Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-14327
7.5 (3.1)
Spoofing issue in the Downloads Panel component Mozilla
Firefox
2025-12-09T13:38:02.260Z 2026-01-15T09:31:17.854Z
CVE-2026-0892
9.8 (3.1)
Memory safety bugs fixed in Firefox 147 and Thunderbird 147 Mozilla
Firefox
2026-01-13T13:30:59.874Z 2026-01-15T09:31:17.329Z
CVE-2026-0891
8.1 (3.1)
Memory safety bugs fixed in Firefox ESR 140.7, Thunder… Mozilla
Firefox
2026-01-13T13:30:59.454Z 2026-01-15T09:31:16.819Z
CVE-2026-0889
7.5 (3.1)
Denial-of-service in the DOM: Service Workers component Mozilla
Firefox
2026-01-13T13:30:58.675Z 2026-01-15T09:31:15.710Z
CVE-2026-0888
5.3 (3.1)
Information disclosure in the XML component Mozilla
Firefox
2026-01-13T13:30:58.296Z 2026-01-15T09:31:15.094Z
CVE-2026-0885
6.5 (3.1)
Use-after-free in the JavaScript: GC component Mozilla
Firefox
2026-01-13T13:30:56.939Z 2026-01-15T09:31:13.413Z
CVE-2026-0884
9.8 (3.1)
Use-after-free in the JavaScript Engine component Mozilla
Firefox
2026-01-13T13:30:56.543Z 2026-01-15T09:31:12.864Z
CVE-2026-0883
5.3 (3.1)
Information disclosure in the Networking component Mozilla
Firefox
2026-01-13T13:30:56.043Z 2026-01-15T09:31:12.339Z
CVE-2026-0882
8.8 (3.1)
Use-after-free in the IPC component Mozilla
Firefox
2026-01-13T13:30:55.562Z 2026-01-15T09:31:11.810Z
CVE-2026-0881
10 (3.1)
Sandbox escape in the Messaging System component Mozilla
Firefox
2026-01-13T13:30:55.122Z 2026-01-15T09:31:11.249Z
CVE-2026-0880
8.8 (3.1)
Sandbox escape due to integer overflow in the Graphics… Mozilla
Firefox
2026-01-13T13:30:54.679Z 2026-01-15T09:31:10.655Z
CVE-2026-0879
9.8 (3.1)
Sandbox escape due to incorrect boundary conditions in… Mozilla
Firefox
2026-01-13T13:30:54.207Z 2026-01-15T09:31:10.036Z
CVE-2026-0878
8 (3.1)
Sandbox escape due to incorrect boundary conditions in… Mozilla
Firefox
2026-01-13T13:30:53.697Z 2026-01-15T09:31:09.491Z
CVE-2026-0877
8.1 (3.1)
Mitigation bypass in the DOM: Security component Mozilla
Firefox
2026-01-13T13:30:52.979Z 2026-01-15T09:31:08.828Z
CVE-2025-66370
5 (3.1)
Kivitendo before 3.9.2 allows XXE injection. By u… kivitendo
kivitendo
2025-11-28T00:00:00.000Z 2026-01-15T06:46:24.375Z
CVE-2025-11224
7.7 (3.1)
Improper Neutralization of Input During Web Page Gener… GitLab
GitLab
2026-01-14T18:58:03.982Z 2026-01-15T04:56:06.696Z
CVE-2025-33206
7.8 (3.1)
NVIDIA NSIGHT Graphics for Linux contains a vulne… NVIDIA
NSIGHT Graphics
2026-01-14T18:30:41.061Z 2026-01-15T04:56:05.628Z
CVE-2025-66516
8.4 (3.1)
Apache Tika core, Apache Tika parsers, Apache Tika PDF… Apache Software Foundation
Apache Tika core
2025-12-04T16:17:24.980Z 2026-01-15T04:56:01.082Z
CVE-2026-21287
7.8 (3.1)
Substance3D - Stager | Use After Free (CWE-416) Adobe
Substance3D - Stager
2026-01-13T19:44:45.957Z 2026-01-15T04:55:59.459Z
CVE-2026-23574
N/A
Not used N/A N/A 2026-01-15T03:55:08.745Z
CVE-2026-23575
N/A
Not used N/A N/A 2026-01-15T03:55:08.303Z
CVE-2026-23576
N/A
Not used N/A N/A 2026-01-15T03:55:07.854Z
CVE-2026-23577
N/A
Not used N/A N/A 2026-01-15T03:55:07.411Z
CVE-2026-23578
N/A
Not used N/A N/A 2026-01-15T03:55:06.967Z
CVE-2026-23579
N/A
Not used N/A N/A 2026-01-15T03:55:06.514Z
CVE-2026-23580
N/A
Not used N/A N/A 2026-01-15T03:55:06.047Z
CVE-2026-23581
N/A
Not used N/A N/A 2026-01-15T03:55:05.587Z
CVE-2026-23582
N/A
Not used N/A N/A 2026-01-15T03:55:05.073Z
CVE-2025-58318
5.8 (4.0)
DIAView - Authentication Bypass Vulnerability Delta Electronics
DIAView
2025-09-01T07:23:20.880Z 2026-01-15T02:23:12.087Z
CVE-2025-66176
8.8 (3.1)
There is a Stack overflow Vulnerability in the de… Hikvision
DS-K1T331
2026-01-13T01:47:27.191Z 2026-01-15T01:56:32.572Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-49928
6.5 (3.1)
WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site … CrocoBlock
JetWooBuilder
2025-10-22T14:32:14.597Z 2026-01-20T14:28:07.500Z
CVE-2025-49927
6.5 (3.1)
WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Sit… CrocoBlock
JetWooBuilder
2025-10-22T14:32:14.395Z 2026-01-20T14:28:07.599Z
CVE-2025-49926
7.3 (3.1)
WordPress Kalium theme <= 3.25 - Arbitrary Code Execut… Laborator
Kalium
2025-10-22T14:32:14.208Z 2026-01-20T14:28:07.637Z
CVE-2025-49925
7.3 (3.1)
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Cont… VibeThemes
WPLMS
2025-10-22T14:32:14.033Z 2026-01-20T15:39:46.393Z
CVE-2025-49924
7.3 (3.1)
WordPress Wholesale Suite plugin <= 2.2.4.2 - Privileg… Josh Kohlbach
Wholesale Suite
2025-10-22T14:32:13.804Z 2026-01-20T15:39:21.024Z
CVE-2025-49923
6.1 (3.1)
WordPress Seriously Simple Podcasting plugin <= 3.11.1… Craig Hewitt
Seriously Simple Podcasting
2025-10-22T14:32:13.596Z 2026-01-20T15:38:59.264Z
CVE-2025-49922
4.3 (3.1)
WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.3 -… etruel
WPeMatico RSS Feed Fetcher
2025-10-22T14:32:13.367Z 2026-01-20T15:38:36.695Z
CVE-2025-49921
7.3 (3.1)
WordPress JetReviews plugin <= 3.0.0 - Local File Incl… CrocoBlock
JetReviews
2025-10-22T14:32:13.059Z 2026-01-20T15:38:14.568Z
CVE-2025-49920
5.4 (3.1)
WordPress Web Accessibility By accessiBe plugin <= 2.1… accessiBe
Web Accessibility By accessiBe
2025-10-22T14:32:12.844Z 2026-01-20T14:28:07.628Z
CVE-2025-49919
5.8 (3.1)
WordPress eRoom plugin <= 1.5.6 - Sensitive Data Expos… WPCenter
eRoom
2025-12-18T07:21:44.250Z 2026-01-20T14:28:07.395Z
CVE-2025-49918
5.9 (3.1)
WordPress VikBooking Hotel Booking Engine & PMS plugin… e4jvikwp
VikBooking Hotel Booking Engine & PMS
2025-12-18T07:21:44.067Z 2026-01-20T14:28:07.426Z
CVE-2025-49917
4.4 (3.1)
WordPress Icegram Express Pro plugin <= 5.9.5 - Server… Icegram
Icegram Express Pro
2025-10-22T14:32:12.630Z 2026-01-20T14:28:07.536Z
CVE-2025-49916
8.6 (3.1)
WordPress MultiVendorX plugin <= 4.2.23 - Broken Acces… MultiVendorX
MultiVendorX
2025-10-22T14:32:12.420Z 2026-01-20T14:28:07.416Z
CVE-2025-49915
9.3 (3.1)
WordPress SMS Alert Order Notifications plugin <= 3.8.… Cozy Vision
SMS Alert Order Notifications
2025-10-22T14:32:12.221Z 2026-01-20T14:28:07.416Z
CVE-2025-49914
6.5 (3.1)
WordPress Restaurant Menu by MotoPress plugin <= 2.4.7… jetmonsters
Restaurant Menu by MotoPress
2025-12-18T07:21:43.896Z 2026-01-20T14:28:07.321Z
CVE-2025-49913
5.3 (3.1)
WordPress CoSchedule plugin <= 3.4.0 - Broken Access C… CoSchedule
CoSchedule
2025-10-22T14:32:11.977Z 2026-01-20T14:28:07.305Z
CVE-2025-49912
5.9 (3.1)
WordPress Email Subscription Popup plugin <= 1.2.26 - … Nks
Email Subscription Popup
2025-10-22T14:32:11.545Z 2026-01-20T14:28:07.305Z
CVE-2025-49911
7.1 (3.1)
WordPress WooCommerce Vehicle Parts Finder plugin <= 3… wpinstinct
WooCommerce Vehicle Parts Finder
2025-10-22T14:32:11.293Z 2026-01-20T14:28:07.298Z
CVE-2025-49910
8.2 (3.1)
WordPress WPGuppy plugin <= 1.1.4 - Broken Access Cont… AmentoTech Private Limited
WPGuppy
2025-10-22T14:32:11.095Z 2026-01-20T14:28:07.272Z
CVE-2025-49909
6.1 (3.1)
WordPress Penci Bookmark & Follow plugin < 2.4 - Cross… PenciDesign
Penci Bookmark & Follow
2025-11-06T15:53:56.279Z 2026-01-20T14:28:07.191Z
CVE-2025-49907
4.3 (3.1)
WordPress MDTF plugin <= 1.3.3.9 - Broken Access Contr… RealMag777
MDTF
2025-10-22T14:32:10.614Z 2026-01-20T14:28:07.207Z
CVE-2025-49906
5.3 (3.1)
WordPress WPComplete plugin <= 2.9.5.3 - Broken Access… StellarWP
WPComplete
2025-10-22T14:32:10.402Z 2026-01-20T14:28:07.214Z
CVE-2025-49905
6.1 (3.1)
WordPress Range Slider Addon for Gravity Forms plugin … PluginsCafe
Range Slider Addon for Gravity Forms
2025-11-06T15:53:55.700Z 2026-01-20T14:28:07.161Z
CVE-2025-49904
6.1 (3.1)
WordPress Booking and Rental Manager plugin <= 2.5.3 -… magepeopleteam
Booking and Rental Manager
2025-11-06T15:53:55.162Z 2026-01-20T14:28:07.157Z
CVE-2025-49903
5.3 (3.1)
WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access … bdthemes
ZoloBlocks
2025-10-22T14:32:10.215Z 2026-01-20T14:28:07.088Z
CVE-2025-49902
6.5 (3.1)
WordPress Login Page Customizer – Customizer Login Pag… A WP Life
Login Page Customizer &#8211; Customizer Login Page, Admin Page, Custom Design
2025-12-18T07:21:43.721Z 2026-01-20T14:28:07.158Z
CVE-2025-49901
9.8 (3.1)
WordPress Simple Link Directory plugin < 14.8.1 - Brok… quantumcloud
Simple Link Directory
2025-10-22T14:32:10.033Z 2026-01-20T14:28:07.087Z
CVE-2025-49900
8.8 (3.1)
WordPress Advanced scrollbar plugin <= 1.1.8 - Privile… bPlugins
Advanced scrollbar
2025-11-06T15:53:54.586Z 2026-01-20T14:28:07.207Z
CVE-2025-49899
5.3 (3.1)
WordPress Whydonate plugin <= 4.0.15 - Broken Access C… jjlemstra
Whydonate
2025-10-22T14:32:09.852Z 2026-01-20T14:28:07.136Z
CVE-2025-49398
6.1 (3.1)
WordPress Easy Appointments plugin <= 3.12.14 - Conten… Easy Appointments
Easy Appointments
2025-11-06T15:53:53.979Z 2026-01-20T14:28:07.235Z
ID Description Published Updated
fkie_cve-2025-49926 Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium … 2025-10-22T15:15:38.583 2026-01-20T15:16:42.023
fkie_cve-2025-49925 Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality… 2025-10-22T15:15:38.460 2026-01-20T15:16:41.883
fkie_cve-2025-49924 Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale… 2025-10-22T15:15:38.327 2026-01-20T15:16:41.753
fkie_cve-2025-49923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:38.193 2026-01-20T15:16:41.587
fkie_cve-2025-49922 Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploitin… 2025-10-22T15:15:38.073 2026-01-20T15:16:41.450
fkie_cve-2025-49921 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-10-22T15:15:37.943 2026-01-20T15:16:41.310
fkie_cve-2025-49920 Missing Authorization vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Ex… 2025-10-22T15:15:37.817 2026-01-20T15:16:41.180
fkie_cve-2025-49919 Insertion of Sensitive Information Into Sent Data vulnerability in WPCenter eRoom eroom-zoom-meetin… 2025-12-18T08:15:52.227 2026-01-20T15:16:41.043
fkie_cve-2025-49918 Insertion of Sensitive Information Into Sent Data vulnerability in e4jvikwp VikBooking Hotel Bookin… 2025-12-18T08:15:52.083 2026-01-20T15:16:40.910
fkie_cve-2025-49917 Server-Side Request Forgery (SSRF) vulnerability in Icegram Icegram Express Pro email-subscribers-p… 2025-10-22T15:15:37.693 2026-01-20T15:16:40.777
fkie_cve-2025-49916 Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows… 2025-10-22T15:15:37.573 2026-01-20T15:16:40.640
fkie_cve-2025-49915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-10-22T15:15:37.440 2026-01-20T15:16:40.510
fkie_cve-2025-49914 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in jetmons… 2025-12-18T08:15:51.957 2026-01-20T15:16:40.387
fkie_cve-2025-49913 Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploit… 2025-10-22T15:15:37.317 2026-01-20T15:16:40.257
fkie_cve-2025-49912 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:37.183 2026-01-20T15:16:40.117
fkie_cve-2025-49911 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:37.043 2026-01-20T15:16:39.980
fkie_cve-2025-49910 Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Acces… 2025-10-22T15:15:36.913 2026-01-20T15:16:39.847
fkie_cve-2025-49909 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:54.583 2026-01-20T15:16:39.717
fkie_cve-2025-49907 Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allo… 2025-10-22T15:15:36.643 2026-01-20T15:16:39.447
fkie_cve-2025-49906 Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionali… 2025-10-22T15:15:36.503 2026-01-20T15:16:39.313
fkie_cve-2025-49905 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:54.430 2026-01-20T15:16:39.180
fkie_cve-2025-49904 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:54.243 2026-01-20T15:16:39.050
fkie_cve-2025-49903 Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly… 2025-10-22T15:15:36.377 2026-01-20T15:16:38.917
fkie_cve-2025-49902 Missing Authorization vulnerability in A WP Life Login Page Customizer &#8211; Customizer Login Pag… 2025-12-18T08:15:51.817 2026-01-20T15:16:38.783
fkie_cve-2025-49901 Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link … 2025-10-22T15:15:36.243 2026-01-20T15:16:38.650
fkie_cve-2025-49900 Incorrect Privilege Assignment vulnerability in bPlugins Advanced scrollbar advanced-scrollbar allo… 2025-11-06T16:15:54.070 2026-01-20T15:16:38.510
fkie_cve-2025-49899 Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functional… 2025-10-22T15:15:36.110 2026-01-20T15:16:38.370
fkie_cve-2025-49398 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Easy… 2025-11-06T16:15:53.890 2026-01-20T15:16:38.237
fkie_cve-2025-49394 Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gall… 2025-11-06T16:15:53.720 2026-01-20T15:16:38.103
fkie_cve-2025-49393 Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allo… 2025-11-06T16:15:53.413 2026-01-20T15:16:37.970
ID Severity Description Published Updated
ghsa-9wqc-j2xj-3mh2
7.1 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… 2026-01-05T15:32:14Z 2026-01-05T15:32:14Z
ghsa-8m2h-8f3p-p428
9.1 (3.1)
Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allow… 2026-01-05T15:32:14Z 2026-01-05T15:32:14Z
ghsa-2f72-9984-8jxx
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… 2026-01-05T15:32:14Z 2026-01-05T15:32:14Z
ghsa-mrpf-c78h-6xpw
7.5 (3.1)
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 a… 2026-01-05T15:32:13Z 2026-01-05T15:32:13Z
ghsa-8v48-phm3-pw95
5.3 (3.1)
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 a… 2026-01-05T15:32:13Z 2026-01-05T15:32:13Z
ghsa-4c5f-9mj4-m247
flagd: Multiple Go Runtime CVEs Impact Security and Availability 2026-01-05T15:07:05Z 2026-01-05T15:07:46Z
ghsa-cw39-r4h6-8j3x
7.5 (3.1)
MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation 2026-01-05T14:59:12Z 2026-01-05T14:59:12Z
ghsa-95qg-89c2-w5hj
7.3 (3.1)
theshit vulnerable to unsafe loading of user-owned Python rules when running as root 2025-12-30T23:45:51Z 2026-01-05T14:55:05Z
ghsa-w59w-vf2m-vcq9
3.5 (3.1)
2.0 (4.0)
A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown fu… 2026-01-05T12:30:31Z 2026-01-05T12:30:31Z
ghsa-h7x7-9j7c-cghf
3.5 (3.1)
2.0 (4.0)
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability… 2026-01-05T12:30:31Z 2026-01-05T12:30:31Z
ghsa-5hgf-7jfc-7xx5
4.3 (3.1)
2.1 (4.0)
A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected e… 2026-01-05T12:30:31Z 2026-01-05T12:30:31Z
ghsa-wv4f-w56f-8r25
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. … 2026-01-05T12:30:30Z 2026-01-05T12:30:30Z
ghsa-r58x-79pj-f5rc
6.3 (3.1)
2.1 (4.0)
A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue a… 2026-01-05T12:30:30Z 2026-01-05T12:30:30Z
ghsa-8w44-rx65-php7
7.3 (3.1)
5.5 (4.0)
A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vu… 2026-01-05T12:30:30Z 2026-01-05T12:30:30Z
ghsa-7r8q-9953-q2xj
In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after f… 2026-01-05T12:30:29Z 2026-01-05T12:30:29Z
ghsa-74p6-p33f-j22m
In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work … 2026-01-05T12:30:29Z 2026-01-05T12:30:29Z
ghsa-34rq-jg85-wh39
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-o… 2026-01-05T12:30:29Z 2026-01-05T12:30:29Z
ghsa-rh9w-725c-v2x8
6.8 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… 2025-12-22T12:30:21Z 2026-01-05T12:30:28Z
ghsa-prgh-cpcp-fffw
In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive k… 2026-01-05T12:30:28Z 2026-01-05T12:30:28Z
ghsa-h4r4-6hvf-34r8
7.3 (3.1)
A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds chec… 2025-10-30T06:30:53Z 2026-01-05T12:30:28Z
ghsa-fwr9-mwqr-4wq5
7.2 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-22T12:30:21Z 2026-01-05T12:30:28Z
ghsa-cch3-p6q2-xfvj
In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with… 2026-01-05T12:30:28Z 2026-01-05T12:30:28Z
ghsa-9v23-62w5-4mfm
6.8 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… 2025-12-22T12:30:21Z 2026-01-05T12:30:28Z
ghsa-892r-x96w-jh76
7.3 (3.1)
A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resou… 2025-10-30T06:30:54Z 2026-01-05T12:30:28Z
ghsa-4x8g-c253-mrj2
In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double fr… 2026-01-05T12:30:28Z 2026-01-05T12:30:28Z
ghsa-49pm-cgmh-hw25
7.3 (3.1)
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notificat… 2025-10-30T06:30:53Z 2026-01-05T12:30:28Z
ghsa-vf74-qp5x-59h3
8.8 (3.1)
7.4 (4.0)
A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy o… 2026-01-05T09:30:19Z 2026-01-05T09:30:19Z
ghsa-mxr6-vw74-c6qj
4.3 (3.1)
5.3 (4.0)
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability,… 2026-01-05T09:30:19Z 2026-01-05T09:30:19Z
ghsa-mg34-5r5x-pw7r
2.8 (3.1)
There is a username enumeration via local user login in Entrinsik Informer v5.10.1 which allows mal… 2025-12-17T18:31:33Z 2026-01-05T09:30:19Z
ghsa-jmxj-gv3g-f5g6
6.3 (3.1)
2.1 (4.0)
A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unkno… 2026-01-05T09:30:19Z 2026-01-05T09:30:19Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-26533 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.104763Z
gsd-2024-26885 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAP_HASH… 2024-02-20T06:02:29.104091Z
gsd-2024-26653 In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix… 2024-02-20T06:02:29.103800Z
gsd-2024-26515 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.102676Z
gsd-2024-26901 In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handl… 2024-02-20T06:02:29.101830Z
gsd-2024-26595 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_… 2024-02-20T06:02:29.101546Z
gsd-2024-26405 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.101264Z
gsd-2024-26712 In the Linux kernel, the following vulnerability has been resolved: powerpc/kasan: Fix a… 2024-02-20T06:02:29.100460Z
gsd-2024-26695 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix nu… 2024-02-20T06:02:29.100180Z
gsd-2024-26487 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.099909Z
gsd-2024-26820 In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Register … 2024-02-20T06:02:29.099641Z
gsd-2024-26939 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.099364Z
gsd-2024-26577 VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application ha… 2024-02-20T06:02:29.098830Z
gsd-2024-26622 In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF writ… 2024-02-20T06:02:29.098543Z
gsd-2024-26910 In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fi… 2024-02-20T06:02:29.098250Z
gsd-2024-26834 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_… 2024-02-20T06:02:29.097981Z
gsd-2024-26536 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.097457Z
gsd-2024-26541 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.097138Z
gsd-2024-26584 In the Linux kernel, the following vulnerability has been resolved: net: tls: handle bac… 2024-02-20T06:02:29.096869Z
gsd-2024-26865 In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-af… 2024-02-20T06:02:29.096346Z
gsd-2024-26733 In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflo… 2024-02-20T06:02:29.096070Z
gsd-2024-26518 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.095789Z
gsd-2024-26532 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.095517Z
gsd-2024-26802 In the Linux kernel, the following vulnerability has been resolved: stmmac: Clear variab… 2024-02-20T06:02:29.094976Z
gsd-2024-26414 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.094670Z
gsd-2024-26663 In the Linux kernel, the following vulnerability has been resolved: tipc: Check the bear… 2024-02-20T06:02:29.094093Z
gsd-2024-26535 The format of the source doesn't require a description, click on the link for more details. 2024-02-20T06:02:29.093772Z
gsd-2024-26490 A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v… 2024-02-20T06:02:29.092745Z
gsd-2024-26461 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi… 2024-02-20T06:02:29.092208Z
gsd-2024-26858 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use a mem… 2024-02-20T06:02:29.091939Z
ID Description Published Updated
mal-2025-184838 Malicious code in poliaoz-aiksgsdfo-aon (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184837 Malicious code in poliaoz-aiksgsdfo-aodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184836 Malicious code in poliaoz-aiksgsdfo-aoan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184835 Malicious code in poliaoz-aiksgsdfo-alon (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184834 Malicious code in poliaoz-aiksgsdfo-alfdaion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184833 Malicious code in poliaoz-aiksgsdfo-alfdadgsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184832 Malicious code in poliaoz-aiksgsdfo-alaon (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184831 Malicious code in poliaoz-aiksgsdfo-ahodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184830 Malicious code in poliaoz-aiksgsdfo-ahksodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184829 Malicious code in poliaoz-aiksgsdfo-ahksgsfsdsdn (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184828 Malicious code in poliaoz-aiksgsdfo-ahksgodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184827 Malicious code in poliaoz-aiksgsdfo-ahksgasodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184826 Malicious code in poliaoz-aiksgsdfo-ahksgasiodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184825 Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184824 Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdn (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184823 Malicious code in poliaoz-aiksgsdfo-ahksgasifsdusdan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184822 Malicious code in poliaoz-aiksgsdfo-ahksgasifsdsdn (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184821 Malicious code in poliaoz-aiksgsdfo-ahksgasifodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184820 Malicious code in poliaoz-aiksgsdfo-ahksgasifdusodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184819 Malicious code in poliaoz-aiksgsdfo-ahksgasifdodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184818 Malicious code in poliaoz-aiksgsdfo-ahksgasfsdsdn (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184817 Malicious code in poliaoz-aiksgsdfo-ahksgaodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184816 Malicious code in poliaoz-aiksgsdfo-ahkodan (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184815 Malicious code in poliaoz-aiksdfo-alfdadgsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184814 Malicious code in poliaoz-aiksdfo-alfdaassdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184813 Malicious code in poliaoz-aiksdfo-alfdaasgsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184812 Malicious code in poliaoz-aiksdfo-alfdaasdugsgsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184811 Malicious code in poliaoz-aiksdfo-alfdaasdugsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184810 Malicious code in poliaoz-aiksdfo-alfdaasdugsdgsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184809 Malicious code in poliaoz-aiksdfo-alfdaasduggsdion (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2024:4779 Red Hat Security Advisory: python3 security update 2024-07-23T16:35:59+00:00 2025-11-21T19:07:26+00:00
rhsa-2024:4776 Red Hat Security Advisory: cups security update 2024-07-23T16:41:24+00:00 2025-11-21T19:07:25+00:00
rhsa-2024:4774 Red Hat Security Advisory: linux-firmware security update 2024-07-23T16:37:19+00:00 2025-11-21T19:07:24+00:00
rhsa-2024:4757 Red Hat Security Advisory: libvirt security update 2024-07-23T16:33:03+00:00 2025-11-21T19:07:24+00:00
rhsa-2024:4766 Red Hat Security Advisory: python3 security update 2024-07-23T16:38:49+00:00 2025-11-21T19:07:23+00:00
rhsa-2024:4756 Red Hat Security Advisory: libuv security update 2024-07-23T16:39:13+00:00 2025-11-21T19:07:20+00:00
rhsa-2024:4749 Red Hat Security Advisory: edk2 security update 2024-07-23T16:35:09+00:00 2025-11-21T19:07:19+00:00
rhsa-2024:4747 Red Hat Security Advisory: edk2 security update 2024-07-23T15:29:53+00:00 2025-11-21T19:07:19+00:00
rhsa-2024:4741 Red Hat Security Advisory: linux-firmware security update 2024-07-23T15:32:10+00:00 2025-11-21T19:07:16+00:00
rhsa-2024:4739 Red Hat Security Advisory: tpm2-tss security update 2024-07-23T15:36:23+00:00 2025-11-21T19:07:14+00:00
rhsa-2024:4733 Red Hat Security Advisory: linux-firmware security update 2024-07-23T14:58:48+00:00 2025-11-21T19:07:13+00:00
rhsa-2024:4732 Red Hat Security Advisory: nghttp2 security update 2024-07-23T14:58:43+00:00 2025-11-21T19:07:12+00:00
rhsa-2024:4731 Red Hat Security Advisory: kernel security update 2024-07-23T14:59:09+00:00 2025-11-21T19:07:10+00:00
rhsa-2024:4727 Red Hat Security Advisory: Advanced Virtualization 8.2.1z security update 2024-07-23T13:19:48+00:00 2025-11-21T19:07:10+00:00
rhsa-2024:4729 Red Hat Security Advisory: kernel-rt security update 2024-07-23T14:57:43+00:00 2025-11-21T19:07:08+00:00
rhsa-2024:4726 Red Hat Security Advisory: httpd security update 2024-07-23T13:24:43+00:00 2025-11-21T19:07:08+00:00
rhsa-2024:4724 Red Hat Security Advisory: virt:av and virt-devel:av security update 2024-07-23T12:31:55+00:00 2025-11-21T19:07:07+00:00
rhsa-2024:4721 Red Hat Security Advisory: nodejs security update 2024-07-23T08:38:12+00:00 2025-11-21T19:07:06+00:00
rhsa-2024:4720 Red Hat Security Advisory: httpd:2.4 security update 2024-07-23T08:57:47+00:00 2025-11-21T19:07:05+00:00
rhsa-2024:4719 Red Hat Security Advisory: httpd:2.4 security update 2024-07-23T08:59:27+00:00 2025-11-21T19:07:05+00:00
rhsa-2024:4716 Red Hat Security Advisory: openssh security update 2024-07-23T08:49:37+00:00 2025-11-21T19:07:03+00:00
rhsa-2024:4715 Red Hat Security Advisory: cups security update 2024-07-24T08:50:46+00:00 2025-11-21T19:07:02+00:00
rhsa-2024:4702 Red Hat Security Advisory: OpenShift Container Platform 4.15.23 packages and security update 2024-07-25T14:32:28+00:00 2025-11-21T19:07:00+00:00
rhsa-2024:4673 Red Hat Security Advisory: firefox security update 2024-07-22T01:26:08+00:00 2025-11-21T19:06:58+00:00
rhsa-2024:4647 Red Hat Security Advisory: qt5-qtbase security update 2024-07-18T16:09:10+00:00 2025-11-21T19:06:55+00:00
rhsa-2024:4646 Red Hat Security Advisory: qt5-qtbase security update 2024-07-19T10:35:42+00:00 2025-11-21T19:06:54+00:00
rhsa-2024:4645 Red Hat Security Advisory: qt5-qtbase security update 2024-07-19T10:57:22+00:00 2025-11-21T19:06:54+00:00
rhsa-2024:4641 Red Hat Security Advisory: libndp security update 2024-07-18T16:33:15+00:00 2025-11-21T19:06:54+00:00
rhsa-2024:4644 Red Hat Security Advisory: qt5-qtbase security update 2024-07-18T16:34:55+00:00 2025-11-21T19:06:52+00:00
rhsa-2024:4643 Red Hat Security Advisory: libndp security update 2024-07-18T16:27:20+00:00 2025-11-21T19:06:52+00:00
ID Description Published Updated
msrc_cve-2022-29151 Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-29150 Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-26788 PowerShell Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-23279 Windows ALPC Elevation of Privilege Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-23270 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-22713 Windows Hyper-V Denial of Service Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-21978 Microsoft Exchange Server Elevation of Privilege Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2022-21972 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 2022-05-10T08:00:00.000Z 2022-05-10T07:00:00.000Z
msrc_cve-2021-46790 ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however it is shipped by some Linux distributions. 2022-05-02T00:00:00.000Z 2022-05-10T00:00:00.000Z
msrc_cve-2022-21486 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). 2022-04-02T00:00:00.000Z 2022-05-04T00:00:00.000Z
msrc_cve-2022-21485 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21484 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21483 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21482 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21479 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21478 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-21451 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-05-03T00:00:00.000Z
msrc_cve-2022-28327 The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input. 2022-04-02T00:00:00.000Z 2022-04-30T00:00:00.000Z
msrc_cve-2022-24675 encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. 2022-04-02T00:00:00.000Z 2022-04-29T00:00:00.000Z
msrc_cve-2022-21489 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-04-02T00:00:00.000Z 2022-04-29T00:00:00.000Z
msrc_cve-2022-21444 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-04-29T00:00:00.000Z
msrc_cve-2022-1420 Use of Out-of-range Pointer Offset in vim/vim 2022-04-02T00:00:00.000Z 2022-04-29T00:00:00.000Z
msrc_cve-2022-29147 Microsoft Edge (Chromium-based) Spoofing Vulnerability 2022-04-12T08:00:00.000Z 2022-04-28T07:00:00.000Z
msrc_cve-2022-29146 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-28T07:00:00.000Z
msrc_cve-2022-29458 ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
msrc_cve-2022-21460 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N). 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
msrc_cve-2022-21454 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
msrc_cve-2022-21425 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
msrc_cve-2022-21417 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
msrc_cve-2022-21412 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-04-02T00:00:00.000Z 2022-04-28T00:00:00.000Z
ID Description Updated
var-201404-0578 The session-termination functionality on Cisco ONS 15454 controller cards with software 9… 2025-04-13T23:18:23.668000Z
var-201404-0579 Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to… 2025-04-13T23:18:23.640000Z
var-201404-0577 Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to … 2025-04-13T23:18:23.612000Z
var-201404-0576 Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to … 2025-04-13T23:18:23.584000Z
var-201404-0641 Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service … 2025-04-13T23:18:23.509000Z
var-201404-0640 Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINE… 2025-04-13T23:18:23.458000Z
var-201404-0639 Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Serve… 2025-04-13T23:18:23.410000Z
var-201404-0682 The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11,… 2025-04-13T23:18:23.347000Z
var-201405-0171 Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attacker… 2025-04-13T23:18:22.947000Z
var-201405-0213 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X … 2025-04-13T23:18:22.878000Z
var-201405-0358 The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of se… 2025-04-13T23:18:22.843000Z
var-201405-0484 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to ca… 2025-04-13T23:18:22.665000Z
var-201405-0487 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows… 2025-04-13T23:18:22.636000Z
var-201405-0486 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows… 2025-04-13T23:18:22.606000Z
var-201405-0483 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to ca… 2025-04-13T23:18:22.577000Z
var-201405-0482 Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to ca… 2025-04-13T23:18:22.547000Z
var-201405-0485 The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows… 2025-04-13T23:18:22.517000Z
var-201406-0070 Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access … 2025-04-13T23:18:22.189000Z
var-201406-0154 Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeav… 2025-04-13T23:18:22.041000Z
var-201406-0321 Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.… 2025-04-13T23:18:21.814000Z
var-201406-0323 logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.G… 2025-04-13T23:18:21.780000Z
var-201407-0068 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and b… 2025-04-13T23:18:21.523000Z
var-201407-0069 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and b… 2025-04-13T23:18:21.482000Z
var-201407-0600 Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and b… 2025-04-13T23:18:21.438000Z
var-201407-0443 Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before… 2025-04-13T23:18:21.260000Z
var-201408-0164 The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices pro… 2025-04-13T23:18:20.417000Z
var-201409-0392 Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allo… 2025-04-13T23:18:19.987000Z
var-201410-0037 F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it … 2025-04-13T23:18:19.606000Z
var-201410-0077 The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software … 2025-04-13T23:18:19.577000Z
var-201410-0079 The Clientless SSL VPN portal in Cisco ASA Software 8.2 before 8.2(5.51), 8.3 before 8.3(… 2025-04-13T23:18:19.547000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:14776-1 Security update for libcares2 2021-08-10T10:11:19Z 2021-08-10T10:11:19Z
suse-su-2021:2647-1 Security update for the Linux Kernel 2021-08-10T08:18:19Z 2021-08-10T08:18:19Z
suse-su-2021:2646-1 Security update for the Linux Kernel 2021-08-10T08:03:37Z 2021-08-10T08:03:37Z
suse-su-2021:2645-1 Security update for the Linux Kernel 2021-08-10T08:03:30Z 2021-08-10T08:03:30Z
suse-su-2021:2644-1 Security update for the Linux Kernel 2021-08-10T08:03:19Z 2021-08-10T08:03:19Z
suse-su-2021:2643-1 Security update for the Linux Kernel 2021-08-10T08:03:06Z 2021-08-10T08:03:06Z
suse-su-2021:2638-1 Security update for php72 2021-08-06T09:58:16Z 2021-08-06T09:58:16Z
suse-su-2021:2637-1 Security update for php7 2021-08-06T09:57:48Z 2021-08-06T09:57:48Z
suse-su-2021:2636-1 Security update for php74 2021-08-06T09:57:02Z 2021-08-06T09:57:02Z
suse-su-2021:2635-1 Security update for fastjar 2021-08-06T09:56:27Z 2021-08-06T09:56:27Z
suse-su-2021:2634-1 Security update for mariadb 2021-08-06T09:56:10Z 2021-08-06T09:56:10Z
suse-su-2021:14774-1 Security update for kvm 2021-08-06T09:11:49Z 2021-08-06T09:11:49Z
suse-su-2021:2632-1 Security update for python-Pillow 2021-08-06T09:11:36Z 2021-08-06T09:11:36Z
suse-su-2021:2631-1 Security update for python-Pillow 2021-08-06T09:11:24Z 2021-08-06T09:11:24Z
suse-su-2021:2621-1 Security update for djvulibre 2021-08-05T08:36:53Z 2021-08-05T08:36:53Z
suse-su-2021:2620-1 Security update for nodejs8 2021-08-05T08:36:27Z 2021-08-05T08:36:27Z
suse-su-2021:2619-1 Security update for djvulibre 2021-08-05T08:35:48Z 2021-08-05T08:35:48Z
suse-su-2021:2618-1 Security update for nodejs8 2021-08-05T08:28:03Z 2021-08-05T08:28:03Z
suse-su-2021:2617-1 Security update for mariadb 2021-08-05T08:27:49Z 2021-08-05T08:27:49Z
suse-su-2021:2616-1 Security update for mariadb 2021-08-05T08:26:00Z 2021-08-05T08:26:00Z
suse-su-2021:2599-2 Security update for the Linux Kernel 2021-08-05T08:24:13Z 2021-08-05T08:24:13Z
suse-su-2021:2615-1 Security update for libsndfile 2021-08-05T08:19:53Z 2021-08-05T08:19:53Z
suse-su-2021:2614-1 Security update for spice-vdagent 2021-08-05T08:19:23Z 2021-08-05T08:19:23Z
suse-su-2021:2613-1 Security update for java-11-openjdk 2021-08-05T08:19:05Z 2021-08-05T08:19:05Z
suse-su-2021:2612-1 Security update for apache-commons-compress 2021-08-05T08:17:56Z 2021-08-05T08:17:56Z
suse-su-2021:14773-1 Security update for djvulibre 2021-08-04T13:01:14Z 2021-08-04T13:01:14Z
suse-su-2021:2605-1 Security update for mariadb 2021-08-04T10:59:36Z 2021-08-04T10:59:36Z
suse-su-2021:14772-1 Security update for kvm 2021-08-03T13:12:31Z 2021-08-03T13:12:31Z
suse-su-2021:2600-1 Security update for webkit2gtk3 2021-08-03T12:48:27Z 2021-08-03T12:48:27Z
suse-su-2021:2599-1 Security update for the Linux Kernel 2021-08-03T12:46:44Z 2021-08-03T12:46:44Z
ID Description Published Updated
cnvd-2025-00883 Foxit PDF Reader越界读取漏洞(CNVD-2025-00883) 2024-08-13 2025-01-10
cnvd-2025-00882 Foxit PDF Reader越界读取漏洞(CNVD-2025-00882) 2024-08-13 2025-01-10
cnvd-2025-00881 Rockwell Automation Arena Simulation DOE文件内存错误引用代码执行漏洞 2024-12-23 2025-01-10
cnvd-2025-00880 Siemens Teamcenter Visualization和Siemens Tecnomatix Plant Simulation越界读取漏洞 2024-12-20 2025-01-10
cnvd-2025-00879 D-Link DAP-1520拒绝服务漏洞 2024-12-20 2025-01-10
cnvd-2025-00878 TOTOLINK AC1200 T8 setWiFiAclRules函数缓冲区溢出漏洞 2024-09-20 2025-01-10
cnvd-2025-00877 TOTOLINK AC1200 T8 UploadCustomModule函数缓冲区溢出漏洞 2024-09-20 2025-01-10
cnvd-2025-00876 Google Android拒绝服务漏洞(CNVD-2025-00876) 2025-01-03 2025-01-10
cnvd-2025-00875 Google Android信息泄露漏洞(CNVD-2025-00875) 2025-01-03 2025-01-10
cnvd-2025-00874 IBM App Connect Enterprise拒绝服务漏洞(CNVD-2025-00874) 2024-05-23 2025-01-10
cnvd-2025-00873 Google Android存在未明漏洞(CNVD-2025-00873) 2024-03-01 2025-01-10
cnvd-2025-00872 Huawei HarmonyOS和EMUI App Multiplier模块访问权限验证漏洞 2024-09-30 2025-01-10
cnvd-2025-00871 Huawei HarmonyOS和EMUI HAL-WIFI模块越界写入漏洞 2024-09-30 2025-01-10
cnvd-2025-00870 Huawei EMUI和HarmonyOS系统服务模块服务逻辑错误漏洞 2024-12-20 2025-01-10
cnvd-2025-00869 Huawei HarmonyOS图像解码模块读/写漏洞 2024-12-20 2025-01-10
cnvd-2025-00868 Huawei HarmonyOS UIExtension模块跨进程屏幕堆栈漏洞 2024-12-20 2025-01-10
cnvd-2025-00692 用友网络科技股份有限公司用友NC存在任意文件读取漏洞 2024-11-26 2025-01-10
cnvd-2025-00867 Mozilla Thunderbird信息泄露漏洞(CNVD-2025-00867) 2024-11-21 2025-01-09
cnvd-2025-00866 多款Mozilla产品代码执行漏洞(CNVD-2025-00866) 2024-12-03 2025-01-09
cnvd-2025-00865 Mozilla Firefox和Thunderbird代码执行漏洞(CNVD-2025-00865) 2024-12-03 2025-01-09
cnvd-2025-00864 Mozilla Firefox和Thunderbird拒绝服务漏洞(CNVD-2025-00864) 2024-12-03 2025-01-09
cnvd-2025-00863 Mozilla Firefox和Thunderbird拒绝服务漏洞 2024-12-03 2025-01-09
cnvd-2025-00862 多款Mozilla产品代码执行漏洞(CNVD-2025-00862) 2024-12-03 2025-01-09
cnvd-2025-00861 Mozilla Firefox和Thunderbird欺骗漏洞 2024-12-04 2025-01-09
cnvd-2025-00860 多款Mozilla产品欺骗漏洞(CNVD-2025-00860) 2024-12-04 2025-01-09
cnvd-2025-00859 Mozilla Firefox和Thunderbird信息泄露漏洞(CNVD-2025-00859) 2024-12-04 2025-01-09
cnvd-2025-00858 Mozilla Firefox和Thunderbird未授权访问漏洞 2024-12-04 2025-01-09
cnvd-2025-00718 四川迅睿云软件开发有限公司XunRuiCMS存在拒绝服务漏洞 2024-11-29 2025-01-09
cnvd-2025-00716 用友网络科技股份有限公司用友NC存在命令执行漏洞 2024-11-29 2025-01-09
cnvd-2024-49866 中兴通讯股份有限公司ZSRV2 智能集成多业务路由器存在弱口令漏洞 2024-11-25 2025-01-09
ID Description Published Updated
certa-2012-avi-263 Multiples vulnérabilités dans Adobe Illustrator 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-262 Multiples vulnérabilités dans les produits Apple 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-261 Vulnérabilités dans Pidgin 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-260 Vulnérabilités dans .NET Framework 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-259 Multiples vulnérabilités dans Office, Windows, .NET et Silverlight 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-258 Vulnérabilité dans le gestionnaire de partitions de Windows 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-257 Vulnérabilités dans la pile TCP/IP de Windows 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-256 Vulnérabilité dans Microsoft Visio Viewer 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-255 Vulnérabilités dans Microsoft Office 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-254 Vulnérabilité dans Microsoft Office 2012-05-09T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-224 Vulnérabilité dans OpenSSL 2012-04-20T00:00:00.000000 2012-05-09T00:00:00.000000
certa-2012-avi-253 Vulnérabilités dans FFmpeg 2012-05-07T00:00:00.000000 2012-05-07T00:00:00.000000
certa-2012-avi-251 Vulnérabilité dans IBM AIX 2012-05-07T00:00:00.000000 2012-05-07T00:00:00.000000
certa-2012-avi-250 Multiples vulnérabilités dans Drupal 2012-05-04T00:00:00.000000 2012-05-04T00:00:00.000000
certa-2012-avi-249 Multiples vulnérabilités dans VMware 2012-05-04T00:00:00.000000 2012-05-04T00:00:00.000000
certa-2012-avi-248 Vulnérabilités dans HP System Health Application and Command Line Utilities 2012-05-04T00:00:00.000000 2012-05-04T00:00:00.000000
certa-2012-avi-247 Vulnérabilités dans HP Insight Management Agents 2012-05-04T00:00:00.000000 2012-05-04T00:00:00.000000
certa-2012-avi-246 Vulnérabilité dans PHP 2012-05-04T00:00:00.000000 2012-05-04T00:00:00.000000
certa-2012-avi-245 Vulnérabilité dans Citrix 2012-05-03T00:00:00.000000 2012-05-03T00:00:00.000000
certa-2012-avi-244 Vulnérabilités dans PHP 2012-05-03T00:00:00.000000 2012-05-03T00:00:00.000000
certa-2012-avi-243 Vulnérabilité dans HP SNMP Agents 2012-05-03T00:00:00.000000 2012-05-03T00:00:00.000000
certa-2012-avi-242 Vulnérabilités dans SumatraPDF 2012-05-03T00:00:00.000000 2012-05-03T00:00:00.000000
certa-2012-avi-241 Multiples vulnérabilités dans HP SIM 2012-05-02T00:00:00.000000 2012-05-02T00:00:00.000000
certa-2012-avi-240 Vulnérabilité dans Samba 2012-05-02T00:00:00.000000 2012-05-02T00:00:00.000000
certa-2012-avi-239 Multiples vulnérabilités dans Google Chrome 2012-05-02T00:00:00.000000 2012-05-02T00:00:00.000000
certa-2012-avi-238 Multiples vulnérabilités dans HP NonStop 2012-04-30T00:00:00.000000 2012-04-30T00:00:00.000000
certa-2012-avi-237 Multiples vulnérabilités dans VMware 2012-04-27T00:00:00.000000 2012-04-27T00:00:00.000000
certa-2012-avi-236 Vulnérabilité dans certains produits HP 2012-04-27T00:00:00.000000 2012-04-27T00:00:00.000000
certa-2012-avi-235 Multiples vulnérabilités dans Firefox Mobile 2012-04-26T00:00:00.000000 2012-04-26T00:00:00.000000
certa-2012-avi-234 Multiples vulnérabilités dans Mozilla 2012-04-26T00:00:00.000000 2012-04-26T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated