Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-69016
4.3 (3.1)
WordPress Shortcodes and extra features for Phlox them… averta
Shortcodes and extra features for Phlox theme
2025-12-30T10:47:54.087Z 2026-01-20T14:28:29.436Z
CVE-2025-68994
5.3 (3.1)
WordPress Product Loops for WooCommerce plugin <= 2.1.… XforWooCommerce
Product Loops for WooCommerce
2025-12-30T10:47:51.296Z 2026-01-20T14:28:29.420Z
CVE-2025-68996
7.5 (3.1)
WordPress Responsive Posts Carousel Pro plugin <= 15.1… WebCodingPlace
Responsive Posts Carousel Pro
2025-12-30T10:47:51.680Z 2026-01-20T14:28:29.368Z
CVE-2025-68993
5.3 (3.1)
WordPress Share, Print and PDF Products for WooCommerc… XforWooCommerce
Share, Print and PDF Products for WooCommerce
2025-12-30T10:47:51.107Z 2026-01-20T14:28:29.359Z
CVE-2025-68992
6.5 (3.1)
WordPress BWL Knowledge Base Manager plugin <= 1.6.3 -… xenioushk
BWL Knowledge Base Manager
2025-12-30T10:47:50.920Z 2026-01-20T14:28:29.356Z
CVE-2025-68998
5.4 (3.1)
WordPress Heateor Social Login plugin <= 1.1.39 - Cros… Heateor Support
Heateor Social Login
2025-12-30T10:47:52.118Z 2026-01-20T14:28:29.355Z
CVE-2025-68990
9.8 (3.1)
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL… xenioushk
BWL Pro Voting Manager
2025-12-30T10:47:50.548Z 2026-01-20T14:28:29.319Z
CVE-2025-68989
7.5 (3.1)
WordPress Contact Form 7 Extension For Mailchimp plugi… Renzo Johnson
Contact Form 7 Extension For Mailchimp
2025-12-30T10:47:50.363Z 2026-01-20T14:28:29.309Z
CVE-2025-68991
6.1 (3.1)
WordPress BWL Pro Voting Manager plugin <= 1.4.9 - Cro… xenioushk
BWL Pro Voting Manager
2025-12-30T10:47:50.729Z 2026-01-20T14:28:29.297Z
CVE-2025-68987
9.8 (3.1)
WordPress Cinerama - A WordPress Theme for Movie Studi… Edge-Themes
Cinerama - A WordPress Theme for Movie Studios and Filmmakers
2025-12-30T10:47:49.947Z 2026-01-20T14:28:29.291Z
CVE-2025-68984
9.8 (3.1)
WordPress Puca theme <= 2.6.39 - Local File Inclusion … thembay
Puca
2025-12-30T10:47:49.577Z 2026-01-20T14:28:29.289Z
CVE-2025-68988
7.5 (3.1)
WordPress E-Invoice App Malaysia plugin <= 1.1.0 - Sen… o2oe
E-Invoice App Malaysia
2025-12-30T10:47:50.131Z 2026-01-20T14:28:29.267Z
CVE-2025-68985
9.8 (3.1)
WordPress Aora theme <= 1.3.15 - Local File Inclusion … thembay
Aora
2025-12-30T10:47:49.767Z 2026-01-20T14:28:29.253Z
CVE-2025-68983
9.8 (3.1)
WordPress Greenmart theme <= 4.2.11 - Local File Inclu… thembay
Greenmart
2025-12-30T10:47:49.392Z 2026-01-20T14:28:29.217Z
CVE-2025-68876
7.1 (3.1)
WordPress Invelity SPS connect plugin <= 1.0.8 - Refle… INVELITY
Invelity SPS connect
2025-12-29T16:05:23.287Z 2026-01-20T14:28:29.160Z
CVE-2025-68982
8.1 (3.1)
WordPress DesignThemes LMS Addon plugin <= 2.6 - Broke… designthemes
DesignThemes LMS Addon
2025-12-30T10:47:49.216Z 2026-01-20T14:28:29.159Z
CVE-2025-68897
9.9 (3.1)
WordPress IF AS Shortcode plugin <= 1.2 - Remote Code … Mohammad I. Okfie
IF AS Shortcode
2025-12-29T15:55:13.564Z 2026-01-20T14:28:29.145Z
CVE-2025-68887
7.1 (3.1)
WordPress WP-BusinessDirectory plugin <= 3.1.5 - Cross… CMSJunkie - WordPress Business Directory Plugins
WP-BusinessDirectory
2026-01-08T09:17:53.686Z 2026-01-20T14:28:29.134Z
CVE-2025-68878
7.1 (3.1)
WordPress Advanced Custom CSS plugin <= 1.1.0 - Reflec… Prasadkirpekar
Advanced Custom CSS
2025-12-29T16:00:20.652Z 2026-01-20T14:28:29.131Z
CVE-2025-68889
7.1 (3.1)
WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripti… Pinpoll
Pinpoll
2026-01-08T09:17:53.868Z 2026-01-20T14:28:29.129Z
CVE-2025-68879
7.1 (3.1)
WordPress Content Grid Slider plugin <= 1.5 - Reflecte… Councilsoft
Content Grid Slider
2025-12-29T15:58:57.851Z 2026-01-20T14:28:29.125Z
CVE-2025-68974
9.8 (3.1)
WordPress WordPress Social Login and Register plugin <… miniOrange
WordPress Social Login and Register
2025-12-30T10:47:47.632Z 2026-01-20T14:28:29.124Z
CVE-2025-68874
7.1 (3.1)
WordPress Visitor Stats Widget plugin <= 1.5.0 - Refle… Shahjada
Visitor Stats Widget
2026-01-08T09:17:52.109Z 2026-01-20T14:28:29.122Z
CVE-2025-68893
4.9 (3.1)
WordPress WordPress Image shrinker plugin <= 1.1.0 - S… HETWORKS
WordPress Image shrinker
2025-12-29T15:56:47.504Z 2026-01-20T14:28:29.120Z
CVE-2025-68980
8.1 (3.1)
WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Bro… designthemes
WeDesignTech Portfolio
2025-12-30T10:47:48.858Z 2026-01-20T14:28:29.119Z
CVE-2025-68890
6.1 (3.1)
WordPress e-shops plugin <= 1.0.4 - Reflected Cross Si… hands01
e-shops
2026-01-08T09:17:54.055Z 2026-01-20T14:28:29.113Z
CVE-2025-68979
8.1 (3.1)
WordPress Google Calendar Events plugin <= 3.5.9 - Ins… SimpleCalendar
Google Calendar Events
2025-12-30T10:47:48.678Z 2026-01-20T14:28:29.112Z
CVE-2025-68981
8.8 (3.1)
WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 … designthemes
HomeFix Elementor Portfolio
2025-12-30T10:47:49.035Z 2026-01-20T14:28:29.097Z
CVE-2025-68877
7.5 (3.1)
WordPress CedCommerce Integration for Good Market plug… CedCommerce
CedCommerce Integration for Good Market
2025-12-29T16:03:22.206Z 2026-01-20T14:28:29.096Z
CVE-2025-68875
5.4 (3.1)
WordPress Flaming Password Reset plugin <= 1.0.3 - Cro… jcaruso001
Flaming Password Reset
2026-01-08T09:17:52.299Z 2026-01-20T14:28:29.096Z
ID CVSS Description Vendor Product Published Updated
CVE-2024-53695
6.3 (4.0)
HBS 3 Hybrid Backup Sync QNAP Systems Inc.
HBS 3 Hybrid Backup Sync
2025-03-07T16:13:42.883Z 2025-03-07T17:54:53.580Z
CVE-2026-21433
7.7 (3.1)
Emlog vulnerable to Server-Side Request Forgery (SSRF) emlog
emlog
2026-01-02T19:00:22.611Z 2026-01-05T20:37:52.330Z
CVE-2025-51567
9.1 (3.1)
A SQL Injection was found in the /exam/user/profi… n/a
n/a
2026-01-12T00:00:00.000Z 2026-01-12T20:06:58.653Z
CVE-2025-64677
8.2 (3.1)
Office Out-of-Box Experience Spoofing Vulnerability Microsoft
Office Out-of-Box Experience
2025-12-18T22:02:08.421Z 2026-02-20T15:59:43.534Z
CVE-2025-64675
8.3 (3.1)
Azure Cosmos DB Spoofing Vulnerability Microsoft
Azure Cosmos DB
2025-12-18T23:15:31.241Z 2026-02-20T15:59:42.938Z
CVE-2023-25797
5.9 (3.1)
WordPress vSlider Multi Image Slider for WordPress Plu… Mr.Vibe
vSlider Multi Image Slider for WordPress
2023-05-03T10:25:10.749Z 2025-02-19T21:32:39.319Z
CVE-2023-3604
7.5 (3.1)
Change WP Admin < 1.1.4 - Secret Login Page Disclosure Unknown
Change WP Admin Login
2023-08-21T12:29:51.285Z 2024-10-02T17:41:31.835Z
CVE-2024-43947
5.4 (3.1)
WordPress WP Armour Extended plugin <= 1.26 - Cross Si… Dinesh Karki
WP Armour Extended
2024-08-29T18:15:56.699Z 2024-08-29T18:55:14.355Z
CVE-2025-52598
6.3 (4.0)
Insufficient certificate validation Hanwha Vision Co., Ltd.
QNV-C8012
2025-12-26T04:07:19.958Z 2025-12-26T15:15:22.694Z
CVE-2025-10568
5.2 (4.0)
HyperX NGENUITY - Arbitrary Code Execution HP Inc.
HyperX NGENUITY
2025-09-19T19:39:08.802Z 2025-09-19T19:57:00.834Z
CVE-2026-21432
6.8 (4.0)
Emlog has stored Cross-site Scripting issue that can l… emlog
emlog
2026-01-02T18:58:38.050Z 2026-01-05T20:37:57.632Z
CVE-2026-21431
2 (4.0)
Emlog vulnerable to stored Cross-site Scripting via im… emlog
emlog
2026-01-02T18:49:03.202Z 2026-01-05T20:38:04.182Z
CVE-2026-21429
2 (4.0)
Emlog has Broken Access Control (BAC) emlog
emlog
2026-01-02T17:23:17.252Z 2026-01-02T21:05:56.458Z
CVE-2024-48014
7.5 (3.1)
Dell BSAFE Micro Edition Suite, versions prior to… Dell
BSAFE Micro Edition Suite
2025-09-25T15:08:52.140Z 2025-09-25T16:05:40.970Z
CVE-2025-26333
5.9 (3.1)
Dell BSAFE Crypto-J generates an error message th… Dell
BSAFE Crypto-J
2025-09-25T15:16:41.383Z 2025-10-24T13:55:19.877Z
CVE-2025-43993
7.8 (3.1)
Dell Wireless 5932e and Qualcomm Snapdragon X62 F… Dell
Wireless 5932e
2025-09-25T19:38:00.845Z 2025-09-26T17:39:48.405Z
CVE-2025-43943
6.7 (3.1)
Dell Cloud Disaster Recovery, version(s) prior to… Dell
Cloud Disaster Recovery
2025-09-25T15:22:10.962Z 2025-09-25T16:06:17.102Z
CVE-2025-10940
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
Total.js CMS Layout admin layouts_save cross site scripting Total.js
CMS
2025-09-25T10:32:05.445Z 2025-09-25T13:20:14.602Z
CVE-2025-26482
4.9 (3.1)
Dell PowerEdge Server BIOS and Dell iDRAC9, all v… Dell
PowerEdge R770
2025-09-25T21:11:43.372Z 2025-09-26T17:39:20.743Z
CVE-2025-11019
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
Total.js CMS Files Menu cross site scripting Total.js
CMS
2025-09-26T14:32:07.098Z 2025-09-26T15:01:48.580Z
CVE-2025-10578
5.8 (4.0)
HP Support Assistant - Potential Escalation of Privilege HP Inc.
HP Support Assistant
2025-10-01T18:44:49.949Z 2026-02-26T17:48:24.942Z
CVE-2025-11341
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
Jinher OA type xml external entity reference Jinher
OA
2025-10-06T17:02:05.698Z 2025-10-06T19:58:06.825Z
CVE-2025-42886
6.1 (3.1)
Reflected Cross-Site Scripting (XSS) vulnerability in … SAP_SE
SAP Business Connector
2025-11-11T00:14:33.364Z 2025-11-12T20:11:23.922Z
CVE-2025-42892
6.8 (3.1)
OS Command Injection vulnerability in SAP Business Connector SAP_SE
SAP Business Connector
2025-11-11T00:17:18.198Z 2025-11-12T20:10:20.782Z
CVE-2025-42893
6.1 (3.1)
Open Redirect vulnerability in SAP Business Connector SAP_SE
SAP Business Connector
2025-11-11T00:17:34.419Z 2025-11-12T20:10:13.708Z
CVE-2025-42894
6.8 (3.1)
Path Traversal vulnerability in SAP Business Connector SAP_SE
SAP Business Connector
2025-11-11T00:19:22.282Z 2026-02-26T17:46:57.500Z
CVE-2025-68471
6.5 (3.1)
Avahi has a reachable assertion in lookup_start avahi
avahi
2026-01-12T17:39:57.416Z 2026-01-12T18:42:26.343Z
CVE-2026-0514
6.1 (3.1)
Cross-Site Scripting (XSS) vulnerability in SAP Busine… SAP_SE
SAP Business Connector
2026-01-13T01:16:03.501Z 2026-01-13T14:38:19.675Z
CVE-2025-68468
6.5 (3.1)
Avahi has a reachable assertion in lookup_multicast_callback avahi
avahi
2026-01-12T17:38:10.492Z 2026-01-12T18:41:50.855Z
CVE-2025-68276
5.5 (3.1)
Avahi has a reachable assertion in avahi_wide_area_sca… avahi
avahi
2026-01-12T17:31:49.652Z 2026-01-12T18:41:22.098Z
ID Description Published Updated
fkie_cve-2024-53695 A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited,… 2025-03-07T17:15:20.250 2026-01-16T18:15:07.420
fkie_cve-2026-21433 Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable… 2026-01-02T19:15:48.187 2026-01-16T18:11:24.493
fkie_cve-2025-51567 A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, … 2026-01-12T20:15:52.763 2026-01-16T17:31:06.853
fkie_cve-2025-64677 Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-… 2025-12-18T22:16:01.077 2026-01-16T17:28:14.047
fkie_cve-2025-64675 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmo… 2025-12-19T00:15:52.933 2026-01-16T17:25:03.713
fkie_cve-2023-25797 Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for Wor… 2023-05-03T11:15:13.987 2026-01-16T17:21:03.120
fkie_cve-2023-3604 The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page … 2023-08-21T17:15:49.260 2026-01-16T17:20:15.940
fkie_cve-2024-43947 Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affec… 2024-08-29T19:15:08.653 2026-01-16T17:19:37.233
fkie_cve-2025-52598 Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Sy… 2025-12-26T05:16:07.383 2026-01-16T17:18:13.917
fkie_cve-2025-10568 HyperX NGENUITY software is potentially vulnerable to arbitrary code execution. HP is releasing upd… 2025-09-19T20:15:38.317 2026-01-16T17:16:48.903
fkie_cve-2026-21432 Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting v… 2026-01-02T19:15:48.020 2026-01-16T17:13:09.323
fkie_cve-2026-21431 Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting v… 2026-01-02T19:15:47.857 2026-01-16T17:13:01.813
fkie_cve-2026-21429 Emlog is an open source website building system. In version 2.5.23, the admin can set controls whic… 2026-01-02T18:15:55.110 2026-01-16T17:11:08.020
fkie_cve-2024-48014 Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerabil… 2025-09-25T16:15:30.420 2026-01-16T17:08:33.163
fkie_cve-2025-26333 Dell BSAFE Crypto-J generates an error message that includes sensitive information about its enviro… 2025-09-25T16:15:33.340 2026-01-16T17:07:01.633
fkie_cve-2025-43993 Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2… 2025-09-25T20:15:35.080 2026-01-16T17:05:29.587
fkie_cve-2025-43943 Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of S… 2025-09-25T16:15:34.150 2026-01-16T17:05:06.013
fkie_cve-2025-10940 A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function lay… 2025-09-25T11:15:45.757 2026-01-16T17:04:27.720
fkie_cve-2025-26482 Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulner… 2025-09-25T21:15:31.720 2026-01-16T17:04:00.983
fkie_cve-2025-11019 A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of th… 2025-09-26T15:16:01.620 2026-01-16T17:01:35.883
fkie_cve-2025-10578 A potential security vulnerability has been identified in the HP Support Assistant for versions pri… 2025-10-01T19:15:34.440 2026-01-16T16:57:50.780
fkie_cve-2025-11341 A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the… 2025-10-06T17:16:04.900 2026-01-16T16:55:30.203
fkie_cve-2025-42886 Due to a Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthent… 2025-11-11T01:15:37.200 2026-01-16T16:53:49.357
fkie_cve-2025-42892 Due to an OS Command Injection vulnerability in SAP Business Connector, an authenticated attacker w… 2025-11-11T01:15:37.990 2026-01-16T16:53:40.327
fkie_cve-2025-42893 Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could … 2025-11-11T01:15:38.147 2026-01-16T16:53:29.770
fkie_cve-2025-42894 Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an ad… 2025-11-11T01:15:38.307 2026-01-16T16:53:15.283
fkie_cve-2025-68471 Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protoc… 2026-01-12T18:15:48.327 2026-01-16T16:53:04.697
fkie_cve-2026-0514 Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated att… 2026-01-13T02:15:54.113 2026-01-16T16:53:03.113
fkie_cve-2025-68468 Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protoc… 2026-01-12T18:15:48.173 2026-01-16T16:52:04.260
fkie_cve-2025-68276 Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protoc… 2026-01-12T18:15:47.560 2026-01-16T16:51:03.383
ID Severity Description Published Updated
ghsa-gc92-cfvx-57qj
In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_vtpm_proxy: fix a rac… 2025-12-30T15:30:35Z 2025-12-30T15:30:36Z
ghsa-9rp2-rcxm-vpww
In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix nvdimm registrat… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-8m2v-q2gj-8gq3
In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the z… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-87qv-rjw5-q2ph
In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Free … 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-7984-m77j-cx8w
In the Linux kernel, the following vulnerability has been resolved: net/smc: use smc_lgr_list.lock… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-5jpm-q7cg-9gjh
8.8 (3.1)
7.4 (4.0)
A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemot… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-5fqh-8g63-525q
In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer derefere… 2025-12-30T15:30:35Z 2025-12-30T15:30:36Z
ghsa-56vj-hg2h-5wm9
8.8 (3.1)
7.4 (4.0)
A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown funct… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-52c3-vccj-p4f5
In the Linux kernel, the following vulnerability has been resolved: scsi: message: mptlan: Fix use… 2025-12-30T15:30:35Z 2025-12-30T15:30:36Z
ghsa-3rp4-j8x5-r3q5
In the Linux kernel, the following vulnerability has been resolved: arm64: set __exception_irq_ent… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-2jx2-7jpf-5pr4
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check retu… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-2fjh-g9hr-2x3g
In the Linux kernel, the following vulnerability has been resolved: refscale: Fix uninitalized use… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-2339-c258-4747
3.5 (3.1)
2.0 (4.0)
A security flaw has been discovered in sunhailin12315 product-review 商品评价系统 up to 91ead6890b4065bb4… 2025-12-30T15:30:36Z 2025-12-30T15:30:36Z
ghsa-xp6q-4ch5-xqhr
In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea bloc… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-v9cw-759q-rvpj
In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btree_cache_wait… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-rj9v-3cx4-5wvc
In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underfl… 2025-12-30T15:30:34Z 2025-12-30T15:30:35Z
ghsa-qw59-8j4j-9xwf
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix NULL dereferen… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-pg5c-ggpq-f3pm
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix memory leak … 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-p36c-jp35-qgrh
In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix buffer overfl… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-h862-m8hq-w46v
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on C… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-gwwq-p8rf-2xr4
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy… 2025-12-30T15:30:34Z 2025-12-30T15:30:35Z
ghsa-f7xx-6pgx-v4hg
In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks … 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-cw6q-jwcq-fg6h
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-cpq6-27xg-r565
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak of md t… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-8w34-jjgr-cq87
In the Linux kernel, the following vulnerability has been resolved: vduse: fix NULL pointer derefe… 2025-12-30T15:30:34Z 2025-12-30T15:30:35Z
ghsa-7xqj-95mq-2v2g
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on C… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-78x5-gg4g-8mmw
In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when conver… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-74ph-x5j9-xhpq
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_bcm7271: fix leak… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ghsa-6v87-5qgj-v74j
In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on b… 2025-12-30T15:30:34Z 2025-12-30T15:30:35Z
ghsa-68cr-cmrr-85gj
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Get source vCPUs fro… 2025-12-30T15:30:35Z 2025-12-30T15:30:35Z
ID Severity Description Package Published Updated
ID Description Type
ID Description Updated
gsd-2024-25134 The format of the source doesn't require a description, click on the link for more details. 2024-02-06T06:02:56.090105Z
gsd-2024-25125 Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines… 2024-02-06T06:02:56.089278Z
gsd-2024-25120 TYPO3 is an open source PHP based web content management system released under the GNU GP… 2024-02-06T06:02:56.088570Z
gsd-2024-25104 The format of the source doesn't require a description, click on the link for more details. 2024-02-06T06:02:56.083015Z
gsd-2024-25092 The format of the source doesn't require a description, click on the link for more details. 2024-02-06T06:02:56.079405Z
gsd-2024-25105 The format of the source doesn't require a description, click on the link for more details. 2024-02-06T06:02:56.077539Z
gsd-2024-25126 Rack is a modular Ruby web server interface. Carefully crafted content type headers can c… 2024-02-06T06:02:56.075522Z
gsd-2024-25133 The format of the source doesn't require a description, click on the link for more details. 2024-02-06T06:02:56.074866Z
gsd-2024-25130 Tuleap is an open source suite to improve management of software developments and collabo… 2024-02-06T06:02:56.073560Z
gsd-2024-25102 This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographi… 2024-02-06T06:02:56.072848Z
gsd-2024-25096 Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Can… 2024-02-06T06:02:56.071808Z
gsd-2024-25137 In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size con… 2024-02-06T06:02:56.070177Z
gsd-2024-25124 Fiber is a web framework written in go. Prior to version 2.52.1, the CORS middleware allo… 2024-02-06T06:02:56.069773Z
gsd-2024-25129 The CodeQL CLI repo holds binaries for the CodeQL command line interface (CLI). Prior to … 2024-02-06T06:02:56.068737Z
gsd-2024-25138 In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as pla… 2024-02-06T06:02:56.067878Z
gsd-2024-25122 sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs wi… 2024-02-06T06:02:56.062091Z
gsd-2021-46902 An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.02… 2024-02-05T06:05:19.466263Z
gsd-2021-46903 An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.02… 2024-02-05T06:05:19.212883Z
gsd-2020-36773 Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in device… 2024-02-05T06:03:40.974933Z
gsd-2024-24972 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:26.972855Z
gsd-2024-23485 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:26.677149Z
gsd-2024-23906 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:26.633201Z
gsd-2024-23194 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:26.487103Z
gsd-2024-23317 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:26.397630Z
gsd-2024-22383 Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 re… 2024-02-05T06:03:25.692494Z
gsd-2024-22387 The format of the source doesn't require a description, click on the link for more details. 2024-02-05T06:03:25.486804Z
gsd-2024-1222 This allows attackers to use a maliciously formed API request to gain access to an API au… 2024-02-05T06:03:25.374580Z
gsd-2024-1223 This vulnerability potentially allows unauthorized enumeration of information from the em… 2024-02-05T06:03:25.371612Z
gsd-2024-1220 A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Seri… 2024-02-05T06:03:25.326923Z
gsd-2024-1221 This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed usin… 2024-02-05T06:03:25.320939Z
ID Description Published Updated
mal-2025-183155 Malicious code in item-atm-kujauhubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183154 Malicious code in item-atm-kujai (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183153 Malicious code in item-atim-kuu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183152 Malicious code in item-atim-kujaulahubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183151 Malicious code in item-atim-kujaubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183150 Malicious code in item-atim-kujalahubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183149 Malicious code in item-atim-kujahubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183148 Malicious code in item-atim-kujabi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183147 Malicious code in item-atim-kujab (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183146 Malicious code in item-atim-kujaahubi (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183145 Malicious code in item-atim-kuja (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183144 Malicious code in item-atim-kubusui (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183143 Malicious code in item-atim-kubusu (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183142 Malicious code in item-atim-kubuskui (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183141 Malicious code in item-atim-kubuskuaia (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183140 Malicious code in item-atim-kubuskuai (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183139 Malicious code in item-atim-kubuskiumabika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183138 Malicious code in item-atim-kubuskiuabika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183137 Malicious code in item-atim-kubusiumabika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183136 Malicious code in item-atim-kubusisazika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183135 Malicious code in item-atim-kubusisaszika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183134 Malicious code in item-atim-kubusisasizika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183133 Malicious code in item-atim-kubusisasidzika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183132 Malicious code in item-atim-kubusisasiduzika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183131 Malicious code in item-atim-kubusisaka (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183130 Malicious code in item-atim-kubusimabika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183129 Malicious code in item-atim-kubusibika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183128 Malicious code in item-atim-kubusiaka (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183127 Malicious code in item-atim-kubusiabika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
mal-2025-183126 Malicious code in item-atim-kubusbika (npm) 2025-11-12T22:25:03Z 2025-11-12T22:25:03Z
ID Description Published Updated
rhsa-2023:3138 Red Hat Security Advisory: firefox security update 2023-05-16T18:42:44+00:00 2025-11-21T18:40:41+00:00
rhsa-2023:3152 Red Hat Security Advisory: thunderbird security update 2023-05-16T19:43:22+00:00 2025-11-21T18:40:40+00:00
rhsa-2023:3151 Red Hat Security Advisory: thunderbird security update 2023-05-16T19:46:54+00:00 2025-11-21T18:40:40+00:00
rhsa-2023:3150 Red Hat Security Advisory: thunderbird security update 2023-05-16T19:43:30+00:00 2025-11-21T18:40:40+00:00
rhsa-2023:3149 Red Hat Security Advisory: thunderbird security update 2023-05-16T19:42:17+00:00 2025-11-21T18:40:39+00:00
rhsa-2023:3148 Red Hat Security Advisory: libreswan security update 2023-05-16T19:43:15+00:00 2025-11-21T18:40:39+00:00
rhsa-2023:3147 Red Hat Security Advisory: apr-util security update 2023-05-16T19:37:06+00:00 2025-11-21T18:40:39+00:00
rhsa-2023:3146 Red Hat Security Advisory: apr-util security update 2023-05-16T19:32:35+00:00 2025-11-21T18:40:39+00:00
rhsa-2023:3145 Red Hat Security Advisory: apr-util security update 2023-05-16T19:39:09+00:00 2025-11-21T18:40:38+00:00
rhsa-2023:3143 Red Hat Security Advisory: firefox security update 2023-05-16T19:07:29+00:00 2025-11-21T18:40:38+00:00
rhsa-2023:3104 Red Hat Security Advisory: emacs security update 2023-05-16T10:16:57+00:00 2025-11-21T18:40:38+00:00
rhsa-2023:3142 Red Hat Security Advisory: firefox security update 2023-05-16T18:56:04+00:00 2025-11-21T18:40:37+00:00
rhsa-2023:3141 Red Hat Security Advisory: firefox security update 2023-05-16T19:06:37+00:00 2025-11-21T18:40:37+00:00
rhsa-2023:3140 Red Hat Security Advisory: firefox security update 2023-05-16T18:57:24+00:00 2025-11-21T18:40:37+00:00
rhsa-2023:3139 Red Hat Security Advisory: firefox security update 2023-05-16T18:42:57+00:00 2025-11-21T18:40:36+00:00
rhsa-2023:3137 Red Hat Security Advisory: firefox security update 2023-05-16T18:54:52+00:00 2025-11-21T18:40:36+00:00
rhsa-2023:3136 Red Hat Security Advisory: java-1.8.0-ibm security update 2023-05-16T18:17:34+00:00 2025-11-21T18:40:36+00:00
rhsa-2023:3109 Red Hat Security Advisory: apr-util security update 2023-05-16T10:52:59+00:00 2025-11-21T18:40:35+00:00
rhsa-2023:3108 Red Hat Security Advisory: webkit2gtk3 security update 2023-05-16T10:52:44+00:00 2025-11-21T18:40:35+00:00
rhsa-2023:3107 Red Hat Security Advisory: libreswan security update 2023-05-16T10:52:30+00:00 2025-11-21T18:40:35+00:00
rhsa-2023:3106 Red Hat Security Advisory: curl security and bug fix update 2023-05-16T10:16:55+00:00 2025-11-21T18:40:34+00:00
rhsa-2023:3097 Red Hat Security Advisory: gssntlmssp security update 2023-05-16T10:07:29+00:00 2025-11-21T18:40:33+00:00
rhsa-2023:3095 Red Hat Security Advisory: libreswan security and bug fix update 2023-05-16T10:07:37+00:00 2025-11-21T18:40:33+00:00
rhsa-2023:3087 Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update 2023-05-16T10:09:49+00:00 2025-11-21T18:40:33+00:00
rhsa-2023:3082 Red Hat Security Advisory: pcs security and bug fix update 2023-05-16T10:03:08+00:00 2025-11-21T18:40:32+00:00
rhsa-2023:3067 Red Hat Security Advisory: autotrace security update 2023-05-16T08:47:46+00:00 2025-11-21T18:40:31+00:00
rhsa-2023:3042 Red Hat Security Advisory: emacs security and bug fix update 2023-05-16T09:08:37+00:00 2025-11-21T18:40:30+00:00
rhsa-2023:3018 Red Hat Security Advisory: libarchive security update 2023-05-16T09:04:13+00:00 2025-11-21T18:40:30+00:00
rhsa-2023:3000 Red Hat Security Advisory: dhcp security and bug fix update 2023-05-16T08:42:24+00:00 2025-11-21T18:40:30+00:00
rhsa-2023:2987 Red Hat Security Advisory: samba security, bug fix, and enhancement update 2023-05-16T09:05:30+00:00 2025-11-21T18:40:30+00:00
ID Description Published Updated
msrc_cve-2020-11984 Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE 2020-08-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11869 An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process resulting in a denial of service. 2020-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11725 snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line which later affects a private_size*count multiplication for unspecified "interesting side effects." NOTE: kernel engineers dispute this finding because it could be relevant only if new callers were added that were unfamiliar with the misuse of the info->owner field to represent data unrelated to the "owner" concept. The existing callers SNDRV_CTL_IOCTL_ELEM_ADD and SNDRV_CTL_IOCTL_ELEM_REPLACE have been designed to misuse the info->owner field in a safe way 2020-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11565 An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user so triggering the bug does not grant any powers not already held.” 2020-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11494 An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data potentially containing sensitive information from kernel stack memory if the configuration lacks CONFIG_INIT_STACK_ALL aka CID-b9258a2cece4. 2020-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11102 hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length. 2020-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-11080 Denial of service in nghttp2 2020-06-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-10761 An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service. 2020-06-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-10744 An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18 2.8.12 and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5 3.5.6 and 3.6.4 as well as previous versions are affected. 2020-05-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-10702 A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU. 2020-06-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2020-10029 The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. 2020-03-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9169 In the GNU C Library (aka glibc or libc6) through 2.29 proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9077 An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9076 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9075 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9074 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c when called from pex64_get_runtime_function in pei-x86_64.c. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9073 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9072 An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-9071 An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-7309 In the GNU C Library (aka glibc or libc6) through 2.29 the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled. 2019-02-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-6462 An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c related to _arc_max_angle_for_tolerance_normalized. 2019-01-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-6461 An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c. 2019-01-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). 2019-03-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-3844 It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the GID will be recycled. 2019-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-3843 It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the UID/GID will be recycled. 2019-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-3842 In systemd before v242-rc4 it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker in some particular configurations to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". 2019-04-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-20892 net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions but might not affect an upstream release. 2020-06-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-20838 libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled and \X or \R has more than one fixed quantifier a related issue to CVE-2019-20454. 2020-06-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. 2020-01-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
msrc_cve-2019-20386 An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command a memory leak may occur. 2020-01-02T00:00:00.000Z 2020-08-18T00:00:00.000Z
ID Description Updated
var-201510-0151 com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 all… 2025-04-13T22:18:36.347000Z
var-201505-0082 WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, all… 2025-04-13T22:18:29.236000Z
var-201503-0090 Off-by-one error in IOAcceleratorFamily in Apple OS X through 10.10.2 allows attackers to… 2025-04-13T22:18:24.746000Z
var-201407-0070 Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachm… 2025-04-13T22:18:24.266000Z
var-201403-0199 TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require us… 2025-04-13T22:18:19.948000Z
var-201504-0100 Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-depen… 2025-04-13T22:18:14.567000Z
var-201610-0264 Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to… 2025-04-13T22:18:14.402000Z
var-201510-0180 CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows re… 2025-04-13T22:18:14.364000Z
var-201407-0096 Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecifi… 2025-04-13T22:17:40.557000Z
var-201404-0200 WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attacker… 2025-04-13T22:17:40.509000Z
var-201410-1114 Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Securit… 2025-04-13T22:17:39.957000Z
var-201605-0034 Black Box AlertWerks ServSensor with firmware before SP473, AlertWerks ServSensor Junior … 2025-04-13T22:17:36.594000Z
var-201403-0386 The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obta… 2025-04-13T22:17:05.470000Z
var-201509-0421 The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Cont… 2025-04-13T22:17:05.418000Z
var-201507-0413 TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remot… 2025-04-13T22:16:31.942000Z
var-201412-0573 WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, all… 2025-04-13T22:16:30.287000Z
var-201409-0514 Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remot… 2025-04-13T22:16:29.372000Z
var-201407-0515 The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy … 2025-04-13T22:16:25.032000Z
var-201510-0162 The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize tha… 2025-04-13T22:16:10.773000Z
var-201505-0282 Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.… 2025-04-13T22:15:36.339000Z
var-201508-0448 Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing… 2025-04-13T22:15:35.305000Z
var-201509-0079 IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a… 2025-04-13T22:15:03.133000Z
var-201409-0391 The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, w… 2025-04-13T22:15:03.015000Z
var-201409-0500 IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit… 2025-04-13T22:14:56.545000Z
var-201409-0512 Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users … 2025-04-13T22:14:54.676000Z
var-201501-0276 Spotlight in Apple OS X before 10.10.2 does not enforce the Mail "Load remote content in … 2025-04-13T22:14:54.487000Z
var-201502-0411 Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS… 2025-04-13T22:14:47.759000Z
var-201404-0206 WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attacker… 2025-04-13T22:14:44.579000Z
var-201409-0460 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before … 2025-04-13T22:14:43.922000Z
var-201404-0223 WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attacker… 2025-04-13T22:14:42.602000Z
ID Description Updated
ID Description Published Updated
suse-su-2020:1794-1 Security update for mutt 2020-06-29T09:10:31Z 2020-06-29T09:10:31Z
suse-su-2020:1792-1 Security update for python3-requests 2020-06-26T12:07:54Z 2020-06-26T12:07:54Z
suse-su-2020:1791-1 Security update for tomcat 2020-06-26T07:43:57Z 2020-06-26T07:43:57Z
suse-su-2020:1790-1 Security update for tomcat 2020-06-26T07:42:43Z 2020-06-26T07:42:43Z
suse-su-2020:1789-1 Security update for tomcat 2020-06-26T07:42:24Z 2020-06-26T07:42:24Z
suse-su-2020:1788-1 Security update for tomcat 2020-06-26T07:41:55Z 2020-06-26T07:41:55Z
suse-su-2020:1784-1 Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP3) 2020-06-26T07:01:51Z 2020-06-26T07:01:51Z
suse-su-2020:1781-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP3) 2020-06-26T07:01:14Z 2020-06-26T07:01:14Z
suse-su-2020:1779-1 Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) 2020-06-26T07:00:50Z 2020-06-26T07:00:50Z
suse-su-2020:1775-1 Security update for the Linux Kernel (Live Patch 0 for SLE 12 SP5) 2020-06-26T06:35:45Z 2020-06-26T06:35:45Z
suse-su-2020:1773-1 Security update for curl 2020-06-26T06:06:20Z 2020-06-26T06:06:20Z
suse-su-2020:1772-1 Security update for unbound 2020-06-26T06:05:15Z 2020-06-26T06:05:15Z
suse-su-2020:1771-1 Security update for mutt 2020-06-26T06:04:41Z 2020-06-26T06:04:41Z
suse-su-2020:1770-1 Security update for squid 2020-06-26T06:03:57Z 2020-06-26T06:03:57Z
suse-su-2020:1769-1 Security update for squid 2020-06-26T06:03:27Z 2020-06-26T06:03:27Z
suse-su-2020:1767-1 Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2) 2020-06-25T17:08:55Z 2020-06-25T17:08:55Z
suse-su-2020:1764-1 Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP2) 2020-06-25T17:08:12Z 2020-06-25T17:08:12Z
suse-su-2020:1758-1 Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP4) 2020-06-25T16:28:56Z 2020-06-25T16:28:56Z
suse-su-2020:1754-1 Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP4) 2020-06-25T16:28:32Z 2020-06-25T16:28:32Z
suse-su-2020:1749-1 Security update for tigervnc 2020-06-25T16:27:45Z 2020-06-25T16:27:45Z
suse-su-2020:1748-1 Security update for ceph 2020-06-25T13:10:25Z 2020-06-25T13:10:25Z
suse-su-2020:1747-1 Security update for ceph 2020-06-25T13:06:55Z 2020-06-25T13:06:55Z
suse-su-2020:14409-1 Security update for curl 2020-06-24T07:45:33Z 2020-06-24T07:45:33Z
suse-su-2020:1735-1 Security update for curl 2020-06-24T07:44:27Z 2020-06-24T07:44:27Z
suse-su-2020:1734-1 Security update for curl 2020-06-24T07:44:03Z 2020-06-24T07:44:03Z
suse-su-2020:1733-1 Security update for curl 2020-06-24T07:43:40Z 2020-06-24T07:43:40Z
suse-su-2020:1732-1 Security update for curl 2020-06-24T07:43:22Z 2020-06-24T07:43:22Z
suse-su-2020:1731-1 Security update for libreoffice 2020-06-24T07:42:05Z 2020-06-24T07:42:05Z
suse-su-2019:2900-2 Security update for libssh2_org 2020-06-24T07:41:39Z 2020-06-24T07:41:39Z
suse-su-2020:1714-1 Security update for php5 2020-06-23T11:34:01Z 2020-06-23T11:34:01Z
ID Description Published Updated
cnvd-2024-37453 wolfSSL存在未明漏洞(CNVD-2024-37453) 2024-02-28 2024-09-05
cnvd-2024-37452 wolfSSL存在未明漏洞(CNVD-2024-37452) 2024-03-14 2024-09-05
cnvd-2024-37451 wolfSSL数组索引验证错误漏洞 2024-03-27 2024-09-05
cnvd-2024-37450 wolfSSL越界读取漏洞 2024-08-29 2024-09-05
cnvd-2024-37449 wolfSSL存在未明漏洞(CNVD-2024-37449) 2024-08-29 2024-09-05
cnvd-2024-37448 wolfSSL存在未明漏洞(CNVD-2024-37448) 2024-08-29 2024-09-05
cnvd-2024-37447 WolfSSL存在未明漏洞(CNVD-2024-37447) 2024-09-02 2024-09-05
cnvd-2024-37446 wolfSSL存在未明漏洞(CNVD-2024-37446) 2024-09-02 2024-09-05
cnvd-2024-37445 WolfSSL存在未明漏洞(CNVD-2024-37445) 2024-09-02 2024-09-05
cnvd-2024-37444 Kashipara Music Management System SQL注入漏洞 2024-08-23 2024-09-05
cnvd-2024-37443 Kashipara Music Management System SQL注入漏洞(CNVD-2024-37443) 2024-08-23 2024-09-05
cnvd-2024-37442 Kashipara Music Management System SQL注入漏洞(CNVD-2024-37442) 2024-08-23 2024-09-05
cnvd-2024-37441 Kashipara Music Management System SQL注入漏洞(CNVD-2024-37441) 2024-08-23 2024-09-05
cnvd-2024-37440 Kashipara Music Management System文件上传漏洞 2024-08-23 2024-09-05
cnvd-2024-37439 Kashipara Music Management System文件上传漏洞(CNVD-2024-37439) 2024-08-23 2024-09-05
cnvd-2024-37438 Kashipara Music Management System文件上传漏洞(CNVD-2024-37438) 2024-08-23 2024-09-05
cnvd-2024-37437 Kashipara Music Management System文件上传漏洞(CNVD-2024-37437) 2024-08-23 2024-09-05
cnvd-2024-37436 Kashipara Music Management System SQL注入漏洞(CNVD-2024-37436) 2024-08-23 2024-09-05
cnvd-2024-37435 Kashipara Music Management System SQL注入漏洞(CNVD-2024-37435) 2024-08-23 2024-09-05
cnvd-2024-37434 Kashipara Music Management System跨站请求伪造漏洞 2024-08-28 2024-09-05
cnvd-2024-37433 Kashipara Music Management System跨站脚本漏洞 2024-08-29 2024-09-05
cnvd-2024-37432 Kashipara Music Management System跨站脚本漏洞(CNVD-2024-37432) 2024-08-29 2024-09-05
cnvd-2024-37431 Kashipara Music Management System跨站脚本漏洞(CNVD-2024-37431) 2024-08-29 2024-09-05
cnvd-2024-37430 Kashipara Music Management System跨站脚本漏洞(CNVD-2024-37430) 2024-08-29 2024-09-05
cnvd-2024-37429 Kashipara Music Management System跨站请求伪造漏洞(CNVD-2024-37429) 2024-08-29 2024-09-05
cnvd-2024-37428 Kashipara Music Management System跨站请求伪造漏洞(CNVD-2024-37428) 2024-08-30 2024-09-05
cnvd-2024-36940 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞(CNVD-2024-36940) 2024-07-23 2024-09-05
cnvd-2024-36581 北京星网锐捷网络技术有限公司RG-UAC 6000-E50存在命令执行漏洞(CNVD-2024-36581) 2024-07-22 2024-09-05
cnvd-2024-36563 用友网络科技股份有限公司移动系统管理存在未授权访问漏洞 2024-07-22 2024-09-05
cnvd-2024-37611 Dell PowerProtect Data Manager授权问题漏洞(CNVD-2024-3761184) 2023-11-24 2024-09-04
ID Description Published Updated
certa-2009-avi-456 Vulnérabilité dans ProFTPD 2009-10-26T00:00:00.000000 2009-10-26T00:00:00.000000
certa-2009-avi-455 Vulnérabilité dans IBM OS/400 HTTP Server 2009-10-26T00:00:00.000000 2009-10-26T00:00:00.000000
certa-2009-avi-454 Multiples vulnérabilités dans TYPO3 2009-10-26T00:00:00.000000 2009-10-26T00:00:00.000000
certa-2009-avi-453 Multiples vulnérabilités dans WordPress 2009-10-21T00:00:00.000000 2009-10-21T00:00:00.000000
certa-2009-avi-452 Multiples vulnérabilités des produits Oracle 2009-10-21T00:00:00.000000 2009-10-21T00:00:00.000000
certa-2009-avi-451 Multiples vulnérabiltés dans les produits VMware 2009-10-20T00:00:00.000000 2009-10-20T00:00:00.000000
certa-2009-avi-323 Vulnérabilités dans Apache APR-Utility 2009-08-11T00:00:00.000000 2009-10-20T00:00:00.000000
certa-2009-avi-391 Multiples vulnérabilités dans Bugzilla 2009-09-18T00:00:00.000000 2009-10-19T00:00:00.000000
certa-2009-avi-450 Vulnérabilité dans ZFS pour Sun Solaris et Sun OpenSolaris 2009-10-16T00:00:00.000000 2009-10-16T00:00:00.000000
certa-2009-avi-449 Multiples vulnérabilités dans Cisco Unified Presence 2009-10-16T00:00:00.000000 2009-10-16T00:00:00.000000
certa-2009-avi-447 Vulnérabilités dans phpMyAdmin 2009-10-16T00:00:00.000000 2009-10-16T00:00:00.000000
certa-2009-avi-446 Vulnérabilités dans Symantec SecurityExpressions 2009-10-16T00:00:00.000000 2009-10-16T00:00:00.000000
certa-2009-avi-445 Multiples vulnérabilités dans Adobe Reader et Acrobat 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-444 Multiples vulnérabilités dans Microsoft Windows Media Runtime 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-443 Multiples vulnérabilités de SMBv2 dans Microsoft Windows 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-442 Multiples vulnérabilités des produits Microsoft utilisant GDI+ 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-441 Multiples vulnérabilités dans Microsoft .NET Common Language Runtime 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-440 Multiples vulnérabilités dans Microsoft ATL ActiveX controls pour Microsoft Office 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-439 Vulnérabilité dans Local Security Authority Subsystem Service 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-438 Vulnérabilité dans Microsoft Windows 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-437 Vulnérabilité dans le service d'indexation de Windows 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-436 Vulnérabilités dans Windows CryptoAPI 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-435 Vulnérabilité des composants ActiveX utilisant la bibliothèque ATL 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-434 Multiples vulnérabilités de Microsoft Internet Explorer 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-433 Vulnérabilités du serveur FTP de Microsoft IIS 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-432 Vulnérabilité dans Microsoft Windows Media Player 2009-10-14T00:00:00.000000 2009-10-14T00:00:00.000000
certa-2009-avi-431 Vulnérabilités dans CA Anti-Virus 2009-10-12T00:00:00.000000 2009-10-12T00:00:00.000000
certa-2009-avi-380 Multiples vulnérabilités dans PostgreSQL 2009-09-11T00:00:00.000000 2009-10-12T00:00:00.000000
certa-2009-avi-430 Vulnérabilité des systèmes IBM AIX et VIOS 2009-10-09T00:00:00.000000 2009-10-09T00:00:00.000000
certa-2009-avi-429 Vulnérabilité dans Sun Solaris clsetup 2009-10-08T00:00:00.000000 2009-10-08T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated