Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-49956 |
7.1 (3.1)
|
WordPress Fade Slider Plugin <= 2.5 - Cross Site Scrip… |
Anandaraj Balu |
Fade Slider |
2025-10-22T14:32:20.199Z | 2026-01-20T14:28:07.931Z |
| CVE-2025-49957 |
7.1 (3.1)
|
WordPress Email Attachment by Order Status & Products … |
Weboccult Technologies Pvt Ltd |
Email Attachment by Order Status & Products |
2025-10-22T14:32:20.403Z | 2026-01-20T14:28:07.920Z |
| CVE-2025-49947 |
7.1 (3.1)
|
WordPress WooCommerce Registration Fields Plugin - Cus… |
extendons |
WooCommerce Registration Fields Plugin - Custom Signup Fields |
2025-10-22T14:32:18.131Z | 2026-01-20T14:28:07.883Z |
| CVE-2025-49933 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripti… |
CrocoBlock |
JetBlog |
2025-10-22T14:32:15.603Z | 2026-01-20T14:28:07.844Z |
| CVE-2025-49940 |
6.5 (3.1)
|
WordPress Fusion Builder plugin <= 3.13.2 - Cross Site… |
ThemeFusion |
Fusion Builder |
2025-10-22T14:32:17.247Z | 2026-01-20T14:28:07.835Z |
| CVE-2025-49950 |
7.3 (3.1)
|
WordPress Official Integration for Billingo Plugin <= … |
billingo |
Official Integration for Billingo |
2025-10-22T14:32:18.932Z | 2026-01-20T14:28:07.828Z |
| CVE-2025-49953 |
7.1 (3.1)
|
WordPress ShareBang, Ultimate Social Share Buttons for… |
themeinity |
ShareBang, Ultimate Social Share Buttons for WordPress |
2025-10-22T14:32:19.616Z | 2026-01-20T14:28:07.826Z |
| CVE-2025-49954 |
7.1 (3.1)
|
WordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Sit… |
mithra62 |
WP-Click-Tracker |
2025-10-22T14:32:19.827Z | 2026-01-20T14:28:07.823Z |
| CVE-2025-49934 |
5.4 (3.1)
|
WordPress JetBlocks For Elementor plugin <= 1.3.18 - C… |
CrocoBlock |
JetBlocks For Elementor |
2025-10-22T14:32:15.865Z | 2026-01-20T14:28:07.810Z |
| CVE-2025-49952 |
6.3 (3.1)
|
WordPress Houzez Theme <= 4.1.1 - Insecure Direct Obje… |
favethemes |
Houzez |
2025-10-22T14:32:19.320Z | 2026-01-20T14:28:07.804Z |
| CVE-2025-49949 |
5.5 (3.1)
|
WordPress Templazee plugin <= 1.0.2 - Broken Access Co… |
templazee |
Templazee |
2025-10-22T14:32:18.660Z | 2026-01-20T14:28:07.803Z |
| CVE-2025-49935 |
7.4 (3.1)
|
WordPress WoodMart theme < 8.3.2 - Local File Inclusio… |
xtemos |
WoodMart |
2025-10-22T14:32:16.098Z | 2026-01-20T14:28:07.791Z |
| CVE-2025-49936 |
6.5 (3.1)
|
WordPress WoodMart theme < 8.3.2 - Cross Site Scriptin… |
xtemos |
WoodMart |
2025-10-22T14:32:16.302Z | 2026-01-20T14:28:07.770Z |
| CVE-2025-49931 |
9.3 (3.1)
|
WordPress JetSearch plugin <= 3.5.10 - SQL Injection v… |
CrocoBlock |
JetSearch |
2025-10-22T14:32:15.259Z | 2026-01-20T14:28:07.695Z |
| CVE-2025-49948 |
7.1 (3.1)
|
WordPress WP Super Edit plugin <= 2.5.4 - Cross Site S… |
Ahmad Awais |
WP Super Edit |
2025-10-22T14:32:18.319Z | 2026-01-20T14:28:07.687Z |
| CVE-2025-49941 |
8.1 (3.1)
|
WordPress GlamChic theme <= 1.0.11 - Local File Inclus… |
AncoraThemes |
GlamChic |
2025-12-18T07:21:44.421Z | 2026-01-20T14:28:07.677Z |
| CVE-2025-49944 |
7.1 (3.1)
|
WordPress WPCode Content Ratio plugin <= 2.0 - Cross S… |
Jonatan Jumbert |
WPCode Content Ratio |
2025-10-22T14:32:17.445Z | 2026-01-20T14:28:07.648Z |
| CVE-2025-49932 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scrip… |
CrocoBlock |
JetBlog |
2025-10-22T14:32:15.443Z | 2026-01-20T14:28:07.647Z |
| CVE-2025-49930 |
7.1 (3.1)
|
WordPress JetSearch plugin <= 3.5.10 - Cross Site Scri… |
CrocoBlock |
JetSearch |
2025-10-22T14:32:15.035Z | 2026-01-20T14:28:07.642Z |
| CVE-2025-49926 |
7.3 (3.1)
|
WordPress Kalium theme <= 3.25 - Arbitrary Code Execut… |
Laborator |
Kalium |
2025-10-22T14:32:14.208Z | 2026-01-20T14:28:07.637Z |
| CVE-2025-49945 |
7.1 (3.1)
|
WordPress Shortcode Generator plugin <= 1.1 - Cross Si… |
kylegetson |
Shortcode Generator |
2025-10-22T14:32:17.676Z | 2026-01-20T14:28:07.632Z |
| CVE-2025-49920 |
5.4 (3.1)
|
WordPress Web Accessibility By accessiBe plugin <= 2.1… |
accessiBe |
Web Accessibility By accessiBe |
2025-10-22T14:32:12.844Z | 2026-01-20T14:28:07.628Z |
| CVE-2025-49939 |
6.5 (3.1)
|
WordPress JetElements For Elementor plugin <= 2.7.8 - … |
CrocoBlock |
JetElements For Elementor |
2025-10-22T14:32:17.061Z | 2026-01-20T14:28:07.611Z |
| CVE-2025-49929 |
6.5 (3.1)
|
WordPress Ultimate Blocks plugin <= 3.3.6 - Cross Site… |
Ultimate Blocks |
Ultimate Blocks |
2025-10-22T14:32:14.811Z | 2026-01-20T14:28:07.609Z |
| CVE-2025-49927 |
6.5 (3.1)
|
WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Sit… |
CrocoBlock |
JetWooBuilder |
2025-10-22T14:32:14.395Z | 2026-01-20T14:28:07.599Z |
| CVE-2025-49951 |
7.1 (3.1)
|
WordPress gAppointments Plugin <= 1.14.1 - Cross Site … |
wpcrunch |
gAppointments |
2025-10-22T14:32:19.132Z | 2026-01-20T14:28:07.591Z |
| CVE-2025-49942 |
8.1 (3.1)
|
WordPress Gardis theme <= 1.2.13 - Local File Inclusio… |
AncoraThemes |
Gardis |
2025-12-18T07:21:44.617Z | 2026-01-20T14:28:07.580Z |
| CVE-2025-49937 |
4.3 (3.1)
|
WordPress Smash Balloon Social Post Feed plugin <= 4.3… |
Syed Balkhi |
Smash Balloon Social Post Feed |
2025-10-22T14:32:16.676Z | 2026-01-20T14:28:07.564Z |
| CVE-2025-49917 |
4.4 (3.1)
|
WordPress Icegram Express Pro plugin <= 5.9.5 - Server… |
Icegram |
Icegram Express Pro |
2025-10-22T14:32:12.630Z | 2026-01-20T14:28:07.536Z |
| CVE-2025-49928 |
6.5 (3.1)
|
WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site … |
CrocoBlock |
JetWooBuilder |
2025-10-22T14:32:14.597Z | 2026-01-20T14:28:07.500Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62141 |
5.3 (3.1)
|
WordPress Wawp plugin <= 4.0.5 - Broken Access Control… |
101gen |
Wawp |
2025-12-31T15:07:45.128Z | 2026-01-20T14:28:15.307Z |
| CVE-2025-62140 |
5.9 (3.1)
|
WordPress Locatoraid Store Locator plugin <= 3.9.65 - … |
Plainware |
Locatoraid Store Locator |
2025-12-31T13:24:45.813Z | 2026-01-20T14:28:15.300Z |
| CVE-2025-62139 |
5.3 (3.1)
|
WordPress Terms descriptions plugin <= 3.4.9 - Sensiti… |
Vladimir Statsenko |
Terms descriptions |
2025-12-31T15:08:46.383Z | 2026-01-20T14:28:15.246Z |
| CVE-2025-62138 |
5.3 (3.1)
|
WordPress WP Advanced PDF plugin <= 1.1.7 - Other vuln… |
CedCommerce |
WP Advanced PDF |
2025-12-31T13:51:42.207Z | 2026-01-20T14:28:15.477Z |
| CVE-2025-62137 |
6.5 (3.1)
|
WordPress Shuttle theme <= 1.5.0 - Cross Site Scriptin… |
Shuttlethemes |
Shuttle |
2025-12-31T08:57:17.441Z | 2026-01-20T14:28:15.251Z |
| CVE-2025-62136 |
6.5 (3.1)
|
WordPress Melos theme <= 1.6.0 - Cross Site Scripting … |
ThinkUpThemes |
Melos |
2025-12-31T09:00:40.532Z | 2026-01-20T14:28:15.209Z |
| CVE-2025-62135 |
6.5 (3.1)
|
WordPress Responsive Block Control plugin <= 1.2.9 - C… |
landwire |
Responsive Block Control |
2025-12-31T11:56:24.183Z | 2026-01-20T14:28:14.831Z |
| CVE-2025-62134 |
5.4 (3.1)
|
WordPress Contact Form Widget plugin <= 1.5.1 - Cross … |
A WP Life |
Contact Form Widget |
2025-12-31T13:53:35.344Z | 2026-01-20T14:28:14.910Z |
| CVE-2025-62133 |
4.3 (3.1)
|
WordPress FormFacade plugin <= 1.4.1 - Cross Site Requ… |
Manidoraisamy |
FormFacade |
2025-12-31T16:01:59.014Z | 2026-01-20T14:28:14.665Z |
| CVE-2025-62132 |
4.3 (3.1)
|
WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken … |
Strategy11 Team |
Tasty Recipes Lite |
2025-12-31T16:03:41.173Z | 2026-01-20T14:28:14.844Z |
| CVE-2025-62131 |
4.3 (3.1)
|
WordPress Tasty Recipes Lite plugin <= 1.1.5 - Broken … |
Strategy11 Team |
Tasty Recipes Lite |
2025-12-31T16:04:31.493Z | 2026-01-20T14:28:14.603Z |
| CVE-2025-62130 |
4.3 (3.1)
|
WordPress Accordion Slider Gallery plugin <= 2.7 - Bro… |
WPdiscover |
Accordion Slider Gallery |
2025-12-31T16:05:22.706Z | 2026-01-20T14:28:14.831Z |
| CVE-2025-62129 |
5.3 (3.1)
|
WordPress RestroPress plugin <= 3.2.4.2 - Broken Acces… |
Magnigenie |
RestroPress |
2025-12-31T15:23:30.738Z | 2026-01-20T14:28:14.869Z |
| CVE-2025-62128 |
4.3 (3.1)
|
WordPress SiteLock Security plugin <= 5.0.1 - Broken A… |
SiteLock |
SiteLock Security |
2025-12-30T16:23:46.871Z | 2026-01-20T14:28:14.633Z |
| CVE-2025-62126 |
5.3 (3.1)
|
WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 … |
Razvan Stanga |
Varnish/Nginx Proxy Caching |
2025-12-31T15:36:42.037Z | 2026-01-20T14:28:14.657Z |
| CVE-2025-62125 |
6.5 (3.1)
|
WordPress Custom Background Changer plugin <= 3.0 - Cr… |
Anshul Gangrade |
Custom Background Changer |
2025-12-31T12:55:50.045Z | 2026-01-20T14:28:14.880Z |
| CVE-2025-62124 |
5.9 (3.1)
|
WordPress WP Post Signature plugin <= 0.4.1 - Cross Si… |
Soli |
WP Post Signature |
2025-12-31T13:37:53.733Z | 2026-01-20T14:28:14.669Z |
| CVE-2025-62123 |
4.3 (3.1)
|
WordPress WP Gmail SMTP plugin <= 1.0.7 - Cross Site R… |
Ink themes |
WP Gmail SMTP |
2025-12-31T16:26:35.932Z | 2026-01-20T14:28:14.703Z |
| CVE-2025-62122 |
5.3 (3.1)
|
WordPress Trash Duplicate and 301 Redirect plugin <= 1… |
Solwininfotech |
Trash Duplicate and 301 Redirect |
2025-12-31T15:38:08.774Z | 2026-01-20T14:28:14.579Z |
| CVE-2025-62121 |
5.9 (3.1)
|
WordPress Logo Slider , Logo Carousel , Logo showcase … |
Imran Emu |
Logo Slider , Logo Carousel , Logo showcase , Client Logo |
2025-12-31T13:39:51.761Z | 2026-01-20T14:28:14.639Z |
| CVE-2025-62120 |
5.4 (3.1)
|
WordPress OpenHook plugin <= 4.3.1 - Cross Site Reques… |
Rick Beckman |
OpenHook |
2025-12-31T13:55:15.893Z | 2026-01-20T14:28:14.637Z |
| CVE-2025-62119 |
5.9 (3.1)
|
WordPress Add Featured Image Custom Link plugin <= 2.0… |
ViitorCloud Technologies Pvt Ltd |
Add Featured Image Custom Link |
2025-12-31T13:43:18.136Z | 2026-01-20T14:28:14.740Z |
| CVE-2025-62118 |
6.5 (3.1)
|
WordPress AdWords Conversion Tracking Code plugin <= 1… |
kcseopro |
AdWords Conversion Tracking Code |
2025-12-31T12:59:08.280Z | 2026-01-20T14:28:15.151Z |
| CVE-2025-62117 |
5.4 (3.1)
|
WordPress EasyIndex plugin <= 1.1.1704 - Cross Site Re… |
Jayce53 |
EasyIndex |
2025-12-31T13:56:26.868Z | 2026-01-20T14:28:14.548Z |
| CVE-2025-62116 |
5.3 (3.1)
|
WordPress AI Copilot plugin <= 1.4.7 - Broken Access C… |
Quadlayers |
AI Copilot |
2025-12-31T15:39:13.222Z | 2026-01-20T14:28:14.594Z |
| CVE-2025-62115 |
4.3 (3.1)
|
WordPress Hide Plugins plugin <= 1.0.4 - Broken Access… |
ThemeBoy |
Hide Plugins |
2025-12-31T16:27:35.305Z | 2026-01-20T14:28:14.758Z |
| CVE-2025-62114 |
5.3 (3.1)
|
WordPress Download Media Library plugin <= 0.2.1 - Sen… |
Marcelo Torres |
Download Media Library |
2025-12-31T15:40:07.221Z | 2026-01-20T14:28:14.535Z |
| CVE-2025-62113 |
4.3 (3.1)
|
WordPress Co-marquage service-public.fr plugin <= 0.5.… |
emendo_seb |
Co-marquage service-public.fr |
2025-12-31T16:28:24.382Z | 2026-01-20T14:28:14.772Z |
| CVE-2025-62112 |
4.3 (3.1)
|
WordPress Import into Easy Property Listings plugin <=… |
Merv Barrett |
Import into Easy Property Listings |
2025-12-30T16:21:30.852Z | 2026-01-20T14:28:14.605Z |
| CVE-2025-62111 |
6.5 (3.1)
|
WordPress Extra Shortcodes plugin <= 2.2 - Cross Site … |
Webvitaly |
Extra Shortcodes |
2025-12-31T13:05:54.784Z | 2026-01-20T14:28:14.598Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-62141 | Missing Authorization vulnerability in 101gen Wawp allows Exploiting Incorrectly Configured Access … | 2025-12-31T15:15:53.060 | 2026-01-20T15:17:54.777 |
| fkie_cve-2025-62140 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:53.363 | 2026-01-20T15:17:54.680 |
| fkie_cve-2025-62139 | Insertion of Sensitive Information Into Sent Data vulnerability in Vladimir Statsenko Terms descrip… | 2025-12-31T15:15:52.887 | 2026-01-20T15:17:54.580 |
| fkie_cve-2025-62138 | Missing Authorization vulnerability in CedCommerce WP Advanced PDF allows Exploiting Incorrectly Co… | 2025-12-31T14:15:53.230 | 2026-01-20T15:17:54.483 |
| fkie_cve-2025-62137 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T09:15:51.160 | 2026-01-20T15:17:54.390 |
| fkie_cve-2025-62136 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T09:15:51.010 | 2026-01-20T15:17:54.297 |
| fkie_cve-2025-62135 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T12:16:17.937 | 2026-01-20T15:17:54.193 |
| fkie_cve-2025-62134 | Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget allows Cross Site … | 2025-12-31T14:15:53.090 | 2026-01-20T15:17:54.097 |
| fkie_cve-2025-62133 | Cross-Site Request Forgery (CSRF) vulnerability in Manidoraisamy FormFacade allows Cross Site Reque… | 2025-12-31T16:15:45.897 | 2026-01-20T15:17:54.000 |
| fkie_cve-2025-62132 | Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite allows Exploiting Incorre… | 2025-12-31T16:15:45.750 | 2026-01-20T15:17:53.903 |
| fkie_cve-2025-62131 | Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite allows Exploiting Incorre… | 2025-12-31T16:15:45.603 | 2026-01-20T15:17:53.797 |
| fkie_cve-2025-62130 | Missing Authorization vulnerability in WPdiscover Accordion Slider Gallery allows Exploiting Incorr… | 2025-12-31T16:15:45.453 | 2026-01-20T15:17:53.697 |
| fkie_cve-2025-62129 | Missing Authorization vulnerability in Magnigenie RestroPress allows Exploiting Incorrectly Configu… | 2025-12-31T16:15:45.313 | 2026-01-20T15:17:53.603 |
| fkie_cve-2025-62128 | Missing Authorization vulnerability in SiteLock SiteLock Security allows Exploiting Incorrectly Con… | 2025-12-30T17:15:42.697 | 2026-01-20T15:17:53.507 |
| fkie_cve-2025-62126 | Insertion of Sensitive Information Into Sent Data vulnerability in Razvan Stanga Varnish/Nginx Prox… | 2025-12-31T16:15:45.163 | 2026-01-20T15:17:53.410 |
| fkie_cve-2025-62125 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:41.650 | 2026-01-20T15:17:53.307 |
| fkie_cve-2025-62124 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.950 | 2026-01-20T15:17:53.210 |
| fkie_cve-2025-62123 | Cross-Site Request Forgery (CSRF) vulnerability in Ink themes WP Gmail SMTP allows Cross Site Reque… | 2025-12-31T17:15:46.570 | 2026-01-20T15:17:53.113 |
| fkie_cve-2025-62122 | Missing Authorization vulnerability in Solwininfotech Trash Duplicate and 301 Redirect allows Explo… | 2025-12-31T16:15:45.010 | 2026-01-20T15:17:53.013 |
| fkie_cve-2025-62121 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.810 | 2026-01-20T15:17:52.913 |
| fkie_cve-2025-62120 | Cross-Site Request Forgery (CSRF) vulnerability in Rick Beckman OpenHook allows Cross Site Request … | 2025-12-31T14:15:52.670 | 2026-01-20T15:17:52.823 |
| fkie_cve-2025-62119 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T14:15:52.527 | 2026-01-20T15:17:52.720 |
| fkie_cve-2025-62118 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:41.500 | 2026-01-20T15:17:52.613 |
| fkie_cve-2025-62117 | Cross-Site Request Forgery (CSRF) vulnerability in Jayce53 EasyIndex easyindex allows Cross Site Re… | 2025-12-31T14:15:52.383 | 2026-01-20T15:17:52.510 |
| fkie_cve-2025-62116 | Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configur… | 2025-12-31T16:15:44.867 | 2026-01-20T15:17:52.407 |
| fkie_cve-2025-62115 | Missing Authorization vulnerability in ThemeBoy Hide Plugins allows Exploiting Incorrectly Configur… | 2025-12-31T17:15:46.323 | 2026-01-20T15:17:52.303 |
| fkie_cve-2025-62114 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcelo… | 2025-12-31T16:15:44.713 | 2026-01-20T15:17:52.207 |
| fkie_cve-2025-62113 | Cross-Site Request Forgery (CSRF) vulnerability in emendo_seb Co-marquage service-public.Fr allows … | 2025-12-31T17:15:46.123 | 2026-01-20T15:17:52.107 |
| fkie_cve-2025-62112 | Cross-Site Request Forgery (CSRF) vulnerability in Merv Barrett Import into Easy Property Listings … | 2025-12-30T17:15:42.547 | 2026-01-20T15:17:52.007 |
| fkie_cve-2025-62111 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:41.350 | 2026-01-20T15:17:51.903 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-3h9j-8c2j-4jrj |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct li… | 2025-01-15T15:31:24Z | 2026-01-11T18:30:27Z |
| ghsa-ghqp-926m-7jrx |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid possible NULL dere… | 2024-12-27T15:31:55Z | 2026-01-11T18:30:26Z |
| ghsa-fvcf-hj7v-3mj6 |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie… | 2024-09-18T09:30:37Z | 2026-01-11T18:30:26Z |
| ghsa-7x3v-348q-cc5h |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: blk-mq: setup queue ->tag_set … | 2024-10-29T03:31:06Z | 2026-01-11T18:30:26Z |
| ghsa-76rf-j9m6-mjgj |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null poin… | 2024-08-26T12:31:19Z | 2026-01-11T18:30:26Z |
| ghsa-g268-72p7-9j6j |
6.5 (3.1)
|
Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification | 2026-01-08T21:27:03Z | 2026-01-11T14:57:07Z |
| ghsa-hm5p-x4rq-38w4 |
8.2 (3.1)
7.8 (4.0)
|
httparty Has Potential SSRF Vulnerability That Leads to API Key Leakage | 2025-12-23T19:31:10Z | 2026-01-11T14:56:54Z |
| ghsa-78p6-6878-8mj6 |
7.5 (3.1)
|
SM2-PKE has Unchecked AffinePoint Decoding (unwrap) in decrypt() | 2026-01-09T22:35:35Z | 2026-01-11T14:56:39Z |
| ghsa-w3g8-fp6j-wvqw |
8.7 (4.0)
|
SM2-PKE has 32-bit Biased Nonce Vulnerability | 2026-01-09T22:27:50Z | 2026-01-11T14:56:33Z |
| ghsa-3ghg-3787-w2xr |
7.5 (3.1)
|
Spree API has Unauthenticated IDOR - Guest Address | 2026-01-08T21:28:04Z | 2026-01-11T14:56:25Z |
| ghsa-9cvc-h2w8-phrp |
3.7 (3.1)
|
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value | 2026-01-09T18:56:21Z | 2026-01-11T14:56:00Z |
| ghsa-jrmj-c5cx-3cw6 |
8.5 (4.0)
|
Angular has XSS Vulnerability via Unsanitized SVG Script Attributes | 2026-01-09T18:52:14Z | 2026-01-11T14:55:54Z |
| ghsa-2g22-wg49-fgv5 |
10.0 (3.1)
|
XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONService | 2026-01-09T18:41:47Z | 2026-01-11T14:55:48Z |
| ghsa-637h-ch24-xp9m |
5.3 (3.1)
|
XWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONService | 2026-01-09T18:35:57Z | 2026-01-11T14:55:42Z |
| ghsa-wvpq-h33f-8rp6 |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Branding Styles | 2026-01-09T20:12:24Z | 2026-01-11T14:55:37Z |
| ghsa-gxxc-m74c-f48x |
6.1 (3.1)
|
October CMS Vulnerable to Stored XSS via Editor and Branding Styles | 2026-01-09T18:12:58Z | 2026-01-11T14:55:29Z |
| ghsa-vmc4-9828-r48r |
5.1 (4.0)
|
Ghost has SSRF via External Media Inliner | 2026-01-08T21:36:03Z | 2026-01-11T14:55:24Z |
| ghsa-h4rm-mm56-xf63 |
8.9 (4.0)
|
Fickling vulnerable to detection bypass due to "builtins" blindness | 2026-01-09T22:29:02Z | 2026-01-11T14:55:18Z |
| ghsa-q5qq-mvfm-j35x |
8.9 (4.0)
|
Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist | 2026-01-09T21:12:00Z | 2026-01-11T14:55:13Z |
| ghsa-5hvc-6wx8-mvv4 |
8.9 (4.0)
|
Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection | 2026-01-09T21:05:13Z | 2026-01-11T14:55:08Z |
| ghsa-p523-jq9w-64x9 |
8.9 (4.0)
|
Fickling Blocklist Bypass: cProfile.run() | 2026-01-09T21:04:22Z | 2026-01-11T14:54:55Z |
| ghsa-wfq2-52f7-7qvj |
8.9 (4.0)
|
Fickling has a bypass via runpy.run_path() and runpy.run_module() | 2026-01-09T20:52:40Z | 2026-01-11T14:54:44Z |
| ghsa-gjrp-xgmh-x9qq |
6.7 (3.1)
|
Ghost has SQL Injection in Members Activity Feed | 2026-01-08T21:36:37Z | 2026-01-11T14:54:35Z |
| ghsa-9xg7-mwmp-xmjx |
8.1 (3.1)
|
Ghost has Staff Token permission bypass | 2026-01-08T21:32:53Z | 2026-01-11T14:54:30Z |
| ghsa-5fp7-g646-ccf4 |
8.1 (3.1)
|
Ghost has Staff 2FA bypass | 2026-01-08T21:29:47Z | 2026-01-11T14:54:23Z |
| ghsa-h5cw-625j-3rxh |
6.5 (3.1)
|
React Router has CSRF issue in Action/Server Action Request Processing | 2026-01-08T20:57:09Z | 2026-01-11T14:54:18Z |
| ghsa-2w69-qvjg-hvjx |
8.0 (3.1)
|
React Router vulnerable to XSS via Open Redirects | 2026-01-08T20:54:18Z | 2026-01-11T14:54:13Z |
| ghsa-8v8x-cx79-35w7 |
8.2 (3.1)
|
React Router SSR XSS in ScrollRestoration | 2026-01-08T20:50:05Z | 2026-01-11T14:54:08Z |
| ghsa-9jcx-v3wj-wh4m |
6.5 (3.1)
|
React Router has unexpected external redirect via untrusted paths | 2026-01-08T20:48:21Z | 2026-01-11T14:54:02Z |
| ghsa-9583-h5hc-x8cw |
9.1 (3.1)
|
React Router has Path Traversal in File Session Storage | 2026-01-08T20:45:07Z | 2026-01-11T14:53:54Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-27349 | Authentication Bypass by Spoofing vulnerability in Apache HugeGraph-Server.This issue aff… | 2024-02-25T06:02:58.236850Z |
| gsd-2024-27347 | Server-Side Request Forgery (SSRF) vulnerability in Apache HugeGraph-Hubble.This issue af… | 2024-02-25T06:02:58.208925Z |
| gsd-2024-27348 | RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects … | 2024-02-25T06:02:58.192885Z |
| gsd-2024-27350 | Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to estab… | 2024-02-25T06:02:58.189283Z |
| gsd-2024-1873 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-25T06:02:56.436277Z |
| gsd-2024-1874 | In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using … | 2024-02-25T06:02:56.350451Z |
| gsd-2024-1872 | The Button plugin for WordPress is vulnerable to PHP Object Injection in all versions up … | 2024-02-25T06:02:56.299425Z |
| gsd-2024-1871 | A vulnerability, which was classified as problematic, was found in SourceCodester Employe… | 2024-02-25T06:02:56.272629Z |
| gsd-2024-27340 | Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnera… | 2024-02-24T06:03:27.124088Z |
| gsd-2024-27333 | Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.… | 2024-02-24T06:03:27.123674Z |
| gsd-2024-27323 | PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerab… | 2024-02-24T06:03:27.121182Z |
| gsd-2024-27343 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.… | 2024-02-24T06:03:27.117585Z |
| gsd-2024-27318 | Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Trav… | 2024-02-24T06:03:27.111556Z |
| gsd-2024-27326 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili… | 2024-02-24T06:03:27.102524Z |
| gsd-2024-27325 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili… | 2024-02-24T06:03:27.101628Z |
| gsd-2024-27334 | Kofax Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.… | 2024-02-24T06:03:27.099872Z |
| gsd-2024-27312 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-24T06:03:27.098722Z |
| gsd-2024-27314 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-24T06:03:27.097322Z |
| gsd-2024-27328 | PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili… | 2024-02-24T06:03:27.096129Z |
| gsd-2024-27319 | Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds … | 2024-02-24T06:03:27.095229Z |
| gsd-2024-27345 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.… | 2024-02-24T06:03:27.087710Z |
| gsd-2024-27337 | Kofax Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulner… | 2024-02-24T06:03:27.081674Z |
| gsd-2024-27329 | PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili… | 2024-02-24T06:03:27.079301Z |
| gsd-2024-27339 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.… | 2024-02-24T06:03:27.075454Z |
| gsd-2024-27316 | HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order … | 2024-02-24T06:03:27.073861Z |
| gsd-2024-27320 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-24T06:03:27.071088Z |
| gsd-2024-27332 | PDF-XChange Editor JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili… | 2024-02-24T06:03:27.067667Z |
| gsd-2024-27315 | An authenticated user with privileges to create Alerts on Alerts & Reports has the capabi… | 2024-02-24T06:03:27.066722Z |
| gsd-2024-27338 | Kofax Power PDF app response Out-Of-Bounds Read Remote Code Execution Vulnerability. This… | 2024-02-24T06:03:27.065188Z |
| gsd-2024-27336 | Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.… | 2024-02-24T06:03:27.064793Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-186045 | Malicious code in centauri-cli-transport-selenium (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186044 | Malicious code in celeste-selenology-socketio-carpo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186043 | Malicious code in celeste-pm2-xerxes-kuiperbelt (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186042 | Malicious code in celeste-baryon-stop-nodejs (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186041 | Malicious code in celeste-archaeoastronomy-despina-vuepress (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186040 | Malicious code in catch-stack-load-public-grep (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186039 | Malicious code in catch-float-cluster-assert-load (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186038 | Malicious code in catch-daemon-mock-emulate-validate (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186037 | Malicious code in catch-byte-decompress-cluster-assert (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186036 | Malicious code in catch-bash-string-long-catch (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186035 | Malicious code in catch-bash-mu-daemon-slow (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186034 | Malicious code in cat-void-bash-cache-bundle (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186033 | Malicious code in cat-sudo-node-decrypt-analyze (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186032 | Malicious code in cat-minify-cold-reject-monitor (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186031 | Malicious code in cat-meta-stack-minify-try (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186030 | Malicious code in cat-encrypt-export-kappa-validate (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186029 | Malicious code in cat-compile-analyze-deploy-cloud (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186028 | Malicious code in cat-big-code-star-encrypt (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186027 | Malicious code in cat-air-xi-slow-visualize (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186026 | Malicious code in castor-warp-asthenosphere-apollo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186025 | Malicious code in castor-singularitarianism-parcel-perseus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186024 | Malicious code in castor-magellan-halley-equinox (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186023 | Malicious code in castor-janus-interferometry-asteroid (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186022 | Malicious code in castor-ganymede-registry-blaze (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186021 | Malicious code in castor-cosmology-planetology-toml (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186020 | Malicious code in castor-callisto-miranda-quasar (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186019 | Malicious code in castor-avior-nebula-heka (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186018 | Malicious code in castor-andromeda-izar-config (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186017 | Malicious code in cassini-terser-prettier-mysql (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-186016 | Malicious code in cassini-socketio-concurrently-forever (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-0081 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-01-11T23:00:00.000+00:00 | 2023-03-02T23:00:00.000+00:00 |
| wid-sec-w-2022-1476 | SUSE Manager: Mehrere Schwachstellen | 2022-09-19T22:00:00.000+00:00 | 2023-03-02T23:00:00.000+00:00 |
| wid-sec-w-2023-0550 | Drupal Plugins: Mehrere Schwachstellen | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0544 | Dell NetWorker: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0542 | tribe29 checkmk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0541 | Cisco WebEx: Schwachstelle ermöglicht Cross-Site Scripting | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0537 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0536 | Cisco IP Phone: Mehrere Schwachstellen | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0534 | Cisco Finesse: Schwachstelle ermöglicht Denial of Service | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0533 | Cisco Prime Infrastructure: Schwachstelle ermöglicht Cross-Site Scripting | 2023-03-01T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2022-2229 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2022-12-05T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2022-2009 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-11-09T23:00:00.000+00:00 | 2023-03-01T23:00:00.000+00:00 |
| wid-sec-w-2023-0531 | IBM SAN Volume Controller: Mehrere Schwachstellen | 2019-02-25T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0530 | Aruba ArubaOS: Mehrere Schwachstellen | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0525 | Internet Systems Consortium DHCP: Mehrere Schwachstellen | 2018-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0523 | IBM DataPower Gateway: Schwachstelle ermöglicht Denial of Service | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0521 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0520 | NetApp StorageGRID: Schwachstelle ermöglicht Denial of Service | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0519 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0514 | IBM Storage Produkte: Schwachstelle ermöglicht Privilegieneskalation | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0509 | Mozilla Firefox: Schwachstelle ermöglicht Codeausführung | 2023-02-28T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0508 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2018-08-14T22:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0506 | lighttpd: Schwachstelle ermöglicht Denial of Service | 2022-01-06T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0495 | WithSecure Produkte: Mehrere Schwachstellen | 2023-02-27T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0316 | Nagios Enterprises Nagios XI: Mehrere Schwachstellen | 2023-02-08T23:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2022-1585 | lighttpd: Schwachstelle ermöglicht Denial of Service | 2022-09-29T22:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0457 | IBM DB2: Mehrere Schwachstellen | 2022-06-23T22:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2022-0171 | vim: Schwachstelle ermöglicht Denial of Service | 2022-04-21T22:00:00.000+00:00 | 2023-02-28T23:00:00.000+00:00 |
| wid-sec-w-2023-0505 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2013-12-26T23:00:00.000+00:00 | 2023-02-27T23:00:00.000+00:00 |
| wid-sec-w-2023-0504 | OpenSSL: Schwachstelle ermöglicht Manipulation von Dateien | 2014-01-01T23:00:00.000+00:00 | 2023-02-27T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:7505 | Red Hat Security Advisory: libsoup3 security update | 2025-05-13T15:59:34+00:00 | 2025-11-21T19:35:33+00:00 |
| rhsa-2025:7500 | Red Hat Security Advisory: perl security update | 2025-05-13T16:01:58+00:00 | 2025-11-21T19:35:32+00:00 |
| rhsa-2025:7499 | Red Hat Security Advisory: ghostscript security update | 2025-05-13T15:59:08+00:00 | 2025-11-21T19:35:32+00:00 |
| rhsa-2025:7496 | Red Hat Security Advisory: libxslt security update | 2025-05-13T15:59:34+00:00 | 2025-11-21T19:35:31+00:00 |
| rhsa-2025:7490 | Red Hat Security Advisory: mod_auth_openidc security update | 2025-05-13T16:02:37+00:00 | 2025-11-21T19:35:31+00:00 |
| rhsa-2025:7493 | Red Hat Security Advisory: thunderbird security update | 2025-05-13T16:06:01+00:00 | 2025-11-21T19:35:30+00:00 |
| rhsa-2025:7491 | Red Hat Security Advisory: firefox security update | 2025-05-13T15:59:29+00:00 | 2025-11-21T19:35:29+00:00 |
| rhsa-2025:7478 | Red Hat Security Advisory: corosync security update | 2025-05-13T16:06:26+00:00 | 2025-11-21T19:35:26+00:00 |
| rhsa-2025:7458 | Red Hat Security Advisory: xorg-x11-server-Xwayland security update | 2025-05-13T16:03:28+00:00 | 2025-11-21T19:35:24+00:00 |
| rhsa-2025:7457 | Red Hat Security Advisory: exiv2 security update | 2025-05-13T17:19:56+00:00 | 2025-11-21T19:35:24+00:00 |
| rhsa-2025:7438 | Red Hat Security Advisory: redis security update | 2025-05-13T14:02:28+00:00 | 2025-11-21T19:35:22+00:00 |
| rhsa-2025:7440 | Red Hat Security Advisory: vim security update | 2025-05-13T14:13:21+00:00 | 2025-11-21T19:35:21+00:00 |
| rhsa-2025:7435 | Red Hat Security Advisory: thunderbird security update | 2025-05-13T14:01:16+00:00 | 2025-11-21T19:35:20+00:00 |
| rhsa-2025:7436 | Red Hat Security Advisory: libsoup security update | 2025-05-13T14:01:06+00:00 | 2025-11-21T19:35:19+00:00 |
| rhsa-2025:7430 | Red Hat Security Advisory: yelp security update | 2025-05-13T14:03:16+00:00 | 2025-11-21T19:35:17+00:00 |
| rhsa-2025:7429 | Red Hat Security Advisory: redis:7 security update | 2025-05-13T14:02:16+00:00 | 2025-11-21T19:35:17+00:00 |
| rhsa-2025:7428 | Red Hat Security Advisory: firefox security update | 2025-05-13T13:59:41+00:00 | 2025-11-21T19:35:17+00:00 |
| rhsa-2025:7427 | Red Hat Security Advisory: xterm security update | 2025-05-13T13:58:31+00:00 | 2025-11-21T19:35:16+00:00 |
| rhsa-2025:7422 | Red Hat Security Advisory: ghostscript security update | 2025-05-13T13:58:46+00:00 | 2025-11-21T19:35:14+00:00 |
| rhsa-2025:7419 | Red Hat Security Advisory: mod_auth_openidc security update | 2025-05-13T13:59:17+00:00 | 2025-11-21T19:35:14+00:00 |
| rhsa-2025:7417 | Red Hat Security Advisory: gimp security update | 2025-05-13T13:58:26+00:00 | 2025-11-21T19:35:13+00:00 |
| rhsa-2025:7410 | Red Hat Security Advisory: libxslt security update | 2025-05-13T13:56:17+00:00 | 2025-11-21T19:35:12+00:00 |
| rhsa-2025:7387 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-05-13T13:26:55+00:00 | 2025-11-21T19:35:08+00:00 |
| rhsa-2025:7350 | Red Hat Security Advisory: perl-Module-ScanDeps security update | 2025-05-13T08:42:56+00:00 | 2025-11-21T19:35:08+00:00 |
| rhsa-2025:7317 | Red Hat Security Advisory: python3.12-cryptography security update | 2025-05-13T08:48:39+00:00 | 2025-11-21T19:35:07+00:00 |
| rhsa-2025:7313 | Red Hat Security Advisory: keylime-agent-rust security update | 2025-05-13T08:49:40+00:00 | 2025-11-21T19:35:06+00:00 |
| rhsa-2025:7309 | Red Hat Security Advisory: openjpeg2 security update | 2025-05-13T08:43:29+00:00 | 2025-11-21T19:35:06+00:00 |
| rhsa-2025:7242 | Red Hat Security Advisory: gstreamer1-plugins-good security update | 2025-05-13T08:36:31+00:00 | 2025-11-21T19:35:05+00:00 |
| rhsa-2025:7241 | Red Hat Security Advisory: rust-bootupd security update | 2025-05-13T08:35:52+00:00 | 2025-11-21T19:35:04+00:00 |
| rhsa-2025:7201 | Red Hat Security Advisory: corosync security update | 2025-05-13T08:39:06+00:00 | 2025-11-21T19:35:03+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-21805 | Windows MSHTML Platform Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-03-02T08:00:00.000Z |
| msrc_cve-2023-21806 | Power BI Report Server Spoofing Vulnerability | 2023-02-14T08:00:00.000Z | 2023-03-01T08:00:00.000Z |
| msrc_cve-2023-20052 | On Feb 15 2023 the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier 0.105.1 and earlier and 0.103.7 and earlier could allow an unauthenticated remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process. | 2023-02-01T00:00:00.000Z | 2023-03-01T00:00:00.000Z |
| msrc_cve-2023-20032 | On Feb 15 2023 the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier 0.105.1 and earlier and 0.103.7 and earlier could allow an unauthenticated remote attacker to execute arbitrary code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the ClamAV scanning process or else crash the process resulting in a denial of service (DoS) condition. For a description of this vulnerability see the ClamAV blog ["https://blog.clamav.net/"]. | 2023-02-01T00:00:00.000Z | 2023-03-01T00:00:00.000Z |
| msrc_cve-2023-0567 | password_verify() always returns true for some invalid hashes | 2023-02-01T00:00:00.000Z | 2023-03-01T00:00:00.000Z |
| msrc_cve-2023-21716 | Microsoft Word Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-23T08:00:00.000Z |
| msrc_cve-2023-21568 | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-23T08:00:00.000Z |
| msrc_cve-2023-21809 | Microsoft Defender for Endpoint Security Feature Bypass Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-21T08:00:00.000Z |
| msrc_cve-2023-0662 | DoS vulnerability when parsing multipart request body | 2023-02-01T00:00:00.000Z | 2023-02-21T00:00:00.000Z |
| msrc_cve-2023-0568 | Array overrun in common path resolve code | 2023-02-01T00:00:00.000Z | 2023-02-20T00:00:00.000Z |
| msrc_cve-2023-0361 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message the attacker would be able to decrypt the application data exchanged over that connection. | 2023-02-01T00:00:00.000Z | 2023-02-20T00:00:00.000Z |
| msrc_cve-2023-21718 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-18T08:00:00.000Z |
| msrc_cve-2023-21823 | Windows Graphics Component Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-17T08:00:00.000Z |
| msrc_cve-2023-21713 | Microsoft SQL Server Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-16T08:00:00.000Z |
| msrc_cve-2023-21705 | Microsoft SQL Server Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-16T08:00:00.000Z |
| msrc_cve-2023-21528 | Microsoft SQL Server Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-16T08:00:00.000Z |
| msrc_cve-2023-0804 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0803 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0802 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0801 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368 invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0800 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0799 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit afaabc3e. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0798 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit afaabc3e. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0797 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368 invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit afaabc3e. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0796 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit afaabc3e. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0795 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit afaabc3e. | 2023-02-01T00:00:00.000Z | 2023-02-16T00:00:00.000Z |
| msrc_cve-2023-0615 | A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled. | 2023-02-01T00:00:00.000Z | 2023-02-15T00:00:00.000Z |
| msrc_cve-2023-23390 | 3D Builder Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-14T08:00:00.000Z |
| msrc_cve-2023-23378 | Print 3D Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-14T08:00:00.000Z |
| msrc_cve-2023-23377 | 3D Builder Remote Code Execution Vulnerability | 2023-02-14T08:00:00.000Z | 2023-02-14T08:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201403-0468 | Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) … | 2025-04-13T23:39:11.756000Z |
| var-201404-0194 | Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based managemen… | 2025-04-13T23:39:11.258000Z |
| var-201404-0424 | Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.… | 2025-04-13T23:39:11.152000Z |
| var-201404-0465 | The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, We… | 2025-04-13T23:39:11.120000Z |
| var-201404-0633 | Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R… | 2025-04-13T23:39:11.085000Z |
| var-201405-0357 | The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlie… | 2025-04-13T23:39:10.715000Z |
| var-201406-0382 | Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswit… | 2025-04-13T23:39:10.309000Z |
| var-201407-0368 | The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumera… | 2025-04-13T23:39:09.912000Z |
| var-201407-0389 | SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 al… | 2025-04-13T23:39:09.882000Z |
| var-201407-0410 | The License Measurement servlet in SAP Solution Manager 7.1 allows remote attackers to by… | 2025-04-13T23:39:09.842000Z |
| var-201407-0494 | silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a deni… | 2025-04-13T23:39:09.784000Z |
| var-201408-0001 | ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for… | 2025-04-13T23:39:09.742000Z |
| var-201408-0171 | Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly conside… | 2025-04-13T23:39:09.621000Z |
| var-201408-0318 | Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial… | 2025-04-13T23:39:09.525000Z |
| var-201409-0399 | Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows r… | 2025-04-13T23:39:09.367000Z |
| var-201410-0998 | Multiple cross-site scripting (XSS) vulnerabilities in the CCM admin interface in the Ser… | 2025-04-13T23:39:09.087000Z |
| var-201411-0062 | The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Fi… | 2025-04-13T23:39:08.886000Z |
| var-201411-0251 | Cisco Unified Communications Manager IM and Presence Service 9.1(1) produces different re… | 2025-04-13T23:39:08.799000Z |
| var-201412-0027 | Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with sof… | 2025-04-13T23:39:08.648000Z |
| var-201412-0449 | Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x befor… | 2025-04-13T23:39:08.390000Z |
| var-201412-0596 | The management console on the Symantec Web Gateway (SWG) appliance before 5.2.2 allows re… | 2025-04-13T23:39:08.332000Z |
| var-201501-0337 | The outlookpa component in Cisco WebEx Meetings Server does not properly validate API inp… | 2025-04-13T23:39:07.786000Z |
| var-201502-0135 | Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause… | 2025-04-13T23:39:07.626000Z |
| var-201502-0156 | Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IO… | 2025-04-13T23:39:07.590000Z |
| var-201502-0387 | Multiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmwa… | 2025-04-13T23:39:07.469000Z |
| var-201503-0072 | Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I… | 2025-04-13T23:39:07.329000Z |
| var-201503-0156 | The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.… | 2025-04-13T23:39:07.266000Z |
| var-201503-0177 | The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to ca… | 2025-04-13T23:39:07.231000Z |
| var-201503-0452 | Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall … | 2025-04-13T23:39:07.061000Z |
| var-201504-0227 | Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.0… | 2025-04-13T23:39:06.987000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:1680-1 | Security update for curl | 2022-05-16T09:09:56Z | 2022-05-16T09:09:56Z |
| suse-su-2022:1678-1 | Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core | 2022-05-16T08:19:25Z | 2022-05-16T08:19:25Z |
| suse-su-2022:1677-1 | Security update for webkit2gtk3 | 2022-05-16T08:15:24Z | 2022-05-16T08:15:24Z |
| suse-su-2022:1676-1 | Security update for the Linux Kernel | 2022-05-16T08:13:49Z | 2022-05-16T08:13:49Z |
| suse-su-2022:1674-1 | Security update for gzip | 2022-05-16T08:12:51Z | 2022-05-16T08:12:51Z |
| suse-su-2022:1673-1 | Security update for gzip | 2022-05-16T08:11:20Z | 2022-05-16T08:11:20Z |
| suse-su-2022:1671-1 | Security update for openldap2 | 2022-05-16T08:09:13Z | 2022-05-16T08:09:13Z |
| suse-su-2022:1670-1 | Security update for openldap2 | 2022-05-16T08:07:35Z | 2022-05-16T08:07:35Z |
| suse-su-2022:1669-1 | Security update for the Linux Kernel | 2022-05-16T08:04:04Z | 2022-05-16T08:04:04Z |
| suse-su-2022:1668-1 | Security update for the Linux Kernel | 2022-05-16T08:03:37Z | 2022-05-16T08:03:37Z |
| suse-su-2022:1667-1 | Security update for tiff | 2022-05-16T08:03:21Z | 2022-05-16T08:03:21Z |
| suse-su-2022:1666-1 | Security update for slurm | 2022-05-16T08:02:47Z | 2022-05-16T08:02:47Z |
| suse-su-2022:1665-1 | Security update for pidgin | 2022-05-16T08:01:59Z | 2022-05-16T08:01:59Z |
| suse-su-2022:1664-1 | Security update for pidgin | 2022-05-16T08:01:28Z | 2022-05-16T08:01:28Z |
| suse-su-2022:1657-1 | Security update for curl | 2022-05-13T13:39:13Z | 2022-05-13T13:39:13Z |
| suse-su-2022:1654-1 | Security update for documentation-suse-openstack-cloud, kibana, openstack-keystone, openstack-monasca-notification | 2022-05-12T15:16:00Z | 2022-05-12T15:16:00Z |
| suse-su-2022:1652-1 | Security update for e2fsprogs | 2022-05-12T15:15:01Z | 2022-05-12T15:15:01Z |
| suse-su-2022:1651-1 | Security update for the Linux Kernel | 2022-05-12T15:14:31Z | 2022-05-12T15:14:31Z |
| suse-su-2022:1650-1 | Security update for gzip | 2022-05-12T15:14:12Z | 2022-05-12T15:14:12Z |
| suse-su-2022:1647-1 | Security update for clamav | 2022-05-12T15:13:29Z | 2022-05-12T15:13:29Z |
| suse-su-2022:1644-1 | Security update for clamav | 2022-05-12T05:57:38Z | 2022-05-12T05:57:38Z |
| suse-su-2022:1641-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP3) | 2022-05-11T09:35:39Z | 2022-05-11T09:35:39Z |
| suse-su-2022:1640-1 | Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) | 2022-05-11T09:35:19Z | 2022-05-11T09:35:19Z |
| suse-su-2022:1637-1 | Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP2) | 2022-05-11T07:33:50Z | 2022-05-11T07:33:50Z |
| suse-su-2022:1605-1 | Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3) | 2022-05-10T16:04:04Z | 2022-05-10T16:04:04Z |
| suse-su-2022:1634-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2) | 2022-05-10T15:04:30Z | 2022-05-10T15:04:30Z |
| suse-su-2022:1629-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2) | 2022-05-10T14:04:28Z | 2022-05-10T14:04:28Z |
| suse-su-2022:1617-1 | Security update for gzip | 2022-05-10T12:40:52Z | 2022-05-10T12:40:52Z |
| suse-su-2022:1611-1 | Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP5) | 2022-05-10T10:34:22Z | 2022-05-10T10:34:22Z |
| suse-su-2022:1598-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15) | 2022-05-10T10:04:47Z | 2022-05-10T10:04:47Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-06554 | Tencent QQ本地权限提升漏洞 | 2023-06-02 | 2025-04-03 |
| cnvd-2025-06550 | Apple macOS资源管理错误漏洞 | 2025-03-12 | 2025-04-03 |
| cnvd-2025-06549 | Apple macOS Sequoia信息泄露漏洞 | 2025-03-12 | 2025-04-03 |
| cnvd-2025-06547 | Tencent Libpag缓冲区溢出漏洞 | 2024-05-06 | 2025-04-03 |
| cnvd-2025-06546 | Tencent Libpag整数溢出漏洞 | 2024-05-09 | 2025-04-03 |
| cnvd-2025-06486 | WordPress Show Analytics widget plugin跨站脚本漏洞 | 2025-01-10 | 2025-04-03 |
| cnvd-2025-06479 | Tencent QQMail存在未明漏洞（CNVD-2025-06479） | 2025-02-18 | 2025-04-03 |
| cnvd-2025-06476 | Rockwell Automation Arena Simulation Software缓冲区溢出漏洞（CNVD-2025-06476） | 2023-10-31 | 2025-04-03 |
| cnvd-2025-06475 | Payroll Management System SQL注入漏洞（CNVD-2025-06475） | 2025-04-03 | 2025-04-03 |
| cnvd-2025-06474 | CicadasCMS代码注入漏洞（CNVD-2025-06474） | 2025-03-27 | 2025-04-03 |
| cnvd-2025-06308 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06308） | 2025-03-07 | 2025-04-03 |
| cnvd-2025-06307 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06307） | 2025-03-27 | 2025-04-03 |
| cnvd-2025-06306 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06306） | 2025-03-27 | 2025-04-03 |
| cnvd-2025-06305 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06305） | 2025-03-27 | 2025-04-03 |
| cnvd-2025-06304 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06304） | 2025-03-27 | 2025-04-03 |
| cnvd-2025-06294 | Xiaomi Router缓冲区溢出漏洞（CNVD-2025-06294） | 2023-10-13 | 2025-04-03 |
| cnvd-2025-06293 | Xiaomi GetApps代码执行漏洞 | 2024-05-06 | 2025-04-03 |
| cnvd-2025-06284 | NVIDIA Riva访问控制错误漏洞 | 2025-03-17 | 2025-04-03 |
| cnvd-2025-06283 | NVIDIA Riva riva_quickstart访问控制错误漏洞 | 2025-03-17 | 2025-04-03 |
| cnvd-2025-06213 | IBM Security Verify Access跨站脚本漏洞（CNVD-2025-06213） | 2025-02-17 | 2025-04-03 |
| cnvd-2025-05928 | 南京管鲍科技发展有限公司安全教育培训信息系统存在信息泄露漏洞 | 2025-02-05 | 2025-04-03 |
| cnvd-2025-06478 | WordPress Shuffle plugin SQL注入漏洞 | 2025-03-31 | 2025-04-02 |
| cnvd-2025-06477 | WordPress Blue Captcha plugin跨站脚本漏洞 | 2025-03-31 | 2025-04-02 |
| cnvd-2025-06312 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06312） | 2024-12-13 | 2025-04-02 |
| cnvd-2025-06311 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-06311） | 2024-12-13 | 2025-04-02 |
| cnvd-2025-06310 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2025-06310） | 2024-12-13 | 2025-04-02 |
| cnvd-2025-06309 | Adobe Illustrators栈缓冲区溢出漏洞（CNVD-2025-06309） | 2025-02-14 | 2025-04-02 |
| cnvd-2025-06303 | Xiaomi Millet mobile phones文件上传漏洞 | 2019-09-23 | 2025-04-02 |
| cnvd-2025-06302 | Xiaomi AX1800等命令注入漏洞 | 2021-01-18 | 2025-04-02 |
| cnvd-2025-06301 | Xiaomi Mi browser和Xiaomi Mint Browser输入验证错误漏洞 | 2022-04-26 | 2025-04-02 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2014-avi-035 | Multiples vulnérabilités dans Cisco Secure Access Control System | 2014-01-16T00:00:00.000000 | 2014-01-16T00:00:00.000000 |
| certa-2014-avi-034 | Vulnérabilité dans ntpd | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-033 | Multiples vulnérabilités dans Oracle MySql | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-032 | Multiples vulnérabilités dans Oracle VirtualBox et Apache Tomcat | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-031 | Multiples vulnérabilités dans Sun Systems Products Suite | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-030 | Multiples vulnérabilités dans Oracle Java SE | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-029 | Vulnérabilité dans Oracle Financial Services Software | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-028 | Vulnérabilité dans Oracle iLearning | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-027 | Multiples vulnérabilités dans Oracle Siebel CRM | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-026 | Multiples vulnérabilités dans Oracle People Soft Products | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-025 | Multiples vulnérabilités dans Oracle Supply Chain Products Suite | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-024 | Multiples vulnérabilités dans Oracle E-Business Suite | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-023 | Multiples vulnérabilités dans Oracle Hyperion | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-022 | Multiples vulnérabilités dans Oracle Fusion Middleware | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-021 | Multiples vulnérabilités dans Oracle Database Server | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-020 | Multiples vulnérabilités dans Google Chrome | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-019 | Multiples vulnérabilités dans Adobe Flash Player | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-018 | Multiples vulnérabilités dans Adobe Reader | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-017 | Vulnérabilité dans Microsoft Dynamics AX | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-016 | Vulnérabilité dans les pilotes en mode noyau de Microsoft | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-015 | Vulnérabilité dans le noyau Microsoft | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-014 | Multiples vulnérabilités dans Microsoft Office | 2014-01-15T00:00:00.000000 | 2014-01-15T00:00:00.000000 |
| certa-2014-avi-013 | Vulnérabilité dans ISC BIND | 2014-01-14T00:00:00.000000 | 2014-01-14T00:00:00.000000 |
| certa-2014-avi-012 | Vulnérabilité dans McAfee Vulnerability Manager | 2014-01-13T00:00:00.000000 | 2014-01-13T00:00:00.000000 |
| certa-2014-avi-011 | Vulnérabilité dans Cisco Small Business Devices | 2014-01-13T00:00:00.000000 | 2014-01-13T00:00:00.000000 |
| certa-2014-avi-010 | Multiples vulnérabilités dans le noyau Linux de Mandriva | 2014-01-13T00:00:00.000000 | 2014-01-13T00:00:00.000000 |
| certa-2014-avi-009 | Multiples vulnérabilités dans Symantec Protection Manager | 2014-01-10T00:00:00.000000 | 2014-01-10T00:00:00.000000 |
| certa-2014-avi-008 | Multiples vulnérabilités dans Avaya Experience Portal | 2014-01-10T00:00:00.000000 | 2014-01-10T00:00:00.000000 |
| certa-2014-avi-005 | Vulnérabilité dans X.Org libXfont | 2014-01-08T00:00:00.000000 | 2014-01-10T00:00:00.000000 |
| certa-2014-avi-007 | Vulnérabilité dans le système SCADA Schneider Electric SUI | 2014-01-09T00:00:00.000000 | 2014-01-09T00:00:00.000000 |