Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-0881
10 (3.1)
Sandbox escape in the Messaging System component Mozilla
Firefox
2026-01-13T13:30:55.122Z 2026-01-15T09:31:11.249Z
CVE-2026-0880
8.8 (3.1)
Sandbox escape due to integer overflow in the Graphics… Mozilla
Firefox
2026-01-13T13:30:54.679Z 2026-01-15T09:31:10.655Z
CVE-2026-0879
9.8 (3.1)
Sandbox escape due to incorrect boundary conditions in… Mozilla
Firefox
2026-01-13T13:30:54.207Z 2026-01-15T09:31:10.036Z
CVE-2026-0878
8 (3.1)
Sandbox escape due to incorrect boundary conditions in… Mozilla
Firefox
2026-01-13T13:30:53.697Z 2026-01-15T09:31:09.491Z
CVE-2026-0877
8.1 (3.1)
Mitigation bypass in the DOM: Security component Mozilla
Firefox
2026-01-13T13:30:52.979Z 2026-01-15T09:31:08.828Z
CVE-2025-66370
5 (3.1)
Kivitendo before 3.9.2 allows XXE injection. By u… kivitendo
kivitendo
2025-11-28T00:00:00.000Z 2026-01-15T06:46:24.375Z
CVE-2025-11224
7.7 (3.1)
Improper Neutralization of Input During Web Page Gener… GitLab
GitLab
2026-01-14T18:58:03.982Z 2026-01-15T04:56:06.696Z
CVE-2025-33206
7.8 (3.1)
NVIDIA NSIGHT Graphics for Linux contains a vulne… NVIDIA
NSIGHT Graphics
2026-01-14T18:30:41.061Z 2026-01-15T04:56:05.628Z
CVE-2025-66516
8.4 (3.1)
Apache Tika core, Apache Tika parsers, Apache Tika PDF… Apache Software Foundation
Apache Tika core
2025-12-04T16:17:24.980Z 2026-01-15T04:56:01.082Z
CVE-2026-21287
7.8 (3.1)
Substance3D - Stager | Use After Free (CWE-416) Adobe
Substance3D - Stager
2026-01-13T19:44:45.957Z 2026-01-15T04:55:59.459Z
CVE-2026-23574
N/A
Not used N/A N/A 2026-01-15T03:55:08.745Z
CVE-2026-23575
N/A
Not used N/A N/A 2026-01-15T03:55:08.303Z
CVE-2026-23576
N/A
Not used N/A N/A 2026-01-15T03:55:07.854Z
CVE-2026-23577
N/A
Not used N/A N/A 2026-01-15T03:55:07.411Z
CVE-2026-23578
N/A
Not used N/A N/A 2026-01-15T03:55:06.967Z
CVE-2026-23579
N/A
Not used N/A N/A 2026-01-15T03:55:06.514Z
CVE-2026-23580
N/A
Not used N/A N/A 2026-01-15T03:55:06.047Z
CVE-2026-23581
N/A
Not used N/A N/A 2026-01-15T03:55:05.587Z
CVE-2026-23582
N/A
Not used N/A N/A 2026-01-15T03:55:05.073Z
CVE-2025-58318
5.8 (4.0)
DIAView - Authentication Bypass Vulnerability Delta Electronics
DIAView
2025-09-01T07:23:20.880Z 2026-01-15T02:23:12.087Z
CVE-2025-66176
8.8 (3.1)
There is a Stack overflow Vulnerability in the de… Hikvision
DS-K1T331
2026-01-13T01:47:27.191Z 2026-01-15T01:56:32.572Z
CVE-2025-68963
5.7 (3.1)
Man-in-the-middle attack vulnerability in the Clo… Huawei
HarmonyOS
2026-01-14T02:31:32.979Z 2026-01-14T23:35:36.785Z
CVE-2025-68967
5.7 (3.1)
Vulnerability of improper permission control in t… Huawei
HarmonyOS
2026-01-14T02:16:57.372Z 2026-01-14T23:35:23.930Z
CVE-2025-68956
8 (3.1)
Multi-thread race condition vulnerability in the … Huawei
HarmonyOS
2026-01-14T01:56:39.093Z 2026-01-14T23:35:11.781Z
CVE-2025-68955
8 (3.1)
Multi-thread race condition vulnerability in the … Huawei
HarmonyOS
2026-01-14T01:51:42.163Z 2026-01-14T23:34:57.517Z
CVE-2025-12053
7.8 (3.1)
egwindrvx64.sys is potentially vulnerable to a buffer … Insyde Software
InsydeH2O tools
2026-01-14T01:27:11.791Z 2026-01-14T23:34:48.257Z
CVE-2025-12052
7.8 (3.1)
egwindrv.sys is potentially vulnerable to a buffer overflow. Insyde Software
InsydeH2O tools
2026-01-14T01:23:54.933Z 2026-01-14T23:27:53.305Z
CVE-2025-12051
7.8 (3.1)
H2OFFT64.sys is potentially vulnerable to a buffer overflow. Insyde Software
InsydeH2O tools
2026-01-14T01:17:54.753Z 2026-01-14T23:27:15.424Z
CVE-2025-12050
7.8 (3.1)
In H2OFFT32.sys is potentially vulnerable to a buffer … Insyde Software
InsydeH2O tools
2026-01-14T01:13:33.407Z 2026-01-14T23:26:28.947Z
CVE-2026-22869
8.9 (4.0)
Eigent Allows Arbitrary Code Execution via pull_reques… eigent-ai
eigent
2026-01-13T20:38:42.662Z 2026-01-14T23:26:18.334Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-49350
4.3 (3.1)
WordPress Actionwear products sync plugin <= 2.3.3 - B… marcoingraiti
Actionwear products sync
2025-12-09T14:52:18.182Z 2026-01-20T14:28:06.748Z
CVE-2025-49349
5.3 (3.1)
WordPress Reuters Direct plugin <= 3.0.0 - Broken Acce… Reuters News Agency
Reuters Direct
2025-12-31T14:48:34.082Z 2026-01-20T14:28:06.662Z
CVE-2025-49348
5.3 (3.1)
WordPress Hype plugin <= 1.0.5 - Broken Access Control… Hype
Hype
2025-12-09T14:52:17.974Z 2026-01-20T14:28:06.689Z
CVE-2025-49347
7.1 (3.1)
WordPress WP sIFR plugin <= 0.6.8.1 - Cross Site Reque… Jupitercow
WP sIFR
2025-12-09T14:52:17.791Z 2026-01-20T14:28:06.607Z
CVE-2025-49346
7.1 (3.1)
WordPress Simple Archive Generator plugin <= 5.2 - Cro… Peter Sterling
Simple Archive Generator
2025-12-31T04:37:01.172Z 2026-01-20T14:28:06.500Z
CVE-2025-49345
7.1 (3.1)
WordPress WP-EasyArchives plugin <= 3.1.2 - Cross Site… mg12
WP-EasyArchives
2025-12-31T05:23:28.075Z 2026-01-20T14:28:06.856Z
CVE-2025-49344
7.1 (3.1)
WordPress SensitiveTagCloud plugin <= 1.4.1 - Cross Si… Rene Ade
SensitiveTagCloud
2025-12-31T05:25:58.689Z 2026-01-20T14:28:06.405Z
CVE-2025-49343
7.1 (3.1)
WordPress Social Profilr plugin <= 1.0 - Cross Site Re… Socialprofilr
Social Profilr
2025-12-31T05:28:06.720Z 2026-01-20T14:28:06.765Z
CVE-2025-49342
7.1 (3.1)
WordPress Custom Style plugin <= 1.0 - Cross Site Requ… Wolfgang Häfelinger
Custom Style
2025-12-31T05:55:53.218Z 2026-01-20T14:28:06.843Z
CVE-2025-49341
7.1 (3.1)
WordPress PDF Creator Lite plugin <= 1.2 - Cross Site … Alex Furr
PDF Creator Lite
2025-12-09T14:52:17.582Z 2026-01-20T14:28:06.561Z
CVE-2025-49340
4.3 (3.1)
WordPress Direct Payments WP plugin <= 1.3.0 - Sensiti… Digages
Direct Payments WP
2025-12-31T16:30:03.883Z 2026-01-20T14:28:06.289Z
CVE-2025-49339
4.3 (3.1)
WordPress Direct Payments WP plugin <= 1.3.0 - Broken … Digages
Direct Payments WP
2025-12-31T16:31:22.695Z 2026-01-20T14:28:06.329Z
CVE-2025-49338
5.3 (3.1)
WordPress Flowbox plugin <= 1.1.5 - Broken Access Cont… Flowbox
Flowbox
2025-12-31T15:35:54.047Z 2026-01-20T14:28:06.489Z
CVE-2025-49337
5.9 (3.1)
WordPress Dashboard Beacon plugin <= 1.2.0 - Cross Sit… janhenckens
Dashboard Beacon
2025-12-31T17:21:05.083Z 2026-01-20T14:28:06.314Z
CVE-2025-49334
5.3 (3.1)
WordPress MyD Delivery plugin <= 1.3.7 - Insecure Dire… Eduardo Villão
MyD Delivery
2025-12-31T15:25:23.165Z 2026-01-20T14:28:06.300Z
CVE-2025-49300
2.7 (3.1)
WordPress Traveler Option Tree plugin <= 2.8 - Sensiti… shinetheme
Traveler Option Tree
2025-12-16T08:12:44.867Z 2026-01-20T14:28:06.383Z
CVE-2025-49060
10 (3.1)
WordPress Wastia theme < 1.1.3 - Arbitrary File Upload… CMSSuperHeroes
Wastia
2025-10-22T14:32:08.196Z 2026-01-20T14:28:05.987Z
CVE-2025-49042
5.9 (3.1)
WordPress WooCommerce plugin <= 10.0.2 - Cross Site Sc… Automattic
WooCommerce
2025-10-29T04:50:12.507Z 2026-01-20T14:28:06.098Z
CVE-2025-49041
6.5 (3.1)
WordPress Get Cash plugin <= 3.2.3 - Broken Access Con… The African Boss
Get Cash
2025-12-18T07:21:40.869Z 2026-01-20T14:28:06.017Z
CVE-2025-49028
7.1 (3.1)
WordPress Zoho ZeptoMail plugin <= 3.3.1 - Cross Site … Zoho Mail
Zoho ZeptoMail
2025-12-31T09:05:02.812Z 2026-01-20T14:28:06.018Z
CVE-2025-48338
7.5 (3.1)
WordPress WP Abstracts plugin <= 2.7.4 - Local File In… Kevon Adonis
WP Abstracts
2025-10-22T14:32:07.858Z 2026-01-20T14:28:06.339Z
CVE-2025-48330
9.8 (3.1)
WordPress Real Time Validation for Gravity Forms <= 1.… Daman Jeet
Real Time Validation for Gravity Forms
2025-11-06T15:53:48.806Z 2026-01-20T14:28:06.327Z
CVE-2025-48290
9.8 (3.1)
WordPress Kinsley theme <= 3.4.4 - Local File Inclusio… bslthemes
Kinsley
2025-11-06T15:53:47.362Z 2026-01-20T14:28:06.389Z
CVE-2025-48106
10 (3.1)
WordPress Clanora theme < 1.3.1 - Arbitrary File Uploa… CMSSuperHeroes
Clanora
2025-10-22T14:32:07.674Z 2026-01-20T14:28:06.040Z
CVE-2025-48099
4.7 (3.1)
WordPress Search & Filter plugin <= 1.2.17 - Cross Sit… Code Amp
Search & Filter
2025-10-22T14:32:07.494Z 2026-01-20T14:28:05.849Z
CVE-2025-48098
7.1 (3.1)
WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site … Ays Pro
Survey Maker
2025-10-22T14:32:07.268Z 2026-01-20T14:28:05.964Z
CVE-2025-48097
7.1 (3.1)
WordPress WSAnalytics plugin <= 1.1.2 - Reflected Cros… Shiva
WSAnalytics
2025-10-22T14:32:07.078Z 2026-01-20T14:28:06.030Z
CVE-2025-48096
6.5 (3.1)
WordPress Custom CSS plugin <= 1.4.0 - Broken Access C… FRESHFACE
Custom CSS
2025-10-22T14:32:06.895Z 2026-01-20T14:28:06.033Z
CVE-2025-48095
5.9 (3.1)
WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site … Ays Pro
Survey Maker
2025-10-22T14:32:06.692Z 2026-01-20T14:28:06.023Z
CVE-2025-48093
7.1 (3.1)
WordPress Password only login plugin <= 0.2 - Reflecte… Calvaweb
Password only login
2025-10-22T14:32:06.499Z 2026-01-20T14:28:06.143Z
ID Description Published Updated
fkie_cve-2025-49347 Cross-Site Request Forgery (CSRF) vulnerability in Jupitercow WP sIFR wp-sifr allows Stored XSS.Thi… 2025-12-09T16:17:58.253 2026-01-20T15:16:33.580
fkie_cve-2025-49346 Cross-Site Request Forgery (CSRF) vulnerability in Peter Sterling Simple Archive Generator allows S… 2025-12-31T05:16:06.637 2026-01-20T15:16:33.477
fkie_cve-2025-49345 Cross-Site Request Forgery (CSRF) vulnerability in mg12 WP-EasyArchives allows Stored XSS.This issu… 2025-12-31T06:15:40.957 2026-01-20T15:16:33.380
fkie_cve-2025-49344 Cross-Site Request Forgery (CSRF) vulnerability in Rene Ade SensitiveTagCloud allows Stored XSS.Thi… 2025-12-31T06:15:40.813 2026-01-20T15:16:33.273
fkie_cve-2025-49343 Cross-Site Request Forgery (CSRF) vulnerability in Socialprofilr Social Profilr allows Stored XSS.T… 2025-12-31T06:15:40.677 2026-01-20T15:16:33.170
fkie_cve-2025-49342 Cross-Site Request Forgery (CSRF) vulnerability in Wolfgang Häfelinger Custom Style allows Stored X… 2025-12-31T06:15:40.517 2026-01-20T15:16:33.070
fkie_cve-2025-49341 Cross-Site Request Forgery (CSRF) vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allo… 2025-12-09T16:17:58.107 2026-01-20T15:16:32.890
fkie_cve-2025-49340 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages… 2025-12-31T17:15:44.113 2026-01-20T15:16:32.507
fkie_cve-2025-49339 Missing Authorization vulnerability in Digages Direct Payments WP allows Exploiting Incorrectly Con… 2025-12-31T17:15:43.970 2026-01-20T15:16:32.390
fkie_cve-2025-49338 Missing Authorization vulnerability in Flowbox allows Exploiting Incorrectly Configured Access Cont… 2025-12-31T16:15:43.093 2026-01-20T15:16:32.287
fkie_cve-2025-49337 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T18:15:44.173 2026-01-20T15:16:32.187
fkie_cve-2025-49334 Authorization Bypass Through User-Controlled Key vulnerability in Eduardo Villão MyD Delivery allow… 2025-12-31T16:15:42.947 2026-01-20T15:16:32.080
fkie_cve-2025-49300 Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree … 2025-12-16T09:15:52.120 2026-01-20T15:16:31.927
fkie_cve-2025-49060 Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia wastia allow… 2025-10-22T15:15:35.160 2026-01-20T15:16:31.790
fkie_cve-2025-49042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-29T05:15:37.080 2026-01-20T15:16:31.663
fkie_cve-2025-49041 Missing Authorization vulnerability in The African Boss Get Cash get-cash allows Exploiting Incorre… 2025-12-18T08:15:49.837 2026-01-20T15:16:31.493
fkie_cve-2025-49028 Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail Zoho ZeptoMail allows Stored XSS.This … 2025-12-31T09:15:50.830 2026-01-20T15:16:31.343
fkie_cve-2025-48338 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-10-22T15:15:35.023 2026-01-20T15:16:31.197
fkie_cve-2025-48330 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:52.780 2026-01-20T15:16:31.047
fkie_cve-2025-48290 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:52.627 2026-01-20T15:16:30.903
fkie_cve-2025-48106 Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora all… 2025-10-22T15:15:34.880 2026-01-20T15:16:30.760
fkie_cve-2025-48099 Cross-Site Request Forgery (CSRF) vulnerability in Code Amp Search & Filter search-filter allows Cr… 2025-10-22T15:15:34.733 2026-01-20T15:16:30.600
fkie_cve-2025-48098 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:34.600 2026-01-20T15:16:30.450
fkie_cve-2025-48097 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:34.467 2026-01-20T15:16:30.300
fkie_cve-2025-48096 Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Inc… 2025-10-22T15:15:34.333 2026-01-20T15:16:30.157
fkie_cve-2025-48095 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:34.210 2026-01-20T15:16:30.013
fkie_cve-2025-48093 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:34.090 2026-01-20T15:16:29.843
fkie_cve-2025-48092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:33.963 2026-01-20T15:16:29.667
fkie_cve-2025-48091 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-10-22T15:15:33.840 2026-01-20T15:16:28.740
fkie_cve-2025-48090 Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp … 2025-11-06T16:15:52.423 2026-01-20T15:16:27.027
ID Severity Description Published Updated
ghsa-4cjr-2p75-j7rm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-4752-x6jq-9x6m
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-3g3r-wp4r-f2gp
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-3636-p8mw-vf54
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-29xh-3xpf-jrmh
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-27c3-cfxx-cgfh
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:48Z 2026-01-02T18:30:48Z
ghsa-xxv6-pjw8-v27v
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-wqxw-vjj4-7g6q
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-wcvw-8pq5-r4fg
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-vg4x-pmm9-mqxj
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-rqw4-576r-54ww
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-q235-hwjx-f436
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-pqfv-rfc5-4r54
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-m9q8-8xwj-6ph5
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-m9mp-6wp7-5mhj
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-hv6h-7hq7-m748
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-hq79-rr54-j6q9
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-fcv8-p945-xf3m
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-fc4x-6vp7-p83m
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-99q5-5c53-65m7
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-98cc-h22p-phv6
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-88ff-rxm3-r7h2
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-84cx-234x-hrc4
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-553r-9jvj-wpg7
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-4j77-rrq4-gcj3
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-3jqc-hm9w-f824
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-3f7g-7v5v-724x
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-2m37-7444-6h4c
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-29j4-9c79-qh9j
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ghsa-25x2-hxpj-w7rj
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:47Z 2026-01-02T18:30:47Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25996 An unauthenticated remote attacker can perform a remote code execution due to an origin v… 2024-02-15T06:02:23.795386Z
gsd-2024-25999 An unauthenticated local attacker can perform a privilege escalation due to improper inpu… 2024-02-15T06:02:23.760158Z
gsd-2024-25579 OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjace… 2024-02-15T06:02:23.703641Z
gsd-2024-25994 An unauthenticated remote attacker can upload a arbitrary script file due to improper inp… 2024-02-15T06:02:23.682813Z
gsd-2024-25995 An unauthenticated remote attacker can modify configurations to perform a remote code exe… 2024-02-15T06:02:23.591882Z
gsd-2024-25998 An unauthenticated remote attacker can perform a command injection in the OCPP Service wi… 2024-02-15T06:02:23.559954Z
gsd-2024-25997 An unauthenticated remote attacker can perform a log injection due to improper input vali… 2024-02-15T06:02:23.551585Z
gsd-2024-21798 ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a m… 2024-02-15T06:02:22.526175Z
gsd-2024-21827 The format of the source doesn't require a description, click on the link for more details. 2024-02-15T06:02:22.518185Z
gsd-2023-7247 The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log … 2024-02-15T06:01:24.817120Z
gsd-2024-24986 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:28.014486Z
gsd-2024-23981 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:27.849887Z
gsd-2024-23318 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:27.681047Z
gsd-2024-23974 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:27.677498Z
gsd-2024-23497 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:27.507456Z
gsd-2024-1477 The Easy Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exp… 2024-02-14T06:02:27.020171Z
gsd-2024-1480 Unitronics Vision Standard line of controllers allow the Information Mode password to be … 2024-02-14T06:02:27.019371Z
gsd-2024-1469 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:27.005043Z
gsd-2024-1467 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:26.998746Z
gsd-2024-1487 The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and… 2024-02-14T06:02:26.983136Z
gsd-2024-1471 An HTML injection vulnerability exists where an authenticated, remote attacker with admi… 2024-02-14T06:02:26.982799Z
gsd-2024-1478 The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure… 2024-02-14T06:02:26.946852Z
gsd-2024-1485 A vulnerability was found in the decompression function of registry-support. This issue c… 2024-02-14T06:02:26.927866Z
gsd-2024-1472 The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all vers… 2024-02-14T06:02:26.921578Z
gsd-2024-1479 The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in… 2024-02-14T06:02:26.904216Z
gsd-2024-1482 An incorrect authorization vulnerability was identified in GitHub Enterprise Server that … 2024-02-14T06:02:26.903673Z
gsd-2024-1484 The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnera… 2024-02-14T06:02:26.903085Z
gsd-2024-1486 The format of the source doesn't require a description, click on the link for more details. 2024-02-14T06:02:26.891694Z
gsd-2024-1481 A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP reque… 2024-02-14T06:02:26.848347Z
gsd-2024-1474 In WS_FTP Server versions before 8.8.5, reflected cross-site scripting issues have been i… 2024-02-14T06:02:26.825938Z
ID Description Published Updated
mal-2025-184265 Malicious code in modiov-khan-avcafivaivuvacd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184264 Malicious code in modiov-khan-avcafivaivucd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184263 Malicious code in modiov-khan-avcafivaivuaviagfavacd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184262 Malicious code in modiov-khan-avcafivaivd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184261 Malicious code in modiov-khan-avcafivaivcd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184260 Malicious code in modiov-khan-avcafivaid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184259 Malicious code in modiov-khan-avcafivad (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184258 Malicious code in modiov-khan-avcafid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184257 Malicious code in modiov-khan-avcafd (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184256 Malicious code in modiov-khan-avcad (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184255 Malicious code in modiov-khan-and (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184254 Malicious code in modiov-khan-aind (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184253 Malicious code in modiov-khan-afind (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184252 Malicious code in modiov-khan-afibanid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184251 Malicious code in modiov-khan-afibaniavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184250 Malicious code in modiov-khan-afiband (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184249 Malicious code in modiov-khan-afibanavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184248 Malicious code in modiov-khan-afibanavhid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184247 Malicious code in modiov-khan-afibanaivuvaavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184246 Malicious code in modiov-khan-afibanaivuavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184245 Malicious code in modiov-khan-afibanaivuaavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184244 Malicious code in modiov-khan-afibanaivavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184243 Malicious code in modiov-khan-afibanaiavihid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184242 Malicious code in modiov-khan-afibanahid (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184241 Malicious code in modiov-khan-afiand (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184240 Malicious code in modasv-kuvu-bavoisiayabu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184239 Malicious code in modasv-kuu-bou (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184238 Malicious code in modasv-kuu-bofu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184237 Malicious code in modasv-kuu-boffu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-184236 Malicious code in modasv-kuu-bof (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2024:11485 Red Hat Security Advisory: kernel security update 2024-12-19T00:43:02+00:00 2025-11-21T18:56:47+00:00
rhsa-2024:11483 Red Hat Security Advisory: kernel-rt security update 2024-12-19T00:11:46+00:00 2025-11-21T18:56:47+00:00
rhsa-2024:11482 Red Hat Security Advisory: kernel security update 2024-12-19T00:43:50+00:00 2025-11-21T18:56:46+00:00
rhsa-2024:1147 Red Hat Security Advisory: rear security update 2024-03-05T18:15:40+00:00 2025-11-21T18:56:45+00:00
rhsa-2024:1139 Red Hat Security Advisory: keylime security update 2024-03-05T18:15:19+00:00 2025-11-21T18:56:44+00:00
rhsa-2024:11242 Red Hat Security Advisory: mpg123:1.32.9 security update 2024-12-17T19:55:32+00:00 2025-11-21T18:56:40+00:00
rhsa-2024:11250 Red Hat Security Advisory: pam security update 2024-12-17T20:25:43+00:00 2025-11-21T18:56:38+00:00
rhsa-2024:11238 Red Hat Security Advisory: python3.11-urllib3 security update 2024-12-17T19:56:48+00:00 2025-11-21T18:56:38+00:00
rhsa-2024:11237 Red Hat Security Advisory: libsndfile:1.0.31 security update 2024-12-17T19:58:03+00:00 2025-11-21T18:56:37+00:00
rhsa-2024:11219 Red Hat Security Advisory: edk2:20240524 security update 2024-12-17T20:17:06+00:00 2025-11-21T18:56:37+00:00
rhsa-2024:11194 Red Hat Security Advisory: edk2 security update 2024-12-17T18:46:33+00:00 2025-11-21T18:56:35+00:00
rhsa-2024:11193 Red Hat Security Advisory: mpg123 security update 2024-12-17T19:04:03+00:00 2025-11-21T18:56:35+00:00
rhsa-2024:11192 Red Hat Security Advisory: libsndfile security update 2024-12-17T19:03:10+00:00 2025-11-21T18:56:35+00:00
rhsa-2024:11189 Red Hat Security Advisory: python3.11-urllib3 security update 2024-12-17T19:01:28+00:00 2025-11-21T18:56:34+00:00
rhsa-2024:11185 Red Hat Security Advisory: edk2:20220126gitbb1bba3d77 security update 2024-12-17T19:04:42+00:00 2025-11-21T18:56:34+00:00
rhsa-2024:11172 Red Hat Security Advisory: libsndfile security update 2024-12-17T18:53:23+00:00 2025-11-21T18:56:33+00:00
rhsa-2024:11154 Red Hat Security Advisory: bluez security update 2024-12-17T19:07:08+00:00 2025-11-21T18:56:31+00:00
rhsa-2024:11145 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update 2024-12-16T18:56:50+00:00 2025-11-21T18:56:30+00:00
rhsa-2024:1113 Red Hat Security Advisory: frr security update 2024-03-05T15:10:22+00:00 2025-11-21T18:56:28+00:00
rhsa-2024:1112 Red Hat Security Advisory: linux-firmware security update 2024-03-05T15:11:16+00:00 2025-11-21T18:56:26+00:00
rhsa-2024:1110 Red Hat Security Advisory: device-mapper-multipath security update 2024-03-05T15:01:11+00:00 2025-11-21T18:56:24+00:00
rhsa-2024:1109 Red Hat Security Advisory: libmicrohttpd security update 2024-03-05T16:30:52+00:00 2025-11-21T18:56:22+00:00
rhsa-2024:1108 Red Hat Security Advisory: gnutls security update 2024-03-05T15:22:37+00:00 2025-11-21T18:56:21+00:00
rhsa-2024:1107 Red Hat Security Advisory: sqlite security update 2024-03-05T15:13:51+00:00 2025-11-21T18:56:21+00:00
rhsa-2024:1106 Red Hat Security Advisory: fwupd security update 2024-03-05T16:30:27+00:00 2025-11-21T18:56:20+00:00
rhsa-2024:11049 Red Hat Security Advisory: squid security update 2024-12-16T02:38:00+00:00 2025-11-21T18:56:19+00:00
rhsa-2024:1103 Red Hat Security Advisory: emacs security update 2024-03-05T17:14:57+00:00 2025-11-21T18:56:14+00:00
rhsa-2024:1102 Red Hat Security Advisory: gmp security update 2024-03-05T16:29:42+00:00 2025-11-21T18:56:10+00:00
rhsa-2024:1101 Red Hat Security Advisory: cups security update 2024-03-05T15:16:41+00:00 2025-11-21T18:56:09+00:00
rhsa-2024:10965 Red Hat Security Advisory: python3.11-cryptography security update 2024-12-11T18:28:42+00:00 2025-11-21T18:55:56+00:00
ID Description Published Updated
msrc_cve-2022-21287 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21286 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21285 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21284 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21282 Vulnerability in the Oracle Java SE Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321 8u311 11.0.13 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments typically in clients running sandboxed Java Web Start applications or sandboxed Java applets that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component e.g. through a web service which supplies data to the APIs. CVSS 3.1 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21271 Vulnerability in the Oracle Java SE Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321 8u311 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments typically in clients running sandboxed Java Web Start applications or sandboxed Java applets that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component e.g. through a web service which supplies data to t 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21270 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21265 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21264 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21254 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21248 Vulnerability in the Oracle Java SE Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321 8u311 11.0.13 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Oracle Java SE Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments typically in clients running sandboxed Java Web Start applications or sandboxed Java applets that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component e.g. through a web service which supplies 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-21245 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-20698 Clam AntiVirus (ClamAV) Denial of Service Vulnerability 2022-01-02T00:00:00.000Z 2022-01-22T00:00:00.000Z
msrc_cve-2022-23218 The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length which may result in a buffer overflow potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution. 2022-01-02T00:00:00.000Z 2022-01-21T00:00:00.000Z
msrc_cve-2021-46283 nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace. 2022-01-02T00:00:00.000Z 2022-01-21T00:00:00.000Z
msrc_cve-2021-41072 squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create the symbolic link pointing outside the expected directory and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem. 2021-09-02T00:00:00.000Z 2022-01-20T00:00:00.000Z
msrc_cve-2021-40153 squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory and thus allows writing to locations outside of the destination. 2021-08-02T00:00:00.000Z 2022-01-20T00:00:00.000Z
msrc_cve-2020-14387 A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote unauthenticated attacker could exploit the flaw by performing a man-in-the-middle attack using a valid certificate for another hostname which could compromise confidentiality and integrity of data transmitted using rsync-ssl. The highest threat from this vulnerability is to data confidentiality and integrity. This flaw affects rsync versions before 3.2.4. 2021-05-02T00:00:00.000Z 2022-01-20T00:00:00.000Z
msrc_cve-2021-4186 Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-4185 Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-4184 Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-4182 Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-4181 Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-4048 An out-of-bounds read flaw was found in the CLARRV DLARRV SLARRV and ZLARRV functions in lapack through version 3.10.0 as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory. 2021-12-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39929 Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39928 NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39926 Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39925 Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39924 Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
msrc_cve-2021-39923 Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file 2021-11-02T00:00:00.000Z 2022-01-19T00:00:00.000Z
ID Description Updated
var-201405-0350 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domai… 2025-04-13T23:04:59.968000Z
var-201405-0351 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domai… 2025-04-13T23:04:59.934000Z
var-201406-0301 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not p… 2025-04-13T23:04:59.900000Z
var-201406-0303 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not p… 2025-04-13T23:04:59.870000Z
var-201406-0302 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) an… 2025-04-13T23:04:59.841000Z
var-201405-0352 The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domai… 2025-04-13T23:04:59.811000Z
var-201407-0174 Dell SonicWall Scrutinizer 11.0.1 allows remote authenticated users to change user passwo… 2025-04-13T23:04:58.451000Z
var-201407-0175 Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote … 2025-04-13T23:04:58.420000Z
var-201407-0383 Multiple open redirect vulnerabilities in the admin web interface in the web framework in… 2025-04-13T23:04:57.170000Z
var-201407-0509 The Administration GUI in the web framework in Cisco Unified Communications Domain Manage… 2025-04-13T23:04:57.025000Z
var-201407-0365 The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (C… 2025-04-13T23:04:56.996000Z
var-201407-0510 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before… 2025-04-13T23:04:56.966000Z
var-201409-0055 The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and g… 2025-04-13T23:04:50.411000Z
var-201409-0076 IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches… 2025-04-13T23:04:50.343000Z
var-201409-0428 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x befo… 2025-04-13T23:04:50.157000Z
var-201409-0434 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:50.115000Z
var-201409-0426 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:50.074000Z
var-201409-0427 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:50.032000Z
var-201409-0435 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.989000Z
var-201409-0425 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x befo… 2025-04-13T23:04:49.947000Z
var-201409-0423 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.905000Z
var-201409-0432 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x be… 2025-04-13T23:04:49.865000Z
var-201409-0424 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.823000Z
var-201409-0431 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.778000Z
var-201409-0430 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.737000Z
var-201409-0433 Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and O… 2025-04-13T23:04:49.695000Z
var-201410-0075 The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7)… 2025-04-13T23:04:48.540000Z
var-201410-0999 Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the S… 2025-04-13T23:04:47.006000Z
var-201410-1356 Cross-site scripting (XSS) vulnerability in the login page on the ZyXEL SBG-3300 Security… 2025-04-13T23:04:46.498000Z
var-201411-0044 The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) an… 2025-04-13T23:04:46.463000Z
ID Description Updated
ID Description Published Updated
suse-su-2021:0933-1 Security update for ruby2.5 2021-03-24T11:17:12Z 2021-03-24T11:17:12Z
suse-su-2021:0932-1 Security update for nghttp2 2021-03-24T11:13:09Z 2021-03-24T11:13:09Z
suse-su-2021:0931-1 Security update for nghttp2 2021-03-24T11:11:11Z 2021-03-24T11:11:11Z
suse-su-2021:0930-1 Security update for nghttp2 2021-03-24T11:09:32Z 2021-03-24T11:09:32Z
suse-su-2021:0929-1 Security update for wavpack 2021-03-24T11:08:30Z 2021-03-24T11:08:30Z
suse-su-2021:0928-1 Security update for sudo 2021-03-24T11:06:27Z 2021-03-24T11:06:27Z
suse-su-2021:0906-1 Security update for SUSE Manager Server 4.1 2021-03-19T15:18:39Z 2021-03-19T15:18:39Z
suse-su-2021:0891-1 Security update for evolution-data-server 2021-03-19T14:52:37Z 2021-03-19T14:52:37Z
suse-su-2021:0890-1 Security update for glib2 2021-03-19T14:52:12Z 2021-03-19T14:52:12Z
suse-su-2021:14670-1 Security update for openssl 2021-03-19T14:50:22Z 2021-03-19T14:50:22Z
suse-su-2021:0887-1 Security update for python36 2021-03-19T14:49:25Z 2021-03-19T14:49:25Z
suse-su-2021:0886-1 Security update for python3 2021-03-19T14:49:11Z 2021-03-19T14:49:11Z
suse-su-2021:0885-1 Security update for evolution-data-server 2021-03-19T14:48:30Z 2021-03-19T14:48:30Z
suse-su-2021:14669-1 Security update for wavpack 2021-03-19T14:48:23Z 2021-03-19T14:48:23Z
suse-su-2021:0869-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2) 2021-03-17T16:28:03Z 2021-03-17T16:28:03Z
suse-su-2021:0868-1 Security update for the Linux Kernel (Live Patch 18 for SLE 15) 2021-03-17T16:26:31Z 2021-03-17T16:26:31Z
suse-su-2021:0853-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) 2021-03-17T16:25:54Z 2021-03-17T16:25:54Z
suse-su-2021:0859-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) 2021-03-17T16:25:35Z 2021-03-17T16:25:35Z
suse-su-2021:0818-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) 2021-03-17T16:24:38Z 2021-03-17T16:24:38Z
suse-su-2021:0809-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) 2021-03-17T16:24:32Z 2021-03-17T16:24:32Z
suse-su-2021:0864-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) 2021-03-17T16:24:26Z 2021-03-17T16:24:26Z
suse-su-2021:0849-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2) 2021-03-17T16:24:20Z 2021-03-17T16:24:20Z
suse-su-2021:0842-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2) 2021-03-17T16:24:08Z 2021-03-17T16:24:08Z
suse-su-2021:0841-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP2) 2021-03-17T16:23:07Z 2021-03-17T16:23:07Z
suse-su-2021:0840-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2) 2021-03-17T16:22:57Z 2021-03-17T16:22:57Z
suse-su-2021:0870-1 Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) 2021-03-17T16:16:01Z 2021-03-17T16:16:01Z
suse-su-2021:0835-1 Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) 2021-03-17T16:14:13Z 2021-03-17T16:14:13Z
suse-su-2021:0826-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP4) 2021-03-17T16:13:56Z 2021-03-17T16:13:56Z
suse-su-2021:0823-1 Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP4) 2021-03-17T16:13:37Z 2021-03-17T16:13:37Z
suse-su-2021:0808-1 Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP5) 2021-03-17T16:10:29Z 2021-03-17T16:10:29Z
ID Description Published Updated
cnvd-2024-45897 Mattermost未授权访问漏洞 2024-09-29 2024-11-26
cnvd-2024-45893 Google Pixel输入验证错误漏洞(CNVD-2024-45893) 2024-10-31 2024-11-26
cnvd-2024-45892 Google Pixel权限提升漏洞(CNVD-2024-45892) 2024-10-31 2024-11-26
cnvd-2024-45891 Google Pixel内存错误引用漏洞 2024-10-31 2024-11-26
cnvd-2024-45890 Google Pixel virtio_ring.h文件整数溢出漏洞 2024-10-31 2024-11-26
cnvd-2024-45889 Google Pixel trusty_shared_memory_manager.cc文件缓冲区溢出漏洞 2024-10-31 2024-11-26
cnvd-2024-45888 Google Pixel syscall.c文件缓冲区溢出漏洞 2024-10-31 2024-11-26
cnvd-2024-45887 Google Pixel sms_CellBroadcast.c文件缓冲区溢出漏洞 2024-10-31 2024-11-26
cnvd-2024-45886 Google Pixel protocolmiscmiscadapter.cpp文件缓冲区溢出漏洞 2024-10-31 2024-11-26
cnvd-2024-45516 用友网络科技股份有限公司用友NC Cloud存在信息泄露漏洞 2024-11-11 2024-11-26
cnvd-2024-45323 Microsoft LightGBM远程代码执行漏洞 2024-11-15 2024-11-26
cnvd-2024-45909 Linux kernel越界写入漏洞(CNVD-2024-45909) 2024-08-20 2024-11-25
cnvd-2024-45908 Linux kernel空指针解引用漏洞(CNVD-2024-45908) 2024-08-20 2024-11-25
cnvd-2024-45907 Linux kernel空指针解引用漏洞(CNVD-2024-45907) 2024-08-20 2024-11-25
cnvd-2024-45906 Linux kernel空指针解引用漏洞(CNVD-2024-45906) 2024-08-20 2024-11-25
cnvd-2024-45905 Linux kernel空指针解引用漏洞(CNVD-2024-45905) 2024-08-20 2024-11-25
cnvd-2024-45904 Linux kernel空指针解引用漏洞(CNVD-2024-45904) 2024-02-23 2024-11-25
cnvd-2024-45903 Linux kernel越界读取漏洞(CNVD-2024-45903) 2024-02-23 2024-11-25
cnvd-2024-45902 Linux kernel空指针解引用漏洞(CNVD-2024-45902) 2024-02-23 2024-11-25
cnvd-2024-45901 Linux kernel越界写入漏洞(CNVD-2024-45901) 2024-02-23 2024-11-25
cnvd-2024-45880 Mozilla多款产品类型混淆漏洞 2024-08-14 2024-11-25
cnvd-2024-45879 Mozilla多款产品释放后重用漏洞(CNVD-2024-45879) 2024-08-14 2024-11-25
cnvd-2024-45806 Tenda AC10U堆栈缓冲区溢出漏洞(CNVD-2024-45806) 2024-03-26 2024-11-22
cnvd-2024-45805 OneBlog跨站脚本漏洞 2024-03-22 2024-11-22
cnvd-2024-45618 致远OA存在命令执行漏洞(CNVD-2024-45618) 2024-09-03 2024-11-22
cnvd-2024-45324 Oracle MySQL存在未明漏洞(CNVD-2024-45324) 2024-10-23 2024-11-22
cnvd-2024-45322 Microsoft Windows Hyper-V拒绝服务漏洞(CNVD-2024-45322) 2024-11-15 2024-11-22
cnvd-2024-45321 Microsoft Windows Hyper-V Shared Virtual Disk权限提升漏洞 2024-11-15 2024-11-22
cnvd-2024-45320 Microsoft Exchange Server欺骗漏洞(CNVD-2024-45320) 2024-11-15 2024-11-22
cnvd-2024-45319 Microsoft Excel远程代码执行漏洞(CNVD-2024-45319) 2024-11-15 2024-11-22
ID Description Published Updated
certa-2011-avi-406 Vulnérabilité dans Cisco ASR 9000 Series Routers 2011-07-21T00:00:00.000000 2011-07-21T00:00:00.000000
certa-2011-avi-404 Vulnérabilités dans les produits Cisco SA 500 Series Security Appliances 2011-07-21T00:00:00.000000 2011-07-21T00:00:00.000000
certa-2011-avi-403 Multiples vulnérabilités dans Safari 2011-07-21T00:00:00.000000 2011-07-21T00:00:00.000000
certa-2011-avi-402 Vulnérabilités dans IBM WebSphere 2011-07-21T00:00:00.000000 2011-07-21T00:00:00.000000
certa-2011-avi-407 Vulnérabilité dans CA Gateway Security and Total Defense 2011-07-20T00:00:00.000000 2011-07-20T00:00:00.000000
certa-2011-avi-401 Vulnérabilité dans JBoss 2011-07-20T00:00:00.000000 2011-07-20T00:00:00.000000
certa-2011-avi-400 Multiples vulnérabilités dans les produits Oracle 2011-07-20T00:00:00.000000 2011-07-20T00:00:00.000000
certa-2011-avi-399 Vulnérabilité de Check Point Multi-Domain Management / Provider-1 2011-07-19T00:00:00.000000 2011-07-19T00:00:00.000000
certa-2011-avi-398 Vulnérabilité dans ArcSight Connector Appliance 2011-07-19T00:00:00.000000 2011-07-19T00:00:00.000000
certa-2011-avi-397 Vulnérabilités dans Wireshark 2011-07-19T00:00:00.000000 2011-07-19T00:00:00.000000
certa-2011-avi-395 Vulnérabilités dans Apple iOS 2011-07-18T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-avi-394 Vulnérabilités dans VLC 2011-07-18T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-avi-393 Mise à jour du noyau Red Hat 2011-07-18T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-avi-392 Vulnérabilité dans BlackBerry Enterprise Server 2011-07-18T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-avi-336 Multiples vulnérabilités dans Java 2011-06-09T00:00:00.000000 2011-07-18T00:00:00.000000
certa-2011-avi-391 Vulnérabilité dans Trend Micro Control Manager 2011-07-13T00:00:00.000000 2011-07-13T00:00:00.000000
certa-2011-avi-390 Multiples vulnérabilités dans CSRSS de Microsoft Windows 2011-07-13T00:00:00.000000 2011-07-13T00:00:00.000000
certa-2011-avi-389 Vulnérabilité dans Microsoft Visio 2011-07-13T00:00:00.000000 2011-07-13T00:00:00.000000
certa-2011-avi-388 Vulnérabilités dans les pilotes en mode noyau du système Microsoft Windows 2011-07-13T00:00:00.000000 2011-07-13T00:00:00.000000
certa-2011-avi-387 Vulnérabilité dans la pile Bluetooth des systèmes Windows 2011-07-13T00:00:00.000000 2011-07-13T00:00:00.000000
certa-2011-avi-386 Vulnérabilité dans Trend Micro Control Manager 2011-07-12T00:00:00.000000 2011-07-12T00:00:00.000000
certa-2011-avi-385 Vulnérabilité dans Symantec Web Gateway 2011-07-12T00:00:00.000000 2011-07-12T00:00:00.000000
certa-2011-avi-384 Vulnérabilité dans Hitachi HiRDB 2011-07-11T00:00:00.000000 2011-07-11T00:00:00.000000
certa-2011-avi-383 Vulnérabilité dans Qemu 2011-07-07T00:00:00.000000 2011-07-07T00:00:00.000000
certa-2011-avi-382 Vulnérabilité dans Cisco Content Services Gateway 2011-07-07T00:00:00.000000 2011-07-07T00:00:00.000000
certa-2011-avi-380 Multiples vulnérabilités dans phpMyAdmin 2011-07-05T00:00:00.000000 2011-07-05T00:00:00.000000
certa-2011-avi-379 Vulnérabilité dans WordPress 2011-07-01T00:00:00.000000 2011-07-01T00:00:00.000000
certa-2011-avi-378 Vulnérabilité dans Drupal 2011-07-01T00:00:00.000000 2011-07-01T00:00:00.000000
certa-2011-avi-377 Vulnérabilité dans Zope et Plone 2011-07-01T00:00:00.000000 2011-07-01T00:00:00.000000
certa-2011-avi-376 Vulnérabilités dans Opera 2011-07-01T00:00:00.000000 2011-07-01T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated