Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64204 |
6.5 (3.1)
|
WordPress SmartMag theme <= 10.3.1 - Cross Site Script… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:07.091Z | 2026-01-20T14:28:20.029Z |
| CVE-2025-64235 |
6.5 (3.1)
|
WordPress Tuturn plugin < 3.6 - Arbitrary File Downloa… |
AmentoTech |
Tuturn |
2025-12-18T16:43:47.100Z | 2026-01-20T14:28:20.022Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64237 |
4.3 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Cros… |
Graham |
Quick Interest Slider |
2025-12-16T08:12:47.167Z | 2026-01-20T14:28:19.971Z |
| CVE-2025-64236 |
9.8 (3.1)
|
WordPress Tuturn plugin < 3.6 - Broken Authentication … |
AmentoTech |
Tuturn |
2025-12-18T16:21:48.796Z | 2026-01-20T14:28:19.967Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| CVE-2025-64219 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.18 - Broken… |
Strategy11 Team |
Business Directory |
2025-10-29T08:38:09.728Z | 2026-01-20T14:28:19.940Z |
| CVE-2025-64206 |
9.8 (3.1)
|
WordPress Jannah theme <= 7.6.0 - PHP Object Injection… |
TieLabs |
Jannah |
2025-12-18T07:22:11.440Z | 2026-01-20T14:28:19.907Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| CVE-2025-64200 |
5.9 (3.1)
|
WordPress Email Template Customizer for WooCommerce pl… |
VillaTheme |
Email Template Customizer for WooCommerce |
2025-10-29T08:38:05.654Z | 2026-01-20T14:28:19.586Z |
| CVE-2025-64201 |
4.3 (3.1)
|
WordPress PowerPress Podcasting plugin <= 11.13.12 - C… |
blubrry |
PowerPress Podcasting |
2025-10-29T08:38:06.132Z | 2026-01-20T14:28:19.584Z |
| CVE-2025-64202 |
6.5 (3.1)
|
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting … |
TieLabs |
Sahifa |
2025-10-29T08:38:06.577Z | 2026-01-20T14:28:19.577Z |
| CVE-2025-64195 |
7.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Local File Inclusion … |
ThimPress |
Eduma |
2025-10-29T08:38:04.034Z | 2026-01-20T14:28:19.495Z |
| CVE-2025-6325 |
9.8 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2026-01-20T14:28:19.494Z |
| CVE-2025-64198 |
7.1 (3.1)
|
WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2026-01-20T14:28:19.492Z |
| CVE-2025-64199 |
5.3 (3.1)
|
WordPress wpresidence theme <= 5.3.2 - Broken Access C… |
WpEstate |
wpresidence |
2025-10-29T08:38:05.202Z | 2026-01-20T14:28:19.491Z |
| CVE-2025-6324 |
7.1 (3.1)
|
WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Sc… |
MatrixAddons |
Easy Invoice |
2025-12-18T07:22:09.770Z | 2026-01-20T14:28:19.479Z |
| CVE-2025-64194 |
6.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Cross Site Scripting … |
ThimPress |
Eduma |
2025-10-29T08:38:03.614Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-6326 |
8.1 (3.1)
|
WordPress Inset theme <= 1.18.0 - Local File Inclusion… |
AncoraThemes |
Inset |
2025-12-18T07:22:09.950Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-64191 |
7.1 (3.1)
|
WordPress XStore theme < 9.6.1 - Cross Site Scripting … |
8theme |
XStore |
2025-12-18T07:22:10.489Z | 2026-01-20T14:28:19.459Z |
| CVE-2025-6327 |
10 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2026-01-20T14:28:19.457Z |
| CVE-2025-64197 |
6.5 (3.1)
|
WordPress Rehub theme < 19.9.9.1 - Cross Site Scriptin… |
sizam |
Rehub |
2025-10-29T08:38:04.636Z | 2026-01-20T14:28:19.456Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68540 |
9.8 (3.1)
|
WordPress Fana theme <= 1.1.35 - Local File Inclusion … |
thembay |
Fana |
2025-12-24T12:31:27.748Z | 2026-01-20T14:28:27.969Z |
| CVE-2025-68537 |
9.8 (3.1)
|
WordPress Zota theme <= 1.3.14 - Local File Inclusion … |
thembay |
Zota |
2025-12-24T12:31:27.277Z | 2026-01-20T14:28:27.905Z |
| CVE-2025-68535 |
9.1 (3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Brok… |
sunshinephotocart |
Sunshine Photo Cart |
2025-12-24T12:31:27.019Z | 2026-01-20T14:28:27.978Z |
| CVE-2025-68533 |
5.4 (3.1)
|
WordPress WC Builder plugin <= 1.2.0 - Cross Site Scri… |
HasThemes |
WC Builder |
2025-12-24T12:31:26.717Z | 2026-01-20T14:28:27.923Z |
| CVE-2025-68532 |
5.4 (3.1)
|
WordPress ModelTheme Addons for WPBakery and Elementor… |
modeltheme |
ModelTheme Addons for WPBakery and Elementor |
2025-12-24T12:31:26.464Z | 2026-01-20T14:28:27.821Z |
| CVE-2025-68530 |
9.8 (3.1)
|
WordPress Bookory theme <= 2.2.7 - Local File Inclusio… |
pavothemes |
Bookory |
2025-12-24T12:31:26.200Z | 2026-01-20T14:28:27.916Z |
| CVE-2025-68529 |
8.8 (3.1)
|
WordPress WP Email Capture plugin <= 3.12.5 - Cross Si… |
Rhys Wynne |
WP Email Capture |
2025-12-24T12:31:25.832Z | 2026-01-20T14:28:27.910Z |
| CVE-2025-68528 |
5.4 (3.1)
|
WordPress Free Shipping Bar: Amount Left for Free Ship… |
WPFactory |
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce |
2025-12-24T12:31:25.572Z | 2026-01-20T14:28:27.980Z |
| CVE-2025-68527 |
5.4 (3.1)
|
WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scr… |
Kodezen LLC |
Academy LMS |
2025-12-24T12:31:25.030Z | 2026-01-20T14:28:27.911Z |
| CVE-2025-68525 |
5.4 (3.1)
|
WordPress Category Icon plugin <= 1.0.2 - Cross Site S… |
pixelgrade |
Category Icon |
2025-12-24T12:31:24.777Z | 2026-01-20T14:28:27.966Z |
| CVE-2025-68523 |
8.1 (3.1)
|
WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Acc… |
Spiffy Plugins |
Spiffy Calendar |
2025-12-24T12:31:24.167Z | 2026-01-20T14:28:27.925Z |
| CVE-2025-68522 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.576Z | 2026-01-20T14:28:27.987Z |
| CVE-2025-68521 |
8.8 (3.1)
|
WordPress WpStream plugin <= 4.9.5 - Broken Access Con… |
wpstream |
WpStream |
2025-12-24T12:31:23.159Z | 2026-01-20T14:28:27.967Z |
| CVE-2025-68519 |
9.8 (3.1)
|
WordPress Brands for WooCommerce plugin <= 3.8.6.3 - S… |
BeRocket |
Brands for WooCommerce |
2025-12-24T12:31:22.910Z | 2026-01-20T14:28:27.991Z |
| CVE-2025-68517 |
8.1 (3.1)
|
WordPress Tablesome plugin <= 1.1.35.1 - Broken Access… |
Essekia |
Tablesome |
2025-12-24T12:31:22.624Z | 2026-01-20T14:28:27.875Z |
| CVE-2025-68516 |
7.5 (3.1)
|
WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Dat… |
Essekia |
Tablesome |
2025-12-24T12:31:22.368Z | 2026-01-20T14:28:27.912Z |
| CVE-2025-68513 |
5.4 (3.1)
|
WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross S… |
boldthemes |
Bold Timeline Lite |
2025-12-24T12:31:22.085Z | 2026-01-20T14:28:27.941Z |
| CVE-2025-68512 |
5.4 (3.1)
|
WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Si… |
creativeinteractivemedia |
Real 3D FlipBook |
2025-12-24T12:31:21.792Z | 2026-01-20T14:28:27.984Z |
| CVE-2025-68511 |
9.1 (3.1)
|
WordPress Gutenverse Form plugin <= 2.3.1 - Broken Acc… |
Jegstudio |
Gutenverse Form |
2025-12-24T12:31:21.523Z | 2026-01-20T14:28:27.904Z |
| CVE-2025-68509 |
6.1 (3.1)
|
WordPress User Submitted Posts plugin <= 20251121 - Op… |
Jeff Starr |
User Submitted Posts |
2025-12-24T12:31:21.266Z | 2026-01-20T14:28:27.922Z |
| CVE-2025-68508 |
9.1 (3.1)
|
WordPress Brave plugin <= 0.8.3 - Broken Access Contro… |
Brave |
Brave |
2025-12-24T12:31:20.967Z | 2026-01-20T14:28:27.971Z |
| CVE-2025-68506 |
9.8 (3.1)
|
WordPress Docket Cache plugin <= 24.07.03 - Local File… |
Nawawi Jamili |
Docket Cache |
2025-12-24T13:10:26.727Z | 2026-01-20T14:28:27.963Z |
| CVE-2025-68505 |
8.8 (3.1)
|
WordPress H5P plugin <= 1.16.1 - Broken Access Control… |
icc0rz |
H5P |
2025-12-24T12:31:20.714Z | 2026-01-20T14:28:27.979Z |
| CVE-2025-68504 |
6.5 (3.1)
|
WordPress JetSearch plugin <= 3.5.16 - Cross Site Scri… |
Crocoblock |
JetSearch |
2025-12-29T21:14:40.576Z | 2026-01-20T14:28:27.777Z |
| CVE-2025-68503 |
6.5 (3.1)
|
WordPress JetBlog plugin <= 2.4.7 - Broken Access Cont… |
Crocoblock |
JetBlog |
2025-12-29T21:15:43.312Z | 2026-01-20T14:28:27.769Z |
| CVE-2025-68502 |
4.3 (3.1)
|
WordPress JetPopup plugin <= 2.0.20.1 - Insecure Direc… |
Crocoblock |
JetPopup |
2025-12-29T21:16:55.539Z | 2026-01-20T14:28:27.904Z |
| CVE-2025-68500 |
9.1 (3.1)
|
WordPress Prime Slider – Addons For Elementor plugin <… |
bdthemes |
Prime Slider – Addons For Elementor |
2025-12-24T12:31:20.426Z | 2026-01-20T14:28:27.911Z |
| CVE-2025-68499 |
6.5 (3.1)
|
WordPress JetTabs plugin <= 2.2.12 - Cross Site Script… |
Crocoblock |
JetTabs |
2025-12-29T23:10:45.157Z | 2026-01-20T14:28:27.917Z |
| CVE-2025-68498 |
6.5 (3.1)
|
WordPress JetTabs plugin <= 2.2.12 - Broken Access Con… |
Crocoblock |
JetTabs |
2025-12-29T23:13:35.444Z | 2026-01-20T14:28:27.838Z |
| CVE-2025-68497 |
5.4 (3.1)
|
WordPress Astra Widgets plugin <= 1.2.16 - Cross Site … |
Brainstorm Force |
Astra Widgets |
2025-12-24T12:31:19.996Z | 2026-01-20T14:28:27.822Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-68535 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart al… | 2025-12-24T13:16:22.850 | 2026-01-20T15:19:44.840 |
| fkie_cve-2025-68533 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.727 | 2026-01-20T15:19:44.720 |
| fkie_cve-2025-68532 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.603 | 2026-01-20T15:19:44.593 |
| fkie_cve-2025-68530 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:22.480 | 2026-01-20T15:19:44.467 |
| fkie_cve-2025-68529 | Cross-Site Request Forgery (CSRF) vulnerability in Rhys Wynne WP Email Capture wp-email-capture all… | 2025-12-24T13:16:22.357 | 2026-01-20T15:19:44.330 |
| fkie_cve-2025-68528 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.233 | 2026-01-20T15:19:44.180 |
| fkie_cve-2025-68527 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:22.117 | 2026-01-20T15:19:44.033 |
| fkie_cve-2025-68525 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.997 | 2026-01-20T15:19:43.880 |
| fkie_cve-2025-68523 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploi… | 2025-12-24T13:16:21.877 | 2026-01-20T15:19:43.710 |
| fkie_cve-2025-68522 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.763 | 2026-01-20T15:19:43.563 |
| fkie_cve-2025-68521 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Con… | 2025-12-24T13:16:21.637 | 2026-01-20T15:19:43.400 |
| fkie_cve-2025-68519 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:21.517 | 2026-01-20T15:19:43.230 |
| fkie_cve-2025-68517 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-24T13:16:21.393 | 2026-01-20T15:19:43.047 |
| fkie_cve-2025-68516 | Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allo… | 2025-12-24T13:16:21.270 | 2026-01-20T15:19:42.877 |
| fkie_cve-2025-68513 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.143 | 2026-01-20T15:19:42.717 |
| fkie_cve-2025-68512 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:21.020 | 2026-01-20T15:19:42.583 |
| fkie_cve-2025-68511 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting … | 2025-12-24T13:16:20.900 | 2026-01-20T15:19:42.440 |
| fkie_cve-2025-68509 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted Post… | 2025-12-24T13:16:20.777 | 2026-01-20T15:19:42.287 |
| fkie_cve-2025-68508 | Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectl… | 2025-12-24T13:16:20.650 | 2026-01-20T15:19:42.130 |
| fkie_cve-2025-68506 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-24T13:16:20.527 | 2026-01-20T15:19:41.963 |
| fkie_cve-2025-68505 | Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Acce… | 2025-12-24T13:16:20.400 | 2026-01-20T15:19:41.797 |
| fkie_cve-2025-68504 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-29T22:15:43.163 | 2026-01-20T15:19:41.660 |
| fkie_cve-2025-68503 | Missing Authorization vulnerability in Crocoblock JetBlog allows Exploiting Incorrectly Configured … | 2025-12-29T22:15:43.020 | 2026-01-20T15:19:41.560 |
| fkie_cve-2025-68502 | Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup allows Exploi… | 2025-12-29T22:15:42.877 | 2026-01-20T15:19:41.400 |
| fkie_cve-2025-68500 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Prime Slider – Addons For Elementor bd… | 2025-12-24T13:16:20.283 | 2026-01-20T15:19:41.203 |
| fkie_cve-2025-68499 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T00:15:52.583 | 2026-01-20T15:19:41.100 |
| fkie_cve-2025-68498 | Missing Authorization vulnerability in Crocoblock JetTabs allows Exploiting Incorrectly Configured … | 2025-12-30T00:15:52.440 | 2026-01-20T15:19:40.910 |
| fkie_cve-2025-68497 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-24T13:16:20.160 | 2026-01-20T15:19:40.717 |
| fkie_cve-2025-68496 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-24T13:16:20.043 | 2026-01-20T15:19:40.503 |
| fkie_cve-2025-68494 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 … | 2025-12-24T13:16:19.927 | 2026-01-20T15:19:40.123 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hw3r-j5mp-83h8 |
4.3 (3.1)
|
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-hqrr-4x5g-r96q |
7.2 (3.1)
|
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g9jr-64x4-g2h8 |
5.3 (3.1)
|
Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploitin… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g56q-p85p-h6p8 |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in averta Shortcodes and extra feat… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g3r9-25f9-622c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-fmr9-f844-7m23 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cro… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-98gq-3jvx-3x4w |
4.3 (3.1)
|
Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allo… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-83m4-cw88-f2rj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-83gv-v2x5-x6g3 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7wq3-fgh6-wjpx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7pfq-v66h-xmh2 |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjad… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7jc9-v63q-hpv4 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-6wwx-qhx3-qjmx |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in hogash Kallyas kallyas.This issue affects Kallya… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-6v28-vr6p-rcfw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-6m7f-qcxm-vrcp |
8.2 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-68cp-78j8-c56f |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-5925-5v57-58hq |
4.3 (3.1)
|
Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-52vv-26j5-647x |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-bookin… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-46rg-3ch6-xmgj |
8.8 (3.1)
|
Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Inc… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-3vcx-wp2w-x68x |
6.5 (3.1)
|
Missing Authorization vulnerability in Yandex Metrika Yandex.Metrica wp-yandex-metrika allows Explo… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-3mg5-4949-5h2w |
8.8 (3.1)
|
Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite a… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-3g27-fg6w-fm64 |
5.3 (3.1)
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in seve… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-xx8r-j779-rrrw |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:38Z | 2026-01-20T15:32:03Z |
| ghsa-x4jh-8v4q-hpv4 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-w3h5-chmf-jr89 |
5.3 (3.1)
|
Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorre… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-v96x-3j7g-w536 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-v5j6-5fx7-x2hp |
5.4 (3.1)
|
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-del… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-p6gq-crmg-ph7q |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in yuvalo … | 2025-12-09T18:30:38Z | 2026-01-20T15:32:03Z |
| ghsa-p5xf-g5x5-mr6q |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-mfr5-v73v-62qr |
5.3 (3.1)
|
Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allow… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-134 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.710356Z |
| pysec-2021-133 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.660066Z |
| pysec-2021-132 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.616674Z |
| pysec-2021-131 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.569635Z |
| pysec-2020-238 |
|
AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interp… | matrix-synapse | 2020-10-19T17:15:00Z | 2021-08-27T03:22:06.522203Z |
| pysec-2020-237 |
|
Matrix Synapse before 1.20.0 erroneously permits non-standard NaN, Infinity, and -Infinit… | matrix-synapse | 2020-11-24T03:15:00Z | 2021-08-27T03:22:06.477416Z |
| pysec-2020-236 |
|
Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a refere… | matrix-synapse | 2020-12-09T19:15:00Z | 2021-08-27T03:22:06.434071Z |
| pysec-2019-187 |
|
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is … | matrix-synapse | 2019-03-21T16:01:00Z | 2021-08-27T03:22:06.392030Z |
| pysec-2019-186 |
|
Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events… | matrix-synapse | 2019-11-08T00:15:00Z | 2021-08-27T03:22:06.354909Z |
| pysec-2019-185 |
|
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random… | matrix-synapse | 2019-05-09T18:29:00Z | 2021-08-27T03:22:06.320363Z |
| pysec-2020-235 |
|
python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues. | markdown2 | 2020-01-15T21:15:00Z | 2021-08-27T03:22:06.220553Z |
| pysec-2014-84 |
|
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, wh… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.108554Z |
| pysec-2014-83 |
|
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons… | logilab-common | 2014-03-11T19:37:00Z | 2021-08-27T03:22:06.075755Z |
| pysec-2019-184 |
|
Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML Ex… | ladon | 2019-07-18T17:15:00Z | 2021-08-27T03:22:05.932908Z |
| pysec-2019-183 |
|
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. | koji | 2019-10-09T22:15:00Z | 2021-08-27T03:22:05.900614Z |
| pysec-2018-86 |
|
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability … | koji | 2018-04-04T20:29:00Z | 2021-08-27T03:22:05.857986Z |
| pysec-2019-182 |
|
Python keyring has insecure permissions on new databases allowing world-readable files to… | keyring | 2019-11-25T13:15:00Z | 2021-08-27T03:22:05.663844Z |
| pysec-2019-181 |
|
Python keyring lib before 0.10 created keyring files with world-readable permissions. | keyring | 2019-10-28T17:15:00Z | 2021-08-27T03:22:05.629168Z |
| pysec-2018-85 |
|
python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a l… | kdcproxy | 2018-10-30T18:29:00Z | 2021-08-27T03:22:05.569463Z |
| pysec-2021-130 |
|
JupyterLab is a user interface for Project Jupyter which will eventually replace the clas… | jupyterlab | 2021-08-09T21:15:00Z | 2021-08-27T03:22:05.377903Z |
| pysec-2020-234 |
|
Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously cra… | jupyter-server | 2020-11-24T21:15:00Z | 2021-08-27T03:22:05.136094Z |
| pysec-2018-84 |
|
JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juni… | jsnapy | 2018-04-11T19:29:00Z | 2021-08-27T03:22:05.101975Z |
| pysec-2014-82 |
|
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, w… | jinja2 | 2014-05-19T14:55:00Z | 2021-08-27T03:22:05.027573Z |
| pysec-2019-180 |
|
A code injection issue was discovered in ipycache through 2016-05-31. | ipycache | 2019-03-21T21:29:00Z | 2021-08-27T03:22:04.582276Z |
| pysec-2017-87 |
|
A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.… | hpack | 2017-01-10T15:59:00Z | 2021-08-27T03:22:04.412157Z |
| pysec-2020-233 |
|
In freewvs before 0.1.1, a directory structure of more than 1000 nested directories can i… | freewvs | 2020-07-14T22:15:00Z | 2021-08-27T03:22:04.227798Z |
| pysec-2020-232 |
|
In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, … | freewvs | 2020-07-14T20:15:00Z | 2021-08-27T03:22:04.199703Z |
| pysec-2019-179 |
|
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact … | flask | 2019-07-17T14:15:00Z | 2021-08-27T03:22:03.986184Z |
| pysec-2016-25 |
|
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect | flask-oidc | 2016-10-07T18:59:00Z | 2021-08-27T03:22:03.924557Z |
| pysec-2012-14 |
|
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote at… | feedparser | 2012-05-21T22:55:00Z | 2021-08-27T03:22:03.863933Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3663 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.232016Z |
| gsd-2024-3669 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212978Z |
| gsd-2024-3677 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212296Z |
| gsd-2024-3678 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to… | 2024-04-12T05:02:29.184693Z |
| gsd-2024-3666 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.180854Z |
| gsd-2024-3672 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2024-04-12T05:02:29.176394Z |
| gsd-2024-3657 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.175242Z |
| gsd-2024-3675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.169103Z |
| gsd-2024-3665 | The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Si… | 2024-04-12T05:02:29.157248Z |
| gsd-2024-3658 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.149313Z |
| gsd-2024-3660 | A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows a… | 2024-04-12T05:02:29.135418Z |
| gsd-2024-3667 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.125163Z |
| gsd-2024-3659 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.110633Z |
| gsd-2024-3662 | The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized … | 2024-04-12T05:02:29.094064Z |
| gsd-2024-28890 | Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vu… | 2024-04-12T05:02:27.433930Z |
| gsd-2024-31857 | Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnera… | 2024-04-12T05:02:24.119700Z |
| gsd-2024-31077 | Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability … | 2024-04-12T05:02:23.838101Z |
| gsd-2024-32130 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.236360Z |
| gsd-2024-32117 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.161416Z |
| gsd-2024-32121 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.160945Z |
| gsd-2024-32122 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.159280Z |
| gsd-2024-32131 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.157365Z |
| gsd-2024-32138 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.155239Z |
| gsd-2024-32143 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.152686Z |
| gsd-2024-32145 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.152492Z |
| gsd-2024-32113 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.152051Z |
| gsd-2024-32146 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.151856Z |
| gsd-2024-32119 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.151656Z |
| gsd-2024-32141 | Cross-Site Request Forgery (CSRF) vulnerability in Libsyn Libsyn Publisher Hub.This issue… | 2024-04-12T05:02:22.149750Z |
| gsd-2024-32132 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.148901Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-11646 | Malicious code in next-vit (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11643 | Malicious code in mvdream-threestudio (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11642 | Malicious code in mvdream (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11641 | Malicious code in music-source-separation (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11640 | Malicious code in mumuplayer12 (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11639 | Malicious code in mumupatcher (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11638 | Malicious code in monolit (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11637 | Malicious code in monoliht (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11636 | Malicious code in monlith (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11635 | Malicious code in mnolith (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11634 | Malicious code in midi-melody-extractions (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11633 | Malicious code in midi-melody-extraction (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11632 | Malicious code in midi-melady-extraction (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11631 | Malicious code in matplotlibp (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11630 | Malicious code in matlibplot (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11629 | Malicious code in malware-test-pack-new (PyPI) | 2024-08-23T22:55:41Z | 2025-12-11T09:27:53Z |
| mal-2024-11628 | Malicious code in magic3d (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11626 | Malicious code in lowui (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11624 | Malicious code in layoutspecs (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-11623 | Malicious code in latentnerf (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11622 | Malicious code in larpexodus (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11621 | Malicious code in kersa (PyPI) | 2024-09-20T11:29:31Z | 2025-12-11T09:27:53Z |
| mal-2024-11620 | Malicious code in kekiktaban (PyPI) | 2024-10-27T10:04:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11619 | Malicious code in j5gnpuiwerbngpiutbgn0iutb0pfwef (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11618 | Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwfef (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11617 | Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwef (PyPI) | 2024-10-16T21:12:32Z | 2025-12-11T09:27:53Z |
| mal-2024-11616 | Malicious code in instructnerf2nerf (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11614 | Malicious code in imagedreamfusion (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11613 | Malicious code in imagedream (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| mal-2024-11612 | Malicious code in image-dream (PyPI) | 2024-11-06T18:46:10Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-1544 | Kubernetes: Schwachstelle ermöglicht Manipulation von Dateien | 2022-01-06T23:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2023-1488 | Kubernetes: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-06-15T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1765 | Axis Camera Station und Device Manager: Mehrere Schwachstellen | 2025-08-11T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1762 | Axis Axis OS: Mehrere Schwachstellen | 2025-08-11T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1760 | ESRI ArcGIS Enterprise Sites: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-08-11T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1759 | GIMP: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-11T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1743 | Docker Desktop: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-06T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1663 | Mattermost Plugins: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmechanismen | 2025-07-28T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1113 | VMware Produkte: Mehrere Schwachstellen | 2025-05-20T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-0744 | Microsoft Windows: Mehrere Schwachstellen | 2025-04-08T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-0279 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2024-3547 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-25T23:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2024-2041 | Kemp LoadMaster: Schwachstelle ermöglicht Ausführen von beliebigen Kommandos | 2024-09-03T22:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2023-0719 | dnsmasq: Schwachstelle ermöglicht Denial of Service | 2019-12-05T23:00:00.000+00:00 | 2025-08-11T22:00:00.000+00:00 |
| wid-sec-w-2025-1752 | Liferay Portal und DXP: Mehrere Schwachstellen | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1750 | 7-Zip: Schwachstelle ermöglicht Manipulation von Dateien | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1749 | win.rar WinRAR: Schwachstelle ermöglicht Codeausführung | 2025-08-10T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1746 | Microsoft 365 Copilot: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-08-07T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1745 | Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-08-07T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1628 | Mitel MiCollab (Suite Applications Services): Schwachstelle ermöglicht SQL-Injection | 2025-07-23T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2024-3562 | Zabbix: Mehrere Schwachstellen | 2024-11-27T23:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2024-3556 | Zabbix: Mehrere Schwachstellen | 2024-11-26T23:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2024-3496 | Apache Kafka: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-11-18T23:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2022-1653 | Trustwave ModSecurity: Mehrere Schwachstellen | 2022-10-09T22:00:00.000+00:00 | 2025-08-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1747 | HCL DominoIQ (llama.cpp): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-07T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1730 | Hashicorp Vault: Schwachstelle ermöglicht Umgehen der MFA | 2025-08-05T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1726 | Dell Computer: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-0889 | Ghostscript: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-27T22:00:00.000+00:00 | 2025-08-07T22:00:00.000+00:00 |
| wid-sec-w-2025-1742 | Microsoft Exchange Server: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| wid-sec-w-2025-1737 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-08-06T22:00:00.000+00:00 | 2025-08-06T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:6210 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.4 security update | 2024-09-03T10:05:02+00:00 | 2026-01-21T23:24:28+00:00 |
| rhsa-2024:6195 | Red Hat Security Advisory: skopeo security update | 2024-09-03T09:23:32+00:00 | 2026-01-21T23:24:27+00:00 |
| rhsa-2024:6189 | Red Hat Security Advisory: buildah security update | 2024-09-03T09:11:32+00:00 | 2026-01-21T23:24:24+00:00 |
| rhsa-2024:6188 | Red Hat Security Advisory: runc security update | 2024-09-03T18:57:44+00:00 | 2026-01-21T23:24:22+00:00 |
| rhsa-2024:6187 | Red Hat Security Advisory: gvisor-tap-vsock security update | 2024-09-03T08:16:59+00:00 | 2026-01-21T23:24:21+00:00 |
| rhsa-2024:6186 | Red Hat Security Advisory: containernetworking-plugins security update | 2024-09-03T19:57:55+00:00 | 2026-01-21T23:24:20+00:00 |
| rhsa-2024:6148 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:32:16+00:00 | 2026-01-21T23:24:19+00:00 |
| rhsa-2024:6147 | Red Hat Security Advisory: nodejs:18 security update | 2024-09-03T02:29:11+00:00 | 2026-01-21T23:24:16+00:00 |
| rhsa-2024:5814 | Red Hat Security Advisory: nodejs:20 security update | 2024-08-26T08:36:35+00:00 | 2026-01-21T23:24:11+00:00 |
| rhsa-2024:5810 | Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update | 2024-08-29T03:20:28+00:00 | 2026-01-21T23:24:10+00:00 |
| rhsa-2024:5442 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update | 2024-08-22T12:02:45+00:00 | 2026-01-21T23:24:04+00:00 |
| rhsa-2024:5439 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 bug fix and security update | 2024-08-22T11:42:04+00:00 | 2026-01-21T23:24:03+00:00 |
| rhsa-2024:5438 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update | 2024-08-21T03:36:58+00:00 | 2026-01-21T23:24:02+00:00 |
| rhsa-2024:5436 | Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update | 2024-08-22T12:00:30+00:00 | 2026-01-21T23:24:02+00:00 |
| rhsa-2024:5432 | Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update | 2024-08-21T21:42:52+00:00 | 2026-01-21T23:23:56+00:00 |
| rhsa-2024:5314 | Red Hat Security Advisory: OpenShift Virtualization 4.13.10 Images security update | 2024-08-13T15:13:35+00:00 | 2026-01-21T23:23:55+00:00 |
| rhsa-2024:5202 | Red Hat Security Advisory: OpenShift Container Platform 4.12.63 packages and security update | 2024-08-19T03:55:38+00:00 | 2026-01-21T23:23:52+00:00 |
| rhsa-2024:5147 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:37+00:00 | 2026-01-21T23:23:46+00:00 |
| rhsa-2024:5145 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:53+00:00 | 2026-01-21T23:23:45+00:00 |
| rhsa-2024:5144 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:23:05+00:00 | 2026-01-21T23:23:44+00:00 |
| rhsa-2024:5143 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update | 2024-08-08T17:22:54+00:00 | 2026-01-21T23:23:43+00:00 |
| rhsa-2024:5077 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-08-07T10:58:53+00:00 | 2026-01-21T23:23:41+00:00 |
| rhsa-2024:5075 | Red Hat Security Advisory: golang security update | 2024-08-07T10:39:03+00:00 | 2026-01-21T23:23:41+00:00 |
| rhsa-2024:4955 | Red Hat Security Advisory: OpenShift Container Platform 4.15.25 bug fix and security update | 2024-08-07T01:16:26+00:00 | 2026-01-21T23:23:33+00:00 |
| rhsa-2024:4893 | Red Hat Security Advisory: rhc-worker-script security update | 2024-07-29T00:19:42+00:00 | 2026-01-21T23:23:33+00:00 |
| rhsa-2024:4884 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.1 for Spring Boot security update. | 2024-07-25T19:26:07+00:00 | 2026-01-21T23:23:32+00:00 |
| rhsa-2024:4873 | Red Hat Security Advisory: Apicurio Registry (container images) release and security update [ 2.6.1 GA ] | 2024-07-25T15:04:49+00:00 | 2026-01-21T23:23:31+00:00 |
| rhsa-2024:4836 | Red Hat Security Advisory: RHACS 4.5 enhancement and security update | 2024-07-24T16:18:41+00:00 | 2026-01-21T23:23:24+00:00 |
| rhsa-2024:4762 | Red Hat Security Advisory: runc security update | 2024-07-23T16:39:19+00:00 | 2026-01-21T23:23:23+00:00 |
| rhsa-2024:4761 | Red Hat Security Advisory: containernetworking-plugins security update | 2024-07-23T16:29:34+00:00 | 2026-01-21T23:23:22+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-160-01 | Mitsubishi Electric Air Conditioning Systems | 2022-06-09T00:00:00.000000Z | 2022-06-09T00:00:00.000000Z |
| icsa-22-154-01 | Vulnerabilities Affecting Dominion Voting Systems ImageCast X | 2022-06-03T00:00:00.000000Z | 2022-06-03T00:00:00.000000Z |
| icsa-22-153-01 | Carrier LenelS2 HID Mercury access panels | 2022-06-02T00:00:00.000000Z | 2022-06-02T00:00:00.000000Z |
| icsma-22-151-02 | BD Synapsys | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsma-22-151-01 | BD Pyxis | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-151-01 | Fuji Electric Alpha7 PC Loader | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-139-01 | Mitsubishi Electric MELSEC iQ-F Series | 2022-05-19T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-090-04 | Mitsubishi Electric FA Products | 2022-03-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-146-02 | Horner Automation Cscape Csfont | 2022-05-26T00:00:00.000000Z | 2022-05-26T00:00:00.000000Z |
| icsa-22-146-01 | Keysight N6854A Geolocation server and N6841A RF Sensor software | 2022-05-26T00:00:00.000000Z | 2022-05-26T00:00:00.000000Z |
| icsa-22-144-02 | Matrikon OPC Server | 2022-05-24T00:00:00.000000Z | 2022-05-24T00:00:00.000000Z |
| icsa-22-144-01 | Rockwell Automation Logix Controllers | 2022-05-24T00:00:00.000000Z | 2022-05-24T00:00:00.000000Z |
| icsa-22-137-01 | Circutor COMPACT DC-S BASIC | 2022-05-17T00:00:00.000000Z | 2022-05-17T00:00:00.000000Z |
| icsa-22-132-04 | Cambium Networks cnMaestro | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-03 | Inkscape in Industrial Products | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-02 | Mitsubishi Electric MELSOFT iQ AppPortal | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-01 | Delta Electronics CNCSoft | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-102-04 | Mitsubishi Electric GT25-WLAN | 2022-04-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-21-194-12 | Siemens VxWorks-based Industrial Products (Update C) | 2021-07-13T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-19-253-03 | ICSA-19-253-03_Siemens Industrial Products (Update P) | 2019-09-10T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-130-06 | Mitsubishi Electric MELSOFT GT OPC UA | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-05 | AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-04 | Eaton Intelligent Power Manager | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-03 | Eaton Intelligent Power Manager Infrastructure | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-02 | Eaton Intelligent Power Protector | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-01 | Adminer in Industrial Products | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-125-01 | Johnson Controls Metasys | 2022-05-05T00:00:00.000000Z | 2022-05-05T00:00:00.000000Z |
| icsa-22-123-01 | Yokogawa CENTUM and ProSafe-RS | 2022-05-03T00:00:00.000000Z | 2022-05-03T00:00:00.000000Z |
| icsa-22-118-01 | Johnson Controls Metasys | 2022-04-28T00:00:00.000000Z | 2022-04-28T00:00:00.000000Z |
| icsa-22-081-01 | Delta Electronics DIAEnergie (Update C) | 2022-03-22T00:00:00.000000Z | 2022-04-28T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180718-uccx | Multiple Vulnerabilities in Cisco Unified Contact Center Express | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-fo | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-dos | Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-cx | Cisco SD-WAN Solution Configuration and Management Database Remote Code Execution Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-coinj | Cisco SD-WAN Solution Command Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-cmdnjct | Cisco SD-WAN Solution CLI Command Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-cmdinj | Cisco SD-WAN Solution VPN Subsystem Command Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sdwan-ci | Cisco SD-WAN Solution Zero Touch Provisioning Command Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sd-wan-code-ex | Cisco SD-WAN Solution Remote Code Execution Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sd-wan-cmd-inject | Cisco SD-WAN Solution Command Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-sd-wan-bo | Cisco SD-WAN Solution Local Buffer Overflow Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-pspb-unauth-access | Cisco Policy Suite Policy Builder Unauthenticated Access Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-ps-osgi-unauth-access | Cisco Policy Suite OSGi Interface Unauthenticated Access Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-policy-unauth-access | Cisco Policy Suite Policy Builder Database Unauthenticated Access Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-policy-suite-data | Cisco Policy Suite World-Readable Sensitive Data Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-policy-suite-change | Cisco Policy Suite Read-Only User Effect Change Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-policy-cm-default-psswrd | Cisco Policy Suite Cluster Manager Default Password Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-finesse | Multiple Vulnerabilities in Cisco Finesse | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180718-csp2100-injection | Cisco Cloud Services Platform 2100 Web Upload Function Code Injection Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-20180718-nexus-9000-dos | Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode DHCP Version 6 Denial of Service Vulnerability | 2018-07-18T16:00:00+00:00 | 2018-07-18T16:00:00+00:00 |
| cisco-sa-20180620-fxnxos-ace | Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability | 2018-06-20T16:00:00+00:00 | 2018-07-12T18:43:00+00:00 |
| cisco-sa-20180711-phone-webui-inject | Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Web UI Command Injection Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-12T13:57:00+00:00 |
| cisco-sa-20180711-wsa-xss | Cisco Web Security Appliance Cross-Site Scripting Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-staros-dos | Cisco StarOS IPv4 Fragmentation Denial of Service Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-firesight-url-bypass | Cisco FireSIGHT System Software URL-Based Access Control Policy Bypass Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-firesight-file-bypass | Cisco FireSIGHT System Software File Policy Bypass Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-firepwr-ssl-dos | Cisco Firepower System Software SSL Denial of Service Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-firepower-dos | Cisco Firepower System Software Detection Engine Denial of Service Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180711-dnac-id | Cisco Digital Network Architecture Center Credential Logging Information Disclosure Vulnerability | 2018-07-11T16:00:00+00:00 | 2018-07-11T16:00:00+00:00 |
| cisco-sa-20180620-n3k-n9k-clisnmp | Cisco Nexus 3000 and 9000 Series CLI and Simple Network Management Protocol Polling Denial of Service Vulnerability | 2018-06-20T16:00:00+00:00 | 2018-07-10T20:19:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38553 | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 2025-08-02T00:00:00.000Z | 2025-09-04T02:28:56.000Z |
| msrc_cve-2025-54409 | AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS) | 2025-08-02T00:00:00.000Z | 2025-09-04T02:25:53.000Z |
| msrc_cve-2019-14202 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:25:42.000Z |
| msrc_cve-2025-37744 | wifi: ath12k: fix memory leak in ath12k_pci_remove() | 2025-05-02T00:00:00.000Z | 2025-09-04T02:23:35.000Z |
| msrc_cve-2025-38070 | ASoC: sma1307: Add NULL check in sma1307_setting_loaded() | 2025-06-02T00:00:00.000Z | 2025-09-04T02:22:58.000Z |
| msrc_cve-2025-8176 | LibTIFF tiffmedian.c get_histogram use after free | 2025-07-02T00:00:00.000Z | 2025-09-04T02:22:03.000Z |
| msrc_cve-2025-37976 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2025-05-02T00:00:00.000Z | 2025-09-04T02:20:05.000Z |
| msrc_cve-2019-14195 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:20:01.000Z |
| msrc_cve-2022-48646 | sfc/siena: fix null pointer dereference in efx_hard_start_xmit | 2024-04-02T07:00:00.000Z | 2025-09-04T02:19:35.000Z |
| msrc_cve-2025-8177 | LibTIFF thumbnail.c setrow buffer overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:16:00.000Z |
| msrc_cve-2024-26945 | crypto: iaa - Fix nr_cpus < nr_iaa case | 2024-05-02T07:00:00.000Z | 2025-09-04T02:15:11.000Z |
| msrc_cve-2025-38520 | drm/amdkfd: Don't call mmput from MMU notifier callback | 2025-08-02T00:00:00.000Z | 2025-09-04T02:14:26.000Z |
| msrc_cve-2025-3416 | Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` | 2025-04-02T00:00:00.000Z | 2025-09-04T02:13:49.000Z |
| msrc_cve-2024-53147 | exfat: fix out-of-bounds access of directory entries | 2024-12-02T00:00:00.000Z | 2025-09-04T02:13:09.000Z |
| msrc_cve-2025-38501 | ksmbd: limit repeated connections from clients with the same IP | 2025-08-02T00:00:00.000Z | 2025-09-04T02:11:25.000Z |
| msrc_cve-2022-48666 | scsi: core: Fix a use-after-free | 2024-04-02T07:00:00.000Z | 2025-09-04T02:11:15.000Z |
| msrc_cve-2025-21817 | block: mark GFP_NOIO around sysfs ->store() | 2025-02-02T00:00:00.000Z | 2025-09-04T02:10:59.000Z |
| msrc_cve-2025-8197 | Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465 | 2025-07-02T00:00:00.000Z | 2025-09-04T02:10:57.000Z |
| msrc_cve-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 2023-08-01T00:00:00.000Z | 2025-09-04T02:10:32.000Z |
| msrc_cve-2024-26699 | drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr | 2024-04-02T07:00:00.000Z | 2025-09-04T02:09:33.000Z |
| msrc_cve-2025-38533 | net: libwx: fix the using of Rx buffer DMA | 2025-08-02T00:00:00.000Z | 2025-09-04T02:07:07.000Z |
| msrc_cve-2025-38330 | firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) | 2025-07-02T00:00:00.000Z | 2025-09-04T02:05:31.000Z |
| msrc_cve-2024-58096 | wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode | 2025-04-02T00:00:00.000Z | 2025-09-04T02:05:00.000Z |
| msrc_cve-2025-8224 | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | 2025-07-02T00:00:00.000Z | 2025-09-04T02:04:38.000Z |
| msrc_cve-2024-26767 | drm/amd/display: fixed integer types and null check locations | 2024-04-02T07:00:00.000Z | 2025-09-04T02:03:42.000Z |
| msrc_cve-2025-38528 | bpf: Reject %p% format string in bprintf-like helpers | 2025-08-02T00:00:00.000Z | 2025-09-04T02:02:23.000Z |
| msrc_cve-2024-26691 | KVM: arm64: Fix circular locking dependency | 2024-04-02T07:00:00.000Z | 2025-09-04T01:59:14.000Z |
| msrc_cve-2025-38537 | net: phy: Don't register LEDs for genphy | 2025-08-02T00:00:00.000Z | 2025-09-04T01:58:39.000Z |
| msrc_cve-2025-8225 | GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | 2025-07-02T00:00:00.000Z | 2025-09-04T01:57:24.000Z |
| msrc_cve-2025-7069 | HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T01:57:23.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201602-0118 | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows r… | 2025-11-18T15:22:24.777000Z |
| var-201803-1369 | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) … | 2025-11-18T15:22:22.708000Z |
| var-201806-1026 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could… | 2025-11-18T15:22:22.208000Z |
| var-201904-1024 | On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an a… | 2025-11-18T15:22:21.286000Z |
| var-201912-0828 | Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to … | 2025-11-18T15:22:20.385000Z |
| var-202003-0573 | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bo… | 2025-11-18T15:22:16.279000Z |
| var-202003-1707 | Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 conta… | 2025-11-18T15:22:16.168000Z |
| var-202105-1346 | The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra… | 2025-11-18T15:22:14.774000Z |
| var-202201-2026 | NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR … | 2025-11-18T15:22:13.577000Z |
| var-202203-1742 | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerab… | 2025-11-18T15:22:13.270000Z |
| var-202303-1259 | A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a de… | 2025-11-18T15:22:11.517000Z |
| var-202312-0648 | TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerabilit… | 2025-11-18T15:22:09.744000Z |
| var-202407-2669 | Apache Traffic Server accepts characters that are not allowed for HTTP field names and fo… | 2025-11-18T15:22:07.359000Z |
| var-202407-2494 | Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. … | 2025-11-18T15:22:07.334000Z |
| var-202409-0736 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNe… | 2025-11-18T15:22:06.894000Z |
| var-202409-0737 | Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNe… | 2025-11-18T15:22:06.877000Z |
| var-202508-2839 | Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enable… | 2025-11-18T15:21:28.333000Z |
| var-202510-0110 | A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown functio… | 2025-11-18T15:21:27.834000Z |
| var-201008-0340 | Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecogni… | 2025-11-18T15:20:06.202000Z |
| var-201403-0466 | Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Secur… | 2025-11-18T15:19:57.762000Z |
| var-201611-0025 | A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS… | 2025-11-18T15:19:55.866000Z |
| var-201704-0303 | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and… | 2025-11-18T15:19:55.176000Z |
| var-201703-0363 | fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers … | 2025-11-18T15:19:55.125000Z |
| var-201905-0764 | A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4… | 2025-11-18T15:19:48.317000Z |
| var-201502-0201 | The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows… | 2025-11-18T15:19:47.217000Z |
| var-202003-1435 | The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated … | 2025-11-18T15:19:46.068000Z |
| var-202008-0007 | NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certifica… | 2025-11-18T15:19:45.447000Z |
| var-202105-1126 | An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A st… | 2025-11-18T15:19:44.386000Z |
| var-202505-3022 | Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.1… | 2025-11-18T15:19:28.517000Z |
| var-202507-1068 | SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled … | 2025-11-18T15:19:27.920000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000035 | Multiple JustSystems products vulnerable to buffer overflow | 2012-04-24T13:37+09:00 | 2012-05-09T19:49+09:00 |
| jvndb-2012-000005 | osCommerce vulnerable to cross-site scripting | 2012-01-20T16:15+09:00 | 2012-04-26T16:58+09:00 |
| jvndb-2012-000037 | sp mode mail issue in the verification of SSL certificates | 2012-04-26T14:21+09:00 | 2012-04-26T14:21+09:00 |
| jvndb-2012-000036 | OSQA vulnerable to cross-site scripting | 2012-04-26T14:15+09:00 | 2012-04-26T14:15+09:00 |
| jvndb-2012-000034 | Multiple JustSystems products may insecurely load dynamic libraries | 2012-04-24T13:36+09:00 | 2012-04-24T13:36+09:00 |
| jvndb-2012-000033 | TwitRocker2 (Android version) vulnerable in the WebView class | 2012-04-20T12:21+09:00 | 2012-04-20T12:21+09:00 |
| jvndb-2012-000031 | ActiveScriptRuby vulnerable to arbitrary Ruby script execution | 2012-04-13T14:08+09:00 | 2012-04-13T14:08+09:00 |
| jvndb-2012-000032 | Dokodemo Rikunabi 2013 vulnerable to cross-site scripting | 2012-04-13T14:03+09:00 | 2012-04-13T14:03+09:00 |
| jvndb-2012-001932 | Vulnerability in Fujitsu Interstage List Works Where Permissions Cannot Be Denied | 2012-04-11T11:45+09:00 | 2012-04-11T11:45+09:00 |
| jvndb-2012-000030 | SENCHA SNS vulnerable to session fixation | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000029 | SENCHA SNS vulnerable to cross-site request forgery | 2012-04-05T16:41+09:00 | 2012-04-05T16:41+09:00 |
| jvndb-2012-000028 | TOSHIBA TEC e-Studio series vulnerable to authentication bypass | 2012-04-05T16:40+09:00 | 2012-04-05T16:40+09:00 |
| jvndb-2012-000027 | Janetter vulnerable to cross-site request forgery | 2012-03-19T14:31+09:00 | 2012-03-19T14:31+09:00 |
| jvndb-2012-000026 | Janetter vulnerable to information disclosure | 2012-03-19T14:27+09:00 | 2012-03-19T14:27+09:00 |
| jvndb-2012-001793 | JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability | 2012-03-19T12:04+09:00 | 2012-03-19T12:04+09:00 |
| jvndb-2012-000025 | Redmine vulnerable to cross-site scripting | 2012-03-13T13:39+09:00 | 2012-03-13T13:39+09:00 |
| jvndb-2012-000024 | twicca fails to restrict access permissions | 2012-03-13T13:36+09:00 | 2012-03-13T13:36+09:00 |
| jvndb-2012-000023 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:35+09:00 | 2012-03-09T14:35+09:00 |
| jvndb-2012-000022 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:28+09:00 | 2012-03-09T14:28+09:00 |
| jvndb-2012-000021 | SquirrelMail plugin Autocomplete vulnerable to cross-site scripting | 2012-03-09T14:18+09:00 | 2012-03-09T14:18+09:00 |
| jvndb-2012-000020 | ES File Explorer fails to restrict access permissions | 2012-03-05T15:50+09:00 | 2012-03-05T15:50+09:00 |
| jvndb-2012-000019 | Kingsoft Internet Security 2011 vulnerable to denial-of-service | 2012-03-01T14:03+09:00 | 2012-03-01T14:03+09:00 |
| jvndb-2012-000014 | Multiple COOKPAD applications for Android vulnerable in WebView class | 2012-02-22T14:44+09:00 | 2012-02-29T10:56+09:00 |
| jvndb-2012-000018 | Movable Type vulnerable to session hijacking | 2012-02-23T14:28+09:00 | 2012-02-23T14:28+09:00 |
| jvndb-2012-000017 | Movable Type vulnerable to OS command injection | 2012-02-23T14:21+09:00 | 2012-02-23T14:21+09:00 |
| jvndb-2012-000016 | Movable Type vulnerable to cross-site scripting | 2012-02-23T14:20+09:00 | 2012-02-23T14:20+09:00 |
| jvndb-2012-000015 | Movable Type vulnerable to cross-site request forgery | 2012-02-23T14:19+09:00 | 2012-02-23T14:19+09:00 |
| jvndb-2008-001576 | Fujitsu Interstage Application Server Interstage Management Console Arbitrary File Read/Delete Vulnerability | 2008-09-03T12:34+09:00 | 2012-02-15T18:13+09:00 |
| jvndb-2012-000013 | cforms II vulnerable to cross-site scripting | 2012-02-15T17:14+09:00 | 2012-02-15T17:14+09:00 |
| jvndb-2012-000011 | ALFTP may insecurely load executable files | 2012-02-13T15:58+09:00 | 2012-02-13T15:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01660-1 | Security update for MozillaThunderbird | 2025-05-22T16:01:46Z | 2025-05-22T16:01:46Z |
| suse-su-2025:01658-1 | Security update for open-vm-tools | 2025-05-22T13:34:46Z | 2025-05-22T13:34:46Z |
| suse-su-2025:20370-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20369-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20368-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20342-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20341-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20340-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:20339-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-05-22T13:03:44Z | 2025-05-22T13:03:44Z |
| suse-su-2025:01656-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-05-22T12:33:53Z | 2025-05-22T12:33:53Z |
| suse-su-2025:01655-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) | 2025-05-22T12:33:44Z | 2025-05-22T12:33:44Z |
| suse-su-2025:01654-1 | Security update for postgresql13 | 2025-05-22T10:52:10Z | 2025-05-22T10:52:10Z |
| suse-su-2025:01653-1 | Security update for govulncheck-vulndb | 2025-05-22T10:49:48Z | 2025-05-22T10:49:48Z |
| suse-su-2025:01652-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6) | 2025-05-22T09:04:21Z | 2025-05-22T09:04:21Z |
| suse-su-2025:01651-1 | Security update for ucode-intel | 2025-05-22T08:52:40Z | 2025-05-22T08:52:40Z |
| suse-su-2025:01650-1 | Security update for ucode-intel | 2025-05-22T08:51:44Z | 2025-05-22T08:51:44Z |
| suse-su-2025:01649-1 | Security update for python-tornado6 | 2025-05-22T07:44:54Z | 2025-05-22T07:44:54Z |
| suse-su-2025:20336-1 | Security update for ca-certificates-mozilla | 2025-05-21T15:40:23Z | 2025-05-21T15:40:23Z |
| suse-su-2025:20335-1 | Security update for runc | 2025-05-21T15:39:04Z | 2025-05-21T15:39:04Z |
| suse-su-2025:20334-1 | Security update for perl | 2025-05-21T15:37:32Z | 2025-05-21T15:37:32Z |
| suse-su-2025:01644-1 | Security update for postgresql17 | 2025-05-21T14:35:16Z | 2025-05-21T14:35:16Z |
| suse-su-2025:01640-1 | Security update for the Linux Kernel | 2025-05-21T11:52:08Z | 2025-05-21T11:52:08Z |
| suse-su-2025:01639-1 | Security update for libwebp | 2025-05-21T11:44:11Z | 2025-05-21T11:44:11Z |
| suse-su-2025:20333-1 | Security update for libxml2 | 2025-05-21T11:23:02Z | 2025-05-21T11:23:02Z |
| suse-su-2025:20353-1 | Security update for runc | 2025-05-21T11:11:43Z | 2025-05-21T11:11:43Z |
| suse-su-2025:20332-1 | Security update for glibc | 2025-05-21T11:04:20Z | 2025-05-21T11:04:20Z |
| suse-su-2025:01638-1 | Security update for openssh | 2025-05-21T10:48:36Z | 2025-05-21T10:48:36Z |
| suse-su-2025:01633-1 | Security update for the Linux Kernel | 2025-05-21T10:09:47Z | 2025-05-21T10:09:47Z |
| suse-su-2025:01631-1 | Security update for s390-tools | 2025-05-21T10:03:45Z | 2025-05-21T10:03:45Z |
| suse-su-2025:01627-1 | Security update for the Linux Kernel | 2025-05-21T10:02:17Z | 2025-05-21T10:02:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13710-1 | python310-cryptography-42.0.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13709-1 | nodejs-electron-27.3.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13708-1 | helm-3.14.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13707-1 | dnsmasq-2.90-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13706-1 | libhtp-devel-0.5.46-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13705-1 | qemu-8.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13704-1 | kernel-devel-longterm-6.6.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13703-1 | dav1d-1.4.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13702-1 | apache-commons-compress-1.26.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13701-1 | nginx-1.25.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13700-1 | indent-2.2.13-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13699-1 | apache2-mod_auth_openidc-2.4.15.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13698-1 | corepack21-21.6.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13697-1 | corepack20-20.11.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13696-1 | kernel-devel-6.7.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13695-1 | expat-2.6.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13694-1 | wpa_supplicant-2.10-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13693-1 | tomcat10-10.1.18-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13692-1 | tomcat-9.0.85-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13691-1 | python310-aiohttp-3.9.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13690-1 | libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13689-1 | docker-24.0.7_ce-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13688-1 | buildkit-0.12.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13687-1 | bind-9.18.24-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13686-1 | python310-FontTools-4.47.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13685-1 | hugin-2023.0.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13684-1 | python310-fastapi-0.109.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13683-1 | libIex-3_1-30-32bit-3.1.11-1.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13682-1 | python310-uamqp-1.6.8-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13681-1 | php-composer2-2.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24130 | Courier Management System /login.php文件SQL注入漏洞 | 2024-11-01 | 2025-10-17 |
| cnvd-2025-24129 | Courier Management System track-result.php文件SQL注入漏洞 | 2024-11-01 | 2025-10-17 |
| cnvd-2025-24128 | Courier Management System add-courier.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24127 | Computer Laboratory System文件上传漏洞 | 2025-09-18 | 2025-10-17 |
| cnvd-2025-24126 | Computer Laboratory System SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24125 | Client Details System index.php文件SQL注入漏洞 | 2025-06-27 | 2025-10-17 |
| cnvd-2025-24124 | Client Details System跨站脚本漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24123 | Client Details System update-profile.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-17 |
| cnvd-2025-24099 | Oracle Java SE存在未明漏洞（CNVD-2025-24099） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24098 | Oracle Java SE存在未明漏洞（CNVD-2025-24098） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24097 | Oracle Java SE存在未明漏洞（CNVD-2025-24097） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24096 | Oracle Java SE存在未明漏洞（CNVD-2025-24096） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24095 | Oracle Java SE存在未明漏洞（CNVD-2025-24095） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24094 | Oracle Java SE存在未明漏洞（CNVD-2025-24094） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24093 | Oracle Java SE存在未明漏洞（CNVD-2025-24093） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24092 | Oracle Java SE存在未明漏洞（CNVD-2025-24092） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24091 | Oracle Fusion Middleware存在未明漏洞（CNVD-2025-24091） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24090 | Oracle Fusion Middleware存在未明漏洞（CVE-2025-50064） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24089 | Oracle Fusion Middleware存在未明漏洞（CNVD-2025-24089） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24088 | Oracle Fusion Middleware存在未明漏洞（CNVD-2025-24088） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24087 | Oracle Database Server存在未明漏洞（CNVD-2025-24087） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24086 | Oracle Fusion Middleware存在未明漏洞（CNVD-2025-24086） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24085 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24085） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24084 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24084） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24083 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24083） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24082 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24082） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24081 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24081） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24080 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24080） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24079 | Oracle E-Business Suite存在未明漏洞（CNVD-2025-24079） | 2025-07-21 | 2025-10-17 |
| cnvd-2025-24078 | Oracle Database Server存在未明漏洞（CNVD-2025-24078） | 2025-07-21 | 2025-10-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-1008 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-12-08T00:00:00.000000 | 2023-12-08T00:00:00.000000 |
| certfr-2023-avi-1007 | Multiples vulnérabilités dans les produits IBM | 2023-12-08T00:00:00.000000 | 2023-12-08T00:00:00.000000 |
| certfr-2023-avi-1006 | Multiples vulnérabilités dans Microsoft Edge | 2023-12-08T00:00:00.000000 | 2023-12-08T00:00:00.000000 |
| certfr-2023-avi-1004 | Multiples vulnérabilités dans Nagios XI | 2023-12-07T00:00:00.000000 | 2023-12-07T00:00:00.000000 |
| certfr-2023-avi-1003 | Vulnérabilité dans WordPress | 2023-12-07T00:00:00.000000 | 2023-12-07T00:00:00.000000 |
| certfr-2023-avi-1002 | Vulnérabilité dans MISP | 2023-12-07T00:00:00.000000 | 2023-12-07T00:00:00.000000 |
| certfr-2023-avi-1001 | Vulnérabilité dans Atlassian Confluence | 2023-12-06T00:00:00.000000 | 2023-12-06T00:00:00.000000 |
| certfr-2023-avi-1000 | Multiples vulnérabilités dans Progress MOVEit Transfer | 2023-12-06T00:00:00.000000 | 2023-12-06T00:00:00.000000 |
| certfr-2023-avi-0999 | Vulnérabilité dans ElasticSearch pour Hadoop | 2023-12-06T00:00:00.000000 | 2023-12-06T00:00:00.000000 |
| certfr-2023-avi-0998 | Multiples vulnérabilités dans Google Chrome | 2023-12-06T00:00:00.000000 | 2023-12-06T00:00:00.000000 |
| certfr-2023-avi-0997 | Vulnérabilité dans SolarWinds Serv-U | 2023-12-06T00:00:00.000000 | 2023-12-06T00:00:00.000000 |
| certfr-2023-avi-0996 | Vulnérabilité dans TheGreenBow VPN Client | 2023-12-05T00:00:00.000000 | 2023-12-05T00:00:00.000000 |
| certfr-2023-avi-0994 | Multiples vulnérabilités dans SonicWall SMA | 2023-12-05T00:00:00.000000 | 2023-12-05T00:00:00.000000 |
| certfr-2023-avi-0993 | Multiples vulnérabilités dans Squid | 2023-12-04T00:00:00.000000 | 2023-12-04T00:00:00.000000 |
| certfr-2023-avi-0992 | Vulnérabilité dans SolarWinds Platform | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0991 | Multiples vulnérabilités dans GitLab | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0990 | Multiples vulnérabilités dans les produits IBM | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0989 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0988 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0987 | Multiples vulnérabilités dans les produits Apple | 2023-12-01T00:00:00.000000 | 2023-12-01T00:00:00.000000 |
| certfr-2023-avi-0986 | Multiples vulnérabilités dans Tenable Nessus Network Monitor | 2023-11-30T00:00:00.000000 | 2023-11-30T00:00:00.000000 |
| certfr-2023-avi-0985 | Multiples vulnérabilités dans Microsoft Edge | 2023-11-30T00:00:00.000000 | 2023-11-30T00:00:00.000000 |
| certfr-2023-avi-0984 | Multiples vulnérabilités dans les produits Axis | 2023-11-29T00:00:00.000000 | 2023-11-30T00:00:00.000000 |
| certfr-2023-avi-0983 | Multiples vulnérabilités dans Google Chrome | 2023-11-29T00:00:00.000000 | 2023-11-29T00:00:00.000000 |
| certfr-2023-avi-0982 | Vulnérabilité dans Apache Tomcat | 2023-11-29T00:00:00.000000 | 2023-11-29T00:00:00.000000 |
| certfr-2023-avi-0981 | Vulnérabilité dans Joomla! | 2023-11-29T00:00:00.000000 | 2023-11-29T00:00:00.000000 |
| certfr-2023-avi-0980 | Multiples vulnérabilités dans les produits Spring | 2023-11-27T00:00:00.000000 | 2023-11-27T00:00:00.000000 |
| certfr-2023-avi-0979 | Vulnérabilité dans les produits NetApp | 2023-11-24T00:00:00.000000 | 2023-11-24T00:00:00.000000 |
| certfr-2023-avi-0978 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-11-24T00:00:00.000000 | 2023-11-24T00:00:00.000000 |
| certfr-2023-avi-0977 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2023-11-24T00:00:00.000000 | 2023-11-24T00:00:00.000000 |