Recent vulnerabilities
| ID | Description | Published | Updated |
|---|---|---|---|
| ghsa-wf5f-4jwr-ppcp | Arbitrary Code Execution in pdfminer.six via Crafted PDF Input | 2025-11-07T20:52:24Z | 2025-12-31T00:16:06Z |
| ghsa-wh6m-h6f4-rjf4 | Libredesk has Improper Neutralization of HTML Tags in a Web Page | 2025-12-16T20:43:16Z | 2025-12-31T00:13:33Z |
| ghsa-95qg-89c2-w5hj | theshit vulnerable to unsafe loading of user-owned Python rules when running as root | 2025-12-30T23:45:51Z | 2025-12-30T23:45:52Z |
| ghsa-7rvh-xqp3-pr8j | ImageMagick's failure to limit MVG mutual causes Stack Overflow | 2025-12-30T23:08:15Z | 2025-12-30T23:08:15Z |
| ghsa-h956-rh7x-ppgj | RustFS has a gRPC Hardcoded Token Authentication Bypass | 2025-12-30T23:06:15Z | 2025-12-30T23:06:15Z |
| ghsa-p27m-hp98-6637 | ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack | 2025-12-30T22:54:32Z | 2025-12-30T22:54:33Z |
| ghsa-xx3f-437p-fp69 | A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the f… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-mmjm-9vqc-hxxm | A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the functio… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:33Z |
| ghsa-hmhp-gh8m-c8xp | When system.enableCrossNamespaceCommands is enabled (on by default), the Temporal server permits ce… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-95cj-hx7q-rjj4 | A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the functio… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-86hp-crvx-3qvr | An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field … | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-5rqh-29cg-rcqm | inMusic Brands Engine DJ 4.3.0 suffers from Insecure Permissions due to exposed HTTP service in the… | 2025-12-30T21:30:33Z | 2025-12-30T21:30:33Z |
| ghsa-2733-h98q-64p4 | A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unk… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:33Z |
| ghsa-wc9p-rvp2-mc4r | A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Creat… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-w5qh-693v-56hm | A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-vrjf-962m-57c2 | TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-mg7r-rmfx-wx93 | A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTP… | 2025-12-30T03:30:17Z | 2025-12-30T21:30:32Z |
| ghsa-jc4g-746q-772h | A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSe… | 2025-12-30T18:30:19Z | 2025-12-30T21:30:32Z |
| ghsa-5vw2-j3g7-v489 | A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to injec… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-54r5-8767-w6vq | An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateS… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-4g6x-74c2-rfr9 | A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file… | 2025-12-30T21:30:32Z | 2025-12-30T21:30:32Z |
| ghsa-mp6v-2px7-938v | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-30T12:30:27Z | 2025-12-30T21:30:31Z |
| ghsa-xjx3-pxg9-f9p4 | Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML f… | 2025-12-15T21:30:31Z | 2025-12-30T21:30:26Z |
| ghsa-q566-6fqg-9j2h | xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to acc… | 2025-12-12T00:30:21Z | 2025-12-30T21:30:25Z |
| ghsa-j4gw-33j8-8f5j | UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows … | 2025-12-10T21:31:37Z | 2025-12-30T21:30:25Z |
| ghsa-7v2x-vj66-5pgm | xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers w… | 2025-12-12T00:30:21Z | 2025-12-30T21:30:25Z |
| ghsa-36vw-m4cf-f8jm | UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that al… | 2025-12-10T21:31:37Z | 2025-12-30T21:30:25Z |
| ghsa-36pw-gpfg-hfxr | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers… | 2025-12-12T00:30:21Z | 2025-12-30T21:30:25Z |
| ghsa-j4pr-3wm6-xx2r | URI Credential Leakage Bypass over CVE-2025-27221 | 2025-12-30T21:07:14Z | 2025-12-30T21:07:15Z |
| ghsa-6rw7-vpxm-498p | qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion | 2025-12-30T21:02:54Z | 2025-12-30T21:02:54Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-68987 | N/A | WordPress Cinerama - A WordPress Theme for Movie Studi… |
Edge-Themes |
Cinerama - A WordPress Theme for Movie Studios and Filmmakers |
2025-12-30T10:47:49.947Z | 2025-12-30T22:16:08.638Z |
| cve-2025-68988 | N/A | WordPress E-Invoice App Malaysia plugin <= 1.1.0 - Sen… |
o2oe |
E-Invoice App Malaysia |
2025-12-30T10:47:50.131Z | 2025-12-30T22:13:39.542Z |
| cve-2025-68989 | N/A | WordPress Contact Form 7 Extension For Mailchimp plugi… |
Renzo Johnson |
Contact Form 7 Extension For Mailchimp |
2025-12-30T10:47:50.363Z | 2025-12-30T22:12:39.183Z |
| cve-2025-68990 | N/A | WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL… |
xenioushk |
BWL Pro Voting Manager |
2025-12-30T10:47:50.548Z | 2025-12-30T22:12:17.928Z |
| cve-2025-47504 | 6.5 (v3.1) | WordPress Custom Checkout Fields for WooCommerce <= 1.… |
WPFactory |
Custom Checkout Fields for WooCommerce |
2025-05-07T14:19:58.472Z | 2025-12-30T21:41:36.629Z |
| cve-2025-15354 | itsourcecode Society Management System add_admin.php s… |
itsourcecode |
Society Management System |
2025-12-30T20:02:07.091Z | 2025-12-30T21:33:06.890Z | |
| cve-2025-15356 | Tenda AC20 PowerSaveSet sscanf buffer overflow |
Tenda |
AC20 |
2025-12-30T20:32:08.560Z | 2025-12-30T21:31:11.375Z | |
| cve-2025-15357 | D-Link DI-7400G+ msp_info.htm command injection |
D-Link |
DI-7400G+ |
2025-12-30T21:02:08.930Z | 2025-12-30T21:30:23.077Z | |
| cve-2025-61594 | 2.7 (v4.0) | URI Credential Leakage Bypass over CVE-2025-27221 |
ruby |
uri |
2025-12-30T21:03:08.990Z | 2025-12-30T21:29:39.048Z |
| cve-2025-13707 | 7.8 (v3.0) | Tencent HunyuanDiT model_resume Deserialization of Unt… |
Tencent |
HunyuanDiT |
2025-12-23T21:33:35.676Z | 2025-12-30T21:25:42.878Z |
| cve-2025-13710 | 7.8 (v3.0) | Tencent HunyuanVideo load_vae Deserialization of Untru… |
Tencent |
HunyuanVideo |
2025-12-23T21:33:42.164Z | 2025-12-30T21:25:02.426Z |
| cve-2025-13714 | 7.8 (v3.0) | Tencent MedicalNet generate_model Deserialization of U… |
Tencent |
MedicalNet |
2025-12-23T21:33:48.324Z | 2025-12-30T21:24:31.489Z |
| cve-2025-13716 | 7.8 (v3.0) | Tencent MimicMotion create_pipeline Deserialization of… |
Tencent |
MimicMotion |
2025-12-23T21:33:52.530Z | 2025-12-30T21:24:07.206Z |
| cve-2025-13708 | 7.8 (v3.0) | Tencent NeuralNLP-NeuralClassifier _load_checkpoint De… |
Tencent |
NeuralNLP-NeuralClassifier |
2025-12-23T21:33:56.341Z | 2025-12-30T21:23:42.843Z |
| cve-2025-14419 | 7.8 (v3.0) | pdfforge PDF Architect PDF File Parsing Memory Corrupt… |
pdfforge |
PDF Architect |
2025-12-23T21:22:50.077Z | 2025-12-30T21:21:34.992Z |
| cve-2025-14418 | 7 (v3.0) | pdfforge PDF Architect XLS File Insufficient UI Warnin… |
pdfforge |
PDF Architect |
2025-12-23T21:22:46.165Z | 2025-12-30T21:21:18.580Z |
| cve-2025-14417 | 7.8 (v3.0) | pdfforge PDF Architect Launch Insufficient UI Warning … |
pdfforge |
PDF Architect |
2025-12-23T21:22:39.324Z | 2025-12-30T21:20:58.670Z |
| cve-2025-14416 | 7 (v3.0) | pdfforge PDF Architect DOC File Insufficient UI Warnin… |
pdfforge |
PDF Architect |
2025-12-23T21:22:31.525Z | 2025-12-30T21:20:40.802Z |
| cve-2025-14405 | 6.6 (v3.0) | PDFsam Enhanced Uncontrolled Search Path Element Local… |
PDFsam |
Enhanced |
2025-12-23T21:21:23.722Z | 2025-12-30T21:20:20.940Z |
| cve-2025-14404 | 7 (v3.0) | PDFsam Enhanced XLS File Insufficient UI Warning Remot… |
PDFsam |
Enhanced |
2025-12-23T21:21:19.483Z | 2025-12-30T21:19:40.721Z |
| cve-2025-14403 | 7.8 (v3.0) | PDFsam Enhanced Launch Insufficient UI Warning Remote … |
PDFsam |
Enhanced |
2025-12-23T21:21:15.464Z | 2025-12-30T21:19:16.247Z |
| cve-2025-14402 | 7 (v3.0) | PDFsam Enhanced DOC File Insufficient UI Warning Remot… |
PDFsam |
Enhanced |
2025-12-23T21:21:10.806Z | 2025-12-30T21:17:50.752Z |
| cve-2025-14401 | 7.8 (v3.0) | PDFsam Enhanced App Out-Of-Bounds Read Remote Code Exe… |
PDFsam |
Enhanced |
2025-12-23T21:20:22.912Z | 2025-12-30T21:17:19.242Z |
| cve-2025-14500 | 9.8 (v3.0) | IceWarp14 X-File-Operation Command Injection Remote Co… |
IceWarp |
IceWarp |
2025-12-23T21:19:24.812Z | 2025-12-30T21:16:49.306Z |
| cve-2025-13706 | 7.8 (v3.0) | Tencent PatrickStar merge_checkpoint Deserialization o… |
Tencent |
PatrickStar |
2025-12-23T21:34:00.359Z | 2025-12-30T21:15:44.629Z |
| cve-2025-13711 | 7.8 (v3.0) | Tencent TFace eval Deserialization of Untrusted Data R… |
Tencent |
TFace |
2025-12-23T21:34:06.234Z | 2025-12-30T21:15:07.575Z |
| cve-2025-15077 | itsourcecode Student Management System form137.php sql… |
itsourcecode |
Student Management System |
2025-12-25T04:02:08.003Z | 2025-12-30T21:14:32.029Z | |
| cve-2025-15078 | itsourcecode Student Management System list_report.php… |
itsourcecode |
Student Management System |
2025-12-25T05:02:06.963Z | 2025-12-30T21:13:59.906Z | |
| cve-2025-15083 | TOZED ZLT M30s UART on-chip debug and test interface w… |
TOZED |
ZLT M30s |
2025-12-25T17:32:06.260Z | 2025-12-30T21:09:24.413Z | |
| cve-2021-22555 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE |
n/a |
Linux Kernel |
2021-07-07T11:20:10.668Z | 2025-12-30T20:32:33.647Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2022-50868 | N/A | hwrng: amd - Fix PCI device refcount leak |
Linux |
Linux |
2025-12-30T12:15:39.211Z | 2025-12-30T12:15:39.211Z |
| cve-2022-50867 | N/A | drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage |
Linux |
Linux |
2025-12-30T12:15:38.520Z | 2025-12-30T13:56:57.841Z |
| cve-2022-50866 | N/A | ASoC: pxa: fix null-pointer dereference in filter() |
Linux |
Linux |
2025-12-30T12:15:37.827Z | 2025-12-30T12:15:37.827Z |
| cve-2022-50865 | N/A | tcp: fix a signed-integer-overflow bug in tcp_add_backlog() |
Linux |
Linux |
2025-12-30T12:15:37.150Z | 2025-12-30T12:15:37.150Z |
| cve-2022-50864 | N/A | nilfs2: fix shift-out-of-bounds due to too large expon… |
Linux |
Linux |
2025-12-30T12:15:36.489Z | 2025-12-30T12:15:36.489Z |
| cve-2022-50863 | N/A | wifi: rtw89: free unused skb to prevent memory leak |
Linux |
Linux |
2025-12-30T12:15:35.834Z | 2025-12-30T12:15:35.834Z |
| cve-2022-50862 | N/A | bpf: prevent decl_tag from being referenced in func_proto |
Linux |
Linux |
2025-12-30T12:15:35.177Z | 2025-12-30T12:15:35.177Z |
| cve-2022-50861 | N/A | NFSD: Finish converting the NFSv2 GETACL result encoder |
Linux |
Linux |
2025-12-30T12:15:34.511Z | 2025-12-30T12:15:34.511Z |
| cve-2022-50860 | N/A | apparmor: Fix memleak in alloc_ns() |
Linux |
Linux |
2025-12-30T12:15:33.859Z | 2025-12-30T12:15:33.859Z |
| cve-2022-50859 | N/A | cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO … |
Linux |
Linux |
2025-12-30T12:15:33.198Z | 2025-12-30T12:15:33.198Z |
| cve-2022-50858 | N/A | mmc: alcor: fix return value check of mmc_add_host() |
Linux |
Linux |
2025-12-30T12:15:32.534Z | 2025-12-30T12:15:32.534Z |
| cve-2022-50857 | N/A | rapidio: rio: fix possible name leak in rio_register_mport() |
Linux |
Linux |
2025-12-30T12:15:31.873Z | 2025-12-30T12:15:31.873Z |
| cve-2022-50856 | N/A | cifs: Fix xid leak in cifs_ses_add_channel() |
Linux |
Linux |
2025-12-30T12:15:31.193Z | 2025-12-30T12:15:31.193Z |
| cve-2022-50855 | N/A | bpf: prevent leak of lsm program after failed attach |
Linux |
Linux |
2025-12-30T12:15:30.481Z | 2025-12-30T12:15:30.481Z |
| cve-2022-50854 | N/A | nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() |
Linux |
Linux |
2025-12-30T12:15:29.792Z | 2025-12-30T12:15:29.792Z |
| cve-2022-50853 | N/A | NFSv4: Fix a credential leak in _nfs4_discover_trunking() |
Linux |
Linux |
2025-12-30T12:15:29.104Z | 2025-12-30T12:15:29.104Z |
| cve-2022-50852 | N/A | wifi: mt76: mt7921: fix use after free in mt7921_acpi_read() |
Linux |
Linux |
2025-12-30T12:15:28.444Z | 2025-12-30T12:15:28.444Z |
| cve-2022-50851 | N/A | vhost_vdpa: fix the crash in unmap a large memory |
Linux |
Linux |
2025-12-30T12:15:27.765Z | 2025-12-30T12:15:27.765Z |
| cve-2022-50850 | N/A | scsi: ipr: Fix WARNING in ipr_init() |
Linux |
Linux |
2025-12-30T12:15:27.089Z | 2025-12-30T12:15:27.089Z |
| cve-2022-50849 | N/A | pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP |
Linux |
Linux |
2025-12-30T12:15:26.431Z | 2025-12-30T12:15:26.431Z |
| cve-2022-50848 | N/A | drivers: dio: fix possible memory leak in dio_init() |
Linux |
Linux |
2025-12-30T12:15:25.776Z | 2025-12-30T12:15:25.776Z |
| cve-2022-50847 | N/A | drm/bridge: it6505: Initialize AUX channel in it6505_i… |
Linux |
Linux |
2025-12-30T12:11:03.949Z | 2025-12-30T12:11:03.949Z |
| cve-2022-50846 | N/A | mmc: via-sdmmc: fix return value check of mmc_add_host() |
Linux |
Linux |
2025-12-30T12:11:03.286Z | 2025-12-30T12:11:03.286Z |
| cve-2022-50845 | N/A | ext4: fix inode leak in ext4_xattr_inode_create() on a… |
Linux |
Linux |
2025-12-30T12:11:02.615Z | 2025-12-30T12:11:02.615Z |
| cve-2022-50844 | N/A | drm/amdgpu: Fix type of second parameter in odn_edit_d… |
Linux |
Linux |
2025-12-30T12:11:01.928Z | 2025-12-30T12:11:01.928Z |
| cve-2022-50843 | N/A | dm clone: Fix UAF in clone_dtr() |
Linux |
Linux |
2025-12-30T12:11:01.130Z | 2025-12-30T12:11:01.130Z |
| cve-2022-50842 | N/A | drm/virtio: Check whether transferred 2D BO is shmem |
Linux |
Linux |
2025-12-30T12:11:00.439Z | 2025-12-30T12:11:00.439Z |
| cve-2022-50841 | N/A | fs/ntfs3: Add overflow check for attribute size |
Linux |
Linux |
2025-12-30T12:10:59.743Z | 2025-12-30T12:10:59.743Z |
| cve-2022-50840 | N/A | scsi: snic: Fix possible UAF in snic_tgt_create() |
Linux |
Linux |
2025-12-30T12:10:59.066Z | 2025-12-30T12:10:59.066Z |
| cve-2022-50839 | N/A | jbd2: fix potential buffer head reference count leak |
Linux |
Linux |
2025-12-30T12:10:58.406Z | 2025-12-30T12:10:58.406Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-50862 | In the Linux kernel, the following vulnerability has been resolved: bpf: prevent decl_tag from bei… | 2025-12-30T13:16:00.997 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50861 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Finish converting the NF… | 2025-12-30T13:16:00.893 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50860 | In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in alloc… | 2025-12-30T13:16:00.787 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50859 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the error length of … | 2025-12-30T13:16:00.673 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50858 | In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value c… | 2025-12-30T13:16:00.563 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50857 | In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible nam… | 2025-12-30T13:16:00.437 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50856 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_ses… | 2025-12-30T13:16:00.330 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50855 | In the Linux kernel, the following vulnerability has been resolved: bpf: prevent leak of lsm progr… | 2025-12-30T13:16:00.223 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50854 | In the Linux kernel, the following vulnerability has been resolved: nfc: virtual_ncidev: Fix memor… | 2025-12-30T13:16:00.117 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50853 | In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a credential leak i… | 2025-12-30T13:16:00.010 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50852 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix use af… | 2025-12-30T13:15:59.907 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50851 | In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: fix the crash in u… | 2025-12-30T13:15:59.797 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50850 | In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in ipr_… | 2025-12-30T13:15:59.687 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50849 | In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vm… | 2025-12-30T13:15:59.567 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50848 | In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible mem… | 2025-12-30T13:15:59.460 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50847 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize… | 2025-12-30T13:15:59.353 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50846 | In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: fix return val… | 2025-12-30T13:15:59.243 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50845 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4_x… | 2025-12-30T13:15:59.130 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50844 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second… | 2025-12-30T13:15:59.013 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50843 | In the Linux kernel, the following vulnerability has been resolved: dm clone: Fix UAF in clone_dtr… | 2025-12-30T13:15:58.903 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50842 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether tran… | 2025-12-30T13:15:58.797 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50841 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add overflow check f… | 2025-12-30T13:15:58.677 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50840 | In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible UAF i… | 2025-12-30T13:15:58.570 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50839 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential buffer hea… | 2025-12-30T13:15:58.463 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50838 | In the Linux kernel, the following vulnerability has been resolved: net: stream: purge sk_error_qu… | 2025-12-30T13:15:58.350 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50837 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag_8021q: avoid lea… | 2025-12-30T13:15:58.243 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50836 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory… | 2025-12-30T13:15:58.133 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50835 | In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer … | 2025-12-30T13:15:58.023 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50834 | In the Linux kernel, the following vulnerability has been resolved: nfc: Fix potential resource le… | 2025-12-30T13:15:57.913 | 2025-12-31T20:43:05.160 |
| fkie_cve-2022-50833 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use hdev->workqueue… | 2025-12-30T13:15:57.810 | 2025-12-31T20:43:05.160 |
| ID | Description | Package | Published | Updated |
|---|---|---|---|---|
| pysec-2012-33 | Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allow… | horizon | 2012-06-05T22:55:00Z | 2024-11-21T14:22:51.786908Z |
| pysec-2012-32 | Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in ho… | horizon | 2012-06-05T22:55:00Z | 2024-11-21T14:22:51.729618Z |
| pysec-2023-271 | Hail is an open-source, general-purpose, Python-based data analysis tool with additional … | hail | 2023-12-29T17:16:00+00:00 | 2024-11-21T14:22:51.672042+00:00 |
| pysec-2012-31 | libs/updater.py in GoLismero 0.6.3, and other versions before Git revision 2b3bb43d6867, … | golismero | 2012-03-19T19:55:00Z | 2024-11-21T14:22:51.617446Z |
| pysec-2013-37 | store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and G… | glance | 2013-02-24T21:55:00Z | 2024-11-21T14:22:51.177765Z |
| pysec-2012-30 | The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote… | glance | 2012-11-11T13:00:00Z | 2024-11-21T14:22:51.113933Z |
| pysec-2012-29 | The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote… | glance | 2012-11-11T13:00:00Z | 2024-11-21T14:22:51.054769Z |
| pysec-2023-269 | GeoNode is an open source platform that facilitates the creation, sharing, and collaborat… | geonode | 2023-08-24T23:15:00+00:00 | 2024-11-21T14:22:50.995218+00:00 |
| pysec-2021-888 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (call… | gdal | 2021-07-20T07:15:00+00:00 | 2024-11-21T14:22:50.934313+00:00 |
| pysec-2021-887 | GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/ga… | gattlib-py | 2021-05-27T11:15:00Z | 2024-11-21T14:22:50.881327Z |
| pysec-2019-250 | GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c becau… | gattlib-py | 2019-01-21T06:29:00Z | 2024-11-21T14:22:50.820785Z |
| pysec-2014-101 | FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote att… | freeipa | 2014-11-19T18:59:00Z | 2024-11-21T14:22:50.589801Z |
| pysec-2014-100 | The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNT… | freeipa | 2014-05-29T14:19:00Z | 2024-11-21T14:22:50.537629Z |
| pysec-2013-36 | The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification… | freeipa | 2013-01-27T18:55:00Z | 2024-11-21T14:22:50.474073Z |
| pysec-2021-886 | A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 lea… | exiv2 | 2021-07-13T22:15:00Z | 2024-11-21T14:22:50.153222Z |
| pysec-2021-885 | A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote at… | exiv2 | 2021-08-19T22:15:00Z | 2024-11-21T14:22:50.094265Z |
| pysec-2021-884 | A float point exception in the printLong function in tags_int.cpp of Exiv2 0.27.99.0 allo… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:50.034285Z |
| pysec-2021-883 | An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows att… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.973408Z |
| pysec-2021-882 | Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0… | exiv2 | 2021-08-23T22:15:00Z | 2024-11-21T14:22:49.911764Z |
| pysec-2019-249 | An issue was discovered in Exiv2 0.27. There is infinite recursion at BigTiffImage::print… | exiv2 | 2019-02-25T15:29:00Z | 2024-11-21T14:22:49.85073Z |
| pysec-2019-248 | An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::print… | exiv2 | 2019-02-25T15:29:00Z | 2024-11-21T14:22:49.79084Z |
| pysec-2020-344 | In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in … | exiv2 | 2020-01-27T05:15:00Z | 2024-11-21T14:22:49.729892Z |
| pysec-2019-247 | Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when cal… | exiv2 | 2019-10-09T19:15:00Z | 2024-11-21T14:22:49.656989Z |
| pysec-2019-246 | In Exiv2 0.27.99.0, there is an out-of-bounds read in Exiv2::MrwImage::readMetadata() in … | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.597801Z |
| pysec-2019-245 | Exiv2::PngImage::readMetadata() in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to ca… | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.538663Z |
| pysec-2019-244 | Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in r… | exiv2 | 2019-07-28T19:15:00Z | 2024-11-21T14:22:49.479201Z |
| pysec-2018-148 | In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the con… | exiv2 | 2018-03-30T08:29:00Z | 2024-11-21T14:22:49.400819Z |
| pysec-2018-147 | In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows re… | exiv2 | 2018-03-25T03:29:00Z | 2024-11-21T14:22:49.341312Z |
| pysec-2018-146 | In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.c… | exiv2 | 2018-03-25T03:29:00Z | 2024-11-21T14:22:49.282911Z |
| pysec-2018-145 | In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv… | exiv2 | 2018-01-18T07:29:00Z | 2024-11-21T14:22:49.222538Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-4217 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.397245Z |
| gsd-2024-4173 | A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability… | 2024-04-26T05:02:17.396711Z |
| gsd-2024-4193 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.395860Z |
| gsd-2024-4182 | Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.1… | 2024-04-26T05:02:17.395657Z |
| gsd-2024-4203 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.393641Z |
| gsd-2024-4195 | Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully vali… | 2024-04-26T05:02:17.392645Z |
| gsd-2024-4176 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.392184Z |
| gsd-2024-4214 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.390841Z |
| gsd-2024-4174 | Cross-Site Scripting (XSS) vulnerability in Hyperion Web Server affecting version 2.0.15.… | 2024-04-26T05:02:17.389353Z |
| gsd-2024-4185 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.387322Z |
| gsd-2024-4208 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.386660Z |
| gsd-2024-4196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.385450Z |
| gsd-2024-4220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.384898Z |
| gsd-2024-4213 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.379947Z |
| gsd-2024-4215 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.378015Z |
| gsd-2024-4189 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.377780Z |
| gsd-2024-4178 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.377539Z |
| gsd-2024-4207 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.376954Z |
| gsd-2024-4187 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.376404Z |
| gsd-2024-4172 | A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vuln… | 2024-04-26T05:02:17.373866Z |
| gsd-2024-4166 | A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affecte… | 2024-04-26T05:02:17.372976Z |
| gsd-2024-4183 | Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x be… | 2024-04-26T05:02:17.372323Z |
| gsd-2024-4184 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.371241Z |
| gsd-2024-4218 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.369587Z |
| gsd-2024-4222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.363699Z |
| gsd-2024-4170 | A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This iss… | 2024-04-26T05:02:17.362844Z |
| gsd-2024-4205 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.362130Z |
| gsd-2024-4219 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.359066Z |
| gsd-2024-4226 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.358460Z |
| gsd-2024-4186 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-26T05:02:17.352617Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-kam193-32bc16cb2876d151 | Pentesting or research code in crypo (PyPI) | 2025-12-27T08:56:38Z | 2025-12-27T08:56:38Z |
| mal-0000-kam193-171994a8c3aaa87e | Pentesting or research code in crpto (PyPI) | 2025-12-27T08:55:55Z | 2025-12-27T08:55:55Z |
| mal-0000-kam193-dcf730d86bfb8fcf | Pentesting or research code in flaask (PyPI) | 2025-12-27T08:53:06Z | 2025-12-27T08:53:06Z |
| mal-2025-192944 | Malicious code in backstage-plugin-glean (npm) | 2025-12-27T02:51:04Z | 2025-12-27T02:51:04Z |
| mal-2025-192941 | Malicious code in bola511 (npm) | 2025-12-26T14:09:11Z | 2025-12-26T14:09:11Z |
| mal-2025-192940 | Malicious code in aiogram-3 (PyPI) | 2025-12-26T04:33:18Z | 2025-12-26T10:09:30Z |
| mal-2025-192939 | Malicious code in magic-poc (npm) | 2025-12-26T03:35:35Z | 2025-12-26T03:35:35Z |
| mal-2025-192938 | Malicious code in bettermode-icons (npm) | 2025-12-25T21:52:38Z | 2025-12-25T22:40:17Z |
| mal-2025-192937 | Malicious code in bettermode-common (npm) | 2025-12-25T19:41:57Z | 2025-12-25T19:41:57Z |
| mal-2025-192933 | Malicious code in ing-feat-auth-idin (npm) | 2025-12-25T18:54:53Z | 2025-12-25T18:54:53Z |
| mal-2025-192935 | Malicious code in ing-feat-mortgage-consent-starter (npm) | 2025-12-25T18:54:11Z | 2025-12-25T18:54:11Z |
| mal-2025-192936 | Malicious code in ing-feat-pis-single-payments (npm) | 2025-12-25T18:54:07Z | 2025-12-25T18:54:07Z |
| mal-2025-192932 | Malicious code in cc-raiesy (npm) | 2025-12-25T18:19:57Z | 2025-12-25T18:19:57Z |
| mal-0000-kam193-f6a9fb1c7d327b2f | Malicious code in aiogram-sever-patch (PyPI) | 2025-12-25T14:18:44Z | 2025-12-25T15:55:13Z |
| mal-0000-kam193-6a06919b9f87236d | Pentesting or research code in pxdbench (PyPI) | 2025-12-25T11:04:53Z | 2025-12-25T11:04:53Z |
| mal-2025-192929 | Malicious code in envtoolsx (PyPI) | 2025-12-24T22:45:19Z | 2025-12-24T22:45:19Z |
| mal-0000-kam193-cc5aee4d7ffd5c96 | Pentesting or research code in livekit-agents-hedra (PyPI) | 2025-12-24T20:38:01Z | 2025-12-24T20:38:01Z |
| mal-2025-192927 | Malicious code in adril7123 (npm) | 2025-12-24T17:05:44Z | 2025-12-24T17:05:45Z |
| mal-2025-192926 | Malicious code in @airtel-web/clickstream (npm) | 2025-12-24T12:20:46Z | 2025-12-24T13:17:43Z |
| mal-2025-6629 | Malicious code in webpack-dev-server (RubyGems) | 2025-07-31T19:17:14Z | 2025-12-24T10:09:32Z |
| mal-2025-6628 | Malicious code in maventa_utils (RubyGems) | 2025-07-31T19:17:12Z | 2025-12-24T10:09:32Z |
| mal-2025-6627 | Malicious code in maventa_common (RubyGems) | 2025-07-31T19:17:11Z | 2025-12-24T10:09:32Z |
| mal-2025-5129 | Malicious code in requestsdev (PyPI) | 2025-06-18T10:15:20Z | 2025-12-24T10:09:32Z |
| mal-2025-5109 | Malicious code in dbgpkg (PyPI) | 2025-06-18T10:15:07Z | 2025-12-24T10:09:32Z |
| mal-2025-5096 | Malicious code in aliyun-ai-labs-snippets-sdk (PyPI) | 2025-05-19T15:43:26Z | 2025-12-24T10:09:32Z |
| mal-2025-5095 | Malicious code in aliyun-ai-labs-sdk (PyPI) | 2025-06-18T10:15:00Z | 2025-12-24T10:09:32Z |
| mal-2025-47815 | Malicious code in sqlcommenter_rails (RubyGems) | 2025-09-26T09:15:02Z | 2025-12-24T10:09:32Z |
| mal-2025-41805 | Malicious code in omniauth-pro-sante-connect (RubyGems) | 2025-08-28T07:12:29Z | 2025-12-24T10:09:32Z |
| mal-2025-192657 | Malicious code in yt-smm (npm) | 2025-12-19T08:41:06Z | 2025-12-24T10:09:32Z |
| mal-2025-191940 | Malicious code in zakuchienne (PyPI) | 2025-11-24T06:34:51Z | 2025-12-24T10:09:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1656 | Red Hat Enterprise Linux (unbound): Schwachstelle ermöglicht Manipulation von Daten | 2025-07-27T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1350 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-17T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-1055 | Node.js: Mehrere Schwachstellen | 2025-05-14T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-0403 | libxml2: Mehrere Schwachstellen | 2025-02-18T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-3338 | Red Hat OpenShift: Mehrere Schwachstelle | 2024-11-05T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2024-1547 | OpenSSH auf Red Hat Enterprise Linux 9: Schwachstelle ermöglicht Denial of Service | 2024-07-08T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-3022 | Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung | 2023-11-28T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-2119 | Python: Mehrere Schwachstellen | 2023-08-22T22:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-0611 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2023-03-09T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2023-0433 | Apache Commons und Apache Tomcat: Schwachstelle ermöglicht Denial of Service | 2023-02-20T23:00:00.000+00:00 | 2025-10-29T23:00:00.000+00:00 |
| wid-sec-w-2025-2420 | Apache Tomcat: Mehrere Schwachstellen | 2025-10-27T23:00:00.000+00:00 | 2025-10-28T23:00:00.000+00:00 |
| wid-sec-w-2025-2391 | OpenBao: Mehrere Schwachstellen | 2025-10-22T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2388 | MongoDB: Schwachstelle ermöglicht Privilegieneskalation | 2025-10-22T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2272 | Moodle: Mehrere Schwachstellen | 2025-10-13T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2224 | Keycloak: Mehrere Schwachstellen | 2025-10-07T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2202 | fetchmail: Schwachstelle ermöglicht Denial of Service | 2025-10-05T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-2036 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-09-10T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1925 | Hashicorp Vault: Schwachstelle ermöglicht Denial of Service | 2025-08-28T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1866 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2025-08-19T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1754 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-08-10T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1637 | GNU libc: Schwachstelle ermöglicht unspezifischen Angriff | 2025-07-23T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1613 | Linux Kernel: Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1540 | Apache Commons Lang: Schwachstelle ermöglicht Denial of Service | 2025-07-13T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1526 | GnuTLS: Mehrere Schwachstellen | 2025-07-09T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1517 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-07-08T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1465 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-07-06T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1452 | Linux Kernel: Mehrere Schwachstellen | 2025-07-02T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0683 | Linux Kernel: Mehrere Schwachstellen | 2025-04-01T22:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0649 | Linux Kernel: Mehrere Schwachstellen | 2025-03-27T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| wid-sec-w-2024-3690 | Gitea: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-11T23:00:00.000+00:00 | 2025-10-23T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-998949 | SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-928781 | SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-868282 | SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-825651 | SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-824889 | SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-780073 | SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets | 2020-02-11T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-779936 | SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-750274 | SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW | 2024-04-19T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-730482 | SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC | 2024-04-09T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-712929 | SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products | 2022-06-14T00:00:00Z | 2025-09-09T00:00:00Z |
| SSA-593272 | SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices | 2020-04-14T00:00:00Z | 2025-07-08T00:00:00Z |
| SSA-484086 | SSA-484086: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.1 | 2022-06-14T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-473245 | SSA-473245: Denial of Service Vulnerability in Profinet Devices | 2019-10-08T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-446448 | SSA-446448: Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack | 2022-04-12T00:00:00Z | 2025-01-14T00:00:00Z |
| SSA-381581 | SSA-381581: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 SP1 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-346262 | SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products | 2017-11-23T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-337522 | SSA-337522: Multiple Vulnerabilities in TIM 1531 IRC before V2.4.8 | 2024-06-11T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-313039 | SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-170375 | SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 | 2024-07-09T00:00:00Z | 2025-08-12T00:00:00Z |
| SSA-160243 | SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0 | 2023-10-10T00:00:00Z | 2024-07-09T00:00:00Z |
| SSA-064222 | SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406 | 2024-07-09T00:00:00Z | 2024-07-09T00:00:00Z |
| ssa-900277 | SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ssa-879734 | SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1 | 2024-06-11T00:00:00Z | 2024-06-11T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:5967 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update | 2023-10-20T14:51:43+00:00 | 2025-11-29T06:49:43+00:00 |
| rhsa-2023:5971 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (director-operator) security update | 2023-10-20T14:56:06+00:00 | 2025-11-29T06:49:42+00:00 |
| rhsa-2023:5970 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) security update | 2023-10-20T14:51:03+00:00 | 2025-11-29T06:49:42+00:00 |
| rhsa-2023:5950 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.2.11 security update | 2023-10-19T22:22:20+00:00 | 2025-11-29T06:49:42+00:00 |
| rhsa-2023:5976 | Red Hat Security Advisory: Service Telemetry Framework 1.5.2 security update | 2023-10-20T17:18:33+00:00 | 2025-11-29T06:49:41+00:00 |
| rhsa-2023:5974 | Red Hat Security Advisory: Network Observability security update | 2023-10-20T16:49:58+00:00 | 2025-11-29T06:49:41+00:00 |
| rhsa-2023:5969 | Red Hat Security Advisory: Red Hat OpenStack Platform 17.1.1 security update | 2023-10-20T14:51:03+00:00 | 2025-11-29T06:49:40+00:00 |
| rhsa-2023:5965 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats, etcd) security update | 2023-10-20T14:54:26+00:00 | 2025-11-29T06:49:39+00:00 |
| rhsa-2023:5964 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 (collectd-libpod-stats) security update | 2023-10-20T14:54:29+00:00 | 2025-11-29T06:49:39+00:00 |
| rhsa-2023:5952 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.4.4 security update | 2023-10-19T22:22:44+00:00 | 2025-11-29T06:49:38+00:00 |
| rhsa-2023:5951 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh for 2.3.8 security update | 2023-10-19T22:22:22+00:00 | 2025-11-29T06:49:38+00:00 |
| rhsa-2023:5865 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:55:59+00:00 | 2025-11-29T06:49:38+00:00 |
| rhsa-2023:5933 | Red Hat Security Advisory: Openshift Secondary Scheduler Operator 1.1.3 security update | 2023-10-26T01:04:37+00:00 | 2025-11-29T06:49:37+00:00 |
| rhsa-2023:5947 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.0.1 security update | 2023-10-26T00:47:43+00:00 | 2025-11-29T06:49:36+00:00 |
| rhsa-2023:5935 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.5 security update | 2023-10-19T16:50:07+00:00 | 2025-11-29T06:49:36+00:00 |
| rhsa-2023:5931 | Red Hat Security Advisory: Satellite 6.13.5 Async Security Update | 2023-10-19T13:15:21+00:00 | 2025-11-29T06:49:35+00:00 |
| rhsa-2023:5895 | Red Hat Security Advisory: OpenShift Container Platform 4.12.40 security and extras update | 2023-10-25T00:59:06+00:00 | 2025-11-29T06:49:35+00:00 |
| rhsa-2023:5867 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:59:29+00:00 | 2025-11-29T06:49:35+00:00 |
| rhsa-2023:5866 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:54:48+00:00 | 2025-11-29T06:49:34+00:00 |
| rhsa-2023:5864 | Red Hat Security Advisory: grafana security update | 2023-10-18T22:56:50+00:00 | 2025-11-29T06:49:34+00:00 |
| rhsa-2023:5863 | Red Hat Security Advisory: grafana security update | 2023-10-18T23:01:34+00:00 | 2025-11-29T06:49:34+00:00 |
| rhsa-2023:5851 | Red Hat Security Advisory: RHACS 4.1 enhancement and security update | 2023-10-18T16:23:22+00:00 | 2025-11-29T06:49:33+00:00 |
| rhsa-2023:5835 | Red Hat Security Advisory: rhc-worker-script enhancement and security update | 2023-10-18T07:59:41+00:00 | 2025-11-29T06:49:33+00:00 |
| rhsa-2023:5810 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update | 2023-10-17T18:50:43+00:00 | 2025-11-29T06:49:32+00:00 |
| rhsa-2023:5809 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2.2 Product Security and Bug Fix Update | 2023-10-17T18:47:29+00:00 | 2025-11-29T06:49:32+00:00 |
| rhsa-2023:5805 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2023-10-17T17:43:43+00:00 | 2025-11-29T06:49:32+00:00 |
| rhsa-2023:5738 | Red Hat Security Advisory: go-toolset and golang security and bug fix update | 2023-10-16T14:00:36+00:00 | 2025-11-29T06:49:30+00:00 |
| rhsa-2023:5721 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2023-10-16T12:38:36+00:00 | 2025-11-29T06:49:30+00:00 |
| rhsa-2023:5719 | Red Hat Security Advisory: go-toolset-1.19 and go-toolset-1.19-golang security update | 2023-10-16T11:30:56+00:00 | 2025-11-29T06:49:30+00:00 |
| rhsa-2023:5717 | Red Hat Security Advisory: OpenShift Container Platform 4.11.52 packages and security update | 2023-10-18T15:07:12+00:00 | 2025-11-29T06:49:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-58185 | Parsing DER payload can cause memory exhaustion in encoding/asn1 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:42.000Z |
| msrc_cve-2025-61723 | Quadratic complexity when parsing some invalid inputs in encoding/pem | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:37.000Z |
| msrc_cve-2025-58187 | Quadratic complexity when checking name constraints in crypto/x509 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:32.000Z |
| msrc_cve-2025-61724 | Excessive CPU consumption in Reader.ReadResponse in net/textproto | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:27.000Z |
| msrc_cve-2025-58186 | Lack of limit when parsing cookies can cause memory exhaustion in net/http | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:22.000Z |
| msrc_cve-2025-58183 | Unbounded allocation when parsing GNU sparse map in archive/tar | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:17.000Z |
| msrc_cve-2025-14523 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | 2025-12-02T00:00:00.000Z | 2025-12-13T01:02:10.000Z |
| msrc_cve-2023-53401 | mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:40.000Z |
| msrc_cve-2023-53383 | irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:29.000Z |
| msrc_cve-2023-53366 | block: be a bit more careful in checking for NULL bdev while polling | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:18.000Z |
| msrc_cve-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-12T08:00:00.000Z |
| msrc_cve-2023-45284 | Incorrect detection of reserved device names on Windows in path/filepath | 2023-11-01T07:00:00.000Z | 2025-12-12T01:03:18.000Z |
| msrc_cve-2025-49176 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:03:03.000Z |
| msrc_cve-2025-49177 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:58.000Z |
| msrc_cve-2025-49179 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:52.000Z |
| msrc_cve-2025-49175 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:48.000Z |
| msrc_cve-2023-53438 | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:37.000Z |
| msrc_cve-2023-53429 | btrfs: don't check PageError in __extent_writepage | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:32.000Z |
| msrc_cve-2023-53424 | clk: mediatek: fix of_iomap memory leak | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:26.000Z |
| msrc_cve-2023-53421 | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:21.000Z |
| msrc_cve-2023-53355 | staging: pi433: fix memory leak with using debugfs_lookup() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:10.000Z |
| msrc_cve-2023-53353 | accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:05.000Z |
| msrc_cve-2023-53348 | btrfs: fix deadlock when aborting transaction during relocation with scrub | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:59.000Z |
| msrc_cve-2023-53347 | net/mlx5: Handle pairing of E-switch via uplink un/load APIs | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:54.000Z |
| msrc_cve-2022-50407 | crypto: hisilicon/qm - increase the memory of local variables | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:49.000Z |
| msrc_cve-2025-39927 | ceph: fix race condition validating r_parent before applying state | 2025-10-02T00:00:00.000Z | 2025-12-12T01:01:37.000Z |
| msrc_cve-2023-53332 | genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:33.000Z |
| msrc_cve-2023-53323 | ext2/dax: Fix ext2_setsize when len is page aligned | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:27.000Z |
| msrc_cve-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-11T08:00:00.000Z |
| msrc_cve-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-02T00:00:00.000Z | 2025-12-11T01:38:13.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-175-01 | Kaleris Navis N4 Terminal Operating System | 2025-06-24T06:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-19-029-02 | Mitsubishi Electric MELSEC-Q Series PLCs | 2019-01-29T07:00:00.000000Z | 2025-06-24T06:00:00.000000Z |
| icsa-25-182-04 | FESTO Hardware Controller, Hardware Servo Press Kit | 2022-07-06T07:00:00.000000Z | 2025-06-23T08:00:00.000000Z |
| icsa-16-145-01a | Moxa MiiNePort Vulnerabilities | 2016-02-25T07:00:00.000000Z | 2025-06-20T18:15:20.614865Z |
| va-25-171-01 | ClamAV | 2025-06-20T00:00:00Z | 2025-06-20T00:00:00Z |
| icsa-12-265-01 | Emerson DeltaV Buffer Overflow | 2012-06-25T06:00:00.000000Z | 2025-06-19T22:40:48.319564Z |
| icsa-12-258-01 | IOServer OPC Server Multiple Vulnerabilities | 2012-06-18T06:00:00.000000Z | 2025-06-19T22:40:41.973320Z |
| icsa-15-034-01 | Siemens SCALANCE X-200IRT Switch Family User Impersonation Vulnerability | 2015-11-06T07:00:00.000000Z | 2025-06-18T19:25:20.526318Z |
| icsa-13-022-02 | GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities | 2013-10-26T06:00:00.000000Z | 2025-06-18T19:25:08.106052Z |
| icsa-12-354-01a | Ruggedcom ROS Hard-Coded RSA SSL Private Key | 2012-09-22T06:00:00.000000Z | 2025-06-18T19:25:01.798871Z |
| icsa-12-342-01b | Rockwell Allen-Bradley MicroLogix, SLC 500, and PLC-5 Fault Generation Vulnerability | 2012-09-10T06:00:00.000000Z | 2025-06-18T19:24:55.231514Z |
| icsa-12-249-03 | InduSoft ISSymbol ActiveX Control Buffer Overflow | 2012-06-09T06:00:00.000000Z | 2025-06-18T19:04:35.253383Z |
| icsa-12-228-01a | Tridium Niagara Vulnerabilities | 2012-05-19T06:00:00.000000Z | 2025-06-18T19:04:29.046428Z |
| icsa-15-099-01e | Siemens SIMATIC HMI Devices Vulnerabilities (Update E) | 2015-01-10T07:00:00.000000Z | 2025-06-18T19:04:22.822443Z |
| icsa-15-146-01 | Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service | 2015-02-26T07:00:00.000000Z | 2025-06-18T19:04:16.618149Z |
| icsa-15-153-01 | Beckwith Electric TCP Initial Sequence Vulnerability | 2015-03-05T07:00:00.000000Z | 2025-06-18T19:04:10.391763Z |
| icsa-15-169-02 | Schneider Electric Wonderware System Platform Vulnerabilities | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:04:04.192744Z |
| icsa-15-169-01b | Wind River VXWorks TCP Predictability Vulnerability in ICS Devices (Update B) | 2015-03-21T06:00:00.000000Z | 2025-06-18T19:03:57.981923Z |
| icsa-12-032-03 | GE Intelligent Platforms Proficy Real-Time Information Portal Directory Traversal | 2012-11-04T06:00:00.000000Z | 2025-06-18T19:03:51.787688Z |
| icsa-12-079-01 | Microsoft Remote Desktop Protocol Memory Corruption Vulnerability | 2012-12-21T07:00:00.000000Z | 2025-06-18T19:03:45.218685Z |
| icsa-10-348-01a | Wonderware InBatch Vulnerability | 2010-09-16T06:00:00.000000Z | 2025-06-17T16:50:19.269504Z |
| icsa-10-322-02a | Automated Solutions OPC Vulnerability | 2010-08-21T06:00:00.000000Z | 2025-06-17T16:50:13.013737Z |
| icsa-16-343-01 | Moxa MiiNePort Session Hijack Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-17T16:50:00.161907Z |
| icsa-12-047-01a | Advantech WebAccess Vulnerabilities | 2012-11-19T07:00:00.000000Z | 2025-06-17T15:46:30.792399Z |
| icsa-12-150-01 | Honeywell HMIWeb Browser Buffer Overflow Vulnerability | 2012-03-02T07:00:00.000000Z | 2025-06-17T15:46:24.572627Z |
| icsa-12-146-01a | RuggedCom Weak Cryptography for Password Vulnerability | 2012-02-26T07:00:00.000000Z | 2025-06-17T15:46:18.307459Z |
| icsa-12-138-01 | Emerson DeltaV Multiple Vulnerabilities | 2012-02-18T07:00:00.000000Z | 2025-06-17T15:45:47.164093Z |
| icsa-12-062-01 | Wonderware Information Server Multiple Vulnerabilities | 2012-12-04T07:00:00.000000Z | 2025-06-17T15:45:28.468819Z |
| icsa-12-059-01 | ABB Robot Communications Runtime Buffer Overflow | 2012-12-01T07:00:00.000000Z | 2025-06-17T15:45:21.808130Z |
| icsa-25-168-05 | Dover Fueling Solutions ProGauge MagLink LX consoles | 2025-06-17T06:00:00.000000Z | 2025-06-17T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ise-injection-6kn9tSxm | Cisco Identity Services Engine Command Injection Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-expressway-auth-kdfrcz2j | Cisco Expressway Edge Improper Authorization Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-expressway-auth-kdFrcZ2j | Cisco Expressway Edge Improper Authorization Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-duo-epic-info-sdlv6h8y | Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-duo-epic-info-sdLv6h8y | Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability | 2024-09-04T16:00:00+00:00 | 2024-09-04T16:00:00+00:00 |
| cisco-sa-cslu-7gHMzWmw | Cisco Smart Licensing Utility Vulnerabilities | 2024-09-04T16:00:00+00:00 | 2025-04-04T17:44:00+00:00 |
| cisco-sa-radius-spoofing-july-2024-87ccdwz3 | RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS): July 2024 | 2024-07-10T16:00:00+00:00 | 2024-09-03T14:10:25+00:00 |
| cisco-sa-radius-spoofing-july-2024-87cCDwZ3 | RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS): July 2024 | 2024-07-10T16:00:00+00:00 | 2024-09-03T14:10:25+00:00 |
| cisco-sa-multi-vuln-finesse-qp6gbuo2 | Multiple Cisco Products OpenSocial Gadget Editor Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2024-09-03T13:04:54+00:00 |
| cisco-sa-multi-vuln-finesse-qp6gbUO2 | Multiple Cisco Products OpenSocial Gadget Editor Vulnerabilities | 2021-01-13T16:00:00+00:00 | 2024-09-03T13:04:54+00:00 |
| cisco-sa-nxos-psbe-ce-yvbtn5du | Cisco NX-OS Software Python Sandbox Escape Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-psbe-ce-YvbTn5du | Cisco NX-OS Software Python Sandbox Escape Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-dhcp6-relay-dos-zneaa6xn | Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-dhcp6-relay-dos-znEAA6xn | Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-cmdinj-lq6jszhh | Cisco NX-OS Software Command Injection Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-cmdinj-Lq6jsZhH | Cisco NX-OS Software Command Injection Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-bshacepe-bapehsx7 | Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-nxos-bshacepe-bApeHSx7 | Cisco NX-OS Software Bash Arbitrary Code Execution and Privilege Escalation Vulnerabilities | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-capic-priv-esc-uyqjjnuu | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-capic-priv-esc-uYQJjnuU | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-apic-cousmo-ubpbygbq | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-apic-cousmo-uBpBYGbq | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2024-08-28T16:00:00+00:00 | 2024-08-28T16:00:00+00:00 |
| cisco-sa-curl-libcurl-d9ds39cv | cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 | 2023-10-12T16:00:00+00:00 | 2024-08-27T18:06:16+00:00 |
| cisco-sa-curl-libcurl-D9ds39cV | cURL and libcurl Vulnerability Affecting Cisco Products: October 2023 | 2023-10-12T16:00:00+00:00 | 2024-08-27T18:06:16+00:00 |
| cisco-sa-ise-rest-5bpkrntz | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities | 2024-08-21T16:00:00+00:00 | 2024-08-22T15:15:53+00:00 |
| cisco-sa-ise-rest-5bPKrNtZ | Cisco Identity Services Engine REST API Blind SQL Injection Vulnerabilities | 2024-08-21T16:00:00+00:00 | 2024-08-22T15:15:53+00:00 |
| cisco-sa-ise-csrf-y4zuz5rj | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-ise-csrf-y4ZUz5Rj | Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-cucm-dos-kkhq43we | Cisco Unified Communications Manager Denial of Service Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| cisco-sa-cucm-dos-kkHq43We | Cisco Unified Communications Manager Denial of Service Vulnerability | 2024-08-21T16:00:00+00:00 | 2024-08-21T16:00:00+00:00 |
| ID | Description | Updated |
|---|---|---|
| var-202109-1803 | ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No in… | 2024-11-29T21:59:29.877000Z |
| var-200505-0162 | Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based … | 2024-11-29T21:59:28.933000Z |
| var-201506-0038 | Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to exe… | 2024-11-29T21:58:46.854000Z |
| var-202005-1054 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by d… | 2024-11-29T21:58:44.698000Z |
| var-202207-1358 | When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out o… | 2024-11-29T21:58:13.489000Z |
| var-200607-0007 | Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows… | 2024-11-29T21:58:09.360000Z |
| var-202205-2059 | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. vim/vim Exists in an out-o… | 2024-11-29T21:58:09.296000Z |
| var-200702-0382 | Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through… | 2024-11-29T21:58:07.040000Z |
| var-202203-0072 | Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are e… | 2024-11-29T21:57:59.355000Z |
| var-200503-0071 | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, an… | 2024-11-29T21:56:56.974000Z |
| var-200503-0010 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers… | 2024-11-29T21:56:52.235000Z |
| var-201506-0265 | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x… | 2024-11-29T21:56:51.672000Z |
| var-200110-0224 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-11-29T21:56:51.497000Z |
| var-202103-1243 | In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.1… | 2024-11-29T21:56:50.920000Z |
| var-201908-0264 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a den… | 2024-11-29T21:56:50.615000Z |
| var-200904-0291 | udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space,… | 2024-11-29T21:56:18.338000Z |
| var-201006-0260 | Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote … | 2024-11-29T21:56:17.677000Z |
| var-201109-0201 | Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 … | 2024-11-29T21:56:16.863000Z |
| var-201108-0183 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2024-11-29T21:56:16.472000Z |
| var-201210-0278 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T21:56:15.514000Z |
| var-201912-0581 | An out-of-bounds read was addressed with improved input validation. This issue is fixed i… | 2024-11-29T21:55:43.413000Z |
| var-202205-1370 | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote … | 2024-11-29T21:55:41.806000Z |
| var-201904-1360 | A cookie management issue was addressed with improved checks. This issue affected version… | 2024-11-29T21:55:41.323000Z |
| var-201409-0340 | Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x… | 2024-11-29T21:55:36.783000Z |
| var-202105-1430 | An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL … | 2024-11-29T21:55:35.633000Z |
| var-201704-1589 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server t… | 2024-11-29T21:55:35.270000Z |
| var-201912-0641 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T21:55:29.015000Z |
| var-201006-1245 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-11-29T21:55:22.555000Z |
| var-201302-0065 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-11-29T21:55:22.262000Z |
| var-202002-1478 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-11-29T21:55:20.616000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2022-002537 | Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE | 2022-10-19T16:23+09:00 | 2024-06-12T16:54+09:00 |
| jvndb-2022-000081 | Lemon8 App fails to restrict access permissions | 2022-10-19T14:08+09:00 | 2024-06-12T16:39+09:00 |
| jvndb-2024-000062 | Denial-of-service (DoS) vulnerability in IPCOM WAF function | 2024-06-12T15:03+09:00 | 2024-06-12T15:03+09:00 |
| jvndb-2022-000075 | IPFire WebUI vulnerable to cross-site scripting | 2022-10-06T13:05+09:00 | 2024-06-12T14:28+09:00 |
| jvndb-2023-000013 | Ichiran App vulnerable to improper server certificate verification | 2023-02-06T14:31+09:00 | 2024-06-12T14:25+09:00 |
| jvndb-2022-000074 | BookStack vulnerable to cross-site scripting | 2022-09-30T14:48+09:00 | 2024-06-12T14:07+09:00 |
| jvndb-2022-000077 | The installer of Sony Content Transfer may insecurely load Dynamic Link Libraries | 2022-10-11T15:08+09:00 | 2024-06-12T12:12+09:00 |
| jvndb-2022-000076 | Growi vulnerable to improper access control | 2022-10-07T14:30+09:00 | 2024-06-12T12:04+09:00 |
| jvndb-2023-000017 | Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools | 2023-02-14T17:00+09:00 | 2024-06-12T11:15+09:00 |
| jvndb-2023-000012 | Vulnerability in Driver Distributor where passwords are stored in a recoverable format | 2023-01-31T14:14+09:00 | 2024-06-12T11:07+09:00 |
| jvndb-2023-000011 | SUSHIRO App for Android outputs sensitive information to the log file | 2023-01-31T14:10+09:00 | 2024-06-11T17:35+09:00 |
| jvndb-2023-001269 | File and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center | 2023-03-01T16:59+09:00 | 2024-06-11T16:42+09:00 |
| jvndb-2023-000014 | NEC PC Settings Tool vulnerable to missing authentication for critical function | 2023-02-10T14:43+09:00 | 2024-06-10T18:13+09:00 |
| jvndb-2023-000019 | Multiple cross-site scripting vulnerabilities in EC-CUBE | 2023-02-28T16:38+09:00 | 2024-06-10T17:28+09:00 |
| jvndb-2023-001212 | Multiple vulnerabilities in JTEKT ELECTRONICS Screen Creator Advance 2 | 2023-02-08T12:46+09:00 | 2024-06-10T17:25+09:00 |
| jvndb-2023-000018 | Multiple cross-site scripting vulnerabilities in SHIRASAGI | 2023-02-22T15:16+09:00 | 2024-06-10T17:18+09:00 |
| jvndb-2024-000058 | WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection | 2024-06-07T15:24+09:00 | 2024-06-10T17:08+09:00 |
| jvndb-2023-000023 | Multiple vulnerabilities in PostgreSQL extension module pg_ivm | 2023-03-06T15:22+09:00 | 2024-06-10T16:41+09:00 |
| jvndb-2023-001292 | Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service | 2023-03-02T17:33+09:00 | 2024-06-07T16:59+09:00 |
| jvndb-2023-001304 | Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software | 2023-03-06T15:31+09:00 | 2024-06-07T16:39+09:00 |
| jvndb-2023-000020 | web2py development tool vulnerable to open redirect | 2023-02-28T15:00+09:00 | 2024-06-07T16:31+09:00 |
| jvndb-2024-000060 | Multiple vulnerabilities in "FreeFrom - the nostr client" App | 2024-06-07T14:51+09:00 | 2024-06-07T14:51+09:00 |
| jvndb-2023-000021 | Multiple vulnerabilities in SS1 and Rakuraku PC Cloud | 2023-03-01T15:57+09:00 | 2024-06-06T18:02+09:00 |
| jvndb-2022-000086 | Aiphone Video Multi-Tenant System Entrance Stations vulnerable to information disclosure | 2022-11-10T13:40+09:00 | 2024-06-06T17:37+09:00 |
| jvndb-2023-000028 | baserCMS vulnerable to arbitrary file uploads | 2023-03-27T13:39+09:00 | 2024-06-06T17:31+09:00 |
| jvndb-2022-000079 | Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers | 2022-11-01T14:51+09:00 | 2024-06-06T17:01+09:00 |
| jvndb-2022-000084 | Multiple vulnerabilities in FUJI SOFT network devices | 2022-10-28T15:12+09:00 | 2024-06-06T16:48+09:00 |
| jvndb-2022-000087 | Multiple vulnerabilities in WordPress | 2022-11-08T14:59+09:00 | 2024-06-06T16:27+09:00 |
| jvndb-2022-000088 | TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation | 2022-11-14T16:45+09:00 | 2024-06-06T16:11+09:00 |
| jvndb-2022-000085 | WordPress Plugin "Salon booking system" vulnerable to cross-site scripting | 2022-11-08T15:07+09:00 | 2024-06-05T18:07+09:00 |
| ID | Description | Updated |
|---|