Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-26322
7.6 (3.1)
OpenClaw Gateway tool allowed unrestricted gatewayUrl … openclaw
openclaw
2026-02-19T22:33:10.400Z 2026-02-20T15:40:40.039Z
CVE-2026-26952
5.4 (3.1)
Pi-hole Web Interface has Stored HTML Injection via Lo… pi-hole
web
2026-02-19T22:43:58.403Z 2026-02-20T15:40:28.882Z
CVE-2026-26323
8.6 (4.0)
OpenClaw has a command injection in maintainer clawtri… openclaw
openclaw
2026-02-19T22:47:47.978Z 2026-02-20T15:40:16.815Z
CVE-2026-26324
7.5 (3.1)
OpenClaw has a SSRF guard bypass via full-form IPv4-ma… openclaw
openclaw
2026-02-19T22:49:24.293Z 2026-02-20T15:40:05.566Z
CVE-2026-26953
5.4 (3.1)
Pi-hole Web Interface has Stored HTML Injection via X-… pi-hole
web
2026-02-19T22:50:08.429Z 2026-02-20T15:39:52.782Z
CVE-2026-26325
7.2 (3.1)
OpenClaw Node host system.run rawCommand/command misma… openclaw
openclaw
2026-02-19T22:53:17.545Z 2026-02-20T15:39:41.148Z
CVE-2026-26326
5.3 (4.0)
OpenClaw skills.status could leak secrets to operator.… openclaw
openclaw
2026-02-19T22:55:53.292Z 2026-02-20T15:39:29.706Z
CVE-2026-26327
7.1 (4.0)
OpenClaw allows unauthenticated discovery TXT records … openclaw
openclaw
2026-02-19T22:59:36.376Z 2026-02-20T15:39:17.849Z
CVE-2026-26958
1.7 (4.0)
filippo.io/edwards25519 MultiScalarMult function produ… FiloSottile
filippo.io/edwards25519
2026-02-19T23:01:26.923Z 2026-02-20T15:39:04.748Z
CVE-2026-26328
6.5 (3.1)
OpenClaw iMessage group allowlist authorization inheri… openclaw
openclaw
2026-02-19T23:04:12.188Z 2026-02-20T15:38:50.782Z
CVE-2026-26329
7.1 (4.0)
OpenClaw has a path traversal in browser upload allows… openclaw
openclaw
2026-02-19T23:06:37.962Z 2026-02-20T15:38:37.988Z
CVE-2026-26972
6.7 (3.1)
OpenClaw has a Path Traversal in Browser Download Func… openclaw
openclaw
2026-02-19T23:08:44.670Z 2026-02-20T15:38:25.996Z
CVE-2026-27001
8.6 (4.0)
OpenClaw: Unsanitized CWD path injection into LLM prompts openclaw
openclaw
2026-02-19T23:10:07.761Z 2026-02-20T15:38:14.649Z
CVE-2026-27002
7.7 (4.0)
OpenClaw: Docker container escape via unvalidated bind… openclaw
openclaw
2026-02-19T23:12:17.481Z 2026-02-20T15:38:01.647Z
CVE-2026-27003
6.9 (4.0)
OpenClaw: Telegram bot token exposure via logs openclaw
openclaw
2026-02-19T23:14:10.200Z 2026-02-20T15:37:51.627Z
CVE-2026-26959
7.8 (3.1)
ADB Explorer Vulnerable to RCE via Insufficient Input … Alex4SSB
ADB-Explorer
2026-02-19T23:16:43.858Z 2026-02-20T15:37:40.828Z
CVE-2026-27004
6.9 (4.0)
OpenClaw session tool visibility hardening and Telegra… openclaw
openclaw
2026-02-19T23:18:47.555Z 2026-02-20T15:37:31.097Z
CVE-2026-27007
4.8 (4.0)
OpenClaw's sandbox config hash sorted primitive arrays… openclaw
openclaw
2026-02-19T23:21:19.806Z 2026-02-20T15:37:20.193Z
CVE-2026-27008
6.8 (4.0)
OpenClaw hardened the skill download target directory … openclaw
openclaw
2026-02-19T23:23:32.275Z 2026-02-20T15:37:09.833Z
CVE-2026-27009
5.8 (3.1)
OpenClaw affected by Stored XSS in Control UI via unsa… openclaw
openclaw
2026-02-19T23:25:41.111Z 2026-02-20T15:36:57.938Z
CVE-2026-26957
6.9 (4.0)
Libredesk has an SSRF Vulnerability via Webhooks abhinavxd
github.com/abhinavxd/libredesk
2026-02-19T23:30:48.166Z 2026-02-20T15:36:49.120Z
CVE-2026-26963
6.1 (3.1)
Cilium may not enforce host firewall policies when Nat… cilium
cilium
2026-02-19T23:38:36.110Z 2026-02-20T15:36:37.658Z
CVE-2026-26964
2.7 (3.1)
Windmill Exposes Workspace Slack OAuth Client Secrets … windmill-labs
windmill
2026-02-19T23:57:30.237Z 2026-02-20T15:36:28.646Z
CVE-2026-26967
8.1 (4.0)
PJSIP has a Heap-based Buffer Overflow vulnerability i… pjsip
pjproject
2026-02-20T00:26:54.397Z 2026-02-20T15:36:17.964Z
CVE-2026-26974
7.6 (4.0)
Sylde has Improper Control of Generation of Code Tygo-van-den-Hurk
Slyde
2026-02-20T00:34:37.915Z 2026-02-20T15:36:08.989Z
CVE-2026-26975
8.8 (3.1)
Music Assistant Server Path Traversal in Playlist Upda… music-assistant
server
2026-02-20T00:49:03.306Z 2026-02-20T15:35:58.447Z
CVE-2026-26977
6.9 (4.0)
Frappe Learning Management System exposes details of u… frappe
lms
2026-02-20T00:56:42.680Z 2026-02-20T15:35:48.470Z
CVE-2026-26980
9.4 (3.1)
Ghost has a SQL Injection in its Content API TryGhost
Ghost
2026-02-20T01:00:51.633Z 2026-02-20T15:35:37.895Z
CVE-2026-26960
7.1 (3.1)
node-tar has Arbitrary File Read/Write via Hardlink Ta… isaacs
node-tar
2026-02-20T01:07:52.979Z 2026-02-20T15:35:27.586Z
CVE-2026-26987
5.3 (4.0)
LibreNMS affected by reflected XSS via email field librenms
librenms
2026-02-20T01:11:13.925Z 2026-02-20T15:35:18.059Z
ID CVSS Description Vendor Product Published Updated
CVE-2026-23080
N/A
can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB … Linux
Linux
2026-02-04T16:08:04.982Z 2026-02-09T08:38:19.968Z
CVE-2026-23078
N/A
ALSA: scarlett2: Fix buffer overflow in config retrieval Linux
Linux
2026-02-04T16:08:03.283Z 2026-02-09T08:38:17.910Z
CVE-2026-23076
N/A
ALSA: ctxfi: Fix potential OOB access in audio mixer h… Linux
Linux
2026-02-04T16:08:01.204Z 2026-02-09T08:38:15.852Z
CVE-2026-23075
N/A
can: esd_usb: esd_usb_read_bulk_callback(): fix URB me… Linux
Linux
2026-02-04T16:08:00.169Z 2026-02-09T08:38:14.812Z
CVE-2026-23074
N/A
net/sched: Enforce that teql can only be used as root qdisc Linux
Linux
2026-02-04T16:07:59.379Z 2026-02-09T08:38:13.759Z
CVE-2026-23073
N/A
wifi: rsi: Fix memory corruption due to not set vif dr… Linux
Linux
2026-02-04T16:07:53.527Z 2026-02-09T08:38:12.671Z
CVE-2026-23071
N/A
regmap: Fix race condition in hwspinlock irqsave routine Linux
Linux
2026-02-04T16:07:51.603Z 2026-02-09T08:38:10.426Z
CVE-2026-23069
N/A
vsock/virtio: fix potential underflow in virtio_transp… Linux
Linux
2026-02-04T16:07:49.911Z 2026-02-09T08:38:08.392Z
CVE-2026-23068
N/A
spi: spi-sprd-adi: Fix double free in probe error path Linux
Linux
2026-02-04T16:07:49.119Z 2026-02-09T08:38:07.365Z
CVE-2026-23064
N/A
net/sched: act_ife: avoid possible NULL deref Linux
Linux
2026-02-04T16:07:46.329Z 2026-02-09T08:38:03.299Z
CVE-2026-23063
N/A
uacce: ensure safe queue release with state management Linux
Linux
2026-02-04T16:07:45.426Z 2026-02-09T08:38:02.269Z
CVE-2026-23061
N/A
can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix … Linux
Linux
2026-02-04T16:07:43.626Z 2026-02-09T08:37:59.685Z
CVE-2026-23060
N/A
crypto: authencesn - reject too-short AAD (assoclen<8)… Linux
Linux
2026-02-04T16:07:42.860Z 2026-02-09T08:37:58.639Z
CVE-2026-23058
N/A
can: ems_usb: ems_usb_read_bulk_callback(): fix URB me… Linux
Linux
2026-02-04T16:07:41.337Z 2026-02-09T08:37:56.573Z
CVE-2026-23056
N/A
uacce: implement mremap in uacce_vm_ops to return -EPERM Linux
Linux
2026-02-04T16:07:34.787Z 2026-02-09T08:37:54.328Z
CVE-2026-23054
N/A
net: hv_netvsc: reject RSS hash key programming withou… Linux
Linux
2026-02-04T16:04:23.396Z 2026-02-09T08:37:52.262Z
CVE-2026-23049
N/A
drm/panel-simple: fix connector type for DataImage SCF… Linux
Linux
2026-02-04T16:04:18.076Z 2026-02-09T08:37:45.217Z
CVE-2026-23038
N/A
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_devic… Linux
Linux
2026-01-31T11:42:32.599Z 2026-02-09T08:37:33.004Z
CVE-2026-23037
N/A
can: etas_es58x: allow partial RX URB allocation to succeed Linux
Linux
2026-01-31T11:42:31.689Z 2026-02-09T08:37:31.963Z
CVE-2026-23033
N/A
dmaengine: omap-dma: fix dma_pool resource leak in err… Linux
Linux
2026-01-31T11:42:28.352Z 2026-02-09T08:37:27.739Z
CVE-2026-23031
N/A
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB m… Linux
Linux
2026-01-31T11:42:09.276Z 2026-02-09T08:37:25.657Z
CVE-2026-23030
N/A
phy: rockchip: inno-usb2: Fix a double free bug in roc… Linux
Linux
2026-01-31T11:42:08.525Z 2026-02-09T08:37:24.591Z
CVE-2026-23026
N/A
dmaengine: qcom: gpi: Fix memory leak in gpi_periphera… Linux
Linux
2026-01-31T11:42:05.185Z 2026-02-09T08:37:20.372Z
CVE-2026-23025
N/A
mm/page_alloc: prevent pcp corruption with SMP=n Linux
Linux
2026-01-31T11:42:04.426Z 2026-02-09T08:37:19.230Z
CVE-2026-23011
N/A
ipv4: ip_gre: make ipgre_header() robust Linux
Linux
2026-01-25T14:36:24.455Z 2026-02-09T08:37:04.481Z
CVE-2026-23010
N/A
ipv6: Fix use-after-free in inet6_addr_del(). Linux
Linux
2026-01-25T14:36:23.593Z 2026-02-09T08:37:03.184Z
CVE-2026-23006
N/A
ASoC: tlv320adcx140: fix null pointer Linux
Linux
2026-01-25T14:36:19.819Z 2026-02-09T08:36:58.851Z
CVE-2026-23005
N/A
x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whene… Linux
Linux
2026-01-25T14:36:19.021Z 2026-02-09T08:36:57.868Z
CVE-2026-23003
N/A
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Linux
Linux
2026-01-25T14:36:17.491Z 2026-02-09T08:36:55.829Z
CVE-2026-23001
N/A
macvlan: fix possible UAF in macvlan_forward_source() Linux
Linux
2026-01-25T14:36:15.790Z 2026-02-09T08:36:53.776Z
ID Description Published Updated
fkie_cve-2026-23030 In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix … 2026-01-31T12:16:06.313 2026-02-06T17:16:21.577
fkie_cve-2026-23026 In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memo… 2026-01-31T12:16:05.920 2026-02-06T17:16:21.483
fkie_cve-2026-23025 In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: prevent pcp cor… 2026-01-31T12:16:05.820 2026-02-06T17:16:21.383
fkie_cve-2026-23011 In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_heade… 2026-01-25T15:15:55.977 2026-02-06T17:16:21.283
fkie_cve-2026-23010 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in in… 2026-01-25T15:15:55.867 2026-02-06T17:16:21.177
fkie_cve-2026-23006 In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null … 2026-01-25T15:15:55.480 2026-02-06T17:16:21.087
fkie_cve-2026-23005 In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in… 2026-01-25T15:15:55.377 2026-02-06T17:16:20.987
fkie_cve-2026-23003 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_vlan_inet_… 2026-01-25T15:15:55.170 2026-02-06T17:16:20.883
fkie_cve-2026-23001 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in m… 2026-01-25T15:15:54.970 2026-02-06T17:16:20.783
fkie_cve-2025-71199 In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fi… 2026-02-04T17:16:11.847 2026-02-06T17:16:20.267
fkie_cve-2025-71197 In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buff… 2026-02-04T17:16:11.633 2026-02-06T17:16:20.170
fkie_cve-2025-71196 In the Linux kernel, the following vulnerability has been resolved: phy: stm32-usphyc: Fix off by … 2026-02-04T17:16:11.530 2026-02-06T17:16:20.073
fkie_cve-2025-71194 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in wait_cu… 2026-02-04T17:16:11.297 2026-02-06T17:16:19.230
fkie_cve-2025-71191 In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix devic… 2026-01-31T12:16:04.380 2026-02-06T17:16:19.110
fkie_cve-2025-71190 In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix d… 2026-01-31T12:16:04.280 2026-02-06T17:16:19.010
fkie_cve-2025-71189 In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF … 2026-01-31T12:16:04.180 2026-02-06T17:16:18.920
fkie_cve-2025-71188 In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix… 2026-01-31T12:16:04.067 2026-02-06T17:16:18.820
fkie_cve-2025-71186 In the Linux kernel, the following vulnerability has been resolved: dmaengine: stm32: dmamux: fix … 2026-01-31T12:16:03.873 2026-02-06T17:16:18.727
fkie_cve-2025-71185 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: dma-crossbar: f… 2026-01-31T12:16:03.773 2026-02-06T17:16:18.627
fkie_cve-2025-39721 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - flush misc workq… 2025-09-05T18:15:49.770 2026-02-06T17:16:16.957
fkie_cve-2025-39702 In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison t… 2025-09-05T18:15:47.270 2026-02-06T17:16:16.813
fkie_cve-2025-38718 In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso pac… 2025-09-04T16:15:41.413 2026-02-06T17:16:16.647
fkie_cve-2025-38591 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to… 2025-08-19T17:15:36.790 2026-02-06T17:16:16.533
fkie_cve-2025-38408 In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize wor… 2025-07-25T14:15:32.440 2026-02-06T17:16:16.420
fkie_cve-2025-38361 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hws… 2025-07-25T13:15:24.903 2026-02-06T17:16:16.313
fkie_cve-2025-38232 In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd re… 2025-07-04T14:15:32.810 2026-02-06T17:16:16.193
fkie_cve-2025-38125 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: make sure that pt… 2025-07-03T09:15:26.680 2026-02-06T17:16:16.073
fkie_cve-2025-38104 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Replace Mutex with… 2025-04-18T07:15:43.290 2026-02-06T17:16:15.947
fkie_cve-2025-38057 In the Linux kernel, the following vulnerability has been resolved: espintcp: fix skb leaks A few… 2025-06-18T10:15:38.477 2026-02-06T17:16:15.830
fkie_cve-2025-38007 In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check i… 2025-06-18T10:15:31.907 2026-02-06T17:16:15.673
ID Severity Description Published Updated
ghsa-xfpx-85jf-269f
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fleur fleur allows … 2026-01-22T18:30:40Z 2026-01-27T00:31:12Z
ghsa-rf84-jrrh-cw8c
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows … 2026-01-22T18:30:40Z 2026-01-27T00:31:12Z
ghsa-jcj7-x6px-hj8v
8.8 (3.1)
Missing Authorization vulnerability in merkulove Motionger for Elementor motionger-elementor allows… 2026-01-22T18:30:33Z 2026-01-27T00:31:12Z
ghsa-hf3g-728j-f82r
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privil… 2026-01-22T18:30:39Z 2026-01-27T00:31:12Z
ghsa-h64p-6rr7-5p56
7.3 (3.1)
Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Inco… 2026-01-22T18:30:39Z 2026-01-27T00:31:12Z
ghsa-fmw4-xvm4-wcm8
7.3 (3.1)
Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting … 2026-01-22T18:30:39Z 2026-01-27T00:31:12Z
ghsa-79w3-q3h6-8v22
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello a… 2026-01-22T18:30:40Z 2026-01-27T00:31:12Z
ghsa-6rwr-c5rg-c3g2
8.8 (3.1)
Missing Authorization vulnerability in merkulove Searcher for Elementor searcher-elementor allows E… 2026-01-22T18:30:33Z 2026-01-27T00:31:12Z
ghsa-6hh3-55pq-pgwq
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Es… 2026-01-22T18:30:39Z 2026-01-27T00:31:12Z
ghsa-6h2x-qqxv-62vv
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Holmes holmes allow… 2026-01-22T18:30:40Z 2026-01-27T00:31:12Z
ghsa-6h2f-26q7-fj62
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T18:30:40Z 2026-01-27T00:31:12Z
ghsa-466m-cgr3-wmg5
7.3 (3.1)
Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectl… 2026-01-22T18:30:39Z 2026-01-27T00:31:12Z
ghsa-wq23-6p2q-rgc7
7.5 (3.1)
Insertion of Sensitive Information Into Sent Data vulnerability in Johan Jonk Stenström Cookies and… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-wfq7-x3p5-6p3r
8.8 (3.1)
Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured A… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-rw63-fhw5-h8xf
8.8 (3.1)
Missing Authorization vulnerability in merkulove Carter for Elementor carter-elementor allows Explo… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-rpvq-43pv-vpgx
9.1 (3.1)
Server-Side Request Forgery (SSRF) vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer al… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-q5wg-9m77-73x7
7.5 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam R… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-gpxp-fqcq-q358
8.8 (3.1)
Missing Authorization vulnerability in merkulove Imager for Elementor imager-elementor allows Explo… 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-46f2-jw97-m9p4
5.4 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:33Z 2026-01-27T00:31:11Z
ghsa-vg7v-mpp3-w484
9.8 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.… 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-rhv5-3hrm-5qhp
9.1 (3.1)
Missing Authorization vulnerability in Kapil Paul Payment Gateway bKash for WC woo-payment-bkash al… 2026-01-22T18:30:33Z 2026-01-27T00:31:10Z
ghsa-rfx9-xhfj-575x
6.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-mv32-8gjm-m39m
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-m3hc-cvmh-fj5g
8.8 (3.1)
Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configur… 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-j5g5-7mch-jcrp
9.8 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.Th… 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-fx32-vc85-q9x8
6.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-8qwx-32rr-mphx
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T18:30:33Z 2026-01-27T00:31:10Z
ghsa-8fgr-f6c7-2f3p
5.4 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-847h-pfgv-f8c6
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.T… 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ghsa-7m58-f7rw-34w4
6.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:32Z 2026-01-27T00:31:10Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-29013 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.450570Z
gsd-2024-29498 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.450285Z
gsd-2024-29239 Improper neutralization of special elements used in an SQL command ('SQL Injection') vuln… 2024-04-02T05:02:57.449830Z
gsd-2024-29202 JumpServer is an open source bastion host and an operation and maintenance security audit… 2024-04-02T05:02:57.449040Z
gsd-2024-29814 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.448522Z
gsd-2024-29809 The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is… 2024-04-02T05:02:57.447884Z
gsd-2024-29292 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.447331Z
gsd-2024-29710 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.447057Z
gsd-2024-29179 phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and oth… 2024-04-02T05:02:57.446553Z
gsd-2024-29580 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.446099Z
gsd-2024-29219 Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY … 2024-04-02T05:02:57.445834Z
gsd-2024-29700 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.445568Z
gsd-2024-29628 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.445305Z
gsd-2024-29236 Improper neutralization of special elements used in an SQL command ('SQL Injection') vuln… 2024-04-02T05:02:57.444785Z
gsd-2024-29205 An Improper Check for Unusual or Exceptional Conditions vulnerability in the web componen… 2024-04-02T05:02:57.444251Z
gsd-2024-29770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.443798Z
gsd-2024-29445 An issue was discovered in ROS2 (Robot Operating System 2) Humble Hawksbill in ROS_VERSIO… 2024-04-02T05:02:57.443436Z
gsd-2024-29311 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.443179Z
gsd-2024-29020 JumpServer is an open source bastion host and an operation and maintenance security audit… 2024-04-02T05:02:57.442719Z
gsd-2024-29767 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-04-02T05:02:57.442173Z
gsd-2024-29149 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.441822Z
gsd-2024-29731 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.441573Z
gsd-2024-29294 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.441320Z
gsd-2024-29591 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.441006Z
gsd-2024-29609 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.440739Z
gsd-2024-29463 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.440483Z
gsd-2024-29523 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.440222Z
gsd-2024-29070 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.439973Z
gsd-2024-29785 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.439710Z
gsd-2024-29570 The format of the source doesn't require a description, click on the link for more details. 2024-04-02T05:02:57.439451Z
ID Description Published Updated
mal-2025-189419 Malicious code in sedna-semantic-release-meissa-winston (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189418 Malicious code in sedna-rigel-package-xenos (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189417 Malicious code in sedna-request-dysonswarm-enif (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189416 Malicious code in sedna-palynology-aquarius-lithosphere (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189415 Malicious code in sedna-nova-readable-levels (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189414 Malicious code in sedna-nextjs-baryon-ceres (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189413 Malicious code in sedna-json-yildun-helios (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189412 Malicious code in sedna-jest-init-delphinus (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189411 Malicious code in sedna-geodynamo-holography-paleontology (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189410 Malicious code in sedna-enif-fusion-colors (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189409 Malicious code in sedimentology-spinner-gravity-blueshift (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189408 Malicious code in sedimentology-ablation-meteor-xml (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189407 Malicious code in sed-sigma-mock-finally-virtualize (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189406 Malicious code in sed-sigma-encrypt-catch-warn (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189405 Malicious code in sed-shell-cat-encrypt-parse (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189404 Malicious code in sed-sed-link-data-root (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189403 Malicious code in sed-secure-rain-water-omicron (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189402 Malicious code in sed-route-encrypt-refactor-public (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189401 Malicious code in sed-promise-book-sun-lambda (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189400 Malicious code in sed-node-shell-long-authorize (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189399 Malicious code in sed-float-bad-void-stack (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189398 Malicious code in secure-phi-web-yaml-socket (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189397 Malicious code in secure-old-deploy-resolve-encode (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189396 Malicious code in secure-eta-throw-index-fork (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189395 Malicious code in secure-compress-phi-bash-orchestrate (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189394 Malicious code in secure-big-user-unix-private (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189393 Malicious code in scripts-yaml-janus-gacrux (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189392 Malicious code in scripts-thermochronology-corvus-stop (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189391 Malicious code in scripts-shelljs-quark-gridsome (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-189390 Malicious code in scripts-private-frontend-fornax (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
ID Description Published Updated
wid-sec-w-2022-2228 binutils: Schwachstelle ermöglicht Denial of Service 2022-12-05T23:00:00.000+00:00 2024-06-19T22:00:00.000+00:00
wid-sec-w-2024-1407 Moodle: Mehrere Schwachstellen 2024-06-18T22:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2024-1405 Atlassian Jira Software: Schwachstelle ermöglicht Offenlegung von Informationen 2024-06-18T22:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2024-1401 Atlassian Fisheye/Crucible: Schwachstelle ermöglicht Denial of Service 2024-06-18T22:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2024-1400 Huawei Home-Router: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2024-06-18T22:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2024-1382 Progress Software Sitefinity: Schwachstelle ermöglicht Cross-Site Scripting 2024-06-16T22:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2022-1750 GNU libc: Schwachstelle ermöglicht Denial of Service 2021-02-24T23:00:00.000+00:00 2024-06-18T22:00:00.000+00:00
wid-sec-w-2024-1397 Rancher: Mehrere Schwachstellen 2024-06-17T22:00:00.000+00:00 2024-06-17T22:00:00.000+00:00
wid-sec-w-2024-1395 VMware vCenter Server: Mehrere Schwachstellen 2024-06-17T22:00:00.000+00:00 2024-06-17T22:00:00.000+00:00
wid-sec-w-2024-1393 Rückruf: 7-Zip: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2022-04-18T22:00:00.000+00:00 2024-06-17T22:00:00.000+00:00
wid-sec-w-2024-1231 Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2024-05-23T22:00:00.000+00:00 2024-06-17T22:00:00.000+00:00
wid-sec-w-2024-1198 Google Chrome und Microsoft Edge: Mehrere Schwachstellen 2024-05-21T22:00:00.000+00:00 2024-06-17T22:00:00.000+00:00
wid-sec-w-2024-1391 D-LINK Wireless Router: Mehrere Schwachstellen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1390 NetApp StorageGRID: Schwachstelle ermöglicht Offenlegung von Informationen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1389 Nextcloud: Mehrere Schwachstellen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1388 Linux Kernel: Mehrere Schwachstellen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1385 SonarSource SonarQube: Schwachstelle ermöglicht Offenlegung von Informationen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1383 Kibana: Schwachstelle ermöglicht Darstellen falscher Informationen 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1381 libarchive: Schwachstelle ermöglicht Codeausführung 2024-06-16T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1199 Ivanti Endpoint Manager: Mehrere Schwachstellen ermöglichen Codeausführung 2024-05-21T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1194 Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2024-05-20T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2023-3097 LibreOffice: Mehrere Schwachstellen 2023-12-11T23:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2023-2197 QEMU: Mehrere Schwachstellen 2023-08-28T22:00:00.000+00:00 2024-06-16T22:00:00.000+00:00
wid-sec-w-2024-1380 Rockwell Automation FactoryTalk View SE: Mehrere Schwachstellen 2024-06-13T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1379 Checkmk: Schwachstelle ermöglicht Cross-Site Scripting 2024-06-13T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1378 Mozilla Firefox for iOS: Mehrere Schwachstellen 2024-06-13T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1377 Microsoft Edge: Mehrere Schwachstellen 2024-06-13T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1376 Kibana: Schwachstelle ermöglicht Denial of Service 2024-06-13T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1373 Irfan Skiljan IrfanView: Mehrere Schwachstellen ermöglichen Codeausführung 2024-06-12T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
wid-sec-w-2024-1359 Pixel Patchday Juni 2024: Mehrere Schwachstellen 2024-06-11T22:00:00.000+00:00 2024-06-13T22:00:00.000+00:00
ID Description Published Updated
rhsa-2023:0952 Red Hat Security Advisory: python-setuptools security update 2023-02-28T08:24:22+00:00 2026-01-21T22:40:29+00:00
rhsa-2023:0835 Red Hat Security Advisory: python-setuptools security update 2023-02-21T09:25:56+00:00 2026-01-21T22:40:25+00:00
rhsa-2023:0777 Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update 2023-02-23T00:01:27+00:00 2026-01-21T22:40:18+00:00
rhsa-2023:0697 Red Hat Security Advisory: OpenShift Container Platform 4.10.52 security update 2023-02-15T15:46:22+00:00 2026-01-21T22:40:04+00:00
rhsa-2023:0577 Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.3.7 security update 2023-02-16T12:57:15+00:00 2026-01-21T22:39:58+00:00
rhsa-2023:0560 Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update 2023-02-08T18:41:32+00:00 2026-01-21T22:39:49+00:00
rhsa-2023:0469 Red Hat Security Advisory: Red Hat Integration Camel Extensions For Quarkus 2.13.2 2023-01-26T09:42:15+00:00 2026-01-21T22:39:42+00:00
rhsa-2023:0261 Red Hat Security Advisory: Satellite 6.12.1 Async Security Update 2023-01-18T14:55:53+00:00 2026-01-21T22:39:35+00:00
rhsa-2023:0189 Red Hat Security Advisory: Red Hat AMQ Streams 2.3.0 release and security update 2023-01-17T11:47:38+00:00 2026-01-21T22:39:34+00:00
rhsa-2022:9058 Red Hat Security Advisory: prometheus-jmx-exporter security update 2022-12-15T15:28:48+00:00 2026-01-21T22:39:31+00:00
rhsa-2022:9032 Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.3.4 security update 2022-12-15T12:39:51+00:00 2026-01-21T22:39:29+00:00
rhsa-2022:9023 Red Hat Security Advisory: Red Hat build of Quarkus 2.13.5 release and security update 2022-12-14T13:15:01+00:00 2026-01-21T22:39:29+00:00
rhsa-2022:8889 Red Hat Security Advisory: Openshift Logging 5.3.14 bug fix release and security update 2022-12-08T17:25:26+00:00 2026-01-21T22:39:28+00:00
rhsa-2022:8876 Red Hat Security Advisory: Red Hat AMQ Broker 7.10.2 release and security update 2022-12-07T08:19:44+00:00 2026-01-21T22:39:27+00:00
rhsa-2022:6985 Red Hat Security Advisory: nodejs:14 security and bug fix update 2022-10-18T09:06:50+00:00 2026-01-21T22:39:05+00:00
rhsa-2022:6941 Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP1 and security update 2022-10-13T11:14:22+00:00 2026-01-21T22:39:02+00:00
rhsa-2022:6825 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update 2022-10-05T16:46:28+00:00 2026-01-21T22:39:01+00:00
rhsa-2022:6823 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update 2022-10-05T16:35:58+00:00 2026-01-21T22:38:59+00:00
rhsa-2022:6822 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update 2022-10-05T17:03:10+00:00 2026-01-21T22:38:58+00:00
rhsa-2022:6820 Red Hat Security Advisory: prometheus-jmx-exporter security update 2022-10-06T07:40:42+00:00 2026-01-21T22:38:58+00:00
rhsa-2022:6821 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update 2022-10-05T16:36:05+00:00 2026-01-21T22:38:56+00:00
rhsa-2022:6757 Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.3.3 security update 2022-10-05T14:50:01+00:00 2026-01-21T22:38:56+00:00
rhsa-2022:6448 Red Hat Security Advisory: nodejs:14 security and bug fix update 2022-09-13T09:48:25+00:00 2026-01-21T22:38:52+00:00
rhsa-2022:6389 Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security and bug fix update 2022-09-08T07:45:42+00:00 2026-01-21T22:38:52+00:00
rhba-2023:3300 Red Hat Bug Fix Advisory: Release of Bug Advisories for the Jenkins image and Jenkins agent base image 2023-05-24T18:51:56+00:00 2026-01-21T22:38:32+00:00
rhba-2023:0564 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.26 packages update 2023-02-07T16:58:44+00:00 2026-01-21T22:38:27+00:00
rhba-2023:0030 Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images 2023-01-04T21:43:37+00:00 2026-01-21T22:38:25+00:00
rhsa-2022:6184 Red Hat Security Advisory: Self Node Remediation Operator 0.4.1 security update 2022-08-25T05:49:45+00:00 2026-01-21T22:30:51+00:00
rhsa-2022:6182 Red Hat Security Advisory: Openshift Logging Security and Bug Fix update (5.3.11) 2022-09-06T13:21:38+00:00 2026-01-21T22:30:45+00:00
rhsa-2022:6517 Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview 2022-09-14T12:46:52+00:00 2026-01-21T22:30:41+00:00
ID Description Published Updated
msrc_cve-2020-8565 Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 2020-12-02T00:00:00.000Z 2025-03-27T00:00:00.000Z
msrc_cve-2025-26645 Remote Desktop Client Remote Code Execution Vulnerability 2025-03-11T07:00:00.000Z 2025-03-23T07:00:00.000Z
msrc_cve-2025-25008 Windows Server Elevation of Privilege Vulnerability 2025-03-11T07:00:00.000Z 2025-03-23T07:00:00.000Z
msrc_cve-2025-29795 Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability 2025-03-11T07:00:00.000Z 2025-03-21T07:00:00.000Z
msrc_cve-2025-29814 Microsoft Partner Center Elevation of Privilege Vulnerability 2025-03-11T07:00:00.000Z 2025-03-20T07:00:00.000Z
msrc_cve-2025-29807 Microsoft Dataverse Remote Code Execution Vulnerability 2025-03-11T07:00:00.000Z 2025-03-20T07:00:00.000Z
msrc_cve-2024-49119 Windows Remote Desktop Services Remote Code Execution Vulnerability 2024-12-10T08:00:00.000Z 2025-03-19T07:00:00.000Z
msrc_cve-2023-34410 An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate. 2023-06-01T07:00:00.000Z 2025-03-19T00:00:00.000Z
msrc_cve-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). 2025-02-02T00:00:00.000Z 2025-03-18T00:00:00.000Z
msrc_cve-2024-26651 sr9800: Add check for usbnet_get_endpoints 2024-03-02T08:00:00.000Z 2025-03-17T00:00:00.000Z
msrc_cve-2025-21716 vxlan: Fix uninit-value in vxlan_vnifilter_dump() 2025-02-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21681 openvswitch: fix lockup on tx to unregistering netdev with carrier 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21676 net: fec: handle page_pool_dev_alloc_pages error 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21675 net/mlx5: Clear port select structure when fail to create 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21674 net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21673 smb: client: fix double free of TCP_Server_Info::hostname 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21670 vsock/bpf: return early if transport is not assigned 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21667 iomap: avoid avoid truncating 64-bit offset to 32 bits 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21658 btrfs: avoid NULL pointer dereference if no valid extent tree 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21642 mptcp: sysctl: sched: avoid using current->nsproxy 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21640 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2025-21639 sctp: sysctl: rto_min/max: avoid using current->nsproxy 2025-01-02T00:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-49769 Waitress has a denial of service leading to high CPU usage/resource exhaustion 2024-10-01T07:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-39695 Exiv2 has an out-of-bounds read in AsfVideo::streamProperties 2024-07-01T07:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-36039 PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. 2024-05-02T07:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-34403 An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string. 2024-05-02T07:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-34402 An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keys or values, with a resultant buffer overflow. 2024-05-02T07:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-30161 In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.) 2024-03-02T08:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-25112 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2 2024-02-02T08:00:00.000Z 2025-03-14T00:00:00.000Z
msrc_cve-2024-24826 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2 2024-02-02T08:00:00.000Z 2025-03-14T00:00:00.000Z
ID Description Updated
var-202212-1308 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.2… 2025-04-21T23:37:38.917000Z
var-201703-0032 Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a … 2025-04-21T23:37:22.585000Z
var-201703-0263 A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4… 2025-04-21T23:37:22.504000Z
var-202212-1442 An out-of-bounds write issue was addressed with improved input validation. This issue is … 2025-04-21T23:35:59.640000Z
var-202212-1685 An out-of-bounds write issue was addressed with improved input validation. This issue is … 2025-04-21T23:35:34.996000Z
var-202212-1249 An out-of-bounds access issue was addressed with improved bounds checking. This issue is … 2025-04-21T23:34:38.131000Z
var-201704-0078 Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveragin… 2025-04-21T23:34:04.467000Z
var-201704-0141 Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext. Si… 2025-04-21T23:34:04.430000Z
var-202212-1425 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vuln… 2025-04-21T23:31:16.951000Z
var-202212-1488 An out-of-bounds write issue was addressed with improved input validation. This issue is … 2025-04-21T23:31:16.923000Z
var-201701-0721 A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attac… 2025-04-21T23:29:56.482000Z
var-201703-0893 A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 thro… 2025-04-21T23:29:56.168000Z
var-202212-1496 TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vuln… 2025-04-21T23:23:32.130000Z
var-202212-1531 A logic issue was addressed with improved state management. This issue is fixed in tvOS 1… 2025-04-21T23:14:02.284000Z
var-202212-1533 A memory corruption issue was addressed with improved input validation. This issue is fix… 2025-04-21T23:10:29.706000Z
var-202212-1440 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 an… 2025-04-21T22:59:35.309000Z
var-202212-1246 An out-of-bounds write issue was addressed with improved input validation. This issue is … 2025-04-21T22:56:41.990000Z
var-202212-1557 The issue was addressed with improved memory handling. This issue is fixed in macOS Monte… 2025-04-21T22:38:24.501000Z
var-202212-1441 The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2… 2025-04-21T22:27:46.967000Z
var-202212-1387 The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and … 2025-04-21T22:27:36.028000Z
var-202212-1412 A memory corruption issue was addressed with improved state management. This issue is fix… 2025-04-21T22:26:29.461000Z
var-202212-1248 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 an… 2025-04-21T22:19:14.740000Z
var-202212-1297 The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 an… 2025-04-21T22:16:52.497000Z
var-202212-1411 A use after free issue was addressed with improved memory management. This issue is fixed… 2025-04-21T22:05:22.790000Z
var-202212-1358 The issue was addressed with improved memory handling. This issue is fixed in macOS Monte… 2025-04-21T21:54:36.109000Z
var-202212-1331 This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS… 2025-04-21T21:52:12.142000Z
var-202212-1410 Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iO… 2025-04-21T21:46:27.020000Z
var-202212-1466 A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvO… 2025-04-21T21:35:20.743000Z
var-202212-1216 The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, … 2025-04-21T21:14:08.270000Z
var-202212-1560 A race condition was addressed with additional validation. This issue is fixed in tvOS 16… 2025-04-21T21:04:10.128000Z
ID Description Updated
ID Description Published Updated
suse-su-2023:4209-1 Security update for webkit2gtk3 2023-10-26T08:24:56Z 2023-10-26T08:24:56Z
suse-su-2023:4208-1 Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP5) 2023-10-26T08:24:27Z 2023-10-26T08:24:27Z
suse-su-2023:4207-1 Security update for nodejs18 2023-10-26T08:24:10Z 2023-10-26T08:24:10Z
suse-su-2023:4204-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP5) 2023-10-25T18:03:46Z 2023-10-25T18:03:46Z
suse-su-2023:4201-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4) 2023-10-25T10:10:01Z 2023-10-25T10:10:01Z
suse-su-2023:4200-1 Security update for nghttp2 2023-10-25T10:07:49Z 2023-10-25T10:07:49Z
suse-su-2023:4199-1 Security update for nghttp2 2023-10-25T10:01:49Z 2023-10-25T10:01:49Z
suse-su-2023:4198-1 Security update for java-11-openjdk 2023-10-25T09:59:32Z 2023-10-25T09:59:32Z
suse-ru-2023:4192-1 Recommended update for libssh2_org 2023-10-25T08:35:13Z 2023-10-25T08:35:13Z
suse-su-2023:4190-1 Security update for openssl-3 2023-10-25T02:34:34Z 2023-10-25T02:34:34Z
suse-su-2023:4189-1 Security update for openssl-3 2023-10-25T02:34:15Z 2023-10-25T02:34:15Z
suse-su-2023:4187-1 Security update for poppler 2023-10-24T14:53:42Z 2023-10-24T14:53:42Z
suse-su-2023:4185-1 Security update for xen 2023-10-24T14:53:12Z 2023-10-24T14:53:12Z
suse-su-2023:4184-1 Security update for xen 2023-10-24T14:52:50Z 2023-10-24T14:52:50Z
suse-su-2023:4183-1 Security update for xen 2023-10-24T14:52:38Z 2023-10-24T14:52:38Z
suse-su-2023:4176-1 Security update for ruby2.5 2023-10-24T13:35:43Z 2023-10-24T13:35:43Z
suse-su-2023:4175-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) 2023-10-24T13:17:25Z 2023-10-24T13:17:25Z
suse-su-2023:4174-1 Security update for xen 2023-10-24T10:36:52Z 2023-10-24T10:36:52Z
suse-su-2023:4166-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) 2023-10-24T08:05:11Z 2023-10-24T08:05:11Z
suse-su-2023:4165-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5) 2023-10-24T08:05:05Z 2023-10-24T08:05:05Z
suse-su-2023:4164-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5) 2023-10-24T08:05:00Z 2023-10-24T08:05:00Z
suse-su-2023:4163-1 Security update for netty, netty-tcnative 2023-10-24T08:04:12Z 2023-10-24T08:04:12Z
suse-su-2023:3563-2 Security update for icu73_2 2023-10-23T19:30:42Z 2023-10-23T19:30:42Z
suse-su-2023:4162-1 Security update for gcc13 2023-10-23T13:33:48Z 2023-10-23T13:33:48Z
suse-su-2023:4161-1 Security update for fwupdate 2023-10-23T12:09:42Z 2023-10-23T12:09:42Z
suse-su-2023:4160-1 Security update for suse-module-tools 2023-10-23T07:55:18Z 2023-10-23T07:55:18Z
suse-su-2023:4159-1 Security update for suse-module-tools 2023-10-23T07:53:44Z 2023-10-23T07:53:44Z
suse-su-2023:4158-1 Security update for suse-module-tools 2023-10-23T07:53:09Z 2023-10-23T07:53:09Z
suse-su-2023:4157-1 Security update for python-urllib3 2023-10-23T07:46:00Z 2023-10-23T07:46:00Z
suse-su-2023:4155-1 Security update for nodejs18 2023-10-23T07:18:54Z 2023-10-23T07:18:54Z
ID Description Published Updated
opensuse-su-2023:0334-1 Security update for python-bugzilla 2023-10-27T14:02:49Z 2023-10-27T14:02:49Z
opensuse-su-2023:0329-1 Security update for sox 2023-10-26T11:49:08Z 2023-10-26T11:49:08Z
opensuse-su-2023:0328-1 Security update for sox 2023-10-26T11:49:05Z 2023-10-26T11:49:05Z
opensuse-su-2023:0325-1 Security update for chromium 2023-10-26T09:45:27Z 2023-10-26T09:45:27Z
opensuse-su-2023:0310-1 Security update for python-Django 2023-10-20T22:01:27Z 2023-10-20T22:01:27Z
opensuse-su-2023:0308-1 Security update for chromium 2023-10-20T10:52:45Z 2023-10-20T10:52:45Z
opensuse-su-2023:0307-1 Security update for bluetuith 2023-10-20T10:01:51Z 2023-10-20T10:01:51Z
opensuse-su-2023:0306-1 Security update for rxvt-unicode 2023-10-20T10:01:47Z 2023-10-20T10:01:47Z
opensuse-su-2023:0304-1 Security update for exim 2023-10-18T12:24:07Z 2023-10-18T12:24:07Z
opensuse-su-2023:0303-1 Security update for exim 2023-10-18T12:24:03Z 2023-10-18T12:24:03Z
opensuse-su-2023:0300-1 Security update for chromium 2023-10-13T08:14:00Z 2023-10-13T08:14:00Z
opensuse-su-2023:0298-1 Security update for opera 2023-10-11T07:10:39Z 2023-10-11T07:10:39Z
opensuse-su-2023:0297-1 Security update for opera 2023-10-11T07:10:18Z 2023-10-11T07:10:18Z
opensuse-su-2023:0293-1 Security update for exim 2023-10-05T09:26:19Z 2023-10-05T09:26:19Z
opensuse-su-2023:0292-1 Security update for chromium 2023-10-05T07:44:24Z 2023-10-05T07:44:24Z
opensuse-su-2023:0285-1 Security update for roundcubemail 2023-10-02T10:01:50Z 2023-10-02T10:01:50Z
opensuse-su-2023:0279-1 Security update for python-bugzilla 2023-10-02T09:08:01Z 2023-10-02T09:08:01Z
opensuse-su-2023:0278-1 Security update for seamonkey 2023-10-02T09:07:31Z 2023-10-02T09:07:31Z
opensuse-su-2023:0277-1 Security update for chromium 2023-09-29T07:34:25Z 2023-09-29T07:34:25Z
opensuse-su-2023:0275-1 Security update for cacti, cacti-spine 2023-09-26T13:31:33Z 2023-09-26T13:31:33Z
opensuse-su-2023:0272-1 Security update for python-CairoSVG 2023-09-25T22:02:13Z 2023-09-25T22:02:13Z
opensuse-su-2023:0271-1 Security update for python-GitPython 2023-09-25T22:02:02Z 2023-09-25T22:02:02Z
opensuse-su-2023:0270-1 Security update for Cadence 2023-09-25T22:01:59Z 2023-09-25T22:01:59Z
opensuse-su-2023:0269-1 Security update for modsecurity 2023-09-25T22:01:56Z 2023-09-25T22:01:56Z
opensuse-su-2023:0267-1 Security update for tcpreplay 2023-09-25T22:01:50Z 2023-09-25T22:01:50Z
opensuse-su-2023:0260-1 Security update for python-CairoSVG 2023-09-25T12:02:25Z 2023-09-25T12:02:25Z
opensuse-su-2023:0259-1 Security update for python-GitPython 2023-09-25T12:02:14Z 2023-09-25T12:02:14Z
opensuse-su-2023:0257-1 Security update for modsecurity 2023-09-25T12:02:08Z 2023-09-25T12:02:08Z
opensuse-su-2023:0253-1 Security update for renderdoc 2023-09-25T10:02:37Z 2023-09-25T10:02:37Z
opensuse-su-2023:0251-1 Security update for opera 2023-09-23T12:02:01Z 2023-09-23T12:02:01Z
ID Description Published Updated
cnvd-2025-16826 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16826) 2025-07-24 2025-07-25
cnvd-2025-16825 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16825) 2025-07-24 2025-07-25
cnvd-2025-16824 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16824) 2025-07-24 2025-07-25
cnvd-2025-16823 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16823) 2025-07-24 2025-07-25
cnvd-2025-16822 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16822) 2025-07-24 2025-07-25
cnvd-2025-16821 WordPress Latest Post Accordian Slider plugin跨站请求伪造漏洞 2025-07-25 2025-07-25
cnvd-2025-16820 WordPress Extensions For CF7 Plugin路径遍历漏洞 2025-07-25 2025-07-25
cnvd-2025-16819 WordPress bSecure plugin权限提升漏洞 2025-07-25 2025-07-25
cnvd-2025-16818 WordPress Birth Chart Compatibility plugin信息泄露漏洞 2025-07-25 2025-07-25
cnvd-2025-16817 WordPress Ajax Load More plugin授权问题漏洞 2025-07-25 2025-07-25
cnvd-2025-16816 Tenda FH451 formPPTPUserSetting函数缓冲区溢出漏洞 2025-07-25 2025-07-25
cnvd-2025-16815 Tenda FH451 formPPTPDClient函数缓冲区溢出漏洞 2025-07-25 2025-07-25
cnvd-2025-16814 Tenda FH451 formP2pListFilter函数缓冲区溢出漏洞 2025-07-25 2025-07-25
cnvd-2025-16813 Tenda FH451 formNatStaticSetting函数缓冲区溢出漏洞 2025-07-25 2025-07-25
cnvd-2025-16812 Tenda AC6缓冲区溢出漏洞 2025-07-25 2025-07-25
cnvd-2025-16811 IrfanView CADImage Plugin缓冲区溢出漏洞(CNVD-2025-16811) 2025-07-23 2025-07-25
cnvd-2025-15905 北京神州视翰科技有限公司多媒体综合业务显示系统存在SQL注入漏洞(CNVD-C-2025-319811) 2025-06-10 2025-07-25
cnvd-2025-17302 WeGIA操作系统命令注入漏洞 2025-06-24 2025-07-24
cnvd-2025-16959 Apache Jena输入验证错误漏洞 2025-07-23 2025-07-24
cnvd-2025-16953 Microsoft Windows资源管理错误漏洞(CNVD-2025-16953) 2025-07-17 2025-07-24
cnvd-2025-16952 Microsoft Windows资源管理错误漏洞(CNVD-2025-16952) 2025-07-21 2025-07-24
cnvd-2025-16951 Microsoft Windows资源管理错误漏洞(CNVD-2025-16951) 2025-07-21 2025-07-24
cnvd-2025-16950 Microsoft Windows资源管理错误漏洞(CNVD-2025-16950) 2025-07-21 2025-07-24
cnvd-2025-16949 Microsoft Windows资源管理错误漏洞(CNVD-2025-16949) 2025-07-21 2025-07-24
cnvd-2025-16948 Microsoft Windows资源管理错误漏洞(CNVD-2025-16948) 2025-07-21 2025-07-24
cnvd-2025-16947 Microsoft Windows资源管理错误漏洞(CNVD-2025-16947) 2025-07-21 2025-07-24
cnvd-2025-16946 Microsoft Windows资源管理错误漏洞(CNVD-2025-16946) 2025-07-21 2025-07-24
cnvd-2025-16945 Microsoft Windows资源管理错误漏洞(CNVD-2025-16945) 2025-07-21 2025-07-24
cnvd-2025-16944 Microsoft Windows信息泄露漏洞(CNVD-2025-16944) 2025-07-21 2025-07-24
cnvd-2025-16857 Tenda AC500栈缓冲区溢出漏洞 2025-07-21 2025-07-24
ID Description Published Updated
certfr-2020-avi-044 Vulnérabilité dans Cisco Application Policy Infrastructure Controller 2020-01-17T00:00:00.000000 2020-01-17T00:00:00.000000
certfr-2020-avi-043 Multiples vulnérabilités dans Google Chrome 2020-01-17T00:00:00.000000 2020-01-17T00:00:00.000000
certfr-2020-avi-042 Multiples vulnérabilités dans FoxIT Reader et PhantomPDF 2020-01-16T00:00:00.000000 2020-01-16T00:00:00.000000
certfr-2020-avi-041 Multiples vulnérabilités dans Wireshark 2020-01-16T00:00:00.000000 2020-01-16T00:00:00.000000
certfr-2020-avi-040 Vulnérabilité dans Fortinet FortiSIEM 2020-01-16T00:00:00.000000 2020-01-16T00:00:00.000000
certfr-2020-avi-039 Multiples vulnérabilités dans les produits Symantec 2020-01-16T00:00:00.000000 2020-01-16T00:00:00.000000
certfr-2020-avi-038 Multiples vulnérabilités dans Oracle Virtualization 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-037 Multiples vulnérabilités dans Oracle Systems 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-036 Multiples vulnérabilités dans Oracle MySQL 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-035 Multiples vulnérabilités dans Oracle Java SE 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-034 Multiples vulnérabilités dans Oracle Database Server 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-033 Multiples vulnérabilités dans les produits Intel 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-032 Vulnérabilité dans VMware Tools 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-031 Vulnérabilité dans Xen 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-030 Multiples vulnérabilités dans le noyau Linux de Red Hat 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-029 Multiples vulnérabilités dans le noyau Linux de SUSE 2020-01-15T00:00:00.000000 2020-01-15T00:00:00.000000
certfr-2020-avi-028 Multiples vulnérabilités dans les produits Microsoft 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-027 Multiples vulnérabilités dans Microsoft .Net 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-026 Multiples vulnérabilités dans Microsoft Windows 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-025 Multiples vulnérabilités dans Microsoft Office 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-024 Vulnérabilité dans Microsoft IE 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-023 Multiples vulnérabilités dans les produits Siemens 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-022 Vulnérabilité dans Schneider Electric MSX Configurator 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-021 Vulnérabilité dans GitLab 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-020 Vulnérabilité dans Fortinet FortiSIEM 2020-01-14T00:00:00.000000 2020-01-14T00:00:00.000000
certfr-2020-avi-019 Multiples vulnérabilités dans Mozilla Thunderbird 2020-01-13T00:00:00.000000 2020-01-13T00:00:00.000000
certfr-2020-avi-018 Vulnérabilité dans Citrix SD-WAN 2020-01-10T00:00:00.000000 2020-01-10T00:00:00.000000
certfr-2020-avi-017 Vulnérabilité dans Vmware Workspace ONE 2020-01-10T00:00:00.000000 2020-01-10T00:00:00.000000
certfr-2020-avi-016 Vulnérabilité dans Mozilla Firefox 2020-01-09T00:00:00.000000 2020-01-09T00:00:00.000000
certfr-2020-avi-015 Multiples vulnérabilités dans les produits Juniper 2020-01-09T00:00:00.000000 2020-01-09T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated