Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-20894 |
4.8 (3.0)
4.8 (4.0)
|
Cross-site scripting vulnerability exists in mult… |
TOA Corporation |
Multiple Network Cameras TRIFORA 3 series |
2026-01-16T08:16:57.696Z | 2026-01-16T13:45:31.792Z |
| CVE-2026-22876 |
6.5 (3.0)
7.1 (4.0)
|
Path Traversal vulnerability exists in multiple N… |
TOA Corporation |
Multiple Network Cameras TRIFORA 3 series |
2026-01-16T08:17:13.902Z | 2026-01-16T13:45:02.768Z |
| CVE-2026-1004 |
5.3 (3.1)
|
Essential Addons for Elementor <= 6.5.5 - Missing Auth… |
wpdevteam |
Essential Addons for Elementor – Popular Elementor Templates & Widgets |
2026-01-16T08:23:37.542Z | 2026-01-16T13:44:34.348Z |
| CVE-2025-10145 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7073. Reason: This candidate is a reservation duplicate of CVE-2023-7073. Notes: All CVE users should reference CVE-2023-7073 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2025-10-28T05:27:29.647Z | 2026-01-16T13:38:47.020Z |
| CVE-2024-3677 |
6.4 (3.1)
|
Ultimate 410 Gone Status Code <= 1.1.4 - Authenticated… |
tinyweb |
Ultimate 410 Gone Status Code |
2024-05-02T16:52:16.923Z | 2026-01-16T13:27:01.163Z |
| CVE-2025-13558 |
5.4 (3.1)
|
Blog2Social <= 8.7.0 - Missing Authorization to Authen… |
pr-gateway |
Blog2Social: Social Media Auto Post & Scheduler |
2025-11-25T04:37:59.997Z | 2026-01-16T13:14:41.204Z |
| CVE-2026-0913 |
6.4 (3.1)
|
User Submitted Posts <= 20260110 - Authenticated (Cont… |
specialk |
User Submitted Posts – Enable Users to Submit Posts from the Front End |
2026-01-16T08:23:38.119Z | 2026-01-16T13:10:40.814Z |
| CVE-2025-14757 |
5.3 (3.1)
|
Cost Calculator Builder <= 3.6.9 - Missing Authorizati… |
stylemix |
Cost Calculator Builder |
2026-01-16T08:38:29.508Z | 2026-01-16T13:04:53.115Z |
| CVE-2025-14822 |
3.1 (3.1)
|
DoS from quadratic complexity in model.ParseHashtags |
Mattermost |
Mattermost |
2026-01-16T08:52:43.848Z | 2026-01-16T13:00:45.911Z |
| CVE-2025-14844 |
8.2 (3.1)
|
Membership Plugin – Restrict Content <= 3.2.16 - Missi… |
stellarwp |
Membership Plugin – Restrict Content |
2026-01-16T09:23:46.932Z | 2026-01-16T12:50:27.771Z |
| CVE-2025-14082 |
2.7 (3.1)
|
Keycloak-services: keycloak admin rest api: improper a… |
Red Hat |
Red Hat Build of Keycloak |
2025-12-10T09:04:51.343Z | 2026-01-16T05:00:13.717Z |
| CVE-2025-54957 |
9.8 (3.1)
|
An issue was discovered in Dolby UDC 4.5 through … |
n/a |
n/a |
2025-10-20T00:00:00.000Z | 2026-01-16T04:55:56.169Z |
| CVE-2026-21908 |
7.1 (3.1)
7.5 (4.0)
|
Junos OS and Junos OS Evolved: Use after free vulnerab… |
Juniper Networks |
Junos OS |
2026-01-15T20:21:41.576Z | 2026-01-16T04:55:55.090Z |
| CVE-2026-20076 |
4.8 (3.1)
|
Cisco Identity Services Engine Stored Cross-Site Scrip… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:03.744Z | 2026-01-16T04:55:53.964Z |
| CVE-2026-20047 |
4.8 (3.1)
|
Cisco Identity Services Engine Cross-Site Scripting Vu… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:15.578Z | 2026-01-16T04:55:52.838Z |
| CVE-2025-61973 |
8.8 (3.1)
|
A local privilege escalation vulnerability exists… |
Epic Games |
Epic Games Store |
2026-01-15T15:19:48.838Z | 2026-01-16T04:55:51.730Z |
| CVE-2026-22857 |
6.8 (4.0)
|
FreeRDP has a heap-use-after-free in irp_thread_func |
FreeRDP |
FreeRDP |
2026-01-14T17:53:54.193Z | 2026-01-16T04:55:50.669Z |
| CVE-2026-22856 |
6.8 (4.0)
|
FreeRDP has a heap-use-after-free in create_irp_thread |
FreeRDP |
FreeRDP |
2026-01-14T17:53:04.756Z | 2026-01-16T04:55:49.425Z |
| CVE-2026-22854 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in drive_process_irp_read |
FreeRDP |
FreeRDP |
2026-01-14T17:47:49.588Z | 2026-01-16T04:55:48.360Z |
| CVE-2026-22853 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array |
FreeRDP |
FreeRDP |
2026-01-14T17:46:50.159Z | 2026-01-16T04:55:47.314Z |
| CVE-2026-22852 |
6.8 (4.0)
|
FreeRDP has a heap-buffer-overflow in audin_process_formats |
FreeRDP |
FreeRDP |
2026-01-14T17:45:22.253Z | 2026-01-16T04:55:46.208Z |
| CVE-2026-0421 |
7 (4.0)
6.5 (3.1)
|
A potential vulnerability was reported in the BIO… |
Lenovo |
ThinkPad L13 Gen 6 BIOS |
2026-01-14T22:18:56.115Z | 2026-01-16T04:55:44.710Z |
| CVE-2026-23709 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:07.099Z | |
| CVE-2026-23710 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:06.646Z | |
| CVE-2026-23711 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:06.197Z | |
| CVE-2026-23712 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:05.700Z | |
| CVE-2026-23713 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:05.231Z | |
| CVE-2026-23714 |
N/A
|
Not used | N/A | N/A | 2026-01-16T03:55:04.715Z | |
| CVE-2026-0855 |
8.7 (4.0)
8.8 (3.1)
|
Merit LILIN｜IP Camera - OS Command Injection |
Merit LILIN |
P2 |
2026-01-12T06:44:40.227Z | 2026-01-16T02:09:56.328Z |
| CVE-2025-9904 |
5.3 (3.1)
6.9 (4.0)
|
Unallocated memory access vulnerability in print … |
Canon Inc. |
Generic Plus PCL6 Printer Driver |
2025-09-29T00:46:03.660Z | 2026-01-16T00:10:23.476Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-53430 |
8.1 (3.1)
|
WordPress Etta theme <= 1.14.0 - Local File Inclusion … |
AncoraThemes |
Etta |
2025-12-18T07:21:45.581Z | 2026-01-20T14:28:09.469Z |
| CVE-2025-53429 |
8.1 (3.1)
|
WordPress Exit Game theme <= 1.4.3 - Local File Inclus… |
AncoraThemes |
Exit Game |
2025-12-18T07:21:45.401Z | 2026-01-20T14:28:09.431Z |
| CVE-2025-53428 |
8.8 (3.1)
|
WordPress Simple User Registration plugin <= 6.4 - Pri… |
N-Media |
Simple User Registration |
2025-10-22T14:32:34.204Z | 2026-01-20T14:28:09.496Z |
| CVE-2025-53426 |
7.1 (3.1)
|
WordPress Likert Survey Master plugin <= 0.8.0.1 - Cro… |
Bob |
Likert Survey Master |
2025-10-22T14:32:33.768Z | 2026-01-20T14:28:09.406Z |
| CVE-2025-53425 |
7.6 (3.1)
|
WordPress Dokan plugin <= 4.1.2 - Privilege Escalation… |
Dokan, Inc. |
Dokan |
2025-10-22T14:32:33.573Z | 2026-01-20T14:28:09.366Z |
| CVE-2025-53424 |
6.5 (3.1)
|
WordPress WooCommerce Orders & Customers Exporter plug… |
vanquish |
WooCommerce Orders & Customers Exporter |
2025-10-22T14:32:33.353Z | 2026-01-20T14:28:09.399Z |
| CVE-2025-53423 |
7.1 (3.1)
|
WordPress Triss theme <= 2.6 - Cross Site Scripting (X… |
designthemes |
Triss |
2025-10-22T14:32:33.165Z | 2026-01-20T14:28:09.403Z |
| CVE-2025-53422 |
7.1 (3.1)
|
WordPress WhatsApp Chat for WordPress and WooCommerce … |
ThemeWarriors |
WhatsApp Chat for WordPress and WooCommerce |
2025-10-22T14:32:32.974Z | 2026-01-20T14:28:09.372Z |
| CVE-2025-53421 |
6.3 (3.1)
|
WordPress Accordion plugin <= 2.3.14 - Broken Access C… |
PickPlugins |
Accordion |
2025-10-22T14:32:32.545Z | 2026-01-20T14:28:09.372Z |
| CVE-2025-53420 |
7.1 (3.1)
|
WordPress WPLMS plugin <= 1.9.9.8 - Cross Site Scripti… |
VibeThemes |
WPLMS |
2025-10-22T14:32:32.282Z | 2026-01-20T14:28:09.384Z |
| CVE-2025-53352 |
7.1 (3.1)
|
WordPress Grid Plus plugin <= 3.3 - Cross Site Scripti… |
G5Theme |
Grid Plus |
2025-10-22T14:32:31.986Z | 2026-01-20T14:28:09.308Z |
| CVE-2025-53351 |
7.1 (3.1)
|
WordPress Fidelo Snippet plugin <= 1.12 - Cross Site S… |
Fidelo Software GmbH |
Fidelo Snippet |
2025-10-22T14:32:31.652Z | 2026-01-20T14:28:09.337Z |
| CVE-2025-53350 |
7.1 (3.1)
|
WordPress Calendar Plus plugin <= 1.2.4 - Cross Site S… |
webjunk |
Calendar Plus |
2025-10-22T14:32:31.360Z | 2026-01-20T14:28:09.295Z |
| CVE-2025-53349 |
6.1 (3.1)
|
WordPress Kalium Theme <= 3.18.3 - Cross Site Scriptin… |
Laborator |
Kalium |
2025-11-06T15:54:06.581Z | 2026-01-20T14:28:09.341Z |
| CVE-2025-53344 |
4.3 (3.1)
|
WordPress Thim Core Plugin <= 2.3.3 - Cross Site Reque… |
ThimPress |
Thim Core |
2026-01-05T16:42:57.646Z | 2026-01-20T14:28:09.362Z |
| CVE-2025-53324 |
5.4 (3.1)
|
WordPress Gutenify Plugin <= 1.5.7 - Cross Site Script… |
CodeYatri |
Gutenify |
2025-11-06T15:54:05.737Z | 2026-01-20T14:28:09.259Z |
| CVE-2025-53316 |
8.8 (3.1)
|
WordPress WP GDPR Cookie Consent plugin <= 1.0.0 - Cro… |
Shahjahan Jewel |
WP GDPR Cookie Consent |
2025-11-06T15:54:04.995Z | 2026-01-20T14:28:09.287Z |
| CVE-2025-53297 |
7.1 (3.1)
|
WordPress Woocommerce Envato Affiliates plugin <= 1.2.… |
AA-Team |
Woocommerce Envato Affiliates |
2025-10-22T14:32:31.023Z | 2026-01-20T14:28:09.198Z |
| CVE-2025-53286 |
6.1 (3.1)
|
WordPress Dropify Plugin <= 4.6.9 - Cross Site Scripti… |
Jhainey Milevis |
Dropify |
2025-11-06T15:54:04.283Z | 2026-01-20T14:28:09.165Z |
| CVE-2025-53283 |
10 (3.1)
|
WordPress Drop Uploader for CF7 - Drag&Drop File Uploa… |
borisolhor |
Drop Uploader for CF7 - Drag&Drop File Uploader Addon |
2025-11-06T15:54:03.506Z | 2026-01-20T14:28:09.297Z |
| CVE-2025-53252 |
9.8 (3.1)
|
WordPress Zegen Theme <= 1.1.9 - Local File Inclusion … |
zozothemes |
Zegen |
2025-11-06T15:54:02.680Z | 2026-01-20T14:28:09.155Z |
| CVE-2025-53246 |
8.8 (3.1)
|
WordPress Backup and Move Plugin <= 0.1 - Broken Acces… |
Gaurav Aggarwal |
Backup and Move |
2025-11-06T15:53:59.915Z | 2026-01-20T14:28:09.176Z |
| CVE-2025-53245 |
5.4 (3.1)
|
WordPress WP Logo Changer Plugin <= 1.2 - Cross Site S… |
Afzal Multani |
WP Logo Changer |
2025-11-06T15:53:59.391Z | 2026-01-20T14:28:09.187Z |
| CVE-2025-53242 |
9.8 (3.1)
|
WordPress Seil Theme <= 1.7.1 - Deserialization of unt… |
VictorThemes |
Seil |
2025-11-06T15:53:58.962Z | 2026-01-20T14:28:09.204Z |
| CVE-2025-53239 |
6.1 (3.1)
|
WordPress User Registration Aide Plugin <= 1.5.3.8 - C… |
bnovotny |
User Registration Aide |
2025-11-06T15:53:58.555Z | 2026-01-20T14:28:09.103Z |
| CVE-2025-39853 |
N/A
|
i40e: Fix potential invalid access when MAC list is empty |
Linux |
Linux |
2025-09-19T15:26:25.101Z | 2025-11-03T17:44:09.789Z |
| CVE-2025-53238 |
7.1 (3.1)
|
WordPress Toast Mobile Menu plugin <= 1.0.7 - Cross Si… |
Toast Plugins |
Toast Mobile Menu |
2025-10-22T14:32:30.376Z | 2026-01-20T14:28:09.178Z |
| CVE-2025-53236 |
6.3 (3.1)
|
WordPress UDesign Core plugin <= 4.14.0 - Broken Acces… |
AndonDesign |
UDesign Core |
2025-10-22T14:32:29.996Z | 2026-01-20T14:28:09.128Z |
| CVE-2025-53235 |
7.1 (3.1)
|
WordPress Easy Social plugin <= 1.3 - Cross Site Scrip… |
osuthorpe |
Easy Social |
2025-12-31T20:11:25.669Z | 2026-01-20T14:28:09.199Z |
| CVE-2025-53234 |
7.1 (3.1)
|
WordPress UDesign Core plugin <= 4.14.0 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-10-22T14:32:29.678Z | 2026-01-20T14:28:09.019Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-53430 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:53.183 | 2026-01-20T15:16:55.607 |
| fkie_cve-2025-53429 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:53.050 | 2026-01-20T15:16:55.473 |
| fkie_cve-2025-53428 | Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration al… | 2025-10-22T15:15:51.323 | 2026-01-20T15:16:55.340 |
| fkie_cve-2025-53426 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:50.993 | 2026-01-20T15:16:55.060 |
| fkie_cve-2025-53425 | Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escal… | 2025-10-22T15:15:50.863 | 2026-01-20T15:16:54.927 |
| fkie_cve-2025-53424 | Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce… | 2025-10-22T15:15:50.727 | 2026-01-20T15:16:54.797 |
| fkie_cve-2025-53423 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:49.700 | 2026-01-20T15:16:54.663 |
| fkie_cve-2025-53422 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:49.563 | 2026-01-20T15:16:54.520 |
| fkie_cve-2025-53421 | Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrect… | 2025-10-22T15:15:49.437 | 2026-01-20T15:16:54.387 |
| fkie_cve-2025-53420 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:49.310 | 2026-01-20T15:16:54.240 |
| fkie_cve-2025-53352 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:49.183 | 2026-01-20T15:16:54.100 |
| fkie_cve-2025-53351 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:49.057 | 2026-01-20T15:16:53.963 |
| fkie_cve-2025-53350 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:48.927 | 2026-01-20T15:16:53.820 |
| fkie_cve-2025-53349 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:56.780 | 2026-01-20T15:16:53.683 |
| fkie_cve-2025-53344 | Cross-Site Request Forgery (CSRF) vulnerability in ThimPress Thim Core allows Cross Site Request Fo… | 2026-01-05T17:15:45.737 | 2026-01-20T15:16:53.580 |
| fkie_cve-2025-53324 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:56.630 | 2026-01-20T15:16:53.447 |
| fkie_cve-2025-53316 | Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-c… | 2025-11-06T16:15:56.483 | 2026-01-20T15:16:53.313 |
| fkie_cve-2025-53297 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:48.793 | 2026-01-20T15:16:53.180 |
| fkie_cve-2025-53286 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:56.333 | 2026-01-20T15:16:53.050 |
| fkie_cve-2025-53283 | Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 -… | 2025-11-06T16:15:56.180 | 2026-01-20T15:16:52.913 |
| fkie_cve-2025-53252 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:15:56.010 | 2026-01-20T15:16:52.780 |
| fkie_cve-2025-53246 | Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Explo… | 2025-11-06T16:15:55.833 | 2026-01-20T15:16:52.650 |
| fkie_cve-2025-53245 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:55.637 | 2026-01-20T15:16:52.517 |
| fkie_cve-2025-53242 | Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.T… | 2025-11-06T16:15:55.473 | 2026-01-20T15:16:52.383 |
| fkie_cve-2025-53239 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:55.300 | 2026-01-20T15:16:52.250 |
| fkie_cve-2025-39853 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid ac… | 2025-09-19T16:15:44.213 | 2026-01-20T15:16:52.147 |
| fkie_cve-2025-53238 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:48.663 | 2026-01-20T15:16:52.110 |
| fkie_cve-2025-53236 | Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Inc… | 2025-10-22T15:15:48.520 | 2026-01-20T15:16:51.973 |
| fkie_cve-2025-53235 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T21:15:51.777 | 2026-01-20T15:16:51.860 |
| fkie_cve-2025-53234 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:48.397 | 2026-01-20T15:16:51.710 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p3fv-jq23-qg6f |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. … | 2026-01-04T03:30:27Z | 2026-01-04T03:30:27Z |
| ghsa-qv6w-cq5f-xpvw |
5.3 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnera… | 2026-01-04T00:30:17Z | 2026-01-04T00:30:17Z |
| ghsa-5f5h-xp93-w647 |
6.5 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerabi… | 2026-01-04T00:30:17Z | 2026-01-04T00:30:17Z |
| ghsa-c4mg-vhq3-hwc2 |
7.3 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulner… | 2026-01-04T00:30:16Z | 2026-01-04T00:30:16Z |
| ghsa-9w9c-6cc9-mc59 |
6.9 (4.0)
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:33Z | 2026-01-04T00:30:16Z |
| ghsa-752h-56c7-7mr2 |
6.5 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerab… | 2026-01-04T00:30:16Z | 2026-01-04T00:30:16Z |
| ghsa-4v2m-wc8x-hcjv |
7.3 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerabi… | 2026-01-04T00:30:16Z | 2026-01-04T00:30:16Z |
| ghsa-472g-2pwf-qm99 |
5.3 (3.1)
6.9 (4.0)
|
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnera… | 2026-01-04T00:30:16Z | 2026-01-04T00:30:16Z |
| ghsa-wvmf-999m-w27j |
9.1 (3.1)
6.9 (4.0)
|
Genymobile/scrcpy versions up to and including 3.3.3 and prior to commit 3e40b24 contain a global b… | 2025-12-19T00:31:41Z | 2026-01-03T21:30:26Z |
| ghsa-rcf9-vp22-qqr4 |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-q99j-frr5-3c8c |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-jxwc-j45q-67x2 |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-h5g2-f397-gc23 |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-cpj2-6jmp-955v |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-9xc5-pgjp-9mcj |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-3x46-6xw6-vv9h |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-3pj2-6fqg-5xxm |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-24x2-jv4m-57w2 |
|
Rejected reason: Not used | 2026-01-03T06:30:16Z | 2026-01-03T06:30:16Z |
| ghsa-96xq-9m54-h7p4 |
9.4 (4.0)
|
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue … | 2026-01-03T03:30:25Z | 2026-01-03T03:30:25Z |
| ghsa-9fpm-5f3v-gxp2 |
8.7 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab… | 2026-01-03T03:30:24Z | 2026-01-03T03:30:24Z |
| ghsa-2mwc-h2mg-v6p8 |
5.2 (4.0)
|
Bagisto has HTML Filter Bypass that Enables Stored XSS | 2026-01-02T21:16:23Z | 2026-01-03T00:32:58Z |
| ghsa-gvq6-hvvp-h34h |
9.2 (4.0)
|
AdonisJS Path Traversal in Multipart File Handling | 2026-01-02T18:58:32Z | 2026-01-03T00:32:09Z |
| ghsa-v668-5qxg-qhjh |
9.4 (4.0)
|
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab… | 2026-01-03T00:31:26Z | 2026-01-03T00:31:26Z |
| ghsa-rw75-27g5-4c67 |
9.4 (4.0)
|
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue … | 2026-01-03T00:31:26Z | 2026-01-03T00:31:26Z |
| ghsa-fwx4-5874-4gvg |
10.0 (4.0)
|
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Sta… | 2026-01-03T00:31:26Z | 2026-01-03T00:31:26Z |
| ghsa-757q-w8xv-793g |
9.3 (4.0)
|
A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affec… | 2026-01-03T00:31:26Z | 2026-01-03T00:31:26Z |
| ghsa-2hrm-3727-3mc5 |
7.2 (4.0)
|
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) … | 2026-01-03T00:31:26Z | 2026-01-03T00:31:26Z |
| ghsa-xmhc-qgjh-2r5x |
6.1 (3.1)
|
The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter before outp… | 2026-01-02T06:30:26Z | 2026-01-03T00:31:25Z |
| ghsa-mjh6-7rhf-fhc8 |
5.3 (3.1)
|
The Ninja Forms WordPress plugin before 3.13.3 allows unauthenticated attackers to generate valid … | 2026-01-02T06:30:26Z | 2026-01-03T00:31:25Z |
| ghsa-6w96-gvjq-xh8h |
6.5 (3.1)
|
The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could … | 2026-01-02T06:30:26Z | 2026-01-03T00:31:25Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-1621 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.991720Z |
| gsd-2024-1649 | The Categorify plugin for WordPress is vulnerable to unauthorized modification of data du… | 2024-02-20T06:02:27.986337Z |
| gsd-2024-1613 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.984413Z |
| gsd-2024-1636 | Potential Cross-Site Scripting (XSS) in the page editing area. | 2024-02-20T06:02:27.980687Z |
| gsd-2024-1628 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.979564Z |
| gsd-2024-1631 | Impact The library offers a function to generate an ed25519 key pair via Ed25519KeyIdenti… | 2024-02-20T06:02:27.973236Z |
| gsd-2024-1609 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.968893Z |
| gsd-2024-1640 | The Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Fo… | 2024-02-20T06:02:27.965310Z |
| gsd-2024-1654 | This vulnerability potentially allows unauthorized write operations which may lead to rem… | 2024-02-20T06:02:27.959659Z |
| gsd-2024-1610 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.959325Z |
| gsd-2024-1611 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.958771Z |
| gsd-2024-1632 | Low-privileged users with access to the Sitefinity backend may obtain sensitive informati… | 2024-02-20T06:02:27.948724Z |
| gsd-2024-1607 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.940419Z |
| gsd-2024-1626 | An Insecure Direct Object Reference (IDOR) vulnerability exists in the lunary-ai/lunary r… | 2024-02-20T06:02:27.937632Z |
| gsd-2024-1655 | Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an a… | 2024-02-20T06:02:27.928264Z |
| gsd-2024-1652 | The Categorify plugin for WordPress is vulnerable to unauthorized modification of data du… | 2024-02-20T06:02:27.922565Z |
| gsd-2024-1615 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.921333Z |
| gsd-2024-1622 | Due to a mistake in error checking, Routinator will terminate when an incoming RTR connec… | 2024-02-20T06:02:27.885845Z |
| gsd-2024-1646 | parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protecti… | 2024-02-20T06:02:27.872833Z |
| gsd-2024-1624 | An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from… | 2024-02-20T06:02:27.860031Z |
| gsd-2024-1644 | Suite CRM version 7.14.2 allows including local php files. This is possible because the … | 2024-02-20T06:02:27.849242Z |
| gsd-2024-1638 | The documentation specifies that the BT_GATT_PERM_READ_LESC and BT_GATT_PERM_WRITE_LESC d… | 2024-02-20T06:02:27.837877Z |
| gsd-2024-1620 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.837510Z |
| gsd-2024-1642 | The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for Wo… | 2024-02-20T06:02:27.835668Z |
| gsd-2024-1633 | During the secure boot, bl2 (the second stage of the bootloader) loops over images define… | 2024-02-20T06:02:27.809877Z |
| gsd-2024-1643 | By knowing an organization's ID, an attacker can join the organization without permission… | 2024-02-20T06:02:27.805619Z |
| gsd-2024-1645 | The Mollie Forms plugin for WordPress is vulnerable to unauthorized access of data due to… | 2024-02-20T06:02:27.805310Z |
| gsd-2024-1614 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.804614Z |
| gsd-2024-1630 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-20T06:02:27.791767Z |
| gsd-2024-1608 | In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose pe… | 2024-02-20T06:02:27.768212Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184719 | Malicious code in oloc-uyg-uhfadi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184718 | Malicious code in oloc-uyg-uhai (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184717 | Malicious code in oloc-uyg-ugyui (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184716 | Malicious code in oloc-uyg-ugui (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184715 | Malicious code in oloc-uyg-ugoyui (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184714 | Malicious code in oloc-uyg-ugoyugxechafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184713 | Malicious code in oloc-uyg-ugoyughafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184712 | Malicious code in oloc-uyg-ugoyhafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184711 | Malicious code in oloc-uyg-ugooii (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184710 | Malicious code in oloc-uyg-ugoofii (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184709 | Malicious code in oloc-uyg-ugoofifi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184708 | Malicious code in oloc-uyg-ugoofifaihi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184707 | Malicious code in oloc-uyg-ugoofifai (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184706 | Malicious code in oloc-uyg-ugoofifadihi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184705 | Malicious code in oloc-uyg-ugoofifadifuahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184704 | Malicious code in oloc-uyg-ugoofifadiahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184703 | Malicious code in oloc-uyg-ugoi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184702 | Malicious code in oloc-uyg-ugohi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184701 | Malicious code in oloc-uyg-ugohfi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184700 | Malicious code in oloc-uyg-ugaoyui (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184699 | Malicious code in oloc-uyg-ugaoyugixechafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184698 | Malicious code in oloc-uyg-ugaoyugixchafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184697 | Malicious code in oloc-uyg-ugaoyugixafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184696 | Malicious code in oloc-uyg-ugaoyugi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184695 | Malicious code in oloc-uyg-ugaoyugafi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184694 | Malicious code in olobc-uyg-ugoofifahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184693 | Malicious code in olobc-uyg-ugoofifaduahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184692 | Malicious code in olobc-uyg-ugoofifadifuahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184691 | Malicious code in olobc-uyg-ugoofifadiafuahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184690 | Malicious code in olobc-uyg-ugoofifadahi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:4272 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.3 security update | 2024-07-02T16:45:24+00:00 | 2025-11-21T19:05:10+00:00 |
| rhsa-2024:4265 | Red Hat Security Advisory: cups security update | 2024-07-02T15:43:53+00:00 | 2025-11-21T19:05:07+00:00 |
| rhsa-2024:4264 | Red Hat Security Advisory: openldap security update | 2024-07-02T15:29:31+00:00 | 2025-11-21T19:05:07+00:00 |
| rhsa-2024:4262 | Red Hat Security Advisory: linux-firmware security update | 2024-07-02T15:39:54+00:00 | 2025-11-21T19:05:06+00:00 |
| rhsa-2024:4247 | Red Hat Security Advisory: libuv security update | 2024-07-02T15:41:50+00:00 | 2025-11-21T19:05:05+00:00 |
| rhsa-2024:4256 | Red Hat Security Advisory: less security update | 2024-07-02T15:27:33+00:00 | 2025-11-21T19:05:04+00:00 |
| rhsa-2024:4252 | Red Hat Security Advisory: nghttp2 security update | 2024-07-02T15:45:50+00:00 | 2025-11-21T19:05:04+00:00 |
| rhsa-2024:4249 | Red Hat Security Advisory: c-ares security update | 2024-07-02T15:40:18+00:00 | 2025-11-21T19:05:02+00:00 |
| rhsa-2024:4245 | Red Hat Security Advisory: python3 security update | 2024-07-02T15:24:34+00:00 | 2025-11-21T19:05:00+00:00 |
| rhsa-2024:4244 | Red Hat Security Advisory: python3.11-PyMySQL security update | 2024-07-02T15:29:12+00:00 | 2025-11-21T19:04:59+00:00 |
| rhsa-2024:4243 | Red Hat Security Advisory: python3 security update | 2024-07-02T15:42:21+00:00 | 2025-11-21T19:04:58+00:00 |
| rhsa-2024:4241 | Red Hat Security Advisory: iperf3 security update | 2024-07-02T15:33:41+00:00 | 2025-11-21T19:04:58+00:00 |
| rhsa-2024:4235 | Red Hat Security Advisory: 389-ds security update | 2024-07-02T15:38:55+00:00 | 2025-11-21T19:04:56+00:00 |
| rhsa-2024:4227 | Red Hat Security Advisory: python-pillow security update | 2024-07-02T15:26:34+00:00 | 2025-11-21T19:04:54+00:00 |
| rhsa-2024:4223 | Red Hat Security Advisory: Red Hat Certificate System security and bug fix update | 2024-07-02T13:19:18+00:00 | 2025-11-21T19:04:54+00:00 |
| rhsa-2024:4222 | Red Hat Security Advisory: pki-core security update | 2024-07-02T15:23:38+00:00 | 2025-11-21T19:04:53+00:00 |
| rhsa-2024:4210 | Red Hat Security Advisory: redhat-ds:11 security update | 2024-07-02T08:19:13+00:00 | 2025-11-21T19:04:52+00:00 |
| rhsa-2024:4209 | Red Hat Security Advisory: redhat-ds:11 security and bug fix update | 2024-07-02T08:02:32+00:00 | 2025-11-21T19:04:51+00:00 |
| rhsa-2024:4200 | Red Hat Security Advisory: libreswan security update | 2024-07-01T08:46:12+00:00 | 2025-11-21T19:04:51+00:00 |
| rhsa-2024:4197 | Red Hat Security Advisory: httpd:2.4/httpd security update | 2024-07-01T08:12:32+00:00 | 2025-11-21T19:04:50+00:00 |
| rhsa-2024:4179 | Red Hat Security Advisory: pki-core security update | 2024-07-01T01:19:06+00:00 | 2025-11-21T19:04:49+00:00 |
| rhsa-2024:4166 | Red Hat Security Advisory: python3 security update | 2024-06-27T14:08:51+00:00 | 2025-11-21T19:04:48+00:00 |
| rhsa-2024:4165 | Red Hat Security Advisory: pki-core security update | 2024-06-27T14:35:10+00:00 | 2025-11-21T19:04:48+00:00 |
| rhsa-2024:4164 | Red Hat Security Advisory: pki-core security update | 2024-06-27T14:14:01+00:00 | 2025-11-21T19:04:47+00:00 |
| rhsa-2024:4160 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2024-06-27T09:50:00+00:00 | 2025-11-21T19:04:46+00:00 |
| rhsa-2024:4101 | Red Hat Security Advisory: samba security update | 2024-06-25T15:38:01+00:00 | 2025-11-21T19:04:34+00:00 |
| rhsa-2024:4098 | Red Hat Security Advisory: kernel security update | 2024-06-25T13:51:41+00:00 | 2025-11-21T19:04:33+00:00 |
| rhsa-2024:4092 | Red Hat Security Advisory: redhat-ds:12 security, bug fix update | 2024-06-25T11:13:51+00:00 | 2025-11-21T19:04:32+00:00 |
| rhsa-2024:4078 | Red Hat Security Advisory: python3.9 security update | 2024-06-25T05:50:30+00:00 | 2025-11-21T19:04:30+00:00 |
| rhsa-2024:4077 | Red Hat Security Advisory: python3.11 security update | 2024-06-25T05:27:15+00:00 | 2025-11-21T19:04:29+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-26826 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26825 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26824 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26823 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26822 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26821 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26820 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26819 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26818 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26817 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26816 | Windows DNS Server Information Disclosure Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26815 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26814 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26813 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26812 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26811 | Windows DNS Server Remote Code Execution Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26810 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26808 | Windows File Explorer Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26807 | Windows Work Folder Service Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26803 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26802 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26801 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26798 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26797 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26796 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26795 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26794 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26793 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26792 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| msrc_cve-2022-26791 | Windows Print Spooler Elevation of Privilege Vulnerability | 2022-04-12T08:00:00.000Z | 2022-04-12T08:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201606-0022 | Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMAT… | 2025-04-13T23:17:55.311000Z |
| var-201606-0019 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Da… | 2025-04-13T23:17:55.206000Z |
| var-201606-0105 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Da… | 2025-04-13T23:17:55.169000Z |
| var-201606-0018 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Th… | 2025-04-13T23:17:55.132000Z |
| var-201606-0107 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Da… | 2025-04-13T23:17:55.095000Z |
| var-201606-0016 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Da… | 2025-04-13T23:17:55.024000Z |
| var-201606-0017 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Thr… | 2025-04-13T23:17:54.985000Z |
| var-201606-0106 | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Adva… | 2025-04-13T23:17:54.947000Z |
| var-201607-0005 | Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and creden… | 2025-04-13T23:17:53.988000Z |
| var-201607-0003 | goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial … | 2025-04-13T23:17:53.950000Z |
| var-201512-0408 | Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypas… | 2025-04-13T23:17:53.912000Z |
| var-201512-0409 | Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 dev… | 2025-04-13T23:17:53.874000Z |
| var-201607-0004 | goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial o… | 2025-04-13T23:17:53.834000Z |
| var-201607-0383 | Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows re… | 2025-04-13T23:17:53.733000Z |
| var-201607-0382 | Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remo… | 2025-04-13T23:17:53.697000Z |
| var-201607-0424 | The virtual network stack on Cisco AMP Threat Grid Appliance devices before 2.1.1 allows … | 2025-04-13T23:17:53.641000Z |
| var-201607-0466 | Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary W… | 2025-04-13T23:17:53.602000Z |
| var-201607-0465 | Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before … | 2025-04-13T23:17:53.562000Z |
| var-201608-0085 | Intel Crosswalk before 19.49.514.5, 20.x before 20.50.533.11, 21.x before 21.51.546.0, an… | 2025-04-13T23:17:53.076000Z |
| var-201608-0190 | modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict… | 2025-04-13T23:17:53.040000Z |
| var-201608-0274 | Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the def… | 2025-04-13T23:17:52.979000Z |
| var-201608-0295 | Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.… | 2025-04-13T23:17:52.942000Z |
| var-201609-0039 | Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users wi… | 2025-04-13T23:17:52.755000Z |
| var-201609-0040 | The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 al… | 2025-04-13T23:17:52.721000Z |
| var-201609-0042 | The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.… | 2025-04-13T23:17:52.686000Z |
| var-201609-0041 | Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to… | 2025-04-13T23:17:52.651000Z |
| var-201609-0043 | Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) befor… | 2025-04-13T23:17:52.615000Z |
| var-201609-0357 | Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Medi… | 2025-04-13T23:17:51.993000Z |
| var-201609-0439 | The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, a… | 2025-04-13T23:17:51.895000Z |
| var-201609-0565 | Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C… | 2025-04-13T23:17:51.385000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:2326-1 | Security update for nodejs12 | 2021-07-14T15:07:58Z | 2021-07-14T15:07:58Z |
| suse-su-2021:2325-1 | Security update for the Linux Kernel | 2021-07-14T15:07:41Z | 2021-07-14T15:07:41Z |
| suse-su-2021:2324-1 | Security update for the Linux Kernel | 2021-07-14T15:05:40Z | 2021-07-14T15:05:40Z |
| suse-su-2021:2323-1 | Security update for nodejs10 | 2021-07-14T15:04:31Z | 2021-07-14T15:04:31Z |
| suse-su-2021:2322-1 | Security update for ffmpeg | 2021-07-14T15:03:29Z | 2021-07-14T15:03:29Z |
| suse-su-2021:2321-1 | Security update for the Linux Kernel | 2021-07-14T15:02:17Z | 2021-07-14T15:02:17Z |
| suse-su-2021:2320-1 | Security update for sqlite3 | 2021-07-14T15:01:56Z | 2021-07-14T15:01:56Z |
| suse-su-2021:2319-1 | Security update for nodejs14 | 2021-07-14T14:51:28Z | 2021-07-14T14:51:28Z |
| suse-su-2021:2305-1 | Security update for the Linux Kernel | 2021-07-13T11:02:01Z | 2021-07-13T11:02:01Z |
| suse-su-2021:2304-1 | Security update for python-pip | 2021-07-13T07:46:40Z | 2021-07-13T07:46:40Z |
| suse-su-2021:2303-1 | Security update for the Linux Kernel | 2021-07-13T07:46:29Z | 2021-07-13T07:46:29Z |
| suse-su-2021:14764-1 | Security update for the Linux Kernel | 2021-07-13T07:46:15Z | 2021-07-13T07:46:15Z |
| suse-su-2021:14763-1 | Security update for csync2 | 2021-07-12T08:03:28Z | 2021-07-12T08:03:28Z |
| suse-su-2021:2295-1 | Security update for slurm_20_11 | 2021-07-12T06:27:12Z | 2021-07-12T06:27:12Z |
| suse-su-2021:2294-1 | Security update for redis | 2021-07-12T06:26:59Z | 2021-07-12T06:26:59Z |
| suse-su-2021:2293-1 | Security update for jdom2 | 2021-07-12T06:26:36Z | 2021-07-12T06:26:36Z |
| suse-su-2021:2292-1 | Security update for dbus-1 | 2021-07-12T06:25:55Z | 2021-07-12T06:25:55Z |
| suse-su-2021:2291-1 | Security update for bluez | 2021-07-12T06:23:59Z | 2021-07-12T06:23:59Z |
| suse-su-2021:1785-2 | Security update for postgresql13 | 2021-07-11T09:10:08Z | 2021-07-11T09:10:08Z |
| suse-su-2021:1840-2 | Security update for xstream | 2021-07-11T08:25:39Z | 2021-07-11T08:25:39Z |
| suse-su-2021:2280-1 | Security update for permissions | 2021-07-09T14:29:17Z | 2021-07-09T14:29:17Z |
| suse-su-2021:2274-1 | Security update for kubevirt | 2021-07-09T05:34:06Z | 2021-07-09T05:34:06Z |
| suse-su-2021:2253-1 | Security update for python-rsa | 2021-07-06T07:03:40Z | 2021-07-06T07:03:40Z |
| suse-su-2021:14761-1 | Security update for djvulibre | 2021-07-02T15:26:10Z | 2021-07-02T15:26:10Z |
| suse-su-2021:2239-1 | Security update for crmsh | 2021-07-02T15:25:36Z | 2021-07-02T15:25:36Z |
| suse-su-2021:2238-1 | Security update for crmsh | 2021-07-02T15:25:24Z | 2021-07-02T15:25:24Z |
| suse-su-2021:2237-1 | Security update for python-rsa | 2021-07-02T15:25:10Z | 2021-07-02T15:25:10Z |
| suse-su-2021:2236-1 | Security update for python-py | 2021-07-02T15:24:56Z | 2021-07-02T15:24:56Z |
| suse-su-2021:14760-1 | Security update for curl | 2021-06-30T15:15:05Z | 2021-06-30T15:15:05Z |
| suse-su-2021:2214-1 | Security update for go1.15 | 2021-06-30T13:59:58Z | 2021-06-30T13:59:58Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-49050 | 用友网络科技股份有限公司YonBIP存在信息泄露漏洞 | 2024-11-15 | 2024-12-30 |
| cnvd-2024-38833 | 广东保伦电子股份有限公司itC中心管理服务器存在文件上传漏洞（CNVD-2024-38833） | 2024-08-23 | 2024-12-30 |
| cnvd-2024-49465 | 北京九思协同软件有限公司OA协同办公系统存在任意文件读取漏洞 | 2024-11-14 | 2024-12-29 |
| cnvd-2024-49031 | 北京亚控科技发展有限公司KingH5Stream存在未授权访问漏洞 | 2024-11-13 | 2024-12-28 |
| cnvd-2024-49518 | ABB ASPECT存在未明漏洞（CNVD-2024-49518） | 2024-12-13 | 2024-12-27 |
| cnvd-2024-49517 | ABB ASPECT存在未明漏洞 | 2024-12-13 | 2024-12-27 |
| cnvd-2024-49516 | Delta Electronics DRASimuCAD ICS解析越界写代码执行漏洞 | 2024-12-23 | 2024-12-27 |
| cnvd-2024-49515 | Delta Electronics DRASimuCAD STP解析类型混淆代码执行漏洞 | 2024-12-23 | 2024-12-27 |
| cnvd-2024-49514 | Rockwell Automation Power Monitor 1000设备接管漏洞 | 2024-12-25 | 2024-12-27 |
| cnvd-2024-49513 | Oracle MySQL Server存在未明漏洞（CNVD-2024-49513） | 2024-10-23 | 2024-12-27 |
| cnvd-2024-49512 | D-Link DAP-1513拒绝服务漏洞 | 2024-12-20 | 2024-12-27 |
| cnvd-2024-49511 | D-Link DCS-932L拒绝服务漏洞 | 2024-12-20 | 2024-12-27 |
| cnvd-2024-49510 | Google Chrome安全绕过漏洞（CNVD-2024-49510） | 2024-09-20 | 2024-12-27 |
| cnvd-2024-49509 | Google Chrome安全绕过漏洞（CNVD-2024-49509） | 2024-09-20 | 2024-12-27 |
| cnvd-2024-49445 | 上海金慧软件有限公司综合管理信息系统存在SQL注入漏洞 | 2024-11-14 | 2024-12-27 |
| cnvd-2024-49425 | 用友网络科技股份有限公司用友NC存在SQL注入漏洞 | 2024-11-12 | 2024-12-27 |
| cnvd-2024-49423 | 用友网络科技股份有限公司用友NC存在SQL注入漏洞 | 2024-11-12 | 2024-12-27 |
| cnvd-2024-49640 | Discourse授权问题漏洞（CNVD-2024-4964085） | 2024-12-25 | 2024-12-26 |
| cnvd-2024-49639 | Discourse跨站脚本漏洞（CNVD-2024-4963986） | 2024-12-25 | 2024-12-26 |
| cnvd-2024-49638 | Fortinet FortiWLM路径遍历漏洞（CNVD-2024-4963848） | 2024-12-25 | 2024-12-26 |
| cnvd-2024-49637 | Fortinet FortiManager操作系统命令注入漏洞 | 2024-12-25 | 2024-12-26 |
| cnvd-2024-49508 | Google Android信息泄露漏洞（CNVD-2024-49508） | 2024-03-01 | 2024-12-26 |
| cnvd-2024-49507 | Google Android信息泄露漏洞（CNVD-2024-49507） | 2024-03-01 | 2024-12-26 |
| cnvd-2024-49506 | Google Android信息泄露漏洞（CNVD-2024-49506） | 2024-11-15 | 2024-12-26 |
| cnvd-2024-49505 | Google Android信息泄露漏洞（CNVD-2024-49505） | 2024-09-12 | 2024-12-26 |
| cnvd-2024-49504 | Google Android信息泄露漏洞（CNVD-2024-49504） | 2024-11-15 | 2024-12-26 |
| cnvd-2024-49503 | Google Android权限提升漏洞（CNVD-2024-49503） | 2024-11-15 | 2024-12-26 |
| cnvd-2024-49502 | Google Android权限提升漏洞（CNVD-2024-49502） | 2024-11-15 | 2024-12-26 |
| cnvd-2024-49501 | Google Android信息泄露漏洞（CNVD-2024-49501） | 2024-11-15 | 2024-12-26 |
| cnvd-2024-49500 | TOTOLINK AC1200 setWiFiRepeaterCfg方法password参数缓冲区溢出漏洞 | 2024-09-11 | 2024-12-26 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2012-avi-142 | Multiples vulnérabilités dans les produits Mozilla | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-141 | Multiples vulnérabilités dans Safari | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-140 | Vulnérabilité dans Microsoft Expression Design | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-139 | Vulnérabilité dans Microsoft Visual Studio | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-138 | Multiples vulnérabilités dans Remote Desktop Protocol | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-137 | Vulnérabilité dans Windows DirectWrite | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-136 | Vulnérabilité dans le noyau Microsoft Windows | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-135 | Vulnérabilité dans le DNS de Microsoft Windows | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-129 | Multiples vulnérabilités dans Google Chrome | 2012-03-14T00:00:00.000000 | 2012-03-14T00:00:00.000000 |
| certa-2012-avi-134 | Vulnérabilités dans OpenSSL | 2012-03-13T00:00:00.000000 | 2012-03-13T00:00:00.000000 |
| certa-2012-avi-133 | Multiples vulnérabilités dans les produits VMware | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-132 | Vulnérabilités dans Joomla! | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-131 | Vulnérabilité dans Splunk | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-130 | Vulnérabilité dans VMware vCenter Chargeback Manager | 2012-03-12T00:00:00.000000 | 2012-03-12T00:00:00.000000 |
| certa-2012-avi-128 | Vulnérabilité dans Barracuda WAF | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-127 | Vulnérabilités dans Apple iOS | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-126 | Vulnérabilités dans iTunes | 2012-03-09T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-061 | Vulnérabilité dans Xen | 2012-02-08T00:00:00.000000 | 2012-03-09T00:00:00.000000 |
| certa-2012-avi-125 | Vulnérabilités dans ImageMagick | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-124 | Vulnérabilité dans RSA SecureID | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-123 | Vulnérabilités dans TrueType | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-122 | Vulnérabilités IBM Maximo | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-121 | Vulnérabilités dans IBM DB2 | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-120 | Vulnérabilités dans IBM Tivoli | 2012-03-08T00:00:00.000000 | 2012-03-08T00:00:00.000000 |
| certa-2012-avi-119 | Vulnérabilités dans Symantec Entreprise Vault | 2012-03-07T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-118 | Vulnérabilités dans MantisBT | 2012-03-07T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-094 | Vulnérabilité dans libxml2 | 2012-02-23T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-028 | Vulnérabilité dans OpenSSL | 2012-01-20T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2011-avi-013 | Vulnérabilité dans sudo | 2011-01-14T00:00:00.000000 | 2012-03-07T00:00:00.000000 |
| certa-2012-avi-117 | Vulnérabilité dans Novell ZENworks | 2012-03-06T00:00:00.000000 | 2012-03-06T00:00:00.000000 |