Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-69045
N/A
WordPress FooEvents for WooCommerce plugin <= 1.20.4 -… FooEvents
FooEvents for WooCommerce
2026-01-22T16:52:19.002Z 2026-01-22T16:52:19.002Z
CVE-2025-69044
N/A
WordPress Vango theme <= 1.3.3 - Local File Inclusion … goalthemes
Vango
2026-01-22T16:52:18.806Z 2026-01-22T16:52:18.806Z
CVE-2025-69043
N/A
WordPress Rashy theme <= 1.1.3 - Local File Inclusion … goalthemes
Rashy
2026-01-22T16:52:18.567Z 2026-01-22T16:52:18.567Z
CVE-2025-69042
N/A
WordPress Lindo theme <= 1.2.5 - Local File Inclusion … goalthemes
Lindo
2026-01-22T16:52:18.326Z 2026-01-22T16:52:18.326Z
CVE-2025-69041
N/A
WordPress Dekoro theme <= 1.0.7 - Local File Inclusion… goalthemes
Dekoro
2026-01-22T16:52:18.140Z 2026-01-22T16:52:18.140Z
CVE-2025-69040
N/A
WordPress Bfres theme <= 1.2.1 - Local File Inclusion … goalthemes
Bfres
2026-01-22T16:52:17.934Z 2026-01-22T16:52:17.934Z
CVE-2025-69038
N/A
WordPress Hyori theme <= 1.3.6 - Local File Inclusion … goalthemes
Hyori
2026-01-22T16:52:17.563Z 2026-01-22T16:52:17.563Z
CVE-2025-69037
N/A
WordPress Pippo theme <= 1.2.3 - Local File Inclusion … goalthemes
Pippo
2026-01-22T16:52:17.366Z 2026-01-22T16:52:17.366Z
CVE-2025-69036
N/A
WordPress Tech Life CPT plugin <= 16.4 - PHP Object In… strongholdthemes
Tech Life CPT
2026-01-22T16:52:17.168Z 2026-01-22T16:52:17.168Z
CVE-2021-47873
5.1 (4.0)
7.2 (3.1)
VestaCP < 0.9.8-25 - Stored Cross-Site Scripting VestaCP
VestaCP
2026-01-21T17:27:48.296Z 2026-01-22T16:52:17.530Z
CVE-2025-69035
N/A
WordPress Dental Care CPT plugin <= 20.2 - PHP Object … strongholdthemes
Dental Care CPT
2026-01-22T16:52:16.979Z 2026-01-22T16:52:16.979Z
CVE-2025-69005
N/A
WordPress Search & Go theme <= 2.8 - Local File Inclus… Elated-Themes
Search & Go
2026-01-22T16:52:16.776Z 2026-01-22T16:52:16.776Z
CVE-2025-69004
N/A
WordPress Bajaar - Highly Customizable WooCommerce Wor… XpeedStudio
Bajaar - Highly Customizable WooCommerce WordPress Theme
2026-01-22T16:52:16.561Z 2026-01-22T16:52:16.561Z
CVE-2025-69003
N/A
WordPress KenthaRadio theme <= 2.2.0 - Reflected Cross… QantumThemes
KenthaRadio
2026-01-22T16:52:16.345Z 2026-01-22T16:52:16.345Z
CVE-2025-69002
N/A
WordPress OneLife theme <= 3.9 - PHP Object Injection … designthemes
OneLife
2026-01-22T16:52:16.108Z 2026-01-22T16:52:16.108Z
CVE-2025-69001
N/A
WordPress FluentForm plugin <= 6.1.11 - Arbitrary Shor… Shahjahan Jewel
FluentForm
2026-01-22T16:52:15.923Z 2026-01-22T16:52:15.923Z
CVE-2025-68999
N/A
WordPress Happy Addons for Elementor plugin <= 3.20.4 … HappyMonster
Happy Addons for Elementor
2026-01-22T16:52:15.685Z 2026-01-22T16:52:15.685Z
CVE-2025-68986
N/A
WordPress Miion theme <= 1.2.7 - Arbitrary File Upload… zozothemes
Miion
2026-01-22T16:52:15.450Z 2026-01-22T16:52:15.450Z
CVE-2025-68913
N/A
WordPress Miion theme <= 1.2.7 - Local File Inclusion … zozothemes
Miion
2026-01-22T16:52:15.263Z 2026-01-22T16:52:15.263Z
CVE-2025-68912
N/A
WordPress HDForms plugin <= 1.6.1 - Arbitrary File Del… Harmonic Design
HDForms
2026-01-22T16:52:15.047Z 2026-01-22T16:52:15.047Z
CVE-2025-68911
N/A
WordPress Solace theme <= 2.1.16 - Broken Access Contr… solacewp
Solace
2026-01-22T16:52:14.813Z 2026-01-22T16:52:14.813Z
CVE-2025-68910
N/A
WordPress Blogzee theme <= 1.0.5 - Arbitrary File Uplo… blazethemes
Blogzee
2026-01-22T16:52:14.569Z 2026-01-22T16:52:14.569Z
CVE-2025-68909
N/A
WordPress Blogistic theme <= 1.0.5 - Arbitrary File Up… blazethemes
Blogistic
2026-01-22T16:52:14.365Z 2026-01-22T16:52:14.365Z
CVE-2025-68908
N/A
WordPress Barberry theme <= 2.9.9.87 - Local File Incl… temash
Barberry
2026-01-22T16:52:14.157Z 2026-01-22T16:52:14.157Z
CVE-2025-68907
N/A
WordPress Hostme v2 theme <= 7.0 - Arbitrary File Dele… AivahThemes
Hostme v2
2026-01-22T16:52:13.949Z 2026-01-22T16:52:13.949Z
CVE-2025-68906
N/A
WordPress JNews - Video plugin <= 11.0.2 - Reflected C… jegtheme
JNews - Video
2026-01-22T16:52:13.768Z 2026-01-22T16:52:13.768Z
CVE-2025-68905
N/A
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local … jegtheme
JNews - Pay Writer
2026-01-22T16:52:13.550Z 2026-01-22T16:52:13.550Z
CVE-2025-68904
N/A
WordPress JNews - Frontend Submit plugin <= 11.0.0 - R… jegtheme
JNews - Frontend Submit
2026-01-22T16:52:13.348Z 2026-01-22T16:52:13.348Z
CVE-2025-68903
N/A
WordPress Anona theme <= 8.0 - PHP Object Injection vu… AivahThemes
Anona
2026-01-22T16:52:13.150Z 2026-01-22T16:52:13.150Z
CVE-2025-68902
N/A
WordPress Anona theme <= 8.0 - Arbitrary File Download… AivahThemes
Anona
2026-01-22T16:52:12.937Z 2026-01-22T16:52:12.937Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-68904
N/A
WordPress JNews - Frontend Submit plugin <= 11.0.0 - R… jegtheme
JNews - Frontend Submit
2026-01-22T16:52:13.348Z 2026-01-22T16:52:13.348Z
CVE-2025-68903
N/A
WordPress Anona theme <= 8.0 - PHP Object Injection vu… AivahThemes
Anona
2026-01-22T16:52:13.150Z 2026-01-22T16:52:13.150Z
CVE-2025-68902
N/A
WordPress Anona theme <= 8.0 - Arbitrary File Download… AivahThemes
Anona
2026-01-22T16:52:12.937Z 2026-01-22T16:52:12.937Z
CVE-2025-68901
N/A
WordPress Anona theme <= 8.0 - Arbitrary File Deletion… AivahThemes
Anona
2026-01-22T16:52:12.738Z 2026-01-22T16:52:12.738Z
CVE-2025-68900
N/A
WordPress Enfold theme <= 7.1.3 - Cross Site Scripting… Kriesi
Enfold
2026-01-22T16:52:12.531Z 2026-01-22T16:52:12.531Z
CVE-2025-68899
N/A
WordPress Vivagh theme <= 2.4 - PHP Object Injection v… designthemes
Vivagh
2026-01-22T16:52:12.326Z 2026-01-22T16:52:12.326Z
CVE-2025-68898
N/A
WordPress Synergy Project Manager plugin <= 1.5 - Cros… cjjparadoxmax
Synergy Project Manager
2026-01-22T16:52:12.134Z 2026-01-22T16:52:12.134Z
CVE-2025-68896
N/A
WordPress WDV One Page Docs plugin <= 1.2.4 - Broken A… vrpr
WDV One Page Docs
2026-01-22T16:52:11.918Z 2026-01-22T16:52:11.918Z
CVE-2025-68894
N/A
WordPress ShoutOut plugin <= 4.0.2 - Reflected Cross S… shoutoutglobal
ShoutOut
2026-01-22T16:52:11.717Z 2026-01-22T16:52:11.717Z
CVE-2025-68884
N/A
WordPress WP Simple Redirect plugin <= 1.1 - Reflected… Arevico
WP Simple Redirect
2026-01-22T16:52:11.504Z 2026-01-22T16:52:11.504Z
CVE-2025-68883
N/A
WordPress bidorbuy Store Integrator plugin <= 2.12.0 -… extremeidea
bidorbuy Store Integrator
2026-01-22T16:52:11.325Z 2026-01-22T16:52:11.325Z
CVE-2025-68882
N/A
WordPress Scalenut plugin <= 1.1.3 - Broken Access Con… Scalenut
Scalenut
2026-01-22T16:52:11.129Z 2026-01-22T16:52:11.129Z
CVE-2025-68881
N/A
WordPress AppExperts plugin <= 1.4.5 - SQL Injection v… Saad Iqbal
AppExperts
2026-01-22T16:52:10.921Z 2026-01-22T16:52:10.921Z
CVE-2025-68871
N/A
WordPress Dooodl plugin <= 2.3.0 - Reflected Cross Sit… noCreativity
Dooodl
2026-01-22T16:52:10.736Z 2026-01-22T16:52:10.736Z
CVE-2025-68869
N/A
WordPress LazyTasks plugin <= 1.4.01 - Privilege Escal… LazyCoders LLC
LazyTasks
2026-01-22T16:52:10.526Z 2026-01-22T16:52:10.526Z
CVE-2025-68866
N/A
WordPress Dinatur plugin <= 1.18 - Cross Site Scriptin… woofer696
Dinatur
2026-01-22T16:52:10.347Z 2026-01-22T16:52:10.347Z
CVE-2025-68864
N/A
WordPress Infility Global plugin <= 2.14.50 - Cross Si… Infility
Infility Global
2026-01-22T16:52:10.147Z 2026-01-22T16:52:10.147Z
CVE-2025-68859
N/A
WordPress Syntax Highlighter Compress plugin <= 3.0.83… agmorpheus
Syntax Highlighter Compress
2026-01-22T16:52:09.950Z 2026-01-22T16:52:09.950Z
CVE-2025-68858
N/A
WordPress wpCAS plugin <= 1.07 - Cross Site Scripting … Casey Bisson
wpCAS
2026-01-22T16:52:09.772Z 2026-01-22T16:52:09.772Z
CVE-2025-68857
N/A
WordPress Paid Downloads plugin <= 3.15 - SQL Injectio… ichurakov
Paid Downloads
2026-01-22T16:52:09.575Z 2026-01-22T16:52:09.575Z
CVE-2025-68849
N/A
WordPress Quote Master plugin <= 7.1.1 - Reflected Cro… Frank Corso
Quote Master
2026-01-22T16:52:09.375Z 2026-01-22T16:52:09.375Z
CVE-2025-68839
N/A
WordPress Easy Theme Options plugin <= 1.0 - Reflected… Remi Corson
Easy Theme Options
2026-01-22T16:52:09.179Z 2026-01-22T16:52:09.179Z
CVE-2025-68838
N/A
WordPress MemberPress Discord Addon plugin <= 1.1.4 - … expresstechsoftware
MemberPress Discord Addon
2026-01-22T16:52:08.981Z 2026-01-22T16:52:08.981Z
CVE-2025-68835
N/A
WordPress Ravpage plugin <= 2.33 - Reflected Cross Sit… matiskiba
Ravpage
2026-01-22T16:52:08.783Z 2026-01-22T16:52:08.783Z
CVE-2025-68558
N/A
WordPress Depicter Slider plugin <= 4.0.4 - Broken Acc… averta
Depicter Slider
2026-01-22T16:52:08.541Z 2026-01-22T16:52:08.541Z
CVE-2025-68538
N/A
WordPress Craft | Coffee Shop Cafe Restaurant WordPres… ThemeGoods
Craft
2026-01-22T16:52:08.348Z 2026-01-22T16:52:08.348Z
CVE-2025-68520
N/A
WordPress DotLife theme < 4.9.5 - Reflected Cross Site… ThemeGoods
DotLife
2026-01-22T16:52:08.148Z 2026-01-22T16:52:08.148Z
CVE-2025-68518
N/A
WordPress Hoteller theme < 6.8.9 - Reflected Cross Sit… ThemeGoods
Hoteller
2026-01-22T16:52:07.893Z 2026-01-22T16:52:07.893Z
CVE-2025-68510
N/A
WordPress Photography theme < 7.7.5 - Local File Inclu… ThemeGoods
Photography
2026-01-22T16:52:07.647Z 2026-01-22T16:52:07.647Z
CVE-2025-68507
N/A
WordPress Icegram plugin <= 3.1.35 - Broken Access Con… Icegram
Icegram
2026-01-22T16:52:07.377Z 2026-01-22T16:52:07.377Z
ID Description Published Updated
fkie_cve-2025-68901 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… 2026-01-22T17:16:13.860 2026-01-26T15:04:33.567
fkie_cve-2025-68900 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:13.733 2026-01-26T15:04:33.567
fkie_cve-2025-68899 Deserialization of Untrusted Data vulnerability in designthemes Vivagh vivagh allows Object Injecti… 2026-01-22T17:16:13.607 2026-01-26T15:04:33.567
fkie_cve-2025-68898 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:13.470 2026-01-26T15:04:33.567
fkie_cve-2025-68896 Missing Authorization vulnerability in vrpr WDV One Page Docs wdv-one-page-docs allows Exploiting I… 2026-01-22T17:16:13.240 2026-01-26T15:04:33.567
fkie_cve-2025-68894 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:13.040 2026-01-26T15:04:33.567
fkie_cve-2025-68884 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:12.917 2026-01-26T15:04:33.567
fkie_cve-2025-68883 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:12.790 2026-01-26T15:04:33.567
fkie_cve-2025-68882 Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Con… 2026-01-22T17:16:12.667 2026-01-26T15:04:33.567
fkie_cve-2025-68881 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-22T17:16:12.540 2026-01-26T15:04:33.567
fkie_cve-2025-68871 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:12.417 2026-01-26T15:04:33.567
fkie_cve-2025-68869 Incorrect Privilege Assignment vulnerability in LazyCoders LLC LazyTasks lazytasks-project-task-man… 2026-01-22T17:16:12.293 2026-01-26T15:04:33.567
fkie_cve-2025-68866 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:12.163 2026-01-26T15:04:33.567
fkie_cve-2025-68864 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:12.037 2026-01-26T15:04:33.567
fkie_cve-2025-68859 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.913 2026-01-26T15:04:33.567
fkie_cve-2025-68858 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.773 2026-01-26T15:04:33.567
fkie_cve-2025-68857 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-22T17:16:11.650 2026-01-26T15:04:33.567
fkie_cve-2025-68849 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.520 2026-01-26T15:04:33.567
fkie_cve-2025-68839 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.390 2026-01-26T15:04:33.567
fkie_cve-2025-68838 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.260 2026-01-26T15:04:33.567
fkie_cve-2025-68835 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:11.130 2026-01-26T15:04:33.567
fkie_cve-2025-68558 Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectl… 2026-01-22T17:16:11.007 2026-01-26T15:04:33.567
fkie_cve-2025-68538 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:10.880 2026-01-26T15:04:33.567
fkie_cve-2025-68520 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:10.763 2026-01-26T15:04:33.567
fkie_cve-2025-68518 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T17:16:10.647 2026-01-26T15:04:33.567
fkie_cve-2025-68510 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T17:16:10.523 2026-01-26T15:04:33.567
fkie_cve-2025-68507 Missing Authorization vulnerability in Icegram Icegram icegram allows Exploiting Incorrectly Config… 2026-01-22T17:16:10.393 2026-01-26T15:04:33.567
fkie_cve-2025-68073 Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-complianc… 2026-01-22T17:16:10.120 2026-01-26T15:04:33.567
fkie_cve-2025-68072 Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings a… 2026-01-22T17:16:09.993 2026-01-26T15:04:33.567
fkie_cve-2025-68059 Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Inco… 2026-01-22T17:16:09.873 2026-01-26T15:04:33.567
ID Severity Description Published Updated
ghsa-rrp9-xxj5-q3r7
Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-qppx-qccp-qx6c
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-q8c3-r22r-mrwf
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-pcpx-26f9-4672
Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploit… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-mgq7-gfxq-x5hv
Missing Authorization vulnerability in Taxcloud TaxCloud for WooCommerce simple-sales-tax allows Ex… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-m4hg-pxfp-9fhc
Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-m47r-62mw-66mc
Server-Side Request Forgery (SSRF) vulnerability in Marco van Wieren WPO365 wpo365-login allows Ser… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-jm2g-967q-m6mm
Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf a… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-hhmh-3f46-5wj7
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-hcj7-c9m7-w5g2
Unrestricted Upload of File with Dangerous Type vulnerability in garidium g-FFL Checkout g-ffl-chec… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-gg46-746r-mfx4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-fxpv-vhr6-hx33
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-fvvm-j29r-fjc5
Missing Authorization vulnerability in ilmosys Order Listener for WooCommerce woc-order-alert allow… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-c3jv-qqqq-j4r2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-9rmh-gmj9-rv2m
Unrestricted Upload of File with Dangerous Type vulnerability in InspiryThemes Real Homes CRM realh… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-9rfj-pqxj-824p
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-9jxp-rrqm-g9wj
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ova… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-9h8g-cm67-679m
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-7mm8-xv65-cr3g
Missing Authorization vulnerability in Codeless Slider Templates slider-templates allows Accessing … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-57rf-cvcf-cgq7
Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploitin… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-4rm4-269g-c284
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-4744-8g3m-8hgr
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-4676-qh4g-4h4x
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-43hj-2398-rpw2
Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro book… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-4224-439j-q3pp
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCo… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-2hmm-wj33-38p5
Missing Authorization vulnerability in renatoatshown Shown Connector shown-connector allows Exploit… 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-267g-8279-vj63
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:34Z 2026-01-22T18:30:34Z
ghsa-x87w-5wj7-8cwc
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:33Z 2026-01-22T18:30:33Z
ghsa-wcf9-g27p-cxr6
Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor … 2026-01-22T18:30:33Z 2026-01-22T18:30:33Z
ghsa-vcf3-jrp5-hq5f
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … 2026-01-22T18:30:33Z 2026-01-22T18:30:33Z
ID Severity Description Package Published Updated
pysec-2022-292
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb… rdiffweb 2022-09-26T19:15:00Z 2022-09-28T14:57:05.110777Z
pysec-2022-291
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb… rdiffweb 2022-09-26T17:16:00Z 2022-09-28T14:57:05.063685Z
pysec-2022-290
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7. rdiffweb 2022-09-23T10:15:00Z 2022-09-26T18:52:54.831168Z
pysec-2022-289
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7. rdiffweb 2022-09-22T19:15:00Z 2022-09-26T17:03:24.164223Z
pysec-2022-287
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060… rdiffweb 2022-09-21T17:15:00Z 2022-09-23T18:53:22.606477Z
pysec-2022-286
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint … octoprint 2022-09-21T10:15:00Z 2022-09-23T18:53:21.529642Z
pysec-2022-285
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. rdiffweb 2022-09-21T20:15:00Z 2022-09-23T06:43:04.843450Z
pysec-2022-284
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. rdiffweb 2022-09-22T10:15:00Z 2022-09-22T22:39:18.498564Z
pysec-2022-283
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. octoprint 2022-09-21T12:15:00Z 2022-09-22T17:04:30.556436Z
pysec-2022-282
If an attacker comes into the possession of a victim's OctoPrint session cookie through w… octoprint 2022-09-21T12:15:00Z 2022-09-22T17:04:30.485402Z
pysec-2022-281
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5. rdiffweb 2022-09-17T20:15:00Z 2022-09-21T10:45:56.877746Z
pysec-2022-280
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/co… apache-airflow 2022-09-21T08:15:00Z 2022-09-21T10:45:51.897136Z
pysec-2022-279
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowin… apache-airflow 2022-09-21T08:15:00Z 2022-09-21T10:45:51.858507Z
pysec-2022-278
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. rdiffweb 2022-09-15T09:15:00Z 2022-09-18T05:55:21.035555Z
pysec-2022-277
LIEF commit 365a16a was discovered to contain a segmentation violation via the component … lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.935822Z
pysec-2022-276
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function pri… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.909680Z
pysec-2022-275
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function L… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.884031Z
pysec-2022-274
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /co… lief 2022-09-13T21:15:00Z 2022-09-18T05:55:18.856467Z
pysec-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. rdiffweb 2022-09-13T10:15:00Z 2022-09-15T22:37:42.206790Z
pysec-2022-272
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. rdiffweb 2022-09-13T17:15:00Z 2022-09-15T20:40:19.575026Z
pysec-2022-271
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060… rdiffweb 2022-09-13T10:15:00Z 2022-09-15T20:40:19.500287Z
pysec-2022-270
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built f… indy-node 2022-09-09T19:15:00Z 2022-09-15T17:00:02.967935Z
pysec-2022-269
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAut… oauthlib 2022-09-09T21:15:00Z 2022-09-15T06:38:55.424021Z
pysec-2022-268
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffwe… rdiffweb 2022-09-08T19:15:00Z 2022-09-14T17:03:43.275428Z
pysec-2022-267
OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VN… vncauthproxy 2022-09-14T11:15:00Z 2022-09-14T13:29:43.279847Z
pysec-2022-266
Poetry is a dependency manager for Python. When handling dependencies that come from a Gi… poetry 2022-09-07T19:15:00Z 2022-09-13T18:50:19.361398Z
pysec-2022-265
Indy Node is the server portion of a distributed ledger purpose-built for decentralized i… indy-node 2022-09-06T17:15:00Z 2022-09-13T17:01:18.154930Z
pysec-2022-264
mangadex-downloader is a command-line tool to download manga from MangaDex. When using `f… mangadex-downloader 2022-09-07T22:15:00Z 2022-09-12T20:38:21.585718Z
pysec-2022-263
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend … apache-airflow 2022-09-02T07:15:00Z 2022-09-09T14:35:42.886118Z
pysec-2022-262
Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foun… matrix-synapse 2022-09-02T20:15:00Z 2022-09-09T06:19:32.373264Z
ID Description Updated
gsd-2024-33013 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.756870Z
gsd-2024-33012 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.690513Z
gsd-2024-33011 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.712423Z
gsd-2024-33010 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.741895Z
gsd-2024-33009 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.643652Z
gsd-2024-33008 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.702713Z
gsd-2024-33007 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.692026Z
gsd-2024-33006 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.763047Z
gsd-2024-33005 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.723751Z
gsd-2024-33004 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.705613Z
gsd-2024-33003 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.692247Z
gsd-2024-33002 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.638133Z
gsd-2024-33001 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.747211Z
gsd-2024-33000 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:09.715822Z
gsd-2024-4110 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.869682Z
gsd-2024-4109 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.871548Z
gsd-2024-4108 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.876858Z
gsd-2024-4107 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.856997Z
gsd-2024-4106 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.869278Z
gsd-2024-4105 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.889121Z
gsd-2024-4104 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.871352Z
gsd-2024-4103 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.881278Z
gsd-2024-4102 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.856802Z
gsd-2024-4101 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.864889Z
gsd-2024-4100 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.856554Z
gsd-2024-4099 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.865120Z
gsd-2024-4098 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.870871Z
gsd-2024-4097 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.885295Z
gsd-2024-4096 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.853359Z
gsd-2024-4095 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.865505Z
ID Description Published Updated
MAL-2025-192995 Malicious code in @vietmoney/react-native-action-button (npm) 2025-12-31T13:21:20Z 2026-01-02T21:37:26Z
MAL-2025-192994 Malicious code in @vietmoney/react-big-calendar (npm) 2025-12-31T13:21:20Z 2026-01-02T21:37:26Z
MAL-2025-192984 Malicious code in chai-promised-chains (npm) 2025-12-30T17:11:04Z 2026-01-02T21:37:26Z
MAL-2025-192983 Malicious code in bigmathex (npm) 2025-12-30T16:59:03Z 2026-01-02T21:37:26Z
MAL-2025-192982 Malicious code in @ptest2535/ui-core_mal (npm) 2025-12-30T17:05:14Z 2026-01-02T21:37:26Z
MAL-2025-192981 Malicious code in @ptest2535/test_package (npm) 2025-12-30T17:05:14Z 2026-01-02T21:37:26Z
MAL-2025-192980 Malicious code in @ptest2535/l_woker_mal (npm) 2025-12-30T17:05:14Z 2026-01-02T21:37:26Z
MAL-2025-192979 Malicious code in @ptest2535/artifactory-demo-ptest (npm) 2025-12-30T17:05:14Z 2026-01-02T21:37:26Z
MAL-2025-192966 Malicious code in cdd-plugin-for-datawarrior (npm) 2025-12-30T16:12:28Z 2026-01-02T21:37:26Z
MAL-2025-192965 Malicious code in awsmcc (npm) 2025-12-30T16:12:28Z 2026-01-02T21:37:26Z
MAL-2025-192964 Malicious code in @peter_wilson12091/internal-json-test-parser (npm) 2025-12-30T16:12:03Z 2026-01-02T21:37:26Z
MAL-2025-192941 Malicious code in bola511 (npm) 2025-12-26T14:09:11Z 2026-01-02T21:37:26Z
MAL-2025-192938 Malicious code in bettermode-icons (npm) 2025-12-25T21:52:38Z 2026-01-02T21:37:26Z
MAL-2025-192932 Malicious code in cc-raiesy (npm) 2025-12-25T18:19:57Z 2026-01-02T21:37:26Z
MAL-2025-192927 Malicious code in adril7123 (npm) 2025-12-24T17:05:44Z 2026-01-02T21:37:26Z
mal-2025-192963 Malicious code in @bugdtest/test1 (npm) 2025-12-30T15:57:26Z 2026-01-02T21:37:25Z
MAL-2025-192963 Malicious code in @bugdtest/test1 (npm) 2025-12-30T15:57:26Z 2026-01-02T21:37:25Z
mal-2026-8 Malicious code in @nitaiapiiro/rand_emoji (npm) 2026-01-02T21:29:26Z 2026-01-02T21:29:26Z
MAL-2026-8 Malicious code in @nitaiapiiro/rand_emoji (npm) 2026-01-02T21:29:26Z 2026-01-02T21:29:26Z
mal-2026-6 Malicious code in ziphash (PyPI) 2026-01-01T22:08:29Z 2026-01-02T20:40:48Z
MAL-2026-6 Malicious code in ziphash (PyPI) 2026-01-01T22:08:29Z 2026-01-02T20:40:48Z
mal-2026-7 Malicious code in gatr (PyPI) 2026-01-02T13:03:00Z 2026-01-02T13:03:00Z
MAL-2026-7 Malicious code in gatr (PyPI) 2026-01-02T13:03:00Z 2026-01-02T13:03:00Z
mal-2026-5 Malicious code in queryservice-client (PyPI) 2026-01-01T18:40:28Z 2026-01-01T18:40:28Z
MAL-2026-5 Malicious code in queryservice-client (PyPI) 2026-01-01T18:40:28Z 2026-01-01T18:40:28Z
mal-2025-6694 Malicious code in amdocs-auth-package (npm) 2025-08-03T04:02:38Z 2026-01-01T15:40:09Z
MAL-2025-6694 Malicious code in amdocs-auth-package (npm) 2025-08-03T04:02:38Z 2026-01-01T15:40:09Z
mal-2026-1 Malicious code in sfnt2woff-zopfli (PyPI) 2026-01-01T11:16:31Z 2026-01-01T11:16:31Z
MAL-2026-1 Malicious code in sfnt2woff-zopfli (PyPI) 2026-01-01T11:16:31Z 2026-01-01T11:16:31Z
MAL-2025-193011 Malicious code in requeses (PyPI) 2025-12-31T16:40:04Z 2026-01-18T23:09:04Z
ID Description Published Updated
wid-sec-w-2025-1301 Mozilla Thunderbird: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen 2025-06-10T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-1300 Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Codeausführung 2025-06-10T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-1062 Mozilla Thunderbird: Mehrere Schwachstellen 2025-05-14T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-1006 Mattermost: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2025-05-12T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0931 Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen 2025-05-04T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0905 Mattermost: Mehrere Schwachstellen 2025-04-29T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0668 Apple macOS: Mehrere Schwachstellen 2025-03-31T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0663 Apple iOS und iPadOS: Mehrere Schwachstellen 2025-03-31T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0635 RabbitMQ: Schwachstelle ermöglicht Cross-Site Scripting 2025-03-25T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0430 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-02-23T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-0257 AMD Prozessor: Schwachstelle ermöglicht das Umgehen von Sicherheitsmaßnahmen 2025-02-03T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-3487 wget: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen 2024-11-18T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-3436 GNOME: Mehrere Schwachstellen 2024-11-12T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-3124 Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2024-10-08T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-1171 OpenSSL: Schwachstelle ermöglicht Denial of Service 2024-05-16T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-0920 Linux Kernel: Mehrere Schwachstellen 2024-04-17T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-0654 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe 2024-03-17T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2024-0280 libxml2: Schwachstelle ermöglicht Denial of Service 2024-02-04T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2023-0690 cURL: Mehrere Schwachstellen 2023-03-19T23:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2022-0929 zlib: Schwachstelle ermöglicht nicht spezifizierten Angriff 2022-08-04T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2022-0005 zlib: Schwachstelle ermöglicht Codeausführung 2022-04-03T22:00:00.000+00:00 2025-06-11T22:00:00.000+00:00
wid-sec-w-2025-1303 Perl (IBM AIX): Schwachstelle ermöglicht Codeausführung 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1302 Kibana: Schwachstelle ermöglicht Privilegieneskalation 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1299 Apache CloudStack: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1297 Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1295 Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1294 GeoServer: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1293 IBM DataPower Gateway: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1292 Trend Micro Apex Central: Mehrere Schwachstellen ermöglichen Codeausführung 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1291 Pixel Patchday Juni 2025: Mehrere Schwachstellen 2025-06-10T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
ID Description Published Updated
rhsa-2024:1679 Red Hat Security Advisory: OpenShift Container Platform 4.12.55 bug fix and security update 2024-04-08T06:38:12+00:00 2026-01-26T21:13:05+00:00
rhsa-2024:1668 Red Hat Security Advisory: OpenShift Container Platform 4.15.8 bug fix and security update 2024-04-08T06:24:52+00:00 2026-01-26T21:13:04+00:00
rhsa-2024:1570 Red Hat Security Advisory: ACS 4.4 enhancement and security update 2024-03-28T20:50:01+00:00 2026-01-26T21:13:01+00:00
rhsa-2024:1567 Red Hat Security Advisory: OpenShift Container Platform 4.14.19 security update 2024-04-03T16:05:37+00:00 2026-01-26T21:13:01+00:00
rhea-2024:4022 Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release 2024-06-20T14:25:41+00:00 2026-01-26T21:12:59+00:00
rhsa-2026:0933 Red Hat Security Advisory: java-25-openjdk security update 2026-01-26T16:09:29+00:00 2026-01-26T21:12:51+00:00
rhsa-2026:0932 Red Hat Security Advisory: java-1.8.0-openjdk security update 2026-01-26T16:34:29+00:00 2026-01-26T21:12:51+00:00
rhsa-2026:0928 Red Hat Security Advisory: java-21-openjdk security update 2026-01-22T19:02:18+00:00 2026-01-26T21:12:50+00:00
rhsa-2026:0896 Red Hat Security Advisory: OpenJDK 8u482 Windows Security Update 2026-01-26T13:38:38+00:00 2026-01-26T21:12:50+00:00
rhsa-2026:0927 Red Hat Security Advisory: java-17-openjdk security update 2026-01-22T09:24:37+00:00 2026-01-26T21:12:49+00:00
rhsa-2026:0901 Red Hat Security Advisory: OpenJDK 25.0.2 Security Update for Portable Linux Builds 2026-01-26T13:42:41+00:00 2026-01-26T21:12:49+00:00
rhsa-2026:0900 Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Windows Builds 2026-01-26T13:41:51+00:00 2026-01-26T21:12:49+00:00
rhsa-2026:0848 Red Hat Security Advisory: OpenJDK 11.0.30 ELS Security Update for Portable Linux Builds 2026-01-21T13:39:28+00:00 2026-01-26T21:12:48+00:00
rhsa-2026:0899 Red Hat Security Advisory: OpenJDK 21.0.10 Security Update for Portable Linux Builds 2026-01-26T13:41:39+00:00 2026-01-26T21:12:47+00:00
rhsa-2026:0898 Red Hat Security Advisory: OpenJDK 17.0.18 Security Update for Windows Builds 2026-01-26T13:39:49+00:00 2026-01-26T21:12:47+00:00
rhsa-2026:0897 Red Hat Security Advisory: OpenJDK 17.0.18 Security Update for Portable Linux Builds 2026-01-26T13:39:39+00:00 2026-01-26T21:12:46+00:00
rhsa-2026:0895 Red Hat Security Advisory: OpenJDK 8u482 Security Update for Portable Linux Builds 2026-01-26T13:38:53+00:00 2026-01-26T21:12:45+00:00
rhsa-2026:0847 Red Hat Security Advisory: java-11-openjdk ELS security update 2026-01-21T14:09:25+00:00 2026-01-26T21:12:43+00:00
rhsa-2026:0323 Red Hat Security Advisory: libpng security update 2026-01-08T11:26:24+00:00 2026-01-26T21:12:43+00:00
rhsa-2026:0322 Red Hat Security Advisory: libpng security update 2026-01-08T12:09:44+00:00 2026-01-26T21:12:43+00:00
rhsa-2026:0321 Red Hat Security Advisory: libpng security update 2026-01-08T11:29:49+00:00 2026-01-26T21:12:42+00:00
rhsa-2026:0313 Red Hat Security Advisory: libpng security update 2026-01-08T11:38:59+00:00 2026-01-26T21:12:41+00:00
rhsa-2026:0251 Red Hat Security Advisory: libpng security update 2026-01-07T16:09:27+00:00 2026-01-26T21:12:41+00:00
rhsa-2026:0241 Red Hat Security Advisory: libpng security update 2026-01-07T14:21:46+00:00 2026-01-26T21:12:40+00:00
rhsa-2026:0238 Red Hat Security Advisory: libpng security update 2026-01-07T13:43:11+00:00 2026-01-26T21:12:39+00:00
rhsa-2026:0237 Red Hat Security Advisory: libpng security update 2026-01-07T13:29:16+00:00 2026-01-26T21:12:38+00:00
rhsa-2026:0216 Red Hat Security Advisory: libpng security update 2026-01-07T11:23:35+00:00 2026-01-26T21:12:37+00:00
rhsa-2026:0234 Red Hat Security Advisory: libpng security update 2026-01-07T13:03:31+00:00 2026-01-26T21:12:36+00:00
rhsa-2026:0212 Red Hat Security Advisory: libpng security update 2026-01-07T09:24:35+00:00 2026-01-26T21:12:33+00:00
rhsa-2026:0211 Red Hat Security Advisory: libpng security update 2026-01-07T12:57:50+00:00 2026-01-26T21:12:32+00:00
ID Description Published Updated
icsa-25-016-01 Siemens Mendix LDAP 2025-01-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-347-09 Siemens Teamcenter Visualization  2024-12-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-347-08 Siemens COMOS  2024-12-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-347-04 Siemens Parasolid 2024-12-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-347-03 Siemens RUGGEDCOM ROX II  2024-12-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-347-01 Siemens CPCI85 Central Processing/Communication  2024-12-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-338-05 Fuji Electric Monitouch V-SFT (Update A) 2024-12-03T07:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-11 Siemens SIMATIC CP 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-10 Siemens TeleControl Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-07 Siemens Engineering Platforms 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-06 Siemens SCALANCE M-800 Family 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-03 Siemens OZW672 and OZW772 Web Server 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-02 Siemens SIPORT 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-319-01 Siemens RUGGEDCOM CROSSBOW 2024-11-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-303-01 Siemens InterMesh Subscriber Devices 2024-10-23T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-289-01 Siemens Siveillance Video Camera 2024-10-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-13 Siemens Tecnomatix Plant Simulation 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-08 Siemens HiMed Cockpit 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-07 Siemens JT2Go 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-06 Siemens SINEC Security Monitor 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-05 Siemens Questa and ModelSim 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-03 Siemens Teamcenter Visualization and JT2Go 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-284-02 Siemens Simcenter Nastran 2024-10-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-13 Siemens SCALANCE W700 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-12 Siemens Tecnomatix Plant Simulation 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-09 Siemens SIMATIC, SIPLUS, and TIM 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-08 Siemens Industrial Products 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-07 Siemens SIMATIC RFID Readers 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D 2024-09-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-24-193-07 Siemens SIMATIC and SIMIT 2024-07-09T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
ID Description Published Updated
cisco-sa-fw3100-secure-boot-5m8muh26 Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fw3100-secure-boot-5M8mUh26 Cisco Secure Firewall 3100 Series Secure Boot Bypass Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftdsnort3sip-dos-a4chearc Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftdsnort3sip-dos-A4cHeArC Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-tls-bb-rcgtmy2 Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-tls-bb-rCgtmY2 Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-mgmt-privesc-7gqr2th Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-mgmt-privesc-7GqR2th Cisco Firepower Threat Defense Software Privilege Escalation Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-gre-dos-hmedhqpm Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-gre-dos-hmedHQPM Cisco Firepower Threat Defense Software Generic Routing Encapsulation Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-fxos-cmd-inj-q9blnsrk Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-ftd-fxos-cmd-inj-Q9bLNsrK Cisco Firepower Threat Defense Software and Cisco FXOS Software Command Injection Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmcsfr-snmp-access-6gqgtj4s Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmcsfr-snmp-access-6gqgtJ4S Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-xxe-mzpc4byd Cisco Firepower Management Center Software XML External Entity Injection Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-xxe-MzPC4bYd Cisco Firepower Management Center Software XML External Entity Injection Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-xss-latzyzxs Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-xss-LATZYzxs Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-info-disc-ughnrrhp Cisco Firepower Management Center Software Information Disclosure Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-info-disc-UghNRRhP Cisco Firepower Management Center Software Information Disclosure Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-dos-oweunwjn Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-dos-OwEunWJN Cisco Firepower Management Center and Firepower Threat Defense Software SSH Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-cmd-inj-z3b5my35 Cisco Firepower Management Center Software Command Injection Vulnerabilities 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-fmc-cmd-inj-Z3B5MY35 Cisco Firepower Management Center Software Command Injection Vulnerabilities 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asaftd-snmp-dos-qsqbnm6x Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asaftd-snmp-dos-qsqBNM6x Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asa-ftd-vp-authz-n2gckjn6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asa-ftd-vp-authz-N2GckjN6 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asa-ftd-dap-dos-ghyzbxdu Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
cisco-sa-asa-ftd-dap-dos-GhYZBxDU Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Dynamic Access Policies Denial of Service Vulnerability 2022-11-09T16:00:00+00:00 2022-11-09T16:00:00+00:00
ID Description Published Updated
msrc_cve-2025-40085 ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card 2025-10-02T00:00:00.000Z 2025-12-07T01:41:15.000Z
msrc_cve-2025-40215 xfrm: delete x->tunnel as we delete x 2025-12-02T00:00:00.000Z 2025-12-07T01:41:14.000Z
msrc_cve-2025-38022 RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem 2025-06-02T00:00:00.000Z 2025-12-07T01:41:11.000Z
msrc_cve-2024-46730 drm/amd/display: Ensure array index tg_inst won't be -1 2024-09-01T07:00:00.000Z 2025-12-07T01:41:08.000Z
msrc_cve-2025-40083 net/sched: sch_qfq: Fix null-deref in agg_dequeue 2025-10-02T00:00:00.000Z 2025-12-07T01:41:04.000Z
msrc_cve-2025-40084 ksmbd: transport_ipc: validate payload size before reading handle 2025-10-02T00:00:00.000Z 2025-12-07T01:40:52.000Z
msrc_cve-2025-21870 ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers 2025-03-02T00:00:00.000Z 2025-12-07T01:40:50.000Z
msrc_cve-2025-21888 RDMA/mlx5: Fix a WARN during dereg_mr for DM type 2025-03-02T00:00:00.000Z 2025-12-07T01:40:40.000Z
msrc_cve-2024-1151 Kernel: stack overflow problem in open vswitch kernel module leading to dos 2024-02-02T08:00:00.000Z 2025-12-07T01:39:50.000Z
msrc_cve-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise 2025-10-02T00:00:00.000Z 2025-12-07T01:39:48.000Z
msrc_cve-2024-58089 btrfs: fix double accounting race when btrfs_run_delalloc_range() failed 2025-03-02T00:00:00.000Z 2025-12-07T01:39:39.000Z
msrc_cve-2025-40042 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference 2025-10-02T00:00:00.000Z 2025-12-07T01:39:37.000Z
msrc_cve-2025-40019 crypto: essiv - Check ssize for decryption and in-place encryption 2025-10-02T00:00:00.000Z 2025-12-07T01:39:24.000Z
msrc_cve-2025-12970 CVE-2025-12970 2025-11-02T00:00:00.000Z 2025-12-07T01:39:15.000Z
msrc_cve-2025-11411 Possible domain hijacking via promiscuous records in the authority section 2025-10-02T00:00:00.000Z 2025-12-07T01:39:13.000Z
msrc_cve-2024-38608 net/mlx5e: Fix netif state handling 2024-06-02T07:00:00.000Z 2025-12-07T01:38:53.000Z
msrc_cve-2025-40001 scsi: mvsas: Fix use-after-free bugs in mvs_work_queue 2025-10-02T00:00:00.000Z 2025-12-07T01:38:50.000Z
msrc_cve-2025-38656 wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() 2025-08-02T00:00:00.000Z 2025-12-07T01:38:41.000Z
msrc_cve-2025-13227 Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2025-11-02T00:00:00.000Z 2025-12-07T01:38:31.000Z
msrc_cve-2025-11731 Libxslt: type confusion in exsltfuncresultcompfunction of libxslt 2025-10-02T00:00:00.000Z 2025-12-07T01:38:20.000Z
msrc_cve-2025-13193 Libvirt: information disclosure via world-readable vm snapshots 2025-11-02T00:00:00.000Z 2025-12-07T01:38:09.000Z
msrc_cve-2025-11230 Denial of service vulnerability in HAProxy mjson library 2025-11-02T00:00:00.000Z 2025-12-07T01:37:57.000Z
msrc_cve-2025-13226 Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2025-11-02T00:00:00.000Z 2025-12-07T01:37:44.000Z
msrc_cve-2025-55552 pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together. 2025-09-02T00:00:00.000Z 2025-12-07T01:37:33.000Z
msrc_cve-2025-13230 Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2025-11-02T00:00:00.000Z 2025-12-07T01:37:30.000Z
msrc_cve-2025-10158 Rsync: Out of bounds array access via negative index 2025-11-02T00:00:00.000Z 2025-12-07T01:36:46.000Z
msrc_cve-2025-21885 RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers 2025-03-02T00:00:00.000Z 2025-12-07T01:36:42.000Z
msrc_cve-2025-55560 An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor. 2025-09-02T00:00:00.000Z 2025-12-07T01:36:29.000Z
msrc_cve-2025-21892 RDMA/mlx5: Fix the recovery flow of the UMR QP 2025-03-02T00:00:00.000Z 2025-12-07T01:36:21.000Z
msrc_cve-2018-7159 The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value of `12`. The HTTP specification does not allow for spaces in the `Content-Length` value and the Node.js HTTP parser has been brought into line on this particular difference. The security risk of this flaw to Node.js users is considered to be VERY LOW as it is difficult, and may be impossible, to craft an attack that makes use of this flaw in a way that could not already be achieved by supplying an incorrect value for `Content-Length`. Vulnerabilities may exist in user-code that make incorrect assumptions about the potential accuracy of this value compared to the actual length of the data supplied. Node.js users crafting lower-level HTTP utilities are advised to re-check the length of any input supplied after parsing is complete. 2018-05-02T00:00:00.000Z 2025-12-07T01:36:21.000Z
ID Description Updated
var-200611-0472 Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) b… 2024-07-23T20:02:30.631000Z
var-200106-0092 Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ serv… 2024-07-23T20:02:16.186000Z
var-201904-0753 A memory corruption issue was addressed with improved validation. This issue affected ver… 2024-07-23T20:02:15.501000Z
var-200810-0004 The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1,… 2024-07-23T20:02:15.093000Z
var-201710-1400 An issue was discovered in certain Apple products. iOS before 11 is affected. Safari befo… 2024-07-23T20:02:10.704000Z
var-201212-0268 libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash… 2024-07-23T20:02:10.622000Z
var-201609-0347 The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider… 2024-07-23T20:02:01.581000Z
var-201909-0695 A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kern… 2024-07-23T20:01:54.800000Z
var-201904-0347 In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize… 2024-07-23T20:01:54.618000Z
var-201602-0004 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… 2024-07-23T20:01:54.898000Z
var-201904-1419 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T20:01:22.289000Z
var-201511-0126 Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpn… 2024-07-23T20:00:43.175000Z
var-200809-0193 Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine… 2024-07-23T20:00:43.280000Z
var-201910-1509 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_pri… 2024-07-23T20:00:41.769000Z
var-202102-1093 An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The functio… 2024-07-23T20:00:40.992000Z
var-200505-0353 Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) ch… 2024-07-23T20:00:39.630000Z
var-201904-0755 A use after free issue was addressed with improved memory management. This issue affected… 2024-07-23T20:00:37.603000Z
var-200609-0932 The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Appl… 2024-07-23T20:00:36.459000Z
var-201207-0370 Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows… 2024-07-23T19:59:57.543000Z
var-201908-0263 Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a de… 2024-07-23T19:59:26.276000Z
var-201604-0129 Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 … 2024-07-23T19:59:26.192000Z
var-201008-0170 Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before… 2024-07-23T19:59:06.050000Z
var-202202-0114 xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-sepa… 2024-07-23T19:59:05.083000Z
var-200609-0803 Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user… 2024-07-23T19:59:04.240000Z
var-202201-0437 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. vim Exists in an ou… 2024-07-23T19:59:01.890000Z
var-202201-0496 An unprivileged write to the file handler flaw in the Linux kernel's control groups and n… 2024-07-23T19:59:00.365000Z
var-201912-0586 This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Moj… 2024-07-23T19:59:00.807000Z
var-200703-0019 Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted at… 2024-07-23T19:59:00.989000Z
var-201912-0537 A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, ma… 2024-07-23T19:58:59.790000Z
var-202006-0946 In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a m… 2024-07-23T19:58:53.162000Z
ID Description Published Updated
jvndb-2019-000071 STAMP Workbench installer may insecurely load Dynamic Link Libraries 2019-11-27T10:31+09:00 2019-11-27T10:31+09:00
jvndb-2019-000070 WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery 2019-11-26T18:16+09:00 2019-11-26T18:16+09:00
jvndb-2019-000069 Movable Type vulnerable to open redirect 2019-11-13T13:59+09:00 2019-11-13T13:59+09:00
jvndb-2019-011486 Arbitrary File Deletion Vulnerability in Hitachi Command Suite 2019-11-11T14:10+09:00 2019-11-11T14:10+09:00
jvndb-2019-011487 DoS Vulnerability in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor 2019-11-11T14:09+09:00 2019-11-11T14:09+09:00
jvndb-2019-000068 Rakuma App vulnerable to authentication information disclosure 2019-11-07T14:50+09:00 2019-11-07T14:50+09:00
jvndb-2019-000067 Library Information Management System LIMEDIO vulnerable to open redirect 2019-10-28T15:37+09:00 2019-10-28T15:37+09:00
jvndb-2019-000066 PowerCMS vulnerable to open redirect 2019-10-23T16:00+09:00 2019-10-23T16:00+09:00
jvndb-2019-000059 apng-drawable vulnerable to integer overflow 2019-09-12T13:55+09:00 2019-10-18T15:23+09:00
jvndb-2019-000060 Multiple integer overflow vulnerabilities in LINE(Android) 2019-09-19T17:59+09:00 2019-10-18T15:17+09:00
jvndb-2019-010375 Multiple Vulnerabilities in Hitachi Global Link Manager 2019-10-18T14:21+09:00 2019-10-18T14:21+09:00
jvndb-2019-010374 Vulnerability in Cosminexus HTTP Server and Hitachi Web Server 2019-10-18T14:18+09:00 2019-10-18T14:18+09:00
jvndb-2019-000064 Multiple vulnerabilities in WordPress Plugin "wpDataTables Lite" 2019-10-11T15:08+09:00 2019-10-16T12:40+09:00
jvndb-2019-000065 NetCommons3 vulnerable to cross-site scripting 2019-10-15T12:39+09:00 2019-10-15T12:39+09:00
jvndb-2019-000053 Smart TV Box fails to restrict access permissions 2019-08-23T15:57+09:00 2019-10-08T17:35+09:00
jvndb-2019-007404 WonderCMS vulnerable to directory traversal 2019-08-09T12:23+09:00 2019-10-08T17:23+09:00
jvndb-2019-000043 Multiple vulnerabilities in Hikari Denwa router/Home GateWay 2019-06-27T15:36+09:00 2019-10-08T17:22+09:00
jvndb-2019-000047 Multiple vulnerabilities in Cybozu Garoon 2019-07-16T16:08+09:00 2019-10-08T17:19+09:00
jvndb-2019-000054 Cybozu Garoon vulnerable to SQL injection 2019-08-26T13:48+09:00 2019-10-08T16:48+09:00
jvndb-2019-000048 WordPress Plugin "WordPress Ultra Simple Paypal Shopping Cart" vulnerable to cross-site request forgery 2019-07-16T16:16+09:00 2019-10-08T16:38+09:00
jvndb-2019-000049 WordPress Plugin "Category Specific RSS feed Subscription" vulnerable to cross-site request forgery 2019-07-18T13:56+09:00 2019-10-08T16:28+09:00
jvndb-2019-000062 Multiple OS command injection vulnerabilities in DBA-1510P 2019-10-07T15:17+09:00 2019-10-07T15:17+09:00
jvndb-2019-000063 Multiple vulnerabilities in EC-CUBE module "REMISE Payment module (2.11, 2.12 and 2.13)" 2019-10-07T15:09+09:00 2019-10-07T15:09+09:00
jvndb-2019-000050 Central Dogma vulnerable to cross-site scripting 2019-07-31T15:29+09:00 2019-10-04T16:37+09:00
jvndb-2019-000036 WordPress Plugin "Contest Gallery" vulnerable to cross-site request forgery 2019-06-12T14:21+09:00 2019-10-04T16:19+09:00
jvndb-2019-000038 WordPress Plugin "Personalized WooCommerce Cart Page" vulnerable to cross-site request forgery 2019-06-19T14:13+09:00 2019-10-04T16:13+09:00
jvndb-2019-000039 WordPress Plugin "Related YouTube Videos" vulnerable to cross-site request forgery 2019-06-17T14:55+09:00 2019-10-04T16:02+09:00
jvndb-2019-000029 Android App "Tootdon for Mastodon" fails to verify SSL server certificates 2019-05-24T15:13+09:00 2019-10-04T15:50+09:00
jvndb-2019-000044 The management console of iDoors Reader vulnerable to authentication bypass 2019-07-01T14:31+09:00 2019-10-04T15:45+09:00
jvndb-2019-000032 Joruri CMS 2017 vulnerable to cross-site scripting 2019-06-07T15:09+09:00 2019-10-02T17:53+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:03195-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP5) 2025-09-12T11:33:46Z 2025-09-12T11:33:46Z
suse-su-2025:03194-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5) 2025-09-12T10:33:51Z 2025-09-12T10:33:51Z
suse-su-2025:03193-1 Security update for perl-Cpanel-JSON-XS 2025-09-12T10:20:19Z 2025-09-12T10:20:19Z
suse-su-2025:20746-1 Security update for google-osconfig-agent 2025-09-12T09:02:40Z 2025-09-12T09:02:40Z
suse-su-2025:20716-1 Security update for sevctl 2025-09-12T08:47:46Z 2025-09-12T08:47:46Z
suse-su-2025:20715-1 Security update for ucode-intel 2025-09-12T08:42:10Z 2025-09-12T08:42:10Z
suse-su-2025:03191-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) 2025-09-12T08:34:21Z 2025-09-12T08:34:21Z
suse-su-2025:03190-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) 2025-09-12T08:09:50Z 2025-09-12T08:09:50Z
suse-su-2025:03188-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5) 2025-09-12T06:33:49Z 2025-09-12T06:33:49Z
suse-su-2025:03186-1 Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5) 2025-09-12T02:04:17Z 2025-09-12T02:04:17Z
suse-su-2025:03185-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5) 2025-09-12T01:33:40Z 2025-09-12T01:33:40Z
suse-su-2025:03184-1 Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) 2025-09-11T23:33:49Z 2025-09-11T23:33:49Z
suse-su-2025:03183-1 Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4) 2025-09-11T22:04:28Z 2025-09-11T22:04:28Z
suse-su-2025:03182-1 Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4) 2025-09-11T21:04:06Z 2025-09-11T21:04:06Z
suse-su-2025:03181-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) 2025-09-11T20:11:15Z 2025-09-11T20:11:15Z
suse-su-2025:03180-1 Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) 2025-09-11T18:33:47Z 2025-09-11T18:33:47Z
suse-su-2025:03179-1 Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4) 2025-09-11T17:33:43Z 2025-09-11T17:33:43Z
suse-su-2025:03178-1 Security update for cups 2025-09-11T16:06:01Z 2025-09-11T16:06:01Z
suse-su-2025:20782-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 2025-09-11T15:47:54Z 2025-09-11T15:47:54Z
suse-su-2025:20714-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 2025-09-11T15:47:54Z 2025-09-11T15:47:54Z
suse-su-2025:20781-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 2025-09-11T15:47:02Z 2025-09-11T15:47:02Z
suse-su-2025:20713-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 2025-09-11T15:47:02Z 2025-09-11T15:47:02Z
suse-su-2025:20767-1 Security update for kernel-livepatch-MICRO-6-0_Update_5 2025-09-11T15:46:44Z 2025-09-11T15:46:44Z
suse-su-2025:20766-1 Security update for kernel-livepatch-MICRO-6-0_Update_2 2025-09-11T15:46:44Z 2025-09-11T15:46:44Z
suse-su-2025:20712-1 Security update for kernel-livepatch-MICRO-6-0_Update_5 2025-09-11T15:46:44Z 2025-09-11T15:46:44Z
suse-su-2025:20711-1 Security update for kernel-livepatch-MICRO-6-0_Update_2 2025-09-11T15:46:44Z 2025-09-11T15:46:44Z
suse-su-2025:20780-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 2025-09-11T15:46:24Z 2025-09-11T15:46:24Z
suse-su-2025:20710-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 2025-09-11T15:46:24Z 2025-09-11T15:46:24Z
suse-su-2025:20779-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 2025-09-11T15:46:03Z 2025-09-11T15:46:03Z
suse-su-2025:20709-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 2025-09-11T15:46:03Z 2025-09-11T15:46:03Z
ID Description Published Updated
opensuse-su-2025:14869-1 google-guest-agent-20250116.00-3.1 on GA media 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
opensuse-su-2025:14868-1 fake-gcs-server-1.52.2-1.1 on GA media 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
opensuse-su-2025:14867-1 amazon-ssm-agent-3.3.1957.0-2.1 on GA media 2025-03-11T00:00:00Z 2025-03-11T00:00:00Z
opensuse-su-2025:14866-1 libtinyxml2-10-10.1.0-1.1 on GA media 2025-03-10T00:00:00Z 2025-03-10T00:00:00Z
opensuse-su-2025:14865-1 grafana-11.5.2-1.1 on GA media 2025-03-10T00:00:00Z 2025-03-10T00:00:00Z
opensuse-su-2025:14864-1 gerbera-2.5.0-1.1 on GA media 2025-03-10T00:00:00Z 2025-03-10T00:00:00Z
opensuse-su-2025:0084-1 Security update for chromium 2025-03-07T10:03:34Z 2025-03-07T10:03:34Z
opensuse-su-2025:14863-1 teleport-17.3.3-1.1 on GA media 2025-03-07T00:00:00Z 2025-03-07T00:00:00Z
opensuse-su-2025:14862-1 less-668-2.1 on GA media 2025-03-07T00:00:00Z 2025-03-07T00:00:00Z
opensuse-su-2025:14861-1 MozillaFirefox-136.0-1.1 on GA media 2025-03-07T00:00:00Z 2025-03-07T00:00:00Z
opensuse-su-2025:14860-1 xen-4.20.0_08-4.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14859-1 ruby3.4-rubygem-rack-2.2-2.2.12-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14858-1 python311-GitPython-3.1.44-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14857-1 grype-0.88.0-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14856-1 go1.24-1.24.1-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14855-1 go1.23-1.23.7-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14854-1 chromedriver-134.0.6998.35-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14853-1 MozillaThunderbird-128.8.0-1.1 on GA media 2025-03-06T00:00:00Z 2025-03-06T00:00:00Z
opensuse-su-2025:14852-1 firefox-esr-128.8.0-1.1 on GA media 2025-03-04T00:00:00Z 2025-03-04T00:00:00Z
opensuse-su-2025:0081-1 Security update for phpMyAdmin 2025-03-03T09:28:26Z 2025-03-03T09:28:26Z
opensuse-su-2025:0080-1 Security update for trivy 2025-03-03T09:28:23Z 2025-03-03T09:28:23Z
opensuse-su-2025:14851-1 glibc-2.41-1.1 on GA media 2025-03-02T00:00:00Z 2025-03-02T00:00:00Z
opensuse-su-2025:14850-1 ffmpeg-7-7.1-4.1 on GA media 2025-03-02T00:00:00Z 2025-03-02T00:00:00Z
opensuse-su-2025:14849-1 ffmpeg-4-4.4.5-5.1 on GA media 2025-03-02T00:00:00Z 2025-03-02T00:00:00Z
opensuse-su-2025:14848-1 nodejs-electron-33.4.2-1.1 on GA media 2025-03-01T00:00:00Z 2025-03-01T00:00:00Z
opensuse-su-2025:14847-1 python311-spotipy-2.25.1-1.1 on GA media 2025-02-28T00:00:00Z 2025-02-28T00:00:00Z
opensuse-su-2025:14846-1 phpMyAdmin-5.2.2-2.1 on GA media 2025-02-28T00:00:00Z 2025-02-28T00:00:00Z
opensuse-su-2025:0077-1 Security update for chromium 2025-02-27T10:18:19Z 2025-02-27T10:18:19Z
opensuse-su-2025:14845-1 python311-jupyter-server-2.14.2-3.1 on GA media 2025-02-27T00:00:00Z 2025-02-27T00:00:00Z
opensuse-su-2025:14844-1 bsdtar-3.7.7-2.1 on GA media 2025-02-27T00:00:00Z 2025-02-27T00:00:00Z
ID Description Published Updated
cnvd-2025-29142 Vehicle Management print.php文件SQL注入漏洞 2025-08-10 2025-11-21
cnvd-2025-29141 Simple Online Hotel Reservation System index.php文件SQL注入漏洞 2025-06-27 2025-11-21
cnvd-2025-29140 Simple Online Hotel Reservation System edit_room.php文件SQL注入漏洞 2025-06-27 2025-11-21
cnvd-2025-29139 Simple Online Hotel Reservation System edit_query_account.php文件SQL注入漏洞 2025-06-27 2025-11-21
cnvd-2025-29138 Simple Online Hotel Reservation System add_query_reserve.php文件SQL注入漏洞 2025-11-18 2025-11-21
cnvd-2025-29137 Simple Online Hotel Reservation System edit_account.php文件SQL注入漏洞 2025-11-18 2025-11-21
cnvd-2025-29136 WordPress Like-it plugin跨站请求伪造漏洞 2025-11-20 2025-11-21
cnvd-2025-29135 WordPress Gutenify plugin跨站脚本漏洞 2025-11-20 2025-11-21
cnvd-2025-29134 WordPress everviz plugin跨站脚本漏洞 2025-11-20 2025-11-21
cnvd-2025-29133 WordPress Download Panel plugin未经授权的设置修改漏洞 2025-11-20 2025-11-21
cnvd-2025-29132 WordPress CSV to SortTable plugin跨站脚本漏洞 2025-11-20 2025-11-21
cnvd-2025-29131 WordPress Coil Web Monetization plugin跨站请求伪造漏洞 2025-11-20 2025-11-21
cnvd-2025-29130 WordPress Category and Product Woocommerce Tabs plugin文件包含漏洞 2025-11-20 2025-11-21
cnvd-2025-29129 WordPress ArtiBot Free Chat Bot for WebSites plugin跨站脚本漏洞 2025-11-20 2025-11-21
cnvd-2025-29125 Responsive Hotel Site room.php文件SQL注入漏洞 2024-12-04 2025-11-21
cnvd-2025-29124 Responsive Hotel Site newsletter.php文件SQL注入漏洞 2024-12-30 2025-11-21
cnvd-2025-29123 Responsive Hotel Site print.php页面SQL注入漏洞 2025-01-10 2025-11-21
cnvd-2025-29122 Responsive Hotel Site roomdel.php文件SQL注入漏洞 2025-11-12 2025-11-21
cnvd-2025-29121 Responsive Hotel Site roombook.php文件SQL注入漏洞 2025-11-12 2025-11-21
cnvd-2025-29120 Responsive Hotel Site reservation.php文件SQL注入漏洞 2025-11-12 2025-11-21
cnvd-2025-29119 Responsive Hotel Site newsletterdel.php文件SQL注入漏洞 2025-11-12 2025-11-21
cnvd-2025-29118 Responsive Hotel Site usersettingdel.php文件SQL注入漏洞 2025-11-20 2025-11-21
cnvd-2025-29117 Responsive Hotel Site usersetting.php文件SQL注入漏洞 2025-11-20 2025-11-21
cnvd-2025-29095 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4跨站请求伪造漏洞(CNVD-2025-29095) 2025-10-31 2025-11-21
cnvd-2025-29094 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29094) 2025-10-31 2025-11-21
cnvd-2025-29093 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29093) 2025-10-31 2025-11-21
cnvd-2025-29092 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29092) 2025-10-31 2025-11-21
cnvd-2025-29091 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29091) 2025-10-31 2025-11-21
cnvd-2025-28728 WordPress插件Authors List信息泄露漏洞 2025-11-14 2025-11-21
cnvd-2025-28727 Netgear D6400远程命令执行漏洞 2025-07-23 2025-11-21
ID Description Published Updated
CERTFR-2025-AVI-0667 Multiples vulnérabilités dans Juniper Secure Analytics 2025-08-08T00:00:00.000000 2025-08-08T00:00:00.000000
CERTFR-2025-AVI-0666 Multiples vulnérabilités dans Microsoft Azure 2025-08-08T00:00:00.000000 2025-08-08T00:00:00.000000
CERTFR-2025-AVI-0665 Multiples vulnérabilités dans Microsoft Office 2025-08-08T00:00:00.000000 2025-08-08T00:00:00.000000
CERTFR-2025-AVI-0664 Multiples vulnérabilités dans Microsoft Edge 2025-08-08T00:00:00.000000 2025-08-08T00:00:00.000000
CERTFR-2025-AVI-0663 Multiples vulnérabilités dans GnuTLS 2025-08-08T00:00:00.000000 2025-08-08T00:00:00.000000
certfr-2025-avi-0662 Multiples vulnérabilités dans les produits Centreon 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-avi-0661 Multiples vulnérabilités dans les produits Splunk 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-avi-0660 Vulnérabilité dans Tenable Identity Exposure 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-avi-0659 Vulnérabilité dans Microsoft Exchange Server 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
CERTFR-2025-AVI-0662 Multiples vulnérabilités dans les produits Centreon 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
CERTFR-2025-AVI-0661 Multiples vulnérabilités dans les produits Splunk 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
CERTFR-2025-AVI-0660 Vulnérabilité dans Tenable Identity Exposure 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
CERTFR-2025-AVI-0659 Vulnérabilité dans Microsoft Exchange Server 2025-08-07T00:00:00.000000 2025-08-07T00:00:00.000000
certfr-2025-avi-0658 Multiples vulnérabilités dans Trend Micro Apex One 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
certfr-2025-avi-0657 Multiples vulnérabilités dans Google Chrome 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
certfr-2025-avi-0656 Vulnérabilité dans Google Pixel 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
CERTFR-2025-AVI-0658 Multiples vulnérabilités dans Trend Micro Apex One 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
CERTFR-2025-AVI-0657 Multiples vulnérabilités dans Google Chrome 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
CERTFR-2025-AVI-0656 Vulnérabilité dans Google Pixel 2025-08-06T00:00:00.000000 2025-08-06T00:00:00.000000
certfr-2025-avi-0655 Multiples vulnérabilités dans les produits Liferay 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
certfr-2025-avi-0654 Multiples vulnérabilités dans les produits Netgate 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
certfr-2025-avi-0653 Multiples vulnérabilités dans Google Android 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
CERTFR-2025-AVI-0655 Multiples vulnérabilités dans les produits Liferay 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
CERTFR-2025-AVI-0654 Multiples vulnérabilités dans les produits Netgate 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
CERTFR-2025-AVI-0653 Multiples vulnérabilités dans Google Android 2025-08-05T00:00:00.000000 2025-08-05T00:00:00.000000
certfr-2025-avi-0652 Vulnérabilité dans le greffon "WASM Client" pour Traefik 2025-08-04T00:00:00.000000 2025-08-04T00:00:00.000000
CERTFR-2025-AVI-0652 Vulnérabilité dans le greffon "WASM Client" pour Traefik 2025-08-04T00:00:00.000000 2025-08-04T00:00:00.000000
certfr-2025-avi-0651 Multiples vulnérabilités dans les produits IBM 2025-08-01T00:00:00.000000 2025-08-01T00:00:00.000000
certfr-2025-avi-0650 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-08-01T00:00:00.000000 2025-08-01T00:00:00.000000
certfr-2025-avi-0649 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-08-01T00:00:00.000000 2025-08-01T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated