Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68987 |
9.8 (3.1)
|
WordPress Cinerama - A WordPress Theme for Movie Studi… |
Edge-Themes |
Cinerama - A WordPress Theme for Movie Studios and Filmmakers |
2025-12-30T10:47:49.947Z | 2026-01-20T14:28:29.291Z |
| CVE-2025-68984 |
9.8 (3.1)
|
WordPress Puca theme <= 2.6.39 - Local File Inclusion … |
thembay |
Puca |
2025-12-30T10:47:49.577Z | 2026-01-20T14:28:29.289Z |
| CVE-2025-68988 |
7.5 (3.1)
|
WordPress E-Invoice App Malaysia plugin <= 1.1.0 - Sen… |
o2oe |
E-Invoice App Malaysia |
2025-12-30T10:47:50.131Z | 2026-01-20T14:28:29.267Z |
| CVE-2025-68985 |
9.8 (3.1)
|
WordPress Aora theme <= 1.3.15 - Local File Inclusion … |
thembay |
Aora |
2025-12-30T10:47:49.767Z | 2026-01-20T14:28:29.253Z |
| CVE-2025-68983 |
9.8 (3.1)
|
WordPress Greenmart theme <= 4.2.11 - Local File Inclu… |
thembay |
Greenmart |
2025-12-30T10:47:49.392Z | 2026-01-20T14:28:29.217Z |
| CVE-2025-68876 |
7.1 (3.1)
|
WordPress Invelity SPS connect plugin <= 1.0.8 - Refle… |
INVELITY |
Invelity SPS connect |
2025-12-29T16:05:23.287Z | 2026-01-20T14:28:29.160Z |
| CVE-2025-68982 |
8.1 (3.1)
|
WordPress DesignThemes LMS Addon plugin <= 2.6 - Broke… |
designthemes |
DesignThemes LMS Addon |
2025-12-30T10:47:49.216Z | 2026-01-20T14:28:29.159Z |
| CVE-2025-68897 |
9.9 (3.1)
|
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code … |
Mohammad I. Okfie |
IF AS Shortcode |
2025-12-29T15:55:13.564Z | 2026-01-20T14:28:29.145Z |
| CVE-2025-68887 |
7.1 (3.1)
|
WordPress WP-BusinessDirectory plugin <= 3.1.5 - Cross… |
CMSJunkie - WordPress Business Directory Plugins |
WP-BusinessDirectory |
2026-01-08T09:17:53.686Z | 2026-01-20T14:28:29.134Z |
| CVE-2025-68878 |
7.1 (3.1)
|
WordPress Advanced Custom CSS plugin <= 1.1.0 - Reflec… |
Prasadkirpekar |
Advanced Custom CSS |
2025-12-29T16:00:20.652Z | 2026-01-20T14:28:29.131Z |
| CVE-2025-68889 |
7.1 (3.1)
|
WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripti… |
Pinpoll |
Pinpoll |
2026-01-08T09:17:53.868Z | 2026-01-20T14:28:29.129Z |
| CVE-2025-68879 |
7.1 (3.1)
|
WordPress Content Grid Slider plugin <= 1.5 - Reflecte… |
Councilsoft |
Content Grid Slider |
2025-12-29T15:58:57.851Z | 2026-01-20T14:28:29.125Z |
| CVE-2025-68974 |
9.8 (3.1)
|
WordPress WordPress Social Login and Register plugin <… |
miniOrange |
WordPress Social Login and Register |
2025-12-30T10:47:47.632Z | 2026-01-20T14:28:29.124Z |
| CVE-2025-68874 |
7.1 (3.1)
|
WordPress Visitor Stats Widget plugin <= 1.5.0 - Refle… |
Shahjada |
Visitor Stats Widget |
2026-01-08T09:17:52.109Z | 2026-01-20T14:28:29.122Z |
| CVE-2025-68893 |
4.9 (3.1)
|
WordPress WordPress Image shrinker plugin <= 1.1.0 - S… |
HETWORKS |
WordPress Image shrinker |
2025-12-29T15:56:47.504Z | 2026-01-20T14:28:29.120Z |
| CVE-2025-68980 |
8.1 (3.1)
|
WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Bro… |
designthemes |
WeDesignTech Portfolio |
2025-12-30T10:47:48.858Z | 2026-01-20T14:28:29.119Z |
| CVE-2025-68890 |
6.1 (3.1)
|
WordPress e-shops plugin <= 1.0.4 - Reflected Cross Si… |
hands01 |
e-shops |
2026-01-08T09:17:54.055Z | 2026-01-20T14:28:29.113Z |
| CVE-2025-68979 |
8.1 (3.1)
|
WordPress Google Calendar Events plugin <= 3.5.9 - Ins… |
SimpleCalendar |
Google Calendar Events |
2025-12-30T10:47:48.678Z | 2026-01-20T14:28:29.112Z |
| CVE-2025-68981 |
8.8 (3.1)
|
WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 … |
designthemes |
HomeFix Elementor Portfolio |
2025-12-30T10:47:49.035Z | 2026-01-20T14:28:29.097Z |
| CVE-2025-68877 |
7.5 (3.1)
|
WordPress CedCommerce Integration for Good Market plug… |
CedCommerce |
CedCommerce Integration for Good Market |
2025-12-29T16:03:22.206Z | 2026-01-20T14:28:29.096Z |
| CVE-2025-68875 |
5.4 (3.1)
|
WordPress Flaming Password Reset plugin <= 1.0.3 - Cro… |
jcaruso001 |
Flaming Password Reset |
2026-01-08T09:17:52.299Z | 2026-01-20T14:28:29.096Z |
| CVE-2025-68885 |
7.1 (3.1)
|
WordPress Custom Post Status plugin <= 1.1.0 - Cross S… |
Page Carbajal |
Custom Post Status |
2025-12-31T05:34:27.042Z | 2026-01-20T14:28:29.095Z |
| CVE-2025-68892 |
6.1 (3.1)
|
WordPress Scroll rss excerpt plugin <= 5.0 - Reflected… |
gopiplus@hotmail.com |
Scroll rss excerpt |
2026-01-08T09:17:54.424Z | 2026-01-20T14:28:29.092Z |
| CVE-2025-68978 |
6.1 (3.1)
|
WordPress DesignThemes Core plugin <= 1.6 - Cross Site… |
designthemes |
DesignThemes Core |
2025-12-30T10:47:48.485Z | 2026-01-20T14:28:29.078Z |
| CVE-2025-68867 |
6.5 (3.1)
|
WordPress Effect Maker plugin <= 1.2.1 - Cross Site Sc… |
anibalwainstein |
Effect Maker |
2026-01-08T09:17:51.313Z | 2026-01-20T14:28:29.078Z |
| CVE-2025-68976 |
8.8 (3.1)
|
WordPress Eagle Booking plugin <= 1.3.4.3 - Settings C… |
Eagle-Themes |
Eagle Booking |
2025-12-30T10:47:48.092Z | 2026-01-20T14:28:29.067Z |
| CVE-2025-68873 |
7.1 (3.1)
|
WordPress PRIMER by chloédigital plugin <= 1.0.25 - Re… |
chloédigital |
PRIMER by chloédigital |
2026-01-08T09:17:51.924Z | 2026-01-20T14:28:29.054Z |
| CVE-2025-68868 |
6.5 (3.1)
|
WordPress Wp Text Slider Widget plugin <= 1.0 - Cross … |
Codeaffairs |
Wp Text Slider Widget |
2025-12-29T16:12:32.664Z | 2026-01-20T14:28:29.039Z |
| CVE-2025-68977 |
6.1 (3.1)
|
WordPress DesignThemes Portfolio Addon plugin <= 1.5 -… |
designthemes |
DesignThemes Portfolio Addon |
2025-12-30T10:47:48.297Z | 2026-01-20T14:28:29.030Z |
| CVE-2025-68602 |
6.1 (3.1)
|
WordPress Accept Donations with PayPal plugin <= 1.5.1… |
Scott Paterson |
Accept Donations with PayPal |
2025-12-24T13:10:47.134Z | 2026-01-20T14:28:29.023Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-49465 |
7.8 (3.1)
|
blk-throttle: Set BIO_THROTTLED when bio has been throttled |
Linux |
Linux |
2025-02-26T02:13:10.975Z | 2026-01-19T12:17:39.645Z |
| CVE-2022-49711 |
7.8 (3.1)
|
bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bu… |
Linux |
Linux |
2025-02-26T02:24:28.224Z | 2026-01-19T12:17:41.156Z |
| CVE-2022-49168 |
7.8 (3.1)
|
btrfs: do not clean up repair bio if submit fails |
Linux |
Linux |
2025-02-26T01:55:26.532Z | 2026-01-19T12:17:37.297Z |
| CVE-2025-3460 |
7.7 (3.1)
|
ON Semiconductor Quantenna set_tx_pow Argument Injection |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:24.334Z | 2025-06-09T18:33:57.925Z |
| CVE-2025-3459 |
7.7 (3.1)
|
ON Semiconductor Quantenna transmit_file Argument Injection |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:09.918Z | 2025-06-09T18:36:35.345Z |
| CVE-2025-32459 |
7.7 (3.1)
|
ON Semiconductor Quantenna router_command.sh (in the s… |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:04:25.317Z | 2025-06-10T13:22:40.590Z |
| CVE-2025-32458 |
7.7 (3.1)
|
ON Semiconductor Quantenna router_command.sh (in the g… |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:04:12.492Z | 2025-06-10T13:23:10.764Z |
| CVE-2025-50505 |
7.8 (3.1)
|
Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) force… |
n/a |
n/a |
2025-10-07T00:00:00.000Z | 2026-01-21T14:12:55.381Z |
| CVE-2025-15113 |
9.3 (3.1)
8.4 (3.1)
|
Ksenia Security Lares 4.0 Home Automation 1.6 Remote C… |
Ksenia Security S.p.A. |
Ksenia Security Lares 4.0 Home Automation |
2025-12-30T22:41:46.694Z | 2026-01-21T14:38:48.930Z |
| CVE-2022-50905 |
6.1 (3.1)
9.8 (3.1)
|
e107 CMS v3.2.1 - Reflected XSS via Comment Flow |
e107 |
e107 CMS |
2026-01-13T22:51:48.032Z | 2026-01-21T14:38:26.972Z |
| CVE-2026-22813 |
9.4 (4.0)
|
Malicious website can execute commands on the local sy… |
anomalyco |
opencode |
2026-01-12T22:52:35.103Z | 2026-01-13T19:07:23.038Z |
| CVE-2026-22812 |
8.8 (3.1)
|
OpenCode's Unauthenticated HTTP Server Allows Arbitrar… |
anomalyco |
opencode |
2026-01-12T22:49:18.325Z | 2026-01-13T19:07:37.056Z |
| CVE-2025-67077 |
8.8 (3.1)
|
File upload vulnerability in Omnispace Agora Proj… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-16T16:11:11.814Z |
| CVE-2025-67076 |
7.5 (3.1)
|
Directory traversal vulnerability in Omnispace Ag… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-16T16:11:39.765Z |
| CVE-2025-67078 |
N/A
|
Cross site scripting (XSS) vulnerability in Omnis… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T15:16:33.707Z |
| CVE-2025-67079 |
9.8 (3.1)
|
File upload vulnerability in Omnispace Agora Proj… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T15:55:11.489Z |
| CVE-2026-22863 |
9.2 (4.0)
|
Deno node:crypto doesn't finalize cipher |
denoland |
deno |
2026-01-15T22:53:15.357Z | 2026-01-16T17:16:41.355Z |
| CVE-2026-22864 |
8.1 (3.1)
|
Deno has an incomplete fix for command-injection preve… |
denoland |
deno |
2026-01-15T22:58:52.463Z | 2026-01-16T17:16:02.143Z |
| CVE-2025-7424 |
7.5 (3.1)
|
Libxslt: type confusion in xmlnode.psvi between styles… |
GNOME |
libxslt |
2025-07-10T14:05:41.808Z | 2026-01-21T13:03:16.082Z |
| CVE-2025-61662 |
7.8 (3.1)
|
Grub2: missing unregister call for gettext command may… |
GNU |
grub2 |
2025-11-18T18:20:48.351Z | 2026-01-21T13:15:44.599Z |
| CVE-2025-4478 |
6.5 (3.1)
|
Gnome-remote-desktop: freerdp: unauthenticated rdp pac… |
|
|
2025-05-16T14:22:17.265Z | 2026-01-21T13:03:22.938Z |
| CVE-2024-3623 |
6.5 (3.1)
|
Mirror-registry: default database secret key stored in… |
|
|
2024-04-25T17:46:47.141Z | 2026-01-21T13:03:17.136Z |
| CVE-2023-6725 |
5.5 (3.1)
|
Tripleo-ansible: bind keys are world readable |
Red Hat |
Red Hat OpenStack Platform 17.1 for RHEL 8 |
2024-03-15T12:38:23.158Z | 2026-01-21T13:03:11.472Z |
| CVE-2025-60021 |
N/A
|
Apache bRPC: Remote command injection vulnerability in… |
Apache Software Foundation |
Apache bRPC |
2026-01-16T08:39:23.318Z | 2026-01-17T04:55:14.838Z |
| CVE-2025-68438 |
N/A
|
Apache Airflow: Secrets in rendered templates could co… |
Apache Software Foundation |
Apache Airflow |
2026-01-16T10:06:08.128Z | 2026-01-16T16:10:02.986Z |
| CVE-2025-5255 |
4.8 (4.0)
|
TCC Bypass via Dylib Injection in Phoenix Code |
Core.ai |
Phoenix Code |
2025-06-20T10:01:42.561Z | 2026-01-21T11:22:11.225Z |
| CVE-2026-24026 |
N/A
|
Not used | N/A | N/A | 2026-01-21T03:55:05.986Z | |
| CVE-2026-24025 |
N/A
|
Not used | N/A | N/A | 2026-01-21T03:55:06.713Z | |
| CVE-2026-24024 |
N/A
|
Not used | N/A | N/A | 2026-01-21T03:55:07.239Z | |
| CVE-2026-24023 |
N/A
|
Not used | N/A | N/A | 2026-01-21T03:55:07.710Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-39864 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-… | 2025-09-19T16:15:45.420 | 2026-01-20T20:41:47.730 |
| fkie_cve-2025-39865 | In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer derefere… | 2025-09-19T16:15:45.540 | 2026-01-20T20:41:32.020 |
| fkie_cve-2025-39869 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memor… | 2025-09-23T06:15:46.097 | 2026-01-20T20:41:15.407 |
| fkie_cve-2025-39870 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double fr… | 2025-09-23T06:15:46.240 | 2026-01-20T20:40:34.427 |
| fkie_cve-2025-39873 | In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_fr… | 2025-09-23T06:15:46.670 | 2026-01-20T20:33:41.183 |
| fkie_cve-2025-39876 | In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in … | 2025-09-23T06:15:47.087 | 2026-01-20T20:33:01.007 |
| fkie_cve-2025-39877 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-… | 2025-09-23T06:15:47.230 | 2026-01-20T20:29:36.387 |
| fkie_cve-2025-39880 | In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses … | 2025-09-23T06:15:47.663 | 2026-01-20T20:27:54.100 |
| fkie_cve-2025-23203 | Icinga Director is an Icinga config deployment tool. A Security vulnerability has been found starti… | 2025-03-26T14:15:32.250 | 2026-01-20T20:16:00.947 |
| fkie_cve-2025-10327 | A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerabi… | 2025-09-12T21:15:33.397 | 2026-01-20T20:16:00.163 |
| fkie_cve-2024-57440 | D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg … | 2025-03-20T17:15:37.550 | 2026-01-20T20:15:59.393 |
| fkie_cve-2022-50425 | In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_ua… | 2025-10-01T12:15:33.987 | 2026-01-20T20:14:12.247 |
| fkie_cve-2022-50426 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add… | 2025-10-01T12:15:34.120 | 2026-01-20T20:11:05.320 |
| fkie_cve-2025-14492 | RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… | 2025-12-23T22:15:50.380 | 2026-01-20T20:08:34.030 |
| fkie_cve-2025-14493 | RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… | 2025-12-23T22:15:50.510 | 2026-01-20T20:08:20.317 |
| fkie_cve-2025-14495 | RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… | 2025-12-23T22:15:50.757 | 2026-01-20T20:06:38.153 |
| fkie_cve-2025-14496 | RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… | 2025-12-23T22:15:50.883 | 2026-01-20T20:03:23.107 |
| fkie_cve-2025-14497 | RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… | 2025-12-23T22:15:51.010 | 2026-01-20T20:00:42.990 |
| fkie_cve-2025-15082 | A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file… | 2025-12-25T17:15:41.403 | 2026-01-20T19:54:27.513 |
| fkie_cve-2025-15083 | A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown fun… | 2025-12-25T18:15:40.173 | 2026-01-20T19:35:29.543 |
| fkie_cve-2025-11966 | In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled,… | 2025-10-22T15:15:31.730 | 2026-01-20T19:31:35.733 |
| fkie_cve-2025-15257 | A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability i… | 2025-12-30T17:15:42.003 | 2026-01-20T19:26:11.817 |
| fkie_cve-2026-0975 | Delta Electronics DIAView has Command Injection vulnerability. | 2026-01-16T06:15:51.187 | 2026-01-20T19:20:21.723 |
| fkie_cve-2026-22787 | html2pdf.js converts any webpage or element into a printable PDF entirely client-side. Prior to 0.1… | 2026-01-14T17:16:09.290 | 2026-01-20T19:15:54.353 |
| fkie_cve-2025-66019 | pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who us… | 2025-11-26T00:15:51.263 | 2026-01-20T19:15:49.413 |
| fkie_cve-2025-45731 | A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts … | 2025-07-24T14:15:35.427 | 2026-01-20T19:15:49.070 |
| fkie_cve-2021-36833 | Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in iberic… | 2022-05-20T20:15:09.747 | 2026-01-20T19:09:46.400 |
| fkie_cve-2025-14737 | Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent at… | 2025-12-18T18:15:45.027 | 2026-01-20T19:05:47.277 |
| fkie_cve-2025-65430 | An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as is_active=False af… | 2025-12-15T14:15:57.017 | 2026-01-20T19:02:34.783 |
| fkie_cve-2025-14549 | In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse Ope… | 2025-12-15T06:15:42.733 | 2026-01-20T18:58:35.300 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-h4hg-xmrj-3c6w |
4.4 (3.1)
|
The CM E-Mail Blacklist – Simple email filtering for safer registration plugin for WordPress is vul… | 2026-01-17T09:31:14Z | 2026-01-17T09:31:14Z |
| ghsa-gp72-rgfw-gwgp |
4.9 (3.1)
|
The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the… | 2026-01-17T09:31:14Z | 2026-01-17T09:31:14Z |
| ghsa-7rjf-vvpp-3vfc |
6.4 (3.1)
|
The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl… | 2026-01-17T09:31:14Z | 2026-01-17T09:31:14Z |
| ghsa-7cqg-9cwh-9w83 |
5.3 (3.1)
|
The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information… | 2026-01-17T09:31:14Z | 2026-01-17T09:31:14Z |
| ghsa-4qr6-cjv5-78xj |
7.5 (3.1)
|
The Demo Importer Plus plugin for WordPress is vulnerable to XML External Entity Injection (XXE) in… | 2026-01-17T09:31:14Z | 2026-01-17T09:31:14Z |
| ghsa-x87c-mf44-jq5f |
5.3 (3.1)
|
The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized acces… | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-x3g7-vp73-j4gv |
5.3 (3.1)
|
The RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress plugin for WordPress is vulnerable… | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-x2h8-q8w2-33xm |
5.3 (3.1)
|
The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to… | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-pm58-hwhg-w6fr |
5.3 (3.1)
|
The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in … | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-f4rc-5m89-x55r |
6.5 (3.1)
|
The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for WordPres… | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-5mxf-v2m6-j98m |
4.3 (3.1)
|
The Phrase TMS Integration for WordPress plugin for WordPress is vulnerable to unauthorized modific… | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-5c7c-gqqx-2g9q |
2.2 (3.1)
|
The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions … | 2026-01-17T06:30:36Z | 2026-01-17T06:30:36Z |
| ghsa-p429-p65m-q8hj |
5.3 (3.1)
|
The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-mcwv-cw7m-pxqm |
4.4 (3.1)
|
The Filr – Secure document library plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-m78r-r2pf-69wj |
5.9 (3.1)
|
The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-j6cx-84mr-7rr8 |
5.8 (3.1)
|
The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to,… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-57r7-hgxm-j62g |
6.5 (3.1)
|
The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification o… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-4hvq-pg8r-grr5 |
9.8 (3.1)
|
The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up… | 2026-01-17T03:30:24Z | 2026-01-17T03:30:24Z |
| ghsa-wfh6-52w8-8gcj |
5.1 (3.1)
|
Microsoft Edge Elevation Service exposes a privileged COM interface that inadequately validates the… | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-vhwm-c99c-xhcp |
7.5 (3.1)
|
The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can … | 2026-01-16T15:31:24Z | 2026-01-17T00:30:24Z |
| ghsa-m8cg-86wh-jh9h |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stat… | 2025-10-01T12:30:29Z | 2026-01-17T00:30:24Z |
| ghsa-m36g-fvpc-hvm4 |
7.5 (3.1)
|
An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes … | 2026-01-16T21:30:37Z | 2026-01-17T00:30:24Z |
| ghsa-jq7f-6h2q-wjmq |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-h3c8-rqv3-223w |
8.0 (3.1)
|
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a… | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-76r3-qjqp-qqg4 |
7.5 (3.1)
|
The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool… | 2026-01-16T15:31:25Z | 2026-01-17T00:30:24Z |
| ghsa-6897-hr27-rhvq |
6.1 (3.1)
|
Cross site scripting vulnerability in seeyon Zhiyuan A8+ Collaborative Management Software 7.0 via … | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-628r-6r5v-c595 |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-4mf2-6634-xrph |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_h… | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-3746-rh77-fvxr |
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-17T00:30:24Z | 2026-01-17T00:30:24Z |
| ghsa-2fpr-j6vv-49jc |
7.5 (3.1)
|
TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then … | 2026-01-16T15:31:25Z | 2026-01-17T00:30:24Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-28951 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution … | 2024-04-02T05:02:55.447423Z |
| gsd-2024-28901 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | 2024-04-02T05:02:55.445175Z |
| gsd-2024-28782 | IBM QRadar Suite Software 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10… | 2024-04-02T05:02:55.442348Z |
| gsd-2024-28832 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.439375Z |
| gsd-2024-28874 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.438575Z |
| gsd-2024-28969 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.438234Z |
| gsd-2024-28759 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.432321Z |
| gsd-2024-22184 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.425362Z |
| gsd-2024-22185 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:55.232549Z |
| gsd-2024-22092 | in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verifi… | 2024-04-02T05:02:54.995168Z |
| gsd-2024-25937 | SQL injection vulnerability exists in the script DIAE_tagHandler.ashx. | 2024-04-02T05:02:53.916254Z |
| gsd-2024-25939 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:53.908300Z |
| gsd-2024-25648 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:53.879273Z |
| gsd-2024-25568 | OS command injection vulnerability in WRC-X3200GST3-B v1.25 and earlier, and WRC-G01-W v1… | 2024-04-02T05:02:53.856590Z |
| gsd-2024-25574 | SQL injection vulnerability exists in GetDIAE_usListParameters. | 2024-04-02T05:02:53.774860Z |
| gsd-2024-25567 | Path traversal attack is possible and write outside of the intended directory and may ac… | 2024-04-02T05:02:53.744733Z |
| gsd-2024-25938 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:53.579308Z |
| gsd-2024-2651 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:53.446507Z |
| gsd-2024-2584 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/… | 2024-04-02T05:02:53.445507Z |
| gsd-2024-2508 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-02T05:02:53.444768Z |
| gsd-2024-2419 | A flaw was found in Keycloak's redirect_uri validation logic. This issue may allow a bypa… | 2024-04-02T05:02:53.443929Z |
| gsd-2024-2363 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was foun… | 2024-04-02T05:02:53.442920Z |
| gsd-2024-2656 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for W… | 2024-04-02T05:02:53.437495Z |
| gsd-2024-2538 | The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modificatio… | 2024-04-02T05:02:53.436956Z |
| gsd-2024-2603 | The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some… | 2024-04-02T05:02:53.436339Z |
| gsd-2024-2574 | A vulnerability classified as critical was found in SourceCodester Employee Task Manageme… | 2024-04-02T05:02:53.433406Z |
| gsd-2024-2692 | SiYuan version 3.0.3 allows executing arbitrary commands on the server. This is possible … | 2024-04-02T05:02:53.433067Z |
| gsd-2024-2390 | As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plu… | 2024-04-02T05:02:53.431996Z |
| gsd-2024-2511 | Issue summary: Some non-default TLS server configurations can cause unbounded memory grow… | 2024-04-02T05:02:53.431059Z |
| gsd-2024-2677 | A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified a… | 2024-04-02T05:02:53.429668Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-188843 | Malicious code in procyon-futurology-concurrently-sqlite (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188842 | Malicious code in procyon-cosmos-mutation-pyxis (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188841 | Malicious code in procyon-cluster-janus-fomalhaut (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188840 | Malicious code in procyon-aurora-zenith-indus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188839 | Malicious code in procyon-andromeda-configstore-javascript (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188838 | Malicious code in process-simulate-parse-integer-wind (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188837 | Malicious code in process-passport-eslint-config-speleology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188836 | Malicious code in process-outercore-nestjs-leda (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188835 | Malicious code in process-loopback-cosmos-leda (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188834 | Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188833 | Malicious code in process-float-sanitize-module-import (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188832 | Malicious code in process-daemon-pipe-try-bundle (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188831 | Malicious code in process-callisto-superagent-quark (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188830 | Malicious code in private-toml-nightwatch-rigel (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188829 | Malicious code in private-sadr-proxima-private (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188828 | Malicious code in private-husky-mensa-package (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188827 | Malicious code in private-enum-compress-upsilon-omega (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188826 | Malicious code in private-easy-string-decrypt-meta (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188825 | Malicious code in private-dorado-grunt-jupiter (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188824 | Malicious code in private-cluster-draco-mysql (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188823 | Malicious code in private-centauri-miranda-areology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188822 | Malicious code in private-abstract-optimize-view-rain (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188821 | Malicious code in primatology-technosignature-magnetosphere-parcel (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188820 | Malicious code in primatology-paleoecology-archaeoastronomy-chariklo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188819 | Malicious code in primatology-paleoceanography-mineralogy-wolf (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188818 | Malicious code in primatology-middleware-planckscale-install (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188817 | Malicious code in primatology-impulse-decoherence-standard (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188816 | Malicious code in primatology-chromedriver-vortex-nebula (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188815 | Malicious code in primatology-callback-dactyl-telesto (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188814 | Malicious code in primatology-algol-postgres-unuk (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0989 | GStreamer: Schwachstelle ermöglicht Codeausführung und Denial of Service | 2024-04-29T22:00:00.000+00:00 | 2024-04-29T22:00:00.000+00:00 |
| wid-sec-w-2024-0988 | IBM Storage Scale: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-04-29T22:00:00.000+00:00 | 2024-04-29T22:00:00.000+00:00 |
| wid-sec-w-2024-0987 | Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-04-29T22:00:00.000+00:00 | 2024-04-29T22:00:00.000+00:00 |
| wid-sec-w-2023-2550 | IBM Rational ClearQuest: Mehrere Schwachstellen | 2023-10-03T22:00:00.000+00:00 | 2024-04-29T22:00:00.000+00:00 |
| wid-sec-w-2023-0728 | binutils: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-03-22T23:00:00.000+00:00 | 2024-04-29T22:00:00.000+00:00 |
| wid-sec-w-2024-0986 | Broadcom Brocade SANnav: Schwachstelle ermöglicht Denial of Service | 2024-04-28T22:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2024-0985 | QNAP NAS: Mehrere Schwachstellen | 2024-04-28T22:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2024-0971 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2024-04-24T22:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2024-0718 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-03-26T23:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2024-0552 | Foxit Reader: Mehrere Schwachstellen | 2024-03-04T23:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2023-0210 | Red Hat Enterprise Linux (Submariner): Schwachstelle ermöglicht Denial of Service | 2023-01-26T23:00:00.000+00:00 | 2024-04-28T22:00:00.000+00:00 |
| wid-sec-w-2024-0977 | Red Hat Quay: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-04-25T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0976 | PuTTY: Mehrere Schwachstellen | 2019-10-01T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0975 | PuTTY: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2020-06-29T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0944 | CrushFTP: Schwachstelle ermöglicht Codeausführung mit administrativen Rechten | 2024-04-21T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0865 | Veritas BackupExec: Mehrere Schwachstellen | 2024-04-15T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0864 | Veritas NetBackup: Schwachstelle ermöglicht Manipulation von Dateien | 2024-04-15T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2023-3218 | PuTTY: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-07-11T22:00:00.000+00:00 | 2024-04-25T22:00:00.000+00:00 |
| wid-sec-w-2024-0973 | GitLab: Mehrere Schwachstellen | 2024-04-24T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-0969 | Webmin: Schwachstelle ermöglicht Privilegieneskalation | 2024-04-24T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-0966 | MongoDB: Schwachstelle ermöglicht Verkörperung anderer Nutzer oder Offenlegung von Informationen | 2024-04-24T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-0965 | Cisco ASA (Adaptive Security Appliance) und Firepower: Mehrere Schwachstellen | 2024-04-24T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-0784 | Ivanti Connect Secure und Policy Secure: Mehrere Schwachstellen | 2024-04-03T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2023-1149 | libreswan: Schwachstelle ermöglicht Denial of Service | 2023-05-04T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2022-0016 | Linux Kernel: Mehrere Schwachstellen | 2022-05-24T22:00:00.000+00:00 | 2024-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-0957 | Huawei Home Router: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2024-04-23T22:00:00.000+00:00 | 2024-04-23T22:00:00.000+00:00 |
| wid-sec-w-2024-0951 | Microsoft Azure: Schwachstelle ermöglicht Codeausführung | 2024-04-23T22:00:00.000+00:00 | 2024-04-23T22:00:00.000+00:00 |
| wid-sec-w-2024-0948 | Netgate pfSense: Mehrere Schwachstellen | 2024-04-23T22:00:00.000+00:00 | 2024-04-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2106 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-08-21T22:00:00.000+00:00 | 2024-04-23T22:00:00.000+00:00 |
| wid-sec-w-2023-1876 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation oder Denial of Service | 2023-07-24T22:00:00.000+00:00 | 2024-04-23T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2019:3610 | Red Hat Security Advisory: libqb security and bug fix update | 2019-11-05T21:19:32+00:00 | 2026-01-13T22:31:43+00:00 |
| rhsa-2014:1042 | Red Hat Security Advisory: java-1.7.1-ibm security update | 2014-08-11T16:44:22+00:00 | 2026-01-13T22:31:41+00:00 |
| rhsa-2022:6522 | Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update | 2022-09-14T13:41:30+00:00 | 2026-01-13T22:31:37+00:00 |
| rhsa-2011:0840 | Red Hat Security Advisory: dhcp security update | 2011-05-31T14:48:00+00:00 | 2026-01-13T22:31:34+00:00 |
| rhsa-2010:0146 | Red Hat Security Advisory: kernel security and bug fix update | 2010-03-17T00:42:00+00:00 | 2026-01-13T22:31:34+00:00 |
| rhsa-2025:15785 | Red Hat Security Advisory: kernel security update | 2025-09-15T10:45:25+00:00 | 2026-01-13T22:31:31+00:00 |
| rhsa-2025:15447 | Red Hat Security Advisory: kernel security update | 2025-09-08T12:06:04+00:00 | 2026-01-13T22:31:29+00:00 |
| rhsa-2018:0466 | Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 2 security update | 2018-03-07T15:21:52+00:00 | 2026-01-13T22:31:26+00:00 |
| rhsa-2017:2077 | Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update | 2017-08-01T14:13:37+00:00 | 2026-01-13T22:31:26+00:00 |
| rhsa-2020:1112 | Red Hat Security Advisory: php security update | 2020-03-31T19:36:56+00:00 | 2026-01-13T22:31:25+00:00 |
| rhsa-2022:6756 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2022-09-29T15:20:25+00:00 | 2026-01-13T22:31:24+00:00 |
| rhsa-2018:3406 | Red Hat Security Advisory: python-paramiko security update | 2018-10-30T17:08:07+00:00 | 2026-01-13T22:31:24+00:00 |
| rhsa-2011:0260 | Red Hat Security Advisory: python security and bug fix update | 2011-02-16T14:17:00+00:00 | 2026-01-13T22:31:23+00:00 |
| rhsa-2025:1139 | Red Hat Security Advisory: firefox security update | 2025-02-06T11:49:54+00:00 | 2026-01-13T22:31:22+00:00 |
| rhsa-2014:0743 | Red Hat Security Advisory: qemu-kvm security and bug fix update | 2014-06-10T20:14:12+00:00 | 2026-01-13T22:31:16+00:00 |
| rhsa-2005:782 | Red Hat Security Advisory: util-linux and mount security update | 2005-10-11T15:49:00+00:00 | 2026-01-13T22:31:15+00:00 |
| rhsa-2026:0012 | Red Hat Security Advisory: httpd:2.4 security update | 2026-01-05T02:01:38+00:00 | 2026-01-13T22:31:13+00:00 |
| rhsa-2017:3047 | Red Hat Security Advisory: java-1.6.0-sun security update | 2017-10-24T12:09:09+00:00 | 2026-01-13T22:31:13+00:00 |
| rhsa-2014:0368 | Red Hat Security Advisory: openstack-keystone security update | 2014-04-03T20:18:06+00:00 | 2026-01-13T22:31:12+00:00 |
| rhsa-2018:1447 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update | 2018-05-14T20:15:33+00:00 | 2026-01-13T22:31:11+00:00 |
| rhsa-2011:1087 | Red Hat Security Advisory: java-1.5.0-ibm security update | 2011-07-22T22:45:00+00:00 | 2026-01-13T22:31:11+00:00 |
| rhsa-2024:5812 | Red Hat Security Advisory: httpd security update | 2024-08-26T08:09:10+00:00 | 2026-01-13T22:31:10+00:00 |
| rhsa-2024:4414 | Red Hat Security Advisory: fence-agents security update | 2024-07-09T09:23:57+00:00 | 2026-01-13T22:31:09+00:00 |
| rhsa-2007:1020 | Red Hat Security Advisory: cups security and bug fix update | 2007-10-31T13:48:00+00:00 | 2026-01-13T22:31:09+00:00 |
| rhsa-2019:2205 | Red Hat Security Advisory: tomcat security, bug fix, and enhancement update | 2019-08-06T13:01:58+00:00 | 2026-01-13T22:31:08+00:00 |
| rhsa-2013:0122 | Red Hat Security Advisory: tcl security and bug fix update | 2013-01-08T04:10:00+00:00 | 2026-01-13T22:30:23+00:00 |
| rhsa-2006:0666 | Red Hat Security Advisory: XFree86 security update | 2006-09-12T15:51:00+00:00 | 2026-01-13T22:30:23+00:00 |
| rhsa-2006:0571 | Red Hat Security Advisory: gnupg security update | 2006-07-18T10:20:00+00:00 | 2026-01-13T22:29:06+00:00 |
| rhsa-2008:0505 | Red Hat Security Advisory: Red Hat Application Stack v2.1 security and enhancement update | 2008-07-02T13:15:00+00:00 | 2026-01-13T22:29:04+00:00 |
| rhba-2019:4199 | Red Hat Bug Fix Advisory: CloudForms 5.0 bug fix and enhancement update | 2019-12-12T13:34:43+00:00 | 2026-01-13T22:29:01+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-3509 | Parsing issue in protobuf textformat | 2022-11-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-33099 | An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs. | 2022-07-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-33065 | Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile allows an attacker to cause Denial of Service or other unspecified impacts. | 2023-07-01T07:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-3171 | Memory handling vulnerability in ProtocolBuffers Java core and lite | 2022-10-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-3165 | An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message resulting in a denial of service. | 2022-10-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-31627 | Heap buffer overflow in finfo_buffer | 2022-07-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-2962 | A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame it doesn't check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service condition. | 2022-09-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-2879 | Unbounded memory consumption when reading headers in archive/tar | 2022-10-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-26354 | A flaw was found in the vhost-vsock device of QEMU. In case of error an invalid element was not detached from the virtqueue before freeing its memory leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0. | 2022-03-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-26353 | A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748 which forgot to unmap the cached virtqueue elements on error leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0. | 2022-03-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-24921 | regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression. | 2022-03-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-24795 | Buffer Overflow and Integer Overflow in yajl-ruby | 2022-04-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-24713 | Regular expression denial of service in Rust's regex crate | 2022-03-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-23806 | Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element. | 2022-02-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-23773 | cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags. | 2022-02-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-23772 | Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. | 2022-02-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-23639 | Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils | 2022-02-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-23523 | rust-vmm linux-loader vulnerable to Out-of-bounds Read | 2022-12-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-21698 | Uncontrolled Resource Consumption in promhttp | 2022-02-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-2097 | AES OCB fails to encrypt some bytes | 2022-07-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-1996 | Authorization Bypass Through User-Controlled Key in emicklei/go-restful | 2022-06-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 2022-03-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2022-0358 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system. | 2022-08-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-45707 | An issue was discovered in the nix crate 0.16.0 and later before 0.20.2 0.21.x before 0.21.2 and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups. | 2021-12-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-44716 | net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests. | 2022-01-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-42836 | GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. | 2021-10-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-4207 | A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. | 2022-04-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-4206 | A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. | 2022-04-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-41772 | Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field. | 2021-11-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| msrc_cve-2021-41771 | ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer aka an out-of-bounds slice situation. | 2021-11-02T00:00:00.000Z | 2024-09-11T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201711-1018 | The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions ear… | 2025-04-20T23:37:46.176000Z |
| var-201711-1060 | Client-side enforcement using JavaScript of server-side security options on the Cohu 3960… | 2025-04-20T23:37:46.121000Z |
| var-201712-0294 | Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers t… | 2025-04-20T23:37:45.936000Z |
| var-201712-0527 | An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 chara… | 2025-04-20T23:37:45.779000Z |
| var-201712-0674 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSa… | 2025-04-20T23:37:45.645000Z |
| var-201712-0800 | Huawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated a… | 2025-04-20T23:37:41.989000Z |
| var-202504-1635 | DCP-1610W series wireless black and white laser multifunction printer. Brother (China) C… | 2025-04-20T23:37:32.820000Z |
| var-201701-0131 | An information disclosure vulnerability in the NVIDIA video driver could enable a local m… | 2025-04-20T23:36:58.063000Z |
| var-201702-0294 | An issue was discovered in Honeywell Experion Process Knowledge System (PKS) platform: Ex… | 2025-04-20T23:36:57.647000Z |
| var-201702-0378 | IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensi… | 2025-04-20T23:36:57.590000Z |
| var-201702-0672 | An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions… | 2025-04-20T23:36:57.330000Z |
| var-201702-0798 | A vulnerability in the Policy deployment module of the Cisco Firepower Management Center … | 2025-04-20T23:36:57.294000Z |
| var-201702-0861 | An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAG… | 2025-04-20T23:36:57.255000Z |
| var-201703-0520 | CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can … | 2025-04-20T23:36:56.964000Z |
| var-201703-0898 | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an… | 2025-04-20T23:36:56.819000Z |
| var-201704-0165 | Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 … | 2025-04-20T23:36:56.411000Z |
| var-201704-0396 | Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft … | 2025-04-20T23:36:56.224000Z |
| var-201704-0482 | Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass… | 2025-04-20T23:36:55.719000Z |
| var-201704-0503 | The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, ve… | 2025-04-20T23:36:55.684000Z |
| var-201704-0652 | Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or sr… | 2025-04-20T23:36:55.564000Z |
| var-201704-0925 | Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to exe… | 2025-04-20T23:36:55.511000Z |
| var-201704-0924 | WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute… | 2025-04-20T23:36:55.481000Z |
| var-201704-0967 | An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application… | 2025-04-20T23:36:55.425000Z |
| var-201704-1324 | vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel… | 2025-04-20T23:36:55.322000Z |
| var-201704-1345 | A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code… | 2025-04-20T23:36:55.290000Z |
| var-201704-1366 | Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to o… | 2025-04-20T23:36:55.262000Z |
| var-201705-3165 | A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows… | 2025-04-20T23:36:54.733000Z |
| var-201705-3459 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDH… | 2025-04-20T23:36:54.534000Z |
| var-201705-3543 | An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI V… | 2025-04-20T23:36:54.498000Z |
| var-201705-3795 | RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to ex… | 2025-04-20T23:36:54.372000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2023:3365-1 | Security update for krb5 | 2023-08-18T18:36:58Z | 2023-08-18T18:36:58Z |
| suse-su-2023:3363-1 | Security update for krb5 | 2023-08-18T12:55:04Z | 2023-08-18T12:55:04Z |
| suse-su-2023:3362-1 | Security update for kernel-firmware | 2023-08-18T12:53:13Z | 2023-08-18T12:53:13Z |
| suse-su-2023:3361-1 | Security update for kernel-firmware | 2023-08-18T12:52:27Z | 2023-08-18T12:52:27Z |
| suse-su-2023:3360-1 | Security update for kernel-firmware | 2023-08-18T12:49:38Z | 2023-08-18T12:49:38Z |
| suse-su-2023:3358-1 | Security update for samba | 2023-08-18T11:34:42Z | 2023-08-18T11:34:42Z |
| suse-su-2023:3357-1 | Security update for ImageMagick | 2023-08-18T11:12:34Z | 2023-08-18T11:12:34Z |
| suse-su-2023:3356-1 | Security update for nodejs18 | 2023-08-18T11:09:47Z | 2023-08-18T11:09:47Z |
| suse-su-2023:3355-1 | Security update for nodejs16 | 2023-08-18T11:08:30Z | 2023-08-18T11:08:30Z |
| suse-su-2023:3353-1 | Security update for re2c | 2023-08-18T07:54:30Z | 2023-08-18T07:54:30Z |
| suse-su-2023:3349-1 | Security update for the Linux Kernel | 2023-08-17T12:48:19Z | 2023-08-17T12:48:19Z |
| suse-su-2023:3348-1 | Security update for postgresql15 | 2023-08-17T12:42:03Z | 2023-08-17T12:42:03Z |
| suse-su-2023:3347-1 | Security update for postgresql15 | 2023-08-17T12:39:44Z | 2023-08-17T12:39:44Z |
| suse-su-2023:3346-1 | Security update for postgresql12 | 2023-08-17T12:36:55Z | 2023-08-17T12:36:55Z |
| suse-su-2023:3345-1 | Security update for postgresql15 | 2023-08-17T11:59:46Z | 2023-08-17T11:59:46Z |
| suse-su-2023:3344-1 | Security update for postgresql15 | 2023-08-17T11:59:02Z | 2023-08-17T11:59:02Z |
| suse-su-2023:3343-1 | Security update for postgresql15 | 2023-08-17T11:57:46Z | 2023-08-17T11:57:46Z |
| suse-su-2023:3342-1 | Security update for postgresql15 | 2023-08-17T11:57:02Z | 2023-08-17T11:57:02Z |
| suse-su-2023:3341-1 | Security update for postgresql12 | 2023-08-17T11:56:31Z | 2023-08-17T11:56:31Z |
| suse-su-2023:3339-1 | Security update for openssl-1_0_0 | 2023-08-17T10:34:09Z | 2023-08-17T10:34:09Z |
| suse-su-2023:3338-1 | Security update for openssl-1_0_0 | 2023-08-17T10:33:20Z | 2023-08-17T10:33:20Z |
| suse-su-2023:3333-1 | Security update for the Linux Kernel | 2023-08-16T10:45:46Z | 2023-08-16T10:45:46Z |
| suse-su-2023:3332-1 | Security update for java-1_8_0-openj9 | 2023-08-16T10:34:35Z | 2023-08-16T10:34:35Z |
| suse-su-2023:3329-1 | Security update for the Linux Kernel | 2023-08-16T06:51:52Z | 2023-08-16T06:51:52Z |
| suse-su-2023:3328-1 | Security update for pcre2 | 2023-08-16T06:50:09Z | 2023-08-16T06:50:09Z |
| suse-su-2023:3327-1 | Security update for pcre2 | 2023-08-16T06:46:56Z | 2023-08-16T06:46:56Z |
| suse-su-2023:3325-1 | Security update for krb5 | 2023-08-16T06:26:10Z | 2023-08-16T06:26:10Z |
| suse-su-2023:3324-1 | Security update for the Linux Kernel | 2023-08-16T06:13:06Z | 2023-08-16T06:13:06Z |
| suse-su-2023:3318-1 | Security update for the Linux Kernel | 2023-08-15T08:34:21Z | 2023-08-15T08:34:21Z |
| suse-su-2023:3313-1 | Security update for the Linux Kernel | 2023-08-14T15:35:23Z | 2023-08-14T15:35:23Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2022:0190-1 | Security update for polkit | 2022-01-25T18:10:19Z | 2022-01-25T18:10:19Z |
| opensuse-su-2022:0184-1 | Security update for json-c | 2022-01-25T17:21:12Z | 2022-01-25T17:21:12Z |
| opensuse-su-2022:0182-1 | Security update for webkit2gtk3 | 2022-01-25T17:18:28Z | 2022-01-25T17:18:28Z |
| opensuse-su-2022:0178-1 | Security update for expat | 2022-01-25T13:16:34Z | 2022-01-25T13:16:34Z |
| opensuse-su-2022:0177-1 | Security update for qemu | 2022-01-25T13:14:47Z | 2022-01-25T13:14:47Z |
| opensuse-su-2022:0176-1 | Security update for unbound | 2022-01-25T13:13:02Z | 2022-01-25T13:13:02Z |
| opensuse-su-2022:0175-1 | Security update for rust1.57 | 2022-01-25T13:10:43Z | 2022-01-25T13:10:43Z |
| opensuse-su-2022:0171-1 | Security update for rust1.55 | 2022-01-25T12:56:24Z | 2022-01-25T12:56:24Z |
| opensuse-su-2022:0169-1 | Security update for the Linux Kernel | 2022-01-25T09:42:16Z | 2022-01-25T09:42:16Z |
| opensuse-su-2022:0020-1 | Security update for virtualbox | 2022-01-24T17:01:04Z | 2022-01-24T17:01:04Z |
| opensuse-su-2022:0019-1 | Security update for chromium | 2022-01-24T10:26:21Z | 2022-01-24T10:26:21Z |
| opensuse-su-2022:0157-1 | Security update for zxing-cpp | 2022-01-24T09:10:46Z | 2022-01-24T09:10:46Z |
| opensuse-su-2022:0151-1 | Security update for bind | 2022-01-21T11:41:01Z | 2022-01-21T11:41:01Z |
| opensuse-su-2022:0018-1 | Security update for stb | 2022-01-21T11:04:52Z | 2022-01-21T11:04:52Z |
| opensuse-su-2022:0150-1 | Security update for aide | 2022-01-21T10:24:56Z | 2022-01-21T10:24:56Z |
| opensuse-su-2022:0149-1 | Security update for rust1.56 | 2022-01-21T08:04:54Z | 2022-01-21T08:04:54Z |
| opensuse-su-2022:0144-1 | Security update for cryptsetup | 2022-01-20T15:38:27Z | 2022-01-20T15:38:27Z |
| opensuse-su-2022:0141-1 | Security update for permissions | 2022-01-20T12:47:26Z | 2022-01-20T12:47:26Z |
| opensuse-su-2022:0140-1 | Security update for grafana | 2022-01-20T12:25:15Z | 2022-01-20T12:25:15Z |
| opensuse-su-2022:0136-1 | Security update for MozillaFirefox | 2022-01-20T09:06:20Z | 2022-01-20T09:06:20Z |
| opensuse-su-2022:0135-1 | Security update for busybox | 2022-01-20T09:04:27Z | 2022-01-20T09:04:27Z |
| opensuse-su-2022:0131-1 | Security update for the Linux Kernel | 2022-01-19T16:31:13Z | 2022-01-19T16:31:13Z |
| opensuse-su-2022:0113-1 | Security update for nodejs12 | 2022-01-18T12:03:49Z | 2022-01-18T12:03:49Z |
| opensuse-su-2022:0112-1 | Security update for nodejs14 | 2022-01-18T12:03:34Z | 2022-01-18T12:03:34Z |
| opensuse-su-2022:0111-1 | Security update for virglrenderer | 2022-01-18T12:03:18Z | 2022-01-18T12:03:18Z |
| opensuse-su-2022:0108-1 | Security update for java-1_8_0-ibm | 2022-01-18T10:46:46Z | 2022-01-18T10:46:46Z |
| opensuse-su-2022:0106-1 | Security update for jawn | 2022-01-18T10:43:15Z | 2022-01-18T10:43:15Z |
| opensuse-su-2022:0104-1 | Security update for SDL2 | 2022-01-18T08:37:08Z | 2022-01-18T08:37:08Z |
| opensuse-su-2022:0016-1 | Security update for watchman | 2022-01-17T20:11:25Z | 2022-01-17T20:11:25Z |
| opensuse-su-2022:0091-1 | Security update for apache2 | 2022-01-17T15:25:36Z | 2022-01-17T15:25:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-15468 | Ivanti Endpoint Manager代码问题漏洞 | 2025-04-18 | 2025-07-11 |
| cnvd-2025-15467 | Ivanti Endpoint Manager存在未明漏洞 | 2025-04-18 | 2025-07-11 |
| cnvd-2025-15466 | Ivanti Endpoint Manager指针取消引用漏洞 | 2025-04-18 | 2025-07-11 |
| cnvd-2025-14715 | 用友网络科技股份有限公司用友U8Cloud存在XML实体注入漏洞 | 2025-05-27 | 2025-07-11 |
| cnvd-2025-14712 | 深圳市蓝凌软件股份有限公司业务经营云存在sql注入漏洞 | 2025-05-27 | 2025-07-11 |
| cnvd-2025-14692 | 北京网御星云信息技术有限公司SSL VPN存在任意文件读取漏洞 | 2025-05-27 | 2025-07-11 |
| cnvd-2025-15606 | MongoDB Server资源管理错误漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15517 | MongoDB Server日志信息泄露漏洞（CNVD-2025-15517） | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15516 | MongoDB Server资源管理错误漏洞（CNVD-2025-15516） | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15515 | MongoDB Server授权问题漏洞（CNVD-2025-15515） | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15465 | WordPress Aioseo Multibyte Descriptions plugin跨站请求伪造漏洞 | 2025-07-07 | 2025-07-10 |
| cnvd-2025-15464 | WordPress Additional Order Filters for WooCommerce plugin跨站请求伪造漏洞 | 2025-07-07 | 2025-07-10 |
| cnvd-2025-15463 | WordPress Add & Replace Affiliate Links for Amazon plugin跨站脚本漏洞 | 2025-07-07 | 2025-07-10 |
| cnvd-2025-15462 | WordPress A/B Testing for WordPress plugin跨站脚本漏洞 | 2025-07-07 | 2025-07-10 |
| cnvd-2025-15461 | WordPress web-cam跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15460 | WordPress GC Social Wall跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15459 | WordPress Tournament Bracket Generator跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15458 | WordPress WP Optimize By xTraffic代码问题漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15422 | WordPress Forminator Forms代码问题漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15421 | WordPress ads pro SQL注入漏洞（CNVD-2025-15421） | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15420 | WordPress ads pro SQL注入漏洞（CNVD-2025-15420） | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15419 | WordPress Soumettre.fr授权问题漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15418 | WordPress ads pro跨站请求伪造漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15417 | WordPress ads pro SQL注入漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15416 | WordPress Magic Buttons for Elementor跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15415 | WordPress Magic Buttons for Elementor跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15414 | WordPress Vikinger路径遍历漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15413 | WordPress ads pro SQL注入漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15412 | WordPress WP Front-end login and register跨站脚本漏洞 | 2025-07-08 | 2025-07-10 |
| cnvd-2025-15411 | WordPress Lead Form Data Collection to CRM plugin权限提升漏洞 | 2025-07-08 | 2025-07-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2019-avi-253 | Multiples vulnérabilités dans VMware Tools et Workstation | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-252 | Vulnérabilité dans Exim | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-251 | Multiples vulnérabilités dans les produits IBM | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-250 | Multiples vulnérabilités dans Google Android | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-249 | Vulnérabilité dans phpMyAdmin | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-248 | Multiples vulnérabilités dans les produits Cisco | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-247 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-06-06T00:00:00.000000 | 2019-06-06T00:00:00.000000 |
| certfr-2019-avi-246 | Multiples vulnérabilités dans Google Chrome | 2019-06-05T00:00:00.000000 | 2019-06-05T00:00:00.000000 |
| certfr-2019-avi-245 | Vulnérabilité dans le noyau Linux de RedHat | 2019-06-05T00:00:00.000000 | 2019-06-05T00:00:00.000000 |
| certfr-2019-avi-244 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2019-06-05T00:00:00.000000 | 2019-06-05T00:00:00.000000 |
| certfr-2019-avi-243 | Multiples vulnérabilités dans PHP | 2019-05-31T00:00:00.000000 | 2019-05-31T00:00:00.000000 |
| certfr-2019-avi-241 | Multiples vulnérabilités dans les produits Apple | 2019-05-29T00:00:00.000000 | 2019-05-31T00:00:00.000000 |
| certfr-2019-avi-242 | Multiples vulnérabilités dans F5 BIG-IP | 2019-05-29T00:00:00.000000 | 2019-05-29T00:00:00.000000 |
| certfr-2019-avi-240 | SCADA Vulnérabilité dans les produits Siemens | 2019-05-27T00:00:00.000000 | 2019-05-27T00:00:00.000000 |
| certfr-2019-avi-239 | Multiples vulnérabilités dans Fortinet FortiOS | 2019-05-27T00:00:00.000000 | 2019-05-27T00:00:00.000000 |
| certfr-2019-avi-238 | Vulnérabilité dans Wireshark | 2019-05-23T00:00:00.000000 | 2019-05-23T00:00:00.000000 |
| certfr-2019-avi-237 | Multiples vulnérabilités dans Mozilla Thunderbird | 2019-05-23T00:00:00.000000 | 2019-05-23T00:00:00.000000 |
| certfr-2019-avi-236 | Multiples vulnérabilités dans Mozilla Firefox | 2019-05-22T00:00:00.000000 | 2019-05-22T00:00:00.000000 |
| certfr-2019-avi-235 | Multiples vulnérabilités dans Moodle | 2019-05-21T00:00:00.000000 | 2019-05-21T00:00:00.000000 |
| certfr-2019-avi-234 | Multiples vulnérabilités dans Google Chrome OS | 2019-05-20T00:00:00.000000 | 2019-05-20T00:00:00.000000 |
| certfr-2019-avi-233 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-05-20T00:00:00.000000 | 2019-05-20T00:00:00.000000 |
| certfr-2019-avi-232 | Multiples vulnérabilités dans les produits Schneider Electric | 2019-05-17T00:00:00.000000 | 2019-05-17T00:00:00.000000 |
| certfr-2019-avi-231 | Vulnérabilité dans IBM WebSphere | 2019-05-17T00:00:00.000000 | 2019-05-17T00:00:00.000000 |
| certfr-2019-avi-230 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2019-05-17T00:00:00.000000 | 2019-05-17T00:00:00.000000 |
| certfr-2019-avi-229 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2019-05-17T00:00:00.000000 | 2019-05-17T00:00:00.000000 |
| certfr-2019-avi-228 | Multiples vulnérabilités dans les produits Cisco | 2019-05-16T00:00:00.000000 | 2019-05-16T00:00:00.000000 |
| certfr-2019-avi-227 | Multiples vulnérabilités dans les produits Fortinet | 2019-05-16T00:00:00.000000 | 2019-05-16T00:00:00.000000 |
| certfr-2019-avi-226 | Multiples vulnérabilités dans lemonldap-ng | 2019-05-15T00:00:00.000000 | 2019-05-15T00:00:00.000000 |
| certfr-2019-avi-225 | Multiples vulnérabilités dans les produits Microsoft | 2019-05-15T00:00:00.000000 | 2019-05-15T00:00:00.000000 |
| certfr-2019-avi-224 | Multiples vulnérabilités dans Microsoft .Net | 2019-05-15T00:00:00.000000 | 2019-05-15T00:00:00.000000 |