Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-59578 |
5.8 (3.1)
|
WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data E… |
wpdesk |
ShopMagic |
2025-10-22T14:32:39.044Z | 2026-01-20T14:28:11.336Z |
| CVE-2025-59579 |
7.5 (3.1)
|
WordPress Simple Job Board plugin <= 2.13.7 - Sensitiv… |
PressTigers |
Simple Job Board |
2025-10-22T14:32:39.279Z | 2026-01-20T14:28:11.320Z |
| CVE-2025-59575 |
5 (3.1)
|
WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive… |
Stylemix |
MasterStudy LMS |
2025-10-22T14:32:38.795Z | 2026-01-20T14:28:11.315Z |
| CVE-2025-59564 |
8.1 (3.1)
|
WordPress EduMall Theme < 4.4.5 - Local File Inclusion… |
ThemeMove |
EduMall |
2025-10-22T14:32:38.200Z | 2026-01-20T14:28:11.299Z |
| CVE-2025-59571 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin < 1.7.06 - Cross Site … |
purethemes |
WorkScout-Core |
2025-10-22T14:32:38.590Z | 2026-01-20T14:28:11.294Z |
| CVE-2025-59566 |
7.6 (3.1)
|
WordPress Workreap (theme's plugin) plugin <= 3.3.5 - … |
AmentoTech |
Workreap (theme's plugin) |
2025-10-22T14:32:38.405Z | 2026-01-20T14:28:11.286Z |
| CVE-2025-59557 |
9.3 (3.1)
|
WordPress Learts Addons Plugin < 1.7.5 - SQL Injection… |
ThemeMove |
Learts Addons |
2025-10-22T14:32:37.757Z | 2026-01-20T14:28:11.268Z |
| CVE-2025-59558 |
8.1 (3.1)
|
WordPress Billey Theme < 2.1.6 - Local File Inclusion … |
ThemeMove |
Billey |
2025-10-22T14:32:37.987Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58949 |
8.1 (3.1)
|
WordPress Spock theme <= 1.17 - Local File Inclusion v… |
axiomthemes |
Spock |
2025-12-18T07:21:59.396Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58961 |
7.1 (3.1)
|
WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cro… |
kamleshyadav |
CF7 Auto Responder Addon |
2025-10-22T14:32:35.382Z | 2026-01-20T14:28:11.176Z |
| CVE-2025-59556 |
7.1 (3.1)
|
WordPress GoStore theme < 1.6.4 - Cross Site Scripting… |
skygroup |
GoStore |
2025-11-06T15:54:38.990Z | 2026-01-20T14:28:11.161Z |
| CVE-2025-59555 |
8.1 (3.1)
|
WordPress Medizin Theme < 1.9.7 - Local File Inclusion… |
ThemeMove |
Medizin |
2025-10-22T14:32:37.531Z | 2026-01-20T14:28:11.126Z |
| CVE-2025-59550 |
8.1 (3.1)
|
WordPress Xcare theme < 6.5 - Local File Inclusion vul… |
designervily |
Xcare |
2025-10-22T14:32:37.298Z | 2026-01-20T14:28:11.108Z |
| CVE-2025-58964 |
7.1 (3.1)
|
WordPress Enzy theme < 1.6.4 - Cross Site Scripting (X… |
skygroup |
Enzy |
2025-11-06T15:54:29.627Z | 2026-01-20T14:28:11.081Z |
| CVE-2025-58955 |
8.1 (3.1)
|
WordPress Karzo theme < 2.6 - Local File Inclusion vul… |
designervily |
Karzo |
2025-10-22T14:32:34.802Z | 2026-01-20T14:28:11.075Z |
| CVE-2025-58963 |
9.8 (3.1)
|
WordPress Medcity theme < 1.1.9 - Arbitrary File Uploa… |
7oroof |
Medcity |
2025-10-22T14:32:35.581Z | 2026-01-20T14:28:11.047Z |
| CVE-2025-58972 |
7.2 (3.1)
|
WordPress Barcode Scanner with Inventory & Order Manag… |
Dmitry V. (CEO of "UKR Solution") |
Barcode Scanner with Inventory & Order Manager |
2025-11-06T15:54:30.300Z | 2026-01-20T14:28:11.032Z |
| CVE-2025-58995 |
8.1 (3.1)
|
WordPress Leblix Theme <= 2.4 - Local File Inclusion V… |
Creatives_Planet |
Leblix |
2025-11-06T15:54:33.654Z | 2026-01-20T14:28:11.026Z |
| CVE-2025-58959 |
7.6 (3.1)
|
WordPress Taskbot plugin <= 6.4 - Arbitrary File Delet… |
AmentoTech |
Taskbot |
2025-10-22T14:32:35.198Z | 2026-01-20T14:28:11.013Z |
| CVE-2025-58966 |
7.1 (3.1)
|
WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scr… |
Basix |
NEX-Forms LITE |
2025-10-22T14:32:35.821Z | 2026-01-20T14:28:10.996Z |
| CVE-2025-58970 |
6.5 (3.1)
|
WordPress Doctreat theme <= 1.6.7 - Content Injection … |
AmentoTech |
Doctreat |
2025-10-22T14:32:36.243Z | 2026-01-20T14:28:10.994Z |
| CVE-2025-58967 |
8.2 (3.1)
|
WordPress Businext theme < 2.4.4 - Local File Inclusio… |
ThemeMove |
Businext |
2025-10-22T14:32:36.057Z | 2026-01-20T14:28:10.994Z |
| CVE-2025-58950 |
8.1 (3.1)
|
WordPress Lione theme <= 1.16 - Local File Inclusion v… |
axiomthemes |
Lione |
2025-12-18T07:21:59.566Z | 2026-01-20T14:28:10.857Z |
| CVE-2025-58951 |
9.3 (3.1)
|
WordPress Advance Seat Reservation Management for WooC… |
smartcms |
Advance Seat Reservation Management for WooCommerce |
2025-12-18T07:21:59.734Z | 2026-01-20T14:28:10.822Z |
| CVE-2025-58958 |
8.2 (3.1)
|
WordPress SmilePure Theme < 1.8.5 - Local File Inclusi… |
ThemeMove |
SmilePure |
2025-10-22T14:32:35.016Z | 2026-01-20T14:28:10.790Z |
| CVE-2025-58948 |
8.1 (3.1)
|
WordPress Aromatica theme <= 1.8 - Local File Inclusio… |
axiomthemes |
Aromatica |
2025-12-18T07:21:59.216Z | 2026-01-20T14:28:10.790Z |
| CVE-2025-58937 |
8.1 (3.1)
|
WordPress Tacticool theme <= 1.0.13 - Local File Inclu… |
axiomthemes |
Tacticool |
2025-12-18T07:21:57.331Z | 2026-01-20T14:28:10.572Z |
| CVE-2025-58901 |
8.1 (3.1)
|
WordPress Takeout theme <= 1.3.0 - Local File Inclusio… |
AncoraThemes |
Takeout |
2025-12-18T07:21:54.755Z | 2026-01-20T14:28:10.564Z |
| CVE-2025-58927 |
8.1 (3.1)
|
WordPress Stallion theme <= 1.17 - Local File Inclusio… |
axiomthemes |
Stallion |
2025-12-18T07:21:55.482Z | 2026-01-20T14:28:10.554Z |
| CVE-2025-58925 |
8.1 (3.1)
|
WordPress Neptunus theme <= 1.0.11 - Local File Inclus… |
axiomthemes |
Neptunus |
2025-12-18T07:21:55.134Z | 2026-01-20T14:28:10.541Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62054 |
7.5 (3.1)
|
WordPress Houzez Theme - Functionality plugin <= 4.1.8… |
favethemes |
Houzez Theme - Functionality |
2025-10-22T14:32:52.067Z | 2026-01-20T14:28:13.941Z |
| CVE-2025-62053 |
8 (3.1)
|
WordPress Houzez theme < 4.2.0 - Local File Inclusion … |
favethemes |
Houzez |
2025-11-06T15:55:48.526Z | 2026-01-20T14:28:13.854Z |
| CVE-2025-62052 |
4.3 (3.1)
|
WordPress One Page Express Companion plugin <= 1.6.43 … |
Horea Radu |
One Page Express Companion |
2025-10-22T14:32:51.853Z | 2026-01-20T14:28:14.063Z |
| CVE-2025-62051 |
6.5 (3.1)
|
WordPress UDesign Core plugin <= 4.14.1 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-11-06T15:55:47.211Z | 2026-01-20T14:28:13.625Z |
| CVE-2025-62049 |
6.5 (3.1)
|
WordPress Cost Calculator Builder plugin <= 3.5.32 - B… |
Stylemix |
Cost Calculator Builder |
2025-11-06T15:55:44.281Z | 2026-01-20T14:28:14.242Z |
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62047 |
9.9 (3.1)
|
WordPress Case Addons plugin < 1.3.0 - Arbitrary File … |
Case-Themes |
Case Addons |
2025-11-06T15:55:43.609Z | 2026-01-20T14:28:13.952Z |
| CVE-2025-62046 |
6.5 (3.1)
|
WordPress TheGem Demo Import (for WPBakery) plugin <= … |
CodexThemes |
TheGem Demo Import (for WPBakery) |
2025-11-06T15:55:42.909Z | 2026-01-20T14:28:13.538Z |
| CVE-2025-62045 |
8.1 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:41.551Z | 2026-01-20T14:28:13.819Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62042 |
6.5 (3.1)
|
WordPress Event post plugin <= 5.10.3 - Cross Site Scr… |
Bastien Ho |
Event post |
2025-10-22T14:32:51.413Z | 2026-01-20T14:28:13.802Z |
| CVE-2025-62041 |
7.1 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:38.770Z | 2026-01-20T14:28:13.398Z |
| CVE-2025-62040 |
7.1 (3.1)
|
WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scrip… |
YOP |
YOP Poll |
2025-11-06T15:55:38.092Z | 2026-01-20T14:28:13.427Z |
| CVE-2025-62039 |
7.5 (3.1)
|
WordPress AI ChatBot with ChatGPT and Content Generato… |
Ays Pro |
AI ChatBot with ChatGPT and Content Generator by AYS |
2025-11-06T15:55:37.380Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62038 |
6.5 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Sensitive Data… |
Sovlix |
MeetingHub |
2025-11-06T15:55:36.094Z | 2026-01-20T14:28:13.390Z |
| CVE-2025-62037 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:34.720Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62036 |
7.1 (3.1)
|
WordPress Togo theme < 1.0.4 - Cross Site Scripting (X… |
uxper |
Togo |
2025-11-06T15:55:32.766Z | 2026-01-20T14:28:13.319Z |
| CVE-2025-62035 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - PHP Object Injection vu… |
uxper |
Togo |
2025-11-06T15:55:31.398Z | 2026-01-20T14:28:13.288Z |
| CVE-2025-62034 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - Privilege Escalation vu… |
uxper |
Togo |
2025-11-06T15:55:30.572Z | 2026-01-20T14:28:13.109Z |
| CVE-2025-62033 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:29.843Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62032 |
6.5 (3.1)
|
WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross … |
tagDiv |
tagDiv Cloud Library |
2025-11-06T15:55:29.230Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62031 |
7.1 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:28.516Z | 2026-01-20T14:28:13.050Z |
| CVE-2025-62030 |
6.5 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:27.866Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62029 |
8.1 (3.1)
|
WordPress Grevo theme <= 2.4 - Local File Inclusion vu… |
themesion |
Grevo |
2025-10-22T14:32:51.220Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62028 |
4.3 (3.1)
|
WordPress Salient theme < 17.4.0 - Broken Access Contr… |
ThemeNectar |
Salient |
2025-11-06T15:55:27.077Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62027 |
5.4 (3.1)
|
WordPress Event Tickets plugin <= 5.26.3 - Broken Acce… |
StellarWP |
Event Tickets |
2025-10-22T14:32:51.014Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62026 |
4.3 (3.1)
|
WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Da… |
Blockspare |
Blockspare |
2025-10-22T14:32:50.799Z | 2026-01-20T14:28:13.037Z |
| CVE-2025-62025 |
9.8 (3.1)
|
WordPress JobSearch plugin < 3.0.8 - PHP Object Inject… |
eyecix |
JobSearch |
2025-10-22T14:32:50.582Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62024 |
6.5 (3.1)
|
WordPress Pie Calendar plugin <= 1.2.9 - Cross Site Sc… |
Jonathan Jernigan |
Pie Calendar |
2025-10-22T14:32:50.360Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62023 |
9.8 (3.1)
|
WordPress s2Member plugin <= 250905 - Remote Code Exec… |
Cristián Lávaque |
s2Member |
2025-10-22T14:32:50.026Z | 2026-01-20T14:28:13.041Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62045 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:10.980 | 2026-01-20T15:17:43.513 |
| fkie_cve-2025-62044 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.837 | 2026-01-20T15:17:43.380 |
| fkie_cve-2025-62042 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:04.410 | 2026-01-20T15:17:43.247 |
| fkie_cve-2025-62041 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.690 | 2026-01-20T15:17:43.113 |
| fkie_cve-2025-62040 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:10.543 | 2026-01-20T15:17:42.980 |
| fkie_cve-2025-62039 | Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT … | 2025-11-06T16:16:10.387 | 2026-01-20T15:17:42.850 |
| fkie_cve-2025-62038 | Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub all… | 2025-11-06T16:16:10.230 | 2026-01-20T15:17:42.710 |
| fkie_cve-2025-62037 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T16:16:10.070 | 2026-01-20T15:17:42.573 |
| fkie_cve-2025-62036 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.920 | 2026-01-20T15:17:42.427 |
| fkie_cve-2025-62035 | Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/… | 2025-11-06T16:16:09.780 | 2026-01-20T15:17:42.293 |
| fkie_cve-2025-62034 | Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a t… | 2025-11-06T16:16:09.613 | 2026-01-20T15:17:42.153 |
| fkie_cve-2025-62033 | Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. | 2025-11-06T16:16:09.470 | 2026-01-20T15:17:42.010 |
| fkie_cve-2025-62032 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.303 | 2026-01-20T15:17:41.873 |
| fkie_cve-2025-62031 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.160 | 2026-01-20T15:17:41.740 |
| fkie_cve-2025-62030 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:09.007 | 2026-01-20T15:17:41.590 |
| fkie_cve-2025-62029 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-22T15:16:04.287 | 2026-01-20T15:17:41.433 |
| fkie_cve-2025-62028 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from… | 2025-11-06T16:16:08.857 | 2026-01-20T15:17:41.293 |
| fkie_cve-2025-62027 | Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Eve… | 2025-10-22T15:16:04.160 | 2026-01-20T15:17:41.163 |
| fkie_cve-2025-62026 | Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare… | 2025-10-22T15:16:04.037 | 2026-01-20T15:17:41.030 |
| fkie_cve-2025-62025 | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects… | 2025-10-22T15:16:03.913 | 2026-01-20T15:17:40.880 |
| fkie_cve-2025-62024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:03.797 | 2026-01-20T15:17:40.720 |
| fkie_cve-2025-62023 | Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Membe… | 2025-10-22T15:16:03.667 | 2026-01-20T15:17:40.567 |
| fkie_cve-2025-62022 | Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPre… | 2025-10-22T15:16:03.547 | 2026-01-20T15:17:40.413 |
| fkie_cve-2025-62021 | Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Ack… | 2025-10-22T15:16:03.423 | 2026-01-20T15:17:40.270 |
| fkie_cve-2025-62020 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:03.300 | 2026-01-20T15:17:40.120 |
| fkie_cve-2025-62019 | Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-c… | 2025-10-22T15:16:03.163 | 2026-01-20T15:17:39.963 |
| fkie_cve-2025-62018 | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T16:16:08.713 | 2026-01-20T15:17:39.830 |
| fkie_cve-2025-62017 | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T16:16:08.567 | 2026-01-20T15:17:39.687 |
| fkie_cve-2025-62016 | Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue … | 2025-11-06T16:16:08.420 | 2026-01-20T15:17:39.533 |
| fkie_cve-2025-62015 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-10-22T15:16:03.040 | 2026-01-20T15:17:39.387 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4x3m-wqv7-c7h3 |
8.4 (3.1)
|
Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver R… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-4772-pjcp-2xfr |
6.4 (3.1)
|
Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP … | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-3mmv-v6g2-g7c6 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Acc… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-xwwh-3hfg-5c8w |
9.9 (3.1)
|
Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials Genera… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-x2gq-6c9p-44p8 |
4.3 (3.1)
|
Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reco… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-wjx9-27x5-jwmf |
9.1 (3.1)
|
SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-jmwc-hm8x-6w23 |
6.1 (3.1)
|
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-9m57-5mv3-fjx3 |
9.6 (3.1)
|
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (Wor… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-6xvr-96w9-f64h |
4.3 (3.1)
|
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an at… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-67mq-54j2-cv5m |
8.8 (3.1)
|
SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-5j28-xwjp-v5gv |
6.6 (3.1)
|
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to uploa… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-5429-v87q-pg8h |
5.1 (3.1)
|
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send … | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-4p53-w5pc-f48w |
9.1 (3.1)
|
SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vu… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-2qp6-v7mh-v798 |
4.3 (3.1)
|
SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users … | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-x7h6-xxfr-j6pv |
4.8 (4.0)
|
TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in th… | 2026-01-13T00:30:46Z | 2026-01-13T00:30:46Z |
| ghsa-f2p8-hh36-r2r8 |
9.8 (3.1)
|
Multiple SQL Injection vulnerabilities exist in amansuryawanshi Gym-Management-System-PHP 1.0 via t… | 2026-01-12T21:30:34Z | 2026-01-13T00:30:46Z |
| ghsa-hvj6-2w8w-j3wj |
9.4 (3.1)
|
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'n… | 2026-01-13T00:30:45Z | 2026-01-13T00:30:45Z |
| ghsa-xfhq-47hp-mvcx |
9.1 (3.1)
|
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, … | 2026-01-12T21:30:34Z | 2026-01-12T21:30:35Z |
| ghsa-x4r4-f558-hvh7 |
9.8 (3.1)
|
Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE (Remote Code Execution). Th… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-vgc8-whvm-22v4 |
5.4 (3.1)
|
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-p54q-9gfq-fvp4 |
3.1 (3.1)
|
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-g579-x2p7-hjfv |
5.4 (3.1)
|
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execut… | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-9g5v-hmcj-pxrc |
10.0 (3.1)
|
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 … | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-7v52-p3w5-3m2m |
8.2 (3.1)
|
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-5c5p-g26h-xx2f |
7.5 (3.1)
|
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improp… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-577g-w45q-4pwf |
6.5 (3.1)
|
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated atta… | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-hgq8-fc97-42ff |
7.5 (3.1)
|
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manage… | 2022-05-17T04:06:30Z | 2026-01-12T21:30:28Z |
| ghsa-2j56-f322-jxrm |
5.9 (3.1)
|
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session rese… | 2022-05-02T03:31:14Z | 2026-01-12T21:30:28Z |
| ghsa-g24c-fx4v-xg9w |
5.3 (3.1)
|
Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider | 2022-05-24T17:21:06Z | 2026-01-12T20:18:44Z |
| ghsa-8pff-p3gx-w4jf |
6.1 (3.1)
|
Mattermost Server vulnerable to XSS via an uploaded file | 2022-05-24T17:21:06Z | 2026-01-12T20:18:18Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-28072 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.217820Z |
| gsd-2024-28066 | In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password). | 2024-03-02T06:02:30.215662Z |
| gsd-2024-28059 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.213663Z |
| gsd-2024-28057 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.213451Z |
| gsd-2024-28062 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.212726Z |
| gsd-2024-28076 | The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A … | 2024-03-02T06:02:30.212535Z |
| gsd-2024-28065 | In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive inf… | 2024-03-02T06:02:30.212336Z |
| gsd-2024-28071 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.211376Z |
| gsd-2024-28074 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.210498Z |
| gsd-2024-28060 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.209009Z |
| gsd-2024-28067 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.207901Z |
| gsd-2024-28064 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:30.207124Z |
| gsd-2024-2113 | The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for Wo… | 2024-03-02T06:02:28.507628Z |
| gsd-2024-2112 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for Wor… | 2024-03-02T06:02:28.507427Z |
| gsd-2024-2131 | The Move Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2024-03-02T06:02:28.506000Z |
| gsd-2024-2109 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.505785Z |
| gsd-2024-2073 | A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 a… | 2024-03-02T06:02:28.505103Z |
| gsd-2024-2063 | A vulnerability, which was classified as problematic, was found in SourceCodester Petrol … | 2024-03-02T06:02:28.504312Z |
| gsd-2024-2071 | A vulnerability, which was classified as problematic, has been found in SourceCodester FA… | 2024-03-02T06:02:28.502860Z |
| gsd-2024-2122 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.500755Z |
| gsd-2024-2068 | A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been ra… | 2024-03-02T06:02:28.499957Z |
| gsd-2024-2099 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.499616Z |
| gsd-2024-2095 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.499357Z |
| gsd-2024-2079 | The WPBakery Page Builder Addons by Livemesh plugin for WordPress is vulnerable to Stored… | 2024-03-02T06:02:28.499111Z |
| gsd-2024-2066 | A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been cl… | 2024-03-02T06:02:28.497993Z |
| gsd-2024-2090 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.497339Z |
| gsd-2024-2107 | The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in al… | 2024-03-02T06:02:28.497092Z |
| gsd-2024-2062 | A vulnerability, which was classified as critical, has been found in SourceCodester Petro… | 2024-03-02T06:02:28.495963Z |
| gsd-2024-2072 | A vulnerability, which was classified as problematic, was found in SourceCodester Flashca… | 2024-03-02T06:02:28.495221Z |
| gsd-2024-2092 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.494583Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-187347 | Malicious code in hermes-venus-cosmos-rest (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187346 | Malicious code in hermes-polaris-regulus-apollo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187345 | Malicious code in hermes-jekyll-io-nightwatch (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187344 | Malicious code in hermes-dactyl-canopus-flare (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187343 | Malicious code in hermes-config-unuk-aurora (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187342 | Malicious code in hermes-child-process-apex-centauri (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187341 | Malicious code in hermes-browserify-alphard-greatfilter (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187340 | Malicious code in hercules-winston-janus-miranda (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187339 | Malicious code in hercules-radiant-jekyll-delphinus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187338 | Malicious code in hercules-pyxis-rehype-hermes (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187337 | Malicious code in hercules-local-ceres-backend (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187336 | Malicious code in hercules-fermion-hyperion-version (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187335 | Malicious code in hercules-deimos-superagent-webdriverio (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187334 | Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187333 | Malicious code in hercules-css-loader-restart-eslint-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187332 | Malicious code in hercules-config-juno-void (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187331 | Malicious code in helmet-terser-isostasy-nova (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187330 | Malicious code in helmet-supercluster-release-it-technosignature (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187329 | Malicious code in helmet-sirius-ini-mocha (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187328 | Malicious code in helmet-sagitta-saturnology-element-ui (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187327 | Malicious code in helmet-release-it-enceladus-figures (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187326 | Malicious code in helmet-radiant-babel-dorado (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187325 | Malicious code in helmet-pegasus-non-blocking-phoebe (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187324 | Malicious code in helmet-neutronstar-xo-xerxes (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187323 | Malicious code in helmet-geochronology-rigel-sails (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187322 | Malicious code in helmet-blitz-izar-update (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187321 | Malicious code in helios-zenobia-geckodriver-rigel (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187320 | Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187319 | Malicious code in helios-nightwatch-tethys-eridanus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187318 | Malicious code in helios-jekyll-polaris-soap (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2022-0584 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-07-05T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0519 | Apache Tomcat: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-07-14T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0505 | Mozilla Produkte: Mehrere Schwachstellen | 2022-06-28T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0359 | MariaDB: Schwachstellen ermöglichen Denial of Service | 2022-04-13T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0317 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2021-12-21T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0224 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2021-10-03T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0223 | Linux Kernel: Mehrere Schwachstellen | 2021-09-15T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0222 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2021-09-14T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0193 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2020-11-03T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0170 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-04-20T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0168 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-04-18T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0147 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-01-31T23:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0017 | MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-05-29T22:00:00.000+00:00 | 2023-09-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2452 | Apple Safari: Mehre Schwachstellen | 2023-09-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2451 | Apple Xcode: Mehrere Schwachstellen | 2023-09-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2450 | VMware Aria Operations und VMware Cloud Foundation: Schwachstelle ermöglicht Privilegieneskalation | 2023-09-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2446 | Squid: Schwachstelle ermöglicht Denial of Service | 2023-09-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2445 | GNOME: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-09-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2416 | pgAdmin: Schwachstelle ermöglicht Ausführung von Kommandos | 2023-09-20T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-1083 | Drupal: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-04-26T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-1036 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-04-19T22:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-0565 | F-Secure Policy Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2023-03-05T23:00:00.000+00:00 | 2023-09-26T22:00:00.000+00:00 |
| wid-sec-w-2023-2443 | docker: Mehrere Schwachstellen | 2023-09-25T22:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-2440 | docker: Mehrere Schwachstellen | 2023-09-25T22:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-2011 | Microsoft Windows: Mehrere Schwachstellen | 2023-08-08T22:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-1718 | Microsoft Windows: Mehrere Schwachstellen | 2023-07-11T22:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-1446 | Microsoft Developer Tools: Mehrere Schwachstellen | 2023-06-13T22:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-0651 | Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen | 2023-03-14T23:00:00.000+00:00 | 2023-09-25T22:00:00.000+00:00 |
| wid-sec-w-2023-2437 | IBM Security Guardium: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-09-24T22:00:00.000+00:00 | 2023-09-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2436 | IBM Spectrum Protect: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-09-24T22:00:00.000+00:00 | 2023-09-24T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7676 | Red Hat Security Advisory: Red Hat Data Grid 8.4.6 security update | 2023-12-06T19:03:58+00:00 | 2026-01-03T11:29:07+00:00 |
| rhsa-2023:7669 | Red Hat Security Advisory: Red Hat build of Cryostat 2.4.0: new RHEL 8 container images | 2023-12-06T22:07:18+00:00 | 2026-01-03T11:29:07+00:00 |
| rhsa-2023:6138 | Red Hat Security Advisory: Migration Toolkit for Runtimes security update | 2023-10-26T10:05:45+00:00 | 2026-01-03T11:27:57+00:00 |
| rhsa-2023:6207 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.6 release and security update | 2023-10-31T13:05:06+00:00 | 2026-01-03T11:27:56+00:00 |
| rhsa-2023:6206 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.6 release and security update | 2023-10-31T13:09:55+00:00 | 2026-01-03T11:27:56+00:00 |
| rhsa-2023:6886 | Red Hat Security Advisory: plexus-archiver security update | 2023-11-13T09:42:49+00:00 | 2026-01-03T11:27:38+00:00 |
| rhsa-2023:6112 | Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.4 security one-off update | 2023-10-25T13:03:39+00:00 | 2026-01-03T11:23:51+00:00 |
| rhsa-2023:6107 | Red Hat Security Advisory: Updated Kogito for Red Hat Process Automation Manager 7.13.4 SP1 Images | 2023-10-25T12:34:17+00:00 | 2026-01-03T11:23:43+00:00 |
| rhsa-2023:5479 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.1 security update | 2023-10-05T15:27:08+00:00 | 2026-01-03T11:23:40+00:00 |
| rhsa-2023:5446 | Red Hat Security Advisory: Red Hat Build of OptaPlanner 8.38.0 SP1 | 2023-10-04T16:03:59+00:00 | 2026-01-03T11:23:40+00:00 |
| rhsa-2023:5337 | Red Hat Security Advisory: Red Hat Integration Camel K 1.10.2 release security update | 2023-09-21T19:07:19+00:00 | 2026-01-03T11:23:40+00:00 |
| rhsa-2023:5310 | Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.13.3-1 security update | 2023-09-20T07:40:50+00:00 | 2026-01-03T11:22:40+00:00 |
| rhsa-2023:5396 | Red Hat Security Advisory: Red Hat Data Grid 8.4.4 security update | 2023-09-28T11:55:36+00:00 | 2026-01-03T11:22:37+00:00 |
| rhsa-2023:5480 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.30.0 SP1 security update | 2023-10-05T15:24:36+00:00 | 2026-01-03T11:22:36+00:00 |
| rhsa-2023:5491 | Red Hat Security Advisory: Red Hat AMQ Broker 7.11.2 release and security update | 2023-10-05T22:37:30+00:00 | 2026-01-03T11:22:35+00:00 |
| rhsa-2023:5148 | Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.2 release and security update | 2023-09-13T16:09:58+00:00 | 2026-01-03T11:22:19+00:00 |
| rhsa-2023:1241 | Red Hat Security Advisory: Red Hat AMQ Streams 2.2.1 release and security update | 2023-03-14T18:47:48+00:00 | 2026-01-03T11:18:19+00:00 |
| rhsa-2024:7705 | Red Hat Security Advisory: systemd security update | 2024-10-07T01:38:26+00:00 | 2026-01-01T13:57:22+00:00 |
| rhsa-2024:1105 | Red Hat Security Advisory: systemd security update | 2024-03-05T16:26:47+00:00 | 2026-01-01T13:57:21+00:00 |
| rhsa-2024:3203 | Red Hat Security Advisory: systemd security update | 2024-05-22T10:04:25+00:00 | 2026-01-01T13:57:19+00:00 |
| rhsa-2024:2463 | Red Hat Security Advisory: systemd security update | 2024-04-30T10:04:59+00:00 | 2026-01-01T13:57:18+00:00 |
| rhsa-2023:3837 | Red Hat Security Advisory: systemd security and bug fix update | 2023-06-27T15:06:09+00:00 | 2026-01-01T13:56:57+00:00 |
| rhsa-2024:1249 | Red Hat Security Advisory: kernel security and bug fix update | 2024-03-12T00:56:07+00:00 | 2025-12-27T10:09:39+00:00 |
| rhsa-2024:3184 | Red Hat Security Advisory: grub2 security update | 2024-05-22T10:18:20+00:00 | 2025-12-27T10:09:25+00:00 |
| rhsa-2025:3016 | Red Hat Security Advisory: php:7.4 security update | 2025-03-18T18:54:25+00:00 | 2025-12-26T15:32:09+00:00 |
| rhsa-2025:3076 | Red Hat Security Advisory: php:7.4 security update | 2025-03-20T12:58:06+00:00 | 2025-12-26T15:32:08+00:00 |
| rhsa-2024:2720 | Red Hat Security Advisory: bind and dhcp security update | 2024-05-07T07:34:56+00:00 | 2025-12-26T15:32:07+00:00 |
| rhsa-2024:2621 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2024-04-30T17:06:58+00:00 | 2025-12-26T15:31:53+00:00 |
| rhsa-2024:1877 | Red Hat Security Advisory: kernel security and bug fix update | 2024-04-18T02:37:33+00:00 | 2025-12-26T15:31:53+00:00 |
| rhsa-2024:0254 | Red Hat Security Advisory: rsync security update | 2024-01-15T16:02:05+00:00 | 2025-12-26T15:31:46+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-22102 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22097 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22092 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22084 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22079 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22070 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22066 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22065 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22064 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22059 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-22032 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-20T00:00:00.000Z |
| msrc_cve-2023-42752 | Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access | 2023-10-01T00:00:00.000Z | 2023-10-19T00:00:00.000Z |
| msrc_cve-2023-22115 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-19T00:00:00.000Z |
| msrc_cve-2023-22078 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-19T00:00:00.000Z |
| msrc_cve-2023-22068 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2023-10-01T00:00:00.000Z | 2023-10-19T00:00:00.000Z |
| msrc_cve-2023-38186 | Windows Mobile Device Management Elevation of Privilege Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-38164 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 2023-09-12T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36913 | Microsoft Message Queuing Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36908 | Windows Hyper-V Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36905 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36886 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 2023-09-12T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36884 | Windows Search Remote Code Execution Vulnerability | 2023-07-11T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36800 | Dynamics Finance and Operations Cross-site Scripting Vulnerability | 2023-09-12T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36761 | Microsoft Word Information Disclosure Vulnerability | 2023-09-12T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36741 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-36697 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-35391 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-35383 | Microsoft Message Queuing Information Disclosure Vulnerability | 2023-08-08T07:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-21537 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability | 2023-01-10T08:00:00.000Z | 2023-10-17T07:00:00.000Z |
| msrc_cve-2023-43789 | Libxpm: out of bounds read on xpm with corrupted colormap | 2023-10-01T00:00:00.000Z | 2023-10-17T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201702-0293 | An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web s… | 2025-04-20T23:13:18.983000Z |
| var-201702-0377 | IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker… | 2025-04-20T23:13:18.892000Z |
| var-201702-0419 | An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automatio… | 2025-04-20T23:13:18.794000Z |
| var-201702-0797 | A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN funct… | 2025-04-20T23:13:18.403000Z |
| var-201703-0201 | Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Mana… | 2025-04-20T23:13:17.431000Z |
| var-201703-0264 | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - … | 2025-04-20T23:13:17.383000Z |
| var-201703-0470 | Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB… | 2025-04-20T23:13:16.767000Z |
| var-201703-0659 | Due to a lack of standard encryption when transmitting sensitive information over the int… | 2025-04-20T23:13:16.249000Z |
| var-201703-0658 | Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S… | 2025-04-20T23:13:16.220000Z |
| var-201703-0890 | A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Softw… | 2025-04-20T23:13:16.184000Z |
| var-201703-1057 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration ut… | 2025-04-20T23:13:15.983000Z |
| var-201703-1056 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface respon… | 2025-04-20T23:13:15.924000Z |
| var-201703-1226 | Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of servi… | 2025-04-20T23:13:15.128000Z |
| var-201704-0010 | WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (pr… | 2025-04-20T23:13:14.815000Z |
| var-201704-0136 | Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi … | 2025-04-20T23:13:14.583000Z |
| var-201704-0157 | Huawei PC client software HiSuite 4.0.5.300_OVE uses insecure HTTP for upgrade software p… | 2025-04-20T23:13:14.558000Z |
| var-201704-0220 | D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses username… | 2025-04-20T23:13:14.342000Z |
| var-201704-0219 | D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default pass… | 2025-04-20T23:13:14.300000Z |
| var-201704-0218 | Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN… | 2025-04-20T23:13:14.258000Z |
| var-201704-0283 | AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cg… | 2025-04-20T23:13:14.092000Z |
| var-201704-0304 | Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WND… | 2025-04-20T23:13:14.061000Z |
| var-201704-0305 | Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and admi… | 2025-04-20T23:13:14.028000Z |
| var-201704-0306 | Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 … | 2025-04-20T23:13:13.994000Z |
| var-201704-0307 | D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earli… | 2025-04-20T23:13:13.551000Z |
| var-201704-0342 | A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists … | 2025-04-20T23:13:13.513000Z |
| var-201704-0386 | Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300… | 2025-04-20T23:13:13.421000Z |
| var-201704-0407 | firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and … | 2025-04-20T23:13:13.381000Z |
| var-201704-0430 | Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a pass… | 2025-04-20T23:13:13.291000Z |
| var-201704-0472 | Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C0… | 2025-04-20T23:13:13.239000Z |
| var-201704-0493 | ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and ear… | 2025-04-20T23:13:13.205000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:4504-1 | Security update for the Linux Kernel | 2022-12-16T12:28:51Z | 2022-12-16T12:28:51Z |
| suse-su-2022:4503-1 | Security update for the Linux Kernel | 2022-12-16T12:28:13Z | 2022-12-16T12:28:13Z |
| suse-su-2022:4501-1 | Security update for ceph | 2022-12-15T12:20:25Z | 2022-12-15T12:20:25Z |
| suse-fu-2022:4496-1 | Feature update for SCA patterns | 2022-12-15T09:43:54Z | 2022-12-15T09:43:54Z |
| suse-su-2022:4488-1 | Security update for apache2-mod_wsgi | 2022-12-14T12:23:42Z | 2022-12-14T12:23:42Z |
| suse-su-2022:4487-1 | Security update for xwayland | 2022-12-14T11:46:15Z | 2022-12-14T11:46:15Z |
| suse-su-2022:4485-1 | Security update for xorg-x11-server | 2022-12-14T11:45:29Z | 2022-12-14T11:45:29Z |
| suse-su-2022:4484-1 | Security update for xorg-x11-server | 2022-12-14T11:45:14Z | 2022-12-14T11:45:14Z |
| suse-su-2022:4483-1 | Security update for xorg-x11-server | 2022-12-14T11:44:50Z | 2022-12-14T11:44:50Z |
| suse-su-2022:4482-1 | Security update for xorg-x11-server | 2022-12-14T11:44:30Z | 2022-12-14T11:44:30Z |
| suse-su-2022:4481-1 | Security update for xorg-x11-server | 2022-12-14T11:44:00Z | 2022-12-14T11:44:00Z |
| suse-su-2022:4480-1 | Security update for xorg-x11-server | 2022-12-14T11:43:08Z | 2022-12-14T11:43:08Z |
| suse-su-2022:4479-1 | Security update for xorg-x11-server | 2022-12-14T11:41:53Z | 2022-12-14T11:41:53Z |
| suse-su-2022:4478-1 | Security update for capnproto | 2022-12-14T10:59:37Z | 2022-12-14T10:59:37Z |
| suse-su-2022:4477-1 | Security update for zabbix | 2022-12-14T10:40:17Z | 2022-12-14T10:40:17Z |
| suse-su-2022:4463-1 | Security update for containerd | 2022-12-13T16:05:13Z | 2022-12-13T16:05:13Z |
| suse-su-2022:4462-1 | Security update for MozillaFirefox | 2022-12-13T16:01:06Z | 2022-12-13T16:01:06Z |
| suse-su-2022:4461-1 | Security update for MozillaFirefox | 2022-12-13T15:59:01Z | 2022-12-13T15:59:01Z |
| suse-su-2022:4460-1 | Security update for MozillaFirefox | 2022-12-13T15:57:37Z | 2022-12-13T15:57:37Z |
| suse-su-2022:4457-1 | Security update for libtpms | 2022-12-13T12:11:01Z | 2022-12-13T12:11:01Z |
| suse-su-2022:4205-2 | Security update for net-snmp | 2022-12-13T11:49:18Z | 2022-12-13T11:49:18Z |
| suse-su-2022:4453-1 | Security update for wireshark | 2022-12-13T10:39:05Z | 2022-12-13T10:39:05Z |
| suse-su-2022:4452-1 | Security update for java-1_8_0-openjdk | 2022-12-13T10:35:47Z | 2022-12-13T10:35:47Z |
| suse-su-2022:4443-1 | Security update for SUSE Manager Server 4.2 | 2022-12-13T07:40:23Z | 2022-12-13T07:40:23Z |
| suse-su-2022:4442-1 | Security update for SUSE Manager Server 4.2 | 2022-12-13T07:39:56Z | 2022-12-13T07:39:56Z |
| suse-su-2022:4439-1 | Security update for SUSE Manager Client Tools | 2022-12-13T07:34:23Z | 2022-12-13T07:34:23Z |
| suse-su-2022:4437-1 | Security update for SUSE Manager Client Tools | 2022-12-13T07:33:38Z | 2022-12-13T07:33:38Z |
| suse-su-2022:4428-1 | Security update for grafana | 2022-12-13T07:29:50Z | 2022-12-13T07:29:50Z |
| suse-su-2022:4411-1 | Security update for tiff | 2022-12-13T03:21:53Z | 2022-12-13T03:21:53Z |
| suse-su-2022:4410-1 | Security update for colord | 2022-12-12T09:27:01Z | 2022-12-12T09:27:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2020:1064-1 | Security update for webkit2gtk3 | 2020-07-26T10:20:38Z | 2020-07-26T10:20:38Z |
| opensuse-su-2020:1063-1 | Security update for tomcat | 2020-07-26T10:20:20Z | 2020-07-26T10:20:20Z |
| opensuse-su-2020:1062-1 | Security update for the Linux Kernel | 2020-07-26T10:20:12Z | 2020-07-26T10:20:12Z |
| opensuse-su-2020:1061-1 | Security update for chromium | 2020-07-26T04:20:05Z | 2020-07-26T04:20:05Z |
| opensuse-su-2020:1060-1 | Security update for cacti, cacti-spine | 2020-07-25T18:21:21Z | 2020-07-25T18:21:21Z |
| opensuse-su-2020:1056-1 | Security update for LibVNCServer | 2020-07-24T12:20:15Z | 2020-07-24T12:20:15Z |
| opensuse-su-2020:1055-1 | Security update for pdns-recursor | 2020-07-24T08:48:43Z | 2020-07-24T08:48:43Z |
| opensuse-su-2020:1051-1 | Security update for tomcat | 2020-07-23T18:21:33Z | 2020-07-23T18:21:33Z |
| opensuse-su-2020:1050-1 | Security update for cni-plugins | 2020-07-23T18:21:27Z | 2020-07-23T18:21:27Z |
| opensuse-su-2020:1049-1 | Security update for cni-plugins | 2020-07-23T14:22:07Z | 2020-07-23T14:22:07Z |
| opensuse-su-2020:1048-1 | Security update for chromium | 2020-07-23T10:22:22Z | 2020-07-23T10:22:22Z |
| opensuse-su-2020:1043-1 | Security update for xmlgraphics-batik | 2020-07-23T10:21:43Z | 2020-07-23T10:21:43Z |
| opensuse-su-2020:1042-1 | Security update for MozillaFirefox | 2020-07-23T04:23:12Z | 2020-07-23T04:23:12Z |
| opensuse-su-2020:1037-1 | Security update for singularity | 2020-07-23T04:22:25Z | 2020-07-23T04:22:25Z |
| opensuse-su-2020:1035-1 | Security update for redis | 2020-07-23T04:21:54Z | 2020-07-23T04:21:54Z |
| opensuse-su-2020:1034-1 | Security update for MozillaFirefox | 2020-07-22T16:22:05Z | 2020-07-22T16:22:05Z |
| opensuse-su-2020:1032-1 | Security update for chromium | 2020-07-22T08:28:42Z | 2020-07-22T08:28:42Z |
| opensuse-su-2020:1027-1 | Security update for openconnect | 2020-07-21T14:38:41Z | 2020-07-21T14:38:41Z |
| opensuse-su-2020:1025-1 | Security update for LibVNCServer | 2020-07-21T08:27:26Z | 2020-07-21T08:27:26Z |
| opensuse-su-2020:1023-1 | Security update for ldb, samba | 2020-07-20T22:30:54Z | 2020-07-20T22:30:54Z |
| opensuse-su-2020:1022-1 | Security update for ant | 2020-07-20T16:30:35Z | 2020-07-20T16:30:35Z |
| opensuse-su-2020:1021-1 | Security update for chromium | 2020-07-20T14:27:17Z | 2020-07-20T14:27:17Z |
| opensuse-su-2020:1020-1 | Security update for chromium | 2020-07-20T14:26:27Z | 2020-07-20T14:26:27Z |
| opensuse-su-2020:1017-1 | Security update for MozillaFirefox | 2020-07-20T08:28:10Z | 2020-07-20T08:28:10Z |
| opensuse-su-2020:1016-1 | Security update for mumble | 2020-07-20T08:27:56Z | 2020-07-20T08:27:56Z |
| opensuse-su-2020:1015-1 | Security update for openexr | 2020-07-19T18:25:56Z | 2020-07-19T18:25:56Z |
| opensuse-su-2020:1014-1 | Security update for google-compute-engine | 2020-07-19T18:25:49Z | 2020-07-19T18:25:49Z |
| opensuse-su-2020:1011-1 | Security update for singularity | 2020-07-19T12:26:15Z | 2020-07-19T12:26:15Z |
| opensuse-su-2020:1007-1 | Security update for ntp | 2020-07-19T08:27:16Z | 2020-07-19T08:27:16Z |
| opensuse-su-2020:1005-1 | Security update for pdns-recursor | 2020-07-19T08:26:57Z | 2020-07-19T08:26:57Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-11065 | D-Link DI-7003GV2 /H5/state_view.data文件信息泄露漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-11064 | D-Link DI-7003GV2 /H5/restart.asp文件拒绝服务漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-11063 | D-Link DI-7003GV2 /H5/webgl.data文件信息泄露漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10952 | D-Link DI-7003GV2 /H5/netconfig.asp文件授权问题漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10951 | D-Link DI-7003GV2 /H5/get_version.data文件信息泄露漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10950 | D-Link DI-7003GV2 /H5/backup.asp文件拒绝服务漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10949 | D-Link DCS-932L /sbin/udev文件缓冲区溢出漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10948 | D-Link DCS-932L /sbin/ucp文件缓冲区溢出漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10947 | D-Link DCS-932L /bin/gpio文件缓冲区溢出漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10946 | D-Link DAP-2695 /adv_macbypass.php文件跨站脚本漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10945 | D-Link DAP-2695 /adv_dhcps.php文件跨站脚本漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10944 | D-Link DAP-2695 /adv_arpspoofing.php文件跨站脚本漏洞 | 2025-05-22 | 2025-05-29 |
| cnvd-2025-10943 | D-Link DI-8100命令注入漏洞 | 2025-05-23 | 2025-05-29 |
| cnvd-2025-10942 | TOTOLINK CA600-PoE CloudSrvUserdataVersionCheck函数svn参数命令注入漏洞 | 2025-05-14 | 2025-05-29 |
| cnvd-2025-10941 | TOTOLINK CA600-PoE CloudSrvUserdataVersionCheck函数magicid参数命令注入漏洞 | 2025-05-14 | 2025-05-29 |
| cnvd-2025-10940 | TOTOLINK A3002R命令注入漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10939 | TOTOLINK A3002R formMapDelDevice接口macstr参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10938 | TOTOLINK A3002R formMapDelDevice接口bandstr参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10937 | TOTOLINK A3002R formIpv6Setup接口缓冲区溢出漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10936 | TOTOLINK N150RT Virtual Server Page组件跨站脚本漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10935 | TOTOLINK N150RT URL Filtering Page组件跨站脚本漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10934 | TOTOLINK A950RG命令执行漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10933 | TOTOLINK A950RG /lib/cste_modules/system.so文件缓冲区溢出漏洞 | 2025-05-20 | 2025-05-29 |
| cnvd-2025-10914 | Fuji Electric Monitouch V-SFT V8文件解析越界写代码执行漏洞 | 2024-12-03 | 2025-05-29 |
| cnvd-2025-10902 | ZTE GoldenDB未授权访问漏洞（CNVD-2025-10902） | 2025-03-14 | 2025-05-29 |
| cnvd-2025-10901 | ZTE GoldenDB未授权访问漏洞 | 2025-03-14 | 2025-05-29 |
| cnvd-2025-10900 | ZTE GoldenDB权限提升漏洞 | 2025-03-14 | 2025-05-29 |
| cnvd-2025-10879 | ZTE GoldenDB访问控制错误漏洞 | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10858 | ZTE GoldenDB信息泄露漏洞 | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10857 | ZTE GoldenDB输入验证漏洞 | 2025-04-30 | 2025-05-29 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2016-avi-254 | Multiples vulnérabilités dans Wireshark | 2016-07-28T00:00:00.000000 | 2016-07-28T00:00:00.000000 |
| certfr-2016-avi-253 | Vulnérabilité dans Google Chrome | 2016-07-27T00:00:00.000000 | 2016-07-27T00:00:00.000000 |
| certfr-2016-avi-252 | Multiples vulnérabilités dans Xen | 2016-07-26T00:00:00.000000 | 2016-07-27T00:00:00.000000 |
| certfr-2016-avi-251 | Multiples vulnérabilités dans PHP | 2016-07-25T00:00:00.000000 | 2016-07-25T00:00:00.000000 |
| certfr-2016-avi-250 | Multiples vulnérabilités dans SCADA les produits Siemens | 2016-07-25T00:00:00.000000 | 2016-07-25T00:00:00.000000 |
| certfr-2016-avi-249 | Vulnérabilité dans SCADA Schneider SoMachine HVAC Programming SW | 2016-07-21T00:00:00.000000 | 2016-07-21T00:00:00.000000 |
| certfr-2016-avi-248 | Vulnérabilité dans Cisco Unified Computing System Performance Manager | 2016-07-21T00:00:00.000000 | 2016-07-21T00:00:00.000000 |
| certfr-2016-avi-247 | Multiples vulnérabilités dans Google Chrome | 2016-07-21T00:00:00.000000 | 2016-07-21T00:00:00.000000 |
| certfr-2016-avi-246 | Multiples vulnérabilités dans Oracle MySQL | 2016-07-20T00:00:00.000000 | 2016-07-20T00:00:00.000000 |
| certfr-2016-avi-245 | Multiples vulnérabilités dans Oracle Linux and Virtualization | 2016-07-20T00:00:00.000000 | 2016-07-20T00:00:00.000000 |
| certfr-2016-avi-244 | Multiples vulnérabilités dans Oracle Sun Systems Products Suite | 2016-07-20T00:00:00.000000 | 2016-07-20T00:00:00.000000 |
| certfr-2016-avi-243 | Multiples vulnérabilités dans Oracle Java SE | 2016-07-20T00:00:00.000000 | 2016-07-20T00:00:00.000000 |
| certfr-2016-avi-242 | Multiples vulnérabilités dans Oracle Database Server | 2016-07-20T00:00:00.000000 | 2016-07-20T00:00:00.000000 |
| certfr-2016-avi-241 | Multiples vulnérabilités dans Moodle | 2016-07-19T00:00:00.000000 | 2016-07-19T00:00:00.000000 |
| certfr-2016-avi-240 | Vulnérabilité dans Drupal | 2016-07-19T00:00:00.000000 | 2016-07-19T00:00:00.000000 |
| certfr-2016-avi-239 | Multiples vulnérabilités dans les produits Apple | 2016-07-19T00:00:00.000000 | 2016-07-19T00:00:00.000000 |
| certfr-2016-avi-238 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2016-07-15T00:00:00.000000 | 2016-07-15T00:00:00.000000 |
| certfr-2016-avi-237 | Vulnérabilité dans les produits BlueCoat | 2016-07-15T00:00:00.000000 | 2016-07-15T00:00:00.000000 |
| certfr-2016-avi-236 | Multiples vulnérabilités dans Juniper Junos OS | 2016-07-15T00:00:00.000000 | 2016-07-15T00:00:00.000000 |
| certfr-2016-avi-235 | Multiples vulnérabilités dans les produits Cisco | 2016-07-15T00:00:00.000000 | 2016-07-15T00:00:00.000000 |
| certfr-2016-avi-234 | Multiples vulnérabilités dans Adobe Flash Player | 2016-07-13T00:00:00.000000 | 2016-07-13T00:00:00.000000 |
| certfr-2016-avi-233 | Multiples vulnérabilités dans Adobe Acrobat et Reader | 2016-07-13T00:00:00.000000 | 2016-07-13T00:00:00.000000 |
| certfr-2016-avi-232 | Vulnérabilité dans Microsoft .NET Framework | 2016-07-12T00:00:00.000000 | 2016-07-12T00:00:00.000000 |
| certfr-2016-avi-231 | Multiples vulnérabilités dans Microsoft Office | 2016-07-12T00:00:00.000000 | 2016-07-12T00:00:00.000000 |
| certfr-2016-avi-230 | Multiples vulnérabilités dans Microsoft Windows | 2016-07-12T00:00:00.000000 | 2016-07-12T00:00:00.000000 |
| certfr-2016-avi-229 | Multiples vulnérabilités dans Microsoft Edge | 2016-07-12T00:00:00.000000 | 2016-07-12T00:00:00.000000 |
| certfr-2016-avi-228 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2016-07-12T00:00:00.000000 | 2016-07-12T00:00:00.000000 |
| certfr-2016-avi-227 | Multiples vulnérabilités dans Google Android (Nexus) | 2016-07-11T00:00:00.000000 | 2016-07-11T00:00:00.000000 |
| certfr-2016-avi-226 | Vulnérabilité dans Samba | 2016-07-08T00:00:00.000000 | 2016-07-08T00:00:00.000000 |
| certfr-2016-avi-225 | Multiples vulnérabilités dans SCADA Siemens SICAM PAS | 2016-07-04T00:00:00.000000 | 2016-07-04T00:00:00.000000 |