Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-6207
7.5 (3.1)
WP Import Export Lite <= 3.9.28 - Authenticated (Subsc… vjinfotech
WP Import Export Lite
2025-08-05T07:24:14.925Z 2026-01-19T16:14:04.915Z
CVE-2025-5061
7.5 (3.1)
WP Import Export Lite <= 3.9.29 - Authenticated (Subsc… vjinfotech
WP Import Export Lite
2025-08-05T07:24:15.571Z 2026-01-19T16:13:13.052Z
CVE-2025-25249
7.4 (3.1)
A heap-based buffer overflow vulnerability in For… Fortinet
FortiSwitchManager
2026-01-13T16:32:35.662Z 2026-01-19T14:19:50.124Z
CVE-2025-68282
N/A
usb: gadget: udc: fix use-after-free in usb_gadget_sta… Linux
Linux
2025-12-16T15:06:04.332Z 2026-01-19T12:18:16.378Z
CVE-2025-68266
N/A
bfs: Reconstruct file type when loading from disk Linux
Linux
2025-12-16T14:47:06.240Z 2026-01-19T12:18:15.201Z
CVE-2025-40256
N/A
xfrm: also call xfrm_state_delete_tunnel at destroy ti… Linux
Linux
2025-12-04T16:08:17.756Z 2026-01-19T12:18:06.846Z
CVE-2025-40215
N/A
xfrm: delete x->tunnel as we delete x Linux
Linux
2025-12-04T12:38:32.517Z 2026-01-19T12:18:05.674Z
CVE-2025-40110
N/A
drm/vmwgfx: Fix a null-ptr access in the cursor snooper Linux
Linux
2025-11-12T01:07:24.739Z 2026-01-19T12:18:04.465Z
CVE-2025-38556
N/A
HID: core: Harden s32ton() against conversion to 0 bits Linux
Linux
2025-08-19T17:02:34.929Z 2026-01-19T12:18:03.142Z
CVE-2025-38129
N/A
page_pool: Fix use-after-free in page_pool_recycle_in_ring Linux
Linux
2025-07-03T08:35:33.728Z 2026-01-19T12:18:00.706Z
CVE-2025-38119
N/A
scsi: core: ufs: Fix a hang in the error handler Linux
Linux
2025-07-03T08:35:26.616Z 2026-01-19T12:17:59.357Z
CVE-2025-38022
N/A
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_… Linux
Linux
2025-06-18T09:28:29.218Z 2026-01-19T12:17:58.186Z
CVE-2025-37830
N/A
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() Linux
Linux
2025-05-08T06:26:21.736Z 2026-01-19T12:17:56.940Z
CVE-2025-22121
N/A
ext4: fix out-of-bound read in ext4_xattr_inode_dec_re… Linux
Linux
2025-04-16T14:13:05.894Z 2026-01-19T12:17:55.783Z
CVE-2025-22111
N/A
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. Linux
Linux
2025-04-16T14:12:57.719Z 2026-01-19T12:17:54.573Z
CVE-2025-22022
N/A
usb: xhci: Apply the link chain quirk on NEC isoc endpoints Linux
Linux
2025-04-16T10:23:27.423Z 2026-01-19T12:17:53.138Z
CVE-2024-49968
N/A
ext4: filesystems without casefold feature cannot be m… Linux
Linux
2024-10-21T18:02:18.369Z 2026-01-19T12:17:51.927Z
CVE-2024-46830
N/A
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU… Linux
Linux
2024-09-27T12:39:28.396Z 2026-01-19T12:17:50.664Z
CVE-2024-40928
N/A
net: ethtool: fix the error condition in ethtool_get_p… Linux
Linux
2024-07-12T12:25:07.769Z 2026-01-19T12:17:49.472Z
CVE-2024-39500
N/A
sock_map: avoid race between sock_map_close and sk_psock_put Linux
Linux
2024-07-12T12:20:34.317Z 2026-01-19T12:17:48.298Z
CVE-2024-36927
N/A
ipv4: Fix uninit-value access in __ip_make_skb() Linux
Linux
2024-05-30T15:29:20.275Z 2026-01-19T12:17:47.098Z
CVE-2024-36903
N/A
ipv6: Fix potential uninit-value access in __ip6_make_skb() Linux
Linux
2024-05-30T15:29:04.866Z 2026-01-19T12:17:45.894Z
CVE-2023-53543
N/A
vdpa: Add max vqp attr to vdpa_nl_policy for nlattr le… Linux
Linux
2025-10-04T15:16:52.114Z 2026-01-19T12:17:44.717Z
CVE-2023-52975
7.8 (3.1)
scsi: iscsi_tcp: Fix UAF during logout when accessing … Linux
Linux
2025-03-27T16:43:15.322Z 2026-01-19T12:17:43.562Z
CVE-2022-49743
N/A
ovl: Use "buf" flexible array for memcpy() destination Linux
Linux
2025-03-27T16:42:54.289Z 2026-01-19T12:17:42.348Z
CVE-2022-49711
7.8 (3.1)
bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bu… Linux
Linux
2025-02-26T02:24:28.224Z 2026-01-19T12:17:41.156Z
CVE-2022-49465
7.8 (3.1)
blk-throttle: Set BIO_THROTTLED when bio has been throttled Linux
Linux
2025-02-26T02:13:10.975Z 2026-01-19T12:17:39.645Z
CVE-2022-49267
N/A
mmc: core: use sysfs_emit() instead of sprintf() Linux
Linux
2025-02-26T01:56:16.211Z 2026-01-19T12:17:38.477Z
CVE-2022-49168
7.8 (3.1)
btrfs: do not clean up repair bio if submit fails Linux
Linux
2025-02-26T01:55:26.532Z 2026-01-19T12:17:37.297Z
CVE-2022-48744
N/A
net/mlx5e: Avoid field-overflowing memcpy() Linux
Linux
2024-06-20T11:13:27.979Z 2026-01-19T12:17:36.024Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-60077
7.5 (3.1)
WordPress YayPricing plugin <= 3.5.3 - Broken Access C… YayCommerce
YayPricing
2025-12-18T07:22:06.434Z 2026-01-20T14:28:12.083Z
CVE-2025-60076
7.5 (3.1)
WordPress Ray Enterprise Translation plugin <= 1.7.1 -… jbhovik
Ray Enterprise Translation
2025-12-18T07:22:06.163Z 2026-01-21T15:36:09.930Z
CVE-2025-60075
7.1 (3.1)
WordPress hpb seo plugin for WordPress plugin <= 3.0.1… Allegro Marketing
hpb seo plugin for WordPress
2025-10-29T08:38:03.170Z 2026-02-17T15:47:40.081Z
CVE-2025-60074
7.5 (3.1)
WordPress Lazy Load Optimizer plugin <= 1.4.7 - Local … Processby
Lazy Load Optimizer
2025-11-06T15:54:43.533Z 2026-01-20T14:28:11.778Z
CVE-2025-60073
7.5 (3.1)
WordPress Responsive Sidebar plugin <= 1.2.2 - Local F… Processby
Responsive Sidebar
2025-11-06T15:54:42.201Z 2026-01-20T14:28:11.770Z
CVE-2025-60072
8.2 (3.1)
WordPress Anchor smooth scroll plugin <= 1.0.2 - Local… Processby
Anchor smooth scroll
2025-12-18T07:22:05.940Z 2026-01-21T15:36:33.079Z
CVE-2025-60071
8.1 (3.1)
WordPress Riode | Multi-Purpose WooCommerce theme <= 1… don-themes
Riode | Multi-Purpose WooCommerce
2025-12-18T07:22:05.770Z 2026-01-20T14:28:11.761Z
CVE-2025-60070
6.5 (3.1)
WordPress Molla - Multipurpose Responsive Shopify them… The4
Molla
2025-12-18T07:22:05.588Z 2026-01-20T14:28:11.788Z
CVE-2025-60068
6.5 (3.1)
WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Co… javothemes
Javo Core
2025-12-18T07:22:05.224Z 2026-01-20T14:28:11.805Z
CVE-2025-60067
8.1 (3.1)
WordPress Giardino theme <= 1.1.10 - Local File Inclus… axiomthemes
Giardino
2025-12-18T07:22:05.053Z 2026-01-20T14:28:11.757Z
CVE-2025-60066
8.1 (3.1)
WordPress Katelyn theme <= 1.0.10 - Local File Inclusi… axiomthemes
Katelyn
2025-12-18T07:22:04.871Z 2026-01-20T14:28:11.771Z
CVE-2025-60065
8.1 (3.1)
WordPress Pinevale theme <= 1.0.14 - Local File Inclus… axiomthemes
Pinevale
2025-12-18T07:22:04.689Z 2026-01-20T14:28:11.587Z
CVE-2025-60064
8.1 (3.1)
WordPress Renewal theme <= 1.2.2 - Local File Inclusio… axiomthemes
Renewal
2025-12-18T07:22:04.500Z 2026-01-20T14:28:11.763Z
CVE-2025-60063
8.2 (3.1)
WordPress Rosalinda theme <= 1.2.3 - Local File Inclus… axiomthemes
Rosalinda
2025-12-18T07:22:04.312Z 2026-01-21T15:36:49.660Z
CVE-2025-60062
9.4 (3.1)
WordPress tPlayer plugin <= 1.2.1.6 - SQL Injection vu… mmetrodw
tPlayer
2025-12-18T07:22:04.109Z 2026-01-21T15:38:23.015Z
CVE-2025-60061
8.1 (3.1)
WordPress Kicker theme <= 2.2.0 - Local File Inclusion… axiomthemes
Kicker
2025-12-18T07:22:03.925Z 2026-01-20T14:28:11.582Z
CVE-2025-60060
8.1 (3.1)
WordPress Pubzinne theme <= 1.0.12 - Local File Inclus… axiomthemes
Pubzinne
2025-12-18T07:22:03.729Z 2026-01-20T14:28:11.786Z
CVE-2025-60059
8.1 (3.1)
WordPress smart SEO theme <= 2.12 - Local File Inclusi… axiomthemes
smart SEO
2025-12-18T07:22:03.468Z 2026-01-20T14:28:11.806Z
CVE-2025-60058
8.1 (3.1)
WordPress DetailX theme <= 1.10.0 - Local File Inclusi… AncoraThemes
DetailX
2025-12-18T07:22:03.280Z 2026-01-20T14:28:11.787Z
CVE-2025-60057
8.1 (3.1)
WordPress DJ Rainflow theme <= 1.3.13 - Local File Inc… AncoraThemes
DJ Rainflow
2025-12-18T07:22:03.082Z 2026-01-20T14:28:12.080Z
CVE-2025-60056
8.1 (3.1)
WordPress Winger theme <= 1.0.16 - Local File Inclusio… AncoraThemes
Winger
2025-12-18T07:22:02.878Z 2026-01-20T14:28:11.708Z
CVE-2025-60055
8.2 (3.1)
WordPress Fabrica theme <= 1.8.1 - Local File Inclusio… AncoraThemes
Fabrica
2025-12-18T07:22:02.704Z 2026-01-21T15:38:56.104Z
CVE-2025-60054
8.2 (3.1)
WordPress OnLeash theme <= 1.5.2 - Local File Inclusio… AncoraThemes
OnLeash
2025-12-18T07:22:02.500Z 2026-01-21T15:39:31.725Z
CVE-2025-60053
8.2 (3.1)
WordPress MaxCube theme <= 1.3.1 - Local File Inclusio… AncoraThemes
MaxCube
2025-12-18T07:22:02.315Z 2026-01-21T15:39:56.826Z
CVE-2025-60052
8.2 (3.1)
WordPress W&D theme <= 1.0 - Local File Inclusion vuln… AncoraThemes
W&D
2025-12-18T07:22:02.123Z 2026-01-21T15:40:12.899Z
CVE-2025-60051
8.2 (3.1)
WordPress Rare Radio theme <= 1.0.15.1 - Local File In… AncoraThemes
Rare Radio
2025-12-18T07:22:01.919Z 2026-01-21T15:40:27.459Z
CVE-2025-60050
8.2 (3.1)
WordPress Panda theme <= 1.21 - Local File Inclusion v… axiomthemes
Panda
2025-12-18T07:22:01.712Z 2026-01-21T15:40:43.518Z
CVE-2025-60049
8.2 (3.1)
WordPress Soleil theme <= 1.17 - Local File Inclusion … axiomthemes
Soleil
2025-12-18T07:22:01.475Z 2026-01-21T15:41:15.755Z
CVE-2025-60048
8.1 (3.1)
WordPress Tripster theme <= 1.0.10 - Local File Inclus… axiomthemes
Tripster
2025-12-18T07:22:01.281Z 2026-01-20T14:28:11.490Z
CVE-2025-60047
8.1 (3.1)
WordPress IPharm theme <= 1.2.3 - Local File Inclusion… axiomthemes
IPharm
2025-12-18T07:22:01.092Z 2026-01-20T14:28:11.507Z
ID Description Published Updated
fkie_cve-2025-60077 Missing Authorization vulnerability in YayCommerce YayPricing yaypricing allows Accessing Functiona… 2025-12-18T08:16:07.790 2026-01-20T15:17:25.990
fkie_cve-2025-60076 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:07.670 2026-01-20T15:17:25.860
fkie_cve-2025-60075 Cross-Site Request Forgery (CSRF) vulnerability in Allegro Marketing hpb seo plugin for WordPress h… 2025-10-29T09:15:38.077 2026-01-20T15:17:25.727
fkie_cve-2025-60074 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:16:03.250 2026-01-20T15:17:25.560
fkie_cve-2025-60073 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:16:03.093 2026-01-20T15:17:25.417
fkie_cve-2025-60072 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:07.540 2026-01-20T15:17:25.270
fkie_cve-2025-60071 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:07.410 2026-01-20T15:17:25.133
fkie_cve-2025-60070 Improper Control of Generation of Code ('Code Injection') vulnerability in The4 Molla molla allows … 2025-12-18T08:16:07.197 2026-01-20T15:17:25.003
fkie_cve-2025-60068 Improper Control of Generation of Code ('Code Injection') vulnerability in javothemes Javo Core jav… 2025-12-18T08:16:06.933 2026-01-20T15:17:24.740
fkie_cve-2025-60067 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.800 2026-01-20T15:17:24.593
fkie_cve-2025-60066 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.667 2026-01-20T15:17:24.453
fkie_cve-2025-60065 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.537 2026-01-20T15:17:24.317
fkie_cve-2025-60064 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.407 2026-01-20T15:17:24.173
fkie_cve-2025-60063 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.277 2026-01-20T15:17:24.040
fkie_cve-2025-60062 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-18T08:16:06.153 2026-01-20T15:17:23.907
fkie_cve-2025-60061 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:06.023 2026-01-20T15:17:23.773
fkie_cve-2025-60060 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.900 2026-01-20T15:17:23.633
fkie_cve-2025-60059 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.767 2026-01-20T15:17:23.493
fkie_cve-2025-60058 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.643 2026-01-20T15:17:23.363
fkie_cve-2025-60057 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.510 2026-01-20T15:17:23.220
fkie_cve-2025-60056 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.383 2026-01-20T15:17:23.090
fkie_cve-2025-60055 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.250 2026-01-20T15:17:22.963
fkie_cve-2025-60054 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:05.117 2026-01-20T15:17:22.830
fkie_cve-2025-60053 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.990 2026-01-20T15:17:22.703
fkie_cve-2025-60052 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.863 2026-01-20T15:17:22.563
fkie_cve-2025-60051 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.740 2026-01-20T15:17:22.420
fkie_cve-2025-60050 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.613 2026-01-20T15:17:22.277
fkie_cve-2025-60049 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.490 2026-01-20T15:17:22.137
fkie_cve-2025-60048 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.357 2026-01-20T15:17:21.997
fkie_cve-2025-60047 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:04.227 2026-01-20T15:17:21.857
ID Severity Description Published Updated
ghsa-qq5r-fpg9-2mj7
7.8 (3.1)
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-boun… 2025-09-05T18:31:15Z 2026-01-09T00:30:27Z
ghsa-p8g3-7r42-x5c9
7.5 (3.1)
7.2 (4.0)
DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information 2025-12-26T06:30:28Z 2026-01-09T00:30:27Z
ghsa-p7jq-2wv5-rrmc
7.1 (3.1)
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boun… 2025-08-30T12:30:28Z 2026-01-09T00:30:27Z
ghsa-mxw2-rg24-m422
7.1 (3.1)
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte ou… 2025-09-05T18:31:15Z 2026-01-09T00:30:27Z
ghsa-jj6q-jr89-p4h6
5.5 (3.1)
In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dere… 2025-08-22T18:31:23Z 2026-01-09T00:30:27Z
ghsa-hmc7-frwx-fp3p
5.5 (3.1)
In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop… 2025-08-22T18:31:23Z 2026-01-09T00:30:27Z
ghsa-hm47-446q-7w5f
4.3 (3.1)
5.2 (4.0)
In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to b… 2025-06-13T21:31:10Z 2026-01-09T00:30:27Z
ghsa-fcgw-gqq6-4hgf
5.5 (3.1)
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nband… 2025-09-05T18:31:15Z 2026-01-09T00:30:27Z
ghsa-95h4-w6j8-2rp8
7.5 (3.1)
Undertow MadeYouReset HTTP/2 DDoS Vulnerability 2025-09-02T15:31:08Z 2026-01-09T00:30:27Z
ghsa-5hm5-7p65-wrq6
7.1 (3.1)
In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due… 2025-09-05T18:31:15Z 2026-01-09T00:30:27Z
ghsa-4grh-3wrc-7rxm
7.8 (3.1)
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer … 2025-08-26T15:31:00Z 2026-01-09T00:30:27Z
ghsa-3wcf-2vw2-33qp
5.5 (3.1)
In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during na… 2025-09-05T18:31:15Z 2026-01-09T00:30:27Z
ghsa-pc9j-5v36-2mww
3.7 (3.1)
AWS SDK for Swift adopted defense in depth enhancement for region parameter value 2026-01-08T22:12:15Z 2026-01-08T22:12:15Z
ghsa-j965-2qgj-vjmq
3.7 (3.1)
JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3 2026-01-08T22:04:26Z 2026-01-08T22:04:26Z
ghsa-6475-r3vj-m8vf
3.7 (3.1)
AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value 2026-01-08T21:52:45Z 2026-01-08T21:52:45Z
ghsa-mcmc-2m55-j8jj
8.8 (3.1)
vLLM introduced enhanced protection for CVE-2025-62164 2026-01-08T21:47:43Z 2026-01-08T21:47:43Z
ghsa-g59m-gf8j-gjf5
3.7 (3.1)
AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value 2026-01-08T21:46:19Z 2026-01-08T21:46:23Z
ghsa-rjf8-2wcw-f6mp
8.8 (3.1)
Salvo is vulnerable to reflected XSS in the list_html function 2026-01-08T21:22:18Z 2026-01-08T21:37:17Z
ghsa-54m3-5fxr-2f3j
8.8 (3.1)
Salvo is vulnerable to stored XSS in the list_html function by uploading files with malicious names 2026-01-08T21:16:41Z 2026-01-08T21:37:13Z
ghsa-6jm8-x3g6-r33j
5.4 (3.1)
Soft Serve is missing an authorization check in LFS lock deletion 2026-01-08T21:01:54Z 2026-01-08T21:37:08Z
ghsa-mqhg-v22x-pqj8
8.8 (3.1)
7.4 (4.0)
Bagisto is vulnerable to SSTI via name parameters provided by non-admin low-privilege users 2026-01-02T22:51:40Z 2026-01-08T21:36:05Z
ghsa-5j4h-4f72-qpm6
9.8 (3.1)
8.9 (4.0)
Bagisto has Normal & Blind SSTI from low-privilege user when ordering product 2026-01-02T22:13:40Z 2026-01-08T21:35:56Z
ghsa-mrj3-f2h4-7w45
4.2 (3.1)
Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method 2024-03-28T17:52:17Z 2026-01-08T21:35:17Z
ghsa-6h7w-v2xr-mqvw
9.8 (3.1)
8.8 (4.0)
Bagisto Missing Authentication on Installer API Endpoints 2026-01-02T21:14:06Z 2026-01-08T21:35:01Z
ghsa-g9jg-w8vm-g96v
4.6 (3.1)
Trix has a stored XSS vulnerability through its attachment attribute 2025-12-31T22:07:25Z 2026-01-08T21:34:41Z
ghsa-xp5p-5cr9-v76h
6.1 (3.1)
Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.… 2026-01-08T18:30:50Z 2026-01-08T21:30:34Z
ghsa-vj27-g5qj-m2px
9.8 (3.1)
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.ph… 2026-01-08T18:30:49Z 2026-01-08T21:30:34Z
ghsa-vcqr-rc2q-63p5
9.4 (3.1)
The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/… 2026-01-08T21:30:34Z 2026-01-08T21:30:34Z
ghsa-pm7p-9hjx-x5hq
3.3 (3.1)
Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote… 2026-01-08T21:30:34Z 2026-01-08T21:30:34Z
ghsa-pgxq-gj96-mq7g
7.5 (3.1)
Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition… 2026-01-08T21:30:34Z 2026-01-08T21:30:34Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-27231 In tmu_get_tr_stats of tmu.c, there is a possible out of bounds read due to a missing bou… 2024-02-22T06:03:35.276643Z
gsd-2024-27192 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-02-22T06:03:35.276391Z
gsd-2024-27239 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.275785Z
gsd-2024-27221 In update_policy_data of , there is a possible out of bounds write due to a missing bound… 2024-02-22T06:03:35.274837Z
gsd-2024-27263 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.273889Z
gsd-2024-27278 OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vuln… 2024-02-22T06:03:35.272515Z
gsd-2024-27204 In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing … 2024-02-22T06:03:35.272073Z
gsd-2024-27270 IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross… 2024-02-22T06:03:35.271779Z
gsd-2024-27194 Cross-Site Request Forgery (CSRF) vulnerability in Andrei Ivasiuc Fontific | Google Fonts… 2024-02-22T06:03:35.270219Z
gsd-2024-27269 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.269088Z
gsd-2024-27228 there is a possible out of bounds write due to a heap buffer overflow. This could lead to… 2024-02-22T06:03:35.266567Z
gsd-2024-27268 IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.3 is vulnerable to a den… 2024-02-22T06:03:35.266265Z
gsd-2024-27262 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.264551Z
gsd-2024-27230 In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possi… 2024-02-22T06:03:35.261942Z
gsd-2024-27229 In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null poin… 2024-02-22T06:03:35.261701Z
gsd-2024-27280 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.260919Z
gsd-2024-27213 In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution du… 2024-02-22T06:03:35.258249Z
gsd-2024-27277 The private key for the IBM Storage Protect Plus Server 10.1.0 through 10.1.16 certificat… 2024-02-22T06:03:35.257916Z
gsd-2024-27237 In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a… 2024-02-22T06:03:35.256783Z
gsd-2024-27261 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.2 could allow a privileged us… 2024-02-22T06:03:35.256093Z
gsd-2024-27240 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.255137Z
gsd-2024-27223 In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possibl… 2024-02-22T06:03:35.253704Z
gsd-2024-27191 Improper Control of Generation of Code ('Code Injection') vulnerability in Inpersttion Sl… 2024-02-22T06:03:35.252346Z
gsd-2024-27211 In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null… 2024-02-22T06:03:35.252099Z
gsd-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin ac… 2024-02-22T06:03:35.251633Z
gsd-2024-27249 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:35.251303Z
gsd-2024-27227 A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues 2024-02-22T06:03:35.250721Z
gsd-2024-27232 In asn1_ec_pkey_parse of asn1_common.c, there is a possible OOB read due to a missing nul… 2024-02-22T06:03:35.250483Z
gsd-2024-27193 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… 2024-02-22T06:03:35.249963Z
gsd-2024-27222 In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the fi… 2024-02-22T06:03:35.249397Z
ID Description Published Updated
mal-2025-185806 Malicious code in big-tau-stack-root-compress (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185805 Malicious code in big-static-delta-private-cache (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185804 Malicious code in big-star-kappa-alert-report (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185803 Malicious code in big-monitor-moon-iota-warn (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185802 Malicious code in big-grid-cron-parse-fork (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185801 Malicious code in big-data-shell-omega-reject (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185800 Malicious code in big-data-char-xi-kernel (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185799 Malicious code in betelgeuse-taurus-nestjs-whitedwarf (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185798 Malicious code in betelgeuse-sadr-antd-leda (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185797 Malicious code in betelgeuse-perseus-despina-radiant (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185796 Malicious code in betelgeuse-octans-aether-less (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185795 Malicious code in betelgeuse-nodejs-hugo-flare (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185794 Malicious code in betelgeuse-metalsmith-frontend-tethys (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185793 Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185792 Malicious code in betelgeuse-frontend-titan-yildun (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185791 Malicious code in betelgeuse-development-heliophysics-cordelia (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185790 Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185789 Malicious code in betelgeuse-csrf-aldebaran-json (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185788 Malicious code in betelgeuse-cassini-lyra-firebase (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185787 Malicious code in betelgeuse-backend-primatology-query (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185786 Malicious code in betelgeuse-antd-magellan-xanthus (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185785 Malicious code in beta-try-omicron-orchestrate-analyze (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185784 Malicious code in beta-orchestrate-slow-void-table (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185782 Malicious code in beta-key-promise-socket-file (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185781 Malicious code in beta-grep-cron-omega-validate (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185780 Malicious code in beta-error-rho-authenticate-tree (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185779 Malicious code in beta-enum-notify-view-stack (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185778 Malicious code in benchmark-view-mu-cat-virtualize (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185777 Malicious code in benchmark-refactor-secure-scale-array (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
ID Description Published Updated
wid-sec-w-2023-0217 NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen 2023-01-29T23:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2023-0216 QNAP NAS: Schwachstelle ermöglicht Codeausführung 2023-01-29T23:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2023-0215 D-LINK Router: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2023-01-29T23:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2023-0214 HCL BigFix: Schwachstelle ermöglicht Denial of Service 2023-01-29T23:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2023-0099 Tor: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-01-16T23:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2022-1448 Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service 2022-09-15T22:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2022-0890 libTIFF: Schwachstelle ermöglicht Denial of Service 2022-08-02T22:00:00.000+00:00 2023-01-29T23:00:00.000+00:00
wid-sec-w-2023-0212 IBM InfoSphere Information Server: Schwachstelle ermöglicht Cross-Site Scripting 2023-01-26T23:00:00.000+00:00 2023-01-26T23:00:00.000+00:00
wid-sec-w-2023-0208 Microsoft Windows: Schwachstelle ermöglicht Codeausführung 2023-01-26T23:00:00.000+00:00 2023-01-26T23:00:00.000+00:00
wid-sec-w-2023-0201 Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2023-01-25T23:00:00.000+00:00 2023-01-25T23:00:00.000+00:00
wid-sec-w-2023-0199 MIT Kerberos: Schwachstelle ermöglicht Denial of Service 2019-01-07T23:00:00.000+00:00 2023-01-25T23:00:00.000+00:00
wid-sec-w-2022-1184 Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation 2022-08-24T22:00:00.000+00:00 2023-01-25T23:00:00.000+00:00
wid-sec-w-2023-0197 Rancher: Mehrere Schwachstellen 2023-01-24T23:00:00.000+00:00 2023-01-24T23:00:00.000+00:00
wid-sec-w-2023-0191 IBM Security Identity Manager: Schwachstelle ermöglicht Offenlegung von Informationen 2023-01-24T23:00:00.000+00:00 2023-01-24T23:00:00.000+00:00
wid-sec-w-2022-2198 Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2022-11-29T23:00:00.000+00:00 2023-01-24T23:00:00.000+00:00
wid-sec-w-2023-0187 Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0185 Zoho ManageEngine ServiceDesk Plus: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0184 tribe29 checkmk: Schwachstelle ermöglicht Manipulation von Dateien und DoS 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0182 Lexmark Laser Drucker und Lexmark Multifunktionsdrucker: Mehrere Schwachstellen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0181 Apple Safari: Mehrere Schwachstellen ermöglichen Codeausführung 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0180 Moodle: Mehrere Schwachstellen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0179 Gitea: Schwachstelle ermöglicht Offenlegung von Informationen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0178 IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0177 IBM Business Automation Workflow: Schwachstelle ermöglicht Offenlegung von Informationen 2023-01-23T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0159 Notepad++: Schwachstelle ermöglicht Denial of Service 2023-01-19T23:00:00.000+00:00 2023-01-23T23:00:00.000+00:00
wid-sec-w-2023-0172 MISP: Mehrere Schwachstellen 2023-01-22T23:00:00.000+00:00 2023-01-22T23:00:00.000+00:00
wid-sec-w-2023-0171 PowerDNS: Schwachstelle ermöglicht Denial of Service 2023-01-22T23:00:00.000+00:00 2023-01-22T23:00:00.000+00:00
wid-sec-w-2023-0169 Symantec Endpoint Protection: Schwachstelle ermöglicht Privilegieneskalation 2023-01-22T23:00:00.000+00:00 2023-01-22T23:00:00.000+00:00
wid-sec-w-2023-0166 WinRAR: Schwachstelle ermöglicht Denial of Service 2023-01-22T23:00:00.000+00:00 2023-01-22T23:00:00.000+00:00
wid-sec-w-2023-0165 HP BIOS UEFI Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2022-02-16T23:00:00.000+00:00 2023-01-22T23:00:00.000+00:00
ID Description Published Updated
rhsa-2025:2126 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T15:44:09+00:00 2025-11-21T19:31:31+00:00
rhsa-2025:2125 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T15:53:14+00:00 2025-11-21T19:31:30+00:00
rhsa-2025:2121 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T14:31:44+00:00 2025-11-21T19:31:30+00:00
rhsa-2025:21038 Red Hat Security Advisory: kea security update 2025-11-11T20:00:06+00:00 2025-11-21T19:31:12+00:00
rhsa-2025:21006 Red Hat Security Advisory: kea security update 2025-11-11T19:31:51+00:00 2025-11-21T19:31:06+00:00
rhsa-2025:20994 Red Hat Security Advisory: ipa security update 2025-11-11T19:22:56+00:00 2025-11-21T19:31:05+00:00
rhsa-2025:20928 Red Hat Security Advisory: ipa security update 2025-11-11T14:05:57+00:00 2025-11-21T19:30:56+00:00
rhsa-2025:20922 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-11T13:58:27+00:00 2025-11-21T19:30:56+00:00
rhsa-2025:20838 Red Hat Security Advisory: zziplib security update 2025-11-11T09:45:24+00:00 2025-11-21T19:30:55+00:00
rhsa-2025:2035 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T12:34:58+00:00 2025-11-21T19:30:52+00:00
rhsa-2025:2034 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T12:39:23+00:00 2025-11-21T19:30:52+00:00
rhsa-2025:2029 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update 2025-03-03T11:12:03+00:00 2025-11-21T19:30:52+00:00
rhsa-2025:19946 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-10T01:43:16+00:00 2025-11-21T19:30:45+00:00
rhsa-2025:19920 Red Hat Security Advisory: webkitgtk4 security update 2025-11-06T17:05:08+00:00 2025-11-21T19:30:40+00:00
rhsa-2025:19919 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T16:59:38+00:00 2025-11-21T19:30:39+00:00
rhsa-2025:19918 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T17:01:23+00:00 2025-11-21T19:30:39+00:00
rhsa-2025:19916 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T17:00:48+00:00 2025-11-21T19:30:38+00:00
rhsa-2025:19915 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T16:45:43+00:00 2025-11-21T19:30:38+00:00
rhsa-2025:19914 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T17:01:08+00:00 2025-11-21T19:30:38+00:00
rhsa-2025:19913 Red Hat Security Advisory: webkit2gtk3 security update 2025-11-06T16:54:08+00:00 2025-11-21T19:30:37+00:00
rhsa-2025:1960 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T01:13:47+00:00 2025-11-21T19:30:19+00:00
rhsa-2025:1959 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T01:19:42+00:00 2025-11-21T19:30:18+00:00
rhsa-2025:1958 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T01:29:17+00:00 2025-11-21T19:30:18+00:00
rhsa-2025:1957 Red Hat Security Advisory: webkit2gtk3 security update 2025-03-03T01:13:27+00:00 2025-11-21T19:30:17+00:00
rhsa-2025:1954 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update 2025-03-01T13:56:53+00:00 2025-11-21T19:30:16+00:00
rhsa-2025:1920 Red Hat Security Advisory: pki-servlet-engine security update 2025-02-27T11:20:22+00:00 2025-11-21T19:30:02+00:00
rhsa-2025:1914 Red Hat Security Advisory: OpenShift Container Platform 4.17.19 packages and security update 2025-03-05T04:10:58+00:00 2025-11-21T19:30:01+00:00
rhsa-2025:1910 Red Hat Security Advisory: OpenShift Container Platform 4.16.37 security update 2025-03-05T04:22:53+00:00 2025-11-21T19:29:53+00:00
rhsa-2025:1908 Red Hat Security Advisory: OpenShift Container Platform 4.18.2 packages and security update 2025-03-04T17:29:22+00:00 2025-11-21T19:29:51+00:00
rhsa-2025:18715 Red Hat Security Advisory: yelp security update from RHEL 2025-10-21T04:48:16+00:00 2025-11-21T19:29:36+00:00
ID Description Published Updated
msrc_cve-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21540 Windows Cryptographic Information Disclosure Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21539 Windows Authentication Remote Code Execution Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21536 Event Tracing for Windows Information Disclosure Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21535 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21532 Windows GDI Elevation of Privilege Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21527 Windows iSCSI Service Denial of Service Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2023-21525 Remote Procedure Call Runtime Denial of Service Vulnerability 2023-01-10T08:00:00.000Z 2023-01-10T08:00:00.000Z
msrc_cve-2022-39377 sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow 2022-11-02T00:00:00.000Z 2023-01-06T00:00:00.000Z
msrc_cve-2022-29581 Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions. 2022-05-02T00:00:00.000Z 2023-01-06T00:00:00.000Z
msrc_cve-2022-1016 A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions as it can lead to a kernel information leak problem caused by a local unprivileged attacker. 2022-08-02T00:00:00.000Z 2023-01-06T00:00:00.000Z
msrc_cve-2022-47943 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE when there is a large length in the zero DataOffset case. 2022-12-02T00:00:00.000Z 2023-01-05T00:00:00.000Z
msrc_cve-2022-4662 A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system. 2022-12-02T00:00:00.000Z 2023-01-05T00:00:00.000Z
msrc_cve-2022-47629 Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. 2022-12-02T00:00:00.000Z 2023-01-04T00:00:00.000Z
msrc_cve-2022-47942 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command. 2022-12-02T00:00:00.000Z 2022-12-31T00:00:00.000Z
msrc_cve-2022-47941 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions aka a memory leak. 2022-12-02T00:00:00.000Z 2022-12-31T00:00:00.000Z
msrc_cve-2022-47939 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT. 2022-12-02T00:00:00.000Z 2022-12-31T00:00:00.000Z
msrc_cve-2022-47938 An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. 2022-12-02T00:00:00.000Z 2022-12-31T00:00:00.000Z
msrc_cve-2022-47521 An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames. 2022-12-02T00:00:00.000Z 2022-12-23T00:00:00.000Z
msrc_cve-2022-47520 An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless driver can trigger an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. 2022-12-02T00:00:00.000Z 2022-12-23T00:00:00.000Z
msrc_cve-2022-47519 An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger an out-of-bounds write when parsing the channel list attribute from Wi-Fi management frames. 2022-12-02T00:00:00.000Z 2022-12-23T00:00:00.000Z
msrc_cve-2022-47518 An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when copying the list of operating channels from Wi-Fi management frames. 2022-12-02T00:00:00.000Z 2022-12-23T00:00:00.000Z
msrc_cve-2022-41120 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability 2022-11-08T08:00:00.000Z 2022-12-22T08:00:00.000Z
msrc_cve-2022-41115 Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-21T08:00:00.000Z
msrc_cve-2022-23526 Helm contains Denial of service through schema file 2022-12-02T00:00:00.000Z 2022-12-21T00:00:00.000Z
msrc_cve-2022-23525 Helm vulnerable to Denial of service via NULL Pointer Dereference 2022-12-02T00:00:00.000Z 2022-12-21T00:00:00.000Z
msrc_cve-2022-23524 Helm vulnerable to Denial of service through string value parsing 2022-12-02T00:00:00.000Z 2022-12-21T00:00:00.000Z
msrc_cve-2022-3115 An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value of kzalloc() and will cause the null pointer dereference. 2022-12-02T00:00:00.000Z 2022-12-17T00:00:00.000Z
msrc_cve-2022-3113 An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference. 2022-12-02T00:00:00.000Z 2022-12-17T00:00:00.000Z
msrc_cve-2022-3112 An issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers/staging/media/meson/vdec/vdec_helpers.c lacks check of the return value of kzalloc() and will cause the null pointer dereference. 2022-12-02T00:00:00.000Z 2022-12-17T00:00:00.000Z
ID Description Updated
var-201505-0197 The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyC… 2025-04-13T23:35:08.082000Z
var-201505-0363 AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharact… 2025-04-13T23:35:07.971000Z
var-201507-0044 The BFD daemon in Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35… 2025-04-13T23:35:07.732000Z
var-201507-0231 The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.… 2025-04-13T23:35:07.664000Z
var-201507-0525 The CLI parser in Cisco NX-OS 4.1(2)E1(1), 6.2(11b), 6.2(12), 7.2(0)ZZ(99.1), 7.2(0)ZZ(99… 2025-04-13T23:35:07.484000Z
var-201507-0546 The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) … 2025-04-13T23:35:07.451000Z
var-201508-0483 The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expres… 2025-04-13T23:35:07.238000Z
var-201509-0277 The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 befo… 2025-04-13T23:35:06.997000Z
var-201510-0016 Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote… 2025-04-13T23:35:06.815000Z
var-201510-0413 Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D… 2025-04-13T23:35:06.662000Z
var-201510-0581 Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D… 2025-04-13T23:35:06.168000Z
var-201511-0266 Race condition in the administration-panel web service in IBM System Networking Switch Ce… 2025-04-13T23:35:06.014000Z
var-201512-0398 The WebApplications Identity Management subsystem in Cisco Unified Communications Manager… 2025-04-13T23:35:05.940000Z
var-201512-0419 The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8… 2025-04-13T23:35:05.905000Z
var-201601-0071 HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intend… 2025-04-13T23:35:05.770000Z
var-201601-0491 Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not p… 2025-04-13T23:35:05.618000Z
var-201601-0533 Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3… 2025-04-13T23:35:05.583000Z
var-201602-0063 Cisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a… 2025-04-13T23:35:05.488000Z
var-201602-0294 Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows re… 2025-04-13T23:35:05.406000Z
var-201603-0287 Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to re… 2025-04-13T23:35:05.273000Z
var-201604-0007 Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (… 2025-04-13T23:35:05.195000Z
var-201604-0049 Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS… 2025-04-13T23:35:05.164000Z
var-201605-0410 The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) be… 2025-04-13T23:35:04.477000Z
var-201607-0311 NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 a… 2025-04-13T23:35:04.109000Z
var-201607-0418 Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.10602) mishandles LDAP authen… 2025-04-13T23:35:04.024000Z
var-201607-0439 Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow r… 2025-04-13T23:35:03.988000Z
var-201607-0460 Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, w… 2025-04-13T23:35:03.950000Z
var-201607-0461 Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration infor… 2025-04-13T23:35:03.911000Z
var-201607-0544 The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and e… 2025-04-13T23:35:03.879000Z
var-201608-0203 The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller… 2025-04-13T23:35:03.774000Z
ID Description Updated
ID Description Published Updated
suse-su-2022:1123-1 Security update for glibc 2022-04-06T11:05:42Z 2022-04-06T11:05:42Z
suse-su-2022:14937-1 Security update for openvpn-openssl1 2022-04-06T07:27:38Z 2022-04-06T07:27:38Z
suse-ru-2022:1114-1 Security update for MozillaFirefox 2022-04-06T07:05:37Z 2022-04-06T07:05:37Z
suse-su-2022:1113-1 Security update for mozilla-nss 2022-04-05T14:38:45Z 2022-04-05T14:38:45Z
suse-ru-2022:14935-1 Recommended update for MozillaFirefox 2022-04-05T14:37:25Z 2022-04-05T14:37:25Z
suse-su-2022:14936-1 Security update for mozilla-nss 2022-04-05T14:36:48Z 2022-04-05T14:36:48Z
suse-su-2022:1108-1 Security update for util-linux 2022-04-04T15:49:58Z 2022-04-04T15:49:58Z
suse-su-2022:1105-1 Security update for util-linux 2022-04-04T15:48:58Z 2022-04-04T15:48:58Z
suse-su-2022:1103-1 Security update for util-linux 2022-04-04T15:48:00Z 2022-04-04T15:48:00Z
suse-su-2022:1102-1 Security update for 389-ds 2022-04-04T15:01:01Z 2022-04-04T15:01:01Z
suse-su-2022:1100-1 Security update for 389-ds 2022-04-04T11:00:18Z 2022-04-04T11:00:18Z
suse-su-2022:1094-1 Security update for python36 2022-04-04T08:31:05Z 2022-04-04T08:31:05Z
suse-su-2022:1093-1 Security update for libreoffice 2022-04-04T08:30:39Z 2022-04-04T08:30:39Z
suse-su-2022:1091-1 Security update for python 2022-04-01T14:59:23Z 2022-04-01T14:59:23Z
suse-su-2022:1073-1 Security update for yaml-cpp 2022-04-01T09:45:33Z 2022-04-01T09:45:33Z
suse-su-2022:1072-1 Security update for yaml-cpp 2022-04-01T09:44:34Z 2022-04-01T09:44:34Z
suse-su-2022:1062-1 Security update for zlib 2022-04-01T09:02:51Z 2022-04-01T09:02:51Z
suse-su-2022:14929-1 Security update for zlib 2022-04-01T08:36:05Z 2022-04-01T08:36:05Z
suse-su-2022:14934-1 Security update for expat 2022-03-31T11:39:19Z 2022-03-31T11:39:19Z
suse-su-2022:1065-1 Security update for kernel-firmware 2022-03-31T10:06:28Z 2022-03-31T10:06:28Z
suse-su-2022:1061-1 Security update for zlib 2022-03-30T16:29:02Z 2022-03-30T16:29:02Z
suse-su-2022:1058-1 Security update for salt 2022-03-30T16:01:16Z 2022-03-30T16:01:16Z
suse-su-2022:1051-1 Security update for salt 2022-03-30T15:53:25Z 2022-03-30T15:53:25Z
suse-su-2022:1057-1 Security update for salt 2022-03-30T15:37:55Z 2022-03-30T15:37:55Z
suse-su-2022:1060-1 Security update for salt 2022-03-30T15:33:12Z 2022-03-30T15:33:12Z
suse-su-2022:1059-1 Security update for salt 2022-03-30T15:33:12Z 2022-03-30T15:33:12Z
suse-su-2022:1050-1 Security update for SUSE Manager 4.2.5.1 Release Notes 2022-03-30T14:30:14Z 2022-03-30T14:30:14Z
suse-su-2022:1049-1 Security update for SUSE Manager 4.1.14.1 Release Notes 2022-03-30T14:30:03Z 2022-03-30T14:30:03Z
suse-su-2022:1044-1 Security update for python3 2022-03-30T13:26:01Z 2022-03-30T13:26:01Z
suse-su-2022:1043-1 Security update for zlib 2022-03-30T13:25:34Z 2022-03-30T13:25:34Z
ID Description Published Updated
cnvd-2025-05213 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05213) 2025-03-14 2025-03-18
cnvd-2025-05212 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05212) 2025-03-14 2025-03-18
cnvd-2025-05211 Adobe Substance 3D Designer堆缓冲区溢出漏洞(CNVD-2025-05211) 2025-03-14 2025-03-18
cnvd-2025-05210 Adobe Substance 3D Designer堆缓冲区溢出漏洞(CNVD-2025-05210) 2025-03-14 2025-03-18
cnvd-2025-05209 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05209) 2025-03-14 2025-03-18
cnvd-2025-05208 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05208) 2025-03-14 2025-03-18
cnvd-2025-05207 Adobe Substance 3D Designer堆缓冲区溢出漏洞(CNVD-2025-05207) 2025-03-14 2025-03-18
cnvd-2025-05400 Apache OFBiz存在未明漏洞 2025-03-12 2025-03-17
cnvd-2025-05317 IBM Cloud Pak for Data跨站脚本漏洞 2025-03-07 2025-03-17
cnvd-2025-05264 Tenda A18缓冲区溢出漏洞 2025-02-17 2025-03-17
cnvd-2025-05263 Tenda TX3路由器缓冲区溢出漏洞 2025-03-07 2025-03-17
cnvd-2025-05262 IBM EntireX存在未明漏洞 2025-03-13 2025-03-17
cnvd-2025-05261 IBM Cognos Analytics路径遍历漏洞 2025-03-13 2025-03-17
cnvd-2025-05260 Tenda TX3 setNetControllist函数缓冲区溢出漏洞 2025-03-13 2025-03-17
cnvd-2025-05259 Tenda TX3 openschedwifi函数缓冲区溢出漏洞 2025-03-13 2025-03-17
cnvd-2025-05254 MonetDB Server SQL注入漏洞 2025-03-14 2025-03-17
cnvd-2025-05253 MonetDB Server SQL注入漏洞 2025-03-14 2025-03-17
cnvd-2025-05252 MRCMS产品跨站脚本漏洞 2025-03-14 2025-03-17
cnvd-2025-05251 Sante PACS Server EVP_DecryptUpdate缓冲区溢出漏洞 2025-03-17 2025-03-17
cnvd-2025-05236 Mozilla Thunderbird代码问题漏洞 2025-03-12 2025-03-17
cnvd-2025-05206 Adobe Substance 3D Designer内存错误引用漏洞(CNVD-2025-05206) 2025-03-14 2025-03-17
cnvd-2025-05205 Adobe Substance 3D Designer越界读取漏洞(CNVD-2025-05205) 2025-03-14 2025-03-17
cnvd-2025-05204 Adobe Substance 3D Designer堆缓冲区溢出漏洞(CNVD-2025-05204) 2025-03-14 2025-03-17
cnvd-2025-05203 Adobe Substance 3D Designer空指针解引用漏洞 2025-03-14 2025-03-17
cnvd-2025-05202 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05202) 2025-03-14 2025-03-17
cnvd-2025-05201 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05201) 2025-03-14 2025-03-17
cnvd-2025-05200 Adobe Substance 3D Designer越界写入漏洞(CNVD-2025-05200) 2025-03-14 2025-03-17
cnvd-2025-05199 Adobe Substance 3D Designer堆缓冲区溢出漏洞(CNVD-2025-05199) 2025-03-14 2025-03-17
cnvd-2025-05169 Apache Camel任意命令执⾏漏洞 2025-03-13 2025-03-17
cnvd-2025-05168 Apache Camel任意命令执⾏漏洞(CNVD-2025-05168) 2025-03-13 2025-03-17
ID Description Published Updated
certa-2013-avi-482 Multiples vulnérabilités dans Puppet 2013-08-19T00:00:00.000000 2013-08-19T00:00:00.000000
certa-2013-avi-481 Multiples vulnérabilités dans le système SCADA Tridium Niagara 2013-08-19T00:00:00.000000 2013-08-19T00:00:00.000000
certa-2013-avi-480 Vulnérabilité dans le système SCADA Advantech WebAccess 2013-08-19T00:00:00.000000 2013-08-19T00:00:00.000000
certa-2013-avi-479 Vulnérabilité dans le système SCADA Kepware Technologies KEPServerEX 2013-08-19T00:00:00.000000 2013-08-19T00:00:00.000000
certa-2013-avi-478 Multiples vulnérabilités dans PHP 2013-08-16T00:00:00.000000 2013-08-16T00:00:00.000000
certa-2013-avi-477 Vulnérabilité dans Microsoft Active Directory Federation Services 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-476 Vulnérabilité dans l'implémentation ICMPv6 de Microsoft Windows 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-475 Vulnérabilité dans le pilote NAT de Microsoft Windows 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-474 Multiples vulnérabilités dans le noyau Microsoft Windows 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-473 Vulnérabilité dans Microsoft Remote Procedure Call 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-472 Multiples vulnérabilités dans Microsoft Exchange Server 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-471 Vulnérabilité dans le processeur de scripts Unicode Microsoft 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-470 Multiples vulnérabilités dans Microsoft Internet Explorer 2013-08-14T00:00:00.000000 2013-08-14T00:00:00.000000
certa-2013-avi-469 Vulnérabilité dans Samba 2013-08-12T00:00:00.000000 2013-08-12T00:00:00.000000
certa-2013-avi-468 Multiples vulnérabilités dans Symfony 2013-08-12T00:00:00.000000 2013-08-12T00:00:00.000000
certa-2013-avi-467 Multiples vulnérabilités dans PuTTY 2013-08-09T00:00:00.000000 2013-08-09T00:00:00.000000
certa-2013-avi-466 Multiples vulnérabilités dans Adobe Reader et Acrobat 2013-08-09T00:00:00.000000 2013-08-09T00:00:00.000000
certa-2013-avi-465 Vulnérabilité dans Cisco TelePresence 2013-08-08T00:00:00.000000 2013-08-08T00:00:00.000000
certa-2013-avi-464 Vulnérabilité dans les systèmes SCADA Schneider 2013-08-07T00:00:00.000000 2013-08-07T00:00:00.000000
certa-2013-avi-463 Multiples vulnérabilités dans des produits Mozilla 2013-08-07T00:00:00.000000 2013-08-07T00:00:00.000000
certa-2013-avi-462 Vulnérabilité dans le système SCADA MOXA OnCell Gateway 2013-08-07T00:00:00.000000 2013-08-07T00:00:00.000000
certa-2013-avi-461 Multiples vulnérabilités dans Symantec Backup Exec 2013-08-05T00:00:00.000000 2013-08-05T00:00:00.000000
certa-2013-avi-460 Vulnérabilité dans Joomla! 2013-08-05T00:00:00.000000 2013-08-05T00:00:00.000000
certa-2013-avi-459 Vulnérabilité dans de multiples produits HP LaserJet 2013-08-02T00:00:00.000000 2013-08-02T00:00:00.000000
certa-2013-avi-458 Vulnérabilité dans Cisco OSPF 2013-08-02T00:00:00.000000 2013-08-02T00:00:00.000000
certa-2013-avi-457 Multiples vulnérabilités dans le système SCADA Siemens WinCC 2013-08-01T00:00:00.000000 2013-08-01T00:00:00.000000
certa-2013-avi-456 Multiples vulnérabilités dans le système SCADA Siemens Scalance W-7xx 2013-08-01T00:00:00.000000 2013-08-01T00:00:00.000000
certa-2013-avi-455 Multiples vulnérabilités dans TYPO3 2013-08-01T00:00:00.000000 2013-08-01T00:00:00.000000
certa-2013-avi-454 Multiples vulnérabilités dans VMware ESX et ESXi 2013-08-01T00:00:00.000000 2013-08-01T00:00:00.000000
certa-2013-avi-453 Vulnérabilité dans Cisco WAAS 2013-08-01T00:00:00.000000 2013-08-01T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated