Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-6xw6-m3mp-wcgg | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-30T12:30:27Z | 2025-12-31T00:31:09Z |
| ghsa-44r9-xqhr-r952 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-… | 2025-12-30T12:30:27Z | 2025-12-31T00:31:09Z |
| ghsa-3gq6-fx9q-4r9m | A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the f… | 2025-12-31T00:31:09Z | 2025-12-31T00:31:09Z |
| ghsa-24x8-vf4r-m3v5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2025-12-30T12:30:27Z | 2025-12-31T00:31:09Z |
| ghsa-hqvh-9m3c-4xx2 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-12-30T12:30:26Z | 2025-12-31T00:31:08Z |
| ghsa-ffhx-92gc-w57q | Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-… | 2025-12-30T12:30:26Z | 2025-12-31T00:31:08Z |
| ghsa-8hrf-667w-43rm | Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Ev… | 2025-12-30T12:30:27Z | 2025-12-31T00:31:08Z |
| ghsa-3f3m-mgfh-hc2q | Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting I… | 2025-12-30T12:30:26Z | 2025-12-31T00:31:08Z |
| ghsa-jm2j-x4xc-567m | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-05-07T15:31:44Z | 2025-12-31T00:31:06Z |
| ghsa-j4p8-h8mh-rh8q | Self-hosted n8n has Legacy Code node that enables arbitrary file read/write | 2025-12-26T18:26:38Z | 2025-12-31T00:20:06Z |
| ghsa-f83h-ghpp-7wcc | Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc | 2025-11-07T23:17:05Z | 2025-12-31T00:16:54Z |
| ghsa-wf5f-4jwr-ppcp | Arbitrary Code Execution in pdfminer.six via Crafted PDF Input | 2025-11-07T20:52:24Z | 2025-12-31T00:16:06Z |
| ghsa-wh6m-h6f4-rjf4 | Libredesk has Improper Neutralization of HTML Tags in a Web Page | 2025-12-16T20:43:16Z | 2025-12-31T00:13:33Z |
| ghsa-95qg-89c2-w5hj | theshit vulnerable to unsafe loading of user-owned Python rules when running as root | 2025-12-30T23:45:51Z | 2025-12-30T23:45:52Z |
| ghsa-7rvh-xqp3-pr8j | ImageMagick's failure to limit MVG mutual causes Stack Overflow | 2025-12-30T23:08:15Z | 2025-12-30T23:08:15Z |
| ghsa-h956-rh7x-ppgj | RustFS has a gRPC Hardcoded Token Authentication Bypass | 2025-12-30T23:06:15Z | 2025-12-30T23:06:15Z |
| ghsa-p27m-hp98-6637 | ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack | 2025-12-30T22:54:32Z | 2025-12-30T22:54:33Z |
| ghsa-xx3f-437p-fp69 | A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the f… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-mmjm-9vqc-hxxm | A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the functio… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:33Z |
| ghsa-hmhp-gh8m-c8xp | When system.enableCrossNamespaceCommands is enabled (on by default), the Temporal server permits ce… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-95cj-hx7q-rjj4 | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the functio… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-86hp-crvx-3qvr | An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field … | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-5rqh-29cg-rcqm | inMusic Brands Engine DJ 4.3.0 suffers from Insecure Permissions due to exposed HTTP service in the… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-2733-h98q-64p4 | A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unk… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:33Z |
| ghsa-wc9p-rvp2-mc4r | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Creat… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-w5qh-693v-56hm | A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-vrjf-962m-57c2 | TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-mg7r-rmfx-wx93 | A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTP… | 2025-12-30T03:30:17Z | 2025-12-30T21:30:32Z |
| ghsa-jc4g-746q-772h | A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSe… | 2025-12-30T18:30:19Z | 2025-12-30T21:30:32Z |
| ghsa-5vw2-j3g7-v489 | A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to injec… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-68980 | N/A | WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Bro… |
designthemes |
WeDesignTech Portfolio |
2025-12-30T10:47:48.858Z | 2025-12-30T22:23:55.769Z |
| cve-2025-68981 | N/A | WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 … |
designthemes |
HomeFix Elementor Portfolio |
2025-12-30T10:47:49.035Z | 2025-12-30T22:21:43.215Z |
| cve-2025-68982 | N/A | WordPress DesignThemes LMS Addon plugin <= 2.6 - Broke… |
designthemes |
DesignThemes LMS Addon |
2025-12-30T10:47:49.216Z | 2025-12-30T22:20:31.813Z |
| cve-2025-68983 | N/A | WordPress Greenmart theme <= 4.2.11 - Local File Inclu… |
thembay |
Greenmart |
2025-12-30T10:47:49.392Z | 2025-12-30T22:19:26.741Z |
| cve-2025-68984 | N/A | WordPress Puca theme <= 2.6.39 - Local File Inclusion … |
thembay |
Puca |
2025-12-30T10:47:49.577Z | 2025-12-30T22:19:09.287Z |
| cve-2025-68985 | N/A | WordPress Aora theme <= 1.3.15 - Local File Inclusion … |
thembay |
Aora |
2025-12-30T10:47:49.767Z | 2025-12-30T22:18:46.080Z |
| cve-2025-68987 | N/A | WordPress Cinerama - A WordPress Theme for Movie Studi… |
Edge-Themes |
Cinerama - A WordPress Theme for Movie Studios and Filmmakers |
2025-12-30T10:47:49.947Z | 2025-12-30T22:16:08.638Z |
| cve-2025-68988 | N/A | WordPress E-Invoice App Malaysia plugin <= 1.1.0 - Sen… |
o2oe |
E-Invoice App Malaysia |
2025-12-30T10:47:50.131Z | 2025-12-30T22:13:39.542Z |
| cve-2025-68989 | N/A | WordPress Contact Form 7 Extension For Mailchimp plugi… |
Renzo Johnson |
Contact Form 7 Extension For Mailchimp |
2025-12-30T10:47:50.363Z | 2025-12-30T22:12:39.183Z |
| cve-2025-68990 | N/A | WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL… |
xenioushk |
BWL Pro Voting Manager |
2025-12-30T10:47:50.548Z | 2025-12-30T22:12:17.928Z |
| cve-2025-47504 | 6.5 (v3.1) | WordPress Custom Checkout Fields for WooCommerce <= 1.… |
WPFactory |
Custom Checkout Fields for WooCommerce |
2025-05-07T14:19:58.472Z | 2025-12-30T21:41:36.629Z |
| cve-2025-15354 | itsourcecode Society Management System add_admin.php s… |
itsourcecode |
Society Management System |
2025-12-30T20:02:07.091Z | 2025-12-30T21:33:06.890Z | |
| cve-2025-15356 | Tenda AC20 PowerSaveSet sscanf buffer overflow |
Tenda |
AC20 |
2025-12-30T20:32:08.560Z | 2025-12-30T21:31:11.375Z | |
| cve-2025-15357 | D-Link DI-7400G+ msp_info.htm command injection |
D-Link |
DI-7400G+ |
2025-12-30T21:02:08.930Z | 2025-12-30T21:30:23.077Z | |
| cve-2025-61594 | 2.7 (v4.0) | URI Credential Leakage Bypass over CVE-2025-27221 |
ruby |
uri |
2025-12-30T21:03:08.990Z | 2025-12-30T21:29:39.048Z |
| cve-2025-13707 | 7.8 (v3.0) | Tencent HunyuanDiT model_resume Deserialization of Unt… |
Tencent |
HunyuanDiT |
2025-12-23T21:33:35.676Z | 2025-12-30T21:25:42.878Z |
| cve-2025-13710 | 7.8 (v3.0) | Tencent HunyuanVideo load_vae Deserialization of Untru… |
Tencent |
HunyuanVideo |
2025-12-23T21:33:42.164Z | 2025-12-30T21:25:02.426Z |
| cve-2025-13714 | 7.8 (v3.0) | Tencent MedicalNet generate_model Deserialization of U… |
Tencent |
MedicalNet |
2025-12-23T21:33:48.324Z | 2025-12-30T21:24:31.489Z |
| cve-2025-13716 | 7.8 (v3.0) | Tencent MimicMotion create_pipeline Deserialization of… |
Tencent |
MimicMotion |
2025-12-23T21:33:52.530Z | 2025-12-30T21:24:07.206Z |
| cve-2025-13708 | 7.8 (v3.0) | Tencent NeuralNLP-NeuralClassifier _load_checkpoint De… |
Tencent |
NeuralNLP-NeuralClassifier |
2025-12-23T21:33:56.341Z | 2025-12-30T21:23:42.843Z |
| cve-2025-14419 | 7.8 (v3.0) | pdfforge PDF Architect PDF File Parsing Memory Corrupt… |
pdfforge |
PDF Architect |
2025-12-23T21:22:50.077Z | 2025-12-30T21:21:34.992Z |
| cve-2025-14418 | 7 (v3.0) | pdfforge PDF Architect XLS File Insufficient UI Warnin… |
pdfforge |
PDF Architect |
2025-12-23T21:22:46.165Z | 2025-12-30T21:21:18.580Z |
| cve-2025-14417 | 7.8 (v3.0) | pdfforge PDF Architect Launch Insufficient UI Warning … |
pdfforge |
PDF Architect |
2025-12-23T21:22:39.324Z | 2025-12-30T21:20:58.670Z |
| cve-2025-14416 | 7 (v3.0) | pdfforge PDF Architect DOC File Insufficient UI Warnin… |
pdfforge |
PDF Architect |
2025-12-23T21:22:31.525Z | 2025-12-30T21:20:40.802Z |
| cve-2025-14405 | 6.6 (v3.0) | PDFsam Enhanced Uncontrolled Search Path Element Local… |
PDFsam |
Enhanced |
2025-12-23T21:21:23.722Z | 2025-12-30T21:20:20.940Z |
| cve-2025-14404 | 7 (v3.0) | PDFsam Enhanced XLS File Insufficient UI Warning Remot… |
PDFsam |
Enhanced |
2025-12-23T21:21:19.483Z | 2025-12-30T21:19:40.721Z |
| cve-2025-14403 | 7.8 (v3.0) | PDFsam Enhanced Launch Insufficient UI Warning Remote … |
PDFsam |
Enhanced |
2025-12-23T21:21:15.464Z | 2025-12-30T21:19:16.247Z |
| cve-2025-14402 | 7 (v3.0) | PDFsam Enhanced DOC File Insufficient UI Warning Remot… |
PDFsam |
Enhanced |
2025-12-23T21:21:10.806Z | 2025-12-30T21:17:50.752Z |
| cve-2025-14401 | 7.8 (v3.0) | PDFsam Enhanced App Out-Of-Bounds Read Remote Code Exe… |
PDFsam |
Enhanced |
2025-12-23T21:20:22.912Z | 2025-12-30T21:17:19.242Z |
| cve-2025-14500 | 9.8 (v3.0) | IceWarp14 X-File-Operation Command Injection Remote Co… |
IceWarp |
IceWarp |
2025-12-23T21:19:24.812Z | 2025-12-30T21:16:49.306Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2022-50876 | N/A | usb: musb: Fix musb_gadget.c rxstate overflow bug |
Linux |
Linux |
2025-12-30T12:23:16.790Z | 2025-12-30T12:23:16.790Z |
| cve-2022-50875 | N/A | of: overlay: fix null pointer dereferencing in find_du… |
Linux |
Linux |
2025-12-30T12:23:16.108Z | 2025-12-30T12:23:16.108Z |
| cve-2022-50874 | N/A | RDMA/erdma: Fix refcount leak in erdma_mmap |
Linux |
Linux |
2025-12-30T12:23:15.388Z | 2025-12-30T12:23:15.388Z |
| cve-2022-50873 | N/A | vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove |
Linux |
Linux |
2025-12-30T12:15:42.705Z | 2025-12-30T12:15:42.705Z |
| cve-2022-50872 | N/A | ARM: OMAP2+: Fix memory leak in realtime_counter_init() |
Linux |
Linux |
2025-12-30T12:15:42.035Z | 2025-12-30T12:15:42.035Z |
| cve-2022-50871 | N/A | wifi: ath11k: Fix qmi_msg_handler data structure initi… |
Linux |
Linux |
2025-12-30T12:15:41.372Z | 2025-12-30T12:15:41.372Z |
| cve-2022-50870 | N/A | powerpc/rtas: avoid device tree lookups in rtas_os_term() |
Linux |
Linux |
2025-12-30T12:15:40.718Z | 2025-12-30T12:15:40.718Z |
| cve-2022-50869 | N/A | fs/ntfs3: Fix slab-out-of-bounds in r_page |
Linux |
Linux |
2025-12-30T12:15:39.879Z | 2025-12-30T12:15:39.879Z |
| cve-2022-50868 | N/A | hwrng: amd - Fix PCI device refcount leak |
Linux |
Linux |
2025-12-30T12:15:39.211Z | 2025-12-30T12:15:39.211Z |
| cve-2022-50867 | N/A | drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage |
Linux |
Linux |
2025-12-30T12:15:38.520Z | 2025-12-30T13:56:57.841Z |
| cve-2022-50866 | N/A | ASoC: pxa: fix null-pointer dereference in filter() |
Linux |
Linux |
2025-12-30T12:15:37.827Z | 2025-12-30T12:15:37.827Z |
| cve-2022-50865 | N/A | tcp: fix a signed-integer-overflow bug in tcp_add_backlog() |
Linux |
Linux |
2025-12-30T12:15:37.150Z | 2025-12-30T12:15:37.150Z |
| cve-2022-50864 | N/A | nilfs2: fix shift-out-of-bounds due to too large expon… |
Linux |
Linux |
2025-12-30T12:15:36.489Z | 2025-12-30T12:15:36.489Z |
| cve-2022-50863 | N/A | wifi: rtw89: free unused skb to prevent memory leak |
Linux |
Linux |
2025-12-30T12:15:35.834Z | 2025-12-30T12:15:35.834Z |
| cve-2022-50862 | N/A | bpf: prevent decl_tag from being referenced in func_proto |
Linux |
Linux |
2025-12-30T12:15:35.177Z | 2025-12-30T12:15:35.177Z |
| cve-2022-50861 | N/A | NFSD: Finish converting the NFSv2 GETACL result encoder |
Linux |
Linux |
2025-12-30T12:15:34.511Z | 2025-12-30T12:15:34.511Z |
| cve-2022-50860 | N/A | apparmor: Fix memleak in alloc_ns() |
Linux |
Linux |
2025-12-30T12:15:33.859Z | 2025-12-30T12:15:33.859Z |
| cve-2022-50859 | N/A | cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO … |
Linux |
Linux |
2025-12-30T12:15:33.198Z | 2025-12-30T12:15:33.198Z |
| cve-2022-50858 | N/A | mmc: alcor: fix return value check of mmc_add_host() |
Linux |
Linux |
2025-12-30T12:15:32.534Z | 2025-12-30T12:15:32.534Z |
| cve-2022-50857 | N/A | rapidio: rio: fix possible name leak in rio_register_mport() |
Linux |
Linux |
2025-12-30T12:15:31.873Z | 2025-12-30T12:15:31.873Z |
| cve-2022-50856 | N/A | cifs: Fix xid leak in cifs_ses_add_channel() |
Linux |
Linux |
2025-12-30T12:15:31.193Z | 2025-12-30T12:15:31.193Z |
| cve-2022-50855 | N/A | bpf: prevent leak of lsm program after failed attach |
Linux |
Linux |
2025-12-30T12:15:30.481Z | 2025-12-30T12:15:30.481Z |
| cve-2022-50854 | N/A | nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() |
Linux |
Linux |
2025-12-30T12:15:29.792Z | 2025-12-30T12:15:29.792Z |
| cve-2022-50853 | N/A | NFSv4: Fix a credential leak in _nfs4_discover_trunking() |
Linux |
Linux |
2025-12-30T12:15:29.104Z | 2025-12-30T12:15:29.104Z |
| cve-2022-50852 | N/A | wifi: mt76: mt7921: fix use after free in mt7921_acpi_read() |
Linux |
Linux |
2025-12-30T12:15:28.444Z | 2025-12-30T12:15:28.444Z |
| cve-2022-50851 | N/A | vhost_vdpa: fix the crash in unmap a large memory |
Linux |
Linux |
2025-12-30T12:15:27.765Z | 2025-12-30T12:15:27.765Z |
| cve-2022-50850 | N/A | scsi: ipr: Fix WARNING in ipr_init() |
Linux |
Linux |
2025-12-30T12:15:27.089Z | 2025-12-30T12:15:27.089Z |
| cve-2022-50849 | N/A | pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP |
Linux |
Linux |
2025-12-30T12:15:26.431Z | 2025-12-30T12:15:26.431Z |
| cve-2022-50848 | N/A | drivers: dio: fix possible memory leak in dio_init() |
Linux |
Linux |
2025-12-30T12:15:25.776Z | 2025-12-30T12:15:25.776Z |
| cve-2022-50847 | N/A | drm/bridge: it6505: Initialize AUX channel in it6505_i… |
Linux |
Linux |
2025-12-30T12:11:03.949Z | 2025-12-30T12:11:03.949Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-50873 | In the Linux kernel, the following vulnerability has been resolved: vdpa/vp_vdpa: fix kfree a wron… | 2025-12-30T13:16:02.263 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50872 | In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: Fix memory leak i… | 2025-12-30T13:16:02.140 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50871 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix qmi_msg_hand… | 2025-12-30T13:16:02.030 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50870 | In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid device tre… | 2025-12-30T13:16:01.887 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50869 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-boun… | 2025-12-30T13:16:01.760 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50868 | In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device re… | 2025-12-30T13:16:01.643 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50867 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs … | 2025-12-30T13:16:01.533 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50866 | In the Linux kernel, the following vulnerability has been resolved: ASoC: pxa: fix null-pointer de… | 2025-12-30T13:16:01.420 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50865 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix a signed-integer-over… | 2025-12-30T13:16:01.317 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50864 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bound… | 2025-12-30T13:16:01.207 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50863 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: free unused skb t… | 2025-12-30T13:16:01.103 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50862 | In the Linux kernel, the following vulnerability has been resolved: bpf: prevent decl_tag from bei… | 2025-12-30T13:16:00.997 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50861 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Finish converting the NF… | 2025-12-30T13:16:00.893 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50860 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc… | 2025-12-30T13:16:00.787 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50859 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the error length of … | 2025-12-30T13:16:00.673 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50858 | In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value c… | 2025-12-30T13:16:00.563 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50857 | In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible nam… | 2025-12-30T13:16:00.437 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50856 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_ses… | 2025-12-30T13:16:00.330 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50855 | In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm progr… | 2025-12-30T13:16:00.223 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50854 | In the Linux kernel, the following vulnerability has been resolved: nfc: virtual_ncidev: Fix memor… | 2025-12-30T13:16:00.117 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50853 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a credential leak i… | 2025-12-30T13:16:00.010 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50852 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix use af… | 2025-12-30T13:15:59.907 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50851 | In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: fix the crash in u… | 2025-12-30T13:15:59.797 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50850 | In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in ipr_… | 2025-12-30T13:15:59.687 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50849 | In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vm… | 2025-12-30T13:15:59.567 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50848 | In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible mem… | 2025-12-30T13:15:59.460 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50847 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize… | 2025-12-30T13:15:59.353 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50846 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: fix return val… | 2025-12-30T13:15:59.243 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50845 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4_x… | 2025-12-30T13:15:59.130 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50844 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second… | 2025-12-30T13:15:59.013 | 2025-12-31T20:43:05.160 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2023-287 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… | nautobot | 2023-12-22T17:15:00+00:00 | 2024-11-21T14:22:55.764934+00:00 |
| pysec-2023-286 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… | nautobot | 2023-12-12T23:15:00+00:00 | 2024-11-21T14:22:55.664554+00:00 |
| pysec-2023-285 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web appl… | nautobot | 2023-11-22T16:15:00+00:00 | 2024-11-21T14:22:55.567982+00:00 |
| pysec-2023-288 | The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify t… | nautobot-device-onboarding | 2023-11-21T23:15:00+00:00 | 2024-11-21T14:22:55.475794+00:00 |
| pysec-2022-43141 | MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET re… | motioneye | 2022-03-24T17:15:00+00:00 | 2024-11-21T14:22:55.422153+00:00 |
| pysec-2023-284 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-23T14:15:00+00:00 | 2024-11-21T14:22:55.160710+00:00 |
| pysec-2023-283 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-19T18:15:00+00:00 | 2024-11-21T14:22:55.105976+00:00 |
| pysec-2023-282 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. | modoboa | 2023-01-19T09:15:00+00:00 | 2024-11-21T14:22:55.051300+00:00 |
| pysec-2023-281 | Improper Neutralization of Special Elements Used in a Template Engine in GitHub repositor… | mlflow | 2023-12-12T04:15:00+00:00 | 2024-11-21T14:22:54.938745+00:00 |
| pysec-2023-280 | OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0. | mlflow | 2023-08-01T01:15:00+00:00 | 2024-11-21T14:22:54.880705+00:00 |
| pysec-2023-279 | MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the `put… | mindsdb | 2023-12-22T21:15:00+00:00 | 2024-11-21T14:22:54.549778+00:00 |
| pysec-2023-277 | MindsDB connects artificial intelligence models to real time data. Versions prior to 23.1… | mindsdb | 2023-12-11T19:15:00+00:00 | 2024-11-21T14:22:54.391272+00:00 |
| pysec-2014-110 | Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_fo… | mayan-edms | 2014-05-27T13:55:00Z | 2024-11-21T14:22:54.240407Z |
| pysec-2022-43137 | LIEF commit 365a16a was discovered to contain a reachable assertion abort via the compone… | lief | 2022-09-13T21:15:00+00:00 | 2024-11-21T14:22:53.842904+00:00 |
| pysec-2024-128 | Label Studio, an open source data labeling tool had a remote import feature allowed users… | label-studio | 2024-01-24T00:15:00+00:00 | 2024-11-21T14:22:53.406222+00:00 |
| pysec-2023-275 | Label Studio is an open source data labeling tool. In all current versions of Label Studi… | label-studio | 2023-11-13T21:15:00+00:00 | 2024-11-21T14:22:53.350760+00:00 |
| pysec-2024-127 | Label Studio is a popular open source data labeling tool. The vulnerability affects all v… | label-studio | 2024-01-31T17:15:00+00:00 | 2024-11-21T14:22:53.294472+00:00 |
| pysec-2024-126 | Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have… | label-studio | 2024-01-23T23:15:00+00:00 | 2024-11-21T14:22:53.235341+00:00 |
| pysec-2023-274 | Label Studio is a multi-type data labeling and annotation tool with standardized output f… | label-studio | 2023-11-09T15:15:00+00:00 | 2024-11-21T14:22:53.173192+00:00 |
| pysec-2017-144 | Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around bla… | koji | 2017-10-06T17:29:00Z | 2024-11-21T14:22:53.117821Z |
| pysec-2023-273 | Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and … | kiwitcms | 2023-04-24T22:15:00+00:00 | 2024-11-21T14:22:53.063160+00:00 |
| pysec-2013-40 | OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs … | keystone | 2013-05-21T18:55:00Z | 2024-11-21T14:22:52.515884Z |
| pysec-2012-35 | OpenStack Keystone Essex (2012.1) and Folsom (2012.2) does not properly handle EC2 tokens… | keystone | 2012-12-18T01:55:00Z | 2024-11-21T14:22:52.404569Z |
| pysec-2012-34 | OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenS… | keystone | 2012-07-31T10:45:00Z | 2024-11-21T14:22:52.344123Z |
| pysec-2018-151 | An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 a… | jupyterhub | 2018-02-18T03:29:00Z | 2024-11-21T14:22:52.286953Z |
| pysec-2023-272 | The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints… | jupyter-server | 2023-12-04T21:15:00+00:00 | 2024-11-21T14:22:52.227754+00:00 |
| pysec-2018-150 | Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to transaction and … | iroha | 2018-06-01T19:29:00Z | 2024-11-21T14:22:52.162008Z |
| pysec-2014-104 | FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote att… | ipa | 2014-11-19T18:59:00Z | 2024-11-21T14:22:52.00819Z |
| pysec-2014-103 | The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNT… | ipa | 2014-05-29T14:19:00Z | 2024-11-21T14:22:51.957056Z |
| pysec-2013-38 | The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification… | ipa | 2013-01-27T18:55:00Z | 2024-11-21T14:22:51.898526Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4165 | A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.17(9502)… | 2024-04-26T05:02:17.438286Z |
| gsd-2024-4179 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.438004Z |
| gsd-2024-4197 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.437306Z |
| gsd-2024-4188 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.437066Z |
| gsd-2024-4171 | A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affecte… | 2024-04-26T05:02:17.434975Z |
| gsd-2024-4221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.433755Z |
| gsd-2024-4210 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.431459Z |
| gsd-2024-4200 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.430960Z |
| gsd-2024-4204 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.429356Z |
| gsd-2024-4175 | Unicode transformation vulnerability in Hyperion affecting version 2.0.15. This vulnerabi… | 2024-04-26T05:02:17.424356Z |
| gsd-2024-4225 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.423760Z |
| gsd-2024-4223 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.423284Z |
| gsd-2024-4206 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.423074Z |
| gsd-2024-4199 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.422865Z |
| gsd-2024-4177 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.421751Z |
| gsd-2024-4198 | Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully vali… | 2024-04-26T05:02:17.420758Z |
| gsd-2024-4164 | A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.17(… | 2024-04-26T05:02:17.419490Z |
| gsd-2024-4180 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.418368Z |
| gsd-2024-4190 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.415072Z |
| gsd-2024-4211 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.414864Z |
| gsd-2024-4216 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.414356Z |
| gsd-2024-4224 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.414154Z |
| gsd-2024-4194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.413687Z |
| gsd-2024-4169 | A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This … | 2024-04-26T05:02:17.413039Z |
| gsd-2024-4167 | A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by … | 2024-04-26T05:02:17.405786Z |
| gsd-2024-4202 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.405198Z |
| gsd-2024-4209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.403437Z |
| gsd-2024-4201 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.401052Z |
| gsd-2024-4181 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.398953Z |
| gsd-2024-4168 | A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. Thi… | 2024-04-26T05:02:17.398024Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192976 | Malicious code in shop-minis-docs (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192975 | Malicious code in rt-text-media-collection (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192974 | Malicious code in rt-interactive-card-collection (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192973 | Malicious code in react-dom-bindings (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192972 | Malicious code in react-devtools-shared (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192971 | Malicious code in react-devtools-extensions (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:38Z |
| mal-2025-192977 | Malicious code in shopify-app-react-router (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:28Z |
| mal-2025-192966 | Malicious code in cdd-plugin-for-datawarrior (npm) | 2025-12-30T16:12:28Z | 2025-12-30T16:12:28Z |
| mal-2025-192968 | Malicious code in express-js-web (npm) | 2025-12-30T16:12:03Z | 2025-12-30T16:12:04Z |
| mal-2025-192964 | Malicious code in @peter_wilson12091/internal-json-test-parser (npm) | 2025-12-30T16:12:03Z | 2025-12-30T16:12:04Z |
| mal-2025-192978 | Malicious code in tailwindcss-typography-style (npm) | 2025-12-30T16:05:07Z | 2025-12-30T16:05:08Z |
| mal-2025-192969 | Malicious code in pepsico-ds (npm) | 2025-12-30T15:57:26Z | 2025-12-30T15:57:27Z |
| mal-2025-192963 | Malicious code in @bugdtest/test1 (npm) | 2025-12-30T15:57:26Z | 2025-12-30T15:57:27Z |
| mal-0000-kam193-8ddff882bfe186cc | Pentesting or research code in rippling-cli (PyPI) | 2025-12-30T10:00:51Z | 2025-12-30T10:00:53Z |
| mal-0000-kam193-a5e82ba558a433d6 | Pentesting or research code in awsutil (PyPI) | 2025-12-29T21:57:34Z | 2025-12-29T21:57:34Z |
| mal-2025-192960 | Malicious code in kcheck (npm) | 2025-12-29T15:45:39Z | 2025-12-29T16:09:42Z |
| mal-2025-192959 | Malicious code in intl-tel-input-utils (npm) | 2025-12-29T15:00:48Z | 2025-12-29T16:09:42Z |
| mal-0000-kam193-7a913c42577c1aac | Malicious code in cryptozip (PyPI) | 2025-12-28T19:49:40Z | 2025-12-29T12:13:22Z |
| mal-2025-192579 | Malicious code in smtblib (PyPI) | 2025-12-15T15:24:47Z | 2025-12-29T11:08:56Z |
| mal-2025-192958 | Malicious code in smtmlib (PyPI) | 2025-12-29T10:04:23Z | 2025-12-29T10:08:51Z |
| mal-2025-192957 | Malicious code in crypto-trade-analyzer (npm) | 2025-12-29T07:45:42Z | 2025-12-29T07:45:42Z |
| mal-0000-kam193-04bd21d6e982435e | Malicious code in aiogram-types-v3 (PyPI) | 2025-12-28T01:44:36Z | 2025-12-28T19:40:03Z |
| mal-2025-192955 | Malicious code in eslint-config-pexip-engage (npm) | 2025-12-28T17:50:47Z | 2025-12-28T17:50:47Z |
| mal-2025-192952 | Malicious code in eslint-config-sdk (npm) | 2025-12-27T20:20:29Z | 2025-12-28T17:39:25Z |
| mal-2025-192954 | Malicious code in api-umbrella-admin-ui (npm) | 2025-12-28T15:05:48Z | 2025-12-28T15:05:48Z |
| mal-2025-192951 | Malicious code in ugc-kit (npm) | 2025-12-27T17:21:21Z | 2025-12-27T17:21:21Z |
| mal-2025-192949 | Malicious code in ing-feat-malware-detection (npm) | 2025-12-27T17:11:12Z | 2025-12-27T17:11:12Z |
| mal-2025-192950 | Malicious code in ing-feat-ui-image (npm) | 2025-12-27T17:11:08Z | 2025-12-27T17:11:08Z |
| mal-2025-192934 | Malicious code in ing-feat-kyc-consent (npm) | 2025-12-25T18:55:12Z | 2025-12-27T16:09:26Z |
| mal-2025-192948 | Malicious code in extrazip (PyPI) | 2025-12-27T09:41:01Z | 2025-12-27T09:41:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-2344 | Checkmk: Schwachstelle ermöglicht Cross-Site Scripting | 2025-10-20T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2339 | ImageMagick (BMP decoder): Schwachstelle ermöglicht Denial of Service | 2025-10-19T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2317 | Ubiquiti UniFi: Schwachstelle ermöglicht Ausführung von Debug-Funktionen | 2025-10-15T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2274 | Veeam Backup & Replication: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2247 | Nvidia GPU Display Treiber: Mehrere Schwachstellen | 2025-10-08T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2209 | HAProxy und HAProxy ALOHA: Schwachstelle ermöglicht Denial of Service | 2025-10-05T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2150 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-29T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2134 | Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Denial of Service | 2025-09-25T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2132 | Linux Kernel: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2114 | Dell PowerEdge BIOS und iDRAC9: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-09-23T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2078 | Red Hat Enterprise Linux (Developer Hub): Mehrere Schwachstellen | 2025-09-16T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2039 | CUPS: Mehrere Schwachstellen | 2025-09-11T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2002 | libssh: Schwachstelle ermöglicht Denial of Service | 2025-09-09T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1974 | Podman: Schwachstelle ermöglicht Manipulation von Dateien | 2025-09-04T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-1921 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2025-08-27T22:00:00.000+00:00 | 2025-10-30T23:00:00.000+00:00 |
| wid-sec-w-2025-2440 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2015-11-22T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2395 | Rancher Manager: Mehrere Schwachstellen | 2025-10-23T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2390 | PowerDNS Recursor: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2385 | Drupal Module: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2275 | Mozilla Firefox: Mehrere Schwachstellen | 2025-10-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2126 | Drupal Module: Mehrere Schwachstellen | 2025-09-24T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1954 | Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-03T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1785 | Intel Prozessoren: Mehrere Schwachstellen | 2025-08-12T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1656 | Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten | 2025-07-27T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1350 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-17T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1055 | Node.js: Mehrere Schwachstellen | 2025-05-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0403 | libxml2: Mehrere Schwachstellen | 2025-02-18T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-3338 | Red Hat OpenShift: Mehrere Schwachstelle | 2024-11-05T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-1547 | OpenSSH auf Red Hat Enterprise Linux 9: Schwachstelle ermöglicht Denial of Service | 2024-07-08T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-3022 | Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung | 2023-11-28T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| SSA-822518 | SSA-822518: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices | 2024-04-09T00:00:00Z | 2024-12-10T00:00:00Z |
| SSA-813746 | SSA-813746: BadAlloc Vulnerabilities in SCALANCE X-200, X-200IRT, and X-300 Switch Families | 2023-04-11T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-784301 | SSA-784301: Multiple Vulnerabilities in SINEC NMS Before V3.0 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-771940 | SSA-771940: X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go | 2024-06-11T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-750499 | SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices | 2024-07-09T00:00:00Z | 2025-11-11T00:00:00Z |
| SSA-722010 | SSA-722010: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go | 2024-07-09T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-720392 | SSA-720392: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-716317 | SSA-716317: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-686975 | SSA-686975: IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs | 2023-02-14T00:00:00Z | 2025-04-08T00:00:00Z |
| SSA-659443 | SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-640968 | SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server | 2023-02-14T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-625850 | SSA-625850: Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager | 2023-11-14T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-417547 | SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-407785 | SSA-407785: Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization | 2023-08-08T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-357412 | SSA-357412: PRT File Parsing Vulnerability in NX Before V2406.3000 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-180704 | SSA-180704: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-116924 | SSA-116924: Path Traversal Vulnerability in TIA Portal | 2023-04-11T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-087301 | SSA-087301: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1 | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| SSA-068047 | SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2 | 2023-12-12T00:00:00Z | 2024-08-13T00:00:00Z |
| ssa-071402 | SSA-071402: Multiple Vulnerabilities in SICAM Products | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| SSA-071402 | SSA-071402: Multiple Vulnerabilities in SICAM Products | 2024-07-22T00:00:00Z | 2024-07-22T00:00:00Z |
| ssa-998949 | SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-484086 | SSA-484086: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.1 | 2022-06-14T00:00:00Z | 2024-07-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:6154 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.0 | 2023-11-01T00:30:41+00:00 | 2025-11-29T06:49:53+00:00 |
| rhsa-2023:6148 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.7.9 security and bug fix updates | 2023-10-26T19:18:44+00:00 | 2025-11-29T06:49:52+00:00 |
| rhsa-2023:6145 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.2.9 security updates and bug fixes | 2023-10-26T18:17:34+00:00 | 2025-11-29T06:49:52+00:00 |
| rhsa-2023:6143 | Red Hat Security Advisory: OpenShift Container Platform 4.14.0 CNF vRAN extras security update | 2023-10-26T16:29:51+00:00 | 2025-11-29T06:49:52+00:00 |
| rhsa-2023:6129 | Red Hat Security Advisory: OpenShift Container Platform 4.13.19 security and extras update | 2023-10-30T12:59:18+00:00 | 2025-11-29T06:49:51+00:00 |
| rhsa-2023:6126 | Red Hat Security Advisory: OpenShift Container Platform 4.12.41 bug fix and security update | 2023-11-01T11:07:20+00:00 | 2025-11-29T06:49:50+00:00 |
| rhsa-2023:6125 | Red Hat Security Advisory: OpenShift Container Platform 4.12.41 security and extras update | 2023-11-01T10:27:35+00:00 | 2025-11-29T06:49:50+00:00 |
| rhsa-2023:6122 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.3 security and bug fix updates | 2023-10-25T17:59:37+00:00 | 2025-11-29T06:49:50+00:00 |
| rhsa-2023:6121 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.1 security and bug fix update | 2023-10-25T15:56:00+00:00 | 2025-11-29T06:49:50+00:00 |
| rhsa-2023:6119 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.3.3 security updates and bug fixes | 2023-10-25T15:52:14+00:00 | 2025-11-29T06:49:49+00:00 |
| rhsa-2023:6118 | Red Hat Security Advisory: OpenShift API for Data Protection security update | 2023-10-25T14:23:36+00:00 | 2025-11-29T06:49:49+00:00 |
| rhsa-2023:6116 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.14 security and bug fix update | 2023-10-25T14:16:47+00:00 | 2025-11-29T06:49:49+00:00 |
| rhsa-2023:6115 | Red Hat Security Advisory: OpenShift API for Data Protection security update | 2023-10-25T14:01:58+00:00 | 2025-11-29T06:49:48+00:00 |
| rhsa-2023:6085 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing security update | 2023-10-24T15:32:35+00:00 | 2025-11-29T06:49:48+00:00 |
| rhsa-2023:6084 | Red Hat Security Advisory: RHACS 3.74 enhancement and security update | 2023-10-24T14:57:00+00:00 | 2025-11-29T06:49:48+00:00 |
| rhsa-2023:6077 | Red Hat Security Advisory: toolbox security update | 2023-10-24T12:18:38+00:00 | 2025-11-29T06:49:47+00:00 |
| rhsa-2023:6071 | Red Hat Security Advisory: RHACS 4.0 enhancement and security update | 2023-10-24T09:41:00+00:00 | 2025-11-29T06:49:47+00:00 |
| rhsa-2023:6061 | Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.12.1 release and security update | 2023-10-23T21:57:37+00:00 | 2025-11-29T06:49:47+00:00 |
| rhsa-2023:6059 | Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update | 2023-10-23T21:20:26+00:00 | 2025-11-29T06:49:46+00:00 |
| rhsa-2023:6057 | Red Hat Security Advisory: toolbox security update | 2023-10-23T21:13:36+00:00 | 2025-11-29T06:49:46+00:00 |
| rhsa-2023:6048 | Red Hat Security Advisory: ACS 4.2 enhancement and security update | 2023-10-23T20:24:48+00:00 | 2025-11-29T06:49:46+00:00 |
| rhsa-2023:6044 | Red Hat Security Advisory: Cost Management security update | 2023-10-23T19:21:34+00:00 | 2025-11-29T06:49:46+00:00 |
| rhsa-2023:6042 | Red Hat Security Advisory: Self Node Remediation Operator 0.5.1 security update | 2023-10-23T18:39:36+00:00 | 2025-11-29T06:49:45+00:00 |
| rhsa-2023:6041 | Red Hat Security Advisory: Self Node Remediation Operator 0.7.1 security update | 2023-10-23T18:31:18+00:00 | 2025-11-29T06:49:45+00:00 |
| rhsa-2023:6040 | Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update | 2023-10-23T18:30:57+00:00 | 2025-11-29T06:49:45+00:00 |
| rhsa-2023:6039 | Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update | 2023-10-23T18:30:46+00:00 | 2025-11-29T06:49:44+00:00 |
| rhsa-2023:6031 | Red Hat Security Advisory: Cryostat security update | 2023-10-23T14:24:36+00:00 | 2025-11-29T06:49:44+00:00 |
| rhsa-2023:5982 | Red Hat Security Advisory: Red Hat Satellite Client security and bug fix update | 2023-10-20T22:28:07+00:00 | 2025-11-29T06:49:44+00:00 |
| rhsa-2023:5980 | Red Hat Security Advisory: Satellite 6.11.5.6 async security update | 2023-10-20T18:46:14+00:00 | 2025-11-29T06:49:43+00:00 |
| rhsa-2023:5979 | Red Hat Security Advisory: Satellite 6.12.5.2 Async Security Update | 2023-10-20T18:45:24+00:00 | 2025-11-29T06:49:43+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-39850 | vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects | 2025-09-02T00:00:00.000Z | 2025-12-16T01:38:07.000Z |
| msrc_cve-2024-58241 | Bluetooth: hci_core: Disable works on hci_unregister_dev | 2025-09-02T00:00:00.000Z | 2025-12-16T01:38:02.000Z |
| msrc_cve-2025-40345 | usb: storage: sddr55: Reject out-of-bound new_pba | 2025-12-02T00:00:00.000Z | 2025-12-16T01:37:53.000Z |
| msrc_cve-2023-53370 | drm/amdgpu: fix memory leak in mes self test | 2025-09-02T00:00:00.000Z | 2025-12-16T01:37:37.000Z |
| msrc_cve-2022-50418 | wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register() | 2025-09-02T00:00:00.000Z | 2025-12-16T01:37:32.000Z |
| msrc_cve-2022-50393 | drm/amdgpu: SDMA update use unlocked iterator | 2025-09-02T00:00:00.000Z | 2025-12-16T01:37:27.000Z |
| msrc_cve-2025-6856 | HDF5 H5FL.c H5FL__reg_gc_list use after free | 2025-06-02T00:00:00.000Z | 2025-12-16T01:37:20.000Z |
| msrc_cve-2025-39925 | can: j1939: implement NETDEV_UNREGISTER notification handler | 2025-10-02T00:00:00.000Z | 2025-12-16T01:37:16.000Z |
| msrc_cve-2023-53387 | scsi: ufs: core: Fix device management cmd timeout flow | 2025-09-02T00:00:00.000Z | 2025-12-16T01:37:11.000Z |
| msrc_cve-2023-53367 | accel/habanalabs: fix mem leak in capture user mappings | 2025-09-02T00:00:00.000Z | 2025-12-16T01:37:04.000Z |
| msrc_cve-2025-49180 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension | 2025-06-02T00:00:00.000Z | 2025-12-16T01:36:59.000Z |
| msrc_cve-2025-49178 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore | 2025-06-02T00:00:00.000Z | 2025-12-16T01:36:53.000Z |
| msrc_cve-2023-53410 | USB: ULPI: fix memory leak with using debugfs_lookup() | 2025-09-02T00:00:00.000Z | 2025-12-16T01:36:48.000Z |
| msrc_cve-2022-50406 | iomap: iomap: fix memory corruption when recording errors during writeback | 2025-09-02T00:00:00.000Z | 2025-12-16T01:36:42.000Z |
| msrc_cve-2025-2913 | HDF5 H5FL.c H5FL__blk_gc_list use after free | 2025-03-02T00:00:00.000Z | 2025-12-16T01:36:11.000Z |
| msrc_cve-2025-2923 | HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow | 2025-03-02T00:00:00.000Z | 2025-12-16T01:35:56.000Z |
| msrc_cve-2025-2486 | UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu | 2025-11-02T00:00:00.000Z | 2025-12-16T01:35:27.000Z |
| msrc_cve-2025-11933 | DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension | 2025-11-02T00:00:00.000Z | 2025-12-16T01:35:19.000Z |
| msrc_cve-2025-11934 | Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify | 2025-11-02T00:00:00.000Z | 2025-12-16T01:35:10.000Z |
| msrc_cve-2025-37731 | Elasticsearch Improper Authentication | 2025-12-02T00:00:00.000Z | 2025-12-16T01:01:28.000Z |
| msrc_cve-2025-39905 | net: phylink: add lock for serializing concurrent pl->phydev writes with resolver | 2025-10-02T00:00:00.000Z | 2025-12-15T14:36:33.000Z |
| msrc_cve-2025-39901 | i40e: remove read access to debugfs files | 2025-10-02T00:00:00.000Z | 2025-12-15T14:36:28.000Z |
| msrc_cve-2025-39863 | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 2025-09-02T00:00:00.000Z | 2025-12-15T14:36:24.000Z |
| msrc_cve-2023-53376 | scsi: mpi3mr: Use number of bits to manage bitmap sizes | 2025-09-02T00:00:00.000Z | 2025-12-15T14:36:14.000Z |
| msrc_cve-2025-14174 | Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE | 2025-12-09T08:00:00.000Z | 2025-12-15T08:00:00.000Z |
| msrc_cve-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 2025-12-02T00:00:00.000Z | 2025-12-13T01:39:00.000Z |
| msrc_cve-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 2025-12-02T00:00:00.000Z | 2025-12-13T01:38:50.000Z |
| msrc_cve-2025-61725 | Excessive CPU consumption in ParseAddress in net/mail | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:56.000Z |
| msrc_cve-2025-47912 | Insufficient validation of bracketed IPv6 hostnames in net/url | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:52.000Z |
| msrc_cve-2025-58188 | Panic when validating certificates with DSA public keys in crypto/x509 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:47.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-20-105-08 | Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update D) | 2020-04-14T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-15-335-03 | Siemens SIMATIC Communication Processor Vulnerability (Update C) | 2015-11-27T00:00:00.000000Z | 2025-07-08T00:00:00.000000Z |
| icsa-25-184-04 | Mitsubishi Electric MELSEC iQ-F Series | 2025-07-03T06:00:00.000000Z | 2025-07-03T06:00:00.000000Z |
| icsa-25-184-03 | Mitsubishi Electric MELSOFT Update Manager | 2025-07-03T06:00:00.000000Z | 2025-07-03T06:00:00.000000Z |
| icsa-25-184-02 | Hitachi Energy MicroSCADA X SYS600 | 2025-07-03T06:00:00.000000Z | 2025-07-03T06:00:00.000000Z |
| va-25-169-01 | Versa Networks Versa Director multiple vulnerabilities | 2025-07-02T20:57:00Z | 2025-07-02T20:57:00Z |
| icsa-25-182-05 | Voltronic Power and PowerShield UPS monitoring software | 2025-07-01T06:00:00.000000Z | 2025-07-01T06:00:00.000000Z |
| icsa-16-306-02 | IBHsoftec S7-SoftPLC CPX43 Heap-based Buffer Overflow Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-26T14:48:20.911473Z |
| icsa-16-287-07a | Kabona AB WDC Vulnerabilities (Update A) | 2016-07-17T06:00:00.000000Z | 2025-06-26T14:47:55.479923Z |
| icsa-25-177-02 | TrendMakers Sight Bulb Pro | 2025-06-26T05:00:00.000000Z | 2025-06-26T05:00:00.000000Z |
| icsa-15-202-02 | Siemens Sm@rtClient Password Storage Vulnerability | 2015-04-23T06:00:00.000000Z | 2025-06-25T22:54:14.268360Z |
| icsa-15-202-01 | Siemens SIPROTEC Denial-of-Service Vulnerability | 2015-04-23T06:00:00.000000Z | 2025-06-25T22:54:08.041405Z |
| icsa-15-062-02 | Rockwell Automation FactoryTalk DLL Hijacking Vulnerabilities | 2015-12-04T07:00:00.000000Z | 2025-06-25T22:54:01.269590Z |
| icsa-14-086-01a | Schneider Electric Serial Modbus Driver Buffer Overflow (Update A) | 2014-12-28T07:00:00.000000Z | 2025-06-25T22:09:32.885385Z |
| icsa-13-254-01 | Siemens SCALANCE X-200 Web Hijack Vulnerability | 2013-06-14T06:00:00.000000Z | 2025-06-25T21:45:19.939275Z |
| icsa-13-140-01 | Mitsubishi Electric Automation MX Component V3 ActiveX Vulnerability | 2013-02-21T07:00:00.000000Z | 2025-06-25T21:45:13.353340Z |
| icsa-12-256-01 | Siemens WinCC WebNavigator Multiple Vulnerabilities | 2012-06-16T06:00:00.000000Z | 2025-06-25T18:57:28.717208Z |
| icsa-12-145-02 | xArrow Multiple Vulnerabilities | 2012-02-25T07:00:00.000000Z | 2025-06-25T18:57:03.441531Z |
| icsa-11-122-01 | AzeoTech DAQFactory Networking Vulnerabilities | 2011-02-02T07:00:00.000000Z | 2025-06-25T18:13:52.027870Z |
| icsa-16-231-01-0 | Locus Energy LGate Command Injection Vulnerability | 2016-05-22T06:00:00.000000Z | 2025-06-25T18:13:45.800180Z |
| icsa-16-231-01 | Navis WebAccess SQL Injection Vulnerability | 2016-05-22T06:00:00.000000Z | 2025-06-25T18:13:39.538321Z |
| icsa-16-208-01c | Siemens SIMATIC WinCC, PCS 7, and WinCC Runtime Professional Vulnerabilities (Update C) | 2016-04-29T06:00:00.000000Z | 2025-06-25T18:13:26.602224Z |
| icsa-16-189-01 | WECON LeviStudio Buffer Overflow Vulnerabilities | 2016-04-10T06:00:00.000000Z | 2025-06-25T15:02:08.772345Z |
| icsa-15-335-02 | Schneider Electric ProClima ActiveX Control Vulnerabilities | 2015-09-03T06:00:00.000000Z | 2025-06-25T15:02:02.107190Z |
| icsa-25-182-07 | Hitachi Energy MSM | 2025-06-24T12:30:00.000000Z | 2025-06-24T12:30:00.000000Z |
| icsa-25-175-07 | MICROSENS NMP Web+ | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-175-06 | Parsons AccuWeather widget | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-175-05 | ControlID iDSecure On-premises | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-175-02 | Delta Electronics CNCSoft | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-175-01 | Kaleris Navis N4 Terminal Operating System | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cpp-vfr-dos-nhhkggo | Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-cpp-vfr-dos-nhHKGgO | Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-c9800-cwa-acl-npsbhsna | Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-c9800-cwa-acl-nPSbHSnA | Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability | 2024-09-25T16:00:00+00:00 | 2024-09-25T16:00:00+00:00 |
| cisco-sa-nso-auth-bypass-qnteesp | Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-25T13:05:54+00:00 |
| cisco-sa-nso-auth-bypass-QnTEesp | Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-25T13:05:54+00:00 |
| cisco-sa-cucm-xss-9zmfhyz | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-09-20T15:48:56+00:00 |
| cisco-sa-cucm-xss-9zmfHyZ | Cisco Unified Communications Manager Cross-Site Scripting Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-09-20T15:48:56+00:00 |
| cisco-sa-nxos-cmd-injection-xd9ohyop | Cisco NX-OS Software CLI Command Injection Vulnerability | 2024-07-01T16:00:00+00:00 | 2024-09-17T18:05:20+00:00 |
| cisco-sa-nxos-cmd-injection-xD9OhyOP | Cisco NX-OS Software CLI Command Injection Vulnerability | 2024-07-01T16:00:00+00:00 | 2024-09-17T18:05:20+00:00 |
| cisco-sa-openssh-rce-2024 | Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024 | 2024-07-02T16:00:00+00:00 | 2024-09-13T14:43:44+00:00 |
| cisco-sa-pak-mem-exhst-3ke9fefy | Cisco IOS XR Software UDP Packet Memory Exhaustion Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-pak-mem-exhst-3ke9FeFy | Cisco IOS XR Software UDP Packet Memory Exhaustion Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-l2services-2mvhdnuc | Cisco IOS XR Software Network Convergence System Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-l2services-2mvHdNuC | Cisco IOS XR Software Network Convergence System Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-isis-xehpbvne | Cisco IOS XR Software Segment Routing for Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-isis-xehpbVNe | Cisco IOS XR Software Segment Routing for Intermediate System-to-Intermediate System Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-xml-tcpdos-zexvru2s | Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-xml-tcpdos-ZEXvrU2S | Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-shellutil-hcb278wd | Cisco IOS XR Software CLI Arbitrary File Read Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-shellutil-HCb278wD | Cisco IOS XR Software CLI Arbitrary File Read Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-priv-esc-crg5vhcq | Cisco IOS XR Software CLI Privilege Escalation Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-priv-esc-CrG5vhCq | Cisco IOS XR Software CLI Privilege Escalation Vulnerability | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-ponctlr-ci-ohchmsfl | Cisco Routed Passive Optical Network Controller Vulnerabilities | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-iosxr-ponctlr-ci-OHcHmsFL | Cisco Routed Passive Optical Network Controller Vulnerabilities | 2024-09-11T16:00:00+00:00 | 2024-09-11T16:00:00+00:00 |
| cisco-sa-ise-info-exp-vdf8jbyk | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-09-05T13:14:02+00:00 |
| cisco-sa-ise-info-exp-vdF8Jbyk | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-09-05T13:14:02+00:00 |
| cisco-sa-meraki-agent-dll-hj-ptn7ptke | Cisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-meraki-agent-dll-hj-Ptn7PtKe | Cisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-ise-injection-6kn9tsxm | Cisco Identity Services Engine Command Injection Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-202201-0437 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. vim Exists in an ou… | 2024-11-29T22:02:07.422000Z |
| var-201511-0027 | The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the par… | 2024-11-29T22:02:07.192000Z |
| var-202008-1238 | In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.… | 2024-11-29T22:02:04.538000Z |
| var-201801-1712 | Systems with microprocessors utilizing speculative execution and branch prediction may al… | 2024-11-29T22:02:02.873000Z |
| var-201912-0633 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:01:54.100000Z |
| var-200102-0027 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of … | 2024-11-29T22:01:53.041000Z |
| var-202006-1806 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression… | 2024-11-29T22:01:50.756000Z |
| var-201302-0249 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T22:01:49.999000Z |
| var-201411-0450 | parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when ent… | 2024-11-29T22:01:48.300000Z |
| var-201902-0360 | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popov… | 2024-11-29T22:01:48.238000Z |
| var-200505-0350 | The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an ap… | 2024-11-29T22:01:37.279000Z |
| var-201912-0648 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T22:01:37.211000Z |
| var-202110-1705 | The Snappy frame decoder function doesn't restrict the chunk length which may lead to exc… | 2024-11-29T22:01:36.083000Z |
| var-201705-3649 | There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1… | 2024-11-29T22:01:35.644000Z |
| var-200807-0062 | JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not pr… | 2024-11-29T22:01:02.133000Z |
| var-201806-1470 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-11-29T22:01:01.205000Z |
| var-201806-1466 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari be… | 2024-11-29T22:00:29.580000Z |
| var-200309-0035 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may… | 2024-11-29T21:59:58.812000Z |
| var-201504-0479 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle … | 2024-11-29T21:59:58.610000Z |
| var-202006-1636 | An input validation issue was addressed with improved input validation. This issue is fix… | 2024-11-29T21:59:53.615000Z |
| var-201904-1404 | A use after free issue was addressed with improved memory management. This issue affected… | 2024-11-29T21:59:52.950000Z |
| var-200106-0035 | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attack… | 2024-11-29T21:59:47.470000Z |
| var-201702-0880 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … | 2024-11-29T21:59:46.061000Z |
| var-201602-0272 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use… | 2024-11-29T21:59:37.715000Z |
| var-201511-0126 | Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpn… | 2024-11-29T21:59:37.477000Z |
| var-202012-1279 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation … | 2024-11-29T21:59:36.977000Z |
| var-201904-0756 | A memory corruption issue was addressed with improved memory handling. This issue affecte… | 2024-11-29T21:59:35.712000Z |
| var-200904-0813 | The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.1… | 2024-11-29T21:59:34.749000Z |
| var-200102-0098 | FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a … | 2024-11-29T21:59:33.655000Z |
| var-201912-0501 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T21:59:30.825000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-000055 | Booked vulnerable to open redirect | 2022-07-22T13:40+09:00 | 2024-06-14T17:43+09:00 |
| jvndb-2022-002265 | Trend Micro Endpoint security products for enterprises vulnerable to Link Following Local Privilege Escalation | 2022-08-18T15:45+09:00 | 2024-06-14T17:11+09:00 |
| jvndb-2022-000056 | Multiple vulnerabilities in Nintendo Wi-Fi Network Adaptor WAP-001 | 2022-07-29T13:43+09:00 | 2024-06-14T16:27+09:00 |
| jvndb-2023-001215 | Zuken Elmic KASAGO uses insufficient random values for TCP Initial Sequence Numbers | 2023-02-13T14:18+09:00 | 2024-06-14T15:45+09:00 |
| jvndb-2022-002112 | CONTEC SolarView Compact vulnerable to insufficient verification in uploading files | 2022-08-03T17:40+09:00 | 2024-06-14T15:21+09:00 |
| jvndb-2022-000059 | "Hulu" App for Android uses a hard-coded API key for an external service | 2022-07-28T09:14+09:00 | 2024-06-14T14:42+09:00 |
| jvndb-2022-002338 | PLANEX MZK-DP150N contains hidden administrative functionality | 2022-08-23T15:02+09:00 | 2024-06-14T14:06+09:00 |
| jvndb-2022-000054 | Multiple vulnerabilities in Cybozu Office | 2022-07-20T17:28+09:00 | 2024-06-14T14:02+09:00 |
| jvndb-2022-000060 | "Hulu" App for iOS vulnerable to improper server certificate verification | 2022-07-28T09:51+09:00 | 2024-06-14T12:25+09:00 |
| jvndb-2022-000063 | PukiWiki vulnerable to cross-site scripting | 2022-08-23T14:40+09:00 | 2024-06-14T12:00+09:00 |
| jvndb-2022-002339 | Multiple vulnerabilities in PukiWiki | 2022-08-24T14:17+09:00 | 2024-06-14T11:55+09:00 |
| jvndb-2022-000065 | Multiple vulnerabilities in Exment | 2022-08-24T14:23+09:00 | 2024-06-14T11:09+09:00 |
| jvndb-2022-002337 | UNIMO Technology digital video recorders vulnerable to missing authentication for critical functions | 2022-08-23T14:31+09:00 | 2024-06-14T10:24+09:00 |
| jvndb-2022-000064 | Movable Type XMLRPC API vulnerable to command injection | 2022-08-24T15:58+09:00 | 2024-06-13T18:11+09:00 |
| jvndb-2023-001291 | Multiple vulnerabilities in Trend Micro Maximum Security | 2023-03-03T11:10+09:00 | 2024-06-13T17:06+09:00 |
| jvndb-2022-000045 | FreeBSD vulnerable to denial-of-service (DoS) | 2022-06-15T12:28+09:00 | 2024-06-13T16:31+09:00 |
| jvndb-2022-000066 | Multiple vulnerabilities in CentreCOM AR260S V2 | 2022-08-29T17:37+09:00 | 2024-06-13T16:21+09:00 |
| jvndb-2023-000044 | JINS MEME CORE uses a hard-coded cryptographic key | 2023-05-08T15:13+09:00 | 2024-06-13T16:19+09:00 |
| jvndb-2023-000042 | WordPress Plugin "Newsletter" vulnerable to cross-site scripting | 2023-05-09T14:42+09:00 | 2024-06-13T16:14+09:00 |
| jvndb-2022-000068 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to information disclosure | 2022-09-05T15:22+09:00 | 2024-06-13T16:00+09:00 |
| jvndb-2022-002448 | Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security agents for Windows | 2022-10-11T17:02+09:00 | 2024-06-13T14:30+09:00 |
| jvndb-2022-002544 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2022-10-20T16:18+09:00 | 2024-06-13T13:58+09:00 |
| jvndb-2022-000067 | Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries | 2022-08-29T15:57+09:00 | 2024-06-13T13:53+09:00 |
| jvndb-2022-000070 | Movable Type plugin A-Form vulnerable to cross-site scripting | 2022-09-09T15:01+09:00 | 2024-06-13T13:49+09:00 |
| jvndb-2022-000069 | PowerCMS XMLRPC API vulnerable to command injection | 2022-09-02T15:49+09:00 | 2024-06-13T11:44+09:00 |
| jvndb-2022-002367 | OpenAM (OpenAM Consortium Edition) vulnerable to open redirect | 2022-09-16T15:30+09:00 | 2024-06-13T11:39+09:00 |
| jvndb-2022-000071 | Multiple vulnerabilities in Trend Micro Apex One and Trend Micro Apex One as a Service | 2022-09-14T18:15+09:00 | 2024-06-13T11:34+09:00 |
| jvndb-2022-000073 | Multiple vulnerabilities in EC-CUBE | 2022-09-15T16:30+09:00 | 2024-06-13T11:09+09:00 |
| jvndb-2022-000072 | EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files | 2022-09-15T16:13+09:00 | 2024-06-13T11:03+09:00 |
| jvndb-2023-000015 | Multiple vulnerabilities in PLANEX COMMUNICATIONS Network Camera CS-WMV02G | 2023-02-13T14:48+09:00 | 2024-06-12T17:03+09:00 |
| ID | Description | Updated |
|---|