Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66092 |
6.5 (3.1)
|
WordPress Accordion Slider plugin <= 1.9.13 - Cross Si… |
bqworks |
Accordion Slider |
2025-11-21T12:29:59.275Z | 2026-01-20T14:28:24.005Z |
| CVE-2025-66114 |
5.3 (3.1)
|
WordPress Show Variations as Single Products Woocommer… |
theme funda |
Show Variations as Single Products Woocommerce |
2025-11-21T12:30:06.230Z | 2026-01-20T14:28:23.995Z |
| CVE-2025-66099 |
5.3 (3.1)
|
WordPress Chat Help plugin <= 3.1.3 - Broken Access Co… |
ThemeAtelier |
Chat Help |
2025-11-21T12:30:01.184Z | 2026-01-20T14:28:23.992Z |
| CVE-2025-66100 |
6.5 (3.1)
|
WordPress RestroPress plugin <= 3.2.3.5 - Broken Acces… |
Magnigenie |
RestroPress |
2025-12-18T07:22:18.263Z | 2026-01-20T14:28:23.990Z |
| CVE-2025-66093 |
6.5 (3.1)
|
WordPress Extensions for Leaflet Map plugin <= 4.8 - C… |
hupe13 |
Extensions for Leaflet Map |
2025-11-21T12:29:59.483Z | 2026-01-20T14:28:23.983Z |
| CVE-2025-66090 |
6.5 (3.1)
|
WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scr… |
sonalsinha21 |
SKT Skill Bar |
2025-11-21T12:29:58.912Z | 2026-01-20T14:28:23.974Z |
| CVE-2025-66103 |
6.5 (3.1)
|
WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scri… |
Revmakx |
WPCal.io |
2025-12-30T16:43:38.792Z | 2026-01-20T14:28:23.972Z |
| CVE-2025-66112 |
4.3 (3.1)
|
WordPress Accessibility Toolkit by WebYes plugin <= 2.… |
WebToffee |
Accessibility Toolkit by WebYes |
2025-11-21T12:30:05.704Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66096 |
4.3 (3.1)
|
WordPress Table Block by Tableberg plugin <= 0.6.9 - B… |
Imtiaz Rayhan |
Table Block by Tableberg |
2025-11-21T12:29:59.819Z | 2026-01-20T14:28:23.971Z |
| CVE-2025-66085 |
4.3 (3.1)
|
WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken… |
tychesoftwares |
Arconix Shortcodes |
2025-11-21T12:29:58.133Z | 2026-01-20T14:28:23.965Z |
| CVE-2025-66110 |
5.3 (3.1)
|
WordPress Tiktok Feed plugin <= 1.0.22 - Broken Access… |
bPlugins |
Tiktok Feed |
2025-11-21T12:30:05.216Z | 2026-01-20T14:28:23.954Z |
| CVE-2025-66109 |
5.3 (3.1)
|
WordPress Cart Weight for WooCommerce plugin <= 1.9.11… |
octolize |
Cart Weight for WooCommerce |
2025-11-21T12:30:04.941Z | 2026-01-20T14:28:23.943Z |
| CVE-2025-66095 |
4.3 (3.1)
|
WordPress KiviCare plugin <= 3.6.13 - SQL Injection vu… |
Iqonic Design |
KiviCare |
2025-11-21T12:29:59.655Z | 2026-01-20T14:28:23.942Z |
| CVE-2025-66108 |
4.3 (3.1)
|
WordPress TNC Toolbox: Web Performance plugin <= 2.0.4… |
Merlot Digital (by TNC) |
TNC Toolbox: Web Performance |
2025-11-21T12:30:04.685Z | 2026-01-20T14:28:23.936Z |
| CVE-2025-66107 |
5.3 (3.1)
|
WordPress Subscriptions & Memberships for PayPal plugi… |
Scott Paterson |
Subscriptions & Memberships for PayPal |
2025-11-21T12:30:04.428Z | 2026-01-20T14:28:23.936Z |
| CVE-2025-66111 |
6.1 (3.1)
|
WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Sc… |
Nelio Software |
Nelio Popups |
2025-11-21T12:30:05.445Z | 2026-01-20T14:28:23.931Z |
| CVE-2025-66106 |
4.3 (3.1)
|
WordPress Featured Post Creative plugin <= 1.5.5 - Bro… |
Essential Plugin |
Featured Post Creative |
2025-11-21T12:30:03.619Z | 2026-01-20T14:28:23.931Z |
| CVE-2025-66089 |
4.3 (3.1)
|
WordPress Product Feed for WooCommerce plugin <= 2.3.1… |
WebToffee |
Product Feed for WooCommerce |
2025-11-21T12:29:58.741Z | 2026-01-20T14:28:23.926Z |
| CVE-2025-66065 |
5.3 (3.1)
|
WordPress Gutenverse plugin <= 3.2.1 - Broken Access C… |
Jegstudio |
Gutenverse |
2025-11-21T12:29:55.513Z | 2026-01-20T14:28:23.901Z |
| CVE-2025-66081 |
5.4 (3.1)
|
WordPress Head Meta Data plugin <= 20250327 - Cross Si… |
Jeff Starr |
Head Meta Data |
2025-11-21T12:29:57.410Z | 2026-01-20T14:28:23.868Z |
| CVE-2025-66078 |
9.1 (3.1)
|
WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote … |
jetmonsters |
Hotel Booking Lite |
2025-12-18T07:22:17.890Z | 2026-01-20T14:28:23.826Z |
| CVE-2025-66077 |
4.3 (3.1)
|
WordPress Legal Pages plugin <= 1.4.6 - Broken Access … |
wpWax |
Legal Pages |
2025-11-21T12:29:57.063Z | 2026-01-20T14:28:23.798Z |
| CVE-2025-66083 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.750Z | 2026-01-20T14:28:23.721Z |
| CVE-2025-66068 |
6.5 (3.1)
|
WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken A… |
InstaWP |
InstaWP Connect |
2025-12-18T07:22:17.312Z | 2026-01-20T14:28:23.688Z |
| CVE-2025-66086 |
5.3 (3.1)
|
WordPress SMS Alert Order Notifications plugin <= 3.8.… |
Cozy Vision |
SMS Alert Order Notifications |
2025-11-21T12:29:58.296Z | 2026-01-20T14:28:23.427Z |
| CVE-2025-66084 |
4.3 (3.1)
|
WordPress FluentCommunity plugin <= 2.0.0 - Broken Acc… |
Shahjahan Jewel |
FluentCommunity |
2025-11-21T12:29:57.920Z | 2026-01-20T14:28:23.392Z |
| CVE-2025-66057 |
6.3 (3.1)
|
WordPress Bold Page Builder plugin <= 5.5.2 - Cross Si… |
boldthemes |
Bold Page Builder |
2025-11-21T12:29:54.209Z | 2026-01-20T14:28:23.380Z |
| CVE-2025-66073 |
6.5 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Inj… |
Cozmoslabs |
WP Webhooks |
2025-11-21T12:29:56.667Z | 2026-01-20T14:28:23.347Z |
| CVE-2025-64638 |
5.3 (3.1)
|
WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - … |
OnPay.io |
OnPay.io for WooCommerce |
2025-12-16T08:12:51.913Z | 2026-01-20T14:28:23.328Z |
| CVE-2025-66072 |
9.8 (3.1)
|
WordPress UsersWP plugin <= 1.2.47 - Broken Access Con… |
Stiofan |
UsersWP |
2025-11-21T12:29:56.382Z | 2026-01-20T14:28:23.321Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67545 |
6.5 (3.1)
|
WordPress FireBox plugin <= 3.1.0-free - Cross Site Sc… |
FirePlugins |
FireBox |
2025-12-09T14:14:06.130Z | 2026-01-20T14:28:25.532Z |
| CVE-2025-67544 |
6.5 (3.1)
|
WordPress Shopkeeper Extender plugin < 7.0 - Cross Sit… |
Get Bowtied |
Shopkeeper Extender |
2025-12-09T14:14:05.870Z | 2026-01-20T14:28:25.495Z |
| CVE-2025-67543 |
6.5 (3.1)
|
WordPress Essential Widgets plugin <= 2.2.2 - Cross Si… |
Catch Themes |
Essential Widgets |
2025-12-09T14:14:05.667Z | 2026-01-20T14:28:25.440Z |
| CVE-2025-67542 |
6.5 (3.1)
|
WordPress Multi-Step Checkout for WooCommerce plugin <… |
SilkyPress |
Multi-Step Checkout for WooCommerce |
2025-12-09T14:14:05.482Z | 2026-01-20T14:28:25.370Z |
| CVE-2025-67541 |
7.1 (3.1)
|
WordPress WP-ShowHide plugin <= 1.05 - Cross Site Scri… |
Lester Chan |
WP-ShowHide |
2025-12-09T14:14:05.260Z | 2026-01-20T14:28:25.235Z |
| CVE-2025-67540 |
6.5 (3.1)
|
WordPress Animation Addons for Elementor plugin <= 2.4… |
Wealcoder |
Animation Addons for Elementor |
2025-12-09T14:14:05.024Z | 2026-01-20T14:28:25.249Z |
| CVE-2025-67539 |
6.5 (3.1)
|
WordPress Select Core plugin < 2.6 - Cross Site Script… |
Select-Themes |
Select Core |
2025-12-09T14:14:04.804Z | 2026-01-20T14:28:25.256Z |
| CVE-2025-67538 |
6.5 (3.1)
|
WordPress JNews Gallery plugin < 12.0.1 - Cross Site S… |
jegtheme |
JNews Gallery |
2025-12-09T14:14:04.582Z | 2026-01-20T14:28:25.508Z |
| CVE-2025-67537 |
6.5 (3.1)
|
WordPress ThirstyAffiliates plugin <= 3.11.8 - Cross S… |
Blair Williams |
ThirstyAffiliates |
2025-12-09T14:14:04.310Z | 2026-01-20T14:28:25.132Z |
| CVE-2025-67536 |
6.5 (3.1)
|
WordPress LearnPress plugin <= 4.2.9.4 - Cross Site Sc… |
ThimPress |
LearnPress |
2025-12-09T14:14:04.062Z | 2026-01-20T14:28:25.165Z |
| CVE-2025-67535 |
6.5 (3.1)
|
WordPress WP Maps plugin <= 4.8.6 - PHP Object Injecti… |
WePlugins - WordPress Development Company |
WP Maps |
2025-12-09T14:14:03.841Z | 2026-01-20T14:28:25.201Z |
| CVE-2025-67534 |
7.1 (3.1)
|
WordPress Rencontre plugin <= 3.13.7 - Cross Site Requ… |
Jacques Malgrange |
Rencontre |
2025-12-09T14:14:03.622Z | 2026-01-20T14:28:25.186Z |
| CVE-2025-67533 |
6.5 (3.1)
|
WordPress Themify Portfolio Post plugin <= 1.3.0 - Cro… |
themifyme |
Themify Portfolio Post |
2025-12-09T14:14:03.414Z | 2026-01-20T14:28:25.206Z |
| CVE-2025-67532 |
9.8 (3.1)
|
WordPress Hara theme <= 1.2.17 - Local File Inclusion … |
thembay |
Hara |
2025-12-09T14:14:03.164Z | 2026-01-20T14:28:25.158Z |
| CVE-2025-67531 |
9.8 (3.1)
|
WordPress Turitor theme < 1.5.3 - Local File Inclusion… |
trippleS |
Turitor |
2025-12-09T14:14:01.550Z | 2026-01-20T14:28:25.095Z |
| CVE-2025-67530 |
9.8 (3.1)
|
WordPress Besa theme <= 2.3.15 - Local File Inclusion … |
thembay |
Besa |
2025-12-09T14:14:01.260Z | 2026-01-20T14:28:25.221Z |
| CVE-2025-67529 |
9.8 (3.1)
|
WordPress Fashion theme < 5.3.0 - Local File Inclusion… |
Opal_WP |
Fashion |
2025-12-09T14:14:01.047Z | 2026-01-20T14:28:25.463Z |
| CVE-2025-67528 |
5.1 (3.1)
|
WordPress Urna theme <= 2.5.12 - Local File Inclusion … |
thembay |
Urna |
2025-12-09T14:14:00.840Z | 2026-01-20T14:28:25.332Z |
| CVE-2025-67527 |
9.8 (3.1)
|
WordPress Digiqole theme < 2.2.7 - Local File Inclusio… |
trippleS |
Digiqole |
2025-12-09T14:14:00.496Z | 2026-01-20T14:28:25.133Z |
| CVE-2025-67526 |
9.8 (3.1)
|
WordPress Sailing theme < 4.4.6 - Local File Inclusion… |
ThimPress |
Sailing |
2025-12-09T14:14:00.209Z | 2026-01-20T14:28:25.493Z |
| CVE-2025-67525 |
9.8 (3.1)
|
WordPress ekommart theme < 4.3.1 - Local File Inclusio… |
Opal_WP |
ekommart |
2025-12-09T14:13:59.771Z | 2026-01-20T14:28:24.930Z |
| CVE-2025-67524 |
9.8 (3.1)
|
WordPress Jobmonster Elementor Addon plugin <= 1.1.4 -… |
NooTheme |
Jobmonster Elementor Addon |
2025-12-09T14:13:59.520Z | 2026-01-20T14:28:25.256Z |
| CVE-2025-67523 |
9.8 (3.1)
|
WordPress Exhibz theme <= 3.0.9 - Local File Inclusion… |
trippleS |
Exhibz |
2025-12-09T14:13:59.287Z | 2026-01-20T14:28:25.162Z |
| CVE-2025-67522 |
9.8 (3.1)
|
WordPress Jobmonster theme <= 4.8.2 - Local File Inclu… |
NooTheme |
Jobmonster |
2025-12-09T14:13:59.066Z | 2026-01-20T14:28:25.110Z |
| CVE-2025-67521 |
9.8 (3.1)
|
WordPress Select Core plugin < 2.6 - Local File Inclus… |
Select-Themes |
Select Core |
2025-12-09T14:13:58.865Z | 2026-01-20T14:28:24.976Z |
| CVE-2025-67520 |
9.8 (3.1)
|
WordPress Media Library Tools plugin <= 1.6.15 - SQL I… |
Tiny Solutions |
Media Library Tools |
2025-12-09T14:13:58.651Z | 2026-01-20T14:28:24.948Z |
| CVE-2025-67519 |
9.8 (3.1)
|
WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection… |
Shahjahan Jewel |
Ninja Tables |
2025-12-09T14:13:58.092Z | 2026-01-20T14:28:25.166Z |
| CVE-2025-67518 |
9.8 (3.1)
|
WordPress Accordion Slider PRO plugin <= 1.2 - SQL Inj… |
LambertGroup |
Accordion Slider PRO |
2025-12-09T14:13:57.826Z | 2026-01-20T14:28:25.371Z |
| CVE-2025-67517 |
9.8 (3.1)
|
WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL In… |
artplacer |
ArtPlacer Widget |
2025-12-09T14:13:57.629Z | 2026-01-20T14:28:25.209Z |
| CVE-2025-67516 |
9.8 (3.1)
|
WordPress Store Locator WordPress plugin <= 1.6.2 - SQ… |
Agile Logix |
Store Locator WordPress |
2025-12-09T14:13:57.425Z | 2026-01-20T14:28:25.331Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-67536 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.640 | 2026-01-20T15:19:18.473 |
| fkie_cve-2025-67535 | Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T16:18:28.453 | 2026-01-20T15:19:18.347 |
| fkie_cve-2025-67534 | Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T16:18:28.237 | 2026-01-20T15:19:18.210 |
| fkie_cve-2025-67533 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:28.100 | 2026-01-20T15:19:18.090 |
| fkie_cve-2025-67532 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.963 | 2026-01-20T15:19:17.967 |
| fkie_cve-2025-67531 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.830 | 2026-01-20T15:19:17.847 |
| fkie_cve-2025-67530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.693 | 2026-01-20T15:19:17.717 |
| fkie_cve-2025-67529 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.553 | 2026-01-20T15:19:17.590 |
| fkie_cve-2025-67528 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.417 | 2026-01-20T15:19:17.467 |
| fkie_cve-2025-67527 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.280 | 2026-01-20T15:19:17.343 |
| fkie_cve-2025-67526 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:27.130 | 2026-01-20T15:19:17.217 |
| fkie_cve-2025-67525 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:26.973 | 2026-01-20T15:19:17.077 |
| fkie_cve-2025-67524 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:26.013 | 2026-01-20T15:19:16.950 |
| fkie_cve-2025-67523 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.863 | 2026-01-20T15:19:16.807 |
| fkie_cve-2025-67522 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.680 | 2026-01-20T15:19:16.670 |
| fkie_cve-2025-67521 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:25.540 | 2026-01-20T15:19:16.540 |
| fkie_cve-2025-67520 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:25.403 | 2026-01-20T15:19:16.413 |
| fkie_cve-2025-67519 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:25.270 | 2026-01-20T15:19:16.290 |
| fkie_cve-2025-67518 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:25.127 | 2026-01-20T15:19:16.167 |
| fkie_cve-2025-67517 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:24.687 | 2026-01-20T15:19:16.043 |
| fkie_cve-2025-67516 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T16:18:24.550 | 2026-01-20T15:19:15.920 |
| fkie_cve-2025-67515 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:24.407 | 2026-01-20T15:19:15.797 |
| fkie_cve-2025-67474 | Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectl… | 2025-12-09T16:18:23.903 | 2026-01-20T15:19:15.670 |
| fkie_cve-2025-67473 | Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… | 2025-12-09T16:18:23.770 | 2026-01-20T15:19:15.550 |
| fkie_cve-2025-67472 | Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for W… | 2025-12-09T16:18:23.590 | 2026-01-20T15:19:15.410 |
| fkie_cve-2025-67471 | Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… | 2025-12-09T16:18:23.417 | 2026-01-20T15:19:15.287 |
| fkie_cve-2025-67470 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… | 2025-12-09T16:18:23.270 | 2026-01-20T15:19:15.163 |
| fkie_cve-2025-67469 | Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… | 2025-12-09T16:18:23.123 | 2026-01-20T15:19:15.043 |
| fkie_cve-2025-67468 | Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… | 2025-12-09T16:18:22.947 | 2026-01-20T15:19:14.917 |
| fkie_cve-2025-67467 | Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … | 2025-12-09T16:18:22.767 | 2026-01-20T15:19:14.793 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-38mm-37q5-m94p |
4.3 (3.1)
|
Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-2xmw-984x-wv9r |
4.8 (3.1)
|
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Explo… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-297g-gfvh-fg6g |
4.7 (3.1)
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin… | 2025-12-16T09:31:08Z | 2026-01-20T15:32:13Z |
| ghsa-x9qg-qg5q-w7wm |
2.7 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree … | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-w462-84xq-4265 |
5.3 (3.1)
|
Missing Authorization vulnerability in ThemeAtelier IDonate idonate allows Exploiting Incorrectly C… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-vwff-x332-54cr |
5.3 (3.1)
|
Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-v3p3-x59h-hh4x |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in flexmls Flexmls® IDX flexmls-i… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-rv24-x99m-5fww |
5.3 (3.1)
|
Missing Authorization vulnerability in Andrew Lima Sitewide Notice WP sitewide-notice-wp allows Exp… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-rgqg-hgw2-9cww |
5.3 (3.1)
|
Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Co… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-r9vg-qvpj-r6fq |
4.3 (3.1)
|
Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploit… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-qhmm-q668-fm4x |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in jegtheme JNews Paywall jnews-paywall allows Cros… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-pc9f-26mf-x8r8 |
5.3 (3.1)
|
Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking all… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p8fx-rcmw-3w3v |
5.3 (3.1)
|
Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allow… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-p3x2-xc39-x94f |
4.3 (3.1)
|
Missing Authorization vulnerability in WebToffee WebToffee eCommerce Marketing Automation decorator… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-m5p4-vfqp-hgph |
2.6 (3.1)
|
Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-fronten… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-jv2p-gvm2-g823 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Str… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-hxv7-g5hh-vf32 |
4.7 (3.1)
|
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Fre… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-hqgc-ccmj-47g6 |
5.3 (3.1)
|
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory all… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gwr4-mv8g-jwvr |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Reques… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gfhx-j544-rw6j |
5.3 (3.1)
|
Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-gc4r-728m-28h6 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-fjwg-mp34-87hv |
5.3 (3.1)
|
Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiti… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-fcx4-3m37-4qj4 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Rustaurius Ultimate FAQ ultimate-faqs allows Cro… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-f6hw-687h-mj4j |
4.3 (3.1)
|
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocom… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-f3xx-fm5r-qhwx |
5.3 (3.1)
|
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System bookin… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-cxcv-g248-mppg |
5.3 (3.1)
|
Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Ex… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-cwmq-j8r4-3w7r |
4.3 (3.1)
|
Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Inco… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-chj6-62r4-7j53 |
5.3 (3.1)
|
Missing Authorization vulnerability in ThimPress Sailing sailing allows Exploiting Incorrectly Conf… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-c3p5-fcjv-492q |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Business Directory business-dire… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-9gj6-rwqc-4wvp |
4.3 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-453 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.241877Z |
| pysec-2021-452 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:47.095784Z |
| pysec-2021-451 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can tr… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.920888Z |
| pysec-2021-450 |
|
TensorFlow is an end-to-end open source platform for machine learning. The `tf.raw_ops.Co… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.764419Z |
| pysec-2021-449 |
|
TensorFlow is an end-to-end open source platform for machine learning. Specifying a negat… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.609278Z |
| pysec-2021-448 |
|
TensorFlow is an end-to-end open source platform for machine learning. Missing validation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.522398Z |
| pysec-2021-447 |
|
TensorFlow is an end-to-end open source platform for machine learning. The API of `tf.raw… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.373650Z |
| pysec-2021-446 |
|
TensorFlow is an end-to-end open source platform for machine learning. In eager mode (def… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.214930Z |
| pysec-2021-445 |
|
TensorFlow is an end-to-end open source platform for machine learning. A malicious user c… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:46.030158Z |
| pysec-2021-444 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_op… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.869282Z |
| pysec-2021-443 |
|
TensorFlow is an end-to-end open source platform for machine learning. The implementation… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.694528Z |
| pysec-2021-442 |
|
TensorFlow is an end-to-end open source platform for machine learning. If the `splits` ar… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.524725Z |
| pysec-2021-441 |
|
TensorFlow is an end-to-end open source platform for machine learning. Calling TF operati… | tensorflow-cpu | 2021-05-14T20:15:00Z | 2021-12-09T06:34:45.368024Z |
| pysec-2021-440 |
|
TensorFlow is an end-to-end open source platform for machine learning. If the `splits` ar… | tensorflow-cpu | 2021-05-14T19:15:00Z | 2021-12-09T06:34:45.216617Z |
| pysec-2020-303 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow-cpu | 2020-01-28T22:15:00Z | 2021-12-09T06:34:45.123200Z |
| pysec-2020-302 |
|
In affected versions of TensorFlow under certain cases, loading a saved model can result … | tensorflow-cpu | 2020-12-10T22:15:00Z | 2021-12-09T06:34:45.035634Z |
| pysec-2020-301 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.825248Z |
| pysec-2020-299 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.590878Z |
| pysec-2020-298 |
|
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not valid… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.408160Z |
| pysec-2020-297 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow-cpu | 2020-12-10T23:15:00Z | 2021-12-09T06:34:44.221678Z |
| pysec-2020-296 |
|
In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resiz… | tensorflow-cpu | 2020-10-21T21:15:00Z | 2021-12-09T06:34:44.028853Z |
| pysec-2020-295 |
|
In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.q… | tensorflow-cpu | 2020-10-21T21:15:00Z | 2021-12-09T06:34:43.980213Z |
| pysec-2020-294 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.930382Z |
| pysec-2020-293 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.849481Z |
| pysec-2020-292 |
|
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.741009Z |
| pysec-2020-291 |
|
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.650264Z |
| pysec-2020-290 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite sav… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.437178Z |
| pysec-2020-289 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLit… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.227280Z |
| pysec-2020-288 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determinin… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:43.041754Z |
| pysec-2020-287 |
|
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.836592Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32527 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.698658Z |
| gsd-2024-32555 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.697510Z |
| gsd-2024-32569 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.695812Z |
| gsd-2024-32516 | Missing Authorization vulnerability in Palscode Multi Currency For WooCommerce.This issue… | 2024-04-16T05:01:54.693949Z |
| gsd-2024-32530 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.693469Z |
| gsd-2024-32539 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.693269Z |
| gsd-2024-32604 | Authorization Bypass Through User-Controlled Key vulnerability in Plechev Andrey WP-Recal… | 2024-04-16T05:01:54.692595Z |
| gsd-2024-32570 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.691332Z |
| gsd-2024-32501 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.689371Z |
| gsd-2024-32554 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.687433Z |
| gsd-2024-32537 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.685308Z |
| gsd-2024-32572 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.683680Z |
| gsd-2024-32543 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.682691Z |
| gsd-2024-32541 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.682254Z |
| gsd-2024-32590 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.681804Z |
| gsd-2024-32518 | Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This is… | 2024-04-16T05:01:54.681110Z |
| gsd-2024-32593 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.679922Z |
| gsd-2024-32494 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.678491Z |
| gsd-2024-32528 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.677621Z |
| gsd-2024-32594 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.674984Z |
| gsd-2024-32500 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.674785Z |
| gsd-2024-32562 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.671923Z |
| gsd-2024-32563 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.670740Z |
| gsd-2024-32526 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.669764Z |
| gsd-2024-32505 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.669312Z |
| gsd-2024-32489 | TCPDF before 6.7.4 mishandles calls that use HTML syntax. | 2024-04-16T05:01:54.667173Z |
| gsd-2024-32577 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.662736Z |
| gsd-2024-32496 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.661495Z |
| gsd-2024-32597 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.658590Z |
| gsd-2024-32523 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.657925Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191902 | Malicious code in time-server-analysis (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191901 | Malicious code in time-check-server-get (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191900 | Malicious code in time-check-server (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191899 | Malicious code in tiksing (PyPI) | 2025-02-18T20:50:57Z | 2025-12-11T09:27:54Z |
| mal-2025-191893 | Malicious code in testcatplzignore (PyPI) | 2025-07-16T19:22:42Z | 2025-12-11T09:27:54Z |
| mal-2025-191890 | Malicious code in tensorflowlitex (PyPI) | 2025-04-25T12:00:27Z | 2025-12-11T09:27:54Z |
| mal-2025-191888 | Malicious code in telegramdoxing (PyPI) | 2025-05-12T20:59:25Z | 2025-12-11T09:27:54Z |
| mal-2025-191887 | Malicious code in tcloud-python-sdks (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191886 | Malicious code in tclients-sdk (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191885 | Malicious code in talbat (PyPI) | 2025-07-19T21:55:54Z | 2025-12-11T09:27:54Z |
| mal-2025-191883 | Malicious code in svcmanager (PyPI) | 2025-07-18T10:40:59Z | 2025-12-11T09:27:54Z |
| mal-2025-191882 | Malicious code in supersafereverse (PyPI) | 2025-08-01T15:56:43Z | 2025-12-11T09:27:54Z |
| mal-2025-191881 | Malicious code in supersafecalc (PyPI) | 2025-07-28T18:58:47Z | 2025-12-11T09:27:54Z |
| mal-2025-191880 | Malicious code in stubsoutagn (PyPI) | 2025-06-07T16:33:11Z | 2025-12-11T09:27:54Z |
| mal-2025-191879 | Malicious code in stubsout (PyPI) | 2025-06-07T16:33:11Z | 2025-12-11T09:27:54Z |
| mal-2025-191877 | Malicious code in spyderlib (PyPI) | 2025-06-07T16:33:11Z | 2025-12-11T09:27:54Z |
| mal-2025-191871 | Malicious code in snapshot-photo (PyPI) | 2025-02-25T18:18:21Z | 2025-12-11T09:27:54Z |
| mal-2025-191869 | Malicious code in sintok (PyPI) | 2025-02-18T20:50:57Z | 2025-12-11T09:27:54Z |
| mal-2025-191863 | Malicious code in seclab-research-depconf-test (PyPI) | 2025-07-11T14:04:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1008 | Malicious code in wr-test (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1007 | Malicious code in websynapse (PyPI) | 2024-12-14T16:26:57Z | 2025-12-11T09:27:54Z |
| mal-2025-1005 | Malicious code in wdwq (PyPI) | 2025-01-07T14:50:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1004 | Malicious code in wasi8787878 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2025-1003 | Malicious code in w722-poc (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-9067 | Malicious code in website-scanner (PyPI) | 2024-10-01T14:51:20Z | 2025-12-11T09:27:54Z |
| mal-2024-7840 | Malicious code in testjsonn2 (PyPI) | 2024-07-21T01:28:21Z | 2025-12-11T09:27:54Z |
| mal-2024-7839 | Malicious code in testjsonn1 (PyPI) | 2024-07-21T01:02:37Z | 2025-12-11T09:27:54Z |
| mal-2024-7838 | Malicious code in testjson3 (PyPI) | 2024-07-21T01:25:45Z | 2025-12-11T09:27:54Z |
| mal-2024-12372 | Malicious code in zip-me (PyPI) | 2024-12-16T10:40:50Z | 2025-12-11T09:27:54Z |
| mal-2024-12371 | Malicious code in yt-yson-bindings (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2159 | DriveLock: Schwachstelle ermöglicht Privilegieneskalation | 2025-09-29T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2098 | IBM SPSS: Mehrere Schwachstellen | 2025-09-21T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1846 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen | 2025-08-14T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1751 | Apache CXF: Schwachstelle ermöglicht Codeausführung | 2025-08-10T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1579 | Atlassian Bamboo Data Center und Server: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-15T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1370 | Red Hat Enterprise Linux (yaml-libyam): Schwachstelle ermöglicht Manipulation von Dateien | 2025-06-22T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1047 | Red Hat Enterprise Linux (exiv2): Schwachstelle ermöglicht Codeausführung | 2025-05-13T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-1040 | Red Hat Enterprise Linux (perl-Module-ScanDeps): Schwachstelle ermöglicht Privilegieneskalation | 2025-05-13T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0997 | Apache Commons Configuration: Schwachstelle ermöglicht Denial of Service | 2025-05-11T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0670 | Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-31T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0511 | Apache Tomcat: Schwachstelle ermöglicht Manipulation, Codeausführung und Offenlegung von Daten | 2025-03-10T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0381 | libarchive: Schwachstelle ermöglicht Denial of Service | 2025-02-16T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0283 | Golang Go: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0263 | Golang Go: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-04T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0218 | MIT Kerberos: Schwachstelle ermöglicht Denial of Service | 2025-01-29T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0111 | Golang Go: Mehrere Schwachstellen | 2025-01-16T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0009 | FRRouting Project FRRouting: Schwachstelle ermöglicht Denial of Service | 2025-01-05T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-0002 | OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-01-01T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2024-3722 | Apache Tomcat: Mehrere Schwachstellen | 2024-12-17T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2024-3486 | Apache Tomcat: Mehrere Schwachstellen | 2024-11-17T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2024-3300 | X.Org X11 und Xming: Schwachstelle ermöglicht Privilegieneskalation | 2024-10-29T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2024-3178 | Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung | 2024-10-14T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2024-1031 | Bouncy Castle: Mehrere Schwachstellen | 2024-05-05T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2023-3050 | Logback: Schwachstelle ermöglicht Denial of Service | 2023-12-03T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2023-3044 | Logback: Schwachstelle ermöglicht Denial of Service | 2023-12-03T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2023-3005 | phpMyAdmin: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-03-10T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2023-2998 | Bouncy Castle: Schwachstelle ermöglicht Denial of Service | 2023-11-22T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2023-1490 | Bouncy Castle: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-06-18T22:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2022-2350 | BigBlueButton: Mehrere Schwachstellen | 2022-12-15T23:00:00.000+00:00 | 2025-10-05T22:00:00.000+00:00 |
| wid-sec-w-2025-2189 | TeamViewer: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-10-01T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:17241 | Red Hat Security Advisory: kernel security update | 2025-10-02T10:07:46+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:15011 | Red Hat Security Advisory: kernel security update | 2025-09-02T07:19:50+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:15005 | Red Hat Security Advisory: kernel security update | 2025-09-02T06:55:20+00:00 | 2026-01-22T12:24:01+00:00 |
| rhsa-2025:0664 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements | 2025-01-23T13:02:37+00:00 | 2026-01-22T10:29:06+00:00 |
| rhsa-2024:9615 | Red Hat Security Advisory: OpenShift Container Platform 4.16.23 bug fix and security update | 2024-11-20T00:46:32+00:00 | 2026-01-22T10:28:25+00:00 |
| rhsa-2024:8704 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 | 2024-12-02T14:11:34+00:00 | 2026-01-22T10:28:21+00:00 |
| rhsa-2024:8434 | Red Hat Security Advisory: OpenShift Container Platform 4.17.3 security update | 2024-10-29T17:50:43+00:00 | 2026-01-22T10:28:15+00:00 |
| rhsa-2024:8415 | Red Hat Security Advisory: OpenShift Container Platform 4.16.19 bug fix and security update | 2024-10-30T01:12:50+00:00 | 2026-01-22T10:28:12+00:00 |
| rhsa-2024:7941 | Red Hat Security Advisory: OpenShift Container Platform 4.13.z security update | 2024-10-16T20:30:11+00:00 | 2026-01-22T10:28:04+00:00 |
| rhsa-2024:7187 | Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update | 2024-10-03T11:24:56+00:00 | 2026-01-22T10:28:00+00:00 |
| rhsa-2024:7182 | Red Hat Security Advisory: OpenShift Container Platform 4.15.35 packages and security update | 2024-10-02T06:08:52+00:00 | 2026-01-22T10:27:54+00:00 |
| rhsa-2024:7174 | Red Hat Security Advisory: OpenShift Container Platform 4.16.15 bug fix and security update | 2024-10-02T05:27:44+00:00 | 2026-01-22T10:27:54+00:00 |
| rhsa-2024:6824 | Red Hat Security Advisory: OpenShift Container Platform 4.16.14 security update | 2024-09-24T15:28:01+00:00 | 2026-01-22T10:27:52+00:00 |
| rhsa-2024:6818 | Red Hat Security Advisory: OpenShift Container Platform 4.15.34 bug fix and security update | 2024-09-25T13:59:31+00:00 | 2026-01-22T10:27:50+00:00 |
| rhsa-2024:6708 | Red Hat Security Advisory: ACS 4.5 enhancement and security update | 2024-09-16T18:26:56+00:00 | 2026-01-22T10:27:47+00:00 |
| rhsa-2024:5951 | Red Hat Security Advisory: OpenShift Virtualization 4.15.5 Images | 2024-08-28T16:28:45+00:00 | 2026-01-22T10:27:33+00:00 |
| rhsa-2024:5422 | Red Hat Security Advisory: OpenShift Container Platform 4.16.8 bug fix and security update | 2024-08-20T15:21:42+00:00 | 2026-01-22T10:27:32+00:00 |
| rhsa-2024:5054 | Red Hat Security Advisory: OpenShift Virtualization 4.16.1 Images security update | 2024-08-06T16:21:05+00:00 | 2026-01-22T10:27:30+00:00 |
| rhsa-2024:4850 | Red Hat Security Advisory: OpenShift Container Platform 4.15.24 bug fix and security update | 2024-07-31T00:28:34+00:00 | 2026-01-22T10:27:21+00:00 |
| rhsa-2024:4626 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update | 2024-07-18T13:37:38+00:00 | 2026-01-22T10:27:21+00:00 |
| rhsa-2024:4246 | Red Hat Security Advisory: container-tools security update | 2024-07-02T15:45:28+00:00 | 2026-01-22T10:27:10+00:00 |
| rhsa-2024:4163 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.4 security update | 2024-06-27T12:38:04+00:00 | 2026-01-22T10:27:09+00:00 |
| rhsa-2024:4159 | Red Hat Security Advisory: OpenShift Container Platform 4.16.1 packages and security update | 2024-07-03T11:45:54+00:00 | 2026-01-22T10:27:05+00:00 |
| rhsa-2024:4150 | Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update | 2024-07-02T16:43:39+00:00 | 2026-01-22T10:26:59+00:00 |
| rhsa-2024:3717 | Red Hat Security Advisory: OpenShift Container Platform 4.17.0 security and extras update | 2024-10-01T01:42:32+00:00 | 2026-01-22T10:26:53+00:00 |
| rhsa-2024:3715 | Red Hat Security Advisory: OpenShift Container Platform 4.12.59 packages and security update | 2024-06-12T07:34:34+00:00 | 2026-01-22T10:26:47+00:00 |
| rhsa-2024:3683 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.2 security update | 2024-06-06T12:25:31+00:00 | 2026-01-22T10:26:45+00:00 |
| rhsa-2024:3637 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9 | 2024-07-01T00:39:38+00:00 | 2026-01-22T10:26:44+00:00 |
| rhsa-2024:3636 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update | 2024-06-05T14:46:12+00:00 | 2026-01-22T10:26:42+00:00 |
| rhsa-2024:3635 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2024-06-05T14:47:22+00:00 | 2026-01-22T10:26:42+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-19-344-03 | Siemens RUGGEDCOM ROS (Update A) | 2019-12-10T00:00:00.000000Z | 2023-12-12T00:00:00.000000Z |
| icsa-23-341-06 | Sierra Wireless AirLink with ALEOS firmware | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-05 | ControlbyWeb Relay | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-02 | Schweitzer Engineering Laboratories SEL-411L | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-23-341-01 | Mitsubishi Electric FA Engineering Software Products | 2023-12-07T07:00:00.000000Z | 2023-12-07T07:00:00.000000Z |
| icsa-25-182-02 | FESTO Automation Suite, FluidDraw, and Festo Didactic Products | 2023-11-28T07:00:00.000000Z | 2023-12-05T07:00:00.000000Z |
| icsa-23-339-01 | Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d | 2023-12-05T07:00:00.000000Z | 2023-12-05T07:00:00.000000Z |
| icsa-23-334-04 | Mitsubishi Electric FA Engineering Software Products | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-03 | PTC KEPServerEx | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-02 | Yokogawa STARDOM | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsa-23-334-01 | Delta Electronics DOPSoft | 2023-11-30T07:00:00.000000Z | 2023-11-30T07:00:00.000000Z |
| icsma-23-331-01 | BD FACSChorus | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-331-03 | Mitsubishi Electric GX Works2 | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-331-02 | Franklin Electric Fueling Systems Colibri | 2023-11-28T07:00:00.000000Z | 2023-11-28T07:00:00.000000Z |
| icsa-23-325-02 | Fuji Electric Tellus Lite V-Simulator | 2023-11-21T07:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-325-01 | WAGO PFC200 Series | 2023-11-21T07:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-297-01 | Rockwell Automation Stratix 5800 and Stratix 5200 (UPDATE A) | 2023-10-24T06:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-115-01 | Keysight N8844A Data Analytics Web Service (Update A) | 2023-04-25T06:00:00.000000Z | 2023-11-21T07:00:00.000000Z |
| icsa-23-320-02 | Hitachi Energy MACH System Software | 2023-11-16T07:00:00.000000Z | 2023-11-16T07:00:00.000000Z |
| icsa-23-320-01 | Red Lion Sixnet RTUs | 2023-11-16T07:00:00.000000Z | 2023-11-16T07:00:00.000000Z |
| icsa-23-318-02 | Rockwell Automation SIS Workstation and ISaGRAF Workbench | 2023-11-14T07:00:00.000000Z | 2023-11-14T07:00:00.000000Z |
| icsa-23-318-01 | AVEVA Operations Control Logger | 2023-11-14T07:00:00.000000Z | 2023-11-14T07:00:00.000000Z |
| icsa-23-320-13 | Siemens SIMATIC MV500 | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-12 | Siemens PNI | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-11 | Siemens Mendix Studio Pro | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-10 | Siemens SIPROTEC 4 7SJ66 | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-09 | Siemens COMOS | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-07 | Siemens OPC UA Modeling Editor (SiOME) | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-06 | Siemens SIMATIC PCS neo | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-320-04 | Siemens Mendix Runtime | 2023-11-14T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190626-dcnm-codex | Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:38+00:00 |
| cisco-sa-20190626-dcnm-bypass | Cisco Data Center Network Manager Authentication Bypass Vulnerability | 2019-06-26T16:00:00+00:00 | 2019-09-19T16:08:37+00:00 |
| cisco-sa-20190918-hyperflex-xfs | Cisco HyperFlex Software Cross-Frame Scripting Vulnerability | 2019-09-18T16:00:00+00:00 | 2019-09-18T16:00:00+00:00 |
| cisco-sa-20190918-hyperflex-valinj | Cisco HyperFlex Software Counter Value Injection Vulnerability | 2019-09-18T16:00:00+00:00 | 2019-09-18T16:00:00+00:00 |
| cisco-sa-20190123-ise-privilege | Cisco Identity Services Engine Privilege Escalation Vulnerability | 2019-01-23T16:00:00+00:00 | 2019-09-18T15:48:42+00:00 |
| cisco-sa-20190821-nfv-enumeration | Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-09-11T19:15:20+00:00 |
| cisco-sa-20190904-webex-teams | Cisco Webex Teams Logging Feature Command Execution Vulnerability | 2019-09-04T16:00:00+00:00 | 2019-09-04T16:00:00+00:00 |
| cisco-sa-20190904-unified-ccx-ssrf | Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability | 2019-09-04T16:00:00+00:00 | 2019-09-04T16:00:00+00:00 |
| cisco-sa-20190904-jcf-codex | Cisco Jabber Client Framework for Mac Code Execution Vulnerability | 2019-09-04T16:00:00+00:00 | 2019-09-04T16:00:00+00:00 |
| cisco-sa-20190904-ind | Cisco Industrial Network Director Configuration Data Information Disclosure Vulnerability | 2019-09-04T16:00:00+00:00 | 2019-09-04T16:00:00+00:00 |
| cisco-sa-20190904-finesse-ssrf | Cisco Finesse Request Processing Server-Side Request Forgery Vulnerability | 2019-09-04T16:00:00+00:00 | 2019-09-04T16:00:00+00:00 |
| cisco-sa-20190821-imcs-usercred | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-30T12:38:58+00:00 |
| cisco-sa-20190821-imcs-ucs-cmdinj | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-30T12:33:48+00:00 |
| cisco-sa-20190821-imcs-ucs-authby | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-30T12:30:29+00:00 |
| cisco-sa-20190807-asa-multi | Cisco Adaptive Security Appliance Smart Tunnel Vulnerabilities | 2019-08-07T16:00:00+00:00 | 2019-08-29T13:00:21+00:00 |
| cisco-sa-20190828-nxos-snmp-bypass | Cisco NX-OS Software SNMP Access Control List Configuration Name Bypass Vulnerability | 2019-08-28T16:00:00+00:00 | 2019-08-28T16:00:00+00:00 |
| cisco-sa-20190828-nxos-ipv6-dos | Cisco NX-OS Software IPv6 Denial of Service Vulnerability | 2019-08-28T16:00:00+00:00 | 2019-08-28T16:00:00+00:00 |
| cisco-sa-20190828-nxos-api-dos | Cisco NX-OS Software NX-API Denial of Service Vulnerability | 2019-08-28T16:00:00+00:00 | 2019-08-28T16:00:00+00:00 |
| cisco-sa-20190828-nexus-aci-dos | Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability | 2019-08-28T16:00:00+00:00 | 2019-08-28T16:00:00+00:00 |
| cisco-sa-20190821-webex-ssl-cert | Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-ucsd-authbypass | Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-ucs-imc-dos | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Denial of Service Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-ucs-cimc | Cisco Integrated Management Controller Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-rphy | Cisco Remote PHY Device Software Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-roomos-privesc | Cisco RoomOS Software Privilege Escalation Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-nfv-filewrite | Cisco Enterprise Network Functions Virtualization Infrastructure Software Arbitrary File Write Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-iosxe-ngwc-csrf | Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imcs-ucs-authbypass | Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-privilege | Cisco Integrated Management Controller Privilege Escalation Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-privescal | Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2019-14959 | JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-12280 | PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. | 2019-06-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-25078 | man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.) | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-20225 | An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-14628 | An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store. | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-10195 | lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9120 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9118 | PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-8923 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. | 2017-05-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-6839 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6838 | Integer overflow in sfcommands/sfconvert.c in Audio File Library | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6837 | WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6836 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6835 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6834 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6833 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6832 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6831 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6830 | Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6829 | The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6828 | Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:57.000Z |
| msrc_cve-2017-6827 | Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact via a crafted audio file | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5836 | The plist_free_data function libplist allows attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5835 | libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-5834 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:56.000Z |
| msrc_cve-2017-18640 | The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. | 2019-12-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-16754 | Bolt before 3.3.6 does not properly restrict access to _profiler routes | 2017-11-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-14176 | Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands | 2017-11-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-12613 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input. | 2017-10-02T00:00:00.000Z | 2025-10-01T23:10:55.000Z |
| msrc_cve-2017-11548 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service | 2017-07-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202508-2414 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the fromSetSysTime function… | 2025-11-23T23:41:28.512000Z |
| var-202510-2770 | Malicious / Malformed App can be Installed but not Uninstalled/may lead to unavailability… | 2025-11-23T23:41:28.189000Z |
| var-202510-4200 | Local Privilege Escalation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1… | 2025-11-23T23:41:28.132000Z |
| var-202510-4199 | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affect… | 2025-11-23T23:39:42.791000Z |
| var-202511-1167 | Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the shareSpeed … | 2025-11-23T23:39:42.733000Z |
| var-202511-2049 | Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter … | 2025-11-23T23:39:42.669000Z |
| var-202308-3363 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function for… | 2025-11-23T23:37:50.056000Z |
| var-202508-2324 | Tenda AX3 V16.03.12.10_CN is vulnerable to Buffer Overflow in the saveParentControlInfo f… | 2025-11-23T23:37:42.374000Z |
| var-202510-3393 | Undocumented administrative accounts were getting created to facilitate access for applic… | 2025-11-23T23:37:42.038000Z |
| var-202211-1323 | Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName. … | 2025-11-23T23:33:15.964000Z |
| var-202510-0217 | A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affecte… | 2025-11-23T23:32:03.076000Z |
| var-202510-2544 | Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.1… | 2025-11-23T23:32:02.971000Z |
| var-202510-3993 | Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through… | 2025-11-23T23:32:02.916000Z |
| var-202510-4098 | Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.… | 2025-11-23T23:32:02.897000Z |
| var-202403-1040 | Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the entrys parameter fromAd… | 2025-11-23T23:25:30.940000Z |
| var-200609-0701 | WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote atta… | 2025-11-23T22:46:17.219000Z |
| var-200609-0698 | Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted … | 2025-11-23T22:00:02.027000Z |
| var-200609-1205 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2025-11-23T21:48:25.347000Z |
| var-200609-1091 | The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to c… | 2025-11-23T21:15:15.082000Z |
| var-200110-0182 | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2025-11-23T20:45:28.293000Z |
| var-200609-0707 | The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will cra… | 2025-11-23T20:32:09.327000Z |
| var-202510-2768 | Lack of Graceful Error Handling - HTTP 5xx ErrorThis issue affects BLU-IC2: through 1.19.… | 2025-11-23T19:40:27.512000Z |
| var-202510-3188 | HTTP Security Misconfiguration - Lacking Secure and HTTPOnly Attribute may allow reading … | 2025-11-23T19:40:27.485000Z |
| var-202510-3902 | Protocol manipulation might lead to denial of service.This issue affects BLU-IC2: through… | 2025-11-23T19:40:27.450000Z |
| var-202511-0367 | Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto… | 2025-11-23T19:40:27.393000Z |
| var-202511-0385 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router … | 2025-11-22T23:39:14.318000Z |
| var-202511-0872 | A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V… | 2025-11-22T23:37:52.488000Z |
| var-202510-0072 | A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown fun… | 2025-11-22T23:35:35.531000Z |
| var-202405-1802 | A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected… | 2025-11-22T23:35:12.904000Z |
| var-202508-0985 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:35:10.306000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000179 | applican vulnerable to script injection | 2015-11-17T14:20+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000178 | applican vulnerable to script injection | 2015-11-17T14:20+09:00 | 2015-11-24T18:03+09:00 |
| jvndb-2015-000184 | Void vulnerable to cross-site scripting | 2015-11-20T13:38+09:00 | 2015-11-24T18:02+09:00 |
| jvndb-2015-005909 | ArcSight Management Center and ArcSight Logger vulnerable to cross-site scripting | 2015-11-20T13:31+09:00 | 2015-11-20T13:31+09:00 |
| jvndb-2015-000180 | pWebManager vulnerable to OS command injection | 2015-11-13T14:25+09:00 | 2015-11-17T16:21+09:00 |
| jvndb-2015-000177 | Apple OS X authentication issue when recovering from sleep mode | 2015-11-13T14:25+09:00 | 2015-11-17T16:15+09:00 |
| jvndb-2015-000166 | EC-CUBE vulnerable to cross-site request forgery | 2015-10-26T12:27+09:00 | 2015-11-13T19:36+09:00 |
| jvndb-2015-000159 | Party Track SDK for iOS fails to verify server certificates | 2015-10-14T15:41+09:00 | 2015-11-11T17:32+09:00 |
| jvndb-2015-000175 | ISUCON5 qualifier portal web application (eventapp) vulnerable to OS command injection | 2015-11-02T14:10+09:00 | 2015-11-11T15:33+09:00 |
| jvndb-2015-000176 | SonicWall TotalSecure TZ 100 Series vulnerable to denial-of-service (DoS) | 2015-11-06T12:30+09:00 | 2015-11-09T10:47+09:00 |
| jvndb-2015-000174 | Multiple TYPE-MOON games vulnerable to OS command injection | 2015-11-05T14:11+09:00 | 2015-11-09T10:39+09:00 |
| jvndb-2015-000170 | Enisys Gw fails to restrict access permissions | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000169 | Enisys Gw vulnerable to cross-site scripting | 2015-10-29T13:46+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000168 | Enisys Gw vulnerable to arbitrary file creation | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000167 | Enisys Gw vulnerable to SQL injection | 2015-10-29T13:37+09:00 | 2015-11-02T18:05+09:00 |
| jvndb-2015-000171 | HTML::Scrubber vulnerable to cross-site scripting | 2015-10-30T15:16+09:00 | 2015-10-30T15:16+09:00 |
| jvndb-2013-004446 | Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU) | 2013-10-30T16:32+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2013-001665 | Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS) | 2013-10-30T16:08+09:00 | 2015-10-28T10:05+09:00 |
| jvndb-2015-000162 | AirDroid for Android vulnerable in handling of implicit intents | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000160 | Avast vulnerable to directory traversal | 2015-10-16T14:00+09:00 | 2015-10-20T17:56+09:00 |
| jvndb-2015-000126 | eXtplorer vulnerable to cross-site request forgery | 2015-10-15T12:24+09:00 | 2015-10-19T15:55+09:00 |
| jvndb-2015-000158 | Pref Shimane CMS vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000154 | phpRechnung vulnerable to SQL injection | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000153 | Dojo Toolkit vulnerable to cross-site scripting | 2015-10-09T14:12+09:00 | 2015-10-14T17:26+09:00 |
| jvndb-2015-000130 | applican vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-14T16:30+09:00 |
| jvndb-2015-000149 | gollum vulnerable to file exposure | 2015-10-02T13:36+09:00 | 2015-10-08T15:26+09:00 |
| jvndb-2015-000146 | MATCHA SNS access restriction bypass vulnerability | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000145 | MATCHA SNS vulnerable to code injection | 2015-09-30T15:05+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000144 | MATCHA INVOICE vulnerable to code injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000143 | MATCHA INVOICE vulnerable to SQL injection | 2015-09-30T15:04+09:00 | 2015-10-08T15:25+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02294-1 | Security update for libxml2 | 2025-07-11T14:47:43Z | 2025-07-11T14:47:43Z |
| suse-su-2025:20475-1 | Security update for the Linux Kernel | 2025-07-11T13:43:10Z | 2025-07-11T13:43:10Z |
| suse-su-2025:02290-1 | Security update for xen | 2025-07-11T11:13:27Z | 2025-07-11T11:13:27Z |
| suse-su-2025:02289-1 | Security update for docker | 2025-07-11T11:12:49Z | 2025-07-11T11:12:49Z |
| suse-su-2025:20492-1 | Security update for python311 | 2025-07-11T09:47:32Z | 2025-07-11T09:47:32Z |
| suse-su-2025:20491-1 | Security update for rust-keylime | 2025-07-11T09:39:57Z | 2025-07-11T09:39:57Z |
| suse-su-2025:20490-1 | Security update for libgcrypt | 2025-07-11T09:20:30Z | 2025-07-11T09:20:30Z |
| suse-su-2025:02283-1 | Security update for audiofile | 2025-07-11T08:35:16Z | 2025-07-11T08:35:16Z |
| suse-su-2025:02282-1 | Security update for umoci | 2025-07-11T08:34:24Z | 2025-07-11T08:34:24Z |
| suse-su-2025:02281-1 | Security update for libssh | 2025-07-10T16:05:33Z | 2025-07-10T16:05:33Z |
| suse-su-2025:02280-1 | Security update for tomcat | 2025-07-10T16:04:29Z | 2025-07-10T16:04:29Z |
| suse-su-2025:02279-1 | Security update for libssh | 2025-07-10T16:03:25Z | 2025-07-10T16:03:25Z |
| suse-su-2025:02278-1 | Security update for libssh | 2025-07-10T16:02:57Z | 2025-07-10T16:02:57Z |
| suse-su-2025:02277-1 | Security update for libsoup2 | 2025-07-10T14:35:27Z | 2025-07-10T14:35:27Z |
| suse-su-2025:02276-1 | Security update for libsoup | 2025-07-10T14:35:08Z | 2025-07-10T14:35:08Z |
| suse-su-2025:02275-1 | Security update for libxml2 | 2025-07-10T14:34:07Z | 2025-07-10T14:34:07Z |
| suse-su-2025:20474-1 | Security update for afterburn | 2025-07-10T14:27:22Z | 2025-07-10T14:27:22Z |
| suse-su-2025:20489-1 | Security update for sudo | 2025-07-10T12:49:58Z | 2025-07-10T12:49:58Z |
| suse-su-2025:01885-2 | Security update for perl-YAML-LibYAML | 2025-07-10T11:50:44Z | 2025-07-10T11:50:44Z |
| suse-su-2025:02271-1 | Security update for wireshark | 2025-07-10T10:08:46Z | 2025-07-10T10:08:46Z |
| suse-su-2025:02264-1 | Security update for the Linux Kernel | 2025-07-10T08:25:54Z | 2025-07-10T08:25:54Z |
| suse-su-2025:02262-1 | Security update for the Linux Kernel | 2025-07-09T22:24:04Z | 2025-07-09T22:24:04Z |
| suse-su-2025:02261-1 | Security update for tomcat10 | 2025-07-09T17:40:32Z | 2025-07-09T17:40:32Z |
| suse-su-2025:02260-1 | Security update for libxml2 | 2025-07-09T17:04:33Z | 2025-07-09T17:04:33Z |
| suse-su-2025:02259-1 | Recommended update for gpg2 | 2025-07-09T15:18:03Z | 2025-07-09T15:18:03Z |
| suse-su-2025:20472-1 | Security update for gpg2 | 2025-07-08T16:15:17Z | 2025-07-08T16:15:17Z |
| suse-su-2025:02254-1 | Security update for the Linux Kernel | 2025-07-08T15:57:51Z | 2025-07-08T15:57:51Z |
| suse-su-2025:01830-2 | Security update for helm-mirror | 2025-07-08T09:47:18Z | 2025-07-08T09:47:18Z |
| suse-su-2025:02249-1 | Security update for the Linux Kernel | 2025-07-08T09:05:16Z | 2025-07-08T09:05:16Z |
| suse-su-2025:02248-1 | Security update for python-Django | 2025-07-08T09:04:52Z | 2025-07-08T09:04:52Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:0227-1 | Security update for gh | 2024-07-27T04:01:36Z | 2024-07-27T04:01:36Z |
| opensuse-su-2024:0226-1 | Security update for gh | 2024-07-27T04:01:34Z | 2024-07-27T04:01:34Z |
| opensuse-su-2024:0225-1 | Security update for assimp | 2024-07-27T04:01:30Z | 2024-07-27T04:01:30Z |
| opensuse-su-2024:0224-2 | Security update for keybase-client | 2024-07-26T18:12:13Z | 2024-07-26T18:12:13Z |
| opensuse-su-2024:0223-1 | Security update for opera | 2024-07-26T14:31:50Z | 2024-07-26T14:31:50Z |
| opensuse-su-2024:0222-1 | Security update for python-nltk | 2024-07-26T10:41:48Z | 2024-07-26T10:41:48Z |
| opensuse-su-2024:0221-1 | Security update for python-nltk | 2024-07-26T10:32:35Z | 2024-07-26T10:32:35Z |
| opensuse-su-2024:0220-1 | Security update for caddy | 2024-07-26T10:03:44Z | 2024-07-26T10:03:44Z |
| opensuse-su-2024:14220-1 | libopenssl-3-devel-3.1.4-11.1 on GA media | 2024-07-26T00:00:00Z | 2024-07-26T00:00:00Z |
| opensuse-su-2024:14219-1 | libopenssl-1_1-devel-1.1.1w-11.1 on GA media | 2024-07-26T00:00:00Z | 2024-07-26T00:00:00Z |
| opensuse-su-2024:14218-1 | golang-github-lusitaniae-apache_exporter-1.0.8-1.1 on GA media | 2024-07-26T00:00:00Z | 2024-07-26T00:00:00Z |
| opensuse-su-2024:14217-1 | bind-9.20.0-1.1 on GA media | 2024-07-26T00:00:00Z | 2024-07-26T00:00:00Z |
| opensuse-su-2024:0218-1 | Security update for exim | 2024-07-25T09:24:46Z | 2024-07-25T09:24:46Z |
| opensuse-su-2024:14216-1 | liborc-0_4-0-0.4.39-1.1 on GA media | 2024-07-24T00:00:00Z | 2024-07-24T00:00:00Z |
| opensuse-su-2024:14215-1 | libQt5Bootstrap-devel-static-32bit-5.15.14+kde143-1.1 on GA media | 2024-07-24T00:00:00Z | 2024-07-24T00:00:00Z |
| opensuse-su-2024:0214-1 | Security update for python-sentry-sdk | 2024-07-23T09:17:13Z | 2024-07-23T09:17:13Z |
| opensuse-su-2024:0212-2 | Security update for chromium | 2024-07-22T09:12:53Z | 2024-07-22T09:12:53Z |
| opensuse-su-2024:0212-1 | Security update for chromium | 2024-07-22T09:12:53Z | 2024-07-22T09:12:53Z |
| opensuse-su-2024:0211-1 | Security update for caddy | 2024-07-22T09:11:35Z | 2024-07-22T09:11:35Z |
| opensuse-su-2024:0210-1 | Security update for global | 2024-07-22T09:11:32Z | 2024-07-22T09:11:32Z |
| opensuse-su-2024:14214-1 | corepack20-20.15.1-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14213-1 | java-22-openjdk-22.0.2.0-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14212-1 | git-2.45.2-2.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:14211-1 | gh-2.53.0-1.1 on GA media | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| opensuse-su-2024:0206-1 | Security update for cockpit | 2024-07-21T12:01:36Z | 2024-07-21T12:01:36Z |
| opensuse-su-2024:0205-1 | Security update for opera | 2024-07-20T18:01:28Z | 2024-07-20T18:01:28Z |
| opensuse-su-2024:14210-1 | weblate-5.6.2-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14209-1 | python310-sentry-sdk-2.10.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14208-1 | python310-Django4-4.2.14-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14207-1 | java-21-openjdk-21.0.4.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26157 | D-Link DIR-823G缓冲区溢出漏洞（CNVD-2025-26157） | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26108 | Microsoft Windows Server远程代码执行漏洞（CNVD-2025-26108） | 2025-10-17 | 2025-10-31 |
| cnvd-2025-26107 | Simple Food Ordering System editproduct.php文件上传漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26106 | Simple Food Ordering System editproduct.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26105 | Simple Food Ordering System editcategory.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26104 | Simple Food Ordering System addproduct.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26103 | Simple Food Ordering System addcategory.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26102 | Simple Food Ordering System addproduct.php文件上传漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26101 | Nero Social Networking Site index.php文件SQL注入漏洞 | 2025-05-14 | 2025-10-31 |
| cnvd-2025-26100 | Nero Social Networking Site friendprofile.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26099 | Nero Social Networking Site deletemessage.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26098 | Nero Social Networking Site addfriend.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26097 | Nero Social Networking Site acceptoffres.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26081 | Client Details System授权绕过漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26080 | Client Details System welcome.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26079 | Client Details System update-clients.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26078 | Client Details System welcome.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26077 | Client Details System manage-users.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26076 | Client Details System clientview.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26096 | Vehicle Management filter2.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26095 | Vehicle Management /filter1.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26094 | Vehicle Management /filter.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26093 | Vehicle Management addvehicle.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26092 | Vehicle Management addcompany.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26091 | Online Medicine Guide pharsignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26090 | Online Medicine Guide login.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26089 | Online Medicine Guide cussignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26088 | Medical Store Management System UpdateMedicines.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26087 | Medical Store Management System MainPanel.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26086 | Online Medicine Guide browsemdcn.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0472 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0471 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0470 | Multiples vulnérabilités dans les produits IBM | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0469 | Vulnérabilité dans les produits Elastic | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0468 | Multiples vulnérabilités dans PHP | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0467 | Vulnérabilité dans SolarWinds Serv-U | 2024-06-07T00:00:00.000000 | 2024-06-07T00:00:00.000000 |
| certfr-2024-avi-0466 | Multiples vulnérabilités dans les produits Elastic | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0465 | Vulnérabilité dans MongoDB PyMongo | 2024-06-06T00:00:00.000000 | 2024-06-06T00:00:00.000000 |
| certfr-2024-avi-0464 | Multiples vulnérabilités dans SolarWinds Platform | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0463 | Multiples vulnérabilités dans Ruby on Rails | 2024-06-05T00:00:00.000000 | 2024-06-05T00:00:00.000000 |
| certfr-2024-avi-0462 | Vulnérabilité dans SolarWinds Platform | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0461 | Multiples vulnérabilités dans Microsoft Edge | 2024-06-04T00:00:00.000000 | 2024-06-04T00:00:00.000000 |
| certfr-2024-avi-0460 | Vulnérabilité dans les caméras Synology | 2024-06-03T00:00:00.000000 | 2024-06-03T00:00:00.000000 |
| certfr-2024-avi-0459 | Multiples vulnérabilités dans les produits IBM | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0457 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0456 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0455 | Multiples vulnérabilités dans les produits Trend Micro | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0454 | Multiples vulnérabilités dans Google Chrome | 2024-05-31T00:00:00.000000 | 2024-05-31T00:00:00.000000 |
| certfr-2024-avi-0453 | Vulnérabilité dans Ivanti Endpoint Manager | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0452 | Multiples vulnérabilités dans StormShield SSL VPN Client | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0451 | Vulnérabilité dans Mitel MiVoice MX-ONE | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0450 | Multiples vulnérabilités dans Nginx | 2024-05-30T00:00:00.000000 | 2024-05-30T00:00:00.000000 |
| certfr-2024-avi-0449 | Vulnérabilité dans les produits Check Point | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0448 | Multiples vulnérabilités dans Nagios XI | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0447 | Vulnérabilité dans SPIP | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0446 | Vulnérabilité dans OpenSSL | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0445 | Vulnérabilité dans Spring Cloud Skipper | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0444 | Vulnérabilité dans Citrix Workspace app pour Mac | 2024-05-29T00:00:00.000000 | 2024-05-29T00:00:00.000000 |
| certfr-2024-avi-0443 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-27T00:00:00.000000 | 2024-05-27T00:00:00.000000 |