Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64218 |
7.5 (3.1)
|
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… |
WP Chill |
Passster |
2025-12-18T07:22:12.527Z | 2026-01-20T14:28:20.843Z |
| CVE-2025-64244 |
4.3 (3.1)
|
WordPress Restrict Elementor Widgets, Columns and Sect… |
Codexpert, Inc |
Restrict Elementor Widgets, Columns and Sections |
2025-12-16T08:12:48.528Z | 2026-01-20T14:28:20.451Z |
| CVE-2025-64224 |
7.1 (3.1)
|
WordPress Grand Conference Theme Custom Post Type plug… |
ThemeGoods |
Grand Conference Theme Custom Post Type |
2025-11-06T15:56:10.204Z | 2026-01-20T14:28:20.416Z |
| CVE-2025-64245 |
4.3 (3.1)
|
WordPress Import external attachments plugin <= 1.5.12… |
ryanpcmcquen |
Import external attachments |
2025-12-16T08:12:48.719Z | 2026-01-20T14:28:20.395Z |
| CVE-2025-64207 |
7.1 (3.1)
|
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… |
TieLabs |
Jannah |
2025-12-18T07:22:11.630Z | 2026-01-20T14:28:20.368Z |
| CVE-2025-64243 |
4.3 (3.1)
|
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… |
e-plugins |
Directory Pro |
2025-12-16T08:12:48.343Z | 2026-01-20T14:28:20.367Z |
| CVE-2025-64214 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:12.176Z | 2026-01-20T14:28:20.339Z |
| CVE-2025-64211 |
5.3 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:08.406Z | 2026-01-20T14:28:20.264Z |
| CVE-2025-64223 |
8.1 (3.1)
|
WordPress PenNews theme < 6.7.3 - Local File Inclusion… |
PenciDesign |
PenNews |
2025-12-18T07:22:13.068Z | 2026-01-20T14:28:20.155Z |
| CVE-2025-64217 |
7.1 (3.1)
|
WordPress Photography theme <= 7.7.2 - Cross Site Scri… |
ThemeGoods |
Photography |
2025-12-18T07:22:12.346Z | 2026-01-20T14:28:20.087Z |
| CVE-2025-64226 |
4.3 (3.1)
|
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site … |
colabrio |
Stockie Extra |
2025-10-29T08:38:10.612Z | 2026-01-20T14:28:20.084Z |
| CVE-2025-64221 |
7.1 (3.1)
|
WordPress Reservation Plugin plugin <= 1.6 - Cross Sit… |
designthemes |
Reservation Plugin |
2025-12-18T07:22:12.714Z | 2026-01-20T14:28:20.081Z |
| CVE-2025-64208 |
6.5 (3.1)
|
WordPress Jannah - Extensions plugin <= 1.1.4 - Cross … |
TieLabs |
Jannah - Extensions |
2025-10-29T08:38:07.521Z | 2026-01-20T14:28:20.069Z |
| CVE-2025-64216 |
7.5 (3.1)
|
WordPress SmartMag theme <= 10.3.0 - Local File Inclus… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:09.280Z | 2026-01-20T14:28:20.060Z |
| CVE-2025-64210 |
5.4 (3.1)
|
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… |
StylemixThemes |
Masterstudy Elementor Widgets |
2025-10-29T08:38:07.975Z | 2026-01-20T14:28:20.038Z |
| CVE-2025-64240 |
4.3 (3.1)
|
WordPress Freshchat plugin <= 2.3.4 - Cross Site Reque… |
freshchat |
Freshchat |
2025-12-16T08:12:47.734Z | 2026-01-20T14:28:20.030Z |
| CVE-2025-64204 |
6.5 (3.1)
|
WordPress SmartMag theme <= 10.3.1 - Cross Site Script… |
ThemeSphere |
SmartMag |
2025-10-29T08:38:07.091Z | 2026-01-20T14:28:20.029Z |
| CVE-2025-64235 |
6.5 (3.1)
|
WordPress Tuturn plugin < 3.6 - Arbitrary File Downloa… |
AmentoTech |
Tuturn |
2025-12-18T16:43:47.100Z | 2026-01-20T14:28:20.022Z |
| CVE-2025-64242 |
4.3 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.15 - Br… |
Merv Barrett |
Easy Property Listings |
2025-12-16T08:12:48.141Z | 2026-01-20T14:28:20.007Z |
| CVE-2025-64229 |
4.3 (3.1)
|
WordPress Client Invoicing by Sprout Invoices plugin <… |
BoldGrid |
Client Invoicing by Sprout Invoices |
2025-10-29T08:38:11.498Z | 2026-01-20T14:28:19.998Z |
| CVE-2025-64232 |
7.1 (3.1)
|
WordPress Import from YML plugin <= 3.1.17 - Cross Sit… |
icopydoc |
Import from YML |
2025-11-06T15:56:12.576Z | 2026-01-20T14:28:19.990Z |
| CVE-2025-64213 |
7.5 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensit… |
StylemixThemes |
MasterStudy LMS Pro |
2025-12-18T07:22:11.993Z | 2026-01-20T14:28:19.977Z |
| CVE-2025-64237 |
4.3 (3.1)
|
WordPress Quick Interest Slider plugin <= 3.1.5 - Cros… |
Graham |
Quick Interest Slider |
2025-12-16T08:12:47.167Z | 2026-01-20T14:28:19.971Z |
| CVE-2025-64236 |
9.8 (3.1)
|
WordPress Tuturn plugin < 3.6 - Broken Authentication … |
AmentoTech |
Tuturn |
2025-12-18T16:21:48.796Z | 2026-01-20T14:28:19.967Z |
| CVE-2025-64212 |
5.4 (3.1)
|
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken… |
StylemixThemes |
MasterStudy LMS Pro |
2025-10-29T08:38:08.827Z | 2026-01-20T14:28:19.958Z |
| CVE-2025-64239 |
4.3 (3.1)
|
WordPress RTL Tester plugin <= 1.2 - Cross Site Reques… |
Yoav Farhi |
RTL Tester |
2025-12-16T08:12:47.533Z | 2026-01-20T14:28:19.955Z |
| CVE-2025-64241 |
4.3 (3.1)
|
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broke… |
Imtiaz Rayhan |
WP Coupons and Deals |
2025-12-16T08:12:47.928Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14412 |
7.8 (3.0)
|
Soda PDF Desktop XLS File Insufficient UI Warning Remo… |
Soda PDF |
Desktop |
2025-12-23T21:24:04.860Z | 2025-12-24T15:37:39.350Z |
| CVE-2025-14415 |
7 (3.0)
|
Soda PDF Desktop Launch Insufficient UI Warning Remote… |
Soda PDF |
Desktop |
2025-12-23T21:24:19.116Z | 2026-01-02T13:40:00.488Z |
| CVE-2025-14491 |
7.8 (3.0)
|
RealDefense SUPERAntiSpyware Exposed Dangerous Functio… |
RealDefense |
SUPERAntiSpyware |
2025-12-23T21:17:10.386Z | 2025-12-29T18:04:07.661Z |
| CVE-2025-43017 |
8.5 (4.0)
|
HP ThinPro 8.1 SP8 Security Updates |
HP Inc. |
HP ThinPro 8.1 |
2025-10-28T20:40:19.040Z | 2025-10-30T03:56:02.832Z |
| CVE-2025-46363 |
4.3 (3.1)
|
Dell Secure Connect Gateway (SCG) 5.0 Application… |
Dell |
Secure Connect Gateway SCG 5.0 Application and Appliance |
2025-10-30T15:22:43.106Z | 2025-10-30T16:00:58.601Z |
| CVE-2025-11761 |
8.5 (4.0)
|
HP Client Management Script Library – Security Update |
HP Inc |
HP Client Management Script Library |
2025-11-03T15:13:39.263Z | 2025-11-04T04:55:15.307Z |
| CVE-2025-43990 |
7.3 (3.1)
|
Dell Command Monitor (DCM), versions prior to 10.… |
Dell |
Command Monitor (DCM) |
2025-11-05T17:01:23.986Z | 2025-11-06T04:55:47.809Z |
| CVE-2025-22397 |
6.7 (3.1)
|
Dell Integrated Dell Remote Access Controller 9, … |
Dell |
Integrated Dell Remote Access Controller 9 14G Versions |
2025-11-06T18:46:04.736Z | 2025-11-06T19:30:39.315Z |
| CVE-2026-0960 |
4.7 (3.1)
|
Loop with Unreachable Exit Condition ('Infinite Loop')… |
Wireshark Foundation |
Wireshark |
2026-01-14T20:23:33.849Z | 2026-01-14T21:15:57.975Z |
| CVE-2025-6298 |
6.7 (3.1)
|
ACAP applications can gain elevated privileges du… |
Axis Communications AB |
AXIS OS |
2025-11-11T06:56:50.533Z | 2025-12-11T19:01:16.392Z |
| CVE-2018-25148 |
8.7 (4.0)
8.8 (3.1)
|
Microhard Systems IPn4G 1.1.0 Remote Code Execution vi… |
Microhard Systems |
Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Remote Root Exploit |
2025-12-24T19:27:50.947Z | 2025-12-24T20:25:14.760Z |
| CVE-2025-59480 |
6.1 (3.1)
|
Inadequate validation of SSO redirect credentials perm… |
Mattermost |
Mattermost |
2025-11-13T17:32:04.772Z | 2025-11-13T18:02:26.585Z |
| CVE-2025-12946 |
4.4 (4.0)
|
Improper input validation in NETGEAR Nighthawk routers |
NETGEAR |
RS700 |
2025-12-09T17:02:20.739Z | 2025-12-10T04:57:22.798Z |
| CVE-2025-11531 |
4.8 (4.0)
|
HP System Event Utility and Omen Gaming Hub – Potentia… |
HP Inc |
HP System Event Utility |
2025-12-09T18:29:51.181Z | 2025-12-09T19:26:04.775Z |
| CVE-2020-36883 |
8.8 (4.0)
|
SpinetiX Fusion Digital Signage 3.4.8 Authenticated Pa… |
SpenetiX AG |
Fusion Digital Signage |
2025-12-10T20:47:08.593Z | 2025-12-11T18:54:05.115Z |
| CVE-2025-3950 |
3.5 (3.1)
|
Exposure of Private Personal Information to an Unautho… |
GitLab |
GitLab |
2026-01-09T10:04:51.264Z | 2026-01-09T14:42:21.828Z |
| CVE-2025-24857 |
7.6 (3.1)
|
Improper access control for volatile memory conta… |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2025-12-23T21:00:29.206Z |
| CVE-2026-22794 |
9.7 (3.1)
|
Account Takeover Vulnerability in Appsmith |
appsmithorg |
appsmith |
2026-01-12T21:54:52.803Z | 2026-01-13T19:08:29.794Z |
| CVE-2026-22799 |
9.3 (4.0)
|
emlog Arbitrary File Upload Vulnerability |
emlog |
emlog |
2026-01-12T22:05:01.012Z | 2026-01-13T19:08:11.094Z |
| CVE-2026-22789 |
5.4 (3.1)
|
WebErpMesv2 has a File Upload Validation Bypass Leadin… |
SMEWebify |
WebErpMesv2 |
2026-01-12T21:52:11.880Z | 2026-01-13T19:41:31.721Z |
| CVE-2026-22788 |
8.2 (3.1)
|
WebErpMesv2 allows unauthenticated API Access |
SMEWebify |
WebErpMesv2 |
2026-01-12T21:40:11.913Z | 2026-01-13T19:08:34.529Z |
| CVE-2025-65821 |
7.5 (3.1)
|
As UART download mode is still enabled on the ESP… |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2025-12-11T20:36:05.419Z |
| CVE-2025-65822 |
6.8 (3.1)
|
The ESP32 system on a chip (SoC) that powers the … |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2025-12-11T20:35:56.750Z |
| CVE-2025-65823 |
9.8 (3.1)
|
The Meatmeet Pro was found to be shipped with har… |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2025-12-11T20:35:51.332Z |
| CVE-2025-65824 |
8.8 (3.1)
|
An unauthenticated attacker within proximity of t… |
n/a |
n/a |
2025-12-10T00:00:00.000Z | 2025-12-11T20:35:44.766Z |
| CVE-2026-22695 |
6.1 (3.1)
|
LIBPNG has a heap buffer over-read in png_image_read_d… |
pnggroup |
libpng |
2026-01-12T22:55:40.204Z | 2026-01-13T19:07:10.972Z |
| CVE-2026-22801 |
6.8 (3.1)
|
LIBPNG has an integer truncation causing heap buffer o… |
pnggroup |
libpng |
2026-01-12T22:57:58.288Z | 2026-01-13T19:37:45.414Z |
| CVE-2026-22870 |
7.1 (4.0)
|
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS |
DataDog |
guarddog |
2026-01-13T20:43:43.132Z | 2026-01-13T21:23:53.024Z |
| CVE-2026-22871 |
8.7 (4.0)
|
GuardDog Path Traversal Vulnerability Leads to Arbitra… |
DataDog |
guarddog |
2026-01-13T20:46:57.324Z | 2026-01-13T21:24:07.742Z |
| CVE-2026-0959 |
5.3 (3.1)
|
Out-of-bounds Write in Wireshark |
Wireshark Foundation |
Wireshark |
2026-01-14T20:23:28.986Z | 2026-01-14T21:18:44.677Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-22397 | Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G ver… | 2025-11-06T19:15:41.153 | 2026-01-21T20:07:45.430 |
| fkie_cve-2026-0960 | HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service | 2026-01-14T21:15:52.903 | 2026-01-21T20:07:19.650 |
| fkie_cve-2025-6298 | ACAP applications can gain elevated privileges due to improper input validation, potentially leadin… | 2025-11-11T07:15:35.397 | 2026-01-21T20:06:36.633 |
| fkie_cve-2018-25148 | Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities… | 2025-12-24T20:15:49.367 | 2026-01-21T20:00:58.393 |
| fkie_cve-2025-59480 | Mattermost Mobile Apps versions <=2.32.0 fail to verify that SSO redirect tokens originate from the… | 2025-11-13T18:15:50.703 | 2026-01-21T19:37:37.203 |
| fkie_cve-2025-12946 | A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper … | 2025-12-09T17:15:48.820 | 2026-01-21T19:29:14.017 |
| fkie_cve-2025-11531 | HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of thei… | 2025-12-09T19:15:46.380 | 2026-01-21T19:22:59.903 |
| fkie_cve-2020-36883 | SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerabil… | 2025-12-10T21:15:59.697 | 2026-01-21T19:19:41.713 |
| fkie_cve-2025-3950 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6… | 2026-01-09T10:15:46.310 | 2026-01-21T19:19:06.850 |
| fkie_cve-2025-24857 | Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) … | 2025-12-10T21:16:03.730 | 2026-01-21T19:14:47.067 |
| fkie_cve-2026-22794 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the se… | 2026-01-12T22:16:08.633 | 2026-01-21T19:14:17.880 |
| fkie_cve-2026-22799 | Emlog is an open source website building system. emlog v2.6.1 and earlier exposes a REST API endpoi… | 2026-01-12T22:16:08.930 | 2026-01-21T19:13:49.570 |
| fkie_cve-2026-22789 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to … | 2026-01-12T22:16:08.490 | 2026-01-21T19:11:41.560 |
| fkie_cve-2026-22788 | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to … | 2026-01-12T22:16:08.343 | 2026-01-21T19:11:14.150 |
| fkie_cve-2025-65821 | As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary c… | 2025-12-10T21:16:07.797 | 2026-01-21T19:09:18.830 |
| fkie_cve-2025-65822 | The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By le… | 2025-12-10T21:16:07.910 | 2026-01-21T19:08:19.633 |
| fkie_cve-2025-65823 | The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the … | 2025-12-10T21:16:08.027 | 2026-01-21T19:06:43.440 |
| fkie_cve-2025-65824 | An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Ove… | 2025-12-10T21:16:08.137 | 2026-01-21T19:06:23.157 |
| fkie_cve-2026-22695 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portab… | 2026-01-12T23:15:52.597 | 2026-01-21T18:58:55.787 |
| fkie_cve-2026-22801 | LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portab… | 2026-01-12T23:15:52.907 | 2026-01-21T18:58:18.270 |
| fkie_cve-2026-22870 | GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, GuardDog's safe_extract… | 2026-01-13T21:15:55.067 | 2026-01-21T18:47:48.963 |
| fkie_cve-2026-22871 | GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, there is a path travers… | 2026-01-13T21:15:55.210 | 2026-01-21T18:46:57.057 |
| fkie_cve-2026-0959 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial … | 2026-01-14T21:15:52.753 | 2026-01-21T18:44:54.317 |
| fkie_cve-2026-0961 | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service | 2026-01-14T21:15:53.063 | 2026-01-21T18:43:01.720 |
| fkie_cve-2026-22800 | PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.1… | 2026-01-12T23:15:52.747 | 2026-01-21T18:42:22.607 |
| fkie_cve-2025-68658 | Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP u… | 2026-01-13T22:16:06.293 | 2026-01-21T18:40:12.790 |
| fkie_cve-2024-58339 | LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled reso… | 2026-01-12T23:15:51.630 | 2026-01-21T18:30:26.690 |
| fkie_cve-2025-28953 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T16:15:49.830 | 2026-01-21T18:24:56.097 |
| fkie_cve-2024-58340 | LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS)… | 2026-01-12T23:15:51.780 | 2026-01-21T17:57:56.537 |
| fkie_cve-2025-15514 | Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability i… | 2026-01-12T23:15:51.957 | 2026-01-21T17:52:04.980 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mw6g-37x4-p223 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-mm3g-cv2q-cppg |
7.8 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-mg95-m74x-55j8 |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-hgg9-7rw7-5rhw |
4.3 (3.1)
|
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-gjv2-jq53-mqgq |
8.8 (3.1)
|
Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-cch9-4xf8-89w7 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-c6c4-c7qj-6662 |
8.8 (3.1)
|
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-7r59-p3hg-gf5g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-76jc-c8j2-q66h |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-758v-pprx-jj23 |
8.1 (3.1)
|
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-55cq-cx6m-hv36 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-42p4-5wp9-wj4j |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-3w3w-vwpm-m922 |
4.5 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-387r-w9pc-hjv4 |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:41Z | 2026-01-20T15:32:05Z |
| ghsa-2qh4-8p36-478q |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-242g-9cqh-3jpx |
9.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:05Z |
| ghsa-x5mv-x4w6-8rgw |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-v7r5-h5f3-qwf9 |
4.3 (3.1)
|
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-v3q8-66j8-2mx6 |
4.3 (3.1)
|
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addo… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-v2w2-v8vg-2rqw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-qfjr-hrqq-wvg5 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-p4xm-rh4q-xxwr |
7.6 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-p3xh-3vwq-cmvc |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-mw4h-mh8j-x3ff |
4.3 (3.1)
|
Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-mm38-qj6v-5ph8 |
4.3 (3.1)
|
Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality all… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-jj2r-52x4-38wx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-j6p4-cqq4-vgv7 |
8.1 (3.1)
|
Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-tha… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-j4mf-m27r-fcqq |
4.4 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-hw3r-j5mp-83h8 |
4.3 (3.1)
|
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-hqrr-4x5g-r96q |
7.2 (3.1)
|
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-73 |
|
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3… | zope2 | 2014-09-30T14:55:00Z | 2021-07-25T23:34:58.778006Z |
| pysec-2013-28 |
|
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20… | tryton | 2013-11-18T02:55:00Z | 2021-07-25T23:34:56.639990Z |
| pysec-2014-72 |
|
Transifex command-line client before 0.10 does not validate X.509 certificates for data t… | transifex-client | 2014-05-02T01:59:00Z | 2021-07-25T23:34:56.578427Z |
| pysec-2017-74 |
|
The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute ar… | tqdm | 2017-01-19T20:59:00Z | 2021-07-25T23:34:56.013301Z |
| pysec-2017-73 |
|
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport fi… | sosreport | 2017-11-06T17:29:00Z | 2021-07-25T23:34:55.577295Z |
| pysec-2017-72 |
|
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local … | sosreport | 2017-07-25T18:29:00Z | 2021-07-25T23:34:55.539428Z |
| pysec-2016-23 |
|
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, whic… | salt | 2016-04-12T14:59:00Z | 2021-07-25T23:34:53.906248Z |
| pysec-2017-71 |
|
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.… | salt | 2017-08-09T16:29:00Z | 2021-07-25T23:34:53.862989Z |
| pysec-2017-70 |
|
salt before 2015.5.5 leaks git usernames and passwords to the log. | salt | 2017-10-10T16:29:00Z | 2021-07-25T23:34:53.773176Z |
| pysec-2013-27 |
|
Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impa… | salt | 2013-11-05T18:55:00Z | 2021-07-25T23:34:53.727680Z |
| pysec-2013-26 |
|
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate t… | salt | 2013-11-05T18:55:00Z | 2021-07-25T23:34:53.687508Z |
| pysec-2015-33 |
|
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sen… | rhodecode | 2015-02-16T15:59:00Z | 2021-07-25T23:34:53.466212Z |
| pysec-2015-32 |
|
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API … | rhodecode | 2015-02-16T15:59:00Z | 2021-07-25T23:34:53.419876Z |
| pysec-2017-69 |
|
Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the … | restkit | 2017-08-09T18:29:00Z | 2021-07-25T23:34:53.240479Z |
| pysec-2017-68 |
|
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.… | recurly | 2017-11-13T17:29:00Z | 2021-07-25T23:34:52.943535Z |
| pysec-2013-25 |
|
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matc… | qpid-python | 2013-08-23T16:55:00Z | 2021-07-25T23:34:52.564224Z |
| pysec-2016-22 |
|
OpenStack Murano before 1.0.3 (liberty) and 2.x before 2.0.1 (mitaka), Murano-dashboard b… | python-muranoclient | 2016-09-26T16:59:00Z | 2021-07-25T23:34:52.302342Z |
| pysec-2015-31 |
|
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystonec… | python-keystoneclient | 2015-04-17T17:59:00Z | 2021-07-25T23:34:52.173858Z |
| pysec-2014-71 |
|
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x b… | python-keystoneclient | 2014-10-02T14:55:00Z | 2021-07-25T23:34:52.128374Z |
| pysec-2014-70 |
|
The auth_token middleware in the OpenStack Python client library for Keystone (aka python… | python-keystoneclient | 2014-04-15T14:55:00Z | 2021-07-25T23:34:52.050807Z |
| pysec-2019-161 |
|
python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass | python-keystoneclient | 2019-12-10T15:15:00Z | 2021-07-25T23:34:52.007420Z |
| pysec-2014-69 |
|
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not prop… | python-keystoneclient | 2014-01-21T18:55:00Z | 2021-07-25T23:34:51.958825Z |
| pysec-2013-24 |
|
The user-password-update command in python-keystoneclient before 0.2.4 accepts the new pa… | python-keystoneclient | 2013-10-01T20:55:00Z | 2021-07-25T23:34:51.897352Z |
| pysec-2016-21 |
|
python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entit… | python-docx | 2016-12-21T22:59:00Z | 2021-07-25T23:34:51.683518Z |
| pysec-2017-67 |
|
PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafte… | pysaml2 | 2017-03-03T15:59:00Z | 2021-07-25T23:34:51.281897Z |
| pysec-2017-66 |
|
The checkPassword function in python-kerberos does not authenticate the KDC it attempts t… | pykerberos | 2017-08-25T18:29:00Z | 2021-07-25T23:34:51.016854Z |
| pysec-2012-11 |
|
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows… | pyfribidi | 2012-08-26T20:55:00Z | 2021-07-25T23:34:50.398385Z |
| pysec-2017-65 |
|
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. | protobuf | 2017-09-25T17:29:00Z | 2021-07-25T23:34:50.202612Z |
| pysec-2014-68 |
|
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators … | products-cmfplone | 2014-05-02T14:55:00Z | 2021-07-25T23:34:50.085881Z |
| pysec-2014-67 |
|
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to ob… | products-cmfplone | 2014-05-02T14:55:00Z | 2021-07-25T23:34:50.035277Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3539 | A vulnerability was found in Campcodes Church Management System 1.0. It has been declared… | 2024-04-11T05:03:27.429083Z |
| gsd-2024-3445 | A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been de… | 2024-04-11T05:03:27.428338Z |
| gsd-2024-3272 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which w… | 2024-04-11T05:03:27.427501Z |
| gsd-2024-3567 | A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() … | 2024-04-11T05:03:27.426639Z |
| gsd-2024-3586 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.426280Z |
| gsd-2024-3583 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425833Z |
| gsd-2024-3433 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425332Z |
| gsd-2024-3336 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425049Z |
| gsd-2024-3602 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.424846Z |
| gsd-2024-3355 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.424056Z |
| gsd-2024-3310 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.422435Z |
| gsd-2024-3401 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.421566Z |
| gsd-2024-3332 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420637Z |
| gsd-2024-3651 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420421Z |
| gsd-2024-3525 | A vulnerability, which was classified as problematic, was found in Campcodes Online Event… | 2024-04-11T05:03:27.419761Z |
| gsd-2024-3546 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.417751Z |
| gsd-2024-3366 | A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This … | 2024-04-11T05:03:27.416780Z |
| gsd-2024-3425 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0.… | 2024-04-11T05:03:27.414444Z |
| gsd-2024-3491 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cr… | 2024-04-11T05:03:27.414151Z |
| gsd-2024-3407 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.413703Z |
| gsd-2024-3335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.412287Z |
| gsd-2024-3321 | A vulnerability classified as problematic has been found in SourceCodester eLearning Syst… | 2024-04-11T05:03:27.409204Z |
| gsd-2024-3635 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.408596Z |
| gsd-2024-3282 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.407546Z |
| gsd-2024-3273 | ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which w… | 2024-04-11T05:03:27.405268Z |
| gsd-2024-3367 | Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p25 and <2… | 2024-04-11T05:03:27.404908Z |
| gsd-2024-3333 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Sit… | 2024-04-11T05:03:27.404703Z |
| gsd-2024-3444 | A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified… | 2024-04-11T05:03:27.403753Z |
| gsd-2024-3504 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402916Z |
| gsd-2024-3403 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402703Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-10372 | Malicious code in nuest (PyPI) | 2024-11-05T08:57:58Z | 2025-12-11T09:27:53Z |
| mal-2024-10371 | Malicious code in nuerst (PyPI) | 2024-11-05T08:55:36Z | 2025-12-11T09:27:53Z |
| mal-2024-10370 | Malicious code in nerst (PyPI) | 2024-11-05T08:57:47Z | 2025-12-11T09:27:53Z |
| mal-2024-10360 | Malicious code in lightsequ (PyPI) | 2024-11-05T08:18:38Z | 2025-12-11T09:27:53Z |
| mal-2024-10359 | Malicious code in lightseqe (PyPI) | 2024-11-05T08:16:03Z | 2025-12-11T09:27:53Z |
| mal-2024-10159 | Malicious code in rolib (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10158 | Malicious code in roinject (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10157 | Malicious code in rodll (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10154 | Malicious code in reqests-2 (PyPI) | 2024-08-05T22:17:40Z | 2025-12-11T09:27:53Z |
| mal-2024-10152 | Malicious code in redis-di-processor (PyPI) | 2024-08-23T21:20:09Z | 2025-12-11T09:27:53Z |
| mal-2024-10148 | Malicious code in pyunzip (PyPI) | 2024-08-23T15:57:10Z | 2025-12-11T09:27:53Z |
| mal-2024-10146 | Malicious code in pytyon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10145 | Malicious code in pytuon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10144 | Malicious code in pytrv (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10143 | Malicious code in pytonn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10142 | Malicious code in pytojn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10140 | Malicious code in pytohn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10139 | Malicious code in pytoh (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10138 | Malicious code in pytnon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10137 | Malicious code in pytjon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10136 | Malicious code in pytiom (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10135 | Malicious code in pytiob (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10134 | Malicious code in pythun (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10133 | Malicious code in python-guild (PyPI) | 2024-07-03T17:04:18Z | 2025-12-11T09:27:53Z |
| mal-2024-10131 | Malicious code in pythom (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10130 | Malicious code in pythob (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10129 | Malicious code in pythn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10128 | Malicious code in pythkn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10127 | Malicious code in pytgon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10126 | Malicious code in pytbon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1691 | Apache Struts: Schwachstelle ermöglicht Manipulation | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1690 | Acronis Cyber Protect Cloud Agent: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1689 | Mattermost Server: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1688 | SUSE Manager: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1687 | Devolutions Server: Mehrere Schwachstellen | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1685 | HP LaserJet: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1683 | Apple Safari: Mehrere Schwachstellen | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1682 | Dell ECS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-30T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1677 | Absolute Secure Access: Mehrere Schwachstellen | 2025-07-29T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1067 | Red Hat Satellite: Schwachstelle ermöglicht Denial of Service | 2025-05-14T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2024-3688 | Red Hat Enterprise Linux (Ceph Storage): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-11T23:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2024-1913 | Red Hat OpenShift Container Platform: Mehrere Schwachstellen | 2024-08-22T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2024-1788 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-08-07T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2023-0918 | Apache Struts: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2014-05-06T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2023-0917 | Apache Commons Beanutils: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2019-08-28T22:00:00.000+00:00 | 2025-07-30T22:00:00.000+00:00 |
| wid-sec-w-2025-1680 | Insyde BIOS (Lenovo): Mehrere Schwachstellen | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1678 | Autodesk Produkte: Mehrere Schwachstellen | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1676 | IGEL UMS: Schwachstelle ermöglicht Cross-Site Scripting | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1674 | HCL BigFix Remote Control Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1671 | VMware vCenter Server und Cloud Foundation: Schwachstelle ermöglicht Denial of Service | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1670 | SonicWall SSL-VPN SonicOS Gen7 Firewall: Schwachstelle ermöglicht Denial of Service | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1668 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2025-07-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1661 | Palo Alto Networks GlobalProtect App: Schwachstelle ermöglicht Denial of Service | 2025-07-28T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0901 | Mozilla Firefox, Firefox ESR, Thunderbird and Thunderbird ESR: Mehrere Schwachstellen | 2025-04-29T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3569 | Red Hat Enterprise Linux (python-tornado): Schwachstelle ermöglicht Denial of Service | 2024-12-01T23:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3056 | Diffie-Hellman Implementierungen: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-30T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2024-1896 | Ruby: Schwachstelle ermöglicht Denial of Service | 2024-08-21T22:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2024-0005 | QEMU: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-02T23:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2023-0890 | libcurl: Mehrere Schwachstellen | 2018-01-24T23:00:00.000+00:00 | 2025-07-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1666 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-07-28T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:10907 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.13 | 2024-12-10T08:27:59+00:00 | 2026-01-21T23:20:16+00:00 |
| rhsa-2024:10895 | Red Hat Security Advisory: Cost Management Metrics Operator Update | 2024-12-09T19:09:42+00:00 | 2026-01-21T23:20:13+00:00 |
| rhsa-2024:10883 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (osp-director-operator) security update | 2024-12-09T12:11:16+00:00 | 2026-01-21T23:20:13+00:00 |
| rhsa-2024:10865 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.1 bug fixes and container updates | 2024-12-05T19:46:00+00:00 | 2026-01-21T23:20:12+00:00 |
| rhsa-2024:10839 | Red Hat Security Advisory: OpenShift Container Platform 4.15.41 bug fix and security update | 2024-12-12T01:47:43+00:00 | 2026-01-21T23:20:06+00:00 |
| rhsa-2024:10766 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update | 2024-12-03T19:25:06+00:00 | 2026-01-21T23:20:04+00:00 |
| rhsa-2024:10762 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-12-03T16:20:16+00:00 | 2026-01-21T23:20:04+00:00 |
| rhsa-2024:10665 | Red Hat Security Advisory: ACS 4.4 enhancement and security update | 2024-12-02T11:23:09+00:00 | 2026-01-21T23:20:02+00:00 |
| rhsa-2024:10517 | Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security and extras update | 2024-12-03T08:24:26+00:00 | 2026-01-21T23:20:00+00:00 |
| rhsa-2024:10236 | Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.17.0 release | 2024-11-25T19:44:38+00:00 | 2026-01-21T23:19:54+00:00 |
| rhsa-2024:10214 | Red Hat Security Advisory: Red Hat Data Grid 8.5.2 security update | 2024-11-25T16:56:04+00:00 | 2026-01-21T23:19:54+00:00 |
| rhsa-2024:10183 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.8 bug fixes and container updates | 2024-11-21T23:23:53+00:00 | 2026-01-21T23:19:53+00:00 |
| rhsa-2024:10179 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.8 bug fixes and container updates | 2024-11-21T21:05:09+00:00 | 2026-01-21T23:19:51+00:00 |
| rhsa-2024:0855 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-02-19T01:16:12+00:00 | 2026-01-21T23:19:44+00:00 |
| rhsa-2024:0797 | Red Hat Security Advisory: Satellite 6.14.2 Async Security Update | 2024-02-13T14:45:57+00:00 | 2026-01-21T23:19:41+00:00 |
| rhsa-2024:0793 | Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.3 release security update | 2024-02-12T18:01:12+00:00 | 2026-01-21T23:19:41+00:00 |
| rhsa-2024:0789 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final) | 2024-02-12T16:02:02+00:00 | 2026-01-21T23:19:40+00:00 |
| rhsa-2024:0722 | Red Hat Security Advisory: Red Hat build of Quarkus 3.2.10 release and security update | 2024-02-12T15:24:12+00:00 | 2026-01-21T23:19:34+00:00 |
| rhsa-2024:0606 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:59:23+00:00 | 2026-01-21T23:19:33+00:00 |
| rhsa-2024:0628 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:48:54+00:00 | 2026-01-21T23:19:30+00:00 |
| rhsa-2024:0625 | Red Hat Security Advisory: libssh security update | 2024-01-31T08:36:02+00:00 | 2026-01-21T23:19:29+00:00 |
| rhsa-2024:0594 | Red Hat Security Advisory: openssh security update | 2024-01-30T14:13:55+00:00 | 2026-01-21T23:19:27+00:00 |
| rhsa-2024:0538 | Red Hat Security Advisory: libssh security update | 2024-01-29T11:50:44+00:00 | 2026-01-21T23:19:27+00:00 |
| rhsa-2024:0499 | Red Hat Security Advisory: libssh security update | 2024-01-25T15:36:48+00:00 | 2026-01-21T23:19:25+00:00 |
| rhsa-2024:0474 | Red Hat Security Advisory: tomcat security update | 2024-01-25T10:59:50+00:00 | 2026-01-21T23:19:22+00:00 |
| rhsa-2024:0455 | Red Hat Security Advisory: openssh security update | 2024-01-25T09:21:45+00:00 | 2026-01-21T23:19:20+00:00 |
| rhsa-2024:0429 | Red Hat Security Advisory: openssh security update | 2024-01-25T08:14:09+00:00 | 2026-01-21T23:19:20+00:00 |
| rhsa-2024:0387 | Red Hat Security Advisory: php:8.1 security update | 2024-01-24T09:59:57+00:00 | 2026-01-21T23:19:19+00:00 |
| rhsa-2024:0125 | Red Hat Security Advisory: tomcat security update | 2024-01-10T11:32:48+00:00 | 2026-01-21T23:19:17+00:00 |
| rhsa-2023:7678 | Red Hat Security Advisory: Red Hat AMQ Streams 2.6.0 release and security update | 2023-12-06T23:30:39+00:00 | 2026-01-21T23:19:12+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-324-05 | Mitsubishi Electric MELSEC iQ-R Series (Update C) | 2020-11-19T00:00:00.000000Z | 2021-12-16T00:00:00.000000Z |
| icsma-21-152-01 | Hillrom Medical Device Management (Update B) | 2021-06-01T00:00:00.000000Z | 2021-12-14T00:00:00.000000Z |
| icsa-21-348-01 | Advantech R-SeeNet | 2021-12-14T00:00:00.000000Z | 2021-12-14T00:00:00.000000Z |
| icsma-21-343-01 | Hillrom Welch Allyn Cardio Products | 2021-12-09T00:00:00.000000Z | 2021-12-09T00:00:00.000000Z |
| icsa-21-343-02 | WECON LeviStudioU | 2021-12-09T00:00:00.000000Z | 2021-12-09T00:00:00.000000Z |
| icsa-21-343-01 | Hitachi Energy GMS600, PWC600, and Relion | 2021-12-09T00:00:00.000000Z | 2021-12-09T00:00:00.000000Z |
| icsa-21-341-02 | Hitachi Energy XMC20 and FOX61x | 2021-12-07T00:00:00.000000Z | 2021-12-07T00:00:00.000000Z |
| icsa-21-341-01 | Hitachi Energy RTU500 OpenLDAP | 2021-12-07T00:00:00.000000Z | 2021-12-07T00:00:00.000000Z |
| icsa-21-336-08 | Hitachi Energy RTU500 series | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-07 | Hitachi Energy PCM600 Update Manager | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-06 | Hitachi Energy APM Edge | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-04 | Hitachi Energy RTU500 series BCI | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-03 | Distributed Data Systems WebHMI | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-02 | Johnson Controls Entrapass | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-336-01 | Schneider Electric SESU | 2021-12-02T00:00:00.000000Z | 2021-12-02T00:00:00.000000Z |
| icsa-21-334-05 | Hitachi Energy Retail Operations and CSB Software | 2021-11-30T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsa-21-334-04 | Johnson Controls CEM Systems AC2000 | 2021-11-30T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsa-21-334-03 | Delta Electronics CNCSoft | 2021-11-30T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsa-21-334-01 | Xylem Aanderaa GeoView | 2021-11-30T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsa-21-280-05 | InHand Networks IR615 Router (Update A) | 2021-10-07T00:00:00.000000Z | 2021-11-30T00:00:00.000000Z |
| icsma-21-322-02 | Philips Patient Information Center iX (PIC iX) and Efficia CM Series | 2021-11-18T00:00:00.000000Z | 2021-11-18T00:00:00.000000Z |
| icsma-21-322-01 | Philips IntelliBridge EC 40 and EC 80 Hub | 2021-11-18T00:00:00.000000Z | 2021-11-18T00:00:00.000000Z |
| icsa-20-084-01 | VISAM Automation Base (VBASE) (Update B) | 2020-03-24T00:00:00.000000Z | 2021-11-18T00:00:00.000000Z |
| icsa-21-320-02 | Mitsubishi Electric GOT products | 2021-11-16T00:00:00.000000Z | 2021-11-16T00:00:00.000000Z |
| icsa-21-320-01 | FATEK Automation WinProladder | 2021-11-16T00:00:00.000000Z | 2021-11-16T00:00:00.000000Z |
| icsa-21-315-01 | WECON PLC Editor | 2021-11-11T00:00:00.000000Z | 2021-11-11T00:00:00.000000Z |
| icsa-21-042-01 | Multiple Embedded TCP/IP Stacks (Update B) | 2021-02-11T00:00:00.000000Z | 2021-11-11T00:00:00.000000Z |
| icsma-21-313-01 | Philips MRI 1.5T and 3T | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-06 | OSIsoft PI Web API | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-05 | OSIsoft PI Vision | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180418-wlc | Cisco Wireless LAN Controller Default Simple Network Management Protocol Community Strings | 2018-04-18T16:00:00+00:00 | 2018-04-23T21:00:00+00:00 |
| cisco-sa-20180418-asa2 | Cisco Adaptive Security Appliance Flow Creation Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-23T16:41:00+00:00 |
| cisco-sa-20180418-asawvpn | Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-20T12:43:00+00:00 |
| cisco-sa-20180418-webcon | Cisco WebEx Connect IM Cross-Site Scripting Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-uscd | Cisco UCS Director Virtual Machine Information Disclosure Vulnerability for End User Portal | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-ucm1 | Cisco Unified Communications Manager LDAP Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-ucm | Cisco Unified Communications Manager HTTP Interface Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-starosasr | Cisco StarOS IPsec Manager Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-staros | Cisco StarOS Interface Forwarding Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-pdng | Cisco Packet Data Network Gateway Peer-to-Peer Message Processing Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-mate1 | Cisco MATE Live Directory Information Disclosure Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-mate | Cisco MATE Collector Cross-Site Request Forgery Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-iosxr | Cisco IOS XR Software UDP Broadcast Forwarding Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-iess | Cisco Industrial Ethernet Switches Device Manager Cross-Site Request Forgery Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-fss2 | Cisco Firepower System Software Intelligent Application Bypass Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-fss1 | Cisco Firepower System Software Server Message Block File Policy Bypass Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-fss | Cisco Firepower System Software Server Message Block File Policy Bypass Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-fp2100 | Cisco Firepower 2100 Series Security Appliances IP Fragmentation Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-firepower | Cisco Firepower Threat Defense SSL Engine High CPU Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-dna1 | Cisco DNA Center Cross Origin Resource Sharing Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-cbr8 | Cisco cBR Series Converged Broadband Routers High CPU Usage Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-asawvpn2 | Cisco Adaptive Security Appliance Clientless SSL VPN Cross-Site Scripting Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-asa_inspect | Cisco Adaptive Security Appliance Application Layer Protocol Inspection Denial of Service Vulnerabilities | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-asa3 | Cisco Adaptive Security Appliance TLS Denial of Service Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180418-amp | Cisco AMP for Endpoints macOS Connector DMG File Malware Bypass Vulnerability | 2018-04-18T16:00:00+00:00 | 2018-04-18T16:00:00+00:00 |
| cisco-sa-20180328-xepriv | Cisco IOS XE Software Web UI Remote Access Privilege Escalation Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-wfw | Cisco IOS XE Software Arbitrary File Write Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-webuixss | Cisco IOS XE Software Web UI Cross-Site Scripting Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-snmp-dos | Cisco IOS XE Software Simple Network Management Protocol Double-Free Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-sisf | Cisco IOS XE Software Switch Integrated Security Features IPv6 Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-43666 | A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0. | 2022-03-02T00:00:00.000Z | 2025-09-04T00:22:28.000Z |
| msrc_cve-2019-20352 | In Netwide Assembler (NASM) 2.15rc0, a heap-based buffer over-read occurs (via a crafted .asm file) in set_text_free when called from expand_one_smacro in asm/preproc.c. | 2020-01-02T00:00:00.000Z | 2025-09-04T00:19:41.000Z |
| msrc_cve-2024-53221 | f2fs: fix null-ptr-deref in f2fs_submit_page_bio() | 2024-12-02T00:00:00.000Z | 2025-09-04T00:18:53.000Z |
| msrc_cve-2025-55198 | Helm May Panic Due To Incorrect YAML Content | 2025-08-02T00:00:00.000Z | 2025-09-04T00:18:06.000Z |
| msrc_cve-2024-57950 | drm/amd/display: Initialize denominator defaults to 1 | 2025-02-02T00:00:00.000Z | 2025-09-04T00:17:33.000Z |
| msrc_cve-2025-58058 | github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives | 2025-08-02T00:00:00.000Z | 2025-09-04T00:16:28.000Z |
| msrc_cve-2022-48434 | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used). | 2023-03-10T00:00:00.000Z | 2025-09-04T00:15:51.000Z |
| msrc_cve-2025-53859 | NGINX ngx_mail_smtp_module vulnerability | 2025-08-02T00:00:00.000Z | 2025-09-04T00:15:43.000Z |
| msrc_cve-2025-38098 | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 2025-07-02T00:00:00.000Z | 2025-09-04T00:15:29.000Z |
| msrc_cve-2022-3637 | Linux Kernel BlueZ jlink.c jlink_init denial of service | 2022-10-02T00:00:00.000Z | 2025-09-04T00:15:11.000Z |
| msrc_cve-2023-52749 | spi: Fix null dereference on suspend | 2024-05-02T07:00:00.000Z | 2025-09-04T00:14:51.000Z |
| msrc_cve-2025-3277 | An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size ~4GB can be triggered. This can result in arbitrary code execution. | 2025-04-02T00:00:00.000Z | 2025-09-04T00:14:10.000Z |
| msrc_cve-2024-26308 | Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file | 2024-02-02T08:00:00.000Z | 2025-09-04T00:13:43.000Z |
| msrc_cve-2025-6052 | Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring | 2025-06-02T00:00:00.000Z | 2025-09-04T00:13:38.000Z |
| msrc_cve-2023-29406 | Insufficient sanitization of Host header in net/http | 2023-07-01T07:00:00.000Z | 2025-09-04T00:12:26.000Z |
| msrc_cve-2023-5176 | Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. | 2023-09-01T00:00:00.000Z | 2025-09-04T00:11:43.000Z |
| msrc_cve-2023-27119 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild. | 2023-03-10T00:00:00.000Z | 2025-09-04T00:10:52.000Z |
| msrc_cve-2025-5889 | juliangruber brace-expansion index.js expand redos | 2025-06-02T00:00:00.000Z | 2025-09-04T00:10:37.000Z |
| msrc_cve-2019-1547 | ECDSA remote timing attack | 2019-09-02T00:00:00.000Z | 2025-09-04T00:10:29.000Z |
| msrc_cve-2024-26718 | dm-crypt, dm-verity: disable tasklets | 2024-04-02T07:00:00.000Z | 2025-09-04T00:09:48.000Z |
| msrc_cve-2025-8715 | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server | 2025-08-02T00:00:00.000Z | 2025-09-04T00:09:05.000Z |
| msrc_cve-2023-45290 | Memory exhaustion in multipart form parsing in net/textproto and net/http | 2024-03-02T08:00:00.000Z | 2025-09-04T00:08:16.000Z |
| msrc_cve-2021-32256 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c. | 2023-07-01T07:00:00.000Z | 2025-09-04T00:08:01.000Z |
| msrc_cve-2025-23132 | f2fs: quota: fix to avoid warning in dquot_writeback_dquots() | 2025-04-02T00:00:00.000Z | 2025-09-04T00:07:59.000Z |
| msrc_cve-2022-49496 | media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko | 2025-02-02T00:00:00.000Z | 2025-09-04T00:07:01.000Z |
| msrc_cve-2025-29087 | In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory. | 2025-04-02T00:00:00.000Z | 2025-09-04T00:06:55.000Z |
| msrc_cve-2016-6210 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | 2017-02-02T00:00:00.000Z | 2025-09-04T00:05:57.000Z |
| msrc_cve-2024-45781 | Grub2: fs/ufs: oob write in the heap | 2025-02-02T00:00:00.000Z | 2025-09-04T00:05:26.000Z |
| msrc_cve-2024-26687 | xen/events: close evtchn after mapping cleanup | 2024-04-02T07:00:00.000Z | 2025-09-04T00:03:52.000Z |
| msrc_cve-2025-8714 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client | 2025-08-02T00:00:00.000Z | 2025-09-04T00:03:47.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202501-1334 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionalit… | 2025-11-18T15:11:59.895000Z |
| var-202501-1336 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionalit… | 2025-11-18T15:11:59.874000Z |
| var-202501-1335 | Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionalit… | 2025-11-18T15:11:59.853000Z |
| var-202501-1357 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() funct… | 2025-11-18T15:11:59.831000Z |
| var-202501-1359 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() funct… | 2025-11-18T15:11:59.810000Z |
| var-202501-1358 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() funct… | 2025-11-18T15:11:59.788000Z |
| var-202506-0643 | In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-admi… | 2025-11-18T15:11:53.753000Z |
| var-202507-2455 | An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the d… | 2025-11-18T15:11:53.093000Z |
| var-202507-2459 | A high privileged remote attacker can execute arbitrary system commands via GET requests … | 2025-11-18T15:11:53.074000Z |
| var-202507-2461 | A high privileged remote attacker can gain persistent XSS via POST requests due to improp… | 2025-11-18T15:11:53.058000Z |
| var-202507-2458 | A high privileged remote attacker can exhaust critical system resources by sending specif… | 2025-11-18T15:11:53.038000Z |
| var-202507-2454 | A high privileged remote attacker can alter the configuration database via POST requests … | 2025-11-18T15:11:53.021000Z |
| var-202507-2457 | A high privileged remote attacker can execute arbitrary system commands via POST requests… | 2025-11-18T15:11:53.005000Z |
| var-202507-2456 | A high privileged remote attacker can execute arbitrary system commands via POST requests… | 2025-11-18T15:11:52.989000Z |
| var-202507-2460 | A high privileged remote attacker can exhaust critical system resources by sending specif… | 2025-11-18T15:11:52.973000Z |
| var-202510-0256 | A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown… | 2025-11-18T15:11:50.677000Z |
| var-201106-0084 | The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management … | 2025-11-18T15:09:25.901000Z |
| var-201405-0281 | Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic s… | 2025-11-18T15:07:46.994000Z |
| var-201405-0280 | Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic s… | 2025-11-18T15:07:46.943000Z |
| var-201408-0101 | Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses we… | 2025-11-18T15:07:14.311000Z |
| var-201408-0351 | SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Por… | 2025-11-18T15:07:14.268000Z |
| var-201408-0350 | Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows … | 2025-11-18T15:07:14.225000Z |
| var-201408-0349 | Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Ser… | 2025-11-18T15:07:14.176000Z |
| var-201408-0102 | Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses we… | 2025-11-18T15:07:14.132000Z |
| var-201409-0721 | Multiple stack-based buffer overflows in Schneider Electric VAMPSET 2.2.136 and earlier a… | 2025-11-18T15:07:13.689000Z |
| var-201501-0115 | Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows a… | 2025-11-18T15:07:10.287000Z |
| var-201501-0116 | Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16… | 2025-11-18T15:07:10.100000Z |
| var-201502-0105 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.… | 2025-11-18T15:07:10.015000Z |
| var-201504-0262 | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Netw… | 2025-11-18T15:07:08.690000Z |
| var-201512-0223 | Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.… | 2025-11-18T15:07:00.107000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000037 | Clipboard contents alteration vulnerability in Internet Explorer | 2011-06-16T12:18+09:00 | 2011-06-16T12:18+09:00 |
| jvndb-2011-000036 | Microsoft Windows VBScript implementation file name disclosure vulnerability | 2011-06-16T12:11+09:00 | 2011-06-16T12:11+09:00 |
| jvndb-2008-000072 | Movable Type cross-site scripting vulnerability | 2008-10-21T19:25+09:00 | 2011-05-31T10:57+09:00 |
| jvndb-2011-000024 | Multiple Yamaha routers vulnerable to denial-of-service (DoS) | 2011-05-11T08:32+09:00 | 2011-05-31T10:39+09:00 |
| jvndb-2011-000032 | WalRack upload file handilng vulnerability | 2011-05-26T13:37+09:00 | 2011-05-26T13:37+09:00 |
| jvndb-2011-000031 | Movable Type vulnerable to cross-site scripting | 2011-05-25T17:37+09:00 | 2011-05-25T17:37+09:00 |
| jvndb-2011-000030 | iVIEW Suite vulnerable to SQL injection | 2011-05-19T16:49+09:00 | 2011-05-19T16:49+09:00 |
| jvndb-2011-000028 | Virus Buster 2009 key input encryption function vulnerability | 2011-05-17T17:17+09:00 | 2011-05-17T17:17+09:00 |
| jvndb-2011-000026 | Applications that use the Windows Help function may be vulnerable to privilege escalation | 2011-05-13T19:36+09:00 | 2011-05-13T19:36+09:00 |
| jvndb-2011-000027 | La Fonera+ vulnerable to denial-of-service (DoS) | 2011-05-13T19:17+09:00 | 2011-05-13T19:17+09:00 |
| jvndb-2011-000029 | EC-CUBE vulnerable to cross-site request forgery | 2011-05-11T08:44+09:00 | 2011-05-11T08:44+09:00 |
| jvndb-2011-000025 | Multiple Buffalo routers vulnerable to cross-site request forgery | 2011-05-11T08:37+09:00 | 2011-05-11T08:37+09:00 |
| jvndb-2011-000023 | Password Vault Web Access vulnerable to cross-site scripting | 2011-04-08T14:09+09:00 | 2011-04-08T14:09+09:00 |
| jvndb-2011-001156 | Hitachi Tuning Manager Software Cross-Site Scripting Vulnerability | 2011-04-01T15:52+09:00 | 2011-04-01T15:52+09:00 |
| jvndb-2011-000022 | Picasa may insecurely load executable files | 2011-03-28T08:11+09:00 | 2011-03-28T08:11+09:00 |
| jvndb-2011-000021 | e107 vulnerable to cross-site scripting | 2011-03-28T08:06+09:00 | 2011-03-28T08:06+09:00 |
| jvndb-2011-001145 | JP1/NETM/DM Denial of Service (DoS) Vulnerability | 2011-03-08T10:25+09:00 | 2011-03-08T10:25+09:00 |
| jvndb-2011-000019 | OTRS vulnerable to OS command injection | 2011-03-07T18:19+09:00 | 2011-03-07T18:19+09:00 |
| jvndb-2011-000015 | Multiple Things CGI products vulnerable to cross-site scripting | 2011-03-02T17:27+09:00 | 2011-03-02T17:27+09:00 |
| jvndb-2011-000014 | SEIL Series routers vulnerable to buffer overflow | 2011-02-28T17:17+09:00 | 2011-02-28T17:17+09:00 |
| jvndb-2011-000012 | Lunascape may insecurely load executable files | 2011-02-23T15:41+09:00 | 2011-02-23T15:41+09:00 |
| jvndb-2011-000013 | F-Secure Internet Gatekeeper for Linux authentication issue | 2011-02-17T10:27+09:00 | 2011-02-17T10:27+09:00 |
| jvndb-2011-000011 | EC-CUBE vulnerable to cross-site scripting | 2011-02-02T14:54+09:00 | 2011-02-02T14:54+09:00 |
| jvndb-2011-000010 | Opera may insecurely load executable files | 2011-02-02T14:53+09:00 | 2011-02-02T14:53+09:00 |
| jvndb-2010-000054 | Flash Player access restriction bypass vulnerability | 2010-11-09T19:59+09:00 | 2011-02-01T16:22+09:00 |
| jvndb-2011-000009 | MODx Evolution vulnerable to directory traversal | 2011-01-26T15:52+09:00 | 2011-01-26T15:52+09:00 |
| jvndb-2011-000008 | MODx Evolution vulnerable to SQL injection | 2011-01-26T15:46+09:00 | 2011-01-26T15:46+09:00 |
| jvndb-2011-000004 | Lunascape may insecurely load dynamic libraries | 2011-01-21T18:30+09:00 | 2011-01-21T18:30+09:00 |
| jvndb-2011-000007 | Cisco Linksys WRT54GC vulnerable to buffer overflow | 2011-01-21T18:22+09:00 | 2011-01-21T18:22+09:00 |
| jvndb-2011-000006 | Cross-site scripting vulnerability in multiple Rocomotion products | 2011-01-18T17:51+09:00 | 2011-01-18T17:51+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1468-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-05-06T09:06:57Z | 2025-05-06T09:06:57Z |
| suse-su-2025:1466-1 | Security update for rabbitmq-server | 2025-05-06T06:06:37Z | 2025-05-06T06:06:37Z |
| suse-su-2025:1465-1 | Security update for apache2-mod_auth_openidc | 2025-05-05T21:04:37Z | 2025-05-05T21:04:37Z |
| suse-su-2025:1464-1 | Security update for ImageMagick | 2025-05-05T18:49:06Z | 2025-05-05T18:49:06Z |
| suse-su-2025:1463-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-05-05T12:06:27Z | 2025-05-05T12:06:27Z |
| suse-su-2025:1457-1 | Security update for glib2 | 2025-05-05T10:56:39Z | 2025-05-05T10:56:39Z |
| suse-su-2025:1453-1 | Security update for libva | 2025-05-05T07:44:16Z | 2025-05-05T07:44:16Z |
| suse-su-2025:1452-1 | Security update for libva | 2025-05-05T07:43:59Z | 2025-05-05T07:43:59Z |
| suse-su-2025:1451-1 | Security update for libva | 2025-05-05T07:43:40Z | 2025-05-05T07:43:40Z |
| suse-su-2025:1450-1 | Security update for ffmpeg | 2025-05-05T07:42:43Z | 2025-05-05T07:42:43Z |
| suse-su-2025:1449-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-05-05T07:36:00Z | 2025-05-05T07:36:00Z |
| suse-su-2025:1448-1 | Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) | 2025-05-05T06:37:02Z | 2025-05-05T06:37:02Z |
| suse-su-2025:1445-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) | 2025-05-04T16:10:05Z | 2025-05-04T16:10:05Z |
| suse-su-2025:1444-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-05-04T13:39:40Z | 2025-05-04T13:39:40Z |
| suse-su-2025:1440-1 | Security update for libxml2 | 2025-05-02T13:44:52Z | 2025-05-02T13:44:52Z |
| suse-su-2025:1439-1 | Security update for libxml2 | 2025-05-02T13:44:39Z | 2025-05-02T13:44:39Z |
| suse-su-2025:1438-1 | Security update for libxml2 | 2025-05-02T13:44:11Z | 2025-05-02T13:44:11Z |
| suse-su-2025:1436-1 | Security update for MozillaFirefox | 2025-05-02T13:13:53Z | 2025-05-02T13:13:53Z |
| suse-su-2025:1435-1 | Security update for libxml2 | 2025-05-02T10:39:17Z | 2025-05-02T10:39:17Z |
| suse-su-2025:1434-1 | Security update for poppler | 2025-05-02T10:37:00Z | 2025-05-02T10:37:00Z |
| suse-su-2025:1433-1 | Security update for redis | 2025-05-02T10:23:46Z | 2025-05-02T10:23:46Z |
| suse-su-2025:1432-1 | Security update for redis | 2025-05-02T10:23:30Z | 2025-05-02T10:23:30Z |
| suse-su-2025:1431-1 | Security update for govulncheck-vulndb | 2025-05-02T08:11:07Z | 2025-05-02T08:11:07Z |
| suse-su-2025:1430-1 | Security update for python-h11 | 2025-05-02T08:10:35Z | 2025-05-02T08:10:35Z |
| suse-su-2025:1429-1 | Security update for java-21-openjdk | 2025-05-02T08:10:04Z | 2025-05-02T08:10:04Z |
| suse-su-2025:1425-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-05-01T18:39:32Z | 2025-05-01T18:39:32Z |
| suse-su-2025:1423-1 | Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) | 2025-05-01T16:11:35Z | 2025-05-01T16:11:35Z |
| suse-su-2025:1422-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-04-30T19:09:59Z | 2025-04-30T19:09:59Z |
| suse-su-2025:1420-1 | Security update for redis | 2025-04-30T12:55:40Z | 2025-04-30T12:55:40Z |
| suse-su-2025:1419-1 | Security update for redis | 2025-04-30T12:55:00Z | 2025-04-30T12:55:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13590-1 | tomcat-9.0.85-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13589-1 | libBasicUsageEnvironment2-2023.11.30-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13588-1 | libebml-devel-1.4.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13587-1 | java-17-openjdk-17.0.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13586-1 | grafana-10.1.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13585-1 | ungoogled-chromium-120.0.6099.216-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13584-1 | perl-Spreadsheet-ParseXLSX-0.290.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13583-1 | chromedriver-120.0.6099.216-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13582-1 | SDL2-devel-2.28.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13581-1 | python310-Jinja2-3.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13580-1 | jsch-0.2.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13579-1 | ctdb-4.19.4+git.339.acf1ccaa020-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13578-1 | libuev-devel-2.4.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13577-1 | libpng16-16-1.6.40-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13576-1 | jasper-4.1.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13575-1 | kernel-devel-6.6.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13574-1 | nodejs-electron-27.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13573-1 | tracker-miner-files-3.6.2-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13572-1 | redis-7.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13571-1 | libopenjp2-7-2.5.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13570-1 | syncthing-1.27.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13569-1 | rclone-1.65.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13568-1 | python310-pycryptodomex-3.19.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13567-1 | python310-pycryptodome-3.19.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13566-1 | micropython-1.22.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13565-1 | teleport-14.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13564-1 | python310-httptools-0.6.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13563-1 | python310-Flask-Security-Too-5.3.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13562-1 | libzipios2-2.3.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13561-1 | python310-Flask-Security-Too-5.3.2-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23959 | Online Complaint Site category.php文件SQL注入漏洞 | 2025-10-15 | 2025-10-15 |
| cnvd-2025-23769 | WordPress Fintelligence Calculator plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23768 | WordPress Find Me On plugin SQL注入漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23767 | WordPress Featured Image from URL plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23766 | WordPress FancyTabs plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23765 | WordPress Eulerpool Research Systems plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23764 | WordPress Epic Bootstrap Buttons plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23763 | WordPress Easy Elementor Addons plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23762 | WordPress dbview plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23726 | WordPress Customify plugin跨站请求伪造漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23725 | WordPress Custom Searchable Data Entry System plugin缺少权限漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23724 | WordPress CTL Behance Importer Lite plugin SQL注入漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23723 | WordPress Cost Calculator Builder plugin未授权修改数据漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23722 | WordPress Copypress Rest API plugin代码执行漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23721 | WordPress ContentMX Content Publisher plugin跨站请求伪造漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23720 | WordPress Constructor plugin权限问题漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23719 | WordPress Community Events plugin SQL注入漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23718 | WordPress Comment Info Detector plugin跨站请求伪造漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23717 | WordPress Chatwee plugin跨站请求伪造漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23716 | WordPress Chartify plugin访问控制错误漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23715 | WordPress BP Direct Menus plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-15 |
| cnvd-2025-23714 | IBM OpenPages with Watson加密问题漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23713 | IBM Edge Application Manager代码问题漏洞 | 2025-08-27 | 2025-10-15 |
| cnvd-2025-23712 | IBM Security Verify Governance Identity Manager信息泄露漏洞（CNVD-2025-23712） | 2025-08-29 | 2025-10-15 |
| cnvd-2025-23708 | IBM Cognos Controller和IBM Controller加密问题漏洞 | 2025-09-28 | 2025-10-15 |
| cnvd-2025-23707 | IBM Watsonx.data日志信息泄露漏洞 | 2025-09-29 | 2025-10-15 |
| cnvd-2025-23596 | Huawei部分家用路由器连接劫持漏洞 | 2024-12-30 | 2025-10-15 |
| cnvd-2025-23595 | Huawei PCs身份验证绕过漏洞 | 2025-04-16 | 2025-10-15 |
| cnvd-2025-23594 | Huawei EnzoH操作系统命令注入漏洞（CNVD-2025-23594） | 2025-08-15 | 2025-10-15 |
| cnvd-2025-23593 | Huawei EnzoH操作系统命令注入漏洞 | 2025-08-15 | 2025-10-15 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0893 | Vulnérabilité dans Roundcube Webmail | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0892 | Multiples vulnérabilités dans les produits Liferay | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0891 | Multiples vulnérabilités dans les produits Ivanti | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0890 | Multiples vulnérabilités dans les produits Apple | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0889 | Multiples vulnérabilités dans les produits Tenable | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0888 | Multiples vulnérabilités dans ClamAV | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0887 | Multiples vulnérabilités dans les produits SonicWall | 2023-10-26T00:00:00.000000 | 2023-10-26T00:00:00.000000 |
| certfr-2023-avi-0886 | Multiples vulnérabilités dans Tenable Identity Exposure | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0885 | Multiples vulnérabilités dans VMware vCenter | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0884 | Multiples vulnérabilités dans Aruba ClearPass Policy Manager | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0883 | Multiples vulnérabilités dans Google Chrome | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0882 | Vulnérabilité dans OpenSSL | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0881 | Multiples vulnérabilités dans les produits Mozilla | 2023-10-25T00:00:00.000000 | 2023-10-25T00:00:00.000000 |
| certfr-2023-avi-0880 | Vulnérabilité dans les produits Liferay | 2023-10-24T00:00:00.000000 | 2023-10-24T00:00:00.000000 |
| certfr-2023-avi-0879 | Multiples vulnérabilités dans SolarWinds Access Rights Manager | 2023-10-23T00:00:00.000000 | 2023-10-24T00:00:00.000000 |
| certfr-2023-avi-0877 | Vulnérabilité dans Microsoft Edge | 2023-10-23T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0876 | Multiples vulnérabilités dans Squid | 2023-10-23T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0875 | Vulnérabilité dans Qnap QUSBCam2 | 2023-10-23T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0873 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-10-20T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0872 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-10-20T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0871 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-10-20T00:00:00.000000 | 2023-10-23T00:00:00.000000 |
| certfr-2023-avi-0874 | Multiples vulnérabilités dans le noyau Linux de DebianLTS | 2023-10-20T00:00:00.000000 | 2023-10-20T00:00:00.000000 |
| certfr-2023-avi-0870 | Multiples vulnérabilités dans les produits VMware | 2023-10-20T00:00:00.000000 | 2023-10-20T00:00:00.000000 |
| certfr-2023-avi-0869 | Multiples vulnérabilités dans Zimbra Collaboration | 2023-10-19T00:00:00.000000 | 2023-10-19T00:00:00.000000 |
| certfr-2023-avi-0868 | Multiples vulnérabilités dans Apache HTTP Server | 2023-10-19T00:00:00.000000 | 2023-10-19T00:00:00.000000 |
| certfr-2023-avi-0867 | Vulnérabilité dans Spring AMQP | 2023-10-19T00:00:00.000000 | 2023-10-19T00:00:00.000000 |
| certfr-2023-avi-0866 | Multiples vulnérabilités dans Oracle Virtualization | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0865 | Multiples vulnérabilités dans Oracle Systems | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0864 | Multiples vulnérabilités dans Oracle PeopleSoft | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0863 | Multiples vulnérabilités dans Oracle MySQL | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |