Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64247 |
6.5 (3.1)
|
WordPress Read More & Accordion plugin <= 3.5.4.1 - Br… |
edmon.parker |
Read More & Accordion |
2025-12-16T08:12:49.100Z | 2026-01-20T14:28:21.315Z |
| CVE-2025-64263 |
5.4 (3.1)
|
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… |
PluginEver |
WP Content Pilot |
2025-11-13T09:24:28.383Z | 2026-01-20T14:28:21.298Z |
| CVE-2025-64272 |
6.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.080Z | 2026-01-20T14:28:21.293Z |
| CVE-2025-64265 |
4.3 (3.1)
|
WordPress Frontend File Manager plugin <= 23.2 - Broke… |
N-Media |
Frontend File Manager |
2025-11-13T09:24:29.310Z | 2026-01-20T14:28:21.291Z |
| CVE-2025-64256 |
8.8 (3.1)
|
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… |
PressTigers |
Simple Folio |
2025-12-09T14:13:52.351Z | 2026-01-20T14:28:21.259Z |
| CVE-2025-64262 |
6.5 (3.1)
|
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… |
ramon fincken |
Auto Prune Posts |
2025-11-13T09:24:27.918Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64260 |
7.1 (3.1)
|
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… |
Marco Milesi |
ANAC XML Bandi di Gara |
2025-12-18T07:22:14.310Z | 2026-01-20T14:28:21.234Z |
| CVE-2025-64266 |
8.8 (3.1)
|
WordPress Booking and Rental Manager plugin <= 2.5.4 -… |
magepeopleteam |
Booking and Rental Manager |
2025-12-18T07:22:14.481Z | 2026-01-20T14:28:21.161Z |
| CVE-2025-64276 |
6.5 (3.1)
|
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… |
Ays Pro |
Survey Maker |
2025-11-13T09:24:31.911Z | 2026-01-20T14:28:21.160Z |
| CVE-2025-64259 |
6.5 (3.1)
|
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… |
Jeroen Schmit |
Theater for WordPress |
2025-11-13T09:24:26.955Z | 2026-01-20T14:28:21.159Z |
| CVE-2025-64273 |
7.5 (3.1)
|
WordPress Email marketing for WordPress by GetResponse… |
GetResponse |
Email marketing for WordPress by GetResponse Official |
2025-12-18T07:22:15.266Z | 2026-01-20T14:28:21.096Z |
| CVE-2025-64270 |
6.5 (3.1)
|
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … |
masteriyo |
Masteriyo - LMS |
2025-12-18T07:22:14.865Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64269 |
4.3 (3.1)
|
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… |
EDGARROJAS |
WooCommerce PDF Invoice Builder |
2025-11-13T09:24:30.214Z | 2026-01-20T14:28:21.085Z |
| CVE-2025-64274 |
4.3 (3.1)
|
WordPress WPKoi Templates for Elementor plugin <= 3.4.… |
wpkoithemes |
WPKoi Templates for Elementor |
2025-11-13T09:24:31.061Z | 2026-01-20T14:28:21.083Z |
| CVE-2025-64264 |
5.9 (3.1)
|
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … |
Aman |
Popup addon for Ninja Forms |
2025-11-13T09:24:28.871Z | 2026-01-20T14:28:21.081Z |
| CVE-2025-64253 |
4.9 (3.1)
|
WordPress Health Check & Troubleshooting plugin <= 1.7… |
WordPress.org |
Health Check & Troubleshooting |
2025-12-16T08:12:50.088Z | 2026-01-20T14:28:21.074Z |
| CVE-2025-64277 |
5.3 (3.1)
|
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… |
QuantumCloud |
ChatBot |
2025-11-13T09:24:32.345Z | 2026-01-20T14:28:21.020Z |
| CVE-2025-64255 |
7.2 (3.1)
|
WordPress Admin and Site Enhancements (ASE) plugin <= … |
Bowo |
Admin and Site Enhancements (ASE) |
2025-12-09T14:13:52.144Z | 2026-01-20T14:28:21.009Z |
| CVE-2025-64258 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… |
wpweb |
Follow My Blog Post |
2025-12-18T07:22:14.130Z | 2026-01-20T14:28:21.008Z |
| CVE-2025-64222 |
7.5 (3.1)
|
WordPress WooCommerce Recover Abandoned Cart plugin <=… |
FantasticPlugins |
WooCommerce Recover Abandoned Cart |
2025-12-18T07:22:12.885Z | 2026-01-20T14:28:20.993Z |
| CVE-2025-64250 |
6.1 (3.1)
|
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… |
wpWax |
Directorist |
2025-12-16T08:12:49.689Z | 2026-01-20T14:28:20.980Z |
| CVE-2025-64254 |
8.8 (3.1)
|
WordPress Photo Block plugin <= 1.5.1 - Broken Access … |
Ronald Huereca |
Photo Block |
2025-12-09T14:13:51.839Z | 2026-01-20T14:28:20.954Z |
| CVE-2025-64251 |
4.9 (3.1)
|
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… |
azzaroco |
Ultimate Learning Pro |
2025-12-16T08:12:49.880Z | 2026-01-20T14:28:20.915Z |
| CVE-2025-64246 |
4.3 (3.1)
|
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… |
netopsae |
Accessibility by AudioEye |
2025-12-16T08:12:48.902Z | 2026-01-20T14:28:20.873Z |
| CVE-2025-64238 |
4.3 (3.1)
|
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… |
NicolasKulka |
WPS Bidouille |
2025-12-16T08:12:47.350Z | 2026-01-20T14:28:20.852Z |
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64245 |
4.3 (3.1)
|
WordPress Import external attachments plugin <= 1.5.12… |
ryanpcmcquen |
Import external attachments |
2025-12-16T08:12:48.719Z | 2026-01-20T14:28:20.395Z |
| CVE-2025-64207 |
7.1 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… |
TieLabs |
Jannah |
2025-12-18T07:22:11.630Z | 2026-01-20T14:28:20.368Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68592 |
8.8 (3.1)
|
WordPress WP Adminify plugin <= 4.0.6.1 - Broken Acces… |
Liton Arefin |
WP Adminify |
2025-12-24T13:10:43.992Z | 2026-01-20T14:28:28.495Z |
| CVE-2025-68591 |
8.1 (3.1)
|
WordPress Simple File List plugin <= 6.1.15 - Broken A… |
Mitchell Bennis |
Simple File List |
2025-12-24T13:10:43.716Z | 2026-01-20T14:28:28.564Z |
| CVE-2025-68590 |
9.8 (3.1)
|
WordPress Integration for Contact Form 7 HubSpot plugi… |
CRM Perks |
Integration for Contact Form 7 HubSpot |
2025-12-24T13:10:43.422Z | 2026-01-20T14:28:28.555Z |
| CVE-2025-68589 |
8.1 (3.1)
|
WordPress WP Telegram Widget and Join Link plugin <= 2… |
WP Socio |
WP Telegram Widget and Join Link |
2025-12-24T13:10:43.150Z | 2026-01-20T14:28:28.424Z |
| CVE-2025-68588 |
8.1 (3.1)
|
WordPress TS Poll plugin <= 2.5.3 - Broken Access Cont… |
totalsoft |
TS Poll |
2025-12-24T13:10:42.857Z | 2026-01-20T14:28:28.481Z |
| CVE-2025-68587 |
8.1 (3.1)
|
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Co… |
Bob |
Watu Quiz |
2025-12-24T13:10:42.440Z | 2026-01-20T14:28:28.675Z |
| CVE-2025-68586 |
8.8 (3.1)
|
WordPress Cooked plugin <= 1.11.2 - Broken Access Cont… |
Gora Tech |
Cooked |
2025-12-24T13:10:42.037Z | 2026-01-20T14:28:28.502Z |
| CVE-2025-68585 |
8.8 (3.1)
|
WordPress WP Document Revisions plugin <= 3.7.2 - Brok… |
Ben Balter |
WP Document Revisions |
2025-12-24T13:10:41.715Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68584 |
8.8 (3.1)
|
WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site R… |
Constantin Boiangiu |
Vimeotheque |
2025-12-24T13:10:41.424Z | 2026-01-20T14:28:28.674Z |
| CVE-2025-68583 |
8.8 (3.1)
|
WordPress Fast User Switching plugin <= 1.4.10 - Cross… |
Tikweb Management |
Fast User Switching |
2025-12-24T13:10:41.121Z | 2026-01-20T14:28:28.749Z |
| CVE-2025-68582 |
8.8 (3.1)
|
WordPress Funnelforms Free plugin <= 3.8 - Broken Acce… |
Funnelforms |
Funnelforms Free |
2025-12-24T13:10:40.817Z | 2026-01-20T14:28:28.482Z |
| CVE-2025-68581 |
8.1 (3.1)
|
WordPress YITH Slider for page builders plugin <= 1.0.… |
YITHEMES |
YITH Slider for page builders |
2025-12-24T13:10:40.513Z | 2026-01-20T14:28:28.581Z |
| CVE-2025-68580 |
8.8 (3.1)
|
WordPress Advanced Classifieds & Directory Pro plugin … |
pluginsware |
Advanced Classifieds & Directory Pro |
2025-12-24T13:10:40.193Z | 2026-01-20T14:28:28.604Z |
| CVE-2025-68579 |
8.1 (3.1)
|
WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Acce… |
FolioVision |
FV Simpler SEO |
2025-12-24T13:10:39.669Z | 2026-01-20T14:28:28.329Z |
| CVE-2025-68578 |
8.1 (3.1)
|
WordPress Addonify plugin <= 2.0.4 - Broken Access Con… |
Addonify |
Addonify |
2025-12-24T13:10:39.343Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68577 |
8.8 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Broken Access Con… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.980Z | 2026-01-20T14:28:28.467Z |
| CVE-2025-68576 |
7.5 (3.1)
|
WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Ex… |
Virusdie |
Virusdie |
2025-12-24T13:10:38.690Z | 2026-01-20T14:28:28.713Z |
| CVE-2025-68575 |
8.8 (3.1)
|
WordPress Wappointment plugin <=2.7.2 - Broken Access … |
Wappointment team |
Wappointment |
2025-12-24T13:10:38.366Z | 2026-01-20T14:28:28.523Z |
| CVE-2025-68574 |
6.1 (3.1)
|
WordPress WPBakery Visual Composer WHMCS Elements plug… |
voidcoders |
WPBakery Visual Composer WHMCS Elements |
2025-12-24T13:10:38.100Z | 2026-01-20T14:28:28.414Z |
| CVE-2025-68573 |
8.8 (3.1)
|
WordPress Simple Keyword to Link plugin <= 1.5 - Cross… |
Alessandro Piconi |
Simple Keyword to Link |
2025-12-24T13:10:37.793Z | 2026-01-20T14:28:28.455Z |
| CVE-2025-68572 |
8.8 (3.1)
|
WordPress BBP Core plugin <= 1.4.1 - Broken Access Con… |
Spider Themes |
BBP Core |
2025-12-24T13:10:37.515Z | 2026-01-20T14:28:28.521Z |
| CVE-2025-68571 |
8.8 (3.1)
|
WordPress SALESmanago plugin <= 3.9.0 - Broken Access … |
SALESmanago |
SALESmanago |
2025-12-24T13:10:37.254Z | 2026-01-20T14:28:28.533Z |
| CVE-2025-68570 |
9.8 (3.1)
|
WordPress Captivate Sync plugin <= 3.2.2 - SQL Injecti… |
captivateaudio |
Captivate Sync |
2025-12-24T13:10:36.970Z | 2026-01-20T14:28:28.532Z |
| CVE-2025-68569 |
8.8 (3.1)
|
WordPress WP Time Slots Booking Form plugin <= 1.2.38 … |
codepeople |
WP Time Slots Booking Form |
2025-12-24T13:10:36.669Z | 2026-01-20T14:28:28.254Z |
| CVE-2025-68568 |
7.5 (3.1)
|
WordPress Popup Builder: Exit-Intent pop-up, Spin the … |
integrationclaspo |
Popup Builder: Exit-Intent pop-up, Spin the Wheel, Newsletter signup, Email Capture & Lead Generation forms maker |
2025-12-24T13:10:36.357Z | 2026-01-20T14:28:28.398Z |
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68565 |
9.8 (3.1)
|
WordPress Twitch Player plugin <= 2.1.3 - Broken Acces… |
JayBee |
Twitch Player |
2025-12-24T13:10:35.534Z | 2026-01-20T14:28:28.511Z |
| CVE-2025-68563 |
9.8 (3.1)
|
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - L… |
WP Shuffle |
Subscribe to Unlock Lite |
2025-12-24T12:31:30.996Z | 2026-01-20T14:28:28.665Z |
| CVE-2025-68562 |
9.9 (3.1)
|
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Uplo… |
RomanCode |
MapSVG |
2025-12-29T21:13:24.913Z | 2026-01-20T14:28:28.382Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68591 | Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exp… | 2025-12-24T13:16:26.457 | 2026-01-20T15:19:49.910 |
| fkie_cve-2025-68590 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:26.337 | 2026-01-20T15:19:49.757 |
| fkie_cve-2025-68589 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget … | 2025-12-24T13:16:26.220 | 2026-01-20T15:19:49.590 |
| fkie_cve-2025-68588 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Conf… | 2025-12-24T13:16:26.100 | 2026-01-20T15:19:49.457 |
| fkie_cve-2025-68587 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured … | 2025-12-24T13:16:25.980 | 2026-01-20T15:19:49.330 |
| fkie_cve-2025-68586 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Config… | 2025-12-24T13:16:25.860 | 2026-01-20T15:19:49.200 |
| fkie_cve-2025-68585 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allow… | 2025-12-24T13:16:25.740 | 2026-01-20T15:19:49.070 |
| fkie_cve-2025-68584 | Cross-Site Request Forgery (CSRF) vulnerability in Constantin Boiangiu Vimeotheque codeflavors-vime… | 2025-12-24T13:16:25.620 | 2026-01-20T15:19:48.943 |
| fkie_cve-2025-68583 | Cross-Site Request Forgery (CSRF) vulnerability in Tikweb Management Fast User Switching fast-user-… | 2025-12-24T13:16:25.507 | 2026-01-20T15:19:48.817 |
| fkie_cve-2025-68582 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploit… | 2025-12-24T13:16:25.387 | 2026-01-20T15:19:48.687 |
| fkie_cve-2025-68581 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-… | 2025-12-24T13:16:25.267 | 2026-01-20T15:19:48.557 |
| fkie_cve-2025-68580 | Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro… | 2025-12-24T13:16:25.140 | 2026-01-20T15:19:48.420 |
| fkie_cve-2025-68579 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exp… | 2025-12-24T13:16:25.020 | 2026-01-20T15:19:48.293 |
| fkie_cve-2025-68578 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Inco… | 2025-12-24T13:16:24.893 | 2026-01-20T15:19:48.163 |
| fkie_cve-2025-68577 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Con… | 2025-12-24T13:16:24.777 | 2026-01-20T15:19:48.037 |
| fkie_cve-2025-68576 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdi… | 2025-12-24T13:16:24.660 | 2026-01-20T15:19:47.920 |
| fkie_cve-2025-68575 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploitin… | 2025-12-24T13:16:24.540 | 2026-01-20T15:19:47.793 |
| fkie_cve-2025-68574 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:24.423 | 2026-01-20T15:19:47.663 |
| fkie_cve-2025-68573 | Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link simple-… | 2025-12-24T13:16:24.300 | 2026-01-20T15:19:47.537 |
| fkie_cve-2025-68572 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectl… | 2025-12-24T13:16:24.183 | 2026-01-20T15:19:47.407 |
| fkie_cve-2025-68571 | Missing Authorization vulnerability in SALESmanago SALESmanago salesmanago allows Exploiting Incorr… | 2025-12-24T13:16:24.070 | 2026-01-20T15:19:47.267 |
| fkie_cve-2025-68570 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:23.953 | 2026-01-20T15:19:47.127 |
| fkie_cve-2025-68569 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-… | 2025-12-24T13:16:23.833 | 2026-01-20T15:19:46.990 |
| fkie_cve-2025-68568 | Missing Authorization vulnerability in integrationclaspo Popup Builder: Exit-Intent pop-up, Spin th… | 2025-12-24T13:16:23.710 | 2026-01-20T15:19:46.863 |
| fkie_cve-2025-68567 | Cross-Site Request Forgery (CSRF) vulnerability in wphocus My auctions allegro my-auctions-allegro-… | 2025-12-24T13:16:23.593 | 2026-01-20T15:19:46.743 |
| fkie_cve-2025-68566 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:23.470 | 2026-01-20T15:19:46.617 |
| fkie_cve-2025-68565 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting… | 2025-12-24T13:16:23.340 | 2026-01-20T15:19:46.493 |
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| fkie_cve-2025-68562 | Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a W… | 2025-12-29T22:15:43.310 | 2026-01-20T15:19:46.273 |
| fkie_cve-2025-68561 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:46.567 | 2026-01-20T15:19:46.180 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-m4cg-3fm9-j6x9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-jxgx-9wwv-2g4h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-j934-wxvm-8fw9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hrc4-whhq-v375 |
6.5 (3.1)
|
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hgf5-67r8-3fcm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-h6rm-qgch-65pr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-gwq3-r365-h2g8 |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-fqq6-293f-f549 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-f36m-hf38-h6rh |
5.3 (3.1)
|
Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-cqxc-j3v9-5m9g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9r4p-xvf3-9x4q |
6.5 (3.1)
|
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploitin… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9gx8-7m79-g5p3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-98c9-f4v9-v6qr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x9-7c94-7879 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x7-mfr3-2vx3 |
5.4 (3.1)
|
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-8q5w-6x37-j5hg |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-865r-5g86-hfxf |
5.3 (3.1)
|
Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-7f3f-ppww-82r3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-74xg-56wg-gvpj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6pvg-49r3-g3c7 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6j84-m7wp-j9jm |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-59m8-jmcc-pxx7 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-57rv-vq9v-c6qg |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-5263-ggmq-48gj |
5.4 (3.1)
|
Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exp… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-3662-gvg6-j9xx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2wqc-47g4-pm22 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2w86-r6rm-76wr |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthem… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-2q9h-6v2j-hfpp |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2jf2-fhpf-vfw3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2hgv-qvvq-63hq |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-202 |
|
python-rply before 0.7.4 insecurely creates temporary files. | rply | 2019-11-21T15:15:00Z | 2021-08-27T03:22:19.853413Z |
| pysec-2016-33 |
|
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default … | roundup | 2016-04-13T14:59:00Z | 2021-08-27T03:22:19.738380Z |
| pysec-2014-96 |
|
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers… | roundup | 2014-04-10T20:29:00Z | 2021-08-27T03:22:19.707650Z |
| pysec-2010-31 |
|
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows… | roundup | 2010-09-24T19:00:00Z | 2021-08-27T03:22:19.672970Z |
| pysec-2008-10 |
|
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows att… | roundup | 2008-03-24T22:44:00Z | 2021-08-27T03:22:19.634629Z |
| pysec-2008-9 |
|
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and atta… | roundup | 2008-03-24T22:44:00Z | 2021-08-27T03:22:19.598501Z |
| pysec-2018-100 |
|
base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to exe… | rope | 2018-04-06T16:29:00Z | 2021-08-27T03:22:19.565672Z |
| pysec-2019-200 |
|
python-requests-Kerberos through 0.5 does not handle mutual authentication | requests-kerberos | 2019-12-15T22:15:00Z | 2021-08-27T03:22:19.338890Z |
| pysec-2021-146 |
|
All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) vi… | reportlab | 2021-02-18T16:15:00Z | 2021-08-27T03:22:19.297131Z |
| pysec-2021-145 |
|
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary… | quokka | 2021-08-16T18:15:00Z | 2021-08-27T03:22:19.070898Z |
| pysec-2021-144 |
|
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary… | quokka | 2021-08-16T18:15:00Z | 2021-08-27T03:22:19.043898Z |
| pysec-2021-143 |
|
Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary … | quokka | 2021-08-16T18:15:00Z | 2021-08-27T03:22:19.002010Z |
| pysec-2021-142 |
|
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is … | pyyaml | 2021-02-09T21:15:00Z | 2021-08-27T03:22:18.913334Z |
| pysec-2019-199 |
|
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a C… | pyxdg | 2019-06-06T19:29:00Z | 2021-08-27T03:22:18.878765Z |
| pysec-2014-95 |
|
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allow… | pyxdg | 2014-01-28T00:55:00Z | 2021-08-27T03:22:18.849828Z |
| pysec-2014-94 |
|
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in … | pywbem | 2014-05-05T17:06:00Z | 2021-08-27T03:22:18.708966Z |
| pysec-2014-93 |
|
PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which a… | pywbem | 2014-05-05T17:06:00Z | 2021-08-27T03:22:18.674694Z |
| pysec-2019-198 |
|
OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM trav… | python-saml | 2019-04-17T14:29:00Z | 2021-08-27T03:22:18.581552Z |
| pysec-2019-197 |
|
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass | python-keystoneclient | 2019-12-10T15:15:00Z | 2021-08-27T03:22:18.277308Z |
| pysec-2014-92 |
|
python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified im… | python-gnupg | 2014-10-25T21:55:00Z | 2021-08-27T03:22:18.219373Z |
| pysec-2014-91 |
|
The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which… | python-gnupg | 2014-10-25T21:55:00Z | 2021-08-27T03:22:18.180710Z |
| pysec-2014-90 |
|
The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which all… | python-gnupg | 2014-10-25T21:55:00Z | 2021-08-27T03:22:18.134121Z |
| pysec-2014-89 |
|
python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary command… | python-gnupg | 2014-06-09T19:55:00Z | 2021-08-27T03:22:18.100904Z |
| pysec-2010-30 |
|
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows c… | python-cjson | 2010-07-02T19:00:00Z | 2021-08-27T03:22:17.891561Z |
| pysec-2014-88 |
|
python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-th… | python-bugzilla | 2014-02-08T00:55:00Z | 2021-08-27T03:22:17.861270Z |
| pysec-2018-99 |
|
pyro before 3.15 unsafely handles pid files in temporary directory locations and opening … | pyro | 2018-08-20T13:29:00Z | 2021-08-27T03:22:17.581707Z |
| pysec-2013-31 |
|
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in… | pyopenssl | 2013-09-30T21:55:00Z | 2021-08-27T03:22:17.495539Z |
| pysec-2013-30 |
|
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in Mo… | pymongo | 2013-08-15T17:55:00Z | 2021-08-27T03:22:17.455260Z |
| pysec-2021-141 |
|
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely hea… | pygments | 2021-03-17T13:15:00Z | 2021-08-27T03:22:17.331175Z |
| pysec-2021-140 |
|
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of serv… | pygments | 2021-03-23T17:15:00Z | 2021-08-27T03:22:17.263376Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.048956Z |
| gsd-2024-32273 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.048759Z |
| gsd-2024-32362 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.048089Z |
| gsd-2024-32182 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047895Z |
| gsd-2024-32464 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047703Z |
| gsd-2024-32438 | Cross-Site Request Forgery (CSRF) vulnerability in cleverplugins.Com SEO Booster.This iss… | 2024-04-13T05:02:29.047512Z |
| gsd-2024-32416 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047319Z |
| gsd-2024-32231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047128Z |
| gsd-2024-32462 | Flatpak is a system for building, distributing, and running sandboxed desktop application… | 2024-04-13T05:02:29.046935Z |
| gsd-2024-32338 | A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 al… | 2024-04-13T05:02:29.046738Z |
| gsd-2024-32333 | TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnera… | 2024-04-13T05:02:29.046234Z |
| gsd-2024-32283 | Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand f… | 2024-04-13T05:02:29.045805Z |
| gsd-2024-32216 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.045614Z |
| gsd-2024-32327 | TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnera… | 2024-04-13T05:02:29.045426Z |
| gsd-2024-32209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.045237Z |
| gsd-2024-32370 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.045045Z |
| gsd-2024-32465 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044853Z |
| gsd-2024-32383 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044655Z |
| gsd-2024-32221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044459Z |
| gsd-2024-32297 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044265Z |
| gsd-2024-32324 | Buffer Overflow vulnerability in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v.3.2… | 2024-04-13T05:02:29.044024Z |
| gsd-2024-32172 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.043833Z |
| gsd-2024-32217 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.043167Z |
| gsd-2024-32224 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.042975Z |
| gsd-2024-32418 | An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the … | 2024-04-13T05:02:29.042777Z |
| gsd-2024-32459 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients an… | 2024-04-13T05:02:29.042567Z |
| gsd-2024-32346 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.041404Z |
| gsd-2024-32348 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.040749Z |
| gsd-2024-32420 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.040477Z |
| gsd-2024-32196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.039810Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-12329 | Malicious code in pwnstar-lib (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:53Z |
| mal-2024-12328 | Malicious code in postgresql-connector-python (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12327 | Malicious code in popeye-shyam-love (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12325 | Malicious code in pitest115 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12324 | Malicious code in pipcolorpkgv2 (PyPI) | 2024-11-30T16:24:10Z | 2025-12-11T09:27:53Z |
| mal-2024-12323 | Malicious code in pinloggertest (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12322 | Malicious code in piepunk (PyPI) | 2024-12-19T21:59:33Z | 2025-12-11T09:27:53Z |
| mal-2024-12321 | Malicious code in paquete-5 (PyPI) | 2024-08-05T22:25:51Z | 2025-12-11T09:27:53Z |
| mal-2024-12319 | Malicious code in openai-py3 (PyPI) | 2024-07-09T18:52:06Z | 2025-12-11T09:27:53Z |
| mal-2024-12318 | Malicious code in omigo-data-analytics (PyPI) | 2024-12-01T16:23:40Z | 2025-12-11T09:27:53Z |
| mal-2024-12314 | Malicious code in nirohf-reverse-shell (PyPI) | 2024-11-29T22:08:05Z | 2025-12-11T09:27:53Z |
| mal-2024-12313 | Malicious code in newpackagetest2025 (PyPI) | 2024-11-30T09:03:27Z | 2025-12-11T09:27:53Z |
| mal-2024-12312 | Malicious code in newpackagetest2024 (PyPI) | 2024-11-30T09:03:27Z | 2025-12-11T09:27:53Z |
| mal-2024-12311 | Malicious code in netsec-monitor (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12310 | Malicious code in myhexsender (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12307 | Malicious code in muxf (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12306 | Malicious code in mkdocs-with-pdfs (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12305 | Malicious code in mennort (PyPI) | 2024-09-23T17:03:45Z | 2025-12-11T09:27:53Z |
| mal-2024-12304 | Malicious code in manoj3121pip (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12302 | Malicious code in mac12manoj (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12301 | Malicious code in lwplugin (PyPI) | 2024-10-14T18:04:56Z | 2025-12-11T09:27:53Z |
| mal-2024-12300 | Malicious code in lobomarinopython (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12299 | Malicious code in lacucaracha (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12298 | Malicious code in kmvn-ekjvnbwkhjbewv (PyPI) | 2024-08-22T22:25:03Z | 2025-12-11T09:27:53Z |
| mal-2024-12296 | Malicious code in jupphelp (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-12295 | Malicious code in jupihelp (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-12294 | Malicious code in juphelper (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-12293 | Malicious code in juphelp (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-12291 | Malicious code in instacart-roulette-daemon-client (PyPI) | 2024-11-17T23:42:58Z | 2025-12-11T09:27:53Z |
| mal-2024-12289 | Malicious code in hugchats (PyPI) | 2024-07-09T18:52:06Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-2401 | GStreamer: Mehrere Schwachstellen | 2023-09-20T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2022-1105 | GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-03-31T22:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2022-1030 | xterm: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2022-01-30T23:00:00.000+00:00 | 2025-08-19T22:00:00.000+00:00 |
| wid-sec-w-2025-1860 | Nvidia Treiber: Mehrere Schwachstellen | 2020-06-24T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1859 | Intel Prozessoren: Schwachstelle ermöglicht Privilegieneskalation und Offenlegung von Informationen | 2019-12-10T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1788 | IBM Storage Virtualize-Produkte: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1618 | Kubernetes Image Builder: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-21T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-1837 | AMD Prozessoren: Mehrere Schwachstellen | 2024-08-13T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-0111 | GPUs verschiedener Hersteller: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-16T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2023-1059 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-20T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2022-2186 | Linux Kernel: Schwachstellen ermöglicht Denial of Service | 2022-11-28T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1852 | Bouncy Castle: Schwachstelle ermöglicht Denial of Service | 2025-08-17T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1825 | Drupal (Authenticator Login und Layout Builder Advanced Permissions): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-08-13T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1805 | Fortinet FortiWeb: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1738 | Drupal (AI SEO Link Advisor): Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-08-06T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1716 | Apache OFBiz: Schwachstelle ermöglicht Codeausführung | 2025-08-04T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1684 | Drupal: Mehrere Schwachstellen | 2025-07-30T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1631 | Drupal (COOKiES Consent Management): Schwachstelle ermöglicht Cross-Site Scripting | 2025-07-23T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1398 | IBM WebSphere Application Server: Schwachstelle ermöglicht Codeausführung | 2025-06-25T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1051 | IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting | 2025-05-14T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-0866 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-22T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-0595 | Jenkins Plugins: Mehrere Schwachstellen | 2025-03-19T23:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-0143 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1322 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe | 2024-06-09T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2024-1232 | Rsync: Mehrere Schwachstellen | 2020-02-24T23:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2023-3131 | X.Org X11: Mehrere Schwachstellen | 2023-12-12T23:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1851 | Apache Superset: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1849 | Rockwell Automation FactoryTalk: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1848 | Rockwell Automation ControlLogix: Schwachstelle ermöglicht Codeausführung | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1845 | Cisco Secure Firewall Threat Defense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:21203 | Red Hat Security Advisory: Red Hat Ceph Storage | 2025-11-12T21:27:55+00:00 | 2026-01-21T23:28:56+00:00 |
| rhsa-2025:21068 | Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update | 2025-11-12T02:43:07+00:00 | 2026-01-21T23:28:53+00:00 |
| rhsa-2025:19895 | Red Hat Security Advisory: OpenShift Container Platform 4.12.82 bug fix and security update | 2025-11-13T09:09:20+00:00 | 2026-01-21T23:28:53+00:00 |
| rhsa-2025:19314 | Red Hat Security Advisory: OpenShift Container Platform 4.17.43 bug fix and security update | 2025-11-05T11:57:29+00:00 | 2026-01-21T23:28:51+00:00 |
| rhsa-2025:1931 | Red Hat Security Advisory: Red Hat Developer Hub 1.4.2 release. | 2025-02-27T16:14:24+00:00 | 2026-01-21T23:28:51+00:00 |
| rhsa-2025:19058 | Red Hat Security Advisory: OpenShift Container Platform 4.14.58 bug fix and security update | 2025-10-30T02:38:11+00:00 | 2026-01-21T23:28:50+00:00 |
| rhsa-2025:19047 | Red Hat Security Advisory: OpenShift Container Platform 4.18.27 bug fix and security update | 2025-10-29T08:31:22+00:00 | 2026-01-21T23:28:49+00:00 |
| rhsa-2025:19017 | Red Hat Security Advisory: OpenShift Container Platform 4.16.51 bug fix and security update | 2025-10-29T09:00:32+00:00 | 2026-01-21T23:28:48+00:00 |
| rhsa-2025:19003 | Red Hat Security Advisory: OpenShift Container Platform 4.20.1 bug fix and security update | 2025-10-30T03:02:15+00:00 | 2026-01-21T23:28:46+00:00 |
| rhsa-2025:1888 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.15.1 security update | 2025-02-26T19:14:08+00:00 | 2026-01-21T23:28:44+00:00 |
| rhsa-2025:1875 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.9 | 2025-02-26T14:58:54+00:00 | 2026-01-21T23:28:44+00:00 |
| rhsa-2025:1870 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (osp-director-operator) security update | 2025-02-26T13:47:46+00:00 | 2026-01-21T23:28:43+00:00 |
| rhsa-2025:1869 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (osp-director-operator) security update | 2025-02-26T13:39:37+00:00 | 2026-01-21T23:28:43+00:00 |
| rhsa-2025:1842 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-25T15:40:30+00:00 | 2026-01-21T23:28:35+00:00 |
| rhsa-2025:18233 | Red Hat Security Advisory: OpenShift Container Platform 4.19.17 bug fix and security update | 2025-10-21T13:18:19+00:00 | 2026-01-21T23:28:32+00:00 |
| rhsa-2025:17145 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17 security, enhancement & bug fix update | 2025-10-01T12:01:32+00:00 | 2026-01-21T23:28:30+00:00 |
| rhsa-2025:1704 | Red Hat Security Advisory: OpenShift Container Platform 4.16.36 security and extras update | 2025-02-27T00:33:09+00:00 | 2026-01-21T23:28:26+00:00 |
| rhsa-2025:1611 | Red Hat Security Advisory: nodejs:22 security update | 2025-02-17T18:04:26+00:00 | 2026-01-21T23:28:23+00:00 |
| rhsa-2025:1613 | Red Hat Security Advisory: nodejs:22 security update | 2025-02-17T19:21:42+00:00 | 2026-01-21T23:28:22+00:00 |
| rhsa-2025:1582 | Red Hat Security Advisory: nodejs:18 security update | 2025-02-17T12:52:35+00:00 | 2026-01-21T23:28:19+00:00 |
| rhsa-2025:1446 | Red Hat Security Advisory: nodejs:18 security update | 2025-02-13T16:03:15+00:00 | 2026-01-21T23:28:15+00:00 |
| rhsa-2025:1443 | Red Hat Security Advisory: nodejs:20 security update | 2025-02-13T15:42:45+00:00 | 2026-01-21T23:28:10+00:00 |
| rhsa-2025:1351 | Red Hat Security Advisory: nodejs:20 security update | 2025-02-12T15:32:22+00:00 | 2026-01-21T23:28:05+00:00 |
| rhsa-2025:1321 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T15:37:26+00:00 | 2026-01-21T23:27:55+00:00 |
| rhsa-2025:1286 | Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release | 2025-02-11T10:51:36+00:00 | 2026-01-21T23:27:54+00:00 |
| rhsa-2025:1249 | Red Hat Security Advisory: updated discovery container images | 2025-02-10T18:38:39+00:00 | 2026-01-21T23:27:49+00:00 |
| rhsa-2025:10853 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.19.0 | 2025-07-14T07:36:21+00:00 | 2026-01-21T23:27:33+00:00 |
| rhsa-2025:10020 | Red Hat Security Advisory: Network Observability 1.9.0 for OpenShift | 2025-07-01T07:28:57+00:00 | 2026-01-21T23:27:21+00:00 |
| rhsa-2025:0876 | Red Hat Security Advisory: OpenShift Container Platform 4.17.15 bug fix and security update | 2025-02-05T13:37:42+00:00 | 2026-01-21T23:27:18+00:00 |
| rhsa-2025:0771 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.4.2 security and bug fix update | 2025-01-28T15:50:58+00:00 | 2026-01-21T23:27:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-228-04 | Softing Secure Integration Server | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-03 | Delta Industrial Automation DRAS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-01 | Yokogawa CENTUM Controller FCS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-223-06 | Siemens SICAM TOOLBOX II | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-04 | Emerson ROC800, ROC800L and DL8000 | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-03 | Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-05 | Siemens SICAM A8000 Web Server Module | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-223-02 | Siemens Teamcenter | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-223-01 | Siemens Simcenter STAR-CCM+ | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-221-03 | Emerson OpenBSI | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-221-02 | Emerson ControlWave | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-195-15 | Siemens SIMATIC eaSie Core Package | 2022-07-12T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-195-07 | Siemens Datalogics File Parsing Vulnerability | 2022-07-12T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-167-13 | Siemens Teamcenter | 2022-06-14T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-132-16 | Siemens Teamcenter | 2022-05-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-132-13 | Siemens Industrial Devices using libcurl | 2022-05-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-041-05 | Siemens SICAM TOOLBOX II (Update A) | 2022-02-08T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-041-02 | Siemens SIMATIC WinCC and PCS | 2022-02-08T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-21-194-06 | Siemens SIMATIC Software Products (Update B) | 2021-07-13T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-20-315-04 | Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A) | 2020-11-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-20-196-05 | Siemens UMC Stack (Update H) | 2020-07-14T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-19-134-09 | Siemens SIMATIC Panels and WinCC (TIA Portal) | 2019-04-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-216-01 | Digi ConnectPort X2D | 2022-08-04T00:00:00.000000Z | 2022-08-04T00:00:00.000000Z |
| icsa-22-207-01 | Inductive Automation Ignition | 2022-07-26T00:00:00.000000Z | 2022-08-04T00:00:00.000000Z |
| icsa-22-209-01 | Rockwell Products Impacted by Chromium Type Confusion | 2022-07-28T00:00:00.000000Z | 2022-07-28T00:00:00.000000Z |
| icsa-22-207-02 | Honeywell Safety Manager | 2022-07-26T06:00:00.000000Z | 2022-07-26T06:00:00.000000Z |
| icsa-22-207-04 | MOXA NPort 5110 | 2022-07-26T00:00:00.000000Z | 2022-07-26T00:00:00.000000Z |
| icsa-22-207-03 | Honeywell Saia Burgess PG5 PCD | 2022-07-26T00:00:00.000000Z | 2022-07-26T00:00:00.000000Z |
| icsa-22-202-05 | AutomationDirect Stride Field I/O | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-202-03 | Rockwell Automation ISaGRAF Workbench | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20181003-dna-unauth-access | Cisco Digital Network Architecture Center Unauthenticated Access Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-dna-auth-bypass | Cisco Digital Network Architecture Center Authentication Bypass Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-csp-xss | Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-cpcp-password | Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-asa-syslog-dos | Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-asa-ipsec-dos | Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-asa-acl-bypass | Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20181003-300-switch-xss | Cisco Small Business 300 Series Managed Switches Cross-Site Scripting Vulnerability | 2018-10-03T16:00:00+00:00 | 2018-10-03T16:00:00+00:00 |
| cisco-sa-20180926-ipsec | Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-28T14:12:00+00:00 |
| cisco-sa-20180926-webuidos | Cisco IOS XE Software Web UI Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-webdos | Cisco IOS XE Software HTTP Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-vtp | Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-tacplus | Cisco IOS and IOS XE Software TACACS+ Client Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-sm1t3e3 | Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-sip-alg | Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-shell-access | Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-privesc | Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-pnp-memleak | Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-ospfv3-dos | Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-macsec | Cisco IOS XE Software MACsec MKA Using EAP-TLS Authentication Bypass Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-ir800-memwrite | Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary Memory Write Vulnerabilities | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-ipv6hbh | Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-iosxe-cmdinj | Cisco IOS XE Software Command Injection Vulnerabilities | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-errdisable | Cisco IOS XE Software Errdisable Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-digsig | Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-cmp | Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-cdp-memleak | Cisco IOS XE Software Cisco Discovery Protocol Memory Leak Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-cdp-dos | Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180926-catalyst6800 | Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability | 2018-09-26T16:00:00+00:00 | 2018-09-26T16:00:00+00:00 |
| cisco-sa-20180905-webex-pe | Cisco Webex Meetings Client for Windows Privilege Escalation Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-26T13:34:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-57259 | sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. | 2025-02-02T00:00:00.000Z | 2025-09-04T04:14:59.000Z |
| msrc_cve-2025-4878 | Libssh: use of uninitialized variable in privatekey_from_file() | 2025-07-02T00:00:00.000Z | 2025-09-04T04:13:58.000Z |
| msrc_cve-2023-24539 | Improper sanitization of CSS values in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T04:09:59.000Z |
| msrc_cve-2025-50200 | RabbitMQ Node can log Basic Auth header from an HTTP request | 2025-06-02T00:00:00.000Z | 2025-09-04T04:09:13.000Z |
| msrc_cve-2025-54314 | Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments." | 2025-07-02T00:00:00.000Z | 2025-09-04T04:06:48.000Z |
| msrc_cve-2025-38561 | ksmbd: fix Preauh_HashValue race condition | 2025-08-02T00:00:00.000Z | 2025-09-04T04:06:25.000Z |
| msrc_cve-2025-40914 | Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow | 2025-06-02T00:00:00.000Z | 2025-09-04T04:05:27.000Z |
| msrc_cve-2025-38601 | wifi: ath11k: clear initialized flag for deinit-ed srng lists | 2025-08-02T00:00:00.000Z | 2025-09-04T04:02:55.000Z |
| msrc_cve-2025-7783 | Usage of unsafe random function in form-data for choosing boundary | 2025-07-02T00:00:00.000Z | 2025-09-04T04:02:28.000Z |
| msrc_cve-2021-28216 | BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. | 2021-08-02T00:00:00.000Z | 2025-09-04T04:00:29.000Z |
| msrc_cve-2022-49535 | scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI | 2025-02-02T00:00:00.000Z | 2025-09-04T03:58:29.000Z |
| msrc_cve-2025-6141 | GNU ncurses parse_entry.c postprocess_termcap stack-based overflow | 2025-06-02T00:00:00.000Z | 2025-09-04T03:58:14.000Z |
| msrc_cve-2025-38568 | net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing | 2025-08-02T00:00:00.000Z | 2025-09-04T03:57:06.000Z |
| msrc_cve-2024-1552 | Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8. | 2024-02-02T08:00:00.000Z | 2025-09-04T03:56:01.000Z |
| msrc_cve-2019-16707 | Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. | 2019-09-02T00:00:00.000Z | 2025-09-04T03:53:50.000Z |
| msrc_cve-2025-38581 | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 2025-08-02T00:00:00.000Z | 2025-09-04T03:53:45.000Z |
| msrc_cve-2024-38628 | usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. | 2024-06-02T07:00:00.000Z | 2025-09-04T03:53:18.000Z |
| msrc_cve-2025-7395 | Domain Name Validation Bypass with Apple Native Certificate Validation | 2025-07-02T00:00:00.000Z | 2025-09-04T03:52:58.000Z |
| msrc_cve-2024-57255 | An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. | 2025-02-02T00:00:00.000Z | 2025-09-04T03:52:20.000Z |
| msrc_cve-2025-38612 | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:51:07.000Z |
| msrc_cve-2024-53177 | smb: prevent use-after-free due to open_cached_dir error paths | 2024-12-02T00:00:00.000Z | 2025-09-04T03:50:05.000Z |
| msrc_cve-2021-28210 | An unlimited recursion in DxeCore in EDK II. | 2021-06-02T00:00:00.000Z | 2025-09-04T03:47:50.000Z |
| msrc_cve-2025-38563 | perf/core: Prevent VMA split of buffer mappings | 2025-08-02T00:00:00.000Z | 2025-09-04T03:47:38.000Z |
| msrc_cve-2025-7394 | In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is called. This can lead to weak or predictable random numbers generated in applications that are both using RAND_bytes() and doing fork() operations. This only affects applications explicitly calling RAND_bytes() after fork() and does not affect any internal TLS operations. Although RAND_bytes() documentation in OpenSSL calls out not being safe for use with fork() without first calling RAND_poll(), an additional code change was also made in wolfSSL to make RAND_bytes() behave similar to OpenSSL after a fork() call without calling RAND_poll(). Now the Hash-DRBG used gets reseeded after detecting running in a new process. If making use of RAND_bytes() and calling fork() we recommend updating to the latest version of wolfSSL. Thanks to Per Allansson from Appgate for the report. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:46:05.000Z |
| msrc_cve-2024-57984 | i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition | 2025-02-02T00:00:00.000Z | 2025-09-04T03:45:33.000Z |
| msrc_cve-2025-49795 | Libxml: null pointer dereference leads to denial of service (dos) | 2025-06-02T00:00:00.000Z | 2025-09-04T03:44:32.000Z |
| msrc_cve-2025-3576 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions | 2025-04-02T00:00:00.000Z | 2025-09-04T03:44:11.000Z |
| msrc_cve-2022-27536 | Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. | 2022-04-02T00:00:00.000Z | 2025-09-04T03:43:28.000Z |
| msrc_cve-2025-54349 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. | 2025-08-02T00:00:00.000Z | 2025-09-04T03:41:51.000Z |
| msrc_cve-2025-38611 | vmci: Prevent the dispatching of uninitialized payloads | 2025-08-02T00:00:00.000Z | 2025-09-04T03:38:53.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202103-1332 | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bo… | 2025-11-18T15:29:21.210000Z |
| var-202409-2142 | An input validation vulnerability exists in the Rockwell Automation Sequence Manager™ whi… | 2025-11-18T15:29:10.983000Z |
| var-201604-0660 | Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote … | 2025-11-18T15:28:46.094000Z |
| var-201702-0952 | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authent… | 2025-11-18T15:28:45.590000Z |
| var-201708-1321 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS X… | 2025-11-18T15:28:44.996000Z |
| var-201803-1769 | OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880… | 2025-11-18T15:28:40.557000Z |
| var-201810-0977 | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), … | 2025-11-18T15:28:39.538000Z |
| var-202006-1646 | A memory consumption issue was addressed with improved memory handling. This issue is fix… | 2025-11-18T15:28:37.712000Z |
| var-202205-0394 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x… | 2025-11-18T15:28:35.748000Z |
| var-202209-1931 | A code injection vulnerability in the User Portal and Webadmin allows a remote attacker t… | 2025-11-18T15:28:35.157000Z |
| var-202301-0769 | TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function … | 2025-11-18T15:28:34.740000Z |
| var-202301-0770 | In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when rece… | 2025-11-18T15:28:34.712000Z |
| var-202401-1629 | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC … | 2025-11-18T15:28:32.729000Z |
| var-202501-1338 | Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functiona… | 2025-11-18T15:28:29.265000Z |
| var-202501-1337 | Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functiona… | 2025-11-18T15:28:29.243000Z |
| var-202505-4203 | The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthen… | 2025-11-18T15:28:23.199000Z |
| var-202508-1971 | An information disclosure vulnerability exists in the /goform/getproductInfo functionalit… | 2025-11-18T15:28:22.215000Z |
| var-202510-0221 | TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulner… | 2025-11-18T15:28:21.009000Z |
| var-201411-0418 | Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on N… | 2025-11-18T15:27:35.961000Z |
| var-201805-0263 | An issue was discovered on Dasan GPON home routers. Command Injection can occur via the d… | 2025-11-18T15:27:33.715000Z |
| var-201805-0262 | An issue was discovered on Dasan GPON home routers. It is possible to bypass authenticati… | 2025-11-18T15:27:33.670000Z |
| var-201905-0745 | LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arb… | 2025-11-18T15:27:32.693000Z |
| var-202201-1001 | An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-20… | 2025-11-18T15:27:29.738000Z |
| var-202202-1278 | Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Ro… | 2025-11-18T15:27:29.580000Z |
| var-202312-0888 | Memory corruption in Graphics Linux while assigning shared virtual memory region during I… | 2025-11-18T15:27:22.212000Z |
| var-202504-3437 | SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorizat… | 2025-11-18T15:27:16.906000Z |
| var-201411-0154 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows … | 2025-11-18T15:26:13.409000Z |
| var-201512-0518 | Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.… | 2025-11-18T15:26:12.477000Z |
| var-201608-0222 | Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on AS… | 2025-11-18T15:26:12.219000Z |
| var-201803-1373 | A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM… | 2025-11-18T15:26:10.751000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2013-000004 | WebSphere Application Server (WAS) vulnerable to cross-site scripting | 2013-01-25T12:32+09:00 | 2013-01-25T12:32+09:00 |
| jvndb-2013-000003 | myu-s / PHP WeblogSystem by netmania vulnerable to cross-site scripting | 2013-01-22T15:22+09:00 | 2013-01-22T15:22+09:00 |
| jvndb-2013-000002 | Documents Pro (formerly Files HD) vulnerable to directory traversal | 2013-01-18T13:39+09:00 | 2013-01-18T13:39+09:00 |
| jvndb-2013-000001 | Documents Pro (formerly Files HD) vulnerable to cross-site scripting | 2013-01-18T13:36+09:00 | 2013-01-18T13:36+09:00 |
| jvndb-2012-005827 | Cross-site Scripting Vulnerability in Collaboration - Bulletin board in Multiple Hitachi Products | 2012-12-28T16:43+09:00 | 2012-12-28T16:43+09:00 |
| jvndb-2012-000112 | Opera Mini / Opera Mobile for Android vulnerable in the WebView class | 2012-12-20T15:04+09:00 | 2012-12-28T16:13+09:00 |
| jvndb-2012-000063 | Python SimpleHTTPServer vulnerable to cross-site scripting | 2012-06-19T14:38+09:00 | 2012-12-26T18:01+09:00 |
| jvndb-2011-002111 | Samba Web Administration Tool vulnerable to cross-site scripting | 2011-08-26T17:14+09:00 | 2012-12-26T11:42+09:00 |
| jvndb-2011-002110 | Samba Web Administration Tool vulnerable to cross-site request forgery | 2011-08-26T17:12+09:00 | 2012-12-26T11:37+09:00 |
| jvndb-2012-000115 | Loctouch for Android information management vulnerability | 2012-12-21T12:37+09:00 | 2012-12-21T12:37+09:00 |
| jvndb-2012-000114 | Loctouch for Android vulnerable in handling of implicit intents | 2012-12-21T12:29+09:00 | 2012-12-21T12:29+09:00 |
| jvndb-2012-000111 | Boat Browser / Boat Browser Mini vulnerable in the WebView class | 2012-12-20T15:00+09:00 | 2012-12-20T15:00+09:00 |
| jvndb-2012-000110 | WikkaWiki vulnerable to cross-site scripting | 2012-12-17T12:23+09:00 | 2012-12-17T12:23+09:00 |
| jvndb-2012-000109 | Welcart vulnerable to cross-site request forgery | 2012-12-14T12:52+09:00 | 2012-12-14T12:52+09:00 |
| jvndb-2012-000108 | Welcart vulnerable to cross-site scripting | 2012-12-14T12:50+09:00 | 2012-12-14T12:50+09:00 |
| jvndb-2012-000107 | KENT-WEB ACCESS REPORT vulnerable to cross-site scripting | 2012-12-06T12:41+09:00 | 2012-12-06T12:41+09:00 |
| jvndb-2012-000106 | KENT-WEB ACCESS REPORT vulnerable to cross-site scripting | 2012-12-06T12:40+09:00 | 2012-12-06T12:40+09:00 |
| jvndb-2012-000102 | Multiple Android devices vulnerable to denial-of-service (DoS) | 2012-11-14T15:07+09:00 | 2012-11-30T18:01+09:00 |
| jvndb-2012-000105 | Multiple KYOCERA mobile devices may reboot during email reception | 2012-11-30T13:58+09:00 | 2012-11-30T13:58+09:00 |
| jvndb-2012-005486 | Denial of Service (DoS) Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | 2012-11-29T15:23+09:00 | 2012-11-29T15:23+09:00 |
| jvndb-2012-005485 | Hitachi Device Manager Software Denial of Service (DoS) Vulnerability | 2012-11-29T14:48+09:00 | 2012-11-29T14:48+09:00 |
| jvndb-2012-005201 | Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP | 2012-11-05T17:58+09:00 | 2012-11-26T18:01+09:00 |
| jvndb-2012-000104 | BIGACE vulnerable to session fixation | 2012-11-21T14:34+09:00 | 2012-11-21T14:34+09:00 |
| jvndb-2012-000103 | Monaca Debugger for Android information management vulnerability | 2012-11-16T14:10+09:00 | 2012-11-16T14:10+09:00 |
| jvndb-2012-000101 | BeZIP vulnerable to directory traversal | 2012-11-07T16:01+09:00 | 2012-11-07T16:01+09:00 |
| jvndb-2012-000100 | Pebble vulnerable to open redirect | 2012-11-02T14:23+09:00 | 2012-11-02T14:23+09:00 |
| jvndb-2012-000099 | Pebble vulnerable to HTTP header injection | 2012-11-02T14:21+09:00 | 2012-11-02T14:21+09:00 |
| jvndb-2012-000098 | Pebble vulnerability where entries may become unviewable | 2012-11-02T14:20+09:00 | 2012-11-02T14:20+09:00 |
| jvndb-2012-000097 | MosP kintai kanri vulnerable to authentication bypass | 2012-11-02T14:18+09:00 | 2012-11-02T14:18+09:00 |
| jvndb-2012-000096 | MosP kintai kanri fails to restrict access permissions | 2012-11-02T14:16+09:00 | 2012-11-02T14:16+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01759-1 | Security update for slurm | 2025-05-29T14:53:55Z | 2025-05-29T14:53:55Z |
| suse-su-2025:01758-1 | Security update for slurm_23_02 | 2025-05-29T14:48:59Z | 2025-05-29T14:48:59Z |
| suse-su-2025:01757-1 | Security update for slurm_24_11 | 2025-05-29T14:47:58Z | 2025-05-29T14:47:58Z |
| suse-su-2025:01756-1 | Security update for slurm_22_05 | 2025-05-29T14:39:06Z | 2025-05-29T14:39:06Z |
| suse-su-2025:01755-1 | Security update for slurm_22_05 | 2025-05-29T14:37:35Z | 2025-05-29T14:37:35Z |
| suse-su-2025:01754-1 | Security update for augeas | 2025-05-29T14:19:21Z | 2025-05-29T14:19:21Z |
| suse-su-2025:01521-1 | Security update for tomcat | 2025-05-29T14:04:09Z | 2025-05-29T14:04:09Z |
| suse-su-2025:01582-1 | Security update for brltty | 2025-05-29T13:34:13Z | 2025-05-29T13:34:13Z |
| suse-su-2025:01504-1 | Security update for libsoup | 2025-05-29T13:33:46Z | 2025-05-29T13:33:46Z |
| suse-su-2025:01503-1 | Security update for libsoup2 | 2025-05-29T13:33:40Z | 2025-05-29T13:33:40Z |
| suse-su-2025:01662-2 | Security update for python-cryptography | 2025-05-29T13:31:03Z | 2025-05-29T13:31:03Z |
| suse-su-2025:01644-2 | Security update for postgresql17 | 2025-05-29T13:30:04Z | 2025-05-29T13:30:04Z |
| suse-su-2025:01753-1 | Security update for slurm_20_11 | 2025-05-29T12:55:13Z | 2025-05-29T12:55:13Z |
| suse-su-2025:01752-1 | Security update for slurm_23_02 | 2025-05-29T12:54:31Z | 2025-05-29T12:54:31Z |
| suse-su-2025:01751-1 | Security update for slurm | 2025-05-29T12:53:40Z | 2025-05-29T12:53:40Z |
| suse-su-2025:01750-1 | Security update for postgresql13 | 2025-05-29T12:48:10Z | 2025-05-29T12:48:10Z |
| suse-su-2025:01749-1 | Security update for postgresql15 | 2025-05-29T12:44:09Z | 2025-05-29T12:44:09Z |
| suse-su-2025:01748-1 | Security update for postgresql15 | 2025-05-29T12:42:12Z | 2025-05-29T12:42:12Z |
| suse-su-2025:01747-1 | Security update for grub2 | 2025-05-29T12:40:34Z | 2025-05-29T12:40:34Z |
| suse-su-2025:01746-1 | Security update for webkit2gtk3 | 2025-05-29T12:37:32Z | 2025-05-29T12:37:32Z |
| suse-su-2025:01745-1 | Security update for dnsdist | 2025-05-29T12:21:01Z | 2025-05-29T12:21:01Z |
| suse-su-2025:01744-1 | Security update for python313-setuptools | 2025-05-29T11:48:51Z | 2025-05-29T11:48:51Z |
| suse-su-2025:01743-1 | Security update for dnsdist | 2025-05-29T11:44:30Z | 2025-05-29T11:44:30Z |
| suse-su-2025:01651-2 | Security update for ucode-intel | 2025-05-29T09:40:21Z | 2025-05-29T09:40:21Z |
| suse-su-2025:01511-1 | Security update for apparmor | 2025-05-29T09:39:49Z | 2025-05-29T09:39:49Z |
| suse-su-2025:01738-1 | Security update for jetty-minimal | 2025-05-29T09:37:57Z | 2025-05-29T09:37:57Z |
| suse-su-2025:01737-1 | Security update for gstreamer-plugins-bad | 2025-05-29T09:36:46Z | 2025-05-29T09:36:46Z |
| suse-su-2025:01660-2 | Security update for MozillaThunderbird | 2025-05-29T09:33:54Z | 2025-05-29T09:33:54Z |
| suse-su-2025:01464-1 | Security update for ImageMagick | 2025-05-29T09:33:48Z | 2025-05-29T09:33:48Z |
| suse-su-2025:01551-1 | Security update for go1.24 | 2025-05-29T09:29:35Z | 2025-05-29T09:29:35Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13800-1 | python39-3.9.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13799-1 | python310-3.10.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13798-1 | python310-jwcrypto-1.5.6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13797-1 | python310-astropy-6.0.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13796-1 | libvirt-10.1.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13795-1 | MozillaFirefox-124.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13794-1 | python311-3.11.8-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13793-1 | libfreebl3-3.98-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13792-1 | diffoscope-261-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13791-1 | apache-commons-configuration2-2.10.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13790-1 | python38-3.8.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13789-1 | MozillaThunderbird-115.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13788-1 | ini4j-0.5.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13787-1 | eclipse-emf-core-2.22.0-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13786-1 | eclipse-contributor-tools-4.15-13.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13785-1 | kernel-devel-6.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13784-1 | buildah-1.35.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13783-1 | python310-black-24.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13782-1 | teleport-15.1.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13781-1 | rclone-1.66.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13780-1 | python310-python-rapidjson-1.16-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13779-1 | expat-2.6.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13778-1 | cmctl-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13777-1 | ungoogled-chromium-122.0.6261.128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13776-1 | trilead-ssh2-217.293.v56de4d4d3515-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13775-1 | libQt6Concurrent6-6.6.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13774-1 | python310-aiosmtpd-1.4.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13773-1 | nodejs-electron-28.2.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13772-1 | jsch-agent-proxy-connector-factory-0.0.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13771-1 | chromedriver-122.0.6261.128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24297 | Tenda AC15 formWriteFacMac方法命令注入漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24296 | Tenda AC15 formWifiWpsStart方法栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24295 | Tenda AC15 formWifiWpsOOB方法堆栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24294 | Tenda AC15 formSetSpeedWan方法栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24293 | Tenda AC15 formSetSambaConf方法命令注入漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24292 | Tenda AC15 formSetFirewallCfg方法栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24291 | Tenda AC15 formQuickIndex方法堆栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24290 | Tenda AC15 formExpandDlnaFile方法栈缓冲区溢出漏洞 | 2024-03-26 | 2025-10-20 |
| cnvd-2025-24289 | Intel E810 Ethernet输入验证不当漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24288 | Intel DSA搜索路径不受控漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24287 | Intel Distribution for Python权限不当漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24286 | Intel Device Plugins for Kubernetes访问控制不当漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24285 | Intel Converged Security and Management Engine竞争条件漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24284 | Intel Connectivity Performance Suite竞争条件漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24283 | Intel Clock Jitter Tool权限提升漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24282 | Intel Arc B-Series graphics拒绝服务漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24281 | Intel AI Playground权限不当漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24280 | Intel AI for Enterprise Retrieval-augmented Generation搜索路径不受控漏洞 | 2025-08-20 | 2025-10-20 |
| cnvd-2025-24279 | WordPress Community Events plugin SQL注入漏洞 | 2025-10-15 | 2025-10-20 |
| cnvd-2025-24278 | WordPress Colibri Page Builder plugin跨站脚本漏洞 | 2025-10-15 | 2025-10-20 |
| cnvd-2025-24277 | WordPress CM Registration plugin开放重定向漏洞 | 2025-10-15 | 2025-10-20 |
| cnvd-2025-24276 | WordPress Betheme plugin跨站脚本漏洞 | 2025-10-15 | 2025-10-20 |
| cnvd-2025-24275 | WordPress Postie Plugin跨站脚本漏洞 | 2025-10-15 | 2025-10-20 |
| cnvd-2025-24274 | WordPress Felan Framework身份验证不当漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24273 | WordPress The Plus Addons for Elementor plugin跨站脚本漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24272 | WordPress SureForms plugin信息泄露漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24271 | WordPress Simple SEO plugin跨站脚本漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24270 | WordPress Pz-LinkCard plugin服务端请求伪造漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24269 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24269） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24268 | Ivanti Endpoint Manager SQL注入漏洞（ CNVD-2025-24268） | 2025-10-17 | 2025-10-20 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0028 | Vulnérabilité dans SPIP | 2024-01-12T00:00:00.000000 | 2024-01-12T00:00:00.000000 |
| certfr-2024-avi-0027 | Multiples vulnérabilités dans les produits Juniper Networks | 2024-01-11T00:00:00.000000 | 2024-01-11T00:00:00.000000 |
| certfr-2024-avi-0026 | Vulnérabilité dans Cisco Unity Connection | 2024-01-11T00:00:00.000000 | 2024-01-11T00:00:00.000000 |
| certfr-2024-avi-0025 | Vulnérabilité dans SPIP | 2024-01-11T00:00:00.000000 | 2024-01-11T00:00:00.000000 |
| certfr-2024-avi-0024 | Multiples vulnérabilités dans les produits Microsoft | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0023 | Vulnérabilité dans Microsoft Azure | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0022 | Multiples vulnérabilités dans Microsoft .Net | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0021 | Multiples vulnérabilités dans Microsoft Windows | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0020 | Vulnérabilité dans Microsoft Office | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0019 | Multiples vulnérabilités dans les produits Fortinet | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0018 | Multiples vulnérabilités dans les produits SAP | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0017 | Multiples vulnérabilités dans les produits Intel | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0016 | Multiples vulnérabilités dans les produits Trend Micro | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0015 | Multiples vulnérabilités dans les produits Splunk | 2024-01-10T00:00:00.000000 | 2024-01-10T00:00:00.000000 |
| certfr-2024-avi-0014 | Multiples vulnérabilités dans les produits Siemens | 2024-01-09T00:00:00.000000 | 2024-01-09T00:00:00.000000 |
| certfr-2024-avi-0013 | Multiples vulnérabilités dans les produits Schneider Electric | 2024-01-09T00:00:00.000000 | 2024-01-09T00:00:00.000000 |
| certfr-2024-avi-0012 | Multiples vulnérabilités dans Microsoft Edge | 2024-01-08T00:00:00.000000 | 2024-01-08T00:00:00.000000 |
| certfr-2024-avi-0011 | Multiples vulnérabilités dans les produits Qnap | 2024-01-08T00:00:00.000000 | 2024-01-08T00:00:00.000000 |
| certfr-2024-avi-0010 | Multiples vulnérabilités dans les produits IBM | 2024-01-05T00:00:00.000000 | 2024-01-05T00:00:00.000000 |
| certfr-2024-avi-0009 | Multiples vulnérabilités dans Centreon Web | 2024-01-05T00:00:00.000000 | 2024-01-05T00:00:00.000000 |
| certfr-2024-avi-0008 | Vulnérabilité dans Ivanti Endpoint Manager | 2024-01-05T00:00:00.000000 | 2024-01-05T00:00:00.000000 |
| certfr-2024-avi-0007 | Multiples vulnérabilités dans Wireshark | 2024-01-05T00:00:00.000000 | 2024-01-05T00:00:00.000000 |
| certfr-2024-avi-0006 | Multiples vulnérabilités dans Google Android | 2024-01-04T00:00:00.000000 | 2024-01-04T00:00:00.000000 |
| certfr-2024-avi-0005 | Vulnérabilité dans Wireshark | 2024-01-04T00:00:00.000000 | 2024-01-04T00:00:00.000000 |
| certfr-2024-avi-0004 | Multiples vulnérabilités dans Google Chrome | 2024-01-04T00:00:00.000000 | 2024-01-04T00:00:00.000000 |
| certfr-2024-avi-0003 | Vulnérabilité dans Synology Router Manager | 2024-01-04T00:00:00.000000 | 2024-01-04T00:00:00.000000 |
| certfr-2024-avi-0001 | Vulnérabilité dans StormShield Network Security | 2024-01-02T00:00:00.000000 | 2024-01-03T00:00:00.000000 |
| certfr-2024-avi-0002 | Multiples vulnérabilités dans Moxa OnCell G3150A-LTE Series | 2024-01-02T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-avi-1061 | Multiples vulnérabilités dans Apache OpenOffice | 2023-12-29T00:00:00.000000 | 2024-01-02T00:00:00.000000 |
| certfr-2023-avi-1062 | Multiples vulnérabilités dans Juniper Secure Analytics | 2023-12-29T00:00:00.000000 | 2023-12-29T00:00:00.000000 |