Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-68027 |
N/A
|
WordPress Hydra Booking plugin <= 1.1.32 - Privilege E… |
Themefic |
Hydra Booking |
2026-01-22T16:52:04.595Z | 2026-01-22T16:52:04.595Z |
| CVE-2025-68020 |
N/A
|
WordPress WANotifier plugin <= 2.7.12 - Broken Access … |
WANotifier |
WANotifier |
2026-01-22T16:52:04.392Z | 2026-01-22T16:52:04.392Z |
| CVE-2025-68019 |
N/A
|
WordPress SEO Booster plugin <= 6.1.8 - Broken Access … |
cleverplugins |
SEO Booster |
2026-01-22T16:52:04.172Z | 2026-01-22T16:52:04.172Z |
| CVE-2025-68018 |
N/A
|
WordPress Order Listener for WooCommerce plugin <= 3.6… |
ilmosys |
Order Listener for WooCommerce |
2026-01-22T16:52:03.969Z | 2026-01-22T16:52:03.969Z |
| CVE-2025-68017 |
N/A
|
WordPress Antideo Email Validator plugin <= 1.0.10 - S… |
Antideo |
Antideo Email Validator |
2026-01-22T16:52:03.768Z | 2026-01-22T16:52:03.768Z |
| CVE-2025-68016 |
N/A
|
WordPress onepay Payment Gateway For WooCommerce plugi… |
Onepay Sri Lanka |
onepay Payment Gateway For WooCommerce |
2026-01-22T16:52:03.497Z | 2026-01-22T16:52:03.497Z |
| CVE-2025-68015 |
N/A
|
WordPress Event Tickets with Ticket Scanner plugin <= … |
Vollstart |
Event Tickets with Ticket Scanner |
2026-01-22T16:52:03.228Z | 2026-01-22T16:52:03.228Z |
| CVE-2025-68013 |
N/A
|
WordPress Payment Gateway Authorize.Net CIM for WooCom… |
cardpaysolutions |
Payment Gateway Authorize.Net CIM for WooCommerce |
2026-01-22T16:52:02.860Z | 2026-01-22T16:52:02.860Z |
| CVE-2025-68012 |
N/A
|
WordPress CodeColorer plugin <= 0.10.1 - Stored Cross … |
Dmytro Shteflyuk |
CodeColorer |
2026-01-22T16:52:02.470Z | 2026-01-22T16:52:02.470Z |
| CVE-2025-68011 |
N/A
|
WordPress GLS Shipping for WooCommerce plugin <= 1.4.0… |
GLS |
GLS Shipping for WooCommerce |
2026-01-22T16:52:02.251Z | 2026-01-22T16:52:02.251Z |
| CVE-2025-68010 |
N/A
|
WordPress Netgsm plugin <= 2.9.63 - Cross Site Scripti… |
netgsm |
Netgsm |
2026-01-22T16:52:01.876Z | 2026-01-22T16:52:01.876Z |
| CVE-2025-68009 |
N/A
|
WordPress Slider Templates plugin <= 1.0.3 - Broken Ac… |
Codeless |
Slider Templates |
2026-01-22T16:52:01.425Z | 2026-01-22T16:52:01.425Z |
| CVE-2025-68008 |
N/A
|
WordPress WP Mail plugin <= 1.3 - Reflected Cross Site… |
mndpsingh287 |
WP Mail |
2026-01-22T16:52:01.084Z | 2026-01-22T16:52:01.084Z |
| CVE-2021-47876 |
6.7 (4.0)
7.5 (3.1)
|
GeoGebra Classic 5.0.631.0-d - Denial of Service |
GeoGebra |
GeoGebra Classic |
2026-01-21T17:27:49.817Z | 2026-01-22T16:52:01.924Z |
| CVE-2025-68007 |
N/A
|
WordPress Event Espresso 4 Decaf plugin <= 5.0.37.deca… |
Event Espresso |
Event Espresso 4 Decaf |
2026-01-22T16:52:00.859Z | 2026-01-22T16:52:00.859Z |
| CVE-2025-68006 |
N/A
|
WordPress Booking Ultra Pro plugin <= 1.1.23 - Sensiti… |
Deetronix |
Booking Ultra Pro |
2026-01-22T16:52:00.634Z | 2026-01-22T16:52:00.634Z |
| CVE-2025-68004 |
N/A
|
WordPress My Post Order plugin <= 1.2.1.1 - Reflected … |
Kapil Chugh |
My Post Order |
2026-01-22T16:51:59.864Z | 2026-01-22T16:51:59.864Z |
| CVE-2025-68003 |
N/A
|
WordPress Shown Connector plugin <= 1.2.10 - Settings … |
renatoatshown |
Shown Connector |
2026-01-22T16:51:59.522Z | 2026-01-22T16:51:59.522Z |
| CVE-2025-68001 |
N/A
|
WordPress g-FFL Checkout plugin <= 2.1.0 - Arbitrary F… |
garidium |
g-FFL Checkout |
2026-01-22T16:51:59.247Z | 2026-01-22T16:51:59.247Z |
| CVE-2025-67968 |
N/A
|
WordPress Real Homes CRM plugin <= 1.0.0 - Arbitrary F… |
InspiryThemes |
Real Homes CRM |
2026-01-22T16:51:58.994Z | 2026-01-22T16:51:58.994Z |
| CVE-2025-67967 |
N/A
|
WordPress Lawyer Directory plugin <= 1.3.3 - Broken Ac… |
e-plugins |
Lawyer Directory |
2026-01-22T16:51:58.716Z | 2026-01-22T16:51:58.716Z |
| CVE-2025-67966 |
N/A
|
WordPress Lawyer Directory plugin <= 1.3.3 - Privilege… |
e-plugins |
Lawyer Directory |
2026-01-22T16:51:58.463Z | 2026-01-22T16:51:58.463Z |
| CVE-2025-67964 |
N/A
|
WordPress Homey Core plugin <= 2.4.3 - Cross Site Scri… |
favethemes |
Homey Core |
2026-01-22T16:51:58.200Z | 2026-01-22T16:51:58.200Z |
| CVE-2025-67963 |
N/A
|
WordPress Movie Booking plugin <= 1.1.5 - Arbitrary Fi… |
ovatheme |
Movie Booking |
2026-01-22T16:51:58.001Z | 2026-01-22T16:51:58.001Z |
| CVE-2025-67961 |
N/A
|
WordPress WPO365 plugin <= 40.0 - Server Side Request … |
Marco van Wieren |
WPO365 |
2026-01-22T16:51:57.784Z | 2026-01-22T16:51:57.784Z |
| CVE-2025-67960 |
N/A
|
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site… |
purethemes |
WorkScout-Core |
2026-01-22T16:51:57.383Z | 2026-01-22T16:51:57.383Z |
| CVE-2025-67959 |
N/A
|
WordPress WorkScout theme <= 4.1.07 - Cross Site Scrip… |
purethemes |
WorkScout |
2026-01-22T16:51:57.097Z | 2026-01-22T16:51:57.097Z |
| CVE-2025-67958 |
N/A
|
WordPress TaxCloud for WooCommerce plugin <= 8.3.8 - B… |
Taxcloud |
TaxCloud for WooCommerce |
2026-01-22T16:51:56.847Z | 2026-01-22T16:51:56.847Z |
| CVE-2025-67957 |
N/A
|
WordPress Listivo Core plugin <= 2.3.77 - Local File I… |
TangibleWP |
Listivo Core |
2026-01-22T16:51:56.573Z | 2026-01-22T16:51:56.573Z |
| CVE-2025-67956 |
N/A
|
WordPress User Registration plugin <= 4.4.6 - Broken A… |
wpeverest |
User Registration |
2026-01-22T16:51:56.303Z | 2026-01-22T16:51:56.303Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2022-49556 |
N/A
|
KVM: SVM: Use kzalloc for sev ioctl interfaces to prev… |
Linux |
Linux |
2025-02-26T02:14:03.630Z | 2025-05-04T08:40:28.652Z |
| CVE-2025-29987 |
8.8 (3.1)
|
Dell PowerProtect Data Domain with Data Domain Op… |
Dell |
DD OS 8.3 |
2025-04-03T15:18:06.144Z | 2025-04-05T03:55:35.210Z |
| CVE-2025-15496 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
guchengwuyue yshopmall jobs getPage sql injection |
guchengwuyue |
yshopmall |
2026-01-09T17:02:12.054Z | 2026-01-09T18:36:47.236Z |
| CVE-2025-70161 |
9.8 (3.1)
|
EDIMAX BR-6208AC V2_1.02 is vulnerable to Command… |
n/a |
n/a |
2026-01-09T00:00:00.000Z | 2026-01-12T16:24:37.524Z |
| CVE-2025-36589 |
7.6 (3.1)
|
Dell Unisphere for PowerMax, version(s) 9.2.4.x, … |
Dell |
Unisphere for PowerMax |
2026-01-06T16:20:24.899Z | 2026-01-06T16:55:17.429Z |
| CVE-2024-35785 |
N/A
|
tee: optee: Fix kernel panic caused by incorrect error… |
Linux |
Linux |
2024-05-17T12:24:28.069Z | 2025-05-04T09:05:20.743Z |
| CVE-2024-27401 |
N/A
|
firewire: nosy: ensure user_length is taken into accou… |
Linux |
Linux |
2024-05-13T10:29:53.862Z | 2026-01-05T10:35:14.529Z |
| CVE-2024-27399 |
N/A
|
Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout |
Linux |
Linux |
2024-05-13T10:24:57.045Z | 2025-05-04T09:04:11.047Z |
| CVE-2024-27398 |
N/A
|
Bluetooth: Fix use-after-free bugs caused by sco_sock_… |
Linux |
Linux |
2024-05-13T10:22:26.624Z | 2025-05-04T12:55:31.938Z |
| CVE-2025-66176 |
8.8 (3.1)
|
There is a Stack overflow Vulnerability in the de… |
Hikvision |
DS-K1T331 |
2026-01-13T01:47:27.191Z | 2026-01-15T01:56:32.572Z |
| CVE-2025-15446 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Seeyon Zhiyuan OA Web Application System fixedAssetsLi… |
Seeyon |
Zhiyuan OA Web Application System |
2026-01-04T23:02:08.276Z | 2026-01-05T21:49:41.647Z |
| CVE-2023-54337 |
5.1 (4.0)
7.5 (3.1)
|
Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) |
Sysax |
Sysax Multi Server |
2026-01-13T22:52:08.992Z | 2026-01-14T19:17:58.628Z |
| CVE-2021-47750 |
5.1 (4.0)
6.1 (3.1)
|
YouPHPTube <= 7.8 - Cross-Site Scripting |
YouPHPTube |
YouPHPTube |
2026-01-13T22:56:03.555Z | 2026-01-14T15:13:28.351Z |
| CVE-2024-36905 |
N/A
|
tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets |
Linux |
Linux |
2024-05-30T15:29:06.046Z | 2025-05-04T09:11:47.697Z |
| CVE-2024-36904 |
N/A
|
tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). |
Linux |
Linux |
2024-05-30T15:29:05.457Z | 2025-05-04T09:11:46.007Z |
| CVE-2024-36886 |
8.1 (3.1)
|
tipc: fix UAF in error path |
Linux |
Linux |
2024-05-30T15:28:55.059Z | 2025-05-04T09:11:25.063Z |
| CVE-2024-36883 |
N/A
|
net: fix out-of-bounds access in ops_init |
Linux |
Linux |
2024-05-30T15:28:53.302Z | 2025-05-04T12:56:24.544Z |
| CVE-2023-52882 |
N/A
|
clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change |
Linux |
Linux |
2024-05-30T15:23:46.242Z | 2025-05-04T07:45:11.091Z |
| CVE-2021-47749 |
8.7 (4.0)
6.2 (3.1)
|
YouPHPTube <= 7.8 - Directory Traversal |
YouPHPTube |
YouPHPTube |
2026-01-13T22:51:38.231Z | 2026-01-14T19:21:57.479Z |
| CVE-2024-35871 |
N/A
|
riscv: process: Fix kernel gp leakage |
Linux |
Linux |
2024-05-19T08:34:29.292Z | 2025-05-04T09:07:18.449Z |
| CVE-2022-50892 |
8.8 (4.0)
8.2 (3.1)
|
VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page |
VIAVIWEB |
VIAVIWEB Wallpaper Admin |
2026-01-13T22:56:08.890Z | 2026-01-14T15:11:00.664Z |
| CVE-2026-24388 |
4.3 (3.1)
|
WordPress WPMasterToolKit plugin <= 2.14.0 - Broken Ac… |
Ludwig You |
WPMasterToolKit |
2026-01-22T16:52:47.690Z | 2026-01-22T20:10:34.379Z |
| CVE-2026-24387 |
4.3 (3.1)
|
WordPress WP Quick Post Duplicator plugin <= 2.1 - Bro… |
Arul Prasad J |
WP Quick Post Duplicator |
2026-01-22T16:52:47.509Z | 2026-01-22T19:58:23.778Z |
| CVE-2026-22359 |
4.3 (3.1)
|
WordPress Wordpress Movies Bulk Importer plugin <= 1.0… |
AA-Team |
Wordpress Movies Bulk Importer |
2026-01-22T16:56:49.215Z | 2026-01-22T19:52:05.822Z |
| CVE-2026-22281 |
3.5 (3.1)
|
Dell PowerScale OneFS, versions 9.5.0.0 through 9… |
Dell |
PowerScale OneFS |
2026-01-22T19:11:28.454Z | 2026-01-22T19:35:02.793Z |
| CVE-2026-21962 |
10 (3.1)
|
Vulnerability in the Oracle HTTP Server, Oracle W… |
Oracle Corporation |
Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in |
2026-01-20T21:56:32.665Z | 2026-01-23T04:55:17.822Z |
| CVE-2025-63387 |
7.5 (3.1)
|
Dify v1.9.1 is vulnerable to Insecure Permissions… |
n/a |
n/a |
2025-12-18T00:00:00.000Z | 2026-01-22T20:10:20.282Z |
| CVE-2025-5987 |
8.1 (3.1)
|
Libssh: invalid return code for chacha20 poly1305 with… |
|
|
2025-07-07T14:24:12.576Z | 2026-01-22T19:09:56.074Z |
| CVE-2025-26511 |
8.8 (3.1)
|
Cassandra-Lucene-Index allows bypass of Cassandra RBAC |
NetApp |
Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin |
2025-02-13T15:44:06.315Z | 2026-01-22T19:35:19.686Z |
| CVE-2025-15281 |
7.5 (3.1)
|
wordexp with WRDE_REUSE and WRDE_APPEND may return uni… |
The GNU C Library |
glibc |
2026-01-20T13:22:46.495Z | 2026-01-22T19:21:38.455Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-49556 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use kzalloc for sev … | 2025-02-26T07:01:31.407 | 2026-01-22T20:55:08.210 |
| fkie_cve-2025-29987 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 … | 2025-04-03T16:15:36.420 | 2026-01-22T20:53:27.770 |
| fkie_cve-2025-15496 | A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1. Affected is the function getP… | 2026-01-09T17:15:52.533 | 2026-01-22T20:46:44.227 |
| fkie_cve-2025-70161 | EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName fi… | 2026-01-09T17:15:54.247 | 2026-01-22T20:45:13.620 |
| fkie_cve-2025-36589 | Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External… | 2026-01-06T17:15:43.780 | 2026-01-22T20:44:14.520 |
| fkie_cve-2024-35785 | In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix kernel panic c… | 2024-05-17T13:15:58.403 | 2026-01-22T20:41:23.333 |
| fkie_cve-2024-27401 | In the Linux kernel, the following vulnerability has been resolved: firewire: nosy: ensure user_le… | 2024-05-14T15:12:29.623 | 2026-01-22T20:39:28.567 |
| fkie_cve-2024-27399 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr… | 2024-05-14T15:12:28.977 | 2026-01-22T20:37:12.617 |
| fkie_cve-2024-27398 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free … | 2024-05-14T15:12:28.623 | 2026-01-22T20:37:07.763 |
| fkie_cve-2025-66176 | There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision Acc… | 2026-01-13T03:16:01.097 | 2026-01-22T20:35:56.067 |
| fkie_cve-2025-15446 | A flaw has been found in Seeyon Zhiyuan OA Web Application System up to 20251223. The impacted elem… | 2026-01-04T23:15:50.850 | 2026-01-22T20:34:55.403 |
| fkie_cve-2023-54337 | Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password f… | 2026-01-13T23:16:01.403 | 2026-01-22T20:33:07.740 |
| fkie_cve-2021-47750 | YouPHPTube <= 7.8 contains a cross-site scripting vulnerability that allows attackers to inject mal… | 2026-01-13T23:15:49.097 | 2026-01-22T20:27:30.770 |
| fkie_cve-2024-36905 | In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTD… | 2024-05-30T16:15:14.030 | 2026-01-22T20:27:12.320 |
| fkie_cve-2024-36904 | In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero… | 2024-05-30T16:15:13.947 | 2026-01-22T20:24:11.780 |
| fkie_cve-2024-36886 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in error path S… | 2024-05-30T16:15:12.150 | 2026-01-22T20:24:06.567 |
| fkie_cve-2024-36883 | In the Linux kernel, the following vulnerability has been resolved: net: fix out-of-bounds access … | 2024-05-30T16:15:11.900 | 2026-01-22T20:24:01.197 |
| fkie_cve-2023-52882 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CP… | 2024-05-30T16:15:09.937 | 2026-01-22T20:23:53.507 |
| fkie_cve-2021-47749 | YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attacke… | 2026-01-13T23:15:48.913 | 2026-01-22T20:22:09.120 |
| fkie_cve-2024-35871 | In the Linux kernel, the following vulnerability has been resolved: riscv: process: Fix kernel gp … | 2024-05-19T09:15:08.507 | 2026-01-22T20:21:18.273 |
| fkie_cve-2022-50892 | VIAVIWEB Wallpaper Admin 1.0 contains a SQL injection vulnerability that allows attackers to bypass… | 2026-01-13T23:15:50.740 | 2026-01-22T20:19:57.240 |
| fkie_cve-2026-24388 | Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting… | 2026-01-22T17:16:41.870 | 2026-01-22T20:16:15.703 |
| fkie_cve-2026-24387 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplica… | 2026-01-22T17:16:41.747 | 2026-01-22T20:16:15.330 |
| fkie_cve-2026-22359 | Cross-Site Request Forgery (CSRF) vulnerability in AA-Team Wordpress Movies Bulk Importer movies im… | 2026-01-22T17:16:31.977 | 2026-01-22T20:16:13.880 |
| fkie_cve-2026-22281 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, version… | 2026-01-22T20:16:13.257 | 2026-01-22T20:16:13.257 |
| fkie_cve-2026-21962 | Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fus… | 2026-01-20T22:15:59.110 | 2026-01-22T20:16:12.937 |
| fkie_cve-2025-63387 | Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HT… | 2025-12-18T19:16:33.157 | 2026-01-22T20:16:09.387 |
| fkie_cve-2025-5987 | A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker … | 2025-07-07T15:15:28.180 | 2026-01-22T20:16:08.603 |
| fkie_cve-2025-26511 | Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1… | 2025-02-13T16:16:50.270 | 2026-01-22T20:16:06.187 |
| fkie_cve-2025-15281 | Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to… | 2026-01-20T14:16:07.843 | 2026-01-22T20:16:05.960 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-6j3m-9vgh-2qvx |
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-5rmr-3wvq-9rp2 |
|
Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorr… | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-5f49-479f-ffrv |
|
Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Explo… | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-4rp9-vc2x-cvfr |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-4r7c-fr6m-vgjf |
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB … | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-4r5r-p2hf-qwww |
|
Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Pool Services pool-services allow… | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-46f2-jw97-m9p4 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-3f5c-485h-v36h |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:33Z | 2026-01-22T18:30:33Z |
| ghsa-x9xh-m4xq-748x |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-wp4h-4vp9-w3v8 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-vxxf-3mv8-7w36 |
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in xtem… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-vg7v-mpp3-w484 |
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes News Event news-event.… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-rgvv-mq36-9qv7 |
|
A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in th… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-rfx9-xhfj-575x |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-qxwh-xxrp-7mqj |
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-qw8j-ggjr-frrq |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-p5qf-qh9m-g9j7 |
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-p5fr-qwx4-jr9v |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-mv32-8gjm-m39m |
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-m3hc-cvmh-fj5g |
|
Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configur… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-m2j3-f8mq-gqq6 |
8.7 (4.0)
|
EduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-cour… | 2026-01-22T18:30:31Z | 2026-01-22T18:30:32Z |
| ghsa-jwhf-c56x-93c8 |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-j5g5-7mch-jcrp |
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.Th… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-hv89-667p-75r9 |
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-gqph-hfc4-8p6v |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-gpm6-6vvf-mv2j |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-fx32-vc85-q9x8 |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-974h-mvrg-683r |
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-8j65-qv4g-w668 |
|
Missing Authorization vulnerability in cozythemes HomeLancer homelancer allows Exploiting Incorrect… | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ghsa-8grh-35j3-wccg |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:32Z | 2026-01-22T18:30:32Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2023-100 |
|
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and UR… | django | 2023-07-03T13:15:00+00:00 | 2023-07-11T16:37:11.407533+00:00 |
| pysec-2023-99 |
|
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary… | pipreqs | 2023-06-30T20:15:00+00:00 | 2023-07-10T18:33:06.804092+00:00 |
| pysec-2023-97 |
|
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnera… | easy-parse | 2023-06-29T21:15:00+00:00 | 2023-07-07T02:41:36.549732+00:00 |
| pysec-2023-96 |
|
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vuln… | requests-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.818007+00:00 |
| pysec-2023-95 |
|
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerabilit… | py-xml | 2023-06-29T21:15:00+00:00 | 2023-07-06T22:29:19.184837+00:00 |
| pysec-2022-43052 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | request-util | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2022-43051 |
|
Fluture-Node is a FP-style HTTP and streaming utils for Node based on Fluture. Using `fol… | pyquest | 2022-03-01T21:15:00+00:00 | 2023-07-03T20:33:00+00:00 |
| pysec-2023-94 |
|
Flask-AppBuilder is an application development framework, built on top of Flask. Prior to… | flask-appbuilder | 2023-06-22T23:15:00+00:00 | 2023-07-03T20:28:23.811646+00:00 |
| pysec-2023-93 |
|
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly … | pacparser | 2023-06-30T18:15:00+00:00 | 2023-06-30T20:25:46.450877+00:00 |
| pysec-2023-73 |
|
redis-7.0.10 was discovered to contain a segmentation violation. | redis | 2023-05-18T20:15:00Z | 2023-06-27T18:49:56.911238Z |
| pysec-2020-221 |
|
A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no … | ansible | 2020-10-05T13:15:00Z | 2023-06-22T16:29:43.777510Z |
| pysec-2023-90 |
|
Gradio is an open-source Python library that is used to build machine learning and data s… | gradio | 2023-06-08T00:15:00Z | 2023-06-21T05:27:13.352872Z |
| pysec-2023-89 |
|
In Apache Airflow, some potentially sensitive values were being shown to the user in cert… | apache-airflow | 2023-06-19T09:15:00Z | 2023-06-19T10:29:28.607914Z |
| pysec-2023-88 |
|
The Snowflake Connector for Python provides an interface for developing Python applicatio… | snowflake-connector-python | 2023-06-08T21:15:00Z | 2023-06-16T18:28:10.272383Z |
| pysec-2023-81 |
|
A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. T… | mindspore | 2023-05-30T06:16:00Z | 2023-06-16T08:29:55.937187Z |
| pysec-2023-87 |
|
sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL p… | sqlparse | 2023-04-18T22:15:00Z | 2023-06-14T20:24:17.342510Z |
| pysec-2023-86 |
|
OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) w… | owslib | 2023-03-08T00:15:00Z | 2023-06-14T18:28:54.683011Z |
| pysec-2023-85 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A d… | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T20:24:13.764030Z |
| pysec-2023-84 |
|
Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In … | matrix-synapse | 2023-06-06T19:15:00Z | 2023-06-13T18:28:46.812103Z |
| pysec-2023-83 |
|
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.2… | starlette | 2023-06-01T02:15:00Z | 2023-06-08T05:25:54.818459Z |
| pysec-2023-82 |
|
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail… | django-ses | 2023-05-26T21:15:00Z | 2023-06-06T20:23:42.892470Z |
| pysec-2023-80 |
|
Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contract… | vyper | 2023-05-19T20:15:00Z | 2023-06-05T01:13:03.140034Z |
| pysec-2023-79 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T22:15:00Z | 2023-06-05T01:13:03.051477Z |
| pysec-2023-78 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.949990Z |
| pysec-2023-77 |
|
Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to ve… | vyper | 2023-05-11T21:15:00Z | 2023-06-05T01:13:02.500642Z |
| pysec-2023-76 |
|
Vyper is a pythonic smart contract language for the EVM. The storage allocator does not g… | vyper | 2023-05-08T17:15:00Z | 2023-06-05T01:13:02.407312Z |
| pysec-2023-75 |
|
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthe… | tornado | 2023-05-25T10:15:00Z | 2023-06-05T01:13:01.694311Z |
| pysec-2023-74 |
|
Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authori… | requests | 2023-05-26T18:15:00Z | 2023-06-05T01:13:00.534973Z |
| pysec-2023-46 |
|
redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at… | redis | 2023-03-26T19:15:00Z | 2023-06-05T01:13:00.432606Z |
| pysec-2023-45 |
|
redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open af… | redis | 2023-03-26T19:15:00Z | 2023-06-05T01:13:00.293462Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33223 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.706662Z |
| gsd-2024-33222 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.760715Z |
| gsd-2024-33221 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.715064Z |
| gsd-2024-33220 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.721987Z |
| gsd-2024-33219 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.661517Z |
| gsd-2024-33218 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.711814Z |
| gsd-2024-33217 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.720970Z |
| gsd-2024-33216 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.717949Z |
| gsd-2024-33215 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.748476Z |
| gsd-2024-33214 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.710943Z |
| gsd-2024-33213 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.735466Z |
| gsd-2024-33212 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.727129Z |
| gsd-2024-33211 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vu… | 2024-04-24T05:02:09.635754Z |
| gsd-2024-33210 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.762839Z |
| gsd-2024-33209 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.700226Z |
| gsd-2024-33208 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.752907Z |
| gsd-2024-33207 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.707334Z |
| gsd-2024-33206 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.742097Z |
| gsd-2024-33205 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.677776Z |
| gsd-2024-33204 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612720Z |
| gsd-2024-33203 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.612515Z |
| gsd-2024-33202 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.617718Z |
| gsd-2024-33201 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.690170Z |
| gsd-2024-33200 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.713644Z |
| gsd-2024-33199 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.657538Z |
| gsd-2024-33198 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.684409Z |
| gsd-2024-33197 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.664646Z |
| gsd-2024-33196 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.637713Z |
| gsd-2024-33195 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.746132Z |
| gsd-2024-33194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-24T05:02:09.603987Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192878 | Malicious code in teeseest (npm) | 2025-12-23T08:32:50Z | 2026-01-02T21:37:30Z |
| MAL-2025-192877 | Malicious code in tdm-react (npm) | 2025-12-23T08:32:44Z | 2026-01-23T15:44:07Z |
| MAL-2025-192876 | Malicious code in suntik-tiktok (npm) | 2025-12-23T08:32:05Z | 2026-01-02T21:37:30Z |
| MAL-2025-192875 | Malicious code in sturdyfetch9 (npm) | 2025-12-23T08:31:59Z | 2026-01-02T21:37:30Z |
| MAL-2025-192874 | Malicious code in sturdyfetch5 (npm) | 2025-12-23T08:31:52Z | 2026-01-02T21:37:30Z |
| MAL-2025-192873 | Malicious code in sturdyfetch4 (npm) | 2025-12-23T08:31:51Z | 2026-01-02T21:37:30Z |
| MAL-2025-192872 | Malicious code in sturdyfetch3 (npm) | 2025-12-23T08:31:50Z | 2026-01-02T21:37:30Z |
| MAL-2025-192871 | Malicious code in sturdyfetch22 (npm) | 2025-12-23T08:31:49Z | 2026-01-02T21:37:30Z |
| MAL-2025-192870 | Malicious code in sturdyfetch21 (npm) | 2025-12-23T08:31:48Z | 2026-01-02T21:37:30Z |
| MAL-2025-192869 | Malicious code in sturdyfetch19 (npm) | 2025-12-23T08:31:47Z | 2026-01-02T21:37:30Z |
| MAL-2025-192868 | Malicious code in sturdyfetch18 (npm) | 2025-12-23T08:31:47Z | 2026-01-02T21:37:30Z |
| MAL-2025-192867 | Malicious code in sturdyfetch17 (npm) | 2025-12-23T08:31:46Z | 2026-01-02T21:37:30Z |
| MAL-2025-192866 | Malicious code in sturdyfetch15 (npm) | 2025-12-23T08:31:45Z | 2026-01-02T21:37:30Z |
| MAL-2025-192865 | Malicious code in streamlinear (npm) | 2025-12-23T08:31:32Z | 2026-01-02T21:37:30Z |
| MAL-2025-192864 | Malicious code in stream-chain-xor (npm) | 2025-12-23T08:31:31Z | 2026-01-02T21:37:30Z |
| MAL-2025-192863 | Malicious code in smart-parser (npm) | 2025-12-23T08:30:35Z | 2026-01-02T21:37:30Z |
| MAL-2025-192862 | Malicious code in session-parse (npm) | 2025-12-23T08:30:06Z | 2026-01-02T21:37:30Z |
| MAL-2025-192861 | Malicious code in session-keeper (npm) | 2025-12-23T08:30:05Z | 2026-01-02T21:37:30Z |
| MAL-2025-192860 | Malicious code in security-testing-research99 (npm) | 2025-12-23T08:29:51Z | 2026-01-02T21:37:30Z |
| MAL-2025-192859 | Malicious code in security-testing-research- (npm) | 2025-12-23T08:29:51Z | 2026-01-02T21:37:30Z |
| MAL-2025-192858 | Malicious code in resethp (npm) | 2025-12-23T08:28:15Z | 2026-01-02T21:37:30Z |
| MAL-2025-192857 | Malicious code in redux-motion (npm) | 2025-12-23T08:27:50Z | 2026-01-02T21:37:30Z |
| MAL-2025-192856 | Malicious code in react-resizable-text (npm) | 2025-12-23T08:27:17Z | 2026-01-02T21:37:30Z |
| MAL-2025-192855 | Malicious code in react-flex-tools (npm) | 2025-12-23T08:26:31Z | 2026-01-02T21:37:30Z |
| MAL-2025-192854 | Malicious code in react-confetti-enhanced (npm) | 2025-12-23T08:26:19Z | 2026-01-02T21:37:30Z |
| mal-2025-192987 | Malicious code in npm-xmt (npm) | 2025-12-30T17:12:30Z | 2026-01-02T21:37:29Z |
| mal-2025-192986 | Malicious code in nbugs-video (npm) | 2025-12-30T17:15:04Z | 2026-01-02T21:37:29Z |
| mal-2025-192970 | Malicious code in portal-lise (npm) | 2025-12-30T16:16:04Z | 2026-01-02T21:37:29Z |
| mal-2025-192969 | Malicious code in pepsico-ds (npm) | 2025-12-30T15:57:26Z | 2026-01-02T21:37:29Z |
| mal-2025-192853 | Malicious code in portal-aes (npm) | 2025-12-23T08:24:49Z | 2026-01-02T21:37:29Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0790 | MediaWiki Erweiterungen und -Komponenten: Mehrere Schwachstellen | 2025-04-13T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0788 | MediaWiki: Mehrere Schwachstellen | 2025-04-10T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0622 | Apache Commons: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-03-23T23:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0512 | Red Hat Advanced Cluster Security: Schwachstelle ermöglicht Denial of Service | 2025-03-10T23:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0469 | libarchive: Schwachstelle ermöglicht Denial of Service und weitere nicht spezifizierte Angriffe | 2025-03-02T23:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0394 | OpenSSH: Mehrere Schwachstellen | 2025-02-17T23:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0316 | OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-11T23:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2024-3249 | Red Hat JBoss Enterprise Application Platform (Wildfly): Schwachstelle ermöglicht Cross-Site Scripting | 2024-10-21T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2024-3230 | OpenSSL: Schwachstelle ermöglicht Denial of Service und Remote-Code-Ausführung | 2024-10-16T22:00:00.000+00:00 | 2025-07-23T22:00:00.000+00:00 |
| wid-sec-w-2025-1608 | CrushFTP: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2025-07-20T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1491 | Microsoft Office: Mehrere Schwachstellen | 2025-07-08T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-0981 | SysAid Technologies Ltd SysAid: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen | 2025-05-07T22:00:00.000+00:00 | 2025-07-22T22:00:00.000+00:00 |
| wid-sec-w-2025-1598 | Microsoft SharePoint (On-premises): Mehrere Schwachstellen | 2025-07-20T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1508 | Irfan Skiljan IrfanView CADImage Plugin: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-07-08T22:00:00.000+00:00 | 2025-07-21T22:00:00.000+00:00 |
| wid-sec-w-2025-1489 | Fortinet FortiWeb: Schwachstelle ermöglicht SQL Injection | 2025-07-08T22:00:00.000+00:00 | 2025-07-20T22:00:00.000+00:00 |
| wid-sec-w-2025-1585 | Internet Systems Consortium BIND: Mehrere Schwachstellen | 2025-07-16T22:00:00.000+00:00 | 2025-07-17T22:00:00.000+00:00 |
| wid-sec-w-2025-1402 | Cisco Identity Services Engine (ISE): Mehrere Schwachstellen | 2025-06-25T22:00:00.000+00:00 | 2025-07-16T22:00:00.000+00:00 |
| wid-sec-w-2025-1550 | Red Hat Enterprise Linux (LZ4): Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-07-14T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1490 | Fortinet FortiOS: Schwachstelle ermöglicht Codeausführung | 2025-07-08T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1365 | IBM QRadar SIEM: Mehrere Schwachstellen | 2025-06-19T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1271 | Linux Kernel: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-06-09T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1167 | IBM DB2: Mehrere Schwachstellen | 2025-05-29T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1150 | Redis: Schwachstelle ermöglicht Denial of Service | 2025-05-27T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-1132 | OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-05-22T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0938 | IBM DB2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-05-05T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0912 | IBM DB2: Schwachstelle ermöglicht Denial of Service | 2025-05-01T22:00:00.000+00:00 | 2025-07-15T22:00:00.000+00:00 |
| wid-sec-w-2024-3063 | SugarCRM Sugar Enterprise: Mehrere Schwachstellen | 2024-10-03T22:00:00.000+00:00 | 2025-07-14T22:00:00.000+00:00 |
| wid-sec-w-2025-1492 | Microsoft Azure Service Fabric und Monitor Agent: Mehrere Schwachstellen | 2025-07-08T22:00:00.000+00:00 | 2025-07-13T22:00:00.000+00:00 |
| wid-sec-w-2025-1523 | GitLab: Mehrere Schwachstellen | 2025-07-09T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| wid-sec-w-2025-1512 | Keycloak: Kontoübernahme durch Manipulation des E-Mail-Verifizierungsprozesses | 2025-07-08T22:00:00.000+00:00 | 2025-07-10T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| ssa-296266 | SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices | 2021-03-09T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-292794 | SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ssa-163226 | SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert | 2021-04-13T00:00:00Z | 2021-04-13T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2023:7610 | Red Hat Security Advisory: OpenShift Container Platform 4.12.45 packages and security update | 2023-12-06T18:17:51+00:00 | 2026-01-23T21:12:11+00:00 |
| rhsa-2023:7587 | Red Hat Security Advisory: Updated IBM Business Automation Manager Open Editions 8.0.4 SP1 Images | 2023-11-29T18:13:51+00:00 | 2026-01-23T21:12:09+00:00 |
| rhsa-2023:7517 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2023-11-27T19:31:55+00:00 | 2026-01-23T21:12:09+00:00 |
| rhsa-2023:7488 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update | 2023-11-24T16:57:47+00:00 | 2026-01-23T21:12:06+00:00 |
| rhsa-2023:7486 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 for OpenShift image enhancement and security update | 2023-11-24T16:53:18+00:00 | 2026-01-23T21:12:06+00:00 |
| rhsa-2023:7484 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 9 | 2023-11-24T16:56:41+00:00 | 2026-01-23T21:12:05+00:00 |
| rhsa-2023:7483 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 8 | 2023-11-24T16:56:38+00:00 | 2026-01-23T21:12:04+00:00 |
| rhsa-2023:7482 | Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7 | 2023-11-24T16:56:09+00:00 | 2026-01-23T21:12:04+00:00 |
| rhsa-2023:7481 | Red Hat Security Advisory: OpenShift Container Platform 4.11.54 packages and security update | 2023-11-29T01:56:54+00:00 | 2026-01-23T21:12:03+00:00 |
| rhsa-2023:7335 | Red Hat Security Advisory: Updated Red Hat Process Automation Manager 7.13.4 SP2 Images | 2023-11-16T15:57:46+00:00 | 2026-01-23T21:11:59+00:00 |
| rhsa-2023:7334 | Red Hat Security Advisory: rh-varnish6-varnish security update | 2023-11-16T14:46:17+00:00 | 2026-01-23T21:11:58+00:00 |
| rhsa-2023:7325 | Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update | 2023-11-21T12:04:13+00:00 | 2026-01-23T21:11:58+00:00 |
| rhsa-2023:7247 | Red Hat Security Advisory: Red Hat Fuse 7.12.1 release and security update | 2023-11-15T17:07:49+00:00 | 2026-01-23T21:11:55+00:00 |
| rhsa-2023:7218 | Red Hat Security Advisory: Kernel Module Management security update | 2023-11-15T01:02:10+00:00 | 2026-01-23T21:11:54+00:00 |
| rhsa-2023:7205 | Red Hat Security Advisory: nodejs:20 security update | 2023-11-14T17:00:27+00:00 | 2026-01-23T21:11:52+00:00 |
| rhsa-2023:7197 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update | 2024-02-27T19:47:37+00:00 | 2026-01-23T21:11:49+00:00 |
| rhsa-2023:7058 | Red Hat Security Advisory: rhc security, bug fix, and enhancement update | 2023-11-14T16:13:51+00:00 | 2026-01-23T21:11:49+00:00 |
| rhsa-2023:6746 | Red Hat Security Advisory: nghttp2 security update | 2023-11-07T10:27:04+00:00 | 2026-01-23T21:11:33+00:00 |
| rhsa-2023:6474 | Red Hat Security Advisory: podman security, bug fix, and enhancement update | 2023-11-07T08:52:01+00:00 | 2026-01-23T21:11:32+00:00 |
| rhsa-2023:6473 | Red Hat Security Advisory: buildah security update | 2023-11-07T08:39:45+00:00 | 2026-01-23T21:11:32+00:00 |
| rhsa-2023:6420 | Red Hat Security Advisory: grafana security and enhancement update | 2023-11-07T08:59:06+00:00 | 2026-01-23T21:11:32+00:00 |
| rhsa-2023:6402 | Red Hat Security Advisory: containernetworking-plugins security and bug fix update | 2023-11-07T09:01:07+00:00 | 2026-01-23T21:11:32+00:00 |
| rhsa-2023:6380 | Red Hat Security Advisory: runc security update | 2023-11-07T08:47:52+00:00 | 2026-01-23T21:11:32+00:00 |
| rhsa-2023:6363 | Red Hat Security Advisory: skopeo security update | 2023-11-07T08:33:26+00:00 | 2026-01-23T21:11:31+00:00 |
| rhsa-2023:6286 | Red Hat Security Advisory: Red Hat Data Grid 7.3.11 security update | 2023-11-02T15:29:29+00:00 | 2026-01-23T21:11:30+00:00 |
| rhsa-2023:6239 | Red Hat Security Advisory: Kiali (Kiali 1.65.10) security update | 2023-11-01T13:09:18+00:00 | 2026-01-23T21:11:23+00:00 |
| rhsa-2023:6144 | Red Hat Security Advisory: Custom Metric Autoscaler operator for Red Hat OpenShift security update | 2023-10-30T01:05:32+00:00 | 2026-01-23T21:11:16+00:00 |
| rhsa-2023:6137 | Red Hat Security Advisory: Migration Toolkit for Runtimes security update | 2023-10-26T11:06:23+00:00 | 2026-01-23T21:11:15+00:00 |
| rhsa-2023:6120 | Red Hat Security Advisory: nginx:1.22 security update | 2023-10-25T15:52:23+00:00 | 2026-01-23T21:11:12+00:00 |
| rhsa-2023:6117 | Red Hat Security Advisory: Red Hat Integration Camel K 1.10.4 release and security update | 2023-10-25T14:18:12+00:00 | 2026-01-23T21:11:11+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-16-279-01 | Animas OneTouch Ping Insulin Pump Vulnerabilities | 2016-07-09T06:00:00.000000Z | 2025-06-05T22:05:39.885072Z |
| icsa-16-357-02 | WAGO Ethernet Web-based Management Authentication Bypass Vulnerability | 2016-09-25T06:00:00.000000Z | 2025-06-05T22:05:33.606250Z |
| icsa-16-357-01 | Fidelix FX-20 Series Controllers Path Traversal Vulnerability | 2016-09-25T06:00:00.000000Z | 2025-06-05T22:05:19.325133Z |
| icsa-16-355-01 | Siemens Desigo PX Web Module Insufficient Entropy Vulnerability | 2016-09-23T06:00:00.000000Z | 2025-06-05T22:05:04.729768Z |
| icsa-16-350-02 | OmniMetrix OmniView Vulnerabilities | 2016-09-18T06:00:00.000000Z | 2025-06-05T22:04:46.712389Z |
| icsa-16-350-01 | FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability | 2016-09-18T06:00:00.000000Z | 2025-06-05T22:04:36.703364Z |
| icsa-16-348-04 | Siemens SIMATIC WinCC and SIMATIC PCS 7 ActiveX Vulnerability | 2016-09-16T06:00:00.000000Z | 2025-06-05T22:04:30.476125Z |
| icsa-16-348-03 | Delta Electronics WPLSoft, ISPSoft, and PMSoft Vulnerabilities | 2016-09-16T06:00:00.000000Z | 2025-06-05T22:04:14.714722Z |
| icsa-16-348-02 | Moxa DACenter Vulnerabilities | 2016-09-16T06:00:00.000000Z | 2025-06-05T22:04:01.652622Z |
| icsa-16-348-01 | Visonic PowerLink2 Vulnerabilities | 2016-09-16T06:00:00.000000Z | 2025-06-05T22:03:49.178165Z |
| icsa-16-343-03 | Adcon Telemetry A850 Telemetry Gateway Base Station Vulnerabilities | 2016-09-11T06:00:00.000000Z | 2025-06-05T22:03:42.940815Z |
| icsa-16-343-02 | Sauter NovaWeb Web HMI Authentication Bypass Vulnerability | 2016-09-11T06:00:00.000000Z | 2025-06-05T22:03:36.733125Z |
| icsa-16-341-01 | Tesla Gateway ECU Vulnerability | 2016-09-09T06:00:00.000000Z | 2025-06-05T22:03:30.461381Z |
| icsa-16-336-03 | Mitsubishi Electric MELSEC-Q Series Ethernet Interface Module Vulnerabilities | 2016-09-04T06:00:00.000000Z | 2025-06-05T22:03:18.001347Z |
| icsa-16-334-03 | Emerson DeltaV Wireless I/O Card Open SSH Port Vulnerability | 2016-09-02T06:00:00.000000Z | 2025-06-05T22:03:11.738502Z |
| icsa-16-334-01 | Emerson Liebert SiteScan XML External Entity Vulnerability | 2016-09-02T06:00:00.000000Z | 2025-06-05T22:03:05.507055Z |
| icsa-16-322-02 | Moxa SoftCMS Vulnerabilities | 2016-08-21T06:00:00.000000Z | 2025-06-05T22:02:46.777740Z |
| icsa-16-322-01 | Vanderbilt Industries Siemens IP CCTV Cameras Vulnerability | 2016-08-21T06:00:00.000000Z | 2025-06-05T22:02:40.536934Z |
| icsa-16-320-01 | Lynxspring JENEsys BAS Bridge Vulnerabilities | 2016-08-19T06:00:00.000000Z | 2025-06-05T22:02:15.149456Z |
| icsa-16-315-01b | CA Unified Infrastructure Management Directory Traversal Vulnerability (Update B) | 2016-08-14T06:00:00.000000Z | 2025-06-05T22:02:08.926022Z |
| icsa-16-313-03 | OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability | 2016-08-12T06:00:00.000000Z | 2025-06-05T22:02:02.695028Z |
| icsa-16-313-01 | Phoenix Contact ILC PLC Authentication Vulnerabilities | 2016-08-12T06:00:00.000000Z | 2025-06-05T22:01:49.839605Z |
| icsa-16-308-02b | Schneider Electric Magelis HMI Resource Consumption Vulnerabilities (Update B) | 2016-08-07T06:00:00.000000Z | 2025-06-05T22:01:37.316376Z |
| icsa-16-308-01 | Moxa OnCell Security Vulnerabilities | 2016-08-07T06:00:00.000000Z | 2025-06-05T22:01:24.817023Z |
| icsa-16-306-03 | Schneider Electric Unity PRO Control Flow Management Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-05T22:01:18.546151Z |
| icsa-16-306-01 | Schneider Electric ConneXium Buffer Overflow Vulnerability | 2016-08-05T06:00:00.000000Z | 2025-06-05T22:01:05.732440Z |
| icsa-16-301-01 | Honeywell Experion PKS Improper Input Validation Vulnerability | 2016-07-31T06:00:00.000000Z | 2025-06-05T22:00:59.524749Z |
| icsa-16-299-01 | Siemens SICAM RTU Devices Denial-of-Service Vulnerability | 2016-07-29T06:00:00.000000Z | 2025-06-05T22:00:53.302460Z |
| icsa-16-294-01 | Moxa EDR-810 Industrial Secure Router Privilege Escalation Vulnerability | 2016-07-24T06:00:00.000000Z | 2025-06-05T22:00:47.061524Z |
| icsa-16-292-01 | Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability | 2016-07-22T06:00:00.000000Z | 2025-06-05T22:00:40.751040Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-pcd-xss-jdxpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-pcd-xss-jDXpjm7 | Cisco Prime Collaboration Deployment Cross-Site Scripting Vulnerability | 2023-04-26T16:00:00+00:00 | 2023-04-26T16:00:00+00:00 |
| cisco-sa-cisco-pdng-dos-kmzwey2q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-cisco-pdng-dos-KmzwEy2Q | Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-19T20:31:01+00:00 |
| cisco-sa-staros-ssh-privesc-bmwejc3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-staros-ssh-privesc-BmWeJC3h | Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmyhn | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-wfnqmYhN | Cisco SD-WAN vManage Software Arbitrary File Deletion Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rhkwegkf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-roomos-file-write-rHKwegKf | Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-caelfk6v | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-ind-CAeLFk6V | Cisco Industrial Network Director Vulnerabilities | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fucceg5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cml-auth-bypass-4fUCCeG5 | Cisco Modeling Labs External Authentication Bypass Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-kedjcxls | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-bw-tcp-dos-KEdJCxLs | Cisco BroadWorks Network Server TCP Denial of Service Vulnerability | 2023-04-19T16:00:00+00:00 | 2023-04-19T16:00:00+00:00 |
| cisco-sa-cisco-pi-epnm-xss-mzshh2j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-cisco-pi-epnm-xss-mZShH2J | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2023-03-01T16:00:00+00:00 | 2023-04-06T15:31:34+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzagwwdd | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T20:30:30+00:00 |
| cisco-sa-wbx-sxss-fupl-64uhbcm5 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-wbx-sxss-fupl-64uHbcm5 | Cisco Webex Meetings Web UI Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-uccx-xss-go9l9xxr | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-uccx-xss-GO9L9xxr | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealthsmc-rce-sfnbpjcs | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealthsmc-rce-sfNBPjcS | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealth-rce-bdwxfk9c | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-stealth-rce-BDwXFK9C | Cisco Secure Network Analytics Remote Code Execution Vulnerability | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-sb-rv32x-cmdinject-ckqszpxl | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| cisco-sa-sb-rv32x-cmdinject-cKQsZpxL | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities | 2023-04-05T16:00:00+00:00 | 2023-04-05T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-53383 | irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:29.000Z |
| msrc_cve-2023-53366 | block: be a bit more careful in checking for NULL bdev while polling | 2025-09-02T00:00:00.000Z | 2025-12-13T01:01:18.000Z |
| msrc_cve-2025-62468 | Windows Defender Firewall Service Information Disclosure Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-12T08:00:00.000Z |
| msrc_cve-2023-45284 | Incorrect detection of reserved device names on Windows in path/filepath | 2023-11-01T07:00:00.000Z | 2025-12-12T01:03:18.000Z |
| msrc_cve-2025-49176 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:03:03.000Z |
| msrc_cve-2025-49177 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:58.000Z |
| msrc_cve-2025-49179 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:52.000Z |
| msrc_cve-2025-49175 | Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors | 2025-06-02T00:00:00.000Z | 2025-12-12T01:02:48.000Z |
| msrc_cve-2024-26800 | tls: fix use-after-free on failed backlog decryption | 2024-04-02T07:00:00.000Z | 2025-12-12T01:02:42.000Z |
| msrc_cve-2023-53438 | x86/MCE: Always save CS register on AMD Zen IF Poison errors | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:37.000Z |
| msrc_cve-2023-53429 | btrfs: don't check PageError in __extent_writepage | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:32.000Z |
| msrc_cve-2023-53424 | clk: mediatek: fix of_iomap memory leak | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:26.000Z |
| msrc_cve-2023-53421 | blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:21.000Z |
| msrc_cve-2023-53355 | staging: pi433: fix memory leak with using debugfs_lookup() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:10.000Z |
| msrc_cve-2023-53353 | accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:02:05.000Z |
| msrc_cve-2023-53348 | btrfs: fix deadlock when aborting transaction during relocation with scrub | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:59.000Z |
| msrc_cve-2023-53347 | net/mlx5: Handle pairing of E-switch via uplink un/load APIs | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:54.000Z |
| msrc_cve-2022-50407 | crypto: hisilicon/qm - increase the memory of local variables | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:49.000Z |
| msrc_cve-2023-53332 | genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:33.000Z |
| msrc_cve-2023-53323 | ext2/dax: Fix ext2_setsize when len is page aligned | 2025-09-02T00:00:00.000Z | 2025-12-12T01:01:27.000Z |
| msrc_cve-2025-64669 | Windows Admin Center Elevation of Privilege Vulnerability | 2025-12-09T08:00:00.000Z | 2025-12-11T08:00:00.000Z |
| msrc_cve-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 2025-10-02T00:00:00.000Z | 2025-12-11T01:38:13.000Z |
| msrc_cve-2025-40334 | drm/amdgpu: validate userq buffer virtual address and size | 2025-12-02T00:00:00.000Z | 2025-12-11T01:36:37.000Z |
| msrc_cve-2025-40338 | ASoC: Intel: avs: Do not share the name pointer between components | 2025-12-02T00:00:00.000Z | 2025-12-11T01:36:32.000Z |
| msrc_cve-2025-40336 | drm/gpusvm: fix hmm_pfn_to_map_order() usage | 2025-12-02T00:00:00.000Z | 2025-12-11T01:36:26.000Z |
| msrc_cve-2022-50357 | usb: dwc3: core: fix some leaks in probe | 2025-09-02T00:00:00.000Z | 2025-12-11T01:01:21.000Z |
| msrc_cve-2025-40340 | drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. | 2025-12-02T00:00:00.000Z | 2025-12-10T01:02:33.000Z |
| msrc_cve-2025-40332 | drm/amdkfd: Fix mmap write lock not release | 2025-12-02T00:00:00.000Z | 2025-12-10T01:02:09.000Z |
| msrc_cve-2025-40339 | drm/amdgpu: fix nullptr err of vm_handle_moved | 2025-12-02T00:00:00.000Z | 2025-12-10T01:01:52.000Z |
| msrc_cve-2025-40335 | drm/amdgpu: validate userq input args | 2025-12-02T00:00:00.000Z | 2025-12-10T01:01:46.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201804-1182 | An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari be… | 2024-07-23T20:25:18.221000Z |
| var-202207-0588 | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does no… | 2024-07-23T20:25:16.794000Z |
| var-200809-0184 | Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-passwo… | 2024-07-23T20:25:15.218000Z |
| var-201210-0269 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:25:11.811000Z |
| var-201404-0374 | Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 an… | 2024-07-23T20:25:08.563000Z |
| var-201704-1034 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.… | 2024-07-23T20:25:07.884000Z |
| var-201912-1848 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:44.163000Z |
| var-201210-0280 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:24:43.164000Z |
| var-201912-0589 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T20:24:42.912000Z |
| var-200611-0487 | com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions,… | 2024-07-23T20:24:10.857000Z |
| var-202006-1807 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)]… | 2024-07-23T20:23:24.085000Z |
| var-201306-0242 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T20:22:47.590000Z |
| var-202101-0220 | A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… | 2024-07-23T20:21:44.763000Z |
| var-202105-1451 | An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas i… | 2024-07-23T20:21:39.668000Z |
| var-201504-0479 | The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle … | 2024-07-23T20:21:39.248000Z |
| var-200904-0817 | Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS … | 2024-07-23T20:21:39.155000Z |
| var-200810-0394 | Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local us… | 2024-07-23T20:21:38.100000Z |
| var-202105-1469 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(… | 2024-07-23T20:21:37.217000Z |
| var-202006-1640 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 a… | 2024-07-23T20:21:37.869000Z |
| var-201203-0171 | Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google… | 2024-07-23T20:21:34.716000Z |
| var-200609-1013 | Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and … | 2024-07-23T20:21:33.528000Z |
| var-201410-1418 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeter… | 2024-07-23T20:21:29.859000Z |
| var-201010-0168 | Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache… | 2024-07-23T20:20:56.693000Z |
| var-201707-1197 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari … | 2024-07-23T20:20:19.517000Z |
| var-200810-0643 | Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in ne… | 2024-07-23T20:20:17.446000Z |
| var-201808-1002 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo… | 2024-07-23T20:20:15.857000Z |
| var-201506-0210 | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 befo… | 2024-07-23T20:20:15.383000Z |
| var-202006-0241 | Incomplete cleanup from specific special register read operations in some Intel(R) Proces… | 2024-07-23T20:20:14.740000Z |
| var-201110-0392 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… | 2024-07-23T20:20:14.628000Z |
| var-201306-0226 | mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 wri… | 2024-07-23T20:20:13.633000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2021-000052 | Hitachi Application Server Help vulnerable cross-site scripting | 2021-06-17T15:11+09:00 | 2021-06-17T15:11+09:00 |
| jvndb-2021-000051 | Multiple cross-site scripting vulnerabilities in multiple EC-CUBE plugins provided by EC-CUBE | 2021-06-16T16:18+09:00 | 2021-06-16T16:18+09:00 |
| jvndb-2021-000049 | Multiple ETUNA EC-CUBE plugins vulnerable to cross-site scripting | 2021-06-15T16:09+09:00 | 2021-06-16T11:52+09:00 |
| jvndb-2021-000050 | Multiple vulnerabilities in GROWI | 2021-06-14T15:10+09:00 | 2021-06-14T15:10+09:00 |
| jvndb-2021-000048 | Asken App for Android fails to restrict custom URL schemes properly | 2021-06-14T15:10+09:00 | 2021-06-14T15:10+09:00 |
| jvndb-2021-000047 | WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting | 2021-06-11T15:24+09:00 | 2021-06-11T15:24+09:00 |
| jvndb-2021-001756 | urllib3 vulnerable to Regular expression Denial-of-Service (ReDoS) | 2021-06-08T12:21+09:00 | 2021-06-08T12:21+09:00 |
| jvndb-2021-000044 | Zettlr vulnerable to cross-site scripting | 2021-05-26T14:50+09:00 | 2021-06-03T16:21+09:00 |
| jvndb-2021-000046 | ATOM - Smart life App vulnerable to improper server certificate verification | 2021-06-03T14:05+09:00 | 2021-06-03T14:05+09:00 |
| jvndb-2021-000045 | goo blog App fails to restrict custom URL schemes properly | 2021-06-02T15:46+09:00 | 2021-06-02T15:46+09:00 |
| jvndb-2021-001575 | Multiple vulnerabilities in Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers | 2021-06-01T15:18+09:00 | 2021-06-01T15:18+09:00 |
| jvndb-2021-001506 | Hitachi Ops Center Analyzer vulnerability of communication using a certificate not intended by the user | 2021-05-25T14:11+09:00 | 2021-05-25T14:11+09:00 |
| jvndb-2021-000041 | The installers of ScanSnap Manager may insecurely load Dynamic Link Libraries | 2021-05-21T16:34+09:00 | 2021-05-21T16:34+09:00 |
| jvndb-2021-000043 | Installer of Overwolf may insecurely load Dynamic Link Libraries | 2021-05-21T16:07+09:00 | 2021-05-21T16:07+09:00 |
| jvndb-2021-000042 | Multiple cross-site scripting vulnerabilities in multiple PHP Factory products | 2021-05-21T15:38+09:00 | 2021-05-21T15:38+09:00 |
| jvndb-2021-000040 | QND vulnerable to privilege escalation | 2021-05-21T14:21+09:00 | 2021-05-21T14:21+09:00 |
| jvndb-2021-000037 | mod_auth_openidc vulnerable to denial-of-service (DoS) | 2021-05-14T15:35+09:00 | 2021-05-14T15:35+09:00 |
| jvndb-2021-000038 | Multiple vulnerabilities in Cisco Small Business Series Wireless Access Points | 2021-05-14T15:26+09:00 | 2021-05-14T15:26+09:00 |
| jvndb-2021-000039 | RFNTPS vulnerable to OS command injection | 2021-05-13T16:05+09:00 | 2021-05-13T16:05+09:00 |
| jvndb-2021-000036 | Multiple vulnerabilities in KonaWiki2 | 2021-05-13T16:05+09:00 | 2021-05-13T16:05+09:00 |
| jvndb-2021-000035 | EC-CUBE vulnerable to cross-site scripting | 2021-05-10T18:08+09:00 | 2021-05-10T18:08+09:00 |
| jvndb-2021-001381 | Multiple vulnerabilities in Buffalo broadband routers | 2021-04-28T16:14+09:00 | 2021-05-07T16:28+09:00 |
| jvndb-2021-001380 | Multiple Buffalo network devices contain hidden functionality | 2021-04-28T16:15+09:00 | 2021-05-07T16:16+09:00 |
| jvndb-2021-000034 | WordPress plugin "WP Fastest Cache" vulnerable to directory traversal | 2021-04-27T17:12+09:00 | 2021-04-27T17:12+09:00 |
| jvndb-2021-000909 | yappa-ng vulnerable to cross-site scripting | 2021-04-22T16:33+09:00 | 2021-04-22T16:33+09:00 |
| jvndb-2021-001374 | Trend Micro Password Manager may insecurely load Dynamic Link Libraries | 2021-04-20T12:25+09:00 | 2021-04-20T12:25+09:00 |
| jvndb-2021-001345 | Information Disclosure Vulnerability in Cosminexus | 2021-04-13T16:46+09:00 | 2021-04-13T16:46+09:00 |
| jvndb-2021-001344 | Vulnerability in JP1/VERITAS | 2021-04-13T16:42+09:00 | 2021-04-13T16:42+09:00 |
| jvndb-2021-001343 | D-Link DAP-1880AC contains multiple vulnerabilities | 2021-04-12T15:32+09:00 | 2021-04-12T15:32+09:00 |
| jvndb-2021-000026 | Fuji Xerox multifunction devices and printers vulnerable to denial-of-service (DoS) | 2021-03-19T15:32+09:00 | 2021-04-12T13:30+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:03456-1 | Security update for logback | 2025-10-07T07:08:23Z | 2025-10-07T07:08:23Z |
| suse-su-2025:03453-1 | Security update for frr | 2025-10-03T10:41:01Z | 2025-10-03T10:41:01Z |
| suse-su-2025:03450-1 | Security update for cairo | 2025-10-02T07:15:39Z | 2025-10-02T07:15:39Z |
| suse-su-2025:03449-1 | Security update for cairo | 2025-10-02T07:15:18Z | 2025-10-02T07:15:18Z |
| suse-su-2025:03448-1 | Security update for warewulf4 | 2025-10-02T07:14:58Z | 2025-10-02T07:14:58Z |
| suse-su-2025:03447-1 | Security update for MozillaFirefox | 2025-10-02T07:14:09Z | 2025-10-02T07:14:09Z |
| suse-su-2025:03446-1 | Security update for python-Django | 2025-10-02T07:13:00Z | 2025-10-02T07:13:00Z |
| suse-su-2025:20805-1 | Security update for podman | 2025-10-01T13:49:25Z | 2025-10-01T13:49:25Z |
| suse-su-2025:20804-1 | Security update for bluez | 2025-10-01T13:47:55Z | 2025-10-01T13:47:55Z |
| suse-su-2025:03445-1 | Security update for snpguest | 2025-10-01T13:09:59Z | 2025-10-01T13:09:59Z |
| suse-su-2025:03444-1 | Security update for nginx | 2025-10-01T12:42:59Z | 2025-10-01T12:42:59Z |
| suse-su-2025:03443-1 | Security update for openssl-1_1 | 2025-09-30T14:54:55Z | 2025-09-30T14:54:55Z |
| suse-su-2025:03442-1 | Security update for openssl-3 | 2025-09-30T14:54:06Z | 2025-09-30T14:54:06Z |
| suse-su-2025:03441-1 | Security update for openssl-3 | 2025-09-30T14:53:31Z | 2025-09-30T14:53:31Z |
| suse-su-2025:03440-1 | Security update for openssl-1_1 | 2025-09-30T14:52:02Z | 2025-09-30T14:52:02Z |
| suse-su-2025:03439-1 | Security update for openssl-3 | 2025-09-30T14:50:34Z | 2025-09-30T14:50:34Z |
| suse-su-2025:03438-1 | Security update for openssl-1_1 | 2025-09-30T14:37:52Z | 2025-09-30T14:37:52Z |
| suse-su-2025:03437-1 | Security update for openssl-1_1 | 2025-09-30T14:37:06Z | 2025-09-30T14:37:06Z |
| suse-su-2025:03436-1 | Security update for open-vm-tools | 2025-09-30T14:10:11Z | 2025-09-30T14:10:11Z |
| suse-su-2025:03435-1 | Security update for open-vm-tools | 2025-09-30T14:09:51Z | 2025-09-30T14:09:51Z |
| suse-su-2025:03434-1 | Security update for open-vm-tools | 2025-09-30T14:08:15Z | 2025-09-30T14:08:15Z |
| suse-su-2025:03424-1 | Security update for nvidia-open-driver-G06-signed | 2025-09-29T09:02:00Z | 2025-09-29T09:02:00Z |
| suse-su-2025:03423-1 | Security update for apache2-mod_security2 | 2025-09-29T08:50:52Z | 2025-09-29T08:50:52Z |
| suse-su-2025:03422-1 | Security update for apache2-mod_security2 | 2025-09-29T08:50:32Z | 2025-09-29T08:50:32Z |
| suse-su-2025:03419-1 | Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6) | 2025-09-28T23:04:07Z | 2025-09-28T23:04:07Z |
| suse-su-2025:03418-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7) | 2025-09-28T23:04:00Z | 2025-09-28T23:04:00Z |
| suse-su-2025:03416-1 | Security update for the Linux Kernel (Live Patch 60 for SLE 15 SP3) | 2025-09-28T16:03:58Z | 2025-09-28T16:03:58Z |
| suse-su-2025:03414-1 | Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3) | 2025-09-28T14:04:00Z | 2025-09-28T14:04:00Z |
| suse-su-2025:03413-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) | 2025-09-28T13:33:34Z | 2025-09-28T13:33:34Z |
| suse-su-2025:03412-1 | Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7) | 2025-09-28T12:03:44Z | 2025-09-28T12:03:44Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:15057-1 | cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media | 2025-05-07T00:00:00Z | 2025-05-07T00:00:00Z |
| opensuse-su-2025:15056-1 | 389-ds-3.1.2~git90.2bc7250be-1.1 on GA media | 2025-05-07T00:00:00Z | 2025-05-07T00:00:00Z |
| opensuse-su-2025:0145-1 | Security update for chromium | 2025-05-06T06:05:59Z | 2025-05-06T06:05:59Z |
| opensuse-su-2025:15055-1 | weblate-5.11.3-1.1 on GA media | 2025-05-06T00:00:00Z | 2025-05-06T00:00:00Z |
| opensuse-su-2025:15054-1 | rclone-1.69.2-1.1 on GA media | 2025-05-05T00:00:00Z | 2025-05-05T00:00:00Z |
| opensuse-su-2025:15053-1 | java-1_8_0-openjdk-1.8.0.452-1.1 on GA media | 2025-05-05T00:00:00Z | 2025-05-05T00:00:00Z |
| opensuse-su-2025:15052-1 | grafana-11.5.4-1.1 on GA media | 2025-05-05T00:00:00Z | 2025-05-05T00:00:00Z |
| opensuse-su-2025:15051-1 | chromedriver-136.0.7103.59-1.1 on GA media | 2025-05-04T00:00:00Z | 2025-05-04T00:00:00Z |
| opensuse-su-2025:15050-1 | audiofile-0.3.6-15.1 on GA media | 2025-05-03T00:00:00Z | 2025-05-03T00:00:00Z |
| opensuse-su-2025:15049-1 | tomcat10-10.1.40-1.1 on GA media | 2025-05-02T00:00:00Z | 2025-05-02T00:00:00Z |
| opensuse-su-2025:15048-1 | tomcat-9.0.104-1.1 on GA media | 2025-05-02T00:00:00Z | 2025-05-02T00:00:00Z |
| opensuse-su-2025:15047-1 | hauler-1.2.4-1.1 on GA media | 2025-05-02T00:00:00Z | 2025-05-02T00:00:00Z |
| opensuse-su-2025:15046-1 | docker-28.1.1_ce-16.1 on GA media | 2025-05-02T00:00:00Z | 2025-05-02T00:00:00Z |
| opensuse-su-2025:15045-1 | MozillaFirefox-138.0-1.1 on GA media | 2025-05-02T00:00:00Z | 2025-05-02T00:00:00Z |
| opensuse-su-2025:15044-1 | libsoup-2_4-1-2.74.3-9.1 on GA media | 2025-05-01T00:00:00Z | 2025-05-01T00:00:00Z |
| opensuse-su-2025:15043-1 | libsoup-3_0-0-3.6.5-3.1 on GA media | 2025-05-01T00:00:00Z | 2025-05-01T00:00:00Z |
| opensuse-su-2025:15042-1 | MozillaThunderbird-128.10.0-1.1 on GA media | 2025-05-01T00:00:00Z | 2025-05-01T00:00:00Z |
| opensuse-su-2025:0139-1 | Security update for libjxl | 2025-04-30T12:01:35Z | 2025-04-30T12:01:35Z |
| opensuse-su-2025:15041-1 | golang-github-prometheus-node_exporter-1.9.1-2.1 on GA media | 2025-04-30T00:00:00Z | 2025-04-30T00:00:00Z |
| opensuse-su-2025:15040-1 | firefox-esr-128.10.0-1.1 on GA media | 2025-04-30T00:00:00Z | 2025-04-30T00:00:00Z |
| opensuse-su-2025:15039-1 | cmctl-2.2.0-1.1 on GA media | 2025-04-30T00:00:00Z | 2025-04-30T00:00:00Z |
| opensuse-su-2025:15038-1 | cyradm-3.8.4-2.1 on GA media | 2025-04-29T00:00:00Z | 2025-04-29T00:00:00Z |
| opensuse-su-2025:15037-1 | amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media | 2025-04-29T00:00:00Z | 2025-04-29T00:00:00Z |
| opensuse-su-2025:15036-1 | glow-2.1.0-2.1 on GA media | 2025-04-27T00:00:00Z | 2025-04-27T00:00:00Z |
| opensuse-su-2025:15035-1 | valkey-8.0.3-1.1 on GA media | 2025-04-26T00:00:00Z | 2025-04-26T00:00:00Z |
| opensuse-su-2025:15034-1 | subfinder-2.7.0-3.1 on GA media | 2025-04-26T00:00:00Z | 2025-04-26T00:00:00Z |
| opensuse-su-2025:15033-1 | govulncheck-vulndb-0.0.20250424T181457-1.1 on GA media | 2025-04-26T00:00:00Z | 2025-04-26T00:00:00Z |
| opensuse-su-2025:15032-1 | python311-h11-0.16.0-1.1 on GA media | 2025-04-25T00:00:00Z | 2025-04-25T00:00:00Z |
| opensuse-su-2025:15031-1 | python311-grpcio-1.69.0-2.1 on GA media | 2025-04-25T00:00:00Z | 2025-04-25T00:00:00Z |
| opensuse-su-2025:15030-1 | opentofu-1.9.1-1.1 on GA media | 2025-04-25T00:00:00Z | 2025-04-25T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29484 | WordPress Frontend File Manager Plugin不安全的直接对象引用漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29483 | WordPress EduKart Pro plugin权限提升漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29482 | WordPress Conditional Maintenance Mode plugin跨站请求伪造漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29481 | WordPress CIBELES AI plugin任意文件上传漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29480 | WordPress Chamber Dashboard Business Directory plugin未经授权的数据导出漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29479 | WordPress Autochat Automatic Conversation plugin未经授权修改数据漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29478 | WordPress AI Feeds plugin任意文件上传漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29477 | WordPress Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin未授权访问漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29476 | WordPress Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin缺失授权漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29475 | WordPress Ace Post Type Builder plugin未经授权的自定义分类法删除漏洞 | 2025-11-27 | 2025-11-27 |
| cnvd-2025-29462 | Apartment Management System employee_salary_setup.php文件SQL注入漏洞 | 2025-09-02 | 2025-11-27 |
| cnvd-2025-29461 | Apartment Management System bill_setup.php文件SQL注入漏洞 | 2025-09-02 | 2025-11-27 |
| cnvd-2025-29460 | Apartment Management System e_all_info.php文件SQL注入漏洞 | 2025-09-04 | 2025-11-27 |
| cnvd-2025-29459 | Apartment Management System /admin.php文件SQL注入漏洞 | 2025-09-04 | 2025-11-27 |
| cnvd-2025-29458 | POS Point of Sale System /empty_table.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29457 | POS Point of Sale System /dymanic_table.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29456 | POS Point of Sale System dom_data_two_headers.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29455 | POS Point of Sale System /dom_data_th.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29454 | POS Point of Sale System /deferred_table.php跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29453 | POS Point of Sale System /complex_header_2.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29452 | POS Point of Sale System /-complex_header.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29451 | POS Point of Sale System 6776.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29450 | Google Chrome类型混淆漏洞 | 2025-11-20 | 2025-11-27 |
| cnvd-2025-29449 | POS Point of Sale System /2512.php文件跨站脚本漏洞 | 2025-09-09 | 2025-11-27 |
| cnvd-2025-29448 | Web-Based Internet Laboratory Management System login.php文件SQL注入漏洞 | 2025-09-19 | 2025-11-27 |
| cnvd-2025-29447 | Inventory Management System PROID参数SQL注入漏洞 | 2025-11-18 | 2025-11-27 |
| cnvd-2025-29446 | Inventory Management System /admin/login.php文件SQL注入漏洞 | 2025-11-18 | 2025-11-27 |
| cnvd-2025-29445 | Inventory Management System ID参数SQL注入漏洞 | 2025-11-18 | 2025-11-27 |
| cnvd-2025-29444 | Inventory Management System /LogSignModal.PHP文件SQL注入漏洞 | 2025-11-18 | 2025-11-27 |
| cnvd-2025-29443 | Online Voting System /index.php文件代码问题漏洞 | 2025-11-20 | 2025-11-27 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0763 | Vulnérabilité dans Spring Cloud Gateway | 2025-09-09T00:00:00.000000 | 2025-09-09T00:00:00.000000 |
| certfr-2025-avi-0762 | Vulnérabilité dans SPIP | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0761 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| CERTFR-2025-AVI-0762 | Vulnérabilité dans SPIP | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| CERTFR-2025-AVI-0761 | Multiples vulnérabilités dans Microsoft Edge | 2025-09-08T00:00:00.000000 | 2025-09-08T00:00:00.000000 |
| certfr-2025-avi-0760 | Multiples vulnérabilités dans les produits IBM | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0759 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0758 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0757 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0756 | Multiples vulnérabilités dans les produits VMware | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0755 | Vulnérabilité dans les produits Synology | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0760 | Multiples vulnérabilités dans les produits IBM | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0759 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0758 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0757 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0756 | Multiples vulnérabilités dans les produits VMware | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| CERTFR-2025-AVI-0755 | Vulnérabilité dans les produits Synology | 2025-09-05T00:00:00.000000 | 2025-09-05T00:00:00.000000 |
| certfr-2025-avi-0754 | Multiples vulnérabilités dans les produits VMware | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0753 | Vulnérabilité dans Shibboleth Service Provider | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0752 | Multiples vulnérabilités dans Google Pixel | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| CERTFR-2025-AVI-0754 | Multiples vulnérabilités dans les produits VMware | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| CERTFR-2025-AVI-0753 | Vulnérabilité dans Shibboleth Service Provider | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| CERTFR-2025-AVI-0752 | Multiples vulnérabilités dans Google Pixel | 2025-09-04T00:00:00.000000 | 2025-09-04T00:00:00.000000 |
| certfr-2025-avi-0751 | Multiples vulnérabilités dans les produits VMware | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0750 | Multiples vulnérabilités dans Google Android | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0749 | Multiples vulnérabilités dans Google Chrome | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| CERTFR-2025-AVI-0751 | Multiples vulnérabilités dans les produits VMware | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| CERTFR-2025-AVI-0750 | Multiples vulnérabilités dans Google Android | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| CERTFR-2025-AVI-0749 | Multiples vulnérabilités dans Google Chrome | 2025-09-03T00:00:00.000000 | 2025-09-03T00:00:00.000000 |
| certfr-2025-avi-0748 | Vulnérabilité dans les produits Liferay | 2025-09-02T00:00:00.000000 | 2025-09-02T00:00:00.000000 |