Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66122 |
5.4 (3.1)
|
WordPress Stylish Price List plugin <= 7.2.2 - Broken … |
Design |
Stylish Price List |
2025-12-16T08:12:52.713Z | 2026-01-20T14:28:24.119Z |
| CVE-2025-66120 |
5.3 (3.1)
|
WordPress CatFolders plugin <= 2.5.3 - Broken Access C… |
CatFolders |
CatFolders |
2025-12-16T08:12:52.307Z | 2026-01-20T14:28:24.074Z |
| CVE-2025-66091 |
6.5 (3.1)
|
WordPress Stylish Cost Calculator plugin <= 8.1.5 - Cr… |
Design |
Stylish Cost Calculator |
2025-11-21T12:29:59.090Z | 2026-01-20T14:28:24.063Z |
| CVE-2025-66116 |
7.5 (3.1)
|
WordPress Ultimate Member Widgets for Elementor plugin… |
UserElements |
Ultimate Member Widgets for Elementor |
2025-12-18T07:22:18.838Z | 2026-01-20T14:28:24.052Z |
| CVE-2025-66104 |
6.5 (3.1)
|
WordPress Offload, AI & Optimize with Cloudflare Image… |
Anton Vanyukov |
Offload, AI & Optimize with Cloudflare Images |
2025-12-18T07:22:18.646Z | 2026-01-20T14:28:24.032Z |
| CVE-2025-66117 |
7.5 (3.1)
|
WordPress Easy Form plugin <= 2.7.8 - Broken Access Co… |
Ays Pro |
Easy Form |
2025-12-18T07:22:19.016Z | 2026-01-20T14:28:24.031Z |
| CVE-2025-66097 |
4.3 (3.1)
|
WordPress I Order Terms plugin <= 1.5.0 - Cross Site R… |
Igor Jerosimić |
I Order Terms |
2025-11-21T12:29:59.986Z | 2026-01-20T14:28:24.031Z |
| CVE-2025-66102 |
7.5 (3.1)
|
WordPress FV Antispam plugin <= 2.7 - Cross Site Scrip… |
FolioVision |
FV Antispam |
2025-12-18T07:22:18.448Z | 2026-01-20T14:28:24.020Z |
| CVE-2025-66121 |
5.3 (3.1)
|
WordPress SiteGround Security plugin <= 1.5.8 - Broken… |
SiteGround |
SiteGround Security |
2025-12-16T08:12:52.500Z | 2026-01-20T14:28:24.018Z |
| CVE-2025-66113 |
5.4 (3.1)
|
WordPress Better Chat Support for Messenger plugin <= … |
ThemeAtelier |
Better Chat Support for Messenger |
2025-11-21T12:30:05.951Z | 2026-01-20T14:28:24.016Z |
| CVE-2025-66115 |
6.6 (3.1)
|
WordPress Easy Invoice plugin <= 2.1.4 - Local File In… |
MatrixAddons |
Easy Invoice |
2025-11-21T12:30:06.442Z | 2026-01-20T14:28:24.013Z |
| CVE-2025-66087 |
5.3 (3.1)
|
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… |
Property Hive |
PropertyHive |
2025-11-21T12:29:58.540Z | 2026-01-20T14:28:24.013Z |
| CVE-2025-66119 |
7.1 (3.1)
|
WordPress Hostel plugin <= 1.1.5.9 - Cross Site Script… |
Bob |
Hostel |
2025-12-18T07:22:19.370Z | 2026-01-20T14:28:24.012Z |
| CVE-2025-66098 |
6.5 (3.1)
|
WordPress Travelers' Map plugin <= 2.3.2 - Cross Site … |
Camille V |
Travelers' Map |
2025-11-21T12:30:00.878Z | 2026-01-20T14:28:24.012Z |
| CVE-2025-66101 |
4.3 (3.1)
|
WordPress CBX Bookmark & Favorite plugin <= 2.0.1 - Br… |
Sabuj Kundu |
CBX Bookmark & Favorite |
2025-11-21T12:30:01.600Z | 2026-01-20T14:28:24.010Z |
| CVE-2025-66094 |
6.5 (3.1)
|
WordPress Yada Wiki plugin <= 3.5 - Cross Site Scripti… |
dmccan |
Yada Wiki |
2025-12-30T16:17:26.055Z | 2026-01-20T14:28:24.009Z |
| CVE-2025-66088 |
7.5 (3.1)
|
WordPress PropertyHive plugin <= 2.1.12 - Broken Acces… |
Property Hive |
PropertyHive |
2025-12-18T07:22:18.084Z | 2026-01-20T14:28:24.007Z |
| CVE-2025-66118 |
7.1 (3.1)
|
WordPress Sprout Clients plugin <= 3.2.1 - Cross Site … |
BoldGrid |
Sprout Clients |
2025-12-18T07:22:19.186Z | 2026-01-20T14:28:24.006Z |
| CVE-2025-66092 |
6.5 (3.1)
|
WordPress Accordion Slider plugin <= 1.9.13 - Cross Si… |
bqworks |
Accordion Slider |
2025-11-21T12:29:59.275Z | 2026-01-20T14:28:24.005Z |
| CVE-2025-66114 |
5.3 (3.1)
|
WordPress Show Variations as Single Products Woocommer… |
theme funda |
Show Variations as Single Products Woocommerce |
2025-11-21T12:30:06.230Z | 2026-01-20T14:28:23.995Z |
| CVE-2025-66099 |
5.3 (3.1)
|
WordPress Chat Help plugin <= 3.1.3 - Broken Access Co… |
ThemeAtelier |
Chat Help |
2025-11-21T12:30:01.184Z | 2026-01-20T14:28:23.992Z |
| CVE-2025-66100 |
6.5 (3.1)
|
WordPress RestroPress plugin <= 3.2.3.5 - Broken Acces… |
Magnigenie |
RestroPress |
2025-12-18T07:22:18.263Z | 2026-01-20T14:28:23.990Z |
| CVE-2025-66093 |
6.5 (3.1)
|
WordPress Extensions for Leaflet Map plugin <= 4.8 - C… |
hupe13 |
Extensions for Leaflet Map |
2025-11-21T12:29:59.483Z | 2026-01-20T14:28:23.983Z |
| CVE-2025-66090 |
6.5 (3.1)
|
WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scr… |
sonalsinha21 |
SKT Skill Bar |
2025-11-21T12:29:58.912Z | 2026-01-20T14:28:23.974Z |
| CVE-2025-66103 |
6.5 (3.1)
|
WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scri… |
Revmakx |
WPCal.io |
2025-12-30T16:43:38.792Z | 2026-01-20T14:28:23.972Z |
| CVE-2025-66112 |
4.3 (3.1)
|
WordPress Accessibility Toolkit by WebYes plugin <= 2.… |
WebToffee |
Accessibility Toolkit by WebYes |
2025-11-21T12:30:05.704Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66096 |
4.3 (3.1)
|
WordPress Table Block by Tableberg plugin <= 0.6.9 - B… |
Imtiaz Rayhan |
Table Block by Tableberg |
2025-11-21T12:29:59.819Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66085 |
4.3 (3.1)
|
WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken… |
tychesoftwares |
Arconix Shortcodes |
2025-11-21T12:29:58.133Z | 2026-01-20T14:28:23.965Z |
| CVE-2025-66110 |
5.3 (3.1)
|
WordPress Tiktok Feed plugin <= 1.0.22 - Broken Access… |
bPlugins |
Tiktok Feed |
2025-11-21T12:30:05.216Z | 2026-01-20T14:28:23.954Z |
| CVE-2025-66109 |
5.3 (3.1)
|
WordPress Cart Weight for WooCommerce plugin <= 1.9.11… |
octolize |
Cart Weight for WooCommerce |
2025-11-21T12:30:04.941Z | 2026-01-20T14:28:23.943Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67561 |
5.4 (3.1)
|
WordPress Debug Log Viewer plugin <= 2.0.3 - Broken Ac… |
Oleksandr Lysyi |
Debug Log Viewer |
2025-12-09T14:14:10.737Z | 2026-01-20T14:28:25.904Z |
| CVE-2025-67560 |
6.5 (3.1)
|
WordPress Listdom plugin <= 5.0.1 - Broken Access Cont… |
Webilia Inc. |
Listdom |
2025-12-09T14:14:09.636Z | 2026-01-20T14:28:25.858Z |
| CVE-2025-67559 |
5.4 (3.1)
|
WordPress Online Booking & Scheduling Calendar for Wor… |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2025-12-09T14:14:09.425Z | 2026-01-20T14:28:25.890Z |
| CVE-2025-67558 |
6.5 (3.1)
|
WordPress Rencontre plugin <= 3.13.7 - Cross Site Scri… |
Jacques Malgrange |
Rencontre |
2025-12-09T14:14:09.063Z | 2026-01-20T14:28:25.982Z |
| CVE-2025-67557 |
6.5 (3.1)
|
WordPress WP eBay Product Feeds plugin <= 3.4.9 - Cros… |
Rhys Wynne |
WP eBay Product Feeds |
2025-12-09T14:14:08.814Z | 2026-01-20T14:28:25.932Z |
| CVE-2025-67556 |
5.9 (3.1)
|
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross… |
ThemeHigh |
Advanced FAQ Manager |
2025-12-09T14:14:08.628Z | 2026-01-20T14:28:25.913Z |
| CVE-2025-67555 |
6.5 (3.1)
|
WordPress UseStrict's Calendly Embedder plugin <= 1.1.… |
useStrict |
UseStrict's Calendly Embedder |
2025-12-09T14:14:08.288Z | 2026-01-20T14:28:25.924Z |
| CVE-2025-67554 |
5.9 (3.1)
|
WordPress Cookie Notice & Compliance for GDPR / CCPA p… |
Humanityco |
Cookie Notice & Compliance for GDPR / CCPA |
2025-12-09T14:14:08.007Z | 2026-01-20T14:28:25.845Z |
| CVE-2025-67553 |
6.5 (3.1)
|
WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross… |
ThemeHigh |
Advanced FAQ Manager |
2025-12-09T14:14:07.745Z | 2026-01-20T14:28:25.999Z |
| CVE-2025-67552 |
6.5 (3.1)
|
WordPress Walker Core plugin <= 1.3.17 - Cross Site Sc… |
WalkerWP |
Walker Core |
2025-12-09T14:14:07.454Z | 2026-01-20T14:28:25.899Z |
| CVE-2025-67551 |
6.5 (3.1)
|
WordPress Wappointment plugin <= 2.6.9 - Cross Site Sc… |
Wappointment team |
Wappointment |
2025-12-09T14:14:07.205Z | 2026-01-20T14:28:25.925Z |
| CVE-2025-67550 |
6.5 (3.1)
|
WordPress Donation Thermometer plugin <= 2.2.6 - Cross… |
rhewlif |
Donation Thermometer |
2025-12-09T14:14:06.957Z | 2026-01-20T14:28:25.624Z |
| CVE-2025-67549 |
6.5 (3.1)
|
WordPress oik plugin <= 4.15.3 - Cross Site Scripting … |
bobbingwide |
oik |
2025-12-09T14:14:06.739Z | 2026-01-20T14:28:25.728Z |
| CVE-2025-67548 |
6.5 (3.1)
|
WordPress WP Delicious plugin <= 1.9.1 - Broken Access… |
WP Delicious |
WP Delicious |
2025-12-09T14:14:06.510Z | 2026-01-20T14:28:25.675Z |
| CVE-2025-67546 |
6.5 (3.1)
|
WordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exp… |
weDevs |
WP ERP |
2025-12-18T07:22:19.542Z | 2026-01-20T14:28:25.565Z |
| CVE-2025-67545 |
6.5 (3.1)
|
WordPress FireBox plugin <= 3.1.0-free - Cross Site Sc… |
FirePlugins |
FireBox |
2025-12-09T14:14:06.130Z | 2026-01-20T14:28:25.532Z |
| CVE-2025-67544 |
6.5 (3.1)
|
WordPress Shopkeeper Extender plugin < 7.0 - Cross Sit… |
Get Bowtied |
Shopkeeper Extender |
2025-12-09T14:14:05.870Z | 2026-01-20T14:28:25.495Z |
| CVE-2025-67543 |
6.5 (3.1)
|
WordPress Essential Widgets plugin <= 2.2.2 - Cross Si… |
Catch Themes |
Essential Widgets |
2025-12-09T14:14:05.667Z | 2026-01-20T14:28:25.440Z |
| CVE-2025-67542 |
6.5 (3.1)
|
WordPress Multi-Step Checkout for WooCommerce plugin <… |
SilkyPress |
Multi-Step Checkout for WooCommerce |
2025-12-09T14:14:05.482Z | 2026-01-20T14:28:25.370Z |
| CVE-2025-67541 |
7.1 (3.1)
|
WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scri… |
Lester Chan |
WP-ShowHide |
2025-12-09T14:14:05.260Z | 2026-01-20T14:28:25.235Z |
| CVE-2025-67540 |
6.5 (3.1)
|
WordPress Animation Addons for Elementor plugin <= 2.4… |
Wealcoder |
Animation Addons for Elementor |
2025-12-09T14:14:05.024Z | 2026-01-20T14:28:25.249Z |
| CVE-2025-67539 |
6.5 (3.1)
|
WordPress Select Core plugin < 2.6 - Cross Site Script… |
Select-Themes |
Select Core |
2025-12-09T14:14:04.804Z | 2026-01-20T14:28:25.256Z |
| CVE-2025-67538 |
6.5 (3.1)
|
WordPress JNews Gallery plugin < 12.0.1 - Cross Site S… |
jegtheme |
JNews Gallery |
2025-12-09T14:14:04.582Z | 2026-01-20T14:28:25.508Z |
| CVE-2025-67537 |
6.5 (3.1)
|
WordPress ThirstyAffiliates plugin <= 3.11.8 - Cross S… |
Blair Williams |
ThirstyAffiliates |
2025-12-09T14:14:04.310Z | 2026-01-20T14:28:25.132Z |
| CVE-2025-67536 |
6.5 (3.1)
|
WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Sc… |
ThimPress |
LearnPress |
2025-12-09T14:14:04.062Z | 2026-01-20T14:28:25.165Z |
| CVE-2025-67535 |
6.5 (3.1)
|
WordPress WP Maps plugin <= 4.8.6 - PHP Object Injecti… |
WePlugins - WordPress Development Company |
WP Maps |
2025-12-09T14:14:03.841Z | 2026-01-20T14:28:25.201Z |
| CVE-2025-67534 |
7.1 (3.1)
|
WordPress Rencontre plugin <= 3.13.7 - Cross Site Requ… |
Jacques Malgrange |
Rencontre |
2025-12-09T14:14:03.622Z | 2026-01-20T14:28:25.186Z |
| CVE-2025-67533 |
6.5 (3.1)
|
WordPress Themify Portfolio Post plugin <= 1.3.0 - Cro… |
themifyme |
Themify Portfolio Post |
2025-12-09T14:14:03.414Z | 2026-01-20T14:28:25.206Z |
| CVE-2025-67532 |
9.8 (3.1)
|
WordPress Hara theme <= 1.2.17 - Local File Inclusion … |
thembay |
Hara |
2025-12-09T14:14:03.164Z | 2026-01-20T14:28:25.158Z |
| CVE-2025-67531 |
9.8 (3.1)
|
WordPress Turitor theme < 1.5.3 - Local File Inclusion… |
trippleS |
Turitor |
2025-12-09T14:14:01.550Z | 2026-01-20T14:28:25.095Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-67549 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:30.480 | 2026-01-20T15:19:20.020 |
| fkie_cve-2025-67548 | Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploitin… | 2025-12-09T16:18:30.350 | 2026-01-20T15:19:19.890 |
| fkie_cve-2025-67546 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs … | 2025-12-18T08:16:16.693 | 2026-01-20T15:19:19.763 |
| fkie_cve-2025-67545 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:30.210 | 2026-01-20T15:19:19.640 |
| fkie_cve-2025-67544 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:30.047 | 2026-01-20T15:19:19.513 |
| fkie_cve-2025-67543 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:29.913 | 2026-01-20T15:19:19.380 |
| fkie_cve-2025-67542 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:29.480 | 2026-01-20T15:19:19.250 |
| fkie_cve-2025-67541 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:29.327 | 2026-01-20T15:19:19.127 |
| fkie_cve-2025-67540 | Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T16:18:29.187 | 2026-01-20T15:19:19.000 |
| fkie_cve-2025-67539 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:29.047 | 2026-01-20T15:19:18.870 |
| fkie_cve-2025-67538 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.903 | 2026-01-20T15:19:18.720 |
| fkie_cve-2025-67537 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.770 | 2026-01-20T15:19:18.597 |
| fkie_cve-2025-67536 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.640 | 2026-01-20T15:19:18.473 |
| fkie_cve-2025-67535 | Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T16:18:28.453 | 2026-01-20T15:19:18.347 |
| fkie_cve-2025-67534 | Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T16:18:28.237 | 2026-01-20T15:19:18.210 |
| fkie_cve-2025-67533 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.100 | 2026-01-20T15:19:18.090 |
| fkie_cve-2025-67532 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.963 | 2026-01-20T15:19:17.967 |
| fkie_cve-2025-67531 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.830 | 2026-01-20T15:19:17.847 |
| fkie_cve-2025-67530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.693 | 2026-01-20T15:19:17.717 |
| fkie_cve-2025-67529 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.553 | 2026-01-20T15:19:17.590 |
| fkie_cve-2025-67528 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.417 | 2026-01-20T15:19:17.467 |
| fkie_cve-2025-67527 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.280 | 2026-01-20T15:19:17.343 |
| fkie_cve-2025-67526 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.130 | 2026-01-20T15:19:17.217 |
| fkie_cve-2025-67525 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:26.973 | 2026-01-20T15:19:17.077 |
| fkie_cve-2025-67524 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:26.013 | 2026-01-20T15:19:16.950 |
| fkie_cve-2025-67523 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.863 | 2026-01-20T15:19:16.807 |
| fkie_cve-2025-67522 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.680 | 2026-01-20T15:19:16.670 |
| fkie_cve-2025-67521 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.540 | 2026-01-20T15:19:16.540 |
| fkie_cve-2025-67520 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:25.403 | 2026-01-20T15:19:16.413 |
| fkie_cve-2025-67519 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:25.270 | 2026-01-20T15:19:16.290 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-wj54-qjrq-9gwv |
6.5 (3.1)
|
Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly C… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-wh25-mmxh-64f6 |
5.3 (3.1)
|
Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-wfxf-j4rg-w6j6 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-w8rw-wf3g-63cx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-vrh5-pxv9-qjvv |
5.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-v2h6-hwp6-67qv |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam R… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-pvpc-5j5f-m2fm |
5.3 (3.1)
|
Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorr… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-p8jj-567m-jw77 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-mqq8-cpfh-hpm3 |
6.5 (3.1)
|
Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-m4cg-3fm9-j6x9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-jxgx-9wwv-2g4h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-j934-wxvm-8fw9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hrc4-whhq-v375 |
6.5 (3.1)
|
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hgf5-67r8-3fcm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-h6rm-qgch-65pr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-gwq3-r365-h2g8 |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-fqq6-293f-f549 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-f36m-hf38-h6rh |
5.3 (3.1)
|
Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-cqxc-j3v9-5m9g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9r4p-xvf3-9x4q |
6.5 (3.1)
|
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploitin… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9gx8-7m79-g5p3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-98c9-f4v9-v6qr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x9-7c94-7879 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x7-mfr3-2vx3 |
5.4 (3.1)
|
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-8q5w-6x37-j5hg |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-865r-5g86-hfxf |
5.3 (3.1)
|
Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-7f3f-ppww-82r3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-74xg-56wg-gvpj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6pvg-49r3-g3c7 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6j84-m7wp-j9jm |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-483 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.920437Z |
| pysec-2021-482 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T19:15:00Z | 2021-12-09T06:34:51.766391Z |
| pysec-2021-481 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can re… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.614588Z |
| pysec-2021-480 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.420468Z |
| pysec-2021-479 |
|
TensorFlow is an end-to-end open source platform for machine learning. The implementation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.250544Z |
| pysec-2021-478 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:51.099370Z |
| pysec-2021-477 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.949292Z |
| pysec-2021-476 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.800401Z |
| pysec-2021-475 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.647185Z |
| pysec-2021-474 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.495115Z |
| pysec-2021-473 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.345149Z |
| pysec-2021-472 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.195889Z |
| pysec-2021-471 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:50.046503Z |
| pysec-2021-470 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.894355Z |
| pysec-2021-469 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.747683Z |
| pysec-2021-468 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.596439Z |
| pysec-2021-467 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_op… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.452107Z |
| pysec-2021-466 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.257791Z |
| pysec-2021-465 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:49.104886Z |
| pysec-2021-464 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.953620Z |
| pysec-2021-463 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.800365Z |
| pysec-2021-462 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.648836Z |
| pysec-2021-461 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.500169Z |
| pysec-2021-460 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can fo… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.349137Z |
| pysec-2021-459 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.199089Z |
| pysec-2021-458 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:48.047849Z |
| pysec-2021-457 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.879310Z |
| pysec-2021-456 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.721328Z |
| pysec-2021-455 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.577181Z |
| pysec-2021-454 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.426864Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3802 | Vulnerabilities in Celeste 22.x was vulnerable to takeover from unauthenticated local att… | 2024-04-16T05:01:59.496986Z |
| gsd-2024-3817 | HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to d… | 2024-04-16T05:01:59.493981Z |
| gsd-2024-3847 | Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed … | 2024-04-16T05:01:59.492316Z |
| gsd-2024-3864 | Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This … | 2024-04-16T05:01:59.490494Z |
| gsd-2024-3820 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:59.488537Z |
| gsd-2024-32558 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.748207Z |
| gsd-2024-32565 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.747516Z |
| gsd-2024-32560 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.743903Z |
| gsd-2024-32540 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.743699Z |
| gsd-2024-32492 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.742285Z |
| gsd-2024-32497 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.732027Z |
| gsd-2024-32547 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.730049Z |
| gsd-2024-32561 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.727950Z |
| gsd-2024-32579 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.726473Z |
| gsd-2024-32544 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.725139Z |
| gsd-2024-32514 | Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plug… | 2024-04-16T05:01:54.724168Z |
| gsd-2024-32490 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.722724Z |
| gsd-2024-32585 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.722518Z |
| gsd-2024-32510 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.722313Z |
| gsd-2024-32602 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-16T05:01:54.717563Z |
| gsd-2024-32586 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.717307Z |
| gsd-2024-32557 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.714263Z |
| gsd-2024-32573 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.712936Z |
| gsd-2024-32551 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-16T05:01:54.708807Z |
| gsd-2024-32580 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.708066Z |
| gsd-2024-32576 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.706349Z |
| gsd-2024-32603 | Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects… | 2024-04-16T05:01:54.702090Z |
| gsd-2024-32574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.700589Z |
| gsd-2024-32598 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.700392Z |
| gsd-2024-32536 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.700192Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-2999 | Malicious code in solana-utils (PyPI) | 2025-02-21T21:50:10Z | 2025-12-11T09:27:54Z |
| mal-2025-2012 | Malicious code in web3imports (PyPI) | 2025-02-01T00:45:27Z | 2025-12-11T09:27:54Z |
| mal-2025-2011 | Malicious code in wasig4321 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-2010 | Malicious code in waseem4321 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-2009 | Malicious code in w7-poc (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1997 | Malicious code in testospkg (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1996 | Malicious code in superline (PyPI) | 2025-01-25T16:48:57Z | 2025-12-11T09:27:54Z |
| mal-2025-191945 | Malicious code in zsender (PyPI) | 2025-04-20T12:05:56Z | 2025-12-11T09:27:54Z |
| mal-2025-191944 | Malicious code in zscaner (PyPI) | 2025-04-20T12:05:56Z | 2025-12-11T09:27:54Z |
| mal-2025-191943 | Malicious code in zmaker (PyPI) | 2025-04-20T12:05:56Z | 2025-12-11T09:27:54Z |
| mal-2025-191942 | Malicious code in zamino (PyPI) | 2025-06-14T09:18:22Z | 2025-12-11T09:27:54Z |
| mal-2025-191935 | Malicious code in win32str (PyPI) | 2025-06-10T20:26:30Z | 2025-12-11T09:27:54Z |
| mal-2025-191934 | Malicious code in win32evtlogutil (PyPI) | 2025-06-10T20:26:30Z | 2025-12-11T09:27:54Z |
| mal-2025-191932 | Malicious code in win32con (PyPI) | 2025-06-07T16:33:11Z | 2025-12-11T09:27:54Z |
| mal-2025-191928 | Malicious code in web3dummycti (PyPI) | 2025-08-02T13:52:41Z | 2025-12-11T09:27:54Z |
| mal-2025-191923 | Malicious code in w3shi-h1 (PyPI) | 2025-08-08T15:41:33Z | 2025-12-11T09:27:54Z |
| mal-2025-191922 | Malicious code in voipms-service (PyPI) | 2025-03-09T19:00:53Z | 2025-12-11T09:27:54Z |
| mal-2025-191917 | Malicious code in updateuuid4 (PyPI) | 2025-02-08T19:36:34Z | 2025-12-11T09:27:54Z |
| mal-2025-191915 | Malicious code in ultrafasttelethon (PyPI) | 2025-04-04T12:54:50Z | 2025-12-11T09:27:54Z |
| mal-2025-191914 | Malicious code in typing-extensions-plus (PyPI) | 2025-06-28T14:24:40Z | 2025-12-11T09:27:54Z |
| mal-2025-191910 | Malicious code in treeherder-submitter (PyPI) | 2025-07-28T15:45:43Z | 2025-12-11T09:27:54Z |
| mal-2025-191906 | Malicious code in tonetext (PyPI) | 2025-03-12T22:30:33Z | 2025-12-11T09:27:54Z |
| mal-2025-191905 | Malicious code in time-service-checker (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191904 | Malicious code in time-server-test (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191903 | Malicious code in time-server-analyzer (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191902 | Malicious code in time-server-analysis (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191901 | Malicious code in time-check-server-get (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191900 | Malicious code in time-check-server (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191899 | Malicious code in tiksing (PyPI) | 2025-02-18T20:50:57Z | 2025-12-11T09:27:54Z |
| mal-2025-191893 | Malicious code in testcatplzignore (PyPI) | 2025-07-16T19:22:42Z | 2025-12-11T09:27:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2185 | Dell PowerProtect Data Domain mit DD OS: Mehrere Schwachstellen | 2025-10-01T22:00:00.000+00:00 | 2025-10-07T22:00:00.000+00:00 |
| wid-sec-w-2024-3586 | GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-12-03T23:00:00.000+00:00 | 2025-10-07T22:00:00.000+00:00 |
| wid-sec-w-2024-3124 | Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2024-10-08T22:00:00.000+00:00 | 2025-10-07T22:00:00.000+00:00 |
| wid-sec-w-2023-1522 | GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-06-20T22:00:00.000+00:00 | 2025-10-07T22:00:00.000+00:00 |
| wid-sec-w-2025-2222 | xwiki: Schwachstelle ermöglicht HQL Injection | 2025-10-06T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2221 | ILIAS: Mehrere Schwachstellen | 2025-10-06T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2220 | Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen | 2021-12-14T23:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2214 | Liferay Portal: Schwachstelle ermöglicht Manipulation von Daten | 2025-10-06T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2213 | IBM AIX: Schwachstelle ermöglicht Codeausführung | 2025-10-06T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2211 | TIBCO Spotfire Analytics: Mehrere Schwachstellen | 2019-09-18T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2210 | IBM Security Verify Access: Mehrere Schwachstellen | 2025-10-06T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2024-0527 | Linux Kernel: Mehrere Schwachstellen | 2024-02-29T23:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2023-1424 | Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen | 2023-06-12T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2023-0839 | Xerox FreeFlow Print Server: Mehrere Schwachstellen | 2022-02-03T23:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2022-1335 | Xerox FreeFlow Print Server: Mehrere Schwachstellen | 2022-09-07T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2022-0432 | Xerox FreeFlow Print Server: Mehrere Schwachstellen | 2022-06-21T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2022-0302 | Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten | 2022-06-14T22:00:00.000+00:00 | 2025-10-06T22:00:00.000+00:00 |
| wid-sec-w-2025-2208 | Vasion Print: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2207 | Zabbix: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2206 | DrayTek Vigor: Schwachstelle ermöglicht Codeausführung | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2203 | Liferay Portal und DXP: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2201 | Red Hat OpenShift AI: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2199 | QNAP NAS QTS und QTS hero: Mehrere Schwachstellen | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2197 | Flowise: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-10-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2192 | Synology DiskStation Manager: Mehrere Schwachstellen | 2022-02-06T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2191 | F5 BIG-IP: Mehrere Schwachstellen | 2022-01-19T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2172 | Absolute Secure Access: Mehrere Schwachstellen | 2025-09-30T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2168 | Mozilla Firefox: Mehrere Schwachstellen | 2025-09-30T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2165 | Qlik Sense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-30T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2159 | DriveLock: Schwachstelle ermöglicht Privilegieneskalation | 2025-09-29T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:5364 | Red Hat Security Advisory: kernel security update | 2024-08-14T01:27:40+00:00 | 2026-01-22T15:45:02+00:00 |
| rhsa-2024:5065 | Red Hat Security Advisory: kernel security update | 2024-08-07T00:28:07+00:00 | 2026-01-22T15:44:57+00:00 |
| rhsa-2024:4867 | Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes | 2024-07-25T13:11:14+00:00 | 2026-01-22T15:44:54+00:00 |
| rhsa-2024:4785 | Red Hat Security Advisory: Network Observability 1.6.1 for OpenShift | 2024-08-07T00:48:13+00:00 | 2026-01-22T15:44:53+00:00 |
| rhsa-2024:4237 | Red Hat Security Advisory: go-toolset security update | 2024-07-02T15:43:47+00:00 | 2026-01-22T15:44:51+00:00 |
| rhsa-2024:4212 | Red Hat Security Advisory: golang security update | 2024-07-02T09:02:04+00:00 | 2026-01-22T15:44:51+00:00 |
| rhsa-2024:1828 | Red Hat Security Advisory: java-21-openjdk security update | 2024-04-18T15:32:05+00:00 | 2026-01-22T15:44:34+00:00 |
| rhsa-2024:1826 | Red Hat Security Advisory: OpenJDK 21.0.3 Security Update for Portable Linux Builds | 2024-04-18T15:05:04+00:00 | 2026-01-22T15:44:33+00:00 |
| rhsa-2024:1235 | Red Hat Security Advisory: openvswitch3.1 security update | 2024-03-07T18:21:20+00:00 | 2026-01-22T15:44:25+00:00 |
| rhsa-2024:1234 | Red Hat Security Advisory: openvswitch2.17 security update | 2024-03-07T18:20:50+00:00 | 2026-01-22T15:44:25+00:00 |
| rhsa-2024:1227 | Red Hat Security Advisory: openvswitch3.1 security update | 2024-03-07T18:27:35+00:00 | 2026-01-22T15:44:24+00:00 |
| rhsa-2024:10186 | Red Hat Security Advisory: ACS 4.5 enhancement update | 2024-11-22T01:06:56+00:00 | 2026-01-22T15:44:23+00:00 |
| rhsa-2024:10775 | Red Hat Security Advisory: ACS 4.6 enhancement and security update | 2024-12-04T00:59:51+00:00 | 2026-01-22T15:44:22+00:00 |
| rhsa-2024:0249 | Red Hat Security Advisory: java-21-openjdk security update | 2024-01-17T09:02:03+00:00 | 2026-01-22T15:44:13+00:00 |
| rhsa-2024:0248 | Red Hat Security Advisory: java-21-openjdk security update | 2024-01-17T19:26:52+00:00 | 2026-01-22T15:44:12+00:00 |
| rhba-2024:1440 | Red Hat Bug Fix Advisory: MTV 2.5.6 Images | 2024-03-20T11:13:11+00:00 | 2026-01-22T15:44:04+00:00 |
| rhba-2024:1228 | Red Hat Bug Fix Advisory: openvswitch3.2 bug fix and enhancement update | 2024-03-07T18:25:45+00:00 | 2026-01-22T15:44:03+00:00 |
| rhba-2024:1226 | Red Hat Bug Fix Advisory: openvswitch2.17 bug fix and enhancement update | 2024-03-07T18:25:16+00:00 | 2026-01-22T15:44:02+00:00 |
| rhsa-2023:2340 | Red Hat Security Advisory: libtiff security update | 2023-05-09T10:02:52+00:00 | 2026-01-22T15:21:08+00:00 |
| rhba-2024:0928 | Red Hat Bug Fix Advisory: MTV 2.5.5 Images | 2024-02-20T15:58:35+00:00 | 2026-01-22T15:21:02+00:00 |
| rhba-2026:0860 | Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update | 2026-01-20T14:46:22+00:00 | 2026-01-22T12:57:05+00:00 |
| rhba-2025:20841 | Red Hat Bug Fix Advisory: open-vm-tools bug fix and enhancement update | 2025-11-11T09:19:58+00:00 | 2026-01-22T12:57:00+00:00 |
| rhsa-2026:0755 | Red Hat Security Advisory: kernel security update | 2026-01-19T01:39:54+00:00 | 2026-01-22T12:24:11+00:00 |
| rhsa-2026:0754 | Red Hat Security Advisory: kernel-rt security update | 2026-01-19T01:18:28+00:00 | 2026-01-22T12:24:06+00:00 |
| rhsa-2025:18098 | Red Hat Security Advisory: kernel-rt security update | 2025-10-15T11:39:50+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:18054 | Red Hat Security Advisory: kernel security update | 2025-10-15T07:08:30+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:17734 | Red Hat Security Advisory: kernel security update | 2025-10-13T00:28:33+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:17241 | Red Hat Security Advisory: kernel security update | 2025-10-02T10:07:46+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:15011 | Red Hat Security Advisory: kernel security update | 2025-09-02T07:19:50+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:15005 | Red Hat Security Advisory: kernel security update | 2025-09-02T06:55:20+00:00 | 2026-01-22T12:24:01+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-011-11 | Siemens Solid Edge | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-011-10 | Siemens SIMATIC | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-011-09 | Siemens SIMATIC CN 4100 | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-011-08 | Siemens SICAM A8000 | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-011-07 | Siemens Spectrum Power 7 | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-011-06 | Siemens Teamcenter Visualization and JT2Go | 2024-01-09T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-23-348-13 | Siemens SICAM Q100 Devices | 2023-12-12T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-22-314-11 | Siemens SICAM Q100 | 2022-11-08T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-22-104-05 | Siemens OpenSSL Vulnerabilities in Industrial Products | 2021-07-13T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-20-070-01 | ICSA-20-070-01_Siemens and PKE SiNVR/SiVMS Video Server (Update B) | 2021-04-13T00:00:00.000000Z | 2024-01-09T00:00:00.000000Z |
| icsa-24-004-02 | Mitsubishi Electric Factory Automation Products | 2024-01-04T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-24-004-01 | Rockwell Automation FactoryTalk Activation | 2024-01-04T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-23-348-15 | Unitronics Vision and Samba Series (Update A) | 2023-12-14T07:00:00.000000Z | 2024-01-04T07:00:00.000000Z |
| icsa-23-355-02 | QNAP VioStor NVR | 2023-12-21T07:00:00.000000Z | 2023-12-21T07:00:00.000000Z |
| icsa-23-355-01 | FXC AE1021/AE1021PE | 2023-12-21T07:00:00.000000Z | 2023-12-21T07:00:00.000000Z |
| icsa-24-331-05 | Hitachi Energy RTU500 Scripting Interface | 2023-12-19T13:30:00.000000Z | 2023-12-19T13:30:00.000000Z |
| icsa-23-353-05 | EuroTel ETL3100 Radio Transmitter | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-04 | Open Design Alliance Drawing SDK | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-03 | EFACEC UC 500E | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-02 | EFACEC BCU 500 | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-353-01 | Subnet Solutions Inc. PowerSYSTEM Center | 2023-12-19T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsa-23-341-03 | Johnson Controls Metasys and Facility Explorer (Update A) | 2023-12-07T07:00:00.000000Z | 2023-12-19T07:00:00.000000Z |
| icsma-20-254-01 | Philips Patient Monitoring Devices (Update C) | 2020-09-10T06:00:00.000000Z | 2023-12-14T07:00:00.000000Z |
| icsa-23-348-02 | Johnson Controls Kantech Gen1 ioSmart | 2023-12-14T07:00:00.000000Z | 2023-12-14T07:00:00.000000Z |
| icsa-23-346-01 | Schneider Electric Easy UPS Online Monitoring Software | 2023-12-12T07:00:00.000000Z | 2023-12-12T07:00:00.000000Z |
| icsa-23-348-16 | Siemens SINEC INS | 2023-12-12T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-23-348-07 | Siemens SIMATIC STEP 7 (TIA Portal) | 2023-12-12T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-23-348-06 | Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC | 2023-12-12T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-23-348-05 | Siemens SIMATIC and SIPLUS Products | 2023-12-12T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-21-103-09 | Siemens LOGO! Soft Comfort | 2021-04-13T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190807-esm-inject | Cisco Email Security Appliance Header Injection Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-09-26T20:01:12+00:00 |
| cisco-sa-20190731-nxos-bo | Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability | 2019-07-31T16:00:00+00:00 | 2019-09-26T17:35:34+00:00 |
| cisco-sa-20190925-xss | Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-xr-asr9k-privesc | Cisco IOS XR Software for Cisco ASR 9000 VMAN CLI Privilege Escalation Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-vman-cmd-injection | Cisco IOS XE Software Virtualization Manager CLI Command Injection Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-vman | Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-utd | Cisco IOS XE Software Unified Threat Defense Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-tsec | Cisco IOS and IOS XE Software Change of Authorization Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-sip-alg | Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-sbxss | Cisco IOS and IOS XE Software Stored Banner Cross-Site Scripting Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-rawtcp-dos | Cisco IOS XE Software Raw Socket Transport Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-nxos-vman-cmd-inj | Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-isdn-data-leak | Cisco IOS XE Software ISDN Data Leak Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iox-gs | Cisco IOS XE Software IOx Guest Shell Namespace Protection Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iox | Cisco IOx Application Environment Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iosxe-fsdos | Cisco IOS XE Software Filesystem Exhaustion Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iosxe-digsig-bypass | Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iosxe-ctbypass | Cisco IOS XE Software Consent Token Bypass Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-iosxe-codeexec | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-ios-gos-auth | Cisco IOx for IOS Software Guest Operating System Unauthorized Access Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-identd-dos | Cisco IOS and IOS XE Software IP Ident Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-httpserv-dos | Cisco IOS XE Software HTTP Server Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-http-client | Cisco IOS and IOS XE Software HTTP Client Information Disclosure Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-dt | Cisco IOS XE Software Path Traversal Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-ctspac-dos | Cisco IOS XE Software TrustSec Protected Access Credential Provisioning Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-cat4000-tcp-dos | Cisco Catalyst 4000 Series Switches TCP Denial of Service Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20190925-awr | Cisco IOS XE Software ASIC Register Write Vulnerability | 2019-09-25T16:00:00+00:00 | 2019-09-25T16:00:00+00:00 |
| cisco-sa-20180606-asaftd | Cisco Adaptive Security Appliance Web Services Denial of Service Vulnerability | 2018-06-06T16:00:00+00:00 | 2019-09-24T17:49:53+00:00 |
| cisco-sa-20190626-dcnm-infodiscl | Cisco Data Center Network Manager Information Disclosure Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:39+00:00 |
| cisco-sa-20190626-dcnm-file-dwnld | Cisco Data Center Network Manager Arbitrary File Download Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:38+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-28543 | Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, an assertion failure or NULL pointer dereference can be triggered in Varnish Cache through the varnish-modules header.append() and header.copy() functions. For some Varnish Configuration Language (VCL) files, this gives remote clients an opportunity to cause a Varnish Cache restart. A restart reduces overall availability and performance due to an increased number of cache misses, and may cause higher load on backend servers. | 2021-03-02T00:00:00.000Z | 2025-10-01T23:11:09.000Z |
| msrc_cve-2021-27367 | Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. | 2021-02-02T00:00:00.000Z | 2025-10-01T23:11:09.000Z |
| msrc_cve-2021-25741 | Symlink Exchange Can Allow Host Filesystem Access | 2021-09-02T00:00:00.000Z | 2025-10-01T23:11:09.000Z |
| msrc_cve-2021-21708 | UAF due to php_filter_float() failing | 2022-02-02T00:00:00.000Z | 2025-10-01T23:11:08.000Z |
| msrc_cve-2021-21707 | Special characters break path parsing in XML functions | 2021-11-02T00:00:00.000Z | 2025-10-01T23:11:08.000Z |
| msrc_cve-2021-21705 | Incorrect URL validation in FILTER_VALIDATE_URL | 2021-10-02T00:00:00.000Z | 2025-10-01T23:11:08.000Z |
| msrc_cve-2021-21704 | Multiple vulnerabilities in Firebird client extension | 2021-10-02T00:00:00.000Z | 2025-10-01T23:11:08.000Z |
| msrc_cve-2021-21703 | PHP-FPM memory access in root process leading to privilege escalation | 2021-10-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2021-21702 | Null Dereference in SoapClient | 2021-02-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-8561 | Webhook redirect in kube-apiserver | 2021-09-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-7071 | FILTER_VALIDATE_URL accepts URLs with invalid userinfo | 2021-02-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-4041 | The filename of uploaded files vulnerable to stored XSS in Bolt CMS | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:07.000Z |
| msrc_cve-2020-4040 | CSRF issue on preview pages in Bolt CMS | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-35504 | A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. | 2021-05-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-35503 | A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:06.000Z |
| msrc_cve-2020-28925 | Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance. | 2020-12-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-27748 | A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-26159 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none | 2020-09-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25207 | JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25013 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 2020-12-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-14150 | GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison. | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-12825 | libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2019-9192 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion | 2019-02-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-9185 | Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke | 2019-03-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-18368 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-17414 | tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-15485 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15484 | Bolt before 3.6.10 has XSS via an image's alt or title field. | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15483 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202508-0023 | A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware version… | 2025-11-23T23:57:23.160000Z |
| var-202510-2967 | Lack of Input Validation in the web UI might lead to potential exploitation.This issue af… | 2025-11-23T23:57:22.744000Z |
| var-202510-3387 | Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: thro… | 2025-11-23T23:57:22.717000Z |
| var-202510-4374 | Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.… | 2025-11-23T23:57:22.673000Z |
| var-202511-0293 | A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the f… | 2025-11-23T23:57:22.624000Z |
| var-202510-3184 | Credits Page not Matching Versions in Use in the FirmwareThis issue affects BLU-IC2: thro… | 2025-11-23T23:56:00.410000Z |
| var-202511-0195 | A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the functi… | 2025-11-23T23:56:00.353000Z |
| var-202511-1014 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU paramete… | 2025-11-23T23:55:05.788000Z |
| var-202510-3719 | Email Password Disclosure.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.… | 2025-11-23T23:54:46.533000Z |
| var-202510-4097 | Systemic Internal Server Errors - HTTP 500 ResponseThis issue affects BLU-IC2: through 1.… | 2025-11-23T23:54:46.507000Z |
| var-202202-1468 | Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function from… | 2025-11-23T23:53:38.455000Z |
| var-202302-1844 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType functi… | 2025-11-23T23:53:37.170000Z |
| var-202507-0505 | A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. … | 2025-11-23T23:53:03.284000Z |
| var-202510-2979 | Allocation of Resources Without Limits or Throttling vulnerability in Azure Access Techno… | 2025-11-23T23:53:02.738000Z |
| var-202211-1417 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandl… | 2025-11-23T23:52:40.621000Z |
| var-202510-0098 | A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vul… | 2025-11-23T23:52:06.483000Z |
| var-202510-2968 | Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: thro… | 2025-11-23T23:52:06.384000Z |
| var-202510-3388 | Privilege Escalation through SUID-bit Binary.This issue affects BLU-IC2: through 1.19.5; … | 2025-11-23T23:52:06.356000Z |
| var-202510-4375 | Vulnerable Upgrade Feature (Arbitrary File Write) may lead to obtaining super user permis… | 2025-11-23T23:51:01.558000Z |
| var-202510-2969 | Busybox 1.31.1 - Multiple Known Vulnerabilities.This issue affects BLU-IC2: through 1.19.… | 2025-11-23T23:50:07.226000Z |
| var-202510-3515 | Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.1… | 2025-11-23T23:50:07.194000Z |
| var-202508-2439 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan fun… | 2025-11-23T23:49:02.993000Z |
| var-202510-3385 | Email Server Certificate Verification Disabled.This issue affects BLU-IC2: through 1.19.5… | 2025-11-23T23:49:02.655000Z |
| var-202211-1393 | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_w… | 2025-11-23T23:47:13.699000Z |
| var-202510-0313 | A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the functio… | 2025-11-23T23:47:07.513000Z |
| var-202510-2976 | Incorrect Content-Type header in one of the APIs (`text/html` instead of `application/jso… | 2025-11-23T23:47:07.417000Z |
| var-202303-2025 | Shenzhen Tenda Technology Co.,Ltd. of AX3 An out-of-bounds write vulnerability exists in … | 2025-11-23T23:44:53.092000Z |
| var-202510-3185 | SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC… | 2025-11-23T23:44:46.498000Z |
| var-202305-0317 | Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerabi… | 2025-11-23T23:43:43.564000Z |
| var-202403-1075 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the mitInterface parameter … | 2025-11-23T23:41:34.853000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000009 | HOME SPOT CUBE vulnerable to HTTP header injection | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000008 | HOME SPOT CUBE vulnerable to open redirect | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000007 | HOME SPOT CUBE vulnerable to cross-site scripting | 2016-01-27T14:40+09:00 | 2016-02-16T17:26+09:00 |
| jvndb-2016-000018 | Microsoft Producer for Microsoft Office PowerPoint vulnerable to cross-site scripting | 2016-02-15T09:56+09:00 | 2016-02-15T09:56+09:00 |
| jvndb-2015-000172 | Multiple routers contain issue in preventing clickjacking attacks | 2015-10-30T15:16+09:00 | 2016-02-12T17:16+09:00 |
| jvndb-2015-006527 | Cross-site Scripting Vulnerability in uCosminexus Portal Framework and Groupmax Collaboration | 2015-12-28T13:51+09:00 | 2016-02-10T14:36+09:00 |
| jvndb-2016-000016 | Vine MV vulnerable to cross-site scripting | 2016-01-29T13:50+09:00 | 2016-02-10T10:19+09:00 |
| jvndb-2016-000003 | H2O vulnerable to HTTP header injection | 2016-01-15T13:57+09:00 | 2016-01-27T17:33+09:00 |
| jvndb-2016-000002 | acmailer vulnerable to OS command injection | 2016-01-15T13:57+09:00 | 2016-01-27T17:20+09:00 |
| jvndb-2015-000195 | WL-330NUL vulnerable to cross-site scripting | 2015-12-09T14:51+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000194 | WL-330NUL vulnerable to denial-of-service (DoS) | 2015-12-09T14:47+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000193 | WL-330NUL vulnerable to remote command execution | 2015-12-09T14:41+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000192 | WL-330NUL information management vulnerability | 2015-12-09T14:38+09:00 | 2016-01-13T17:37+09:00 |
| jvndb-2015-000189 | p++BBS vulnerable to cross-site scripting | 2015-11-30T13:44+09:00 | 2016-01-07T16:17+09:00 |
| jvndb-2015-000200 | Welcart vulnerable to SQL injection | 2015-12-17T15:19+09:00 | 2016-01-07T15:37+09:00 |
| jvndb-2015-000199 | WinRAR may insecurely load executable files | 2015-12-17T15:19+09:00 | 2016-01-07T15:36+09:00 |
| jvndb-2015-000188 | Frame high-speed chat vulnerable to cross-site scripting | 2015-11-30T13:44+09:00 | 2016-01-07T15:34+09:00 |
| jvndb-2015-000203 | CG-WLNCM4G may behave as an open resolver | 2015-12-25T14:45+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000202 | CG-WLBARAGM may behave as an open proxy | 2015-12-25T14:45+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000201 | CG-WLBARGS does not properly perform authentication | 2015-12-25T14:33+09:00 | 2016-01-07T15:32+09:00 |
| jvndb-2015-000196 | Web Analytics Service vulnerable to cross-site scripting | 2015-12-08T14:29+09:00 | 2016-01-07T15:13+09:00 |
| jvndb-2015-006129 | Multiple Cross-site Scripting Vulnerabilities in EUR | 2015-12-17T16:18+09:00 | 2015-12-28T13:54+09:00 |
| jvndb-2014-000126 | QNAP QTS vulnerable to OS command injection | 2014-10-28T14:39+09:00 | 2015-12-25T13:47+09:00 |
| jvndb-2015-000124 | Apache Struts vulnerable to cross-site scripting | 2015-09-04T15:12+09:00 | 2015-12-25T13:45+09:00 |
| jvndb-2015-006054 | XML External Entity (XXE) Vulnerability in Hitachi Command Suite | 2015-12-01T15:59+09:00 | 2015-12-22T17:43+09:00 |
| jvndb-2015-000142 | Apache Cordova plugin cordova-plugin-file-transfer vulnerable to HTTP header injection | 2015-09-29T14:04+09:00 | 2015-12-21T17:45+09:00 |
| jvndb-2015-005234 | Adobe Flash Player issue where iframe contents may be overwritten | 2015-12-17T15:19+09:00 | 2015-12-17T15:19+09:00 |
| jvndb-2015-000187 | Apache Cordova vulnerable to improper application of whitelist restrictions | 2015-11-27T13:29+09:00 | 2015-11-27T13:29+09:00 |
| jvndb-2015-000182 | Kirby vulnerable to arbitrary file creation | 2015-11-17T14:21+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000179 | applican vulnerable to script injection | 2015-11-17T14:20+09:00 | 2015-11-24T18:03+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02329-1 | Security update for rmt-server | 2025-07-16T09:37:49Z | 2025-07-16T09:37:49Z |
| suse-su-2025:02198-2 | Security update for runc | 2025-07-16T09:09:00Z | 2025-07-16T09:09:00Z |
| suse-su-2025:20496-1 | Security update for pam_pkcs11 | 2025-07-16T08:23:45Z | 2025-07-16T08:23:45Z |
| suse-su-2025:02326-1 | Security update for xen | 2025-07-16T06:37:59Z | 2025-07-16T06:37:59Z |
| suse-su-2025:02325-1 | Security update for xen | 2025-07-16T06:37:43Z | 2025-07-16T06:37:43Z |
| suse-su-2025:02324-1 | Security update for poppler | 2025-07-16T06:37:12Z | 2025-07-16T06:37:12Z |
| suse-ru-2025:20479-1 | Recommended update for pam_pkcs11 | 2025-07-15T14:48:39Z | 2025-07-15T14:48:39Z |
| suse-su-2025:20478-1 | Security update for sudo | 2025-07-15T14:48:17Z | 2025-07-15T14:48:17Z |
| suse-su-2025:02322-1 | Security update for the Linux Kernel | 2025-07-15T14:31:46Z | 2025-07-15T14:31:46Z |
| suse-su-2025:02321-1 | Security update for the Linux Kernel | 2025-07-15T14:31:35Z | 2025-07-15T14:31:35Z |
| suse-su-2025:02320-1 | Security update for the Linux Kernel | 2025-07-15T14:20:22Z | 2025-07-15T14:20:22Z |
| suse-su-2025:02319-1 | Security update for xen | 2025-07-15T14:20:08Z | 2025-07-15T14:20:08Z |
| suse-su-2025:02318-1 | Security update for poppler | 2025-07-15T13:00:31Z | 2025-07-15T13:00:31Z |
| suse-su-2025:02317-1 | Security update for poppler | 2025-07-15T12:59:44Z | 2025-07-15T12:59:44Z |
| suse-su-2025:02316-1 | Security update for xen | 2025-07-15T12:59:25Z | 2025-07-15T12:59:25Z |
| suse-su-2025:02315-1 | Security update for xen | 2025-07-15T12:59:13Z | 2025-07-15T12:59:13Z |
| suse-su-2025:02314-1 | Security update for libxml2 | 2025-07-15T12:34:11Z | 2025-07-15T12:34:11Z |
| suse-su-2025:02312-1 | Security update for the Linux Kernel | 2025-07-15T10:03:28Z | 2025-07-15T10:03:28Z |
| suse-su-2025:02311-1 | Security update for protobuf | 2025-07-15T09:15:50Z | 2025-07-15T09:15:50Z |
| suse-su-2025:02310-1 | Security update for protobuf | 2025-07-15T09:15:14Z | 2025-07-15T09:15:14Z |
| suse-su-2025:02309-1 | Security update for protobuf | 2025-07-15T09:14:54Z | 2025-07-15T09:14:54Z |
| suse-su-2025:02308-1 | Security update for the Linux Kernel | 2025-07-14T15:55:56Z | 2025-07-14T15:55:56Z |
| suse-su-2025:02307-1 | Security update for the Linux Kernel | 2025-07-14T12:31:08Z | 2025-07-14T12:31:08Z |
| suse-su-2025:02304-1 | Security update for gstreamer-plugins-base | 2025-07-14T10:51:05Z | 2025-07-14T10:51:05Z |
| suse-su-2025:02303-1 | Security update for gstreamer-plugins-good | 2025-07-14T10:50:49Z | 2025-07-14T10:50:49Z |
| suse-su-2025:02302-1 | Security update for gstreamer-plugins-base | 2025-07-14T10:50:22Z | 2025-07-14T10:50:22Z |
| suse-su-2025:02297-1 | Security update for python36 | 2025-07-11T16:03:54Z | 2025-07-11T16:03:54Z |
| suse-su-2025:02296-1 | Security update for go1.23 | 2025-07-11T15:20:05Z | 2025-07-11T15:20:05Z |
| suse-su-2025:02295-1 | Security update for go1.24 | 2025-07-11T15:18:49Z | 2025-07-11T15:18:49Z |
| suse-su-2025:20493-1 | Security update for the Linux Kernel | 2025-07-11T15:14:18Z | 2025-07-11T15:14:18Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14249-1 | python313-3.13.0~rc1-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14248-1 | python310-Django4-4.2.15-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14247-1 | python310-Django-5.0.8-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14246-1 | db48-doc-4.8.30-45.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14245-1 | apache2-2.4.62-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14244-1 | ansible-9-9.8.0-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14243-1 | roundcubemail-1.6.8-1.1 on GA media | 2024-08-07T00:00:00Z | 2024-08-07T00:00:00Z |
| opensuse-su-2024:14242-1 | element-web-1.11.73-1.1 on GA media | 2024-08-07T00:00:00Z | 2024-08-07T00:00:00Z |
| opensuse-su-2024:14241-1 | libxml2-2-2.12.9-1.1 on GA media | 2024-08-06T00:00:00Z | 2024-08-06T00:00:00Z |
| opensuse-su-2024:14240-1 | libnbd-1.20.2-1.1 on GA media | 2024-08-06T00:00:00Z | 2024-08-06T00:00:00Z |
| opensuse-su-2024:0231-1 | Security update for python-notebook | 2024-08-02T10:51:39Z | 2024-08-02T10:51:39Z |
| opensuse-su-2024:14239-1 | patch-2.7.6-8.1 on GA media | 2024-08-02T00:00:00Z | 2024-08-02T00:00:00Z |
| opensuse-su-2024:14238-1 | libneatvnc0-0.8.1-1.1 on GA media | 2024-08-02T00:00:00Z | 2024-08-02T00:00:00Z |
| opensuse-su-2024:14237-1 | trivy-0.54.1-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14236-1 | python-Twisted-doc-24.3.0-2.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14235-1 | nova-3.10.0-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14234-1 | klp-build-0~20240731.edfe0bf-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14233-1 | java-1_8_0-openjdk-1.8.0.422-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14232-1 | golang-github-prometheus-prometheus-2.53.0-3.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14231-1 | ffmpeg-4-4.4.4-12.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14230-1 | espeak-ng-1.51.1-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14229-1 | docker-26.1.5_ce-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14228-1 | matrix-synapse-1.112.0-1.1 on GA media | 2024-07-31T00:00:00Z | 2024-07-31T00:00:00Z |
| opensuse-su-2024:14227-1 | 389-ds-3.1.1~git0.aef1668-1.1 on GA media | 2024-07-31T00:00:00Z | 2024-07-31T00:00:00Z |
| opensuse-su-2024:14226-1 | ffmpeg-6-6.1.1-6.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14225-1 | curl-8.9.0-1.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14224-1 | cargo-audit-advisory-db-20240730-1.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14223-1 | libwireshark17-4.2.6-3.1 on GA media | 2024-07-29T00:00:00Z | 2024-07-29T00:00:00Z |
| opensuse-su-2024:14222-1 | ffmpeg-7-7.0-3.1 on GA media | 2024-07-28T00:00:00Z | 2024-07-28T00:00:00Z |
| opensuse-su-2024:14221-1 | ffmpeg-5-5.1.4-9.1 on GA media | 2024-07-28T00:00:00Z | 2024-07-28T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26830 | Wazifa System control.php文件SQL注入漏洞 | 2024-11-07 | 2025-10-31 |
| cnvd-2025-26829 | Wazifa System updatesettings.php文件跨站脚本漏洞 | 2024-12-04 | 2025-10-31 |
| cnvd-2025-26828 | Wazifa System search_resualts.php文件跨站脚本漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26184 | Wazifa System profile.php文件跨站脚本漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26183 | Wazifa System control.php文件SQL注入漏洞 | 2025-02-17 | 2025-10-31 |
| cnvd-2025-26182 | Exam Form Submission dashboard.php文件SQL注入漏洞 | 2025-07-28 | 2025-10-31 |
| cnvd-2025-26181 | Exam Form Submission update_s3.php文件SQL注入漏洞 | 2025-07-30 | 2025-10-31 |
| cnvd-2025-26180 | Online Farm System register.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26179 | Online Farm System /forgot_pass.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26178 | Online Farm System categoryvalue.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26177 | Exam Form Submission /register.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26176 | Exam Form Submission delete_s8.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26175 | Exam Form Submission delete_s7.php文件SQL注入漏洞 | 2025-08-01 | 2025-10-31 |
| cnvd-2025-26174 | Wazifa System updatesettings.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26173 | Wazifa System postpublish.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26172 | Exam Form Submission update_s7.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26171 | Exam Form Submission update_s5.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-31 |
| cnvd-2025-26170 | Online Event Judging System edit_judge.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26169 | Online Event Judging System edit_criteria.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26168 | Online Event Judging System edit_contestant.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26167 | Online Event Judging System add_judge.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26166 | Online Event Judging System add_contestant.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26165 | Online Event Judging System action.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26164 | Tenda CH22 fromNatStaticSetting函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26163 | Tenda CH22 formSetIpBind函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26162 | Tenda CH22 formRouteStatic函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26161 | Tenda CH22 formaddressNat函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26160 | Tenda AC6缓冲区溢出漏洞（CNVD-2025-26160） | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26159 | Open5GS存在未明漏洞（CNVD-2025-26159） | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26158 | ZTE MC889A Pro拒绝服务漏洞 | 2025-10-31 | 2025-10-31 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0504 | Multiples vulnérabilités dans les produits Atlassian | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0503 | Multiples vulnérabilités dans Google Chrome | 2024-06-19T00:00:00.000000 | 2024-06-19T00:00:00.000000 |
| certfr-2024-avi-0502 | Multiples vulnérabilités dans les produits VMware | 2024-06-18T00:00:00.000000 | 2024-06-18T00:00:00.000000 |
| certfr-2024-avi-0501 | Multiples vulnérabilités dans les produits Nextcloud | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0500 | Multiples vulnérabilités dans Elastic Kibana | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0499 | Vulnérabilité dans NetApp StorageGRID | 2024-06-17T00:00:00.000000 | 2024-06-17T00:00:00.000000 |
| certfr-2024-avi-0498 | Multiples vulnérabilités dans les produits IBM | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0497 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0496 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0495 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-14T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0476 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-06-11T00:00:00.000000 | 2024-06-14T00:00:00.000000 |
| certfr-2024-avi-0492 | Multiples vulnérabilités dans Google Android et Pixel | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0491 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0490 | Multiples vulnérabilités dans GitLab | 2024-06-13T00:00:00.000000 | 2024-06-13T00:00:00.000000 |
| certfr-2024-avi-0489 | Multiples vulnérabilités dans les produits Microsoft | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0488 | Multiples vulnérabilités dans Microsoft Azure | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0487 | Multiples vulnérabilités dans Microsoft .Net | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0486 | Multiples vulnérabilités dans Microsoft Windows | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0485 | Multiples vulnérabilités dans Microsoft Office | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0484 | Multiples vulnérabilités dans les produits Fortinet | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0483 | Multiples vulnérabilités dans les produits Adobe | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0482 | Multiples vulnérabilités dans Mozilla Firefox | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0481 | Multiples vulnérabilités dans Google Chrome | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0480 | Vulnérabilité dans les produits Citrix | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0479 | Multiples vulnérabilités dans HPE Aruba Networking AirWave Management Platform | 2024-06-12T00:00:00.000000 | 2024-06-12T00:00:00.000000 |
| certfr-2024-avi-0478 | Multiples vulnérabilités dans les produits Siemens | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0477 | Multiples vulnérabilités dans les produits SAP | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0475 | Multiples vulnérabilités dans Tenable Security Center | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0474 | Vulnérabilité dans Veeam Recovery Orchestrator | 2024-06-11T00:00:00.000000 | 2024-06-11T00:00:00.000000 |
| certfr-2024-avi-0473 | Vulnérabilité dans VMware Tanzu | 2024-06-10T00:00:00.000000 | 2024-06-10T00:00:00.000000 |