Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2021-47784
6.7 (4.0)
7.5 (3.1)
Cyberfox Web Browser 52.9.1 - Denial of Service (PoC) Cyberfox
Cyberfox Web Browser
2026-01-15T15:52:15.185Z 2026-01-15T16:39:13.224Z
CVE-2026-0897
7.1 (4.0)
Denial of Service in Keras via Excessive Memory Alloca… Google
Keras
2026-01-15T14:09:53.603Z 2026-01-15T16:38:18.772Z
CVE-2025-70309
5.5 (3.1)
A stack overflow in the pcmreframe_flush_packet f… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:38:15.352Z
CVE-2026-22914
4.3 (3.1)
An attacker with limited permissions may still be… SICK AG
TDC-X401GL
2026-01-15T13:06:19.599Z 2026-01-15T16:38:01.091Z
CVE-2026-22913
4.3 (3.1)
Improper handling of a URL parameter may allow at… SICK AG
TDC-X401GL
2026-01-15T13:05:40.925Z 2026-01-15T16:37:50.866Z
CVE-2026-22912
4.3 (3.1)
Improper validation of a login parameter may allo… SICK AG
TDC-X401GL
2026-01-15T13:03:15.361Z 2026-01-15T16:37:41.596Z
CVE-2026-22862
7.1 (4.0)
go-ethereum has a DoS via malicious p2p message ethereum
go-ethereum
2026-01-13T20:27:10.979Z 2026-01-15T16:37:30.177Z
CVE-2025-37186
7.8 (3.1)
Local Privilege Escalation Vulnerability in HPE Aruba … Hewlett Packard Enterprise (HPE)
Virtual Intranet Access (VIA)
2026-01-13T20:16:33.606Z 2026-01-15T16:37:19.095Z
CVE-2025-68698
8.7 (4.0)
Jervis has an RSA PKCS#1 v1.5 Padding Vulnerability samrocketman
jervis
2026-01-13T19:16:01.757Z 2026-01-15T16:37:02.420Z
CVE-2021-47799
8.5 (4.0)
6.2 (3.1)
Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation Visual-Tools
Visual Tools DVR VX16
2026-01-15T15:52:15.717Z 2026-01-15T16:32:06.015Z
CVE-2025-20393
10 (3.1)
Cisco Secure Email Gateway and Cisco Secure Email and … Cisco
Cisco Secure Email
2025-12-17T16:47:13.128Z 2026-01-15T16:32:03.740Z
CVE-2021-47819
9.3 (4.0)
9.8 (3.1)
ProjeQtOr Project Management 9.1.4 - Remote Code Execution Projeqtor
ProjeQtOr Project Management
2026-01-15T15:52:16.218Z 2026-01-15T16:09:10.470Z
CVE-2025-64516
7.5 (3.1)
GLPI incorrectly authorizes access to documents glpi-project
glpi
2026-01-15T16:01:03.470Z 2026-01-15T16:08:18.590Z
CVE-2025-67083
5.3 (3.1)
Directory traversal vulnerability in InvoicePlane… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:08:02.045Z
CVE-2024-36856
7.5 (3.1)
RMQTT Broker 0.4.0 allows remote attackers to cau… n/a
n/a
2024-06-12T00:00:00.000Z 2026-01-15T16:06:03.877Z
CVE-2025-67246
7.3 (3.1)
A local information disclosure vulnerability exis… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:02:13.237Z
CVE-2025-14770
7.5 (3.1)
Shipping Rate By Cities <= 2.0.0 - Unauthenticated SQL… tridenttechnolabs
Shipping Rate By Cities
2026-01-14T06:40:04.700Z 2026-01-15T16:01:00.558Z
CVE-2025-14058
2.4 (4.0)
3.2 (3.1)
A potential missing authentication vulnerability … Lenovo
Tab M11 TB330FU TB330XU
2026-01-14T22:20:37.631Z 2026-01-15T15:56:05.902Z
CVE-2025-67079
9.8 (3.1)
File upload vulnerability in Omnispace Agora Proj… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:55:11.489Z
CVE-2025-67082
6.5 (3.1)
An SQL injection vulnerability in InvoicePlane th… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:52:21.994Z
CVE-2025-12357
8.3 (3.1)
7.2 (4.0)
International Standards Organization ISO 15118-2 Impro… ISO 15118-2 Network and Application Protocol Requirements
EV Car Chargers
2025-10-31T15:33:48.343Z 2026-01-15T15:44:58.904Z
CVE-2025-67081
4.9 (3.1)
An SQL injection vulnerability in Itflow through … n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:39:02.842Z
CVE-2025-12895
5.3 (3.1)
Kalium <= 3.29 - Missing Authorization to Unauthentica… Laborator
Kalium 3 | Creative WordPress & WooCommerce Theme
2026-01-15T13:23:24.228Z 2026-01-15T15:35:48.668Z
CVE-2025-13062
8.8 (3.1)
Supreme Modules Lite <= 2.5.62 - Authenticated (Author… divisupreme
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
2026-01-15T13:23:24.756Z 2026-01-15T15:34:53.346Z
CVE-2026-0886
5.3 (3.1)
Incorrect boundary conditions in the Graphics component Mozilla
Firefox
2026-01-13T13:30:57.400Z 2026-01-15T15:34:33.932Z
CVE-2024-21917
9.8 (3.1)
Rockwell Automation FactoryTalk® Service Platform Serv… Rockwell Automation
FactoryTalk® Service Platform
2024-01-31T18:16:27.949Z 2026-01-15T15:34:26.092Z
CVE-2025-13859
6.4 (3.1)
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber… wpcenter
AffiliateX – Amazon Affiliate Plugin
2026-01-15T13:23:25.118Z 2026-01-15T15:33:05.125Z
CVE-2026-0887
4.3 (3.1)
Clickjacking issue, information disclosure in the PDF … Mozilla
Firefox
2026-01-13T13:30:57.847Z 2026-01-15T15:32:44.439Z
CVE-2026-0890
5.4 (3.1)
Spoofing issue in the DOM: Copy & Paste and Drag & Dro… Mozilla
Firefox
2026-01-13T13:30:59.089Z 2026-01-15T15:30:48.870Z
CVE-2026-22818
8.2 (3.1)
JWT algorithm confusion in Hono JWK Auth Middleware wh… honojs
hono
2026-01-13T19:49:52.042Z 2026-01-15T15:29:39.849Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-39534
7.1 (3.1)
WordPress Terms Dictionary Plugin <= 1.5.1 - Reflected… Somonator
Terms Dictionary
2025-10-22T14:32:05.744Z 2026-01-20T14:28:05.517Z
CVE-2025-39497
6.5 (3.1)
WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scri… Dokan
Dokan Pro
2026-01-05T16:51:39.889Z 2026-01-20T14:28:05.472Z
CVE-2025-39484
9.3 (3.1)
WordPress Entrada Theme <= 5.7.7 - SQL Injection vulne… Waituk
Entrada
2026-01-05T16:53:28.100Z 2026-01-20T14:28:05.385Z
CVE-2025-39468
9.8 (3.1)
WordPress Modal Survey plugin <= 2.0.2.0.1 - Local Fil… pantherius
Modal Survey
2025-11-06T15:53:34.539Z 2026-01-20T14:28:05.416Z
CVE-2025-39465
8.1 (3.1)
WordPress Advanced Google Maps plugin <= 5.8.4 - Broke… flippercode
Advanced Google Maps
2025-11-06T15:53:29.145Z 2026-01-20T14:28:05.359Z
CVE-2025-39463
9.8 (3.1)
WordPress Dessau theme < 1.9 - Local File Inclusion vu… Select-Themes
Dessau
2025-11-06T15:53:23.424Z 2026-01-20T14:28:05.344Z
CVE-2025-32657
7.5 (3.1)
WordPress Testimonial Slider and Showcase Pro plugin <… RadiusTheme
Testimonial Slider And Showcase Pro
2025-10-22T14:32:05.506Z 2026-01-20T14:28:05.445Z
CVE-2025-32283
8.8 (3.1)
WordPress Solar Energy theme <= 3.5 - PHP Object Injec… designthemes
Solar Energy
2025-10-22T14:32:05.260Z 2026-01-20T14:28:05.397Z
CVE-2025-32222
9.8 (3.1)
WordPress Widget Logic <= 6.0.5 - Remote Code Executio… Widgetlogic.org
Widget Logic
2025-11-06T15:53:22.717Z 2026-01-20T14:28:05.039Z
CVE-2025-31634
8.8 (3.1)
WordPress Insurance theme <= 3.5 - PHP Object Injectio… designthemes
Insurance
2025-10-22T14:32:05.043Z 2026-01-20T14:28:05.105Z
CVE-2025-31054
7.1 (3.1)
WordPress Bloggie theme <= 2.0.8 - Cross Site Scriptin… Themefy
Bloggie
2025-12-31T20:05:20.832Z 2026-01-20T14:28:04.874Z
CVE-2025-31048
9.9 (3.1)
WordPress Shopo <= 1.1.4 - Arbitrary File Upload Vulne… Themify
Shopo
2026-01-05T10:27:01.221Z 2026-01-20T14:28:05.731Z
CVE-2025-31047
8.8 (3.1)
WordPress Themify Edmin theme <= 2.0.0 - PHP Object In… Themify
Themify Edmin
2026-01-05T10:26:04.107Z 2026-01-20T14:28:04.925Z
CVE-2025-31046
4.3 (3.1)
WordPress AnyWhere Elementor Pro plugin <= 2.29 - Brok… WPvibes
AnyWhere Elementor Pro
2026-01-05T10:24:56.305Z 2026-01-20T14:28:04.908Z
CVE-2025-31044
8.5 (3.1)
WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vu… AA-Team
Premium SEO Pack
2026-01-05T10:23:17.529Z 2026-01-20T14:28:04.811Z
CVE-2025-31029
5.4 (3.1)
WordPress replyMail plugin <= 1.2.0 - Cross Site Reque… bingu
replyMail
2025-11-06T15:53:19.694Z 2026-01-20T14:28:04.716Z
CVE-2025-30944
7.5 (3.1)
WordPress Tablesome Table Premium <= 1.1.23 - Broken A… Essekia
Tablesome Table Premium
2025-10-22T14:32:04.793Z 2026-01-20T14:28:05.029Z
CVE-2025-30633
9.3 (3.1)
WordPress Amazon Native Shopping Recommendations Plugi… AA-Team
Amazon Native Shopping Recommendations
2026-01-05T10:21:09.369Z 2026-01-20T14:28:04.771Z
CVE-2025-30628
8.5 (3.1)
WordPress Amazon Affiliates Addon for WPBakery Page Bu… AA-Team
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer)
2025-12-31T20:03:50.402Z 2026-01-20T14:28:05.322Z
CVE-2025-28973
6.5 (3.1)
WordPress Pro Bulk Watermark Plugin for WordPress <= 2… AA-Team
Pro Bulk Watermark Plugin for WordPress
2025-12-31T20:02:10.769Z 2026-01-20T14:28:04.509Z
CVE-2025-28949
8.5 (3.1)
WordPress Mediabay - WordPress Media Library Folders <… Codedraft
Mediabay - WordPress Media Library Folders
2025-12-31T20:00:22.463Z 2026-01-20T14:28:05.245Z
CVE-2025-27004
6.1 (3.1)
WordPress Famous - Responsive Image And Video Grid Gal… LambertGroup
Famous - Responsive Image And Video Grid Gallery WordPress Plugin
2026-01-08T09:17:41.802Z 2026-01-20T14:28:05.101Z
CVE-2025-27002
6.1 (3.1)
WordPress CountDown With Image or Video Background plu… LambertGroup
CountDown With Image or Video Background
2026-01-08T09:17:41.443Z 2026-01-20T14:28:04.180Z
CVE-2025-23993
9.8 (3.1)
WordPress Felan Framework plugin <= 1.1.3 - SQL Inject… RiceTheme
Felan Framework
2026-01-08T09:17:41.179Z 2026-01-20T14:28:04.367Z
CVE-2025-23757
7.1 (3.1)
WordPress ZD Scribd iPaper plugin <= 1.0 - Reflected C… Proloy Chakroborty
ZD Scribd iPaper
2025-12-31T19:58:33.725Z 2026-01-20T14:28:04.227Z
CVE-2025-23719
7.1 (3.1)
WordPress ZhinaTwitterWidget plugin <= 1.0 - Reflected… zckevin
ZhinaTwitterWidget
2025-12-31T19:57:28.449Z 2026-01-20T14:28:04.844Z
CVE-2025-23707
7.1 (3.1)
WordPress En Masse plugin <= 1.0 - Reflected Cross Sit… Matamko
En Masse
2025-12-31T19:56:21.648Z 2026-01-20T14:28:04.966Z
CVE-2025-23705
7.1 (3.1)
WordPress Zielke Design Project Gallery plugin <= 2.5.… Terry Zielke
Zielke Design Project Gallery
2025-12-31T19:55:23.308Z 2026-01-20T14:28:05.005Z
CVE-2025-23667
7.1 (3.1)
WordPress custom-post-edit plugin <= 1.0.4 - Reflected… Christopher Churchill
custom-post-edit
2025-12-31T19:54:20.344Z 2026-01-20T14:28:05.237Z
CVE-2025-23608
7.1 (3.1)
WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site… Omar Mohamed Mohamoud
LIVE TV
2025-12-31T17:07:06.352Z 2026-01-20T14:28:04.213Z
ID Description Published Updated
fkie_cve-2025-39534 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:33.580 2026-01-20T15:16:24.800
fkie_cve-2025-39497 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-05T17:15:45.183 2026-01-20T15:16:24.693
fkie_cve-2025-39484 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-05T17:15:45.033 2026-01-20T15:16:24.590
fkie_cve-2025-39468 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:51.210 2026-01-20T15:16:24.457
fkie_cve-2025-39465 Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows E… 2025-11-06T16:15:50.700 2026-01-20T15:16:24.050
fkie_cve-2025-39463 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:50.447 2026-01-20T15:16:23.910
fkie_cve-2025-32657 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-10-22T15:15:33.443 2026-01-20T15:16:23.557
fkie_cve-2025-32283 Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object In… 2025-10-22T15:15:33.307 2026-01-20T15:16:23.413
fkie_cve-2025-32222 Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget L… 2025-11-06T16:15:50.237 2026-01-20T15:16:23.270
fkie_cve-2025-31634 Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object I… 2025-10-22T15:15:33.180 2026-01-20T15:16:23.097
fkie_cve-2025-31054 Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue … 2025-12-31T20:15:42.500 2026-01-20T15:16:22.983
fkie_cve-2025-31048 Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web … 2026-01-05T11:17:40.780 2026-01-20T15:16:22.870
fkie_cve-2025-31047 Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.Th… 2026-01-05T11:17:40.637 2026-01-20T15:16:22.767
fkie_cve-2025-31046 Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly… 2026-01-05T11:17:40.490 2026-01-20T15:16:22.657
fkie_cve-2025-31044 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-05T11:17:40.343 2026-01-20T15:16:22.547
fkie_cve-2025-31029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:50.067 2026-01-20T15:16:22.390
fkie_cve-2025-30944 Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Acc… 2025-10-22T15:15:33.033 2026-01-20T15:16:22.233
fkie_cve-2025-30633 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-05T11:17:40.183 2026-01-20T15:16:22.120
fkie_cve-2025-30628 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-31T20:15:42.353 2026-01-20T15:16:22.010
fkie_cve-2025-28973 Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows… 2025-12-31T20:15:42.207 2026-01-20T15:16:21.903
fkie_cve-2025-28949 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-31T20:15:42.060 2026-01-20T15:16:21.647
fkie_cve-2025-27004 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-08T10:15:48.923 2026-01-20T15:16:19.780
fkie_cve-2025-27002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-08T10:15:48.797 2026-01-20T15:16:19.533
fkie_cve-2025-23993 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-08T10:15:48.650 2026-01-20T15:16:19.363
fkie_cve-2025-23757 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.917 2026-01-20T15:16:19.250
fkie_cve-2025-23719 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.770 2026-01-20T15:16:19.120
fkie_cve-2025-23707 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.630 2026-01-20T15:16:19.000
fkie_cve-2025-23705 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.483 2026-01-20T15:16:18.867
fkie_cve-2025-23667 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:40.550 2026-01-20T15:16:18.757
fkie_cve-2025-23608 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T18:15:44.007 2026-01-20T15:16:18.647
ID Severity Description Published Updated
ghsa-86gr-w4v6-64rv
6.7 (3.1)
Memory corruption while handling sensor utility operations. 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-83wc-rp5h-7428
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-676q-7fgp-3prv
5.5 (3.1)
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL… 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-5w7p-x2hw-f4q6
7.8 (3.1)
Memory corruption when copying overlapping buffers during memory operations due to incorrect offset… 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-4jjv-vvhg-7rw8
4.3 (3.1)
Missing Authorization vulnerability in ThemeHunk Oneline Lite allows Exploiting Incorrectly Configu… 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-3rcg-83x5-6r67
7.8 (3.1)
Memory corruption while processing a video session to set video parameters. 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-2923-vx22-37wp
7.8 (3.1)
Memory corruption while passing pages to DSP with an unaligned starting address. 2026-01-07T12:31:24Z 2026-01-07T12:31:24Z
ghsa-xc38-xcg4-vm4h
2.9 (3.1)
Improper authentication and missing CSRF protection in the local setup interface component in HCL B… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-v3p7-7ccr-qm48
6.4 (3.1)
The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-rr6h-6fmr-fx45
2.2 (3.1)
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-q66v-vvpj-vg9p
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-pmgq-h38f-3h8p
8.8 (3.1)
The WP Enable WebP plugin for WordPress is vulnerable to arbitrary file uploads due to improper fil… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-jcx6-7p9q-vv8c
4.4 (3.1)
The Simple User Meta Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-j3m2-5cm7-pmh3
4.3 (3.1)
The Newsletter Email Subscribe plugin for WordPress is vulnerable to Cross-Site Request Forgery in … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-hhwm-q72q-9mg9
5.3 (4.0)
AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that all… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-h8f4-2pmc-rc85
6.5 (3.1)
The Flashcard plugin for WordPress is vulnerable to Path Traversal in all versions up to, and inclu… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-h4x2-9gh9-6543
4.3 (3.1)
The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-gwjh-c9m2-g2j9
6.5 (3.1)
The Bit Form – Contact Form Plugin plugin for WordPress is vulnerable to unauthorized workflow exec… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-g869-mjgr-xmch
4.4 (3.1)
The Page Keys plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_key’ … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-f8vf-66gm-85xg
6.1 (3.1)
The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limit… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-f7fp-6q7q-4mc8
7.1 (3.1)
The WP Photo Album Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-f53f-v4m9-rh4j
6.4 (3.1)
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Script… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-cp75-95q9-g954
5.5 (3.1)
Transient DOS while parsing video packets received from the video firmware. 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-ch77-2q3c-8f9w
2.0 (3.1)
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-c6ww-cj2q-f8xm
5.4 (3.1)
The LearnPress – WordPress LMS Plugin for WordPress is vulnerable to unauthorized file deletion in … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-9w2c-ww5q-2rj7
9.8 (3.1)
The Optional Email plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-8h37-wg3p-5fr4
6.7 (3.1)
Memory corruption while processing a config call from userspace. 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-8cm9-gx9f-q3wm
4.4 (3.1)
The Key Figures plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the kf_field_… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-85jr-qp34-798j
4.4 (3.1)
The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-68g3-qq95-rpv3
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.T… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-26482 An HTML injection vulnerability in the Edit Content Layout module of Kirby CMS v4.1.0 all… 2024-02-20T06:02:29.320101Z
gsd-2024-26402 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.319862Z
gsd-2024-26994 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.319622Z
gsd-2024-26776 In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: … 2024-02-20T06:02:29.319393Z
gsd-2024-26766 In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h … 2024-02-20T06:02:29.319161Z
gsd-2024-26981 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.318590Z
gsd-2024-26588 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prev… 2024-02-20T06:02:29.318293Z
gsd-2024-26688 In the Linux kernel, the following vulnerability has been resolved: fs,hugetlb: fix NULL… 2024-02-20T06:02:29.317208Z
gsd-2024-26570 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.316980Z
gsd-2024-26718 In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity:… 2024-02-20T06:02:29.316745Z
gsd-2024-26590 In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsist… 2024-02-20T06:02:29.316519Z
gsd-2024-26698 In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix race … 2024-02-20T06:02:29.316281Z
gsd-2024-26713 In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iomm… 2024-02-20T06:02:29.316050Z
gsd-2024-26839 In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix a memle… 2024-02-20T06:02:29.315826Z
gsd-2024-26817 In the Linux kernel, the following vulnerability has been resolved: amdkfd: use calloc i… 2024-02-20T06:02:29.315588Z
gsd-2024-26684 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: … 2024-02-20T06:02:29.315283Z
gsd-2024-26846 In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait… 2024-02-20T06:02:29.315055Z
gsd-2024-26715 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: F… 2024-02-20T06:02:29.314552Z
gsd-2024-26931 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.314313Z
gsd-2024-26554 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.314084Z
gsd-2024-26917 In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: … 2024-02-20T06:02:29.313596Z
gsd-2024-26723 In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix crash w… 2024-02-20T06:02:29.313370Z
gsd-2024-26332 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.312879Z
gsd-2024-26830 In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow u… 2024-02-20T06:02:29.312654Z
gsd-2024-26735 In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possib… 2024-02-20T06:02:29.312105Z
gsd-2024-26484 A stored cross-site scripting (XSS) vulnerability in the Edit Content Layout module of Ki… 2024-02-20T06:02:29.311843Z
gsd-2024-26897 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay a… 2024-02-20T06:02:29.311612Z
gsd-2024-26563 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.310856Z
gsd-2024-26869 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncat… 2024-02-20T06:02:29.310586Z
gsd-2024-26722 In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix de… 2024-02-20T06:02:29.310077Z
ID Description Published Updated
mal-2025-185362 Malicious code in ablation-rigel-phoenix-despina (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185361 Malicious code in ablation-entanglement-got-epigenetics (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185360 Malicious code in abiogenesis-version-magnetosphere-typeorm (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185359 Malicious code in abiogenesis-terraforming-sublimation-supercluster (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185358 Malicious code in abiogenesis-start-petrology-webdriverio (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185357 Malicious code in abiogenesis-proxima-astro-backend (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185356 Malicious code in abiogenesis-cluster-astrophysics-epigenetics (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185355 Malicious code in abiogenesis-cli-tachyon-miranda (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185354 Malicious code in abiogenesis-cli-start-jest (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185353 Malicious code in abiogenesis-airbnb-supernova-rollup (npm) 2025-11-13T03:23:14Z 2025-11-13T03:23:14Z
mal-2025-185349 Malicious code in unise-kit-bogv (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185348 Malicious code in unise-kit-bograttipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185347 Malicious code in unise-kit-bogratipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185346 Malicious code in unise-kit-bogratatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185345 Malicious code in unise-kit-bograipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185344 Malicious code in unise-kit-bograida (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185343 Malicious code in unise-kit-bograia (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185342 Malicious code in unise-kit-bograi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185341 Malicious code in unise-kit-bogi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185340 Malicious code in unise-kit-bogavotawfi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185339 Malicious code in unise-kit-bogavotaawfi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185338 Malicious code in unise-kit-bogavofi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185337 Malicious code in unise-kit-bogavi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185336 Malicious code in unise-kit-bogavfi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185335 Malicious code in unise-kit-bogai (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185334 Malicious code in unise-kit-bog (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185333 Malicious code in unise-kiat-boipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185332 Malicious code in unise-kiat-boida (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185331 Malicious code in unise-kiat-bogratatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185330 Malicious code in unise-kiat-bogatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2025:10101 Red Hat Security Advisory: microcode_ctl security update 2025-07-01T15:24:53+00:00 2025-11-21T19:18:48+00:00
rhsa-2025:10074 Red Hat Security Advisory: firefox security update 2025-07-01T12:07:53+00:00 2025-11-21T19:18:47+00:00
rhsa-2025:10073 Red Hat Security Advisory: firefox security update 2025-07-01T21:25:44+00:00 2025-11-21T19:18:47+00:00
rhsa-2025:10072 Red Hat Security Advisory: firefox security update 2025-07-01T22:14:34+00:00 2025-11-21T19:18:47+00:00
rhsa-2025:10010 Red Hat Security Advisory: mod_auth_openidc:2.3 security update 2025-07-01T01:05:41+00:00 2025-11-21T19:18:45+00:00
rhsa-2025:10009 Red Hat Security Advisory: kernel security update 2025-07-01T01:11:26+00:00 2025-11-21T19:18:44+00:00
rhsa-2025:10008 Red Hat Security Advisory: mod_auth_openidc security update 2025-07-01T00:44:26+00:00 2025-11-21T19:18:44+00:00
rhsa-2025:10007 Red Hat Security Advisory: mod_auth_openidc security update 2025-07-01T01:32:11+00:00 2025-11-21T19:18:44+00:00
rhsa-2025:10006 Red Hat Security Advisory: mod_auth_openidc:2.3 security update 2025-07-01T00:43:16+00:00 2025-11-21T19:18:44+00:00
rhsa-2025:0914 Red Hat Security Advisory: galera and mariadb security update 2025-02-04T09:20:28+00:00 2025-11-21T19:18:44+00:00
rhsa-2025:10005 Red Hat Security Advisory: kernel security update 2025-07-01T00:41:17+00:00 2025-11-21T19:18:43+00:00
rhsa-2025:10004 Red Hat Security Advisory: mod_auth_openidc:2.3 security update 2025-07-01T00:49:26+00:00 2025-11-21T19:18:43+00:00
rhsa-2025:10003 Red Hat Security Advisory: mod_auth_openidc:2.3 security update 2025-07-01T00:57:21+00:00 2025-11-21T19:18:43+00:00
rhsa-2025:10002 Red Hat Security Advisory: mod_auth_openidc security update 2025-07-01T00:38:56+00:00 2025-11-21T19:18:42+00:00
rhsa-2025:0949 Red Hat Security Advisory: libsoup security update 2025-02-04T06:38:28+00:00 2025-11-21T19:18:41+00:00
rhsa-2025:0936 Red Hat Security Advisory: mingw-glib2 security update 2025-02-04T00:31:57+00:00 2025-11-21T19:18:41+00:00
rhsa-2025:0925 Red Hat Security Advisory: bzip2 security update 2025-02-04T09:23:18+00:00 2025-11-21T19:18:41+00:00
rhsa-2025:0923 Red Hat Security Advisory: buildah security update 2025-02-04T09:18:18+00:00 2025-11-21T19:18:41+00:00
rhsa-2025:0922 Red Hat Security Advisory: podman security update 2025-02-04T01:13:07+00:00 2025-11-21T19:18:40+00:00
rhsa-2025:0917 Red Hat Security Advisory: keepalived security update 2025-02-04T03:34:17+00:00 2025-11-21T19:18:40+00:00
rhsa-2025:0912 Red Hat Security Advisory: mariadb:10.11 security update 2025-02-04T09:18:18+00:00 2025-11-21T19:18:39+00:00
rhsa-2025:0903 Red Hat Security Advisory: libsoup security update 2025-02-03T16:21:16+00:00 2025-11-21T19:18:39+00:00
rhsa-2025:0889 Red Hat Security Advisory: libsoup security update 2025-02-03T10:34:36+00:00 2025-11-21T19:18:38+00:00
rhsa-2025:0882 Red Hat Security Advisory: libsoup security update 2025-02-03T01:05:04+00:00 2025-11-21T19:18:37+00:00
rhsa-2025:0878 Red Hat Security Advisory: OpenShift Container Platform 4.17.15 packages and security update 2025-02-05T13:50:46+00:00 2025-11-21T19:18:35+00:00
rhsa-2025:0848 Red Hat Security Advisory: libsoup security update 2025-01-30T16:24:01+00:00 2025-11-21T19:18:34+00:00
rhsa-2025:0847 Red Hat Security Advisory: libsoup security update 2025-01-30T16:24:02+00:00 2025-11-21T19:18:33+00:00
rhsa-2025:0845 Red Hat Security Advisory: git-lfs security update 2025-01-30T14:58:11+00:00 2025-11-21T19:18:33+00:00
rhsa-2025:0838 Red Hat Security Advisory: libsoup security update 2025-01-30T13:30:41+00:00 2025-11-21T19:18:32+00:00
rhsa-2025:0825 Red Hat Security Advisory: git-lfs security update 2025-01-30T04:56:30+00:00 2025-11-21T19:18:30+00:00
ID Description Published Updated
msrc_cve-2022-25308 A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application which leads to a possible memory leak or a denial of service. 2022-09-02T00:00:00.000Z 2022-09-09T00:00:00.000Z
msrc_cve-2022-1117 A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution. 2022-08-02T00:00:00.000Z 2022-09-09T00:00:00.000Z
msrc_cve-2022-3099 Use After Free in vim/vim 2022-09-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-3078 An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c. 2022-09-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-3028 A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket. 2022-08-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-2806 It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6 ovirt-log-collector-4.4.7-2.el8ev 2022-09-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-1976 A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to memory corruption and possible privilege escalation. 2022-08-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-1271 An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example a crafted file name) this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote low privileged attacker to force zgrep to write arbitrary files on the system. 2022-08-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-1263 A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls causing a kernel oops condition that results in a denial of service. 2022-08-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2020-35538 A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo. 2022-08-02T00:00:00.000Z 2022-09-08T00:00:00.000Z
msrc_cve-2022-2153 A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls causing a kernel oops condition that results in a denial of service. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-1508 An out-of-bounds read flaw was found in the Linux kernel’s io_uring module in the way a user triggers the io_read() function with some special parameters. This flaw allows a local user to read some memory out of bounds. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-1205 A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-1199 A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-1198 A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-1043 A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory crash the system or escalate privileges. 2022-08-02T00:00:00.000Z 2022-09-07T00:00:00.000Z
msrc_cve-2022-38791 In MariaDB before 10.9.2 compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure which allows local users to trigger a deadlock. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-3037 Use After Free in vim/vim 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-3016 Use After Free in vim/vim 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-2953 LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 48d6ece8. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-1204 A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-0171 A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV). 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-0168 A denial of service (DOS) issue was found in the Linux kernel’s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local privileged (CAP_SYS_ADMIN) attacker to crash the system. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2021-35939 It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2021-35937 A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501 potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2022-08-02T00:00:00.000Z 2022-09-03T00:00:00.000Z
msrc_cve-2022-38012 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2022-09-13T07:00:00.000Z 2022-09-01T07:00:00.000Z
msrc_cve-2022-38533 In GNU Binutils before 2.40 there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
msrc_cve-2022-2255 A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
msrc_cve-2021-43767 Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication a man-in-the-middle attacker can inject false responses to the client's first few queries. Despite the use of SSL certificate verification and encryption Odyssey will pass these results to client as if they originated from valid server. This is similar to CVE-2021-23222 for PostgreSQL. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
msrc_cve-2021-43766 Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
ID Description Updated
var-201411-0146 The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does… 2025-04-13T23:27:21.644000Z
var-201403-0328 Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user… 2025-04-13T23:26:55.595000Z
var-201404-0033 The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices al… 2025-04-13T23:26:55.524000Z
var-201404-0430 Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC … 2025-04-13T23:26:55.222000Z
var-201404-0443 CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU … 2025-04-13T23:26:55.174000Z
var-201405-0170 Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service… 2025-04-13T23:26:54.930000Z
var-201405-0212 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X … 2025-04-13T23:26:54.896000Z
var-201405-0317 Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, gene… 2025-04-13T23:26:54.803000Z
var-201405-0338 F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to cha… 2025-04-13T23:26:54.768000Z
var-201405-0548 Unspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Conne… 2025-04-13T23:26:54.647000Z
var-201406-0304 The web framework in Cisco WebEx Meeting Server does not properly restrict the content of… 2025-04-13T23:26:54.476000Z
var-201406-0365 Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 … 2025-04-13T23:26:54.431000Z
var-201407-0009 Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before… 2025-04-13T23:26:54.317000Z
var-201407-0364 Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places p… 2025-04-13T23:26:50.368000Z
var-201407-0363 Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict t… 2025-04-13T23:26:50.337000Z
var-201409-0059 Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1… 2025-04-13T23:26:49.179000Z
var-201410-0056 The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 … 2025-04-13T23:26:48.998000Z
var-201410-0058 The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attac… 2025-04-13T23:26:48.969000Z
var-201410-1001 The SQL*Net inspection engine in Cisco ASA Software 7.2 before 7.2(5.13), 8.2 before 8.2(… 2025-04-13T23:26:48.773000Z
var-201411-0254 Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) b… 2025-04-13T23:26:48.459000Z
var-201412-0282 BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50… 2025-04-13T23:26:48.178000Z
var-201412-0303 The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attacke… 2025-04-13T23:26:48.139000Z
var-201411-0114 Cross-site scripting (XSS) vulnerability in the Quick Stats page (psilan.cgi) in ZTE ZXDS… 2025-04-13T23:26:48.025000Z
var-201411-0121 Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remo… 2025-04-13T23:26:47.995000Z
var-201411-0115 Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote attacke… 2025-04-13T23:26:47.961000Z
var-201411-0113 Multiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remo… 2025-04-13T23:26:47.923000Z
var-201412-0616 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1… 2025-04-13T23:26:47.684000Z
var-201501-0590 index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to b… 2025-04-13T23:26:47.443000Z
var-201501-0735 Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes i… 2025-04-13T23:26:47.381000Z
var-201502-0073 SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attac… 2025-04-13T23:26:47.290000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:4200-1 Security update for kernel-firmware 2021-12-30T08:36:48Z 2021-12-30T08:36:48Z
suse-su-2021:4193-1 Security update for gegl 2021-12-28T15:13:59Z 2021-12-28T15:13:59Z
suse-su-2021:4192-1 Security update for permissions 2021-12-28T09:40:00Z 2021-12-28T09:40:00Z
suse-su-2021:4191-1 Security update for net-snmp 2021-12-27T16:28:08Z 2021-12-27T16:28:08Z
suse-su-2021:4190-1 Security update for logstash 2021-12-24T08:36:07Z 2021-12-24T08:36:07Z
suse-su-2021:4015-2 Security update for python3 2021-12-23T11:37:47Z 2021-12-23T11:37:47Z
suse-su-2021:4186-1 Security update for go1.17 2021-12-23T11:36:19Z 2021-12-23T11:36:19Z
suse-su-2021:14870-1 Security update for openssh-openssl1 2021-12-23T11:34:43Z 2021-12-23T11:34:43Z
suse-ru-2021:4173-1 Recommended update for samba 2021-12-23T09:12:05Z 2021-12-23T09:12:05Z
suse-su-2021:14869-1 Security update for htmldoc 2021-12-23T08:55:53Z 2021-12-23T08:55:53Z
suse-su-2021:4171-1 Security update for runc 2021-12-23T08:55:23Z 2021-12-23T08:55:23Z
suse-su-2021:4170-1 Security update for libaom 2021-12-23T08:54:03Z 2021-12-23T08:54:03Z
suse-su-2021:4169-1 Security update for go1.16 2021-12-23T08:53:15Z 2021-12-23T08:53:15Z
suse-su-2021:4168-1 Security update for libvpx 2021-12-23T08:51:44Z 2021-12-23T08:51:44Z
suse-su-2021:4161-1 Security update for python-Babel 2021-12-22T15:20:17Z 2021-12-22T15:20:17Z
suse-su-2021:4160-1 Security update for logstash, elasticsearch, kafka, zookeeper, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-thresh 2021-12-22T15:18:54Z 2021-12-22T15:18:54Z
suse-su-2021:4155-1 Security update for libqt4 2021-12-22T10:05:36Z 2021-12-22T10:05:36Z
suse-su-2021:4154-1 Security update for p11-kit 2021-12-22T10:04:12Z 2021-12-22T10:04:12Z
suse-su-2021:4153-1 Security update for openssh 2021-12-22T10:01:07Z 2021-12-22T10:01:07Z
suse-su-2021:4152-1 Security update for ansible 2021-12-22T09:58:27Z 2021-12-22T09:58:27Z
suse-su-2021:4150-1 Security update for MozillaThunderbird 2021-12-22T09:58:04Z 2021-12-22T09:58:04Z
suse-ru-2021:4149-1 Recommended update for samba 2021-12-22T09:41:22Z 2021-12-22T09:41:22Z
suse-su-2021:4147-1 Security update for chrony 2021-12-22T08:24:51Z 2021-12-22T08:24:51Z
suse-su-2021:4136-1 Security update for xorg-x11-server 2021-12-21T14:34:23Z 2021-12-21T14:34:23Z
suse-ru-2021:4127-1 Recommended update for samba 2021-12-20T14:55:55Z 2021-12-20T14:55:55Z
suse-ru-2021:4126-1 Recommended update for samba 2021-12-20T14:54:46Z 2021-12-20T14:54:46Z
suse-su-2021:4124-1 Security update for xorg-x11-server 2021-12-20T11:59:18Z 2021-12-20T11:59:18Z
suse-su-2021:14867-1 Security update for xorg-x11-server 2021-12-20T11:55:31Z 2021-12-20T11:55:31Z
suse-su-2021:4122-1 Security update for xorg-x11-server 2021-12-20T11:54:49Z 2021-12-20T11:54:49Z
suse-su-2021:4121-1 Security update for xorg-x11-server 2021-12-20T11:54:15Z 2021-12-20T11:54:15Z
ID Description Published Updated
cnvd-2025-02843 Adobe Connect访问控制错误漏洞(CNVD-2025-02843) 2024-12-13 2025-02-11
cnvd-2025-02842 Adobe Connect跨站脚本漏洞(CNVD-2025-02842) 2024-12-13 2025-02-11
cnvd-2025-02841 Adobe Connect跨站脚本漏洞(CNVD-2025-02841) 2024-12-13 2025-02-11
cnvd-2025-02840 Adobe Connect跨站脚本漏洞(CNVD-2025-02840) 2024-12-13 2025-02-11
cnvd-2025-02839 Adobe Acrobat Reader缓冲区溢出漏洞(CNVD-2025-02839) 2024-12-13 2025-02-11
cnvd-2025-02838 Adobe Acrobat Reader代码问题漏洞 2024-12-13 2025-02-11
cnvd-2025-02837 Microsoft Windows Kernel日志信息泄露漏洞(CNVD-2025-02837) 2025-01-17 2025-02-11
cnvd-2025-02836 Microsoft Windows Installer权限提升漏洞(CNVD-2025-02836) 2025-01-17 2025-02-11
cnvd-2025-02835 Microsoft Windows Installer权限提升漏洞(CNVD-2025-02835) 2025-01-17 2025-02-11
cnvd-2025-02834 Microsoft Message Queuing资源管理错误漏洞(CNVD-2025-02834) 2025-01-17 2025-02-11
cnvd-2025-02833 Microsoft Message Queuing资源管理错误漏洞 2025-01-17 2025-02-11
cnvd-2025-02832 Microsoft Directx资源管理错误漏洞 2025-01-17 2025-02-11
cnvd-2025-02829 Microsoft Excel代码问题漏洞(CNVD-2025-02829) 2025-01-24 2025-02-11
cnvd-2025-02828 Microsoft Office Visio远程代码执行漏洞(CNVD-2025-02828) 2025-01-24 2025-02-11
cnvd-2025-02827 Microsoft Office Visio远程代码执行漏洞(CNVD-2025-02827) 2025-01-24 2025-02-11
cnvd-2025-02818 IBM Cognos Mobile Client信任管理问题漏洞 2025-02-06 2025-02-11
cnvd-2025-02815 IBM Analytics Content Hub缓冲区溢出漏洞 2025-02-06 2025-02-11
cnvd-2025-02814 IBM App Connect Enterprise Certified Container拒绝服务漏洞(CNVD-2025-02814) 2025-02-08 2025-02-11
cnvd-2025-02723 D-Link DAR-7000-40 resmanage.php命令注入漏洞 2024-05-16 2025-02-11
cnvd-2025-02722 itsourcecode Monbela Tourist Inn Online Reservation System SQL注入漏洞 2024-06-20 2025-02-11
cnvd-2025-02721 Samsung SmartThings权限管理漏洞(CNVD-2025-02721) 2021-11-09 2025-02-11
cnvd-2025-02720 Samsung Pass访问验证错误漏洞(CNVD-2025-02720) 2021-11-09 2025-02-11
cnvd-2025-02719 Samsung Tags信息泄露漏洞 2021-12-14 2025-02-11
cnvd-2025-02718 Samsung Internet用户下载界面错误漏洞 2022-01-17 2025-02-11
cnvd-2025-02717 Samsung Health不当会话管理漏洞 2022-01-18 2025-02-11
cnvd-2025-02716 Samsung SecSettings权限管理不当漏洞(CNVD-2025-02716) 2022-01-18 2025-02-11
cnvd-2025-02715 Samsung Mobile DressRoom任意文件访问漏洞 2022-01-18 2025-02-11
cnvd-2025-02714 Weasis密钥泄露漏洞 2024-12-19 2025-02-11
cnvd-2025-02619 Samsung Knox Guard执行错误漏洞 2022-01-21 2025-02-10
cnvd-2025-02618 OTFCC缓冲区溢出漏洞(CNVD-2025-02618) 2022-07-11 2025-02-10
ID Description Published Updated
certa-2013-avi-032 Vulnérabilité dans Oracle JD Edwards 2013-01-16T00:00:00.000000 2013-01-16T00:00:00.000000
certa-2013-avi-031 Multiples vulnérabilités dans Oracle Sun Products Suite 2013-01-16T00:00:00.000000 2013-01-16T00:00:00.000000
certa-2013-avi-030 Vulnérabilité dans Samba 2013-01-16T00:00:00.000000 2013-01-16T00:00:00.000000
certa-2013-avi-028 Multiples vulnérabilités dans Avaya Call Management System 2013-01-15T00:00:00.000000 2013-01-15T00:00:00.000000
certa-2013-avi-027 Vulnérabilité dans IBM TS3310 Tape Library 2013-01-15T00:00:00.000000 2013-01-15T00:00:00.000000
certa-2013-avi-026 Vulnérabilité dans le système SCADA Siemens Simatic RF Manager 2013-01-15T00:00:00.000000 2013-01-15T00:00:00.000000
certa-2013-avi-025 Vulnérabilité dans Citrix CloudPlatform 2013-01-14T00:00:00.000000 2013-01-14T00:00:00.000000
certa-2013-avi-024 Vulnérabilités dans Ruby on Rails 2013-01-11T00:00:00.000000 2013-01-11T00:00:00.000000
certa-2013-avi-023 Multiples vulnérabilités dans Google Chrome 2013-01-11T00:00:00.000000 2013-01-11T00:00:00.000000
certa-2013-avi-022 Multiples vulnérabilités dans les produits Mozilla 2013-01-10T00:00:00.000000 2013-01-10T00:00:00.000000
certa-2013-avi-021 Vulnérabilité dans le système SCADA RuggedCom 2013-01-10T00:00:00.000000 2013-01-10T00:00:00.000000
certa-2013-avi-020 Vulnérabilité dans Cisco Unified IP Phone 2013-01-10T00:00:00.000000 2013-01-10T00:00:00.000000
certa-2013-avi-019 Vulnérabilité dans Cisco Prime LAN Management Solution 2013-01-10T00:00:00.000000 2013-01-10T00:00:00.000000
certa-2013-avi-018 Vulnérabilité dans le système SCADA Siemens ProcessSuite 2013-01-10T00:00:00.000000 2013-01-10T00:00:00.000000
certa-2013-avi-017 Multiples vulnérabilités dans Sybase Adapter Server Entreprise 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-016 Multiples vulnérabilités dans HP OpenVMS 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-015 Multiples vulnérabilités dans Adobe Reader et Acrobat 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-014 Vulnérabilité dans Adobe Flash Player 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-013 Multiples vulnérabilités dans Microsoft .NET Framework 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-012 Vulnérabilité dans Microsoft Windows 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-011 Multiples vulnérabilités dans Microsoft XML Core Services 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-010 Vulnérabilité dans les pilotes en mode noyau de Windows 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-009 Vulnérabilité dans Microsoft .NET Framework 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-008 Multiples vulnérabilités dans System Center Operations Manager de Microsoft 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-007 Vulnérabilité dans les composants du spouleur d'impression Windows 2013-01-09T00:00:00.000000 2013-01-09T00:00:00.000000
certa-2013-avi-006 Vulnérabilité dans ProFTPD 2013-01-08T00:00:00.000000 2013-01-08T00:00:00.000000
certa-2013-avi-005 Vulnérabilité dans EMC NetWorker 2013-01-08T00:00:00.000000 2013-01-08T00:00:00.000000
certa-2013-avi-029 Multiples vulnérabilités dans Adobe ColdFusion 2013-01-07T00:00:00.000000 2013-01-07T00:00:00.000000
certa-2013-avi-004 Vulnérabilité dans RPM Package Manager 2013-01-07T00:00:00.000000 2013-01-07T00:00:00.000000
certa-2013-avi-003 Vulnérabilités dans Asterisk 2013-01-03T00:00:00.000000 2013-01-03T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated