Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68558 |
N/A
|
WordPress Depicter Slider plugin <= 4.0.4 - Broken Acc… |
averta |
Depicter Slider |
2026-01-22T16:52:08.541Z | 2026-01-22T16:52:08.541Z |
| CVE-2025-68538 |
N/A
|
WordPress Craft | Coffee Shop Cafe Restaurant WordPres… |
ThemeGoods |
Craft |
2026-01-22T16:52:08.348Z | 2026-01-22T16:52:08.348Z |
| CVE-2025-68520 |
N/A
|
WordPress DotLife theme < 4.9.5 - Reflected Cross Site… |
ThemeGoods |
DotLife |
2026-01-22T16:52:08.148Z | 2026-01-22T16:52:08.148Z |
| CVE-2025-68518 |
N/A
|
WordPress Hoteller theme < 6.8.9 - Reflected Cross Sit… |
ThemeGoods |
Hoteller |
2026-01-22T16:52:07.893Z | 2026-01-22T16:52:07.893Z |
| CVE-2025-68510 |
N/A
|
WordPress Photography theme < 7.7.5 - Local File Inclu… |
ThemeGoods |
Photography |
2026-01-22T16:52:07.647Z | 2026-01-22T16:52:07.647Z |
| CVE-2025-68507 |
N/A
|
WordPress Icegram plugin <= 3.1.35 - Broken Access Con… |
Icegram |
Icegram |
2026-01-22T16:52:07.377Z | 2026-01-22T16:52:07.377Z |
| CVE-2025-68073 |
N/A
|
WordPress GDPR CCPA Compliance Support plugin <= 2.7.4… |
Ninja Team |
GDPR CCPA Compliance Support |
2026-01-22T16:52:07.197Z | 2026-01-22T16:52:07.197Z |
| CVE-2021-47875 |
4.6 (4.0)
9.8 (3.1)
|
GeoGebra CAS Calculator 6.0.631.0 - Denial of Service |
GeoGebra |
CAS Calculator |
2026-01-21T17:27:49.290Z | 2026-01-22T16:52:07.668Z |
| CVE-2025-68072 |
N/A
|
WordPress Easy Property Listings plugin <= 3.5.17 - Br… |
Merv Barrett |
Easy Property Listings |
2026-01-22T16:52:06.979Z | 2026-01-22T16:52:06.979Z |
| CVE-2025-68059 |
N/A
|
WordPress Hotel Listing plugin <= 1.4.2 - Broken Acces… |
e-plugins |
Hotel Listing |
2026-01-22T16:52:06.756Z | 2026-01-22T16:52:06.756Z |
| CVE-2025-68058 |
N/A
|
WordPress Institutions Directory plugin <= 1.3..4 - Br… |
e-plugins |
Institutions Directory |
2026-01-22T16:52:06.554Z | 2026-01-22T16:52:06.554Z |
| CVE-2025-68057 |
N/A
|
WordPress Hospital Doctor Directory plugin <= 1.3.9 - … |
e-plugins |
Hospital Doctor Directory |
2026-01-22T16:52:06.352Z | 2026-01-22T16:52:06.352Z |
| CVE-2025-68047 |
N/A
|
WordPress Eventin plugin <= 4.1.1 - PHP Object Injecti… |
Arraytics |
Eventin |
2026-01-22T16:52:06.124Z | 2026-01-22T16:52:06.124Z |
| CVE-2025-68046 |
N/A
|
WordPress Contact Form & Lead Form Elementor Builder p… |
ThemeHunk |
Contact Form & Lead Form Elementor Builder |
2026-01-22T16:52:05.895Z | 2026-01-22T16:52:05.895Z |
| CVE-2025-68041 |
N/A
|
WordPress Omnichannel for WooCommerce plugin <= 1.3.65… |
codisto |
Omnichannel for WooCommerce |
2026-01-22T16:52:05.698Z | 2026-01-22T16:52:05.698Z |
| CVE-2025-68039 |
N/A
|
WordPress WP BackItUp plugin <= 2.0.0 - Broken Access … |
Chris Simmons |
WP BackItUp |
2026-01-22T16:52:05.483Z | 2026-01-22T16:52:05.483Z |
| CVE-2025-68035 |
N/A
|
WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive D… |
tabbyai |
Tabby Checkout |
2026-01-22T16:52:05.252Z | 2026-01-22T16:52:05.252Z |
| CVE-2025-68034 |
N/A
|
WordPress CleverReach® WP plugin <= 1.5.22 - SQL Injec… |
CleverReach® |
CleverReach® WP |
2026-01-22T16:52:05.046Z | 2026-01-22T16:52:05.046Z |
| CVE-2025-68030 |
N/A
|
WordPress Frontis Blocks plugin <= 1.1.5 - Server Side… |
WP Messiah |
Frontis Blocks |
2026-01-22T16:52:04.821Z | 2026-01-22T16:52:04.821Z |
| CVE-2025-68027 |
N/A
|
WordPress Hydra Booking plugin <= 1.1.32 - Privilege E… |
Themefic |
Hydra Booking |
2026-01-22T16:52:04.595Z | 2026-01-22T16:52:04.595Z |
| CVE-2025-68020 |
N/A
|
WordPress WANotifier plugin <= 2.7.12 - Broken Access … |
WANotifier |
WANotifier |
2026-01-22T16:52:04.392Z | 2026-01-22T16:52:04.392Z |
| CVE-2025-68019 |
N/A
|
WordPress SEO Booster plugin <= 6.1.8 - Broken Access … |
cleverplugins |
SEO Booster |
2026-01-22T16:52:04.172Z | 2026-01-22T16:52:04.172Z |
| CVE-2025-68018 |
N/A
|
WordPress Order Listener for WooCommerce plugin <= 3.6… |
ilmosys |
Order Listener for WooCommerce |
2026-01-22T16:52:03.969Z | 2026-01-22T16:52:03.969Z |
| CVE-2025-68017 |
N/A
|
WordPress Antideo Email Validator plugin <= 1.0.10 - S… |
Antideo |
Antideo Email Validator |
2026-01-22T16:52:03.768Z | 2026-01-22T16:52:03.768Z |
| CVE-2025-68016 |
N/A
|
WordPress onepay Payment Gateway For WooCommerce plugi… |
Onepay Sri Lanka |
onepay Payment Gateway For WooCommerce |
2026-01-22T16:52:03.497Z | 2026-01-22T16:52:03.497Z |
| CVE-2025-68015 |
N/A
|
WordPress Event Tickets with Ticket Scanner plugin <= … |
Vollstart |
Event Tickets with Ticket Scanner |
2026-01-22T16:52:03.228Z | 2026-01-22T16:52:03.228Z |
| CVE-2025-68013 |
N/A
|
WordPress Payment Gateway Authorize.Net CIM for WooCom… |
cardpaysolutions |
Payment Gateway Authorize.Net CIM for WooCommerce |
2026-01-22T16:52:02.860Z | 2026-01-22T16:52:02.860Z |
| CVE-2025-68012 |
N/A
|
WordPress CodeColorer plugin <= 0.10.1 - Stored Cross … |
Dmytro Shteflyuk |
CodeColorer |
2026-01-22T16:52:02.470Z | 2026-01-22T16:52:02.470Z |
| CVE-2025-68011 |
N/A
|
WordPress GLS Shipping for WooCommerce plugin <= 1.4.0… |
GLS |
GLS Shipping for WooCommerce |
2026-01-22T16:52:02.251Z | 2026-01-22T16:52:02.251Z |
| CVE-2025-68010 |
N/A
|
WordPress Netgsm plugin <= 2.9.63 - Cross Site Scripti… |
netgsm |
Netgsm |
2026-01-22T16:52:01.876Z | 2026-01-22T16:52:01.876Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22360 |
N/A
|
WordPress SearchAzon plugin <= 1.4 - Cross Site Reques… |
AA-Team |
SearchAzon |
2026-01-22T16:52:35.360Z | 2026-01-22T16:52:35.360Z |
| CVE-2026-22358 |
N/A
|
WordPress Electrician - Electrical Service WordPress t… |
SmartDataSoft |
Electrician - Electrical Service WordPress |
2026-01-22T16:52:34.992Z | 2026-01-22T16:52:34.992Z |
| CVE-2026-22355 |
N/A
|
WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to S… |
gregmolnar |
Simple XML Sitemap |
2026-01-22T16:52:34.792Z | 2026-01-22T16:52:34.792Z |
| CVE-2026-22353 |
N/A
|
WordPress teachPress plugin <= 9.0.12 - Cross Site Scr… |
winkm89 |
teachPress |
2026-01-22T16:52:34.577Z | 2026-01-22T16:52:34.577Z |
| CVE-2026-22349 |
N/A
|
WordPress Menu In Post plugin <= 1.4.1 - Cross Site Sc… |
linux4me2 |
Menu In Post |
2026-01-22T16:52:34.382Z | 2026-01-22T16:52:34.382Z |
| CVE-2026-22348 |
N/A
|
WordPress Civic Cookie Control plugin <= 1.53 - Broken… |
Tasos Fel |
Civic Cookie Control |
2026-01-22T16:52:34.203Z | 2026-01-22T16:52:34.203Z |
| CVE-2026-22347 |
N/A
|
WordPress Carousel Horizontal Posts Content Slider plu… |
subhansanjaya |
Carousel Horizontal Posts Content Slider |
2026-01-22T16:52:34.003Z | 2026-01-22T16:52:34.003Z |
| CVE-2026-22278 |
8.1 (3.1)
|
Dell PowerScale OneFS versions prior to 9.13.0.0 … |
Dell |
PowerScale OneFS |
2026-01-22T16:16:51.354Z | 2026-01-23T04:55:31.938Z |
| CVE-2026-22200 |
8.7 (4.0)
|
osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export… |
Enhancesoft |
osTicket |
2026-01-12T18:34:12.781Z | 2026-01-22T16:36:11.800Z |
| CVE-2026-1260 |
8.5 (4.0)
|
Invalid Memory Access in Sentencepiece, |
Google |
Sentencepiece |
2026-01-22T17:06:17.340Z | 2026-01-22T18:22:36.273Z |
| CVE-2026-0713 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-15T13:10:37.421Z | 2026-01-22T17:03:07.512Z |
| CVE-2026-0712 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2026-01-15T13:10:14.250Z | 2026-01-22T17:02:26.020Z |
| CVE-2026-0535 |
7.1 (3.1)
|
Stored XSS in Electronic Library Component Description |
Autodesk |
Fusion |
2026-01-22T16:59:34.236Z | 2026-01-23T04:55:27.620Z |
| CVE-2026-0534 |
7.1 (3.1)
|
Stored XSS in the value of a part attribute |
Autodesk |
Fusion |
2026-01-22T16:59:01.906Z | 2026-01-23T04:55:28.798Z |
| CVE-2026-0533 |
7.1 (3.1)
|
Stored XSS in Fusion desktop when attempting to delete… |
Autodesk |
Fusion |
2026-01-22T16:58:43.084Z | 2026-01-23T04:55:29.845Z |
| CVE-2025-69828 |
10 (3.1)
|
File Upload vulnerability in TMS Global Software … |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:56:49.755Z |
| CVE-2025-69821 |
7.4 (3.1)
|
An issue in Beat XP VEGA Smartwatch (Firmware Ver… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:12:50.212Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:49:25.584Z |
| CVE-2025-69321 |
N/A
|
WordPress Grand Spa theme <= 3.5.5 - Reflected Cross S… |
ThemeGoods |
Grand Spa |
2026-01-22T16:52:33.817Z | 2026-01-22T16:52:33.817Z |
| CVE-2025-69320 |
N/A
|
WordPress Grand Magazine theme <= 3.5.7 - Reflected Cr… |
ThemeGoods |
Grand Magazine |
2026-01-22T16:52:33.616Z | 2026-01-22T16:52:33.616Z |
| CVE-2025-69319 |
N/A
|
WordPress Beaver Builder plugin <= 2.9.4.1 - Arbitrary… |
Beaver Builder |
Beaver Builder |
2026-01-22T16:52:33.399Z | 2026-01-22T16:52:33.399Z |
| CVE-2025-69318 |
N/A
|
WordPress JobWP plugin <= 2.4.5 - Cross Site Scripting… |
Hossni Mubarak |
JobWP |
2026-01-22T16:52:33.213Z | 2026-01-22T16:52:33.213Z |
| CVE-2025-69317 |
N/A
|
WordPress CarSpot theme < 2.4.6 - Reflected Cross Site… |
scriptsbundle |
CarSpot |
2026-01-22T16:52:33.014Z | 2026-01-22T16:52:33.014Z |
| CVE-2025-69316 |
N/A
|
WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross … |
RealMag777 |
TableOn |
2026-01-22T16:52:32.711Z | 2026-01-22T16:52:32.711Z |
| CVE-2025-69315 |
N/A
|
WordPress Simply Schedule Appointments plugin <= 1.6.9… |
NSquared |
Simply Schedule Appointments |
2026-01-22T16:52:32.496Z | 2026-01-22T16:52:32.496Z |
| CVE-2025-69314 |
N/A
|
WordPress Werkstatt theme < 4.8.3 - Local File Inclusi… |
fuelthemes |
Werkstatt |
2026-01-22T16:52:32.306Z | 2026-01-22T16:52:32.306Z |
| CVE-2025-69313 |
N/A
|
WordPress PostX plugin <= 5.0.3 - Broken Access Contro… |
WPXPO |
PostX |
2026-01-22T16:52:32.119Z | 2026-01-22T16:52:32.119Z |
| CVE-2025-69312 |
N/A
|
WordPress Xpro Elementor Addons plugin <= 1.4.19.1 - A… |
Xpro |
Xpro Elementor Addons |
2026-01-22T16:52:31.919Z | 2026-01-22T16:52:31.919Z |
| CVE-2025-69311 |
N/A
|
WordPress Broadstreet Ads plugin <= 1.52.1 - Broken Ac… |
Broadstreet |
Broadstreet Ads |
2026-01-22T16:52:31.715Z | 2026-01-22T16:52:31.715Z |
| CVE-2025-69300 |
N/A
|
WordPress Premium Addons for Elementor plugin <= 4.11.… |
Leap13 |
Premium Addons for Elementor |
2026-01-22T16:52:31.523Z | 2026-01-22T16:52:31.523Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-22278 | Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive auth… | 2026-01-22T17:16:31.027 | 2026-01-22T17:16:31.027 |
| fkie_cve-2026-22200 | Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrar… | 2026-01-12T19:16:02.933 | 2026-01-22T17:16:30.900 |
| fkie_cve-2026-1260 | Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file,… | 2026-01-22T17:16:30.643 | 2026-01-22T17:16:30.643 |
| fkie_cve-2026-0713 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-15T13:16:04.707 | 2026-01-22T17:16:30.583 |
| fkie_cve-2026-0712 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-01-15T13:16:04.490 | 2026-01-22T17:16:30.457 |
| fkie_cve-2026-0535 | A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can … | 2026-01-22T17:16:30.260 | 2026-01-22T17:16:30.260 |
| fkie_cve-2026-0534 | A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger… | 2026-01-22T17:16:29.113 | 2026-01-22T17:16:29.113 |
| fkie_cve-2026-0533 | A maliciously crafted HTML payload in a design name, when displayed during the delete confirmation … | 2026-01-22T17:16:28.937 | 2026-01-22T17:16:28.937 |
| fkie_cve-2025-69828 | File Upload vulnerability in TMS Global Software TMS Management Console v.6.3.7.27386.20250818 allo… | 2026-01-22T17:16:28.403 | 2026-01-22T17:16:28.403 |
| fkie_cve-2025-69821 | An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause… | 2026-01-22T16:16:07.927 | 2026-01-22T17:16:28.260 |
| fkie_cve-2025-69820 | Directory Traversal vulnerability in Beam beta9 v.0.1.552 allows a remote attacker to obtain sensit… | 2026-01-22T16:16:07.820 | 2026-01-22T17:16:28.110 |
| fkie_cve-2025-69321 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T17:16:27.977 | 2026-01-22T17:16:27.977 |
| fkie_cve-2025-69320 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T17:16:27.850 | 2026-01-22T17:16:27.850 |
| fkie_cve-2025-69319 | Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Bu… | 2026-01-22T17:16:27.713 | 2026-01-22T17:16:27.713 |
| fkie_cve-2025-69318 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T17:16:27.590 | 2026-01-22T17:16:27.590 |
| fkie_cve-2025-69317 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T17:16:27.463 | 2026-01-22T17:16:27.463 |
| fkie_cve-2025-69316 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T17:16:27.333 | 2026-01-22T17:16:27.333 |
| fkie_cve-2025-69315 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appoin… | 2026-01-22T17:16:27.210 | 2026-01-22T17:16:27.210 |
| fkie_cve-2025-69314 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T17:16:27.087 | 2026-01-22T17:16:27.087 |
| fkie_cve-2025-69313 | Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Conf… | 2026-01-22T17:16:26.960 | 2026-01-22T17:16:26.960 |
| fkie_cve-2025-69312 | Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-el… | 2026-01-22T17:16:26.840 | 2026-01-22T17:16:26.840 |
| fkie_cve-2025-69311 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting In… | 2026-01-22T17:16:26.720 | 2026-01-22T17:16:26.720 |
| fkie_cve-2025-69300 | Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-eleme… | 2026-01-22T17:16:26.597 | 2026-01-22T17:16:26.597 |
| fkie_cve-2025-69293 | Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Es… | 2026-01-22T17:16:26.487 | 2026-01-22T17:16:26.487 |
| fkie_cve-2025-69292 | Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privil… | 2026-01-22T17:16:26.360 | 2026-01-22T17:16:26.360 |
| fkie_cve-2025-69193 | Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Inco… | 2026-01-22T17:16:26.240 | 2026-01-22T17:16:26.240 |
| fkie_cve-2025-69192 | Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting … | 2026-01-22T17:16:26.123 | 2026-01-22T17:16:26.123 |
| fkie_cve-2025-69191 | Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectl… | 2026-01-22T17:16:26.003 | 2026-01-22T17:16:26.003 |
| fkie_cve-2025-69190 | Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Co… | 2026-01-22T17:16:25.883 | 2026-01-22T17:16:25.883 |
| fkie_cve-2025-69188 | Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting … | 2026-01-22T17:16:25.510 | 2026-01-22T17:16:25.510 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-974h-mvrg-683r |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-8j65-qv4g-w668 |
|
Missing Authorization vulnerability in cozythemes HomeLancer homelancer allows Exploiting Incorrect… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-8grh-35j3-wccg |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-8fgr-f6c7-2f3p |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-85x5-j495-6w2p |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-847h-pfgv-f8c6 |
|
Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.T… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-7pxr-5wpw-qprh |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-7m58-f7rw-34w4 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-73pc-r9cx-r7gr |
|
Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Co… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-6jqx-2qf9-j376 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-6c5m-7jp2-vf55 |
|
Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Objec… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-572q-472r-v8m3 |
|
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Ex… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-4gfm-jw9m-ghx4 |
|
Unrestricted Upload of File with Dangerous Type vulnerability in Farost Energia energia allows Uplo… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-3qcj-r6mr-vw7f |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-39xv-mjc6-x593 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-2c3r-p6wr-mq42 |
7.4 (3.1)
|
An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtai… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-xfqp-wv94-qg88 |
8.8 (3.1)
|
Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special … | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-w5j8-5p9w-gvx5 |
6.5 (3.1)
|
The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redb… | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-qh8q-v7p7-7r29 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-p3mh-h3wx-mj37 |
7.5 (3.1)
|
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub_… | 2026-01-21T18:30:30Z | 2026-01-22T18:30:31Z |
| ghsa-hxc4-9x7v-pg3w |
4.3 (3.1)
6.9 (4.0)
|
ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled … | 2026-01-12T18:30:30Z | 2026-01-22T18:30:31Z |
| ghsa-h8f2-wx3h-xm9j |
6.5 (3.1)
|
A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from… | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-gg82-289c-c9x8 |
7.5 (3.1)
|
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the security parameter of the s… | 2026-01-21T18:30:30Z | 2026-01-22T18:30:31Z |
| ghsa-g72w-mpcv-f9wf |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-fwhp-r738-fmpj |
9.8 (3.1)
|
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function … | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-f88v-cpjm-qpmx |
|
Cross-Site Request Forgery (CSRF) vulnerability in bdthemes Element Pack Elementor Addons bdthemes-… | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-ch44-h2f5-5fcf |
9.8 (3.1)
|
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, wh… | 2026-01-21T18:30:32Z | 2026-01-22T18:30:31Z |
| ghsa-73jg-4qh6-3f4g |
6.0 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v.0.1.552 allows a remote attacker to obtain sensit… | 2026-01-22T18:30:31Z | 2026-01-22T18:30:31Z |
| ghsa-4hcq-q3qf-q453 |
8.7 (4.0)
|
Enhancesoft osTicket versions up to and including 1.18.2 contain an arbitrary file read vulnerabili… | 2026-01-12T21:30:34Z | 2026-01-22T18:30:31Z |
| ghsa-3jfq-h25g-xqjx |
9.8 (3.1)
|
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, … | 2026-01-21T18:30:32Z | 2026-01-22T18:30:31Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-213 |
7.5 (3.1)
|
Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive informa… | mycli | 2023-10-19T22:15:00+00:00 | 2023-10-25T22:26:24.480718+00:00 |
| pysec-2023-212 |
4.2 (3.1)
|
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't re… | urllib3 | 2023-10-17T20:15:00+00:00 | 2023-10-25T18:28:34.811764+00:00 |
| pysec-2023-211 |
|
views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prev… | django-grappelli | 2023-10-22T19:15:00+00:00 | 2023-10-22T20:22:30.994719+00:00 |
| pysec-2023-210 |
|
views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.… | coderedcms | 2023-10-22T19:15:00+00:00 | 2023-10-22T20:22:30.887585+00:00 |
| pysec-2023-209 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0.… | json-logic | 2023-03-05T19:15:00+00:00 | 2023-10-20T16:31:18.877419+00:00 |
| pysec-2023-208 |
4.3 (3.1)
|
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been r… | eve-srp | 2023-02-06T17:15:00+00:00 | 2023-10-20T16:31:18.806057+00:00 |
| pysec-2023-207 |
6.1 (3.1)
|
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cros… | urllib3 | 2023-10-15T19:15:00+00:00 | 2023-10-19T16:33:01.297810+00:00 |
| pysec-2023-206 |
7.5 (3.1)
|
NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0. | selenium | 2023-10-15T23:15:00+00:00 | 2023-10-19T12:51:06.907613+00:00 |
| pysec-2023-205 |
|
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because… | langchain | 2023-10-19T05:15:00+00:00 | 2023-10-19T10:33:05.150766+00:00 |
| pysec-2023-204 |
4.3 (3.1)
|
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an … | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-18T20:24:08.594791+00:00 |
| pysec-2023-203 |
6.5 (3.1)
|
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows… | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-18T20:24:08.541134+00:00 |
| pysec-2023-202 |
6.5 (3.1)
|
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows au… | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-18T20:24:08.482939+00:00 |
| pysec-2023-201 |
4.3 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/colla… | vantage6 | 2023-10-11T20:15:00+00:00 | 2023-10-18T05:26:18.202930+00:00 |
| pysec-2023-200 |
4.3 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. When a collaboration is… | vantage6 | 2023-10-11T20:15:00+00:00 | 2023-10-18T05:26:18.112311+00:00 |
| pysec-2023-199 |
4.9 (3.1)
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2023-10-10T18:15:00+00:00 | 2023-10-17T22:26:17.611846+00:00 |
| pysec-2023-198 |
5.4 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0,… | vantage6-node | 2023-10-11T20:15:00+00:00 | 2023-10-17T18:31:16.643410+00:00 |
| pysec-2023-197 |
|
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user… | apache-airflow | 2023-10-14T10:15:00+00:00 | 2023-10-14T12:46:00.410542+00:00 |
| pysec-2023-196 |
7.2 (3.1)
|
vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0… | vantage6 | 2023-10-11T18:15:00+00:00 | 2023-10-13T22:28:56.802294+00:00 |
| pysec-2023-195 |
6.5 (3.1)
|
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1… | octoprint | 2023-10-09T16:15:00+00:00 | 2023-10-13T20:25:14.968230+00:00 |
| pysec-2023-193 |
4.8 (3.1)
|
Zope is an open-source web application server. The title property, available on most Zope… | zope | 2023-10-04T21:15:00+00:00 | 2023-10-10T20:21:16.174482+00:00 |
| pysec-2023-192 |
8.1 (3.1)
|
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Coo… | urllib3 | 2023-10-04T17:15:00+00:00 | 2023-10-10T14:28:19.389317+00:00 |
| pysec-2023-154 |
5.3 (3.1)
|
Datasette is an open source multi-tool for exploring and publishing data. This bug affect… | datasette | 2023-08-25T01:15:00Z | 2023-10-08T16:12:24.555320Z |
| pysec-2023-191 |
7.5 (3.1)
|
Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function doe… | vyper | 2023-09-27T15:19:00+00:00 | 2023-10-04T20:26:42.494872+00:00 |
| pysec-2023-190 |
7.5 (3.1)
|
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) s… | asyncua | 2023-10-03T05:15:00+00:00 | 2023-10-04T18:37:48.407821+00:00 |
| pysec-2023-189 |
7.5 (3.1)
|
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication s… | asyncua | 2023-10-03T05:15:00+00:00 | 2023-10-04T18:37:48.328804+00:00 |
| pysec-2023-162 |
9.8 (3.1)
|
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary… | langchain | 2023-09-01T16:15:00Z | 2023-10-04T16:56:57.465474Z |
| pysec-2023-188 |
7.5 (3.1)
|
When deserializing untrusted or corrupted data, it is possible for a reader to consume me… | avro | 2023-09-29T17:15:00+00:00 | 2023-10-03T22:26:25.361706+00:00 |
| pysec-2023-187 |
|
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration fil… | pretix | 2023-10-02T20:15:00+00:00 | 2023-10-02T22:26:51.461030+00:00 |
| pysec-2023-186 |
8.8 (3.1)
|
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffwe… | rdiffweb | 2023-09-29T14:15:00+00:00 | 2023-10-02T20:24:26.790735+00:00 |
| pysec-2023-185 |
3.7 (3.1)
|
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… | matrix-synapse | 2023-09-27T15:19:00+00:00 | 2023-09-30T05:24:54.158504+00:00 |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33343 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings f… | 2024-04-24T05:02:09.629632Z |
| gsd-2024-33342 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd funct… | 2024-04-24T05:02:09.645419Z |
| gsd-2024-33341 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.693276Z |
| gsd-2024-33340 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.656659Z |
| gsd-2024-33339 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.701010Z |
| gsd-2024-33338 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.642793Z |
| gsd-2024-33337 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.671742Z |
| gsd-2024-33336 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.604992Z |
| gsd-2024-33335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.644106Z |
| gsd-2024-33334 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.695143Z |
| gsd-2024-33333 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.713446Z |
| gsd-2024-33332 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.627010Z |
| gsd-2024-33331 | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-33891. Reason: This c… | 2024-04-24T05:02:09.621553Z |
| gsd-2024-33330 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.618353Z |
| gsd-2024-33329 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.739430Z |
| gsd-2024-33328 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.639108Z |
| gsd-2024-33327 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.692651Z |
| gsd-2024-33326 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.668985Z |
| gsd-2024-33325 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.699409Z |
| gsd-2024-33324 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706012Z |
| gsd-2024-33323 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.648147Z |
| gsd-2024-33322 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.697418Z |
| gsd-2024-33321 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.634157Z |
| gsd-2024-33320 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.704431Z |
| gsd-2024-33319 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.646296Z |
| gsd-2024-33318 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.663332Z |
| gsd-2024-33317 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.626500Z |
| gsd-2024-33316 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.720706Z |
| gsd-2024-33315 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.660426Z |
| gsd-2024-33314 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707734Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-190573 | Malicious code in gbiz-next (npm) | 2025-11-18T23:23:34Z | 2026-01-06T03:48:32Z |
| mal-2026-14 | Malicious code in ent-profile-unauth-msr-stop (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| mal-2026-13 | Malicious code in ent-file-upload-widget-v2 (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| mal-2026-12 | Malicious code in datatables-editor (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| MAL-2026-14 | Malicious code in ent-profile-unauth-msr-stop (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| MAL-2026-13 | Malicious code in ent-file-upload-widget-v2 (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| MAL-2026-12 | Malicious code in datatables-editor (npm) | 2026-01-02T22:06:48Z | 2026-01-06T03:48:31Z |
| mal-2025-192954 | Malicious code in api-umbrella-admin-ui (npm) | 2025-12-28T15:05:48Z | 2026-01-06T03:48:30Z |
| MAL-2025-192954 | Malicious code in api-umbrella-admin-ui (npm) | 2025-12-28T15:05:48Z | 2026-01-06T03:48:30Z |
| mal-2026-51 | Malicious code in async-substrate-interface-upgrade (PyPI) | 2026-01-05T17:33:17Z | 2026-01-05T22:42:07Z |
| MAL-2026-51 | Malicious code in async-substrate-interface-upgrade (PyPI) | 2026-01-05T17:33:17Z | 2026-01-05T22:42:07Z |
| mal-2026-55 | Malicious code in lium-io-gztensor (PyPI) | 2026-01-05T17:36:06Z | 2026-01-05T17:36:06Z |
| MAL-2026-55 | Malicious code in lium-io-gztensor (PyPI) | 2026-01-05T17:36:06Z | 2026-01-05T17:36:06Z |
| mal-2026-54 | Malicious code in lium-4-96 (PyPI) | 2026-01-05T17:34:51Z | 2026-01-05T17:34:51Z |
| MAL-2026-54 | Malicious code in lium-4-96 (PyPI) | 2026-01-05T17:34:51Z | 2026-01-05T17:34:51Z |
| mal-2026-52 | Malicious code in celium-collateral-upgrade (PyPI) | 2026-01-05T17:29:10Z | 2026-01-05T17:29:10Z |
| MAL-2026-52 | Malicious code in celium-collateral-upgrade (PyPI) | 2026-01-05T17:29:10Z | 2026-01-05T17:29:10Z |
| mal-2025-192688 | Malicious code in utif-updated (npm) | 2025-12-22T13:51:05Z | 2026-01-05T03:56:07Z |
| MAL-2025-192688 | Malicious code in utif-updated (npm) | 2025-12-22T13:51:05Z | 2026-01-05T03:56:07Z |
| mal-2025-192926 | Malicious code in @airtel-web/clickstream (npm) | 2025-12-24T12:20:46Z | 2026-01-05T03:56:04Z |
| MAL-2025-192926 | Malicious code in @airtel-web/clickstream (npm) | 2025-12-24T12:20:46Z | 2026-01-05T03:56:04Z |
| mal-2025-192937 | Malicious code in bettermode-common (npm) | 2025-12-25T19:41:57Z | 2026-01-05T03:03:30Z |
| MAL-2025-192937 | Malicious code in bettermode-common (npm) | 2025-12-25T19:41:57Z | 2026-01-05T03:03:30Z |
| MAL-2026-42 | Malicious code in pyrogrom (PyPI) | 2026-01-05T01:09:06Z | 2026-01-18T23:09:04Z |
| mal-2026-35 | Malicious code in aiihttp (PyPI) | 2026-01-04T18:50:00Z | 2026-01-04T18:50:00Z |
| MAL-2026-35 | Malicious code in aiihttp (PyPI) | 2026-01-04T18:50:00Z | 2026-01-04T18:50:00Z |
| mal-2026-37 | Malicious code in aoohttp (PyPI) | 2026-01-04T18:49:40Z | 2026-01-04T18:49:40Z |
| MAL-2026-37 | Malicious code in aoohttp (PyPI) | 2026-01-04T18:49:40Z | 2026-01-04T18:49:40Z |
| mal-2026-38 | Malicious code in auohttp (PyPI) | 2026-01-04T18:49:17Z | 2026-01-04T18:49:17Z |
| MAL-2026-38 | Malicious code in auohttp (PyPI) | 2026-01-04T18:49:17Z | 2026-01-04T18:49:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1859 | Intel Prozessoren: Schwachstelle ermöglicht Privilegieneskalation und Offenlegung von Informationen | 2019-12-10T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1846 | IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen | 2025-08-14T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1832 | VMware Tanzu Spring Framework: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-08-13T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1788 | IBM Storage Virtualize-Produkte: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1706 | poppler: Mehrere Schwachstellen | 2025-08-04T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1618 | Kubernetes Image Builder: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-21T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1042 | Adobe ColdFusion: Mehrere Schwachstellen | 2025-05-13T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-0574 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-03-16T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-2148 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2024-09-15T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-1837 | AMD Prozessoren: Mehrere Schwachstellen | 2024-08-13T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-0694 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-03-21T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-0508 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-02-28T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2024-0111 | GPUs verschiedener Hersteller: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-01-16T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2023-1127 | OpenLDAP: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-01-26T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2023-1059 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-20T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2023-1025 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2023-04-18T22:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2022-2186 | Linux Kernel: Schwachstellen ermöglicht Denial of Service | 2022-11-28T23:00:00.000+00:00 | 2025-08-18T22:00:00.000+00:00 |
| wid-sec-w-2025-1812 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1837 | Gitea: Mehrere Schwachstellen | 2025-08-14T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1836 | Flowise: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1827 | Dell PowerEdge BIOS: Mehrere Schwachstellen | 2025-08-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1799 | Intel Rapid Storage Technology: Schwachstelle ermöglicht Privilegieneskalation | 2025-08-12T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1723 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen | 2025-08-05T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1537 | ImageMagick: Mehrere Schwachstellen | 2025-07-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1118 | OWASP ModSecurity: Schwachstelle ermöglicht Denial of Service | 2025-05-21T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2024-3463 | Python: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-11-13T23:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2023-0965 | pgAdmin: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-04-13T22:00:00.000+00:00 | 2025-08-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1818 | Palo Alto Networks Cortex XDR: Schwachstelle ermöglicht Umgehen von Sicherheitsmechanismen | 2025-08-13T22:00:00.000+00:00 | 2025-08-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1775 | Ivanti Avalanche: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| wid-sec-w-2025-1774 | Ivanti Connect Secure und Policy Secure: Mehrere Schwachstelle | 2025-08-12T22:00:00.000+00:00 | 2025-08-12T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-831168 | SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-714170 | SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000 | 2021-12-16T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-675303 | SSA-675303: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products | 2021-07-13T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-654775 | SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-609880 | SSA-609880: File Parsing Vulnerabilities in Simcenter Femap before V2022.1 | 2022-02-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-316383 | SSA-316383: NumberJack Vulnerability in LOGO! CMR and SIMATIC RTU 3000 devices | 2021-09-14T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-211752 | SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA | 2021-06-08T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-100232 | SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches | 2019-08-13T00:00:00Z | 2022-02-08T00:00:00Z |
| ssa-845392 | SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-789208 | SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices | 2021-08-04T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-766247 | SSA-766247: Authentication Vulnerability in SIMATIC Process Historian | 2021-10-12T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-705111 | SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-439673 | SSA-439673: Information Disclosure Vulnerability in SIPROTEC 5 Devices | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-324998 | SSA-324998: Multiple Vulnerabilities in SICAM A8000 | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-201384 | SSA-201384: Predictable UDP Port Number Vulnerability (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-185699 | SSA-185699: Out of Bounds Write Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS | 2021-04-13T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-173318 | SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer | 2022-01-11T00:00:00Z | 2022-01-11T00:00:00Z |
| ssa-784507 | SSA-784507: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Products | 2021-12-28T00:00:00Z | 2021-12-28T00:00:00Z |
| ssa-479842 | SSA-479842: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer / Sensgear (Platform, Basic and Advanced) | 2021-12-21T00:00:00Z | 2021-12-23T00:00:00Z |
| ssa-397453 | SSA-397453: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUS | 2021-12-20T00:00:00Z | 2021-12-20T00:00:00Z |
| ssa-501673 | SSA-501673: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Products | 2021-12-19T00:00:00Z | 2021-12-19T00:00:00Z |
| ssa-802578 | SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-595101 | SSA-595101: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.2.0.5 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-523250 | SSA-523250: Improper Certificate Validation Vulnerability in SINUMERIK Edge | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-496292 | SSA-496292: Remote Code Execution Vulnerability in POWER METER SICAM Q100 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-463116 | SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-396621 | SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-390195 | SSA-390195: LibVNC Vulnerabilities in SIMATIC ITC Products | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-352143 | SSA-352143: Multiple File Parsing Vulnerabilities in JTTK before V11.0.3.0 and JT Utilities before V13.0.3.0 | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ssa-199605 | SSA-199605: Arbitrary File Download Vulnerability in SIMATIC eaSie PCS 7 Skill Package | 2021-12-14T00:00:00Z | 2021-12-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2026:0227 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-07T11:32:40+00:00 | 2026-01-22T22:39:55+00:00 |
| rhsa-2026:0226 | Red Hat Security Advisory: osbuild-composer security update | 2026-01-07T12:46:50+00:00 | 2026-01-22T22:39:55+00:00 |
| rhsa-2026:0050 | Red Hat Security Advisory: Red Hat OpenShift Builds 1.6.2 | 2026-01-05T08:04:03+00:00 | 2026-01-22T22:39:55+00:00 |
| rhsa-2025:8761 | Red Hat Security Advisory: HawtIO 4.2.0 for Red Hat build of Apache Camel 4 Release and security update. | 2025-06-10T10:39:32+00:00 | 2026-01-22T22:39:50+00:00 |
| rhsa-2025:8670 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.36.0 security update & enhancements | 2025-06-09T10:12:51+00:00 | 2026-01-22T22:39:49+00:00 |
| rhsa-2025:2710 | Red Hat Security Advisory: OpenShift Container Platform 4.14.49 bug fix and security update | 2025-03-19T20:54:49+00:00 | 2026-01-22T22:38:53+00:00 |
| rhsa-2025:2701 | Red Hat Security Advisory: OpenShift Container Platform 4.13.56 bug fix and security update | 2025-03-20T07:01:20+00:00 | 2026-01-22T22:38:50+00:00 |
| rhsa-2025:2441 | Red Hat Security Advisory: OpenShift Container Platform 4.12.74 bug fix and security update | 2025-03-13T16:28:27+00:00 | 2026-01-22T22:38:49+00:00 |
| rhsa-2025:23948 | Red Hat Security Advisory: grafana security update | 2025-12-22T17:10:29+00:00 | 2026-01-22T22:38:48+00:00 |
| rhsa-2025:23746 | Red Hat Security Advisory: grafana security update | 2025-12-22T01:42:33+00:00 | 2026-01-22T22:38:48+00:00 |
| rhsa-2025:23546 | Red Hat Security Advisory: Red Hat Quay 3.16.0 | 2025-12-17T18:13:48+00:00 | 2026-01-22T22:38:48+00:00 |
| rhsa-2025:23747 | Red Hat Security Advisory: grafana security update | 2025-12-22T01:42:23+00:00 | 2026-01-22T22:38:47+00:00 |
| rhsa-2025:23741 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-22T01:35:17+00:00 | 2026-01-22T22:38:46+00:00 |
| rhsa-2025:23740 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-22T01:19:27+00:00 | 2026-01-22T22:38:46+00:00 |
| rhsa-2025:23737 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-22T01:43:37+00:00 | 2026-01-22T22:38:45+00:00 |
| rhsa-2025:23736 | Red Hat Security Advisory: grafana security update | 2025-12-22T01:28:57+00:00 | 2026-01-22T22:38:45+00:00 |
| rhsa-2025:23733 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2025-12-22T01:38:52+00:00 | 2026-01-22T22:38:45+00:00 |
| rhsa-2025:23543 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-12-18T04:34:31+00:00 | 2026-01-22T22:38:44+00:00 |
| rhsa-2025:23421 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.8.1 release | 2025-12-16T22:09:50+00:00 | 2026-01-22T22:38:42+00:00 |
| rhsa-2025:23394 | Red Hat Security Advisory: skopeo security update | 2025-12-18T13:16:28+00:00 | 2026-01-22T22:38:41+00:00 |
| rhsa-2025:23374 | Red Hat Security Advisory: container-tools:rhel8 security update | 2025-12-18T13:15:55+00:00 | 2026-01-22T22:38:41+00:00 |
| rhsa-2025:23348 | Red Hat Security Advisory: skopeo security update | 2025-12-18T10:08:06+00:00 | 2026-01-22T22:38:41+00:00 |
| rhsa-2025:23347 | Red Hat Security Advisory: podman security update | 2025-12-18T10:09:41+00:00 | 2026-01-22T22:38:40+00:00 |
| rhsa-2025:23326 | Red Hat Security Advisory: skopeo security update | 2025-12-18T13:18:48+00:00 | 2026-01-22T22:38:40+00:00 |
| rhsa-2025:23325 | Red Hat Security Advisory: podman security update | 2025-12-18T13:20:27+00:00 | 2026-01-22T22:38:40+00:00 |
| rhsa-2025:23295 | Red Hat Security Advisory: podman security update | 2025-12-18T10:17:02+00:00 | 2026-01-22T22:38:39+00:00 |
| rhsa-2025:23294 | Red Hat Security Advisory: skopeo security update | 2025-12-18T10:13:42+00:00 | 2026-01-22T22:38:39+00:00 |
| rhsa-2025:23131 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update | 2025-12-11T14:11:51+00:00 | 2026-01-22T22:38:37+00:00 |
| rhsa-2025:23113 | Red Hat Security Advisory: OpenShift Container Platform 4.15.60 bug fix and security update | 2026-01-07T07:16:55+00:00 | 2026-01-22T22:38:35+00:00 |
| rhsa-2025:23088 | Red Hat Security Advisory: grafana security update | 2025-12-11T00:30:04+00:00 | 2026-01-22T22:38:35+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-15-092-01 | Schneider Electric VAMPSET Software Buffer Overflow Vulnerability | 2015-01-03T07:00:00.000000Z | 2025-06-06T21:40:34.059444Z |
| icsa-15-090-03 | Hospira MedNet Vulnerabilitie | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:27.581727Z |
| icsa-15-090-02 | Ecava IntegraXor DLL Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:21.136198Z |
| icsa-15-090-01 | Inductive Automation Ignition Vulnerabilities | 2015-01-01T07:00:00.000000Z | 2025-06-06T21:40:14.674541Z |
| icsa-15-085-01a | Schneider Electric InduSoft Web Studio and InTouch Machine Edition 2014 Vulnerabilities (Update A) | 2015-12-27T07:00:00.000000Z | 2025-06-06T21:40:08.191186Z |
| icsa-15-076-02 | Honeywell XL Web Controller Directory Traversal Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:40:01.723578Z |
| icsa-15-076-01 | XZERES 442SR Wind Turbine Vulnerability | 2015-12-18T07:00:00.000000Z | 2025-06-06T21:39:55.283613Z |
| icsa-15-071-01 | Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability | 2015-12-13T07:00:00.000000Z | 2025-06-06T21:39:48.399594Z |
| icsa-15-027-02 | Schneider Electric Multiple Products Buffer Overflow Vulnerability | 2015-10-30T06:00:00.000000Z | 2025-06-06T18:47:40.171170Z |
| icsa-15-006-01 | Eaton Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet Vulnerability | 2015-10-09T06:00:00.000000Z | 2025-06-06T18:47:33.703835Z |
| icsa-14-353-01c | Network Time Protocol Vulnerabilities | 2014-09-21T06:00:00.000000Z | 2025-06-06T18:46:55.063437Z |
| icsa-14-273-01 | SchneiderWEB Server Directory Traversal Vulnerability | 2014-07-03T06:00:00.000000Z | 2025-06-06T18:46:48.565481Z |
| icsa-14-269-01a | Bash Command Injection Vulnerability | 2014-06-29T06:00:00.000000Z | 2025-06-06T18:46:41.883464Z |
| icsa-14-238-02 | Schneider Electric Wonderware Vulnerabilities | 2014-05-29T06:00:00.000000Z | 2025-06-06T18:46:09.707282Z |
| icsa-14-205-01 | Morpho Itemiser 3 Hard-Coded Credential | 2014-04-26T06:00:00.000000Z | 2025-06-06T18:46:03.252742Z |
| icsa-14-202-01a | OleumTech WIO Family Vulnerabilities | 2014-04-23T06:00:00.000000Z | 2025-06-06T18:45:43.946744Z |
| icsa-14-114-02 | Siemens SIMATIC S7-1200 CPU Web Vulnerabilities | 2014-01-25T07:00:00.000000Z | 2025-06-06T18:45:30.985803Z |
| icsa-14-114-01 | Certec atvise scada OpenSSL Heartbleed Vulnerability | 2014-01-25T07:00:00.000000Z | 2025-06-06T18:45:24.365433Z |
| icsa-14-107-02 | InduSoft Web Studio Directory Traversal Vulnerability | 2014-01-18T07:00:00.000000Z | 2025-06-06T18:45:17.946852Z |
| icsa-14-107-01 | Siemens SINEMA Vulnerabilities | 2014-01-18T07:00:00.000000Z | 2025-06-06T18:44:58.592001Z |
| icsa-14-016-01 | Ecava IntegraXor Buffer Overflow Vulnerability | 2014-10-19T06:00:00.000000Z | 2025-06-06T18:44:52.152987Z |
| icsa-14-014-01 | Schneider Electric ClearSCADA Uncontrolled Resource Consumption Vulnerability | 2014-10-17T06:00:00.000000Z | 2025-06-06T18:44:45.696445Z |
| icsa-14-010-01 | MatrikonOPC Improper Input Validation | 2014-10-13T06:00:00.000000Z | 2025-06-06T18:44:39.268482Z |
| icsa-14-008-01 | Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability | 2014-10-11T06:00:00.000000Z | 2025-06-06T18:44:32.855266Z |
| icsa-14-007-01b | Sierra Wireless AirLink Raven X EV-DO Vulnerabilities (Update B) | 2014-10-10T06:00:00.000000Z | 2025-06-06T18:44:19.916379Z |
| icsa-14-006-01 | Schneider Electric Telvent SAGE RTU DNP3 Improper Input Validation Vulnerability | 2014-10-09T06:00:00.000000Z | 2025-06-06T18:44:13.497573Z |
| icsa-13-350-01a | Schneider Electric CitectSCADA Products Exception Handler Vulnerability (Update A) | 2013-09-18T06:00:00.000000Z | 2025-06-06T18:43:53.863083Z |
| icsa-13-347-01 | Siemens COMOS Privilege Escalation | 2013-09-15T06:00:00.000000Z | 2025-06-06T18:43:47.381681Z |
| icsa-13-346-02 | Cooper Power Systems Cybectec DNP3 Master OPC Server Improper Input Validation | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:40.964007Z |
| icsa-13-346-01 | Cooper Power Systems Improper Input Validation Vulnerability | 2013-09-14T06:00:00.000000Z | 2025-06-06T18:43:28.031039Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cucm-priv-esc-D8Bky5eg | Cisco Unified Communications Products Privilege Escalation Vulnerability | 2023-08-30T16:00:00+00:00 | 2023-08-30T16:00:00+00:00 |
| cisco-sa-clamav-rnwneeee | ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-25T16:08:02+00:00 |
| cisco-sa-clamav-rNwNEEee | ClamAV HFS+ File Scanning Infinite Loop Denial of Service Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-25T16:08:02+00:00 |
| cisco-sa-nxos-sftp-xvap5hfd | Cisco Nexus 3000 and 9000 Series Switches SFTP Server File Access Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-sftp-xVAp5Hfd | Cisco Nexus 3000 and 9000 Series Switches SFTP Server File Access Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-remoteauth-dos-xb6pv74m | Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-remoteauth-dos-XB6pv74m | Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-n3_9k-isis-dos-ftcxb4vb | Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb | Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fxos-arbitrary-file-blk6yupl | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fxos-arbitrary-file-BLk6YupL | Cisco FXOS Software Arbitrary File Write Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69nao | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO | Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects SNMP Denial of Service Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-f4tashk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-apic-uapa-F4TAShk | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | 2023-08-23T16:00:00+00:00 | 2023-08-23T16:00:00+00:00 |
| cisco-sa-te-va-priv-esc-pudgrx8e | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-te-va-priv-esc-PUdgrx8E | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T22:00:29+00:00 |
| cisco-sa-thoueye-privesc-nvhhgwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-thoueye-privesc-NVhHGwb3 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-17T21:54:23+00:00 |
| cisco-sa-umbrella-tunnel-gjw5thge | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-umbrella-tunnel-gJw5thgE | Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-jjeqdt3s | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-uccx-wcp-JJeqDT3S | Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-ttjo62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-storedxss-tTjO62r | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-bfjsrjp5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-pi-epnm-BFjSRJP5 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-c5xrbboy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ivpa-cmdinj-C5XRbbOy | Cisco Intersight Private Virtual Appliance Command Injection Vulnerabilities | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| cisco-sa-ise-credentials-tkto3h3 | Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability | 2023-08-16T16:00:00+00:00 | 2023-08-16T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-37731 | Elasticsearch Improper Authentication | 2025-12-02T00:00:00.000Z | 2025-12-16T01:01:28.000Z |
| msrc_cve-2025-39863 | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 2025-09-02T00:00:00.000Z | 2025-12-15T14:36:24.000Z |
| msrc_cve-2023-53376 | scsi: mpi3mr: Use number of bits to manage bitmap sizes | 2025-09-02T00:00:00.000Z | 2025-12-15T14:36:14.000Z |
| msrc_cve-2025-14174 | Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE | 2025-12-09T08:00:00.000Z | 2025-12-15T08:00:00.000Z |
| msrc_cve-2025-61727 | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 2025-12-02T00:00:00.000Z | 2025-12-13T01:39:00.000Z |
| msrc_cve-2025-61729 | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 2025-12-02T00:00:00.000Z | 2025-12-13T01:38:50.000Z |
| msrc_cve-2025-61725 | Excessive CPU consumption in ParseAddress in net/mail | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:56.000Z |
| msrc_cve-2025-47912 | Insufficient validation of bracketed IPv6 hostnames in net/url | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:52.000Z |
| msrc_cve-2025-58188 | Panic when validating certificates with DSA public keys in crypto/x509 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:47.000Z |
| msrc_cve-2025-58185 | Parsing DER payload can cause memory exhaustion in encoding/asn1 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:42.000Z |
| msrc_cve-2025-61723 | Quadratic complexity when parsing some invalid inputs in encoding/pem | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:37.000Z |
| msrc_cve-2025-58187 | Quadratic complexity when checking name constraints in crypto/x509 | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:32.000Z |
| msrc_cve-2025-61724 | Excessive CPU consumption in Reader.ReadResponse in net/textproto | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:27.000Z |
| msrc_cve-2025-58186 | Lack of limit when parsing cookies can cause memory exhaustion in net/http | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:22.000Z |
| msrc_cve-2025-58183 | Unbounded allocation when parsing GNU sparse map in archive/tar | 2025-10-02T00:00:00.000Z | 2025-12-13T01:37:17.000Z |
| msrc_cve-2025-14523 | Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) | 2025-12-02T00:00:00.000Z | 2025-12-13T01:02:10.000Z |
| msrc_cve-2023-53401 | mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:40.000Z |
| msrc_cve-2023-53383 | irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:29.000Z |
| msrc_cve-2023-53366 | block: be a bit more careful in checking for NULL bdev while polling | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:18.000Z |
| msrc_cve-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-12T08:00:00.000Z |
| msrc_cve-2023-45284 | Incorrect detection of reserved device names on Windows in path/filepath | 2023-11-01T07:00:00.000Z | 2025-12-12T01:03:18.000Z |
| msrc_cve-2025-49176 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:03:03.000Z |
| msrc_cve-2025-49177 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:58.000Z |
| msrc_cve-2025-49179 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:52.000Z |
| msrc_cve-2025-49175 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:48.000Z |
| msrc_cve-2024-26800 | tls: fix use-after-free on failed backlog decryption | 2024-04-02T07:00:00.000Z | 2025-12-12T01:02:42.000Z |
| msrc_cve-2023-53438 | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:37.000Z |
| msrc_cve-2023-53429 | btrfs: don't check PageError in __extent_writepage | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:32.000Z |
| msrc_cve-2023-53424 | clk: mediatek: fix of_iomap memory leak | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:26.000Z |
| msrc_cve-2023-53421 | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:21.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201904-0745 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:45:17.108000Z |
| var-201804-1188 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T20:45:16.469000Z |
| var-201609-0225 | xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tv… | 2024-07-23T20:45:16.331000Z |
| var-201806-1470 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS bef… | 2024-07-23T20:45:14.555000Z |
| var-200809-0007 | slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users… | 2024-07-23T20:44:44.791000Z |
| var-201006-1210 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… | 2024-07-23T20:44:14.225000Z |
| var-202105-1460 | A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a… | 2024-07-23T20:44:13.974000Z |
| var-202201-0468 | build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. E… | 2024-07-23T20:43:40.086000Z |
| var-201203-0202 | The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle hist… | 2024-07-23T20:43:37.316000Z |
| var-200511-0015 | Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) imple… | 2024-07-23T20:43:37.451000Z |
| var-200704-0219 | The Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update windo… | 2024-07-23T20:43:06.968000Z |
| var-201912-1852 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:42:33.012000Z |
| var-201112-0123 | Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java … | 2024-07-23T20:42:32.055000Z |
| var-200912-0751 | Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allo… | 2024-07-23T20:42:29.412000Z |
| var-201912-0562 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in mac… | 2024-07-23T20:42:28.177000Z |
| var-200701-0021 | Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possib… | 2024-07-23T20:42:28.331000Z |
| var-201111-0129 | Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted re… | 2024-07-23T20:42:26.633000Z |
| var-201302-0150 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T20:42:21.826000Z |
| var-201906-1175 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an… | 2024-07-23T20:42:20.367000Z |
| var-201512-0484 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh,… | 2024-07-23T20:40:42.235000Z |
| var-201202-0075 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:40:42.117000Z |
| var-201912-0615 | An out-of-bounds read was addressed with improved input validation. This issue is fixed i… | 2024-07-23T20:40:41.310000Z |
| var-201008-1003 | The INCLUDE_SECURITY functionality in Wind River VxWorks 6.x, 5.x, and earlier uses the L… | 2024-07-23T20:40:40.038000Z |
| var-201302-0021 | Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x befor… | 2024-07-23T20:40:39.185000Z |
| var-201712-0268 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari be… | 2024-07-23T20:39:34.454000Z |
| var-201202-0245 | Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, L… | 2024-07-23T20:39:34.535000Z |
| var-201912-0115 | A dynamic library loading issue existed in iTunes setup. This was addressed with improved… | 2024-07-23T20:39:32.578000Z |
| var-200608-0029 | AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of… | 2024-07-23T20:39:32.646000Z |
| var-202102-1488 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique… | 2024-07-23T20:39:26.069000Z |
| var-202202-0101 | In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. =======… | 2024-07-23T20:39:22.998000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000112 | Apache Struts vulnerable to validation bypass in Getter method | 2016-06-20T17:19+09:00 | 2022-08-09T14:08+09:00 |
| jvndb-2016-000111 | Apache Struts vulnerable to cross-site request forgery | 2016-06-20T17:18+09:00 | 2022-08-09T14:05+09:00 |
| jvndb-2020-000055 | Apache Struts 2 vulnerable to denial-of-service (DoS) | 2020-08-25T13:59+09:00 | 2022-08-09T13:57+09:00 |
| jvndb-2020-000084 | Apache Struts 2 vulnerable to remote code execution (S2-061) | 2020-12-11T15:09+09:00 | 2022-08-09T13:55+09:00 |
| jvndb-2022-000062 | Kaitai Struct: compiler vulnerable to denial-of-service (DoS) | 2022-08-04T15:14+09:00 | 2022-08-04T15:14+09:00 |
| jvndb-2022-002143 | Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator | 2022-08-01T17:10+09:00 | 2022-08-01T17:10+09:00 |
| jvndb-2022-000061 | "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path | 2022-07-28T13:40+09:00 | 2022-07-28T13:40+09:00 |
| jvndb-2021-000007 | OS command injection vulnerability in multiple Infoscience Corporation log management tools | 2021-01-27T18:31+09:00 | 2022-07-26T15:53+09:00 |
| jvndb-2022-001953 | Growi vulnerable to weak password requirements | 2022-06-15T17:47+09:00 | 2022-06-15T17:47+09:00 |
| jvndb-2021-000073 | Multiple vulnerabilities in Cybozu Garoon | 2021-08-02T16:42+09:00 | 2022-05-24T15:16+09:00 |
| jvndb-2022-001800 | Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries | 2022-05-13T16:24+09:00 | 2022-05-13T16:24+09:00 |
| jvndb-2021-000097 | Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X | 2021-10-29T15:22+09:00 | 2022-04-20T14:03+09:00 |
| jvndb-2022-001526 | Trend Micro Antivirus for Mac vulnerable to privilege escalation | 2022-04-07T16:58+09:00 | 2022-04-07T16:58+09:00 |
| jvndb-2017-000174 | Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries | 2017-07-14T13:38+09:00 | 2022-03-31T17:43+09:00 |
| jvndb-2022-001494 | Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents | 2022-03-31T17:25+09:00 | 2022-03-31T17:25+09:00 |
| jvndb-2021-004912 | Multiple vulnerabilities in multiple ELECOM routers | 2021-12-02T17:16+09:00 | 2022-03-30T16:11+09:00 |
| jvndb-2021-000108 | Multiple vulnerabilities in multiple ELECOM LAN routers | 2021-11-30T16:23+09:00 | 2022-03-29T16:18+09:00 |
| jvndb-2022-001477 | Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection | 2022-03-23T12:08+09:00 | 2022-03-23T12:08+09:00 |
| jvndb-2022-000021 | Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security" | 2022-03-16T14:46+09:00 | 2022-03-16T14:46+09:00 |
| jvndb-2021-008345 | Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries | 2022-03-14T16:43+09:00 | 2022-03-14T16:43+09:00 |
| jvndb-2022-001404 | Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2022-03-11T15:55+09:00 | 2022-03-11T15:55+09:00 |
| jvndb-2022-000016 | UNIVERGE WA Series vulnerable to OS command injection | 2022-03-10T14:31+09:00 | 2022-03-10T14:31+09:00 |
| jvndb-2022-001383 | Directory Permission Vulnerability in Hitachi Ops Center Viewpoint | 2022-03-07T15:45+09:00 | 2022-03-07T15:45+09:00 |
| jvndb-2022-001382 | File Permission Vulnerability in Hitachi Command Suite | 2022-03-07T15:35+09:00 | 2022-03-07T15:35+09:00 |
| jvndb-2022-000008 | i-FILTER vulnerable to improper check for certificate revocation | 2022-03-04T14:12+09:00 | 2022-03-04T14:12+09:00 |
| jvndb-2022-000017 | Norton Security for Mac improperly processes ICMP packets | 2022-03-03T14:32+09:00 | 2022-03-03T14:32+09:00 |
| jvndb-2022-001380 | Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022) | 2022-03-02T17:07+09:00 | 2022-03-02T17:07+09:00 |
| jvndb-2021-000109 | Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields" | 2021-12-02T15:02+09:00 | 2022-02-18T16:18+09:00 |
| jvndb-2022-000014 | Multiple vulnerabilities in a-blog cms | 2022-02-18T15:55+09:00 | 2022-02-18T15:55+09:00 |
| jvndb-2022-000012 | Multiple vulnerabilities in phpUploader | 2022-02-17T15:20+09:00 | 2022-02-17T15:20+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:03557-1 | Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) | 2025-10-11T22:33:38Z | 2025-10-11T22:33:38Z |
| suse-su-2025:03555-1 | Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5) | 2025-10-11T20:33:39Z | 2025-10-11T20:33:39Z |
| suse-su-2025:03554-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-10-11T18:33:41Z | 2025-10-11T18:33:41Z |
| suse-su-2025:03553-1 | Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) | 2025-10-11T18:33:34Z | 2025-10-11T18:33:34Z |
| suse-su-2025:03552-1 | Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4) | 2025-10-11T16:04:03Z | 2025-10-11T16:04:03Z |
| suse-su-2025:03551-1 | Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) | 2025-10-11T16:03:56Z | 2025-10-11T16:03:56Z |
| suse-su-2025:03550-1 | Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4) | 2025-10-11T07:04:07Z | 2025-10-11T07:04:07Z |
| suse-su-2025:03548-1 | Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4) | 2025-10-11T04:04:15Z | 2025-10-11T04:04:15Z |
| suse-su-2025:03547-1 | Security update for go1.25 | 2025-10-11T01:22:18Z | 2025-10-11T01:22:18Z |
| suse-su-2025:03546-1 | Security update for openssl-3 | 2025-10-11T01:21:37Z | 2025-10-11T01:21:37Z |
| suse-su-2025:03545-1 | Security update for docker-stable | 2025-10-11T01:20:50Z | 2025-10-11T01:20:50Z |
| suse-su-2025:03543-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-10-10T23:33:44Z | 2025-10-10T23:33:44Z |
| suse-su-2025:03541-1 | Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4) | 2025-10-10T20:33:43Z | 2025-10-10T20:33:43Z |
| suse-su-2025:03540-1 | Security update for docker-stable | 2025-10-10T19:04:02Z | 2025-10-10T19:04:02Z |
| suse-su-2025:03539-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) | 2025-10-10T18:33:52Z | 2025-10-10T18:33:52Z |
| suse-su-2025:03538-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-10-10T18:03:53Z | 2025-10-10T18:03:53Z |
| suse-su-2025:03537-1 | Security update for expat | 2025-10-10T15:21:54Z | 2025-10-10T15:21:54Z |
| suse-su-2025:03536-1 | Security update for expat | 2025-10-10T15:20:27Z | 2025-10-10T15:20:27Z |
| suse-su-2025:03535-1 | Security update for open-vm-tools | 2025-10-10T15:15:12Z | 2025-10-10T15:15:12Z |
| suse-su-2025:03534-1 | Security update for podman | 2025-10-10T15:14:45Z | 2025-10-10T15:14:45Z |
| suse-su-2025:03533-1 | Security update for podofo | 2025-10-10T15:14:05Z | 2025-10-10T15:14:05Z |
| suse-su-2025:03529-1 | Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3) | 2025-10-10T12:33:59Z | 2025-10-10T12:33:59Z |
| suse-su-2025:03528-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3) | 2025-10-10T12:03:56Z | 2025-10-10T12:03:56Z |
| suse-su-2025:03525-1 | Security update for go1.25-openssl | 2025-10-10T10:33:19Z | 2025-10-10T10:33:19Z |
| suse-su-2025:03524-1 | Security update for go1.25-openssl | 2025-10-10T10:32:57Z | 2025-10-10T10:32:57Z |
| suse-su-2025:03523-1 | Security update for openssl-1_1-livepatches | 2025-10-10T07:23:15Z | 2025-10-10T07:23:15Z |
| suse-su-2025:03522-1 | Security update for openssl-1_1-livepatches | 2025-10-10T07:23:10Z | 2025-10-10T07:23:10Z |
| suse-su-2025:03521-1 | Security update for squid | 2025-10-10T07:23:03Z | 2025-10-10T07:23:03Z |
| suse-su-2025:03520-1 | Security update for cJSON | 2025-10-10T07:22:44Z | 2025-10-10T07:22:44Z |
| suse-su-2025:20844-1 | Security update for aaa_base | 2025-10-09T14:42:20Z | 2025-10-09T14:42:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15173-1 | s390-tools-2.37.0-4.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15172-1 | libmozjs-128-0-128.10.1-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15171-1 | grafana-11.6.1+security01-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15170-1 | firefox-esr-128.11.0-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15169-1 | containerd-1.7.27-1.1 on GA media | 2025-05-27T00:00:00Z | 2025-05-27T00:00:00Z |
| opensuse-su-2025:15168-1 | yelp-xsl-42.1-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15167-1 | libyelp0-42.2-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15166-1 | umoci-0.5.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15165-1 | libnss_slurm2-24.11.5-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15164-1 | screen-4.9.1-5.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15163-1 | python312-3.12.10-4.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15162-1 | prometheus-blackbox_exporter-0.24.0-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15161-1 | jq-1.7.1-3.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15160-1 | jetty-annotations-9.4.57-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15159-1 | govulncheck-vulndb-0.0.20250523T151856-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15158-1 | gh-2.73.0-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15157-1 | dnsdist-1.9.10-2.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15156-1 | bind-9.20.9-1.1 on GA media | 2025-05-26T00:00:00Z | 2025-05-26T00:00:00Z |
| opensuse-su-2025:15155-1 | transfig-3.2.9a-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15154-1 | python313-3.13.3-3.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15153-1 | python311-tornado6-6.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15152-1 | python311-Flask-3.1.1-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15151-1 | libecpg6-17.5-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15150-1 | audiofile-0.3.6-16.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15149-1 | MozillaThunderbird-128.10.2-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15148-1 | MozillaFirefox-138.0.4-1.1 on GA media | 2025-05-23T00:00:00Z | 2025-05-23T00:00:00Z |
| opensuse-su-2025:15147-1 | kubo-0.35.0-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| opensuse-su-2025:15146-1 | kind-0.29.0-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| opensuse-su-2025:15145-1 | grafana-11.6.1-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| opensuse-su-2025:15144-1 | govulncheck-vulndb-0.0.20250520T172319-1.1 on GA media | 2025-05-22T00:00:00Z | 2025-05-22T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29714 | TOTOLINK A950RG命令注入漏洞 | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29713 | TOTOLINK A950RG缓冲区溢出漏洞 | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29712 | TOTOLINK A720R堆栈缓冲区溢出漏洞 | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29711 | TOTOLINK A720R命令注入漏洞（CNVD-2025-29711） | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29710 | TOTOLINK A720R命令注入漏洞（CNVD-2025-29710） | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29709 | Google Android信息泄露漏洞（CNVD-2025-29709） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29708 | Google Android拒绝服务漏洞（CNVD-2025-29708） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29707 | Google Android权限提升漏洞（CNVD-2025-29707） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29706 | Google Android权限提升漏洞（CNVD-2025-29706） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29705 | Google Android权限提升漏洞（CNVD-2025-29705） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29704 | Google Android权限提升漏洞（CNVD-2025-29704） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29703 | Google Android权限提升漏洞（CNVD-2025-29703） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29702 | Google Android权限提升漏洞（CNVD-2025-29702） | 2025-09-08 | 2025-12-02 |
| cnvd-2025-29701 | Adobe Photoshop堆缓冲区溢出漏洞（CNVD-2025-29701） | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29700 | Adobe Illustrator on iPads堆缓冲区溢出漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29699 | Adobe InDesign内存错误引用漏洞（CNVD-2025-29699） | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29698 | Adobe InDesign内存错误引用漏洞（CNVD-2025-29698） | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29692 | Adobe Substance3D Stager内存错误引用漏洞（CNVD-2025-29692） | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29691 | Adobe Substance3D Stager内存错误引用漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29690 | Adobe Substance3D Stager整数下溢漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29689 | Adobe Substance3D Stager越界读取漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29688 | Adobe Pass Authentication Android SDK不正确授权漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29687 | TOTOLINK X6000R命令注入漏洞 | 2024-01-25 | 2025-12-02 |
| cnvd-2025-29686 | Google Chrome on iO SInternals释放后重用漏洞 | 2025-11-18 | 2025-12-02 |
| cnvd-2025-29685 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29685） | 2024-07-12 | 2025-12-01 |
| cnvd-2025-29684 | D-Link DAP-2622栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29684） | 2024-07-12 | 2025-12-01 |
| cnvd-2025-29683 | D-Link DAP-2622栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29683） | 2024-07-12 | 2025-12-01 |
| cnvd-2025-29682 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29682） | 2024-07-12 | 2025-12-01 |
| cnvd-2025-29681 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29681） | 2024-07-12 | 2025-12-01 |
| cnvd-2025-29680 | D-Link DAP-2622堆栈缓冲区溢出远程代码执行漏洞（CNVD-2025-29680） | 2024-07-12 | 2025-12-01 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0826 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0825 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0824 | Multiples vulnérabilités dans les produits FoxIT | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0823 | Vulnérabilité dans Liferay | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0822 | Multiples vulnérabilités dans Tenable Security Center | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0821 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| CERTFR-2025-AVI-0820 | Multiples vulnérabilités dans GitLab | 2025-09-26T00:00:00.000000 | 2025-09-26T00:00:00.000000 |
| certfr-2025-avi-0819 | Multiples vulnérabilités dans les produits Cisco | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0818 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0817 | Vulnérabilité dans Microsoft OmniParser | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0816 | Vulnérabilité dans StormShield Network Security | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| CERTFR-2025-AVI-0819 | Multiples vulnérabilités dans les produits Cisco | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| CERTFR-2025-AVI-0818 | Multiples vulnérabilités dans Cisco IOS et IOS XE | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| CERTFR-2025-AVI-0817 | Vulnérabilité dans Microsoft OmniParser | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| CERTFR-2025-AVI-0816 | Vulnérabilité dans StormShield Network Security | 2025-09-25T00:00:00.000000 | 2025-09-25T00:00:00.000000 |
| certfr-2025-avi-0815 | Vulnérabilité dans Liferay | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0814 | Multiples vulnérabilités dans Google Chrome | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| CERTFR-2025-AVI-0815 | Vulnérabilité dans Liferay | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| CERTFR-2025-AVI-0814 | Multiples vulnérabilités dans Google Chrome | 2025-09-24T00:00:00.000000 | 2025-09-24T00:00:00.000000 |
| certfr-2025-avi-0813 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0812 | Vulnérabilité dans Synology Safe Access pour SRM | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0811 | Multiples vulnérabilités dans Liferay | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| CERTFR-2025-AVI-0813 | Vulnérabilité dans SolarWinds Web Help Desk | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| CERTFR-2025-AVI-0812 | Vulnérabilité dans Synology Safe Access pour SRM | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| CERTFR-2025-AVI-0811 | Multiples vulnérabilités dans Liferay | 2025-09-23T00:00:00.000000 | 2025-09-23T00:00:00.000000 |
| certfr-2025-avi-0810 | Vulnérabilité dans Liferay | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0809 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| CERTFR-2025-AVI-0810 | Vulnérabilité dans Liferay | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| CERTFR-2025-AVI-0809 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-22T00:00:00.000000 | 2025-09-22T00:00:00.000000 |
| certfr-2025-avi-0808 | Multiples vulnérabilités dans les produits IBM | 2025-09-19T00:00:00.000000 | 2025-09-19T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2000-ale-010 | Vulnérabilités dans le serveur de fichier wu-ftpd | 2000-06-26T00:00:00.000000 | 2000-06-26T00:00:00.000000 |
| CERTA-2000-ALE-010 | Vulnérabilités dans le serveur de fichier wu-ftpd | 2000-06-26T00:00:00.000000 | 2000-06-26T00:00:00.000000 |
| certa-2000-ale-009 | Ver VBS/Stages-A, Mirc/stages-a, pIRC/Stages-A | 2000-06-20T00:00:00.000000 | 2000-06-20T00:00:00.000000 |
| CERTA-2000-ALE-009 | Ver VBS/Stages-A, Mirc/stages-a, pIRC/Stages-A | 2000-06-20T00:00:00.000000 | 2000-06-20T00:00:00.000000 |
| certa-2000-ale-008 | The Serbian Badman Trojan (TSB) | 2000-06-13T00:00:00.000000 | 2000-06-13T00:00:00.000000 |
| CERTA-2000-ALE-008 | The Serbian Badman Trojan (TSB) | 2000-06-13T00:00:00.000000 | 2000-06-13T00:00:00.000000 |
| certa-2000-ale-007 | Virus VBS/LoveLet-AS | 2000-06-09T00:00:00.000000 | 2000-06-09T00:00:00.000000 |
| CERTA-2000-ALE-007 | Virus VBS/LoveLet-AS | 2000-06-09T00:00:00.000000 | 2000-06-09T00:00:00.000000 |
| certa-2000-ale-006 | Deni de service sous Firewall-1 | 2000-06-08T00:00:00.000000 | 2000-06-08T00:00:00.000000 |
| CERTA-2000-ALE-006 | Deni de service sous Firewall-1 | 2000-06-08T00:00:00.000000 | 2000-06-08T00:00:00.000000 |
| certa-2000-ale-005 | Virus macro V97M/Resume.A | 2000-05-29T00:00:00.000000 | 2000-05-29T00:00:00.000000 |
| CERTA-2000-ALE-005 | Virus macro V97M/Resume.A | 2000-05-29T00:00:00.000000 | 2000-05-29T00:00:00.000000 |
| certa-2000-ale-004 | Virus Macro OF97/Cybernet-A | 2000-05-26T00:00:00.000000 | 2000-05-26T00:00:00.000000 |
| certa-2000-ale-003 | « Mesures de performances » de l'Internet | 2000-05-26T00:00:00.000000 | 2000-05-26T00:00:00.000000 |
| CERTA-2000-ALE-004 | Virus Macro OF97/Cybernet-A | 2000-05-26T00:00:00.000000 | 2000-05-26T00:00:00.000000 |
| CERTA-2000-ALE-003 | « Mesures de performances » de l'Internet | 2000-05-26T00:00:00.000000 | 2000-05-26T00:00:00.000000 |
| certa-2000-ale-002 | Alerte de virus NEWLOVE | 2000-05-19T00:00:00.000000 | 2000-05-19T00:00:00.000000 |
| CERTA-2000-ALE-002 | Alerte de virus NEWLOVE | 2000-05-19T00:00:00.000000 | 2000-05-19T00:00:00.000000 |