Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-70656 |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T17:01:05.154Z |
| CVE-2025-37165 |
7.5 (3.1)
|
Exposure of VLAN information in unintended network int… |
Hewlett Packard Enterprise (HPE) |
Instant On |
2026-01-13T17:40:56.557Z | 2026-01-15T16:56:25.947Z |
| CVE-2026-22916 |
4.3 (3.1)
|
An attacker with low privileges may be able to tr… |
SICK AG |
TDC-X401GL |
2026-01-15T13:07:07.335Z | 2026-01-15T16:55:42.554Z |
| CVE-2021-47761 |
8.5 (4.0)
7.8 (3.1)
|
MilleGPG5 5.7.2 Luglio 2021 (x64) - Local Privilege Es… |
Millegpg |
MilleGPG5 |
2026-01-15T15:52:06.931Z | 2026-01-15T16:53:31.329Z |
| CVE-2021-47762 |
8.5 (4.0)
7.8 (3.1)
|
HTTPDebuggerPro 9.11 - Unquoted Service Path |
Httpdebugger |
HTTPDebuggerPro |
2026-01-15T15:52:07.433Z | 2026-01-15T16:52:37.108Z |
| CVE-2021-47763 |
8.8 (4.0)
8.2 (3.1)
|
Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort'… |
Aimeos |
Aimeos Laravel ecommerce platform |
2026-01-15T15:52:07.958Z | 2026-01-15T16:51:11.006Z |
| CVE-2021-47766 |
7.1 (4.0)
7.1 (3.1)
|
Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated) |
Levelprograms |
Kmaleon |
2026-01-15T15:52:09.398Z | 2026-01-15T16:47:08.921Z |
| CVE-2026-22867 |
8.7 (3.1)
|
LaSuite Doc affected by Stored XSS via Interlinking Block |
suitenumerique |
docs |
2026-01-15T16:31:34.397Z | 2026-01-15T16:46:57.161Z |
| CVE-2021-47774 |
8.4 (4.0)
9.8 (3.1)
|
Kingdia CD Extractor 3.0.2 - Buffer Overflow (SEH) |
En |
Kingdia CD Extractor |
2026-01-15T15:52:12.724Z | 2026-01-15T16:46:45.316Z |
| CVE-2026-22265 |
7.5 (3.1)
|
Roxy-WI has a Command Injection via grep parameter in … |
roxy-wi |
roxy-wi |
2026-01-15T16:27:52.446Z | 2026-01-15T16:46:11.782Z |
| CVE-2021-47775 |
8.4 (4.0)
8.4 (3.1)
|
YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH) |
Litexmedia |
YouTube Video Grabber |
2026-01-15T15:52:13.223Z | 2026-01-15T16:46:04.528Z |
| CVE-2025-66417 |
7.5 (3.1)
|
GLPI has an unauthenticated SQL injection through the… |
glpi-project |
glpi |
2026-01-15T16:25:03.467Z | 2026-01-15T16:45:31.206Z |
| CVE-2025-66292 |
8.1 (3.1)
|
DPanel has an arbitrary file deletion vulnerability in… |
donknap |
dpanel |
2026-01-15T16:19:55.507Z | 2026-01-15T16:44:51.018Z |
| CVE-2025-70308 |
7.5 (3.1)
|
An out-of-bounds read in the GSF demuxer filter c… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:44:15.156Z |
| CVE-2025-70304 |
7.5 (3.1)
|
A buffer overflow in the vobsub_get_subpic_durati… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:43:16.567Z |
| CVE-2025-70310 |
5.5 (3.1)
|
A heap overflow in the vorbis_to_intern() functio… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:43:01.292Z |
| CVE-2021-47776 |
6.9 (4.0)
5.3 (3.1)
|
Umbraco v8.14.1 - 'baseUrl' SSRF |
umbraco |
Umbraco |
2026-01-15T15:52:13.737Z | 2026-01-15T16:40:33.352Z |
| CVE-2021-47777 |
8.8 (4.0)
8.2 (3.1)
|
Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Un… |
Ribccs |
Build Smart ERP |
2026-01-15T15:52:14.242Z | 2026-01-15T16:40:07.115Z |
| CVE-2026-0992 |
2.9 (3.1)
|
Libxml2: libxml2: denial of service via crafted xml catalogs |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-15T14:20:24.934Z | 2026-01-15T16:39:47.982Z |
| CVE-2021-47781 |
6.7 (4.0)
9.8 (3.1)
|
Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of … |
Cmder |
Cmder Console Emulator |
2026-01-15T15:52:14.687Z | 2026-01-15T16:39:37.145Z |
| CVE-2026-0989 |
3.7 (3.1)
|
Libxml2: unbounded relaxng include recursion leading t… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-15T14:20:23.274Z | 2026-01-15T16:39:34.311Z |
| CVE-2026-0990 |
5.9 (3.1)
|
Libxml2: libxml2: denial of service via uncontrolled r… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-15T14:20:06.515Z | 2026-01-15T16:39:20.891Z |
| CVE-2021-47784 |
6.7 (4.0)
7.5 (3.1)
|
Cyberfox Web Browser 52.9.1 - Denial of Service (PoC) |
Cyberfox |
Cyberfox Web Browser |
2026-01-15T15:52:15.185Z | 2026-01-15T16:39:13.224Z |
| CVE-2026-0897 |
7.1 (4.0)
|
Denial of Service in Keras via Excessive Memory Alloca… |
Google |
Keras |
2026-01-15T14:09:53.603Z | 2026-01-15T16:38:18.772Z |
| CVE-2025-70309 |
5.5 (3.1)
|
A stack overflow in the pcmreframe_flush_packet f… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T16:38:15.352Z |
| CVE-2026-22914 |
4.3 (3.1)
|
An attacker with limited permissions may still be… |
SICK AG |
TDC-X401GL |
2026-01-15T13:06:19.599Z | 2026-01-15T16:38:01.091Z |
| CVE-2026-22913 |
4.3 (3.1)
|
Improper handling of a URL parameter may allow at… |
SICK AG |
TDC-X401GL |
2026-01-15T13:05:40.925Z | 2026-01-15T16:37:50.866Z |
| CVE-2026-22912 |
4.3 (3.1)
|
Improper validation of a login parameter may allo… |
SICK AG |
TDC-X401GL |
2026-01-15T13:03:15.361Z | 2026-01-15T16:37:41.596Z |
| CVE-2026-22862 |
7.1 (4.0)
|
go-ethereum has a DoS via malicious p2p message |
ethereum |
go-ethereum |
2026-01-13T20:27:10.979Z | 2026-01-15T16:37:30.177Z |
| CVE-2025-37186 |
7.8 (3.1)
|
Local Privilege Escalation Vulnerability in HPE Aruba … |
Hewlett Packard Enterprise (HPE) |
Virtual Intranet Access (VIA) |
2026-01-13T20:16:33.606Z | 2026-01-15T16:37:19.095Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-49949 |
5.5 (3.1)
|
WordPress Templazee plugin <= 1.0.2 - Broken Access Co… |
templazee |
Templazee |
2025-10-22T14:32:18.660Z | 2026-01-20T14:28:07.803Z |
| CVE-2025-49948 |
7.1 (3.1)
|
WordPress WP Super Edit plugin <= 2.5.4 - Cross Site S… |
Ahmad Awais |
WP Super Edit |
2025-10-22T14:32:18.319Z | 2026-01-20T14:28:07.687Z |
| CVE-2025-49947 |
7.1 (3.1)
|
WordPress WooCommerce Registration Fields Plugin - Cus… |
extendons |
WooCommerce Registration Fields Plugin - Custom Signup Fields |
2025-10-22T14:32:18.131Z | 2026-01-20T14:28:07.883Z |
| CVE-2025-49946 |
7.1 (3.1)
|
WordPress Auto Login After Registration plugin <= 1.0.… |
Cynob IT Consultancy |
Auto Login After Registration |
2025-10-22T14:32:17.913Z | 2026-01-20T14:28:08.228Z |
| CVE-2025-49945 |
7.1 (3.1)
|
WordPress Shortcode Generator plugin <= 1.1 - Cross Si… |
kylegetson |
Shortcode Generator |
2025-10-22T14:32:17.676Z | 2026-01-20T14:28:07.632Z |
| CVE-2025-49944 |
7.1 (3.1)
|
WordPress WPCode Content Ratio plugin <= 2.0 - Cross S… |
Jonatan Jumbert |
WPCode Content Ratio |
2025-10-22T14:32:17.445Z | 2026-01-20T14:28:07.648Z |
| CVE-2025-49943 |
8.1 (3.1)
|
WordPress Femme theme <= 1.3.11 - Local File Inclusion… |
AncoraThemes |
Femme |
2025-12-18T07:21:44.794Z | 2026-01-20T14:28:08.066Z |
| CVE-2025-49942 |
8.1 (3.1)
|
WordPress Gardis theme <= 1.2.13 - Local File Inclusio… |
AncoraThemes |
Gardis |
2025-12-18T07:21:44.617Z | 2026-01-20T14:28:07.580Z |
| CVE-2025-49941 |
8.1 (3.1)
|
WordPress GlamChic theme <= 1.0.11 - Local File Inclus… |
AncoraThemes |
GlamChic |
2025-12-18T07:21:44.421Z | 2026-01-20T14:28:07.677Z |
| CVE-2025-49940 |
6.5 (3.1)
|
WordPress Fusion Builder plugin <= 3.13.2 - Cross Site… |
ThemeFusion |
Fusion Builder |
2025-10-22T14:32:17.247Z | 2026-01-20T14:28:07.835Z |
| CVE-2025-49939 |
6.5 (3.1)
|
WordPress JetElements For Elementor plugin <= 2.7.8 - … |
CrocoBlock |
JetElements For Elementor |
2025-10-22T14:32:17.061Z | 2026-01-20T14:28:07.611Z |
| CVE-2025-49938 |
6.5 (3.1)
|
WordPress JetEngine plugin <= 3.7.3 - Cross Site Scrip… |
CrocoBlock |
JetEngine |
2025-10-22T14:32:16.875Z | 2026-01-20T14:28:08.144Z |
| CVE-2025-49937 |
4.3 (3.1)
|
WordPress Smash Balloon Social Post Feed plugin <= 4.3… |
Syed Balkhi |
Smash Balloon Social Post Feed |
2025-10-22T14:32:16.676Z | 2026-01-20T14:28:07.564Z |
| CVE-2025-49936 |
6.5 (3.1)
|
WordPress WoodMart theme < 8.3.2 - Cross Site Scriptin… |
xtemos |
WoodMart |
2025-10-22T14:32:16.302Z | 2026-01-20T14:28:07.770Z |
| CVE-2025-49935 |
7.4 (3.1)
|
WordPress WoodMart theme < 8.3.2 - Local File Inclusio… |
xtemos |
WoodMart |
2025-10-22T14:32:16.098Z | 2026-01-20T14:28:07.791Z |
| CVE-2025-49934 |
5.4 (3.1)
|
WordPress JetBlocks For Elementor plugin <= 1.3.18 - C… |
CrocoBlock |
JetBlocks For Elementor |
2025-10-22T14:32:15.865Z | 2026-01-20T14:28:07.810Z |
| CVE-2025-49933 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.4 - Cross Site Scripti… |
CrocoBlock |
JetBlog |
2025-10-22T14:32:15.603Z | 2026-01-20T14:28:07.844Z |
| CVE-2025-49932 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.4.1 - Cross Site Scrip… |
CrocoBlock |
JetBlog |
2025-10-22T14:32:15.443Z | 2026-01-20T14:28:07.647Z |
| CVE-2025-49931 |
9.3 (3.1)
|
WordPress JetSearch plugin <= 3.5.10 - SQL Injection v… |
CrocoBlock |
JetSearch |
2025-10-22T14:32:15.259Z | 2026-01-20T14:28:07.695Z |
| CVE-2025-49930 |
7.1 (3.1)
|
WordPress JetSearch plugin <= 3.5.10 - Cross Site Scri… |
CrocoBlock |
JetSearch |
2025-10-22T14:32:15.035Z | 2026-01-20T14:28:07.642Z |
| CVE-2025-49929 |
6.5 (3.1)
|
WordPress Ultimate Blocks plugin <= 3.3.6 - Cross Site… |
Ultimate Blocks |
Ultimate Blocks |
2025-10-22T14:32:14.811Z | 2026-01-20T14:28:07.609Z |
| CVE-2025-49928 |
6.5 (3.1)
|
WordPress JetWooBuilder plugin <= 2.1.20 - Cross Site … |
CrocoBlock |
JetWooBuilder |
2025-10-22T14:32:14.597Z | 2026-01-20T14:28:07.500Z |
| CVE-2025-49927 |
6.5 (3.1)
|
WordPress JetWooBuilder plugin <= 2.1.20.1 - Cross Sit… |
CrocoBlock |
JetWooBuilder |
2025-10-22T14:32:14.395Z | 2026-01-20T14:28:07.599Z |
| CVE-2025-49926 |
7.3 (3.1)
|
WordPress Kalium theme <= 3.25 - Arbitrary Code Execut… |
Laborator |
Kalium |
2025-10-22T14:32:14.208Z | 2026-01-20T14:28:07.637Z |
| CVE-2025-49925 |
7.3 (3.1)
|
WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Cont… |
VibeThemes |
WPLMS |
2025-10-22T14:32:14.033Z | 2026-01-20T15:39:46.393Z |
| CVE-2025-49924 |
7.3 (3.1)
|
WordPress Wholesale Suite plugin <= 2.2.4.2 - Privileg… |
Josh Kohlbach |
Wholesale Suite |
2025-10-22T14:32:13.804Z | 2026-01-20T15:39:21.024Z |
| CVE-2025-49923 |
6.1 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.11.1… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-10-22T14:32:13.596Z | 2026-01-20T15:38:59.264Z |
| CVE-2025-49922 |
4.3 (3.1)
|
WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.3 -… |
etruel |
WPeMatico RSS Feed Fetcher |
2025-10-22T14:32:13.367Z | 2026-01-20T15:38:36.695Z |
| CVE-2025-49921 |
7.3 (3.1)
|
WordPress JetReviews plugin <= 3.0.0 - Local File Incl… |
CrocoBlock |
JetReviews |
2025-10-22T14:32:13.059Z | 2026-01-20T15:38:14.568Z |
| CVE-2025-49920 |
5.4 (3.1)
|
WordPress Web Accessibility By accessiBe plugin <= 2.1… |
accessiBe |
Web Accessibility By accessiBe |
2025-10-22T14:32:12.844Z | 2026-01-20T14:28:07.628Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-49949 | Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly … | 2025-10-22T15:15:41.250 | 2026-01-20T15:16:45.100 |
| fkie_cve-2025-49948 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:41.107 | 2026-01-20T15:16:44.963 |
| fkie_cve-2025-49947 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.963 | 2026-01-20T15:16:44.830 |
| fkie_cve-2025-49946 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.840 | 2026-01-20T15:16:44.690 |
| fkie_cve-2025-49945 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.713 | 2026-01-20T15:16:44.560 |
| fkie_cve-2025-49944 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.570 | 2026-01-20T15:16:44.437 |
| fkie_cve-2025-49943 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.620 | 2026-01-20T15:16:44.310 |
| fkie_cve-2025-49942 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.490 | 2026-01-20T15:16:44.177 |
| fkie_cve-2025-49941 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-18T08:15:52.357 | 2026-01-20T15:16:44.050 |
| fkie_cve-2025-49940 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.420 | 2026-01-20T15:16:43.920 |
| fkie_cve-2025-49939 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.293 | 2026-01-20T15:16:43.790 |
| fkie_cve-2025-49938 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:40.157 | 2026-01-20T15:16:43.653 |
| fkie_cve-2025-49937 | Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-f… | 2025-10-22T15:15:40.023 | 2026-01-20T15:16:43.517 |
| fkie_cve-2025-49936 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:39.883 | 2026-01-20T15:16:43.383 |
| fkie_cve-2025-49935 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-22T15:15:39.750 | 2026-01-20T15:16:43.250 |
| fkie_cve-2025-49934 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:39.617 | 2026-01-20T15:16:43.120 |
| fkie_cve-2025-49933 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:39.477 | 2026-01-20T15:16:42.987 |
| fkie_cve-2025-49932 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:39.350 | 2026-01-20T15:16:42.857 |
| fkie_cve-2025-49931 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-10-22T15:15:39.227 | 2026-01-20T15:16:42.723 |
| fkie_cve-2025-49930 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:39.103 | 2026-01-20T15:16:42.583 |
| fkie_cve-2025-49929 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:38.970 | 2026-01-20T15:16:42.430 |
| fkie_cve-2025-49928 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:38.850 | 2026-01-20T15:16:42.293 |
| fkie_cve-2025-49927 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:38.723 | 2026-01-20T15:16:42.160 |
| fkie_cve-2025-49926 | Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium … | 2025-10-22T15:15:38.583 | 2026-01-20T15:16:42.023 |
| fkie_cve-2025-49925 | Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality… | 2025-10-22T15:15:38.460 | 2026-01-20T15:16:41.883 |
| fkie_cve-2025-49924 | Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale… | 2025-10-22T15:15:38.327 | 2026-01-20T15:16:41.753 |
| fkie_cve-2025-49923 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-10-22T15:15:38.193 | 2026-01-20T15:16:41.587 |
| fkie_cve-2025-49922 | Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploitin… | 2025-10-22T15:15:38.073 | 2026-01-20T15:16:41.450 |
| fkie_cve-2025-49921 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-10-22T15:15:37.943 | 2026-01-20T15:16:41.310 |
| fkie_cve-2025-49920 | Missing Authorization vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Ex… | 2025-10-22T15:15:37.817 | 2026-01-20T15:16:41.180 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6g49-wcx2-9wfx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-5cqq-vm5h-fc37 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-5c6r-95g8-vcp4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-58qj-347g-27hj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-4j29-pwr8-5wcj |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-3g7h-qr24-8xr5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:44Z | 2026-01-02T18:30:44Z |
| ghsa-xgm3-c7j6-6pf4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-vx39-cw3x-2ccp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-vv46-rq9c-c4f4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-rmcv-jj2v-vg86 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-rf5f-xpph-5jgw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-q867-7p2v-6jxw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-pjjg-2gwq-cj2j |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-mf33-hg5v-rgf4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-m7hg-32jq-9cgc |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-jwcf-3pf2-5w7c |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-jjx3-xhcr-c6x2 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-jjqv-2m5x-mp97 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-j2c3-gpwj-r6vw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-h487-c3h4-pwj4 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-gw3r-c66x-4m53 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-g5xf-q37c-mwjp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-g282-w2qh-ff46 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-cpr2-9xw8-rhw5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-cj5j-9cjh-6jvx |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-c88w-684f-4628 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-c796-mqhf-v9m6 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:42Z | 2026-01-02T18:30:43Z |
| ghsa-c6pw-rpfp-vxjc |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-8rvc-f5hw-v58j |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ghsa-837w-46cj-pcxr |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:43Z | 2026-01-02T18:30:43Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-25753 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.0… | 2024-02-13T06:02:26.932095Z |
| gsd-2024-25835 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.928586Z |
| gsd-2024-25899 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.927408Z |
| gsd-2024-25771 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.927127Z |
| gsd-2024-25886 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.925054Z |
| gsd-2024-25822 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.923331Z |
| gsd-2024-25887 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.917481Z |
| gsd-2024-25812 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.914195Z |
| gsd-2024-25846 | In the module "Product Catalog (CSV, Excel) Import" (simpleimportproduct) <= 6.7.0 from M… | 2024-02-13T06:02:26.913497Z |
| gsd-2024-25904 | Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advan… | 2024-02-13T06:02:26.911573Z |
| gsd-2024-25806 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.909338Z |
| gsd-2024-25859 | A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2… | 2024-02-13T06:02:26.906544Z |
| gsd-2024-25905 | Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issu… | 2024-02-13T06:02:26.896191Z |
| gsd-2024-25775 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.895656Z |
| gsd-2024-25811 | An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files a… | 2024-02-13T06:02:26.894970Z |
| gsd-2024-25903 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in N-Media Front… | 2024-02-13T06:02:26.894721Z |
| gsd-2024-25914 | Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affec… | 2024-02-13T06:02:26.894173Z |
| gsd-2024-25847 | SQL Injection vulnerability in MyPrestaModules "Product Catalog (CSV, Excel) Import" (sim… | 2024-02-13T06:02:26.891597Z |
| gsd-2024-25875 | A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 all… | 2024-02-13T06:02:26.887867Z |
| gsd-2024-25923 | Insertion of Sensitive Information into Log File vulnerability in PeepSo Community by Pee… | 2024-02-13T06:02:26.881531Z |
| gsd-2024-25819 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.879964Z |
| gsd-2024-25809 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.879270Z |
| gsd-2024-25933 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Gr… | 2024-02-13T06:02:26.878463Z |
| gsd-2024-25793 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.875998Z |
| gsd-2024-25779 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.874032Z |
| gsd-2024-25912 | Missing Authorization vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from… | 2024-02-13T06:02:26.873693Z |
| gsd-2024-25865 | Cross Site Scripting (XSS) vulnerability in hexo-theme-anzhiyu v1.6.12, allows remote att… | 2024-02-13T06:02:26.872535Z |
| gsd-2024-25836 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.871477Z |
| gsd-2024-25790 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-13T06:02:26.870486Z |
| gsd-2024-25896 | ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection (Time-based) via the… | 2024-02-13T06:02:26.867196Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-184009 | Malicious code in mitoko-on-lakia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184008 | Malicious code in mitoko-on-laki (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184007 | Malicious code in mitoko-on-lak (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184006 | Malicious code in mitokik-oni-oladiaps (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184005 | Malicious code in mitok-oni-oldis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184004 | Malicious code in mitok-oni-lapikasi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184003 | Malicious code in mitok-doni-olol (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184002 | Malicious code in mitok-doni-olodl (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184001 | Malicious code in mitok-doni-olodikis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-184000 | Malicious code in mitok-doni-olodavikis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183999 | Malicious code in mitok-doni-olodaikis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183998 | Malicious code in mitok-doni-olodagl (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183997 | Malicious code in mitok-doni-olodagivl (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183996 | Malicious code in mitok-doni-olodagivils (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183995 | Malicious code in mitok-doni-olodagivil (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183994 | Malicious code in mitok-doni-olodagivikis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183993 | Malicious code in mitok-doni-olodagiviis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183992 | Malicious code in mitok-doni-olodagil (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183991 | Malicious code in mitok-doni-oll (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183990 | Malicious code in mitok-doni-olil (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183989 | Malicious code in mitok-doni-olialobna (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183988 | Malicious code in mitok-doni-olialobina (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183987 | Malicious code in mitok-doni-olialobasoina (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183986 | Malicious code in mitok-doni-olialobaoina (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183985 | Malicious code in mitok-doni-olialoba (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183984 | Malicious code in mitok-doni-olialba (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183983 | Malicious code in mitok-doni-oliala (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183982 | Malicious code in mitok-doni-olial (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183981 | Malicious code in mitok-doni-oldis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183980 | Malicious code in mitok-doni-oldikis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0386 | Red Hat Security Advisory: kpatch-patch security update | 2024-01-24T09:11:37+00:00 | 2025-11-21T18:53:11+00:00 |
| rhsa-2024:0345 | Red Hat Security Advisory: python-pillow security update | 2024-01-23T16:29:51+00:00 | 2025-11-21T18:53:08+00:00 |
| rhsa-2024:0343 | Red Hat Security Advisory: LibRaw security update | 2024-01-23T16:26:46+00:00 | 2025-11-21T18:53:08+00:00 |
| rhsa-2024:0320 | Red Hat Security Advisory: xorg-x11-server security update | 2024-01-22T13:53:02+00:00 | 2025-11-21T18:53:06+00:00 |
| rhsa-2024:0319 | Red Hat Security Advisory: gnutls security update | 2024-01-22T13:42:52+00:00 | 2025-11-21T18:53:06+00:00 |
| rhsa-2024:0308 | Red Hat Security Advisory: OpenShift Container Platform 4.11.57 packages and security update | 2024-01-25T07:51:11+00:00 | 2025-11-21T18:53:05+00:00 |
| rhsa-2024:0299 | Red Hat Security Advisory: python-requests security update | 2024-01-18T16:31:18+00:00 | 2025-11-21T18:53:04+00:00 |
| rhsa-2024:0265 | Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update | 2024-01-17T19:12:37+00:00 | 2025-11-21T18:53:03+00:00 |
| rhsa-2024:0279 | Red Hat Security Advisory: gstreamer-plugins-bad-free security update | 2024-01-17T18:07:19+00:00 | 2025-11-21T18:53:02+00:00 |
| rhsa-2024:0278 | Red Hat Security Advisory: Red Hat AMQ Broker 7.11.5 release and security update | 2024-01-17T13:23:10+00:00 | 2025-11-21T18:53:01+00:00 |
| rhsa-2024:0266 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-18T18:19:44+00:00 | 2025-11-21T18:53:01+00:00 |
| rhsa-2024:0268 | Red Hat Security Advisory: Logging Subsystem 5.7.10 - Red Hat OpenShift security update | 2024-01-17T10:29:58+00:00 | 2025-11-21T18:53:00+00:00 |
| rhsa-2024:0267 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2024-01-17T19:14:27+00:00 | 2025-11-21T18:53:00+00:00 |
| rhsa-2024:0255 | Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update | 2024-01-15T16:01:35+00:00 | 2025-11-21T18:53:00+00:00 |
| rhsa-2024:0253 | Red Hat Security Advisory: sqlite security update | 2024-01-15T16:13:20+00:00 | 2025-11-21T18:52:57+00:00 |
| rhsa-2024:0250 | Red Hat Security Advisory: OpenJDK 21.0.2 security update | 2024-01-17T14:15:24+00:00 | 2025-11-21T18:52:57+00:00 |
| rhsa-2024:0247 | Red Hat Security Advisory: OpenJDK 21.0.2 security update | 2024-01-17T14:15:24+00:00 | 2025-11-21T18:52:57+00:00 |
| rhsa-2024:0246 | Red Hat Security Advisory: OpenJDK 17.0.10 security update | 2024-01-17T14:06:50+00:00 | 2025-11-21T18:52:57+00:00 |
| rhsa-2024:0244 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2024-01-17T19:19:46+00:00 | 2025-11-21T18:52:56+00:00 |
| rhsa-2024:0242 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2024-01-17T19:20:42+00:00 | 2025-11-21T18:52:55+00:00 |
| rhsa-2024:0241 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2024-01-17T09:06:57+00:00 | 2025-11-21T18:52:55+00:00 |
| rhsa-2024:0240 | Red Hat Security Advisory: OpenJDK 17.0.10 security update | 2024-01-17T14:06:55+00:00 | 2025-11-21T18:52:55+00:00 |
| rhsa-2024:0239 | Red Hat Security Advisory: OpenJDK 11.0.22 security update | 2024-01-17T14:00:50+00:00 | 2025-11-21T18:52:54+00:00 |
| rhsa-2024:0237 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-17T19:19:02+00:00 | 2025-11-21T18:52:54+00:00 |
| rhsa-2024:0235 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-17T17:57:19+00:00 | 2025-11-21T18:52:54+00:00 |
| rhsa-2024:0234 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-17T09:07:06+00:00 | 2025-11-21T18:52:54+00:00 |
| rhsa-2024:0233 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-17T16:56:29+00:00 | 2025-11-21T18:52:54+00:00 |
| rhsa-2024:0232 | Red Hat Security Advisory: java-11-openjdk security update | 2024-01-17T16:06:00+00:00 | 2025-11-21T18:52:53+00:00 |
| rhsa-2024:0231 | Red Hat Security Advisory: OpenJDK 11.0.22 security update | 2024-01-17T14:00:49+00:00 | 2025-11-21T18:52:53+00:00 |
| rhsa-2024:0223 | Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update | 2024-01-17T16:06:00+00:00 | 2025-11-21T18:52:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-3984 | Heap-based Buffer Overflow in vim/vim | 2021-12-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3974 | Use After Free in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3973 | Heap-based Buffer Overflow in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-3968 | Heap-based Buffer Overflow in vim/vim | 2021-11-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39537 | An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39275 | ap_escape_quotes buffer overflow | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39263 | A crafted NTFS image can trigger a heap-based buffer overflow caused by an unsanitized attribute in ntfs_get_attribute_value in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39262 | A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39261 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39260 | A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39259 | A crafted NTFS image can trigger an out-of-bounds access caused by an unsanitized attribute length in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39258 | A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39257 | A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite) causing stack consumption in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39256 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39255 | A crafted NTFS image can trigger an out-of-bounds read caused by an invalid attribute in ntfs_attr_find_in_attrdef in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39254 | A crafted NTFS image can cause an integer overflow in memmove leading to a heap-based buffer overflow in the function ntfs_attr_record_resize in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39253 | A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39252 | A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-39251 | A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38604 | In librt in the GNU C Library (aka glibc) through 2.34 sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38300 | arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture. | 2021-09-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38297 | Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module when GOARCH=wasm GOOS=js is used. | 2021-10-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38209 | net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX NF_SYSCTL_CT_EXPECT_MAX and NF_SYSCTL_CT_BUCKETS sysctls. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38208 | net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38207 | drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38206 | The mac80211 subsystem in the Linux kernel before 5.12.13 when a device supporting only 5 GHz is used allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38205 | drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e. the real IOMEM pointer). | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38204 | drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38203 | btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| msrc_cve-2021-38202 | fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd. | 2021-08-02T00:00:00.000Z | 2021-12-16T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201512-0088 | Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with fir… | 2025-04-13T23:03:36.695000Z |
| var-201512-0087 | The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 … | 2025-04-13T23:03:36.655000Z |
| var-201512-0089 | Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for select… | 2025-04-13T23:03:36.618000Z |
| var-201512-0230 | Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices be… | 2025-04-13T23:03:36.548000Z |
| var-201512-0214 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1… | 2025-04-13T23:03:36.504000Z |
| var-201512-0231 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of … | 2025-04-13T23:03:36.450000Z |
| var-201512-0229 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote authenticated us… | 2025-04-13T23:03:36.403000Z |
| var-201512-0228 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allow remote attackers to dis… | 2025-04-13T23:03:36.356000Z |
| var-201512-0232 | Cross-site scripting (XSS) vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices… | 2025-04-13T23:03:36.310000Z |
| var-201512-0382 | Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.1… | 2025-04-13T23:03:34.238000Z |
| var-201512-0403 | Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) … | 2025-04-13T23:03:34.202000Z |
| var-201512-0424 | Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resour… | 2025-04-13T23:03:34.166000Z |
| var-201512-0238 | Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary co… | 2025-04-13T23:03:34.122000Z |
| var-201512-0208 | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and O… | 2025-04-13T23:03:34.072000Z |
| var-201512-0247 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and O… | 2025-04-13T23:03:34.024000Z |
| var-201512-0474 | Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary co… | 2025-04-13T23:03:33.973000Z |
| var-201512-0220 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x be… | 2025-04-13T23:03:33.917000Z |
| var-201512-0444 | Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary co… | 2025-04-13T23:03:33.867000Z |
| var-201512-0451 | Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x befo… | 2025-04-13T23:03:33.811000Z |
| var-201512-0427 | Adobe Flash Player and Adobe AIR of MovieClip Use of freed memory for object implementati… | 2025-04-13T23:03:33.757000Z |
| var-201512-0453 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and O… | 2025-04-13T23:03:33.705000Z |
| var-201512-0210 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x be… | 2025-04-13T23:03:33.650000Z |
| var-201512-0435 | Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x bef… | 2025-04-13T23:03:33.603000Z |
| var-201512-0219 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x be… | 2025-04-13T23:03:33.553000Z |
| var-201512-0452 | The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x a… | 2025-04-13T23:03:33.495000Z |
| var-201512-0236 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and O… | 2025-04-13T23:03:29.878000Z |
| var-201512-0456 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and O… | 2025-04-13T23:03:29.821000Z |
| var-201512-0216 | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and O… | 2025-04-13T23:03:29.774000Z |
| var-201512-0437 | Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and O… | 2025-04-13T23:03:29.727000Z |
| var-201512-0248 | Adobe Flash Player and Adobe AIR Use freed memory (Use-after-free) May allow arbitrary co… | 2025-04-13T23:03:29.681000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2021:0139-1 | Security update for slurm_20_02 | 2021-01-15T09:46:55Z | 2021-01-15T09:46:55Z |
| suse-su-2021:0133-1 | Security update for the Linux Kernel | 2021-01-15T08:10:36Z | 2021-01-15T08:10:36Z |
| suse-su-2021:14597-1 | Security update for openldap2 | 2021-01-14T12:43:57Z | 2021-01-14T12:43:57Z |
| suse-su-2021:0129-1 | Security update for openldap2 | 2021-01-14T11:26:28Z | 2021-01-14T11:26:28Z |
| suse-su-2021:0128-1 | Security update for openldap2 | 2021-01-14T10:01:29Z | 2021-01-14T10:01:29Z |
| suse-su-2021:0127-1 | Security update for open-iscsi | 2021-01-14T09:30:27Z | 2021-01-14T09:30:27Z |
| suse-su-2021:0126-1 | Security update for php74 | 2021-01-14T09:29:57Z | 2021-01-14T09:29:57Z |
| suse-su-2021:0125-1 | Security update for php72 | 2021-01-14T09:29:38Z | 2021-01-14T09:29:38Z |
| suse-su-2021:0124-1 | Security update for php7 | 2021-01-14T09:29:17Z | 2021-01-14T09:29:17Z |
| suse-su-2021:0123-1 | Security update for MozillaThunderbird | 2021-01-14T09:28:42Z | 2021-01-14T09:28:42Z |
| suse-su-2021:0122-1 | Security update for MozillaThunderbird | 2021-01-14T09:28:05Z | 2021-01-14T09:28:05Z |
| suse-su-2021:0121-1 | Security update for nodejs8 | 2021-01-14T09:27:53Z | 2021-01-14T09:27:53Z |
| suse-su-2021:0118-1 | Security update for the Linux Kernel | 2021-01-14T05:16:52Z | 2021-01-14T05:16:52Z |
| suse-su-2021:0117-1 | Security update for the Linux Kernel | 2021-01-14T05:15:00Z | 2021-01-14T05:15:00Z |
| suse-su-2021:0093-1 | Security update for tcmu-runner | 2021-01-13T15:45:45Z | 2021-01-13T15:45:45Z |
| suse-su-2021:0115-1 | Security update for rubygem-archive-tar-minitar | 2021-01-13T15:30:38Z | 2021-01-13T15:30:38Z |
| suse-su-2021:0109-1 | Security update for libzypp, zypper | 2021-01-13T09:13:34Z | 2021-01-13T09:13:34Z |
| suse-su-2021:0108-1 | Security update for the Linux Kernel | 2021-01-13T08:53:33Z | 2021-01-13T08:53:33Z |
| suse-su-2021:0107-1 | Security update for nodejs14 | 2021-01-13T08:53:01Z | 2021-01-13T08:53:01Z |
| suse-su-2021:0099-1 | Security update for openstack-dashboard, release-notes-suse-openstack-cloud | 2021-01-12T18:47:08Z | 2021-01-12T18:47:08Z |
| suse-su-2021:0098-1 | Security update for the Linux Kernel | 2021-01-12T18:18:15Z | 2021-01-12T18:18:15Z |
| suse-su-2021:0097-1 | Security update for the Linux Kernel | 2021-01-12T18:16:17Z | 2021-01-12T18:16:17Z |
| suse-su-2021:0096-1 | Security update for the Linux Kernel | 2021-01-12T18:15:46Z | 2021-01-12T18:15:46Z |
| suse-su-2021:0095-1 | Security update for the Linux Kernel | 2021-01-12T18:14:55Z | 2021-01-12T18:14:55Z |
| suse-su-2021:0094-1 | Security update for the Linux Kernel | 2021-01-12T18:14:19Z | 2021-01-12T18:14:19Z |
| suse-su-2021:0090-1 | Security update for hawk2 | 2021-01-12T13:34:21Z | 2021-01-12T13:34:21Z |
| suse-su-2021:0089-1 | Security update for hawk2 | 2021-01-12T13:34:06Z | 2021-01-12T13:34:06Z |
| suse-su-2021:0088-1 | Security update for hawk2 | 2021-01-12T13:33:48Z | 2021-01-12T13:33:48Z |
| suse-su-2021:0087-1 | Security update for crmsh | 2021-01-12T13:33:10Z | 2021-01-12T13:33:10Z |
| suse-su-2021:0086-1 | Security update for crmsh | 2021-01-12T13:32:55Z | 2021-01-12T13:32:55Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-42940 | Microsoft Office远程代码执行漏洞(CNVD-2024-42940) | 2024-10-09 | 2024-11-05 |
| cnvd-2024-42939 | Microsoft Office Visio远程代码执行漏洞(CNVD-2024-42939) | 2024-09-12 | 2024-11-05 |
| cnvd-2024-42938 | Mozilla Firefox for iOS存在未明漏洞 | 2024-10-17 | 2024-11-04 |
| cnvd-2024-42937 | Mitel MiCollab SQL注入漏洞(CNVD-2024-42937) | 2024-10-28 | 2024-11-04 |
| cnvd-2024-42936 | Mitel MiCollab存在未明漏洞 | 2024-10-28 | 2024-11-04 |
| cnvd-2024-42935 | Mitel MiCollab输入验证错误漏洞 | 2024-10-28 | 2024-11-04 |
| cnvd-2024-42934 | Mitel MiCollab SQL注入漏洞(CNVD-2024-42934) | 2024-10-23 | 2024-11-04 |
| cnvd-2024-42933 | Mitel MiCollab跨站脚本漏洞(CNVD-2024-42933) | 2024-10-23 | 2024-11-04 |
| cnvd-2024-42932 | Mitel MiCollab SQL注入漏洞(CNVD-2024-42932) | 2024-10-23 | 2024-11-04 |
| cnvd-2024-42931 | Mitel MiCollab命令注入漏洞 | 2024-10-25 | 2024-11-04 |
| cnvd-2024-42930 | Mitel MiCollab SQL注入漏洞(CNVD-2024-42930) | 2024-10-25 | 2024-11-04 |
| cnvd-2024-42929 | Mitel MiCollab跨站脚本漏洞(CNVD-2024-42929) | 2024-10-28 | 2024-11-04 |
| cnvd-2024-42251 | 浙江大华技术股份有限公司Digital Surveillance System存在SQL注入漏洞(CNVD-2024-42251) | 2024-09-20 | 2024-11-04 |
| cnvd-2024-42247 | 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在SQL注入漏洞(CNVD-2024-42247) | 2024-09-20 | 2024-11-04 |
| cnvd-2024-42218 | 北京亿赛通科技发展有限责任公司电子文档安全管理系统存在SQL注入漏洞(CNVD-2024-42218) | 2024-09-20 | 2024-11-04 |
| cnvd-2024-43465 | 用友网络科技股份有限公司用友Nccloud存在SQL注入漏洞(CNVD-2024-43465) | 2024-09-18 | 2024-11-02 |
| cnvd-2024-41824 | 北京北大方正电子有限公司方正翔宇-工作平台存在未授权访问漏洞 | 2024-09-18 | 2024-11-02 |
| cnvd-2024-41817 | 山石网科通信技术(北京)有限公司下一代防火墙SG-6000存在弱口令漏洞 | 2024-09-18 | 2024-11-02 |
| cnvd-2024-42454 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42454) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42453 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42453) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42452 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42452) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42451 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42451) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42450 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42450) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42449 | Oracle MySQL Server存在未明漏洞(CNVD-2024-42449) | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42448 | OneBlog Lab模块跨站脚本漏洞 | 2024-03-22 | 2024-11-01 |
| cnvd-2024-42447 | J2eeFAST代码执行漏洞 | 2024-10-23 | 2024-11-01 |
| cnvd-2024-42446 | Tenda AX1806 sub_519F4函数堆栈缓冲区溢出漏洞(CNVD-2024-42446) | 2024-07-19 | 2024-11-01 |
| cnvd-2024-42445 | Tenda AX1806 sub_519F4函数堆栈缓冲区溢出漏洞 | 2024-07-19 | 2024-11-01 |
| cnvd-2024-42444 | TOTOLINK X5000R拒绝服务漏洞 | 2024-02-26 | 2024-11-01 |
| cnvd-2024-42443 | TOTOLINK X5000R和A7000R缓冲区溢出漏洞(CNVD-2024-42443) | 2024-03-19 | 2024-11-01 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2011-avi-142 | Vulnérabilité dans le client Remote Desktop de Windows | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-141 | Vulnérabilité dans Microsoft Groove | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-140 | Vulnérabilités dans Windows Media | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-139 | Vulnérabilité dans EnterpriseDB Postgres Plus Advanced Server | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-138 | Vulnérabilité dans Novell Vibe OnPrem | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-137 | Vulnérabilité dans Cisco Security Agent | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-136 | Vulnérabilité dans Apache Subversion | 2011-03-09T00:00:00.000000 | 2011-03-09T00:00:00.000000 |
| certa-2011-avi-135 | Vulnérabilité dans LibTIFF | 2011-03-04T00:00:00.000000 | 2011-03-04T00:00:00.000000 |
| certa-2011-avi-134 | Multiples vulnérabilités dans iTunes | 2011-03-04T00:00:00.000000 | 2011-03-04T00:00:00.000000 |
| certa-2011-avi-133 | Vulnérabilité dans PyWebDAV | 2011-03-04T00:00:00.000000 | 2011-03-04T00:00:00.000000 |
| certa-2011-avi-132 | Vulnérabilités dans syslog-ng | 2011-03-04T00:00:00.000000 | 2011-03-04T00:00:00.000000 |
| certa-2011-avi-131 | Multiples vulnérabilités dans Moodle | 2011-03-04T00:00:00.000000 | 2011-03-04T00:00:00.000000 |
| certa-2011-avi-130 | Vulnérabilité dans Alcatel OmniVista | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-129 | Vulnérabilités dans libpango | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-128 | Vulnérabilité dans Alcatel OmniPCX Enterprise | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-127 | Multiples vulnérabilités dans les produits Mozilla | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-126 | Multiples vulnérabilités dans Google Chrome | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-125 | Multiples vulnérabilités dans Wireshark | 2011-03-03T00:00:00.000000 | 2011-03-03T00:00:00.000000 |
| certa-2011-avi-124 | Vulnérabilité dans PEAR | 2011-03-01T00:00:00.000000 | 2011-03-01T00:00:00.000000 |
| certa-2011-avi-123 | Vulnérabilité dans HP Web Jetadmin | 2011-03-01T00:00:00.000000 | 2011-03-01T00:00:00.000000 |
| certa-2011-avi-122 | Vulnérabilité dans Sybase Afaria Data Security Manager | 2011-03-01T00:00:00.000000 | 2011-03-01T00:00:00.000000 |
| certa-2011-avi-121 | Vulnérabilité dans Avahi | 2011-03-01T00:00:00.000000 | 2011-03-01T00:00:00.000000 |
| certa-2011-avi-120 | Vulnérabilité dans Samba | 2011-03-01T00:00:00.000000 | 2011-03-01T00:00:00.000000 |
| certa-2011-avi-119 | Vulnérabilité dans Foxit Reader | 2011-02-28T00:00:00.000000 | 2011-02-28T00:00:00.000000 |
| certa-2011-avi-118 | Vulnérabilité dans IBM Tivoli Common Reporting | 2011-02-28T00:00:00.000000 | 2011-02-28T00:00:00.000000 |
| certa-2011-avi-117 | Vulnérabilité dans IBM Lotus Connections | 2011-02-28T00:00:00.000000 | 2011-02-28T00:00:00.000000 |
| certa-2011-avi-116 | Vulnérabilité dans Citrix Secure Gateway | 2011-02-28T00:00:00.000000 | 2011-02-28T00:00:00.000000 |
| certa-2011-avi-103 | Vulnérabilité dans ISC Bind | 2011-02-23T00:00:00.000000 | 2011-02-28T00:00:00.000000 |
| certa-2011-avi-115 | Vulnérabilité dans RT | 2011-02-25T00:00:00.000000 | 2011-02-25T00:00:00.000000 |
| certa-2011-avi-114 | Vulnérabilité dans Citrix XenApp et XenDesktop | 2011-02-25T00:00:00.000000 | 2011-02-25T00:00:00.000000 |