Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64382 |
4.3 (3.1)
|
WordPress Order Export & Order Import for WooCommerce … |
WebToffee |
Order Export & Order Import for WooCommerce |
2025-11-13T09:24:35.435Z | 2026-01-20T14:28:22.800Z |
| CVE-2025-64378 |
7.5 (3.1)
|
WordPress ListingPro theme < 2.9.10 - Broken Access Co… |
CridioStudio |
ListingPro |
2025-12-18T07:22:16.946Z | 2026-01-20T14:28:22.742Z |
| CVE-2025-64379 |
4.3 (3.1)
|
WordPress Booster for WooCommerce plugin <= 7.4.0 - Br… |
Pluggabl |
Booster for WooCommerce |
2025-11-13T09:24:34.101Z | 2026-01-20T14:28:22.712Z |
| CVE-2025-64377 |
8.1 (3.1)
|
WordPress ListingPro theme < 2.9.10 - Local File Inclu… |
CridioStudio |
ListingPro |
2025-12-18T07:22:16.752Z | 2026-01-20T14:28:22.647Z |
| CVE-2025-64376 |
7.1 (3.1)
|
WordPress ListingPro theme < 2.9.10 - Cross Site Scrip… |
CridioStudio |
ListingPro |
2025-12-18T07:22:16.555Z | 2026-01-20T14:28:22.643Z |
| CVE-2025-64366 |
7.6 (3.1)
|
WordPress MasterStudy LMS plugin <= 3.6.27 - SQL Injec… |
Stylemix |
MasterStudy LMS |
2025-10-31T11:42:39.301Z | 2026-01-20T14:28:22.594Z |
| CVE-2025-64375 |
6.5 (3.1)
|
WordPress WP Social Ninja plugin <= 3.20.1 - Broken Ac… |
Mahmudul Hasan Arif |
WP Social Ninja |
2025-12-18T07:22:16.373Z | 2026-01-20T14:28:22.576Z |
| CVE-2025-64374 |
9.9 (3.1)
|
WordPress Motors theme <= 5.6.81 - Arbitrary File Uplo… |
StylemixThemes |
Motors |
2025-12-18T07:22:16.202Z | 2026-01-20T14:28:22.572Z |
| CVE-2025-64360 |
7.5 (3.1)
|
WordPress Consulting Elementor Widgets plugin <= 1.4.2… |
StylemixThemes |
Consulting Elementor Widgets |
2025-10-31T11:42:32.330Z | 2026-01-20T14:28:22.556Z |
| CVE-2025-64373 |
8.1 (3.1)
|
WordPress Traveler theme < 3.2.6 - Local File Inclusio… |
shinetheme |
Traveler |
2025-12-18T07:22:16.006Z | 2026-01-20T14:28:22.551Z |
| CVE-2025-64363 |
7.5 (3.1)
|
WordPress Kleo theme < 5.5.0 - Local File Inclusion vu… |
SeventhQueen |
Kleo |
2025-10-31T11:42:37.131Z | 2026-01-20T14:28:22.551Z |
| CVE-2025-64367 |
6.5 (3.1)
|
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scri… |
Adrian Tobey |
Groundhogg |
2025-10-31T11:42:40.076Z | 2026-01-20T14:28:22.541Z |
| CVE-2025-64370 |
5.3 (3.1)
|
WordPress YOP Poll plugin <= 6.5.38 - Broken Access Co… |
YOP |
YOP Poll |
2025-11-13T09:24:33.651Z | 2026-01-20T14:28:22.538Z |
| CVE-2025-64368 |
5.4 (3.1)
|
WordPress Bard theme <= 1.6 - Cross Site Request Forge… |
Mikado-Themes |
Bard |
2025-10-31T11:42:40.843Z | 2026-01-20T14:28:22.538Z |
| CVE-2025-64361 |
6.5 (3.1)
|
WordPress Consulting Elementor Widgets plugin <= 1.4.2… |
StylemixThemes |
Consulting Elementor Widgets |
2025-10-31T11:42:33.072Z | 2026-01-20T14:28:22.533Z |
| CVE-2025-64359 |
7.5 (3.1)
|
WordPress Consulting theme < 6.7.5 - Local File Inclus… |
StylemixThemes |
Consulting |
2025-10-31T11:42:31.602Z | 2026-01-20T14:28:22.532Z |
| CVE-2025-64352 |
2.7 (3.1)
|
WordPress Essential Addons for Elementor plugin <= 6.2… |
WPDeveloper |
Essential Addons for Elementor |
2025-10-31T11:42:23.045Z | 2026-01-20T14:28:22.531Z |
| CVE-2025-64369 |
6.5 (3.1)
|
WordPress Contact Form Email plugin <= 1.3.58 - Broken… |
codepeople |
Contact Form Email |
2025-11-13T09:24:33.215Z | 2026-01-20T14:28:22.528Z |
| CVE-2025-64371 |
8.5 (3.1)
|
WordPress Traveler theme < 3.2.6 - SQL Injection vulne… |
shinetheme |
Traveler |
2025-12-18T07:22:15.635Z | 2026-01-20T14:28:22.518Z |
| CVE-2025-64357 |
4.3 (3.1)
|
WordPress Advanced Database Cleaner plugin <= 3.1.6 - … |
Younes JFR. |
Advanced Database Cleaner |
2025-10-31T11:42:27.627Z | 2026-01-20T14:28:22.509Z |
| CVE-2025-64364 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.126 - Local File Inc… |
StylemixThemes |
Masterstudy |
2025-10-31T11:42:37.865Z | 2026-01-20T14:28:22.508Z |
| CVE-2025-64358 |
4.3 (3.1)
|
WordPress Smart Coupons for WooCommerce plugin <= 2.2.… |
WebToffee |
Smart Coupons for WooCommerce |
2025-10-31T11:42:28.439Z | 2026-01-20T14:28:22.505Z |
| CVE-2025-64362 |
6.5 (3.1)
|
WordPress K Elements plugin < 5.5.0 - Cross Site Scrip… |
SeventhQueen |
K Elements |
2025-10-31T11:42:36.419Z | 2026-01-20T14:28:22.503Z |
| CVE-2025-64372 |
7.1 (3.1)
|
WordPress Traveler theme < 3.2.6 - Cross Site Scriptin… |
shinetheme |
Traveler |
2025-12-18T07:22:15.823Z | 2026-01-20T14:28:22.489Z |
| CVE-2025-64351 |
4.3 (3.1)
|
WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitiv… |
Rank Math SEO |
Rank Math SEO |
2025-10-31T11:42:22.226Z | 2026-01-20T14:28:22.441Z |
| CVE-2025-64293 |
7.6 (3.1)
|
WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Inject… |
Golemiq |
0 Day Analytics |
2025-11-12T15:52:49.026Z | 2026-01-20T14:28:22.418Z |
| CVE-2025-64353 |
8.8 (3.1)
|
WordPress Polylang plugin <= 3.7.3 - Deserialization o… |
Chouby |
Polylang |
2025-10-31T11:42:25.417Z | 2026-01-20T14:28:22.353Z |
| CVE-2025-64354 |
6.5 (3.1)
|
WordPress Gutenberg plugin <= 21.8.2 - Cross Site Scri… |
Matias Ventura |
Gutenberg |
2025-10-31T11:42:26.178Z | 2026-01-20T14:28:22.341Z |
| CVE-2025-64295 |
6.5 (3.1)
|
WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sens… |
Syed Balkhi |
All In One SEO Pack |
2025-12-18T07:22:15.447Z | 2026-01-20T14:28:22.289Z |
| CVE-2025-64355 |
6.5 (3.1)
|
WordPress JetElements For Elementor plugin <= 2.7.12 -… |
Crocoblock |
JetElements For Elementor |
2025-12-18T16:16:33.764Z | 2026-01-20T14:28:22.280Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22600 |
9.1 (3.1)
|
OpenProject is Vulnerable to Arbitrary File Read via I… |
opf |
openproject |
2026-01-10T01:06:00.502Z | 2026-01-13T20:07:53.470Z |
| CVE-2026-0852 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminUpdateUser.php sq… |
code-projects |
Online Music Site |
2026-01-12T00:02:06.128Z | 2026-02-23T08:31:40.492Z |
| CVE-2026-0851 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Music Site AdminAddUser.php sql i… |
code-projects |
Online Music Site |
2026-01-11T23:32:07.010Z | 2026-02-23T08:31:27.530Z |
| CVE-2025-62000 |
7.1 (3.1)
6.9 (4.0)
|
BullWall Ransomware Containment incomplete file inspection |
BullWall |
Ransomware Containment |
2025-12-18T20:32:02.910Z | 2026-01-15T19:50:39.114Z |
| CVE-2025-14242 |
6.5 (3.1)
|
Vsftpd: vsftpd: denial of service via integer overflow… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-14T15:23:03.708Z | 2026-01-26T14:00:12.080Z |
| CVE-2026-0850 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
code-projects Intern Membership Management System dele… |
code-projects |
Intern Membership Management System |
2026-01-11T23:02:06.162Z | 2026-02-23T08:31:13.750Z |
| CVE-2025-58149 |
7.5 (3.1)
|
Incorrect removal of permissions on PCI device unplug |
Xen |
Xen |
2025-10-31T11:50:39.536Z | 2025-11-04T21:13:31.524Z |
| CVE-2025-58148 |
7.5 (3.1)
|
x86: Incorrect input sanitisation in Viridian hypercalls |
Xen |
Xen |
2025-10-31T11:50:28.407Z | 2025-11-04T21:13:30.190Z |
| CVE-2025-58147 |
7.5 (3.1)
|
x86: Incorrect input sanitisation in Viridian hypercalls |
Xen |
Xen |
2025-10-31T11:50:28.282Z | 2025-11-04T21:13:28.853Z |
| CVE-2025-57981 |
6.5 (3.1)
|
WordPress WP Social Widget Plugin <= 2.3.1 - Cross Sit… |
catchsquare |
WP Social Widget |
2025-09-22T18:24:29.794Z | 2025-09-23T14:29:29.031Z |
| CVE-2024-32444 |
9.8 (3.1)
|
WordPress RealHomes theme <= 4.3.6 - Privilege Escalat… |
InspiryThemes |
RealHomes |
2025-09-03T06:55:35.317Z | 2025-09-03T19:42:29.922Z |
| CVE-2025-59922 |
6.8 (3.1)
|
An improper neutralization of special elements us… |
Fortinet |
FortiClientEMS |
2026-01-13T16:32:28.715Z | 2026-01-14T09:16:14.334Z |
| CVE-2025-67685 |
3.4 (3.1)
|
A Server-Side Request Forgery (SSRF) vulnerabilit… |
Fortinet |
FortiSandbox |
2026-01-13T16:32:29.301Z | 2026-01-14T09:19:01.948Z |
| CVE-2025-58693 |
5.7 (3.1)
|
An improper limitation of a pathname to a restric… |
Fortinet |
FortiVoice |
2026-01-13T16:32:29.011Z | 2026-01-14T09:16:23.320Z |
| CVE-2025-55128 |
6.5 (3.0)
|
HackerOne community member Dang Hung Vi (vidang04… |
Revive |
Revive Adserver |
2025-11-20T19:06:52.867Z | 2025-12-02T01:42:06.091Z |
| CVE-2025-55127 |
5.4 (3.1)
|
HackerOne community member Dao Hoang Anh (yoyomis… |
Revive |
Revive Adserver |
2025-11-20T19:07:15.245Z | 2025-11-20T21:19:26.325Z |
| CVE-2025-55126 |
6.5 (3.0)
|
HackerOne community member Dang Hung Vi (vidang04… |
Revive |
Revive Adserver |
2025-11-20T19:07:42.392Z | 2025-12-01T19:18:43.691Z |
| CVE-2026-23550 |
10 (3.1)
|
WordPress Modular DS plugin <= 2.5.1 - Privilege Escal… |
Modular DS |
Modular DS |
2026-01-14T08:44:25.503Z | 2026-01-14T21:09:14.352Z |
| CVE-2025-36192 |
6.7 (3.1)
|
Missing Authorization with the DS8900F and DS8A00 Hard… |
IBM |
DS8A00( R10.1) |
2025-12-26T13:58:51.713Z | 2025-12-26T15:15:11.888Z |
| CVE-2026-21639 |
5.4 (3.1)
|
A malicious actor in Wi-Fi range of the affected … |
Ubiquiti Inc |
airMAX AC |
2026-01-08T16:14:22.626Z | 2026-01-08T17:21:53.724Z |
| CVE-2026-21638 |
8.8 (3.1)
|
A malicious actor in Wi-Fi range of the affected … |
Ubiquiti Inc |
UBB-XG |
2026-01-08T16:14:22.563Z | 2026-02-26T15:04:54.587Z |
| CVE-2025-59470 |
9 (3.1)
|
This vulnerability allows a Backup Operator to pe… |
Veeam |
Backup and Recovery |
2026-01-08T16:18:20.275Z | 2026-02-26T15:04:54.450Z |
| CVE-2025-59469 |
9 (3.1)
|
This vulnerability allows a Backup or Tape Operat… |
Veeam |
Backup and Recovery |
2026-01-08T16:18:20.314Z | 2026-02-26T15:04:54.295Z |
| CVE-2025-59468 |
9 (3.1)
|
This vulnerability allows a Backup Administrator … |
Veeam |
Backup and Recovery |
2026-01-08T16:18:20.416Z | 2026-02-26T15:04:54.137Z |
| CVE-2026-21267 |
8.6 (3.1)
|
Dreamweaver Desktop | Improper Neutralization of Speci… |
Adobe |
Dreamweaver Desktop |
2026-01-13T18:25:37.183Z | 2026-02-26T15:04:16.463Z |
| CVE-2026-21268 |
8.6 (3.1)
|
Dreamweaver Desktop | Improper Input Validation (CWE-20) |
Adobe |
Dreamweaver Desktop |
2026-01-13T18:25:34.136Z | 2026-02-26T15:04:17.742Z |
| CVE-2026-21271 |
8.6 (3.1)
|
Dreamweaver Desktop | Improper Input Validation (CWE-20) |
Adobe |
Dreamweaver Desktop |
2026-01-13T18:25:36.417Z | 2026-02-26T15:04:16.780Z |
| CVE-2026-21272 |
8.6 (3.1)
|
Dreamweaver Desktop | Improper Input Validation (CWE-20) |
Adobe |
Dreamweaver Desktop |
2026-01-13T18:25:34.935Z | 2026-02-26T15:04:17.424Z |
| CVE-2026-21274 |
7.8 (3.1)
|
Dreamweaver Desktop | Incorrect Authorization (CWE-863) |
Adobe |
Dreamweaver Desktop |
2026-01-13T18:25:35.669Z | 2026-02-26T15:04:17.051Z |
| CVE-2025-14687 |
4.3 (3.1)
|
Client-Side Enforcement of Server-Side Security in IBM… |
IBM |
Db2 Intelligence Center |
2025-12-26T13:21:33.403Z | 2025-12-26T14:37:13.233Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-22600 | OpenProject is an open-source, web-based project management software. A Local File Read (LFR) vulne… | 2026-01-10T02:15:48.743 | 2026-01-14T22:25:56.047 |
| fkie_cve-2026-0852 | A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is… | 2026-01-12T01:15:49.950 | 2026-01-14T22:19:33.933 |
| fkie_cve-2026-0851 | A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an u… | 2026-01-12T00:15:52.763 | 2026-01-14T22:18:02.417 |
| fkie_cve-2025-62000 | BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a speci… | 2025-12-18T21:15:53.800 | 2026-01-14T22:15:50.893 |
| fkie_cve-2025-14242 | A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer over… | 2026-01-14T16:15:55.967 | 2026-01-14T22:15:49.780 |
| fkie_cve-2026-0850 | A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted i… | 2026-01-11T23:15:46.090 | 2026-01-14T22:09:35.817 |
| fkie_cve-2025-58149 | When passing through PCI devices, the detach logic in libxl won't remove access permissions to any … | 2025-10-31T12:15:35.143 | 2026-01-14T22:04:31.723 |
| fkie_cve-2025-58148 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… | 2025-10-31T12:15:35.037 | 2026-01-14T22:03:32.010 |
| fkie_cve-2025-58147 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilit… | 2025-10-31T12:15:34.590 | 2026-01-14T22:03:18.957 |
| fkie_cve-2025-57981 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-09-22T19:15:58.153 | 2026-01-14T21:42:22.203 |
| fkie_cve-2024-32444 | Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation… | 2025-09-03T07:15:32.100 | 2026-01-14T21:40:46.957 |
| fkie_cve-2025-59922 | An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerabili… | 2026-01-13T17:15:58.147 | 2026-01-14T21:38:33.547 |
| fkie_cve-2025-67685 | A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox… | 2026-01-13T17:15:58.873 | 2026-01-14T21:38:01.700 |
| fkie_cve-2025-58693 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in … | 2026-01-13T17:15:57.940 | 2026-01-14T21:34:22.663 |
| fkie_cve-2025-55128 | HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumptio… | 2025-11-20T19:16:19.137 | 2026-01-14T21:23:44.720 |
| fkie_cve-2025-55127 | HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whi… | 2025-11-20T19:16:19.027 | 2026-01-14T21:18:27.467 |
| fkie_cve-2025-55126 | HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involvin… | 2025-11-20T19:16:18.880 | 2026-01-14T21:16:56.290 |
| fkie_cve-2026-23550 | Incorrect Privilege Assignment vulnerability in Modular DS allows Privilege Escalation.This issue a… | 2026-01-14T09:16:02.520 | 2026-01-14T21:15:54.193 |
| fkie_cve-2025-36192 | IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89… | 2025-12-26T14:15:58.507 | 2026-01-14T21:09:40.390 |
| fkie_cve-2026-21639 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airM… | 2026-01-08T17:15:50.483 | 2026-01-14T21:06:35.607 |
| fkie_cve-2026-21638 | A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airM… | 2026-01-08T17:15:50.357 | 2026-01-14T21:06:07.787 |
| fkie_cve-2025-59470 | This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres … | 2026-01-08T17:15:48.290 | 2026-01-14T20:59:08.753 |
| fkie_cve-2025-59469 | This vulnerability allows a Backup or Tape Operator to write files as root. | 2026-01-08T17:15:48.183 | 2026-01-14T20:58:51.930 |
| fkie_cve-2025-59468 | This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the post… | 2026-01-08T17:15:48.067 | 2026-01-14T20:58:35.693 |
| fkie_cve-2026-21267 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special… | 2026-01-13T19:16:24.213 | 2026-01-14T20:51:15.670 |
| fkie_cve-2026-21268 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerab… | 2026-01-13T19:16:24.383 | 2026-01-14T20:50:52.847 |
| fkie_cve-2026-21271 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerab… | 2026-01-13T19:16:24.543 | 2026-01-14T20:50:28.960 |
| fkie_cve-2026-21272 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerab… | 2026-01-13T19:16:24.703 | 2026-01-14T20:49:33.830 |
| fkie_cve-2026-21274 | Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerabil… | 2026-01-13T19:16:24.863 | 2026-01-14T20:49:03.450 |
| fkie_cve-2025-14687 | IBM Db2 Intelligence Center 1.1.0, 1.1.1, 1.1.2 could allow an authenticated user to perform unauth… | 2025-12-26T14:15:58.347 | 2026-01-14T20:46:53.187 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wgfq-49px-5cwg |
3.7 (3.1)
2.9 (4.0)
|
A security flaw has been discovered in OpenCart up to 4.1.0.3. Affected by this issue is some unkno… | 2025-12-28T03:30:12Z | 2025-12-28T03:30:12Z |
| ghsa-9786-pc79-p3v7 |
3.1 (3.1)
2.3 (4.0)
|
A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectIn… | 2025-12-28T03:30:12Z | 2025-12-28T03:30:12Z |
| ghsa-wf3v-cq62-6r54 |
6.4 (3.1)
5.1 (4.0)
|
myBB Forums 1.8.26 contains a stored cross-site scripting vulnerability in the template management … | 2025-12-23T00:30:31Z | 2025-12-27T21:30:12Z |
| ghsa-5639-746g-v626 |
8.8 (3.1)
8.6 (4.0)
|
MyBB 1.8.32 contains a chained vulnerability that allows authenticated administrators to bypass ava… | 2025-12-23T00:30:32Z | 2025-12-27T21:30:12Z |
| ghsa-rvwq-p5fc-r88c |
5.5 (3.1)
5.1 (4.0)
|
A vulnerability was found in 1541492390c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f… | 2025-12-19T21:30:19Z | 2025-12-27T21:30:11Z |
| ghsa-hj3q-q387-m5hr |
3.7 (3.1)
2.9 (4.0)
|
A vulnerability was detected in PandaXGO PandaX up to fb8ff40f7ce5dfebdf66306c6d85625061faf7e5. Thi… | 2025-12-27T18:30:26Z | 2025-12-27T18:30:26Z |
| ghsa-qpxx-2fwx-f5qj |
7.5 (3.1)
|
Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthe… | 2025-12-03T21:31:04Z | 2025-12-27T18:30:23Z |
| ghsa-2qm6-vprh-vgfc |
10.0 (3.1)
|
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code … | 2025-12-27T15:30:16Z | 2025-12-27T15:30:17Z |
| ghsa-72f9-ghc4-fpv2 |
6.3 (3.1)
2.1 (4.0)
|
A weakness has been identified in getmaxun maxun up to 0.0.28. The affected element is the function… | 2025-12-27T12:30:12Z | 2025-12-27T12:30:12Z |
| ghsa-9m78-g4jr-6549 |
3.7 (3.1)
2.9 (4.0)
|
A security flaw has been discovered in getmaxun maxun up to 0.0.28. Impacted is an unknown function… | 2025-12-27T09:30:27Z | 2025-12-27T09:30:27Z |
| ghsa-9pf3-7rrr-x5jh |
8.8 (3.1)
|
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load() | 2025-12-26T17:34:08Z | 2025-12-27T01:08:38Z |
| ghsa-58jc-rcg5-95f3 |
7.3 (3.1)
|
n8n's Possible Stored XSS in "Respond to Webhook" Node May Execute Outside iframe Sandbox | 2025-12-26T17:30:19Z | 2025-12-27T01:08:11Z |
| ghsa-g5p6-3j82-xfm4 |
7.5 (3.1)
|
Croogo CMS has a path traversal vulnerability | 2025-12-26T18:30:27Z | 2025-12-26T23:21:14Z |
| ghsa-rcfx-77hg-w2wv |
|
FastMCP updated to MCP 1.23+ due to CVE-2025-66416 | 2025-12-26T23:20:50Z | 2025-12-26T23:20:50Z |
| ghsa-w832-gg5g-x44m |
2.7 (4.0)
|
Open redirect endpoint in Datasette | 2025-11-06T15:13:33Z | 2025-12-26T21:51:43Z |
| ghsa-qxv4-g9hq-r87f |
9.8 (3.1)
|
Time-based blind SQL Injection vulnerability in Cloudlog v2.6.15 at the endpoint /index.php/logbook… | 2025-12-26T18:30:27Z | 2025-12-26T21:30:21Z |
| ghsa-6r9g-7c8c-j56m |
7.5 (3.1)
6.9 (4.0)
|
GNU Barcode 0.99 contains a memory leak vulnerability in the command line processing function withi… | 2025-12-24T21:30:32Z | 2025-12-26T21:30:21Z |
| ghsa-6vj3-p34w-xxjp |
9.3 (4.0)
|
apidoc-core has a prototype pollution vulnerability | 2025-12-26T18:30:26Z | 2025-12-26T19:50:17Z |
| ghsa-jv72-59wq-8rxm |
7.5 (3.1)
|
libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS) | 2025-12-26T15:30:17Z | 2025-12-26T19:47:33Z |
| ghsa-hq57-c72x-4774 |
5.4 (3.1)
|
Gitea vulnerable to Cross-site Scripting | 2025-12-26T06:30:27Z | 2025-12-26T19:46:52Z |
| ghsa-7xq4-mwcp-q8fx |
5.8 (3.1)
|
Gitea: anonymous user can visit private user's project | 2025-12-26T06:30:27Z | 2025-12-26T19:36:13Z |
| ghsa-f85h-c7m6-cfpm |
5.0 (3.1)
|
Gitea sometimes mishandles propagation of token scope for access control within one of its own pack… | 2025-12-26T06:30:27Z | 2025-12-26T19:30:16Z |
| ghsa-jhx5-4vr4-f327 |
5.3 (3.1)
|
Gitea inadvertently discloses users' login times by allowing (for example) the lastlogintime explor… | 2025-12-26T06:30:27Z | 2025-12-26T19:17:47Z |
| ghsa-898p-hh3p-hf9r |
5.4 (3.1)
|
Gitea allows XSS because the search input box (for creating tags and branches) is v-html instead of… | 2025-12-26T03:30:17Z | 2025-12-26T19:16:42Z |
| ghsa-xfq3-qj7j-4565 |
4.9 (3.1)
|
Gitea mishandles access to a private resource upon receiving an API token with scope limited to pub… | 2025-12-26T03:30:15Z | 2025-12-26T19:12:54Z |
| ghsa-rrcw-5rjv-vj26 |
3.1 (3.1)
|
Gitea doesn't adequately enforce branch deletion permissions after merging a pull request. | 2025-12-26T03:30:15Z | 2025-12-26T19:12:24Z |
| ghsa-263q-5cv3-xq9g |
8.2 (3.1)
|
Gitea allows attackers to add attachments with forbidden file extensions | 2025-12-26T03:30:15Z | 2025-12-26T19:12:02Z |
| ghsa-cm54-pfmc-xrwx |
4.3 (3.1)
|
Gitea mishandles authorization for deletion of releases | 2025-12-26T03:30:15Z | 2025-12-26T19:00:21Z |
| ghsa-9fjq-45qv-pcm7 |
6.6 (4.0)
|
ruint affected by unsoundness of safe `reciprocal_mg10` | 2025-12-26T18:55:53Z | 2025-12-26T18:55:53Z |
| ghsa-xq7p-3jhh-cr76 |
7.5 (3.1)
|
Incorrect access control in DEV Systemtechnik GmbH DEV 7113 RF over Fiber Distribution System 32-00… | 2025-12-26T18:30:27Z | 2025-12-26T18:30:27Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-24799 | Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affe… | 2024-02-01T06:02:24.308704Z |
| gsd-2024-24847 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.308356Z |
| gsd-2024-24841 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.306215Z |
| gsd-2024-24843 | Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPa… | 2024-02-01T06:02:24.302950Z |
| gsd-2024-24800 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.297424Z |
| gsd-2024-24836 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.289892Z |
| gsd-2024-24838 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.286954Z |
| gsd-2024-24842 | Deserialization of Untrusted Data vulnerability in Echo Plugins Knowledge Base for Docume… | 2024-02-01T06:02:24.279300Z |
| gsd-2024-24839 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.270373Z |
| gsd-2024-24844 | The format of the source doesn't require a description, click on the link for more details. | 2024-02-01T06:02:24.270016Z |
| gsd-2024-24837 | Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCo… | 2024-02-01T06:02:24.259890Z |
| gsd-2024-24832 | Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime… | 2024-02-01T06:02:24.257943Z |
| gsd-2024-24818 | EspoCRM is an Open Source Customer Relationship Management software. An attacker can inje… | 2024-02-01T06:02:24.257351Z |
| gsd-2024-24840 | Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue … | 2024-02-01T06:02:24.253098Z |
| gsd-2024-24830 | OpenObserve is a observability platform built specifically for logs, metrics, traces, ana… | 2024-02-01T06:02:24.247272Z |
| gsd-2024-24805 | Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue… | 2024-02-01T06:02:24.246671Z |
| gsd-2024-24848 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-02-01T06:02:24.238948Z |
| gsd-2024-24845 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sewpafly Post… | 2024-02-01T06:02:24.237000Z |
| gsd-2024-24828 | pkg is tool design to bundle Node.js projects into an executables. Any native code packag… | 2024-02-01T06:02:24.227668Z |
| gsd-2024-24812 | Frappe is a full-stack web application framework that uses Python and MariaDB on the serv… | 2024-02-01T06:02:24.225349Z |
| gsd-2024-24820 | Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any … | 2024-02-01T06:02:24.220628Z |
| gsd-2024-24817 | Discourse Calendar adds the ability to create a dynamic calendar in the first post of a t… | 2024-02-01T06:02:24.215497Z |
| gsd-2024-22373 | An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon f… | 2024-02-01T06:02:23.468497Z |
| gsd-2024-1143 | Central Dogma versions prior to 0.64.0 is vulnerable to Cross-Site Scripting (XSS), which… | 2024-02-01T06:02:23.377503Z |
| gsd-2024-1098 | A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issu… | 2024-02-01T06:02:23.372008Z |
| gsd-2024-1141 | A vulnerability was found in python-glance-store. The issue occurs when the package logs … | 2024-02-01T06:02:23.370774Z |
| gsd-2024-1137 | The Proxy and Client components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Enterprise … | 2024-02-01T06:02:23.370407Z |
| gsd-2024-1135 | Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Sm… | 2024-02-01T06:02:23.367125Z |
| gsd-2024-1102 | A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might di… | 2024-02-01T06:02:23.363159Z |
| gsd-2024-1132 | A flaw was found in Keycloak, where it does not properly validate URLs included in a redi… | 2024-02-01T06:02:23.362509Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-182746 | Malicious code in inda-foji-gisagabuailan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182745 | Malicious code in inda-foji-gis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182744 | Malicious code in inda-foji-gigaiuasgsfia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182743 | Malicious code in inda-foji-gigaiuasgsaofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182742 | Malicious code in inda-foji-gigaiuasgfia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182741 | Malicious code in inda-foji-giauasfia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182740 | Malicious code in inda-foji-giasia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182739 | Malicious code in inda-foji-giasa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182738 | Malicious code in inda-foji-gias (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182737 | Malicious code in inda-foji-giaiuasfia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182736 | Malicious code in inda-foji-giaasfia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182735 | Malicious code in inda-foi-gisan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182734 | Malicious code in inda-foi-gisagn (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182733 | Malicious code in inda-foi-gisagan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182732 | Malicious code in inda-foi-gisagabugailan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182731 | Malicious code in inda-foi-gisagablan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182730 | Malicious code in inda-foi-gisagabglan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182729 | Malicious code in inda-foi-gisagabgilan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182728 | Malicious code in inda-foi-gisagaban (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182727 | Malicious code in inda-foi-gisagaan (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182726 | Malicious code in inda-foi-gisa (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182725 | Malicious code in inda-foi-gis (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182724 | Malicious code in inda-fodji-go (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182723 | Malicious code in inda-fodji-gigaiuasgsafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182722 | Malicious code in inda-fodji-gigaiuasgafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182721 | Malicious code in inda-fodji-gigaiasgafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182720 | Malicious code in inda-fodji-gigaiafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182719 | Malicious code in inda-fodji-gigaiaafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182718 | Malicious code in inda-fodji-gigafoi (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| mal-2025-182717 | Malicious code in inda-fodji-gigafofia (npm) | 2025-11-12T22:25:03Z | 2025-11-12T22:25:03Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:0205 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2023-01-23T17:56:57+00:00 | 2025-11-21T18:36:34+00:00 |
| rhsa-2023:0204 | Red Hat Security Advisory: java-1.8.0-openjdk security update | 2023-01-23T15:32:52+00:00 | 2025-11-21T18:36:32+00:00 |
| rhsa-2023:0203 | Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update | 2023-01-24T09:09:31+00:00 | 2025-11-21T18:36:32+00:00 |
| rhsa-2023:0202 | Red Hat Security Advisory: java-11-openjdk security and bug fix update | 2023-01-18T10:25:49+00:00 | 2025-11-21T18:36:31+00:00 |
| rhsa-2023:0201 | Red Hat Security Advisory: java-11-openjdk security update | 2023-01-18T10:33:47+00:00 | 2025-11-21T18:36:30+00:00 |
| rhsa-2023:0197 | Red Hat Security Advisory: java-11-openjdk security update | 2023-01-18T10:32:19+00:00 | 2025-11-21T18:36:20+00:00 |
| rhsa-2023:0200 | Red Hat Security Advisory: java-11-openjdk security and bug fix update | 2023-01-18T11:04:50+00:00 | 2025-11-21T18:36:18+00:00 |
| rhsa-2023:0199 | Red Hat Security Advisory: java-11-openjdk security update | 2023-01-18T10:34:36+00:00 | 2025-11-21T18:36:17+00:00 |
| rhsa-2023:0198 | Red Hat Security Advisory: java-11-openjdk security update | 2023-01-18T11:06:12+00:00 | 2025-11-21T18:36:17+00:00 |
| rhsa-2023:0196 | Red Hat Security Advisory: java-11-openjdk security update | 2023-01-18T11:03:05+00:00 | 2025-11-21T18:36:16+00:00 |
| rhsa-2023:0195 | Red Hat Security Advisory: java-11-openjdk security and bug fix update | 2023-01-23T09:32:54+00:00 | 2025-11-21T18:36:15+00:00 |
| rhsa-2023:0194 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2023-01-23T10:04:12+00:00 | 2025-11-21T18:36:15+00:00 |
| rhsa-2023:0193 | Red Hat Security Advisory: java-17-openjdk security update | 2023-01-18T10:29:57+00:00 | 2025-11-21T18:36:15+00:00 |
| rhsa-2023:0192 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2023-01-18T10:34:57+00:00 | 2025-11-21T18:36:14+00:00 |
| rhsa-2023:0191 | Red Hat Security Advisory: java-17-openjdk security and bug fix update | 2023-01-18T10:35:38+00:00 | 2025-11-21T18:36:14+00:00 |
| rhsa-2023:0190 | Red Hat Security Advisory: java-17-openjdk security update | 2023-01-18T11:08:34+00:00 | 2025-11-21T18:36:14+00:00 |
| rhsa-2023:0187 | Red Hat Security Advisory: kernel security update | 2023-01-17T10:08:18+00:00 | 2025-11-21T18:36:13+00:00 |
| rhsa-2023:0172 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:21:59+00:00 | 2025-11-21T18:36:13+00:00 |
| rhsa-2023:0171 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:28:52+00:00 | 2025-11-21T18:36:12+00:00 |
| rhsa-2023:0170 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:26:03+00:00 | 2025-11-21T18:36:12+00:00 |
| rhsa-2023:0169 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:24:21+00:00 | 2025-11-21T18:36:12+00:00 |
| rhsa-2023:0168 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:15:31+00:00 | 2025-11-21T18:36:12+00:00 |
| rhsa-2023:0167 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:14:56+00:00 | 2025-11-21T18:36:11+00:00 |
| rhsa-2023:0166 | Red Hat Security Advisory: dpdk security update | 2023-01-16T09:17:59+00:00 | 2025-11-21T18:36:11+00:00 |
| rhsa-2023:0160 | Red Hat Security Advisory: rh-postgresql10-postgresql security and bug fix update | 2023-01-12T14:51:14+00:00 | 2025-11-21T18:36:10+00:00 |
| rhsa-2023:0128 | Red Hat Security Advisory: java-1.8.0-ibm security update | 2023-01-12T08:36:33+00:00 | 2025-11-21T18:36:09+00:00 |
| rhsa-2023:0096 | Red Hat Security Advisory: dbus security update | 2023-01-12T09:24:29+00:00 | 2025-11-21T18:36:09+00:00 |
| rhsa-2023:0113 | Red Hat Security Advisory: postgresql:10 security update | 2023-01-12T09:29:31+00:00 | 2025-11-21T18:36:08+00:00 |
| rhsa-2023:0099 | Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update | 2023-01-12T09:27:20+00:00 | 2025-11-21T18:36:05+00:00 |
| rhsa-2023:0089 | Red Hat Security Advisory: libreoffice security update | 2023-01-12T09:18:26+00:00 | 2025-11-21T18:36:04+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-201607-0328 | The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, an… | 2025-04-13T21:21:02.280000Z |
| var-201408-0064 | WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attacker… | 2025-04-13T21:20:22.295000Z |
| var-201512-0110 | The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to ga… | 2025-04-13T21:20:22.254000Z |
| var-201410-1068 | Buffer overflow in QuickTime in Apple OS X before 10.10 allows remote attackers to execut… | 2025-04-13T21:20:21.969000Z |
| var-201507-0071 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.… | 2025-04-13T21:20:21.144000Z |
| var-201605-0476 | SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code o… | 2025-04-13T21:20:20.689000Z |
| var-201609-0233 | WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attacke… | 2025-04-13T21:20:19.510000Z |
| var-201504-0105 | CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle … | 2025-04-13T21:20:19.273000Z |
| var-201605-0480 | IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code … | 2025-04-13T21:20:18.895000Z |
| var-201407-0076 | CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack mem… | 2025-04-13T21:20:18.752000Z |
| var-201512-0136 | The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local u… | 2025-04-13T21:19:35.161000Z |
| var-201410-0935 | visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether… | 2025-04-13T21:19:34.614000Z |
| var-201508-0301 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X … | 2025-04-13T21:18:58.364000Z |
| var-201512-0124 | WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote at… | 2025-04-13T21:18:21.951000Z |
| var-201602-0217 | WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by… | 2025-04-13T21:18:19.298000Z |
| var-201503-0099 | WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, all… | 2025-04-13T21:18:14.986000Z |
| var-201609-0332 | Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safa… | 2025-04-13T21:18:11.459000Z |
| var-201509-0127 | WebKit in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and… | 2025-04-13T21:18:09.854000Z |
| var-201504-0106 | CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) s… | 2025-04-13T21:18:09.326000Z |
| var-201602-0215 | The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari befo… | 2025-04-13T21:18:05.568000Z |
| var-201507-0397 | ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execut… | 2025-04-13T21:18:04.296000Z |
| var-201405-0222 | WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attacker… | 2025-04-13T21:17:42.833000Z |
| var-201512-0109 | CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and wat… | 2025-04-13T21:17:39.176000Z |
| var-201508-0425 | Cross-site scripting (XSS) vulnerability in Quick Look in Apple OS X before 10.10.5 allow… | 2025-04-13T21:17:38.467000Z |
| var-201510-0159 | The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual me… | 2025-04-13T21:17:03.888000Z |
| var-201602-0031 | The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY… | 2025-04-13T21:16:59.774000Z |
| var-201410-1069 | The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete r… | 2025-04-13T21:16:59.328000Z |
| var-201508-0153 | Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 … | 2025-04-13T21:16:59.274000Z |
| var-201508-0034 | WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted we… | 2025-04-13T21:16:34.897000Z |
| var-201404-0208 | Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 al… | 2025-04-13T21:16:34.206000Z |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2020:0490-1 | Security update for ppp | 2020-02-26T10:46:29Z | 2020-02-26T10:46:29Z |
| suse-su-2020:0489-1 | Security update for ppp | 2020-02-26T10:44:07Z | 2020-02-26T10:44:07Z |
| suse-su-2020:0488-1 | Security update for nodejs6 | 2020-02-26T10:43:42Z | 2020-02-26T10:43:42Z |
| suse-su-2020:0487-1 | Security update for squid | 2020-02-26T10:43:20Z | 2020-02-26T10:43:20Z |
| suse-su-2020:0474-1 | Security update for openssl | 2020-02-25T12:24:41Z | 2020-02-25T12:24:41Z |
| suse-su-2020:14292-1 | Security update for ppp | 2020-02-25T11:58:31Z | 2020-02-25T11:58:31Z |
| suse-su-2020:0468-1 | Security update for webkit2gtk3 | 2020-02-25T11:02:53Z | 2020-02-25T11:02:53Z |
| suse-su-2020:0467-1 | Security update for python3 | 2020-02-25T11:00:54Z | 2020-02-25T11:00:54Z |
| suse-su-2020:0466-1 | Security update for java-1_8_0-ibm | 2020-02-25T10:59:38Z | 2020-02-25T10:59:38Z |
| suse-su-2020:0459-1 | Security update for libvpx | 2020-02-25T10:02:29Z | 2020-02-25T10:02:29Z |
| suse-su-2020:0458-1 | Security update for libexif | 2020-02-25T10:01:41Z | 2020-02-25T10:01:41Z |
| suse-su-2020:0457-1 | Security update for libexif | 2020-02-25T10:01:22Z | 2020-02-25T10:01:22Z |
| suse-su-2020:0455-1 | Security update for nodejs10 | 2020-02-25T09:56:23Z | 2020-02-25T09:56:23Z |
| suse-su-2020:0454-1 | Security update for nodejs8 | 2020-02-25T09:55:38Z | 2020-02-25T09:55:38Z |
| suse-su-2020:0443-1 | Security update for pdsh, slurm_18_08 | 2020-02-24T17:18:17Z | 2020-02-24T17:18:17Z |
| suse-su-2020:14291-1 | Security update for openssl1 | 2020-02-24T17:17:51Z | 2020-02-24T17:17:51Z |
| suse-su-2020:0440-1 | Security update for python-azure-agent | 2020-02-24T14:31:48Z | 2020-02-24T14:31:48Z |
| suse-su-2020:0439-1 | Security update for dpdk | 2020-02-24T13:14:06Z | 2020-02-24T13:14:06Z |
| suse-su-2020:14290-1 | Security update for MozillaFirefox | 2020-02-24T12:08:59Z | 2020-02-24T12:08:59Z |
| suse-su-2020:14289-1 | Security update for php53 | 2020-02-24T11:00:37Z | 2020-02-24T11:00:37Z |
| suse-su-2020:0434-1 | Security update for pdsh, slurm_18_08 | 2020-02-21T16:35:15Z | 2020-02-21T16:35:15Z |
| suse-su-2020:14287-1 | Security update for java-1_7_1-ibm | 2020-02-21T13:35:12Z | 2020-02-21T13:35:12Z |
| suse-su-2020:0432-1 | Security update for libsolv, libzypp, zypper | 2020-02-21T13:34:31Z | 2020-02-21T13:34:31Z |
| suse-su-2020:0429-1 | Security update for nodejs12 | 2020-02-20T12:28:28Z | 2020-02-20T12:28:28Z |
| suse-su-2020:14286-1 | Security update for java-1_7_0-ibm | 2020-02-20T10:05:37Z | 2020-02-20T10:05:37Z |
| suse-su-2020:0427-1 | Security update for nodejs10 | 2020-02-20T10:05:04Z | 2020-02-20T10:05:04Z |
| suse-su-2020:0424-1 | Security update for rsyslog | 2020-02-19T16:07:46Z | 2020-02-19T16:07:46Z |
| suse-su-2020:0420-1 | Security update for slurm | 2020-02-19T13:17:41Z | 2020-02-19T13:17:41Z |
| suse-su-2020:0419-1 | Security update for dnsmasq | 2020-02-19T12:24:14Z | 2020-02-19T12:24:14Z |
| suse-su-2020:0413-1 | Security update for enigmail | 2020-02-19T09:21:43Z | 2020-02-19T09:21:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2024-35119 | IBM System Management for i代码问题漏洞 | 2024-07-10 | 2024-08-13 |
| cnvd-2024-35118 | IBM FlashSystem 5300身份验证错误漏洞 | 2024-07-10 | 2024-08-13 |
| cnvd-2024-35117 | IBM Cloud Pak for Business Automation服务器端请求伪造漏洞 | 2024-07-10 | 2024-08-13 |
| cnvd-2024-35116 | IBM Rational ClearQuest跨站脚本漏洞（CNVD-2024-35116） | 2024-07-18 | 2024-08-13 |
| cnvd-2024-35115 | IBM Sterling Partner Engagement Manager信息泄露漏洞（CNVD-2024-35115） | 2024-07-18 | 2024-08-12 |
| cnvd-2024-35114 | IBM Engineering Requirements Management DOORS Web Access XML外部实体注入漏洞 | 2024-07-22 | 2024-08-12 |
| cnvd-2024-35113 | IBM Aspera Orchestrator HTTP头注入漏洞 | 2024-08-01 | 2024-08-12 |
| cnvd-2024-35112 | IBM Planning Analytics Local身份认证错误漏洞 | 2024-08-06 | 2024-08-12 |
| cnvd-2024-35111 | IBM Business Automation Workflow日志信息泄露漏洞 | 2024-08-06 | 2024-08-12 |
| cnvd-2024-35109 | Siemens Omnivise T3000 Application Server输入验证不当漏洞 | 2024-08-12 | 2024-08-12 |
| cnvd-2024-35108 | Siemens Omnivise T3000 Application Server路径遍历漏洞 | 2024-08-12 | 2024-08-12 |
| cnvd-2024-35107 | Siemens Omnivise T3000 Application Server敏感信息明文存储漏洞 | 2024-08-12 | 2024-08-12 |
| cnvd-2024-35106 | Siemens Omnivise T3000 Application Server代码执行漏洞 | 2024-08-12 | 2024-08-12 |
| cnvd-2024-35105 | Apache OFBiz授权错误漏洞 | 2024-08-07 | 2024-08-12 |
| cnvd-2024-33023 | 用友网络科技股份有限公司U8 Cloud存在SQL注入漏洞（CNVD-2024-33023） | 2024-06-27 | 2024-08-11 |
| cnvd-2024-35173 | Craft CMS访问控制错误漏洞 | 2024-07-29 | 2024-08-09 |
| cnvd-2024-35172 | Tailoring Management System SQL注入漏洞 | 2024-07-29 | 2024-08-09 |
| cnvd-2024-35162 | WonderCMS服务端请求伪造漏洞 | 2024-08-02 | 2024-08-09 |
| cnvd-2024-35157 | Calibre SQL注入漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-35156 | Bike Delivery System SQL注入漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-35155 | Record Management System sort参数跨站脚本漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-35154 | Record Management System school参数跨站脚本漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-35153 | Online Bus Reservation Site SQL注入漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-35152 | Online Blood Bank Management System user参数跨站脚本漏洞 | 2024-08-09 | 2024-08-09 |
| cnvd-2024-34989 | SolarWinds Access Rights Manager信任管理问题漏洞 | 2024-05-20 | 2024-08-09 |
| cnvd-2024-34988 | SolarWinds Access Rights Manager路径遍历漏洞（CNVD-2024-34988） | 2024-07-19 | 2024-08-09 |
| cnvd-2024-34987 | SolarWinds Access Rights Manager路径遍历漏洞（CNVD-2024-34987） | 2024-07-19 | 2024-08-09 |
| cnvd-2024-34986 | SolarWinds Access Rights Manager路径遍历漏洞（CNVD-2024-34986） | 2024-07-19 | 2024-08-09 |
| cnvd-2024-34985 | SolarWinds Access Rights Manager授权问题漏洞（CNVD-2024-34985） | 2024-07-19 | 2024-08-09 |
| cnvd-2024-34984 | SolarWinds Access Rights Manager路径遍历漏洞（CNVD-2024-34984） | 2024-07-19 | 2024-08-09 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2009-avi-032 | Multiples vulnérabilités dans CA Cohesion Application Configuration Manager | 2009-01-28T00:00:00.000000 | 2009-01-28T00:00:00.000000 |
| certa-2009-avi-031 | Vulnérabilité des Serveurs Sun Serie M | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-030 | Vulnérabilité dans Cisco Unified Communications Manager | 2009-01-23T00:00:00.000000 | 2009-01-23T00:00:00.000000 |
| certa-2009-avi-029 | Multiples vulnérabilités dans Apple QuickTime | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-028 | Vulnérabilité dans Cisco Security Manager | 2009-01-22T00:00:00.000000 | 2009-01-22T00:00:00.000000 |
| certa-2009-avi-027 | Multiples vulnérabilités dans HP OpenView | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-026 | Multiples vulnérabilités dans Trend Micro OfficeScan | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-025 | Vulnérabilités dans des produits Horde | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-024 | Multiples vulnérabilités dans TYPO3 | 2009-01-21T00:00:00.000000 | 2009-01-21T00:00:00.000000 |
| certa-2009-avi-023 | Multiples vulnérabilités dans Drupal | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-022 | Multiples vulnérabilités dans Sun Java System Access Manager | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-021 | Vulnérabilité dans IBM HMC | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-020 | Vulnérabilité dans Sophos Anti-Virus | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-019 | Vulnérabilité dans Symantec AppStream | 2009-01-19T00:00:00.000000 | 2009-01-19T00:00:00.000000 |
| certa-2009-avi-016 | Multiples vulnérabilités dans Cisco IronPort | 2009-01-15T00:00:00.000000 | 2009-01-16T00:00:00.000000 |
| certa-2009-avi-018 | Vulnérabilité dans les produits Cisco ONS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-017 | Vulnérabilités dans Cisco IOS | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-015 | Vulnérabilité dans Avira Antivir | 2009-01-15T00:00:00.000000 | 2009-01-15T00:00:00.000000 |
| certa-2009-avi-014 | Multiples vulnérabilités dans IBM DB2 | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |
| certa-2009-avi-013 | Vulnérabilités des produits Oracle | 2009-01-14T00:00:00.000000 | 2009-01-14T00:00:00.000000 |
| certa-2009-avi-012 | Plusieurs vulnérabilités de SMB dans Windows | 2009-01-13T00:00:00.000000 | 2009-01-13T00:00:00.000000 |
| certa-2009-avi-011 | Multiples vulnérabilités dans les produits BlackBerry | 2009-01-13T00:00:00.000000 | 2009-01-13T00:00:00.000000 |
| certa-2009-avi-009 | Vulnérabilité de ISC BIND | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-008 | Vulnérabilité dans Cisco Global Site Selector | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-007 | Vulnérabilité dans CA Service Metric Analysis et CA Service Level Management | 2009-01-08T00:00:00.000000 | 2009-01-08T00:00:00.000000 |
| certa-2009-avi-006 | Vulnérabilité dans OpenSSL | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-005 | Vulnérabilités dans Symantec Mail Security pour SMTP | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-004 | Vulnérabilité dans Check Point VPN-1 | 2009-01-07T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2008-avi-512 | Multiples vulnérabilités dans Adobe Flash Player | 2008-10-16T00:00:00.000000 | 2009-01-07T00:00:00.000000 |
| certa-2009-avi-003 | Vulnérabilité de Solaris | 2009-01-06T00:00:00.000000 | 2009-01-06T00:00:00.000000 |