Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66057 |
6.3 (3.1)
|
WordPress Bold Page Builder plugin <= 5.5.2 - Cross Si… |
boldthemes |
Bold Page Builder |
2025-11-21T12:29:54.209Z | 2026-01-20T14:28:23.380Z |
| CVE-2025-66073 |
6.5 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Inj… |
Cozmoslabs |
WP Webhooks |
2025-11-21T12:29:56.667Z | 2026-01-20T14:28:23.347Z |
| CVE-2025-64638 |
5.3 (3.1)
|
WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - … |
OnPay.io |
OnPay.io for WooCommerce |
2025-12-16T08:12:51.913Z | 2026-01-20T14:28:23.328Z |
| CVE-2025-66072 |
9.8 (3.1)
|
WordPress UsersWP plugin <= 1.2.47 - Broken Access Con… |
Stiofan |
UsersWP |
2025-11-21T12:29:56.382Z | 2026-01-20T14:28:23.321Z |
| CVE-2025-66059 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.426Z | 2026-01-20T14:28:23.317Z |
| CVE-2025-66082 |
4.3 (3.1)
|
WordPress WpEvently plugin <= 5.0.4 - Broken Access Co… |
magepeopleteam |
WpEvently |
2025-11-21T12:29:57.578Z | 2026-01-20T14:28:23.316Z |
| CVE-2025-66056 |
4.3 (3.1)
|
WordPress Uncanny Automator plugin < 6.10.0 - Sensitiv… |
Uncanny Owl |
Uncanny Automator |
2025-11-21T12:29:54.000Z | 2026-01-20T14:28:23.283Z |
| CVE-2025-66062 |
3.7 (3.1)
|
WordPress WP YouTube Lyte plugin <= 1.7.28 - Open Redi… |
Frank Goossens |
WP YouTube Lyte |
2025-11-21T12:29:54.981Z | 2026-01-20T14:28:23.280Z |
| CVE-2025-66054 |
7.5 (3.1)
|
WordPress LearnPress plugin <= 4.2.9.4 - Broken Access… |
ThimPress |
LearnPress |
2025-12-18T07:22:17.129Z | 2026-01-20T14:28:23.253Z |
| CVE-2025-66060 |
5.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.618Z | 2026-01-20T14:28:23.244Z |
| CVE-2025-66079 |
7.3 (3.1)
|
WordPress Gutenverse Form plugin <= 2.2.0 - Broken Acc… |
Jegstudio |
Gutenverse Form |
2025-11-21T12:29:57.227Z | 2026-01-20T14:28:23.242Z |
| CVE-2025-66055 |
7.2 (3.1)
|
WordPress Email Subscribers & Newsletters plugin <= 5.… |
Icegram |
Email Subscribers & Newsletters |
2025-11-21T12:29:53.666Z | 2026-01-20T14:28:23.237Z |
| CVE-2025-66064 |
5.3 (3.1)
|
WordPress Giveaways and Contests by RafflePress plugin… |
Syed Balkhi |
Giveaways and Contests by RafflePress |
2025-11-21T12:29:55.338Z | 2026-01-20T14:28:23.234Z |
| CVE-2025-66067 |
5.4 (3.1)
|
WordPress Funnel Builder by FunnelKit plugin <= 3.13.1… |
FunnelKit |
Funnel Builder by FunnelKit |
2025-11-21T12:29:55.849Z | 2026-01-20T14:28:23.233Z |
| CVE-2025-66075 |
4.2 (3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C… |
WP Legal Pages |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent |
2025-11-21T12:29:56.896Z | 2026-01-20T14:28:23.221Z |
| CVE-2025-66080 |
5.3 (3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C… |
WP Legal Pages |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent |
2025-12-30T16:10:40.664Z | 2026-01-20T14:28:23.215Z |
| CVE-2025-66069 |
4.3 (3.1)
|
WordPress PPOM for WooCommerce plugin <= 33.0.16 - Bro… |
Themeisle |
PPOM for WooCommerce |
2025-11-21T12:29:56.025Z | 2026-01-20T14:28:23.215Z |
| CVE-2025-64384 |
6.3 (3.1)
|
WordPress JetFormBuilder plugin <= 3.5.3 - Broken Acce… |
jetmonsters |
JetFormBuilder |
2025-11-13T09:24:36.292Z | 2026-01-20T14:28:23.177Z |
| CVE-2025-66074 |
9 (3.1)
|
WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File… |
Cozmoslabs |
WP Webhooks |
2025-12-18T07:22:17.689Z | 2026-01-20T14:28:23.166Z |
| CVE-2025-66071 |
9.8 (3.1)
|
WordPress Custom Order Numbers for WooCommerce plugin … |
tychesoftwares |
Custom Order Numbers for WooCommerce |
2025-11-21T12:29:56.210Z | 2026-01-20T14:28:23.159Z |
| CVE-2025-66061 |
4.3 (3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.13.0… |
Craig Hewitt |
Seriously Simple Podcasting |
2025-11-21T12:29:54.807Z | 2026-01-20T14:28:23.136Z |
| CVE-2025-66066 |
6.1 (3.1)
|
WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scr… |
EnvoThemes |
Envo Extra |
2025-11-21T12:29:55.680Z | 2026-01-20T14:28:23.127Z |
| CVE-2025-66070 |
7.5 (3.1)
|
WordPress wpForo Forum plugin <= 2.4.10 - Broken Acces… |
Tomdever |
wpForo Forum |
2025-12-18T07:22:17.491Z | 2026-01-20T14:28:23.120Z |
| CVE-2025-64634 |
8.8 (3.1)
|
WordPress Avada theme <= 7.13.1 - Broken Access Contro… |
ThemeFusion |
Avada |
2025-12-16T08:12:51.156Z | 2026-01-20T14:28:23.104Z |
| CVE-2025-66058 |
6.5 (3.1)
|
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3… |
PickPlugins |
Post Grid and Gutenberg Blocks |
2025-12-18T16:15:15.498Z | 2026-01-20T14:28:23.035Z |
| CVE-2025-64635 |
5.4 (3.1)
|
WordPress Feeds for YouTube plugin <= 2.4.0 - Broken A… |
Syed Balkhi |
Feeds for YouTube |
2025-12-16T08:12:51.705Z | 2026-01-20T14:28:23.027Z |
| CVE-2025-64633 |
5.3 (3.1)
|
WordPress Norebro Extra plugin <= 1.6.8 - Content Inje… |
colabrio |
Norebro Extra |
2025-12-16T08:12:50.943Z | 2026-01-20T14:28:23.014Z |
| CVE-2025-66053 |
6.5 (3.1)
|
WordPress Enfold theme <= 7.1.2 - Cross Site Scripting… |
Kriesi |
Enfold |
2025-11-21T12:29:53.446Z | 2026-01-20T14:28:22.999Z |
| CVE-2025-66063 |
5.4 (3.1)
|
WordPress WP Google Review Slider plugin <= 17.4 - Bro… |
jgwhite33 |
WP Google Review Slider |
2025-11-21T12:29:55.169Z | 2026-01-20T14:28:22.981Z |
| CVE-2025-64632 |
5.3 (3.1)
|
WordPress Google XML Sitemaps plugin <= 4.1.21 - Broke… |
Auctollo |
Google XML Sitemaps |
2025-12-16T08:12:50.749Z | 2026-01-20T14:28:22.956Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-67520 |
9.8 (3.1)
|
WordPress Media Library Tools plugin <= 1.6.15 - SQL I… |
Tiny Solutions |
Media Library Tools |
2025-12-09T14:13:58.651Z | 2026-01-20T14:28:24.948Z |
| CVE-2025-67519 |
9.8 (3.1)
|
WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection… |
Shahjahan Jewel |
Ninja Tables |
2025-12-09T14:13:58.092Z | 2026-01-20T14:28:25.166Z |
| CVE-2025-67518 |
9.8 (3.1)
|
WordPress Accordion Slider PRO plugin <= 1.2 - SQL Inj… |
LambertGroup |
Accordion Slider PRO |
2025-12-09T14:13:57.826Z | 2026-01-20T14:28:25.371Z |
| CVE-2025-67517 |
9.8 (3.1)
|
WordPress ArtPlacer Widget plugin <= 2.22.9.2 - SQL In… |
artplacer |
ArtPlacer Widget |
2025-12-09T14:13:57.629Z | 2026-01-20T14:28:25.209Z |
| CVE-2025-67516 |
9.8 (3.1)
|
WordPress Store Locator WordPress plugin <= 1.6.2 - SQ… |
Agile Logix |
Store Locator WordPress |
2025-12-09T14:13:57.425Z | 2026-01-20T14:28:25.331Z |
| CVE-2025-67515 |
9.8 (3.1)
|
WordPress Wilmër theme < 3.5 - Local File Inclusion vu… |
Mikado-Themes |
Wilmër |
2025-12-09T14:13:57.222Z | 2026-01-20T14:28:25.187Z |
| CVE-2025-67474 |
4.3 (3.1)
|
WordPress ForumWP plugin <= 2.1.4 - Broken Access Cont… |
Ultimate Member |
ForumWP |
2025-12-09T14:13:57.009Z | 2026-01-20T14:28:25.033Z |
| CVE-2025-67473 |
8.8 (3.1)
|
WordPress CWW Companion plugin <= 1.3.2 - Cross Site R… |
codeworkweb |
CWW Companion |
2025-12-09T14:13:56.814Z | 2026-01-20T14:28:25.508Z |
| CVE-2025-67472 |
8.8 (3.1)
|
WordPress Online Booking & Scheduling Calendar for Wor… |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2025-12-09T14:13:56.599Z | 2026-01-20T14:28:25.295Z |
| CVE-2025-67471 |
8.8 (3.1)
|
WordPress Quick Contact Form plugin <= 8.2.5 - Cross S… |
Saad Iqbal |
Quick Contact Form |
2025-12-09T14:13:56.242Z | 2026-01-20T14:28:25.221Z |
| CVE-2025-67470 |
4.3 (3.1)
|
WordPress Portfolio and Projects plugin <= 1.5.5 - Sen… |
Essential Plugin |
Portfolio and Projects |
2025-12-09T14:13:56.054Z | 2026-01-20T14:28:25.130Z |
| CVE-2025-67469 |
8.8 (3.1)
|
WordPress PDF Thumbnail Generator plugin <= 1.4 - Cros… |
kubiq |
PDF Thumbnail Generator |
2025-12-09T14:13:55.861Z | 2026-01-20T14:28:25.210Z |
| CVE-2025-67468 |
4.3 (3.1)
|
WordPress Integration for Salesforce and Contact Form … |
CRM Perks |
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms |
2025-12-09T14:13:55.664Z | 2026-01-20T14:28:25.574Z |
| CVE-2025-67467 |
4.5 (3.1)
|
WordPress GiveWP plugin <= 4.13.1 - Cross Site Request… |
StellarWP |
GiveWP |
2025-12-09T15:03:54.450Z | 2026-01-20T14:28:25.119Z |
| CVE-2025-67466 |
8.1 (3.1)
|
WordPress Trinity Audio plugin <= 5.23.3 - Broken Acce… |
sergiotrinity |
Trinity Audio |
2025-12-09T14:13:55.460Z | 2026-01-20T14:28:25.210Z |
| CVE-2025-67465 |
8.8 (3.1)
|
WordPress Simple Link Directory plugin <= 8.8.3 - Cros… |
QuantumCloud |
Simple Link Directory |
2025-12-09T14:13:55.262Z | 2026-01-20T14:28:24.889Z |
| CVE-2025-66534 |
8.8 (3.1)
|
WordPress The Aisle theme <= 2.9 - Broken Access Contr… |
Elated-Themes |
The Aisle |
2025-12-09T14:13:54.991Z | 2026-01-20T14:28:25.176Z |
| CVE-2025-66533 |
7.8 (3.1)
|
WordPress GiveWP plugin <= 4.13.1 - Arbitrary Shortocd… |
StellarWP |
GiveWP |
2025-12-09T15:03:54.194Z | 2026-01-20T14:28:25.106Z |
| CVE-2025-66532 |
8.8 (3.1)
|
WordPress Powerlift theme < 3.2.1 - Broken Access Cont… |
Mikado-Themes |
Powerlift |
2025-12-09T14:13:54.794Z | 2026-01-20T14:28:24.714Z |
| CVE-2025-66531 |
8.8 (3.1)
|
WordPress Salon booking system plugin <= 10.30.3 - Cro… |
Dimitri Grassi |
Salon booking system |
2025-12-09T14:13:54.558Z | 2026-01-20T14:28:24.641Z |
| CVE-2025-66530 |
8.8 (3.1)
|
WordPress Webba Booking plugin <= 6.2.1 - Broken Acces… |
Webba Appointment Booking |
Webba Booking |
2025-12-09T14:13:53.897Z | 2026-01-20T14:28:24.537Z |
| CVE-2025-66529 |
8.8 (3.1)
|
WordPress Chartify plugin <= 3.6.3 - Cross Site Reques… |
Ays Pro |
Chartify |
2025-12-09T14:13:53.647Z | 2026-01-20T14:28:24.493Z |
| CVE-2025-66528 |
8.1 (3.1)
|
WordPress Thank You Page Customizer for WooCommerce pl… |
VillaTheme |
Thank You Page Customizer for WooCommerce |
2025-12-09T14:13:53.449Z | 2026-01-20T14:28:24.582Z |
| CVE-2025-66527 |
4.3 (3.1)
|
WordPress Lobo theme <= 2.8.6 - Broken Access Control … |
VanKarWai |
Lobo |
2025-12-09T14:13:53.255Z | 2026-01-20T14:28:24.494Z |
| CVE-2025-66526 |
4.3 (3.1)
|
WordPress Tablesome plugin <= 1.1.34 - Broken Access C… |
Essekia |
Tablesome |
2025-12-09T14:13:53.002Z | 2026-01-20T14:28:24.435Z |
| CVE-2025-66525 |
4.3 (3.1)
|
WordPress Elastic Email Sender plugin <= 1.2.20 - Brok… |
Elastic Email |
Elastic Email Sender |
2025-12-09T14:13:52.779Z | 2026-01-20T14:28:24.494Z |
| CVE-2025-66167 |
5.4 (3.1)
|
WordPress Lottier plugin <= 1.1.1 - Broken Access Cont… |
merkulove |
Lottier |
2025-12-16T08:12:56.806Z | 2026-01-20T14:28:24.481Z |
| CVE-2025-66166 |
5.4 (3.1)
|
WordPress Lottier for Elementor plugin <= 1.0.9 - Brok… |
merkulove |
Lottier for Elementor |
2025-12-16T08:12:56.603Z | 2026-01-20T14:28:24.430Z |
| CVE-2025-66165 |
5.4 (3.1)
|
WordPress Lottier for WPBakery plugin <= 1.1.7 - Broke… |
merkulove |
Lottier for WPBakery |
2025-12-16T08:12:56.408Z | 2026-01-20T14:28:24.537Z |
| CVE-2025-66164 |
5.4 (3.1)
|
WordPress Laser plugin <= 1.1.1 - Broken Access Contro… |
merkulove |
Laser |
2025-12-16T08:12:56.211Z | 2026-01-20T14:28:24.509Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-67515 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T16:18:24.407 | 2026-01-20T15:19:15.797 |
| fkie_cve-2025-67474 | Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectl… | 2025-12-09T16:18:23.903 | 2026-01-20T15:19:15.670 |
| fkie_cve-2025-67473 | Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… | 2025-12-09T16:18:23.770 | 2026-01-20T15:19:15.550 |
| fkie_cve-2025-67472 | Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for W… | 2025-12-09T16:18:23.590 | 2026-01-20T15:19:15.410 |
| fkie_cve-2025-67471 | Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… | 2025-12-09T16:18:23.417 | 2026-01-20T15:19:15.287 |
| fkie_cve-2025-67470 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… | 2025-12-09T16:18:23.270 | 2026-01-20T15:19:15.163 |
| fkie_cve-2025-67469 | Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… | 2025-12-09T16:18:23.123 | 2026-01-20T15:19:15.043 |
| fkie_cve-2025-67468 | Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… | 2025-12-09T16:18:22.947 | 2026-01-20T15:19:14.917 |
| fkie_cve-2025-67467 | Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … | 2025-12-09T16:18:22.767 | 2026-01-20T15:19:14.793 |
| fkie_cve-2025-67466 | Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … | 2025-12-09T16:18:22.613 | 2026-01-20T15:19:14.663 |
| fkie_cve-2025-67465 | Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-d… | 2025-12-09T16:18:22.483 | 2026-01-20T15:19:14.537 |
| fkie_cve-2025-66534 | Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… | 2025-12-09T16:18:20.960 | 2026-01-20T15:19:14.400 |
| fkie_cve-2025-66533 | Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… | 2025-12-09T16:18:20.760 | 2026-01-20T15:19:14.270 |
| fkie_cve-2025-66532 | Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… | 2025-12-09T16:18:20.607 | 2026-01-20T15:19:14.147 |
| fkie_cve-2025-66531 | Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-bookin… | 2025-12-09T16:18:20.433 | 2026-01-20T15:19:14.020 |
| fkie_cve-2025-66530 | Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite a… | 2025-12-09T16:18:20.307 | 2026-01-20T15:19:13.900 |
| fkie_cve-2025-66529 | Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site… | 2025-12-09T16:18:20.157 | 2026-01-20T15:19:13.770 |
| fkie_cve-2025-66528 | Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-tha… | 2025-12-09T16:18:20.023 | 2026-01-20T15:19:13.637 |
| fkie_cve-2025-66527 | Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured… | 2025-12-09T16:18:19.887 | 2026-01-20T15:19:13.507 |
| fkie_cve-2025-66526 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-09T16:18:19.740 | 2026-01-20T15:19:13.380 |
| fkie_cve-2025-66525 | Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allo… | 2025-12-09T16:18:19.600 | 2026-01-20T15:19:13.240 |
| fkie_cve-2025-66167 | Missing Authorization vulnerability in merkulove Lottier lottier-gutenberg allows Exploiting Incorr… | 2025-12-16T09:15:59.057 | 2026-01-20T15:19:13.110 |
| fkie_cve-2025-66166 | Missing Authorization vulnerability in merkulove Lottier for Elementor lottier-elementor allows Exp… | 2025-12-16T09:15:58.933 | 2026-01-20T15:19:12.987 |
| fkie_cve-2025-66165 | Missing Authorization vulnerability in merkulove Lottier for WPBakery lottier-wpbakery allows Explo… | 2025-12-16T09:15:58.807 | 2026-01-20T15:19:12.860 |
| fkie_cve-2025-66164 | Missing Authorization vulnerability in merkulove Laser laser allows Exploiting Incorrectly Configur… | 2025-12-16T09:15:58.680 | 2026-01-20T15:19:12.733 |
| fkie_cve-2025-66163 | Missing Authorization vulnerability in merkulove Masker for Elementor masker-elementor allows Explo… | 2025-12-16T09:15:58.547 | 2026-01-20T15:19:12.593 |
| fkie_cve-2025-66162 | Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Explo… | 2025-12-16T09:15:58.413 | 2026-01-20T15:19:12.467 |
| fkie_cve-2025-66161 | Missing Authorization vulnerability in merkulove Grider for Elementor grider-elementor allows Explo… | 2025-12-16T09:15:58.290 | 2026-01-20T15:19:12.340 |
| fkie_cve-2025-66160 | Missing Authorization vulnerability in merkulove Select Graphist for Elementor Graphist for Element… | 2025-12-31T17:15:50.783 | 2026-01-20T15:19:12.247 |
| fkie_cve-2025-66159 | Missing Authorization vulnerability in merkulove Walker for Elementor allows Exploiting Incorrectly… | 2025-12-31T17:15:50.583 | 2026-01-20T15:19:12.150 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-98fv-j8hf-wx9g |
5.3 (3.1)
|
Missing Authorization vulnerability in wbcomdesigns Wbcom Designs lock-my-bp allows Exploiting Inco… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-96gg-frg8-8w89 |
4.3 (3.1)
|
Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploit… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-89qm-72jr-4h8f |
5.3 (3.1)
|
Missing Authorization vulnerability in GSheetConnector by WesternDeal WPForms Google Sheet Connecto… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-85xv-hm5x-j45g |
5.3 (3.1)
|
Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Explo… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-85p4-5wq2-7vqh |
5.3 (3.1)
|
Missing Authorization vulnerability in scriptsbundle AdForest adforest allows Exploiting Incorrectl… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-6h34-3hxh-5x3j |
4.3 (3.1)
|
Missing Authorization vulnerability in Joe Dolson My Calendar my-calendar allows Exploiting Incorre… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-69r3-vvfx-9ff9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in PSM Plugins SupportCandy supportcandy allows Cro… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-64jp-2fgh-jcqm |
4.3 (3.1)
|
Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting … | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-5cjc-j8vj-q9qv |
4.3 (3.1)
|
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on… | 2025-12-16T09:31:07Z | 2026-01-20T15:32:12Z |
| ghsa-52v3-p44c-8m9p |
5.3 (3.1)
|
Missing Authorization vulnerability in Constant Contact Constant Contact + WooCommerce constant-con… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:12Z |
| ghsa-wpw8-h26f-j4pp |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-wmh4-8rcg-2qqf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-wj54-qjrq-9gwv |
6.5 (3.1)
|
Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly C… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-wh25-mmxh-64f6 |
5.3 (3.1)
|
Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured … | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-wfxf-j4rg-w6j6 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-w8rw-wf3g-63cx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-vrh5-pxv9-qjvv |
5.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-v2h6-hwp6-67qv |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in sizam R… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-pvpc-5j5f-m2fm |
5.3 (3.1)
|
Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorr… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-p8jj-567m-jw77 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-mqq8-cpfh-hpm3 |
6.5 (3.1)
|
Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-m4cg-3fm9-j6x9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-jxgx-9wwv-2g4h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-j934-wxvm-8fw9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hrc4-whhq-v375 |
6.5 (3.1)
|
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hgf5-67r8-3fcm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-h6rm-qgch-65pr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-gwq3-r365-h2g8 |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-fqq6-293f-f549 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-f36m-hf38-h6rh |
5.3 (3.1)
|
Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-286 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorF… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.621580Z |
| pysec-2020-285 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` ar… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.433318Z |
| pysec-2020-284 |
|
In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.248668Z |
| pysec-2020-283 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:42.062393Z |
| pysec-2020-282 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in T… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.876848Z |
| pysec-2020-281 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.679840Z |
| pysec-2020-280 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.630526Z |
| pysec-2020-279 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.569566Z |
| pysec-2020-278 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.523521Z |
| pysec-2020-277 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.476873Z |
| pysec-2020-276 |
|
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` … | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.429939Z |
| pysec-2020-275 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation o… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.380854Z |
| pysec-2020-274 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmpty… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:41.172167Z |
| pysec-2020-273 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` c… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:40.985674Z |
| pysec-2020-272 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlp… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:40.896350Z |
| pysec-2020-271 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `d… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:40.816458Z |
| pysec-2020-270 |
|
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Swit… | tensorflow-cpu | 2020-09-25T19:15:00Z | 2021-12-09T06:34:40.732914Z |
| pysec-2021-439 |
|
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for … | django | 2021-12-08T00:15:00Z | 2021-12-08T02:30:49.294438Z |
| pysec-2021-438 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-12-01T11:15:00Z | 2021-12-02T21:26:01.187346Z |
| pysec-2021-437 |
|
A flaw was found in python-pip in the way it handled Unicode separators in git references… | pip | 2021-11-10T18:15:00Z | 2021-11-29T23:42:09.374676Z |
| pysec-2021-436 |
|
Synapse is a package for Matrix homeservers written in Python 3/Twisted. Prior to version… | matrix-synapse | 2021-11-23T20:15:00Z | 2021-11-29T23:11:29.870597Z |
| pysec-2021-435 |
|
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed… | apache-superset | 2021-11-17T15:15:00Z | 2021-11-29T23:10:59.097625Z |
| pysec-2021-434 |
|
Apache Superset up to and including 1.3.1 allowed for database connections password leak … | apache-superset | 2021-11-12T19:15:00Z | 2021-11-29T23:10:59.053614Z |
| pysec-2021-433 |
|
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated b… | s3scanner | 2021-11-29T03:15:00Z | 2021-11-29T21:27:52.731426Z |
| pysec-2021-432 |
|
Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before v… | nanopb | 2021-03-23T18:15:00Z | 2021-11-24T22:47:12.152718Z |
| pysec-2018-106 |
|
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.locati… | mayan-edms | 2018-09-03T19:29:00Z | 2021-11-24T22:47:09.222926Z |
| pysec-2019-221 |
|
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an … | homeassistant | 2019-09-23T16:15:00Z | 2021-11-24T22:47:02.221265Z |
| pysec-2020-268 |
|
In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBui… | easybuild | 2020-03-19T17:15:00Z | 2021-11-24T22:46:59.562632Z |
| pysec-2018-105 |
|
Incorrect implementation of access controls allows remote users to override repository re… | borgbackup | 2018-02-08T23:29:00Z | 2021-11-24T22:46:40.919619Z |
| pysec-2021-431 |
|
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generat… | django-helpdesk | 2021-11-19T12:15:00Z | 2021-11-23T19:22:08.078180Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32568 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.655991Z |
| gsd-2024-32529 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.654045Z |
| gsd-2024-32571 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.653845Z |
| gsd-2024-32567 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.652232Z |
| gsd-2024-32599 | Improper Control of Generation of Code ('Code Injection') vulnerability in Deepak anand W… | 2024-04-16T05:01:54.650918Z |
| gsd-2024-32549 | Cross-Site Request Forgery (CSRF) vulnerability in Microkid Related Posts for WordPress a… | 2024-04-16T05:01:54.650720Z |
| gsd-2024-32513 | Insertion of Sensitive Information into Log File vulnerability in AdTribes.Io Product Fee… | 2024-04-16T05:01:54.642958Z |
| gsd-2024-32546 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.642507Z |
| gsd-2024-32587 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.642307Z |
| gsd-2024-32538 | Cross-Site Request Forgery (CSRF) vulnerability in Joshua Eldridge Easy CountDowner allow… | 2024-04-16T05:01:54.638995Z |
| gsd-2024-32524 | Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.Th… | 2024-04-16T05:01:54.638544Z |
| gsd-2024-32583 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.638287Z |
| gsd-2024-32522 | Missing Authorization vulnerability in Jaed Mosharraf & Pluginbazar Team Open Close WooCo… | 2024-04-16T05:01:54.628830Z |
| gsd-2024-32545 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.627067Z |
| gsd-2024-32553 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.626870Z |
| gsd-2024-32520 | Missing Authorization vulnerability in WPClever WPC Grouped Product for WooCommerce.This … | 2024-04-16T05:01:54.624884Z |
| gsd-2024-32556 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.622736Z |
| gsd-2024-32591 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.622040Z |
| gsd-2024-32506 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio… | 2024-04-16T05:01:54.618621Z |
| gsd-2024-32511 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.618177Z |
| gsd-2024-32552 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.617923Z |
| gsd-2024-32548 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.614044Z |
| gsd-2024-32531 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.612779Z |
| gsd-2024-32564 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.612566Z |
| gsd-2024-32581 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.611418Z |
| gsd-2024-32532 | Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Spee… | 2024-04-16T05:01:54.610205Z |
| gsd-2024-32566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.607741Z |
| gsd-2024-32595 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-16T05:01:54.607048Z |
| gsd-2024-32550 | Cross-Site Request Forgery (CSRF) vulnerability in BMI Adult & Kid Calculator allows Stor… | 2024-04-16T05:01:54.605868Z |
| gsd-2024-32491 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-16T05:01:54.605646Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-7838 | Malicious code in testjson3 (PyPI) | 2024-07-21T01:25:45Z | 2025-12-11T09:27:54Z |
| mal-2024-12372 | Malicious code in zip-me (PyPI) | 2024-12-16T10:40:50Z | 2025-12-11T09:27:54Z |
| mal-2024-12371 | Malicious code in yt-yson-bindings (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12370 | Malicious code in whoisbuild (PyPI) | 2024-07-06T17:16:40Z | 2025-12-11T09:27:54Z |
| mal-2024-12368 | Malicious code in wave-opensdk (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12367 | Malicious code in ttat-api-test (PyPI) | 2024-08-22T22:25:03Z | 2025-12-11T09:27:54Z |
| mal-2024-12366 | Malicious code in ttat-api (PyPI) | 2024-08-22T22:25:03Z | 2025-12-11T09:27:54Z |
| mal-2024-12361 | Malicious code in test-tool-devdevrl-hackerone (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:54Z |
| mal-2024-12360 | Malicious code in test-packages2 (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:54Z |
| mal-2024-12359 | Malicious code in test-packages1 (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:54Z |
| mal-2024-12358 | Malicious code in szn-zbozi-ab-testing-fulltext (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12355 | Malicious code in szn-sasanka (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12354 | Malicious code in szn-rain-client (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12353 | Malicious code in subsys-counter (PyPI) | 2024-08-22T22:25:03Z | 2025-12-11T09:27:54Z |
| mal-2024-12352 | Malicious code in stationschedule (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-12349 | Malicious code in spl-types (PyPI) | 2024-07-03T17:04:18Z | 2025-12-11T09:27:54Z |
| mal-2024-12347 | Malicious code in sol-instruct (PyPI) | 2024-07-03T17:04:18Z | 2025-12-11T09:27:54Z |
| mal-2024-12346 | Malicious code in soali (PyPI) | 2024-07-28T23:19:33Z | 2025-12-11T09:27:54Z |
| mal-2024-12345 | Malicious code in soal (PyPI) | 2024-07-28T23:19:33Z | 2025-12-11T09:27:54Z |
| mal-2024-12344 | Malicious code in shiva-rao23 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:54Z |
| mal-2024-12343 | Malicious code in shinchina (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-11752 | Malicious code in zero123 (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:54Z |
| mal-2024-11751 | Malicious code in zebo (PyPI) | 2024-11-16T23:31:21Z | 2025-12-11T09:27:54Z |
| mal-2024-11750 | Malicious code in xsilyxd (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:54Z |
| mal-2024-11749 | Malicious code in websend (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:54Z |
| mal-2024-11748 | Malicious code in vsc-config (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-11747 | Malicious code in vsc-accountpage-clients (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:54Z |
| mal-2024-11745 | Malicious code in vizplotlib (PyPI) | 2024-10-03T15:11:09Z | 2025-12-11T09:27:54Z |
| mal-2024-11744 | Malicious code in viplotlib (PyPI) | 2024-10-03T15:11:09Z | 2025-12-11T09:27:54Z |
| mal-2024-11743 | Malicious code in uuss (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2188 | Splunk Splunk Enterprise: Mehrere Schwachstellen | 2025-10-01T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2184 | Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-01T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2183 | OPNsense: Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-01T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2182 | Dell PowerScale: Mehrere Schwachstellen | 2025-10-01T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2180 | Red Hat libmspack: Schwachstelle ermöglicht Offenlegung von Informationen | 2020-04-28T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-2043 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-1980 | IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0541 | FreeType: Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0274 | NGINX: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-05T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0225 | Dell PowerProtect Data Domain: Mehrere Schwachstellen | 2025-01-30T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0194 | libxml2: Schwachstelle ermöglicht remote Code Execution | 2025-01-26T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2025-0172 | GNU libc: Schwachstelle ermöglicht Denial of Service | 2025-01-22T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-3426 | Intel Prozessor (Xeon): Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-2240 | CUPS: Mehrere Schwachstellen ermöglichen Ausführung von beliebigem Programmcode | 2024-09-26T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-2074 | Red Hat Enterprise Linux (glib2): Schwachstelle ermöglicht Manipulation von Dateien | 2024-09-08T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-1863 | NGINX und NGINX Plus: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-14T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-1792 | MongoDB: Schwachstelle ermöglicht Privilegieneskalation | 2024-08-07T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-1562 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-07-09T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-1506 | Dell BSAFE: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-07-02T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0813 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2024-04-08T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0804 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-04-04T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0583 | MongoDB: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-03-07T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0488 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-02-26T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0195 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-01-24T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2024-0092 | Red Hat SQLite: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-01-15T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-3175 | libssh: Mehrere Schwachstellen | 2023-12-18T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-3087 | Linux Kernel: Mehrere Schwachstellen | 2023-12-07T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-1751 | systemd: Schwachstelle ermöglicht Manipulation von Einträgen | 2023-07-13T22:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0157 | Red Hat OpenShift: Mehrere Schwachstellen | 2023-01-19T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| wid-sec-w-2023-0152 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-01-18T23:00:00.000+00:00 | 2025-10-01T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:3715 | Red Hat Security Advisory: OpenShift Container Platform 4.12.59 packages and security update | 2024-06-12T07:34:34+00:00 | 2026-01-22T10:26:47+00:00 |
| rhsa-2024:3683 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.2 security update | 2024-06-06T12:25:31+00:00 | 2026-01-22T10:26:45+00:00 |
| rhsa-2024:3637 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.3.0 for RHEL 9 | 2024-07-01T00:39:38+00:00 | 2026-01-22T10:26:44+00:00 |
| rhsa-2024:3636 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update | 2024-06-05T14:46:12+00:00 | 2026-01-22T10:26:42+00:00 |
| rhsa-2024:3635 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2024-06-05T14:47:22+00:00 | 2026-01-22T10:26:42+00:00 |
| rhsa-2024:3634 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update | 2024-06-05T14:47:02+00:00 | 2026-01-22T10:26:38+00:00 |
| rhsa-2024:3617 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9 | 2024-07-01T00:52:46+00:00 | 2026-01-22T10:26:33+00:00 |
| rhsa-2024:2874 | Red Hat Security Advisory: OpenShift Container Platform 4.13.42 security and extras update | 2024-05-23T06:22:23+00:00 | 2026-01-22T10:26:22+00:00 |
| rhsa-2024:2781 | Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update | 2024-05-16T16:12:11+00:00 | 2026-01-22T10:26:20+00:00 |
| rhsa-2024:2666 | Red Hat Security Advisory: OpenShift Container Platform 4.14.24 security and extras update | 2024-05-09T15:00:25+00:00 | 2026-01-22T10:26:12+00:00 |
| rhsa-2024:2550 | Red Hat Security Advisory: buildah bug fix update | 2024-04-30T13:38:22+00:00 | 2026-01-22T10:26:09+00:00 |
| rhsa-2024:2548 | Red Hat Security Advisory: podman security and bug fix update | 2024-04-30T13:39:21+00:00 | 2026-01-22T10:26:02+00:00 |
| rhsa-2024:1925 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update | 2024-04-18T12:41:00+00:00 | 2026-01-22T10:25:56+00:00 |
| rhsa-2024:1874 | Red Hat Security Advisory: rhc-worker-script security and enhancement update | 2024-04-18T02:08:28+00:00 | 2026-01-22T10:25:52+00:00 |
| rhsa-2024:1795 | Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements | 2024-04-11T21:29:12+00:00 | 2026-01-22T10:25:50+00:00 |
| rhsa-2024:1665 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.6 security and bug fix updates | 2024-04-03T18:43:56+00:00 | 2026-01-22T10:25:39+00:00 |
| rhsa-2024:1616 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9 | 2024-07-01T00:28:51+00:00 | 2026-01-22T10:25:32+00:00 |
| rhsa-2024:1559 | Red Hat Security Advisory: OpenShift Container Platform 4.15.6 bug fix and security update | 2024-04-02T19:33:26+00:00 | 2026-01-22T10:25:19+00:00 |
| rhsa-2024:1538 | Red Hat Security Advisory: OpenShift Container Platform 4.12 low-latency extras security update | 2024-03-27T15:07:29+00:00 | 2026-01-22T10:25:18+00:00 |
| rhsa-2024:1537 | Red Hat Security Advisory: OpenShift Container Platform 4.13.38 low-latency extras security update | 2024-03-27T15:03:41+00:00 | 2026-01-22T10:25:17+00:00 |
| rhsa-2024:1508 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T14:39:42+00:00 | 2026-01-22T10:25:14+00:00 |
| rhsa-2024:1507 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T14:21:24+00:00 | 2026-01-22T10:25:09+00:00 |
| rhsa-2024:1474 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T15:00:48+00:00 | 2026-01-22T10:25:07+00:00 |
| rhsa-2024:1461 | Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update | 2024-03-27T00:45:48+00:00 | 2026-01-22T10:25:07+00:00 |
| rhsa-2024:1363 | Red Hat Security Advisory: OpenShift Container Platform 4.15.3 low-latency extras security update | 2024-03-19T22:11:56+00:00 | 2026-01-22T10:24:58+00:00 |
| rhsa-2024:1362 | Red Hat Security Advisory: OpenShift Container Platform 4.14.17 low-latency extras security update | 2024-03-20T11:40:31+00:00 | 2026-01-22T10:24:58+00:00 |
| rhsa-2024:10852 | Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI | 2024-12-05T14:54:56+00:00 | 2026-01-22T10:24:46+00:00 |
| rhsa-2024:10147 | Red Hat Security Advisory: OpenShift Container Platform 4.16.24 security update | 2024-11-26T18:45:35+00:00 | 2026-01-22T10:24:42+00:00 |
| rhsa-2024:0043 | Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update | 2024-06-27T13:18:33+00:00 | 2026-01-22T10:24:37+00:00 |
| rhsa-2022:2265 | Red Hat Security Advisory: OpenShift Container Platform 4.6.58 security and extras update | 2022-05-26T20:06:24+00:00 | 2026-01-22T10:10:14+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-166-09 | Siemens Solid Edge | 2023-06-13T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-22-132-06 | Siemens SIMATIC WinCC | 2022-05-10T00:00:00.000000Z | 2023-11-14T00:00:00.000000Z |
| icsa-23-313-02 | Hitachi Energy eSOMS | 2023-11-09T07:00:00.000000Z | 2023-11-09T07:00:00.000000Z |
| icsa-23-313-01 | Johnson Controls Quantum HD Unity | 2023-11-09T07:00:00.000000Z | 2023-11-09T07:00:00.000000Z |
| icsa-22-333-03 | Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A) | 2022-11-29T07:00:00.000000Z | 2023-11-09T07:00:00.000000Z |
| icsa-21-334-02 | Mitsubishi Electric MELSEC and MELIPC Series (Update G) | 2021-11-30T07:00:00.000000Z | 2023-11-09T07:00:00.000000Z |
| icsa-23-311-01 | GE MiCOM S1 Agile | 2023-11-07T07:00:00.000000Z | 2023-11-07T07:00:00.000000Z |
| icsa-23-306-06 | Schneider Electric SpaceLogic C-Bus Toolkit | 2023-11-02T06:00:00.000000Z | 2023-11-02T06:00:00.000000Z |
| icsa-23-306-05 | Weintek EasyBuilder Pro | 2023-11-02T06:00:00.000000Z | 2023-11-02T06:00:00.000000Z |
| icsa-23-306-04 | Franklin Fueling System TS-550 | 2023-11-02T06:00:00.000000Z | 2023-11-02T06:00:00.000000Z |
| icsa-23-306-01 | Red Lion Crimson | 2023-11-02T06:00:00.000000Z | 2023-11-02T06:00:00.000000Z |
| icsa-23-304-03 | Zavio IP Camera | 2023-10-31T06:00:00.000000Z | 2023-10-31T06:00:00.000000Z |
| icsa-23-304-02 | INEA ME RTU | 2023-10-31T06:00:00.000000Z | 2023-10-31T06:00:00.000000Z |
| icsma-23-194-01 | BD Alaris System with Guardrails Suite MX | 2023-07-13T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-08 | Sielco Radio Link and Analog FM Transmitters | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-07 | Sielco PolyEco FM Transmitter | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-06 | Rockwell Automation FactoryTalk Services Platform | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-05 | Rockwell Automation FactoryTalk View Site Edition | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-04 | Rockwell Automation Arena | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-02 | Centralite Pearl Thermostat | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-299-01 | Dingtian DT-R002 | 2023-10-26T06:00:00.000000Z | 2023-10-26T06:00:00.000000Z |
| icsa-23-143-02 | Hitachi Energy's RTU500 Series Product (UPDATE B) | 2023-05-05T06:00:00.000000Z | 2023-10-19T06:00:00.000000Z |
| icsa-23-290-02 | Rockwell Automation FactoryTalk Linx | 2023-10-17T06:00:00.000000Z | 2023-10-17T06:00:00.000000Z |
| icsa-23-290-01 | Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products | 2023-10-17T06:00:00.000000Z | 2023-10-17T06:00:00.000000Z |
| icsma-23-285-02 | Santesoft Sante FFT Imaging | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsma-23-285-01 | Santesoft Sante DICOM Viewer Pro | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-15 | Advantech WebAccess | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-14 | Hikvision Access Control and Intercom Products | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-13 | Mitsubishi Electric MELSEC-F Series | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-12 | Weintek cMT3000 HMI Web CGI | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20190821-imc-infodisc | Cisco Integrated Management Controller Information Disclosure Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-dos | Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-cmdinject-1634 | Cisco Integrated Management Controller Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-cmdinj-1865 | Cisco Integrated Management Controller Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-cmdinj-1864 | Cisco Integrated Management Controller Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-cmdinj-1850 | Cisco Integrated Management Controller Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-imc-bo | Cisco Integrated Management Controller Buffer Overflow Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-hyperflex-sslkey | Cisco HyperFlex Static SSL Key Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-frpwr-td-info | Cisco Firepower Threat Defense Software Information Disclosure Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-cimc-cli-inject | Cisco Integrated Management Controller CLI Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190821-ccx-xss | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | 2019-08-21T16:00:00+00:00 | 2019-08-21T16:00:00+00:00 |
| cisco-sa-20190807-fmc-xss | Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-21T14:36:50+00:00 |
| cisco-sa-20190806-sb220-rce | Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:27:53+00:00 |
| cisco-sa-20190806-sb220-auth_bypass | Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:24:09+00:00 |
| cisco-sa-20190806-sb220-inject | Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability | 2019-08-06T14:00:00+00:00 | 2019-08-21T14:20:46+00:00 |
| cisco-sa-20190813-bluetooth | Key Negotiation of Bluetooth Vulnerability | 2019-08-13T17:00:00+00:00 | 2019-08-21T14:14:09+00:00 |
| cisco-sa-20190807-iosxr-isis-dos-1918 | Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-20T15:38:21+00:00 |
| cisco-sa-20190807-iosxr-isis-dos-1910 | Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-20T15:38:21+00:00 |
| cisco-sa-20190807-ftd-bypass | Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-20T13:28:20+00:00 |
| cisco-sa-20190816-ftd-srb | Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability | 2019-08-16T16:00:00+00:00 | 2019-08-16T16:00:00+00:00 |
| cisco-sa-20190816-ftd-null | Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability | 2019-08-16T16:00:00+00:00 | 2019-08-16T16:00:00+00:00 |
| cisco-sa-20190816-ftd-nspd | Cisco Firepower Threat Defense Software Nonstandard Protocol Detection Bypass Vulnerability | 2019-08-16T16:00:00+00:00 | 2019-08-16T16:00:00+00:00 |
| cisco-sa-20190816-ftd-http | Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability | 2019-08-16T16:00:00+00:00 | 2019-08-16T16:00:00+00:00 |
| cisco-sa-20190807-wms-oredirect | Cisco Webex Meetings Server Open Redirection Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-webex-player | Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-spa112-xss | Cisco SPA112 2-Port Phone Adapter Stored Cross-Site Scripting Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-nfvis-vnc-authbypass | Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-nfvis-authbypass | Cisco Enterprise NFV Infrastructure Software Web-Based Management Interface Authentication Bypass Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-nfv-xss | Cisco Enterprise NFV Infrastructure Software Cross-site Scripting Vulnerability | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| cisco-sa-20190807-nfv-read | Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerabilities | 2019-08-07T16:00:00+00:00 | 2019-08-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2016-4912 | The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2016-2568 | pkexec, when used with --user nonpriv, allows local users to escape to the parent session | 2017-02-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2016-1000104 | A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07. | 2019-12-02T00:00:00.000Z | 2025-10-01T23:10:54.000Z |
| msrc_cve-2015-7309 | The theme editor in Bolt allows remote authenticated users to execute arbitrary code by renaming a crafted file | 2015-09-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2015-2704 | realmd allows remote attackers to inject arbitrary configurations in to sssd.conf and smb.conf | 2015-05-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2013-7381 | libnotify before 1.0.4 for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in a call to libnotify.notify. | 2020-02-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2012-3381 | sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. | 2012-08-02T00:00:00.000Z | 2025-10-01T23:10:53.000Z |
| msrc_cve-2012-2653 | arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon. | 2012-07-02T00:00:00.000Z | 2025-10-01T23:10:52.000Z |
| msrc_cve-2011-5244 | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433. | 2012-11-02T00:00:00.000Z | 2025-10-01T23:10:52.000Z |
| msrc_cve-2011-4966 | modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password. | 2013-03-02T00:00:00.000Z | 2025-10-01T23:10:52.000Z |
| msrc_cve-2011-1429 | Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP server via an arbitrary certificate, a different vulnerability than CVE-2009-3766. | 2011-03-02T00:00:00.000Z | 2025-10-01T23:10:51.000Z |
| msrc_cve-2011-0433 | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642. | 2012-11-02T00:00:00.000Z | 2025-10-01T23:10:51.000Z |
| msrc_cve-2010-2642 | Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. | 2011-01-02T00:00:00.000Z | 2025-10-01T23:10:51.000Z |
| msrc_cve-2007-6353 | Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow. | 2007-12-02T00:00:00.000Z | 2025-10-01T23:10:51.000Z |
| msrc_cve-2007-3205 | The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin. | 2007-06-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2007-1397 | Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings. | 2007-03-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2005-0868 | AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC. | 2005-03-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2005-0469 | Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands. | 2005-03-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2002-0318 | FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets. | 2003-04-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2002-0130 | Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-2002-0129 | efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-1999-1090 | The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-1999-0965 | Race condition in xterm allows local users to modify arbitrary files via the logging option. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0902 | ypserv allows local administrators to modify password tables. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0901 | ypserv allows a local user to modify the GECOS and login shells of other users. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0475 | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | 1999-09-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0163 | In older versions of Sendmail, an attacker could use a pipe character to execute root commands. | 2000-02-02T00:00:00.000Z | 2025-10-01T23:10:47.000Z |
| msrc_cve-1999-0145 | Sendmail WIZ command enabled, allowing root access. | 2000-10-02T00:00:00.000Z | 2025-10-01T23:10:10.000Z |
| msrc_cve-2025-55553 | A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). | 2025-09-02T00:00:00.000Z | 2025-10-01T17:11:29.000Z |
| msrc_cve-2025-53132 | Win32k Elevation of Privilege Vulnerability | 2025-08-12T07:00:00.000Z | 2025-09-30T07:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202509-3799 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'… | 2025-11-22T23:35:10.003000Z |
| var-202511-1191 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_F… | 2025-11-22T23:34:42.724000Z |
| var-202508-1700 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:34:21.439000Z |
| var-202509-3974 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'… | 2025-11-22T23:31:48.486000Z |
| var-202511-0548 | A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Fir… | 2025-11-22T23:30:25.367000Z |
| var-202511-2179 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process … | 2025-11-22T23:30:24.687000Z |
| var-202510-0169 | A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown … | 2025-11-22T23:27:39.290000Z |
| var-202511-1199 | A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco L… | 2025-11-22T23:26:36.598000Z |
| var-202511-1325 | An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router … | 2025-11-22T23:26:36.564000Z |
| var-202509-3258 | Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless e… | 2025-11-22T23:25:23.581000Z |
| var-202511-1189 | A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW10… | 2025-11-22T23:25:23.014000Z |
| var-202508-3053 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:23:47.731000Z |
| var-202511-0413 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Imprope… | 2025-11-22T23:23:10.315000Z |
| var-202510-0241 | A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506… | 2025-11-22T23:21:53.827000Z |
| var-202511-1035 | A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_F… | 2025-11-22T23:21:15.413000Z |
| var-202508-1481 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Releas… | 2025-11-22T23:19:09.981000Z |
| var-202511-0383 | A stack-based buffer overflow exists in the validate_static_route function of the httpd b… | 2025-11-22T23:19:08.073000Z |
| var-202412-0853 | WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerabilit… | 2025-11-22T23:16:38.198000Z |
| var-202511-0579 | Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detectio… | 2025-11-22T23:16:34.682000Z |
| var-202510-0243 | A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailF… | 2025-11-22T23:12:01.470000Z |
| var-202510-0482 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:12:01.430000Z |
| var-202510-0483 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:12:01.394000Z |
| var-202510-0484 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected … | 2025-11-22T23:11:59.394000Z |
| var-202511-1177 | A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-… | 2025-11-22T23:11:58.993000Z |
| var-202511-1324 | A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.… | 2025-11-22T23:11:58.945000Z |
| var-202405-1813 | A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affect… | 2025-11-22T23:05:38.293000Z |
| var-202504-0963 | Unauthenticated attackers can query information about total energy consumed by EV charger… | 2025-11-22T23:05:35.556000Z |
| var-202504-0985 | Unauthenticated attackers can send configuration settings to device and possible perform … | 2025-11-22T23:05:35.479000Z |
| var-202504-0976 | Unauthenticated attackers can query an API endpoint and get device details. Growatt New E… | 2025-11-22T23:05:35.438000Z |
| var-202504-0986 | An unauthenticated attacker can obtain a list of smart devices by knowing a valid usernam… | 2025-11-22T23:05:35.340000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000141 | Python for Windows may insecurely load dynamic libraries | 2015-10-01T14:11+09:00 | 2015-10-08T15:25+09:00 |
| jvndb-2015-000147 | AjaXplorer vulnerable to directory traversal | 2015-10-01T14:11+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000139 | baserCMS vulnerable to SQL injection | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000138 | baserCMS fails to restrict access permissions | 2015-09-30T14:46+09:00 | 2015-10-07T17:38+09:00 |
| jvndb-2015-000148 | Dotclear vulnerable to cross-site scripting | 2015-10-02T13:36+09:00 | 2015-10-06T18:02+09:00 |
| jvndb-2015-000140 | Canary Labs Trend Web Server vulnerable to buffer overflow | 2015-10-01T14:11+09:00 | 2015-10-06T18:00+09:00 |
| jvndb-2015-000136 | H2O vulnerable to directory traversal | 2015-09-17T13:36+09:00 | 2015-10-05T17:32+09:00 |
| jvndb-2015-000133 | Koritore vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000132 | MEGAPHONE MUSIC vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:22+09:00 |
| jvndb-2015-000134 | Reversi vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:18+09:00 |
| jvndb-2015-000135 | Photon vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-10-02T17:15+09:00 |
| jvndb-2015-000131 | Auction Camera vulnerable to URL whitelist bypass | 2015-09-16T16:58+09:00 | 2015-09-16T16:58+09:00 |
| jvndb-2015-000129 | PIXMA MG7500 Series vulnerable to cross-site request forgery | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000116 | Japan Connected-free Wi-Fi vulnerable to script injection | 2015-09-11T14:17+09:00 | 2015-09-15T17:17+09:00 |
| jvndb-2015-000302 | hitSuji (rktSNS2) vulnetable to cross-site scripting | 2015-09-03T14:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000301 | BBS X102 vulnerable to cross-site scripting | 2015-09-03T15:00+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000128 | OpenDocMan vulnerable to cross-site scripting | 2015-09-04T18:13+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000127 | ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow | 2015-09-07T13:38+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000123 | NScripter vulnerable to buffer overflow | 2015-09-02T15:46+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000122 | desknet's NEO vulnerable to directory traversal | 2015-09-01T12:36+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000121 | Twit BBS vulnerable to cross-site scripting | 2015-09-01T14:18+09:00 | 2015-09-09T14:02+09:00 |
| jvndb-2015-000119 | File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted | 2015-08-27T15:03+09:00 | 2015-09-02T17:57+09:00 |
| jvndb-2015-000117 | Multiple I-O DATA LAN routers vulnerable in UPnP functionality | 2015-08-18T15:21+09:00 | 2015-08-28T17:29+09:00 |
| jvndb-2015-000118 | Apache Tapestry deserializes untrusted data | 2015-08-20T15:53+09:00 | 2015-08-26T17:51+09:00 |
| jvndb-2015-000113 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting | 2015-08-12T15:13+09:00 | 2015-08-26T17:38+09:00 |
| jvndb-2015-000114 | Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery | 2015-08-12T15:13+09:00 | 2015-08-26T17:28+09:00 |
| jvndb-2015-000009 | NP-BBRM vulnerable in UPnP functionality | 2015-01-26T13:42+09:00 | 2015-08-18T14:36+09:00 |
| jvndb-2015-000112 | Microsoft Office discloses a file path of a local file | 2015-08-12T15:13+09:00 | 2015-08-12T15:13+09:00 |
| jvndb-2013-003469 | Apache Struts vulnerable to remote command execution | 2013-09-06T14:12+09:00 | 2015-08-11T15:19+09:00 |
| jvndb-2015-000110 | Yodobashi App for Android vulnerable to arbitrary Java method execution | 2015-08-07T13:50+09:00 | 2015-08-11T12:22+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02244-1 | Security update for systemd | 2025-07-08T08:44:03Z | 2025-07-08T08:44:03Z |
| suse-su-2025:02243-1 | Security update for systemd | 2025-07-08T08:43:32Z | 2025-07-08T08:43:32Z |
| suse-su-2025:02241-1 | Security update for apache2 | 2025-07-07T23:53:20Z | 2025-07-07T23:53:20Z |
| suse-su-2025:02236-1 | Security update for openssl-3 | 2025-07-07T12:58:58Z | 2025-07-07T12:58:58Z |
| suse-su-2025:20471-1 | Security update for glib2 | 2025-07-07T11:10:43Z | 2025-07-07T11:10:43Z |
| suse-su-2025:02233-1 | Security update for glib2 | 2025-07-07T08:44:39Z | 2025-07-07T08:44:39Z |
| suse-su-2025:02232-1 | Security update for python39 | 2025-07-07T08:17:44Z | 2025-07-07T08:17:44Z |
| suse-su-2025:02231-1 | Security update for valkey | 2025-07-07T07:50:14Z | 2025-07-07T07:50:14Z |
| suse-su-2025:02230-1 | Security update for samba | 2025-07-04T16:03:18Z | 2025-07-04T16:03:18Z |
| suse-su-2025:02229-1 | Security update for libssh | 2025-07-04T16:02:31Z | 2025-07-04T16:02:31Z |
| suse-su-2025:02228-1 | Security update for vim | 2025-07-04T13:33:24Z | 2025-07-04T13:33:24Z |
| suse-su-2025:02227-1 | Security update for vim | 2025-07-04T13:31:41Z | 2025-07-04T13:31:41Z |
| suse-su-2025:02226-1 | Security update for vim | 2025-07-04T13:31:08Z | 2025-07-04T13:31:08Z |
| suse-su-2025:02225-1 | Security update for xorg-x11-server | 2025-07-04T13:19:03Z | 2025-07-04T13:19:03Z |
| suse-su-2025:02224-1 | Security update for xorg-x11-server | 2025-07-04T13:18:44Z | 2025-07-04T13:18:44Z |
| suse-su-2025:20468-1 | Security update for stalld | 2025-07-04T09:22:50Z | 2025-07-04T09:22:50Z |
| suse-su-2025:20465-1 | Security update for gpg2 | 2025-07-04T09:02:09Z | 2025-07-04T09:02:09Z |
| suse-su-2025:02222-1 | Security update for libgepub | 2025-07-04T08:44:37Z | 2025-07-04T08:44:37Z |
| suse-su-2025:20464-1 | Security update for openssl-3 | 2025-07-03T10:28:04Z | 2025-07-03T10:28:04Z |
| suse-su-2025:02216-1 | Security update for icu | 2025-07-03T10:09:01Z | 2025-07-03T10:09:01Z |
| suse-su-2025:02214-1 | Security update for tomcat | 2025-07-03T08:04:04Z | 2025-07-03T08:04:04Z |
| suse-su-2025:02213-1 | Security update for libgepub | 2025-07-02T16:38:17Z | 2025-07-02T16:38:17Z |
| suse-su-2025:02212-1 | Security update for libsoup | 2025-07-02T16:37:54Z | 2025-07-02T16:37:54Z |
| suse-su-2025:02208-1 | Security update for xorg-x11-server | 2025-07-02T15:16:24Z | 2025-07-02T15:16:24Z |
| suse-su-2025:02207-1 | Security update for xorg-x11-server | 2025-07-02T15:15:58Z | 2025-07-02T15:15:58Z |
| suse-su-2025:02206-1 | Security update for xorg-x11-server | 2025-07-02T15:15:37Z | 2025-07-02T15:15:37Z |
| suse-su-2025:02205-1 | Security update for python-requests | 2025-07-02T15:15:15Z | 2025-07-02T15:15:15Z |
| suse-ru-2025:02204-1 | Recommended update for aws-nitro-enclaves-cli | 2025-07-02T13:42:39Z | 2025-07-02T13:42:39Z |
| suse-ru-2025:02203-1 | Recommended update for aws-nitro-enclaves-cli | 2025-07-02T13:42:27Z | 2025-07-02T13:42:27Z |
| suse-su-2025:02201-1 | Security update for clamav | 2025-07-02T13:04:36Z | 2025-07-02T13:04:36Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14206-1 | java-11-openjdk-11.0.24.0-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:14205-1 | chromedriver-126.0.6478.182-1.1 on GA media | 2024-07-19T00:00:00Z | 2024-07-19T00:00:00Z |
| opensuse-su-2024:0204-1 | Security update for chromium | 2024-07-18T18:10:25Z | 2024-07-18T18:10:25Z |
| opensuse-su-2024:14204-1 | xen-4.18.2_06-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14203-1 | python310-Django-5.0.7-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14202-1 | java-17-openjdk-17.0.12.0-1.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14201-1 | gnome-extensions-46.3.1-2.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:14200-1 | OpenImageIO-2.5.13.1-1.1 on GA media | 2024-07-18T00:00:00Z | 2024-07-18T00:00:00Z |
| opensuse-su-2024:0203-1 | Security update for znc | 2024-07-17T12:06:08Z | 2024-07-17T12:06:08Z |
| opensuse-su-2024:14199-1 | ovmf-202402-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:14198-1 | istioctl-1.22.3-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:14197-1 | MozillaFirefox-128.0-1.1 on GA media | 2024-07-17T00:00:00Z | 2024-07-17T00:00:00Z |
| opensuse-su-2024:0201-1 | Security update for Botan | 2024-07-16T06:28:15Z | 2024-07-16T06:28:15Z |
| opensuse-su-2024:14196-1 | exim-4.98-1.1 on GA media | 2024-07-16T00:00:00Z | 2024-07-16T00:00:00Z |
| opensuse-su-2024:14195-1 | openCryptoki-3.23.0-4.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14194-1 | ntpd-rs-1.2.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14193-1 | nodejs-electron-30.2.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14192-1 | kernel-firmware-all-20240712-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14191-1 | gtk2-branding-upstream-2.24.33-10.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14190-1 | conftest-0.54.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14189-1 | MozillaThunderbird-115.13.0-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14188-1 | Botan-doc-2.19.5-1.1 on GA media | 2024-07-15T00:00:00Z | 2024-07-15T00:00:00Z |
| opensuse-su-2024:14187-1 | libnetpbm-devel-11.7.0-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14186-1 | libreoffice-24.2.5.2-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14185-1 | kubelogin-0.1.4-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14184-1 | exiv2-0.28.3-1.1 on GA media | 2024-07-14T00:00:00Z | 2024-07-14T00:00:00Z |
| opensuse-su-2024:14183-1 | trivy-0.53.0-1.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14182-1 | traefik2-2.11.6-2.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14181-1 | traefik-3.0.4-2.1 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| opensuse-su-2024:14180-1 | ruby3.3-rubygem-websocket-extensions-0.1.5-1.20 on GA media | 2024-07-12T00:00:00Z | 2024-07-12T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26085 | Online Medicine Guide /adphar.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26084 | Online Medicine Guide /addelivery.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26083 | Medical Store Management System UpdateCompany.java文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26082 | Medical Store Management System ChangePassword.java SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-25889 | Newforma Project Center Server远程代码执行漏洞 | 2025-05-07 | 2025-10-30 |
| cnvd-2025-25888 | Newforma Project Center Server信息泄露漏洞（CNVD-2025-25888） | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25887 | Newforma Project Center Server目录遍历漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25886 | Newforma Project Center Server信息泄露漏洞（CNVD-2025-25886） | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25885 | Newforma Project Center Server安全绕过漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25884 | WordPress Cinza Grid plugin跨站脚本漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25883 | WordPress Plugin Captcha.eu服务端请求伪造攻击漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25882 | WordPress Calendar Plus plugin跨站脚本漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25881 | WordPress Businext plugin文件包含漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25880 | WordPress BugsPatrol plugin反序列化漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25871 | Newforma Project Center Server代码执行漏洞（CNVD-2025-25871） | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25862 | Newforma Project Center Server信息泄露漏洞（CNVD-2025-25862） | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25849 | Newforma Project Center Server跨站脚本漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25843 | WordPress Breeze Checkout Plugin缺少授权漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25842 | WordPress Boldermail plugin反序列化漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25841 | WordPress Billey plugin文件包含漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25840 | WordPress Bg Book Publisher plugin跨站脚本漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25839 | WordPress bbp-move-topics plugin跨站脚本漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25838 | WordPress auto-login-after-registration plugin跨站脚本漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25837 | WordPress AppExperts plugin信息泄露漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25836 | WordPress AnyComment plugin SQL注入漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25835 | WordPress Alone Theme plugin代码注入漏洞 | 2025-10-24 | 2025-10-30 |
| cnvd-2025-25829 | Newforma Project Center Server代码执行漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25822 | Newforma Project Center Server存在未明漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25752 | D-Link DIR-816L /soap.cgi文件os命令注入漏洞 | 2025-09-02 | 2025-10-30 |
| cnvd-2025-25751 | D-Link DI-500WF os命令注入漏洞 | 2025-09-02 | 2025-10-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0442 | Multiples vulnérabilités dans les produits IBM | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0441 | Vulnérabilité dans les produits WithSecure | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0440 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0439 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0438 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0437 | Vulnérabilité dans Google Chrome | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0436 | Multiples vulnérabilités dans les produits Mitel | 2024-05-24T00:00:00.000000 | 2024-05-24T00:00:00.000000 |
| certfr-2024-avi-0435 | Multiples vulnérabilités dans les produits Cisco | 2024-05-23T00:00:00.000000 | 2024-05-23T00:00:00.000000 |
| certfr-2024-avi-0434 | Multiples vulnérabilités dans les produits Ivanti | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0433 | Multiples vulnérabilités dans GitLab | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0432 | Multiples vulnérabilités dans les produits Atlassian | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0431 | Multiples vulnérabilités dans les produits Veeam | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0430 | Multiples vulnérabilités dans Google Chrome | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0429 | Vulnérabilité dans les produits SolarWinds | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0428 | Multiples vulnérabilités dans les produits Qnap | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0427 | Multiples vulnérabilités dans les produits VMware | 2024-05-22T00:00:00.000000 | 2024-05-22T00:00:00.000000 |
| certfr-2024-avi-0425 | Vulnérabilité dans Ruby on Rails | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0424 | Vulnérabilité dans Asterisk | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0423 | Multiples vulnérabilités dans les produits NetApp | 2024-05-21T00:00:00.000000 | 2024-05-21T00:00:00.000000 |
| certfr-2024-avi-0422 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0421 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0420 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0419 | Multiples vulnérabilités dans les produits IBM | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0418 | Vulnérabilité dans Microsoft Azure Monitor Agent | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0417 | Multiples vulnérabilités dans Microsoft Edge | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0416 | Vulnérabilité dans OpenSSL | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0415 | Multiples vulnérabilités dans les produits Tenable | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0414 | Vulnérabilité dans les produits Palo Alto Networks | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0413 | Multiples vulnérabilités dans les produits MongoDB | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |
| certfr-2024-avi-0412 | Multiples vulnérabilités dans les produits Mitel | 2024-05-17T00:00:00.000000 | 2024-05-17T00:00:00.000000 |