Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-64272
6.5 (3.1)
WordPress Email marketing for WordPress by GetResponse… GetResponse
Email marketing for WordPress by GetResponse Official
2025-12-18T07:22:15.080Z 2026-01-20T14:28:21.293Z
CVE-2025-64265
4.3 (3.1)
WordPress Frontend File Manager plugin <= 23.2 - Broke… N-Media
Frontend File Manager
2025-11-13T09:24:29.310Z 2026-01-20T14:28:21.291Z
CVE-2025-64256
8.8 (3.1)
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… PressTigers
Simple Folio
2025-12-09T14:13:52.351Z 2026-01-20T14:28:21.259Z
CVE-2025-64262
6.5 (3.1)
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… ramon fincken
Auto Prune Posts
2025-11-13T09:24:27.918Z 2026-01-20T14:28:21.234Z
CVE-2025-64260
7.1 (3.1)
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… Marco Milesi
ANAC XML Bandi di Gara
2025-12-18T07:22:14.310Z 2026-01-20T14:28:21.234Z
CVE-2025-64266
8.8 (3.1)
WordPress Booking and Rental Manager plugin <= 2.5.4 -… magepeopleteam
Booking and Rental Manager
2025-12-18T07:22:14.481Z 2026-01-20T14:28:21.161Z
CVE-2025-64276
6.5 (3.1)
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… Ays Pro
Survey Maker
2025-11-13T09:24:31.911Z 2026-01-20T14:28:21.160Z
CVE-2025-64259
6.5 (3.1)
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… Jeroen Schmit
Theater for WordPress
2025-11-13T09:24:26.955Z 2026-01-20T14:28:21.159Z
CVE-2025-64273
7.5 (3.1)
WordPress Email marketing for WordPress by GetResponse… GetResponse
Email marketing for WordPress by GetResponse Official
2025-12-18T07:22:15.266Z 2026-01-20T14:28:21.096Z
CVE-2025-64270
6.5 (3.1)
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … masteriyo
Masteriyo - LMS
2025-12-18T07:22:14.865Z 2026-01-20T14:28:21.085Z
CVE-2025-64269
4.3 (3.1)
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… EDGARROJAS
WooCommerce PDF Invoice Builder
2025-11-13T09:24:30.214Z 2026-01-20T14:28:21.085Z
CVE-2025-64274
4.3 (3.1)
WordPress WPKoi Templates for Elementor plugin <= 3.4.… wpkoithemes
WPKoi Templates for Elementor
2025-11-13T09:24:31.061Z 2026-01-20T14:28:21.083Z
CVE-2025-64264
5.9 (3.1)
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … Aman
Popup addon for Ninja Forms
2025-11-13T09:24:28.871Z 2026-01-20T14:28:21.081Z
CVE-2025-64253
4.9 (3.1)
WordPress Health Check & Troubleshooting plugin <= 1.7… WordPress.org
Health Check & Troubleshooting
2025-12-16T08:12:50.088Z 2026-01-20T14:28:21.074Z
CVE-2025-64277
5.3 (3.1)
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… QuantumCloud
ChatBot
2025-11-13T09:24:32.345Z 2026-01-20T14:28:21.020Z
CVE-2025-64255
7.2 (3.1)
WordPress Admin and Site Enhancements (ASE) plugin <= … Bowo
Admin and Site Enhancements (ASE)
2025-12-09T14:13:52.144Z 2026-01-20T14:28:21.009Z
CVE-2025-64258
7.5 (3.1)
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… wpweb
Follow My Blog Post
2025-12-18T07:22:14.130Z 2026-01-20T14:28:21.008Z
CVE-2025-64222
7.5 (3.1)
WordPress WooCommerce Recover Abandoned Cart plugin <=… FantasticPlugins
WooCommerce Recover Abandoned Cart
2025-12-18T07:22:12.885Z 2026-01-20T14:28:20.993Z
CVE-2025-64250
6.1 (3.1)
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… wpWax
Directorist
2025-12-16T08:12:49.689Z 2026-01-20T14:28:20.980Z
CVE-2025-64254
8.8 (3.1)
WordPress Photo Block plugin <= 1.5.1 - Broken Access … Ronald Huereca
Photo Block
2025-12-09T14:13:51.839Z 2026-01-20T14:28:20.954Z
CVE-2025-64251
4.9 (3.1)
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… azzaroco
Ultimate Learning Pro
2025-12-16T08:12:49.880Z 2026-01-20T14:28:20.915Z
CVE-2025-64246
4.3 (3.1)
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… netopsae
Accessibility by AudioEye
2025-12-16T08:12:48.902Z 2026-01-20T14:28:20.873Z
CVE-2025-64238
4.3 (3.1)
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… NicolasKulka
WPS Bidouille
2025-12-16T08:12:47.350Z 2026-01-20T14:28:20.852Z
CVE-2025-64218
7.5 (3.1)
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… WP Chill
Passster
2025-12-18T07:22:12.527Z 2026-01-20T14:28:20.843Z
CVE-2025-64244
4.3 (3.1)
WordPress Restrict Elementor Widgets, Columns and Sect… Codexpert, Inc
Restrict Elementor Widgets, Columns and Sections
2025-12-16T08:12:48.528Z 2026-01-20T14:28:20.451Z
CVE-2025-64224
7.1 (3.1)
WordPress Grand Conference Theme Custom Post Type plug… ThemeGoods
Grand Conference Theme Custom Post Type
2025-11-06T15:56:10.204Z 2026-01-20T14:28:20.416Z
CVE-2025-64245
4.3 (3.1)
WordPress Import external attachments plugin <= 1.5.12… ryanpcmcquen
Import external attachments
2025-12-16T08:12:48.719Z 2026-01-20T14:28:20.395Z
CVE-2025-64207
7.1 (3.1)
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… TieLabs
Jannah
2025-12-18T07:22:11.630Z 2026-01-20T14:28:20.368Z
CVE-2025-64243
4.3 (3.1)
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… e-plugins
Directory Pro
2025-12-16T08:12:48.343Z 2026-01-20T14:28:20.367Z
CVE-2025-64214
7.5 (3.1)
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… StylemixThemes
MasterStudy LMS Pro
2025-12-18T07:22:12.176Z 2026-01-20T14:28:20.339Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-11224
7.7 (3.1)
Improper Neutralization of Input During Web Page Gener… GitLab
GitLab
2026-01-14T18:58:03.982Z 2026-01-15T04:56:06.696Z
CVE-2025-12925
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
rymcu forest UserDicController.java deleteDic authorization rymcu
forest
2025-11-10T01:32:06.970Z 2025-11-10T17:07:57.578Z
CVE-2025-67822
9.4 (3.1)
A vulnerability in the Provisioning Manager compo… n/a
n/a
2026-01-15T00:00:00.000Z 2026-01-16T14:59:20.630Z
CVE-2025-63687
6.5 (3.1)
An issue was discovered in rymcu forest thru comm… n/a
n/a
2025-11-07T00:00:00.000Z 2025-11-12T17:02:09.707Z
CVE-2025-62068
6.5 (3.1)
WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripti… E2Pdf
e2pdf
2025-10-22T14:32:53.513Z 2026-01-20T14:28:13.967Z
CVE-2025-14930
7.8 (3.0)
Hugging Face Transformers GLM4 Deserialization of Untr… Hugging Face
Transformers
2025-12-23T21:04:52.512Z 2025-12-26T14:32:13.294Z
CVE-2025-14406
7.8 (3.0)
Soda PDF Desktop Uncontrolled Search Path Element Loca… Soda PDF
Desktop
2025-12-23T21:23:36.076Z 2025-12-31T21:06:55.358Z
CVE-2025-14407
3.3 (3.0)
Soda PDF Desktop PDF File Parsing Memory Corruption In… Soda PDF
Desktop
2025-12-23T21:23:41.396Z 2025-12-31T21:07:48.708Z
CVE-2025-14408
3.3 (3.0)
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read I… Soda PDF
Desktop
2025-12-23T21:23:44.886Z 2026-01-02T13:27:10.281Z
CVE-2025-14409
7.8 (3.0)
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write … Soda PDF
Desktop
2025-12-23T21:23:49.052Z 2026-01-02T13:28:30.903Z
CVE-2025-14410
3.3 (3.0)
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read I… Soda PDF
Desktop
2025-12-23T21:23:54.044Z 2026-01-02T13:29:47.645Z
CVE-2025-66417
7.5 (3.1)
GLPI has an unauthenticated SQL injection through the… glpi-project
glpi
2026-01-15T16:25:03.467Z 2026-01-15T16:45:31.206Z
CVE-2025-64516
7.5 (3.1)
GLPI incorrectly authorizes access to documents glpi-project
glpi
2026-01-15T16:01:03.470Z 2026-01-15T16:08:18.590Z
CVE-2025-71164
4.8 (4.0)
Typesetter CMS Reflected XSS via Editing.php Typesetter
Typesetter
2026-01-14T18:27:45.418Z 2026-01-14T21:19:20.087Z
CVE-2025-71165
4.8 (4.0)
Typesetter CMS Reflected XSS via Status.php Typesetter
Typesetter
2026-01-14T18:28:21.375Z 2026-01-14T21:20:28.046Z
CVE-2025-71166
4.8 (4.0)
Typesetter CMS Reflected XSS via Move Message Handling Typesetter
Typesetter
2026-01-14T18:28:40.633Z 2026-01-14T21:21:08.961Z
CVE-2025-67647
8.4 (4.0)
SvelteKit Denial of service and possible SSRF when usi… sveltejs
kit
2026-01-15T18:33:25.295Z 2026-01-15T18:58:01.975Z
CVE-2026-22803
8.2 (4.0)
SvelteKit has a memory amplification DoS in Remote Fun… sveltejs
kit
2026-01-15T18:37:57.831Z 2026-01-15T19:06:13.528Z
CVE-2025-14411
3.3 (3.0)
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read I… Soda PDF
Desktop
2025-12-23T21:24:00.216Z 2026-01-02T13:30:39.144Z
CVE-2025-14412
7.8 (3.0)
Soda PDF Desktop XLS File Insufficient UI Warning Remo… Soda PDF
Desktop
2025-12-23T21:24:04.860Z 2025-12-24T15:37:39.350Z
CVE-2025-14415
7 (3.0)
Soda PDF Desktop Launch Insufficient UI Warning Remote… Soda PDF
Desktop
2025-12-23T21:24:19.116Z 2026-01-02T13:40:00.488Z
CVE-2025-14491
7.8 (3.0)
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… RealDefense
SUPERAntiSpyware
2025-12-23T21:17:10.386Z 2025-12-29T18:04:07.661Z
CVE-2025-43017
8.5 (4.0)
HP ThinPro 8.1 SP8 Security Updates HP Inc.
HP ThinPro 8.1
2025-10-28T20:40:19.040Z 2025-10-30T03:56:02.832Z
CVE-2025-46363
4.3 (3.1)
Dell Secure Connect Gateway (SCG) 5.0 Application… Dell
Secure Connect Gateway SCG 5.0 Application and Appliance
2025-10-30T15:22:43.106Z 2025-10-30T16:00:58.601Z
CVE-2025-11761
8.5 (4.0)
HP Client Management Script Library – Security Update HP Inc
HP Client Management Script Library
2025-11-03T15:13:39.263Z 2025-11-04T04:55:15.307Z
CVE-2025-43990
7.3 (3.1)
Dell Command Monitor (DCM), versions prior to 10.… Dell
Command Monitor (DCM)
2025-11-05T17:01:23.986Z 2025-11-06T04:55:47.809Z
CVE-2025-22397
6.7 (3.1)
Dell Integrated Dell Remote Access Controller 9, … Dell
Integrated Dell Remote Access Controller 9 14G Versions
2025-11-06T18:46:04.736Z 2025-11-06T19:30:39.315Z
CVE-2026-0960
4.7 (3.1)
Loop with Unreachable Exit Condition ('Infinite Loop')… Wireshark Foundation
Wireshark
2026-01-14T20:23:33.849Z 2026-01-14T21:15:57.975Z
CVE-2025-6298
6.7 (3.1)
ACAP applications can gain elevated privileges du… Axis Communications AB
AXIS OS
2025-11-11T06:56:50.533Z 2025-12-11T19:01:16.392Z
CVE-2018-25148
8.7 (4.0)
8.8 (3.1)
Microhard Systems IPn4G 1.1.0 Remote Code Execution vi… Microhard Systems
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit
2025-12-24T19:27:50.947Z 2025-12-24T20:25:14.760Z
ID Description Published Updated
fkie_cve-2025-14407 Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability. This vuln… 2025-12-23T22:15:47.330 2026-01-21T20:58:26.617
fkie_cve-2025-14408 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vul… 2025-12-23T22:15:47.477 2026-01-21T20:57:34.627
fkie_cve-2025-14409 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vul… 2025-12-23T22:15:47.630 2026-01-21T20:56:37.233
fkie_cve-2025-14410 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vul… 2025-12-23T22:15:47.750 2026-01-21T20:55:48.357
fkie_cve-2025-66417 GLPI is a free asset and IT management software package. From 11.0.0, < 11.0.3, an unauthenticated … 2026-01-15T17:16:04.733 2026-01-21T20:54:11.157
fkie_cve-2025-64516 GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthoriz… 2026-01-15T16:16:11.487 2026-01-21T20:53:37.090
fkie_cve-2025-71164 Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vuln… 2026-01-14T19:16:47.007 2026-01-21T20:47:12.300
fkie_cve-2025-71165 Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vuln… 2026-01-14T19:16:47.157 2026-01-21T20:46:37.103
fkie_cve-2025-71166 Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vuln… 2026-01-14T19:16:47.300 2026-01-21T20:45:56.347
fkie_cve-2025-67647 SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. P… 2026-01-15T19:16:03.870 2026-01-21T20:37:37.653
fkie_cve-2026-22803 SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. F… 2026-01-15T19:16:06.120 2026-01-21T20:34:46.277
fkie_cve-2025-14411 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vul… 2025-12-23T22:15:47.877 2026-01-21T20:34:08.173
fkie_cve-2025-14412 Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnera… 2025-12-23T22:15:48.007 2026-01-21T20:29:33.193
fkie_cve-2025-14415 Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerabi… 2025-12-23T22:15:48.390 2026-01-21T20:28:05.977
fkie_cve-2025-14491 RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. T… 2025-12-23T22:15:50.237 2026-01-21T20:25:23.370
fkie_cve-2025-43017 HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP Th… 2025-10-28T21:15:37.793 2026-01-21T20:21:55.810
fkie_cve-2025-46363 Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00,… 2025-10-30T16:15:35.580 2026-01-21T20:20:13.310
fkie_cve-2025-11761 A potential security vulnerability has been identified in the HP Client Management Script Library s… 2025-11-03T16:15:33.267 2026-01-21T20:12:56.920
fkie_cve-2025-43990 Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Pr… 2025-11-05T17:15:40.210 2026-01-21T20:12:35.040
fkie_cve-2025-22397 Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G ver… 2025-11-06T19:15:41.153 2026-01-21T20:07:45.430
fkie_cve-2026-0960 HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service 2026-01-14T21:15:52.903 2026-01-21T20:07:19.650
fkie_cve-2025-6298 ACAP applications can gain elevated privileges due to improper input validation, potentially leadin… 2025-11-11T07:15:35.397 2026-01-21T20:06:36.633
fkie_cve-2018-25148 Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities… 2025-12-24T20:15:49.367 2026-01-21T20:00:58.393
fkie_cve-2025-59480 Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the… 2025-11-13T18:15:50.703 2026-01-21T19:37:37.203
fkie_cve-2025-12946 A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper … 2025-12-09T17:15:48.820 2026-01-21T19:29:14.017
fkie_cve-2025-11531 HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of thei… 2025-12-09T19:15:46.380 2026-01-21T19:22:59.903
fkie_cve-2020-36883 SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerabil… 2025-12-10T21:15:59.697 2026-01-21T19:19:41.713
fkie_cve-2025-3950 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… 2026-01-09T10:15:46.310 2026-01-21T19:19:06.850
fkie_cve-2025-24857 Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) … 2025-12-10T21:16:03.730 2026-01-21T19:14:47.067
fkie_cve-2026-22794 Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the se… 2026-01-12T22:16:08.633 2026-01-21T19:14:17.880
ID Severity Description Published Updated
ghsa-6j84-m7wp-j9jm
7.1 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-59m8-jmcc-pxx7
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-57rv-vq9v-c6qg
5.9 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-5263-ggmq-48gj
5.4 (3.1)
Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exp… 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-3662-gvg6-j9xx
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-2wqc-47g4-pm22
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-2w86-r6rm-76wr
5.3 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthem… 2025-12-09T18:30:43Z 2026-01-20T15:32:11Z
ghsa-2q9h-6v2j-hfpp
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-2jf2-fhpf-vfw3
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-2hgv-qvvq-63hq
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-29qw-9m44-pf9w
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-37mj-762c-hqp3
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:10Z
ghsa-wgpc-jm6c-j4j7
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-vfrr-rhvp-vvw9
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-d… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-vfj6-fgcq-5c93
4.3 (3.1)
Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectl… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-v3j5-8g9v-3768
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-qp8q-xvwm-2x2q
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for W… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-pp33-jqv4-5hjf
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-mw6g-37x4-p223
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-mm3g-cv2q-cppg
7.8 (3.1)
Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-mg95-m74x-55j8
4.3 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-hgg9-7rw7-5rhw
4.3 (3.1)
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-gjv2-jq53-mqgq
8.8 (3.1)
Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-cch9-4xf8-89w7
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-c6c4-c7qj-6662
8.8 (3.1)
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-7r59-p3hg-gf5g
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-76jc-c8j2-q66h
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-758v-pprx-jj23
8.1 (3.1)
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-55cq-cx6m-hv36
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-42p4-5wp9-wj4j
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ID Severity Description Package Published Updated
pysec-2021-123
The Python "Flask-Security-Too" package is used for adding security features to your Flas… flask-security-too 2021-05-17T18:15:00Z 2021-08-25T04:30:09.653075Z
pysec-2017-79
An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_fi… django-make-app 2017-11-10T09:29:00Z 2021-08-25T04:29:58.287263Z
pysec-2018-65
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /account… django-crm 2018-09-05T22:29:00Z 2021-08-25T04:29:58.134898Z
pysec-2017-78
An exploitable vulnerability exists in the YAML parsing functionality in config.py in Con… confire 2017-11-10T09:29:00Z 2021-08-25T04:29:57.582065Z
pysec-2018-64
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers … conference-scheduler-cli 2018-08-28T19:29:00Z 2021-08-25T04:29:57.468517Z
pysec-2019-167
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause… colander 2019-02-01T09:29:00Z 2021-08-25T04:29:57.387774Z
pysec-2019-164
aubio v0.4.0 to v0.4.8 has a new_aubio_onset NULL pointer dereference. aubio 2019-06-07T17:29:00Z 2021-08-25T04:29:55.989477Z
pysec-2019-163
aubio v0.4.0 to v0.4.8 has a NULL pointer dereference in new_aubio_filterbank via invalid… aubio 2019-06-07T17:29:00Z 2021-08-25T04:29:55.933107Z
pysec-2019-162
aubio v0.4.0 to v0.4.8 has a Buffer Overflow in new_aubio_tempo. aubio 2019-06-07T17:29:00Z 2021-08-25T04:29:55.885441Z
pysec-2018-63
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyi… aubio 2018-07-23T08:29:00Z 2021-08-25T04:29:55.843499Z
pysec-2018-62
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit i… aubio 2018-07-23T08:29:00Z 2021-08-25T04:29:55.802886Z
pysec-2018-61
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_r… aubio 2018-07-23T08:29:00Z 2021-08-25T04:29:55.761457Z
pysec-2017-77
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101… aubio 2017-12-12T01:29:00Z 2021-08-25T04:29:55.717031Z
pysec-2017-76
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avc… aubio 2017-12-12T01:29:00Z 2021-08-25T04:29:55.674951Z
pysec-2017-75
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() … aubio 2017-11-29T07:29:00Z 2021-08-25T04:29:55.630157Z
pysec-2018-60
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging a… ansible 2018-11-29T18:29:00Z 2021-08-25T04:29:51.914778Z
pysec-2021-122
If remote logging is not used, the worker (in the case of CeleryExecutor) or the schedule… apache-airflow 2021-08-16T08:15:00Z 2021-08-24T14:30:45.545655Z
pysec-2021-121
An XML external entity (XXE) injection in PyWPS before 4.5.0 allows an attacker to view f… pywps 2021-08-23T01:15:00Z 2021-08-23T05:26:18.647869Z
pysec-2021-120
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates… pywb 2021-08-18T18:15:00Z 2021-08-18T20:29:26.806388Z
pysec-2021-119
23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a craft… yamale 2021-08-09T21:15:00Z 2021-08-17T20:30:12.776802Z
pysec-2021-118
The Jupyter notebook is a web-based notebook environment for interactive computing. In af… notebook 2021-08-09T21:15:00Z 2021-08-17T18:40:19.674164Z
pysec-2021-117
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source f… bikeshed 2021-08-16T08:15:00Z 2021-08-16T10:33:00.179750Z
pysec-2021-116
This affects the package bikeshed before 3.0.0. This can occur when an untrusted source f… bikeshed 2021-08-16T08:15:00Z 2021-08-16T10:33:00.121184Z
pysec-2015-20
The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, an… django 2015-07-14T17:59:00Z 2021-08-11T21:51:02.776258Z
pysec-2020-215
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously c… notebook 2020-11-18T22:15:00Z 2021-08-11T11:14:19.531087Z
pysec-2021-115
The package glances before 3.2.1 are vulnerable to XML External Entity (XXE) Injection vi… glances 2021-07-29T18:15:00Z 2021-07-29T20:29:05.800424Z
pysec-2015-29
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API … kallithea 2015-02-16T15:59:00Z 2021-07-25T23:49:37.203310Z
pysec-2014-76
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed… zope2 2014-11-03T22:55:00Z 2021-07-25T23:34:59.010626Z
pysec-2014-75
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4… zope2 2014-09-30T14:55:00Z 2021-07-25T23:34:58.957854Z
pysec-2014-74
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 2.13… zope2 2014-09-30T14:55:00Z 2021-07-25T23:34:58.895470Z
ID Description Type
ID Description Updated
gsd-2021-47252 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.619083Z
gsd-2021-47255 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.617481Z
gsd-2021-47241 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.611830Z
gsd-2021-47212 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Update err… 2024-04-11T05:05:09.607738Z
gsd-2021-47249 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.602618Z
gsd-2021-47210 In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Re… 2024-04-11T05:05:09.599169Z
gsd-2021-47226 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.595677Z
gsd-2021-47247 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.586265Z
gsd-2021-47246 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.583702Z
gsd-2021-47227 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.566309Z
gsd-2021-47219 In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fi… 2024-04-11T05:05:09.565114Z
gsd-2021-47258 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.564568Z
gsd-2021-47217 In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Fix NULL… 2024-04-11T05:05:09.560295Z
gsd-2021-47248 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.555070Z
gsd-2021-47243 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.553204Z
gsd-2021-47223 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.545321Z
gsd-2021-47209 In the Linux kernel, the following vulnerability has been resolved: sched/fair: Prevent … 2024-04-11T05:05:09.539439Z
gsd-2021-47216 In the Linux kernel, the following vulnerability has been resolved: scsi: advansys: Fix … 2024-04-11T05:05:09.535964Z
gsd-2021-47239 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:05:09.532966Z
gsd-2021-4438 A vulnerability, which was classified as critical, has been found in kyivstarteam react-n… 2024-04-11T05:04:54.175072Z
gsd-2014-125111 A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as proble… 2024-04-11T05:04:35.509000Z
gsd-2020-36829 The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attack… 2024-04-11T05:03:42.080285Z
gsd-2024-24970 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:29.488616Z
gsd-2024-29080 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:28.548607Z
gsd-2024-29222 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:28.521848Z
gsd-2024-29088 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:28.400560Z
gsd-2024-27460 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.848789Z
gsd-2024-3296 A timing-based side-channel flaw exists in the rust-openssl package, which could be suffi… 2024-04-11T05:03:27.430574Z
gsd-2024-3340 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.429943Z
gsd-2024-3548 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.429729Z
ID Description Published Updated
mal-2024-10597 Malicious code in para-gen (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10596 Malicious code in omgd (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10595 Malicious code in oclips (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10594 Malicious code in oclip (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10593 Malicious code in megai (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10592 Malicious code in gym-reschdule-combination (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10589 Malicious code in raylinks (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10588 Malicious code in neursts (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10587 Malicious code in raylink (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10586 Malicious code in mega-sparks (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10585 Malicious code in fairseqn (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10583 Malicious code in fairsequence (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10582 Malicious code in ic-flows-platform (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10581 Malicious code in ic-flow-platform (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10458 Malicious code in salmonn (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10457 Malicious code in pysisyphes (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10456 Malicious code in pysisphus (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10455 Malicious code in physisyphus (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10454 Malicious code in mtvqa (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10453 Malicious code in jaqmc (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10452 Malicious code in hybrid-sd (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10451 Malicious code in hllm (PyPI) 2024-11-06T18:46:10Z 2025-12-11T09:27:53Z
mal-2024-10420 Malicious code in nurset (PyPI) 2024-11-06T08:12:55Z 2025-12-11T09:27:53Z
mal-2024-10419 Malicious code in macque (PyPI) 2024-11-06T08:21:37Z 2025-12-11T09:27:53Z
mal-2024-10418 Malicious code in machaque (PyPI) 2024-11-06T08:17:44Z 2025-12-11T09:27:53Z
mal-2024-10417 Malicious code in macaqua (PyPI) 2024-11-06T08:21:43Z 2025-12-11T09:27:53Z
mal-2024-10416 Malicious code in habitmf (PyPI) 2024-11-06T08:11:06Z 2025-12-11T09:27:53Z
mal-2024-10408 Malicious code in lightsuq (PyPI) 2024-11-06T07:55:50Z 2025-12-11T09:27:53Z
mal-2024-10407 Malicious code in laghtseq (PyPI) 2024-11-06T07:55:38Z 2025-12-11T09:27:53Z
mal-2024-10373 Malicious code in nurst (PyPI) 2024-11-05T08:55:52Z 2025-12-11T09:27:53Z
ID Description Published Updated
wid-sec-w-2025-1702 Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen 2025-08-03T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1701 IBM QRadar SIEM: Schwachstelle ermöglicht Cross-Site Scripting 2025-08-03T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1698 IBM Operational Decision Manager: Mehrere Schwachstellen 2025-07-31T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-0549 GitLab: Mehrere Schwachstellen 2025-03-12T23:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2023-2214 libxml2: Schwachstelle ermöglicht Denial of Service 2023-08-29T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2023-1255 Linux Kernel (ksmbd): Mehrere Schwachstellen 2023-05-18T22:00:00.000+00:00 2025-08-03T22:00:00.000+00:00
wid-sec-w-2025-1695 Net-SNMP: Schwachstelle ermöglicht Denial of Service 2014-08-31T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1694 Net-SNMP: Mehrere Schwachstellen ermöglichen Denial of Service 2014-03-06T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1693 Net-SNMP: Schwachstelle ermöglicht Denial of Service 2020-06-25T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1692 Net-SNMP: Schwachstelle ermöglicht Denial of Service 2018-10-08T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1430 Linux Kernel: Mehrere Schwachstellen 2025-06-30T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1341 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen 2022-02-20T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1147 Apache ActiveMQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-05-26T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1143 Red Hat Enterprise Linux (python-tornado): Schwachstelle ermöglicht Denial of Service 2025-05-25T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-1005 Varnish HTTP Cache: Schwachstelle ermöglicht Manipulation von Dateien 2025-05-12T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-0360 vim: Schwachstelle ermöglicht Denial of Service 2025-02-12T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-0049 vim: Schwachstelle ermöglicht Codeausführung 2025-01-12T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2025-0044 expat: Schwachstelle ermöglicht Codeausführung 2016-07-04T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-3742 poppler: Schwachstelle ermöglicht Denial of Service 2024-12-22T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-1968 vim: Schwachstelle ermöglicht Denial of Service 2024-09-01T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-1920 vim: Schwachstelle ermöglicht Denial of Service 2024-08-25T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-1907 vim: Schwachstelle ermöglicht Denial of Service 2024-08-22T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-0734 util-linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2024-03-27T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2024-0143 PostgreSQL: Mehrere Schwachstellen 2017-11-09T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2023-2045 Net-SNMP: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2020-08-16T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2023-0684 Linux Kernel: Mehrere Schwachstellen 2023-03-19T23:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2022-1207 Linux Kernel: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2022-08-29T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2022-1159 VMware Tools: Schwachstelle ermöglicht Privilegieneskalation 2022-08-23T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2022-0604 Net-SNMP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2022-07-06T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
wid-sec-w-2022-0561 OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen 2022-07-04T22:00:00.000+00:00 2025-07-31T22:00:00.000+00:00
ID Description Published Updated
rhsa-2024:1502 Red Hat Security Advisory: grafana-pcp security update 2024-03-25T20:26:18+00:00 2026-01-21T23:20:56+00:00
rhsa-2024:1501 Red Hat Security Advisory: grafana security update 2024-03-25T20:29:49+00:00 2026-01-21T23:20:56+00:00
rhsa-2024:1468 Red Hat Security Advisory: go-toolset-1.19-golang security update 2024-03-21T12:17:52+00:00 2026-01-21T23:20:52+00:00
rhsa-2024:1462 Red Hat Security Advisory: golang security update 2024-03-21T08:17:16+00:00 2026-01-21T23:20:51+00:00
rhsa-2024:1210 Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update 2024-03-13T15:31:52+00:00 2026-01-21T23:20:45+00:00
rhsa-2024:1197 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update 2024-03-06T17:52:22+00:00 2026-01-21T23:20:43+00:00
rhsa-2024:1196 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update 2024-03-06T17:58:21+00:00 2026-01-21T23:20:43+00:00
rhsa-2024:1194 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update 2024-03-06T15:38:13+00:00 2026-01-21T23:20:43+00:00
rhsa-2024:1193 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update 2024-03-06T15:32:21+00:00 2026-01-21T23:20:42+00:00
rhsa-2024:1192 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update 2024-03-06T15:32:30+00:00 2026-01-21T23:20:42+00:00
rhsa-2024:1130 Red Hat Security Advisory: openssh security update 2024-03-05T18:18:29+00:00 2026-01-21T23:20:40+00:00
rhsa-2024:1150 Red Hat Security Advisory: buildah security update 2024-03-05T18:16:47+00:00 2026-01-21T23:20:38+00:00
rhsa-2024:11381 Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.11.4 security enhancements and bug fixes 2024-12-18T16:28:31+00:00 2026-01-21T23:20:37+00:00
rhsa-2024:11292 Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.4 security and bug fix update 2024-12-17T18:29:55+00:00 2026-01-21T23:20:33+00:00
rhsa-2024:11256 Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 2024-12-17T11:08:00+00:00 2026-01-21T23:20:33+00:00
rhsa-2024:11255 Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.1 2024-12-17T10:22:51+00:00 2026-01-21T23:20:33+00:00
rhsa-2024:11094 Red Hat Security Advisory: python36:3.6 security update 2024-12-16T08:11:53+00:00 2026-01-21T23:20:33+00:00
rhsa-2024:11093 Red Hat Security Advisory: python36:3.6 security update 2024-12-16T08:01:03+00:00 2026-01-21T23:20:30+00:00
rhsa-2024:11091 Red Hat Security Advisory: python36:3.6 security update 2024-12-16T07:24:43+00:00 2026-01-21T23:20:27+00:00
rhsa-2024:11048 Red Hat Security Advisory: python-virtualenv security update 2024-12-16T02:38:00+00:00 2026-01-21T23:20:26+00:00
rhsa-2024:11031 Red Hat Security Advisory: OpenShift Container Platform 4.14.43 security update 2024-12-19T00:31:17+00:00 2026-01-21T23:20:26+00:00
rhsa-2024:11023 Red Hat Security Advisory: HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update. 2024-12-12T20:00:23+00:00 2026-01-21T23:20:24+00:00
rhsa-2024:10990 Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.10 2025-01-15T10:46:45+00:00 2026-01-21T23:20:23+00:00
rhsa-2024:10988 Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27 2025-01-15T20:08:42+00:00 2026-01-21T23:20:23+00:00
rhsa-2024:10986 Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.1 Bug Fix Update 2024-12-12T09:54:33+00:00 2026-01-21T23:20:23+00:00
rhsa-2024:10962 Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release 2024-12-11T16:47:10+00:00 2026-01-21T23:20:22+00:00
rhsa-2024:10953 Red Hat Security Advisory: python36:3.6 security update 2024-12-11T16:20:04+00:00 2026-01-21T23:20:17+00:00
rhsa-2024:10952 Red Hat Security Advisory: php:7.4 security update 2024-12-11T16:20:37+00:00 2026-01-21T23:20:17+00:00
rhsa-2024:10917 Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release 2024-12-10T11:04:35+00:00 2026-01-21T23:20:16+00:00
rhsa-2024:10908 Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7 2024-12-10T08:27:47+00:00 2026-01-21T23:20:16+00:00
ID Description Published Updated
icsa-21-243-02 FANUC Robot Controllers (Update A) 2021-08-31T00:00:00.000000Z 2022-02-03T00:00:00.000000Z
icsa-22-032-02 Advantech ADAM-3600 2022-02-01T00:00:00.000000Z 2022-02-01T00:00:00.000000Z
icsa-22-032-01 Ricon Mobile Industrial Cellular Router 2022-02-01T00:00:00.000000Z 2022-02-01T00:00:00.000000Z
icsa-21-315-02 Multiple Data Distribution Service (DDS) Implementations (Update A) 2021-11-11T00:00:00.000000Z 2022-02-01T00:00:00.000000Z
icsma-21-355-01 Fresenius Kabi Agilia Connect Infusion System (Update A) 2021-12-21T00:00:00.000000Z 2022-01-27T00:00:00.000000Z
icsa-22-025-01 GE Gas Power ToolBoxST 2022-01-25T00:00:00.000000Z 2022-01-25T00:00:00.000000Z
icsa-21-131-02 Mitsubishi Electric GOT and Tension Controller (Update A) 2021-05-11T00:00:00.000000Z 2022-01-20T00:00:00.000000Z
icsa-20-343-02 Mitsubishi Electric GOT and Tension Controller (Update B) 2020-12-08T00:00:00.000000Z 2022-01-20T00:00:00.000000Z
icsa-22-013-07 Mitsubishi Electric MELSEC-F Series 2022-01-13T00:00:00.000000Z 2022-01-13T00:00:00.000000Z
icsa-22-013-01 Mitsubishi Electric MELSEC-F Series 2022-01-13T00:00:00.000000Z 2022-01-13T00:00:00.000000Z
icsa-21-266-01 Trane Symbio (Update B) 2021-09-23T00:00:00.000000Z 2022-01-13T00:00:00.000000Z
icsa-22-011-01 Johnson Controls VideoEdge 2022-01-11T00:00:00.000000Z 2022-01-11T00:00:00.000000Z
icsma-22-006-01 Philips Engage Software 2022-01-06T00:00:00.000000Z 2022-01-06T00:00:00.000000Z
icsa-22-006-03 IDEC PLCs 2022-01-06T00:00:00.000000Z 2022-01-06T00:00:00.000000Z
icsa-22-006-02 Fernhill SCADA 2022-01-06T00:00:00.000000Z 2022-01-06T00:00:00.000000Z
icsa-22-006-01 Omron CX-One 2022-01-06T00:00:00.000000Z 2022-01-06T00:00:00.000000Z
icsa-21-357-02 Johnson Controls exacq Enterprise Manager 2021-12-23T00:00:00.000000Z 2021-12-23T00:00:00.000000Z
icsa-21-357-01 Moxa MGate Protocol Gateways 2021-12-23T00:00:00.000000Z 2021-12-23T00:00:00.000000Z
icsa-21-355-04 Emerson DeltaV 2021-12-21T00:00:00.000000Z 2021-12-21T00:00:00.000000Z
icsa-21-355-03 WECON LeviStudioU 2021-12-21T00:00:00.000000Z 2021-12-21T00:00:00.000000Z
icsa-21-355-02 Horner Automation Cscape EnvisionRV 2021-12-21T00:00:00.000000Z 2021-12-21T00:00:00.000000Z
icsa-21-355-01 mySCADA myPRO 2021-12-21T00:00:00.000000Z 2021-12-21T00:00:00.000000Z
icsa-21-348-02 Schneider Electric Rack PDU (Update A) 2021-12-14T00:00:00.000000Z 2021-12-21T00:00:00.000000Z
icsa-21-350-13 Siemens Questa and ModelSim 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-350-05 Mitsubishi Electric FA Engineering Software (Update B) 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-350-04 Mitsubishi Electric GX Works2 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-350-03 Wibu-Systems CodeMeter Runtime 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-350-02 Delta Electronics CNCSoft 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-350-01 Xylem AquaView 2021-12-16T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
icsa-21-217-01 HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B) 2021-08-05T00:00:00.000000Z 2021-12-16T00:00:00.000000Z
ID Description Published Updated
cisco-sa-20180516-msms Cisco Meeting Server Media Services Denial of Service Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-ise-xss Cisco Identity Services Engine Logs Cross-Site Scripting Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-ident-se-xss Cisco Identity Services Engine Cross-Site Scripting Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-fnd Cisco IoT Field Network Director Cross-Site Request Forgery Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-firepwr-pb Cisco Firepower Threat Defense Software Policy Bypass Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-dnac Cisco Digital Network Architecture Center Static Credentials Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-dna2 Cisco Digital Network Architecture Center Authentication Bypass Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180516-dna Cisco Digital Network Architecture Center Unauthorized Access Vulnerability 2018-05-16T16:00:00+00:00 2018-05-16T16:00:00+00:00
cisco-sa-20180502-webex-id Cisco WebEx Recording Format Player Information Disclosure Vulnerability 2018-05-02T16:00:00+00:00 2018-05-08T16:31:00+00:00
cisco-sa-20180502-wlc-mfdos Cisco Wireless LAN Controller 802.11 Management Frame Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-03T17:27:00+00:00
cisco-sa-20180502-aironet-dos Cisco Aironet 1800 Series Access Point 802.11 Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T20:34:00+00:00
cisco-sa-20180502-wlc-ip Cisco Wireless LAN Controller IP Fragment Reassembly Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-wlc-id Cisco 5500 and 8500 Series Wireless LAN Controller Information Disclosure Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-webex-rce Cisco WebEx Advanced Recording Format Player Remote Code Execution Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-war Cisco WebEx Advanced Recording Format Remote Code Execution Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-psc Cisco Prime Service Catalog User Interface Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-iosxr Cisco IOS XR Software netconf Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-fpwr-txdos Cisco Firepower System Software Transport Layer Security Extensions Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-fpwr-dos Cisco Firepower System Software Cross-Origin Domain Protection Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-fpwr-codp Cisco Firepower System Software Transport Layer Security Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-cms-cx Cisco Meeting Server Remote Code Execution Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-ap-ptp Cisco Aironet 1810, 1830, and 1850 Series Access Points Point-to-Point Tunneling Protocol Denial of Service Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-ap-acl Cisco Aironet Access Points Central Web Authentication FlexConnect Client ACL Bypass Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-aironet-ssh Cisco Aironet 1800, 2800, and 3800 Series Access Points Secure Shell Privilege Escalation Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-aironet-auth Cisco Wireless LAN Controller and Aironet Access Points IOS WebAuth Client Authentication Bypass Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180502-acs1 Cisco Secure Access Control System Remote Code Execution Vulnerability 2018-05-02T16:00:00+00:00 2018-05-02T16:00:00+00:00
cisco-sa-20180418-wbs Cisco WebEx Clients Remote Code Execution Vulnerability 2018-04-18T16:00:00+00:00 2018-05-02T14:08:00+00:00
cisco-sa-20180328-qos Cisco IOS and IOS XE Software Quality of Service Remote Code Execution Vulnerability 2018-03-28T16:00:00+00:00 2018-04-27T21:15:00+00:00
cisco-sa-20180418-asa1 Cisco Adaptive Security Appliance Virtual Private Network SSL Client Certificate Bypass Vulnerability 2018-04-18T16:00:00+00:00 2018-04-27T15:46:00+00:00
cisco-sa-20180418-ise Cisco Identity Services Engine Shell Access Vulnerability 2018-04-18T16:00:00+00:00 2018-04-26T16:26:00+00:00
ID Description Published Updated
msrc_cve-2025-38472 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry 2025-07-02T00:00:00.000Z 2025-09-04T00:44:01.000Z
msrc_cve-2022-35409 An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function. 2022-07-02T00:00:00.000Z 2025-09-04T00:42:29.000Z
msrc_cve-2025-38540 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras 2025-08-02T00:00:00.000Z 2025-09-04T00:41:42.000Z
msrc_cve-2024-50289 media: av7110: fix a spectre vulnerability 2024-11-02T00:00:00.000Z 2025-09-04T00:41:38.000Z
msrc_cve-2025-48964 ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero). 2025-07-02T00:00:00.000Z 2025-09-04T00:40:23.000Z
msrc_cve-2023-52905 octeontx2-pf: Fix resource leakage in VF driver unbind 2024-08-02T00:00:00.000Z 2025-09-04T00:40:18.000Z
msrc_cve-2025-1180 GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption 2025-02-02T00:00:00.000Z 2025-09-04T00:39:36.000Z
msrc_cve-2025-38532 net: libwx: properly reset Rx ring descriptor 2025-08-02T00:00:00.000Z 2025-09-04T00:39:05.000Z
msrc_cve-2023-29400 Improper handling of empty HTML attributes in html/template 2023-05-01T00:00:00.000Z 2025-09-04T00:39:00.000Z
msrc_cve-2019-16910 Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.) 2019-09-02T00:00:00.000Z 2025-09-04T00:38:18.000Z
msrc_cve-2024-26726 btrfs: don't drop extent_map for free space inode on write error 2024-04-02T07:00:00.000Z 2025-09-04T00:37:57.000Z
msrc_cve-2025-1371 GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference 2025-02-02T00:00:00.000Z 2025-09-04T00:37:33.000Z
msrc_cve-2023-4580 Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2. 2023-09-01T00:00:00.000Z 2025-09-04T00:36:18.000Z
msrc_cve-2025-38550 ipv6: mcast: Delay put pmc->idev in mld_del_delrec() 2025-08-02T00:00:00.000Z 2025-09-04T00:35:43.000Z
msrc_cve-2022-49476 mt76: mt7921: fix kernel crash at mt7921_pci_remove 2025-02-02T00:00:00.000Z 2025-09-04T00:34:18.000Z
msrc_cve-2025-38535 phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode 2025-08-02T00:00:00.000Z 2025-09-04T00:31:56.000Z
msrc_cve-2023-52621 bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers 2024-03-02T08:00:00.000Z 2025-09-04T00:31:29.000Z
msrc_cve-2024-24783 Verify panics on certificates with an unknown public key algorithm in crypto/x509 2024-03-02T08:00:00.000Z 2025-09-04T00:29:44.000Z
msrc_cve-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols() 2024-06-02T07:00:00.000Z 2025-09-04T00:29:08.000Z
msrc_cve-2025-38552 mptcp: plug races between subflow fail and subflow creation 2025-08-02T00:00:00.000Z 2025-09-04T00:28:50.000Z
msrc_cve-2023-0778 A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. 2023-03-10T00:00:00.000Z 2025-09-04T00:28:46.000Z
msrc_cve-2023-52939 mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() 2025-03-02T00:00:00.000Z 2025-09-04T00:26:59.000Z
msrc_cve-2022-21235 Command Injection 2022-04-02T00:00:00.000Z 2025-09-04T00:26:21.000Z
msrc_cve-2025-23130 f2fs: fix to avoid panic once fallocation fails for pinfile 2025-04-02T00:00:00.000Z 2025-09-04T00:26:15.000Z
msrc_cve-2024-0752 A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122. 2024-01-01T08:00:00.000Z 2025-09-04T00:25:16.000Z
msrc_cve-2015-7511 Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations. 2016-04-02T00:00:00.000Z 2025-09-04T00:25:12.000Z
msrc_cve-2024-26656 drm/amdgpu: fix use-after-free bug 2024-04-02T07:00:00.000Z 2025-09-04T00:25:04.000Z
msrc_cve-2023-53001 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2025-03-02T00:00:00.000Z 2025-09-04T00:24:12.000Z
msrc_cve-2025-55199 Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion 2025-08-02T00:00:00.000Z 2025-09-04T00:23:40.000Z
msrc_cve-2025-1150 GNU Binutils ld libbfd.c bfd_malloc memory leak 2025-02-02T00:00:00.000Z 2025-09-04T00:22:55.000Z
ID Description Updated
var-201803-1377 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Softwa… 2025-11-18T15:12:28.737000Z
var-201803-1375 A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Softw… 2025-11-18T15:12:28.698000Z
var-201803-1378 A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) function… 2025-11-18T15:12:28.656000Z
var-201803-1389 A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restore… 2025-11-18T15:12:28.617000Z
var-201803-1388 A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software a… 2025-11-18T15:12:28.580000Z
var-201803-1395 Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Sof… 2025-11-18T15:12:28.540000Z
var-201803-1394 Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Sof… 2025-11-18T15:12:28.501000Z
var-202006-0258 IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that de… 2025-11-18T15:12:20.281000Z
var-202007-1393 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, an… 2025-11-18T15:12:19.532000Z
var-201505-0274 The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code… 2025-11-18T15:12:18.247000Z
var-202104-0753 This issue was addressed by improved management of object lifetimes. This issue is fixed … 2025-11-18T15:12:17.836000Z
var-202202-0323 Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Ro… 2025-11-18T15:12:16.025000Z
var-202202-0320 Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Ro… 2025-11-18T15:12:15.968000Z
var-202208-0676 A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All vers… 2025-11-18T15:12:14.533000Z
var-202209-1859 Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be byp… 2025-11-18T15:12:14.158000Z
var-202307-0275 Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 … 2025-11-18T15:12:07.771000Z
var-202307-0299 Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 … 2025-11-18T15:12:07.743000Z
var-202307-0316 Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functi… 2025-11-18T15:12:07.713000Z
var-202307-0317 Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functi… 2025-11-18T15:12:07.684000Z
var-202504-1178 Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions O… 2025-11-18T15:12:07.123000Z
var-202404-0069 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, h… 2025-11-18T15:12:02.203000Z
var-202404-0070 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was fo… 2025-11-18T15:12:02.164000Z
var-202409-0664 An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser… 2025-11-18T15:12:02.050000Z
var-202409-0665 An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser… 2025-11-18T15:12:02.034000Z
var-202501-1294 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd f… 2025-11-18T15:12:00.024000Z
var-202501-1295 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd f… 2025-11-18T15:12:00.002000Z
var-202501-1296 Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd f… 2025-11-18T15:11:59.982000Z
var-202501-1316 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() funct… 2025-11-18T15:11:59.959000Z
var-202501-1314 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() funct… 2025-11-18T15:11:59.938000Z
var-202501-1315 Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() funct… 2025-11-18T15:11:59.917000Z
ID Description Published Updated
jvndb-2011-000062 Aipo vulnerable to cross-site request forgery 2011-08-16T16:41+09:00 2011-08-16T16:41+09:00
jvndb-2011-000061 Internet Explorer window display vulnerability 2011-08-12T14:06+09:00 2011-08-12T14:06+09:00
jvndb-2011-000060 Windows URL Protocol Handler may insecurely load executable files 2011-08-10T17:17+09:00 2011-08-10T17:17+09:00
jvndb-2011-001928 JP1/Performance Management - Web Console Cross-Site Scripting Vulnerability 2011-08-09T10:11+09:00 2011-08-09T10:11+09:00
jvndb-2011-001927 Arbitrary Code Execution Vulnerability in HiRDB Control Manager 2011-08-09T10:10+09:00 2011-08-09T10:10+09:00
jvndb-2011-000059 Mozilla Firefox vulnerable to cross-site scripting 2011-07-28T16:31+09:00 2011-07-28T16:31+09:00
jvndb-2011-000058 Mozilla Firefox vulnerable to cross-site scripting 2011-07-28T16:29+09:00 2011-07-28T16:29+09:00
jvndb-2011-000057 Mozilla Firefox vulnerable to denial-of-service (DoS) 2011-07-28T16:27+09:00 2011-07-28T16:27+09:00
jvndb-2011-000055 Mozilla Firefox vulnerability in processing content-length header 2011-07-28T16:24+09:00 2011-07-28T16:24+09:00
jvndb-2011-000056 Plone vulnerable to cross-site scripting 2011-07-27T16:17+09:00 2011-07-27T16:17+09:00
jvndb-2009-002069 Oracle iPlanet Web Server information disclosure vulnerability 2011-07-25T18:06+09:00 2011-07-25T18:06+09:00
jvndb-2011-000051 ASP.NET vulnerable to cross-site scripting 2011-07-15T16:32+09:00 2011-07-15T16:32+09:00
jvndb-2011-000054 Google Search Appliance vulnerable to cross-site scripting 2011-07-15T16:27+09:00 2011-07-15T16:27+09:00
jvndb-2011-000052 Internet Explorer vulnerable to cross-site scripting 2011-07-08T18:29+09:00 2011-07-08T18:29+09:00
jvndb-2011-000050 XnView may insecurely load executable files 2011-07-05T16:56+09:00 2011-07-05T16:56+09:00
jvndb-2011-000049 Opera vulnerable to denial-of-service (DoS) 2011-07-05T16:54+09:00 2011-07-05T16:54+09:00
jvndb-2011-000048 ALZip vulnerable to buffer overflow 2011-06-29T18:20+09:00 2011-06-29T18:20+09:00
jvndb-2010-002807 Accela BizSearch Standard Search Page Cross-Site Scripting Vulnerability 2011-06-29T17:57+09:00 2011-06-29T17:57+09:00
jvndb-2010-002809 Accela BizSearch Standard Search Page Cross-Site Scripting Vulnerability 2011-06-29T17:55+09:00 2011-06-29T17:55+09:00
jvndb-2010-002808 Accela BizSearch Standard Search Page Cross-Site Scripting Vulnerability 2011-06-29T17:55+09:00 2011-06-29T17:55+09:00
jvndb-2011-000047 Cybozu Office vulnerable to cross-site scripting 2011-06-24T19:23+09:00 2011-06-24T19:23+09:00
jvndb-2011-000046 Multiple Cybozu products vulnerable to cross-site scripting 2011-06-24T19:21+09:00 2011-06-24T19:21+09:00
jvndb-2011-000045 Multiple Cybozu products vulnerable to cross-site scripting 2011-06-24T19:18+09:00 2011-06-24T19:18+09:00
jvndb-2011-000044 Cybozu Garoon vulnerable to cross-site scripting 2011-06-24T19:15+09:00 2011-06-24T19:15+09:00
jvndb-2011-000042 WeblyGo vulnerable to cross-site scripting 2011-06-20T15:37+09:00 2011-06-20T15:37+09:00
jvndb-2011-000043 Ichitaro series vulnerable to arbitrary code execution 2011-06-16T19:04+09:00 2011-06-16T19:04+09:00
jvndb-2011-000041 Microsoft MSXML vulnerability in HTTP request processing 2011-06-16T12:28+09:00 2011-06-16T12:28+09:00
jvndb-2011-000040 Microsoft Outlook read receipt function vulnerability 2011-06-16T12:25+09:00 2011-06-16T12:25+09:00
jvndb-2011-000039 ASP.NET vulnerable to cross-site scripting 2011-06-16T12:23+09:00 2011-06-16T12:23+09:00
jvndb-2011-000038 Internet Explorer vulnerable to cross-site scripting 2011-06-16T12:21+09:00 2011-06-16T12:21+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:1520-1 Security update for govulncheck-vulndb 2025-05-09T01:08:21Z 2025-05-09T01:08:21Z
suse-su-2025:1519-1 Security update for libsoup 2025-05-09T00:07:45Z 2025-05-09T00:07:45Z
suse-su-2025:1518-1 Security update for libsoup 2025-05-08T19:35:59Z 2025-05-08T19:35:59Z
suse-su-2025:1517-1 Security update for apparmor 2025-05-08T19:35:48Z 2025-05-08T19:35:48Z
suse-su-2025:1516-1 Security update for openssl-3 2025-05-08T13:17:46Z 2025-05-08T13:17:46Z
suse-su-2025:20304-1 Security update for util-linux 2025-05-08T12:24:01Z 2025-05-08T12:24:01Z
suse-su-2025:20303-1 Security update for krb5 2025-05-08T12:22:20Z 2025-05-08T12:22:20Z
suse-su-2025:1512-1 Security update for apparmor 2025-05-07T19:36:38Z 2025-05-07T19:36:38Z
suse-su-2025:1511-1 Security update for apparmor 2025-05-07T19:35:59Z 2025-05-07T19:35:59Z
suse-su-2025:1455-1 Security update for sqlite3 2025-05-07T15:13:56Z 2025-05-07T15:13:56Z
suse-su-2025:1456-1 Security update for sqlite3 2025-05-07T15:13:45Z 2025-05-07T15:13:45Z
suse-su-2025:1510-1 Security update for libsoup 2025-05-07T14:38:16Z 2025-05-07T14:38:16Z
suse-su-2025:1509-1 Security update for libsoup2 2025-05-07T14:37:37Z 2025-05-07T14:37:37Z
suse-su-2025:1508-1 Security update for openvpn 2025-05-07T14:02:51Z 2025-05-07T14:02:51Z
suse-su-2025:1506-1 Security update for MozillaThunderbird 2025-05-07T12:13:16Z 2025-05-07T12:13:16Z
suse-su-2025:1505-1 Security update for apparmor 2025-05-07T12:06:42Z 2025-05-07T12:06:42Z
suse-su-2025:1504-1 Security update for libsoup 2025-05-07T12:06:15Z 2025-05-07T12:06:15Z
suse-su-2025:1503-1 Security update for libsoup2 2025-05-07T12:06:04Z 2025-05-07T12:06:04Z
suse-su-2025:1501-1 Security update for opensaml 2025-05-07T09:42:33Z 2025-05-07T09:42:33Z
suse-su-2025:1500-1 Security update for opensaml 2025-05-07T09:42:17Z 2025-05-07T09:42:17Z
suse-su-2025:1494-1 Security update for libxslt 2025-05-06T23:46:13Z 2025-05-06T23:46:13Z
suse-su-2025:1492-1 Security update for rubygem-rack-1_6 2025-05-06T14:36:01Z 2025-05-06T14:36:01Z
suse-su-2025:1490-1 Security update for java-17-openjdk 2025-05-06T11:48:27Z 2025-05-06T11:48:27Z
suse-su-2025:1489-1 Security update for ImageMagick 2025-05-06T10:57:42Z 2025-05-06T10:57:42Z
suse-su-2025:1488-1 Security update for ImageMagick 2025-05-06T10:57:22Z 2025-05-06T10:57:22Z
suse-su-2025:20299-1 Security update for libX11 2025-05-06T10:21:10Z 2025-05-06T10:21:10Z
suse-su-2025:20217-1 Security update for gdk-pixbuf 2025-05-06T10:17:13Z 2025-05-06T10:17:13Z
suse-su-2025:1454-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) 2025-05-06T09:44:20Z 2025-05-06T09:44:20Z
suse-su-2025:1477-1 Security update for libva 2025-05-06T09:17:15Z 2025-05-06T09:17:15Z
suse-su-2025:1467-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) 2025-05-06T09:07:02Z 2025-05-06T09:07:02Z
ID Description Published Updated
opensuse-su-2024:13620-1 coredns-1.11.1-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13619-1 libmspack-devel-0.11-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13618-1 coreutils-9.4-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13617-1 MozillaThunderbird-115.7.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13616-1 pam-1.6.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13615-1 etcd-3.5.11-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13614-1 atril-1.26.1-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13613-1 libzstd-devel-1.5.5-5.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13612-1 rear-2.7-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13611-1 python310-Pillow-10.2.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13610-1 python310-Mako-1.3.0-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13609-1 openjfx-17.0.10.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13608-1 apache-sshd-2.12.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13607-1 jupyter-panel-1.3.7-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13606-1 jupyter-notebook-7.0.7-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13605-1 jupyter-jupyterlab-4.0.11-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13604-1 golang-github-prometheus-prometheus-2.48.1-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13603-1 ungoogled-chromium-120.0.6099.224-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13602-1 java-11-openjdk-11.0.22.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13601-1 jupyter-lsp-2.2.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13600-1 nodejs-electron-27.2.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13599-1 golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13598-1 xwayland-23.2.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13597-1 xorg-x11-server-21.1.11-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13596-1 tomcat10-10.1.18-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13595-1 python310-imagecodecs-2024.1.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13594-1 java-21-openjdk-21.0.2.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13593-1 gnutls-3.8.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13592-1 erlang-26.2.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13591-1 chromedriver-120.0.6099.224-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
cnvd-2025-23989 Simple Banking System transfermoney.php文件SQL注入漏洞 2025-10-13 2025-10-16
cnvd-2025-23988 Simple Banking System removeuser.php文件SQL注入漏洞 2025-10-13 2025-10-16
cnvd-2025-23987 Simple Banking System createuser.php文件SQL注入漏洞 2025-10-13 2025-10-16
cnvd-2025-23986 Online Hotel Reservation System editpicexec.php文件任意文件上传漏洞 2025-10-13 2025-10-16
cnvd-2025-23985 Online Hotel Reservation System addslideexec.php文件任意文件上传漏洞 2025-10-13 2025-10-16
cnvd-2025-23984 Online Hotel Reservation System addgalleryexec.php文件任意文件上传漏洞 2025-10-13 2025-10-16
cnvd-2025-23983 Online Hotel Reservation System任意文件上传漏洞 2025-10-13 2025-10-16
cnvd-2025-23982 Simple Food Ordering System editproduct.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23981 Simple Food Ordering System editcategory.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23980 Simple Food Ordering System /addproduct.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23979 Simple Food Ordering System /addcategory.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23978 Online Job Search Engine searchjob.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23977 Online Job Search Engine registration.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23976 Online Job Search Engine postjob.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23975 E-Commerce Website user_index_search.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23974 E-Commerce Website product_add_qty.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-23973 E-Commerce Website delete_order_details.php文件SQL注入漏洞 2025-10-15 2025-10-16
cnvd-2025-24069 Huawei HarmonyOS和EMUI HVB模块存在未明漏洞 2025-08-18 2025-10-15
cnvd-2025-23971 Online Course Registration /admin/manage-students.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23970 Online Course Registration /admin/edit-course.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23969 E-Commerce Website /pages/admin_account_delete.php文件SQL注入漏洞 2025-09-25 2025-10-15
cnvd-2025-23968 E-Commerce Website pages/admin_product_details.php文件SQL注入漏洞 2025-09-29 2025-10-15
cnvd-2025-23967 E-Commerce Website admin_index_search.php文件SQL注入漏洞 2025-09-29 2025-10-15
cnvd-2025-23966 E-Commerce Website admin_account_update.php文件SQL注入漏洞 2025-09-29 2025-10-15
cnvd-2025-23965 E-Commerce Website supplier_add.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23964 E-Commerce Website product_add.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23963 E-Commerce Website edit_order_details.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23962 E-Commerce Website /pages/supplier_update.php SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23961 Online Complaint Site /cms/users/complaint-details.php文件SQL注入漏洞 2025-10-13 2025-10-15
cnvd-2025-23960 Online Complaint Site index.php文件SQL注入漏洞 2025-10-15 2025-10-15
ID Description Published Updated
certfr-2023-avi-0922 Multiples vulnérabilités dans IBM AIX 2023-11-08T00:00:00.000000 2023-11-08T00:00:00.000000
certfr-2023-avi-0921 Vulnérabilité dans Google Chrome 2023-11-08T00:00:00.000000 2023-11-08T00:00:00.000000
certfr-2023-avi-0920 Vulnérabilité dans OpenSSL 2023-11-08T00:00:00.000000 2023-11-08T00:00:00.000000
certfr-2023-avi-0919 Vulnérabilité dans les produits SolarWinds 2023-11-08T00:00:00.000000 2023-11-08T00:00:00.000000
certfr-2023-avi-0918 Multiples vulnérabilités dans TrendMicro Apex One 2023-11-07T00:00:00.000000 2023-11-07T00:00:00.000000
certfr-2023-avi-0917 Multiples vulnérabilités dans Veeam ONE 2023-11-07T00:00:00.000000 2023-11-07T00:00:00.000000
certfr-2023-avi-0915 Multiples vulnérabilités dans les produits Qnap 2023-11-06T00:00:00.000000 2023-11-06T00:00:00.000000
certfr-2023-avi-0914 Vulnérabilité dans Roundcube Webmail 2023-11-06T00:00:00.000000 2023-11-06T00:00:00.000000
certfr-2023-avi-0913 Multiples vulnérabilités dans les produits SolarWinds 2023-11-06T00:00:00.000000 2023-11-06T00:00:00.000000
certfr-2023-avi-0912 Multiples vulnérabilités dans le noyau Linux de SUSE 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0911 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0910 Multiples vulnérabilités dans IBM QRadar 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0909 Multiples vulnérabilités dans Microsoft Edge 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0908 Multiples vulnérabilités dans les produits NetApp 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0907 Multiples vulnérabilités dans Moxa PT-G503 2023-11-03T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0878 Multiples vulnérabilités dans Cisco IOS XE 2023-10-23T00:00:00.000000 2023-11-03T00:00:00.000000
certfr-2023-avi-0906 Multiples vulnérabilités dans les produits Cisco 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0905 Multiples vulnérabilités dans GitLab 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0904 Multiples vulnérabilités dans les produits Tenable 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0903 Vulnérabilité dans VMware Workspace ONE UEM 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0902 Vulnérabilité dans Squid 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0901 Multiples vulnérabilités dans les produits Moxa 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0900 Multiples vulnérabilités dans Nagios XI 2023-11-02T00:00:00.000000 2023-11-02T00:00:00.000000
certfr-2023-avi-0899 Vulnérabilité dans Atlassian Confluence Data Center et Server 2023-10-31T00:00:00.000000 2023-10-31T00:00:00.000000
certfr-2023-avi-0898 Multiples vulnérabilités dans Microsoft Edge 2023-10-30T00:00:00.000000 2023-10-30T00:00:00.000000
certfr-2023-avi-0897 Vulnérabilité dans F5 BIG-IP 2023-10-27T00:00:00.000000 2023-10-27T00:00:00.000000
certfr-2023-avi-0896 Multiples vulnérabilités dans VMware Tools 2023-10-27T00:00:00.000000 2023-10-27T00:00:00.000000
certfr-2023-avi-0895 Multiples vulnérabilités dans le noyau Linux de Ubuntu 2023-10-27T00:00:00.000000 2023-10-27T00:00:00.000000
certfr-2023-avi-0894 Multiples vulnérabilités dans le noyau Linux de SUSE 2023-10-27T00:00:00.000000 2023-10-27T00:00:00.000000
certfr-2023-avi-0827 Multiples vulnérabilités dans Microsoft Windows 2023-10-11T00:00:00.000000 2023-10-27T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated