Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-55252
3.1 (3.1)
HCL AION is affected by a Weak Password Policy vulnerability HCL Software
AION
2026-01-19T18:13:17.724Z 2026-01-20T20:06:01.277Z
CVE-2026-23841
9.3 (3.1)
Movary vulnerable to Cross-site Scripting with `?categ… leepeuker
movary
2026-01-19T18:35:21.866Z 2026-01-20T20:05:55.115Z
CVE-2026-23842
7.5 (3.1)
ChatterBot has Denial of Service via Database Connecti… gunthercox
ChatterBot
2026-01-19T18:39:37.059Z 2026-01-20T20:05:48.462Z
CVE-2026-23843
7.1 (3.1)
teklifolustur_app's IDOR vulnerability allows unauthor… sibercii6-crypto
teklifolustur_app
2026-01-19T18:42:56.765Z 2026-01-20T20:05:43.380Z
CVE-2026-23845
5.8 (3.1)
Mailpit Vulnerable to Server-Side Request Forgery (SSR… axllent
mailpit
2026-01-19T19:01:38.163Z 2026-01-20T20:05:35.862Z
CVE-2025-69198
6 (4.0)
Pterodactyl's improper resource locking allows raced q… pterodactyl
panel
2026-01-19T19:05:38.530Z 2026-01-20T20:05:30.610Z
CVE-2025-69199
8.3 (4.0)
Pterodactyl Wings's websocket endpoints have no visibl… pterodactyl
panel
2026-01-19T19:17:53.569Z 2026-01-20T20:05:22.699Z
CVE-2026-23850
7.8 (4.0)
SiYuan vulnerable to arbitrary file read siyuan-note
siyuan
2026-01-19T19:52:58.615Z 2026-01-20T20:05:16.346Z
CVE-2026-23851
8.3 (4.0)
SiYuan Vulnerable to Arbitrary File Read via File Copy… siyuan-note
siyuan
2026-01-19T19:57:29.460Z 2026-01-20T20:05:11.018Z
CVE-2026-23852
5.8 (4.0)
SiYuan vulnerable to Stored XSS / RCE via `setBlockAtt… siyuan-note
siyuan
2026-01-19T20:00:05.839Z 2026-01-20T20:05:02.903Z
CVE-2026-23848
6.5 (3.1)
MyTube has Rate Limiting Bypass via X-Forwarded-For He… franklioxygen
MyTube
2026-01-19T20:34:40.060Z 2026-01-20T20:04:56.547Z
CVE-2026-1221
9.3 (4.0)
9.8 (3.1)
BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Us… BROWAN COMMUNICATIONS
PrismX MX100 AP controller
2026-01-20T06:25:46.272Z 2026-01-20T20:04:39.035Z
CVE-2024-36600
8.4 (3.1)
Buffer Overflow Vulnerability in libcdio 2.2.0 (f… n/a
n/a
2024-06-14T00:00:00.000Z 2026-01-20T20:04:11.488Z
CVE-2024-57440
7.5 (3.1)
D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnera… n/a
n/a
2025-03-20T00:00:00.000Z 2026-01-20T19:51:55.294Z
CVE-2025-10327
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
MiczFlor RPi-Jukebox-RFID shuffle.php os command injection MiczFlor
RPi-Jukebox-RFID
2025-09-12T21:02:06.202Z 2026-01-20T19:41:32.883Z
CVE-2025-14075
5.3 (3.1)
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive … thimpress
WP Hotel Booking
2026-01-17T02:22:30.818Z 2026-01-20T19:24:25.492Z
CVE-2025-14450
6.5 (3.1)
Wallet System for WooCommerce <= 2.7.2 - Missing Autho… wpswings
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
2026-01-17T02:22:31.567Z 2026-01-20T19:24:20.682Z
CVE-2025-15403
9.8 (3.1)
RegistrationMagic <= 6.0.7.1 - Privilege Escalation vi… metagauss
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
2026-01-17T02:22:32.032Z 2026-01-20T19:24:15.898Z
CVE-2025-14632
4.4 (3.1)
Filr – Secure document library <= 1.2.11 - Authenticat… wpchill
Filr – Secure document library
2026-01-17T02:22:32.399Z 2026-01-20T19:24:10.881Z
CVE-2025-12718
5.8 (3.1)
Quick Contact Form <= 8.2.6 - Unauthenticated Open Mai… saadiqbal
Quick Contact Form
2026-01-17T02:22:32.748Z 2026-01-20T19:24:06.150Z
CVE-2025-12002
5.9 (3.1)
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbit… Awesome Motive
YouTube Feed Pro
2026-01-17T02:22:33.224Z 2026-01-20T19:23:58.770Z
CVE-2026-0820
5.3 (3.1)
RepairBuddy <= 4.1116 - Insecure Direct Object Referen… sweetdaisy86
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
2026-01-17T03:24:23.562Z 2026-01-20T19:23:53.753Z
CVE-2026-0682
2.2 (3.1)
Church Admin <= 5.0.28 - Authenticated (Administrator+… andy_moyle
Church Admin
2026-01-17T03:24:24.110Z 2026-01-20T19:23:48.794Z
CVE-2025-13725
6.5 (3.1)
Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contri… thimpress
Thim Blocks
2026-01-17T03:24:24.463Z 2026-01-20T19:23:43.378Z
CVE-2025-14463
5.3 (3.1)
Payment Button for PayPal <= 1.2.3.41 - Missing Author… naa986
Payment Button for PayPal
2026-01-17T03:24:24.816Z 2026-01-20T19:23:38.739Z
CVE-2025-12129
5.3 (3.1)
CubeWP – All-in-One Dynamic Content Framework <= 1.1.2… cubewp1211
CubeWP Framework
2026-01-17T07:27:37.085Z 2026-01-20T19:23:34.063Z
CVE-2025-14478
7.5 (3.1)
Demo Importer Plus <= 2.0.9 - Authenticated (Author+) … kraftplugins
Demo Importer Plus
2026-01-17T07:27:37.627Z 2026-01-20T19:23:29.088Z
CVE-2025-10484
9.8 (3.1)
Registration & Login with Mobile Phone Number for WooC… FmeAddons
Registration & Login with Mobile Phone Number for WooCommerce
2026-01-17T08:24:30.759Z 2026-01-20T19:23:24.113Z
CVE-2026-0725
4.4 (3.1)
Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (A… cyberlord92
Integrate Dynamics 365 CRM
2026-01-17T08:24:31.355Z 2026-01-20T19:23:19.234Z
CVE-2025-14078
5.3 (3.1)
PAYGENT for WooCommerce <= 2.4.6 - Missing Authorizati… shoheitanaka
PAYGENT for WooCommerce
2026-01-17T08:24:31.760Z 2026-01-20T19:23:14.231Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-68258
N/A
comedi: multiq3: sanitize config options in multiq3_attach() Linux
Linux
2025-12-16T14:45:00.920Z 2026-02-09T08:31:11.628Z
CVE-2025-68257
N/A
comedi: check device's attached status in compat ioctls Linux
Linux
2025-12-16T14:44:59.535Z 2026-02-09T08:31:10.507Z
CVE-2025-68255
N/A
staging: rtl8723bs: fix stack buffer overflow in OnAss… Linux
Linux
2025-12-16T14:44:58.031Z 2026-02-09T08:31:08.339Z
CVE-2025-68254
N/A
staging: rtl8723bs: fix out-of-bounds read in OnBeacon… Linux
Linux
2025-12-16T14:44:57.204Z 2026-02-09T08:31:07.247Z
CVE-2025-40256
N/A
xfrm: also call xfrm_state_delete_tunnel at destroy ti… Linux
Linux
2025-12-04T16:08:17.756Z 2026-01-19T12:18:06.846Z
CVE-2025-40215
N/A
xfrm: delete x->tunnel as we delete x Linux
Linux
2025-12-04T12:38:32.517Z 2026-01-19T12:18:05.674Z
CVE-2025-40110
N/A
drm/vmwgfx: Fix a null-ptr access in the cursor snooper Linux
Linux
2025-11-12T01:07:24.739Z 2026-01-19T12:18:04.465Z
CVE-2025-38556
N/A
HID: core: Harden s32ton() against conversion to 0 bits Linux
Linux
2025-08-19T17:02:34.929Z 2026-01-19T12:18:03.142Z
CVE-2025-38129
N/A
page_pool: Fix use-after-free in page_pool_recycle_in_ring Linux
Linux
2025-07-03T08:35:33.728Z 2026-01-19T12:18:00.706Z
CVE-2025-38119
N/A
scsi: core: ufs: Fix a hang in the error handler Linux
Linux
2025-07-03T08:35:26.616Z 2026-01-19T12:17:59.357Z
CVE-2025-38022
N/A
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_… Linux
Linux
2025-06-18T09:28:29.218Z 2026-01-19T12:17:58.186Z
CVE-2025-37830
N/A
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() Linux
Linux
2025-05-08T06:26:21.736Z 2026-01-19T12:17:56.940Z
CVE-2025-22121
N/A
ext4: fix out-of-bound read in ext4_xattr_inode_dec_re… Linux
Linux
2025-04-16T14:13:05.894Z 2026-01-19T12:17:55.783Z
CVE-2025-22111
N/A
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. Linux
Linux
2025-04-16T14:12:57.719Z 2026-01-19T12:17:54.573Z
CVE-2025-22022
N/A
usb: xhci: Apply the link chain quirk on NEC isoc endpoints Linux
Linux
2025-04-16T10:23:27.423Z 2026-01-19T12:17:53.138Z
CVE-2024-49968
N/A
ext4: filesystems without casefold feature cannot be m… Linux
Linux
2024-10-21T18:02:18.369Z 2026-01-19T12:17:51.927Z
CVE-2024-46830
N/A
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU… Linux
Linux
2024-09-27T12:39:28.396Z 2026-01-19T12:17:50.664Z
CVE-2024-40928
N/A
net: ethtool: fix the error condition in ethtool_get_p… Linux
Linux
2024-07-12T12:25:07.769Z 2026-01-19T12:17:49.472Z
CVE-2024-36927
N/A
ipv4: Fix uninit-value access in __ip_make_skb() Linux
Linux
2024-05-30T15:29:20.275Z 2026-01-19T12:17:47.098Z
CVE-2024-36903
N/A
ipv6: Fix potential uninit-value access in __ip6_make_skb() Linux
Linux
2024-05-30T15:29:04.866Z 2026-01-19T12:17:45.894Z
CVE-2023-52975
7.8 (3.1)
scsi: iscsi_tcp: Fix UAF during logout when accessing … Linux
Linux
2025-03-27T16:43:15.322Z 2026-01-19T12:17:43.562Z
CVE-2022-49743
N/A
ovl: Use "buf" flexible array for memcpy() destination Linux
Linux
2025-03-27T16:42:54.289Z 2026-01-19T12:17:42.348Z
CVE-2022-49267
N/A
mmc: core: use sysfs_emit() instead of sprintf() Linux
Linux
2025-02-26T01:56:16.211Z 2026-01-19T12:17:38.477Z
CVE-2025-46397
7.8 (3.1)
Xfig: xfig: stack-overflow allows possible code execut…

2025-04-23T20:55:09.795Z 2026-01-19T03:55:40.389Z
CVE-2024-7885
7.5 (3.1)
Undertow: improper state management in proxy protocol …

2024-08-21T14:13:36.579Z 2026-01-19T03:51:37.166Z
CVE-2025-40920
8.6 (3.1)
Catalyst::Authentication::Credential::HTTP versions 1.… ETHER
Catalyst::Authentication::Credential::HTTP
2025-08-11T20:19:57.516Z 2026-01-17T20:23:09.178Z
CVE-2025-68792
N/A
tpm2-sessions: Fix out of range indexing in name_size Linux
Linux
2026-01-13T15:29:04.226Z 2026-02-09T08:33:39.373Z
CVE-2025-5489
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:09.219Z
CVE-2025-5102
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:09.061Z
CVE-2024-8506
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:08.895Z
ID Description Published Updated
fkie_cve-2025-68254 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of… 2025-12-16T15:15:54.767 2026-01-19T13:16:08.953
fkie_cve-2025-40256 In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_del… 2025-12-04T16:16:19.367 2026-01-19T13:16:08.850
fkie_cve-2025-40215 In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we d… 2025-12-04T13:15:48.473 2026-01-19T13:16:08.747
fkie_cve-2025-40110 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr acc… 2025-11-12T02:15:32.900 2026-01-19T13:16:08.643
fkie_cve-2025-38556 In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() aga… 2025-08-19T17:15:31.817 2026-01-19T13:16:08.517
fkie_cve-2025-38129 In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free … 2025-07-03T09:15:27.170 2026-01-19T13:16:08.397
fkie_cve-2025-38119 In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in… 2025-07-03T09:15:25.903 2026-01-19T13:16:08.263
fkie_cve-2025-38022 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-us… 2025-06-18T10:15:33.950 2026-01-19T13:16:08.140
fkie_cve-2025-37830 In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-de… 2025-05-08T07:15:54.240 2026-01-19T13:16:07.987
fkie_cve-2025-22121 In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in… 2025-04-16T15:16:06.277 2026-01-19T13:16:07.867
fkie_cve-2025-22111 In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIO… 2025-04-16T15:16:05.347 2026-01-19T13:16:07.750
fkie_cve-2025-22022 In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chai… 2025-04-16T11:15:42.883 2026-01-19T13:16:07.630
fkie_cve-2024-49968 In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without case… 2024-10-21T18:15:17.833 2026-01-19T13:16:07.507
fkie_cve-2024-46830 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu wh… 2024-09-27T13:15:15.380 2026-01-19T13:16:07.367
fkie_cve-2024-40928 In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix the error co… 2024-07-12T13:15:15.550 2026-01-19T13:16:07.240
fkie_cve-2024-36927 In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix uninit-value access … 2024-05-30T16:15:15.957 2026-01-19T13:16:06.940
fkie_cve-2024-36903 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-val… 2024-05-30T16:15:13.867 2026-01-19T13:16:06.793
fkie_cve-2023-52975 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Fix UAF durin… 2025-03-27T17:15:44.533 2026-01-19T13:16:06.533
fkie_cve-2022-49743 In the Linux kernel, the following vulnerability has been resolved: ovl: Use "buf" flexible array … 2025-03-27T17:15:38.967 2026-01-19T13:16:06.403
fkie_cve-2022-49267 In the Linux kernel, the following vulnerability has been resolved: mmc: core: use sysfs_emit() in… 2025-02-26T07:01:03.620 2026-01-19T13:16:05.963
fkie_cve-2025-46397 A flaw was found in xfig. This vulnerability allows possible code execution via local input manipul… 2025-04-23T21:15:16.807 2026-01-19T04:15:58.400
fkie_cve-2024-7885 A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBui… 2024-08-21T14:15:09.500 2026-01-19T04:15:58.173
fkie_cve-2025-40920 Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces usin… 2025-08-11T21:15:28.087 2026-01-17T21:15:48.750
fkie_cve-2025-68792 In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of rang… 2026-01-13T16:16:01.090 2026-01-17T16:16:05.827
fkie_cve-2025-5489 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.150 2026-01-16T23:15:49.150
fkie_cve-2025-5102 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.090 2026-01-16T23:15:49.090
fkie_cve-2024-8506 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.017 2026-01-16T23:15:49.017
fkie_cve-2024-8491 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:48.460 2026-01-16T23:15:48.460
fkie_cve-2025-15456 A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown func… 2026-01-05T05:15:53.007 2026-01-16T21:35:03.127
fkie_cve-2022-50443 In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usa… 2025-10-01T12:15:36.590 2026-01-16T21:34:09.787
ID Severity Description Published Updated
ghsa-c8j7-qh9h-9m9g
8.8 (3.1)
7.4 (4.0)
A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerabil… 2026-01-02T06:30:26Z 2026-01-02T06:30:26Z
ghsa-8c7f-86mm-qggc
7.3 (3.1)
5.5 (4.0)
A security flaw has been discovered in Seeyon Zhiyuan OA Web Application System up to 20251222. Thi… 2026-01-02T06:30:26Z 2026-01-02T06:30:26Z
ghsa-7c57-5mq4-5xwg
8.8 (3.1)
7.4 (4.0)
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the … 2026-01-02T06:30:26Z 2026-01-02T06:30:26Z
ghsa-pqf3-28pm-5446
9.8 (3.1)
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all v… 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-p2h8-g3qw-gm52
6.3 (3.1)
2.1 (4.0)
A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSav… 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-87fx-g37g-r5gh
7.3 (3.1)
5.5 (4.0)
A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the … 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-7hvg-2mq3-69q7
7.3 (3.1)
5.5 (4.0)
A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the fil… 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-6w8g-45hg-7r2c
5.3 (3.1)
The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post … 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-5wxx-mj5q-83hp
7.3 (3.1)
5.5 (4.0)
A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the fi… 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-2223-q26h-rqmg
5.3 (3.1)
5.5 (4.0)
A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of … 2026-01-02T03:30:22Z 2026-01-02T03:30:22Z
ghsa-wcrf-5vr8-vwjp
4.7 (3.1)
2.0 (4.0)
A flaw has been found in go-sonic sonic up to 1.1.4. The affected element is the function FetchThem… 2026-01-02T00:30:25Z 2026-01-02T00:30:25Z
ghsa-rm9v-363r-mcp3
4.7 (3.1)
2.0 (4.0)
A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function u… 2026-01-02T00:30:25Z 2026-01-02T00:30:25Z
ghsa-p5wf-p25w-3c2h
2.4 (3.1)
1.9 (4.0)
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the fil… 2026-01-02T00:30:25Z 2026-01-02T00:30:25Z
ghsa-v4w6-g947-j89r
7.5 (3.1)
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 2026-01-01T21:30:17Z 2026-01-01T21:30:17Z
ghsa-vmw8-vh7h-pqf3
7.3 (3.1)
5.5 (4.0)
A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerabi… 2026-01-01T21:30:16Z 2026-01-01T21:30:16Z
ghsa-6mjc-v38j-fq7f
7.3 (3.1)
5.5 (4.0)
A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is … 2026-01-01T21:30:16Z 2026-01-01T21:30:16Z
ghsa-w974-j9q9-4wrg
7.3 (3.1)
5.5 (4.0)
A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown fu… 2026-01-01T18:30:28Z 2026-01-01T18:30:28Z
ghsa-7qw4-78fp-w39m
7.3 (3.1)
5.5 (4.0)
A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function… 2026-01-01T18:30:28Z 2026-01-01T18:30:28Z
ghsa-xvpj-p677-68r9
6.4 (3.1)
The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to Serve… 2026-01-01T18:30:27Z 2026-01-01T18:30:27Z
ghsa-hc59-8g4c-v494
6.3 (3.1)
2.1 (4.0)
A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown f… 2026-01-01T18:30:27Z 2026-01-01T18:30:27Z
ghsa-h8mg-wf4c-mjw7
4.3 (3.1)
The All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs - My Sti… 2026-01-01T18:30:27Z 2026-01-01T18:30:27Z
ghsa-x8m4-6wf8-65hj
4.3 (3.1)
5.3 (4.0)
A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The… 2026-01-01T15:30:26Z 2026-01-01T15:30:26Z
ghsa-m3g8-r3rh-3qwc
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in campcodes School File Management System 1.0. The affe… 2026-01-01T15:30:26Z 2026-01-01T15:30:26Z
ghsa-fpmp-qj84-cqfg
7.3 (3.1)
5.5 (4.0)
A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an u… 2026-01-01T09:30:15Z 2026-01-01T09:30:15Z
ghsa-cf34-5r96-m2mj
2.4 (3.1)
1.9 (4.0)
A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the funct… 2025-12-30T03:30:16Z 2026-01-01T09:30:14Z
ghsa-wwqj-qcq5-6fgq
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:26Z 2026-01-01T03:30:26Z
ghsa-vcxv-wr59-826x
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:26Z 2026-01-01T03:30:26Z
ghsa-v49g-2gm8-p7f9
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:26Z 2026-01-01T03:30:26Z
ghsa-rcv9-w9gr-jwgx
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:26Z 2026-01-01T03:30:26Z
ghsa-m47c-hm3x-4xfv
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:26Z 2026-01-01T03:30:26Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25262 texlive-bin commit c515e was discovered to contain heap buffer overflow via the function … 2024-02-08T06:02:25.017494Z
gsd-2024-25253 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.017187Z
gsd-2024-25169 An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the … 2024-02-08T06:02:25.016905Z
gsd-2024-25306 Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' par… 2024-02-08T06:02:25.016611Z
gsd-2024-25553 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2024-02-08T06:02:25.016313Z
gsd-2024-25429 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.015739Z
gsd-2024-25181 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.015440Z
gsd-2024-25453 Bento4 v1.6.0-640 was discovered to contain a NULL pointer dereference via the AP4_StszAt… 2024-02-08T06:02:25.015135Z
gsd-2024-25197 Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered… 2024-02-08T06:02:25.014831Z
gsd-2024-25167 Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbi… 2024-02-08T06:02:25.014461Z
gsd-2024-25291 Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin. 2024-02-08T06:02:25.013840Z
gsd-2024-25206 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.013531Z
gsd-2024-25431 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.011723Z
gsd-2024-25356 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.011417Z
gsd-2024-25466 Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixe… 2024-02-08T06:02:25.011076Z
gsd-2024-25417 flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the c… 2024-02-08T06:02:25.010770Z
gsd-2024-25161 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.009873Z
gsd-2024-25362 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.009597Z
gsd-2024-25247 SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows a… 2024-02-08T06:02:25.009313Z
gsd-2024-25214 An issue in Employee Managment System v1.0 allows attackers to bypass authentication via … 2024-02-08T06:02:25.009022Z
gsd-2024-25510 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.008722Z
gsd-2024-25333 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.008427Z
gsd-2024-25276 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.007871Z
gsd-2024-25289 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.007584Z
gsd-2024-25307 Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parame… 2024-02-08T06:02:25.007199Z
gsd-2024-25546 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.006878Z
gsd-2024-25412 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:25.005296Z
gsd-2024-25413 A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improv… 2024-02-08T06:02:25.005008Z
gsd-2024-25450 imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts(). 2024-02-08T06:02:25.004728Z
gsd-2024-25350 SQL Injection vulnerability in /zms/admin/edit-ticket.php in PHPGurukul Zoo Management Sy… 2024-02-08T06:02:25.004434Z
ID Description Published Updated
mal-2025-183460 Malicious code in lobac-ubg-abfe (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183459 Malicious code in lobac-ubg-abe (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183458 Malicious code in lobac-ubb-jga (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183457 Malicious code in lobac-ubb-jfggauyuma (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183456 Malicious code in lobac-ubb-jfggafuayuma (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183455 Malicious code in lobac-ubb-jfgauyuma (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183454 Malicious code in lobac-ubb-jfgauma (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183453 Malicious code in lobac-ubb-jfgama (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183452 Malicious code in lobac-ubb-jfgaa (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183451 Malicious code in lobac-ubb-jfga (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183450 Malicious code in lobac-ubb-gaub (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183449 Malicious code in lobac-ubb-gafugyfaifdagab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183448 Malicious code in lobac-ubb-gafugaidagab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183447 Malicious code in lobac-ubb-gafugaiab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183446 Malicious code in lobac-ubb-gafugaiaab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183445 Malicious code in lobac-ubb-gafugaab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183444 Malicious code in lobac-ubb-gafufufb (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183443 Malicious code in lobac-ubb-gafufb (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183442 Malicious code in lobac-ubb-gafuab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183441 Malicious code in lobac-ubb-gafiufuuffaub (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183440 Malicious code in lobac-ubb-gafiufuufb (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183439 Malicious code in lobac-ubb-gafab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183438 Malicious code in lobac-ubb-gab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183437 Malicious code in lobac-ubb-ga (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183436 Malicious code in lobac-ubb-badi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183435 Malicious code in lobac-ubb-badadivudcauagafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183434 Malicious code in lobac-ubb-badadivudcagafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183433 Malicious code in lobac-ubb-badadivucgafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183432 Malicious code in lobac-ubb-badadivcgafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183431 Malicious code in lobac-ubb-badadigafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2023:4765 Red Hat Security Advisory: cups security update 2023-08-28T12:38:41+00:00 2025-11-21T18:43:52+00:00
rhsa-2023:4720 Red Hat Security Advisory: AMQ Broker 7.11.1.OPR.2.GA Container Images Release 2023-08-23T15:08:15+00:00 2025-11-21T18:43:50+00:00
rhsa-2023:4708 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:35:20+00:00 2025-11-21T18:43:50+00:00
rhsa-2023:4707 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:20:22+00:00 2025-11-21T18:43:50+00:00
rhsa-2023:4706 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:41:30+00:00 2025-11-21T18:43:48+00:00
rhsa-2023:4705 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:38:46+00:00 2025-11-21T18:43:48+00:00
rhsa-2023:4703 Red Hat Security Advisory: subscription-manager security update 2023-08-22T15:56:39+00:00 2025-11-21T18:43:48+00:00
rhsa-2023:4704 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:06:27+00:00 2025-11-21T18:43:47+00:00
rhsa-2023:4702 Red Hat Security Advisory: subscription-manager security update 2023-08-22T15:45:24+00:00 2025-11-21T18:43:46+00:00
rhsa-2023:4701 Red Hat Security Advisory: subscription-manager security update 2023-08-22T16:08:13+00:00 2025-11-21T18:43:46+00:00
rhsa-2023:4698 Red Hat Security Advisory: kpatch-patch security update 2023-08-22T14:09:58+00:00 2025-11-21T18:43:45+00:00
rhsa-2023:4697 Red Hat Security Advisory: kernel security update 2023-08-22T14:10:36+00:00 2025-11-21T18:43:45+00:00
rhsa-2023:4693 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update 2023-08-21T21:53:41+00:00 2025-11-21T18:43:43+00:00
rhsa-2023:4655 Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update 2023-08-15T14:14:35+00:00 2025-11-21T18:43:40+00:00
rhsa-2023:4651 Red Hat Security Advisory: rust-toolset-1.66-rust security update 2023-08-15T00:13:31+00:00 2025-11-21T18:43:40+00:00
rhsa-2023:4645 Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2023-08-14T15:02:20+00:00 2025-11-21T18:43:38+00:00
rhsa-2023:4644 Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2023-08-14T14:51:15+00:00 2025-11-21T18:43:38+00:00
rhsa-2023:4643 Red Hat Security Advisory: .NET 7.0 security, bug fix, and enhancement update 2023-08-14T15:03:35+00:00 2025-11-21T18:43:37+00:00
rhsa-2023:4642 Red Hat Security Advisory: .NET 7.0 security, bug fix, and enhancement update 2023-08-14T14:51:14+00:00 2025-11-21T18:43:37+00:00
rhsa-2023:4641 Red Hat Security Advisory: rh-dotnet60-dotnet security, bug fix, and enhancement update 2023-08-14T14:47:01+00:00 2025-11-21T18:43:36+00:00
rhsa-2023:4635 Red Hat Security Advisory: rust-toolset:rhel8 security update 2023-08-14T14:38:02+00:00 2025-11-21T18:43:36+00:00
rhsa-2023:4640 Red Hat Security Advisory: .NET 6.0 security update 2023-08-14T14:45:19+00:00 2025-11-21T18:43:35+00:00
rhsa-2023:4639 Red Hat Security Advisory: .NET 6.0 security update 2023-08-14T14:35:53+00:00 2025-11-21T18:43:35+00:00
rhsa-2023:4625 Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.2 security update 2023-08-11T16:47:49+00:00 2025-11-21T18:43:35+00:00
rhsa-2023:4634 Red Hat Security Advisory: rust security update 2023-08-14T14:22:13+00:00 2025-11-21T18:43:33+00:00
rhsa-2023:4624 Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.3.6 security update 2023-08-11T16:47:28+00:00 2025-11-21T18:43:30+00:00
rhsa-2023:4623 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.2.9 security update 2023-08-11T16:46:48+00:00 2025-11-21T18:43:29+00:00
rhsa-2023:4591 Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements 2023-08-09T14:20:58+00:00 2025-11-21T18:43:28+00:00
rhsa-2023:4590 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update 2023-08-09T11:40:55+00:00 2025-11-21T18:43:27+00:00
rhsa-2023:4571 Red Hat Security Advisory: iperf3 security update 2023-08-08T15:41:56+00:00 2025-11-21T18:43:26+00:00
ID Description Published Updated
msrc_cve-2020-29362 An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation. 2020-12-02T00:00:00.000Z 2020-12-24T00:00:00.000Z
msrc_cve-2020-27780 A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of an empty password it successfully authenticate. 2020-12-02T00:00:00.000Z 2020-12-23T00:00:00.000Z
msrc_cve-2020-27777 A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel. 2020-12-02T00:00:00.000Z 2020-12-23T00:00:00.000Z
msrc_cve-2020-29651 A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. 2020-12-02T00:00:00.000Z 2020-12-21T00:00:00.000Z
msrc_cve-2020-26137 urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116. 2020-09-02T00:00:00.000Z 2020-12-21T00:00:00.000Z
msrc_cve-2019-20916 The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command because a Content-Disposition header can have ../ in a filename as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py. 2020-09-02T00:00:00.000Z 2020-12-21T00:00:00.000Z
msrc_cve-2020-29569 An issue was discovered in the Linux kernel through 5.10.1 as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback. 2020-12-02T00:00:00.000Z 2020-12-19T00:00:00.000Z
msrc_cve-2020-29361 An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command where overflow checks are missing before calling realloc or calloc. 2020-12-02T00:00:00.000Z 2020-12-19T00:00:00.000Z
msrc_cve-2020-8231 Due to use of a dangling pointer libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. 2020-12-02T00:00:00.000Z 2020-12-17T00:00:00.000Z
msrc_cve-2020-8284 A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port and this way potentially make curl extract information about services that are otherwise private and not disclosed for example doing port scanning and service banner extractions. 2020-12-02T00:00:00.000Z 2020-12-16T00:00:00.000Z
msrc_cve-2020-8286 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8285 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8177 curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used. 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-8169 curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s). 2020-12-02T00:00:00.000Z 2020-12-15T00:00:00.000Z
msrc_cve-2020-29661 A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP aka CID-54ffccbf053b. 2020-12-02T00:00:00.000Z 2020-12-11T00:00:00.000Z
msrc_cve-2020-29660 A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID aka CID-c8bcd9c5be24. 2020-12-02T00:00:00.000Z 2020-12-11T00:00:00.000Z
msrc_cve-2020-27821 A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0. 2020-12-02T00:00:00.000Z 2020-12-11T00:00:00.000Z
msrc_cve-2020-8563 Secret leaks in logs for vSphere Provider kube-controller-manager 2020-12-02T00:00:00.000Z 2020-12-09T00:00:00.000Z
msrc_cve-2020-25692 A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55 during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request causing a Denial of Service. 2020-12-02T00:00:00.000Z 2020-12-09T00:00:00.000Z
msrc_cve-2020-14381 A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiality integrity as well as system availability. 2020-12-02T00:00:00.000Z 2020-12-09T00:00:00.000Z
msrc_cve-2020-14351 A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-12-02T00:00:00.000Z 2020-12-09T00:00:00.000Z
msrc_cve-2020-17153 Microsoft Edge for Android Spoofing Vulnerability 2020-12-08T08:00:00.000Z 2020-12-08T08:00:00.000Z
msrc_cve-2020-29534 An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request causing execve() to incorrectly optimize unshare_fd() aka CID-0f2122045b94. 2020-12-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-25723 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host resulting in a denial of service. 2020-12-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-25704 A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service. 2020-12-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-25696 A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1 before 12.5 before 11.10 before 10.15 before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-11-02T00:00:00.000Z 2020-12-08T00:00:00.000Z
msrc_cve-2020-25656 A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality. 2020-12-02T00:00:00.000Z 2020-12-05T00:00:00.000Z
msrc_cve-2020-29374 An issue was discovered in the Linux kernel before 5.7.3 related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation when used for a copy-on-write page does not properly consider the semantics of read operations and therefore can grant unintended write access aka CID-17839856fd58. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-29373 An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups and thus a process inside a mount namespace can escape to unintended filesystem locations aka CID-ff002b30181d. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
msrc_cve-2020-29372 An issue was discovered in do_madvise in mm/madvise.c in the Linux kernel before 5.6.8. There is a race condition between coredump operations and the IORING_OP_MADVISE implementation aka CID-bc0c4d1e176e. 2020-11-02T00:00:00.000Z 2020-12-03T00:00:00.000Z
ID Description Updated
var-201610-0480 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.433000Z
var-201610-0452 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.394000Z
var-201609-0581 Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.355000Z
var-201610-0467 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:04.310000Z
var-201610-0456 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.272000Z
var-201610-0474 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:04.228000Z
var-201610-0486 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:04.187000Z
var-201610-0437 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.150000Z
var-201610-0436 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.113000Z
var-201610-0431 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.076000Z
var-201610-0445 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:04.043000Z
var-201610-0475 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:04.006000Z
var-201610-0429 Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acroba… 2025-04-13T23:02:03.969000Z
var-201610-0643 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.931000Z
var-201610-0447 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.889000Z
var-201610-0487 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.843000Z
var-201610-0451 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.805000Z
var-201610-0646 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.767000Z
var-201610-0434 Integer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader D… 2025-04-13T23:02:03.731000Z
var-201610-0641 Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acroba… 2025-04-13T23:02:03.697000Z
var-201610-0136 Windows and Mac OS X Run on Adobe Reader and Acrobat Any code that could be executed or s… 2025-04-13T23:02:03.665000Z
var-201610-0458 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.628000Z
var-201610-0414 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.589000Z
var-201610-0448 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.552000Z
var-201610-0469 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.514000Z
var-201610-0485 Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acro… 2025-04-13T23:02:03.474000Z
var-201610-0438 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.440000Z
var-201610-0430 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.403000Z
var-201610-0442 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:03.362000Z
var-201610-0644 Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.… 2025-04-13T23:02:02.428000Z
ID Description Updated
ID Description Published Updated
suse-su-2020:2629-1 Security update for shim 2020-09-14T16:12:03Z 2020-09-14T16:12:03Z
suse-su-2020:2628-1 Security update for shim 2020-09-14T16:11:50Z 2020-09-14T16:11:50Z
suse-su-2020:2627-1 Security update for shim 2020-09-14T16:11:27Z 2020-09-14T16:11:27Z
suse-su-2020:2626-1 Security update for shim 2020-09-14T16:10:56Z 2020-09-14T16:10:56Z
suse-su-2020:2623-1 Security update for the Linux Kernel 2020-09-14T11:53:34Z 2020-09-14T11:53:34Z
suse-su-2020:2612-1 Security update for libxml2 2020-09-11T09:18:34Z 2020-09-11T09:18:34Z
suse-su-2020:2611-1 Security update for tomcat 2020-09-11T09:13:39Z 2020-09-11T09:13:39Z
suse-su-2020:2610-1 Security update for the Linux Kernel 2020-09-11T09:12:12Z 2020-09-11T09:12:12Z
suse-su-2020:2609-1 Security update for libxml2 2020-09-11T08:59:10Z 2020-09-11T08:59:10Z
suse-su-2020:2607-1 Security update for pdsh, slurm_20_02 2020-09-11T07:01:32Z 2020-09-11T07:01:32Z
suse-su-2020:2606-1 Security update for golang-github-prometheus-prometheus 2020-09-11T07:01:17Z 2020-09-11T07:01:17Z
suse-su-2020:2605-1 Security update for the Linux Kernel 2020-09-11T07:00:58Z 2020-09-11T07:00:58Z
suse-su-2020:2604-1 Security update for gimp 2020-09-10T13:31:41Z 2020-09-10T13:31:41Z
suse-su-2020:2603-1 Security update for gimp 2020-09-10T13:31:13Z 2020-09-10T13:31:13Z
suse-su-2020:2602-1 Security update for slurm 2020-09-10T13:31:06Z 2020-09-10T13:31:06Z
suse-su-2020:2601-1 Security update for slurm 2020-09-10T13:30:33Z 2020-09-10T13:30:33Z
suse-su-2020:2600-1 Security update for slurm_18_08 2020-09-10T13:30:02Z 2020-09-10T13:30:02Z
suse-su-2020:2599-1 Security update for slurm_18_08 2020-09-10T13:29:58Z 2020-09-10T13:29:58Z
suse-su-2020:2598-1 Security update for slurm 2020-09-10T13:29:28Z 2020-09-10T13:29:28Z
suse-su-2020:2583-1 Security update for avahi 2020-09-09T13:28:17Z 2020-09-09T13:28:17Z
suse-su-2020:2582-1 Security update for the Linux Kernel 2020-09-09T13:26:22Z 2020-09-09T13:26:22Z
suse-su-2020:2580-1 Security update for the Linux Kernel 2020-09-09T06:34:31Z 2020-09-09T06:34:31Z
suse-su-2020:2579-1 Security update for the Linux Kernel 2020-09-09T06:34:17Z 2020-09-09T06:34:17Z
suse-su-2020:2578-1 Security update for the Linux Kernel 2020-09-09T06:34:04Z 2020-09-09T06:34:04Z
suse-su-2020:2577-1 Security update for the Linux Kernel 2020-09-09T05:19:25Z 2020-09-09T05:19:25Z
suse-su-2020:2576-1 Security update for the Linux Kernel 2020-09-09T05:17:13Z 2020-09-09T05:17:13Z
suse-su-2020:2575-1 Security update for the Linux Kernel 2020-09-09T05:16:14Z 2020-09-09T05:16:14Z
suse-su-2020:2574-1 Security update for the Linux Kernel 2020-09-08T15:53:42Z 2020-09-08T15:53:42Z
suse-su-2020:2570-1 Security update for libjpeg-turbo 2020-09-08T12:59:43Z 2020-09-08T12:59:43Z
suse-su-2020:2569-1 Security update for libjpeg-turbo 2020-09-08T12:59:16Z 2020-09-08T12:59:16Z
ID Description Published Updated
cnvd-2024-39248 Google Chrome存在未明漏洞(CNVD-2024-39248) 2024-09-25 2024-09-26
cnvd-2024-39128 Wireshark存在未明漏洞(CNVD-2024-39128) 2024-08-02 2024-09-26
cnvd-2024-39044 GTKWave内存错误引用漏洞(CNVD-2024-39044) 2024-01-11 2024-09-26
cnvd-2024-39043 GTKWave内存错误引用漏洞(CNVD-2024-39043) 2024-01-11 2024-09-26
cnvd-2024-39042 GTKWave内存错误引用漏洞(CNVD-2024-39042) 2024-01-11 2024-09-26
cnvd-2024-39041 GTKWave内存错误引用漏洞(CNVD-2024-39041) 2024-01-11 2024-09-26
cnvd-2024-39040 GTKWave整数溢出漏洞(CNVD-2024-39040) 2024-01-11 2024-09-26
cnvd-2024-39039 GTKWave整数溢出漏洞(CNVD-2024-39039) 2024-01-11 2024-09-26
cnvd-2024-39038 GTKWave整数溢出漏洞(CNVD-2024-39038) 2024-01-11 2024-09-26
cnvd-2024-39037 GTKWave整数溢出漏洞(CNVD-2024-39037) 2024-01-11 2024-09-26
cnvd-2024-39036 GTKWave整数溢出漏洞(CNVD-2024-39036) 2024-01-11 2024-09-26
cnvd-2024-39035 GTKWave整数溢出漏洞(CNVD-2024-39035) 2024-01-11 2024-09-26
cnvd-2024-38176 北京美特软件技术有限公司MetaCRM6客户关系管理系统存在命令执行漏洞 2024-08-12 2024-09-26
cnvd-2024-39480 Mozilla Firefox安全绕过漏洞(CNVD-2024-39480) 2024-09-04 2024-09-25
cnvd-2024-39376 Adobe Audition缓冲区溢出漏洞(CNVD-2024-39376) 2024-09-13 2024-09-25
cnvd-2024-39370 Adobe Media Encoder缓冲区溢出漏洞(CNVD-2024-39370) 2024-09-18 2024-09-25
cnvd-2024-39369 Adobe Media Encoder缓冲区溢出漏洞(CNVD-2024-39369) 2024-09-18 2024-09-25
cnvd-2024-39368 Adobe Media Encoder缓冲区溢出漏洞(CNVD-2024-39368) 2024-09-18 2024-09-25
cnvd-2024-39367 Adobe Media Encoder缓冲区溢出漏洞(CNVD-2024-39367) 2024-09-18 2024-09-25
cnvd-2024-39362 Cisco Expressway Edge授权问题漏洞 2024-09-24 2024-09-25
cnvd-2024-39290 Adobe Acrobat Reader存在未明漏洞(CNVD-2024-39290) 2024-08-16 2024-09-25
cnvd-2024-39289 Adobe Acrobat Reader存在未明漏洞(CNVD-2024-39289) 2024-08-16 2024-09-25
cnvd-2024-39288 Mozilla Thunderbird存在未明漏洞(CNVD-2024-39288) 2024-09-11 2024-09-25
cnvd-2024-39277 Wireshark存在未明漏洞(CNVD-2024-39277) 2022-12-13 2024-09-25
cnvd-2024-39276 Wireshark资源关闭或释放不当漏洞 2023-02-09 2024-09-25
cnvd-2024-39275 Wireshark过度迭代漏洞 2023-02-09 2024-09-25
cnvd-2024-39274 Wireshark BLF文件解析缺陷漏洞 2023-05-30 2024-09-25
cnvd-2024-39273 Wireshark缓冲区溢出漏洞(CNVD-2024-39273) 2023-05-30 2024-09-25
cnvd-2024-39271 Wireshark拒绝服务漏洞(CNVD-2024-39271) 2024-01-05 2024-09-25
cnvd-2024-39270 Wireshark ws_manuf_lookup_str()堆溢出漏洞 2024-02-26 2024-09-25
ID Description Published Updated
certa-2010-avi-224 Vulnérabilité dans IBM AIX 2010-05-21T00:00:00.000000 2010-05-21T00:00:00.000000
certa-2010-avi-223 Multiples vulnérabilités dans MySQL 2010-05-21T00:00:00.000000 2010-05-21T00:00:00.000000
certa-2010-avi-222 Vulnérabilité dans les produits Palo Alto Networks 2010-05-20T00:00:00.000000 2010-05-20T00:00:00.000000
certa-2010-avi-221 Vulnérabilité dans HP-UX 2010-05-20T00:00:00.000000 2010-05-20T00:00:00.000000
certa-2010-avi-220 Multiples vulnérabilités dans HP Performance Manager 2010-05-20T00:00:00.000000 2010-05-20T00:00:00.000000
certa-2010-avi-218 Vulnérabilités dans HP Insight Control Server Migration 2010-05-19T00:00:00.000000 2010-05-19T00:00:00.000000
certa-2010-avi-217 Multiples vulnérabilités Java de Mac OS X 2010-05-19T00:00:00.000000 2010-05-19T00:00:00.000000
certa-2010-avi-216 Multiples vulnérabilités dans Invision Power Board 2010-05-18T00:00:00.000000 2010-05-18T00:00:00.000000
certa-2010-avi-215 Vulnérabilité dans Pidgin 2010-05-18T00:00:00.000000 2010-05-18T00:00:00.000000
certa-2010-avi-213 Multiples vulnérabilités dans HP OpenView Network Node Manager (OV NNM) 2010-05-18T00:00:00.000000 2010-05-18T00:00:00.000000
certa-2010-avi-212 Vulnérabilité dans HP Systems Insight Manager 2010-05-18T00:00:00.000000 2010-05-18T00:00:00.000000
certa-2010-avi-211 Vulnérabilités dans le serveur HTTP d'IBM 2010-05-14T00:00:00.000000 2010-05-14T00:00:00.000000
certa-2010-avi-210 Multiples vulnérabilités dans Cisco PGW Softswitch 2010-05-14T00:00:00.000000 2010-05-14T00:00:00.000000
certa-2010-avi-209 Multiples vulnérabilités dans Adobe ColdFusion 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-208 Vulnérabilité dans Cisco IronPort Desktop Flag Plug-in for Outlook 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-207 Multiples vulnérabilités dans Adobe Shockwave Player 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-206 Vulnérabilité dans Microsoft Visual Basic pour Applications 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-205 Vulnérabilité dans Microsoft Outlook Express, Windows Mail et Windows Live Mail 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-204 Vulnérabilité de produits 3Com 2010-05-12T00:00:00.000000 2010-05-12T00:00:00.000000
certa-2010-avi-203 Vulnérabilité dans VMware View 2010-05-07T00:00:00.000000 2010-05-07T00:00:00.000000
certa-2010-avi-202 Vulnérabilité de PCRE 2010-05-07T00:00:00.000000 2010-05-07T00:00:00.000000
certa-2010-avi-199 Vulnérabilité dans Adobe Photoshop CS4 2010-05-03T00:00:00.000000 2010-05-03T00:00:00.000000
certa-2010-avi-198 Vulnérabilité dans Opera 2010-05-03T00:00:00.000000 2010-05-03T00:00:00.000000
certa-2010-avi-197 Multipes vulnérabilités dans Google Chrome 2010-04-29T00:00:00.000000 2010-04-29T00:00:00.000000
certa-2010-avi-164 Vulnérabilité dans TheGreenBow VPN Client 2010-04-13T00:00:00.000000 2010-04-29T00:00:00.000000
certa-2010-avi-020 Vulnérabilité dans BIND DNSSEC 2010-01-20T00:00:00.000000 2010-04-29T00:00:00.000000
certa-2010-avi-201 Vulnérabilité dans les imprimantes laser Lexmark 2010-04-26T00:00:00.000000 2010-04-26T00:00:00.000000
certa-2010-avi-196 Multiples vulnérabilités de IBM DB2 2010-04-23T00:00:00.000000 2010-04-23T00:00:00.000000
certa-2010-avi-195 Vulnérabilité dans les routeurs 3Com H3C SR6600 2010-04-23T00:00:00.000000 2010-04-23T00:00:00.000000
certa-2010-avi-194 Vulnérabilité dans Cisco Small Business Video Surveillance Cameras 2010-04-22T00:00:00.000000 2010-04-22T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated