Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2026-23840
9.3 (3.1)
Movary vulnerable to Cross-site Scripting with `?categ… leepeuker
movary
2026-01-19T18:32:50.229Z 2026-01-20T17:30:24.315Z
CVE-2026-22797
9.9 (3.1)
An issue was discovered in OpenStack keystonemidd… OpenStack
keystonemiddleware
2026-01-19T00:00:00.000Z 2026-01-20T17:28:09.348Z
CVE-2026-21696
8.3 (4.0)
Endless reprocessing/reupload of activity log data due… pterodactyl
wings
2026-01-19T19:25:43.283Z 2026-01-20T17:27:48.498Z
CVE-2026-23837
9.8 (3.1)
MyTube has an Authorization Bypass vulnerability franklioxygen
MyTube
2026-01-19T20:09:37.223Z 2026-01-20T17:24:06.897Z
CVE-2025-53912
9.6 (3.1)
An arbitrary file read vulnerability exists in th… MedDream
MedDream PACS Premium
2026-01-20T14:49:33.583Z 2026-01-20T17:08:50.921Z
CVE-2025-13151
7.5 (3.1)
CVE-2025-13151 GnuTLS
libtasn1
2026-01-07T21:14:05.223Z 2026-01-20T17:08:41.712Z
CVE-2026-23949
8.6 (3.1)
jaraco.context Has a Path Traversal Vulnerability jaraco
jaraco.context
2026-01-20T00:36:23.777Z 2026-01-20T17:02:50.613Z
CVE-2025-65229
4.6 (3.1)
A stored cross-site scripting (XSS) vulnerability… n/a
n/a
2025-12-08T00:00:00.000Z 2026-01-20T17:00:26.979Z
CVE-2025-41024
5.1 (4.0)
Stored Cross-Site Scripting in Poultry Farm Management… Poultry Farm Management System
Poultry Farm Management System
2026-01-20T11:35:31.066Z 2026-01-20T16:46:49.524Z
CVE-2026-22844
9.9 (3.1)
Zoom Node Deployments - Command Injection Zoom Communications Inc.
Zoom Node
2026-01-20T13:57:44.803Z 2026-01-20T16:45:18.457Z
CVE-2025-9278
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:55:43.341Z 2026-01-20T16:42:53.890Z
CVE-2025-9279
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:56:22.609Z 2026-01-20T16:42:17.413Z
CVE-2025-14027
8.7 (4.0)
Rockwell Automation Recommends Upgrading From 1756-RM2… Rockwell Automation
ControlLogix® Redundancy Enhanced Module
2026-01-20T13:56:43.694Z 2026-01-20T16:41:44.225Z
CVE-2025-36410
3.1 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:39:53.965Z 2026-01-20T16:41:07.252Z
CVE-2025-9280
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:57:02.101Z 2026-01-20T16:39:32.048Z
CVE-2025-9281
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:58:24.186Z 2026-01-20T16:38:42.562Z
CVE-2025-36409
5.4 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:37:56.120Z 2026-01-20T16:38:27.452Z
CVE-2025-9282
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:59:14.640Z 2026-01-20T16:38:19.864Z
CVE-2025-9283
8.7 (4.0)
ArmorStart® LT - Multiple Denial-of-Service Vulnerabilities Rockwell Automation
ArmorStart® LT
2026-01-20T13:59:56.732Z 2026-01-20T16:37:50.655Z
CVE-2025-36408
6.4 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:33:59.216Z 2026-01-20T16:35:00.739Z
CVE-2025-71020
7.5 (3.1)
Tenda AX-1806 v1.0.0.1 was discovered to contain … n/a
n/a
2026-01-16T00:00:00.000Z 2026-01-20T16:32:13.165Z
CVE-2020-36926
6.9 (4.0)
7.5 (3.1)
SmarterTools SmarterTrack 7922 -Information Disclosure Smartertools
SmarterTools SmarterTrack
2026-01-15T23:25:33.221Z 2026-01-20T16:30:59.193Z
CVE-2026-22045
5.9 (3.1)
Traefik's ACME TLS-ALPN fast path lacks timeouts and c… traefik
traefik
2026-01-15T22:44:05.423Z 2026-01-20T16:29:37.648Z
CVE-2025-68671
6.5 (3.1)
lakeFS is Missing Timestamp Validation in S3 Gateway A… treeverse
lakeFS
2026-01-15T22:35:44.495Z 2026-01-20T16:28:55.951Z
CVE-2025-14376
8.6 (4.0)
Verve Asset Manager – Plaintext Storage Vulnerabilities Rockwell Automation
Verve Asset Manager
2026-01-20T13:18:32.484Z 2026-01-20T16:17:16.102Z
CVE-2025-10198
7.8 (3.1)
LizardBytes Sunshine for Windows contains a DLL search… LizardByte
Sunshine for Windows
2025-09-09T17:28:14.696Z 2026-01-20T16:12:44.974Z
CVE-2025-14377
8.8 (4.0)
Verve Asset Manager – Plaintext Storage Vulnerabilities Rockwell Automation
Verve Asset Manager
2026-01-20T13:21:40.649Z 2026-01-20T16:09:48.026Z
CVE-2025-36418
7.3 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:50:40.562Z 2026-01-20T16:09:43.989Z
CVE-2025-36419
5.3 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:53:37.574Z 2026-01-20T16:07:57.795Z
CVE-2025-36411
3.5 (3.1)
Multiple vulnerabilities found in IBM ApplinX. IBM
ApplinX
2026-01-20T15:43:07.492Z 2026-01-20T16:04:55.158Z
ID CVSS Description Vendor Product Published Updated
CVE-2023-53463
N/A
ibmvnic: Do not reset dql stats on NON_FATAL err Linux
Linux
2025-10-01T11:42:34.308Z 2025-10-01T11:42:34.308Z
CVE-2025-61246
9.8 (3.1)
indieka900 online-shopping-system-php 1.0 is vuln… n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T19:37:53.508Z
CVE-2023-53448
N/A
fbdev: imxfb: Removed unneeded release_mem_region Linux
Linux
2025-10-01T11:42:20.557Z 2025-10-01T11:42:20.557Z
CVE-2025-67091
6.5 (3.1)
An issue in GL Inet GL.Inet AX1800 Version 4.6.4 … n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:10:44.603Z
CVE-2025-67090
5.1 (3.1)
The LuCI web interface on Gl Inet GL.Inet AX1800 … n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:51:52.244Z
CVE-2025-67089
8.1 (3.1)
A command injection vulnerability exists in the G… n/a
n/a
2026-01-08T00:00:00.000Z 2026-01-08T16:52:24.897Z
CVE-2023-53449
N/A
s390/dasd: Fix potential memleak in dasd_eckd_init() Linux
Linux
2025-10-01T11:42:21.371Z 2025-10-01T11:42:21.371Z
CVE-2023-53451
N/A
scsi: qla2xxx: Fix potential NULL pointer dereference Linux
Linux
2025-10-01T11:42:22.857Z 2026-01-05T10:20:37.445Z
CVE-2023-53452
N/A
wifi: rtw89: fix potential race condition between napi… Linux
Linux
2025-10-01T11:42:23.831Z 2025-10-01T11:42:23.831Z
CVE-2025-63916
8.1 (3.1)
MyScreenTools v2.2.1.0 contains a critical OS com… n/a
n/a
2025-11-17T00:00:00.000Z 2025-11-17T19:00:52.724Z
CVE-2023-53453
N/A
drm/radeon: free iio for atombios when driver shutdown Linux
Linux
2025-10-01T11:42:24.649Z 2026-01-05T10:20:43.775Z
CVE-2025-10543
6.3 (4.0)
In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.g… Eclipse Foundation
paho.mqtt.golang (Go MQTT v3.1 library)
2025-12-02T08:18:16.724Z 2025-12-02T13:55:51.665Z
CVE-2023-53454
N/A
HID: multitouch: Correct devm device reference for hid… Linux
Linux
2025-10-01T11:42:25.760Z 2025-10-01T11:42:25.760Z
CVE-2023-53460
N/A
wifi: rtw88: fix memory leak in rtw_usb_probe() Linux
Linux
2025-10-01T11:42:31.620Z 2025-10-02T07:04:21.343Z
CVE-2025-46603
7 (3.1)
Dell CloudBoost Virtual Appliance, versions 19.13… Dell
CloudBoost Virtual Appliance
2025-12-05T19:01:28.898Z 2025-12-05T19:15:38.424Z
CVE-2025-34291
9.4 (4.0)
Langflow <= 1.6.9 CORS Misconfiguration to Token Hijac… Langflow
Langflow
2025-12-05T22:27:26.438Z 2025-12-08T20:46:49.653Z
CVE-2023-53455
N/A
drm/vc4: drop all currently held locks if deadlock happens Linux
Linux
2025-10-01T11:42:26.791Z 2025-10-01T11:42:26.791Z
CVE-2025-12941
5 (4.0)
Denial of Service Vulnerability in NETGEAR C6220 and C6230 NETGEAR
C6220
2025-12-09T17:01:04.702Z 2025-12-09T20:44:09.127Z
CVE-2023-53456
N/A
scsi: qla4xxx: Add length check when parsing nlattrs Linux
Linux
2025-10-01T11:42:27.821Z 2025-10-01T11:42:27.821Z
CVE-2025-12945
1.1 (4.0)
Improper input validation in NETGEAR Nighthawk router R7000P NETGEAR
R7000P
2025-12-09T17:01:38.595Z 2025-12-09T20:44:03.610Z
CVE-2025-8281
7.1 (3.1)
WP Talroo <= 2.4 - Reflected XSS Unknown
WP Talroo
2025-08-22T06:00:03.699Z 2026-01-09T20:20:08.756Z
CVE-2023-53457
N/A
FS: JFS: Fix null-ptr-deref Read in txBegin Linux
Linux
2025-10-01T11:42:28.730Z 2026-01-05T10:20:45.270Z
CVE-2023-53458
N/A
media: cx23885: Fix a null-ptr-deref bug in buffer_pre… Linux
Linux
2025-10-01T11:42:29.665Z 2026-01-05T10:20:51.971Z
CVE-2025-61319
6.1 (3.1)
ReNgine thru 2.2.0 is vulnerable to a Stored Cros… n/a
n/a
2025-10-10T00:00:00.000Z 2025-10-10T14:23:44.425Z
CVE-2023-53459
N/A
HID: mcp-2221: prevent UAF in delayed work Linux
Linux
2025-10-01T11:42:30.648Z 2025-10-01T11:42:30.648Z
CVE-2025-11579
5.3 (3.1)
DoS via Out Of Memory Crash nwaples
rardecode
2025-10-10T11:15:15.163Z 2025-12-02T09:30:03.452Z
CVE-2023-53499
N/A
virtio_net: Fix error unwinding of XDP initialization Linux
Linux
2025-10-01T11:45:50.367Z 2025-10-01T11:45:50.367Z
CVE-2023-53498
N/A
drm/amd/display: Fix potential null dereference Linux
Linux
2025-10-01T11:45:49.549Z 2025-10-29T13:18:51.888Z
CVE-2023-53497
N/A
media: vsp1: Replace vb2_is_streaming() with vb2_start… Linux
Linux
2025-10-01T11:45:48.728Z 2025-10-01T11:45:48.728Z
CVE-2023-53496
N/A
x86/platform/uv: Use alternate source for socket to no… Linux
Linux
2025-10-01T11:45:47.807Z 2025-10-01T11:45:47.807Z
ID Description Published Updated
fkie_cve-2025-63916 MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compressio… 2025-11-17T16:15:50.700 2026-01-16T21:23:35.787
fkie_cve-2023-53453 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atomb… 2025-10-01T12:15:43.787 2026-01-16T21:22:30.527
fkie_cve-2025-10543 In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, pas… 2025-12-02T09:15:46.127 2026-01-16T21:22:24.750
fkie_cve-2023-53454 In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm … 2025-10-01T12:15:43.953 2026-01-16T21:21:16.260
fkie_cve-2023-53460 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak i… 2025-10-01T12:15:47.570 2026-01-16T21:19:46.060
fkie_cve-2025-46603 Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction o… 2025-12-05T19:15:48.233 2026-01-16T21:18:14.583
fkie_cve-2025-34291 Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account ta… 2025-12-05T23:15:47.433 2026-01-16T21:17:02.097
fkie_cve-2023-53455 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drop all currently he… 2025-10-01T12:15:44.910 2026-01-16T21:15:53.820
fkie_cve-2025-12941 Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + Wi… 2025-12-09T17:15:48.453 2026-01-16T21:13:16.813
fkie_cve-2023-53456 In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length chec… 2025-10-01T12:15:45.983 2026-01-16T21:09:17.963
fkie_cve-2025-12945 A vulnerability in NETGEAR Nighthawk R7000P routers lets an authenticated admin execute OS command … 2025-12-09T17:15:48.647 2026-01-16T21:07:14.730
fkie_cve-2025-8281 The WP Talroo WordPress plugin through 2.4 does not sanitise and escape a parameter before outputti… 2025-08-22T06:15:33.563 2026-01-16T21:05:35.663
fkie_cve-2023-53457 In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Re… 2025-10-01T12:15:47.007 2026-01-16T20:59:21.080
fkie_cve-2023-53458 In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr… 2025-10-01T12:15:47.300 2026-01-16T20:58:04.740
fkie_cve-2025-61319 ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulner… 2025-10-10T14:15:43.500 2026-01-16T20:57:05.080
fkie_cve-2023-53459 In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in … 2025-10-01T12:15:47.443 2026-01-16T20:56:36.920
fkie_cve-2025-11579 github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading lar… 2025-10-10T12:15:37.743 2026-01-16T20:56:26.367
fkie_cve-2023-53499 In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwindin… 2025-10-01T12:15:53.350 2026-01-16T20:51:31.697
fkie_cve-2023-53498 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential… 2025-10-01T12:15:53.223 2026-01-16T20:49:57.350
fkie_cve-2023-53497 In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_st… 2025-10-01T12:15:53.090 2026-01-16T20:47:28.777
fkie_cve-2023-53496 In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate… 2025-10-01T12:15:52.950 2026-01-16T20:47:00.540
fkie_cve-2023-53495 In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix… 2025-10-01T12:15:52.803 2026-01-16T20:46:37.340
fkie_cve-2023-53494 In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY cor… 2025-10-01T12:15:52.673 2026-01-16T20:45:58.230
fkie_cve-2023-53493 In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds che… 2025-10-01T12:15:52.540 2026-01-16T20:45:18.710
fkie_cve-2023-53492 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not i… 2025-10-01T12:15:52.390 2026-01-16T20:42:40.380
fkie_cve-2023-53490 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accep… 2025-10-01T12:15:52.107 2026-01-16T20:40:48.793
fkie_cve-2025-39823 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nosp… 2025-09-16T13:16:00.397 2026-01-16T20:38:07.723
fkie_cve-2025-39824 In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLA… 2025-09-16T13:16:01.050 2026-01-16T20:37:49.810
fkie_cve-2025-39825 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with con… 2025-09-16T13:16:01.780 2026-01-16T20:37:11.190
fkie_cve-2025-39826 In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field… 2025-09-16T13:16:02.290 2026-01-16T20:36:13.207
ID Severity Description Published Updated
ghsa-f57r-vv46-fp7w
7.5 (3.1)
8.7 (4.0)
NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-pri… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-chph-r4jm-2932
7.5 (3.1)
8.7 (4.0)
ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows li… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-9vxp-vq3x-qvgh
4.7 (3.1)
2.0 (4.0)
A vulnerability was detected in iCMS up to 8.0.0. Affected is the function Save of the file app/con… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-6596-h2j7-v8m3
8.8 (3.1)
8.6 (4.0)
meterN 1.2.3 contains an authenticated remote code execution vulnerability in admin_meter2.php and … 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-5gjv-h9vc-2w8g
6.3 (3.1)
2.1 (4.0)
A security vulnerability has been detected in Kohana KodiCMS up to 13.82.135. This impacts the func… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-2m8q-jcjp-298w
8.8 (3.1)
8.6 (4.0)
Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the fi… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-229c-7j29-hv97
8.4 (3.1)
8.5 (4.0)
Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service… 2025-12-31T21:30:57Z 2025-12-31T21:30:57Z
ghsa-q45h-4pv4-p744
8.8 (3.1)
7.4 (4.0)
A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy o… 2025-12-26T03:30:14Z 2025-12-31T21:30:29Z
ghsa-ff49-f5c2-ggcq
8.8 (3.1)
7.4 (4.0)
A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function s… 2025-12-26T00:30:12Z 2025-12-31T21:30:29Z
ghsa-4v76-jcg6-9p6m
8.8 (3.1)
7.4 (4.0)
A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the functio… 2025-12-26T00:30:12Z 2025-12-31T21:30:29Z
ghsa-29wh-g4c8-c35q
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy … 2025-12-26T00:30:12Z 2025-12-31T21:30:29Z
ghsa-pfgh-3rp7-865r
6.3 (3.1)
5.3 (4.0)
Advantech WebAccess/SCADA  is vulnerable to SQL injection, which may allow an attacker to execute a… 2025-12-18T21:31:44Z 2025-12-31T21:30:24Z
ghsa-4gh3-mcch-g7mg
4.3 (3.1)
5.3 (4.0)
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to dete… 2025-12-18T21:31:44Z 2025-12-31T21:30:24Z
ghsa-26jc-h8ww-vpqm
8.1 (3.1)
7.2 (4.0)
Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to dele… 2025-12-18T21:31:44Z 2025-12-31T21:30:24Z
ghsa-53rj-48p2-7m5j
9.4 (4.0)
An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V… 2025-06-26T18:31:28Z 2025-12-31T21:30:23Z
ghsa-52hq-8xj9-8pmr
8.8 (3.1)
8.7 (4.0)
Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker t… 2025-12-18T21:31:44Z 2025-12-31T21:30:23Z
ghsa-xq9w-j69v-6chc
8.8 (3.1)
Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File M… 2022-03-16T00:00:47Z 2025-12-31T21:30:22Z
ghsa-vmj3-x582-v9f4
5.4 (3.1)
A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.ph… 2022-05-24T19:14:36Z 2025-12-31T21:30:22Z
ghsa-2p5c-r4xc-mhvw
8.8 (3.1)
A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and i… 2022-05-24T19:14:36Z 2025-12-31T21:30:22Z
ghsa-6f5x-35qc-g7mg
6.3 (3.1)
2.1 (4.0)
A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgi_main o… 2025-12-31T18:30:25Z 2025-12-31T18:30:25Z
ghsa-4r7h-4fx4-6prf
6.3 (3.1)
2.1 (4.0)
A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of… 2025-12-31T18:30:25Z 2025-12-31T18:30:25Z
ghsa-m9g9-vq6h-h27p
3.5 (3.1)
5.1 (4.0)
A security vulnerability has been detected in elinicksic Razgover up to db37dfc5c82f023a40f2f7834de… 2025-12-31T18:30:24Z 2025-12-31T18:30:24Z
ghsa-vq3f-wjq8-v437
6.3 (3.1)
2.1 (4.0)
A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function o… 2025-12-31T18:30:23Z 2025-12-31T18:30:23Z
ghsa-rhh9-qf7p-wfgf
9.1 (3.1)
Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar envir… 2025-12-30T03:30:16Z 2025-12-31T18:30:23Z
ghsa-r326-pp3g-7cq4
2.5 (3.1)
An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allow… 2025-12-29T18:30:55Z 2025-12-31T18:30:23Z
ghsa-q38m-7hwc-v39w
8.8 (3.1)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/d… 2025-12-29T21:30:25Z 2025-12-31T18:30:23Z
ghsa-mwfx-853j-whj2
7.5 (3.1)
NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnaps… 2025-12-29T21:30:24Z 2025-12-31T18:30:23Z
ghsa-frgf-2qjw-vqvw
9.8 (3.1)
A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices … 2025-12-29T21:30:25Z 2025-12-31T18:30:23Z
ghsa-5x99-r8pc-wjj3
7.5 (3.1)
Whale browser before 4.35.351.12 allows an attacker to bypass the Same-Origin Policy in a sidebar e… 2025-12-30T03:30:16Z 2025-12-31T18:30:23Z
ghsa-2wcx-prwg-mc24
8.8 (3.1)
In NagiosXI 2026R1.0.1 build 1762361101, Dashboard parameters lack proper filtering, allowing any a… 2025-12-29T21:30:24Z 2025-12-31T18:30:23Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25383 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.950996Z
gsd-2024-25380 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.950662Z
gsd-2024-25182 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.950384Z
gsd-2024-25427 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.950102Z
gsd-2024-25233 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.949577Z
gsd-2024-25496 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.949044Z
gsd-2024-25248 SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allo… 2024-02-08T06:02:24.948276Z
gsd-2024-25358 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.947721Z
gsd-2024-25526 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.947157Z
gsd-2024-25217 Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerabil… 2024-02-08T06:02:24.946881Z
gsd-2024-25498 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.946590Z
gsd-2024-25275 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.946314Z
gsd-2024-25284 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.946036Z
gsd-2024-25322 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.945763Z
gsd-2024-25355 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.945479Z
gsd-2024-25472 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.945196Z
gsd-2024-25499 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.944907Z
gsd-2024-25193 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.944378Z
gsd-2024-25530 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.944052Z
gsd-2024-25319 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.943769Z
gsd-2024-25554 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2024-02-08T06:02:24.942981Z
gsd-2024-25330 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.942669Z
gsd-2024-25415 A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v… 2024-02-08T06:02:24.942379Z
gsd-2024-25235 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.942073Z
gsd-2024-25236 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.941513Z
gsd-2024-25187 Server Side Request Forgery (SSRF) vulnerability in 71cms v1.0.0, allows remote unauthent… 2024-02-08T06:02:24.940926Z
gsd-2024-25410 flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in upda… 2024-02-08T06:02:24.940556Z
gsd-2024-25545 An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary co… 2024-02-08T06:02:24.940244Z
gsd-2024-25239 SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows atta… 2024-02-08T06:02:24.939672Z
gsd-2024-25441 The format of the source doesn't require a description, click on the link for more details. 2024-02-08T06:02:24.939098Z
ID Description Published Updated
mal-2025-183328 Malicious code in libc-ug-agufixagidug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183327 Malicious code in libc-ug-agufagidug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183326 Malicious code in libc-ug-aguagidug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183325 Malicious code in libc-ug-agig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183324 Malicious code in libc-ug-agg (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183323 Malicious code in libc-ug-agagiug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183322 Malicious code in libc-ug-agagig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183321 Malicious code in libc-ug-agagidug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183320 Malicious code in libc-ug-ag (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183319 Malicious code in libc-ubg-atg (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183318 Malicious code in libc-ubg-atag (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183317 Malicious code in libc-ubg-atafuig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183316 Malicious code in libc-ubg-atafuificafaffaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183315 Malicious code in libc-ubg-atafuificaafaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183314 Malicious code in libc-ubg-atafuifcafaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183313 Malicious code in libc-ubg-atafuifaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183312 Malicious code in libc-ubg-atafug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183311 Malicious code in libc-ubg-atafufaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183310 Malicious code in libc-ubg-atafuaig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183309 Malicious code in libc-ubg-aga (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183308 Malicious code in libc-ubg-ag (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183307 Malicious code in ksut-agg-ibifua (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183306 Malicious code in ksut-ag-ibifua (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183305 Malicious code in kiudt-acvog-uu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183304 Malicious code in kiudt-acog-faig (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183303 Malicious code in kiudt-acog-fag (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183302 Malicious code in kiudt-acog-fafiug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183301 Malicious code in kiudt-acog-fafiufug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183300 Malicious code in kiudt-acog-fafifug (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183299 Malicious code in kiudt-acog-efbag (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2023:4099 Red Hat Security Advisory: bind security update 2023-07-17T08:53:35+00:00 2025-11-21T18:42:13+00:00
rhsa-2023:4074 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:55:44+00:00 2025-11-21T18:42:13+00:00
rhsa-2023:4076 Red Hat Security Advisory: firefox security update 2023-07-13T08:56:52+00:00 2025-11-21T18:42:12+00:00
rhsa-2023:4075 Red Hat Security Advisory: firefox security update 2023-07-13T08:55:47+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4073 Red Hat Security Advisory: firefox security update 2023-07-13T08:50:48+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4072 Red Hat Security Advisory: firefox security update 2023-07-13T08:50:02+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4071 Red Hat Security Advisory: firefox security update 2023-07-13T08:49:29+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4070 Red Hat Security Advisory: firefox security update 2023-07-13T08:44:17+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4065 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:44:30+00:00 2025-11-21T18:42:11+00:00
rhsa-2023:4069 Red Hat Security Advisory: firefox security update 2023-07-13T08:47:16+00:00 2025-11-21T18:42:10+00:00
rhsa-2023:4068 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:44:28+00:00 2025-11-21T18:42:10+00:00
rhsa-2023:4067 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:47:07+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4066 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:51:07+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4064 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:42:16+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4063 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:44:26+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4062 Red Hat Security Advisory: thunderbird security update 2023-07-13T08:43:53+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4060 Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2023-07-13T08:50:56+00:00 2025-11-21T18:42:09+00:00
rhsa-2023:4061 Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2023-07-13T08:44:41+00:00 2025-11-21T18:42:08+00:00
rhsa-2023:4059 Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update 2023-07-13T08:42:58+00:00 2025-11-21T18:42:07+00:00
rhsa-2023:4032 Red Hat Security Advisory: python38:3.8 and python38-devel:3.8 security update 2023-07-12T08:33:14+00:00 2025-11-21T18:42:07+00:00
rhsa-2023:4058 Red Hat Security Advisory: .NET 7.0 security, bug fix, and enhancement update 2023-07-13T08:44:39+00:00 2025-11-21T18:42:06+00:00
rhsa-2023:4057 Red Hat Security Advisory: .NET 7.0 security, bug fix, and enhancement update 2023-07-13T08:43:32+00:00 2025-11-21T18:42:06+00:00
rhsa-2023:4039 Red Hat Security Advisory: rh-nodejs14-nodejs security update 2023-07-12T08:27:13+00:00 2025-11-21T18:42:05+00:00
rhsa-2023:4038 Red Hat Security Advisory: python38:3.8 and python38-devel:3.8 security update 2023-07-12T08:28:05+00:00 2025-11-21T18:42:05+00:00
rhsa-2023:4037 Red Hat Security Advisory: bind9.16 security update 2023-07-12T08:30:59+00:00 2025-11-21T18:42:04+00:00
rhsa-2023:4036 Red Hat Security Advisory: nodejs security update 2023-07-12T08:17:44+00:00 2025-11-21T18:42:04+00:00
rhsa-2023:4034 Red Hat Security Advisory: nodejs:16 security update 2023-07-12T08:33:19+00:00 2025-11-21T18:42:03+00:00
rhsa-2023:4033 Red Hat Security Advisory: nodejs:16 security update 2023-07-12T08:32:53+00:00 2025-11-21T18:42:03+00:00
rhsa-2023:4030 Red Hat Security Advisory: grafana security update 2023-07-12T03:48:51+00:00 2025-11-21T18:42:02+00:00
rhsa-2023:4021 Red Hat Security Advisory: kernel security and bug fix update 2023-07-11T07:53:47+00:00 2025-11-21T18:42:01+00:00
ID Description Published Updated
msrc_cve-2020-12653 An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow aka CID-b70261a288ea. 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-12465 An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10 aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages. 2020-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-12464 usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference aka CID-056ad39ee925. 2020-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-11668 In the Linux kernel before 5.6.1 drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors aka CID-a246b4d54770. 2020-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-11609 An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors as demonstrated by a NULL pointer dereference aka CID-485b06aadb93. 2020-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-11608 An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints aka CID-998912346c0d. 2020-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10942 In the Linux kernel before 5.5.8 get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field which might allow attackers to trigger kernel stack corruption via crafted system calls. 2020-03-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10933 An issue was discovered in Ruby 2.5.x through 2.5.7 2.6.x through 2.6.5 and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size buffer exception: false) the method resizes the buffer to fit the requested size but no data is copied. Thus the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter. 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10781 A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes possibly making the system inoperable. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10768 A flaw was found in the Linux Kernel before 5.8-rc1 in the prctl() function where it can be used to enable indirect branch speculation after it has been disabled. This call incorrectly reports it as being 'force disabled' when it is not and opens the system to Spectre v2 attacks. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10767 A flaw was found in the Linux kernel before 5.8-rc1 in the implementation of the Enhanced IBPB (Indirect Branch Prediction Barrier). The IBPB mitigation will be disabled when STIBP is not available or when the Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This flaw allows a local attacker to perform a Spectre V2 style attack when this configuration is active. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10766 A logic bug flaw was found in Linux kernel before 5.8-rc1 in the implementation of SSBD. A bug in the logic handling allows an attacker with a local account to disable SSBD protection during a context switch when additional speculative execution mitigations are in place. This issue was introduced when the per task/process conditional STIPB switching was added on top of the existing SSBD switching. The highest threat from this vulnerability is to confidentiality. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10757 A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system. 2020-06-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10733 The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights. 2020-09-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10711 A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine it sets the security attribute to indicate that the category bitmap is present even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel resulting in a denial of service. 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2020-10690 There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode. 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-9070 An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls. 2019-02-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-6488 The string component in the GNU C Library (aka glibc or libc6) through 2.28 when running on the x32 architecture incorrectly attempts to use a 64-bit register for size_t in assembly codes which can lead to a segmentation fault or possibly unspecified other impact as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy. 2019-01-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-3886 An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block. 2019-04-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-20810 go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path which causes a memory leak aka CID-9453264ef586. 2020-06-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-20807 In Vim before 8.1.0881 users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g. Python Ruby or Lua). 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-20794 An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace and mount a FUSE filesystem. Upon interaction with this FUSE filesystem if the userspace component is terminated via a kill of the PID namespace's pid 1 it will result in a hung task and resources being permanently locked up until system reboot. This can result in resource exhaustion. 2020-05-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-20372 NGINX before 1.17.7 with certain error_page configurations allows HTTP request smuggling as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer. 2020-01-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-20079 The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory. 2019-12-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-19338 A flaw was found in the fix for CVE-2019-11135 in the Linux upstream kernel versions before 5.5 where the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0) but is not affected by the MDS issue (MDS_NO=1) the guest was to clear the affected buffers by using a VERW instruction mechanism. But when the MDS_NO=1 bit was exported to the guests the guests did not use the VERW mechanism to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability. 2020-07-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-19126 On the x86-64 architecture the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program. 2019-11-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-16905 OpenSSH 7.7 through 7.9 and 8.x before 8.1 when compiled with an experimental key type has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions and there is no supported way to enable it when building portable OpenSSH. 2019-10-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-16255 Ruby through 2.4.7 2.5.x through 2.5.6 and 2.6.x through 2.6.4 allows code injection if the first argument (aka the "command" argument) to Shell#[] or Shell#test in lib/shell.rb is untrusted data. An attacker can exploit this to call an arbitrary Ruby method. 2019-11-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-16254 Ruby through 2.4.7 2.5.x through 2.5.6 and 2.6.x through 2.6.4 allows HTTP Response Splitting. If a program using WEBrick inserts untrusted input into the response header an attacker can exploit it to insert a newline character to split a header and inject malicious content to deceive clients. NOTE: this issue exists because of an incomplete fix for CVE-2017-17742 which addressed the CRLF vector but did not address an isolated CR or an isolated LF. 2019-11-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
msrc_cve-2019-16201 WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7 2.5.x through 2.5.6 and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the Internet or a untrusted network. 2019-11-02T00:00:00.000Z 2020-09-25T00:00:00.000Z
ID Description Updated
var-201503-0081 WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, all… 2025-04-13T22:45:08.777000Z
var-201402-0393 Apple Type Services (ATS) in Apple OS X before 10.9.2 allows remote attackers to execute … 2025-04-13T22:45:08.551000Z
var-201508-0422 bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain… 2025-04-13T22:44:59.568000Z
var-201408-0158 Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sa… 2025-04-13T22:44:59.521000Z
var-201607-0376 Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allo… 2025-04-13T22:44:58.684000Z
var-201505-0151 Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB00… 2025-04-13T22:44:58.364000Z
var-201409-0470 Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier fo… 2025-04-13T22:44:57.823000Z
var-201504-0112 IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 a… 2025-04-13T22:44:57.778000Z
var-201403-0499 dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-sign… 2025-04-13T22:44:55.230000Z
var-201503-0426 The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4… 2025-04-13T22:44:54.454000Z
var-201603-0021 The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in media… 2025-04-13T22:44:39.884000Z
var-201508-0055 Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a… 2025-04-13T22:44:39.541000Z
var-201512-0127 WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote at… 2025-04-13T22:44:39.495000Z
var-201410-0834 Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earli… 2025-04-13T22:44:33.490000Z
var-201403-0122 Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmw… 2025-04-13T22:44:32.790000Z
var-201407-0073 Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intende… 2025-04-13T22:44:01.875000Z
var-201510-0070 IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a de… 2025-04-13T22:43:45.276000Z
var-201503-0089 The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and… 2025-04-13T22:43:44.501000Z
var-201405-0232 WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attacker… 2025-04-13T22:43:43.830000Z
var-201404-0209 Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial … 2025-04-13T22:43:41.869000Z
var-201504-0127 Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a… 2025-04-13T22:42:46.323000Z
var-201509-0124 The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not pr… 2025-04-13T22:42:43.728000Z
var-201510-0073 The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize … 2025-04-13T22:42:41.302000Z
var-201510-0088 The backup implementation in Time Machine in Apple OS X before 10.11 allows local users t… 2025-04-13T22:42:40.935000Z
var-201512-0129 WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote at… 2025-04-13T22:42:38.538000Z
var-201508-0041 Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute… 2025-04-13T22:41:33.306000Z
var-201607-0301 CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, whi… 2025-04-13T22:41:25.221000Z
var-201407-0082 Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to … 2025-04-13T22:41:24.943000Z
var-201403-0284 Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux… 2025-04-13T22:41:23.606000Z
var-201508-0437 QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary cod… 2025-04-13T22:41:22.195000Z
ID Description Updated
ID Description Published Updated
suse-su-2020:2196-1 Security update for libX11 2020-08-11T11:31:58Z 2020-08-11T11:31:58Z
suse-su-2020:14447-1 Security update for xorg-x11-libX11 2020-08-11T11:29:45Z 2020-08-11T11:29:45Z
suse-su-2020:2194-1 Security update for dpdk 2020-08-11T11:29:07Z 2020-08-11T11:29:07Z
suse-su-2020:2179-1 Security update for MozillaThunderbird 2020-08-10T08:06:37Z 2020-08-10T08:06:37Z
suse-su-2020:2173-1 Security update for perl-XML-Twig 2020-08-07T14:11:21Z 2020-08-07T14:11:21Z
suse-su-2020:2172-1 Security update for perl-XML-Twig 2020-08-07T14:11:08Z 2020-08-07T14:11:08Z
suse-su-2020:2171-1 Security update for xen 2020-08-07T14:10:42Z 2020-08-07T14:10:42Z
suse-su-2020:2167-1 Security update for LibVNCServer 2020-08-07T12:54:44Z 2020-08-07T12:54:44Z
suse-su-2020:2166-1 Security update for xen 2020-08-07T11:20:24Z 2020-08-07T11:20:24Z
suse-ru-2020:2161-1 Security update for ansible1, ardana-ansible, ardana-cobbler, ardana-glance, ardana-input-model, ardana-logging, ardana-manila, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-openstack, grafana, kibana, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-designate, openstack-heat-templates, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-neutron, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, python-Django1, python-Pillow, python-ardana-packager, python-heatclient, python-neutron-tempest-plugin, python-octavia-tempest-plugin, python-os-brick, python-oslo.messaging, python-pyroute2, python-urllib3, python-waitress, release-notes-suse-openstack-cloud, rubygem-activeresource, rubygem-json-1_7, rubygem-puma 2020-08-06T22:09:12Z 2020-08-06T22:09:12Z
suse-su-2020:2160-1 Security update for xen 2020-08-06T18:05:47Z 2020-08-06T18:05:47Z
suse-su-2020:2159-1 Security update for xen 2020-08-06T18:05:34Z 2020-08-06T18:05:34Z
suse-su-2020:2158-1 Security update for xen 2020-08-06T18:05:21Z 2020-08-06T18:05:21Z
suse-su-2020:2157-1 Security update for python-ipaddress 2020-08-06T18:04:48Z 2020-08-06T18:04:48Z
suse-su-2020:2156-1 Security update for the Linux Kernel 2020-08-06T18:03:08Z 2020-08-06T18:03:08Z
suse-su-2020:2152-1 Security update for the Linux Kernel 2020-08-06T13:56:52Z 2020-08-06T13:56:52Z
suse-su-2020:2149-1 Security update for postgresql10 and postgresql12 2020-08-06T11:37:25Z 2020-08-06T11:37:25Z
suse-su-2020:2147-1 Security update for MozillaFirefox 2020-08-06T11:36:05Z 2020-08-06T11:36:05Z
suse-su-2020:2144-1 Security update for wireshark 2020-08-06T09:08:14Z 2020-08-06T09:08:14Z
suse-su-2020:2143-1 Security update for java-11-openjdk 2020-08-06T09:07:26Z 2020-08-06T09:07:26Z
suse-su-2020:2142-1 Security update for xrdp 2020-08-06T09:05:38Z 2020-08-06T09:05:38Z
suse-su-2020:2141-1 Security update for xen 2020-08-06T09:05:28Z 2020-08-06T09:05:28Z
suse-su-2020:2140-1 Security update for rubygem-actionview-4_2 2020-08-06T09:05:11Z 2020-08-06T09:05:11Z
suse-su-2020:2134-1 Security update for the Linux Kernel 2020-08-05T14:26:45Z 2020-08-05T14:26:45Z
suse-su-2020:14445-1 Security update for xorg-x11-libX11 2020-08-05T08:39:16Z 2020-08-05T08:39:16Z
suse-su-2020:2122-1 Security update for the Linux Kernel 2020-08-04T18:10:14Z 2020-08-04T18:10:14Z
suse-su-2020:2121-1 Security update for the Linux Kernel 2020-08-04T13:18:16Z 2020-08-04T13:18:16Z
suse-su-2020:14444-1 Security update for xen 2020-08-04T13:17:01Z 2020-08-04T13:17:01Z
suse-su-2020:2119-1 Security update for the Linux Kernel 2020-08-04T13:16:44Z 2020-08-04T13:16:44Z
suse-su-2020:2118-1 Security update for MozillaFirefox 2020-08-04T13:16:01Z 2020-08-04T13:16:01Z
ID Description Published Updated
cnvd-2024-38185 GTKWave整数溢出漏洞(CNVD-2024-38185) 2024-01-11 2024-09-14
cnvd-2024-38184 Tenda F1202 fromwebExcptypemanFilter函数堆栈缓冲区溢出漏洞 2024-04-18 2024-09-14
cnvd-2024-38183 Tenda AC10U fromSetRouteStatic函数缓冲区溢出漏洞 2024-03-22 2024-09-14
cnvd-2024-38182 Tenda AX1806缓冲区溢出漏洞(CNVD-2024-38182) 2024-07-19 2024-09-14
cnvd-2024-38181 TOTOLINK X5000R和A7000R缓冲区溢出漏洞 2024-03-19 2024-09-14
cnvd-2024-38180 akademy跨站脚本漏洞 2024-09-09 2024-09-14
cnvd-2024-37307 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2024-37307) 2024-07-31 2024-09-14
cnvd-2024-37302 北京天融信科技有限公司天融信上网行为管理系统存在命令执行漏洞(CNVD-2024-37302) 2024-07-31 2024-09-14
cnvd-2024-37301 用友网络科技股份有限公司用友U8Cloud存在SQL注入漏洞(CNVD-2024-37301) 2024-07-31 2024-09-14
cnvd-2024-38013 Siemens SIMATIC SCADA和PCS 7 systems远程代码执行漏洞 2024-09-12 2024-09-13
cnvd-2024-38012 Siemens SICAM和SITIPE产品第三方组件缓冲区溢出漏洞 2024-09-12 2024-09-13
cnvd-2024-38011 Siemens SIMATIC RFID Readers隐藏功能漏洞 2024-09-12 2024-09-13
cnvd-2024-38010 Siemens SIMATIC RFID Readers信息泄露漏洞 2024-09-12 2024-09-13
cnvd-2024-38009 Siemens SIMATIC RFID Readers处理不当漏洞 2024-09-12 2024-09-13
cnvd-2024-38008 Siemens SIMATIC RFID Readers访问控制不当漏洞 2024-09-12 2024-09-13
cnvd-2024-38007 Siemens SIMATIC RFID Readers隐藏功能漏洞(CNVD-2024-38007) 2024-09-12 2024-09-13
cnvd-2024-38006 Siemens SIMATIC RFID Readers处理不当漏洞(CNVD-2024-38006) 2024-09-12 2024-09-13
cnvd-2024-38005 Siemens SINEMA Remote Connect Server会话固定漏洞 2024-09-12 2024-09-13
cnvd-2024-38004 Siemens SIMATIC S7-200 SMART Devices拒绝服务漏洞 2024-09-12 2024-09-13
cnvd-2024-37222 帆软软件有限公司数据决策系统存在弱口令漏洞 2024-07-30 2024-09-13
cnvd-2024-37220 浙江宇视科技有限公司NVR301-08-P8存在信息泄露漏洞 2024-07-30 2024-09-13
cnvd-2024-38025 Siemens User Management Component (UMC) 堆缓冲区溢出漏洞 2024-09-12 2024-09-12
cnvd-2024-38024 Siemens Mendix Runtime信息泄露漏洞 2024-09-12 2024-09-12
cnvd-2024-38023 Siemens SINUMERIK系统日志信息泄露漏洞 2024-09-12 2024-09-12
cnvd-2024-38022 Siemens Automation License Manager拒绝服务漏洞 2024-09-12 2024-09-12
cnvd-2024-38021 Siemens SINUMERIK ONE、SINUMERIK-840D和SINUMERIK828D权限提升漏洞 2024-09-12 2024-09-12
cnvd-2024-38020 Siemens Industrial Edge Management授权绕过漏洞 2024-09-12 2024-09-12
cnvd-2024-38019 Siemens SINEMA Remote Connect Client存在未明漏洞 2024-09-12 2024-09-12
cnvd-2024-38018 Siemens SINEMA Remote Connect Client日志信息泄露漏洞 2024-09-12 2024-09-12
cnvd-2024-38017 Siemens Industrial产品空指针解引用漏洞 2024-09-12 2024-09-12
ID Description Published Updated
certa-2010-avi-073 Vulnérabilité dans le sous-système MS-DOS de Microsoft Windows 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-072 Vulnérabilité dans Kerberos sous Microsoft Windows 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-071 Vulnérabilité dans Microsoft DirectShow 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-070 Multiples vulnérabilités dans Microsoft Windows SMB 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-069 Vulnérabilité dans Microsoft Windows CSRSS 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-068 Vulnérabilité dans Microsoft Hyper-V 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-067 Multiples vulnérabilités dans Microsoft Windows TCP/IP 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-066 Vulnérabilité dans certains contrôles ActiveX 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-065 Vulnérabilité dans le gestionnaire de Shell Windows 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-064 Vulnérabilités dans le client SMB de Microsoft Windows 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-063 Vulnérabilité dans Microsoft Paint 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-062 Vulnérabilités de Microsoft PowerPoint 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-061 Vulnérabilité dans Microsoft Office 2010-02-10T00:00:00.000000 2010-02-10T00:00:00.000000
certa-2010-avi-060 Vulnérabilité dans Novell eDirectory 2010-02-09T00:00:00.000000 2010-02-09T00:00:00.000000
certa-2010-avi-059 Vulnérabilité dans OTRS 2010-02-09T00:00:00.000000 2010-02-09T00:00:00.000000
certa-2010-avi-058 Vulnérabilité dans Oracle WebLogic Server 2010-02-08T00:00:00.000000 2010-02-08T00:00:00.000000
certa-2010-avi-057 Vulnérabilités de DokuWiki 2010-02-08T00:00:00.000000 2010-02-08T00:00:00.000000
certa-2010-avi-056 Vulnérabilité dans HP Enterprise Cluster Master Toolkit 2010-02-05T00:00:00.000000 2010-02-05T00:00:00.000000
certa-2010-avi-055 Vulnérabilité dans lighttpd 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-054 Vulnérabilité dans Apache HTTP Server 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-053 Vulnérabilité dans Novell NetStorage 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-052 Vulnérabilité dans Trend Micro OfficeScan 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-051 Vulnérabilité dans Asterisk 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-050 Vulnérabilité dans Fetchmail 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-049 Vulnérabilité dans OpenVMS RMS 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-048 Vulnérabilité dans Citrix XenServer 2010-02-04T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2009-avi-420 Multiples vulnérabilités dans Samba 2009-10-02T00:00:00.000000 2010-02-04T00:00:00.000000
certa-2010-avi-047 Vulnérabilité dans Adobe ColdFusion 2010-02-03T00:00:00.000000 2010-02-03T00:00:00.000000
certa-2010-avi-046 Multiples vulnérabilités dans Apple iPhone OS 2010-02-03T00:00:00.000000 2010-02-03T00:00:00.000000
certa-2010-avi-045 Vulnérabilités dans Squid 2010-02-03T00:00:00.000000 2010-02-03T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated