Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67622 |
8.8 (3.1)
|
WordPress Evergreen Post Tweeter plugin <= 1.8.9 - Cro… |
titopandub |
Evergreen Post Tweeter |
2025-12-24T13:10:21.161Z | 2026-01-20T14:28:26.468Z |
| CVE-2025-67920 |
9.8 (3.1)
|
WordPress Neo Ocular theme < 1.2 - Local File Inclusio… |
Elated-Themes |
Neo Ocular |
2026-01-08T09:17:46.685Z | 2026-01-20T14:28:26.467Z |
| CVE-2025-67919 |
8.1 (3.1)
|
WordPress Woffice Core plugin <= 5.4.30 - Insecure Dir… |
WofficeIO |
Woffice Core |
2026-01-08T09:17:46.457Z | 2026-01-20T14:28:26.466Z |
| CVE-2025-67589 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoices & Packing Slips plu… |
WP Overnight |
WooCommerce PDF Invoices & Packing Slips |
2025-12-09T14:14:17.021Z | 2026-01-20T14:28:26.461Z |
| CVE-2025-67621 |
7.5 (3.1)
|
WordPress Eight Day Week Print Workflow plugin <= 1.2.… |
10up |
Eight Day Week Print Workflow |
2025-12-24T13:10:20.740Z | 2026-01-20T14:28:26.459Z |
| CVE-2025-67591 |
4.3 (3.1)
|
WordPress JNews Paywall plugin < 12.0.1 - Cross Site R… |
jegtheme |
JNews Paywall |
2025-12-09T14:14:17.411Z | 2026-01-20T14:28:26.459Z |
| CVE-2025-67912 |
6.5 (3.1)
|
WordPress Stars Testimonials plugin <= 3.3.4 - Cross S… |
Gal Dubinski |
Stars Testimonials |
2025-12-16T08:12:56.996Z | 2026-01-20T14:28:26.457Z |
| CVE-2025-67596 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.19 - Cross … |
Strategy11 Team |
Business Directory |
2025-12-09T14:14:18.627Z | 2026-01-20T14:28:26.451Z |
| CVE-2025-67910 |
9.8 (3.1)
|
WordPress Contentstudio plugin <= 1.3.7 - Arbitrary Fi… |
contentstudio |
Contentstudio |
2026-01-08T09:17:44.388Z | 2026-01-20T14:28:26.447Z |
| CVE-2025-67633 |
6.1 (3.1)
|
WordPress Greenhouse Job Board plugin <= 2.7.3 - Cross… |
brownbagmarketing |
Greenhouse Job Board |
2025-12-24T13:10:24.524Z | 2026-01-20T14:28:26.447Z |
| CVE-2025-67594 |
4.3 (3.1)
|
WordPress Thim Elementor Kit plugin <= 1.3.3 - Insecur… |
ThimPress |
Thim Elementor Kit |
2025-12-09T14:14:18.018Z | 2026-01-20T14:28:26.443Z |
| CVE-2025-67913 |
9.8 (3.1)
|
WordPress Aruba HiSpeed Cache plugin < 3.0.3 - Broken … |
Aruba.it Dev |
Aruba HiSpeed Cache |
2026-01-08T09:17:44.786Z | 2026-01-20T14:28:26.431Z |
| CVE-2025-67627 |
5.4 (3.1)
|
WordPress Draft Notify plugin <= 1.5 - Cross Site Scri… |
TouchOfTech |
Draft Notify |
2025-12-24T13:10:22.835Z | 2026-01-20T14:28:26.425Z |
| CVE-2025-67623 |
9.1 (3.1)
|
WordPress 6Storage Rentals plugin <= 2.19.9 - Server S… |
6Storage |
6Storage Rentals |
2025-12-24T13:10:22.188Z | 2026-01-20T14:28:26.425Z |
| CVE-2025-67590 |
4.3 (3.1)
|
WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Re… |
Rustaurius |
Ultimate FAQ |
2025-12-09T14:14:17.214Z | 2026-01-20T14:28:26.421Z |
| CVE-2025-67922 |
6.1 (3.1)
|
WordPress Grand Restaurant theme < 7.0.9 - Cross Site … |
ThemeGoods |
Grand Restaurant |
2026-01-08T09:17:47.190Z | 2026-01-20T14:28:26.420Z |
| CVE-2025-67915 |
9.8 (3.1)
|
WordPress Timetics plugin <= 1.0.46 - Broken Authentic… |
Arraytics |
Timetics |
2026-01-08T09:17:45.304Z | 2026-01-20T14:28:26.404Z |
| CVE-2025-67599 |
4.3 (3.1)
|
WordPress WebToffee eCommerce Marketing Automation plu… |
WebToffee |
WebToffee eCommerce Marketing Automation |
2025-12-09T14:14:19.262Z | 2026-01-20T14:28:26.396Z |
| CVE-2025-67916 |
6.1 (3.1)
|
WordPress Jobify theme <= 4.3.0 - Cross Site Scripting… |
Astoundify |
Jobify |
2026-01-08T09:17:45.488Z | 2026-01-20T14:28:26.384Z |
| CVE-2025-67598 |
4.3 (3.1)
|
WordPress SupportCandy plugin <= 3.4.1 - Cross Site Re… |
PSM Plugins |
SupportCandy |
2025-12-09T14:14:19.039Z | 2026-01-20T14:28:26.377Z |
| CVE-2025-67588 |
4.3 (3.1)
|
WordPress Elementor Website Builder plugin <= 3.33.0 -… |
Elementor |
Elementor Website Builder |
2025-12-09T14:14:16.826Z | 2026-01-20T14:28:26.013Z |
| CVE-2025-67584 |
5.3 (3.1)
|
WordPress GoDAM plugin <= 1.4.6 - Broken Access Contro… |
rtCamp |
GoDAM |
2025-12-09T14:14:15.957Z | 2026-01-20T14:28:26.012Z |
| CVE-2025-67587 |
4.3 (3.1)
|
WordPress WP Gravity Forms FreshDesk Plugin plugin <= … |
CRM Perks |
WP Gravity Forms FreshDesk Plugin |
2025-12-09T14:14:16.613Z | 2026-01-20T14:28:26.008Z |
| CVE-2025-67553 |
6.5 (3.1)
|
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross… |
ThemeHigh |
Advanced FAQ Manager |
2025-12-09T14:14:07.745Z | 2026-01-20T14:28:25.999Z |
| CVE-2025-67568 |
5.3 (3.1)
|
WordPress Basel theme <= 5.9.1 - Broken Access Control… |
xtemos |
Basel |
2025-12-09T14:14:12.329Z | 2026-01-20T14:28:25.986Z |
| CVE-2025-67558 |
6.5 (3.1)
|
WordPress Rencontre plugin <= 3.13.7 - Cross Site Scri… |
Jacques Malgrange |
Rencontre |
2025-12-09T14:14:09.063Z | 2026-01-20T14:28:25.982Z |
| CVE-2025-67564 |
5.3 (3.1)
|
WordPress Pixel Manager for WooCommerce plugin <= 1.51… |
alekv |
Pixel Manager for WooCommerce |
2025-12-09T14:14:11.456Z | 2026-01-20T14:28:25.973Z |
| CVE-2025-67570 |
5.3 (3.1)
|
WordPress WPForms Google Sheet Connector plugin <= 4.0… |
GSheetConnector by WesternDeal |
WPForms Google Sheet Connector |
2025-12-09T14:14:12.713Z | 2026-01-20T14:28:25.963Z |
| CVE-2025-67572 |
5.3 (3.1)
|
WordPress PenNews theme < 6.7.4 - Broken Access Contro… |
PenciDesign |
PenNews |
2025-12-09T14:14:13.153Z | 2026-01-20T14:28:25.962Z |
| CVE-2025-67573 |
5.3 (3.1)
|
WordPress Sailing theme < 4.4.6 - Broken Access Contro… |
ThimPress |
Sailing |
2025-12-09T14:14:13.358Z | 2026-01-20T14:28:25.958Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68587 |
8.1 (3.1)
|
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Co… |
Bob |
Watu Quiz |
2025-12-24T13:10:42.440Z | 2026-01-20T14:28:28.675Z |
| CVE-2025-68586 |
8.8 (3.1)
|
WordPress Cooked plugin <= 1.11.2 - Broken Access Cont… |
Gora Tech |
Cooked |
2025-12-24T13:10:42.037Z | 2026-01-20T14:28:28.502Z |
| CVE-2025-68585 |
8.8 (3.1)
|
WordPress WP Document Revisions plugin <= 3.7.2 - Brok… |
Ben Balter |
WP Document Revisions |
2025-12-24T13:10:41.715Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68584 |
8.8 (3.1)
|
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site R… |
Constantin Boiangiu |
Vimeotheque |
2025-12-24T13:10:41.424Z | 2026-01-20T14:28:28.674Z |
| CVE-2025-68583 |
8.8 (3.1)
|
WordPress Fast User Switching plugin <= 1.4.10 - Cross… |
Tikweb Management |
Fast User Switching |
2025-12-24T13:10:41.121Z | 2026-01-20T14:28:28.749Z |
| CVE-2025-68582 |
8.8 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Broken Acce… |
Funnelforms |
Funnelforms Free |
2025-12-24T13:10:40.817Z | 2026-01-20T14:28:28.482Z |
| CVE-2025-68581 |
8.1 (3.1)
|
WordPress YITH Slider for page builders plugin <= 1.0.… |
YITHEMES |
YITH Slider for page builders |
2025-12-24T13:10:40.513Z | 2026-01-20T14:28:28.581Z |
| CVE-2025-68580 |
8.8 (3.1)
|
WordPress Advanced Classifieds & Directory Pro plugin … |
pluginsware |
Advanced Classifieds & Directory Pro |
2025-12-24T13:10:40.193Z | 2026-01-20T14:28:28.604Z |
| CVE-2025-68579 |
8.1 (3.1)
|
WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Acce… |
FolioVision |
FV Simpler SEO |
2025-12-24T13:10:39.669Z | 2026-01-20T14:28:28.329Z |
| CVE-2025-68578 |
8.1 (3.1)
|
WordPress Addonify plugin <= 2.0.4 - Broken Access Con… |
Addonify |
Addonify |
2025-12-24T13:10:39.343Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68577 |
8.8 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Broken Access Con… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.980Z | 2026-01-20T14:28:28.467Z |
| CVE-2025-68576 |
7.5 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Ex… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.690Z | 2026-01-20T14:28:28.713Z |
| CVE-2025-68575 |
8.8 (3.1)
|
WordPress Wappointment plugin <=2.7.2 - Broken Access … |
Wappointment team |
Wappointment |
2025-12-24T13:10:38.366Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68574 |
6.1 (3.1)
|
WordPress WPBakery Visual Composer WHMCS Elements plug… |
voidcoders |
WPBakery Visual Composer WHMCS Elements |
2025-12-24T13:10:38.100Z | 2026-01-20T14:28:28.414Z |
| CVE-2025-68573 |
8.8 (3.1)
|
WordPress Simple Keyword to Link plugin <= 1.5 - Cross… |
Alessandro Piconi |
Simple Keyword to Link |
2025-12-24T13:10:37.793Z | 2026-01-20T14:28:28.455Z |
| CVE-2025-68572 |
8.8 (3.1)
|
WordPress BBP Core plugin <= 1.4.1 - Broken Access Con… |
Spider Themes |
BBP Core |
2025-12-24T13:10:37.515Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68571 |
8.8 (3.1)
|
WordPress SALESmanago plugin <= 3.9.0 - Broken Access … |
SALESmanago |
SALESmanago |
2025-12-24T13:10:37.254Z | 2026-01-20T14:28:28.533Z |
| CVE-2025-68570 |
9.8 (3.1)
|
WordPress Captivate Sync plugin <= 3.2.2 - SQL Injecti… |
captivateaudio |
Captivate Sync |
2025-12-24T13:10:36.970Z | 2026-01-20T14:28:28.532Z |
| CVE-2025-68569 |
8.8 (3.1)
|
WordPress WP Time Slots Booking Form plugin <= 1.2.38 … |
codepeople |
WP Time Slots Booking Form |
2025-12-24T13:10:36.669Z | 2026-01-20T14:28:28.254Z |
| CVE-2025-68568 |
7.5 (3.1)
|
WordPress Popup Builder: Exit-Intent pop-up, Spin the … |
integrationclaspo |
Popup Builder: Exit-Intent pop-up, Spin the Wheel, Newsletter signup, Email Capture & Lead Generation forms maker |
2025-12-24T13:10:36.357Z | 2026-01-20T14:28:28.398Z |
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68565 |
9.8 (3.1)
|
WordPress Twitch Player plugin <= 2.1.3 - Broken Acces… |
JayBee |
Twitch Player |
2025-12-24T13:10:35.534Z | 2026-01-20T14:28:28.511Z |
| CVE-2025-68563 |
9.8 (3.1)
|
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - L… |
WP Shuffle |
Subscribe to Unlock Lite |
2025-12-24T12:31:30.996Z | 2026-01-20T14:28:28.665Z |
| CVE-2025-68562 |
9.9 (3.1)
|
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Uplo… |
RomanCode |
MapSVG |
2025-12-29T21:13:24.913Z | 2026-01-20T14:28:28.382Z |
| CVE-2025-68561 |
7.6 (3.1)
|
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection … |
Ruben Garcia |
AutomatorWP |
2025-12-23T11:34:34.900Z | 2026-01-20T14:28:28.768Z |
| CVE-2025-68560 |
7.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:36:26.213Z | 2026-01-20T14:28:28.760Z |
| CVE-2025-68559 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:37:35.431Z | 2026-01-20T14:28:28.395Z |
| CVE-2025-68557 |
4.3 (3.1)
|
WordPress Chakra test plugin <= 1.0.1 - Broken Access … |
Vikas Ratudi |
Chakra test |
2025-12-23T11:43:26.693Z | 2026-01-20T14:28:27.973Z |
| CVE-2025-68556 |
5.3 (3.1)
|
WordPress HAPPY plugin <= 1.0.9 - Broken Access Contro… |
VillaTheme |
HAPPY |
2025-12-23T11:44:49.953Z | 2026-01-20T14:28:27.964Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| fkie_cve-2025-68580 | Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro… | 2025-12-24T13:16:25.140 | 2026-01-20T15:19:48.420 |
| fkie_cve-2025-68579 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exp… | 2025-12-24T13:16:25.020 | 2026-01-20T15:19:48.293 |
| fkie_cve-2025-68578 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Inco… | 2025-12-24T13:16:24.893 | 2026-01-20T15:19:48.163 |
| fkie_cve-2025-68577 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Con… | 2025-12-24T13:16:24.777 | 2026-01-20T15:19:48.037 |
| fkie_cve-2025-68576 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdi… | 2025-12-24T13:16:24.660 | 2026-01-20T15:19:47.920 |
| fkie_cve-2025-68575 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T13:16:24.540 | 2026-01-20T15:19:47.793 |
| fkie_cve-2025-68574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:24.423 | 2026-01-20T15:19:47.663 |
| fkie_cve-2025-68573 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-… | 2025-12-24T13:16:24.300 | 2026-01-20T15:19:47.537 |
| fkie_cve-2025-68572 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T13:16:24.183 | 2026-01-20T15:19:47.407 |
| fkie_cve-2025-68571 | Missing Authorization vulnerability in SALESmanago SALESmanago salesmanago allows Exploiting Incorr… | 2025-12-24T13:16:24.070 | 2026-01-20T15:19:47.267 |
| fkie_cve-2025-68570 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:23.953 | 2026-01-20T15:19:47.127 |
| fkie_cve-2025-68569 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-… | 2025-12-24T13:16:23.833 | 2026-01-20T15:19:46.990 |
| fkie_cve-2025-68568 | Missing Authorization vulnerability in integrationclaspo Popup Builder: Exit-Intent pop-up, Spin th… | 2025-12-24T13:16:23.710 | 2026-01-20T15:19:46.863 |
| fkie_cve-2025-68567 | Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-… | 2025-12-24T13:16:23.593 | 2026-01-20T15:19:46.743 |
| fkie_cve-2025-68566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:23.470 | 2026-01-20T15:19:46.617 |
| fkie_cve-2025-68565 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting… | 2025-12-24T13:16:23.340 | 2026-01-20T15:19:46.493 |
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| fkie_cve-2025-68562 | Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a W… | 2025-12-29T22:15:43.310 | 2026-01-20T15:19:46.273 |
| fkie_cve-2025-68561 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:46.567 | 2026-01-20T15:19:46.180 |
| fkie_cve-2025-68560 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:46.430 | 2026-01-20T15:19:46.083 |
| fkie_cve-2025-68559 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-23T12:15:46.290 | 2026-01-20T15:19:45.997 |
| fkie_cve-2025-68557 | Missing Authorization vulnerability in Vikas Ratudi Chakra test allows Exploiting Incorrectly Confi… | 2025-12-23T12:15:46.160 | 2026-01-20T15:19:45.900 |
| fkie_cve-2025-68556 | Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Ac… | 2025-12-23T12:15:46.017 | 2026-01-20T15:19:45.810 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6m8f-gxf8-jq76 |
6.2 (3.1)
8.7 (4.0)
|
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cros… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-656v-64rf-6vxr |
7.8 (3.1)
8.5 (4.0)
|
iFunbox 4.2 contains an unquoted service path vulnerability in the Apple Mobile Device Service that… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-649f-v3rg-phwg |
7.5 (3.1)
6.7 (4.0)
|
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field tha… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-533p-5pv2-f9qj |
7.5 (3.1)
6.7 (4.0)
|
Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-4gqj-v3rw-hwjg |
7.5 (3.1)
4.6 (4.0)
|
Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash th… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-489q-8735-fm7w |
9.8 (3.1)
6.7 (4.0)
|
NoteBurner 2.35 contains a buffer overflow vulnerability in the license code input field that allow… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-474v-g7v9-75hp |
7.5 (3.1)
9.3 (4.0)
|
GravCMS 1.10.7 contains an unauthenticated vulnerability that allows remote attackers to write arbi… | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-429r-fcw9-gj73 |
9.8 (3.1)
9.3 (4.0)
|
Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) … | 2026-01-16T00:30:55Z | 2026-01-16T00:30:55Z |
| ghsa-vxqw-p8vv-vwx9 |
6.1 (3.1)
|
A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System… | 2026-01-15T21:31:48Z | 2026-01-16T00:30:54Z |
| ghsa-vf5j-jhr7-6gmg |
9.3 (4.0)
|
Uploadify WordPress plugin versions up to and including 1.0 contain an arbitrary file upload vulner… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-rrvx-ch7v-78fh |
7.8 (3.1)
8.5 (4.0)
|
SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configura… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-rg7x-vp5v-875q |
7.5 (3.1)
6.9 (4.0)
|
SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search fo… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-r5qv-mqr6-p5hg |
8.8 (3.1)
|
A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1… | 2026-01-15T21:31:48Z | 2026-01-16T00:30:54Z |
| ghsa-pc36-jm28-59wx |
7.8 (3.1)
8.5 (4.0)
|
Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows servic… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-mq6j-m5v8-2rmr |
7.8 (3.1)
8.5 (4.0)
|
Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potenti… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-m592-cr2f-4qg5 |
7.8 (3.1)
8.4 (4.0)
|
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserializ… | 2026-01-13T00:30:46Z | 2026-01-16T00:30:54Z |
| ghsa-jqrw-qrp2-9pg2 |
7.8 (3.1)
8.5 (4.0)
|
DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-j45f-6mf3-3f4f |
7.2 (3.1)
8.4 (4.0)
|
Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-gfh8-gfv4-8h9v |
8.4 (3.1)
8.4 (4.0)
|
Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allow… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-g6rc-w49h-g45h |
7.2 (3.1)
7.3 (4.0)
|
A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of th… | 2026-01-07T12:31:23Z | 2026-01-16T00:30:54Z |
| ghsa-95jg-fj9g-2q86 |
7.8 (3.1)
8.5 (4.0)
|
Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client servic… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-5pjp-gg7j-8pmr |
6.1 (3.1)
|
Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to ex… | 2026-01-15T21:31:47Z | 2026-01-16T00:30:54Z |
| ghsa-44f7-qvr5-xm7g |
9.8 (3.1)
|
Phpgurukul Cyber Cafe Management System v1.0 contains a SQL Injection vulnerability in the user man… | 2026-01-15T21:31:48Z | 2026-01-16T00:30:54Z |
| ghsa-3p5q-2rr6-m932 |
9.8 (3.1)
7.0 (4.0)
|
Ether MP3 CD Burner 1.3.8 contains a buffer overflow vulnerability in the registration name field t… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-3486-2953-r9fc |
8.2 (3.1)
7.1 (4.0)
|
Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpo… | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-2vwg-39m6-fw44 |
7.6 (3.1)
|
A stored cross-site scripting (XSS) vulnerability exists in the user profile text fields of Altium … | 2026-01-16T00:30:54Z | 2026-01-16T00:30:54Z |
| ghsa-3r28-hhhx-hfjf |
6.7 (3.1)
|
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after … | 2025-12-11T21:31:33Z | 2026-01-16T00:30:53Z |
| ghsa-9wx4-h78v-vm56 |
5.6 (3.1)
|
Requests `Session` object does not verify requests after making first request with verify=False | 2024-05-20T20:15:00Z | 2026-01-16T00:02:49Z |
| ghsa-579w-22j4-4749 |
7.5 (3.1)
|
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter | 2023-01-18T18:21:12Z | 2026-01-15T23:23:18Z |
| ghsa-v897-pv23-r8cw |
3.7 (3.1)
|
Keycloak has an improper input validation vulnerability | 2026-01-15T15:31:17Z | 2026-01-15T23:10:39Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-28704 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.533521Z |
| gsd-2024-28516 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.533295Z |
| gsd-2024-28274 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.531891Z |
| gsd-2024-28596 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.531677Z |
| gsd-2024-28683 | DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via cre… | 2024-03-08T06:02:46.531464Z |
| gsd-2024-28638 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.531222Z |
| gsd-2024-28549 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.530473Z |
| gsd-2024-28413 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.530269Z |
| gsd-2024-28464 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.530061Z |
| gsd-2024-28647 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.529706Z |
| gsd-2024-28245 | KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render u… | 2024-03-08T06:02:46.529441Z |
| gsd-2024-28699 | A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbi… | 2024-03-08T06:02:46.529203Z |
| gsd-2024-28608 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.528988Z |
| gsd-2024-28475 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.528762Z |
| gsd-2024-28312 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.528256Z |
| gsd-2024-28473 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.526411Z |
| gsd-2024-28701 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.524846Z |
| gsd-2024-28331 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.524291Z |
| gsd-2024-28346 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.524012Z |
| gsd-2024-28681 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability … | 2024-03-08T06:02:46.523779Z |
| gsd-2024-28247 | The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without in… | 2024-03-08T06:02:46.523569Z |
| gsd-2024-28408 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.523092Z |
| gsd-2024-28321 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.522881Z |
| gsd-2024-28500 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.522309Z |
| gsd-2024-28372 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.522104Z |
| gsd-2024-28532 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.520972Z |
| gsd-2024-28261 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.520766Z |
| gsd-2024-28662 | A Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of mis… | 2024-03-08T06:02:46.520558Z |
| gsd-2024-28648 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.520344Z |
| gsd-2024-28249 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane… | 2024-03-08T06:02:46.520116Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-188281 | Malicious code in nightwatch-aldebaran-stratosphere-bionics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188280 | Malicious code in nightwatch-abiogenesis-semantic-release-supercluster (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188279 | Malicious code in nightmare-version-levels-mui (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188278 | Malicious code in nightmare-start-meteor-node-sass (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188277 | Malicious code in nightmare-semantic-ui-init-config (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188276 | Malicious code in nightmare-package-quark-cli (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188275 | Malicious code in nightmare-mesosphere-iota-dotenv (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188274 | Malicious code in nightmare-jasmine-janus-prompts (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188273 | Malicious code in nightmare-europa-restart-antares (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188272 | Malicious code in nextjs-weywot-bioinformatics-selenium (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188271 | Malicious code in nextjs-tachyon-apollo-cosmos (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188270 | Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188269 | Malicious code in nextjs-shelljs-centaurus-singularity (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188268 | Malicious code in nextjs-sagitta-backend-nightwatch (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188267 | Malicious code in nextjs-radiant-proteomics-neptune (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188266 | Malicious code in nextjs-quark-supercluster-nebula (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188265 | Malicious code in nextjs-octans-interferometry-fusion (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188264 | Malicious code in nextjs-html-webpack-plugin-express-gemini (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188263 | Malicious code in nextjs-google-transport-markdownlint (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188262 | Malicious code in nextjs-event-chromedriver-pm2 (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188261 | Malicious code in new-user-static-awk-zeta (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188260 | Malicious code in new-transpile-alpha-log-proxy (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188259 | Malicious code in new-promise-compress-compress-private (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188258 | Malicious code in new-optimize-async-spy-process (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188257 | Malicious code in new-mu-sigma-float-visualize (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188256 | Malicious code in new-decode-process-orchestrate-balance (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188255 | Malicious code in new-alpha-transpile-air-resolve (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188254 | Malicious code in neutronstar-regulus-sqlite-stratosphere (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188253 | Malicious code in neutronstar-quark-dotenv-safe-koa (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188252 | Malicious code in neutronstar-native-dynamo-hydra (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0264 | D-LINK Router: Schwachstelle ermöglicht Codeausführung | 2024-01-31T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2890 | Microsoft Windows: Mehrere Schwachstellen | 2023-11-14T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2851 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-11-07T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2790 | Google Chrome: Mehrere Schwachstellen | 2023-10-31T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2742 | Google Chrome: Schwachstelle ermöglicht Codeausführung | 2023-10-24T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2541 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2023-10-03T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2310 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2023-09-12T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2215 | Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2023-08-29T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2108 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2023-08-22T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-2064 | Google Chrome & Microsoft Edge: Mehrere Schwachstellen | 2023-08-15T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1950 | Google Chrome: Mehrere Schwachstellen | 2023-08-02T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1786 | Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-07-18T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1574 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2023-06-26T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1452 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2023-06-13T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1368 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2023-06-05T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2023-1325 | Google Chrome: Mehrere Schwachstellen | 2023-05-30T22:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2022-2313 | Apple macOS: Mehrere Schwachstellen | 2022-12-13T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2022-1873 | Mozilla Firefox: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2017-03-19T23:00:00.000+00:00 | 2024-01-31T23:00:00.000+00:00 |
| wid-sec-w-2024-0256 | Dell Computer: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0253 | Unify OpenScape Business: Schwachstelle ermöglicht Codeausführung | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0252 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0250 | HCL BigFix ServiceNow: Schwachstelle ermöglicht Codeausführung | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0249 | Splunk Splunk Enterprise: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0248 | VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-30T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2023-1498 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-06-18T22:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2022-2151 | Pro-FTPd: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-11-22T23:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2022-0143 | avahi: Schwachstelle ermöglicht Denial of Service | 2021-06-03T22:00:00.000+00:00 | 2024-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-0243 | Linux Kernel: Schwachstelle ermöglicht Codeausführung | 2024-01-29T23:00:00.000+00:00 | 2024-01-29T23:00:00.000+00:00 |
| wid-sec-w-2024-0242 | ESET Endpoint Security und ESET NOD32 Antivirus: Schwachstelle ermöglicht Privilegieneskalation | 2024-01-29T23:00:00.000+00:00 | 2024-01-29T23:00:00.000+00:00 |
| wid-sec-w-2024-0241 | IBM Operational Decision Manager: Mehrere Schwachstellen | 2024-01-29T23:00:00.000+00:00 | 2024-01-29T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:0856 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.11 security updates and bug fixes | 2022-03-14T13:54:34+00:00 | 2026-01-13T21:49:23+00:00 |
| rhba-2022:1386 | Red Hat Bug Fix Advisory: .NET Core 3.1 on RHEL 8 bugfix update | 2022-04-18T14:25:21+00:00 | 2026-01-13T21:49:21+00:00 |
| rhba-2022:1352 | Red Hat Bug Fix Advisory: .NET Core 3.1 on RHEL 7 bugfix update | 2022-04-13T14:30:05+00:00 | 2026-01-13T21:49:15+00:00 |
| rhsa-2020:0897 | Red Hat Security Advisory: icu security update | 2020-03-18T17:18:38+00:00 | 2026-01-13T21:47:53+00:00 |
| rhsa-2023:6821 | Red Hat Security Advisory: mariadb:10.5 security update | 2023-11-08T15:38:43+00:00 | 2026-01-13T21:47:47+00:00 |
| rhsa-2022:6735 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2022-10-25T08:44:13+00:00 | 2026-01-13T21:47:38+00:00 |
| rhsa-2022:4818 | Red Hat Security Advisory: mariadb:10.3 security and bug fix update | 2022-05-31T12:20:53+00:00 | 2026-01-13T21:47:38+00:00 |
| rhsa-2022:1557 | Red Hat Security Advisory: mariadb:10.5 security, bug fix, and enhancement update | 2022-04-26T17:34:20+00:00 | 2026-01-13T21:47:36+00:00 |
| rhsa-2022:1556 | Red Hat Security Advisory: mariadb:10.3 security and bug fix update | 2022-04-26T21:15:26+00:00 | 2026-01-13T21:47:36+00:00 |
| rhsa-2021:4213 | Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update | 2021-11-09T18:40:02+00:00 | 2026-01-13T21:47:34+00:00 |
| rhsa-2021:3590 | Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update | 2021-09-21T10:13:12+00:00 | 2026-01-13T21:47:33+00:00 |
| rhsa-2021:1446 | Red Hat Security Advisory: OpenJDK 11.0.11 Security Update for Portable Linux Builds | 2021-04-28T12:35:03+00:00 | 2026-01-13T21:47:32+00:00 |
| rhsa-2021:1445 | Red Hat Security Advisory: OpenJDK 8u292 Windows Builds release and security update | 2021-04-28T12:34:14+00:00 | 2026-01-13T21:47:32+00:00 |
| rhsa-2021:1444 | Red Hat Security Advisory: OpenJDK 8u292 Security Update for Portable Linux Builds | 2021-04-28T12:33:47+00:00 | 2026-01-13T21:47:31+00:00 |
| rhsa-2021:1307 | Red Hat Security Advisory: java-11-openjdk security update | 2021-04-20T22:07:54+00:00 | 2026-01-13T21:47:31+00:00 |
| rhsa-2021:1306 | Red Hat Security Advisory: java-11-openjdk security update | 2021-04-20T22:05:43+00:00 | 2026-01-13T21:47:31+00:00 |
| rhsa-2021:1301 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2021-04-20T21:37:35+00:00 | 2026-01-13T21:47:30+00:00 |
| rhsa-2020:4479 | Red Hat Security Advisory: libxml2 security update | 2020-11-04T02:12:23+00:00 | 2026-01-13T21:47:30+00:00 |
| rhsa-2021:1298 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2021-04-20T22:26:21+00:00 | 2026-01-13T21:47:28+00:00 |
| rhsa-2021:1297 | Red Hat Security Advisory: java-11-openjdk security and bug fix update | 2021-04-20T22:53:13+00:00 | 2026-01-13T21:47:28+00:00 |
| rhsa-2021:0949 | Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update | 2021-03-22T10:10:55+00:00 | 2026-01-13T21:47:26+00:00 |
| rhsa-2020:3996 | Red Hat Security Advisory: libxml2 security and bug fix update | 2020-09-29T19:48:02+00:00 | 2026-01-13T21:47:25+00:00 |
| rhsa-2020:2646 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update | 2020-06-22T13:08:26+00:00 | 2026-01-13T21:47:22+00:00 |
| rhsa-2021:3459 | Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.8] | 2021-09-08T14:09:25+00:00 | 2026-01-13T21:44:39+00:00 |
| rhsa-2021:2179 | Red Hat Security Advisory: RHV Manager security update (ovirt-engine) [ovirt-4.4.6] | 2021-06-01T13:24:46+00:00 | 2026-01-13T21:44:37+00:00 |
| rhsa-2021:2122 | Red Hat Security Advisory: OpenShift Container Platform 4.7.13 packages and security update | 2021-06-01T04:12:55+00:00 | 2026-01-13T21:44:37+00:00 |
| rhsa-2021:1597 | Red Hat Security Advisory: libxml2 security update | 2021-05-18T14:40:48+00:00 | 2026-01-13T21:44:35+00:00 |
| rhsa-2021:1016 | Red Hat Security Advisory: OpenShift Container Platform 4.5.37 security update | 2021-04-13T23:35:52+00:00 | 2026-01-13T21:44:34+00:00 |
| rhsa-2020:5119 | Red Hat Security Advisory: OpenShift Container Platform 4.5.20 packages and golang security update | 2020-11-24T11:57:51+00:00 | 2026-01-13T21:44:34+00:00 |
| rhsa-2021:0713 | Red Hat Security Advisory: OpenShift Container Platform 4.5.34 packages and security update | 2021-03-11T04:48:46+00:00 | 2026-01-13T21:44:33+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-23651 | BuildKit possible race condition with accessing subpaths from cache mounts | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-22025 | A vulnerability in Node.js has been identified allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from an untrusted URL. The vulnerability stems from the fact that the fetch() function in Node.js always decodes Brotli making it possible for an attacker to cause resource exhaustion when fetching content from an untrusted URL. An attacker controlling the URL passed into fetch() can exploit this vulnerability to exhaust memory potentially leading to process termination depending on the system configuration. | 2024-03-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-22017 | setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0 Node.js 20.4.0 and Node.js 21. | 2024-03-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-21885 | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-21646 | Azure IoT Platform Device SDK Remote Code Execution Vulnerability | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-20328 | ClamAV VirusEvent File Processing Command Injection Vulnerability | 2024-03-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-1874 | Command injection via array-ish $command parameter of proc_open() | 2024-04-02T07:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-1086 | Use-after-free in Linux kernel's netfilter: nf_tables component | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-0985 | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-0690 | Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-0607 | Kernel: nf_tables: pointer math issue in nft_byteorder_eval() | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-0567 | Gnutls: rejects certificate chain with distributed trust | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2024-0553 | Gnutls: incomplete fix for cve-2023-5981 | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-7250 | Iperf3: possible denial of service | 2024-03-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6932 | Use-after-free in Linux kernel's ipv4: igmp component | 2023-12-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6915 | Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6780 | Glibc: integer overflow in __vsyslog_internal() | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6779 | Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6516 | Specific recursive query patterns may lead to an out-of-memory condition | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6246 | Glibc: heap-based buffer overflow in __vsyslog_internal() | 2024-01-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-6111 | Use-after-free in Linux kernel's netfilter: nf_tables component | 2023-11-01T07:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-5528 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation | 2023-11-01T07:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-5408 | Openshift: modification of node role labels | 2023-11-01T07:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-52429 | dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate more than INT_MAX bytes and crash because of a missing check for struct dm_ioctl.target_count. | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-52426 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-52425 | libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed. | 2024-02-02T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-5215 | Libnbd: crash or misbehaviour when nbd server returns an unexpected block size | 2023-09-01T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-51764 | Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>) a different solution is required such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23 3.6.13 3.7.9 3.8.4 or 3.9. | 2023-12-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-51714 | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17 6.x before 6.2.11 6.3.x through 6.5.x before 6.5.4 and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check. | 2023-12-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2023-51385 | In ssh in OpenSSH before 9.6 OS command injection might occur if a user name or host name has shell metacharacters and this name is referenced by an expansion token in certain situations. For example an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | 2023-12-01T08:00:00.000Z | 2024-06-30T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201703-1072 | Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware … | 2025-04-20T23:29:44.366000Z |
| var-201703-1185 | Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) v… | 2025-04-20T23:29:44.229000Z |
| var-201704-0074 | In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copyin… | 2025-04-20T23:29:44.024000Z |
| var-201704-0119 | The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through… | 2025-04-20T23:29:43.861000Z |
| var-201704-0137 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, r… | 2025-04-20T23:29:43.801000Z |
| var-201704-0158 | Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack v… | 2025-04-20T23:29:43.777000Z |
| var-201704-0284 | Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. Successful … | 2025-04-20T23:29:43.640000Z |
| var-201704-0431 | Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrate… | 2025-04-20T23:29:43.437000Z |
| var-201704-0473 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C0… | 2025-04-20T23:29:43.405000Z |
| var-201704-0494 | Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei… | 2025-04-20T23:29:43.369000Z |
| var-201704-0496 | Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei… | 2025-04-20T23:29:43.334000Z |
| var-201704-0495 | Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and … | 2025-04-20T23:29:43.299000Z |
| var-201704-0914 | Privilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers … | 2025-04-20T23:29:43.188000Z |
| var-201704-0956 | A vulnerability in the Cisco Unified Communications Manager web interface could allow an … | 2025-04-20T23:29:43.131000Z |
| var-201704-0977 | A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller … | 2025-04-20T23:29:43.094000Z |
| var-201704-1019 | Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attacker… | 2025-04-20T23:29:43.033000Z |
| var-201704-1229 | On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch I… | 2025-04-20T23:29:42.944000Z |
| var-201704-1334 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(… | 2025-04-20T23:29:42.866000Z |
| var-201705-3517 | In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disru… | 2025-04-20T23:29:42.353000Z |
| var-201705-3664 | A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could… | 2025-04-20T23:29:42.266000Z |
| var-201705-3685 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains… | 2025-04-20T23:29:41.897000Z |
| var-201706-0020 | Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service … | 2025-04-20T23:29:41.615000Z |
| var-201706-0083 | I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to exec… | 2025-04-20T23:29:41.524000Z |
| var-201706-0084 | I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypa… | 2025-04-20T23:29:41.493000Z |
| var-201706-0125 | IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access som… | 2025-04-20T23:29:41.437000Z |
| var-201706-0360 | On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data… | 2025-04-20T23:29:41.227000Z |
| var-201706-0358 | On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be… | 2025-04-20T23:29:41.192000Z |
| var-201706-0359 | On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to … | 2025-04-20T23:29:41.160000Z |
| var-201706-0465 | An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 termin… | 2025-04-20T23:29:40.926000Z |
| var-201706-0364 | A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 termin… | 2025-04-20T23:29:40.884000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2023:2294-1 | Security update for rmt-server | 2023-05-25T07:55:46Z | 2023-05-25T07:55:46Z |
| suse-su-2023:2292-1 | Security update for kubernetes1.23 | 2023-05-25T07:21:44Z | 2023-05-25T07:21:44Z |
| suse-su-2023:2290-1 | Security update for ucode-intel | 2023-05-24T15:05:55Z | 2023-05-24T15:05:55Z |
| suse-su-2023:2289-1 | Security update for ucode-intel | 2023-05-24T15:05:28Z | 2023-05-24T15:05:28Z |
| suse-su-2023:2288-1 | Security update for kubernetes1.18 | 2023-05-24T15:04:48Z | 2023-05-24T15:04:48Z |
| suse-su-2023:2287-1 | Security update for cups-filters, poppler, texlive | 2023-05-24T12:45:57Z | 2023-05-24T12:45:57Z |
| suse-su-2023:2285-1 | Security update for texlive | 2023-05-24T11:16:57Z | 2023-05-24T11:16:57Z |
| suse-su-2023:2284-1 | Security update for texlive | 2023-05-24T11:15:37Z | 2023-05-24T11:15:37Z |
| suse-su-2023:2280-1 | Security update for rmt-server | 2023-05-24T07:55:54Z | 2023-05-24T07:55:54Z |
| suse-su-2023:2275-1 | Security update for openvswitch | 2023-05-23T15:42:28Z | 2023-05-23T15:42:28Z |
| suse-su-2023:2274-1 | Security update for openvswitch | 2023-05-23T13:44:30Z | 2023-05-23T13:44:30Z |
| suse-su-2023:2273-1 | Security update for geoipupdate | 2023-05-23T06:49:59Z | 2023-05-23T06:49:59Z |
| suse-su-2023:2264-1 | Security update for python-Flask | 2023-05-22T10:21:27Z | 2023-05-22T10:21:27Z |
| suse-su-2023:2263-1 | Security update for python-Flask | 2023-05-22T10:16:24Z | 2023-05-22T10:16:24Z |
| suse-su-2023:2261-1 | Security update for terraform-provider-null | 2023-05-22T09:17:02Z | 2023-05-22T09:17:02Z |
| suse-su-2023:2259-1 | Security update for openvswitch | 2023-05-22T07:43:46Z | 2023-05-22T07:43:46Z |
| suse-su-2023:2256-1 | Security update for runc | 2023-05-19T13:26:59Z | 2023-05-19T13:26:59Z |
| suse-su-2023:2255-1 | Security update for openvswitch | 2023-05-19T13:22:35Z | 2023-05-19T13:22:35Z |
| suse-su-2023:2254-1 | Security update for containerd | 2023-05-19T13:20:42Z | 2023-05-19T13:20:42Z |
| suse-su-2023:2253-1 | Security update for terraform-provider-aws | 2023-05-19T13:18:02Z | 2023-05-19T13:18:02Z |
| suse-su-2023:2251-1 | Security update for openvswitch | 2023-05-19T09:29:04Z | 2023-05-19T09:29:04Z |
| suse-su-2023:2250-1 | Security update for openvswitch | 2023-05-19T09:10:39Z | 2023-05-19T09:10:39Z |
| suse-su-2023:2244-1 | Security update for ucode-intel | 2023-05-18T12:41:53Z | 2023-05-18T12:41:53Z |
| suse-su-2023:2243-1 | Security update for ucode-intel | 2023-05-18T12:41:14Z | 2023-05-18T12:41:14Z |
| suse-su-2023:2242-1 | Security update for java-1_8_0-openjdk | 2023-05-18T07:53:30Z | 2023-05-18T07:53:30Z |
| suse-su-2023:2241-1 | Security update for mysql-connector-java | 2023-05-18T07:52:05Z | 2023-05-18T07:52:05Z |
| suse-su-2023:2238-1 | Security update for java-1_8_0-openjdk | 2023-05-17T15:21:47Z | 2023-05-17T15:21:47Z |
| suse-su-2023:2234-1 | Security update for ovmf | 2023-05-17T14:22:24Z | 2023-05-17T14:22:24Z |
| suse-su-2023:2233-1 | Security update for cups-filters | 2023-05-17T14:08:45Z | 2023-05-17T14:08:45Z |
| suse-su-2023:2231-1 | Security update for the Linux Kernel | 2023-05-17T08:08:29Z | 2023-05-17T08:08:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2021:1951-1 | Security update for salt | 2021-07-11T09:06:25Z | 2021-07-11T09:06:25Z |
| opensuse-su-2021:1876-1 | Security update for snakeyaml | 2021-07-11T08:53:50Z | 2021-07-11T08:53:50Z |
| opensuse-su-2021:1961-1 | Security update for squid | 2021-07-11T08:50:48Z | 2021-07-11T08:50:48Z |
| opensuse-su-2021:2143-1 | Security update for libnettle | 2021-07-11T08:40:53Z | 2021-07-11T08:40:53Z |
| opensuse-su-2021:1998-1 | Security update for tpm2.0-tools | 2021-07-11T08:32:44Z | 2021-07-11T08:32:44Z |
| opensuse-su-2021:1995-1 | Security update for xstream | 2021-07-11T08:27:00Z | 2021-07-11T08:27:00Z |
| opensuse-su-2021:1840-1 | Security update for xstream | 2021-07-11T08:25:40Z | 2021-07-11T08:25:40Z |
| opensuse-su-2021:1655-1 | Security update for fribidi | 2021-07-11T08:16:35Z | 2021-07-11T08:16:35Z |
| opensuse-su-2021:2147-1 | Security update for freeradius-server | 2021-07-11T08:13:55Z | 2021-07-11T08:13:55Z |
| opensuse-su-2021:2153-1 | Security update for gupnp | 2021-07-11T08:05:56Z | 2021-07-11T08:05:56Z |
| opensuse-su-2021:2005-1 | Security update for jetty-minimal | 2021-07-11T08:05:38Z | 2021-07-11T08:05:38Z |
| opensuse-su-2021:2274-1 | Security update for kubevirt | 2021-07-11T07:30:34Z | 2021-07-11T07:30:34Z |
| opensuse-su-2021:1641-1 | Security update for djvulibre | 2021-07-11T06:27:04Z | 2021-07-11T06:27:04Z |
| opensuse-su-2021:1948-1 | Security update for djvulibre | 2021-07-11T06:26:01Z | 2021-07-11T06:26:01Z |
| opensuse-su-2021:1841-1 | Security update for dhcp | 2021-07-11T06:25:45Z | 2021-07-11T06:25:45Z |
| opensuse-su-2021:2177-1 | Security update for arpwatch | 2021-07-11T05:55:15Z | 2021-07-11T05:55:15Z |
| opensuse-su-2021:1845-1 | Security update for avahi | 2021-07-11T05:49:43Z | 2021-07-11T05:49:43Z |
| opensuse-su-2021:1024-1 | Security update for openscad | 2021-07-11T04:06:09Z | 2021-07-11T04:06:09Z |
| opensuse-su-2021:1834-1 | Security update for ceph | 2021-07-10T19:13:08Z | 2021-07-10T19:13:08Z |
| opensuse-su-2021:1651-1 | Security update for graphviz | 2021-07-10T19:11:03Z | 2021-07-10T19:11:03Z |
| opensuse-su-2021:1958-1 | Security update for libjpeg-turbo | 2021-07-10T19:10:52Z | 2021-07-10T19:10:52Z |
| opensuse-su-2021:1755-1 | Security update for libu2f-host | 2021-07-10T18:57:28Z | 2021-07-10T18:57:28Z |
| opensuse-su-2021:1860-1 | Security update for libwebp | 2021-07-10T18:55:42Z | 2021-07-10T18:55:42Z |
| opensuse-su-2021:1897-1 | Security update for libX11 | 2021-07-10T18:53:46Z | 2021-07-10T18:53:46Z |
| opensuse-su-2021:2196-1 | Security update for lua53 | 2021-07-10T18:53:36Z | 2021-07-10T18:53:36Z |
| opensuse-su-2021:1664-1 | Security update for libass | 2021-07-10T18:48:30Z | 2021-07-10T18:48:30Z |
| opensuse-su-2021:2118-1 | Security update for ovmf | 2021-07-10T18:41:04Z | 2021-07-10T18:41:04Z |
| opensuse-su-2021:1970-1 | Security update for postgresql10 | 2021-07-10T18:05:25Z | 2021-07-10T18:05:25Z |
| opensuse-su-2021:1854-1 | Security update for MozillaThunderbird | 2021-07-10T17:54:23Z | 2021-07-10T17:54:23Z |
| opensuse-su-2021:1815-1 | Security update for nginx | 2021-07-10T17:41:49Z | 2021-07-10T17:41:49Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-13783 | TOTOLINK A3002RU /boafrm/formSysLog文件缓冲区溢出漏洞 | 2025-06-24 | 2025-06-26 |
| cnvd-2025-13782 | TOTOLINK A3002RU /boafrm/formMultiAP文件缓冲区溢出漏洞 | 2025-06-24 | 2025-06-26 |
| cnvd-2025-13781 | TOTOLINK A3002R /boafrm/formSysLog文件缓冲区溢出漏洞 | 2025-06-24 | 2025-06-26 |
| cnvd-2025-13780 | TOTOLINK A3002R /boafrm/formMultiAP文件缓冲区溢出漏洞 | 2025-06-24 | 2025-06-26 |
| cnvd-2025-13777 | ABB多款产品跨站脚本漏洞（CNVD-2025-13777） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13776 | ABB多款产品弱密码存储漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13775 | ABB多款产品预测文件名漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13774 | ABB多款产品路径遍历漏洞（CNVD-2025-13774） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13773 | ABB多款产品权限提升漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13772 | ABB多款产品目录遍历漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13771 | ABB多款产品Servlet注入漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13770 | ABB多款产品SQL注入漏洞（CNVD-2025-13770） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13769 | ABB多款产品存在未明漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13768 | ABB多款产品路径遍历漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13767 | ABB多款产品代码注入漏洞（CNVD-2025-13767） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13766 | ABB多款产品信息泄露漏洞（CNVD-2025-13766） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13765 | ABB多款产品代码注入漏洞（CNVD-2025-13765） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13731 | ABB多款产品拒绝服务漏洞 | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13598 | ABB多款产品代码问题漏洞（CNVD-2025-13598） | 2025-06-17 | 2025-06-26 |
| cnvd-2025-13586 | JetBrains TeamCity信息泄露漏洞（CNVD-2025-13586） | 2025-04-02 | 2025-06-26 |
| cnvd-2025-13585 | JetBrains TeamCity信息泄露漏洞 | 2025-04-03 | 2025-06-26 |
| cnvd-2025-13584 | JetBrains Toolbox App存在未明漏洞（CNVD-2025-13584） | 2025-04-22 | 2025-06-26 |
| cnvd-2025-13583 | JetBrains Toolbox App存在未明漏洞 | 2025-04-22 | 2025-06-26 |
| cnvd-2025-13582 | JetBrains Toolbox App存在未明漏洞 | 2025-04-22 | 2025-06-26 |
| cnvd-2025-13546 | JetBrains rubymine存在未明漏洞 | 2025-04-22 | 2025-06-26 |
| cnvd-2025-13545 | JetBrains Rider存在未明漏洞 | 2025-04-30 | 2025-06-26 |
| cnvd-2025-13544 | JetBrains YouTrack访问控制错误漏洞 | 2025-05-28 | 2025-06-26 |
| cnvd-2025-13521 | D-Link DAP-1320栈缓冲区溢出漏洞（CNVD-2025-13521） | 2025-03-07 | 2025-06-26 |
| cnvd-2025-13520 | D-Link DAP-1320栈缓冲区溢出漏洞 | 2025-03-07 | 2025-06-26 |
| cnvd-2025-13519 | D-Link DIR-665缓冲区溢出漏洞 | 2025-06-20 | 2025-06-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-294 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |
| certfr-2018-avi-293 | Multiples vulnérabilités dans Tenable Nessus Agent | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |
| certfr-2018-avi-292 | Vulnérabilité dans le noyau Linux de RedHat | 2018-06-15T00:00:00.000000 | 2018-06-15T00:00:00.000000 |
| certfr-2018-avi-291 | Multiples vulnérabilités dans les produits SAP | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-290 | Vulnérabilité dans Xen | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-289 | Multiples vulnérabilités dans Apple Xcode | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-288 | Multiples vulnérabilités dans Tenable Nessus | 2018-06-14T00:00:00.000000 | 2018-06-14T00:00:00.000000 |
| certfr-2018-avi-287 | Multiples vulnérabilités dans Microsoft ChakraCore | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-286 | Multiples vulnérabilités dans Microsoft Windows | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-285 | Multiples vulnérabilités dans Microsoft Office | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-284 | Multiples vulnérabilités dans Microsoft Edge | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-283 | Multiples vulnérabilités dans Microsoft IE | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-282 | Multiples vulnérabilités dans Google Chrome et Chrome OS | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-281 | Vulnérabilité dans Bind | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-280 | Vulnérabilité dans le noyau Linux de Red Hat | 2018-06-13T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-277 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-06-12T00:00:00.000000 | 2018-06-13T00:00:00.000000 |
| certfr-2018-avi-279 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-278 | Vulnérabilité dans VMware AirWatch Agent | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-276 | Multiples vulnérabilités dans Asterisk | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-275 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-12T00:00:00.000000 | 2018-06-12T00:00:00.000000 |
| certfr-2018-avi-274 | Multiples vulnérabilités dans Google Chrome OS | 2018-06-08T00:00:00.000000 | 2018-06-08T00:00:00.000000 |
| certfr-2018-avi-273 | Multiples vulnérabilités dans Adobe Flash Player | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-272 | Multiples vulnérabilités dans Google Chrome | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-271 | Vulnérabilité dans Mozilla Firefox | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-270 | Multiples vulnérabilités dans les produits Cisco | 2018-06-07T00:00:00.000000 | 2018-06-07T00:00:00.000000 |
| certfr-2018-avi-269 | Vulnérabilité dans les produits F-Secure | 2018-06-06T00:00:00.000000 | 2018-06-06T00:00:00.000000 |
| certfr-2018-avi-268 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-06-06T00:00:00.000000 | 2018-06-06T00:00:00.000000 |
| certfr-2018-avi-267 | Multiples vulnérabilités dans Google Android | 2018-06-05T00:00:00.000000 | 2018-06-05T00:00:00.000000 |
| certfr-2018-avi-266 | Multiples vulnérabilités dans les produits Apple | 2018-06-04T00:00:00.000000 | 2018-06-04T00:00:00.000000 |
| certfr-2018-avi-265 | Multiples vulnérabilités dans SCADA Schneider Electric U.motion | 2018-06-01T00:00:00.000000 | 2018-06-01T00:00:00.000000 |