Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-0612
7.5 (3.1)
CVE-2026-0612 TheLibrarian
TheLibrarian.io
2026-01-16T12:44:59.806Z 2026-01-16T21:42:52.062Z
CVE-2026-0613
7.5 (3.1)
CVE-2026-0613 TheLibrarian
TheLibrarian.io
2026-01-16T12:46:02.733Z 2026-01-16T21:41:53.497Z
CVE-2026-0616
7.5 (3.1)
CVE-2026-0616 TheLibrarian
TheLibrarian.io
2026-01-16T12:46:58.266Z 2026-01-16T21:40:36.626Z
CVE-2026-23634
0 (3.1)
Pepr Overly Permissive RBAC ClusterRole in Admin Mode defenseunicorns
pepr
2026-01-16T19:14:46.483Z 2026-01-16T21:38:59.905Z
CVE-2026-23645
5.3 (4.0)
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS)… siyuan-note
siyuan
2026-01-16T19:20:06.744Z 2026-01-16T21:37:58.336Z
CVE-2026-23723
7.2 (3.1)
WeGIA has a Critical SQL Injection in Atendido_ocorren… LabRedesCefetRJ
WeGIA
2026-01-16T19:27:26.790Z 2026-01-16T21:36:57.181Z
CVE-2026-23722
9.1 (3.1)
WeGIA has a Reflected Cross-Site Scripting (XSS) vulne… LabRedesCefetRJ
WeGIA
2026-01-16T19:29:53.736Z 2026-01-16T21:35:52.457Z
CVE-2026-23724
4.3 (3.1)
WeGIA Stored Cross-Site Scripting (XSS) – atendido_ida… LabRedesCefetRJ
WeGIA
2026-01-16T19:37:06.349Z 2026-01-16T21:33:07.130Z
CVE-2021-47827
4.6 (4.0)
7.5 (3.1)
WebSSH for iOS 14.16.10 - 'mashREPL' Denial of Service WebSSH
WebSSH for iOS
2026-01-16T19:09:31.864Z 2026-01-16T21:32:47.489Z
CVE-2021-47826
8.5 (4.0)
7.8 (3.1)
Acer Backup Manager Module 3.0.0.99 - 'IScheduleSvc.ex… Acer
Acer Backup Manager Module
2026-01-16T19:09:31.313Z 2026-01-16T21:30:42.285Z
CVE-2021-47825
8.5 (4.0)
7.8 (3.1)
Acer Updater Service 1.2.3500.0 - 'UpdaterService.exe'… Acer
Acer Updater Service
2026-01-16T19:09:30.772Z 2026-01-16T21:28:43.399Z
CVE-2021-47824
4.6 (4.0)
7.5 (3.1)
iDailyDiary 4.30 - Denial of Service (PoC) Splinterware
iDailyDiary
2026-01-16T19:09:30.285Z 2026-01-16T21:26:31.093Z
CVE-2021-47828
8.5 (4.0)
7.8 (3.1)
BOOTP Turbo 2.0.0.1253 - 'bootpt.exe' Unquoted Service Path Weird-Solutions
BOOTP Turbo
2026-01-16T19:09:32.424Z 2026-01-16T21:24:15.396Z
CVE-2026-23643
5.4 (3.1)
CakePHP PaginatorHelper::limitControl() vulnerable to … cakephp
cakephp
2026-01-16T20:38:45.170Z 2026-01-16T21:21:56.372Z
CVE-2026-23744
9.8 (3.1)
REC in MCPJam inspector due to HTTP Endpoint exposes MCPJam
inspector
2026-01-16T20:10:37.458Z 2026-01-16T21:15:53.738Z
CVE-2026-23725
5.3 (4.0)
WeGIA Stored Cross-Site Scripting (XSS) – nome Paramet… LabRedesCefetRJ
WeGIA
2026-01-16T19:38:27.000Z 2026-01-16T21:13:25.373Z
CVE-2020-36930
8.5 (4.0)
7.8 (3.1)
SysGauge 7.9.18 - ' SysGauge Server' Unquoted Service Path Sysgauge
SysGauge
2026-01-15T23:25:35.412Z 2026-01-16T21:12:53.913Z
CVE-2021-47783
5.3 (4.0)
5.4 (3.1)
Phpwcms 1.9.30 - Arbitrary File Upload Phpwcms
Phpwcms
2026-01-15T23:25:38.320Z 2026-01-16T21:12:48.295Z
CVE-2021-47785
7 (4.0)
9.8 (3.1)
Ether_MP3_CD_Burner 1.3.8 - Buffer Overflow (SEH) Mp3-Avi-Mpeg-Wmv-Rm-To-Audio-Cd-Burner
Ether_MP3_CD_Burner
2026-01-15T23:25:38.860Z 2026-01-16T21:12:42.230Z
CVE-2021-47786
6.8 (4.0)
7.5 (3.1)
Redragon Gaming Mouse - 'REDRAGON_MOUSE.sys' Denial of… Redragon
Redragon Gaming Mouse
2026-01-15T23:25:39.342Z 2026-01-16T21:12:36.886Z
CVE-2021-47787
8.5 (4.0)
7.8 (3.1)
TotalAV 5.15.69 - Unquoted Service Path Totalav
TotalAV
2026-01-15T23:25:39.809Z 2026-01-16T21:12:31.193Z
CVE-2021-47788
8.7 (4.0)
8.8 (3.1)
WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Aut… Websitebaker
WebsiteBaker
2026-01-15T23:25:40.313Z 2026-01-16T21:12:25.737Z
CVE-2021-47789
6.8 (4.0)
7.5 (3.1)
Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of… Yenkee
Yenkee Hornet Gaming Mouse
2026-01-15T23:25:40.816Z 2026-01-16T21:12:19.982Z
CVE-2021-47790
8.5 (4.0)
7.8 (3.1)
Active WebCam 11.5 - Unquoted Service Path Pysoft
Active WebCam
2026-01-15T23:25:41.368Z 2026-01-16T21:12:13.928Z
CVE-2021-47791
4.6 (4.0)
7.5 (3.1)
SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service Smartftp
SmartFTP Client
2026-01-15T23:25:41.916Z 2026-01-16T21:12:08.424Z
CVE-2021-47792
8.5 (4.0)
7.8 (3.1)
Remote Mouse 4.002 - Unquoted Service Path Remotemouse
Remote Mouse
2026-01-15T23:25:42.486Z 2026-01-16T21:11:59.831Z
CVE-2021-47793
4.6 (4.0)
7.5 (3.1)
Telegram Desktop 2.9.2 - Denial of Service (PoC) Telegram
Telegram Desktop
2026-01-15T23:25:43.035Z 2026-01-16T21:11:53.505Z
CVE-2021-47806
8.5 (4.0)
7.8 (3.1)
Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path Dupscout
Dup Scout
2026-01-15T23:25:49.901Z 2026-01-16T21:11:47.952Z
CVE-2021-47807
8.5 (4.0)
7.8 (3.1)
Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path Syncbreeze
Sync Breeze
2026-01-15T23:25:51.416Z 2026-01-16T21:11:39.852Z
CVE-2021-47809
8.5 (4.0)
7.8 (3.1)
Disk Sorter Enterprise 13.6.12 - 'Disk Sorter Enterpri… Disksorter
Disk Sorter Enterprise
2026-01-15T23:25:52.468Z 2026-01-16T21:11:27.965Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-59132
4.3 (3.1)
WordPress Duplicate Content Cure plugin <= 1.0 - Cross… Badi Jones
Duplicate Content Cure
2025-12-09T14:52:18.582Z 2026-01-20T14:28:11.345Z
CVE-2025-59131
7.1 (3.1)
WordPress WP-CalDav2ICS plugin <= 1.3.4 - Cross Site R… Hoernerfranz
WP-CalDav2ICS
2025-12-30T22:55:32.248Z 2026-01-20T14:28:11.341Z
CVE-2025-59130
4.3 (3.1)
WordPress Appointify plugin <= 1.0.8 - Cross Site Requ… Appointify
Appointify
2025-12-31T16:06:06.815Z 2026-01-20T14:28:11.342Z
CVE-2025-59129
7.6 (3.1)
WordPress Appointify plugin <= 1.0.8 - SQL Injection v… Appointify
Appointify
2025-12-30T16:51:35.844Z 2026-01-20T14:28:11.349Z
CVE-2025-59009
4.3 (3.1)
WordPress Listify theme <= 3.2.5 - Cross Site Request … Astoundify
Listify
2025-12-16T08:12:46.981Z 2026-01-20T14:28:11.343Z
CVE-2025-59007
8.1 (3.1)
WordPress TF Woo Product Grid Addon For Elementor Plug… themesflat
TF Woo Product Grid Addon For Elementor
2025-10-22T14:32:37.108Z 2026-01-20T14:28:11.343Z
CVE-2025-59006
7.1 (3.1)
WordPress Easy Woocommerce Customizer plugin <= 1.0.2 … themebon
Easy Woocommerce Customizer
2025-10-22T14:32:36.907Z 2026-01-20T14:28:11.345Z
CVE-2025-59004
7.1 (3.1)
WordPress WC Return products plugin <= 1.5 - Reflected… pco_58
WC Return products
2025-10-22T14:32:36.724Z 2026-01-20T14:28:11.343Z
CVE-2025-59003
5.8 (3.1)
WordPress Black Rider theme <= 1.2.3 - Sensitive Data … Inkthemescom
Black Rider
2025-12-31T13:46:13.364Z 2026-01-20T14:28:11.346Z
CVE-2025-59001
4.3 (3.1)
WordPress Salient Core plugin <= 3.0.8 - Broken Access… ThemeNectar
Salient Core
2025-12-16T08:12:46.774Z 2026-01-20T14:28:11.347Z
CVE-2025-58999
4.3 (3.1)
WordPress WP Attractive Donations System - Easy Stripe… loopus
WP Attractive Donations System - Easy Stripe & Paypal donations
2025-12-16T08:12:46.564Z 2026-01-20T14:28:11.344Z
CVE-2025-58998
9.8 (3.1)
WordPress s2Member Plugin <= 250701 - PHP Object Injec… Cristián Lávaque
s2Member
2025-11-06T15:54:37.699Z 2026-01-20T14:28:11.344Z
CVE-2025-58996
9.1 (3.1)
WordPress Advanced Settings Plugin <= 3.1.1 - Arbitrar… Helmut Wandl
Advanced Settings
2025-11-06T15:54:36.343Z 2026-01-20T14:28:11.345Z
CVE-2025-58995
8.1 (3.1)
WordPress Leblix Theme <= 2.4 - Local File Inclusion V… Creatives_Planet
Leblix
2025-11-06T15:54:33.654Z 2026-01-20T14:28:11.026Z
CVE-2025-58994
8.1 (3.1)
WordPress Greenify theme <= 2.2 - Local File Inclusion… designervily
Greenify
2025-11-06T15:54:32.378Z 2026-01-20T14:28:11.346Z
CVE-2025-58986
6.5 (3.1)
WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Bro… ganddser
Jock On Air Now (JOAN)
2025-11-06T15:54:30.961Z 2026-01-20T14:28:11.341Z
CVE-2025-58972
7.2 (3.1)
WordPress Barcode Scanner with Inventory & Order Manag… Dmitry V. (CEO of "UKR Solution")
Barcode Scanner with Inventory & Order Manager
2025-11-06T15:54:30.300Z 2026-01-20T14:28:11.032Z
CVE-2025-58971
7.1 (3.1)
WordPress Doctreat theme <= 1.6.7 - Cross Site Scripti… AmentoTech
Doctreat
2025-10-22T14:32:36.518Z 2026-01-20T14:28:11.358Z
CVE-2025-58970
6.5 (3.1)
WordPress Doctreat theme <= 1.6.7 - Content Injection … AmentoTech
Doctreat
2025-10-22T14:32:36.243Z 2026-01-20T14:28:10.994Z
CVE-2025-58966
7.1 (3.1)
WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scr… Basix
NEX-Forms LITE
2025-10-22T14:32:35.821Z 2026-01-20T14:28:10.996Z
CVE-2025-58964
7.1 (3.1)
WordPress Enzy theme < 1.6.4 - Cross Site Scripting (X… skygroup
Enzy
2025-11-06T15:54:29.627Z 2026-01-20T14:28:11.081Z
CVE-2025-58963
9.8 (3.1)
WordPress Medcity theme < 1.1.9 - Arbitrary File Uploa… 7oroof
Medcity
2025-10-22T14:32:35.581Z 2026-01-20T14:28:11.047Z
CVE-2025-58961
7.1 (3.1)
WordPress CF7 Auto Responder Addon plugin <= 2.4 - Cro… kamleshyadav
CF7 Auto Responder Addon
2025-10-22T14:32:35.382Z 2026-01-20T14:28:11.176Z
CVE-2025-58959
7.6 (3.1)
WordPress Taskbot plugin <= 6.4 - Arbitrary File Delet… AmentoTech
Taskbot
2025-10-22T14:32:35.198Z 2026-01-20T14:28:11.013Z
CVE-2025-58955
8.1 (3.1)
WordPress Karzo theme < 2.6 - Local File Inclusion vul… designervily
Karzo
2025-10-22T14:32:34.802Z 2026-01-20T14:28:11.075Z
CVE-2025-58951
9.3 (3.1)
WordPress Advance Seat Reservation Management for WooC… smartcms
Advance Seat Reservation Management for WooCommerce
2025-12-18T07:21:59.734Z 2026-01-20T14:28:10.822Z
CVE-2025-58950
8.1 (3.1)
WordPress Lione theme <= 1.16 - Local File Inclusion v… axiomthemes
Lione
2025-12-18T07:21:59.566Z 2026-01-20T14:28:10.857Z
CVE-2025-58949
8.1 (3.1)
WordPress Spock theme <= 1.17 - Local File Inclusion v… axiomthemes
Spock
2025-12-18T07:21:59.396Z 2026-01-20T14:28:11.191Z
CVE-2025-58948
8.1 (3.1)
WordPress Aromatica theme <= 1.8 - Local File Inclusio… axiomthemes
Aromatica
2025-12-18T07:21:59.216Z 2026-01-20T14:28:10.790Z
CVE-2025-58947
8.2 (3.1)
WordPress Athos theme <= 1.9 - Local File Inclusion vu… axiomthemes
Athos
2025-12-18T07:21:59.042Z 2026-01-21T15:41:30.700Z
ID Description Published Updated
fkie_cve-2025-59132 Cross-Site Request Forgery (CSRF) vulnerability in Badi Jones Duplicate Content Cure duplicate-cont… 2025-12-09T16:17:59.350 2026-01-20T15:17:18.073
fkie_cve-2025-59131 Cross-Site Request Forgery (CSRF) vulnerability in Hoernerfranz WP-CalDav2ICS allows Stored XSS.Thi… 2025-12-30T23:15:50.770 2026-01-20T15:17:17.973
fkie_cve-2025-59130 Cross-Site Request Forgery (CSRF) vulnerability in Appointify allows Cross Site Request Forgery.Thi… 2025-12-31T16:15:43.440 2026-01-20T15:17:17.873
fkie_cve-2025-59129 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-30T17:15:42.397 2026-01-20T15:17:17.770
fkie_cve-2025-59009 Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Listify listify allows Cross Site Req… 2025-12-16T09:15:52.977 2026-01-20T15:17:17.637
fkie_cve-2025-59007 Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For Element… 2025-10-22T15:15:53.730 2026-01-20T15:17:17.503
fkie_cve-2025-59006 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:53.587 2026-01-20T15:17:17.370
fkie_cve-2025-59004 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:53.460 2026-01-20T15:17:17.237
fkie_cve-2025-59003 Insertion of Sensitive Information Into Sent Data vulnerability in Inkthemescom Black Rider allows … 2025-12-31T14:15:51.783 2026-01-20T15:17:17.137
fkie_cve-2025-59001 Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Inco… 2025-12-16T09:15:52.850 2026-01-20T15:17:16.997
fkie_cve-2025-58999 Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Str… 2025-12-16T09:15:52.700 2026-01-20T15:17:16.860
fkie_cve-2025-58998 Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object… 2025-11-06T16:16:01.290 2026-01-20T15:17:16.733
fkie_cve-2025-58996 Unrestricted Upload of File with Dangerous Type vulnerability in Helmut Wandl Advanced Settings adv… 2025-11-06T16:16:01.140 2026-01-20T15:17:16.603
fkie_cve-2025-58995 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:16:00.987 2026-01-20T15:17:16.477
fkie_cve-2025-58994 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:16:00.833 2026-01-20T15:17:16.347
fkie_cve-2025-58986 Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incor… 2025-11-06T16:16:00.473 2026-01-20T15:17:16.213
fkie_cve-2025-58972 Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with… 2025-11-06T16:16:00.320 2026-01-20T15:17:16.083
fkie_cve-2025-58971 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:53.333 2026-01-20T15:17:15.953
fkie_cve-2025-58970 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Amen… 2025-10-22T15:15:53.207 2026-01-20T15:17:15.827
fkie_cve-2025-58966 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:52.960 2026-01-20T15:17:15.563
fkie_cve-2025-58964 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:16:00.157 2026-01-20T15:17:15.413
fkie_cve-2025-58963 Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Uplo… 2025-10-22T15:15:52.830 2026-01-20T15:17:15.273
fkie_cve-2025-58961 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:52.690 2026-01-20T15:17:15.140
fkie_cve-2025-58959 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ame… 2025-10-22T15:15:52.543 2026-01-20T15:17:15.007
fkie_cve-2025-58955 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-10-22T15:15:52.287 2026-01-20T15:17:14.750
fkie_cve-2025-58951 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-18T08:16:03.030 2026-01-20T15:17:14.620
fkie_cve-2025-58950 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:02.890 2026-01-20T15:17:14.487
fkie_cve-2025-58949 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:02.757 2026-01-20T15:17:14.350
fkie_cve-2025-58948 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:02.620 2026-01-20T15:17:14.207
fkie_cve-2025-58947 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:16:02.487 2026-01-20T15:17:14.060
ID Severity Description Published Updated
ghsa-h2c5-5pm8-g4x6
7.5 (3.1)
An issue discovered in Dyson App v6.1.23041-23595 allows unauthenticated attackers to control other… 2025-10-29T18:30:34Z 2026-01-08T21:30:28Z
ghsa-7cw2-wjj4-46p6
6.5 (3.1)
7.1 (4.0)
The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can le… 2025-12-20T03:31:35Z 2026-01-08T21:30:28Z
ghsa-722p-jvv6-w5fv
7.8 (3.1)
In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split o… 2025-08-19T18:31:32Z 2026-01-08T21:30:28Z
ghsa-64vh-gcrh-6whf
5.9 (3.1)
SSL/TLS Renegotiation functionality potentially leading to DoS attack vulnerability. 2024-05-18T00:30:42Z 2026-01-08T21:30:28Z
ghsa-5r97-vg42-wrjj
6.5 (3.1)
7.1 (4.0)
A buffer overflow vulnerability exists in the ONVIF XML parser of Tapo C200 V3. An unauthenticated … 2025-12-20T03:31:35Z 2026-01-08T21:30:28Z
ghsa-4rg2-56r3-4j7p
7.8 (3.1)
In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-fr… 2025-08-19T18:31:32Z 2026-01-08T21:30:28Z
ghsa-3qv5-2654-5g25
5.5 (3.1)
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer derefe… 2025-08-19T18:31:32Z 2026-01-08T21:30:28Z
ghsa-38mv-4mrh-vpwc
8.1 (3.1)
8.7 (4.0)
The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An u… 2025-12-20T03:31:35Z 2026-01-08T21:30:28Z
ghsa-8rr6-29c9-2mpq
4.3 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Extend Themes Calliope.This issue affects Callio… 2024-03-26T12:31:27Z 2026-01-08T21:30:27Z
ghsa-5486-77xm-7wvf
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T09:30:40Z 2026-01-08T21:30:27Z
ghsa-4f83-rvmm-hgx9
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2024-03-27T15:30:37Z 2026-01-08T21:30:27Z
ghsa-mhpg-hpj5-73r2
3.7 (3.1)
1.7 (4.0)
Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels 2025-11-18T18:32:53Z 2026-01-08T21:24:14Z
ghsa-mrw7-hf4f-83pf
8.8 (3.1)
vLLM deserialization vulnerability leading to DoS and potential RCE 2025-11-20T20:59:34Z 2026-01-08T21:20:58Z
ghsa-rvjx-cfjh-5mc9
2.0 (4.0)
loggingredactor converts non-string types to string types in logs 2026-01-07T19:28:46Z 2026-01-08T21:19:18Z
ghsa-36hm-qxxp-pg3m
7.2 (4.0)
Preact has JSON VNode Injection issue 2026-01-07T19:28:15Z 2026-01-08T21:19:13Z
ghsa-xwh2-742g-w3wp
6.5 (3.1)
Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources 2026-01-07T19:22:14Z 2026-01-08T21:19:09Z
ghsa-3573-4c68-g8cc
4.3 (3.1)
Directus has open redirect in SAML 2026-01-06T19:22:38Z 2026-01-08T21:19:04Z
ghsa-9c48-w39g-hm26
2.7 (4.0)
rsa crate has potential panic on a prime being equal to 1 2026-01-06T18:14:08Z 2026-01-08T21:18:57Z
ghsa-f2mf-q878-gh58
5.3 (3.1)
Parsl Monitoring Visualization Vulnerable to SQL Injection 2026-01-06T18:04:21Z 2026-01-08T21:18:52Z
ghsa-6g8q-hp2j-gvwv
9.8 (3.1)
Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer 2026-01-05T20:25:53Z 2026-01-08T21:18:48Z
ghsa-gv94-wp4h-vv8p
5.3 (3.1)
Keycloak has Incorrect Behavior Order: Authorization Before Parsing and Canonicalization 2026-01-08T06:31:32Z 2026-01-08T21:14:12Z
ghsa-96qw-h329-v5rg
7.5 (3.1)
Shakapacker has environment variable leak via EnvironmentPlugin that exposes secrets to client-side… 2026-01-08T21:13:37Z 2026-01-08T21:13:37Z
ghsa-4jj9-cgqc-x9h5
8.8 (3.1)
NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) 2025-12-12T19:22:04Z 2026-01-08T20:51:32Z
ghsa-jf52-3f2h-h9j5
6.5 (3.1)
n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks 2026-01-07T19:22:54Z 2026-01-08T20:51:27Z
ghsa-hxp3-63hc-5366
7.5 (3.1)
NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read 2025-12-09T14:25:15Z 2026-01-08T20:44:47Z
ghsa-p3jp-7gj7-h6pr
5.3 (3.1)
4.8 (4.0)
records-mover Injection vulnerability 2026-01-08T00:31:14Z 2026-01-08T20:41:13Z
ghsa-xgr5-qc6w-vcg9
5.7 (4.0)
RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting 2026-01-08T20:40:06Z 2026-01-08T20:40:06Z
ghsa-vcwh-pff9-64cc
5.7 (4.0)
RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege Escalation 2026-01-08T20:36:17Z 2026-01-08T20:36:17Z
ghsa-4j78-4xrm-cr2f
5.8 (4.0)
Kirby is missing permission checks in the content changes API 2026-01-08T20:32:05Z 2026-01-08T20:32:05Z
ghsa-mp55-g7pj-rvm2
5.3 (3.1)
NiceGUI has Redis connection leak via tab storage causes service degradation 2026-01-08T20:27:41Z 2026-01-08T20:27:41Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-23977 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:34.679762Z
gsd-2024-22178 A file write vulnerability exists in the OAS Engine Save Security Configuration functiona… 2024-02-22T06:03:33.489520Z
gsd-2024-1728 gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper v… 2024-02-22T06:03:33.391749Z
gsd-2024-1712 The Carousel Slider WordPress plugin before 2.2.7 does not sanitise and escape some of it… 2024-02-22T06:03:33.376689Z
gsd-2024-1730 The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slide… 2024-02-22T06:03:33.375615Z
gsd-2024-1724 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:33.331297Z
gsd-2024-1729 Th password check condition is vulnerable to timing attack to guess the password 2024-02-22T06:03:33.328540Z
gsd-2024-1708 ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, … 2024-02-22T06:03:33.307842Z
gsd-2024-1703 A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problem… 2024-02-22T06:03:33.279675Z
gsd-2024-1719 The Easy PayPal & Stripe Buy Now Button plugin for WordPress is vulnerable to Cross-Site … 2024-02-22T06:03:33.276289Z
gsd-2024-1733 The Word Replacer Pro plugin for WordPress is vulnerable to unauthorized modification of … 2024-02-22T06:03:33.265326Z
gsd-2024-1707 A vulnerability, which was classified as problematic, was found in GARO WALLBOX GLB+ T2EV… 2024-02-22T06:03:33.254275Z
gsd-2024-1700 A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-U… 2024-02-22T06:03:33.249606Z
gsd-2024-1731 The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection i… 2024-02-22T06:03:33.231446Z
gsd-2024-1709 ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using… 2024-02-22T06:03:33.201465Z
gsd-2024-1717 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:33.193100Z
gsd-2024-1710 The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due t… 2024-02-22T06:03:33.165438Z
gsd-2024-1727 To prevent malicious 3rd party websites from making requests to Gradio applications runni… 2024-02-22T06:03:33.159309Z
gsd-2024-1711 The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' … 2024-02-22T06:03:33.149860Z
gsd-2024-1720 The User Registration – Custom Registration Form, Login Form, and User Profile WordPress … 2024-02-22T06:03:33.146384Z
gsd-2024-1706 A vulnerability, which was classified as problematic, has been found in ZKTeco ZKBio Acce… 2024-02-22T06:03:33.138830Z
gsd-2024-1726 A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security… 2024-02-22T06:03:33.128137Z
gsd-2024-1718 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:33.101479Z
gsd-2024-1713 A user who can create objects in a database with plv8 3.2.1 installed is able to cause de… 2024-02-22T06:03:33.068184Z
gsd-2024-1702 A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as… 2024-02-22T06:03:33.057945Z
gsd-2024-1732 The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulne… 2024-02-22T06:03:33.055919Z
gsd-2024-1721 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:33.049138Z
gsd-2024-1716 The format of the source doesn't require a description, click on the link for more details. 2024-02-22T06:03:33.048499Z
gsd-2024-1704 A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical.… 2024-02-22T06:03:33.040884Z
gsd-2024-1701 A vulnerability has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classifi… 2024-02-22T06:03:33.019999Z
ID Description Published Updated
mal-2025-185746 Malicious code in balance-quick-throw-bash-scale (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185745 Malicious code in balance-public-new-object-nu (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185744 Malicious code in balance-dog-throw-balance-daemon (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185743 Malicious code in balance-decompress-authorize-query-thread (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185742 Malicious code in balance-char-byte-final-big (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185741 Malicious code in bad-xml-simple-yaml-reject (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185740 Malicious code in bad-transpile-xml-signal-cache (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185739 Malicious code in bad-stub-key-fast-minify (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185738 Malicious code in bad-route-boolean-compress-float (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185737 Malicious code in bad-old-deserialize-bundle-boolean (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185736 Malicious code in bad-key-short-sudo-resolve (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185735 Malicious code in bad-kappa-spy-fire-error (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185734 Malicious code in bad-info-encrypt-boolean-simple (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185733 Malicious code in bad-hash-shell-interpret-compress (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185732 Malicious code in bad-grep-web-private-cat (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185731 Malicious code in bad-eta-encrypt-error-signal (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185730 Malicious code in bad-cron-easy-daemon-compile (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185729 Malicious code in bad-alert-long-container-mu (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185728 Malicious code in backend-nashira-rate-limiter-chromedriver (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185727 Malicious code in backend-exec-husky-public (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185726 Malicious code in backend-enif-gulp-titan (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185725 Malicious code in backend-crust-cordelia-markdown-pdf (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185724 Malicious code in babel-singularity-got-hadron (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185723 Malicious code in babel-ophiuchus-mira-bellatrix (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185722 Malicious code in babel-isostasy-fork-buffer (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185721 Malicious code in babel-init-changelog-algol (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185720 Malicious code in babel-electron-builder-hexo-nightmare (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185719 Malicious code in babel-dynamo-loop-terraforming (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185718 Malicious code in babel-baryon-magellan-prettier-plugin-markdown (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185717 Malicious code in babel-babel-config-quark (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
ID Description Published Updated
wid-sec-w-2023-0127 Oracle JD Edwards: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0125 Oracle PeopleSoft: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0124 Oracle Retail Applications: Schwachstelle gefährdet Verfügbarkeit 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0123 Oracle Siebel CRM: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0122 Oracle Supply Chain: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0121 Oracle Support Tools: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0120 Oracle Systems: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0119 Oracle Utilities Applications: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0116 D-LINK Access Points DAP-1360 und DAP-2020: Mehrere Schwachstellen 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0109 Dell BIOS: Schwachstelle ermöglicht Codeausführung 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0106 Trellix Secure Web Gateway: Schwachstelle ermöglicht Cross-Site Scripting 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0104 IBM AIX: Schwachstelle ermöglicht Denial of Service 2023-01-17T23:00:00.000+00:00 2023-01-17T23:00:00.000+00:00
wid-sec-w-2023-0100 IBM QRadar SIEM: Schwachstelle ermöglicht Offenlegung von Informationen 2023-01-16T23:00:00.000+00:00 2023-01-16T23:00:00.000+00:00
wid-sec-w-2023-0095 QT: Mehrere Schwachstellen ermöglichen Codeausführung 2023-01-15T23:00:00.000+00:00 2023-01-15T23:00:00.000+00:00
wid-sec-w-2022-1859 Google Chrome/Microsoft Edge: Mehrere Schwachstellen 2022-10-25T22:00:00.000+00:00 2023-01-15T23:00:00.000+00:00
wid-sec-w-2023-0093 Microsoft Edge: Mehrere Schwachstellen 2023-01-12T23:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0091 NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen 2023-01-12T23:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0088 OpenBSD: Schwachstelle ermöglicht Denial of Service 2023-01-12T23:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0084 SugarCRM Sugar Enterprise: Schwachstelle ermöglicht Codeausführung 2023-01-11T23:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0069 PHP: Mehrere Schwachstellen 2015-03-30T22:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0059 Microsoft Developer Tools: Mehrere Schwachstellen 2023-01-10T23:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2022-0852 Jenkins: Mehrere Schwachstellen 2022-07-27T22:00:00.000+00:00 2023-01-12T23:00:00.000+00:00
wid-sec-w-2023-0083 Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen ermöglichen Denial of Service 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0082 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0079 Juniper JUNOS, SRX Series und MX Series: Schwachstellen ermöglichen Denial of Service 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0077 Cisco WebEx: Schwachstelle ermöglicht Offenlegung von Informationen 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0075 Cisco TelePresence: Mehrere Schwachstellen 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0074 Cisco Network Services Orchestrator: Schwachstelle ermöglicht Manipulation von Dateien und Denial of Service 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0072 Juniper JUNOS, QFX Series, EX Series: Mehrere Schwachstellen ermöglichen Denial of Service 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
wid-sec-w-2023-0071 Juniper JUNOS Evolved: Mehrere Schwachstellen ermöglichen Denial of Service 2023-01-11T23:00:00.000+00:00 2023-01-11T23:00:00.000+00:00
ID Description Published Updated
rhsa-2025:18452 Red Hat Security Advisory: openjpeg2 security update from RHEL 2025-10-21T02:45:40+00:00 2025-11-21T19:29:22+00:00
rhsa-2025:18450 Red Hat Security Advisory: rsync security update from RHEL 2025-10-21T02:50:15+00:00 2025-11-21T19:29:22+00:00
rhsa-2025:18446 Red Hat Security Advisory: xorg-x11-server-Xwayland security update from RHEL 2025-10-21T02:50:10+00:00 2025-11-21T19:29:22+00:00
rhsa-2025:18442 Red Hat Security Advisory: openssh security update from RHEL 2025-10-21T02:51:30+00:00 2025-11-21T19:29:21+00:00
rhsa-2025:18440 Red Hat Security Advisory: python3.9 security update from RHEL 2025-10-21T04:16:36+00:00 2025-11-21T19:29:21+00:00
rhsa-2025:18437 Red Hat Security Advisory: gnutls security update from RHEL 2025-10-21T02:32:20+00:00 2025-11-21T19:29:19+00:00
rhsa-2025:18436 Red Hat Security Advisory: libtasn1 security update from RHEL 2025-10-21T02:32:20+00:00 2025-11-21T19:29:18+00:00
rhsa-2025:18433 Red Hat Security Advisory: keylime-agent-rust security update from RHEL 2025-10-21T02:52:05+00:00 2025-11-21T19:29:18+00:00
rhsa-2025:18416 Red Hat Security Advisory: Automotive bug fix and enhancement update 2025-10-21T03:29:45+00:00 2025-11-21T19:29:18+00:00
rhsa-2025:18407 Red Hat Security Advisory: iptraf-ng security update from RHEL 2025-10-21T03:05:35+00:00 2025-11-21T19:29:18+00:00
rhsa-2025:18408 Red Hat Security Advisory: krb5 security update from RHEL 2025-10-21T03:09:48+00:00 2025-11-21T19:29:17+00:00
rhsa-2025:18398 Red Hat Security Advisory: git-lfs security update from RHEL 2025-10-21T02:27:09+00:00 2025-11-21T19:29:16+00:00
rhsa-2025:18390 Red Hat Security Advisory: gstreamer1-plugins-good security update from RHEL 2025-10-21T02:27:50+00:00 2025-11-21T19:29:16+00:00
rhsa-2025:18389 Red Hat Security Advisory: gstreamer1-plugins-base security update from RHEL 2025-10-21T02:26:12+00:00 2025-11-21T19:29:15+00:00
rhsa-2025:18361 Red Hat Security Advisory: python-requests security update from RHEL 2025-10-21T01:40:55+00:00 2025-11-21T19:29:14+00:00
rhsa-2025:1813 Red Hat Security Advisory: python3.11-urllib3 security update 2025-02-25T11:30:52+00:00 2025-11-21T19:29:01+00:00
rhsa-2025:18097 Red Hat Security Advisory: webkit2gtk3 security update 2025-10-15T11:46:25+00:00 2025-11-21T19:28:59+00:00
rhsa-2025:18070 Red Hat Security Advisory: webkit2gtk3 security update 2025-10-15T14:16:26+00:00 2025-11-21T19:28:58+00:00
rhsa-2025:1793 Red Hat Security Advisory: python3.11-urllib3 security update 2025-02-25T11:31:57+00:00 2025-11-21T19:28:55+00:00
rhsa-2025:17693 Red Hat Security Advisory: Satellite 6 Client Bug Fix Update 2025-10-09T17:21:09+00:00 2025-11-21T19:28:46+00:00
rhsa-2025:17649 Red Hat Security Advisory: ipa security update 2025-10-09T08:21:24+00:00 2025-11-21T19:28:43+00:00
rhsa-2025:17648 Red Hat Security Advisory: idm:DL1 security update 2025-10-09T08:04:24+00:00 2025-11-21T19:28:43+00:00
rhsa-2025:17647 Red Hat Security Advisory: idm:DL1 security update 2025-10-09T08:04:24+00:00 2025-11-21T19:28:42+00:00
rhsa-2025:17646 Red Hat Security Advisory: idm:client security update 2025-10-09T08:21:24+00:00 2025-11-21T19:28:42+00:00
rhsa-2025:17645 Red Hat Security Advisory: idm:client security update 2025-10-09T08:15:54+00:00 2025-11-21T19:28:41+00:00
rhsa-2025:1750 Red Hat Security Advisory: python3 security update 2025-02-24T01:20:08+00:00 2025-11-21T19:28:33+00:00
rhsa-2025:17453 Red Hat Security Advisory: firefox security update 2025-10-07T09:47:39+00:00 2025-11-21T19:28:31+00:00
rhsa-2025:1745 Red Hat Security Advisory: libpq security update 2025-02-20T17:50:21+00:00 2025-11-21T19:28:31+00:00
rhsa-2025:1744 Red Hat Security Advisory: libpq security update 2025-02-20T17:27:20+00:00 2025-11-21T19:28:29+00:00
rhsa-2025:17430 Red Hat Security Advisory: perl-JSON-XS security update 2025-10-07T05:52:14+00:00 2025-11-21T19:28:29+00:00
ID Description Published Updated
msrc_cve-2022-44680 Windows Graphics Component Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44679 Windows Graphics Component Information Disclosure Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44678 Windows Print Spooler Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44677 Windows Projected File System Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44675 Windows Bluetooth Driver Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44674 Windows Bluetooth Driver Information Disclosure Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44673 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44671 Windows Graphics Component Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44669 Windows Error Reporting Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44668 Windows Media Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-44667 Windows Media Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41094 Windows Hyper-V Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41079 Microsoft Exchange Server Spoofing Vulnerability 2022-11-08T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41078 Microsoft Exchange Server Spoofing Vulnerability 2022-11-08T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41077 Windows Fax Compose Form Elevation of Privilege Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41076 PowerShell Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41074 Windows Graphics Component Information Disclosure Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-41043 Microsoft Office Information Disclosure Vulnerability 2022-10-11T07:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-38042 Active Directory Domain Services Elevation of Privilege Vulnerability 2022-10-11T07:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-38032 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability 2022-10-11T07:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-34704 Windows Defender Credential Guard Information Disclosure Vulnerability 2022-08-09T07:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-26806 Microsoft Office Graphics Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-26805 Microsoft Office Graphics Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-26804 Microsoft Office Graphics Remote Code Execution Vulnerability 2022-12-13T08:00:00.000Z 2022-12-13T08:00:00.000Z
msrc_cve-2022-46908 SQLite through 3.40.0 when relying on --safe for execution of an untrusted CLI script does not properly implement the azProhibitedFunctions protection mechanism and instead allows UDF functions such as WRITEFILE. 2022-12-02T00:00:00.000Z 2022-12-13T00:00:00.000Z
msrc_cve-2022-42329 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). 2022-12-02T00:00:00.000Z 2022-12-13T00:00:00.000Z
msrc_cve-2022-42328 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). 2022-12-02T00:00:00.000Z 2022-12-13T00:00:00.000Z
msrc_cve-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak 2022-12-02T00:00:00.000Z 2022-12-13T00:00:00.000Z
ID Description Updated
var-201409-0397 Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon cras… 2025-04-13T23:34:11.149000Z
var-201411-0220 Integer overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers… 2025-04-13T23:34:06.450000Z
var-201411-0262 The Standalone Enqueue Server in SAP Netweaver 7.20, 7.01, and earlier allows remote atta… 2025-04-13T23:34:06.421000Z
var-201412-0521 Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT … 2025-04-13T23:34:06.235000Z
var-201412-0397 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x bef… 2025-04-13T23:34:06.094000Z
var-201412-0502 An unspecified JavaScript API in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x be… 2025-04-13T23:34:06.064000Z
var-201412-0586 Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, A… 2025-04-13T23:34:06Z
var-201501-0224 Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a … 2025-04-13T23:34:05.855000Z
var-201501-0245 The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based… 2025-04-13T23:34:05.825000Z
var-201501-0327 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine all… 2025-04-13T23:34:05.796000Z
var-201502-0148 The XML parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) and earlier does not… 2025-04-13T23:34:05.499000Z
var-201502-0213 Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.… 2025-04-13T23:34:05.438000Z
var-201503-0333 Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider … 2025-04-13T23:34:05.218000Z
var-201504-0442 Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicW… 2025-04-13T23:34:04.964000Z
var-201505-0128 Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet … 2025-04-13T23:34:04.926000Z
var-201505-0170 The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices … 2025-04-13T23:34:04.892000Z
var-201506-0166 Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking Syst… 2025-04-13T23:34:04.680000Z
var-201506-0250 Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances… 2025-04-13T23:34:04.624000Z
var-201506-0271 Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /co… 2025-04-13T23:34:04.586000Z
var-201506-0313 Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexu… 2025-04-13T23:34:04.543000Z
var-201507-0500 Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.… 2025-04-13T23:34:04.326000Z
var-201507-0521 SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenti… 2025-04-13T23:34:04.297000Z
var-201508-0500 Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote at… 2025-04-13T23:34:04.003000Z
var-201508-0502 Cross-site scripting (XSS) vulnerability in Cisco IM and Presence Service before 10.5 MR1… 2025-04-13T23:34:03.973000Z
var-201509-0004 Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpnd… 2025-04-13T23:34:03.938000Z
var-201510-0035 Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.… 2025-04-13T23:34:03.329000Z
var-201510-0224 The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos … 2025-04-13T23:34:03.280000Z
var-201510-0226 Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in Fre… 2025-04-13T23:34:03.248000Z
var-201512-0401 Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive inform… 2025-04-13T23:34:02.760000Z
var-201512-0422 Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which all… 2025-04-13T23:34:02.730000Z
ID Description Updated
ID Description Published Updated
suse-su-2022:14927-1 Security update for java-1_7_1-ibm 2022-03-23T09:42:03Z 2022-03-23T09:42:03Z
suse-su-2022:0940-1 Security update for xen 2022-03-23T09:41:23Z 2022-03-23T09:41:23Z
suse-su-2022:0939-1 Security update for xen 2022-03-23T09:41:03Z 2022-03-23T09:41:03Z
suse-su-2022:14926-1 Security update for java-1_7_0-ibm 2022-03-23T08:10:48Z 2022-03-23T08:10:48Z
suse-su-2022:0935-1 Security update for nodejs12 2022-03-22T13:34:43Z 2022-03-22T13:34:43Z
suse-su-2022:0934-1 Security update for binutils 2022-03-22T10:21:45Z 2022-03-22T10:21:45Z
suse-su-2022:0933-1 Security update for kernel-firmware 2022-03-22T10:12:49Z 2022-03-22T10:12:49Z
suse-su-2022:0931-1 Security update for xen 2022-03-22T10:10:49Z 2022-03-22T10:10:49Z
suse-su-2022:0930-1 Security update for qemu 2022-03-22T08:23:02Z 2022-03-22T08:23:02Z
suse-su-2022:0929-1 Security update for apache2 2022-03-22T08:22:41Z 2022-03-22T08:22:41Z
suse-su-2022:0928-1 Security update for apache2 2022-03-21T18:34:20Z 2022-03-21T18:34:20Z
suse-su-2022:0918-1 Security update for apache2 2022-03-21T15:52:19Z 2022-03-21T15:52:19Z
suse-su-2022:14924-1 Security update for apache2 2022-03-21T15:51:45Z 2022-03-21T15:51:45Z
suse-su-2022:0915-1 Security update for lapack 2022-03-21T15:50:46Z 2022-03-21T15:50:46Z
suse-su-2022:0913-1 Security update for lapack 2022-03-21T15:50:20Z 2022-03-21T15:50:20Z
suse-su-2022:0050-2 Security update for net-snmp 2022-03-21T13:33:00Z 2022-03-21T13:33:00Z
suse-su-2022:0910-1 Security update for kernel-firmware 2022-03-21T11:07:58Z 2022-03-21T11:07:58Z
suse-su-2022:0909-1 Security update for glibc 2022-03-21T08:48:35Z 2022-03-21T08:48:35Z
suse-su-2022:0908-1 Security update for bind 2022-03-21T08:48:11Z 2022-03-21T08:48:11Z
suse-su-2022:14923-1 Security update for glibc 2022-03-21T08:47:58Z 2022-03-21T08:47:58Z
suse-su-2022:0906-1 Security update for MozillaThunderbird 2022-03-21T08:47:24Z 2022-03-21T08:47:24Z
suse-su-2022:0901-1 Security update for frr 2022-03-18T11:02:04Z 2022-03-18T11:02:04Z
suse-su-2022:0895-1 Security update for python-lxml 2022-03-17T14:38:22Z 2022-03-17T14:38:22Z
suse-su-2022:0886-1 Security update for libreoffice 2022-03-17T09:06:53Z 2022-03-17T09:06:53Z
suse-su-2022:0882-1 Security update for python3 2022-03-16T13:44:02Z 2022-03-16T13:44:02Z
suse-su-2022:0881-1 Security update for atftp 2022-03-16T13:43:43Z 2022-03-16T13:43:43Z
suse-su-2022:0873-1 Security update for java-1_8_0-openjdk 2022-03-16T09:37:15Z 2022-03-16T09:37:15Z
suse-su-2022:0872-1 Security update for stunnel 2022-03-16T09:35:57Z 2022-03-16T09:35:57Z
suse-su-2022:0871-1 Security update for java-1_8_0-openjdk 2022-03-16T09:34:26Z 2022-03-16T09:34:26Z
suse-ru-2022:0861-1 Security update for openssl-1_1 2022-03-16T08:16:37Z 2022-03-16T08:16:37Z
ID Description Published Updated
cnvd-2025-05081 Esri ArcGIS Server路径遍历漏洞 2025-03-07 2025-03-13
cnvd-2025-05080 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05080) 2025-03-07 2025-03-13
cnvd-2025-05079 Esri ArcGIS Server访问控制错误漏洞 2025-03-07 2025-03-13
cnvd-2025-05078 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05078) 2025-03-07 2025-03-13
cnvd-2025-05077 Esri ArcGIS Server目录遍历漏洞 2025-03-07 2025-03-13
cnvd-2025-05076 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05076) 2025-03-07 2025-03-13
cnvd-2025-05075 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05075) 2025-03-07 2025-03-13
cnvd-2025-05074 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05074) 2025-03-07 2025-03-13
cnvd-2025-05073 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05073) 2025-03-07 2025-03-13
cnvd-2025-05072 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05072) 2025-03-07 2025-03-13
cnvd-2025-05071 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05071) 2025-03-07 2025-03-13
cnvd-2025-04835 上海上讯信息技术股份有限公司运维管理审计系统存在命令执行漏洞 2025-01-08 2025-03-13
cnvd-2025-04831 龙芯中科技术股份有限公司龙芯浏览器存在二进制漏洞 2025-01-07 2025-03-13
cnvd-2025-04768 北京神州绿盟科技有限公司SAG安全网关存在逻辑缺陷漏洞 2025-01-10 2025-03-13
cnvd-2025-04753 北京天融信科技有限公司上网行为管理系统存在命令执行漏洞 2025-01-10 2025-03-13
cnvd-2025-04750 北京天融信科技有限公司上网行为管理存在命令执行漏洞 2025-01-10 2025-03-13
cnvd-2025-05315 Linux kernel无限循环漏洞(CNVD-2025-05315) 2025-03-18 2025-03-12
cnvd-2025-05064 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05064) 2025-03-07 2025-03-12
cnvd-2025-05063 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05063) 2025-03-07 2025-03-12
cnvd-2025-05062 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05062) 2025-03-07 2025-03-12
cnvd-2025-05061 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05061) 2025-03-07 2025-03-12
cnvd-2025-05060 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05060) 2025-03-07 2025-03-12
cnvd-2025-05059 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05059) 2025-03-07 2025-03-12
cnvd-2025-05058 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05058) 2025-03-07 2025-03-12
cnvd-2025-05057 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05057) 2025-03-07 2025-03-12
cnvd-2025-05056 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05056) 2025-03-07 2025-03-12
cnvd-2025-05055 Esri ArcGIS Server跨站脚本漏洞(CNVD-2025-05055) 2025-03-07 2025-03-12
cnvd-2025-05054 Esri ArcGIS Server SQL注入漏洞(CNVD-2025-05054) 2025-03-07 2025-03-12
cnvd-2025-04973 Apache Tomcat远程代码执行漏洞 2025-03-12 2025-03-12
cnvd-2025-04982 IBM ApplinX存在未明漏洞(CNVD-2025-04982) 2025-02-18 2025-03-11
ID Description Published Updated
certa-2013-avi-422 Vulnérabilité dans Oracle Hyperion 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-421 Multiples vulnérabilités dans Oracle Database Server 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-420 Vulnérabilité dans Oracle Industry Applications 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-419 Multiples vulnérabilités dans Oracle MySQL 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-418 Vulnérabilité dans Oracle iLearning 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-417 Multiples vulnérabilités dans Oracle Virtualization 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-416 Multiples vulnérabilités dans Oracle Solaris 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-415 Multiples vulnérabilités dans Moodle 2013-07-17T00:00:00.000000 2013-07-17T00:00:00.000000
certa-2013-avi-414 Vulnérabilité dans PHP 2013-07-16T00:00:00.000000 2013-07-16T00:00:00.000000
certa-2013-avi-413 Multiples vulnérabilités dans Juniper Junos 2013-07-15T00:00:00.000000 2013-07-15T00:00:00.000000
certa-2013-avi-412 Multiples vulnérabilités dans le noyau Linux de Mandriva 2013-07-15T00:00:00.000000 2013-07-15T00:00:00.000000
certa-2013-avi-411 Multiples vulnérabilités dans le noyau Linux de SUSE 2013-07-15T00:00:00.000000 2013-07-15T00:00:00.000000
certa-2013-avi-410 Vulnérabilité dans Squid 2013-07-15T00:00:00.000000 2013-07-15T00:00:00.000000
certa-2013-avi-409 Vulnérabilité dans Squid 2013-07-11T00:00:00.000000 2013-07-11T00:00:00.000000
certa-2013-avi-408 Multiples vulnérabilités dans Google Chrome 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-407 Multiples vulnérabilités dans Adobe ColdFusion 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-406 Vulnérabilité dans Adobe Shockwave Player 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-405 Multiples vulnérabilités dans Adobe Flash Player 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-404 Vulnérabilité dans Microsoft Windows Defender 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-403 Vulnérabilité dans Microsoft Windows Media Format Runtime 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-402 Vulnérabilité dans Microsoft DirectShow 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-401 Multiples vulnérabilités dans Microsoft Internet Explorer 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-400 Vulnérabilité dans Microsoft GDI+ 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-399 Multiples vulnérabilités dans le noyau Microsoft Windows 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-398 Multiples vulnérabilités dans Microsoft Framework .net et Silverlight 2013-07-10T00:00:00.000000 2013-07-10T00:00:00.000000
certa-2013-avi-397 Vulnérabilité dans QNX Software Development Platform 2013-07-09T00:00:00.000000 2013-07-09T00:00:00.000000
certa-2013-avi-396 Vulnérabilité dans EMC RSA Authentication Manager 2013-07-09T00:00:00.000000 2013-07-09T00:00:00.000000
certa-2013-avi-395 Vulnérabilité dans EMC Replication Manager 2013-07-09T00:00:00.000000 2013-07-09T00:00:00.000000
certa-2013-avi-394 Vulnérabilité dans Citrix XenServer 2013-07-08T00:00:00.000000 2013-07-08T00:00:00.000000
certa-2013-avi-393 Multiples vulnérabilités dans Apple OS X 2013-07-08T00:00:00.000000 2013-07-08T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated