Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-33206 |
7.8 (3.1)
|
NVIDIA NSIGHT Graphics for Linux contains a vulne… |
NVIDIA |
NSIGHT Graphics |
2026-01-14T18:30:41.061Z | 2026-01-15T04:56:05.628Z |
| CVE-2025-66516 |
8.4 (3.1)
|
Apache Tika core, Apache Tika parsers, Apache Tika PDF… |
Apache Software Foundation |
Apache Tika core |
2025-12-04T16:17:24.980Z | 2026-01-15T04:56:01.082Z |
| CVE-2026-21287 |
7.8 (3.1)
|
Substance3D - Stager | Use After Free (CWE-416) |
Adobe |
Substance3D - Stager |
2026-01-13T19:44:45.957Z | 2026-01-15T04:55:59.459Z |
| CVE-2026-23574 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:08.745Z | |
| CVE-2026-23575 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:08.303Z | |
| CVE-2026-23576 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:07.854Z | |
| CVE-2026-23577 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:07.411Z | |
| CVE-2026-23578 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:06.967Z | |
| CVE-2026-23579 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:06.514Z | |
| CVE-2026-23580 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:06.047Z | |
| CVE-2026-23581 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:05.587Z | |
| CVE-2026-23582 |
N/A
|
Not used | N/A | N/A | 2026-01-15T03:55:05.073Z | |
| CVE-2025-58318 |
5.8 (4.0)
|
DIAView - Authentication Bypass Vulnerability |
Delta Electronics |
DIAView |
2025-09-01T07:23:20.880Z | 2026-01-15T02:23:12.087Z |
| CVE-2025-66176 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the de… |
Hikvision |
DS-K1T331 |
2026-01-13T01:47:27.191Z | 2026-01-15T01:56:32.572Z |
| CVE-2025-68963 |
5.7 (3.1)
|
Man-in-the-middle attack vulnerability in the Clo… |
Huawei |
HarmonyOS |
2026-01-14T02:31:32.979Z | 2026-01-14T23:35:36.785Z |
| CVE-2025-68967 |
5.7 (3.1)
|
Vulnerability of improper permission control in t… |
Huawei |
HarmonyOS |
2026-01-14T02:16:57.372Z | 2026-01-14T23:35:23.930Z |
| CVE-2025-68956 |
8 (3.1)
|
Multi-thread race condition vulnerability in the … |
Huawei |
HarmonyOS |
2026-01-14T01:56:39.093Z | 2026-01-14T23:35:11.781Z |
| CVE-2025-68955 |
8 (3.1)
|
Multi-thread race condition vulnerability in the … |
Huawei |
HarmonyOS |
2026-01-14T01:51:42.163Z | 2026-01-14T23:34:57.517Z |
| CVE-2025-12053 |
7.8 (3.1)
|
egwindrvx64.sys is potentially vulnerable to a buffer … |
Insyde Software |
InsydeH2O tools |
2026-01-14T01:27:11.791Z | 2026-01-14T23:34:48.257Z |
| CVE-2025-12052 |
7.8 (3.1)
|
egwindrv.sys is potentially vulnerable to a buffer overflow. |
Insyde Software |
InsydeH2O tools |
2026-01-14T01:23:54.933Z | 2026-01-14T23:27:53.305Z |
| CVE-2025-12051 |
7.8 (3.1)
|
H2OFFT64.sys is potentially vulnerable to a buffer overflow. |
Insyde Software |
InsydeH2O tools |
2026-01-14T01:17:54.753Z | 2026-01-14T23:27:15.424Z |
| CVE-2025-12050 |
7.8 (3.1)
|
In H2OFFT32.sys is potentially vulnerable to a buffer … |
Insyde Software |
InsydeH2O tools |
2026-01-14T01:13:33.407Z | 2026-01-14T23:26:28.947Z |
| CVE-2026-22869 |
8.9 (4.0)
|
Eigent Allows Arbitrary Code Execution via pull_reques… |
eigent-ai |
eigent |
2026-01-13T20:38:42.662Z | 2026-01-14T23:26:18.334Z |
| CVE-2026-22868 |
7.1 (4.0)
|
go-ethereum has a DoS via malicious p2p message |
ethereum |
go-ethereum |
2026-01-13T20:27:15.698Z | 2026-01-14T23:26:09.865Z |
| CVE-2025-12533 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-14T22:19:29.979Z | |
| CVE-2026-0812 |
4.4 (3.1)
|
LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) … |
guillaumev |
LinkedIn SC |
2026-01-14T06:40:05.145Z | 2026-01-14T21:47:06.478Z |
| CVE-2025-14502 |
9.8 (3.1)
|
News and Blog Designer Bundle <= 1.1 - Unauthenticated… |
vaghasia3 |
News and Blog Designer Bundle |
2026-01-14T05:28:13.366Z | 2026-01-14T21:36:48.570Z |
| CVE-2025-55462 |
6.5 (3.1)
|
A CORS misconfiguration in Eramba Community and E… |
n/a |
n/a |
2026-01-13T00:00:00.000Z | 2026-01-14T21:30:01.077Z |
| CVE-2025-71166 |
4.8 (4.0)
|
Typesetter CMS Reflected XSS via Move Message Handling |
Typesetter |
Typesetter |
2026-01-14T18:28:40.633Z | 2026-01-14T21:21:08.961Z |
| CVE-2025-71165 |
4.8 (4.0)
|
Typesetter CMS Reflected XSS via Status.php |
Typesetter |
Typesetter |
2026-01-14T18:28:21.375Z | 2026-01-14T21:20:28.046Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-49361 |
8.1 (3.1)
|
WordPress Mamita theme <= 1.0.9 - Local File Inclusion… |
AncoraThemes |
Mamita |
2025-12-18T07:21:41.475Z | 2026-01-20T14:28:06.975Z |
| CVE-2025-49360 |
8.1 (3.1)
|
WordPress Militarology theme <= 1.0.15 - Local File In… |
AncoraThemes |
Militarology |
2025-12-18T07:21:41.272Z | 2026-01-20T14:28:07.077Z |
| CVE-2025-49359 |
8.1 (3.1)
|
WordPress ShieldGroup theme <= 2.13 - Local File Inclu… |
AncoraThemes |
ShieldGroup |
2025-12-18T07:21:41.066Z | 2026-01-20T14:28:07.156Z |
| CVE-2025-49358 |
6.5 (3.1)
|
WordPress Content Fetcher plugin <= 1.1 - Cross Site S… |
Ruhul Amin |
Content Fetcher |
2025-12-31T12:01:15.789Z | 2026-01-20T14:28:06.987Z |
| CVE-2025-49357 |
6.5 (3.1)
|
WordPress Audiomack plugin <= 1.4.8 - Cross Site Scrip… |
Audiomack |
Audiomack |
2025-12-31T13:04:24.047Z | 2026-01-20T14:28:07.026Z |
| CVE-2025-49356 |
4.3 (3.1)
|
WordPress Orders Chat for WooCommerce plugin <= 1.2.0 … |
Mykola Lukin |
Orders Chat for WooCommerce |
2025-12-31T16:07:40.281Z | 2026-01-20T14:28:06.970Z |
| CVE-2025-49355 |
5.9 (3.1)
|
WordPress Accessibility Press plugin <= 1.0.2 - Cross … |
ikaes |
Accessibility Press |
2025-12-31T17:21:50.962Z | 2026-01-20T14:28:06.856Z |
| CVE-2025-49354 |
7.1 (3.1)
|
WordPress Recent Posts From Each Category plugin <= 1.… |
Mindstien Technologies |
Recent Posts From Each Category |
2025-12-31T05:30:25.381Z | 2026-01-20T14:28:06.822Z |
| CVE-2025-49353 |
7.1 (3.1)
|
WordPress Noindex by Path plugin <= 1.0 - Cross Site R… |
Marcin Kijak |
Noindex by Path |
2025-12-31T05:36:42.895Z | 2026-01-20T14:28:06.786Z |
| CVE-2025-49352 |
4.3 (3.1)
|
WordPress Order Cancellation & Returns for WooCommerce… |
YoOhw Studio |
Order Cancellation & Returns for WooCommerce |
2025-12-31T16:25:44.989Z | 2026-01-20T14:28:06.781Z |
| CVE-2025-49351 |
7.1 (3.1)
|
WordPress Create Posts & Terms plugin <= 1.3.1 - Cross… |
Valentin Agachi |
Create Posts & Terms |
2025-12-09T14:52:18.391Z | 2026-01-20T14:28:06.640Z |
| CVE-2025-49350 |
4.3 (3.1)
|
WordPress Actionwear products sync plugin <= 2.3.3 - B… |
marcoingraiti |
Actionwear products sync |
2025-12-09T14:52:18.182Z | 2026-01-20T14:28:06.748Z |
| CVE-2025-49349 |
5.3 (3.1)
|
WordPress Reuters Direct plugin <= 3.0.0 - Broken Acce… |
Reuters News Agency |
Reuters Direct |
2025-12-31T14:48:34.082Z | 2026-01-20T14:28:06.662Z |
| CVE-2025-49348 |
5.3 (3.1)
|
WordPress Hype plugin <= 1.0.5 - Broken Access Control… |
Hype |
Hype |
2025-12-09T14:52:17.974Z | 2026-01-20T14:28:06.689Z |
| CVE-2025-49347 |
7.1 (3.1)
|
WordPress WP sIFR plugin <= 0.6.8.1 - Cross Site Reque… |
Jupitercow |
WP sIFR |
2025-12-09T14:52:17.791Z | 2026-01-20T14:28:06.607Z |
| CVE-2025-49346 |
7.1 (3.1)
|
WordPress Simple Archive Generator plugin <= 5.2 - Cro… |
Peter Sterling |
Simple Archive Generator |
2025-12-31T04:37:01.172Z | 2026-01-20T14:28:06.500Z |
| CVE-2025-49345 |
7.1 (3.1)
|
WordPress WP-EasyArchives plugin <= 3.1.2 - Cross Site… |
mg12 |
WP-EasyArchives |
2025-12-31T05:23:28.075Z | 2026-01-20T14:28:06.856Z |
| CVE-2025-49344 |
7.1 (3.1)
|
WordPress SensitiveTagCloud plugin <= 1.4.1 - Cross Si… |
Rene Ade |
SensitiveTagCloud |
2025-12-31T05:25:58.689Z | 2026-01-20T14:28:06.405Z |
| CVE-2025-49343 |
7.1 (3.1)
|
WordPress Social Profilr plugin <= 1.0 - Cross Site Re… |
Socialprofilr |
Social Profilr |
2025-12-31T05:28:06.720Z | 2026-01-20T14:28:06.765Z |
| CVE-2025-49342 |
7.1 (3.1)
|
WordPress Custom Style plugin <= 1.0 - Cross Site Requ… |
Wolfgang Häfelinger |
Custom Style |
2025-12-31T05:55:53.218Z | 2026-01-20T14:28:06.843Z |
| CVE-2025-49341 |
7.1 (3.1)
|
WordPress PDF Creator Lite plugin <= 1.2 - Cross Site … |
Alex Furr |
PDF Creator Lite |
2025-12-09T14:52:17.582Z | 2026-01-20T14:28:06.561Z |
| CVE-2025-49340 |
4.3 (3.1)
|
WordPress Direct Payments WP plugin <= 1.3.0 - Sensiti… |
Digages |
Direct Payments WP |
2025-12-31T16:30:03.883Z | 2026-01-20T14:28:06.289Z |
| CVE-2025-49339 |
4.3 (3.1)
|
WordPress Direct Payments WP plugin <= 1.3.0 - Broken … |
Digages |
Direct Payments WP |
2025-12-31T16:31:22.695Z | 2026-01-20T14:28:06.329Z |
| CVE-2025-49338 |
5.3 (3.1)
|
WordPress Flowbox plugin <= 1.1.5 - Broken Access Cont… |
Flowbox |
Flowbox |
2025-12-31T15:35:54.047Z | 2026-01-20T14:28:06.489Z |
| CVE-2025-49337 |
5.9 (3.1)
|
WordPress Dashboard Beacon plugin <= 1.2.0 - Cross Sit… |
janhenckens |
Dashboard Beacon |
2025-12-31T17:21:05.083Z | 2026-01-20T14:28:06.314Z |
| CVE-2025-49334 |
5.3 (3.1)
|
WordPress MyD Delivery plugin <= 1.3.7 - Insecure Dire… |
Eduardo Villão |
MyD Delivery |
2025-12-31T15:25:23.165Z | 2026-01-20T14:28:06.300Z |
| CVE-2025-49300 |
2.7 (3.1)
|
WordPress Traveler Option Tree plugin <= 2.8 - Sensiti… |
shinetheme |
Traveler Option Tree |
2025-12-16T08:12:44.867Z | 2026-01-20T14:28:06.383Z |
| CVE-2025-49060 |
10 (3.1)
|
WordPress Wastia theme < 1.1.3 - Arbitrary File Upload… |
CMSSuperHeroes |
Wastia |
2025-10-22T14:32:08.196Z | 2026-01-20T14:28:05.987Z |
| CVE-2025-49042 |
5.9 (3.1)
|
WordPress WooCommerce plugin <= 10.0.2 - Cross Site Sc… |
Automattic |
WooCommerce |
2025-10-29T04:50:12.507Z | 2026-01-20T14:28:06.098Z |
| CVE-2025-49041 |
6.5 (3.1)
|
WordPress Get Cash plugin <= 3.2.3 - Broken Access Con… |
The African Boss |
Get Cash |
2025-12-18T07:21:40.869Z | 2026-01-20T14:28:06.017Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-48330 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:15:52.780 | 2026-01-20T15:16:31.047 |
| fkie_cve-2025-48290 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:15:52.627 | 2026-01-20T15:16:30.903 |
| fkie_cve-2025-48106 | Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora all… | 2025-10-22T15:15:34.880 | 2026-01-20T15:16:30.760 |
| fkie_cve-2025-48099 | Cross-Site Request Forgery (CSRF) vulnerability in Code Amp Search & Filter search-filter allows Cr… | 2025-10-22T15:15:34.733 | 2026-01-20T15:16:30.600 |
| fkie_cve-2025-48098 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:34.600 | 2026-01-20T15:16:30.450 |
| fkie_cve-2025-48097 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:34.467 | 2026-01-20T15:16:30.300 |
| fkie_cve-2025-48096 | Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Inc… | 2025-10-22T15:15:34.333 | 2026-01-20T15:16:30.157 |
| fkie_cve-2025-48095 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:34.210 | 2026-01-20T15:16:30.013 |
| fkie_cve-2025-48093 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:34.090 | 2026-01-20T15:16:29.843 |
| fkie_cve-2025-48092 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:33.963 | 2026-01-20T15:16:29.667 |
| fkie_cve-2025-48091 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-10-22T15:15:33.840 | 2026-01-20T15:16:28.740 |
| fkie_cve-2025-48090 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp … | 2025-11-06T16:15:52.423 | 2026-01-20T15:16:27.027 |
| fkie_cve-2025-48089 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T16:15:52.270 | 2026-01-20T15:16:26.877 |
| fkie_cve-2025-48088 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-27T03:15:50.727 | 2026-01-20T15:16:26.767 |
| fkie_cve-2025-48087 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-17T15:15:38.730 | 2026-01-20T15:16:26.650 |
| fkie_cve-2025-48086 | Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allow… | 2025-11-06T16:15:52.120 | 2026-01-20T15:16:26.520 |
| fkie_cve-2025-48085 | Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored… | 2025-11-06T16:15:51.970 | 2026-01-20T15:16:26.377 |
| fkie_cve-2025-48083 | Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allow… | 2025-11-06T16:15:51.810 | 2026-01-20T15:16:26.243 |
| fkie_cve-2025-48082 | Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner … | 2025-10-22T15:15:33.707 | 2026-01-20T15:16:26.110 |
| fkie_cve-2025-48078 | Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows… | 2025-11-06T16:15:51.670 | 2026-01-20T15:16:25.983 |
| fkie_cve-2025-48077 | Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows… | 2025-11-06T16:15:51.513 | 2026-01-20T15:16:25.853 |
| fkie_cve-2025-47588 | Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing … | 2025-11-06T16:15:51.363 | 2026-01-20T15:16:25.713 |
| fkie_cve-2025-47566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.650 | 2026-01-20T15:16:25.607 |
| fkie_cve-2025-46255 | Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functional… | 2026-01-05T17:15:45.480 | 2026-01-20T15:16:25.347 |
| fkie_cve-2025-39561 | Missing Authorization vulnerability in Marketing Fire, LLC LoginWP - Pro allows Accessing Functiona… | 2026-01-05T17:15:45.330 | 2026-01-20T15:16:24.937 |
| fkie_cve-2025-39534 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:33.580 | 2026-01-20T15:16:24.800 |
| fkie_cve-2025-39497 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-05T17:15:45.183 | 2026-01-20T15:16:24.693 |
| fkie_cve-2025-39484 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-05T17:15:45.033 | 2026-01-20T15:16:24.590 |
| fkie_cve-2025-39468 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-11-06T16:15:51.210 | 2026-01-20T15:16:24.457 |
| fkie_cve-2025-39465 | Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows E… | 2025-11-06T16:15:50.700 | 2026-01-20T15:16:24.050 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xxv6-pjw8-v27v |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-wqxw-vjj4-7g6q |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-wcvw-8pq5-r4fg |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-vg4x-pmm9-mqxj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-rqw4-576r-54ww |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-q235-hwjx-f436 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-pqfv-rfc5-4r54 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-m9q8-8xwj-6ph5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-m9mp-6wp7-5mhj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-hv6h-7hq7-m748 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-hq79-rr54-j6q9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-fcv8-p945-xf3m |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-fc4x-6vp7-p83m |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-99q5-5c53-65m7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-98cc-h22p-phv6 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-88ff-rxm3-r7h2 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-84cx-234x-hrc4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-553r-9jvj-wpg7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-4j77-rrq4-gcj3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-3jqc-hm9w-f824 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-3f7g-7v5v-724x |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-2m37-7444-6h4c |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-29j4-9c79-qh9j |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-25x2-hxpj-w7rj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-25wf-hqcv-7qc9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:47Z | 2026-01-02T18:30:47Z |
| ghsa-xqpm-q5m2-4p39 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-x386-cr23-hmvx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-vcj3-hww5-f65q |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-v2w4-r8j7-fwjg |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-rc5m-23w4-hg97 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-1470 | Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client… | 2024-02-14T06:02:26.800564Z |
| gsd-2024-1475 | The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Informat… | 2024-02-14T06:02:26.777779Z |
| gsd-2024-1476 | The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable … | 2024-02-14T06:02:26.742794Z |
| gsd-2024-1473 | The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Info… | 2024-02-14T06:02:26.737569Z |
| gsd-2024-1483 | A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers … | 2024-02-14T06:02:26.733389Z |
| gsd-2024-1468 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable… | 2024-02-14T06:02:26.711804Z |
| gsd-2024-25972 | Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold… | 2024-02-14T06:02:26.699647Z |
| gsd-2024-25976 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.696745Z |
| gsd-2024-25949 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.695140Z |
| gsd-2024-25987 | In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect… | 2024-02-14T06:02:26.692193Z |
| gsd-2024-25960 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission … | 2024-02-14T06:02:26.688018Z |
| gsd-2024-25961 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege man… | 2024-02-14T06:02:26.678088Z |
| gsd-2024-25973 | The Frentix GmbH OpenOlat LMS is affected by multiple stored Cross-Site Scripting (XSS) v… | 2024-02-14T06:02:26.675002Z |
| gsd-2024-25957 | Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitiv… | 2024-02-14T06:02:26.671934Z |
| gsd-2024-25962 | Dell InsightIQ, version 5.0, contains an improper access control vulnerability. A remote … | 2024-02-14T06:02:26.660886Z |
| gsd-2024-25982 | The link to update all installed language packs did not include the necessary token to pr… | 2024-02-14T06:02:26.644351Z |
| gsd-2024-25975 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.643593Z |
| gsd-2024-25970 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.635238Z |
| gsd-2024-25948 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.630898Z |
| gsd-2024-25979 | The URL parameters accepted by forum search were not limited to the allowed parameters. | 2024-02-14T06:02:26.617722Z |
| gsd-2024-25977 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.607725Z |
| gsd-2024-25952 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (sy… | 2024-02-14T06:02:26.604501Z |
| gsd-2024-25944 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An… | 2024-02-14T06:02:26.603967Z |
| gsd-2024-25984 | In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a h… | 2024-02-14T06:02:26.601330Z |
| gsd-2024-25947 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.597842Z |
| gsd-2024-25965 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-14T06:02:26.587914Z |
| gsd-2024-25985 | In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. … | 2024-02-14T06:02:26.579098Z |
| gsd-2024-25980 | Separate Groups mode restrictions were not honored in the H5P attempts report, which woul… | 2024-02-14T06:02:26.569942Z |
| gsd-2024-25963 | Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken crypto… | 2024-02-14T06:02:26.567222Z |
| gsd-2024-25946 | Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. A… | 2024-02-14T06:02:26.565196Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184235 | Malicious code in modasv-kuu-bobu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184234 | Malicious code in modasv-kuu-boafu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184233 | Malicious code in modasv-kuu-boaffu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184232 | Malicious code in modasv-kuu-bo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184231 | Malicious code in modasv-kuu-bavoisybu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184230 | Malicious code in modasv-kuu-bavoisyabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184229 | Malicious code in modasv-kuu-bavoisiyabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184228 | Malicious code in modasv-kuu-bavoisbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184227 | Malicious code in modasv-kuu-bavobu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184226 | Malicious code in modasv-kuu-baobu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184225 | Malicious code in modasiv-kuvu-bavybu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184224 | Malicious code in modasiv-kuvu-bavoiybu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184223 | Malicious code in modasiv-kuvu-bavoiyabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184222 | Malicious code in modasiv-kuvu-bavoisiayabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184221 | Malicious code in modasiv-kuvu-bavoiiayabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184220 | Malicious code in modasiv-kuvu-bavoiayabu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184219 | Malicious code in modasiv-kuvu-baufbav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184218 | Malicious code in modasiv-kuvu-baubv (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184217 | Malicious code in modasiv-kuvu-baubav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184216 | Malicious code in modasiv-kuvu-bau (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184215 | Malicious code in modasiv-kuvu-baiufbav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184214 | Malicious code in modasiv-kuvu-baiucaufbav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184213 | Malicious code in modasiv-kuvu-baiucaufaibvafuiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184212 | Malicious code in modasiv-kuvu-baiucaufaibfiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184211 | Malicious code in modasiv-kuvu-baiucaufaibafuiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184210 | Malicious code in modasiv-kuvu-baiucaufaibafiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184209 | Malicious code in modasiv-kuvu-baiucaufabiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184208 | Malicious code in modasiv-kuvu-baiucaufabfiav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184207 | Malicious code in modasiv-kuvu-baiucafbav (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184206 | Malicious code in modasiv-kuvu-babu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:10951 | Red Hat Security Advisory: php:8.2 security update | 2024-12-11T16:19:05+00:00 | 2025-11-21T18:55:51+00:00 |
| rhsa-2024:10950 | Red Hat Security Advisory: php:8.1 security update | 2024-12-11T16:20:57+00:00 | 2025-11-21T18:55:50+00:00 |
| rhsa-2024:10949 | Red Hat Security Advisory: php:8.2 security update | 2024-12-11T16:16:38+00:00 | 2025-11-21T18:55:50+00:00 |
| rhsa-2024:10946 | Red Hat Security Advisory: kernel-rt security update | 2024-12-11T16:19:30+00:00 | 2025-11-21T18:55:49+00:00 |
| rhsa-2024:10945 | Red Hat Security Advisory: kernel security update | 2024-12-11T16:21:22+00:00 | 2025-11-21T18:55:49+00:00 |
| rhsa-2024:1093 | Red Hat Security Advisory: frr security update | 2024-03-05T08:23:20+00:00 | 2025-11-21T18:55:44+00:00 |
| rhsa-2024:1090 | Red Hat Security Advisory: tcpdump security update | 2024-03-05T08:24:45+00:00 | 2025-11-21T18:55:40+00:00 |
| rhsa-2024:10882 | Red Hat Security Advisory: postgresql security update | 2024-12-09T09:42:16+00:00 | 2025-11-21T18:55:39+00:00 |
| rhsa-2024:1088 | Red Hat Security Advisory: libX11 security update | 2024-03-05T08:23:55+00:00 | 2025-11-21T18:55:39+00:00 |
| rhsa-2024:10881 | Red Hat Security Advisory: firefox security update | 2024-12-09T09:29:01+00:00 | 2025-11-21T18:55:38+00:00 |
| rhsa-2024:10880 | Red Hat Security Advisory: firefox security update | 2024-12-09T09:29:21+00:00 | 2025-11-21T18:55:38+00:00 |
| rhsa-2024:10879 | Red Hat Security Advisory: postgresql:13 security update | 2024-12-09T09:29:46+00:00 | 2025-11-21T18:55:37+00:00 |
| rhsa-2024:1086 | Red Hat Security Advisory: libfastjson security update | 2024-03-05T08:23:21+00:00 | 2025-11-21T18:55:34+00:00 |
| rhsa-2024:10851 | Red Hat Security Advisory: postgresql:15 security update | 2024-12-05T15:04:27+00:00 | 2025-11-21T18:55:33+00:00 |
| rhsa-2024:1085 | Red Hat Security Advisory: squid security update | 2024-03-05T08:20:15+00:00 | 2025-11-21T18:55:33+00:00 |
| rhsa-2024:10844 | Red Hat Security Advisory: firefox security update | 2024-12-05T11:18:46+00:00 | 2025-11-21T18:55:33+00:00 |
| rhsa-2024:10849 | Red Hat Security Advisory: firefox security update | 2024-12-05T14:04:11+00:00 | 2025-11-21T18:55:32+00:00 |
| rhsa-2024:10848 | Red Hat Security Advisory: firefox security update | 2024-12-05T14:07:23+00:00 | 2025-11-21T18:55:32+00:00 |
| rhsa-2024:10846 | Red Hat Security Advisory: postgresql:13 security update | 2024-12-05T12:57:31+00:00 | 2025-11-21T18:55:31+00:00 |
| rhsa-2024:10843 | Red Hat Security Advisory: python-tornado security update | 2024-12-05T11:25:56+00:00 | 2025-11-21T18:55:31+00:00 |
| rhsa-2024:10836 | Red Hat Security Advisory: python-tornado security update | 2024-12-05T10:19:31+00:00 | 2025-11-21T18:55:28+00:00 |
| rhsa-2024:10827 | Red Hat Security Advisory: postgresql security update | 2024-12-05T06:49:16+00:00 | 2025-11-21T18:55:26+00:00 |
| rhsa-2024:1082 | Red Hat Security Advisory: gnutls security update | 2024-03-05T08:23:22+00:00 | 2025-11-21T18:55:25+00:00 |
| rhsa-2024:10815 | Red Hat Security Advisory: OpenShift Container Platform 4.13.54 packages and security update | 2024-12-12T02:25:28+00:00 | 2025-11-21T18:55:24+00:00 |
| rhsa-2024:10789 | Red Hat Security Advisory: postgresql:12 security update | 2024-12-04T10:39:18+00:00 | 2025-11-21T18:55:24+00:00 |
| rhsa-2024:1081 | Red Hat Security Advisory: sqlite security update | 2024-03-05T08:24:38+00:00 | 2025-11-21T18:55:23+00:00 |
| rhsa-2024:10807 | Red Hat Security Advisory: postgresql:15 security update | 2024-12-04T20:35:29+00:00 | 2025-11-21T18:55:23+00:00 |
| rhsa-2024:10803 | Red Hat Security Advisory: bzip2 security update | 2024-12-04T20:14:54+00:00 | 2025-11-21T18:55:21+00:00 |
| rhsa-2024:10800 | Red Hat Security Advisory: postgresql:13 security update | 2024-12-04T17:57:34+00:00 | 2025-11-21T18:55:21+00:00 |
| rhsa-2024:10770 | Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update | 2024-12-03T22:38:04+00:00 | 2025-11-21T18:55:14+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-39922 | Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file | 2021-11-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-39921 | NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file | 2021-11-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-39920 | NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file | 2021-11-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-39272 | Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances such as a certain situation with IMAP and PREAUTH. | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-39191 | URL Redirection to Untrusted Site ('Open Redirect') in mod_auth_openidc | 2021-09-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37623 | Denial of service due to infinite loop in JpegBase::printStructure (#2) | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37622 | Denial of service due to infinite loop in JpegBase::printStructure (#1) | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37621 | Denial of service due to infinite loop in Image::printIFDStructure | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37620 | Out-of-bounds read in XmpTextValue::read() | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37619 | Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37618 | Out-of-bounds read in Exiv2::Jp2Image::printStructure | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37616 | Null pointer dereference in Exiv2::Internal::resolveLens0x8ff | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-37615 | Null pointer dereference in Exiv2::Internal::resolveLens0x319 | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-36386 | report_vbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf va_list argument which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any realistic platform results in an impact beyond an inconvenience to the client user. | 2021-07-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-3588 | memory contents disclosure in cli_feat_read_cb | 2021-06-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-3482 | A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data. | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-34335 | Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-34334 | Denial of service due to integer overflow in loop counter | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-33515 | The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. | 2021-06-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-32815 | Denial of service due to assertion failure in crwimage_int.cpp | 2021-08-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-32617 | Denial of service in Exiv2 | 2021-05-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-32055 | Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default. | 2021-05-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29623 | Uninitialized variable bug in Exiv2 | 2021-05-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29473 | Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29470 | Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29464 | Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29463 | Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29458 | Out-of-bounds read in Exiv2::Internal::CrwMap::encode | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29457 | Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata | 2021-04-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| msrc_cve-2021-29157 | Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver. | 2021-06-02T00:00:00.000Z | 2022-01-19T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201411-0273 | IBM Security Network Protection 5.1 before 5.1.0.0 FP13, 5.1.1 before 5.1.1.0 FP8, 5.1.2 … | 2025-04-13T23:04:44.994000Z |
| var-201411-0460 | The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 b… | 2025-04-13T23:04:40.410000Z |
| var-201411-0459 | The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 b… | 2025-04-13T23:04:40.367000Z |
| var-201412-0131 | Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Applic… | 2025-04-13T23:04:40.274000Z |
| var-201501-0293 | The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypa… | 2025-04-13T23:04:38.359000Z |
| var-201501-0294 | The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximat… | 2025-04-13T23:04:38.316000Z |
| var-201501-0292 | The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximat… | 2025-04-13T23:04:38.272000Z |
| var-201501-0336 | The web framework in Cisco WebEx Meetings Server produces different returned messages for… | 2025-04-13T23:04:38.239000Z |
| var-201501-0399 | The CodeWrights HART Device Type Manager (DTM) library in Emerson HART DTM before 1.4.181… | 2025-04-13T23:04:38.119000Z |
| var-201501-0420 | The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X… | 2025-04-13T23:04:38.075000Z |
| var-201501-0118 | Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) w… | 2025-04-13T23:04:38.040000Z |
| var-201501-0672 | Panasonic Arbitrator Back-End Server (BES) MK 2.0 VPU before 9.3.1 build 4.08.003.0, when… | 2025-04-13T23:04:36.883000Z |
| var-201502-0096 | Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in … | 2025-04-13T23:04:36.433000Z |
| var-201502-0136 | The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier … | 2025-04-13T23:04:36.400000Z |
| var-201502-0138 | The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow… | 2025-04-13T23:04:36.365000Z |
| var-201502-0392 | Buffer overflow in the integrated web server on Siemens Ruggedcom WIN51xx devices with fi… | 2025-04-13T23:04:34.943000Z |
| var-201502-0369 | Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices wit… | 2025-04-13T23:04:34.899000Z |
| var-201502-0391 | The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware befo… | 2025-04-13T23:04:34.859000Z |
| var-201503-0155 | Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in … | 2025-04-13T23:04:29.212000Z |
| var-201503-0176 | Cisco Unified Call Manager (CM) 9.1(2.1000.28) does not properly restrict resource reques… | 2025-04-13T23:04:29.183000Z |
| var-201503-0239 | Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (d… | 2025-04-13T23:04:29.111000Z |
| var-201503-0386 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.… | 2025-04-13T23:04:28.565000Z |
| var-201503-0387 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.… | 2025-04-13T23:04:28.520000Z |
| var-201503-0383 | Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.… | 2025-04-13T23:04:28.476000Z |
| var-201503-0380 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.432000Z |
| var-201503-0384 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.386000Z |
| var-201503-0378 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.342000Z |
| var-201503-0385 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.290000Z |
| var-201503-0379 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.246000Z |
| var-201503-0381 | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows a… | 2025-04-13T23:04:28.202000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:14668-1 | Security update for php53 | 2021-03-17T16:10:18Z | 2021-03-17T16:10:18Z |
| suse-su-2021:0806-1 | Security update for crmsh | 2021-03-17T16:09:38Z | 2021-03-17T16:09:38Z |
| suse-su-2021:14667-1 | Security update for openssl1 | 2021-03-17T16:09:17Z | 2021-03-17T16:09:17Z |
| suse-su-2021:0801-1 | Security update for glib2 | 2021-03-16T11:56:31Z | 2021-03-16T11:56:31Z |
| suse-su-2021:0800-1 | Security update for velocity | 2021-03-16T11:53:12Z | 2021-03-16T11:53:12Z |
| suse-su-2021:0794-1 | Security update for python | 2021-03-16T07:44:45Z | 2021-03-16T07:44:45Z |
| suse-su-2021:0793-1 | Security update for compat-openssl098 | 2021-03-16T07:43:20Z | 2021-03-16T07:43:20Z |
| suse-su-2021:0782-1 | Security update for crmsh | 2021-03-12T16:43:48Z | 2021-03-12T16:43:48Z |
| suse-su-2021:0781-1 | Security update for crmsh | 2021-03-12T16:43:36Z | 2021-03-12T16:43:36Z |
| suse-su-2021:0779-1 | Security update for apache2 | 2021-03-12T16:43:05Z | 2021-03-12T16:43:05Z |
| suse-su-2021:0778-1 | Security update for glib2 | 2021-03-12T16:42:35Z | 2021-03-12T16:42:35Z |
| suse-su-2021:0777-1 | Security update for s390-tools | 2021-03-12T16:41:58Z | 2021-03-12T16:41:58Z |
| suse-su-2021:0776-1 | Security update for s390-tools | 2021-03-12T16:41:52Z | 2021-03-12T16:41:52Z |
| suse-su-2021:0772-1 | Security update for stunnel | 2021-03-12T10:56:28Z | 2021-03-12T10:56:28Z |
| suse-su-2021:0771-1 | Security update for crmsh | 2021-03-11T19:25:25Z | 2021-03-11T19:25:25Z |
| suse-su-2021:0770-1 | Security update for libsolv, libzypp, yast2-installation, zypper | 2021-03-11T19:24:20Z | 2021-03-11T19:24:20Z |
| suse-su-2021:0769-1 | Security update for openssl-1_0_0 | 2021-03-11T19:22:33Z | 2021-03-11T19:22:33Z |
| suse-su-2021:0768-1 | Security update for python | 2021-03-11T19:19:41Z | 2021-03-11T19:19:41Z |
| suse-su-2021:0757-1 | Security update for git | 2021-03-09T18:44:45Z | 2021-03-09T18:44:45Z |
| suse-su-2021:0756-1 | Security update for git | 2021-03-09T18:22:23Z | 2021-03-09T18:22:23Z |
| suse-su-2021:0755-1 | Security update for openssl-1_1 | 2021-03-09T16:11:34Z | 2021-03-09T16:11:34Z |
| suse-su-2021:0754-1 | Security update for openssl-1_1 | 2021-03-09T16:11:01Z | 2021-03-09T16:11:01Z |
| suse-su-2021:0753-1 | Security update for openssl-1_1 | 2021-03-09T16:10:19Z | 2021-03-09T16:10:19Z |
| suse-su-2021:0752-1 | Security update for openssl-1_1 | 2021-03-09T16:09:07Z | 2021-03-09T16:09:07Z |
| suse-su-2021:0745-1 | Security update for wpa_supplicant | 2021-03-09T15:19:10Z | 2021-03-09T15:19:10Z |
| suse-su-2021:0744-1 | Security update for the Linux Kernel | 2021-03-09T15:16:25Z | 2021-03-09T15:16:25Z |
| suse-su-2021:0743-1 | Security update for the Linux Kernel | 2021-03-09T15:15:07Z | 2021-03-09T15:15:07Z |
| suse-su-2021:0742-1 | Security update for the Linux Kernel | 2021-03-09T15:13:52Z | 2021-03-09T15:13:52Z |
| suse-su-2021:0741-1 | Security update for the Linux Kernel | 2021-03-09T15:12:24Z | 2021-03-09T15:12:24Z |
| suse-su-2021:0740-1 | Security update for the Linux Kernel | 2021-03-09T15:10:21Z | 2021-03-09T15:10:21Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-45318 | Microsoft Excel远程代码执行漏洞(CNVD-2024-45318) | 2024-11-15 | 2024-11-22 |
| cnvd-2024-45317 | Microsoft Excel远程代码执行漏洞(CNVD-2024-45317) | 2024-11-15 | 2024-11-22 |
| cnvd-2024-45316 | Microsoft Excel远程代码执行漏洞(CNVD-2024-45316) | 2024-11-15 | 2024-11-22 |
| cnvd-2024-45315 | Microsoft Excel远程代码执行漏洞(CNVD-2024-45315) | 2024-11-15 | 2024-11-22 |
| cnvd-2024-45302 | Cisco Small Business WEB接口命令注入漏洞 | 2024-10-08 | 2024-11-21 |
| cnvd-2024-45301 | Cisco Small Business WEB接口远程命令执行漏洞 | 2024-10-08 | 2024-11-21 |
| cnvd-2024-45299 | Cisco Unified Communications Manager跨站脚本漏洞 | 2024-11-11 | 2024-11-21 |
| cnvd-2024-45298 | Cisco Identity Services Engine Web接口跨站脚本漏洞(CNVD-2024-45298) | 2024-11-11 | 2024-11-21 |
| cnvd-2024-45297 | Cisco Identity Services Engine Web接口跨站脚本漏洞(CNVD-2024-45297) | 2024-11-11 | 2024-11-21 |
| cnvd-2024-45296 | Cisco Identity Services Engine Web接口跨站脚本漏洞(CNVD-2024-45296) | 2024-11-11 | 2024-11-21 |
| cnvd-2024-45295 | Cisco Identity Services Engine Web接口跨站脚本漏洞 | 2024-11-11 | 2024-11-21 |
| cnvd-2024-45294 | Cisco Unified Communications Manager信息泄露漏洞(CNVD-2024-45294) | 2024-11-13 | 2024-11-21 |
| cnvd-2024-45293 | Cisco Meeting Server信息泄露漏洞(CNVD-2024-45293) | 2024-11-13 | 2024-11-21 |
| cnvd-2024-45292 | Cisco IP Phone跨站脚本漏洞(CNVD-2024-45292) | 2024-11-13 | 2024-11-21 |
| cnvd-2024-45291 | Cisco AsyncOS跨站脚本漏洞 | 2024-11-13 | 2024-11-21 |
| cnvd-2024-45482 | 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在未授权访问漏洞 | 2024-10-18 | 2024-11-20 |
| cnvd-2024-45436 | WordPress Active Products Tables for WooCommerce plugin跨站脚本漏洞 | 2024-11-13 | 2024-11-20 |
| cnvd-2024-45435 | IBM WebSphere Application Server跨站脚本漏洞(CNVD-2024-45435) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45434 | IBM Maximo Asset Management跨站脚本漏洞(CNVD-2024-45434) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45433 | D-Link DSL6740C路径遍历漏洞 | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45432 | D-Link DSL6740C使用特权API不正确漏洞 | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45431 | D-Link DSL6740C操作系统命令注入漏洞(CNVD-2024-45431) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45430 | D-Link DSL6740C操作系统命令注入漏洞(CNVD-2024-45430) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45429 | D-Link DSL6740C操作系统命令注入漏洞(CNVD-2024-45429) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45428 | D-Link DSL6740C操作系统命令注入漏洞(CNVD-2024-45428) | 2024-11-15 | 2024-11-20 |
| cnvd-2024-45427 | D-Link DSL6740C操作系统命令注入漏洞 | 2024-11-15 | 2024-11-20 |
| cnvd-2024-46276 | Adobe Illustrator缓冲区溢出漏洞(CNVD-2024-46276) | 2024-11-15 | 2024-11-19 |
| cnvd-2024-46275 | Adobe Illustrator代码问题漏洞(CNVD-2024-46275) | 2024-11-15 | 2024-11-19 |
| cnvd-2024-46274 | Adobe Bridge缓冲区溢出漏洞(CNVD-2024-46274) | 2024-11-15 | 2024-11-19 |
| cnvd-2024-46273 | Adobe Bridge代码问题漏洞 | 2024-11-15 | 2024-11-19 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-375 | Vulnérabilité dans Novell File Reporter | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-374 | Multiples vulnérabilités dans Google Chrome | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-373 | Vulnérabilité dans libcurl | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-372 | Vulnérabilité dans des boitiers VPN Arkoon | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-371 | Vulnérabilités dans Asterisk | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-370 | Vulnérabilité dans Joomla! | 2011-06-29T00:00:00.000000 | 2011-06-29T00:00:00.000000 |
| certa-2011-avi-369 | Multiples vulnérabilités dans Mac OS X | 2011-06-24T00:00:00.000000 | 2011-06-24T00:00:00.000000 |
| certa-2011-avi-351 | Vulnérabilité dans le client SMB de Microsoft | 2011-06-15T00:00:00.000000 | 2011-06-24T00:00:00.000000 |
| certa-2011-avi-368 | Vulnérabilités dans LibreOffice | 2011-06-23T00:00:00.000000 | 2011-06-23T00:00:00.000000 |
| certa-2011-avi-367 | Vulnérabilité dans Citrix EdgeSight | 2011-06-23T00:00:00.000000 | 2011-06-23T00:00:00.000000 |
| certa-2011-avi-366 | Vulnérabilité dans DokuWiki | 2011-06-22T00:00:00.000000 | 2011-06-22T00:00:00.000000 |
| certa-2011-avi-365 | Multiples vulnérabilités dans les produits Mozilla | 2011-06-22T00:00:00.000000 | 2011-06-22T00:00:00.000000 |
| certa-2011-avi-364 | Vulnérabilité dans des produits Blue Coat | 2011-06-20T00:00:00.000000 | 2011-06-20T00:00:00.000000 |
| certa-2011-avi-363 | Vulnérabilité dans Avaya IP Office Manager | 2011-06-17T00:00:00.000000 | 2011-06-17T00:00:00.000000 |
| certa-2011-avi-362 | Vulnérabilité dans Trend Micro Control Manager | 2011-06-17T00:00:00.000000 | 2011-06-17T00:00:00.000000 |
| certa-2011-avi-361 | Vulnérabilité dans Google Chrome | 2011-06-16T00:00:00.000000 | 2011-06-16T00:00:00.000000 |
| certa-2011-avi-360 | Vulnérabilité dans le Vector Markup Language de Microsoft | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-359 | Vulnérabilité dans les services de certificats Active Directory de Microsoft Windows | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-358 | Vulnérabilités dans Microsoft Internet Explorer | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-357 | Vulnérabilité de l'éditeur XML de Microsoft | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-356 | Vulnérabilité dans le serveur SMB de Microsoft Windows | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-355 | Vulnérabilité dans Hyper-V | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-354 | Vulnérabilité dans le composant AFD de Microsoft | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-353 | Multiples vulnérabilités dans Microsoft Excel | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-352 | Vulnérabilité dans Microsoft .NET Framework | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-350 | Vulnérabilités dans le système de fichiers distribués (DFS) de Microsoft | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-349 | Vulnérabilité dans les pilotes en mode noyau du système Microsoft Windows | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-348 | Vulnérabilité dans Threat Management Gateway | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-347 | Vulnérabilité dans .NET Framework et Microsoft Silverlight | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |
| certa-2011-avi-346 | Vulnérabilité dans Microsoft OLE Automation | 2011-06-15T00:00:00.000000 | 2011-06-15T00:00:00.000000 |