Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64234 |
4.3 (3.1)
|
WordPress Evergreen Content Poster plugin <= 1.4.5 - B… |
Evergreen Content Poster |
Evergreen Content Poster |
2025-10-29T08:38:11.964Z | 2026-01-20T14:28:19.953Z |
| CVE-2025-64228 |
4.3 (3.1)
|
WordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensi… |
FantasticPlugins |
SUMO Affiliates Pro |
2025-10-29T08:38:11.052Z | 2026-01-20T14:28:19.952Z |
| CVE-2025-64220 |
6.5 (3.1)
|
WordPress Rey Core plugin <= 3.1.8 - Cross Site Script… |
ReyCommerce |
Rey Core |
2025-10-29T08:38:10.174Z | 2026-01-20T14:28:19.951Z |
| CVE-2025-64219 |
4.3 (3.1)
|
WordPress Business Directory plugin <= 6.4.18 - Broken… |
Strategy11 Team |
Business Directory |
2025-10-29T08:38:09.728Z | 2026-01-20T14:28:19.940Z |
| CVE-2025-64206 |
9.8 (3.1)
|
WordPress Jannah theme <= 7.6.0 - PHP Object Injection… |
TieLabs |
Jannah |
2025-12-18T07:22:11.440Z | 2026-01-20T14:28:19.907Z |
| CVE-2025-64209 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.122 - Broken Access … |
StylemixThemes |
Masterstudy |
2025-12-18T07:22:11.805Z | 2026-01-20T14:28:19.877Z |
| CVE-2025-64200 |
5.9 (3.1)
|
WordPress Email Template Customizer for WooCommerce pl… |
VillaTheme |
Email Template Customizer for WooCommerce |
2025-10-29T08:38:05.654Z | 2026-01-20T14:28:19.586Z |
| CVE-2025-64201 |
4.3 (3.1)
|
WordPress PowerPress Podcasting plugin <= 11.13.12 - C… |
blubrry |
PowerPress Podcasting |
2025-10-29T08:38:06.132Z | 2026-01-20T14:28:19.584Z |
| CVE-2025-64202 |
6.5 (3.1)
|
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting … |
TieLabs |
Sahifa |
2025-10-29T08:38:06.577Z | 2026-01-20T14:28:19.577Z |
| CVE-2025-64195 |
7.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Local File Inclusion … |
ThimPress |
Eduma |
2025-10-29T08:38:04.034Z | 2026-01-20T14:28:19.495Z |
| CVE-2025-6325 |
9.8 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:05.901Z | 2026-01-20T14:28:19.494Z |
| CVE-2025-64198 |
7.1 (3.1)
|
WordPress Easy Social Share Buttons plugin < 10.7.1 - … |
appscreo |
Easy Social Share Buttons |
2025-11-06T15:56:09.273Z | 2026-01-20T14:28:19.492Z |
| CVE-2025-64199 |
5.3 (3.1)
|
WordPress wpresidence theme <= 5.3.2 - Broken Access C… |
WpEstate |
wpresidence |
2025-10-29T08:38:05.202Z | 2026-01-20T14:28:19.491Z |
| CVE-2025-6324 |
7.1 (3.1)
|
WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Sc… |
MatrixAddons |
Easy Invoice |
2025-12-18T07:22:09.770Z | 2026-01-20T14:28:19.479Z |
| CVE-2025-64194 |
6.5 (3.1)
|
WordPress Eduma theme <= 5.7.6 - Cross Site Scripting … |
ThimPress |
Eduma |
2025-10-29T08:38:03.614Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-6326 |
8.1 (3.1)
|
WordPress Inset theme <= 1.18.0 - Local File Inclusion… |
AncoraThemes |
Inset |
2025-12-18T07:22:09.950Z | 2026-01-20T14:28:19.461Z |
| CVE-2025-64191 |
7.1 (3.1)
|
WordPress XStore theme < 9.6.1 - Cross Site Scripting … |
8theme |
XStore |
2025-12-18T07:22:10.489Z | 2026-01-20T14:28:19.459Z |
| CVE-2025-6327 |
10 (3.1)
|
WordPress King Addons for Elementor plugin <= 51.1.36 … |
KingAddons.com |
King Addons for Elementor |
2025-11-06T15:56:06.826Z | 2026-01-20T14:28:19.457Z |
| CVE-2025-64197 |
6.5 (3.1)
|
WordPress Rehub theme < 19.9.9.1 - Cross Site Scriptin… |
sizam |
Rehub |
2025-10-29T08:38:04.636Z | 2026-01-20T14:28:19.456Z |
| CVE-2025-63077 |
4.3 (3.1)
|
WordPress Happy Addons for Elementor plugin <= 3.20.2 … |
HappyMonster |
Happy Addons for Elementor |
2025-12-09T14:52:37.020Z | 2026-01-20T14:28:19.453Z |
| CVE-2025-64193 |
7.5 (3.1)
|
WordPress XStore theme < 9.6.1 - Local File Inclusion … |
8theme |
XStore |
2025-12-18T07:22:10.879Z | 2026-01-20T14:28:19.452Z |
| CVE-2025-63068 |
5.3 (3.1)
|
WordPress Contact Form 7 Dynamic Text Extension plugin… |
sevenspark |
Contact Form 7 Dynamic Text Extension |
2025-12-09T14:52:35.227Z | 2026-01-20T14:28:19.436Z |
| CVE-2025-64189 |
7.1 (3.1)
|
WordPress XStore Core plugin < 5.6 - Cross Site Script… |
8theme |
XStore Core |
2025-12-18T07:22:10.319Z | 2026-01-20T14:28:19.422Z |
| CVE-2025-63076 |
7.5 (3.1)
|
WordPress The7 Elements plugin <= 2.7.11 - Local File … |
Dream-Theme |
The7 Elements |
2025-12-09T14:52:36.814Z | 2026-01-20T14:28:19.421Z |
| CVE-2025-64196 |
7.1 (3.1)
|
WordPress Booster for WooCommerce plugin <= 7.2.5 - Cr… |
Pluggabl |
Booster for WooCommerce |
2025-11-06T15:56:07.302Z | 2026-01-20T14:28:19.411Z |
| CVE-2025-64188 |
9.8 (3.1)
|
WordPress Soledad theme <= 8.6.9 - Privilege Escalatio… |
PenciDesign |
Soledad |
2025-12-18T07:22:10.139Z | 2026-01-20T14:28:19.407Z |
| CVE-2025-64192 |
6.3 (3.1)
|
WordPress XStore theme < 9.6 - Broken Access Control v… |
8theme |
XStore |
2025-12-18T07:22:10.694Z | 2026-01-20T14:28:19.406Z |
| CVE-2025-63065 |
5.4 (3.1)
|
WordPress Media Library Assistant plugin <= 3.30 - Bro… |
David Lingren |
Media Library Assistant |
2025-12-09T14:52:34.653Z | 2026-01-20T14:28:19.402Z |
| CVE-2025-64190 |
6.5 (3.1)
|
WordPress XStore Core plugin < 5.6 - Cross Site Script… |
8theme.com |
XStore Core |
2025-12-30T16:00:52.385Z | 2026-01-20T14:28:19.393Z |
| CVE-2025-63073 |
6.5 (3.1)
|
WordPress The7 theme <= 12.8.0.2 - Cross Site Scriptin… |
Dream-Theme |
The7 |
2025-12-09T14:52:36.226Z | 2026-01-20T14:28:19.385Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0959 |
5.3 (3.1)
|
Out-of-bounds Write in Wireshark |
Wireshark Foundation |
Wireshark |
2026-01-14T20:23:28.986Z | 2026-01-14T21:18:44.677Z |
| CVE-2026-0961 |
5.5 (3.1)
|
Out-of-bounds Write in Wireshark |
Wireshark Foundation |
Wireshark |
2026-01-14T20:23:48.832Z | 2026-01-14T21:08:38.074Z |
| CVE-2026-22800 |
2.4 (3.1)
|
PILOS affected by a CSRF via GET request allows uninte… |
THM-Health |
PILOS |
2026-01-12T22:09:56.779Z | 2026-01-13T19:08:05.046Z |
| CVE-2025-68658 |
4.3 (3.1)
|
Open Source Point of Sale (opensourcepos) Stored XSS i… |
opensourcepos |
opensourcepos |
2026-01-13T21:25:57.684Z | 2026-01-14T19:11:13.050Z |
| CVE-2024-58339 |
8.7 (4.0)
|
LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Al… |
run-llama |
llama_index |
2026-01-12T23:04:25.256Z | 2026-01-13T17:18:28.994Z |
| CVE-2025-28953 |
8.5 (3.1)
|
WordPress smart SEO plugin <= 4.0 - SQL Injection Vuln… |
axiomthemes |
smart SEO |
2025-11-06T15:53:18.852Z | 2026-01-20T14:28:04.720Z |
| CVE-2024-58340 |
8.7 (4.0)
|
LangChain <= 0.3.1 MRKLOutputParser ReDoS |
LangChain AI |
LangChain |
2026-01-12T23:05:00.801Z | 2026-01-13T16:21:35.172Z |
| CVE-2025-15514 |
8.7 (4.0)
|
Ollama Multi-Modal Model Image Processing NULL Pointer… |
Ollama |
Ollama |
2026-01-12T23:03:52.922Z | 2026-01-13T17:19:59.689Z |
| CVE-2026-22213 |
2.4 (4.0)
|
RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overfl… |
RIOT |
RIOT OS |
2026-01-12T23:03:05.461Z | 2026-01-13T18:37:41.785Z |
| CVE-2026-22214 |
6.8 (4.0)
|
RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overfl… |
RIOT |
RIOT OS |
2026-01-12T23:03:23.393Z | 2026-01-13T18:50:40.171Z |
| CVE-2021-47832 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate. | N/A | N/A | 2026-01-16T19:09:34.019Z | 2026-01-21T16:41:46.259Z |
| CVE-2025-14920 |
7.8 (3.0)
|
Hugging Face Transformers Perceiver Model Deserializat… |
Hugging Face |
Transformers |
2025-12-23T21:04:36.809Z | 2025-12-24T16:29:05.697Z |
| CVE-2025-14921 |
7.8 (3.0)
|
Hugging Face Transformers Transformer-XL Model Deseria… |
Hugging Face |
Transformers |
2025-12-23T21:04:23.187Z | 2025-12-24T16:25:13.340Z |
| CVE-2025-14928 |
7.8 (3.0)
|
Hugging Face Transformers HuBERT convert_config Code I… |
Hugging Face |
Transformers |
2025-12-23T21:04:48.438Z | 2025-12-26T14:31:29.167Z |
| CVE-2025-14929 |
7.8 (3.0)
|
Hugging Face Transformers X-CLIP Checkpoint Conversion… |
Hugging Face |
Transformers |
2025-12-23T21:04:15.474Z | 2025-12-24T16:24:34.136Z |
| CVE-2026-0962 |
5.3 (3.1)
|
Out-of-bounds Write in Wireshark |
Wireshark Foundation |
Wireshark |
2026-01-14T20:23:38.829Z | 2026-01-14T21:11:23.281Z |
| CVE-2025-14523 |
8.2 (3.1)
|
Libsoup: libsoup: duplicate host header handling cause… |
Red Hat |
Red Hat Enterprise Linux 10 |
2025-12-11T12:30:59.266Z | 2026-01-21T15:53:40.769Z |
| CVE-2022-46764 |
9.8 (3.1)
|
A SQL injection issue in the web API in TrueConf … |
n/a |
n/a |
2022-12-27T00:00:00.000Z | 2026-01-21T15:27:46.766Z |
| CVE-2025-21605 |
7.5 (3.1)
|
Redis DoS Vulnerability due to unlimited growth of out… |
redis |
redis |
2025-04-23T15:38:11.042Z | 2025-06-02T03:54:26.630Z |
| CVE-2022-48744 |
N/A
|
net/mlx5e: Avoid field-overflowing memcpy() |
Linux |
Linux |
2024-06-20T11:13:27.979Z | 2026-01-19T12:17:36.024Z |
| CVE-2022-49465 |
7.8 (3.1)
|
blk-throttle: Set BIO_THROTTLED when bio has been throttled |
Linux |
Linux |
2025-02-26T02:13:10.975Z | 2026-01-19T12:17:39.645Z |
| CVE-2022-49711 |
7.8 (3.1)
|
bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bu… |
Linux |
Linux |
2025-02-26T02:24:28.224Z | 2026-01-19T12:17:41.156Z |
| CVE-2022-49168 |
7.8 (3.1)
|
btrfs: do not clean up repair bio if submit fails |
Linux |
Linux |
2025-02-26T01:55:26.532Z | 2026-01-19T12:17:37.297Z |
| CVE-2025-3460 |
7.7 (3.1)
|
ON Semiconductor Quantenna set_tx_pow Argument Injection |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:24.334Z | 2025-06-09T18:33:57.925Z |
| CVE-2025-3459 |
7.7 (3.1)
|
ON Semiconductor Quantenna transmit_file Argument Injection |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:02:09.918Z | 2025-06-09T18:36:35.345Z |
| CVE-2025-32459 |
7.7 (3.1)
|
ON Semiconductor Quantenna router_command.sh (in the s… |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:04:25.317Z | 2025-06-10T13:22:40.590Z |
| CVE-2025-32458 |
7.7 (3.1)
|
ON Semiconductor Quantenna router_command.sh (in the g… |
ON Semiconductor |
Quantenna Wi-Fi chipset |
2025-06-08T21:04:12.492Z | 2025-06-10T13:23:10.764Z |
| CVE-2025-64718 |
5.3 (3.1)
|
js-yaml has prototype pollution in merge (<<) |
nodeca |
js-yaml |
2025-11-13T15:32:44.634Z | 2026-01-21T14:38:16.644Z |
| CVE-2025-50505 |
7.8 (3.1)
|
Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) force… |
n/a |
n/a |
2025-10-07T00:00:00.000Z | 2026-01-21T14:12:55.381Z |
| CVE-2025-15113 |
9.3 (3.1)
8.4 (3.1)
|
Ksenia Security Lares 4.0 Home Automation 1.6 Remote C… |
Ksenia Security S.p.A. |
Ksenia Security Lares 4.0 Home Automation |
2025-12-30T22:41:46.694Z | 2026-01-21T14:38:48.930Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-0959 | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial … | 2026-01-14T21:15:52.753 | 2026-01-21T18:44:54.317 |
| fkie_cve-2026-0961 | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service | 2026-01-14T21:15:53.063 | 2026-01-21T18:43:01.720 |
| fkie_cve-2026-22800 | PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.1… | 2026-01-12T23:15:52.747 | 2026-01-21T18:42:22.607 |
| fkie_cve-2025-68658 | Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP u… | 2026-01-13T22:16:06.293 | 2026-01-21T18:40:12.790 |
| fkie_cve-2024-58339 | LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled reso… | 2026-01-12T23:15:51.630 | 2026-01-21T18:30:26.690 |
| fkie_cve-2025-28953 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-11-06T16:15:49.830 | 2026-01-21T18:24:56.097 |
| fkie_cve-2024-58340 | LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS)… | 2026-01-12T23:15:51.780 | 2026-01-21T17:57:56.537 |
| fkie_cve-2025-15514 | Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability i… | 2026-01-12T23:15:51.957 | 2026-01-21T17:52:04.980 |
| fkie_cve-2026-22213 | RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulner… | 2026-01-12T23:15:52.300 | 2026-01-21T17:44:38.543 |
| fkie_cve-2026-22214 | RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulner… | 2026-01-12T23:15:52.453 | 2026-01-21T17:43:51.967 |
| fkie_cve-2021-47832 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a dup… | 2026-01-16T19:16:08.403 | 2026-01-21T17:16:03.597 |
| fkie_cve-2025-14920 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution V… | 2025-12-23T21:15:47.183 | 2026-01-21T16:45:40.850 |
| fkie_cve-2025-14921 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execut… | 2025-12-23T21:15:47.340 | 2026-01-21T16:44:06.277 |
| fkie_cve-2025-14928 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability.… | 2025-12-23T21:15:48.110 | 2026-01-21T16:43:32.167 |
| fkie_cve-2025-14929 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Cod… | 2025-12-23T21:15:48.240 | 2026-01-21T16:38:41.230 |
| fkie_cve-2026-0962 | SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial o… | 2026-01-14T21:15:53.217 | 2026-01-21T16:27:02.307 |
| fkie_cve-2025-14523 | A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the… | 2025-12-11T13:15:58.983 | 2026-01-21T16:16:05.420 |
| fkie_cve-2022-46764 | A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6) allows remote … | 2022-12-27T01:15:11.047 | 2026-01-21T16:16:05.213 |
| fkie_cve-2025-21605 | Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and … | 2025-04-23T16:15:34.770 | 2026-01-21T16:08:36.293 |
| fkie_cve-2022-48744 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflo… | 2024-06-20T12:15:12.700 | 2026-01-21T16:08:23.180 |
| fkie_cve-2022-49465 | In the Linux kernel, the following vulnerability has been resolved: blk-throttle: Set BIO_THROTTLE… | 2025-02-26T07:01:22.787 | 2026-01-21T16:08:09.840 |
| fkie_cve-2022-49711 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use… | 2025-02-26T07:01:46.893 | 2026-01-21T16:07:47.973 |
| fkie_cve-2022-49168 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair … | 2025-02-26T07:00:53.927 | 2026-01-21T16:06:56.550 |
| fkie_cve-2025-3460 | The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to co… | 2025-06-08T21:15:32.900 | 2026-01-21T16:02:39.167 |
| fkie_cve-2025-3459 | The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to… | 2025-06-08T21:15:32.770 | 2026-01-21T15:58:56.687 |
| fkie_cve-2025-32459 | The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time … | 2025-06-08T21:15:31.673 | 2026-01-21T15:51:22.683 |
| fkie_cve-2025-32458 | The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog… | 2025-06-08T21:15:31.537 | 2026-01-21T15:46:45.133 |
| fkie_cve-2025-64718 | js-yaml is a JavaScript YAML parser and dumper. In js-yaml 4.1.0 and below, it's possible for an at… | 2025-11-13T16:15:57.153 | 2026-01-21T15:16:07.633 |
| fkie_cve-2025-50505 | Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-… | 2025-10-07T14:15:37.120 | 2026-01-21T15:16:06.287 |
| fkie_cve-2025-15113 | Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerabilit… | 2025-12-30T23:15:49.913 | 2026-01-21T15:16:05.937 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hqrr-4x5g-r96q |
7.2 (3.1)
|
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g9jr-64x4-g2h8 |
5.3 (3.1)
|
Missing Authorization vulnerability in Vinod Dalvi Ivory Search add-search-to-menu allows Exploitin… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g56q-p85p-h6p8 |
5.3 (3.1)
|
Insertion of Sensitive Information Into Sent Data vulnerability in averta Shortcodes and extra feat… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-g3r9-25f9-622c |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-fmr9-f844-7m23 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cro… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-98gq-3jvx-3x4w |
4.3 (3.1)
|
Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allo… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-83m4-cw88-f2rj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-83gv-v2x5-x6g3 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7wq3-fgh6-wjpx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7pfq-v66h-xmh2 |
4.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjad… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-7jc9-v63q-hpv4 |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-6wwx-qhx3-qjmx |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in hogash Kallyas kallyas.This issue affects Kallya… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-6v28-vr6p-rcfw |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-6m7f-qcxm-vrcp |
8.2 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-68cp-78j8-c56f |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-5925-5v57-58hq |
4.3 (3.1)
|
Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-52vv-26j5-647x |
8.8 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-bookin… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-46rg-3ch6-xmgj |
8.8 (3.1)
|
Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Inc… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-3vcx-wp2w-x68x |
6.5 (3.1)
|
Missing Authorization vulnerability in Yandex Metrika Yandex.Metrica wp-yandex-metrika allows Explo… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:04Z |
| ghsa-3mg5-4949-5h2w |
8.8 (3.1)
|
Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite a… | 2025-12-09T18:30:41Z | 2026-01-20T15:32:04Z |
| ghsa-3g27-fg6w-fm64 |
5.3 (3.1)
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in seve… | 2025-12-09T18:30:40Z | 2026-01-20T15:32:04Z |
| ghsa-xx8r-j779-rrrw |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:38Z | 2026-01-20T15:32:03Z |
| ghsa-x4jh-8v4q-hpv4 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-w3h5-chmf-jr89 |
5.3 (3.1)
|
Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorre… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-v96x-3j7g-w536 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-v5j6-5fx7-x2hp |
5.4 (3.1)
|
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-del… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-p6gq-crmg-ph7q |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in yuvalo … | 2025-12-09T18:30:38Z | 2026-01-20T15:32:03Z |
| ghsa-p5xf-g5x5-mr6q |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-mfr5-v73v-62qr |
5.3 (3.1)
|
Missing Authorization vulnerability in CridioStudio ListingPro Lead Form listingpro-lead-form allow… | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ghsa-gjc5-9rhr-2jcm |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:39Z | 2026-01-20T15:32:03Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2017-64 |
|
Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search… | plone | 2017-02-04T05:59:00Z | 2021-07-25T23:34:49.702847Z |
| pysec-2017-63 |
|
Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS… | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:49.606999Z |
| pysec-2017-62 |
|
Cross-site scripting (XSS) vulnerability in an unspecified page template in Plone CMS 5.x… | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:49.468488Z |
| pysec-2017-61 |
|
Cross-site scripting (XSS) vulnerability in the URL checking infrastructure in Plone CMS … | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:49.134095Z |
| pysec-2017-60 |
|
Multiple open redirect vulnerabilities in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11… | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:48.992479Z |
| pysec-2017-59 |
|
z3c.form in Plone CMS 5.x through 5.0.6 and 4.x through 4.3.11 allows remote attackers to… | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:48.847213Z |
| pysec-2017-58 |
|
Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11… | plone | 2017-03-07T16:59:00Z | 2021-07-25T23:34:48.755213Z |
| pysec-2017-57 |
|
Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to by… | plone | 2017-02-24T20:59:00Z | 2021-07-25T23:34:48.662249Z |
| pysec-2017-56 |
|
Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sen… | plone | 2017-02-24T20:59:00Z | 2021-07-25T23:34:48.613344Z |
| pysec-2017-55 |
|
Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related… | plone | 2017-02-24T20:59:00Z | 2021-07-25T23:34:48.563067Z |
| pysec-2017-54 |
|
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses. | plone | 2017-09-25T17:29:00Z | 2021-07-25T23:34:48.507474Z |
| pysec-2017-53 |
|
Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.… | plone | 2017-09-25T17:29:00Z | 2021-07-25T23:34:48.448357Z |
| pysec-2017-52 |
|
Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7… | plone | 2017-09-25T17:29:00Z | 2021-07-25T23:34:48.187458Z |
| pysec-2017-51 |
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4… | plone | 2017-09-25T21:29:00Z | 2021-07-25T23:34:47.925835Z |
| pysec-2020-218 |
|
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x throu… | plone | 2020-01-02T19:15:00Z | 2021-07-25T23:34:47.870506Z |
| pysec-2014-66 |
|
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators … | plone | 2014-05-02T14:55:00Z | 2021-07-25T23:34:47.632910Z |
| pysec-2014-65 |
|
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to ob… | plone | 2014-05-02T14:55:00Z | 2021-07-25T23:34:47.572941Z |
| pysec-2014-64 |
|
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4… | plone | 2014-01-21T16:06:00Z | 2021-07-25T23:34:47.517338Z |
| pysec-2014-63 |
|
(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, … | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.359775Z |
| pysec-2014-62 |
|
mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 a… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.220560Z |
| pysec-2014-61 |
|
member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:47.083456Z |
| pysec-2014-60 |
|
The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x thro… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.895458Z |
| pysec-2014-59 |
|
Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) … | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.736480Z |
| pysec-2014-58 |
|
The WYSIWYG component (wysiwyg.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.598296Z |
| pysec-2014-57 |
|
typeswidget.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 doe… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.454886Z |
| pysec-2014-56 |
|
sendto.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows r… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.316071Z |
| pysec-2014-55 |
|
zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not pr… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.176817Z |
| pysec-2014-54 |
|
Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, an… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:46.028547Z |
| pysec-2014-53 |
|
Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseNam… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:45.892869Z |
| pysec-2014-52 |
|
traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:45.751265Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3342 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL I… | 2024-04-11T05:03:27.402495Z |
| gsd-2024-3453 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402291Z |
| gsd-2024-3471 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.402076Z |
| gsd-2024-3292 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.401534Z |
| gsd-2024-3291 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.400922Z |
| gsd-2024-3599 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399885Z |
| gsd-2024-3503 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399660Z |
| gsd-2024-3498 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399440Z |
| gsd-2024-3454 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.399220Z |
| gsd-2024-3648 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.398059Z |
| gsd-2024-3351 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.397506Z |
| gsd-2024-3299 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.396244Z |
| gsd-2024-3619 | A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management S… | 2024-04-11T05:03:27.394674Z |
| gsd-2024-3481 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.393633Z |
| gsd-2024-3426 | A vulnerability, which was classified as problematic, has been found in SourceCodester On… | 2024-04-11T05:03:27.392807Z |
| gsd-2024-3455 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has be… | 2024-04-11T05:03:27.392000Z |
| gsd-2024-3448 | Users with low privileges can perform certain AJAX actions. In this vulnerability instan… | 2024-04-11T05:03:27.391262Z |
| gsd-2024-3289 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.390920Z |
| gsd-2024-3302 | There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A… | 2024-04-11T05:03:27.390670Z |
| gsd-2024-3361 | A vulnerability has been found in SourceCodester Online Library System 1.0 and classified… | 2024-04-11T05:03:27.388783Z |
| gsd-2024-3613 | A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been … | 2024-04-11T05:03:27.387402Z |
| gsd-2024-3313 | SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in P… | 2024-04-11T05:03:27.386722Z |
| gsd-2024-3652 | The Libreswan Project was notified of an issue causing libreswan to restart when using IK… | 2024-04-11T05:03:27.386137Z |
| gsd-2024-3565 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.385858Z |
| gsd-2024-3414 | A vulnerability was found in SourceCodester Human Resource Information System 1.0 and cla… | 2024-04-11T05:03:27.382122Z |
| gsd-2024-3427 | A vulnerability, which was classified as problematic, was found in SourceCodester Online … | 2024-04-11T05:03:27.380682Z |
| gsd-2024-3496 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.380375Z |
| gsd-2024-3456 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.379834Z |
| gsd-2024-3554 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.378075Z |
| gsd-2024-3647 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.376177Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-10143 | Malicious code in pytonn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10142 | Malicious code in pytojn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10140 | Malicious code in pytohn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10139 | Malicious code in pytoh (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10138 | Malicious code in pytnon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10137 | Malicious code in pytjon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10136 | Malicious code in pytiom (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10135 | Malicious code in pytiob (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10134 | Malicious code in pythun (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10133 | Malicious code in python-guild (PyPI) | 2024-07-03T17:04:18Z | 2025-12-11T09:27:53Z |
| mal-2024-10131 | Malicious code in pythom (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10130 | Malicious code in pythob (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10129 | Malicious code in pythn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10128 | Malicious code in pythkn (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10127 | Malicious code in pytgon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10126 | Malicious code in pytbon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10125 | Malicious code in pystlete (PyPI) | 2024-07-09T18:46:41Z | 2025-12-11T09:27:53Z |
| mal-2024-10119 | Malicious code in pyloy (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10118 | Malicious code in pyhton (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10117 | Malicious code in pyhthon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10116 | Malicious code in pyfetcher-vaaai (PyPI) | 2024-08-07T10:08:45Z | 2025-12-11T09:27:53Z |
| mal-2024-10115 | Malicious code in pyfetcher (PyPI) | 2024-08-07T10:08:45Z | 2025-12-11T09:27:53Z |
| mal-2024-10111 | Malicious code in pyadd (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10108 | Malicious code in pthon (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10106 | Malicious code in popeye-xyz (PyPI) | 2024-07-22T20:38:38Z | 2025-12-11T09:27:53Z |
| mal-2024-10105 | Malicious code in popeye-pip-v3 (PyPI) | 2024-07-22T20:38:38Z | 2025-12-11T09:27:53Z |
| mal-2024-10100 | Malicious code in oz-merkle-tree (PyPI) | 2024-08-23T21:20:09Z | 2025-12-11T09:27:53Z |
| mal-2024-10099 | Malicious code in opwnsea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10098 | Malicious code in opnsea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10097 | Malicious code in opnesea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1660 | Oracle Utilities: Mehrere Schwachstellen | 2019-04-16T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1658 | Oracle Java SE und Oracle JRockit : Mehrere Schwachstellen | 2015-01-20T23:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1657 | Google Chrome: Mehrere Schwachstellen | 2013-10-01T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1655 | IBM Informix Dynamic Server: Mehrere Schwachstellen | 2025-07-27T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1643 | xwiki: Mehrere Schwachstelle ermöglicht eine SQL Injection | 2025-07-24T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1607 | Keycloak: Schwachstelle ermöglicht Privilegieneskalation | 2025-07-20T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1512 | Keycloak: Kontoübernahme durch Manipulation des E-Mail-Verifizierungsprozesses | 2025-07-08T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-0885 | GStreamer: Schwachstelle ermöglicht Denial of Service | 2025-04-24T22:00:00.000+00:00 | 2025-07-28T22:00:00.000+00:00 |
| wid-sec-w-2025-1652 | Commvault Backup & Recovery: Schwachstelle ermöglicht SQL injection | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1651 | HP DesignJet: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1650 | Sitecore Experience Manager: Mehrere Schwachstellen | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1649 | WinRAR: Schwachstelle ermöglicht Codeausführung | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1648 | IBM Cognos Analytics (Python JSON Logger): Schwachstelle ermöglicht Codeausführung | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1645 | JHipster: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-27T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1580 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1449 | Microsoft Edge: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2025-07-02T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1436 | Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-06-30T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1397 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-06-24T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1340 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-06-17T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1296 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-06-10T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1126 | Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-05-21T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2024-3249 | Red Hat JBoss Enterprise Application Platform (Wildfly): Schwachstelle ermöglicht Cross-Site Scripting | 2024-10-21T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2024-3062 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2024-10-03T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2024-1955 | IBM Java SDK: Schwachstelle ermöglicht Denial of Service | 2024-08-29T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2024-1658 | Oracle Java SE: Mehrere Schwachstellen | 2024-07-16T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2692 | Oracle Java SE: Mehrere Schwachstellen | 2023-10-17T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2338 | Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-09-12T22:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2022-2338 | Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen | 2022-12-14T23:00:00.000+00:00 | 2025-07-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1642 | IBM MQ: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-07-24T22:00:00.000+00:00 | 2025-07-24T22:00:00.000+00:00 |
| wid-sec-w-2025-1641 | Redis: Schwachstelle ermöglicht Denial of Service | 2025-07-24T22:00:00.000+00:00 | 2025-07-24T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7653 | Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.4 GA] | 2023-12-05T14:36:34+00:00 | 2026-01-21T23:19:10+00:00 |
| rhsa-2023:7641 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 security update | 2023-12-04T18:02:14+00:00 | 2026-01-21T23:19:08+00:00 |
| rhsa-2023:7639 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update | 2023-12-04T18:00:03+00:00 | 2026-01-21T23:19:08+00:00 |
| rhsa-2023:7638 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update | 2023-12-04T18:02:31+00:00 | 2026-01-21T23:19:07+00:00 |
| rhsa-2023:7637 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update | 2023-12-04T18:01:18+00:00 | 2026-01-21T23:19:07+00:00 |
| rhsa-2023:7610 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update | 2023-12-06T18:17:51+00:00 | 2026-01-21T23:19:07+00:00 |
| rhsa-2023:7587 | Red Hat Security Advisory: Updated IBM Business Automation Manager Open Editions 8.0.4 SP1 Images | 2023-11-29T18:13:51+00:00 | 2026-01-21T23:19:06+00:00 |
| rhsa-2023:7517 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2023-11-27T19:31:55+00:00 | 2026-01-21T23:19:05+00:00 |
| rhsa-2023:7488 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update | 2023-11-24T16:57:47+00:00 | 2026-01-21T23:19:02+00:00 |
| rhsa-2023:7486 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 for OpenShift image enhancement and security update | 2023-11-24T16:53:18+00:00 | 2026-01-21T23:19:02+00:00 |
| rhsa-2023:7484 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9 | 2023-11-24T16:56:41+00:00 | 2026-01-21T23:19:00+00:00 |
| rhsa-2023:7483 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 8 | 2023-11-24T16:56:38+00:00 | 2026-01-21T23:18:58+00:00 |
| rhsa-2023:7482 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7 | 2023-11-24T16:56:09+00:00 | 2026-01-21T23:18:58+00:00 |
| rhsa-2023:7481 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 packages and security update | 2023-11-29T01:56:54+00:00 | 2026-01-21T23:18:58+00:00 |
| rhsa-2023:7335 | Red Hat Security Advisory: Updated Red Hat Process Automation Manager 7.13.4 SP2 Images | 2023-11-16T15:57:46+00:00 | 2026-01-21T23:18:57+00:00 |
| rhsa-2023:7334 | Red Hat Security Advisory: rh-varnish6-varnish security update | 2023-11-16T14:46:17+00:00 | 2026-01-21T23:18:56+00:00 |
| rhsa-2023:7325 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update | 2023-11-21T12:04:13+00:00 | 2026-01-21T23:18:55+00:00 |
| rhsa-2023:7247 | Red Hat Security Advisory: Red Hat Fuse 7.12.1 release and security update | 2023-11-15T17:07:49+00:00 | 2026-01-21T23:18:55+00:00 |
| rhsa-2023:7218 | Red Hat Security Advisory: Kernel Module Management security update | 2023-11-15T01:02:10+00:00 | 2026-01-21T23:18:53+00:00 |
| rhsa-2023:7205 | Red Hat Security Advisory: nodejs:20 security update | 2023-11-14T17:00:27+00:00 | 2026-01-21T23:18:51+00:00 |
| rhsa-2023:6746 | Red Hat Security Advisory: nghttp2 security update | 2023-11-07T10:27:04+00:00 | 2026-01-21T23:18:50+00:00 |
| rhsa-2023:6286 | Red Hat Security Advisory: Red Hat Data Grid 7.3.11 security update | 2023-11-02T15:29:29+00:00 | 2026-01-21T23:18:49+00:00 |
| rhsa-2023:6239 | Red Hat Security Advisory: Kiali (Kiali 1.65.10) security update | 2023-11-01T13:09:18+00:00 | 2026-01-21T23:18:48+00:00 |
| rhsa-2023:6180 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing 2.9.0 containers security update | 2023-10-30T12:53:43+00:00 | 2026-01-21T23:18:48+00:00 |
| rhsa-2023:6144 | Red Hat Security Advisory: Custom Metric Autoscaler operator for Red Hat OpenShift security update | 2023-10-30T01:05:32+00:00 | 2026-01-21T23:18:47+00:00 |
| rhsa-2023:6137 | Red Hat Security Advisory: Migration Toolkit for Runtimes security update | 2023-10-26T11:06:23+00:00 | 2026-01-21T23:18:46+00:00 |
| rhsa-2023:6120 | Red Hat Security Advisory: nginx:1.22 security update | 2023-10-25T15:52:23+00:00 | 2026-01-21T23:18:44+00:00 |
| rhsa-2023:6117 | Red Hat Security Advisory: Red Hat Integration Camel K 1.10.4 release and security update | 2023-10-25T14:18:12+00:00 | 2026-01-21T23:18:43+00:00 |
| rhsa-2023:6114 | Red Hat Security Advisory: Red Hat support for Spring Boot 2.7.17 security update | 2023-10-25T14:53:30+00:00 | 2026-01-21T23:18:43+00:00 |
| rhsa-2023:6106 | Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP1 security update | 2023-10-26T13:20:56+00:00 | 2026-01-21T23:18:41+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-313-04 | mySCADA myDESIGNER | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-02 | Schneider Electric GUIcon | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-01 | Schneider Electric NMC cards and Embedded Devices | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-173-01 | Advantech WebAccess HMI Designer (Update A) | 2021-06-22T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsma-21-308-01 | Philips Tasy EMR | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-02 | AzeoTech DAQFactory | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-01 | VISAM VBASE Editor | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-306-01 | Sensormatic Electronics VideoEdge | 2021-11-02T00:00:00.000000Z | 2021-11-02T00:00:00.000000Z |
| icsa-18-277-01 | WECON PI Studio (Update A) | 2018-10-04T00:00:00.000000Z | 2021-11-02T00:00:00.000000Z |
| icsa-21-301-01 | Sensormatic Electronics victor | 2021-10-28T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-280-04 | Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B) | 2021-10-07T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-238-04 | Delta Electronics DOPSoft (Update A) | 2021-08-26T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-299-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-10-26T00:00:00.000000Z | 2021-10-26T00:00:00.000000Z |
| icsma-21-294-01 | B. Braun Infusomat Space Large Volume Pump | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-03 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-02 | Delta Electronics DIALink | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-01 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-292-02 | Trane HVAC Systems Controls | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-292-01 | AUVESY Versiondog | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-287-02 | Uffizio GPS Tracker | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| icsa-21-287-01 | Schneider Electric CNM | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| icsa-21-285-03 | Schneider Electric IGSS | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-285-02 | Advantech WebAccess | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-285-01 | Advantech WebAccess SCADA | 2021-10-12T00:00:00.000000Z | 2021-10-12T00:00:00.000000Z |
| icsa-21-280-07 | FATEK Automation Communication Server | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-06 | FATEK Automation WinProladder | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-03 | Johnson Controls exacqVision | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-02 | Mobile Industrial Robots Vehicles and MiR Fleet Software | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsa-21-280-01 | Johnson Controls exacqVision Server Bundle | 2021-10-07T00:00:00.000000Z | 2021-10-07T00:00:00.000000Z |
| icsma-18-219-02 | Medtronic MiniMed MMT-500/MMT-503 Remote Controllers (Update A) | 2018-08-07T00:00:00.000000Z | 2021-10-05T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180328-rest | Cisco IOS XE Software REST API Authorization Bypass Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-privesc3 | Cisco IOS XE Software for Cisco 4000 Series Integrated Services Routers Privileged EXEC Mode Root Shell Access Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-privesc2 | Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-privesc1 | Cisco IOS XE Software User EXEC Mode Root Shell Access Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-opendns-dos | Cisco IOS XE Software with Cisco Umbrella Integration Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-ipv4 | Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-igmp | Cisco IOS XE Software Internet Group Management Protocol Memory Leak Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-fwip | Cisco IOS XE Software Zone-Based Firewall IP Fragmentation Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-fib-dos | Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-dot1x | Cisco IOS Software 802.1x Multiple-Authentication Port Authentication Bypass Vulnerability | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180328-cmdinj | Cisco IOS XE Software CLI Command Injection Vulnerabilities | 2018-03-28T16:00:00+00:00 | 2018-03-28T16:00:00+00:00 |
| cisco-sa-20180307-acs | Cisco Secure Access Control Server XML External Entity Injection Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-27T16:15:00+00:00 |
| cisco-sa-20180307-acs1 | Cisco Secure Access Control Server XML External Entity Injection Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-27T16:11:00+00:00 |
| cisco-sa-20170419-energywise | Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities | 2017-04-19T16:00:00+00:00 | 2018-03-22T17:07:00+00:00 |
| cisco-sa-20180316-umb | Cisco Umbrella Dashboard Session Expiration Issue | 2018-03-16T16:00:00+00:00 | 2018-03-16T16:00:00+00:00 |
| cisco-sa-20180221-ucdm | Cisco Unified Communications Domain Manager Remote Code Execution Vulnerability | 2018-02-21T16:00:00+00:00 | 2018-03-09T14:47:00+00:00 |
| cisco-sa-20180307-wsa | Cisco Web Security Appliance FTP Authentication Bypass Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-val | Cisco Videoscape AnyRes Live Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ucs | Cisco UCS Director Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-staros1 | Cisco StarOS CLI Command Injection Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-staros | Cisco StarOS CLI Command Injection Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-sm | Cisco Security Manager DesktopServlet Reflected Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-res | Cisco Registered Envelope Service Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-pdcnm | Cisco Prime Data Center Network Manager Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise6 | Cisco Identity Services Engine Command Injection to Underlying Operating System Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise5 | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise4 | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise3 | Cisco Identity Services Engine Local Command Injection Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise2 | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| cisco-sa-20180307-ise1 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2018-03-07T16:00:00+00:00 | 2018-03-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2024-44940 | fou: remove warn in gue_gro_receive on unsupported protocol | 2024-08-02T00:00:00.000Z | 2025-09-04T00:03:13.000Z |
| msrc_cve-2024-1551 | Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8. | 2024-02-02T08:00:00.000Z | 2025-09-04T00:03:00.000Z |
| msrc_cve-2024-29943 | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1. | 2024-03-02T08:00:00.000Z | 2025-09-04T00:02:18.000Z |
| msrc_cve-2025-4802 | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo). | 2025-05-02T00:00:00.000Z | 2025-09-04T00:02:07.000Z |
| msrc_cve-2023-52634 | drm/amd/display: Fix disable_otg_wa logic | 2024-04-02T07:00:00.000Z | 2025-09-04T00:01:15.000Z |
| msrc_cve-2024-52560 | fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr() | 2025-02-02T00:00:00.000Z | 2025-09-04T00:00:56.000Z |
| msrc_cve-2023-52913 | drm/i915: Fix potential context UAFs | 2024-08-02T00:00:00.000Z | 2025-09-04T00:00:32.000Z |
| msrc_cve-2025-1365 | GNU elfutils eu-readelf readelf.c process_symtab buffer overflow | 2025-02-02T00:00:00.000Z | 2025-09-04T00:00:27.000Z |
| msrc_cve-2017-10989 | The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. | 2017-07-02T00:00:00.000Z | 2025-09-04T00:00:20.000Z |
| msrc_cve-2023-32208 | Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113. | 2023-06-01T07:00:00.000Z | 2025-09-04T00:00:17.000Z |
| msrc_cve-2023-45133 | Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code | 2023-10-01T00:00:00.000Z | 2025-09-04T00:00:04.000Z |
| msrc_cve-2025-8713 | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table | 2025-08-02T00:00:00.000Z | 2025-09-03T23:59:25.000Z |
| msrc_cve-2023-52912 | drm/amdgpu: Fixed bug on error when unloading amdgpu | 2024-08-02T00:00:00.000Z | 2025-09-03T23:57:38.000Z |
| msrc_cve-2025-25188 | DNSSEC validation may accept broken authentication chains | 2025-02-02T00:00:00.000Z | 2025-09-03T23:56:45.000Z |
| msrc_cve-2024-26714 | interconnect: qcom: sc8180x: Mark CO0 BCM keepalive | 2024-04-02T07:00:00.000Z | 2025-09-03T23:56:04.000Z |
| msrc_cve-2024-57999 | powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW | 2025-02-02T00:00:00.000Z | 2025-09-03T23:54:29.000Z |
| msrc_cve-2024-44938 | jfs: Fix shift-out-of-bounds in dbDiscardAG | 2024-08-02T00:00:00.000Z | 2025-09-03T23:54:29.000Z |
| msrc_cve-2020-8127 | Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks. | 2020-02-02T00:00:00.000Z | 2025-09-03T23:54:11.000Z |
| msrc_cve-2025-54389 | AIDE improper output neutralization vulnerability | 2025-08-02T00:00:00.000Z | 2025-09-03T23:53:54.000Z |
| msrc_cve-2025-5915 | Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c | 2025-06-02T00:00:00.000Z | 2025-09-03T23:53:33.000Z |
| msrc_cve-2025-1147 | GNU Binutils nm nm.c internal_strlen buffer overflow | 2025-02-02T00:00:00.000Z | 2025-09-03T23:53:15.000Z |
| msrc_cve-2024-45783 | Grub2: fs/hfs+: refcount can be decremented twice | 2025-02-02T00:00:00.000Z | 2025-09-03T23:53:10.000Z |
| msrc_cve-2025-38676 | iommu/amd: Avoid stack buffer overflow from kernel cmdline | 2025-08-02T00:00:00.000Z | 2025-09-03T23:53:01.000Z |
| msrc_cve-2022-49531 | loop: implement ->free_disk | 2025-02-02T00:00:00.000Z | 2025-09-03T23:52:36.000Z |
| msrc_cve-2023-24536 | Excessive resource consumption in net/http, net/textproto and mime/multipart | 2023-04-01T00:00:00.000Z | 2025-09-03T23:51:46.000Z |
| msrc_cve-2024-2312 | GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass. | 2024-04-02T07:00:00.000Z | 2025-09-03T23:49:50.000Z |
| msrc_cve-2020-8910 | Auth Bypass in Google's Closure-Library | 2020-03-02T00:00:00.000Z | 2025-09-03T23:49:20.000Z |
| msrc_cve-2025-5914 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | 2025-06-02T00:00:00.000Z | 2025-09-03T23:49:02.000Z |
| msrc_cve-2025-1179 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption | 2025-02-02T00:00:00.000Z | 2025-09-03T23:48:55.000Z |
| msrc_cve-2025-8846 | NASM Netwide Assember parser.c parse_line stack-based overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:48:09.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201603-0205 | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.… | 2025-11-18T15:06:58.358000Z |
| var-201602-0334 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x be… | 2025-11-18T15:06:58.240000Z |
| var-201606-0508 | Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote atta… | 2025-11-18T15:06:54.936000Z |
| var-201605-0105 | Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary co… | 2025-11-18T15:06:54.587000Z |
| var-201701-0766 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, W… | 2025-11-18T15:06:53.063000Z |
| var-201705-3474 | An unprivileged network attacker could gain system privileges to provisioned Intel manage… | 2025-11-18T15:06:49.824000Z |
| var-201707-0960 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software … | 2025-11-18T15:06:48.245000Z |
| var-201707-0965 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software … | 2025-11-18T15:06:48.208000Z |
| var-201707-0958 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attack… | 2025-11-18T15:06:48.173000Z |
| var-201707-0930 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attack… | 2025-11-18T15:06:48.130000Z |
| var-201707-0964 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attack… | 2025-11-18T15:06:48.090000Z |
| var-201707-0962 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software … | 2025-11-18T15:06:48.055000Z |
| var-201707-0959 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software … | 2025-11-18T15:06:48.016000Z |
| var-201707-1052 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software … | 2025-11-18T15:06:47.979000Z |
| var-201803-1380 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS S… | 2025-11-18T15:06:42.531000Z |
| var-201901-0351 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and R… | 2025-11-18T15:06:33.672000Z |
| var-201901-0350 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and R… | 2025-11-18T15:06:33.627000Z |
| var-201510-0430 | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS … | 2025-11-18T15:06:32.601000Z |
| var-201907-0157 | Linear eMerge E3-Series devices allow Command Injections. Linear eMerge E3 The devices in… | 2025-11-18T15:06:30.264000Z |
| var-202005-0696 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) … | 2025-11-18T15:06:24.235000Z |
| var-202007-1175 | Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12… | 2025-11-18T15:06:23.504000Z |
| var-202010-1052 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Applian… | 2025-11-18T15:06:22.706000Z |
| var-202208-0889 | An attacker who submits a crafted tar file with size in header struct being 0 may be able… | 2025-11-18T15:06:15.837000Z |
| var-202208-0814 | The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating me… | 2025-11-18T15:06:15.807000Z |
| var-202208-0859 | The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating me… | 2025-11-18T15:06:15.778000Z |
| var-202208-0945 | An attacker who submits a crafted tar file with size in header struct being 0 may be able… | 2025-11-18T15:06:15.749000Z |
| var-202301-1757 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsin… | 2025-11-18T15:06:10.525000Z |
| var-202301-1762 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsin… | 2025-11-18T15:06:10.494000Z |
| var-202301-1770 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsin… | 2025-11-18T15:06:10.463000Z |
| var-202301-1727 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsin… | 2025-11-18T15:06:10.433000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000005 | Ruby Version Manager escape sequence injection vulnerability | 2011-01-18T17:49+09:00 | 2011-01-18T17:49+09:00 |
| jvndb-2011-000003 | Aipo vulnerable to SQL injection | 2011-01-13T11:53+09:00 | 2011-01-13T11:53+09:00 |
| jvndb-2011-000002 | SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting | 2011-01-13T11:46+09:00 | 2011-01-13T11:46+09:00 |
| jvndb-2011-000001 | Contents-Mall vulnerability in password handling | 2011-01-13T11:41+09:00 | 2011-01-13T11:41+09:00 |
| jvndb-2009-002207 | SquirrelMail vulnerable to cross-site request forgery | 2011-01-07T14:40+09:00 | 2011-01-07T14:40+09:00 |
| jvndb-2007-000398 | SquirrelMail vulnerable to cross-site scripting | 2011-01-07T14:39+09:00 | 2011-01-07T14:39+09:00 |
| jvndb-2010-002529 | Access Control Security Bypass Vulnerability in Interstage Application Server | 2010-12-24T16:25+09:00 | 2010-12-24T16:25+09:00 |
| jvndb-2010-002528 | Buffer Overflow Vulnerability in Hitachi Groupmax Related Products | 2010-12-24T16:22+09:00 | 2010-12-24T16:22+09:00 |
| jvndb-2010-000066 | AttacheCase may insecurely load executable files | 2010-12-17T18:30+09:00 | 2010-12-17T18:30+09:00 |
| jvndb-2010-001879 | Denial of Service (DoS) Vulnerability in JP1/NETM | 2010-09-01T14:12+09:00 | 2010-12-17T14:46+09:00 |
| jvndb-2010-000065 | Internet Explorer vulnerable to cross-site scripting | 2010-12-15T18:20+09:00 | 2010-12-15T18:20+09:00 |
| jvndb-2010-000064 | Internet Explorer vulnerable to cross-site scripting | 2010-12-15T18:19+09:00 | 2010-12-15T18:19+09:00 |
| jvndb-2010-000063 | Internet Explorer vulnerable to cross-site scripting | 2010-12-15T18:19+09:00 | 2010-12-15T18:19+09:00 |
| jvndb-2010-000062 | Internet Explorer vulnerable to cross-site scripting | 2010-12-15T18:18+09:00 | 2010-12-15T18:18+09:00 |
| jvndb-2010-002468 | EUR Form Client Arbitrary File Execution Vulnerability | 2010-12-14T15:21+09:00 | 2010-12-14T15:21+09:00 |
| jvndb-2010-002467 | Interstage Application Server Information Disclosure Vulnerability | 2010-12-14T15:18+09:00 | 2010-12-14T15:18+09:00 |
| jvndb-2010-001538 | Safari address bar spoofing vulnerability | 2010-11-26T17:16+09:00 | 2010-12-10T17:48+09:00 |
| jvndb-2010-000061 | Movable Type vulnerable to SQL injection | 2010-12-08T18:28+09:00 | 2010-12-08T18:28+09:00 |
| jvndb-2010-000060 | Movable Type vulnerable to cross-site scripting | 2010-12-08T18:26+09:00 | 2010-12-08T18:26+09:00 |
| jvndb-2010-000059 | Vulnerability in Epson printer driver installer where access permissions are changed | 2010-12-08T18:25+09:00 | 2010-12-08T18:25+09:00 |
| jvndb-2010-000058 | Clipboard contents alteration vulnerability in Grani | 2010-12-01T20:27+09:00 | 2010-12-01T20:27+09:00 |
| jvndb-2010-000057 | Clipboard contents alteration vulnerability in Sleipnir | 2010-12-01T20:27+09:00 | 2010-12-01T20:27+09:00 |
| jvndb-2010-000056 | Google Chrome information disclosure vulnerability | 2010-11-26T17:32+09:00 | 2010-11-26T17:32+09:00 |
| jvndb-2010-000053 | Ichitaro series vulnerable to arbitrary code execution | 2010-11-04T19:11+09:00 | 2010-11-05T16:15+09:00 |
| jvndb-2010-000052 | Ichitaro series vulnerable to arbitrary code execution | 2010-11-04T19:10+09:00 | 2010-11-05T16:15+09:00 |
| jvndb-2010-000051 | GVim may insecurely load dynamic libraries | 2010-11-01T18:51+09:00 | 2010-11-01T18:51+09:00 |
| jvndb-2010-000050 | Active! mail 6 vulnerable to HTTP header injection | 2010-10-29T20:36+09:00 | 2010-10-29T20:36+09:00 |
| jvndb-2010-000046 | Apsaly may insecurely load executable files | 2010-10-26T16:52+09:00 | 2010-10-26T16:52+09:00 |
| jvndb-2010-000045 | TeraPad may insecurely load dynamic libraries | 2010-10-26T16:51+09:00 | 2010-10-26T16:51+09:00 |
| jvndb-2010-000049 | Multiple Yokka provided products may insecurely load executable files | 2010-10-25T17:43+09:00 | 2010-10-25T17:43+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1418-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-04-30T12:09:46Z | 2025-04-30T12:09:46Z |
| suse-su-2025:20216-1 | Security update for containerd | 2025-04-30T09:17:09Z | 2025-04-30T09:17:09Z |
| suse-su-2025:1416-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-04-30T09:10:35Z | 2025-04-30T09:10:35Z |
| suse-su-2025:1414-1 | Security update for MozillaFirefox | 2025-04-30T06:59:24Z | 2025-04-30T06:59:24Z |
| suse-su-2025:1413-1 | Security update for augeas | 2025-04-30T06:59:12Z | 2025-04-30T06:59:12Z |
| suse-su-2025:1408-1 | Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5) | 2025-04-29T23:17:49Z | 2025-04-29T23:17:49Z |
| suse-su-2025:1403-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-04-29T23:17:20Z | 2025-04-29T23:17:20Z |
| suse-su-2025:1402-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) | 2025-04-29T19:10:57Z | 2025-04-29T19:10:57Z |
| suse-su-2025:1399-1 | Security update for java-11-openjdk | 2025-04-29T13:35:08Z | 2025-04-29T13:35:08Z |
| suse-su-2025:20212-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20211-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-04-29T11:24:25Z | 2025-04-29T11:24:25Z |
| suse-su-2025:20315-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20215-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20214-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-04-29T11:22:27Z | 2025-04-29T11:22:27Z |
| suse-su-2025:20314-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20213-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-04-29T11:20:13Z | 2025-04-29T11:20:13Z |
| suse-su-2025:20210-1 | Security update for elemental-toolkit | 2025-04-29T11:13:15Z | 2025-04-29T11:13:15Z |
| suse-su-2025:20209-1 | Security update for gpg2 | 2025-04-29T11:11:44Z | 2025-04-29T11:11:44Z |
| suse-su-2025:20219-1 | Security update for u-boot | 2025-04-29T11:10:08Z | 2025-04-29T11:10:08Z |
| suse-su-2025:20207-1 | Security update for expat | 2025-04-29T11:07:45Z | 2025-04-29T11:07:45Z |
| suse-su-2025:20297-1 | Security update for gnutls | 2025-04-29T10:18:50Z | 2025-04-29T10:18:50Z |
| suse-su-2025:1392-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-04-28T13:41:00Z | 2025-04-28T13:41:00Z |
| suse-su-2025:1387-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6) | 2025-04-28T13:10:55Z | 2025-04-28T13:10:55Z |
| suse-su-2025:1385-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-04-28T13:10:49Z | 2025-04-28T13:10:49Z |
| suse-su-2025:1381-1 | Security update for cifs-utils | 2025-04-28T07:37:13Z | 2025-04-28T07:37:13Z |
| suse-su-2025:1380-1 | Security update for libraw | 2025-04-28T07:36:42Z | 2025-04-28T07:36:42Z |
| suse-su-2025:1374-1 | Security update for runc | 2025-04-25T12:39:27Z | 2025-04-25T12:39:27Z |
| suse-su-2025:20206-1 | Security update for the Linux Kernel | 2025-04-25T09:37:28Z | 2025-04-25T09:37:28Z |
| suse-su-2025:1370-1 | Security update for govulncheck-vulndb | 2025-04-25T08:23:27Z | 2025-04-25T08:23:27Z |
| suse-su-2025:20283-1 | Security update for the Linux Kernel | 2025-04-25T07:35:12Z | 2025-04-25T07:35:12Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13560-1 | nodejs-electron-27.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13559-1 | libnss_slurm2-23.02.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13558-1 | perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13557-1 | gstreamer-plugins-bad-1.22.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13556-1 | libwireshark17-4.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13555-1 | libQt6Concurrent6-6.6.1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13554-1 | proftpd-1.3.8b-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13553-1 | libQt5Bootstrap-devel-static-32bit-5.15.12+kde147-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13552-1 | libjpeg-turbo-3.0.1-77.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13551-1 | gdk-pixbuf-loader-libheif-1.17.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13550-1 | libcryptopp-devel-8.9.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13549-1 | bsdtar-3.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13548-1 | ghostscript-9.56.1-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13547-1 | kernel-devel-6.6.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13546-1 | libmosquitto1-2.0.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13545-1 | liblog4cxx-devel-1.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13544-1 | libredwg-devel-0.12.5.6924-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13543-1 | exim-4.97.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13542-1 | cargo-audit-advisory-db-20231219-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13541-1 | deepin-compressor-5.12.13-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13540-1 | libxerces-c-3_2-3.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13539-1 | proftpd-1.3.8b-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13538-1 | postfix-3.8.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13537-1 | cJSON-devel-1.7.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13536-1 | deepin-reader-5.10.23-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13535-1 | zabbix-agent-6.0.25-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13534-1 | avif-tools-1.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13533-1 | cacti-1.2.26-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13532-1 | nodejs-electron-27.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13531-1 | MozillaFirefox-121.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23592 | Huawei HarmonyOS和EMUI Partition模块存在未明漏洞 | 2025-08-18 | 2025-10-15 |
| cnvd-2025-23583 | Huawei HarmonyOS和EMUI竞争条件漏洞漏洞 | 2025-08-18 | 2025-10-15 |
| cnvd-2025-23582 | GPT-SoVITS-WebUI代码问题漏洞（CNVD-2025-23582） | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23581 | GPT-SoVITS-WebUI open_slice函数命令注入漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23580 | GPT-SoVITS-WebUI open_denoise函数命令注入漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23579 | GPT-SoVITS-WebUI open_asr函数命令注入漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23578 | GPT-SoVITS-WebUI代码问题漏洞（CNVD-2025-23578） | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23577 | GPT-SoVITS-WebUI change_label函数命令注入漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23576 | GPT-SoVITS-WebUI代码问题漏洞（CNVD-2025-23576） | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23575 | GPT-SoVITS-WebUI代码问题漏洞（CNVD-2025-23575） | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23574 | GPT-SoVITS-WebUI代码问题漏洞 | 2025-07-21 | 2025-10-15 |
| cnvd-2025-23573 | Mattermost信息泄露漏洞（CNVD-2025-23573） | 2022-07-18 | 2025-10-15 |
| cnvd-2025-23761 | WordPress Block For Mailchimp plugin服务端请求伪造漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23760 | WordPress Blappsta Mobile App plugin SQL注入漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23759 | WordPress Big Post Shipping for WooCommerce plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23758 | WordPress Bei Fen plugin文件包含漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23757 | WordPress Backup Bolt plugin任意文件下载漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23756 | WordPress Auto Bulb Finder plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23755 | WordPress Appy Pie Connect for WooCommerce plugin缺少授权漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23754 | WordPress AP Background plugin任意文件上传漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23753 | WordPress AP Background plugin跨站请求伪造漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23752 | WordPress AP Background plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23751 | WordPress Any News Ticker plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23750 | WordPress All Social Share Options plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23749 | WordPress All in One Music Player plugin路径遍历漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23748 | WordPress Ajax WooSearch plugin SQL注入漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23747 | WordPress AffiliateWP plugin SQL注入漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23746 | WordPress A Simple Multilanguage plugin跨站脚本漏洞 | 2025-10-13 | 2025-10-14 |
| cnvd-2025-23740 | GNU gdb释放后重用漏洞 | 2023-07-30 | 2025-10-14 |
| cnvd-2025-23739 | GNU gdb堆缓冲区溢出漏洞 | 2023-07-30 | 2025-10-14 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0862 | Multiples vulnérabilités dans Oracle Java SE | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0861 | Multiples vulnérabilités dans Oracle WebLogic | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0860 | Multiples vulnérabilités dans Oracle Database Server | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0859 | Multiples vulnérabilités dans Moodle | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0858 | Vulnérabilité dans Elastic Endpoint | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0857 | Vulnérabilité dans Sophos Firewall | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0856 | Vulnérabilité dans Google Chrome | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0855 | Vulnérabilité dans Aruba Networking AirWave Management Platform | 2023-10-18T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0854 | Multiples vulnérabilités dans Moodle | 2023-10-17T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0853 | Vulnérabilité dans Roundcube Webmail | 2023-10-17T00:00:00.000000 | 2023-10-18T00:00:00.000000 |
| certfr-2023-avi-0852 | Multiples vulnérabilités dans SonicWall SonicOS | 2023-10-17T00:00:00.000000 | 2023-10-17T00:00:00.000000 |
| certfr-2023-avi-0851 | Vulnérabilité dans Stormshield Management Center | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0850 | Multiples vulnérabilités dans les produits Nextcloud | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0849 | Multiples vulnérabilités dans AXIS OS | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0848 | Multiples vulnérabilités dans Microsoft Edge | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0847 | Vulnérabilité dans Grafana | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0846 | Multiples vulnérabilités dans les produits Qnap | 2023-10-16T00:00:00.000000 | 2023-10-16T00:00:00.000000 |
| certfr-2023-avi-0845 | Vulnérabilité dans Nextcloud Server | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0844 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0843 | Vulnérabilité dans les produits Symantec | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0842 | Multiples vulnérabilités dans WordPress | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0841 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0840 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0839 | Multiples vulnérabilités dans les produits IBM | 2023-10-13T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0832 | Multiples vulnérabilités dans Apache Tomcat | 2023-10-12T00:00:00.000000 | 2023-10-13T00:00:00.000000 |
| certfr-2023-avi-0838 | Multiples vulnérabilités dans les produits Apple | 2023-10-12T00:00:00.000000 | 2023-10-12T00:00:00.000000 |
| certfr-2023-avi-0837 | Multiples vulnérabilités dans les produits F5 | 2023-10-12T00:00:00.000000 | 2023-10-12T00:00:00.000000 |
| certfr-2023-avi-0836 | Multiples vulnérabilités dans les produits Juniper | 2023-10-12T00:00:00.000000 | 2023-10-12T00:00:00.000000 |
| certfr-2023-avi-0835 | Vulnérabilité dans Palo Alto Networks Cortex XSOAR | 2023-10-12T00:00:00.000000 | 2023-10-12T00:00:00.000000 |
| certfr-2023-avi-0834 | Multiples vulnérabilités dans Xen | 2023-10-12T00:00:00.000000 | 2023-10-12T00:00:00.000000 |