Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-13717 |
5.3 (3.1)
|
Contact Form vCard Generator <= 2.4 - Missing Authoriz… |
ashishajani |
Contact Form vCard Generator |
2026-01-09T11:15:34.501Z | 2026-01-09T11:15:34.501Z |
| CVE-2025-13704 |
6.4 (3.1)
|
Autogen Headers Menu <= 1.0.1 - Authenticated (Contrib… |
amirshk |
Autogen Headers Menu |
2026-01-09T11:15:34.128Z | 2026-01-09T11:15:34.128Z |
| CVE-2025-13892 |
6.1 (3.1)
|
MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting |
mountaingrafix |
MG AdvancedOptions |
2026-01-09T11:15:33.718Z | 2026-01-09T11:15:33.718Z |
| CVE-2025-13897 |
6.4 (3.1)
|
Client Testimonial Slider <= 2.0 - Authenticated (Cont… |
amu02aftab |
Client Testimonial Slider |
2026-01-09T11:15:33.126Z | 2026-01-09T11:15:33.126Z |
| CVE-2025-13854 |
6.4 (3.1)
|
Curved Text <= 0.1 - Authenticated (Contributor+) Stor… |
soniz |
Curved Text |
2026-01-09T11:15:32.678Z | 2026-01-09T11:15:32.678Z |
| CVE-2025-13701 |
6.1 (3.1)
|
Shabat Keeper <= 0.4.4 - Reflected Cross-Site Scriptin… |
beshkin |
Shabat Keeper |
2026-01-09T11:15:32.224Z | 2026-01-09T11:15:32.224Z |
| CVE-2025-13903 |
6.4 (3.1)
|
PullQuote <= 1.0 - Authenticated (Contributor+) Stored… |
ctietze |
PullQuote |
2026-01-09T11:15:30.170Z | 2026-01-09T11:15:30.170Z |
| CVE-2026-0675 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-08T09:17:55.328Z | 2026-01-09T11:01:28.445Z |
| CVE-2025-40361 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-16T13:40:00.758Z | 2026-01-09T10:24:39.469Z |
| CVE-2025-64093 |
10 (3.1)
|
Unauthenticated Remote Code Execution via the device h… |
Zenitel |
ICX500 |
2026-01-09T10:04:58.207Z | 2026-01-09T10:04:58.207Z |
| CVE-2025-9222 |
8.7 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2026-01-09T10:04:36.272Z | 2026-01-09T10:04:36.272Z |
| CVE-2025-10569 |
6.5 (3.1)
|
Allocation of Resources Without Limits or Throttling i… |
GitLab |
GitLab |
2026-01-09T10:04:26.275Z | 2026-01-09T10:04:26.275Z |
| CVE-2025-11246 |
5.4 (3.1)
|
Insufficient Granularity of Access Control in GitLab |
GitLab |
GitLab |
2026-01-09T10:04:21.283Z | 2026-01-09T10:04:21.283Z |
| CVE-2025-13772 |
7.1 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-01-09T10:04:06.293Z | 2026-01-09T10:04:06.293Z |
| CVE-2025-13761 |
8 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2026-01-09T10:04:01.331Z | 2026-01-09T10:04:01.331Z |
| CVE-2025-13781 |
6.5 (3.1)
|
Missing Authorization in GitLab |
GitLab |
GitLab |
2026-01-09T10:03:51.554Z | 2026-01-09T10:03:51.554Z |
| CVE-2025-64092 |
7.5 (3.1)
|
Unauthenticated SQL injection via GET request parameters |
Zenitel |
ICX500 |
2026-01-09T10:03:49.853Z | 2026-01-09T10:03:49.853Z |
| CVE-2025-64091 |
8.6 (3.1)
|
Authenticated Remote Code Execution in the NTP-configuration |
Zenitel |
TCIS-3+ |
2026-01-09T10:00:45.414Z | 2026-01-09T10:00:45.414Z |
| CVE-2025-64090 |
10 (3.1)
|
Authenticated Remote Code Execution in device hostname |
Zenitel |
TCIS-3+ |
2026-01-09T09:59:58.839Z | 2026-01-09T09:59:58.839Z |
| CVE-2024-10771 |
8.8 (3.1)
|
SICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx… |
SICK AG |
SICK InspectorP61x |
2024-12-06T12:24:40.610Z | 2026-01-09T09:42:13.798Z |
| CVE-2026-0733 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
PHPGurukul Online Course Registration System manage-st… |
PHPGurukul |
Online Course Registration System |
2026-01-08T23:32:13.020Z | 2026-01-09T09:40:26.886Z |
| CVE-2025-13895 |
6.1 (3.1)
|
Top Position Google Finance <= 0.1.0 - Reflected Cross… |
top-position |
Top Position Google Finance |
2026-01-09T09:19:48.081Z | 2026-01-09T09:19:48.081Z |
| CVE-2025-13900 |
6.4 (3.1)
|
WP Popup Magic <= 1.0.0 - Authenticated (Contributor+)… |
themelocation |
WP Popup Magic |
2026-01-09T09:19:47.637Z | 2026-01-09T09:19:47.637Z |
| CVE-2025-13853 |
6.4 (3.1)
|
Nearby Now Reviews <= 5.2 - Authenticated (Contributor… |
lnbadmin1 |
Nearby Now Reviews |
2026-01-09T09:19:47.232Z | 2026-01-09T09:19:47.232Z |
| CVE-2025-13729 |
6.4 (3.1)
|
Entry Views <= 1.0.0 - Authenticated (Contributor+) St… |
greenshady |
Entry Views |
2026-01-09T09:19:46.607Z | 2026-01-09T09:19:46.607Z |
| CVE-2025-12543 |
9.6 (3.1)
|
Undertow-core: undertow http server fails to reject ma… |
Red Hat |
Red Hat JBoss Enterprise Application Platform 8.1 |
2026-01-07T16:04:22.155Z | 2026-01-09T09:14:00.512Z |
| CVE-2026-0627 |
6.4 (3.1)
|
AMP for WP <= 1.1.10 - Authenticated (Contributor+) St… |
mohammed_kaludi |
AMP for WP – Accelerated Mobile Pages |
2026-01-09T08:20:46.258Z | 2026-01-09T08:20:46.258Z |
| CVE-2024-9852 |
7.8 (3.1)
|
Malicious Code Execution Vulnerability in GENESIS64, I… |
Mitsubishi Electric Corporation |
GENESIS64 |
2024-11-28T22:20:28.303Z | 2026-01-09T07:54:57.307Z |
| CVE-2024-8300 |
7 (3.1)
|
Malicious Code Execution Vulnerability in GENESIS64 an… |
Mitsubishi Electric Corporation |
GENESIS64 |
2024-11-28T22:18:28.358Z | 2026-01-09T07:52:13.107Z |
| CVE-2024-8299 |
7.8 (3.1)
|
Malicious Code Execution Vulnerability in GENESIS64, I… |
Mitsubishi Electric Corporation |
GENESIS64 |
2024-11-28T22:16:31.396Z | 2026-01-09T07:42:09.258Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-9318 |
6.5 (3.1)
|
Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated… |
expresstech |
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker |
2026-01-06T09:20:59.146Z | 2026-01-06T14:01:14.390Z |
| CVE-2025-9294 |
4.3 (3.1)
|
Quiz And Survey Master <= 10.3.1 - Missing Authorizati… |
expresstech |
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker |
2026-01-06T08:21:49.006Z | 2026-01-06T14:30:11.854Z |
| CVE-2026-22082 |
8.8 (4.0)
|
Insecure Session ID Management Vulnerability in Tenda … |
Tenda |
300Mbps Wireless Router F3 and N300 Easy Setup Router |
2026-01-09T11:24:54.375Z | 2026-01-09T11:24:54.375Z |
| CVE-2026-22081 |
8.8 (4.0)
|
Cookie without HTTPOnly Flag Vulnerability in Tenda Wi… |
Tenda |
300Mbps Wireless Router F3 and N300 Easy Setup Router |
2026-01-09T11:16:21.780Z | 2026-01-09T11:16:21.780Z |
| CVE-2025-7072 |
9.3 (4.0)
|
Hardcoded credentials in KAON CG3000T/CG3000CT routers |
KAON |
CG3000T |
2026-01-09T11:30:24.672Z | 2026-01-09T11:30:24.672Z |
| CVE-2025-66052 |
8.6 (4.0)
|
Command injection in Vivotek IP7137 cameras |
Vivotek |
IP7137 |
2026-01-09T11:54:16.626Z | 2026-01-09T12:51:10.558Z |
| CVE-2025-66051 |
6.9 (4.0)
|
Path traversal in Vivotek IP7137 cameras |
Vivotek |
IP7137 |
2026-01-09T11:54:09.170Z | 2026-01-09T14:07:13.457Z |
| CVE-2025-66050 |
9.3 (4.0)
|
No password set for administrative account in Vivotek … |
Vivotek |
IP7137 |
2026-01-09T11:53:45.338Z | 2026-01-09T14:08:08.233Z |
| CVE-2025-66049 |
8.7 (4.0)
|
Unprotected RTSP stream in Vivotek IP7137 cameras |
Vivotek |
IP7137 |
2026-01-09T11:53:41.060Z | 2026-01-09T11:53:41.060Z |
| CVE-2025-14172 |
6.5 (3.1)
|
WP Page Permalink Extension <= 1.5.4 - Missing Authori… |
infosatech |
WP Page Permalink Extension |
2026-01-09T11:15:34.916Z | 2026-01-09T11:15:34.916Z |
| CVE-2025-13967 |
6.4 (3.1)
|
Woodpecker for WordPress <= 3.0.4 - Authenticated (Con… |
woodpeckerleadform |
Woodpecker for WordPress |
2026-01-09T11:15:31.734Z | 2026-01-09T14:47:19.902Z |
| CVE-2025-13908 |
6.4 (3.1)
|
The Tooltip <= 1.0.2 - Authenticated (Contributor+) St… |
alobaidi |
The Tooltip |
2026-01-09T11:15:35.698Z | 2026-01-09T11:15:35.698Z |
| CVE-2025-13903 |
6.4 (3.1)
|
PullQuote <= 1.0 - Authenticated (Contributor+) Stored… |
ctietze |
PullQuote |
2026-01-09T11:15:30.170Z | 2026-01-09T11:15:30.170Z |
| CVE-2025-13897 |
6.4 (3.1)
|
Client Testimonial Slider <= 2.0 - Authenticated (Cont… |
amu02aftab |
Client Testimonial Slider |
2026-01-09T11:15:33.126Z | 2026-01-09T11:15:33.126Z |
| CVE-2025-13893 |
6.1 (3.1)
|
Lesson Plan Book <= 1.3 - Reflected Cross-Site Scripting |
burtrw |
Lesson Plan Book |
2026-01-09T11:15:30.823Z | 2026-01-09T14:51:20.686Z |
| CVE-2025-13892 |
6.1 (3.1)
|
MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting |
mountaingrafix |
MG AdvancedOptions |
2026-01-09T11:15:33.718Z | 2026-01-09T11:15:33.718Z |
| CVE-2025-13862 |
6.4 (3.1)
|
Menu Card <= 0.8.0 - Authenticated (Contributor+) Stor… |
furqan-khanzada |
Menu Card |
2026-01-09T11:15:35.321Z | 2026-01-09T11:15:35.321Z |
| CVE-2025-13854 |
6.4 (3.1)
|
Curved Text <= 0.1 - Authenticated (Contributor+) Stor… |
soniz |
Curved Text |
2026-01-09T11:15:32.678Z | 2026-01-09T11:15:32.678Z |
| CVE-2025-13852 |
6.4 (3.1)
|
Debt.com Business in a Box <= 4.1.0 - Authenticated (C… |
debtcom |
Debt.com Business in a Box |
2026-01-09T11:15:31.249Z | 2026-01-09T14:48:04.310Z |
| CVE-2025-13717 |
5.3 (3.1)
|
Contact Form vCard Generator <= 2.4 - Missing Authoriz… |
ashishajani |
Contact Form vCard Generator |
2026-01-09T11:15:34.501Z | 2026-01-09T11:15:34.501Z |
| CVE-2025-13704 |
6.4 (3.1)
|
Autogen Headers Menu <= 1.0.1 - Authenticated (Contrib… |
amirshk |
Autogen Headers Menu |
2026-01-09T11:15:34.128Z | 2026-01-09T11:15:34.128Z |
| CVE-2025-13701 |
6.1 (3.1)
|
Shabat Keeper <= 0.4.4 - Reflected Cross-Site Scriptin… |
beshkin |
Shabat Keeper |
2026-01-09T11:15:32.224Z | 2026-01-09T11:15:32.224Z |
| CVE-2025-11453 |
6.4 (3.1)
|
Header and Footer Scripts <= 2.2.2 - Authenticated (Co… |
anand_kumar |
Header and Footer Scripts |
2026-01-09T11:15:36.142Z | 2026-01-09T11:15:36.142Z |
| CVE-2026-22080 |
8.7 (4.0)
|
Insecure Transmission Vulnerability in Tenda Wireless … |
Tenda |
300Mbps Wireless Router F3 and N300 Easy Setup Router |
2026-01-09T11:05:07.368Z | 2026-01-09T11:26:07.261Z |
| CVE-2026-22079 |
8.7 (4.0)
|
Cleartext Transmission Vulnerability in Tenda Wireless… |
Tenda |
300Mbps Wireless Router F3 and N300 Easy Setup Router |
2026-01-09T11:02:50.926Z | 2026-01-09T11:25:36.253Z |
| CVE-2026-0675 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-08T09:17:55.328Z | 2026-01-09T11:01:28.445Z |
| CVE-2025-40361 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2025-12-16T13:40:00.758Z | 2026-01-09T10:24:39.469Z |
| CVE-2026-0733 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
PHPGurukul Online Course Registration System manage-st… |
PHPGurukul |
Online Course Registration System |
2026-01-08T23:32:13.020Z | 2026-01-09T09:40:26.886Z |
| CVE-2025-9222 |
8.7 (3.1)
|
Improper Neutralization of Input During Web Page Gener… |
GitLab |
GitLab |
2026-01-09T10:04:36.272Z | 2026-01-09T10:04:36.272Z |
| CVE-2025-64093 |
10 (3.1)
|
Unauthenticated Remote Code Execution via the device h… |
Zenitel |
ICX500 |
2026-01-09T10:04:58.207Z | 2026-01-09T10:04:58.207Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-9294 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to… | 2026-01-06T09:15:55.077 | 2026-01-09T13:23:13.393 |
| fkie_cve-2026-22082 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:15:54.403 | 2026-01-09T12:15:54.403 |
| fkie_cve-2026-22081 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:15:54.260 | 2026-01-09T12:15:54.260 |
| fkie_cve-2025-7072 | The firmware in KAON CG3000TC and CG3000T routers contains hard-coded credentials in clear text (sh… | 2026-01-09T12:15:54.020 | 2026-01-09T12:15:54.020 |
| fkie_cve-2025-66052 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "sy… | 2026-01-09T12:15:53.883 | 2026-01-09T12:15:53.883 |
| fkie_cve-2025-66051 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… | 2026-01-09T12:15:53.740 | 2026-01-09T12:15:53.740 |
| fkie_cve-2025-66050 | Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any passwor… | 2026-01-09T12:15:53.587 | 2026-01-09T12:15:53.587 |
| fkie_cve-2025-66049 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to an information disclosure issue … | 2026-01-09T12:15:53.420 | 2026-01-09T12:15:53.420 |
| fkie_cve-2025-14172 | The WP Page Permalink Extension plugin for WordPress is vulnerable to Missing Authorization in all … | 2026-01-09T12:15:53.260 | 2026-01-09T12:15:53.260 |
| fkie_cve-2025-13967 | The Woodpecker for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … | 2026-01-09T12:15:53.103 | 2026-01-09T12:15:53.103 |
| fkie_cve-2025-13908 | The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … | 2026-01-09T12:15:52.950 | 2026-01-09T12:15:52.950 |
| fkie_cve-2025-13903 | The PullQuote plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'p… | 2026-01-09T12:15:52.800 | 2026-01-09T12:15:52.800 |
| fkie_cve-2025-13897 | The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:15:52.647 | 2026-01-09T12:15:52.647 |
| fkie_cve-2025-13893 | The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `… | 2026-01-09T12:15:52.493 | 2026-01-09T12:15:52.493 |
| fkie_cve-2025-13892 | The MG AdvancedOptions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… | 2026-01-09T12:15:52.347 | 2026-01-09T12:15:52.347 |
| fkie_cve-2025-13862 | The Menu Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `category` … | 2026-01-09T12:15:52.197 | 2026-01-09T12:15:52.197 |
| fkie_cve-2025-13854 | The Curved Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'radius' … | 2026-01-09T12:15:52.040 | 2026-01-09T12:15:52.040 |
| fkie_cve-2025-13852 | The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-09T12:15:51.890 | 2026-01-09T12:15:51.890 |
| fkie_cve-2025-13717 | The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data … | 2026-01-09T12:15:51.740 | 2026-01-09T12:15:51.740 |
| fkie_cve-2025-13704 | The Autogen Headers Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the … | 2026-01-09T12:15:51.583 | 2026-01-09T12:15:51.583 |
| fkie_cve-2025-13701 | The Shabat Keeper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SE… | 2026-01-09T12:15:51.430 | 2026-01-09T12:15:51.430 |
| fkie_cve-2025-11453 | The Header and Footer Scripts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:15:50.620 | 2026-01-09T12:15:50.620 |
| fkie_cve-2026-22080 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T11:15:51.150 | 2026-01-09T11:15:51.150 |
| fkie_cve-2026-22079 | This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T11:15:50.617 | 2026-01-09T11:15:50.617 |
| fkie_cve-2026-0675 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-08T10:15:55.043 | 2026-01-09T11:15:50.553 |
| fkie_cve-2025-40361 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-12-16T14:15:48.093 | 2026-01-09T11:15:49.827 |
| fkie_cve-2026-0733 | A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impa… | 2026-01-09T00:15:45.497 | 2026-01-09T10:15:47.203 |
| fkie_cve-2025-9222 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18… | 2026-01-09T10:15:47.037 | 2026-01-09T10:15:47.037 |
| fkie_cve-2025-64093 | Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary comma… | 2026-01-09T10:15:46.890 | 2026-01-09T10:15:46.890 |
| fkie_cve-2025-64092 | This vulnerability allows unauthenticated attackers to inject an SQL request into GET request param… | 2026-01-09T10:15:46.750 | 2026-01-09T10:15:46.750 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4873-9vgw-wq49 |
6.4 (3.1)
|
The Debt.com Business in a Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-22q2-ww3p-hj7f |
6.9 (4.0)
|
Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible f… | 2026-01-09T12:32:26Z | 2026-01-09T12:32:26Z |
| ghsa-xvvx-wf8m-v58j |
6.1 (3.1)
|
The Shabat Keeper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SE… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-vwwc-97q7-j4wg |
8.7 (4.0)
|
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-pf7q-gxvm-9794 |
10.0 (3.1)
|
Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary comma… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-p9cp-qq4c-2wr5 |
8.7 (3.1)
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.2 before 18.5.5, 18… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-p75v-9p9c-j9r7 |
10.0 (3.1)
|
This vulnerability allows authenticated attackers to execute commands via the hostname of the device. | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-mqvr-qq2m-5v38 |
8.7 (4.0)
|
This vulnerability exists in Tenda wireless routers (300Mbps Wireless Router F3 and N300 Easy Setup… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-mqrq-32jw-jfgw |
6.4 (3.1)
|
The Header and Footer Scripts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-fhqx-f9jv-667v |
7.5 (3.1)
|
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request param… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-f98m-rgjw-h2rv |
6.4 (3.1)
|
The WP Popup Magic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name'… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-6mpj-fw9g-9wqm |
3.5 (3.1)
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-29gv-cv9c-r93w |
8.6 (3.1)
|
This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of … | 2026-01-09T12:32:25Z | 2026-01-09T12:32:25Z |
| ghsa-xqqj-h3wv-qfx7 |
6.4 (3.1)
|
The Nearby Now Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'd… | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-qc3w-f7pj-hx87 |
6.1 (3.1)
|
The Top Position Google Finance plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin… | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-p7gw-xwgf-7w7c |
6.5 (3.1)
|
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.5.5, 18.6 be… | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-jxx7-c7v6-wh2p |
7.1 (3.1)
|
GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.5.5, 18.6 be… | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-8j38-6f9j-vg43 |
6.4 (3.1)
|
The Entry Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's … | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-3r2c-p78w-vg88 |
8.0 (3.1)
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.3, and … | 2026-01-09T12:32:24Z | 2026-01-09T12:32:24Z |
| ghsa-w2j6-r4xj-rjcj |
5.4 (3.1)
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6… | 2026-01-09T12:32:23Z | 2026-01-09T12:32:23Z |
| ghsa-rp7g-q3r4-jjjr |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impa… | 2026-01-09T00:30:28Z | 2026-01-09T12:32:23Z |
| ghsa-rh5v-9jwc-7736 |
6.5 (3.1)
|
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 … | 2026-01-09T12:32:23Z | 2026-01-09T12:32:23Z |
| ghsa-xqjx-hmf9-wj9v |
6.4 (3.1)
|
The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploa… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-vxqj-cqqr-q9rw |
7.2 (3.1)
|
The Eventin – Event Manager, Events Calendar, Event Tickets and Registrations plugin for WordPress … | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-v43w-wv28-g523 |
5.3 (3.1)
|
The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-q2gj-jpwc-8f46 |
7.6 (3.1)
|
A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the fil… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-gxfw-m8jc-p6cp |
7.2 (3.1)
|
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-gr9w-rm5h-x7gv |
4.3 (3.1)
|
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthor… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-842v-gv8w-xp7c |
5.9 (3.1)
8.2 (4.0)
|
Improper authorization vulnerability exists in RICOH Streamline NX 3.5.1 to 24R3. If a man-in-the-m… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ghsa-82jv-f4jx-8r27 |
8.8 (3.1)
|
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fail… | 2026-01-09T09:31:20Z | 2026-01-09T09:31:20Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2025-53 |
|
vLLM is an inference and serving engine for large language models (LLMs). Prior to versio… | vllm | 2025-05-29T17:15:21+00:00 | 2025-06-26T21:23:06.231251+00:00 |
| pysec-2025-51 |
|
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) v… | apache-airflow-providers-snowflake | 2025-06-24T08:15:24+00:00 | 2025-06-26T21:23:03.132527+00:00 |
| pysec-2025-50 |
|
vLLM, an inference and serving engine for large language models (LLMs), has a Regular Exp… | vllm | 2025-05-30T18:15:32+00:00 | 2025-06-19T03:02:28.572160+00:00 |
| pysec-2024-255 |
|
Gradio before 4.20 allows credential leakage on Windows. | gradio | 2024-05-05T20:15:07+00:00 | 2025-06-17T19:21:48.983901+00:00 |
| pysec-2024-254 |
4.2 (3.1)
|
A session fixation vulnerability exists in the zenml-io/zenml application, where JWT toke… | zenml | 2024-04-16T00:15:11+00:00 | 2025-06-13T00:48:41.806476+00:00 |
| pysec-2025-49 |
8.8 (3.1)
|
setuptools is a package that allows users to download, build, install, upgrade, and unins… | setuptools | 2025-05-17T16:15:19+00:00 | 2025-06-12T22:23:11.115559+00:00 |
| pysec-2025-48 |
9.8 (3.1)
|
Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessm… | mobsf | 2025-03-31T17:15:42+00:00 | 2025-06-12T22:23:10.476087+00:00 |
| pysec-2024-253 |
|
pretix before 2024.1.1 mishandles file validation. | pretix | 2024-02-26T16:28:00+00:00 | 2025-06-11T15:23:51.683422+00:00 |
| pysec-2024-252 |
|
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in t… | torch | 2024-04-17T19:15:07+00:00 | 2025-06-10T19:22:08.948962+00:00 |
| pysec-2024-251 |
|
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in… | torch | 2024-04-17T19:15:07+00:00 | 2025-06-10T03:12:59.077932+00:00 |
| pysec-2025-47 |
|
An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2… | django | 2025-06-05T03:15:25+00:00 | 2025-06-05T05:23:28.296596+00:00 |
| pysec-2025-46 |
5.5 (3.1)
|
A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as cri… | pypickle | 2025-05-26T08:15:19+00:00 | 2025-06-03T17:36:58.579358+00:00 |
| pysec-2025-45 |
7.8 (3.1)
|
A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic.… | pypickle | 2025-05-26T07:15:26+00:00 | 2025-06-03T17:36:58.528116+00:00 |
| pysec-2024-250 |
|
Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csr… | torch | 2024-04-19T21:15:08+00:00 | 2025-06-03T15:23:56.072490+00:00 |
| pysec-2023-312 |
5.9 (3.1)
|
Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server b… | redis | 2023-07-15T23:15:09Z | 2025-06-02T11:48:06.372423Z |
| pysec-2025-44 |
|
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in mod… | django-helpdesk | 2025-05-31T01:15:19+00:00 | 2025-05-31T03:09:35.357757+00:00 |
| pysec-2025-43 |
|
vLLM is an inference and serving engine for large language models (LLMs). In versions sta… | vllm | 2025-05-29T17:15:21+00:00 | 2025-05-29T19:21:01.611587+00:00 |
| pysec-2025-42 |
9.8 (3.1)
|
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Ver… | vllm | 2025-04-30T01:15:51+00:00 | 2025-05-28T21:23:12.396609+00:00 |
| pysec-2025-41 |
9.8 (3.1)
|
PyTorch is a Python package that provides tensor computation with strong GPU acceleration… | torch | 2025-04-18T16:15:23+00:00 | 2025-05-28T15:23:37.843138+00:00 |
| pysec-2025-40 |
7.5 (3.1)
|
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils`… | transformers | 2025-05-19T12:15:19+00:00 | 2025-05-21T19:22:10.801823+00:00 |
| pysec-2024-249 |
6.1 (3.1)
|
### Summary On all Label Studio versions prior to 1.11.0, data imported via file upload f… | label-studio | 2024-02-22T22:15:47+00:00 | 2025-05-19T11:22:35.312280+00:00 |
| pysec-2024-248 |
7.8 (3.1)
|
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its … | opencanary | 2024-10-14T21:15:12+00:00 | 2025-05-16T14:23:05.150356+00:00 |
| pysec-2025-39 |
|
motionEye is an online interface for the software motion, a video surveillance program wi… | motioneye | 2025-05-14T16:15:29+00:00 | 2025-05-14T17:22:51.050788+00:00 |
| pysec-2025-38 |
|
OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during im… | ironic | 2025-05-08T17:16:01Z | 2025-05-13T04:24:03.083929Z |
| pysec-2024-247 |
9.9 (3.1)
|
A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically… | zenml | 2024-04-16T00:15:11+00:00 | 2025-05-12T15:23:53.861001+00:00 |
| pysec-2025-37 |
|
An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2… | django | 2025-05-08T04:17:18+00:00 | 2025-05-08T05:23:16.210893+00:00 |
| pysec-2025-36 |
9.8 (3.1)
|
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/valida… | langflow | 2025-04-07T15:15:44+00:00 | 2025-05-07T19:22:44.993642+00:00 |
| pysec-2024-246 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… | vyper | 2024-04-25T17:15:50+00:00 | 2025-05-05T19:21:20.899426+00:00 |
| pysec-2024-111 |
9.1 (3.1)
|
A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langcha… | langchain | 2024-10-29T13:15:00Z | 2025-05-02T18:39:47.588215Z |
| pysec-2024-245 |
|
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated user… | apache-airflow | 2024-02-29T11:15:08+00:00 | 2025-05-01T21:22:38.598048+00:00 |
| ID | Description | Type |
|---|---|---|
| tid-309 | If the integrated development environment (IDE) or vendor software that is used to manage… | application-software |
| tid-308 | The threat actor can overwrite a previously deployed/installed malicious program with a d… | application-software |
| tid-307 | Many devices that allow the execution of custom application programs, such as IEC 61131 b… | application-software |
| tid-306 | While restricting the execution of external programs within a sandboxed execution environ… | application-software |
| tid-305 | If the device allows the downloading and execution of native binaries on the device, a th… | application-software |
| tid-304 | A threat actor can manipulate the runtime environments on a device to maintain persistenc… | application-software |
| tid-303 | If device management is intended to be performed by a dedicated engineering software plat… | application-software |
| tid-302 | A threat actor can install a malicious program to the device to manipulate its operations… | application-software |
| tid-301 | A threat actor could modify application-level binaries or libraries on the device to intr… | application-software |
| tid-226 | Some devise will login information that can be exploited by attackers to further their at… | system-software |
| tid-225 | Threat actors may try to manipulate logs on the device to evade defenses, confuse inciden… | system-software |
| tid-224 | If a device has debugging capabilities (e.g., diagnostic tools, debug logs, etc.) that ar… | system-software |
| tid-223 | If the threat actor can obtain sufficient privileges on the devices, they may be able to … | system-software |
| tid-222 | Various devices and associated services are necessary to support communications and conne… | system-software |
| tid-221 | Some devices will allow for authentication over the network, but do not implement mechani… | system-software |
| tid-220 | Hardware roots of trust can be used to support many desirable device security functions, … | system-software |
| tid-219 | Operating Systems and Kernels frequently run at the highest levels of permissions. If pro… | system-software |
| tid-218 | A threat actor may be able to install a rootkit that can manipulate the operating system … | system-software |
| tid-217 | When firmware/software update process is initiated on a device, it may enter a different … | system-software |
| tid-216 | Firmware updates will oftentimes include fixes to security vulnerabilities, meaning that … | system-software |
| tid-215 | If the firmware/software update is not encrypted at rest in storage it can be reverse eng… | system-software |
| tid-214 | Some device have mutable or immutable secure Roots of Trust (ROTs) that may store keys or… | system-software |
| tid-213 | To avoid the weaknesses of a shared secret verification (see TID-212), devices may utiliz… | system-software |
| tid-212 | Some devices utilize a shared secret authentication scheme to verify firmware updates. Th… | system-software |
| tid-211 | If a device does not have a mechanism to authenticate firmware updates, a threat actor ma… | system-software |
| tid-210 | Threat actors will frequently target device components, like firmware, that have already … | system-software |
| tid-209 | If a threat actor can access a hypervisor’s host infrastructure, such as through existing… | system-software |
| tid-208 | Virtualization mechanisms allow multiple operating sytem instances to share the same unde… | system-software |
| tid-207 | Container environments, such as Docker and Kubernetes, share the same underlying kernel a… | system-software |
| tid-206 | While the use of memory permissions, such as non-executable stack and heap memory, can pr… | system-software |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33874 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.959238Z |
| gsd-2024-33861 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.958057Z |
| gsd-2024-33850 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.952536Z |
| gsd-2024-33856 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.944669Z |
| gsd-2024-33870 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.943118Z |
| gsd-2024-33849 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.924449Z |
| gsd-2024-33854 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.916266Z |
| gsd-2024-33868 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.896638Z |
| gsd-2024-33881 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.886591Z |
| gsd-2024-33880 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.882744Z |
| gsd-2024-33877 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.871220Z |
| gsd-2024-33873 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.870402Z |
| gsd-2024-33859 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.867340Z |
| gsd-2024-33875 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.862083Z |
| gsd-2024-33878 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.850311Z |
| gsd-2024-33858 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.848478Z |
| gsd-2024-33872 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.839468Z |
| gsd-2024-33857 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.834866Z |
| gsd-2024-33853 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.825026Z |
| gsd-2024-33863 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.824810Z |
| gsd-2024-33852 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.824312Z |
| gsd-2024-33866 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.819755Z |
| gsd-2024-33867 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.808129Z |
| gsd-2024-33882 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.803998Z |
| gsd-2024-33871 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.800751Z |
| gsd-2024-33862 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.799465Z |
| gsd-2024-33864 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.792101Z |
| gsd-2024-33865 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.790923Z |
| gsd-2024-33869 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.784255Z |
| gsd-2024-33860 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-28T05:02:07.777612Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-81 | Malicious code in upgrade-mobile (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:18Z |
| mal-2026-47 | Malicious code in tiny-model-update (npm) | 2026-01-05T03:15:19Z | 2026-01-08T09:13:18Z |
| mal-2026-158 | Malicious code in timeout-ts (npm) | 2026-01-08T04:54:18Z | 2026-01-08T09:13:18Z |
| mal-2026-157 | Malicious code in test-thegenetic-module (npm) | 2026-01-08T04:58:19Z | 2026-01-08T09:13:18Z |
| mal-2026-152 | Malicious code in week-4-node-modularization (npm) | 2026-01-08T01:01:08Z | 2026-01-08T09:13:18Z |
| mal-2026-124 | Malicious code in wwwt (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:18Z |
| mal-2026-123 | Malicious code in wifzap (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:18Z |
| mal-2026-122 | Malicious code in vjri (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:18Z |
| mal-2026-106 | Malicious code in transform-decorators-legacy (npm) | 2026-01-07T05:38:18Z | 2026-01-08T09:13:18Z |
| mal-2026-94 | Malicious code in shopify-perf-kit (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:17Z |
| mal-2026-80 | Malicious code in smartspacestoreapp (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:17Z |
| mal-2026-79 | Malicious code in seanp-test-package-do-not-use2 (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:17Z |
| mal-2026-78 | Malicious code in react-native-kyc (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:17Z |
| mal-2026-71 | Malicious code in redis-request-parser (npm) | 2026-01-06T04:45:27Z | 2026-01-08T09:13:17Z |
| mal-2026-67 | Malicious code in redis-cookie-parser (npm) | 2026-01-06T02:34:56Z | 2026-01-08T09:13:17Z |
| mal-2026-66 | Malicious code in redis-cookie-js (npm) | 2026-01-06T02:34:56Z | 2026-01-08T09:13:17Z |
| mal-2026-57 | Malicious code in react-transition-group-legacy (npm) | 2026-01-05T21:25:51Z | 2026-01-08T09:13:17Z |
| mal-2026-48 | Malicious code in shop-state (npm) | 2026-01-05T07:50:44Z | 2026-01-08T09:13:17Z |
| mal-2026-43 | Malicious code in published_at (npm) | 2026-01-05T02:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-41 | Malicious code in spire.officejs-document (npm) | 2026-01-05T00:56:20Z | 2026-01-08T09:13:17Z |
| mal-2026-40 | Malicious code in spire.officejs-editors (npm) | 2026-01-05T00:40:44Z | 2026-01-08T09:13:17Z |
| mal-2026-39 | Malicious code in spire.officejs-common (npm) | 2026-01-05T00:45:36Z | 2026-01-08T09:13:17Z |
| mal-2026-156 | Malicious code in sparkling-cli (npm) | 2026-01-08T04:54:18Z | 2026-01-08T09:13:17Z |
| mal-2026-155 | Malicious code in shaktihacker2026 (npm) | 2026-01-08T05:20:19Z | 2026-01-08T09:13:17Z |
| mal-2026-151 | Malicious code in svelte-monorepo (npm) | 2026-01-08T01:01:08Z | 2026-01-08T09:13:17Z |
| mal-2026-148 | Malicious code in tailwind-autoanimation (npm) | 2026-01-07T23:41:14Z | 2026-01-08T09:13:17Z |
| mal-2026-147 | Malicious code in spark-ar-jest-mocks (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-146 | Malicious code in spark-ar-dynamic-mocks (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-145 | Malicious code in spark-ar-core-libs (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-144 | Malicious code in scrollbar-stylecss (npm) | 2026-01-07T23:43:04Z | 2026-01-08T09:13:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2144 | binutils: Mehrere Schwachstellen | 2025-09-28T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2129 | GIMP: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-09-24T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2053 | Linux Kernel: Mehrere Schwachstellen | 2025-09-15T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-2045 | expat: Schwachstelle ermöglicht Denial of Service | 2025-09-14T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-1948 | libxml2 (exsltDynMapFunction): Schwachstelle ermöglicht Denial of Service | 2025-09-02T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-1470 | Python (CPython): Schwachstelle ermöglicht Denial of Service | 2025-07-07T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-1204 | systemd-coredump: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-06-01T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2025-0128 | Apache CXF: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2024-1531 | QEMU: Schwachstelle ermöglicht Denial of Service | 2024-07-04T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2022-0770 | IBM DB2: Mehrere Schwachstellen | 2020-04-23T22:00:00.000+00:00 | 2026-01-08T23:00:00.000+00:00 |
| wid-sec-w-2026-0026 | HCL BigFix: Mehrere Schwachstellen | 2026-01-06T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2916 | Net-SNMP: Schwachstelle ermöglicht Codeausführung und DoS | 2025-12-23T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2897 | Apache log4j: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-18T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2867 | HPE OneView: Schwachstelle ermöglicht Codeausführung | 2025-12-16T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2759 | IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting | 2025-12-08T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2750 | Apache HTTP Server: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2747 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-04T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2741 | cPython: Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2600 | PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-13T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2420 | Apache Tomcat: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2386 | Unbound: Schwachstelle ermöglicht Manipulation von Dateien | 2025-10-22T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2298 | Linux Kernel: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2227 | Golang Go: Mehrere Schwachstellen | 2025-10-07T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2170 | Linux Kernel: Mehrere Schwachstellen | 2025-09-30T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2107 | Linux Kernel: Mehrere Schwachstellen | 2025-09-22T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2099 | Linux Kernel: Mehrere Schwachstellen | 2025-09-21T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2077 | Linux Kernel: Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-2040 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-09-11T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-1334 | Apache Commons FileUpload: Schwachstelle ermöglicht Denial of Service | 2025-06-16T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| wid-sec-w-2025-0895 | Apache Tomcat: Mehrere Schwachstellen | 2025-04-28T22:00:00.000+00:00 | 2026-01-07T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0379 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-12-02T13:25:17.745981Z | 2025-12-02T13:25:17.745981Z |
| ncsc-2025-0378 | Kwetsbaarheden verholpen in Mattermost | 2025-11-28T09:53:42.334621Z | 2025-11-28T09:53:42.334621Z |
| ncsc-2025-0377 | Kwetsbaarheden verholpen in GitLab | 2025-11-27T13:35:09.121804Z | 2025-11-27T13:35:09.121804Z |
| ncsc-2025-0376 | Kwetsbaarheden verholpen in SonicWall Email Security appliances | 2025-11-21T16:06:33.949861Z | 2025-11-21T16:06:33.949861Z |
| ncsc-2025-0375 | Kwetsbaarheid verholpen in Progress MOVEit Transfer | 2025-11-21T16:06:14.387571Z | 2025-11-21T16:06:14.387571Z |
| ncsc-2025-0334 | Kwetsbaarheden verholpen in Oracle Fusion Middleware | 2025-10-23T13:42:11.992643Z | 2025-11-21T16:03:18.991100Z |
| ncsc-2025-0374 | Kwetsbaarheden verholpen in Arista EOS | 2025-11-20T11:48:20.126141Z | 2025-11-20T11:48:20.126141Z |
| ncsc-2025-0373 | Kwetsbaarheden verholpen in Fortinet FortiOS | 2025-11-19T08:35:31.999400Z | 2025-11-19T08:35:31.999400Z |
| ncsc-2025-0372 | Kwetsbaarheid verholpen in Fortinet FortiWeb | 2025-11-19T08:34:59.616354Z | 2025-11-19T08:34:59.616354Z |
| ncsc-2025-0371 | Kwetsbaarheden verholpen in Google Chrome | 2025-11-18T09:01:31.984222Z | 2025-11-18T09:01:31.984222Z |
| ncsc-2025-0370 | Kwetsbaarheden verholpen in Cisco Unified Contact Center Express | 2025-11-18T07:04:55.173157Z | 2025-11-18T07:04:55.173157Z |
| ncsc-2025-0369 | Kwetsbaarheden verholpen in IBM AIX | 2025-11-18T07:03:55.766335Z | 2025-11-18T07:03:55.766335Z |
| ncsc-2025-0368 | Kwetsbaarheden verholpen in Zoom Workplace en Zoom Clients | 2025-11-18T07:02:36.696426Z | 2025-11-18T07:02:36.696426Z |
| ncsc-2025-0367 | Kwetsbaarheden verholpen in GitLab | 2025-11-18T07:01:35.502522Z | 2025-11-18T07:01:35.502522Z |
| ncsc-2025-0366 | Kwetsbaarheid verholpen in Fortinet FortiWeb | 2025-11-15T14:57:33.774388Z | 2025-11-15T14:57:33.774388Z |
| ncsc-2025-0365 | Kwetsbaarheden verholpen in Cisco Catalyst Center | 2025-11-14T12:55:27.227262Z | 2025-11-14T12:55:27.227262Z |
| ncsc-2025-0364 | Kwetsbaarheid verholpen in Adobe Photoshop | 2025-11-12T12:17:16.207233Z | 2025-11-12T12:17:16.207233Z |
| ncsc-2025-0363 | Kwetsbaarheden verholpen in Adobe Illustrator | 2025-11-12T11:52:08.634593Z | 2025-11-12T11:56:09.924799Z |
| ncsc-2025-0362 | Kwetsbaarheden verholpen in Microsoft Visual Studio | 2025-11-11T18:35:40.376220Z | 2025-11-11T18:35:40.376220Z |
| ncsc-2025-0361 | Kwetsbaarheid verholpen in Microsoft SQL Server | 2025-11-11T18:34:39.453615Z | 2025-11-11T18:34:39.453615Z |
| ncsc-2025-0360 | Kwetsbaarheden verholpen in Microsoft Dynamics | 2025-11-11T18:33:13.936830Z | 2025-11-11T18:33:13.936830Z |
| ncsc-2025-0359 | Kwetsbaarheden verholpen in Microsoft Office | 2025-11-11T18:31:27.092072Z | 2025-11-11T18:31:27.092072Z |
| ncsc-2025-0358 | Kwetsbaartheden verholpen in Microsoft Windows | 2025-11-11T18:29:38.918562Z | 2025-11-11T18:29:38.918562Z |
| ncsc-2025-0357 | Kwetsbaarheden verholpen in Siemens producten | 2025-11-11T18:14:44.487803Z | 2025-11-11T18:14:44.487803Z |
| ncsc-2025-0356 | Kwetsbaarheden verholpen in SAP-producten | 2025-11-11T12:15:53.615720Z | 2025-11-11T12:15:53.615720Z |
| ncsc-2025-0355 | Kwetsbaarheden verholpen in Fortinet FortiOS en FortiProxy | 2025-11-07T10:07:28.475542Z | 2025-11-07T10:07:28.475542Z |
| ncsc-2025-0354 | Kwetsbaarheid verholpen in Cisco Identity Services Engine | 2025-11-06T12:36:51.591695Z | 2025-11-06T12:36:51.591695Z |
| ncsc-2025-0353 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-11-04T15:03:48.630084Z | 2025-11-04T15:03:48.630084Z |
| ncsc-2025-0352 | Kwetsbaarheden verholpen in Apple iOS en iPadOS | 2025-11-04T12:53:15.358078Z | 2025-11-04T12:53:15.358078Z |
| ncsc-2025-0351 | Kwetsbaarheden verholpen in Apple MacOS | 2025-11-04T12:44:25.439757Z | 2025-11-04T12:44:25.439757Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-750499 | SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-726617 | SSA-726617: Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module | 2025-05-13T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-711309 | SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products | 2023-09-12T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-698820 | SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-687955 | SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5 | 2025-02-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-682326 | SSA-682326: Multiple Vulnerabilities in COMOS before V10.4.5 | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-631336 | SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 | 2022-06-14T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-552874 | SSA-552874: Denial of Service Vulnerability in SIPROTEC 5 Devices | 2022-12-13T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-522291 | SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-514895 | SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0 | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-365596 | SSA-365596: DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-339694 | SSA-339694: Multiple Vulnerabilities in Spectrum Power 4 Before v4.70 SP12 Security Patch 2 | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-322980 | SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices | 2023-04-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-301229 | SSA-301229: Client-Side Enforcement of Server-Side Security Vulnerabilities in RUGGEDCOM ROX II | 2025-05-13T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-267056 | SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-225578 | SSA-225578: Improper Access Control Vulnerability in SICAM GridEdge Before V2.7.3 | 2022-07-12T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-216014 | SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs | 2025-03-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-201498 | SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.11 | 2025-11-11T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-194557 | SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5 | 2025-01-14T00:00:00Z | 2025-11-11T00:00:00Z |
| ssa-876787 | SSA-876787: Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs | 2024-10-08T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-722410 | SSA-722410: Multiple Vulnerabilities in User Management Component (UMC) | 2025-09-09T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-625789 | SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices | 2011-06-10T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-614723 | SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC) | 2025-05-13T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-599451 | SSA-599451: Multiple Vulnerabilities in SiPass integrated Before V3.0 | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-541582 | SSA-541582: Multiple File Parsing Vulnerabilities in Solid Edge | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-513708 | SSA-513708: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices | 2025-06-10T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-486936 | SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-373591 | SSA-373591: Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices | 2021-07-13T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-367714 | SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP | 2025-05-23T00:00:00Z | 2025-10-14T00:00:00Z |
| ssa-365200 | SSA-365200: Google Chrome Type Confusion Vulnerability in Siemens Products | 2025-10-14T00:00:00Z | 2025-10-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:1335 | Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update | 2025-02-12T00:11:35+00:00 | 2026-01-08T17:01:14+00:00 |
| rhsa-2025:13061 | Red Hat Security Advisory: kernel security update | 2025-08-05T18:01:14+00:00 | 2026-01-08T17:01:13+00:00 |
| rhsa-2025:12526 | Red Hat Security Advisory: kernel security update | 2025-08-04T15:19:33+00:00 | 2026-01-08T17:01:13+00:00 |
| rhsa-2025:12525 | Red Hat Security Advisory: kernel-rt security update | 2025-08-04T15:19:38+00:00 | 2026-01-08T17:01:11+00:00 |
| rhsa-2025:11572 | Red Hat Security Advisory: kernel-rt security update | 2025-07-23T00:18:22+00:00 | 2026-01-08T17:01:10+00:00 |
| rhsa-2025:11571 | Red Hat Security Advisory: kernel security update | 2025-07-23T00:28:12+00:00 | 2026-01-08T17:01:08+00:00 |
| rhsa-2025:11299 | Red Hat Security Advisory: kernel-rt security update | 2025-07-16T05:49:58+00:00 | 2026-01-08T17:01:08+00:00 |
| rhsa-2025:11298 | Red Hat Security Advisory: kernel security update | 2025-07-16T06:06:47+00:00 | 2026-01-08T17:00:43+00:00 |
| rhsa-2025:11245 | Red Hat Security Advisory: kernel security update | 2025-07-15T21:19:21+00:00 | 2026-01-08T17:00:38+00:00 |
| rhsa-2025:10701 | Red Hat Security Advisory: kernel security update | 2025-07-09T12:22:33+00:00 | 2026-01-08T17:00:38+00:00 |
| rhsa-2024:8856 | Red Hat Security Advisory: kernel security update | 2024-11-05T01:22:51+00:00 | 2026-01-08T17:00:38+00:00 |
| rhsa-2024:9546 | Red Hat Security Advisory: kernel security update | 2024-11-13T15:59:33+00:00 | 2026-01-08T17:00:37+00:00 |
| rhsa-2024:9315 | Red Hat Security Advisory: kernel security update | 2024-11-12T09:11:05+00:00 | 2026-01-08T17:00:37+00:00 |
| rhsa-2024:9150 | Red Hat Security Advisory: python-jinja2 security update | 2024-11-12T08:45:30+00:00 | 2026-01-08T17:00:35+00:00 |
| rhsa-2024:8870 | Red Hat Security Advisory: kernel-rt security update | 2024-11-05T00:54:55+00:00 | 2026-01-08T17:00:33+00:00 |
| rhsa-2024:8617 | Red Hat Security Advisory: kernel security update | 2024-10-30T01:41:14+00:00 | 2026-01-08T17:00:32+00:00 |
| rhsa-2024:8162 | Red Hat Security Advisory: kernel security update | 2024-10-16T01:08:02+00:00 | 2026-01-08T17:00:31+00:00 |
| rhsa-2024:8158 | Red Hat Security Advisory: kernel-rt security update | 2024-10-16T00:12:12+00:00 | 2026-01-08T17:00:31+00:00 |
| rhsa-2024:8157 | Red Hat Security Advisory: kernel security update | 2024-10-16T00:28:23+00:00 | 2026-01-08T17:00:29+00:00 |
| rhsa-2024:7001 | Red Hat Security Advisory: kernel-rt security update | 2024-09-24T00:40:51+00:00 | 2026-01-08T17:00:26+00:00 |
| rhsa-2024:6267 | Red Hat Security Advisory: kernel security update | 2024-09-04T00:32:25+00:00 | 2026-01-08T17:00:26+00:00 |
| rhsa-2024:7000 | Red Hat Security Advisory: kernel security update | 2024-09-24T02:39:02+00:00 | 2026-01-08T17:00:25+00:00 |
| rhsa-2024:6993 | Red Hat Security Advisory: kernel security update | 2024-09-24T01:17:56+00:00 | 2026-01-08T17:00:25+00:00 |
| rhsa-2024:6567 | Red Hat Security Advisory: kernel security update | 2024-09-11T01:10:44+00:00 | 2026-01-08T17:00:24+00:00 |
| rhsa-2024:6268 | Red Hat Security Advisory: kernel-rt security update | 2024-09-04T00:15:00+00:00 | 2026-01-08T17:00:22+00:00 |
| rhsa-2024:6206 | Red Hat Security Advisory: kernel security update | 2024-09-03T15:48:42+00:00 | 2026-01-08T17:00:21+00:00 |
| rhsa-2024:6011 | Red Hat Security Advisory: OpenShift Container Platform 4.13.49 packages and security update | 2024-09-04T08:17:16+00:00 | 2026-01-08T17:00:21+00:00 |
| rhsa-2024:5928 | Red Hat Security Advisory: kernel security update | 2024-08-28T12:34:01+00:00 | 2026-01-08T17:00:20+00:00 |
| rhsa-2024:5266 | Red Hat Security Advisory: kernel security update | 2024-08-13T11:17:08+00:00 | 2026-01-08T17:00:20+00:00 |
| rhsa-2024:5810 | Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update | 2024-08-29T03:20:28+00:00 | 2026-01-08T17:00:19+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-25-345-02 | Varex Imaging Panoramic Dental Imaging Software | 2025-12-11T07:00:00.000000Z | 2025-12-11T07:00:00.000000Z |
| icsma-25-345-01 | Grassroots DICOM (GDCM) | 2025-12-11T07:00:00.000000Z | 2025-12-11T07:00:00.000000Z |
| icsa-25-345-10 | OpenPLC_V3 | 2025-12-11T07:00:00.000000Z | 2025-12-11T07:00:00.000000Z |
| icsa-25-345-02 | Johnson Controls iSTAR Ultra | 2025-12-11T07:00:00.000000Z | 2025-12-11T07:00:00.000000Z |
| icsa-25-345-01 | Johnson Controls iSTAR | 2025-12-11T07:00:00.000000Z | 2025-12-11T07:00:00.000000Z |
| va-25-343-01 | Windscribe for Linux 'changeMTU' local privilege escalation | 2025-12-10T16:46:41Z | 2025-12-10T16:46:41Z |
| icsa-25-343-01 | Universal Boot Loader (U-Boot) | 2025-12-09T07:00:00.000000Z | 2025-12-09T07:00:00.000000Z |
| icsa-25-343-03 | Multiple India-based CCTV Cameras** | 2025-12-09T05:00:00.000000Z | 2025-12-09T05:00:00.000000Z |
| icsa-25-345-09 | Siemens Gridscale X Prepay | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-345-08 | Siemens Energy Services | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-345-07 | Siemens Building X - Security Manager Edge Controller | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-345-06 | Siemens SINEMA Remote Connect Server | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-345-05 | Siemens Advanced Licensing (SALT) Toolkit | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-345-04 | Siemens IAM Client | 2025-12-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-226-22 | Siemens Web Installer (SSA-282044) | 2025-08-12T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-226-11 | Siemens SIMATIC S7-PLCSIM | 2025-08-12T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-226-03 | Siemens SIMATIC S7-PLCSIM | 2025-08-12T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-347-02 | Siemens Engineering Platforms | 2024-12-10T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-256-16 | Siemens Third-Party Component in SICAM and SITIPE Products | 2024-09-10T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-24-193-05 | Siemens SCALANCE, RUGGEDCOM | 2024-07-09T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-22-349-09 | Siemens OpenSSL 3.0 Affecting Products | 2022-12-13T00:00:00.000000Z | 2025-12-09T00:00:00.000000Z |
| icsa-25-338-07 | Advantech iView | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-06 | SolisCloud Monitoring Platform | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-05 | Sunbird DCIM dcTrack and Power IQ | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-04 | Johnson Controls iSTAR | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-03 | Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-02 | MAXHUB Pivot | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-338-01 | Mitsubishi Electric GX Works2 | 2025-12-04T07:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-219-02 | Johnson Controls FX Server, FX80 and FX90 (Update A) | 2025-08-07T06:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| icsa-25-148-03 | Consilium Safety CS5000 Fire Panel (Update A) | 2025-05-29T06:00:00.000000Z | 2025-12-04T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ios-invalid-url-dos-nvxszf6u | Cisco IOS Software Industrial Ethernet Switch Device Manager Denial of Service Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-ios-cli-eb7cz6yo | Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-defaultacl-psjk9nvf | Cisco SD-WAN vEdge Software Access Control List Bypass Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-cat9k-acl-l4k7vxgd | Cisco IOS XE Software on Cisco Catalyst 9500X and 9600X Series Switches Virtual Interface Access Control List Bypass Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-action-frame-inj-qqcncz8h | Cisco Wireless Access Point Software Device Analytics Action Frame Injection Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-9800cl-openscep-sb4xtxzp | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controller for Cloud Unauthenticated Access to Certificate Enrollment Service Vulnerability | 2025-09-24T16:00:00+00:00 | 2025-09-24T16:00:00+00:00 |
| cisco-sa-snmp-bypass-hhuvujdn | Cisco IOS XE SD-WAN Software Packet Filtering Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-09-22T14:12:28+00:00 |
| cisco-sa-xrsig-uy4zrucg | Cisco IOS XR Software Image Verification Bypass Vulnerability | 2025-09-10T16:00:00+00:00 | 2025-09-10T16:00:00+00:00 |
| cisco-sa-iosxr-arp-storm-ejuu55ym | Cisco IOS XR ARP Broadcast Storm Denial of Service Vulnerability | 2025-09-10T16:00:00+00:00 | 2025-09-10T16:00:00+00:00 |
| cisco-sa-acl-packetio-swjhhbtz | Cisco IOS XR Software Management Interface ACL Bypass Vulnerability | 2025-09-10T16:00:00+00:00 | 2025-09-10T16:00:00+00:00 |
| cisco-sa-fp2k-ipsec-dos-tjwgdzco | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability | 2025-08-14T16:00:00+00:00 | 2025-09-09T21:22:34+00:00 |
| cisco-sa-webex-xss-55bv8hhm | Cisco Webex Meetings Cross-Site Scripting Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-webex-urlredirect-uk8ddjsz | Cisco Webex Meetings URL Redirection Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-phone-write-g3kcc5df | Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Vulnerabilities | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-imp-xss-xqgu4hsg | Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-epnm-pi-stored-xss-xjqzsycp | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-epnm-info-dis-zhppmfgz | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Information Disclosure Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-epni-arb-file-upload-jjdm2p83 | Cisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-cucm-csrf-w762pryd | Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability | 2025-09-03T16:00:00+00:00 | 2025-09-03T16:00:00+00:00 |
| cisco-sa-3100_4200_tlsdos-2ynscd54 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series TLS 1.3 Cipher Denial of Service Vulnerability | 2025-08-14T16:00:00+00:00 | 2025-09-03T13:37:50+00:00 |
| cisco-sa-ucs-xss-ey6xhyps | Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-ucs-vkvmorv-cnkrv7hk | Cisco Integrated Management Controller Virtual Keyboard Video Monitor Open Redirect Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-ucs-multi-cmdinj-e4ukjyrz | Cisco UCS Manager Software Command Injection Vulnerabilities | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-ucs-kvmsxss-6h7anuyk | Cisco Integrated Management Controller Virtual Keyboard Video Monitor Stored Cross-Site Scripting Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-nxospc-pim6-vg4jfph | Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-nxos-infodis-tectysfg | Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-nxos-cmdinj-qhnze5ss | Cisco NX-OS Software Command Injection Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-nshs-urapi-gjubvfpu | Cisco Nexus Dashboard and Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerabilities | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-nd-ptrs-xu2fm2wb | Cisco Nexus Dashboard Path Traversal Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| cisco-sa-n39k-isis-dos-jhja8rfx | Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2025-08-27T16:00:00+00:00 | 2025-08-27T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| sca-2023-0002 | Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways | 2023-04-11T10:00:00.000Z | 2023-04-11T10:00:00.000Z |
| sca-2023-0001 | Bootloader mode vulnerability in Flexi Soft Gateways v3 | 2023-02-20T14:00:00.000Z | 2023-02-20T14:00:00.000Z |
| sca-2022-0015 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU6xx RADIO FREQUEN. SENSOR | 2022-12-08T16:00:00.000Z | 2022-12-08T16:00:00.000Z |
| sca-2022-0013 | Password recovery vulnerability affects multiple SICK SIMs | 2022-10-21T13:00:00.000Z | 2022-11-04T14:00:00.000Z |
| sca-2022-0014 | SICK FlexiCompact affected by Denial of Service vulnerability | 2022-10-31T11:00:00.000Z | 2022-10-31T11:00:00.000Z |
| sca-2022-0012 | OpenSSL vulnerability affects multiple SICK SIMs | 2022-08-08T13:00:00.000Z | 2022-08-03T13:00:00.000Z |
| sca-2022-0010 | Vulnerability in SICK Flexi Soft Designer & Safety Designer | 2022-05-16T10:00:00.000Z | 2022-07-19T10:00:00.000Z |
| sca-2022-0011 | Vulnerabilities in SICK Package Analytics | 2022-06-08T15:00:00.000Z | 2022-06-08T15:00:00.000Z |
| sca-2022-0009 | Vulnerability in SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and SICK microScan3 PROFINET | 2022-04-29T15:00:00.000Z | 2022-04-29T15:00:00.000Z |
| sca-2022-0008 | Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3 | 2022-04-29T15:00:00.000Z | 2022-04-29T15:00:00.000Z |
| sca-2022-0007 | Vulnerabilities in SICK MARSIC300 | 2022-04-21T15:00:00.000Z | 2022-04-21T15:00:00.000Z |
| sca-2022-0006 | Vulnerability in SICK MSC800 | 2022-04-11T15:00:00.000Z | 2022-04-11T15:00:00.000Z |
| sca-2022-0005 | Vulnerability in SICK Overall Equipment Effectiveness (OEE) | 2022-04-11T15:00:00.000Z | 2022-04-11T15:00:00.000Z |
| sca-2022-0004 | Microsoft vulnerability affects multiple SICK IPCs with SICK MEAC | 2022-04-11T15:00:00.000Z | 2022-03-31T15:00:00.000Z |
| sca-2022-0003 | Vulnerabilities in SICK FTMg | 2022-03-31T15:00:00.000Z | 2022-03-31T15:00:00.000Z |
| sca-2022-0002 | PwnKit vulnerability affects multiple SICK IPCs | 2022-02-23T16:00:00.000Z | 2022-02-23T16:00:00.000Z |
| sca-2022-0001 | Vulnerability in SICK FieldEcho | 2022-02-17T16:00:00.000Z | 2022-02-17T16:00:00.000Z |
| sca-2021-0003 | SICK Security Advisory for Apache Log4j (CVE-2021-44228) | 2021-12-14T17:00:00.000Z | 2021-12-17T12:00:00.000Z |
| sca-2021-0004 | Vulnerabilities in SICK SOPAS ET | 2021-12-16T08:00:00.000Z | 2021-12-17T08:00:00.000Z |
| sca-2021-0002 | MEAC affected by Windows SMBv1 vulnerability | 2021-08-04T10:00:00.000Z | 2021-08-04T10:00:00.000Z |
| sca-2021-0001 | Inadequate SSH configuration in SICK Visionary-S CX | 2021-06-25T10:00:00.000Z | 2021-06-25T10:00:00.000Z |
| sca-2020-0005 | Package Analytics affected by Windows TCP/IP vulnerability | 2020-10-29T11:00:00.000Z | 2020-10-29T11:00:00.000Z |
| sca-2020-0004 | Vulnerability in Platform Mechanism AutoIP | 2020-08-31T10:00:00.000Z | 2020-08-31T10:00:00.000Z |
| sca-2020-0003 | MEAC affected by Windows SMBv3 vulnerability | 2020-08-07T10:00:00.000Z | 2020-08-07T10:00:00.000Z |
| sca-2020-0002 | Vulnerabilities in SICK Package Analytics | 2020-08-07T10:00:00.000Z | 2020-07-28T10:00:00.000Z |
| sca-2020-0001 | Security Information Regarding "Profile Programming" | 2020-05-31T10:00:00.000Z | 2020-05-31T10:00:00.000Z |
| sca-2019-0002 | Vulnerability in SICK FX0-GENT00000 and SICK FX0-GPNT00000 | 2019-09-20T10:00:00.000Z | 2019-09-20T10:00:00.000Z |
| sca-2019-0001 | MSC800 affected by hard-coded credentials vulnerability | 2019-06-21T10:00:00.000Z | 2019-06-21T10:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| nn-2022:2-01 | Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0 | 2022-02-14T11:00:00.000Z | 2024-09-19T11:00:00.000Z |
| nn-2023:5-01 | Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2 | 2023-08-09T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2023:16-01 | Path traversal via 'zip slip' in Arc before v1.6.0 | 2024-05-15T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2023:14-01 | Unsafe temporary data privileges on Unix systems in Arc before v1.6.0 | 2024-05-15T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2023:13-01 | Missing authentication for local web interface in Arc before v1.6.0 | 2024-05-15T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2023:1-01 | Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 | 2023-05-03T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2021:2-01 | Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4 | 2021-02-22T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2021:1-01 | Authenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4 | 2021-02-22T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2020:3-01 | Angular template injection on custom report name field | 2020-05-26T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2020:2-01 | Cross-site request forgery attack on change password form | 2020-05-26T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2019:2-01 | CSV Injection on node label | 2019-11-11T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| nn-2019:1-01 | Stored XSS in field name data model | 2019-11-11T11:00:00.000Z | 2024-05-20T11:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39940 | dm-stripe: fix a possible integer overflow | 2025-10-02T00:00:00.000Z | 2026-01-08T14:49:12.000Z |
| msrc_cve-2024-41932 | sched: fix warning in sched_setaffinity | 2025-01-02T00:00:00.000Z | 2026-01-08T14:49:10.000Z |
| msrc_cve-2025-39932 | smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) | 2025-10-02T00:00:00.000Z | 2026-01-08T14:49:04.000Z |
| msrc_cve-2024-57875 | block: RCU protect disk->conv_zones_bitmap | 2025-01-02T00:00:00.000Z | 2026-01-08T14:49:01.000Z |
| msrc_cve-2025-55554 | pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long(). | 2025-09-02T00:00:00.000Z | 2026-01-08T14:48:56.000Z |
| msrc_cve-2025-55551 | An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation. | 2025-09-02T00:00:00.000Z | 2026-01-08T14:48:48.000Z |
| msrc_cve-2024-57976 | btrfs: do proper folio cleanup when cow_file_range() failed | 2025-02-02T00:00:00.000Z | 2026-01-08T14:48:45.000Z |
| msrc_cve-2025-39905 | net: phylink: add lock for serializing concurrent pl->phydev writes with resolver | 2025-10-02T00:00:00.000Z | 2026-01-08T14:48:40.000Z |
| msrc_cve-2025-37826 | scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() | 2025-05-02T00:00:00.000Z | 2026-01-08T14:48:36.000Z |
| msrc_cve-2025-39901 | i40e: remove read access to debugfs files | 2025-10-02T00:00:00.000Z | 2026-01-08T14:48:31.000Z |
| msrc_cve-2025-37877 | iommu: Clear iommu-dma ops on cleanup | 2025-05-02T00:00:00.000Z | 2026-01-08T14:48:27.000Z |
| msrc_cve-2025-39927 | ceph: fix race condition validating r_parent before applying state | 2025-10-02T00:00:00.000Z | 2026-01-08T14:48:23.000Z |
| msrc_cve-2024-39478 | crypto: starfive - Do not free stack buffer | 2024-07-01T07:00:00.000Z | 2026-01-08T14:48:19.000Z |
| msrc_cve-2025-39859 | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 2025-09-02T00:00:00.000Z | 2026-01-08T14:48:15.000Z |
| msrc_cve-2024-42134 | virtio-pci: Check if is_avq is NULL | 2024-07-01T07:00:00.000Z | 2026-01-08T14:48:12.000Z |
| msrc_cve-2025-39850 | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 2025-09-02T00:00:00.000Z | 2026-01-08T14:48:06.000Z |
| msrc_cve-2025-21801 | net: ravb: Fix missing rtnl lock in suspend/resume path | 2025-02-02T00:00:00.000Z | 2026-01-08T14:48:02.000Z |
| msrc_cve-2025-39862 | wifi: mt76: mt7915: fix list corruption after hardware restart | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:57.000Z |
| msrc_cve-2024-42151 | bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable | 2024-07-01T07:00:00.000Z | 2026-01-08T14:47:57.000Z |
| msrc_cve-2024-35931 | drm/amdgpu: Skip do PCI error slot reset during RAS recovery | 2024-05-02T07:00:00.000Z | 2026-01-08T14:47:54.000Z |
| msrc_cve-2025-39851 | vxlan: Fix NPD when refreshing an FDB entry with a nexthop object | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:49.000Z |
| msrc_cve-2024-42118 | drm/amd/display: Do not return negative stream id for array | 2024-07-01T07:00:00.000Z | 2026-01-08T14:47:45.000Z |
| msrc_cve-2025-39810 | bnxt_en: Fix memory corruption when FW resources change during ifdown | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:40.000Z |
| msrc_cve-2025-37920 | xsk: Fix race condition in AF_XDP generic RX path | 2025-05-02T00:00:00.000Z | 2026-01-08T14:47:37.000Z |
| msrc_cve-2025-39833 | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:32.000Z |
| msrc_cve-2024-40999 | net: ena: Add validation for completion descriptors consistency | 2024-07-01T07:00:00.000Z | 2026-01-08T14:47:28.000Z |
| msrc_cve-2025-39748 | bpf: Forget ranges when refining tnum after JSET | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:24.000Z |
| msrc_cve-2025-37870 | drm/amd/display: prevent hang on link training fail | 2025-05-02T00:00:00.000Z | 2026-01-08T14:47:20.000Z |
| msrc_cve-2025-39789 | crypto: x86/aegis - Add missing error checks | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:16.000Z |
| msrc_cve-2025-37834 | mm/vmscan: don't try to reclaim hwpoison folio | 2025-05-02T00:00:00.000Z | 2026-01-08T14:47:11.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| sa24p015 | B&R APROL Potential Privilege Escalation and Information Disclosure | 2025-03-24T00:30:00.000Z | 2025-03-24T00:30:00.000Z |
| 9akk108470a8565 | RMC-100 Vulnerability in the Web UI (REST Interface) | 2025-03-11T00:30:00.000Z | 2025-03-11T00:30:00.000Z |
| 9akk108470a5684 | FLXeon Controllers Cyber Security Advisory | 2025-01-20T00:30:00.000Z | 2025-02-14T00:30:00.000Z |
| 7paa012159 | System 800xA 5.1.x, 6.0.3.x, 6.1.1.x, 6.2.x - VideONet Camera passwords stored in clear text | 2025-02-10T00:30:00.000Z | 2025-02-10T00:30:00.000Z |
| 9akk108470a6775 | Hardcoded credentials in ASPECT Energy Management System | 2025-02-05T00:30:00.000Z | 2025-02-06T00:30:00.000Z |
| sa25p001 | Automation Runtime and mapp View Use of insecure algorithm for self-signed certificates | 2025-01-15T00:30:00.000Z | 2025-01-16T00:30:00.000Z |
| 9akk108470a5466 | Drive Composer Path Traversal Vulnerability | 2025-02-05T00:30:00.000Z | 2025-01-10T00:30:00.000Z |
| 3adr011377 | AC500 V3 Multiple vulnerabilities | 2025-01-07T00:30:00.000Z | 2025-01-07T00:30:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-200512-0300 | Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to exe… | 2025-12-22T23:51:40.062000Z |
| var-200512-0611 | Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and… | 2025-12-22T23:51:39.990000Z |
| var-200512-0294 | Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitr… | 2025-12-22T23:51:39.922000Z |
| var-201601-0038 | Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote atta… | 2025-12-22T23:49:01.892000Z |
| var-201801-0151 | A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior … | 2025-12-22T23:48:57.831000Z |
| var-201801-0152 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions pri… | 2025-12-22T23:48:57.732000Z |
| var-201805-1143 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and pr… | 2025-12-22T23:48:56.039000Z |
| var-201805-1144 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and pr… | 2025-12-22T23:48:55.924000Z |
| var-202206-2050 | The affected product is vulnerable to multiple SQL injections, which may allow an unautho… | 2025-12-22T23:48:47.890000Z |
| var-200107-0035 | slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cau… | 2025-12-22T23:48:28.809000Z |
| var-201105-0156 | Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 30… | 2025-12-22T23:45:15.166000Z |
| var-201112-0297 | Multiple cross-site scripting (XSS) vulnerabilities in the Virus Scan Interface in SAP Ne… | 2025-12-22T23:44:53.453000Z |
| var-201801-0394 | TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbi… | 2025-12-22T23:43:40.772000Z |
| var-201809-0087 | WECON LeviStudio Versions 1.8.29 and 1.8.44 have multiple stack-based buffer overflow vul… | 2025-12-22T23:43:09.284000Z |
| var-201902-0647 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening … | 2025-12-22T23:43:06.976000Z |
| var-202004-0077 | There are multiple ways an unauthenticated attacker could perform SQL injection on WebAcc… | 2025-12-22T23:42:52.255000Z |
| var-200603-0283 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… | 2025-12-22T23:41:21.128000Z |
| var-201202-0245 | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, L… | 2025-12-22T23:41:18.968000Z |
| var-201801-1712 | Systems with microprocessors utilizing speculative execution and branch prediction may al… | 2025-12-22T23:41:18.264000Z |
| var-200505-1436 | zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users… | 2025-12-22T23:41:09.495000Z |
| var-202012-1529 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion se… | 2025-12-22T23:41:08.737000Z |
| var-200607-0664 | Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to … | 2025-12-22T23:41:08.009000Z |
| var-201904-1410 | A use after free issue was addressed with improved memory management. This issue affected… | 2025-12-22T23:41:01.954000Z |
| var-201710-0206 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key… | 2025-12-22T23:41:01.766000Z |
| var-200608-0028 | AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable … | 2025-12-22T23:40:00.035000Z |
| var-201808-1002 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo… | 2025-12-22T23:39:27.228000Z |
| var-201202-0067 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T23:38:55.200000Z |
| var-201110-0450 | The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to c… | 2025-12-22T23:38:54.765000Z |
| var-201201-0018 | Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allow… | 2025-12-22T23:38:54.673000Z |
| var-202202-0081 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Desc… | 2025-12-22T23:38:21.079000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000102 | CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to OS command injection | 2025-11-07T14:55+09:00 | 2025-11-07T14:55+09:00 |
| jvndb-2025-000101 | GROWI vulnerable to stored cross-site scripting | 2025-11-06T13:45+09:00 | 2025-11-06T13:45+09:00 |
| jvndb-2024-013260 | Multiple vulnerabilities in Edgecross Basic Software for Windows | 2024-11-22T10:59+09:00 | 2025-11-04T16:41+09:00 |
| jvndb-2025-017972 | Multiple vulnerabilities in Century Systems FutureNet MA and IP-K series | 2025-11-04T16:37+09:00 | 2025-11-04T16:37+09:00 |
| jvndb-2025-000100 | Multiple Roboticsware products register Windows services with unquoted file paths | 2025-11-04T14:17+09:00 | 2025-11-04T14:17+09:00 |
| jvndb-2025-000098 | Optical Disc Archive Software (for Windows) registers a Windows service with an unquoted file path | 2025-11-04T13:51+09:00 | 2025-11-04T13:51+09:00 |
| jvndb-2025-000099 | Progress Flowmon vulnerable to authenticated OS command injection | 2025-11-04T12:47+09:00 | 2025-11-04T12:47+09:00 |
| jvndb-2025-000096 | Installer of WTW EAGLE (for Windows) may insecurely load Dynamic Link Libraries | 2025-10-29T14:17+09:00 | 2025-10-29T14:17+09:00 |
| jvndb-2025-000095 | MZK-DP300N uses hard-coded credentials | 2025-10-28T14:04+09:00 | 2025-10-28T14:04+09:00 |
| jvndb-2025-014793 | NIHON KOHDEN Central Monitor CNS-6201 vulnerable to NULL pointer dereference | 2025-10-01T11:35+09:00 | 2025-10-27T12:28+09:00 |
| jvndb-2025-000093 | Multiple stored cross-site scripting vulnerabilities in Pleasanter | 2025-10-24T15:11+09:00 | 2025-10-24T15:11+09:00 |
| jvndb-2025-000084 | GROWI vulnerable to cross-site scripting | 2025-10-22T15:44+09:00 | 2025-10-22T15:44+09:00 |
| jvndb-2025-000090 | Multiple stored cross-site scripting vulnerabilities in Movable Type | 2025-10-22T13:54+09:00 | 2025-10-22T13:54+09:00 |
| jvndb-2025-000088 | Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel | 2025-10-20T16:17+09:00 | 2025-10-22T10:06+09:00 |
| jvndb-2025-000092 | ETERNUS SF vulnerable to incorrect default permissions | 2025-10-20T14:20+09:00 | 2025-10-20T14:20+09:00 |
| jvndb-2025-000089 | Installer of AutoDownloader may insecurely load Dynamic Link Libraries | 2025-10-17T13:38+09:00 | 2025-10-17T13:38+09:00 |
| jvndb-2025-000074 | Multiple vulnerabilities in desknet's NEO | 2025-10-16T17:30+09:00 | 2025-10-16T17:30+09:00 |
| jvndb-2025-000076 | Multiple vulnerabilities in ChatLuck | 2025-10-16T17:17+09:00 | 2025-10-16T17:17+09:00 |
| jvndb-2025-000087 | Ruijie Networks RG-EST300 undocumented SSH functionality | 2025-10-16T14:19+09:00 | 2025-10-16T14:19+09:00 |
| jvndb-2025-016124 | Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal | 2025-10-16T11:16+09:00 | 2025-10-16T11:16+09:00 |
| jvndb-2025-000085 | Multiple RSUPPORT products may insecurely load Dynamic Link Libraries | 2025-10-15T15:55+09:00 | 2025-10-15T15:55+09:00 |
| jvndb-2025-000086 | Phoenix Contact CHARX SEC-3xxx vulnerable to code injection | 2025-10-15T15:54+09:00 | 2025-10-15T15:54+09:00 |
| jvndb-2025-000083 | BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path | 2025-10-10T13:56+09:00 | 2025-10-10T13:56+09:00 |
| jvndb-2025-015451 | Multiple vulnerabilities in FUJI Electric V-SFT | 2025-10-09T13:39+09:00 | 2025-10-09T13:39+09:00 |
| jvndb-2025-000081 | DataSpider Servista improper restriction of XML external entity references | 2025-09-29T14:44+09:00 | 2025-10-07T16:54+09:00 |
| jvndb-2025-000082 | The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries | 2025-10-06T15:38+09:00 | 2025-10-06T15:38+09:00 |
| jvndb-2025-015061 | Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation | 2025-10-06T13:52+09:00 | 2025-10-06T13:52+09:00 |
| jvndb-2025-000044 | Denial-of-service (DoS) vulnerabilities in multiple Apache products | 2025-06-26T14:41+09:00 | 2025-10-01T14:18+09:00 |
| jvndb-2025-014642 | Multiple vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers | 2025-09-30T11:50+09:00 | 2025-09-30T11:50+09:00 |
| jvndb-2025-000066 | Improper file access permission settings in multiple i-FILTER products | 2025-08-27T19:50+09:00 | 2025-09-29T13:45+09:00 |
| ID | Description | Updated |
|---|---|---|
| ts-2022-005 | TS-2022-005 | 2022-11-21T00:00 |
| ts-2022-004 | TS-2022-004 | 2022-11-21T00:00 |
| ts-2022-003 | TS-2022-003 | 2022-06-14T00:00 |
| ts-2022-002 | TS-2022-002 | 2022-05-11T00:00 |
| ts-2022-001 | TS-2022-001 | 2022-02-07T00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2026:0018-1 | Security update for glib2 | 2026-01-05T10:52:26Z | 2026-01-05T10:52:26Z |
| suse-su-2026:0017-1 | Security update for libsoup | 2026-01-05T10:52:01Z | 2026-01-05T10:52:01Z |
| suse-su-2026:0016-1 | Security update for pgadmin4 | 2026-01-05T10:48:08Z | 2026-01-05T10:48:08Z |
| suse-su-2026:0015-1 | Security update for pgadmin4 | 2026-01-05T10:40:59Z | 2026-01-05T10:40:59Z |
| suse-su-2026:0014-1 | Security update for buildah | 2026-01-05T10:39:01Z | 2026-01-05T10:39:01Z |
| suse-su-2026:0013-1 | Security update for ImageMagick | 2026-01-05T10:36:11Z | 2026-01-05T10:36:11Z |
| suse-su-2026:0012-1 | Security update for xen | 2026-01-05T10:31:27Z | 2026-01-05T10:31:27Z |
| suse-su-2026:0011-1 | Security update for ImageMagick | 2026-01-05T10:28:55Z | 2026-01-05T10:28:55Z |
| suse-su-2026:0010-1 | Security update for python-tornado6 | 2026-01-05T10:26:32Z | 2026-01-05T10:26:32Z |
| suse-su-2026:0005-1 | Security update for rsync | 2026-01-02T12:30:51Z | 2026-01-02T12:30:51Z |
| suse-su-2025:4539-1 | Security update for python36 | 2025-12-31T15:05:33Z | 2025-12-31T15:05:33Z |
| suse-su-2025:4538-1 | Security update for python3 | 2025-12-31T15:05:25Z | 2025-12-31T15:05:25Z |
| suse-su-2025:4536-1 | Security update for podman | 2025-12-31T10:35:17Z | 2025-12-31T10:35:17Z |
| suse-su-2025:4534-1 | Security update for dpdk22 | 2025-12-29T16:15:13Z | 2025-12-29T16:15:13Z |
| suse-su-2025:4533-1 | Security update for libpng16 | 2025-12-29T16:11:25Z | 2025-12-29T16:11:25Z |
| suse-su-2025:4532-1 | Security update for apache2-mod_auth_openidc | 2025-12-29T13:53:59Z | 2025-12-29T13:53:59Z |
| suse-su-2025:4530-1 | Security update for the Linux Kernel | 2025-12-29T10:48:23Z | 2025-12-29T10:48:23Z |
| suse-su-2025:4528-1 | Security update for webkit2gtk3 | 2025-12-26T14:52:35Z | 2025-12-26T14:52:35Z |
| suse-su-2025:4527-1 | Security update for webkit2gtk3 | 2025-12-26T14:49:08Z | 2025-12-26T14:49:08Z |
| suse-su-2025:4526-1 | Security update for buildah | 2025-12-26T12:24:16Z | 2025-12-26T12:24:16Z |
| suse-su-2025:4525-1 | Security update for gnutls | 2025-12-26T12:19:11Z | 2025-12-26T12:19:11Z |
| suse-su-2025:4523-1 | Security update for qemu | 2025-12-26T10:45:48Z | 2025-12-26T10:45:48Z |
| suse-su-2025:4522-1 | Security update for python39 | 2025-12-26T10:35:01Z | 2025-12-26T10:35:01Z |
| suse-su-2025:4521-1 | Security update for the Linux Kernel | 2025-12-24T12:42:49Z | 2025-12-24T12:42:49Z |
| suse-su-2025:4520-1 | Security update for mariadb | 2025-12-24T09:19:47Z | 2025-12-24T09:19:47Z |
| suse-su-2025:4518-1 | Security update for apache2 | 2025-12-23T19:07:45Z | 2025-12-23T19:07:45Z |
| suse-su-2025:4517-1 | Security update for the Linux Kernel | 2025-12-23T16:28:51Z | 2025-12-23T16:28:51Z |
| suse-su-2025:4516-1 | Security update for the Linux Kernel | 2025-12-23T16:27:39Z | 2025-12-23T16:27:39Z |
| suse-su-2025:4515-1 | Security update for the Linux Kernel | 2025-12-23T16:19:45Z | 2025-12-23T16:19:45Z |
| suse-su-2025:4514-1 | Security update for libsoup | 2025-12-23T14:59:59Z | 2025-12-23T14:59:59Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15849-1 | python311-3.11.14-3.1 on GA media | 2025-12-29T00:00:00Z | 2025-12-29T00:00:00Z |
| opensuse-su-2025:15848-1 | python311-openapi-core-0.22.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15847-1 | anubis-1.24.0-1.1 on GA media | 2025-12-28T00:00:00Z | 2025-12-28T00:00:00Z |
| opensuse-su-2025:15846-1 | python39-3.9.25-2.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15845-1 | podman-5.7.1-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15844-1 | cpp-httplib-devel-0.28.0-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2025:15843-1 | buildah-1.42.2-1.1 on GA media | 2025-12-24T00:00:00Z | 2025-12-24T00:00:00Z |
| opensuse-su-2026:20000-1 | Security update for salt | 2025-12-23T09:11:50Z | 2025-12-23T09:11:50Z |
| opensuse-su-2025:15842-1 | libnbd-1.24.0-2.1 on GA media | 2025-12-23T00:00:00Z | 2025-12-23T00:00:00Z |
| opensuse-su-2025:20175-1 | Security update for mariadb | 2025-12-22T11:44:04Z | 2025-12-22T11:44:04Z |
| opensuse-su-2025:20174-1 | Security update for fontforge | 2025-12-22T10:04:31Z | 2025-12-22T10:04:31Z |
| opensuse-su-2025:15841-1 | zk-0.15.2-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15840-1 | python315-3.15.0~a3-1.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15839-1 | python310-3.10.19-3.1 on GA media | 2025-12-22T00:00:00Z | 2025-12-22T00:00:00Z |
| opensuse-su-2025:15838-1 | python311-tornado6-6.5.4-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15837-1 | php8-8.4.16-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15836-1 | kernel-devel-6.18.2-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15835-1 | duc-1.4.6-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15834-1 | busybox-1.37.0-8.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:15833-1 | MozillaFirefox-146.0.1-1.1 on GA media | 2025-12-20T00:00:00Z | 2025-12-20T00:00:00Z |
| opensuse-su-2025:20172-1 | Security update for the Linux Kernel | 2025-12-19T17:38:16Z | 2025-12-19T17:38:16Z |
| opensuse-su-2025:15832-1 | coredns-for-k8s1.35-1.13.1-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15831-1 | chromedriver-143.0.7499.146-1.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15830-1 | alloy-1.12.0-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:15829-1 | ImageMagick-7.1.2.10-2.1 on GA media | 2025-12-19T00:00:00Z | 2025-12-19T00:00:00Z |
| opensuse-su-2025:20171-1 | Security update for qemu | 2025-12-18T12:42:03Z | 2025-12-18T12:42:03Z |
| opensuse-su-2025:20177-1 | Security update for cheat | 2025-12-18T00:17:52Z | 2025-12-18T00:17:52Z |
| opensuse-su-2025:15828-1 | libruby3_4-3_4-3.4.8-1.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15827-1 | rsync-3.4.1-4.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| opensuse-su-2025:15826-1 | coredns-for-k8s1.34-1.12.1-2.1 on GA media | 2025-12-18T00:00:00Z | 2025-12-18T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-00039 | Google Android信息泄露漏洞(CNVD-2026-00039) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00038 | Google Android权限提升漏洞(CNVD-2026-00038) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00037 | Google Android权限提升漏洞(CNVD-2026-00037) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00036 | Google Android权限提升漏洞(CNVD-2026-00036) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00035 | Google Android拒绝服务漏洞(CNVD-2026-00035) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00034 | Google Android权限提升漏洞(CNVD-2026-00034) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00033 | Google Android权限提升漏洞(CNVD-2026-00033) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00032 | Google Android权限提升漏洞(CNVD-2026-00032) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00031 | Google Android权限提升漏洞(CNVD-2026-00031) | 2025-09-04 | 2026-01-04 |
| cnvd-2026-00030 | Microsoft Office Visio代码执行漏洞(CNVD-2026-00030) | 2025-10-17 | 2026-01-04 |
| cnvd-2026-00029 | WordPress插件Publitio信息泄露漏洞 | 2025-10-31 | 2026-01-04 |
| cnvd-2026-00028 | Microsoft Office代码执行漏洞(CNVD-2026-00028) | 2025-11-14 | 2026-01-04 |
| cnvd-2026-00027 | Microsoft Office代码执行漏洞(CNVD-2026-00027) | 2025-11-14 | 2026-01-04 |
| cnvd-2026-00026 | Microsoft Excel信息泄漏漏洞(CNVD-2026-00026) | 2025-11-14 | 2026-01-04 |
| cnvd-2026-00025 | Linksys E1200堆栈缓冲区溢出漏洞(CNVD-2026-00025) | 2025-11-18 | 2026-01-04 |
| cnvd-2026-00024 | Linksys E1200堆栈缓冲区溢出漏洞(CNVD-2026-00024) | 2025-11-18 | 2026-01-04 |
| cnvd-2026-00023 | Apache Kvrocks权限提升漏洞 | 2025-12-03 | 2026-01-04 |
| cnvd-2026-00022 | Apache bRPC拒绝服务漏洞(CNVD-2026-00022) | 2025-12-03 | 2026-01-04 |
| cnvd-2026-00021 | Siemens SIMATIC CN 4100命令注入漏洞 | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00020 | Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00020) | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00019 | Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00019) | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00018 | Siemens RUGGEDCOM ROX II注入漏洞(CNVD-2026-00018) | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00017 | Siemens RUGGEDCOM ROX II注入漏洞 | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00016 | Siemens RUGGEDCOM ROX II命令注入漏洞(CNVD-2026-00016) | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00015 | Siemens RUGGEDCOM ROX II命令注入漏洞 | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00014 | Siemens Gridscale X Prepay信息泄露漏洞 | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00013 | Siemens Gridscale X Prepay安全绕过漏洞 | 2025-12-15 | 2026-01-04 |
| cnvd-2026-00012 | Microsoft Azure Cosmos DB欺骗漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00011 | Microsoft Azure Cognitive Service for Language权限提升漏洞 | 2025-12-25 | 2026-01-04 |
| cnvd-2026-00010 | Microsoft Edge (Chromium-based)欺骗漏洞(CNVD-2026-00010) | 2025-12-25 | 2026-01-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1076 | Multiples vulnérabilités dans MISP | 2025-12-08T00:00:00.000000 | 2025-12-24T00:00:00.000000 |
| certfr-2025-avi-1126 | Multiples vulnérabilités dans PHP | 2025-12-19T00:00:00.000000 | 2025-12-22T00:00:00.000000 |
| certfr-2025-avi-1136 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1135 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1134 | Multiples vulnérabilités dans MongoDB Server | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1133 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1132 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1131 | Multiples vulnérabilités dans les produits IBM | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1130 | Multiples vulnérabilités dans les produits Foxit | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1129 | Multiples vulnérabilités dans les produits VMware | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1128 | Multiples vulnérabilités dans Mozilla Firefox | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1127 | Multiples vulnérabilités dans Centreon Web | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1125 | Vulnérabilité dans les produits NetApp | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1124 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1123 | Multiples vulnérabilités dans les produits Elastic | 2025-12-19T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1122 | Multiples vulnérabilités dans Mattermost Server | 2025-12-18T00:00:00.000000 | 2025-12-19T00:00:00.000000 |
| certfr-2025-avi-1121 | Vulnérabilité dans Sonicwall Secure Mobile Access | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1120 | Vulnérabilité dans les produits Cisco | 2025-12-18T00:00:00.000000 | 2025-12-18T00:00:00.000000 |
| certfr-2025-avi-1119 | Multiples vulnérabilités dans les produits Synology | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1118 | Vulnérabilité dans Mozilla Firefox | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1117 | Multiples vulnérabilités dans GLPI | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1116 | Multiples vulnérabilités dans Google Chrome | 2025-12-17T00:00:00.000000 | 2025-12-17T00:00:00.000000 |
| certfr-2025-avi-1115 | Vulnérabilité dans Trend Micro Apex One | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1114 | Multiples vulnérabilités dans Tenable Nessus | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1113 | Multiples vulnérabilités dans Moodle | 2025-12-16T00:00:00.000000 | 2025-12-16T00:00:00.000000 |
| certfr-2025-avi-1112 | Multiples vulnérabilités dans les produits Elastic | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1110 | Multiples vulnérabilités dans les produits Apple | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1109 | Vulnérabilité dans strongSwan | 2025-12-15T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1103 | Multiples vulnérabilités dans Microsoft Edge | 2025-12-12T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| certfr-2025-avi-1096 | Multiples vulnérabilités dans Google Chrome | 2025-12-11T00:00:00.000000 | 2025-12-15T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-ale-012 | [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway | 2023-10-23T00:00:00.000000 | 2024-02-16T00:00:00.000000 |
| certfr-2023-ale-011 | [MàJ] Multiples vulnérabilités dans Cisco IOS XE | 2023-10-17T00:00:00.000000 | 2024-02-16T00:00:00.000000 |
| certfr-2023-ale-010 | Multiples vulnérabilités dans Exim | 2023-10-02T00:00:00.000000 | 2024-02-16T00:00:00.000000 |
| certfr-2023-ale-008 | [MàJ] Vulnérabilité dans Citrix NetScaler ADC et NetScaler Gateway | 2023-07-19T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-ale-007 | [MàJ] Vulnérabilité dans Zimbra Collaboration Suite | 2023-07-17T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-ale-006 | Vulnérabilité dans les produits Microsoft | 2023-12-12T00:00:00.000000 | 2023-07-12T00:00:00.000000 |
| certfr-2023-ale-009 | [MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile | 2023-07-26T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-ale-005 | Synthèse sur l'exploitation d'une vulnérabilité dans MOVEit Transfer | 2023-07-05T00:00:00.000000 | 2023-09-11T00:00:00.000000 |
| certfr-2023-ale-004 | Vulnérabilité dans les produits Fortinet | 2023-06-13T00:00:00.000000 | 2023-09-11T00:00:00.000000 |
| certfr-2022-ale-014 | Multiples vulnérabilités dans AMI MegaRAC | 2022-12-16T00:00:00.000000 | 2023-09-11T00:00:00.000000 |
| certfr-2023-ale-002 | [MàJ] Vulnérabilité dans Microsoft Outlook | 2023-03-15T00:00:00.000000 | 2023-05-11T00:00:00.000000 |
| certfr-2023-ale-003 | [MàJ] Compromission de l'application 3CX Desktop App | 2023-03-31T00:00:00.000000 | 2023-04-12T00:00:00.000000 |
| certfr-2023-ale-015 | [MàJ] Campagne d'exploitation d'une vulnérabilité affectant VMware ESXi | 2023-02-03T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2023-ale-001 | Vulnérabilité dans Fortinet FortiOS | 2023-03-14T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-013 | [MàJ] Vulnérabilité dans Citrix ADC et Gateway | 2022-12-13T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-010 | Multiples vulnérabilités dans GLPI | 2022-10-07T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-009 | [MaJ] Vulnérabilité dans Zimbra Collaboration | 2022-10-07T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-008 | [MaJ] Multiples vulnérabilités dans Microsoft Exchange | 2022-09-30T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-007 | Multiples vulnérabilités dans Microsoft Windows | 2022-09-16T00:00:00.000000 | 2023-03-14T00:00:00.000000 |
| certfr-2022-ale-012 | [MàJ] Vulnérabilité dans FortiOS SSL-VPN | 2022-12-13T00:00:00.000000 | 2022-12-20T00:00:00.000000 |
| certfr-2022-ale-011 | Vulnérabilité dans les produits Fortinet | 2022-10-14T00:00:00.000000 | 2022-10-14T00:00:00.000000 |
| certfr-2022-ale-006 | [MàJ] Vulnérabilité dans Atlassian Confluence | 2022-06-03T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-ale-002 | Vulnérabilité dans VMware Spring Cloud Gateway | 2022-03-03T00:00:00.000000 | 2022-10-07T00:00:00.000000 |
| certfr-2022-ale-005 | [MàJ] Vulnérabilité dans Microsoft Windows | 2022-05-31T00:00:00.000000 | 2022-09-16T00:00:00.000000 |
| certfr-2022-ale-004 | Vulnérabilité dans F5 BIG-IP | 2022-05-11T00:00:00.000000 | 2022-09-16T00:00:00.000000 |
| certfr-2022-ale-003 | [MàJ] Vulnérabilité dans l'implémentation du protocole RPC par Microsoft | 2022-04-13T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-ale-001 | [MaJ] Vulnérabilité dans Microsoft Windows | 2022-01-12T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-022 | [MaJ] Vulnérabilité dans Apache Log4j | 2021-12-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-021 | Vulnérabilité dans Microsoft Exchange | 2021-11-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-019 | [MaJ] Vulnérabilité dans Microsoft Windows | 2021-09-08T00:00:00.000000 | 2022-05-04T00:00:00.000000 |