Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-47832 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate. | N/A | N/A | 2026-01-16T19:09:34.019Z | 2026-01-21T16:41:46.259Z |
| CVE-2025-66692 |
7.5 (3.1)
|
A buffer over-read in the PublicKey::verify() met… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:40:24.978Z |
| CVE-2025-67261 |
6.5 (3.1)
|
Abacre Retail Point of Sale 14.0.0.396 is vulnera… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:38:37.574Z |
| CVE-2026-21979 |
4.2 (3.1)
|
Vulnerability in the Oracle Planning and Budgetin… |
Oracle Corporation |
Oracle Planning and Budgeting Cloud Service |
2026-01-20T21:56:38.289Z | 2026-01-21T16:37:51.774Z |
| CVE-2025-58089 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.228Z | 2026-01-21T16:28:25.515Z |
| CVE-2025-58090 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.320Z | 2026-01-21T16:27:42.433Z |
| CVE-2025-58091 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.427Z | 2026-01-21T16:27:08.847Z |
| CVE-2025-58092 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.531Z | 2026-01-21T16:26:26.765Z |
| CVE-2025-57681 |
5.4 (3.1)
|
The WorklogPRO - Timesheets for Jira plugin in Ji… |
n/a |
n/a |
2026-01-21T00:00:00.000Z | 2026-01-21T16:26:13.307Z |
| CVE-2025-58093 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.678Z | 2026-01-21T16:21:23.810Z |
| CVE-2025-58094 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:37.849Z | 2026-01-21T16:17:56.804Z |
| CVE-2025-58095 |
6.1 (3.1)
|
Multiple reflected cross-site scripting (xss) vul… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:38.006Z | 2026-01-21T16:17:35.220Z |
| CVE-2025-44000 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:39.469Z | 2026-01-21T16:17:07.125Z |
| CVE-2025-57786 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:41.119Z | 2026-01-21T16:16:42.475Z |
| CVE-2025-58740 |
8.5 (4.0)
|
Hardcoded Encryption Key Enables Database Credential A… |
Milner |
ImageDirector Capture |
2026-01-20T21:36:00.681Z | 2026-01-21T16:14:42.609Z |
| CVE-2025-58741 |
8.5 (4.0)
|
Insecure Masked Credential Fields Enable Database Cred… |
Milner |
ImageDirector Capture |
2026-01-20T21:36:26.897Z | 2026-01-21T16:14:37.896Z |
| CVE-2025-58742 |
8.5 (4.0)
|
Insufficient Configuration Protections Enable Database… |
Milner |
ImageDirector Capture |
2026-01-20T21:36:54.171Z | 2026-01-21T16:14:33.073Z |
| CVE-2025-58743 |
7.2 (4.0)
|
Insecure Encryption Algorithms Enable Brute-Force Data… |
Milner |
ImageDirector Capture |
2026-01-20T21:37:25.868Z | 2026-01-21T16:14:28.383Z |
| CVE-2025-58744 |
6.9 (4.0)
|
Hard-Coded Default Credentials Enable Document Archive… |
Milner |
ImageDirector Capture |
2026-01-20T21:38:02.361Z | 2026-01-21T16:14:23.574Z |
| CVE-2025-54853 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:43.251Z | 2026-01-21T16:14:16.723Z |
| CVE-2025-53707 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:44.990Z | 2026-01-21T16:13:51.436Z |
| CVE-2025-57787 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:46.909Z | 2026-01-21T16:12:31.339Z |
| CVE-2025-53854 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:48.718Z | 2026-01-21T16:11:44.457Z |
| CVE-2025-58080 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:50.689Z | 2026-01-21T16:10:58.213Z |
| CVE-2025-12984 |
4.9 (3.1)
|
Advanced Ads – Ad Manager & AdSense <= 2.0.15 - Authen… |
monetizemore |
Advanced Ads – Ad Manager & AdSense |
2026-01-17T06:42:19.675Z | 2026-01-21T16:08:06.202Z |
| CVE-2026-0833 |
6.4 (3.1)
|
Team Section Block <= 2.0.0 - Authenticated (Contribut… |
bplugins |
Team Section Block – Showcase Team Members with Layout Options |
2026-01-17T06:42:19.058Z | 2026-01-21T16:07:08.454Z |
| CVE-2025-57881 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:52.820Z | 2026-01-21T16:06:29.616Z |
| CVE-2025-54861 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:54.751Z | 2026-01-21T16:05:52.800Z |
| CVE-2025-54814 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:56.529Z | 2026-01-21T16:05:14.586Z |
| CVE-2025-54852 |
6.1 (3.1)
|
A reflected cross-site scripting (xss) vulnerabil… |
MedDream |
MedDream PACS Premium |
2026-01-20T14:49:58.226Z | 2026-01-21T16:03:09.670Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-22713 |
9.8 (3.1)
|
WordPress WooCommerce Orders & Customers Exporter plug… |
vanquish |
WooCommerce Orders & Customers Exporter |
2026-01-08T09:17:39.375Z | 2026-01-20T14:28:05.344Z |
| CVE-2025-22712 |
9.8 (3.1)
|
WordPress Typify theme <= 3.0.2 - Local File Inclusion… |
QantumThemes |
Typify |
2026-01-08T09:17:39.147Z | 2026-01-20T14:28:05.549Z |
| CVE-2025-22509 |
9.8 (3.1)
|
WordPress Atlas theme <= 2.1.0 - Local File Inclusion … |
TMRW-studio |
Atlas |
2026-01-08T09:17:38.524Z | 2026-01-20T14:28:04.634Z |
| CVE-2025-22288 |
4.1 (3.1)
|
WordPress Smush Image Compression and Optimization plu… |
WPMU DEV - Your All-in-One WordPress Platform |
Smush Image Compression and Optimization |
2025-11-06T15:53:18.126Z | 2026-01-20T14:28:05.015Z |
| CVE-2025-14431 |
9.8 (3.1)
|
WordPress Navian theme <= 1.5.4 - Local File Inclusion… |
THEMELOGI |
Navian |
2026-01-08T09:17:38.310Z | 2026-01-20T14:28:04.567Z |
| CVE-2025-14360 |
9.8 (3.1)
|
WordPress Blockons plugin <= 1.2.15 - Broken Access Co… |
Kaira |
Blockons |
2026-01-08T09:17:37.614Z | 2026-01-20T14:28:05.215Z |
| CVE-2025-14359 |
9.8 (3.1)
|
WordPress Oshine theme <= 7.2.7 - Local File Inclusion… |
brandexponents |
Oshine |
2026-01-08T09:17:37.351Z | 2026-01-20T14:28:04.952Z |
| CVE-2025-14358 |
9.8 (3.1)
|
WordPress REHub Framework plugin <= 19.9.5 - Broken Ac… |
sizam |
REHub Framework |
2026-01-08T09:17:37.140Z | 2026-01-20T14:28:04.797Z |
| CVE-2025-14314 |
8.5 (3.1)
|
WordPress PopupKit plugin <= 2.1.5 - SQL Injection vul… |
Roxnor |
PopupKit |
2025-12-18T07:21:40.676Z | 2026-01-20T14:28:04.473Z |
| CVE-2025-13835 |
6.5 (3.1)
|
WordPress Arconix Shortcodes plugin <= 2.1.19 - Cross … |
Tyche Softwares |
Arconix Shortcodes |
2025-12-01T17:57:41.794Z | 2026-01-20T14:28:04.481Z |
| CVE-2025-13504 |
6.1 (3.1)
|
WordPress Real Estate Pro plugin <= 2.1.4 - Reflected … |
e-plugins |
Real Estate Pro |
2026-01-08T09:17:36.949Z | 2026-01-20T14:28:05.174Z |
| CVE-2025-12551 |
6.1 (3.1)
|
WordPress ListingHub plugin 1.2.6 - Cross Site Scripti… |
e-plugins |
ListingHub |
2026-01-08T09:17:36.759Z | 2026-01-20T14:28:05.192Z |
| CVE-2025-12550 |
9.8 (3.1)
|
WordPress OchaHouse theme <= 2.2.8 - Local File Inclus… |
jwsthemes |
OchaHouse |
2026-01-08T09:17:36.554Z | 2026-01-20T14:28:05.164Z |
| CVE-2025-12549 |
9.8 (3.1)
|
WordPress Rozy - Flower Shop theme <= 1.2.25 - Local F… |
magentech |
Rozy - Flower Shop |
2026-01-08T09:17:36.012Z | 2026-01-20T14:28:05.344Z |
| CVE-2025-10019 |
6.5 (3.1)
|
WordPress Contact Form Email plugin <= 1.3.60 - Insecu… |
codepeople |
Contact Form Email |
2025-12-18T07:21:40.448Z | 2026-01-20T14:28:04.445Z |
| CVE-2024-53735 |
7.1 (3.1)
|
WordPress iPhone Webclip Manager plugin <= 0.5 - CSRF … |
Corourke |
iPhone Webclip Manager |
2026-01-05T16:41:08.654Z | 2026-01-20T14:31:54.884Z |
| CVE-2024-30516 |
7.5 (3.1)
|
WordPress Booking Package plugin <= 1.6.27 - Price Man… |
SaasProject |
Booking Package |
2026-01-05T16:38:43.668Z | 2026-01-20T14:31:54.985Z |
| CVE-2024-30461 |
7.1 (3.1)
|
WordPress Tumult Hype Animations plugin <= 1.9.11 - CS… |
Tumult Inc |
Tumult Hype Animations |
2026-01-05T16:36:41.495Z | 2026-01-20T14:31:54.980Z |
| CVE-2024-24844 |
7.5 (3.1)
|
WordPress PowerPack Pro for Elementor plugin <= 2.10.6… |
IdeaBox Creations |
PowerPack Pro for Elementor |
2025-12-23T12:06:04.875Z | 2026-01-20T14:31:54.892Z |
| CVE-2024-23511 |
6.5 (3.1)
|
WordPress The Plus Addons for Elementor plugin <= 5.3.… |
POSIMYTH |
The Plus Addons for Elementor Page Builder Lite |
2026-01-05T13:33:57.628Z | 2026-01-20T14:31:54.867Z |
| CVE-2025-14822 |
3.1 (3.1)
|
DoS from quadratic complexity in model.ParseHashtags |
Mattermost |
Mattermost |
2026-01-16T08:52:43.848Z | 2026-01-16T13:00:45.911Z |
| CVE-2025-43025 |
4.8 (4.0)
|
HP Universal Print Driver – Potential Denial of Service |
HP Inc. |
Universal Print Driver |
2025-07-02T19:43:46.888Z | 2025-07-02T20:08:18.601Z |
| CVE-2025-20997 |
6.2 (3.1)
|
Incorrect default permission in Framework for Gal… |
Samsung Mobile |
Samsung Mobile Devices |
2025-07-08T10:34:26.815Z | 2025-07-11T13:30:15.085Z |
| CVE-2026-21894 |
6.5 (3.1)
|
n8n's Missing Stripe-Signature Verification Allows Una… |
n8n-io |
n8n |
2026-01-08T09:56:04.274Z | 2026-01-08T14:42:36.631Z |
| CVE-2026-21877 |
10 (3.1)
|
n8n is vulnerable to Remote Code Execution via Arbitra… |
n8n-io |
n8n |
2026-01-08T00:39:58.697Z | 2026-01-08T18:59:10.198Z |
| CVE-2025-14435 |
6.8 (3.1)
|
Application-Level DoS via infinite re-render loop in u… |
Mattermost |
Mattermost |
2026-01-16T11:25:35.817Z | 2026-01-16T14:09:00.429Z |
| CVE-2025-9086 |
7.5 (3.1)
|
Out of bounds read for cookie path |
curl |
curl |
2025-09-12T05:10:03.815Z | 2026-01-08T09:51:46.552Z |
| CVE-2025-10966 |
4.3 (3.1)
|
missing SFTP host verification with wolfSSH |
curl |
curl |
2025-11-07T07:26:30.351Z | 2025-11-10T20:26:07.282Z |
| CVE-2026-22819 |
5.9 (3.1)
|
Outray has a Race Condition in main/apps/web/src/route… |
akinloluwami |
outray |
2026-01-14T18:04:33.426Z | 2026-01-14T21:13:36.389Z |
| CVE-2025-10148 |
5.3 (3.1)
|
predictable WebSocket mask |
curl |
curl |
2025-09-12T05:10:37.469Z | 2025-11-18T20:05:32.822Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-22713 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-08T10:15:47.850 | 2026-01-20T15:16:16.940 |
| fkie_cve-2025-22712 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:47.727 | 2026-01-20T15:16:16.813 |
| fkie_cve-2025-22509 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:47.337 | 2026-01-20T15:16:16.430 |
| fkie_cve-2025-22288 | Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Im… | 2025-11-06T16:15:49.647 | 2026-01-20T15:16:16.277 |
| fkie_cve-2025-14431 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:46.463 | 2026-01-20T15:16:15.223 |
| fkie_cve-2025-14360 | Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not P… | 2026-01-08T10:15:46.067 | 2026-01-20T15:16:14.707 |
| fkie_cve-2025-14359 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:45.920 | 2026-01-20T15:16:14.577 |
| fkie_cve-2025-14358 | Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Funct… | 2026-01-08T10:15:45.790 | 2026-01-20T15:16:14.440 |
| fkie_cve-2025-14314 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-18T08:15:49.510 | 2026-01-20T15:16:14.297 |
| fkie_cve-2025-13835 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-01T18:16:04.000 | 2026-01-20T15:16:13.873 |
| fkie_cve-2025-13504 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T10:15:45.517 | 2026-01-20T15:16:13.747 |
| fkie_cve-2025-12551 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-08T10:15:45.283 | 2026-01-20T15:16:13.297 |
| fkie_cve-2025-12550 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:45.150 | 2026-01-20T15:16:13.160 |
| fkie_cve-2025-12549 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-08T10:15:44.100 | 2026-01-20T15:16:13.027 |
| fkie_cve-2025-10019 | Authorization Bypass Through User-Controlled Key vulnerability in codepeople Contact Form Email con… | 2025-12-18T08:15:48.657 | 2026-01-20T15:16:12.810 |
| fkie_cve-2024-53735 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-05T17:15:44.590 | 2026-01-20T15:16:12.700 |
| fkie_cve-2024-30516 | Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package all… | 2026-01-05T17:15:44.430 | 2026-01-20T15:16:12.587 |
| fkie_cve-2024-30461 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-01-05T17:15:43.417 | 2026-01-20T15:16:12.477 |
| fkie_cve-2024-24844 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploit… | 2025-12-23T12:15:44.557 | 2026-01-20T15:16:12.357 |
| fkie_cve-2024-23511 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-01-05T14:15:52.977 | 2026-01-20T15:16:12.190 |
| fkie_cve-2025-14822 | Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which… | 2026-01-16T09:16:01.460 | 2026-01-20T15:11:19.127 |
| fkie_cve-2025-43025 | HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in … | 2025-07-02T20:15:30.550 | 2026-01-20T15:10:09.143 |
| fkie_cve-2025-20997 | Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows l… | 2025-07-08T11:15:25.000 | 2026-01-20T15:09:19.373 |
| fkie_cve-2026-21894 | n8n is an open source workflow automation platform. In versions from 0.150.0 to before 2.2.2, an au… | 2026-01-08T10:15:55.970 | 2026-01-20T15:09:07.647 |
| fkie_cve-2026-21877 | n8n is an open source workflow automation platform. In versions 0.121.2 and below, an authenticated… | 2026-01-08T01:15:55.697 | 2026-01-20T15:08:24.850 |
| fkie_cve-2025-14435 | Mattermost versions 10.11.x <= 10.11.8, 11.1.x <= 11.1.1, 11.0.x <= 11.0.6 fail to prevent infinite… | 2026-01-16T12:15:49.583 | 2026-01-20T15:06:30.110 |
| fkie_cve-2025-9086 | 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or ot… | 2025-09-12T06:15:44.100 | 2026-01-20T14:58:01.347 |
| fkie_cve-2025-10966 | curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was f… | 2025-11-07T08:15:39.617 | 2026-01-20T14:57:03.173 |
| fkie_cve-2026-22819 | Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free pl… | 2026-01-14T18:16:42.330 | 2026-01-20T14:56:26.523 |
| fkie_cve-2025-10148 | curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the sp… | 2025-09-12T06:15:40.020 | 2026-01-20T14:55:47.997 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-v7fg-jrvc-qv5v |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-rq6p-8wgm-rw79 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-rp48-gm9c-rmfm |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-jx85-7wp7-p822 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-h9x8-gwmw-92cp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-h498-6m38-63x9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-gq3h-9wwh-vm9w |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-ghp5-hghm-x63j |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-ggvg-2235-6pf3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-g2qw-r7g8-8qhg |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-fg8m-jvvr-rp28 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-cqmj-996j-94r3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-c99f-wxrj-388m |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-c44q-hxxm-f95g |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-8g3h-g2v7-4495 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-85cg-4c4v-qhcp |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-7rvm-5978-xg4w |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-7px3-7c6v-84c9 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-6v6w-rrm7-pc6x |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-5p82-chcw-3j9h |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-524p-h469-2qv5 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-49rv-j9qq-fvfq |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-42pf-2h85-3cqf |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:36Z | 2026-01-02T18:30:36Z |
| ghsa-wxmm-wf2c-48vh |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-ww9v-f23p-2553 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-wrw9-9v8g-q8cv |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-w4pv-7p34-299j |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-vwxp-jm5h-6r8m |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-q3w3-3hjg-p6gw |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ghsa-pvwg-4256-52p3 |
|
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability … | 2026-01-02T18:30:35Z | 2026-01-02T18:30:35Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-1308 | The WooCommerce Cloak Affiliate Links plugin for WordPress is vulnerable to unauthorized … | 2024-02-08T06:02:25.143133Z |
| gsd-2024-1325 | The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable… | 2024-02-08T06:02:25.135468Z |
| gsd-2024-1342 | A flaw was found in OpenShift. The existing Cross-Site Request Forgery (CSRF) protections… | 2024-02-08T06:02:25.132686Z |
| gsd-2024-1314 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.129329Z |
| gsd-2024-1304 | Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4… | 2024-02-08T06:02:25.127185Z |
| gsd-2024-1322 | The Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin… | 2024-02-08T06:02:25.121611Z |
| gsd-2024-1328 | The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… | 2024-02-08T06:02:25.117952Z |
| gsd-2024-1333 | The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape … | 2024-02-08T06:02:25.113216Z |
| gsd-2024-1321 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable… | 2024-02-08T06:02:25.111874Z |
| gsd-2024-25565 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.103472Z |
| gsd-2024-25218 | A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to e… | 2024-02-08T06:02:25.103263Z |
| gsd-2024-25207 | Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripti… | 2024-02-08T06:02:25.102994Z |
| gsd-2024-25426 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.102785Z |
| gsd-2024-25344 | Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8… | 2024-02-08T06:02:25.102558Z |
| gsd-2024-25556 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.102348Z |
| gsd-2024-25446 | An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attack… | 2024-02-08T06:02:25.102132Z |
| gsd-2024-25242 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.101662Z |
| gsd-2024-25540 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.101313Z |
| gsd-2024-25298 | An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary c… | 2024-02-08T06:02:25.101075Z |
| gsd-2024-25177 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.100552Z |
| gsd-2024-25423 | An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code v… | 2024-02-08T06:02:25.100342Z |
| gsd-2024-25300 | A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute … | 2024-02-08T06:02:25.100070Z |
| gsd-2024-25290 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.099857Z |
| gsd-2024-25314 | Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in… | 2024-02-08T06:02:25.099647Z |
| gsd-2024-25192 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.099376Z |
| gsd-2024-25188 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.099098Z |
| gsd-2024-25497 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.098411Z |
| gsd-2024-25295 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-08T06:02:25.098125Z |
| gsd-2024-25308 | Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' para… | 2024-02-08T06:02:25.097900Z |
| gsd-2024-25165 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function Line… | 2024-02-08T06:02:25.097628Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-183664 | Malicious code in mahnu-oy-gisstsi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183663 | Malicious code in mahnu-oy-gissi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183662 | Malicious code in mahnu-oy-gisostsiogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183661 | Malicious code in mahnu-oy-gisostsioapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183660 | Malicious code in mahnu-oy-gisostsio (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183659 | Malicious code in mahnu-oy-gisostsiapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183658 | Malicious code in mahnu-oy-gisostsiao (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183657 | Malicious code in mahnu-oy-giosssiosi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183656 | Malicious code in mahnu-oy-giossisi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183655 | Malicious code in mahnu-oy-giossiosi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183654 | Malicious code in mahnu-oy-giossi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183653 | Malicious code in mahnu-oy-giosisi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183652 | Malicious code in mahnu-oy-giosi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183651 | Malicious code in mahnu-noy-gtsogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183650 | Malicious code in mahnu-noy-gtopo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183649 | Malicious code in mahnu-noy-gtogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183648 | Malicious code in mahnu-noy-gtoapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183647 | Malicious code in mahnu-noy-gtaoayaigaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183646 | Malicious code in mahnu-noy-gtaoayagaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183645 | Malicious code in mahnu-noy-gtaoagaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183644 | Malicious code in mahnu-noy-gtaoaagaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183643 | Malicious code in mahnu-noy-gtaoaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183642 | Malicious code in mahnu-noy-gtaoa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183641 | Malicious code in mahnu-noy-gtao (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183640 | Malicious code in mahnu-noy-gitsogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183639 | Malicious code in mahnu-noy-gistsogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183638 | Malicious code in mahnu-noy-gisostsogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183637 | Malicious code in mahnu-noy-gisostsiogapo (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183636 | Malicious code in mahnu-nofy-gtaoayigaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-183635 | Malicious code in mahnu-nofy-gtaoaigaa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:6188 | Red Hat Security Advisory: firefox security update | 2023-10-30T17:19:00+00:00 | 2025-11-21T18:48:28+00:00 |
| rhsa-2023:6187 | Red Hat Security Advisory: firefox security update | 2023-10-30T17:43:16+00:00 | 2025-11-21T18:48:27+00:00 |
| rhsa-2023:6186 | Red Hat Security Advisory: firefox security update | 2023-10-30T17:19:41+00:00 | 2025-11-21T18:48:27+00:00 |
| rhsa-2023:6185 | Red Hat Security Advisory: firefox security update | 2023-10-30T16:44:46+00:00 | 2025-11-21T18:48:27+00:00 |
| rhsa-2023:6168 | Red Hat Security Advisory: libguestfs-winsupport security update | 2023-10-30T08:56:30+00:00 | 2025-11-21T18:48:25+00:00 |
| rhsa-2023:6167 | Red Hat Security Advisory: libguestfs-winsupport security update | 2023-10-30T08:57:53+00:00 | 2025-11-21T18:48:23+00:00 |
| rhsa-2023:6162 | Red Hat Security Advisory: firefox security update | 2023-10-30T08:24:15+00:00 | 2025-11-21T18:48:23+00:00 |
| rhsa-2023:6128 | Red Hat Security Advisory: OpenShift Container Platform 4.12.41 packages and security update | 2023-11-01T11:31:46+00:00 | 2025-11-21T18:48:16+00:00 |
| rhsa-2023:6069 | Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update | 2023-10-24T07:12:32+00:00 | 2025-11-21T18:48:04+00:00 |
| rhsa-2023:6068 | Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update | 2023-10-24T07:19:53+00:00 | 2025-11-21T18:48:04+00:00 |
| rhsa-2023:5998 | Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update | 2023-10-23T09:52:33+00:00 | 2025-11-21T18:48:02+00:00 |
| rhsa-2023:5997 | Red Hat Security Advisory: python3 security update | 2023-10-23T10:13:23+00:00 | 2025-11-21T18:47:57+00:00 |
| rhsa-2023:5996 | Red Hat Security Advisory: python3 security update | 2023-10-23T09:32:23+00:00 | 2025-11-21T18:47:56+00:00 |
| rhsa-2023:5995 | Red Hat Security Advisory: python3 security update | 2023-10-23T09:29:48+00:00 | 2025-11-21T18:47:55+00:00 |
| rhsa-2023:5994 | Red Hat Security Advisory: python27:2.7 security update | 2023-10-23T09:49:48+00:00 | 2025-11-21T18:47:55+00:00 |
| rhsa-2023:5993 | Red Hat Security Advisory: python27:2.7 security update | 2023-10-23T09:27:05+00:00 | 2025-11-21T18:47:54+00:00 |
| rhsa-2023:5992 | Red Hat Security Advisory: python27:2.7 security update | 2023-10-23T09:20:13+00:00 | 2025-11-21T18:47:54+00:00 |
| rhsa-2023:5991 | Red Hat Security Advisory: python27:2.7 security update | 2023-10-23T09:16:13+00:00 | 2025-11-21T18:47:53+00:00 |
| rhsa-2023:5990 | Red Hat Security Advisory: python27:2.7 security update | 2023-10-23T09:15:23+00:00 | 2025-11-21T18:47:53+00:00 |
| rhsa-2023:5868 | Red Hat Security Advisory: ghostscript security update | 2023-10-18T22:57:39+00:00 | 2025-11-21T18:47:36+00:00 |
| rhsa-2023:5796 | Red Hat Security Advisory: virt:rhel security update | 2023-10-17T15:33:03+00:00 | 2025-11-21T18:47:27+00:00 |
| rhsa-2023:5794 | Red Hat Security Advisory: kernel-rt security update | 2023-10-17T15:09:43+00:00 | 2025-11-21T18:47:27+00:00 |
| rhsa-2023:5790 | Red Hat Security Advisory: python-reportlab security update | 2023-10-17T14:02:58+00:00 | 2025-11-21T18:47:27+00:00 |
| rhsa-2023:5789 | Red Hat Security Advisory: python-reportlab security update | 2023-10-17T13:54:53+00:00 | 2025-11-21T18:47:26+00:00 |
| rhsa-2023:5788 | Red Hat Security Advisory: python-reportlab security update | 2023-10-17T13:55:12+00:00 | 2025-11-21T18:47:25+00:00 |
| rhsa-2023:5787 | Red Hat Security Advisory: python-reportlab security update | 2023-10-17T13:58:08+00:00 | 2025-11-21T18:47:25+00:00 |
| rhsa-2023:5786 | Red Hat Security Advisory: python-reportlab security update | 2023-10-17T14:01:58+00:00 | 2025-11-21T18:47:24+00:00 |
| rhsa-2023:5771 | Red Hat Security Advisory: bind9.16 security update | 2023-10-17T09:32:27+00:00 | 2025-11-21T18:47:22+00:00 |
| rhsa-2023:5775 | Red Hat Security Advisory: kpatch-patch security update | 2023-10-17T09:27:38+00:00 | 2025-11-21T18:47:21+00:00 |
| rhsa-2023:5761 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2023-10-18T22:39:58+00:00 | 2025-11-21T18:47:18+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-2471 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H). | 2021-10-02T00:00:00.000Z | 2021-10-27T00:00:00.000Z |
| msrc_cve-2021-35621 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior 7.5.23 and prior 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). | 2021-10-02T00:00:00.000Z | 2021-10-26T00:00:00.000Z |
| msrc_cve-2021-35618 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 1.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L). | 2021-10-02T00:00:00.000Z | 2021-10-26T00:00:00.000Z |
| msrc_cve-2021-3872 | Heap-based Buffer Overflow in vim/vim | 2021-10-02T00:00:00.000Z | 2021-10-22T00:00:00.000Z |
| msrc_cve-2021-3875 | Heap-based Buffer Overflow in vim/vim | 2021-10-02T00:00:00.000Z | 2021-10-21T00:00:00.000Z |
| msrc_cve-2020-28196 | MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit. | 2020-11-02T00:00:00.000Z | 2021-10-15T00:00:00.000Z |
| msrc_cve-2019-14844 | A flaw was found in Fedora versions of krb5 from 1.16.1 to including 1.17.x in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC. | 2019-09-02T00:00:00.000Z | 2021-10-15T00:00:00.000Z |
| msrc_cve-2021-41773 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 | 2021-10-02T00:00:00.000Z | 2021-10-13T00:00:00.000Z |
| msrc_cve-2021-41524 | null pointer dereference in h2 fuzzing | 2021-10-02T00:00:00.000Z | 2021-10-13T00:00:00.000Z |
| msrc_cve-2021-41617 | sshd in OpenSSH 6.2 through 8.x before 8.8 when certain non-default configurations are used allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process if the configuration specifies running the command as a different user. | 2021-09-02T00:00:00.000Z | 2021-10-02T00:00:00.000Z |
| msrc_cve-2016-20012 | OpenSSH through 8.7 allows remote attackers who have a suspicion that a certain combination of username and public key is known to an SSH server to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product | 2021-09-02T00:00:00.000Z | 2021-10-01T00:00:00.000Z |
| msrc_cve-2021-3796 | Use After Free in vim/vim | 2021-09-02T00:00:00.000Z | 2021-09-28T00:00:00.000Z |
| msrc_cve-2021-41054 | tftpd_file.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data OACK and other options. | 2021-09-02T00:00:00.000Z | 2021-09-25T00:00:00.000Z |
| msrc_cve-2021-3778 | Heap-based Buffer Overflow in vim/vim | 2021-09-02T00:00:00.000Z | 2021-09-25T00:00:00.000Z |
| msrc_cve-2021-40528 | The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because during interaction between two cryptographic libraries a certain dangerous combination of the prime defined by the receiver's public key the generator defined by the receiver's public key and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP. | 2021-09-02T00:00:00.000Z | 2021-09-14T00:00:00.000Z |
| msrc_cve-2021-40330 | git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character which may result in unexpected cross-protocol requests as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. | 2021-08-02T00:00:00.000Z | 2021-09-10T00:00:00.000Z |
| msrc_cve-2021-3770 | Heap-based Buffer Overflow in vim/vim | 2021-09-02T00:00:00.000Z | 2021-09-10T00:00:00.000Z |
| msrc_cve-2021-33938 | Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before 0.7.17 allows attackers to cause a Denial of Service. | 2021-09-02T00:00:00.000Z | 2021-09-08T00:00:00.000Z |
| msrc_cve-2021-33930 | Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. | 2021-09-02T00:00:00.000Z | 2021-09-08T00:00:00.000Z |
| msrc_cve-2021-33929 | Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. | 2021-09-02T00:00:00.000Z | 2021-09-08T00:00:00.000Z |
| msrc_cve-2021-33928 | Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service. | 2021-09-02T00:00:00.000Z | 2021-09-08T00:00:00.000Z |
| msrc_cve-2021-36221 | Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort. | 2021-08-02T00:00:00.000Z | 2021-08-20T00:00:00.000Z |
| msrc_cve-2021-37600 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments and possibly in all realistic environments. | 2021-07-02T00:00:00.000Z | 2021-08-10T00:00:00.000Z |
| msrc_cve-2021-35942 | The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted crafted pattern potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations. | 2021-07-02T00:00:00.000Z | 2021-08-03T00:00:00.000Z |
| msrc_cve-2021-34558 | The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange allowing a malicious TLS server to cause a TLS client to panic. | 2021-07-02T00:00:00.000Z | 2021-07-31T00:00:00.000Z |
| msrc_cve-2021-33910 | basic/unit-name.c in systemd prior to 246.15 247.8 248.5 and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. | 2021-07-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2021-32740 | Regular Expression Denial of Service in Addressable templates | 2021-07-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2018-10932 | lldptool version 1.0.1 and older can print a raw unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal. | 2018-08-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2014-7204 | jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file. | 2014-10-02T00:00:00.000Z | 2021-07-30T00:00:00.000Z |
| msrc_cve-2021-21285 | Docker daemon crash during image pull of malicious image | 2021-02-02T00:00:00.000Z | 2021-07-27T00:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201609-0027 | J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12… | 2025-04-13T23:02:45.068000Z |
| var-201609-0321 | Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle compariso… | 2025-04-13T23:02:44.977000Z |
| var-201609-0384 | The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to… | 2025-04-13T23:02:44.879000Z |
| var-201609-0386 | Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco S… | 2025-04-13T23:02:44.842000Z |
| var-201605-0271 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.913000Z |
| var-201609-0491 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.868000Z |
| var-201507-0039 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.818000Z |
| var-201609-0492 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.771000Z |
| var-201605-0270 | A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.721000Z |
| var-201609-0493 | A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet mo… | 2025-04-13T23:02:43.676000Z |
| var-201610-0128 | Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 b… | 2025-04-13T23:02:42.309000Z |
| var-201610-0273 | Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices … | 2025-04-13T23:02:42.022000Z |
| var-201610-0294 | A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, re… | 2025-04-13T23:02:41.991000Z |
| var-201610-0460 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.… | 2025-04-13T23:02:41.803000Z |
| var-201607-0096 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:38.103000Z |
| var-201607-0097 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:38.056000Z |
| var-201609-0572 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows a… | 2025-04-13T23:02:38.007000Z |
| var-201607-0080 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:37.951000Z |
| var-201606-0485 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Ad… | 2025-04-13T23:02:37.907000Z |
| var-201606-0497 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Ad… | 2025-04-13T23:02:37.866000Z |
| var-201606-0500 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Ad… | 2025-04-13T23:02:37.827000Z |
| var-201607-0068 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:37.779000Z |
| var-201607-0081 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:37.662000Z |
| var-201604-0523 | Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows a… | 2025-04-13T23:02:37.606000Z |
| var-201609-0578 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.… | 2025-04-13T23:02:37.559000Z |
| var-201606-0505 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Ad… | 2025-04-13T23:02:37.516000Z |
| var-201604-0520 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.… | 2025-04-13T23:02:37.473000Z |
| var-201609-0460 | Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows a… | 2025-04-13T23:02:37.427000Z |
| var-201606-0491 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Ad… | 2025-04-13T23:02:37.387000Z |
| var-201607-0520 | Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows a… | 2025-04-13T23:02:37.341000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2020:3094-1 | Security update for pacemaker | 2020-10-29T15:44:12Z | 2020-10-29T15:44:12Z |
| suse-su-2020:3093-1 | Security update for samba | 2020-10-29T15:39:20Z | 2020-10-29T15:39:20Z |
| suse-su-2020:3092-1 | Security update for samba | 2020-10-29T15:37:56Z | 2020-10-29T15:37:56Z |
| suse-su-2020:3091-1 | Security update for MozillaThunderbird and mozilla-nspr | 2020-10-29T15:35:50Z | 2020-10-29T15:35:50Z |
| suse-su-2020:3090-1 | Security update for graphviz | 2020-10-29T13:16:54Z | 2020-10-29T13:16:54Z |
| suse-su-2020:3089-1 | Security update for pacemaker | 2020-10-29T13:15:52Z | 2020-10-29T13:15:52Z |
| suse-su-2020:3088-1 | Security update for xen | 2020-10-29T12:30:49Z | 2020-10-29T12:30:49Z |
| suse-su-2020:3087-1 | Security update for samba | 2020-10-29T12:30:36Z | 2020-10-29T12:30:36Z |
| suse-su-2020:3086-1 | Security update for pacemaker | 2020-10-29T12:29:41Z | 2020-10-29T12:29:41Z |
| suse-su-2020:3085-1 | Security update for spice-gtk | 2020-10-29T10:22:27Z | 2020-10-29T10:22:27Z |
| suse-su-2020:3084-1 | Security update for spice | 2020-10-29T10:21:37Z | 2020-10-29T10:21:37Z |
| suse-su-2020:3083-1 | Security update for samba | 2020-10-29T10:02:02Z | 2020-10-29T10:02:02Z |
| suse-su-2020:3082-1 | Security update for samba | 2020-10-29T10:01:25Z | 2020-10-29T10:01:25Z |
| suse-su-2020:3081-1 | Security update for samba | 2020-10-29T10:01:04Z | 2020-10-29T10:01:04Z |
| suse-su-2020:3080-1 | Security update for pacemaker | 2020-10-29T09:59:01Z | 2020-10-29T09:59:01Z |
| suse-su-2020:3073-1 | Security update for pacemaker | 2020-10-28T15:05:19Z | 2020-10-28T15:05:19Z |
| suse-su-2020:3071-1 | Security update for spice-gtk | 2020-10-28T10:48:22Z | 2020-10-28T10:48:22Z |
| suse-su-2020:3070-1 | Security update for spice | 2020-10-28T10:47:33Z | 2020-10-28T10:47:33Z |
| suse-su-2020:3069-1 | Security update for tomcat | 2020-10-28T10:46:29Z | 2020-10-28T10:46:29Z |
| suse-su-2020:3068-1 | Security update for tomcat | 2020-10-28T10:46:20Z | 2020-10-28T10:46:20Z |
| suse-su-2020:3067-1 | Security update for apache2 | 2020-10-28T10:46:08Z | 2020-10-28T10:46:08Z |
| suse-su-2020:3065-1 | Security update for sane-backends | 2020-10-28T08:38:57Z | 2020-10-28T08:38:57Z |
| suse-su-2020:3064-1 | Security update for zeromq | 2020-10-28T08:09:50Z | 2020-10-28T08:09:50Z |
| suse-su-2020:3060-1 | Security update for binutils | 2020-10-28T07:09:50Z | 2020-10-28T07:09:50Z |
| suse-su-2020:3054-1 | Security update for pacemaker | 2020-10-27T16:20:54Z | 2020-10-27T16:20:54Z |
| suse-su-2020:3053-1 | Security update for MozillaFirefox | 2020-10-27T16:10:38Z | 2020-10-27T16:10:38Z |
| suse-su-2020:3052-1 | Security update for xen | 2020-10-27T15:09:04Z | 2020-10-27T15:09:04Z |
| suse-su-2020:3051-1 | Security update for xen | 2020-10-27T15:08:58Z | 2020-10-27T15:08:58Z |
| suse-su-2020:3050-1 | Security update for xen | 2020-10-27T15:08:45Z | 2020-10-27T15:08:45Z |
| suse-su-2020:3049-1 | Security update for xen | 2020-10-27T15:08:32Z | 2020-10-27T15:08:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-40284 | Tenda O6存在未明漏洞（CNVD-2024-40284） | 2024-09-14 | 2024-10-10 |
| cnvd-2024-40283 | Tenda CH22存在未明漏洞（CNVD-2024-40283） | 2024-09-14 | 2024-10-10 |
| cnvd-2024-40282 | Tenda CH22存在未明漏洞（CNVD-2024-40282） | 2024-09-18 | 2024-10-10 |
| cnvd-2024-40281 | Linux kernel存在未明漏洞（CNVD-2024-40281） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40280 | Linux kernel存在未明漏洞（CNVD-2024-40280） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40278 | Linux kernel存在未明漏洞（CNVD-2024-40278） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40277 | Linux kernel存在未明漏洞（CNVD-2024-40277） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40276 | Linux kernel存在未明漏洞（CNVD-2024-40276） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40275 | Linux kernel存在未明漏洞（CNVD-2024-40275） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40274 | Linux kernel存在未明漏洞（CNVD-2024-40274） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40273 | Linux kernel存在未明漏洞（CNVD-2024-40273） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40272 | Linux kernel存在未明漏洞（CNVD-2024-40272） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40271 | Linux kernel存在未明漏洞（CNVD-2024-40271） | 2024-09-29 | 2024-10-10 |
| cnvd-2024-40034 | Siemens多款产品身份验证绕过漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40033 | Siemens Questa and ModelSim非受控搜索路径元素漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40032 | Siemens Questa and ModelSim非受控搜索路径元素漏洞（CNVD-2024-40032） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40031 | Siemens Questa and ModelSim非受控搜索路径元素漏洞（CNVD-2024-40031） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40030 | Siemens SINEC Security Monitor参数注入漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40029 | Siemens SINEC Security Monitor命令注入漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40028 | Siemens SINEC Security Monitor路径遍历漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40027 | Siemens SINEC Security Monitor允许输入的许可清单漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40026 | Siemens HiMed Cockpit备用路径保护不当漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40025 | Siemens Tecnomatix Plant Simulation越界读取漏洞（CNVD-2024-40025） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40024 | Siemens Tecnomatix Plant Simulation越界读取漏洞（CNVD-2024-40024） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40023 | Siemens Tecnomatix Plant Simulation越界读取漏洞（CNVD-2024-40023） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40022 | Siemens Tecnomatix Plant Simulation越界读取漏洞（CNVD-2024-40022） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40021 | Siemens Tecnomatix Plant Simulation内存损坏漏洞 | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40020 | Siemens Tecnomatix Plant Simulation内存损坏漏洞（CNVD-2024-40020） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40019 | Siemens Tecnomatix Plant Simulation越界写入漏洞（CNVD-2024-40019） | 2024-10-10 | 2024-10-10 |
| cnvd-2024-40018 | Siemens Tecnomatix Plant Simulation越界写入漏洞（CNVD-2024-40018） | 2024-10-10 | 2024-10-10 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2010-avi-424 | Vulnérabilité dans RSA Access Manager Server | 2010-09-09T00:00:00.000000 | 2010-09-09T00:00:00.000000 |
| certa-2010-avi-423 | Multiples vulnérabilités dans Apple iOS | 2010-09-09T00:00:00.000000 | 2010-09-09T00:00:00.000000 |
| certa-2010-avi-422 | Multiples vulnérabilités dans les produits Cisco Wireless LAN | 2010-09-09T00:00:00.000000 | 2010-09-09T00:00:00.000000 |
| certa-2010-avi-421 | Vulnérabilités dans Apple Safari | 2010-09-08T00:00:00.000000 | 2010-09-08T00:00:00.000000 |
| certa-2010-avi-419 | Multiples vulnérabilités dans Mozilla Thunderbird | 2010-09-08T00:00:00.000000 | 2010-09-08T00:00:00.000000 |
| certa-2010-avi-417 | Vulnérabilité dans Squid | 2010-09-06T00:00:00.000000 | 2010-09-06T00:00:00.000000 |
| certa-2010-avi-416 | Multiples vulnérabilités dans Google Chrome | 2010-09-03T00:00:00.000000 | 2010-09-03T00:00:00.000000 |
| certa-2010-avi-415 | Multiples vulnérabilités dans Apple iTunes | 2010-09-03T00:00:00.000000 | 2010-09-03T00:00:00.000000 |
| certa-2010-avi-414 | Vulnérabilité dans <SPAN class= "textit">bogofilter</SPAN> | 2010-09-01T00:00:00.000000 | 2010-09-01T00:00:00.000000 |
| certa-2010-avi-413 | Vulnérabilité dans HP-UX Software Distributor | 2010-09-01T00:00:00.000000 | 2010-09-01T00:00:00.000000 |
| certa-2010-avi-412 | Vulnérabilités dans IBM DB2 | 2010-08-31T00:00:00.000000 | 2010-08-31T00:00:00.000000 |
| certa-2010-avi-411 | Multiples vulnérabilités dans RealPlayer | 2010-08-30T00:00:00.000000 | 2010-08-30T00:00:00.000000 |
| certa-2010-avi-410 | Vulnérabilité dans Cisco IOS XR | 2010-08-30T00:00:00.000000 | 2010-08-30T00:00:00.000000 |
| certa-2010-avi-409 | Vulnérabilité dans VLC | 2010-08-30T00:00:00.000000 | 2010-08-30T00:00:00.000000 |
| certa-2010-avi-408 | Vulnérabilités dans Cisco Unified Presence | 2010-08-26T00:00:00.000000 | 2010-08-26T00:00:00.000000 |
| certa-2010-avi-407 | Vulnérabilités dans Cisco Unified Communications Manager | 2010-08-26T00:00:00.000000 | 2010-08-26T00:00:00.000000 |
| certa-2010-avi-406 | Vulnérabilité dans AIX ftpd | 2010-08-26T00:00:00.000000 | 2010-08-26T00:00:00.000000 |
| certa-2010-avi-405 | Vulnérabilité dans Trend Micro Internet Security Pro 2010 | 2010-08-26T00:00:00.000000 | 2010-08-26T00:00:00.000000 |
| certa-2010-avi-399 | Vulnérabilités dans MySQL | 2010-08-24T00:00:00.000000 | 2010-08-26T00:00:00.000000 |
| certa-2010-avi-404 | Vulnérabilité dans Squid | 2010-08-25T00:00:00.000000 | 2010-08-25T00:00:00.000000 |
| certa-2010-avi-403 | Multiples vulnérabilités dans Apple Mac OS X | 2010-08-25T00:00:00.000000 | 2010-08-25T00:00:00.000000 |
| certa-2010-avi-402 | Vulnérabilités dans Quagga | 2010-08-25T00:00:00.000000 | 2010-08-25T00:00:00.000000 |
| certa-2010-avi-401 | Vulnérabilité dans Xorg | 2010-08-25T00:00:00.000000 | 2010-08-25T00:00:00.000000 |
| certa-2010-avi-400 | Multiples vulnérabilités dans Adobe Shockwave Player | 2010-08-25T00:00:00.000000 | 2010-08-25T00:00:00.000000 |
| certa-2010-avi-398 | Vulnérabilités dans phpCAS | 2010-08-23T00:00:00.000000 | 2010-08-23T00:00:00.000000 |
| certa-2010-avi-397 | Vulnérabilités dans phpMyAdmin | 2010-08-23T00:00:00.000000 | 2010-08-23T00:00:00.000000 |
| certa-2010-avi-396 | Vulnérabilité dans Novell iPrint Client | 2010-08-20T00:00:00.000000 | 2010-08-20T00:00:00.000000 |
| certa-2010-avi-395 | Multiples vulnérabilités dans Google Chrome | 2010-08-20T00:00:00.000000 | 2010-08-20T00:00:00.000000 |
| certa-2010-avi-394 | Vulnérabilité dans Adobe Acrobat et Reader | 2010-08-20T00:00:00.000000 | 2010-08-20T00:00:00.000000 |
| certa-2010-avi-393 | Vulnérabilité dans des produits Blue Coat | 2010-08-19T00:00:00.000000 | 2010-08-19T00:00:00.000000 |