Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-20075
4.8 (3.1)
Cisco Evolved Programmable Network Manager and Cisco P… Cisco
Cisco Evolved Programmable Network Manager (EPNM)
2026-01-15T16:32:15.838Z 2026-01-15T18:11:54.678Z
CVE-2026-23494
4.3 (3.1)
Pimcore is Missing Function Level Authorization on "St… pimcore
pimcore
2026-01-15T16:52:58.729Z 2026-01-15T18:08:13.110Z
CVE-2025-12178
6.4 (3.1)
SpiceForms Form Builder <= 1.0 - Authenticated (Contri… aankit
SpiceForms Form Builder
2026-01-14T05:28:12.421Z 2026-01-15T18:00:12.192Z
CVE-2021-47757
8.7 (4.0)
8.8 (3.1)
Chikitsa Patient Management System 2.0.2 - 'plugin' Re… dharashah
Chikitsa Patient Management System
2026-01-15T15:52:04.994Z 2026-01-15T17:57:01.374Z
CVE-2021-47758
8.7 (4.0)
8.8 (3.1)
Chikitsa Patient Management System 2.0.2 - Remote Code… dharashah
Chikitsa Patient Management System
2026-01-15T15:52:05.437Z 2026-01-15T17:26:55.158Z
CVE-2025-14854
5.4 (3.1)
WP-CRM System – Manage Clients and Projects <= 3.4.5 -… nofearinc
WP-CRM System – Manage Clients and Projects
2026-01-14T05:28:12.974Z 2026-01-15T17:26:26.971Z
CVE-2025-68492
4.2 (3.0)
2.3 (4.0)
Chainlit versions prior to 2.8.5 contain an autho… Chainlit
Chainlit
2026-01-14T06:27:14.846Z 2026-01-15T17:24:34.226Z
CVE-2026-0739
4.4 (3.1)
WMF Mobile Redirector <= 1.2 - Authenticated (Administ… webbu
WMF Mobile Redirector
2026-01-14T06:40:04.088Z 2026-01-15T17:23:06.026Z
CVE-2026-23495
4.3 (3.1)
Pimcore's Admin Classic Bundle is Missing Function Lev… pimcore
pimcore
2026-01-15T16:47:07.114Z 2026-01-15T17:09:32.298Z
CVE-2025-70298
8.2 (3.1)
GPAC v2.4.0 was discovered to contain an out-of-b… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T17:05:50.552Z
CVE-2026-22915
4.3 (3.1)
An attacker with low privileges may be able to re… SICK AG
TDC-X401GL
2026-01-15T13:06:44.048Z 2026-01-15T17:03:58.009Z
CVE-2021-47759
6.8 (4.0)
6.2 (3.1)
MTPutty 1.0.1.21 - SSH Password Disclosure Ttyplus
MTPutty
2026-01-15T15:52:05.935Z 2026-01-15T17:02:16.609Z
CVE-2025-70656
7.5 (3.1)
Tenda AX-1806 v1.0.0.1 was discovered to contain … n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T17:01:05.154Z
CVE-2025-37165
7.5 (3.1)
Exposure of VLAN information in unintended network int… Hewlett Packard Enterprise (HPE)
Instant On
2026-01-13T17:40:56.557Z 2026-01-15T16:56:25.947Z
CVE-2026-22916
4.3 (3.1)
An attacker with low privileges may be able to tr… SICK AG
TDC-X401GL
2026-01-15T13:07:07.335Z 2026-01-15T16:55:42.554Z
CVE-2021-47761
8.5 (4.0)
7.8 (3.1)
MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Es… Millegpg
MilleGPG5
2026-01-15T15:52:06.931Z 2026-01-15T16:53:31.329Z
CVE-2021-47762
8.5 (4.0)
7.8 (3.1)
HTTPDebuggerPro 9.11 - Unquoted Service Path Httpdebugger
HTTPDebuggerPro
2026-01-15T15:52:07.433Z 2026-01-15T16:52:37.108Z
CVE-2021-47763
8.8 (4.0)
8.2 (3.1)
Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort'… Aimeos
Aimeos Laravel ecommerce platform
2026-01-15T15:52:07.958Z 2026-01-15T16:51:11.006Z
CVE-2021-47766
7.1 (4.0)
7.1 (3.1)
Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated) Levelprograms
Kmaleon
2026-01-15T15:52:09.398Z 2026-01-15T16:47:08.921Z
CVE-2026-22867
8.7 (3.1)
LaSuite Doc affected by Stored XSS via Interlinking Block suitenumerique
docs
2026-01-15T16:31:34.397Z 2026-01-15T16:46:57.161Z
CVE-2021-47774
8.4 (4.0)
9.8 (3.1)
Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH) En
Kingdia CD Extractor
2026-01-15T15:52:12.724Z 2026-01-15T16:46:45.316Z
CVE-2026-22265
7.5 (3.1)
Roxy-WI has a Command Injection via grep parameter in … roxy-wi
roxy-wi
2026-01-15T16:27:52.446Z 2026-01-15T16:46:11.782Z
CVE-2021-47775
8.4 (4.0)
8.4 (3.1)
YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH) Litexmedia
YouTube Video Grabber
2026-01-15T15:52:13.223Z 2026-01-15T16:46:04.528Z
CVE-2025-66417
7.5 (3.1)
GLPI has an unauthenticated SQL injection through the… glpi-project
glpi
2026-01-15T16:25:03.467Z 2026-01-15T16:45:31.206Z
CVE-2025-66292
8.1 (3.1)
DPanel has an arbitrary file deletion vulnerability in… donknap
dpanel
2026-01-15T16:19:55.507Z 2026-01-15T16:44:51.018Z
CVE-2025-70308
7.5 (3.1)
An out-of-bounds read in the GSF demuxer filter c… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:44:15.156Z
CVE-2025-70304
7.5 (3.1)
A buffer overflow in the vobsub_get_subpic_durati… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:43:16.567Z
CVE-2025-70310
5.5 (3.1)
A heap overflow in the vorbis_to_intern() functio… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-15T16:43:01.292Z
CVE-2021-47776
6.9 (4.0)
5.3 (3.1)
Umbraco v8.14.1 - 'baseUrl' SSRF umbraco
Umbraco
2026-01-15T15:52:13.737Z 2026-01-15T16:40:33.352Z
CVE-2021-47777
8.8 (4.0)
8.2 (3.1)
Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Un… Ribccs
Build Smart ERP
2026-01-15T15:52:14.242Z 2026-01-15T16:40:07.115Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-53324
5.4 (3.1)
WordPress Gutenify Plugin <= 1.5.7 - Cross Site Script… CodeYatri
Gutenify
2025-11-06T15:54:05.737Z 2026-01-20T14:28:09.259Z
CVE-2025-53316
8.8 (3.1)
WordPress WP GDPR Cookie Consent plugin <= 1.0.0 - Cro… Shahjahan Jewel
WP GDPR Cookie Consent
2025-11-06T15:54:04.995Z 2026-01-20T14:28:09.287Z
CVE-2025-53297
7.1 (3.1)
WordPress Woocommerce Envato Affiliates plugin <= 1.2.… AA-Team
Woocommerce Envato Affiliates
2025-10-22T14:32:31.023Z 2026-01-20T14:28:09.198Z
CVE-2025-53286
6.1 (3.1)
WordPress Dropify Plugin <= 4.6.9 - Cross Site Scripti… Jhainey Milevis
Dropify
2025-11-06T15:54:04.283Z 2026-01-20T14:28:09.165Z
CVE-2025-53283
10 (3.1)
WordPress Drop Uploader for CF7 - Drag&Drop File Uploa… borisolhor
Drop Uploader for CF7 - Drag&Drop File Uploader Addon
2025-11-06T15:54:03.506Z 2026-01-20T14:28:09.297Z
CVE-2025-53252
9.8 (3.1)
WordPress Zegen Theme <= 1.1.9 - Local File Inclusion … zozothemes
Zegen
2025-11-06T15:54:02.680Z 2026-01-20T14:28:09.155Z
CVE-2025-53246
8.8 (3.1)
WordPress Backup and Move Plugin <= 0.1 - Broken Acces… Gaurav Aggarwal
Backup and Move
2025-11-06T15:53:59.915Z 2026-01-20T14:28:09.176Z
CVE-2025-53245
5.4 (3.1)
WordPress WP Logo Changer Plugin <= 1.2 - Cross Site S… Afzal Multani
WP Logo Changer
2025-11-06T15:53:59.391Z 2026-01-20T14:28:09.187Z
CVE-2025-53242
9.8 (3.1)
WordPress Seil Theme <= 1.7.1 - Deserialization of unt… VictorThemes
Seil
2025-11-06T15:53:58.962Z 2026-01-20T14:28:09.204Z
CVE-2025-53239
6.1 (3.1)
WordPress User Registration Aide Plugin <= 1.5.3.8 - C… bnovotny
User Registration Aide
2025-11-06T15:53:58.555Z 2026-01-20T14:28:09.103Z
CVE-2025-39853
N/A
i40e: Fix potential invalid access when MAC list is empty Linux
Linux
2025-09-19T15:26:25.101Z 2025-11-03T17:44:09.789Z
CVE-2025-53238
7.1 (3.1)
WordPress Toast Mobile Menu plugin <= 1.0.7 - Cross Si… Toast Plugins
Toast Mobile Menu
2025-10-22T14:32:30.376Z 2026-01-20T14:28:09.178Z
CVE-2025-53236
6.3 (3.1)
WordPress UDesign Core plugin <= 4.14.0 - Broken Acces… AndonDesign
UDesign Core
2025-10-22T14:32:29.996Z 2026-01-20T14:28:09.128Z
CVE-2025-53235
7.1 (3.1)
WordPress Easy Social plugin <= 1.3 - Cross Site Scrip… osuthorpe
Easy Social
2025-12-31T20:11:25.669Z 2026-01-20T14:28:09.199Z
CVE-2025-53234
7.1 (3.1)
WordPress UDesign Core plugin <= 4.14.0 - Cross Site S… AndonDesign
UDesign Core
2025-10-22T14:32:29.678Z 2026-01-20T14:28:09.019Z
CVE-2025-53232
5.8 (3.1)
WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Da… inkthemes
WP Gmail SMTP
2025-10-22T14:32:29.356Z 2026-01-20T14:28:09.018Z
CVE-2025-53229
7.1 (3.1)
WordPress RockON DJ theme <= 3.3 - Reflected Cross Sit… kamleshyadav
RockON DJ
2025-10-22T14:32:29.122Z 2026-01-20T14:28:08.975Z
CVE-2025-53218
5.8 (3.1)
WordPress AppExperts plugin <= 1.4.5 - Sensitive Data … Saad Iqbal
AppExperts
2025-10-22T14:32:28.882Z 2026-01-20T14:28:09.009Z
CVE-2025-53214
9.1 (3.1)
WordPress Sertifier Certificate & Badge Maker plugin <… sertifier
Sertifier Certificate & Badge Maker
2025-11-06T15:53:58.037Z 2026-01-20T14:28:09.163Z
CVE-2025-52835
9.6 (3.1)
WordPress WING WordPress Migrator plugin <= 1.1.9 - Cr… ConoHa by GMO
WING WordPress Migrator
2025-12-30T16:48:13.719Z 2026-01-20T14:28:08.992Z
CVE-2025-52773
9.8 (3.1)
WordPress HieCOR Payment Gateway plugin plugin <= 1.5.… hiecor
HieCOR Payment Gateway Plugin
2025-11-06T15:53:57.496Z 2026-01-20T14:28:08.714Z
CVE-2025-52770
7.1 (3.1)
WordPress Hello Followers plugin <= 2.5 - Cross Site S… appscreo
Hello Followers
2025-10-22T14:32:28.679Z 2026-01-20T14:28:08.839Z
CVE-2025-52768
8.1 (3.1)
WordPress Faith & Hope theme <= 2.13.0 - Local File In… AncoraThemes
Faith & Hope
2025-12-18T07:21:45.204Z 2026-01-20T14:28:08.823Z
CVE-2025-52764
6.1 (3.1)
WordPress flexoslider plugin <= 1.0004 - Cross Site Sc… marielav
flexoslider
2025-11-06T15:53:56.937Z 2026-01-20T14:28:09.106Z
CVE-2025-52763
7.1 (3.1)
WordPress Nifty Backups plugin <= 1.08 - Cross Site Sc… NickDuncan
Nifty Backups
2025-10-22T14:32:28.478Z 2026-01-20T14:28:08.616Z
CVE-2025-52760
6.1 (3.1)
WordPress MultiSite Clone Duplicator plugin <= 1.5.3 -… Globalis
MultiSite Clone Duplicator
2025-10-22T14:32:28.248Z 2026-01-20T14:28:08.789Z
CVE-2025-52758
9.1 (3.1)
WordPress Zippy plugin <= 1.7.0 - Arbitrary File Uploa… Gesundheit Bewegt GmbH
Zippy
2025-10-22T14:32:27.961Z 2026-01-20T14:28:08.584Z
CVE-2025-52757
6.3 (3.1)
WordPress SUMO Memberships for WooCommerce plugin <= 7… FantasticPlugins
SUMO Memberships for WooCommerce
2025-10-22T14:32:27.245Z 2026-01-20T14:28:08.665Z
CVE-2025-52756
7.4 (3.1)
WordPress WP Last Modified Info plugin <= 1.9.2 - Remo… Sayan Datta
WP Last Modified Info
2025-10-22T14:32:26.710Z 2026-01-20T14:28:08.525Z
CVE-2025-52755
7.1 (3.1)
WordPress Child Themes plugin <= 1.0.1 - Cross Site Sc… Chris Taylor
Child Themes
2025-10-22T14:32:26.093Z 2026-01-20T14:28:08.903Z
ID Description Published Updated
fkie_cve-2025-53324 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:56.630 2026-01-20T15:16:53.447
fkie_cve-2025-53316 Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-c… 2025-11-06T16:15:56.483 2026-01-20T15:16:53.313
fkie_cve-2025-53297 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.793 2026-01-20T15:16:53.180
fkie_cve-2025-53286 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:56.333 2026-01-20T15:16:53.050
fkie_cve-2025-53283 Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 -… 2025-11-06T16:15:56.180 2026-01-20T15:16:52.913
fkie_cve-2025-53252 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:56.010 2026-01-20T15:16:52.780
fkie_cve-2025-53246 Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Explo… 2025-11-06T16:15:55.833 2026-01-20T15:16:52.650
fkie_cve-2025-53245 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:55.637 2026-01-20T15:16:52.517
fkie_cve-2025-53242 Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.T… 2025-11-06T16:15:55.473 2026-01-20T15:16:52.383
fkie_cve-2025-53239 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:55.300 2026-01-20T15:16:52.250
fkie_cve-2025-39853 In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid ac… 2025-09-19T16:15:44.213 2026-01-20T15:16:52.147
fkie_cve-2025-53238 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.663 2026-01-20T15:16:52.110
fkie_cve-2025-53236 Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Inc… 2025-10-22T15:15:48.520 2026-01-20T15:16:51.973
fkie_cve-2025-53235 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T21:15:51.777 2026-01-20T15:16:51.860
fkie_cve-2025-53234 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.397 2026-01-20T15:16:51.710
fkie_cve-2025-53232 Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail… 2025-10-22T15:15:48.277 2026-01-20T15:16:51.580
fkie_cve-2025-53229 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:48.157 2026-01-20T15:16:51.437
fkie_cve-2025-53218 Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts… 2025-10-22T15:15:48.020 2026-01-20T15:16:51.307
fkie_cve-2025-53214 Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-cert… 2025-11-06T16:15:55.110 2026-01-20T15:16:51.177
fkie_cve-2025-52835 Cross-Site Request Forgery (CSRF) vulnerability in ConoHa by GMO WING WordPress Migrator allows Upl… 2025-12-30T17:15:42.203 2026-01-20T15:16:51.067
fkie_cve-2025-52773 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-11-06T16:15:54.933 2026-01-20T15:16:50.937
fkie_cve-2025-52770 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:46.197 2026-01-20T15:16:50.807
fkie_cve-2025-52768 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-18T08:15:52.903 2026-01-20T15:16:50.677
fkie_cve-2025-52764 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-11-06T16:15:54.760 2026-01-20T15:16:50.547
fkie_cve-2025-52763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:46.063 2026-01-20T15:16:50.410
fkie_cve-2025-52760 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:45.937 2026-01-20T15:16:50.283
fkie_cve-2025-52758 Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy… 2025-10-22T15:15:45.813 2026-01-20T15:16:50.147
fkie_cve-2025-52757 Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomember… 2025-10-22T15:15:45.687 2026-01-20T15:16:50.013
fkie_cve-2025-52756 Improper Control of Generation of Code ('Code Injection') vulnerability in Sayan Datta WP Last Modi… 2025-10-22T15:15:45.563 2026-01-20T15:16:49.877
fkie_cve-2025-52755 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:45.440 2026-01-20T15:16:49.743
ID Severity Description Published Updated
ghsa-w7pr-3qg3-m6gm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-vch9-5xvj-4959
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-v7cm-rp2r-qph6
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-rvvv-4hg8-6wjm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-rrqp-p2v5-665g
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-rg98-xfpm-qc7q
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-r42c-v85q-hg7m
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-r25f-pqfj-pxpq
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-qrq7-gxq4-hhr2
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-px74-4j9x-vmf3
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-p3c5-29q8-2494
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-p233-rfmp-43wh
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-jcjg-g5hf-8wq8
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-hxmm-47vw-42cx
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-hw28-vwhq-qx8j
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-fm93-65j5-5ff8
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-fjrw-fgch-w7c5
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-f648-7x3m-rxhj
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-c39g-m7w8-64p6
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-8jm4-883f-gfh6
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-8hh5-7vp9-5jx5
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-8cxx-w3p7-jgpc
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-82jf-23qj-r937
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-7hg2-9rpr-jrcq
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-7fhg-38vr-rjxc
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-6chr-x93c-xv2p
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-63vm-qj42-g2g4
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-5wx8-c992-qph8
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-55m9-hpvr-qgxj
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ghsa-4vxv-x9jj-cff9
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:54Z 2026-01-02T18:30:54Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-26137 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.161621Z
gsd-2024-26247 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability 2024-02-15T06:02:25.161324Z
gsd-2024-26061 Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … 2024-02-15T06:02:25.161026Z
gsd-2024-26101 Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Si… 2024-02-15T06:02:25.160692Z
gsd-2024-26071 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.160387Z
gsd-2024-26189 Secure Boot Security Feature Bypass Vulnerability 2024-02-15T06:02:25.160032Z
gsd-2024-26106 Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Si… 2024-02-15T06:02:25.159720Z
gsd-2024-26210 Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vulnerability 2024-02-15T06:02:25.159360Z
gsd-2024-26112 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.159057Z
gsd-2024-26248 Windows Kerberos Elevation of Privilege Vulnerability 2024-02-15T06:02:25.158756Z
gsd-2024-26117 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.158444Z
gsd-2024-26045 Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … 2024-02-15T06:02:25.158127Z
gsd-2024-26184 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.157826Z
gsd-2024-26233 Windows DNS Server Remote Code Execution Vulnerability 2024-02-15T06:02:25.157494Z
gsd-2024-26253 Windows rndismp6.sys Remote Code Execution Vulnerability 2024-02-15T06:02:25.157187Z
gsd-2024-26224 Windows DNS Server Remote Code Execution Vulnerability 2024-02-15T06:02:25.156884Z
gsd-2024-26172 Windows DWM Core Library Information Disclosure Vulnerability 2024-02-15T06:02:25.156579Z
gsd-2024-26128 baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-sit… 2024-02-15T06:02:25.156216Z
gsd-2024-26264 EBM Technologies RISWEB's specific query function parameter does not properly restrict us… 2024-02-15T06:02:25.155528Z
gsd-2024-26122 Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … 2024-02-15T06:02:25.155148Z
gsd-2024-26124 Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … 2024-02-15T06:02:25.154860Z
gsd-2024-26222 Windows DNS Server Remote Code Execution Vulnerability 2024-02-15T06:02:25.154548Z
gsd-2024-26011 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.154246Z
gsd-2024-26082 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.153946Z
gsd-2024-26154 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.153627Z
gsd-2024-26177 Windows Kernel Information Disclosure Vulnerability 2024-02-15T06:02:25.153303Z
gsd-2024-26056 Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … 2024-02-15T06:02:25.152980Z
gsd-2024-26133 EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has… 2024-02-15T06:02:25.152646Z
gsd-2024-26212 DHCP Server Service Denial of Service Vulnerability 2024-02-15T06:02:25.152221Z
gsd-2024-26153 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:25.151911Z
ID Description Published Updated
mal-2025-184504 Malicious code in moki-nik-hifdaguh (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184503 Malicious code in moki-nik-hifdaguah (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184502 Malicious code in moki-nik-hifdagh (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184501 Malicious code in moki-nik-hifda (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184500 Malicious code in moki-nik-hi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184499 Malicious code in moki-ni-hujium (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184498 Malicious code in moki-ni-hujim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184497 Malicious code in moki-ni-hujikum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184496 Malicious code in moki-ni-hujikaum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184495 Malicious code in moki-ni-hujikakum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184494 Malicious code in moki-ni-hujikakibaum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184493 Malicious code in moki-ni-hujikakibalauum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184492 Malicious code in moki-ni-hujikakibalabuum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184491 Malicious code in moki-ni-hujikakibalabubum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184490 Malicious code in moki-ni-hujikakibaaum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184489 Malicious code in moki-ni-hujikakiaum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184488 Malicious code in moki-ni-hujikakiabalabubum (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184487 Malicious code in moki-luni-huojakiavugjim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184486 Malicious code in moki-luni-huojakiavugim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184485 Malicious code in moki-luni-huojakiavuggjim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184484 Malicious code in moki-luni-huojakiavuggijim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184483 Malicious code in moki-luni-huojakiavugagijim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184482 Malicious code in moki-luni-huojakiavim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184481 Malicious code in moki-luni-huojakiam (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184480 Malicious code in moki-luni-huojakiaim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184479 Malicious code in moki-luni-huojaim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184478 Malicious code in moki-luni-huojaiam (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184477 Malicious code in moki-luni-hujjim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184476 Malicious code in moki-luni-hujajim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184475 Malicious code in moki-luni-hujaim (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2024:2778 Red Hat Security Advisory: nodejs:20 security update 2024-05-09T06:29:01+00:00 2025-11-21T19:00:52+00:00
rhsa-2024:2777 Red Hat Security Advisory: squid:4 security update 2024-05-09T05:58:31+00:00 2025-11-21T19:00:52+00:00
rhsa-2024:2769 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-openstackclient) security update 2024-05-22T20:14:02+00:00 2025-11-21T19:00:50+00:00
rhsa-2024:2758 Red Hat Security Advisory: kernel security and bug fix update 2024-05-08T01:04:02+00:00 2025-11-21T19:00:46+00:00
rhsa-2024:2737 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-openstackclient) security update 2024-05-22T20:38:17+00:00 2025-11-21T19:00:46+00:00
rhsa-2024:2734 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-urllib3) security update 2024-05-22T20:37:47+00:00 2025-11-21T19:00:45+00:00
rhsa-2024:2733 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-ansible-core) security update 2024-05-22T20:37:57+00:00 2025-11-21T19:00:44+00:00
rhsa-2024:2732 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-glance-store) security update 2024-05-22T20:36:27+00:00 2025-11-21T19:00:44+00:00
rhsa-2024:2727 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-gunicorn) security update 2024-05-22T20:41:38+00:00 2025-11-21T19:00:42+00:00
rhsa-2024:2700 Red Hat Security Advisory: varnish security update 2024-05-06T06:48:37+00:00 2025-11-21T19:00:40+00:00
rhsa-2024:2705 Red Hat Security Advisory: Red Hat build of Quarkus 3.2.12 release and security update 2024-05-09T11:56:56+00:00 2025-11-21T19:00:39+00:00
rhsa-2024:2674 Red Hat Security Advisory: kernel security and bug fix update 2024-05-02T16:59:40+00:00 2025-11-21T19:00:34+00:00
rhsa-2024:2645 Red Hat Security Advisory: podman security update 2024-05-01T15:21:00+00:00 2025-11-21T19:00:30+00:00
rhsa-2024:2628 Red Hat Security Advisory: kernel-rt security and bug fix update 2024-05-01T00:20:48+00:00 2025-11-21T19:00:28+00:00
rhsa-2024:2627 Red Hat Security Advisory: kernel security and bug fix update 2024-05-01T00:42:43+00:00 2025-11-21T19:00:27+00:00
rhsa-2024:2616 Red Hat Security Advisory: tigervnc security update 2024-04-30T16:49:02+00:00 2025-11-21T19:00:25+00:00
rhsa-2024:2585 Red Hat Security Advisory: kernel-rt security and bug fix update 2024-04-30T14:51:21+00:00 2025-11-21T19:00:23+00:00
rhsa-2024:2584 Red Hat Security Advisory: pcs security update 2024-04-30T14:52:26+00:00 2025-11-21T19:00:23+00:00
rhsa-2024:2583 Red Hat Security Advisory: linux-firmware security update 2024-04-30T14:55:51+00:00 2025-11-21T19:00:22+00:00
rhsa-2024:2582 Red Hat Security Advisory: kernel security and bug fix update 2024-04-30T15:04:38+00:00 2025-11-21T19:00:21+00:00
rhsa-2024:2581 Red Hat Security Advisory: pcs security update 2024-04-30T14:37:16+00:00 2025-11-21T19:00:21+00:00
rhsa-2024:2580 Red Hat Security Advisory: yajl security update 2024-04-30T15:11:14+00:00 2025-11-21T19:00:21+00:00
rhsa-2024:2577 Red Hat Security Advisory: shadow-utils security update 2024-04-30T15:05:30+00:00 2025-11-21T19:00:19+00:00
rhsa-2024:2571 Red Hat Security Advisory: sssd security and bug fix update 2024-04-30T13:45:50+00:00 2025-11-21T19:00:19+00:00
rhsa-2024:2559 Red Hat Security Advisory: python-jwcrypto security update 2024-04-30T13:36:16+00:00 2025-11-21T19:00:19+00:00
rhsa-2024:2566 Red Hat Security Advisory: pcp security, bug fix, and enhancement update 2024-04-30T13:34:06+00:00 2025-11-21T19:00:16+00:00
rhsa-2024:2560 Red Hat Security Advisory: libvirt security and bug fix update 2024-04-30T13:33:20+00:00 2025-11-21T19:00:14+00:00
rhsa-2024:2528 Red Hat Security Advisory: mingw-glib2 security update 2024-04-30T10:20:23+00:00 2025-11-21T19:00:12+00:00
rhsa-2024:2525 Red Hat Security Advisory: mingw-pixman security update 2024-04-30T10:37:49+00:00 2025-11-21T19:00:11+00:00
rhsa-2024:2517 Red Hat Security Advisory: wpa_supplicant security update 2024-04-30T10:22:40+00:00 2025-11-21T19:00:11+00:00
ID Description Published Updated
msrc_cve-2022-23266 Microsoft Defender for IoT Elevation of Privilege Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-23265 Microsoft Defender for IoT Remote Code Execution Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-23253 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-22007 HEVC Video Extensions Remote Code Execution Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-22006 HEVC Video Extensions Remote Code Execution Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-21990 Remote Desktop Client Remote Code Execution Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-21975 Windows Hyper-V Denial of Service Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-21973 Windows Media Center Update Denial of Service Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-21967 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability 2022-03-08T08:00:00.000Z 2022-03-08T08:00:00.000Z
msrc_cve-2022-0563 A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4. 2022-02-02T00:00:00.000Z 2022-03-08T00:00:00.000Z
msrc_cve-2021-44531 Accepting arbitrary Subject Alternative Name (SAN) types unless a PKI is specifically defined to use a particular SAN type can result in bypassing name-constrained intermediates. Node.js < 12.22.9 < 14.18.3 < 16.13.2 and < 17.3.1 was accepting URI SAN types which PKIs are often not defined to use. Additionally when a protocol allows URI SANs Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option. 2022-02-02T00:00:00.000Z 2022-03-08T00:00:00.000Z
msrc_cve-2021-44533 Node.js < 12.22.9 < 14.18.3 < 16.13.2 and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name for example in order to inject a Common Name that would allow bypassing the certificate subject verification.Affected versions of Node.js that do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However third-party code that uses node's ambiguous presentation of certificate subjects may be vulnerable. 2022-02-02T00:00:00.000Z 2022-03-05T00:00:00.000Z
msrc_cve-2021-44532 Node.js < 12.22.9 < 14.18.3 < 16.13.2 and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain allowing the bypass of these name constraints.Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the --security-revert command-line option. 2022-02-02T00:00:00.000Z 2022-03-05T00:00:00.000Z
msrc_cve-2021-3700 A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts of buffered write data in the case of a slow or blocked destination. 2022-02-02T00:00:00.000Z 2022-03-05T00:00:00.000Z
msrc_cve-2021-3608 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability. 2022-02-02T00:00:00.000Z 2022-03-05T00:00:00.000Z
msrc_cve-2021-3607 An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory resulting in a denial of service. The highest threat from this vulnerability is to system availability. 2022-02-02T00:00:00.000Z 2022-03-05T00:00:00.000Z
msrc_cve-2022-24407 In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28 plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. 2022-02-02T00:00:00.000Z 2022-03-04T00:00:00.000Z
msrc_cve-2022-0617 A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2. 2022-02-02T00:00:00.000Z 2022-03-04T00:00:00.000Z
msrc_cve-2021-20321 A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system. 2022-02-02T00:00:00.000Z 2022-03-04T00:00:00.000Z
msrc_cve-2021-20320 A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. 2022-02-02T00:00:00.000Z 2022-03-04T00:00:00.000Z
msrc_cve-2019-25058 An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running an unprivileged user could make USBGuard allow all USB devices to be connected in the future. 2022-02-02T00:00:00.000Z 2022-03-04T00:00:00.000Z
msrc_cve-2022-0729 Use of Out-of-range Pointer Offset in vim/vim 2022-02-02T00:00:00.000Z 2022-03-02T00:00:00.000Z
msrc_cve-2022-0714 Heap-based Buffer Overflow in vim/vim 2022-02-02T00:00:00.000Z 2022-03-02T00:00:00.000Z
msrc_cve-2022-0696 NULL Pointer Dereference in vim/vim 2022-02-02T00:00:00.000Z 2022-03-02T00:00:00.000Z
msrc_cve-2022-25375 An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10. The RNDIS USB gadget lacks validation of the size of the RNDIS_MSG_SET command. Attackers can obtain sensitive information from kernel memory. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
msrc_cve-2022-25258 An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
msrc_cve-2022-24052 MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
msrc_cve-2022-24051 MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
msrc_cve-2022-24050 MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
msrc_cve-2022-24048 MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191. 2022-02-02T00:00:00.000Z 2022-03-01T00:00:00.000Z
ID Description Updated
var-201403-0123 Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1… 2025-04-13T23:10:19.164000Z
var-201403-0124 Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1… 2025-04-13T23:10:19.123000Z
var-201403-0208 The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0… 2025-04-13T23:10:18.783000Z
var-201403-0206 Cisco Wireless LAN Controller (WLC) devices 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 befor… 2025-04-13T23:10:18.745000Z
var-201403-0207 Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS s… 2025-04-13T23:10:18.710000Z
var-201403-0209 The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) dev… 2025-04-13T23:10:18.676000Z
var-201403-0210 Cisco Wireless LAN Controller (WLC) devices 7.2 before 7.2.115.2, 7.3, and 7.4 before 7.4… 2025-04-13T23:10:18.641000Z
var-201403-0211 Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, and 7.4 before 7.4.110.0 allow remo… 2025-04-13T23:10:18.607000Z
var-201404-0018 Cisco IOS before 15.3(2)T, when scansafe is enabled, allows remote attackers to cause a d… 2025-04-13T23:10:18.162000Z
var-201404-0291 Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.… 2025-04-13T23:10:17.111000Z
var-201405-0095 D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1… 2025-04-13T23:10:16.064000Z
var-201405-0347 Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HT… 2025-04-13T23:10:15.620000Z
var-201405-0408 Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attac… 2025-04-13T23:10:15.561000Z
var-201405-0471 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) a… 2025-04-13T23:10:15.465000Z
var-201405-0534 Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub b… 2025-04-13T23:10:15.310000Z
var-201406-0165 Cross-site scripting (XSS) vulnerability in Hitachi Tuning Manager before 7.6.1-06 and 8.… 2025-04-13T23:10:15.106000Z
var-201406-0164 Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager before 7.6.1-06… 2025-04-13T23:10:15.074000Z
var-201406-0310 Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows r… 2025-04-13T23:10:14.764000Z
var-201407-0377 Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Busines… 2025-04-13T23:10:13.409000Z
var-201407-0482 Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45… 2025-04-13T23:10:13.311000Z
var-201408-0159 SQL injection vulnerability in the web framework in Cisco Unity Connection 9.1(2) and ear… 2025-04-13T23:10:09Z
var-201408-0348 The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a … 2025-04-13T23:10:08.387000Z
var-201410-1180 Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive informatio… 2025-04-13T23:10:08.355000Z
var-201409-0767 Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arb… 2025-04-13T23:10:07.887000Z
var-201410-0068 The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SR… 2025-04-13T23:10:07.698000Z
var-201410-0969 Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG … 2025-04-13T23:10:07.119000Z
var-201410-1053 The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 1… 2025-04-13T23:10:06.853000Z
var-201411-0350 Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG… 2025-04-13T23:10:05.602000Z
var-201411-0433 Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E… 2025-04-13T23:10:05.505000Z
var-201411-0434 Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E… 2025-04-13T23:10:05.463000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:1763-1 Security update for curl 2021-05-26T10:32:05Z 2021-05-26T10:32:05Z
suse-su-2021:1762-1 Security update for curl 2021-05-26T10:30:15Z 2021-05-26T10:30:15Z
suse-su-2021:1761-1 Security update for hivex 2021-05-26T09:18:41Z 2021-05-26T09:18:41Z
suse-su-2021:1760-1 Security update for hivex 2021-05-26T09:17:32Z 2021-05-26T09:17:32Z
suse-su-2021:1759-1 Security update for rubygem-actionpack-5_1 2021-05-26T09:17:10Z 2021-05-26T09:17:10Z
suse-su-2021:1755-1 Security update for libu2f-host 2021-05-25T11:30:09Z 2021-05-25T11:30:09Z
suse-su-2021:1733-1 Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) 2021-05-25T10:28:08Z 2021-05-25T10:28:08Z
suse-su-2021:1728-1 Security update for the Linux Kernel (Live Patch 18 for SLE 15) 2021-05-25T10:27:58Z 2021-05-25T10:27:58Z
suse-su-2021:1724-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) 2021-05-25T10:26:57Z 2021-05-25T10:26:57Z
suse-su-2021:1715-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2) 2021-05-25T10:25:07Z 2021-05-25T10:25:07Z
suse-su-2021:1664-1 Security update for libass 2021-05-20T06:03:38Z 2021-05-20T06:03:38Z
suse-su-2021:1658-1 Security update for libxml2 2021-05-19T16:20:52Z 2021-05-19T16:20:52Z
suse-su-2021:1655-1 Security update for fribidi 2021-05-19T14:44:46Z 2021-05-19T14:44:46Z
suse-su-2021:1654-1 Security update for libxml2 2021-05-19T14:44:05Z 2021-05-19T14:44:05Z
suse-su-2021:14729-1 Security update for libxml2 2021-05-19T14:41:30Z 2021-05-19T14:41:30Z
suse-su-2021:1652-1 Security update for redis 2021-05-19T12:30:32Z 2021-05-19T12:30:32Z
suse-su-2021:1651-1 Security update for graphviz 2021-05-19T12:10:51Z 2021-05-19T12:10:51Z
suse-su-2021:1650-1 Security update for rubygem-actionpack-4_2 2021-05-19T12:01:56Z 2021-05-19T12:01:56Z
suse-su-2021:1649-1 Security update for djvulibre 2021-05-19T12:01:34Z 2021-05-19T12:01:34Z
suse-su-2021:1648-1 Security update for xen 2021-05-19T12:00:08Z 2021-05-19T12:00:08Z
suse-su-2021:1647-1 Security update for lz4 2021-05-19T11:59:45Z 2021-05-19T11:59:45Z
suse-su-2021:1646-1 Security update for graphviz 2021-05-19T11:57:04Z 2021-05-19T11:57:04Z
suse-su-2021:1645-1 Security update for djvulibre 2021-05-19T11:54:30Z 2021-05-19T11:54:30Z
suse-su-2021:14728-1 Security update for djvulibre 2021-05-19T11:50:03Z 2021-05-19T11:50:03Z
suse-su-2021:1641-1 Security update for djvulibre 2021-05-19T11:49:24Z 2021-05-19T11:49:24Z
suse-su-2021:1637-1 Security update for python-httplib2 2021-05-19T11:34:19Z 2021-05-19T11:34:19Z
suse-su-2021:1636-1 Recommended update for grub2 2021-05-19T11:34:06Z 2021-05-19T11:34:06Z
suse-su-2021:1625-1 Security update for the Linux Kernel 2021-05-18T12:21:08Z 2021-05-18T12:21:08Z
suse-su-2021:1624-1 Security update for the Linux Kernel 2021-05-18T12:15:01Z 2021-05-18T12:15:01Z
suse-su-2021:1623-1 Security update for the Linux Kernel 2021-05-18T08:43:33Z 2021-05-18T08:43:33Z
ID Description Published Updated
cnvd-2024-47461 FFmpeg CAF解码器整数溢出漏洞 2024-12-03 2024-12-06
cnvd-2024-47305 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在SQL注入漏洞 2024-10-22 2024-12-06
cnvd-2024-46836 多款Mozilla产品代码执行漏洞(CNVD-2024-46836) 2024-04-18 2024-12-06
cnvd-2024-46835 多款Mozilla产品欺骗漏洞(CNVD-2024-46835) 2024-08-14 2024-12-06
cnvd-2024-46833 多款Mozilla产品代码执行漏洞(CNVD-2024-46833) 2024-08-14 2024-12-06
cnvd-2024-46832 多款Mozilla产品安全绕过漏洞(CNVD-2024-46832) 2024-08-14 2024-12-06
cnvd-2024-46831 多款Mozilla产品信息泄露漏洞(CNVD-2024-46831) 2024-10-13 2024-12-06
cnvd-2024-46830 多款Mozilla产品代码执行漏洞(CNVD-2024-46830) 2024-10-13 2024-12-06
cnvd-2024-46829 多款Mozilla产品安全绕过漏洞(CNVD-2024-46829) 2024-10-13 2024-12-06
cnvd-2024-46823 IrfanView DXF文件解析类型混淆远程代码执行漏洞 2024-11-28 2024-12-06
cnvd-2024-46822 IrfanView SVG文件解析堆缓冲区溢出远程代码执行漏洞 2024-11-28 2024-12-06
cnvd-2024-47286 TP-LINK TL-WDR7660 rtRuleJsonTobin函数缓冲区溢出漏洞 2024-10-17 2024-12-05
cnvd-2024-47285 Google Android权限提升漏洞(CNVD-2024-47285) 2024-11-15 2024-12-05
cnvd-2024-47284 Google Android权限提升漏洞(CNVD-2024-47284) 2024-11-15 2024-12-05
cnvd-2024-47283 TP-Link vn020-f3vt存在缓冲区溢出漏洞 2024-11-21 2024-12-05
cnvd-2024-47220 IrfanView越界写入漏洞(CNVD-2024-47220) 2024-11-27 2024-12-05
cnvd-2024-47219 IrfanView越界写入漏洞(CNVD-2024-47219) 2024-11-27 2024-12-05
cnvd-2024-47218 IrfanView越界写入漏洞(CNVD-2024-47218) 2024-11-27 2024-12-05
cnvd-2024-47217 IrfanView越界写入漏洞(CNVD-2024-47217) 2024-11-27 2024-12-05
cnvd-2024-47216 IrfanView越界写入漏洞(CNVD-2024-47216) 2024-11-27 2024-12-05
cnvd-2024-47215 IrfanView越界写入漏洞(CNVD-2024-47215) 2024-11-27 2024-12-05
cnvd-2024-47214 IrfanView越界写入漏洞(CNVD-2024-47214) 2024-11-27 2024-12-05
cnvd-2024-47213 IrfanView越界写入漏洞(CNVD-2024-47213) 2024-11-27 2024-12-05
cnvd-2024-47212 IrfanView越界读取漏洞(CNVD-2024-47212) 2024-11-27 2024-12-05
cnvd-2024-47211 IrfanView越界读取漏洞(CNVD-2024-47211) 2024-11-27 2024-12-05
cnvd-2024-47210 IrfanView越界读取漏洞(CNVD-2024-47210) 2024-11-27 2024-12-05
cnvd-2024-47209 IrfanView越界读取漏洞(CNVD-2024-47209) 2024-11-27 2024-12-05
cnvd-2024-47208 IrfanView释放后重用漏洞(CNVD-2024-47208) 2024-11-27 2024-12-05
cnvd-2024-47207 IrfanView越界读取漏洞(CNVD-2024-47207) 2024-11-27 2024-12-05
cnvd-2024-47206 IrfanView越界写入漏洞(CNVD-2024-47206) 2024-11-27 2024-12-05
ID Description Published Updated
certa-2011-avi-642 Vulnérabilités dans Google Chrome 2011-11-17T00:00:00.000000 2011-11-17T00:00:00.000000
certa-2011-avi-635 Vulnérabilité dans ProFTPd 2011-11-14T00:00:00.000000 2011-11-17T00:00:00.000000
certa-2011-avi-641 HP Directories Support for ProLiant Management Processors 2011-11-15T00:00:00.000000 2011-11-15T00:00:00.000000
certa-2011-avi-640 Vulnérabilités dans Joomla! 2011-11-15T00:00:00.000000 2011-11-15T00:00:00.000000
certa-2011-avi-639 Vulnérabilités dans HP OpenVMS 2011-11-15T00:00:00.000000 2011-11-15T00:00:00.000000
certa-2011-avi-638 Vulnérabilités dans des produits Cisco TelePresence et Tandberg 2011-11-15T00:00:00.000000 2011-11-15T00:00:00.000000
certa-2011-avi-637 Vulnérabilité dans les produits Apple <SPAN class="textit">Time Capsule</SPAN> et <SPAN class="textit">AirPort Base Station</SPAN> 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-636 Vulnérabilité dans HP StorageWorks P4000 Virtual SAN Appliance 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-634 Vulnérabilités dans Apple iOS 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-633 Vulnérabilité dans Juniper 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-632 Vulnérabilité dans GnuTLS 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-631 Vulnérabilités dans HP Network Node Manager i 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-629 Vulnérabilités dans Novell ZENworks 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-628 Multiples vulnérabilités dans l'hyperviseur <SPAN class="textit">Xen</SPAN> 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-627 Vulnérabilité dans <SPAN class= "textit">DB2 Query Monitor Tool</SPAN> 2011-11-14T00:00:00.000000 2011-11-14T00:00:00.000000
certa-2011-avi-626 Multiples vulnérabilités dans les produits Mozilla 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-625 Multiples vulnérabilités dans Adobe Shockwave Player 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-624 Vulnérabilité dans Microsoft Active Directory 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-623 Vulnérabilité dans Windows Mail et l'espace de collaboration Windows 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-622 Vulnérabilité dans Microsoft Windows 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-621 Vulnérabilité dans la pile TCP/IP de Windows 2011-11-09T00:00:00.000000 2011-11-09T00:00:00.000000
certa-2011-avi-620 Vulnérabilité dans RSA Key Manager Appliance 2011-11-08T00:00:00.000000 2011-11-08T00:00:00.000000
certa-2011-avi-619 Vulnérabilité dans Juniper 2011-11-08T00:00:00.000000 2011-11-08T00:00:00.000000
certa-2011-avi-618 Vulnérabilités dans HP OpenView Network Node Manager 2011-11-08T00:00:00.000000 2011-11-08T00:00:00.000000
certa-2011-avi-617 Vulnérabilité EMC Documentum eRoom 2011-11-07T00:00:00.000000 2011-11-07T00:00:00.000000
certa-2011-avi-616 Vulnérabilités dans IBM AIX Bind 2011-11-03T00:00:00.000000 2011-11-03T00:00:00.000000
certa-2011-avi-615 Vulnérabilité dans Squid 2011-11-03T00:00:00.000000 2011-11-03T00:00:00.000000
certa-2011-avi-614 Vulnérabilité dans Novell Messenger 2011-11-03T00:00:00.000000 2011-11-03T00:00:00.000000
certa-2011-avi-613 Vulnérabilité dans les produits Cisco Small Business SRP500 Series 2011-11-03T00:00:00.000000 2011-11-03T00:00:00.000000
certa-2011-avi-612 Multiples vulnérabilités dans Wireshark 2011-11-02T00:00:00.000000 2011-11-02T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated