Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62098 |
5.4 (3.1)
|
WordPress Portfolio Gallery plugin <= 1.4.8 - Broken A… |
Totalsoft |
Portfolio Gallery |
2025-12-31T14:47:45.968Z | 2026-01-20T14:28:14.596Z |
| CVE-2025-62116 |
5.3 (3.1)
|
WordPress AI Copilot plugin <= 1.4.7 - Broken Access C… |
Quadlayers |
AI Copilot |
2025-12-31T15:39:13.222Z | 2026-01-20T14:28:14.594Z |
| CVE-2025-62093 |
8.5 (3.1)
|
WordPress Image&Video FullScreen Background plugin <= … |
LambertGroup |
Image&Video FullScreen Background |
2025-12-09T14:52:19.928Z | 2026-01-20T14:28:14.588Z |
| CVE-2025-62099 |
4.3 (3.1)
|
WordPress Signature Add-On for Gravity Forms plugin <=… |
Approveme |
Signature Add-On for Gravity Forms |
2025-12-31T16:41:35.232Z | 2026-01-20T14:28:14.581Z |
| CVE-2025-62122 |
5.3 (3.1)
|
WordPress Trash Duplicate and 301 Redirect plugin <= 1… |
Solwininfotech |
Trash Duplicate and 301 Redirect |
2025-12-31T15:38:08.774Z | 2026-01-20T14:28:14.579Z |
| CVE-2025-62095 |
6.5 (3.1)
|
WordPress Bootstrap Modals plugin <= 1.3.2 - Cross Sit… |
Neilgee |
Bootstrap Modals |
2025-12-31T13:16:59.367Z | 2026-01-20T14:28:14.579Z |
| CVE-2025-62117 |
5.4 (3.1)
|
WordPress EasyIndex plugin <= 1.1.1704 - Cross Site Re… |
Jayce53 |
EasyIndex |
2025-12-31T13:56:26.868Z | 2026-01-20T14:28:14.548Z |
| CVE-2025-62091 |
5.4 (3.1)
|
WordPress Serial Codes Generator and Validator with Wo… |
Vollstart |
Serial Codes Generator and Validator with WooCommerce Support |
2025-12-31T14:19:32.045Z | 2026-01-20T14:28:14.545Z |
| CVE-2025-62103 |
4.3 (3.1)
|
WordPress Media Library File Download plugin <= 1.4 - … |
wpmediadownload |
Media Library File Download |
2025-12-09T14:52:20.526Z | 2026-01-20T14:28:14.536Z |
| CVE-2025-62114 |
5.3 (3.1)
|
WordPress Download Media Library plugin <= 0.2.1 - Sen… |
Marcelo Torres |
Download Media Library |
2025-12-31T15:40:07.221Z | 2026-01-20T14:28:14.535Z |
| CVE-2025-62090 |
6.5 (3.1)
|
WordPress Gutenverse News – Advanced News Magazine Blo… |
Jegstudio |
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons |
2025-12-09T14:52:19.744Z | 2026-01-20T14:28:14.531Z |
| CVE-2025-62101 |
4.3 (3.1)
|
WordPress Pardakht Delkhah plugin <= 3.0.0 - Cross Sit… |
Omid Shamloo |
Pardakht Delkhah |
2025-12-31T16:33:19.519Z | 2026-01-20T14:28:14.501Z |
| CVE-2025-62092 |
5.3 (3.1)
|
WordPress Wiremo plugin <= 1.4.99 - Broken Access Cont… |
Wiremo |
Wiremo |
2025-12-31T15:22:41.320Z | 2026-01-20T14:28:14.475Z |
| CVE-2025-62084 |
4.3 (3.1)
|
WordPress iNext Woo Pincode Checker plugin <= 2.3.1 - … |
Imdad Next Web |
iNext Woo Pincode Checker |
2025-12-31T15:50:01.448Z | 2026-01-20T14:28:14.323Z |
| CVE-2025-62088 |
5.4 (3.1)
|
WordPress WordPress & WooCommerce Scraper plugin, Impo… |
extendons |
WordPress & WooCommerce Scraper Plugin, Import Data from Any Site |
2025-12-31T17:04:44.038Z | 2026-01-20T14:28:14.318Z |
| CVE-2025-62073 |
4.3 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Broken Access … |
Sovlix |
MeetingHub |
2025-10-22T14:32:54.713Z | 2026-01-20T14:28:14.299Z |
| CVE-2025-62089 |
4.3 (3.1)
|
WordPress Mergado Pack plugin <= 4.2.0 - Cross Site Re… |
MERGADO |
Mergado Pack |
2025-12-31T15:51:01.849Z | 2026-01-20T14:28:14.289Z |
| CVE-2025-62067 |
8.1 (3.1)
|
WordPress Savory theme <= 2.5 - Local File Inclusion v… |
Elated-Themes |
Savory |
2025-11-06T15:55:55.213Z | 2026-01-20T14:28:14.287Z |
| CVE-2025-62085 |
5.3 (3.1)
|
WordPress BERTHA AI plugin <= 1.13 - Broken Access Con… |
berthaai |
BERTHA AI |
2025-12-09T14:52:19.152Z | 2026-01-20T14:28:14.285Z |
| CVE-2025-62080 |
4.3 (3.1)
|
WordPress Live Shopping & Shoppable Videos For WooComm… |
Channelize.io Team |
Live Shopping & Shoppable Videos For WooCommerce |
2025-12-31T15:44:45.835Z | 2026-01-20T14:28:14.278Z |
| CVE-2025-62071 |
4.3 (3.1)
|
WordPress Social proof testimonials and reviews by Rep… |
Repuso |
Social proof testimonials and reviews by Repuso |
2025-10-22T14:32:54.166Z | 2026-01-20T14:28:14.253Z |
| CVE-2025-62049 |
6.5 (3.1)
|
WordPress Cost Calculator Builder plugin <= 3.5.32 - B… |
Stylemix |
Cost Calculator Builder |
2025-11-06T15:55:44.281Z | 2026-01-20T14:28:14.242Z |
| CVE-2025-62087 |
4.3 (3.1)
|
WordPress Sticky Notes for WP Dashboard plugin <= 1.2.… |
Web Builder 143 |
Sticky Notes for WP Dashboard |
2025-12-31T16:08:58.565Z | 2026-01-20T14:28:14.208Z |
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62086 |
5.4 (3.1)
|
WordPress Яндекс Доставка (Boxberry) plugin <= 2.32 - … |
akazanstev |
Яндекс Доставка (Boxberry) |
2025-12-09T14:52:19.543Z | 2026-01-20T14:28:14.095Z |
| CVE-2025-62083 |
4.3 (3.1)
|
WordPress BoomDevs WordPress Coming Soon plugin plugin… |
WP Messiah |
BoomDevs WordPress Coming Soon Plugin |
2025-12-31T16:29:16.387Z | 2026-01-20T14:28:14.075Z |
| CVE-2025-62082 |
6.5 (3.1)
|
WordPress Generic Elements plugin <= 1.2.8 - Cross Sit… |
Nasir Uddin |
Generic Elements |
2025-12-09T14:52:18.804Z | 2026-01-20T14:28:14.075Z |
| CVE-2025-62052 |
4.3 (3.1)
|
WordPress One Page Express Companion plugin <= 1.6.43 … |
Horea Radu |
One Page Express Companion |
2025-10-22T14:32:51.853Z | 2026-01-20T14:28:14.063Z |
| CVE-2025-62061 |
4.3 (3.1)
|
WordPress Product Catalog Simple plugin <= 1.8.4 - Cro… |
impleCode |
Product Catalog Simple |
2025-10-22T14:32:52.854Z | 2026-01-20T14:28:14.011Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62956 |
8.8 (3.1)
|
WordPress Reloadly plugin <= 2.0.1 - Cross Site Reques… |
iseremet |
Reloadly |
2025-10-27T01:34:10.627Z | 2026-01-20T14:28:17.449Z |
| CVE-2025-62955 |
4.3 (3.1)
|
WordPress TempTool plugin <= 1.3.1 - Sensitive Data Ex… |
HappyDevs |
TempTool |
2025-12-21T21:06:30.982Z | 2026-01-20T14:28:17.384Z |
| CVE-2025-62954 |
8.8 (3.1)
|
WordPress Revive Old Posts plugin <= 9.3.3 - Broken Ac… |
Codeinwp |
Revive Old Posts |
2025-10-27T01:34:10.251Z | 2026-01-20T14:28:17.409Z |
| CVE-2025-62953 |
8.8 (3.1)
|
WordPress Welcart e-Commerce plugin <= 2.11.24 - Broke… |
nanbu |
Welcart e-Commerce |
2025-10-27T01:34:09.846Z | 2026-01-20T14:28:17.448Z |
| CVE-2025-62952 |
8.8 (3.1)
|
WordPress ChatBot plugin <= 7.3.0 - Broken Access Cont… |
QuantumCloud |
ChatBot |
2025-10-27T01:34:09.465Z | 2026-01-20T14:28:17.383Z |
| CVE-2025-62951 |
6.5 (3.1)
|
WordPress Interactive Content – H5P plugin <= 1.16.0 -… |
icc0rz |
Interactive Content – H5P |
2025-10-27T01:34:09.049Z | 2026-01-20T14:28:17.319Z |
| CVE-2025-62950 |
4.3 (3.1)
|
WordPress Contest Gallery plugin <= 28.0.0 - Cross Sit… |
Wasiliy Strecker / ContestGallery developer |
Contest Gallery |
2025-11-06T15:56:04.961Z | 2026-01-20T14:28:17.351Z |
| CVE-2025-62949 |
6.5 (3.1)
|
WordPress Activity Plus Reloaded for BuddyPress plugin… |
BuddyDev |
Activity Plus Reloaded for BuddyPress |
2025-10-27T01:34:08.667Z | 2026-01-20T14:28:17.296Z |
| CVE-2025-62948 |
6.5 (3.1)
|
WordPress Date counter plugin <= 2.0.3 - Cross Site Sc… |
Konstantin Pankratov |
Date counter |
2025-10-27T01:34:08.293Z | 2026-01-20T14:28:17.402Z |
| CVE-2025-62947 |
7.5 (3.1)
|
WordPress Publitio plugin <= 2.2.3 - Sensitive Data Ex… |
publitio |
Publitio |
2025-10-27T01:34:07.905Z | 2026-01-20T14:28:17.358Z |
| CVE-2025-62946 |
8.8 (3.1)
|
WordPress Everest Backup plugin <= 2.3.8 - Broken Acce… |
everestthemes |
Everest Backup |
2025-10-27T01:34:07.532Z | 2026-01-20T14:28:17.328Z |
| CVE-2025-62945 |
8.8 (3.1)
|
WordPress Did Prestashop Display plugin <= 1.0.30 - Cr… |
Eduard Pinuaga Linares |
Did Prestashop Display |
2025-10-27T01:34:07.137Z | 2026-01-20T14:28:17.339Z |
| CVE-2025-62944 |
9.8 (3.1)
|
WordPress MSTW CSV EXPORTER plugin <= 1.4 - Broken Acc… |
Mark O'Donnell |
MSTW CSV EXPORTER |
2025-10-27T01:34:06.759Z | 2026-01-20T14:28:17.366Z |
| CVE-2025-62943 |
5.4 (3.1)
|
WordPress Next Page, Not Next Post plugin <= 0.3.0 - C… |
Matt McInvale |
Next Page, Not Next Post |
2025-10-27T01:34:06.378Z | 2026-01-20T14:28:17.256Z |
| CVE-2025-62942 |
5.4 (3.1)
|
WordPress WP Mapbox GL JS Maps plugin <= 3.0.1 - Cross… |
tempranova |
WP Mapbox GL JS Maps |
2025-10-27T01:34:05.970Z | 2026-01-20T14:28:17.320Z |
| CVE-2025-62941 |
5.4 (3.1)
|
WordPress Events Maker by dFactory plugin <= 1.6.14 - … |
dFactory |
Events Maker by dFactory |
2025-10-27T01:34:05.575Z | 2026-01-20T14:28:17.255Z |
| CVE-2025-62940 |
5.4 (3.1)
|
WordPress Blox Lite plugin <= 1.2.8 - Cross Site Scrip… |
Nick Diego |
Blox Lite |
2025-10-27T01:34:05.124Z | 2026-01-20T14:28:17.078Z |
| CVE-2025-62939 |
5.4 (3.1)
|
WordPress Open Currency Converter plugin <= 1.5.0 - Cr… |
Joe |
Open Currency Converter |
2025-10-27T01:34:04.735Z | 2026-01-20T14:28:17.088Z |
| CVE-2025-62938 |
8.1 (3.1)
|
WordPress Reoon Email Verifier plugin <= 2.0.1 - Broke… |
Reoon Technology |
Reoon Email Verifier |
2025-10-27T01:34:04.368Z | 2026-01-20T14:28:16.920Z |
| CVE-2025-62937 |
5.4 (3.1)
|
WordPress Post List Featured Image plugin <= 0.5.9 - C… |
Johnny |
Post List Featured Image |
2025-10-27T01:34:03.973Z | 2026-01-20T14:28:16.967Z |
| CVE-2025-62936 |
6.1 (3.1)
|
WordPress xSmart theme <= 1.2.9.4 - Content Injection … |
Jthemes |
xSmart |
2025-10-27T01:34:03.605Z | 2026-01-20T14:28:16.991Z |
| CVE-2025-62935 |
8.1 (3.1)
|
WordPress Open Close WooCommerce Store plugin <= 4.9.8… |
ilmosys |
Open Close WooCommerce Store |
2025-10-27T01:34:03.234Z | 2026-01-20T14:28:16.919Z |
| CVE-2025-62934 |
8.8 (3.1)
|
WordPress WP Business Hours plugin <= 1.4 - Cross Site… |
Mejar |
WP Business Hours |
2025-10-27T01:34:02.856Z | 2026-01-20T14:28:16.858Z |
| CVE-2025-62933 |
8.8 (3.1)
|
WordPress Awesome Testimonials plugin <= 2.2.1 - Cross… |
Prakash |
Awesome Testimonials |
2025-10-27T01:34:02.471Z | 2026-01-20T14:28:16.745Z |
| CVE-2025-62932 |
8.8 (3.1)
|
WordPress Table Block by RioVizual plugin <= 2.3.2 - B… |
wprio |
Table Block by RioVizual |
2025-10-27T01:34:02.004Z | 2026-01-20T14:28:16.874Z |
| CVE-2025-62931 |
8.8 (3.1)
|
WordPress MSN Partner Hub plugin <= 2.8.7 - Broken Acc… |
microsoftstart |
MSN Partner Hub |
2025-10-27T01:34:01.473Z | 2026-01-20T14:28:17.109Z |
| CVE-2025-62930 |
6.1 (3.1)
|
WordPress MapSVG plugin <= 8.7.15 - Cross Site Scripti… |
RomanCode |
MapSVG |
2025-10-27T01:34:01.039Z | 2026-01-20T14:28:16.767Z |
| CVE-2025-62929 |
8.8 (3.1)
|
WordPress Testimonial Slider plugin <= 2.0.15 - Broken… |
PickPlugins |
Testimonial Slider |
2025-10-27T01:34:00.648Z | 2026-01-20T14:28:17.066Z |
| CVE-2025-62928 |
8.1 (3.1)
|
WordPress SEO Meta Description Updater plugin <= 1.2.0… |
Joby Joseph |
SEO Meta Description Updater |
2025-10-27T01:34:00.000Z | 2026-01-20T14:28:16.753Z |
| CVE-2025-62927 |
8.1 (3.1)
|
WordPress Nelio Content plugin <= 4.0.5 - Broken Acces… |
Nelio Software |
Nelio Content |
2025-10-27T01:33:59.620Z | 2026-01-20T14:28:16.864Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62956 | Cross-Site Request Forgery (CSRF) vulnerability in iseremet Reloadly reloadly-topup-widget allows S… | 2025-10-27T02:15:55.917 | 2026-01-20T15:18:10.113 |
| fkie_cve-2025-62955 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDe… | 2025-12-21T21:15:49.030 | 2026-01-20T15:18:10.013 |
| fkie_cve-2025-62954 | Missing Authorization vulnerability in Codeinwp Revive Old Posts tweet-old-post allows Exploiting I… | 2025-10-27T02:15:55.780 | 2026-01-20T15:18:09.877 |
| fkie_cve-2025-62953 | Missing Authorization vulnerability in nanbu Welcart e-Commerce usc-e-shop allows Exploiting Incorr… | 2025-10-27T02:15:55.660 | 2026-01-20T15:18:09.737 |
| fkie_cve-2025-62952 | Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly C… | 2025-10-27T02:15:55.540 | 2026-01-20T15:18:09.600 |
| fkie_cve-2025-62951 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:55.410 | 2026-01-20T15:18:09.470 |
| fkie_cve-2025-62950 | Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Cont… | 2025-11-06T16:16:13.540 | 2026-01-20T15:18:09.333 |
| fkie_cve-2025-62949 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:55.280 | 2026-01-20T15:18:09.200 |
| fkie_cve-2025-62948 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:55.150 | 2026-01-20T15:18:09.070 |
| fkie_cve-2025-62947 | Insertion of Sensitive Information Into Sent Data vulnerability in publitio Publitio publitio allow… | 2025-10-27T02:15:55.013 | 2026-01-20T15:18:08.933 |
| fkie_cve-2025-62946 | Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploitin… | 2025-10-27T02:15:54.833 | 2026-01-20T15:18:08.807 |
| fkie_cve-2025-62945 | Cross-Site Request Forgery (CSRF) vulnerability in Eduard Pinuaga Linares Did Prestashop Display di… | 2025-10-27T02:15:54.680 | 2026-01-20T15:18:08.677 |
| fkie_cve-2025-62944 | Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Ex… | 2025-10-27T02:15:54.547 | 2026-01-20T15:18:08.547 |
| fkie_cve-2025-62943 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:54.410 | 2026-01-20T15:18:08.417 |
| fkie_cve-2025-62942 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:54.280 | 2026-01-20T15:18:08.287 |
| fkie_cve-2025-62941 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:54.150 | 2026-01-20T15:18:08.150 |
| fkie_cve-2025-62940 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:54.030 | 2026-01-20T15:18:08.020 |
| fkie_cve-2025-62939 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:53.903 | 2026-01-20T15:18:07.890 |
| fkie_cve-2025-62938 | Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier a… | 2025-10-27T02:15:53.770 | 2026-01-20T15:18:07.747 |
| fkie_cve-2025-62937 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:53.640 | 2026-01-20T15:18:07.617 |
| fkie_cve-2025-62936 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthe… | 2025-10-27T02:15:53.510 | 2026-01-20T15:18:07.487 |
| fkie_cve-2025-62935 | Missing Authorization vulnerability in ilmosys Open Close WooCommerce Store woc-open-close allows E… | 2025-10-27T02:15:53.380 | 2026-01-20T15:18:07.360 |
| fkie_cve-2025-62934 | Cross-Site Request Forgery (CSRF) vulnerability in Mejar WP Business Hours wp-business-hours allows… | 2025-10-27T02:15:53.250 | 2026-01-20T15:18:07.230 |
| fkie_cve-2025-62933 | Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonials awesome-testimonial… | 2025-10-27T02:15:53.123 | 2026-01-20T15:18:07.100 |
| fkie_cve-2025-62932 | Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting I… | 2025-10-27T02:15:53.000 | 2026-01-20T15:18:06.967 |
| fkie_cve-2025-62931 | Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploi… | 2025-10-27T02:15:52.877 | 2026-01-20T15:18:06.843 |
| fkie_cve-2025-62930 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T02:15:52.740 | 2026-01-20T15:18:06.710 |
| fkie_cve-2025-62929 | Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting… | 2025-10-27T02:15:52.613 | 2026-01-20T15:18:06.577 |
| fkie_cve-2025-62928 | Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-descriptio… | 2025-10-27T02:15:52.477 | 2026-01-20T15:18:06.440 |
| fkie_cve-2025-62927 | Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting… | 2025-10-27T02:15:52.347 | 2026-01-20T15:18:06.307 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6c46-p6j5-3f49 |
5.3 (4.0)
|
TYPO3 CMS Allows Broken Access Control in Redirects Module | 2026-01-13T20:37:37Z | 2026-01-13T20:37:37Z |
| ghsa-5j7q-wmh7-cqhg |
5.3 (4.0)
|
TYPO3 CMS Allows Broken Access Control in Edit Document Controller | 2026-01-13T20:37:30Z | 2026-01-13T20:37:30Z |
| ghsa-c83v-7274-4vgp |
9.4 (4.0)
|
Malicious website can execute commands on the local system through XSS in the OpenCode web UI | 2026-01-13T20:36:41Z | 2026-01-13T20:36:42Z |
| ghsa-vxw4-wv6m-9hhh |
8.8 (3.1)
|
OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution | 2026-01-13T20:35:08Z | 2026-01-13T20:35:08Z |
| ghsa-97vm-c39p-jr86 |
9.8 (3.1)
10.0 (4.0)
|
Spree has Remote Command Execution vulnerability in search functionality | 2025-08-13T21:30:30Z | 2026-01-13T20:33:40Z |
| ghsa-jm5j-jfrm-hm23 |
5.9 (3.1)
|
hermes's raw options logging may disclose secrets passed in via subcommand options argument | 2026-01-13T20:30:54Z | 2026-01-13T20:30:54Z |
| ghsa-pgqp-8h46-6x4j |
8.1 (3.1)
|
MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation | 2026-01-12T09:30:31Z | 2026-01-13T20:30:03Z |
| ghsa-3f44-xw83-3pmg |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml file | 2026-01-13T20:29:12Z | 2026-01-13T20:29:12Z |
| ghsa-xjr7-3c3g-m763 |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml file | 2026-01-13T20:29:00Z | 2026-01-13T20:29:00Z |
| ghsa-36j9-mx87-2cff |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependencies | 2026-01-13T20:28:41Z | 2026-01-13T20:28:41Z |
| ghsa-fr4j-65pv-gjjj |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configuration | 2026-01-13T20:28:16Z | 2026-01-13T20:28:16Z |
| ghsa-xv56-3wq5-9997 |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repository | 2026-01-13T19:57:06Z | 2026-01-13T19:57:06Z |
| ghsa-pfq2-hh62-7m96 |
6.7 (3.1)
|
Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl` | 2026-01-13T19:54:29Z | 2026-01-13T19:54:29Z |
| ghsa-3558-j79f-vvm6 |
7.3 (4.0)
|
Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal | 2026-01-13T19:15:13Z | 2026-01-13T19:15:13Z |
| ghsa-mwr6-3gp8-9jmj |
9.3 (4.0)
|
orval MCP client is vulnerable to a code injection attack. | 2026-01-13T19:12:22Z | 2026-01-13T19:12:22Z |
| ghsa-m86r-wr74-693h |
3.3 (3.1)
1.9 (4.0)
|
AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability | 2026-01-11T12:30:27Z | 2026-01-13T19:06:56Z |
| ghsa-xf94-h87h-g9wr |
3.5 (3.1)
2.0 (4.0)
|
QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting | 2026-01-10T15:31:22Z | 2026-01-13T19:03:20Z |
| ghsa-562r-8445-54r2 |
7.5 (3.1)
|
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler | 2026-01-13T19:02:52Z | 2026-01-13T19:02:52Z |
| ghsa-59jp-pj84-45mr |
5.8 (3.1)
|
Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass | 2026-01-13T18:47:57Z | 2026-01-13T18:47:57Z |
| ghsa-xrwg-mqj6-6m22 |
8.8 (3.1)
|
Envoy Extension Policy lua scripts injection causes arbitrary command execution | 2026-01-13T18:47:34Z | 2026-01-13T18:47:34Z |
| ghsa-597g-3phw-6986 |
4.5 (3.1)
|
virtualenv Has TOCTOU Vulnerabilities in Directory Creation | 2026-01-13T18:45:57Z | 2026-01-13T18:45:57Z |
| ghsa-qmgc-5h2g-mvrw |
5.3 (3.1)
|
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock | 2026-01-13T18:44:55Z | 2026-01-13T18:44:55Z |
| ghsa-grg2-63fw-f2qr |
6.5 (3.1)
|
vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions | 2026-01-13T18:44:15Z | 2026-01-13T18:44:15Z |
| ghsa-mjjp-xjfg-97wg |
3.3 (3.1)
1.9 (4.0)
|
LIEF is vulnerable to segmentation fault | 2026-01-10T12:30:16Z | 2026-01-13T18:31:53Z |
| ghsa-xqxc-72vf-v8f5 |
6.4 (3.1)
|
Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificat… | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ghsa-wvw4-rf55-ww3f |
4.6 (3.1)
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft O… | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ghsa-wvh3-vgpw-w4mr |
7.0 (3.1)
|
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ghsa-wv7r-h676-ghph |
7.8 (3.1)
|
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to… | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ghsa-v6cw-63j5-79wf |
7.8 (3.1)
|
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute … | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ghsa-r498-r54r-pxqh |
7.5 (3.1)
|
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attac… | 2026-01-13T18:31:11Z | 2026-01-13T18:31:11Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-28134 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.099956Z |
| gsd-2024-28150 | Jenkins HTML Publisher Plugin 1.32 and earlier does not escape job names, report names, a… | 2024-03-06T06:02:27.098545Z |
| gsd-2024-28144 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.097284Z |
| gsd-2024-28159 | A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and… | 2024-03-06T06:02:27.095163Z |
| gsd-2024-28143 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.091524Z |
| gsd-2024-28161 | In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable … | 2024-03-06T06:02:27.091321Z |
| gsd-2024-28151 | Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report … | 2024-03-06T06:02:27.090191Z |
| gsd-2024-28154 | Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters … | 2024-03-06T06:02:27.088670Z |
| gsd-2024-28139 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.087946Z |
| gsd-2024-28157 | Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views,… | 2024-03-06T06:02:27.086409Z |
| gsd-2024-28156 | Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Bui… | 2024-03-06T06:02:27.086201Z |
| gsd-2024-28146 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.085207Z |
| gsd-2024-28149 | Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly saniti… | 2024-03-06T06:02:27.085002Z |
| gsd-2024-28162 | In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for admini… | 2024-03-06T06:02:27.080863Z |
| gsd-2024-28141 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.079084Z |
| gsd-2024-28140 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.078519Z |
| gsd-2024-28137 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.076558Z |
| gsd-2024-28158 | A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release M… | 2024-03-06T06:02:27.076349Z |
| gsd-2024-28145 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:27.074923Z |
| gsd-2024-2196 | aimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to pe… | 2024-03-06T06:02:25.290914Z |
| gsd-2024-2199 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:25.287346Z |
| gsd-2024-2209 | A user with administrative privileges can create a compromised dll file of the same name … | 2024-03-06T06:02:25.284729Z |
| gsd-2024-2197 | Chirp Access improperly stores credentials within its source code, potentially exposing … | 2024-03-06T06:02:25.280015Z |
| gsd-2024-2191 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:25.277726Z |
| gsd-2024-2188 | Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware… | 2024-03-06T06:02:25.273457Z |
| gsd-2024-2195 | A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim p… | 2024-03-06T06:02:25.272687Z |
| gsd-2024-2200 | The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Sit… | 2024-03-06T06:02:25.267810Z |
| gsd-2024-2207 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:25.258962Z |
| gsd-2024-2203 | The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclus… | 2024-03-06T06:02:25.257834Z |
| gsd-2024-2208 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-06T06:02:25.251236Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-187615 | Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187614 | Malicious code in jovian-sass-loader-native-cassini (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187613 | Malicious code in jovian-postgres-webdriver-mocha-await (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187612 | Malicious code in jovian-nodemon-winston-andromeda (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187611 | Malicious code in jovian-less-loader-draco-wasat (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187610 | Malicious code in jovian-development-meissa-configstore (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187609 | Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187608 | Malicious code in jest-titan-postcss-loader-galaxy (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187607 | Malicious code in jest-astro-despina-aurora (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187606 | Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187605 | Malicious code in jekyll-resolvers-quark-xenobiology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187604 | Malicious code in jekyll-resolvers-quark-epimetheus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187603 | Malicious code in jekyll-nightmare-juno-eclipse (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187602 | Malicious code in jekyll-less-npm-local (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187601 | Malicious code in jekyll-deneb-uglify-js-paleobotany (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187600 | Malicious code in javascript-start-halley-eclipse (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187599 | Malicious code in javascript-magnetar-epimetheus-figures (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187598 | Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187597 | Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187596 | Malicious code in javascript-async-enceladus-eslint-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187595 | Malicious code in java-theta-theta-zero-static (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187594 | Malicious code in java-socket-cluster-decode-catch (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187593 | Malicious code in java-simple-void-fork-sudo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187592 | Malicious code in java-short-string-java-yaml (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187591 | Malicious code in java-orchestrate-awk-process-virtualize (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187590 | Malicious code in jasmine-metalsmith-schema-sirius (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187589 | Malicious code in jasmine-karma-innercore-csrf (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187588 | Malicious code in jasmine-iota-apollo-postcss (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187587 | Malicious code in jasmine-ichnology-astro-proteomics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187586 | Malicious code in jasmine-cypress-gravity-install (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-2744 | Apple Safari: Mehrere Schwachstellen | 2023-10-25T22:00:00.000+00:00 | 2023-10-25T22:00:00.000+00:00 |
| wid-sec-w-2023-1974 | vim: Schwachstelle ermöglicht Denial of Service | 2023-08-07T22:00:00.000+00:00 | 2023-10-25T22:00:00.000+00:00 |
| wid-sec-w-2023-1614 | Tenable Security Nessus Network Monitor: Mehrere Schwachstellen | 2023-06-29T22:00:00.000+00:00 | 2023-10-25T22:00:00.000+00:00 |
| wid-sec-w-2023-1537 | Apple iOS: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten | 2023-06-21T22:00:00.000+00:00 | 2023-10-25T22:00:00.000+00:00 |
| wid-sec-w-2023-2738 | D-LINK Access Point (AP) DAP-X1860: Schwachstelle ermöglicht Codeausführung | 2023-10-24T22:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2737 | Microsoft GitHub Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-10-24T22:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2734 | Aruba ClearPass Policy Manager: Mehrere Schwachstellen | 2023-10-24T22:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2370 | Mattermost: Mehrere Schwachstellen ermöglicht nicht spezifizierten Angriff | 2023-09-17T22:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2023-1564 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-06-25T22:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2022-2102 | IBM Java SDK: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-11-16T23:00:00.000+00:00 | 2023-10-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2733 | ZScaler Client Connector: Mehrere Schwachstellen | 2023-10-23T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2732 | Trellix Data Loss Prevention: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-10-23T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2731 | Red Hat Ceph Storage: Mehrere Schwachstellen | 2020-07-20T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2730 | Red Hat Ceph Storage: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2021-01-12T23:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2729 | Red Hat Ceph Storage: Mehrere Schwachstellen | 2021-06-15T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2728 | OPNsense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-10-23T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2726 | HCL Commerce: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-10-23T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2721 | VMware Aria Operations for Logs: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und Code-Ausführung | 2023-10-19T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2596 | IBM Personal Communications: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-10-09T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-1374 | Node.js: Mehrere Schwachstellen | 2020-06-07T22:00:00.000+00:00 | 2023-10-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2724 | IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-10-22T22:00:00.000+00:00 | 2023-10-22T22:00:00.000+00:00 |
| wid-sec-w-2023-2658 | Cisco IOS XE: Schwachstellen ermöglichten Administrativen Zugriff | 2023-10-16T22:00:00.000+00:00 | 2023-10-22T22:00:00.000+00:00 |
| wid-sec-w-2023-2722 | Baker Hughes Bently Nevada 3500: Mehrere Schwachstellen | 2023-10-19T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-2717 | Squid: Mehrere Schwachstellen | 2018-10-28T23:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-2714 | IBM TXSeries: Schwachstelle ermöglicht Denial of Service | 2023-10-19T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-2713 | Roundcube: Schwachstelle ermöglicht Cross-Site Scripting | 2023-10-19T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-1309 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-05-29T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2023-0246 | docker: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-01-31T23:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2022-1153 | GNOME: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen | 2021-08-22T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| wid-sec-w-2022-0706 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-07-17T22:00:00.000+00:00 | 2023-10-19T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2009:1620 | Red Hat Security Advisory: bind security update | 2009-11-30T15:38:00+00:00 | 2026-01-13T20:58:49+00:00 |
| rhsa-2009:0295 | Red Hat Security Advisory: net-snmp security update | 2009-03-26T15:47:00+00:00 | 2026-01-13T20:58:47+00:00 |
| rhsa-2008:0945 | Red Hat Security Advisory: flash-plugin security update | 2008-10-28T14:29:00+00:00 | 2026-01-13T20:58:43+00:00 |
| rhsa-2008:0580 | Red Hat Security Advisory: vim security update | 2008-11-25T08:41:00+00:00 | 2026-01-13T20:58:40+00:00 |
| rhsa-2008:0525 | Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update | 2008-06-30T15:36:00+00:00 | 2026-01-13T20:58:39+00:00 |
| rhsa-2008:0264 | Red Hat Security Advisory: Red Hat Network Satellite Server Solaris client security update | 2008-05-20T14:15:00+00:00 | 2026-01-13T20:58:38+00:00 |
| rhsa-2008:0165 | Red Hat Security Advisory: ImageMagick security update | 2008-04-17T01:31:00+00:00 | 2026-01-13T20:58:35+00:00 |
| rhsa-2008:0151 | Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP02 security update | 2008-04-02T20:44:00+00:00 | 2026-01-13T20:58:32+00:00 |
| rhsa-2008:0134 | Red Hat Security Advisory: tcltk security update | 2008-02-21T21:03:00+00:00 | 2026-01-13T20:58:27+00:00 |
| rhsa-2008:0040 | Red Hat Security Advisory: postgresql security update | 2008-02-01T14:55:00+00:00 | 2026-01-13T20:58:26+00:00 |
| rhsa-2008:0038 | Red Hat Security Advisory: postgresql security update | 2008-01-11T12:37:00+00:00 | 2026-01-13T20:58:25+00:00 |
| rhsa-2007:1048 | Red Hat Security Advisory: openoffice.org, hsqldb security update | 2007-12-05T14:34:00+00:00 | 2026-01-13T20:58:18+00:00 |
| rhsa-2007:1031 | Red Hat Security Advisory: xpdf security update | 2007-11-07T19:05:00+00:00 | 2026-01-13T20:58:18+00:00 |
| rhsa-2007:1027 | Red Hat Security Advisory: tetex security update | 2007-11-08T13:45:00+00:00 | 2026-01-13T20:58:15+00:00 |
| rhsa-2007:0939 | Red Hat Security Advisory: kernel security update | 2007-11-01T13:28:00+00:00 | 2026-01-13T20:58:08+00:00 |
| rhsa-2007:0934 | Red Hat Security Advisory: rhpki-util, rhpki-common, rhpki-ca security update | 2007-10-08T07:44:00+00:00 | 2026-01-13T20:58:08+00:00 |
| rhsa-2007:0917 | Red Hat Security Advisory: php security update | 2007-10-23T15:56:00+00:00 | 2026-01-13T20:58:07+00:00 |
| rhsa-2007:0932 | Red Hat Security Advisory: pwlib security update | 2007-10-08T08:07:00+00:00 | 2026-01-13T20:58:06+00:00 |
| rhsa-2007:0878 | Red Hat Security Advisory: cyrus-sasl security update | 2007-09-04T15:09:00+00:00 | 2026-01-13T20:58:02+00:00 |
| rhsa-2007:0868 | Red Hat Security Advisory: Red Hat Network Satellite Server security update | 2007-08-29T15:08:00+00:00 | 2026-01-13T20:58:02+00:00 |
| rhsa-2007:0860 | Red Hat Security Advisory: tar security update | 2007-08-23T12:41:00+00:00 | 2026-01-13T20:57:59+00:00 |
| rhsa-2007:0795 | Red Hat Security Advisory: cyrus-sasl security and bug fix update | 2007-09-04T14:49:00+00:00 | 2026-01-13T20:57:58+00:00 |
| rhsa-2006:0575 | Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4 | 2006-08-10T19:31:00+00:00 | 2026-01-13T20:57:58+00:00 |
| rhsa-2006:0544 | Red Hat Security Advisory: mysql security update | 2006-06-09T15:00:00+00:00 | 2026-01-13T20:57:55+00:00 |
| rhsa-2006:0427 | Red Hat Security Advisory: ruby security update | 2006-05-09T11:32:00+00:00 | 2026-01-13T20:57:53+00:00 |
| rhsa-2006:0420 | Red Hat Security Advisory: ethereal security update | 2006-05-03T16:19:00+00:00 | 2026-01-13T20:57:52+00:00 |
| rhsa-2006:0329 | Red Hat Security Advisory: mozilla security update | 2006-04-18T11:12:00+00:00 | 2026-01-13T20:57:49+00:00 |
| rhsa-2005:612 | Red Hat Security Advisory: kdelibs security update | 2005-07-27T15:22:00+00:00 | 2026-01-13T20:57:44+00:00 |
| rhsa-2005:595 | Red Hat Security Advisory: squirrelmail security update | 2005-08-03T14:16:00+00:00 | 2026-01-13T20:57:42+00:00 |
| rhsa-2005:562 | Red Hat Security Advisory: krb5 security update | 2005-07-12T18:12:00+00:00 | 2026-01-13T20:57:41+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-6200 | Kernel: icmpv6 router advertisement packets aka linux tcp/ip remote code execution vulnerability | 2024-01-01T08:00:00.000Z | 2024-02-04T00:00:00.000Z |
| msrc_cve-2023-46838 | Linux: netback processing of zero-length transmit fragment | 2024-01-01T08:00:00.000Z | 2024-02-02T00:00:00.000Z |
| msrc_cve-2024-21399 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2024-02-13T08:00:00.000Z | 2024-02-01T08:00:00.000Z |
| msrc_cve-2024-21388 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-30T08:00:00.000Z |
| msrc_cve-2024-22705 | An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_utf16 out-of-bounds access because the relationship between Name data and CreateContexts data is mishandled. | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2024-0775 | Kernel: use-after-free while changing the mount option in __ext4_remount leading | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2023-6531 | Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2023-51043 | In the Linux kernel before 6.4.5 drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload. | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2023-51042 | In the Linux kernel before 6.4.12 amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free. | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2023-46343 | In the Linux kernel before 6.5.9 there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c. | 2024-01-01T08:00:00.000Z | 2024-01-30T00:00:00.000Z |
| msrc_cve-2024-21336 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-26T08:00:00.000Z |
| msrc_cve-2023-36049 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2023-11-14T08:00:00.000Z | 2024-01-26T08:00:00.000Z |
| msrc_cve-2024-0641 | Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke | 2024-01-01T08:00:00.000Z | 2024-01-26T00:00:00.000Z |
| msrc_cve-2024-0639 | Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos | 2024-01-01T08:00:00.000Z | 2024-01-26T00:00:00.000Z |
| msrc_cve-2024-21387 | Microsoft Edge for Android Spoofing Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-25T08:00:00.000Z |
| msrc_cve-2024-21385 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-25T08:00:00.000Z |
| msrc_cve-2024-21383 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-25T08:00:00.000Z |
| msrc_cve-2024-21382 | Microsoft Edge for Android Information Disclosure Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-25T08:00:00.000Z |
| msrc_cve-2024-21326 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-25T08:00:00.000Z |
| msrc_cve-2024-0562 | Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | 2024-01-01T08:00:00.000Z | 2024-01-24T00:00:00.000Z |
| msrc_cve-2023-6040 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family) | 2024-01-01T08:00:00.000Z | 2024-01-23T00:00:00.000Z |
| msrc_cve-2023-3773 | Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr | 2023-07-01T07:00:00.000Z | 2024-01-21T00:00:00.000Z |
| msrc_cve-2023-3772 | Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() | 2023-07-01T07:00:00.000Z | 2024-01-21T00:00:00.000Z |
| msrc_cve-2022-48619 | An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) because input_set_capability mishandles the situation in which an event code falls outside of a bitmap. | 2024-01-01T08:00:00.000Z | 2024-01-21T00:00:00.000Z |
| msrc_cve-2022-2585 | It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after-free. | 2024-01-01T08:00:00.000Z | 2024-01-21T00:00:00.000Z |
| msrc_cve-2023-6816 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | 2024-01-01T08:00:00.000Z | 2024-01-19T00:00:00.000Z |
| msrc_cve-2023-51782 | An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition. | 2023-12-01T08:00:00.000Z | 2024-01-19T00:00:00.000Z |
| msrc_cve-2023-51781 | An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition. | 2023-12-01T08:00:00.000Z | 2024-01-19T00:00:00.000Z |
| msrc_cve-2023-51780 | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. | 2023-12-01T08:00:00.000Z | 2024-01-19T00:00:00.000Z |
| msrc_cve-2024-21337 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2024-01-09T08:00:00.000Z | 2024-01-18T08:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201704-0645 | A vulnerability in the role-based resource checking functionality of Cisco Unified Comput… | 2025-04-20T23:20:02.450000Z |
| var-201704-0958 | A vulnerability in the web-based management interface of Cisco Unified Communications Man… | 2025-04-20T23:20:02.306000Z |
| var-201704-1021 | Huawei Secospace USG6300 with software V500R001C20 and V500R001C20SPC200PWE, Secospace US… | 2025-04-20T23:20:02.201000Z |
| var-201704-1231 | On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginnin… | 2025-04-20T23:20:02.062000Z |
| var-201704-1294 | Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storag… | 2025-04-20T23:20:01.983000Z |
| var-201704-1336 | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System … | 2025-04-20T23:20:01.923000Z |
| var-201712-0703 | Specially crafted packets sent to port 161/udp could cause a denial of service condition.… | 2025-04-20T23:20:01.426000Z |
| var-201705-3220 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service conditio… | 2025-04-20T23:20:01.379000Z |
| var-201705-3221 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an a… | 2025-04-20T23:20:01.333000Z |
| var-201705-3368 | Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Ju… | 2025-04-20T23:20:01.233000Z |
| var-201705-3536 | The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidde… | 2025-04-20T23:20:00.716000Z |
| var-201705-3662 | A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could… | 2025-04-20T23:20:00.662000Z |
| var-201705-3935 | An issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability e… | 2025-04-20T23:20:00.541000Z |
| var-201706-0165 | Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remot… | 2025-04-20T23:19:56.615000Z |
| var-201706-0354 | If multiple users are concurrently logged into a single system where one user is sending … | 2025-04-20T23:19:56.495000Z |
| var-201706-0438 | Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware vers… | 2025-04-20T23:19:56.444000Z |
| var-201706-0564 | A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authentic… | 2025-04-20T23:19:56.357000Z |
| var-201706-0585 | Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Playe… | 2025-04-20T23:19:56.309000Z |
| var-201706-0669 | On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated G… | 2025-04-20T23:19:56.271000Z |
| var-201706-0989 | Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 d… | 2025-04-20T23:19:55.729000Z |
| var-201706-0987 | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with f… | 2025-04-20T23:19:55.694000Z |
| var-201706-0992 | Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500… | 2025-04-20T23:19:55.660000Z |
| var-201706-0990 | XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with … | 2025-04-20T23:19:55.626000Z |
| var-201706-0978 | Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devi… | 2025-04-20T23:19:55.591000Z |
| var-201706-0991 | XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices wit… | 2025-04-20T23:19:55.556000Z |
| var-201706-0988 | CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware b… | 2025-04-20T23:19:55.521000Z |
| var-201707-0901 | A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisc… | 2025-04-20T23:19:54.562000Z |
| var-201707-0922 | A vulnerability in certain commands of Cisco Elastic Services Controller could allow an a… | 2025-04-20T23:19:54.530000Z |
| var-201707-1048 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-1702… | 2025-04-20T23:19:54.048000Z |
| var-201707-1217 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will … | 2025-04-20T23:19:54.016000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2023:0309-1 | Security update for openssl-1_1 | 2023-02-07T16:34:19Z | 2023-02-07T16:34:19Z |
| suse-su-2023:0308-1 | Security update for openssl-1_1 | 2023-02-07T16:33:44Z | 2023-02-07T16:33:44Z |
| suse-su-2023:0307-1 | Security update for openssl1 | 2023-02-07T16:33:26Z | 2023-02-07T16:33:26Z |
| suse-su-2023:0306-1 | Security update for openssl-1_0_0 | 2023-02-07T16:33:05Z | 2023-02-07T16:33:05Z |
| suse-su-2023:0305-2 | Security update for openssl-1_0_0 | 2023-02-07T16:32:02Z | 2023-02-07T16:32:02Z |
| suse-su-2023:0305-1 | Security update for openssl-1_0_0 | 2023-02-07T16:32:02Z | 2023-02-07T16:32:02Z |
| suse-su-2022:0525-2 | Security update for polkit | 2023-02-07T16:02:07Z | 2023-02-07T16:02:07Z |
| suse-su-2023:0301-1 | Security update for sssd | 2023-02-07T12:40:19Z | 2023-02-07T12:40:19Z |
| suse-su-2023:0300-1 | Security update for sssd | 2023-02-07T12:39:43Z | 2023-02-07T12:39:43Z |
| suse-su-2023:0295-1 | Security update for redis | 2023-02-07T09:39:45Z | 2023-02-07T09:39:45Z |
| suse-su-2023:0294-1 | Security update for apache2 | 2023-02-07T09:39:14Z | 2023-02-07T09:39:14Z |
| suse-su-2023:0293-1 | Security update for nginx | 2023-02-07T09:38:00Z | 2023-02-07T09:38:00Z |
| suse-su-2023:0292-1 | Security update for sssd | 2023-02-07T09:37:00Z | 2023-02-07T09:37:00Z |
| suse-su-2022:3198-2 | Security update for php8-pear | 2023-02-07T09:12:06Z | 2023-02-07T09:12:06Z |
| suse-su-2023:0289-1 | Security update for xwayland | 2023-02-07T08:34:55Z | 2023-02-07T08:34:55Z |
| suse-su-2023:0288-1 | Security update for xorg-x11-server | 2023-02-07T08:33:59Z | 2023-02-07T08:33:59Z |
| suse-su-2023:0287-1 | Security update for xorg-x11-server | 2023-02-07T08:33:22Z | 2023-02-07T08:33:22Z |
| suse-su-2023:0286-1 | Security update for xorg-x11-server | 2023-02-07T08:32:53Z | 2023-02-07T08:32:53Z |
| suse-su-2023:0285-1 | Security update for xorg-x11-server | 2023-02-07T08:31:47Z | 2023-02-07T08:31:47Z |
| suse-su-2023:0284-1 | Security update for xorg-x11-server | 2023-02-07T08:29:43Z | 2023-02-07T08:29:43Z |
| suse-su-2023:0282-1 | Security update for xorg-x11-server | 2023-02-07T08:22:46Z | 2023-02-07T08:22:46Z |
| suse-su-2023:0281-1 | Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP3) | 2023-02-07T07:33:49Z | 2023-02-07T07:33:49Z |
| suse-su-2023:0280-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4) | 2023-02-07T07:05:29Z | 2023-02-07T07:05:29Z |
| suse-su-2023:0277-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4) | 2023-02-07T06:34:26Z | 2023-02-07T06:34:26Z |
| suse-su-2023:0276-1 | Security update for rubygem-rack | 2023-02-06T16:19:57Z | 2023-02-06T16:19:57Z |
| suse-su-2023:0275-1 | Security update for rubygem-activesupport-5_1 | 2023-02-06T16:19:01Z | 2023-02-06T16:19:01Z |
| suse-su-2023:0274-1 | Security update for redis | 2023-02-06T16:17:58Z | 2023-02-06T16:17:58Z |
| suse-su-2023:0273-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4) | 2023-02-06T14:34:21Z | 2023-02-06T14:34:21Z |
| suse-su-2023:0270-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4) | 2023-02-06T14:34:12Z | 2023-02-06T14:34:12Z |
| suse-su-2023:0271-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP5) | 2023-02-06T14:34:02Z | 2023-02-06T14:34:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2020:1772-1 | Security update for lout | 2020-10-29T17:24:34Z | 2020-10-29T17:24:34Z |
| opensuse-su-2020:1771-1 | Security update for lout | 2020-10-29T17:24:27Z | 2020-10-29T17:24:27Z |
| opensuse-su-2020:1770-1 | Security update for singularity | 2020-10-29T17:24:21Z | 2020-10-29T17:24:21Z |
| opensuse-su-2020:1769-1 | Security update for singularity | 2020-10-29T17:24:16Z | 2020-10-29T17:24:16Z |
| opensuse-su-2020:1767-1 | Security update for php7 | 2020-10-29T17:23:59Z | 2020-10-29T17:23:59Z |
| opensuse-su-2020:1766-1 | Security update for tensorflow2 | 2020-10-29T11:23:39Z | 2020-10-29T11:23:39Z |
| opensuse-su-2020:1765-1 | Security update for pagure | 2020-10-29T11:23:30Z | 2020-10-29T11:23:30Z |
| opensuse-su-2020:1754-1 | Security update for kleopatra | 2020-10-28T09:30:32Z | 2020-10-28T09:30:32Z |
| opensuse-su-2020:1752-1 | Recommended update for mailman | 2020-10-27T09:21:55Z | 2020-10-27T09:21:55Z |
| opensuse-su-2020:1748-1 | Security update for MozillaFirefox | 2020-10-26T21:04:55Z | 2020-10-26T21:04:55Z |
| opensuse-su-2020:1744-1 | Security update for freetype2 | 2020-10-26T09:22:22Z | 2020-10-26T09:22:22Z |
| opensuse-su-2020:1743-1 | Security update for gnutls | 2020-10-26T09:22:14Z | 2020-10-26T09:22:14Z |
| opensuse-su-2020:1737-1 | Security update for chromium | 2020-10-25T18:34:10Z | 2020-10-25T18:34:10Z |
| opensuse-su-2020:1736-1 | Security update for atftp | 2020-10-25T15:20:36Z | 2020-10-25T15:20:36Z |
| opensuse-su-2020:1734-1 | Security update for freetype2 | 2020-10-25T13:21:03Z | 2020-10-25T13:21:03Z |
| opensuse-su-2020:1732-1 | Security update for MozillaFirefox | 2020-10-25T12:53:04Z | 2020-10-25T12:53:04Z |
| opensuse-su-2020:1731-1 | Security update for chromium | 2020-10-25T11:21:44Z | 2020-10-25T11:21:44Z |
| opensuse-su-2020:1724-1 | Security update for gnutls | 2020-10-24T22:22:04Z | 2020-10-24T22:22:04Z |
| opensuse-su-2020:1723-1 | Security update for kleopatra | 2020-10-24T18:20:55Z | 2020-10-24T18:20:55Z |
| opensuse-su-2020:1719-1 | Security update for hunspell | 2020-10-24T08:21:43Z | 2020-10-24T08:21:43Z |
| opensuse-su-2020:1718-1 | Security update for chromium | 2020-10-23T23:16:52Z | 2020-10-23T23:16:52Z |
| opensuse-su-2020:1717-1 | Security update for hunspell | 2020-10-23T18:21:56Z | 2020-10-23T18:21:56Z |
| opensuse-su-2020:1715-1 | Security update for chromium | 2020-10-23T12:21:50Z | 2020-10-23T12:21:50Z |
| opensuse-su-2020:1713-1 | Security update for opera | 2020-10-23T10:27:55Z | 2020-10-23T10:27:55Z |
| opensuse-su-2020:1707-1 | Recommended update for mailman | 2020-10-22T12:27:35Z | 2020-10-22T12:27:35Z |
| opensuse-su-2020:1705-1 | Security update for chromium | 2020-10-22T05:51:33Z | 2020-10-22T05:51:33Z |
| opensuse-su-2020:1703-1 | Security update for php7 | 2020-10-20T08:23:51Z | 2020-10-20T08:23:51Z |
| opensuse-su-2020:1702-1 | Security update for transfig | 2020-10-20T04:20:58Z | 2020-10-20T04:20:58Z |
| opensuse-su-2020:1701-1 | Security update for bind | 2020-10-20T04:20:51Z | 2020-10-20T04:20:51Z |
| opensuse-su-2020:1699-1 | Security update for bind | 2020-10-19T18:22:55Z | 2020-10-19T18:22:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-12104 | Tenda FH1201缓冲区溢出漏洞（CNVD-2025-12104） | 2024-07-25 | 2025-06-06 |
| cnvd-2025-12103 | Tenda FH1201缓冲区溢出漏洞 | 2024-07-25 | 2025-06-06 |
| cnvd-2025-12102 | Tenda FH1201 mac参数命令注入漏洞 | 2024-07-29 | 2025-06-06 |
| cnvd-2025-12101 | Tenda FH1206 fromSafeUrlFilter方法缓冲区溢出漏洞 | 2024-08-14 | 2025-06-06 |
| cnvd-2025-12100 | Tenda FH1201缓冲区溢出漏洞 | 2024-08-16 | 2025-06-06 |
| cnvd-2025-12099 | Tenda AX1806缓冲区溢出漏洞（CNVD-2025-12099） | 2024-08-28 | 2025-06-06 |
| cnvd-2025-12098 | Tenda AX1806缓冲区溢出漏洞（CNVD-2025-12098） | 2024-08-28 | 2025-06-06 |
| cnvd-2025-12097 | Tenda AX1806缓冲区溢出漏洞 | 2024-08-28 | 2025-06-06 |
| cnvd-2025-12009 | Tenda O3 formQosSet函数缓冲区溢出漏洞 | 2024-07-23 | 2025-06-06 |
| cnvd-2025-12008 | Tenda FH1201缓冲区溢出漏洞（CNVD-2025-12008） | 2024-07-25 | 2025-06-06 |
| cnvd-2025-12007 | Tenda FH1201缓冲区溢出漏洞（CNVD-2025-12007） | 2024-07-25 | 2025-06-06 |
| cnvd-2025-12006 | Tenda FH1201缓冲区溢出漏洞（CNVD-2025-12006） | 2024-07-25 | 2025-06-06 |
| cnvd-2025-12005 | Tenda FH1201缓冲区溢出漏洞（CNVD-2025-12005） | 2024-07-25 | 2025-06-06 |
| cnvd-2025-11914 | Tenda FH1206 funcpara1参数缓冲区溢出漏洞 | 2024-04-25 | 2025-06-06 |
| cnvd-2025-11913 | Tenda FH1206 entrys参数缓冲区溢出漏洞 | 2024-04-25 | 2025-06-06 |
| cnvd-2025-11912 | Tenda FH1206 mac参数命令注入漏洞 | 2024-05-30 | 2025-06-06 |
| cnvd-2025-11911 | Tenda FH1206 ip/goform/WizardHandle缓冲区溢出漏洞 | 2024-05-22 | 2025-06-06 |
| cnvd-2025-11910 | Tenda FH1206 ip/goform/NatStaticSetting缓冲区溢出漏洞 | 2024-05-22 | 2025-06-06 |
| cnvd-2025-11909 | Tenda FH1206 ip/goform/exeCommand缓冲区溢出漏洞 | 2024-05-22 | 2025-06-06 |
| cnvd-2025-11908 | Tenda FH1206 ip/goform/DhcpListClient的page参数缓冲区溢出漏洞 | 2024-05-22 | 2025-06-06 |
| cnvd-2025-11907 | Tenda FH1206 ip/goform/DhcpListClient的list1参数缓冲区溢出漏洞 | 2024-05-22 | 2025-06-06 |
| cnvd-2025-11906 | Samsung Email访问控制错误漏洞 | 2025-02-17 | 2025-06-06 |
| cnvd-2025-11905 | Samsung Blockchain Keystore越界读取漏洞 | 2025-02-17 | 2025-06-06 |
| cnvd-2025-11904 | Samsung Blockchain Keystore越界写入漏洞 | 2025-02-17 | 2025-06-06 |
| cnvd-2025-11886 | 统信软件技术有限公司畅写在线存在未授权访问漏洞 | 2025-04-22 | 2025-06-06 |
| cnvd-2025-11837 | Samsung Notes解析bmp越界写入漏洞 | 2025-03-10 | 2025-06-06 |
| cnvd-2025-11836 | Samsung Notes访问控制错误漏洞 | 2025-03-13 | 2025-06-06 |
| cnvd-2025-11835 | Samsung Galaxy Wearable访问控制错误漏洞 | 2025-03-13 | 2025-06-06 |
| cnvd-2025-11834 | Samsung PENUP访问控制错误漏洞 | 2025-05-14 | 2025-06-06 |
| cnvd-2025-11784 | 上海埃林哲软件系统股份有限公司YAPI存在命令执行漏洞 | 2025-04-22 | 2025-06-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-089 | Multiples vulnérabilités dans les produits Cisco | 2017-03-23T00:00:00.000000 | 2017-03-23T00:00:00.000000 |
| certfr-2017-avi-088 | Vulnérabilité dans Mozilla Firefox | 2017-03-20T00:00:00.000000 | 2017-03-20T00:00:00.000000 |
| certfr-2017-avi-087 | Multiples vulnérabilités dans Moodle | 2017-03-20T00:00:00.000000 | 2017-03-20T00:00:00.000000 |
| certfr-2017-avi-086 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-03-16T00:00:00.000000 | 2017-03-16T00:00:00.000000 |
| certfr-2017-avi-085 | Multiples vulnérabilités dans Drupal | 2017-03-16T00:00:00.000000 | 2017-03-16T00:00:00.000000 |
| certfr-2017-avi-084 | Multiples vulnérabilités dans les produits Cisco | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-083 | Vulnérabilité dans Xen | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-082 | Multiples vulnérabilités dans Microsoft Windows | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-081 | Multiples vulnérabilités dans Microsoft Office | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-080 | Multiples vulnérabilités dans Microsoft Edge | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-079 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-078 | Vulnérabilité dans Adobe Shockwave Player | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-077 | Multiples vulnérabilités dans Adobe Flash Player | 2017-03-15T00:00:00.000000 | 2017-03-15T00:00:00.000000 |
| certfr-2017-avi-076 | Vulnérabilité dans VMware Workstation et Fusion | 2017-03-14T00:00:00.000000 | 2017-03-14T00:00:00.000000 |
| certfr-2017-avi-075 | Vulnérabilité dans SCADA Wonderware by Schneider Electric Tableau Server | 2017-03-13T00:00:00.000000 | 2017-03-13T00:00:00.000000 |
| certfr-2017-avi-074 | Multiples vulnérabilités dans VMware Workstation | 2017-03-10T00:00:00.000000 | 2017-03-10T00:00:00.000000 |
| certfr-2017-avi-073 | Multiples vulnérabilités dans Google Chrome | 2017-03-10T00:00:00.000000 | 2017-03-10T00:00:00.000000 |
| certfr-2017-avi-072 | Vulnérabilité dans SPIP | 2017-03-09T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-071 | Vulnérabilité dans Apache Struts | 2017-03-09T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-070 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2017-03-08T00:00:00.000000 | 2017-03-09T00:00:00.000000 |
| certfr-2017-avi-069 | Multiples vulnérabilités dans Mozilla Firefox | 2017-03-08T00:00:00.000000 | 2017-03-08T00:00:00.000000 |
| certfr-2017-avi-068 | Multiples vulnérabilités dans Mozilla Thunderbird | 2017-03-08T00:00:00.000000 | 2017-03-08T00:00:00.000000 |
| certfr-2017-avi-067 | Multiples vulnérabilités dans WordPress | 2017-03-07T00:00:00.000000 | 2017-03-07T00:00:00.000000 |
| certfr-2017-avi-066 | Multiples vulnérabilités dans Google Android (Nexus) | 2017-03-07T00:00:00.000000 | 2017-03-07T00:00:00.000000 |
| certfr-2017-avi-065 | Multiples vulnérabilités dans Wireshark | 2017-03-06T00:00:00.000000 | 2017-03-06T00:00:00.000000 |
| certfr-2017-avi-064 | Vulnérabilité dans VMware Horizon DaaS | 2017-03-03T00:00:00.000000 | 2017-03-03T00:00:00.000000 |
| certfr-2017-avi-063 | Multiples vulnérabilités dans SCADA les produits Schneider | 2017-03-03T00:00:00.000000 | 2017-03-03T00:00:00.000000 |
| certfr-2017-avi-062 | Vulnérabilité dans SCADA Siemens SINUMERIK Integrate | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |
| certfr-2017-avi-061 | Vulnérabilité dans Cisco NetFlow Generation Appliance | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |
| certfr-2017-avi-060 | Multiples vulnérabilités dans le noyau Linux SUSE | 2017-03-01T00:00:00.000000 | 2017-03-01T00:00:00.000000 |