Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-23494 |
4.3 (3.1)
|
Pimcore is Missing Function Level Authorization on "St… |
pimcore |
pimcore |
2026-01-15T16:52:58.729Z | 2026-01-15T18:08:13.110Z |
| CVE-2025-12178 |
6.4 (3.1)
|
SpiceForms Form Builder <= 1.0 - Authenticated (Contri… |
aankit |
SpiceForms Form Builder |
2026-01-14T05:28:12.421Z | 2026-01-15T18:00:12.192Z |
| CVE-2021-47757 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - 'plugin' Re… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:04.994Z | 2026-01-15T17:57:01.374Z |
| CVE-2021-47758 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - Remote Code… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:05.437Z | 2026-01-15T17:26:55.158Z |
| CVE-2025-14854 |
5.4 (3.1)
|
WP-CRM System – Manage Clients and Projects <= 3.4.5 -… |
nofearinc |
WP-CRM System – Manage Clients and Projects |
2026-01-14T05:28:12.974Z | 2026-01-15T17:26:26.971Z |
| CVE-2025-68492 |
4.2 (3.0)
2.3 (4.0)
|
Chainlit versions prior to 2.8.5 contain an autho… |
Chainlit |
Chainlit |
2026-01-14T06:27:14.846Z | 2026-01-15T17:24:34.226Z |
| CVE-2026-0739 |
4.4 (3.1)
|
WMF Mobile Redirector <= 1.2 - Authenticated (Administ… |
webbu |
WMF Mobile Redirector |
2026-01-14T06:40:04.088Z | 2026-01-15T17:23:06.026Z |
| CVE-2026-23495 |
4.3 (3.1)
|
Pimcore's Admin Classic Bundle is Missing Function Lev… |
pimcore |
pimcore |
2026-01-15T16:47:07.114Z | 2026-01-15T17:09:32.298Z |
| CVE-2025-70298 |
8.2 (3.1)
|
GPAC v2.4.0 was discovered to contain an out-of-b… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T17:05:50.552Z |
| CVE-2026-22915 |
4.3 (3.1)
|
An attacker with low privileges may be able to re… |
SICK AG |
TDC-X401GL |
2026-01-15T13:06:44.048Z | 2026-01-15T17:03:58.009Z |
| CVE-2021-47759 |
6.8 (4.0)
6.2 (3.1)
|
MTPutty 1.0.1.21 - SSH Password Disclosure |
Ttyplus |
MTPutty |
2026-01-15T15:52:05.935Z | 2026-01-15T17:02:16.609Z |
| CVE-2025-70656 |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T17:01:05.154Z |
| CVE-2025-37165 |
7.5 (3.1)
|
Exposure of VLAN information in unintended network int… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:40:56.557Z | 2026-01-15T16:56:25.947Z |
| CVE-2026-22916 |
4.3 (3.1)
|
An attacker with low privileges may be able to tr… |
SICK AG |
TDC-X401GL |
2026-01-15T13:07:07.335Z | 2026-01-15T16:55:42.554Z |
| CVE-2021-47761 |
8.5 (4.0)
7.8 (3.1)
|
MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Es… |
Millegpg |
MilleGPG5 |
2026-01-15T15:52:06.931Z | 2026-01-15T16:53:31.329Z |
| CVE-2021-47762 |
8.5 (4.0)
7.8 (3.1)
|
HTTPDebuggerPro 9.11 - Unquoted Service Path |
Httpdebugger |
HTTPDebuggerPro |
2026-01-15T15:52:07.433Z | 2026-01-15T16:52:37.108Z |
| CVE-2021-47763 |
8.8 (4.0)
8.2 (3.1)
|
Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort'… |
Aimeos |
Aimeos Laravel ecommerce platform |
2026-01-15T15:52:07.958Z | 2026-01-15T16:51:11.006Z |
| CVE-2021-47766 |
7.1 (4.0)
7.1 (3.1)
|
Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated) |
Levelprograms |
Kmaleon |
2026-01-15T15:52:09.398Z | 2026-01-15T16:47:08.921Z |
| CVE-2026-22867 |
8.7 (3.1)
|
LaSuite Doc affected by Stored XSS via Interlinking Block |
suitenumerique |
docs |
2026-01-15T16:31:34.397Z | 2026-01-15T16:46:57.161Z |
| CVE-2021-47774 |
8.4 (4.0)
9.8 (3.1)
|
Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH) |
En |
Kingdia CD Extractor |
2026-01-15T15:52:12.724Z | 2026-01-15T16:46:45.316Z |
| CVE-2026-22265 |
7.5 (3.1)
|
Roxy-WI has a Command Injection via grep parameter in … |
roxy-wi |
roxy-wi |
2026-01-15T16:27:52.446Z | 2026-01-15T16:46:11.782Z |
| CVE-2021-47775 |
8.4 (4.0)
8.4 (3.1)
|
YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH) |
Litexmedia |
YouTube Video Grabber |
2026-01-15T15:52:13.223Z | 2026-01-15T16:46:04.528Z |
| CVE-2025-66417 |
7.5 (3.1)
|
GLPI has an unauthenticated SQL injection through the… |
glpi-project |
glpi |
2026-01-15T16:25:03.467Z | 2026-01-15T16:45:31.206Z |
| CVE-2025-66292 |
8.1 (3.1)
|
DPanel has an arbitrary file deletion vulnerability in… |
donknap |
dpanel |
2026-01-15T16:19:55.507Z | 2026-01-15T16:44:51.018Z |
| CVE-2025-70308 |
7.5 (3.1)
|
An out-of-bounds read in the GSF demuxer filter c… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:44:15.156Z |
| CVE-2025-70304 |
7.5 (3.1)
|
A buffer overflow in the vobsub_get_subpic_durati… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:43:16.567Z |
| CVE-2025-70310 |
5.5 (3.1)
|
A heap overflow in the vorbis_to_intern() functio… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:43:01.292Z |
| CVE-2021-47776 |
6.9 (4.0)
5.3 (3.1)
|
Umbraco v8.14.1 - 'baseUrl' SSRF |
umbraco |
Umbraco |
2026-01-15T15:52:13.737Z | 2026-01-15T16:40:33.352Z |
| CVE-2021-47777 |
8.8 (4.0)
8.2 (3.1)
|
Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Un… |
Ribccs |
Build Smart ERP |
2026-01-15T15:52:14.242Z | 2026-01-15T16:40:07.115Z |
| CVE-2026-0992 |
2.9 (3.1)
|
Libxml2: libxml2: denial of service via crafted xml catalogs |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-15T14:20:24.934Z | 2026-01-15T16:39:47.982Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-53232 |
5.8 (3.1)
|
WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Da… |
inkthemes |
WP Gmail SMTP |
2025-10-22T14:32:29.356Z | 2026-01-20T14:28:09.018Z |
| CVE-2025-53229 |
7.1 (3.1)
|
WordPress RockON DJ theme <= 3.3 - Reflected Cross Sit… |
kamleshyadav |
RockON DJ |
2025-10-22T14:32:29.122Z | 2026-01-20T14:28:08.975Z |
| CVE-2025-53218 |
5.8 (3.1)
|
WordPress AppExperts plugin <= 1.4.5 - Sensitive Data … |
Saad Iqbal |
AppExperts |
2025-10-22T14:32:28.882Z | 2026-01-20T14:28:09.009Z |
| CVE-2025-53214 |
9.1 (3.1)
|
WordPress Sertifier Certificate & Badge Maker plugin <… |
sertifier |
Sertifier Certificate & Badge Maker |
2025-11-06T15:53:58.037Z | 2026-01-20T14:28:09.163Z |
| CVE-2025-52835 |
9.6 (3.1)
|
WordPress WING WordPress Migrator plugin <= 1.1.9 - Cr… |
ConoHa by GMO |
WING WordPress Migrator |
2025-12-30T16:48:13.719Z | 2026-01-20T14:28:08.992Z |
| CVE-2025-52773 |
9.8 (3.1)
|
WordPress HieCOR Payment Gateway plugin plugin <= 1.5.… |
hiecor |
HieCOR Payment Gateway Plugin |
2025-11-06T15:53:57.496Z | 2026-01-20T14:28:08.714Z |
| CVE-2025-52770 |
7.1 (3.1)
|
WordPress Hello Followers plugin <= 2.5 - Cross Site S… |
appscreo |
Hello Followers |
2025-10-22T14:32:28.679Z | 2026-01-20T14:28:08.839Z |
| CVE-2025-52768 |
8.1 (3.1)
|
WordPress Faith & Hope theme <= 2.13.0 - Local File In… |
AncoraThemes |
Faith & Hope |
2025-12-18T07:21:45.204Z | 2026-01-20T14:28:08.823Z |
| CVE-2025-52764 |
6.1 (3.1)
|
WordPress flexoslider plugin <= 1.0004 - Cross Site Sc… |
marielav |
flexoslider |
2025-11-06T15:53:56.937Z | 2026-01-20T14:28:09.106Z |
| CVE-2025-52763 |
7.1 (3.1)
|
WordPress Nifty Backups plugin <= 1.08 - Cross Site Sc… |
NickDuncan |
Nifty Backups |
2025-10-22T14:32:28.478Z | 2026-01-20T14:28:08.616Z |
| CVE-2025-52760 |
6.1 (3.1)
|
WordPress MultiSite Clone Duplicator plugin <= 1.5.3 -… |
Globalis |
MultiSite Clone Duplicator |
2025-10-22T14:32:28.248Z | 2026-01-20T14:28:08.789Z |
| CVE-2025-52758 |
9.1 (3.1)
|
WordPress Zippy plugin <= 1.7.0 - Arbitrary File Uploa… |
Gesundheit Bewegt GmbH |
Zippy |
2025-10-22T14:32:27.961Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52757 |
6.3 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin <= 7… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:27.245Z | 2026-01-20T14:28:08.665Z |
| CVE-2025-52756 |
7.4 (3.1)
|
WordPress WP Last Modified Info plugin <= 1.9.2 - Remo… |
Sayan Datta |
WP Last Modified Info |
2025-10-22T14:32:26.710Z | 2026-01-20T14:28:08.525Z |
| CVE-2025-52755 |
7.1 (3.1)
|
WordPress Child Themes plugin <= 1.0.1 - Cross Site Sc… |
Chris Taylor |
Child Themes |
2025-10-22T14:32:26.093Z | 2026-01-20T14:28:08.903Z |
| CVE-2025-52754 |
7.1 (3.1)
|
WordPress Sello ChannelConnector plugin <= 1.6.3 - Cro… |
selloio |
Sello ChannelConnector |
2025-10-22T14:32:25.569Z | 2026-01-20T14:28:08.610Z |
| CVE-2025-52753 |
7.1 (3.1)
|
WordPress Contact Form by Supsystic plugin <= 1.7.35 -… |
supsystic |
Contact Form by Supsystic |
2025-10-22T14:32:25.219Z | 2026-01-20T14:28:09.147Z |
| CVE-2025-52752 |
6.5 (3.1)
|
WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data … |
ThemeAtelier |
IDonatePro |
2025-10-22T14:32:25.039Z | 2026-01-20T14:28:08.978Z |
| CVE-2025-52751 |
7.1 (3.1)
|
WordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Sc… |
colome |
Slide Puzzle |
2025-10-22T14:32:24.841Z | 2026-01-20T14:28:08.664Z |
| CVE-2025-52750 |
7.1 (3.1)
|
WordPress Emu2 plugin <= 0.83b - Cross Site Scripting … |
Juergen Schulze |
Emu2 |
2025-10-22T14:32:24.658Z | 2026-01-20T14:28:08.656Z |
| CVE-2025-52749 |
7.1 (3.1)
|
WordPress Uji Countdown plugin <= 2.3.3 - Cross Site S… |
Activity Track |
Uji Countdown |
2025-10-22T14:32:24.442Z | 2026-01-20T14:28:08.525Z |
| CVE-2025-52748 |
7.1 (3.1)
|
WordPress Directory Pro plugin <= 2.5.5 - Cross Site S… |
e-plugins |
Directory Pro |
2025-10-22T14:32:24.265Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52745 |
8.1 (3.1)
|
WordPress Farm Agrico theme <= 1.3.11 - Local File Inc… |
AncoraThemes |
Farm Agrico |
2025-12-18T07:21:44.978Z | 2026-01-20T14:28:08.668Z |
| CVE-2025-52743 |
7.1 (3.1)
|
WordPress oik-privacy-policy Plugin <= 1.4.9 - Cross S… |
bobbingwide |
oik-privacy-policy |
2025-10-22T14:32:24.069Z | 2026-01-20T14:28:08.836Z |
| CVE-2025-52742 |
7.1 (3.1)
|
WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting … |
Igor Benic |
Pets |
2025-10-22T14:32:23.806Z | 2026-01-20T14:28:08.492Z |
| CVE-2025-52740 |
8.8 (3.1)
|
WordPress Boldermail Plugin <= 2.4.0 - PHP Object Inje… |
Hernan Villanueva |
Boldermail |
2025-10-22T14:32:23.272Z | 2026-01-20T14:28:08.764Z |
| CVE-2025-52739 |
7.1 (3.1)
|
WordPress Sala theme <= 1.1.3 - Cross Site Scripting (… |
uxper |
Sala |
2025-12-31T20:10:29.616Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52738 |
6.5 (3.1)
|
WordPress Wikipedia Preview Plugin <= 1.15.0 - Broken … |
Wikimedia Foundation |
Wikipedia Preview |
2025-10-22T14:32:23.016Z | 2026-01-20T14:28:08.230Z |
| CVE-2025-52737 |
8.8 (3.1)
|
WordPress WP Store Locator plugin <= 2.2.260 - PHP Obj… |
Tijmen Smit |
WP Store Locator |
2025-10-22T14:32:22.788Z | 2026-01-20T14:28:08.263Z |
| CVE-2025-52736 |
7.1 (3.1)
|
WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Sc… |
Daman Jeet |
Finale Lite |
2025-10-22T14:32:22.566Z | 2026-01-20T14:28:08.492Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-53232 | Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail… | 2025-10-22T15:15:48.277 | 2026-01-20T15:16:51.580 |
| fkie_cve-2025-53229 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:48.157 | 2026-01-20T15:16:51.437 |
| fkie_cve-2025-53218 | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts… | 2025-10-22T15:15:48.020 | 2026-01-20T15:16:51.307 |
| fkie_cve-2025-53214 | Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-cert… | 2025-11-06T16:15:55.110 | 2026-01-20T15:16:51.177 |
| fkie_cve-2025-52835 | Cross-Site Request Forgery (CSRF) vulnerability in ConoHa by GMO WING WordPress Migrator allows Upl… | 2025-12-30T17:15:42.203 | 2026-01-20T15:16:51.067 |
| fkie_cve-2025-52773 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T16:15:54.933 | 2026-01-20T15:16:50.937 |
| fkie_cve-2025-52770 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:46.197 | 2026-01-20T15:16:50.807 |
| fkie_cve-2025-52768 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.903 | 2026-01-20T15:16:50.677 |
| fkie_cve-2025-52764 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:54.760 | 2026-01-20T15:16:50.547 |
| fkie_cve-2025-52763 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:46.063 | 2026-01-20T15:16:50.410 |
| fkie_cve-2025-52760 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.937 | 2026-01-20T15:16:50.283 |
| fkie_cve-2025-52758 | Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy… | 2025-10-22T15:15:45.813 | 2026-01-20T15:16:50.147 |
| fkie_cve-2025-52757 | Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomember… | 2025-10-22T15:15:45.687 | 2026-01-20T15:16:50.013 |
| fkie_cve-2025-52756 | Improper Control of Generation of Code ('Code Injection') vulnerability in Sayan Datta WP Last Modi… | 2025-10-22T15:15:45.563 | 2026-01-20T15:16:49.877 |
| fkie_cve-2025-52755 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.440 | 2026-01-20T15:16:49.743 |
| fkie_cve-2025-52754 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.313 | 2026-01-20T15:16:49.610 |
| fkie_cve-2025-52753 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.190 | 2026-01-20T15:16:49.493 |
| fkie_cve-2025-52752 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAt… | 2025-10-22T15:15:45.070 | 2026-01-20T15:16:49.360 |
| fkie_cve-2025-52751 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.947 | 2026-01-20T15:16:49.233 |
| fkie_cve-2025-52750 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.827 | 2026-01-20T15:16:49.107 |
| fkie_cve-2025-52749 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.710 | 2026-01-20T15:16:48.973 |
| fkie_cve-2025-52748 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.593 | 2026-01-20T15:16:48.840 |
| fkie_cve-2025-52745 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.750 | 2026-01-20T15:16:48.703 |
| fkie_cve-2025-52743 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.467 | 2026-01-20T15:16:48.567 |
| fkie_cve-2025-52742 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.340 | 2026-01-20T15:16:48.430 |
| fkie_cve-2025-52740 | Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows O… | 2025-10-22T15:15:44.087 | 2026-01-20T15:16:48.147 |
| fkie_cve-2025-52739 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.937 | 2026-01-20T15:16:48.043 |
| fkie_cve-2025-52738 | Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview all… | 2025-10-22T15:15:43.960 | 2026-01-20T15:16:47.913 |
| fkie_cve-2025-52737 | Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator al… | 2025-10-22T15:15:43.837 | 2026-01-20T15:16:47.780 |
| fkie_cve-2025-52736 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.713 | 2026-01-20T15:16:47.650 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-4r7w-x5w5-gxg3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:54Z | 2026-01-02T18:30:54Z |
| ghsa-3rwg-7w5w-62jx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:54Z | 2026-01-02T18:30:54Z |
| ghsa-2qq6-9r78-ffh4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:54Z | 2026-01-02T18:30:54Z |
| ghsa-2h8q-5xvm-782p |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:54Z | 2026-01-02T18:30:54Z |
| ghsa-x9rw-g2px-3v44 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-wjgc-j3r9-5229 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-vx55-4px4-p3q4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-rf94-9ggr-p6xr |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-r533-9f7p-vwj3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-p9gw-9q38-j34x |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-p4qg-vv4q-m335 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-mhj7-h64x-537c |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-m6c8-59fp-gp49 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-j26v-32w3-5cf4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-hx6r-8c6m-77g7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-7p3c-ggcf-3fp8 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-73xj-p7p7-c238 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-5xrm-qgh6-m95p |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-4gx5-wwrf-2v7p |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-3pwh-pg85-phpg |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-3hmm-67m3-g4fx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-392m-7c7x-9826 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-352c-vh92-x8mg |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-2mqh-v85q-fq9m |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:53Z | 2026-01-02T18:30:53Z |
| ghsa-ww5m-42v8-c223 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ghsa-w8v4-v3qh-fcf6 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ghsa-vqxj-jx7v-6339 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ghsa-vjf6-3r35-5w5c |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ghsa-v9h3-m8jw-w5x7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ghsa-v6pg-w5j2-f6rj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:52Z | 2026-01-02T18:30:52Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-26009 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.151463Z |
| gsd-2024-26131 | Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10… | 2024-02-15T06:02:25.151164Z |
| gsd-2024-26073 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … | 2024-02-15T06:02:25.150801Z |
| gsd-2024-26120 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … | 2024-02-15T06:02:25.150485Z |
| gsd-2024-26209 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | 2024-02-15T06:02:25.150187Z |
| gsd-2024-26250 | Secure Boot Security Feature Bypass Vulnerability | 2024-02-15T06:02:25.149891Z |
| gsd-2024-26088 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.149575Z |
| gsd-2024-26125 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … | 2024-02-15T06:02:25.149272Z |
| gsd-2024-26227 | Windows DNS Server Remote Code Execution Vulnerability | 2024-02-15T06:02:25.148972Z |
| gsd-2024-26244 | Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vulnerability | 2024-02-15T06:02:25.148664Z |
| gsd-2024-26092 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.148302Z |
| gsd-2024-26113 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.147999Z |
| gsd-2024-26187 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.147690Z |
| gsd-2024-26046 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … | 2024-02-15T06:02:25.147381Z |
| gsd-2024-26103 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Si… | 2024-02-15T06:02:25.147041Z |
| gsd-2024-26194 | Secure Boot Security Feature Bypass Vulnerability | 2024-02-15T06:02:25.146722Z |
| gsd-2024-26065 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site … | 2024-02-15T06:02:25.146420Z |
| gsd-2024-26251 | Microsoft SharePoint Server Spoofing Vulnerability | 2024-02-15T06:02:25.146116Z |
| gsd-2024-26140 | com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of th… | 2024-02-15T06:02:25.145813Z |
| gsd-2024-26037 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.145394Z |
| gsd-2024-26238 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.145095Z |
| gsd-2024-26086 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.144827Z |
| gsd-2024-26146 | Rack is a modular Ruby web server interface. Carefully crafted headers can cause header p… | 2024-02-15T06:02:25.144475Z |
| gsd-2024-26204 | Outlook for Android Information Disclosure Vulnerability | 2024-02-15T06:02:25.144110Z |
| gsd-2024-26219 | HTTP.sys Denial of Service Vulnerability | 2024-02-15T06:02:25.143813Z |
| gsd-2024-26206 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.143501Z |
| gsd-2024-26049 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-15T06:02:25.143182Z |
| gsd-2024-26118 | Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Si… | 2024-02-15T06:02:25.142860Z |
| gsd-2024-26134 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) … | 2024-02-15T06:02:25.142407Z |
| gsd-2024-26170 | Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability | 2024-02-15T06:02:25.142024Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184474 | Malicious code in moki-lni-hujim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184473 | Malicious code in mok-luni-huojim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184472 | Malicious code in mok-luni-huojakigjim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184471 | Malicious code in mok-luni-huojakiavuggijim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184470 | Malicious code in mok-luni-huojakiavugagijim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184469 | Malicious code in mok-luni-huojakiavggjim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184468 | Malicious code in mok-luni-huojakiavggijim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184467 | Malicious code in mok-luni-huojakgjim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184466 | Malicious code in mok-luni-huojaim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184465 | Malicious code in mok-luni-hujim (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184464 | Malicious code in mok-luni-huji (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184463 | Malicious code in mok-lukni-huj (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184462 | Malicious code in modiov-kiufni-ufavcseqinsdxaodaycurptvmaduuban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184461 | Malicious code in modiov-kiufni-ufavcseqinsdxaodatayctaban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184460 | Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvmaduuban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184459 | Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvaban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184458 | Malicious code in modiov-kiufni-ufavcseqinsdxaodataycptaban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184457 | Malicious code in modiov-kin-afudsaczubfac (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184456 | Malicious code in modiov-kin-afudsaczubfa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184455 | Malicious code in modiov-kin-afudsaczubf (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184454 | Malicious code in modiov-kin-afudsaczub (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184453 | Malicious code in modiov-kin-afudsaczu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184452 | Malicious code in modiov-kin-afudsacz (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184451 | Malicious code in modiov-kin-afudsac (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184450 | Malicious code in modiov-kin-afudsa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184449 | Malicious code in modiov-kin-afuds (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184448 | Malicious code in modiov-kin-afud (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184447 | Malicious code in modiov-kin-afu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184446 | Malicious code in modiov-kin-afbaufdc (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184445 | Malicious code in modiov-kin-afbaufcdc (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:2512 | Red Hat Security Advisory: file security update | 2024-04-30T10:18:39+00:00 | 2025-11-21T19:00:10+00:00 |
| rhsa-2024:2504 | Red Hat Security Advisory: libssh security update | 2024-04-30T10:22:20+00:00 | 2025-11-21T19:00:10+00:00 |
| rhsa-2024:2396 | Red Hat Security Advisory: squashfs-tools security update | 2024-04-30T10:42:19+00:00 | 2025-11-21T19:00:10+00:00 |
| rhsa-2024:2483 | Red Hat Security Advisory: traceroute security update | 2024-04-30T09:51:52+00:00 | 2025-11-21T19:00:09+00:00 |
| rhsa-2024:2456 | Red Hat Security Advisory: grub2 security update | 2024-04-30T11:00:05+00:00 | 2025-11-21T19:00:08+00:00 |
| rhsa-2024:2438 | Red Hat Security Advisory: pam security update | 2024-04-30T10:24:56+00:00 | 2025-11-21T19:00:06+00:00 |
| rhsa-2024:2437 | Red Hat Security Advisory: exfatprogs security update | 2024-04-30T10:03:53+00:00 | 2025-11-21T19:00:06+00:00 |
| rhsa-2024:2433 | Red Hat Security Advisory: avahi security update | 2024-04-30T10:00:43+00:00 | 2025-11-21T19:00:06+00:00 |
| rhsa-2024:2410 | Red Hat Security Advisory: harfbuzz security update | 2024-04-30T10:42:35+00:00 | 2025-11-21T19:00:06+00:00 |
| rhsa-2024:2387 | Red Hat Security Advisory: mod_jk and mod_proxy_cluster security update | 2024-04-30T10:05:20+00:00 | 2025-11-21T19:00:04+00:00 |
| rhsa-2024:2377 | Red Hat Security Advisory: zziplib security update | 2024-04-30T09:42:23+00:00 | 2025-11-21T19:00:03+00:00 |
| rhsa-2024:2368 | Red Hat Security Advisory: mod_http2 security update | 2024-04-30T09:42:20+00:00 | 2025-11-21T19:00:03+00:00 |
| rhsa-2024:2366 | Red Hat Security Advisory: freeglut security update | 2024-04-30T09:56:26+00:00 | 2025-11-21T19:00:03+00:00 |
| rhsa-2024:2302 | Red Hat Security Advisory: gstreamer1-plugins-base security update | 2024-04-30T10:06:46+00:00 | 2025-11-21T19:00:02+00:00 |
| rhsa-2024:2348 | Red Hat Security Advisory: python-jinja2 security update | 2024-04-30T09:48:41+00:00 | 2025-11-21T19:00:01+00:00 |
| rhsa-2024:2287 | Red Hat Security Advisory: gstreamer1-plugins-bad-free security update | 2024-04-30T10:19:35+00:00 | 2025-11-21T19:00:01+00:00 |
| rhsa-2024:2337 | Red Hat Security Advisory: python3.11-cryptography security update | 2024-04-30T10:36:11+00:00 | 2025-11-21T19:00:00+00:00 |
| rhsa-2024:2303 | Red Hat Security Advisory: gstreamer1-plugins-good security update | 2024-04-30T09:59:38+00:00 | 2025-11-21T19:00:00+00:00 |
| rhsa-2024:2298 | Red Hat Security Advisory: tigervnc security update | 2024-04-30T10:38:08+00:00 | 2025-11-21T19:00:00+00:00 |
| rhsa-2024:2295 | Red Hat Security Advisory: libjpeg-turbo security update | 2024-04-30T09:58:44+00:00 | 2025-11-21T18:59:59+00:00 |
| rhsa-2024:2290 | Red Hat Security Advisory: mutt security update | 2024-04-30T09:54:20+00:00 | 2025-11-21T18:59:58+00:00 |
| rhsa-2024:2213 | Red Hat Security Advisory: pcp security update | 2024-04-30T10:38:09+00:00 | 2025-11-21T18:59:58+00:00 |
| rhsa-2024:2278 | Red Hat Security Advisory: httpd security update | 2024-04-30T09:50:33+00:00 | 2025-11-21T18:59:57+00:00 |
| rhsa-2024:2276 | Red Hat Security Advisory: qt5-qtbase security update | 2024-04-30T09:53:50+00:00 | 2025-11-21T18:59:57+00:00 |
| rhsa-2024:2264 | Red Hat Security Advisory: edk2 security update | 2024-04-30T09:52:59+00:00 | 2025-11-21T18:59:55+00:00 |
| rhsa-2024:2246 | Red Hat Security Advisory: ansible-core bug fix, enhancement, and security update | 2024-04-30T10:14:07+00:00 | 2025-11-21T18:59:55+00:00 |
| rhsa-2024:2217 | Red Hat Security Advisory: motif security update | 2024-04-30T10:20:55+00:00 | 2025-11-21T18:59:54+00:00 |
| rhsa-2024:2211 | Red Hat Security Advisory: tcpdump security update | 2024-04-30T10:18:48+00:00 | 2025-11-21T18:59:53+00:00 |
| rhsa-2024:2204 | Red Hat Security Advisory: libnbd security update | 2024-04-30T09:55:09+00:00 | 2025-11-21T18:59:52+00:00 |
| rhsa-2024:2199 | Red Hat Security Advisory: pmix security update | 2024-04-30T09:53:07+00:00 | 2025-11-21T18:59:52+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2022-0685 | Use of Out-of-range Pointer Offset in vim/vim | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-4093 | A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-4090 | An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmval[bmlen-1] in nfsd4_decode_bitmap4 in fs/nfsd/nfs4xdr.c. In this flaw a local attacker with user privilege may gain access to out-of-bounds memory leading to a system integrity and confidentiality threat. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-3753 | A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-3752 | A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-3560 | It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to for example create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2021-20322 | A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity because software that relies on UDP source port randomization are indirectly affected as well. | 2022-02-02T00:00:00.000Z | 2022-03-01T00:00:00.000Z |
| msrc_cve-2022-25265 | In the Linux kernel through 5.16.10 certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g. with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file. | 2022-02-02T00:00:00.000Z | 2022-02-26T00:00:00.000Z |
| msrc_cve-2022-0629 | Stack-based Buffer Overflow in vim/vim | 2022-02-02T00:00:00.000Z | 2022-02-26T00:00:00.000Z |
| msrc_cve-2022-23269 | Microsoft Dynamics GP Spoofing Vulnerability | 2022-02-08T08:00:00.000Z | 2022-02-25T08:00:00.000Z |
| msrc_cve-2022-23258 | Microsoft Edge for Android Spoofing Vulnerability | 2022-01-11T08:00:00.000Z | 2022-02-25T08:00:00.000Z |
| msrc_cve-2022-25315 | In Expat (aka libexpat) before 2.4.5 there is an integer overflow in storeRawNames. | 2022-02-02T00:00:00.000Z | 2022-02-25T00:00:00.000Z |
| msrc_cve-2022-25314 | In Expat (aka libexpat) before 2.4.5 there is an integer overflow in copyString. | 2022-02-02T00:00:00.000Z | 2022-02-25T00:00:00.000Z |
| msrc_cve-2022-25313 | In Expat (aka libexpat) before 2.4.5 an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element. | 2022-02-02T00:00:00.000Z | 2022-02-25T00:00:00.000Z |
| msrc_cve-2022-0585 | Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file | 2022-02-02T00:00:00.000Z | 2022-02-25T00:00:00.000Z |
| msrc_cve-2022-25236 | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2022-25235 | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding such as checks for whether a UTF-8 character is valid in a certain context. | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2022-0586 | Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2022-0583 | Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2022-0581 | Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2021-45402 | The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction which allows local users to obtain potentially sensitive address information aka a "pointer leak." | 2022-02-02T00:00:00.000Z | 2022-02-24T00:00:00.000Z |
| msrc_cve-2022-0582 | Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2022-0572 | Heap-based Buffer Overflow in vim/vim | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2022-0382 | An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1. | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2022-0185 | A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system. | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2021-45444 | In zsh before 5.8.1 an attacker can achieve code execution if they control a command output inside the prompt as demonstrated by a %F argument. This occurs because of recursive PROMPT_SUBST expansion. | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2021-44879 | In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3 special files are not considered leading to a move_data_page NULL pointer dereference. | 2022-02-02T00:00:00.000Z | 2022-02-23T00:00:00.000Z |
| msrc_cve-2022-0554 | Use of Out-of-range Pointer Offset in vim/vim | 2022-02-02T00:00:00.000Z | 2022-02-19T00:00:00.000Z |
| msrc_cve-2022-24959 | An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c. | 2022-02-02T00:00:00.000Z | 2022-02-18T00:00:00.000Z |
| msrc_cve-2022-24958 | drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. | 2022-02-02T00:00:00.000Z | 2022-02-18T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201412-0023 | Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold al… | 2025-04-13T23:10:05.417000Z |
| var-201412-0424 | Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arb… | 2025-04-13T23:10:05.010000Z |
| var-201412-0422 | Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.… | 2025-04-13T23:10:04.971000Z |
| var-201412-0423 | Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows … | 2025-04-13T23:10:04.932000Z |
| var-201412-0504 | Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x befor… | 2025-04-13T23:10:04.873000Z |
| var-201412-0506 | Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X … | 2025-04-13T23:10:04.843000Z |
| var-201412-0611 | nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ti… | 2025-04-13T23:10:04.651000Z |
| var-201403-0548 | Heap-based buffer overflow in the SPDY implementation in nginx 1.3.15 before 1.4.7 and 1.… | 2025-04-13T23:10:04.611000Z |
| var-201501-0334 | The play/modules component in Cisco WebEx Meetings Server allows remote attackers to obta… | 2025-04-13T23:10:04.116000Z |
| var-201501-0331 | Cross-site scripting (XSS) vulnerability in sendPwMail.do in Cisco WebEx Meetings Server … | 2025-04-13T23:10:04.086000Z |
| var-201501-0332 | Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server allows rem… | 2025-04-13T23:10:04.056000Z |
| var-201501-0333 | The OutlookAction LI in Cisco WebEx Meetings Server allows remote authenticated users to … | 2025-04-13T23:10:04.026000Z |
| var-201502-0041 | The CAPWAP DTLS protocol implementation in Fortinet FortiOS 5.0 Patch 7 build 4457 uses t… | 2025-04-13T23:09:58.998000Z |
| var-201502-0125 | The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers… | 2025-04-13T23:09:58.916000Z |
| var-201502-0146 | Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 a… | 2025-04-13T23:09:58.887000Z |
| var-201502-0335 | The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restric… | 2025-04-13T23:09:58.520000Z |
| var-201502-0336 | Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrast… | 2025-04-13T23:09:58.491000Z |
| var-201502-0337 | Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infras… | 2025-04-13T23:09:58.461000Z |
| var-201501-0100 | Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows a… | 2025-04-13T23:09:58.419000Z |
| var-201502-0358 | Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows a… | 2025-04-13T23:09:58.373000Z |
| var-201502-0362 | Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows a… | 2025-04-13T23:09:58.328000Z |
| var-201502-0361 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.… | 2025-04-13T23:09:58.283000Z |
| var-201502-0354 | Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows a… | 2025-04-13T23:09:58.237000Z |
| var-201501-0110 | Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows a… | 2025-04-13T23:09:58.191000Z |
| var-201501-0102 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x … | 2025-04-13T23:09:58.144000Z |
| var-201501-0117 | Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x b… | 2025-04-13T23:09:58.102000Z |
| var-201502-0357 | Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows a… | 2025-04-13T23:09:58.009000Z |
| var-201502-0353 | Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows a… | 2025-04-13T23:09:57.964000Z |
| var-201502-0364 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x … | 2025-04-13T23:09:57.918000Z |
| var-201501-0113 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.… | 2025-04-13T23:09:57.871000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:1622-1 | Security update for the Linux Kernel | 2021-05-17T15:44:27Z | 2021-05-17T15:44:27Z |
| suse-su-2021:1621-1 | Security update for python3 | 2021-05-17T15:16:40Z | 2021-05-17T15:16:40Z |
| suse-su-2021:1617-1 | Security update for the Linux Kernel | 2021-05-17T09:19:30Z | 2021-05-17T09:19:30Z |
| suse-su-2021:1613-1 | Security update for lz4 | 2021-05-14T15:35:25Z | 2021-05-14T15:35:25Z |
| suse-su-2021:1606-1 | Security update for ibsim | 2021-05-14T07:45:56Z | 2021-05-14T07:45:56Z |
| suse-su-2021:1605-1 | Security update for the Linux Kernel | 2021-05-14T07:45:46Z | 2021-05-14T07:45:46Z |
| suse-su-2021:1599-1 | Security update for ipvsadm | 2021-05-13T11:15:30Z | 2021-05-13T11:15:30Z |
| suse-su-2021:1598-1 | Security update for dtc | 2021-05-13T11:15:06Z | 2021-05-13T11:15:06Z |
| suse-su-2021:1597-1 | Security update for ibutils | 2021-05-13T11:13:43Z | 2021-05-13T11:13:43Z |
| suse-su-2021:1596-1 | Security update for the Linux Kernel | 2021-05-13T11:13:24Z | 2021-05-13T11:13:24Z |
| suse-su-2021:1595-1 | Security update for the Linux Kernel | 2021-05-13T11:12:08Z | 2021-05-13T11:12:08Z |
| suse-su-2021:1580-1 | Security update for xen | 2021-05-12T10:08:59Z | 2021-05-12T10:08:59Z |
| suse-su-2021:14724-1 | Security update for the Linux Kernel | 2021-05-12T10:08:20Z | 2021-05-12T10:08:20Z |
| suse-su-2021:1577-1 | Security update for openvpn | 2021-05-12T10:07:01Z | 2021-05-12T10:07:01Z |
| suse-su-2021:1576-1 | Security update for openvpn | 2021-05-12T10:06:05Z | 2021-05-12T10:06:05Z |
| suse-su-2021:14723-1 | Security update for openvpn-openssl1 | 2021-05-12T10:05:49Z | 2021-05-12T10:05:49Z |
| suse-su-2021:1574-1 | Security update for the Linux Kernel | 2021-05-12T10:05:26Z | 2021-05-12T10:05:26Z |
| suse-su-2021:1573-1 | Security update for the Linux Kernel | 2021-05-12T10:03:17Z | 2021-05-12T10:03:17Z |
| suse-su-2021:1572-1 | Security update for the Linux Kernel | 2021-05-12T10:01:57Z | 2021-05-12T10:01:57Z |
| suse-su-2021:1571-1 | Security update for the Linux Kernel | 2021-05-12T10:01:42Z | 2021-05-12T10:01:42Z |
| suse-su-2021:1564-1 | Security update for shim | 2021-05-11T11:30:04Z | 2021-05-11T11:30:04Z |
| suse-su-2021:1561-1 | Security update for drbd-utils | 2021-05-11T08:10:09Z | 2021-05-11T08:10:09Z |
| suse-su-2021:1560-1 | Security update for drbd-utils | 2021-05-11T08:09:51Z | 2021-05-11T08:09:51Z |
| suse-su-2021:1559-1 | Security update for drbd-utils | 2021-05-11T08:09:39Z | 2021-05-11T08:09:39Z |
| suse-su-2021:1557-1 | Security update for python3 | 2021-05-11T07:50:36Z | 2021-05-11T07:50:36Z |
| suse-su-2021:1554-1 | Security update for java-11-openjdk | 2021-05-11T07:44:39Z | 2021-05-11T07:44:39Z |
| suse-su-2021:1524-1 | Security update for libxml2 | 2021-05-05T16:25:33Z | 2021-05-05T16:25:33Z |
| suse-su-2021:1523-1 | Security update for libxml2 | 2021-05-05T16:24:43Z | 2021-05-05T16:24:43Z |
| suse-ru-2021:1517-1 | Recommended update for open-iscsi | 2021-05-05T15:43:58Z | 2021-05-05T15:43:58Z |
| suse-su-2021:1500-1 | Security update for python-Pygments | 2021-05-04T15:21:03Z | 2021-05-04T15:21:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-47205 | IrfanView释放后重用漏洞（CNVD-2024-47205） | 2024-11-27 | 2024-12-05 |
| cnvd-2024-47204 | IrfanView越界读取漏洞（CNVD-2024-47204） | 2024-11-27 | 2024-12-05 |
| cnvd-2024-47203 | IrfanView越界写入漏洞（CNVD-2024-47203） | 2024-11-27 | 2024-12-05 |
| cnvd-2024-47202 | IrfanView越界写入漏洞（CNVD-2024-47202） | 2024-11-27 | 2024-12-05 |
| cnvd-2024-47201 | IrfanView越界写入漏洞（CNVD-2024-47201） | 2024-11-27 | 2024-12-05 |
| cnvd-2024-46828 | IrfanView PSP文件解析越界写入远程代码执行漏洞 | 2024-11-28 | 2024-12-05 |
| cnvd-2024-46827 | IrfanView CIN文件解析越界写入远程代码执行漏洞 | 2024-11-28 | 2024-12-05 |
| cnvd-2024-46826 | IrfanView PSP文件解析越界写入远程代码执行漏洞（CNVD-2024-46826） | 2024-11-28 | 2024-12-05 |
| cnvd-2024-46825 | IrfanView WBZ插件WB1堆栈文件解析缓冲区溢出远程代码执行漏洞 | 2024-11-28 | 2024-12-05 |
| cnvd-2024-46824 | IrfanView WBZ插件WB1文件解析越界写入远程代码执行漏洞 | 2024-11-28 | 2024-12-05 |
| cnvd-2024-46798 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46798） | 2024-11-15 | 2024-12-05 |
| cnvd-2024-46797 | IBM Security SOAR授权问题漏洞 | 2024-11-19 | 2024-12-05 |
| cnvd-2024-46796 | IBM Concert访问控制错误漏洞 | 2024-11-21 | 2024-12-05 |
| cnvd-2024-46795 | IBM Concert SQL注入漏洞 | 2024-11-21 | 2024-12-05 |
| cnvd-2024-46794 | IBM Concert 跨站脚本漏洞（CNVD-2024-46794） | 2024-11-21 | 2024-12-05 |
| cnvd-2024-46793 | IBM Concert加密问题漏洞 | 2024-11-21 | 2024-12-05 |
| cnvd-2024-46181 | 全讯汇聚网络科技（北京）有限公司爱快流控路由器存在信息泄露漏洞 | 2024-10-21 | 2024-12-05 |
| cnvd-2024-46180 | 全讯汇聚网络科技（北京）有限公司爱快流控路由器存在SQL注入漏洞 | 2024-10-21 | 2024-12-05 |
| cnvd-2024-46176 | 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在SQL注入漏洞（CNVD-2024-46176） | 2024-10-21 | 2024-12-05 |
| cnvd-2024-46809 | NETGEAR XR300 bridge_wireless_main.cgi组件passphrase参数缓冲区溢出漏洞 | 2024-11-07 | 2024-12-04 |
| cnvd-2024-46808 | MonoCMS跨站脚本漏洞 | 2024-11-11 | 2024-12-04 |
| cnvd-2024-46807 | Adobe Illustrato缓冲区溢出漏洞（CNVD-2024-46807） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46806 | Adobe Animate资源管理错误漏洞（CNVD-2024-46806） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46805 | Adobe Animate缓冲区溢出漏洞（CNVD-2024-46805） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46804 | Adobe Animate缓冲区溢出漏洞（CNVD-2024-46804） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46803 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46803） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46802 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46802） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46801 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46801） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46800 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46800） | 2024-11-15 | 2024-12-04 |
| cnvd-2024-46799 | Adobe After Effects缓冲区溢出漏洞（CNVD-2024-46799） | 2024-11-15 | 2024-12-04 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-611 | Multiples vulnérabilités dans HP OpenView | 2011-11-02T00:00:00.000000 | 2011-11-02T00:00:00.000000 |
| certa-2011-avi-610 | Vulnérabilité dans IBM Lotus Sametime | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-609 | Multiples vulnérabilités dans les produits VMWare | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-608 | Vulnérabilité dans les produits D-Link | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-607 | Vulnérabilités dans Fujitsu Interstage HTTP Server | 2011-10-31T00:00:00.000000 | 2011-10-31T00:00:00.000000 |
| certa-2011-avi-606 | Vulnérabilités dans Cisco Webex Player | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-605 | Vulnérabilités dans des produits CheckPoint | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-604 | Vulnérabilité dans Novell ZENworks | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-603 | Vulnérabilités dans Cisco Security Agent | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-602 | Vulnérabilité dans des caméras Cisco | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-601 | Vulnérabilité dans Cisco CUCM, UCCX et Unified IP-IVR | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-600 | Vulnérabilité dans Zope | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-599 | Vulnérabilité dans OpenLDAP | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-598 | Vulnérabilité dans Novell iPrint | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-597 | Vulnérabilités dans Apple QuickTime | 2011-10-28T00:00:00.000000 | 2011-10-28T00:00:00.000000 |
| certa-2011-avi-596 | Vulnérabilité dans McAfee Web Gateway | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-595 | Vulnérabilités dans MIT Kerberos | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-594 | Vulnérabilités dans Alcatel OmniTouch Instant Communication Suite | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-593 | Vulnérabilités dans Google Chrome | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-592 | Vulnérabilités dans Linux-PAM | 2011-10-26T00:00:00.000000 | 2011-10-26T00:00:00.000000 |
| certa-2011-avi-591 | Multiples vulnérabilités dans FFmpeg | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-590 | Vulnérabilité dans OCS Inventory | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-589 | Vulnérabilités dans LibreOffice | 2011-10-25T00:00:00.000000 | 2011-10-25T00:00:00.000000 |
| certa-2011-avi-588 | Vulnérabilités dans HP Data Protector Notebook Extension | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-587 | Vulnérabilités dans Splunk | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-586 | Multiples vulnérabilités dans les produits Oracle | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-585 | Vulnérabilités dans HP MFP Digital Sending Software | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-584 | Vulnérabilités dans Cisco Show and Share | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-583 | Vulnérabilité dans CiscoWorks Common Services | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |
| certa-2011-avi-582 | Vulnérabilités dans plusieurs produits Symantec | 2011-10-21T00:00:00.000000 | 2011-10-21T00:00:00.000000 |