Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22774 |
7.5 (3.1)
|
devalue vulnerable to denial of service due to memory … |
sveltejs |
devalue |
2026-01-15T18:53:21.963Z | 2026-01-15T19:16:10.500Z |
| CVE-2026-22249 |
7.1 (3.1)
|
Docmost affected by an Arbitrary File Write via Zip Im… |
docmost |
docmost |
2026-01-15T18:43:56.263Z | 2026-01-15T19:08:26.158Z |
| CVE-2026-22803 |
8.2 (4.0)
|
SvelteKit has a memory amplification DoS in Remote Fun… |
sveltejs |
kit |
2026-01-15T18:37:57.831Z | 2026-01-15T19:06:13.528Z |
| CVE-2026-23493 |
8.6 (3.1)
|
Pimcore ENV Variables and Cookie Informations are expo… |
pimcore |
pimcore |
2026-01-15T16:38:23.923Z | 2026-01-15T19:02:08.517Z |
| CVE-2025-67647 |
8.4 (4.0)
|
SvelteKit Denial of service and possible SSRF when usi… |
sveltejs |
kit |
2026-01-15T18:33:25.295Z | 2026-01-15T18:58:01.975Z |
| CVE-2025-13844 |
8.4 (4.0)
|
CWE-415: Double Free vulnerability exists that co… |
Schneider Electric |
EcoStruxure Power Build Rapsody |
2026-01-15T18:28:37.316Z | 2026-01-15T18:55:41.866Z |
| CVE-2025-13845 |
8.4 (4.0)
|
CWE-416: Use After Free vulnerability that could … |
Schneider Electric |
EcoStruxure Power Build Rapsody |
2026-01-15T18:33:23.235Z | 2026-01-15T18:54:16.308Z |
| CVE-2025-70303 |
5.5 (3.1)
|
A heap overflow in the uncv_parse_config() functi… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:49:42.651Z |
| CVE-2025-62193 |
9.3 (4.0)
9.8 (3.1)
|
NOAA PMEL Live Access Server (LAS) PyFerret command in… |
National Oceanic and Atmospheric Administration (NOAA) |
Live Access Server (LAS) |
2026-01-15T16:44:15.708Z | 2026-01-15T18:47:34.506Z |
| CVE-2025-70307 |
7.5 (3.1)
|
A stack overflow in the dump_ttxt_sample function… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:44:51.463Z |
| CVE-2025-15378 |
7.2 (3.1)
|
AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Si… |
ajseidl |
AJS Footnotes |
2026-01-14T05:28:08.511Z | 2026-01-15T18:44:14.155Z |
| CVE-2025-70305 |
5.5 (3.1)
|
A stack overflow in the dmx_saf function of GPAC … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:40:18.915Z |
| CVE-2025-70302 |
5.5 (3.1)
|
A heap overflow in the ghi_dmx_declare_opid_bin()… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:36:26.740Z |
| CVE-2026-0635 |
4.3 (3.1)
|
Responsive Accordion Slider <= 1.2.2 - Missing Authori… |
techknowprime |
Responsive Accordion Slider |
2026-01-14T05:28:08.887Z | 2026-01-15T18:33:19.942Z |
| CVE-2025-14613 |
7.2 (3.1)
|
GetContentFromURL <= 1.0 - Authenticated (Contributor+… |
daschmi |
GetContentFromURL |
2026-01-14T05:28:12.007Z | 2026-01-15T18:29:50.855Z |
| CVE-2021-47752 |
8.7 (4.0)
7.5 (3.1)
|
AWebServer GhostBuilding 18 - Denial of Service (DoS) |
Sylkat-Tools |
AWebServer GhostBuilding |
2026-01-15T15:52:02.828Z | 2026-01-15T18:27:31.113Z |
| CVE-2021-47753 |
9.3 (4.0)
9.8 (3.1)
|
phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (… |
Phpkf |
phpKF CMS |
2026-01-15T15:52:03.459Z | 2026-01-15T18:27:25.683Z |
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2021-47772 |
8.4 (4.0)
9.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - Buffer… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:11.805Z | 2026-01-15T18:26:45.942Z |
| CVE-2021-47773 |
8.5 (4.0)
7.8 (3.1)
|
Dynojet Power Core 2.3.0 - Unquoted Service Path |
Dynojet |
Dynojet Power Core |
2026-01-15T15:52:12.232Z | 2026-01-15T18:26:39.411Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2025-9014 |
6.3 (4.0)
|
Null Pointer Dereference Vulnerability on TL-WR841N |
TP-Link Systems Inc. |
TL-WR841N v14 |
2026-01-15T17:36:06.139Z | 2026-01-15T18:26:28.154Z |
| CVE-2025-70299 |
6.5 (3.1)
|
A heap overflow in the avi_parse_input_file() fun… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:23:54.704Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| CVE-2026-23494 |
4.3 (3.1)
|
Pimcore is Missing Function Level Authorization on "St… |
pimcore |
pimcore |
2026-01-15T16:52:58.729Z | 2026-01-15T18:08:13.110Z |
| CVE-2025-12178 |
6.4 (3.1)
|
SpiceForms Form Builder <= 1.0 - Authenticated (Contri… |
aankit |
SpiceForms Form Builder |
2026-01-14T05:28:12.421Z | 2026-01-15T18:00:12.192Z |
| CVE-2021-47757 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - 'plugin' Re… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:04.994Z | 2026-01-15T17:57:01.374Z |
| CVE-2021-47758 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - Remote Code… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:05.437Z | 2026-01-15T17:26:55.158Z |
| CVE-2025-14854 |
5.4 (3.1)
|
WP-CRM System – Manage Clients and Projects <= 3.4.5 -… |
nofearinc |
WP-CRM System – Manage Clients and Projects |
2026-01-14T05:28:12.974Z | 2026-01-15T17:26:26.971Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-49363 |
8.1 (3.1)
|
WordPress Kings & Queens theme <= 1.1.16 - Local File … |
AncoraThemes |
Kings & Queens |
2025-12-18T07:21:41.871Z | 2026-01-20T14:28:07.185Z |
| CVE-2025-49362 |
8.1 (3.1)
|
WordPress Gracioza theme <= 1.0.15 - Local File Inclus… |
AncoraThemes |
Gracioza |
2025-12-18T07:21:41.688Z | 2026-01-20T14:28:06.996Z |
| CVE-2025-49361 |
8.1 (3.1)
|
WordPress Mamita theme <= 1.0.9 - Local File Inclusion… |
AncoraThemes |
Mamita |
2025-12-18T07:21:41.475Z | 2026-01-20T14:28:06.975Z |
| CVE-2025-49360 |
8.1 (3.1)
|
WordPress Militarology theme <= 1.0.15 - Local File In… |
AncoraThemes |
Militarology |
2025-12-18T07:21:41.272Z | 2026-01-20T14:28:07.077Z |
| CVE-2025-49359 |
8.1 (3.1)
|
WordPress ShieldGroup theme <= 2.13 - Local File Inclu… |
AncoraThemes |
ShieldGroup |
2025-12-18T07:21:41.066Z | 2026-01-20T14:28:07.156Z |
| CVE-2025-49358 |
6.5 (3.1)
|
WordPress Content Fetcher plugin <= 1.1 - Cross Site S… |
Ruhul Amin |
Content Fetcher |
2025-12-31T12:01:15.789Z | 2026-01-20T14:28:06.987Z |
| CVE-2025-49357 |
6.5 (3.1)
|
WordPress Audiomack plugin <= 1.4.8 - Cross Site Scrip… |
Audiomack |
Audiomack |
2025-12-31T13:04:24.047Z | 2026-01-20T14:28:07.026Z |
| CVE-2025-49356 |
4.3 (3.1)
|
WordPress Orders Chat for WooCommerce plugin <= 1.2.0 … |
Mykola Lukin |
Orders Chat for WooCommerce |
2025-12-31T16:07:40.281Z | 2026-01-20T14:28:06.970Z |
| CVE-2025-49355 |
5.9 (3.1)
|
WordPress Accessibility Press plugin <= 1.0.2 - Cross … |
ikaes |
Accessibility Press |
2025-12-31T17:21:50.962Z | 2026-01-20T14:28:06.856Z |
| CVE-2025-49354 |
7.1 (3.1)
|
WordPress Recent Posts From Each Category plugin <= 1.… |
Mindstien Technologies |
Recent Posts From Each Category |
2025-12-31T05:30:25.381Z | 2026-01-20T14:28:06.822Z |
| CVE-2025-49353 |
7.1 (3.1)
|
WordPress Noindex by Path plugin <= 1.0 - Cross Site R… |
Marcin Kijak |
Noindex by Path |
2025-12-31T05:36:42.895Z | 2026-01-20T14:28:06.786Z |
| CVE-2025-49352 |
4.3 (3.1)
|
WordPress Order Cancellation & Returns for WooCommerce… |
YoOhw Studio |
Order Cancellation & Returns for WooCommerce |
2025-12-31T16:25:44.989Z | 2026-01-20T14:28:06.781Z |
| CVE-2025-49351 |
7.1 (3.1)
|
WordPress Create Posts & Terms plugin <= 1.3.1 - Cross… |
Valentin Agachi |
Create Posts & Terms |
2025-12-09T14:52:18.391Z | 2026-01-20T14:28:06.640Z |
| CVE-2025-49350 |
4.3 (3.1)
|
WordPress Actionwear products sync plugin <= 2.3.3 - B… |
marcoingraiti |
Actionwear products sync |
2025-12-09T14:52:18.182Z | 2026-01-20T14:28:06.748Z |
| CVE-2025-49349 |
5.3 (3.1)
|
WordPress Reuters Direct plugin <= 3.0.0 - Broken Acce… |
Reuters News Agency |
Reuters Direct |
2025-12-31T14:48:34.082Z | 2026-01-20T14:28:06.662Z |
| CVE-2025-49348 |
5.3 (3.1)
|
WordPress Hype plugin <= 1.0.5 - Broken Access Control… |
Hype |
Hype |
2025-12-09T14:52:17.974Z | 2026-01-20T14:28:06.689Z |
| CVE-2025-49347 |
7.1 (3.1)
|
WordPress WP sIFR plugin <= 0.6.8.1 - Cross Site Reque… |
Jupitercow |
WP sIFR |
2025-12-09T14:52:17.791Z | 2026-01-20T14:28:06.607Z |
| CVE-2025-49346 |
7.1 (3.1)
|
WordPress Simple Archive Generator plugin <= 5.2 - Cro… |
Peter Sterling |
Simple Archive Generator |
2025-12-31T04:37:01.172Z | 2026-01-20T14:28:06.500Z |
| CVE-2025-49345 |
7.1 (3.1)
|
WordPress WP-EasyArchives plugin <= 3.1.2 - Cross Site… |
mg12 |
WP-EasyArchives |
2025-12-31T05:23:28.075Z | 2026-01-20T14:28:06.856Z |
| CVE-2025-49344 |
7.1 (3.1)
|
WordPress SensitiveTagCloud plugin <= 1.4.1 - Cross Si… |
Rene Ade |
SensitiveTagCloud |
2025-12-31T05:25:58.689Z | 2026-01-20T14:28:06.405Z |
| CVE-2025-49343 |
7.1 (3.1)
|
WordPress Social Profilr plugin <= 1.0 - Cross Site Re… |
Socialprofilr |
Social Profilr |
2025-12-31T05:28:06.720Z | 2026-01-20T14:28:06.765Z |
| CVE-2025-49342 |
7.1 (3.1)
|
WordPress Custom Style plugin <= 1.0 - Cross Site Requ… |
Wolfgang Häfelinger |
Custom Style |
2025-12-31T05:55:53.218Z | 2026-01-20T14:28:06.843Z |
| CVE-2025-49341 |
7.1 (3.1)
|
WordPress PDF Creator Lite plugin <= 1.2 - Cross Site … |
Alex Furr |
PDF Creator Lite |
2025-12-09T14:52:17.582Z | 2026-01-20T14:28:06.561Z |
| CVE-2025-49340 |
4.3 (3.1)
|
WordPress Direct Payments WP plugin <= 1.3.0 - Sensiti… |
Digages |
Direct Payments WP |
2025-12-31T16:30:03.883Z | 2026-01-20T14:28:06.289Z |
| CVE-2025-49339 |
4.3 (3.1)
|
WordPress Direct Payments WP plugin <= 1.3.0 - Broken … |
Digages |
Direct Payments WP |
2025-12-31T16:31:22.695Z | 2026-01-20T14:28:06.329Z |
| CVE-2025-49338 |
5.3 (3.1)
|
WordPress Flowbox plugin <= 1.1.5 - Broken Access Cont… |
Flowbox |
Flowbox |
2025-12-31T15:35:54.047Z | 2026-01-20T14:28:06.489Z |
| CVE-2025-49337 |
5.9 (3.1)
|
WordPress Dashboard Beacon plugin <= 1.2.0 - Cross Sit… |
janhenckens |
Dashboard Beacon |
2025-12-31T17:21:05.083Z | 2026-01-20T14:28:06.314Z |
| CVE-2025-49334 |
5.3 (3.1)
|
WordPress MyD Delivery plugin <= 1.3.7 - Insecure Dire… |
Eduardo Villão |
MyD Delivery |
2025-12-31T15:25:23.165Z | 2026-01-20T14:28:06.300Z |
| CVE-2025-49300 |
2.7 (3.1)
|
WordPress Traveler Option Tree plugin <= 2.8 - Sensiti… |
shinetheme |
Traveler Option Tree |
2025-12-16T08:12:44.867Z | 2026-01-20T14:28:06.383Z |
| CVE-2025-49060 |
10 (3.1)
|
WordPress Wastia theme < 1.1.3 - Arbitrary File Upload… |
CMSSuperHeroes |
Wastia |
2025-10-22T14:32:08.196Z | 2026-01-20T14:28:05.987Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-49363 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:50.510 | 2026-01-20T15:16:35.450 |
| fkie_cve-2025-49362 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:50.380 | 2026-01-20T15:16:35.320 |
| fkie_cve-2025-49361 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:50.247 | 2026-01-20T15:16:35.193 |
| fkie_cve-2025-49360 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:50.113 | 2026-01-20T15:16:35.060 |
| fkie_cve-2025-49359 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:49.980 | 2026-01-20T15:16:34.913 |
| fkie_cve-2025-49358 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T12:16:16.977 | 2026-01-20T15:16:34.813 |
| fkie_cve-2025-49357 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T13:15:40.377 | 2026-01-20T15:16:34.710 |
| fkie_cve-2025-49356 | Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce allows Exploiting I… | 2025-12-31T16:15:43.240 | 2026-01-20T15:16:34.607 |
| fkie_cve-2025-49355 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T18:15:44.760 | 2026-01-20T15:16:34.500 |
| fkie_cve-2025-49354 | Cross-Site Request Forgery (CSRF) vulnerability in Mindstien Technologies Recent Posts From Each Ca… | 2025-12-31T06:15:41.223 | 2026-01-20T15:16:34.393 |
| fkie_cve-2025-49353 | Cross-Site Request Forgery (CSRF) vulnerability in Marcin Kijak Noindex by Path allows Stored XSS.T… | 2025-12-31T06:15:41.083 | 2026-01-20T15:16:34.293 |
| fkie_cve-2025-49352 | Authorization Bypass Through User-Controlled Key vulnerability in YoOhw Studio Order Cancellation &… | 2025-12-31T17:15:44.267 | 2026-01-20T15:16:34.193 |
| fkie_cve-2025-49351 | Cross-Site Request Forgery (CSRF) vulnerability in Valentin Agachi Create Posts & Terms create-… | 2025-12-09T16:17:58.670 | 2026-01-20T15:16:34.070 |
| fkie_cve-2025-49350 | Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-s… | 2025-12-09T16:17:58.530 | 2026-01-20T15:16:33.940 |
| fkie_cve-2025-49349 | Missing Authorization vulnerability in Reuters News Agency Reuters Direct allows Exploiting Incorre… | 2025-12-31T15:15:51.920 | 2026-01-20T15:16:33.847 |
| fkie_cve-2025-49348 | Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Acce… | 2025-12-09T16:17:58.387 | 2026-01-20T15:16:33.710 |
| fkie_cve-2025-49347 | Cross-Site Request Forgery (CSRF) vulnerability in Jupitercow WP sIFR wp-sifr allows Stored XSS.Thi… | 2025-12-09T16:17:58.253 | 2026-01-20T15:16:33.580 |
| fkie_cve-2025-49346 | Cross-Site Request Forgery (CSRF) vulnerability in Peter Sterling Simple Archive Generator allows S… | 2025-12-31T05:16:06.637 | 2026-01-20T15:16:33.477 |
| fkie_cve-2025-49345 | Cross-Site Request Forgery (CSRF) vulnerability in mg12 WP-EasyArchives allows Stored XSS.This issu… | 2025-12-31T06:15:40.957 | 2026-01-20T15:16:33.380 |
| fkie_cve-2025-49344 | Cross-Site Request Forgery (CSRF) vulnerability in Rene Ade SensitiveTagCloud allows Stored XSS.Thi… | 2025-12-31T06:15:40.813 | 2026-01-20T15:16:33.273 |
| fkie_cve-2025-49343 | Cross-Site Request Forgery (CSRF) vulnerability in Socialprofilr Social Profilr allows Stored XSS.T… | 2025-12-31T06:15:40.677 | 2026-01-20T15:16:33.170 |
| fkie_cve-2025-49342 | Cross-Site Request Forgery (CSRF) vulnerability in Wolfgang Häfelinger Custom Style allows Stored X… | 2025-12-31T06:15:40.517 | 2026-01-20T15:16:33.070 |
| fkie_cve-2025-49341 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allo… | 2025-12-09T16:17:58.107 | 2026-01-20T15:16:32.890 |
| fkie_cve-2025-49340 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages… | 2025-12-31T17:15:44.113 | 2026-01-20T15:16:32.507 |
| fkie_cve-2025-49339 | Missing Authorization vulnerability in Digages Direct Payments WP allows Exploiting Incorrectly Con… | 2025-12-31T17:15:43.970 | 2026-01-20T15:16:32.390 |
| fkie_cve-2025-49338 | Missing Authorization vulnerability in Flowbox allows Exploiting Incorrectly Configured Access Cont… | 2025-12-31T16:15:43.093 | 2026-01-20T15:16:32.287 |
| fkie_cve-2025-49337 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T18:15:44.173 | 2026-01-20T15:16:32.187 |
| fkie_cve-2025-49334 | Authorization Bypass Through User-Controlled Key vulnerability in Eduardo Villão MyD Delivery allow… | 2025-12-31T16:15:42.947 | 2026-01-20T15:16:32.080 |
| fkie_cve-2025-49300 | Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree … | 2025-12-16T09:15:52.120 | 2026-01-20T15:16:31.927 |
| fkie_cve-2025-49060 | Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia wastia allow… | 2025-10-22T15:15:35.160 | 2026-01-20T15:16:31.790 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-42gx-8xq5-j4pf |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocate… | 2025-07-28T12:30:36Z | 2026-01-07T18:30:19Z |
| ghsa-3f8h-fgg5-j8hm |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certa… | 2025-08-16T12:30:32Z | 2026-01-07T18:30:19Z |
| ghsa-wm2g-6m3r-4fx9 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: comedi: Fail COMEDI_INSNLIST i… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-w37r-fw6v-6v39 |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-g4qg-7mgj-p8v6 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitializ… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-fj76-9588-m48w |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-f3wq-3888-8q7g |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action an… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-8r68-wg38-9q2x |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't … | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-8gh3-6693-hwj4 |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-fre… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-433x-cqcq-wqv9 |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix us… | 2025-07-28T12:30:35Z | 2026-01-07T18:30:18Z |
| ghsa-r7vp-7q6j-j6g8 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Blossom Themes Sarada Lite.This issue affects Sa… | 2024-04-15T12:30:34Z | 2026-01-07T18:30:17Z |
| ghsa-8r9q-7v3j-jr4g |
8.7 (4.0)
|
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability | 2026-01-05T21:30:33Z | 2026-01-07T16:16:27Z |
| ghsa-x9g3-m4cq-98j9 |
6.4 (3.1)
|
Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path … | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-rw66-g8v8-wcwh |
8.8 (3.1)
|
Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an … | 2026-01-07T12:31:24Z | 2026-01-07T15:30:16Z |
| ghsa-q22q-86rc-668c |
9.2 (4.0)
|
The massive sending of ARP requests causes a denial of service on one board of the charger that all… | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-mfq4-p36v-pf6f |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-mc5w-4wgh-3vm5 |
9.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Obj… | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-cgqh-2w33-h8jq |
4.9 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in minnur External Media allows Server Side Reques… | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-73r3-cr9q-p5gh |
6.5 (3.1)
|
Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows… | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-3qwf-r3rp-vfpr |
9.3 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-3pxg-h8p3-7jfh |
6.9 (4.0)
|
Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB"… | 2026-01-07T15:30:16Z | 2026-01-07T15:30:16Z |
| ghsa-36gx-mxh9-mx5r |
9.1 (3.1)
|
The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verifica… | 2026-01-07T12:31:24Z | 2026-01-07T15:30:16Z |
| ghsa-gw75-x5g3-fh33 |
7.7 (3.1)
|
The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and… | 2026-01-07T12:31:22Z | 2026-01-07T15:30:15Z |
| ghsa-fr77-fc49-x5mj |
6.7 (3.1)
|
In geniezone, there is a possible memory corruption due to use after free. This could lead to local… | 2026-01-06T03:31:34Z | 2026-01-07T15:30:15Z |
| ghsa-9hp7-prp8-2mg8 |
6.4 (3.1)
|
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the… | 2026-01-07T12:31:19Z | 2026-01-07T15:30:15Z |
| ghsa-jxhp-qvjm-mxcj |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the f… | 2025-12-28T15:30:26Z | 2026-01-07T15:30:14Z |
| ghsa-j5pv-22p5-jmgv |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function su… | 2025-12-28T15:30:26Z | 2026-01-07T15:30:14Z |
| ghsa-mr4j-mh66-4679 |
7.4 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race bet… | 2025-07-22T09:30:30Z | 2026-01-07T15:30:13Z |
| ghsa-h956-rh7x-ppgj |
9.8 (3.1)
|
RustFS has a gRPC Hardcoded Token Authentication Bypass | 2025-12-30T23:06:15Z | 2026-01-07T15:22:21Z |
| ghsa-wcj4-jw5j-44wh |
5.5 (4.0)
|
CBORDecoder reuse can leak shareable values across decode calls | 2025-12-31T22:01:38Z | 2026-01-07T15:18:22Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-27049 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.339256Z |
| gsd-2024-27048 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.339052Z |
| gsd-2024-27021 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.338814Z |
| gsd-2024-27081 | ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edi… | 2024-02-20T06:02:29.338596Z |
| gsd-2024-27086 | The MSAL library enabled acquisition of security tokens to call protected APIs. MSAL.NET … | 2024-02-20T06:02:29.338391Z |
| gsd-2024-27092 | Hoppscotch is an API development ecosystem. Due to lack of validation for fields like La… | 2024-02-20T06:02:29.338150Z |
| gsd-2024-27105 | Frappe is a full-stack web application framework. Prior to versions 14.66.3 and 15.16.0, … | 2024-02-20T06:02:29.337946Z |
| gsd-2024-27072 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.337723Z |
| gsd-2024-27038 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.337523Z |
| gsd-2024-27054 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.337314Z |
| gsd-2024-27011 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.337103Z |
| gsd-2024-27077 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.336851Z |
| gsd-2024-27087 | Kirby is a content management system. The new link field introduced in Kirby 4 allows sev… | 2024-02-20T06:02:29.336640Z |
| gsd-2024-27010 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.336432Z |
| gsd-2024-27115 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.336225Z |
| gsd-2024-27095 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.336016Z |
| gsd-2024-27023 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.335801Z |
| gsd-2024-27097 | A user endpoint didn't perform filtering on an incoming parameter, which was added direct… | 2024-02-20T06:02:29.335576Z |
| gsd-2024-27088 | es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or compl… | 2024-02-20T06:02:29.335371Z |
| gsd-2024-27061 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.335166Z |
| gsd-2024-27099 | The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When process… | 2024-02-20T06:02:29.334907Z |
| gsd-2024-27032 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.334598Z |
| gsd-2024-27051 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.334378Z |
| gsd-2024-27053 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.334100Z |
| gsd-2024-27002 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.333886Z |
| gsd-2024-27016 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.333658Z |
| gsd-2024-27015 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.333427Z |
| gsd-2024-27073 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.333201Z |
| gsd-2024-27112 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.332986Z |
| gsd-2024-27022 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:29.332697Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-185422 | Malicious code in aldebaran-resolvers-rehype-carina (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185421 | Malicious code in aldebaran-regulus-bellatrix-prompts (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185420 | Malicious code in aldebaran-quantum-babel-steganography (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185419 | Malicious code in aldebaran-polaris-materialize-xenobiology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185418 | Malicious code in aldebaran-phoebe-sagitta-brane (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185417 | Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185416 | Malicious code in aldebaran-lyra-magellan-bulma (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185415 | Malicious code in aldebaran-halley-eris-rollup-plugin (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185414 | Malicious code in aldebaran-biosignature-darkenergy-pavo (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185413 | Malicious code in airbnb-titan-pavo-adonis (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185412 | Malicious code in airbnb-tethys-enif-nova (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185411 | Malicious code in airbnb-test-betelgeuse-gridsome (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185410 | Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185409 | Malicious code in airbnb-nconf-redis-jwt (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185408 | Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185407 | Malicious code in airbnb-mensa-geochemistry-husky (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185406 | Malicious code in airbnb-australis-inflation-changelog (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185405 | Malicious code in airbnb-ariel-spectroscopy-ursa (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185404 | Malicious code in airbnb-arcturus-enif-kastra (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185403 | Malicious code in air-query-sun-void-debug (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185402 | Malicious code in air-minify-load-secure-encode (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185401 | Malicious code in air-epsilon-zeta-key-bundle (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185400 | Malicious code in air-easy-dog-float-interface (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185399 | Malicious code in aether-vuepress-gatsby-schema (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185398 | Malicious code in aether-tachyon-geochronology-janus (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185397 | Malicious code in aether-start-lepton-mdx (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185396 | Malicious code in aether-radiometric-sedna-phoebe (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185395 | Malicious code in aether-quantum-computing-koa-xanadu (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185394 | Malicious code in aether-pulsar-polaris-aldebaran (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| mal-2025-185393 | Malicious code in aether-procyon-charon-spectron-webdriver (npm) | 2025-11-13T03:23:14Z | 2025-11-13T03:23:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:10848 | Red Hat Security Advisory: cloud-init security update | 2025-07-14T07:35:46+00:00 | 2025-11-21T19:19:50+00:00 |
| rhsa-2025:10844 | Red Hat Security Advisory: cloud-init security update | 2025-07-14T07:13:31+00:00 | 2025-11-21T19:19:49+00:00 |
| rhsa-2025:10837 | Red Hat Security Advisory: kernel security update | 2025-07-14T02:33:21+00:00 | 2025-11-21T19:19:49+00:00 |
| rhsa-2025:10834 | Red Hat Security Advisory: kernel security update | 2025-07-14T01:22:25+00:00 | 2025-11-21T19:19:48+00:00 |
| rhsa-2025:10830 | Red Hat Security Advisory: kernel security update | 2025-07-14T00:25:51+00:00 | 2025-11-21T19:19:48+00:00 |
| rhsa-2025:1083 | Red Hat Security Advisory: ovn22.03 security update | 2025-02-05T15:13:47+00:00 | 2025-11-21T19:19:47+00:00 |
| rhsa-2025:10829 | Red Hat Security Advisory: kernel-rt security update | 2025-07-14T00:20:20+00:00 | 2025-11-21T19:19:46+00:00 |
| rhsa-2025:10828 | Red Hat Security Advisory: kernel security update | 2025-07-14T00:25:21+00:00 | 2025-11-21T19:19:46+00:00 |
| rhsa-2025:1082 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 update is now available (RHBQ 3.15.3.GA) | 2025-02-05T15:03:41+00:00 | 2025-11-21T19:19:46+00:00 |
| rhsa-2025:10796 | Red Hat Security Advisory: libblockdev security update | 2025-07-10T13:21:31+00:00 | 2025-11-21T19:19:45+00:00 |
| rhsa-2025:10742 | Red Hat Security Advisory: gnome-remote-desktop security update | 2025-07-09T19:20:49+00:00 | 2025-11-21T19:19:43+00:00 |
| rhsa-2025:10761 | Red Hat Security Advisory: kernel security update | 2025-07-10T03:00:20+00:00 | 2025-11-21T19:19:40+00:00 |
| rhsa-2025:1075 | Red Hat Security Advisory: libsoup security update | 2025-02-05T13:27:51+00:00 | 2025-11-21T19:19:40+00:00 |
| rhsa-2025:10675 | Red Hat Security Advisory: kernel-rt security update | 2025-07-09T00:29:11+00:00 | 2025-11-21T19:19:36+00:00 |
| rhsa-2025:10674 | Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 security update | 2025-07-09T00:49:11+00:00 | 2025-11-21T19:19:36+00:00 |
| rhsa-2025:10673 | Red Hat Security Advisory: kernel security update | 2025-07-09T00:58:51+00:00 | 2025-11-21T19:19:36+00:00 |
| rhsa-2025:10671 | Red Hat Security Advisory: kernel security update | 2025-07-09T00:50:20+00:00 | 2025-11-21T19:19:35+00:00 |
| rhsa-2025:10646 | Red Hat Security Advisory: socat security update | 2025-07-08T15:10:00+00:00 | 2025-11-21T19:19:33+00:00 |
| rhsa-2025:10635 | Red Hat Security Advisory: gnome-remote-desktop security update | 2025-07-08T13:37:55+00:00 | 2025-11-21T19:19:33+00:00 |
| rhsa-2025:10631 | Red Hat Security Advisory: gnome-remote-desktop security update | 2025-07-08T13:33:40+00:00 | 2025-11-21T19:19:33+00:00 |
| rhsa-2025:10548 | Red Hat Security Advisory: apache-commons-vfs security update | 2025-07-08T00:50:43+00:00 | 2025-11-21T19:19:29+00:00 |
| rhsa-2025:10547 | Red Hat Security Advisory: kernel security update | 2025-07-08T01:15:28+00:00 | 2025-11-21T19:19:28+00:00 |
| rhsa-2025:10544 | Red Hat Security Advisory: socat security update | 2025-07-08T00:27:18+00:00 | 2025-11-21T19:19:26+00:00 |
| rhsa-2025:10536 | Red Hat Security Advisory: kernel-rt security update | 2025-07-08T00:13:53+00:00 | 2025-11-21T19:19:26+00:00 |
| rhsa-2025:10527 | Red Hat Security Advisory: kernel-rt security update | 2025-07-07T19:12:57+00:00 | 2025-11-21T19:19:26+00:00 |
| rhsa-2025:1047 | Red Hat Security Advisory: libsoup security update | 2025-02-05T05:51:16+00:00 | 2025-11-21T19:19:24+00:00 |
| rhsa-2025:10379 | Red Hat Security Advisory: kernel security update | 2025-07-07T08:44:55+00:00 | 2025-11-21T19:19:20+00:00 |
| rhsa-2025:10371 | Red Hat Security Advisory: kernel security update | 2025-07-07T06:10:45+00:00 | 2025-11-21T19:19:16+00:00 |
| rhsa-2025:10353 | Red Hat Security Advisory: socat security update | 2025-07-07T02:52:30+00:00 | 2025-11-21T19:19:12+00:00 |
| rhsa-2025:10246 | Red Hat Security Advisory: thunderbird security update | 2025-07-02T14:59:52+00:00 | 2025-11-21T19:19:05+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-38010 | Microsoft Office Visio Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-37963 | Microsoft Office Visio Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-37962 | Microsoft PowerPoint Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-35840 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-35836 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-35835 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-35834 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-34733 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-34731 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-14T07:00:00.000Z |
| msrc_cve-2022-38020 | Visual Studio Code Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38019 | AV1 Video Extension Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38013 | .NET Core and Visual Studio Denial of Service Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38011 | Raw Image Extension Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38009 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38008 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38007 | Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38006 | Windows Graphics Component Information Disclosure Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38005 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-38004 | Windows Fax Service Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37969 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37964 | Windows Kernel Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37961 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37959 | Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37957 | Windows Kernel Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37956 | Windows Kernel Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-37954 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-35841 | Windows Enterprise App Management Service Remote Code Execution Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-35838 | HTTP V3 Denial of Service Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-35833 | Windows Secure Channel Denial of Service Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| msrc_cve-2022-35832 | Windows Event Tracing Denial of Service Vulnerability | 2022-09-13T07:00:00.000Z | 2022-09-13T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201410-0029 | Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remo… | 2025-04-13T23:27:36.399000Z |
| var-201411-0250 | Cisco IOS on Aironet access points, when "dot11 aaa authenticator" debugging is enabled, … | 2025-04-13T23:27:35.576000Z |
| var-201411-0483 | ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U… | 2025-04-13T23:27:35.303000Z |
| var-201412-0301 | The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated us… | 2025-04-13T23:27:35.131000Z |
| var-201501-0130 | Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) … | 2025-04-13T23:27:34.949000Z |
| var-201501-0655 | Cross-site scripting (XSS) vulnerability in login.cgi in D-Link router DIR-655 (rev Bx) w… | 2025-04-13T23:27:34.651000Z |
| var-201501-0697 | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and o… | 2025-04-13T23:27:34.587000Z |
| var-201502-0035 | Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Ti… | 2025-04-13T23:27:34.521000Z |
| var-201502-0119 | Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco… | 2025-04-13T23:27:34.430000Z |
| var-201502-0140 | The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash)… | 2025-04-13T23:27:34.389000Z |
| var-201502-0245 | Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type … | 2025-04-13T23:27:33.904000Z |
| var-201502-0413 | Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x … | 2025-04-13T23:27:33.762000Z |
| var-201502-0455 | Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmw… | 2025-04-13T23:27:33.729000Z |
| var-201503-0159 | Race condition in the TLS implementation in MainApp in the management interface in Cisco … | 2025-04-13T23:27:33.665000Z |
| var-201504-0102 | Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended re… | 2025-04-13T23:27:33.461000Z |
| var-201504-0101 | The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in conf… | 2025-04-13T23:27:33.431000Z |
| var-201505-0318 | Huawei E587 Mobile WiFi with firmware before 11.203.30.00.00 allows remote attackers to b… | 2025-04-13T23:27:33.077000Z |
| var-201506-0167 | The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5… | 2025-04-13T23:27:32.895000Z |
| var-201506-0188 | The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devic… | 2025-04-13T23:27:32.865000Z |
| var-201506-0190 | Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2… | 2025-04-13T23:27:32.828000Z |
| var-201506-0316 | The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote … | 2025-04-13T23:27:32.699000Z |
| var-201506-0356 | RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attack… | 2025-04-13T23:27:32.661000Z |
| var-201507-0041 | Juniper Junos OS 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 1… | 2025-04-13T23:27:32.509000Z |
| var-201507-0522 | Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which al… | 2025-04-13T23:27:32.343000Z |
| var-201507-0524 | Cisco AsyncOS on Email Security Appliance (ESA) devices with software 8.5.6-073, 8.5.6-07… | 2025-04-13T23:27:32.290000Z |
| var-201508-0479 | The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to… | 2025-04-13T23:27:32.021000Z |
| var-201508-0481 | The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Ed… | 2025-04-13T23:27:31.986000Z |
| var-201509-0346 | Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shel… | 2025-04-13T23:27:31.892000Z |
| var-201511-0011 | Cross-site scripting (XSS) vulnerability in the WeChat page in Cisco Social Miner 10.0(1)… | 2025-04-13T23:27:31.451000Z |
| var-201511-0263 | Race condition in the administration-panel web service in IBM System Networking Switch Ce… | 2025-04-13T23:27:27.771000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2022:0136-1 | Security update for MozillaFirefox | 2022-01-20T09:06:37Z | 2022-01-20T09:06:37Z |
| suse-su-2022:0135-1 | Security update for busybox | 2022-01-20T09:05:15Z | 2022-01-20T09:05:15Z |
| suse-su-2022:0133-1 | Security update for openstack-monasca-agent, spark, spark-kit, zookeeper | 2022-01-20T09:01:50Z | 2022-01-20T09:01:50Z |
| suse-su-2022:14877-1 | Security update for htmldoc | 2022-01-19T16:58:38Z | 2022-01-19T16:58:38Z |
| suse-su-2022:0131-1 | Security update for the Linux Kernel | 2022-01-19T16:31:33Z | 2022-01-19T16:31:33Z |
| suse-su-2022:0130-1 | Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container | 2022-01-19T16:00:59Z | 2022-01-19T16:00:59Z |
| suse-su-2022:0128-1 | Security update for libvirt | 2022-01-19T10:22:41Z | 2022-01-19T10:22:41Z |
| suse-su-2022:0126-1 | Security update for openstack-monasca-agent, spark, spark-kit, zookeeper | 2022-01-19T08:23:30Z | 2022-01-19T08:23:30Z |
| suse-su-2022:0119-1 | Security update for apache2 | 2022-01-18T16:51:24Z | 2022-01-18T16:51:24Z |
| suse-su-2022:0118-1 | Security update for python-numpy | 2022-01-18T15:41:40Z | 2022-01-18T15:41:40Z |
| suse-su-2022:14876-1 | Security update for java-1_7_1-ibm | 2022-01-18T13:28:58Z | 2022-01-18T13:28:58Z |
| suse-su-2022:0115-1 | Security update for MozillaFirefox | 2022-01-18T12:05:41Z | 2022-01-18T12:05:41Z |
| suse-su-2022:0114-1 | Security update for nodejs14 | 2022-01-18T12:04:03Z | 2022-01-18T12:04:03Z |
| suse-su-2022:0113-1 | Security update for nodejs12 | 2022-01-18T12:03:48Z | 2022-01-18T12:03:48Z |
| suse-su-2022:0112-1 | Security update for nodejs14 | 2022-01-18T12:03:33Z | 2022-01-18T12:03:33Z |
| suse-su-2022:0111-1 | Security update for virglrenderer | 2022-01-18T12:03:17Z | 2022-01-18T12:03:17Z |
| suse-su-2022:0110-1 | Security update for virglrenderer | 2022-01-18T11:05:55Z | 2022-01-18T11:05:55Z |
| suse-su-2022:14875-1 | Security update for java-1_7_1-ibm | 2022-01-18T10:47:47Z | 2022-01-18T10:47:47Z |
| suse-su-2022:0108-1 | Security update for java-1_8_0-ibm | 2022-01-18T10:47:16Z | 2022-01-18T10:47:16Z |
| suse-su-2022:0107-1 | Security update for java-1_8_0-ibm | 2022-01-18T10:44:40Z | 2022-01-18T10:44:40Z |
| suse-su-2022:0104-1 | Security update for SDL2 | 2022-01-18T08:37:25Z | 2022-01-18T08:37:25Z |
| suse-su-2022:0103-1 | Security update for python-Django1 | 2022-01-18T08:36:18Z | 2022-01-18T08:36:18Z |
| suse-su-2022:0102-1 | Security update for python-Django | 2022-01-18T08:36:07Z | 2022-01-18T08:36:07Z |
| suse-su-2022:0101-1 | Security update for nodejs12 | 2022-01-18T08:35:56Z | 2022-01-18T08:35:56Z |
| suse-su-2022:0091-1 | Security update for apache2 | 2022-01-17T15:25:34Z | 2022-01-17T15:25:34Z |
| suse-su-2022:0090-1 | Security update for the Linux Kernel | 2022-01-17T15:24:54Z | 2022-01-17T15:24:54Z |
| suse-su-2022:0088-1 | Security update for ghostscript | 2022-01-17T12:40:20Z | 2022-01-17T12:40:20Z |
| suse-su-2022:0081-1 | Security update for ghostscript | 2022-01-14T11:45:40Z | 2022-01-14T11:45:40Z |
| suse-su-2022:0080-1 | Security update for the Linux Kernel | 2022-01-14T11:08:11Z | 2022-01-14T11:08:11Z |
| suse-su-2022:0079-1 | Security update for the Linux Kernel | 2022-01-14T11:07:51Z | 2022-01-14T11:07:51Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-02957 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-02957） | 2024-12-13 | 2025-02-14 |
| cnvd-2025-02956 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-02956） | 2024-12-13 | 2025-02-14 |
| cnvd-2025-02955 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-02955） | 2024-12-13 | 2025-02-14 |
| cnvd-2025-02954 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-02954） | 2024-12-13 | 2025-02-14 |
| cnvd-2025-02953 | Adobe Experience Manager跨站脚本漏洞（CNVD-2025-02953） | 2024-12-13 | 2025-02-14 |
| cnvd-2025-03272 | Dell Display Manager竞争条件漏洞 | 2025-01-24 | 2025-02-13 |
| cnvd-2025-03271 | Dell PowerProtect DD权限提升漏洞 | 2025-02-10 | 2025-02-13 |
| cnvd-2025-03267 | Google Pixel堆栈缓冲区溢出漏洞 | 2025-02-13 | 2025-02-13 |
| cnvd-2025-03266 | Google Pixel缓冲区溢出漏洞（CNVD-2025-03266） | 2025-02-13 | 2025-02-13 |
| cnvd-2025-03265 | Google Pixel越界写入漏洞（CNVD-2025-03265） | 2025-02-13 | 2025-02-13 |
| cnvd-2025-03203 | Centreon SQL注入漏洞（CNVD-2025-03203） | 2025-02-06 | 2025-02-13 |
| cnvd-2025-03202 | Juniper Networks Junos OS Evolved内存错误引用漏洞 | 2025-02-08 | 2025-02-13 |
| cnvd-2025-02970 | Microsoft Excel远程代码执行漏洞 | 2025-02-13 | 2025-02-13 |
| cnvd-2025-02952 | Linksys E8450 lan_ipaddr参数缓冲区溢出漏洞 | 2025-01-24 | 2025-02-13 |
| cnvd-2025-02951 | Linksys E8450 action参数缓冲区溢出漏洞 | 2025-01-24 | 2025-02-13 |
| cnvd-2025-02901 | Linksys RE7000命令注入漏洞 | 2024-04-15 | 2025-02-13 |
| cnvd-2025-02900 | Linksys E7350 vif_disable命令注入漏洞 | 2025-01-13 | 2025-02-13 |
| cnvd-2025-02899 | Tenda AC18命令注入漏洞（CNVD-2025-02899） | 2025-01-23 | 2025-02-13 |
| cnvd-2025-02898 | Linksys E8450 anonymous_protect_status参数缓冲区溢出漏洞 | 2025-01-24 | 2025-02-13 |
| cnvd-2025-02897 | Linksys E8450 wizard_status命令注入漏洞 | 2025-01-24 | 2025-02-13 |
| cnvd-2025-02856 | SAP Contact Center跨站脚本漏洞（CNVD-2025-02856） | 2021-09-17 | 2025-02-13 |
| cnvd-2025-02855 | Oracle Shipping Execution信息泄露漏洞（CNVD-2025-02855） | 2021-10-21 | 2025-02-13 |
| cnvd-2025-02854 | Netgear NETGEAR D7000缓冲区溢出漏洞 | 2022-01-06 | 2025-02-13 |
| cnvd-2025-02853 | TP-LINK TL-WDR7660 wacWhitelistJsonToBin函数缓冲区溢出漏洞 | 2024-10-17 | 2025-02-13 |
| cnvd-2025-02852 | TP-LINK TL-WR940N缓冲区溢出漏洞（CNVD-2025-02852） | 2025-01-16 | 2025-02-13 |
| cnvd-2025-02831 | IBM Jazz for Service Management访问控制错误漏洞（CNVD-2025-02831） | 2025-01-23 | 2025-02-13 |
| cnvd-2025-02830 | IBM Jazz Foundation跨站脚本漏洞（CNVD-2025-02830） | 2025-01-24 | 2025-02-13 |
| cnvd-2025-02824 | IBM Sterling B2B Integrator跨站脚本漏洞（CNVD-2025-02824） | 2025-02-06 | 2025-02-13 |
| cnvd-2025-02823 | IBM Planning Analytics文件上传漏洞 | 2025-02-06 | 2025-02-13 |
| cnvd-2025-02822 | IBM Maximo Application Suite信息泄露漏洞 | 2025-02-06 | 2025-02-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-092 | Multiples vulnérabilités dans Oracle Java | 2013-02-04T00:00:00.000000 | 2013-02-04T00:00:00.000000 |
| certa-2013-avi-091 | Multiples vulnérabilités dans Apple MacOS X | 2013-02-04T00:00:00.000000 | 2013-02-04T00:00:00.000000 |
| certa-2013-avi-090 | Multiples vulnérabilités dans IBM InfoSphere Balanced Warehouse | 2013-02-04T00:00:00.000000 | 2013-02-04T00:00:00.000000 |
| certa-2013-avi-089 | Vulnérabilité dans HP Network Node Manager i | 2013-02-04T00:00:00.000000 | 2013-02-04T00:00:00.000000 |
| certa-2013-avi-088 | Multiples vulnérabilités dans VMware vSphere | 2013-02-04T00:00:00.000000 | 2013-02-04T00:00:00.000000 |
| certa-2013-avi-087 | Multiples vulnérabilités dans Novell GroupWise | 2013-02-01T00:00:00.000000 | 2013-02-01T00:00:00.000000 |
| certa-2013-avi-086 | Multiples vulnérabilités dans MariaDB | 2013-02-01T00:00:00.000000 | 2013-02-01T00:00:00.000000 |
| certa-2013-avi-085 | Multiples vulnérabilités dans Wireshark | 2013-02-01T00:00:00.000000 | 2013-02-01T00:00:00.000000 |
| certa-2013-avi-084 | Vulnérabilité dans IBM Sterling Connect:Direct | 2013-02-01T00:00:00.000000 | 2013-02-01T00:00:00.000000 |
| certa-2013-avi-083 | Vulnérabilité dans VideoLAN VLC media player | 2013-01-31T00:00:00.000000 | 2013-01-31T00:00:00.000000 |
| certa-2013-avi-082 | Multiples vulnérabilités dans IBM InfoSphere Information Server Suite | 2013-01-31T00:00:00.000000 | 2013-01-31T00:00:00.000000 |
| certa-2013-avi-081 | Multiples vulnérabilités dans Opera | 2013-01-31T00:00:00.000000 | 2013-01-31T00:00:00.000000 |
| certa-2013-avi-080 | Multiples vulnérabilités dans IBM WebSphere Message Broker | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-079 | Vulnérabilité dans EMC AplhaStor | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-078 | Vulnérabilités dans Cisco Portable SDK for UPnP Devices | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-077 | Vulnérabilité dans Cisco Carrier Routing System | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-076 | Multiples vulnérabilités dans Apple TV | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-075 | Multiples vulnérabilités dans Apple iOS | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-074 | Vulnérabilité dans Ruby On Rails | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-073 | Multiples vulnérabilités dans libupnp | 2013-01-30T00:00:00.000000 | 2013-01-30T00:00:00.000000 |
| certa-2013-avi-072 | Vulnérabilité dans le système SCADA Siemens S7 | 2013-01-29T00:00:00.000000 | 2013-01-29T00:00:00.000000 |
| certa-2013-avi-071 | Vulnérabilité dans Hitachi Cosminexus | 2013-01-29T00:00:00.000000 | 2013-01-29T00:00:00.000000 |
| certa-2013-avi-070 | Vulnérabilité dans Cisco Adaptive Security Appliances | 2013-01-29T00:00:00.000000 | 2013-01-29T00:00:00.000000 |
| certa-2013-avi-069 | Vulnérabilité dans ISC BIND | 2013-01-28T00:00:00.000000 | 2013-01-28T00:00:00.000000 |
| certa-2013-avi-068 | Multiples vulnérabilités dans IBM InfoSphere BigInsights | 2013-01-28T00:00:00.000000 | 2013-01-28T00:00:00.000000 |
| certa-2013-avi-067 | Multiples vulnérabilités dans WordPress | 2013-01-28T00:00:00.000000 | 2013-01-28T00:00:00.000000 |
| certa-2013-avi-066 | Multiples vulnérabilités dans Nagios | 2013-01-28T00:00:00.000000 | 2013-01-28T00:00:00.000000 |
| certa-2013-avi-065 | Vulnérabilité dans F5 BIG-IP | 2013-01-28T00:00:00.000000 | 2013-01-28T00:00:00.000000 |
| certa-2013-avi-064 | Multiples vulnérabilités dans les produits Barracuda Networks | 2013-01-25T00:00:00.000000 | 2013-01-25T00:00:00.000000 |
| certa-2013-avi-063 | Vulnérabilité dans les caméras TRENDnet | 2013-01-25T00:00:00.000000 | 2013-01-25T00:00:00.000000 |