Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-12548
9 (3.1)
Github.com/che-incubator/che-code: eclipse che — unaut… Red Hat
Red Hat OpenShift Dev Spaces (RHOSDS) 3.22
2026-01-13T15:35:01.329Z 2026-01-21T22:19:04.636Z
CVE-2026-22598
7.1 (4.0)
ManageIQ vulnerable to DoS Attack when creating TimeP… ManageIQ
manageiq
2026-01-21T20:51:52.972Z 2026-01-21T21:35:27.687Z
CVE-2023-7334
9.3 (4.0)
Changjetong T+ <= 16.x GetStoreWarehouseByStore Deseri… Changjetong Information Technology Co., Ltd.
T+
2026-01-15T21:44:58.843Z 2026-01-21T21:34:52.585Z
CVE-2026-21852
5.3 (4.0)
Claude Code Leaks Data via Malicious Environment Confi… anthropics
claude-code
2026-01-21T20:42:06.812Z 2026-01-21T21:34:43.858Z
CVE-2025-69209
6.9 (4.0)
ArduinoCore-avr has Stack-Based Buffer Overflow in WSt… arduino
ArduinoCore-avr
2026-01-21T20:00:41.026Z 2026-01-21T21:28:52.505Z
CVE-2025-69285
7.7 (4.0)
SQLBot uploadExcel Endpoint has Unauthenticated Arbitr… dataease
SQLBot
2026-01-21T20:05:22.108Z 2026-01-21T21:27:55.889Z
CVE-2026-22792
9.7 (3.1)
5ire vulnerable to Remote Code Execution (RCE) nanbingxyz
5ire
2026-01-21T20:54:18.108Z 2026-01-21T21:26:47.676Z
CVE-2026-22793
9.7 (3.1)
5ire vulnerable to Remote Code Execution (RCE) via ECharts nanbingxyz
5ire
2026-01-21T21:06:58.205Z 2026-01-21T21:26:07.121Z
CVE-2026-23944
8 (4.0)
Arcane allows unauthenticated proxy access to remote e… getarcaneapp
arcane
2026-01-19T21:16:08.193Z 2026-01-21T21:17:24.259Z
CVE-2026-23885
6.4 (3.1)
AlchemyCMS has Authenticated Remote Code Execution (RC… AlchemyCMS
alchemy_cms
2026-01-19T21:09:06.757Z 2026-01-21T21:12:51.110Z
CVE-2026-21938
6.1 (3.1)
Vulnerability in the PeopleSoft Enterprise People… Oracle Corporation
PeopleSoft Enterprise PeopleTools
2026-01-20T21:56:25.746Z 2026-01-21T20:59:06.372Z
CVE-2026-21937
4.9 (3.1)
Vulnerability in the MySQL Server product of Orac… Oracle Corporation
MySQL Server
2026-01-20T21:56:25.387Z 2026-01-21T20:58:32.805Z
CVE-2026-21936
4.9 (3.1)
Vulnerability in the MySQL Server product of Orac… Oracle Corporation
MySQL Cluster
2026-01-20T21:56:25.060Z 2026-01-21T20:57:55.683Z
CVE-2026-21934
5.4 (3.1)
Vulnerability in the PeopleSoft Enterprise People… Oracle Corporation
PeopleSoft Enterprise PeopleTools
2026-01-20T21:56:24.390Z 2026-01-21T20:56:50.624Z
CVE-2026-21933
6.1 (3.1)
Vulnerability in the Oracle Java SE, Oracle Graal… Oracle Corporation
Oracle Java SE
2026-01-20T21:56:24.083Z 2026-01-21T20:56:25.029Z
CVE-2026-21932
7.4 (3.1)
Vulnerability in the Oracle Java SE, Oracle Graal… Oracle Corporation
Oracle Java SE
2026-01-20T21:56:23.742Z 2026-01-21T20:55:54.335Z
CVE-2026-21931
5.4 (3.1)
Vulnerability in the Oracle APEX Sample Applicati… Oracle Corporation
Oracle APEX Sample Applications
2026-01-20T21:56:23.267Z 2026-01-21T20:55:14.477Z
CVE-2026-21929
5.3 (3.1)
Vulnerability in the MySQL Server product of Orac… Oracle Corporation
MySQL Server
2026-01-20T21:56:22.578Z 2026-01-21T20:54:43.658Z
CVE-2026-21930
2.3 (3.1)
Vulnerability in the Oracle ZFS Storage Appliance… Oracle Corporation
Oracle ZFS Storage Appliance Kit
2026-01-20T21:56:22.940Z 2026-01-21T20:54:21.244Z
CVE-2026-21928
5.3 (3.1)
Vulnerability in the Oracle Solaris product of Or… Oracle Corporation
Oracle Solaris
2026-01-20T21:56:22.236Z 2026-01-21T20:52:42.304Z
CVE-2026-21926
7.5 (3.1)
Vulnerability in the Siebel CRM Deployment produc… Oracle Corporation
Siebel CRM Deployment
2026-01-20T21:56:21.443Z 2026-01-21T20:51:46.300Z
CVE-2026-21925
4.8 (3.1)
Vulnerability in the Oracle Java SE, Oracle Graal… Oracle Corporation
Oracle Java SE
2026-01-20T21:56:21.058Z 2026-01-21T20:51:07.046Z
CVE-2026-21924
5.4 (3.1)
Vulnerability in the Oracle Utilities Application… Oracle Corporation
Oracle Utilities Application Framework
2026-01-20T21:56:20.732Z 2026-01-21T20:50:06.753Z
CVE-2026-21923
6.5 (3.1)
Vulnerability in the Oracle Life Sciences Central… Oracle Corporation
Oracle Life Sciences Central Designer
2026-01-20T21:56:20.389Z 2026-01-21T20:49:28.694Z
CVE-2026-21922
4.2 (3.1)
Vulnerability in the Oracle Planning and Budgetin… Oracle Corporation
Oracle Planning and Budgeting Cloud Service
2026-01-20T21:56:19.994Z 2026-01-21T20:48:53.795Z
CVE-2026-21642
6.1 (3.0)
HackerOne community member Patrick Lang (7yr) has… Revive
Revive Adserver
2026-01-20T20:48:48.079Z 2026-01-21T20:47:21.691Z
CVE-2026-23886
5.3 (3.1)
Swift W3C TraceContext has malformed HTTP header that … swift-otel
swift-w3c-trace-context
2026-01-19T21:01:52.694Z 2026-01-21T20:47:10.139Z
CVE-2026-21664
6.1 (3.0)
HackerOne community member Huynh Pham Thanh Luc (… Revive
Revive Adserver
2026-01-20T20:48:47.976Z 2026-01-21T20:45:35.234Z
CVE-2026-21663
6.1 (3.0)
HackerOne community member Patrick Lang (7yr) has… Revive
Revive Adserver
2026-01-20T20:48:47.974Z 2026-01-21T20:42:21.072Z
CVE-2025-59464
6.5 (3.0)
A memory leak in Node.js’s OpenSSL integration oc… nodejs
node
2026-01-20T20:41:55.599Z 2026-01-21T20:41:09.437Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-48093
7.1 (3.1)
WordPress Password only login plugin <= 0.2 - Reflecte… Calvaweb
Password only login
2025-10-22T14:32:06.499Z 2026-01-20T14:28:06.143Z
CVE-2025-48092
7.1 (3.1)
WordPress Fix Multiple Redirects plugin <= 1.2.3 - Ref… jurajpuchky
Fix Multiple Redirects
2025-10-22T14:32:06.317Z 2026-01-20T14:28:06.013Z
CVE-2025-48091
8.5 (3.1)
WordPress AnyComment plugin <= 0.3.6 - SQL Injection v… Alexander
AnyComment
2025-10-22T14:32:06.134Z 2026-01-20T14:28:05.973Z
CVE-2025-48090
8.2 (3.1)
WordPress Blanka - One Page WordPress Theme Theme < 1.… CocoBasic
Blanka - One Page WordPress Theme
2025-11-06T15:53:43.727Z 2026-01-20T14:28:05.889Z
CVE-2025-48089
9.8 (3.1)
WordPress Education WordPress Theme | HiStudy theme < … Rainbow-Themes
Education WordPress Theme | HiStudy
2025-11-06T15:53:43.152Z 2026-01-20T14:28:05.780Z
CVE-2025-48088
6.5 (3.1)
WordPress Ultimate Addons for WPBakery Page Builder pl… Brainstorm Force
Ultimate Addons for WPBakery Page Builder
2025-10-27T02:09:52.224Z 2026-01-20T14:28:05.703Z
CVE-2025-48087
6.5 (3.1)
WordPress Memberlite Shortcodes plugin <= 1.4.1 - Cros… Jason C.
Memberlite Shortcodes
2025-10-17T14:18:04.368Z 2026-01-20T14:28:05.761Z
CVE-2025-48086
9.8 (3.1)
WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Obje… wpdreams
Ajax Search Lite
2025-11-06T15:53:42.585Z 2026-01-20T14:28:05.623Z
CVE-2025-48085
8.8 (3.1)
WordPress Simple Stripe plugin <= 0.9.17 - Cross Site … ZIPANG
Simple Stripe
2025-11-06T15:53:41.777Z 2026-01-20T14:28:05.540Z
CVE-2025-48083
8.8 (3.1)
WordPress wpNamedUsers plugin <= 0.5 - Cross Site Requ… andriassundskard
wpNamedUsers
2025-11-06T15:53:40.546Z 2026-01-20T14:28:05.728Z
CVE-2025-48082
8.8 (3.1)
WordPress Progress Planner plugin <= 1.8.0 - Privilege… Progress Planner
Progress Planner
2025-10-22T14:32:05.935Z 2026-01-20T14:28:05.589Z
CVE-2025-48078
8.8 (3.1)
WordPress Slick Google Map plugin <= 0.3 - Cross Site … Norbert
Slick Google Map
2025-11-06T15:53:37.443Z 2026-01-20T14:28:05.590Z
CVE-2025-48077
8.8 (3.1)
WordPress Block Country plugin <= 1.0 - Cross Site Req… nitinmaurya12
Block Country
2025-11-06T15:53:36.642Z 2026-01-20T14:28:05.512Z
CVE-2025-47588
9.8 (3.1)
WordPress Dynamic Pricing With Discount Rules for WooC… acowebs
Dynamic Pricing With Discount Rules for WooCommerce
2025-11-06T15:53:35.904Z 2026-01-20T14:28:05.523Z
CVE-2025-47566
7.1 (3.1)
WordPress ZoomSounds plugin <= 6.91 - Reflected Cross … ZoomSounds
ZoomSounds
2025-12-31T20:07:56.919Z 2026-01-20T14:28:05.562Z
CVE-2025-46255
7.5 (3.1)
WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Settings C… Marketing Fire LLC
LoginWP - Pro
2026-01-05T16:44:34.478Z 2026-01-20T14:28:05.508Z
CVE-2025-39561
6.5 (3.1)
WordPress LoginWP - Pro Plugin <= 4.0.8.5 - Broken Acc… Marketing Fire, LLC
LoginWP - Pro
2026-01-05T16:50:25.554Z 2026-01-20T14:28:05.437Z
CVE-2025-39534
7.1 (3.1)
WordPress Terms Dictionary Plugin <= 1.5.1 - Reflected… Somonator
Terms Dictionary
2025-10-22T14:32:05.744Z 2026-01-20T14:28:05.517Z
CVE-2025-39497
6.5 (3.1)
WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scri… Dokan
Dokan Pro
2026-01-05T16:51:39.889Z 2026-01-20T14:28:05.472Z
CVE-2025-39484
9.3 (3.1)
WordPress Entrada Theme <= 5.7.7 - SQL Injection vulne… Waituk
Entrada
2026-01-05T16:53:28.100Z 2026-01-20T14:28:05.385Z
CVE-2025-39468
9.8 (3.1)
WordPress Modal Survey plugin <= 2.0.2.0.1 - Local Fil… pantherius
Modal Survey
2025-11-06T15:53:34.539Z 2026-01-20T14:28:05.416Z
CVE-2025-39465
8.1 (3.1)
WordPress Advanced Google Maps plugin <= 5.8.4 - Broke… flippercode
Advanced Google Maps
2025-11-06T15:53:29.145Z 2026-01-20T14:28:05.359Z
CVE-2025-39463
9.8 (3.1)
WordPress Dessau theme < 1.9 - Local File Inclusion vu… Select-Themes
Dessau
2025-11-06T15:53:23.424Z 2026-01-20T14:28:05.344Z
CVE-2025-32657
7.5 (3.1)
WordPress Testimonial Slider and Showcase Pro plugin <… RadiusTheme
Testimonial Slider And Showcase Pro
2025-10-22T14:32:05.506Z 2026-01-20T14:28:05.445Z
CVE-2025-32283
8.8 (3.1)
WordPress Solar Energy theme <= 3.5 - PHP Object Injec… designthemes
Solar Energy
2025-10-22T14:32:05.260Z 2026-01-20T14:28:05.397Z
CVE-2025-32222
9.8 (3.1)
WordPress Widget Logic <= 6.0.5 - Remote Code Executio… Widgetlogic.org
Widget Logic
2025-11-06T15:53:22.717Z 2026-01-20T14:28:05.039Z
CVE-2025-31634
8.8 (3.1)
WordPress Insurance theme <= 3.5 - PHP Object Injectio… designthemes
Insurance
2025-10-22T14:32:05.043Z 2026-01-20T14:28:05.105Z
CVE-2025-31054
7.1 (3.1)
WordPress Bloggie theme <= 2.0.8 - Cross Site Scriptin… Themefy
Bloggie
2025-12-31T20:05:20.832Z 2026-01-20T14:28:04.874Z
CVE-2025-31048
9.9 (3.1)
WordPress Shopo <= 1.1.4 - Arbitrary File Upload Vulne… Themify
Shopo
2026-01-05T10:27:01.221Z 2026-01-20T14:28:05.731Z
CVE-2025-31047
8.8 (3.1)
WordPress Themify Edmin theme <= 2.0.0 - PHP Object In… Themify
Themify Edmin
2026-01-05T10:26:04.107Z 2026-01-20T14:28:04.925Z
ID Description Published Updated
fkie_cve-2025-48092 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:33.963 2026-01-20T15:16:29.667
fkie_cve-2025-48091 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-10-22T15:15:33.840 2026-01-20T15:16:28.740
fkie_cve-2025-48090 Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp … 2025-11-06T16:15:52.423 2026-01-20T15:16:27.027
fkie_cve-2025-48089 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-11-06T16:15:52.270 2026-01-20T15:16:26.877
fkie_cve-2025-48088 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-27T03:15:50.727 2026-01-20T15:16:26.767
fkie_cve-2025-48087 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-17T15:15:38.730 2026-01-20T15:16:26.650
fkie_cve-2025-48086 Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allow… 2025-11-06T16:15:52.120 2026-01-20T15:16:26.520
fkie_cve-2025-48085 Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored… 2025-11-06T16:15:51.970 2026-01-20T15:16:26.377
fkie_cve-2025-48083 Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allow… 2025-11-06T16:15:51.810 2026-01-20T15:16:26.243
fkie_cve-2025-48082 Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner … 2025-10-22T15:15:33.707 2026-01-20T15:16:26.110
fkie_cve-2025-48078 Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows… 2025-11-06T16:15:51.670 2026-01-20T15:16:25.983
fkie_cve-2025-48077 Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows… 2025-11-06T16:15:51.513 2026-01-20T15:16:25.853
fkie_cve-2025-47588 Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing … 2025-11-06T16:15:51.363 2026-01-20T15:16:25.713
fkie_cve-2025-47566 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-31T20:15:42.650 2026-01-20T15:16:25.607
fkie_cve-2025-46255 Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functional… 2026-01-05T17:15:45.480 2026-01-20T15:16:25.347
fkie_cve-2025-39561 Missing Authorization vulnerability in Marketing Fire, LLC LoginWP - Pro allows Accessing Functiona… 2026-01-05T17:15:45.330 2026-01-20T15:16:24.937
fkie_cve-2025-39534 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-10-22T15:15:33.580 2026-01-20T15:16:24.800
fkie_cve-2025-39497 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-05T17:15:45.183 2026-01-20T15:16:24.693
fkie_cve-2025-39484 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-05T17:15:45.033 2026-01-20T15:16:24.590
fkie_cve-2025-39468 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:51.210 2026-01-20T15:16:24.457
fkie_cve-2025-39465 Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows E… 2025-11-06T16:15:50.700 2026-01-20T15:16:24.050
fkie_cve-2025-39463 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-11-06T16:15:50.447 2026-01-20T15:16:23.910
fkie_cve-2025-32657 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-10-22T15:15:33.443 2026-01-20T15:16:23.557
fkie_cve-2025-32283 Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object In… 2025-10-22T15:15:33.307 2026-01-20T15:16:23.413
fkie_cve-2025-32222 Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget L… 2025-11-06T16:15:50.237 2026-01-20T15:16:23.270
fkie_cve-2025-31634 Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object I… 2025-10-22T15:15:33.180 2026-01-20T15:16:23.097
fkie_cve-2025-31054 Cross-Site Request Forgery (CSRF) vulnerability in Themefy Bloggie allows Reflected XSS.This issue … 2025-12-31T20:15:42.500 2026-01-20T15:16:22.983
fkie_cve-2025-31048 Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web … 2026-01-05T11:17:40.780 2026-01-20T15:16:22.870
fkie_cve-2025-31047 Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.Th… 2026-01-05T11:17:40.637 2026-01-20T15:16:22.767
fkie_cve-2025-31046 Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly… 2026-01-05T11:17:40.490 2026-01-20T15:16:22.657
ID Severity Description Published Updated
ghsa-ccg2-vgx8-m2xv
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-9mc2-qj8m-rw7x
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-8rw2-hf9g-35wh
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-835q-cj89-gwxm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-7f46-wwmf-m6v3
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-72r9-6hhq-8j4p
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-6vv4-r35q-4h6w
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-5jp5-2ccp-575c
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-34vr-x63q-c2p5
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-2j4x-8g92-58rm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:40Z 2026-01-02T18:30:40Z
ghsa-wvc2-m599-j75p
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-v7f2-hxcr-p5rp
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-rq6v-8fv9-q7fm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-qcjq-c899-cf23
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-mp73-fr35-fqwg
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-jg7g-h9qm-xvp8
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-jf4r-c4mx-rq75
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-h7vx-h627-3gqp
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-h65g-vj43-3q9g
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-g9m9-wh2p-wcxm
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-fh2p-m273-g65j
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-9rwx-9v8w-m33v
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-94wj-fc7f-845h
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-7h5f-mpjc-vfm3
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-79x4-f782-c29m
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-7588-w2hf-mpw6
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-5rw8-h6r4-fv28
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-5f6h-2m8p-p84p
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-456g-4jpc-gj7q
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ghsa-44j4-f8g7-6rvw
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … 2026-01-02T18:30:39Z 2026-01-02T18:30:39Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25673 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.295720Z
gsd-2024-25680 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.287316Z
gsd-2024-25704 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise… 2024-02-10T06:02:58.286598Z
gsd-2024-25696 There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions <=11.0 tha… 2024-02-10T06:02:58.278203Z
gsd-2024-25681 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.274973Z
gsd-2024-25685 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.270895Z
gsd-2024-25653 Broken Access Control in the Report functionality of Delinea PAM Secret Server 11.4 allow… 2024-02-10T06:02:58.270216Z
gsd-2024-25693 There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploit… 2024-02-10T06:02:58.263352Z
gsd-2024-25691 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.262510Z
gsd-2024-25671 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.260112Z
gsd-2024-25666 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.258741Z
gsd-2024-25658 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.254063Z
gsd-2024-25695 There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions <= 11.2 th… 2024-02-10T06:02:58.252685Z
gsd-2024-25690 There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and belo… 2024-02-10T06:02:58.250620Z
gsd-2024-25684 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.247760Z
gsd-2024-25657 An open redirect in the Login/Logout functionality of web management in AVSystem Unified … 2024-02-10T06:02:58.243474Z
gsd-2024-25664 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.242417Z
gsd-2024-25698 There is a reflected cross site scripting vulnerability in the home application in Esri P… 2024-02-10T06:02:58.240798Z
gsd-2024-25676 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.225525Z
gsd-2024-25689 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.221486Z
gsd-2024-25674 An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure beca… 2024-02-10T06:02:58.220453Z
gsd-2024-25688 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.211152Z
gsd-2024-25707 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.208907Z
gsd-2024-25709 There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS versions 1… 2024-02-10T06:02:58.203133Z
gsd-2024-25703 There is a reflected cross site scripting vulnerability in the home application in Esri P… 2024-02-10T06:02:58.201943Z
gsd-2024-25705 There is a cross site scripting vulnerability in the Esri Portal for ArcGIS Experience Bu… 2024-02-10T06:02:58.201554Z
gsd-2024-25687 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.196851Z
gsd-2024-25654 Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.… 2024-02-10T06:02:58.195016Z
gsd-2024-25672 The format of the source doesn't require a description, click on the link for more details. 2024-02-10T06:02:58.189943Z
gsd-2024-25706 There is an HTML injection vulnerability in Esri Portal for ArcGIS <=11.0 that may allow … 2024-02-10T06:02:58.178815Z
ID Description Published Updated
mal-2025-183865 Malicious code in masv-ilisiamo-civufagvuna (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183864 Malicious code in masv-ilisiamo-civufagvuana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183863 Malicious code in masv-ilisiamo-civufagvuafana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183862 Malicious code in masv-ilisiamo-civufaguna (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183861 Malicious code in masv-ilisiamo-civufaagvuafana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183860 Malicious code in masv-ilisiamo-civufaa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183859 Malicious code in masv-ilisiamo-civufa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183858 Malicious code in masv-ilisiamo-civuf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183857 Malicious code in masv-ilisiamo-ciuf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183856 Malicious code in masv-ilimo-civuffana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183855 Malicious code in masv-ilimo-civufavicasaba (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183854 Malicious code in masv-ilimo-civufavicasa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183853 Malicious code in masv-ilimo-civufaviasa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183852 Malicious code in masv-ilimo-civufavia (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183851 Malicious code in masv-ilimo-civufava (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183850 Malicious code in masv-ilimo-civufana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183849 Malicious code in masv-ilimo-civufagvuafana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183848 Malicious code in masv-ilimo-civufaguafana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183847 Malicious code in masv-ilimo-civufaa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183846 Malicious code in masv-ilimo-civufa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183845 Malicious code in masv-iliimo-civufaagvuafana (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183844 Malicious code in masolv-ilo-cvu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183843 Malicious code in masolv-ilo-cvhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183842 Malicious code in masolv-ilo-cvaihu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183841 Malicious code in masolv-ilo-cvahu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183840 Malicious code in masolv-ilo-cvaginhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183839 Malicious code in masolv-ilo-cvaginavuovhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183838 Malicious code in masolv-ilo-cvaginauvhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183837 Malicious code in masolv-ilo-cvaginauovhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183836 Malicious code in masolv-ilo-cvaginanavcuovhu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2023:7576 Red Hat Security Advisory: squid security update 2023-11-29T13:51:56+00:00 2025-11-21T18:51:41+00:00
rhsa-2023:7574 Red Hat Security Advisory: thunderbird security update 2023-11-29T13:46:34+00:00 2025-11-21T18:51:41+00:00
rhsa-2023:7573 Red Hat Security Advisory: firefox security update 2023-11-29T13:46:28+00:00 2025-11-21T18:51:41+00:00
rhsa-2023:7570 Red Hat Security Advisory: thunderbird security update 2023-11-29T12:53:34+00:00 2025-11-21T18:51:40+00:00
rhsa-2023:7569 Red Hat Security Advisory: firefox security update 2023-11-29T12:54:14+00:00 2025-11-21T18:51:40+00:00
rhsa-2023:7559 Red Hat Security Advisory: kpatch-patch security update 2023-11-28T19:07:02+00:00 2025-11-21T18:51:40+00:00
rhsa-2023:7547 Red Hat Security Advisory: firefox security update 2023-11-28T16:04:21+00:00 2025-11-21T18:51:37+00:00
rhsa-2023:7544 Red Hat Security Advisory: libxml2 security update 2023-11-28T15:40:05+00:00 2025-11-21T18:51:37+00:00
rhsa-2023:7533 Red Hat Security Advisory: tigervnc security update 2023-11-28T15:39:05+00:00 2025-11-21T18:51:35+00:00
rhsa-2023:7531 Red Hat Security Advisory: pixman security update 2023-11-28T15:39:33+00:00 2025-11-21T18:51:34+00:00
rhsa-2023:7526 Red Hat Security Advisory: tigervnc security update 2023-11-28T15:32:26+00:00 2025-11-21T18:51:34+00:00
rhsa-2023:7501 Red Hat Security Advisory: thunderbird security update 2023-11-27T15:52:28+00:00 2025-11-21T18:51:32+00:00
rhsa-2023:7512 Red Hat Security Advisory: firefox security update 2023-11-27T16:30:33+00:00 2025-11-21T18:51:31+00:00
rhsa-2023:7511 Red Hat Security Advisory: firefox security update 2023-11-27T16:11:18+00:00 2025-11-21T18:51:31+00:00
rhsa-2023:7510 Red Hat Security Advisory: firefox security update 2023-11-27T16:08:30+00:00 2025-11-21T18:51:31+00:00
rhsa-2023:7509 Red Hat Security Advisory: firefox security update 2023-11-27T16:25:38+00:00 2025-11-21T18:51:30+00:00
rhsa-2023:7508 Red Hat Security Advisory: firefox security update 2023-11-27T16:13:33+00:00 2025-11-21T18:51:30+00:00
rhsa-2023:7507 Red Hat Security Advisory: firefox security update 2023-11-27T16:11:29+00:00 2025-11-21T18:51:30+00:00
rhsa-2023:7506 Red Hat Security Advisory: thunderbird security update 2023-11-27T16:08:34+00:00 2025-11-21T18:51:29+00:00
rhsa-2023:7505 Red Hat Security Advisory: thunderbird security update 2023-11-27T16:14:18+00:00 2025-11-21T18:51:29+00:00
rhsa-2023:7504 Red Hat Security Advisory: thunderbird security update 2023-11-27T15:53:13+00:00 2025-11-21T18:51:29+00:00
rhsa-2023:7503 Red Hat Security Advisory: thunderbird security update 2023-11-27T16:02:57+00:00 2025-11-21T18:51:29+00:00
rhsa-2023:7502 Red Hat Security Advisory: thunderbird security update 2023-11-27T15:47:58+00:00 2025-11-21T18:51:28+00:00
rhsa-2023:7500 Red Hat Security Advisory: thunderbird security update 2023-11-27T15:52:37+00:00 2025-11-21T18:51:28+00:00
rhsa-2023:7499 Red Hat Security Advisory: thunderbird security update 2023-11-27T15:48:43+00:00 2025-11-21T18:51:27+00:00
rhsa-2023:7467 Red Hat Security Advisory: samba security update 2023-11-22T17:41:47+00:00 2025-11-21T18:51:21+00:00
rhsa-2023:7436 Red Hat Security Advisory: tigervnc security update 2023-11-21T15:33:59+00:00 2025-11-21T18:51:21+00:00
rhsa-2023:7465 Red Hat Security Advisory: squid security update 2023-11-22T17:28:07+00:00 2025-11-21T18:51:20+00:00
rhsa-2023:7464 Red Hat Security Advisory: samba security update 2023-11-22T17:34:47+00:00 2025-11-21T18:51:20+00:00
rhsa-2023:7428 Red Hat Security Advisory: tigervnc security update 2023-11-21T15:49:14+00:00 2025-11-21T18:51:19+00:00
ID Description Published Updated
msrc_cve-2021-28691 Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer. 2021-06-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28660 rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases CVE IDs are not normally used for drivers/staging/* (unfinished work); however system integrators may have situations in which a drivers/staging issue is relevant to their own customer base. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28375 An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages aka CID-20c40794eb85. This is a related issue to CVE-2019-2308. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-28153 An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink it incorrectly also creates the target of the symlink as an empty file which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists then the contents of that file correctly remain unchanged.) 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27803 A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code) for an attacker within radio range. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27365 An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI and has a length up to the maximum length of a Netlink message. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27364 An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27363 An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem the transport's handle is available to unprivileged users via the sysfs file system at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables. 2021-03-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27219 An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27218 An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform the length would be truncated modulo 2**32 causing unintended length truncation. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-27212 In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-26927 A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-26926 A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash. 2021-02-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-26691 Apache HTTP Server mod_session response handling heap overflow 2021-06-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-26690 mod_session NULL pointer dereference 2021-06-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-25219 Lame cache can be abused to severely degrade resolver performance 2021-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-25217 A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient 2021-05-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2481 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2021-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2479 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2478 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-10-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2357 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2356 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2354 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2352 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2340 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-2339 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2021-07-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-23134 Linux kernel llcp_sock_bind/connect use-after-free 2021-05-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-22946 A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations exposing possibly sensitive data in clear text over the network. 2021-09-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-22945 When sending data to an MQTT server libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*. 2021-09-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
msrc_cve-2021-22940 Node.js before 16.6.1 14.17.5 and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption to change process behavior. 2021-08-02T00:00:00.000Z 2021-12-16T00:00:00.000Z
ID Description Updated
var-201602-0086 Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authent… 2025-04-13T23:03:16.505000Z
var-201602-0088 Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6… 2025-04-13T23:03:16.466000Z
var-201602-0192 Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5… 2025-04-13T23:03:14.073000Z
var-201602-0193 Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NM… 2025-04-13T23:03:14.029000Z
var-201602-0295 Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attem… 2025-04-13T23:03:13.969000Z
var-201602-0314 Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC bef… 2025-04-13T23:03:13.938000Z
var-201602-0315 Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC bef… 2025-04-13T23:03:13.906000Z
var-201602-0316 Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC bef… 2025-04-13T23:03:13.874000Z
var-201603-0276 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.… 2025-04-13T23:03:13.834000Z
var-201602-0340 Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O… 2025-04-13T23:03:13.794000Z
var-201603-0270 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.… 2025-04-13T23:03:13.755000Z
var-201602-0342 Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x befo… 2025-04-13T23:03:13.716000Z
var-201603-0268 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:13.676000Z
var-201602-0321 Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O… 2025-04-13T23:03:13.595000Z
var-201602-0333 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x be… 2025-04-13T23:03:13.555000Z
var-201603-0261 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.… 2025-04-13T23:03:13.515000Z
var-201603-0272 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:13.476000Z
var-201602-0337 Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O… 2025-04-13T23:03:13.436000Z
var-201603-0201 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.798000Z
var-201603-0269 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.757000Z
var-201603-0279 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.717000Z
var-201602-0335 Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O… 2025-04-13T23:03:09.677000Z
var-201603-0200 Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x … 2025-04-13T23:03:09.635000Z
var-201603-0278 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.594000Z
var-201602-0326 Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and O… 2025-04-13T23:03:09.552000Z
var-201603-0275 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.511000Z
var-201603-0199 Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows a… 2025-04-13T23:03:09.467000Z
var-201603-0265 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.… 2025-04-13T23:03:09.426000Z
var-201603-0264 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.… 2025-04-13T23:03:09.385000Z
var-201602-0325 Use-after-free vulnerability in the instanceof function in Adobe Flash Player before 18.0… 2025-04-13T23:03:09.341000Z
ID Description Updated
ID Description Published Updated
suse-su-2020:3670-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) 2020-12-07T16:33:27Z 2020-12-07T16:33:27Z
suse-su-2020:3656-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) 2020-12-07T16:27:31Z 2020-12-07T16:27:31Z
suse-su-2020:3651-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) 2020-12-07T16:27:15Z 2020-12-07T16:27:15Z
suse-su-2020:3653-1 Security update for xen 2020-12-07T16:26:50Z 2020-12-07T16:26:50Z
suse-su-2020:3648-1 Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2) 2020-12-07T16:24:47Z 2020-12-07T16:24:47Z
suse-su-2020:3642-1 Security update for MozillaThunderbird 2020-12-07T12:30:26Z 2020-12-07T12:30:26Z
suse-su-2020:3632-1 Security update for mutt 2020-12-07T10:50:59Z 2020-12-07T10:50:59Z
suse-su-2020:3631-1 Security update for xen 2020-12-07T10:41:10Z 2020-12-07T10:41:10Z
suse-su-2020:3630-1 Security update for postgresql12 2020-12-04T16:09:07Z 2020-12-04T16:09:07Z
suse-su-2020:3629-1 Security update for python-cryptography 2020-12-04T16:04:08Z 2020-12-04T16:04:08Z
suse-su-2020:3628-1 Security update for fontforge 2020-12-04T16:02:56Z 2020-12-04T16:02:56Z
suse-su-2020:3627-1 Security update for xen 2020-12-04T15:59:58Z 2020-12-04T15:59:58Z
suse-su-2020:2947-1 Security update for gcc10, nvptx-tools 2020-12-04T12:51:31Z 2020-12-04T12:51:31Z
suse-su-2020:3625-1 Security update for mariadb 2020-12-04T11:52:48Z 2020-12-04T11:52:48Z
suse-su-2020:3624-1 Security update for crowbar-openstack, grafana, influxdb, python-urllib3 2020-12-04T11:50:23Z 2020-12-04T11:50:23Z
suse-su-2020:3615-1 Security update for xen 2020-12-03T09:02:06Z 2020-12-03T09:02:06Z
suse-su-2020:3614-1 Security update for gdm 2020-12-03T08:36:40Z 2020-12-03T08:36:40Z
suse-su-2020:3613-1 Security update for rpmlint 2020-12-03T08:34:29Z 2020-12-03T08:34:29Z
suse-su-2020:3612-1 Security update for xen 2020-12-03T08:34:07Z 2020-12-03T08:34:07Z
suse-su-2020:3611-1 Security update for xen 2020-12-03T08:33:58Z 2020-12-03T08:33:58Z
suse-su-2020:3599-1 Security update for python-pip 2020-12-02T12:54:27Z 2020-12-02T12:54:27Z
suse-su-2020:3597-1 Security update for python 2020-12-02T09:46:58Z 2020-12-02T09:46:58Z
suse-su-2020:3596-1 Security update for python3 2020-12-02T09:41:42Z 2020-12-02T09:41:42Z
suse-su-2020:3594-1 Security update for python-setuptools 2020-12-02T09:37:52Z 2020-12-02T09:37:52Z
suse-su-2020:3593-1 Security update for python3 2020-12-02T09:34:53Z 2020-12-02T09:34:53Z
suse-su-2020:3592-1 Security update for python-cryptography 2020-12-02T09:31:43Z 2020-12-02T09:31:43Z
suse-su-2020:3591-1 Security update for java-1_8_0-openjdk 2020-12-02T08:59:04Z 2020-12-02T08:59:04Z
suse-su-2020:3589-1 Security update for xorg-x11-server 2020-12-01T15:32:40Z 2020-12-01T15:32:40Z
suse-su-2020:3588-1 Security update for xorg-x11-server 2020-12-01T15:32:13Z 2020-12-01T15:32:13Z
suse-su-2020:3587-1 Security update for xorg-x11-server 2020-12-01T15:31:40Z 2020-12-01T15:31:40Z
ID Description Published Updated
cnvd-2024-41485 OpenHIS SQL注入漏洞 2024-10-17 2024-10-24
cnvd-2024-41484 JEPaaS SQL注入漏洞 2024-10-17 2024-10-24
cnvd-2024-41469 Adobe Commerce信息泄露漏洞(CNVD-2024-41469) 2024-10-13 2024-10-24
cnvd-2024-41468 Adobe Commerce不当授权漏洞(CNVD-2024-41468) 2024-10-13 2024-10-24
cnvd-2024-41676 Cisco Firepower Management Center SQL注入漏洞(CNVD-2024-41676) 2024-05-23 2024-10-23
cnvd-2024-41621 Cisco Duo身份验证绕过漏洞 2024-03-12 2024-10-23
cnvd-2024-41620 Cisco IP Phone拒绝服务漏洞(CNVD-2024-41620) 2024-06-28 2024-10-23
cnvd-2024-41613 Cisco Nexus Dashboard Fabric Controller代码执行漏洞 2024-10-17 2024-10-23
cnvd-2024-41467 Adobe Commerce不当授权漏洞(CNVD-2024-41467) 2024-10-13 2024-10-23
cnvd-2024-41466 Adobe Commerce不当授权漏洞 2024-10-13 2024-10-23
cnvd-2024-41465 Adobe Commerce不当身份验证漏洞(CNVD-2024-41465) 2024-10-13 2024-10-23
cnvd-2024-41464 Adobe Commerce跨站脚本漏洞(CNVD-2024-41464) 2024-10-13 2024-10-23
cnvd-2024-41463 Adobe Commerce跨站脚本漏洞(CNVD-2024-41463) 2024-10-13 2024-10-23
cnvd-2024-41462 Adobe Commerce跨站脚本漏洞(CNVD-2024-41462) 2024-10-13 2024-10-23
cnvd-2024-41461 Adobe Commerce不当访问控制漏洞(CNVD-2024-41461) 2024-10-13 2024-10-23
cnvd-2024-41460 Adobe Commerce不当访问控制漏洞(CNVD-2024-41460) 2024-10-13 2024-10-23
cnvd-2024-41459 Adobe Commerce信息泄露漏洞(CNVD-2024-41459) 2024-10-13 2024-10-23
cnvd-2024-41458 Adobe Commerce不当访问控制漏洞(CNVD-2024-41458) 2024-10-13 2024-10-23
cnvd-2024-41447 VMware vCenter Server堆溢出漏洞 2024-10-23 2024-10-23
cnvd-2024-41457 Adobe Commerce不当访问控制漏洞(CNVD-2024-41457) 2024-10-13 2024-10-22
cnvd-2024-41456 Adobe Commerce服务器端请求伪造漏洞 2024-10-13 2024-10-22
cnvd-2024-41455 Adobe Commerce错误授权漏洞 2024-10-13 2024-10-22
cnvd-2024-41454 Adobe Commerce不当输入验证漏洞(CNVD-2024-41454) 2024-10-13 2024-10-22
cnvd-2024-41453 Adobe Commerce竞争条件漏洞 2024-10-13 2024-10-22
cnvd-2024-41452 Adobe Commerce不当访问控制漏洞(CNVD-2024-41452) 2024-10-13 2024-10-22
cnvd-2024-41451 Adobe Commerce不当访问控制漏洞(CNVD-2024-41451) 2024-10-13 2024-10-22
cnvd-2024-41450 Adobe Commerce不当访问控制漏洞(CNVD-2024-41450) 2024-10-13 2024-10-22
cnvd-2024-41449 Adobe Commerce不当访问控制漏洞 2024-10-13 2024-10-22
cnvd-2024-41448 Adobe Commerce不当身份验证漏洞 2024-10-13 2024-10-22
cnvd-2024-40552 广东中设智控科技股份有限公司设备资产综合管控平台存在信息泄露漏洞 2024-09-07 2024-10-22
ID Description Published Updated
certa-2010-avi-636 Vulnérabilité dans IBM WebSphere Registry and Repository 2010-12-28T00:00:00.000000 2010-12-28T00:00:00.000000
certa-2010-avi-634 Vulnérabilité dans Pidgin 2010-12-27T00:00:00.000000 2010-12-27T00:00:00.000000
certa-2010-avi-633 Vulnérabilité dans HP DDMI 2010-12-24T00:00:00.000000 2010-12-24T00:00:00.000000
certa-2010-avi-632 Vulnérabilité dans HP Insight Diagnostics Online Edition 2010-12-24T00:00:00.000000 2010-12-24T00:00:00.000000
certa-2010-avi-631 Vulnérabilité dans HP StorageWorks Modular Smart Array 2010-12-24T00:00:00.000000 2010-12-24T00:00:00.000000
certa-2010-avi-585 Vulnérabilités dans les produits Mozilla 2010-12-10T00:00:00.000000 2010-12-24T00:00:00.000000
certa-2010-avi-630 Vulnérabilité dans OpenSC 2010-12-23T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-629 Vulnérabilité dans HP StorageWorks Storage Mirroring 2010-12-23T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-628 Vulnérabilité dans HP Power Manager 2010-12-23T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-627 Vulnérabilités dans Blue Coat Reporter 2010-12-23T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-626 Vulnérabilité dans VMware ESXi 2010-12-23T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-575 Vulnérabilités dans BIND 2010-12-03T00:00:00.000000 2010-12-23T00:00:00.000000
certa-2010-avi-625 Vulnérabilité de produits Kerio 2010-12-21T00:00:00.000000 2010-12-21T00:00:00.000000
certa-2010-avi-624 Vulnérabilités dans MyBB 2010-12-21T00:00:00.000000 2010-12-21T00:00:00.000000
certa-2010-avi-623 Vulnérabilité dans ISC DHCP 2010-12-20T00:00:00.000000 2010-12-20T00:00:00.000000
certa-2010-avi-622 Vulnérabilités dans IBM Rational ClearQuest 2010-12-20T00:00:00.000000 2010-12-20T00:00:00.000000
certa-2010-avi-621 Vulnérabilités dans IBM Tivoli Storage Manager 2010-12-20T00:00:00.000000 2010-12-20T00:00:00.000000
certa-2010-avi-620 Vulnérabilités dans AirPort Extreme Base Station et Time Capsule 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-619 Vulnérabilité dans le noyau Linux 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-618 Vulnérabilités dans PHP 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-617 Vulnérabilité dans Symantec Endpoint Protection 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-616 Vulnérabilité dans phpMyFAQ 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-615 Multiples vulnérabilités dans Opera 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-614 Multiples vulnérabilités dans TYPO3 2010-12-17T00:00:00.000000 2010-12-17T00:00:00.000000
certa-2010-avi-613 Vulnérabilité dans les produits F-Secure 2010-12-16T00:00:00.000000 2010-12-16T00:00:00.000000
certa-2010-avi-611 Vulnérabilité dans des produits TIBCO 2010-12-16T00:00:00.000000 2010-12-16T00:00:00.000000
certa-2010-avi-610 Vulnérabilité dans BlackBerry Enterprise Server 2010-12-16T00:00:00.000000 2010-12-16T00:00:00.000000
certa-2010-avi-609 Vulnérabilité dans Microsoft Exchange Server 2010-12-15T00:00:00.000000 2010-12-15T00:00:00.000000
certa-2010-avi-608 Vulnérabilités dans Microsoft Office 2010-12-15T00:00:00.000000 2010-12-15T00:00:00.000000
certa-2010-avi-607 Vulnérabilité dans Microsoft Office SharePoint Server 2010-12-15T00:00:00.000000 2010-12-15T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated