Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-64247
6.5 (3.1)
WordPress Read More & Accordion plugin <= 3.5.4.1 - Br… edmon.parker
Read More & Accordion
2025-12-16T08:12:49.100Z 2026-01-20T14:28:21.315Z
CVE-2025-64263
5.4 (3.1)
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Ac… PluginEver
WP Content Pilot
2025-11-13T09:24:28.383Z 2026-01-20T14:28:21.298Z
CVE-2025-64272
6.5 (3.1)
WordPress Email marketing for WordPress by GetResponse… GetResponse
Email marketing for WordPress by GetResponse Official
2025-12-18T07:22:15.080Z 2026-01-20T14:28:21.293Z
CVE-2025-64265
4.3 (3.1)
WordPress Frontend File Manager plugin <= 23.2 - Broke… N-Media
Frontend File Manager
2025-11-13T09:24:29.310Z 2026-01-20T14:28:21.291Z
CVE-2025-64256
8.8 (3.1)
WordPress Simple Folio plugin <= 1.1.0 - Cross Site Re… PressTigers
Simple Folio
2025-12-09T14:13:52.351Z 2026-01-20T14:28:21.259Z
CVE-2025-64262
6.5 (3.1)
WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Sit… ramon fincken
Auto Prune Posts
2025-11-13T09:24:27.918Z 2026-01-20T14:28:21.234Z
CVE-2025-64260
7.1 (3.1)
WordPress ANAC XML Bandi di Gara plugin <= 7.7 - Cross… Marco Milesi
ANAC XML Bandi di Gara
2025-12-18T07:22:14.310Z 2026-01-20T14:28:21.234Z
CVE-2025-64266
8.8 (3.1)
WordPress Booking and Rental Manager plugin <= 2.5.4 -… magepeopleteam
Booking and Rental Manager
2025-12-18T07:22:14.481Z 2026-01-20T14:28:21.161Z
CVE-2025-64276
6.5 (3.1)
WordPress Survey Maker plugin <= 5.1.9.4 - Broken Acce… Ays Pro
Survey Maker
2025-11-13T09:24:31.911Z 2026-01-20T14:28:21.160Z
CVE-2025-64259
6.5 (3.1)
WordPress Theater for WordPress plugin <= 0.18.8 - Bro… Jeroen Schmit
Theater for WordPress
2025-11-13T09:24:26.955Z 2026-01-20T14:28:21.159Z
CVE-2025-64273
7.5 (3.1)
WordPress Email marketing for WordPress by GetResponse… GetResponse
Email marketing for WordPress by GetResponse Official
2025-12-18T07:22:15.266Z 2026-01-20T14:28:21.096Z
CVE-2025-64270
6.5 (3.1)
WordPress Masteriyo - LMS plugin <= 2.0.3 - Sensitive … masteriyo
Masteriyo - LMS
2025-12-18T07:22:14.865Z 2026-01-20T14:28:21.085Z
CVE-2025-64269
4.3 (3.1)
WordPress WooCommerce PDF Invoice Builder plugin <= 1.… EDGARROJAS
WooCommerce PDF Invoice Builder
2025-11-13T09:24:30.214Z 2026-01-20T14:28:21.085Z
CVE-2025-64274
4.3 (3.1)
WordPress WPKoi Templates for Elementor plugin <= 3.4.… wpkoithemes
WPKoi Templates for Elementor
2025-11-13T09:24:31.061Z 2026-01-20T14:28:21.083Z
CVE-2025-64264
5.9 (3.1)
WordPress Popup addon for Ninja Forms plugin <= 3.5.1 … Aman
Popup addon for Ninja Forms
2025-11-13T09:24:28.871Z 2026-01-20T14:28:21.081Z
CVE-2025-64253
4.9 (3.1)
WordPress Health Check & Troubleshooting plugin <= 1.7… WordPress.org
Health Check & Troubleshooting
2025-12-16T08:12:50.088Z 2026-01-20T14:28:21.074Z
CVE-2025-64277
5.3 (3.1)
WordPress ChatBot plugin <= 7.3.9 - Broken Access Cont… QuantumCloud
ChatBot
2025-11-13T09:24:32.345Z 2026-01-20T14:28:21.020Z
CVE-2025-64255
7.2 (3.1)
WordPress Admin and Site Enhancements (ASE) plugin <= … Bowo
Admin and Site Enhancements (ASE)
2025-12-09T14:13:52.144Z 2026-01-20T14:28:21.009Z
CVE-2025-64258
7.5 (3.1)
WordPress Follow My Blog Post plugin <= 2.3.9 - Sensit… wpweb
Follow My Blog Post
2025-12-18T07:22:14.130Z 2026-01-20T14:28:21.008Z
CVE-2025-64222
7.5 (3.1)
WordPress WooCommerce Recover Abandoned Cart plugin <=… FantasticPlugins
WooCommerce Recover Abandoned Cart
2025-12-18T07:22:12.885Z 2026-01-20T14:28:20.993Z
CVE-2025-64250
6.1 (3.1)
WordPress Directorist plugin <= 8.5.6 - Open Redirecti… wpWax
Directorist
2025-12-16T08:12:49.689Z 2026-01-20T14:28:20.980Z
CVE-2025-64254
8.8 (3.1)
WordPress Photo Block plugin <= 1.5.1 - Broken Access … Ronald Huereca
Photo Block
2025-12-09T14:13:51.839Z 2026-01-20T14:28:20.954Z
CVE-2025-64251
4.9 (3.1)
WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbi… azzaroco
Ultimate Learning Pro
2025-12-16T08:12:49.880Z 2026-01-20T14:28:20.915Z
CVE-2025-64246
4.3 (3.1)
WordPress Accessibility by AudioEye plugin <= 1.0.49 -… netopsae
Accessibility by AudioEye
2025-12-16T08:12:48.902Z 2026-01-20T14:28:20.873Z
CVE-2025-64238
4.3 (3.1)
WordPress WPS Bidouille plugin <= 1.33.1 - Broken Acce… NicolasKulka
WPS Bidouille
2025-12-16T08:12:47.350Z 2026-01-20T14:28:20.852Z
CVE-2025-64218
7.5 (3.1)
WordPress Passster plugin <= 4.2.19 - Sensitive Data E… WP Chill
Passster
2025-12-18T07:22:12.527Z 2026-01-20T14:28:20.843Z
CVE-2025-64244
4.3 (3.1)
WordPress Restrict Elementor Widgets, Columns and Sect… Codexpert, Inc
Restrict Elementor Widgets, Columns and Sections
2025-12-16T08:12:48.528Z 2026-01-20T14:28:20.451Z
CVE-2025-64224
7.1 (3.1)
WordPress Grand Conference Theme Custom Post Type plug… ThemeGoods
Grand Conference Theme Custom Post Type
2025-11-06T15:56:10.204Z 2026-01-20T14:28:20.416Z
CVE-2025-64245
4.3 (3.1)
WordPress Import external attachments plugin <= 1.5.12… ryanpcmcquen
Import external attachments
2025-12-16T08:12:48.719Z 2026-01-20T14:28:20.395Z
CVE-2025-64207
7.1 (3.1)
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting… TieLabs
Jannah
2025-12-18T07:22:11.630Z 2026-01-20T14:28:20.368Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-31963
2.9 (3.1)
HCL BigFix IVR is impacted by improper authentication … HCLSoftware
BigFix IVR
2026-01-07T07:05:40.098Z 2026-01-07T16:13:25.789Z
CVE-2024-4392
6.4 (3.1)
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3… automattic
Jetpack – WP Security, Backup, Speed, & Growth
2024-05-14T08:32:31.906Z 2024-08-01T20:40:47.361Z
CVE-2023-47774
5.4 (3.1)
WordPress Jetpack plugin < 12.7 - Auth. Iframe Injecti… Automattic
Jetpack
2024-04-24T15:58:40.432Z 2024-08-02T21:16:43.660Z
CVE-2025-39482
4.3 (3.1)
WordPress Eventer - WordPress Event & Booking Manager … imithemes
Eventer
2025-05-16T15:45:26.697Z 2026-01-22T12:07:27.271Z
CVE-2025-39481
9.3 (3.1)
WordPress Eventer - WordPress Event & Booking Manager … imithemes
Eventer
2025-05-16T15:45:27.223Z 2026-01-22T12:05:03.823Z
CVE-2025-39483
6.5 (3.1)
WordPress Eventer plugin < 3.9.9.1 - Shortcode Injecti… imithemes
Eventer
2025-08-14T10:34:26.628Z 2026-01-22T09:41:27.096Z
CVE-2024-53252
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:06.360Z
CVE-2024-53251
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:04.870Z
CVE-2024-53250
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:03.200Z
CVE-2024-53249
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:40:00.720Z
CVE-2024-53248
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:59.446Z
CVE-2024-45743
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:58.180Z
CVE-2024-45742
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:56.832Z
CVE-2024-45730
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:55.570Z
CVE-2024-45729
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:54.322Z
CVE-2024-45728
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:53.063Z
CVE-2024-45727
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:51.817Z
CVE-2024-45726
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:50.428Z
CVE-2024-45725
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:49.125Z
CVE-2024-45724
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:47.866Z
CVE-2024-36998
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:46.585Z
CVE-2024-36988
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:45.176Z
CVE-2024-22166
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:43.826Z
CVE-2023-32720
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:42.486Z
CVE-2023-32719
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:41.161Z
CVE-2023-32718
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:39.735Z
CVE-2023-22944
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:38.404Z
CVE-2023-22930
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:37.110Z
CVE-2023-22929
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:35.843Z
CVE-2023-22928
N/A
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. N/A N/A 2026-01-22T09:39:34.507Z
ID Description Published Updated
fkie_cve-2024-53252 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.407 2026-01-22T10:16:06.407
fkie_cve-2024-53251 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.347 2026-01-22T10:16:06.347
fkie_cve-2024-53250 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.290 2026-01-22T10:16:06.290
fkie_cve-2024-53249 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.223 2026-01-22T10:16:06.223
fkie_cve-2024-53248 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.160 2026-01-22T10:16:06.160
fkie_cve-2024-45743 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.097 2026-01-22T10:16:06.097
fkie_cve-2024-45742 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:06.033 2026-01-22T10:16:06.033
fkie_cve-2024-45730 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.973 2026-01-22T10:16:05.973
fkie_cve-2024-45729 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.907 2026-01-22T10:16:05.907
fkie_cve-2024-45728 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.847 2026-01-22T10:16:05.847
fkie_cve-2024-45727 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.787 2026-01-22T10:16:05.787
fkie_cve-2024-45726 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.723 2026-01-22T10:16:05.723
fkie_cve-2024-45725 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.660 2026-01-22T10:16:05.660
fkie_cve-2024-45724 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.593 2026-01-22T10:16:05.593
fkie_cve-2024-36998 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.520 2026-01-22T10:16:05.520
fkie_cve-2024-36988 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.450 2026-01-22T10:16:05.450
fkie_cve-2024-22166 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.360 2026-01-22T10:16:05.360
fkie_cve-2023-32720 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.293 2026-01-22T10:16:05.293
fkie_cve-2023-32719 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.230 2026-01-22T10:16:05.230
fkie_cve-2023-32718 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.160 2026-01-22T10:16:05.160
fkie_cve-2023-22944 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.083 2026-01-22T10:16:05.083
fkie_cve-2023-22930 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:05.020 2026-01-22T10:16:05.020
fkie_cve-2023-22929 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.953 2026-01-22T10:16:04.953
fkie_cve-2023-22928 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.890 2026-01-22T10:16:04.890
fkie_cve-2023-22927 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.823 2026-01-22T10:16:04.823
fkie_cve-2023-22926 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.760 2026-01-22T10:16:04.760
fkie_cve-2023-22925 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.687 2026-01-22T10:16:04.687
fkie_cve-2022-43560 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.620 2026-01-22T10:16:04.620
fkie_cve-2022-43559 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.560 2026-01-22T10:16:04.560
fkie_cve-2022-43558 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used. 2026-01-22T10:16:04.483 2026-01-22T10:16:04.483
ID Severity Description Published Updated
ghsa-mw6g-37x4-p223
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-mm3g-cv2q-cppg
7.8 (3.1)
Improper Control of Generation of Code ('Code Injection') vulnerability in StellarWP GiveWP give al… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-mg95-m74x-55j8
4.3 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essenti… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-hgg9-7rw7-5rhw
4.3 (3.1)
Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPF… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-gjv2-jq53-mqgq
8.8 (3.1)
Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrect… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-cch9-4xf8-89w7
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-c6c4-c7qj-6662
8.8 (3.1)
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrec… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-7r59-p3hg-gf5g
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-76jc-c8j2-q66h
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in codeworkweb CWW Companion cww-companion allows C… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-758v-pprx-jj23
8.1 (3.1)
Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-55cq-cx6m-hv36
8.8 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-gene… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-42p4-5wp9-wj4j
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-3w3w-vwpm-m922
4.5 (3.1)
Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-387r-w9pc-hjv4
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:41Z 2026-01-20T15:32:05Z
ghsa-2qh4-8p36-478q
9.8 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-242g-9cqh-3jpx
9.8 (3.1)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2025-12-09T18:30:42Z 2026-01-20T15:32:05Z
ghsa-x5mv-x4w6-8rgw
5.4 (3.1)
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media Library Assis… 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-v7r5-h5f3-qwf9
4.3 (3.1)
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrect… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-v3q8-66j8-2mx6
4.3 (3.1)
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addo… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-v2w2-v8vg-2rqw
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-qfjr-hrqq-wvg5
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-p4xm-rh4q-xxwr
7.6 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-p3xh-3vwq-cmvc
7.5 (3.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-mw4h-mh8j-x3ff
4.3 (3.1)
Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin … 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-mm38-qj6v-5ph8
4.3 (3.1)
Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality all… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-jj2r-52x4-38wx
6.5 (3.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ghsa-j6p4-cqq4-vgv7
8.1 (3.1)
Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-tha… 2025-12-09T18:30:41Z 2026-01-20T15:32:04Z
ghsa-j4mf-m27r-fcqq
4.4 (3.1)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki… 2025-12-09T18:30:39Z 2026-01-20T15:32:04Z
ghsa-hw3r-j5mp-83h8
4.3 (3.1)
Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Co… 2025-12-09T18:30:41Z 2026-01-20T15:32:04Z
ghsa-hqrr-4x5g-r96q
7.2 (3.1)
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancemen… 2025-12-09T18:30:40Z 2026-01-20T15:32:04Z
ID Severity Description Package Published Updated
pysec-2010-1
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cr… mako 2010-07-02T19:00:00Z 2021-07-05T00:01:22.516270Z
pysec-2014-9
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 all… lxml 2014-05-14T19:55:00Z 2021-07-05T00:01:22.415943Z
pysec-2015-13
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject ar… kallithea 2015-10-29T20:59:00Z 2021-07-05T00:01:22.184837Z
pysec-2017-17
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallit… kallithea 2017-09-19T15:29:00Z 2021-07-05T00:01:22.152589Z
pysec-2017-16
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. kallithea 2017-09-21T14:29:00Z 2021-07-05T00:01:22.120949Z
pysec-2016-4
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3… jwcrypto 2016-09-01T23:59:00Z 2021-07-05T00:01:22.078687Z
pysec-2014-8
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does… jinja2 2014-05-19T14:55:00Z 2021-07-05T00:01:22.043149Z
pysec-2019-152
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0… ironic-inspector 2019-07-30T17:15:00Z 2021-07-05T00:01:21.998814Z
pysec-2017-15
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cros… html5lib 2017-02-22T16:59:00Z 2021-07-05T00:01:21.869008Z
pysec-2017-14
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cros… html5lib 2017-02-22T16:59:00Z 2021-07-05T00:01:21.837127Z
pysec-2019-151
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is… graphite-web 2019-10-11T23:15:00Z 2021-07-05T00:01:21.806042Z
pysec-2013-4
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remot… graphite-web 2013-09-27T10:08:00Z 2021-07-05T00:01:21.777451Z
pysec-2013-3
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through… graphite-web 2013-09-27T10:08:00Z 2021-07-05T00:01:21.746777Z
pysec-2017-13
FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message v… fedmsg 2017-07-17T13:18:00Z 2021-07-05T00:01:21.573658Z
pysec-2017-12
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute… dulwich 2017-10-29T20:29:00Z 2021-07-05T00:01:21.470158Z
pysec-2017-10
A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 bef… django 2017-04-04T17:59:00Z 2021-07-05T00:01:20.782735Z
pysec-2017-9
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input … django 2017-04-04T17:59:00Z 2021-07-05T00:01:20.658989Z
pysec-2016-3
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a s… django 2016-10-03T18:59:00Z 2021-07-05T00:01:20.518242Z
pysec-2015-10
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 use… django 2015-07-14T17:59:00Z 2021-07-05T00:01:20.182098Z
pysec-2015-8
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in … django 2015-03-12T14:59:00Z 2021-07-05T00:01:19.894697Z
pysec-2015-7
ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_… django 2015-01-16T16:59:00Z 2021-07-05T00:01:19.802913Z
pysec-2015-6
The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.… django 2015-01-16T16:59:00Z 2021-07-05T00:01:19.682404Z
pysec-2015-5
The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, a… django 2015-01-16T16:59:00Z 2021-07-05T00:01:19.540383Z
pysec-2015-4
Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers… django 2015-01-16T16:59:00Z 2021-07-05T00:01:19.325962Z
pysec-2014-7
The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9,… django 2014-08-26T14:55:00Z 2021-07-05T00:01:19.203370Z
pysec-2014-6
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.… django 2014-08-26T14:55:00Z 2021-07-05T00:01:19.085708Z
pysec-2014-5
The default configuration for the file upload handling system in Django before 1.4.14, 1.… django 2014-08-26T14:55:00Z 2021-07-05T00:01:18.973883Z
pysec-2014-4
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x… django 2014-08-26T14:55:00Z 2021-07-05T00:01:18.862505Z
pysec-2014-3
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field clas… django 2014-04-23T15:55:00Z 2021-07-05T00:01:18.748183Z
pysec-2014-2
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, an… django 2014-04-23T15:55:00Z 2021-07-05T00:01:18.594368Z
ID Description Type
ID Description Updated
gsd-2024-3487 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.178428Z
gsd-2024-3622 A flaw was found when using mirror-registry to install Quay. It uses a default secret, wh… 2024-04-11T05:03:27.178220Z
gsd-2024-3373 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.177974Z
gsd-2024-3309 The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scrip… 2024-04-11T05:03:27.176161Z
gsd-2024-3287 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.175704Z
gsd-2024-3515 Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker… 2024-04-11T05:03:27.175261Z
gsd-2024-3608 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.174908Z
gsd-2024-3514 ** REJECT ** **DUPLICATE** Please use CVE-2024-1846 instead. 2024-04-11T05:03:27.174480Z
gsd-2024-3450 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.173283Z
gsd-2024-3395 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.172818Z
gsd-2024-3295 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.172607Z
gsd-2024-3470 An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server… 2024-04-11T05:03:27.172214Z
gsd-2024-3449 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.172017Z
gsd-2024-3626 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.171817Z
gsd-2024-3607 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.171519Z
gsd-2024-3579 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.170753Z
gsd-2024-3398 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.169704Z
gsd-2024-3552 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.169473Z
gsd-2024-3343 The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… 2024-04-11T05:03:27.166355Z
gsd-2024-3650 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.165942Z
gsd-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-b… 2024-04-11T05:03:27.164685Z
gsd-2024-3641 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.162401Z
gsd-2024-3437 A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rat… 2024-04-11T05:03:27.161557Z
gsd-2024-3458 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.160386Z
gsd-2024-3324 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.159785Z
gsd-2024-3582 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.159468Z
gsd-2024-3293 The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to b… 2024-04-11T05:03:27.159158Z
gsd-2024-3558 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.157671Z
gsd-2024-3488 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.153214Z
gsd-2024-3268 The format of the source doesn't require a description, click on the link for more details. 2024-04-11T05:03:27.151900Z
ID Description Published Updated
mal-2025-6432 Malicious code in anku1-rce (PyPI) 2025-07-16T10:52:30Z 2025-12-11T09:27:52Z
mal-2025-6431 Malicious code in alpha-booster (PyPI) 2025-05-29T22:39:05Z 2025-12-11T09:27:52Z
mal-2025-6430 Malicious code in alksdjpureranser (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-6428 Malicious code in 0x000testqwe (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-6213 Malicious code in donotinstallthisistest6 (PyPI) 2025-07-21T20:01:00Z 2025-12-11T09:27:52Z
mal-2025-5112 Malicious code in discorddox (PyPI) 2025-05-12T20:59:25Z 2025-12-11T09:27:52Z
mal-2025-5111 Malicious code in dexscreener-data (PyPI) 2025-05-16T10:41:32Z 2025-12-11T09:27:52Z
mal-2025-5110 Malicious code in dexscreener-charts (PyPI) 2025-05-16T10:41:32Z 2025-12-11T09:27:52Z
mal-2025-5108 Malicious code in crypt0graphyy (PyPI) 2024-08-05T22:25:51Z 2025-12-11T09:27:52Z
mal-2025-5106 Malicious code in coloramashowtemp (PyPI) 2025-05-18T00:05:16Z 2025-12-11T09:27:52Z
mal-2025-5105 Malicious code in coloramapkgsw (PyPI) 2025-05-18T00:05:16Z 2025-12-11T09:27:52Z
mal-2025-5104 Malicious code in coloramapkgsdow (PyPI) 2025-05-18T00:05:16Z 2025-12-11T09:27:52Z
mal-2025-5103 Malicious code in coloramapkgs (PyPI) 2025-05-18T00:05:16Z 2025-12-11T09:27:52Z
mal-2025-5101 Malicious code in c8tks94kspjyhtb (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-5100 Malicious code in c8tks94kspjghtb (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-5097 Malicious code in atlasctf-21-prod-22 (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-4699 Malicious code in cugraph-service-client (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-4698 Malicious code in cugraph-dgl (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-4526 Malicious code in caixaequ2ahzoop (PyPI) 2025-05-27T14:52:36Z 2025-12-11T09:27:52Z
mal-2025-4214 Malicious code in deepseek-fake (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-4210 Malicious code in chosenrce18 (PyPI) 2024-07-26T16:53:30Z 2025-12-11T09:27:52Z
mal-2025-4208 Malicious code in bytedmemfdd345 (PyPI) 2025-04-24T21:02:16Z 2025-12-11T09:27:52Z
mal-2025-4206 Malicious code in ark-vmp-reverse (PyPI) 2025-04-24T21:02:16Z 2025-12-11T09:27:52Z
mal-2025-4205 Malicious code in alchemyrpcs (PyPI) 2025-04-27T08:06:41Z 2025-12-11T09:27:52Z
mal-2025-4204 Malicious code in aiolitesql (PyPI) 2025-04-22T10:29:14Z 2025-12-11T09:27:52Z
mal-2025-4203 Malicious code in aioasyncsqlite (PyPI) 2025-04-22T10:29:14Z 2025-12-11T09:27:52Z
mal-2025-41668 Malicious code in dziplib (PyPI) 2025-08-03T17:54:22Z 2025-12-11T09:27:52Z
mal-2025-41667 Malicious code in dsodelib (PyPI) 2025-08-03T18:01:42Z 2025-12-11T09:27:52Z
mal-2025-41664 Malicious code in donotinstallthisistest5 (PyPI) 2025-07-21T20:23:24Z 2025-12-11T09:27:52Z
mal-2025-41662 Malicious code in discordsync (PyPI) 2025-08-04T21:04:23Z 2025-12-11T09:27:52Z
ID Description Published Updated
wid-sec-w-2025-1496 Microsoft Configuration Manager: Schwachstelle ermöglicht Codeausführung 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1494 Ivanti Endpoint Manager Mobile: Mehrere Schwachstellen ermöglichen Codeausführung 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1486 Fortinet FortiOS / FortiProxy: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1484 Fortinet FortiAnalyzer / FortiManager: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1483 Microsoft Apps (PC Manager): Schwachstelle ermöglicht Erlangen von Administratorrechten 2025-07-08T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1451 Drupal: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-07-02T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1371 FreeRDP: Schwachstelle ermöglicht Denial of Service 2025-06-22T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1279 Broadcom Fabric OS: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0672 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2025-03-31T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0593 Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2025-03-19T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0515 Google Chrome und Microsoft Edge: Mehrere Schwachstellen 2025-03-10T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0208 Google Chrome/ Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2025-01-28T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0064 Google Chrome / Microsoft Edge: Mehrere Schwachstellen 2025-01-14T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-0020 Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2025-01-07T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-3727 Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung 2024-12-18T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-3437 Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2024-11-12T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-3297 Google Chrome / Microsoft Edge: Mehrere Schwachstellen 2024-10-29T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-2051 ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Dateimanipulation 2024-09-04T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-1525 Ghostscript: Mehrere Schwachstellen 2024-07-03T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-1412 Ghostscript: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2024-06-19T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-0322 ClamAV: Mehrere Schwachstellen 2024-02-07T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2024-0309 Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2024-02-06T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2023-2972 strongSwan: Schwachstelle ermöglicht Codeausführung und DoS 2023-11-20T23:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2023-2090 ClamAV & Cisco Secure Endpoint: Mehrere Schwachstellen 2023-08-16T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2023-0774 Linux Kernel: Schwachstelle ermöglicht Denial of Service 2023-03-27T22:00:00.000+00:00 2025-07-08T22:00:00.000+00:00
wid-sec-w-2025-1482 MongoDB: Mehrere Schwachstellen 2025-07-07T22:00:00.000+00:00 2025-07-07T22:00:00.000+00:00
wid-sec-w-2025-1479 SAP Patchday Juli 2025: Mehrere Schwachstellen 2025-07-07T22:00:00.000+00:00 2025-07-07T22:00:00.000+00:00
wid-sec-w-2025-1478 Siemens SIPROTEC: Schwachstelle ermöglicht Offenlegung von Informationen 2025-07-07T22:00:00.000+00:00 2025-07-07T22:00:00.000+00:00
wid-sec-w-2025-1477 Siemens TIA Portal: Schwachstelle ermöglicht Denial of Service 2025-07-07T22:00:00.000+00:00 2025-07-07T22:00:00.000+00:00
wid-sec-w-2025-1475 Dell Client-Plattform (Qualcomm Wi-Fi- und Bluetooth-Driver): Mehrere Schwachstellen ermöglichen Denial of Service 2025-07-07T22:00:00.000+00:00 2025-07-07T22:00:00.000+00:00
ID Description Published Updated
rhsa-2025:15900 Red Hat Security Advisory: podman security update 2025-09-16T03:57:07+00:00 2026-01-21T22:59:32+00:00
rhsa-2025:15887 Red Hat Security Advisory: opentelemetry-collector security update 2025-09-16T00:59:56+00:00 2026-01-21T22:59:30+00:00
rhsa-2025:15697 Red Hat Security Advisory: Streams for Apache Kafka 2.9.2 release and security update 2025-09-11T15:16:59+00:00 2026-01-21T22:59:28+00:00
rhsa-2025:15717 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update 2025-09-11T19:39:47+00:00 2026-01-21T22:59:24+00:00
rhsa-2025:15612 Red Hat Security Advisory: Red Hat Data Grid 8.5.5 security update 2025-09-10T11:57:53+00:00 2026-01-21T22:59:20+00:00
rhsa-2025:15406 Red Hat Security Advisory: opentelemetry-collector security update 2025-09-08T01:27:06+00:00 2026-01-21T22:59:14+00:00
rhsa-2025:14911 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.6 for Spring Boot release. 2025-08-28T18:38:33+00:00 2026-01-21T22:59:11+00:00
rhsa-2025:14197 Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.2.GA) 2025-08-20T19:33:32+00:00 2026-01-21T22:59:07+00:00
rhsa-2025:14474 Red Hat Security Advisory: RHTAS 1.2.1- Red Hat Trusted Artifact Signer Release 2025-08-25T09:25:48+00:00 2026-01-21T22:59:06+00:00
rhsa-2025:14767 Red Hat Security Advisory: Red Hat Developer Hub 1.6.4 release. 2025-08-27T15:50:11+00:00 2026-01-21T22:59:05+00:00
rhsa-2025:14183 Red Hat Security Advisory: tomcat security update 2025-08-20T15:40:30+00:00 2026-01-21T22:59:02+00:00
rhsa-2025:14182 Red Hat Security Advisory: tomcat security update 2025-08-20T15:36:45+00:00 2026-01-21T22:59:01+00:00
rhsa-2025:14181 Red Hat Security Advisory: tomcat security update 2025-08-20T15:41:15+00:00 2026-01-21T22:59:01+00:00
rhsa-2025:14180 Red Hat Security Advisory: tomcat security update 2025-08-20T15:43:40+00:00 2026-01-21T22:58:58+00:00
rhsa-2025:14178 Red Hat Security Advisory: tomcat9 security update 2025-08-20T15:33:55+00:00 2026-01-21T22:58:58+00:00
rhsa-2025:14179 Red Hat Security Advisory: tomcat security update 2025-08-20T15:36:15+00:00 2026-01-21T22:58:55+00:00
rhsa-2025:14177 Red Hat Security Advisory: tomcat security update 2025-08-20T15:37:48+00:00 2026-01-21T22:58:54+00:00
rhsa-2025:14127 Red Hat Security Advisory: pki-deps:10.6 security update 2025-08-20T04:16:28+00:00 2026-01-21T22:58:52+00:00
rhsa-2025:14126 Red Hat Security Advisory: pki-deps:10.6 security update 2025-08-20T02:02:58+00:00 2026-01-21T22:58:52+00:00
rhsa-2025:14118 Red Hat Security Advisory: pki-deps:10.6 security update 2025-08-20T00:25:33+00:00 2026-01-21T22:58:51+00:00
rhsa-2025:14117 Red Hat Security Advisory: pki-deps:10.6 security update 2025-08-20T00:22:33+00:00 2026-01-21T22:58:51+00:00
rhsa-2025:14116 Red Hat Security Advisory: pki-deps:10.6 security update 2025-08-20T00:18:41+00:00 2026-01-21T22:58:51+00:00
rhsa-2025:14008 Red Hat Security Advisory: Red Hat build of Quarkus 3.20.2.SP1 security update 2025-08-19T13:50:46+00:00 2026-01-21T22:58:44+00:00
rhsa-2025:14004 Red Hat Security Advisory: Red Hat build of Quarkus 3.15.6.SP1 security update 2025-08-19T13:50:26+00:00 2026-01-21T22:58:43+00:00
rhsa-2025:13933 Red Hat Security Advisory: OpenShift Container Platform 4.19.9 bug fix and security update 2025-08-20T07:12:19+00:00 2026-01-21T22:58:41+00:00
rhsa-2025:13904 Red Hat Security Advisory: RHOAI 2.23.0 - Red Hat OpenShift AI 2025-08-14T16:11:10+00:00 2026-01-21T22:58:40+00:00
rhsa-2025:13276 Red Hat Security Advisory: updated RHEL-8 based Middleware Containers container images 2025-08-07T06:31:06+00:00 2026-01-21T22:58:32+00:00
rhsa-2025:13012 Red Hat Security Advisory: Red Hat build of Quarkus 3.15.6 release and security update 2025-08-07T10:51:36+00:00 2026-01-21T22:58:31+00:00
rhsa-2025:13010 Red Hat Security Advisory: Red Hat build of Quarkus 3.20.2 release and security update 2025-08-07T10:54:22+00:00 2026-01-21T22:58:30+00:00
rhsa-2025:12283 Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update 2025-07-30T09:49:42+00:00 2026-01-21T22:58:26+00:00
ID Description Published Updated
icsa-20-353-01 Treck TCP/IP Stack (Update A) 2020-12-18T00:00:00.000000Z 2021-01-26T00:00:00.000000Z
icsa-21-021-03 Honeywell OPC UA Tunneller 2021-01-21T00:00:00.000000Z 2021-01-21T00:00:00.000000Z
icsa-21-021-02 Delta Electronics TPEditor 2021-01-21T00:00:00.000000Z 2021-01-21T00:00:00.000000Z
icsa-21-021-01 Delta Electronics ISPSoft 2021-01-21T00:00:00.000000Z 2021-01-21T00:00:00.000000Z
icsma-21-019-01 Philips Interventional Workstations 2021-01-19T00:00:00.000000Z 2021-01-19T00:00:00.000000Z
icsa-21-019-02 Reolink P2P Cameras 2021-01-19T00:00:00.000000Z 2021-01-19T00:00:00.000000Z
icsa-21-012-04 Siemens Solid Edge 2021-01-12T00:00:00.000000Z 2021-01-15T00:00:00.000000Z
icsma-21-012-01 SOOIL Dana Diabecare RS Products 2021-01-12T00:00:00.000000Z 2021-01-12T00:00:00.000000Z
icsma-21-007-01 Innokas Yhtymä Oy Vital Signs Monitor 2021-01-07T00:00:00.000000Z 2021-01-07T00:00:00.000000Z
icsa-21-007-04 Delta Electronics CNCSoft-B 2021-01-07T00:00:00.000000Z 2021-01-07T00:00:00.000000Z
icsa-21-007-02 Omron CX-One 2021-01-07T00:00:00.000000Z 2021-01-07T00:00:00.000000Z
icsa-21-007-01 Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer 2021-01-07T00:00:00.000000Z 2021-01-07T00:00:00.000000Z
icsa-21-005-06 Delta Electronics CNCSoft ScreenEditor 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-21-005-05 Delta Electronics DOPSoft 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-21-005-04 Red Lion Crimson 3.1 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-21-005-03 GE Reason RT43X Clocks 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-21-005-02 Panasonic FPWIN Pro 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-21-005-01 Schneider Electric Web Server on Modicon M340 2021-01-05T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-20-352-02 PTC Kepware KEPServerEX (Update A) 2020-12-17T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-20-308-03 ARC Informatique PcVue (Update A) 2020-11-03T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-20-282-01 Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) 2020-10-08T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-20-224-01 Yokogawa CENTUM (Update A) 2020-08-11T00:00:00.000000Z 2021-01-05T00:00:00.000000Z
icsa-20-352-03 PTC Kepware LinkMaster 2020-12-17T00:00:00.000000Z 2020-12-17T00:00:00.000000Z
icsa-20-352-01 Emerson Rosemount X-STREAM 2020-12-17T00:00:00.000000Z 2020-12-17T00:00:00.000000Z
icsa-20-308-01 WAGO Series 750-88x and 750-352 (Update A) 2020-11-03T00:00:00.000000Z 2020-12-15T00:00:00.000000Z
icsa-20-345-02 Host Engineering H2-ECOM100 Module 2020-12-10T00:00:00.000000Z 2020-12-10T00:00:00.000000Z
icsa-20-345-01 Mitsubishi Electric MELSEC iQ-F Series 2020-12-10T00:00:00.000000Z 2020-12-10T00:00:00.000000Z
icsma-20-345-01 Medtronic MyCareLink Smart 2020-12-08T00:00:00.000000Z 2020-12-08T00:00:00.000000Z
icsma-20-343-01 GE Healthcare Imaging and Ultrasound Products 2020-12-08T00:00:00.000000Z 2020-12-08T00:00:00.000000Z
icsa-20-343-10 Siemens LOGO! 8 BM 2020-12-08T00:00:00.000000Z 2020-12-08T00:00:00.000000Z
ID Description Published Updated
msrc_cve-2022-24999 qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: qs@6.9.7" in its release description, is not vulnerable). 2022-11-02T00:00:00.000Z 2025-09-03T22:31:12.000Z
msrc_cve-2023-52629 sh: push-switch: Reorder cleanup operations to avoid use-after-free bug 2024-03-02T08:00:00.000Z 2025-09-03T22:31:11.000Z
msrc_cve-2025-8835 JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference 2025-08-02T00:00:00.000Z 2025-09-03T22:30:59.000Z
msrc_cve-2025-22866 Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 2025-02-02T00:00:00.000Z 2025-09-03T22:30:35.000Z
msrc_cve-2020-10941 Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import. 2020-03-02T00:00:00.000Z 2025-09-03T22:30:18.000Z
msrc_cve-2023-52670 rpmsg: virtio: Free driver_override when rpmsg_remove() 2024-05-02T07:00:00.000Z 2025-09-03T22:30:14.000Z
msrc_cve-2024-57970 libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname. 2025-02-02T00:00:00.000Z 2025-09-03T22:29:47.000Z
msrc_cve-2024-26661 drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' 2024-04-02T07:00:00.000Z 2025-09-03T22:29:43.000Z
msrc_cve-2025-6516 HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow 2025-06-02T00:00:00.000Z 2025-09-03T22:29:38.000Z
msrc_cve-2024-50027 thermal: core: Free tzp copy along with the thermal zone 2024-10-01T07:00:00.000Z 2025-09-03T22:29:21.000Z
msrc_cve-2025-50422 Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c. 2025-08-02T00:00:00.000Z 2025-09-03T22:28:31.000Z
msrc_cve-2024-35999 smb3: missing lock when picking channel 2024-05-02T07:00:00.000Z 2025-09-03T22:28:23.000Z
msrc_cve-2024-49974 NFSD: Limit the number of concurrent async COPY operations 2024-10-01T07:00:00.000Z 2025-09-03T22:28:21.000Z
msrc_cve-2023-46847 Squid: denial of service in http digest authentication 2023-11-01T07:00:00.000Z 2025-09-03T22:27:21.000Z
msrc_cve-2023-47100 In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0. 2023-12-01T08:00:00.000Z 2025-09-03T22:27:01.000Z
msrc_cve-2025-38622 net: drop UFO packets in udp_rcv_segment() 2025-08-02T00:00:00.000Z 2025-09-03T22:26:54.000Z
msrc_cve-2024-40965 i2c: lpi2c: Avoid calling clk_get_rate during transfer 2024-07-01T07:00:00.000Z 2025-09-03T22:26:33.000Z
msrc_cve-2024-6615 Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128. 2024-07-01T07:00:00.000Z 2025-09-03T22:26:00.000Z
msrc_cve-2020-24371 lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage. 2020-08-02T00:00:00.000Z 2025-09-03T22:25:53.000Z
msrc_cve-2019-18222 The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks. 2020-01-02T00:00:00.000Z 2025-09-03T22:25:51.000Z
msrc_cve-2024-35887 ax25: fix use-after-free bugs caused by ax25_ds_del_timer 2024-05-02T07:00:00.000Z 2025-09-03T22:25:48.000Z
msrc_cve-2023-5824 Squid: dos against http and https 2023-11-01T07:00:00.000Z 2025-09-03T22:25:30.000Z
msrc_cve-2022-31104 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime 2022-06-02T00:00:00.000Z 2025-09-03T22:24:52.000Z
msrc_cve-2025-38652 f2fs: fix to avoid out-of-boundary access in devs.path 2025-08-02T00:00:00.000Z 2025-09-03T22:24:43.000Z
msrc_cve-2025-25183 vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache 2025-02-02T00:00:00.000Z 2025-09-03T22:24:23.000Z
msrc_cve-2024-49925 fbdev: efifb: Register sysfs groups through driver core 2024-10-01T07:00:00.000Z 2025-09-03T22:24:04.000Z
msrc_cve-2023-52585 drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() 2024-03-02T08:00:00.000Z 2025-09-03T22:23:46.000Z
msrc_cve-2025-38385 net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect 2025-07-02T00:00:00.000Z 2025-09-03T22:23:41.000Z
msrc_cve-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 2023-04-01T00:00:00.000Z 2025-09-03T22:23:25.000Z
msrc_cve-2024-40647 Unintentional exposure of environment variables to subprocesses in sentry-sdk 2024-07-01T07:00:00.000Z 2025-09-03T22:23:12.000Z
ID Description Updated
var-201506-0079 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x … 2025-11-18T13:12:55.513000Z
var-202012-0782 A type confusion issue was addressed with improved state handling. This issue is fixed in… 2025-11-18T13:12:53.237000Z
var-202202-0109 A use after free issue was addressed with improved memory management. This issue is fixed… 2025-11-18T13:09:58.080000Z
var-201402-0253 Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12… 2025-11-18T13:09:53.127000Z
var-202104-0757 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-aut… 2025-11-18T13:09:31.105000Z
var-202105-0569 Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which ma… 2025-11-18T13:04:12.453000Z
var-202407-0079 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker con… 2025-11-18T13:02:15.327000Z
var-202109-1307 A logic issue was addressed with improved state management. This issue is fixed in macOS … 2025-11-18T12:57:27.740000Z
var-202108-1374 A type confusion issue was addressed with improved state handling. This issue is fixed in… 2025-11-18T12:52:04.553000Z
var-202205-2077 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. vim/vim Exists in a… 2025-11-18T12:50:26.235000Z
var-202201-0557 Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.… 2025-11-18T12:50:25.279000Z
var-202408-0014 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versio… 2025-11-18T12:48:03.613000Z
var-202105-0363 Improper handling of address deregistration on failure can lead to new GPU address alloca… 2025-11-18T12:47:19.108000Z
var-202109-1420 A use after free issue was addressed with improved memory management. This issue is fixed… 2025-11-18T12:47:16.935000Z
var-201906-0815 An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fort… 2025-11-18T12:47:10.942000Z
var-202110-1691 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An … 2025-11-18T12:43:58.948000Z
var-202109-1419 A memory corruption issue was addressed with improved state management. This issue is fix… 2025-11-18T12:42:02.767000Z
var-202208-1294 An out-of-bounds write issue was addressed with improved bounds checking. This issue is f… 2025-11-18T12:41:55.691000Z
var-202408-0011 A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versio… 2025-11-18T12:39:45.824000Z
var-201504-0081 The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users… 2025-11-18T12:39:05.227000Z
var-201906-0818 An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.… 2025-11-18T12:35:41.625000Z
var-202202-0167 PJSIP is a free and open source multimedia communication library written in C language im… 2025-11-18T12:34:49.883000Z
var-202407-2571 An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device comes with a ser… 2025-11-18T12:32:03.289000Z
var-201409-0487 Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 all… 2025-11-18T12:31:56.660000Z
var-201608-0187 The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a priv… 2025-11-18T12:31:43.427000Z
var-201608-0186 The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information fro… 2025-11-18T12:29:26.165000Z
var-202109-1311 A use after free issue was addressed with improved memory management. This issue is fixed… 2025-11-18T12:29:04.064000Z
var-202201-0642 An OS command injection vulnerability exists in the device network settings functionality… 2025-11-18T12:25:15.387000Z
var-201912-1012 The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta0… 2025-11-18T12:23:40.817000Z
var-201910-0902 A use-after-free in binder.c allows an elevation of privilege from an application to the … 2025-11-18T12:23:03.833000Z
ID Description Published Updated
jvndb-2008-001910 Groupmax Collaboration - Schedule Mis-scheduling Problem: Unintended Members Included When Reservations are Made by Secretary 2008-12-05T11:34+09:00 2008-12-05T11:34+09:00
jvndb-2008-000067 Movable Type Enterprise cross-site scripting vulnerability 2008-12-04T14:52+09:00 2008-12-04T14:52+09:00
jvndb-2008-000079 I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability 2008-12-02T15:50+09:00 2008-12-02T15:50+09:00
jvndb-2008-001895 JP1/VERITAS NetBackup JAVA Administration GUI Privilege Escalation Vulnerability 2008-12-01T11:10+09:00 2008-12-01T11:10+09:00
jvndb-2008-000074 Snoopy command injection vulnerability 2008-10-28T15:34+09:00 2008-11-28T13:54+09:00
jvndb-2008-001312 Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities 2008-05-21T00:00+09:00 2008-11-21T12:20+09:00
jvndb-2008-001311 Symantec Backup Exec for Windows Server ActiveX Control Multiple Buffer Overflow Vulnerabilities 2008-05-21T00:00+09:00 2008-11-21T12:20+09:00
jvndb-2008-001043 X.Org Foundation X server buffer overflow vulnerability 2008-06-13T17:11+09:00 2008-11-21T12:19+09:00
jvndb-2008-001877 JP1/Integrated Management Service Support Cross-Site Scripting Vulnerability 2008-11-21T10:16+09:00 2008-11-21T10:16+09:00
jvndb-2008-000077 GungHo LoadPrgAx vulnerable to arbitrary Java program execution 2008-11-19T15:50+09:00 2008-11-19T15:50+09:00
jvndb-2006-000808 Denial of service vulnerability in Ruby CGI library (cgi.rb) 2008-05-21T00:00+09:00 2008-11-14T12:20+09:00
jvndb-2008-000076 sISAPILocation vulnerability bypasses HTTP header rewrite function 2008-11-10T13:29+09:00 2008-11-10T13:29+09:00
jvndb-2008-001779 CA ARCserver Backup and CA ARCserve Backup Client Agent Denial of Service (DoS) Vulnerability 2008-10-30T12:20+09:00 2008-10-30T12:20+09:00
jvndb-2008-001778 BrightStor ARCserve and eTrust Antivirus Arbitrary Code Execution Vulnerability 2008-10-30T12:19+09:00 2008-10-30T12:19+09:00
jvndb-2008-000071 MyNETS cross-site scripting vulnerability 2008-10-22T17:49+09:00 2008-10-22T17:49+09:00
jvndb-2008-000070 Internet Explorer vulnerable in handling CDO protocol 2008-10-22T17:49+09:00 2008-10-22T17:49+09:00
jvndb-2008-000068 hisa_cart information disclosure vulnerability 2008-10-21T19:25+09:00 2008-10-21T19:25+09:00
jvndb-2008-000073 Blosxom vulnerable to cross-site scripting 2008-10-20T17:30+09:00 2008-10-20T17:30+09:00
jvndb-2008-000016 Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations 2008-05-21T00:00+09:00 2008-10-09T13:35+09:00
jvndb-2008-000066 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting 2008-10-06T15:24+09:00 2008-10-06T15:24+09:00
jvndb-2008-000063 EC-CUBE cross-site scripting vulnerability 2008-10-01T16:32+09:00 2008-10-01T16:32+09:00
jvndb-2008-000062 EC-CUBE cross-site scripting vulnerability 2008-10-01T16:32+09:00 2008-10-01T16:32+09:00
jvndb-2008-000065 EC-CUBE vulnerable to SQL injection 2008-10-01T16:31+09:00 2008-10-01T16:31+09:00
jvndb-2008-000064 EC-CUBE cross-site scripting vulnerability 2008-10-01T16:31+09:00 2008-10-01T16:31+09:00
jvndb-2008-000061 phpMyAdmin cross-site scripting vulnerability 2008-09-26T16:37+09:00 2008-09-26T16:37+09:00
jvndb-2008-001665 Data Transfer Control Process Cessation Issue in XFIT/S/JCA and XFIT/S/ZGN 2008-09-24T12:03+09:00 2008-09-24T12:03+09:00
jvndb-2008-000060 Kantan WEB Server cross-site scripting vulnerability 2008-09-22T12:26+09:00 2008-09-22T12:26+09:00
jvndb-2008-000059 Kantan WEB Server directory traversal vulnerability 2008-09-22T12:26+09:00 2008-09-22T12:26+09:00
jvndb-2008-000058 Multiple Tor World CGI scripts vulnerable to arbitrary script execution 2008-09-18T11:48+09:00 2008-09-18T11:48+09:00
jvndb-2008-000057 Sound Master 2nd from High Norm vulnerable to cross-site scripting 2008-09-10T11:28+09:00 2008-09-10T11:28+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:1036-1 Security update for podman 2025-03-27T09:43:42Z 2025-03-27T09:43:42Z
suse-su-2025:1032-1 Security update for microcode_ctl 2025-03-26T14:22:25Z 2025-03-26T14:22:25Z
suse-su-2025:1029-1 Security update for ed25519-java 2025-03-26T13:11:18Z 2025-03-26T13:11:18Z
suse-su-2025:1028-1 Security update for proftpd 2025-03-26T12:50:07Z 2025-03-26T12:50:07Z
suse-su-2025:1027-1 Security update for the Linux Kernel 2025-03-26T12:12:05Z 2025-03-26T12:12:05Z
suse-su-2025:1026-1 Security update for php7 2025-03-26T11:30:47Z 2025-03-26T11:30:47Z
suse-su-2025:1025-1 Security update for php7 2025-03-26T11:30:00Z 2025-03-26T11:30:00Z
suse-su-2025:1024-1 Security update for tomcat10 2025-03-26T11:29:12Z 2025-03-26T11:29:12Z
suse-su-2025:1023-1 Security update for webkit2gtk3 2025-03-26T11:28:46Z 2025-03-26T11:28:46Z
suse-su-2025:1022-1 Security update for apache-commons-vfs2 2025-03-26T11:28:34Z 2025-03-26T11:28:34Z
suse-su-2025:1019-1 Security update for azure-cli-core 2025-03-26T10:27:40Z 2025-03-26T10:27:40Z
suse-su-2025:1018-1 Security update for buildah 2025-03-26T09:03:07Z 2025-03-26T09:03:07Z
suse-su-2025:1017-1 Security update for buildah 2025-03-26T09:02:54Z 2025-03-26T09:02:54Z
suse-su-2025:1014-1 Security update for buildah 2025-03-25T13:05:55Z 2025-03-25T13:05:55Z
suse-su-2025:1013-1 Security update for govulncheck-vulndb 2025-03-25T12:47:48Z 2025-03-25T12:47:48Z
suse-su-2025:1012-1 Security update for php8 2025-03-25T12:47:30Z 2025-03-25T12:47:30Z
suse-su-2025:1011-1 Security update for grafana 2025-03-25T11:44:29Z 2025-03-25T11:44:29Z
suse-su-2025:1010-1 Security update for grafana 2025-03-25T11:44:15Z 2025-03-25T11:44:15Z
suse-su-2025:1009-1 Security update for grafana 2025-03-25T11:44:03Z 2025-03-25T11:44:03Z
suse-su-2025:1008-1 Security update for python-gunicorn 2025-03-25T11:09:00Z 2025-03-25T11:09:00Z
suse-su-2025:20161-1 Security update for libX11 2025-03-25T09:05:37Z 2025-03-25T09:05:37Z
suse-su-2025:20160-1 Security update for openssh 2025-03-25T09:02:20Z 2025-03-25T09:02:20Z
suse-su-2025:1007-1 Security update for helm 2025-03-25T08:44:44Z 2025-03-25T08:44:44Z
suse-su-2025:1006-1 Security update for google-osconfig-agent 2025-03-25T08:44:10Z 2025-03-25T08:44:10Z
suse-su-2025:1005-1 Security update for google-guest-agent 2025-03-25T08:43:34Z 2025-03-25T08:43:34Z
suse-su-2025:1004-1 Security update for python-Jinja2 2025-03-25T08:42:43Z 2025-03-25T08:42:43Z
suse-su-2025:1003-1 Security update for libxslt 2025-03-25T08:42:08Z 2025-03-25T08:42:08Z
suse-su-2025:1002-1 Security update for python-gunicorn 2025-03-25T08:41:39Z 2025-03-25T08:41:39Z
suse-su-2025:0998-1 Security update for freetype2 2025-03-25T02:07:21Z 2025-03-25T02:07:21Z
suse-su-2025:0994-1 Security update for php8 2025-03-24T15:11:07Z 2025-03-24T15:11:07Z
ID Description Published Updated
opensuse-su-2024:13363-1 libminizip1-1.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13362-1 xwayland-23.2.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13361-1 xorg-x11-server-21.1.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13360-1 teleport-14.1.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13359-1 libsox3-14.4.2-8.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13358-1 postgresql14-14.9-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13357-1 java-21-openjdk-21.0.1.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13356-1 MozillaThunderbird-115.4.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13355-1 python3-virtualbox-7.0.12-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13354-1 redis-7.2.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13353-1 qutebrowser-3.0.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13352-1 python310-unearth-0.12.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13351-1 java-17-openjdk-17.0.9.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13350-1 apache2-2.4.58-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13349-1 vorbis-tools-1.4.2-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13348-1 libsndfile-devel-1.2.2-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13347-1 hwloc-2.9.3-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13346-1 apache2-mod_uwsgi-2.0.22-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13345-1 ctdb-4.19.2+git.322.7e9201cef5-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13344-1 python310-urllib3_1-1.26.18-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13343-1 python310-urllib3-2.0.7-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13342-1 java-11-openjdk-11.0.21.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13341-1 zabbix-agent-6.0.22-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13340-1 nodejs-electron-25.9.1-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13339-1 suse-module-tools-16.0.36-2.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13338-1 picard-2.10-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13337-1 corepack20-20.8.1-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13336-1 libnghttp2-14-1.57.0-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13335-1 ungoogled-chromium-118.0.5993.70-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
opensuse-su-2024:13334-1 python310-Django-4.2.6-1.1 on GA media 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z
ID Description Published Updated
cnvd-2025-23285 PyTorch信息泄露漏洞(CNVD-2025-23285) 2025-09-28 2025-10-10
cnvd-2025-23284 PyTorch存在未明漏洞(CNVD-2025-23284) 2025-09-28 2025-10-10
cnvd-2025-23283 PyTorch存在未明漏洞(CNVD-2025-23283) 2025-09-28 2025-10-10
cnvd-2025-23282 PyTorch信息泄露漏洞 2025-09-28 2025-10-10
cnvd-2025-23281 PyTorch torch.nan_to_num-.long组件整数溢出漏洞 2025-09-28 2025-10-10
cnvd-2025-23280 PyTorch存在未明漏洞(CNVD-2025-23280) 2025-09-28 2025-10-10
cnvd-2025-23279 PyTorch存在未明漏洞(CNVD-2025-23279) 2025-09-28 2025-10-10
cnvd-2025-23278 PyTorch存在未明漏洞(CNVD-2025-23278) 2025-09-28 2025-10-10
cnvd-2025-23277 PyTorch存在未明漏洞 2025-09-28 2025-10-10
cnvd-2025-23259 NVIDIA CUDA toolkit缓冲区溢出漏洞(CNVD-2025-23259) 2025-05-30 2025-10-10
cnvd-2025-23258 NVIDIA Cumulus Linux和NVIDIA NVOS日志信息泄露漏洞 2025-09-08 2025-10-10
cnvd-2025-23257 NVIDIA Megatron-LM ensemble_classifer脚本代码注入漏洞 2025-09-28 2025-10-10
cnvd-2025-23256 NVIDIA Megatron-LM msdp预处理脚本代码注入漏洞 2025-09-28 2025-10-10
cnvd-2025-23255 NVIDIA Megatron-LM代码注入漏洞 (CNVD-2025-23255) 2025-09-28 2025-10-10
cnvd-2025-23254 NVIDIA Megatron-LM代码注入漏洞 2025-09-28 2025-10-10
cnvd-2025-23253 NVIDIA CUDA toolkit和NVIDIA nvJPEG缓冲区溢出漏洞(CNVD-2025-23253) 2025-09-28 2025-10-10
cnvd-2025-23252 NVIDIA CUDA toolkit和NVIDIA nvJPEG数字错误漏洞 2025-09-28 2025-10-10
cnvd-2025-23251 NVIDIA CUDA Toolkit堆缓冲区溢出漏洞(CNVD-2025-23251) 2025-09-28 2025-10-10
cnvd-2025-23250 NVIDIA CUDA Toolkit堆缓冲区溢出漏洞(CNVD-2025-23250) 2025-09-28 2025-10-10
cnvd-2025-23249 NVIDIA CUDA toolkit输入验证错误漏洞 2025-09-28 2025-10-10
cnvd-2025-23248 NVIDIA CUDA toolkit缓冲区溢出漏洞(CNVD-2025-23248) 2025-09-28 2025-10-10
cnvd-2025-23247 NVIDIA CUDA toolkit缓冲区溢出漏洞 2025-09-28 2025-10-10
cnvd-2025-23246 NVIDIA CUDA toolkit和NVIDIA nvJPEG缓冲区溢出漏洞 2025-09-28 2025-10-10
cnvd-2025-23245 NVIDIA CUDA Toolkit代码问题漏洞 2025-09-28 2025-10-10
cnvd-2025-23244 User Management System /ums-sp/admin/registered-users.php文件跨站脚本漏洞 2024-11-15 2025-10-10
cnvd-2025-23243 Online Course Registration /news.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23242 Online Course Registration /edit-student-profile.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23241 Online Course Registration /admin/level.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23240 Online Course Registration /admin/department.php文件SQL注入漏洞 2025-05-22 2025-10-10
cnvd-2025-23239 Student Result Management System /notice-details.php文件SQL注入漏洞 2025-07-18 2025-10-10
ID Description Published Updated
certfr-2023-avi-0652 Multiples vulnérabilités dans le noyau Linux de Red Hat 2023-08-11T00:00:00.000000 2023-08-11T00:00:00.000000
certfr-2023-avi-0651 Multiples vulnérabilités dans PostgreSQL 2023-08-11T00:00:00.000000 2023-08-11T00:00:00.000000
certfr-2023-avi-0650 Multiples vulnérabilités dans IBM Spectrum Copy Data Management 2023-08-11T00:00:00.000000 2023-08-11T00:00:00.000000
certfr-2023-avi-0632 Multiples vulnérabilités dans les produits Schneider Electric 2023-08-08T00:00:00.000000 2023-08-11T00:00:00.000000
certfr-2023-avi-0615 Vulnérabilité dans Ivanti MobileIron Core et Endpoint Manager Mobile 2023-08-03T00:00:00.000000 2023-08-11T00:00:00.000000
certfr-2023-avi-0649 Multiples vulnérabilités dans les produits Nextcloud 2023-08-10T00:00:00.000000 2023-08-10T00:00:00.000000
certfr-2023-avi-0648 Multiples vulnérabilités dans les produits NetApp 2023-08-10T00:00:00.000000 2023-08-10T00:00:00.000000
certfr-2023-avi-0647 Multiples vulnérabilités dans les produits Mitel 2023-08-10T00:00:00.000000 2023-08-10T00:00:00.000000
certfr-2023-avi-0646 Vulnérabilité dans MongoDB Ops Manager 2023-08-10T00:00:00.000000 2023-08-10T00:00:00.000000
certfr-2023-avi-0645 Multiples vulnérabilités dans les produits Microsoft 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0644 Multiples vulnérabilités dans Microsoft Azure 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0643 Multiples vulnérabilités dans Microsoft .Net 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0642 Multiples vulnérabilités dans Microsoft Windows 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0641 Multiples vulnérabilités dans Microsoft Office 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0640 Multiples vulnérabilités dans les produits Intel 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0639 Multiples vulnérabilités dans Xen 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0638 Multiples vulnérabilités dans Citrix Hypervisor 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0637 Vulnérabilité dans Fortinet FortiOS 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0636 Multiples vulnérabilités dans les produits Adobe 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0635 Multiples vulnérabilités dans les produits SAP 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0634 Vulnérabilité dans les produits Belden 2023-08-09T00:00:00.000000 2023-08-09T00:00:00.000000
certfr-2023-avi-0633 Multiples vulnérabilités dans les produits Siemens 2023-08-08T00:00:00.000000 2023-08-08T00:00:00.000000
certfr-2023-avi-0631 Multiples vulnérabilités dans Microsoft Edge 2023-08-08T00:00:00.000000 2023-08-08T00:00:00.000000
certfr-2023-avi-0630 Vulnérabilité dans IBM WebSphere 2023-08-08T00:00:00.000000 2023-08-08T00:00:00.000000
certfr-2023-avi-0629 Multiples vulnérabilités dans Google Android 2023-08-08T00:00:00.000000 2023-08-08T00:00:00.000000
certfr-2023-avi-0628 Multiples vulnérabilités dans PHP 2023-08-07T00:00:00.000000 2023-08-07T00:00:00.000000
certfr-2023-avi-0627 Multiples vulnérabilités dans IBM Spectrum 2023-08-04T00:00:00.000000 2023-08-04T00:00:00.000000
certfr-2023-avi-0626 Multiples vulnérabilités dans le noyau Linux de SUSE 2023-08-04T00:00:00.000000 2023-08-04T00:00:00.000000
certfr-2023-avi-0625 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2023-08-04T00:00:00.000000 2023-08-04T00:00:00.000000
certfr-2023-avi-0624 Multiples vulnérabilités dans le noyau Linux de Debian 2023-08-04T00:00:00.000000 2023-08-04T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated