Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66112 |
4.3 (3.1)
|
WordPress Accessibility Toolkit by WebYes plugin <= 2.… |
WebToffee |
Accessibility Toolkit by WebYes |
2025-11-21T12:30:05.704Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66096 |
4.3 (3.1)
|
WordPress Table Block by Tableberg plugin <= 0.6.9 - B… |
Imtiaz Rayhan |
Table Block by Tableberg |
2025-11-21T12:29:59.819Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66085 |
4.3 (3.1)
|
WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken… |
tychesoftwares |
Arconix Shortcodes |
2025-11-21T12:29:58.133Z | 2026-01-20T14:28:23.965Z |
| CVE-2025-66110 |
5.3 (3.1)
|
WordPress Tiktok Feed plugin <= 1.0.22 - Broken Access… |
bPlugins |
Tiktok Feed |
2025-11-21T12:30:05.216Z | 2026-01-20T14:28:23.954Z |
| CVE-2025-66109 |
5.3 (3.1)
|
WordPress Cart Weight for WooCommerce plugin <= 1.9.11… |
octolize |
Cart Weight for WooCommerce |
2025-11-21T12:30:04.941Z | 2026-01-20T14:28:23.943Z |
| CVE-2025-66095 |
4.3 (3.1)
|
WordPress KiviCare plugin <= 3.6.13 - SQL Injection vu… |
Iqonic Design |
KiviCare |
2025-11-21T12:29:59.655Z | 2026-01-20T14:28:23.942Z |
| CVE-2025-66108 |
4.3 (3.1)
|
WordPress TNC Toolbox: Web Performance plugin <= 2.0.4… |
Merlot Digital (by TNC) |
TNC Toolbox: Web Performance |
2025-11-21T12:30:04.685Z | 2026-01-20T14:28:23.936Z |
| CVE-2025-66107 |
5.3 (3.1)
|
WordPress Subscriptions & Memberships for PayPal plugi… |
Scott Paterson |
Subscriptions & Memberships for PayPal |
2025-11-21T12:30:04.428Z | 2026-01-20T14:28:23.936Z |
| CVE-2025-66111 |
6.1 (3.1)
|
WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Sc… |
Nelio Software |
Nelio Popups |
2025-11-21T12:30:05.445Z | 2026-01-20T14:28:23.931Z |
| CVE-2025-66106 |
4.3 (3.1)
|
WordPress Featured Post Creative plugin <= 1.5.5 - Bro… |
Essential Plugin |
Featured Post Creative |
2025-11-21T12:30:03.619Z | 2026-01-20T14:28:23.931Z |
| CVE-2025-66089 |
4.3 (3.1)
|
WordPress Product Feed for WooCommerce plugin <= 2.3.1… |
WebToffee |
Product Feed for WooCommerce |
2025-11-21T12:29:58.741Z | 2026-01-20T14:28:23.926Z |
| CVE-2025-66065 |
5.3 (3.1)
|
WordPress Gutenverse plugin <= 3.2.1 - Broken Access C… |
Jegstudio |
Gutenverse |
2025-11-21T12:29:55.513Z | 2026-01-20T14:28:23.901Z |
| CVE-2025-66081 |
5.4 (3.1)
|
WordPress Head Meta Data plugin <= 20250327 - Cross Si… |
Jeff Starr |
Head Meta Data |
2025-11-21T12:29:57.410Z | 2026-01-20T14:28:23.868Z |
| CVE-2025-66078 |
9.1 (3.1)
|
WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote … |
jetmonsters |
Hotel Booking Lite |
2025-12-18T07:22:17.890Z | 2026-01-20T14:28:23.826Z |
| CVE-2025-66077 |
4.3 (3.1)
|
WordPress Legal Pages plugin <= 1.4.6 - Broken Access … |
wpWax |
Legal Pages |
2025-11-21T12:29:57.063Z | 2026-01-20T14:28:23.798Z |
| CVE-2025-66083 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.750Z | 2026-01-20T14:28:23.721Z |
| CVE-2025-66068 |
6.5 (3.1)
|
WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken A… |
InstaWP |
InstaWP Connect |
2025-12-18T07:22:17.312Z | 2026-01-20T14:28:23.688Z |
| CVE-2025-66086 |
5.3 (3.1)
|
WordPress SMS Alert Order Notifications plugin <= 3.8.… |
Cozy Vision |
SMS Alert Order Notifications |
2025-11-21T12:29:58.296Z | 2026-01-20T14:28:23.427Z |
| CVE-2025-66084 |
4.3 (3.1)
|
WordPress FluentCommunity plugin <= 2.0.0 - Broken Acc… |
Shahjahan Jewel |
FluentCommunity |
2025-11-21T12:29:57.920Z | 2026-01-20T14:28:23.392Z |
| CVE-2025-66057 |
6.3 (3.1)
|
WordPress Bold Page Builder plugin <= 5.5.2 - Cross Si… |
boldthemes |
Bold Page Builder |
2025-11-21T12:29:54.209Z | 2026-01-20T14:28:23.380Z |
| CVE-2025-66073 |
6.5 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Inj… |
Cozmoslabs |
WP Webhooks |
2025-11-21T12:29:56.667Z | 2026-01-20T14:28:23.347Z |
| CVE-2025-64638 |
5.3 (3.1)
|
WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - … |
OnPay.io |
OnPay.io for WooCommerce |
2025-12-16T08:12:51.913Z | 2026-01-20T14:28:23.328Z |
| CVE-2025-66072 |
9.8 (3.1)
|
WordPress UsersWP plugin <= 1.2.47 - Broken Access Con… |
Stiofan |
UsersWP |
2025-11-21T12:29:56.382Z | 2026-01-20T14:28:23.321Z |
| CVE-2025-66059 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.426Z | 2026-01-20T14:28:23.317Z |
| CVE-2025-66082 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.578Z | 2026-01-20T14:28:23.316Z |
| CVE-2025-66056 |
4.3 (3.1)
|
WordPress Uncanny Automator plugin < 6.10.0 - Sensitiv… |
Uncanny Owl |
Uncanny Automator |
2025-11-21T12:29:54.000Z | 2026-01-20T14:28:23.283Z |
| CVE-2025-66062 |
3.7 (3.1)
|
WordPress WP YouTube Lyte plugin <= 1.7.28 - Open Redi… |
Frank Goossens |
WP YouTube Lyte |
2025-11-21T12:29:54.981Z | 2026-01-20T14:28:23.280Z |
| CVE-2025-66054 |
7.5 (3.1)
|
WordPress LearnPress plugin <= 4.2.9.4 - Broken Access… |
ThimPress |
LearnPress |
2025-12-18T07:22:17.129Z | 2026-01-20T14:28:23.253Z |
| CVE-2025-66060 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.618Z | 2026-01-20T14:28:23.244Z |
| CVE-2025-66055 |
7.2 (3.1)
|
WordPress Email Subscribers & Newsletters plugin <= 5.… |
Icegram |
Email Subscribers & Newsletters |
2025-11-21T12:29:53.666Z | 2026-01-20T14:28:23.237Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67581 |
5.3 (3.1)
|
WordPress TrueBooker plugin <= 1.1.0 - Broken Access C… |
themetechmount |
TrueBooker |
2025-12-09T14:14:15.375Z | 2026-01-20T14:28:25.952Z |
| CVE-2025-67580 |
5.3 (3.1)
|
WordPress Constant Contact + WooCommerce plugin <= 2.4… |
Constant Contact |
Constant Contact + WooCommerce |
2025-12-09T14:14:15.160Z | 2026-02-11T15:54:14.434Z |
| CVE-2025-67579 |
5.3 (3.1)
|
WordPress User Extra Fields plugin <= 16.8 - Broken Ac… |
vanquish |
User Extra Fields |
2025-12-09T14:14:14.852Z | 2026-02-11T15:55:18.426Z |
| CVE-2025-67578 |
5.3 (3.1)
|
WordPress WP Email Capture plugin <= 3.12.4 - Broken A… |
Rhys Wynne |
WP Email Capture |
2025-12-09T14:14:14.654Z | 2026-02-11T15:55:51.260Z |
| CVE-2025-67577 |
5.3 (3.1)
|
WordPress Easy Form Builder plugin <= 3.8.20 - Broken … |
hassantafreshi |
Easy Form Builder |
2025-12-09T14:14:14.438Z | 2026-02-11T15:56:59.982Z |
| CVE-2025-67576 |
5.3 (3.1)
|
WordPress Simple Link Directory plugin <= 8.8.3 - Brok… |
QuantumCloud |
Simple Link Directory |
2025-12-09T14:14:13.956Z | 2026-02-11T15:57:17.590Z |
| CVE-2025-39848 |
N/A
|
ax25: properly unshare skbs in ax25_kiss_rcv() |
Linux |
Linux |
2025-09-19T15:26:21.403Z | 2025-11-03T17:44:06.959Z |
| CVE-2025-67575 |
5.3 (3.1)
|
WordPress Sitewide Notice WP plugin <= 2.4.1 - Broken … |
Andrew Lima |
Sitewide Notice WP |
2025-12-09T14:14:13.775Z | 2026-02-11T15:57:40.886Z |
| CVE-2025-67574 |
5.3 (3.1)
|
WordPress Booking calendar, Appointment Booking System… |
wpdevart |
Booking calendar, Appointment Booking System |
2025-12-09T14:14:13.576Z | 2026-02-12T15:48:51.740Z |
| CVE-2025-67573 |
5.3 (3.1)
|
WordPress Sailing theme < 4.4.6 - Broken Access Contro… |
ThimPress |
Sailing |
2025-12-09T14:14:13.358Z | 2026-01-20T14:28:25.958Z |
| CVE-2025-67572 |
5.3 (3.1)
|
WordPress PenNews theme < 6.7.4 - Broken Access Contro… |
PenciDesign |
PenNews |
2025-12-09T14:14:13.153Z | 2026-01-20T14:28:25.962Z |
| CVE-2025-67571 |
5.3 (3.1)
|
WordPress WPFunnels plugin <= 3.6.2 - Broken Access Co… |
WPFunnels |
WPFunnels |
2025-12-09T14:14:12.900Z | 2026-01-20T14:28:25.925Z |
| CVE-2025-67570 |
5.3 (3.1)
|
WordPress WPForms Google Sheet Connector plugin <= 4.0… |
GSheetConnector by WesternDeal |
WPForms Google Sheet Connector |
2025-12-09T14:14:12.713Z | 2026-01-20T14:28:25.963Z |
| CVE-2025-67569 |
5.3 (3.1)
|
WordPress AdForest theme <= 6.0.11 - Broken Access Con… |
scriptsbundle |
AdForest |
2025-12-09T14:14:12.523Z | 2026-01-20T14:28:25.852Z |
| CVE-2025-67568 |
5.3 (3.1)
|
WordPress Basel theme <= 5.9.1 - Broken Access Control… |
xtemos |
Basel |
2025-12-09T14:14:12.329Z | 2026-01-20T14:28:25.986Z |
| CVE-2025-67567 |
5.3 (3.1)
|
WordPress Sober theme <= 3.5.11 - Sensitive Data Expos… |
uixthemes |
Sober |
2025-12-09T14:14:12.134Z | 2026-01-20T14:28:25.898Z |
| CVE-2025-67566 |
5.3 (3.1)
|
WordPress Woffice Core plugin <= 5.4.30 - Broken Acces… |
WofficeIO |
Woffice Core |
2025-12-09T14:14:11.939Z | 2026-01-20T14:28:25.936Z |
| CVE-2025-67565 |
5.3 (3.1)
|
WordPress Rehub theme <= 19.9.9.1 - Sensitive Data Exp… |
sizam |
Rehub |
2025-12-09T14:14:11.750Z | 2026-01-20T14:28:25.931Z |
| CVE-2025-67564 |
5.3 (3.1)
|
WordPress Pixel Manager for WooCommerce plugin <= 1.51… |
alekv |
Pixel Manager for WooCommerce |
2025-12-09T14:14:11.456Z | 2026-01-20T14:28:25.973Z |
| CVE-2025-67563 |
5.3 (3.1)
|
WordPress Post SMTP plugin <= 3.6.1 - Broken Access Co… |
Saad Iqbal |
Post SMTP |
2025-12-09T14:14:11.248Z | 2026-01-20T14:28:25.913Z |
| CVE-2025-67562 |
5.3 (3.1)
|
WordPress Image Caption Hover Pro plugin < 20.0 - Brok… |
WebCodingPlace |
Image Caption Hover Pro |
2025-12-09T14:14:10.979Z | 2026-01-20T14:28:25.864Z |
| CVE-2025-67561 |
5.4 (3.1)
|
WordPress Debug Log Viewer plugin <= 2.0.3 - Broken Ac… |
Oleksandr Lysyi |
Debug Log Viewer |
2025-12-09T14:14:10.737Z | 2026-01-20T14:28:25.904Z |
| CVE-2025-67560 |
6.5 (3.1)
|
WordPress Listdom plugin <= 5.0.1 - Broken Access Cont… |
Webilia Inc. |
Listdom |
2025-12-09T14:14:09.636Z | 2026-01-20T14:28:25.858Z |
| CVE-2025-67559 |
5.4 (3.1)
|
WordPress Online Booking & Scheduling Calendar for Wor… |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2025-12-09T14:14:09.425Z | 2026-01-20T14:28:25.890Z |
| CVE-2025-67558 |
6.5 (3.1)
|
WordPress Rencontre plugin <= 3.13.7 - Cross Site Scri… |
Jacques Malgrange |
Rencontre |
2025-12-09T14:14:09.063Z | 2026-01-20T14:28:25.982Z |
| CVE-2025-67557 |
6.5 (3.1)
|
WordPress WP eBay Product Feeds plugin <= 3.4.9 - Cros… |
Rhys Wynne |
WP eBay Product Feeds |
2025-12-09T14:14:08.814Z | 2026-01-20T14:28:25.932Z |
| CVE-2025-67556 |
5.9 (3.1)
|
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross… |
ThemeHigh |
Advanced FAQ Manager |
2025-12-09T14:14:08.628Z | 2026-01-20T14:28:25.913Z |
| CVE-2025-67555 |
6.5 (3.1)
|
WordPress UseStrict's Calendly Embedder plugin <= 1.1.… |
useStrict |
UseStrict's Calendly Embedder |
2025-12-09T14:14:08.288Z | 2026-01-20T14:28:25.924Z |
| CVE-2025-67554 |
5.9 (3.1)
|
WordPress Cookie Notice & Compliance for GDPR / CCPA p… |
Humanityco |
Cookie Notice & Compliance for GDPR / CCPA |
2025-12-09T14:14:08.007Z | 2026-01-20T14:28:25.845Z |
| CVE-2025-67553 |
6.5 (3.1)
|
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross… |
ThemeHigh |
Advanced FAQ Manager |
2025-12-09T14:14:07.745Z | 2026-01-20T14:28:25.999Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-67581 | Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking all… | 2025-12-09T16:18:35.850 | 2026-01-20T15:19:25.870 |
| fkie_cve-2025-67580 | Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-con… | 2025-12-09T16:18:35.640 | 2026-01-20T15:19:25.747 |
| fkie_cve-2025-67579 | Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Explo… | 2025-12-09T16:18:35.457 | 2026-01-20T15:19:25.623 |
| fkie_cve-2025-67578 | Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiti… | 2025-12-09T16:18:35.267 | 2026-01-20T15:19:25.497 |
| fkie_cve-2025-67577 | Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Ex… | 2025-12-09T16:18:35.087 | 2026-01-20T15:19:25.343 |
| fkie_cve-2025-67576 | Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory all… | 2025-12-09T16:18:34.900 | 2026-01-20T15:19:25.210 |
| fkie_cve-2025-39848 | In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in… | 2025-09-19T16:15:43.640 | 2026-01-20T15:19:24.943 |
| fkie_cve-2025-67575 | Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exp… | 2025-12-09T16:18:34.713 | 2026-01-20T15:19:24.910 |
| fkie_cve-2025-67574 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System bookin… | 2025-12-09T16:18:34.520 | 2026-01-20T15:19:24.733 |
| fkie_cve-2025-67573 | Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Conf… | 2025-12-09T16:18:34.390 | 2026-01-20T15:19:24.580 |
| fkie_cve-2025-67572 | Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Co… | 2025-12-09T16:18:34.247 | 2026-01-20T15:19:24.413 |
| fkie_cve-2025-67571 | Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly … | 2025-12-09T16:18:34.117 | 2026-01-20T15:19:24.263 |
| fkie_cve-2025-67570 | Missing Authorization vulnerability in GSheetConnector by WesternDeal WPForms Google Sheet Connecto… | 2025-12-09T16:18:33.963 | 2026-01-20T15:19:24.133 |
| fkie_cve-2025-67569 | Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectl… | 2025-12-09T16:18:33.800 | 2026-01-20T15:19:24.010 |
| fkie_cve-2025-67568 | Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured … | 2025-12-09T16:18:33.607 | 2026-01-20T15:19:23.860 |
| fkie_cve-2025-67567 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthem… | 2025-12-09T16:18:33.427 | 2026-01-20T15:19:23.710 |
| fkie_cve-2025-67566 | Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorr… | 2025-12-09T16:18:33.270 | 2026-01-20T15:19:23.563 |
| fkie_cve-2025-67565 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam R… | 2025-12-09T16:18:33.090 | 2026-01-20T15:19:23.423 |
| fkie_cve-2025-67564 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T16:18:32.960 | 2026-01-20T15:19:23.257 |
| fkie_cve-2025-67563 | Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly… | 2025-12-09T16:18:32.823 | 2026-01-20T15:19:23.130 |
| fkie_cve-2025-67562 | Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T16:18:32.693 | 2026-01-20T15:19:23.007 |
| fkie_cve-2025-67561 | Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exp… | 2025-12-09T16:18:32.557 | 2026-01-20T15:19:22.877 |
| fkie_cve-2025-67560 | Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly C… | 2025-12-09T16:18:32.427 | 2026-01-20T15:19:22.753 |
| fkie_cve-2025-67559 | Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by … | 2025-12-09T16:18:32.290 | 2026-01-20T15:19:22.610 |
| fkie_cve-2025-67558 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:32.150 | 2026-01-20T15:19:22.487 |
| fkie_cve-2025-67557 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:32.017 | 2026-01-20T15:19:22.360 |
| fkie_cve-2025-67556 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:31.890 | 2026-01-20T15:19:22.233 |
| fkie_cve-2025-67555 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:31.753 | 2026-01-20T15:19:22.107 |
| fkie_cve-2025-67554 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:31.603 | 2026-01-20T15:19:21.977 |
| fkie_cve-2025-67553 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:31.410 | 2026-01-20T15:19:21.127 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9q7c-qmhm-jv86 |
3.4 (3.1)
|
Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks | 2025-06-26T21:11:09Z | 2026-01-15T17:47:34Z |
| ghsa-7qm7-455j-5p63 |
10.0 (3.1)
|
enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain | 2026-01-14T16:52:30Z | 2026-01-15T17:46:45Z |
| ghsa-rfv7-m5gp-fxpc |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the cloneType parameter of the… | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-fw5g-998f-4jxj |
4.3 (3.1)
|
Certain error messages returned by the application expose internal system details that should not b… | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-fr64-mhrh-8996 |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the wanSpeed parameter of the … | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-cjqj-7q2q-jx9c |
2.9 (3.1)
|
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occur… | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-3xfm-x84x-qwwq |
3.7 (3.1)
|
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions ar… | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-2j3v-cxmf-cmp7 |
5.9 (3.1)
|
A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occu… | 2026-01-15T15:31:21Z | 2026-01-15T15:31:21Z |
| ghsa-x9mj-9378-r98g |
5.3 (3.1)
|
Certain requests pass the authentication token in the URL as string query parameter, making it vuln… | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-q3c7-4hv8-jhvp |
5.5 (3.1)
|
An access control vulnerability was discovered in Grafana OSS where an Organization administrator c… | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-p5pg-4vx4-pqj7 |
4.3 (3.1)
|
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing … | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-mq86-p3gw-wcpj |
8.3 (3.1)
|
In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to becom… | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-gm89-qh2c-m553 |
4.2 (3.1)
|
An open redirect vulnerability has been identified in Grafana OSS organization switching functional… | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-9r7m-2qj2-8f7h |
5.0 (3.1)
|
This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by … | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-47rh-q2gf-g4vp |
5.3 (3.1)
|
The application discloses all used components, versions and license information to unauthenticated … | 2026-01-15T15:31:20Z | 2026-01-15T15:31:20Z |
| ghsa-xjqp-mpw8-r294 |
3.7 (3.1)
|
The device's passwords have not been adequately salted, making them vulnerable to password extracti… | 2026-01-15T15:31:19Z | 2026-01-15T15:31:19Z |
| ghsa-xgcg-2hvp-fj6w |
8.3 (3.1)
|
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path trav… | 2026-01-15T15:31:19Z | 2026-01-15T15:31:19Z |
| ghsa-rr8m-86pp-xxjf |
6.4 (3.1)
|
The AffiliateX – Amazon Affiliate Plugin plugin for WordPress is vulnerable to unauthorized modific… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:19Z |
| ghsa-36p2-cfmm-wp8w |
8.8 (3.1)
|
The Supreme Modules Lite plugin for WordPress is vulnerable to arbitrary file upload in all version… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:19Z |
| ghsa-xpfc-cjr2-3j39 |
7.5 (3.1)
|
The device is deployed with weak and publicly known default passwords for certain hidden user level… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-xm6h-xrxm-vr76 |
4.3 (3.1)
|
Improper validation of a login parameter may allow attackers to redirect users to malicious website… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-wxjf-h3jg-9mpw |
3.8 (3.1)
|
An attacker with administrative access may inject malicious content into the login page, potentiall… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-vpx5-5gpq-wwg4 |
5.3 (3.1)
|
Firmware update files may expose password hashes for system accounts, which could allow a remote at… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-ppv8-4h6w-m6hh |
4.3 (3.1)
|
Improper handling of a URL parameter may allow attackers to execute code in a user's browser after … | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-mm24-26rp-8627 |
4.3 (3.1)
|
An attacker with low privileges may be able to read files from specific directories on the device, … | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-m877-62cg-f5m5 |
4.3 (3.1)
|
Improper input handling in a system endpoint may allow attackers to overload resources, causing a d… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-gm4j-hg89-42fw |
5.3 (3.1)
|
The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthor… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-f4v9-v847-jcvh |
4.3 (3.1)
|
An attacker with low privileges may be able to trigger critical system functions such as reboot or … | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-57w5-88pw-9866 |
4.3 (3.1)
|
An attacker may exploit missing protection against clickjacking by tricking users into performing u… | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ghsa-5769-wgj3-q779 |
4.3 (3.1)
|
An attacker with limited permissions may still be able to write files to specific locations on the … | 2026-01-15T15:31:18Z | 2026-01-15T15:31:18Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-28629 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.459836Z |
| gsd-2024-28486 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.458466Z |
| gsd-2024-28584 | Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a… | 2024-03-08T06:02:46.457598Z |
| gsd-2024-28633 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.457385Z |
| gsd-2024-28713 | An issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a … | 2024-03-08T06:02:46.456414Z |
| gsd-2024-28502 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.456162Z |
| gsd-2024-28654 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.455957Z |
| gsd-2024-28295 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.455726Z |
| gsd-2024-28719 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.455505Z |
| gsd-2024-28523 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.455282Z |
| gsd-2024-28286 | In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsSe… | 2024-03-08T06:02:46.455086Z |
| gsd-2024-28374 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.454388Z |
| gsd-2024-28222 | In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process … | 2024-03-08T06:02:46.453899Z |
| gsd-2024-28444 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.453352Z |
| gsd-2024-28216 | nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to… | 2024-03-08T06:02:46.452679Z |
| gsd-2024-28671 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability … | 2024-03-08T06:02:46.452158Z |
| gsd-2024-28587 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.451953Z |
| gsd-2024-28347 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.451745Z |
| gsd-2024-28632 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.451541Z |
| gsd-2024-28267 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.451337Z |
| gsd-2024-28614 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.450992Z |
| gsd-2024-28557 | SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows rem… | 2024-03-08T06:02:46.450794Z |
| gsd-2024-28652 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.450563Z |
| gsd-2024-28296 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.450352Z |
| gsd-2024-28544 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.450149Z |
| gsd-2024-28649 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.449935Z |
| gsd-2024-28600 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.449691Z |
| gsd-2024-28290 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.449490Z |
| gsd-2024-28698 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.449285Z |
| gsd-2024-28410 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-08T06:02:46.449084Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-188106 | Malicious code in mongodb-augmentedreality-mineralogy-postcss (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188105 | Malicious code in module-void-fast-thread-double (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188104 | Malicious code in module-user-signal-pi-monitor (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188103 | Malicious code in module-serialize-fire-bash-mu (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188102 | Malicious code in module-phoebe-elara-meissa (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188101 | Malicious code in module-palynology-kronos-fornax (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188100 | Malicious code in module-fornax-elara-mongodb (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188099 | Malicious code in module-data-secure-psi-double (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188098 | Malicious code in module-biomimicry-rollup-comet (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188097 | Malicious code in module-barnard-ganymede-sociobiology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188096 | Malicious code in module-aquarius-enceladus-publish (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188095 | Malicious code in mock-xml-omicron-protected-class (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188094 | Malicious code in mock-string-simple-final-data (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188093 | Malicious code in mock-sandbox-private-stub-view (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188092 | Malicious code in mock-parse-earth-export-hot (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188091 | Malicious code in mock-easy-tree-long-cloud (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188090 | Malicious code in mocha-solis-zenobia-norma (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188089 | Malicious code in mocha-neptunology-flare-galaxy (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188088 | Malicious code in mocha-eventhoriz-wavefunction-redshift (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188087 | Malicious code in mocha-epimetheus-zenith-commitlint-config-angular (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188086 | Malicious code in miranda-yildun-zooarchaeology-bionics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188085 | Malicious code in miranda-stream-resolvers-convict (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188084 | Malicious code in miranda-spica-sails-superposition (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188083 | Malicious code in miranda-postcss-blitz-module (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188082 | Malicious code in miranda-perseus-pm2-ophiuchus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188081 | Malicious code in miranda-nestjs-void-juno (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188080 | Malicious code in miranda-native-cross-env-oauth (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188079 | Malicious code in miranda-native-alphard-browserify (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188078 | Malicious code in miranda-markdown-pdf-rate-limiter-graphql (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-188077 | Malicious code in miranda-lithosphere-xo-alphard (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-2383 | Red Hat OpenStack: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2022-12-20T23:00:00.000+00:00 | 2024-01-16T23:00:00.000+00:00 |
| wid-sec-w-2024-0102 | Atlassian Confluence: Schwachstelle ermöglicht Codeausführung | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0098 | Dell integrated Dell Remote Access Controller: Schwachstelle ermöglicht Privilegienerweiterung und Codeausführung | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0095 | VMware Cloud Foundation: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0094 | Atlassian Bamboo: Mehrere Schwachstellen | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0091 | FreeType: Schwachstelle ermöglicht Codeausführung | 2020-10-19T22:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0090 | Red Hat Software Collections: Schwachstelle ermöglicht XXE | 2020-10-22T22:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0089 | KDE: Schwachstelle ermöglicht Privilegieneskalation | 2022-01-31T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0088 | IBM Maximo Asset Management: Mehrere Schwachstellen | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0087 | Drupal: Schwachstelle ermöglicht Denial of Service | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0084 | Atlassian Confluence: Mehrere Schwachstellen ermöglichen Codeausführung | 2024-01-15T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2023-3092 | NCP Secure Enterprise Client: Mehrere Schwachstellen | 2023-12-10T23:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2023-1093 | Ruby on Rails: Mehrere Schwachstellen | 2020-05-18T22:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2022-2280 | Samba: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-10-27T22:00:00.000+00:00 | 2024-01-15T23:00:00.000+00:00 |
| wid-sec-w-2024-0082 | Paessler PRTG: Schwachstelle ermöglicht Cross-Site Scripting | 2024-01-14T23:00:00.000+00:00 | 2024-01-14T23:00:00.000+00:00 |
| wid-sec-w-2024-0078 | IBM Business Automation Workflow: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-14T23:00:00.000+00:00 | 2024-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-3171 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-12-18T23:00:00.000+00:00 | 2024-01-14T23:00:00.000+00:00 |
| wid-sec-w-2023-1924 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service | 2023-07-31T22:00:00.000+00:00 | 2024-01-14T23:00:00.000+00:00 |
| wid-sec-w-2024-0077 | GitLab: Mehrere Schwachstellen | 2024-01-11T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0076 | Microsoft Edge: Mehrere Schwachstellen | 2024-01-11T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0075 | D-LINK Router DIR-822+: Mehrere Schwachstellen | 2024-01-11T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0074 | D-LINK Router DIR-X3260: Mehrere Schwachstellen ermöglichen Codeausführung | 2024-01-11T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0069 | NetApp Data ONTAP: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-11T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0047 | Trend Micro Apex One und Apex Central: Mehrere Schwachstellen | 2024-01-09T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2023-2994 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2023-11-21T23:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1443 | Microsoft Office: Mehrere Schwachstellen | 2023-06-13T22:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1179 | Microsoft Office: Mehrere Schwachstellen | 2023-05-09T22:00:00.000+00:00 | 2024-01-11T23:00:00.000+00:00 |
| wid-sec-w-2024-0066 | Cisco Evolved Programmable Network Manager & Prime Infrastructure: Mehrere Schwachstellen | 2024-01-10T23:00:00.000+00:00 | 2024-01-10T23:00:00.000+00:00 |
| wid-sec-w-2024-0065 | tribe29 checkmk: Mehrere Schwachstellen | 2024-01-10T23:00:00.000+00:00 | 2024-01-10T23:00:00.000+00:00 |
| wid-sec-w-2024-0063 | Cisco Unity Connection: Schwachstelle ermöglicht Privilegienerweiterung und Codeausführung | 2024-01-10T23:00:00.000+00:00 | 2024-01-10T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2019:1840 | Red Hat Security Advisory: java-1.7.0-openjdk security update | 2019-07-23T16:23:11+00:00 | 2026-01-13T21:32:19+00:00 |
| rhsa-2019:1839 | Red Hat Security Advisory: java-1.7.0-openjdk security update | 2019-07-23T18:20:49+00:00 | 2026-01-13T21:32:19+00:00 |
| rhsa-2019:1817 | Red Hat Security Advisory: java-11-openjdk security update | 2019-07-22T12:41:14+00:00 | 2026-01-13T21:32:19+00:00 |
| rhsa-2019:1815 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2019-07-22T12:57:36+00:00 | 2026-01-13T21:32:18+00:00 |
| rhsa-2019:1811 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2019-07-22T12:48:15+00:00 | 2026-01-13T21:32:17+00:00 |
| rhsa-2019:1810 | Red Hat Security Advisory: java-11-openjdk security update | 2019-07-22T12:58:52+00:00 | 2026-01-13T21:32:17+00:00 |
| rhsa-2019:1518 | Red Hat Security Advisory: java-11-openjdk security update | 2019-06-18T17:22:28+00:00 | 2026-01-13T21:32:17+00:00 |
| rhsa-2019:1258 | Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update | 2019-05-21T19:57:53+00:00 | 2026-01-13T21:32:17+00:00 |
| rhsa-2019:1164 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2019-05-13T21:08:16+00:00 | 2026-01-13T21:32:15+00:00 |
| rhsa-2019:0640 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2019-03-25T18:25:57+00:00 | 2026-01-13T21:32:15+00:00 |
| rhsa-2019:1146 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2019-05-13T07:01:52+00:00 | 2026-01-13T21:32:13+00:00 |
| rhsa-2019:0791 | Red Hat Security Advisory: java-1.7.0-openjdk security update | 2019-04-22T16:10:25+00:00 | 2026-01-13T21:32:13+00:00 |
| rhsa-2019:0790 | Red Hat Security Advisory: java-1.7.0-openjdk security update | 2019-04-22T16:05:41+00:00 | 2026-01-13T21:32:13+00:00 |
| rhsa-2019:0775 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2019-04-17T15:51:54+00:00 | 2026-01-13T21:32:12+00:00 |
| rhsa-2019:0473 | Red Hat Security Advisory: java-1.7.1-ibm security update | 2019-03-08T21:21:55+00:00 | 2026-01-13T21:32:10+00:00 |
| rhsa-2019:0469 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2019-03-06T21:53:31+00:00 | 2026-01-13T21:32:09+00:00 |
| rhsa-2019:0464 | Red Hat Security Advisory: java-1.7.0-openjdk security update | 2019-03-05T19:18:44+00:00 | 2026-01-13T21:32:08+00:00 |
| rhsa-2019:0416 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2019-02-26T11:44:23+00:00 | 2026-01-13T21:32:03+00:00 |
| rhsa-2018:2439 | Red Hat Security Advisory: mariadb security and bug fix update | 2018-08-16T14:24:24+00:00 | 2026-01-13T21:32:03+00:00 |
| rhba-2020:1376 | Red Hat Bug Fix Advisory: net-snmp bug fix and enhancement update | 2020-04-07T12:03:05+00:00 | 2026-01-13T21:32:03+00:00 |
| rhsa-2020:5583 | Red Hat Security Advisory: memcached security update | 2020-12-16T13:57:34+00:00 | 2026-01-13T21:27:13+00:00 |
| rhsa-2020:5275 | Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update | 2020-12-01T12:05:24+00:00 | 2026-01-13T21:27:11+00:00 |
| rhsa-2020:4005 | Red Hat Security Advisory: libxslt security update | 2020-09-29T19:54:52+00:00 | 2026-01-13T21:27:10+00:00 |
| rhsa-2020:2081 | Red Hat Security Advisory: python-virtualenv security update | 2020-05-12T18:58:38+00:00 | 2026-01-13T21:27:09+00:00 |
| rhsa-2020:1605 | Red Hat Security Advisory: python27:2.7 security, bug fix, and enhancement update | 2020-04-28T16:06:13+00:00 | 2026-01-13T21:27:09+00:00 |
| rhsa-2020:1576 | Red Hat Security Advisory: memcached security update | 2020-04-28T15:27:45+00:00 | 2026-01-13T21:27:09+00:00 |
| rhsa-2020:1180 | Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update | 2020-03-31T20:15:15+00:00 | 2026-01-13T21:27:08+00:00 |
| rhsa-2020:1050 | Red Hat Security Advisory: cups security and bug fix update | 2020-03-31T20:58:26+00:00 | 2026-01-13T21:27:08+00:00 |
| rhsa-2020:0851 | Red Hat Security Advisory: python-virtualenv security update | 2020-03-17T16:38:31+00:00 | 2026-01-13T21:27:07+00:00 |
| rhsa-2019:4225 | Red Hat Security Advisory: OpenShift Container Platform 4.1 openshift-external-storage security update | 2019-12-17T02:19:03+00:00 | 2026-01-13T21:27:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2019-19977 | libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c as demonstrated by a stack-based buffer over-read. | 2019-12-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-19646 | pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | 2019-12-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-19645 | alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. | 2019-12-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-19391 | In LuaJIT through 2.0.5 as used in Moonjit before 2.1.2 and other products debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations because certain cases involving valid stack levels and > options are mishandled. NOTE: The LuaJIT project owner states that the debug libary is unsafe by definition and that this is not a vulnerability. When LuaJIT was originally developed the expectation was that the entire debug library had no security guarantees and thus it made no sense to assign CVEs. However not all users of later LuaJIT derivatives share this perspective | 2019-11-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-17362 | In LibTomCrypt through 1.18.2 the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data. | 2019-10-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-16168 | In SQLite through 3.29.0 whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field aka a "severe division by zero in the query planner." | 2019-09-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-14274 | MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c. | 2019-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-13638 | GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156. | 2019-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-13636 | In GNU patch through 2.7.6 the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c. | 2019-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-13232 | Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container leading to denial of service (resource consumption) aka a "better zip bomb" issue. | 2019-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-11835 | cJSON before 1.7.11 allows out-of-bounds access related to multiline comments. | 2019-05-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2019-11834 | cJSON before 1.7.11 allows out-of-bounds access related to \x00 in a string literal. | 2019-05-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-6952 | A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. | 2018-02-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-6951 | An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault associated with a NULL pointer dereference leading to a denial of service in the intuit_diff_type function in pch.c aka a "mangled rename" issue. | 2018-02-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-5996 | Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive. | 2018-01-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20969 | do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638 but the ! syntax is specific to ed and is unrelated to a shell metacharacter. | 2019-08-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20506 | SQLite before 3.25.3 when the FTS3 extension is enabled encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346. | 2019-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20505 | SQLite 3.25.2 when queries are run on a table with a malformed PRIMARY KEY allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). | 2019-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20346 | SQLite before 3.25.3 when the FTS3 extension is enabled encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases) aka Magellan. | 2018-12-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-20169 | An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor related to __usb_get_extra_descriptor in drivers/usb/core/usb.c. | 2018-12-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-1999023 | The Battle for Wesnoth Project contains a Code Injection that can result in code execution outside the sandbox | 2018-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-18384 | Info-ZIP UnZip 6.0 has a buffer overflow in list.c when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value because a buffer size is 10 and is supposed to be 12. | 2018-10-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-13410 | Info-ZIP Zip 3.0 when the -T and -TT command-line options are used allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value given that the entire purpose of -TT is execution of arbitrary commands | 2018-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-1129 | A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master mimic luminous and jewel are believed to be vulnerable. | 2018-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-10906 | In fuse before versions 2.9.8 and 3.x before 3.2.5 fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system accessible by other users and trick them into accessing files on that file system possibly causing Denial of Service or other unspecified effects. | 2018-07-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-1000156 | GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time. | 2018-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-1000097 | Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file.. | 2018-03-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2018-1000035 | A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution. | 2018-02-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2017-3617 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| msrc_cve-2017-3616 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). | 2017-04-02T00:00:00.000Z | 2024-06-30T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201712-0069 | PWR-Q200 does not use random values for source ports of DNS query packets, which allows r… | 2025-04-20T23:27:14.229000Z |
| var-201712-0195 | Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before … | 2025-04-20T23:27:14.116000Z |
| var-201712-0216 | In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or gue… | 2025-04-20T23:27:14.087000Z |
| var-201712-0575 | ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consump… | 2025-04-20T23:27:13.814000Z |
| var-201712-0806 | Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerabil… | 2025-04-20T23:27:13.680000Z |
| var-202503-0852 | Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter i… | 2025-04-20T23:26:30.044000Z |
| var-201701-0724 | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management inte… | 2025-04-20T23:26:14.253000Z |
| var-201702-0299 | An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all vers… | 2025-04-20T23:26:13.858000Z |
| var-201702-0424 | An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series,… | 2025-04-20T23:26:13.691000Z |
| var-201702-0427 | An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series,… | 2025-04-20T23:26:13.655000Z |
| var-201704-1571 | A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all… | 2025-04-20T23:26:13.513000Z |
| var-201702-0677 | An issue was discovered in Schneider Electric homeLYnk Controller, LSS100100, all version… | 2025-04-20T23:26:13.473000Z |
| var-201702-0679 | An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to V… | 2025-04-20T23:26:13.435000Z |
| var-201702-0786 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco Asyn… | 2025-04-20T23:26:13.399000Z |
| var-201702-0807 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) coul… | 2025-04-20T23:26:13.368000Z |
| var-201702-0849 | An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to … | 2025-04-20T23:26:13.332000Z |
| var-201702-0847 | An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to … | 2025-04-20T23:26:09.689000Z |
| var-201703-0181 | File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) befor… | 2025-04-20T23:26:09.023000Z |
| var-201703-0202 | Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 m… | 2025-04-20T23:26:08.992000Z |
| var-201703-0265 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced S… | 2025-04-20T23:26:08.934000Z |
| var-201703-0895 | A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (… | 2025-04-20T23:26:08.395000Z |
| var-201703-1294 | Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allow… | 2025-04-20T23:26:08.112000Z |
| var-201704-0164 | Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format strin… | 2025-04-20T23:26:07.873000Z |
| var-201704-0227 | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local … | 2025-04-20T23:26:07.786000Z |
| var-201704-0395 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before A… | 2025-04-20T23:26:07.652000Z |
| var-201704-0437 | Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with softwar… | 2025-04-20T23:26:07.621000Z |
| var-201704-0481 | iBaby M3S has a password of admin for the backdoor admin account. iBaby M3S Contains a vu… | 2025-04-20T23:26:07.592000Z |
| var-201704-0502 | Huawei S5300 with software V200R003C00, V200R007C00, V200R008C00, V200R009C00; S5700 with… | 2025-04-20T23:26:07.556000Z |
| var-201704-0649 | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure … | 2025-04-20T23:26:07.525000Z |
| var-201704-0733 | On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a sp… | 2025-04-20T23:26:07.437000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2023:1978-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4) | 2023-04-25T05:05:02Z | 2023-04-25T05:05:02Z |
| suse-su-2023:1977-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4) | 2023-04-25T05:04:58Z | 2023-04-25T05:04:58Z |
| suse-su-2023:1975-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4) | 2023-04-25T04:33:45Z | 2023-04-25T04:33:45Z |
| suse-su-2023:1973-1 | Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP5) | 2023-04-24T23:34:58Z | 2023-04-24T23:34:58Z |
| suse-su-2023:1972-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP4) | 2023-04-24T22:06:29Z | 2023-04-24T22:06:29Z |
| suse-su-2023:1971-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP4) | 2023-04-24T18:05:38Z | 2023-04-24T18:05:38Z |
| suse-su-2023:1970-2 | Security update for giflib | 2023-04-24T16:49:23Z | 2023-04-24T16:49:23Z |
| suse-su-2023:1968-1 | Security update for ovmf | 2023-04-24T13:19:22Z | 2023-04-24T13:19:22Z |
| suse-su-2023:1967-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container | 2023-04-24T13:19:09Z | 2023-04-24T13:19:09Z |
| suse-su-2023:1966-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2023-04-24T13:18:42Z | 2023-04-24T13:18:42Z |
| suse-su-2023:1962-1 | Security update for indent | 2023-04-24T12:07:10Z | 2023-04-24T12:07:10Z |
| suse-su-2023:1961-1 | Security update for s390-tools | 2023-04-24T12:02:10Z | 2023-04-24T12:02:10Z |
| suse-su-2023:1960-1 | Security update for openssl | 2023-04-24T11:41:58Z | 2023-04-24T11:41:58Z |
| suse-su-2023:1958-1 | Security update for ovmf | 2023-04-24T11:06:00Z | 2023-04-24T11:06:00Z |
| suse-su-2023:1956-1 | Security update for avahi | 2023-04-24T09:55:28Z | 2023-04-24T09:55:28Z |
| suse-su-2023:1953-1 | Security update for indent | 2023-04-24T08:31:41Z | 2023-04-24T08:31:41Z |
| suse-su-2023:1949-1 | Security update for openstack-cinder, openstack-nova, python-oslo.utils | 2023-04-21T12:47:34Z | 2023-04-21T12:47:34Z |
| suse-su-2023:1948-1 | Security update for jettison | 2023-04-21T12:15:23Z | 2023-04-21T12:15:23Z |
| suse-su-2023:1947-1 | Security update for dmidecode | 2023-04-21T12:14:44Z | 2023-04-21T12:14:44Z |
| suse-su-2023:1944-1 | Security update for libmicrohttpd | 2023-04-21T11:37:56Z | 2023-04-21T11:37:56Z |
| suse-su-2023:1942-1 | Security update for nodejs16 | 2023-04-21T10:24:23Z | 2023-04-21T10:24:23Z |
| suse-su-2023:1941-1 | Security update for ovmf | 2023-04-21T10:00:48Z | 2023-04-21T10:00:48Z |
| suse-su-2023:1940-1 | Security update for ovmf | 2023-04-21T10:00:34Z | 2023-04-21T10:00:34Z |
| suse-su-2023:1931-1 | Security update for wireshark | 2023-04-20T14:16:12Z | 2023-04-20T14:16:12Z |
| suse-su-2023:1930-1 | Security update for dnsmasq | 2023-04-20T11:18:36Z | 2023-04-20T11:18:36Z |
| suse-su-2023:1928-1 | Security update for python-Flask | 2023-04-20T09:23:30Z | 2023-04-20T09:23:30Z |
| suse-su-2023:1927-1 | Security update for ImageMagick | 2023-04-20T07:03:08Z | 2023-04-20T07:03:08Z |
| suse-su-2023:1926-1 | Security update for openssl1 | 2023-04-20T07:01:56Z | 2023-04-20T07:01:56Z |
| suse-su-2023:1924-1 | Security update for nodejs16 | 2023-04-20T06:59:08Z | 2023-04-20T06:59:08Z |
| suse-su-2023:1923-1 | Security update for nodejs16 | 2023-04-20T06:58:38Z | 2023-04-20T06:58:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2021:0707-1 | Security update for perl-Image-ExifTool | 2021-05-10T18:41:24Z | 2021-05-10T18:41:24Z |
| opensuse-su-2021:0706-1 | Security update for monitoring-plugins-smart | 2021-05-10T18:41:18Z | 2021-05-10T18:41:18Z |
| opensuse-su-2021:0695-1 | Security update for alpine | 2021-05-09T18:05:43Z | 2021-05-09T18:05:43Z |
| opensuse-su-2021:0694-1 | Security update for avahi | 2021-05-09T18:05:39Z | 2021-05-09T18:05:39Z |
| opensuse-su-2021:0692-1 | Security update for libxml2 | 2021-05-09T04:06:33Z | 2021-05-09T04:06:33Z |
| opensuse-su-2021:0691-1 | Security update for vlc | 2021-05-08T22:05:51Z | 2021-05-08T22:05:51Z |
| opensuse-su-2021:0688-1 | Security update for syncthing | 2021-05-08T12:05:55Z | 2021-05-08T12:05:55Z |
| opensuse-su-2021:0684-1 | Security update for p7zip | 2021-05-07T22:05:55Z | 2021-05-07T22:05:55Z |
| opensuse-su-2021:0682-1 | Security update for redis | 2021-05-07T18:41:45Z | 2021-05-07T18:41:45Z |
| opensuse-su-2021:0677-1 | Security update for exim | 2021-05-07T09:03:52Z | 2021-05-07T09:03:52Z |
| opensuse-su-2021:0675-1 | Security update for alpine | 2021-05-06T12:06:14Z | 2021-05-06T12:06:14Z |
| opensuse-su-2021:0672-1 | Security update for ceph | 2021-05-06T07:22:17Z | 2021-05-06T07:22:17Z |
| opensuse-su-2021:0670-1 | Security update for openexr | 2021-05-05T11:24:32Z | 2021-05-05T11:24:32Z |
| opensuse-su-2021:0669-1 | Security update for postsrsd | 2021-05-04T22:05:31Z | 2021-05-04T22:05:31Z |
| opensuse-su-2021:0668-1 | Security update for bind | 2021-05-04T13:21:34Z | 2021-05-04T13:21:34Z |
| opensuse-su-2021:0664-1 | Security update for gsoap | 2021-05-04T08:05:21Z | 2021-05-04T08:05:21Z |
| opensuse-su-2021:0650-1 | Security update for giflib | 2021-05-01T22:05:28Z | 2021-05-01T22:05:28Z |
| opensuse-su-2021:0647-1 | Security update for netdata | 2021-05-01T16:05:36Z | 2021-05-01T16:05:36Z |
| opensuse-su-2021:0646-1 | Security update for postsrsd | 2021-05-01T14:05:31Z | 2021-05-01T14:05:31Z |
| opensuse-su-2021:0644-1 | Security update for MozillaThunderbird | 2021-05-01T05:02:34Z | 2021-05-01T05:02:34Z |
| opensuse-su-2021:0639-1 | Security update for cifs-utils | 2021-04-30T19:23:06Z | 2021-04-30T19:23:06Z |
| opensuse-su-2021:0638-1 | Security update for cups | 2021-04-30T19:23:03Z | 2021-04-30T19:23:03Z |
| opensuse-su-2021:0637-1 | Security update for webkit2gtk3 | 2021-04-30T19:23:01Z | 2021-04-30T19:23:01Z |
| opensuse-su-2021:0636-1 | Security update for samba | 2021-04-30T19:22:58Z | 2021-04-30T19:22:58Z |
| opensuse-su-2021:0635-1 | Security update for libnettle | 2021-04-30T19:22:54Z | 2021-04-30T19:22:54Z |
| opensuse-su-2021:0634-1 | Security update for librsvg | 2021-04-30T19:22:51Z | 2021-04-30T19:22:51Z |
| opensuse-su-2021:0632-1 | Security update for gsoap | 2021-04-30T19:22:41Z | 2021-04-30T19:22:41Z |
| opensuse-su-2021:0630-1 | Security update for virtualbox | 2021-04-30T19:22:36Z | 2021-04-30T19:22:36Z |
| opensuse-su-2021:0629-1 | Security update for Chromium | 2021-04-30T19:22:32Z | 2021-04-30T19:22:32Z |
| opensuse-su-2021:0628-1 | Security update for nim | 2021-04-29T14:05:41Z | 2021-04-29T14:05:41Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-13092 | WordPress GiftXtore plugin文件包含漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13091 | WordPress Formulario de contacto SalesUp! plugin跨站脚本漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13090 | WordPress FlatNews plugin跨站脚本漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13089 | 友讯科技DIR-605L formWlanSetup_Wizard函数缓冲区溢出漏洞 | 2024-10-13 | 2025-06-20 |
| cnvd-2025-13088 | 友讯科技DIR-605L formSetWizard2函数缓冲区溢出漏洞 | 2024-10-13 | 2025-06-20 |
| cnvd-2025-13086 | Dell BSAFE信任管理问题漏洞 | 2025-02-17 | 2025-06-20 |
| cnvd-2025-13085 | Dell SmartFabric OS10服务端请求伪造漏洞 | 2025-03-19 | 2025-06-20 |
| cnvd-2025-13084 | Dell SmartFabric OS10权限提升漏洞 | 2025-03-19 | 2025-06-20 |
| cnvd-2025-13083 | Dell ThinOS授权问题漏洞 | 2025-03-27 | 2025-06-20 |
| cnvd-2025-13082 | Dell Wyse Management Suite WMS信息泄露漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13081 | Dell Wyse Management Suite WMS路径遍历漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13080 | 友讯科技DIR-605L formSetWanPPPoE函数缓冲区溢出漏洞 | 2024-10-13 | 2025-06-20 |
| cnvd-2025-13079 | 友讯科技DIR-605L formSetWAN_Wizard52函数缓冲区溢出漏洞 | 2024-10-13 | 2025-06-20 |
| cnvd-2025-13078 | 友讯科技DIR-605L formSetQoS函数缓冲区溢出漏洞 | 2024-10-13 | 2025-06-20 |
| cnvd-2025-13077 | D-Link DIR-823X空指针取消引用漏洞 | 2025-02-18 | 2025-06-20 |
| cnvd-2025-13076 | D-Link DSL-3782多个参数缓冲区溢出漏洞 | 2025-02-24 | 2025-06-20 |
| cnvd-2025-13075 | D-Link DSL-3782多个参数缓冲区溢出漏洞 | 2025-02-24 | 2025-06-20 |
| cnvd-2025-13074 | D-Link DSL-3782多个参数OS命令注入漏洞 | 2025-02-24 | 2025-06-20 |
| cnvd-2025-13073 | D-Link DSL-3782多个参数OS命令注入漏洞 | 2025-02-24 | 2025-06-20 |
| cnvd-2025-13072 | D-Link DSL-3782缓冲区溢出漏洞 | 2025-02-28 | 2025-06-20 |
| cnvd-2025-13071 | D-Link DAR-7000命令注入漏洞 | 2025-03-07 | 2025-06-20 |
| cnvd-2025-13070 | D-Link DAP-1562空指针取消引用漏洞 | 2025-03-13 | 2025-06-20 |
| cnvd-2025-13069 | D-Link DIR-823G授权问题漏洞 | 2025-03-19 | 2025-06-20 |
| cnvd-2025-13068 | D-Link DIR-632栈缓冲区溢出漏洞 | 2025-06-13 | 2025-06-20 |
| cnvd-2025-13067 | D-Link DI-8100存在未明漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-13066 | D-Link DIR-632 /biurl_grou文件缓冲区溢出漏洞 | 2025-06-17 | 2025-06-20 |
| cnvd-2025-12960 | Fuji Electric V-SFT set_plc_type_default函数缓冲区溢出漏洞 | 2025-05-22 | 2025-06-20 |
| cnvd-2025-12959 | Fuji Electric V-SFT MakeItemGlidZahyou函数缓冲区溢出漏洞 | 2025-05-22 | 2025-06-20 |
| cnvd-2025-12958 | Fuji Electric V-SFT CWinFontInf::WinFontMsgCheck函数缓冲区溢出漏洞 | 2025-05-22 | 2025-06-20 |
| cnvd-2025-12957 | Fuji Electric V-SFT CV7BaseMap::WriteV7DataToRom函数缓冲区溢出漏洞 | 2025-05-22 | 2025-06-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-114 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2018-03-08T00:00:00.000000 | 2018-03-08T00:00:00.000000 |
| certfr-2018-avi-113 | Multiples vulnérabilités dans Google Chrome et Chrome OS | 2018-03-07T00:00:00.000000 | 2018-03-07T00:00:00.000000 |
| certfr-2018-avi-112 | Multiples vulnérabilités dans Google Android | 2018-03-06T00:00:00.000000 | 2018-03-06T00:00:00.000000 |
| certfr-2018-avi-111 | Vulnérabilité dans les produits Pivotal | 2018-03-05T00:00:00.000000 | 2018-03-05T00:00:00.000000 |
| certfr-2018-avi-110 | Vulnérabilité dans le noyau Linux de SUSE | 2018-03-02T00:00:00.000000 | 2018-03-05T00:00:00.000000 |
| certfr-2018-avi-109 | Multiples vulnérabilités dans PHP | 2018-03-02T00:00:00.000000 | 2018-03-02T00:00:00.000000 |
| certfr-2018-avi-108 | Multiples vulnérabilités dans F5 BIG-IP | 2018-03-01T00:00:00.000000 | 2018-03-02T00:00:00.000000 |
| certfr-2018-avi-107 | Vulnérabilité dans le noyau Linux de SUSE | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-106 | Multiples vulnérabilités dans Citrix NetScaler Application Delivery Controller (ADC) et NetScaler Gateway | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-105 | Vulnérabilité dans ISC BIND | 2018-03-01T00:00:00.000000 | 2018-03-01T00:00:00.000000 |
| certfr-2018-avi-104 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-28T00:00:00.000000 | 2018-02-28T00:00:00.000000 |
| certfr-2018-avi-103 | Multiples vulnérabilités dans Magento | 2018-02-28T00:00:00.000000 | 2018-02-28T00:00:00.000000 |
| certfr-2018-avi-102 | Multiples vulnérabilités dans Xen | 2018-02-27T00:00:00.000000 | 2018-02-27T00:00:00.000000 |
| certfr-2018-avi-101 | Multiples vulnérabilités dans Google Chrome OS | 2018-02-26T00:00:00.000000 | 2018-02-26T00:00:00.000000 |
| certfr-2018-avi-100 | Multiples vulnérabilités dans Wireshark | 2018-02-26T00:00:00.000000 | 2018-02-26T00:00:00.000000 |
| certfr-2018-avi-094 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2018-02-22T00:00:00.000000 | 2018-02-23T00:00:00.000000 |
| certfr-2018-avi-099 | Multiples vulnérabilités dans Drupal | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-098 | Multiples vulnérabilités dans les produits Cisco | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-097 | Multiples vulnérabilités dans Asterisk | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-096 | Vulnérabilité dans SCADA Schneider Electric Saitel DP | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-095 | Multiples vulnérabilités dans SCADA les produits Siemens | 2018-02-22T00:00:00.000000 | 2018-02-22T00:00:00.000000 |
| certfr-2018-avi-093 | Vulnérabilité dans phpMyAdmin | 2018-02-21T00:00:00.000000 | 2018-02-21T00:00:00.000000 |
| certfr-2018-avi-092 | Vulnérabilité dans Juniper AppFormix | 2018-02-21T00:00:00.000000 | 2018-02-21T00:00:00.000000 |
| certfr-2018-avi-091 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-02-20T00:00:00.000000 | 2018-02-20T00:00:00.000000 |
| certfr-2018-avi-090 | Vulnérabilité dans les produits Apple | 2018-02-20T00:00:00.000000 | 2018-02-20T00:00:00.000000 |
| certfr-2018-avi-089 | Multiples vulnérabilités dans SCADA les produits Schneider Electric | 2018-02-16T00:00:00.000000 | 2018-02-16T00:00:00.000000 |
| certfr-2018-avi-088 | Multiples vulnérabilités dans les produits Microsoft | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-087 | Multiples vulnérabilités dans Microsoft Windows | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-086 | Multiples vulnérabilités dans Microsoft Office | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |
| certfr-2018-avi-085 | Multiples vulnérabilités dans Microsoft Edge | 2018-02-14T00:00:00.000000 | 2018-02-14T00:00:00.000000 |