Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-12002
5.9 (3.1)
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbit… Awesome Motive
YouTube Feed Pro
2026-01-17T02:22:33.224Z 2026-01-20T19:23:58.770Z
CVE-2026-0820
5.3 (3.1)
RepairBuddy <= 4.1116 - Insecure Direct Object Referen… sweetdaisy86
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress
2026-01-17T03:24:23.562Z 2026-01-20T19:23:53.753Z
CVE-2026-0682
2.2 (3.1)
Church Admin <= 5.0.28 - Authenticated (Administrator+… andy_moyle
Church Admin
2026-01-17T03:24:24.110Z 2026-01-20T19:23:48.794Z
CVE-2025-13725
6.5 (3.1)
Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contri… thimpress
Thim Blocks
2026-01-17T03:24:24.463Z 2026-01-20T19:23:43.378Z
CVE-2025-14463
5.3 (3.1)
Payment Button for PayPal <= 1.2.3.41 - Missing Author… naa986
Payment Button for PayPal
2026-01-17T03:24:24.816Z 2026-01-20T19:23:38.739Z
CVE-2025-12129
5.3 (3.1)
CubeWP – All-in-One Dynamic Content Framework <= 1.1.2… cubewp1211
CubeWP Framework
2026-01-17T07:27:37.085Z 2026-01-20T19:23:34.063Z
CVE-2025-14478
7.5 (3.1)
Demo Importer Plus <= 2.0.9 - Authenticated (Author+) … kraftplugins
Demo Importer Plus
2026-01-17T07:27:37.627Z 2026-01-20T19:23:29.088Z
CVE-2025-10484
9.8 (3.1)
Registration & Login with Mobile Phone Number for WooC… FmeAddons
Registration & Login with Mobile Phone Number for WooCommerce
2026-01-17T08:24:30.759Z 2026-01-20T19:23:24.113Z
CVE-2026-0725
4.4 (3.1)
Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (A… cyberlord92
Integrate Dynamics 365 CRM
2026-01-17T08:24:31.355Z 2026-01-20T19:23:19.234Z
CVE-2025-14078
5.3 (3.1)
PAYGENT for WooCommerce <= 2.4.6 - Missing Authorizati… shoheitanaka
PAYGENT for WooCommerce
2026-01-17T08:24:31.760Z 2026-01-20T19:23:14.231Z
CVE-2025-8615
6.4 (3.1)
CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored… cubewp1211
CubeWP Framework
2026-01-17T08:24:32.192Z 2026-01-20T19:23:09.481Z
CVE-2025-23203
5.5 (3.1)
Icinga has rest API endpoints accessible to restricted users Icinga
icingaweb2-module-director
2025-03-26T13:44:58.110Z 2026-01-20T19:13:43.844Z
CVE-2025-67263
6.1 (3.1)
Abacre Retail Point of Sale 14.0.0.396 is affecte… n/a
n/a
2026-01-20T00:00:00.000Z 2026-01-20T18:53:28.009Z
CVE-2025-40679
5.1 (4.0)
HTML injection in Isshue from Bdtask Bdtask
Isshue
2026-01-20T11:53:39.846Z 2026-01-20T18:50:40.146Z
CVE-2025-33233
7.8 (3.1)
NVIDIA Merlin Transformers4Rec for all platforms … NVIDIA
Merlin Transformers4Rec
2026-01-20T17:43:38.169Z 2026-01-20T18:47:17.434Z
CVE-2025-45731
6.5 (3.1)
A group deletion race condition in 2FAuth v5.5.0 … n/a
n/a
2025-07-24T00:00:00.000Z 2026-01-20T18:43:16.863Z
CVE-2026-22219
8.3 (4.0)
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /proje… Chainlit
Chainlit
2026-01-19T23:15:08.897Z 2026-01-20T18:41:46.632Z
CVE-2026-0519
4.6 (4.0)
Information Disclosure in Secure Access Between 12.70 … Absolute Security
Secure Access
2026-01-17T01:13:59.183Z 2026-01-20T18:39:13.845Z
CVE-2026-0518
4.8 (4.0)
XSS in Secure Access Consoles prior to 14.20 Absolute Security
Secure Access
2026-01-17T01:09:29.268Z 2026-01-20T18:37:15.079Z
CVE-2026-22787
8.7 (4.0)
html2pdf.js has a cross-site scripting vulnerability eKoopmans
html2pdf.js
2026-01-14T16:52:38.372Z 2026-01-20T18:37:09.279Z
CVE-2025-12825
5.3 (3.1)
User Registration Using Contact Form 7 <= 2.5 - Authen… zealopensource
User Registration Using Contact Form 7
2026-01-17T04:34:02.212Z 2026-01-20T18:34:56.055Z
CVE-2026-0517
6 (4.0)
Denial of Service in Secure Access Servers Prior to 14.20. Absolute Security
Secure Access
2026-01-17T01:04:55.634Z 2026-01-20T18:34:14.258Z
CVE-2025-66019
6.6 (4.0)
pypdf manipulated LZWDecode streams can exhaust RAM py-pdf
pypdf
2025-11-25T23:38:12.473Z 2026-01-20T18:33:02.928Z
CVE-2025-12168
4.3 (3.1)
Phrase TMS Integration for WordPress <= 4.7.5 - Missin… memsource
Phrase TMS Integration for WordPress
2026-01-17T04:34:01.207Z 2026-01-20T18:32:40.697Z
CVE-2025-14029
5.3 (3.1)
Community Events <= 1.5.6 - Missing Authorization to U… jackdewey
Community Events
2026-01-17T04:34:00.530Z 2026-01-20T18:31:08.439Z
CVE-2025-41025
5.1 (4.0)
Stored Cross-Site Scripting in Poultry Farm Management… Poultry Farm Management System
Poultry Farm Management System
2026-01-20T12:04:05.614Z 2026-01-20T18:29:13.214Z
CVE-2026-0691
4.4 (3.1)
CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administ… creativemindssolutions
CM E-Mail Blacklist – Simple email filtering for safer registration
2026-01-17T06:42:20.210Z 2026-01-20T18:28:47.071Z
CVE-2026-0808
5.3 (3.1)
Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Priz… bdthemes
Spin Wheel – Interactive spinning wheel that offers coupons
2026-01-17T06:42:20.697Z 2026-01-20T18:27:18.935Z
CVE-2026-1222
8.6 (4.0)
7.2 (3.1)
BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Ar… BROWAN COMMUNICATIONS
PrismX MX100 AP controller
2026-01-20T06:30:52.946Z 2026-01-20T18:26:15.271Z
CVE-2026-1223
6.9 (4.0)
4.9 (3.1)
BROWAN COMMUNICATIONS |PrismX MX100 AP controller - In… BROWAN COMMUNICATIONS
PrismX MX100 AP controller
2026-01-20T06:35:17.742Z 2026-01-20T18:24:10.328Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-22111
N/A
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. Linux
Linux
2025-04-16T14:12:57.719Z 2026-01-19T12:17:54.573Z
CVE-2025-22022
N/A
usb: xhci: Apply the link chain quirk on NEC isoc endpoints Linux
Linux
2025-04-16T10:23:27.423Z 2026-01-19T12:17:53.138Z
CVE-2024-49968
N/A
ext4: filesystems without casefold feature cannot be m… Linux
Linux
2024-10-21T18:02:18.369Z 2026-01-19T12:17:51.927Z
CVE-2024-46830
N/A
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU… Linux
Linux
2024-09-27T12:39:28.396Z 2026-01-19T12:17:50.664Z
CVE-2024-40928
N/A
net: ethtool: fix the error condition in ethtool_get_p… Linux
Linux
2024-07-12T12:25:07.769Z 2026-01-19T12:17:49.472Z
CVE-2024-36927
N/A
ipv4: Fix uninit-value access in __ip_make_skb() Linux
Linux
2024-05-30T15:29:20.275Z 2026-01-19T12:17:47.098Z
CVE-2024-36903
N/A
ipv6: Fix potential uninit-value access in __ip6_make_skb() Linux
Linux
2024-05-30T15:29:04.866Z 2026-01-19T12:17:45.894Z
CVE-2023-52975
7.8 (3.1)
scsi: iscsi_tcp: Fix UAF during logout when accessing … Linux
Linux
2025-03-27T16:43:15.322Z 2026-01-19T12:17:43.562Z
CVE-2022-49743
N/A
ovl: Use "buf" flexible array for memcpy() destination Linux
Linux
2025-03-27T16:42:54.289Z 2026-01-19T12:17:42.348Z
CVE-2022-49267
N/A
mmc: core: use sysfs_emit() instead of sprintf() Linux
Linux
2025-02-26T01:56:16.211Z 2026-01-19T12:17:38.477Z
CVE-2025-46397
7.8 (3.1)
Xfig: xfig: stack-overflow allows possible code execut…

2025-04-23T20:55:09.795Z 2026-01-19T03:55:40.389Z
CVE-2024-7885
7.5 (3.1)
Undertow: improper state management in proxy protocol …

2024-08-21T14:13:36.579Z 2026-01-19T03:51:37.166Z
CVE-2025-40920
8.6 (3.1)
Catalyst::Authentication::Credential::HTTP versions 1.… ETHER
Catalyst::Authentication::Credential::HTTP
2025-08-11T20:19:57.516Z 2026-01-17T20:23:09.178Z
CVE-2025-68792
N/A
tpm2-sessions: Fix out of range indexing in name_size Linux
Linux
2026-01-13T15:29:04.226Z 2026-02-09T08:33:39.373Z
CVE-2025-5489
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:09.219Z
CVE-2025-5102
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:09.061Z
CVE-2024-8506
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:08.895Z
CVE-2024-8491
N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. N/A N/A 2026-01-16T22:19:08.586Z
CVE-2025-15456
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
bg5sbk MiniCMS Publish page-edit.php improper authentication bg5sbk
MiniCMS
2026-01-05T04:02:06.770Z 2026-02-23T08:16:46.676Z
CVE-2022-50443
N/A
drm/rockchip: lvds: fix PM usage counter unbalance in … Linux
Linux
2025-10-01T11:42:18.900Z 2025-10-01T11:42:18.900Z
CVE-2023-53461
N/A
io_uring: wait interruptibly for request completions on exit Linux
Linux
2025-10-01T11:42:32.525Z 2025-10-02T07:04:22.533Z
CVE-2023-53462
N/A
hsr: Fix uninit-value access in fill_frame_info() Linux
Linux
2025-10-01T11:42:33.434Z 2025-10-01T11:42:33.434Z
CVE-2023-53463
N/A
ibmvnic: Do not reset dql stats on NON_FATAL err Linux
Linux
2025-10-01T11:42:34.308Z 2025-10-01T11:42:34.308Z
CVE-2025-61246
9.8 (3.1)
indieka900 online-shopping-system-php 1.0 is vuln… n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T19:37:53.508Z
CVE-2023-53448
N/A
fbdev: imxfb: Removed unneeded release_mem_region Linux
Linux
2025-10-01T11:42:20.557Z 2025-10-01T11:42:20.557Z
CVE-2025-67091
6.5 (3.1)
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 … n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:10:44.603Z
CVE-2025-67090
5.1 (3.1)
The LuCI web interface on Gl Inet GL.Inet AX1800 … n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:51:52.244Z
CVE-2025-67089
8.1 (3.1)
A command injection vulnerability exists in the G… n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:52:24.897Z
CVE-2023-53449
N/A
s390/dasd: Fix potential memleak in dasd_eckd_init() Linux
Linux
2025-10-01T11:42:21.371Z 2025-10-01T11:42:21.371Z
CVE-2023-53451
N/A
scsi: qla2xxx: Fix potential NULL pointer dereference Linux
Linux
2025-10-01T11:42:22.857Z 2026-01-05T10:20:37.445Z
ID Description Published Updated
fkie_cve-2025-46397 A flaw was found in xfig. This vulnerability allows possible code execution via local input manipul… 2025-04-23T21:15:16.807 2026-01-19T04:15:58.400
fkie_cve-2024-7885 A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBui… 2024-08-21T14:15:09.500 2026-01-19T04:15:58.173
fkie_cve-2025-40920 Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces usin… 2025-08-11T21:15:28.087 2026-01-17T21:15:48.750
fkie_cve-2025-68792 In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of rang… 2026-01-13T16:16:01.090 2026-01-17T16:16:05.827
fkie_cve-2025-5489 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.150 2026-01-16T23:15:49.150
fkie_cve-2025-5102 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.090 2026-01-16T23:15:49.090
fkie_cve-2024-8506 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:49.017 2026-01-16T23:15:49.017
fkie_cve-2024-8491 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-01-16T23:15:48.460 2026-01-16T23:15:48.460
fkie_cve-2025-15456 A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown func… 2026-01-05T05:15:53.007 2026-01-16T21:35:03.127
fkie_cve-2022-50443 In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usa… 2025-10-01T12:15:36.590 2026-01-16T21:34:09.787
fkie_cve-2023-53461 In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly f… 2025-10-01T12:15:47.723 2026-01-16T21:33:19.060
fkie_cve-2023-53462 In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access i… 2025-10-01T12:15:47.887 2026-01-16T21:32:20.620
fkie_cve-2023-53463 In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stat… 2025-10-01T12:15:48.120 2026-01-16T21:31:26.387
fkie_cve-2025-61246 indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.ph… 2026-01-08T17:15:48.400 2026-01-16T21:31:24.953
fkie_cve-2023-53448 In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Removed unneeded… 2025-10-01T12:15:41.033 2026-01-16T21:28:52.693
fkie_cve-2025-67091 An issue in GL Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. GL.Inet AX1800 Version 4.6… 2026-01-08T16:15:45.577 2026-01-16T21:28:39.047
fkie_cve-2025-67090 The LuCI web interface on Gl Inet GL.Inet AX1800 Version 4.6.4 & 4.6.8 are vulnerable. Fix availabl… 2026-01-08T16:15:45.470 2026-01-16T21:28:08.207
fkie_cve-2025-67089 A command injection vulnerability exists in the GL-iNet GL-AXT1800 router firmware v4.6.8. The vuln… 2026-01-08T16:15:45.333 2026-01-16T21:26:11.910
fkie_cve-2023-53449 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential memle… 2025-10-01T12:15:41.250 2026-01-16T21:25:30.833
fkie_cve-2023-53451 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential N… 2025-10-01T12:15:43.413 2026-01-16T21:24:42.710
fkie_cve-2023-53452 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential rac… 2025-10-01T12:15:43.600 2026-01-16T21:23:45.690
fkie_cve-2025-63916 MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compressio… 2025-11-17T16:15:50.700 2026-01-16T21:23:35.787
fkie_cve-2023-53453 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atomb… 2025-10-01T12:15:43.787 2026-01-16T21:22:30.527
fkie_cve-2025-10543 In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, pas… 2025-12-02T09:15:46.127 2026-01-16T21:22:24.750
fkie_cve-2023-53454 In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm … 2025-10-01T12:15:43.953 2026-01-16T21:21:16.260
fkie_cve-2023-53460 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak i… 2025-10-01T12:15:47.570 2026-01-16T21:19:46.060
fkie_cve-2025-46603 Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction o… 2025-12-05T19:15:48.233 2026-01-16T21:18:14.583
fkie_cve-2025-34291 Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account ta… 2025-12-05T23:15:47.433 2026-01-16T21:17:02.097
fkie_cve-2023-53455 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drop all currently he… 2025-10-01T12:15:44.910 2026-01-16T21:15:53.820
fkie_cve-2025-12941 Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + Wi… 2025-12-09T17:15:48.453 2026-01-16T21:13:16.813
ID Severity Description Published Updated
ghsa-gr46-whc3-j78v
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-c3pq-8g5g-cppr
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-9pqg-5fj8-q9hp
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-9cr2-mcww-ph38
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-955v-fhgv-r5mc
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-8c8m-9q8w-x9qv
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-7r6g-8p54-4xm6
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-5723-g3wg-9xq3
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it… 2026-01-01T03:30:25Z 2026-01-01T03:30:25Z
ghsa-q5rr-6j45-r8gx
3.4 (3.1)
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsin… 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-mvxv-qjhv-59fg
5.6 (3.1)
ArcGIS Server version 11.5 and earlier on Windows and Linux does not properly validate uploaded fil… 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-hvcp-4wf3-wrc5
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-gffq-5p7q-h2w7
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:25Z 2026-01-01T00:31:26Z
ghsa-65q9-988v-j5v5
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-5w35-rjp9-mmr7
5.6 (3.1)
ArcGIS Server version 11.5 and earlier on Windows and Linux does not properly validate uploaded fil… 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-4762-x793-4ghq
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-3x4j-ww9c-3p4w
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:26Z 2026-01-01T00:31:26Z
ghsa-j2rj-pxc8-245c
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:25Z 2026-01-01T00:31:25Z
ghsa-h4qv-4942-vw79
6.1 (3.1)
There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and … 2026-01-01T00:31:25Z 2026-01-01T00:31:25Z
ghsa-739h-rw2p-gghv
3.7 (3.1)
2.9 (4.0)
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function f… 2026-01-01T00:31:25Z 2026-01-01T00:31:25Z
ghsa-mpj7-7xpf-5v66
3.7 (3.1)
Missing Authorization vulnerability in Quiz Maker team Quiz Maker.This issue affects Quiz Maker: fr… 2024-04-24T12:30:42Z 2026-01-01T00:31:23Z
ghsa-j47q-rc62-w448
6.9 (4.0)
fastapi-guard is vulnerable to ReDoS through inefficient regex 2025-07-07T23:36:39Z 2025-12-31T22:50:34Z
ghsa-fff3-4rp7-px97
3.3 (3.1)
1.1 (4.0)
ImageMagick has a heap-buffer-overflow 2025-08-25T15:54:51Z 2025-12-31T22:18:05Z
ghsa-59pp-r3rg-353g
1.2 (4.0)
Composer is vulnerable to ANSI sequence injection 2025-12-30T17:44:10Z 2025-12-31T22:17:32Z
ghsa-jv8r-hv7q-p6vc
5.4 (3.1)
phpMyFAQ has Stored XSS in user list via admin-managed display_name 2025-12-29T22:12:35Z 2025-12-31T22:13:13Z
ghsa-p2gr-hm8g-q772
1.3 (4.0)
Temporal has a namespace policy bypass allowing requests to be authorized for incorrect contexts 2025-12-30T21:30:33Z 2025-12-31T22:08:24Z
ghsa-rwc2-f344-q6w6
7.5 (3.1)
serverless MCP Server vulnerable to Command Injection in list-projects tool 2025-12-31T22:05:32Z 2025-12-31T22:05:32Z
ghsa-fjmr-7667-8v4p
5.4 (3.1)
Visual Studio Code Go extension has unexpected untrusted code execution 2025-12-30T00:32:59Z 2025-12-31T22:05:05Z
ghsa-g3ch-rx76-35fx
4.2 (3.1)
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS) 2024-07-23T15:31:09Z 2025-12-31T22:04:13Z
ghsa-xx83-cxmq-x89m
5.9 (3.1)
Boundary Community Edition Incorrectly Handles HTTP Requests On Initialization Which May Lead to a … 2024-12-13T00:30:50Z 2025-12-31T22:00:42Z
ghsa-423w-p2w9-r7vq
4.7 (3.1)
AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure 2023-09-22T16:11:47Z 2025-12-31T22:00:24Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25437 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.978652Z
gsd-2024-25438 A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allow… 2024-02-08T06:02:24.977562Z
gsd-2024-25278 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.977215Z
gsd-2024-25456 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.976924Z
gsd-2024-25528 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.976640Z
gsd-2024-25163 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.976340Z
gsd-2024-25394 A buffer overflow occurs in utilities/ymodem/ry_sy.c in RT-Thread through 5.0.2 because o… 2024-02-08T06:02:24.976062Z
gsd-2024-25541 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.975503Z
gsd-2024-25398 In Srelay (the SOCKS proxy and Relay) v.0.4.8p3, a specially crafted network payload can … 2024-02-08T06:02:24.975230Z
gsd-2024-25483 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.974953Z
gsd-2024-25292 Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute… 2024-02-08T06:02:24.974638Z
gsd-2024-25387 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.974356Z
gsd-2024-25375 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.974080Z
gsd-2024-25536 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.973752Z
gsd-2024-25198 Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_… 2024-02-08T06:02:24.973465Z
gsd-2024-25341 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.973166Z
gsd-2024-25409 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.972591Z
gsd-2024-25474 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.972296Z
gsd-2024-25245 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.971743Z
gsd-2024-25363 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.971455Z
gsd-2024-25445 Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 … 2024-02-08T06:02:24.970467Z
gsd-2024-25390 A heap buffer overflow occurs in finsh/msh_file.c and finsh/msh.c in RT-Thread through 5.0.2. 2024-02-08T06:02:24.970131Z
gsd-2024-25189 libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which ma… 2024-02-08T06:02:24.969839Z
gsd-2024-25493 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.969527Z
gsd-2024-25334 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.969148Z
gsd-2024-25440 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.968198Z
gsd-2024-25557 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.967534Z
gsd-2024-25538 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.967182Z
gsd-2024-25365 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.966462Z
gsd-2024-25277 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.966124Z
ID Description Published Updated
mal-2025-183387 Malicious code in lobac-ub-jfgaayuma (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183386 Malicious code in lobac-ub-jf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183385 Malicious code in lobac-ub-jagf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183384 Malicious code in lobac-ub-jafgfubaif (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183383 Malicious code in lobac-ub-jafgfubaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183382 Malicious code in lobac-ub-jafgfbaf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183381 Malicious code in lobac-ub-jafgf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183380 Malicious code in lobac-ub-jafgbf (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183379 Malicious code in lobac-ub-badadufu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183378 Malicious code in lobac-ub-badadudcafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183377 Malicious code in lobac-ub-badaducfu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183376 Malicious code in lobac-ub-badadivudcuagafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183375 Malicious code in lobac-ub-badadivudcuafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183374 Malicious code in lobac-ub-badadiudcafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183373 Malicious code in lobac-ub-baaufu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183372 Malicious code in lobac-ub-baafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183371 Malicious code in lobac-ub-afu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183370 Malicious code in lobac-ub-afdu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183369 Malicious code in lobac-ub-afdmu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183368 Malicious code in lobac-ub-afdmau (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183367 Malicious code in lobac-ub-afdmafdu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183366 Malicious code in lobac-ub-afdmafdau (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183365 Malicious code in lobac-ub-afdmafdacu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183364 Malicious code in lobac-ub-afdmafdacau (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183363 Malicious code in lobac-ub-afdmafdacatfeu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183362 Malicious code in lobac-ub-afdmafdacafu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183361 Malicious code in lobac-ub-afdmafdacafeu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183360 Malicious code in lobac-ub-afdmafdacaatfeu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183359 Malicious code in liobc-uyg-afayafuyacauicig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183358 Malicious code in liobc-ug-ayig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2023:4329 Red Hat Security Advisory: openssh security update 2023-07-31T09:27:31+00:00 2025-11-21T18:42:41+00:00
rhsa-2023:4324 Red Hat Security Advisory: ghostscript security update 2023-07-31T08:27:18+00:00 2025-11-21T18:42:41+00:00
rhsa-2023:4328 Red Hat Security Advisory: samba security and bug fix update 2023-07-31T09:41:51+00:00 2025-11-21T18:42:40+00:00
rhsa-2023:4326 Red Hat Security Advisory: iperf3 security update 2023-07-31T09:01:39+00:00 2025-11-21T18:42:40+00:00
rhsa-2023:4325 Red Hat Security Advisory: samba security and bug fix update 2023-07-31T09:00:34+00:00 2025-11-21T18:42:39+00:00
rhsa-2023:4282 Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update 2023-07-26T09:57:54+00:00 2025-11-21T18:42:39+00:00
rhsa-2023:4283 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update 2023-07-26T12:49:36+00:00 2025-11-21T18:42:36+00:00
rhsa-2023:4262 Red Hat Security Advisory: kpatch-patch security update 2023-07-25T07:55:01+00:00 2025-11-21T18:42:35+00:00
rhsa-2023:4256 Red Hat Security Advisory: kernel security and bug fix update 2023-07-25T07:57:31+00:00 2025-11-21T18:42:34+00:00
rhsa-2023:4255 Red Hat Security Advisory: kernel-rt security and bug fix update 2023-07-25T07:57:16+00:00 2025-11-21T18:42:34+00:00
rhsa-2023:4252 Red Hat Security Advisory: edk2 security update 2023-07-25T07:55:58+00:00 2025-11-21T18:42:34+00:00
rhsa-2023:4233 Red Hat Security Advisory: java-11-openjdk security and bug fix update 2023-07-21T14:35:59+00:00 2025-11-21T18:42:33+00:00
rhsa-2023:4230 Red Hat Security Advisory: kpatch-patch security update 2023-07-20T07:36:19+00:00 2025-11-21T18:42:32+00:00
rhsa-2023:4215 Red Hat Security Advisory: kpatch-patch security update 2023-07-19T17:30:06+00:00 2025-11-21T18:42:32+00:00
rhsa-2023:4212 Red Hat Security Advisory: OpenJDK 8u382 Windows Security Update 2023-07-20T12:11:36+00:00 2025-11-21T18:42:31+00:00
rhsa-2023:4211 Red Hat Security Advisory: OpenJDK 17.0.8 Security Update for Windows Builds 2023-07-20T12:12:02+00:00 2025-11-21T18:42:31+00:00
rhsa-2023:4210 Red Hat Security Advisory: OpenJDK 17.0.8 Security Update for Portable Linux Builds 2023-07-20T12:12:01+00:00 2025-11-21T18:42:31+00:00
rhsa-2023:4209 Red Hat Security Advisory: OpenJDK 8u382 Security Update for Portable Linux Builds 2023-07-20T12:11:31+00:00 2025-11-21T18:42:31+00:00
rhsa-2023:4208 Red Hat Security Advisory: OpenJDK security update 2023-07-20T12:11:46+00:00 2025-11-21T18:42:30+00:00
rhsa-2023:4203 Red Hat Security Advisory: python3.9 security update 2023-07-18T15:43:58+00:00 2025-11-21T18:42:30+00:00
rhsa-2023:4200 Red Hat Security Advisory: Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 security update 2023-07-18T13:50:28+00:00 2025-11-21T18:42:29+00:00
rhsa-2023:4178 Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update 2023-07-20T13:09:41+00:00 2025-11-21T18:42:28+00:00
rhsa-2023:4177 Red Hat Security Advisory: java-17-openjdk security and bug fix update 2023-07-20T12:18:56+00:00 2025-11-21T18:42:28+00:00
rhsa-2023:4176 Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update 2023-07-20T12:24:20+00:00 2025-11-21T18:42:27+00:00
rhsa-2023:4175 Red Hat Security Advisory: java-11-openjdk security and bug fix update 2023-07-20T12:24:51+00:00 2025-11-21T18:42:27+00:00
rhsa-2023:4174 Red Hat Security Advisory: java-1.8.0-openjdk security update 2023-07-19T17:37:15+00:00 2025-11-21T18:42:27+00:00
rhsa-2023:4173 Red Hat Security Advisory: java-1.8.0-openjdk security update 2023-07-19T17:29:09+00:00 2025-11-21T18:42:27+00:00
rhsa-2023:4172 Red Hat Security Advisory: java-1.8.0-openjdk security update 2023-07-19T17:27:32+00:00 2025-11-21T18:42:27+00:00
rhsa-2023:4171 Red Hat Security Advisory: java-17-openjdk security update 2023-07-19T17:21:58+00:00 2025-11-21T18:42:26+00:00
rhsa-2023:4170 Red Hat Security Advisory: java-17-openjdk security update 2023-07-19T17:19:50+00:00 2025-11-21T18:42:26+00:00
ID Description Published Updated
msrc_cve-2020-14776 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2020-14775 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2020-14773 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2020-14771 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2020-14769 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.49 and prior 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2020-14765 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-27T00:00:00.000Z
msrc_cve-2019-15961 Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability 2020-01-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2019-12625 ClamAV Zip Bomb Vulnerability 2019-11-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2018-1000500 Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file". 2018-06-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2009-1241 Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive. 2009-04-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2008-3914 Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c. 2008-09-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2008-3913 Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic". 2008-09-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2008-3912 libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition. 2008-09-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2007-2650 The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop as demonstrated via a crafted DOC file. 2007-05-02T00:00:00.000Z 2020-10-25T00:00:00.000Z
msrc_cve-2020-14888 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14846 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14844 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14827 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14821 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14789 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-14786 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). 2020-10-02T00:00:00.000Z 2020-10-23T00:00:00.000Z
msrc_cve-2020-25613 An issue was discovered in Ruby through 2.5.8 2.6.x through 2.6.6 and 2.7.x through 2.7.1. WEBrick a simple HTTP server bundled with Ruby had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check) which may lead to an HTTP Request Smuggling attack. 2020-10-02T00:00:00.000Z 2020-10-21T00:00:00.000Z
msrc_cve-2020-25645 A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality. 2020-10-02T00:00:00.000Z 2020-10-17T00:00:00.000Z
msrc_cve-2020-25643 A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 2020-10-02T00:00:00.000Z 2020-10-17T00:00:00.000Z
msrc_cve-2020-11979 As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process. 2020-10-02T00:00:00.000Z 2020-10-14T00:00:00.000Z
msrc_cve-2020-25641 A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device resulting in a denial of service. The highest threat from this vulnerability is to system availability. 2020-10-02T00:00:00.000Z 2020-10-09T00:00:00.000Z
msrc_cve-2020-25743 hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call. 2020-10-02T00:00:00.000Z 2020-10-08T00:00:00.000Z
msrc_cve-2020-25742 pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer. 2020-10-02T00:00:00.000Z 2020-10-08T00:00:00.000Z
msrc_cve-2020-26088 A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets bypassing security mechanisms aka CID-26896f01467a. 2020-09-02T00:00:00.000Z 2020-10-07T00:00:00.000Z
msrc_cve-2020-26541 The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c. 2020-10-02T00:00:00.000Z 2020-10-05T00:00:00.000Z
ID Description Updated
var-201507-0454 The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Appl… 2025-04-13T22:54:40.003000Z
var-201510-0184 The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain pr… 2025-04-13T22:54:35.236000Z
var-201501-0631 Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and … 2025-04-13T22:54:00.838000Z
var-201508-0060 Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux… 2025-04-13T22:54:00.470000Z
var-201508-0459 WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and … 2025-04-13T22:54:00.173000Z
var-201409-0491 The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the … 2025-04-13T22:53:59.949000Z
var-201411-0040 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x befo… 2025-04-13T22:53:59.906000Z
var-201409-0484 An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem … 2025-04-13T22:53:59.873000Z
var-201604-0592 F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 1… 2025-04-13T22:53:56.081000Z
var-201403-0268 WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers … 2025-04-13T22:53:55.978000Z
var-201402-0391 Buffer overflow in Apple QuickTime before 7.7.5 allows remote attackers to execute arbitr… 2025-04-13T22:53:55.091000Z
var-201504-0537 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows a… 2025-04-13T22:53:54.126000Z
var-201405-0225 WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attacker… 2025-04-13T22:53:52.003000Z
var-201605-0117 Format string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP befo… 2025-04-13T22:53:51.910000Z
var-201605-0469 MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not … 2025-04-13T22:53:49.679000Z
var-201508-0399 WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in i… 2025-04-13T22:53:10.805000Z
var-201504-0136 The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not prop… 2025-04-13T22:52:58.836000Z
var-201404-0322 Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 3… 2025-04-13T22:52:58.204000Z
var-201403-0512 The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not pro… 2025-04-13T22:52:58.062000Z
var-201409-0495 Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier f… 2025-04-13T22:52:57.819000Z
var-201403-0497 CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IO… 2025-04-13T22:52:52.176000Z
var-201607-0652 Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0,… 2025-04-13T22:52:51.009000Z
var-201512-0116 Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7… 2025-04-13T22:52:48.853000Z
var-201507-0447 The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X befor… 2025-04-13T22:52:48.614000Z
var-201508-0109 Race condition in runner in Install.framework in the Install Framework Legacy component i… 2025-04-13T22:52:48.526000Z
var-201508-0299 Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11… 2025-04-13T22:52:44.907000Z
var-201410-0828 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earli… 2025-04-13T22:52:42.914000Z
var-201501-0632 IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0… 2025-04-13T22:52:41.911000Z
var-201509-0091 IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data st… 2025-04-13T22:52:41.181000Z
var-201607-0308 The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS… 2025-04-13T22:52:40.177000Z
ID Description Updated
ID Description Published Updated
suse-su-2020:2391-1 Security update for freeradius-server 2020-08-31T11:30:52Z 2020-08-31T11:30:52Z
suse-su-2020:2373-1 Security update for SUSE Manager Server 4.1 2020-08-28T10:58:53Z 2020-08-28T10:58:53Z
suse-su-2020:2360-1 Security update for targetcli-fb 2020-08-28T07:48:46Z 2020-08-28T07:48:46Z
suse-su-2020:2359-1 Security update for openvpn 2020-08-27T16:27:38Z 2020-08-27T16:27:38Z
suse-su-2020:14468-1 Security update for openvpn-openssl1 2020-08-27T16:27:25Z 2020-08-27T16:27:25Z
suse-su-2020:2357-1 Security update for libqt5-qtbase 2020-08-27T16:27:06Z 2020-08-27T16:27:06Z
suse-su-2020:2355-1 Security update for postgresql10 2020-08-27T16:26:21Z 2020-08-27T16:26:21Z
suse-su-2020:2346-1 Security update for graphviz 2020-08-26T15:03:31Z 2020-08-26T15:03:31Z
suse-su-2020:2344-1 Security update for apache2 2020-08-26T15:02:04Z 2020-08-26T15:02:04Z
suse-su-2020:0920-2 Security update for libxslt 2020-08-26T15:01:04Z 2020-08-26T15:01:04Z
suse-su-2020:2331-1 Security update for xorg-x11-server 2020-08-26T07:52:54Z 2020-08-26T07:52:54Z
suse-su-2020:2326-1 Security update for xorg-x11-server 2020-08-25T17:04:40Z 2020-08-25T17:04:40Z
suse-su-2020:2325-1 Security update for xorg-x11-server 2020-08-25T17:04:18Z 2020-08-25T17:04:18Z
suse-su-2020:14463-1 Security update for xorg-x11-server 2020-08-25T17:03:56Z 2020-08-25T17:03:56Z
suse-su-2020:2240-1 Security update for xorg-x11-server 2020-08-25T17:03:23Z 2020-08-25T17:03:23Z
suse-su-2020:2242-1 Security update for xorg-x11-server 2020-08-25T17:02:56Z 2020-08-25T17:02:56Z
suse-su-2020:2241-1 Security update for xorg-x11-server 2020-08-25T17:02:38Z 2020-08-25T17:02:38Z
suse-su-2020:2312-1 Security update for samba 2020-08-25T12:50:32Z 2020-08-25T12:50:32Z
suse-su-2020:2311-1 Security update for apache2 2020-08-25T12:50:06Z 2020-08-25T12:50:06Z
suse-su-2020:14461-1 Security update for grub2 2020-08-25T12:49:25Z 2020-08-25T12:49:25Z
suse-su-2020:2308-1 Security update for grub2 2020-08-25T12:49:05Z 2020-08-25T12:49:05Z
suse-su-2020:2307-1 Security update for grub2 2020-08-25T12:48:48Z 2020-08-25T12:48:48Z
suse-su-2020:2306-1 Security update for grub2 2020-08-25T12:48:25Z 2020-08-25T12:48:25Z
suse-su-2020:2305-1 Security update for grub2 2020-08-25T12:47:51Z 2020-08-25T12:47:51Z
suse-su-2020:2304-1 Security update for grub2 2020-08-25T12:47:20Z 2020-08-25T12:47:20Z
suse-su-2020:2303-1 Security update for grub2 2020-08-25T12:46:45Z 2020-08-25T12:46:45Z
suse-su-2020:14460-1 Security update for squid3 2020-08-24T12:06:51Z 2020-08-24T12:06:51Z
suse-su-2020:2296-1 Security update for gettext-runtime 2020-08-24T08:34:50Z 2020-08-24T08:34:50Z
suse-su-2020:2292-1 Security update for SUSE Manager Server 3.2 2020-08-21T12:32:10Z 2020-08-21T12:32:10Z
suse-su-2020:2283-1 Security update for libreoffice 2020-08-20T13:11:14Z 2020-08-20T13:11:14Z
ID Description Published Updated
cnvd-2024-38565 Huawei EMUI和Huawei HarmonyOS访问控制错误漏洞 2024-08-12 2024-09-19
cnvd-2024-38545 Rockwell Automation ThinManager ThinServer输入验证错误漏洞(CNVD-2024-38545) 2024-06-28 2024-09-19
cnvd-2024-38544 Rockwell Automation ThinManager ThinServer输入验证错误漏洞(CNVD-2024-38544) 2024-06-28 2024-09-19
cnvd-2024-38543 Rockwell Automation ThinManager ThinServer输入验证错误漏洞(CNVD-2024-38543) 2024-06-28 2024-09-19
cnvd-2024-38542 Rockwell Automation FactoryTalk View SE代码执行漏洞 2024-08-16 2024-09-19
cnvd-2024-38541 Adobe Animate越界读取漏洞(CNVD-2024-38541) 2024-03-20 2024-09-19
cnvd-2024-38540 Adobe Illustrator越界写入漏洞(CNVD-2024-38540) 2024-04-15 2024-09-19
cnvd-2024-38539 Adobe Framemaker Publishing Server信息泄露漏洞 2024-06-14 2024-09-19
cnvd-2024-38538 Adobe Framemaker Publishing Server身份验证错误漏洞(CNVD-2024-38538) 2024-06-14 2024-09-19
cnvd-2024-38537 Adobe InDesign空指针解引用漏洞(CNVD-2024-38537) 2024-07-25 2024-09-19
cnvd-2024-38536 Adobe InDesign缓冲区溢出漏洞(CNVD-2024-38536) 2024-08-06 2024-09-19
cnvd-2024-38535 Adobe InDesign越界读取漏洞(CNVD-2024-38535) 2024-08-06 2024-09-19
cnvd-2024-38533 IBM Aspera安全绕过漏洞(CNVD-2024-38533) 2024-09-09 2024-09-19
cnvd-2024-38532 IBM MaaS360信任管理问题漏洞 2024-09-03 2024-09-19
cnvd-2024-38531 IBM Aspera信息泄露漏洞 2024-09-09 2024-09-19
cnvd-2024-38530 IBM Aspera安全绕过漏洞 2024-09-09 2024-09-19
cnvd-2024-38584 Google Chrome代码执行漏洞(CNVD-2024-38584) 2024-04-28 2024-09-18
cnvd-2024-38583 Google Chrome信息泄露漏洞(CNVD-2024-38583) 2024-04-28 2024-09-18
cnvd-2024-38582 Google Chrome代码执行漏洞(CNVD-2024-38582) 2024-04-28 2024-09-18
cnvd-2024-38581 Google Chrome代码执行漏洞(CNVD-2024-38581) 2024-08-30 2024-09-18
cnvd-2024-38578 Google Chrome堆缓冲区溢出漏洞(CNVD-2024-38578) 2024-08-30 2024-09-18
cnvd-2024-38577 Google Chrome堆缓冲区溢出漏洞(CNVD-2024-38577) 2024-08-30 2024-09-18
cnvd-2024-38576 Google Chrome堆缓冲区溢出漏洞(CNVD-2024-38576) 2024-09-12 2024-09-18
cnvd-2024-38575 Google Chrome代码执行漏洞(CNVD-2024-38575) 2024-09-12 2024-09-18
cnvd-2024-38574 Google Chrome Media Router内存错误引用漏洞 2024-09-12 2024-09-18
cnvd-2024-38572 Google Chrome Autofill内存错误引用漏洞(CNVD-2024-38572) 2024-09-12 2024-09-18
cnvd-2024-37708 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2024-37708) 2024-08-02 2024-09-16
cnvd-2024-37241 北京致远互联软件股份有限公司致远A6-m协同管理软件企业版存在信息泄露漏洞(CNVD-2024-37241) 2024-08-02 2024-09-16
cnvd-2024-37279 用友网络科技股份有限公司NC Cloud存在任意文件读取漏洞(CNVD-2024-37279) 2024-08-01 2024-09-15
cnvd-2024-38221 Warehouse Inventory System跨站请求伪造漏洞(CNVD-2024-38221) 2024-08-06 2024-09-14
ID Description Published Updated
certa-2010-avi-112 Multiples vulnérabilités du serveur HTTP Apache 2010-03-08T00:00:00.000000 2010-03-26T00:00:00.000000
certa-2009-avi-292 Vulnérabilités dans HP-UX 2009-07-27T00:00:00.000000 2010-03-26T00:00:00.000000
certa-2010-avi-134 Vulnérabilités dans Cisco Unified Communications Manager Express 2010-03-25T00:00:00.000000 2010-03-25T00:00:00.000000
certa-2010-avi-133 Vulnérabilité dans Samba 2010-03-25T00:00:00.000000 2010-03-25T00:00:00.000000
certa-2010-avi-132 Multiples vulnérabilités dans Qt 2010-03-24T00:00:00.000000 2010-03-24T00:00:00.000000
certa-2010-avi-131 Vulnérabilités dans Opera 2010-03-23T00:00:00.000000 2010-03-23T00:00:00.000000
certa-2010-avi-130 Vulnérabilité dans Firefox 2010-03-23T00:00:00.000000 2010-03-23T00:00:00.000000
certa-2010-avi-129 Vulnérabilité dans IBM DB2 Content Manager 2010-03-19T00:00:00.000000 2010-03-19T00:00:00.000000
certa-2010-avi-128 Multiples vulnérabilités dans CA ARCserve Backup 2010-03-19T00:00:00.000000 2010-03-19T00:00:00.000000
certa-2010-avi-127 Vulnérabilité dans le module mm_forum de TYPO3 2010-03-18T00:00:00.000000 2010-03-18T00:00:00.000000
certa-2010-avi-126 Multiples vulnérabilités dans Google Chrome 2010-03-18T00:00:00.000000 2010-03-18T00:00:00.000000
certa-2010-avi-125 Vulnérabilité dans Skype 2010-03-17T00:00:00.000000 2010-03-17T00:00:00.000000
certa-2010-avi-124 Multiples vulnérabilités dans OSSIM 2010-03-17T00:00:00.000000 2010-03-17T00:00:00.000000
certa-2010-avi-123 Vulnérabilité dans sendmail pour IBM AIX 2010-03-17T00:00:00.000000 2010-03-17T00:00:00.000000
certa-2010-avi-122 Vulnérabilité du serveur HTTP d'IBM 2010-03-17T00:00:00.000000 2010-03-17T00:00:00.000000
certa-2010-avi-121 Vulnérabilité dans les produits HP Small Form Factor et HP Microtower PC 2010-03-17T00:00:00.000000 2010-03-17T00:00:00.000000
certa-2010-avi-120 Vulnérabilités dans Apple Safari 2010-03-12T00:00:00.000000 2010-03-12T00:00:00.000000
certa-2010-avi-119 Vulnérabilité dans dpkg 2010-03-12T00:00:00.000000 2010-03-12T00:00:00.000000
certa-2010-avi-081 Multiples vulnérabilités dans Adobe Reader et Adobe Acrobat 2010-02-17T00:00:00.000000 2010-03-12T00:00:00.000000
certa-2010-avi-118 Vulnérabilité dans Samba 2010-03-10T00:00:00.000000 2010-03-10T00:00:00.000000
certa-2010-avi-117 Vulnérabilité dans HP Performance Insight 2010-03-10T00:00:00.000000 2010-03-10T00:00:00.000000
certa-2010-avi-116 Vulnérabilité de Dovecot 2010-03-10T00:00:00.000000 2010-03-10T00:00:00.000000
certa-2010-avi-115 Multiples vulnérabilités dans Microsoft Excel et Office Sharepoint Server 2010-03-10T00:00:00.000000 2010-03-10T00:00:00.000000
certa-2010-avi-114 Vulnérabilité dans Windows Movie Maker 2010-03-10T00:00:00.000000 2010-03-10T00:00:00.000000
certa-2010-avi-113 Vulnérabilité dans phpBB 2010-03-09T00:00:00.000000 2010-03-09T00:00:00.000000
certa-2010-avi-111 Vulnérabilité dans des produits Symantec 2010-03-05T00:00:00.000000 2010-03-05T00:00:00.000000
certa-2010-avi-110 Vulnérabilité dans CUPS 2010-03-05T00:00:00.000000 2010-03-05T00:00:00.000000
certa-2010-avi-109 Vulnérabilité dans Juniper Secure Access 2010-03-05T00:00:00.000000 2010-03-05T00:00:00.000000
certa-2010-avi-108 Multiples vulnérabilités dans Drupal 2010-03-05T00:00:00.000000 2010-03-05T00:00:00.000000
certa-2010-avi-107 Multiples vulnérabilités dans CA SiteMinder 2010-03-05T00:00:00.000000 2010-03-05T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated