Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-62002 |
4.3 (3.1)
5.3 (4.0)
|
BullWall Ransomware Containment file count detection bypass |
BullWall |
Ransomware Containment |
2025-12-18T20:33:55.098Z | 2026-01-15T19:51:15.560Z |
| CVE-2025-62001 |
8.8 (3.1)
8.7 (4.0)
|
BullWall Ransomware Containment hard-coded folder exclusions |
BullWall |
Ransomware Containment |
2025-12-18T20:32:21.620Z | 2026-01-15T19:51:00.410Z |
| CVE-2025-62000 |
7.1 (3.1)
6.9 (4.0)
|
BullWall Ransomware Containment incomplete file inspection |
BullWall |
Ransomware Containment |
2025-12-18T20:32:02.910Z | 2026-01-15T19:50:39.114Z |
| CVE-2024-48077 |
7.5 (3.1)
|
An issue in nanomq v0.22.7 allows attackers to ca… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T19:28:59.364Z |
| CVE-2026-22775 |
7.5 (3.1)
|
devalue vulnerable to denial of service due to memory/… |
sveltejs |
devalue |
2026-01-15T18:59:37.499Z | 2026-01-15T19:22:56.774Z |
| CVE-2026-22774 |
7.5 (3.1)
|
devalue vulnerable to denial of service due to memory … |
sveltejs |
devalue |
2026-01-15T18:53:21.963Z | 2026-01-15T19:16:10.500Z |
| CVE-2026-22249 |
7.1 (3.1)
|
Docmost affected by an Arbitrary File Write via Zip Im… |
docmost |
docmost |
2026-01-15T18:43:56.263Z | 2026-01-15T19:08:26.158Z |
| CVE-2026-22803 |
8.2 (4.0)
|
SvelteKit has a memory amplification DoS in Remote Fun… |
sveltejs |
kit |
2026-01-15T18:37:57.831Z | 2026-01-15T19:06:13.528Z |
| CVE-2026-23493 |
8.6 (3.1)
|
Pimcore ENV Variables and Cookie Informations are expo… |
pimcore |
pimcore |
2026-01-15T16:38:23.923Z | 2026-01-15T19:02:08.517Z |
| CVE-2025-67647 |
8.4 (4.0)
|
SvelteKit Denial of service and possible SSRF when usi… |
sveltejs |
kit |
2026-01-15T18:33:25.295Z | 2026-01-15T18:58:01.975Z |
| CVE-2025-13844 |
8.4 (4.0)
|
CWE-415: Double Free vulnerability exists that co… |
Schneider Electric |
EcoStruxure Power Build Rapsody |
2026-01-15T18:28:37.316Z | 2026-01-15T18:55:41.866Z |
| CVE-2025-13845 |
8.4 (4.0)
|
CWE-416: Use After Free vulnerability that could … |
Schneider Electric |
EcoStruxure Power Build Rapsody |
2026-01-15T18:33:23.235Z | 2026-01-15T18:54:16.308Z |
| CVE-2025-70303 |
5.5 (3.1)
|
A heap overflow in the uncv_parse_config() functi… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:49:42.651Z |
| CVE-2025-62193 |
9.3 (4.0)
9.8 (3.1)
|
NOAA PMEL Live Access Server (LAS) PyFerret command in… |
National Oceanic and Atmospheric Administration (NOAA) |
Live Access Server (LAS) |
2026-01-15T16:44:15.708Z | 2026-01-15T18:47:34.506Z |
| CVE-2025-70307 |
7.5 (3.1)
|
A stack overflow in the dump_ttxt_sample function… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:44:51.463Z |
| CVE-2025-15378 |
7.2 (3.1)
|
AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Si… |
ajseidl |
AJS Footnotes |
2026-01-14T05:28:08.511Z | 2026-01-15T18:44:14.155Z |
| CVE-2025-70305 |
5.5 (3.1)
|
A stack overflow in the dmx_saf function of GPAC … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:40:18.915Z |
| CVE-2025-70302 |
5.5 (3.1)
|
A heap overflow in the ghi_dmx_declare_opid_bin()… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:36:26.740Z |
| CVE-2026-0635 |
4.3 (3.1)
|
Responsive Accordion Slider <= 1.2.2 - Missing Authori… |
techknowprime |
Responsive Accordion Slider |
2026-01-14T05:28:08.887Z | 2026-01-15T18:33:19.942Z |
| CVE-2025-14613 |
7.2 (3.1)
|
GetContentFromURL <= 1.0 - Authenticated (Contributor+… |
daschmi |
GetContentFromURL |
2026-01-14T05:28:12.007Z | 2026-01-15T18:29:50.855Z |
| CVE-2021-47752 |
8.7 (4.0)
7.5 (3.1)
|
AWebServer GhostBuilding 18 - Denial of Service (DoS) |
Sylkat-Tools |
AWebServer GhostBuilding |
2026-01-15T15:52:02.828Z | 2026-01-15T18:27:31.113Z |
| CVE-2021-47753 |
9.3 (4.0)
9.8 (3.1)
|
phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (… |
Phpkf |
phpKF CMS |
2026-01-15T15:52:03.459Z | 2026-01-15T18:27:25.683Z |
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2021-47772 |
8.4 (4.0)
9.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - Buffer… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:11.805Z | 2026-01-15T18:26:45.942Z |
| CVE-2021-47773 |
8.5 (4.0)
7.8 (3.1)
|
Dynojet Power Core 2.3.0 - Unquoted Service Path |
Dynojet |
Dynojet Power Core |
2026-01-15T15:52:12.232Z | 2026-01-15T18:26:39.411Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2025-9014 |
6.3 (4.0)
|
Null Pointer Dereference Vulnerability on TL-WR841N |
TP-Link Systems Inc. |
TL-WR841N v14 |
2026-01-15T17:36:06.139Z | 2026-01-15T18:26:28.154Z |
| CVE-2025-70299 |
6.5 (3.1)
|
A heap overflow in the avi_parse_input_file() fun… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:23:54.704Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-53238 |
7.1 (3.1)
|
WordPress Toast Mobile Menu plugin <= 1.0.7 - Cross Si… |
Toast Plugins |
Toast Mobile Menu |
2025-10-22T14:32:30.376Z | 2026-01-20T14:28:09.178Z |
| CVE-2025-53236 |
6.3 (3.1)
|
WordPress UDesign Core plugin <= 4.14.0 - Broken Acces… |
AndonDesign |
UDesign Core |
2025-10-22T14:32:29.996Z | 2026-01-20T14:28:09.128Z |
| CVE-2025-53235 |
7.1 (3.1)
|
WordPress Easy Social plugin <= 1.3 - Cross Site Scrip… |
osuthorpe |
Easy Social |
2025-12-31T20:11:25.669Z | 2026-01-20T14:28:09.199Z |
| CVE-2025-53234 |
7.1 (3.1)
|
WordPress UDesign Core plugin <= 4.14.0 - Cross Site S… |
AndonDesign |
UDesign Core |
2025-10-22T14:32:29.678Z | 2026-01-20T14:28:09.019Z |
| CVE-2025-53232 |
5.8 (3.1)
|
WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Da… |
inkthemes |
WP Gmail SMTP |
2025-10-22T14:32:29.356Z | 2026-01-20T14:28:09.018Z |
| CVE-2025-53229 |
7.1 (3.1)
|
WordPress RockON DJ theme <= 3.3 - Reflected Cross Sit… |
kamleshyadav |
RockON DJ |
2025-10-22T14:32:29.122Z | 2026-01-20T14:28:08.975Z |
| CVE-2025-53218 |
5.8 (3.1)
|
WordPress AppExperts plugin <= 1.4.5 - Sensitive Data … |
Saad Iqbal |
AppExperts |
2025-10-22T14:32:28.882Z | 2026-01-20T14:28:09.009Z |
| CVE-2025-53214 |
9.1 (3.1)
|
WordPress Sertifier Certificate & Badge Maker plugin <… |
sertifier |
Sertifier Certificate & Badge Maker |
2025-11-06T15:53:58.037Z | 2026-01-20T14:28:09.163Z |
| CVE-2025-52835 |
9.6 (3.1)
|
WordPress WING WordPress Migrator plugin <= 1.1.9 - Cr… |
ConoHa by GMO |
WING WordPress Migrator |
2025-12-30T16:48:13.719Z | 2026-01-20T14:28:08.992Z |
| CVE-2025-52773 |
9.8 (3.1)
|
WordPress HieCOR Payment Gateway plugin plugin <= 1.5.… |
hiecor |
HieCOR Payment Gateway Plugin |
2025-11-06T15:53:57.496Z | 2026-01-20T14:28:08.714Z |
| CVE-2025-52770 |
7.1 (3.1)
|
WordPress Hello Followers plugin <= 2.5 - Cross Site S… |
appscreo |
Hello Followers |
2025-10-22T14:32:28.679Z | 2026-01-20T14:28:08.839Z |
| CVE-2025-52768 |
8.1 (3.1)
|
WordPress Faith & Hope theme <= 2.13.0 - Local File In… |
AncoraThemes |
Faith & Hope |
2025-12-18T07:21:45.204Z | 2026-01-20T14:28:08.823Z |
| CVE-2025-52764 |
6.1 (3.1)
|
WordPress flexoslider plugin <= 1.0004 - Cross Site Sc… |
marielav |
flexoslider |
2025-11-06T15:53:56.937Z | 2026-01-20T14:28:09.106Z |
| CVE-2025-52763 |
7.1 (3.1)
|
WordPress Nifty Backups plugin <= 1.08 - Cross Site Sc… |
NickDuncan |
Nifty Backups |
2025-10-22T14:32:28.478Z | 2026-01-20T14:28:08.616Z |
| CVE-2025-52760 |
6.1 (3.1)
|
WordPress MultiSite Clone Duplicator plugin <= 1.5.3 -… |
Globalis |
MultiSite Clone Duplicator |
2025-10-22T14:32:28.248Z | 2026-01-20T14:28:08.789Z |
| CVE-2025-52758 |
9.1 (3.1)
|
WordPress Zippy plugin <= 1.7.0 - Arbitrary File Uploa… |
Gesundheit Bewegt GmbH |
Zippy |
2025-10-22T14:32:27.961Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52757 |
6.3 (3.1)
|
WordPress SUMO Memberships for WooCommerce plugin <= 7… |
FantasticPlugins |
SUMO Memberships for WooCommerce |
2025-10-22T14:32:27.245Z | 2026-01-20T14:28:08.665Z |
| CVE-2025-52756 |
7.4 (3.1)
|
WordPress WP Last Modified Info plugin <= 1.9.2 - Remo… |
Sayan Datta |
WP Last Modified Info |
2025-10-22T14:32:26.710Z | 2026-01-20T14:28:08.525Z |
| CVE-2025-52755 |
7.1 (3.1)
|
WordPress Child Themes plugin <= 1.0.1 - Cross Site Sc… |
Chris Taylor |
Child Themes |
2025-10-22T14:32:26.093Z | 2026-01-20T14:28:08.903Z |
| CVE-2025-52754 |
7.1 (3.1)
|
WordPress Sello ChannelConnector plugin <= 1.6.3 - Cro… |
selloio |
Sello ChannelConnector |
2025-10-22T14:32:25.569Z | 2026-01-20T14:28:08.610Z |
| CVE-2025-52753 |
7.1 (3.1)
|
WordPress Contact Form by Supsystic plugin <= 1.7.35 -… |
supsystic |
Contact Form by Supsystic |
2025-10-22T14:32:25.219Z | 2026-01-20T14:28:09.147Z |
| CVE-2025-52752 |
6.5 (3.1)
|
WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data … |
ThemeAtelier |
IDonatePro |
2025-10-22T14:32:25.039Z | 2026-01-20T14:28:08.978Z |
| CVE-2025-52751 |
7.1 (3.1)
|
WordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Sc… |
colome |
Slide Puzzle |
2025-10-22T14:32:24.841Z | 2026-01-20T14:28:08.664Z |
| CVE-2025-52750 |
7.1 (3.1)
|
WordPress Emu2 plugin <= 0.83b - Cross Site Scripting … |
Juergen Schulze |
Emu2 |
2025-10-22T14:32:24.658Z | 2026-01-20T14:28:08.656Z |
| CVE-2025-52749 |
7.1 (3.1)
|
WordPress Uji Countdown plugin <= 2.3.3 - Cross Site S… |
Activity Track |
Uji Countdown |
2025-10-22T14:32:24.442Z | 2026-01-20T14:28:08.525Z |
| CVE-2025-52748 |
7.1 (3.1)
|
WordPress Directory Pro plugin <= 2.5.5 - Cross Site S… |
e-plugins |
Directory Pro |
2025-10-22T14:32:24.265Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52745 |
8.1 (3.1)
|
WordPress Farm Agrico theme <= 1.3.11 - Local File Inc… |
AncoraThemes |
Farm Agrico |
2025-12-18T07:21:44.978Z | 2026-01-20T14:28:08.668Z |
| CVE-2025-52743 |
7.1 (3.1)
|
WordPress oik-privacy-policy Plugin <= 1.4.9 - Cross S… |
bobbingwide |
oik-privacy-policy |
2025-10-22T14:32:24.069Z | 2026-01-20T14:28:08.836Z |
| CVE-2025-52742 |
7.1 (3.1)
|
WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting … |
Igor Benic |
Pets |
2025-10-22T14:32:23.806Z | 2026-01-20T14:28:08.492Z |
| CVE-2025-52740 |
8.8 (3.1)
|
WordPress Boldermail Plugin <= 2.4.0 - PHP Object Inje… |
Hernan Villanueva |
Boldermail |
2025-10-22T14:32:23.272Z | 2026-01-20T14:28:08.764Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-52773 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T16:15:54.933 | 2026-01-20T15:16:50.937 |
| fkie_cve-2025-52770 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:46.197 | 2026-01-20T15:16:50.807 |
| fkie_cve-2025-52768 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.903 | 2026-01-20T15:16:50.677 |
| fkie_cve-2025-52764 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-11-06T16:15:54.760 | 2026-01-20T15:16:50.547 |
| fkie_cve-2025-52763 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:46.063 | 2026-01-20T15:16:50.410 |
| fkie_cve-2025-52760 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.937 | 2026-01-20T15:16:50.283 |
| fkie_cve-2025-52758 | Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy… | 2025-10-22T15:15:45.813 | 2026-01-20T15:16:50.147 |
| fkie_cve-2025-52757 | Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomember… | 2025-10-22T15:15:45.687 | 2026-01-20T15:16:50.013 |
| fkie_cve-2025-52756 | Improper Control of Generation of Code ('Code Injection') vulnerability in Sayan Datta WP Last Modi… | 2025-10-22T15:15:45.563 | 2026-01-20T15:16:49.877 |
| fkie_cve-2025-52755 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.440 | 2026-01-20T15:16:49.743 |
| fkie_cve-2025-52754 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.313 | 2026-01-20T15:16:49.610 |
| fkie_cve-2025-52753 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:45.190 | 2026-01-20T15:16:49.493 |
| fkie_cve-2025-52752 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAt… | 2025-10-22T15:15:45.070 | 2026-01-20T15:16:49.360 |
| fkie_cve-2025-52751 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.947 | 2026-01-20T15:16:49.233 |
| fkie_cve-2025-52750 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.827 | 2026-01-20T15:16:49.107 |
| fkie_cve-2025-52749 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.710 | 2026-01-20T15:16:48.973 |
| fkie_cve-2025-52748 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.593 | 2026-01-20T15:16:48.840 |
| fkie_cve-2025-52745 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.750 | 2026-01-20T15:16:48.703 |
| fkie_cve-2025-52743 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.467 | 2026-01-20T15:16:48.567 |
| fkie_cve-2025-52742 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.340 | 2026-01-20T15:16:48.430 |
| fkie_cve-2025-52740 | Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows O… | 2025-10-22T15:15:44.087 | 2026-01-20T15:16:48.147 |
| fkie_cve-2025-52739 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.937 | 2026-01-20T15:16:48.043 |
| fkie_cve-2025-52738 | Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview all… | 2025-10-22T15:15:43.960 | 2026-01-20T15:16:47.913 |
| fkie_cve-2025-52737 | Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator al… | 2025-10-22T15:15:43.837 | 2026-01-20T15:16:47.780 |
| fkie_cve-2025-52736 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.713 | 2026-01-20T15:16:47.650 |
| fkie_cve-2025-50053 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.793 | 2026-01-20T15:16:47.220 |
| fkie_cve-2025-49992 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.280 | 2026-01-20T15:16:47.090 |
| fkie_cve-2025-49963 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.157 | 2026-01-20T15:16:46.960 |
| fkie_cve-2025-49962 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.027 | 2026-01-20T15:16:46.830 |
| fkie_cve-2025-49961 | Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploitin… | 2025-10-22T15:15:42.873 | 2026-01-20T15:16:46.700 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-m8cf-6225-ghv7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-jgvh-m2q6-8ph4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-hp65-93fc-v5j4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-g848-vc4g-j6cm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-fxqp-jg5g-w9p7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-fww8-ph5j-fj2r |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-fhj8-mjmm-vm92 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-86p7-57p9-fcx6 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-75j6-9r9p-r27w |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-458p-h259-m4hv |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-3j5v-m25j-qgxh |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-2mm8-jmc3-xxpw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-24v5-39cg-773w |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-23rg-886v-9rqm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:46Z | 2026-01-02T18:30:46Z |
| ghsa-x6rq-qpj2-x2fr |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-wgp4-749r-xqj6 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-vpc6-5mhv-38qc |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-rqx9-fwv2-rvjp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-rmmq-g2q5-r9r5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-rcwf-623f-843h |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-qwhj-pfh9-f9h4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-qgvf-9672-v9m7 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-px48-qc97-wpq9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-p49c-7p69-8j78 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-mx5c-f459-6gg2 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-mpw5-xjgm-jq99 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-mjmv-qrf5-j5p8 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-hcgf-pw6f-2gg3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-g9vp-q9pp-c6jm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-f826-p2pr-cmq9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-25915 | Server-Side Request Forgery (SSRF) vulnerability in Raaj Trambadia Pexels: Free Stock Pho… | 2024-02-13T06:02:27.033180Z |
| gsd-2024-25837 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.032889Z |
| gsd-2024-25780 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.031464Z |
| gsd-2024-25774 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.027898Z |
| gsd-2024-25866 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allo… | 2024-02-13T06:02:27.026126Z |
| gsd-2024-25758 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.025115Z |
| gsd-2024-25867 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allo… | 2024-02-13T06:02:27.024187Z |
| gsd-2024-25792 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.023895Z |
| gsd-2024-25876 | A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 all… | 2024-02-13T06:02:27.023599Z |
| gsd-2024-25747 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.022763Z |
| gsd-2024-25919 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-13T06:02:27.022470Z |
| gsd-2024-25922 | Missing Authorization vulnerability in Peach Payments Peach Payments Gateway.This issue a… | 2024-02-13T06:02:27.021762Z |
| gsd-2024-25825 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.020854Z |
| gsd-2024-25931 | Cross-Site Request Forgery (CSRF) vulnerability in Heureka Group Heureka.This issue affec… | 2024-02-13T06:02:27.019054Z |
| gsd-2024-25828 | cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php. | 2024-02-13T06:02:27.017110Z |
| gsd-2024-25751 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15… | 2024-02-13T06:02:27.016894Z |
| gsd-2024-25877 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.016599Z |
| gsd-2024-25834 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.009868Z |
| gsd-2024-25936 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-13T06:02:27.006528Z |
| gsd-2024-25801 | An arbitrary file upload vulnerability in the Add Media function of SKINsoft S-Museum v7.… | 2024-02-13T06:02:27.005203Z |
| gsd-2024-25878 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.004965Z |
| gsd-2024-25752 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.001247Z |
| gsd-2024-25784 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:27.000591Z |
| gsd-2024-25894 | ChurchCRM 5.5.0 /EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via th… | 2024-02-13T06:02:26.998416Z |
| gsd-2024-25925 | Unrestricted Upload of File with Dangerous Type vulnerability in SYSBASICS WooCommerce Ea… | 2024-02-13T06:02:26.998181Z |
| gsd-2024-25843 | In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up t… | 2024-02-13T06:02:26.996841Z |
| gsd-2024-25872 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.995741Z |
| gsd-2024-25895 | A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote att… | 2024-02-13T06:02:26.995438Z |
| gsd-2024-25776 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.995207Z |
| gsd-2024-25773 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.994504Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184069 | Malicious code in mitouko-on-lakok (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184068 | Malicious code in mitouko-on-lakoikk (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184067 | Malicious code in mitouko-on-lakoikaunoak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184066 | Malicious code in mitouko-on-lakoikaunoaak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184065 | Malicious code in mitouko-on-lakoikaunak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184064 | Malicious code in mitouko-on-lakoikauk (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184063 | Malicious code in mitouko-on-lakoikauak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184062 | Malicious code in mitouko-on-lakoikak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184061 | Malicious code in mitouko-on-lakoik (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184060 | Malicious code in mitook-oni-oldis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184059 | Malicious code in mitokok-oni-oldis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184058 | Malicious code in mitokoik-oni-oldis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184057 | Malicious code in mitokoik-oni-oladis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184056 | Malicious code in mitokoik-oni-oladips (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184055 | Malicious code in mitokoik-oni-oladinps (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184054 | Malicious code in mitokoik-oni-oladinaps (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184053 | Malicious code in mitokoik-oni-oladiaps (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184052 | Malicious code in mitoko-ontmi-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184051 | Malicious code in mitoko-ontcmi-lapiokasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184050 | Malicious code in mitoko-ontcmi-lapiokamakuasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184049 | Malicious code in mitoko-ontcmi-lapiokamakasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184048 | Malicious code in mitoko-ontcmi-lapiokamaasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184047 | Malicious code in mitoko-ontcmi-lapiokaasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184046 | Malicious code in mitoko-ontcmi-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184045 | Malicious code in mitoko-ontcami-lasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184044 | Malicious code in mitoko-ontcami-lapkasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184043 | Malicious code in mitoko-ontcami-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184042 | Malicious code in mitoko-ontcami-lapikamasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184041 | Malicious code in mitoko-ontcami-lapikamakusi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184040 | Malicious code in mitoko-ontcami-lapikamakuasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0618 | Red Hat Security Advisory: firefox security update | 2024-01-31T07:11:22+00:00 | 2025-11-21T18:53:43+00:00 |
| rhsa-2024:0617 | Red Hat Security Advisory: tigervnc security update | 2024-01-31T07:10:52+00:00 | 2025-11-21T18:53:43+00:00 |
| rhsa-2024:0604 | Red Hat Security Advisory: firefox security update | 2024-01-30T14:22:43+00:00 | 2025-11-21T18:53:43+00:00 |
| rhsa-2024:0616 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T15:25:39+00:00 | 2025-11-21T18:53:42+00:00 |
| rhsa-2024:0615 | Red Hat Security Advisory: firefox security update | 2024-01-30T15:24:38+00:00 | 2025-11-21T18:53:42+00:00 |
| rhsa-2024:0614 | Red Hat Security Advisory: tigervnc security update | 2024-01-30T15:25:28+00:00 | 2025-11-21T18:53:42+00:00 |
| rhsa-2024:0602 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T14:20:23+00:00 | 2025-11-21T18:53:42+00:00 |
| rhsa-2024:0609 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T14:55:57+00:00 | 2025-11-21T18:53:41+00:00 |
| rhsa-2024:0608 | Red Hat Security Advisory: firefox security update | 2024-01-30T14:55:43+00:00 | 2025-11-21T18:53:41+00:00 |
| rhsa-2024:0607 | Red Hat Security Advisory: tigervnc security update | 2024-01-30T14:56:13+00:00 | 2025-11-21T18:53:41+00:00 |
| rhsa-2024:0605 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T14:22:48+00:00 | 2025-11-21T18:53:41+00:00 |
| rhsa-2024:0603 | Red Hat Security Advisory: firefox security update | 2024-01-30T14:20:16+00:00 | 2025-11-21T18:53:40+00:00 |
| rhsa-2024:0601 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T14:22:04+00:00 | 2025-11-21T18:53:39+00:00 |
| rhsa-2024:0600 | Red Hat Security Advisory: firefox security update | 2024-01-30T14:23:03+00:00 | 2025-11-21T18:53:39+00:00 |
| rhsa-2024:0598 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T14:14:28+00:00 | 2025-11-21T18:53:39+00:00 |
| rhsa-2024:0597 | Red Hat Security Advisory: tigervnc security update | 2024-01-30T14:14:03+00:00 | 2025-11-21T18:53:38+00:00 |
| rhsa-2024:0596 | Red Hat Security Advisory: firefox security update | 2024-01-30T14:13:23+00:00 | 2025-11-21T18:53:38+00:00 |
| rhsa-2024:0589 | Red Hat Security Advisory: sqlite security update | 2024-01-30T13:26:08+00:00 | 2025-11-21T18:53:38+00:00 |
| rhsa-2024:0584 | Red Hat Security Advisory: libmicrohttpd security update | 2024-01-30T13:28:36+00:00 | 2025-11-21T18:53:36+00:00 |
| rhsa-2024:0582 | Red Hat Security Advisory: rpm security update | 2024-01-30T13:30:28+00:00 | 2025-11-21T18:53:36+00:00 |
| rhsa-2024:0580 | Red Hat Security Advisory: samba security update | 2024-01-30T13:27:25+00:00 | 2025-11-21T18:53:35+00:00 |
| rhsa-2024:0579 | Red Hat Security Advisory: perl-HTTP-Tiny security update | 2024-01-30T13:29:53+00:00 | 2025-11-21T18:53:35+00:00 |
| rhsa-2024:0578 | Red Hat Security Advisory: c-ares security update | 2024-01-30T13:30:53+00:00 | 2025-11-21T18:53:35+00:00 |
| rhsa-2024:0577 | Red Hat Security Advisory: linux-firmware security update | 2024-01-30T13:25:14+00:00 | 2025-11-21T18:53:34+00:00 |
| rhsa-2024:0576 | Red Hat Security Advisory: avahi security update | 2024-01-30T13:26:38+00:00 | 2025-11-21T18:53:34+00:00 |
| rhsa-2024:0574 | Red Hat Security Advisory: frr security update | 2024-01-30T13:24:13+00:00 | 2025-11-21T18:53:33+00:00 |
| rhsa-2024:0573 | Red Hat Security Advisory: libfastjson security update | 2024-01-30T13:28:29+00:00 | 2025-11-21T18:53:33+00:00 |
| rhsa-2024:0571 | Red Hat Security Advisory: tcpdump security update | 2024-01-30T13:28:43+00:00 | 2025-11-21T18:53:33+00:00 |
| rhsa-2024:0533 | Red Hat Security Advisory: gnutls security update | 2024-01-29T11:46:19+00:00 | 2025-11-21T18:53:33+00:00 |
| rhsa-2024:0565 | Red Hat Security Advisory: thunderbird security update | 2024-01-30T12:33:43+00:00 | 2025-11-21T18:53:32+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-4166 | Out-of-bounds Read in vim/vim | 2021-12-02T00:00:00.000Z | 2022-01-05T00:00:00.000Z |
| msrc_cve-2021-34141 | An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless." | 2021-12-02T00:00:00.000Z | 2022-01-05T00:00:00.000Z |
| msrc_cve-2021-44733 | A use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through 5.15.11. This occurs because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object. | 2021-12-02T00:00:00.000Z | 2022-01-04T00:00:00.000Z |
| msrc_cve-2021-41496 | Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19 which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally) | 2021-12-02T00:00:00.000Z | 2021-12-28T00:00:00.000Z |
| msrc_cve-2021-4136 | Heap-based Buffer Overflow in vim/vim | 2021-12-02T00:00:00.000Z | 2021-12-28T00:00:00.000Z |
| msrc_cve-2021-44790 | Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier | 2021-12-02T00:00:00.000Z | 2021-12-23T00:00:00.000Z |
| msrc_cve-2021-44224 | Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier | 2021-12-02T00:00:00.000Z | 2021-12-23T00:00:00.000Z |
| msrc_cve-2021-41495 | Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing an error can only occur due to an exhaustion of memory. If the user can exhaust memory they are already privileged. Further it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place | 2021-12-02T00:00:00.000Z | 2021-12-23T00:00:00.000Z |
| msrc_cve-2021-45095 | pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. | 2021-12-02T00:00:00.000Z | 2021-12-21T00:00:00.000Z |
| msrc_cve-2021-45078 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699. | 2021-12-02T00:00:00.000Z | 2021-12-21T00:00:00.000Z |
| msrc_cve-2021-43818 | HTML Cleaner allows crafted and SVG embedded scripts to pass through | 2021-12-02T00:00:00.000Z | 2021-12-17T00:00:00.000Z |
| msrc_cve-2021-43527 | NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS S/MIME PKCS \#7 or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS X.509 OCSP or CRL functionality may be impacted depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However email clients and PDF viewers that use NSS for signature verification such as Thunderbird LibreOffice Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1. | 2021-12-02T00:00:00.000Z | 2021-12-17T00:00:00.000Z |
| msrc_cve-2021-37322 | GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c. | 2021-11-02T00:00:00.000Z | 2021-12-17T00:00:00.000Z |
| msrc_cve-2021-44225 | In Keepalived through 2.2.4 the D-Bus policy does not sufficiently restrict the message destination allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43976 | In the Linux kernel through 5.15.2 mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43975 | In the Linux kernel through 5.15.2 hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43784 | Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration | 2021-12-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43618 | GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input leading to a segmentation fault on 32-bit platforms. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43523 | In uClibc and uClibc-ng before 1.0.39 incorrect handling of special characters in domain names returned by DNS servers via gethostbyname getaddrinfo gethostbyaddr and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution XSS applications crashes etc.). In other words a validation step which is expected in any stub resolver does not occur. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43396 | In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34 remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43389 | An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43267 | An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-43057 | An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42771 | Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal leading to code execution. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42739 | The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c because avc_ca_pmt mishandles bounds checking. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42386 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42385 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42384 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42382 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42381 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201510-0371 | The DoIdentityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x befo… | 2025-04-13T23:03:46.690000Z |
| var-201510-0336 | The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and … | 2025-04-13T23:03:46.652000Z |
| var-201510-0342 | The ANSendForSharedReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x… | 2025-04-13T23:03:46.615000Z |
| var-201510-0097 | Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x bef… | 2025-04-13T23:03:46.583000Z |
| var-201510-0361 | Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x b… | 2025-04-13T23:03:46.547000Z |
| var-201510-0348 | The addForegroundSprite function in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x… | 2025-04-13T23:03:46.509000Z |
| var-201510-0367 | The ANSendForReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x befor… | 2025-04-13T23:03:46.472000Z |
| var-201510-0364 | The signatureSetSeedValue method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x… | 2025-04-13T23:03:46.428000Z |
| var-201510-0363 | Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, … | 2025-04-13T23:03:46.395000Z |
| var-201510-0045 | The ANSendForBrowserReview method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.… | 2025-04-13T23:03:46.358000Z |
| var-201510-0337 | The ANRunSharedReviewEmailStep method in Adobe Reader and Acrobat 10.x before 10.1.16 and… | 2025-04-13T23:03:46.321000Z |
| var-201510-0353 | The animations property implementation in Adobe Reader and Acrobat 10.x before 10.1.16 an… | 2025-04-13T23:03:46.283000Z |
| var-201510-0402 | Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat… | 2025-04-13T23:03:46.247000Z |
| var-201510-0375 | The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.… | 2025-04-13T23:03:46.209000Z |
| var-201511-0082 | IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.… | 2025-04-13T23:03:44.982000Z |
| var-201511-0229 | Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a … | 2025-04-13T23:03:39.183000Z |
| var-201510-0431 | Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and b… | 2025-04-13T23:03:39.131000Z |
| var-201510-0050 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:39.080000Z |
| var-201511-0096 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:39.029000Z |
| var-201510-0429 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.979000Z |
| var-201511-0282 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.925000Z |
| var-201511-0095 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.870000Z |
| var-201511-0247 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.815000Z |
| var-201510-0428 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.759000Z |
| var-201511-0097 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.710000Z |
| var-201510-0420 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.666000Z |
| var-201510-0058 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:38.620000Z |
| var-201511-0253 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.571000Z |
| var-201510-0425 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.529000Z |
| var-201510-0056 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.479000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:0342-1 | Security update for python-urllib3 | 2021-02-08T16:40:14Z | 2021-02-08T16:40:14Z |
| suse-su-2021:0341-1 | Security update for python-urllib3 | 2021-02-08T16:40:07Z | 2021-02-08T16:40:07Z |
| suse-su-2021:0323-1 | Security update for nutch-core | 2021-02-08T09:30:11Z | 2021-02-08T09:30:11Z |
| suse-su-2021:0300-1 | Security update for openvswitch | 2021-02-03T18:53:09Z | 2021-02-03T18:53:09Z |
| suse-su-2021:0299-1 | Security update for python-urllib3 | 2021-02-03T18:51:58Z | 2021-02-03T18:51:58Z |
| suse-su-2021:0298-1 | Security update for openvswitch | 2021-02-03T18:51:10Z | 2021-02-03T18:51:10Z |
| suse-su-2021:0297-1 | Security update for openvswitch | 2021-02-03T18:51:02Z | 2021-02-03T18:51:02Z |
| suse-su-2021:0286-1 | Security update for cups | 2021-02-02T12:09:38Z | 2021-02-02T12:09:38Z |
| suse-su-2021:0285-1 | Security update for cups | 2021-02-02T12:09:05Z | 2021-02-02T12:09:05Z |
| suse-su-2021:0284-1 | Security update for openvswitch | 2021-02-02T12:08:46Z | 2021-02-02T12:08:46Z |
| suse-su-2021:0277-1 | Security update for openvswitch | 2021-02-02T07:46:48Z | 2021-02-02T07:46:48Z |
| suse-su-2021:0276-1 | Security update for openvswitch | 2021-02-02T07:46:11Z | 2021-02-02T07:46:11Z |
| suse-su-2021:0275-1 | Security update for java-11-openjdk | 2021-02-02T07:45:48Z | 2021-02-02T07:45:48Z |
| suse-su-2021:0263-1 | Security update for terraform | 2021-02-01T14:01:06Z | 2021-02-01T14:01:06Z |
| suse-su-2021:0259-1 | Security update for MozillaFirefox | 2021-02-01T13:50:41Z | 2021-02-01T13:50:41Z |
| suse-su-2021:0258-1 | Security update for openvswitch | 2021-02-01T13:46:57Z | 2021-02-01T13:46:57Z |
| suse-su-2021:0257-1 | Security update for MozillaThunderbird | 2021-02-01T13:46:08Z | 2021-02-01T13:46:08Z |
| suse-su-2021:0251-1 | Security update for rubygem-nokogiri | 2021-02-01T10:20:05Z | 2021-02-01T10:20:05Z |
| suse-su-2021:0246-1 | Security update for MozillaFirefox | 2021-01-29T12:13:47Z | 2021-01-29T12:13:47Z |
| suse-su-2021:0245-1 | Security update for MozillaThunderbird | 2021-01-29T09:13:49Z | 2021-01-29T09:13:49Z |
| suse-su-2021:0243-1 | Security update for jackson-databind | 2021-01-29T08:37:34Z | 2021-01-29T08:37:34Z |
| suse-su-2021:14609-1 | Security update for MozillaFirefox | 2021-01-29T08:37:16Z | 2021-01-29T08:37:16Z |
| suse-su-2021:0241-1 | Security update for MozillaFirefox | 2021-01-29T08:36:32Z | 2021-01-29T08:36:32Z |
| suse-su-2021:0223-1 | Security update for go1.15 | 2021-01-28T09:11:12Z | 2021-01-28T09:11:12Z |
| suse-su-2021:0232-1 | Security update for sudo | 2021-01-27T09:29:32Z | 2021-01-27T09:29:32Z |
| suse-su-2021:0227-1 | Security update for sudo | 2021-01-26T18:23:08Z | 2021-01-26T18:23:08Z |
| suse-su-2021:0226-1 | Security update for sudo | 2021-01-26T18:21:06Z | 2021-01-26T18:21:06Z |
| suse-su-2021:0225-1 | Security update for sudo | 2021-01-26T18:20:20Z | 2021-01-26T18:20:20Z |
| suse-su-2021:0224-1 | Security update for nodejs8 | 2021-01-26T14:08:54Z | 2021-01-26T14:08:54Z |
| suse-su-2021:0222-1 | Security update for go1.14 | 2021-01-26T14:05:32Z | 2021-01-26T14:05:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-44508 | Tenda AC15 SetOnlineDevName栈溢出漏洞 | 2024-11-04 | 2024-11-07 |
| cnvd-2024-44507 | Tenda AC15 SetDlnaCfg栈溢出漏洞 | 2024-11-04 | 2024-11-07 |
| cnvd-2024-44496 | Cisco Expressway Series命令注入漏洞 | 2024-10-17 | 2024-11-07 |
| cnvd-2024-43267 | 天津南大通用数据技术股份有限公司GBase 8c存在多个二进制漏洞 | 2024-09-24 | 2024-11-07 |
| cnvd-2024-43261 | 北京宏景世纪软件股份有限公司人力资源信息管理系统存在SQL注入漏洞（CNVD-2024-43261） | 2024-09-23 | 2024-11-07 |
| cnvd-2024-43205 | Cisco Firepower Management Center跨站脚本漏洞（CNVD-2024-43205） | 2024-10-30 | 2024-11-07 |
| cnvd-2024-43204 | Cisco Firepower Management Center跨站脚本漏洞（CNVD-2024-43204） | 2024-10-30 | 2024-11-07 |
| cnvd-2024-43203 | Cisco Firepower Management Center跨站脚本漏洞（CNVD-2024-43203） | 2024-10-30 | 2024-11-07 |
| cnvd-2024-43202 | Cisco Firepower Management Center跨站脚本漏洞（CNVD-2024-43202） | 2024-10-30 | 2024-11-07 |
| cnvd-2024-43201 | Cisco Firepower Management Center跨站脚本漏洞（CNVD-2024-43201） | 2024-10-30 | 2024-11-07 |
| cnvd-2024-43183 | IBM TXSeries for Multiplatforms存在未明漏洞 | 2024-11-05 | 2024-11-07 |
| cnvd-2024-43182 | IBM TXSeries for Multiplatforms存在未明漏洞（CNVD-2024-43182） | 2024-11-05 | 2024-11-07 |
| cnvd-2024-43038 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-43038） | 2024-05-22 | 2024-11-07 |
| cnvd-2024-43037 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-43037） | 2024-05-22 | 2024-11-07 |
| cnvd-2024-43036 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-43036） | 2024-05-22 | 2024-11-07 |
| cnvd-2024-42124 | 北京亚控科技发展有限公司Swagger KingDBConnector存在信息泄露漏洞 | 2024-09-19 | 2024-11-07 |
| cnvd-2024-44820 | Google Nest信任管理问题漏洞 | 2024-10-17 | 2024-11-06 |
| cnvd-2024-44506 | QEMU资源管理错误漏洞（CNVD-2024-44506） | 2024-11-05 | 2024-11-06 |
| cnvd-2024-44495 | Cisco Secure Firewall Management Center SQL注入漏洞 | 2024-10-25 | 2024-11-06 |
| cnvd-2024-44494 | Cisco Adaptive Security Appliance SSH远程命令注入漏洞 | 2024-10-25 | 2024-11-06 |
| cnvd-2024-44493 | Cisco Secure Firewall Management Center命令注入漏洞 | 2024-10-28 | 2024-11-06 |
| cnvd-2024-44492 | Cisco Firepower Management Center WEB管理跨站脚本漏洞 | 2024-10-28 | 2024-11-06 |
| cnvd-2024-44491 | Cisco Secure Firewall Management Center特权提升漏洞 | 2024-10-28 | 2024-11-06 |
| cnvd-2024-44490 | Cisco Secure Firewall Management Center命令执行漏洞 | 2024-10-31 | 2024-11-06 |
| cnvd-2024-44489 | Cisco Secure Firewall Management Center服务器端请求伪造漏洞 | 2024-10-31 | 2024-11-06 |
| cnvd-2024-44488 | Cisco Firepower Threat Defense信任管理问漏洞 | 2024-10-31 | 2024-11-06 |
| cnvd-2024-44487 | Cisco Firepower Threat Defense代码问题漏洞（CNVD-2024-44487） | 2024-10-31 | 2024-11-06 |
| cnvd-2024-43215 | AutoCMS SQL注入漏洞 | 2024-09-11 | 2024-11-06 |
| cnvd-2024-43214 | EmpireCMS SQL注入漏洞（CNVD-2024-4321448） | 2023-12-18 | 2024-11-06 |
| cnvd-2024-43213 | ZZCMS SQL注入漏洞（CNVD-2024-43213） | 2024-10-31 | 2024-11-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-203 | Vulnérabilité dans le serveur SMB de Microsoft Windows | 2011-04-13T00:00:00.000000 | 2011-04-13T00:00:00.000000 |
| certa-2011-avi-202 | Vulnérabilités dans le client SMB de Microsoft | 2011-04-13T00:00:00.000000 | 2011-04-13T00:00:00.000000 |
| certa-2011-avi-201 | Vulnérabilités dans Internet Explorer | 2011-04-13T00:00:00.000000 | 2011-04-13T00:00:00.000000 |
| certa-2011-avi-200 | Vulnérabilité dans Novell ZENworks Configuration Management | 2011-04-12T00:00:00.000000 | 2011-04-12T00:00:00.000000 |
| certa-2011-avi-199 | Vulnérabilité dans McAfee Firewall Reporter | 2011-04-12T00:00:00.000000 | 2011-04-12T00:00:00.000000 |
| certa-2011-avi-198 | Vulnérabilités dans RoundCube | 2011-04-11T00:00:00.000000 | 2011-04-11T00:00:00.000000 |
| certa-2011-avi-197 | Vulnérabilité dans IBM Virtual I/O Server | 2011-04-11T00:00:00.000000 | 2011-04-11T00:00:00.000000 |
| certa-2011-avi-195 | Vulnérabilités dans IBM WEBi | 2011-04-07T00:00:00.000000 | 2011-04-07T00:00:00.000000 |
| certa-2011-avi-194 | Vulnérabilité dans Oracle Solaris | 2011-04-06T00:00:00.000000 | 2011-04-06T00:00:00.000000 |
| certa-2011-avi-193 | Vulnérabilité dans la glibc | 2011-04-06T00:00:00.000000 | 2011-04-06T00:00:00.000000 |
| certa-2011-avi-192 | Vulnérabilités dans WordPress | 2011-04-06T00:00:00.000000 | 2011-04-06T00:00:00.000000 |
| certa-2011-avi-191 | Vulnérabilité dans xrdb (X.Org) | 2011-04-06T00:00:00.000000 | 2011-04-06T00:00:00.000000 |
| certa-2011-avi-189 | Vulnérabilités dans logrotate | 2011-04-05T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-188 | Vulnérabilité dans Novell File Reporter | 2011-04-05T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-187 | Vulnérabilité dans Joomla! | 2011-04-05T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-186 | Vulnérabilité dans HP Network Node Manager i | 2011-04-05T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-185 | Vulnérabilités dans HP Operations for Unix | 2011-04-05T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-164 | Vulnérabilité dans Xpdf sur Linux | 2011-03-23T00:00:00.000000 | 2011-04-05T00:00:00.000000 |
| certa-2011-avi-184 | Vulnérabilité dans IBM AIX | 2011-04-04T00:00:00.000000 | 2011-04-04T00:00:00.000000 |
| certa-2011-avi-183 | Vulnérabilité dans Claroline | 2011-04-04T00:00:00.000000 | 2011-04-04T00:00:00.000000 |
| certa-2011-avi-182 | Vulnérabilité dans Juniper IVE | 2011-04-01T00:00:00.000000 | 2011-04-01T00:00:00.000000 |
| certa-2011-avi-181 | Vulnérabilité dans Cisco NAC Guest Server | 2011-03-31T00:00:00.000000 | 2011-03-31T00:00:00.000000 |
| certa-2011-avi-180 | Vulnérabilité dans Cisco Secure ACS | 2011-03-31T00:00:00.000000 | 2011-03-31T00:00:00.000000 |
| certa-2011-avi-179 | Vulnérabilité dans EMC Data Protection Advisor Collector | 2011-03-30T00:00:00.000000 | 2011-03-30T00:00:00.000000 |
| certa-2011-avi-178 | Vulnérabilité dans VMWare | 2011-03-30T00:00:00.000000 | 2011-03-30T00:00:00.000000 |
| certa-2011-avi-177 | Vulnérabilité dans Pure-FTPd | 2011-03-30T00:00:00.000000 | 2011-03-30T00:00:00.000000 |
| certa-2011-avi-175 | Vulnérabilité dans Xerox WorkCentre (Web) | 2011-03-29T00:00:00.000000 | 2011-03-29T00:00:00.000000 |
| certa-2011-avi-174 | Vulnérabilité dans Xerox WorkCentre (SMB) | 2011-03-29T00:00:00.000000 | 2011-03-29T00:00:00.000000 |
| certa-2011-avi-173 | Vulnérabilité dans IBM Rational | 2011-03-29T00:00:00.000000 | 2011-03-29T00:00:00.000000 |
| certa-2011-avi-172 | Vulnérabilité dans Zend Server | 2011-03-29T00:00:00.000000 | 2011-03-29T00:00:00.000000 |