Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-64265
4.3 (3.1)
WordPress Frontend File Manager plugin <= 23.2 - Broke… N-Media
Frontend File Manager
2025-11-13T09:24:29.310Z 2026-01-20T14:28:21.291Z
CVE-2025-64256
8.8 (3.1)
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… PressTigers
Simple Folio
2025-12-09T14:13:52.351Z 2026-01-20T14:28:21.259Z
CVE-2025-64262
6.5 (3.1)
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… ramon fincken
Auto Prune Posts
2025-11-13T09:24:27.918Z 2026-01-20T14:28:21.234Z
CVE-2025-64260
7.1 (3.1)
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… Marco Milesi
ANAC XML Bandi di Gara
2025-12-18T07:22:14.310Z 2026-01-20T14:28:21.234Z
CVE-2025-64266
8.8 (3.1)
WordPress Booking and Rental Manager plugin <= 2.5.4 -… magepeopleteam
Booking and Rental Manager
2025-12-18T07:22:14.481Z 2026-01-20T14:28:21.161Z
CVE-2025-64276
6.5 (3.1)
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… Ays Pro
Survey Maker
2025-11-13T09:24:31.911Z 2026-01-20T14:28:21.160Z
CVE-2025-64259
6.5 (3.1)
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… Jeroen Schmit
Theater for WordPress
2025-11-13T09:24:26.955Z 2026-01-20T14:28:21.159Z
CVE-2025-64273
7.5 (3.1)
WordPress Email marketing for WordPress by GetResponse… GetResponse
Email marketing for WordPress by GetResponse Official
2025-12-18T07:22:15.266Z 2026-01-20T14:28:21.096Z
CVE-2025-64270
6.5 (3.1)
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … masteriyo
Masteriyo - LMS
2025-12-18T07:22:14.865Z 2026-01-20T14:28:21.085Z
CVE-2025-64269
4.3 (3.1)
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… EDGARROJAS
WooCommerce PDF Invoice Builder
2025-11-13T09:24:30.214Z 2026-01-20T14:28:21.085Z
CVE-2025-64274
4.3 (3.1)
WordPress WPKoi Templates for Elementor plugin <= 3.4.… wpkoithemes
WPKoi Templates for Elementor
2025-11-13T09:24:31.061Z 2026-01-20T14:28:21.083Z
CVE-2025-64264
5.9 (3.1)
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … Aman
Popup addon for Ninja Forms
2025-11-13T09:24:28.871Z 2026-01-20T14:28:21.081Z
CVE-2025-64253
4.9 (3.1)
WordPress Health Check & Troubleshooting plugin <= 1.7… WordPress.org
Health Check & Troubleshooting
2025-12-16T08:12:50.088Z 2026-01-20T14:28:21.074Z
CVE-2025-64277
5.3 (3.1)
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… QuantumCloud
ChatBot
2025-11-13T09:24:32.345Z 2026-01-20T14:28:21.020Z
CVE-2025-64255
7.2 (3.1)
WordPress Admin and Site Enhancements (ASE) plugin <= … Bowo
Admin and Site Enhancements (ASE)
2025-12-09T14:13:52.144Z 2026-01-20T14:28:21.009Z
CVE-2025-64258
7.5 (3.1)
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… wpweb
Follow My Blog Post
2025-12-18T07:22:14.130Z 2026-01-20T14:28:21.008Z
CVE-2025-64222
7.5 (3.1)
WordPress WooCommerce Recover Abandoned Cart plugin <=… FantasticPlugins
WooCommerce Recover Abandoned Cart
2025-12-18T07:22:12.885Z 2026-01-20T14:28:20.993Z
CVE-2025-64250
6.1 (3.1)
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… wpWax
Directorist
2025-12-16T08:12:49.689Z 2026-01-20T14:28:20.980Z
CVE-2025-64254
8.8 (3.1)
WordPress Photo Block plugin <= 1.5.1 - Broken Access … Ronald Huereca
Photo Block
2025-12-09T14:13:51.839Z 2026-01-20T14:28:20.954Z
CVE-2025-64251
4.9 (3.1)
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… azzaroco
Ultimate Learning Pro
2025-12-16T08:12:49.880Z 2026-01-20T14:28:20.915Z
CVE-2025-64246
4.3 (3.1)
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… netopsae
Accessibility by AudioEye
2025-12-16T08:12:48.902Z 2026-01-20T14:28:20.873Z
CVE-2025-64238
4.3 (3.1)
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… NicolasKulka
WPS Bidouille
2025-12-16T08:12:47.350Z 2026-01-20T14:28:20.852Z
CVE-2025-64218
7.5 (3.1)
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… WP Chill
Passster
2025-12-18T07:22:12.527Z 2026-01-20T14:28:20.843Z
CVE-2025-64244
4.3 (3.1)
WordPress Restrict Elementor Widgets, Columns and Sect… Codexpert, Inc
Restrict Elementor Widgets, Columns and Sections
2025-12-16T08:12:48.528Z 2026-01-20T14:28:20.451Z
CVE-2025-64224
7.1 (3.1)
WordPress Grand Conference Theme Custom Post Type plug… ThemeGoods
Grand Conference Theme Custom Post Type
2025-11-06T15:56:10.204Z 2026-01-20T14:28:20.416Z
CVE-2025-64245
4.3 (3.1)
WordPress Import external attachments plugin <= 1.5.12… ryanpcmcquen
Import external attachments
2025-12-16T08:12:48.719Z 2026-01-20T14:28:20.395Z
CVE-2025-64207
7.1 (3.1)
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… TieLabs
Jannah
2025-12-18T07:22:11.630Z 2026-01-20T14:28:20.368Z
CVE-2025-64243
4.3 (3.1)
WordPress Directory Pro plugin <= 2.5.6 - Broken Acces… e-plugins
Directory Pro
2025-12-16T08:12:48.343Z 2026-01-20T14:28:20.367Z
CVE-2025-64214
7.5 (3.1)
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitr… StylemixThemes
MasterStudy LMS Pro
2025-12-18T07:22:12.176Z 2026-01-20T14:28:20.339Z
CVE-2025-64211
5.3 (3.1)
WordPress Masterstudy Elementor Widgets plugin <= 1.2.… StylemixThemes
Masterstudy Elementor Widgets
2025-10-29T08:38:08.406Z 2026-01-20T14:28:20.264Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-65117
7.4 (3.1)
8.5 (4.0)
AVEVA Process Optimization Use of Potentially Dangerou… AVEVA
Process Optimization
2026-01-16T00:14:27.567Z 2026-01-16T14:53:13.050Z
CVE-2025-65118
8.8 (3.1)
9.3 (4.0)
AVEVA Process Optimization Uncontrolled Search Path Element AVEVA
Process Optimization
2026-01-16T00:11:12.560Z 2026-01-16T15:39:37.345Z
CVE-2025-64769
7.1 (3.1)
7.6 (4.0)
AVEVA Process Optimization Cleartext Transmission of S… AVEVA
Process Optimization
2026-01-16T00:16:48.949Z 2026-01-16T14:52:30.496Z
CVE-2026-22691
2.7 (4.0)
pypdf has possible long runtimes for malformed startxref py-pdf
pypdf
2026-01-10T04:46:12.423Z 2026-01-12T16:48:53.503Z
CVE-2021-41739
N/A
A OS Command Injection vulnerability was discover… n/a
n/a
2022-05-05T10:41:00 2024-08-04T03:15:29.248Z
CVE-2026-22700
7.5 (3.1)
RustCrypto Has Insufficient Length Validation in decry… RustCrypto
elliptic-curves
2026-01-10T05:17:25.583Z 2026-01-12T14:46:46.227Z
CVE-2026-22699
7.5 (3.1)
RustCrypto SM2-PKE has Unchecked AffinePoint Decoding … RustCrypto
elliptic-curves
2026-01-10T05:17:22.818Z 2026-01-12T14:59:18.634Z
CVE-2026-22688
10 (3.1)
WeKnora has Command Injection in MCP stdio test Tencent
WeKnora
2026-01-10T03:41:59.952Z 2026-01-12T17:20:43.431Z
CVE-2026-22687
8.1 (3.1)
WeKnora vulnerable to SQL Injection Tencent
WeKnora
2026-01-10T03:41:43.862Z 2026-01-12T17:21:25.675Z
CVE-2026-20045
8.2 (3.1)
Cisco Unified Communications Products Remote Code Exec… Cisco
Cisco Unified Communications Manager
2026-01-21T16:26:20.312Z 2026-01-22T04:55:43.320Z
CVE-2026-22246
6.5 (3.1)
Local Mastodon users can enumerate and access severed … mastodon
mastodon
2026-01-08T15:27:21.490Z 2026-01-08T15:54:24.770Z
CVE-2019-25277
5.1 (4.0)
6.1 (3.1)
FaceSentry Access Control System 6.4.8 Reflected Cross… iWT Ltd.
FaceSentry Access Control System
2026-01-07T23:11:06.730Z 2026-01-08T18:16:47.762Z
CVE-2025-68151
6.6 (4.0)
CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits,… coredns
coredns
2026-01-08T15:33:12.711Z 2026-01-08T15:50:35.397Z
CVE-2026-22589
7.5 (3.1)
Spree API has Unauthenticated IDOR - Guest Address spree
spree
2026-01-10T03:17:58.494Z 2026-01-12T17:32:46.777Z
CVE-2025-31963
2.9 (3.1)
HCL BigFix IVR is impacted by improper authentication … HCLSoftware
BigFix IVR
2026-01-07T07:05:40.098Z 2026-01-07T16:13:25.789Z
CVE-2024-4392
6.4 (3.1)
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3… automattic
Jetpack – WP Security, Backup, Speed, & Growth
2024-05-14T08:32:31.906Z 2024-08-01T20:40:47.361Z
CVE-2023-47774
5.4 (3.1)
WordPress Jetpack plugin < 12.7 - Auth. Iframe Injecti… Automattic
Jetpack
2024-04-24T15:58:40.432Z 2024-08-02T21:16:43.660Z
CVE-2025-39482
4.3 (3.1)
WordPress Eventer - WordPress Event & Booking Manager … imithemes
Eventer
2025-05-16T15:45:26.697Z 2026-01-22T12:07:27.271Z
CVE-2025-39481
9.3 (3.1)
WordPress Eventer - WordPress Event & Booking Manager … imithemes
Eventer
2025-05-16T15:45:27.223Z 2026-01-22T12:05:03.823Z
CVE-2025-39483
6.5 (3.1)
WordPress Eventer plugin < 3.9.9.1 - Shortcode Injecti… imithemes
Eventer
2025-08-14T10:34:26.628Z 2026-01-22T09:41:27.096Z
CVE-2024-53252
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:06.360Z
CVE-2024-53251
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:04.870Z
CVE-2024-53250
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:03.200Z
CVE-2024-53249
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:00.720Z
CVE-2024-53248
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:59.446Z
CVE-2024-45743
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:58.180Z
CVE-2024-45742
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:56.832Z
CVE-2024-45730
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:55.570Z
CVE-2024-45729
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:54.322Z
CVE-2024-45728
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:53.063Z
ID Description Published Updated
fkie_cve-2025-65118 The vulnerability, if exploited, could allow an authenticated miscreant (OS Standard User) to tric… 2026-01-16T02:16:46.003 2026-01-22T15:13:00.017
fkie_cve-2025-64769 The Process Optimization application suite leverages connection channels/protocols that by-default… 2026-01-16T02:16:45.647 2026-01-22T15:11:11.250
fkie_cve-2026-22691 pypdf is a free and open-source pure-python PDF library. Prior to version 6.6.0, pypdf has possible… 2026-01-10T05:16:08.680 2026-01-22T15:01:05.967
fkie_cve-2021-41739 A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can exec… 2022-05-05T11:15:07.893 2026-01-22T14:59:28.110
fkie_cve-2026-22700 RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including… 2026-01-10T06:15:52.517 2026-01-22T14:53:48.393
fkie_cve-2026-22699 RustCrypto: Elliptic Curves is general purpose Elliptic Curve Cryptography (ECC) support, including… 2026-01-10T06:15:52.377 2026-01-22T14:53:30.840
fkie_cve-2026-22688 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval… 2026-01-10T04:16:01.837 2026-01-22T14:39:17.193
fkie_cve-2026-22687 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval… 2026-01-10T04:16:01.670 2026-01-22T14:36:21.080
fkie_cve-2026-20045 A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications … 2026-01-21T17:16:08.077 2026-01-22T14:28:35.883
fkie_cve-2026-22246 Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added noti… 2026-01-08T16:16:02.957 2026-01-22T13:52:28.883
fkie_cve-2019-25277 FaceSentry Access Control System 6.4.8 contains a cross-site scripting vulnerability in the 'msg' p… 2026-01-08T00:15:57.760 2026-01-22T13:47:52.110
fkie_cve-2025-68151 CoreDNS is a DNS server that chains plugins. Prior to version 1.14.0, multiple CoreDNS server imple… 2026-01-08T16:15:59.847 2026-01-22T13:47:50.683
fkie_cve-2026-22589 Spree is an open source e-commerce solution built with Ruby on Rails. Prior to versions 4.10.2, 5.0… 2026-01-10T04:16:01.343 2026-01-22T13:45:29.320
fkie_cve-2025-31963 Improper authentication and missing CSRF protection in the local setup interface component in HCL B… 2026-01-07T12:17:01.863 2026-01-22T13:45:28.607
fkie_cve-2024-4392 The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to Stored Cro… 2024-05-14T16:17:34.233 2026-01-22T13:36:25.030
fkie_cve-2023-47774 Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Cli… 2024-04-24T16:15:08.107 2026-01-22T13:35:07.650
fkie_cve-2025-39482 Missing Authorization vulnerability in imithemes Eventer allows Exploiting Incorrectly Configured A… 2025-05-16T16:15:40.417 2026-01-22T13:16:04.510
fkie_cve-2025-39481 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-05-16T16:15:40.290 2026-01-22T13:16:04.373
fkie_cve-2025-39483 Improper Control of Generation of Code ('Code Injection') vulnerability in imithemes Eventer allows… 2025-08-14T11:15:33.933 2026-01-22T10:16:07.180
fkie_cve-2024-53252 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.407 2026-01-22T10:16:06.407
fkie_cve-2024-53251 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.347 2026-01-22T10:16:06.347
fkie_cve-2024-53250 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.290 2026-01-22T10:16:06.290
fkie_cve-2024-53249 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.223 2026-01-22T10:16:06.223
fkie_cve-2024-53248 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.160 2026-01-22T10:16:06.160
fkie_cve-2024-45743 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.097 2026-01-22T10:16:06.097
fkie_cve-2024-45742 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.033 2026-01-22T10:16:06.033
fkie_cve-2024-45730 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.973 2026-01-22T10:16:05.973
fkie_cve-2024-45729 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.907 2026-01-22T10:16:05.907
fkie_cve-2024-45728 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.847 2026-01-22T10:16:05.847
fkie_cve-2024-45727 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.787 2026-01-22T10:16:05.787
ID Severity Description Published Updated
ghsa-2jf2-fhpf-vfw3
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-2hgv-qvvq-63hq
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-29qw-9m44-pf9w
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:11Z
ghsa-37mj-762c-hqp3
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:10Z
ghsa-wgpc-jm6c-j4j7
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-vfrr-rhvp-vvw9
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-d… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-vfj6-fgcq-5c93
4.3 (3.1)
Missing Authorization vulnerability in Ultimate Member ForumWP forumwp allows Exploiting Incorrectl… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-v3j5-8g9v-3768
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-qp8q-xvwm-2x2q
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for W… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-pp33-jqv4-5hjf
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-mw6g-37x4-p223
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-mm3g-cv2q-cppg
7.8 (3.1)
Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-mg95-m74x-55j8
4.3 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-hgg9-7rw7-5rhw
4.3 (3.1)
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-gjv2-jq53-mqgq
8.8 (3.1)
Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-cch9-4xf8-89w7
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-c6c4-c7qj-6662
8.8 (3.1)
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-7r59-p3hg-gf5g
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-76jc-c8j2-q66h
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-758v-pprx-jj23
8.1 (3.1)
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-55cq-cx6m-hv36
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-42p4-5wp9-wj4j
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-3w3w-vwpm-m922
4.5 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-387r-w9pc-hjv4
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-2qh4-8p36-478q
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-242g-9cqh-3jpx
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-x5mv-x4w6-8rgw
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-v7r5-h5f3-qwf9
4.3 (3.1)
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-v3q8-66j8-2mx6
4.3 (3.1)
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addo… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-v2w2-v8vg-2rqw
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ID Severity Description Package Published Updated
pysec-2010-7
Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.1 allows r… pyftpdlib 2010-10-19T20:00:00Z 2021-07-05T00:01:24.754790Z
pysec-2010-6
The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticat… pyftpdlib 2010-10-19T20:00:00Z 2021-07-05T00:01:24.722786Z
pysec-2010-5
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an inv… pyftpdlib 2010-10-19T20:00:00Z 2021-07-05T00:01:24.685476Z
pysec-2010-4
Multiple directory traversal vulnerabilities in FTPServer.py in pyftpdlib before 0.3.0 al… pyftpdlib 2010-10-19T20:00:00Z 2021-07-05T00:01:24.654243Z
pysec-2017-23
An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser m… pyanyapi 2017-11-08T03:29:00Z 2021-07-05T00:01:24.581595Z
pysec-2014-11
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of pack… pip 2014-11-24T15:59:00Z 2021-07-05T00:01:24.413265Z
pysec-2013-9
pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a … pip 2013-08-17T06:54:00Z 2021-07-05T00:01:24.378636Z
pysec-2013-8
pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perf… pip 2013-08-06T02:52:00Z 2021-07-05T00:01:24.339020Z
pysec-2016-9
Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using… pillow 2016-11-04T10:59:00Z 2021-07-05T00:01:24.189764Z
pysec-2016-8
Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by… pillow 2016-11-04T10:59:00Z 2021-07-05T00:01:24.104078Z
pysec-2016-7
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pi… pillow 2016-04-13T16:59:00Z 2021-07-05T00:01:24.042207Z
pysec-2016-6
Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow befo… pillow 2016-04-13T16:59:00Z 2021-07-05T00:01:23.974761Z
pysec-2016-5
Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow… pillow 2016-04-13T16:59:00Z 2021-07-05T00:01:23.915090Z
pysec-2015-16
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed… pillow 2015-01-16T16:59:00Z 2021-07-05T00:01:23.853626Z
pysec-2015-15
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a de… pillow 2015-05-01T15:59:00Z 2021-07-05T00:01:23.790243Z
pysec-2014-10
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x … pillow 2014-08-25T14:55:00Z 2021-07-05T00:01:23.718339Z
pysec-2017-22
An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMi… owlmixin 2017-11-08T03:29:00Z 2021-07-05T00:01:23.384346Z
pysec-2017-21
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neu… nova-lxd 2017-04-12T22:59:00Z 2021-07-05T00:01:23.183236Z
pysec-2018-47
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin b… moin 2018-10-15T19:29:00Z 2021-07-05T00:01:23.080305Z
pysec-2017-20
Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin b… moin 2017-01-30T22:59:00Z 2021-07-05T00:01:23.049637Z
pysec-2013-7
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) a… moin 2013-01-03T01:55:00Z 2021-07-05T00:01:23.010630Z
pysec-2013-6
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.… moin 2013-01-03T01:55:00Z 2021-07-05T00:01:22.974248Z
pysec-2013-5
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile a… moin 2013-01-03T01:55:00Z 2021-07-05T00:01:22.941193Z
pysec-2011-6
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/t… moin 2011-02-22T18:00:00Z 2021-07-05T00:01:22.907058Z
pysec-2010-3
The default configuration of cfg.packagepages_actions_excluded in MoinMoin before 1.8.7 d… moin 2010-02-26T19:30:00Z 2021-07-05T00:01:22.874295Z
pysec-2010-2
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, wh… moin 2010-02-26T19:30:00Z 2021-07-05T00:01:22.841909Z
pysec-2019-153
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided dat… modulemd 2019-01-10T21:29:00Z 2021-07-05T00:01:22.789825Z
pysec-2017-19
An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_q… mlalchemy 2017-11-08T03:29:00Z 2021-07-05T00:01:22.762966Z
pysec-2017-18
Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune… mistune 2017-12-29T15:29:00Z 2021-07-05T00:01:22.732782Z
pysec-2015-14
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers t… mercurial 2015-03-31T14:59:00Z 2021-07-05T00:01:22.697962Z
ID Description Type
ID Description Updated
gsd-2024-3611 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.226107Z
gsd-2024-3568 The huggingface/transformers library is vulnerable to arbitrary code execution through de… 2024-04-11T05:03:27.225234Z
gsd-2024-3617 A vulnerability, which was classified as critical, has been found in SourceCodester Korte… 2024-04-11T05:03:27.222199Z
gsd-2024-3276 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.221747Z
gsd-2024-3394 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.221379Z
gsd-2024-3308 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.220288Z
gsd-2024-3277 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.219739Z
gsd-2024-3440 A vulnerability was found in SourceCodester Prison Management System 1.0. It has been dec… 2024-04-11T05:03:27.214422Z
gsd-2024-3629 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.211590Z
gsd-2024-3477 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.211266Z
gsd-2024-3614 A vulnerability classified as problematic has been found in SourceCodester Warehouse Mana… 2024-04-11T05:03:27.209763Z
gsd-2024-3479 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.205824Z
gsd-2024-3400 A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-… 2024-04-11T05:03:27.203461Z
gsd-2024-3486 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.203222Z
gsd-2024-3550 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.202612Z
gsd-2024-3581 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.198006Z
gsd-2024-3513 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.197785Z
gsd-2024-3363 A vulnerability was found in SourceCodester Online Library System 1.0. It has been classi… 2024-04-11T05:03:27.195993Z
gsd-2024-3461 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.194392Z
gsd-2024-3475 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.191635Z
gsd-2024-3428 A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as … 2024-04-11T05:03:27.190953Z
gsd-2024-3331 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.190011Z
gsd-2024-3354 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.189400Z
gsd-2024-3490 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.188864Z
gsd-2024-3442 A vulnerability classified as critical has been found in SourceCodester Prison Management… 2024-04-11T05:03:27.188160Z
gsd-2024-3325 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.187222Z
gsd-2024-3443 A vulnerability classified as problematic was found in SourceCodester Prison Management S… 2024-04-11T05:03:27.185340Z
gsd-2024-3543 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.184130Z
gsd-2024-3538 A vulnerability was found in Campcodes Church Management System 1.0. It has been classifi… 2024-04-11T05:03:27.182249Z
gsd-2024-3561 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.181214Z
ID Description Published Updated
mal-2025-6458 Malicious code in atlasctf-21-prod-21 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6457 Malicious code in atlasctf-21-prod-20 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6456 Malicious code in atlasctf-21-prod-19 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6455 Malicious code in atlasctf-21-prod-18 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6454 Malicious code in atlasctf-21-prod-17 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6453 Malicious code in atlasctf-21-prod-16 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6452 Malicious code in atlasctf-21-prod-15 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6451 Malicious code in atlasctf-21-prod-14 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6450 Malicious code in atlasctf-21-prod-13 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6449 Malicious code in atlasctf-21-prod-12 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6448 Malicious code in atlasctf-21-prod-11 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6447 Malicious code in atlasctf-21-prod-10 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6446 Malicious code in atlasctf-21-prod-09 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6445 Malicious code in atlasctf-21-prod-08 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6444 Malicious code in atlasctf-21-prod-07 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6443 Malicious code in atlasctf-21-prod-06 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6442 Malicious code in atlasctf-21-prod-05 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6441 Malicious code in atlasctf-21-prod-04 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6440 Malicious code in atlasctf-21-prod-03 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6439 Malicious code in atlasctf-21-prod-02 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6438 Malicious code in atlasctf-21-prod-01 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6437 Malicious code in atlasctf-21-prod-00 (PyPI) 2025-06-07T14:05:45Z 2025-12-11T09:27:52Z
mal-2025-6436 Malicious code in ateslassia (PyPI) 2024-09-06T11:29:16Z 2025-12-11T09:27:52Z
mal-2025-6433 Malicious code in anku2-rce (PyPI) 2025-07-16T10:50:59Z 2025-12-11T09:27:52Z
mal-2025-6432 Malicious code in anku1-rce (PyPI) 2025-07-16T10:52:30Z 2025-12-11T09:27:52Z
mal-2025-6431 Malicious code in alpha-booster (PyPI) 2025-05-29T22:39:05Z 2025-12-11T09:27:52Z
mal-2025-6430 Malicious code in alksdjpureranser (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-6428 Malicious code in 0x000testqwe (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-6213 Malicious code in donotinstallthisistest6 (PyPI) 2025-07-21T20:01:00Z 2025-12-11T09:27:52Z
mal-2025-5112 Malicious code in discorddox (PyPI) 2025-05-12T20:59:25Z 2025-12-11T09:27:52Z
ID Description Published Updated
wid-sec-w-2025-1523 GitLab: Mehrere Schwachstellen 2025-07-09T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1510 Trend Micro Maximum Security: Schwachstelle ermöglicht Privilegieneskalation 2025-07-08T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1506 Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1497 Broadcom Brocade SANnav: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-08T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1393 Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung 2025-06-24T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1244 Wireshark: Schwachstelle ermöglicht Denial of Service 2025-06-04T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1069 WebKitGTK: Mehrere Schwachstellen 2025-05-14T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2023-1273 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen 2021-01-25T23:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2023-1193 Red Hat Single Sign On: Mehrere Schwachstellen 2023-05-10T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2023-0557 python-cryptography: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2020-11-04T23:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2023-0518 Red Hat OpenStack: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2023-02-28T23:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2022-2050 Red Hat JBoss Application Server (JBoss): Mehrere Schwachstellen 2020-06-11T22:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2022-1366 Red Hat Integration - Service Registry: Mehrere Schwachstellen 2021-11-02T23:00:00.000+00:00 2025-07-10T22:00:00.000+00:00
wid-sec-w-2025-1521 Jenkins Plugins: Mehrere Schwachstellen 2025-07-09T22:00:00.000+00:00 2025-07-09T22:00:00.000+00:00
wid-sec-w-2025-1520 Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen 2025-07-09T22:00:00.000+00:00 2025-07-09T22:00:00.000+00:00
wid-sec-w-2025-1518 IBM App Connect Enterprise: Mehrere Schwachstellen 2025-07-09T22:00:00.000+00:00 2025-07-09T22:00:00.000+00:00
wid-sec-w-2025-1369 Red Hat Enterprise Linux (mpfr): Schwachstelle ermöglicht Denial of Service 2025-06-22T22:00:00.000+00:00 2025-07-09T22:00:00.000+00:00
wid-sec-w-2022-2069 IEEE 802.11 (WLAN): Mehrere Schwachstellen 2021-05-11T22:00:00.000+00:00 2025-07-09T22:00:00.000+00:00
wid-sec-w-2025-1515 Adobe FrameMaker: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1514 Ivanti Connect Secure und Ivanti Policy Secure: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1513 Adobe ColdFusion: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1511 ILIAS: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1509 IBM InfoSphere Data Replication (VSAM for z/OS Remote Source): Schwachstelle ermöglicht Denial of Service 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1507 ServiceNow Now Platform: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1505 Citrix Systems Virtual Apps and Desktops: Schwachstelle ermöglicht Privilegieneskalation 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1504 Spotfire Statistics Services: Schwachstelle ermöglicht Privilegieneskalation 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1503 Adobe Experience Manager Forms und Adobe Experience Manager Screens: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1500 Adobe Connect: Schwachstelle ermöglicht Codeausführung 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1499 Adobe Creative Cloud Applikationen: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1498 Ivanti Endpoint Manager: Mehrere Schwachstellen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
ID Description Published Updated
rhsa-2025:18256 Red Hat Security Advisory: .NET 8.0 security update 2025-10-16T15:40:20+00:00 2026-01-21T23:00:17+00:00
rhsa-2025:18148 Red Hat Security Advisory: .NET 8.0 security update 2025-10-15T15:58:41+00:00 2026-01-21T23:00:11+00:00
rhsa-2025:18153 Red Hat Security Advisory: .NET 9.0 security update 2025-10-15T16:33:56+00:00 2026-01-21T23:00:10+00:00
rhsa-2025:18152 Red Hat Security Advisory: .NET 8.0 security update 2025-10-15T16:18:27+00:00 2026-01-21T23:00:08+00:00
rhsa-2025:18151 Red Hat Security Advisory: .NET 9.0 security update 2025-10-15T16:57:02+00:00 2026-01-21T23:00:08+00:00
rhsa-2025:18150 Red Hat Security Advisory: .NET 9.0 security update 2025-10-15T16:34:50+00:00 2026-01-21T23:00:06+00:00
rhsa-2025:18149 Red Hat Security Advisory: .NET 8.0 security update 2025-10-15T16:16:39+00:00 2026-01-21T23:00:06+00:00
rhsa-2025:18076 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.3.GA) 2025-10-15T09:14:18+00:00 2026-01-21T23:00:06+00:00
rhsa-2025:18028 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.7 for Spring Boot release. 2025-10-14T17:59:03+00:00 2026-01-21T23:00:05+00:00
rhsa-2025:17731 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.2 security update 2025-10-09T18:48:05+00:00 2026-01-21T23:00:04+00:00
rhsa-2025:17730 Red Hat Security Advisory: Red Hat OpenShift GitOps v1.16.4 security update 2025-10-09T18:47:06+00:00 2026-01-21T23:00:00+00:00
rhsa-2025:17567 Red Hat Security Advisory: Red Hat AMQ Broker 7.13.2 release and security update 2025-10-08T14:48:34+00:00 2026-01-21T22:59:58+00:00
rhsa-2025:17563 Red Hat Security Advisory: Red Hat build of Quarkus 3.20.3 release and security update 2025-10-14T13:01:32+00:00 2026-01-21T22:59:57+00:00
rhsa-2025:17376 Red Hat Security Advisory: Red Hat build of Cryostat 4.0.3: new RHEL 9 container image security update 2025-10-06T13:05:24+00:00 2026-01-21T22:59:57+00:00
rhsa-2025:17318 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.9 security update 2025-10-02T17:34:35+00:00 2026-01-21T22:59:56+00:00
rhsa-2025:17317 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.9 security update 2025-10-02T17:38:07+00:00 2026-01-21T22:59:56+00:00
rhsa-2025:17299 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update 2025-10-02T14:54:02+00:00 2026-01-21T22:59:55+00:00
rhsa-2025:17298 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update 2025-10-02T14:58:17+00:00 2026-01-21T22:59:49+00:00
rhsa-2025:17189 Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.22 2025-10-01T18:01:13+00:00 2026-01-21T22:59:49+00:00
rhsa-2025:17187 Red Hat Security Advisory: Red Hat build of Quarkus 3.15.7 release and security update 2025-10-02T11:58:55+00:00 2026-01-21T22:59:49+00:00
rhsa-2025:16515 Red Hat Security Advisory: container-tools:rhel8 security update 2025-09-23T18:32:48+00:00 2026-01-21T22:59:44+00:00
rhsa-2025:16488 Red Hat Security Advisory: podman security update 2025-09-23T16:48:17+00:00 2026-01-21T22:59:44+00:00
rhsa-2025:16482 Red Hat Security Advisory: container-tools:rhel8 security update 2025-09-23T15:24:48+00:00 2026-01-21T22:59:43+00:00
rhsa-2025:16481 Red Hat Security Advisory: podman security update 2025-09-23T15:19:02+00:00 2026-01-21T22:59:41+00:00
rhsa-2025:16480 Red Hat Security Advisory: podman security update 2025-09-23T14:06:08+00:00 2026-01-21T22:59:40+00:00
rhsa-2025:16432 Red Hat Security Advisory: opentelemetry-collector security update 2025-09-23T08:27:01+00:00 2026-01-21T22:59:39+00:00
rhsa-2025:16407 Red Hat Security Advisory: Streams for Apache Kafka 3.0.1 release and security update 2025-09-22T21:48:11+00:00 2026-01-21T22:59:37+00:00
rhsa-2025:16020 Red Hat Security Advisory: Red Hat Developer Hub 1.7.1 release. 2025-09-16T20:12:11+00:00 2026-01-21T22:59:34+00:00
rhsa-2025:15904 Red Hat Security Advisory: container-tools:rhel8 security update 2025-09-16T05:56:47+00:00 2026-01-21T22:59:34+00:00
rhsa-2025:15901 Red Hat Security Advisory: podman security update 2025-09-16T02:22:07+00:00 2026-01-21T22:59:32+00:00
ID Description Published Updated
icsa-19-099-04 Siemens SINEMA Remote Connect (Update A) 2019-04-09T00:00:00.000000Z 2021-03-09T00:00:00.000000Z
icsa-21-063-02 ICSA-21-063-02_Schneider Electric EcoStruxure Building Operation (EBO) 2021-03-04T00:00:00.000000Z 2021-03-04T00:00:00.000000Z
icsa-21-063-01 Rockwell Automation 1734-AENTR Series B and Series C 2021-03-04T00:00:00.000000Z 2021-03-04T00:00:00.000000Z
icsa-21-061-03 MB connect line mbCONNECT24, mymbCONNECT24 2021-03-02T00:00:00.000000Z 2021-03-02T00:00:00.000000Z
icsa-21-061-01 Hitachi ABB Power Grids Ellipse EAM 2021-03-02T00:00:00.000000Z 2021-03-02T00:00:00.000000Z
icsa-21-056-04 ProSoft Technology ICX35 2021-02-25T00:00:00.000000Z 2021-02-25T00:00:00.000000Z
icsa-21-056-02 FATEK Automation FvDesigner 2021-02-25T00:00:00.000000Z 2021-02-25T00:00:00.000000Z
icsa-21-056-01 PerFact OpenVPN-Client 2021-02-25T00:00:00.000000Z 2021-02-25T00:00:00.000000Z
icsa-21-054-03 Advantech Spectre RT Industrial Routers 2021-02-23T00:00:00.000000Z 2021-02-23T00:00:00.000000Z
icsa-21-054-02 Advantech BB-ESWGP506-2SFP-T 2021-02-23T00:00:00.000000Z 2021-02-23T00:00:00.000000Z
icsa-21-054-01 Rockwell Automation FactoryTalk Services Platform 2021-02-23T00:00:00.000000Z 2021-02-23T00:00:00.000000Z
icsa-21-049-01 Johnson Controls Metasys Reporting Engine (MRE) Web Services 2021-02-18T00:00:00.000000Z 2021-02-18T00:00:00.000000Z
icsa-21-012-01 Schneider Electric EcoStruxure Power Build-Rapsody (Update A) 2021-01-12T00:00:00.000000Z 2021-02-18T00:00:00.000000Z
icsma-21-047-01 Hamilton-T1 2021-02-16T00:00:00.000000Z 2021-02-16T00:00:00.000000Z
icsa-21-047-02 Rockwell Automation Allen-Bradley Micrologix 1100 2021-02-16T00:00:00.000000Z 2021-02-16T00:00:00.000000Z
icsa-21-042-02 Rockwell Automation DriveTools SP and Drives AOP 2021-02-11T00:00:00.000000Z 2021-02-11T00:00:00.000000Z
icsa-21-040-10 Siemens DIGSI 4 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-09 SIMATIC WinCC Graphics Designer 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-07 Siemens SCALANCE W780 and W740 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-04 Siemens RUGGEDCOM ROX II 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-03 Siemens SINEMA Server & SINEC NMS 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-02 Advantech iView 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-040-01 GE Digital HMI/SCADA iFIX 2021-02-09T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-20-105-04 Siemens Climatix (Update A) 2020-04-14T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-19-162-04 Siemens SCALANCE X (Update B) 2019-06-11T00:00:00.000000Z 2021-02-09T00:00:00.000000Z
icsa-21-035-02 Horner Automation Cscape 2021-02-04T00:00:00.000000Z 2021-02-04T00:00:00.000000Z
icsa-21-033-02 Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels 2021-01-28T00:00:00.000000Z 2021-01-28T00:00:00.000000Z
icsa-21-028-01 Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform 2021-01-28T00:00:00.000000Z 2021-01-28T00:00:00.000000Z
icsa-21-026-01 Fuji Electric Tellus Lite V-Simulator and V-Server Lite 2021-01-26T00:00:00.000000Z 2021-01-26T00:00:00.000000Z
icsa-21-007-03 Eaton EASYsoft (Update A) 2021-01-07T00:00:00.000000Z 2021-01-26T00:00:00.000000Z
ID Description Published Updated
msrc_cve-2025-8837 JasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free 2025-08-02T00:00:00.000Z 2025-09-03T22:40:08.000Z
msrc_cve-2023-24534 Excessive memory allocation in net/http and net/textproto 2023-04-01T00:00:00.000Z 2025-09-03T22:40:02.000Z
msrc_cve-2024-49939 wifi: rtw89: avoid to add interface to list twice when SER 2024-10-01T07:00:00.000Z 2025-09-03T22:39:44.000Z
msrc_cve-2024-52981 An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow. 2025-04-02T00:00:00.000Z 2025-09-03T22:38:10.000Z
msrc_cve-2024-36012 Bluetooth: msft: fix slab-use-after-free in msft_do_close() 2024-05-02T07:00:00.000Z 2025-09-03T22:38:10.000Z
msrc_cve-2024-46751 btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() 2024-09-01T07:00:00.000Z 2025-09-03T22:38:08.000Z
msrc_cve-2023-45857 An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. 2023-11-01T07:00:00.000Z 2025-09-03T22:38:03.000Z
msrc_cve-2024-57256 An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. 2025-02-02T00:00:00.000Z 2025-09-03T22:38:00.000Z
msrc_cve-2023-52584 spmi: mediatek: Fix UAF on device remove 2024-03-02T08:00:00.000Z 2025-09-03T22:37:27.000Z
msrc_cve-2014-4607 Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run. 2020-02-02T00:00:00.000Z 2025-09-03T22:36:44.000Z
msrc_cve-2024-56784 drm/amd/display: Adding array index check to prevent memory corruption 2025-01-02T00:00:00.000Z 2025-09-03T22:36:39.000Z
msrc_cve-2023-45929 S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). 2024-03-02T08:00:00.000Z 2025-09-03T22:36:34.000Z
msrc_cve-2024-41066 ibmvnic: Add tx check to prevent skb leak 2024-07-01T07:00:00.000Z 2025-09-03T22:36:21.000Z
msrc_cve-2024-3220 Default mimetype known files writeable on Windows 2025-02-02T00:00:00.000Z 2025-09-03T22:36:11.000Z
msrc_cve-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion 2025-08-02T00:00:00.000Z 2025-09-03T22:35:09.000Z
msrc_cve-2022-24791 Use after free in Wasmtime 2022-03-02T00:00:00.000Z 2025-09-03T22:34:55.000Z
msrc_cve-2023-52591 reiserfs: Avoid touching renamed directory if parent does not change 2024-03-02T08:00:00.000Z 2025-09-03T22:34:49.000Z
msrc_cve-2025-37743 wifi: ath12k: Avoid memory leak while enabling statistics 2025-05-02T00:00:00.000Z 2025-09-03T22:34:36.000Z
msrc_cve-2025-38617 net/packet: fix a race in packet_set_ring() and packet_notifier() 2025-08-02T00:00:00.000Z 2025-09-03T22:34:22.000Z
msrc_cve-2021-23841 Null pointer deref in X509_issuer_and_serial_hash() 2021-02-02T00:00:00.000Z 2025-09-03T22:33:59.000Z
msrc_cve-2019-14193 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length. 2019-07-02T00:00:00.000Z 2025-09-03T22:33:58.000Z
msrc_cve-2025-38414 wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 2025-07-02T00:00:00.000Z 2025-09-03T22:33:00.000Z
msrc_cve-2023-52601 jfs: fix array-index-out-of-bounds in dbAdjTree 2024-03-02T08:00:00.000Z 2025-09-03T22:32:54.000Z
msrc_cve-2023-45927 S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). 2024-03-02T08:00:00.000Z 2025-09-03T22:32:27.000Z
msrc_cve-2025-0913 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall 2025-06-02T00:00:00.000Z 2025-09-03T22:32:05.000Z
msrc_cve-2024-43895 drm/amd/display: Skip Recompute DSC Params if no Stream on Link 2024-08-02T00:00:00.000Z 2025-09-03T22:32:03.000Z
msrc_cve-2025-1767 This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable. 2025-03-02T00:00:00.000Z 2025-09-03T22:31:42.000Z
msrc_cve-2024-11235 Reference counting in php_request_shutdown causes Use-After-Free 2025-04-02T00:00:00.000Z 2025-09-03T22:31:40.000Z
msrc_cve-2024-3660 Arbitrary code injection vulnerability in Keras framework < 2.13 2024-04-02T07:00:00.000Z 2025-09-03T22:31:36.000Z
msrc_cve-2025-38206 exfat: fix double free in delayed_free 2025-07-02T00:00:00.000Z 2025-09-03T22:31:13.000Z
ID Description Updated
var-202201-0582 PJSIP is a free and open source multimedia communication library written in C language im… 2025-11-18T13:57:30.498000Z
var-202203-1579 An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was… 2025-11-18T13:55:31.506000Z
var-202104-0750 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big … 2025-11-18T13:53:46.294000Z
var-202209-0759 The issue was addressed with improved bounds checks. This issue is fixed in macOS Montere… 2025-11-18T13:48:07.758000Z
var-202002-1163 A memory corruption issue was addressed with improved memory handling. This issue is fixe… 2025-11-18T13:44:53.404000Z
var-201802-0594 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W… 2025-11-18T13:44:46.148000Z
var-202408-0009 Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be a… 2025-11-18T13:40:55.807000Z
var-202206-0761 Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. vim/vim Exists in an out-o… 2025-11-18T13:40:54.006000Z
var-202201-0561 A memory corruption issue was addressed with improved input validation. This issue is fix… 2025-11-18T13:40:14.314000Z
var-202112-2424 vim is vulnerable to Use After Free. vim Exists in a vulnerability related to the use of … 2025-11-18T13:36:32.479000Z
var-202108-1137 A buffer overflow issue was addressed with improved memory handling. This issue is fixed … 2025-11-18T13:35:53.524000Z
var-202203-0233 In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable… 2025-11-18T13:35:47.514000Z
var-202203-1580 An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… 2025-11-18T13:35:43.572000Z
var-202203-1921 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to … 2025-11-18T13:35:37.917000Z
var-202109-0601 A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Softw… 2025-11-18T13:34:44.340000Z
var-202002-0712 A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software … 2025-11-18T13:32:00.859000Z
var-202104-0612 A type confusion issue was addressed with improved state handling. This issue is fixed in… 2025-11-18T13:29:31.620000Z
var-202408-0013 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versio… 2025-11-18T13:29:24.294000Z
var-201807-1874 An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has acces… 2025-11-18T13:29:14.446000Z
var-202109-1380 A permissions issue was addressed with improved validation. This issue is fixed in macOS … 2025-11-18T13:28:40.627000Z
var-202104-0768 A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware ve… 2025-11-18T13:25:51.510000Z
var-202407-2538 An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UD… 2025-11-18T13:24:35.190000Z
var-202202-0129 An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before… 2025-11-18T13:20:43.101000Z
var-202108-2051 An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… 2025-11-18T13:19:58.069000Z
var-201507-0102 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implement… 2025-11-18T13:19:19.283000Z
var-202407-2514 An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID… 2025-11-18T13:18:25.296000Z
var-202006-1614 An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… 2025-11-18T13:17:35.970000Z
var-201208-0526 Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS… 2025-11-18T13:15:58.377000Z
var-202107-1503 libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncomp… 2025-11-18T13:14:50.768000Z
var-201504-0548 Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows a… 2025-11-18T13:13:58.781000Z
ID Description Published Updated
jvndb-2009-000019 Cross-site scripting vulnerability in apricot.php from LovPop.net 2009-04-17T14:40+09:00 2009-04-17T14:40+09:00
jvndb-2009-001135 Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template 2009-04-17T14:13+09:00 2009-04-17T14:13+09:00
jvndb-2009-000017 XOOPS Cube Legacy cross-site scripting vulnerability 2009-04-07T17:06+09:00 2009-04-07T17:06+09:00
jvndb-2009-000016 Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges 2009-03-31T16:08+09:00 2009-03-31T16:08+09:00
jvndb-2008-001647 Jasmine WebLink Template Multiple Vulnerabilities 2008-09-18T11:48+09:00 2009-03-30T14:29+09:00
jvndb-2009-001087 Fujitsu Enhanced Support Facility HRM-S Hardware/Software Information Disclosure Vulnerability 2009-03-24T17:35+09:00 2009-03-24T17:35+09:00
jvndb-2009-000015 Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x) 2009-03-16T17:07+09:00 2009-03-16T17:07+09:00
jvndb-2009-000014 MP Form Mail CGI vulnerability allows third party to gain administrative privileges 2009-03-13T16:25+09:00 2009-03-13T16:25+09:00
jvndb-2009-000012 Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras 2009-03-09T16:27+09:00 2009-03-09T16:27+09:00
jvndb-2009-000013 PEAK XOOPS piCal cross-site scripting vulnerability 2009-03-03T16:37+09:00 2009-03-03T16:37+09:00
jvndb-2009-001033 Multiple Vulnerabilities in uCosminexus Portal Framework 2009-03-02T17:38+09:00 2009-03-02T17:38+09:00
jvndb-2009-001032 JP1/Cm2/Network Node Manager Denial of Service (DoS) Vulnerability 2009-03-02T17:38+09:00 2009-03-02T17:38+09:00
jvndb-2009-000010 Apache Tomcat information disclosure vulnerability 2009-02-26T15:28+09:00 2009-02-26T15:28+09:00
jvndb-2009-001025 Vulnerability allowing Viewing/Updating of Other Users' Information in Groupmax World Wide Web Desktop Version 6 2009-02-26T11:55+09:00 2009-02-26T11:55+09:00
jvndb-2009-000009 FAST ESP cross-site scripting vulnerability 2009-02-17T11:55+09:00 2009-02-17T11:55+09:00
jvndb-2009-000011 Becky! Internet Mail buffer overflow vulnerability 2009-02-12T17:28+09:00 2009-02-12T17:28+09:00
jvndb-2007-000817 Flash Player vulnerable in handling cross-domain policy files 2008-05-21T00:00+09:00 2009-02-10T11:32+09:00
jvndb-2009-000008 Fulltext search CGI vulnerability allows third party to gain administrative privileges 2009-01-28T15:25+09:00 2009-01-28T15:25+09:00
jvndb-2009-000007 Oracle WebLogic Server vulnerable to cross-site scripting 2009-01-20T16:45+09:00 2009-01-20T16:45+09:00
jvndb-2009-000006 Cisco IOS cross-site scripting vulnerability 2009-01-15T19:14+09:00 2009-01-15T19:14+09:00
jvndb-2009-000005 MODx vulnerable to SQL injection 2009-01-09T15:54+09:00 2009-01-09T15:54+09:00
jvndb-2009-000004 MODx cross-site request forgery vulnerability 2009-01-09T15:54+09:00 2009-01-09T15:54+09:00
jvndb-2009-000003 MODx cross-site scripting vulnerability 2009-01-09T15:54+09:00 2009-01-09T15:54+09:00
jvndb-2009-000001 MyNETS cross-site scripting vulnerability 2009-01-08T11:34+09:00 2009-01-08T11:34+09:00
jvndb-2008-000086 BlackJumboDog authentication bypass vulnerability 2008-12-25T16:22+09:00 2008-12-25T16:22+09:00
jvndb-2008-000085 Mayaa cross-site scripting vulnerability 2008-12-25T16:22+09:00 2008-12-25T16:22+09:00
jvndb-2008-000083 Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe 2008-12-17T15:30+09:00 2008-12-17T15:30+09:00
jvndb-2008-001911 Groupmax Workflow - Development Kit for Active Server Pages Cross-Site Scripting Vulnerability 2008-12-05T11:35+09:00 2008-12-05T11:35+09:00
jvndb-2008-001910 Groupmax Collaboration - Schedule Mis-scheduling Problem: Unintended Members Included When Reservations are Made by Secretary 2008-12-05T11:34+09:00 2008-12-05T11:34+09:00
jvndb-2008-000067 Movable Type Enterprise cross-site scripting vulnerability 2008-12-04T14:52+09:00 2008-12-04T14:52+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:20258-1 Security update for expat 2025-03-31T14:22:37Z 2025-03-31T14:22:37Z
suse-su-2025:20257-1 Security update for libarchive 2025-03-31T14:21:24Z 2025-03-31T14:21:24Z
suse-su-2025:1066-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) 2025-03-31T13:33:27Z 2025-03-31T13:33:27Z
suse-su-2025:1064-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) 2025-03-31T13:03:54Z 2025-03-31T13:03:54Z
suse-su-2025:1063-1 Security update for apparmor 2025-03-31T09:04:55Z 2025-03-31T09:04:55Z
suse-su-2025:1062-1 Security update for docker, docker-stable 2025-03-31T08:45:25Z 2025-03-31T08:45:25Z
suse-su-2025:1059-1 Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6) 2025-03-28T19:33:25Z 2025-03-28T19:33:25Z
suse-su-2025:1057-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) 2025-03-28T19:03:41Z 2025-03-28T19:03:41Z
suse-su-2025:1056-1 Security update for python3 2025-03-28T17:06:36Z 2025-03-28T17:06:36Z
suse-su-2025:1055-1 Security update for skopeo 2025-03-28T16:55:49Z 2025-03-28T16:55:49Z
suse-su-2025:1054-1 Security update for mercurial 2025-03-28T16:54:30Z 2025-03-28T16:54:30Z
suse-su-2025:1053-1 Security update for openvpn 2025-03-28T16:46:40Z 2025-03-28T16:46:40Z
suse-su-2025:1052-1 Security update for govulncheck-vulndb 2025-03-28T15:49:32Z 2025-03-28T15:49:32Z
suse-su-2025:1051-1 Security update for erlang26 2025-03-28T14:50:17Z 2025-03-28T14:50:17Z
suse-su-2025:20286-1 Security update for ucode-intel 2025-03-28T13:56:24Z 2025-03-28T13:56:24Z
suse-su-2025:20255-1 Security update for python-requests 2025-03-28T13:56:14Z 2025-03-28T13:56:14Z
suse-su-2025:20254-1 Security update for python-Jinja2 2025-03-28T13:55:43Z 2025-03-28T13:55:43Z
suse-su-2025:20252-1 Security update for libsoup 2025-03-28T13:54:44Z 2025-03-28T13:54:44Z
suse-su-2025:20249-1 Security update for the Linux Kernel 2025-03-28T07:51:47Z 2025-03-28T07:51:47Z
suse-su-2025:20166-1 Security update for the Linux Kernel 2025-03-28T07:51:47Z 2025-03-28T07:51:47Z
suse-su-2025:1043-1 Security update for python36 2025-03-27T16:27:44Z 2025-03-27T16:27:44Z
suse-su-2025:20165-1 Security update for the Linux Kernel 2025-03-27T15:23:42Z 2025-03-27T15:23:42Z
suse-su-2025:20164-1 Security update for the Linux Kernel 2025-03-27T15:23:38Z 2025-03-27T15:23:38Z
suse-su-2025:1041-1 Security update for python3 2025-03-27T15:08:09Z 2025-03-27T15:08:09Z
suse-su-2025:20248-1 Security update for the Linux Kernel 2025-03-27T14:32:55Z 2025-03-27T14:32:55Z
suse-su-2025:20247-1 Security update for the Linux Kernel 2025-03-27T14:05:14Z 2025-03-27T14:05:14Z
suse-su-2025:20163-1 Security update for the Linux Kernel 2025-03-27T12:56:22Z 2025-03-27T12:56:22Z
suse-su-2025:20246-1 Security update for the Linux Kernel 2025-03-27T12:56:21Z 2025-03-27T12:56:21Z
suse-su-2025:1038-1 Security update for podman 2025-03-27T09:44:39Z 2025-03-27T09:44:39Z
suse-su-2025:1037-1 Security update for podman 2025-03-27T09:44:17Z 2025-03-27T09:44:17Z
ID Description Published Updated
opensuse-su-2024:13393-1 avahi-0.8-27.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13392-1 matrix-synapse-1.95.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13391-1 grpc-devel-1.59.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13390-1 lighttpd-1.4.73-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13389-1 jasper-4.0.0-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13388-1 glibc-2.38-6.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13387-1 frr-8.4-7.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13386-1 freeradius-server-3.2.3-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13385-1 MozillaFirefox-119.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13384-1 velero-1.12.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13383-1 ungoogled-chromium-118.0.5993.117-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13382-1 tomcat-9.0.82-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13381-1 libtiff-devel-32bit-4.6.0-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13380-1 libQt6Concurrent6-6.6.0-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13379-1 pgadmin4-7.8-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13378-1 libQt5Svg5-32bit-5.15.11+kde6-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13377-1 libQt5Bootstrap-devel-static-32bit-5.15.11+kde138-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13376-1 cmctl-1.13.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13375-1 python310-Werkzeug-3.0.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13374-1 libvmtools-devel-12.3.0-5.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13373-1 avahi-0.8-26.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13372-1 libopenssl-3-devel-3.1.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13371-1 etcd-for-k8s1.27-3.5.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13370-1 etcd-for-k8s1.26-3.5.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13369-1 etcd-for-k8s1.25-3.5.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13368-1 chromedriver-118.0.5993.117-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13367-1 libvlc5-3.0.19-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13366-1 libsystemd0-254.5-3.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13365-1 roundcubemail-1.6.4-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13364-1 qemu-8.1.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
cnvd-2025-23329 Employee Record Management System /admin/allemployees.php文件SQL注入漏洞 2025-06-10 2025-10-11
cnvd-2025-23328 Employee Record Management System /admin/adminprofile.php文件SQL注入漏洞 2025-06-10 2025-10-11
cnvd-2025-23327 Employee Record Management System admin/editempeducation.php文件SQL注入漏洞 2025-06-27 2025-10-11
cnvd-2025-23326 Employee Record Management System myprofile.php文件跨站脚本漏洞 2025-09-29 2025-10-11
cnvd-2025-23325 Zoo Management System /zms/admin/changeimage.php文件SQL注入漏洞 2024-03-01 2025-10-10
cnvd-2025-23324 Teachers Record Management System /trms/listed-teachers.php跨站脚本漏洞 2024-10-23 2025-10-10
cnvd-2025-23323 Beauty Parlour Management System不安全的直接对象引用漏洞 2024-11-08 2025-10-10
cnvd-2025-23322 Teachers Record Management System add-teacher.php文件SQL注入漏洞 2024-11-11 2025-10-10
cnvd-2025-23321 Teachers Record Management System admin/queries.php文件SQL注入漏洞 2024-11-11 2025-10-10
cnvd-2025-23320 Zoo Management System login.php文件SQL注入漏洞 2025-03-27 2025-10-10
cnvd-2025-23319 Zoo Management System aboutus.php文件SQL注入漏洞 2025-04-09 2025-10-10
cnvd-2025-23318 Zoo Management System /admin/view-foreigner-ticket.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23317 Auto Taxi Stand Management System /admin/new-autoortaxi-entry-form.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23316 Auto Taxi Stand Management System /admin/index.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23315 Auto Taxi Stand Management System /admin/forgot-password.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23314 Auto Taxi Stand Management System /admin/auto-taxi-entry-detail.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23313 Auto Taxi Stand Management System /admin/admin-profile.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23312 Teachers Record Management System edit-teacher-detail.php文件SQL注入漏洞 2025-07-04 2025-10-10
cnvd-2025-23311 Teachers Record Management System changeimage.php文件SQL注入漏洞 2025-07-04 2025-10-10
cnvd-2025-23310 Taxi Stand Management System admin/admin-profile.php文件跨站脚本漏洞 2025-07-23 2025-10-10
cnvd-2025-23309 Taxi Stand Management System admin/search-autoortaxi.php文件跨站脚本漏洞 2025-07-23 2025-10-10
cnvd-2025-23308 Taxi Stand Management System admin/new-autoortaxi-entry-form.php文件跨站脚本漏洞 2025-07-30 2025-10-10
cnvd-2025-23307 Zoo Management System admin/add-foreigner-ticket.php文件跨站脚本漏洞 2025-08-20 2025-10-10
cnvd-2025-23306 Teachers Record Management System admin/search.php文件SQL注入漏洞 2025-08-20 2025-10-10
cnvd-2025-23305 Beauty Parlour Management System admin/all-appointment.php文件SQL注入漏洞 2025-09-18 2025-10-10
cnvd-2025-23290 PyTorch存在未明漏洞(CNVD-2025-23290) 2025-05-12 2025-10-10
cnvd-2025-23289 PyTorch存在未明漏洞(CNVD-2025-23289) 2025-05-14 2025-10-10
cnvd-2025-23288 PyTorch torch.linalg.lu组件存在未明漏洞 2025-09-28 2025-10-10
cnvd-2025-23287 PyTorch缓冲区溢出漏洞(CNVD-2025-23287) 2025-09-28 2025-10-10
cnvd-2025-23286 PyTorch存在未明漏洞(CNVD-2025-23286) 2025-09-28 2025-10-10
ID Description Published Updated
certfr-2023-avi-0682 Multiples vulnérabilités dans Mitel MiVoice Connect 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0681 Multiples vulnérabilités dans les produits Cisco 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0680 Vulnérabilité dans MongoDB Server 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0679 Vulnérabilité dans Spring-Kafka 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0678 Vulnérabilité dans Wireshark 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0677 Multiples vulnérabilités dans Moxa ioLogik 2023-08-24T00:00:00.000000 2023-08-24T00:00:00.000000
certfr-2023-avi-0676 Vulnérabilité dans Zimbra Collaboration Suite 2023-08-23T00:00:00.000000 2023-08-23T00:00:00.000000
certfr-2023-avi-0675 Multiples vulnérabilités dans Google Chrome 2023-08-23T00:00:00.000000 2023-08-23T00:00:00.000000
certfr-2023-avi-0674 Multiples vulnérabilités dans Aruba EdgeConnect SD-WAN Orchestrator 2023-08-23T00:00:00.000000 2023-08-23T00:00:00.000000
certfr-2023-avi-0673 Vulnérabilité dans Ivanti Sentry 2023-08-22T00:00:00.000000 2023-08-22T00:00:00.000000
certfr-2023-avi-0672 Multiples vulnérabilités dans Microsoft Edge 2023-08-22T00:00:00.000000 2023-08-22T00:00:00.000000
certfr-2023-avi-0671 Multiples vulnérabilités dans Moodle 2023-08-21T00:00:00.000000 2023-08-21T00:00:00.000000
certfr-2023-avi-0670 Vulnérabilité dans Fortinet FortiOS 2023-08-21T00:00:00.000000 2023-08-21T00:00:00.000000
certfr-2023-avi-0669 Multiples vulnérabilités dans PHP 2023-08-21T00:00:00.000000 2023-08-21T00:00:00.000000
certfr-2023-avi-0668 Vulnérabilité dans les caméras Synology 2023-08-21T00:00:00.000000 2023-08-21T00:00:00.000000
certfr-2023-avi-0667 Multiples vulnérabilités dans le noyau Linux de Debian et DebianLTS 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0666 Multiples vulnérabilités dans IBM Cognos Analytics 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0665 Multiples vulnérabilités dans les produits ClamAV 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0664 Multiples vulnérabilités dans le noyau Linux de SUSE 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0663 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0662 Vulnérabilité dans MISP 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0661 Multiples vulnérabilités dans Microsoft Edge 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0660 Vulnérabilité dans Juniper Junos OS 2023-08-18T00:00:00.000000 2023-08-18T00:00:00.000000
certfr-2023-avi-0659 Multiples vulnérabilités dans les produits Moxa 2023-08-17T00:00:00.000000 2023-08-17T00:00:00.000000
certfr-2023-avi-0658 Multiples vulnérabilités dans les produits Cisco 2023-08-17T00:00:00.000000 2023-08-17T00:00:00.000000
certfr-2023-avi-0657 Vulnérabilité dans Microsoft Office et OneNote 2023-08-16T00:00:00.000000 2023-08-16T00:00:00.000000
certfr-2023-avi-0656 Multiples vulnérabilités dans Tenable Sensor Proxy 2023-08-16T00:00:00.000000 2023-08-16T00:00:00.000000
certfr-2023-avi-0655 Multiples vulnérabilités dans Aruba Networking Virtual Intranet Access 2023-08-16T00:00:00.000000 2023-08-16T00:00:00.000000
certfr-2023-avi-0654 Multiples vulnérabilités dans Google Chrome 2023-08-16T00:00:00.000000 2023-08-16T00:00:00.000000
certfr-2023-avi-0653 Multiples vulnérabilités dans le noyau Linux de SUSE 2023-08-11T00:00:00.000000 2023-08-11T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated