Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-59134 |
8.8 (3.1)
|
WordPress Sale! Immigration law, Visa services support… |
Jthemes |
Sale! Immigration law, Visa services support, Migration Agent Consulting |
2025-12-18T07:21:59.917Z | 2026-01-20T14:28:11.345Z |
| CVE-2025-59132 |
4.3 (3.1)
|
WordPress Duplicate Content Cure plugin <= 1.0 - Cross… |
Badi Jones |
Duplicate Content Cure |
2025-12-09T14:52:18.582Z | 2026-01-20T14:28:11.345Z |
| CVE-2025-59006 |
7.1 (3.1)
|
WordPress Easy Woocommerce Customizer plugin <= 1.0.2 … |
themebon |
Easy Woocommerce Customizer |
2025-10-22T14:32:36.907Z | 2026-01-20T14:28:11.345Z |
| CVE-2025-58996 |
9.1 (3.1)
|
WordPress Advanced Settings Plugin <= 3.1.1 - Arbitrar… |
Helmut Wandl |
Advanced Settings |
2025-11-06T15:54:36.343Z | 2026-01-20T14:28:11.345Z |
| CVE-2025-59137 |
7.1 (3.1)
|
WordPress Behance Portfolio Manager plugin <= 1.7.5 - … |
eLEOPARD |
Behance Portfolio Manager |
2025-12-31T04:33:22.492Z | 2026-01-20T14:28:11.344Z |
| CVE-2025-58999 |
4.3 (3.1)
|
WordPress WP Attractive Donations System - Easy Stripe… |
loopus |
WP Attractive Donations System - Easy Stripe & Paypal donations |
2025-12-16T08:12:46.564Z | 2026-01-20T14:28:11.344Z |
| CVE-2025-58998 |
9.8 (3.1)
|
WordPress s2Member Plugin <= 250701 - PHP Object Injec… |
Cristián Lávaque |
s2Member |
2025-11-06T15:54:37.699Z | 2026-01-20T14:28:11.344Z |
| CVE-2025-59009 |
4.3 (3.1)
|
WordPress Listify theme <= 3.2.5 - Cross Site Request … |
Astoundify |
Listify |
2025-12-16T08:12:46.981Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59007 |
8.1 (3.1)
|
WordPress TF Woo Product Grid Addon For Elementor Plug… |
themesflat |
TF Woo Product Grid Addon For Elementor |
2025-10-22T14:32:37.108Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59004 |
7.1 (3.1)
|
WordPress WC Return products plugin <= 1.5 - Reflected… |
pco_58 |
WC Return products |
2025-10-22T14:32:36.724Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59135 |
5.9 (3.1)
|
WordPress Behance Portfolio Manager plugin <= 1.7.5 - … |
eLEOPARD |
Behance Portfolio Manager |
2025-12-31T17:20:09.618Z | 2026-01-20T14:28:11.342Z |
| CVE-2025-59130 |
4.3 (3.1)
|
WordPress Appointify plugin <= 1.0.8 - Cross Site Requ… |
Appointify |
Appointify |
2025-12-31T16:06:06.815Z | 2026-01-20T14:28:11.342Z |
| CVE-2025-59131 |
7.1 (3.1)
|
WordPress WP-CalDav2ICS plugin <= 1.3.4 - Cross Site R… |
Hoernerfranz |
WP-CalDav2ICS |
2025-12-30T22:55:32.248Z | 2026-01-20T14:28:11.341Z |
| CVE-2025-58986 |
6.5 (3.1)
|
WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Bro… |
ganddser |
Jock On Air Now (JOAN) |
2025-11-06T15:54:30.961Z | 2026-01-20T14:28:11.341Z |
| CVE-2025-59578 |
5.8 (3.1)
|
WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data E… |
wpdesk |
ShopMagic |
2025-10-22T14:32:39.044Z | 2026-01-20T14:28:11.336Z |
| CVE-2025-59579 |
7.5 (3.1)
|
WordPress Simple Job Board plugin <= 2.13.7 - Sensitiv… |
PressTigers |
Simple Job Board |
2025-10-22T14:32:39.279Z | 2026-01-20T14:28:11.320Z |
| CVE-2025-59575 |
5 (3.1)
|
WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive… |
Stylemix |
MasterStudy LMS |
2025-10-22T14:32:38.795Z | 2026-01-20T14:28:11.315Z |
| CVE-2025-59564 |
8.1 (3.1)
|
WordPress EduMall Theme < 4.4.5 - Local File Inclusion… |
ThemeMove |
EduMall |
2025-10-22T14:32:38.200Z | 2026-01-20T14:28:11.299Z |
| CVE-2025-59571 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin < 1.7.06 - Cross Site … |
purethemes |
WorkScout-Core |
2025-10-22T14:32:38.590Z | 2026-01-20T14:28:11.294Z |
| CVE-2025-59566 |
7.6 (3.1)
|
WordPress Workreap (theme's plugin) plugin <= 3.3.5 - … |
AmentoTech |
Workreap (theme's plugin) |
2025-10-22T14:32:38.405Z | 2026-01-20T14:28:11.286Z |
| CVE-2025-59557 |
9.3 (3.1)
|
WordPress Learts Addons Plugin < 1.7.5 - SQL Injection… |
ThemeMove |
Learts Addons |
2025-10-22T14:32:37.757Z | 2026-01-20T14:28:11.268Z |
| CVE-2025-59558 |
8.1 (3.1)
|
WordPress Billey Theme < 2.1.6 - Local File Inclusion … |
ThemeMove |
Billey |
2025-10-22T14:32:37.987Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58949 |
8.1 (3.1)
|
WordPress Spock theme <= 1.17 - Local File Inclusion v… |
axiomthemes |
Spock |
2025-12-18T07:21:59.396Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58961 |
7.1 (3.1)
|
WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cro… |
kamleshyadav |
CF7 Auto Responder Addon |
2025-10-22T14:32:35.382Z | 2026-01-20T14:28:11.176Z |
| CVE-2025-59556 |
7.1 (3.1)
|
WordPress GoStore theme < 1.6.4 - Cross Site Scripting… |
skygroup |
GoStore |
2025-11-06T15:54:38.990Z | 2026-01-20T14:28:11.161Z |
| CVE-2025-59555 |
8.1 (3.1)
|
WordPress Medizin Theme < 1.9.7 - Local File Inclusion… |
ThemeMove |
Medizin |
2025-10-22T14:32:37.531Z | 2026-01-20T14:28:11.126Z |
| CVE-2025-59550 |
8.1 (3.1)
|
WordPress Xcare theme < 6.5 - Local File Inclusion vul… |
designervily |
Xcare |
2025-10-22T14:32:37.298Z | 2026-01-20T14:28:11.108Z |
| CVE-2025-58964 |
7.1 (3.1)
|
WordPress Enzy theme < 1.6.4 - Cross Site Scripting (X… |
skygroup |
Enzy |
2025-11-06T15:54:29.627Z | 2026-01-20T14:28:11.081Z |
| CVE-2025-58955 |
8.1 (3.1)
|
WordPress Karzo theme < 2.6 - Local File Inclusion vul… |
designervily |
Karzo |
2025-10-22T14:32:34.802Z | 2026-01-20T14:28:11.075Z |
| CVE-2025-58963 |
9.8 (3.1)
|
WordPress Medcity theme < 1.1.9 - Arbitrary File Uploa… |
7oroof |
Medcity |
2025-10-22T14:32:35.581Z | 2026-01-20T14:28:11.047Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62061 |
4.3 (3.1)
|
WordPress Product Catalog Simple plugin <= 1.8.4 - Cro… |
impleCode |
Product Catalog Simple |
2025-10-22T14:32:52.854Z | 2026-01-20T14:28:14.011Z |
| CVE-2025-62060 |
6.5 (3.1)
|
WordPress Tab Ultimate plugin <= 1.8 - Cross Site Scri… |
Themepoints |
Tab Ultimate |
2025-10-22T14:32:52.503Z | 2026-01-20T14:28:13.775Z |
| CVE-2025-62059 |
7.1 (3.1)
|
WordPress SureRank plugin <= 1.3.2 - Cross Site Script… |
Brainstorm Force |
SureRank |
2025-11-06T15:55:51.134Z | 2026-01-20T14:28:13.884Z |
| CVE-2025-62058 |
6.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.269Z | 2026-01-20T14:28:13.789Z |
| CVE-2025-62057 |
7.1 (3.1)
|
WordPress Houzez Theme - Functionality plugin < 4.2.0 … |
favethemes |
Houzez Theme - Functionality |
2025-11-06T15:55:50.427Z | 2026-01-20T14:28:13.708Z |
| CVE-2025-62055 |
8.1 (3.1)
|
WordPress Academist theme < 1.3 - Local File Inclusion… |
Elated-Themes |
Academist |
2025-11-06T15:55:49.844Z | 2026-01-20T14:28:13.866Z |
| CVE-2025-62054 |
7.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin <= 4.1.8… |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.067Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62053 |
8 (3.1)
|
WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2026-01-20T14:28:13.854Z |
| CVE-2025-62052 |
4.3 (3.1)
|
WordPress One Page Express Companion plugin <= 1.6.43 … |
Horea Radu |
One Page Express Companion |
2025-10-22T14:32:51.853Z | 2026-01-20T14:28:14.063Z |
| CVE-2025-62051 |
6.5 (3.1)
|
WordPress UDesign Core plugin <= 4.14.1 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-11-06T15:55:47.211Z | 2026-01-20T14:28:13.625Z |
| CVE-2025-62049 |
6.5 (3.1)
|
WordPress Cost Calculator Builder plugin <= 3.5.32 - B… |
Stylemix |
Cost Calculator Builder |
2025-11-06T15:55:44.281Z | 2026-01-20T14:28:14.242Z |
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62047 |
9.9 (3.1)
|
WordPress Case Addons plugin < 1.3.0 - Arbitrary File … |
Case-Themes |
Case Addons |
2025-11-06T15:55:43.609Z | 2026-01-20T14:28:13.952Z |
| CVE-2025-62046 |
6.5 (3.1)
|
WordPress TheGem Demo Import (for WPBakery) plugin <= … |
CodexThemes |
TheGem Demo Import (for WPBakery) |
2025-11-06T15:55:42.909Z | 2026-01-20T14:28:13.538Z |
| CVE-2025-62045 |
8.1 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:41.551Z | 2026-01-20T14:28:13.819Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62042 |
6.5 (3.1)
|
WordPress Event post plugin <= 5.10.3 - Cross Site Scr… |
Bastien Ho |
Event post |
2025-10-22T14:32:51.413Z | 2026-01-20T14:28:13.802Z |
| CVE-2025-62041 |
7.1 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:38.770Z | 2026-01-20T14:28:13.398Z |
| CVE-2025-62040 |
7.1 (3.1)
|
WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scrip… |
YOP |
YOP Poll |
2025-11-06T15:55:38.092Z | 2026-01-20T14:28:13.427Z |
| CVE-2025-62039 |
7.5 (3.1)
|
WordPress AI ChatBot with ChatGPT and Content Generato… |
Ays Pro |
AI ChatBot with ChatGPT and Content Generator by AYS |
2025-11-06T15:55:37.380Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62038 |
6.5 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Sensitive Data… |
Sovlix |
MeetingHub |
2025-11-06T15:55:36.094Z | 2026-01-20T14:28:13.390Z |
| CVE-2025-62037 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:34.720Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62036 |
7.1 (3.1)
|
WordPress Togo theme < 1.0.4 - Cross Site Scripting (X… |
uxper |
Togo |
2025-11-06T15:55:32.766Z | 2026-01-20T14:28:13.319Z |
| CVE-2025-62035 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - PHP Object Injection vu… |
uxper |
Togo |
2025-11-06T15:55:31.398Z | 2026-01-20T14:28:13.288Z |
| CVE-2025-62034 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - Privilege Escalation vu… |
uxper |
Togo |
2025-11-06T15:55:30.572Z | 2026-01-20T14:28:13.109Z |
| CVE-2025-62033 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:29.843Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62032 |
6.5 (3.1)
|
WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross … |
tagDiv |
tagDiv Cloud Library |
2025-11-06T15:55:29.230Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62031 |
7.1 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:28.516Z | 2026-01-20T14:28:13.050Z |
| CVE-2025-62030 |
6.5 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:27.866Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62029 |
8.1 (3.1)
|
WordPress Grevo theme <= 2.4 - Local File Inclusion vu… |
themesion |
Grevo |
2025-10-22T14:32:51.220Z | 2026-01-20T14:28:13.045Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62059 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:12.177 | 2026-01-20T15:17:45.093 |
| fkie_cve-2025-62058 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:04.930 | 2026-01-20T15:17:44.967 |
| fkie_cve-2025-62057 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:12.030 | 2026-01-20T15:17:44.817 |
| fkie_cve-2025-62055 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:11.880 | 2026-01-20T15:17:44.677 |
| fkie_cve-2025-62054 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-22T15:16:04.790 | 2026-01-20T15:17:44.540 |
| fkie_cve-2025-62053 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:11.733 | 2026-01-20T15:17:44.410 |
| fkie_cve-2025-62052 | Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-compa… | 2025-10-22T15:16:04.667 | 2026-01-20T15:17:44.280 |
| fkie_cve-2025-62051 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:11.587 | 2026-01-20T15:17:44.157 |
| fkie_cve-2025-62049 | Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.Thi… | 2025-11-06T16:16:11.440 | 2026-01-20T15:17:44.023 |
| fkie_cve-2025-62048 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl sma… | 2025-10-22T15:16:04.533 | 2026-01-20T15:17:43.900 |
| fkie_cve-2025-62047 | Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addon… | 2025-11-06T16:16:11.303 | 2026-01-20T15:17:43.777 |
| fkie_cve-2025-62046 | Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importe… | 2025-11-06T16:16:11.123 | 2026-01-20T15:17:43.650 |
| fkie_cve-2025-62045 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:10.980 | 2026-01-20T15:17:43.513 |
| fkie_cve-2025-62044 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.837 | 2026-01-20T15:17:43.380 |
| fkie_cve-2025-62042 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:04.410 | 2026-01-20T15:17:43.247 |
| fkie_cve-2025-62041 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.690 | 2026-01-20T15:17:43.113 |
| fkie_cve-2025-62040 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.543 | 2026-01-20T15:17:42.980 |
| fkie_cve-2025-62039 | Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT … | 2025-11-06T16:16:10.387 | 2026-01-20T15:17:42.850 |
| fkie_cve-2025-62038 | Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub all… | 2025-11-06T16:16:10.230 | 2026-01-20T15:17:42.710 |
| fkie_cve-2025-62037 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T16:16:10.070 | 2026-01-20T15:17:42.573 |
| fkie_cve-2025-62036 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.920 | 2026-01-20T15:17:42.427 |
| fkie_cve-2025-62035 | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/… | 2025-11-06T16:16:09.780 | 2026-01-20T15:17:42.293 |
| fkie_cve-2025-62034 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a t… | 2025-11-06T16:16:09.613 | 2026-01-20T15:17:42.153 |
| fkie_cve-2025-62033 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T16:16:09.470 | 2026-01-20T15:17:42.010 |
| fkie_cve-2025-62032 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.303 | 2026-01-20T15:17:41.873 |
| fkie_cve-2025-62031 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.160 | 2026-01-20T15:17:41.740 |
| fkie_cve-2025-62030 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.007 | 2026-01-20T15:17:41.590 |
| fkie_cve-2025-62029 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-22T15:16:04.287 | 2026-01-20T15:17:41.433 |
| fkie_cve-2025-62028 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from… | 2025-11-06T16:16:08.857 | 2026-01-20T15:17:41.293 |
| fkie_cve-2025-62027 | Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Eve… | 2025-10-22T15:16:04.160 | 2026-01-20T15:17:41.163 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6ffq-xrg2-pp92 |
8.1 (3.1)
|
Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Acce… | 2026-01-13T15:37:04Z | 2026-01-13T15:37:04Z |
| ghsa-whj7-f2cg-8pv5 |
9.8 (3.1)
|
Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4… | 2026-01-13T00:30:45Z | 2026-01-13T15:37:03Z |
| ghsa-9v6r-6rm8-hx38 |
9.1 (3.1)
|
There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solut… | 2026-01-08T18:30:49Z | 2026-01-13T15:36:48Z |
| ghsa-rqhc-7mvg-jchq |
5.4 (3.1)
|
Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n… | 2024-03-25T06:30:24Z | 2026-01-13T15:36:47Z |
| ghsa-3wjc-g785-xjp8 |
4.3 (3.1)
|
Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n… | 2024-03-25T06:30:24Z | 2026-01-13T15:36:47Z |
| ghsa-h3h4-5vcv-376h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2024-03-15T15:30:43Z | 2026-01-13T15:36:46Z |
| ghsa-524m-q5m7-79mm |
6.5 (3.1)
|
Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails | 2026-01-13T15:11:42Z | 2026-01-13T15:11:42Z |
| ghsa-3fm2-xfq7-7778 |
8.0 (3.1)
|
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover | 2026-01-13T15:07:57Z | 2026-01-13T15:09:35Z |
| ghsa-v4pr-fm98-w9pg |
10.0 (3.1)
|
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling | 2026-01-07T19:20:19Z | 2026-01-13T15:04:59Z |
| ghsa-j9xq-69pf-pcm8 |
7.5 (3.1)
|
RustCrypto Has Insufficient Length Validation in decrypt() in SM2-PKE | 2026-01-13T15:02:23Z | 2026-01-13T15:02:23Z |
| ghsa-whqx-f9j3-ch6m |
5.5 (3.1)
|
Cosign verification accepts any valid Rekor entry under certain conditions | 2026-01-13T14:58:50Z | 2026-01-13T14:58:50Z |
| ghsa-mw8h-g64c-rxv4 |
6.5 (3.1)
|
Shiori is vulnerable to authentication bypass via a brute force attack | 2026-01-09T21:31:35Z | 2026-01-13T14:58:03Z |
| ghsa-vqmm-3555-wq2q |
7.5 (3.1)
8.7 (4.0)
|
A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versi… | 2026-01-13T12:31:13Z | 2026-01-13T12:31:13Z |
| ghsa-crjh-4642-9w67 |
5.4 (3.1)
|
The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due t… | 2026-01-13T12:31:13Z | 2026-01-13T12:31:13Z |
| ghsa-c835-vvh2-8x99 |
8.8 (3.1)
7.3 (4.0)
|
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4). Affected… | 2026-01-13T12:31:13Z | 2026-01-13T12:31:13Z |
| ghsa-8gqp-3rhh-936h |
10.0 (3.1)
10.0 (4.0)
|
Affected devices do not properly enforce user authentication on specific API endpoints. This could … | 2026-01-13T12:31:13Z | 2026-01-13T12:31:13Z |
| ghsa-w8gc-rcgw-q936 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-vhvh-c33p-2mp6 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-v5w9-33w2-wjhw |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-mmw4-q64g-3rmp |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-mjh7-pwhq-4xmq |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-jvgj-f52w-5954 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-63c2-8vw7-vgc9 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-4pr8-x7pm-8gw8 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-3p9g-66p4-wgx6 |
|
Rejected reason: Not used | 2026-01-13T06:30:19Z | 2026-01-13T06:30:19Z |
| ghsa-xmmh-wmh6-hp5h |
6.1 (3.1)
|
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated att… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-x6hw-xmff-xh6q |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-w8gf-92gc-cx36 |
4.7 (3.1)
|
Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM … | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-mg77-v38f-9pm9 |
8.1 (3.1)
|
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-jm7g-m582-79q7 |
3.8 (3.1)
|
Due to insufficient input handling, the SAP Identity Management REST interface allows an authentica… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2023-52601 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index… | 2024-03-03T06:01:51.800830Z |
| gsd-2023-52569 | In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUG() … | 2024-03-03T06:01:51.799531Z |
| gsd-2023-52574 | In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-d… | 2024-03-03T06:01:51.789649Z |
| gsd-2023-52573 | In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possib… | 2024-03-03T06:01:51.775621Z |
| gsd-2023-52579 | In the Linux kernel, the following vulnerability has been resolved: ipv4: fix null-deref… | 2024-03-03T06:01:51.770563Z |
| gsd-2023-52575 | In the Linux kernel, the following vulnerability has been resolved: x86/srso: Fix SBPB e… | 2024-03-03T06:01:51.767985Z |
| gsd-2023-52570 | In the Linux kernel, the following vulnerability has been resolved: vfio/mdev: Fix a nul… | 2024-03-03T06:01:51.765558Z |
| gsd-2023-52562 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix … | 2024-03-03T06:01:51.764027Z |
| gsd-2023-52581 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables… | 2024-03-03T06:01:51.752552Z |
| gsd-2023-52561 | In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sd… | 2024-03-03T06:01:51.747034Z |
| gsd-2023-52594 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix pot… | 2024-03-03T06:01:51.739974Z |
| gsd-2023-52582 | In the Linux kernel, the following vulnerability has been resolved: netfs: Only call fol… | 2024-03-03T06:01:51.732889Z |
| gsd-2023-52606 | In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validat… | 2024-03-03T06:01:51.731440Z |
| gsd-2023-52591 | In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touc… | 2024-03-03T06:01:51.723209Z |
| gsd-2023-52559 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid me… | 2024-03-03T06:01:51.714019Z |
| gsd-2023-52607 | In the Linux kernel, the following vulnerability has been resolved: powerpc/mm: Fix null… | 2024-03-03T06:01:51.686790Z |
| gsd-2023-52567 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: C… | 2024-03-03T06:01:51.686046Z |
| gsd-2023-52602 | In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of… | 2024-03-03T06:01:51.685015Z |
| gsd-2023-52580 | In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_… | 2024-03-03T06:01:51.675018Z |
| gsd-2023-52568 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SE… | 2024-03-03T06:01:51.670884Z |
| gsd-2023-52577 | In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_er… | 2024-03-03T06:01:51.665623Z |
| gsd-2023-52597 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setti… | 2024-03-03T06:01:51.647161Z |
| gsd-2023-52560 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr-test:… | 2024-03-03T06:01:51.636669Z |
| gsd-2023-52593 | In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possi… | 2024-03-03T06:01:51.621367Z |
| gsd-2023-52578 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV… | 2024-03-03T06:01:51.604497Z |
| gsd-2023-52588 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gci… | 2024-03-03T06:01:51.592231Z |
| gsd-2023-52589 | In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix I… | 2024-03-03T06:01:51.588073Z |
| gsd-2023-52576 | In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: … | 2024-03-03T06:01:51.581065Z |
| gsd-2023-52586 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add mut… | 2024-03-03T06:01:51.577780Z |
| gsd-2023-52565 | In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix… | 2024-03-03T06:01:51.575834Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-187406 | Malicious code in hydrogeology-hydra-phoenix-fornax (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187405 | Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187404 | Malicious code in hydra-regulus-wavefunction-spectron (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187403 | Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187402 | Malicious code in hydra-markdown-pdf-resolvers-postcss (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187401 | Malicious code in hydra-lepton-interstellarmedium-entanglement (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187400 | Malicious code in hydra-hermes-ichnology-ariel (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187399 | Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187398 | Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187397 | Malicious code in hydra-duplex-npm-ophiuchus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187396 | Malicious code in hydra-cryovolcano-darkmatter-quasarjet (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187395 | Malicious code in husky-helios-wezen-nextjs (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187394 | Malicious code in husky-glaciology-weywot-rest (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187393 | Malicious code in husky-eridanus-quasar-geckodriver (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187392 | Malicious code in husky-despina-readable-oscillation (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187391 | Malicious code in husky-bulma-nebula-concurrently (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187390 | Malicious code in husky-build-toml-troposphere (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187389 | Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187388 | Malicious code in hugo-unuk-leda-altair (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187387 | Malicious code in hugo-plutology-comet-cluster (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187386 | Malicious code in hugo-nashira-boson-passport (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187385 | Malicious code in hugo-miranda-prettier-stylelint-xenon (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187384 | Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187383 | Malicious code in hugo-capella-janus-nucleosynthesis (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187382 | Malicious code in hugo-build-configstore-rollup-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187381 | Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187380 | Malicious code in html-webpack-plugin-wavefunction-local-ora (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187379 | Malicious code in html-webpack-plugin-version-vulcan-rollup (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187378 | Malicious code in html-webpack-plugin-vega-atlas-fetch (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187377 | Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-0302 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2023-02-07T23:00:00.000+00:00 | 2023-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0278 | Microsoft Edge: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-02-02T23:00:00.000+00:00 | 2023-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-1237 | binutils: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-08-30T22:00:00.000+00:00 | 2023-10-01T22:00:00.000+00:00 |
| wid-sec-w-2022-0772 | ClamAV: Schwachstelle ermöglicht Denial of Service | 2022-01-13T23:00:00.000+00:00 | 2023-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-2520 | GitLab: Mehrere Schwachstellen | 2023-09-28T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2519 | Red Hat Pacemaker: Mehrere Schwachstellen | 2019-05-27T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2517 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2023-09-28T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2511 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2018-11-06T23:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2423 | OPNsense: Schwachstelle ermöglicht Cross-Site Scripting | 2023-09-21T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2356 | IBM QRadar SIEM: Mehre Schwachstellen | 2023-09-14T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2092 | Juniper JUNOS: Mehrere Schwachstellen ermöglichen Codeausführung | 2023-08-17T22:00:00.000+00:00 | 2023-09-28T22:00:00.000+00:00 |
| wid-sec-w-2023-2509 | Cisco IOS XE: Mehrere Schwachstellen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2508 | F5 BIG-IP: Mehrere Schwachstellen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2504 | Cisco Aironet Access Point: Schwachstelle ermöglicht Denial of Service | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2501 | Cisco Digital Network Architecture Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2499 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2496 | Avast Premium Security: Mehrere Schwachstellen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2494 | Dell NetWorker: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2493 | Cisco Catalyst: Schwachstelle ermöglicht Denial of Service | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2492 | Cisco Wireless LAN Controllers: Schwachstelle ermöglicht Denial of Service | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2491 | Acronis Cyber Protect: Mehrere Schwachstellen | 2023-09-27T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2488 | Nginx: Schwachstelle ermöglicht Privilegieneskalation | 2016-11-16T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2487 | LibreOffice und OpenOffice: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2019-02-03T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2485 | LibreOffice: Mehrere Schwachstellen | 2019-07-16T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2484 | LibreOffice: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten | 2019-08-15T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2483 | LibreOffice: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten | 2019-09-08T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2480 | Apache Tomcat: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2020-02-20T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2475 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2020-04-02T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2474 | Squid: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode | 2020-04-22T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2471 | Apache Traffic Server: Schwachstelle ermöglicht Denial of Service | 2020-06-24T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1496 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:18:33+00:00 | 2026-01-04T12:08:39+00:00 |
| rhsa-2024:1495 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:10:08+00:00 | 2026-01-04T12:08:39+00:00 |
| rhsa-2024:1498 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:14:38+00:00 | 2026-01-04T12:08:38+00:00 |
| rhsa-2024:1486 | Red Hat Security Advisory: firefox security update | 2024-03-25T20:29:41+00:00 | 2026-01-04T12:08:37+00:00 |
| rhsa-2024:1494 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:13:33+00:00 | 2026-01-04T12:08:36+00:00 |
| rhsa-2024:1493 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:11:28+00:00 | 2026-01-04T12:08:36+00:00 |
| rhsa-2024:1484 | Red Hat Security Advisory: firefox security update | 2024-03-25T19:35:23+00:00 | 2026-01-04T12:08:35+00:00 |
| rhsa-2024:1483 | Red Hat Security Advisory: firefox security update | 2024-03-25T18:54:13+00:00 | 2026-01-04T12:08:34+00:00 |
| rhsa-2024:1492 | Red Hat Security Advisory: thunderbird security update | 2024-03-25T20:11:53+00:00 | 2026-01-04T12:08:33+00:00 |
| rhsa-2024:0108 | Red Hat Security Advisory: nss security update | 2024-01-10T08:40:02+00:00 | 2026-01-04T12:05:54+00:00 |
| rhsa-2024:0107 | Red Hat Security Advisory: nss security update | 2024-01-10T08:26:07+00:00 | 2026-01-04T12:05:53+00:00 |
| rhsa-2024:0106 | Red Hat Security Advisory: nss security update | 2024-01-10T08:25:59+00:00 | 2026-01-04T12:05:52+00:00 |
| rhsa-2024:0093 | Red Hat Security Advisory: nss security update | 2024-01-09T15:00:38+00:00 | 2026-01-04T12:05:52+00:00 |
| rhsa-2024:0105 | Red Hat Security Advisory: nss security update | 2024-01-10T08:26:57+00:00 | 2026-01-04T12:05:51+00:00 |
| rhsa-2025:15643 | Red Hat Security Advisory: Satellite 6.15.5.4 Async Update | 2025-09-10T15:05:57+00:00 | 2026-01-03T11:37:44+00:00 |
| rhsa-2025:7625 | Red Hat Security Advisory: Red Hat AMQ Broker 7.13.0 release and security update | 2025-05-14T17:51:15+00:00 | 2026-01-03T11:37:22+00:00 |
| rhsa-2025:7497 | Red Hat Security Advisory: tomcat security update | 2025-05-13T16:02:30+00:00 | 2026-01-03T11:37:20+00:00 |
| rhsa-2025:7494 | Red Hat Security Advisory: tomcat9 security update | 2025-05-13T16:02:04+00:00 | 2026-01-03T11:37:20+00:00 |
| rhsa-2025:3683 | Red Hat Security Advisory: tomcat security update | 2025-04-08T12:03:24+00:00 | 2026-01-03T11:37:20+00:00 |
| rhsa-2025:3646 | Red Hat Security Advisory: tomcat security update | 2025-04-07T17:36:37+00:00 | 2026-01-03T11:37:20+00:00 |
| rhsa-2025:3684 | Red Hat Security Advisory: tomcat security update | 2025-04-08T12:26:39+00:00 | 2026-01-03T11:37:19+00:00 |
| rhsa-2025:3647 | Red Hat Security Advisory: tomcat security update | 2025-04-07T17:37:12+00:00 | 2026-01-03T11:37:19+00:00 |
| rhsa-2025:3645 | Red Hat Security Advisory: tomcat security update | 2025-04-07T17:36:37+00:00 | 2026-01-03T11:37:18+00:00 |
| rhsa-2025:3541 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 update is now available (RHBQ 3.15.4.GA) | 2025-04-02T16:48:42+00:00 | 2026-01-03T11:37:18+00:00 |
| rhsa-2025:3454 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.3 release and security update | 2025-04-02T17:33:02+00:00 | 2026-01-03T11:37:18+00:00 |
| rhsa-2025:3455 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.3 release and security update | 2025-04-02T17:30:32+00:00 | 2026-01-03T11:37:17+00:00 |
| rhsa-2025:2222 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update | 2025-03-04T14:20:47+00:00 | 2026-01-03T11:37:12+00:00 |
| rhsa-2025:2221 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update | 2025-03-04T14:39:57+00:00 | 2026-01-03T11:37:12+00:00 |
| rhsa-2025:2220 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update | 2025-03-04T14:39:42+00:00 | 2026-01-03T11:37:10+00:00 |
| rhsa-2025:2219 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 Openshift Jenkins security update | 2025-03-04T14:19:22+00:00 | 2026-01-03T11:37:10+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-36021 | Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-14T08:00:00.000Z |
| msrc_cve-2023-36017 | Windows Scripting Engine Memory Corruption Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-14T08:00:00.000Z |
| msrc_cve-2023-36016 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-14T08:00:00.000Z |
| msrc_cve-2023-36007 | Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-14T08:00:00.000Z |
| msrc_cve-2023-1194 | Use-after-free in parse_lease_state() | 2023-11-01T07:00:00.000Z | 2023-11-14T00:00:00.000Z |
| msrc_cve-2023-36027 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-10T08:00:00.000Z |
| msrc_cve-2023-5178 | Kernel: use after free in nvmet_tcp_free_crypto in nvme | 2023-11-01T07:00:00.000Z | 2023-11-10T00:00:00.000Z |
| msrc_cve-2023-1193 | Use-after-free in setup_async_work() | 2023-11-01T07:00:00.000Z | 2023-11-10T00:00:00.000Z |
| msrc_cve-2023-1192 | Use-after-free in smb2_is_status_io_timeout() | 2023-11-01T07:00:00.000Z | 2023-11-10T00:00:00.000Z |
| msrc_cve-2023-36024 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-09T08:00:00.000Z |
| msrc_cve-2023-36014 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-09T08:00:00.000Z |
| msrc_cve-2022-44687 | Raw Image Extension Remote Code Execution Vulnerability | 2022-12-13T08:00:00.000Z | 2023-11-09T08:00:00.000Z |
| msrc_cve-2023-36436 | Windows MSHTML Platform Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-11-08T08:00:00.000Z |
| msrc_cve-2023-5717 | Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component | 2023-10-01T00:00:00.000Z | 2023-11-08T00:00:00.000Z |
| msrc_cve-2023-46862 | An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur. | 2023-10-01T00:00:00.000Z | 2023-11-08T00:00:00.000Z |
| msrc_cve-2022-28948 | An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input. | 2022-05-02T00:00:00.000Z | 2023-11-08T00:00:00.000Z |
| msrc_cve-2022-27664 | In net/http in Go before 1.18.6 and 1.19.x before 1.19.1 attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error. | 2022-09-02T00:00:00.000Z | 2023-11-08T00:00:00.000Z |
| msrc_cve-2022-25891 | Denial of Service (DoS) | 2022-07-02T00:00:00.000Z | 2023-11-08T00:00:00.000Z |
| msrc_cve-2020-1747 | A vulnerability was discovered in the PyYAML library in versions before 5.3.1 where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor. | 2020-03-02T00:00:00.000Z | 2023-11-07T00:00:00.000Z |
| msrc_cve-2020-14343 | A vulnerability was discovered in the PyYAML library in versions before 5.4 where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. | 2021-02-02T00:00:00.000Z | 2023-11-07T00:00:00.000Z |
| msrc_cve-2023-36907 | Windows Cryptographic Services Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-11-06T08:00:00.000Z |
| msrc_cve-2023-36906 | Windows Cryptographic Services Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-11-06T08:00:00.000Z |
| msrc_cve-2023-36698 | Windows Kernel Security Feature Bypass Vulnerability | 2023-10-10T07:00:00.000Z | 2023-11-06T08:00:00.000Z |
| msrc_cve-2023-36596 | Remote Procedure Call Information Disclosure Vulnerability | 2023-10-10T07:00:00.000Z | 2023-11-06T08:00:00.000Z |
| msrc_cve-2023-36559 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2023-10-10T07:00:00.000Z | 2023-11-03T07:00:00.000Z |
| msrc_cve-2023-5633 | Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling | 2023-10-01T00:00:00.000Z | 2023-11-03T00:00:00.000Z |
| msrc_cve-2023-36788 | .NET Framework Remote Code Execution Vulnerability | 2023-09-12T07:00:00.000Z | 2023-11-02T07:00:00.000Z |
| msrc_cve-2023-36034 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-02T07:00:00.000Z |
| msrc_cve-2023-36029 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-02T07:00:00.000Z |
| msrc_cve-2023-36022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2023-11-14T08:00:00.000Z | 2023-11-02T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201710-0800 | An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Contr… | 2025-04-20T23:15:53.194000Z |
| var-201710-0799 | An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller… | 2025-04-20T23:15:53.155000Z |
| var-201710-0949 | SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1Y… | 2025-04-20T23:15:53.054000Z |
| var-201710-0948 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow a… | 2025-04-20T23:15:53.016000Z |
| var-201710-0947 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow a… | 2025-04-20T23:15:52.980000Z |
| var-201710-1117 | A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prio… | 2025-04-20T23:15:52.813000Z |
| var-201710-1284 | Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL… | 2025-04-20T23:15:52.690000Z |
| var-201710-1347 | An issue was discovered in certain Apple products. The Apple Support app before 1.2 for i… | 2025-04-20T23:15:52.627000Z |
| var-201711-0049 | An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone … | 2025-04-20T23:15:52.521000Z |
| var-201711-0218 | Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can by… | 2025-04-20T23:15:51.910000Z |
| var-201711-0239 | The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerabi… | 2025-04-20T23:15:51.885000Z |
| var-201711-0260 | The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no … | 2025-04-20T23:15:51.855000Z |
| var-201711-0262 | The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier… | 2025-04-20T23:15:51.826000Z |
| var-201711-0304 | A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Manag… | 2025-04-20T23:15:51.796000Z |
| var-201711-0325 | A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, l… | 2025-04-20T23:15:51.761000Z |
| var-201711-0346 | A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an … | 2025-04-20T23:15:51.726000Z |
| var-201711-0367 | A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated,… | 2025-04-20T23:15:51.688000Z |
| var-201711-0754 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions pri… | 2025-04-20T23:15:51.560000Z |
| var-201711-0409 | A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior … | 2025-04-20T23:15:51.514000Z |
| var-201711-0931 | FusionSphere OpenStack with software V100R006C00SPC102(NFV) and V100R006C10 have an infor… | 2025-04-20T23:15:50.626000Z |
| var-201711-0952 | FusionSphere OpenStack V100R006C00SPC102(NFV)has a week cryptographic algorithm vulnerabi… | 2025-04-20T23:15:50.597000Z |
| var-201711-0973 | The FusionSphere OpenStack with software V100R006C00 and V100R006C10 has a command inject… | 2025-04-20T23:15:50.568000Z |
| var-201711-0994 | OceanStor 5800 V3 with software V300R002C00 and V300R002C10, OceanStor 6900 V3 V300R001C0… | 2025-04-20T23:15:50.539000Z |
| var-201711-1015 | MAX PRESENCE V100R001C00, TP3106 V100R002C00, TP3206 V100R002C00 have an out-of-bounds re… | 2025-04-20T23:15:50.509000Z |
| var-201711-1057 | Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allo… | 2025-04-20T23:15:50.457000Z |
| var-201712-0081 | The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) … | 2025-04-20T23:15:50.295000Z |
| var-201712-0186 | The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware v… | 2025-04-20T23:15:50.172000Z |
| var-201712-0671 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websa… | 2025-04-20T23:15:49.411000Z |
| var-201712-0797 | Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to t… | 2025-04-20T23:15:49.337000Z |
| var-201712-0881 | A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2… | 2025-04-20T23:15:49.289000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:4625-1 | Security update for ca-certificates-mozilla | 2022-12-27T08:47:55Z | 2022-12-27T08:47:55Z |
| suse-su-2022:4622-1 | Security update for freeradius-server | 2022-12-27T07:05:34Z | 2022-12-27T07:05:34Z |
| suse-su-2022:4621-1 | Security update for freeradius-server | 2022-12-27T07:04:35Z | 2022-12-27T07:04:35Z |
| suse-su-2022:4620-1 | Security update for freeradius-server | 2022-12-27T07:04:14Z | 2022-12-27T07:04:14Z |
| suse-su-2022:4619-1 | Security update for vim | 2022-12-27T04:16:45Z | 2022-12-27T04:16:45Z |
| suse-su-2022:4617-1 | Security update for the Linux Kernel | 2022-12-23T10:39:17Z | 2022-12-23T10:39:17Z |
| suse-su-2022:4616-1 | Security update for the Linux Kernel | 2022-12-23T09:56:07Z | 2022-12-23T09:56:07Z |
| suse-su-2022:4615-1 | Security update for the Linux Kernel | 2022-12-23T09:44:36Z | 2022-12-23T09:44:36Z |
| suse-su-2022:4614-1 | Security update for the Linux Kernel | 2022-12-23T09:43:37Z | 2022-12-23T09:43:37Z |
| suse-su-2022:4613-1 | Security update for the Linux Kernel | 2022-12-23T09:42:58Z | 2022-12-23T09:42:58Z |
| suse-su-2022:4611-1 | Security update for the Linux Kernel | 2022-12-23T08:35:56Z | 2022-12-23T08:35:56Z |
| suse-su-2022:4607-1 | Security update for conmon | 2022-12-22T08:52:49Z | 2022-12-22T08:52:49Z |
| suse-su-2022:4606-1 | Security update for helm | 2022-12-22T08:32:17Z | 2022-12-22T08:32:17Z |
| suse-su-2022:4603-1 | Security update for sqlite3 | 2022-12-21T12:49:53Z | 2022-12-21T12:49:53Z |
| suse-su-2022:4602-1 | Security update for java-1_8_0-ibm | 2022-12-21T12:49:12Z | 2022-12-21T12:49:12Z |
| suse-su-2022:4598-1 | Security update for curl | 2022-12-21T09:13:41Z | 2022-12-21T09:13:41Z |
| suse-su-2022:4597-1 | Security update for curl | 2022-12-21T09:13:17Z | 2022-12-21T09:13:17Z |
| suse-su-2022:4595-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4) | 2022-12-20T16:06:11Z | 2022-12-20T16:06:11Z |
| suse-su-2022:4594-1 | Security update for supportutils | 2022-12-20T15:59:31Z | 2022-12-20T15:59:31Z |
| suse-su-2022:4593-1 | Security update for cni-plugins | 2022-12-20T15:55:47Z | 2022-12-20T15:55:47Z |
| suse-su-2022:4592-1 | Security update for cni | 2022-12-20T15:52:04Z | 2022-12-20T15:52:04Z |
| suse-su-2022:4591-1 | Security update for java-1_7_1-ibm | 2022-12-20T14:29:25Z | 2022-12-20T14:29:25Z |
| suse-su-2022:4589-1 | Security update for the Linux Kernel | 2022-12-20T12:46:34Z | 2022-12-20T12:46:34Z |
| suse-su-2022:4587-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2) | 2022-12-20T12:34:02Z | 2022-12-20T12:34:02Z |
| suse-su-2022:4586-1 | Security update for openssl-3 | 2022-12-20T12:32:21Z | 2022-12-20T12:32:21Z |
| suse-su-2022:4585-1 | Security update for the Linux Kernel | 2022-12-20T11:52:38Z | 2022-12-20T11:52:38Z |
| suse-su-2022:4580-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2) | 2022-12-20T09:04:52Z | 2022-12-20T09:04:52Z |
| suse-su-2022:4579-1 | Security update for MozillaThunderbird | 2022-12-20T07:33:14Z | 2022-12-20T07:33:14Z |
| suse-su-2022:4577-1 | Security update for the Linux Kernel (Live Patch 31 for SLE 15) | 2022-12-19T19:05:42Z | 2022-12-19T19:05:42Z |
| suse-su-2022:4550-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15) | 2022-12-19T17:05:39Z | 2022-12-19T17:05:39Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2020:1208-1 | Security update for firejail | 2020-08-14T16:20:51Z | 2020-08-14T16:20:51Z |
| opensuse-su-2020:1207-1 | Security update for balsa | 2020-08-14T16:20:43Z | 2020-08-14T16:20:43Z |
| opensuse-su-2020:1206-1 | Security update for chromium | 2020-08-14T15:29:45Z | 2020-08-14T15:29:45Z |
| opensuse-su-2020:1205-1 | Security update for MozillaThunderbird | 2020-08-14T15:29:10Z | 2020-08-14T15:29:10Z |
| opensuse-su-2020:1204-1 | Security update for perl-XML-Twig | 2020-08-14T15:28:57Z | 2020-08-14T15:28:57Z |
| opensuse-su-2020:1200-1 | Security update for xrdp | 2020-08-14T15:28:29Z | 2020-08-14T15:28:29Z |
| opensuse-su-2020:1199-1 | Security update for wireshark | 2020-08-14T15:28:24Z | 2020-08-14T15:28:24Z |
| opensuse-su-2020:1198-1 | Security update for libX11 | 2020-08-14T08:15:59Z | 2020-08-14T08:15:59Z |
| opensuse-su-2020:1196-1 | Security update for xen | 2020-08-13T08:33:25Z | 2020-08-13T08:33:25Z |
| opensuse-su-2020:1194-1 | Security update for go1.13 | 2020-08-12T12:23:01Z | 2020-08-12T12:23:01Z |
| opensuse-su-2020:1192-1 | Security update for claws-mail | 2020-08-12T10:24:31Z | 2020-08-12T10:24:31Z |
| opensuse-su-2020:1191-1 | Security update for java-11-openjdk | 2020-08-12T10:24:14Z | 2020-08-12T10:24:14Z |
| opensuse-su-2020:1190-1 | Security update for xen | 2020-08-12T10:23:43Z | 2020-08-12T10:23:43Z |
| opensuse-su-2020:1189-1 | Security update for MozillaFirefox | 2020-08-12T10:23:21Z | 2020-08-12T10:23:21Z |
| opensuse-su-2020:1188-1 | Security update for wireshark | 2020-08-12T10:21:52Z | 2020-08-12T10:21:52Z |
| opensuse-su-2020:1183-2 | Security update for ark | 2020-08-12T08:29:36Z | 2020-08-12T08:29:36Z |
| opensuse-su-2020:1183-1 | Security update for ark | 2020-08-12T08:29:36Z | 2020-08-12T08:29:36Z |
| opensuse-su-2020:1182-1 | Security update for libX11 | 2020-08-12T08:22:33Z | 2020-08-12T08:22:33Z |
| opensuse-su-2020:1181-1 | Security update of chromium | 2020-08-12T04:19:41Z | 2020-08-12T04:19:41Z |
| opensuse-su-2020:1179-1 | Security update for MozillaThunderbird | 2020-08-11T04:19:38Z | 2020-08-11T04:19:38Z |
| opensuse-su-2020:1178-1 | Security update for go1.13 | 2020-08-10T18:20:07Z | 2020-08-10T18:20:07Z |
| opensuse-su-2020:1177-1 | Security update for perl-XML-Twig | 2020-08-10T16:20:28Z | 2020-08-10T16:20:28Z |
| opensuse-su-2020:1175-1 | Security update for java-11-openjdk | 2020-08-09T18:15:29Z | 2020-08-09T18:15:29Z |
| opensuse-su-2020:1172-1 | Security update for opera | 2020-08-08T22:15:35Z | 2020-08-08T22:15:35Z |
| opensuse-su-2020:1169-1 | Security update for grub2 | 2020-08-08T12:16:27Z | 2020-08-08T12:16:27Z |
| opensuse-su-2020:1168-1 | Security update for grub2 | 2020-08-08T12:16:19Z | 2020-08-08T12:16:19Z |
| opensuse-su-2020:1164-1 | Security update for libX11 | 2020-08-08T04:16:08Z | 2020-08-08T04:16:08Z |
| opensuse-su-2020:1162-1 | Security update for libX11 | 2020-08-07T18:15:57Z | 2020-08-07T18:15:57Z |
| opensuse-su-2020:1161-1 | Security update of chromium | 2020-08-07T12:33:03Z | 2020-08-07T12:33:03Z |
| opensuse-su-2020:1156-1 | Security update for python-rtslib-fb | 2020-08-07T04:16:52Z | 2020-08-07T04:16:52Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-11222 | Nextcloud授权问题漏洞（CNVD-2025-11222） | 2024-11-21 | 2025-05-30 |
| cnvd-2025-11221 | Nextcloud信息泄露漏洞（CNVD-2025-11221） | 2024-11-21 | 2025-05-30 |
| cnvd-2025-11220 | Nextcloud访问控制错误漏洞 | 2024-11-21 | 2025-05-30 |
| cnvd-2025-11219 | Nextcloud信息泄露漏洞 | 2024-11-21 | 2025-05-30 |
| cnvd-2025-11211 | IceWarp Mail Server输入验证错误漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11210 | IceWarp Mail Server跨站脚本漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11209 | TOTOLINK A3002R/A3002RU缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11208 | TOTOLINK A3002R formDnsv6接口缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11207 | TOTOLINK A3002R formDhcpv6s接口缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11206 | TOTOLINK A3002R formDhcpv6s接口dnsaddr参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11205 | TOTOLINK A3002R formDhcpv6s接口addrPoolEnd参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11204 | TOTOLINK N150RT /boafrm/formWsc文件缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11203 | TOTOLINK A3100R setParentalRules函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11202 | TOTOLINK A3100R setMacQos函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11201 | TOTOLINK A3100R setMacFilterRules函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-30 |
| cnvd-2025-11200 | TOTOLINK A3002R缓冲区溢出漏洞 | 2025-05-28 | 2025-05-30 |
| cnvd-2025-11182 | CampCodes Sales and Inventory System /pages/supplier_add.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11181 | CampCodes Sales and Inventory System /pages/purchase_delete.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11180 | CampCodes Sales and Inventory System /pages/purchase_add.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11179 | CampCodes Sales and Inventory System /pages/ci_update.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11178 | CampCodes Online Shopping Portal /my-cart.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11177 | CampCodes Online Shopping Portal /my-account.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11176 | CampCodes Online Shopping Portal /forgot-password.php文件SQL注入漏洞 | 2025-05-22 | 2025-05-30 |
| cnvd-2025-11175 | Campcodes Sales and Inventory System SQL注入漏洞 | 2025-05-27 | 2025-05-30 |
| cnvd-2025-11174 | CampCodes Sales and Inventory System SQL注入漏洞 | 2025-05-27 | 2025-05-30 |
| cnvd-2025-11173 | Campcodes Online Shopping Portal SQL注入漏洞 | 2025-05-28 | 2025-05-30 |
| cnvd-2025-10974 | 深圳市四海众联网络科技有限公司Comfast CF-616AC V2存在逻辑缺陷漏洞 | 2025-04-11 | 2025-05-30 |
| cnvd-2025-10960 | 用友网络科技股份有限公司NC Cloud存在SQL注入漏洞 | 2025-04-15 | 2025-05-30 |
| cnvd-2025-10931 | Google Android权限提升漏洞（CNVD-2025-10931） | 2025-02-17 | 2025-05-30 |
| cnvd-2025-10930 | Google Android代码执行漏洞（CNVD-2025-10930） | 2025-04-07 | 2025-05-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2016-avi-314 | Vulnérabilité dans Citrix Linux VDA | 2016-09-16T00:00:00.000000 | 2016-09-16T00:00:00.000000 |
| certfr-2016-avi-313 | Multiples vulnérabilités dans les produits VMware | 2016-09-15T00:00:00.000000 | 2016-09-15T00:00:00.000000 |
| certfr-2016-avi-312 | Multiples vulnérabilités dans les produits Cisco | 2016-09-15T00:00:00.000000 | 2016-09-15T00:00:00.000000 |
| certfr-2016-avi-311 | Multiples vulnérabilités dans Adobe Flash Player | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-310 | Multiples vulnérabilités dans Microsoft Windows | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-309 | Multiples vulnérabilités dans Microsoft Office | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-308 | Multiples vulnérabilités dans Microsoft Edge | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-307 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-306 | Multiples vulnérabilités dans les produits Apple | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-305 | Multiples vulnérabilités dans Google Chrome | 2016-09-14T00:00:00.000000 | 2016-09-14T00:00:00.000000 |
| certfr-2016-avi-304 | Vulnérabilité dans Moodle | 2016-09-13T00:00:00.000000 | 2016-09-13T00:00:00.000000 |
| certfr-2016-avi-303 | Multiples vulnérabilités dans les produits Citrix | 2016-09-09T00:00:00.000000 | 2016-09-09T00:00:00.000000 |
| certfr-2016-avi-302 | Multiples vulnérabilités dans Asterisk | 2016-09-09T00:00:00.000000 | 2016-09-09T00:00:00.000000 |
| certfr-2016-avi-301 | Multiples vulnérabilités dans Xen | 2016-09-09T00:00:00.000000 | 2016-09-09T00:00:00.000000 |
| certfr-2016-avi-300 | Multiples vulnérabilités dans les produits Juniper | 2016-09-08T00:00:00.000000 | 2016-09-08T00:00:00.000000 |
| certfr-2016-avi-299 | Multiples vulnérabilités dans Wireshark | 2016-09-08T00:00:00.000000 | 2016-09-08T00:00:00.000000 |
| certfr-2016-avi-298 | Multiples vulnérabilités dans WordPress | 2016-09-08T00:00:00.000000 | 2016-09-08T00:00:00.000000 |
| certfr-2016-avi-297 | Multiples vulnérabilités dans Google Android (Nexus) | 2016-09-07T00:00:00.000000 | 2016-09-07T00:00:00.000000 |
| certfr-2016-avi-296 | Multiples vulnérabilités dans SCADA Siemens SIPROTEC 4 et SIPROTEC Compact | 2016-09-06T00:00:00.000000 | 2016-09-06T00:00:00.000000 |
| certfr-2016-avi-295 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-294 | Multiples vulnérabilités dans les produits Apple | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-293 | Multiples vulnérabilités dans Google Chrome | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-292 | Multiples vulnérabilités dans Apache OpenOffice | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-291 | Multiples vulnérabilités dans les produits Cisco | 2016-09-02T00:00:00.000000 | 2016-09-02T00:00:00.000000 |
| certfr-2016-avi-290 | Vulnérabilité dans Adobe ColdFusion | 2016-08-31T00:00:00.000000 | 2016-08-31T00:00:00.000000 |
| certfr-2016-avi-289 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2016-08-30T00:00:00.000000 | 2016-08-30T00:00:00.000000 |
| certfr-2016-avi-288 | Multiples vulnérabilités dans Apple iOS | 2016-08-26T00:00:00.000000 | 2016-08-26T00:00:00.000000 |
| certfr-2016-avi-287 | Vulnérabilité dans les noyaux Linux de Red Hat | 2016-08-24T00:00:00.000000 | 2016-08-24T00:00:00.000000 |
| certfr-2016-avi-286 | Multiples vulnérabilités dans les produits VMware | 2016-08-24T00:00:00.000000 | 2016-08-24T00:00:00.000000 |
| certfr-2016-avi-284 | Multiples vulnérabilités dans les produits Cisco | 2016-08-18T00:00:00.000000 | 2016-08-23T00:00:00.000000 |