Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-58225 |
8.1 (3.1)
|
WordPress Paragon theme <= 1.1 - Local File Inclusion … |
axiomthemes |
Paragon |
2025-12-18T07:21:50.906Z | 2026-01-20T14:28:10.207Z |
| CVE-2025-58207 |
8.2 (3.1)
|
WordPress Ai Image Alt Text Generator for WP Plugin <=… |
WP Messiah |
Ai Image Alt Text Generator for WP |
2025-11-06T15:54:19.210Z | 2026-01-20T14:28:10.196Z |
| CVE-2025-54745 |
6.5 (3.1)
|
WordPress miniOrange's Google Authenticator Plugin <= … |
miniOrange |
miniOrange's Google Authenticator |
2025-12-18T07:21:49.914Z | 2026-01-20T14:28:10.170Z |
| CVE-2025-54751 |
7.1 (3.1)
|
WordPress PostX plugin <= 4.1.36 - Broken Access Contr… |
WPXPO |
PostX |
2025-12-18T07:21:50.337Z | 2026-01-20T14:28:10.147Z |
| CVE-2025-54748 |
6.5 (3.1)
|
WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Down… |
RomanCode |
MapSVG |
2025-12-18T07:21:50.115Z | 2026-01-20T14:28:10.128Z |
| CVE-2025-57897 |
7.1 (3.1)
|
WordPress Logtik theme <= 2.3 - Cross Site Scripting (… |
venusweb |
Logtik |
2025-12-18T07:21:50.715Z | 2026-01-20T14:28:10.117Z |
| CVE-2025-55707 |
7.2 (3.1)
|
WordPress PostX Plugin <= 4.1.35 - Privilege Escalatio… |
WPXPO |
PostX |
2025-12-18T07:21:50.529Z | 2026-01-20T14:28:10.117Z |
| CVE-2025-53585 |
7.1 (3.1)
|
WordPress WeMusic theme <= 1.9.1 - Cross Site Scriptin… |
NooTheme |
WeMusic |
2025-11-06T15:54:12.787Z | 2026-01-20T14:28:10.097Z |
| CVE-2025-57931 |
5.3 (3.1)
|
WordPress Popup box plugin <= 5.5.4 - Cross Site Reque… |
Ays Pro |
Popup box |
2025-10-29T04:02:09.962Z | 2026-01-20T14:28:10.080Z |
| CVE-2025-54737 |
7.1 (3.1)
|
WordPress Jobmonster theme <= 4.7.8 - Cross Site Scrip… |
NooTheme |
Jobmonster |
2025-11-06T15:54:17.806Z | 2026-01-20T14:28:10.029Z |
| CVE-2025-54711 |
7.1 (3.1)
|
WordPress Info Cards Plugin <= 1.0.11 - Broken Access … |
bPlugins |
Info Cards |
2025-11-06T15:54:14.029Z | 2026-01-20T14:28:09.984Z |
| CVE-2025-54045 |
4.3 (3.1)
|
WordPress CM On Demand Search And Replace plugin <= 1.… |
CreativeMindsSolutions |
CM On Demand Search And Replace |
2025-12-16T08:12:46.351Z | 2026-01-20T14:28:09.965Z |
| CVE-2025-54718 |
7.1 (3.1)
|
WordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 -… |
NooTheme |
Yogi - Health Beauty & Yoga |
2025-11-06T15:54:14.634Z | 2026-01-20T14:28:09.933Z |
| CVE-2025-54719 |
8.8 (3.1)
|
WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 -… |
NooTheme |
Yogi - Health Beauty & Yoga |
2025-11-06T15:54:15.371Z | 2026-01-20T14:28:09.932Z |
| CVE-2025-53586 |
9.8 (3.1)
|
WordPress WeMusic Theme <= 1.9.1 - PHP Object Injectio… |
NooTheme |
WeMusic |
2025-11-06T15:54:13.387Z | 2026-01-20T14:28:09.916Z |
| CVE-2025-53449 |
8.1 (3.1)
|
WordPress Convex theme <= 1.11 - Local File Inclusion … |
axiomthemes |
Convex |
2025-12-18T07:21:48.947Z | 2026-01-20T14:28:09.907Z |
| CVE-2025-54722 |
7.1 (3.1)
|
WordPress WooTour plugin <= 3.6.3 - Cross Site Scripti… |
Ex-Themes |
WooTour |
2025-11-06T15:54:16.991Z | 2026-01-20T14:28:09.895Z |
| CVE-2025-53446 |
8.1 (3.1)
|
WordPress Beautique theme <= 1.5 - Local File Inclusio… |
axiomthemes |
Beautique |
2025-12-18T07:21:48.403Z | 2026-01-20T14:28:09.895Z |
| CVE-2025-53445 |
8.1 (3.1)
|
WordPress Catwalk theme <= 1.4 - Local File Inclusion … |
axiomthemes |
Catwalk |
2025-12-18T07:21:48.218Z | 2026-01-20T14:28:09.892Z |
| CVE-2025-54721 |
7.1 (3.1)
|
WordPress Resca theme <= 3.0.2 - Cross Site Scripting … |
ThimPress |
Resca |
2025-11-06T15:54:16.209Z | 2026-01-20T14:28:09.884Z |
| CVE-2025-53448 |
8.1 (3.1)
|
WordPress Rally theme <= 1.1 - Local File Inclusion vu… |
axiomthemes |
Rally |
2025-12-18T07:21:48.769Z | 2026-01-20T14:28:09.880Z |
| CVE-2025-53574 |
6.1 (3.1)
|
WordPress Doliconnect Plugin <= 9.3.2 - Cross Site Scr… |
ptibogxiv |
Doliconnect |
2025-11-06T15:54:11.607Z | 2026-01-20T14:28:09.876Z |
| CVE-2025-53573 |
7.1 (3.1)
|
WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scr… |
jegtheme |
Epic Review |
2025-11-06T15:54:10.426Z | 2026-01-20T14:28:09.871Z |
| CVE-2025-53447 |
8.1 (3.1)
|
WordPress Assembly theme <= 1.1 - Local File Inclusion… |
axiomthemes |
Assembly |
2025-12-18T07:21:48.588Z | 2026-01-20T14:28:09.843Z |
| CVE-2025-53436 |
8.1 (3.1)
|
WordPress Monki theme <= 2.0.4 - Local File Inclusion … |
BZOTheme |
Monki |
2025-12-18T07:21:46.801Z | 2026-01-20T14:28:09.817Z |
| CVE-2025-53443 |
8.1 (3.1)
|
WordPress Smash theme <= 1.7 - Local File Inclusion vu… |
axiomthemes |
Smash |
2025-12-18T07:21:48.033Z | 2026-01-20T14:28:09.805Z |
| CVE-2025-53434 |
8.1 (3.1)
|
WordPress ChildHope theme <= 1.1.8 - Local File Inclus… |
AncoraThemes |
ChildHope |
2025-12-18T07:21:46.434Z | 2026-01-20T14:28:09.778Z |
| CVE-2025-53439 |
8.1 (3.1)
|
WordPress Harper theme <= 1.13 - Local File Inclusion … |
axiomthemes |
Harper |
2025-12-18T07:21:47.455Z | 2026-01-20T14:28:09.777Z |
| CVE-2025-53441 |
8.1 (3.1)
|
WordPress Greeny theme <= 2.6 - Local File Inclusion v… |
axiomthemes |
Greeny |
2025-12-18T07:21:47.651Z | 2026-01-20T14:28:09.749Z |
| CVE-2025-53442 |
8.1 (3.1)
|
WordPress Rentic theme <= 1.1 - Local File Inclusion v… |
axiomthemes |
Rentic |
2025-12-18T07:21:47.842Z | 2026-01-20T14:28:09.727Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62119 |
5.9 (3.1)
|
WordPress Add Featured Image Custom Link plugin <= 2.0… |
ViitorCloud Technologies Pvt Ltd |
Add Featured Image Custom Link |
2025-12-31T13:43:18.136Z | 2026-01-20T14:28:14.740Z |
| CVE-2025-62118 |
6.5 (3.1)
|
WordPress AdWords Conversion Tracking Code plugin <= 1… |
kcseopro |
AdWords Conversion Tracking Code |
2025-12-31T12:59:08.280Z | 2026-01-20T14:28:15.151Z |
| CVE-2025-62117 |
5.4 (3.1)
|
WordPress EasyIndex plugin <= 1.1.1704 - Cross Site Re… |
Jayce53 |
EasyIndex |
2025-12-31T13:56:26.868Z | 2026-01-20T14:28:14.548Z |
| CVE-2025-62116 |
5.3 (3.1)
|
WordPress AI Copilot plugin <= 1.4.7 - Broken Access C… |
Quadlayers |
AI Copilot |
2025-12-31T15:39:13.222Z | 2026-01-20T14:28:14.594Z |
| CVE-2025-62115 |
4.3 (3.1)
|
WordPress Hide Plugins plugin <= 1.0.4 - Broken Access… |
ThemeBoy |
Hide Plugins |
2025-12-31T16:27:35.305Z | 2026-01-20T14:28:14.758Z |
| CVE-2025-62114 |
5.3 (3.1)
|
WordPress Download Media Library plugin <= 0.2.1 - Sen… |
Marcelo Torres |
Download Media Library |
2025-12-31T15:40:07.221Z | 2026-01-20T14:28:14.535Z |
| CVE-2025-62113 |
4.3 (3.1)
|
WordPress Co-marquage service-public.fr plugin <= 0.5.… |
emendo_seb |
Co-marquage service-public.fr |
2025-12-31T16:28:24.382Z | 2026-01-20T14:28:14.772Z |
| CVE-2025-62112 |
4.3 (3.1)
|
WordPress Import into Easy Property Listings plugin <=… |
Merv Barrett |
Import into Easy Property Listings |
2025-12-30T16:21:30.852Z | 2026-01-20T14:28:14.605Z |
| CVE-2025-62111 |
6.5 (3.1)
|
WordPress Extra Shortcodes plugin <= 2.2 - Cross Site … |
Webvitaly |
Extra Shortcodes |
2025-12-31T13:05:54.784Z | 2026-01-20T14:28:14.598Z |
| CVE-2025-62109 |
7.5 (3.1)
|
WordPress Geo Controller plugin <= 8.9.4 - Sensitive D… |
INFINITUM FORM |
Geo Controller |
2025-12-09T14:52:20.721Z | 2026-01-20T14:28:14.650Z |
| CVE-2025-62108 |
5.4 (3.1)
|
WordPress Add Custom Codes plugin <= 4.80 - Broken Acc… |
SaifuMak |
Add Custom Codes |
2025-12-31T14:18:42.155Z | 2026-01-20T14:28:14.617Z |
| CVE-2025-62107 |
4.3 (3.1)
|
WordPress Feather Login Page plugin <= 1.1.7 - Cross S… |
PluginOps |
Feather Login Page |
2025-12-22T09:32:48.407Z | 2026-01-20T14:28:14.657Z |
| CVE-2025-62103 |
4.3 (3.1)
|
WordPress Media Library File Download plugin <= 1.4 - … |
wpmediadownload |
Media Library File Download |
2025-12-09T14:52:20.526Z | 2026-01-20T14:28:14.536Z |
| CVE-2025-62102 |
4.3 (3.1)
|
WordPress DoFollow Case by Case plugin <= 3.5.1 - Cros… |
apasionados |
DoFollow Case by Case |
2025-12-09T14:52:20.337Z | 2026-01-20T14:28:14.747Z |
| CVE-2025-62101 |
4.3 (3.1)
|
WordPress Pardakht Delkhah plugin <= 3.0.0 - Cross Sit… |
Omid Shamloo |
Pardakht Delkhah |
2025-12-31T16:33:19.519Z | 2026-01-20T14:28:14.501Z |
| CVE-2025-62100 |
5.3 (3.1)
|
WordPress ThemeRain Core plugin <= 1.1.9 - Broken Acce… |
themerain |
ThemeRain Core |
2025-12-09T14:52:20.128Z | 2026-01-20T14:28:14.616Z |
| CVE-2025-62099 |
4.3 (3.1)
|
WordPress Signature Add-On for Gravity Forms plugin <=… |
Approveme |
Signature Add-On for Gravity Forms |
2025-12-31T16:41:35.232Z | 2026-01-20T14:28:14.581Z |
| CVE-2025-62098 |
5.4 (3.1)
|
WordPress Portfolio Gallery plugin <= 1.4.8 - Broken A… |
Totalsoft |
Portfolio Gallery |
2025-12-31T14:47:45.968Z | 2026-01-20T14:28:14.596Z |
| CVE-2025-62097 |
6.5 (3.1)
|
WordPress SEO Slider plugin <= 1.1.1 - Cross Site Scri… |
SEOthemes |
SEO Slider |
2025-12-31T13:10:27.294Z | 2026-01-20T14:28:14.754Z |
| CVE-2025-62096 |
6.5 (3.1)
|
WordPress Maximum Products per User for WooCommerce pl… |
WPFactory |
Maximum Products per User for WooCommerce |
2025-12-31T13:12:18.482Z | 2026-01-20T14:28:14.599Z |
| CVE-2025-62095 |
6.5 (3.1)
|
WordPress Bootstrap Modals plugin <= 1.3.2 - Cross Sit… |
Neilgee |
Bootstrap Modals |
2025-12-31T13:16:59.367Z | 2026-01-20T14:28:14.579Z |
| CVE-2025-62094 |
6.5 (3.1)
|
WordPress Void Elementor WHMCS Elements For Elementor … |
Voidthemes |
Void Elementor WHMCS Elements For Elementor Page Builder |
2025-12-22T09:47:18.472Z | 2026-01-20T14:28:14.756Z |
| CVE-2025-62093 |
8.5 (3.1)
|
WordPress Image&Video FullScreen Background plugin <= … |
LambertGroup |
Image&Video FullScreen Background |
2025-12-09T14:52:19.928Z | 2026-01-20T14:28:14.588Z |
| CVE-2025-62092 |
5.3 (3.1)
|
WordPress Wiremo plugin <= 1.4.99 - Broken Access Cont… |
Wiremo |
Wiremo |
2025-12-31T15:22:41.320Z | 2026-01-20T14:28:14.475Z |
| CVE-2025-62091 |
5.4 (3.1)
|
WordPress Serial Codes Generator and Validator with Wo… |
Vollstart |
Serial Codes Generator and Validator with WooCommerce Support |
2025-12-31T14:19:32.045Z | 2026-01-20T14:28:14.545Z |
| CVE-2025-62090 |
6.5 (3.1)
|
WordPress Gutenverse News – Advanced News Magazine Blo… |
Jegstudio |
Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons |
2025-12-09T14:52:19.744Z | 2026-01-20T14:28:14.531Z |
| CVE-2025-62089 |
4.3 (3.1)
|
WordPress Mergado Pack plugin <= 4.2.0 - Cross Site Re… |
MERGADO |
Mergado Pack |
2025-12-31T15:51:01.849Z | 2026-01-20T14:28:14.289Z |
| CVE-2025-62088 |
5.4 (3.1)
|
WordPress WordPress & WooCommerce Scraper plugin, Impo… |
extendons |
WordPress & WooCommerce Scraper Plugin, Import Data from Any Site |
2025-12-31T17:04:44.038Z | 2026-01-20T14:28:14.318Z |
| CVE-2025-62087 |
4.3 (3.1)
|
WordPress Sticky Notes for WP Dashboard plugin <= 1.2.… |
Web Builder 143 |
Sticky Notes for WP Dashboard |
2025-12-31T16:08:58.565Z | 2026-01-20T14:28:14.208Z |
| CVE-2025-62086 |
5.4 (3.1)
|
WordPress Яндекс Доставка (Boxberry) plugin <= 2.32 - … |
akazanstev |
Яндекс Доставка (Boxberry) |
2025-12-09T14:52:19.543Z | 2026-01-20T14:28:14.095Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62119 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.527 | 2026-01-20T15:17:52.720 |
| fkie_cve-2025-62118 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:41.500 | 2026-01-20T15:17:52.613 |
| fkie_cve-2025-62117 | Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 EasyIndex easyindex allows Cross Site Re… | 2025-12-31T14:15:52.383 | 2026-01-20T15:17:52.510 |
| fkie_cve-2025-62116 | Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configur… | 2025-12-31T16:15:44.867 | 2026-01-20T15:17:52.407 |
| fkie_cve-2025-62115 | Missing Authorization vulnerability in ThemeBoy Hide Plugins allows Exploiting Incorrectly Configur… | 2025-12-31T17:15:46.323 | 2026-01-20T15:17:52.303 |
| fkie_cve-2025-62114 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcelo… | 2025-12-31T16:15:44.713 | 2026-01-20T15:17:52.207 |
| fkie_cve-2025-62113 | Cross-Site Request Forgery (CSRF) vulnerability in emendo_seb Co-marquage service-public.Fr allows … | 2025-12-31T17:15:46.123 | 2026-01-20T15:17:52.107 |
| fkie_cve-2025-62112 | Cross-Site Request Forgery (CSRF) vulnerability in Merv Barrett Import into Easy Property Listings … | 2025-12-30T17:15:42.547 | 2026-01-20T15:17:52.007 |
| fkie_cve-2025-62111 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:41.350 | 2026-01-20T15:17:51.903 |
| fkie_cve-2025-62109 | Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf… | 2025-12-09T16:18:01.320 | 2026-01-20T15:17:51.757 |
| fkie_cve-2025-62108 | Missing Authorization vulnerability in SaifuMak Add Custom Codes allows Exploiting Incorrectly Conf… | 2025-12-31T15:15:52.580 | 2026-01-20T15:17:51.650 |
| fkie_cve-2025-62107 | Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page allows Cross Site R… | 2025-12-22T10:16:00.873 | 2026-01-20T15:17:51.553 |
| fkie_cve-2025-62103 | Cross-Site Request Forgery (CSRF) vulnerability in wpmediadownload Media Library File Download medi… | 2025-12-09T16:18:01.187 | 2026-01-20T15:17:51.420 |
| fkie_cve-2025-62102 | Cross-Site Request Forgery (CSRF) vulnerability in apasionados DoFollow Case by Case dofollow-case-… | 2025-12-09T16:18:01.053 | 2026-01-20T15:17:51.287 |
| fkie_cve-2025-62101 | Cross-Site Request Forgery (CSRF) vulnerability in Omid Shamloo Pardakht Delkhah allows Cross Site … | 2025-12-31T17:15:45.970 | 2026-01-20T15:17:51.187 |
| fkie_cve-2025-62100 | Missing Authorization vulnerability in themerain ThemeRain Core themerain-core allows Exploiting In… | 2025-12-09T16:18:00.913 | 2026-01-20T15:17:51.050 |
| fkie_cve-2025-62099 | Missing Authorization vulnerability in Approveme Signature Add-On for Gravity Forms allows Exploiti… | 2025-12-31T17:15:45.820 | 2026-01-20T15:17:50.943 |
| fkie_cve-2025-62098 | Missing Authorization vulnerability in Totalsoft Portfolio Gallery allows Exploiting Incorrectly Co… | 2025-12-31T15:15:52.450 | 2026-01-20T15:17:50.837 |
| fkie_cve-2025-62097 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.240 | 2026-01-20T15:17:50.737 |
| fkie_cve-2025-62096 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.093 | 2026-01-20T15:17:50.637 |
| fkie_cve-2025-62095 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:51.943 | 2026-01-20T15:17:50.523 |
| fkie_cve-2025-62094 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-22T10:16:00.673 | 2026-01-20T15:17:50.423 |
| fkie_cve-2025-62093 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:00.783 | 2026-01-20T15:17:50.290 |
| fkie_cve-2025-62092 | Missing Authorization vulnerability in Wiremo allows Exploiting Incorrectly Configured Access Contr… | 2025-12-31T16:15:44.567 | 2026-01-20T15:17:50.190 |
| fkie_cve-2025-62091 | Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooComme… | 2025-12-31T15:15:52.300 | 2026-01-20T15:17:50.090 |
| fkie_cve-2025-62090 | Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gute… | 2025-12-09T16:18:00.643 | 2026-01-20T15:17:49.960 |
| fkie_cve-2025-62089 | Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack allows Cross Site Request F… | 2025-12-31T16:15:44.423 | 2026-01-20T15:17:49.863 |
| fkie_cve-2025-62088 | Server-Side Request Forgery (SSRF) vulnerability in extendons WordPress & WooCommerce Scraper Plugi… | 2025-12-31T17:15:45.577 | 2026-01-20T15:17:49.770 |
| fkie_cve-2025-62087 | Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard allows Exploit… | 2025-12-31T16:15:44.280 | 2026-01-20T15:17:49.673 |
| fkie_cve-2025-62086 | Missing Authorization vulnerability in akazanstev Яндекс Доставка (Boxberry) boxberry allows Exploi… | 2025-12-09T16:18:00.503 | 2026-01-20T15:17:49.547 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9g5v-hmcj-pxrc |
10.0 (3.1)
|
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 … | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-7v52-p3w5-3m2m |
8.2 (3.1)
|
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily… | 2026-01-12T21:30:34Z | 2026-01-12T21:30:34Z |
| ghsa-5c5p-g26h-xx2f |
7.5 (3.1)
|
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improp… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-577g-w45q-4pwf |
6.5 (3.1)
|
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated atta… | 2026-01-12T18:30:30Z | 2026-01-12T21:30:34Z |
| ghsa-hgq8-fc97-42ff |
7.5 (3.1)
|
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manage… | 2022-05-17T04:06:30Z | 2026-01-12T21:30:28Z |
| ghsa-2j56-f322-jxrm |
5.9 (3.1)
|
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session rese… | 2022-05-02T03:31:14Z | 2026-01-12T21:30:28Z |
| ghsa-g24c-fx4v-xg9w |
5.3 (3.1)
|
Mattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider | 2022-05-24T17:21:06Z | 2026-01-12T20:18:44Z |
| ghsa-8pff-p3gx-w4jf |
6.1 (3.1)
|
Mattermost Server vulnerable to XSS via an uploaded file | 2022-05-24T17:21:06Z | 2026-01-12T20:18:18Z |
| ghsa-fcwg-45jh-5qhf |
8.8 (3.1)
|
Mattermost Server vulnerable to CSRF if CORS is enabled | 2022-05-24T17:21:06Z | 2026-01-12T20:17:23Z |
| ghsa-c253-8hr4-r8v9 |
5.3 (3.1)
|
Mattermost Server exposes private team invite ID | 2022-05-24T17:21:06Z | 2026-01-12T20:16:26Z |
| ghsa-8q4v-35v6-g8wr |
9.8 (3.1)
|
Mattermost Server is vulnerable CSV Injection | 2022-05-24T17:21:06Z | 2026-01-12T20:15:53Z |
| ghsa-9rp8-h4g8-8766 |
5.3 (3.1)
|
Weblate wlc has insecure API key configuration | 2026-01-12T18:07:03Z | 2026-01-12T20:07:26Z |
| ghsa-2mmv-7rrp-g8xh |
2.5 (3.1)
|
Weblate command-line client susceptible to SSL verification skip | 2026-01-12T16:13:33Z | 2026-01-12T20:07:14Z |
| ghsa-2mq9-hm29-8qch |
8.6 (4.0)
|
Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile v… | 2026-01-12T16:12:50Z | 2026-01-12T20:06:35Z |
| ghsa-ch7p-mpv4-4vg4 |
4.9 (3.1)
|
CoreShop Vulnerable to SQL Injection via Admin Reports | 2026-01-07T19:29:50Z | 2026-01-12T20:06:21Z |
| ghsa-9589-mq83-f749 |
5.3 (3.1)
|
Mattermost Server is vulnerable to DoS through maliciously crafted posts | 2022-05-24T17:21:05Z | 2026-01-12T19:29:16Z |
| ghsa-63wg-qmrv-7q66 |
5.3 (3.1)
|
Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint | 2022-05-24T17:21:05Z | 2026-01-12T19:28:48Z |
| ghsa-f7c3-7vp3-44p6 |
6.1 (3.1)
|
Mattermost Server mishandles redirect denial action | 2022-05-24T17:21:05Z | 2026-01-12T19:27:05Z |
| ghsa-p25m-jpj4-qcrr |
7.5 (3.1)
|
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms) | 2023-09-13T18:31:26Z | 2026-01-12T19:17:00Z |
| ghsa-9c3x-r3wp-mgxm |
3.1 (3.1)
2.3 (4.0)
|
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient | 2024-11-06T15:16:09Z | 2026-01-12T19:08:03Z |
| ghsa-gg42-mwr6-p82c |
8.1 (3.1)
|
Mattermost Server has intermittent Authorization bypass for resource-owners | 2022-05-24T17:21:05Z | 2026-01-12T18:34:33Z |
| ghsa-rv23-6fx7-9r87 |
9.9 (3.1)
|
An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges | 2026-01-12T18:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-mp53-vxqr-3f76 |
9.8 (3.1)
|
An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the … | 2026-01-12T18:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-m3m3-pp28-9hrp |
4.8 (3.1)
|
The Quiz Maker WordPress plugin before 6.7.0.89 does not sanitise and escape some of its settings, … | 2026-01-12T06:30:14Z | 2026-01-12T18:30:30Z |
| ghsa-f3vq-4x38-vg3x |
5.5 (3.1)
|
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … | 2026-01-10T00:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-f2cj-whwv-wjfw |
6.5 (3.1)
|
The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.… | 2026-01-10T00:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-c87m-hx3f-42wq |
5.3 (3.1)
|
Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for in… | 2026-01-12T18:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-8mfp-xmv3-hv35 |
8.1 (3.1)
|
Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Secu… | 2026-01-10T12:30:15Z | 2026-01-12T18:30:30Z |
| ghsa-7g4v-c9v7-6647 |
8.8 (3.1)
|
An issue in Automai Director v.25.2.0 allows a remote attacker to execute arbitrary code via the up… | 2026-01-12T18:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-6phw-p8vc-q8gp |
7.5 (3.1)
|
NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection comp… | 2026-01-10T12:30:16Z | 2026-01-12T18:30:30Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2023-52553 | Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this… | 2024-02-27T06:01:46.870514Z |
| gsd-2023-52552 | Input verification vulnerability in the power module. Impact: Successful exploitation of … | 2024-02-27T06:01:46.856686Z |
| gsd-2023-52539 | Permission verification vulnerability in the Settings module. Impact: Successful exploita… | 2024-02-27T06:01:46.834222Z |
| gsd-2023-52548 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-27T06:01:46.807670Z |
| gsd-2023-52540 | Vulnerability of improper authentication in the Iaware module. Impact: Successful exploit… | 2024-02-27T06:01:46.774482Z |
| gsd-2023-7249 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-27T06:01:28.616722Z |
| gsd-2023-7248 | Certain functionality in OpenText Vertica Management console might be prone to bypass vi… | 2024-02-27T06:01:28.517244Z |
| gsd-2021-46940 | In the Linux kernel, the following vulnerability has been resolved: tools/power turbosta… | 2024-02-26T06:03:52.861375Z |
| gsd-2021-46924 | In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix m… | 2024-02-26T06:03:52.846268Z |
| gsd-2021-46927 | In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use … | 2024-02-26T06:03:52.833753Z |
| gsd-2021-46951 | In the Linux kernel, the following vulnerability has been resolved: tpm: efi: Use local … | 2024-02-26T06:03:52.823943Z |
| gsd-2021-46942 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix shared… | 2024-02-26T06:03:52.783362Z |
| gsd-2021-46938 | In the Linux kernel, the following vulnerability has been resolved: dm rq: fix double fr… | 2024-02-26T06:03:52.768766Z |
| gsd-2021-46913 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables:… | 2024-02-26T06:03:52.762142Z |
| gsd-2021-46908 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct per… | 2024-02-26T06:03:52.758468Z |
| gsd-2021-46909 | In the Linux kernel, the following vulnerability has been resolved: ARM: footbridge: fix… | 2024-02-26T06:03:52.746386Z |
| gsd-2021-46934 | In the Linux kernel, the following vulnerability has been resolved: i2c: validate user d… | 2024-02-26T06:03:52.741778Z |
| gsd-2021-46921 | In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix… | 2024-02-26T06:03:52.730535Z |
| gsd-2021-46912 | In the Linux kernel, the following vulnerability has been resolved: net: Make tcp_allowe… | 2024-02-26T06:03:52.674121Z |
| gsd-2021-46931 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the … | 2024-02-26T06:03:52.671871Z |
| gsd-2021-46937 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix … | 2024-02-26T06:03:52.663954Z |
| gsd-2021-46919 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix… | 2024-02-26T06:03:52.634122Z |
| gsd-2021-46923 | In the Linux kernel, the following vulnerability has been resolved: fs/mount_setattr: al… | 2024-02-26T06:03:52.632389Z |
| gsd-2021-46953 | In the Linux kernel, the following vulnerability has been resolved: ACPI: GTDT: Don't co… | 2024-02-26T06:03:52.628231Z |
| gsd-2021-46929 | In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu t… | 2024-02-26T06:03:52.607105Z |
| gsd-2021-46907 | In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Don't use … | 2024-02-26T06:03:52.600672Z |
| gsd-2021-46944 | In the Linux kernel, the following vulnerability has been resolved: media: staging/intel… | 2024-02-26T06:03:52.596953Z |
| gsd-2021-46928 | In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale … | 2024-02-26T06:03:52.513250Z |
| gsd-2021-46933 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: C… | 2024-02-26T06:03:52.507771Z |
| gsd-2021-46926 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw… | 2024-02-26T06:03:52.506839Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-186254 | Malicious code in commitlint-prosthetics-altair-magnetosphere (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186253 | Malicious code in commitlint-config-angular-sadr-cluster-mira (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186252 | Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186251 | Malicious code in commitlint-config-angular-init-miranda-luna (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186250 | Malicious code in commitlint-config-angular-hercules-express-yonder (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186249 | Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186248 | Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186247 | Malicious code in commitlint-chalk-neptune-auriga (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186246 | Malicious code in commitlint-chalk-eclipse-init (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186245 | Malicious code in commitlint-betelgeuse-yaml-indus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186244 | Malicious code in commitizen-singularitarianism-framework-wavefunction (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186243 | Malicious code in commitizen-radioastronomy-steganography-grunt (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186242 | Malicious code in commitizen-playwright-selenium-publish (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186241 | Malicious code in commitizen-markdown-luminescence-meteor (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186240 | Malicious code in commitizen-eclipse-sadr-chariklo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186239 | Malicious code in commitizen-chromedriver-redis-polaris (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186238 | Malicious code in commitizen-antares-magellan-saturnology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186237 | Malicious code in command-xo-module-antd (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186236 | Malicious code in command-react-bootstrap-neuromorphic-magellan (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186235 | Malicious code in command-pulsar-atlas-on (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186234 | Malicious code in command-prettier-stylelint-server-schema (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186233 | Malicious code in command-leda-fetch-delphinus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186232 | Malicious code in command-dotenv-safe-oberon-lint-staged (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186231 | Malicious code in command-dotenv-betelgeuse-neutronstar (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186230 | Malicious code in command-celeste-resonance-hyperion (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186229 | Malicious code in command-bootstrap-exoplanetology-paleontology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186228 | Malicious code in command-blazar-node-config-phylogenetics (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186227 | Malicious code in command-axios-asteroid-carina (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186226 | Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186225 | Malicious code in comet-rehype-transport-entanglement (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-0869 | Cisco WebEx: Mehrere Schwachstellen | 2023-04-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0867 | Cisco Small Business: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2023-04-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0866 | Cisco Small Business: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2023-04-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0865 | Cisco Prime Infrastructure: Mehrere Schwachstellen | 2023-04-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0863 | Cisco Small Business: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2023-04-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0176 | vim: Schwachstelle ermöglicht Denial of Service | 2023-01-23T23:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-2370 | Apache Traffic Server: Mehrere Schwachstellen | 2022-12-19T23:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0992 | Apache Traffic Server: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2022-08-09T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0679 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-07-13T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0564 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-07-05T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0153 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-03-02T23:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2022-0135 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-06-06T22:00:00.000+00:00 | 2023-04-05T22:00:00.000+00:00 |
| wid-sec-w-2023-0860 | NGINX NJS: Mehrere Schwachstellen ermöglichen Codeausführung | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0857 | IBM QRadar SIEM: Mehrere Schwachstellen | 2022-05-24T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0856 | IBM QRadar SIEM: Mehrere Schwachstellen | 2022-05-31T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0854 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0852 | Irfan Skiljan IrfanView: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0851 | IBM Maximo Asset Management: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0850 | JetBrains PhpStorm: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0846 | Netgate pfSense: Schwachstelle ermöglicht Cross-Site Scripting | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0844 | Fluentd: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-04T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0794 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2023-03-29T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2022-1152 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2022-08-22T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2022-0593 | Cisco Expressway: Mehrere Schwachstellen | 2022-07-06T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2022-0293 | npm: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-06-13T22:00:00.000+00:00 | 2023-04-04T22:00:00.000+00:00 |
| wid-sec-w-2023-0838 | Xerox FreeFlow Print Server: Mehrere Schwachstellen | 2022-05-11T22:00:00.000+00:00 | 2023-04-03T22:00:00.000+00:00 |
| wid-sec-w-2023-0837 | Android Patchday April 2023 | 2023-04-03T22:00:00.000+00:00 | 2023-04-03T22:00:00.000+00:00 |
| wid-sec-w-2023-0836 | Nextcloud: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-04-03T22:00:00.000+00:00 | 2023-04-03T22:00:00.000+00:00 |
| wid-sec-w-2023-0833 | HP LaserJet: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-04-03T22:00:00.000+00:00 | 2023-04-03T22:00:00.000+00:00 |
| wid-sec-w-2023-0832 | Ipswitch WS_FTP Server: Schwachstelle ermöglicht Cross-Site Scripting | 2023-04-03T22:00:00.000+00:00 | 2023-04-03T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:9741 | Red Hat Security Advisory: perl-File-Find-Rule security update | 2025-06-26T06:32:54+00:00 | 2025-11-21T19:38:01+00:00 |
| rhsa-2025:9740 | Red Hat Security Advisory: perl-File-Find-Rule-Perl security update | 2025-06-26T06:29:03+00:00 | 2025-11-21T19:38:00+00:00 |
| rhsa-2025:9658 | Red Hat Security Advisory: perl-File-Find-Rule security update | 2025-06-25T15:58:42+00:00 | 2025-11-21T19:37:58+00:00 |
| rhsa-2025:9605 | Red Hat Security Advisory: perl-File-Find-Rule security update | 2025-06-25T06:17:00+00:00 | 2025-11-21T19:37:55+00:00 |
| rhsa-2025:9569 | Red Hat Security Advisory: gimp:2.8 security update | 2025-06-24T21:15:59+00:00 | 2025-11-21T19:37:54+00:00 |
| rhsa-2025:9501 | Red Hat Security Advisory: gimp security update | 2025-06-24T09:45:38+00:00 | 2025-11-21T19:37:54+00:00 |
| rhsa-2025:9517 | Red Hat Security Advisory: perl-File-Find-Rule security update | 2025-06-24T11:31:48+00:00 | 2025-11-21T19:37:53+00:00 |
| rhsa-2025:9466 | Red Hat Security Advisory: mod_proxy_cluster security update | 2025-06-24T02:31:10+00:00 | 2025-11-21T19:37:53+00:00 |
| rhsa-2025:9492 | Red Hat Security Advisory: kernel-rt security update | 2025-06-24T04:48:15+00:00 | 2025-11-21T19:37:52+00:00 |
| rhsa-2025:9498 | Red Hat Security Advisory: kernel security update | 2025-06-24T06:58:36+00:00 | 2025-11-21T19:37:51+00:00 |
| rhsa-2025:9497 | Red Hat Security Advisory: kernel security update | 2025-06-24T05:08:55+00:00 | 2025-11-21T19:37:51+00:00 |
| rhsa-2025:9494 | Red Hat Security Advisory: kernel security update | 2025-06-24T06:19:15+00:00 | 2025-11-21T19:37:51+00:00 |
| rhsa-2025:9493 | Red Hat Security Advisory: kernel-rt security update | 2025-06-24T04:41:35+00:00 | 2025-11-21T19:37:51+00:00 |
| rhsa-2025:9491 | Red Hat Security Advisory: kernel security update | 2025-06-24T06:19:15+00:00 | 2025-11-21T19:37:50+00:00 |
| rhsa-2025:9490 | Red Hat Security Advisory: kernel security update | 2025-06-24T05:19:55+00:00 | 2025-11-21T19:37:49+00:00 |
| rhsa-2025:9434 | Red Hat Security Advisory: mod_proxy_cluster security update | 2025-06-24T01:39:09+00:00 | 2025-11-21T19:37:48+00:00 |
| rhsa-2025:9431 | Red Hat Security Advisory: libarchive security update | 2025-06-24T06:58:35+00:00 | 2025-11-21T19:37:47+00:00 |
| rhsa-2025:9420 | Red Hat Security Advisory: libarchive security update | 2025-06-24T01:13:14+00:00 | 2025-11-21T19:37:47+00:00 |
| rhsa-2025:9396 | Red Hat Security Advisory: mod_auth_openidc security update | 2025-06-23T16:02:23+00:00 | 2025-11-21T19:37:46+00:00 |
| rhsa-2025:9393 | Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 security update | 2025-06-23T14:42:14+00:00 | 2025-11-21T19:37:46+00:00 |
| rhsa-2025:9380 | Red Hat Security Advisory: spice-client-win security update | 2025-06-23T11:15:18+00:00 | 2025-11-21T19:37:45+00:00 |
| rhsa-2025:9338 | Red Hat Security Advisory: perl-YAML-LibYAML security update | 2025-06-23T02:53:56+00:00 | 2025-11-21T19:37:44+00:00 |
| rhsa-2025:9332 | Red Hat Security Advisory: mpfr security update | 2025-06-23T02:48:57+00:00 | 2025-11-21T19:37:44+00:00 |
| rhsa-2025:9331 | Red Hat Security Advisory: libvpx security update | 2025-06-23T02:49:07+00:00 | 2025-11-21T19:37:43+00:00 |
| rhsa-2025:9330 | Red Hat Security Advisory: perl-YAML-LibYAML security update | 2025-06-23T02:26:28+00:00 | 2025-11-21T19:37:43+00:00 |
| rhsa-2025:9329 | Red Hat Security Advisory: perl-YAML-LibYAML security update | 2025-06-23T02:36:37+00:00 | 2025-11-21T19:37:43+00:00 |
| rhsa-2025:9328 | Red Hat Security Advisory: libblockdev security update | 2025-06-23T03:06:17+00:00 | 2025-11-21T19:37:42+00:00 |
| rhsa-2025:9327 | Red Hat Security Advisory: libblockdev security update | 2025-06-23T03:35:27+00:00 | 2025-11-21T19:37:42+00:00 |
| rhsa-2025:9326 | Red Hat Security Advisory: libblockdev security update | 2025-06-23T03:16:22+00:00 | 2025-11-21T19:37:42+00:00 |
| rhsa-2025:9325 | Red Hat Security Advisory: libblockdev security update | 2025-06-23T02:55:16+00:00 | 2025-11-21T19:37:41+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-45954 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge. | 2021-12-02T00:00:00.000Z | 2023-03-25T00:00:00.000Z |
| msrc_cve-2021-45953 | Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge. | 2021-12-02T00:00:00.000Z | 2023-03-25T00:00:00.000Z |
| msrc_cve-2021-45952 | Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities to the best of our knowledge. | 2021-12-02T00:00:00.000Z | 2023-03-25T00:00:00.000Z |
| msrc_cve-2023-28286 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-24T07:00:00.000Z |
| msrc_cve-2023-21739 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | 2023-01-10T08:00:00.000Z | 2023-03-24T07:00:00.000Z |
| msrc_cve-2022-47211 | Microsoft Office Graphics Remote Code Execution Vulnerability | 2022-12-13T08:00:00.000Z | 2023-03-23T07:00:00.000Z |
| msrc_cve-2022-37958 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2023-03-23T07:00:00.000Z |
| msrc_cve-2023-28450 | An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. | 2023-03-10T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2023-26769 | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c. | 2023-03-10T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2023-26768 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions. | 2023-03-10T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2023-26767 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint. | 2023-03-10T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2022-48339 | An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function the parameter file and parameter srcdir come from external input and parameters are not escaped. If a file name or directory name contains shell metacharacters code may be executed. | 2023-02-01T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2022-48338 | An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function and bound to C-c C-f. Inside the function the external command gem is called through shell-command-to-string but the feature-name parameters are not escaped. Thus malicious Ruby source files may cause commands to be executed. | 2023-02-01T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2022-48337 | GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input. | 2023-02-01T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2022-2553 | The authfile directive in the booth config file is ignored preventing use of authentication in communications from node to node. As a result nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster. | 2022-07-02T00:00:00.000Z | 2023-03-22T00:00:00.000Z |
| msrc_cve-2023-23397 | Microsoft Outlook Elevation of Privilege Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-21T07:00:00.000Z |
| msrc_cve-2023-25173 | containerd supplementary groups are not set up properly | 2023-02-01T00:00:00.000Z | 2023-03-20T00:00:00.000Z |
| msrc_cve-2022-2196 | Speculative execution attacks in KVM VMX | 2023-01-04T00:00:00.000Z | 2023-03-20T00:00:00.000Z |
| msrc_cve-2023-23389 | Microsoft Defender Elevation of Privilege Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-16T07:00:00.000Z |
| msrc_cve-2022-41099 | BitLocker Security Feature Bypass Vulnerability | 2022-11-08T08:00:00.000Z | 2023-03-16T07:00:00.000Z |
| msrc_cve-2023-1264 | NULL Pointer Dereference in vim/vim | 2023-03-10T00:00:00.000Z | 2023-03-15T00:00:00.000Z |
| msrc_cve-2022-3707 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system. | 2023-03-10T00:00:00.000Z | 2023-03-15T00:00:00.000Z |
| msrc_cve-2023-24930 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24923 | Microsoft OneDrive for Android Information Disclosure Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24920 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24919 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24913 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24910 | Windows Graphics Component Elevation of Privilege Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24908 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| msrc_cve-2023-24906 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 2023-03-14T07:00:00.000Z | 2023-03-14T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201404-0365 | SAP Enterprise Portal does not properly restrict access to the Federation configuration p… | 2025-04-15T23:33:15.065000Z |
| var-202003-1805 | Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 2… | 2025-04-15T23:28:46.694000Z |
| var-202212-2153 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a s… | 2025-04-15T23:28:38.180000Z |
| var-202007-1457 | In certain Citrix products, information disclosure can be achieved by an authenticated VP… | 2025-04-15T23:19:20.339000Z |
| var-202402-2811 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_… | 2025-04-15T23:17:23.651000Z |
| var-202201-1926 | Rust is a multi-paradigm, general-purpose programming language designed for performance a… | 2025-04-15T20:49:20.919000Z |
| var-202201-0393 | In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream functio… | 2025-04-15T20:21:51.863000Z |
| var-201405-0430 | Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virt… | 2025-04-14T23:32:38.288000Z |
| var-201404-0115 | Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbi… | 2025-04-14T23:31:10.884000Z |
| var-201404-0031 | The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before… | 2025-04-14T23:28:15.541000Z |
| var-201404-0303 | Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers… | 2025-04-14T23:28:15.495000Z |
| var-201404-0574 | CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7… | 2025-04-14T23:22:20.767000Z |
| var-201405-0321 | Cross-site scripting (XSS) vulnerability in Citrix NetScaler Gateway (formerly Citrix Acc… | 2025-04-14T23:21:46.815000Z |
| var-201505-0062 | Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before … | 2025-04-14T22:14:02.107000Z |
| var-201205-0311 | php-wrapper.fcgi does not properly handle command-line arguments, which allows remote att… | 2025-04-14T20:09:49.379000Z |
| var-201408-0166 | The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport… | 2025-04-13T23:42:06.722000Z |
| var-201409-0056 | Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware … | 2025-04-13T23:42:06.567000Z |
| var-201410-0925 | gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary commands via a the (… | 2025-04-13T23:42:06.373000Z |
| var-201410-1051 | Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC… | 2025-04-13T23:42:06.286000Z |
| var-201411-0466 | Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5.50.10 before … | 2025-04-13T23:42:05.884000Z |
| var-201412-0288 | Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow physically prox… | 2025-04-13T23:42:05.623000Z |
| var-201412-0500 | Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X … | 2025-04-13T23:42:05.497000Z |
| var-201501-0222 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Ma… | 2025-04-13T23:42:05.317000Z |
| var-201501-0390 | The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Ga… | 2025-04-13T23:42:05.283000Z |
| var-201502-0005 | The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Secur… | 2025-04-13T23:42:05.109000Z |
| var-201502-0089 | Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Works… | 2025-04-13T23:42:05.065000Z |
| var-201502-0152 | The web framework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Ma… | 2025-04-13T23:42:05.025000Z |
| var-201502-0173 | Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unif… | 2025-04-13T23:42:04.995000Z |
| var-201504-0282 | Cross-site scripting (XSS) vulnerability in the administrative web interface in Cisco Uni… | 2025-04-13T23:42:04.559000Z |
| var-201505-0199 | The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does … | 2025-04-13T23:42:04.361000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:2179-1 | Security update for openssl | 2022-06-24T12:05:38Z | 2022-06-24T12:05:38Z |
| suse-su-2022:2178-2 | Security update for salt | 2022-06-24T12:04:50Z | 2022-06-24T12:04:50Z |
| suse-su-2022:2178-1 | Security update for salt | 2022-06-24T12:04:39Z | 2022-06-24T12:04:39Z |
| suse-su-2022:2177-1 | Security update for the Linux Kernel | 2022-06-24T11:32:21Z | 2022-06-24T11:32:21Z |
| suse-su-2022:2175-1 | Security update for drbd | 2022-06-24T10:34:06Z | 2022-06-24T10:34:06Z |
| suse-su-2022:2173-1 | Security update for the Linux Kernel | 2022-06-24T08:52:52Z | 2022-06-24T08:52:52Z |
| suse-su-2022:2172-1 | Security update for the Linux Kernel | 2022-06-24T08:33:58Z | 2022-06-24T08:33:58Z |
| suse-su-2022:2169-1 | Security update for drbd | 2022-06-24T08:00:57Z | 2022-06-24T08:00:57Z |
| suse-su-2022:2168-1 | Security update for drbd | 2022-06-24T07:58:02Z | 2022-06-24T07:58:02Z |
| suse-su-2022:2166-1 | Security update for python3 | 2022-06-23T14:02:41Z | 2022-06-23T14:02:41Z |
| suse-su-2022:2165-1 | Security update for containerd | 2022-06-23T13:55:24Z | 2022-06-23T13:55:24Z |
| suse-su-2022:2164-1 | Security update for xen | 2022-06-23T13:33:39Z | 2022-06-23T13:33:39Z |
| suse-su-2022:2163-1 | Security update for 389-ds | 2022-06-23T12:34:06Z | 2022-06-23T12:34:06Z |
| suse-su-2022:2161-1 | Security update for php74 | 2022-06-23T08:15:38Z | 2022-06-23T08:15:38Z |
| suse-su-2022:2160-1 | Security update for mariadb | 2022-06-23T08:10:09Z | 2022-06-23T08:10:09Z |
| suse-su-2022:2159-1 | Security update for salt | 2022-06-23T08:04:24Z | 2022-06-23T08:04:24Z |
| suse-su-2022:2158-1 | Security update for xen | 2022-06-23T08:03:57Z | 2022-06-23T08:03:57Z |
| suse-su-2022:2154-1 | Security update for salt | 2022-06-22T12:53:55Z | 2022-06-22T12:53:55Z |
| suse-su-2022:2153-1 | Security update for drbd | 2022-06-22T09:39:19Z | 2022-06-22T09:39:19Z |
| suse-su-2022:2152-1 | Security update for drbd | 2022-06-22T09:39:08Z | 2022-06-22T09:39:08Z |
| suse-su-2022:2151-1 | Security update for fwupdate | 2022-06-22T06:52:32Z | 2022-06-22T06:52:32Z |
| suse-su-2022:2150-1 | Security update for fwupdate | 2022-06-22T06:46:20Z | 2022-06-22T06:46:20Z |
| suse-su-2022:2147-1 | Security update for python36 | 2022-06-21T08:33:00Z | 2022-06-21T08:33:00Z |
| suse-su-2022:2146-1 | Security update for release-notes-susemanager, release-notes-susemanager-proxy | 2022-06-20T14:15:02Z | 2022-06-20T14:15:02Z |
| suse-su-2022:2145-1 | Security update for SUSE Manager Server 4.1 | 2022-06-20T14:12:59Z | 2022-06-20T14:12:59Z |
| suse-ru-2022:2145-1 | Recommended update for SUSE Manager Proxy 4.1 | 2022-06-20T14:12:56Z | 2022-06-20T14:12:56Z |
| suse-su-2022:2144-1 | Security update for SUSE Manager Server 4.2 | 2022-06-20T14:11:52Z | 2022-06-20T14:11:52Z |
| suse-su-2022:2143-1 | Recommended update for SUSE Manager 4.1.15 Release Notes | 2022-06-20T14:10:44Z | 2022-06-20T14:10:44Z |
| suse-su-2022:2140-1 | Security update for node_exporter | 2022-06-20T12:58:53Z | 2022-06-20T12:58:53Z |
| suse-su-2022:2139-1 | Security update for golang-github-prometheus-alertmanager | 2022-06-20T12:56:16Z | 2022-06-20T12:56:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2018:4045-1 | Security update for dom4j | 2018-12-07T18:04:50Z | 2018-12-07T18:04:50Z |
| opensuse-su-2018:3906-1 | Security update for SDL2_image | 2018-11-24T17:19:59Z | 2018-11-24T17:19:59Z |
| opensuse-su-2018:3839-1 | Security update for GraphicsMagick | 2018-11-21T19:12:13Z | 2018-11-21T19:12:13Z |
| opensuse-su-2018:3835-1 | Security update for chromium | 2018-11-20T18:13:21Z | 2018-11-20T18:13:21Z |
| opensuse-su-2018:3687-1 | Security update for MozillaThunderbird | 2018-11-09T08:34:29Z | 2018-11-09T08:34:29Z |
| opensuse-su-2018:2809-1 | Security update for python-Django1 | 2018-08-16T18:44:03Z | 2018-08-16T18:44:03Z |
| opensuse-su-2018:2810-1 | Security update for aubio | 2018-08-16T18:40:42Z | 2018-08-16T18:40:42Z |
| opensuse-su-2018:2806-1 | Security update for nemo-extensions | 2018-08-16T18:39:40Z | 2018-08-16T18:39:40Z |
| opensuse-su-2018:2807-1 | Security update for seamonkey | 2018-08-16T07:40:05Z | 2018-08-16T07:40:05Z |
| opensuse-su-2018:2327-1 | Security update for python-Django | 2018-08-14T14:57:13Z | 2018-08-14T14:57:13Z |
| opensuse-su-2018:1969-1 | Security update for singularity | 2018-07-16T09:52:20Z | 2018-07-16T09:52:20Z |
| opensuse-su-2018:1859-1 | Security update for Opera | 2018-06-30T09:39:52Z | 2018-06-30T09:39:52Z |
| opensuse-su-2018:1462-1 | Security update for pdns | 2018-05-29T10:59:00Z | 2018-05-29T10:59:00Z |
| opensuse-su-2018:1437-1 | Security update for Chromium | 2018-05-27T11:26:33Z | 2018-05-27T11:26:33Z |
| opensuse-su-2018:1175-1 | Security update for Chromium | 2018-05-27T11:26:33Z | 2018-05-27T11:26:33Z |
| opensuse-su-2018:1330-1 | Security update for enigmail | 2018-05-17T11:35:48Z | 2018-05-17T11:35:48Z |
| opensuse-su-2018:1329-1 | Security update for enigmail | 2018-05-17T11:35:48Z | 2018-05-17T11:35:48Z |
| opensuse-su-2018:1271-1 | Security update for opencv | 2018-05-11T17:35:46Z | 2018-05-11T17:35:46Z |
| opensuse-su-2018:1265-1 | Security update for opencv | 2018-05-11T17:35:46Z | 2018-05-11T17:35:46Z |
| opensuse-su-2018:1056-1 | Security update for hdf5 | 2018-04-23T21:43:02Z | 2018-04-23T21:43:02Z |
| opensuse-su-2018:1051-1 | Security update for hdf5 | 2018-04-23T21:43:02Z | 2018-04-23T21:43:02Z |
| opensuse-su-2018:1059-1 | Security update for phpMyAdmin | 2018-04-23T21:35:19Z | 2018-04-23T21:35:19Z |
| opensuse-su-2018:1058-1 | Security update for phpMyAdmin | 2018-04-23T21:35:19Z | 2018-04-23T21:35:19Z |
| opensuse-su-2018:1041-1 | Security update for mbedtls | 2018-04-20T16:37:28Z | 2018-04-20T16:37:28Z |
| opensuse-su-2018:1039-1 | Security update for mbedtls | 2018-04-20T16:37:28Z | 2018-04-20T16:37:28Z |
| opensuse-su-2018:0953-1 | Security update for pdns-recursor | 2018-04-16T15:14:46Z | 2018-04-16T15:14:46Z |
| opensuse-su-2018:0819-1 | Security update for Mozilla Thunderbird | 2018-03-26T11:29:18Z | 2018-03-26T11:29:18Z |
| opensuse-su-2018:0818-1 | Security update for Mozilla Thunderbird | 2018-03-26T11:29:18Z | 2018-03-26T11:29:18Z |
| opensuse-su-2018:0813-1 | Security update for nginx | 2018-03-26T10:15:33Z | 2018-03-26T10:15:33Z |
| opensuse-su-2018:0651-1 | Security update for python-Django | 2018-03-09T13:07:09Z | 2018-03-09T13:07:09Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-08431 | Dell Unity URL重定向漏洞 | 2025-03-31 | 2025-04-21 |
| cnvd-2025-08324 | GNU Emacs操作系统命令注入漏洞 | 2025-02-17 | 2025-04-21 |
| cnvd-2025-08323 | GNU GRUB2缓冲区溢出漏洞（CNVD-2025-08323） | 2025-03-11 | 2025-04-21 |
| cnvd-2025-08322 | GNU GRUB2缓冲区溢出漏洞（CNVD-2025-08322） | 2025-03-11 | 2025-04-21 |
| cnvd-2025-08321 | GNU GRUB2缓冲区溢出漏洞（CNVD-2025-08321） | 2025-03-11 | 2025-04-21 |
| cnvd-2025-08319 | GNU GRUB2缓冲区溢出漏洞（CNVD-2025-08319） | 2025-03-17 | 2025-04-21 |
| cnvd-2025-08315 | Dell NetWorker开放重定向漏洞 | 2025-03-24 | 2025-04-21 |
| cnvd-2025-08311 | GNU GRUB缓冲区溢出漏洞（CNVD-2025-08311） | 2025-03-26 | 2025-04-21 |
| cnvd-2025-08310 | GNU GRUB缓冲区溢出漏洞（CNVD-2025-08310） | 2025-03-27 | 2025-04-21 |
| cnvd-2025-08305 | Dell PowerEdge FX2和Dell PowerEdge VRTX缓冲区溢出漏洞 | 2025-03-27 | 2025-04-21 |
| cnvd-2025-08304 | Dell Secure Connect Gateway信息泄露漏洞 | 2025-03-27 | 2025-04-21 |
| cnvd-2025-08303 | Dell Unity OS命令执行漏洞（CNVD-2025-08303） | 2025-03-31 | 2025-04-21 |
| cnvd-2025-08302 | Dell Unity OS命令注入漏洞（CNVD-2025-08302） | 2025-03-31 | 2025-04-21 |
| cnvd-2025-08301 | Dell Wyse Management Suite信息泄露漏洞 | 2025-04-03 | 2025-04-21 |
| cnvd-2025-08300 | Dell Wyse Management Suite拒绝服务漏洞 | 2025-04-11 | 2025-04-21 |
| cnvd-2025-08299 | Dell PowerScale OneFS授权逻辑错误漏洞 | 2025-04-14 | 2025-04-21 |
| cnvd-2025-08298 | Dell Wyse Management Suite代码问题漏洞 | 2025-04-15 | 2025-04-21 |
| cnvd-2025-08147 | 用友网络科技股份有限公司用友U8CRM存在SQL注入漏洞 | 2025-03-07 | 2025-04-21 |
| cnvd-2025-07884 | ASUS AiCloud鉴权控制不当漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07801 | Adobe After Effects越界读取漏洞（CNVD-2025-07801） | 2025-04-18 | 2025-04-21 |
| cnvd-2025-07800 | Adobe After Effects空指针解引用漏洞（CNVD-2025-07800） | 2025-04-18 | 2025-04-21 |
| cnvd-2025-07799 | NETGEAR WNR854T wan_hostname函数命令执行漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07798 | NETGEAR WNR854T UPNP服务缓冲区溢出漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07797 | NETGEAR WNR854T SetDefaultConnectionService函数缓冲区溢出漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07796 | NETGEAR WNR854T pppoe_peer_mac函数命令执行漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07795 | NETGEAR WNR854T parse_st_header函数缓冲区溢出漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07794 | NETGEAR WNR854T get_email函数命令执行漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07793 | NETGEAR WNR854T cmd.cgi文件命令执行漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07792 | NETGEAR WNR854T addmap_exec函数命令执行漏洞 | 2025-04-21 | 2025-04-21 |
| cnvd-2025-07567 | 用友网络科技股份有限公司用友NC存在SQL注入漏洞 | 2025-02-21 | 2025-04-19 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2014-avi-246 | Multiples vulnérabilités dans les produits Citrix | 2014-05-28T00:00:00.000000 | 2014-05-28T00:00:00.000000 |
| certfr-2014-avi-245 | Multiples vulnérabilités dans Samba | 2014-05-28T00:00:00.000000 | 2014-05-28T00:00:00.000000 |
| certfr-2014-avi-244 | Multiples vulnérabilités dans Oracle Solaris | 2014-05-27T00:00:00.000000 | 2014-05-27T00:00:00.000000 |
| certfr-2014-avi-243 | Vulnérabilité dans Apache Tomcat | 2014-05-27T00:00:00.000000 | 2014-05-27T00:00:00.000000 |
| certfr-2014-avi-242 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-05-27T00:00:00.000000 | 2014-05-27T00:00:00.000000 |
| certfr-2014-avi-241 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2014-05-26T00:00:00.000000 | 2014-05-26T00:00:00.000000 |
| certfr-2014-avi-240 | Multiples vulnérabilités dans TYPO3 CMS | 2014-05-23T00:00:00.000000 | 2014-05-23T00:00:00.000000 |
| certfr-2014-avi-239 | Vulnérabilité dans Cisco Wide Area Application Services | 2014-05-22T00:00:00.000000 | 2014-05-22T00:00:00.000000 |
| certfr-2014-avi-238 | Multiples vulnérabilités dans Cisco NX-OS | 2014-05-22T00:00:00.000000 | 2014-05-22T00:00:00.000000 |
| certfr-2014-avi-237 | Multiples vulnérabilités dans Apple Safari | 2014-05-22T00:00:00.000000 | 2014-05-22T00:00:00.000000 |
| certfr-2014-avi-236 | Multiples vulnérabilités dans Google Chrome | 2014-05-21T00:00:00.000000 | 2014-05-21T00:00:00.000000 |
| certfr-2014-avi-235 | Vulnérabilité dans Apple OS X Server | 2014-05-21T00:00:00.000000 | 2014-05-21T00:00:00.000000 |
| certfr-2014-avi-234 | Multiples vulnérabilités dans Moodle | 2014-05-19T00:00:00.000000 | 2014-05-19T00:00:00.000000 |
| certfr-2014-avi-233 | Vulnérabilité dans Apple iTunes | 2014-05-19T00:00:00.000000 | 2014-05-19T00:00:00.000000 |
| certfr-2014-avi-232 | Multiples vulnérabilités dans les produits Juniper | 2014-05-19T00:00:00.000000 | 2014-05-19T00:00:00.000000 |
| certfr-2014-avi-231 | Multiples vulnérabilités dans Apple OS X Mavericks | 2014-05-16T00:00:00.000000 | 2014-05-16T00:00:00.000000 |
| certfr-2014-avi-230 | Multiples vulnérabilités dans Google Chrome | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-229 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-228 | Multiples vulnérabilités dans Adobe Flash Player | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-227 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-226 | Multiples vulnérabilités dans Microsoft iSCSI | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-225 | Vulnérabilité dans le gestionnaire de Shell Microsoft Windows | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-224 | Vulnérabilité dans Microsoft .NET Framework | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-223 | Vulnérabilité dans les préférences de stratégie de groupe Microsoft | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-222 | Vulnérabilité dans un contrôle commun Microsoft | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-221 | Multiples vulnérabilités dans Microsoft Office | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-220 | Multiples vulnérabilités dans Microsoft SharePoint | 2014-05-14T00:00:00.000000 | 2014-05-14T00:00:00.000000 |
| certfr-2014-avi-219 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2014-05-09T00:00:00.000000 | 2014-05-09T00:00:00.000000 |
| certfr-2014-avi-218 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2014-05-09T00:00:00.000000 | 2014-05-09T00:00:00.000000 |
| certfr-2014-avi-217 | Vulnérabilité dans les produits Huawei | 2014-05-09T00:00:00.000000 | 2014-05-09T00:00:00.000000 |