Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-64367 |
6.5 (3.1)
|
WordPress Groundhogg plugin <= 4.2.6 - Cross Site Scri… |
Adrian Tobey |
Groundhogg |
2025-10-31T11:42:40.076Z | 2026-01-20T14:28:22.541Z |
| CVE-2025-64370 |
5.3 (3.1)
|
WordPress YOP Poll plugin <= 6.5.38 - Broken Access Co… |
YOP |
YOP Poll |
2025-11-13T09:24:33.651Z | 2026-01-20T14:28:22.538Z |
| CVE-2025-64368 |
5.4 (3.1)
|
WordPress Bard theme <= 1.6 - Cross Site Request Forge… |
Mikado-Themes |
Bard |
2025-10-31T11:42:40.843Z | 2026-01-20T14:28:22.538Z |
| CVE-2025-64361 |
6.5 (3.1)
|
WordPress Consulting Elementor Widgets plugin <= 1.4.2… |
StylemixThemes |
Consulting Elementor Widgets |
2025-10-31T11:42:33.072Z | 2026-01-20T14:28:22.533Z |
| CVE-2025-64359 |
7.5 (3.1)
|
WordPress Consulting theme < 6.7.5 - Local File Inclus… |
StylemixThemes |
Consulting |
2025-10-31T11:42:31.602Z | 2026-01-20T14:28:22.532Z |
| CVE-2025-64352 |
2.7 (3.1)
|
WordPress Essential Addons for Elementor plugin <= 6.2… |
WPDeveloper |
Essential Addons for Elementor |
2025-10-31T11:42:23.045Z | 2026-01-20T14:28:22.531Z |
| CVE-2025-64369 |
6.5 (3.1)
|
WordPress Contact Form Email plugin <= 1.3.58 - Broken… |
codepeople |
Contact Form Email |
2025-11-13T09:24:33.215Z | 2026-01-20T14:28:22.528Z |
| CVE-2025-64371 |
8.5 (3.1)
|
WordPress Traveler theme < 3.2.6 - SQL Injection vulne… |
shinetheme |
Traveler |
2025-12-18T07:22:15.635Z | 2026-01-20T14:28:22.518Z |
| CVE-2025-64357 |
4.3 (3.1)
|
WordPress Advanced Database Cleaner plugin <= 3.1.6 - … |
Younes JFR. |
Advanced Database Cleaner |
2025-10-31T11:42:27.627Z | 2026-01-20T14:28:22.509Z |
| CVE-2025-64364 |
7.5 (3.1)
|
WordPress Masterstudy theme < 4.8.126 - Local File Inc… |
StylemixThemes |
Masterstudy |
2025-10-31T11:42:37.865Z | 2026-01-20T14:28:22.508Z |
| CVE-2025-64358 |
4.3 (3.1)
|
WordPress Smart Coupons for WooCommerce plugin <= 2.2.… |
WebToffee |
Smart Coupons for WooCommerce |
2025-10-31T11:42:28.439Z | 2026-01-20T14:28:22.505Z |
| CVE-2025-64362 |
6.5 (3.1)
|
WordPress K Elements plugin < 5.5.0 - Cross Site Scrip… |
SeventhQueen |
K Elements |
2025-10-31T11:42:36.419Z | 2026-01-20T14:28:22.503Z |
| CVE-2025-64372 |
7.1 (3.1)
|
WordPress Traveler theme < 3.2.6 - Cross Site Scriptin… |
shinetheme |
Traveler |
2025-12-18T07:22:15.823Z | 2026-01-20T14:28:22.489Z |
| CVE-2025-64351 |
4.3 (3.1)
|
WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitiv… |
Rank Math SEO |
Rank Math SEO |
2025-10-31T11:42:22.226Z | 2026-01-20T14:28:22.441Z |
| CVE-2025-64293 |
7.6 (3.1)
|
WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Inject… |
Golemiq |
0 Day Analytics |
2025-11-12T15:52:49.026Z | 2026-01-20T14:28:22.418Z |
| CVE-2025-64353 |
8.8 (3.1)
|
WordPress Polylang plugin <= 3.7.3 - Deserialization o… |
Chouby |
Polylang |
2025-10-31T11:42:25.417Z | 2026-01-20T14:28:22.353Z |
| CVE-2025-64354 |
6.5 (3.1)
|
WordPress Gutenberg plugin <= 21.8.2 - Cross Site Scri… |
Matias Ventura |
Gutenberg |
2025-10-31T11:42:26.178Z | 2026-01-20T14:28:22.341Z |
| CVE-2025-64295 |
6.5 (3.1)
|
WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sens… |
Syed Balkhi |
All In One SEO Pack |
2025-12-18T07:22:15.447Z | 2026-01-20T14:28:22.289Z |
| CVE-2025-64355 |
6.5 (3.1)
|
WordPress JetElements For Elementor plugin <= 2.7.12 -… |
Crocoblock |
JetElements For Elementor |
2025-12-18T16:16:33.764Z | 2026-01-20T14:28:22.280Z |
| CVE-2025-64289 |
5.9 (3.1)
|
WordPress Premmerce Product Search for WooCommerce plu… |
Premmerce |
Premmerce Product Search for WooCommerce |
2025-10-29T08:38:14.838Z | 2026-01-20T14:28:22.275Z |
| CVE-2025-64296 |
5.3 (3.1)
|
WordPress Facebook for WooCommerce plugin <= 3.5.7 - B… |
Facebook |
Facebook for WooCommerce |
2025-10-29T04:08:45.858Z | 2026-01-20T14:28:22.271Z |
| CVE-2025-64290 |
4.3 (3.1)
|
WordPress Premmerce Product Search for WooCommerce plu… |
Premmerce |
Premmerce Product Search for WooCommerce |
2025-10-29T08:38:15.299Z | 2026-01-20T14:28:22.268Z |
| CVE-2025-64350 |
3.8 (3.1)
|
WordPress Rank Math SEO plugin <= 1.0.252.1 - Broken A… |
Rank Math SEO |
Rank Math SEO |
2025-10-31T11:42:17.908Z | 2026-01-20T14:28:22.231Z |
| CVE-2025-64294 |
5.3 (3.1)
|
WordPress WP Snow Effect plugin <= 1.1.15 - Broken Acc… |
d3wp |
WP Snow Effect |
2025-11-03T13:09:39.398Z | 2026-01-20T14:28:22.200Z |
| CVE-2025-64356 |
4.3 (3.1)
|
WordPress Insert PHP Code Snippet plugin <= 1.4.3 - Br… |
f1logic |
Insert PHP Code Snippet |
2025-10-31T11:42:26.908Z | 2026-01-20T14:28:22.178Z |
| CVE-2025-64292 |
5.4 (3.1)
|
WordPress Analytics Germanized for Google Analytics pl… |
PascalBajorat |
Analytics Germanized for Google Analytics |
2025-11-13T09:24:32.781Z | 2026-01-20T14:28:22.131Z |
| CVE-2025-64291 |
5.9 (3.1)
|
WordPress Premmerce User Roles plugin <= 1.0.13 - Cros… |
Premmerce |
Premmerce User Roles |
2025-10-29T08:38:15.757Z | 2026-01-20T14:28:22.052Z |
| CVE-2025-64288 |
4.3 (3.1)
|
WordPress Premmerce plugin <= 1.3.19 - Cross Site Requ… |
Premmerce |
Premmerce |
2025-10-29T08:38:14.400Z | 2026-01-20T14:28:22.041Z |
| CVE-2025-64287 |
8.1 (3.1)
|
WordPress Alloggio - Hotel Booking Theme theme <= 1.8 … |
Edge-Themes |
Alloggio - Hotel Booking |
2025-11-06T15:56:13.317Z | 2026-01-20T14:28:22.019Z |
| CVE-2025-64267 |
4.3 (3.1)
|
WordPress WooCommerce Ultimate Points And Rewards plug… |
WPSwings |
WooCommerce Ultimate Points And Rewards |
2025-11-13T09:24:29.783Z | 2026-01-20T14:28:21.878Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-65368 |
6.1 (3.1)
|
SparkyFitness v0.15.8.2 is vulnerable to Cross Si… |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T21:03:15.128Z |
| CVE-2025-15492 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RainyGao DocSys GroupMemberMapper.xml sql injection |
RainyGao |
DocSys |
2026-01-09T16:02:07.110Z | 2026-01-09T18:38:08.299Z |
| CVE-2026-22779 |
6.3 (4.0)
|
BlackSheep ClientSession is vulnerable to CRLF injection |
Neoteroi |
BlackSheep |
2026-01-14T16:49:34.202Z | 2026-01-14T21:01:52.743Z |
| CVE-2025-15494 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
RainyGao DocSys UserMapper.xml sql injection |
RainyGao |
DocSys |
2026-01-09T16:32:08.806Z | 2026-01-09T18:37:05.234Z |
| CVE-2026-22690 |
2.7 (4.0)
|
pypdf has possible long runtimes for missing /Root obj… |
py-pdf |
pypdf |
2026-01-10T04:41:20.773Z | 2026-01-12T17:07:00.323Z |
| CVE-2025-61548 |
9.8 (3.1)
|
SQL Injection is present on the hfInventoryDistFo… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-08T19:44:35.115Z |
| CVE-2025-61547 |
6.8 (3.1)
|
Cross-Site Request Forgery (CSRF) is present on a… |
n/a |
n/a |
2026-01-08T00:00:00.000Z | 2026-01-08T18:52:54.861Z |
| CVE-2025-61937 |
10 (3.1)
10 (4.0)
|
AVEVA Process Optimization Code Injection |
AVEVA |
Process Optimization |
2026-01-16T00:04:37.128Z | 2026-01-16T15:10:11.404Z |
| CVE-2025-61943 |
8.4 (3.1)
9.3 (4.0)
|
AVEVA Process Optimization SQL Injection |
AVEVA |
Process Optimization |
2026-01-16T00:09:18.629Z | 2026-01-16T15:06:06.845Z |
| CVE-2025-9458 |
7.8 (3.1)
|
PRT File Parsing Memory Corruption Vulnerability |
Autodesk |
Shared Components |
2025-11-07T18:01:48.595Z | 2026-01-22T14:09:37.576Z |
| CVE-2025-9457 |
7.8 (3.1)
|
PRT File Parsing Memory Corruption Vulnerability |
Autodesk |
Shared Components |
2025-12-15T23:37:20.671Z | 2026-01-22T14:12:08.281Z |
| CVE-2025-9456 |
7.8 (3.1)
|
SLDPRT File Parsing Memory Corruption Vulnerability |
Autodesk |
Shared Components |
2025-12-15T23:36:32.898Z | 2026-01-22T14:13:25.959Z |
| CVE-2025-9452 |
7.8 (3.1)
|
SLDPRT File Parsing Memory Corruption Vulnerability |
Autodesk |
Shared Components |
2025-12-15T23:32:39.490Z | 2026-01-22T14:14:34.086Z |
| CVE-2025-63896 |
7.6 (3.1)
|
An issue in the Bluetooth Human Interface Device … |
n/a |
n/a |
2025-12-04T00:00:00.000Z | 2026-01-22T14:12:53.703Z |
| CVE-2025-11178 |
7.3 (3.0)
|
Local privilege escalation due to DLL hijacking v… |
Acronis |
Acronis True Image |
2025-09-30T14:52:20.711Z | 2026-01-22T15:01:39.787Z |
| CVE-2024-37006 |
7.8 (3.1)
|
Multiple Vulnerabilities in the Autodesk AutoCAD Deskt… |
Autodesk |
AutoCAD |
2024-06-25T03:15:46.957Z | 2026-01-22T14:15:29.821Z |
| CVE-2024-37000 |
7.8 (3.1)
|
Multiple Vulnerabilities in the Autodesk AutoCAD Deskt… |
Autodesk |
AutoCAD |
2024-06-25T03:01:53.604Z | 2026-01-22T14:16:27.899Z |
| CVE-2024-23157 |
7.8 (3.1)
|
Multiple ZDI Vulnerabilities in Autodesk AutoCAD and c… |
Autodesk |
AutoCAD |
2024-06-25T03:30:58.799Z | 2026-01-22T14:17:40.954Z |
| CVE-2024-23156 |
7.8 (3.1)
|
Multiple ZDI Vulnerabilities in Autodesk AutoCAD and c… |
Autodesk |
AutoCAD |
2024-06-25T03:30:03.304Z | 2026-01-22T14:19:00.403Z |
| CVE-2024-23148 |
7.8 (3.1)
|
Multiple Vulnerabilities in the Autodesk AutoCAD Deskt… |
Autodesk |
AutoCAD |
2024-06-25T02:42:11.300Z | 2026-01-22T14:19:32.824Z |
| CVE-2024-23147 |
7.8 (3.1)
|
Multiple Vulnerabilities in the Autodesk AutoCAD Deskt… |
Autodesk |
AutoCAD |
2024-06-25T02:32:13.779Z | 2026-01-22T14:20:18.924Z |
| CVE-2024-12178 |
7.8 (3.1)
|
DWFX File Parsing Vulnerabilities in Autodesk Naviswor… |
Autodesk |
Navisworks Freedom |
2024-12-17T15:16:31.988Z | 2026-01-22T14:21:21.091Z |
| CVE-2025-64691 |
8.8 (3.1)
9.3 (4.0)
|
AVEVA Process Optimization Code Injection |
AVEVA |
Process Optimization |
2026-01-16T00:06:56.554Z | 2026-01-16T15:12:10.618Z |
| CVE-2025-64729 |
8.1 (3.1)
8.6 (4.0)
|
AVEVA Process Optimization Missing Authorization |
AVEVA |
Process Optimization |
2026-01-16T00:12:45.798Z | 2026-01-16T14:53:45.166Z |
| CVE-2025-65117 |
7.4 (3.1)
8.5 (4.0)
|
AVEVA Process Optimization Use of Potentially Dangerou… |
AVEVA |
Process Optimization |
2026-01-16T00:14:27.567Z | 2026-01-16T14:53:13.050Z |
| CVE-2025-65118 |
8.8 (3.1)
9.3 (4.0)
|
AVEVA Process Optimization Uncontrolled Search Path Element |
AVEVA |
Process Optimization |
2026-01-16T00:11:12.560Z | 2026-01-16T15:39:37.345Z |
| CVE-2025-64769 |
7.1 (3.1)
7.6 (4.0)
|
AVEVA Process Optimization Cleartext Transmission of S… |
AVEVA |
Process Optimization |
2026-01-16T00:16:48.949Z | 2026-01-16T14:52:30.496Z |
| CVE-2026-22691 |
2.7 (4.0)
|
pypdf has possible long runtimes for malformed startxref |
py-pdf |
pypdf |
2026-01-10T04:46:12.423Z | 2026-01-12T16:48:53.503Z |
| CVE-2021-41739 |
N/A
|
A OS Command Injection vulnerability was discover… |
n/a |
n/a |
2022-05-05T10:41:00 | 2024-08-04T03:15:29.248Z |
| CVE-2026-22700 |
7.5 (3.1)
|
RustCrypto Has Insufficient Length Validation in decry… |
RustCrypto |
elliptic-curves |
2026-01-10T05:17:25.583Z | 2026-01-12T14:46:46.227Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-43560 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.620 | 2026-01-22T10:16:04.620 |
| fkie_cve-2022-43559 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.560 | 2026-01-22T10:16:04.560 |
| fkie_cve-2022-43558 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.483 | 2026-01-22T10:16:04.483 |
| fkie_cve-2022-34214 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.403 | 2026-01-22T10:16:04.403 |
| fkie_cve-2022-32150 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.337 | 2026-01-22T10:16:04.337 |
| fkie_cve-2022-24911 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.263 | 2026-01-22T10:16:04.263 |
| fkie_cve-2022-24380 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.200 | 2026-01-22T10:16:04.200 |
| fkie_cve-2022-22147 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.130 | 2026-01-22T10:16:04.130 |
| fkie_cve-2022-21130 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:04.057 | 2026-01-22T10:16:04.057 |
| fkie_cve-2021-3926 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.980 | 2026-01-22T10:16:03.980 |
| fkie_cve-2020-8460 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.910 | 2026-01-22T10:16:03.910 |
| fkie_cve-2020-8459 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.840 | 2026-01-22T10:16:03.840 |
| fkie_cve-2020-8458 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.780 | 2026-01-22T10:16:03.780 |
| fkie_cve-2020-8457 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.703 | 2026-01-22T10:16:03.703 |
| fkie_cve-2020-8456 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.633 | 2026-01-22T10:16:03.633 |
| fkie_cve-2020-8455 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.570 | 2026-01-22T10:16:03.570 |
| fkie_cve-2020-8454 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.500 | 2026-01-22T10:16:03.500 |
| fkie_cve-2020-8453 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:03.433 | 2026-01-22T10:16:03.433 |
| fkie_cve-2020-8452 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. | 2026-01-22T10:16:02.930 | 2026-01-22T10:16:02.930 |
| fkie_cve-2020-8451 | Rejected reason: The reserved CVE was never used. | 2026-01-22T08:16:00.447 | 2026-01-22T08:16:00.447 |
| fkie_cve-2025-7425 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corru… | 2025-07-10T14:15:27.877 | 2026-01-22T05:16:19.960 |
| fkie_cve-2025-6020 | A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths withou… | 2025-06-17T13:15:21.660 | 2026-01-22T05:16:17.213 |
| fkie_cve-2025-5914 | A vulnerability has been identified in the libarchive library, specifically within the archive_read… | 2025-06-09T20:15:26.123 | 2026-01-22T05:16:16.150 |
| fkie_cve-2025-49796 | A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file … | 2025-06-16T16:15:19.370 | 2026-01-22T05:16:11.380 |
| fkie_cve-2025-49794 | A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements … | 2025-06-16T16:15:18.997 | 2026-01-22T05:16:11.147 |
| fkie_cve-2025-13439 | The Fancy Product Designer plugin for WordPress is vulnerable to Information Disclosure and PHAR De… | 2025-12-16T08:15:51.753 | 2026-01-22T02:15:50.087 |
| fkie_cve-2023-53894 | phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by expl… | 2025-12-16T17:16:01.550 | 2026-01-21T22:26:08.933 |
| fkie_cve-2021-47780 | Macro Expert 4.7 contains an unquoted service path vulnerability that allows local users to potenti… | 2026-01-16T00:16:21.130 | 2026-01-21T22:24:18.603 |
| fkie_cve-2021-47805 | Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configura… | 2026-01-16T00:16:25.083 | 2026-01-21T22:23:23.300 |
| fkie_cve-2025-66686 | A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated… | 2026-01-07T17:16:01.117 | 2026-01-21T22:07:52.267 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-p8jj-567m-jw77 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-mqq8-cpfh-hpm3 |
6.5 (3.1)
|
Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Map… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-m4cg-3fm9-j6x9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-jxgx-9wwv-2g4h |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-j934-wxvm-8fw9 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hrc4-whhq-v375 |
6.5 (3.1)
|
Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-fo… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-hgf5-67r8-3fcm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-h6rm-qgch-65pr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-gwq3-r365-h2g8 |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in alekv P… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-fqq6-293f-f549 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-f36m-hf38-h6rh |
5.3 (3.1)
|
Missing Authorization vulnerability in WebCodingPlace Image Caption Hover Pro image-caption-hover-p… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-cqxc-j3v9-5m9g |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9r4p-xvf3-9x4q |
6.5 (3.1)
|
Missing Authorization vulnerability in WP Delicious WP Delicious delicious-recipes allows Exploitin… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-9gx8-7m79-g5p3 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-98c9-f4v9-v6qr |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x9-7c94-7879 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-93x7-mfr3-2vx3 |
5.4 (3.1)
|
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-8q5w-6x37-j5hg |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-865r-5g86-hfxf |
5.3 (3.1)
|
Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-7f3f-ppww-82r3 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-74xg-56wg-gvpj |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6pvg-49r3-g3c7 |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-6j84-m7wp-j9jm |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Jacques Malgrange Rencontre rencontre allows Sto… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-59m8-jmcc-pxx7 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-57rv-vq9v-c6qg |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-5263-ggmq-48gj |
5.4 (3.1)
|
Missing Authorization vulnerability in Oleksandr Lysyi Debug Log Viewer debug-log-viewer allows Exp… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-3662-gvg6-j9xx |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2wqc-47g4-pm22 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ghsa-2w86-r6rm-76wr |
5.3 (3.1)
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthem… | 2025-12-09T18:30:43Z | 2026-01-20T15:32:11Z |
| ghsa-2q9h-6v2j-hfpp |
9.8 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-09T18:30:42Z | 2026-01-20T15:32:11Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-55 |
|
gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in … | gunicorn | 2018-04-18T19:29:00Z | 2021-07-15T02:22:14.592267Z |
| pysec-2018-54 |
|
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL. | flask-admin | 2018-09-05T14:29:00Z | 2021-07-15T02:22:14.431955Z |
| pysec-2017-44 |
|
In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled i… | django | 2017-09-07T13:29:00Z | 2021-07-15T02:22:10.638315Z |
| pysec-2016-18 |
|
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when se… | django | 2016-12-09T20:59:00Z | 2021-07-15T02:22:10.532243Z |
| pysec-2016-17 |
|
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded… | django | 2016-12-09T20:59:00Z | 2021-07-15T02:22:10.369344Z |
| pysec-2016-16 |
|
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.225115Z |
| pysec-2016-15 |
|
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows… | django | 2016-04-08T15:59:00Z | 2021-07-15T02:22:10.137209Z |
| pysec-2016-14 |
|
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenti… | django | 2016-02-08T19:59:00Z | 2021-07-15T02:22:10.055528Z |
| pysec-2015-23 |
|
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.fl… | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:10.010649Z |
| pysec-2015-22 |
|
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before … | django | 2015-08-24T14:59:00Z | 2021-07-15T02:22:09.927134Z |
| pysec-2015-21 |
|
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a d… | django | 2015-07-14T17:59:00Z | 2021-07-15T02:22:09.798596Z |
| pysec-2015-19 |
|
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not… | django | 2015-06-02T14:59:00Z | 2021-07-15T02:22:09.577532Z |
| pysec-2013-21 |
|
The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.… | django | 2013-10-04T17:55:00Z | 2021-07-15T02:22:09.088856Z |
| pysec-2013-20 |
|
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1… | django | 2013-09-16T19:14:00Z | 2021-07-15T02:22:08.994909Z |
| pysec-2013-19 |
|
Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/adm… | django | 2013-10-04T17:55:00Z | 2021-07-15T02:22:08.907870Z |
| pysec-2013-18 |
|
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x be… | django | 2013-09-23T20:55:00Z | 2021-07-15T02:22:08.840916Z |
| pysec-2013-17 |
|
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release… | django | 2013-05-02T14:55:00Z | 2021-07-15T02:22:08.748982Z |
| pysec-2013-16 |
|
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 b… | django | 2013-05-02T14:55:00Z | 2021-07-15T02:22:08.650123Z |
| pysec-2012-7 |
|
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x befo… | django | 2012-11-18T23:55:00Z | 2021-07-15T02:22:08.562601Z |
| pysec-2011-12 |
|
Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on … | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.473566Z |
| pysec-2011-11 |
|
Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.… | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.384566Z |
| pysec-2011-10 |
|
Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests… | django | 2011-02-14T21:00:00Z | 2021-07-15T02:22:08.278158Z |
| pysec-2011-9 |
|
The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x bef… | django | 2011-01-10T20:00:00Z | 2021-07-15T02:22:08.187235Z |
| pysec-2011-8 |
|
The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before… | django | 2011-01-10T20:00:00Z | 2021-07-15T02:22:08.091343Z |
| pysec-2010-12 |
|
Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attac… | django | 2010-09-14T19:00:00Z | 2021-07-15T02:22:08.006222Z |
| pysec-2009-4 |
|
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and … | django | 2009-10-13T10:30:00Z | 2021-07-15T02:22:07.960103Z |
| pysec-2009-3 |
|
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not prope… | django | 2009-08-04T16:30:00Z | 2021-07-15T02:22:07.875702Z |
| pysec-2008-2 |
|
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP… | django | 2008-09-04T17:41:00Z | 2021-07-15T02:22:07.826825Z |
| pysec-2008-1 |
|
Cross-site scripting (XSS) vulnerability in the login form in the administration applicat… | django | 2008-05-23T15:32:00Z | 2021-07-15T02:22:07.778598Z |
| pysec-2007-1 |
|
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as … | django | 2007-10-30T19:46:00Z | 2021-07-15T02:22:07.728618Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3512 | ** REJECT ** **DUPLICATE*** Please use CVE-2024-2583 instead. | 2024-04-11T05:03:27.315790Z |
| gsd-2024-3587 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.315493Z |
| gsd-2024-3434 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.313876Z |
| gsd-2024-3530 | A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It … | 2024-04-11T05:03:27.312781Z |
| gsd-2024-3447 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.312326Z |
| gsd-2024-3640 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.310516Z |
| gsd-2024-3346 | A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as cri… | 2024-04-11T05:03:27.309732Z |
| gsd-2024-3288 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.305270Z |
| gsd-2024-3451 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.305078Z |
| gsd-2024-3593 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.303907Z |
| gsd-2024-3284 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.303695Z |
| gsd-2024-3630 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.303493Z |
| gsd-2024-3402 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.303228Z |
| gsd-2024-3416 | A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0.… | 2024-04-11T05:03:27.302564Z |
| gsd-2024-3372 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.302233Z |
| gsd-2024-3646 | A command injection vulnerability was identified in GitHub Enterprise Server that allowed… | 2024-04-11T05:03:27.301713Z |
| gsd-2024-3634 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.301511Z |
| gsd-2024-3341 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.301053Z |
| gsd-2024-3516 | Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote a… | 2024-04-11T05:03:27.300112Z |
| gsd-2024-3493 | A specific malformed fragmented packet type (fragmented packets may be generated automat… | 2024-04-11T05:03:27.299090Z |
| gsd-2024-3551 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.298895Z |
| gsd-2024-3452 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.298658Z |
| gsd-2024-3495 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.297826Z |
| gsd-2024-3350 | A vulnerability, which was classified as critical, has been found in SourceCodester Aplay… | 2024-04-11T05:03:27.296473Z |
| gsd-2024-3510 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.296018Z |
| gsd-2024-3439 | A vulnerability was found in SourceCodester Prison Management System 1.0. It has been cla… | 2024-04-11T05:03:27.294064Z |
| gsd-2024-3606 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.293767Z |
| gsd-2024-3390 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.293304Z |
| gsd-2024-3330 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292829Z |
| gsd-2024-3511 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292073Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2024-10059 | Malicious code in oopenwea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10058 | Malicious code in oopensea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10057 | Malicious code in oepnsea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10056 | Malicious code in oepenwea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10055 | Malicious code in oepensea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10054 | Malicious code in oenwsea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10053 | Malicious code in oenwea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10052 | Malicious code in oensea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10051 | Malicious code in oenesea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10050 | Malicious code in oenasea (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10049 | Malicious code in netfetcher (PyPI) | 2024-08-07T10:08:45Z | 2025-12-11T09:27:53Z |
| mal-2024-10048 | Malicious code in modernreqs (PyPI) | 2024-08-29T10:57:16Z | 2025-12-11T09:27:53Z |
| mal-2024-10046 | Malicious code in mlc-llm-nightly (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:53Z |
| mal-2024-10044 | Malicious code in mecit3 (PyPI) | 2024-08-05T22:25:51Z | 2025-12-11T09:27:53Z |
| mal-2024-10043 | Malicious code in mecit2 (PyPI) | 2024-08-05T22:25:51Z | 2025-12-11T09:27:53Z |
| mal-2024-10042 | Malicious code in mecit1 (PyPI) | 2024-08-05T22:25:51Z | 2025-12-11T09:27:53Z |
| mal-2024-10040 | Malicious code in manojmacpy (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-10039 | Malicious code in kongstrong (PyPI) | 2024-07-29T21:40:08Z | 2025-12-11T09:27:53Z |
| mal-2024-10038 | Malicious code in jupiterhelper (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-10037 | Malicious code in jupiter-helper (PyPI) | 2024-08-10T16:25:59Z | 2025-12-11T09:27:53Z |
| mal-2024-10034 | Malicious code in hello-world-package-test (PyPI) | 2024-09-06T11:29:16Z | 2025-12-11T09:27:53Z |
| mal-2024-10032 | Malicious code in graphcore-cloud-tools (PyPI) | 2024-07-26T16:53:30Z | 2025-12-11T09:27:53Z |
| mal-2024-10030 | Malicious code in gentorqkkh (PyPI) | 2024-07-21T11:39:54Z | 2025-12-11T09:27:53Z |
| mal-2024-10029 | Malicious code in formatter-test-package (PyPI) | 2024-08-23T21:20:09Z | 2025-12-11T09:27:53Z |
| mal-2024-10028 | Malicious code in flophttp (PyPI) | 2024-08-29T10:57:16Z | 2025-12-11T09:27:53Z |
| mal-2024-10027 | Malicious code in ezauto (PyPI) | 2024-09-04T21:25:32Z | 2025-12-11T09:27:53Z |
| mal-2024-10024 | Malicious code in ewb3-py (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10023 | Malicious code in evil-package (PyPI) | 2024-07-24T23:03:34Z | 2025-12-11T09:27:53Z |
| mal-2024-10022 | Malicious code in eutherium (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| mal-2024-10021 | Malicious code in ettherium (PyPI) | 2024-06-28T20:16:20Z | 2025-12-11T09:27:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-2230 | PHP: Mehrere Schwachstellen | 2024-09-26T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-2161 | AngularJS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-09-17T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-2089 | Angular: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-09-09T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-1706 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-07-24T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2024-0341 | Angular: Schwachstelle ermöglicht Denial of Service | 2024-02-11T23:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2023-2415 | Oracle Linux: Schwachstelle ermöglicht Denial of Service | 2023-09-20T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2023-1394 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-06-08T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2022-2062 | Linux Kernel: Mehrere Schwachstellen | 2021-12-23T23:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2022-1262 | Oracle Linux: Schwachstelle ermöglicht Denial of Service | 2022-09-01T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2022-0507 | Angular: Schwachstelle ermöglicht Denial of Service | 2022-05-02T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2022-0181 | Grub2: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2022-06-07T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1595 | IBM AIX und VIOS (SQLite): Mehrere Schwachstellen | 2025-07-17T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1594 | IBM Tivoli Netcool/OMNIbus (Eclipse OMR): Mehrere Schwachstellen | 2025-07-17T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1589 | Apache Tomcat: Schwachstelle ermöglicht Denial of Service | 2025-07-17T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1585 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2025-07-16T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1487 | Fortinet FortiSandbox: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-07-08T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1467 | Ruby on Rails: Mehrere Schwachstellen | 2019-03-13T23:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-0297 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2024-3744 | Apache Tomcat: Schwachstelle ermöglicht Codeausführung | 2024-12-22T23:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2024-3715 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-17T23:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2024-0280 | libxml2: Schwachstelle ermöglicht Denial of Service | 2024-02-04T23:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2022-0240 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2022-04-19T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1588 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-07-16T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1586 | Cisco Unified Intelligence Center: Mehrere Schwachstellen | 2025-07-16T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1584 | Cisco Prime Infrastructure und EPNM: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-07-16T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1581 | Fortra GoAnywhere MFT: Schwachstelle ermöglicht Denial of Service | 2025-07-16T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1576 | VMware Produkte: Mehrere Schwachstellen | 2025-07-15T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1531 | QT: Schwachstelle ermöglicht Denial of Service | 2025-07-10T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1454 | Google Chrome: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-07-02T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1012 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2025-05-12T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:5008 | Red Hat Security Advisory: Red Hat build of MicroShift 4.14.0 security update | 2023-10-31T14:23:30+00:00 | 2026-01-21T23:17:38+00:00 |
| rhea-2024:7870 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release | 2024-10-09T14:44:53+00:00 | 2026-01-21T23:17:36+00:00 |
| rhea-2024:3997 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release | 2024-06-20T01:49:37+00:00 | 2026-01-21T23:17:31+00:00 |
| rhea-2024:0555 | Red Hat Enhancement Advisory: Release of AWS Load Balancer Operator 1.1.z on OperatorHub | 2024-01-30T00:27:06+00:00 | 2026-01-21T23:17:30+00:00 |
| rhea-2023:7239 | Red Hat Enhancement Advisory: ExternalDNS Operator 1.2 operator/operand containers | 2023-11-15T16:52:04+00:00 | 2026-01-21T23:17:30+00:00 |
| rhea-2023:6741 | Red Hat Enhancement Advisory: .NET 8.0 bugfix update | 2023-11-07T10:07:12+00:00 | 2026-01-21T23:17:29+00:00 |
| rhea-2023:6562 | Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update | 2023-11-07T09:05:34+00:00 | 2026-01-21T23:17:27+00:00 |
| rhba-2025:0304 | Red Hat Bug Fix Advisory: .NET 8.0 bug fix and enhancement update | 2025-01-14T01:20:49+00:00 | 2026-01-21T23:17:24+00:00 |
| rhba-2024:9054 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.1 bugfix release | 2024-11-11T01:39:34+00:00 | 2026-01-21T23:17:23+00:00 |
| rhba-2024:4924 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.2 bugfix release | 2024-07-30T21:58:32+00:00 | 2026-01-21T23:17:21+00:00 |
| rhba-2024:4458 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.5 bug fix updates | 2024-07-10T15:00:31+00:00 | 2026-01-21T23:17:20+00:00 |
| rhba-2024:2862 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.3 bug fixes and container updates | 2024-05-15T22:17:03+00:00 | 2026-01-21T23:17:19+00:00 |
| rhba-2024:2034 | Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.10.2 bug fixes and container updates | 2024-04-24T13:19:08+00:00 | 2026-01-21T23:17:16+00:00 |
| rhba-2024:1136 | Red Hat Bug Fix Advisory: podman bug fix update | 2024-03-05T20:05:51+00:00 | 2026-01-21T23:17:11+00:00 |
| rhba-2024:1127 | Red Hat Bug Fix Advisory: libssh bug fix update | 2024-03-05T18:22:05+00:00 | 2026-01-21T23:17:11+00:00 |
| rhba-2024:11265 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.0 release. | 2024-12-17T15:12:17+00:00 | 2026-01-21T23:17:10+00:00 |
| rhba-2024:10760 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.3 bugfix release | 2024-12-17T13:34:55+00:00 | 2026-01-21T23:17:10+00:00 |
| rhba-2024:10184 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release | 2024-11-21T22:06:56+00:00 | 2026-01-21T23:17:08+00:00 |
| rhba-2024:0815 | Red Hat Bug Fix Advisory: OpenShift sandboxed containers 1.5.2 update | 2024-02-15T20:10:11+00:00 | 2026-01-21T23:17:06+00:00 |
| rhba-2023:7492 | Red Hat Bug Fix Advisory: RHODS 2.4 - Red Hat OpenShift Data Science | 2023-11-27T10:05:54+00:00 | 2026-01-21T23:17:02+00:00 |
| rhba-2023:6928 | Red Hat Bug Fix Advisory: go-toolset:rhel8 bug fix and enhancement update | 2023-11-14T16:04:55+00:00 | 2026-01-21T23:17:02+00:00 |
| rhba-2023:6364 | Red Hat Bug Fix Advisory: golang and delve bug fix and enhancement update | 2023-11-07T08:50:26+00:00 | 2026-01-21T23:17:02+00:00 |
| rhba-2023:5949 | Red Hat Bug Fix Advisory: Red Hat Integration - Service Registry 2.4.4 SP1 OpenShift images | 2023-10-19T21:42:15+00:00 | 2026-01-21T23:16:59+00:00 |
| rhsa-2026:0930 | Red Hat Security Advisory: pcs security update | 2026-01-21T15:59:50+00:00 | 2026-01-21T23:06:11+00:00 |
| rhsa-2026:0742 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 security update | 2026-01-19T00:15:08+00:00 | 2026-01-21T23:05:26+00:00 |
| rhsa-2026:0743 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update | 2026-01-19T00:18:54+00:00 | 2026-01-21T23:05:24+00:00 |
| rhsa-2026:0293 | Red Hat Security Advisory: pki-servlet-engine security update | 2026-01-08T07:28:53+00:00 | 2026-01-21T23:05:01+00:00 |
| rhsa-2026:0292 | Red Hat Security Advisory: pki-servlet-engine security update | 2026-01-08T07:23:28+00:00 | 2026-01-21T23:04:59+00:00 |
| rhsa-2025:23417 | Red Hat Security Advisory: Streams for Apache Kafka 3.1.0 release and security update | 2025-12-16T23:13:43+00:00 | 2026-01-21T23:02:52+00:00 |
| rhsa-2025:23383 | Red Hat Security Advisory: curl security update | 2025-12-18T13:14:50+00:00 | 2026-01-21T23:02:48+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-180-04 | JTEKT TOYOPUC PLC | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-03 | Panasonic FPWIN Pro | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-02 | Exacq Technologies exacqVision Enterprise Manager | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsa-21-180-01 | Exacq Technologies exacqVision Web Service | 2021-06-29T00:00:00.000000Z | 2021-06-29T00:00:00.000000Z |
| icsma-21-175-01 | Philips Interoperability Solution XDS | 2021-06-24T00:00:00.000000Z | 2021-06-24T00:00:00.000000Z |
| icsa-21-175-01 | FATEK Automation WinProladder | 2021-06-24T00:00:00.000000Z | 2021-06-24T00:00:00.000000Z |
| icsa-21-173-04 | CODESYS Control V2 Linux SysFile library | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-173-03 | CODESYS Control V2 communication | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-173-02 | CODESYS V2 web server | 2021-06-22T00:00:00.000000Z | 2021-06-22T00:00:00.000000Z |
| icsa-21-168-02 | Softing OPC-UA C++ SDK | 2021-06-17T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-21-168-01 | Schneider Electric Enerlin'X Com 'X 510 | 2021-06-17T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-21-021-05 | WAGO M&M Software fdtCONTAINER (Update C) | 2021-01-21T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsa-20-280-01 | Rockwell Automation ISaGRAF5 Runtime (Update A) | 2020-10-06T00:00:00.000000Z | 2021-06-17T00:00:00.000000Z |
| icsma-20-184-01 | OpenClinic GA (Update B) | 2020-07-02T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsa-21-166-02 | Automation Direct CLICK PLC CPU Modules | 2021-06-15T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsa-21-166-01 | ThroughTek P2P SDK | 2021-06-15T00:00:00.000000Z | 2021-06-15T00:00:00.000000Z |
| icsma-21-161-01 | ZOLL Defibrillator Dashboard | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-161-02 | AGG Software Web Server Plugin | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-161-01 | Rockwell Automation FactoryTalk Services Platform | 2021-06-10T00:00:00.000000Z | 2021-06-10T00:00:00.000000Z |
| icsa-21-159-02 | Open Design Alliance Drawings SDK | 2021-06-08T06:00:00.000000Z | 2021-06-08T06:00:00.000000Z |
| icsa-21-159-06 | Thales Sentinel LDK Run-Time Environment | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-05 | Schneider Electric Modicon X80 | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-04 | Schneider Electric IGSS | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-03 | AVEVA InTouch | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-159-01 | Johnson Controls Metasys | 2021-06-08T00:00:00.000000Z | 2021-06-08T00:00:00.000000Z |
| icsa-21-154-01 | Advantech iView | 2021-06-03T00:00:00.000000Z | 2021-06-03T00:00:00.000000Z |
| icsa-21-147-05 | Mitsubishi Electric MELSEC iQ-R Series | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-04 | Siemens JT2Go and Teamcenter Visualization | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-03 | MesaLabs AmegaView | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| icsa-21-147-02 | Johnson Controls Sensormatic Electronics VideoEdge | 2021-05-27T00:00:00.000000Z | 2021-05-27T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-20180103-wnrp | Cisco WebEx Network Recording Player Buffer Overflow Vulnerability | 2018-01-03T16:00:00+00:00 | 2018-01-03T16:00:00+00:00 |
| cisco-sa-20180103-warfp | Cisco WebEx Advanced Recording Format Player Remote Code Execution Vulnerability | 2018-01-03T16:00:00+00:00 | 2018-01-03T16:00:00+00:00 |
| cisco-sa-20171129-nxos2 | Cisco NX-OS System Software Image Signature Bypass Vulnerability | 2017-11-29T16:00:00+00:00 | 2017-11-29T16:00:00+00:00 |
| cisco-sa-20171129-nxos1 | Cisco NX-OS System Software Patch Installation Arbitrary File Write Vulnerability | 2017-11-29T16:00:00+00:00 | 2017-11-29T16:00:00+00:00 |
| cisco-sa-20171129-nxos | Cisco NX-OS System Software Patch Signature Bypass Vulnerability | 2017-11-29T16:00:00+00:00 | 2017-11-29T16:00:00+00:00 |
| cisco-sa-20171129-ipp | Cisco IP Phone 8800 Series Denial of Service Vulnerability | 2017-11-29T16:00:00+00:00 | 2017-11-29T16:00:00+00:00 |
| cisco-sa-20171018-ccs | Cisco Cloud Services Platform 2100 Unauthorized Access Vulnerability | 2017-10-18T16:00:00+00:00 | 2017-10-18T16:00:00+00:00 |
| cisco-sa-20171004-asa | Cisco Adaptive Security Appliance Software Direct Authentication Denial of Service Vulnerability | 2017-10-04T16:00:00+00:00 | 2017-10-12T13:48:00+00:00 |
| cisco-sa-20170927-vpls | Cisco IOS Software for Cisco Catalyst 6800 Series Switches VPLS Denial of Service Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170927-restapi | Cisco IOS XE Software Web UI REST API Authentication Bypass Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170927-privesc | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170927-pnp | Cisco IOS and IOS XE Software Plug-and-Play PKI API Certificate Validation Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170927-lisp | Cisco IOS XE Software Locator/ID Separation Protocol Authentication Bypass Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170927-cc | Cisco IOS XE Software for Cisco ASR 1000 Series and cBR-8 Routers Line Card Console Access Vulnerability | 2017-09-27T16:00:00+00:00 | 2017-09-27T16:00:00+00:00 |
| cisco-sa-20170727-ospf | Multiple Cisco Products OSPF LSA Manipulation Vulnerability | 2017-07-27T16:00:00+00:00 | 2017-08-03T14:07:00+00:00 |
| cisco-sa-20170705-cpn | Cisco Prime Network Information Disclosure Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-06T20:36:00+00:00 |
| cisco-sa-20170705-waas1 | Cisco Wide Area Application Services Central Manager Information Disclosure Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-waas | Cisco Wide Area Application Services Core Dump Denial of Service Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-staros | Cisco StarOS Border Gateway Protocol Process Denial of Service Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-prime | Cisco Prime Network Privilege Escalation Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-ise1 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-iosxr | Cisco IOS XR Software Multicast Source Discovery Protocol Session Denial of Service Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170705-ios | Cisco IOS XR Software Incorrect Permissions Privilege Escalation Vulnerability | 2017-07-05T16:00:00+00:00 | 2017-07-05T16:00:00+00:00 |
| cisco-sa-20170621-waas | Cisco Wide Area Application Services TCP Fragment Denial of Service Vulnerability | 2017-06-21T16:00:00+00:00 | 2017-06-21T16:00:00+00:00 |
| cisco-sa-20170621-ucce | Cisco Unified Contact Center Express Clear Text Authentication Vulnerability | 2017-06-21T16:00:00+00:00 | 2017-06-21T16:00:00+00:00 |
| cisco-sa-20170621-piwf1 | Cisco Prime Infrastructure Web Framework Code Cross-Site Scripting Vulnerabilities | 2017-06-21T16:00:00+00:00 | 2017-06-21T16:00:00+00:00 |
| cisco-sa-20170621-piwf | Cisco Prime Infrastructure Web Framework Code Cross-Site Scripting Vulnerability | 2017-06-21T16:00:00+00:00 | 2017-06-21T16:00:00+00:00 |
| cisco-sa-20170322-ztp | Cisco IOS XE Software for Cisco ASR 920 Series Routers Zero Touch Provisioning Denial of Service Vulnerability | 2017-03-22T16:00:00+00:00 | 2017-03-22T16:00:00+00:00 |
| cisco-sa-20170322-xeci | Cisco IOS XE Software HTTP Command Injection Vulnerability | 2017-03-22T16:00:00+00:00 | 2017-03-22T16:00:00+00:00 |
| cisco-sa-20170322-webui | Cisco IOS XE Software Web User Interface Denial of Service Vulnerability | 2017-03-22T16:00:00+00:00 | 2017-03-22T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38670 | arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() | 2025-08-02T00:00:00.000Z | 2025-09-03T23:20:26.000Z |
| msrc_cve-2025-38500 | xfrm: interface: fix use-after-free after changing collect_md xfrm interface | 2025-08-02T00:00:00.000Z | 2025-09-03T23:19:48.000Z |
| msrc_cve-2022-46883 | Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-03T23:19:26.000Z |
| msrc_cve-2024-26866 | spi: lpspi: Avoid potential use-after-free in probe() | 2024-04-02T07:00:00.000Z | 2025-09-03T23:19:20.000Z |
| msrc_cve-2024-26677 | rxrpc: Fix delayed ACKs to not set the reference serial number | 2024-04-02T07:00:00.000Z | 2025-09-03T23:18:53.000Z |
| msrc_cve-2025-52496 | Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery. | 2025-07-02T00:00:00.000Z | 2025-09-03T23:18:31.000Z |
| msrc_cve-2023-39318 | Improper handling of HTML-like comments in script contexts in html/template | 2023-09-01T00:00:00.000Z | 2025-09-03T23:18:21.000Z |
| msrc_cve-2023-52757 | smb: client: fix potential deadlock when releasing mids | 2024-05-02T07:00:00.000Z | 2025-09-03T23:17:53.000Z |
| msrc_cve-2025-8844 | NASM Netwide Assember preproc.c parse_smacro_template null pointer dereference | 2025-08-02T00:00:00.000Z | 2025-09-03T23:16:28.000Z |
| msrc_cve-2024-26893 | firmware: arm_scmi: Fix double free in SMC transport cleanup path | 2024-04-02T07:00:00.000Z | 2025-09-03T23:15:44.000Z |
| msrc_cve-2010-2249 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Scale (aka sCAL) chunks. | 2010-06-02T00:00:00.000Z | 2025-09-03T23:15:39.000Z |
| msrc_cve-2024-35870 | smb: client: fix UAF in smb2_reconnect_server() | 2024-05-02T07:00:00.000Z | 2025-09-03T23:14:40.000Z |
| msrc_cve-2025-38646 | wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band | 2025-08-02T00:00:00.000Z | 2025-09-03T23:14:25.000Z |
| msrc_cve-2023-42364 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function. | 2023-11-01T07:00:00.000Z | 2025-09-03T23:14:03.000Z |
| msrc_cve-2025-0677 | Grub2: ufs: integer overflow may lead to heap based out-of-bounds write when handling symlinks | 2025-02-02T00:00:00.000Z | 2025-09-03T23:13:01.000Z |
| msrc_cve-2024-23829 | aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators | 2024-01-01T08:00:00.000Z | 2025-09-03T23:12:33.000Z |
| msrc_cve-2024-6610 | Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T23:12:15.000Z |
| msrc_cve-2022-49342 | net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register | 2025-02-02T00:00:00.000Z | 2025-09-03T23:11:30.000Z |
| msrc_cve-2018-25091 | urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive). | 2023-10-01T00:00:00.000Z | 2025-09-03T23:11:12.000Z |
| msrc_cve-2022-49901 | blk-mq: Fix kmemleak in blk_mq_init_allocated_queue | 2025-05-02T00:00:00.000Z | 2025-09-03T23:11:01.000Z |
| msrc_cve-2023-52737 | btrfs: lock the inode in shared mode before starting fiemap | 2024-05-02T07:00:00.000Z | 2025-09-03T23:10:25.000Z |
| msrc_cve-2025-38237 | media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() | 2025-07-02T00:00:00.000Z | 2025-09-03T23:10:02.000Z |
| msrc_cve-2025-38640 | bpf: Disable migration in nf_hook_run_bpf(). | 2025-08-02T00:00:00.000Z | 2025-09-03T23:09:33.000Z |
| msrc_cve-2025-38364 | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 2025-07-02T00:00:00.000Z | 2025-09-03T23:08:55.000Z |
| msrc_cve-2023-3482 | When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using an iframe with a source of 'about:blank'. This could have led to malicious websites storing tracking data without permission. This vulnerability affects Firefox < 115. | 2023-07-01T07:00:00.000Z | 2025-09-03T23:08:41.000Z |
| msrc_cve-2018-14042 | In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. | 2018-07-02T00:00:00.000Z | 2025-09-03T23:08:20.000Z |
| msrc_cve-2025-8843 | NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:08:17.000Z |
| msrc_cve-2021-33450 | An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c. | 2022-07-02T00:00:00.000Z | 2025-09-03T23:07:56.000Z |
| msrc_cve-2024-35784 | btrfs: fix deadlock with fiemap and extent locking | 2024-05-02T07:00:00.000Z | 2025-09-03T23:07:39.000Z |
| msrc_cve-2024-50009 | cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value | 2024-10-01T07:00:00.000Z | 2025-09-03T23:06:55.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202307-0141 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.694000Z |
| var-202307-0169 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.664000Z |
| var-202307-0158 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.635000Z |
| var-202307-0135 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.605000Z |
| var-202307-0159 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.575000Z |
| var-202307-0166 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.546000Z |
| var-202307-0138 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.516000Z |
| var-202307-0156 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.486000Z |
| var-202307-0139 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.456000Z |
| var-202307-0146 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.426000Z |
| var-202307-0142 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.396000Z |
| var-202307-0143 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.367000Z |
| var-202307-0136 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.338000Z |
| var-202307-0167 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.308000Z |
| var-202307-0151 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.278000Z |
| var-202307-0130 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.248000Z |
| var-202307-0155 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.218000Z |
| var-202307-0131 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.187000Z |
| var-202307-0137 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.153000Z |
| var-202307-0140 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.121000Z |
| var-202307-0128 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.091000Z |
| var-202307-0157 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.062000Z |
| var-202307-0144 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.033000Z |
| var-202307-0129 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:03.002000Z |
| var-202307-0170 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.972000Z |
| var-202307-0168 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.942000Z |
| var-202307-0127 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.912000Z |
| var-202307-0147 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.882000Z |
| var-202307-0163 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.852000Z |
| var-202307-0152 | Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32… | 2025-11-18T15:06:02.822000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2010-000011 | Internet Explorer information disclosure vulnerability | 2010-04-08T17:47+09:00 | 2010-04-08T17:47+09:00 |
| jvndb-2010-000010 | HL-SiteManager vulnerable to SQL injection | 2010-04-02T17:33+09:00 | 2010-04-02T17:33+09:00 |
| jvndb-2010-000009 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000008 | Compiere vulnerable to cross-site scripting | 2010-04-02T17:32+09:00 | 2010-04-02T17:32+09:00 |
| jvndb-2010-000007 | PrettyFormMail vulnerable to cross-site scripting | 2010-04-02T17:31+09:00 | 2010-04-02T17:31+09:00 |
| jvndb-2009-000057 | ATOK screen lock bypass vulnerability | 2010-03-23T17:42+09:00 | 2010-03-23T17:42+09:00 |
| jvndb-2009-000018 | Ichitaro series buffer overflow vulnerability | 2010-03-23T17:42+09:00 | 2010-03-23T17:42+09:00 |
| jvndb-2010-001147 | JP1/Cm2/Network Node Manager Remote Console Insecure File Permissions Vulnerability | 2010-03-15T12:21+09:00 | 2010-03-15T12:21+09:00 |
| jvndb-2010-000006 | OpenPNE authentication bypass vulnerability | 2010-03-12T15:29+09:00 | 2010-03-12T15:29+09:00 |
| jvndb-2010-001088 | uCosminexus Portal Framework Cross-Site Scripting Vulnerability | 2010-03-03T12:00+09:00 | 2010-03-03T12:00+09:00 |
| jvndb-2010-000005 | tDiary plugin tb-send.rb vulnerable to cross-site scripting | 2010-02-26T12:45+09:00 | 2010-02-26T12:45+09:00 |
| jvndb-2009-002475 | Buffer Overflow Vulnerability in Cosminexus, Processing Kit for XML and Hitachi Developer's Kit for Java | 2010-02-09T14:03+09:00 | 2010-02-09T14:03+09:00 |
| jvndb-2009-000068 | Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks | 2009-10-26T15:58+09:00 | 2010-01-25T12:02+09:00 |
| jvndb-2010-000004 | Oracle Application Server vulnerable to cross-site scripting | 2010-01-14T21:24+09:00 | 2010-01-14T21:24+09:00 |
| jvndb-2010-000003 | WebCalenderC3 vulnerable to directory traversal | 2010-01-14T21:24+09:00 | 2010-01-14T21:24+09:00 |
| jvndb-2010-000002 | WebCalenderC3 cross-site scripting vulnerability | 2010-01-14T21:23+09:00 | 2010-01-14T21:23+09:00 |
| jvndb-2010-000001 | Movable Type access restriction bypass vulnerability | 2010-01-06T16:26+09:00 | 2010-01-06T16:26+09:00 |
| jvndb-2008-000009 | Apache Tomcat fails to properly handle cookie value | 2008-05-21T00:00+09:00 | 2010-01-05T12:14+09:00 |
| jvndb-2009-002358 | Fujitsu Interstage and Systemwalker SSL Vulnerabilities | 2009-12-28T11:19+09:00 | 2009-12-28T11:19+09:00 |
| jvndb-2009-002345 | StartTLS not enabled in Hitachi Storage Command Suite products | 2009-12-24T14:32+09:00 | 2009-12-24T14:32+09:00 |
| jvndb-2009-000084 | P forum vulnerable to directory traversal | 2009-12-17T14:18+09:00 | 2009-12-17T14:18+09:00 |
| jvndb-2009-000077 | Active! mail 2003 cookie disclosure vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000076 | Active! mail 2003 session ID disclosure vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000075 | Active! mail 2003 cross-site scripting vulnerability | 2009-12-15T19:52+09:00 | 2009-12-15T19:52+09:00 |
| jvndb-2009-000079 | SEIL/B1 authentication issue | 2009-12-09T19:38+09:00 | 2009-12-09T19:38+09:00 |
| jvndb-2009-000078 | EC-CUBE information disclosure vulnerability | 2009-12-07T14:51+09:00 | 2009-12-07T14:51+09:00 |
| jvndb-2009-000074 | Redmine vulnerable to cross-site request forgery | 2009-11-19T15:45+09:00 | 2009-11-19T15:45+09:00 |
| jvndb-2009-000073 | Redmine vulnerable to cross-site scripting | 2009-11-19T15:45+09:00 | 2009-11-19T15:45+09:00 |
| jvndb-2007-001022 | Apache UTF-7 Encoding Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2009-11-16T11:52+09:00 |
| jvndb-2009-000072 | Roundcube Webmail vulnerable to cross-site request forgery | 2009-11-04T15:27+09:00 | 2009-11-04T15:27+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1295-1 | Security update for expat | 2025-04-16T07:53:54Z | 2025-04-16T07:53:54Z |
| suse-su-2025:1294-1 | Security update for rubygem-bundler | 2025-04-16T07:52:40Z | 2025-04-16T07:52:40Z |
| suse-su-2025:1293-1 | Security update for the Linux Kernel | 2025-04-16T07:51:20Z | 2025-04-16T07:51:20Z |
| suse-su-2025:1288-1 | Security update for mozjs52 | 2025-04-15T16:25:29Z | 2025-04-15T16:25:29Z |
| suse-su-2025:1287-1 | Security update for mozjs52 | 2025-04-15T16:25:07Z | 2025-04-15T16:25:07Z |
| suse-su-2025:1286-1 | Security update for apache2-mod_auth_openidc | 2025-04-15T16:24:51Z | 2025-04-15T16:24:51Z |
| suse-su-2025:1285-1 | Security update for etcd | 2025-04-15T16:24:41Z | 2025-04-15T16:24:41Z |
| suse-su-2025:1278-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5) | 2025-04-15T10:04:12Z | 2025-04-15T10:04:12Z |
| suse-su-2025:1275-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-04-15T09:33:37Z | 2025-04-15T09:33:37Z |
| suse-su-2025:1276-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-04-15T09:04:38Z | 2025-04-15T09:04:38Z |
| suse-su-2025:1265-1 | Security update for webkit2gtk3 | 2025-04-15T08:24:07Z | 2025-04-15T08:24:07Z |
| suse-su-2025:1264-1 | Security update for haproxy | 2025-04-15T08:23:40Z | 2025-04-15T08:23:40Z |
| suse-su-2025:1263-1 | Security update for the Linux Kernel | 2025-04-15T08:23:30Z | 2025-04-15T08:23:30Z |
| suse-su-2025:1262-1 | Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) | 2025-04-15T08:03:50Z | 2025-04-15T08:03:50Z |
| suse-su-2025:1260-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-04-14T20:03:48Z | 2025-04-14T20:03:48Z |
| suse-su-2025:1259-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-04-14T17:33:42Z | 2025-04-14T17:33:42Z |
| suse-su-2025:1257-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) | 2025-04-14T16:33:36Z | 2025-04-14T16:33:36Z |
| suse-su-2025:1254-1 | Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) | 2025-04-14T15:33:52Z | 2025-04-14T15:33:52Z |
| suse-su-2025:1252-1 | Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) | 2025-04-14T14:04:12Z | 2025-04-14T14:04:12Z |
| suse-su-2025:1248-1 | Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3) | 2025-04-14T14:04:00Z | 2025-04-14T14:04:00Z |
| suse-su-2025:1241-1 | Security update for the Linux Kernel | 2025-04-14T10:37:23Z | 2025-04-14T10:37:23Z |
| suse-su-2025:1238-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-04-14T09:04:27Z | 2025-04-14T09:04:27Z |
| suse-su-2025:1232-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | 2025-04-14T09:04:21Z | 2025-04-14T09:04:21Z |
| suse-su-2025:1236-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) | 2025-04-14T09:03:58Z | 2025-04-14T09:03:58Z |
| suse-su-2025:1231-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-04-14T08:33:39Z | 2025-04-14T08:33:39Z |
| suse-su-2025:1213-1 | Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) | 2025-04-14T07:33:35Z | 2025-04-14T07:33:35Z |
| suse-su-2025:1227-1 | Security update for pgadmin4 | 2025-04-14T07:06:34Z | 2025-04-14T07:06:34Z |
| suse-su-2025:1226-1 | Security update for govulncheck-vulndb | 2025-04-14T07:06:19Z | 2025-04-14T07:06:19Z |
| suse-su-2025:1225-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-04-14T06:33:55Z | 2025-04-14T06:33:55Z |
| suse-su-2025:1207-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-04-12T07:04:04Z | 2025-04-12T07:04:04Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13483-1 | nodejs-electron-27.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13482-1 | libvarnishapi3-7.4.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13481-1 | ungoogled-chromium-119.0.6045.199-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13480-1 | python310-pandas-2.1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13479-1 | perl-32bit-5.38.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13478-1 | avahi-0.8-31.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13477-1 | qbittorrent-4.6.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13476-1 | avif-tools-1.0.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13475-1 | kernel-firmware-all-20231128-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13474-1 | gerbv-2.10.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13473-1 | chromedriver-119.0.6045.199-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13472-1 | python310-cryptography-41.0.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13471-1 | jcasgen-maven-plugin-3.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13470-1 | libQt5Bootstrap-devel-static-32bit-5.15.11+kde138-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13469-1 | docker-24.0.7_ce-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13468-1 | MozillaFirefox-120.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13467-1 | xwayland-23.2.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13466-1 | velero-1.12.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13465-1 | python310-aiohttp-3.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13464-1 | cmake-3.27.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13463-1 | libntpc1-1.2.2a-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13462-1 | libQt5Pdf5-5.15.16-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13461-1 | davix-0.8.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13460-1 | python310-geopandas-0.14.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13459-1 | MozillaThunderbird-115.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13458-1 | libwireshark16-4.0.11-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13457-1 | java-1_8_0-openj9-1.8.0.392-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13456-1 | java-17-openj9-17.0.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13455-1 | java-11-openj9-11.0.21.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13454-1 | python310-pip-23.3.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-23728 | TOTOLINK X2000R Gh formReflashClientTbl方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23727 | TOTOLINK X2000R Gh formPortFw方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23640 | QNAP Qsync Central路径遍历漏洞（CNVD-2025-23640） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23639 | QNAP Qsync Central路径遍历漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23638 | QNAP Qsync Central空指针取消引用漏洞（CNVD-2025-23638） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23637 | QNAP Qsync Central空指针取消引用漏洞（CNVD-2025-23637） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23625 | Dell PowerScale OneFS拒绝服务漏洞 | 2025-01-24 | 2025-10-13 |
| cnvd-2025-23624 | QNAP Qsync Central空指针取消引用漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23623 | QNAP Qsync Central资源分配无限制漏洞（CNVD-2025-23623） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23622 | QNAP Qsync Central资源分配无限制漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23621 | QNAP Qsync Central拒绝服务漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23620 | QNAP Qsync Central SQL注入漏洞（CNVD-2025-23620） | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23619 | QNAP Qsync Central SQL注入漏洞 | 2025-09-02 | 2025-10-13 |
| cnvd-2025-23608 | TOTOLINK X2000R Gh formTcpipSetup方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23607 | TOTOLINK X2000R Gh formSysLog方法缓冲区溢出漏洞 | 2023-10-27 | 2025-10-13 |
| cnvd-2025-23485 | D-Link DIR-823X命令注入漏洞（CNVD-2025-23485） | 2024-07-10 | 2025-10-13 |
| cnvd-2025-23484 | DELL Enterprise SONiC OS加密密钥漏洞 | 2025-08-11 | 2025-10-13 |
| cnvd-2025-23483 | Dell RecoverPoint for Virtual Machines弱文件系统权限漏洞 | 2025-08-12 | 2025-10-13 |
| cnvd-2025-23482 | Dell Client Platform不正确的链接解析漏洞 | 2024-12-20 | 2025-10-13 |
| cnvd-2025-23481 | Dell Inventory Collector文件访问前链接解析不正确漏洞 | 2024-12-25 | 2025-10-13 |
| cnvd-2025-23480 | Dell VxRail明文存储密码漏洞（CNVD-2025-23480） | 2025-01-21 | 2025-10-13 |
| cnvd-2025-23479 | Dell VxRail明文存储密码漏洞 | 2025-01-24 | 2025-10-13 |
| cnvd-2025-23478 | Dell Networking Switches running Enterprise SONiC OS日志信息泄露漏洞 | 2025-02-10 | 2025-10-13 |
| cnvd-2025-23477 | Dell Avamar访问令牌重用漏洞 | 2025-02-18 | 2025-10-13 |
| cnvd-2025-23476 | DELL PowerProtect Data Manager路径遍历漏洞 | 2025-09-12 | 2025-10-13 |
| cnvd-2025-23475 | DELL PowerScale OneFS信息泄露漏洞 | 2025-09-28 | 2025-10-13 |
| cnvd-2025-23474 | DELL BSAFE Crypto-J信息泄露漏洞 | 2025-09-28 | 2025-10-13 |
| cnvd-2025-23473 | GNU Binutils elf_swap_shdr函数缓冲区溢出漏洞 | 2025-09-29 | 2025-10-13 |
| cnvd-2025-23472 | GNU Binutils bfd/elf-eh-frame.c文件堆缓冲区溢出漏洞 | 2025-09-29 | 2025-10-13 |
| cnvd-2025-23471 | D-Link DIR-823X命令注入漏洞（CNVD-2025-23471） | 2025-09-11 | 2025-10-13 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0774 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-09-22T00:00:00.000000 | 2023-09-22T00:00:00.000000 |
| certfr-2023-avi-0773 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-09-22T00:00:00.000000 | 2023-09-22T00:00:00.000000 |
| certfr-2023-avi-0772 | Multiples vulnérabilités dans les produits Apple | 2023-09-22T00:00:00.000000 | 2023-09-22T00:00:00.000000 |
| certfr-2023-avi-0771 | Multiples vulnérabilités dans les produits Qnap | 2023-09-22T00:00:00.000000 | 2023-09-22T00:00:00.000000 |
| certfr-2023-avi-0769 | Multiples vulnérabilités dans les produits IBM | 2023-09-21T00:00:00.000000 | 2023-09-21T00:00:00.000000 |
| certfr-2023-avi-0768 | Vulnérabilité dans les produits Drupal | 2023-09-21T00:00:00.000000 | 2023-09-21T00:00:00.000000 |
| certfr-2023-avi-0767 | Multiples vulnérabilités dans Bind | 2023-09-21T00:00:00.000000 | 2023-09-21T00:00:00.000000 |
| certfr-2023-avi-0766 | Vulnérabilité dans les produits Xen | 2023-09-20T00:00:00.000000 | 2023-09-20T00:00:00.000000 |
| certfr-2023-avi-0765 | Vulnérabilité dans les produits ElasticSearch | 2023-09-20T00:00:00.000000 | 2023-09-20T00:00:00.000000 |
| certfr-2023-avi-0764 | Vulnérabilité dans les produits TrendMicro | 2023-09-20T00:00:00.000000 | 2023-09-20T00:00:00.000000 |
| certfr-2023-avi-0763 | Multiples vulnérabilités dans les produits Spring | 2023-09-19T00:00:00.000000 | 2023-09-19T00:00:00.000000 |
| certfr-2023-avi-0762 | Multiples vulnérabilités dans les produits ElasticSearch | 2023-09-19T00:00:00.000000 | 2023-09-19T00:00:00.000000 |
| certfr-2023-avi-0761 | Vulnérabilité dans GitLab CE et Gitlab EE | 2023-09-19T00:00:00.000000 | 2023-09-19T00:00:00.000000 |
| certfr-2023-avi-0760 | Multiples vulnérabilités dans NetApp HCI Baseboard Management Controller | 2023-09-19T00:00:00.000000 | 2023-09-19T00:00:00.000000 |
| certfr-2023-avi-0759 | Multiples vulnérabilités dans Microsoft Edge | 2023-09-18T00:00:00.000000 | 2023-09-18T00:00:00.000000 |
| certfr-2023-avi-0758 | Multiples vulnérabilités dans les produits Qnap | 2023-09-18T00:00:00.000000 | 2023-09-18T00:00:00.000000 |
| certfr-2023-avi-0757 | Multiples vulnérabilités dans IBM Spectrum Copy Data Management | 2023-09-18T00:00:00.000000 | 2023-09-18T00:00:00.000000 |
| certfr-2023-avi-0756 | Multiples vulnérabilités dans TrendMicro Deep Discovery Inspector | 2023-09-18T00:00:00.000000 | 2023-09-18T00:00:00.000000 |
| certfr-2023-avi-0755 | Multiples vulnérabilités dans les produits F-Secure | 2023-09-15T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-avi-0754 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-09-15T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-avi-0753 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-09-15T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-avi-0752 | Multiples vulnérabilités dans le noyau Linux de Debian | 2023-09-15T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-avi-0751 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-09-15T00:00:00.000000 | 2023-09-15T00:00:00.000000 |
| certfr-2023-avi-0750 | Vulnérabilité dans Apache Struts | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0749 | Multiples vulnérabilités dans les produits Siemens | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0748 | Vulnérabilité dans IBM DB2 | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0747 | Vulnérabilité dans les produits Symantec | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0746 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0745 | Vulnérabilité dans les produits Fortinet | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |
| certfr-2023-avi-0744 | Multiples vulnérabilités dans Zimbra | 2023-09-14T00:00:00.000000 | 2023-09-14T00:00:00.000000 |