Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64245 |
4.3 (3.1)
|
WordPress Import external attachments plugin <= 1.5.12… |
ryanpcmcquen |
Import external attachments |
2025-12-16T08:12:48.719Z | 2026-01-20T14:28:20.395Z |
| CVE-2025-64207 |
7.1 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… |
TieLabs |
Jannah |
2025-12-18T07:22:11.630Z | 2026-01-20T14:28:20.368Z |
| CVE-2025-64243 |
4.3 (3.1)
|
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… |
e-plugins |
Directory Pro |
2025-12-16T08:12:48.343Z | 2026-01-20T14:28:20.367Z |
| CVE-2025-64214 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:12.176Z | 2026-01-20T14:28:20.339Z |
| CVE-2025-64211 |
5.3 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:08.406Z | 2026-01-20T14:28:20.264Z |
| CVE-2025-64223 |
8.1 (3.1)
|
WordPress PenNews theme < 6.7.3 - Local File Inclusion… |
PenciDesign |
PenNews |
2025-12-18T07:22:13.068Z | 2026-01-20T14:28:20.155Z |
| CVE-2025-64217 |
7.1 (3.1)
|
WordPress Photography theme <= 7.7.2 - Cross Site Scri… |
ThemeGoods |
Photography |
2025-12-18T07:22:12.346Z | 2026-01-20T14:28:20.087Z |
| CVE-2025-64226 |
4.3 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site … |
colabrio |
Stockie Extra |
2025-10-29T08:38:10.612Z | 2026-01-20T14:28:20.084Z |
| CVE-2025-64221 |
7.1 (3.1)
|
WordPress Reservation Plugin plugin <= 1.6 - Cross Sit… |
designthemes |
Reservation Plugin |
2025-12-18T07:22:12.714Z | 2026-01-20T14:28:20.081Z |
| CVE-2025-64208 |
6.5 (3.1)
|
WordPress Jannah - Extensions plugin <= 1.1.4 - Cross … |
TieLabs |
Jannah - Extensions |
2025-10-29T08:38:07.521Z | 2026-01-20T14:28:20.069Z |
| CVE-2025-64216 |
7.5 (3.1)
|
WordPress SmartMag theme <= 10.3.0 - Local File Inclus… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:09.280Z | 2026-01-20T14:28:20.060Z |
| CVE-2025-64210 |
5.4 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:07.975Z | 2026-01-20T14:28:20.038Z |
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64204 |
6.5 (3.1)
|
WordPress SmartMag theme <= 10.3.1 - Cross Site Script… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:07.091Z | 2026-01-20T14:28:20.029Z |
| CVE-2025-64235 |
6.5 (3.1)
|
WordPress Tuturn plugin < 3.6 - Arbitrary File Downloa… |
AmentoTech |
Tuturn |
2025-12-18T16:43:47.100Z | 2026-01-20T14:28:20.022Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64237 |
4.3 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Cros… |
Graham |
Quick Interest Slider |
2025-12-16T08:12:47.167Z | 2026-01-20T14:28:19.971Z |
| CVE-2025-64236 |
9.8 (3.1)
|
WordPress Tuturn plugin < 3.6 - Broken Authentication … |
AmentoTech |
Tuturn |
2025-12-18T16:21:48.796Z | 2026-01-20T14:28:19.967Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68567 |
8.8 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:36.094Z | 2026-01-20T14:28:28.301Z |
| CVE-2025-68566 |
5.4 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.32 - Cross… |
wphocus |
My auctions allegro |
2025-12-24T13:10:35.820Z | 2026-01-20T14:28:28.563Z |
| CVE-2025-68565 |
9.8 (3.1)
|
WordPress Twitch Player plugin <= 2.1.3 - Broken Acces… |
JayBee |
Twitch Player |
2025-12-24T13:10:35.534Z | 2026-01-20T14:28:28.511Z |
| CVE-2025-68563 |
9.8 (3.1)
|
WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - L… |
WP Shuffle |
Subscribe to Unlock Lite |
2025-12-24T12:31:30.996Z | 2026-01-20T14:28:28.665Z |
| CVE-2025-68562 |
9.9 (3.1)
|
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Uplo… |
RomanCode |
MapSVG |
2025-12-29T21:13:24.913Z | 2026-01-20T14:28:28.382Z |
| CVE-2025-68561 |
7.6 (3.1)
|
WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection … |
Ruben Garcia |
AutomatorWP |
2025-12-23T11:34:34.900Z | 2026-01-20T14:28:28.768Z |
| CVE-2025-68560 |
7.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:36:26.213Z | 2026-01-20T14:28:28.760Z |
| CVE-2025-68559 |
6.5 (3.1)
|
WordPress TheGem Theme Elements (for Elementor) plugin… |
CodexThemes |
TheGem Theme Elements (for Elementor) |
2025-12-23T11:37:35.431Z | 2026-01-20T14:28:28.395Z |
| CVE-2025-68557 |
4.3 (3.1)
|
WordPress Chakra test plugin <= 1.0.1 - Broken Access … |
Vikas Ratudi |
Chakra test |
2025-12-23T11:43:26.693Z | 2026-01-20T14:28:27.973Z |
| CVE-2025-68556 |
5.3 (3.1)
|
WordPress HAPPY plugin <= 1.0.9 - Broken Access Contro… |
VillaTheme |
HAPPY |
2025-12-23T11:44:49.953Z | 2026-01-20T14:28:27.964Z |
| CVE-2025-68551 |
6.5 (3.1)
|
WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data E… |
Vikas Ratudi |
VPSUForm |
2025-12-23T11:46:19.271Z | 2026-01-20T14:28:27.968Z |
| CVE-2025-68550 |
7.6 (3.1)
|
WordPress WPBulky plugin <= 1.1.13 - SQL Injection vul… |
VillaTheme |
WPBulky |
2025-12-23T11:47:59.408Z | 2026-01-20T14:28:27.940Z |
| CVE-2025-68548 |
6.5 (3.1)
|
WordPress Responsive Posts Carousel Pro plugin <= 15.2… |
WebCodingPlace |
Responsive Posts Carousel Pro |
2025-12-23T11:50:41.384Z | 2026-01-20T14:28:27.920Z |
| CVE-2025-68547 |
7.5 (3.1)
|
WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitr… |
WPweb |
Follow My Blog Post |
2026-01-05T10:42:04.269Z | 2026-01-20T14:28:27.791Z |
| CVE-2025-68546 |
7.5 (3.1)
|
WordPress Nika theme <= 1.2.14 - Local File Inclusion … |
Thembay |
Nika |
2025-12-23T12:00:07.057Z | 2026-01-20T14:28:27.910Z |
| CVE-2025-68544 |
7.5 (3.1)
|
WordPress Diza theme <= 1.3.15 - Local File Inclusion … |
Thembay |
Diza |
2025-12-23T11:58:39.264Z | 2026-01-20T14:28:27.852Z |
| CVE-2025-68540 |
9.8 (3.1)
|
WordPress Fana theme <= 1.1.35 - Local File Inclusion … |
thembay |
Fana |
2025-12-24T12:31:27.748Z | 2026-01-20T14:28:27.969Z |
| CVE-2025-68537 |
9.8 (3.1)
|
WordPress Zota theme <= 1.3.14 - Local File Inclusion … |
thembay |
Zota |
2025-12-24T12:31:27.277Z | 2026-01-20T14:28:27.905Z |
| CVE-2025-68535 |
9.1 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2025-12-24T12:31:27.019Z | 2026-01-20T14:28:27.978Z |
| CVE-2025-68533 |
5.4 (3.1)
|
WordPress WC Builder plugin <= 1.2.0 - Cross Site Scri… |
HasThemes |
WC Builder |
2025-12-24T12:31:26.717Z | 2026-01-20T14:28:27.923Z |
| CVE-2025-68532 |
5.4 (3.1)
|
WordPress ModelTheme Addons for WPBakery and Elementor… |
modeltheme |
ModelTheme Addons for WPBakery and Elementor |
2025-12-24T12:31:26.464Z | 2026-01-20T14:28:27.821Z |
| CVE-2025-68530 |
9.8 (3.1)
|
WordPress Bookory theme <= 2.2.7 - Local File Inclusio… |
pavothemes |
Bookory |
2025-12-24T12:31:26.200Z | 2026-01-20T14:28:27.916Z |
| CVE-2025-68529 |
8.8 (3.1)
|
WordPress WP Email Capture plugin <= 3.12.5 - Cross Si… |
Rhys Wynne |
WP Email Capture |
2025-12-24T12:31:25.832Z | 2026-01-20T14:28:27.910Z |
| CVE-2025-68528 |
5.4 (3.1)
|
WordPress Free Shipping Bar: Amount Left for Free Ship… |
WPFactory |
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce |
2025-12-24T12:31:25.572Z | 2026-01-20T14:28:27.980Z |
| CVE-2025-68527 |
5.4 (3.1)
|
WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scr… |
Kodezen LLC |
Academy LMS |
2025-12-24T12:31:25.030Z | 2026-01-20T14:28:27.911Z |
| CVE-2025-68525 |
5.4 (3.1)
|
WordPress Category Icon plugin <= 1.0.2 - Cross Site S… |
pixelgrade |
Category Icon |
2025-12-24T12:31:24.777Z | 2026-01-20T14:28:27.966Z |
| CVE-2025-68523 |
8.1 (3.1)
|
WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Acc… |
Spiffy Plugins |
Spiffy Calendar |
2025-12-24T12:31:24.167Z | 2026-01-20T14:28:27.925Z |
| CVE-2025-68522 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.576Z | 2026-01-20T14:28:27.987Z |
| CVE-2025-68521 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.159Z | 2026-01-20T14:28:27.967Z |
| CVE-2025-68519 |
9.8 (3.1)
|
WordPress Brands for WooCommerce plugin <= 3.8.6.3 - S… |
BeRocket |
Brands for WooCommerce |
2025-12-24T12:31:22.910Z | 2026-01-20T14:28:27.991Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68563 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.223 | 2026-01-20T15:19:46.373 |
| fkie_cve-2025-68562 | Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a W… | 2025-12-29T22:15:43.310 | 2026-01-20T15:19:46.273 |
| fkie_cve-2025-68561 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:46.567 | 2026-01-20T15:19:46.180 |
| fkie_cve-2025-68560 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:46.430 | 2026-01-20T15:19:46.083 |
| fkie_cve-2025-68559 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-23T12:15:46.290 | 2026-01-20T15:19:45.997 |
| fkie_cve-2025-68557 | Missing Authorization vulnerability in Vikas Ratudi Chakra test allows Exploiting Incorrectly Confi… | 2025-12-23T12:15:46.160 | 2026-01-20T15:19:45.900 |
| fkie_cve-2025-68556 | Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Ac… | 2025-12-23T12:15:46.017 | 2026-01-20T15:19:45.810 |
| fkie_cve-2025-68551 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas R… | 2025-12-23T12:15:45.877 | 2026-01-20T15:19:45.710 |
| fkie_cve-2025-68550 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-23T12:15:45.737 | 2026-01-20T15:19:45.613 |
| fkie_cve-2025-68548 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-23T12:15:45.600 | 2026-01-20T15:19:45.520 |
| fkie_cve-2025-68547 | Missing Authorization vulnerability in WPweb Follow My Blog Post allows Exploiting Incorrectly Conf… | 2026-01-05T11:17:41.973 | 2026-01-20T15:19:45.427 |
| fkie_cve-2025-68546 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:45.457 | 2026-01-20T15:19:45.330 |
| fkie_cve-2025-68544 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-23T12:15:45.313 | 2026-01-20T15:19:45.230 |
| fkie_cve-2025-68540 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:23.093 | 2026-01-20T15:19:45.097 |
| fkie_cve-2025-68537 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.970 | 2026-01-20T15:19:44.963 |
| fkie_cve-2025-68535 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart al… | 2025-12-24T13:16:22.850 | 2026-01-20T15:19:44.840 |
| fkie_cve-2025-68533 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.727 | 2026-01-20T15:19:44.720 |
| fkie_cve-2025-68532 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.603 | 2026-01-20T15:19:44.593 |
| fkie_cve-2025-68530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.480 | 2026-01-20T15:19:44.467 |
| fkie_cve-2025-68529 | Cross-Site Request Forgery (CSRF) vulnerability in Rhys Wynne WP Email Capture wp-email-capture all… | 2025-12-24T13:16:22.357 | 2026-01-20T15:19:44.330 |
| fkie_cve-2025-68528 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.233 | 2026-01-20T15:19:44.180 |
| fkie_cve-2025-68527 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.117 | 2026-01-20T15:19:44.033 |
| fkie_cve-2025-68525 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.997 | 2026-01-20T15:19:43.880 |
| fkie_cve-2025-68523 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploi… | 2025-12-24T13:16:21.877 | 2026-01-20T15:19:43.710 |
| fkie_cve-2025-68522 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.763 | 2026-01-20T15:19:43.563 |
| fkie_cve-2025-68521 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.637 | 2026-01-20T15:19:43.400 |
| fkie_cve-2025-68519 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:21.517 | 2026-01-20T15:19:43.230 |
| fkie_cve-2025-68517 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-24T13:16:21.393 | 2026-01-20T15:19:43.047 |
| fkie_cve-2025-68516 | Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allo… | 2025-12-24T13:16:21.270 | 2026-01-20T15:19:42.877 |
| fkie_cve-2025-68513 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.143 | 2026-01-20T15:19:42.717 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-2q9h-6v2j-hfpp |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2jf2-fhpf-vfw3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2hgv-qvvq-63hq |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-29qw-9m44-pf9w |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-37mj-762c-hqp3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:10Z |
| ghsa-wgpc-jm6c-j4j7 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-vfrr-rhvp-vvw9 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-d… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-vfj6-fgcq-5c93 |
4.3 (3.1)
|
Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectl… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-v3j5-8g9v-3768 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-qp8q-xvwm-2x2q |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for W… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-pp33-jqv4-5hjf |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-mw6g-37x4-p223 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-mm3g-cv2q-cppg |
7.8 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-mg95-m74x-55j8 |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-hgg9-7rw7-5rhw |
4.3 (3.1)
|
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-gjv2-jq53-mqgq |
8.8 (3.1)
|
Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-cch9-4xf8-89w7 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-c6c4-c7qj-6662 |
8.8 (3.1)
|
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-7r59-p3hg-gf5g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-76jc-c8j2-q66h |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-758v-pprx-jj23 |
8.1 (3.1)
|
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-55cq-cx6m-hv36 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-42p4-5wp9-wj4j |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-3w3w-vwpm-m922 |
4.5 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-387r-w9pc-hjv4 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-2qh4-8p36-478q |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-242g-9cqh-3jpx |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-x5mv-x4w6-8rgw |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-v7r5-h5f3-qwf9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-v3q8-66j8-2mx6 |
4.3 (3.1)
|
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addo… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2016-32 |
|
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 throug… | pygments | 2016-01-08T20:59:00Z | 2021-08-27T03:22:17.226462Z |
| pysec-2018-98 |
|
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that l… | pycsw | 2018-08-01T18:29:00Z | 2021-08-27T03:22:16.790168Z |
| pysec-2018-97 |
|
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key para… | pycrypto | 2018-02-03T15:29:00Z | 2021-08-27T03:22:16.704345Z |
| pysec-2017-94 |
|
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptogra… | pycrypto | 2017-02-15T15:59:00Z | 2021-08-27T03:22:16.665546Z |
| pysec-2013-29 |
|
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the p… | pycrypto | 2013-10-26T17:55:00Z | 2021-08-27T03:22:16.634811Z |
| pysec-2012-16 |
|
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal sche… | pycrypto | 2012-06-17T03:41:00Z | 2021-08-27T03:22:16.601238Z |
| pysec-2019-196 |
|
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was disc… | pyarrow | 2019-11-08T19:15:00Z | 2021-08-27T03:22:16.568373Z |
| pysec-2019-195 |
|
It was discovered that the C++ implementation (which underlies the R, Python and Ruby imp… | pyarrow | 2019-11-08T19:15:00Z | 2021-08-27T03:22:16.533972Z |
| pysec-2018-96 |
|
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers … | py-evm | 2018-11-12T02:29:00Z | 2021-08-27T03:22:16.474976Z |
| pysec-2020-249 |
|
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory acc… | py-bcrypt | 2020-01-28T15:15:00Z | 2021-08-27T03:22:16.441551Z |
| pysec-2017-93 |
|
A HTTP/2 implementation built using any version of the Python priority library prior to v… | priority | 2017-01-10T15:59:00Z | 2021-08-27T03:22:16.246169Z |
| pysec-2020-248 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied per… | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.576448Z |
| pysec-2020-247 |
|
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.505885Z |
| pysec-2020-246 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.436437Z |
| pysec-2011-22 |
|
Plone 4.1.3 and earlier computes hash values for form parameters without restricting the … | plone | 2011-12-30T01:55:00Z | 2021-08-27T03:22:11.387960Z |
| pysec-2021-139 |
|
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sani… | pillow | 2021-06-02T15:15:00Z | 2021-08-27T03:22:10.501313Z |
| pysec-2021-138 |
|
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… | pillow | 2021-06-02T16:15:00Z | 2021-08-27T03:22:10.437557Z |
| pysec-2021-137 |
|
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… | pillow | 2021-06-02T16:15:00Z | 2021-08-27T03:22:10.375655Z |
| pysec-2017-92 |
|
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1… | pillow | 2017-04-24T18:59:00Z | 2021-08-27T03:22:10.292415Z |
| pysec-2014-87 |
|
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers … | pillow | 2014-04-27T20:55:00Z | 2021-08-27T03:22:10.225452Z |
| pysec-2012-15 |
|
Paste Script 1.7.5 and earlier does not properly set group memberships during execution w… | paste | 2012-05-01T19:55:00Z | 2021-08-27T03:22:10.166915Z |
| pysec-2010-29 |
|
Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implement… | paste | 2010-11-06T00:00:00Z | 2021-08-27T03:22:10.125815Z |
| pysec-2008-8 |
|
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not… | paramiko | 2008-01-16T23:00:00Z | 2021-08-27T03:22:10.050129Z |
| pysec-2020-245 |
|
ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of t… | ovirt-engine-sdk-python | 2020-01-02T18:15:00Z | 2021-08-27T03:22:09.942049Z |
| pysec-2018-95 |
|
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary … | osxcollector | 2018-06-13T22:29:00Z | 2021-08-27T03:22:09.893229Z |
| pysec-2020-244 |
|
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to… | omero-web | 2020-06-17T17:15:00Z | 2021-08-27T03:22:09.833484Z |
| pysec-2019-194 |
|
An access-control flaw was found in the Octavia service when the cloud platform was deplo… | octavia | 2019-06-03T19:29:00Z | 2021-08-27T03:22:09.805726Z |
| pysec-2019-193 |
|
In a default Red Hat Openstack Platform Director installation, openstack-octavia before v… | octavia | 2019-03-26T18:29:00Z | 2021-08-27T03:22:09.768851Z |
| pysec-2014-86 |
|
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo … | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.666793Z |
| pysec-2014-85 |
|
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, w… | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.637359Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.039618Z |
| gsd-2024-32318 | Tenda AC500 V2.0.1.9(1307) firmware has a stack overflow vulnerability via the vlan param… | 2024-04-13T05:02:29.039189Z |
| gsd-2024-32285 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the passwo… | 2024-04-13T05:02:29.039000Z |
| gsd-2024-32250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.038560Z |
| gsd-2024-32302 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the PPW param… | 2024-04-13T05:02:29.038353Z |
| gsd-2024-32220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.038163Z |
| gsd-2024-32411 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.037235Z |
| gsd-2024-32263 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.037043Z |
| gsd-2024-32278 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.036847Z |
| gsd-2024-32423 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.036656Z |
| gsd-2024-32315 | Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability via the adslPwd p… | 2024-04-13T05:02:29.036467Z |
| gsd-2024-32482 | The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability h… | 2024-04-13T05:02:29.036012Z |
| gsd-2024-32163 | CMSeasy 7.7.7.9 is vulnerable to code execution. | 2024-04-13T05:02:29.035823Z |
| gsd-2024-32408 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.035628Z |
| gsd-2024-32422 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.035437Z |
| gsd-2024-32414 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.035241Z |
| gsd-2024-32298 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.035001Z |
| gsd-2024-32457 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-13T05:02:29.034804Z |
| gsd-2024-32212 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.034596Z |
| gsd-2024-32377 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.034398Z |
| gsd-2024-32417 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.034209Z |
| gsd-2024-32306 | Tenda AC10U v1.0 Firmware v15.03.06.49 has a stack overflow vulnerability located via the… | 2024-04-13T05:02:29.033558Z |
| gsd-2024-32275 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.033362Z |
| gsd-2024-32441 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Campaigns.This issue affects Zoho… | 2024-04-13T05:02:29.033171Z |
| gsd-2024-32157 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032980Z |
| gsd-2024-32427 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032770Z |
| gsd-2024-32156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032218Z |
| gsd-2024-32272 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.031169Z |
| gsd-2024-32235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.030972Z |
| gsd-2024-32161 | jizhiCMS 2.5 suffers from a File upload vulnerability. | 2024-04-13T05:02:29.030360Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-12288 | Malicious code in honestjson (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12286 | Malicious code in hhonestjson (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12285 | Malicious code in hexteamibm (PyPI) | 2024-07-21T17:46:21Z | 2025-12-11T09:27:53Z |
| mal-2024-12283 | Malicious code in hello-bozzo2 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12282 | Malicious code in handyfiles (PyPI) | 2024-12-24T17:49:23Z | 2025-12-11T09:27:53Z |
| mal-2024-12280 | Malicious code in google-play-store (PyPI) | 2024-10-01T11:25:46Z | 2025-12-11T09:27:53Z |
| mal-2024-12279 | Malicious code in google-cloud-datacatalog-lineage-producer-client (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12278 | Malicious code in gltest (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12277 | Malicious code in get-time-zzs (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12276 | Malicious code in get-root (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12274 | Malicious code in flexssl (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12272 | Malicious code in filecraft (PyPI) | 2024-12-24T17:49:23Z | 2025-12-11T09:27:53Z |
| mal-2024-12271 | Malicious code in fasdghjkhjafsd (PyPI) | 2024-07-11T12:37:19Z | 2025-12-11T09:27:53Z |
| mal-2024-12270 | Malicious code in fake-usreagant (PyPI) | 2024-10-08T10:29:47Z | 2025-12-11T09:27:53Z |
| mal-2024-12269 | Malicious code in faest (PyPI) | 2024-09-25T16:44:30Z | 2025-12-11T09:27:53Z |
| mal-2024-12267 | Malicious code in example-pypi-package-loler1 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-12265 | Malicious code in evil-pkk (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11700 | Malicious code in sampling-util (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11699 | Malicious code in s4transfer (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11698 | Malicious code in robloxrequestsss (PyPI) | 2024-10-13T09:30:47Z | 2025-12-11T09:27:53Z |
| mal-2024-11694 | Malicious code in reverse434343 (PyPI) | 2024-11-14T17:07:03Z | 2025-12-11T09:27:53Z |
| mal-2024-11693 | Malicious code in reverse4343 (PyPI) | 2024-11-14T17:07:03Z | 2025-12-11T09:27:53Z |
| mal-2024-11692 | Malicious code in res-adapter (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11687 | Malicious code in pyvantq (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11686 | Malicious code in pyutiltool (PyPI) | 2024-10-03T16:34:31Z | 2025-12-11T09:27:53Z |
| mal-2024-11685 | Malicious code in pytskcheck (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11684 | Malicious code in pytkit (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11683 | Malicious code in python-drgn-commons-spark (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11682 | Malicious code in python-drgn-commons-pandas (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11681 | Malicious code in python-drgn-commons-notebooks (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1844 | Rockwell Automation Studio 5000 Logix Designer: Schwachstelle ermöglicht Codeausführung | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1843 | Cisco Secure Firewall Threat Defense (Snort 3 Detection Engine): Schwachstelle ermöglicht Denial of Service | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1841 | Cisco Secure Firewall Management Center: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1840 | Cisco Secure Firewall Management Center und Secure Firewall Threat Defense: Schwachstelle ermöglicht Ausführen von Kommandos als root | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1839 | Cisco ASA und Secure Firewall Threat Defense: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1838 | Cisco IOS, XE, ASA, FTD: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1836 | Flowise: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1827 | Dell PowerEdge BIOS: Mehrere Schwachstellen | 2025-08-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1799 | Intel Rapid Storage Technology: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2023-0965 | pgAdmin: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-04-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1834 | TYPO3 Core: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1829 | HP BIOS: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1823 | F5 BIG-IP: Mehrere Schwachstellen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1821 | Palo Alto Networks Checkov by Prisma Cloud: Mehrere Schwachstellen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1820 | Palo Alto Networks PAN-OS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1819 | Palo Alto Networks GlobalProtect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1818 | Palo Alto Networks Cortex XDR Broker VM Images: Schwachstelle ermöglicht Umgehen von Sicherheitsmechanismen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1816 | GitLab: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1801 | Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1149 | Icinga: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-27T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2024-3491 | cobbler: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2024-11-18T23:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2022-0788 | Request Tracker: Mehrere Schwachstellen | 2022-07-20T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1814 | Zammad: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1809 | Axis Camera Station: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1808 | Fortinet FortiSIEM: Schwachstelle ermöglicht Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1806 | Fortinet FortiOS: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1804 | Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1803 | Fortinet FortiMail, FortiRecorder und FortiVoice. : Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1802 | Fortinet FortiManager: Schwachstelle ermöglicht Manipulation von Dateien und potenziell Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1800 | Intel Xeon 6 Server Firmware: Schwachstelle ermöglicht Denial of Service | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:0662 | Red Hat Security Advisory: grafana security update | 2025-01-23T09:34:23+00:00 | 2026-01-21T23:26:58+00:00 |
| rhsa-2025:0401 | Red Hat Security Advisory: grafana security update | 2025-01-20T01:40:19+00:00 | 2026-01-21T23:26:43+00:00 |
| rhsa-2025:0381 | Red Hat Security Advisory: .NET 8.0 security update | 2025-01-16T17:18:21+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0340 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2025-01-15T16:54:28+00:00 | 2026-01-21T23:26:38+00:00 |
| rhsa-2025:0329 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.16 | 2025-01-15T09:55:01+00:00 | 2026-01-21T23:26:35+00:00 |
| rhsa-2025:0079 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.2 Bug Fix Update | 2025-01-08T10:04:05+00:00 | 2026-01-21T23:26:29+00:00 |
| rhsa-2025:0002 | Red Hat Security Advisory: python36:3.6 security update | 2025-01-01T09:32:24+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9884 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T14:52:00+00:00 | 2026-01-21T23:26:27+00:00 |
| rhsa-2024:9885 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0 | 2024-11-18T15:17:19+00:00 | 2026-01-21T23:26:24+00:00 |
| rhsa-2024:9629 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.6 | 2024-11-14T08:36:54+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9627 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.3 | 2024-11-14T08:35:32+00:00 | 2026-01-21T23:26:23+00:00 |
| rhsa-2024:9620 | Red Hat Security Advisory: OpenShift Container Platform 4.14.41 bug fix and security update | 2024-11-20T04:17:57+00:00 | 2026-01-21T23:26:22+00:00 |
| rhsa-2024:9551 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-13T14:54:47+00:00 | 2026-01-21T23:26:18+00:00 |
| rhsa-2024:9473 | Red Hat Security Advisory: grafana security update | 2024-11-12T10:24:58+00:00 | 2026-01-21T23:26:17+00:00 |
| rhsa-2024:9459 | Red Hat Security Advisory: buildah security update | 2024-11-12T10:25:04+00:00 | 2026-01-21T23:26:13+00:00 |
| rhsa-2024:9454 | Red Hat Security Advisory: podman security update | 2024-11-12T10:29:20+00:00 | 2026-01-21T23:26:13+00:00 |
| rhsa-2024:8981 | Red Hat Security Advisory: OpenShift Container Platform 4.17.4 bug fix and security update | 2024-11-13T04:13:47+00:00 | 2026-01-21T23:26:00+00:00 |
| rhsa-2024:8876 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-11-05T04:12:40+00:00 | 2026-01-21T23:25:59+00:00 |
| rhsa-2024:8847 | Red Hat Security Advisory: grafana-pcp security update | 2024-11-05T03:58:20+00:00 | 2026-01-21T23:25:59+00:00 |
| rhsa-2024:8700 | Red Hat Security Advisory: OpenShift Container Platform 4.14.40 packages and security update | 2024-11-08T15:04:34+00:00 | 2026-01-21T23:25:57+00:00 |
| rhsa-2024:8694 | Red Hat Security Advisory: OpenShift Container Platform 4.12.68 security update | 2024-11-07T03:33:36+00:00 | 2026-01-21T23:25:56+00:00 |
| rhsa-2024:8690 | Red Hat Security Advisory: OpenShift Container Platform 4.13.53 packages and security update | 2024-11-06T14:57:54+00:00 | 2026-01-21T23:25:54+00:00 |
| rhsa-2024:8683 | Red Hat Security Advisory: OpenShift Container Platform 4.16.20 bug fix and security update | 2024-11-06T03:29:21+00:00 | 2026-01-21T23:25:52+00:00 |
| rhsa-2024:8678 | Red Hat Security Advisory: grafana security update | 2024-10-30T19:42:46+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8546 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.5 bug fixes and container updates | 2024-10-28T21:28:29+00:00 | 2026-01-21T23:25:51+00:00 |
| rhsa-2024:8534 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Release Update | 2024-10-28T13:27:10+00:00 | 2026-01-21T23:25:50+00:00 |
| rhsa-2024:8533 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.4.6 security updates and bug fixes | 2024-10-28T17:06:38+00:00 | 2026-01-21T23:25:50+00:00 |
| rhsa-2024:8507 | Red Hat Security Advisory: grafana security update | 2024-10-28T10:01:19+00:00 | 2026-01-21T23:25:47+00:00 |
| rhsa-2024:8418 | Red Hat Security Advisory: OpenShift Container Platform 4.16.z security update | 2024-10-30T01:33:39+00:00 | 2026-01-21T23:25:47+00:00 |
| rhsa-2024:8428 | Red Hat Security Advisory: OpenShift Container Platform 4.15.37 packages and security update | 2024-10-31T04:01:33+00:00 | 2026-01-21T23:25:46+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-202-02 | Johnson Controls Metasys ADS, ADX, OAS | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-202-01 | ABB Drive Composer, Automation Builder, Mint Workbench | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-193-01 | Dahua ASI7213X-T1 (Update A) | 2022-07-12T00:00:00.000000Z | 2022-07-19T00:00:00.000000Z |
| icsa-22-195-17 | Siemens Opcenter Quality | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-16 | Siemens EN100 Ethernet Module | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-14 | Siemens CPC80 Firmware of SICAM A8000 | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-13 | Siemens Mendix | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-10 | Siemens Mendix Applications | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-08 | Siemens PADS Standard/Plus Viewer | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-06 | Siemens Mendix Excel Importer | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-05 | Siemens RUGGEDCOM ROX | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-04 | Siemens Simcenter Femap | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-03 | Siemens SIMATIC MV500 Devices | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-104-16 | Siemens TIA Administrator | 2022-04-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-104-07 | Siemens Mendix | 2022-04-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-19-085-01 | Siemens SCALANCE X (Update D) | 2019-03-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-188-02 | Bently Nevada ADAPT 3701/4X Series and 60M100 | 2022-07-07T00:00:00.000000Z | 2022-07-07T00:00:00.000000Z |
| icsa-22-188-01 | Rockwell Automation MicroLogix | 2022-07-07T00:00:00.000000Z | 2022-07-07T00:00:00.000000Z |
| icsa-22-181-04 | Distributed Data Systems WebHMI | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-03 | Emerson DeltaV Distributed Control System | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-02 | Yokogawa Wide Area Communication Router | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-01 | Exemys RME1 | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-179-06 | Motorola Solutions ACE1000 | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-05 | Motorola Solutions MDLC | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-04 | Motorola Solutions MOSCAD IP and ACE IP Gateways | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-03 | Advantech iView | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-02 | Omron SYSMAC CS/CJ/CP Series and NJ/NX Series | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsa-22-179-01 | ABB e-Design | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| icsma-22-174-01 | OFFIS DCMTK | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-05 | Elcomplus SmartICS | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180516-iseeap | Cisco Identity Services Engine EAP TLS Certificate Denial of Service Vulnerability | 2018-05-16T16:00:00+00:00 | 2018-09-24T21:17:00+00:00 |
| cisco-sa-20180921-vsm | Cisco Video Surveillance Manager Appliance Default Password Vulnerability | 2018-09-21T16:00:00+00:00 | 2018-09-21T16:00:00+00:00 |
| cisco-sa-20180919-webex | Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities | 2018-09-19T16:00:00+00:00 | 2018-09-19T16:00:00+00:00 |
| cisco-sa-20180328-xesc | Cisco IOS XE Software Static Credential Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-09-19T16:00:00+00:00 |
| cisco-sa-20180823-apache-struts | Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018 | 2018-08-23T20:00:00+00:00 | 2018-09-17T18:52:00+00:00 |
| cisco-sa-20180828-dcnm-traversal | Cisco Data Center Network Manager Path Traversal Vulnerability | 2018-08-28T21:00:00+00:00 | 2018-09-14T18:59:00+00:00 |
| cisco-sa-20180905-umbrella-priv | Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-11T19:44:00+00:00 |
| cisco-sa-20180905-umbrella-file-read | Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-11T19:43:00+00:00 |
| cisco-sa-20180905-nso-infodis | Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-06T13:47:00+00:00 |
| cisco-sa-20180905-webex-player-dos | Cisco Webex Player WRF Files Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-webex-id-mod | Cisco Webex Teams Information Disclosure and Modification Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-umbrella-api | Cisco Umbrella API Unauthorized Access Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-tetration-xss | Cisco Tetration Analytics Cross-Site Scripting Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-tetration-vulns | Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-sd-wan-validation | Cisco SD-WAN Solution Certificate Validation Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-sd-wan-injection | Cisco SD-WAN Solution Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-sd-wan-escalation | Cisco SD-WAN Solution Privilege Escalation Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-traversal | Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-overflow | Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-injection | Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-rv-routers-disclosure | Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-pcce | Multiple Vulnerabilities in Cisco Packaged Contact Center Enterprise | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-pca-xss | Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-infodis | Cisco Enterprise NFV Infrastructure Software Information Disclosure Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-dos1 | Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-nfvis-dos | Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-meeting-csrf | Cisco Meeting Server Cross-Site Request Forgery Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-dcnm-xss | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-csp2100-injection | Cisco Cloud Services Platform 2100 Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-cpar-dos | Cisco Prime Access Registrar Denial of Service Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38351 | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 2025-07-02T00:00:00.000Z | 2025-09-04T03:38:46.000Z |
| msrc_cve-2020-36422 | An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:38:16.000Z |
| msrc_cve-2025-54350 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. | 2025-08-02T00:00:00.000Z | 2025-09-04T03:37:15.000Z |
| msrc_cve-2022-49651 | srcu: Tighten cleanup_srcu_struct() GP checks | 2025-02-02T00:00:00.000Z | 2025-09-04T03:37:05.000Z |
| msrc_cve-2023-24540 | Improper handling of JavaScript whitespace in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T03:33:46.000Z |
| msrc_cve-2025-40913 | Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T03:33:01.000Z |
| msrc_cve-2025-38566 | sunrpc: fix handling of server side tls alerts | 2025-08-02T00:00:00.000Z | 2025-09-04T03:32:11.000Z |
| msrc_cve-2025-45768 | pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement). | 2025-07-02T00:00:00.000Z | 2025-09-04T03:30:36.000Z |
| msrc_cve-2021-44732 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. | 2021-12-02T00:00:00.000Z | 2025-09-04T03:28:34.000Z |
| msrc_cve-2025-38605 | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:28:14.000Z |
| msrc_cve-2025-53605 | The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:26:57.000Z |
| msrc_cve-2022-45410 | When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-04T03:26:05.000Z |
| msrc_cve-2025-38555 | usb: gadget : fix use-after-free in composite_dev_cleanup() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:24:39.000Z |
| msrc_cve-2020-36426 | An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). | 2021-07-02T00:00:00.000Z | 2025-09-04T03:23:43.000Z |
| msrc_cve-2025-54126 | WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified | 2025-07-02T00:00:00.000Z | 2025-09-04T03:22:55.000Z |
| msrc_cve-2025-38574 | pptp: ensure minimal skb length in pptp_xmit() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:20:25.000Z |
| msrc_cve-2021-24119 | In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:20:13.000Z |
| msrc_cve-2020-36425 | An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:19:33.000Z |
| msrc_cve-2025-38577 | f2fs: fix to avoid panic in f2fs_evict_inode | 2025-08-02T00:00:00.000Z | 2025-09-04T03:16:52.000Z |
| msrc_cve-2023-45283 | Insecure parsing of Windows paths with a \??\ prefix in path/filepath | 2023-11-01T07:00:00.000Z | 2025-09-04T03:15:18.000Z |
| msrc_cve-2025-40777 | A possible assertion failure when 'stale-answer-client-timeout' is set to '0' | 2025-07-02T00:00:00.000Z | 2025-09-04T03:14:11.000Z |
| msrc_cve-2022-30767 | nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | 2022-05-02T00:00:00.000Z | 2025-09-04T03:14:08.000Z |
| msrc_cve-2023-53158 | The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:13:40.000Z |
| msrc_cve-2025-38609 | PM / devfreq: Check governor before using governor->name | 2025-08-02T00:00:00.000Z | 2025-09-04T03:11:58.000Z |
| msrc_cve-2023-53159 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:10:43.000Z |
| msrc_cve-2025-32911 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value | 2025-04-02T00:00:00.000Z | 2025-09-04T03:10:11.000Z |
| msrc_cve-2024-21176 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). | 2024-07-01T07:00:00.000Z | 2025-09-04T03:09:45.000Z |
| msrc_cve-2025-38349 | eventpoll: don't decrement ep refcount while still holding the ep mutex | 2025-07-02T00:00:00.000Z | 2025-09-04T03:09:39.000Z |
| msrc_cve-2025-30258 | In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS." | 2025-03-02T00:00:00.000Z | 2025-09-04T03:09:31.000Z |
| msrc_cve-2023-0664 | A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system. | 2023-03-10T00:00:00.000Z | 2025-09-04T03:08:29.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201808-0424 | upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell meta… | 2025-11-18T15:26:10.228000Z |
| var-202006-1056 | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction… | 2025-11-18T15:26:08.194000Z |
| var-202309-0729 | On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command… | 2025-11-18T15:26:03.708000Z |
| var-202406-0858 | A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Li… | 2025-11-18T15:25:57.810000Z |
| var-202408-2442 | A remote code execution vulnerability exists in the Rockwell Automation ThinManager® Thin… | 2025-11-18T15:25:57.183000Z |
| var-202501-1312 | Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server… | 2025-11-18T15:25:55.731000Z |
| var-202501-1313 | Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server… | 2025-11-18T15:25:55.710000Z |
| var-202501-1311 | Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server… | 2025-11-18T15:25:55.688000Z |
| var-202505-1118 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual ser… | 2025-11-18T15:25:53.590000Z |
| var-202510-0407 | A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function… | 2025-11-18T15:25:51.246000Z |
| var-201311-0288 | D-Link DSL-2760U The gateway contains a cross-site scripting vulnerability.By the remotel… | 2025-11-18T15:24:54.581000Z |
| var-201504-0534 | Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317,… | 2025-11-18T15:24:53.440000Z |
| var-201708-1312 | The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code ex… | 2025-11-18T15:24:51.842000Z |
| var-201709-0705 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) fe… | 2025-11-18T15:24:51.712000Z |
| var-201709-0706 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) fe… | 2025-11-18T15:24:51.671000Z |
| var-201909-0563 | Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UIC… | 2025-11-18T15:24:49.551000Z |
| var-201909-0903 | Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866… | 2025-11-18T15:24:49.493000Z |
| var-201912-0830 | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWA… | 2025-11-18T15:24:49.218000Z |
| var-202005-0617 | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN … | 2025-11-18T15:24:48.554000Z |
| var-202008-0193 | A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on… | 2025-11-18T15:24:48.284000Z |
| var-202102-0290 | D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr… | 2025-11-18T15:24:47.774000Z |
| var-202106-0161 | Memory corruption due to improper check to return error when user application requests me… | 2025-11-18T15:24:47.441000Z |
| var-202112-1044 | A download of code without integrity check vulnerability in the "execute restore src-vis"… | 2025-11-18T15:24:46.823000Z |
| var-202210-0198 | An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS… | 2025-11-18T15:24:44.322000Z |
| var-202303-1268 | TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a co… | 2025-11-18T15:24:43.544000Z |
| var-202402-0339 | A post authentication command injection vulnerability exists when configuring the wiregu… | 2025-11-18T15:24:41.732000Z |
| var-202402-1997 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.… | 2025-11-18T15:24:41.520000Z |
| var-202505-4134 | Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.1… | 2025-11-18T15:24:31.938000Z |
| var-201412-0451 | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x bef… | 2025-11-18T15:24:12.021000Z |
| var-201612-0015 | NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta… | 2025-11-18T15:24:11.065000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000095 | Mac OS X OpenSSH vulnerable to denial-of-service (DoS) | 2012-10-31T15:01+09:00 | 2012-10-31T15:01+09:00 |
| jvndb-2012-000093 | Tokyo BBS vulnerable to cross-site scripting | 2012-10-26T14:00+09:00 | 2012-10-26T14:00+09:00 |
| jvndb-2012-000088 | Safari vulnerable to local file content disclosure | 2012-10-23T14:57+09:00 | 2012-10-23T14:57+09:00 |
| jvndb-2012-000094 | Smarty vulnerable to cross-site scripting | 2012-10-10T14:45+09:00 | 2012-10-10T14:45+09:00 |
| jvndb-2012-000092 | MyWebSearch vulnerable to cross-site scripting | 2012-10-05T16:49+09:00 | 2012-10-05T16:49+09:00 |
| jvndb-2009-000037 | Apache Tomcat denial of service (DoS) vulnerability | 2009-06-18T17:54+09:00 | 2012-09-28T13:40+09:00 |
| jvndb-2009-000036 | Apache Tomcat information disclosure vulnerability | 2009-06-18T17:53+09:00 | 2012-09-28T13:35+09:00 |
| jvndb-2012-000091 | jigbrowser+ for Android vulnerable in the WebView class | 2012-09-28T12:20+09:00 | 2012-09-28T12:20+09:00 |
| jvndb-2012-000090 | Trend Micro Control Manager vulnerable to SQL injection | 2012-09-27T12:43+09:00 | 2012-09-27T12:43+09:00 |
| jvndb-2012-000089 | ATOK for Android issue in the access permissions for the learning information file | 2012-09-25T13:40+09:00 | 2012-09-25T13:40+09:00 |
| jvndb-2012-000087 | myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution | 2012-09-20T12:33+09:00 | 2012-09-20T12:33+09:00 |
| jvndb-2012-000086 | Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service | 2012-09-20T12:31+09:00 | 2012-09-20T12:31+09:00 |
| jvndb-2012-000085 | KUNAI Browser for Remote Service beta vulnerable in the WebView class | 2012-09-13T13:51+09:00 | 2012-09-13T13:51+09:00 |
| jvndb-2012-000084 | Cybozu KUNAI for Android vulnerable in the WebView class | 2012-09-07T16:40+09:00 | 2012-09-07T16:40+09:00 |
| jvndb-2012-000083 | Cybozu KUNAI for Android vulnerable to arbitrary Java method execution | 2012-09-07T16:39+09:00 | 2012-09-07T16:39+09:00 |
| jvndb-2012-000082 | Cybozu Live for Android vulnerable in the WebView class | 2012-09-03T10:41+09:00 | 2012-09-03T10:41+09:00 |
| jvndb-2012-000081 | Cybozu Live for Android vulnerable to arbitrary Java method execution | 2012-09-03T10:34+09:00 | 2012-09-03T10:34+09:00 |
| jvndb-2012-000078 | mixi for Android information management vulnerability | 2012-08-17T15:58+09:00 | 2012-08-17T15:58+09:00 |
| jvndb-2012-000077 | Multiple GREE Android applications vulnerable in the WebView class | 2012-08-17T15:52+09:00 | 2012-08-17T15:52+09:00 |
| jvndb-2012-003525 | Cross-site Scripting Vulnerability in JP1/Integrated Management - Service Support | 2012-08-10T15:05+09:00 | 2012-08-10T15:05+09:00 |
| jvndb-2012-000076 | Sleipnir Mobile for Android vulnerable to arbitrary script execution | 2012-08-08T14:43+09:00 | 2012-08-08T14:43+09:00 |
| jvndb-2012-000075 | Sleipnir Mobile for Android vulnerable to arbitrary Java method execution | 2012-08-08T14:39+09:00 | 2012-08-08T14:39+09:00 |
| jvndb-2012-000074 | LINE for Android vulnerable in handling of implicit intents | 2012-08-07T13:33+09:00 | 2012-08-07T13:33+09:00 |
| jvndb-2011-000088 | Safari for iOS vulnerable to cross-site scripting | 2011-10-17T18:56+09:00 | 2012-08-07T12:11+09:00 |
| jvndb-2012-000072 | Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration | 2012-07-30T14:56+09:00 | 2012-08-02T16:33+09:00 |
| jvndb-2012-000073 | GoodReader vulnerable to cross-site scripting | 2012-08-02T14:46+09:00 | 2012-08-02T14:46+09:00 |
| jvndb-2012-000009 | Multiple web browsers vulnerable in processing Tranfer-Encoding header | 2012-07-30T14:53+09:00 | 2012-07-30T14:53+09:00 |
| jvndb-2012-000049 | Opera fails to verify SSL server certificates | 2012-05-25T15:40+09:00 | 2012-07-26T17:31+09:00 |
| jvndb-2012-000071 | Sleipnir Mobile for Android vulnerable in the WebView class | 2012-07-24T14:05+09:00 | 2012-07-24T14:05+09:00 |
| jvndb-2012-003244 | Privilege escalation vulnerability in Hitachi JP1/NETM/DM | 2012-07-23T17:13+09:00 | 2012-07-23T17:13+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20375-1 | Security update for libsoup | 2025-05-29T09:19:43Z | 2025-05-29T09:19:43Z |
| suse-su-2025:01537-1 | Security update for tomcat10 | 2025-05-29T09:04:24Z | 2025-05-29T09:04:24Z |
| suse-su-2025:01735-1 | Security update for wxWidgets-3_2 | 2025-05-29T04:11:02Z | 2025-05-29T04:11:02Z |
| suse-su-2025:01732-1 | Security update for python-tornado | 2025-05-28T14:44:51Z | 2025-05-28T14:44:51Z |
| suse-su-2025:01731-1 | Security update for go1.23-openssl | 2025-05-28T14:33:12Z | 2025-05-28T14:33:12Z |
| suse-su-2025:01729-1 | Security update for gstreamer-plugins-bad | 2025-05-28T14:28:45Z | 2025-05-28T14:28:45Z |
| suse-su-2025:01726-1 | Security update for python-tornado | 2025-05-28T13:46:00Z | 2025-05-28T13:46:00Z |
| suse-su-2025:01725-1 | Security update for gstreamer-plugins-bad | 2025-05-28T13:44:13Z | 2025-05-28T13:44:13Z |
| suse-su-2025:01724-1 | Security update for webkit2gtk3 | 2025-05-28T11:10:47Z | 2025-05-28T11:10:47Z |
| suse-su-2025:01723-1 | Security update for python39-setuptools | 2025-05-28T11:08:22Z | 2025-05-28T11:08:22Z |
| suse-su-2025:20367-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-05-28T10:02:19Z | 2025-05-28T10:02:19Z |
| suse-su-2025:20351-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-05-28T10:02:19Z | 2025-05-28T10:02:19Z |
| suse-su-2025:20366-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-05-28T09:53:11Z | 2025-05-28T09:53:11Z |
| suse-su-2025:20350-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-05-28T09:53:11Z | 2025-05-28T09:53:11Z |
| suse-su-2025:20349-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-05-28T09:53:11Z | 2025-05-28T09:53:11Z |
| suse-su-2025:20364-1 | Security update for libxml2 | 2025-05-28T09:00:09Z | 2025-05-28T09:00:09Z |
| suse-su-2025:20363-1 | Security update for skopeo | 2025-05-28T08:56:42Z | 2025-05-28T08:56:42Z |
| suse-ru-2025:20362-1 | Recommended update for git | 2025-05-28T07:19:22Z | 2025-05-28T07:19:22Z |
| suse-su-2025:01720-1 | Security update for webkit2gtk3 | 2025-05-27T13:54:56Z | 2025-05-27T13:54:56Z |
| suse-su-2025:01718-1 | Security update for gstreamer-plugins-bad | 2025-05-27T12:53:43Z | 2025-05-27T12:53:43Z |
| suse-su-2025:01717-1 | Security update for gstreamer-plugins-bad | 2025-05-27T12:51:34Z | 2025-05-27T12:51:34Z |
| suse-su-2025:01716-1 | Security update for mariadb | 2025-05-27T12:44:03Z | 2025-05-27T12:44:03Z |
| suse-su-2025:01715-1 | Security update for python-setuptools | 2025-05-27T12:34:45Z | 2025-05-27T12:34:45Z |
| suse-su-2025:01713-1 | Security update for govulncheck-vulndb | 2025-05-27T10:04:35Z | 2025-05-27T10:04:35Z |
| suse-su-2025:20361-1 | Security update for glibc | 2025-05-27T09:35:37Z | 2025-05-27T09:35:37Z |
| suse-su-2025:20360-1 | Security update for docker | 2025-05-27T08:59:26Z | 2025-05-27T08:59:26Z |
| suse-su-2025:20359-1 | Security update for unbound | 2025-05-27T08:57:55Z | 2025-05-27T08:57:55Z |
| suse-su-2025:01710-1 | Security update for MozillaFirefox | 2025-05-26T17:33:49Z | 2025-05-26T17:33:49Z |
| suse-su-2025:01709-1 | Security update for python310-setuptools | 2025-05-26T16:28:05Z | 2025-05-26T16:28:05Z |
| suse-su-2025:01707-1 | Security update for the Linux Kernel | 2025-05-26T11:35:17Z | 2025-05-26T11:35:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13770-1 | Bottles-51.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13769-1 | ucode-intel-20240312-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13768-1 | python310-rpyc-6.0.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13767-1 | kernel-devel-6.7.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13766-1 | ungoogled-chromium-122.0.6261.111-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13765-1 | opensc-0.25.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13764-1 | chromedriver-122.0.6261.111-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13763-1 | clojure-1.11.2.1446-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13762-1 | libunbound8-1.19.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13761-1 | graphviz-2.49.3-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13760-1 | perl-Spreadsheet-ParseXLSX-0.310.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13759-1 | libvirt-10.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13758-1 | chromedriver-121.0.6167.184-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13757-1 | squid-6.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13756-1 | go1.21-1.21.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13755-1 | fontforge-20230101-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13754-1 | crun-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13753-1 | MozillaThunderbird-115.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13752-1 | go1.22-1.22.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13751-1 | tar-1.35-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13750-1 | rabbitmq-java-client-5.20.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13749-1 | python310-Django-4.2.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13748-1 | libopenjp2-7-2.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13747-1 | caja-engrampa-1.26.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13746-1 | libzzip-0-13-0.13.72-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13745-1 | xen-4.18.0_06-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13744-1 | python312-3.12.2-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13743-1 | xmlgraphics-batik-1.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13742-1 | libunbound8-1.19.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13741-1 | python39-3.9.18-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24267 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24267） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24266 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24266） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24265 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24265） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24264 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24264） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24263 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24263） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24262 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24262） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24261 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-24261） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24260 | Ivanti Endpoint Manager SQL注入漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24255 | Adobe Dimension内存错误引用漏洞（CNVD-2025-24255） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24213 | Adobe Dimension输入验证错误漏洞（CNVD-2025-24213） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24205 | Adobe Dimension越界读取漏洞（CNVD-2025-24205） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24204 | Adobe Dimension越界读取漏洞（CNVD-2025-24204） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24203 | Adobe Connect跨站脚本漏洞（CNVD-2025-24203） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24202 | Adobe Connect开放重定向漏洞 | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24201 | Adobe Commerce跨站脚本漏洞（CNVD-2025-24201） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24200 | Adobe Commerce安全绕过漏洞（CNVD-2025-24200） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24199 | Adobe Commerce安全绕过漏洞（CNVD-2025-24199） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24198 | Adobe Commerce安全绕过漏洞（CNVD-2025-24198） | 2025-10-17 | 2025-10-20 |
| cnvd-2025-24172 | Centreon存在未明漏洞（CNVD-2025-24172） | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24171 | Microsoft Excel资源管理错误漏洞 | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24170 | Microsoft Azure存在未明漏洞（CNVD-2025-24170） | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24169 | Microsoft Defender存在未明漏洞（CNVD-2025-24169） | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24168 | Tenda AC15 formsaveAutoQos函数缓冲区溢出漏洞 | 2025-10-13 | 2025-10-17 |
| cnvd-2025-24167 | Tenda W12缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24166 | Adobe Substance3D Viewer存在未明漏洞（CNVD-2025-24166） | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24165 | Adobe Substance3D Modeler缓冲区溢出漏洞 | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24164 | Adobe Framemaker代码执行漏洞 | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24163 | Adobe Commerce跨站脚本漏洞（CNVD-2025-24163） | 2025-10-17 | 2025-10-17 |
| cnvd-2025-24162 | Tenda AC7命令注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24161 | Tenda AC7 /goform/WifiMacFilterSet文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-1060 | Vulnérabilité dans NetApp Active IQ Unified Manager | 2023-12-28T00:00:00.000000 | 2023-12-28T00:00:00.000000 |
| certfr-2023-avi-1059 | Multiples vulnérabilités dans Moxa ioLogik E1200 | 2023-12-26T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1058 | Vulnérabilité dans Stormshield Network Security | 2023-12-26T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1057 | Vulnérabilité dans Postfix | 2023-12-22T00:00:00.000000 | 2023-12-26T00:00:00.000000 |
| certfr-2023-avi-1056 | Vulnérabilité dans Microsoft Edge | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1055 | Multiples vulnérabilités dans les produits IBM | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1054 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1053 | Vulnérabilité dans les produits ESET | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1052 | Vulnérabilité dans SolarWinds Access Rights Manager | 2023-12-22T00:00:00.000000 | 2023-12-22T00:00:00.000000 |
| certfr-2023-avi-1051 | Vulnérabilité dans Google Chrome | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1050 | Multiples vulnérabilités dans Moodle | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1049 | Multiples vulnérabilités dans Ivanti Avalanche | 2023-12-21T00:00:00.000000 | 2023-12-21T00:00:00.000000 |
| certfr-2023-avi-1048 | Multiples vulnérabilités dans les produits Mozilla | 2023-12-20T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-1047 | Vulnérabilité dans macOS Sonoma | 2023-12-20T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-0770 | Multiples vulnérabilités dans les produits Tenable | 2023-09-22T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-0695 | Multiples vulnérabilités dans les produits Mozilla | 2023-08-30T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2021-avi-343 | Multiples vulnérabilités dans les produits Fortinet | 2021-05-05T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2020-avi-717 | Multiples vulnérabilités dans les produits Apple | 2020-11-06T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2018-avi-489 | Multiples vulnérabilités dans les produits Intel | 2018-10-12T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2017-avi-393 | Vulnérabilité dans Cisco IOS XE | 2017-11-06T00:00:00.000000 | 2023-12-20T00:00:00.000000 |
| certfr-2023-avi-1046 | Vulnérabilité dans Stormshield Network VPN Client | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1045 | Vulnérabilité dans SPIP | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1044 | Multiples vulnérabilités dans OpenSSH | 2023-12-19T00:00:00.000000 | 2023-12-19T00:00:00.000000 |
| certfr-2023-avi-1043 | Multiples vulnérabilités dans Zimbra Collaboration | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1042 | Vulnérabilités dans MISP | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1041 | Multiples vulnérabilités dans Nextcloud Server | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1040 | Multiples vulnérabilités dans les produits Asterisk | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1039 | Multiples vulnérabilités dans Stormshield Network Security | 2023-12-18T00:00:00.000000 | 2023-12-18T00:00:00.000000 |
| certfr-2023-avi-1038 | Multiples vulnérabilités dans les produits IBM | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1037 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |