Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-22453 |
7.5 (3.1)
|
Improper input validation for some Server Firmwar… |
n/a |
Server Firmware Update Utility(SysFwUpdt) |
2026-02-10T16:25:11.476Z | 2026-02-11T15:04:25.092Z |
| CVE-2025-20080 |
6.8 (3.1)
|
Null pointer dereference in the firmware for some… |
n/a |
Intel(R) AMT and Intel(R) Standard Manageability |
2026-02-10T16:25:07.842Z | 2026-02-11T15:02:46.280Z |
| CVE-2025-54162 |
4.8 (4.0)
|
File Station 5 |
QNAP Systems Inc. |
File Station 5 |
2026-02-11T12:17:56.681Z | 2026-02-11T15:02:31.019Z |
| CVE-2025-20070 |
6.7 (3.1)
|
Improper conditions check for the Intel(R) Optane… |
n/a |
Intel(R) Optane(TM) PMem management software |
2026-02-10T16:25:04.959Z | 2026-02-11T14:59:45.852Z |
| CVE-2025-62439 |
3.8 (3.1)
|
An Improper Verification of Source of a Communica… |
Fortinet |
FortiOS |
2026-02-10T15:39:12.842Z | 2026-02-11T14:57:58.973Z |
| CVE-2025-68686 |
5.3 (3.1)
|
An Exposure of Sensitive Information to an Unauth… |
Fortinet |
FortiOS |
2026-02-10T15:39:12.777Z | 2026-02-11T14:56:53.573Z |
| CVE-2026-25635 |
8.6 (3.1)
|
calibre has a Path Traversal Leading to Arbitrary File… |
kovidgoyal |
calibre |
2026-02-06T20:10:29.839Z | 2026-02-11T14:54:23.143Z |
| CVE-2025-48514 |
4 (4.0)
|
Insufficient Granularity of Access Control in SEV… |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-02-10T19:14:22.874Z | 2026-02-11T14:54:00.307Z |
| CVE-2025-52869 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:05.466Z | 2026-02-11T14:53:55.316Z |
| CVE-2025-55018 |
5.2 (3.1)
|
An inconsistent interpretation of http requests (… |
Fortinet |
FortiOS |
2026-02-10T15:39:12.431Z | 2026-02-11T14:52:36.543Z |
| CVE-2025-52868 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:11.316Z | 2026-02-11T14:52:31.385Z |
| CVE-2026-25636 |
8.2 (3.1)
|
calibre has a Path Traversal Leading to Arbitrary File… |
kovidgoyal |
calibre |
2026-02-06T20:07:40.529Z | 2026-02-11T14:51:19.827Z |
| CVE-2025-0031 |
4.6 (4.0)
|
A use after free in the SEV firmware could allow … |
AMD |
AMD EPYC™ 9004 Series Processors |
2026-02-10T19:14:58.027Z | 2026-02-11T14:51:07.017Z |
| CVE-2025-0029 |
1.8 (4.0)
|
Improper handling of error condition during host-… |
AMD |
AMD EPYC™ 9005 Series Processors |
2026-02-10T19:15:24.850Z | 2026-02-11T14:49:13.248Z |
| CVE-2025-48725 |
0.6 (4.0)
|
QuTS hero |
QNAP Systems Inc. |
QuTS hero |
2026-02-11T12:19:16.450Z | 2026-02-11T14:48:36.064Z |
| CVE-2026-1774 |
9.8 (3.1)
|
CASL Ability, versions 2.4.0 through 6.7.4, contains a… |
CASL Ability |
CASL Ability |
2026-02-10T15:38:03.265Z | 2026-02-11T14:44:50.765Z |
| CVE-2025-48724 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:22.172Z | 2026-02-11T14:43:05.197Z |
| CVE-2025-48723 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:27.742Z | 2026-02-11T14:42:21.436Z |
| CVE-2025-8025 |
9.8 (3.1)
|
Improper Access Control in Dinosoft Business Solutions… |
Dinosoft Business Solutions |
Dinosoft ERP |
2026-02-11T12:19:11.012Z | 2026-02-11T14:38:21.755Z |
| CVE-2025-48722 |
1.3 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:33.423Z | 2026-02-11T14:38:06.207Z |
| CVE-2025-47209 |
1.3 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:38.978Z | 2026-02-11T14:34:41.815Z |
| CVE-2025-47205 |
5.1 (4.0)
|
QTS, QuTS hero |
QNAP Systems Inc. |
QTS |
2026-02-11T12:19:44.097Z | 2026-02-11T14:33:22.912Z |
| CVE-2025-30276 |
4.9 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:51.275Z | 2026-02-11T14:28:30.435Z |
| CVE-2025-30266 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:20:03.281Z | 2026-02-11T14:27:44.205Z |
| CVE-2024-56808 |
2 (4.0)
|
Media Streaming add-on |
QNAP Systems Inc. |
Media Streaming add-on |
2026-02-11T12:20:08.765Z | 2026-02-11T14:27:11.982Z |
| CVE-2025-30269 |
0.6 (4.0)
|
Qsync Central |
QNAP Systems Inc. |
Qsync Central |
2026-02-11T12:19:57.092Z | 2026-02-11T14:27:09.111Z |
| CVE-2024-56807 |
1.7 (4.0)
|
Media Streaming add-on |
QNAP Systems Inc. |
Media Streaming add-on |
2026-02-11T12:20:14.724Z | 2026-02-11T14:23:50.298Z |
| CVE-2026-0910 |
8.8 (3.1)
|
wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) P… |
tomdever |
wpForo Forum |
2026-02-11T13:25:44.903Z | 2026-02-11T14:22:14.626Z |
| CVE-2026-2337 |
8.7 (4.0)
|
Refleccted XSS on Plunet BusinessManager |
Plunet |
Plunet BusinessManager |
2026-02-11T13:28:30.034Z | 2026-02-11T14:19:29.316Z |
| CVE-2021-26381 |
7.1 (4.0)
|
Improper system call parameter validation in the … |
AMD |
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors |
2026-02-10T19:47:26.356Z | 2026-02-11T14:11:54.692Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25597 |
5.3 (3.1)
|
PrestaShop has a time based enumeration in FO login form |
PrestaShop |
PrestaShop |
2026-02-06T20:47:24.793Z | 2026-02-09T15:27:54.047Z |
| CVE-2026-25592 |
10 (3.1)
|
Semantic Kernel has an Arbitrary File Write via AI Age… |
microsoft |
semantic-kernel |
2026-02-06T20:38:28.770Z | 2026-02-09T15:27:59.698Z |
| CVE-2026-25581 |
5.4 (3.1)
|
SCEditor affected by DOM XSS via emoticon URL/HTML injection |
samclarke |
SCEditor |
2026-02-06T20:58:02.788Z | 2026-02-09T15:27:43.193Z |
| CVE-2026-25580 |
8.6 (3.1)
|
Pydantic AI Affected by Server-Side Request Forgery (S… |
pydantic |
pydantic-ai |
2026-02-06T21:01:38.035Z | 2026-02-09T15:27:37.772Z |
| CVE-2026-25556 |
5.9 (4.0)
|
MuPDF <= 1.27.0 Barcode Decoding Double Free |
Artifex Software |
MuPDF |
2026-02-06T16:11:59.926Z | 2026-02-06T16:35:11.989Z |
| CVE-2026-24903 |
5.3 (4.0)
|
OrcaStatLLM Researcher Stored Cross-Site Scripting (XS… |
AlgoNetLab |
OrcaStatLLM-Researcher |
2026-02-06T17:46:20.755Z | 2026-02-06T18:05:02.550Z |
| CVE-2026-24851 |
5.8 (4.0)
|
OpenFGA Improper Policy Enforcement |
openfga |
openfga |
2026-02-06T17:51:27.274Z | 2026-02-06T18:47:21.029Z |
| CVE-2026-24776 |
4.3 (3.1)
|
OpenProject has an IDOR on MeetingAgendaItems allows c… |
opf |
openproject |
2026-02-06T17:56:11.712Z | 2026-02-06T18:37:12.569Z |
| CVE-2026-24050 |
1.1 (4.0)
|
Zulip affected by Stored XSS in user profile modal |
zulip |
zulip |
2026-02-06T18:20:33.160Z | 2026-02-09T15:28:55.237Z |
| CVE-2026-23989 |
8.2 (3.1)
|
REVA Public Link Exploit |
opencloud-eu |
reva |
2026-02-06T18:28:25.075Z | 2026-02-06T18:52:19.409Z |
| CVE-2026-22254 |
0 (3.1)
|
Winter Affected by Stored Cross-Site Scripting (XSS) i… |
wintercms |
winter |
2026-02-06T19:11:27.260Z | 2026-02-09T15:28:17.194Z |
| CVE-2026-2065 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
Flycatcher Toys smART Pixelator Bluetooth Low Energy m… |
Flycatcher Toys |
smART Pixelator |
2026-02-06T20:02:07.016Z | 2026-02-06T20:15:29.465Z |
| CVE-2026-1769 |
5.3 (3.1)
|
Stored XSS on Xerox CentreWare Web 7.0.6 |
Xerox |
CentreWare |
2026-02-06T17:19:45.450Z | 2026-02-06T18:42:12.895Z |
| CVE-2025-15320 |
3.3 (3.1)
|
Tanium addressed a denial of service vulnerability in … |
Tanium |
Tanium Client |
2026-02-06T19:18:13.493Z | 2026-02-06T19:40:46.455Z |
| CVE-2025-13523 |
7.7 (3.1)
|
Cross-Site Scripting (XSS) via Unescaped Display Names… |
Mattermost |
Mattermost Confluence Plugin |
2026-02-06T15:52:31.003Z | 2026-02-06T16:23:06.496Z |
| CVE-2019-25305 |
8.5 (4.0)
7.8 (3.1)
|
JumpStart 0.6.0.0 - 'jswpbapi' Unquoted Service Path |
Inforprograma |
JumpStart |
2026-02-06T16:41:38.774Z | 2026-02-06T19:09:41.739Z |
| CVE-2019-25304 |
8.5 (4.0)
7.8 (3.1)
|
Intelligent Security System SecurOS Enterprise 10.2 - … |
Issivs |
Intelligent Security System SecurOS Enterprise |
2026-02-06T16:41:38.343Z | 2026-02-06T19:48:11.629Z |
| CVE-2019-25303 |
7.1 (4.0)
7.1 (3.1)
|
TheJshen contentManagementSystem 1.04 - 'id' SQL Injection |
thejshen |
contentManagementSystem |
2026-02-06T16:41:37.909Z | 2026-02-06T19:58:21.251Z |
| CVE-2019-25302 |
8.5 (4.0)
7.8 (3.1)
|
Acer Launch Manager 6.1.7600.16385 - 'DsiWMIService' U… |
Acer |
Launch Manager |
2026-02-06T16:41:37.484Z | 2026-02-06T20:00:24.847Z |
| CVE-2019-25301 |
5.1 (4.0)
6.4 (3.1)
|
thrsrossi Millhouse-Project 1.414 - 'content' Persiste… |
thrsrossi |
Millhouse Project |
2026-02-06T16:41:37.075Z | 2026-02-06T20:07:36.970Z |
| CVE-2019-25300 |
7.1 (4.0)
7.1 (3.1)
|
thejshen Globitek CMS 1.4 - 'id' SQL Injection |
thejshen |
Globitek CMS |
2026-02-06T16:41:36.605Z | 2026-02-06T20:10:29.549Z |
| CVE-2019-25299 |
7.1 (4.0)
7.1 (3.1)
|
rimbalinux AhadPOS 1.11 - 'alamatCustomer' SQL Injection |
rimbalinux |
AhadPOS |
2026-02-06T16:41:36.140Z | 2026-02-06T20:05:58.335Z |
| CVE-2019-25298 |
7.1 (4.0)
7.1 (3.1)
|
html5_snmp 1.11 - 'Router_ID' SQL Injection |
lolypop55 |
html5_snmp |
2026-02-06T16:41:35.732Z | 2026-02-06T20:05:02.469Z |
| CVE-2019-25294 |
5.1 (4.0)
6.4 (3.1)
|
html5_snmp 1.11 - 'Remark' Persistent Cross-Site Scripting |
lolypop55 |
html5_snmp |
2026-02-06T16:41:35.318Z | 2026-02-06T19:54:41.405Z |
| CVE-2019-25293 |
8.5 (4.0)
7.8 (3.1)
|
Blue Stacks App Player 2.4.44.62.57 - "BstHdLogRotator… |
bluestacks |
Blue Stacks App Player |
2026-02-06T16:42:04.114Z | 2026-02-06T17:41:40.463Z |
| CVE-2019-25292 |
8.5 (4.0)
7.8 (3.1)
|
Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorServi… |
Alps |
Alps HID Monitor Service |
2026-02-06T16:41:34.491Z | 2026-02-06T19:51:20.447Z |
| CVE-2019-25266 |
8.5 (4.0)
7.8 (3.1)
|
Wondershare Application Framework Service 2.4.3.231 - … |
Wondershare |
Wondershare Application Framework Service |
2026-02-06T16:41:34.027Z | 2026-02-06T19:13:07.897Z |
| CVE-2023-53546 |
N/A
|
net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_ref… |
Linux |
Linux |
2025-10-04T15:16:54.132Z | 2025-10-04T15:16:54.132Z |
| CVE-2025-68138 |
4.7 (3.1)
|
EVerest affected by memory exhaustion in libocpp |
EVerest |
everest-core |
2026-01-21T19:30:49.196Z | 2026-01-22T21:56:29.394Z |
| CVE-2025-68139 |
4.3 (3.1)
|
In EVerest, by default, the EV is responsible for clos… |
EVerest |
everest-core |
2026-01-21T19:36:36.127Z | 2026-01-22T16:50:50.152Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-25597 | PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-… | 2026-02-06T21:16:17.933 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-25592 | Semantic Kernel is an SDK used to build, orchestrate, and deploy AI agents and multi-agent systems.… | 2026-02-06T21:16:17.647 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-25581 | SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. Prior to 3.2.1, if an attacker has the a… | 2026-02-06T21:16:17.307 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-25580 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.… | 2026-02-06T21:16:17.167 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-25556 | MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_dis… | 2026-02-06T17:16:27.387 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-24903 | OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS… | 2026-02-06T18:15:58.830 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-24851 | OpenFGA is a high-performance and flexible authorization/permission engine built for developers and… | 2026-02-06T18:15:58.673 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-24776 | OpenProject is an open-source, web-based project management software. Prior to 17.0.2, the drag&dro… | 2026-02-06T18:15:58.497 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-24050 | Zulip is an open-source team collaboration tool. From 5.0 to before 11.5, some administrative actio… | 2026-02-06T19:16:08.640 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-23989 | REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization m… | 2026-02-06T19:16:08.470 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-22254 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. V… | 2026-02-06T20:16:10.057 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-2065 | A security flaw has been discovered in Flycatcher Toys smART Pixelator 2.0. Affected by this issue … | 2026-02-06T20:16:12.270 | 2026-02-06T21:57:22.450 |
| fkie_cve-2026-1769 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnera… | 2026-02-06T18:15:56.193 | 2026-02-06T21:57:22.450 |
| fkie_cve-2025-15320 | Tanium addressed a denial of service vulnerability in Tanium Client. | 2026-02-06T20:16:06.663 | 2026-02-06T21:57:22.450 |
| fkie_cve-2025-13523 | Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names … | 2026-02-06T16:16:13.370 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25305 | JumpStart 0.6.0.0 contains an unquoted service path vulnerability in the jswpbapi service running w… | 2026-02-06T17:16:12.037 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25304 | SecurOS Enterprise 10.2 contains an unquoted service path vulnerability in the SecurosCtrlService t… | 2026-02-06T17:16:11.863 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25303 | TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers … | 2026-02-06T17:16:11.697 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25302 | Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMISer… | 2026-02-06T17:16:11.523 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25301 | Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment sub… | 2026-02-06T17:16:11.357 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25300 | thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulat… | 2026-02-06T17:16:11.190 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25299 | RimbaLinux AhadPOS 1.11 contains a SQL injection vulnerability in the 'alamatCustomer' parameter th… | 2026-02-06T17:16:11.020 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25298 | html5_snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate … | 2026-02-06T17:16:10.853 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25294 | html5_snmp 1.11 contains a persistent cross-site scripting vulnerability that allows attackers to i… | 2026-02-06T17:16:10.693 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25293 | BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogR… | 2026-02-06T17:16:10.527 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25292 | Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local… | 2026-02-06T17:16:10.360 | 2026-02-06T21:57:22.450 |
| fkie_cve-2019-25266 | Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability… | 2026-02-06T17:16:10.187 | 2026-02-06T21:57:22.450 |
| fkie_cve-2023-53546 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak … | 2025-10-04T16:15:49.747 | 2026-02-06T21:27:58.963 |
| fkie_cve-2025-68138 | EVerest is an EV charging software stack, and EVerest libocpp is a C++ implementation of the Open C… | 2026-01-21T20:16:06.007 | 2026-02-06T21:22:15.583 |
| fkie_cve-2025-68139 | EVerest is an EV charging software stack. In all versions up to and including 2025.12.1, the defaul… | 2026-01-21T20:16:06.167 | 2026-02-06T21:22:10.130 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-cvfp-9537-pwmr |
7.5 (3.1)
8.7 (4.0)
|
Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network c… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-crj7-cvxg-6mjq |
5.1 (4.0)
|
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability t… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-chp8-x4w6-9g23 |
6.4 (3.1)
|
The Menu Icons by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-8w6w-rh48-3q53 |
6.2 (3.1)
6.9 (4.0)
|
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows r… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-85r5-hmf5-6gvm |
8.2 (3.1)
7.1 (4.0)
|
School ERP Pro 1.0 contains a SQL injection vulnerability in the 'es_messagesid' parameter that all… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-47wv-3h55-hmc6 |
7.5 (3.1)
8.7 (4.0)
|
Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated at… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-2rv2-xrc4-x25w |
5.3 (3.1)
5.1 (4.0)
|
Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attacker… | 2026-02-04T00:30:29Z | 2026-02-04T00:30:29Z |
| ghsa-xwhw-cvrw-c9g5 |
8.2 (3.1)
8.8 (4.0)
|
Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php t… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-xg2w-fg24-8449 |
9.8 (3.1)
8.6 (4.0)
|
CloudMe 1.11.2 contains a buffer overflow vulnerability that allows remote attackers to execute arb… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-xfh7-c2jg-4484 |
9.8 (3.1)
8.4 (4.0)
|
LanSend 3.2 contains a buffer overflow vulnerability in the Add Computers Wizard file import functi… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-v5w7-x5c5-8hg8 |
7.2 (3.1)
5.1 (4.0)
|
Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST pa… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-rrwv-g6g5-vj2p |
8.8 (3.1)
7.2 (4.0)
|
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that all… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-pw32-4hxv-cxrf |
6.5 (3.1)
6.9 (4.0)
|
Booked Scheduler 2.7.7 contains a directory traversal vulnerability in the manage_email_templates.p… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-pgrm-rf8r-q98p |
8.8 (3.1)
8.6 (4.0)
|
Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to up… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-p3xh-76cc-cfqr |
8.2 (3.1)
8.8 (4.0)
|
PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote … | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-mf84-vm8m-ccvx |
9.8 (3.1)
8.4 (4.0)
|
StreamRipper32 version 2.6 contains a buffer overflow vulnerability in the Station/Song Section tha… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-m7vh-5428-ff4x |
9.8 (3.1)
9.3 (4.0)
|
CraftCMS 3 vCard Plugin 1.0.0 contains a deserialization vulnerability that allows unauthenticated … | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-m6x4-wg6v-8g95 |
9.8 (3.1)
8.4 (4.0)
|
GoldWave 5.70 contains a buffer overflow vulnerability that allows attackers to execute arbitrary c… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-j9p8-cc5q-cg54 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: cdc_ncm: Deal with too lo… | 2025-10-07T18:31:10Z | 2026-02-04T00:30:28Z |
| ghsa-fx96-q4hr-fjmm |
9.8 (3.1)
8.7 (4.0)
|
Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the LIST command that al… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-c4p8-934f-4gvh |
9.8 (3.1)
7.2 (4.0)
|
webTareas 2.0.p8 contains a file deletion vulnerability in the print_layout.php administration comp… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-9jqj-4cr8-rr2f |
8.8 (3.1)
|
Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker t… | 2026-02-03T21:31:52Z | 2026-02-04T00:30:28Z |
| ghsa-867q-8rpr-vpph |
9.8 (3.1)
7.1 (4.0)
|
Filetto 1.0 FTP server contains a denial of service vulnerability in the FEAT command processing th… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-58j8-gxpr-8cgq |
7.1 (3.1)
7.1 (4.0)
|
Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php,… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-56m3-w67j-49gp |
8.2 (3.1)
8.8 (4.0)
|
OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' para… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-3f5v-f3mc-6rj8 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Don't migr… | 2025-10-07T18:31:10Z | 2026-02-04T00:30:28Z |
| ghsa-2rv9-m7pg-rvf8 |
9.8 (3.1)
8.7 (4.0)
|
Konica Minolta FTP Utility 1.0 contains a buffer overflow vulnerability in the NLST command that al… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-2f92-9qpx-3m87 |
9.8 (3.1)
8.4 (4.0)
|
Remote Desktop Audit 2.3.0.157 contains a buffer overflow vulnerability that allows attackers to ex… | 2026-02-04T00:30:28Z | 2026-02-04T00:30:28Z |
| ghsa-28x7-22j7-wrcc |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcd_mipid: Fix … | 2025-10-07T18:31:10Z | 2026-02-04T00:30:28Z |
| ghsa-wvjj-gc57-3w9j |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: don't access release… | 2025-10-07T18:31:09Z | 2026-02-04T00:30:27Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-96 |
|
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it i… | pyyaml | 2020-03-24T15:15:00Z | 2021-03-26T02:44:00Z |
| pysec-2021-41 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:49:00Z |
| pysec-2021-40 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:49:00Z |
| pysec-2021-42 |
|
Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) be… | pillow | 2021-03-03T09:15:00Z | 2021-03-23T19:48:00Z |
| pysec-2021-59 |
|
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in s… | urllib3 | 2021-03-15T18:15:00Z | 2021-03-23T16:47:00Z |
| pysec-2021-66 |
|
This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is … | jinja2 | 2021-02-01T20:15:00Z | 2021-03-22T16:34:00Z |
| pysec-2021-70 |
|
In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted… | pillow | 2021-01-12T09:15:00Z | 2021-03-22T15:48:00Z |
| pysec-2021-36 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offs… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:11:00Z |
| pysec-2021-37 |
|
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bound… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:09:00Z |
| pysec-2021-38 |
|
An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expressio… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T14:03:00Z |
| pysec-2021-39 |
|
An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleD… | pillow | 2021-03-19T04:15:00Z | 2021-03-22T13:36:00Z |
| pysec-2021-60 |
|
Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerabilit… | tenable-jira-cloud | 2021-03-10T22:15:00Z | 2021-03-18T20:38:00Z |
| pysec-2020-173 |
|
The pip package before 19.2 for Python allows Directory Traversal when a URL is given in … | pip | 2020-09-04T20:15:00Z | 2021-03-15T16:18:00Z |
| pysec-2021-43 |
|
Products.GenericSetup is a mini-framework for expressing the configured state of a Zope S… | products-genericsetup | 2021-03-09T01:15:00Z | 2021-03-12T18:05:00Z |
| pysec-2021-45 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:48:00Z |
| pysec-2021-44 |
|
Products.PluggableAuthService is a pluggable Zope authentication and authorization framew… | products-pluggableauthservice | 2021-03-08T21:15:00Z | 2021-03-12T13:22:00Z |
| pysec-2021-49 |
|
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … | pysaml2 | 2021-01-21T15:15:00Z | 2021-03-10T21:00:00Z |
| pysec-2020-45 |
|
An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and … | horizon | 2020-12-04T08:15:00Z | 2021-03-09T15:08:00Z |
| pysec-2021-9 |
|
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.ar… | django | 2021-02-02T07:15:00Z | 2021-03-05T19:19:00Z |
| pysec-2021-113 |
|
Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information … | channels | 2021-02-22T03:15:00Z | 2021-02-26T12:36:00Z |
| pysec-2021-65 |
|
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use… | gramaddict | 2021-02-17T22:15:00Z | 2021-02-24T13:58:00Z |
| pysec-2021-3 |
|
The lineage endpoint of the deprecated Experimental API was not protected by authenticati… | apache-airflow | 2021-02-17T15:15:00Z | 2021-02-23T17:59:00Z |
| pysec-2021-2 |
|
Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow a… | apache-airflow | 2021-02-17T15:15:00Z | 2021-02-23T17:48:00Z |
| pysec-2021-68 |
|
An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correct… | nfstream | 2021-02-16T15:15:00Z | 2021-02-19T21:11:00Z |
| pysec-2021-63 |
|
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to… | cryptography | 2021-02-07T20:15:00Z | 2021-02-19T17:23:00Z |
| pysec-2021-16 |
|
httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.… | httplib2 | 2021-02-08T20:15:00Z | 2021-02-12T14:56:00Z |
| pysec-2021-33 |
|
LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of t… | oncall | 2021-02-05T18:15:00Z | 2021-02-08T20:54:00Z |
| pysec-2021-48 |
|
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 … | pysaml2 | 2021-01-21T15:15:00Z | 2021-01-29T17:58:00Z |
| pysec-2021-69 |
|
In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file… | pillow | 2021-01-12T09:15:00Z | 2021-01-29T00:47:00Z |
| pysec-2021-71 |
|
In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted … | pillow | 2021-01-12T09:15:00Z | 2021-01-29T00:46:00Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-31939 | Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Import any XML or CSV File to W… | 2024-04-11T05:03:20.642570Z |
| gsd-2024-31938 | Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affect… | 2024-04-11T05:03:20.639405Z |
| gsd-2024-31937 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.708644Z |
| gsd-2024-31936 | Cross-Site Request Forgery (CSRF) vulnerability in AyeCode Ltd UsersWP.This issue affects… | 2024-04-11T05:03:20.826036Z |
| gsd-2024-31935 | Cross-Site Request Forgery (CSRF) vulnerability in BracketSpace Simple Post Notes.This is… | 2024-04-11T05:03:20.688933Z |
| gsd-2024-31934 | Cross-Site Request Forgery (CSRF) vulnerability in Link Whisper Link Whisper Free.This is… | 2024-04-11T05:03:20.838401Z |
| gsd-2024-31933 | Cross-Site Request Forgery (CSRF) vulnerability in Live Composer Team Page Builder: Live … | 2024-04-11T05:03:20.737413Z |
| gsd-2024-31932 | Cross-Site Request Forgery (CSRF) vulnerability in CreativeThemes Blocksy Companion.This … | 2024-04-11T05:03:20.812206Z |
| gsd-2024-31931 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.675204Z |
| gsd-2024-31930 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.640011Z |
| gsd-2024-31929 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.576787Z |
| gsd-2024-31928 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.855567Z |
| gsd-2024-31927 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.871677Z |
| gsd-2024-31926 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.815264Z |
| gsd-2024-31925 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-11T05:03:20.547686Z |
| gsd-2024-31924 | Cross-Site Request Forgery (CSRF) vulnerability in Exactly WWW EWWW Image Optimizer.This … | 2024-04-11T05:03:20.747682Z |
| gsd-2024-31923 | Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page.This issu… | 2024-04-11T05:03:20.664279Z |
| gsd-2024-31922 | Cross-Site Request Forgery (CSRF) vulnerability in Anton Aleksandrov WordPress Hosting Be… | 2024-04-11T05:03:20.586978Z |
| gsd-2024-31921 | Cross-Site Request Forgery (CSRF) vulnerability in Etoile Web Design Ultimate Product Cat… | 2024-04-11T05:03:20.878372Z |
| gsd-2024-31920 | Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Currency per Product f… | 2024-04-11T05:03:20.805216Z |
| gsd-2024-31919 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.749047Z |
| gsd-2024-31918 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.618704Z |
| gsd-2024-31917 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.593315Z |
| gsd-2024-31916 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.724458Z |
| gsd-2024-31915 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.538078Z |
| gsd-2024-31914 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.841765Z |
| gsd-2024-31913 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.772085Z |
| gsd-2024-31912 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.680413Z |
| gsd-2024-31911 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.899723Z |
| gsd-2024-31910 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:20.705859Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-0000-KAM193-CC5AEE4D7FFD5C96 | Pentesting or research code in livekit-agents-hedra (PyPI) | 2025-12-24T20:38:01Z | 2025-12-24T20:38:01Z |
| mal-2025-6629 | Malicious code in webpack-dev-server (RubyGems) | 2025-07-31T19:17:14Z | 2025-12-24T10:09:32Z |
| mal-2025-6628 | Malicious code in maventa_utils (RubyGems) | 2025-07-31T19:17:12Z | 2025-12-24T10:09:32Z |
| mal-2025-6627 | Malicious code in maventa_common (RubyGems) | 2025-07-31T19:17:11Z | 2025-12-24T10:09:32Z |
| mal-2025-5129 | Malicious code in requestsdev (PyPI) | 2025-06-18T10:15:20Z | 2025-12-24T10:09:32Z |
| mal-2025-5109 | Malicious code in dbgpkg (PyPI) | 2025-06-18T10:15:07Z | 2025-12-24T10:09:32Z |
| mal-2025-5095 | Malicious code in aliyun-ai-labs-sdk (PyPI) | 2025-06-18T10:15:00Z | 2025-12-24T10:09:32Z |
| mal-2025-47815 | Malicious code in sqlcommenter_rails (RubyGems) | 2025-09-26T09:15:02Z | 2025-12-24T10:09:32Z |
| mal-2025-41805 | Malicious code in omniauth-pro-sante-connect (RubyGems) | 2025-08-28T07:12:29Z | 2025-12-24T10:09:32Z |
| mal-2025-192657 | Malicious code in yt-smm (npm) | 2025-12-19T08:41:06Z | 2025-12-24T10:09:32Z |
| mal-2025-191940 | Malicious code in zakuchienne (PyPI) | 2025-11-24T06:34:51Z | 2025-12-24T10:09:32Z |
| mal-2025-191898 | Malicious code in threading-helper (PyPI) | 2025-11-27T07:11:52Z | 2025-12-24T10:09:32Z |
| mal-2025-191894 | Malicious code in testingpkgja (PyPI) | 2025-11-23T21:05:33Z | 2025-12-24T10:09:32Z |
| mal-2025-191860 | Malicious code in rtcpy (PyPI) | 2025-11-24T23:29:43Z | 2025-12-24T10:09:32Z |
| mal-2025-191859 | Malicious code in rtcpstream (PyPI) | 2025-11-25T22:02:58Z | 2025-12-24T10:09:32Z |
| mal-2025-191858 | Malicious code in rtcplogin (PyPI) | 2025-11-26T16:19:39Z | 2025-12-24T10:09:32Z |
| mal-2025-191837 | Malicious code in pyrtp (PyPI) | 2025-11-24T23:32:59Z | 2025-12-24T10:09:32Z |
| mal-2025-191794 | Malicious code in mongland (PyPI) | 2025-11-24T06:37:26Z | 2025-12-24T10:09:32Z |
| mal-2025-191792 | Malicious code in minizip (PyPI) | 2025-11-23T12:20:46Z | 2025-12-24T10:09:32Z |
| mal-2025-191790 | Malicious code in mescouilles (PyPI) | 2025-11-23T23:19:36Z | 2025-12-24T10:09:32Z |
| mal-2025-191758 | Malicious code in hexdecnet (PyPI) | 2025-11-23T00:42:49Z | 2025-12-24T10:09:32Z |
| mal-2025-191757 | Malicious code in hexdeclink (PyPI) | 2025-12-01T07:04:01Z | 2025-12-24T10:09:32Z |
| mal-2025-191753 | Malicious code in hexadec (PyPI) | 2025-11-14T07:58:44Z | 2025-12-24T10:09:32Z |
| mal-2025-191742 | Malicious code in gptall (PyPI) | 2025-11-27T07:07:24Z | 2025-12-24T10:09:32Z |
| mal-2025-191717 | Malicious code in dev-server-python (PyPI) | 2025-11-27T07:09:15Z | 2025-12-24T10:09:32Z |
| mal-2025-191700 | Malicious code in chicopute (PyPI) | 2025-11-24T21:59:47Z | 2025-12-24T10:09:32Z |
| mal-2025-191682 | Malicious code in aounitaounit2 (PyPI) | 2025-11-24T22:02:21Z | 2025-12-24T10:09:32Z |
| mal-2025-191675 | Malicious code in aiostreams (PyPI) | 2025-11-24T21:58:24Z | 2025-12-24T10:09:32Z |
| mal-2024-6103 | Malicious code in termcolour (PyPI) | 2024-06-25T13:43:19Z | 2025-12-24T10:09:32Z |
| mal-2024-5325 | Malicious code in libsock (PyPI) | 2024-06-25T13:36:56Z | 2025-12-24T10:09:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0135 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-01-21T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0042 | Vaultwarden: Mehrere Schwachstellen | 2025-01-09T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-3743 | Vaultwarden: Schwachstelle ermöglicht Privilegieneskalation | 2024-12-22T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2024-2206 | Red Hat JBoss Enterprise Anwendungsplattform: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-23T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2023-0524 | Oracle Java SE: Mehrere Schwachstellen | 2019-10-15T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2023-0234 | Oracle Java SE: Mehrere Schwachstellen | 2020-01-14T23:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2022-1303 | Oracle Java SE: Mehrere Schwachstellen | 2021-04-20T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2022-0196 | Oracle Java SE: Mehrere Schwachstellen | 2021-10-19T22:00:00.000+00:00 | 2025-01-21T23:00:00.000+00:00 |
| wid-sec-w-2025-0134 | Kibana: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0133 | Elasticsearch: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0064 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0020 | Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-01-07T23:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1613 | libTIFF: Mehrere Schwachstellen | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1605 | libTIFF: Schwachstelle ermöglicht Denial of Service | 2023-06-29T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1514 | libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-06-19T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2023-1479 | libTIFF: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2023-06-14T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-1858 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Denial of Service | 2022-10-25T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0451 | Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-08-10T22:00:00.000+00:00 | 2025-01-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0127 | Moxa Switch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0126 | Verschiedene Tunneling Protokolle: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0125 | IBM Maximo Asset Management: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0124 | IBM App Connect Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0122 | Mattermost: Mehrere Schwachstellen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0121 | IBM Sterling Connect:Direct: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-01-19T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0118 | Perl: Schwachstelle ermöglicht Privilegieneskalation | 2016-07-25T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0117 | Linux Kernel: Mehrere Schwachstellen | 2017-03-07T23:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0116 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2017-08-30T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-3087 | MediaWiki: Mehrere Schwachstellen | 2024-10-06T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-2078 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2017-09-26T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| wid-sec-w-2024-1916 | VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-08-22T22:00:00.000+00:00 | 2025-01-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2021:2034 | Red Hat Security Advisory: redis:6 security update | 2021-05-19T10:23:08+00:00 | 2026-02-18T16:23:47+00:00 |
| rhsa-2021:2500 | Red Hat Security Advisory: Red Hat OpenShift Enterprise security and bug fix update | 2021-06-29T06:30:05+00:00 | 2026-02-18T16:23:46+00:00 |
| rhsa-2021:2461 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.4 security and bug fix update | 2021-06-16T19:26:01+00:00 | 2026-02-18T16:23:45+00:00 |
| rhsa-2021:4156 | Red Hat Security Advisory: go-toolset:rhel8 security, bug fix, and enhancement update | 2021-11-09T17:49:22+00:00 | 2026-02-18T16:22:43+00:00 |
| rhsa-2022:6429 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.4 security and bug fix update | 2022-09-13T00:58:09+00:00 | 2026-02-18T16:22:18+00:00 |
| rhsa-2021:3459 | Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.8] | 2021-09-08T14:09:25+00:00 | 2026-02-18T16:22:16+00:00 |
| rhsa-2021:2543 | Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.20.4 security update | 2021-06-24T15:19:30+00:00 | 2026-02-18T16:22:16+00:00 |
| rhsa-2021:2179 | Red Hat Security Advisory: RHV Manager security update (ovirt-engine) [ovirt-4.4.6] | 2021-06-01T13:24:46+00:00 | 2026-02-18T16:22:13+00:00 |
| rhsa-2012:1129 | Red Hat Security Advisory: kernel security and bug fix update | 2012-07-31T20:02:00+00:00 | 2026-02-18T16:22:11+00:00 |
| rhsa-2026:2060 | Red Hat Security Advisory: python-s3transfer security update | 2026-02-05T09:42:45+00:00 | 2026-02-18T16:21:46+00:00 |
| rhsa-2026:1795 | Red Hat Security Advisory: resource-agents security update | 2026-02-03T07:28:32+00:00 | 2026-02-18T16:21:43+00:00 |
| rhsa-2026:1600 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2026-01-29T19:41:57+00:00 | 2026-02-18T16:21:02+00:00 |
| rhsa-2012:0862 | Red Hat Security Advisory: Red Hat Enterprise Linux 6 kernel security, bug fix and enhancement update | 2012-06-19T15:39:00+00:00 | 2026-02-18T16:16:55+00:00 |
| rhsa-2012:0150 | Red Hat Security Advisory: Red Hat Enterprise Linux 5.8 kernel update | 2012-02-21T02:25:00+00:00 | 2026-02-18T16:16:46+00:00 |
| rhsa-2026:1084 | Red Hat Security Advisory: podman security update | 2026-01-26T14:25:50+00:00 | 2026-02-18T12:29:54+00:00 |
| rhsa-2026:0753 | Red Hat Security Advisory: container-tools:rhel8 security update | 2026-01-19T02:20:14+00:00 | 2026-02-18T12:29:48+00:00 |
| rhsa-2026:0545 | Red Hat Security Advisory: podman security update | 2026-01-14T04:08:21+00:00 | 2026-02-18T12:29:47+00:00 |
| rhsa-2026:0470 | Red Hat Security Advisory: podman security update | 2026-01-12T17:35:15+00:00 | 2026-02-18T12:29:45+00:00 |
| rhsa-2026:0437 | Red Hat Security Advisory: buildah security update | 2026-01-12T03:51:03+00:00 | 2026-02-18T12:29:45+00:00 |
| rhsa-2026:0436 | Red Hat Security Advisory: buildah security update | 2026-01-12T02:06:04+00:00 | 2026-02-18T12:29:44+00:00 |
| rhsa-2025:23176 | Red Hat Security Advisory: Red Hat Quay 3.13.10 | 2025-12-15T07:13:36+00:00 | 2026-02-18T12:29:38+00:00 |
| rhsa-2025:23060 | Red Hat Security Advisory: Red Hat Quay 3.12 | 2025-12-10T16:11:04+00:00 | 2026-02-18T12:29:37+00:00 |
| rhsa-2025:23059 | Red Hat Security Advisory: Red Hat Quay 3.12 | 2025-12-10T15:51:53+00:00 | 2026-02-18T12:29:36+00:00 |
| rhsa-2025:23028 | Red Hat Security Advisory: Red Hat Quay 3.12 | 2025-12-10T10:20:44+00:00 | 2026-02-18T12:29:34+00:00 |
| rhsa-2025:22955 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.12 director Operator container images | 2025-12-09T16:44:15+00:00 | 2026-02-18T12:29:33+00:00 |
| rhsa-2022:0520 | Red Hat Security Advisory: Red Hat Data Grid 8.3.0 security update | 2022-02-14T13:06:09+00:00 | 2026-02-18T09:56:33+00:00 |
| rhsa-2022:0297 | Red Hat Security Advisory: Red Hat Decision Manager 7.12.0 security update | 2022-01-26T16:33:21+00:00 | 2026-02-18T09:56:32+00:00 |
| rhsa-2021:4918 | Red Hat Security Advisory: Red Hat Integration Camel-K 1.6 release and security update | 2021-12-02T16:17:17+00:00 | 2026-02-18T09:56:30+00:00 |
| rhsa-2021:4767 | Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus GA security update | 2021-11-23T10:34:10+00:00 | 2026-02-18T09:56:29+00:00 |
| rhsa-2021:3956 | Red Hat Security Advisory: xstream security update | 2021-10-25T06:54:35+00:00 | 2026-02-18T09:56:29+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-161-06 | Siemens SINUMERIK | 2020-06-09T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-161-01 | Advantech WebAccess Node | 2020-06-09T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-133-02 | OSIsoft PI System (Update A) | 2020-05-12T00:00:00.000000Z | 2020-06-09T00:00:00.000000Z |
| icsa-20-154-06 | SWARCO CPU LS4000 | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-05 | GE Grid Solutions Reason RT Clocks | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-04 | ABB Central Licensing System | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-03 | ABB Multiple System 800xA Products | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-02 | ABB System 800xA Base | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-154-01 | ABB System 800xA | 2020-06-02T00:00:00.000000Z | 2020-06-02T00:00:00.000000Z |
| icsa-20-147-02 | Johnson Controls Kantech EntraPass | 2020-05-26T00:00:00.000000Z | 2020-05-26T00:00:00.000000Z |
| icsa-20-142-02 | Schneider Electric EcoStruxure Operator Terminal Expert | 2020-05-21T00:00:00.000000Z | 2020-05-21T00:00:00.000000Z |
| icsa-20-142-01 | Johnson Controls Software House C-CURE 9000 and American Dynamics victor VMS | 2020-05-21T00:00:00.000000Z | 2020-05-21T00:00:00.000000Z |
| icsa-20-140-02 | Emerson OpenEnterprise | 2020-05-19T00:00:00.000000Z | 2020-05-19T00:00:00.000000Z |
| icsa-20-140-01 | Rockwell Automation EDS Subsystem | 2020-05-19T00:00:00.000000Z | 2020-05-19T00:00:00.000000Z |
| icsa-20-135-02 | Emerson WirelessHART Gateway | 2020-05-14T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-20-135-01 | Opto 22 SoftPAC Project | 2020-05-14T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-19-213-04 | 3S-Smart Software Solutions GmbH CODESYS V3 (Update A) | 2019-08-01T00:00:00.000000Z | 2020-05-14T00:00:00.000000Z |
| icsa-20-133-01 | Eaton Intelligent Power Manager | 2020-05-12T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-255-02 | 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager (Update A) | 2019-09-12T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-227-04 | Siemens SINAMICS (Update C) | 2019-08-15T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-19-190-05 | Siemens SIPROTEC 5 and DIGSI 5 (Update C) | 2019-07-09T00:00:00.000000Z | 2020-05-12T00:00:00.000000Z |
| icsa-20-128-01 | Advantech WebAccess Node | 2020-05-07T00:00:00.000000Z | 2020-05-07T00:00:00.000000Z |
| icsa-20-126-02 | SAE IT-systems FW-50 Remote Telemetry Unit (RTU) | 2020-05-05T00:00:00.000000Z | 2020-05-05T00:00:00.000000Z |
| icsa-20-126-01 | Fazecast jSerialComm | 2020-05-05T00:00:00.000000Z | 2020-05-05T00:00:00.000000Z |
| icsa-20-119-01 | LCDS LAquis SCADA | 2020-04-28T00:00:00.000000Z | 2020-04-28T00:00:00.000000Z |
| icsa-19-122-03 | Sierra Wireless AirLink ALEOS (Update B) | 2019-05-02T00:00:00.000000Z | 2020-04-23T00:00:00.000000Z |
| icsa-20-112-01 | Inductive Automation Ignition | 2020-04-21T00:00:00.000000Z | 2020-04-21T00:00:00.000000Z |
| icsa-20-105-09 | Siemens TIM 3V-IE and 4R-IE Family Devices | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-105-03 | Triangle MicroWorks SCADA Data Gateway | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| icsa-20-105-02 | Triangle MicroWorks DNP3 Outstation Libraries | 2020-04-14T00:00:00.000000Z | 2020-04-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ssl-bypass-o5tgum2n | Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ssl-bypass-O5tGum2n | Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sma-opn-rdrct-yppmdsmq | Cisco Content Security Management Appliance Open Redirect Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sma-opn-rdrct-yPPMdsMQ | Cisco Content Security Management Appliance Open Redirect Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sigbypass-fcvppcep | Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-sigbypass-FcvPPCeP | Cisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-hcmf-xxe-qqcmauj2 | Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-hcmf-xxe-qqCMAUJ2 | Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-shell-9rhjf68k | Cisco Firepower Threat Defense Software Shell Access Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-shell-9rhJF68K | Cisco Firepower Threat Defense Software Shell Access Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-infodis-kzxgtujd | Cisco Firepower Threat Defense Software Information Disclosure Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-infodis-kZxGtUJD | Cisco Firepower Threat Defense Software Information Disclosure Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-accesslist-bypass-5dzs5qzp | Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-ftd-accesslist-bypass-5dZs5qZp | Cisco Firepower Threat Defense Software Management Access List Bypass Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcxss-ut3bmx9k | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcxss-UT3bMx9k | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcua-statcred-weecczct | Cisco Firepower Management Center Static Credential Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcua-statcred-weeCcZct | Cisco Firepower Management Center Static Credential Vulnerabilities | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcai-z5dqobvn | Cisco Firepower Management Center File Overwrite Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmcai-z5dQObVN | Cisco Firepower Management Center File Overwrite Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmc-webredirect-tcfgd42y | Cisco Firepower Management Center Open Redirect Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fmc-webredirect-TcFgd42y | Cisco Firepower Management Center Open Redirect Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fdmfo-hvpwkxde | Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-fdmfo-HvPWKxDe | Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asaftd-dos-qk8ctglz | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asaftd-dos-qk8cTGLz | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asa-dos-p43gce5j | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asa-dos-bqyfrjt9 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asa-dos-P43GCE5j | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| cisco-sa-asa-dos-BqYFRJt9 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability | 2020-05-06T16:00:00+00:00 | 2020-05-06T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-60721 | Windows Administrator Protection Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60720 | Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60719 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60718 | Windows Administrator Protection Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60717 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60716 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60715 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60714 | Windows OLE Remote Code Execution Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60713 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60709 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60708 | Storvsp.sys Driver Denial of Service Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60707 | Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60706 | Windows Hyper-V Information Disclosure Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60705 | Windows Client-Side Caching Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60704 | Windows Kerberos Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-60703 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59515 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59514 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59513 | Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59512 | Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59511 | Windows WLAN Service Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59510 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59509 | Windows Speech Recognition Information Disclosure Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59508 | Windows Speech Recognition Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59507 | Windows Speech Runtime Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59506 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59505 | Windows Smart Card Reader Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59504 | Azure Monitor Agent Remote Code Execution Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59499 | Microsoft SQL Server Elevation of Privilege Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| msrc_cve-2025-59240 | Microsoft Excel Information Disclosure Vulnerability | 2025-11-11T00:00:00.000Z | 2025-11-11T00:00:00.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13390-1 | lighttpd-1.4.73-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13389-1 | jasper-4.0.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13388-1 | glibc-2.38-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13387-1 | frr-8.4-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13386-1 | freeradius-server-3.2.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13385-1 | MozillaFirefox-119.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13384-1 | velero-1.12.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13383-1 | ungoogled-chromium-118.0.5993.117-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13382-1 | tomcat-9.0.82-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13381-1 | libtiff-devel-32bit-4.6.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13380-1 | libQt6Concurrent6-6.6.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13379-1 | pgadmin4-7.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13378-1 | libQt5Svg5-32bit-5.15.11+kde6-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13377-1 | libQt5Bootstrap-devel-static-32bit-5.15.11+kde138-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13376-1 | cmctl-1.13.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13375-1 | python310-Werkzeug-3.0.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13374-1 | libvmtools-devel-12.3.0-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13373-1 | avahi-0.8-26.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13372-1 | libopenssl-3-devel-3.1.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13371-1 | etcd-for-k8s1.27-3.5.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13370-1 | etcd-for-k8s1.26-3.5.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13369-1 | etcd-for-k8s1.25-3.5.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13368-1 | chromedriver-118.0.5993.117-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13367-1 | libvlc5-3.0.19-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13366-1 | libsystemd0-254.5-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13365-1 | roundcubemail-1.6.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13364-1 | qemu-8.1.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13363-1 | libminizip1-1.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13362-1 | xwayland-23.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13361-1 | xorg-x11-server-21.1.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2020-1074 | Heap-buffer-overflow in SHA1Transform | 2020-07-22T21:49:45.433131Z | 2022-04-13T03:04:36.231830Z |
| osv-2020-1019 | Stack-buffer-overflow in getTLScertificate | 2020-07-22T21:49:40.303036Z | 2022-04-13T03:04:36.173041Z |
| osv-2020-1015 | Heap-buffer-overflow in ndpi_search_memcached | 2020-07-22T21:49:40.164430Z | 2022-04-13T03:04:36.194058Z |
| osv-2020-1013 | Heap-buffer-overflow in ndpi_search_amazon_video | 2020-07-22T21:49:40.101125Z | 2022-04-13T03:04:36.042291Z |
| osv-2020-10 | Heap-use-after-free in ndpi_workflow_process_packet | 2020-06-24T01:51:09.990023Z | 2022-04-13T03:04:36.199525Z |
| osv-2018-29 | Heap-buffer-overflow in r_bin_mdmp_get_mem_info | 2021-01-13T00:00:11.314581Z | 2022-04-13T03:04:36.615630Z |
| osv-2018-231 | Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized | 2021-01-13T21:55:59.805110Z | 2022-04-13T03:04:36.499944Z |
| osv-2018-227 | Heap-buffer-overflow in rawspeed::TableLookUp::setTable | 2021-01-13T00:01:34.025512Z | 2022-04-13T03:04:36.493923Z |
| osv-2018-201 | Heap-buffer-overflow in r_str_utf16_to_utf8 | 2021-01-13T00:01:22.627214Z | 2022-04-13T03:04:36.551157Z |
| osv-2018-198 | Heap-buffer-overflow in r_read_le32 | 2021-01-13T00:01:21.550738Z | 2022-04-13T03:04:36.693663Z |
| osv-2018-194 | Heap-use-after-free in r_core_task_decref | 2021-01-13T00:01:20.948805Z | 2022-04-13T03:04:36.620847Z |
| osv-2018-19 | Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized | 2021-01-13T00:00:08.496128Z | 2022-04-13T03:04:36.482083Z |
| osv-2018-175 | Heap-buffer-overflow in rawspeed::VC5Decompressor::Wavelet::HighPassBand::decode | 2021-01-13T00:01:11.945159Z | 2022-04-13T03:04:36.459254Z |
| osv-2018-148 | Heap-buffer-overflow in r_bin_filter_sections | 2021-01-13T00:01:04.024149Z | 2022-04-13T03:04:36.658399Z |
| osv-2018-102 | Heap-buffer-overflow in r_read_le32 | 2021-01-13T00:00:44.549063Z | 2022-04-13T03:04:36.594467Z |
| osv-2018-101 | Heap-buffer-overflow in r_bin_mdmp_init_pe_bins | 2021-01-13T00:00:44.502980Z | 2022-04-13T03:04:36.663941Z |
| osv-2017-97 | Use-after-poison in rawspeed::unroll_loop_t<void rawspeed::LJpegDecompressor::decodeN<4> | 2021-01-13T21:57:40.779998Z | 2022-04-13T03:04:36.488088Z |
| osv-2017-73 | UNKNOWN READ in rawspeed::MosDecoder::decodeRawInternal | 2021-01-13T21:57:05.509209Z | 2022-04-13T03:04:36.505689Z |
| osv-2017-116 | Use-after-poison in rawspeed::OrfDecoder::decodeCompressed | 2021-01-13T21:57:50.232817Z | 2022-04-13T03:04:36.464826Z |
| osv-2022-48 | Heap-buffer-overflow in processClientServerHello | 2022-01-16T00:01:02.352424Z | 2022-04-13T03:04:35.950537Z |
| osv-2022-202 | Heap-buffer-overflow in ndpi_workflow_process_packet | 2022-02-27T00:00:22.129581Z | 2022-04-13T03:04:35.896926Z |
| osv-2022-191 | Heap-buffer-overflow in ndpi_handle_ipv6_extension_headers | 2022-02-23T00:01:48.558449Z | 2022-04-13T03:04:35.972108Z |
| osv-2022-17 | Heap-buffer-overflow in ap_is_chunked | 2022-01-07T00:01:40.476644Z | 2022-04-13T03:04:35.773121Z |
| osv-2021-975 | Dynamic-stack-buffer-overflow in CryptDigestUpdateInt | 2021-07-13T00:01:14.992472Z | 2022-04-13T03:04:35.884858Z |
| osv-2021-907 | Heap-buffer-overflow in decode_header_value_literal | 2021-07-01T00:00:08.550315Z | 2022-04-13T03:04:35.146504Z |
| osv-2021-811 | Segv on unknown address in GetASNHeader_ex | 2021-05-29T00:00:34.321934Z | 2022-04-13T03:04:35.734913Z |
| osv-2021-807 | Stack-buffer-overflow in DecodeSingleResponse | 2021-05-28T00:00:29.003221Z | 2022-04-13T03:04:35.706382Z |
| osv-2021-631 | Heap-buffer-overflow in ih264d_decode_slice_thread | 2021-04-13T00:00:57.946Z | 2022-04-13T03:04:35.482215Z |
| osv-2021-624 | Heap-buffer-overflow in load_u32_be | 2021-04-10T00:01:08.368776Z | 2022-04-13T03:04:35.082679Z |
| osv-2021-623 | Null-dereference READ | 2021-04-10T00:01:03.265801Z | 2022-04-13T03:04:35.060559Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-discourse-2021-43794 | Anonymous user cache poisoning via development-mode header in Discourse | 2024-03-06T11:08:42.616Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-43793 | Bypass of Poll voting limits in Discourse | 2024-03-06T11:08:51.899Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-43792 | Notifications leak in Discourse | 2024-03-06T11:09:00.082Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-41163 | RCE via malicious SNS subscription payload | 2024-03-06T11:09:16.561Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-39161 | Cross-site scripting via category name in Discourse | 2024-03-06T11:09:33.668Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-37703 | Information exposure in Discourse | 2024-03-06T11:09:41.086Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-37693 | Re-use of email tokens in Discourse | 2024-03-06T11:09:49.192Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-37633 | XSS via d-popover and d-html-popover attribute | 2024-03-06T11:09:55.961Z | 2025-05-20T10:02:07.006Z |
| bit-discourse-2021-32788 | Post creator of a whisper post can be revealed to non-staff users in Discourse | 2024-03-06T11:10:01.686Z | 2025-05-20T10:02:07.006Z |
| bit-couchdb-2023-45725 | Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents | 2024-03-06T10:51:03.389Z | 2025-05-20T10:02:07.006Z |
| bit-couchdb-2023-26268 | Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes | 2024-03-06T10:51:14.379Z | 2025-05-20T10:02:07.006Z |
| bit-couchdb-2021-38295 | Privilege escalation vulnerability when using HTML attachments | 2024-03-06T10:51:34.463Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2024-29903 | Cosign vulnerable to machine-wide denial of service via malicious artifacts | 2024-04-12T07:17:12.054Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2024-29902 | Cosign vulnerable to system-wide denial of service via malicious attachments | 2024-04-12T07:17:20.659Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2023-46737 | Possible endless data attack from attacker-controlled registry in cosign | 2024-03-06T10:50:59.503Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2022-36056 | Vulnerabilities with blob verification in sigstore cosign | 2024-03-06T10:51:15.106Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2022-35929 | False positive signature verification in cosign | 2024-03-06T10:51:23.199Z | 2025-05-20T10:02:07.006Z |
| bit-cosign-2022-23649 | Improper Certificate Validation in Cosign | 2024-03-06T10:51:36.381Z | 2025-05-20T10:02:07.006Z |
| bit-contour-2021-32783 | Authorization bypass in Contour | 2024-03-06T10:51:10.983Z | 2025-05-20T10:02:07.006Z |
| bit-contour-2020-15127 | Denial of service in Contour | 2024-03-06T10:51:22.784Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2024-10086 | Consul Vulnerable To Reflected XSS On Content-Type Error Manipulation | 2024-11-01T07:07:47.800Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2024-10006 | Consul L7 Intentions Vulnerable To Headers Bypass | 2024-11-01T07:07:54.503Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2024-10005 | Consul L7 Intentions Vulnerable To URL Path Bypass | 2024-11-01T07:08:02.109Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2023-5332 | Dependency on Vulnerable Third-Party Component in GitLab | 2024-03-06T10:50:58.088Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2023-2816 | Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner | 2024-03-06T10:51:17.675Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2023-1297 | Consul Cluster Peering can Result in Denial of Service | 2024-03-06T10:51:27.878Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2023-0845 | Consul Server Panic when Ingress and API Gateways Configured with Peering | 2024-03-06T10:51:41.085Z | 2025-05-20T10:02:07.006Z |
| bit-consul-2022-3920 | Consul Peering Imported Nodes/Services Leak | 2024-03-06T10:52:02.181Z | 2025-05-20T10:02:07.006Z |
| bit-concourse-2020-5415 | Concourse's GitLab auth allows impersonation | 2024-03-06T10:51:03.790Z | 2025-05-20T10:02:07.006Z |
| bit-concourse-2020-5409 | Concourse Open Redirect in the /sky/login endpoint | 2024-03-06T10:51:15.173Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-201502-0204 | CRLF injection vulnerability in export.cfg in the web-based administrative console for Si… | 2024-02-13T23:00:38.938000Z |
| var-202204-0989 | Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload… | 2024-02-13T23:00:32.557000Z |
| var-200702-0070 | Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might … | 2024-02-13T23:00:21.069000Z |
| var-201110-0447 | Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and … | 2024-02-13T23:00:17.257000Z |
| var-201510-0583 | J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote at… | 2024-02-13T22:59:51.221000Z |
| var-201505-0128 | Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet … | 2024-02-13T22:59:51.448000Z |
| var-201704-0422 | Huawei AR3200 with software V200R007C00, V200R005C32, V200R005C20; S12700 with software V… | 2024-02-13T22:59:50.414000Z |
| var-201803-0200 | Huawei Honor Smart Scale Application with software of 1.1.1 has an information disclosure… | 2024-02-13T22:59:49.412000Z |
| var-201712-0383 | The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 a… | 2024-02-13T22:59:49.673000Z |
| var-201710-0911 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage para… | 2024-02-13T22:59:49.813000Z |
| var-201809-0956 | Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the… | 2024-02-13T22:59:48.807000Z |
| var-202111-0835 | AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is affected b… | 2024-02-13T22:59:42.022000Z |
| var-202202-1728 | A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verificati… | 2024-02-13T22:59:41.009000Z |
| var-202202-1283 | A improper neutralization of input during web page generation ('cross-site scripting') in… | 2024-02-13T22:59:41.087000Z |
| var-202201-1903 | ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local atta… | 2024-02-13T22:59:41.430000Z |
| var-202201-1882 | Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authent… | 2024-02-13T22:59:41.459000Z |
| var-202201-0620 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHC… | 2024-02-13T22:59:41.834000Z |
| var-202203-0910 | An exposure of sensitive system information to an unauthorized control sphere vulnerabili… | 2024-02-13T22:59:40.860000Z |
| var-201307-0226 | Cross-site scripting (XSS) vulnerability in Cisco Unified Operations Manager allows remot… | 2024-02-13T22:59:22.186000Z |
| var-201502-0156 | Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IO… | 2024-02-13T22:58:51.353000Z |
| var-201409-0053 | Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router… | 2024-02-13T22:58:51.590000Z |
| var-201808-0944 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.… | 2024-02-13T22:58:48.794000Z |
| var-201912-0691 | Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Int… | 2024-02-13T22:58:47.432000Z |
| var-201911-0625 | The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion. SECUDOS DOMOS Con… | 2024-02-13T22:58:47.657000Z |
| var-201911-0582 | The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sak… | 2024-02-13T22:58:47.541000Z |
| var-202006-0587 | Certain NETGEAR devices are affected by disclosure of administrative credentials. This af… | 2024-02-13T22:58:46.794000Z |
| var-202203-1966 | Improper neutralization of special elements used in a command ('Command Injection') vulne… | 2024-02-13T22:58:44.241000Z |
| var-202201-1560 | A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Ser… | 2024-02-13T22:58:44.947000Z |
| var-201111-0147 | Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configurat… | 2024-02-13T22:57:00.663000Z |
| var-201505-0184 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6… | 2024-02-13T22:56:58.225000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2007-000176 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000165 | Ariel AirOne series cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000161 | ColdFusion error page cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000160 | ColdFusion cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000159 | Adobe JRun cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000135 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000134 | Sage vulnerable to arbitrary script execution | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000127 | CCC Cleaner buffer overflow vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000094 | MODx cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000093 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000091 | Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000090 | b2evolution cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000088 | Shopping Basket Professional vulnerable to OS command injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000087 | CGI RESCUE WebFORM missing mail content vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000086 | CGI RESCUE WebFORM vulnerable to cross-site scripting | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000085 | CGI RESCUE WebFORM vulnerable to HTTP header injection | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000074 | phpAdsNew cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000073 | Movable Type cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000071 | Fresh Reader RSS feed cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000070 | Drupal cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2007-000006 | Serene Bach cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000983 | JP1 Request Handling Denial of Service Vulnerabilities | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000975 | Hitachi Soumu Workflow Authentication Bypassing Vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000939 | Multiple vulnerabilities in Webmin and Usermin | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000938 | Webmin directory traversal vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000858 | Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000853 | tDiary arbitrary Ruby script execution vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000852 | Joomla! cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000851 | pnamazu cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| jvndb-2006-000850 | a-blog cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-05-21T00:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1287-1 | Security update for mozjs52 | 2025-04-15T16:25:07Z | 2025-04-15T16:25:07Z |
| suse-su-2025:1286-1 | Security update for apache2-mod_auth_openidc | 2025-04-15T16:24:51Z | 2025-04-15T16:24:51Z |
| suse-su-2025:1285-1 | Security update for etcd | 2025-04-15T16:24:41Z | 2025-04-15T16:24:41Z |
| suse-su-2025:1278-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5) | 2025-04-15T10:04:12Z | 2025-04-15T10:04:12Z |
| suse-su-2025:1275-1 | Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) | 2025-04-15T09:33:37Z | 2025-04-15T09:33:37Z |
| suse-su-2025:1276-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-04-15T09:04:38Z | 2025-04-15T09:04:38Z |
| suse-su-2025:1265-1 | Security update for webkit2gtk3 | 2025-04-15T08:24:07Z | 2025-04-15T08:24:07Z |
| suse-su-2025:1264-1 | Security update for haproxy | 2025-04-15T08:23:40Z | 2025-04-15T08:23:40Z |
| suse-su-2025:1263-1 | Security update for the Linux Kernel | 2025-04-15T08:23:30Z | 2025-04-15T08:23:30Z |
| suse-su-2025:1262-1 | Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) | 2025-04-15T08:03:50Z | 2025-04-15T08:03:50Z |
| suse-su-2025:1260-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-04-14T20:03:48Z | 2025-04-14T20:03:48Z |
| suse-su-2025:1259-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-04-14T17:33:42Z | 2025-04-14T17:33:42Z |
| suse-su-2025:1257-1 | Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4) | 2025-04-14T16:33:36Z | 2025-04-14T16:33:36Z |
| suse-su-2025:1254-1 | Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) | 2025-04-14T15:33:52Z | 2025-04-14T15:33:52Z |
| suse-su-2025:1252-1 | Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4) | 2025-04-14T14:04:12Z | 2025-04-14T14:04:12Z |
| suse-su-2025:1248-1 | Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3) | 2025-04-14T14:04:00Z | 2025-04-14T14:04:00Z |
| suse-su-2025:1241-1 | Security update for the Linux Kernel | 2025-04-14T10:37:23Z | 2025-04-14T10:37:23Z |
| suse-su-2025:1238-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-04-14T09:04:27Z | 2025-04-14T09:04:27Z |
| suse-su-2025:1232-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | 2025-04-14T09:04:21Z | 2025-04-14T09:04:21Z |
| suse-su-2025:1236-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) | 2025-04-14T09:03:58Z | 2025-04-14T09:03:58Z |
| suse-su-2025:1231-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-04-14T08:33:39Z | 2025-04-14T08:33:39Z |
| suse-su-2025:1213-1 | Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3) | 2025-04-14T07:33:35Z | 2025-04-14T07:33:35Z |
| suse-su-2025:1227-1 | Security update for pgadmin4 | 2025-04-14T07:06:34Z | 2025-04-14T07:06:34Z |
| suse-su-2025:1226-1 | Security update for govulncheck-vulndb | 2025-04-14T07:06:19Z | 2025-04-14T07:06:19Z |
| suse-su-2025:1225-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-04-14T06:33:55Z | 2025-04-14T06:33:55Z |
| suse-su-2025:1207-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-04-12T07:04:04Z | 2025-04-12T07:04:04Z |
| suse-su-2025:1214-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-04-11T20:03:45Z | 2025-04-11T20:03:45Z |
| suse-su-2025:20184-1 | Security update for elemental-operator | 2025-04-11T10:57:37Z | 2025-04-11T10:57:37Z |
| suse-su-2025:1201-1 | Security update for expat | 2025-04-11T10:16:13Z | 2025-04-11T10:16:13Z |
| suse-su-2025:1199-1 | Security update for fontforge | 2025-04-11T08:41:11Z | 2025-04-11T08:41:11Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26101 | Nero Social Networking Site index.php文件SQL注入漏洞 | 2025-05-14 | 2025-10-31 |
| cnvd-2025-26100 | Nero Social Networking Site friendprofile.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26099 | Nero Social Networking Site deletemessage.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26098 | Nero Social Networking Site addfriend.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26097 | Nero Social Networking Site acceptoffres.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26081 | Client Details System授权绕过漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26080 | Client Details System welcome.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26079 | Client Details System update-clients.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26078 | Client Details System welcome.php文件SQL注入漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26077 | Client Details System manage-users.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26076 | Client Details System clientview.php文件跨站脚本漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26096 | Vehicle Management filter2.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26095 | Vehicle Management /filter1.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26094 | Vehicle Management /filter.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26093 | Vehicle Management addvehicle.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26092 | Vehicle Management addcompany.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26091 | Online Medicine Guide pharsignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26090 | Online Medicine Guide login.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26089 | Online Medicine Guide cussignup.php文件SQL注入漏洞 | 2025-08-10 | 2025-10-30 |
| cnvd-2025-26088 | Medical Store Management System UpdateMedicines.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26087 | Medical Store Management System MainPanel.java文件SQL注入漏洞 | 2025-08-18 | 2025-10-30 |
| cnvd-2025-26086 | Online Medicine Guide browsemdcn.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26085 | Online Medicine Guide /adphar.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26084 | Online Medicine Guide /addelivery.php文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26083 | Medical Store Management System UpdateCompany.java文件SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-26082 | Medical Store Management System ChangePassword.java SQL注入漏洞 | 2025-08-20 | 2025-10-30 |
| cnvd-2025-25889 | Newforma Project Center Server远程代码执行漏洞 | 2025-05-07 | 2025-10-30 |
| cnvd-2025-25888 | Newforma Project Center Server信息泄露漏洞（CNVD-2025-25888） | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25887 | Newforma Project Center Server目录遍历漏洞 | 2025-10-21 | 2025-10-30 |
| cnvd-2025-25886 | Newforma Project Center Server信息泄露漏洞（CNVD-2025-25886） | 2025-10-21 | 2025-10-30 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| CERTFR-2024-AVI-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| CERTFR-2024-AVI-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |