Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64204 |
6.5 (3.1)
|
WordPress SmartMag theme <= 10.3.1 - Cross Site Script… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:07.091Z | 2026-01-20T14:28:20.029Z |
| CVE-2025-64235 |
6.5 (3.1)
|
WordPress Tuturn plugin < 3.6 - Arbitrary File Downloa… |
AmentoTech |
Tuturn |
2025-12-18T16:43:47.100Z | 2026-01-20T14:28:20.022Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64237 |
4.3 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Cros… |
Graham |
Quick Interest Slider |
2025-12-16T08:12:47.167Z | 2026-01-20T14:28:19.971Z |
| CVE-2025-64236 |
9.8 (3.1)
|
WordPress Tuturn plugin < 3.6 - Broken Authentication … |
AmentoTech |
Tuturn |
2025-12-18T16:21:48.796Z | 2026-01-20T14:28:19.967Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| CVE-2025-64219 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.18 - Broken… |
Strategy11 Team |
Business Directory |
2025-10-29T08:38:09.728Z | 2026-01-20T14:28:19.940Z |
| CVE-2025-64206 |
9.8 (3.1)
|
WordPress Jannah theme <= 7.6.0 - PHP Object Injection… |
TieLabs |
Jannah |
2025-12-18T07:22:11.440Z | 2026-01-20T14:28:19.907Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| CVE-2025-64200 |
5.9 (3.1)
|
WordPress Email Template Customizer for WooCommerce pl… |
VillaTheme |
Email Template Customizer for WooCommerce |
2025-10-29T08:38:05.654Z | 2026-01-20T14:28:19.586Z |
| CVE-2025-64201 |
4.3 (3.1)
|
WordPress PowerPress Podcasting plugin <= 11.13.12 - C… |
blubrry |
PowerPress Podcasting |
2025-10-29T08:38:06.132Z | 2026-01-20T14:28:19.584Z |
| CVE-2025-64202 |
6.5 (3.1)
|
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting … |
TieLabs |
Sahifa |
2025-10-29T08:38:06.577Z | 2026-01-20T14:28:19.577Z |
| CVE-2025-64195 |
7.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Local File Inclusion … |
ThimPress |
Eduma |
2025-10-29T08:38:04.034Z | 2026-01-20T14:28:19.495Z |
| CVE-2025-6325 |
9.8 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2026-01-20T14:28:19.494Z |
| CVE-2025-64198 |
7.1 (3.1)
|
WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2026-01-20T14:28:19.492Z |
| CVE-2025-64199 |
5.3 (3.1)
|
WordPress wpresidence theme <= 5.3.2 - Broken Access C… |
WpEstate |
wpresidence |
2025-10-29T08:38:05.202Z | 2026-01-20T14:28:19.491Z |
| CVE-2025-6324 |
7.1 (3.1)
|
WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Sc… |
MatrixAddons |
Easy Invoice |
2025-12-18T07:22:09.770Z | 2026-01-20T14:28:19.479Z |
| CVE-2025-64194 |
6.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Cross Site Scripting … |
ThimPress |
Eduma |
2025-10-29T08:38:03.614Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-6326 |
8.1 (3.1)
|
WordPress Inset theme <= 1.18.0 - Local File Inclusion… |
AncoraThemes |
Inset |
2025-12-18T07:22:09.950Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-64191 |
7.1 (3.1)
|
WordPress XStore theme < 9.6.1 - Cross Site Scripting … |
8theme |
XStore |
2025-12-18T07:22:10.489Z | 2026-01-20T14:28:19.459Z |
| CVE-2025-6327 |
10 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2026-01-20T14:28:19.457Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68540 |
9.8 (3.1)
|
WordPress Fana theme <= 1.1.35 - Local File Inclusion … |
thembay |
Fana |
2025-12-24T12:31:27.748Z | 2026-01-20T14:28:27.969Z |
| CVE-2025-68537 |
9.8 (3.1)
|
WordPress Zota theme <= 1.3.14 - Local File Inclusion … |
thembay |
Zota |
2025-12-24T12:31:27.277Z | 2026-01-20T14:28:27.905Z |
| CVE-2025-68535 |
9.1 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2025-12-24T12:31:27.019Z | 2026-01-20T14:28:27.978Z |
| CVE-2025-68533 |
5.4 (3.1)
|
WordPress WC Builder plugin <= 1.2.0 - Cross Site Scri… |
HasThemes |
WC Builder |
2025-12-24T12:31:26.717Z | 2026-01-20T14:28:27.923Z |
| CVE-2025-68532 |
5.4 (3.1)
|
WordPress ModelTheme Addons for WPBakery and Elementor… |
modeltheme |
ModelTheme Addons for WPBakery and Elementor |
2025-12-24T12:31:26.464Z | 2026-01-20T14:28:27.821Z |
| CVE-2025-68530 |
9.8 (3.1)
|
WordPress Bookory theme <= 2.2.7 - Local File Inclusio… |
pavothemes |
Bookory |
2025-12-24T12:31:26.200Z | 2026-01-20T14:28:27.916Z |
| CVE-2025-68529 |
8.8 (3.1)
|
WordPress WP Email Capture plugin <= 3.12.5 - Cross Si… |
Rhys Wynne |
WP Email Capture |
2025-12-24T12:31:25.832Z | 2026-01-20T14:28:27.910Z |
| CVE-2025-68528 |
5.4 (3.1)
|
WordPress Free Shipping Bar: Amount Left for Free Ship… |
WPFactory |
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce |
2025-12-24T12:31:25.572Z | 2026-01-20T14:28:27.980Z |
| CVE-2025-68527 |
5.4 (3.1)
|
WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scr… |
Kodezen LLC |
Academy LMS |
2025-12-24T12:31:25.030Z | 2026-01-20T14:28:27.911Z |
| CVE-2025-68525 |
5.4 (3.1)
|
WordPress Category Icon plugin <= 1.0.2 - Cross Site S… |
pixelgrade |
Category Icon |
2025-12-24T12:31:24.777Z | 2026-01-20T14:28:27.966Z |
| CVE-2025-68523 |
8.1 (3.1)
|
WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Acc… |
Spiffy Plugins |
Spiffy Calendar |
2025-12-24T12:31:24.167Z | 2026-01-20T14:28:27.925Z |
| CVE-2025-68522 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.576Z | 2026-01-20T14:28:27.987Z |
| CVE-2025-68521 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.159Z | 2026-01-20T14:28:27.967Z |
| CVE-2025-68519 |
9.8 (3.1)
|
WordPress Brands for WooCommerce plugin <= 3.8.6.3 - S… |
BeRocket |
Brands for WooCommerce |
2025-12-24T12:31:22.910Z | 2026-01-20T14:28:27.991Z |
| CVE-2025-68517 |
8.1 (3.1)
|
WordPress Tablesome plugin <= 1.1.35.1 - Broken Access… |
Essekia |
Tablesome |
2025-12-24T12:31:22.624Z | 2026-01-20T14:28:27.875Z |
| CVE-2025-68516 |
7.5 (3.1)
|
WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Dat… |
Essekia |
Tablesome |
2025-12-24T12:31:22.368Z | 2026-01-20T14:28:27.912Z |
| CVE-2025-68513 |
5.4 (3.1)
|
WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross S… |
boldthemes |
Bold Timeline Lite |
2025-12-24T12:31:22.085Z | 2026-01-20T14:28:27.941Z |
| CVE-2025-68512 |
5.4 (3.1)
|
WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Si… |
creativeinteractivemedia |
Real 3D FlipBook |
2025-12-24T12:31:21.792Z | 2026-01-20T14:28:27.984Z |
| CVE-2025-68511 |
9.1 (3.1)
|
WordPress Gutenverse Form plugin <= 2.3.1 - Broken Acc… |
Jegstudio |
Gutenverse Form |
2025-12-24T12:31:21.523Z | 2026-01-20T14:28:27.904Z |
| CVE-2025-68509 |
6.1 (3.1)
|
WordPress User Submitted Posts plugin <= 20251121 - Op… |
Jeff Starr |
User Submitted Posts |
2025-12-24T12:31:21.266Z | 2026-01-20T14:28:27.922Z |
| CVE-2025-68508 |
9.1 (3.1)
|
WordPress Brave plugin <= 0.8.3 - Broken Access Contro… |
Brave |
Brave |
2025-12-24T12:31:20.967Z | 2026-01-20T14:28:27.971Z |
| CVE-2025-68506 |
9.8 (3.1)
|
WordPress Docket Cache plugin <= 24.07.03 - Local File… |
Nawawi Jamili |
Docket Cache |
2025-12-24T13:10:26.727Z | 2026-01-20T14:28:27.963Z |
| CVE-2025-68505 |
8.8 (3.1)
|
WordPress H5P plugin <= 1.16.1 - Broken Access Control… |
icc0rz |
H5P |
2025-12-24T12:31:20.714Z | 2026-01-20T14:28:27.979Z |
| CVE-2025-68504 |
6.5 (3.1)
|
WordPress JetSearch plugin <= 3.5.16 - Cross Site Scri… |
Crocoblock |
JetSearch |
2025-12-29T21:14:40.576Z | 2026-01-20T14:28:27.777Z |
| CVE-2025-68503 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.7 - Broken Access Cont… |
Crocoblock |
JetBlog |
2025-12-29T21:15:43.312Z | 2026-01-20T14:28:27.769Z |
| CVE-2025-68502 |
4.3 (3.1)
|
WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direc… |
Crocoblock |
JetPopup |
2025-12-29T21:16:55.539Z | 2026-01-20T14:28:27.904Z |
| CVE-2025-68500 |
9.1 (3.1)
|
WordPress Prime Slider – Addons For Elementor plugin <… |
bdthemes |
Prime Slider – Addons For Elementor |
2025-12-24T12:31:20.426Z | 2026-01-20T14:28:27.911Z |
| CVE-2025-68499 |
6.5 (3.1)
|
WordPress JetTabs plugin <= 2.2.12 - Cross Site Script… |
Crocoblock |
JetTabs |
2025-12-29T23:10:45.157Z | 2026-01-20T14:28:27.917Z |
| CVE-2025-68498 |
6.5 (3.1)
|
WordPress JetTabs plugin <= 2.2.12 - Broken Access Con… |
Crocoblock |
JetTabs |
2025-12-29T23:13:35.444Z | 2026-01-20T14:28:27.838Z |
| CVE-2025-68497 |
5.4 (3.1)
|
WordPress Astra Widgets plugin <= 1.2.16 - Cross Site … |
Brainstorm Force |
Astra Widgets |
2025-12-24T12:31:19.996Z | 2026-01-20T14:28:27.822Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.480 | 2026-01-20T15:19:44.467 |
| fkie_cve-2025-68529 | Cross-Site Request Forgery (CSRF) vulnerability in Rhys Wynne WP Email Capture wp-email-capture all… | 2025-12-24T13:16:22.357 | 2026-01-20T15:19:44.330 |
| fkie_cve-2025-68528 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.233 | 2026-01-20T15:19:44.180 |
| fkie_cve-2025-68527 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.117 | 2026-01-20T15:19:44.033 |
| fkie_cve-2025-68525 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.997 | 2026-01-20T15:19:43.880 |
| fkie_cve-2025-68523 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploi… | 2025-12-24T13:16:21.877 | 2026-01-20T15:19:43.710 |
| fkie_cve-2025-68522 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.763 | 2026-01-20T15:19:43.563 |
| fkie_cve-2025-68521 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.637 | 2026-01-20T15:19:43.400 |
| fkie_cve-2025-68519 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:21.517 | 2026-01-20T15:19:43.230 |
| fkie_cve-2025-68517 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-24T13:16:21.393 | 2026-01-20T15:19:43.047 |
| fkie_cve-2025-68516 | Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allo… | 2025-12-24T13:16:21.270 | 2026-01-20T15:19:42.877 |
| fkie_cve-2025-68513 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.143 | 2026-01-20T15:19:42.717 |
| fkie_cve-2025-68512 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.020 | 2026-01-20T15:19:42.583 |
| fkie_cve-2025-68511 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting … | 2025-12-24T13:16:20.900 | 2026-01-20T15:19:42.440 |
| fkie_cve-2025-68509 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted Post… | 2025-12-24T13:16:20.777 | 2026-01-20T15:19:42.287 |
| fkie_cve-2025-68508 | Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectl… | 2025-12-24T13:16:20.650 | 2026-01-20T15:19:42.130 |
| fkie_cve-2025-68506 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:20.527 | 2026-01-20T15:19:41.963 |
| fkie_cve-2025-68505 | Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Acce… | 2025-12-24T13:16:20.400 | 2026-01-20T15:19:41.797 |
| fkie_cve-2025-68504 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-29T22:15:43.163 | 2026-01-20T15:19:41.660 |
| fkie_cve-2025-68503 | Missing Authorization vulnerability in Crocoblock JetBlog allows Exploiting Incorrectly Configured … | 2025-12-29T22:15:43.020 | 2026-01-20T15:19:41.560 |
| fkie_cve-2025-68502 | Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup allows Exploi… | 2025-12-29T22:15:42.877 | 2026-01-20T15:19:41.400 |
| fkie_cve-2025-68500 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor bd… | 2025-12-24T13:16:20.283 | 2026-01-20T15:19:41.203 |
| fkie_cve-2025-68499 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T00:15:52.583 | 2026-01-20T15:19:41.100 |
| fkie_cve-2025-68498 | Missing Authorization vulnerability in Crocoblock JetTabs allows Exploiting Incorrectly Configured … | 2025-12-30T00:15:52.440 | 2026-01-20T15:19:40.910 |
| fkie_cve-2025-68497 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:20.160 | 2026-01-20T15:19:40.717 |
| fkie_cve-2025-68496 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:20.043 | 2026-01-20T15:19:40.503 |
| fkie_cve-2025-68494 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 … | 2025-12-24T13:16:19.927 | 2026-01-20T15:19:40.123 |
| fkie_cve-2025-68088 | Missing Authorization vulnerability in merkulove Huger for Elementor huger-elementor allows Exploit… | 2025-12-16T09:16:04.040 | 2026-01-20T15:19:39.957 |
| fkie_cve-2025-68087 | Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows E… | 2025-12-16T09:16:03.907 | 2026-01-20T15:19:39.823 |
| fkie_cve-2025-68086 | Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows E… | 2025-12-16T09:16:03.770 | 2026-01-20T15:19:39.687 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-7r59-p3hg-gf5g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-76jc-c8j2-q66h |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-758v-pprx-jj23 |
8.1 (3.1)
|
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-55cq-cx6m-hv36 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-42p4-5wp9-wj4j |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-3w3w-vwpm-m922 |
4.5 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-387r-w9pc-hjv4 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-2qh4-8p36-478q |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-242g-9cqh-3jpx |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-x5mv-x4w6-8rgw |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-v7r5-h5f3-qwf9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-v3q8-66j8-2mx6 |
4.3 (3.1)
|
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addo… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-v2w2-v8vg-2rqw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-qfjr-hrqq-wvg5 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-p4xm-rh4q-xxwr |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-p3xh-3vwq-cmvc |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-mw4h-mh8j-x3ff |
4.3 (3.1)
|
Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-mm38-qj6v-5ph8 |
4.3 (3.1)
|
Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality all… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-jj2r-52x4-38wx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-j6p4-cqq4-vgv7 |
8.1 (3.1)
|
Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-tha… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-j4mf-m27r-fcqq |
4.4 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-hw3r-j5mp-83h8 |
4.3 (3.1)
|
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-hqrr-4x5g-r96q |
7.2 (3.1)
|
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g9jr-64x4-g2h8 |
5.3 (3.1)
|
Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploitin… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g56q-p85p-h6p8 |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in averta Shortcodes and extra feat… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g3r9-25f9-622c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-fmr9-f844-7m23 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cro… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-98gq-3jvx-3x4w |
4.3 (3.1)
|
Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allo… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-83m4-cw88-f2rj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-83gv-v2x5-x6g3 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-192 |
|
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1,… | novajoin | 2019-07-30T17:15:00Z | 2021-08-27T03:22:09.442632Z |
| pysec-2020-243 |
|
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova befor… | nova | 2020-08-26T19:15:00Z | 2021-08-27T03:22:09.410263Z |
| pysec-2019-191 |
|
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x be… | nova | 2019-08-09T19:15:00Z | 2021-08-27T03:22:09.327110Z |
| pysec-2021-136 |
|
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending c… | neutron | 2021-05-28T19:15:00Z | 2021-08-27T03:22:08.884816Z |
| pysec-2019-190 |
|
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.… | neutron | 2019-03-13T02:29:00Z | 2021-08-27T03:22:08.807010Z |
| pysec-2019-189 |
|
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and … | neutron | 2019-04-05T05:29:00Z | 2021-08-27T03:22:08.705789Z |
| pysec-2018-94 |
|
Live-migrated instances are briefly able to inspect traffic for other instances on the sa… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.615958Z |
| pysec-2018-93 |
|
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and att… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.555558Z |
| pysec-2020-241 |
|
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write perm… | moin | 2020-11-11T16:15:00Z | 2021-08-27T03:22:07.834309Z |
| pysec-2016-31 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.805432Z |
| pysec-2016-30 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.777797Z |
| pysec-2010-28 |
|
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module … | moin | 2010-04-05T15:30:00Z | 2021-08-27T03:22:07.708069Z |
| pysec-2018-92 |
|
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the … | mistral | 2018-11-02T21:29:00Z | 2021-08-27T03:22:07.552723Z |
| pysec-2020-240 |
|
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to an… | mistral | 2020-06-15T15:15:00Z | 2021-08-27T03:22:07.520532Z |
| pysec-2019-188 |
|
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subreposito… | mercurial | 2019-04-22T16:29:00Z | 2021-08-27T03:22:07.409198Z |
| pysec-2018-91 |
|
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a m… | mercurial | 2018-10-04T23:29:00Z | 2021-08-27T03:22:07.367975Z |
| pysec-2018-90 |
|
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situa… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.326002Z |
| pysec-2018-89 |
|
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-2… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.281860Z |
| pysec-2018-88 |
|
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in c… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.239369Z |
| pysec-2018-87 |
|
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerabi… | mercurial | 2018-03-14T13:29:00Z | 2021-08-27T03:22:07.192158Z |
| pysec-2017-91 |
|
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch… | mercurial | 2017-06-06T21:29:00Z | 2021-08-27T03:22:07.149994Z |
| pysec-2017-90 |
|
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause… | mercurial | 2017-12-07T18:29:00Z | 2021-08-27T03:22:07.106645Z |
| pysec-2017-89 |
|
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to po… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.062416Z |
| pysec-2017-88 |
|
Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can maliciou… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.021138Z |
| pysec-2016-29 |
|
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arb… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.971468Z |
| pysec-2016-28 |
|
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to … | mercurial | 2016-05-09T20:59:00Z | 2021-08-27T03:22:06.927942Z |
| pysec-2016-27 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted na… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.881570Z |
| pysec-2016-26 |
|
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted gi… | mercurial | 2016-04-13T16:59:00Z | 2021-08-27T03:22:06.833176Z |
| pysec-2020-239 |
|
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues a… | meinheld | 2020-05-22T16:15:00Z | 2021-08-27T03:22:06.793758Z |
| pysec-2021-135 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-05-11T15:15:00Z | 2021-08-27T03:22:06.756710Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32215 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.029666Z |
| gsd-2024-32406 | Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 all… | 2024-04-13T05:02:29.029470Z |
| gsd-2024-32293 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page p… | 2024-04-13T05:02:29.029276Z |
| gsd-2024-32284 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.029082Z |
| gsd-2024-32456 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-13T05:02:29.028431Z |
| gsd-2024-32443 | Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Count… | 2024-04-13T05:02:29.028110Z |
| gsd-2024-32371 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.027298Z |
| gsd-2024-32267 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.027097Z |
| gsd-2024-32233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.026512Z |
| gsd-2024-32463 | phlex is an open source framework for building object-oriented views in Ruby. There is a … | 2024-04-13T05:02:29.026298Z |
| gsd-2024-32317 | Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability… | 2024-04-13T05:02:29.026085Z |
| gsd-2024-32468 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.025407Z |
| gsd-2024-3654 | An XSS vulnerability has been found in Teimas Global's Teixo, version 1.42.42-stable. Thi… | 2024-04-12T05:02:29.388870Z |
| gsd-2024-3664 | The Quick Featured Images plugin for WordPress is vulnerable to unauthorized modification… | 2024-04-12T05:02:29.381775Z |
| gsd-2024-3680 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.373611Z |
| gsd-2024-3674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.368889Z |
| gsd-2024-3676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.354611Z |
| gsd-2024-3661 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.334294Z |
| gsd-2024-3655 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.328113Z |
| gsd-2024-3656 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.322371Z |
| gsd-2024-3670 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.308996Z |
| gsd-2024-3681 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.307607Z |
| gsd-2024-3653 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.305991Z |
| gsd-2024-3668 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.302178Z |
| gsd-2024-3671 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.295959Z |
| gsd-2024-3682 | The WP STAGING and WP STAGING Pro plugins for WordPress are vulnerable to Sensitive Infor… | 2024-04-12T05:02:29.292769Z |
| gsd-2024-3679 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.286671Z |
| gsd-2024-3684 | A server side request forgery vulnerability was identified in GitHub Enterprise Server th… | 2024-04-12T05:02:29.275037Z |
| gsd-2024-3683 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.274257Z |
| gsd-2024-3673 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.255028Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-11680 | Malicious code in python-drgn-commons-metrics (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11679 | Malicious code in python-drgn-commons-kafka (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11678 | Malicious code in python-drgn-commons-all (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11677 | Malicious code in pysolara (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11676 | Malicious code in pysleek (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11675 | Malicious code in pysbark (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11674 | Malicious code in pyprettifier (PyPI) | 2024-09-29T18:01:44Z | 2025-12-11T09:27:53Z |
| mal-2024-11673 | Malicious code in pykane (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11672 | Malicious code in pydllcfg (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11671 | Malicious code in pydeobf (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11670 | Malicious code in pycordapi (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11669 | Malicious code in pycblines (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11668 | Malicious code in pycalculater (PyPI) | 2024-11-16T22:56:09Z | 2025-12-11T09:27:53Z |
| mal-2024-11667 | Malicious code in pyaacv (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11665 | Malicious code in puffionerlolpo2131 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11664 | Malicious code in prolificdreamer (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11663 | Malicious code in pplgdfhuighsdfyisfgfd (PyPI) | 2024-10-22T13:55:39Z | 2025-12-11T09:27:53Z |
| mal-2024-11662 | Malicious code in pplgdfhuighsdfyisfdty2 (PyPI) | 2024-10-22T13:55:39Z | 2025-12-11T09:27:53Z |
| mal-2024-11661 | Malicious code in pplgdfhuighsdfyisfdty (PyPI) | 2024-10-22T13:55:39Z | 2025-12-11T09:27:53Z |
| mal-2024-11659 | Malicious code in platform-harness-ecr-configmap (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11658 | Malicious code in piano-transcription (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11657 | Malicious code in pdf2doc (PyPI) | 2024-09-19T21:35:06Z | 2025-12-11T09:27:53Z |
| mal-2024-11656 | Malicious code in pd-py-cli (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11655 | Malicious code in pckaging (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11654 | Malicious code in partpyth (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11653 | Malicious code in package-lib8127 (PyPI) | 2024-09-17T21:01:02Z | 2025-12-11T09:27:53Z |
| mal-2024-11651 | Malicious code in orion-algo-extrapol (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11650 | Malicious code in oracle-tools (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11649 | Malicious code in optimux (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11647 | Malicious code in nezur (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1796 | Intel Driver and Support Assistant: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1795 | Intel PROSet Wireless WiFi Software: Schwachstelle ermöglicht Denial of Service | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1793 | Adobe Photoshop: Schwachstelle ermöglicht Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1792 | Adobe FrameMaker: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1791 | Adobe Magento: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1789 | Microsoft Edge Android: Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1787 | Microsoft Office Produkte: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1786 | Microsoft Dynamics 365: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1784 | Liferay Portal und DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1782 | Microsoft SQL Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1781 | Microsoft Exchange Server und Microsoft Exchange: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1780 | Microsoft Azure: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1779 | Microsoft Windows Subsystem für Linux: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1778 | ServiceNow Now Platform (AI Platform): Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1777 | Zoom Video Communications Zoom Client: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1775 | Ivanti Avalanche: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1774 | Ivanti Connect Secure und Policy Secure: Mehrere Schwachstelle | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1773 | Microsoft Teams Geräte: Schwachstelle ermöglicht Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1772 | Siemens SICAM: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1771 | Mehrere Siemens-Produkte: Schwachstelle ermöglicht Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1769 | Siemens SIMATIC S7: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1768 | Siemens SIPROTEC: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1766 | Liferay Portal und DXP: Schwachstelle ermöglicht Denial of Service | 2025-08-11T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1667 | Google Chrome / Microsoft Edge: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-07-29T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1258 | KDE "Konsole": Schwachstelle ermöglicht Codeausführung | 2025-06-09T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1076 | Wibu-Systems CodeMeter: Schwachstelle ermöglicht Privilegieneskalation | 2025-05-15T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1060 | Red Hat OpenShift: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-05-14T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2024-0904 | Kubernetes: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-04-16T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2023-3182 | OpenSSH: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2023-12-19T23:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2023-1544 | Kubernetes: Schwachstelle ermöglicht Manipulation von Dateien | 2022-01-06T23:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:8351 | Red Hat Security Advisory: grafana:7.3.6 security update | 2024-10-23T10:12:31+00:00 | 2026-01-21T23:25:44+00:00 |
| rhsa-2024:8337 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.2 for RHEL 9 | 2024-10-31T00:55:34+00:00 | 2026-01-21T23:25:42+00:00 |
| rhsa-2024:8329 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-22T15:40:25+00:00 | 2026-01-21T23:25:42+00:00 |
| rhsa-2024:8327 | Red Hat Security Advisory: grafana security update | 2024-10-22T15:15:27+00:00 | 2026-01-21T23:25:41+00:00 |
| rhsa-2024:8263 | Red Hat Security Advisory: OpenShift Container Platform 4.16.18 packages and security update | 2024-10-24T11:11:28+00:00 | 2026-01-21T23:25:34+00:00 |
| rhsa-2024:8232 | Red Hat Security Advisory: OpenShift Container Platform 4.17.2 packages and security update | 2024-10-23T05:52:08+00:00 | 2026-01-21T23:25:33+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-01-21T23:25:31+00:00 |
| rhsa-2024:8112 | Red Hat Security Advisory: buildah security update | 2024-10-15T15:46:46+00:00 | 2026-01-21T23:25:30+00:00 |
| rhsa-2024:8077 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:43+00:00 | 2026-01-21T23:25:29+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-01-21T23:25:26+00:00 |
| rhsa-2024:8076 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:49+00:00 | 2026-01-21T23:25:24+00:00 |
| rhsa-2024:8075 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.19 Security update | 2024-10-14T18:01:59+00:00 | 2026-01-21T23:25:23+00:00 |
| rhsa-2024:8039 | Red Hat Security Advisory: podman security update | 2024-10-14T02:05:16+00:00 | 2026-01-21T23:25:21+00:00 |
| rhsa-2024:8038 | Red Hat Security Advisory: container-tools:rhel8 security update | 2024-10-14T02:22:32+00:00 | 2026-01-21T23:25:21+00:00 |
| rhsa-2024:8014 | Red Hat Security Advisory: Network Observability 1.7.0 for OpenShift | 2024-10-22T01:05:39+00:00 | 2026-01-21T23:25:20+00:00 |
| rhsa-2024:7994 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.3 bug fixes and container updates | 2024-10-11T01:43:45+00:00 | 2026-01-21T23:25:20+00:00 |
| rhsa-2024:7987 | Red Hat Security Advisory: Satellite 6.15.4 Security Update | 2024-10-10T20:31:33+00:00 | 2026-01-21T23:25:19+00:00 |
| rhsa-2024:7759 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.6.3 security updates | 2024-10-10T16:53:04+00:00 | 2026-01-21T23:25:12+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7725 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5 | 2024-10-07T09:24:53+00:00 | 2026-01-21T23:25:11+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7706 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-07T01:12:29+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7550 | Red Hat Security Advisory: golang security update | 2024-10-02T18:24:59+00:00 | 2026-01-21T23:25:10+00:00 |
| rhsa-2024:7502 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-10-02T11:50:23+00:00 | 2026-01-21T23:25:04+00:00 |
| rhsa-2024:7443 | Red Hat Security Advisory: RHACS 4.5 enhancement and security update | 2024-10-01T09:03:41+00:00 | 2026-01-21T23:25:03+00:00 |
| rhsa-2024:7262 | Red Hat Security Advisory: osbuild-composer security update | 2024-09-26T18:39:11+00:00 | 2026-01-21T23:24:59+00:00 |
| rhsa-2024:7052 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) | 2024-09-24T12:51:36+00:00 | 2026-01-21T23:24:53+00:00 |
| rhsa-2024:6779 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.10.6 bug fixes and container updates | 2024-09-18T19:22:01+00:00 | 2026-01-21T23:24:41+00:00 |
| rhsa-2024:6235 | Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.1.2 | 2024-09-03T14:56:15+00:00 | 2026-01-21T23:24:29+00:00 |
| rhsa-2024:6211 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.1 security update | 2024-09-03T10:05:20+00:00 | 2026-01-21T23:24:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-174-04 | Pyramid Solutions EtherNet/IP Adapter Development Kit | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-03 | Secheron SEPCOS Control and Protection Relay | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-02 | Yokogawa CAMS for HIS | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-174-01 | Yokogawa STARDOM | 2022-06-23T00:00:00.000000Z | 2022-06-23T00:00:00.000000Z |
| icsa-22-172-06 | Siemens WinCC OA | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-05 | Phoenix Contact Classic Line Industrial Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-04 | Phoenix Contact ProConOS and MULTIPROG | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-03 | Phoenix Contact Classic Line Controllers | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsa-22-172-02 | JTEKT TOYOPUC | 2022-06-21T00:00:00.000000Z | 2022-06-21T00:00:00.000000Z |
| icsma-22-167-01 | Hillrom Medical Device Management | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-03 | AutomationDirect DirectLOGIC with Ethernet | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-02 | AutomationDirect DirectLOGIC with Serial Communication | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-01 | AutomationDirect C-More EA9 HMI | 2022-06-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-132-10 | Siemens Desigo PXC and DXR Devices | 2022-05-12T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-20-014-05 | Siemens TIA Portal (Update F) | 2020-01-16T00:00:00.000000Z | 2022-06-16T00:00:00.000000Z |
| icsa-22-167-16 | Siemens SCALANCE LPE 4903 and SINUMERIK Edge | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-15 | Siemens Teamcenter Active Workspace | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-12 | Siemens Spectrum Power Systems | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-10 | Siemens SCALANCE XM-400 and XR-500 | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-09 | Siemens SCALANCE LPE9403 Third-Party Vulnerabilities | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-07 | Siemens SINEMA Remote Connect Server | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-05 | Siemens EN100 Ethernet Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-167-04 | Siemens Mendix SAML Module | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-03 | Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-02 | Meridian Cooperative Meridian | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-01 | Johnson Controls Metasys ADS ADX OAS Servers | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-041-07 | Siemens Solid Edge, JT2Go, and Teamcenter Visualization | 2022-02-08T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-257-06 | Siemens SIMATIC CP (Update A) | 2021-09-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-222-07 | Siemens SIMATIC CP (Update A) | 2021-08-10T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-17-285-05 | Siemens BACnet Field Panels (Update A) | 2017-10-12T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180905-cimc-injection | Cisco Integrated Management Controller Command Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-cdcnm-escalation | Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180905-acsxxe | Cisco Secure Access Control Server XML External Entity Injection Vulnerability | 2018-09-05T16:00:00+00:00 | 2018-09-05T16:00:00+00:00 |
| cisco-sa-20180815-ucmimps-dos | Cisco Unified Communications Manager IM & Presence Service Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-09-04T15:53:00+00:00 |
| cisco-sa-20180814-cpusidechannel | CPU Side-Channel Information Disclosure Vulnerabilities: August 2018 | 2018-08-14T17:00:00+00:00 | 2018-08-31T20:37:00+00:00 |
| cisco-sa-20180521-cpusidechannel | CPU Side-Channel Information Disclosure Vulnerabilities: May 2018 | 2018-05-22T01:00:00+00:00 | 2018-08-31T20:24:00+00:00 |
| cisco-sa-20180516-telepres-xfs | Cisco TelePresence IX5000 Series and TelePresence TX9000 Series Cross-Frame Scripting Vulnerability | 2018-05-16T16:00:00+00:00 | 2018-08-24T13:57:00+00:00 |
| cisco-sa-20180815-esa-file-bypass | Cisco Email Security Appliance EXE File Scanning Bypass Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-20T16:31:00+00:00 |
| cisco-sa-20180516-ip-phone-dos | Cisco IP Phone 7800 Series and 8800 Series and Cisco Wireless IP Phone 8821 Denial of Service Vulnerability | 2018-05-16T16:00:00+00:00 | 2018-08-16T14:14:00+00:00 |
| cisco-sa-20180815-wsa-escalation | Cisco Web Security Appliance Privilege Escalation Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-wsa-dos | Cisco Web Security Appliance Web Proxy Memory Exhaustion Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-sb-wap-encrypt | Cisco Small Business 100 Series and 300 Series Wireless Access Points Encryption Algorithm Downgrade Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-res-xss | Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-dna-injection | Cisco Digital Network Architecture Center Command Injection Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-cucdm-xss | Cisco Unified Communications Domain Manager Reflected Cross-Site Scripting Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-csb-wap-dos | Cisco Small Business 100 Series and 300 Series Wireless Access Points Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180815-asr-ptp-dos | Cisco ASR 9000 Series Aggregation Services Routers Precision Time Protocol Denial of Service Vulnerability | 2018-08-15T16:00:00+00:00 | 2018-08-15T16:00:00+00:00 |
| cisco-sa-20180813-rsa-nonce | Cisco IOS and IOS XE Software Internet Key Exchange Version 1 RSA-Encrypted Nonces Vulnerability | 2018-08-13T16:00:00+00:00 | 2018-08-13T16:00:00+00:00 |
| cisco-sa-20180801-wsa-xss | Cisco Web Security Appliance Reflected and Document Object Model-Based Cross-Site Scripting Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-ucm-xss | Cisco Unified Communications Manager Reflected Cross-Site Scripting Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-sb-rxss | Cisco Small Business 300 Series Managed Switches Authenticated Reflected Cross-Site Scripting Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-sb-pxss | Cisco Small Business 300 Series Managed Switches Persistent Cross-Site Scripting Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-pcp-dos | Cisco Prime Collaboration Provisioning Unauthorized Password Change Denial of Service Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-ise-csrf | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180801-fampmac | Cisco AMP for Endpoints Mac Connector Software Denial of Service Vulnerability | 2018-08-01T16:00:00+00:00 | 2018-08-01T16:00:00+00:00 |
| cisco-sa-20180718-webex-teams-rce | Cisco Webex Teams Remote Code Execution Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-webex-rce | Cisco Webex Network Recording Players Remote Code Execution Vulnerabilities | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-webex-dos | Cisco Webex Network Recording Players Denial of Service Vulnerabilities | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-webex-dom-xss | Cisco Webex DOM-Based Cross-Site Scripting Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-ucmim-ps-xss | Cisco Unified Communications Manager IM And Presence Service Cross-Site Scripting Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38571 | sunrpc: fix client side handling of tls alerts | 2025-08-02T00:00:00.000Z | 2025-09-04T03:08:05.000Z |
| msrc_cve-2024-25177 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). | 2025-07-02T00:00:00.000Z | 2025-09-04T03:05:40.000Z |
| msrc_cve-2024-57254 | An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. | 2025-02-02T00:00:00.000Z | 2025-09-04T03:04:13.000Z |
| msrc_cve-2024-26896 | wifi: wfx: fix memory leak when starting AP | 2024-04-02T07:00:00.000Z | 2025-09-04T03:02:24.000Z |
| msrc_cve-2023-52927 | netfilter: allow exp not to be removed in nf_ct_find_expectation | 2025-03-02T00:00:00.000Z | 2025-09-04T03:00:35.000Z |
| msrc_cve-2025-38608 | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 2025-08-02T00:00:00.000Z | 2025-09-04T02:59:49.000Z |
| msrc_cve-2025-4373 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | 2025-05-02T00:00:00.000Z | 2025-09-04T02:58:55.000Z |
| msrc_cve-2022-34835 | In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. | 2022-06-02T00:00:00.000Z | 2025-09-04T02:58:01.000Z |
| msrc_cve-2025-38562 | ksmbd: fix null pointer dereference error in generate_encryptionkey | 2025-08-02T00:00:00.000Z | 2025-09-04T02:55:37.000Z |
| msrc_cve-2025-21650 | net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue | 2025-01-02T00:00:00.000Z | 2025-09-04T02:55:33.000Z |
| msrc_cve-2022-41725 | Excessive resource consumption in mime/multipart | 2023-02-01T00:00:00.000Z | 2025-09-04T02:53:04.000Z |
| msrc_cve-2025-38204 | jfs: fix array-index-out-of-bounds read in add_missing_indices | 2025-07-02T00:00:00.000Z | 2025-09-04T02:52:29.000Z |
| msrc_cve-2019-14204 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:52:16.000Z |
| msrc_cve-2025-5994 | Cache poisoning via the ECS-enabled Rebirthday Attack | 2025-07-02T00:00:00.000Z | 2025-09-04T02:52:05.000Z |
| msrc_cve-2025-38610 | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | 2025-08-02T00:00:00.000Z | 2025-09-04T02:51:36.000Z |
| msrc_cve-2025-4056 | Glib: glib crash after long command line | 2025-07-02T00:00:00.000Z | 2025-09-04T02:50:16.000Z |
| msrc_cve-2025-21651 | net: hns3: don't auto enable misc vector | 2025-01-02T00:00:00.000Z | 2025-09-04T02:46:28.000Z |
| msrc_cve-2021-28211 | A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. | 2021-06-02T00:00:00.000Z | 2025-09-04T02:46:24.000Z |
| msrc_cve-2025-21812 | ax25: rcu protect dev->ax25_ptr | 2025-02-02T00:00:00.000Z | 2025-09-04T02:45:19.000Z |
| msrc_cve-2025-38604 | wifi: rtl818x: Kill URBs before clearing tx status queue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:44:21.000Z |
| msrc_cve-2017-7718 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. | 2017-04-02T00:00:00.000Z | 2025-09-04T02:42:31.000Z |
| msrc_cve-2025-7207 | mruby nregs codegen.c scope_new heap-based overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:39:43.000Z |
| msrc_cve-2025-38579 | f2fs: fix KMSAN uninit-value in extent_info usage | 2025-08-02T00:00:00.000Z | 2025-09-04T02:39:27.000Z |
| msrc_cve-2019-14196 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:36:43.000Z |
| msrc_cve-2025-38602 | iwlwifi: Add missing check for alloc_ordered_workqueue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:35:35.000Z |
| msrc_cve-2024-26886 | Bluetooth: af_bluetooth: Fix deadlock | 2024-04-02T07:00:00.000Z | 2025-09-04T02:33:42.000Z |
| msrc_cve-2025-8194 | Tarfile infinite loop during parsing with negative member offset | 2025-07-02T00:00:00.000Z | 2025-09-04T02:31:30.000Z |
| msrc_cve-2020-36476 | An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory. | 2021-08-02T00:00:00.000Z | 2025-09-04T02:31:03.000Z |
| msrc_cve-2024-46748 | cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT | 2024-09-01T07:00:00.000Z | 2025-09-04T02:30:35.000Z |
| msrc_cve-2023-24537 | Infinite loop in parsing in go/scanner | 2023-04-01T00:00:00.000Z | 2025-09-04T02:29:22.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201909-0594 | The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote comma… | 2025-11-18T15:24:08.181000Z |
| var-202002-0716 | A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for… | 2025-11-18T15:24:06.762000Z |
| var-202008-0801 | A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secur… | 2025-11-18T15:24:06.722000Z |
| var-202009-0783 | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2… | 2025-11-18T15:24:06.609000Z |
| var-202009-0782 | An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2… | 2025-11-18T15:24:06.583000Z |
| var-202409-2372 | Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9… | 2025-11-18T15:23:54.797000Z |
| var-202502-0753 | Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute ar… | 2025-11-18T15:23:53.107000Z |
| var-202505-1760 | SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can … | 2025-11-18T15:23:51.693000Z |
| var-202508-1991 | An authentication bypass vulnerability exists in the HTTP authentication functionality of… | 2025-11-18T15:23:49.950000Z |
| var-202508-2012 | An unsafe default authentication vulnerability exists in the Initial Setup Authentication… | 2025-11-18T15:23:49.929000Z |
| var-202508-2645 | The authenticated remote command execution (RCE) vulnerability exists in the Parental Co… | 2025-11-18T15:23:49.877000Z |
| var-200412-0177 | Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refu… | 2025-11-18T15:23:47.308000Z |
| var-202003-0963 | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulne… | 2025-11-18T15:23:00.332000Z |
| var-202007-1256 | D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.ph… | 2025-11-18T15:22:56.125000Z |
| var-202101-0529 | An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A b… | 2025-11-18T15:22:55.586000Z |
| var-202108-1164 | A deserialization issue was addressed through improved validation. This issue is fixed in… | 2025-11-18T15:22:54.836000Z |
| var-202112-0361 | A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi modul… | 2025-11-18T15:22:54.436000Z |
| var-202303-1392 | OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escal… | 2025-11-18T15:22:52.231000Z |
| var-202310-0207 | A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF32… | 2025-11-18T15:22:50.803000Z |
| var-202310-0206 | A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF32… | 2025-11-18T15:22:50.787000Z |
| var-202312-2070 | Improper neutralization of special elements in the SMA100 SSL-VPN management interface al… | 2025-11-18T15:22:50.322000Z |
| var-202403-0574 | A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule()… | 2025-11-18T15:22:49.437000Z |
| var-202505-1674 | Exposure of sensitive information caused by shared microarchitectural predictor state tha… | 2025-11-18T15:22:40.226000Z |
| var-202505-1884 | A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2… | 2025-11-18T15:22:40.188000Z |
| var-202508-1391 | A security issue exists within the FactoryTalk Linx Network Browser. By modifying the pro… | 2025-11-18T15:22:38.943000Z |
| var-202508-1979 | A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tend… | 2025-11-18T15:22:38.903000Z |
| var-202510-1221 | A security issue exists within the x86 Microsoft Installer File (MSI), installed with FTL… | 2025-11-18T15:22:37.420000Z |
| var-201410-1157 | The DNP3 feature on Rockwell Automation Allen-Bradley MicroLogix 1400 1766-Lxxxxx A FRN c… | 2025-11-18T15:22:25.578000Z |
| var-201708-0289 | Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.… | 2025-11-18T15:22:25.336000Z |
| var-201602-0120 | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers… | 2025-11-18T15:22:24.804000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000070 | Yahoo! Browser vulnerable in the WebView class | 2012-07-13T15:00+09:00 | 2012-07-20T12:12+09:00 |
| jvndb-2012-000069 | Movable Type plugin MT4i vulnerable to cross-site scripting | 2012-07-06T17:24+09:00 | 2012-07-06T17:24+09:00 |
| jvndb-2012-000068 | YY-BOARD vulnerable to cross-site scripting | 2012-07-06T17:19+09:00 | 2012-07-06T17:19+09:00 |
| jvndb-2012-000067 | Movable Type plugin MT4i vulnerable to cross-site scripting | 2012-07-06T17:14+09:00 | 2012-07-06T17:14+09:00 |
| jvndb-2012-000066 | Ruby hash table implementation vulnerable to denial-of-service | 2012-07-06T17:11+09:00 | 2012-07-06T17:11+09:00 |
| jvndb-2012-000064 | Yome Collection for Android issue in management of IMEI | 2012-07-03T14:57+09:00 | 2012-07-03T14:57+09:00 |
| jvndb-2012-000065 | Zenphoto vulnerable to cross-site scripting | 2012-07-03T14:49+09:00 | 2012-07-03T14:49+09:00 |
| jvndb-2012-000061 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T14:31+09:00 | 2012-06-19T14:31+09:00 |
| jvndb-2012-000060 | SmallPICT vulnerable to cross-site scripting | 2012-06-19T14:00+09:00 | 2012-06-19T14:00+09:00 |
| jvndb-2012-000062 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T12:35+09:00 | 2012-06-19T12:35+09:00 |
| jvndb-2012-000057 | Dolphin Browser vulnerable in the WebView class | 2012-06-14T14:20+09:00 | 2012-06-14T14:20+09:00 |
| jvndb-2012-000046 | Flash Player issue in implementations of the Same Origin Policy | 2012-06-11T15:05+09:00 | 2012-06-13T16:39+09:00 |
| jvndb-2012-000056 | FeedDemon vulnerable to arbitrary script execution | 2012-06-07T15:39+09:00 | 2012-06-07T15:39+09:00 |
| jvndb-2012-000059 | SEIL series fail to restrict access permissions | 2012-06-06T12:39+09:00 | 2012-06-06T12:39+09:00 |
| jvndb-2012-000058 | WordPress plugin WassUp vulnerable to cross-site scripting | 2012-06-06T12:29+09:00 | 2012-06-06T12:29+09:00 |
| jvndb-2012-000055 | @WEB ShoppingCart vulnerable to cross-site scripting | 2012-06-05T14:04+09:00 | 2012-06-05T14:04+09:00 |
| jvndb-2012-000054 | Puella Magi Madoka Magica iP for Android vulnerable to information disclosure | 2012-06-01T14:09+09:00 | 2012-06-01T14:09+09:00 |
| jvndb-2012-000053 | Segue vulnerable to SQL injection | 2012-06-01T14:06+09:00 | 2012-06-01T14:06+09:00 |
| jvndb-2012-000052 | Segue vulnerable to cross-site scripting | 2012-06-01T14:03+09:00 | 2012-06-01T14:03+09:00 |
| jvndb-2012-000051 | Logitec LAN-W300N/R series fails to restrict access permissions | 2012-05-25T15:50+09:00 | 2012-05-25T15:50+09:00 |
| jvndb-2012-000050 | Roundcube Webmail vulnerable to cross-site scripting | 2012-05-25T15:43+09:00 | 2012-05-25T15:43+09:00 |
| jvndb-2012-000048 | RSSOwl vulnerable to arbitrary script execution | 2012-05-25T15:37+09:00 | 2012-05-25T15:37+09:00 |
| jvndb-2012-000047 | Sybase EAServer vulnerable to cross-site scripting | 2012-05-25T15:34+09:00 | 2012-05-25T15:34+09:00 |
| jvndb-2012-000044 | iLunascape for Android vulnerable in the WebView class | 2012-05-21T13:56+09:00 | 2012-05-21T13:56+09:00 |
| jvndb-2012-000045 | Drupal Form API fails to validate the redirect URL | 2012-05-17T13:55+09:00 | 2012-05-17T13:55+09:00 |
| jvndb-2012-000043 | baserCMS vulnerable to session management | 2012-05-15T16:56+09:00 | 2012-05-15T16:56+09:00 |
| jvndb-2012-000042 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:53+09:00 | 2012-05-15T16:53+09:00 |
| jvndb-2012-000041 | WEB MART from KENT-WEB vulnerable to cross-site scripting | 2012-05-15T16:44+09:00 | 2012-05-15T16:44+09:00 |
| jvndb-2012-002377 | Arbitrary Code Execution Vulnerability in Hitachi COBOL GUI Option on Windows | 2012-05-15T15:14+09:00 | 2012-05-15T15:14+09:00 |
| jvndb-2012-000035 | Multiple JustSystems products vulnerable to buffer overflow | 2012-04-24T13:37+09:00 | 2012-05-09T19:49+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01705-1 | Security update for postgresql13 | 2025-05-26T11:04:19Z | 2025-05-26T11:04:19Z |
| suse-su-2025:01704-1 | Security update for python-setuptools | 2025-05-26T11:02:46Z | 2025-05-26T11:02:46Z |
| suse-su-2025:01661-2 | Security update for postgresql14 | 2025-05-25T22:02:36Z | 2025-05-25T22:02:36Z |
| suse-su-2025:01523-1 | Security update for python-Django | 2025-05-25T22:01:37Z | 2025-05-25T22:01:37Z |
| suse-su-2025:01703-1 | Security update for xen | 2025-05-25T21:42:29Z | 2025-05-25T21:42:29Z |
| suse-su-2025:01702-1 | Security update for glibc | 2025-05-24T09:50:54Z | 2025-05-24T09:50:54Z |
| suse-su-2025:01701-1 | Security update for MozillaFirefox | 2025-05-24T08:34:24Z | 2025-05-24T08:34:24Z |
| suse-su-2025:20346-1 | Security update for python311 | 2025-05-23T13:40:05Z | 2025-05-23T13:40:05Z |
| suse-su-2025:20345-1 | Security update for augeas | 2025-05-23T13:00:13Z | 2025-05-23T13:00:13Z |
| suse-su-2025:01695-1 | Security update for python-setuptools | 2025-05-23T12:50:53Z | 2025-05-23T12:50:53Z |
| suse-su-2025:01693-1 | Security update for python36-setuptools | 2025-05-23T12:48:03Z | 2025-05-23T12:48:03Z |
| suse-su-2025:01649-2 | Security update for python-tornado6 | 2025-05-23T11:58:50Z | 2025-05-23T11:58:50Z |
| suse-su-2025:01692-1 | Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) | 2025-05-23T08:03:48Z | 2025-05-23T08:03:48Z |
| suse-su-2025:20365-1 | Security update for s390-tools | 2025-05-23T07:59:47Z | 2025-05-23T07:59:47Z |
| suse-su-2025:20352-1 | Security update for s390-tools | 2025-05-23T07:48:14Z | 2025-05-23T07:48:14Z |
| suse-su-2025:20344-1 | Security update for the Linux Kernel | 2025-05-23T07:28:27Z | 2025-05-23T07:28:27Z |
| suse-su-2025:20355-1 | Security update for the Linux Kernel | 2025-05-23T07:28:26Z | 2025-05-23T07:28:26Z |
| suse-su-2025:20354-1 | Security update for the Linux Kernel | 2025-05-23T07:19:59Z | 2025-05-23T07:19:59Z |
| suse-su-2025:20343-1 | Security update for the Linux Kernel | 2025-05-23T07:19:59Z | 2025-05-23T07:19:59Z |
| suse-su-2025:01683-1 | Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6) | 2025-05-22T21:38:10Z | 2025-05-22T21:38:10Z |
| suse-su-2025:01682-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-05-22T20:04:36Z | 2025-05-22T20:04:36Z |
| suse-su-2025:01677-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-05-22T20:04:28Z | 2025-05-22T20:04:28Z |
| suse-su-2025:01676-1 | Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) | 2025-05-22T20:04:19Z | 2025-05-22T20:04:19Z |
| suse-su-2025:01675-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6) | 2025-05-22T19:34:27Z | 2025-05-22T19:34:27Z |
| suse-su-2025:01668-1 | Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) | 2025-05-22T19:34:13Z | 2025-05-22T19:34:13Z |
| suse-su-2025:01672-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-05-22T19:34:05Z | 2025-05-22T19:34:05Z |
| suse-su-2025:01669-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-05-22T19:33:43Z | 2025-05-22T19:33:43Z |
| suse-su-2025:01663-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-05-22T17:33:37Z | 2025-05-22T17:33:37Z |
| suse-su-2025:01662-1 | Security update for python-cryptography | 2025-05-22T16:04:44Z | 2025-05-22T16:04:44Z |
| suse-su-2025:01661-1 | Security update for postgresql14 | 2025-05-22T16:03:02Z | 2025-05-22T16:03:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13740-1 | python311-3.11.8-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13739-1 | python310-3.10.13-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13738-1 | nodejs-electron-28.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13737-1 | glade-3.40.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13736-1 | python38-3.8.18-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13735-1 | python310-orjson-3.9.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13734-1 | postgresql-jdbc-42.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13733-1 | opensc-0.24.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13732-1 | libmodsecurity3-3.0.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13731-1 | exiv2-0.28.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13730-1 | dav1d-1.4.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13729-1 | python310-uamqp-1.6.8-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13728-1 | MozillaFirefox-123.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13727-1 | ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13726-1 | ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13725-1 | libopenvswitch-3_1-0-3.1.0-19.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13724-1 | jetty-annotations-9.4.54-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13723-1 | giflib-devel-32bit-5.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13722-1 | c-ares-devel-1.27.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13721-1 | ruby3.3-rubygem-puma-5-5.6.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13720-1 | ruby3.3-rubygem-puma-6.4.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13719-1 | ruby3.3-rubygem-json_pure-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13718-1 | kubernetes1.26-apiserver-1.26.14-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13717-1 | kubernetes1.25-apiserver-1.25.16-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13716-1 | kubernetes1.24-apiserver-1.24.17-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13715-1 | kubernetes1.23-apiserver-1.23.17-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13714-1 | helm-3.14.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13713-1 | grafana-10.1.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13712-1 | gifsicle-1.95-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13711-1 | MozillaThunderbird-115.8.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24160 | AVEVA eDNA Enterprise Data Historian SQL注入漏洞（CNVD-2025-24160） | 2020-09-12 | 2025-10-17 |
| cnvd-2025-24159 | Rockwell Automation Enhanced HIM跨站点请求伪造漏洞 | 2023-07-13 | 2025-10-17 |
| cnvd-2025-24158 | Project Monitoring System跨站脚本漏洞 | 2025-09-29 | 2025-10-17 |
| cnvd-2025-24157 | Project Monitoring System login.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-17 |
| cnvd-2025-24156 | Project Monitoring System useredit.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24155 | Online Complaint Site state.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24154 | Online Complaint Site register-complaint.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24153 | Tenda AC7 /goform/SetUpnpCfg文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24152 | Tenda AC7 /goform/setNotUpgrade文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24151 | Tenda AC7 /goform/SetDDNSCfg文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24150 | Tenda AC7 /goform/saveAutoQos文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24149 | Tenda AC7 /goform/fast_setting_pppoe_set文件缓冲区溢出漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24148 | Juniper Networks Junos OS Evolved操作系统命令注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24147 | ERPNext跨站脚本漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24146 | Fortinet FortiPAM操作系统命令注入漏洞（CNVD-2025-24146） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24145 | Fortinet FortiOS访问控制错误漏洞（CNVD-2025-24145） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24144 | fortinet FortiAnalyzer竞争条件问题漏洞 | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24143 | fortinet FortiOS资源管理错误漏洞（CNVD-2025-24143） | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24142 | fortinet FortiADC信息泄露漏洞 | 2025-10-16 | 2025-10-17 |
| cnvd-2025-24141 | Hospital Management System user-login.php文件SQL注入漏洞 | 2024-09-09 | 2025-10-17 |
| cnvd-2025-24140 | Hospital Management System check_availability.php文件SQL注入漏洞 | 2024-09-20 | 2025-10-17 |
| cnvd-2025-24139 | Hospital Management System change-password.php页面SQL注入漏洞 | 2024-10-23 | 2025-10-17 |
| cnvd-2025-24138 | Hospital Management System add-doctor.php文件SQL注入漏洞 | 2024-10-28 | 2025-10-17 |
| cnvd-2025-24137 | Hospital Management System index.php文件SQL注入漏洞 | 2024-12-27 | 2025-10-17 |
| cnvd-2025-24136 | Hospital Management System manage-doctors.php文件跨站脚本漏洞 | 2024-12-30 | 2025-10-17 |
| cnvd-2025-24135 | Hospital Management System doctor-specilization.php文件SQL注入漏洞 | 2025-04-09 | 2025-10-17 |
| cnvd-2025-24134 | Hospital Management System session函数硬编码密钥漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24133 | E-Banking System SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24132 | Online Bidding System wew.php文件SQL注入漏洞 | 2025-09-25 | 2025-10-17 |
| cnvd-2025-24131 | Online Bidding System bidlist.php文件SQL注入漏洞 | 2025-09-29 | 2025-10-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-1036 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1035 | Multiples vulnérabilités dans Microsoft Edge | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1034 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1033 | Multiples vulnérabilités dans Tenable Security Center | 2023-12-15T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1027 | Multiples vulnérabilités dans GitLab | 2023-12-14T00:00:00.000000 | 2023-12-15T00:00:00.000000 |
| certfr-2023-avi-1032 | Vulnérabilité dans Microsoft Azure | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1031 | Multiples vulnérabilités dans Google Chrome | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1030 | Vulnérabilité dans Squid | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1029 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1028 | Vulnérabilité dans les produits Wallix | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1026 | Vulnérabilité dans VMware Workspace ONE Launcher | 2023-12-14T00:00:00.000000 | 2023-12-14T00:00:00.000000 |
| certfr-2023-avi-1025 | Multiples vulnérabilités dans les produits Microsoft | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1024 | Multiples vulnérabilités dans Microsoft Azure | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1023 | Multiples vulnérabilités dans Microsoft Windows | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1022 | Multiples vulnérabilités dans Microsoft Office | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1021 | Multiples vulnérabilités dans les produits PRIM'X | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1020 | Multiples vulnérabilités dans les produits SAP | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1018 | Multiples vulnérabilités dans les produits Fortinet | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1017 | Multiples vulnérabilités dans les produits ElasticSearch | 2023-12-13T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1005 | Vulnérabilité dans Apache Struts 2 | 2023-12-07T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2022-avi-853 | Vulnérabilité dans Sophos Firewall | 2022-09-26T00:00:00.000000 | 2023-12-13T00:00:00.000000 |
| certfr-2023-avi-1016 | Vulnérabilité dans Xen | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1015 | Multiples vulnérabilités dans les produits Siemens | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1014 | Multiples vulnérabilités dans les produits Schneider Electric | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1013 | Multiples vulnérabilités dans les produits Apple | 2023-12-12T00:00:00.000000 | 2023-12-12T00:00:00.000000 |
| certfr-2023-avi-1012 | Multiples vulnérabilités dans LibreOffice | 2023-12-11T00:00:00.000000 | 2023-12-11T00:00:00.000000 |
| certfr-2023-avi-1011 | Multiples vulnérabilités dans les produits Qnap | 2023-12-11T00:00:00.000000 | 2023-12-11T00:00:00.000000 |
| certfr-2023-avi-1010 | Multiples vulnérabilités dans les produits Ivanti | 2023-12-11T00:00:00.000000 | 2023-12-11T00:00:00.000000 |
| certfr-2023-avi-0995 | Multiples vulnérabilités dans Google Android | 2023-12-05T00:00:00.000000 | 2023-12-11T00:00:00.000000 |
| certfr-2023-avi-1009 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-12-08T00:00:00.000000 | 2023-12-08T00:00:00.000000 |