Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-13062
8.8 (3.1)
Supreme Modules Lite <= 2.5.62 - Authenticated (Author… divisupreme
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder
2026-01-15T13:23:24.756Z 2026-01-15T15:34:53.346Z
CVE-2026-0886
5.3 (3.1)
Incorrect boundary conditions in the Graphics component Mozilla
Firefox
2026-01-13T13:30:57.400Z 2026-01-15T15:34:33.932Z
CVE-2024-21917
9.8 (3.1)
Rockwell Automation FactoryTalk® Service Platform Serv… Rockwell Automation
FactoryTalk® Service Platform
2024-01-31T18:16:27.949Z 2026-01-15T15:34:26.092Z
CVE-2025-13859
6.4 (3.1)
AffiliateX 1.0.0 - 1.3.9.3 - Authenticated (Subscriber… wpcenter
AffiliateX – Amazon Affiliate Plugin
2026-01-15T13:23:25.118Z 2026-01-15T15:33:05.125Z
CVE-2026-0887
4.3 (3.1)
Clickjacking issue, information disclosure in the PDF … Mozilla
Firefox
2026-01-13T13:30:57.847Z 2026-01-15T15:32:44.439Z
CVE-2026-0890
5.4 (3.1)
Spoofing issue in the DOM: Copy & Paste and Drag & Dro… Mozilla
Firefox
2026-01-13T13:30:59.089Z 2026-01-15T15:30:48.870Z
CVE-2026-22818
8.2 (3.1)
JWT algorithm confusion in Hono JWK Auth Middleware wh… honojs
hono
2026-01-13T19:49:52.042Z 2026-01-15T15:29:39.849Z
CVE-2025-67078
N/A
Cross site scripting (XSS) vulnerability in Omnis… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:16:33.707Z
CVE-2025-70744
7.5 (3.1)
Tenda AX-1806 v1.0.0.1 was discovered to contain … n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:08:20.236Z
CVE-2024-50566
7.2 (3.1)
A improper neutralization of special elements use… Fortinet
FortiManager
2025-01-14T14:08:35.384Z 2026-01-15T15:05:48.819Z
CVE-2025-71019
7.5 (3.1)
Tenda AX-1806 v1.0.0.1 was discovered to contain … n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T15:04:49.969Z
CVE-2025-53843
6.9 (3.1)
A stack-based buffer overflow vulnerability in Fo… Fortinet
FortiOS
2025-11-18T17:01:28.239Z 2026-01-15T14:53:16.203Z
CVE-2026-22032
4.3 (3.1)
Directus has open redirect in SAML directus
directus
2026-01-08T14:32:06.619Z 2026-01-15T14:53:09.871Z
CVE-2026-22644
5.3 (3.1)
Certain requests pass the authentication token in… SICK AG
Incoming Goods Suite
2026-01-15T13:14:13.694Z 2026-01-15T14:52:44.218Z
CVE-2026-0600
6.2 (4.0)
Nexus Repository 3 - Server-Side Request Forgery in Pr… Sonatype
Nexus Repository
2026-01-14T22:29:09.256Z 2026-01-15T14:51:42.898Z
CVE-2025-13455
7.3 (4.0)
7.8 (3.1)
A vulnerability was reported in ThinkPlus configu… Lenovo
ThinkPlus FU100
2026-01-14T22:18:24.196Z 2026-01-15T14:49:46.172Z
CVE-2025-14457
3.7 (3.1)
Drag and Drop Multiple File Upload for Contact Form 7 … glenwpcoder
Drag and Drop Multiple File Upload for Contact Form 7
2026-01-15T06:45:04.078Z 2026-01-15T14:47:51.069Z
CVE-2025-14448
5.4 (3.1)
WP-Members Membership Plugin <= 3.5.4.3 - Authenticate… cbutlerjr
WP-Members Membership Plugin
2026-01-15T05:24:19.163Z 2026-01-15T14:47:50.023Z
CVE-2026-0976
3.7 (3.1)
Org.keycloak/keycloak-quarkus-server: keycloak: proxy … Red Hat
Red Hat Build of Keycloak
2026-01-15T12:06:21.251Z 2026-01-15T14:45:41.540Z
CVE-2026-0601
5.1 (4.0)
Nexus Repository 3 - Cross-Site Scripting Sonatype
Nexus Repository
2026-01-14T22:05:17.135Z 2026-01-15T14:43:42.991Z
CVE-2026-22907
9.9 (3.1)
An attacker may gain unauthorized access to the h… SICK AG
TDC-X401GL
2026-01-15T12:59:51.574Z 2026-01-15T14:43:22.684Z
CVE-2026-22908
9.1 (3.1)
Uploading unvalidated container images may allow … SICK AG
TDC-X401GL
2026-01-15T13:00:53.558Z 2026-01-15T14:42:28.069Z
CVE-2026-22645
5.3 (3.1)
The application discloses all used components, ve… SICK AG
Incoming Goods Suite
2026-01-15T13:14:38.264Z 2026-01-15T14:42:15.554Z
CVE-2026-22909
7.5 (3.1)
Certain system functions may be accessed without … SICK AG
TDC-X401GL
2026-01-15T13:01:27.582Z 2026-01-15T14:41:39.360Z
CVE-2026-22910
7.5 (3.1)
The device is deployed with weak and publicly kno… SICK AG
TDC-X401GL
2026-01-15T13:02:02.021Z 2026-01-15T14:40:17.107Z
CVE-2026-22911
5.3 (3.1)
Firmware update files may expose password hashes … SICK AG
TDC-X401GL
2026-01-15T13:02:29.453Z 2026-01-15T14:39:02.055Z
CVE-2026-22917
4.3 (3.1)
Improper input handling in a system endpoint may … SICK AG
TDC-X401GL
2026-01-15T13:07:41.205Z 2026-01-15T14:38:02.024Z
CVE-2025-47890
2.5 (3.1)
An URL Redirection to Untrusted Site vulnerabilit… Fortinet
FortiSASE
2025-10-14T15:22:50.356Z 2026-01-15T14:37:59.566Z
CVE-2025-31366
4.5 (3.1)
An Improper Neutralization of Input During Web Pa… Fortinet
FortiProxy
2025-10-14T15:22:57.657Z 2026-01-15T14:37:59.504Z
CVE-2025-12166
7.5 (3.1)
Simply Schedule Appointments <= 1.6.9.9 - Unauthentica… croixhaug
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
2026-01-14T22:23:50.629Z 2026-01-15T14:37:41.267Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-23707
7.1 (3.1)
WordPress En Masse plugin <= 1.0 - Reflected Cross Sit… Matamko
En Masse
2025-12-31T19:56:21.648Z 2026-01-20T14:28:04.966Z
CVE-2025-23705
7.1 (3.1)
WordPress Zielke Design Project Gallery plugin <= 2.5.… Terry Zielke
Zielke Design Project Gallery
2025-12-31T19:55:23.308Z 2026-01-20T14:28:05.005Z
CVE-2025-23667
7.1 (3.1)
WordPress custom-post-edit plugin <= 1.0.4 - Reflected… Christopher Churchill
custom-post-edit
2025-12-31T19:54:20.344Z 2026-01-20T14:28:05.237Z
CVE-2025-23608
7.1 (3.1)
WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site… Omar Mohamed Mohamoud
LIVE TV
2025-12-31T17:07:06.352Z 2026-01-20T14:28:04.213Z
CVE-2025-23554
7.1 (3.1)
WordPress Off Page SEO plugin <= 3.0.3 - Reflected Cro… Jakub Glos
Off Page SEO
2025-12-29T23:51:32.627Z 2026-01-20T14:28:05.444Z
CVE-2025-23550
7.1 (3.1)
WordPress Product Puller plugin <= 1.5.1 - Reflected C… Kemal YAZICI
Product Puller
2025-12-29T23:50:08.713Z 2026-01-20T14:28:05.210Z
CVE-2025-23504
9.8 (3.1)
WordPress Felan Framework plugin <= 1.1.3 - Account Ta… RiceTheme
Felan Framework
2026-01-08T09:17:40.900Z 2026-01-20T14:28:04.968Z
CVE-2025-23469
7.1 (3.1)
WordPress Sleekplan plugin <= 0.2.0 - Reflected Cross … Sleekplan
Sleekplan
2025-12-29T23:48:36.314Z 2026-01-20T14:28:04.821Z
CVE-2025-23458
7.1 (3.1)
WordPress Ads24 Lite plugin <= 1.0 - Reflected Cross S… Rakessh
Ads24 Lite
2025-12-29T23:32:44.943Z 2026-01-20T14:28:04.180Z
CVE-2025-22728
9.8 (3.1)
WordPress Workreap (theme's plugin) plugin <= 3.3.6 - … AmentoTech
Workreap (theme's plugin)
2026-01-08T09:17:40.670Z 2026-01-20T14:28:04.993Z
CVE-2025-22726
9.1 (3.1)
WordPress nK Themes Helper plugin <= 1.7.9 - Server Si… _nK
nK Themes Helper
2026-01-08T09:17:40.458Z 2026-01-20T14:28:05.364Z
CVE-2025-22725
5.4 (3.1)
WordPress WP Virtual Assistant plugin <= 3.0 - Cross S… loopus
WP Virtual Assistant
2026-01-08T09:17:39.840Z 2026-01-20T14:28:05.240Z
CVE-2025-22715
8.1 (3.1)
WordPress WP Attractive Donations System - Easy Stripe… loopus
WP Attractive Donations System - Easy Stripe & Paypal donations
2026-01-08T09:17:39.620Z 2026-01-20T14:28:05.345Z
CVE-2025-22713
9.8 (3.1)
WordPress WooCommerce Orders & Customers Exporter plug… vanquish
WooCommerce Orders & Customers Exporter
2026-01-08T09:17:39.375Z 2026-01-20T14:28:05.344Z
CVE-2025-22712
9.8 (3.1)
WordPress Typify theme <= 3.0.2 - Local File Inclusion… QantumThemes
Typify
2026-01-08T09:17:39.147Z 2026-01-20T14:28:05.549Z
CVE-2025-22509
9.8 (3.1)
WordPress Atlas theme <= 2.1.0 - Local File Inclusion … TMRW-studio
Atlas
2026-01-08T09:17:38.524Z 2026-01-20T14:28:04.634Z
CVE-2025-22288
4.1 (3.1)
WordPress Smush Image Compression and Optimization plu… WPMU DEV - Your All-in-One WordPress Platform
Smush Image Compression and Optimization
2025-11-06T15:53:18.126Z 2026-01-20T14:28:05.015Z
CVE-2025-14431
9.8 (3.1)
WordPress Navian theme <= 1.5.4 - Local File Inclusion… THEMELOGI
Navian
2026-01-08T09:17:38.310Z 2026-01-20T14:28:04.567Z
CVE-2025-14360
9.8 (3.1)
WordPress Blockons plugin <= 1.2.15 - Broken Access Co… Kaira
Blockons
2026-01-08T09:17:37.614Z 2026-01-20T14:28:05.215Z
CVE-2025-14359
9.8 (3.1)
WordPress Oshine theme <= 7.2.7 - Local File Inclusion… brandexponents
Oshine
2026-01-08T09:17:37.351Z 2026-01-20T14:28:04.952Z
CVE-2025-14358
9.8 (3.1)
WordPress REHub Framework plugin <= 19.9.5 - Broken Ac… sizam
REHub Framework
2026-01-08T09:17:37.140Z 2026-01-20T14:28:04.797Z
CVE-2025-14314
8.5 (3.1)
WordPress PopupKit plugin <= 2.1.5 - SQL Injection vul… Roxnor
PopupKit
2025-12-18T07:21:40.676Z 2026-01-20T14:28:04.473Z
CVE-2025-13835
6.5 (3.1)
WordPress Arconix Shortcodes plugin <= 2.1.19 - Cross … Tyche Softwares
Arconix Shortcodes
2025-12-01T17:57:41.794Z 2026-01-20T14:28:04.481Z
CVE-2025-13504
6.1 (3.1)
WordPress Real Estate Pro plugin <= 2.1.4 - Reflected … e-plugins
Real Estate Pro
2026-01-08T09:17:36.949Z 2026-01-20T14:28:05.174Z
CVE-2025-12551
6.1 (3.1)
WordPress ListingHub plugin 1.2.6 - Cross Site Scripti… e-plugins
ListingHub
2026-01-08T09:17:36.759Z 2026-01-20T14:28:05.192Z
CVE-2025-12550
9.8 (3.1)
WordPress OchaHouse theme <= 2.2.8 - Local File Inclus… jwsthemes
OchaHouse
2026-01-08T09:17:36.554Z 2026-01-20T14:28:05.164Z
CVE-2025-12549
9.8 (3.1)
WordPress Rozy - Flower Shop theme <= 1.2.25 - Local F… magentech
Rozy - Flower Shop
2026-01-08T09:17:36.012Z 2026-01-20T14:28:05.344Z
CVE-2025-10019
6.5 (3.1)
WordPress Contact Form Email plugin <= 1.3.60 - Insecu… codepeople
Contact Form Email
2025-12-18T07:21:40.448Z 2026-01-20T14:28:04.445Z
CVE-2024-53735
7.1 (3.1)
WordPress iPhone Webclip Manager plugin <= 0.5 - CSRF … Corourke
iPhone Webclip Manager
2026-01-05T16:41:08.654Z 2026-01-20T14:31:54.884Z
CVE-2024-30516
7.5 (3.1)
WordPress Booking Package plugin <= 1.6.27 - Price Man… SaasProject
Booking Package
2026-01-05T16:38:43.668Z 2026-01-20T14:31:54.985Z
ID Description Published Updated
fkie_cve-2025-23707 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.630 2026-01-20T15:16:19.000
fkie_cve-2025-23705 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:41.483 2026-01-20T15:16:18.867
fkie_cve-2025-23667 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:40.550 2026-01-20T15:16:18.757
fkie_cve-2025-23608 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T18:15:44.007 2026-01-20T15:16:18.647
fkie_cve-2025-23554 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-30T00:15:51.890 2026-01-20T15:16:18.550
fkie_cve-2025-23550 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-30T00:15:51.747 2026-01-20T15:16:18.450
fkie_cve-2025-23504 Authentication Bypass Using an Alternate Path or Channel vulnerability in RiceTheme Felan Framework… 2026-01-08T10:15:48.513 2026-01-20T15:16:18.287
fkie_cve-2025-23469 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-30T00:15:51.597 2026-01-20T15:16:17.690
fkie_cve-2025-23458 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-30T00:15:51.447 2026-01-20T15:16:17.577
fkie_cve-2025-22728 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-08T10:15:48.390 2026-01-20T15:16:17.450
fkie_cve-2025-22726 Server-Side Request Forgery (SSRF) vulnerability in _nK nK Themes Helper nk-themes-helper allows Se… 2026-01-08T10:15:48.247 2026-01-20T15:16:17.330
fkie_cve-2025-22725 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-08T10:15:48.120 2026-01-20T15:16:17.203
fkie_cve-2025-22715 Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal… 2026-01-08T10:15:47.990 2026-01-20T15:16:17.070
fkie_cve-2025-22713 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-08T10:15:47.850 2026-01-20T15:16:16.940
fkie_cve-2025-22712 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:47.727 2026-01-20T15:16:16.813
fkie_cve-2025-22509 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:47.337 2026-01-20T15:16:16.430
fkie_cve-2025-22288 Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Im… 2025-11-06T16:15:49.647 2026-01-20T15:16:16.277
fkie_cve-2025-14431 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:46.463 2026-01-20T15:16:15.223
fkie_cve-2025-14360 Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not P… 2026-01-08T10:15:46.067 2026-01-20T15:16:14.707
fkie_cve-2025-14359 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:45.920 2026-01-20T15:16:14.577
fkie_cve-2025-14358 Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Funct… 2026-01-08T10:15:45.790 2026-01-20T15:16:14.440
fkie_cve-2025-14314 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-18T08:15:49.510 2026-01-20T15:16:14.297
fkie_cve-2025-13835 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-01T18:16:04.000 2026-01-20T15:16:13.873
fkie_cve-2025-13504 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-08T10:15:45.517 2026-01-20T15:16:13.747
fkie_cve-2025-12551 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-08T10:15:45.283 2026-01-20T15:16:13.297
fkie_cve-2025-12550 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:45.150 2026-01-20T15:16:13.160
fkie_cve-2025-12549 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-08T10:15:44.100 2026-01-20T15:16:13.027
fkie_cve-2025-10019 Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email con… 2025-12-18T08:15:48.657 2026-01-20T15:16:12.810
fkie_cve-2024-53735 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-05T17:15:44.590 2026-01-20T15:16:12.700
fkie_cve-2024-30516 Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package all… 2026-01-05T17:15:44.430 2026-01-20T15:16:12.587
ID Severity Description Published Updated
ghsa-9w2c-ww5q-2rj7
9.8 (3.1)
The Optional Email plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover … 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-8h37-wg3p-5fr4
6.7 (3.1)
Memory corruption while processing a config call from userspace. 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-8cm9-gx9f-q3wm
4.4 (3.1)
The Key Figures plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the kf_field_… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-85jr-qp34-798j
4.4 (3.1)
The twinklesmtp – Email Service Provider For WordPress plugin for WordPress is vulnerable to Stored… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-68g3-qq95-rpv3
8.8 (3.1)
Incorrect Privilege Assignment vulnerability in Dasinfomedia WPCHURCH allows Privilege Escalation.T… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-5vvq-pw5h-r39p
6.4 (3.1)
The My Album Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image ti… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-5pf5-5xph-xfrf
6.1 (3.1)
Information disclosure while processing a firmware event. 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-5f5v-w8rv-pmc5
6.1 (3.1)
The HBLPAY Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Si… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-4crf-6666-px9x
4.3 (3.1)
The NS IE Compatibility Fixer plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSR… 2026-01-07T12:31:23Z 2026-01-07T12:31:23Z
ghsa-w4j2-7v8q-7x76
4.3 (3.1)
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request … 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-w4cv-mchj-p2j8
6.1 (3.1)
The Post Like Dislike plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the … 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-rg7p-9gq5-gpcc
5.3 (3.1)
The Quote Comments plugin for WordPress is vulnerable to Missing Authorization in all versions up t… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-rfxx-6j8g-m3h3
6.4 (3.1)
The AD Sliding FAQ plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slidi… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-r5x9-xq27-vvxh
6.7 (3.1)
5.4 (4.0)
Insecure Temporary File vulnerability in Altera Quartus Prime Standard  Installer (SFX) on Windo… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-p97m-qwvc-gh6m
6.1 (3.1)
The WP Widget Changer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the … 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-p2q3-q937-vhpc
6.1 (3.1)
The Stumble! for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-j8r9-x4hr-9h8r
6.4 (3.1)
The My Album Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sty… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-hvrg-r7jp-hj5p
5.3 (3.1)
The Awesome Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data d… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-c84q-h67q-7h8r
6.4 (3.1)
The Mstoic Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-9h8j-wjmq-ch6q
6.1 (3.1)
The Testimonial Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-9688-9jmc-xf77
7.1 (4.0)
A NULL Pointer Dereference vulnerability in TP-Link Archer BE400 V1(802.11 modules) allows  an adj… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-8hfq-r7gh-7rxh
6.4 (3.1)
The Niche Hero | Beautifully-designed blocks in seconds plugin for WordPress is vulnerable to Store… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-6jrv-vjj6-mmf8
6.4 (3.1)
The QR Code for WooCommerce order emails, PDF invoices, packing slips plugin for WordPress is vulne… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-6h3v-v53r-j968
4.3 (3.1)
The Sticky Action Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-54f4-mrqr-xv58
6.4 (3.1)
The Easy GitHub Gist Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-32xj-q92g-hrxp
5.3 (3.1)
The Piraeus Bank WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized ord… 2026-01-07T12:31:22Z 2026-01-07T12:31:22Z
ghsa-vvjq-h7h8-jp9j
6.4 (3.1)
The AH Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'column… 2026-01-07T12:31:21Z 2026-01-07T12:31:21Z
ghsa-rvfp-qwv7-rg34
6.4 (3.1)
The Viitor Button Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via … 2026-01-07T12:31:21Z 2026-01-07T12:31:21Z
ghsa-p56v-q7x4-6mh7
4.4 (3.1)
The Contact Us Simple Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ad… 2026-01-07T12:31:21Z 2026-01-07T12:31:21Z
ghsa-p4xw-96rj-wp46
7.5 (3.1)
The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and i… 2026-01-07T12:31:21Z 2026-01-07T12:31:21Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-26330 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.309811Z
gsd-2024-26534 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.309582Z
gsd-2024-26394 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.309301Z
gsd-2024-26799 In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix unin… 2024-02-20T06:02:29.309061Z
gsd-2024-26552 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.308800Z
gsd-2024-26567 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.308572Z
gsd-2024-26828 In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow … 2024-02-20T06:02:29.308344Z
gsd-2024-26529 An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cau… 2024-02-20T06:02:29.308113Z
gsd-2024-26740 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirre… 2024-02-20T06:02:29.307887Z
gsd-2024-26876 In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511:… 2024-02-20T06:02:29.307407Z
gsd-2024-26351 flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the c… 2024-02-20T06:02:29.306906Z
gsd-2024-26486 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.306338Z
gsd-2024-26685 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potentia… 2024-02-20T06:02:29.306104Z
gsd-2024-26630 In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix f… 2024-02-20T06:02:29.305875Z
gsd-2024-26377 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.305579Z
gsd-2024-26940 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.305290Z
gsd-2024-26521 HTML Injection vulnerability in CE Phoenix v1.0.8.20 and before allows a remote attacker … 2024-02-20T06:02:29.304790Z
gsd-2024-26623 In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent ra… 2024-02-20T06:02:29.303471Z
gsd-2024-26884 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab ove… 2024-02-20T06:02:29.303152Z
gsd-2024-26605 In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix deadlo… 2024-02-20T06:02:29.302920Z
gsd-2024-26586 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_… 2024-02-20T06:02:29.302399Z
gsd-2024-26667 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check f… 2024-02-20T06:02:29.302163Z
gsd-2024-26777 In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error ou… 2024-02-20T06:02:29.301671Z
gsd-2024-26758 In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore sus… 2024-02-20T06:02:29.301433Z
gsd-2024-26434 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.300870Z
gsd-2024-26359 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.300644Z
gsd-2024-26668 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_limit… 2024-02-20T06:02:29.299568Z
gsd-2024-26833 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix… 2024-02-20T06:02:29.299064Z
gsd-2024-26657 In the Linux kernel, the following vulnerability has been resolved: drm/sched: fix null-… 2024-02-20T06:02:29.297792Z
gsd-2024-26905 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix data race… 2024-02-20T06:02:29.297565Z
ID Description Published Updated
mal-2025-185329 Malicious code in unise-kiat-bogatatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185328 Malicious code in unise-kiat-bogaatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185327 Malicious code in unise-kiat-boatipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185326 Malicious code in unise-kiat-boaipda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185325 Malicious code in unise-kiat-bida (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185324 Malicious code in tunise-kit-bogavotaawfi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185323 Malicious code in tunis-kt-gahvfaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185322 Malicious code in tunis-kt-gahvfa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185321 Malicious code in tunis-kt-gahvf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185320 Malicious code in tunis-kt-gahuvfadufi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185319 Malicious code in tunis-kt-gahuvfaduffadi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185318 Malicious code in tunis-kt-gahuvfadufdi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185317 Malicious code in tunis-kt-gahuvfadufafadi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185316 Malicious code in tunis-kt-gahuvfadufadi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185315 Malicious code in tunis-kt-gahuvfaduf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185314 Malicious code in tunis-kt-gahuvfadf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185313 Malicious code in tunis-kt-gahuvfadduuufafadi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185312 Malicious code in tunis-kt-gahuvfadduufafadi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185311 Malicious code in tunis-kt-gahf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185310 Malicious code in tunis-kt-gaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185309 Malicious code in tunis-kt-gabisayynufsgf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185308 Malicious code in tunis-kt-gabisayusgf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185307 Malicious code in tunis-kt-gabisayufsgf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185306 Malicious code in tunis-kt-gabisaynufsgf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185305 Malicious code in tunis-kt-gabisaygf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185304 Malicious code in tunis-kt-gabisagf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185303 Malicious code in tunis-kt-gabisaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185302 Malicious code in tunis-kt-gabiaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185301 Malicious code in tunis-kt-gabf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-185300 Malicious code in tunis-kt-gabaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2025:0823 Red Hat Security Advisory: traceroute security update 2025-01-29T19:42:59+00:00 2025-11-21T19:18:30+00:00
rhsa-2025:0791 Red Hat Security Advisory: libsoup security update 2025-01-29T11:48:18+00:00 2025-11-21T19:18:29+00:00
rhsa-2025:0743 Red Hat Security Advisory: keepalived security update 2025-01-28T01:46:09+00:00 2025-11-21T19:18:27+00:00
rhsa-2025:0765 Red Hat Security Advisory: git-lfs security update 2025-01-28T13:29:31+00:00 2025-11-21T19:18:26+00:00
rhsa-2025:0762 Red Hat Security Advisory: git-lfs security update 2025-01-28T11:09:50+00:00 2025-11-21T19:18:26+00:00
rhsa-2025:0759 Red Hat Security Advisory: git-lfs security update 2025-01-28T09:36:15+00:00 2025-11-21T19:18:26+00:00
rhsa-2025:0758 Red Hat Security Advisory: git-lfs security update 2025-01-28T09:23:35+00:00 2025-11-21T19:18:25+00:00
rhsa-2025:0757 Red Hat Security Advisory: git-lfs security update 2025-01-28T09:18:45+00:00 2025-11-21T19:18:25+00:00
rhsa-2025:0746 Red Hat Security Advisory: gimp:2.8 security update 2025-01-28T02:07:24+00:00 2025-11-21T19:18:24+00:00
rhsa-2025:0739 Red Hat Security Advisory: mariadb:10.5 security update 2025-01-28T02:12:19+00:00 2025-11-21T19:18:23+00:00
rhsa-2025:0737 Red Hat Security Advisory: mariadb:10.11 security update 2025-01-28T02:13:19+00:00 2025-11-21T19:18:23+00:00
rhsa-2025:0733 Red Hat Security Advisory: bzip2 security and bug fix update 2025-01-28T01:19:44+00:00 2025-11-21T19:18:23+00:00
rhsa-2025:0673 Red Hat Security Advisory: git-lfs security update 2025-01-23T17:59:54+00:00 2025-11-21T19:18:19+00:00
rhsa-2025:0648 Red Hat Security Advisory: OpenShift Container Platform 4.15.44 security update 2025-01-29T19:23:34+00:00 2025-11-21T19:18:16+00:00
rhsa-2025:0578 Red Hat Security Advisory: kernel security update 2025-01-22T02:15:54+00:00 2025-11-21T19:18:14+00:00
rhsa-2025:0570 Red Hat Security Advisory: iperf3 security update 2025-01-21T22:51:14+00:00 2025-11-21T19:18:13+00:00
rhsa-2025:0548 Red Hat Security Advisory: iperf3 security update 2025-01-21T19:05:29+00:00 2025-11-21T19:18:13+00:00
rhsa-2025:0505 Red Hat Security Advisory: iperf3 security update 2025-01-21T12:32:48+00:00 2025-11-21T19:18:12+00:00
rhsa-2025:0404 Red Hat Security Advisory: iperf3 security update 2025-01-20T01:37:54+00:00 2025-11-21T19:18:12+00:00
rhsa-2025:0440 Red Hat Security Advisory: iperf3 security update 2025-01-20T21:11:21+00:00 2025-11-21T19:18:10+00:00
rhsa-2025:0439 Red Hat Security Advisory: Red Hat OpenStack Platform 18.0.4 (openstack-ironic) security update 2025-01-22T15:57:26+00:00 2025-11-21T19:18:09+00:00
rhsa-2025:0429 Red Hat Security Advisory: java-11-openjdk ELS security update 2025-01-22T09:07:10+00:00 2025-11-21T19:18:09+00:00
rhsa-2025:0428 Red Hat Security Advisory: OpenJDK 21.0.6 Security Update for Windows Builds 2025-01-22T20:44:48+00:00 2025-11-21T19:18:09+00:00
rhsa-2025:0427 Red Hat Security Advisory: OpenJDK 21.0.6 Security Update for Portable Linux Builds 2025-01-22T20:44:28+00:00 2025-11-21T19:18:08+00:00
rhsa-2025:0426 Red Hat Security Advisory: java-21-openjdk security update for RHEL 8.10, 9.4 and 9.5 2025-01-22T21:12:37+00:00 2025-11-21T19:18:08+00:00
rhsa-2025:0425 Red Hat Security Advisory: OpenJDK 17.0.14 Security Update for Windows Builds 2025-01-22T11:24:10+00:00 2025-11-21T19:18:07+00:00
rhsa-2025:0424 Red Hat Security Advisory: OpenJDK 17.0.14 Security Update for Portable Linux Builds 2025-01-22T11:24:15+00:00 2025-11-21T19:18:07+00:00
rhsa-2025:0423 Red Hat Security Advisory: java-17-openjdk security update for RHEL 9.0 and 9.2 2025-01-22T09:14:15+00:00 2025-11-21T19:18:07+00:00
rhsa-2025:0422 Red Hat Security Advisory: java-17-openjdk security update for RHEL 8.6, 8.8, 8.10, 9.4 and 9.5 2025-01-22T11:19:05+00:00 2025-11-21T19:18:07+00:00
rhsa-2025:0421 Red Hat Security Advisory: java-17-openjdk security update for RHEL 8.4 2025-01-22T09:20:15+00:00 2025-11-21T19:18:07+00:00
ID Description Published Updated
msrc_cve-2021-42523 There are two Information Disclosure vulnerabilities in colord and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use while libxml2 emphasizes that the caller needs to release it. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
msrc_cve-2021-35938 A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2022-08-02T00:00:00.000Z 2022-09-01T00:00:00.000Z
msrc_cve-2022-26926 Windows Address Book Remote Code Execution Vulnerability 2022-05-10T08:00:00.000Z 2022-08-31T07:00:00.000Z
msrc_cve-2022-26918 Windows Fax Compose Form Remote Code Execution Vulnerability 2022-04-12T08:00:00.000Z 2022-08-31T07:00:00.000Z
msrc_cve-2022-26917 Windows Fax Compose Form Remote Code Execution Vulnerability 2022-04-12T08:00:00.000Z 2022-08-31T07:00:00.000Z
msrc_cve-2022-26916 Windows Fax Compose Form Remote Code Execution Vulnerability 2022-04-12T08:00:00.000Z 2022-08-31T07:00:00.000Z
msrc_cve-2022-2991 A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2022-2959 A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2022-2938 A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default it could allow an attacker to crash the system or have other memory-corruption side effects. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-4209 A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-4155 A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-4122 It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium such as a flash disk could use this flaw to force a user into permanently disabling the encryption layer of that medium. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-4037 A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-3999 A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2021-3800 A flaw was found in glib before version 2.63.6. Due to random charset alias pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition. 2022-08-02T00:00:00.000Z 2022-08-31T00:00:00.000Z
msrc_cve-2022-34691 Active Directory Domain Services Elevation of Privilege Vulnerability 2022-08-09T07:00:00.000Z 2022-08-30T07:00:00.000Z
msrc_cve-2021-3998 A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value potentially leading to information leakage and disclosure of sensitive data. 2022-08-02T00:00:00.000Z 2022-08-30T00:00:00.000Z
msrc_cve-2021-3798 A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack. 2022-08-02T00:00:00.000Z 2022-08-30T00:00:00.000Z
msrc_cve-2022-2982 Use After Free in vim/vim 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2022-2980 NULL Pointer Dereference in vim/vim 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2021-3997 A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp. 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2021-3975 A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash. 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2021-3905 A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments. 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2021-3639 A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity. 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2021-3521 There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to a legitimate public key RPM could wrongly trust a malicious signature. The greatest impact of this flaw is to data integrity. To exploit this flaw an attacker must either compromise an RPM repository or convince an administrator to install an untrusted RPM or public key. It is strongly recommended to only use RPMs and public keys from trusted sources. 2022-08-02T00:00:00.000Z 2022-08-27T00:00:00.000Z
msrc_cve-2022-2946 Use After Free in vim/vim 2022-08-02T00:00:00.000Z 2022-08-25T00:00:00.000Z
msrc_cve-2022-2923 NULL Pointer Dereference in vim/vim 2022-08-02T00:00:00.000Z 2022-08-25T00:00:00.000Z
msrc_cve-2022-2873 An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system. 2022-08-02T00:00:00.000Z 2022-08-25T00:00:00.000Z
msrc_cve-2021-3764 A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability. 2022-08-02T00:00:00.000Z 2022-08-25T00:00:00.000Z
msrc_cve-2021-3736 A flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples/vfio-mdev/mbochs.c in Virtual Function I/O (VFIO) Mediated devices. This flaw could allow a local attacker to leak internal kernel information. 2022-08-02T00:00:00.000Z 2022-08-25T00:00:00.000Z
ID Description Updated
var-201502-0199 Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier … 2025-04-13T23:26:47.143000Z
var-201502-0264 Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 … 2025-04-13T23:26:47.111000Z
var-201503-0115 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.… 2025-04-13T23:26:46.901000Z
var-201503-0116 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.… 2025-04-13T23:26:46.865000Z
var-201503-0117 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.… 2025-04-13T23:26:46.829000Z
var-201503-0158 The management interface in Cisco TelePresence Video Communication Server (VCS) and Cisco… 2025-04-13T23:26:46.796000Z
var-201503-0157 The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communi… 2025-04-13T23:26:46.766000Z
var-201503-0199 Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) befor… 2025-04-13T23:26:46.734000Z
var-201503-0451 SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 … 2025-04-13T23:26:46.018000Z
var-201504-0268 The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-swi… 2025-04-13T23:26:45.922000Z
var-201505-0101 Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 … 2025-04-13T23:26:45.716000Z
var-201505-0185 Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hos… 2025-04-13T23:26:45.628000Z
var-201506-0118 Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, … 2025-04-13T23:26:45.337000Z
var-201506-0244 Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command e… 2025-04-13T23:26:45.278000Z
var-201506-0307 Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco … 2025-04-13T23:26:45.218000Z
var-201506-0328 SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execu… 2025-04-13T23:26:45.183000Z
var-201507-0053 The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through… 2025-04-13T23:26:45.068000Z
var-201507-0368 The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in S… 2025-04-13T23:26:41.343000Z
var-201507-0513 The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5… 2025-04-13T23:26:41.305000Z
var-201508-0074 Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (… 2025-04-13T23:26:41.193000Z
var-201508-0286 Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, A… 2025-04-13T23:26:41.163000Z
var-201508-0370 Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExte… 2025-04-13T23:26:41.097000Z
var-201509-0294 The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supe… 2025-04-13T23:26:40.983000Z
var-201509-0462 The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote aut… 2025-04-13T23:26:40.943000Z
var-201510-0010 The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 … 2025-04-13T23:26:40.893000Z
var-201511-0003 The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through … 2025-04-13T23:26:40.721000Z
var-201511-0213 The web GUI in Cisco Connected Grid Network Management System (CG-NMS) 3.0(0.35) and 3.0(… 2025-04-13T23:26:40.597000Z
var-201511-0276 Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat… 2025-04-13T23:26:40.472000Z
var-201512-0072 The login function in the RequestController class in Moxa OnCell Central Manager before 2… 2025-04-13T23:26:40.340000Z
var-201601-0396 F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF… 2025-04-13T23:26:39.926000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:4120-1 Security update for xorg-x11-server 2021-12-20T11:53:48Z 2021-12-20T11:53:48Z
suse-su-2021:4119-1 Security update for xorg-x11-server 2021-12-20T11:53:23Z 2021-12-20T11:53:23Z
suse-ru-2021:4117-1 Recommended update for samba 2021-12-20T08:13:32Z 2021-12-20T08:13:32Z
suse-su-2021:4115-1 Security update for log4j 2021-12-17T12:38:25Z 2021-12-17T12:38:25Z
suse-su-2021:4112-1 Security update for log4j12 2021-12-17T11:19:32Z 2021-12-17T11:19:32Z
suse-su-2021:4111-1 Security update for log4j 2021-12-17T11:19:17Z 2021-12-17T11:19:17Z
suse-su-2021:14866-1 Security update for log4j 2021-12-17T10:36:12Z 2021-12-17T10:36:12Z
suse-su-2021:4104-1 Security update for python3 2021-12-16T10:14:20Z 2021-12-16T10:14:20Z
suse-su-2021:4099-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) 2021-12-15T11:30:42Z 2021-12-15T11:30:42Z
suse-su-2021:4097-1 Security update for storm-kit 2021-12-15T10:32:17Z 2021-12-15T10:32:17Z
suse-su-2021:4096-1 Security update for storm 2021-12-15T10:31:48Z 2021-12-15T10:31:48Z
suse-ru-2021:4095-1 Recommended update for samba 2021-12-15T10:21:41Z 2021-12-15T10:21:41Z
suse-su-2021:4090-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2) 2021-12-14T15:01:29Z 2021-12-14T15:01:29Z
suse-su-2021:4075-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) 2021-12-14T14:58:49Z 2021-12-14T14:58:49Z
suse-su-2021:4071-1 Security update for xorg-x11-server 2021-12-14T13:57:37Z 2021-12-14T13:57:37Z
suse-su-2021:4070-1 Security update for xorg-x11-server 2021-12-14T13:56:59Z 2021-12-14T13:56:59Z
suse-su-2021:4069-1 Security update for xorg-x11-server 2021-12-14T13:55:11Z 2021-12-14T13:55:11Z
suse-su-2021:14863-1 Security update for xorg-x11-server 2021-12-14T13:54:23Z 2021-12-14T13:54:23Z
suse-su-2021:4066-1 Security update for xorg-x11-server 2021-12-14T13:53:44Z 2021-12-14T13:53:44Z
suse-su-2021:4065-1 Security update for xorg-x11-server 2021-12-14T13:53:22Z 2021-12-14T13:53:22Z
suse-su-2021:4064-1 Security update for xorg-x11-server 2021-12-14T13:52:56Z 2021-12-14T13:52:56Z
suse-su-2021:4063-1 Security update for icu.691 2021-12-14T12:58:13Z 2021-12-14T12:58:13Z
suse-su-2021:4060-1 Security update for gettext-runtime 2021-12-14T11:58:59Z 2021-12-14T11:58:59Z
suse-su-2021:4059-1 Security update for runc 2021-12-14T11:47:19Z 2021-12-14T11:47:19Z
suse-su-2021:4058-1 Security update for postgresql10 2021-12-14T09:18:57Z 2021-12-14T09:18:57Z
suse-su-2021:4057-1 Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) 2021-12-14T08:42:36Z 2021-12-14T08:42:36Z
suse-su-2021:4052-1 Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3) 2021-12-14T08:36:36Z 2021-12-14T08:36:36Z
suse-su-2021:4051-1 Security update for python-pip 2021-12-14T08:30:06Z 2021-12-14T08:30:06Z
suse-su-2021:4038-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) 2021-12-14T08:22:33Z 2021-12-14T08:22:33Z
suse-su-2021:4039-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) 2021-12-14T08:21:42Z 2021-12-14T08:21:42Z
ID Description Published Updated
cnvd-2025-02617 OTFCC缓冲区溢出漏洞(CNVD-2025-02617) 2022-08-19 2025-02-10
cnvd-2025-02616 OTFCC缓冲区溢出漏洞(CNVD-2025-02616) 2022-08-19 2025-02-10
cnvd-2025-02615 OTFCC缓冲区溢出漏洞(CNVD-2025-02615) 2022-08-19 2025-02-10
cnvd-2025-02614 OTFCC缓冲区溢出漏洞(CNVD-2025-02614) 2022-08-19 2025-02-10
cnvd-2025-02613 OTFCC缓冲区溢出漏洞(CNVD-2025-02613) 2022-08-19 2025-02-10
cnvd-2025-02612 OTFCC缓冲区溢出漏洞(CNVD-2025-02612) 2022-08-19 2025-02-10
cnvd-2025-02611 OTFCC缓冲区溢出漏洞(CNVD-2025-02611) 2022-08-19 2025-02-10
cnvd-2025-02610 OTFCC缓冲区溢出漏洞(CNVD-2025-02610) 2022-08-19 2025-02-10
cnvd-2025-02609 OTFCC缓冲区溢出漏洞(CNVD-2025-02609) 2022-08-19 2025-02-10
cnvd-2025-02608 OTFCC缓冲区溢出漏洞(CNVD-2025-02608) 2022-08-19 2025-02-10
cnvd-2025-02607 OTFCC缓冲区溢出漏洞(CNVD-2025-02607) 2022-08-19 2025-02-10
cnvd-2025-02606 NVIDIA GPU Display Driver for Windows and Linux输入验证错误漏洞(CNVD-2025-02606) 2022-05-19 2025-02-10
cnvd-2025-02605 NVIDIA GPU Display Driver for Windows and Linux拒绝服务漏洞(CNVD-2025-02605) 2022-05-19 2025-02-10
cnvd-2025-02604 OTFCC缓冲区溢出漏洞(CNVD-2025-02604) 2022-08-19 2025-02-10
cnvd-2025-02603 Samsung TencentWifiSecurity service信息泄露漏洞 2022-01-21 2025-02-08
cnvd-2025-02602 Samsung ActivityMetricsLogger未授权访问漏洞 2022-01-21 2025-02-08
cnvd-2025-02601 Siemens Tecnomatix Plant Simulation缓冲区错误漏洞 2021-05-12 2025-02-08
cnvd-2025-02600 Samsung Dialer信息泄露漏洞(CNVD-2025-02600) 2022-01-21 2025-02-08
cnvd-2025-02599 Samsung Galaxy S22 StrongBox状态维护错误漏洞 2022-05-16 2025-02-08
cnvd-2025-02598 Schneider Electric System Monitor application信息泄露漏洞 2024-10-17 2025-02-08
cnvd-2025-02597 Siemens Teamcenter Visualization/Tecnomatix Plant Simulation缓冲区溢出漏洞 2024-12-20 2025-02-08
cnvd-2025-02826 Microsoft Access远程代码执行漏洞(CNVD-2025-02826) 2025-01-24 2025-02-07
cnvd-2025-02596 Samsung RKP安全配置错误漏洞 2022-03-16 2025-02-07
cnvd-2025-02595 Samsung Video Player权限管理不当漏洞 2022-02-15 2025-02-07
cnvd-2025-02594 Northstar Club Management操作系统命令注入漏洞 2022-02-21 2025-02-07
cnvd-2025-02593 Cedar Gate EZ-NET跨站脚本漏洞 2022-03-08 2025-02-07
cnvd-2025-02592 SevOne Network Management System CSV注入漏洞 2022-06-16 2025-02-07
cnvd-2025-02591 Linksys WRT54GL拒绝服务漏洞 2023-01-11 2025-02-07
cnvd-2025-02590 Apple macOS逻辑缺陷漏洞 2024-12-20 2025-02-07
cnvd-2025-02589 Mini-Inventory-and-Sales-Management-System跨站请求伪造漏洞 2022-03-08 2025-02-07
ID Description Published Updated
certa-2013-avi-002 Vulnérabilités dans Symfony 2013-01-02T00:00:00.000000 2013-01-02T00:00:00.000000
certa-2013-avi-001 Vulnérabilité dans IBM SPSS Modeler 2013-01-02T00:00:00.000000 2013-01-02T00:00:00.000000
certa-2012-avi-766 Vulnérabilité dans Symantec Entreprise Security Manager 2012-12-27T00:00:00.000000 2012-12-27T00:00:00.000000
certa-2012-avi-765 Vulnérabilité dans EMC Data Protection Advisor 2012-12-27T00:00:00.000000 2012-12-27T00:00:00.000000
certa-2012-avi-764 Vulnérabilités dans Tiki Wiki CMS Groupware 2012-12-27T00:00:00.000000 2012-12-27T00:00:00.000000
certa-2012-avi-763 Vulnérabilité dans IBM Tivoli NetView 2012-12-27T00:00:00.000000 2012-12-27T00:00:00.000000
certa-2012-avi-762 Multiples vulnérabilités dans les produits IBM Rational 2012-12-26T00:00:00.000000 2012-12-26T00:00:00.000000
certa-2012-avi-761 Multiples vulnérabilités dans Opera 2012-12-24T00:00:00.000000 2012-12-24T00:00:00.000000
certa-2012-avi-760 Vulnérabilités dans CA IdentityMinder 2012-12-24T00:00:00.000000 2012-12-24T00:00:00.000000
certa-2012-avi-759 Multiples vulnérabilités dans VMware 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-758 Multiples vulnérabilités dans IBM InfoSphere Streams 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-757 Multiples vulnérabilités dans IBM Tivoli 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-756 Vulnérabilité dans IBM WebSphere 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-755 Multiples vulnérabilités dans Drupal 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-754 Vulnérabilités dans IBM Rational Policy Tester et IBM AppScan Entreprise 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-753 Vulnérabilité dans LemonLDAP::NG 2012-12-21T00:00:00.000000 2012-12-21T00:00:00.000000
certa-2012-avi-752 Vulnérabilité dans Zend Framework 2012-12-20T00:00:00.000000 2012-12-20T00:00:00.000000
certa-2012-avi-751 Vulnérabilités dans IBM Tivoli Storage Manager 2012-12-20T00:00:00.000000 2012-12-20T00:00:00.000000
certa-2012-avi-750 Vulnérabilités dans IBM InfoSphere BigInsights 2012-12-19T00:00:00.000000 2012-12-19T00:00:00.000000
certa-2012-avi-749 Vulnérabilité dans Axway SecureTransport 2012-12-18T00:00:00.000000 2012-12-18T00:00:00.000000
certa-2012-avi-748 Vulnérabilités dans RealPlayer 2012-12-18T00:00:00.000000 2012-12-18T00:00:00.000000
certa-2012-avi-747 Vulnérabilité dans Squid 2012-12-18T00:00:00.000000 2012-12-18T00:00:00.000000
certa-2012-avi-746 Multiples vulnérabilités dans HP-UX 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-745 Multiples vulnérabilités dans Huawei E585 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-744 Vulnérabilité dans VMware View 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-743 Vulnérabilité dans IBM Lotus Notes 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-742 Vulnérabilité dans IBM FB4WKSTNS 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-741 Vulnérabilité dans IBM ClearQuest 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-740 Vulnérabilité dans TWiki 2012-12-17T00:00:00.000000 2012-12-17T00:00:00.000000
certa-2012-avi-739 Multiples vulnérabilités dans Avaya Aura System Manager 2012-12-14T00:00:00.000000 2012-12-14T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated