Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-1003
4.3 (3.1)
GetGenie – AI Content Writer with Keyword Research & S… roxnor
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools
2026-01-16T07:23:09.127Z 2026-01-16T13:50:30.935Z
CVE-2025-14375
6.1 (3.1)
RSS Aggregator – RSS Import, News Feeds, Feed to Post,… rebelcode
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging
2026-01-16T07:23:09.745Z 2026-01-16T13:48:29.591Z
CVE-2024-1132
8.1 (3.1)
Keycloak: path transversal in redirection validation

2024-04-17T13:21:19.130Z 2026-01-16T13:47:13.836Z
CVE-2026-20759
8.8 (3.0)
8.7 (4.0)
OS Command Injection vulnerability exists in mult… TOA Corporation
Multiple Network Cameras TRIFORA 3 series
2026-01-16T08:16:45.444Z 2026-01-16T13:45:56.900Z
CVE-2026-20894
4.8 (3.0)
4.8 (4.0)
Cross-site scripting vulnerability exists in mult… TOA Corporation
Multiple Network Cameras TRIFORA 3 series
2026-01-16T08:16:57.696Z 2026-01-16T13:45:31.792Z
CVE-2026-22876
6.5 (3.0)
7.1 (4.0)
Path Traversal vulnerability exists in multiple N… TOA Corporation
Multiple Network Cameras TRIFORA 3 series
2026-01-16T08:17:13.902Z 2026-01-16T13:45:02.768Z
CVE-2026-1004
5.3 (3.1)
Essential Addons for Elementor <= 6.5.5 - Missing Auth… wpdevteam
Essential Addons for Elementor – Popular Elementor Templates & Widgets
2026-01-16T08:23:37.542Z 2026-01-16T13:44:34.348Z
CVE-2025-10145
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7073. Reason: This candidate is a reservation duplicate of CVE-2023-7073. Notes: All CVE users should reference CVE-2023-7073 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. N/A N/A 2025-10-28T05:27:29.647Z 2026-01-16T13:38:47.020Z
CVE-2024-3677
6.4 (3.1)
Ultimate 410 Gone Status Code <= 1.1.4 - Authenticated… tinyweb
Ultimate 410 Gone Status Code
2024-05-02T16:52:16.923Z 2026-01-16T13:27:01.163Z
CVE-2025-13558
5.4 (3.1)
Blog2Social <= 8.7.0 - Missing Authorization to Authen… pr-gateway
Blog2Social: Social Media Auto Post & Scheduler
2025-11-25T04:37:59.997Z 2026-01-16T13:14:41.204Z
CVE-2026-0913
6.4 (3.1)
User Submitted Posts <= 20260110 - Authenticated (Cont… specialk
User Submitted Posts – Enable Users to Submit Posts from the Front End
2026-01-16T08:23:38.119Z 2026-01-16T13:10:40.814Z
CVE-2025-14757
5.3 (3.1)
Cost Calculator Builder <= 3.6.9 - Missing Authorizati… stylemix
Cost Calculator Builder
2026-01-16T08:38:29.508Z 2026-01-16T13:04:53.115Z
CVE-2025-14822
3.1 (3.1)
DoS from quadratic complexity in model.ParseHashtags Mattermost
Mattermost
2026-01-16T08:52:43.848Z 2026-01-16T13:00:45.911Z
CVE-2025-14844
8.2 (3.1)
Membership Plugin – Restrict Content <= 3.2.16 - Missi… stellarwp
Membership Plugin – Restrict Content
2026-01-16T09:23:46.932Z 2026-01-16T12:50:27.771Z
CVE-2025-14082
2.7 (3.1)
Keycloak-services: keycloak admin rest api: improper a… Red Hat
Red Hat Build of Keycloak
2025-12-10T09:04:51.343Z 2026-01-16T05:00:13.717Z
CVE-2025-54957
9.8 (3.1)
An issue was discovered in Dolby UDC 4.5 through … n/a
n/a
2025-10-20T00:00:00.000Z 2026-01-16T04:55:56.169Z
CVE-2026-21908
7.1 (3.1)
7.5 (4.0)
Junos OS and Junos OS Evolved: Use after free vulnerab… Juniper Networks
Junos OS
2026-01-15T20:21:41.576Z 2026-01-16T04:55:55.090Z
CVE-2026-20076
4.8 (3.1)
Cisco Identity Services Engine Stored Cross-Site Scrip… Cisco
Cisco Identity Services Engine Software
2026-01-15T16:32:03.744Z 2026-01-16T04:55:53.964Z
CVE-2026-20047
4.8 (3.1)
Cisco Identity Services Engine Cross-Site Scripting Vu… Cisco
Cisco Identity Services Engine Software
2026-01-15T16:32:15.578Z 2026-01-16T04:55:52.838Z
CVE-2025-61973
8.8 (3.1)
A local privilege escalation vulnerability exists… Epic Games
Epic Games Store
2026-01-15T15:19:48.838Z 2026-01-16T04:55:51.730Z
CVE-2026-22857
6.8 (4.0)
FreeRDP has a heap-use-after-free in irp_thread_func FreeRDP
FreeRDP
2026-01-14T17:53:54.193Z 2026-01-16T04:55:50.669Z
CVE-2026-22856
6.8 (4.0)
FreeRDP has a heap-use-after-free in create_irp_thread FreeRDP
FreeRDP
2026-01-14T17:53:04.756Z 2026-01-16T04:55:49.425Z
CVE-2026-22854
6.8 (4.0)
FreeRDP has a heap-buffer-overflow in drive_process_irp_read FreeRDP
FreeRDP
2026-01-14T17:47:49.588Z 2026-01-16T04:55:48.360Z
CVE-2026-22853
6.8 (4.0)
FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array FreeRDP
FreeRDP
2026-01-14T17:46:50.159Z 2026-01-16T04:55:47.314Z
CVE-2026-22852
6.8 (4.0)
FreeRDP has a heap-buffer-overflow in audin_process_formats FreeRDP
FreeRDP
2026-01-14T17:45:22.253Z 2026-01-16T04:55:46.208Z
CVE-2026-0421
7 (4.0)
6.5 (3.1)
A potential vulnerability was reported in the BIO… Lenovo
ThinkPad L13 Gen 6 BIOS
2026-01-14T22:18:56.115Z 2026-01-16T04:55:44.710Z
CVE-2026-23709
N/A
Not used N/A N/A 2026-01-16T03:55:07.099Z
CVE-2026-23710
N/A
Not used N/A N/A 2026-01-16T03:55:06.646Z
CVE-2026-23711
N/A
Not used N/A N/A 2026-01-16T03:55:06.197Z
CVE-2026-23712
N/A
Not used N/A N/A 2026-01-16T03:55:05.700Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-54045
4.3 (3.1)
WordPress CM On Demand Search And Replace plugin <= 1.… CreativeMindsSolutions
CM On Demand Search And Replace
2025-12-16T08:12:46.351Z 2026-01-20T14:28:09.965Z
CVE-2025-54005
4.3 (3.1)
WordPress SKT Page Builder plugin <= 4.9 - Broken Acce… sonalsinha21
SKT Page Builder
2025-12-16T08:12:45.965Z 2026-02-05T16:27:33.105Z
CVE-2025-54004
2.6 (3.1)
WordPress WCFM – Frontend Manager for WooCommerce plug… WC Lovers
WCFM – Frontend Manager for WooCommerce
2025-12-16T08:12:45.704Z 2026-02-05T16:27:50.467Z
CVE-2025-53586
9.8 (3.1)
WordPress WeMusic Theme <= 1.9.1 - PHP Object Injectio… NooTheme
WeMusic
2025-11-06T15:54:13.387Z 2026-01-20T14:28:09.916Z
CVE-2025-53585
7.1 (3.1)
WordPress WeMusic theme <= 1.9.1 - Cross Site Scriptin… NooTheme
WeMusic
2025-11-06T15:54:12.787Z 2026-01-20T14:28:10.097Z
CVE-2025-53574
6.1 (3.1)
WordPress Doliconnect Plugin <= 9.3.2 - Cross Site Scr… ptibogxiv
Doliconnect
2025-11-06T15:54:11.607Z 2026-01-20T14:28:09.876Z
CVE-2025-53573
7.1 (3.1)
WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scr… jegtheme
Epic Review
2025-11-06T15:54:10.426Z 2026-01-20T14:28:09.871Z
CVE-2025-53453
8.2 (3.1)
WordPress Hygia theme <= 1.16 - Local File Inclusion v… axiomthemes
Hygia
2025-12-18T07:21:49.127Z 2026-02-03T16:05:11.528Z
CVE-2025-53449
8.1 (3.1)
WordPress Convex theme <= 1.11 - Local File Inclusion … axiomthemes
Convex
2025-12-18T07:21:48.947Z 2026-01-20T14:28:09.907Z
CVE-2025-53448
8.1 (3.1)
WordPress Rally theme <= 1.1 - Local File Inclusion vu… axiomthemes
Rally
2025-12-18T07:21:48.769Z 2026-01-20T14:28:09.880Z
CVE-2025-53447
8.1 (3.1)
WordPress Assembly theme <= 1.1 - Local File Inclusion… axiomthemes
Assembly
2025-12-18T07:21:48.588Z 2026-01-20T14:28:09.843Z
CVE-2025-53446
8.1 (3.1)
WordPress Beautique theme <= 1.5 - Local File Inclusio… axiomthemes
Beautique
2025-12-18T07:21:48.403Z 2026-01-20T14:28:09.895Z
CVE-2025-53445
8.1 (3.1)
WordPress Catwalk theme <= 1.4 - Local File Inclusion … axiomthemes
Catwalk
2025-12-18T07:21:48.218Z 2026-01-20T14:28:09.892Z
CVE-2025-53443
8.1 (3.1)
WordPress Smash theme <= 1.7 - Local File Inclusion vu… axiomthemes
Smash
2025-12-18T07:21:48.033Z 2026-01-20T14:28:09.805Z
CVE-2025-53442
8.1 (3.1)
WordPress Rentic theme <= 1.1 - Local File Inclusion v… axiomthemes
Rentic
2025-12-18T07:21:47.842Z 2026-01-20T14:28:09.727Z
CVE-2025-53441
8.1 (3.1)
WordPress Greeny theme <= 2.6 - Local File Inclusion v… axiomthemes
Greeny
2025-12-18T07:21:47.651Z 2026-01-20T14:28:09.749Z
CVE-2025-53439
8.1 (3.1)
WordPress Harper theme <= 1.13 - Local File Inclusion … axiomthemes
Harper
2025-12-18T07:21:47.455Z 2026-01-20T14:28:09.777Z
CVE-2025-53438
8.1 (3.1)
WordPress FitLine theme <= 1.6 - Local File Inclusion … axiomthemes
FitLine
2025-12-18T07:21:47.228Z 2026-01-20T14:28:09.672Z
CVE-2025-53437
8.1 (3.1)
WordPress Greenorganic theme <= 2.45 - Local File Incl… ApusTheme
Greenorganic
2025-12-18T07:21:47.030Z 2026-01-20T14:28:09.573Z
CVE-2025-53436
8.1 (3.1)
WordPress Monki theme <= 2.0.4 - Local File Inclusion … BZOTheme
Monki
2025-12-18T07:21:46.801Z 2026-01-20T14:28:09.817Z
CVE-2025-53435
8.1 (3.1)
WordPress Plan My Day theme <= 1.1.13 - Local File Inc… axiomthemes
Plan My Day
2025-12-18T07:21:46.620Z 2026-01-20T14:28:09.726Z
CVE-2025-53434
8.1 (3.1)
WordPress ChildHope theme <= 1.1.8 - Local File Inclus… AncoraThemes
ChildHope
2025-12-18T07:21:46.434Z 2026-01-20T14:28:09.778Z
CVE-2025-53433
9.8 (3.1)
WordPress EasyEat theme <= 1.9.0 - Local File Inclusio… AncoraThemes
EasyEat
2025-12-18T07:21:46.182Z 2026-01-20T14:28:09.496Z
CVE-2025-53432
8.1 (3.1)
WordPress Echo theme <= 1.15.0 - Local File Inclusion … AncoraThemes
Echo
2025-12-18T07:21:45.954Z 2026-01-20T14:28:09.429Z
CVE-2025-53431
8.1 (3.1)
WordPress Emberlyn theme <= 1.3.1 - Local File Inclusi… AncoraThemes
Emberlyn
2025-12-18T07:21:45.771Z 2026-01-20T14:28:09.478Z
CVE-2025-53430
8.1 (3.1)
WordPress Etta theme <= 1.14.0 - Local File Inclusion … AncoraThemes
Etta
2025-12-18T07:21:45.581Z 2026-01-20T14:28:09.469Z
CVE-2025-53429
8.1 (3.1)
WordPress Exit Game theme <= 1.4.3 - Local File Inclus… AncoraThemes
Exit Game
2025-12-18T07:21:45.401Z 2026-01-20T14:28:09.431Z
CVE-2025-53428
8.8 (3.1)
WordPress Simple User Registration plugin <= 6.4 - Pri… N-Media
Simple User Registration
2025-10-22T14:32:34.204Z 2026-01-20T14:28:09.496Z
CVE-2025-53426
7.1 (3.1)
WordPress Likert Survey Master plugin <= 0.8.0.1 - Cro… Bob
Likert Survey Master
2025-10-22T14:32:33.768Z 2026-01-20T14:28:09.406Z
CVE-2025-53425
7.6 (3.1)
WordPress Dokan plugin <= 4.1.2 - Privilege Escalation… Dokan, Inc.
Dokan
2025-10-22T14:32:33.573Z 2026-01-20T14:28:09.366Z
ID Description Published Updated
fkie_cve-2025-53441 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:54.507 2026-01-20T15:16:57.200
fkie_cve-2025-53439 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:54.380 2026-01-20T15:16:57.043
fkie_cve-2025-53438 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:54.247 2026-01-20T15:16:56.883
fkie_cve-2025-53437 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:54.117 2026-01-20T15:16:56.737
fkie_cve-2025-53436 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.983 2026-01-20T15:16:56.403
fkie_cve-2025-53435 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.853 2026-01-20T15:16:56.263
fkie_cve-2025-53434 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.710 2026-01-20T15:16:56.130
fkie_cve-2025-53433 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.563 2026-01-20T15:16:55.997
fkie_cve-2025-53432 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.440 2026-01-20T15:16:55.870
fkie_cve-2025-53431 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.303 2026-01-20T15:16:55.740
fkie_cve-2025-53430 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.183 2026-01-20T15:16:55.607
fkie_cve-2025-53429 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:53.050 2026-01-20T15:16:55.473
fkie_cve-2025-53428 Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration al… 2025-10-22T15:15:51.323 2026-01-20T15:16:55.340
fkie_cve-2025-53426 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:50.993 2026-01-20T15:16:55.060
fkie_cve-2025-53425 Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escal… 2025-10-22T15:15:50.863 2026-01-20T15:16:54.927
fkie_cve-2025-53424 Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce… 2025-10-22T15:15:50.727 2026-01-20T15:16:54.797
fkie_cve-2025-53423 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:49.700 2026-01-20T15:16:54.663
fkie_cve-2025-53422 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:49.563 2026-01-20T15:16:54.520
fkie_cve-2025-53421 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrect… 2025-10-22T15:15:49.437 2026-01-20T15:16:54.387
fkie_cve-2025-53420 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:49.310 2026-01-20T15:16:54.240
fkie_cve-2025-53352 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:49.183 2026-01-20T15:16:54.100
fkie_cve-2025-53351 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:49.057 2026-01-20T15:16:53.963
fkie_cve-2025-53350 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.927 2026-01-20T15:16:53.820
fkie_cve-2025-53349 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:56.780 2026-01-20T15:16:53.683
fkie_cve-2025-53344 Cross-Site Request Forgery (CSRF) vulnerability in ThimPress Thim Core allows Cross Site Request Fo… 2026-01-05T17:15:45.737 2026-01-20T15:16:53.580
fkie_cve-2025-53324 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:56.630 2026-01-20T15:16:53.447
fkie_cve-2025-53316 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-c… 2025-11-06T16:15:56.483 2026-01-20T15:16:53.313
fkie_cve-2025-53297 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.793 2026-01-20T15:16:53.180
fkie_cve-2025-53286 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:56.333 2026-01-20T15:16:53.050
fkie_cve-2025-53283 Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 -… 2025-11-06T16:15:56.180 2026-01-20T15:16:52.913
ID Severity Description Published Updated
ghsa-v2jh-chh6-cf52
2.4 (3.1)
1.9 (4.0)
A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList… 2026-01-05T03:30:27Z 2026-01-05T03:30:27Z
ghsa-mp3x-hgj4-gx83
2.4 (3.1)
1.9 (4.0)
A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some un… 2026-01-05T03:30:27Z 2026-01-05T03:30:27Z
ghsa-mhxp-2mqc-j942
6.3 (3.1)
5.3 (4.0)
A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. … 2026-01-05T03:30:27Z 2026-01-05T03:30:27Z
ghsa-3qff-j79f-jf26
5.4 (3.1)
5.3 (4.0)
A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d2… 2026-01-05T03:30:27Z 2026-01-05T03:30:27Z
ghsa-2wmv-mm4p-p4mx
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the fu… 2026-01-05T03:30:27Z 2026-01-05T03:30:27Z
ghsa-c5cp-vx83-jhqx
8.8 (4.0)
Langflow Missing Authentication on Critical API Endpoints 2026-01-02T21:11:50Z 2026-01-05T01:01:41Z
ghsa-p7p7-fp6f-jwrr
7.3 (3.1)
5.5 (4.0)
A flaw has been found in Seeyon Zhiyuan OA Web Application System up to 20251223. The impacted elem… 2026-01-05T00:30:16Z 2026-01-05T00:30:16Z
ghsa-gpmm-h5qv-gcpf
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in Seeyon Zhiyuan OA Web Application System up to 20251223. This aff… 2026-01-05T00:30:16Z 2026-01-05T00:30:16Z
ghsa-8fc9-vxf4-v7wm
7.3 (3.1)
5.5 (4.0)
A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an u… 2026-01-04T15:30:21Z 2026-01-04T15:30:21Z
ghsa-x9w7-fj93-8rc4
4.7 (3.1)
2.0 (4.0)
A vulnerability was determined in CRMEB up to 5.6.1. This vulnerability affects unknown code of the… 2026-01-04T12:30:21Z 2026-01-04T12:30:21Z
ghsa-g4c4-3wvv-75rq
6.3 (3.1)
2.1 (4.0)
A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vuln… 2026-01-04T12:30:21Z 2026-01-04T12:30:21Z
ghsa-g3px-2f97-p7gh
4.7 (3.1)
2.0 (4.0)
A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of … 2026-01-04T12:30:21Z 2026-01-04T12:30:21Z
ghsa-5pq5-xxph-mrwm
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by … 2026-01-04T12:30:21Z 2026-01-04T12:30:21Z
ghsa-57vq-6p22-fhvx
4.9 (3.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… 2026-01-04T12:30:21Z 2026-01-04T12:30:21Z
ghsa-v45g-9jff-2vqr
7.3 (3.1)
5.5 (4.0)
A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an… 2026-01-04T09:30:26Z 2026-01-04T09:30:26Z
ghsa-823v-5fjj-p7fm
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. … 2026-01-04T06:30:26Z 2026-01-04T06:30:26Z
ghsa-p3fv-jq23-qg6f
6.3 (3.1)
2.1 (4.0)
A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. … 2026-01-04T03:30:27Z 2026-01-04T03:30:27Z
ghsa-qv6w-cq5f-xpvw
5.3 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnera… 2026-01-04T00:30:17Z 2026-01-04T00:30:17Z
ghsa-5f5h-xp93-w647
6.5 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerabi… 2026-01-04T00:30:17Z 2026-01-04T00:30:17Z
ghsa-c4mg-vhq3-hwc2
7.3 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulner… 2026-01-04T00:30:16Z 2026-01-04T00:30:16Z
ghsa-9w9c-6cc9-mc59
6.9 (4.0)
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:33Z 2026-01-04T00:30:16Z
ghsa-752h-56c7-7mr2
6.5 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerab… 2026-01-04T00:30:16Z 2026-01-04T00:30:16Z
ghsa-4v2m-wc8x-hcjv
7.3 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerabi… 2026-01-04T00:30:16Z 2026-01-04T00:30:16Z
ghsa-472g-2pwf-qm99
5.3 (3.1)
6.9 (4.0)
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnera… 2026-01-04T00:30:16Z 2026-01-04T00:30:16Z
ghsa-wvmf-999m-w27j
9.1 (3.1)
6.9 (4.0)
Genymobile/scrcpy versions up to and including 3.3.3 and prior to commit 3e40b24 contain a global b… 2025-12-19T00:31:41Z 2026-01-03T21:30:26Z
ghsa-rcf9-vp22-qqr4
Rejected reason: Not used 2026-01-03T06:30:16Z 2026-01-03T06:30:16Z
ghsa-q99j-frr5-3c8c
Rejected reason: Not used 2026-01-03T06:30:16Z 2026-01-03T06:30:16Z
ghsa-jxwc-j45q-67x2
Rejected reason: Not used 2026-01-03T06:30:16Z 2026-01-03T06:30:16Z
ghsa-h5g2-f397-gc23
Rejected reason: Not used 2026-01-03T06:30:16Z 2026-01-03T06:30:16Z
ghsa-cpj2-6jmp-955v
Rejected reason: Not used 2026-01-03T06:30:16Z 2026-01-03T06:30:16Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-1588 The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape… 2024-02-17T06:02:27.114130Z
gsd-2024-1581 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.088700Z
gsd-2024-1585 The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored C… 2024-02-17T06:02:27.068526Z
gsd-2024-1596 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.064457Z
gsd-2024-1577 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.056493Z
gsd-2024-1587 The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all … 2024-02-17T06:02:27.054288Z
gsd-2024-1583 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.048792Z
gsd-2024-1595 Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, whic… 2024-02-17T06:02:27.034652Z
gsd-2024-1578 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.032935Z
gsd-2024-1600 A Local File Inclusion (LFI) vulnerability exists in the parisneo/lollms-webui applicatio… 2024-02-17T06:02:27.031769Z
gsd-2024-1576 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:27.031271Z
gsd-2024-1599 lunary-ai/lunary version 0.3.0 is vulnerable to unauthorized project creation due to insu… 2024-02-17T06:02:27.021028Z
gsd-2024-1590 The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulne… 2024-02-17T06:02:27.008874Z
gsd-2024-1582 The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cro… 2024-02-17T06:02:26.984622Z
gsd-2024-1589 The SendPress Newsletters WordPress plugin through 1.23.11.6 does not sanitise and escape… 2024-02-17T06:02:26.978299Z
gsd-2024-1592 The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Cross-Site… 2024-02-17T06:02:26.971873Z
gsd-2024-1575 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:26.955921Z
gsd-2024-1593 A path traversal vulnerability exists in the mlflow/mlflow repository due to improper han… 2024-02-17T06:02:26.937448Z
gsd-2024-1580 An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large f… 2024-02-17T06:02:26.858819Z
gsd-2024-1591 Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Mana… 2024-02-17T06:02:26.849558Z
gsd-2024-1586 The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cr… 2024-02-17T06:02:26.835044Z
gsd-2024-1584 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:26.831789Z
gsd-2024-1594 A path traversal vulnerability exists in the mlflow/mlflow repository, specifically withi… 2024-02-17T06:02:26.821085Z
gsd-2024-1597 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMod… 2024-02-17T06:02:26.789374Z
gsd-2024-1601 An SQL injection vulnerability exists in the `delete_discussion()` function of the parisn… 2024-02-17T06:02:26.771625Z
gsd-2024-1579 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:26.755940Z
gsd-2024-1598 The format of the source doesn't require a description, click on the link for more details. 2024-02-17T06:02:26.743968Z
gsd-2024-26277 A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Paraso… 2024-02-16T06:02:27.303808Z
gsd-2024-26274 The format of the source doesn't require a description, click on the link for more details. 2024-02-16T06:02:27.300392Z
gsd-2024-26275 A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Paraso… 2024-02-16T06:02:27.287384Z
ID Description Published Updated
mal-2025-184651 Malicious code in odasv-kuu-bofauffsni (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184650 Malicious code in odasv-kuu-bofauffsi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184649 Malicious code in odasv-kuu-bofauf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184648 Malicious code in odasv-kuu-bofau (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184647 Malicious code in odasv-kuu-bof (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184646 Malicious code in odasv-knu-boniv (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184645 Malicious code in odasv-knu-bonijv (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184644 Malicious code in odasv-knu-boniju (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184643 Malicious code in odasv-knu-bonijavv (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184642 Malicious code in odasv-knu-bonijavufif (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184641 Malicious code in odasv-knu-bonijavuficvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184640 Malicious code in odasv-knu-bonijavuficuavaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184639 Malicious code in odasv-knu-bonijavuficuadvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184638 Malicious code in odasv-knu-bonijavuficuadcvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184637 Malicious code in odasv-knu-bonijavuficuadcfvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184636 Malicious code in odasv-knu-bonijavufiaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184635 Malicious code in odasv-knu-bonijavufcadcfvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184634 Malicious code in odasv-knu-bonijavufcacvf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184633 Malicious code in odasv-knu-bonijavufcacfvaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184632 Malicious code in odasv-knu-bonijavuf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184631 Malicious code in odasv-knu-bonijavfvf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184630 Malicious code in odasv-knu-bonijavfv (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184629 Malicious code in odasv-knu-bonijavfccvf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184628 Malicious code in odasv-knu-bonijavfcacvf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184627 Malicious code in odasv-knu-bonijauf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184626 Malicious code in odasv-knu-bonijau (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184625 Malicious code in odasv-knu-bonij (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184624 Malicious code in odasv-knu-bonia (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184623 Malicious code in odasv-knu-boni (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184622 Malicious code in odasv-knu-bon (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2024:3760 Red Hat Security Advisory: ipa security update 2024-06-10T15:48:33+00:00 2025-11-21T19:03:52+00:00
rhsa-2024:3759 Red Hat Security Advisory: idm:DL1 security update 2024-06-10T14:28:57+00:00 2025-11-21T19:03:52+00:00
rhsa-2024:3758 Red Hat Security Advisory: idm:DL1 security update 2024-06-10T13:56:31+00:00 2025-11-21T19:03:51+00:00
rhsa-2024:3757 Red Hat Security Advisory: ipa security update 2024-06-10T14:36:45+00:00 2025-11-21T19:03:51+00:00
rhsa-2024:3756 Red Hat Security Advisory: idm:DL1 security update 2024-06-10T14:04:16+00:00 2025-11-21T19:03:50+00:00
rhsa-2024:3755 Red Hat Security Advisory: idm:DL1 security update 2024-06-10T14:24:41+00:00 2025-11-21T19:03:49+00:00
rhsa-2024:3754 Red Hat Security Advisory: ipa security update 2024-06-10T14:13:31+00:00 2025-11-21T19:03:49+00:00
rhsa-2024:3713 Red Hat Security Advisory: OpenShift Container Platform 4.12.59 bug fix and security update 2024-06-12T04:03:21+00:00 2025-11-21T19:03:46+00:00
rhsa-2024:3701 Red Hat Security Advisory: nghttp2 security update 2024-06-06T14:25:15+00:00 2025-11-21T19:03:46+00:00
rhsa-2024:3700 Red Hat Security Advisory: OpenShift Container Platform 4.14.29 packages and security update 2024-06-13T02:29:26+00:00 2025-11-21T19:03:45+00:00
rhsa-2024:3666 Red Hat Security Advisory: tomcat security and bug fix update 2024-06-06T08:43:10+00:00 2025-11-21T19:03:45+00:00
rhsa-2024:3685 Red Hat Security Advisory: java-1.8.0-ibm security update 2024-06-06T13:15:07+00:00 2025-11-21T19:03:44+00:00
rhsa-2024:3676 Red Hat Security Advisory: OpenShift Container Platform 4.15.17 security update 2024-06-11T16:58:12+00:00 2025-11-21T19:03:43+00:00
rhsa-2024:3669 Red Hat Security Advisory: less security update 2024-06-06T09:37:49+00:00 2025-11-21T19:03:42+00:00
rhsa-2024:3667 Red Hat Security Advisory: cockpit security update 2024-06-06T08:49:19+00:00 2025-11-21T19:03:41+00:00
rhsa-2024:3657 Red Hat Security Advisory: booth security update 2024-06-06T05:22:44+00:00 2025-11-21T19:03:41+00:00
rhsa-2024:3665 Red Hat Security Advisory: nghttp2 security update 2024-06-06T08:31:19+00:00 2025-11-21T19:03:40+00:00
rhsa-2024:3661 Red Hat Security Advisory: booth security update 2024-06-06T05:45:29+00:00 2025-11-21T19:03:40+00:00
rhsa-2024:3660 Red Hat Security Advisory: booth security update 2024-06-06T05:25:39+00:00 2025-11-21T19:03:39+00:00
rhsa-2024:3659 Red Hat Security Advisory: booth security update 2024-06-06T05:41:29+00:00 2025-11-21T19:03:39+00:00
rhsa-2024:3658 Red Hat Security Advisory: booth security update 2024-06-06T05:22:54+00:00 2025-11-21T19:03:39+00:00
rhsa-2024:3619 Red Hat Security Advisory: kernel security and bug fix update 2024-06-05T01:19:11+00:00 2025-11-21T19:03:35+00:00
rhsa-2024:3573 Red Hat Security Advisory: Red Hat build of Keycloak 22.0.11 Images enhancement and security update 2024-06-03T21:13:15+00:00 2025-11-21T19:03:33+00:00
rhsa-2024:3591 Red Hat Security Advisory: 389-ds-base security update 2024-06-04T14:31:19+00:00 2025-11-21T19:03:32+00:00
rhsa-2024:3576 Red Hat Security Advisory: Red Hat build of Keycloak 24.0.5 Images enhancement and security update 2024-06-03T21:28:42+00:00 2025-11-21T19:03:30+00:00
rhsa-2024:3575 Red Hat Security Advisory: Red Hat build of Keycloak 24.0.5 enhancement and security update 2024-06-03T21:26:15+00:00 2025-11-21T19:03:30+00:00
rhsa-2024:3574 Red Hat Security Advisory: Red Hat build of Keycloak 22.0.11 enhancement and security update 2024-06-03T21:10:43+00:00 2025-11-21T19:03:30+00:00
rhsa-2024:3572 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.9 security update 2024-06-03T20:00:35+00:00 2025-11-21T19:03:29+00:00
rhsa-2024:3570 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.9 for OpenShift image enhancement update 2024-06-03T19:50:22+00:00 2025-11-21T19:03:29+00:00
rhsa-2024:3568 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.9 security update on RHEL 9 2024-06-03T19:48:46+00:00 2025-11-21T19:03:28+00:00
ID Description Published Updated
msrc_cve-2022-28356 In the Linux kernel before 5.17.1 a refcount leak bug was found in net/llc/af_llc.c. 2022-04-02T00:00:00.000Z 2022-04-10T00:00:00.000Z
msrc_cve-2022-0998 An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validate function. This flaw allows a local user to crash or potentially escalate their privileges on the system. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2022-0500 A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2022-0494 A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2022-0435 A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2022-0330 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2022-0322 A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw an attempt to use more buffer than is allocated triggers a BUG_ON issue leading to a denial of service (DOS). 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2021-4203 A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw an attacker with a user privileges may crash the system or leak internal kernel information. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2021-4202 A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed leading to a privilege escalation problem. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2021-4157 An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user having access to the NFS mount could potentially use this flaw to crash the system or escalate privileges on the system. 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2021-3572 A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. 2021-11-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2021-20295 It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756 which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756 refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756. 2022-04-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2020-35501 A flaw was found in the Linux kernels implementation of audit rules where a syscall can unexpectedly not be correctly not be logged by the audit subsystem 2022-03-02T00:00:00.000Z 2022-04-09T00:00:00.000Z
msrc_cve-2019-1010238 Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize. 2019-07-02T00:00:00.000Z 2022-04-07T00:00:00.000Z
msrc_cve-2022-27950 In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11 a memory leak exists for a certain hid_parse error condition. 2022-03-02T00:00:00.000Z 2022-04-06T00:00:00.000Z
msrc_cve-2022-26280 Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. 2022-03-02T00:00:00.000Z 2022-04-06T00:00:00.000Z
msrc_cve-2022-1160 heap buffer overflow in get_one_sourceline in vim/vim 2022-03-02T00:00:00.000Z 2022-04-06T00:00:00.000Z
msrc_cve-2018-1311 The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature or via SAX using the XERCES_DISABLE_DTD environment variable. 2019-12-02T00:00:00.000Z 2022-04-06T00:00:00.000Z
msrc_cve-2022-24497 Windows Network File System Remote Code Execution Vulnerability 2022-04-12T08:00:00.000Z 2022-04-05T07:00:00.000Z
msrc_cve-2022-24482 Windows ALPC Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-05T07:00:00.000Z
msrc_cve-2022-1154 Use after free in utf_ptr2char in vim/vim 2022-03-02T00:00:00.000Z 2022-04-05T00:00:00.000Z
msrc_cve-2022-1056 Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 46dc8fcd. 2022-03-02T00:00:00.000Z 2022-04-05T00:00:00.000Z
msrc_cve-2021-3618 ALPACA is an application layer protocol content confusion attack exploiting TLS servers implementing different protocols but using compatible certificates such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer. 2022-03-02T00:00:00.000Z 2022-04-05T00:00:00.000Z
msrc_cve-2021-36230 HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token allowing privilege escalation to organization owner. Fixed in v202107-1. 2021-07-02T00:00:00.000Z 2022-04-02T00:00:00.000Z
msrc_cve-2018-9057 aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password. 2018-03-02T00:00:00.000Z 2022-04-02T00:00:00.000Z
msrc_cve-2022-26912 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-01T07:00:00.000Z
msrc_cve-2022-26909 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-01T07:00:00.000Z
msrc_cve-2022-26908 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-01T07:00:00.000Z
msrc_cve-2022-26900 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-01T07:00:00.000Z
msrc_cve-2022-26895 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 2022-04-12T08:00:00.000Z 2022-04-01T07:00:00.000Z
ID Description Updated
var-201407-0604 The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other produc… 2025-04-13T23:14:45.835000Z
var-201407-0605 Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users … 2025-04-13T23:14:45.783000Z
var-201502-0370 The remote-management module in the (1) Multi Panels, (2) Comfort Panels, and (3) RT Adva… 2025-04-13T23:14:45.736000Z
var-201407-0603 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other pr… 2025-04-13T23:14:45.684000Z
var-201407-0602 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other pr… 2025-04-13T23:14:45.632000Z
var-201408-0026 cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to… 2025-04-13T23:14:45.559000Z
var-201408-0154 Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop poli… 2025-04-13T23:14:45.522000Z
var-201409-0401 tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of serv… 2025-04-13T23:14:43.946000Z
var-201409-0400 snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial… 2025-04-13T23:14:43.910000Z
var-201409-0395 Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (proces… 2025-04-13T23:14:43.875000Z
var-201409-0402 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote att… 2025-04-13T23:14:43.840000Z
var-201409-0442 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allo… 2025-04-13T23:14:43.797000Z
var-201409-0444 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allo… 2025-04-13T23:14:43.749000Z
var-201409-0445 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allo… 2025-04-13T23:14:43.695000Z
var-201409-0440 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allo… 2025-04-13T23:14:43.644000Z
var-201409-0441 Stack-based buffer overflow in Advantech WebAccess (formerly BroadWin WebAccess) 7.2 allo… 2025-04-13T23:14:43.587000Z
var-201409-0548 Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Jun… 2025-04-13T23:14:43.526000Z
var-201410-0067 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Prime Optical 10 a… 2025-04-13T23:14:42.599000Z
var-201410-0378 Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N rou… 2025-04-13T23:14:42.536000Z
var-201410-1052 Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote… 2025-04-13T23:14:42.041000Z
var-201411-0178 The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmwar… 2025-04-13T23:14:41.576000Z
var-201411-0177 Multiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (… 2025-04-13T23:14:41.528000Z
var-201411-0176 Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and C… 2025-04-13T23:14:41.475000Z
var-201411-0179 The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmwar… 2025-04-13T23:14:41.428000Z
var-201411-0180 The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmwar… 2025-04-13T23:14:41.379000Z
var-201411-0370 ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP co… 2025-04-13T23:14:41.247000Z
var-201412-0503 Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X … 2025-04-13T23:14:40.092000Z
var-201501-0227 The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP… 2025-04-13T23:14:36.209000Z
var-201501-0248 Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25,… 2025-04-13T23:14:36.176000Z
var-201503-0170 The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 a… 2025-04-13T23:14:34.517000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:2067-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2) 2021-06-18T09:40:57Z 2021-06-18T09:40:57Z
suse-su-2021:2027-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2) 2021-06-18T09:40:50Z 2021-06-18T09:40:50Z
suse-su-2021:2026-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) 2021-06-18T09:40:42Z 2021-06-18T09:40:42Z
suse-su-2021:2016-1 Security update for libxml2 2021-06-18T07:39:34Z 2021-06-18T07:39:34Z
suse-su-2021:2014-1 Security update for xterm 2021-06-18T07:16:10Z 2021-06-18T07:16:10Z
suse-su-2021:2013-1 Security update for xterm 2021-06-18T07:15:56Z 2021-06-18T07:15:56Z
suse-su-2021:2012-1 Security update for python-urllib3 2021-06-18T07:15:17Z 2021-06-18T07:15:17Z
suse-su-2021:2011-1 Security update for xterm 2021-06-18T07:14:46Z 2021-06-18T07:14:46Z
suse-su-2021:2010-1 Security update for python-PyJWT 2021-06-18T07:03:27Z 2021-06-18T07:03:27Z
suse-su-2021:2008-1 Security update for python-rsa 2021-06-17T16:08:35Z 2021-06-17T16:08:35Z
suse-su-2021:2007-1 Security update for caribou 2021-06-17T16:07:37Z 2021-06-17T16:07:37Z
suse-su-2021:2006-1 Security update for apache2 2021-06-17T16:06:42Z 2021-06-17T16:06:42Z
suse-su-2021:2005-1 Security update for jetty-minimal 2021-06-17T16:04:19Z 2021-06-17T16:04:19Z
suse-su-2021:2004-1 Security update for apache2 2021-06-17T16:03:59Z 2021-06-17T16:03:59Z
suse-su-2021:2003-1 Security update for MozillaThunderbird 2021-06-17T16:03:14Z 2021-06-17T16:03:14Z
suse-su-2021:1999-1 Security update for tpm2.0-tools 2021-06-17T14:24:49Z 2021-06-17T14:24:49Z
suse-su-2021:1998-1 Security update for tpm2.0-tools 2021-06-17T14:24:33Z 2021-06-17T14:24:33Z
suse-su-2021:1995-1 Security update for xstream 2021-06-17T13:12:06Z 2021-06-17T13:12:06Z
suse-su-2021:1994-1 Security update for postgresql12 2021-06-17T11:36:15Z 2021-06-17T11:36:15Z
suse-su-2021:14750-1 Security update for inn 2021-06-17T08:52:13Z 2021-06-17T08:52:13Z
suse-su-2021:14749-1 Security update for apache2 2021-06-17T07:53:00Z 2021-06-17T07:53:00Z
suse-su-2021:1990-1 Security update for webkit2gtk3 2021-06-17T07:52:17Z 2021-06-17T07:52:17Z
suse-su-2021:1989-1 Security update for java-1_8_0-openjdk 2021-06-17T07:51:59Z 2021-06-17T07:51:59Z
suse-su-2021:1980-1 Security update for java-1_8_0-openjdk 2021-06-15T11:07:02Z 2021-06-15T11:07:02Z
suse-su-2021:1979-1 Security update for snakeyaml 2021-06-15T11:06:54Z 2021-06-15T11:06:54Z
suse-su-2021:1978-1 Security update for snakeyaml 2021-06-15T11:06:43Z 2021-06-15T11:06:43Z
suse-su-2021:1977-1 Security update for the Linux Kernel 2021-06-15T11:06:36Z 2021-06-15T11:06:36Z
suse-su-2021:14748-1 Security update for xorg-x11-libX11 2021-06-15T11:05:27Z 2021-06-15T11:05:27Z
suse-su-2021:1975-1 Security update for the Linux Kernel 2021-06-15T11:04:23Z 2021-06-15T11:04:23Z
suse-su-2021:1970-1 Security update for postgresql10 2021-06-14T14:59:32Z 2021-06-14T14:59:32Z
ID Description Published Updated
cnvd-2024-48897 Adobe Animate整数溢出或环绕漏洞 2024-12-13 2024-12-23
cnvd-2024-48896 Adobe Animate越界写入漏洞(CNVD-2024-48896) 2024-12-13 2024-12-23
cnvd-2024-48895 Adobe Animate访问未初始化指针漏洞 2024-12-13 2024-12-23
cnvd-2024-48077 深圳市联软科技股份有限公司安全数据交换系统存在XML实体注入漏洞 2024-11-08 2024-12-23
cnvd-2024-48073 统信软件技术有限公司看图程序存在二进制漏洞 2024-11-08 2024-12-23
cnvd-2024-47620 深圳市蓝凌软件股份有限公司蓝凌OA存在逻辑缺陷漏洞 2024-11-07 2024-12-22
cnvd-2024-47776 北京北大方正电子有限公司方正畅享全媒体新闻生产系统存在SQL注入漏洞(CNVD-2024-47776) 2024-11-06 2024-12-21
cnvd-2024-47773 北京美特软件技术有限公司MetaCRM6客户关系管理系统存在SQL注入漏洞(CNVD-2024-47773) 2024-11-06 2024-12-21
cnvd-2024-47767 浙江大华技术股份有限公司DSS系统存在信息泄露漏洞 2024-11-06 2024-12-21
cnvd-2024-47717 南昌卓蓝科技有限公司蓝天采集器存在信息泄露漏洞 2024-11-06 2024-12-21
cnvd-2024-49153 Apache Subversion拒绝服务漏洞(CNVD-2024-49153) 2024-12-13 2024-12-20
cnvd-2024-48762 TOTOLINK X5000R和A7000R缓冲区溢出漏洞 2023-10-19 2024-12-20
cnvd-2024-48761 Bento4内存泄露漏洞 2024-03-06 2024-12-20
cnvd-2024-48760 libming内存泄露漏洞(CNVD-2024-48760) 2024-03-06 2024-12-20
cnvd-2024-48759 Microsoft Visual Studio权限提升漏洞(CNVD-2024-48759) 2024-11-15 2024-12-20
cnvd-2024-48758 Microsoft Visual Studio Code extension for Arduino远程代码执行漏洞 2024-10-17 2024-12-20
cnvd-2024-48757 Microsoft Visual Studio Code Python Extension远程代码执行漏洞 2024-11-15 2024-12-20
cnvd-2024-48756 Microsoft SharePoint代码执行漏洞(CNVD-2024-48756) 2023-11-16 2024-12-20
cnvd-2024-48755 Microsoft SharePoint代码执行漏洞(CNVD-2024-48755) 2024-12-13 2024-12-20
cnvd-2024-48754 Microsoft SharePoint信息泄露漏洞(CNVD-2024-48754) 2024-12-13 2024-12-20
cnvd-2024-48753 Microsoft SharePoint权限提升漏洞(CNVD-2024-48753) 2024-12-13 2024-12-20
cnvd-2024-48752 Microsoft SharePoint信息泄露漏洞(CNVD-2024-48752) 2024-12-13 2024-12-20
cnvd-2024-47765 用友网络科技股份有限公司U8CRM存在SQL注入漏洞(CNVD-2024-47765) 2024-11-05 2024-12-20
cnvd-2024-47764 浙江大华技术股份有限公司智慧园区综合管理平台存在SQL注入漏洞 2024-11-05 2024-12-20
cnvd-2024-48751 IrfanView代码执行漏洞(CNVD-2024-48751) 2024-11-27 2024-12-19
cnvd-2024-48750 IrfanView代码执行漏洞(CNVD-2024-48750) 2024-11-27 2024-12-19
cnvd-2024-48749 IrfanView代码执行漏洞(CNVD-2024-48749) 2024-11-27 2024-12-19
cnvd-2024-48748 IrfanView代码执行漏洞(CNVD-2024-48748) 2024-11-27 2024-12-19
cnvd-2024-48747 IrfanView代码执行漏洞(CNVD-2024-48747) 2024-11-27 2024-12-19
cnvd-2024-48746 IrfanView代码执行漏洞(CNVD-2024-48746) 2024-11-27 2024-12-19
ID Description Published Updated
certa-2012-avi-059 Vulnérabilités dans DotNetNuke 2012-02-06T00:00:00.000000 2012-02-06T00:00:00.000000
certa-2012-avi-058 Vulnérabilité dans Skype 2012-02-06T00:00:00.000000 2012-02-06T00:00:00.000000
certa-2010-avi-555 Vulnérabilité dans OpenSSL 2010-11-17T00:00:00.000000 2012-02-06T00:00:00.000000
certa-2012-avi-057 Vulnérabilité dans EMC Documentum 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-056 Vulnérabilités dans Blue Coat Reporter 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-055 Vulnérabilité dans PHP 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-054 Vulnérabilités dans Mac OS X 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-053 Vulnérabilités dans Bugzilla 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-052 Multiples vulnérabilités dans Drupal 2012-02-03T00:00:00.000000 2012-02-03T00:00:00.000000
certa-2012-avi-051 Vulnérabilité dans HP Network Automation 2012-02-02T00:00:00.000000 2012-02-02T00:00:00.000000
certa-2012-avi-050 Vulnérabilités dans Apache 2012-02-02T00:00:00.000000 2012-02-02T00:00:00.000000
certa-2012-avi-049 Vulnérabilité dans Ubuntu AccountsService 2012-02-01T00:00:00.000000 2012-02-01T00:00:00.000000
certa-2012-avi-048 Vulnérabilité dans Ubuntu Software Properties 2012-02-01T00:00:00.000000 2012-02-01T00:00:00.000000
certa-2012-avi-047 Multiples vulnérabilités dans les produits Mozilla 2012-02-01T00:00:00.000000 2012-02-01T00:00:00.000000
certa-2012-avi-046 Vulnérabilités dans VMware ESX et ESXi 2012-02-01T00:00:00.000000 2012-02-01T00:00:00.000000
certa-2012-avi-045 Vulnérabilité dans des produits Oracle 2012-02-01T00:00:00.000000 2012-02-01T00:00:00.000000
certa-2012-avi-044 Vulnérabilité dans RSA enVision 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-043 Vulnérabilité dans IBM Web Experience Factory 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-042 Vulnérabilité dans JBoss 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-041 Vulnérabilités dans IBM DB2 Accessories Suite 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-040 Vulnérabilités dans SAP NetWeaver 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-039 Vulnérabilités dans FFmpeg 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-038 Vulnérabilité dans Samba 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-037 Vulnérabilité dans IBM solidDB 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-036 Multiples vulnérabilités dans Postfix Admin 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-035 Vulnérabilité dans Cisco IP Video Phone E20 2012-01-31T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2012-avi-006 Multiples vulnérabilités dans OpenSSL 2012-01-10T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2011-avi-645 Vulnérabilité dans ISC BIND 2011-11-17T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2011-avi-580 Vulnérabilités dans Java 2011-10-20T00:00:00.000000 2012-01-31T00:00:00.000000
certa-2011-avi-381 Multiples vulnérabilités dans Bind 2011-07-06T00:00:00.000000 2012-01-31T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated