Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-59009 |
4.3 (3.1)
|
WordPress Listify theme <= 3.2.5 - Cross Site Request … |
Astoundify |
Listify |
2025-12-16T08:12:46.981Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59007 |
8.1 (3.1)
|
WordPress TF Woo Product Grid Addon For Elementor Plug… |
themesflat |
TF Woo Product Grid Addon For Elementor |
2025-10-22T14:32:37.108Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59004 |
7.1 (3.1)
|
WordPress WC Return products plugin <= 1.5 - Reflected… |
pco_58 |
WC Return products |
2025-10-22T14:32:36.724Z | 2026-01-20T14:28:11.343Z |
| CVE-2025-59135 |
5.9 (3.1)
|
WordPress Behance Portfolio Manager plugin <= 1.7.5 - … |
eLEOPARD |
Behance Portfolio Manager |
2025-12-31T17:20:09.618Z | 2026-01-20T14:28:11.342Z |
| CVE-2025-59130 |
4.3 (3.1)
|
WordPress Appointify plugin <= 1.0.8 - Cross Site Requ… |
Appointify |
Appointify |
2025-12-31T16:06:06.815Z | 2026-01-20T14:28:11.342Z |
| CVE-2025-59131 |
7.1 (3.1)
|
WordPress WP-CalDav2ICS plugin <= 1.3.4 - Cross Site R… |
Hoernerfranz |
WP-CalDav2ICS |
2025-12-30T22:55:32.248Z | 2026-01-20T14:28:11.341Z |
| CVE-2025-58986 |
6.5 (3.1)
|
WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Bro… |
ganddser |
Jock On Air Now (JOAN) |
2025-11-06T15:54:30.961Z | 2026-01-20T14:28:11.341Z |
| CVE-2025-59578 |
5.8 (3.1)
|
WordPress ShopMagic plugin <= 4.5.6 - Sensitive Data E… |
wpdesk |
ShopMagic |
2025-10-22T14:32:39.044Z | 2026-01-20T14:28:11.336Z |
| CVE-2025-59579 |
7.5 (3.1)
|
WordPress Simple Job Board plugin <= 2.13.7 - Sensitiv… |
PressTigers |
Simple Job Board |
2025-10-22T14:32:39.279Z | 2026-01-20T14:28:11.320Z |
| CVE-2025-59575 |
5 (3.1)
|
WordPress MasterStudy LMS plugin <= 3.6.20 - Sensitive… |
Stylemix |
MasterStudy LMS |
2025-10-22T14:32:38.795Z | 2026-01-20T14:28:11.315Z |
| CVE-2025-59564 |
8.1 (3.1)
|
WordPress EduMall Theme < 4.4.5 - Local File Inclusion… |
ThemeMove |
EduMall |
2025-10-22T14:32:38.200Z | 2026-01-20T14:28:11.299Z |
| CVE-2025-59571 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin < 1.7.06 - Cross Site … |
purethemes |
WorkScout-Core |
2025-10-22T14:32:38.590Z | 2026-01-20T14:28:11.294Z |
| CVE-2025-59566 |
7.6 (3.1)
|
WordPress Workreap (theme's plugin) plugin <= 3.3.5 - … |
AmentoTech |
Workreap (theme's plugin) |
2025-10-22T14:32:38.405Z | 2026-01-20T14:28:11.286Z |
| CVE-2025-59557 |
9.3 (3.1)
|
WordPress Learts Addons Plugin < 1.7.5 - SQL Injection… |
ThemeMove |
Learts Addons |
2025-10-22T14:32:37.757Z | 2026-01-20T14:28:11.268Z |
| CVE-2025-59558 |
8.1 (3.1)
|
WordPress Billey Theme < 2.1.6 - Local File Inclusion … |
ThemeMove |
Billey |
2025-10-22T14:32:37.987Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58949 |
8.1 (3.1)
|
WordPress Spock theme <= 1.17 - Local File Inclusion v… |
axiomthemes |
Spock |
2025-12-18T07:21:59.396Z | 2026-01-20T14:28:11.191Z |
| CVE-2025-58961 |
7.1 (3.1)
|
WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cro… |
kamleshyadav |
CF7 Auto Responder Addon |
2025-10-22T14:32:35.382Z | 2026-01-20T14:28:11.176Z |
| CVE-2025-59556 |
7.1 (3.1)
|
WordPress GoStore theme < 1.6.4 - Cross Site Scripting… |
skygroup |
GoStore |
2025-11-06T15:54:38.990Z | 2026-01-20T14:28:11.161Z |
| CVE-2025-59555 |
8.1 (3.1)
|
WordPress Medizin Theme < 1.9.7 - Local File Inclusion… |
ThemeMove |
Medizin |
2025-10-22T14:32:37.531Z | 2026-01-20T14:28:11.126Z |
| CVE-2025-59550 |
8.1 (3.1)
|
WordPress Xcare theme < 6.5 - Local File Inclusion vul… |
designervily |
Xcare |
2025-10-22T14:32:37.298Z | 2026-01-20T14:28:11.108Z |
| CVE-2025-58964 |
7.1 (3.1)
|
WordPress Enzy theme < 1.6.4 - Cross Site Scripting (X… |
skygroup |
Enzy |
2025-11-06T15:54:29.627Z | 2026-01-20T14:28:11.081Z |
| CVE-2025-58955 |
8.1 (3.1)
|
WordPress Karzo theme < 2.6 - Local File Inclusion vul… |
designervily |
Karzo |
2025-10-22T14:32:34.802Z | 2026-01-20T14:28:11.075Z |
| CVE-2025-58963 |
9.8 (3.1)
|
WordPress Medcity theme < 1.1.9 - Arbitrary File Uploa… |
7oroof |
Medcity |
2025-10-22T14:32:35.581Z | 2026-01-20T14:28:11.047Z |
| CVE-2025-58972 |
7.2 (3.1)
|
WordPress Barcode Scanner with Inventory & Order Manag… |
Dmitry V. (CEO of "UKR Solution") |
Barcode Scanner with Inventory & Order Manager |
2025-11-06T15:54:30.300Z | 2026-01-20T14:28:11.032Z |
| CVE-2025-58995 |
8.1 (3.1)
|
WordPress Leblix Theme <= 2.4 - Local File Inclusion V… |
Creatives_Planet |
Leblix |
2025-11-06T15:54:33.654Z | 2026-01-20T14:28:11.026Z |
| CVE-2025-58959 |
7.6 (3.1)
|
WordPress Taskbot plugin <= 6.4 - Arbitrary File Delet… |
AmentoTech |
Taskbot |
2025-10-22T14:32:35.198Z | 2026-01-20T14:28:11.013Z |
| CVE-2025-58966 |
7.1 (3.1)
|
WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scr… |
Basix |
NEX-Forms LITE |
2025-10-22T14:32:35.821Z | 2026-01-20T14:28:10.996Z |
| CVE-2025-58970 |
6.5 (3.1)
|
WordPress Doctreat theme <= 1.6.7 - Content Injection … |
AmentoTech |
Doctreat |
2025-10-22T14:32:36.243Z | 2026-01-20T14:28:10.994Z |
| CVE-2025-58967 |
8.2 (3.1)
|
WordPress Businext theme < 2.4.4 - Local File Inclusio… |
ThemeMove |
Businext |
2025-10-22T14:32:36.057Z | 2026-01-20T14:28:10.994Z |
| CVE-2025-58950 |
8.1 (3.1)
|
WordPress Lione theme <= 1.16 - Local File Inclusion v… |
axiomthemes |
Lione |
2025-12-18T07:21:59.566Z | 2026-01-20T14:28:10.857Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62048 |
5.4 (3.1)
|
WordPress SmartCrawl plugin <= 3.14.3 - Broken Access … |
WPMU DEV - Your All-in-One WordPress Platform |
SmartCrawl |
2025-10-22T14:32:51.617Z | 2026-01-20T14:28:14.203Z |
| CVE-2025-62047 |
9.9 (3.1)
|
WordPress Case Addons plugin < 1.3.0 - Arbitrary File … |
Case-Themes |
Case Addons |
2025-11-06T15:55:43.609Z | 2026-01-20T14:28:13.952Z |
| CVE-2025-62046 |
6.5 (3.1)
|
WordPress TheGem Demo Import (for WPBakery) plugin <= … |
CodexThemes |
TheGem Demo Import (for WPBakery) |
2025-11-06T15:55:42.909Z | 2026-01-20T14:28:13.538Z |
| CVE-2025-62045 |
8.1 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:41.551Z | 2026-01-20T14:28:13.819Z |
| CVE-2025-62044 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for WPBakery) plugin … |
CodexThemes |
TheGem Theme Elements (for WPBakery) |
2025-11-06T15:55:39.461Z | 2026-01-20T14:28:14.135Z |
| CVE-2025-62042 |
6.5 (3.1)
|
WordPress Event post plugin <= 5.10.3 - Cross Site Scr… |
Bastien Ho |
Event post |
2025-10-22T14:32:51.413Z | 2026-01-20T14:28:13.802Z |
| CVE-2025-62041 |
7.1 (3.1)
|
WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross… |
CodexThemes |
TheGem (Elementor) |
2025-11-06T15:55:38.770Z | 2026-01-20T14:28:13.398Z |
| CVE-2025-62040 |
7.1 (3.1)
|
WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scrip… |
YOP |
YOP Poll |
2025-11-06T15:55:38.092Z | 2026-01-20T14:28:13.427Z |
| CVE-2025-62039 |
7.5 (3.1)
|
WordPress AI ChatBot with ChatGPT and Content Generato… |
Ays Pro |
AI ChatBot with ChatGPT and Content Generator by AYS |
2025-11-06T15:55:37.380Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62038 |
6.5 (3.1)
|
WordPress MeetingHub plugin <= 1.23.9 - Sensitive Data… |
Sovlix |
MeetingHub |
2025-11-06T15:55:36.094Z | 2026-01-20T14:28:13.390Z |
| CVE-2025-62037 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:34.720Z | 2026-01-20T14:28:13.293Z |
| CVE-2025-62036 |
7.1 (3.1)
|
WordPress Togo theme < 1.0.4 - Cross Site Scripting (X… |
uxper |
Togo |
2025-11-06T15:55:32.766Z | 2026-01-20T14:28:13.319Z |
| CVE-2025-62035 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - PHP Object Injection vu… |
uxper |
Togo |
2025-11-06T15:55:31.398Z | 2026-01-20T14:28:13.288Z |
| CVE-2025-62034 |
8.8 (3.1)
|
WordPress Togo theme < 1.0.4 - Privilege Escalation vu… |
uxper |
Togo |
2025-11-06T15:55:30.572Z | 2026-01-20T14:28:13.109Z |
| CVE-2025-62033 |
6.5 (3.1)
|
WordPress Togo theme < 1.0.4 - Broken Access Control v… |
uxper |
Togo |
2025-11-06T15:55:29.843Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62032 |
6.5 (3.1)
|
WordPress tagDiv Cloud Library plugin < 3.9.2 - Cross … |
tagDiv |
tagDiv Cloud Library |
2025-11-06T15:55:29.230Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62031 |
7.1 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:28.516Z | 2026-01-20T14:28:13.050Z |
| CVE-2025-62030 |
6.5 (3.1)
|
WordPress tagDiv Composer plugin <= 5.4.1 - Cross Site… |
tagDiv |
tagDiv Composer |
2025-11-06T15:55:27.866Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62029 |
8.1 (3.1)
|
WordPress Grevo theme <= 2.4 - Local File Inclusion vu… |
themesion |
Grevo |
2025-10-22T14:32:51.220Z | 2026-01-20T14:28:13.045Z |
| CVE-2025-62028 |
4.3 (3.1)
|
WordPress Salient theme < 17.4.0 - Broken Access Contr… |
ThemeNectar |
Salient |
2025-11-06T15:55:27.077Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62027 |
5.4 (3.1)
|
WordPress Event Tickets plugin <= 5.26.3 - Broken Acce… |
StellarWP |
Event Tickets |
2025-10-22T14:32:51.014Z | 2026-01-20T14:28:13.042Z |
| CVE-2025-62026 |
4.3 (3.1)
|
WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Da… |
Blockspare |
Blockspare |
2025-10-22T14:32:50.799Z | 2026-01-20T14:28:13.037Z |
| CVE-2025-62025 |
9.8 (3.1)
|
WordPress JobSearch plugin < 3.0.8 - PHP Object Inject… |
eyecix |
JobSearch |
2025-10-22T14:32:50.582Z | 2026-01-20T14:28:13.040Z |
| CVE-2025-62024 |
6.5 (3.1)
|
WordPress Pie Calendar plugin <= 1.2.9 - Cross Site Sc… |
Jonathan Jernigan |
Pie Calendar |
2025-10-22T14:32:50.360Z | 2026-01-20T14:28:13.043Z |
| CVE-2025-62023 |
9.8 (3.1)
|
WordPress s2Member plugin <= 250905 - Remote Code Exec… |
Cristián Lávaque |
s2Member |
2025-10-22T14:32:50.026Z | 2026-01-20T14:28:13.041Z |
| CVE-2025-62022 |
7.5 (3.1)
|
WordPress BuddyPress plugin <= 14.3.4 - Broken Access … |
BuddyPress |
BuddyPress |
2025-10-22T14:32:49.815Z | 2026-01-20T14:28:13.037Z |
| CVE-2025-62021 |
4.3 (3.1)
|
WordPress Acknowledgify plugin <= 1.1.3 - Broken Acces… |
Made Neat |
Acknowledgify |
2025-10-22T14:32:49.606Z | 2026-01-20T14:28:13.041Z |
| CVE-2025-62020 |
7.1 (3.1)
|
WordPress VOD Infomaniak plugin <= 1.5.11 - Cross Site… |
Infomaniak Network |
VOD Infomaniak |
2025-10-22T14:32:49.407Z | 2026-01-20T14:28:13.039Z |
| CVE-2025-62019 |
6.5 (3.1)
|
WordPress Recipe Card Blocks for Gutenberg & Elementor… |
WPZOOM |
Recipe Card Blocks for Gutenberg & Elementor |
2025-10-22T14:32:49.208Z | 2026-01-20T14:28:13.056Z |
| CVE-2025-62018 |
5.3 (3.1)
|
WordPress Kallyas theme <= 4.22.0 - Broken Access Cont… |
hogash |
Kallyas |
2025-11-06T15:55:26.361Z | 2026-01-20T14:28:13.058Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62028 | Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from… | 2025-11-06T16:16:08.857 | 2026-01-20T15:17:41.293 |
| fkie_cve-2025-62027 | Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Eve… | 2025-10-22T15:16:04.160 | 2026-01-20T15:17:41.163 |
| fkie_cve-2025-62026 | Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare… | 2025-10-22T15:16:04.037 | 2026-01-20T15:17:41.030 |
| fkie_cve-2025-62025 | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects… | 2025-10-22T15:16:03.913 | 2026-01-20T15:17:40.880 |
| fkie_cve-2025-62024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:03.797 | 2026-01-20T15:17:40.720 |
| fkie_cve-2025-62023 | Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Membe… | 2025-10-22T15:16:03.667 | 2026-01-20T15:17:40.567 |
| fkie_cve-2025-62022 | Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPre… | 2025-10-22T15:16:03.547 | 2026-01-20T15:17:40.413 |
| fkie_cve-2025-62021 | Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Ack… | 2025-10-22T15:16:03.423 | 2026-01-20T15:17:40.270 |
| fkie_cve-2025-62020 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:03.300 | 2026-01-20T15:17:40.120 |
| fkie_cve-2025-62019 | Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-c… | 2025-10-22T15:16:03.163 | 2026-01-20T15:17:39.963 |
| fkie_cve-2025-62018 | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T16:16:08.713 | 2026-01-20T15:17:39.830 |
| fkie_cve-2025-62017 | Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a … | 2025-11-06T16:16:08.567 | 2026-01-20T15:17:39.687 |
| fkie_cve-2025-62016 | Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue … | 2025-11-06T16:16:08.420 | 2026-01-20T15:17:39.533 |
| fkie_cve-2025-62015 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-10-22T15:16:03.040 | 2026-01-20T15:17:39.387 |
| fkie_cve-2025-62014 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:08.290 | 2026-01-20T15:17:39.253 |
| fkie_cve-2025-62013 | Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/… | 2025-10-22T15:16:02.910 | 2026-01-20T15:17:39.100 |
| fkie_cve-2025-62012 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:08.130 | 2026-01-20T15:17:38.950 |
| fkie_cve-2025-62011 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:16:07.970 | 2026-01-20T15:17:38.807 |
| fkie_cve-2025-62010 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:07.820 | 2026-01-20T15:17:38.667 |
| fkie_cve-2025-62009 | Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN C… | 2025-10-22T15:16:02.780 | 2026-01-20T15:17:38.517 |
| fkie_cve-2025-62008 | Deserialization of Untrusted Data vulnerability in acowebs Product Table For WooCommerce product-ta… | 2025-10-22T15:16:02.650 | 2026-01-20T15:17:38.360 |
| fkie_cve-2025-62007 | Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privi… | 2025-10-22T15:16:02.530 | 2026-01-20T15:17:38.210 |
| fkie_cve-2025-62006 | Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a… | 2025-10-22T15:16:02.407 | 2026-01-20T15:17:38.057 |
| fkie_cve-2025-62005 | Cross-Site Request Forgery (CSRF) vulnerability in FantasticPlugins SUMO Memberships for WooCommerc… | 2025-10-22T15:16:02.287 | 2026-01-20T15:17:37.890 |
| fkie_cve-2025-60248 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:16:07.667 | 2026-01-20T15:17:37.750 |
| fkie_cve-2025-60247 | Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functio… | 2025-11-06T16:16:07.520 | 2026-01-20T15:17:37.607 |
| fkie_cve-2025-60246 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:16:00.497 | 2026-01-20T15:17:37.450 |
| fkie_cve-2025-60245 | Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager … | 2025-11-06T16:16:07.360 | 2026-01-20T15:17:37.307 |
| fkie_cve-2025-60244 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Real… | 2025-11-06T16:16:07.217 | 2026-01-20T15:17:37.167 |
| fkie_cve-2025-60243 | Incorrect Privilege Assignment vulnerability in Holest Engineering Selling Commander for WooCommerc… | 2025-11-06T16:16:07.070 | 2026-01-20T15:17:37.027 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-w8gf-92gc-cx36 |
4.7 (3.1)
|
Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM … | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-mg77-v38f-9pm9 |
8.1 (3.1)
|
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-jm7g-m582-79q7 |
3.8 (3.1)
|
Due to insufficient input handling, the SAP Identity Management REST interface allows an authentica… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-jjvw-w74f-45qh |
8.1 (3.1)
|
SAP Fiori App Intercompany Balance Reconciliation does not perform necessary authorization checks f… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-cv7h-78v9-r3jf |
3.0 (3.1)
|
The User Management Engine (UME) in NetWeaver Application Server for Java (NW AS Java) utilizes an … | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-4x3m-wqv7-c7h3 |
8.4 (3.1)
|
Due to an OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver R… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-4772-pjcp-2xfr |
6.4 (3.1)
|
Due to missing authorization check in the SAP ERP Central Component (SAP ECC) and SAP S/4HANA (SAP … | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-3mmv-v6g2-g7c6 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Acc… | 2026-01-13T03:32:09Z | 2026-01-13T03:32:09Z |
| ghsa-xwwh-3hfg-5c8w |
9.9 (3.1)
|
Due to insufficient input validation in SAP S/4HANA Private Cloud and On-Premise (Financials Genera… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-x2gq-6c9p-44p8 |
4.3 (3.1)
|
Due to a Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App Intercompany Balance Reco… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-wjx9-27x5-jwmf |
9.1 (3.1)
|
SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-jmwc-hm8x-6w23 |
6.1 (3.1)
|
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-9m57-5mv3-fjx3 |
9.6 (3.1)
|
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (Wor… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-6xvr-96w9-f64h |
4.3 (3.1)
|
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an at… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-67mq-54j2-cv5m |
8.8 (3.1)
|
SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-5j28-xwjp-v5gv |
6.6 (3.1)
|
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to uploa… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-5429-v87q-pg8h |
5.1 (3.1)
|
SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send … | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-4p53-w5pc-f48w |
9.1 (3.1)
|
SAP S/4HANA (Private Cloud and On-Premise) allows an attacker with admin privileges to exploit a vu… | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-2qp6-v7mh-v798 |
4.3 (3.1)
|
SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users … | 2026-01-13T03:32:08Z | 2026-01-13T03:32:08Z |
| ghsa-x7h6-xxfr-j6pv |
4.8 (4.0)
|
TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in th… | 2026-01-13T00:30:46Z | 2026-01-13T00:30:46Z |
| ghsa-f2p8-hh36-r2r8 |
9.8 (3.1)
|
Multiple SQL Injection vulnerabilities exist in amansuryawanshi Gym-Management-System-PHP 1.0 via t… | 2026-01-12T21:30:34Z | 2026-01-13T00:30:46Z |
| ghsa-hvj6-2w8w-j3wj |
9.4 (3.1)
|
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'n… | 2026-01-13T00:30:45Z | 2026-01-13T00:30:45Z |
| ghsa-xfhq-47hp-mvcx |
9.1 (3.1)
|
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, … | 2026-01-12T21:30:34Z | 2026-01-12T21:30:35Z |
| ghsa-x4r4-f558-hvh7 |
9.8 (3.1)
|
Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE (Remote Code Execution). Th… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-vgc8-whvm-22v4 |
5.4 (3.1)
|
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-p54q-9gfq-fvp4 |
3.1 (3.1)
|
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-g579-x2p7-hjfv |
5.4 (3.1)
|
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execut… | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-9g5v-hmcj-pxrc |
10.0 (3.1)
|
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 … | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-7v52-p3w5-3m2m |
8.2 (3.1)
|
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-5c5p-g26h-xx2f |
7.5 (3.1)
|
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improp… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-2061 | A vulnerability classified as critical was found in SourceCodester Petrol Pump Management… | 2024-03-02T06:02:28.493910Z |
| gsd-2024-2091 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scri… | 2024-03-02T06:02:28.493611Z |
| gsd-2024-2111 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulne… | 2024-03-02T06:02:28.491424Z |
| gsd-2024-2060 | A vulnerability classified as critical has been found in SourceCodester Petrol Pump Manag… | 2024-03-02T06:02:28.490739Z |
| gsd-2024-2104 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.489250Z |
| gsd-2024-2114 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.489039Z |
| gsd-2024-2100 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.488261Z |
| gsd-2024-2126 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2024-03-02T06:02:28.488057Z |
| gsd-2024-2116 | The Christmas Greetings plugin for WordPress is vulnerable to Reflected Cross-Site Script… | 2024-03-02T06:02:28.487854Z |
| gsd-2024-2075 | A vulnerability was found in SourceCodester Daily Habit Tracker 1.0. It has been declared… | 2024-03-02T06:02:28.486464Z |
| gsd-2024-2089 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.486160Z |
| gsd-2024-2105 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.485952Z |
| gsd-2024-2058 | A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has b… | 2024-03-02T06:02:28.484987Z |
| gsd-2024-2124 | The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable t… | 2024-03-02T06:02:28.483418Z |
| gsd-2024-2102 | The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and esc… | 2024-03-02T06:02:28.483141Z |
| gsd-2024-2101 | The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and esc… | 2024-03-02T06:02:28.482830Z |
| gsd-2024-2084 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.482487Z |
| gsd-2024-2070 | A vulnerability classified as problematic was found in SourceCodester FAQ Management Syst… | 2024-03-02T06:02:28.480666Z |
| gsd-2024-2082 | The format of the source doesn't require a description, click on the link for more details. | 2024-03-02T06:02:28.478700Z |
| gsd-2024-2108 | The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress plugin for Wo… | 2024-03-02T06:02:28.478224Z |
| gsd-2024-2086 | The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and M… | 2024-03-02T06:02:28.477702Z |
| gsd-2024-2121 | The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site… | 2024-03-02T06:02:28.477132Z |
| gsd-2024-2067 | A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been de… | 2024-03-02T06:02:28.474794Z |
| gsd-2024-2123 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restri… | 2024-03-02T06:02:28.474471Z |
| gsd-2024-2115 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Re… | 2024-03-02T06:02:28.474259Z |
| gsd-2024-2120 | The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vul… | 2024-03-02T06:02:28.474044Z |
| gsd-2024-2074 | A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This i… | 2024-03-02T06:02:28.472855Z |
| gsd-2024-2132 | The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Store… | 2024-03-02T06:02:28.472224Z |
| gsd-2024-2106 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPr… | 2024-03-02T06:02:28.471582Z |
| gsd-2024-2076 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been ra… | 2024-03-02T06:02:28.470926Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-187317 | Malicious code in helios-fusion-rollup-command (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187316 | Malicious code in helios-epigenetics-asteroid-eclipse (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187315 | Malicious code in helios-cressida-biogeochemistry-halley (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187314 | Malicious code in helios-centaurus-juno-lint-staged (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187313 | Malicious code in heliophysics-pino-umbriel-request (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187312 | Malicious code in heliophysics-blackhole-ganymede-cluster (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187311 | Malicious code in heliophysics-aurora-lint-staged-global (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187310 | Malicious code in heka-zenobia-pyxis-mui (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187309 | Malicious code in heka-relay-grunt-gammarayburst (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187308 | Malicious code in heka-puppeteer-phoebe-meteor (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187307 | Malicious code in heka-neptune-nightwatch-andromeda (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187306 | Malicious code in heka-mdx-kaus-indus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187305 | Malicious code in heka-markdownlint-rollup-node-config (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187304 | Malicious code in heka-centaurus-nodemon-hydrogeology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187303 | Malicious code in heka-buffer-install-transform (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187302 | Malicious code in heka-buffer-holography-subduction (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187301 | Malicious code in heka-bootstrap-javascript-loopback (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187300 | Malicious code in heka-antares-vulcan-commitizen (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187299 | Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187298 | Malicious code in hawkingradiation-volcanology-npm-delphinus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187297 | Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187296 | Malicious code in hawkingradiation-ora-celeste-toml (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187295 | Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187294 | Malicious code in hawkingradiation-jupiter-toml-comet (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187293 | Malicious code in hawkingradiation-jupiter-morgan-equinox (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187292 | Malicious code in hawkingradiation-flare-hydrogeology-quito (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187291 | Malicious code in hawkingradiation-eslint-mantle-lyra (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187290 | Malicious code in hawkingradiation-carina-oortcloud-gammarayburst (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187289 | Malicious code in hawkingradiation-backend-farout-despina (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-187288 | Malicious code in hawkingradiation-aether-mesosphere-loopback (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-2435 | Trellix Endpoint Security: Schwachstelle ermöglicht Denial of Service oder Codeausführung | 2023-09-24T22:00:00.000+00:00 | 2023-09-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2433 | Elasticsearch: Schwachstelle ermöglicht Denial of Service | 2023-09-24T22:00:00.000+00:00 | 2023-09-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2431 | Microsoft GitHub Enterprise: Schwachstelle ermöglicht Darstellen falscher Informationen | 2023-09-24T22:00:00.000+00:00 | 2023-09-24T22:00:00.000+00:00 |
| wid-sec-w-2023-2430 | Intel Driver and Support Assistant: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2023-09-21T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2427 | Apple iOS: Mehrere Schwachstellen | 2023-09-21T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2426 | QNAP NAS: Schwachstelle ermöglicht Codeausführung | 2023-09-21T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2424 | Apple Safari: Schwachstelle ermöglicht Codeausführung | 2023-09-21T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2422 | D-LINK Router: Mehrere Schwachstellen | 2023-09-21T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2209 | Webmin: Schwachstelle ermöglicht Cross-Site Scripting | 2023-08-29T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2204 | Tenable Security Nessus: Mehrere Schwachstellen | 2023-08-29T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-1591 | IBM MQ: Schwachstelle ermöglicht Denial of Service | 2023-06-28T22:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-0660 | WithSecure Endpoint Protection: Schwachstelle ermöglicht Denial of Service | 2023-03-14T23:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-0616 | WithSecure Produkte: Schwachstelle ermöglicht Denial of Service | 2023-03-09T23:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-0612 | WithSecure Produkte: Schwachstelle ermöglicht Denial of Service | 2023-03-09T23:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-0606 | WithSecure Produkte: Mehrere Schwachstellen | 2023-03-08T23:00:00.000+00:00 | 2023-09-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2419 | D-Link DI-7200GV2: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2418 | Synology Router Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2417 | Progress Software MOVEit: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2414 | OpenBSD: Schwachstelle ermöglicht Denial of Service | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2413 | D-LINK Access Points DWL-6610: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2411 | Jenkins: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2408 | OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-09-05T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2407 | OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-12-01T23:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2406 | OpenSC: Schwachstelle ermöglicht Codeausführung | 2020-04-28T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2404 | OpenSC: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-10-05T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2403 | QT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-03-02T23:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2400 | Acronis Cyber Protect Home Office: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-09-20T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2341 | Red Hat OpenShift: Schwachstelle ermöglicht Codeausführung | 2023-09-13T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2297 | Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-09-10T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| wid-sec-w-2023-0619 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2021-06-10T22:00:00.000+00:00 | 2023-09-20T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0427 | Red Hat Security Advisory: libtasn1 security update | 2024-01-25T08:14:15+00:00 | 2025-12-26T15:31:44+00:00 |
| rhsa-2024:0413 | Red Hat Security Advisory: libxml2 security update | 2024-01-25T08:35:03+00:00 | 2025-12-26T15:31:43+00:00 |
| rhsa-2023:5627 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-10-10T16:31:57+00:00 | 2025-12-26T15:31:32+00:00 |
| rhsa-2023:4814 | Red Hat Security Advisory: kernel-rt security and bug fix update | 2023-08-29T09:22:52+00:00 | 2025-12-26T15:29:35+00:00 |
| rhsa-2023:4767 | Red Hat Security Advisory: libxml2 security update | 2023-08-28T13:05:32+00:00 | 2025-12-26T15:29:34+00:00 |
| rhsa-2023:1866 | Red Hat Security Advisory: OpenShift Container Platform 4.10.58 security update | 2023-04-26T05:35:35+00:00 | 2025-12-26T15:29:34+00:00 |
| rhsa-2023:4801 | Red Hat Security Advisory: kernel security and bug fix update | 2023-08-29T09:24:43+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:4022 | Red Hat Security Advisory: kernel security and bug fix update | 2023-07-11T07:57:38+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:1524 | Red Hat Security Advisory: OpenShift Container Platform 4.9.59 security update | 2023-04-05T23:30:39+00:00 | 2025-12-26T15:29:33+00:00 |
| rhsa-2023:6372 | Red Hat Security Advisory: gdb security update | 2023-11-07T08:48:54+00:00 | 2025-12-26T15:29:32+00:00 |
| rhsa-2023:4023 | Red Hat Security Advisory: kpatch-patch security update | 2023-07-11T07:58:03+00:00 | 2025-12-26T15:29:32+00:00 |
| rhsa-2023:3195 | Red Hat Security Advisory: jenkins and jenkins-2-plugins security update | 2023-05-18T13:01:08+00:00 | 2025-12-26T15:29:31+00:00 |
| rhsa-2023:3557 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-06-09T19:47:27+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:3388 | Red Hat Security Advisory: kernel security, bug fix, and enhancement update | 2023-05-31T15:57:57+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:3229 | Red Hat Security Advisory: openshift-gitops-kam security update | 2023-05-18T15:55:21+00:00 | 2025-12-26T15:29:29+00:00 |
| rhsa-2023:1192 | Red Hat Security Advisory: kpatch-patch security update | 2023-03-13T14:21:14+00:00 | 2025-12-26T15:29:28+00:00 |
| rhsa-2023:0858 | Red Hat Security Advisory: kpatch-patch security update | 2023-02-21T10:06:23+00:00 | 2025-12-26T15:29:27+00:00 |
| rhsa-2023:0814 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2023-02-20T12:40:17+00:00 | 2025-12-26T15:29:27+00:00 |
| rhsa-2023:2903 | Red Hat Security Advisory: php:7.4 security update | 2023-05-16T09:08:21+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:2898 | Red Hat Security Advisory: libtar security update | 2023-05-16T08:23:01+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:2417 | Red Hat Security Advisory: php:8.1 security update | 2023-05-09T10:02:31+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:1095 | Red Hat Security Advisory: zlib security update | 2023-03-07T10:03:15+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:0848 | Red Hat Security Advisory: php:8.0 security update | 2023-02-21T09:35:47+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:0499 | Red Hat Security Advisory: kpatch-patch security update | 2023-01-30T14:35:43+00:00 | 2025-12-26T15:29:25+00:00 |
| rhsa-2023:0965 | Red Hat Security Advisory: php security update | 2023-02-28T08:28:01+00:00 | 2025-12-26T15:29:24+00:00 |
| rhsa-2023:0976 | Red Hat Security Advisory: zlib security update | 2023-02-28T08:14:19+00:00 | 2025-12-26T15:29:23+00:00 |
| rhsa-2023:1130 | Red Hat Security Advisory: kernel security and bug fix update | 2023-03-07T14:00:38+00:00 | 2025-12-26T15:29:22+00:00 |
| rhsa-2023:0980 | Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Bug fix and security update | 2023-02-28T10:09:04+00:00 | 2025-12-26T15:29:21+00:00 |
| rhsa-2023:0975 | Red Hat Security Advisory: zlib security update | 2023-02-28T08:14:13+00:00 | 2025-12-26T15:29:21+00:00 |
| rhsa-2023:0943 | Red Hat Security Advisory: zlib security update | 2023-02-28T08:09:22+00:00 | 2025-12-26T15:29:21+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-43789 | Libxpm: out of bounds read on xpm with corrupted colormap | 2023-10-01T00:00:00.000Z | 2023-10-17T00:00:00.000Z |
| msrc_cve-2023-43788 | Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer() | 2023-10-01T00:00:00.000Z | 2023-10-17T00:00:00.000Z |
| msrc_cve-2023-41765 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-16T07:00:00.000Z |
| msrc_cve-2023-36417 | Microsoft SQL OLE DB Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-16T07:00:00.000Z |
| msrc_cve-2023-45143 | Undici's cookie header not cleared on cross-origin redirect in fetch | 2023-10-01T00:00:00.000Z | 2023-10-16T00:00:00.000Z |
| msrc_cve-2023-43787 | Libx11: integer overflow in xcreateimage() leading to a heap overflow | 2023-10-01T00:00:00.000Z | 2023-10-16T00:00:00.000Z |
| msrc_cve-2023-43786 | Libx11: stack exhaustion from infinite recursion in putsubimage() | 2023-10-01T00:00:00.000Z | 2023-10-16T00:00:00.000Z |
| msrc_cve-2023-43785 | Libx11: out-of-bounds memory access in _xkbreadkeysyms() | 2023-10-01T00:00:00.000Z | 2023-10-16T00:00:00.000Z |
| msrc_cve-2023-36415 | Azure Identity SDK Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-13T07:00:00.000Z |
| msrc_cve-2023-36414 | Azure Identity SDK Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-13T07:00:00.000Z |
| msrc_cve-2023-29343 | SysInternals Sysmon for Windows Elevation of Privilege Vulnerability | 2023-05-09T07:00:00.000Z | 2023-10-12T07:00:00.000Z |
| msrc_cve-2022-41113 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | 2022-11-08T08:00:00.000Z | 2023-10-12T07:00:00.000Z |
| msrc_cve-2023-42755 | Kernel: rsvp: out-of-bounds read in rsvp_classify() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-42754 | Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-39194 | Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-39193 | Kernel: netfilter: xtables sctp out-of-bounds read in match_flags() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-39192 | Kernel: netfilter: xtables out-of-bounds read in u32_match_it() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-39189 | Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() | 2023-10-01T00:00:00.000Z | 2023-10-12T00:00:00.000Z |
| msrc_cve-2023-36785 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-11T07:00:00.000Z |
| msrc_cve-2023-36730 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-11T07:00:00.000Z |
| msrc_cve-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-11T07:00:00.000Z |
| msrc_cve-2023-28304 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability | 2023-04-11T07:00:00.000Z | 2023-10-11T07:00:00.000Z |
| msrc_cve-2023-23375 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability | 2023-04-11T07:00:00.000Z | 2023-10-11T07:00:00.000Z |
| msrc_cve-2023-40217 | An issue was discovered in Python before 3.8.18 3.9.x before 3.9.18 3.10.x before 3.10.13 and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created receives data into the socket buffer and then is closed quickly there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.) | 2023-08-01T00:00:00.000Z | 2023-10-11T00:00:00.000Z |
| msrc_cve-2023-39191 | Kernel: ebpf: insufficient stack type checks in dynptr | 2023-10-01T00:00:00.000Z | 2023-10-11T00:00:00.000Z |
| msrc_cve-2023-25661 | Denial of Service in TensorFlow | 2023-03-10T00:00:00.000Z | 2023-10-11T00:00:00.000Z |
| msrc_cve-2023-24329 | An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. | 2023-02-01T00:00:00.000Z | 2023-10-11T00:00:00.000Z |
| msrc_cve-2023-41774 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-10T07:00:00.000Z |
| msrc_cve-2023-41773 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-10T07:00:00.000Z |
| msrc_cve-2023-41772 | Win32k Elevation of Privilege Vulnerability | 2023-10-10T07:00:00.000Z | 2023-10-10T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201704-0597 | An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Acc… | 2025-04-20T23:13:12.881000Z |
| var-201704-0596 | A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouc… | 2025-04-20T23:13:12.845000Z |
| var-201704-0598 | An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware I… | 2025-04-20T23:13:12.809000Z |
| var-201704-0638 | F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote a… | 2025-04-20T23:13:12.784000Z |
| var-201704-0974 | An exploitable null pointer dereference vulnerability exists in the Web Application /form… | 2025-04-20T23:13:12.434000Z |
| var-201704-1016 | A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI … | 2025-04-20T23:13:12.399000Z |
| var-201704-1017 | A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI E… | 2025-04-20T23:13:12.363000Z |
| var-201704-1331 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(… | 2025-04-20T23:13:11.889000Z |
| var-201704-1541 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly lo… | 2025-04-20T23:13:11.741000Z |
| var-201705-1683 | A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocad… | 2025-04-20T23:13:11.583000Z |
| var-201705-3258 | A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and pri… | 2025-04-20T23:13:07.476000Z |
| var-201705-3655 | A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.23… | 2025-04-20T23:13:07.100000Z |
| var-201705-3739 | A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could … | 2025-04-20T23:13:07.016000Z |
| var-201705-3761 | A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 b… | 2025-04-20T23:13:06.981000Z |
| var-201705-3759 | A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version … | 2025-04-20T23:13:06.944000Z |
| var-201705-3760 | An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa… | 2025-04-20T23:13:06.907000Z |
| var-201705-4094 | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote auth… | 2025-04-20T23:13:06.451000Z |
| var-201706-0111 | In Lenovo Service Bridge before version 4, a user with local privileges on a system could… | 2025-04-20T23:13:06.325000Z |
| var-201706-0114 | In Lenovo Service Bridge before version 4, a bug found in the signature verification logi… | 2025-04-20T23:13:06.300000Z |
| var-201706-0112 | A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 coul… | 2025-04-20T23:13:06.272000Z |
| var-201706-0113 | In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to … | 2025-04-20T23:13:06.247000Z |
| var-201706-0471 | A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. T… | 2025-04-20T23:13:05.739000Z |
| var-201706-0555 | A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an… | 2025-04-20T23:13:05.650000Z |
| var-201706-0576 | A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an… | 2025-04-20T23:13:05.620000Z |
| var-201706-0660 | A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analy… | 2025-04-20T23:13:05.532000Z |
| var-201706-0765 | The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 conta… | 2025-04-20T23:13:05.419000Z |
| var-201707-0300 | The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and rest… | 2025-04-20T23:13:04.647000Z |
| var-201707-0322 | WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or … | 2025-04-20T23:13:04.618000Z |
| var-201707-0321 | Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary com… | 2025-04-20T23:13:04.587000Z |
| var-201707-0320 | WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspec… | 2025-04-20T23:13:04.558000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:4409-1 | Security update for containerd | 2022-12-12T08:49:56Z | 2022-12-12T08:49:56Z |
| suse-su-2022:4398-1 | Security update for go1.18 | 2022-12-09T14:59:49Z | 2022-12-09T14:59:49Z |
| suse-su-2022:4397-1 | Security update for go1.19 | 2022-12-09T14:59:31Z | 2022-12-09T14:59:31Z |
| suse-su-2022:4395-1 | Security update for samba | 2022-12-09T10:03:00Z | 2022-12-09T10:03:00Z |
| suse-su-2022:4394-1 | Security update for nautilus | 2022-12-09T10:01:53Z | 2022-12-09T10:01:53Z |
| suse-su-2022:4393-1 | Security update for nautilus | 2022-12-09T10:01:24Z | 2022-12-09T10:01:24Z |
| suse-su-2022:4378-1 | Security update for rabbitmq-server | 2022-12-08T17:34:15Z | 2022-12-08T17:34:15Z |
| suse-su-2022:4373-1 | Security update for java-1_8_0-openjdk | 2022-12-08T16:20:52Z | 2022-12-08T16:20:52Z |
| suse-su-2022:4372-1 | Security update for busybox | 2022-12-08T16:20:13Z | 2022-12-08T16:20:13Z |
| suse-su-2022:4371-1 | Security update for busybox | 2022-12-08T16:19:54Z | 2022-12-08T16:19:54Z |
| suse-ru-2022:4362-1 | Recommended update for pdsh, slurm_22_05 | 2022-12-08T15:13:06Z | 2022-12-08T15:13:06Z |
| suse-ru-2022:4361-1 | Recommended update for pdsh, slurm_22_05 | 2022-12-08T15:12:03Z | 2022-12-08T15:12:03Z |
| suse-su-2022:4360-1 | Security update for netatalk | 2022-12-08T14:54:17Z | 2022-12-08T14:54:17Z |
| suse-su-2022:15116-1 | Security update for rubygem-actionpack-3_2 | 2022-12-08T13:02:42Z | 2022-12-08T13:02:42Z |
| suse-su-2022:4351-1 | Security update for osc | 2022-12-07T16:38:34Z | 2022-12-07T16:38:34Z |
| suse-su-2022:4350-1 | Security update for buildah | 2022-12-07T15:16:30Z | 2022-12-07T15:16:30Z |
| suse-su-2022:4349-1 | Security update for buildah | 2022-12-07T15:15:59Z | 2022-12-07T15:15:59Z |
| suse-ru-2022:4348-1 | Recommended update for pdsh, slurm_22_05 | 2022-12-07T11:59:47Z | 2022-12-07T11:59:47Z |
| suse-su-2022:4335-1 | Security update for krb5 | 2022-12-06T15:03:12Z | 2022-12-06T15:03:12Z |
| suse-su-2022:4334-1 | Security update for MozillaThunderbird | 2022-12-06T15:02:06Z | 2022-12-06T15:02:06Z |
| suse-su-2022:4332-1 | Security update for xen | 2022-12-06T13:25:17Z | 2022-12-06T13:25:17Z |
| suse-su-2022:4331-1 | Security update for bcel | 2022-12-06T12:34:27Z | 2022-12-06T12:34:27Z |
| suse-su-2022:4330-1 | Security update for LibVNCServer | 2022-12-06T12:34:17Z | 2022-12-06T12:34:17Z |
| suse-su-2022:4310-1 | Security update for emacs | 2022-12-02T09:17:07Z | 2022-12-02T09:17:07Z |
| suse-su-2022:4309-1 | Security update for busybox | 2022-12-01T19:42:15Z | 2022-12-01T19:42:15Z |
| suse-su-2022:4308-1 | Security update for virt-v2v | 2022-12-01T14:51:23Z | 2022-12-01T14:51:23Z |
| suse-su-2022:4306-1 | Security update for bcel | 2022-12-01T08:27:18Z | 2022-12-01T08:27:18Z |
| suse-su-2022:4305-1 | Security update for emacs | 2022-12-01T08:12:40Z | 2022-12-01T08:12:40Z |
| suse-su-2022:4304-1 | Security update for emacs | 2022-12-01T08:12:07Z | 2022-12-01T08:12:07Z |
| suse-su-2022:4303-1 | Security update for tomcat | 2022-12-01T08:11:38Z | 2022-12-01T08:11:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2020:1003-1 | Security update for cairo | 2020-07-19T04:27:05Z | 2020-07-19T04:27:05Z |
| opensuse-su-2020:1002-1 | Security update for python-ipaddress | 2020-07-18T22:27:00Z | 2020-07-18T22:27:00Z |
| opensuse-su-2020:1001-1 | Security update for rubygem-puma | 2020-07-18T18:27:45Z | 2020-07-18T18:27:45Z |
| opensuse-su-2020:0999-1 | Security update for xrdp | 2020-07-18T16:28:54Z | 2020-07-18T16:28:54Z |
| opensuse-su-2020:0997-1 | Security update for openconnect | 2020-07-18T16:28:21Z | 2020-07-18T16:28:21Z |
| opensuse-su-2020:0996-1 | Security update for google-compute-engine | 2020-07-18T16:28:09Z | 2020-07-18T16:28:09Z |
| opensuse-su-2020:0994-1 | Security update for slirp4netns | 2020-07-18T16:27:50Z | 2020-07-18T16:27:50Z |
| opensuse-su-2020:0990-1 | Security update for rubygem-puma | 2020-07-18T12:27:28Z | 2020-07-18T12:27:28Z |
| opensuse-su-2020:0989-1 | Security update for python-ipaddress | 2020-07-18T12:27:14Z | 2020-07-18T12:27:14Z |
| opensuse-su-2020:0988-1 | Security update for LibVNCServer | 2020-07-18T12:27:09Z | 2020-07-18T12:27:09Z |
| opensuse-su-2020:0987-1 | Security update for slirp4netns | 2020-07-18T10:27:33Z | 2020-07-18T10:27:33Z |
| opensuse-su-2020:0985-1 | Security update for xen | 2020-07-17T22:28:33Z | 2020-07-17T22:28:33Z |
| opensuse-su-2020:0984-1 | Security update for samba | 2020-07-17T22:28:26Z | 2020-07-17T22:28:26Z |
| opensuse-su-2020:0983-1 | Security update for MozillaFirefox | 2020-07-17T16:32:24Z | 2020-07-17T16:32:24Z |
| opensuse-su-2020:0982-1 | Security update for MozillaThunderbird | 2020-07-17T16:30:17Z | 2020-07-17T16:30:17Z |
| opensuse-su-2020:0978-1 | Security update for LibVNCServer | 2020-07-17T16:29:39Z | 2020-07-17T16:29:39Z |
| opensuse-su-2020:0976-1 | Security update for openldap2 | 2020-07-17T16:29:26Z | 2020-07-17T16:29:26Z |
| opensuse-su-2020:0935-1 | Security update for the Linux Kernel | 2020-07-16T15:02:53Z | 2020-07-16T15:02:53Z |
| opensuse-su-2020:0970-1 | Security update for openexr | 2020-07-16T10:49:58Z | 2020-07-16T10:49:58Z |
| opensuse-su-2020:0967-1 | Security update for MozillaThunderbird | 2020-07-15T12:42:49Z | 2020-07-15T12:42:49Z |
| opensuse-su-2020:0965-1 | Security update for xen | 2020-07-15T12:42:14Z | 2020-07-15T12:42:14Z |
| opensuse-su-2020:0960-1 | Security update for LibVNCServer | 2020-07-14T04:27:36Z | 2020-07-14T04:27:36Z |
| opensuse-su-2020:0958-1 | Security update for hylafax+ | 2020-07-14T04:27:24Z | 2020-07-14T04:27:24Z |
| opensuse-su-2020:0957-1 | Security update for permissions | 2020-07-14T04:27:19Z | 2020-07-14T04:27:19Z |
| opensuse-su-2020:0956-1 | Security update for openldap2 | 2020-07-14T04:27:13Z | 2020-07-14T04:27:13Z |
| opensuse-su-2020:0955-1 | Security update for mozilla-nss | 2020-07-13T16:28:37Z | 2020-07-13T16:28:37Z |
| opensuse-su-2020:0954-1 | Security update for nasm | 2020-07-13T14:30:22Z | 2020-07-13T14:30:22Z |
| opensuse-su-2020:0953-1 | Security update for mozilla-nss | 2020-07-13T14:30:16Z | 2020-07-13T14:30:16Z |
| opensuse-su-2020:0952-1 | Security update for nasm | 2020-07-13T14:30:07Z | 2020-07-13T14:30:07Z |
| opensuse-su-2020:0950-1 | Security update for opera | 2020-07-10T06:38:05Z | 2020-07-10T06:38:05Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-10856 | ZTE GoldenDB拒绝服务漏洞 | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10855 | ZTE GoldenDB DDE注入漏洞 | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10854 | ZTE GoldenDB SQL注入漏洞（CNVD-2025-10854） | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10853 | ZTE GoldenDB SQL注入漏洞 | 2025-04-30 | 2025-05-29 |
| cnvd-2025-10832 | Fuji Electric Monitouch V-SFT V10文件解析缓冲区溢出漏洞 | 2024-12-03 | 2025-05-29 |
| cnvd-2025-10831 | Fuji Electric Monitouch V-SFT X1文件解析越界写代码执行漏洞 | 2024-12-03 | 2025-05-29 |
| cnvd-2025-10830 | Fuji Electric Monitouch V-SFT V9C文件解析越界写代码执行漏洞 | 2024-12-03 | 2025-05-29 |
| cnvd-2025-10829 | Fuji Electric Monitouch V-SFT V8文件解析堆栈缓冲区溢出漏洞 | 2024-12-03 | 2025-05-29 |
| cnvd-2025-10681 | Huawei EMUI和HarmonyOS访问控制不当漏洞 | 2024-12-20 | 2025-05-29 |
| cnvd-2025-10680 | Huawei EMUI和HarmonyOS MTP模块访问控制不当漏洞 | 2024-12-20 | 2025-05-29 |
| cnvd-2025-10679 | Huawei EMUI和HarmonyOS文件替换漏洞 | 2024-12-20 | 2025-05-29 |
| cnvd-2025-10677 | Huawei EMUI和HarmonyOS权限绕过漏洞 | 2025-03-11 | 2025-05-29 |
| cnvd-2025-11483 | Samsung SMR堆缓冲区溢出漏洞 | 2022-08-10 | 2025-05-28 |
| cnvd-2025-11450 | Rockwell Automation PowerMonitor 1000跨站脚本漏洞 | 2023-07-14 | 2025-05-28 |
| cnvd-2025-11098 | Huawei HarmonyOS权限绕过漏洞 | 2025-04-18 | 2025-05-28 |
| cnvd-2025-11087 | Huawei HarmonyOS缓冲区溢出漏洞（CNVD-2025-11087） | 2025-04-18 | 2025-05-28 |
| cnvd-2025-11086 | Huawei HarmonyOS缓冲区溢出漏洞 | 2025-04-18 | 2025-05-28 |
| cnvd-2025-11085 | Huawei HarmonyOS路径遍历漏洞 | 2025-04-18 | 2025-05-28 |
| cnvd-2025-11080 | Huawei HarmonyOS越界读写漏洞 | 2025-05-09 | 2025-05-28 |
| cnvd-2025-11079 | Huawei HarmonyOS权限控制不当漏洞 | 2025-05-13 | 2025-05-28 |
| cnvd-2025-11078 | Huawei HarmonyOS权限问题漏洞 | 2025-05-13 | 2025-05-28 |
| cnvd-2025-11077 | Huawei HarmonyOS未授权访问漏洞（CNVD-2025-11077） | 2025-05-13 | 2025-05-28 |
| cnvd-2025-11076 | Huawei HarmonyOS进程驻留漏洞 | 2025-05-13 | 2025-05-28 |
| cnvd-2025-11075 | Huawei HarmonyOS越界读取漏洞 | 2025-05-13 | 2025-05-28 |
| cnvd-2025-10932 | TOTOLINK NR1800X setWiFiGuestCfg函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-28 |
| cnvd-2025-10923 | TOTOLINK NR1800X setWiFiEasyGuestCfg函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-28 |
| cnvd-2025-10922 | TOTOLINK NR1800X setWiFiEasyCfg函数ssid5g参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-28 |
| cnvd-2025-10921 | TOTOLINK NR1800X setWiFiBasicCfg函数ssid参数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-28 |
| cnvd-2025-10920 | TOTOLINK NR1800X setSmsCfg函数缓冲区溢出漏洞 | 2025-05-20 | 2025-05-28 |
| cnvd-2025-10919 | TOTOLINK N300RH url参数命令注入漏洞 | 2025-05-22 | 2025-05-28 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2016-avi-224 | Multiples vulnérabilités dans les produits Cisco | 2016-07-04T00:00:00.000000 | 2016-07-04T00:00:00.000000 |
| certfr-2016-avi-223 | Vulnérabilité dans Armadito Antivirus | 2016-06-30T00:00:00.000000 | 2016-06-30T00:00:00.000000 |
| certfr-2016-avi-222 | Multiples vulnérabilités dans les produits Symantec | 2016-06-29T00:00:00.000000 | 2016-06-29T00:00:00.000000 |
| certfr-2016-avi-221 | Vulnérabilité dans LibreOffice | 2016-06-29T00:00:00.000000 | 2016-06-29T00:00:00.000000 |
| certfr-2016-avi-220 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2016-06-28T00:00:00.000000 | 2016-06-28T00:00:00.000000 |
| certfr-2016-avi-219 | Vulnérabilité dans Blue Coat PacketShaper S-Series | 2016-06-27T00:00:00.000000 | 2016-06-27T00:00:00.000000 |
| certfr-2016-avi-218 | Vulnérabilité dans Trend Micro Deep Discovery Inspector | 2016-06-23T00:00:00.000000 | 2016-06-23T00:00:00.000000 |
| certfr-2016-avi-217 | Vulnérabilité dans Citrix XenMobile MDX Toolkit et Worx Home | 2016-06-23T00:00:00.000000 | 2016-06-23T00:00:00.000000 |
| certfr-2016-avi-216 | Vulnérabilité dans Apple Airport | 2016-06-22T00:00:00.000000 | 2016-06-22T00:00:00.000000 |
| certfr-2016-avi-215 | Multiples vulnérabilités dans WordPress | 2016-06-22T00:00:00.000000 | 2016-06-22T00:00:00.000000 |
| certfr-2016-avi-214 | Multiples vulnérabilités dans Google Chrome | 2016-06-17T00:00:00.000000 | 2016-06-17T00:00:00.000000 |
| certfr-2016-avi-213 | Multiples vulnérabilités dans Adobe Flash Player | 2016-06-16T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-avi-212 | Vulnérabilité dans SCADA Schneider Electric Pelco Digital Sentry Video Management System | 2016-06-16T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-avi-211 | Vulnérabilité dans Citrix iOS Receiver | 2016-06-16T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-avi-210 | Multiples vulnérabilités dans Drupal Core | 2016-06-16T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-avi-209 | Multiples vulnérabilités dans les produits Cisco | 2016-06-16T00:00:00.000000 | 2016-06-16T00:00:00.000000 |
| certfr-2016-avi-208 | Vulnérabilité dans Microsoft Active Directory | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-207 | Multiples vulnérabilités dans Microsoft Exchange Server | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-206 | Multiples vulnérabilités dans Microsoft Windows | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-205 | Multiples vulnérabilités dans Microsoft Word | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-204 | Multiples vulnérabilités dans Microsoft Edge | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-203 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-202 | Vulnérabilité dans VMware vCenter Server | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-201 | Vulnérabilité dans Adobe ColdFusion | 2016-06-15T00:00:00.000000 | 2016-06-15T00:00:00.000000 |
| certfr-2016-avi-200 | Multiples vulnérabilités dans Keepass 2 | 2016-06-14T00:00:00.000000 | 2016-06-14T00:00:00.000000 |
| certfr-2016-avi-199 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2016-06-10T00:00:00.000000 | 2016-06-10T00:00:00.000000 |
| certfr-2016-avi-198 | Multiples vulnérabilités dans les produits VMware | 2016-06-10T00:00:00.000000 | 2016-06-10T00:00:00.000000 |
| certfr-2016-avi-197 | Vulnérabilité dans Citrix Xenserver | 2016-06-10T00:00:00.000000 | 2016-06-10T00:00:00.000000 |
| certfr-2016-avi-196 | Multiples vulnérabilités dans SCADA les produits Siemens | 2016-06-10T00:00:00.000000 | 2016-06-10T00:00:00.000000 |
| certfr-2016-avi-195 | Multiples vulnérabilités dans PHP | 2016-06-09T00:00:00.000000 | 2016-06-09T00:00:00.000000 |