-2024-29715 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.656331Z
gsd-2024-29596 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.656135Z
gsd-2024-29500 An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows … 2024-04-02T05:02:57.655933Z
gsd-2024-29709 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.655731Z
gsd-2024-29139 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.655340Z
gsd-2024-29574 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.655016Z
gsd-2024-29318 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.654816Z
gsd-2024-29298 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.654595Z
gsd-2024-29765 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.654180Z
gsd-2024-29346 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.653859Z
gsd-2024-29074 in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution … 2024-04-02T05:02:57.653607Z
gsd-2024-29152 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.653344Z
gsd-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability 2024-04-02T05:02:57.653138Z
gsd-2024-29057 Microsoft Edge (Chromium-based) Spoofing Vulnerability 2024-04-02T05:02:57.652605Z
gsd-2024-29572 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.652329Z
gsd-2024-29804 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.651917Z
gsd-2024-29382 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.651642Z
gsd-2024-29798 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.651202Z
gsd-2024-29546 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.650927Z
gsd-2024-29159 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.650703Z
gsd-2024-29704 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.650380Z
gsd-2024-29039 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.650144Z
gsd-2024-29118 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.649740Z
gsd-2024-29187 WiX toolset lets developers create installers for Windows Installer, the Windows installa… 2024-04-02T05:02:57.648979Z
ID Description Published Updated
mal-2025-189783 Malicious code in supervisor-winston-superagent-exosphere (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189782 Malicious code in supervisor-slides-orbit-hyperion (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189781 Malicious code in supervisor-helios-stream-rate-limiter (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189780 Malicious code in supervisor-cosmology-element-ui-rigel (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189779 Malicious code in supervisor-cosmicsilence-kardashevscale-ophiuchus (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189778 Malicious code in supervisor-config-hapi-relay (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189777 Malicious code in supervisor-adonis-epimetheus-rimraf (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189776 Malicious code in superposition-unuk-spectroscopy-borealis (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189775 Malicious code in superposition-quasar-iota-mysql (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189774 Malicious code in superposition-nucleosynthesis-mui-rigel (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189773 Malicious code in superposition-enif-genomics-australis (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189772 Malicious code in superposition-elara-blazar-webdriverio (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189771 Malicious code in superposition-brane-gravity-altair (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189770 Malicious code in supernova-webdriver-mocha-centauri-vega (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189769 Malicious code in supernova-saturnology-asteroid-halley (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189768 Malicious code in supernova-phylogenetics-terser-abiogenesis (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189767 Malicious code in supernova-miranda-ophiuchus-resonance (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189766 Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189765 Malicious code in supernova-eridanus-radiant-yakutsk (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189764 Malicious code in supernova-equinox-singularity-robotics (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189763 Malicious code in supernova-dysonswarm-arcturus-solis (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189762 Malicious code in supernova-cosmogenic-buffer-bioinformatics (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189761 Malicious code in supernova-astrophysics-jekyll-webdriver-manager (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189760 Malicious code in supernova-astrochemistry-webpack-supervisor (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189759 Malicious code in supernova-apex-brane-callback (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189758 Malicious code in superflare-xenon-semantic-ui-fermiparadox (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189757 Malicious code in superflare-tectonophysics-less-deimos (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189756 Malicious code in superflare-paleoclimatology-pavo-lacerta (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189755 Malicious code in superflare-on-nestjs-xanthus (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189754 Malicious code in superflare-aldebaran-phenomic-quantumfoam (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
ID Description Published Updated
wid-sec-w-2024-1965 MISP: Schwachstelle ermöglicht Offenlegung von Informationen 2024-09-01T22:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2024-1964 Dell PowerScale: Mehrere Schwachstellen 2024-09-01T22:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2024-1963 Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen 2024-09-01T22:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2024-1962 M-Files Server: Schwachstelle ermöglicht Offenlegung von Informationen 2024-09-01T22:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2024-1932 D-LINK Router DIR-846W: Mehrere Schwachstellen ermöglichen Codeausführung 2024-08-27T22:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2023-0428 Verschiedene TLS-Implementierungen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2016-01-06T23:00:00.000+00:00 2024-09-01T22:00:00.000+00:00
wid-sec-w-2024-1954 Rockwell Automation FactoryTalk: Schwachstelle ermöglicht Privilegieneskalation und Codeausführung 2024-08-29T22:00:00.000+00:00 2024-08-29T22:00:00.000+00:00
wid-sec-w-2024-1953 PHP: Mehrere Schwachstellen ermöglichen Denial of Service 2024-08-29T22:00:00.000+00:00 2024-08-29T22:00:00.000+00:00
wid-sec-w-2024-1952 ESRI Portal for ArcGIS: Mehrere Schwachstellen 2024-08-29T22:00:00.000+00:00 2024-08-29T22:00:00.000+00:00
wid-sec-w-2024-1949 Cisco NX-OS: Mehrere Schwachstellen 2024-08-28T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1948 Progress Software WS_FTP: Mehrere Schwachstellen 2024-08-28T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1941 Cisco Application Policy Infrastructure Controller: Mehrere Schwachstellen 2024-08-28T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1909 ImageMagick: Schwachstellen ermöglicen Offenlegung von Informationen 2018-10-03T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1877 Moodle: Mehrere Schwachstellen 2024-08-18T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1181 Python: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes 2018-09-18T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-0215 OpenSSL: Mehrere Schwachstellen 2016-05-03T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-0214 OpenSSL: Schwachstelle ermöglicht nicht spezifizierten Angriff 2016-06-09T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-0154 Linux Kernel: Schwachstelle ermöglicht Erlangen von Administratorrechten 2015-03-11T23:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2023-2154 ImageMagick: Schwachstelle ermöglicht Denial of Service 2018-04-16T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2023-0204 Red Hat OpenShift: Mehrere Schwachstellen 2023-01-25T23:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2022-0023 Red Hat OpenShift: Mehrere Schwachstellen 2022-06-01T22:00:00.000+00:00 2024-08-28T22:00:00.000+00:00
wid-sec-w-2024-1937 Checkmk: Schwachstelle ermöglicht Cross-Site Scripting 2024-08-27T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1936 IBM Security Verify Access: Schwachstelle ermöglicht Manipulation von Daten 2024-08-27T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1935 TeamViewer: Schwachstelle ermöglicht Offenlegung von Informationen 2024-08-27T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1933 Dell BIOS: Schwachstelle ermöglicht Codeausführung und Umgehung von Sicherheitsmaßnahmen 2024-08-27T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1753 Apache OFBiz: Schwachstelle ermöglicht Codeausführung 2024-08-04T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1460 VMware ESXi, VMware Cloud Foundation and VMware vCenter Server: Mehrere Schwachstellen 2024-06-25T22:00:00.000+00:00 2024-08-27T22:00:00.000+00:00
wid-sec-w-2024-1931 TYPO3 Powermail Extension: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und die Offenlegung von Informationen 2024-08-26T22:00:00.000+00:00 2024-08-26T22:00:00.000+00:00
wid-sec-w-2024-1930 Hitachi Ops Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-08-26T22:00:00.000+00:00 2024-08-26T22:00:00.000+00:00
wid-sec-w-2024-1928 Checkmk: Schwachstelle ermöglicht Cross-Site Scripting 2024-08-26T22:00:00.000+00:00 2024-08-26T22:00:00.000+00:00
ID Description Published Updated
rhsa-2021:0187 Red Hat Security Advisory: OpenShift Virtualization 2.5.3 security and bug fix update 2021-01-19T13:27:30+00:00 2026-01-21T09:53:33+00:00
rhsa-2021:0172 Red Hat Security Advisory: OpenShift Container Platform 4.6.13 packages and security update 2021-01-25T19:45:30+00:00 2026-01-21T09:53:32+00:00
rhsa-2021:0146 Red Hat Security Advisory: Release of OpenShift Serverless 1.12.0 2021-01-14T16:13:45+00:00 2026-01-21T09:53:32+00:00
rhsa-2021:0145 Red Hat Security Advisory: Red Hat OpenShift Serverless Client kn 1.12.0 2021-01-14T13:40:17+00:00 2026-01-21T09:53:32+00:00
rhsa-2021:0100 Red Hat Security Advisory: OpenShift Container Platform 4.7 file-integrity-operator image security update 2021-02-24T21:18:36+00:00 2026-01-21T09:53:31+00:00
rhsa-2021:0039 Red Hat Security Advisory: OpenShift Container Platform 4.6.12 extras and security update 2021-01-18T17:33:46+00:00 2026-01-21T09:53:30+00:00
rhsa-2021:0038 Red Hat Security Advisory: OpenShift Container Platform 4.6.12 packages and security update 2021-01-18T16:04:44+00:00 2026-01-21T09:53:29+00:00
rhsa-2021:0037 Red Hat Security Advisory: OpenShift Container Platform 4.6.12 bug fix and security update 2021-01-18T17:56:24+00:00 2026-01-21T09:53:28+00:00
rhsa-2020:5634 Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update 2021-02-24T14:45:13+00:00 2026-01-21T09:53:28+00:00
rhsa-2020:5493 Red Hat Security Advisory: go-toolset:rhel8 security update 2020-12-15T17:12:24+00:00 2026-01-21T09:53:25+00:00
rhsa-2020:5364 Red Hat Security Advisory: OpenShift Container Platform 4.7 low-latency extras security and bug fix update 2021-02-24T18:14:01+00:00 2026-01-21T09:53:25+00:00
rhsa-2020:5333 Red Hat Security Advisory: go-toolset-1.14-golang security update 2020-12-03T11:20:55+00:00 2026-01-21T09:53:25+00:00
rhba-2021:0482 Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 2.0.2 RPMs 2021-02-11T11:59:56+00:00 2026-01-21T09:53:09+00:00
rhba-2021:0305 Red Hat Bug Fix Advisory: Red Hat OpenShift Container Storage 4.6.2 container bug fix update 2021-02-01T13:17:36+00:00 2026-01-21T09:53:07+00:00
rhsa-2024:4848 Red Hat Security Advisory: OpenShift Container Platform 4.13.46 security update 2024-07-31T14:49:20+00:00 2026-01-21T05:30:13+00:00
rhsa-2020:1342 Red Hat Security Advisory: telnet security update 2020-04-07T07:40:05+00:00 2026-01-21T02:42:11+00:00
rhsa-2022:0158 Red Hat Security Advisory: telnet security update 2022-01-18T09:16:45+00:00 2026-01-21T02:42:08+00:00
rhsa-2020:1318 Red Hat Security Advisory: telnet security update 2020-04-06T08:26:50+00:00 2026-01-21T02:42:07+00:00
rhsa-2022:0011 Red Hat Security Advisory: telnet security update 2022-01-04T08:38:23+00:00 2026-01-21T02:42:06+00:00
rhsa-2020:1349 Red Hat Security Advisory: krb5-appl security update 2020-04-07T10:46:31+00:00 2026-01-21T02:42:06+00:00
rhsa-2020:1335 Red Hat Security Advisory: telnet security update 2020-04-06T16:33:30+00:00 2026-01-21T02:42:06+00:00
rhsa-2020:1334 Red Hat Security Advisory: telnet security update 2020-04-06T16:41:53+00:00 2026-01-21T02:42:03+00:00
rhsa-2024:9423 Red Hat Security Advisory: python-dns security update 2024-11-12T09:22:42+00:00 2026-01-20T22:10:32+00:00
rhsa-2024:3483 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Security and Bug Fix Update 2024-05-30T02:13:21+00:00 2026-01-20T22:10:29+00:00
rhsa-2024:3275 Red Hat Security Advisory: python-dns security update 2024-05-22T11:45:03+00:00 2026-01-20T22:10:29+00:00
rhsa-2018:3004 Red Hat Security Advisory: chromium-browser security update 2018-10-24T22:06:32+00:00 2026-01-20T22:10:28+00:00
rhsa-2025:19962 Red Hat Security Advisory: kernel security update 2025-11-10T04:21:22+00:00 2026-01-20T22:10:00+00:00
rhsa-2025:19440 Red Hat Security Advisory: kernel-rt security update 2025-11-03T09:06:28+00:00 2026-01-20T22:09:59+00:00
rhsa-2024:6734 Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 7.2.2 product release [security update] 2024-09-17T17:41:04+00:00 2026-01-20T22:09:34+00:00
rhsa-2024:6461 Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 8.1.3 product release & security update 2024-09-09T00:30:18+00:00 2026-01-20T22:09:33+00:00
ID Description Published Updated
msrc_cve-2024-21241 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21239 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21238 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior 8.4.1 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21237 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21236 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21231 Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21230 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21219 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21218 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21213 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21212 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Health Monitor). Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21207 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38 and prior 8.4.1 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21203 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21201 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21199 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21198 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21197 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21196 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21194 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21193 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-10-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21173 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21171 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21166 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21165 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21163 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21162 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21160 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21159 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21157 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
msrc_cve-2024-21142 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2024-07-01T07:00:00.000Z 2024-12-04T00:00:00.000Z
ID Description Updated
var-202210-1707 D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerabili… 2025-05-09T23:28:54.665000Z
var-202410-1831 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command… 2025-05-09T23:28:51.386000Z
var-202502-3289 Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed pa… 2025-05-09T23:28:50.746000Z
var-202504-1759 Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3_1.0.15 was discovered to conta… 2025-05-09T23:28:50.485000Z
var-202503-0053 A vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical.… 2025-05-09T23:28:23.794000Z
var-202410-1655 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command… 2025-05-09T23:26:52.504000Z
var-202410-1718 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command… 2025-05-09T23:26:52.482000Z
var-202411-0467 D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via … 2025-05-09T23:26:52.364000Z
var-202504-3453 TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.518… 2025-05-09T23:26:47.757000Z
var-202410-1794 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple … 2025-05-09T23:23:48.054000Z
var-202411-0352 Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_ne… 2025-05-09T23:23:47.933000Z
var-202502-3462 Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_s… 2025-05-09T23:23:47.350000Z
var-202210-1339 Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflo… 2025-05-09T23:23:23.712000Z
var-202210-1675 Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflo… 2025-05-09T23:23:23.647000Z
var-202410-1795 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command… 2025-05-09T23:23:16.606000Z
var-202411-0330 Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d… 2025-05-09T23:23:16.500000Z
var-202503-1988 A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControl… 2025-05-09T23:23:15.628000Z
var-202410-3480 D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for … 2025-05-09T23:21:45.015000Z
var-202402-0523 there is a possible out of bounds write due to a missing bounds check. This could lead to… 2025-05-09T23:19:27.389000Z
var-202502-3291 Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Inf… 2025-05-09T23:19:23.637000Z
var-202503-0075 A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.1… 2025-05-09T23:19:23.594000Z
var-202502-2320 There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand functi… 2025-05-09T23:18:43.926000Z
var-202410-1606 A stack overflow vulnerability exists in the sub_402280 function of the HNAP service of D… 2025-05-09T23:17:15.101000Z
var-202502-2914 Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function. S… 2025-05-09T23:14:55.535000Z
var-202503-0623 In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has… 2025-05-09T23:14:55.421000Z
var-202503-1739 Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifi… 2025-05-09T23:14:55.343000Z
var-202410-1779 D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command… 2025-05-09T23:11:36.947000Z
var-202411-0689 Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in t… 2025-05-09T23:11:36.791000Z
var-202502-3089 Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formex… 2025-05-09T23:11:34.130000Z
var-202210-1705 Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflo… 2025-05-09T23:03:41.571000Z
ID Description Updated
ID Description Published Updated
suse-su-2024:0242-1 Security update for MozillaThunderbird 2024-01-26T10:33:31Z 2024-01-26T10:33:31Z
suse-su-2024:0241-1 Security update for jasper 2024-01-26T09:57:38Z 2024-01-26T09:57:38Z
suse-su-2024:0240-1 Security update for jasper 2024-01-26T09:57:23Z 2024-01-26T09:57:23Z
suse-su-2024:0239-1 Security update for rear23a 2024-01-26T09:57:07Z 2024-01-26T09:57:07Z
suse-su-2024:0238-1 Security update for cpio 2024-01-26T09:56:42Z 2024-01-26T09:56:42Z
suse-su-2024:0236-1 Security update for xorg-x11-server 2024-01-25T16:07:43Z 2024-01-25T16:07:43Z
suse-su-2024:0229-1 Security update for MozillaFirefox 2024-01-25T08:38:05Z 2024-01-25T08:38:05Z
suse-su-2024:0228-1 Security update for MozillaFirefox 2024-01-25T08:37:11Z 2024-01-25T08:37:11Z
suse-su-2024:0224-1 Security update for apache-parent, apache-sshd 2024-01-25T08:27:16Z 2024-01-25T08:27:16Z
suse-su-2024:0212-1 Security update for xwayland 2024-01-24T14:48:13Z 2024-01-24T14:48:13Z
suse-su-2024:0211-1 Security update for MozillaFirefox 2024-01-24T13:13:54Z 2024-01-24T13:13:54Z
suse-su-2024:0210-1 Security update for erlang 2024-01-24T13:04:45Z 2024-01-24T13:04:45Z
suse-su-2024:0209-1 Security update for tomcat 2024-01-24T12:55:05Z 2024-01-24T12:55:05Z
suse-su-2024:0208-1 Security update for tomcat10 2024-01-24T12:54:37Z 2024-01-24T12:54:37Z
suse-su-2024:0206-1 Security update for tomcat 2024-01-24T12:54:18Z 2024-01-24T12:54:18Z
suse-su-2024:0205-1 Security update for python-Pillow 2024-01-24T12:34:49Z 2024-01-24T12:34:49Z
suse-su-2024:0204-1 Security update for bluez 2024-01-24T12:34:14Z 2024-01-24T12:34:14Z
suse-su-2024:0203-1 Security update for java-11-openjdk 2024-01-24T12:03:39Z 2024-01-24T12:03:39Z
suse-su-2024:0200-1 Security update for redis7 2024-01-23T17:12:34Z 2024-01-23T17:12:34Z
suse-su-2024:0196-1 Security Beta update for SUSE Manager Client Tools and Salt 2024-01-23T15:20:05Z 2024-01-23T15:20:05Z
suse-su-2024:0191-1 Security Beta update for SUSE Manager Client Tools 2024-01-23T15:18:14Z 2024-01-23T15:18:14Z
suse-su-2024:0190-1 Security update for rear118a 2024-01-23T14:28:51Z 2024-01-23T14:28:51Z
suse-su-2024:0185-1 Security update for python-Pillow 2024-01-23T12:33:25Z 2024-01-23T12:33:25Z
suse-ru-2024:0184-1 Recommended update for tmux 2024-01-23T12:04:14Z 2024-01-23T12:04:14Z
suse-su-2024:0183-1 Security update for bluez 2024-01-23T11:33:39Z 2024-01-23T11:33:39Z
suse-su-2024:0182-1 Security update for bluez 2024-01-23T11:04:03Z 2024-01-23T11:04:03Z
suse-su-2024:0172-1 Security update for openssl-3 2024-01-22T16:33:34Z 2024-01-22T16:33:34Z
suse-su-2024:0168-1 Security update for python-aiohttp 2024-01-19T14:00:17Z 2024-01-19T14:00:17Z
suse-su-2024:0167-1 Security update for bluez 2024-01-19T14:00:07Z 2024-01-19T14:00:07Z
suse-su-2024:0166-1 Security update for bluez 2024-01-19T13:59:50Z 2024-01-19T13:59:50Z
ID Description Published Updated
opensuse-su-2024:10459-1 imobiledevice-tools-1.2.0-3.4 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10458-1 perl-Module-Signature-0.81-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10457-1 apache2-mod_wsgi-4.5.2-1.4 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10456-1 libQt5Bootstrap-devel-static-32bit-5.7.0-2.2 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10455-1 irssi-0.8.20-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10454-1 libid3tag-devel-0.15.1b-185.6 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10453-1 gdk-pixbuf-devel-2.36.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10452-1 perl-Email-Address-1.908-1.3 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10451-1 libfreebl3-3.26.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10450-1 python-2.7.12-1.5 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10449-1 perl-32bit-5.24.0-3.5 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10448-1 tkdiff-4.2-10.2 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10447-1 libpcre2-16-0-10.22-1.3 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10446-1 tomcat-8.0.36-3.3 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10445-1 zoo-2.10-1025.8 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10444-1 dia-0.97.3-4.13 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10443-1 jython-2.2.1-16.10 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10442-1 libXfixes-devel-32bit-5.0.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10441-1 gnome-settings-daemon-3.22.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10440-1 timidity-2.14.0-3.10 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10439-1 castor-0.9.5-326.4 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10438-1 freetype2-devel-2.7-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10437-1 tomboy-1.15.5-1.3 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10436-1 libpolkit0-0.113-3.4 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10435-1 nano-2.7.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10434-1 libminiupnpc-devel-2.0-1.5 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10433-1 libv8-5-5.3.171-4.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10432-1 finch-2.11.0-4.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10431-1 xorg-x11-7.6_1-16.2 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:10430-1 conntrack-tools-1.4.4-1.3 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
cnvd-2025-17315 WordPress ebook store跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17314 WordPress Station Pro跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17313 WordPress Supreme Addons for Beaver Builder跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17312 WordPress Affiliate Plus跨站请求伪造漏洞 2025-07-30 2025-07-31
cnvd-2025-17311 WordPress Get Youtube Subs跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17310 WordPress muse.ai video embedding跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17309 WordPress AI Engine信息泄露漏洞 2025-07-30 2025-07-31
cnvd-2025-17308 WordPress WP Applink跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17307 WordPress Mine CloudVod跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17306 WordPress Security Ninja任意文件读取漏洞 2025-07-30 2025-07-31
cnvd-2025-17305 WordPress Voltax Video Player跨站脚本漏洞 2025-07-30 2025-07-31
cnvd-2025-17304 WordPress iThoughts Advanced Code Editor跨站请求伪造漏洞 2025-07-30 2025-07-31
cnvd-2025-17303 WordPress WP Wallcreeper授权问题漏洞 2025-07-30 2025-07-31
cnvd-2025-17301 WeGIA SQL注入漏洞(CNVD-2025-17301) 2025-06-24 2025-07-31
cnvd-2025-17300 WeGIA跨站脚本漏洞(CNVD-2025-17300) 2025-07-04 2025-07-31
cnvd-2025-17299 WeGIA跨站脚本漏洞(CNVD-2025-17299) 2025-07-04 2025-07-31
cnvd-2025-17298 WeGIA跨站脚本漏洞(CNVD-2025-17298) 2025-07-04 2025-07-31
cnvd-2025-17297 WeGIA跨站脚本漏洞(CNVD-2025-17297) 2025-07-04 2025-07-31
cnvd-2025-17296 WeGIA跨站脚本漏洞(CNVD-2025-17296) 2025-07-04 2025-07-31
cnvd-2025-17295 WeGIA跨站脚本漏洞(CNVD-2025-17295) 2025-07-04 2025-07-31
cnvd-2025-17294 WeGIA SQL注入漏洞(CNVD-2025-17294) 2025-07-07 2025-07-31
cnvd-2025-17293 WeGIA跨站脚本漏洞(CNVD-2025-17293) 2025-07-11 2025-07-31
cnvd-2025-17292 WeGIA跨站脚本漏洞(CNVD-2025-17292) 2025-07-11 2025-07-31
cnvd-2025-17291 WeGIA SQL注入漏洞(CNVD-2025-17291) 2025-07-11 2025-07-31
cnvd-2025-17290 WeGIA fid参数拒绝服务漏洞 2025-07-11 2025-07-31
cnvd-2025-17289 WeGIA拒绝服务漏洞 2025-07-11 2025-07-31
cnvd-2025-17288 WeGIA跨站脚本漏洞(CNVD-2025-17288) 2025-07-11 2025-07-31
cnvd-2025-17287 WeGIA SQL注入漏洞(CNVD-2025-17287) 2025-07-11 2025-07-31
cnvd-2025-17286 WeGIA开放重定向漏洞 2025-07-21 2025-07-31
cnvd-2025-17285 WeGIA SQL注入漏洞(CNVD-2025-17285) 2025-07-21 2025-07-31
ID Description Published Updated
certfr-2020-avi-562 Multiples vulnérabilités dans Microsoft Windows 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-561 Multiples vulnérabilités dans Microsoft Office 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-560 Multiples vulnérabilités dans Microsoft Edge 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-559 Multiples vulnérabilités dans Microsoft IE 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-558 Vulnérabilité dans F5 BIG-IP 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-557 Multiples vulnérabilités dans les produits Intel 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-556 Multiples vulnérabilités dans Google Chrome 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-555 Vulnérabilité dans Citrix StoreFront 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-554 Multiples vulnérabilités dans Google Android 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-553 Multiples vulnérabilités dans le noyau Linux de SUSE 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-552 Vulnérabilité dans le noyau Linux d'Ubuntu 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-551 Multiples vulnérabilités dans Schneider Electric SCADAPack 2020-09-09T00:00:00.000000 2020-09-09T00:00:00.000000
certfr-2020-avi-549 Multiples vulnérabilités dans les produits SAP 2020-09-08T00:00:00.000000 2020-09-08T00:00:00.000000
certfr-2020-avi-548 Multiples vulnérabilités dans le noyau Linux de SUSE 2020-09-07T00:00:00.000000 2020-09-07T00:00:00.000000
certfr-2020-avi-547 Multiples vulnérabilités dans le noyau Linux de SUSE 2020-09-04T00:00:00.000000 2020-09-04T00:00:00.000000
certfr-2020-avi-546 Multiples vulnérabilités dans Nagios XI 2020-09-04T00:00:00.000000 2020-09-04T00:00:00.000000
certfr-2020-avi-545 Multiples vulnérabilités dans les produits Cisco 2020-09-03T00:00:00.000000 2020-09-03T00:00:00.000000
certfr-2020-avi-544 Multiples vulnérabilités dans Mitel MiContact Center Business 2020-09-03T00:00:00.000000 2020-09-03T00:00:00.000000
certfr-2020-avi-543 Multiples vulnérabilités dans Mozilla Firefox 2020-09-03T00:00:00.000000 2020-09-03T00:00:00.000000
certfr-2020-avi-542 Multiples vulnérabilités dans GitLab 2020-09-03T00:00:00.000000 2020-09-03T00:00:00.000000
certfr-2020-avi-541 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2020-09-02T00:00:00.000000 2020-09-02T00:00:00.000000
certfr-2020-avi-540 Multiples vulnérabilités dans Google Chrome OS 2020-09-02T00:00:00.000000 2020-09-02T00:00:00.000000
certfr-2020-avi-539 Vulnérabilité dans Aruba Analytics and Location Engine 2020-09-02T00:00:00.000000 2020-09-02T00:00:00.000000
certfr-2020-avi-538 Vulnérabilité dans le noyau Linux de Red Hat 2020-09-02T00:00:00.000000 2020-09-02T00:00:00.000000
certfr-2020-avi-537 Multiples vulnérabilités dans le noyau Linux de Red Hat 2020-08-31T00:00:00.000000 2020-08-31T00:00:00.000000
certfr-2020-avi-536 Multiples vulnérabilités dans Mitel MiCloud Management Portal 2020-08-28T00:00:00.000000 2020-08-28T00:00:00.000000
certfr-2020-avi-535 Multiples vulnérabilités dans Mozilla Thunderbird 2020-08-27T00:00:00.000000 2020-08-27T00:00:00.000000
certfr-2020-avi-534 Multiples vulnérabilités dans les produits Cisco 2020-08-27T00:00:00.000000 2020-08-27T00:00:00.000000
certfr-2020-avi-533 Multiples vulnérabilités dans F5 BIG-IP 2020-08-26T00:00:00.000000 2020-08-27T00:00:00.000000
certfr-2020-avi-532 Multiples vulnérabilités dans Mozilla Firefox 2020-08-26T00:00:00.000000 2020-08-26T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated