Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-70305 |
5.5 (3.1)
|
A stack overflow in the dmx_saf function of GPAC … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:40:18.915Z |
| CVE-2025-70302 |
5.5 (3.1)
|
A heap overflow in the ghi_dmx_declare_opid_bin()… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:36:26.740Z |
| CVE-2026-0635 |
4.3 (3.1)
|
Responsive Accordion Slider <= 1.2.2 - Missing Authori… |
techknowprime |
Responsive Accordion Slider |
2026-01-14T05:28:08.887Z | 2026-01-15T18:33:19.942Z |
| CVE-2025-14613 |
7.2 (3.1)
|
GetContentFromURL <= 1.0 - Authenticated (Contributor+… |
daschmi |
GetContentFromURL |
2026-01-14T05:28:12.007Z | 2026-01-15T18:29:50.855Z |
| CVE-2021-47752 |
8.7 (4.0)
7.5 (3.1)
|
AWebServer GhostBuilding 18 - Denial of Service (DoS) |
Sylkat-Tools |
AWebServer GhostBuilding |
2026-01-15T15:52:02.828Z | 2026-01-15T18:27:31.113Z |
| CVE-2021-47753 |
9.3 (4.0)
9.8 (3.1)
|
phpKF CMS 3.00 Beta y6 - Remote Code Execution (RCE) (… |
Phpkf |
phpKF CMS |
2026-01-15T15:52:03.459Z | 2026-01-15T18:27:25.683Z |
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2021-47772 |
8.4 (4.0)
9.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - Buffer… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:11.805Z | 2026-01-15T18:26:45.942Z |
| CVE-2021-47773 |
8.5 (4.0)
7.8 (3.1)
|
Dynojet Power Core 2.3.0 - Unquoted Service Path |
Dynojet |
Dynojet Power Core |
2026-01-15T15:52:12.232Z | 2026-01-15T18:26:39.411Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2025-9014 |
6.3 (4.0)
|
Null Pointer Dereference Vulnerability on TL-WR841N |
TP-Link Systems Inc. |
TL-WR841N v14 |
2026-01-15T17:36:06.139Z | 2026-01-15T18:26:28.154Z |
| CVE-2025-70299 |
6.5 (3.1)
|
A heap overflow in the avi_parse_input_file() fun… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T18:23:54.704Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| CVE-2026-23494 |
4.3 (3.1)
|
Pimcore is Missing Function Level Authorization on "St… |
pimcore |
pimcore |
2026-01-15T16:52:58.729Z | 2026-01-15T18:08:13.110Z |
| CVE-2025-12178 |
6.4 (3.1)
|
SpiceForms Form Builder <= 1.0 - Authenticated (Contri… |
aankit |
SpiceForms Form Builder |
2026-01-14T05:28:12.421Z | 2026-01-15T18:00:12.192Z |
| CVE-2021-47757 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - 'plugin' Re… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:04.994Z | 2026-01-15T17:57:01.374Z |
| CVE-2021-47758 |
8.7 (4.0)
8.8 (3.1)
|
Chikitsa Patient Management System 2.0.2 - Remote Code… |
dharashah |
Chikitsa Patient Management System |
2026-01-15T15:52:05.437Z | 2026-01-15T17:26:55.158Z |
| CVE-2025-14854 |
5.4 (3.1)
|
WP-CRM System – Manage Clients and Projects <= 3.4.5 -… |
nofearinc |
WP-CRM System – Manage Clients and Projects |
2026-01-14T05:28:12.974Z | 2026-01-15T17:26:26.971Z |
| CVE-2025-68492 |
4.2 (3.0)
2.3 (4.0)
|
Chainlit versions prior to 2.8.5 contain an autho… |
Chainlit |
Chainlit |
2026-01-14T06:27:14.846Z | 2026-01-15T17:24:34.226Z |
| CVE-2026-0739 |
4.4 (3.1)
|
WMF Mobile Redirector <= 1.2 - Authenticated (Administ… |
webbu |
WMF Mobile Redirector |
2026-01-14T06:40:04.088Z | 2026-01-15T17:23:06.026Z |
| CVE-2026-23495 |
4.3 (3.1)
|
Pimcore's Admin Classic Bundle is Missing Function Lev… |
pimcore |
pimcore |
2026-01-15T16:47:07.114Z | 2026-01-15T17:09:32.298Z |
| CVE-2025-70298 |
8.2 (3.1)
|
GPAC v2.4.0 was discovered to contain an out-of-b… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T17:05:50.552Z |
| CVE-2026-22915 |
4.3 (3.1)
|
An attacker with low privileges may be able to re… |
SICK AG |
TDC-X401GL |
2026-01-15T13:06:44.048Z | 2026-01-15T17:03:58.009Z |
| CVE-2021-47759 |
6.8 (4.0)
6.2 (3.1)
|
MTPutty 1.0.1.21 - SSH Password Disclosure |
Ttyplus |
MTPutty |
2026-01-15T15:52:05.935Z | 2026-01-15T17:02:16.609Z |
| CVE-2025-70656 |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T17:01:05.154Z |
| CVE-2025-37165 |
7.5 (3.1)
|
Exposure of VLAN information in unintended network int… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:40:56.557Z | 2026-01-15T16:56:25.947Z |
| CVE-2026-22916 |
4.3 (3.1)
|
An attacker with low privileges may be able to tr… |
SICK AG |
TDC-X401GL |
2026-01-15T13:07:07.335Z | 2026-01-15T16:55:42.554Z |
| CVE-2021-47761 |
8.5 (4.0)
7.8 (3.1)
|
MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Es… |
Millegpg |
MilleGPG5 |
2026-01-15T15:52:06.931Z | 2026-01-15T16:53:31.329Z |
| CVE-2021-47762 |
8.5 (4.0)
7.8 (3.1)
|
HTTPDebuggerPro 9.11 - Unquoted Service Path |
Httpdebugger |
HTTPDebuggerPro |
2026-01-15T15:52:07.433Z | 2026-01-15T16:52:37.108Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-52743 |
7.1 (3.1)
|
WordPress oik-privacy-policy Plugin <= 1.4.9 - Cross S… |
bobbingwide |
oik-privacy-policy |
2025-10-22T14:32:24.069Z | 2026-01-20T14:28:08.836Z |
| CVE-2025-52742 |
7.1 (3.1)
|
WordPress Pets Plugin <= 1.4.1 - Cross Site Scripting … |
Igor Benic |
Pets |
2025-10-22T14:32:23.806Z | 2026-01-20T14:28:08.492Z |
| CVE-2025-52740 |
8.8 (3.1)
|
WordPress Boldermail Plugin <= 2.4.0 - PHP Object Inje… |
Hernan Villanueva |
Boldermail |
2025-10-22T14:32:23.272Z | 2026-01-20T14:28:08.764Z |
| CVE-2025-52739 |
7.1 (3.1)
|
WordPress Sala theme <= 1.1.3 - Cross Site Scripting (… |
uxper |
Sala |
2025-12-31T20:10:29.616Z | 2026-01-20T14:28:08.584Z |
| CVE-2025-52738 |
6.5 (3.1)
|
WordPress Wikipedia Preview Plugin <= 1.15.0 - Broken … |
Wikimedia Foundation |
Wikipedia Preview |
2025-10-22T14:32:23.016Z | 2026-01-20T14:28:08.230Z |
| CVE-2025-52737 |
8.8 (3.1)
|
WordPress WP Store Locator plugin <= 2.2.260 - PHP Obj… |
Tijmen Smit |
WP Store Locator |
2025-10-22T14:32:22.788Z | 2026-01-20T14:28:08.263Z |
| CVE-2025-52736 |
7.1 (3.1)
|
WordPress Finale Lite Plugin <= 2.20.0 - Cross Site Sc… |
Daman Jeet |
Finale Lite |
2025-10-22T14:32:22.566Z | 2026-01-20T14:28:08.492Z |
| CVE-2025-50053 |
7.1 (3.1)
|
WordPress Blappsta Mobile App Plugin – Your native, mo… |
nebelhorn |
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App |
2025-12-31T20:09:03.413Z | 2026-01-20T14:28:08.302Z |
| CVE-2025-49992 |
7.1 (3.1)
|
WordPress LearnPress Export Import Plugin <= 4.0.9 - C… |
ThimPress |
LearnPress Export Import |
2025-10-22T14:32:21.965Z | 2026-01-20T14:28:08.282Z |
| CVE-2025-49963 |
7.1 (3.1)
|
WordPress Simple Stripe Checkout plugin <= 1.1.28 - Cr… |
growniche |
Simple Stripe Checkout |
2025-10-22T14:32:21.783Z | 2026-01-20T14:28:08.285Z |
| CVE-2025-49962 |
7.1 (3.1)
|
WordPress bbPress Notify plugin <= 2.19.4 - Cross Site… |
useStrict |
bbPress Notify |
2025-10-22T14:32:21.576Z | 2026-01-20T14:28:08.371Z |
| CVE-2025-49961 |
6.3 (3.1)
|
WordPress Breeze Checkout plugin <= 1.4.0 - Broken Acc… |
Breeze Team |
Breeze Checkout |
2025-10-22T14:32:21.376Z | 2026-01-20T14:28:08.365Z |
| CVE-2025-49960 |
6.5 (3.1)
|
WordPress LeadBI Plugin for WordPress plugin <= 1.7 - … |
leadbi |
LeadBI Plugin for WordPress |
2025-10-22T14:32:21.173Z | 2026-01-20T14:28:08.311Z |
| CVE-2025-49959 |
7.1 (3.1)
|
WordPress bbPress Move Topics plugin <= 1.1.6 - Cross … |
Pascal Casier |
bbPress Move Topics |
2025-10-22T14:32:20.965Z | 2026-01-20T14:28:08.267Z |
| CVE-2025-49958 |
7.1 (3.1)
|
WordPress Robokassa payment gateway for Woocommerce pl… |
robokassa |
Robokassa payment gateway for Woocommerce |
2025-10-22T14:32:20.661Z | 2026-01-20T14:28:08.417Z |
| CVE-2025-49957 |
7.1 (3.1)
|
WordPress Email Attachment by Order Status & Products … |
Weboccult Technologies Pvt Ltd |
Email Attachment by Order Status & Products |
2025-10-22T14:32:20.403Z | 2026-01-20T14:28:07.920Z |
| CVE-2025-49956 |
7.1 (3.1)
|
WordPress Fade Slider Plugin <= 2.5 - Cross Site Scrip… |
Anandaraj Balu |
Fade Slider |
2025-10-22T14:32:20.199Z | 2026-01-20T14:28:07.931Z |
| CVE-2025-49955 |
7.1 (3.1)
|
WordPress WP Smart Flexslider Plugin <= 2.5 - Cross Si… |
Rajan Vijayan |
WP Smart Flexslider |
2025-10-22T14:32:20.010Z | 2026-01-20T14:28:07.948Z |
| CVE-2025-49954 |
7.1 (3.1)
|
WordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Sit… |
mithra62 |
WP-Click-Tracker |
2025-10-22T14:32:19.827Z | 2026-01-20T14:28:07.823Z |
| CVE-2025-49953 |
7.1 (3.1)
|
WordPress ShareBang, Ultimate Social Share Buttons for… |
themeinity |
ShareBang, Ultimate Social Share Buttons for WordPress |
2025-10-22T14:32:19.616Z | 2026-01-20T14:28:07.826Z |
| CVE-2025-49952 |
6.3 (3.1)
|
WordPress Houzez Theme <= 4.1.1 - Insecure Direct Obje… |
favethemes |
Houzez |
2025-10-22T14:32:19.320Z | 2026-01-20T14:28:07.804Z |
| CVE-2025-49951 |
7.1 (3.1)
|
WordPress gAppointments Plugin <= 1.14.1 - Cross Site … |
wpcrunch |
gAppointments |
2025-10-22T14:32:19.132Z | 2026-01-20T14:28:07.591Z |
| CVE-2025-49950 |
7.3 (3.1)
|
WordPress Official Integration for Billingo Plugin <= … |
billingo |
Official Integration for Billingo |
2025-10-22T14:32:18.932Z | 2026-01-20T14:28:07.828Z |
| CVE-2025-49949 |
5.5 (3.1)
|
WordPress Templazee plugin <= 1.0.2 - Broken Access Co… |
templazee |
Templazee |
2025-10-22T14:32:18.660Z | 2026-01-20T14:28:07.803Z |
| CVE-2025-49948 |
7.1 (3.1)
|
WordPress WP Super Edit plugin <= 2.5.4 - Cross Site S… |
Ahmad Awais |
WP Super Edit |
2025-10-22T14:32:18.319Z | 2026-01-20T14:28:07.687Z |
| CVE-2025-49947 |
7.1 (3.1)
|
WordPress WooCommerce Registration Fields Plugin - Cus… |
extendons |
WooCommerce Registration Fields Plugin - Custom Signup Fields |
2025-10-22T14:32:18.131Z | 2026-01-20T14:28:07.883Z |
| CVE-2025-49946 |
7.1 (3.1)
|
WordPress Auto Login After Registration plugin <= 1.0.… |
Cynob IT Consultancy |
Auto Login After Registration |
2025-10-22T14:32:17.913Z | 2026-01-20T14:28:08.228Z |
| CVE-2025-49945 |
7.1 (3.1)
|
WordPress Shortcode Generator plugin <= 1.1 - Cross Si… |
kylegetson |
Shortcode Generator |
2025-10-22T14:32:17.676Z | 2026-01-20T14:28:07.632Z |
| CVE-2025-49944 |
7.1 (3.1)
|
WordPress WPCode Content Ratio plugin <= 2.0 - Cross S… |
Jonatan Jumbert |
WPCode Content Ratio |
2025-10-22T14:32:17.445Z | 2026-01-20T14:28:07.648Z |
| CVE-2025-49943 |
8.1 (3.1)
|
WordPress Femme theme <= 1.3.11 - Local File Inclusion… |
AncoraThemes |
Femme |
2025-12-18T07:21:44.794Z | 2026-01-20T14:28:08.066Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-52743 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.467 | 2026-01-20T15:16:48.567 |
| fkie_cve-2025-52742 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:44.340 | 2026-01-20T15:16:48.430 |
| fkie_cve-2025-52740 | Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows O… | 2025-10-22T15:15:44.087 | 2026-01-20T15:16:48.147 |
| fkie_cve-2025-52739 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.937 | 2026-01-20T15:16:48.043 |
| fkie_cve-2025-52738 | Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview all… | 2025-10-22T15:15:43.960 | 2026-01-20T15:16:47.913 |
| fkie_cve-2025-52737 | Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator al… | 2025-10-22T15:15:43.837 | 2026-01-20T15:16:47.780 |
| fkie_cve-2025-52736 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.713 | 2026-01-20T15:16:47.650 |
| fkie_cve-2025-50053 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-31T20:15:42.793 | 2026-01-20T15:16:47.220 |
| fkie_cve-2025-49992 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.280 | 2026-01-20T15:16:47.090 |
| fkie_cve-2025-49963 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.157 | 2026-01-20T15:16:46.960 |
| fkie_cve-2025-49962 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:43.027 | 2026-01-20T15:16:46.830 |
| fkie_cve-2025-49961 | Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploitin… | 2025-10-22T15:15:42.873 | 2026-01-20T15:16:46.700 |
| fkie_cve-2025-49960 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.720 | 2026-01-20T15:16:46.563 |
| fkie_cve-2025-49959 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.567 | 2026-01-20T15:16:46.423 |
| fkie_cve-2025-49958 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.410 | 2026-01-20T15:16:46.290 |
| fkie_cve-2025-49957 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.270 | 2026-01-20T15:16:46.157 |
| fkie_cve-2025-49956 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.140 | 2026-01-20T15:16:46.027 |
| fkie_cve-2025-49955 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:42.013 | 2026-01-20T15:16:45.900 |
| fkie_cve-2025-49954 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:41.873 | 2026-01-20T15:16:45.767 |
| fkie_cve-2025-49953 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:41.747 | 2026-01-20T15:16:45.630 |
| fkie_cve-2025-49952 | Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows E… | 2025-10-22T15:15:41.620 | 2026-01-20T15:16:45.503 |
| fkie_cve-2025-49951 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:41.497 | 2026-01-20T15:16:45.370 |
| fkie_cve-2025-49950 | Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows P… | 2025-10-22T15:15:41.373 | 2026-01-20T15:16:45.240 |
| fkie_cve-2025-49949 | Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly … | 2025-10-22T15:15:41.250 | 2026-01-20T15:16:45.100 |
| fkie_cve-2025-49948 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:41.107 | 2026-01-20T15:16:44.963 |
| fkie_cve-2025-49947 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.963 | 2026-01-20T15:16:44.830 |
| fkie_cve-2025-49946 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.840 | 2026-01-20T15:16:44.690 |
| fkie_cve-2025-49945 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.713 | 2026-01-20T15:16:44.560 |
| fkie_cve-2025-49944 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.570 | 2026-01-20T15:16:44.437 |
| fkie_cve-2025-49943 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.620 | 2026-01-20T15:16:44.310 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hcgf-pw6f-2gg3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-g9vp-q9pp-c6jm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-f826-p2pr-cmq9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-9cm7-3gxf-mxmv |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-9242-64hj-7xqm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-8wxv-8f6m-wphx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-8gxc-5qm7-v9fc |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-79jv-6p4v-w8f4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-6hf3-65r9-h336 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-656g-g3h3-c6pp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-5675-jp36-cf2v |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-4r37-98w6-79rh |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-3x54-355x-xrjh |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-3j5x-62x7-5pmq |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-37fc-f69r-mp86 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-3644-5f4r-32pc |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-2hhp-wrh5-g527 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-25h9-m345-xpmx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:45Z | 2026-01-02T18:30:45Z |
| ghsa-wgf9-xhfx-6m44 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-rm78-hhwp-7mmw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:44Z |
| ghsa-p4cr-8v36-2r6h |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-p298-q57f-9cwh |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-mx3c-j595-qjgw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-hr76-j5j3-pfpm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-grc7-2p6r-7mfm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-g8rg-q7jc-fjjv |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-fv82-483f-4cwq |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-cvvm-j5f4-6j2g |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-cq7m-p3f2-mvc5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-77vg-f853-9pxx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-25862 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.992515Z |
| gsd-2024-25928 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-02-13T06:02:26.990779Z |
| gsd-2024-25929 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.988464Z |
| gsd-2024-25889 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.988168Z |
| gsd-2024-25777 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.985363Z |
| gsd-2024-25840 | In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanage… | 2024-02-13T06:02:26.983670Z |
| gsd-2024-25881 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.983096Z |
| gsd-2024-25873 | Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author te… | 2024-02-13T06:02:26.981549Z |
| gsd-2024-25893 | ChurchCRM 5.5.0 FRCertificates.php is vulnerable to Blind SQL Injection (Time-based) via … | 2024-02-13T06:02:26.981233Z |
| gsd-2024-25868 | A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in P… | 2024-02-13T06:02:26.980074Z |
| gsd-2024-25757 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.979759Z |
| gsd-2024-25578 | MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of prope… | 2024-02-13T06:02:26.972371Z |
| gsd-2024-25910 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-02-13T06:02:26.966471Z |
| gsd-2024-25841 | In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.… | 2024-02-13T06:02:26.965207Z |
| gsd-2024-25791 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.963831Z |
| gsd-2024-25799 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.963543Z |
| gsd-2024-25864 | Server Side Request Forgery (SSRF) vulnerability in Friendica versions after v.2023.12, a… | 2024-02-13T06:02:26.963280Z |
| gsd-2024-25870 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.958596Z |
| gsd-2024-25760 | yasm 1.3.0 contains a memory leak via /yasm/tools/genmacro/genmacro.c. | 2024-02-13T06:02:26.956204Z |
| gsd-2024-25795 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.952918Z |
| gsd-2024-25762 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.951521Z |
| gsd-2024-25798 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.950966Z |
| gsd-2024-25845 | In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpres… | 2024-02-13T06:02:26.942011Z |
| gsd-2024-25778 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.940800Z |
| gsd-2024-25745 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.939507Z |
| gsd-2024-25882 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.938257Z |
| gsd-2024-25898 | A XSS vulnerability was found in the ChurchCRM v.5.5.0 functionality, edit your event, wh… | 2024-02-13T06:02:26.937469Z |
| gsd-2024-25818 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.936168Z |
| gsd-2024-25924 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-02-13T06:02:26.935471Z |
| gsd-2024-25892 | ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via t… | 2024-02-13T06:02:26.935192Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184039 | Malicious code in mitoko-ontcami-lapasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184038 | Malicious code in mitoko-ontcami-laoi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184037 | Malicious code in mitoko-ontcami-lamokoinabia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184036 | Malicious code in mitoko-ontcami-lamokoinab (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184035 | Malicious code in mitoko-ontcami-lamokoina (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184034 | Malicious code in mitoko-ontcami-lamokoin (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184033 | Malicious code in mitoko-ontcami-lamokoi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184032 | Malicious code in mitoko-ontcami-lamoki (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184031 | Malicious code in mitoko-ontcami-lamoi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184030 | Malicious code in mitoko-ontcami-lai (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184029 | Malicious code in mitoko-onmi-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184028 | Malicious code in mitoko-oni-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184027 | Malicious code in mitoko-on-lakok (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184026 | Malicious code in mitoko-on-lakoikk (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184025 | Malicious code in mitoko-on-lakoikauok (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184024 | Malicious code in mitoko-on-lakoikauoak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184023 | Malicious code in mitoko-on-lakoikaunoaak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184022 | Malicious code in mitoko-on-lakoikaok (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184021 | Malicious code in mitoko-on-lakoik (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184020 | Malicious code in mitoko-on-lakiuoabia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184019 | Malicious code in mitoko-on-lakiuoaba (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184018 | Malicious code in mitoko-on-lakiuoaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184017 | Malicious code in mitoko-on-lakiuoa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184016 | Malicious code in mitoko-on-lakiuaoabia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184015 | Malicious code in mitoko-on-lakiu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184014 | Malicious code in mitoko-on-lakinuia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184013 | Malicious code in mitoko-on-lakinuaoabia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184012 | Malicious code in mitoko-on-lakinuaia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184011 | Malicious code in mitoko-on-lakinuabia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184010 | Malicious code in mitoko-on-lakinia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0559 | Red Hat Security Advisory: firefox security update | 2024-01-30T11:04:07+00:00 | 2025-11-21T18:53:30+00:00 |
| rhsa-2024:0558 | Red Hat Security Advisory: tigervnc security update | 2024-01-30T11:03:52+00:00 | 2025-11-21T18:53:30+00:00 |
| rhsa-2024:0557 | Red Hat Security Advisory: tigervnc security update | 2024-01-30T11:00:18+00:00 | 2025-11-21T18:53:30+00:00 |
| rhsa-2024:0495 | Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9.SP1 release and security update | 2024-01-25T13:52:12+00:00 | 2025-11-21T18:53:28+00:00 |
| rhsa-2024:0494 | Red Hat Security Advisory: Red Hat build of Quarkus 2.13.9.SP1 release and security update | 2024-01-25T13:51:54+00:00 | 2025-11-21T18:53:27+00:00 |
| rhsa-2024:0477 | Red Hat Security Advisory: frr security update | 2024-01-25T10:51:39+00:00 | 2025-11-21T18:53:26+00:00 |
| rhsa-2024:0468 | Red Hat Security Advisory: grub2 security update | 2024-01-25T10:52:14+00:00 | 2025-11-21T18:53:26+00:00 |
| rhsa-2024:0465 | Red Hat Security Advisory: sqlite security update | 2024-01-25T11:01:44+00:00 | 2025-11-21T18:53:25+00:00 |
| rhsa-2024:0463 | Red Hat Security Advisory: rpm security update | 2024-01-25T11:01:56+00:00 | 2025-11-21T18:53:24+00:00 |
| rhsa-2024:0449 | Red Hat Security Advisory: linux-firmware security update | 2024-01-25T08:31:23+00:00 | 2025-11-21T18:53:24+00:00 |
| rhsa-2024:0456 | Red Hat Security Advisory: grub2 security update | 2024-01-25T08:59:05+00:00 | 2025-11-21T18:53:23+00:00 |
| rhsa-2024:0453 | Red Hat Security Advisory: rpm security update | 2024-01-25T09:01:40+00:00 | 2025-11-21T18:53:22+00:00 |
| rhsa-2024:0451 | Red Hat Security Advisory: gnutls security update | 2024-01-25T09:45:39+00:00 | 2025-11-21T18:53:21+00:00 |
| rhsa-2024:0437 | Red Hat Security Advisory: grub2 security update | 2024-01-25T11:14:31+00:00 | 2025-11-21T18:53:20+00:00 |
| rhsa-2024:0435 | Red Hat Security Advisory: rpm security update | 2024-01-25T11:15:13+00:00 | 2025-11-21T18:53:20+00:00 |
| rhsa-2024:0433 | Red Hat Security Advisory: linux-firmware security update | 2024-01-25T11:14:11+00:00 | 2025-11-21T18:53:19+00:00 |
| rhsa-2024:0424 | Red Hat Security Advisory: rpm security update | 2024-01-25T08:02:40+00:00 | 2025-11-21T18:53:19+00:00 |
| rhsa-2024:0423 | Red Hat Security Advisory: samba security update | 2024-01-25T08:36:38+00:00 | 2025-11-21T18:53:16+00:00 |
| rhsa-2024:0422 | Red Hat Security Advisory: perl-HTTP-Tiny security update | 2024-01-25T08:32:19+00:00 | 2025-11-21T18:53:16+00:00 |
| rhsa-2024:0419 | Red Hat Security Advisory: c-ares security update | 2024-01-25T08:11:51+00:00 | 2025-11-21T18:53:15+00:00 |
| rhsa-2024:0418 | Red Hat Security Advisory: avahi security update | 2024-01-25T08:36:43+00:00 | 2025-11-21T18:53:15+00:00 |
| rhsa-2024:0417 | Red Hat Security Advisory: shadow-utils security update | 2024-01-25T09:00:35+00:00 | 2025-11-21T18:53:15+00:00 |
| rhsa-2024:0416 | Red Hat Security Advisory: ncurses security update | 2024-01-25T08:11:52+00:00 | 2025-11-21T18:53:14+00:00 |
| rhsa-2024:0411 | Red Hat Security Advisory: libfastjson security update | 2024-01-25T08:32:08+00:00 | 2025-11-21T18:53:14+00:00 |
| rhsa-2024:0410 | Red Hat Security Advisory: tcpdump security update | 2024-01-25T07:59:21+00:00 | 2025-11-21T18:53:14+00:00 |
| rhsa-2024:0408 | Red Hat Security Advisory: edk2 security update | 2024-01-25T07:58:27+00:00 | 2025-11-21T18:53:13+00:00 |
| rhsa-2024:0407 | Red Hat Security Advisory: git security update | 2024-01-25T08:01:33+00:00 | 2025-11-21T18:53:13+00:00 |
| rhsa-2024:0406 | Red Hat Security Advisory: protobuf-c security update | 2024-01-25T08:31:38+00:00 | 2025-11-21T18:53:12+00:00 |
| rhsa-2024:0399 | Red Hat Security Advisory: gnutls security update | 2024-01-24T12:29:09+00:00 | 2025-11-21T18:53:11+00:00 |
| rhsa-2024:0397 | Red Hat Security Advisory: squid:4 security update | 2024-01-24T12:28:13+00:00 | 2025-11-21T18:53:11+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-42384 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42382 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42381 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42380 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42379 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42378 | A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42376 | A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input. | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42374 | An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42327 | dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42252 | An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-42008 | The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41991 | The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41990 | The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41864 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41103 | Insufficiently restricted permissions on plugin directories | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41099 | Integer overflow issue with strings in Redis | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-41073 | loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer as demonstrated by using /proc/<pid>/maps for exploitation. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-40812 | The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-4069 | Use After Free in vim/vim | 2021-12-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-40490 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-40438 | mod_proxy SSRF | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-4019 | Heap-based Buffer Overflow in vim/vim | 2021-12-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-40145 | gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka LibGD) through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete and should only be used for development and testing purposes. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3984 | Heap-based Buffer Overflow in vim/vim | 2021-12-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3974 | Use After Free in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3973 | Heap-based Buffer Overflow in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3968 | Heap-based Buffer Overflow in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39537 | An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39275 | ap_escape_quotes buffer overflow | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39263 | A crafted NTFS image can trigger a heap-based buffer overflow caused by an unsanitized attribute in ntfs_get_attribute_value in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201511-0250 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.422000Z |
| var-201510-0053 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:38.371000Z |
| var-201510-0432 | Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and b… | 2025-04-13T23:03:38.321000Z |
| var-201510-0427 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:38.222000Z |
| var-201510-0055 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:38.170000Z |
| var-201511-0248 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.117000Z |
| var-201511-0281 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.062000Z |
| var-201511-0279 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:38.007000Z |
| var-201510-0421 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.966000Z |
| var-201511-0252 | Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and b… | 2025-04-13T23:03:37.919000Z |
| var-201510-0052 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:37.869000Z |
| var-201510-0098 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:37.818000Z |
| var-201510-0057 | Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Win… | 2025-04-13T23:03:37.754000Z |
| var-201510-0424 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.712000Z |
| var-201511-0251 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:37.662000Z |
| var-201511-0280 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:37.608000Z |
| var-201510-0426 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.566000Z |
| var-201511-0278 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:37.513000Z |
| var-201510-0422 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.471000Z |
| var-201511-0094 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:37.420000Z |
| var-201510-0051 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:37.369000Z |
| var-201511-0249 | Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and b… | 2025-04-13T23:03:37.309000Z |
| var-201510-0423 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.267000Z |
| var-201510-0054 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0… | 2025-04-13T23:03:37.219000Z |
| var-201510-0059 | Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and b… | 2025-04-13T23:03:37.170000Z |
| var-201511-0277 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0… | 2025-04-13T23:03:37.116000Z |
| var-201512-0023 | Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allo… | 2025-04-13T23:03:36.877000Z |
| var-201512-0026 | The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote atta… | 2025-04-13T23:03:36.839000Z |
| var-201512-0024 | The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authentic… | 2025-04-13T23:03:36.802000Z |
| var-201512-0025 | Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sen… | 2025-04-13T23:03:36.765000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:0217-1 | Security update for postgresql, postgresql12, postgresql13 | 2021-01-26T11:06:16Z | 2021-01-26T11:06:16Z |
| suse-su-2021:0210-1 | Security update for rubygem-nokogiri | 2021-01-25T15:26:23Z | 2021-01-25T15:26:23Z |
| suse-su-2021:0200-1 | Security update for hawk2 | 2021-01-22T14:39:46Z | 2021-01-22T14:39:46Z |
| suse-su-2021:0199-1 | Security update for ImageMagick | 2021-01-22T14:20:39Z | 2021-01-22T14:20:39Z |
| suse-su-2021:0198-1 | Security update for hawk2 | 2021-01-22T14:17:54Z | 2021-01-22T14:17:54Z |
| suse-su-2021:0197-1 | Security update for permissions | 2021-01-22T14:17:45Z | 2021-01-22T14:17:45Z |
| suse-su-2021:0196-1 | Security update for mutt | 2021-01-22T14:17:35Z | 2021-01-22T14:17:35Z |
| suse-su-2021:0195-1 | Security update for mutt | 2021-01-22T14:17:22Z | 2021-01-22T14:17:22Z |
| suse-su-2021:0194-1 | Security update for stunnel | 2021-01-22T12:31:09Z | 2021-01-22T12:31:09Z |
| suse-su-2021:0192-1 | Security update for hawk2 | 2021-01-22T09:36:50Z | 2021-01-22T09:36:50Z |
| suse-su-2021:0186-1 | Security update for wavpack | 2021-01-21T13:56:16Z | 2021-01-21T13:56:16Z |
| suse-su-2021:0185-1 | Security update for samba | 2021-01-21T10:36:13Z | 2021-01-21T10:36:13Z |
| suse-su-2021:0184-1 | Security update for gdk-pixbuf | 2021-01-21T10:36:02Z | 2021-01-21T10:36:02Z |
| suse-su-2021:0183-1 | Security update for perl-Convert-ASN1 | 2021-01-21T10:35:46Z | 2021-01-21T10:35:46Z |
| suse-su-2021:0182-1 | Security update for yast2-multipath | 2021-01-21T06:35:14Z | 2021-01-21T06:35:14Z |
| suse-su-2021:0176-1 | Security update for xstream | 2021-01-20T08:49:09Z | 2021-01-20T08:49:09Z |
| suse-su-2021:0175-1 | Security update for postgresql, postgresql13 | 2021-01-20T08:24:08Z | 2021-01-20T08:24:08Z |
| suse-su-2021:0172-1 | Security update for perl-Convert-ASN1 | 2021-01-19T17:14:44Z | 2021-01-19T17:14:44Z |
| suse-su-2021:0166-1 | Security update for dnsmasq | 2021-01-19T11:13:16Z | 2021-01-19T11:13:16Z |
| suse-su-2021:14604-1 | Security update for dnsmasq | 2021-01-19T11:11:47Z | 2021-01-19T11:11:47Z |
| suse-su-2021:14603-1 | Security update for dnsmasq | 2021-01-19T11:11:40Z | 2021-01-19T11:11:40Z |
| suse-su-2021:0163-1 | Security update for dnsmasq | 2021-01-19T11:11:16Z | 2021-01-19T11:11:16Z |
| suse-su-2021:0162-1 | Security update for dnsmasq | 2021-01-19T11:08:30Z | 2021-01-19T11:08:30Z |
| suse-su-2021:0158-1 | Security update for tcmu-runner | 2021-01-18T10:57:41Z | 2021-01-18T10:57:41Z |
| suse-su-2021:0156-1 | Security update for ImageMagick | 2021-01-18T10:55:00Z | 2021-01-18T10:55:00Z |
| suse-su-2021:0155-1 | Security update for slurm | 2021-01-18T10:51:34Z | 2021-01-18T10:51:34Z |
| suse-su-2021:0153-1 | Security update for ImageMagick | 2021-01-15T17:01:43Z | 2021-01-15T17:01:43Z |
| suse-su-2021:14598-1 | Security update for ImageMagick | 2021-01-15T15:30:02Z | 2021-01-15T15:30:02Z |
| suse-su-2021:0143-1 | Security update for tcmu-runner | 2021-01-15T15:14:02Z | 2021-01-15T15:14:02Z |
| suse-su-2021:0142-1 | Security update for openldap2 | 2021-01-15T12:02:13Z | 2021-01-15T12:02:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-43212 | Tenda AX2 Pro操作系统命令注入漏洞 | 2024-10-31 | 2024-11-06 |
| cnvd-2024-43211 | Tenda G3硬编码凭证漏洞 | 2024-11-01 | 2024-11-06 |
| cnvd-2024-43210 | D-Link DIR-619L缓冲区溢出漏洞（CNVD-2024-43210） | 2024-10-17 | 2024-11-06 |
| cnvd-2024-43200 | IBM Db2注入漏洞 | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43199 | IBM Db2拒绝服务漏洞（CNVD-2024-43199） | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43198 | IBM Db2存在未明漏洞（CNVD-2024-43198） | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43197 | IBM Cloud Pak for Security和IBM QRadar Suite存在未明漏洞 | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43196 | IBM WebSphere Application Server信任管理问题漏洞（CNVD-2024-43196） | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43195 | IBM OpenBMC权限提升漏洞 | 2024-08-21 | 2024-11-06 |
| cnvd-2024-43194 | IBM App Connect Enterprise Certified Container存在未明漏洞 | 2024-08-27 | 2024-11-06 |
| cnvd-2024-43193 | IBM OpenPages with Watson身份验证绕过漏洞 | 2024-08-28 | 2024-11-06 |
| cnvd-2024-43192 | IBM Sterling Connect:Direct Web Services加密问题漏洞 | 2024-08-28 | 2024-11-06 |
| cnvd-2024-43191 | IBM Sterling Connect:Direct Web Services存在未明漏洞 | 2024-08-28 | 2024-11-06 |
| cnvd-2024-43190 | IBM Sterling Connect:Direct Web Services存在未明漏洞（CNVD-2024-43190） | 2024-09-03 | 2024-11-06 |
| cnvd-2024-44505 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-44505） | 2024-05-22 | 2024-11-05 |
| cnvd-2024-44504 | Adobe Acrobat Reader输入验证错误漏洞（CNVD-2024-44504） | 2024-05-22 | 2024-11-05 |
| cnvd-2024-44502 | Adobe Commerce操作系统命令注入漏洞（CNVD-2024-44502） | 2024-08-16 | 2024-11-05 |
| cnvd-2024-44501 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-44501） | 2024-08-16 | 2024-11-05 |
| cnvd-2024-44500 | Adobe Acrobat Reader资源管理错误漏洞（CNVD-2024-44500） | 2024-08-16 | 2024-11-05 |
| cnvd-2024-44499 | Adobe Acrobat Reader缓冲区溢出漏洞（CNVD-2024-44499） | 2024-08-16 | 2024-11-05 |
| cnvd-2024-44498 | Adobe Acrobat Reader缓冲区溢出漏洞（CNVD-2024-44498） | 2024-08-16 | 2024-11-05 |
| cnvd-2024-43035 | 北京圣博润高新技术股份有限公司运维安全管理系统存在命令执行漏洞 | 2024-11-05 | 2024-11-05 |
| cnvd-2024-42948 | Microsoft Excel权限提升漏洞（CNVD-2024-42948） | 2024-09-12 | 2024-11-05 |
| cnvd-2024-42947 | Microsoft Excel远程代码执行漏洞（CNVD-2024-42947） | 2024-10-17 | 2024-11-05 |
| cnvd-2024-42946 | Microsoft Office OneNote远程代码执行漏洞 | 2024-02-23 | 2024-11-05 |
| cnvd-2024-42945 | Microsoft Office欺骗漏洞（CNVD-2024-42945） | 2024-08-12 | 2024-11-05 |
| cnvd-2024-42944 | Microsoft OfficePLUS权限提升漏洞 | 2024-08-16 | 2024-11-05 |
| cnvd-2024-42943 | Microsoft Office PowerPoint资源管理错误漏洞 | 2024-08-20 | 2024-11-05 |
| cnvd-2024-42942 | Microsoft Office远程代码执行漏洞（CNVD-2024-42942） | 2024-10-09 | 2024-11-05 |
| cnvd-2024-42941 | Microsoft Office欺骗漏洞（CNVD-2024-42941） | 2024-10-09 | 2024-11-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-171 | Vulnérabilités dans Google Chrome | 2011-03-28T00:00:00.000000 | 2011-03-28T00:00:00.000000 |
| certa-2011-avi-170 | Vulnérabilité dans SPIP | 2011-03-28T00:00:00.000000 | 2011-03-28T00:00:00.000000 |
| certa-2011-avi-169 | Certificats SSL frauduleux | 2011-03-24T00:00:00.000000 | 2011-03-24T00:00:00.000000 |
| certa-2011-avi-168 | Vulnérabilités dans Quagga | 2011-03-24T00:00:00.000000 | 2011-03-24T00:00:00.000000 |
| certa-2011-avi-167 | Vulnérabilités dans VLC Media Player | 2011-03-24T00:00:00.000000 | 2011-03-24T00:00:00.000000 |
| certa-2011-avi-166 | Vulnérabilité dans Symantec LiveUpdate Administrator | 2011-03-24T00:00:00.000000 | 2011-03-24T00:00:00.000000 |
| certa-2011-avi-165 | Vulnérabilité dans Adobe Flash Player, Adobe Reader et Acrobat | 2011-03-23T00:00:00.000000 | 2011-03-23T00:00:00.000000 |
| certa-2011-avi-160 | Vulnérabilités dans PHP | 2011-03-22T00:00:00.000000 | 2011-03-23T00:00:00.000000 |
| certa-2011-avi-163 | Vulnérabilité dans Logwatch | 2011-03-22T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-avi-162 | Multiples vulnérabilités dans Mac OS X | 2011-03-22T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-avi-161 | Vulnérabilité dans ProFTPD | 2011-03-22T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-avi-101 | Multiples vulnérabilités dans Ruby | 2011-02-22T00:00:00.000000 | 2011-03-22T00:00:00.000000 |
| certa-2011-avi-159 | Vulnérabilités dans SAP NetWeaver | 2011-03-18T00:00:00.000000 | 2011-03-18T00:00:00.000000 |
| certa-2011-avi-158 | Multiples vulnérabilités dans Lotus Quickr | 2011-03-18T00:00:00.000000 | 2011-03-18T00:00:00.000000 |
| certa-2011-avi-157 | Vulnérabilité dans EMC RSA Access Manager Server | 2011-03-18T00:00:00.000000 | 2011-03-18T00:00:00.000000 |
| certa-2011-avi-011 | Vulnérabilité dans Struts | 2011-01-12T00:00:00.000000 | 2011-03-17T00:00:00.000000 |
| certa-2011-avi-155 | Vulnérabilité dans MIT Kerberos | 2011-03-16T00:00:00.000000 | 2011-03-16T00:00:00.000000 |
| certa-2011-avi-077 | Multiples vulnérabilités dans Adobe Flash Player | 2011-02-09T00:00:00.000000 | 2011-03-16T00:00:00.000000 |
| certa-2011-avi-154 | Vulnérabilité dans Check Point SNX, EPS et EPC | 2011-03-15T00:00:00.000000 | 2011-03-15T00:00:00.000000 |
| certa-2011-avi-153 | Vulnérabilités dans SAP Crystal Reports | 2011-03-15T00:00:00.000000 | 2011-03-15T00:00:00.000000 |
| certa-2011-avi-152 | Vulnérabilité dans Google Chrome | 2011-03-14T00:00:00.000000 | 2011-03-14T00:00:00.000000 |
| certa-2011-avi-151 | Multiples vulnérabilités dans Apple iOS | 2011-03-11T00:00:00.000000 | 2011-03-11T00:00:00.000000 |
| certa-2011-avi-150 | Multiples vulnérabilités dans Apple Safari | 2011-03-11T00:00:00.000000 | 2011-03-11T00:00:00.000000 |
| certa-2011-avi-149 | Vulnérabilité dans Majordomo 2 | 2011-03-11T00:00:00.000000 | 2011-03-11T00:00:00.000000 |
| certa-2011-avi-148 | Vulnérabilités dans Google Chrome | 2011-03-10T00:00:00.000000 | 2011-03-10T00:00:00.000000 |
| certa-2011-avi-147 | Vulnérabilité dans Apache Archiva | 2011-03-10T00:00:00.000000 | 2011-03-10T00:00:00.000000 |
| certa-2011-avi-146 | Vulnérabilité dans Postfix | 2011-03-10T00:00:00.000000 | 2011-03-10T00:00:00.000000 |
| certa-2011-avi-145 | Vulnérabilité dans Ubuntu | 2011-03-10T00:00:00.000000 | 2011-03-10T00:00:00.000000 |
| certa-2011-avi-144 | Multiples vulnérabilités dans Joomla! | 2011-03-10T00:00:00.000000 | 2011-03-10T00:00:00.000000 |
| certa-2011-avi-143 | Multiples vulnérabilités dans VMware ESX/ESXi | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |