Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64249 |
4.8 (3.1)
|
WordPress Protect WP Admin plugin <= 4.1 - Broken Acce… |
WP-EXPERTS.IN |
Protect WP Admin |
2025-12-16T08:12:49.485Z | 2026-01-20T14:28:21.330Z |
| CVE-2025-64248 |
4.3 (3.1)
|
WordPress Request a Quote plugin <= 2.5.3 - Broken Acc… |
emarket-design |
Request a Quote |
2025-12-16T08:12:49.290Z | 2026-01-20T14:28:21.329Z |
| CVE-2025-64268 |
7.5 (3.1)
|
WordPress Timetics plugin <= 1.0.44 - Broken Access Co… |
Arraytics |
Timetics |
2025-12-18T07:22:14.683Z | 2026-01-20T14:28:21.327Z |
| CVE-2025-64247 |
6.5 (3.1)
|
WordPress Read More & Accordion plugin <= 3.5.4.1 - Br… |
edmon.parker |
Read More & Accordion |
2025-12-16T08:12:49.100Z | 2026-01-20T14:28:21.315Z |
| CVE-2025-64263 |
5.4 (3.1)
|
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… |
PluginEver |
WP Content Pilot |
2025-11-13T09:24:28.383Z | 2026-01-20T14:28:21.298Z |
| CVE-2025-64272 |
6.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.080Z | 2026-01-20T14:28:21.293Z |
| CVE-2025-64265 |
4.3 (3.1)
|
WordPress Frontend File Manager plugin <= 23.2 - Broke… |
N-Media |
Frontend File Manager |
2025-11-13T09:24:29.310Z | 2026-01-20T14:28:21.291Z |
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64276 |
6.5 (3.1)
|
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… |
Ays Pro |
Survey Maker |
2025-11-13T09:24:31.911Z | 2026-01-20T14:28:21.160Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64273 |
7.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.266Z | 2026-01-20T14:28:21.096Z |
| CVE-2025-64270 |
6.5 (3.1)
|
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … |
masteriyo |
Masteriyo - LMS |
2025-12-18T07:22:14.865Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64274 |
4.3 (3.1)
|
WordPress WPKoi Templates for Elementor plugin <= 3.4.… |
wpkoithemes |
WPKoi Templates for Elementor |
2025-11-13T09:24:31.061Z | 2026-01-20T14:28:21.083Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64277 |
5.3 (3.1)
|
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… |
QuantumCloud |
ChatBot |
2025-11-13T09:24:32.345Z | 2026-01-20T14:28:21.020Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| CVE-2025-64250 |
6.1 (3.1)
|
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… |
wpWax |
Directorist |
2025-12-16T08:12:49.689Z | 2026-01-20T14:28:20.980Z |
| CVE-2025-64254 |
8.8 (3.1)
|
WordPress Photo Block plugin <= 1.5.1 - Broken Access … |
Ronald Huereca |
Photo Block |
2025-12-09T14:13:51.839Z | 2026-01-20T14:28:20.954Z |
| CVE-2025-64251 |
4.9 (3.1)
|
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… |
azzaroco |
Ultimate Learning Pro |
2025-12-16T08:12:49.880Z | 2026-01-20T14:28:20.915Z |
| CVE-2025-64246 |
4.3 (3.1)
|
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… |
netopsae |
Accessibility by AudioEye |
2025-12-16T08:12:48.902Z | 2026-01-20T14:28:20.873Z |
| CVE-2025-64238 |
4.3 (3.1)
|
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… |
NicolasKulka |
WPS Bidouille |
2025-12-16T08:12:47.350Z | 2026-01-20T14:28:20.852Z |
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68595 |
8.8 (3.1)
|
WordPress Widgets for Social Photo Feed plugin <= 1.7.… |
Trustindex |
Widgets for Social Photo Feed |
2025-12-24T13:10:44.856Z | 2026-01-20T14:28:28.572Z |
| CVE-2025-68594 |
8.1 (3.1)
|
WordPress Poll, Survey & Quiz Maker Plugin by Opinion … |
Assaf Parag |
Poll, Survey & Quiz Maker Plugin by Opinion Stage |
2025-12-24T13:10:44.556Z | 2026-01-20T14:28:28.512Z |
| CVE-2025-68593 |
8.8 (3.1)
|
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Acces… |
Liton Arefin |
WP Adminify |
2025-12-24T13:10:44.275Z | 2026-01-20T14:28:28.837Z |
| CVE-2025-68592 |
8.8 (3.1)
|
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Acces… |
Liton Arefin |
WP Adminify |
2025-12-24T13:10:43.992Z | 2026-01-20T14:28:28.495Z |
| CVE-2025-68591 |
8.1 (3.1)
|
WordPress Simple File List plugin <= 6.1.15 - Broken A… |
Mitchell Bennis |
Simple File List |
2025-12-24T13:10:43.716Z | 2026-01-20T14:28:28.564Z |
| CVE-2025-68590 |
9.8 (3.1)
|
WordPress Integration for Contact Form 7 HubSpot plugi… |
CRM Perks |
Integration for Contact Form 7 HubSpot |
2025-12-24T13:10:43.422Z | 2026-01-20T14:28:28.555Z |
| CVE-2025-68589 |
8.1 (3.1)
|
WordPress WP Telegram Widget and Join Link plugin <= 2… |
WP Socio |
WP Telegram Widget and Join Link |
2025-12-24T13:10:43.150Z | 2026-01-20T14:28:28.424Z |
| CVE-2025-68588 |
8.1 (3.1)
|
WordPress TS Poll plugin <= 2.5.3 - Broken Access Cont… |
totalsoft |
TS Poll |
2025-12-24T13:10:42.857Z | 2026-01-20T14:28:28.481Z |
| CVE-2025-68587 |
8.1 (3.1)
|
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Co… |
Bob |
Watu Quiz |
2025-12-24T13:10:42.440Z | 2026-01-20T14:28:28.675Z |
| CVE-2025-68586 |
8.8 (3.1)
|
WordPress Cooked plugin <= 1.11.2 - Broken Access Cont… |
Gora Tech |
Cooked |
2025-12-24T13:10:42.037Z | 2026-01-20T14:28:28.502Z |
| CVE-2025-68585 |
8.8 (3.1)
|
WordPress WP Document Revisions plugin <= 3.7.2 - Brok… |
Ben Balter |
WP Document Revisions |
2025-12-24T13:10:41.715Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68584 |
8.8 (3.1)
|
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site R… |
Constantin Boiangiu |
Vimeotheque |
2025-12-24T13:10:41.424Z | 2026-01-20T14:28:28.674Z |
| CVE-2025-68583 |
8.8 (3.1)
|
WordPress Fast User Switching plugin <= 1.4.10 - Cross… |
Tikweb Management |
Fast User Switching |
2025-12-24T13:10:41.121Z | 2026-01-20T14:28:28.749Z |
| CVE-2025-68582 |
8.8 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Broken Acce… |
Funnelforms |
Funnelforms Free |
2025-12-24T13:10:40.817Z | 2026-01-20T14:28:28.482Z |
| CVE-2025-68581 |
8.1 (3.1)
|
WordPress YITH Slider for page builders plugin <= 1.0.… |
YITHEMES |
YITH Slider for page builders |
2025-12-24T13:10:40.513Z | 2026-01-20T14:28:28.581Z |
| CVE-2025-68580 |
8.8 (3.1)
|
WordPress Advanced Classifieds & Directory Pro plugin … |
pluginsware |
Advanced Classifieds & Directory Pro |
2025-12-24T13:10:40.193Z | 2026-01-20T14:28:28.604Z |
| CVE-2025-68579 |
8.1 (3.1)
|
WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Acce… |
FolioVision |
FV Simpler SEO |
2025-12-24T13:10:39.669Z | 2026-01-20T14:28:28.329Z |
| CVE-2025-68578 |
8.1 (3.1)
|
WordPress Addonify plugin <= 2.0.4 - Broken Access Con… |
Addonify |
Addonify |
2025-12-24T13:10:39.343Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68577 |
8.8 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Broken Access Con… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.980Z | 2026-01-20T14:28:28.467Z |
| CVE-2025-68576 |
7.5 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Ex… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.690Z | 2026-01-20T14:28:28.713Z |
| CVE-2025-68575 |
8.8 (3.1)
|
WordPress Wappointment plugin <=2.7.2 - Broken Access … |
Wappointment team |
Wappointment |
2025-12-24T13:10:38.366Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68574 |
6.1 (3.1)
|
WordPress WPBakery Visual Composer WHMCS Elements plug… |
voidcoders |
WPBakery Visual Composer WHMCS Elements |
2025-12-24T13:10:38.100Z | 2026-01-20T14:28:28.414Z |
| CVE-2025-68573 |
8.8 (3.1)
|
WordPress Simple Keyword to Link plugin <= 1.5 - Cross… |
Alessandro Piconi |
Simple Keyword to Link |
2025-12-24T13:10:37.793Z | 2026-01-20T14:28:28.455Z |
| CVE-2025-68572 |
8.8 (3.1)
|
WordPress BBP Core plugin <= 1.4.1 - Broken Access Con… |
Spider Themes |
BBP Core |
2025-12-24T13:10:37.515Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68571 |
8.8 (3.1)
|
WordPress SALESmanago plugin <= 3.9.0 - Broken Access … |
SALESmanago |
SALESmanago |
2025-12-24T13:10:37.254Z | 2026-01-20T14:28:28.533Z |
| CVE-2025-68570 |
9.8 (3.1)
|
WordPress Captivate Sync plugin <= 3.2.2 - SQL Injecti… |
captivateaudio |
Captivate Sync |
2025-12-24T13:10:36.970Z | 2026-01-20T14:28:28.532Z |
| CVE-2025-68569 |
8.8 (3.1)
|
WordPress WP Time Slots Booking Form plugin <= 1.2.38 … |
codepeople |
WP Time Slots Booking Form |
2025-12-24T13:10:36.669Z | 2026-01-20T14:28:28.254Z |
| CVE-2025-68568 |
7.5 (3.1)
|
WordPress Popup Builder: Exit-Intent pop-up, Spin the … |
integrationclaspo |
Popup Builder: Exit-Intent pop-up, Spin the Wheel, Newsletter signup, Email Capture & Lead Generation forms maker |
2025-12-24T13:10:36.357Z | 2026-01-20T14:28:28.398Z |
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68593 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.697 | 2026-01-20T15:19:50.230 |
| fkie_cve-2025-68592 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrec… | 2025-12-24T13:16:26.573 | 2026-01-20T15:19:50.073 |
| fkie_cve-2025-68591 | Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exp… | 2025-12-24T13:16:26.457 | 2026-01-20T15:19:49.910 |
| fkie_cve-2025-68590 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:26.337 | 2026-01-20T15:19:49.757 |
| fkie_cve-2025-68589 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T13:16:26.220 | 2026-01-20T15:19:49.590 |
| fkie_cve-2025-68588 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Conf… | 2025-12-24T13:16:26.100 | 2026-01-20T15:19:49.457 |
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| fkie_cve-2025-68580 | Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro… | 2025-12-24T13:16:25.140 | 2026-01-20T15:19:48.420 |
| fkie_cve-2025-68579 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exp… | 2025-12-24T13:16:25.020 | 2026-01-20T15:19:48.293 |
| fkie_cve-2025-68578 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Inco… | 2025-12-24T13:16:24.893 | 2026-01-20T15:19:48.163 |
| fkie_cve-2025-68577 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Con… | 2025-12-24T13:16:24.777 | 2026-01-20T15:19:48.037 |
| fkie_cve-2025-68576 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdi… | 2025-12-24T13:16:24.660 | 2026-01-20T15:19:47.920 |
| fkie_cve-2025-68575 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T13:16:24.540 | 2026-01-20T15:19:47.793 |
| fkie_cve-2025-68574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:24.423 | 2026-01-20T15:19:47.663 |
| fkie_cve-2025-68573 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-… | 2025-12-24T13:16:24.300 | 2026-01-20T15:19:47.537 |
| fkie_cve-2025-68572 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T13:16:24.183 | 2026-01-20T15:19:47.407 |
| fkie_cve-2025-68571 | Missing Authorization vulnerability in SALESmanago SALESmanago salesmanago allows Exploiting Incorr… | 2025-12-24T13:16:24.070 | 2026-01-20T15:19:47.267 |
| fkie_cve-2025-68570 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:23.953 | 2026-01-20T15:19:47.127 |
| fkie_cve-2025-68569 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-… | 2025-12-24T13:16:23.833 | 2026-01-20T15:19:46.990 |
| fkie_cve-2025-68568 | Missing Authorization vulnerability in integrationclaspo Popup Builder: Exit-Intent pop-up, Spin th… | 2025-12-24T13:16:23.710 | 2026-01-20T15:19:46.863 |
| fkie_cve-2025-68567 | Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-… | 2025-12-24T13:16:23.593 | 2026-01-20T15:19:46.743 |
| fkie_cve-2025-68566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:23.470 | 2026-01-20T15:19:46.617 |
| fkie_cve-2025-68565 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting… | 2025-12-24T13:16:23.340 | 2026-01-20T15:19:46.493 |
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p8jj-567m-jw77 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-mqq8-cpfh-hpm3 |
6.5 (3.1)
|
Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-m4cg-3fm9-j6x9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-jxgx-9wwv-2g4h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-j934-wxvm-8fw9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hrc4-whhq-v375 |
6.5 (3.1)
|
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hgf5-67r8-3fcm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-h6rm-qgch-65pr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-gwq3-r365-h2g8 |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-fqq6-293f-f549 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-f36m-hf38-h6rh |
5.3 (3.1)
|
Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-cqxc-j3v9-5m9g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9r4p-xvf3-9x4q |
6.5 (3.1)
|
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploitin… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9gx8-7m79-g5p3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-98c9-f4v9-v6qr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x9-7c94-7879 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x7-mfr3-2vx3 |
5.4 (3.1)
|
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-8q5w-6x37-j5hg |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-865r-5g86-hfxf |
5.3 (3.1)
|
Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-7f3f-ppww-82r3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-74xg-56wg-gvpj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6pvg-49r3-g3c7 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6j84-m7wp-j9jm |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-59m8-jmcc-pxx7 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-57rv-vq9v-c6qg |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-5263-ggmq-48gj |
5.4 (3.1)
|
Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exp… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-3662-gvg6-j9xx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2wqc-47g4-pm22 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2w86-r6rm-76wr |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthem… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-2q9h-6v2j-hfpp |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-258 |
|
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 … | tensorflow | 2020-01-28T22:15:00Z | 2021-08-27T03:22:23.423115Z |
| pysec-2020-257 |
|
In affected versions of TensorFlow under certain cases, loading a saved model can result … | tensorflow | 2020-12-10T22:15:00Z | 2021-08-27T03:22:23.329750Z |
| pysec-2020-256 |
|
In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer rec… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:23.120464Z |
| pysec-2020-255 |
|
In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a cons… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:22.907995Z |
| pysec-2020-254 |
|
In affected versions of TensorFlow under certain cases a saved model can trigger use of u… | tensorflow | 2020-12-10T23:15:00Z | 2021-08-27T03:22:22.698179Z |
| pysec-2019-228 |
|
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of servi… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.500832Z |
| pysec-2019-210 |
|
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of servi… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.500832Z |
| pysec-2019-227 |
|
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… | tensorflow-cpu | 2019-12-16T21:15:00Z | 2021-08-27T03:22:22.453759Z |
| pysec-2019-209 |
|
In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced w… | tensorflow | 2019-12-16T21:15:00Z | 2021-08-27T03:22:22.453759Z |
| pysec-2019-226 |
|
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute a… | tensorflow-cpu | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.407658Z |
| pysec-2019-208 |
|
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute a… | tensorflow | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.407658Z |
| pysec-2019-225 |
|
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow bef… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.362937Z |
| pysec-2019-207 |
|
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow bef… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.362937Z |
| pysec-2019-224 |
|
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of… | tensorflow-cpu | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.321158Z |
| pysec-2019-206 |
|
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of… | tensorflow | 2019-04-23T21:29:00Z | 2021-08-27T03:22:22.321158Z |
| pysec-2019-223 |
|
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The t… | tensorflow-cpu | 2019-04-24T21:29:00Z | 2021-08-27T03:22:22.242054Z |
| pysec-2019-205 |
|
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The t… | tensorflow | 2019-04-24T21:29:00Z | 2021-08-27T03:22:22.242054Z |
| pysec-2020-269 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow-cpu | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2020-253 |
|
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possib… | tensorflow | 2020-05-04T15:15:00Z | 2021-08-27T03:22:22.195752Z |
| pysec-2019-222 |
|
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Goo… | tensorflow-cpu | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.150023Z |
| pysec-2019-204 |
|
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Goo… | tensorflow | 2019-04-24T17:29:00Z | 2021-08-27T03:22:22.150023Z |
| pysec-2017-95 |
|
An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.… | tablib | 2017-06-14T13:29:00Z | 2021-08-27T03:22:22.103496Z |
| pysec-2013-33 |
|
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP qu… | suds-py3 | 2013-09-23T20:55:00Z | 2021-08-27T03:22:21.834987Z |
| pysec-2019-203 |
|
Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates… | splunk-sdk | 2019-03-21T16:01:00Z | 2021-08-27T03:22:21.751156Z |
| pysec-2021-148 |
|
In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.656706Z |
| pysec-2021-147 |
|
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting… | sickrage | 2021-04-12T14:15:00Z | 2021-08-27T03:22:21.507681Z |
| pysec-2018-101 |
|
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. | sickrage | 2018-03-31T21:29:00Z | 2021-08-27T03:22:21.352713Z |
| pysec-2020-252 |
|
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… | scalyr-agent-2 | 2020-08-27T22:15:00Z | 2021-08-27T03:22:21.152325Z |
| pysec-2020-251 |
|
The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some ci… | scalyr-agent-2 | 2020-08-27T22:15:00Z | 2021-08-27T03:22:21.123825Z |
| pysec-2020-250 |
|
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json … | rtslib-fb | 2020-06-19T11:15:00Z | 2021-08-27T03:22:19.931800Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32269 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.062152Z |
| gsd-2024-32368 | Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW … | 2024-04-13T05:02:29.061959Z |
| gsd-2024-32237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.061758Z |
| gsd-2024-32481 | Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… | 2024-04-13T05:02:29.060928Z |
| gsd-2024-32430 | Server-Side Request Forgery (SSRF) vulnerability in ActiveCampaign.This issue affects Act… | 2024-04-13T05:02:29.060731Z |
| gsd-2024-32236 | An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive informa… | 2024-04-13T05:02:29.060529Z |
| gsd-2024-32351 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.060329Z |
| gsd-2024-32309 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.060127Z |
| gsd-2024-32288 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via th… | 2024-04-13T05:02:29.058945Z |
| gsd-2024-32155 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.058740Z |
| gsd-2024-32472 | excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerabil… | 2024-04-13T05:02:29.058522Z |
| gsd-2024-32243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.057360Z |
| gsd-2024-32292 | Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in th… | 2024-04-13T05:02:29.057169Z |
| gsd-2024-32295 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.056642Z |
| gsd-2024-32228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.056141Z |
| gsd-2024-32340 | A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 al… | 2024-04-13T05:02:29.055939Z |
| gsd-2024-32471 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.055748Z |
| gsd-2024-32185 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.055229Z |
| gsd-2024-32357 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.054637Z |
| gsd-2024-32249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.053304Z |
| gsd-2024-32398 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.053049Z |
| gsd-2024-32352 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.052856Z |
| gsd-2024-32316 | Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability in the fromDhcpLis… | 2024-04-13T05:02:29.052655Z |
| gsd-2024-32412 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.051428Z |
| gsd-2024-32281 | Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formex… | 2024-04-13T05:02:29.051225Z |
| gsd-2024-32190 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049965Z |
| gsd-2024-32200 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049775Z |
| gsd-2024-32401 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049585Z |
| gsd-2024-32436 | Cross-Site Request Forgery (CSRF) vulnerability in Codemenschen Gift Vouchers.This issue … | 2024-04-13T05:02:29.049395Z |
| gsd-2024-32165 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049154Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-9446 | Malicious code in flag-leak-r (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:53Z |
| mal-2024-9409 | Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-9408 | Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-9407 | Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-9306 | Malicious code in iufgbewroibgfowiebc (PyPI) | 2024-10-16T19:48:20Z | 2025-12-11T09:27:53Z |
| mal-2024-9270 | Malicious code in ptsecurity (PyPI) | 2024-10-07T13:23:16Z | 2025-12-11T09:27:53Z |
| mal-2024-9269 | Malicious code in posi (PyPI) | 2024-10-07T13:23:16Z | 2025-12-11T09:27:53Z |
| mal-2024-9268 | Malicious code in maxpatrol (PyPI) | 2024-10-07T13:23:16Z | 2025-12-11T09:27:53Z |
| mal-2024-9267 | Malicious code in innostage-group (PyPI) | 2024-10-07T13:23:16Z | 2025-12-11T09:27:53Z |
| mal-2024-8946 | Malicious code in rcebymrx (PyPI) | 2024-09-23T14:00:45Z | 2025-12-11T09:27:53Z |
| mal-2024-8726 | Malicious code in invokehttp (PyPI) | 2024-08-29T08:52:37Z | 2025-12-11T09:27:53Z |
| mal-2024-8025 | Malicious code in puffioner131 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-5479 | Malicious code in pingdomv3 (PyPI) | 2024-06-25T13:38:09Z | 2025-12-11T09:27:53Z |
| mal-2024-5203 | Malicious code in hlokty (PyPI) | 2024-06-25T13:35:57Z | 2025-12-11T09:27:53Z |
| mal-2024-5135 | Malicious code in fefeefrrg (PyPI) | 2024-06-25T13:35:22Z | 2025-12-11T09:27:53Z |
| mal-2024-5134 | Malicious code in fef3434334dwrg (PyPI) | 2024-06-25T13:35:22Z | 2025-12-11T09:27:53Z |
| mal-2024-1625 | Malicious code in nt4padyp3 (PyPI) | 2024-06-17T12:35:54Z | 2025-12-11T09:27:53Z |
| mal-2024-1624 | Malicious code in importlib-metadate (PyPI) | 2024-06-17T12:41:40Z | 2025-12-11T09:27:53Z |
| mal-2024-12341 | Malicious code in rtxt-dep2 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12340 | Malicious code in route-search (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12339 | Malicious code in requests-rapidly (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12337 | Malicious code in raydium-sdk (PyPI) | 2024-07-03T17:04:18Z | 2025-12-11T09:27:53Z |
| mal-2024-12335 | Malicious code in random-security-test-pkg (PyPI) | 2024-11-17T23:42:58Z | 2025-12-11T09:27:53Z |
| mal-2024-12334 | Malicious code in python-project-wntliogu (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12333 | Malicious code in python-bitget-api (PyPI) | 2024-12-12T21:48:47Z | 2025-12-11T09:27:53Z |
| mal-2024-12332 | Malicious code in pymatcha (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-12331 | Malicious code in pydevd-inject (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12330 | Malicious code in pycryptographylibv3 (PyPI) | 2024-11-30T16:24:10Z | 2025-12-11T09:27:53Z |
| mal-2024-12329 | Malicious code in pwnstar-lib (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:53Z |
| mal-2024-12328 | Malicious code in postgresql-connector-python (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1886 | nmap: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-21T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1884 | JetBrains IntelliJ IDEA: Mehrere Schwachstellen | 2025-08-20T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1853 | Verschiedene Autodesk AutoCAD-Produkte und Civil 3D: Mehrere Schwachstellen | 2025-08-17T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1727 | Trend Micro Apex One: Schwachstelle ermöglicht Codeausführung | 2025-08-05T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1723 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1625 | Mattermost Server und Plugins: Mehrere Schwachstellen | 2025-07-22T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1622 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-22T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0580 | IBM License Metric Tool: Mehrere Schwachstellen | 2025-03-17T23:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2023-1280 | Python: Schwachstelle ermöglicht Manipulation | 2019-03-12T23:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2022-2191 | Python: Schwachstelle ermöglicht Manipulation von Dateien | 2019-10-23T22:00:00.000+00:00 | 2025-08-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1885 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1882 | Moodle: Mehrere Schwachstellen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1880 | xwiki: Mehrere Schwachstellen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1879 | ProFTPD: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1878 | Lexmark Universal Print Driver: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1877 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1875 | Cisco EPNM und Prime Infrastructure Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1874 | Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht das Hochladen beliebiger Dateien | 2025-08-20T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1872 | Red Hat Ceph Storage: Mehrere Schwachstellen | 2019-08-21T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1871 | Cisco IOS: Mehrere Schwachstellen | 2018-03-28T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1867 | Commvault Backup & Recovery: Mehrere Schwachstellen | 2025-08-19T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2351 | gcc: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-09-13T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2023-1583 | Red Hat Enterprise Linux (SQLite): Schwachstelle ermöglicht Denial of Service | 2023-06-27T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2022-1863 | Red Hat Enterprise Linux (SQLite): Mehrere Schwachstellen | 2022-10-25T22:00:00.000+00:00 | 2025-08-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1868 | Passwortmanager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-19T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1865 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-08-19T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1855 | OpenBao: Mehrere Schwachstellen | 2025-08-17T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1441 | OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service | 2025-07-01T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1042 | Adobe ColdFusion: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-0733 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2025-04-07T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:2228 | Red Hat Security Advisory: perl security update | 2024-04-30T10:12:36+00:00 | 2026-01-22T00:08:45+00:00 |
| rhsa-2024:3128 | Red Hat Security Advisory: perl:5.32 security update | 2024-05-22T10:04:27+00:00 | 2026-01-22T00:08:42+00:00 |
| rhsa-2025:23927 | Red Hat Security Advisory: ruby security update | 2025-12-22T16:49:49+00:00 | 2026-01-21T23:54:04+00:00 |
| rhsa-2025:23648 | Red Hat Security Advisory: ruby:3.3 security update | 2025-12-18T13:21:06+00:00 | 2026-01-21T23:53:54+00:00 |
| rhsa-2025:23141 | Red Hat Security Advisory: ruby security update | 2025-12-11T19:50:32+00:00 | 2026-01-21T23:53:40+00:00 |
| rhsa-2025:23063 | Red Hat Security Advisory: ruby:3.3 security update | 2025-12-10T17:51:13+00:00 | 2026-01-21T23:53:38+00:00 |
| rhsa-2025:23062 | Red Hat Security Advisory: ruby:3.3 security update | 2025-12-10T18:31:38+00:00 | 2026-01-21T23:53:38+00:00 |
| rhsa-2025:22257 | Red Hat Security Advisory: OpenShift Container Platform 4.20.6 bug fix and security update | 2025-12-02T14:01:47+00:00 | 2026-01-21T23:53:24+00:00 |
| rhsa-2021:4326 | Red Hat Security Advisory: libX11 security update | 2021-11-09T18:20:52+00:00 | 2026-01-21T23:52:25+00:00 |
| rhsa-2021:3477 | Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.18 | 2021-09-09T09:25:32+00:00 | 2026-01-21T23:52:23+00:00 |
| rhsa-2021:3296 | Red Hat Security Advisory: libX11 security update | 2021-08-30T08:57:59+00:00 | 2026-01-21T23:52:22+00:00 |
| rhsa-2021:3254 | Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update | 2021-08-24T12:50:36+00:00 | 2026-01-21T23:52:20+00:00 |
| rhba-2021:3472 | Red Hat Bug Fix Advisory: Red Hat Ansible Tower 3.8.4-1 - Container | 2021-09-08T19:22:08+00:00 | 2026-01-21T23:52:14+00:00 |
| rhsa-2026:0134 | Red Hat Security Advisory: Red Hat build of Quarkus 3.27.1.SP1 security update | 2026-01-06T13:22:25+00:00 | 2026-01-21T23:32:32+00:00 |
| rhsa-2026:0131 | Red Hat Security Advisory: Red Hat build of Quarkus 3.20.4.SP1 security update | 2026-01-06T13:12:23+00:00 | 2026-01-21T23:32:30+00:00 |
| rhsa-2025:9294 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.17.2 | 2025-06-19T13:39:23+00:00 | 2026-01-21T23:32:03+00:00 |
| rhsa-2025:8512 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.16.4 | 2025-06-04T12:25:29+00:00 | 2026-01-21T23:30:59+00:00 |
| rhsa-2025:8233 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.1 | 2025-05-27T18:59:27+00:00 | 2026-01-21T23:30:51+00:00 |
| rhsa-2025:8078 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3 | 2025-05-21T19:20:03+00:00 | 2026-01-21T23:30:49+00:00 |
| rhsa-2025:7626 | Red Hat Security Advisory: Red Hat Developer Hub 1.6.0 release. | 2025-05-14T17:51:56+00:00 | 2026-01-21T23:30:49+00:00 |
| rhsa-2025:7118 | Red Hat Security Advisory: osbuild and osbuild-composer security update | 2025-05-13T08:41:23+00:00 | 2026-01-21T23:30:29+00:00 |
| rhsa-2025:3870 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.14.6 | 2025-04-14T19:40:06+00:00 | 2026-01-21T23:30:16+00:00 |
| rhsa-2025:2876 | Red Hat Security Advisory: ACS 4.7 enhancement and security update | 2025-03-17T01:38:45+00:00 | 2026-01-21T23:29:31+00:00 |
| rhsa-2025:2518 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-03-10T14:46:24+00:00 | 2026-01-21T23:29:24+00:00 |
| rhsa-2025:23644 | Red Hat Security Advisory: Red Hat multicluster global hub 1.4.3 security update | 2025-12-18T10:46:11+00:00 | 2026-01-21T23:29:14+00:00 |
| rhsa-2025:23428 | Red Hat Security Advisory: Red Hat multicluster global hub 1.5.2 security update | 2025-12-17T01:06:13+00:00 | 2026-01-21T23:29:13+00:00 |
| rhsa-2025:22652 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.1 Release. | 2025-12-02T21:45:24+00:00 | 2026-01-21T23:29:04+00:00 |
| rhsa-2025:22623 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.24.1 Release. | 2025-12-02T15:28:44+00:00 | 2026-01-21T23:29:03+00:00 |
| rhsa-2025:22620 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.22.1 Release. | 2025-12-02T15:22:33+00:00 | 2026-01-21T23:29:03+00:00 |
| rhsa-2025:22284 | Red Hat Security Advisory: OpenShift Container Platform 4.13.62 bug fix and security update | 2025-12-05T00:05:11+00:00 | 2026-01-21T23:29:02+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-256-01 | Hitachi Energy TXpert Hub CoreTec 4 Sudo Vulnerability | 2022-09-13T00:00:00.000000Z | 2022-09-13T00:00:00.000000Z |
| icsa-22-195-11 | Open Design Alliance Drawings SDK | 2022-07-12T00:00:00.000000Z | 2022-09-13T00:00:00.000000Z |
| icsa-22-195-09 | Simcenter Femap and Parasolid | 2022-07-12T00:00:00.000000Z | 2022-09-13T00:00:00.000000Z |
| icsa-18-226-02 | Siemens OpenSSL Vulnerability in Industrial Products (Update E) | 2018-08-07T00:00:00.000000Z | 2022-09-13T00:00:00.000000Z |
| icsa-22-251-01 | MZ Automation libIEC61850 | 2022-09-08T00:00:00.000000Z | 2022-09-08T00:00:00.000000Z |
| icsa-22-242-10 | PTC Kepware KEPServerEX (Update A) | 2022-08-30T00:00:00.000000Z | 2022-09-08T00:00:00.000000Z |
| icsa-22-249-04 | Hitachi Energy TXpert Hub CoreTec 4 | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-03 | Cognex 3D-A1000 Dimensioning System | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-02 | AVEVA Edge 2020 R2 SP1 and all prior versions | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-249-01 | Triangle Microworks Libraries | 2022-09-06T00:00:00.000000Z | 2022-09-06T00:00:00.000000Z |
| icsa-22-242-11 | Sensormatic Electronics iSTAR | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-09 | Omron CX-Programmer | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-08 | Honeywell Trend Controls Inter-Controller Protocol | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-07 | Honeywell Experion LX | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-06 | Honeywell ControlEdge | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-05 | Fuji Electric D300win | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-04 | Hitachi Energy RTU500 series | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-03 | Hitachi Energy MSM Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-02 | Hitachi Energy Gateway Station (GWS) Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-242-01 | Hitachi Energy FACTS Control Platform (FCP) Product | 2022-08-30T00:00:00.000000Z | 2022-08-30T00:00:00.000000Z |
| icsa-22-237-01 | FATEK Automation FvDesigner | 2022-08-25T00:00:00.000000Z | 2022-08-25T00:00:00.000000Z |
| icsa-22-235-07 | Hitachi Energy RTU500 | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-06 | Measuresoft ScadaPro Server and Client | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-05 | Measuresoft ScadaPro Server | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-03 | mySCADA myPRO | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-02 | Delta Industrial Automation DIALink | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-153-02 | Illumina Local Run Manager | 2022-06-02T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-228-07 | Sequi PortBloque S | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-06 | Emerson Proficy Machine Edition | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-05 | B&R Industrial Automation Automation Studio 4 | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20181017-ap-ft-dos | Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability | 2018-10-17T16:00:00+00:00 | 2018-10-17T16:00:00+00:00 |
| cisco-sa-20181017-aironet-dos | Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability | 2018-10-17T16:00:00+00:00 | 2018-10-17T16:00:00+00:00 |
| cisco-sa-20181003-webex-rce | Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities | 2018-10-03T16:00:00+00:00 | 2018-10-10T15:16:00+00:00 |
| cisco-sa-20180418-asaanyconnect | Cisco ASA Software, FTD Software, and AnyConnect Secure Mobility Client SAML Authentication Session Fixation Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-10-05T16:12:00+00:00 |
| cisco-sa-20181003-phy-ipv4-dos | Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T21:00:00+00:00 |
| cisco-sa-20181003-webex-xss | Cisco Webex Centers Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-unity-dos | Cisco Unity Connection File Upload Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-uipp-7900-xss | Cisco Unified IP Phone 7900 Series Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ucsd-xss | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-uc-xss | Cisco Unity Connection Stored Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-sd-wan-bypass | Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-prime-id | Cisco Prime Infrastructure Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-pi-tftp | Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-pi-id | Cisco Prime Infrastructure Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ise-mult-vulns | Multiple Vulnerabilities in Cisco Identity Services Engine | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-iosxr-dos | Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ind-dos | Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ind-csrf | Cisco Industrial Network Director Cross-Site Request Forgery Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-imcs-ucsd-id | Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web Interface Information Disclosure Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-imcs-ucsd-dos | Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-uda | Cisco HyperFlex HX Data Platform Software Unauthorized Directory Access Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-secret | Cisco HyperFlex Software Static Signing Key Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-info | Cisco HyperFlex World-Readable Sensitive Information Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hyperflex-clickjacking | Cisco HyperFlex UI Clickjacking Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-hcmf-csrf | Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-ftd-inspect-dos | Cisco Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-fp-smb-snort | Cisco Firepower System Software Detection Engine Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-fp-cmd-injection | Cisco Firepower Management Center and Firepower System Software Sourcefire Tunnel Control Channel Command Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-express-vcs-rce | Cisco Expressway Series and Cisco TelePresence Video Communication Server Remote Code Execution Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-er-ucm-redirect | Multiple Cisco Unified Communications Products Open Redirect Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-30360 | webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser | 2025-06-02T00:00:00.000Z | 2025-09-04T05:10:20.000Z |
| msrc_cve-2023-3600 | During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1. | 2023-07-01T07:00:00.000Z | 2025-09-04T05:09:41.000Z |
| msrc_cve-2021-38578 | Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. | 2022-03-02T00:00:00.000Z | 2025-09-04T05:09:29.000Z |
| msrc_cve-2023-29405 | Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go | 2023-06-01T07:00:00.000Z | 2025-09-04T05:08:03.000Z |
| msrc_cve-2020-36478 | An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid. | 2021-08-02T00:00:00.000Z | 2025-09-04T05:05:02.000Z |
| msrc_cve-2024-57257 | A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. | 2025-02-02T00:00:00.000Z | 2025-09-04T04:59:51.000Z |
| msrc_cve-2024-25260 | elfutils v0.189 was discovered to contain a NULL pointer dereference via the handle_verdef() function at readelf.c. | 2024-02-02T08:00:00.000Z | 2025-09-04T04:57:15.000Z |
| msrc_cve-2023-49292 | Possible private key restoration in go package github.com/ecies/go | 2023-12-01T08:00:00.000Z | 2025-09-04T04:54:22.000Z |
| msrc_cve-2025-38404 | usb: typec: displayport: Fix potential deadlock | 2025-07-02T00:00:00.000Z | 2025-09-04T04:49:40.000Z |
| msrc_cve-2025-27809 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | 2025-03-02T00:00:00.000Z | 2025-09-04T04:49:10.000Z |
| msrc_cve-2025-38565 | perf/core: Exit early on perf_mmap() fail | 2025-08-02T00:00:00.000Z | 2025-09-04T04:47:59.000Z |
| msrc_cve-2025-30359 | webpack-dev-server users' source code may be stolen when they access a malicious web site | 2025-06-02T00:00:00.000Z | 2025-09-04T04:45:07.000Z |
| msrc_cve-2025-38560 | x86/sev: Evict cache lines during SNP memory validation | 2025-08-02T00:00:00.000Z | 2025-09-04T04:44:06.000Z |
| msrc_cve-2019-14194 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. | 2019-07-02T00:00:00.000Z | 2025-09-04T04:41:53.000Z |
| msrc_cve-2025-38614 | eventpoll: Fix semi-unbounded recursion | 2025-08-02T00:00:00.000Z | 2025-09-04T04:39:23.000Z |
| msrc_cve-2025-38583 | clk: xilinx: vcu: unregister pll_post only if registered correctly | 2025-08-02T00:00:00.000Z | 2025-09-04T04:35:56.000Z |
| msrc_cve-2023-37203 | Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115. | 2023-07-01T07:00:00.000Z | 2025-09-04T04:35:56.000Z |
| msrc_cve-2019-14201 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T04:35:28.000Z |
| msrc_cve-2022-36114 | Extracting malicious crates can fill the file system | 2022-09-02T00:00:00.000Z | 2025-09-04T04:34:20.000Z |
| msrc_cve-2025-38572 | ipv6: reject malicious packets in ipv6_gso_segment() | 2025-08-02T00:00:00.000Z | 2025-09-04T04:31:59.000Z |
| msrc_cve-2019-14199 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call. | 2019-07-02T00:00:00.000Z | 2025-09-04T04:30:22.000Z |
| msrc_cve-2010-4756 | The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632. | 2011-03-02T00:00:00.000Z | 2025-09-04T04:29:41.000Z |
| msrc_cve-2024-57258 | Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. | 2025-02-02T00:00:00.000Z | 2025-09-04T04:25:09.000Z |
| msrc_cve-2025-38578 | f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | 2025-08-02T00:00:00.000Z | 2025-09-04T04:25:05.000Z |
| msrc_cve-2024-50280 | dm cache: fix flushing uninitialized delayed_work on cache_ctr error | 2024-11-02T00:00:00.000Z | 2025-09-04T04:24:51.000Z |
| msrc_cve-2025-23266 | NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service. | 2025-07-02T00:00:00.000Z | 2025-09-04T04:21:49.000Z |
| msrc_cve-2022-49063 | ice: arfs: fix use-after-free when freeing @rx_cpu_rmap | 2025-02-02T00:00:00.000Z | 2025-09-04T04:20:29.000Z |
| msrc_cve-2018-19416 | An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf. | 2018-11-02T00:00:00.000Z | 2025-09-04T04:18:37.000Z |
| msrc_cve-2025-38576 | powerpc/eeh: Make EEH driver device hotplug safe | 2025-08-02T00:00:00.000Z | 2025-09-04T04:15:21.000Z |
| msrc_cve-2022-49465 | blk-throttle: Set BIO_THROTTLED when bio has been throttled | 2025-02-02T00:00:00.000Z | 2025-09-04T04:15:17.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201709-0709 | A vulnerability in the implementation of Network Address Translation (NAT) functionality … | 2025-11-18T15:32:45.584000Z |
| var-201911-1117 | A vulnerability in the web-based management interface of certain Cisco Small Business RV … | 2025-11-18T15:32:43.558000Z |
| var-202002-1447 | DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Bet… | 2025-11-18T15:32:43.247000Z |
| var-202010-1066 | If exploited, this cross-site scripting vulnerability could allow remote attackers to inj… | 2025-11-18T15:32:42.451000Z |
| var-202101-0146 | A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) al… | 2025-11-18T15:32:42.232000Z |
| var-202110-0167 | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior t… | 2025-11-18T15:32:41.491000Z |
| var-202304-1067 | A vulnerability in the web-based management interface of Cisco Small Business Routers RV0… | 2025-11-18T15:32:39.265000Z |
| var-202501-3666 | A use after free issue was addressed with improved memory management. This issue is fixed… | 2025-11-18T15:32:29.937000Z |
| var-202505-2931 | Exposure of sensitive information caused by shared microarchitectural predictor state tha… | 2025-11-18T15:32:27.932000Z |
| var-202508-1254 | Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware… | 2025-11-18T15:32:26.768000Z |
| var-202508-2029 | A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tend… | 2025-11-18T15:32:26.675000Z |
| var-202508-3607 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to versio… | 2025-11-18T15:32:26.481000Z |
| var-202509-0137 | A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an u… | 2025-11-18T15:32:26.461000Z |
| var-201112-0187 | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent atta… | 2025-11-18T15:31:41.409000Z |
| var-201810-0857 | A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and C… | 2025-11-18T15:30:37.453000Z |
| var-202007-0327 | A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and… | 2025-11-18T15:30:35.553000Z |
| var-202302-0075 | A stored cross-site scripting vulnerability exists in the web application functionality o… | 2025-11-18T15:30:32.511000Z |
| var-202302-0076 | A stored cross-site scripting vulnerability exists in the web application functionality o… | 2025-11-18T15:30:32.481000Z |
| var-202302-0077 | A stored cross-site scripting vulnerability exists in the web application functionality o… | 2025-11-18T15:30:32.447000Z |
| var-202401-2573 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler … | 2025-11-18T15:30:26.702000Z |
| var-202406-0975 | Certain EOL GeoVision devices fail to properly filter user input for the specific functio… | 2025-11-18T15:30:25.488000Z |
| var-202509-0363 | A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINA… | 2025-11-18T15:30:19.559000Z |
| var-201608-0229 | Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, P… | 2025-11-18T15:29:29.535000Z |
| var-201610-0668 | Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) T… | 2025-11-18T15:29:29.429000Z |
| var-201610-0667 | Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification (ADS) T… | 2025-11-18T15:29:29.392000Z |
| var-201704-1556 | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with fi… | 2025-11-18T15:29:29.077000Z |
| var-201709-0695 | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through … | 2025-11-18T15:29:28.648000Z |
| var-201808-0384 | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary … | 2025-11-18T15:29:24.107000Z |
| var-202002-0403 | Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through t… | 2025-11-18T15:29:22.479000Z |
| var-201911-0300 | Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration b… | 2025-11-18T15:29:21.984000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000036 | jigbrowser+ for Android vulnerable to address bar spoofing | 2013-04-26T15:05+09:00 | 2013-04-26T15:05+09:00 |
| jvndb-2013-002427 | Buffer Overflow Vulnerability in Hitachi IT Operations Director | 2013-04-24T09:55+09:00 | 2013-04-24T09:55+09:00 |
| jvndb-2013-000033 | Sleipnir Mobile for Android loads arbitrary Extension API | 2013-04-12T12:41+09:00 | 2013-04-12T12:41+09:00 |
| jvndb-2013-000032 | Sleipnir for Windows vulnerable to address bar spoofing | 2013-04-11T14:14+09:00 | 2013-04-11T14:14+09:00 |
| jvndb-2011-000033 | Java Web Start may insecurely load policy files | 2011-06-10T16:22+09:00 | 2013-03-29T14:50+09:00 |
| jvndb-2013-000025 | OpenWnn for Android vulnerable to information disclosure | 2013-03-29T13:58+09:00 | 2013-03-29T13:58+09:00 |
| jvndb-2013-000030 | Lotus Domino vulnerable to denial-of-service (DoS) | 2013-03-28T12:32+09:00 | 2013-03-28T12:32+09:00 |
| jvndb-2011-000035 | Java Web Start may insecurely load dynamic libraries | 2011-06-10T16:23+09:00 | 2013-03-26T15:14+09:00 |
| jvndb-2013-000028 | OpenWnn/Flick support vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000027 | COBIME vulnerable to information disclosure | 2013-03-26T14:55+09:00 | 2013-03-26T14:55+09:00 |
| jvndb-2013-000029 | Simeji vulnerable to information disclosure | 2013-03-26T14:51+09:00 | 2013-03-26T14:51+09:00 |
| jvndb-2011-000034 | Java Web Start may insecurely load settings files | 2011-06-10T16:23+09:00 | 2013-03-26T14:46+09:00 |
| jvndb-2013-000026 | ArtIME Japanese Input vulnerable to information disclosure | 2013-03-26T13:36+09:00 | 2013-03-26T13:36+09:00 |
| jvndb-2013-000017 | Multiple Cisco products vulnerable to denial-of-service (DoS) | 2013-03-07T14:13+09:00 | 2013-03-11T16:22+09:00 |
| jvndb-2013-000016 | Kingsoft Writer vulnerable to buffer overflow | 2013-03-01T14:47+09:00 | 2013-03-01T14:47+09:00 |
| jvndb-2013-000012 | NEC Universal RAID Utility fails to restrict access permissions | 2013-02-21T13:54+09:00 | 2013-03-01T11:34+09:00 |
| jvndb-2013-000014 | dopvSTAR* vulnerable to cross-site scripting | 2013-02-28T13:46+09:00 | 2013-02-28T13:46+09:00 |
| jvndb-2013-000013 | dopvCOMET* vulnerable to cross-site scripting | 2013-02-28T13:37+09:00 | 2013-02-28T13:37+09:00 |
| jvndb-2013-000015 | Multiple JustSystems products vulnerable to arbitrary code execution | 2013-02-26T14:45+09:00 | 2013-02-26T14:45+09:00 |
| jvndb-2013-001605 | Multiple vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management | 2013-02-22T20:09+09:00 | 2013-02-22T20:09+09:00 |
| jvndb-2012-000113 | concrete5 vulnerable to cross-site scripting | 2012-12-21T12:41+09:00 | 2013-02-20T16:10+09:00 |
| jvndb-2013-000011 | 3DM (3ware Disk Manager) vulnerable to directory traversal | 2013-02-15T14:29+09:00 | 2013-02-15T14:29+09:00 |
| jvndb-2013-000010 | GREE for Android vulnerable to directory traversal | 2013-02-14T14:15+09:00 | 2013-02-14T14:15+09:00 |
| jvndb-2013-000009 | imgboard vulnerable to cross-site scripting | 2013-02-14T14:10+09:00 | 2013-02-14T14:10+09:00 |
| jvndb-2013-001470 | Accela BizSearch Gateway Option for TeamWARE Spoofing Vulnerability | 2013-02-13T16:47+09:00 | 2013-02-13T16:47+09:00 |
| jvndb-2013-001321 | User Authentication Vulnerability in Operational Management Function of Cosminexus | 2013-02-12T14:24+09:00 | 2013-02-12T14:24+09:00 |
| jvndb-2013-000007 | Cybozu Garoon vulnerable to SQL injection | 2013-02-08T13:58+09:00 | 2013-02-08T13:58+09:00 |
| jvndb-2013-000008 | Cybozu Garoon vulnerable to cross-site scripting | 2013-02-08T13:53+09:00 | 2013-02-08T13:53+09:00 |
| jvndb-2013-000006 | mora Downloader may insecurely load executable files | 2013-02-07T14:00+09:00 | 2013-02-07T14:00+09:00 |
| jvndb-2013-000005 | Weathernews Touch for Android stores location information in the system log file | 2013-01-31T13:38+09:00 | 2013-01-31T13:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01801-1 | Security update for libsoup | 2025-06-02T23:45:00Z | 2025-06-02T23:45:00Z |
| suse-su-2025:01799-1 | Security update for postgresql, postgresql16, postgresql17 | 2025-06-02T13:28:47Z | 2025-06-02T13:28:47Z |
| suse-su-2025:01794-1 | Security update for libsoup | 2025-06-02T09:04:15Z | 2025-06-02T09:04:15Z |
| suse-su-2025:01792-1 | Security update for dnsdist | 2025-06-02T07:38:53Z | 2025-06-02T07:38:53Z |
| suse-su-2025:01788-1 | Security update for java-1_8_0-ibm | 2025-05-31T10:34:31Z | 2025-05-31T10:34:31Z |
| suse-su-2025:01456-1 | Security update for sqlite3 | 2025-05-31T00:59:21Z | 2025-05-31T00:59:21Z |
| suse-su-2025:01787-1 | Security update for bind | 2025-05-30T17:15:20Z | 2025-05-30T17:15:20Z |
| suse-su-2025:01786-1 | Security update for postgresql14 | 2025-05-30T16:12:13Z | 2025-05-30T16:12:13Z |
| suse-su-2025:01785-1 | Security update for postgresql15 | 2025-05-30T16:11:11Z | 2025-05-30T16:11:11Z |
| suse-su-2025:01784-1 | Security update for glibc | 2025-05-30T16:10:00Z | 2025-05-30T16:10:00Z |
| suse-su-2025:01783-1 | Security update for postgresql17 | 2025-05-30T15:37:40Z | 2025-05-30T15:37:40Z |
| suse-su-2025:01782-1 | Security update for postgresql16 | 2025-05-30T15:33:27Z | 2025-05-30T15:33:27Z |
| suse-su-2025:01780-1 | Security update for poppler | 2025-05-30T13:43:45Z | 2025-05-30T13:43:45Z |
| suse-su-2025:01779-1 | Security update for iputils | 2025-05-30T13:39:04Z | 2025-05-30T13:39:04Z |
| suse-su-2025:01778-1 | Security update for open-vm-tools | 2025-05-30T13:05:19Z | 2025-05-30T13:05:19Z |
| suse-su-2025:01777-1 | Security update for iputils | 2025-05-30T13:04:03Z | 2025-05-30T13:04:03Z |
| suse-su-2025:01776-1 | Security update for iputils | 2025-05-30T13:02:56Z | 2025-05-30T13:02:56Z |
| suse-su-2025:01774-1 | Security update for python312-setuptools | 2025-05-30T12:10:38Z | 2025-05-30T12:10:38Z |
| suse-su-2025:01772-1 | Security update for postgresql14 | 2025-05-30T10:44:48Z | 2025-05-30T10:44:48Z |
| suse-su-2025:01771-1 | Security update for iputils | 2025-05-30T10:41:24Z | 2025-05-30T10:41:24Z |
| suse-su-2025:01770-1 | Security update for java-1_8_0-ibm | 2025-05-30T10:09:24Z | 2025-05-30T10:09:24Z |
| suse-su-2025:01769-1 | Security update for MozillaFirefox | 2025-05-30T09:30:30Z | 2025-05-30T09:30:30Z |
| suse-su-2025:01767-1 | Security update for postgresql16 | 2025-05-30T07:47:19Z | 2025-05-30T07:47:19Z |
| suse-su-2025:01766-1 | Security update for postgresql16 | 2025-05-30T07:45:38Z | 2025-05-30T07:45:38Z |
| suse-su-2025:01765-1 | Security update for postgresql17 | 2025-05-30T07:44:39Z | 2025-05-30T07:44:39Z |
| suse-su-2025:01763-1 | Security update for augeas | 2025-05-29T20:55:38Z | 2025-05-29T20:55:38Z |
| suse-su-2025:01762-1 | Security update for brotli | 2025-05-29T20:55:26Z | 2025-05-29T20:55:26Z |
| suse-su-2025:01761-1 | Security update for slurm_24_11 | 2025-05-29T16:08:32Z | 2025-05-29T16:08:32Z |
| suse-su-2025:01565-1 | Security update for open-vm-tools | 2025-05-29T16:00:39Z | 2025-05-29T16:00:39Z |
| suse-su-2025:01760-1 | Security update for slurm | 2025-05-29T14:54:19Z | 2025-05-29T14:54:19Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13827-1 | python310-Pillow-10.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13826-1 | podman-5.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13825-1 | libnghttp2-14-1.61.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13824-1 | kubeseal-0.26.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13823-1 | go1.22-1.22.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13822-1 | go1.21-1.21.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13821-1 | python310-pyzmq-25.1.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13820-1 | python310-numpy-1.26.2-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13819-1 | python310-cryptography-42.0.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13818-1 | libuv-devel-1.48.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13817-1 | kernel-devel-6.8.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13816-1 | freerdp2-devel-2.11.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13815-1 | freerdp-3.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13814-1 | buildah-1.35.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13813-1 | libmbedcrypto7-2.28.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13812-1 | etcd-3.5.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13811-1 | python310-validators-0.24.0-1.2 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13810-1 | nodejs-electron-28.2.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13809-1 | libwireshark17-4.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13808-1 | libqpid-proton-core10-0.38.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13807-1 | ovmf-202308-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13806-1 | gnutls-3.8.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13805-1 | curl-8.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13804-1 | avahi-0.8-33.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13803-1 | libonnx-1.16.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13802-1 | python-Scrapy-doc-2.11.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13801-1 | xen-4.18.1_02-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13800-1 | python39-3.9.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13799-1 | python310-3.10.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13798-1 | python310-jwcrypto-1.5.6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24467 | Tenda AC18 newVersion参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24466 | Tenda AC18 ddnsEn参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24465 | Tenda AC18 Username参数栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24420 | Microsoft Windows存在未明漏洞（CNVD-2025-24420） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24419 | Microsoft Office代码执行漏洞（CNVD-2025-24419） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24418 | Centreon Web SQL注入漏洞（CNVD-2025-24418） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24417 | DataEase DB2/MongoDB JNDI代码注入漏洞 | 2025-10-20 | 2025-10-21 |
| cnvd-2025-24416 | DataEase H2 JDBC注入代码执行漏洞 | 2025-10-20 | 2025-10-21 |
| cnvd-2025-24415 | Microsoft Office拒绝服务漏洞（CNVD-2025-24415 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24402 | Microsoft Excel代码执行漏洞（CNVD-2025-24402） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24401 | Microsoft Excel信息泄露漏洞（CNVD-2025-24401） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24400 | Microsoft Excel代码执行漏洞（CNVD-2025-24400） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24399 | Microsoft Office代码执行漏洞（CNVD-2025-24399） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24397 | Fortinet FortiClient MacOS installer数据伪造问题漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24396 | D-Link DAP-2695操作系统命令注入漏洞 | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24395 | Microsoft Excel信息泄露漏洞（CNVD-2025-24395） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24394 | Microsoft Excel代码执行漏洞（CNVD-2025-24394） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24393 | Adobe Illustrator越界写入漏洞（CNVD-2025-24393） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24392 | Adobe Illustrator越界写入漏洞（CNVD-2025-24392） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24391 | Adobe Framemaker内存错误引用漏洞（CNVD-2025-24391） | 2025-10-17 | 2025-10-21 |
| cnvd-2025-24390 | Tenda AC15数据伪造问题漏洞 | 2025-08-20 | 2025-10-21 |
| cnvd-2025-24389 | Tenda AC15 fromSetIpMacBind函数栈缓冲区溢出漏洞 | 2025-08-26 | 2025-10-21 |
| cnvd-2025-24388 | Tenda AC15 newVersion参数堆栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24387 | Tenda AC15 ddnsEn参数栈缓冲区溢出漏洞 | 2025-10-13 | 2025-10-21 |
| cnvd-2025-24259 | Tenda AC15 fromSysToolRestoreSet方法跨站请求伪造漏洞 | 2024-03-26 | 2025-10-21 |
| cnvd-2025-24258 | Online Admission System viewdoc.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-21 |
| cnvd-2025-24257 | Online Admission System SQL注入漏洞 | 2025-08-10 | 2025-10-21 |
| cnvd-2025-24256 | Fuji Electric V-SFT越界读取漏洞 | 2025-10-15 | 2025-10-21 |
| cnvd-2025-24299 | Tenda AC15跨站请求伪造漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24298 | Tenda AC15 fromDhcpListClient方法堆栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0058 | Vulnérabilité dans Postfix | 2024-01-22T00:00:00.000000 | 2024-01-22T00:00:00.000000 |
| certfr-2024-avi-0057 | Multiples vulnérabilités dans les produits IBM | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0056 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0055 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0054 | Vulnérabilité dans Exim | 2024-01-19T00:00:00.000000 | 2024-01-19T00:00:00.000000 |
| certfr-2024-avi-0053 | Multiples vulnérabilités dans les produits Nextcloud | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0052 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0051 | Vulnérabilité dans Drupal Core | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0050 | Multiples vulnérabilités dans Juniper Secure Analytics | 2024-01-18T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0038 | Vulnérabilité dans les produits SonicWall | 2024-01-16T00:00:00.000000 | 2024-01-18T00:00:00.000000 |
| certfr-2024-avi-0049 | Multiples vulnérabilités dans Oracle Weblogic Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0048 | Multiples vulnérabilités dans Oracle Systems | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0047 | Multiples vulnérabilités dans Oracle PeopleSoft | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0046 | Multiples vulnérabilités dans Oracle Java SE | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0045 | Multiples vulnérabilités dans Oracle Database Server | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0044 | Multiples vulnérabilités dans Oracle MySQL | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0043 | Multiples vulnérabilités dans Trend Micro Deep Security Agent | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0042 | Vulnérabilité dans MongoDB C-Driver | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0041 | Multiples vulnérabilités dans Google Chrome | 2024-01-17T00:00:00.000000 | 2024-01-17T00:00:00.000000 |
| certfr-2024-avi-0040 | Multiples vulnérabilités dans Atlassian Confluence et Jira | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0039 | Multiples vulnérabilités dans les produits Citrix | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0037 | Vulnérabilité dans VMware Aria Operations | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0036 | Vulnérabilité dans OpenSSL | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0035 | Vulnérabilité dans Synology Disk Station Manager | 2024-01-16T00:00:00.000000 | 2024-01-16T00:00:00.000000 |
| certfr-2024-avi-0034 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0033 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0032 | Vulnérabilité dans les produits WithSecure | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0031 | Multiples vulnérabilités dans les produits IBM | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0030 | Multiples vulnérabilités dans GitLab | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0029 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |