Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0851 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminAddUser.php sql i… |
code-projects |
Online Music Site |
2026-01-11T23:32:07.010Z | 2026-01-12T16:37:46.944Z |
| CVE-2026-0850 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
code-projects Intern Membership Management System dele… |
code-projects |
Intern Membership Management System |
2026-01-11T23:02:06.162Z | 2026-01-12T16:50:15.555Z |
| CVE-2025-68493 |
N/A
|
Apache Struts, Apache Struts: XXE vulnerability in out… |
Apache Software Foundation |
Apache Struts |
2026-01-11T13:05:36.894Z | 2026-01-12T13:52:58.210Z |
| CVE-2025-15506 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
AcademySoftwareFoundation OpenColorIO FileRules.cpp Co… |
AcademySoftwareFoundation |
OpenColorIO |
2026-01-11T11:02:09.187Z | 2026-01-12T17:03:17.278Z |
| CVE-2026-0843 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food ind… |
jiujiujia |
jjjfood |
2026-01-11T09:02:05.907Z | 2026-01-12T17:09:55.150Z |
| CVE-2026-0842 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Flycatcher Toys smART Sketcher Bluetooth Low Energy mi… |
Flycatcher Toys |
smART Sketcher |
2026-01-11T08:02:06.221Z | 2026-01-12T17:50:26.288Z |
| CVE-2026-0841 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formPictureUrl strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T07:32:07.736Z | 2026-01-12T14:33:15.407Z |
| CVE-2026-0840 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:32:06.734Z | 2026-01-12T14:34:38.435Z |
| CVE-2026-0839 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W APSecurity strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T06:02:05.798Z | 2026-01-12T14:35:14.535Z |
| CVE-2026-0838 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W ConfigWirelessBase strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T05:32:06.225Z | 2026-01-12T14:35:49.763Z |
| CVE-2026-0837 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formFireWall strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T05:02:06.048Z | 2026-01-12T14:36:14.234Z |
| CVE-2026-0836 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigFastDirectionW strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T04:32:06.535Z | 2026-01-12T18:13:16.566Z |
| CVE-2025-15505 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
Luxul XWR-600 Web Administration cross site scripting |
Luxul |
XWR-600 |
2026-01-11T01:32:07.400Z | 2026-01-12T18:15:20.196Z |
| CVE-2026-0824 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
questdb ui Web Console cross site scripting |
questdb |
ui |
2026-01-10T14:32:08.724Z | 2026-01-12T18:26:21.294Z |
| CVE-2025-13393 |
4.3 (3.1)
|
Featured Image from URL (FIFU) <= 5.3.1 - Authenticate… |
marceljm |
Featured Image from URL (FIFU) |
2026-01-10T13:47:35.750Z | 2026-01-12T18:28:15.408Z |
| CVE-2025-12379 |
6.4 (3.1)
|
Shortcodes and extra features for Phlox theme <= 2.17.… |
averta |
Shortcodes and extra features for Phlox theme |
2026-01-10T13:47:35.146Z | 2026-01-12T18:29:20.473Z |
| CVE-2026-0822 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-… |
quickjs-ng |
quickjs |
2026-01-10T13:32:08.881Z | 2026-01-12T18:30:50.158Z |
| CVE-2026-0821 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_constructo… |
quickjs-ng |
quickjs |
2026-01-10T13:02:07.698Z | 2026-01-12T14:36:51.911Z |
| CVE-2025-14555 |
6.4 (3.1)
|
Countdown Timer - Widget Countdown <= 2.7.7 - Authenti… |
wpdevart |
Countdown Timer – Widget Countdown |
2026-01-10T12:23:16.588Z | 2026-01-12T13:10:31.231Z |
| CVE-2025-15504 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
lief-project LIEF ELF Binary Parser.tcc parse_binary n… |
lief-project |
LIEF |
2026-01-10T11:32:06.771Z | 2026-01-12T14:45:44.884Z |
| CVE-2025-14506 |
6.4 (3.1)
|
ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Sit… |
imtiazrayhan |
ConvertForce Popup Builder |
2026-01-10T11:22:38.947Z | 2026-01-12T13:10:20.692Z |
| CVE-2025-52435 |
N/A
|
Apache Mynewt NimBLE: Invalid error handling in pause … |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:47:10.568Z | 2026-01-12T19:07:07.593Z |
| CVE-2025-53470 |
N/A
|
Apache Mynewt NimBLE: Out-of-Bounds Write Vulnerabilit… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:46:35.789Z | 2026-01-12T19:12:52.715Z |
| CVE-2025-53477 |
N/A
|
Apache Mynewt NimBLE: NULL Pointer Dereference in NimB… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:45:27.630Z | 2026-01-12T16:54:48.496Z |
| CVE-2025-62235 |
N/A
|
Apache Mynewt NimBLE: Incorrect handling of SMP Securi… |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:42:30.446Z | 2026-01-12T16:45:27.886Z |
| CVE-2026-0831 |
5.3 (3.1)
|
Templately <= 3.4.8 - Unauthenticated Limited Arbitrar… |
wpdevteam |
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! |
2026-01-10T09:22:18.126Z | 2026-01-12T13:09:57.883Z |
| CVE-2025-15503 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Sangfor Operation and Maintenance Management System co… |
Sangfor |
Operation and Maintenance Management System |
2026-01-10T09:02:06.233Z | 2026-01-12T14:37:45.873Z |
| CVE-2025-14976 |
5.4 (3.1)
|
User Registration & Membership <= 4.4.8 - Cross-Site R… |
wpeverest |
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin |
2026-01-10T08:22:57.183Z | 2026-01-12T13:08:25.004Z |
| CVE-2025-15502 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Sangfor Operation and Maintenance Management System se… |
Sangfor |
Operation and Maintenance Management System |
2026-01-10T08:02:06.438Z | 2026-01-12T14:38:32.534Z |
| CVE-2025-14948 |
5.3 (3.1)
|
miniOrange OTP Verification and SMS Notification for W… |
cyberlord92 |
miniOrange OTP Verification and SMS Notification for WooCommerce |
2026-01-10T07:03:55.561Z | 2026-01-12T13:08:10.342Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67813 |
5.3 (3.1)
|
Quest KACE Desktop Authority through 11.3.1 has I… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T16:52:58.820Z |
| CVE-2025-66939 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in 66biolinks … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:25:32.920Z |
| CVE-2025-65553 |
6.5 (3.1)
|
D3D Wi-Fi Home Security System ZX-G12 v2.1.17 is … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-13T19:08:39.284Z |
| CVE-2025-65552 |
9.8 (3.1)
|
D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is v… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-13T19:08:45.203Z |
| CVE-2025-41078 |
8.7 (4.0)
|
Multiple vulnerabilities in Viafirma products |
Viafirma |
Viafirma Documents |
2026-01-12T14:59:26.385Z | 2026-01-12T16:23:16.534Z |
| CVE-2025-41077 |
8.6 (4.0)
|
Multiple vulnerabilities in Viafirma products |
Viafirma |
Inbox |
2026-01-12T14:54:51.852Z | 2026-01-12T16:23:22.680Z |
| CVE-2025-41006 |
9.3 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
MEMS Events CRM |
2026-01-12T14:39:11.953Z | 2026-01-12T16:23:28.618Z |
| CVE-2025-41005 |
8.7 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
MEMS Events CRM |
2026-01-12T14:35:20.087Z | 2026-01-12T16:23:34.442Z |
| CVE-2025-41004 |
8.7 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
Patient Record Management System |
2026-01-12T13:55:28.273Z | 2026-01-12T14:20:07.352Z |
| CVE-2025-41003 |
5.1 (4.0)
|
Multiple vulnerabilities in Imaster products Open conf… |
Imaster |
Patient Record Management System |
2026-01-12T13:50:34.267Z | 2026-01-12T14:29:51.672Z |
| CVE-2025-40978 |
5.1 (4.0)
|
Multiple vulnerabilities in WorkDo products |
WorkDo |
eCommerceGo SaaS |
2026-01-12T11:28:35.332Z | 2026-01-12T12:53:10.833Z |
| CVE-2025-40977 |
5.1 (4.0)
|
Multiple vulnerabilities in WorkDo products |
WorkDo |
eCommerceGo SaaS |
2026-01-12T11:28:01.725Z | 2026-01-12T13:10:34.512Z |
| CVE-2025-40976 |
5.1 (4.0)
|
Multiple vulnerabilities in WorkDo products |
WorkDo |
TicketGo |
2026-01-12T11:27:20.271Z | 2026-01-12T14:37:56.810Z |
| CVE-2025-40975 |
5.1 (4.0)
|
Multiple vulnerabilities in WorkDo products |
WorkDo |
HRMGo |
2026-01-12T11:26:30.574Z | 2026-01-12T14:38:20.788Z |
| CVE-2025-14279 |
8.1 (3.0)
|
DNS Rebinding Vulnerability in mlflow/mlflow |
mlflow |
mlflow/mlflow |
2026-01-12T08:15:58.607Z | 2026-01-12T14:54:38.693Z |
| CVE-2026-0855 |
8.7 (4.0)
8.8 (3.1)
|
Merit LILIN|IP Camera - OS Command Injection |
Merit LILIN |
P2 |
2026-01-12T06:44:40.227Z | 2026-01-16T02:09:56.328Z |
| CVE-2026-0854 |
8.7 (4.0)
8.8 (3.1)
|
Merit LILIN|NVR - OS Command Injection |
Merit LILIN |
DH032 |
2026-01-12T05:58:52.175Z | 2026-01-12T14:56:28.862Z |
| CVE-2025-14579 |
4.8 (3.1)
|
Quiz Maker < 6.7.0.89 - Admin+ Stored XSS |
Unknown |
Quiz Maker |
2026-01-12T06:00:10.319Z | 2026-01-12T16:23:40.641Z |
| CVE-2025-69276 |
2.3 (4.0)
|
Spectrum insecure deserialiation |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:53:09.752Z | 2026-01-12T14:56:58.184Z |
| CVE-2025-69275 |
7.1 (4.0)
|
Spectrum outdated java library in class-path |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:47:07.893Z | 2026-01-12T14:57:23.830Z |
| CVE-2025-69274 |
2.3 (4.0)
|
Spectrum broken authorization scheme |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:42:39.547Z | 2026-01-12T14:58:15.237Z |
| CVE-2025-69273 |
8.7 (4.0)
|
Spectrum broken authentication |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:38:53.570Z | 2026-01-12T15:16:40.609Z |
| CVE-2025-69272 |
5.3 (4.0)
|
Spectrum password returned in clear |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:33:37.988Z | 2026-01-12T15:19:26.775Z |
| CVE-2025-69271 |
2.3 (4.0)
|
Spectrum basic authentication in use |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:27:55.507Z | 2026-01-12T15:20:41.443Z |
| CVE-2025-69270 |
2.3 (4.0)
|
Spectrum session token in URL |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:20:13.446Z | 2026-01-12T15:21:09.808Z |
| CVE-2025-69269 |
7.1 (4.0)
|
Spectrum command injection in NCM service |
Broadcom |
DX NetOps Spectrum |
2026-01-12T04:10:44.802Z | 2026-01-12T15:51:36.355Z |
| CVE-2025-69268 |
5.3 (4.0)
|
Spectrum reflected XSS |
Broadcom |
DX NetOps Spectrum |
2026-01-12T03:59:17.522Z | 2026-01-12T15:52:46.499Z |
| CVE-2025-69267 |
8.8 (4.0)
|
Spectrum directory path traversal |
Broadcom |
DX NetOps Spectrum |
2026-01-12T03:53:00.624Z | 2026-01-12T15:53:40.392Z |
| CVE-2026-0853 |
6.9 (4.0)
5.3 (3.1)
|
A-Plus Video Technologies|NVR - Sensitive Data Exposure |
A-Plus Video Technologies |
AP-RM864P |
2026-01-12T03:26:47.546Z | 2026-01-12T15:54:38.969Z |
| CVE-2025-52694 |
10 (3.1)
|
Execution of arbitrary SQL commands |
Advantech |
IoTSuite and IoT Edge Products |
2026-01-12T02:27:16.744Z | 2026-01-15T09:32:25.933Z |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-397f-58rh-886v |
8.8 (3.1)
7.4 (4.0)
|
A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627. Affected by this vulnerabil… | 2026-01-11T09:30:24Z | 2026-01-11T09:30:24Z |
| ghsa-55hm-v7vp-29ch |
8.8 (3.1)
7.4 (4.0)
|
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the … | 2026-01-11T06:30:14Z | 2026-01-11T06:30:14Z |
| ghsa-vmm9-42qr-q2wm |
8.8 (3.1)
7.4 (4.0)
|
A security flaw has been discovered in UTT 进取 520W 1.7.7-180627. This impacts the function strcpy o… | 2026-01-11T06:30:13Z | 2026-01-11T06:30:13Z |
| ghsa-cq29-xq99-f8rf |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was determined in UTT 进取 520W 1.7.7-180627. The impacted element is the function st… | 2026-01-11T06:30:13Z | 2026-01-11T06:30:13Z |
| ghsa-5pqx-3x6j-mwv7 |
8.8 (3.1)
7.4 (4.0)
|
A vulnerability was identified in UTT 进取 520W 1.7.7-180627. This affects the function strcpy of the… | 2026-01-11T06:30:13Z | 2026-01-11T06:30:13Z |
| ghsa-p84p-32wc-24f9 |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was found in Luxul XWR-600 up to 4.0.1. The affected element is an unknown function… | 2026-01-11T03:30:12Z | 2026-01-11T03:30:12Z |
| ghsa-xf94-h87h-g9wr |
3.5 (3.1)
2.0 (4.0)
|
QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting | 2026-01-10T15:31:22Z | 2026-01-13T19:03:20Z |
| ghsa-rcpp-qhfh-r47v |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This vulnerability affects the f… | 2026-01-10T15:31:22Z | 2026-01-10T15:31:22Z |
| ghsa-p889-p985-pvfj |
4.3 (3.1)
|
The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Server-Side Request Forger… | 2026-01-10T15:31:22Z | 2026-01-10T15:31:22Z |
| ghsa-f45f-r423-g82r |
6.4 (3.1)
|
The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cros… | 2026-01-10T15:31:22Z | 2026-01-10T15:31:22Z |
| ghsa-67vh-536w-6pc4 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function … | 2026-01-10T15:31:22Z | 2026-01-10T15:31:22Z |
| ghsa-32fr-wvmv-2x73 |
6.4 (3.1)
|
The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scri… | 2026-01-10T15:31:22Z | 2026-01-10T15:31:22Z |
| ghsa-q82x-ch97-83xv |
6.4 (3.1)
|
The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi… | 2026-01-10T12:30:16Z | 2026-01-10T12:30:16Z |
| ghsa-mjjp-xjfg-97wg |
3.3 (3.1)
1.9 (4.0)
|
LIEF is vulnerable to segmentation fault | 2026-01-10T12:30:16Z | 2026-01-13T18:31:53Z |
| ghsa-8643-3fq3-vwcr |
5.3 (3.1)
|
The Templately plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, an… | 2026-01-10T12:30:16Z | 2026-01-10T12:30:16Z |
| ghsa-6phw-p8vc-q8gp |
7.5 (3.1)
|
NULL Pointer Dereference vulnerability in Apache Nimble. Missing validation of HCI connection comp… | 2026-01-10T12:30:16Z | 2026-01-12T18:30:30Z |
| ghsa-p54q-9gfq-fvp4 |
3.1 (3.1)
|
Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver. Specially crafted HCI event could… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-8mfp-xmv3-hv35 |
8.1 (3.1)
|
Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Secu… | 2026-01-10T12:30:15Z | 2026-01-12T18:30:30Z |
| ghsa-5c5p-g26h-xx2f |
7.5 (3.1)
|
J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improp… | 2026-01-10T12:30:15Z | 2026-01-12T21:30:34Z |
| ghsa-vvm5-qpfc-95c2 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. … | 2026-01-10T09:30:19Z | 2026-01-10T09:30:19Z |
| ghsa-h49h-jpp7-xv85 |
7.3 (3.1)
5.5 (4.0)
|
A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.… | 2026-01-10T09:30:19Z | 2026-01-10T09:30:19Z |
| ghsa-4wfj-gghq-89j5 |
5.4 (3.1)
|
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Prof… | 2026-01-10T09:30:19Z | 2026-01-10T09:30:19Z |
| ghsa-q65f-fgmm-q786 |
5.3 (3.1)
|
The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulner… | 2026-01-10T09:30:18Z | 2026-01-10T09:30:18Z |
| ghsa-hxh3-g6p5-hhm6 |
4.3 (3.1)
|
The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive… | 2026-01-10T09:30:18Z | 2026-01-10T09:30:18Z |
| ghsa-8vfw-8f88-jq83 |
7.5 (3.1)
|
The WooCommerce Square plugin for WordPress is vulnerable to Insecure Direct Object Reference in al… | 2026-01-10T06:30:12Z | 2026-01-10T06:30:12Z |
| ghsa-hj59-mf6x-2j8w |
9.8 (3.1)
8.9 (4.0)
|
A vulnerability was determined in Sangfor Operation and Maintenance Management System up to 3.0.8. … | 2026-01-10T00:30:31Z | 2026-01-10T00:30:31Z |
| ghsa-f3vq-4x38-vg3x |
5.5 (3.1)
|
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe … | 2026-01-10T00:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-f2cj-whwv-wjfw |
6.5 (3.1)
|
The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.… | 2026-01-10T00:30:30Z | 2026-01-12T18:30:30Z |
| ghsa-crr3-w29j-c6x6 |
9.8 (3.1)
8.9 (4.0)
|
A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. This … | 2026-01-10T00:30:30Z | 2026-01-10T00:30:30Z |
| ghsa-9ccr-8mmh-vx6x |
4.3 (3.1)
|
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26… | 2026-01-10T00:30:30Z | 2026-01-10T00:30:30Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-853 |
|
vault-cli is a configurable command-line interface tool (and python library) to interact … | vault-cli | 2021-12-16T19:15:00Z | 2021-12-16T21:30:16.499668Z |
| pysec-2021-873 |
|
Gradio is an open source framework for building interactive machine learning models and d… | gradio | 2021-12-15T20:15:00Z | 2023-05-25T05:07:00Z |
| pysec-2021-852 |
|
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.… | lxml | 2021-12-13T18:15:00Z | 2021-12-16T19:24:01.272993Z |
| pysec-2021-851 |
|
Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4… | flask-appbuilder | 2021-12-09T17:15:00Z | 2021-12-15T19:23:46.849981Z |
| pysec-2021-848 |
|
Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation b… | sockeye | 2021-12-08T23:15:00Z | 2021-12-13T21:28:21.588606Z |
| pysec-2021-439 |
|
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for … | django | 2021-12-08T00:15:00Z | 2021-12-08T02:30:49.294438Z |
| pysec-2021-838 |
|
Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework… | invenio-rdm-records | 2021-12-06T18:15:00Z | 2021-12-10T06:37:24.899021Z |
| pysec-2021-837 |
|
Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework… | invenio-app-rdm | 2021-12-06T18:15:00Z | 2021-12-10T06:37:24.185813Z |
| pysec-2021-836 |
|
Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework… | invenio-drafts-resources | 2021-12-06T18:15:00Z | 2021-12-09T07:29:22.280279Z |
| pysec-2021-841 |
|
In CKAN, versions 2.9.0 to 2.9.3 are affected by a stored XSS vulnerability via SVG file … | ckan | 2021-12-01T14:15:00Z | 2021-12-13T06:35:10.687046Z |
| pysec-2021-438 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-12-01T11:15:00Z | 2021-12-02T21:26:01.187346Z |
| pysec-2021-433 |
|
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated b… | s3scanner | 2021-11-29T03:15:00Z | 2021-11-29T21:27:52.731426Z |
| pysec-2021-866 |
|
This affects all versions of package html-to-csv. When there is a formula embedded in a H… | html-to-csv | 2021-11-26T20:15:00Z | 2022-01-05T02:16:24.626882Z |
| pysec-2021-839 |
|
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of… | aim | 2021-11-23T21:15:00Z | 2021-12-13T06:35:02.857370Z |
| pysec-2021-850 |
|
In Django-wiki, versions 0.0.20 to 0.7.8 are vulnerable to Stored Cross-Site Scripting (X… | wiki | 2021-11-23T20:15:00Z | 2021-12-14T08:21:59.357980Z |
| pysec-2021-436 |
|
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version… | matrix-synapse | 2021-11-23T20:15:00Z | 2021-11-29T23:11:29.870597Z |
| pysec-2021-864 |
|
The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certi… | awsiotsdk | 2021-11-23T00:15:00Z | 2022-01-05T02:16:12.554921Z |
| pysec-2021-863 |
|
The AWS IoT Device SDK v2 for Java, Python, C++ and Node.js appends a user supplied Certi… | awsiotsdk | 2021-11-23T00:15:00Z | 2022-01-05T02:16:12.489658Z |
| pysec-2021-862 |
|
Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.4.2), … | awsiotsdk | 2021-11-23T00:15:00Z | 2022-01-05T02:16:12.435653Z |
| pysec-2021-861 |
|
Connections initialized by the AWS IoT Device SDK v2 for Java (versions prior to 1.3.3), … | awsiotsdk | 2021-11-23T00:15:00Z | 2022-01-05T02:16:12.381648Z |
| pysec-2021-860 |
|
Croatia Control Asterix 2.8.1 (python_v0.7.2) has a heap-based buffer over-read, with add… | asterix-decoder | 2021-11-22T21:15:00Z | 2022-01-05T02:16:11.881162Z |
| pysec-2021-431 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-11-19T12:15:00Z | 2021-11-23T19:22:08.078180Z |
| pysec-2021-435 |
|
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed… | apache-superset | 2021-11-17T15:15:00Z | 2021-11-29T23:10:59.097625Z |
| pysec-2021-430 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-11-13T09:15:00Z | 2021-11-19T07:28:03.664110Z |
| pysec-2021-840 |
|
A dependency confusion vulnerability was reported in the Antilles open-source software pr… | antilles-tools | 2021-11-12T22:15:00Z | 2021-12-13T06:35:07.662600Z |
| pysec-2021-434 |
|
Apache Superset up to and including 1.3.1 allowed for database connections password leak … | apache-superset | 2021-11-12T19:15:00Z | 2021-11-29T23:10:59.053614Z |
| pysec-2021-437 |
|
A flaw was found in python-pip in the way it handled Unicode separators in git references… | pip | 2021-11-10T18:15:00Z | 2021-11-29T23:42:09.374676Z |
| pysec-2021-426 |
|
The verify function in the Stark Bank Python ECDSA library (ecdsa-python) 2.0.0 fails to … | starkbank-ecdsa | 2021-11-09T22:15:00Z | 2021-11-16T03:58:45.828098Z |
| pysec-2021-385 |
|
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCryp… | enrocrypt | 2021-11-08T15:15:00Z | 2021-11-09T21:27:02.006228Z |
| pysec-2021-835 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow-gpu | 2021-11-05T23:15:00Z | 2021-12-09T06:35:45.436106Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192192 | Malicious code in elf-stats-whimsical-rocket-922 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192191 | Malicious code in elf-stats-whimsical-muffin-613 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192190 | Malicious code in elf-stats-whimsical-marshmallow-258 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192189 | Malicious code in elf-stats-whimsical-marshmallow-212 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192188 | Malicious code in elf-stats-whimsical-ledger-767 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192187 | Malicious code in elf-stats-whimsical-lantern-823 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192186 | Malicious code in elf-stats-velvet-ornament-935 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192185 | Malicious code in elf-stats-velvet-cocoa-992 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192184 | Malicious code in elf-stats-twinkling-wreath-730 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192183 | Malicious code in elf-stats-twinkling-sled-276 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192182 | Malicious code in elf-stats-twinkling-reindeer-382 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192181 | Malicious code in elf-stats-twinkling-marshmallow-913 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192180 | Malicious code in elf-stats-twinkling-ledger-989 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192179 | Malicious code in elf-stats-twinkling-ledger-863 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192178 | Malicious code in elf-stats-tinsel-pantry-856 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192177 | Malicious code in elf-stats-tinsel-giftbox-192 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192176 | Malicious code in elf-stats-tinsel-drum-369 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192175 | Malicious code in elf-stats-sugarplum-workshop-950 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192174 | Malicious code in elf-stats-sugarplum-stockpile-238 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192173 | Malicious code in elf-stats-sugarplum-star-404 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192172 | Malicious code in elf-stats-sugarplum-saddlebag-236 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192171 | Malicious code in elf-stats-sugarplum-fireplace-278 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192170 | Malicious code in elf-stats-storybook-stocking-662 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192169 | Malicious code in elf-stats-storybook-reindeer-552 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T22:09:11Z |
| mal-2025-192168 | Malicious code in elf-stats-storybook-marshmallow-729 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192167 | Malicious code in elf-stats-storybook-cookiejar-481 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:38:09Z |
| mal-2025-192166 | Malicious code in elf-stats-storybook-cookiejar-394 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:38:09Z |
| mal-2025-192165 | Malicious code in elf-stats-storybook-bow-866 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:38:09Z |
| mal-2025-192164 | Malicious code in elf-stats-starlit-train-195 (npm) | 2025-12-03T15:59:29Z | 2025-12-03T15:59:29Z |
| mal-2025-192163 | Malicious code in elf-stats-starlit-rocket-905 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:38:09Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1754 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-10T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1753 | vim: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-10T22:00:00.000+00:00 | 2025-11-04T23:00:00.000+00:00 |
| wid-sec-w-2025-1752 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1751 | Apache CXF: Schwachstelle ermöglicht Codeausführung | 2025-08-10T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1750 | 7-Zip: Schwachstelle ermöglicht Manipulation von Dateien | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1749 | win.rar WinRAR: Schwachstelle ermöglicht Codeausführung | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1748 | libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2025-11-25T23:00:00.000+00:00 |
| wid-sec-w-2025-1747 | HCL DominoIQ (llama.cpp): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1746 | Microsoft 365 Copilot: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-08-07T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1745 | Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-08-07T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1744 | OpenJPEG: Schwachstelle ermöglicht Denial of Service | 2025-08-07T22:00:00.000+00:00 | 2025-12-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1743 | Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-06T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1742 | Microsoft Exchange Server: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1741 | TianoCore EDK2: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-06T22:00:00.000+00:00 | 2025-12-11T23:00:00.000+00:00 |
| wid-sec-w-2025-1740 | Golang Go: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-08-06T22:00:00.000+00:00 | 2025-12-23T23:00:00.000+00:00 |
| wid-sec-w-2025-1739 | Keycloak: Schwachstelle ermöglicht Manipulation von Dateien | 2025-08-06T22:00:00.000+00:00 | 2025-09-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1738 | Drupal (AI SEO Link Advisor): Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-08-06T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1737 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1736 | IBM Security Guardium: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1735 | Ubiquiti UniFi: Mehrere Schwachstellen | 2025-08-06T22:00:00.000+00:00 | 2025-08-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1734 | Hashicorp Vault: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1733 | Cisco WebEx Meeting Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1732 | Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Codeausführung | 2025-08-06T22:00:00.000+00:00 | 2025-12-15T23:00:00.000+00:00 |
| wid-sec-w-2025-1731 | Eaton Power Distribution Unit: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-08-05T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1730 | Hashicorp Vault: Schwachstelle ermöglicht Umgehen der MFA | 2025-08-05T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1729 | xwiki: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1728 | libav: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1727 | Trend Micro Apex One: Schwachstelle ermöglicht Codeausführung | 2025-08-05T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1726 | Dell Computer: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1725 | IBM Tivoli Monitoring: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:17644 | Red Hat Security Advisory: vim security update | 2025-10-09T07:19:29+00:00 | 2026-01-19T10:05:35+00:00 |
| rhsa-2025:17643 | Red Hat Security Advisory: webkit2gtk3 security update | 2025-10-09T06:01:13+00:00 | 2025-12-11T16:29:04+00:00 |
| rhsa-2025:17614 | Red Hat Security Advisory: Satellite 6.15.5.5 Async Update | 2025-10-08T19:26:12+00:00 | 2025-12-08T12:45:13+00:00 |
| rhsa-2025:17613 | Red Hat Security Advisory: Satellite 6.16.5.4 Async Update | 2025-10-08T19:24:37+00:00 | 2025-12-08T12:45:15+00:00 |
| rhsa-2025:17606 | Red Hat Security Advisory: Satellite 6.17.5 Async Update | 2025-10-08T19:06:17+00:00 | 2025-12-08T12:45:09+00:00 |
| rhsa-2025:17232 | Red Hat Security Advisory: OpenShift Container Platform 4.17.41 bug fix and security update | 2025-10-08T15:52:57+00:00 | 2026-01-19T10:18:58+00:00 |
| rhsa-2025:17570 | Red Hat Security Advisory: kernel security update | 2025-10-08T15:18:47+00:00 | 2026-01-13T22:08:25+00:00 |
| rhsa-2025:17567 | Red Hat Security Advisory: Red Hat AMQ Broker 7.13.2 release and security update | 2025-10-08T14:48:34+00:00 | 2026-01-03T11:37:51+00:00 |
| rhsa-2025:17562 | Red Hat Security Advisory: AMQ Broker 7.13.2.OPR.1.GA Container Images release and security update | 2025-10-08T14:38:05+00:00 | 2025-12-23T22:16:59+00:00 |
| rhsa-2025:17558 | Red Hat Security Advisory: iputils security update | 2025-10-08T12:32:36+00:00 | 2025-11-21T19:28:36+00:00 |
| rhsa-2025:17560 | Red Hat Security Advisory: iputils security update | 2025-10-08T12:24:22+00:00 | 2025-11-21T19:28:37+00:00 |
| rhsa-2025:17559 | Red Hat Security Advisory: iputils security update | 2025-10-08T11:42:06+00:00 | 2025-11-21T19:28:36+00:00 |
| rhsa-2025:17509 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T17:32:23+00:00 | 2025-12-04T22:50:37+00:00 |
| rhsa-2025:17511 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T17:31:58+00:00 | 2025-12-04T22:50:35+00:00 |
| rhsa-2025:17510 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T17:29:39+00:00 | 2025-12-04T22:50:36+00:00 |
| rhsa-2025:17512 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T17:21:45+00:00 | 2025-12-04T22:50:33+00:00 |
| rhsa-2025:17396 | Red Hat Security Advisory: kernel security update | 2025-10-07T16:56:44+00:00 | 2026-01-13T22:06:04+00:00 |
| rhsa-2025:17501 | Red Hat Security Advisory: RHOAI 2.24.0 - Red Hat OpenShift AI | 2025-10-07T14:43:19+00:00 | 2026-01-19T03:55:08+00:00 |
| rhsa-2025:17500 | Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (python-django) security update | 2025-10-07T14:28:49+00:00 | 2025-12-08T12:45:05+00:00 |
| rhsa-2025:17499 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update | 2025-10-07T14:22:44+00:00 | 2025-12-08T12:45:07+00:00 |
| rhsa-2025:17498 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-django) security update | 2025-10-07T14:22:20+00:00 | 2025-12-08T12:45:11+00:00 |
| rhsa-2025:17453 | Red Hat Security Advisory: firefox security update | 2025-10-07T09:47:39+00:00 | 2025-11-21T19:28:31+00:00 |
| rhsa-2025:17452 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T09:30:19+00:00 | 2025-12-04T22:50:31+00:00 |
| rhsa-2025:17445 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T08:07:51+00:00 | 2025-12-04T22:50:29+00:00 |
| rhsa-2025:17446 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T07:59:24+00:00 | 2025-12-04T22:50:33+00:00 |
| rhsa-2025:17415 | Red Hat Security Advisory: gnutls security, bug fix, and enhancement update | 2025-10-07T07:40:04+00:00 | 2025-12-01T22:02:57+00:00 |
| rhsa-2025:17428 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T06:02:39+00:00 | 2025-12-04T22:50:37+00:00 |
| rhsa-2025:17429 | Red Hat Security Advisory: open-vm-tools security update | 2025-10-07T05:56:39+00:00 | 2025-12-04T22:50:35+00:00 |
| rhsa-2025:17430 | Red Hat Security Advisory: perl-JSON-XS security update | 2025-10-07T05:52:14+00:00 | 2025-11-21T19:28:29+00:00 |
| rhsa-2025:17377 | Red Hat Security Advisory: kernel security update | 2025-10-06T23:22:32+00:00 | 2025-11-26T16:45:11+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-171-01 | Enphase Envoy | 2023-06-20T06:00:00.000000Z | 2023-07-13T06:00:00.000000Z |
| icsa-23-166-02 | Advantech WebAccess/SCADA | 2023-06-15T06:00:00.000000Z | 2023-06-15T06:00:00.000000Z |
| icsa-23-166-01 | SUBNET PowerSYSTEM Center | 2023-06-15T06:00:00.000000Z | 2023-06-15T06:00:00.000000Z |
| icsa-23-164-04 | Rockwell Automation FactoryTalk Transaction Manager | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-03 | Rockwell Automation FactoryTalk Edge Gateway | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-02 | Rockwell Automation FactoryTalk Services Platform | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-01 | Datalogics Library Third-Party | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-166-14 | Siemens Teamcenter Visualization and JT2Go | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-13 | Siemens SICAM A8000 Devices | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-166-12 | Siemens SINAMICS Medium Voltage Products | 2023-06-13T00:00:00.000000Z | 2023-06-14T00:00:00.000000Z |
| icsa-23-166-11 | Siemens SIMATIC S7-1500 TM MFP Linux Kernel | 2023-06-13T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-23-166-10 | Siemens SIMATIC S7-1500 TM MFP BIOS | 2023-06-13T00:00:00.000000Z | 2024-04-09T00:00:00.000000Z |
| icsa-23-166-09 | Siemens Solid Edge | 2023-06-13T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-166-08 | Siemens SIMATIC STEP 7 and Derived Products | 2023-06-13T00:00:00.000000Z | 2024-05-14T00:00:00.000000Z |
| icsa-23-166-07 | Siemens SIMATIC WinCC V7 | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-06 | Siemens TIA Portal | 2023-06-13T00:00:00.000000Z | 2024-12-10T00:00:00.000000Z |
| icsa-23-166-05 | Siemens SIMATIC WinCC | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-166-04 | Siemens SIMOTION | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-166-03 | Siemens SICAM Q200 Devices | 2023-06-13T00:00:00.000000Z | 2025-05-06T06:00:00.000000Z |
| icsa-23-159-02 | Sensormatic Electronics Illustra Pro Gen 4 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-159-01 | Atlas Copco Power Focus 6000 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-157-02 | Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series (Update C) | 2023-06-06T06:00:00.000000Z | 2025-12-02T07:00:00.000000Z |
| icsa-23-157-01 | Delta Electronics CNCSoft-B DOPSoft | 2023-06-06T06:00:00.000000Z | 2023-09-07T06:00:00.000000Z |
| icsa-23-152-02 | HID Global SAFE | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-152-01 | Advantech WebAccess/SCADA | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-143-01 | Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products | 2023-05-31T20:26:29.765074Z | 2023-05-31T20:26:29.765074Z |
| icsa-23-145-01 | Moxa MXsecurity Series | 2023-05-31T20:26:29.755020Z | 2023-05-31T20:26:29.755020Z |
| icsa-23-143-04 | Horner Automation Cscape | 2023-05-31T20:26:29.732849Z | 2023-05-31T20:26:29.732849Z |
| icsa-23-150-01 | Advantech WebAccess/SCADA | 2023-05-25T06:00:00.000000Z | 2023-05-25T06:00:00.000000Z |
| icsa-23-143-03 | Mitsubishi Electric MELSEC Series CPU module (Update D) | 2023-05-23T06:00:00.000000Z | 2024-04-25T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-webex-teams-7zmcxg99 | Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-06-16T15:29:27+00:00 |
| cisco-sa-webex-open-redirect-pwvbq2q | Cisco Webex Meetings Open Redirect Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-webex-brutef-hostkey-fwrmxvf | Cisco Webex Meetings and Cisco Webex Meetings Server Host Key Brute Forcing Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-staros-file-read-l3rdvtey | Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-snort-tfo-bypass-mmzzrtes | Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-05-20T13:27:19+00:00 |
| cisco-sa-snort-filepolbypass-67dewme2 | Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-04-30T16:09:05+00:00 |
| cisco-sa-snort-app-bypass-csbycatq | Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability | 2021-01-13T16:00:00+00:00 | 2022-05-16T18:45:16+00:00 |
| cisco-sa-rv-stored-xss-lptq3eqc | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2021-01-14T15:25:16+00:00 |
| cisco-sa-rv-overflow-wunugv4u | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2021-01-19T16:21:32+00:00 |
| cisco-sa-rv-command-inject-lbdq2krn | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-proximity-dll-uvw4vhpm | Cisco Proximity Desktop for Windows DLL Hijacking Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-nfvis-xss-smsz5vhb | Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-multi-vuln-finesse-qp6gbuo2 | Multiple Cisco Products OpenSocial Gadget Editor Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2024-09-03T13:04:54+00:00 |
| cisco-sa-ipcameras-dos-9zdzcufq | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Denial of Service Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-fmc-xee-dfzardcs | Cisco Firepower Management Center XML Entity Expansion Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-fmc-stored-xss-djkfczf2 | Cisco Firepower Management Center Stored Cross-Site Scripting Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-fmc-infodisc-rjdktm6f | Cisco Firepower Management Center Information Disclosure Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-dnac-xss-hfv73cs3 | Cisco DNA Center Cross-Site Scripting Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cucm-logging-6qswkryz | Cisco Unified Communications Products Information Disclosure Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cmxpe-75asy9k | Cisco Connected Mobile Experiences Privilege Escalation Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-cmxapi-kskwcmfp | Cisco Connected Mobile Experiences User Enumeration Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-13T16:00:00+00:00 |
| cisco-sa-anyconnect-fileread-pbhbghmj | Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-02-23T21:11:48+00:00 |
| cisco-sa-anyconnect-dll-injec-pqnryxlf | Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability | 2021-01-13T16:00:00+00:00 | 2021-01-14T15:20:06+00:00 |
| cisco-sa-jabber-zktzjpgo | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities | 2020-12-10T16:00:00+00:00 | 2020-12-10T16:00:00+00:00 |
| cisco-sa-wsa-prv-esc-npzwzrqj | Cisco Secure Web Appliance Privilege Escalation Vulnerability | 2020-11-18T16:00:00+00:00 | 2021-01-21T14:53:26+00:00 |
| cisco-sa-webex-meetings-xss-mx56prer | Cisco Webex Meetings API Cross-Site Scripting Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| cisco-sa-webex-infodisc-4tvqzn4 | Cisco Webex Meetings and Cisco Webex Meetings Server Information Disclosure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-23T21:59:11+00:00 |
| cisco-sa-webex-info-leak-phpzb3sg | Cisco Webex Meetings and Cisco Webex Meetings Server Unauthorized Audio Information Exposure Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-11-23T21:59:36+00:00 |
| cisco-sa-webex-auth-token-3vg57a5r | Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability | 2020-11-18T16:00:00+00:00 | 2020-12-10T16:10:07+00:00 |
| cisco-sa-ucs-api-rce-uxwpedhd | Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities | 2020-11-18T16:00:00+00:00 | 2020-11-18T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39842 | ocfs2: prevent release journal inode after journal shutdown | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:44.000Z |
| msrc_cve-2025-39841 | scsi: lpfc: Fix buffer free/clear order in deferred receive path | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:00.000Z |
| msrc_cve-2025-39839 | batman-adv: fix OOB read/write in network-coding decode | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:18.000Z |
| msrc_cve-2025-39838 | cifs: prevent NULL pointer dereference in UTF16 conversion | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:35.000Z |
| msrc_cve-2025-39835 | xfs: do not propagate ENODATA disk errors into xattr code | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:54.000Z |
| msrc_cve-2025-39833 | mISDN: hfcpci: Fix warning when deleting uninitialized timer | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:32.000Z |
| msrc_cve-2025-39832 | net/mlx5: Fix lockdep assertion on sync reset unload event | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:42.000Z |
| msrc_cve-2025-39829 | trace/fgraph: Fix the warning caused by missing unregister notifier | 2025-09-02T00:00:00.000Z | 2025-12-04T01:01:45.000Z |
| msrc_cve-2025-39828 | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:15.000Z |
| msrc_cve-2025-39827 | net: rose: include node references in rose_neigh refcount | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:20.000Z |
| msrc_cve-2025-39826 | net: rose: convert 'use' field to refcount_t | 2025-09-02T00:00:00.000Z | 2025-09-20T01:01:34.000Z |
| msrc_cve-2025-39825 | smb: client: fix race with concurrent opens in rename(2) | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:04.000Z |
| msrc_cve-2025-39824 | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 2025-09-02T00:00:00.000Z | 2025-09-20T01:09:08.000Z |
| msrc_cve-2025-39823 | KVM: x86: use array_index_nospec with indices that come from guest | 2025-09-02T00:00:00.000Z | 2025-09-20T01:09:03.000Z |
| msrc_cve-2025-39819 | fs/smb: Fix inconsistent refcnt update | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:49.000Z |
| msrc_cve-2025-39817 | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:26.000Z |
| msrc_cve-2025-39813 | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 2025-09-02T00:00:00.000Z | 2025-09-20T01:07:59.000Z |
| msrc_cve-2025-39812 | sctp: initialize more fields in sctp_v6_from_sk() | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:53.000Z |
| msrc_cve-2025-39810 | bnxt_en: Fix memory corruption when FW resources change during ifdown | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:40.000Z |
| msrc_cve-2025-39808 | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:47.000Z |
| msrc_cve-2025-39805 | net: macb: fix unregister_netdev call order in macb_remove() | 2025-09-02T00:00:00.000Z | 2026-01-07T14:35:45.000Z |
| msrc_cve-2025-39801 | usb: dwc3: Remove WARN_ON for device endpoint command timeouts | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:45.000Z |
| msrc_cve-2025-39800 | btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:39.000Z |
| msrc_cve-2025-39799 | ACPI: processor: perflib: Move problematic pr->performance check | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:50.000Z |
| msrc_cve-2025-39798 | NFS: Fix the setting of capabilities when automounting a new filesystem | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:21.000Z |
| msrc_cve-2025-39797 | xfrm: Duplicate SPI Handling | 2025-09-02T00:00:00.000Z | 2025-11-26T01:01:49.000Z |
| msrc_cve-2025-39795 | block: avoid possible overflow for chunk_sectors check in blk_stack_limits() | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:32.000Z |
| msrc_cve-2025-39794 | ARM: tegra: Use I/O memcpy to write to IRAM | 2025-09-02T00:00:00.000Z | 2025-09-16T01:01:56.000Z |
| msrc_cve-2025-39790 | bus: mhi: host: Detect events pointing to unexpected TREs | 2025-09-02T00:00:00.000Z | 2025-09-13T01:04:20.000Z |
| msrc_cve-2025-39789 | crypto: x86/aegis - Add missing error checks | 2025-09-02T00:00:00.000Z | 2026-01-08T14:47:16.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201805-0967 | Systems with microprocessors utilizing speculative execution and that perform speculative… | 2025-12-22T20:28:21.100000Z |
| var-200701-0061 | Finder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a d… | 2025-12-22T20:28:20.146000Z |
| var-200810-0392 | Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer … | 2025-12-22T20:28:19.401000Z |
| var-200611-0471 | Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a … | 2025-12-22T20:27:47.786000Z |
| var-200809-0185 | Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user ma… | 2025-12-22T20:27:45.107000Z |
| var-201501-0339 | The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 b… | 2025-12-22T20:27:44.442000Z |
| var-202301-0598 | Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider… | 2025-12-22T20:27:44.363000Z |
| var-200608-0055 | WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of s… | 2025-12-22T20:27:43.810000Z |
| var-201203-0190 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2025-12-22T20:27:42.604000Z |
| var-200609-0311 | Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote at… | 2025-12-22T20:26:58.407000Z |
| var-201211-0367 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2025-12-22T20:26:58.328000Z |
| var-202006-0222 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C sub… | 2025-12-22T20:26:58.254000Z |
| var-202006-1653 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2025-12-22T20:26:57.553000Z |
| var-200901-0706 | WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, … | 2025-12-22T20:26:51.995000Z |
| var-202006-0391 | The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the… | 2025-12-22T20:26:51.848000Z |
| var-202201-0372 | lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. The vu… | 2025-12-22T20:26:45.024000Z |
| var-202210-1888 | When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_R… | 2025-12-22T20:25:13.201000Z |
| var-201206-0064 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T20:25:11.016000Z |
| var-201912-0497 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T20:25:09.902000Z |
| var-201302-0020 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T20:23:51.082000Z |
| var-201203-0181 | Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows … | 2025-12-22T20:23:50.330000Z |
| var-201203-0195 | Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers … | 2025-12-22T20:23:19.761000Z |
| var-201902-0242 | In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishand… | 2025-12-22T20:23:13.452000Z |
| var-202112-2011 | Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 an… | 2025-12-22T20:23:11.889000Z |
| var-200701-0295 | The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML … | 2025-12-22T20:23:10.216000Z |
| var-200607-0007 | Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows… | 2025-12-22T20:23:09.789000Z |
| var-201512-0485 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2… | 2025-12-22T20:23:09.534000Z |
| var-200812-0322 | Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows re… | 2025-12-22T20:23:03.308000Z |
| var-200603-0282 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 1… | 2025-12-22T20:23:02.940000Z |
| var-202004-1975 | An input validation issue was addressed with improved input validation. This issue is fix… | 2025-12-22T20:22:57.538000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2018-000106 | User-friendly SVN vulnerable to cross-site scripting | 2018-10-09T16:27+09:00 | 2019-07-11T18:00+09:00 |
| jvndb-2018-000103 | Music Center for PC improperly verifies software update files | 2018-10-09T16:22+09:00 | 2019-07-26T15:57+09:00 |
| jvndb-2018-000102 | Multiple vulnerabilities in Denbun | 2018-10-04T16:11+09:00 | 2019-07-11T16:02+09:00 |
| jvndb-2018-000101 | The installer of Baidu Browser may insecurely load Dynamic Link Libraries | 2018-10-03T15:02+09:00 | 2019-08-27T10:39+09:00 |
| jvndb-2018-000100 | +Message App fails to verify SSL server certificates | 2018-09-27T16:52+09:00 | 2019-08-27T17:22+09:00 |
| jvndb-2018-000097 | Multiple FXC network devices vulnerable to cross-site scripting | 2018-09-13T13:57+09:00 | 2019-08-27T11:30+09:00 |
| jvndb-2018-000099 | Cybozu Garoon vulnerable to directory traversal | 2018-09-10T14:01+09:00 | 2019-07-26T15:28+09:00 |
| jvndb-2018-000092 | Multiple vulnerabilities in INplc | 2018-09-07T16:49+09:00 | 2019-08-28T09:51+09:00 |
| jvndb-2018-000095 | AttacheCase vulnerable to arbitrary script execution | 2018-08-31T15:59+09:00 | 2019-07-26T12:19+09:00 |
| jvndb-2018-000096 | QNAP Photo Station vulnerable to cross-site scripting | 2018-08-31T15:48+09:00 | 2019-07-25T16:09+09:00 |
| jvndb-2018-000094 | Movable Type vulnerable to cross-site scripting | 2018-08-30T17:34+09:00 | 2019-07-25T14:25+09:00 |
| jvndb-2018-000093 | Multiple script injection vulnerabilities in multiple Yamaha network devices | 2018-08-29T18:01+09:00 | 2019-08-27T17:53+09:00 |
| jvndb-2018-006460 | Path Traversal Vulnerability in Hitachi Automation Director | 2018-08-22T17:11+09:00 | 2018-08-22T17:11+09:00 |
| jvndb-2018-006459 | Path Traversal Vulnerability in JP1/Automatic Operation | 2018-08-22T17:11+09:00 | 2018-08-22T17:11+09:00 |
| jvndb-2018-000087 | The installer of Digital Paper App may insecurely load Dynamic Link Libraries | 2018-08-21T15:59+09:00 | 2019-07-25T16:17+09:00 |
| jvndb-2018-000091 | NoMachine App for Android vulnerable to environment variables alteration | 2018-08-17T13:49+09:00 | 2019-07-25T17:17+09:00 |
| jvndb-2018-006236 | Information Disclosure Vulnerability in Hitachi Command Suite | 2018-08-14T10:04+09:00 | 2019-07-24T17:02+09:00 |
| jvndb-2018-000086 | Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE | 2018-08-09T16:43+09:00 | 2018-08-09T16:43+09:00 |
| jvndb-2018-000089 | Multiple vulnerabilities in multiple I-O DATA network camera products | 2018-08-07T14:33+09:00 | 2019-07-25T16:00+09:00 |
| jvndb-2018-000090 | Multiple directory traversal vulnerabilities in AttacheCase | 2018-08-06T14:10+09:00 | 2019-07-25T14:32+09:00 |
| jvndb-2018-000085 | Multiple cross-site scripting vulnerabilities in GROWI | 2018-08-03T15:04+09:00 | 2019-07-05T17:13+09:00 |
| jvndb-2018-000084 | LINE MUSIC for Android fails to verify SSL server certificates | 2018-07-26T14:58+09:00 | 2019-07-25T17:28+09:00 |
| jvndb-2018-000083 | The installers of multiple Canon IT Solutions Inc. software programs may insecurely load Dynamic Link Libraries | 2018-07-24T14:43+09:00 | 2019-07-26T12:05+09:00 |
| jvndb-2018-000073 | Installer of ChatWork Desktop App for Windows may insecurely load Dynamic Link Libraries | 2018-07-23T14:28+09:00 | 2019-07-25T16:50+09:00 |
| jvndb-2018-000082 | WL-330NUL vulnerable to cross-site request forgery | 2018-07-20T15:41+09:00 | 2019-07-25T14:38+09:00 |
| jvndb-2018-000074 | DLL planting vulnerability in multiple Yayoi 17 Series products | 2018-07-20T15:41+09:00 | 2019-07-25T15:04+09:00 |
| jvndb-2018-000081 | Multiple vulnerabilities in ORCA(Online Receipt Computer Advantage) | 2018-07-18T15:35+09:00 | 2019-07-25T16:59+09:00 |
| jvndb-2018-000080 | Movable Type plugin MTAppjQuery vulnerable to PHP code execution | 2018-07-18T15:35+09:00 | 2019-07-26T15:23+09:00 |
| jvndb-2018-000078 | WordPress plugin "FV Flowplayer Video Player" vulnerable to cross-site scripting | 2018-07-17T12:27+09:00 | 2019-07-25T17:12+09:00 |
| jvndb-2018-000079 | Explzh vulnerable to directory traversal | 2018-07-13T14:47+09:00 | 2019-07-25T16:26+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:03172-1 | Security update for xen | 2025-09-11T12:54:02Z | 2025-09-11T12:54:02Z |
| suse-su-2025:03171-1 | Security update for regionServiceClientConfigGCE | 2025-09-11T12:38:50Z | 2025-09-11T12:38:50Z |
| suse-su-2025:03170-1 | Security update for regionServiceClientConfigEC2 | 2025-09-11T12:38:35Z | 2025-09-11T12:38:35Z |
| suse-su-2025:03169-1 | Security update for regionServiceClientConfigAzure | 2025-09-11T12:38:10Z | 2025-09-11T12:38:10Z |
| suse-su-2025:03164-1 | Security update for ImageMagick | 2025-09-11T11:06:33Z | 2025-09-11T11:06:33Z |
| suse-su-2025:20696-1 | Security update for vim | 2025-09-11T10:30:52Z | 2025-09-11T10:30:52Z |
| suse-su-2025:03005-2 | Security update for postgresql16 | 2025-09-11T10:21:41Z | 2025-09-11T10:21:41Z |
| suse-su-2025:03005-1 | Security update for postgresql16 | 2025-09-11T10:21:41Z | 2025-09-11T10:21:41Z |
| suse-su-2025:03162-1 | Security update for ffmpeg-4 | 2025-09-11T09:16:14Z | 2025-09-11T09:16:14Z |
| suse-su-2025:03161-1 | Security update for go1.25-openssl | 2025-09-11T09:15:57Z | 2025-09-11T09:15:57Z |
| suse-su-2025:03160-1 | Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) | 2025-09-11T05:03:55Z | 2025-09-11T05:03:55Z |
| suse-su-2025:03159-1 | Security update for go1.23-openssl | 2025-09-11T03:05:02Z | 2025-09-11T03:05:02Z |
| suse-su-2025:03158-1 | Security update for go1.24-openssl | 2025-09-11T03:04:46Z | 2025-09-11T03:04:46Z |
| suse-su-2025:03156-1 | Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4) | 2025-09-10T22:26:58Z | 2025-09-10T22:26:58Z |
| suse-su-2025:03154-1 | Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3) | 2025-09-10T18:34:57Z | 2025-09-10T18:34:57Z |
| suse-su-2025:03153-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3) | 2025-09-10T18:34:45Z | 2025-09-10T18:34:45Z |
| suse-su-2025:03152-1 | Security update for ImageMagick | 2025-09-10T18:04:37Z | 2025-09-10T18:04:37Z |
| suse-su-2025:03151-1 | Security update for ImageMagick | 2025-09-10T18:01:34Z | 2025-09-10T18:01:34Z |
| suse-su-2025:03150-1 | Security update for ImageMagick | 2025-09-10T17:58:50Z | 2025-09-10T17:58:50Z |
| suse-su-2025:03149-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3) | 2025-09-10T16:34:03Z | 2025-09-10T16:34:03Z |
| suse-su-2025:20743-1 | Security update for docker | 2025-09-10T16:09:16Z | 2025-09-10T16:09:16Z |
| suse-su-2025:03148-1 | Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3) | 2025-09-10T15:33:54Z | 2025-09-10T15:33:54Z |
| suse-su-2025:03146-1 | Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5) | 2025-09-10T12:35:50Z | 2025-09-10T12:35:50Z |
| suse-su-2025:03143-1 | Security update for the Linux Kernel (Live Patch 68 for SLE 12 SP5) | 2025-09-10T12:35:29Z | 2025-09-10T12:35:29Z |
| suse-su-2025:03138-1 | Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5) | 2025-09-10T12:34:25Z | 2025-09-10T12:34:25Z |
| suse-su-2025:03135-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-09-10T12:34:01Z | 2025-09-10T12:34:01Z |
| suse-su-2025:03133-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-09-10T12:04:10Z | 2025-09-10T12:04:10Z |
| suse-su-2025:03130-1 | Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3) | 2025-09-10T11:33:55Z | 2025-09-10T11:33:55Z |
| suse-su-2025:03129-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3) | 2025-09-10T10:04:28Z | 2025-09-10T10:04:28Z |
| suse-su-2025:03127-1 | Security update for python-deepdiff | 2025-09-10T08:49:31Z | 2025-09-10T08:49:31Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14821-1 | ruby3.4-rubygem-grpc-1.70.1-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14820-1 | openssh-9.9p2-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14819-1 | kubernetes1.32-apiserver-1.32.2-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14818-1 | kubernetes1.31-apiserver-1.31.6-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14817-1 | kubernetes1.30-apiserver-1.30.10-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14816-1 | kubernetes1.29-apiserver-1.29.14-1.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14815-1 | google-osconfig-agent-20250115.01-2.1 on GA media | 2025-02-18T00:00:00Z | 2025-02-18T00:00:00Z |
| opensuse-su-2025:14814-1 | obs-service-cargo-4.5.0-2.1 on GA media | 2025-02-16T00:00:00Z | 2025-02-16T00:00:00Z |
| opensuse-su-2025:14813-1 | keylime-config-7.12.1-1.1 on GA media | 2025-02-16T00:00:00Z | 2025-02-16T00:00:00Z |
| opensuse-su-2025:14812-1 | chromedriver-133.0.6943.98-2.1 on GA media | 2025-02-15T00:00:00Z | 2025-02-15T00:00:00Z |
| opensuse-su-2025:0059-1 | Security update for chromium | 2025-02-14T08:59:39Z | 2025-02-14T08:59:39Z |
| opensuse-su-2025:14811-1 | ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media | 2025-02-14T00:00:00Z | 2025-02-14T00:00:00Z |
| opensuse-su-2025:14810-1 | libecpg6-17.3-1.1 on GA media | 2025-02-14T00:00:00Z | 2025-02-14T00:00:00Z |
| opensuse-su-2025:14809-1 | curl-8.12.1-1.1 on GA media | 2025-02-14T00:00:00Z | 2025-02-14T00:00:00Z |
| opensuse-su-2025:0058-1 | Security update for chromium | 2025-02-13T08:57:17Z | 2025-02-13T08:57:17Z |
| opensuse-su-2025:14808-1 | postgresql16-16.7-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14807-1 | postgresql15-15.11-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14806-1 | postgresql14-14.16-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14805-1 | postgresql13-13.19-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14804-1 | kernel-firmware-all-20250206-1.1 on GA media | 2025-02-13T00:00:00Z | 2025-02-13T00:00:00Z |
| opensuse-su-2025:14803-1 | ucode-intel-20250211-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14802-1 | libopenssl-3-devel-3.2.4-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14801-1 | kernel-firmware-usb-network-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14800-1 | kernel-firmware-ueagle-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14799-1 | kernel-firmware-ti-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14798-1 | kernel-firmware-sound-20250210-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14797-1 | kernel-firmware-serial-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14796-1 | kernel-firmware-realtek-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14795-1 | kernel-firmware-radeon-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| opensuse-su-2025:14794-1 | kernel-firmware-qlogic-20250206-1.1 on GA media | 2025-02-12T00:00:00Z | 2025-02-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29941 | ASUS Armoury Crate链接跟随不当漏洞 | 2025-10-17 | 2025-12-03 |
| cnvd-2025-29940 | ASUS Armoury Crate空指针取消引用漏洞 | 2025-10-17 | 2025-12-03 |
| cnvd-2025-29353 | Microsoft Windows SMB Server访问控制错误漏洞 | 2025-10-17 | 2025-11-25 |
| cnvd-2025-29352 | Microsoft Graphics Component权限提升漏洞 | 2025-10-17 | 2025-11-25 |
| cnvd-2025-29351 | Microsoft Windows权限提升漏洞(CNVD-2025-29351) | 2025-10-17 | 2025-11-25 |
| cnvd-2025-29349 | Microsoft Azure权限提升漏洞(CNVD-2025-29349) | 2025-10-17 | 2025-11-25 |
| cnvd-2025-28684 | Ivanti Endpoint Manager路径遍历漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-28683 | Ivanti Endpoint Manager反序列化漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-28682 | Ivanti Endpoint Manager SQL注入漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-27452 | Fortinet FortiClientMAC资源管理错误漏洞 | 2025-10-17 | 2025-11-10 |
| cnvd-2025-27451 | Fortinet FortiClientMac代码注入漏洞 | 2025-10-17 | 2025-11-10 |
| cnvd-2025-26722 | Microsoft Exchange Server权限提升漏洞(CNVD-2025-26722) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26721 | Microsoft Word代码执行漏洞(CNVD-2025-26721) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26720 | Microsoft Word代码执行漏洞(CNVD-2025-26720) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26719 | Microsoft PowerPoint代码执行漏洞(CNVD-2025-26719) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26718 | Microsoft Exchange Server欺骗漏洞(CNVD-2025-26718) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26717 | Microsoft Exchange Server权限提升漏洞(CNVD-2025-26717) | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26108 | Microsoft Windows Server远程代码执行漏洞(CNVD-2025-26108) | 2025-10-17 | 2025-10-31 |
| cnvd-2025-25715 | Automated Voting System update_user.php文件SQL注入漏洞 | 2025-10-17 | 2025-10-29 |
| cnvd-2025-25714 | Automated Voting System add_candidate_modal.php文件SQL注入漏洞 | 2025-10-17 | 2025-10-29 |
| cnvd-2025-25713 | Microsoft Inbox COM Objects代码执行漏洞(CNVD-2025-25713) | 2025-10-17 | 2025-10-29 |
| cnvd-2025-25712 | Microsoft Inbox COM Objects代码执行漏洞 | 2025-10-17 | 2025-10-29 |
| cnvd-2025-25374 | F5 BIG-IP权限提升漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25373 | F5 BIG-IP IPsec拒绝服务漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25372 | F5 BIG-IP SSL Orchestrator内存损坏漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25371 | F5 BIG-IP SSL/TLS拒绝服务漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25370 | F5 BIG-IP TMM拒绝服务漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25369 | F5 BIG-IP iHealth工具权限绕过漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25368 | F5 BIG-IP ePVA拒绝服务漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-25367 | F5 BIG-IP Next TMM内存资源管理漏洞 | 2025-10-17 | 2025-10-21 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0033 | Multiples vulnérabilités dans Google Chrome | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0032 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0031 | Multiples vulnérabilités dans les produits Fortinet | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0030 | Multiples vulnérabilités dans les produits Fortinet | 2025-01-14T00:00:00.000000 | 2025-02-12T00:00:00.000000 |
| certfr-2025-avi-0029 | Multiples vulnérabilités dans les produits Siemens | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0028 | Multiples vulnérabilités dans Typo3 | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0027 | Multiples vulnérabilités dans les produits SAP | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0026 | Vulnérabilité dans Veeam Backup pour Microsoft Azure | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0025 | Multiples vulnérabilités dans Mozilla Firefox pour iOS | 2025-01-13T00:00:00.000000 | 2025-01-13T00:00:00.000000 |
| certfr-2025-avi-0024 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0023 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0022 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0021 | Multiples vulnérabilités dans les produits IBM | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0020 | Vulnérabilité dans Asterisk | 2025-01-10T00:00:00.000000 | 2025-01-10T00:00:00.000000 |
| certfr-2025-avi-0019 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-01-09T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0018 | Multiples vulnérabilités dans les produits Juniper Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0017 | Vulnérabilité dans les produits HPE Aruba Networking | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0016 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0015 | Multiples vulnérabilités dans GitLab | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0014 | Multiples vulnérabilités dans les produits Ivanti | 2025-01-09T00:00:00.000000 | 2025-01-09T00:00:00.000000 |
| certfr-2025-avi-0013 | Multiples vulnérabilités dans les produits SonicWall | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0012 | Vulnérabilité dans Google Chrome | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0011 | Vulnérabilité dans VMware Aria automation et Cloud Fondation | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0010 | Multiples vulnérabilités dans les produits Splunk | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0009 | Multiples vulnérabilités dans les produits Mozilla | 2025-01-08T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0008 | Multiples vulnérabilités dans Joomla! | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0007 | Multiples vulnérabilités dans HPE Aruba Networking 501 Wireless Client Bridge | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0006 | Multiples vulnérabilités dans LibreOffice | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0005 | Vulnérabilité dans Google Pixel | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0004 | Multiples vulnérabilités dans Google Android | 2025-01-07T00:00:00.000000 | 2025-01-03T00:00:00.000000 |