Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67532 |
9.8 (3.1)
|
WordPress Hara theme <= 1.2.17 - Local File Inclusion … |
thembay |
Hara |
2025-12-09T14:14:03.164Z | 2026-01-20T14:28:25.158Z |
| CVE-2025-67527 |
9.8 (3.1)
|
WordPress Digiqole theme < 2.2.7 - Local File Inclusio… |
trippleS |
Digiqole |
2025-12-09T14:14:00.496Z | 2026-01-20T14:28:25.133Z |
| CVE-2025-67537 |
6.5 (3.1)
|
WordPress ThirstyAffiliates plugin <= 3.11.8 - Cross S… |
Blair Williams |
ThirstyAffiliates |
2025-12-09T14:14:04.310Z | 2026-01-20T14:28:25.132Z |
| CVE-2025-67470 |
4.3 (3.1)
|
WordPress Portfolio and Projects plugin <= 1.5.5 - Sen… |
Essential Plugin |
Portfolio and Projects |
2025-12-09T14:13:56.054Z | 2026-01-20T14:28:25.130Z |
| CVE-2025-67522 |
9.8 (3.1)
|
WordPress Jobmonster theme <= 4.8.2 - Local File Inclu… |
NooTheme |
Jobmonster |
2025-12-09T14:13:59.066Z | 2026-01-20T14:28:25.110Z |
| CVE-2025-67531 |
9.8 (3.1)
|
WordPress Turitor theme < 1.5.3 - Local File Inclusion… |
trippleS |
Turitor |
2025-12-09T14:14:01.550Z | 2026-01-20T14:28:25.095Z |
| CVE-2025-67474 |
4.3 (3.1)
|
WordPress ForumWP plugin <= 2.1.4 - Broken Access Cont… |
Ultimate Member |
ForumWP |
2025-12-09T14:13:57.009Z | 2026-01-20T14:28:25.033Z |
| CVE-2025-67521 |
9.8 (3.1)
|
WordPress Select Core plugin < 2.6 - Local File Inclus… |
Select-Themes |
Select Core |
2025-12-09T14:13:58.865Z | 2026-01-20T14:28:24.976Z |
| CVE-2025-67520 |
9.8 (3.1)
|
WordPress Media Library Tools plugin <= 1.6.15 - SQL I… |
Tiny Solutions |
Media Library Tools |
2025-12-09T14:13:58.651Z | 2026-01-20T14:28:24.948Z |
| CVE-2025-67525 |
9.8 (3.1)
|
WordPress ekommart theme < 4.3.1 - Local File Inclusio… |
Opal_WP |
ekommart |
2025-12-09T14:13:59.771Z | 2026-01-20T14:28:24.930Z |
| CVE-2025-67465 |
8.8 (3.1)
|
WordPress Simple Link Directory plugin <= 8.8.3 - Cros… |
QuantumCloud |
Simple Link Directory |
2025-12-09T14:13:55.262Z | 2026-01-20T14:28:24.889Z |
| CVE-2025-66532 |
8.8 (3.1)
|
WordPress Powerlift theme < 3.2.1 - Broken Access Cont… |
Mikado-Themes |
Powerlift |
2025-12-09T14:13:54.794Z | 2026-01-20T14:28:24.714Z |
| CVE-2025-66132 |
6.5 (3.1)
|
WordPress FAPI Member plugin <= 2.2.26 - Insecure Dire… |
FAPI Business s.r.o. |
FAPI Member |
2025-12-16T08:12:54.562Z | 2026-01-20T14:28:24.662Z |
| CVE-2025-66531 |
8.8 (3.1)
|
WordPress Salon booking system plugin <= 10.30.3 - Cro… |
Dimitri Grassi |
Salon booking system |
2025-12-09T14:13:54.558Z | 2026-01-20T14:28:24.641Z |
| CVE-2025-66129 |
5.3 (3.1)
|
WordPress Pochipp plugin <= 1.18.0 - Broken Access Con… |
wppochipp |
Pochipp |
2025-12-16T08:12:53.976Z | 2026-01-20T14:28:24.628Z |
| CVE-2025-66528 |
8.1 (3.1)
|
WordPress Thank You Page Customizer for WooCommerce pl… |
VillaTheme |
Thank You Page Customizer for WooCommerce |
2025-12-09T14:13:53.449Z | 2026-01-20T14:28:24.582Z |
| CVE-2025-66155 |
5.4 (3.1)
|
WordPress Questionar for Elementor plugin <= 1.1.7 - B… |
merkulove |
Questionar for Elementor |
2025-12-31T17:00:37.052Z | 2026-01-20T14:28:24.566Z |
| CVE-2025-66157 |
5.4 (3.1)
|
WordPress Slider for Elementor plugin <= 1.0.10 - Brok… |
merkulove |
Slider for Elementor |
2025-12-31T16:58:24.314Z | 2026-01-20T14:28:24.553Z |
| CVE-2025-66128 |
5.3 (3.1)
|
WordPress Sendinblue for WooCommerce plugin <= 4.0.49 … |
Brevo |
Sendinblue for WooCommerce |
2025-12-16T08:12:53.783Z | 2026-01-20T14:28:24.551Z |
| CVE-2025-66151 |
5.4 (3.1)
|
WordPress Countdowner for Elementor plugin <= 1.0.4 - … |
merkulove |
Countdowner for Elementor |
2025-12-31T18:32:49.483Z | 2026-01-20T14:28:24.546Z |
| CVE-2025-66150 |
5.4 (3.1)
|
WordPress Appender plugin <= 1.1.1 - Broken Access Con… |
merkulove |
Appender |
2025-12-31T18:35:57.735Z | 2026-01-20T14:28:24.539Z |
| CVE-2025-66160 |
5.4 (3.1)
|
WordPress Select Graphist for Elementor Graphist for … |
merkulove |
Select Graphist for Elementor Graphist for Elementor |
2025-12-31T16:50:19.182Z | 2026-01-20T14:28:24.538Z |
| CVE-2025-66530 |
8.8 (3.1)
|
WordPress Webba Booking plugin <= 6.2.1 - Broken Acces… |
Webba Appointment Booking |
Webba Booking |
2025-12-09T14:13:53.897Z | 2026-01-20T14:28:24.537Z |
| CVE-2025-66147 |
5.4 (3.1)
|
WordPress Coder for Elementor plugin <= 1.0.13 - Broke… |
merkulove |
Coder for Elementor |
2025-12-16T08:12:55.284Z | 2026-01-20T14:28:24.524Z |
| CVE-2025-66146 |
5.4 (3.1)
|
WordPress Logger for Elementor plugin <= 1.0.9 - Broke… |
merkulove |
Logger for Elementor |
2025-12-31T19:50:21.260Z | 2026-01-20T14:28:24.515Z |
| CVE-2025-66152 |
5.4 (3.1)
|
WordPress Criptopayer for Elementor plugin <= 1.0.1 - … |
merkulove |
Criptopayer for Elementor |
2025-12-31T18:32:07.924Z | 2026-01-20T14:28:24.511Z |
| CVE-2025-66149 |
5.4 (3.1)
|
WordPress UnGrabber plugin <= 3.1.3 - Broken Access Co… |
merkulove |
UnGrabber |
2025-12-31T18:38:14.772Z | 2026-01-20T14:28:24.511Z |
| CVE-2025-66164 |
5.4 (3.1)
|
WordPress Laser plugin <= 1.1.1 - Broken Access Contro… |
merkulove |
Laser |
2025-12-16T08:12:56.211Z | 2026-01-20T14:28:24.509Z |
| CVE-2025-66159 |
5.4 (3.1)
|
WordPress Walker for Elementor plugin <= 1.1.6 - Broke… |
merkulove |
Walker for Elementor |
2025-12-31T16:51:12.320Z | 2026-01-20T14:28:24.501Z |
| CVE-2025-66158 |
5.4 (3.1)
|
WordPress Gmaper for Elementor plugin <= 1.0.9 - Broke… |
merkulove |
Gmaper for Elementor |
2025-12-31T16:51:58.259Z | 2026-01-20T14:28:24.495Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-33223 |
9.8 (3.1)
|
NVIDIA Isaac Launchable contains a vulnerability … |
NVIDIA |
Isaac Launchable |
2025-12-23T17:10:41.469Z | 2025-12-23T20:25:39.898Z |
| CVE-2025-33224 |
9.8 (3.1)
|
NVIDIA Isaac Launchable contains a vulnerability … |
NVIDIA |
Isaac Launchable |
2025-12-23T17:10:25.679Z | 2025-12-23T20:02:26.382Z |
| CVE-2025-68967 |
5.7 (3.1)
|
Vulnerability of improper permission control in t… |
Huawei |
HarmonyOS |
2026-01-14T02:16:57.372Z | 2026-01-14T23:35:23.930Z |
| CVE-2025-68966 |
5.1 (3.1)
|
Permission control vulnerability in the Notepad m… |
Huawei |
HarmonyOS |
2026-01-14T02:14:40.405Z | 2026-01-14T14:29:54.142Z |
| CVE-2025-65291 |
7.4 (3.1)
|
Aqara Hub devices including Hub M2 4.3.6_0027, Hu… |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2026-01-07T16:58:52.501Z |
| CVE-2020-36900 |
8.6 (4.0)
|
All-Dynamics Digital Signage System 2.0.2 Cross-Site R… |
All-Dynamics Software GmbH |
Digital Signage System |
2025-12-10T21:04:43.623Z | 2025-12-11T18:52:41.778Z |
| CVE-2025-68965 |
4.7 (3.1)
|
Permission control vulnerability in the Notepad m… |
Huawei |
HarmonyOS |
2026-01-14T02:13:06.754Z | 2026-01-14T14:30:28.694Z |
| CVE-2025-68964 |
6.2 (3.1)
|
Data verification vulnerability in the HiView mod… |
Huawei |
HarmonyOS |
2026-01-14T02:11:25.924Z | 2026-01-14T14:32:23.362Z |
| CVE-2025-68963 |
5.7 (3.1)
|
Man-in-the-middle attack vulnerability in the Clo… |
Huawei |
HarmonyOS |
2026-01-14T02:31:32.979Z | 2026-01-14T23:35:36.785Z |
| CVE-2025-63807 |
9.8 (3.1)
|
An issue was discovered in weijiang1994 universit… |
n/a |
n/a |
2025-11-20T00:00:00.000Z | 2025-11-21T14:39:39.545Z |
| CVE-2025-68970 |
6.1 (3.1)
|
Permission verification bypass vulnerability in t… |
Huawei |
HarmonyOS |
2026-01-14T02:35:43.529Z | 2026-01-14T14:21:19.750Z |
| CVE-2025-68969 |
6.8 (3.1)
|
Multi-thread race condition vulnerability in the … |
Huawei |
HarmonyOS |
2026-01-14T02:07:24.192Z | 2026-01-14T14:33:28.265Z |
| CVE-2025-14927 |
7.8 (3.0)
|
Hugging Face Transformers SEW-D convert_config Code In… |
Hugging Face |
Transformers |
2025-12-23T21:04:28.008Z | 2025-12-24T16:26:02.865Z |
| CVE-2025-14926 |
7.8 (3.0)
|
Hugging Face Transformers SEW convert_config Code Inje… |
Hugging Face |
Transformers |
2025-12-23T21:04:32.162Z | 2025-12-24T16:26:53.253Z |
| CVE-2024-24910 |
7.3 (3.1)
|
LocalprivilegeescalationinCheckPointZoneAlarmExtremeSe… |
checkpoint |
ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer |
2024-04-18T17:35:42.688Z | 2025-09-29T12:30:45.141Z |
| CVE-2024-6233 |
7.8 (3.0)
|
Check Point ZoneAlarm Extreme Security Link Following … |
Check Point |
ZoneAlarm Extreme Security |
2024-11-22T20:05:39.766Z | 2024-11-22T20:55:29.976Z |
| CVE-2025-14924 |
7.8 (3.0)
|
Hugging Face Transformers megatron_gpt2 Deserializatio… |
Hugging Face |
Transformers |
2025-12-23T21:04:40.830Z | 2025-12-26T14:22:34.996Z |
| CVE-2025-12840 |
7.8 (3.0)
|
Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:45.445Z | 2025-12-24T16:04:03.735Z |
| CVE-2025-12839 |
7.8 (3.0)
|
Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:37.030Z | 2025-12-24T16:04:35.072Z |
| CVE-2025-68968 |
7.8 (3.1)
|
Double free vulnerability in the multi-mode input… |
Huawei |
HarmonyOS |
2026-01-14T02:05:43.632Z | 2026-01-14T14:33:59.534Z |
| CVE-2025-12495 |
7.8 (3.0)
|
Academy Software Foundation OpenEXR EXR File Parsing H… |
Academy Software Foundation |
OpenEXR |
2025-12-23T21:41:27.753Z | 2025-12-24T16:05:06.561Z |
| CVE-2026-0546 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Content Management System search.php sql… |
code-projects |
Content Management System |
2026-01-02T09:02:06.535Z | 2026-02-23T08:04:48.943Z |
| CVE-2025-15421 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Yonyou KSOA HTTP GET Parameter agent_worksadd.jsp sql … |
Yonyou |
KSOA |
2026-01-02T01:02:05.671Z | 2026-02-23T08:05:57.777Z |
| CVE-2025-3999 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Seeyon Zhiyuan OA Web Application System URL Parameter… |
Seeyon |
Zhiyuan OA Web Application System |
2025-04-28T03:31:06.407Z | 2025-05-12T15:48:09.762Z |
| CVE-2025-4000 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
Seeyon Zhiyuan OA Web Application System ssoproxy.jsp … |
Seeyon |
Zhiyuan OA Web Application System |
2025-04-28T04:00:07.125Z | 2025-04-28T18:03:05.287Z |
| CVE-2025-4529 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Seeyon Zhiyuan OA Web Application System ZIP File M3Co… |
Seeyon |
Zhiyuan OA Web Application System |
2025-05-11T04:00:08.206Z | 2025-05-12T14:00:29.397Z |
| CVE-2025-20956 |
4.3 (3.1)
|
Improper export of android application components… |
Samsung Mobile |
Samsung Mobile Devices |
2025-05-07T08:24:07.695Z | 2025-05-07T19:43:12.053Z |
| CVE-2024-21917 |
9.8 (3.1)
|
Rockwell Automation FactoryTalk® Service Platform Serv… |
Rockwell Automation |
FactoryTalk® Service Platform |
2024-01-31T18:16:27.949Z | 2026-01-15T15:34:26.092Z |
| CVE-2025-4531 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Seeyon Zhiyuan OA Web Application System Beetl Templat… |
Seeyon |
Zhiyuan OA Web Application System |
2025-05-11T05:31:06.887Z | 2025-05-12T13:50:33.139Z |
| CVE-2026-20872 |
6.5 (3.1)
|
NTLM Hash Disclosure Spoofing Vulnerability |
Microsoft |
Windows 10 Version 1607 |
2026-01-13T17:57:00.955Z | 2026-02-22T17:01:34.842Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68967 | Vulnerability of improper permission control in the print module. Impact: Successful exploitation o… | 2026-01-14T03:15:51.593 | 2026-01-15T17:05:53.053 |
| fkie_cve-2025-68966 | Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vul… | 2026-01-14T03:15:51.450 | 2026-01-15T17:05:36.950 |
| fkie_cve-2025-65291 | Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to … | 2025-12-10T22:16:26.710 | 2026-01-15T17:04:50.903 |
| fkie_cve-2020-36900 | All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that … | 2025-12-10T21:16:02.657 | 2026-01-15T17:03:21.467 |
| fkie_cve-2025-68965 | Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vul… | 2026-01-14T03:15:51.303 | 2026-01-15T17:02:59.347 |
| fkie_cve-2025-68964 | Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulne… | 2026-01-14T03:15:51.150 | 2026-01-15T17:02:34.640 |
| fkie_cve-2025-68963 | Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this… | 2026-01-14T03:15:50.990 | 2026-01-15T17:02:18.473 |
| fkie_cve-2025-63807 | An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4… | 2025-11-20T21:16:06.617 | 2026-01-15T16:59:02.453 |
| fkie_cve-2025-68970 | Permission verification bypass vulnerability in the media library module. Impact: Successful exploi… | 2026-01-14T03:15:52.023 | 2026-01-15T16:56:13.557 |
| fkie_cve-2025-68969 | Multi-thread race condition vulnerability in the thermal management module. Impact: Successful expl… | 2026-01-14T03:15:51.873 | 2026-01-15T16:52:01.620 |
| fkie_cve-2025-14927 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. … | 2025-12-23T21:15:47.987 | 2026-01-15T16:49:35.350 |
| fkie_cve-2025-14926 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. Th… | 2025-12-23T21:15:47.857 | 2026-01-15T16:49:21.860 |
| fkie_cve-2024-24910 | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen… | 2024-04-18T18:15:09.197 | 2026-01-15T16:48:58.680 |
| fkie_cve-2024-6233 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. Thi… | 2024-11-22T20:15:11.437 | 2026-01-15T16:48:35.403 |
| fkie_cve-2025-14924 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vul… | 2025-12-23T21:15:47.600 | 2026-01-15T16:47:43.070 |
| fkie_cve-2025-12840 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Executi… | 2025-12-23T22:15:44.533 | 2026-01-15T16:46:26.080 |
| fkie_cve-2025-12839 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Executi… | 2025-12-23T22:15:44.407 | 2026-01-15T16:45:51.503 |
| fkie_cve-2025-68968 | Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this v… | 2026-01-14T03:15:51.740 | 2026-01-15T16:45:39.850 |
| fkie_cve-2025-12495 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Executi… | 2025-12-23T22:15:44.147 | 2026-01-15T16:45:37.813 |
| fkie_cve-2026-0546 | A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unkn… | 2026-01-02T09:15:42.917 | 2026-01-15T16:41:48.480 |
| fkie_cve-2025-15421 | A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the fil… | 2026-01-02T01:15:50.480 | 2026-01-15T16:39:36.063 |
| fkie_cve-2025-3999 | A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Appli… | 2025-04-28T04:15:36.410 | 2026-01-15T16:24:05.350 |
| fkie_cve-2025-4000 | A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Applicatio… | 2025-04-28T04:15:38.250 | 2026-01-15T16:23:14.823 |
| fkie_cve-2025-4529 | A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classifi… | 2025-05-11T04:15:17.933 | 2026-01-15T16:22:36.913 |
| fkie_cve-2025-20956 | Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025… | 2025-05-07T09:15:15.590 | 2026-01-15T16:19:11.390 |
| fkie_cve-2024-21917 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious… | 2024-01-31T19:15:08.633 | 2026-01-15T16:16:10.740 |
| fkie_cve-2025-4531 | A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as… | 2025-05-11T06:15:15.707 | 2026-01-15T16:01:22.550 |
| fkie_cve-2026-20872 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform sp… | 2026-01-13T18:16:16.973 | 2026-01-15T15:50:13.900 |
| fkie_cve-2026-20871 | Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally. | 2026-01-13T18:16:16.810 | 2026-01-15T15:48:21.813 |
| fkie_cve-2026-20870 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 2026-01-13T18:16:16.650 | 2026-01-15T15:47:31.830 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vvxf-wj5w-6gj5 |
4.3 (3.1)
|
hemmelig allows SSRF Filter bypass via Secret Request functionality | 2025-12-29T21:31:04Z | 2025-12-29T21:31:04Z |
| ghsa-m3w5-5pmv-9m9q |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzL… | 2025-12-29T21:30:25Z | 2025-12-29T21:30:26Z |
| ghsa-g3j9-h256-3c38 |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was identified in code-projects Student File Management System 1.0. Affected by thi… | 2025-12-29T21:30:26Z | 2025-12-29T21:30:26Z |
| ghsa-w5v4-r6mh-235c |
6.0 (4.0)
|
A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic… | 2025-12-29T21:30:25Z | 2025-12-29T21:30:25Z |
| ghsa-w2wc-5vr8-f58p |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability has been found in SohuTV CacheCloud up to 3.2.0. This affects the function taskQueu… | 2025-12-29T21:30:25Z | 2025-12-29T21:30:25Z |
| ghsa-c28f-cg8m-7xv9 |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the … | 2025-12-29T21:30:25Z | 2025-12-29T21:30:25Z |
| ghsa-x6h4-24w5-wf3q |
6.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Imp… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-r87x-jm9x-rwc9 |
5.3 (3.1)
|
The PixelYourSite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-r2fc-j4gv-f88r |
7.2 (3.1)
|
The Advanced Ads plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-pmf7-wfpv-2m87 |
3.5 (3.1)
2.0 (4.0)
|
A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redire… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-fh4j-chp9-mvg5 |
6.8 (3.1)
|
Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers tha… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-c2fm-8hf4-2g8g |
2.4 (3.1)
1.9 (4.0)
|
A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. The affected element is the function… | 2025-12-29T21:30:24Z | 2025-12-29T21:30:24Z |
| ghsa-43h9-hc38-qph5 |
3.7 (3.1)
2.9 (4.0)
|
SQLE's JWT Secret Handler can be manipulated to use hard-coded cryptographic key | 2025-12-27T15:30:17Z | 2025-12-29T20:36:20Z |
| ghsa-3329-ghmp-jmv5 |
7.4 (4.0)
|
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval | 2025-12-29T20:04:09Z | 2025-12-29T20:04:09Z |
| ghsa-x843-g5mx-g377 |
7.4 (4.0)
|
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.met… | 2025-12-29T20:03:30Z | 2025-12-29T20:03:30Z |
| ghsa-95fv-5gfj-2r84 |
9.3 (4.0)
|
Withdrawn Advisory: Emby Server API Vulnerability allowing to gain administrative access without pr… | 2025-12-08T16:25:53Z | 2025-12-29T19:43:24Z |
| ghsa-x23q-75qm-3p39 |
4.8 (3.1)
|
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-jxvc-pvpc-6q2f |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown … | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-5qcm-c65c-c4f2 |
4.8 (3.1)
|
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-59vq-r2p7-239g |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affe… | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-535h-mv4w-87cj |
8.8 (3.1)
|
CWE-434 Unrestricted Upload of File with Dangerous Type | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-4rr4-crgj-v968 |
4.8 (3.1)
|
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-4gpw-hw2g-ph5w |
6.1 (3.1)
|
CWE-601 URL Redirection to Untrusted Site ('Open Redirect') | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-2g7v-6q7q-7mp6 |
4.7 (3.1)
2.0 (4.0)
|
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and Ne… | 2025-12-29T18:30:55Z | 2025-12-29T18:30:55Z |
| ghsa-vjmh-x5rx-92fx |
6.1 (3.1)
|
Reflected Cross site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitr… | 2025-12-29T15:30:21Z | 2025-12-29T18:30:54Z |
| ghsa-jrvx-v9w9-54rr |
9.8 (3.1)
8.9 (4.0)
|
A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an u… | 2025-12-29T18:30:54Z | 2025-12-29T18:30:54Z |
| ghsa-fm5v-x688-f2q9 |
6.5 (3.1)
|
UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted … | 2025-12-29T15:30:21Z | 2025-12-29T18:30:54Z |
| ghsa-cvjw-pf3j-qxvj |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue i… | 2025-12-29T18:30:54Z | 2025-12-29T18:30:54Z |
| ghsa-6c3p-2cc4-9r7p |
6.1 (3.1)
|
DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attacker… | 2025-12-29T15:30:21Z | 2025-12-29T18:30:54Z |
| ghsa-mfq8-ww9j-9c8g |
6.1 (3.1)
|
The YaMaps for WordPress Plugin WordPress plugin before 0.6.40 does not validate and escape some of… | 2025-12-29T06:30:24Z | 2025-12-29T18:30:51Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-23314 | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can… | 2024-02-02T06:02:55.076022Z |
| gsd-2024-23979 | When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLD… | 2024-02-02T06:02:55.055285Z |
| gsd-2024-22093 | When running in appliance mode, an authenticated remote command injection vulnerability e… | 2024-02-02T06:02:55.007845Z |
| gsd-2024-22389 | When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updat… | 2024-02-02T06:02:54.962864Z |
| gsd-2024-22187 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.866594Z |
| gsd-2024-1176 | The HT Easy GA4 – Google Analytics WordPress Plugin plugin for WordPress is vulnerable to… | 2024-02-02T06:02:54.603870Z |
| gsd-2024-1183 | An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repos… | 2024-02-02T06:02:54.598652Z |
| gsd-2024-1146 | Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 an… | 2024-02-02T06:02:54.596943Z |
| gsd-2024-1174 | Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain … | 2024-02-02T06:02:54.596724Z |
| gsd-2024-1165 | The Brizy – Page Builder plugin for WordPress is vulnerable to Directory Traversal in all… | 2024-02-02T06:02:54.595469Z |
| gsd-2024-1147 | Weak access control in OpenText PVCS Version Manager allows potential bypassing of authen… | 2024-02-02T06:02:54.590016Z |
| gsd-2024-1159 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2024-02-02T06:02:54.589095Z |
| gsd-2024-1161 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.588875Z |
| gsd-2024-1155 | Incorrect permissions in the installation directories for shared SystemLink Elixir based … | 2024-02-02T06:02:54.587067Z |
| gsd-2024-1170 | The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content For… | 2024-02-02T06:02:54.586570Z |
| gsd-2024-1153 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.585853Z |
| gsd-2024-1163 | Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44. | 2024-02-02T06:02:54.584220Z |
| gsd-2024-1156 | Incorrect directory permissions for the shared NI RabbitMQ service may allow a local auth… | 2024-02-02T06:02:54.582580Z |
| gsd-2024-1177 | The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to … | 2024-02-02T06:02:54.581532Z |
| gsd-2024-1151 | A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The f… | 2024-02-02T06:02:54.580707Z |
| gsd-2024-1162 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Cross-Site Request Forge… | 2024-02-02T06:02:54.579512Z |
| gsd-2024-1148 | Weak access control in OpenText PVCS Version Manager allows potential bypassing of authen… | 2024-02-02T06:02:54.578314Z |
| gsd-2024-1169 | The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content For… | 2024-02-02T06:02:54.578019Z |
| gsd-2024-1144 | Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10… | 2024-02-02T06:02:54.576397Z |
| gsd-2024-1179 | TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Executi… | 2024-02-02T06:02:54.575829Z |
| gsd-2024-1168 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.573888Z |
| gsd-2024-1175 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.571310Z |
| gsd-2024-1154 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.569058Z |
| gsd-2024-1173 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-02T06:02:54.565634Z |
| gsd-2024-1149 | Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory… | 2024-02-02T06:02:54.560192Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-182864 | Malicious code in itale-adci-ggru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182863 | Malicious code in itale-adci-ggpyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182862 | Malicious code in itale-adci-ggpeyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182861 | Malicious code in itale-adci-ggpantekkyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182860 | Malicious code in itale-adci-ggpantekkoyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182859 | Malicious code in itale-adci-ggpantekkktoyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182858 | Malicious code in itale-adci-ggpantekkkktoyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182857 | Malicious code in itale-adci-ggpantekkkktolyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182856 | Malicious code in itale-adci-ggpantekkkktololgyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182855 | Malicious code in itale-adci-ggpantekkkktololgybu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182854 | Malicious code in itale-adci-ggpantekkkktololgujrhyjhbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182853 | Malicious code in itale-adci-ggpantekkkktololgujrhygjhbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182852 | Malicious code in itale-adci-ggpantekkkktololguhyjhbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182851 | Malicious code in itale-adci-ggpantekkkktololghyjhbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182850 | Malicious code in itale-adci-ggpantekkkktololghyhbu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182849 | Malicious code in itale-adci-ggpantekkkktollgyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182848 | Malicious code in itale-adci-ggpanekyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182847 | Malicious code in itale-adci-ggpanekkyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182846 | Malicious code in itale-adci-ggpaeyu (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182845 | Malicious code in itale-adci-ggnru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182844 | Malicious code in itale-adci-ggmatondnru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182843 | Malicious code in itale-adci-ggmatondngnru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182842 | Malicious code in itale-adci-ggmatondnggnru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182841 | Malicious code in itale-adci-ggmatondnggangru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182840 | Malicious code in itale-adci-ggmatondanggantgyru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182839 | Malicious code in itale-adci-ggmatondanggangyru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182838 | Malicious code in itale-adci-ggmatondanggangtengyru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182837 | Malicious code in itale-adci-ggmatondanggangtengydru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182836 | Malicious code in itale-adci-ggmatondanggangtengdytdjdyru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182835 | Malicious code in itale-adci-ggmatondanggangtengdytdjdbyru (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:0842 | Red Hat Security Advisory: tar security update | 2023-02-21T09:29:25+00:00 | 2025-11-21T18:37:55+00:00 |
| rhsa-2023:0839 | Red Hat Security Advisory: kpatch-patch security update | 2023-02-21T09:25:55+00:00 | 2025-11-21T18:37:55+00:00 |
| rhsa-2023:0838 | Red Hat Security Advisory: samba security update | 2023-02-21T09:31:32+00:00 | 2025-11-21T18:37:55+00:00 |
| rhsa-2023:0837 | Red Hat Security Advisory: systemd security and bug fix update | 2023-02-21T09:26:17+00:00 | 2025-11-21T18:37:54+00:00 |
| rhsa-2023:0824 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:20:46+00:00 | 2025-11-21T18:37:53+00:00 |
| rhsa-2023:0823 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:20:55+00:00 | 2025-11-21T18:37:52+00:00 |
| rhsa-2023:0821 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:21:25+00:00 | 2025-11-21T18:37:52+00:00 |
| rhsa-2023:0820 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:21:56+00:00 | 2025-11-21T18:37:52+00:00 |
| rhsa-2023:0819 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:15:40+00:00 | 2025-11-21T18:37:51+00:00 |
| rhsa-2023:0818 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:14:45+00:00 | 2025-11-21T18:37:51+00:00 |
| rhsa-2023:0817 | Red Hat Security Advisory: thunderbird security update | 2023-02-20T12:21:18+00:00 | 2025-11-21T18:37:50+00:00 |
| rhsa-2023:0812 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:35:28+00:00 | 2025-11-21T18:37:50+00:00 |
| rhsa-2023:0811 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:29:30+00:00 | 2025-11-21T18:37:50+00:00 |
| rhsa-2023:0810 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:27:23+00:00 | 2025-11-21T18:37:50+00:00 |
| rhsa-2023:0809 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:27:08+00:00 | 2025-11-21T18:37:49+00:00 |
| rhsa-2023:0808 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:31:14+00:00 | 2025-11-21T18:37:48+00:00 |
| rhsa-2023:0807 | Red Hat Security Advisory: Mozilla Firefox security update | 2023-02-20T08:30:10+00:00 | 2025-11-21T18:37:48+00:00 |
| rhsa-2023:0806 | Red Hat Security Advisory: Mozilla Firefox security update | 2023-02-20T08:19:20+00:00 | 2025-11-21T18:37:48+00:00 |
| rhsa-2023:0805 | Red Hat Security Advisory: firefox security update | 2023-02-20T08:23:14+00:00 | 2025-11-21T18:37:48+00:00 |
| rhsa-2023:0786 | Red Hat Security Advisory: Network observability 1.1.0 security update | 2023-02-15T11:41:51+00:00 | 2025-11-21T18:37:46+00:00 |
| rhsa-2023:0772 | Red Hat Security Advisory: OpenShift Container Platform 4.12.4 security update | 2023-02-20T18:33:05+00:00 | 2025-11-21T18:37:44+00:00 |
| rhsa-2023:0752 | Red Hat Security Advisory: grub2 security update | 2023-02-14T09:10:02+00:00 | 2025-11-21T18:37:42+00:00 |
| rhsa-2023:0742 | Red Hat Security Advisory: RHUI 4.3.0 release - Security Fixes, Bug Fixes, and Enhancements Update | 2023-02-13T12:03:36+00:00 | 2025-11-21T18:37:42+00:00 |
| rhsa-2023:0687 | Red Hat Security Advisory: openvswitch2.15 security, bug fix and enhancement update | 2023-02-09T00:30:21+00:00 | 2025-11-21T18:37:41+00:00 |
| rhsa-2023:0685 | Red Hat Security Advisory: openvswitch2.13 security, bug fix and enhancement update | 2023-02-09T00:29:44+00:00 | 2025-11-21T18:37:40+00:00 |
| rhsa-2023:0691 | Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update | 2023-02-09T00:27:31+00:00 | 2025-11-21T18:37:38+00:00 |
| rhsa-2023:0689 | Red Hat Security Advisory: openvswitch2.16 security, bug fix and enhancement update | 2023-02-09T00:29:51+00:00 | 2025-11-21T18:37:37+00:00 |
| rhsa-2023:0688 | Red Hat Security Advisory: openvswitch2.17 security, bug fix and enhancement update | 2023-02-09T00:29:33+00:00 | 2025-11-21T18:37:37+00:00 |
| rhsa-2023:0675 | Red Hat Security Advisory: tigervnc and xorg-x11-server security update | 2023-02-08T20:03:08+00:00 | 2025-11-21T18:37:36+00:00 |
| rhsa-2023:0637 | Red Hat Security Advisory: samba security update | 2023-02-07T21:34:39+00:00 | 2025-11-21T18:37:36+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201508-0434 | WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and … | 2025-04-13T21:39:45.625000Z |
| var-201609-0254 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does… | 2025-04-13T21:39:45.076000Z |
| var-201403-0478 | The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is us… | 2025-04-13T21:39:45.033000Z |
| var-201510-0246 | ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows rem… | 2025-04-13T21:39:43.971000Z |
| var-201410-0829 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earli… | 2025-04-13T21:39:32.114000Z |
| var-201409-0497 | The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 al… | 2025-04-13T21:39:31.380000Z |
| var-201509-0069 | Apple iOS before 9 allows attackers to obtain sensitive information about inter-app commu… | 2025-04-13T21:39:28.375000Z |
| var-201504-0400 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows a… | 2025-04-13T21:38:21.467000Z |
| var-201404-0198 | Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x befor… | 2025-04-13T21:37:47.973000Z |
| var-201507-0423 | The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7… | 2025-04-13T21:37:47.848000Z |
| var-201605-0458 | IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary co… | 2025-04-13T21:37:31.129000Z |
| var-201505-0287 | Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows a… | 2025-04-13T21:37:30.886000Z |
| var-201509-0114 | WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows re… | 2025-04-13T21:37:30.215000Z |
| var-201510-0082 | The Safari Extensions implementation in Apple Safari before 9 does not require user confi… | 2025-04-13T21:37:28.515000Z |
| var-201609-0256 | WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allo… | 2025-04-13T21:37:18.735000Z |
| var-201405-0223 | WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attacker… | 2025-04-13T21:37:18.537000Z |
| var-201409-0493 | The 802.1X subsystem in Apple iOS before 8 and Apple TV before 7 does not require strong … | 2025-04-13T21:37:14.709000Z |
| var-201507-0445 | Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute… | 2025-04-13T21:37:08.829000Z |
| var-201603-0146 | Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a pr… | 2025-04-13T21:37:04.291000Z |
| var-201507-0411 | Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS bef… | 2025-04-13T21:37:04.068000Z |
| var-201501-0268 | security_taskgate in Apple OS X before 10.10.2 allows attackers to read group-ACL-restric… | 2025-04-13T21:36:31.747000Z |
| var-201408-0270 | Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows re… | 2025-04-13T21:36:31.624000Z |
| var-201511-0220 | The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 befo… | 2025-04-13T21:36:28.389000Z |
| var-201508-0468 | WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and … | 2025-04-13T21:36:25.257000Z |
| var-201405-0236 | WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attacker… | 2025-04-13T21:36:25.162000Z |
| var-201508-0417 | The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary … | 2025-04-13T21:36:25.090000Z |
| var-201604-0390 | Cross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04… | 2025-04-13T21:35:50.786000Z |
| var-201410-1417 | Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and O… | 2025-04-13T21:35:49.653000Z |
| var-201509-0076 | IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause … | 2025-04-13T21:35:47.128000Z |
| var-201507-0062 | Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows a… | 2025-04-13T21:35:41.312000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2020:0891-1 | Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) | 2020-04-03T07:31:44Z | 2020-04-03T07:31:44Z |
| suse-su-2020:0860-1 | Security update for exiv2 | 2020-04-03T07:01:56Z | 2020-04-03T07:01:56Z |
| suse-su-2020:0856-1 | Security update for SUSE Manager Server 3.2 | 2020-04-02T14:48:30Z | 2020-04-02T14:48:30Z |
| suse-su-2020:0854-1 | Security update for python3 | 2020-04-02T13:14:19Z | 2020-04-02T13:14:19Z |
| suse-su-2020:0853-1 | Security update for mgetty | 2020-04-02T13:11:39Z | 2020-04-02T13:11:39Z |
| suse-su-2020:0852-1 | Security update for haproxy | 2020-04-02T13:11:19Z | 2020-04-02T13:11:19Z |
| suse-su-2020:0851-1 | Security update for haproxy | 2020-04-02T13:11:05Z | 2020-04-02T13:11:05Z |
| suse-su-2020:0845-1 | Security update for qemu | 2020-04-01T14:19:43Z | 2020-04-01T14:19:43Z |
| suse-su-2020:0844-1 | Security update for qemu | 2020-04-01T14:19:10Z | 2020-04-01T14:19:10Z |
| suse-su-2020:0843-1 | Security update for memcached | 2020-04-01T14:18:26Z | 2020-04-01T14:18:26Z |
| suse-su-2020:0836-1 | Security update for the Linux Kernel | 2020-03-31T16:39:32Z | 2020-03-31T16:39:32Z |
| suse-su-2020:0832-1 | Security update for glibc | 2020-03-31T14:16:11Z | 2020-03-31T14:16:11Z |
| suse-su-2020:0831-1 | Security update for mariadb | 2020-03-31T12:51:03Z | 2020-03-31T12:51:03Z |
| suse-su-2020:0820-1 | Security update for glibc | 2020-03-31T11:02:40Z | 2020-03-31T11:02:40Z |
| suse-su-2020:0819-1 | Security update for icu | 2020-03-31T11:01:51Z | 2020-03-31T11:01:51Z |
| suse-su-2020:0818-1 | Security update for cloud-init | 2020-03-31T07:23:28Z | 2020-03-31T07:23:28Z |
| suse-su-2020:0813-1 | Security update for spamassassin | 2020-03-30T10:58:33Z | 2020-03-30T10:58:33Z |
| suse-su-2020:0811-1 | Security update for spamassassin | 2020-03-30T08:33:26Z | 2020-03-30T08:33:26Z |
| suse-su-2020:0810-1 | Security update for spamassassin | 2020-03-30T08:28:13Z | 2020-03-30T08:28:13Z |
| suse-su-2020:0806-1 | Security update for tomcat | 2020-03-27T13:27:30Z | 2020-03-27T13:27:30Z |
| suse-su-2020:14334-1 | Security update for tomcat6 | 2020-03-27T08:20:07Z | 2020-03-27T08:20:07Z |
| suse-su-2020:0801-1 | Security update for ldns | 2020-03-26T16:29:25Z | 2020-03-26T16:29:25Z |
| suse-ru-2020:0793-1 | Recommended update for systemd | 2020-03-25T14:16:04Z | 2020-03-25T14:16:04Z |
| suse-su-2020:0792-1 | Security update for python-cffi, python-cryptography | 2020-03-25T14:14:32Z | 2020-03-25T14:14:32Z |
| suse-su-2020:0790-1 | Security update for python-cffi, python-cryptography, python-xattr | 2020-03-25T12:24:49Z | 2020-03-25T12:24:49Z |
| suse-su-2020:0779-1 | Security update for keepalived | 2020-03-24T20:12:06Z | 2020-03-24T20:12:06Z |
| suse-ru-2020:0775-1 | Recommended update for python-botocore | 2020-03-24T16:41:41Z | 2020-03-24T16:41:41Z |
| suse-su-2020:0752-1 | Security update for postgresql10 | 2020-03-23T15:33:12Z | 2020-03-23T15:33:12Z |
| suse-su-2020:0751-1 | Security update for cloud-init | 2020-03-23T15:32:49Z | 2020-03-23T15:32:49Z |
| suse-su-2020:0750-1 | Security update for python36 | 2020-03-23T15:32:35Z | 2020-03-23T15:32:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-35982 | Adobe Bridge越界写入漏洞（CNVD-2024-35982） | 2024-08-16 | 2024-08-21 |
| cnvd-2024-35981 | Adobe Bridge越界读取漏洞（CNVD-2024-35981） | 2024-08-16 | 2024-08-21 |
| cnvd-2024-35918 | Tenda AX1806缓冲区溢出漏洞（CNVD-2024-35918） | 2024-07-24 | 2024-08-20 |
| cnvd-2024-35669 | Apache SeaTunnel认证绕过漏洞 | 2024-08-01 | 2024-08-20 |
| cnvd-2024-35668 | Apache Linkis权限提升漏洞 | 2024-08-06 | 2024-08-20 |
| cnvd-2024-35667 | Apache Linkis安全绕过漏洞 | 2024-08-06 | 2024-08-20 |
| cnvd-2024-35666 | Apache InLong代码注入漏洞（CNVD-2024-35666） | 2024-08-06 | 2024-08-20 |
| cnvd-2024-35665 | Apache CloudStack信息泄露漏洞（CNVD-2024-35665） | 2024-08-08 | 2024-08-20 |
| cnvd-2024-35664 | Apache MINA SSHD安全绕过漏洞 | 2024-08-14 | 2024-08-20 |
| cnvd-2024-35663 | Apache DolphinScheduler输入验证错误漏洞（NVD-C-2024-618180） | 2024-08-14 | 2024-08-20 |
| cnvd-2024-35662 | Apache Answer安全绕过漏洞 | 2024-08-14 | 2024-08-20 |
| cnvd-2024-35661 | Apache Answer安全绕过漏洞（CNVD-2024-35661） | 2024-08-14 | 2024-08-20 |
| cnvd-2024-34316 | 北京宏景世纪软件股份有限公司人力资源信息管理系统存在SQL注入漏洞（CNVD-2024-34316） | 2024-07-06 | 2024-08-20 |
| cnvd-2024-34315 | 北京宏景世纪软件股份有限公司人力资源信息管理系统存在SQL注入漏洞（CNVD-2024-34315） | 2024-07-06 | 2024-08-20 |
| cnvd-2024-32452 | 施耐德电气（中国）有限公司TM241CE24T_U存在XSS漏洞 | 2024-06-21 | 2024-08-20 |
| cnvd-2024-35671 | Apache Traffic Server输入验证错误漏洞（CNVD-2024-35671） | 2024-07-30 | 2024-08-19 |
| cnvd-2024-35670 | Apache Roller跨站脚本漏洞（CNVD-2024-35670） | 2024-07-30 | 2024-08-19 |
| cnvd-2024-35660 | SAP BusinessObjects BI Platform反序列化漏洞 | 2022-11-10 | 2024-08-19 |
| cnvd-2024-35659 | SAP NetWeaver授权问题漏洞 | 2024-04-12 | 2024-08-19 |
| cnvd-2024-35658 | SAP NetWeaver Application Server文件上传漏洞 | 2024-05-30 | 2024-08-19 |
| cnvd-2024-35657 | SAP NetWeaver Application Server跨站脚本漏洞（CNVD-2024-35657） | 2024-05-30 | 2024-08-19 |
| cnvd-2024-35656 | SAP My Travel Requests授权问题漏洞 | 2024-05-30 | 2024-08-19 |
| cnvd-2024-35655 | SAP Enable Now Manager授权问题漏洞 | 2024-05-30 | 2024-08-19 |
| cnvd-2024-35654 | SAP NetWeaver跨站脚本漏洞（CNVD-2024-35654） | 2024-07-19 | 2024-08-19 |
| cnvd-2024-35653 | SAP CRM信息泄露漏洞 | 2024-07-19 | 2024-08-19 |
| cnvd-2024-34948 | 青岛和正信息技术有限公司金斗云HKMP存在SQL注入漏洞 | 2024-07-15 | 2024-08-19 |
| cnvd-2024-34014 | 北京网御星云信息技术有限公司网御VPN安全网关存在任意文件下载漏洞 | 2024-07-05 | 2024-08-19 |
| cnvd-2024-34008 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞（CNVD-2024-34008） | 2024-07-05 | 2024-08-19 |
| cnvd-2024-32671 | 北京亚控科技发展有限公司KingH5Stream存在未授权访问漏洞（CNVD-2024-32671） | 2024-07-04 | 2024-08-18 |
| cnvd-2024-35253 | 施耐德电气（中国）有限公司施耐德PLC仿真器存在拒绝服务漏洞 | 2024-07-20 | 2024-08-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-158 | Vulnérabilité dans Dokeos | 2009-04-23T00:00:00.000000 | 2009-04-23T00:00:00.000000 |
| certa-2009-avi-157 | Multiples vulnérabilités dans Mozilla Firefox | 2009-04-22T00:00:00.000000 | 2009-04-22T00:00:00.000000 |
| certa-2009-avi-155 | Multiples vulnérabilités du gestionnaire de périphériques udev | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-154 | Multiples vulnérabilités des produits Oracle | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-153 | Vulnérabilité du noyau Linux | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-152 | Vulnérabilité dans Apache Tomcat mod_jk | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-151 | Multiples vulnérabilités dans IBM BladeCenter Advanced Management Module | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-150 | Vulnérabilité dans IBM AIX | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-148 | Vulnérabilité dans phpMyAdmin | 2009-04-17T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-094 | Vulnérabilité dans l'interprétation JBIG2 dans le format PDF | 2009-03-11T00:00:00.000000 | 2009-04-17T00:00:00.000000 |
| certa-2009-avi-147 | Vulnérabilité dans Microsoft Excel | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-146 | Vulnérabilité dans Microsoft ISA Server | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-145 | Vulnérabilité dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-144 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-143 | Vulnérabilités dans les services HTTP Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-142 | Vulnérabilités dans Microsoft Windows | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-141 | Vulnérabilité dans Microsoft DirectX | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-140 | Vulnérabilités dans les convertisseurs de texte WordPad et Office | 2009-04-15T00:00:00.000000 | 2009-04-15T00:00:00.000000 |
| certa-2009-avi-138 | Multiples vulnérabilités dans SPIP | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-137 | Multiples vulnérabilités des produits VMWare | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-136 | Vulnérabilité du pare-feu Packet Filter d'OpenBSD | 2009-04-14T00:00:00.000000 | 2009-04-14T00:00:00.000000 |
| certa-2009-avi-135 | Vulnérabilité dans HP OpenView | 2009-04-10T00:00:00.000000 | 2009-04-10T00:00:00.000000 |
| certa-2009-avi-134 | Vulnérabilités des produits Cisco | 2009-04-10T00:00:00.000000 | 2009-04-10T00:00:00.000000 |
| certa-2009-avi-131 | Vulnérabilités de ClamAV | 2009-04-08T00:00:00.000000 | 2009-04-09T00:00:00.000000 |
| certa-2009-avi-132 | Vulnérabilité dans Novell NetIdentity | 2009-04-08T00:00:00.000000 | 2009-04-08T00:00:00.000000 |
| certa-2009-avi-130 | Multiples vulnérabilités dans Joomla! | 2009-04-06T00:00:00.000000 | 2009-04-08T00:00:00.000000 |
| certa-2009-avi-129 | Vulnérabilité dans Asterisk | 2009-04-06T00:00:00.000000 | 2009-04-06T00:00:00.000000 |
| certa-2009-avi-128 | Vulnérabilité dans Moodle | 2009-04-03T00:00:00.000000 | 2009-04-03T00:00:00.000000 |
| certa-2009-avi-127 | Vulnérabilité de nss-ldap | 2009-04-02T00:00:00.000000 | 2009-04-02T00:00:00.000000 |
| certa-2009-avi-126 | Vulnérabilités de IBM WebSphere | 2009-04-01T00:00:00.000000 | 2009-04-01T00:00:00.000000 |