Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22252 |
9.1 (3.1)
|
LibreChat MCP Stdio Remote Command Execution |
danny-avila |
LibreChat |
2026-01-12T18:01:48.399Z | 2026-01-12T18:48:33.821Z |
| CVE-2026-22251 |
5.3 (3.1)
|
wlc may leak API keys due to an insecure API key confi… |
WeblateOrg |
wlc |
2026-01-12T17:55:09.699Z | 2026-01-12T18:43:53.664Z |
| CVE-2025-68471 |
6.5 (3.1)
|
Avahi has a reachable assertion in lookup_start |
avahi |
avahi |
2026-01-12T17:39:57.416Z | 2026-01-12T18:42:26.343Z |
| CVE-2025-68468 |
6.5 (3.1)
|
Avahi has a reachable assertion in lookup_multicast_callback |
avahi |
avahi |
2026-01-12T17:38:10.492Z | 2026-01-12T18:41:50.855Z |
| CVE-2025-68276 |
5.5 (3.1)
|
Avahi has a reachable assertion in avahi_wide_area_sca… |
avahi |
avahi |
2026-01-12T17:31:49.652Z | 2026-01-12T18:41:22.098Z |
| CVE-2025-68657 |
6.4 (3.1)
|
espressif/usb_host_hid Double-Free Race Condition in U… |
espressif |
esp-usb |
2026-01-12T17:26:51.106Z | 2026-01-12T18:40:25.838Z |
| CVE-2025-63314 |
10 (3.1)
|
A static password reset token in the password res… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:40:07.736Z |
| CVE-2025-68656 |
6.8 (3.1)
|
Espressif ESP-IDF USB Host HID (Human Interface Device… |
espressif |
esp-usb |
2026-01-12T17:23:19.393Z | 2026-01-12T18:39:37.514Z |
| CVE-2025-68622 |
6.8 (3.1)
|
Espressif ESP-IDF USB Host UVC Class Driver has a stac… |
espressif |
esp-usb |
2026-01-12T17:08:22.941Z | 2026-01-12T18:37:35.287Z |
| CVE-2026-21858 |
10 (3.1)
|
n8n Vulnerable to Unauthenticated File Access via Impr… |
n8n-io |
n8n |
2026-01-07T23:57:52.079Z | 2026-01-12T18:37:27.893Z |
| CVE-2025-68472 |
8.1 (3.1)
|
MindsDB has improper sanitation of filepath that leads… |
mindsdb |
mindsdb |
2026-01-12T16:53:47.748Z | 2026-01-12T18:36:45.793Z |
| CVE-2025-66689 |
6.5 (3.1)
|
A path traversal vulnerability exists in Zen MCP … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:34:48.370Z |
| CVE-2025-69169 |
5.4 (3.1)
|
WordPress Easy Media Download plugin <= 1.1.11 - CSS I… |
Noor Alam |
Easy Media Download |
2026-01-08T09:17:54.850Z | 2026-01-12T18:33:40.047Z |
| CVE-2026-0674 |
4.3 (3.1)
|
WordPress Campaign Monitor for WordPress plugin <= 2.9… |
Campaign Monitor |
Campaign Monitor for WordPress |
2026-01-08T09:17:55.119Z | 2026-01-12T18:32:30.790Z |
| CVE-2026-0676 |
5.3 (3.1)
|
WordPress Zorka theme <= 1.5.7 - Broken Access Control… |
G5Theme |
Zorka |
2026-01-08T09:17:55.655Z | 2026-01-12T18:31:42.919Z |
| CVE-2026-0822 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
quickjs-ng quickjs quickjs.c js_typed_array_sort heap-… |
quickjs-ng |
quickjs |
2026-01-10T13:32:08.881Z | 2026-01-12T18:30:50.158Z |
| CVE-2025-12379 |
6.4 (3.1)
|
Shortcodes and extra features for Phlox theme <= 2.17.… |
averta |
Shortcodes and extra features for Phlox theme |
2026-01-10T13:47:35.146Z | 2026-01-12T18:29:20.473Z |
| CVE-2025-13393 |
4.3 (3.1)
|
Featured Image from URL (FIFU) <= 5.3.1 - Authenticate… |
marceljm |
Featured Image from URL (FIFU) |
2026-01-10T13:47:35.750Z | 2026-01-12T18:28:15.408Z |
| CVE-2026-0824 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
questdb ui Web Console cross site scripting |
questdb |
ui |
2026-01-10T14:32:08.724Z | 2026-01-12T18:26:21.294Z |
| CVE-2025-66939 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in 66biolinks … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:25:32.920Z |
| CVE-2025-14470 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-01-12T18:23:11.236Z | |
| CVE-2026-22612 |
8.9 (4.0)
|
Fickling vulnerable to detection bypass due to "builti… |
trailofbits |
fickling |
2026-01-10T01:35:25.197Z | 2026-01-12T18:18:29.466Z |
| CVE-2025-68470 |
6.5 (3.1)
|
React Router has unexpected external redirect via untr… |
remix-run |
react-router |
2026-01-10T02:39:41.078Z | 2026-01-12T18:17:43.794Z |
| CVE-2025-15505 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
Luxul XWR-600 Web Administration cross site scripting |
Luxul |
XWR-600 |
2026-01-11T01:32:07.400Z | 2026-01-12T18:15:20.196Z |
| CVE-2026-0836 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
UTT 进取 520W formConfigFastDirectionW strcpy buffer overflow |
UTT |
进取 520W |
2026-01-11T04:32:06.535Z | 2026-01-12T18:13:16.566Z |
| CVE-2025-59057 |
7.6 (3.1)
|
React Router has XSS Vulnerability |
remix-run |
react-router |
2026-01-10T02:40:25.142Z | 2026-01-12T18:12:43.462Z |
| CVE-2026-22033 |
8.6 (4.0)
|
Label Studio vulnerable to full account takeover by ch… |
HumanSignal |
label-studio |
2026-01-12T17:47:34.060Z | 2026-01-12T18:12:36.147Z |
| CVE-2026-21884 |
8.2 (3.1)
|
React Router SSR XSS in ScrollRestoration |
remix-run |
react-router |
2026-01-10T02:41:44.944Z | 2026-01-12T18:11:09.408Z |
| CVE-2026-22029 |
8 (3.1)
|
React Router vulnerable to XSS via Open Redirects |
remix-run |
react-router |
2026-01-10T02:42:32.736Z | 2026-01-12T18:10:27.920Z |
| CVE-2026-22030 |
6.5 (3.1)
|
React Router has CSRF issue in Action/Server Action Re… |
remix-run |
react-router |
2026-01-10T02:42:44.603Z | 2026-01-12T18:09:39.441Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22200 |
8.7 (4.0)
|
osTicket <= 1.18.2 PDF Export Arbitrary File Read |
Enhancesoft |
osTicket |
2026-01-12T18:34:12.781Z | 2026-01-12T19:11:35.394Z |
| CVE-2026-21858 |
10 (3.1)
|
n8n Vulnerable to Unauthenticated File Access via Impr… |
n8n-io |
n8n |
2026-01-07T23:57:52.079Z | 2026-01-12T18:37:27.893Z |
| CVE-2026-0676 |
5.3 (3.1)
|
WordPress Zorka theme <= 1.5.7 - Broken Access Control… |
G5Theme |
Zorka |
2026-01-08T09:17:55.655Z | 2026-01-12T18:31:42.919Z |
| CVE-2026-0674 |
4.3 (3.1)
|
WordPress Campaign Monitor for WordPress plugin <= 2.9… |
Campaign Monitor |
Campaign Monitor for WordPress |
2026-01-08T09:17:55.119Z | 2026-01-12T18:32:30.790Z |
| CVE-2025-8110 |
8.7 (4.0)
|
File overwrite in file update API in Gogs |
Gogs |
Gogs |
2025-12-10T13:23:46.777Z | 2026-01-12T23:20:23.754Z |
| CVE-2025-69169 |
5.4 (3.1)
|
WordPress Easy Media Download plugin <= 1.1.11 - CSS I… |
Noor Alam |
Easy Media Download |
2026-01-08T09:17:54.850Z | 2026-01-12T18:33:40.047Z |
| CVE-2025-66939 |
5.4 (3.1)
|
Cross Site Scripting vulnerability in 66biolinks … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:25:32.920Z |
| CVE-2025-66689 |
6.5 (3.1)
|
A path traversal vulnerability exists in Zen MCP … |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:34:48.370Z |
| CVE-2025-63314 |
10 (3.1)
|
A static password reset token in the password res… |
n/a |
n/a |
2026-01-12T00:00:00.000Z | 2026-01-12T18:40:07.736Z |
| CVE-2025-52435 |
N/A
|
Apache Mynewt NimBLE: Invalid error handling in pause … |
Apache Software Foundation |
Apache Mynewt NimBLE |
2026-01-10T09:47:10.568Z | 2026-01-12T19:07:07.593Z |
| CVE-2025-14470 |
N/A
|
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. | N/A | N/A | 2026-01-12T18:23:11.236Z | |
| CVE-2026-22041 |
2 (4.0)
|
loggingredactor converts non-string types to string ty… |
armurox |
loggingredactor |
2026-01-08T14:52:37.944Z | 2026-01-08T15:54:57.412Z |
| CVE-2025-27686 |
2.7 (3.1)
|
Dell Unisphere for PowerMax, version(s) prior to … |
Dell |
Unisphere for PowerMax |
2025-04-07T13:23:08.166Z | 2025-04-07T13:58:27.666Z |
| CVE-2026-22028 |
7.2 (4.0)
|
Preact has JSON VNode Injection issue |
preactjs |
preact |
2026-01-08T14:16:22.461Z | 2026-01-08T15:55:06.321Z |
| CVE-2025-29988 |
6.9 (3.1)
|
Dell Client Platform BIOS contains a Stack-based … |
Dell |
Dell Client Platform BIOS |
2025-04-09T02:25:06.695Z | 2025-04-10T03:55:25.957Z |
| CVE-2025-23385 |
7.8 (3.1)
|
In JetBrains ReSharper before 2024.3.4, 2024.2.8,… |
JetBrains |
ReSharper |
2025-01-28T16:01:55.084Z | 2025-01-28T16:26:10.127Z |
| CVE-2025-8310 |
6.5 (3.1)
|
Missing authorization in the admin console of Iva… |
Ivanti |
Virtual Application Delivery ControllerCWE-862 |
2025-08-12T14:42:31.728Z | 2025-08-13T15:03:55.289Z |
| CVE-2025-10554 |
8.7 (3.1)
|
Stored Cross-site Scripting (XSS) vulnerability affect… |
Dassault Systèmes |
ENOVIA Product Manager |
2025-11-24T15:31:39.739Z | 2025-11-24T17:59:51.057Z |
| CVE-2025-12956 |
8.7 (3.1)
|
Reflected Cross-site Scripting (XSS) vulnerability aff… |
Dassault Systèmes |
ENOVIA Collaborative Industry Innovator |
2025-12-08T08:38:45.621Z | 2025-12-08T18:00:24.968Z |
| CVE-2025-63611 |
8.7 (3.1)
|
Cross-Site Scripting in phpgurukul Hostel Managem… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-08T16:37:29.242Z |
| CVE-2026-21694 |
6.8 (3.1)
|
Titra APIs have Improper Access Control |
kromitgmbh |
titra |
2026-01-07T23:10:48.362Z | 2026-01-08T19:23:48.439Z |
| CVE-2026-21695 |
4.3 (3.1)
|
Titra API Contains Mass Assignment Vulnerability |
kromitgmbh |
titra |
2026-01-07T23:19:01.616Z | 2026-01-08T18:16:33.468Z |
| CVE-2025-50334 |
7.5 (3.1)
|
An issue in Technitium DNS Server v.13.5 allows a… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-08T18:46:34.887Z |
| CVE-2025-64424 |
9.4 (4.0)
|
Colify has command injection vulnerability in project … |
coollabsio |
coolify |
2026-01-05T20:45:09.995Z | 2026-01-05T21:48:42.309Z |
| CVE-2025-64425 |
8.5 (4.0)
|
Coolify has host header injection in forgot password |
coollabsio |
coolify |
2026-01-05T20:49:10.727Z | 2026-01-05T21:48:36.288Z |
| CVE-2026-21492 |
5.5 (3.1)
|
iccDEV ToneMap Writer has NULL Pointer Member Call |
InternationalColorConsortium |
iccDEV |
2026-01-06T20:23:41.996Z | 2026-01-07T18:32:12.490Z |
| CVE-2026-21494 |
6.1 (3.1)
|
iccDEV has heap buffer overflow in CIccTagLut8::Validate() |
InternationalColorConsortium |
iccDEV |
2026-01-06T19:00:17.428Z | 2026-01-06T19:25:12.331Z |
| CVE-2026-21491 |
6.1 (3.1)
|
iccDEV has unicode buffer overflow in CIccTagTextDescription |
InternationalColorConsortium |
iccDEV |
2026-01-06T19:07:37.795Z | 2026-01-06T19:36:42.727Z |
| CVE-2025-68436 |
4.9 (4.0)
|
Craft CMS vulnerable to potential information disclosu… |
craftcms |
cms |
2026-01-05T21:46:01.734Z | 2026-01-06T17:38:37.097Z |
| CVE-2026-21693 |
8.8 (3.1)
|
iccDEV has Type Confusion in CIccSegmentedCurveXml::To… |
InternationalColorConsortium |
iccDEV |
2026-01-07T21:58:57.486Z | 2026-01-08T18:17:54.646Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-23385 | In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, an… | 2025-01-28T16:15:41.377 | 2026-01-12T18:53:54.620 |
| fkie_cve-2025-8310 | Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before… | 2025-08-12T15:15:31.940 | 2026-01-12T18:50:53.363 |
| fkie_cve-2025-10554 | A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager … | 2025-11-24T16:15:46.980 | 2026-01-12T18:50:11.377 |
| fkie_cve-2025-12956 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innova… | 2025-12-08T09:15:46.080 | 2026-01-12T18:49:43.023 |
| fkie_cve-2025-63611 | Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Ex… | 2026-01-08T16:15:45.057 | 2026-01-12T18:45:23.067 |
| fkie_cve-2026-21694 | Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Acces… | 2026-01-08T00:15:59.680 | 2026-01-12T18:44:36.047 |
| fkie_cve-2026-21695 | Titra is open source project time tracking software. In versions 0.99.49 and below, an API has a Ma… | 2026-01-08T00:15:59.833 | 2026-01-12T18:40:56.820 |
| fkie_cve-2025-50334 | An issue in Technitium DNS Server v.13.5 allows a remote attacker to cause a denial of service via … | 2026-01-08T17:15:47.603 | 2026-01-12T18:39:30.937 |
| fkie_cve-2025-64424 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.… | 2026-01-05T21:16:12.713 | 2026-01-12T18:37:11.620 |
| fkie_cve-2025-64425 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.… | 2026-01-05T21:16:12.857 | 2026-01-12T18:36:12.597 |
| fkie_cve-2026-21492 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-06T21:15:43.863 | 2026-01-12T18:30:54.893 |
| fkie_cve-2026-21494 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-06T19:16:09.077 | 2026-01-12T18:29:53.877 |
| fkie_cve-2026-21491 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-06T19:16:08.907 | 2026-01-12T18:29:22.697 |
| fkie_cve-2025-68436 | Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.… | 2026-01-05T22:15:52.117 | 2026-01-12T18:29:17.930 |
| fkie_cve-2026-21693 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-07T22:15:45.830 | 2026-01-12T18:29:02.290 |
| fkie_cve-2026-21490 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-06T19:16:08.177 | 2026-01-12T18:28:28.913 |
| fkie_cve-2025-68437 | Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 4.0.… | 2026-01-05T22:15:52.283 | 2026-01-12T18:28:14.250 |
| fkie_cve-2026-21692 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-07T22:15:45.677 | 2026-01-12T18:27:18.457 |
| fkie_cve-2026-21691 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-07T22:15:45.527 | 2026-01-12T18:26:52.107 |
| fkie_cve-2026-21690 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-07T22:15:45.383 | 2026-01-12T18:26:22.213 |
| fkie_cve-2026-21689 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and appl… | 2026-01-07T22:15:45.233 | 2026-01-12T18:25:40.940 |
| fkie_cve-2025-68454 | Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-R… | 2026-01-05T22:15:52.457 | 2026-01-12T18:23:45.727 |
| fkie_cve-2025-31962 | Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.… | 2026-01-07T12:17:01.720 | 2026-01-12T18:22:21.657 |
| fkie_cve-2025-68455 | Craft is a platform for creating digital experiences. Versions 5.0.0-RC1 through 5.8.20 and 4.0.0-R… | 2026-01-05T22:15:52.593 | 2026-01-12T18:21:12.567 |
| fkie_cve-2025-67732 | Dify is an open-source LLM app development platform. Prior to version 1.11.0, the API key is expose… | 2026-01-05T22:15:51.837 | 2026-01-12T18:20:15.040 |
| fkie_cve-2025-68456 | Craft is a platform for creating digital experiences. In versions 5.0.0-RC1 through 5.8.20 and 3.0.… | 2026-01-05T22:15:52.727 | 2026-01-12T18:19:38.220 |
| fkie_cve-2026-21439 | badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In … | 2026-01-06T00:15:49.027 | 2026-01-12T18:18:59.067 |
| fkie_cve-2026-22688 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval… | 2026-01-10T04:16:01.837 | 2026-01-12T18:15:50.020 |
| fkie_cve-2026-22687 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval… | 2026-01-10T04:16:01.670 | 2026-01-12T18:15:49.920 |
| fkie_cve-2026-22589 | Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0… | 2026-01-10T04:16:01.343 | 2026-01-12T18:15:49.610 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-jvhg-r77c-vccf |
|
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog->stats a… | 2025-12-24T15:30:43Z | 2026-01-11T18:30:29Z |
| ghsa-ghj7-pch2-m5m6 |
|
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeou… | 2025-12-24T15:30:44Z | 2026-01-11T18:30:29Z |
| ghsa-fg49-cm53-vpfx |
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bound… | 2026-01-05T12:30:28Z | 2026-01-11T18:30:29Z |
| ghsa-c6v5-xpx3-j3vp |
|
In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returne… | 2025-12-24T15:30:43Z | 2026-01-11T18:30:29Z |
| ghsa-99pp-v74j-jmgv |
|
In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when … | 2025-12-24T15:30:44Z | 2026-01-11T18:30:29Z |
| ghsa-96x7-qg22-qw59 |
|
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS … | 2025-12-24T12:30:30Z | 2026-01-11T18:30:29Z |
| ghsa-89g7-8q6v-6wv8 |
|
In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential … | 2026-01-05T12:30:29Z | 2026-01-11T18:30:29Z |
| ghsa-8866-wmp5-q7xv |
|
In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error co… | 2026-01-05T12:30:29Z | 2026-01-11T18:30:29Z |
| ghsa-7g54-f344-23m9 |
|
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i… | 2026-01-05T12:30:28Z | 2026-01-11T18:30:29Z |
| ghsa-6pgh-g35q-vvjg |
|
In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems s… | 2026-01-05T12:30:29Z | 2026-01-11T18:30:29Z |
| ghsa-5mmp-9c8m-j75x |
|
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged t… | 2025-12-24T12:30:30Z | 2026-01-11T18:30:29Z |
| ghsa-55hf-cr49-h3r7 |
|
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential m… | 2026-01-05T12:30:29Z | 2026-01-11T18:30:29Z |
| ghsa-28vg-cxp3-45wq |
|
In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly h… | 2026-01-05T12:30:29Z | 2026-01-11T18:30:29Z |
| ghsa-xphm-v24c-73f6 |
|
In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_head… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-xgvr-xgq4-2mpp |
|
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-xfqp-957r-4xp3 |
|
In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_er… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-x793-gh9g-39hm |
|
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix po… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-wp53-jh6w-3pf7 |
|
In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-w3pp-fgmq-x8x8 |
|
In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regul… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-vwv2-fc39-c5f6 |
|
In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incor… | 2025-12-18T15:30:45Z | 2026-01-11T18:30:28Z |
| ghsa-q9mf-8c54-r9jh |
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer o… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-q3m2-j43g-7966 |
|
In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attache… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-q3h5-vmhj-94j6 |
|
In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-q2j6-qrc9-gxpm |
|
In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protectio… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-pchw-pcf7-8p47 |
|
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYO… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ghsa-p2q7-w28w-9654 |
|
In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize conf… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-j5fg-gwpm-pjw5 |
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free… | 2025-12-16T15:30:47Z | 2026-01-11T18:30:28Z |
| ghsa-hrvw-g8xf-vhvj |
|
In the Linux kernel, the following vulnerability has been resolved: locking/spinlock/debug: Fix da… | 2025-12-22T18:30:25Z | 2026-01-11T18:30:28Z |
| ghsa-hj88-pj44-5w8c |
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL p… | 2025-12-24T12:30:28Z | 2026-01-11T18:30:28Z |
| ghsa-h6xr-332m-px9v |
|
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffe… | 2025-12-24T12:30:29Z | 2026-01-11T18:30:28Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2024-227 |
8.8 (3.1)
|
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execu… | transformers | 2024-11-22T22:15:06+00:00 | 2025-02-10T23:22:41.399021+00:00 |
| pysec-2024-226 |
7.8 (3.1)
|
Pymatgen (Python Materials Genomics) is an open-source Python library for materials analy… | pymatgen | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:28.734730+00:00 |
| pysec-2024-225 |
7.5 (3.1)
|
cryptography is a package designed to expose cryptographic primitives and recipes to Pyth… | cryptography | 2024-02-21T17:15:09+00:00 | 2025-02-06T00:34:24.427679+00:00 |
| pysec-2024-224 |
7.0 (3.1)
|
Excessive directory permissions in MLflow leads to local privilege escalation when using … | mlflow | 2024-11-25T14:15:06+00:00 | 2025-02-03T16:23:40.409646+00:00 |
| pysec-2024-27 |
9.8 (3.1)
|
CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI componen… | crate | 2024-01-30T01:15:00Z | 2025-01-30T22:47:57.847403Z |
| pysec-2019-242 |
5.5 (3.1)
|
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) i… | capstone | 2019-05-15T14:29:00Z | 2025-01-28T17:34:08.578134Z |
| pysec-2025-2 |
|
uniapi version 1.0.7 introduces code that would execute on import of the module and downl… | uniapi | 2025-01-24T19:56:53+00:00 | |
| pysec-2024-223 |
9.1 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds … | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:22.060512+00:00 |
| pysec-2024-222 |
7.5 (3.1)
|
Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Trav… | onnx | 2024-02-23T18:15:50+00:00 | 2025-01-22T16:23:21.994731+00:00 |
| pysec-2024-221 |
5.3 (3.1)
|
aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd i… | aiosmtpd | 2024-03-12T21:15:58+00:00 | 2025-01-22T16:23:18.042465+00:00 |
| pysec-2024-220 |
5.4 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T23:15:03+00:00 | 2025-01-19T22:22:23.972580+00:00 |
| pysec-2024-219 |
9.1 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T23:15:03+00:00 | 2025-01-19T22:22:23.897787+00:00 |
| pysec-2024-218 |
8.1 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T23:15:03+00:00 | 2025-01-19T22:22:23.803143+00:00 |
| pysec-2024-217 |
7.5 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This is a **data … | gradio | 2024-10-10T23:15:02+00:00 | 2025-01-19T22:22:23.723816+00:00 |
| pysec-2024-216 |
7.5 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T23:15:02+00:00 | 2025-01-19T22:22:23.549944+00:00 |
| pysec-2024-215 |
9.8 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:11+00:00 | 2025-01-19T22:22:23.471780+00:00 |
| pysec-2024-214 |
5.4 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:10+00:00 | 2025-01-19T22:22:23.399444+00:00 |
| pysec-2024-213 |
6.5 (3.1)
|
Gradio is an open-source Python package designed for quick prototyping. This vulnerabilit… | gradio | 2024-10-10T22:15:10+00:00 | 2025-01-19T22:22:23.310301+00:00 |
| pysec-2024-212 |
|
Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add… | apache-airflow | 2024-09-07T08:15:11+00:00 | 2025-01-19T22:22:22.289672+00:00 |
| pysec-2024-211 |
7.5 (3.1)
|
Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote clien… | waitress | 2024-10-29T15:15:12+00:00 | 2025-01-19T19:19:01.852094+00:00 |
| pysec-2024-210 |
4.8 (3.1)
|
Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may… | waitress | 2024-10-29T15:15:11+00:00 | 2025-01-19T19:19:01.811922+00:00 |
| pysec-2024-209 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:09+00:00 | 2025-01-19T19:19:01.689044+00:00 |
| pysec-2024-208 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.647736+00:00 |
| pysec-2024-207 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.605918+00:00 |
| pysec-2024-206 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. In versions… | vyper | 2024-04-25T18:15:08+00:00 | 2025-01-19T19:19:01.566553+00:00 |
| pysec-2024-205 |
5.3 (3.1)
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. When using … | vyper | 2024-02-26T20:19:05+00:00 | 2025-01-19T19:19:01.519824+00:00 |
| pysec-2024-204 |
8.1 (3.1)
|
TorchGeo Remote Code Execution Vulnerability | torchgeo | 2024-11-12T18:15:45+00:00 | 2025-01-19T19:19:01.299352+00:00 |
| pysec-2024-203 |
7.5 (3.1)
|
DuckDB is a SQL database management system. In versions 1.0.0 and prior, content in files… | duckdb | 2024-07-24T18:15:05+00:00 | 2025-01-19T19:18:58.299130+00:00 |
| pysec-2024-202 |
6.5 (3.1)
|
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versio… | octoprint | 2024-11-05T19:15:07+00:00 | 2025-01-19T16:22:59.212853+00:00 |
| pysec-2024-201 |
6.1 (3.1)
|
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versio… | octoprint | 2024-11-05T19:15:05+00:00 | 2025-01-19T16:22:59.154645+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33766 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.508057Z |
| gsd-2024-33779 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.507854Z |
| gsd-2024-33792 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.507383Z |
| gsd-2024-33704 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.504657Z |
| gsd-2024-33758 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.500910Z |
| gsd-2024-33710 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.499457Z |
| gsd-2024-33707 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.497095Z |
| gsd-2024-33781 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.495881Z |
| gsd-2024-33679 | Cross-Site Request Forgery (CSRF) vulnerability in FameThemes FameTheme Demo Importer.Thi… | 2024-04-27T05:02:18.492186Z |
| gsd-2024-33777 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.489805Z |
| gsd-2024-33743 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.488662Z |
| gsd-2024-33791 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.488352Z |
| gsd-2024-33747 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.485640Z |
| gsd-2024-33774 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.484899Z |
| gsd-2024-33734 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.482444Z |
| gsd-2024-33740 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.479260Z |
| gsd-2024-33801 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.476298Z |
| gsd-2024-33682 | Cross-Site Request Forgery (CSRF) vulnerability in Cookie Information A/S WP GDPR Complia… | 2024-04-27T05:02:18.470225Z |
| gsd-2024-33709 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.469333Z |
| gsd-2024-33745 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.468253Z |
| gsd-2024-33690 | Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio Financio.This issue affects … | 2024-04-27T05:02:18.467205Z |
| gsd-2024-33808 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.458232Z |
| gsd-2024-33767 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.454953Z |
| gsd-2024-33805 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.453392Z |
| gsd-2024-33711 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.452695Z |
| gsd-2024-33790 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.450431Z |
| gsd-2024-33759 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.447890Z |
| gsd-2024-33680 | Cross-Site Request Forgery (CSRF) vulnerability in MainWP MainWP Child Reports.This issue… | 2024-04-27T05:02:18.444951Z |
| gsd-2024-33715 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.440563Z |
| gsd-2024-33748 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.439408Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-40 | Malicious code in spire.officejs-editors (npm) | 2026-01-05T00:40:44Z | 2026-01-08T09:13:17Z |
| mal-2026-39 | Malicious code in spire.officejs-common (npm) | 2026-01-05T00:45:36Z | 2026-01-08T09:13:17Z |
| mal-2026-156 | Malicious code in sparkling-cli (npm) | 2026-01-08T04:54:18Z | 2026-01-08T09:13:17Z |
| mal-2026-155 | Malicious code in shaktihacker2026 (npm) | 2026-01-08T05:20:19Z | 2026-01-08T09:13:17Z |
| mal-2026-151 | Malicious code in svelte-monorepo (npm) | 2026-01-08T01:01:08Z | 2026-01-08T09:13:17Z |
| mal-2026-148 | Malicious code in tailwind-autoanimation (npm) | 2026-01-07T23:41:14Z | 2026-01-08T09:13:17Z |
| mal-2026-147 | Malicious code in spark-ar-jest-mocks (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-146 | Malicious code in spark-ar-dynamic-mocks (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-145 | Malicious code in spark-ar-core-libs (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-144 | Malicious code in scrollbar-stylecss (npm) | 2026-01-07T23:43:04Z | 2026-01-08T09:13:17Z |
| mal-2026-143 | Malicious code in rt-text-media-grid-collection (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-142 | Malicious code in rt-qa-sampler (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-141 | Malicious code in rt-long-form-content (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-140 | Malicious code in rt-live-hero (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-139 | Malicious code in rt-global-nav (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-138 | Malicious code in rt-footer (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-137 | Malicious code in rt-da-classic-card-collection (npm) | 2026-01-07T23:51:10Z | 2026-01-08T09:13:17Z |
| mal-2026-121 | Malicious code in syqara (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:17Z |
| mal-2026-120 | Malicious code in qyxb (npm) | 2026-01-07T06:49:55Z | 2026-01-08T09:13:17Z |
| mal-2026-105 | Malicious code in syntax-class-properties (npm) | 2026-01-07T05:38:18Z | 2026-01-08T09:13:17Z |
| mal-2026-104 | Malicious code in sort-imports-es6-autofix (npm) | 2026-01-07T05:38:18Z | 2026-01-08T09:13:17Z |
| mal-2026-102 | Malicious code in redis-cookie-ts (npm) | 2026-01-07T02:08:41Z | 2026-01-08T09:13:17Z |
| mal-2026-93 | Malicious code in okta-signin-widget (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:16Z |
| mal-2026-92 | Malicious code in okta-loginpage-render (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:16Z |
| mal-2026-91 | Malicious code in okta-auth-js (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:16Z |
| mal-2026-90 | Malicious code in matic-transfer-consumer (npm) | 2026-01-06T13:29:42Z | 2026-01-08T09:13:16Z |
| mal-2026-77 | Malicious code in polymarket-clob (npm) | 2026-01-06T13:18:41Z | 2026-01-08T09:13:16Z |
| mal-2026-76 | Malicious code in open-telemetry-mini-client (npm) | 2026-01-06T12:58:52Z | 2026-01-08T09:13:16Z |
| mal-2026-69 | Malicious code in n8n-performance-metrics (npm) | 2026-01-06T03:42:22Z | 2026-01-08T09:13:16Z |
| mal-2026-68 | Malicious code in n8n-nodes-performance-metrics (npm) | 2026-01-06T03:42:22Z | 2026-01-08T09:13:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2911 | Synacor Zimbra: Mehrere Schwachstellen | 2025-12-22T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2891 | WebKitGTK: Mehrere Schwachstellen ermöglichen Codeausführung und DoS | 2025-12-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2888 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2882 | Red Hat Enterprise Linux (audiofile): Schwachstelle ermöglicht Denial of Service | 2025-12-17T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2830 | Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Denial of Service | 2025-12-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2816 | ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-10T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2805 | TianoCore EDK2: Schwachstelle ermöglicht Codeausführung | 2025-12-09T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2765 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-08T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2751 | WebKitGTK: Mehrere Schwachstellen | 2025-12-04T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2736 | QT (Declarative module): Schwachstelle ermöglicht Denial of Service | 2025-12-03T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2729 | WebKitGTK: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2724 | Golang Go: Mehrere Schwachstellen | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2722 | ImageMagick: Schwachstelle ermöglicht Denial of Service | 2025-12-02T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2706 | Python: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-12-01T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2658 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-11-20T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2657 | WebKitGTK: Mehrere Schwachstellen | 2025-11-20T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2638 | Grub: Mehrere Schwachstellen | 2025-11-18T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2608 | Golang Go: Schwachstelle ermöglicht Denial of Service | 2025-11-16T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2595 | Linux Kernel: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2593 | pgAdmin: Mehrere Schwachstellen | 2025-11-12T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2579 | Linux Kernel: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2566 | Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen | 2025-11-11T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2441 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-29T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2433 | Google Cloud Platform (Envoy Proxy):: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-10-28T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2431 | Linux Kernel: Mehrere Schwachstellen | 2025-10-28T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2409 | Xen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-10-26T23:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2394 | Linux Kernel: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2380 | Xen: Mehrere Schwachstellen | 2025-10-21T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2229 | Linux Kernel: Mehrere Schwachstellen | 2025-10-07T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| wid-sec-w-2025-2110 | LibTiff: Schwachstelle ermöglicht Codeausführung | 2025-09-22T22:00:00.000+00:00 | 2026-01-05T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ncsc-2025-0290 | Kwetsbaarheden verholpen in Apple macOS | 2025-09-16T11:16:20.572265Z | 2025-09-16T11:16:20.572265Z |
| ncsc-2025-0289 | Kwetsbaarheden verholpen in Omnissa Workspace ONE UEM | 2025-09-12T15:23:20.359090Z | 2025-09-12T15:23:20.359090Z |
| ncsc-2025-0288 | Kwetsbaarheden verholpen in GitLab CE/EE | 2025-09-12T14:49:52.285990Z | 2025-09-12T14:49:52.285990Z |
| ncsc-2025-0287 | Kwetsbaarheden verholpen in Cisco NX-OS Software | 2025-09-11T08:18:37.706725Z | 2025-09-11T08:18:37.706725Z |
| ncsc-2025-0286 | Kwetsbaarheden verholpen in Cisco IOS XR Software | 2025-09-11T08:14:36.960621Z | 2025-09-11T08:14:36.960621Z |
| ncsc-2025-0285 | Kwetsbaarheden verholpen in Adobe Acrobat Reader | 2025-09-10T11:01:43.415733Z | 2025-09-10T11:01:43.415733Z |
| ncsc-2025-0284 | Kwetsbaarheid verholpen in Adobe Commerce en Magento | 2025-09-10T10:49:56.787627Z | 2025-09-10T10:49:56.787627Z |
| ncsc-2025-0283 | Kwetsbaarheden verholpen in Adobe Experience Manager | 2025-09-10T10:46:54.808276Z | 2025-09-10T10:46:54.808276Z |
| ncsc-2025-0282 | Kwetsbaarheid verholpen in Adobe Dreamweaver | 2025-09-10T10:38:24.553749Z | 2025-09-10T10:38:24.553749Z |
| ncsc-2025-0281 | Kwetsbaarheid verholpen in Adobe ColdFusion | 2025-09-10T10:24:09.409410Z | 2025-09-10T10:24:09.409410Z |
| ncsc-2025-0280 | Kwetsbaarheden verholpen in Microsoft SQL Server | 2025-09-09T18:27:39.956624Z | 2025-09-09T18:27:39.956624Z |
| ncsc-2025-0279 | Kwetsbaarheden verholpen in Microsoft Azure | 2025-09-09T18:25:53.539582Z | 2025-09-09T18:25:53.539582Z |
| ncsc-2025-0278 | Kwetsbaarheden verholpen in Microsoft Office | 2025-09-09T18:23:23.763765Z | 2025-09-09T18:23:23.763765Z |
| ncsc-2025-0277 | Kwetsbaarheden verholpen in Microsoft Windows | 2025-09-09T18:22:30.766030Z | 2025-09-09T18:22:30.766030Z |
| ncsc-2025-0276 | Kwetsbaarheden verholpen in Schneider Electric Saitel | 2025-09-09T15:16:00.122647Z | 2025-09-09T15:16:00.122647Z |
| ncsc-2025-0275 | Kwetsbaarheden verholpen in SAP producten | 2025-09-09T11:12:22.945466Z | 2025-09-09T11:12:22.945466Z |
| ncsc-2025-0274 | Kwetsbaarheden verholpen in Siemens producten | 2025-09-09T11:06:34.785987Z | 2025-09-09T11:06:34.785987Z |
| ncsc-2025-0245 | Kwetsbaarheden verholpen in SAP producten | 2025-08-12T11:10:21.111816Z | 2025-09-05T11:12:05.722381Z |
| ncsc-2025-0273 | Kwetsbaarheden verholpen in Google Android en Samsung Mobile | 2025-09-04T08:15:14.806733Z | 2025-09-04T08:15:14.806733Z |
| ncsc-2025-0272 | Kwetsbaarheid verholpen in FreePBX | 2025-08-29T08:37:54.893549Z | 2025-08-29T08:37:54.893549Z |
| ncsc-2025-0271 | Kwetsbaarheden verholpen in Arcserve Unified Data Protection | 2025-08-28T12:56:02.228992Z | 2025-08-28T12:56:02.228992Z |
| ncsc-2025-0270 | Kwetsbaarheden verholpen in Cisco NX-OS Software | 2025-08-28T08:36:20.358948Z | 2025-08-28T08:36:20.358948Z |
| ncsc-2025-0234 | Kwetsbaarheid verholpen in CrushFTP | 2025-07-21T08:34:35.304610Z | 2025-08-28T07:59:34.275023Z |
| ncsc-2025-0269 | Kwetsbaarheden verholpen in IBM Cognos Command Center | 2025-08-27T13:10:59.965070Z | 2025-08-27T13:10:59.965070Z |
| ncsc-2025-0268 | Kwetsbaarheden verholpen in Citrix NetScaler ADC en Gateway | 2025-08-26T13:11:42.925280Z | 2025-08-26T17:34:30.428328Z |
| ncsc-2025-0266 | Kwetsbaarheid verholpen in Apple MacOS, iOS en iPadOS | 2025-08-22T05:49:07.556948Z | 2025-08-25T12:16:10.430485Z |
| ncsc-2025-0267 | Kwetsbaarheden verholpen in Foxit Reader | 2025-08-25T11:26:17.380689Z | 2025-08-25T11:26:17.380689Z |
| ncsc-2025-0265 | Kwetsbaarheden verholpen in Commvault | 2025-08-20T12:15:48.655099Z | 2025-08-20T12:15:48.655099Z |
| ncsc-2025-0264 | Kwetsbaarheden verholpen in Cisco Secure Firewall Software | 2025-08-15T08:52:41.012811Z | 2025-08-15T08:52:41.012811Z |
| ncsc-2025-0263 | Kwetsbaarheden verholpen in N-able N-Central | 2025-08-14T12:38:27.349283Z | 2025-08-14T12:38:27.349283Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1142 | Red Hat Security Advisory: haproxy security update | 2024-03-05T18:19:45+00:00 | 2026-01-08T15:03:13+00:00 |
| rhsa-2024:1089 | Red Hat Security Advisory: haproxy security update | 2024-03-05T08:20:51+00:00 | 2026-01-08T15:03:11+00:00 |
| rhsa-2024:10271 | Red Hat Security Advisory: haproxy security update | 2024-11-26T00:43:41+00:00 | 2026-01-08T15:03:11+00:00 |
| rhsa-2024:10267 | Red Hat Security Advisory: haproxy security update | 2024-11-26T00:37:55+00:00 | 2026-01-08T15:03:09+00:00 |
| rhsa-2024:0033 | Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update | 2024-01-03T14:10:38+00:00 | 2026-01-08T15:03:07+00:00 |
| rhsa-2023:5476 | Red Hat Security Advisory: glibc security update | 2023-10-05T15:41:31+00:00 | 2026-01-08T15:03:05+00:00 |
| rhsa-2023:5455 | Red Hat Security Advisory: glibc security update | 2023-10-05T14:14:13+00:00 | 2026-01-08T15:03:00+00:00 |
| rhsa-2023:5454 | Red Hat Security Advisory: glibc security update | 2023-10-05T13:11:35+00:00 | 2026-01-08T15:02:58+00:00 |
| rhsa-2023:5453 | Red Hat Security Advisory: glibc security update | 2023-10-05T14:03:40+00:00 | 2026-01-08T15:02:56+00:00 |
| rhsa-2022:7273 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.0 release and security update | 2022-11-02T10:40:29+00:00 | 2026-01-08T15:01:31+00:00 |
| rhsa-2023:6821 | Red Hat Security Advisory: mariadb:10.5 security update | 2023-11-08T15:38:43+00:00 | 2026-01-08T15:01:28+00:00 |
| rhsa-2023:3642 | Red Hat Security Advisory: Red Hat Ceph Storage 6.1 Container security and bug fix update | 2023-06-15T15:59:41+00:00 | 2026-01-08T15:01:28+00:00 |
| rhsa-2023:1646 | Red Hat Security Advisory: OpenShift Container Platform 4.12.11 security update | 2023-04-11T07:54:54+00:00 | 2026-01-08T15:01:28+00:00 |
| rhsa-2023:0272 | Red Hat Security Advisory: Red Hat support for Spring Boot 2.7.2.SP1 security update | 2023-02-06T14:38:28+00:00 | 2026-01-08T15:01:28+00:00 |
| rhsa-2022:8864 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-ujson) security update | 2022-12-07T20:28:10+00:00 | 2026-01-08T15:01:28+00:00 |
| rhsa-2022:8850 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-ujson) security update | 2022-12-07T19:19:07+00:00 | 2026-01-08T15:01:26+00:00 |
| rhsa-2022:7272 | Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.0 release and security update | 2022-11-02T10:45:41+00:00 | 2026-01-08T15:01:25+00:00 |
| rhsa-2022:6443 | Red Hat Security Advisory: mariadb:10.3 security and bug fix update | 2022-09-13T09:57:49+00:00 | 2026-01-08T15:01:25+00:00 |
| rhsa-2022:6306 | Red Hat Security Advisory: rh-mariadb103-galera and rh-mariadb103-mariadb security and bug fix update | 2022-09-01T14:21:12+00:00 | 2026-01-08T15:01:24+00:00 |
| rhsa-2022:5948 | Red Hat Security Advisory: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update | 2022-08-09T12:23:26+00:00 | 2026-01-08T15:01:24+00:00 |
| rhsa-2022:5826 | Red Hat Security Advisory: mariadb:10.5 security, bug fix, and enhancement update | 2022-08-02T10:09:06+00:00 | 2026-01-08T15:01:24+00:00 |
| rhsa-2022:5759 | Red Hat Security Advisory: rh-mariadb105-galera and rh-mariadb105-mariadb security and bugfix update | 2022-07-28T16:06:35+00:00 | 2026-01-08T15:01:23+00:00 |
| rhsa-2022:4818 | Red Hat Security Advisory: mariadb:10.3 security and bug fix update | 2022-05-31T12:20:53+00:00 | 2026-01-08T15:01:22+00:00 |
| rhsa-2022:1557 | Red Hat Security Advisory: mariadb:10.5 security, bug fix, and enhancement update | 2022-04-26T17:34:20+00:00 | 2026-01-08T15:01:21+00:00 |
| rhsa-2022:1556 | Red Hat Security Advisory: mariadb:10.3 security and bug fix update | 2022-04-26T21:15:26+00:00 | 2026-01-08T15:01:20+00:00 |
| rhsa-2022:1007 | Red Hat Security Advisory: rh-mariadb105-mariadb security and bug fix update | 2022-03-22T10:23:32+00:00 | 2026-01-08T15:01:20+00:00 |
| rhsa-2022:1010 | Red Hat Security Advisory: rh-mariadb103-mariadb security and bug fix update | 2022-03-22T12:30:40+00:00 | 2026-01-08T15:01:19+00:00 |
| rhsa-2022:8861 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (numpy) security update | 2022-12-07T20:28:14+00:00 | 2026-01-08T13:46:32+00:00 |
| rhsa-2022:8852 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (numpy) security update | 2022-12-07T19:19:32+00:00 | 2026-01-08T13:46:32+00:00 |
| rhsa-2022:7144 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update | 2022-10-26T20:05:57+00:00 | 2026-01-08T13:46:31+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-308-02 | Survision License Plate Recognition Camera | 2025-11-04T07:00:00.000000Z | 2025-11-04T07:00:00.000000Z |
| va-25-304-02 | Restaurant Brands International assistant platform multiple vulnerabilities | 2025-10-31T17:02:13Z | 2025-10-31T17:02:13Z |
| va-25-304-01 | ELOG multiple vulnerabilities | 2025-10-31T16:57:24Z | 2025-10-31T16:57:24Z |
| icsa-25-303-02 | Hitachi Energy TropOS | 2025-10-30T06:00:00.000000Z | 2025-10-30T06:00:00.000000Z |
| icsa-25-303-01 | International Standards Organization ISO 15118 | 2025-10-30T05:00:00.000000Z | 2025-10-30T05:00:00.000000Z |
| icsa-25-282-01 | Hitachi Energy Asset Suite (Update A) | 2025-09-30T08:50:13.000000Z | 2025-10-28T09:50:00.000000Z |
| icsma-25-301-01 | Vertikal Systems Hospital Manager Backend Services | 2025-10-28T06:00:00.000000Z | 2025-10-28T06:00:00.000000Z |
| icsma-25-296-01 | NIHON KOHDEN Central Monitor CNS-6201 | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-04 | Delta Electronics ASDA-Soft | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-03 | Veeder-Root TLS4B Automatic Tank Gauge System | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-02 | ASKI Energy ALS-Mini-S8 and ALS-Mini-S4 | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-296-01 | AutomationDirect Productivity Suite | 2025-10-23T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-294-02 | Rockwell Automation Compact GuardLogix 5370 | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-294-01 | Rockwell Automation 1783-NATR | 2025-10-21T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-289-02 | Rockwell Automation FactoryTalk Linx | 2025-10-16T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-280-01 | Delta Electronics DIAScreen | 2025-10-07T06:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| icsa-25-037-02 | Schneider Electric EcoStruxure (Update C) | 2025-02-06T07:00:00.000000Z | 2025-10-23T06:00:00.000000Z |
| va-25-296-01 | Frontier Airlines website publicly available email address validation | 2025-10-23T00:00:00Z | 2025-10-23T00:00:00Z |
| va-25-297-01 | IBM DOORS Next Generation multiple vulnerabilities | 2025-10-22T18:45:47Z | 2025-10-22T18:45:47Z |
| icsma-25-294-01 | Oxford Nanopore Technologies MinKNOW | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-06 | Raisecomm RAX701-GC Series | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-25-294-05 | CloudEdge Online Cameras and App | 2025-10-21T06:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| icsa-24-354-07 | Schneider Electric Modicon Controllers (Update A) | 2024-12-19T07:00:00.000000Z | 2025-10-21T06:00:00.000000Z |
| va-25-289-01 | OPEXUS FOIAXpress unauthenticated administrator password reset | 2025-10-16T16:43:55Z | 2025-10-16T16:43:55Z |
| icsa-25-289-04 | Rockwell Automation ArmorStart AOP | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-03 | Rockwell Automation FactoryTalk ViewPoint | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-289-01 | Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7 | 2025-10-16T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-24-121-01 | Delta Electronics CNCSoft-G2 DOPSoft (Update A) | 2024-04-30T06:00:00.000000Z | 2025-10-16T06:00:00.000000Z |
| icsa-25-301-01 | Schneider Electric EcoStruxure | 2025-10-14T07:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| icsa-25-259-01 | Schneider Electric Altivar products ATVdPAC module ILC992 InterLink Converter (Update A) | 2025-09-09T04:00:00.000000Z | 2025-10-14T07:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-kkhzbhr5 | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-contcent-insuffacces-ardovhn8 | Cisco Unified Contact Center Enterprise Cloud Connect Insufficient Access Control Vulnerability | 2025-05-21T16:00:00+00:00 | 2025-05-21T16:00:00+00:00 |
| cisco-sa-sdwanarbfile-2zkhkzwj | Cisco Catalyst SD-WAN Manager Arbitrary File Creation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-14T20:04:53+00:00 |
| cisco-sa-sdwan-fileoverwrite-uc9txwh | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-08T15:55:57+00:00 |
| cisco-sa-wlc-wncd-p6gvt6hl | Cisco IOS XE Software for WLC Wireless IPv6 Clients Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-webui-multi-arnhm4v6 | Cisco IOS XE Software Web-Based Management Interface Vulnerabilities | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-gvn3oknc | Cisco IOS XE Software Web-Based Management Interface Command Injection Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-vmanage-xss-xhn8m5jt | Cisco Catalyst SD-WAN Manager Stored Cross-Site Scripting Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-vmanage-html-inj-gxvtk6zj | Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-twamp-kv4fhugn | Cisco IOS, IOS XE, and IOS XR Software TWAMP Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-snmpv3-qkeyvzsy | Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-sisf-dos-zgwt4ddy | Multiple Cisco Products Switch Integrated Security Features DHCPv6 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-sdwan-priviesc-wck7bmmt | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-netconf-nacm-bypass-tgzv9pmq | Cisco IOS XE Software Model-Driven Programmability Authorization Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-multiprod-ikev2-dos-gpctuqv2 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ipsgacl-pg6qfzk | Cisco IOS Software on Cisco Catalyst 1000 and 2960L Switches Access Control List Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iox-dos-95fqnf7b | Cisco IOx Application Hosting Environment Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-privesc-su7scvdp | Cisco IOS XE Software Privilege Escalation Vulnerabilities | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-ikev1-dos-xhk3hzfc | Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-iosxe-dhcpsn-dos-xbn8mtks | Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ios-http-privesc-wcrd5e3 | Cisco IOS Software Industrial Ethernet Switch Device Manager Privilege Escalation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ewlc-user-del-hqxmpudj | Cisco IOS XE Wireless Controller Software Unauthorized User Deletion Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-ewlc-cdp-dos-fpeks9k | Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-catc-insec-acc-mtt8eheb | Cisco Catalyst Center Insufficient Access Control Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-catalyst-tls-pqnd5kej | Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-c2960-3560-sboot-ztqadrhq | Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-bootstrap-kfgxygdh | Cisco IOS XE Software Bootstrap Arbitrary File Write Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-asr903-rsp3-arp-dos-wmfzdvjz | Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability | 2025-05-07T16:00:00+00:00 | 2025-05-07T16:00:00+00:00 |
| cisco-sa-webex-app-client-rce-ufymmylc | Cisco Webex App Client-Side Remote Code Execution Vulnerability | 2025-04-16T16:00:00+00:00 | 2025-04-16T16:00:00+00:00 |
| cisco-sa-sna-prvesc-4bqmk33z | Cisco Secure Network Analytics Privilege Escalation Vulnerability | 2025-04-16T16:00:00+00:00 | 2025-04-16T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38096 | wifi: iwlwifi: don't warn when if there is a FW error | 2025-07-02T00:00:00.000Z | 2026-01-08T14:40:58.000Z |
| msrc_cve-2025-38140 | dm: limit swapping tables for devices with zone write plugs | 2025-07-02T00:00:00.000Z | 2026-01-08T14:40:48.000Z |
| msrc_cve-2025-21693 | mm: zswap: properly synchronize freeing resources during CPU hotunplug | 2025-02-02T00:00:00.000Z | 2026-01-08T14:40:44.000Z |
| msrc_cve-2025-38162 | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 2025-07-02T00:00:00.000Z | 2026-01-08T14:40:38.000Z |
| msrc_cve-2025-38125 | net: stmmac: make sure that ptp_rate is not 0 before configuring EST | 2025-07-02T00:00:00.000Z | 2026-01-08T14:40:27.000Z |
| msrc_cve-2024-57857 | RDMA/siw: Remove direct link to net_device | 2025-01-02T00:00:00.000Z | 2026-01-08T14:40:23.000Z |
| msrc_cve-2025-21786 | workqueue: Put the pwq after detaching the rescuer from the pool | 2025-02-02T00:00:00.000Z | 2026-01-08T14:39:41.000Z |
| msrc_cve-2025-37945 | net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY | 2025-05-02T00:00:00.000Z | 2026-01-08T14:39:31.000Z |
| msrc_cve-2024-43819 | kvm: s390: Reject memory region operations for ucontrol VMs | 2024-08-02T00:00:00.000Z | 2026-01-08T14:38:54.000Z |
| msrc_cve-2024-26756 | md: Don't register sync_thread for reshape directly | 2024-04-02T07:00:00.000Z | 2026-01-08T14:38:48.000Z |
| msrc_cve-2023-52624 | drm/amd/display: Wake DMCUB before executing GPINT commands | 2024-03-02T08:00:00.000Z | 2026-01-08T14:38:38.000Z |
| msrc_cve-2024-43872 | RDMA/hns: Fix soft lockup under heavy CEQE load | 2024-08-02T00:00:00.000Z | 2026-01-08T14:38:34.000Z |
| msrc_cve-2024-43899 | drm/amd/display: Fix null pointer deref in dcn20_resource.c | 2024-08-02T00:00:00.000Z | 2026-01-08T14:38:02.000Z |
| msrc_cve-2024-41008 | drm/amdgpu: change vm->task_info handling | 2024-07-01T07:00:00.000Z | 2026-01-08T14:38:02.000Z |
| msrc_cve-2024-43901 | drm/amd/display: Fix NULL pointer dereference for DTN log in DCN401 | 2024-08-02T00:00:00.000Z | 2026-01-08T14:37:52.000Z |
| msrc_cve-2024-35808 | md/dm-raid: don't call md_reap_sync_thread() directly | 2024-05-02T07:00:00.000Z | 2026-01-08T14:37:31.000Z |
| msrc_cve-2025-37750 | smb: client: fix UAF in decryption with multichannel | 2025-05-02T00:00:00.000Z | 2026-01-08T14:37:24.000Z |
| msrc_cve-2025-21976 | fbdev: hyperv_fb: Allow graceful removal of framebuffer | 2025-04-02T00:00:00.000Z | 2026-01-08T14:37:21.000Z |
| msrc_cve-2025-37747 | perf: Fix hang while freeing sigtrap event | 2025-05-02T00:00:00.000Z | 2026-01-08T14:37:14.000Z |
| msrc_cve-2025-21635 | rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy | 2025-01-02T00:00:00.000Z | 2026-01-08T14:37:14.000Z |
| msrc_cve-2025-37907 | accel/ivpu: Fix locking order in ivpu_job_submit | 2025-05-02T00:00:00.000Z | 2026-01-08T14:37:09.000Z |
| msrc_cve-2025-38104 | drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV | 2025-04-02T00:00:00.000Z | 2026-01-08T14:37:02.000Z |
| msrc_cve-2023-52586 | drm/msm/dpu: Add mutex lock in control vblank irq | 2024-03-02T08:00:00.000Z | 2026-01-08T14:37:02.000Z |
| msrc_cve-2024-42065 | drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init | 2024-07-01T07:00:00.000Z | 2026-01-08T14:37:01.000Z |
| msrc_cve-2024-36024 | drm/amd/display: Disable idle reallow as part of command/gpint execution | 2024-05-02T07:00:00.000Z | 2026-01-08T14:36:59.000Z |
| msrc_cve-2025-23135 | RISC-V: KVM: Teardown riscv specific bits after kvm_exit | 2025-04-02T00:00:00.000Z | 2026-01-08T14:36:52.000Z |
| msrc_cve-2025-21696 | mm: clear uffd-wp PTE/PMD state on mremap() | 2025-02-02T00:00:00.000Z | 2026-01-08T14:36:51.000Z |
| msrc_cve-2024-42081 | drm/xe/xe_devcoredump: Check NULL before assignments | 2024-07-01T07:00:00.000Z | 2026-01-08T14:36:51.000Z |
| msrc_cve-2024-26914 | drm/amd/display: fix incorrect mpc_combine array size | 2024-04-02T07:00:00.000Z | 2026-01-08T14:36:48.000Z |
| msrc_cve-2025-61099 | FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet. | 2025-10-02T00:00:00.000Z | 2026-01-08T14:36:42.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201908-0421 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream priorit… | 2025-12-22T23:25:23.385000Z |
| var-201609-0597 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other pr… | 2025-12-22T23:25:23.039000Z |
| var-201904-1397 | An input validation issue was addressed with improved input validation. This issue affect… | 2025-12-22T23:25:22.712000Z |
| var-201306-0253 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T23:25:16.313000Z |
| var-201107-0125 | The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, a… | 2025-12-22T23:24:45.576000Z |
| var-200110-0170 | The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Cry… | 2025-12-22T23:24:45.414000Z |
| var-201910-1495 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print… | 2025-12-22T23:24:42.580000Z |
| var-200608-0029 | AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of… | 2025-12-22T23:24:41.737000Z |
| var-202208-2263 | When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies … | 2025-12-22T23:24:40.257000Z |
| var-200505-0163 | Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when h… | 2025-12-22T23:24:08.245000Z |
| var-201202-0323 | Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing… | 2025-12-22T23:24:07.623000Z |
| var-201912-0575 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T23:24:05.465000Z |
| var-201912-0576 | An out-of-bounds read was addressed with improved input validation. This issue is fixed i… | 2025-12-22T23:24:04.820000Z |
| var-201912-0596 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T23:24:03.854000Z |
| var-202109-1805 | Malformed requests may cause the server to dereference a NULL pointer. This issue affects… | 2025-12-22T23:24:01.014000Z |
| var-201302-0149 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2025-12-22T23:22:28.478000Z |
| var-202010-1511 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2025-12-22T23:22:28.189000Z |
| var-200611-0472 | Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) b… | 2025-12-22T23:22:28.040000Z |
| var-200909-0782 | Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, a… | 2025-12-22T23:22:19.864000Z |
| var-201405-0243 | The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does n… | 2025-12-22T23:22:17.097000Z |
| var-201203-0174 | Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers … | 2025-12-22T23:22:16.943000Z |
| var-201504-0477 | SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names… | 2025-12-22T23:22:14.313000Z |
| var-201306-0226 | mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 wri… | 2025-12-22T23:22:09.392000Z |
| var-201302-0301 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2025-12-22T23:21:38.138000Z |
| var-201206-0053 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2025-12-22T23:21:35.675000Z |
| var-202003-1782 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between seriali… | 2025-12-22T23:20:21.095000Z |
| var-201912-1857 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2025-12-22T23:19:50.781000Z |
| var-201804-1161 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2025-12-22T23:19:48.601000Z |
| var-201511-0027 | The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the par… | 2025-12-22T23:19:48.533000Z |
| var-200905-0196 | racoon/isakmp_frag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denia… | 2025-12-22T23:19:47.990000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2025-000042 | Inefficient regular expressions in GROWI | 2025-06-24T15:25+09:00 | 2025-06-24T15:25+09:00 |
| jvndb-2025-000041 | Multiple vulnerabilities in ELECOM wireless LAN routers | 2025-06-24T14:50+09:00 | 2025-06-24T14:50+09:00 |
| jvndb-2025-007390 | Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385) | 2025-06-24T11:18+09:00 | 2025-06-24T11:18+09:00 |
| jvndb-2025-000040 | KCM3100 vulnerable to authentication bypass using an alternate path or channel | 2025-06-18T13:42+09:00 | 2025-06-18T13:42+09:00 |
| jvndb-2025-000039 | Multiple vulnerabilities in RICOH Streamline NX PC Client | 2025-06-13T16:09+09:00 | 2025-06-13T16:09+09:00 |
| jvndb-2025-000038 | UpdateNavi vulnerable to improper restriction of communication channel to intended endpoints | 2025-06-12T15:56+09:00 | 2025-06-12T15:56+09:00 |
| jvndb-2025-000037 | Multiple surveillance cameras provided by i-PRO Co., Ltd. vulnerable to cross-site request forgery | 2025-06-06T13:56+09:00 | 2025-06-06T13:56+09:00 |
| jvndb-2025-000036 | TimeWorks vulnerable to path traversal | 2025-06-03T15:35+09:00 | 2025-06-03T15:35+09:00 |
| jvndb-2025-000035 | Improper file access permission settings in PC Time Tracer | 2025-06-03T14:40+09:00 | 2025-06-03T14:40+09:00 |
| jvndb-2025-000034 | Multiple vulnerabilities in wivia 5 | 2025-05-30T15:57+09:00 | 2025-05-30T15:57+09:00 |
| jvndb-2025-001238 | Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers | 2025-01-29T13:41+09:00 | 2025-05-27T16:06+09:00 |
| jvndb-2025-000032 | Mailform Pro CGI generating error messages containing sensitive information | 2025-05-26T14:22+09:00 | 2025-05-26T14:22+09:00 |
| jvndb-2025-000033 | Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox' | 2025-05-23T15:36+09:00 | 2025-05-23T15:36+09:00 |
| jvndb-2025-005467 | Passback vulnerabilities in Canon Production Printers, Office/Small Office Multifunction Printers, and Laser Printers | 2025-05-22T15:03+09:00 | 2025-05-22T15:03+09:00 |
| jvndb-2024-000117 | Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor | 2024-10-31T16:44+09:00 | 2025-05-19T17:59+09:00 |
| jvndb-2025-005107 | Multiple vulnerabilities in V-SFT | 2025-05-16T14:32+09:00 | 2025-05-16T14:32+09:00 |
| jvndb-2025-005057 | Multiple vulnerabilities in I-O DATA network attached hard disk 'HDL-T Series' | 2025-05-15T18:27+09:00 | 2025-05-15T18:27+09:00 |
| jvndb-2025-005050 | Multiple vulnerabilities in a-blog cms | 2025-05-15T18:11+09:00 | 2025-05-15T18:11+09:00 |
| jvndb-2025-000031 | Pgpool-II vulnerable to authentication bypass by primary weakness | 2025-05-15T16:14+09:00 | 2025-05-15T16:14+09:00 |
| jvndb-2025-004863 | Panasonic IR Control Hub vulnerable to Unauthorised firmware loading | 2025-05-14T11:30+09:00 | 2025-05-14T11:30+09:00 |
| jvndb-2025-004671 | Multiple vulnerabilities in GL-MT2500 and GL-MT2500A | 2025-05-12T17:52+09:00 | 2025-05-12T17:52+09:00 |
| jvndb-2025-001016 | OMRON NJ/NX series vulnerable to path traversal | 2025-02-06T18:27+09:00 | 2025-05-08T17:44+09:00 |
| jvndb-2025-004079 | Improper access permission settings in multiple SEIKO EPSON printer drivers for Windows OS | 2025-04-30T11:46+09:00 | 2025-04-30T11:46+09:00 |
| jvndb-2025-004076 | Security Update for Trend Micro Trend Vision One (April 2025) | 2025-04-30T10:38+09:00 | 2025-04-30T10:38+09:00 |
| jvndb-2025-000029 | Multiple vulnerabilities in Quick Agent | 2025-04-25T13:49+09:00 | 2025-04-25T13:49+09:00 |
| jvndb-2025-000028 | i-PRO Configuration Tool vulnerable to use of hard-coded cryptographic key | 2025-04-24T13:50+09:00 | 2025-04-24T13:50+09:00 |
| jvndb-2025-000027 | Active! mail vulnerable to stack-based buffer overflow | 2025-04-18T16:50+09:00 | 2025-04-18T16:50+09:00 |
| jvndb-2016-000129 | Android OS issue where it is affected by the CRIME attack | 2016-07-25T11:15+09:00 | 2025-04-18T16:36+09:00 |
| jvndb-2025-003213 | TP-Link Deco BE65 Pro vulnerable to OS command injection | 2025-04-11T13:52+09:00 | 2025-04-11T13:52+09:00 |
| jvndb-2025-000026 | Multiple vulnerabilities in BizRobo! | 2025-04-10T15:36+09:00 | 2025-04-10T15:36+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:4423-1 | Security update for webkit2gtk3 | 2025-12-17T11:01:39Z | 2025-12-17T11:01:39Z |
| suse-su-2025:4422-1 | Security update for the Linux Kernel | 2025-12-17T10:52:47Z | 2025-12-17T10:52:47Z |
| suse-su-2025:4421-1 | Security update for buildah | 2025-12-17T09:04:20Z | 2025-12-17T09:04:20Z |
| suse-su-2025:4419-1 | Security update for xen | 2025-12-16T18:57:18Z | 2025-12-16T18:57:18Z |
| suse-su-2025:4416-1 | Security update for webkit2gtk3 | 2025-12-16T15:57:50Z | 2025-12-16T15:57:50Z |
| suse-su-2025:4411-1 | Security update for librsvg | 2025-12-16T11:35:35Z | 2025-12-16T11:35:35Z |
| suse-su-2025:21222-1 | Security update for gnutls | 2025-12-16T08:43:18Z | 2025-12-16T08:43:18Z |
| suse-su-2025:21217-1 | Security update for libpng16 | 2025-12-16T08:31:52Z | 2025-12-16T08:31:52Z |
| suse-su-2025:21221-1 | Security update for helm | 2025-12-16T08:29:28Z | 2025-12-16T08:29:28Z |
| suse-su-2025:21220-1 | Security update for libpng16 | 2025-12-16T08:25:26Z | 2025-12-16T08:25:26Z |
| suse-su-2025:21218-1 | Security update for salt | 2025-12-16T08:19:40Z | 2025-12-16T08:19:40Z |
| suse-su-2025:21216-1 | Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle | 2025-12-16T07:20:56Z | 2025-12-16T07:20:56Z |
| suse-su-2025:21224-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:21213-1 | Security update for openssl-3 | 2025-12-15T18:22:57Z | 2025-12-15T18:22:57Z |
| suse-su-2025:4408-1 | Security update for libssh | 2025-12-15T16:56:44Z | 2025-12-15T16:56:44Z |
| suse-su-2025:4407-1 | Security update for xkbcomp | 2025-12-15T16:54:15Z | 2025-12-15T16:54:15Z |
| suse-su-2025:4406-1 | Security update for postgresql15 | 2025-12-15T14:22:59Z | 2025-12-15T14:22:59Z |
| suse-su-2025:21223-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:21212-1 | Security update for grub2 | 2025-12-15T12:49:56Z | 2025-12-15T12:49:56Z |
| suse-su-2025:4398-1 | Security update for python3 | 2025-12-15T11:30:55Z | 2025-12-15T11:30:55Z |
| suse-su-2025:4397-1 | Security update for MozillaThunderbird | 2025-12-15T11:26:39Z | 2025-12-15T11:26:39Z |
| suse-su-2025:4396-1 | Security update for MozillaFirefox | 2025-12-15T11:24:28Z | 2025-12-15T11:24:28Z |
| suse-su-2025:4393-1 | Security update for the Linux Kernel | 2025-12-15T11:09:08Z | 2025-12-15T11:09:08Z |
| suse-su-2025:4391-1 | Security update for unbound | 2025-12-15T10:34:10Z | 2025-12-15T10:34:10Z |
| suse-su-2025:4257-2 | Security update for python311 | 2025-12-15T10:33:51Z | 2025-12-15T10:33:51Z |
| suse-su-2025:21211-1 | Security update for ImageMagick | 2025-12-15T09:56:13Z | 2025-12-15T09:56:13Z |
| suse-su-2025:4390-1 | Security update for rhino | 2025-12-12T16:18:03Z | 2025-12-12T16:18:03Z |
| suse-su-2025:21197-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:21195-1 | Security update for binutils | 2025-12-12T15:58:29Z | 2025-12-12T15:58:29Z |
| suse-su-2025:4389-1 | Security update for python | 2025-12-12T13:49:14Z | 2025-12-12T13:49:14Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15784-1 | postgresql15-15.15-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15783-1 | postgresql14-14.20-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15782-1 | postgresql13-13.23-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15781-1 | libpng16-16-1.6.51-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15780-1 | libcoap-devel-4.3.5a-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:15779-1 | helm3-3.19.2-1.1 on GA media | 2025-11-28T00:00:00Z | 2025-11-28T00:00:00Z |
| opensuse-su-2025:20113-1 | Security update for dovecot24 | 2025-11-27T20:17:17Z | 2025-11-27T20:17:17Z |
| opensuse-su-2025:20114-1 | Security update for himmelblau | 2025-11-27T20:16:29Z | 2025-11-27T20:16:29Z |
| opensuse-su-2025:20106-1 | Security update for tomcat11 | 2025-11-27T15:43:26Z | 2025-11-27T15:43:26Z |
| opensuse-su-2025:20116-1 | Security update for rnp | 2025-11-27T12:39:03Z | 2025-11-27T12:39:03Z |
| opensuse-su-2025:20118-1 | Security update for gitea-tea | 2025-11-27T12:30:27Z | 2025-11-27T12:30:27Z |
| opensuse-su-2025:20119-1 | Security update for tcpreplay | 2025-11-27T12:29:40Z | 2025-11-27T12:29:40Z |
| opensuse-su-2025:20115-1 | Security update for pnpm | 2025-11-27T12:28:46Z | 2025-11-27T12:28:46Z |
| opensuse-su-2025:20117-1 | Security update for trivy | 2025-11-27T12:27:44Z | 2025-11-27T12:27:44Z |
| opensuse-su-2025:20100-1 | Security update for libvirt | 2025-11-27T10:23:20Z | 2025-11-27T10:23:20Z |
| opensuse-su-2025:20099-1 | Security update for xwayland | 2025-11-27T10:11:16Z | 2025-11-27T10:11:16Z |
| opensuse-su-2025:15778-1 | libwireshark19-4.6.1-2.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15777-1 | python311-spotipy-2.25.2-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15776-1 | python311-pypdf-6.4.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15775-1 | opa-1.11.0-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15774-1 | netbird-0.60.3-1.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:15773-1 | cheat-4.4.2-3.1 on GA media | 2025-11-27T00:00:00Z | 2025-11-27T00:00:00Z |
| opensuse-su-2025:20091-1 | Security update for the Linux Kernel | 2025-11-26T17:04:24Z | 2025-11-26T17:04:24Z |
| opensuse-su-2025:20090-1 | Security update for curl | 2025-11-26T14:30:14Z | 2025-11-26T14:30:14Z |
| opensuse-su-2025:20089-1 | Security update for mysql-connector-java | 2025-11-26T08:12:25Z | 2025-11-26T08:12:25Z |
| opensuse-su-2025:15772-1 | kubevirt-container-disk-1.6.3-1.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15771-1 | git-bug-0.10.1-3.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:15770-1 | bash-git-prompt-2.7.1-4.1 on GA media | 2025-11-26T00:00:00Z | 2025-11-26T00:00:00Z |
| opensuse-su-2025:20083-1 | Security update for lasso | 2025-11-25T13:27:21Z | 2025-11-25T13:27:21Z |
| opensuse-su-2025:20081-1 | Security update for the Linux Kernel | 2025-11-25T07:35:00Z | 2025-11-25T07:35:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-31121 | WordPress Video Merchant跨站请求伪造漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31120 | WordPress Wp Job Portal任意文件读取漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31119 | WordPress RSS Aggregator by Feedzy代码问题漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31118 | WordPress WP CarDealer权限提升漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31117 | WordPress List category posts SQL注入漏洞 | 2025-12-16 | 2025-12-26 |
| cnvd-2025-31116 | WordPress Addon Elements for Elementor跨站脚本漏洞 | 2025-12-18 | 2025-12-26 |
| cnvd-2025-31395 | Apache Fory反序列化漏洞 | 2025-10-09 | 2025-12-25 |
| cnvd-2025-31394 | Apache Kylin身份认证绕过漏洞 | 2025-10-09 | 2025-12-25 |
| cnvd-2025-31391 | Apache OpenOffice外部文件加载漏洞 | 2025-11-18 | 2025-12-25 |
| cnvd-2025-31388 | Apache StreamPark弱算法漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2025-31387 | Apache HugeGraph-Server反序列化漏洞 | 2025-12-25 | 2025-12-25 |
| cnvd-2025-31334 | WordPress Header Footer Script Adder plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31333 | WordPress Grider for Elementor plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31332 | WordPress GPXpress plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31331 | WordPress FX Currency Converter plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31330 | WordPress Freshchat plugin跨站请求伪造漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31329 | WordPress Fix Media Library plugin信息泄露漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31328 | WordPress Filebird Plugin缺少授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31327 | WordPress FileBird Pro plugin缺失授权漏洞 | 2025-12-22 | 2025-12-25 |
| cnvd-2025-31393 | Apache Tomcat资源管理错误漏洞（CNVD-2025-31393） | 2025-10-31 | 2025-12-24 |
| cnvd-2025-31389 | Apache Hive SQL注入漏洞 | 2025-11-28 | 2025-12-24 |
| cnvd-2025-31336 | WordPress Hide Email Address plugin跨站脚本漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31335 | WordPress HelloLeads CRM Form Shortcode plugin缺少授权漏洞 | 2025-12-22 | 2025-12-24 |
| cnvd-2025-31218 | Company Visitor Management System search-visitor.php文件跨站脚本漏洞 | 2024-01-24 | 2025-12-24 |
| cnvd-2025-31217 | Company Visitor Management System search-visitor.php文件SQL注入漏洞 | 2024-01-24 | 2025-12-24 |
| cnvd-2025-31216 | Company Visitor Management System /index.php文件SQL注入漏洞 | 2025-03-19 | 2025-12-24 |
| cnvd-2025-31215 | Company Visitor Management System /visitor-detail.php文件SQL注入漏洞 | 2025-05-13 | 2025-12-24 |
| cnvd-2025-31214 | Company Visitor Management System /admin-profile.php文件SQL注入漏洞 | 2025-05-13 | 2025-12-24 |
| cnvd-2025-31213 | Company Visitor Management System /department.php文件SQL注入漏洞 | 2025-05-14 | 2025-12-24 |
| cnvd-2025-31212 | Company Visitor Management System /visitors-form.php文件SQL注入漏洞 | 2025-05-20 | 2025-12-24 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-1051 | Multiples vulnérabilités dans les produits IBM | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1050 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1049 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1048 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1046 | Multiples vulnérabilités dans les produits Moxa | 2025-11-28T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1045 | Vulnérabilité dans MISP | 2025-11-27T00:00:00.000000 | 2025-11-28T00:00:00.000000 |
| certfr-2025-avi-1044 | Vulnérabilité dans Mattermost Server | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1043 | Multiples vulnérabilités dans les produits Splunk | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1042 | Multiples vulnérabilités dans GitLab | 2025-11-27T00:00:00.000000 | 2025-11-27T00:00:00.000000 |
| certfr-2025-avi-1041 | Vulnérabilité dans Synology ActiveProtect Agent | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1040 | Vulnérabilité dans Postfix | 2025-11-26T00:00:00.000000 | 2025-11-26T00:00:00.000000 |
| certfr-2025-avi-1039 | Vulnérabilité dans Kaspersky Security Center | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1038 | Vulnérabilité dans les produits PrimX | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1037 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2025-11-25T00:00:00.000000 | 2025-11-25T00:00:00.000000 |
| certfr-2025-avi-1036 | Multiples vulnérabilités dans les produits VMware | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1035 | Multiples vulnérabilités dans les produits Synology | 2025-11-24T00:00:00.000000 | 2025-11-24T00:00:00.000000 |
| certfr-2025-avi-1034 | Multiples vulnérabilités dans les produits IBM | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1033 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1032 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1031 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1030 | Vulnérabilité dans Microsoft Visual Studio Code | 2025-11-21T00:00:00.000000 | 2025-11-21T00:00:00.000000 |
| certfr-2025-avi-1029 | Vulnérabilité dans les produits Kaspersky | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1028 | Vulnérabilité dans GnuTLS | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1027 | Multiples vulnérabilités dans les produits SonicWall | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1026 | Multiples vulnérabilités dans Wireshark | 2025-11-20T00:00:00.000000 | 2025-11-20T00:00:00.000000 |
| certfr-2025-avi-1025 | Multiples vulnérabilités dans les produits Atlassian | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1024 | Multiples vulnérabilités dans les produits VMware | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1023 | Multiples vulnérabilités dans les produits Fortinet | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| certfr-2025-avi-1022 | Multiples vulnérabilités dans Microsoft Edge | 2025-11-19T00:00:00.000000 | 2025-11-19T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-ale-013 | Vulnérabilité dans Microsoft Internet Explorer | 2018-12-20T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-012 | Vulnérabilité dans Wallix AdminBastion | 2018-10-26T00:00:00.000000 | 2019-02-04T00:00:00.000000 |
| certfr-2018-ale-011 | Vulnérabilité dans le client Git | 2018-10-08T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-ale-010 | Vulnérabilité activement exploitée dans le framework STRUTS 2 | 2018-08-29T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-008 | Campagne de messages électroniques non sollicités de type Locky Locker | 2018-08-03T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-007 | Multiples vulnérabilités dans S/MIME et OpenPGP | 2018-05-14T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-001 | Multiples vulnérabilités de fuite d'informations dans des processeurs | 2018-01-04T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-ale-009 | Vulnérabilité dans Microsoft Windows | 2018-08-29T00:00:00.000000 | 2018-09-17T00:00:00.000000 |
| certfr-2018-ale-006 | Vulnérabilité dans Cisco IOS et IOS XE Smart Install Client | 2018-04-06T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-005 | Multiples vulnérabilités dans Drupal | 2018-03-29T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-004 | Vulnérabilité dans le serveur de messagerie Exim | 2018-03-07T00:00:00.000000 | 2018-07-30T00:00:00.000000 |
| certfr-2018-ale-002 | Vulnérabilité dans Cisco Adaptive Security Appliance | 2018-02-01T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2017-ale-020 | Vulnérabilité dans des implémentations de TLS | 2017-12-13T00:00:00.000000 | 2018-04-06T00:00:00.000000 |
| certfr-2017-ale-019 | Vulnérabilité d'usurpation d'identité dans plusieurs clients de messagerie | 2017-12-05T00:00:00.000000 | 2018-03-07T00:00:00.000000 |
| certfr-2018-ale-003 | Vulnérabilité dans Adobe Flash Player | 2018-02-02T00:00:00.000000 | 2018-02-07T00:00:00.000000 |
| certfr-2017-ale-017 | Vulnérabilité dans le serveur de messagerie Exim | 2017-11-27T00:00:00.000000 | 2018-02-01T00:00:00.000000 |
| certfr-2017-ale-018 | Vulnérabilité dans Apple MacOS High Sierra | 2017-11-29T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-ale-016 | Campagne de rançongiciel Bad Rabbit | 2017-10-25T00:00:00.000000 | 2017-10-27T00:00:00.000000 |
| certfr-2017-ale-014 | Vulnérabilité dans le protocole WPA/WPA2 | 2017-10-18T00:00:00.000000 | 2017-10-19T00:00:00.000000 |
| certfr-2017-ale-015 | Vulnérabilités dans la bibliothèque Infineon RSA | 2017-10-16T00:00:00.000000 | 2017-10-17T00:00:00.000000 |
| certfr-2017-ale-013 | Présence de code malveillant dans Piriform CCleaner | 2017-09-18T00:00:00.000000 | 2017-10-09T00:00:00.000000 |
| certfr-2017-ale-008 | Multiples vulnérabilités dans Microsoft Windows XP et Windows Server 2003 | 2017-04-14T00:00:00.000000 | 2017-09-06T00:00:00.000000 |
| certfr-2017-ale-012 | Campagne de maliciels prenant l'apparence d'un rançongiciel à multiples capacités de propagation | 2017-06-27T00:00:00.000000 | 2017-08-03T00:00:00.000000 |
| certfr-2017-ale-011 | Campagne de messages électroniques non sollicités de type Jaff | 2017-05-14T00:00:00.000000 | 2017-06-27T00:00:00.000000 |
| certfr-2017-ale-010 | Propagation d'un rançongiciel exploitant les vulnérabilités MS17-010 | 2017-05-12T00:00:00.000000 | 2017-06-27T00:00:00.000000 |
| certfr-2017-ale-009 | Vulnérabilité dans Microsoft Malware Protection Engine | 2017-05-09T00:00:00.000000 | 2017-05-15T00:00:00.000000 |
| certfr-2017-ale-005 | Vulnérabilité dans les commutateurs Cisco | 2017-03-20T00:00:00.000000 | 2017-05-10T00:00:00.000000 |
| certfr-2017-ale-004 | Vulnérabilité dans Apache Struts | 2017-03-10T00:00:00.000000 | 2017-05-10T00:00:00.000000 |
| certfr-2017-ale-007 | Vulnérabilité dans Microsoft Office | 2017-04-10T00:00:00.000000 | 2017-04-12T00:00:00.000000 |
| certfr-2017-ale-006 | Multiples vulnérabilités dans SCADA Siemens RUGGEDCOM ROX I | 2017-03-29T00:00:00.000000 | 2017-03-29T00:00:00.000000 |