Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
CVE-2025-15349
7.5 (3.0)
Anritsu ShockLine SCPI Race Condition Remote Code Exec… Anritsu
ShockLine
2026-01-23T03:31:19.599Z 2026-01-23T19:06:22.992Z
CVE-2025-15350
7.8 (3.0)
Anritsu VectorStar CHX File Parsing Deserialization of… Anritsu
VectorStar
2026-01-23T03:31:26.025Z 2026-01-23T19:05:28.858Z
CVE-2025-15351
7.8 (3.0)
Anritsu VectorStar CHX File Parsing Deserialization of… Anritsu
VectorStar
2026-01-23T03:31:31.696Z 2026-01-23T19:04:54.797Z
CVE-2026-0710
8.4 (3.1)
Sipp/sipp: sipp: denial of service and potential arbit…

2026-01-23T03:47:44.867Z 2026-01-23T19:04:04.032Z
CVE-2021-47865
8.7 (4.0)
7.5 (3.1)
ProFTPD 1.3.7a - Remote Denial of Service ProFTPD
ProFTPD
2026-01-21T17:27:44.167Z 2026-01-23T18:57:32.039Z
CVE-2025-66720
7.5 (3.1)
Null pointer dereference in free5gc pcf 1.4.0 in … n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T18:56:02.014Z
CVE-2025-3839
8 (3.1)
Epiphany: insecure external protocol invocation in epiphany

2026-01-23T03:55:58.802Z 2026-01-23T18:54:44.742Z
CVE-2025-67124
6.8 (3.1)
A TOCTOU and symlink race in svenstaro/miniserve … n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T18:51:54.527Z
CVE-2025-67004
6.5 (3.1)
** Disputed ** An Information Disclosure vulnerab… n/a
n/a
2026-01-09T00:00:00.000Z 2026-01-23T18:51:03.315Z
CVE-2025-15522
6.4 (3.1)
Uncanny Automator – Easy Automation, Integration, Webh… uncannyowl
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
2026-01-23T04:34:58.155Z 2026-01-23T18:47:06.284Z
CVE-2025-67229
9.8 (3.1)
An improper certificate validation vulnerability … n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T18:44:31.285Z
CVE-2026-0914
6.4 (3.1)
WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contr… legalweb
WP DSGVO Tools (GDPR)
2026-01-23T12:26:59.858Z 2026-01-23T18:42:42.243Z
CVE-2025-13921
4.3 (3.1)
weDocs <= 2.1.16 - Missing Authorization to Authentica… wedevs
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot
2026-01-23T13:24:24.015Z 2026-01-23T18:40:01.230Z
CVE-2025-67231
5.9 (3.1)
A reflected cross-site scripting (XSS) vulnerabil… n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T18:32:42.066Z
CVE-2022-25369
9.8 (3.1)
An issue was discovered in Dynamicweb before 9.12… n/a
n/a
2026-01-23T00:00:00.000Z 2026-01-23T18:28:45.908Z
CVE-2025-11346
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
ILIAS Base64 Decoding unserialize deserialization n/a
ILIAS
2025-10-06T19:32:05.171Z 2026-01-23T18:24:41.363Z
CVE-2025-11345
5.1 (4.0)
5.5 (3.1)
5.5 (3.0)
ILIAS Test Import unserialize deserialization n/a
ILIAS
2025-10-06T19:02:05.514Z 2026-01-23T18:24:14.342Z
CVE-2025-11344
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
ILIAS Certificate Import code injection n/a
ILIAS
2025-10-06T18:32:05.924Z 2026-01-23T18:23:44.521Z
CVE-2025-14947
6.5 (3.1)
All-in-One Video Gallery <= 4.6.4 - Missing Authorizat… plugins360
All-in-One Video Gallery
2026-01-23T17:26:06.739Z 2026-01-23T18:20:37.750Z
CVE-2026-21867
N/A
Reason: This candidate was issued in error. N/A N/A 2026-01-23T18:19:39.118Z
CVE-2026-22241
7.3 (4.0)
Open eClass has Unrestricted File Upload that Leads to… gunet
openeclass
2026-01-08T15:07:02.350Z 2026-01-23T18:18:44.253Z
CVE-2025-67824
6.1 (3.1)
The WorklogPRO - Jira Timesheets plugin in the Ji… n/a
n/a
2026-01-20T00:00:00.000Z 2026-01-23T18:17:32.362Z
CVE-2024-22087
9.8 (3.1)
route in main.c in Pico HTTP Server in C through … n/a
n/a
2024-01-05T00:00:00.000Z 2026-01-23T18:09:08.762Z
CVE-2026-0863
8.5 (3.1)
Sandbox escape in n8n Python task runner allows for ar…

2026-01-18T15:37:07.529Z 2026-01-23T17:58:14.442Z
CVE-2025-59952
8.7 (4.0)
minio-java Client XML Tag is Vulnerable to Value Subst… minio
minio-java
2025-09-29T23:32:33.994Z 2026-01-23T17:37:00.458Z
CVE-2025-59432
6.6 (4.0)
Timing Attack Vulnerability in SCRAM Authentication ongres
scram
2025-09-22T19:22:37.117Z 2026-01-23T17:27:49.976Z
CVE-2025-54876
6.9 (4.0)
Jans CLI stores plaintext passwords in the local cli_c… JanssenProject
jans
2025-08-05T23:35:51.900Z 2026-01-23T17:22:02.177Z
CVE-2025-32963
6.9 (4.0)
Minio Operator uses Kubernetes apiserver audience for … minio
operator
2025-04-22T17:14:56.958Z 2026-01-23T17:16:16.416Z
CVE-2025-31130
6.8 (3.1)
gitoxide does not detect SHA-1 collision attacks GitoxideLabs
gitoxide
2025-04-04T14:41:56.355Z 2026-01-23T17:08:57.443Z
CVE-2025-24976
6.6 (4.0)
Distribution's token authentication allows attacker to… distribution
distribution
2025-02-11T15:48:59.700Z 2026-01-23T17:04:22.154Z
ID CVSS Description Vendor Product Published Updated
CVE-2025-8615
6.4 (3.1)
CubeWP <= 1.1.26 - Authenticated (Contributor+) Stored… cubewp1211
CubeWP Framework
2026-01-17T08:24:32.192Z 2026-01-20T19:23:09.481Z
CVE-2025-69199
8.3 (4.0)
Pterodactyl Wings's websocket endpoints have no visibl… pterodactyl
panel
2026-01-19T19:17:53.569Z 2026-01-20T20:05:22.699Z
CVE-2025-69198
6 (4.0)
Pterodactyl's improper resource locking allows raced q… pterodactyl
panel
2026-01-19T19:05:38.530Z 2026-01-20T20:05:30.610Z
CVE-2025-68616
7.5 (3.1)
WeasyPrint Vulnerable to Server-Side Request Forgery (… Kozea
WeasyPrint
2026-01-19T15:20:23.702Z 2026-01-20T15:42:46.352Z
CVE-2025-61684
7.5 (3.1)
Quicly has assertion failures h2o
quicly
2026-01-19T15:18:11.398Z 2026-01-20T15:49:59.004Z
CVE-2025-56451
6.1 (3.1)
Cross site scripting vulnerability in seeyon Zhiy… n/a
n/a
2026-01-16T00:00:00.000Z 2026-01-16T21:48:17.039Z
CVE-2025-55252
3.1 (3.1)
HCL AION is affected by a Weak Password Policy vulnerability HCL Software
AION
2026-01-19T18:13:17.724Z 2026-01-20T20:06:01.277Z
CVE-2025-55251
3.1 (3.1)
HCL AION is affected by an Unrestricted File Upload vu… HCL Software
AION
2026-01-19T17:39:26.248Z 2026-01-20T15:13:26.204Z
CVE-2025-55250
1.8 (3.1)
HCL AION is affected by a Technical Error Disclosure v… HCL Software
AION
2026-01-19T18:09:03.306Z 2026-01-20T20:06:09.761Z
CVE-2025-55249
3.5 (3.1)
HCL AION is affected by a Missing Security Response He… HCL Software
AION
2026-01-19T18:01:04.554Z 2026-01-20T20:06:21.532Z
CVE-2025-52661
2.4 (3.1)
HCL AION version 2 is affected by a JWT Token Exp… HCL Software
AION
2026-01-19T18:04:31.472Z 2026-01-20T20:06:15.964Z
CVE-2025-52660
2.7 (3.1)
HCL AION is affected by an Host Header Injection vulne… HCL Software
AION
2026-01-19T17:49:52.166Z 2026-01-20T14:51:58.265Z
CVE-2025-52659
2.8 (3.1)
HCL AION is affected by a Cacheable HTTP Response vuln… HCL Software
AION
2026-01-19T17:54:19.126Z 2026-01-20T20:06:29.031Z
CVE-2025-15539
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS sgwc s11-handler.c sgwc_s11_handle_downlink_da… n/a
Open5GS
2026-01-18T23:32:06.758Z 2026-01-20T16:37:51.696Z
CVE-2025-15538
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
Open Asset Import Library Assimp LWOMaterial.cpp FindU… Open Asset Import Library
Assimp
2026-01-18T23:02:07.734Z 2026-01-20T16:39:58.513Z
CVE-2025-15537
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
Mapnik dbfile.cpp string_value heap-based overflow n/a
Mapnik
2026-01-18T10:02:07.636Z 2026-01-20T16:53:04.476Z
CVE-2025-15536
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
BYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegment… BYVoid
OpenCC
2026-01-18T09:02:12.026Z 2026-01-20T17:07:00.359Z
CVE-2025-15535
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
nicbarker clay clay.h Clay__MeasureTextCached null poi… nicbarker
clay
2026-01-18T07:32:05.937Z 2026-01-21T18:53:13.374Z
CVE-2025-15534
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
raysan5 raylib rtext.c LoadFontData integer overflow raysan5
raylib
2026-01-18T06:32:06.449Z 2026-01-21T18:53:17.884Z
CVE-2025-15533
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow raysan5
raylib
2026-01-18T05:02:08.672Z 2026-01-21T18:53:31.970Z
CVE-2025-15532
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS Timer resource consumption n/a
Open5GS
2026-01-17T16:32:07.558Z 2026-01-20T21:28:46.669Z
CVE-2025-15531
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS context.c sgwc_bearer_add assertion n/a
Open5GS
2026-01-17T16:02:07.934Z 2026-01-21T16:31:46.811Z
CVE-2025-15530
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS s11-handler.c assertion n/a
Open5GS
2026-01-17T11:02:06.505Z 2026-01-22T15:59:49.318Z
CVE-2025-15529
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS s5c-handler.c sgwc_s5c_handle_create_session_r… n/a
Open5GS
2026-01-16T22:02:10.930Z 2026-01-20T17:36:37.504Z
CVE-2025-15528
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
Open5GS GTPv2 Bearer Response denial of service n/a
Open5GS
2026-01-16T22:02:07.756Z 2026-01-20T15:42:37.783Z
CVE-2025-15466
5.4 (3.1)
Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missin… wpchill
Image Photo Gallery Final Tiles Grid
2026-01-19T23:21:52.729Z 2026-01-20T15:11:52.423Z
CVE-2025-15403
9.8 (3.1)
RegistrationMagic <= 6.0.7.1 - Privilege Escalation vi… metagauss
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
2026-01-17T02:22:32.032Z 2026-01-20T19:24:15.898Z
CVE-2025-14632
4.4 (3.1)
Filr – Secure document library <= 1.2.11 - Authenticat… wpchill
Filr – Secure document library
2026-01-17T02:22:32.399Z 2026-01-20T19:24:10.881Z
CVE-2025-14478
7.5 (3.1)
Demo Importer Plus <= 2.0.9 - Authenticated (Author+) … kraftplugins
Demo Importer Plus
2026-01-17T07:27:37.627Z 2026-01-20T19:23:29.088Z
CVE-2025-14463
5.3 (3.1)
Payment Button for PayPal <= 1.2.3.41 - Missing Author… naa986
Payment Button for PayPal
2026-01-17T03:24:24.816Z 2026-01-20T19:23:38.739Z
ID Description Published Updated
fkie_cve-2025-15530 A vulnerability was determined in Open5GS up to 2.7.6. This affects the function sgwc_s11_handle_cr… 2026-01-17T11:15:48.907 2026-01-26T15:05:39.840
fkie_cve-2025-15529 A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwc_s5c_h… 2026-01-16T22:16:18.437 2026-01-26T15:05:39.840
fkie_cve-2025-15528 A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown… 2026-01-16T22:16:18.250 2026-01-26T15:05:39.840
fkie_cve-2025-15466 The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to unauthorized access … 2026-01-20T00:15:47.820 2026-01-26T15:05:39.840
fkie_cve-2025-15403 The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up… 2026-01-17T03:16:03.693 2026-01-26T15:05:39.840
fkie_cve-2025-14632 The Filr – Secure document library plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… 2026-01-17T03:16:03.527 2026-01-26T15:05:39.840
fkie_cve-2025-14478 The Demo Importer Plus plugin for WordPress is vulnerable to XML External Entity Injection (XXE) in… 2026-01-17T08:15:51.040 2026-01-26T15:05:39.840
fkie_cve-2025-14463 The Payment Button for PayPal plugin for WordPress is vulnerable to unauthorized order creation in … 2026-01-17T04:16:07.593 2026-01-26T15:05:39.840
fkie_cve-2025-14450 The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification o… 2026-01-17T03:16:03.367 2026-01-26T15:05:39.840
fkie_cve-2025-14078 The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all vers… 2026-01-17T09:15:51.390 2026-01-26T15:05:39.840
fkie_cve-2025-14075 The WP Hotel Booking plugin for WordPress is vulnerable to Sensitive Information Exposure in all ve… 2026-01-17T03:16:03.200 2026-01-26T15:05:39.840
fkie_cve-2025-14029 The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to… 2026-01-17T05:16:10.370 2026-01-26T15:05:39.840
fkie_cve-2025-13725 The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for WordPres… 2026-01-17T04:16:06.630 2026-01-26T15:05:39.840
fkie_cve-2025-12984 The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to SQL Injection via the… 2026-01-17T07:16:00.987 2026-01-26T15:05:39.840
fkie_cve-2025-12825 The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized acces… 2026-01-17T05:16:09.070 2026-01-26T15:05:39.840
fkie_cve-2025-12718 The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to,… 2026-01-17T03:16:03.037 2026-01-26T15:05:39.840
fkie_cve-2025-12168 The Phrase TMS Integration for WordPress plugin for WordPress is vulnerable to unauthorized modific… 2026-01-17T05:16:08.763 2026-01-26T15:05:39.840
fkie_cve-2025-12129 The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Information… 2026-01-17T08:15:50.850 2026-01-26T15:05:39.840
fkie_cve-2025-12002 The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions… 2026-01-17T03:16:02.840 2026-01-26T15:05:39.840
fkie_cve-2025-11044 An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component … 2026-01-19T16:15:53.197 2026-01-26T15:05:39.840
fkie_cve-2025-11043 An Improper Certificate Validation vulnerability in the OPC-UA client and ANSL over TLS client used… 2026-01-19T16:15:52.873 2026-01-26T15:05:39.840
fkie_cve-2025-10484 The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerabl… 2026-01-17T09:15:50.303 2026-01-26T15:05:39.840
fkie_cve-2019-25297 Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contai… 2026-01-16T21:15:49.930 2026-01-26T15:05:39.840
fkie_cve-2026-23950 node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.… 2026-01-20T01:15:57.870 2026-01-26T15:05:23.427
fkie_cve-2026-23949 jaraco.context, an open-source software package that provides some useful decorators and context ma… 2026-01-20T01:15:57.723 2026-01-26T15:05:23.427
fkie_cve-2026-23947 Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specifica… 2026-01-20T01:15:57.583 2026-01-26T15:05:23.427
fkie_cve-2026-23876 ImageMagick is free and open-source software used for editing and manipulating digital images. Prio… 2026-01-20T01:15:57.440 2026-01-26T15:05:23.427
fkie_cve-2026-23874 ImageMagick is free and open-source software used for editing and manipulating digital images. Vers… 2026-01-20T01:15:57.300 2026-01-26T15:05:23.427
fkie_cve-2026-22844 A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 … 2026-01-20T14:16:21.980 2026-01-26T15:05:23.427
fkie_cve-2026-22770 ImageMagick is free and open-source software used for editing and manipulating digital images. The … 2026-01-20T01:15:57.153 2026-01-26T15:05:23.427
ID Severity Description Published Updated
ghsa-f7j2-8vfg-mcwq
7.4 (3.1)
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unautho… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-cf6r-jpjw-rvwr
6.1 (3.1)
An attacker with access to the project file could use the exposed credentials to impersonate users… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-857q-pww2-xgv7
7.3 (3.1)
This vulnerability occurs when the system permits multiple simultaneous connections to the backend… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-5vx4-v4r5-wrxg
7.5 (3.1)
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticat… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-4xvg-4w2r-qph8
6.1 (3.1)
An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-3xjj-vfrx-ch8r
8.2 (3.1)
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps … 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-3h7x-hf52-fwj9
9.3 (3.1)
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft A… 2026-01-23T00:31:17Z 2026-01-23T00:31:17Z
ghsa-hfxh-j63h-2qhw
8.7 (4.0)
The web application does not sufficiently verify inputs that are assumed to be immutable but are ac… 2026-01-23T00:31:16Z 2026-01-23T00:31:16Z
ghsa-gfwv-5762-mwrm
9.4 (4.0)
An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automat… 2026-01-23T00:31:16Z 2026-01-23T00:31:16Z
ghsa-g494-r69f-j7vq
8.7 (4.0)
A low-privileged user can bypass account credentials without confirming the user's current authenti… 2026-01-23T00:31:16Z 2026-01-23T00:31:16Z
ghsa-fh4h-xf29-c53g
5.7 (4.0)
A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due t… 2026-01-23T00:31:16Z 2026-01-23T00:31:16Z
ghsa-f56g-chqp-22m9
6.5 (3.1)
Use after free in libpulse-binding 2024-02-03T00:28:45Z 2026-01-22T22:36:03Z
ghsa-6gvc-4jvj-pwq4
6.5 (3.1)
Duplicate Advisory: Use after free in libpulse-binding 2021-08-30T16:22:34Z 2026-01-22T22:35:56Z
ghsa-4ppp-gpcr-7qf6
HTTP Request Smuggling: Content-Length Sent Twice in Waitress 2019-12-20T23:04:35Z 2026-01-22T22:34:11Z
ghsa-j7j6-7hfx-5522
7.5 (3.1)
Duplicate Advisory: Inconsistent Interpretation of HTTP Requests in Waitress 2022-05-24T17:07:06Z 2026-01-22T22:34:03Z
ghsa-vqxh-445g-37fc
5.3 (3.1)
Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide 2026-01-22T21:33:47Z 2026-01-22T22:33:22Z
ghsa-w2gr-585j-r428
6.5 (3.1)
Metricbeat affected by multiple denial of service vulnerabilities 2026-01-13T21:31:46Z 2026-01-22T22:32:15Z
ghsa-cq3j-qj2h-6rv3
1.9 (4.0)
Container and Containerization archive extraction does not guard against escapes from extraction ba… 2026-01-22T22:30:05Z 2026-01-22T22:30:05Z
ghsa-6495-8jvh-f28x
7.8 (3.1)
File restriction bypass in socket.io-file 2020-10-02T15:39:54Z 2026-01-22T22:29:16Z
ghsa-r2gr-fhmr-66c5
7.8 (3.1)
Duplicate Advisory: "Arbitrary code execution in socket.io-file" 2021-05-10T18:38:11Z 2026-01-22T22:29:07Z
ghsa-58pv-8j8x-9vj2
8.6 (3.1)
jaraco.context Has a Path Traversal Vulnerability 2026-01-13T21:48:17Z 2026-01-22T22:25:55Z
ghsa-f29h-pxvx-f335
7.5 (3.1)
eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded… 2025-07-19T18:30:33Z 2026-01-22T21:52:56Z
ghsa-qrmc-fj45-qfc2
Prototype Pollution in extend 2019-02-07T18:03:28Z 2026-01-22T21:48:14Z
ghsa-4r4m-qw57-chr8
5.3 (3.1)
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query 2025-03-31T17:31:54Z 2026-01-22T21:47:40Z
ghsa-mrqp-q7vx-v2cx
8.8 (3.1)
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC 2025-02-13T17:16:27Z 2026-01-22T21:47:02Z
ghsa-wh7m-9x3m-593c
5.0 (3.1)
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, version… 2026-01-22T21:33:47Z 2026-01-22T21:33:47Z
ghsa-wf4j-qrxg-6hf2
3.5 (3.1)
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, version… 2026-01-22T21:33:47Z 2026-01-22T21:33:47Z
ghsa-qj62-83c4-v29p
4.3 (3.1)
Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An … 2026-01-22T21:33:47Z 2026-01-22T21:33:47Z
ghsa-73vg-mq6j-x5w2
6.6 (3.1)
A vulnerability in Palantir's Aries service allowed unauthenticated access to log viewing and manag… 2026-01-22T21:33:47Z 2026-01-22T21:33:47Z
ghsa-vc7g-cv54-7cvx
5.3 (3.1)
Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-r… 2026-01-22T18:30:41Z 2026-01-22T21:33:46Z
ID Severity Description Package Published Updated
pysec-2022-235
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles uploa… octobot 2022-07-16T17:15:00Z 2022-07-21T08:44:55.990435Z
pysec-2022-226
The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via … whoogle-search 2022-07-12T15:15:00Z 2022-07-14T05:11:54.875994Z
pysec-2022-222
The Security Team noticed that the termination condition of the for loop in the readExter… systemds 2022-06-27T18:15:00Z 2022-07-14T05:11:54.728743Z
pysec-2022-224
Synapse is an open source home server implementation for the Matrix chat network. In vers… matrix-synapse 2022-06-28T17:15:00Z 2022-07-14T05:11:53.027228Z
pysec-2022-225
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal be… ganga 2022-07-11T01:15:00Z 2022-07-14T05:11:52.325698Z
pysec-2022-223
mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal du… mat2 2022-07-08T18:15:00Z 2022-07-14T05:11:52.948988Z
pysec-2021-871
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Sing… distributed 2021-10-26T11:15:00Z 2022-07-14T05:11:51.739830Z
pysec-2022-221
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code exe… catly-translate 2022-06-24T21:15:00Z 2022-07-06T20:32:04.087337Z
pysec-2022-43168
9.8 (3.1)
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backd… sixfab-tool 2022-06-24T21:15:00Z 2022-07-06T19:30:00Z
pysec-2022-220
** Reserved ** The pyesasky for python, as distributed on PyPI, included a code-execution… pyesasky 2022-06-24T21:15:00Z 2022-07-06T18:41:16.470294Z
pysec-2022-217
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contai… cryptoasset-data-downloader 2022-06-24T21:15:00Z 2022-07-05T22:30:15.999007Z
pysec-2022-219
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code … rootinteractive 2022-06-24T21:15:00Z 2022-07-05T20:48:00Z
pysec-2022-218
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code ex… django-navbar-client 2022-06-24T21:15:00Z 2022-07-05T20:48:00Z
pysec-2022-215
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code executio… ml-scanner 2022-06-24T21:15:00Z 2022-07-05T20:33:43.190558Z
pysec-2022-214
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution … beginner 2022-06-24T21:15:00Z 2022-07-05T20:33:42.390810Z
pysec-2022-216
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution b… perdido 2022-06-24T21:15:00Z 2022-07-05T19:16:00Z
pysec-2022-213
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and… django 2022-07-04T16:15:00Z 2022-07-04T18:45:03.823587Z
pysec-2022-211
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) fo… jupyter-server 2022-06-14T21:15:00Z 2022-06-24T18:46:20.115761Z
pysec-2022-210
An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM … salt 2022-06-23T17:15:00Z 2022-06-23T18:47:26.936484Z
pysec-2022-209
Command Injection in GitHub repository nuitka/nuitka prior to 0.9. nuitka 2022-06-12T14:15:00Z 2022-06-23T11:27:14.332916Z
pysec-2021-56
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the … salt 2021-04-23T06:15:00Z 2022-06-21T15:53:31.288525Z
pysec-2021-346
An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will a… salt 2021-09-08T15:15:00Z 2022-06-21T15:53:31.228842Z
pysec-2021-318
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the so… salt 2021-09-08T15:15:00Z 2022-06-21T15:53:31.158376Z
pysec-2022-208
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions p… django-s3file 2022-06-09T04:15:00Z 2022-06-17T16:54:24.425121Z
pysec-2022-207
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are… couchbase 2022-06-10T12:15:00Z 2022-06-17T16:54:24.107616Z
pysec-2022-206
OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthent… oauthenticator 2022-06-09T13:15:00Z 2022-06-16T05:33:11.901142Z
pysec-2022-205
Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2… waitress 2022-05-31T23:15:00Z 2022-06-14T20:37:51.457649Z
pysec-2022-204
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument… cookiecutter 2022-06-08T08:15:00Z 2022-06-08T10:35:31.256727Z
pysec-2022-203
** DISPUTED ** Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below all… werkzeug 2022-05-25T01:15:00Z 2022-06-07T22:30:02.873111Z
pysec-2022-202
PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signi… pyjwt 2022-05-24T15:15:00Z 2022-06-07T16:57:16.566102Z
ID Description Updated
gsd-2024-4064 A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Thi… 2024-04-24T05:02:07.857775Z
gsd-2024-4063 A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classifi… 2024-04-24T05:02:07.881809Z
gsd-2024-4062 A vulnerability was found in Hualai Xiaofang iSC5 3.2.2_112 and classified as problematic… 2024-04-24T05:02:07.860215Z
gsd-2024-4061 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.889826Z
gsd-2024-4060 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.859677Z
gsd-2024-4059 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.864696Z
gsd-2024-4058 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.885494Z
gsd-2024-4057 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.865946Z
gsd-2024-4056 Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after … 2024-04-24T05:02:07.863098Z
gsd-2024-4055 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.869036Z
gsd-2024-4054 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.864021Z
gsd-2024-4053 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.881476Z
gsd-2024-4052 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.866890Z
gsd-2024-4051 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.885698Z
gsd-2024-4050 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.861206Z
gsd-2024-4049 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.887459Z
gsd-2024-4048 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.869478Z
gsd-2024-4047 The format of the source doesn't require a description, click on the link for more details. 2024-04-24T05:02:07.870133Z
gsd-2024-4046 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.163882Z
gsd-2024-4045 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.169036Z
gsd-2024-4044 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.164572Z
gsd-2024-4043 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.167708Z
gsd-2024-4042 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.166333Z
gsd-2024-4041 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.169230Z
gsd-2024-4040 VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms … 2024-04-23T05:02:11.165045Z
gsd-2024-4039 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.172839Z
gsd-2024-4038 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.167515Z
gsd-2024-4037 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.166853Z
gsd-2024-4036 The format of the source doesn't require a description, click on the link for more details. 2024-04-23T05:02:11.178211Z
gsd-2024-4035 The Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin for WordPress is v… 2024-04-23T05:02:11.164766Z
ID Description Published Updated
mal-2026-5 Malicious code in queryservice-client (PyPI) 2026-01-01T18:40:28Z 2026-01-01T18:40:28Z
MAL-2026-5 Malicious code in queryservice-client (PyPI) 2026-01-01T18:40:28Z 2026-01-01T18:40:28Z
mal-2025-6694 Malicious code in amdocs-auth-package (npm) 2025-08-03T04:02:38Z 2026-01-01T15:40:09Z
MAL-2025-6694 Malicious code in amdocs-auth-package (npm) 2025-08-03T04:02:38Z 2026-01-01T15:40:09Z
mal-2026-1 Malicious code in sfnt2woff-zopfli (PyPI) 2026-01-01T11:16:31Z 2026-01-01T11:16:31Z
MAL-2026-1 Malicious code in sfnt2woff-zopfli (PyPI) 2026-01-01T11:16:31Z 2026-01-01T11:16:31Z
MAL-2025-193011 Malicious code in requeses (PyPI) 2025-12-31T16:40:04Z 2026-01-18T23:09:04Z
MAL-2025-193010 Malicious code in pyrogrqm (PyPI) 2025-12-31T16:09:30Z 2026-01-18T23:09:04Z
MAL-2025-192991 Malicious code in pyrogrem (PyPI) 2025-12-31T11:49:56Z 2026-01-18T23:09:04Z
MAL-2025-192943 Malicious code in telegrem (PyPI) 2025-12-26T20:03:22Z 2026-01-18T23:09:04Z
MAL-2025-192942 Malicious code in telebot-bot (PyPI) 2025-12-26T20:04:06Z 2026-01-18T23:09:04Z
MAL-2025-192323 Malicious code in rendom (PyPI) 2025-12-05T16:58:12Z 2026-01-18T23:09:04Z
MAL-2025-191876 Malicious code in speedd-testing-bot (PyPI) 2025-10-28T19:23:53Z 2026-01-18T23:09:04Z
MAL-2025-191875 Malicious code in speed-testing-vps (PyPI) 2025-11-23T16:18:01Z 2026-01-18T23:09:04Z
MAL-2025-191874 Malicious code in speed-testing-nt (PyPI) 2025-10-31T00:13:41Z 2026-01-18T23:09:04Z
MAL-2025-193008 Malicious code in telegreph (PyPI) 2025-12-31T15:00:17Z 2026-01-18T23:09:04Z
MAL-2025-193007 Malicious code in aiogrem (PyPI) 2025-12-31T14:49:05Z 2026-01-18T23:09:04Z
mal-2025-192989 Malicious code in brolool4141412 (PyPI) 2025-12-31T11:55:52Z 2025-12-31T11:55:52Z
MAL-2025-192989 Malicious code in brolool4141412 (PyPI) 2025-12-31T11:55:52Z 2025-12-31T11:55:52Z
mal-2025-192990 Malicious code in broooxddd1414 (PyPI) 2025-12-31T11:55:20Z 2025-12-31T11:55:20Z
MAL-2025-192990 Malicious code in broooxddd1414 (PyPI) 2025-12-31T11:55:20Z 2025-12-31T11:55:20Z
mal-2025-192993 Malicious code in weorewfoi2393 (PyPI) 2025-12-31T11:52:48Z 2025-12-31T11:52:48Z
MAL-2025-192993 Malicious code in weorewfoi2393 (PyPI) 2025-12-31T11:52:48Z 2025-12-31T11:52:48Z
MAL-2025-192992 Malicious code in umap (PyPI) 2025-12-31T11:45:36Z 2026-01-15T22:09:23Z
mal-2025-991 Malicious code in sysfunc (PyPI) 2024-12-26T12:24:34Z 2025-12-31T02:45:16Z
mal-2025-990 Malicious code in syscontrol (PyPI) 2024-12-26T12:24:34Z 2025-12-31T02:45:16Z
mal-2025-989 Malicious code in swapoc (PyPI) 2024-08-23T22:55:41Z 2025-12-31T02:45:16Z
mal-2025-6897 Malicious code in swiv (PyPI) 2025-08-18T03:20:56Z 2025-12-31T02:45:16Z
mal-2025-6621 Malicious code in web3toolkit-base (PyPI) 2025-07-10T19:41:11Z 2025-12-31T02:45:16Z
mal-2025-6614 Malicious code in vramx (PyPI) 2025-07-16T19:46:51Z 2025-12-31T02:45:16Z
ID Description Published Updated
wid-sec-w-2023-3060 cURL: Mehrere Schwachstellen 2023-12-05T23:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2023-2741 OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen 2023-10-24T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2023-2570 cURL: Mehre Schwachstellen 2023-10-04T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2023-2543 GNU libc: Schwachstelle ermöglicht Privilegieneskalation 2023-10-03T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2023-2384 GNU libc: Mehrere Schwachstellen 2023-09-18T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2023-0670 OpenSSH: Mehrere Schwachstellen 2023-03-15T23:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2022-0534 OpenSSH: Schwachstelle ermöglicht Privilegieneskalation 2021-09-26T22:00:00.000+00:00 2025-06-10T22:00:00.000+00:00
wid-sec-w-2025-1272 QNAP NAS Software und Anwendungen: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1268 Trend Micro Apex One: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1267 GeoServer: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1264 SAP Software: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1263 Jenkins "Gatling" Plugin: Schwachstelle ermöglicht Cross-Site Scripting 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1262 FasterXML Jackson: Schwachstelle ermöglicht Offenlegung von Informationen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1260 Trend Micro Internet Security: Schwachstelle ermöglicht Privilegieneskalation 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1259 Trend Micro Maximum Security: Schwachstelle ermöglicht Privilegieneskalation 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1257 SolarWinds Platform: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1256 Google Cloud Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1255 Trend Micro Worry-Free Business Security: Mehrere Schwachstellen 2025-06-09T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-1162 Red Hat Enterprise Linux (zlib): Schwachstelle ermöglicht nicht spezifizierten Angriff 2025-05-29T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-0908 Keycloack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2025-04-29T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-0694 OpenVPN: Schwachstelle ermöglicht Denial of Service 2025-04-02T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-0314 AMD Prozessoren: Mehrere Schwachstellen 2025-02-11T23:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2025-0285 Red Hat Enterprise Linux (Quarkus und Netty): Mehrere Schwachstellen 2025-02-05T23:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-2202 Apache Tomcat: Schwachstelle ermöglicht Denial of Service 2024-09-23T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-2169 bluez: Schwachstelle ermöglicht Codeausführung 2024-09-17T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-1522 Apache Tomcat: Schwachstelle ermöglicht Denial of Service 2024-07-03T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-1251 Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff 2024-05-28T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-1232 Rsync: Mehrere Schwachstellen 2020-02-24T23:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-0899 Oracle Fusion Middleware: Mehrere Schwachstellen 2024-04-16T22:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
wid-sec-w-2024-0630 Apache Tomcat: Mehrere Schwachstellen ermöglichen Denial of Service 2024-03-13T23:00:00.000+00:00 2025-06-09T22:00:00.000+00:00
ID Description Published Updated
rhsa-2025:4203 Red Hat Security Advisory: OpenShift Container Platform 4.17.27 security and extras update 2025-04-30T01:25:50+00:00 2026-01-27T18:53:23+00:00
rhsa-2025:4018 Red Hat Security Advisory: OpenShift Container Platform 4.18.10 security and extras update 2025-04-22T14:51:20+00:00 2026-01-27T18:53:23+00:00
rhsa-2025:3789 Red Hat Security Advisory: OpenShift Container Platform 4.15.49 security and extras update 2025-04-16T02:18:49+00:00 2026-01-27T18:53:20+00:00
rhsa-2025:3671 Red Hat Security Advisory: python-jinja2 security update 2025-04-08T05:54:09+00:00 2026-01-27T18:53:19+00:00
rhsa-2025:3622 Red Hat Security Advisory: python-jinja2 security update 2025-04-07T02:17:30+00:00 2026-01-27T18:53:19+00:00
rhsa-2025:3595 Red Hat Security Advisory: Red Hat Developer Hub 1.4.3 release. 2025-04-03T15:16:21+00:00 2026-01-27T18:53:18+00:00
rhsa-2025:3588 Red Hat Security Advisory: python-jinja2 security update 2025-04-03T10:46:30+00:00 2026-01-27T18:53:18+00:00
rhsa-2025:3586 Red Hat Security Advisory: python-jinja2 security update 2025-04-03T10:38:50+00:00 2026-01-27T18:53:18+00:00
rhsa-2025:3585 Red Hat Security Advisory: python-jinja2 security update 2025-04-03T10:35:05+00:00 2026-01-27T18:53:17+00:00
rhsa-2025:3580 Red Hat Security Advisory: python-jinja2 security update 2025-04-03T09:49:20+00:00 2026-01-27T18:53:17+00:00
rhsa-2025:3568 Red Hat Security Advisory: OpenShift Container Platform 4.14.50 security and extras update 2025-04-09T01:19:57+00:00 2026-01-27T18:53:17+00:00
rhsa-2025:3562 Red Hat Security Advisory: python-jinja2 security update 2025-04-03T06:05:14+00:00 2026-01-27T18:53:15+00:00
rhsa-2025:3406 Red Hat Security Advisory: python-jinja2 security update 2025-03-31T14:03:55+00:00 2026-01-27T18:53:15+00:00
rhsa-2025:3388 Red Hat Security Advisory: python-jinja2 security update 2025-03-31T02:09:23+00:00 2026-01-27T18:53:15+00:00
rhsa-2025:3123 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update 2025-03-24T17:53:25+00:00 2026-01-27T18:53:15+00:00
rhsa-2025:3371 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-ansible-core) security update 2025-03-27T18:40:48+00:00 2026-01-27T18:53:14+00:00
rhsa-2025:3374 Red Hat Security Advisory: Red Hat Developer Hub 1.5.1 release. 2025-03-27T20:51:32+00:00 2026-01-27T18:53:13+00:00
rhsa-2025:3162 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update 2025-03-25T17:10:27+00:00 2026-01-27T18:53:13+00:00
rhsa-2025:3160 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update 2025-03-25T12:26:53+00:00 2026-01-27T18:53:12+00:00
rhsa-2025:3124 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update 2025-03-24T23:57:44+00:00 2026-01-27T18:53:11+00:00
rhsa-2025:3113 Red Hat Security Advisory: fence-agents security update 2025-03-24T14:13:20+00:00 2026-01-27T18:53:10+00:00
rhsa-2025:3111 Red Hat Security Advisory: fence-agents security update 2025-03-24T10:53:59+00:00 2026-01-27T18:53:09+00:00
rhsa-2025:3017 Red Hat Security Advisory: fence-agents security update 2025-03-18T19:49:55+00:00 2026-01-27T18:53:07+00:00
rhsa-2025:2753 Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.19.0 release 2025-03-13T16:40:08+00:00 2026-01-27T18:53:07+00:00
rhsa-2025:2688 Red Hat Security Advisory: fence-agents security update 2025-03-12T15:44:33+00:00 2026-01-27T18:53:06+00:00
rhsa-2025:2664 Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Container Release Update 2025-03-11T15:12:47+00:00 2026-01-27T18:53:05+00:00
rhsa-2025:2399 Red Hat Security Advisory: Satellite 6.16.3 Async Update 2025-03-05T14:29:44+00:00 2026-01-27T18:53:04+00:00
rhsa-2025:22006 Red Hat Security Advisory: kernel security update 2025-11-25T00:47:13+00:00 2026-01-27T18:52:39+00:00
rhsa-2025:21136 Red Hat Security Advisory: kernel-rt security update 2025-11-12T15:08:24+00:00 2026-01-27T18:52:33+00:00
rhsa-2025:21128 Red Hat Security Advisory: kernel-rt security update 2025-11-12T13:52:24+00:00 2026-01-27T18:52:28+00:00
ID Description Published Updated
icsa-23-103-08 Siemens Mendix Forgot Password Module 2023-04-18T19:27:35.031502Z 2025-05-06T06:00:00.000000Z
icsa-23-103-05 Siemens SCALANCE X-200IRT Devices 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-03 Siemens in OPC Foundation Local Discovery Server 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-103-02 Siemens JT Open and JT Utilities 2023-04-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-075-05 Siemens Mendix SAML Module 2023-03-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-23-047-09 Siemens SIMATIC Industrial Products 2023-02-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-20 Siemens Teamcenter Visualization and JT2Go 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-16 Siemens APOGEE and TALON 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-14 Siemens SISCO MMS-EASE Third Party Component 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-12 Siemens Parasolid 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-10 Siemens APOGEE/TALON Field Panels 2022-12-15T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-08 Siemens Polarion ALM 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-07 Siemens Simcenter STAR-CCM+ 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-04 Siemens SCALANCE Products 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-349-03 Siemens Multiple Denial of Service Vulnerabilities in Industrial Products 2022-12-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-09 Siemens Teamcenter Visualization and JT2Go 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-06 Siemens QMS Automotive 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-314-02 Siemens Web Server Login Page of Industrial Controllers 2022-11-08T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-11 Siemens SCALANCE and RUGGEDCOM Products (Update A) 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-09 Siemens SICAM P850 and P855 Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-286-08 Siemens SCALANCE and RUGGEDCOM Devices 2022-10-11T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-258-03 Siemens RUGGEDCOM ROS 2022-09-13T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-195-01 Siemens SCALANCE X Switch Devices 2022-07-12T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-167-14 Siemens OpenSSL Affected Industrial Products 2022-06-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-167-11 Siemens Xpedition Designer 2022-06-14T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-15 Siemens OpenV2G 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-14 Siemens Simcenter Femap 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-12 Siemens Industrial Products 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-11 Siemens SIMATIC CP 44x-1 RNA 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
icsa-22-132-09 Siemens JT2GO and Teamcenter Visualization 2022-05-10T00:00:00.000000Z 2025-05-06T06:00:00.000000Z
ID Description Published Updated
cisco-sa-cssm-priv-esc-SEjz69dv Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-bw-thinrcpt-xss-gsj4cecu Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-bw-thinrcpt-xss-gSj4CecU Cisco BroadWorks Hosted Thin Receptionist Cross-Site Scripting Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ata19x-multivuln-gezyvvs Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-ata19x-multivuln-GEZYVvs Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-NFVIS-ISV-BQrvEv2h Cisco Enterprise NFV Infrastructure Software Improper Signature Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-CTT-IVV-4A66Dsfj Cisco Touch 10 Devices Insufficient Identity Verification Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-CTT-DAV-HSvEHHEt Cisco Touch 10 Devices Downgrade Vulnerability 2022-10-05T16:00:00+00:00 2022-10-05T16:00:00+00:00
cisco-sa-apvlan-tdttb4fy Cisco Access Points VLAN Bypass from Native VLAN Vulnerability 2022-09-27T16:00:00+00:00 2022-10-04T13:22:46+00:00
cisco-sa-apvlan-TDTtb4FY Cisco Access Points VLAN Bypass from Native VLAN Vulnerability 2022-09-27T16:00:00+00:00 2022-10-04T13:22:46+00:00
cisco-sa-wsa-prv-esc-8pdru8t8 Cisco Secure Web Appliance Privilege Escalation Vulnerability 2022-08-17T16:00:00+00:00 2022-10-03T18:13:53+00:00
cisco-sa-wsa-prv-esc-8PdRU8t8 Cisco Secure Web Appliance Privilege Escalation Vulnerability 2022-08-17T16:00:00+00:00 2022-10-03T18:13:53+00:00
cisco-sa-sd-wan-priv-e6e8tedf Cisco SD-WAN Software Privilege Escalation Vulnerabilities 2022-09-28T16:00:00+00:00 2022-09-29T21:59:32+00:00
cisco-sa-sd-wan-priv-E6e8tEdF Cisco SD-WAN Software Privilege Escalation Vulnerabilities 2022-09-28T16:00:00+00:00 2022-09-29T21:59:32+00:00
cisco-sa-duo-macos-bypass-ukznpxe6 Cisco Duo for macOS Authentication Bypass Vulnerability 2022-09-28T16:00:00+00:00 2022-09-29T21:21:01+00:00
cisco-sa-duo-macOS-bypass-uKZNpXE6 Cisco Duo for macOS Authentication Bypass Vulnerability 2022-09-28T16:00:00+00:00 2022-09-29T21:21:01+00:00
cisco-sa-wlc-udp-dos-xdyewhnz Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-udp-dos-XDyEwhNz Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dos-mkgrrscb Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dos-mKGRrsCB Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dhcp-dos-76pcjpxk Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-wlc-dhcp-dos-76pCjPxK Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-webui-cmdinj-gje47emn Cisco IOS XE Software Web UI Command Injection Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-webui-cmdinj-Gje47EMn Cisco IOS XE Software Web UI Command Injection Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-ssh-excpt-dos-fzobqtnk Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-ssh-excpt-dos-FzOBQTnk Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdwan-avc-nddsgb8 Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdwan-avc-NddSGB8 Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdavc-za5fpxx2 Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
cisco-sa-sdavc-ZA5fpXX2 Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability 2022-09-28T16:00:00+00:00 2022-09-28T16:00:00+00:00
ID Description Published Updated
msrc_cve-2023-53247 btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand 2025-09-02T00:00:00.000Z 2025-12-05T01:02:23.000Z
msrc_cve-2023-53240 xsk: check IFF_UP earlier in Tx path 2025-09-02T00:00:00.000Z 2025-12-05T01:02:17.000Z
msrc_cve-2023-53221 bpf: Fix memleak due to fentry attach failure 2025-09-02T00:00:00.000Z 2025-12-05T01:02:12.000Z
msrc_cve-2023-53218 rxrpc: Make it so that a waiting process can be aborted 2025-09-02T00:00:00.000Z 2025-12-05T01:02:06.000Z
msrc_cve-2025-66031 node-forge ASN.1 Unbounded Recursion 2025-11-02T00:00:00.000Z 2025-12-04T14:36:01.000Z
msrc_cve-2025-66030 node-forge ASN.1 OID Integer Truncation 2025-11-02T00:00:00.000Z 2025-12-04T14:35:55.000Z
msrc_cve-2025-12816 CVE-2025-12816 2025-11-02T00:00:00.000Z 2025-12-04T14:35:48.000Z
msrc_cve-2025-62223 Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability 2025-12-04T08:00:00.000Z 2025-12-04T08:00:00.000Z
msrc_cve-2025-39829 trace/fgraph: Fix the warning caused by missing unregister notifier 2025-09-02T00:00:00.000Z 2025-12-04T01:01:45.000Z
msrc_cve-2023-53292 blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none 2025-09-02T00:00:00.000Z 2025-12-04T01:01:35.000Z
msrc_cve-2022-50266 kprobes: Fix check for probe enabled in kill_kprobe() 2025-09-02T00:00:00.000Z 2025-12-04T01:01:24.000Z
msrc_cve-2025-11494 GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds 2025-10-02T00:00:00.000Z 2025-12-03T01:39:19.000Z
msrc_cve-2025-4953 Podman: build context bind mount 2025-09-02T00:00:00.000Z 2025-12-03T01:39:03.000Z
msrc_cve-2025-38626 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode 2025-08-02T00:00:00.000Z 2025-12-03T01:38:53.000Z
msrc_cve-2025-38615 fs/ntfs3: cancle set bad inode after removing name fails 2025-08-02T00:00:00.000Z 2025-12-03T01:38:48.000Z
msrc_cve-2025-38597 drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port 2025-08-02T00:00:00.000Z 2025-12-03T01:38:43.000Z
msrc_cve-2025-38659 gfs2: No more self recovery 2025-08-02T00:00:00.000Z 2025-12-03T01:38:39.000Z
msrc_cve-2025-64506 LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images 2025-11-02T00:00:00.000Z 2025-12-03T01:38:33.000Z
msrc_cve-2025-64505 LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index 2025-11-02T00:00:00.000Z 2025-12-03T01:38:21.000Z
msrc_cve-2025-39781 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap 2025-09-02T00:00:00.000Z 2025-12-03T01:38:04.000Z
msrc_cve-2025-39753 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops 2025-09-02T00:00:00.000Z 2025-12-03T01:37:58.000Z
msrc_cve-2025-39745 rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels 2025-09-02T00:00:00.000Z 2025-12-03T01:37:53.000Z
msrc_cve-2025-39732 wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() 2025-09-02T00:00:00.000Z 2025-12-03T01:37:48.000Z
msrc_cve-2025-39726 s390/ism: fix concurrency management in ism_cmd() 2025-09-02T00:00:00.000Z 2025-12-03T01:37:43.000Z
msrc_cve-2025-39720 ksmbd: fix refcount leak causing resource not released 2025-09-02T00:00:00.000Z 2025-12-03T01:37:38.000Z
msrc_cve-2025-38716 hfs: fix general protection fault in hfs_find_init() 2025-09-02T00:00:00.000Z 2025-12-03T01:37:33.000Z
msrc_cve-2025-38710 gfs2: Validate i_depth for exhash directories 2025-09-02T00:00:00.000Z 2025-12-03T01:37:29.000Z
msrc_cve-2025-38692 exfat: add cluster chain loop check for dir 2025-09-02T00:00:00.000Z 2025-12-03T01:37:24.000Z
msrc_cve-2022-50236 iommu/mediatek: Fix crash on isr after kexec() 2025-09-02T00:00:00.000Z 2025-12-03T01:37:19.000Z
msrc_cve-2025-11932 Timing Side-Channel in PSK Binder Verification 2025-11-02T00:00:00.000Z 2025-12-03T01:37:14.000Z
ID Description Updated
var-200510-0403 Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute … 2024-07-23T19:53:25.750000Z
var-201905-0709 Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocess… 2024-07-23T19:53:24.913000Z
var-201302-0301 Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … 2024-07-23T19:53:24.502000Z
var-201210-0300 ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV a… 2024-07-23T19:53:24.742000Z
var-201501-0338 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1… 2024-07-23T19:53:23.981000Z
var-201310-0356 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… 2024-07-23T19:53:23.134000Z
var-202202-0081 In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. Expa… 2024-07-23T19:53:22.024000Z
var-201306-0139 Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earl… 2024-07-23T19:53:21.027000Z
var-201605-0494 Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.… 2024-07-23T19:51:11.128000Z
var-200608-0035 Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attack… 2024-07-23T19:51:11.554000Z
var-201506-0117 ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows … 2024-07-23T19:51:09.324000Z
var-201006-1241 Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 throug… 2024-07-23T19:51:09.764000Z
var-202002-1479 A denial of service issue was addressed with improved memory handling. This issue is fixe… 2024-07-23T19:50:58.130000Z
var-202205-1314 A memory corruption issue was addressed with improved state management. This issue is fix… 2024-07-23T19:50:57.599000Z
var-201912-0126 A validation issue was addressed with improved input sanitization. This issue is fixed in… 2024-07-23T19:50:56.137000Z
var-202105-0904 A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata… 2024-07-23T19:50:13.905000Z
var-201206-0057 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … 2024-07-23T19:50:12.882000Z
var-201912-0124 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T19:49:30.083000Z
var-201908-0421 Some HTTP/2 implementations are vulnerable to window size manipulation and stream priorit… 2024-07-23T19:49:30.261000Z
var-200912-0769 ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause … 2024-07-23T19:49:27.301000Z
var-200608-0043 The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment f… 2024-07-23T19:48:51.891000Z
var-200810-0137 Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remo… 2024-07-23T19:48:47.990000Z
var-201707-1241 In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]A… 2024-07-23T19:48:16.667000Z
var-201702-0869 An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari … 2024-07-23T19:48:15.077000Z
var-201006-0052 Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac … 2024-07-23T19:48:10.624000Z
var-201904-1405 A consistency issue existed in the handling of application snapshots. The issue was addre… 2024-07-23T19:47:38.995000Z
var-202101-0221 A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded qu… 2024-07-23T19:47:29.143000Z
var-201912-0603 Multiple memory corruption issues were addressed with improved memory handling. This issu… 2024-07-23T19:47:28.350000Z
var-201006-1162 WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4… 2024-07-23T19:47:26.805000Z
var-201711-0472 An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari be… 2024-07-23T19:47:23.684000Z
ID Description Published Updated
jvndb-2019-000019 KinagaCMS vulnerable to cross-site scripting 2019-03-15T17:03+09:00 2019-09-26T17:10+09:00
jvndb-2019-000057 SHIRASAGI vulnerable to open redirect 2019-09-10T13:56+09:00 2019-09-10T13:56+09:00
jvndb-2019-008917 Multiple Vulnerabilities in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor 2019-09-09T15:58+09:00 2019-09-09T15:58+09:00
jvndb-2019-000005 The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting may insecurely load Dynamic Link Libraries 2019-01-31T15:35+09:00 2019-08-28T12:08+09:00
jvndb-2019-000007 OpenAM (Open Source Edition) vulnerable to open redirect 2019-02-06T15:45+09:00 2019-08-28T11:00+09:00
jvndb-2018-000132 Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway 2018-12-19T15:20+09:00 2019-08-28T10:45+09:00
jvndb-2018-000133 cordova-plugin-ionic-webview vulnerable to path traversal 2018-12-21T14:17+09:00 2019-08-28T10:04+09:00
jvndb-2018-000125 The installer of MARKET SPEED may insecurely load Dynamic Link Libraries 2018-11-28T17:27+09:00 2019-08-28T10:01+09:00
jvndb-2019-000001 WordPress plugin "spam-byebye" vulnerable to cross-site scripting 2019-01-10T15:45+09:00 2019-08-28T09:54+09:00
jvndb-2018-000092 Multiple vulnerabilities in INplc 2018-09-07T16:49+09:00 2019-08-28T09:51+09:00
jvndb-2018-000127 EC-CUBE vulnerable to open redirect 2018-11-28T17:24+09:00 2019-08-28T09:42+09:00
jvndb-2018-000118 The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries 2018-11-09T16:13+09:00 2019-08-27T18:03+09:00
jvndb-2018-000093 Multiple script injection vulnerabilities in multiple Yamaha network devices 2018-08-29T18:01+09:00 2019-08-27T17:53+09:00
jvndb-2018-000122 Multiple vulnerabilities in Panasonic BN-SDWBP3 2019-06-28T18:28+09:00 2019-08-27T17:46+09:00
jvndb-2018-000134 PgpoolAdmin fails to restrict access permissions 2018-12-21T14:10+09:00 2019-08-27T17:41+09:00
jvndb-2018-000100 +Message App fails to verify SSL server certificates 2018-09-27T16:52+09:00 2019-08-27T17:22+09:00
jvndb-2018-000124 Multiple vulnerabilities in RICOH Interactive Whiteboard 2018-11-27T15:26+09:00 2019-08-27T17:01+09:00
jvndb-2018-000076 Multiple vulnerabilities in Aterm W300P 2018-07-12T15:04+09:00 2019-08-27T16:56+09:00
jvndb-2018-000130 Cybozu Garoon access restriction bypass vulnerability 2018-12-10T14:14+09:00 2019-08-27T16:54+09:00
jvndb-2018-009387 Mizuho Bank Mizuho Direct App for Android fails to verify SSL server certificates 2018-11-19T15:44+09:00 2019-08-27T16:48+09:00
jvndb-2018-000136 Installer of Mapping Tool may insecurely load Dynamic Link Libraries 2018-12-25T16:18+09:00 2019-08-27T16:36+09:00
jvndb-2018-000115 WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting 2018-11-02T14:56+09:00 2019-08-27T15:15+09:00
jvndb-2018-000135 WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting 2018-12-25T16:19+09:00 2019-08-27T15:12+09:00
jvndb-2018-000137 GROWI vulnerable to cross-site scripting 2018-12-26T16:36+09:00 2019-08-27T15:07+09:00
jvndb-2018-000077 Multiple vulnerabilities in Aterm HC100RC 2018-07-12T15:04+09:00 2019-08-27T13:52+09:00
jvndb-2018-000075 Multiple OS command injection vulnerabilities in Aterm WG1200HP 2018-07-12T15:04+09:00 2019-08-27T13:44+09:00
jvndb-2018-000119 Cybozu Mailwise vulnerable to directory traversal 2018-11-14T15:34+09:00 2019-08-27T13:37+09:00
jvndb-2018-000120 Multiple directory traversal vulnerabilities in Cybozu Office 2018-11-14T15:38+09:00 2019-08-27T12:28+09:00
jvndb-2018-000121 Cybozu Dezie vulnerable to directory traversal 2018-11-14T15:42+09:00 2019-08-27T12:25+09:00
jvndb-2018-000126 Multiple vulnerabilities in Cybozu Remote Service 2018-12-10T14:26+09:00 2019-08-27T11:48+09:00
ID Description Updated
ID Description Published Updated
suse-su-2025:03175-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4) 2025-09-11T13:04:56Z 2025-09-11T13:04:56Z
suse-su-2025:03173-1 Security update for curl 2025-09-11T12:55:00Z 2025-09-11T12:55:00Z
suse-su-2025:03172-1 Security update for xen 2025-09-11T12:54:02Z 2025-09-11T12:54:02Z
suse-su-2025:03171-1 Security update for regionServiceClientConfigGCE 2025-09-11T12:38:50Z 2025-09-11T12:38:50Z
suse-su-2025:03170-1 Security update for regionServiceClientConfigEC2 2025-09-11T12:38:35Z 2025-09-11T12:38:35Z
suse-su-2025:03169-1 Security update for regionServiceClientConfigAzure 2025-09-11T12:38:10Z 2025-09-11T12:38:10Z
suse-su-2025:03164-1 Security update for ImageMagick 2025-09-11T11:06:33Z 2025-09-11T11:06:33Z
suse-su-2025:20696-1 Security update for vim 2025-09-11T10:30:52Z 2025-09-11T10:30:52Z
suse-su-2025:03005-2 Security update for postgresql16 2025-09-11T10:21:41Z 2025-09-11T10:21:41Z
suse-su-2025:03005-1 Security update for postgresql16 2025-09-11T10:21:41Z 2025-09-11T10:21:41Z
suse-su-2025:03162-1 Security update for ffmpeg-4 2025-09-11T09:16:14Z 2025-09-11T09:16:14Z
suse-su-2025:03161-1 Security update for go1.25-openssl 2025-09-11T09:15:57Z 2025-09-11T09:15:57Z
suse-su-2025:03160-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) 2025-09-11T05:03:55Z 2025-09-11T05:03:55Z
suse-su-2025:03159-1 Security update for go1.23-openssl 2025-09-11T03:05:02Z 2025-09-11T03:05:02Z
suse-su-2025:03158-1 Security update for go1.24-openssl 2025-09-11T03:04:46Z 2025-09-11T03:04:46Z
suse-su-2025:03156-1 Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4) 2025-09-10T22:26:58Z 2025-09-10T22:26:58Z
suse-su-2025:03154-1 Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3) 2025-09-10T18:34:57Z 2025-09-10T18:34:57Z
suse-su-2025:03153-1 Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3) 2025-09-10T18:34:45Z 2025-09-10T18:34:45Z
suse-su-2025:03152-1 Security update for ImageMagick 2025-09-10T18:04:37Z 2025-09-10T18:04:37Z
suse-su-2025:03151-1 Security update for ImageMagick 2025-09-10T18:01:34Z 2025-09-10T18:01:34Z
suse-su-2025:03150-1 Security update for ImageMagick 2025-09-10T17:58:50Z 2025-09-10T17:58:50Z
suse-su-2025:03149-1 Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3) 2025-09-10T16:34:03Z 2025-09-10T16:34:03Z
suse-su-2025:20743-1 Security update for docker 2025-09-10T16:09:16Z 2025-09-10T16:09:16Z
suse-su-2025:03148-1 Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3) 2025-09-10T15:33:54Z 2025-09-10T15:33:54Z
suse-su-2025:03146-1 Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5) 2025-09-10T12:35:50Z 2025-09-10T12:35:50Z
suse-su-2025:03143-1 Security update for the Linux Kernel (Live Patch 68 for SLE 12 SP5) 2025-09-10T12:35:29Z 2025-09-10T12:35:29Z
suse-su-2025:03138-1 Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5) 2025-09-10T12:34:25Z 2025-09-10T12:34:25Z
suse-su-2025:03135-1 Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5) 2025-09-10T12:34:01Z 2025-09-10T12:34:01Z
suse-su-2025:03133-1 Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3) 2025-09-10T12:04:10Z 2025-09-10T12:04:10Z
suse-su-2025:03130-1 Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3) 2025-09-10T11:33:55Z 2025-09-10T11:33:55Z
ID Description Published Updated
opensuse-su-2025:14829-1 chromedriver-133.0.6943.126-1.1 on GA media 2025-02-21T00:00:00Z 2025-02-21T00:00:00Z
opensuse-su-2025:0068-1 Security update for dcmtk 2025-02-20T08:42:03Z 2025-02-20T08:42:03Z
opensuse-su-2025:14828-1 radare2-5.9.8-2.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:14827-1 proftpd-1.3.8c-2.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:14826-1 libmariadbd-devel-11.7.2-1.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:14825-1 luanti-5.11.0-1.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:14824-1 java-23-openjdk-23.0.2.0-1.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:14823-1 dcmtk-3.6.9-2.1 on GA media 2025-02-20T00:00:00Z 2025-02-20T00:00:00Z
opensuse-su-2025:0067-1 Security update for java-17-openj9 2025-02-19T22:53:13Z 2025-02-19T22:53:13Z
opensuse-su-2025:14822-1 grub2-2.12-35.1 on GA media 2025-02-19T00:00:00Z 2025-02-19T00:00:00Z
opensuse-su-2025:0066-1 Security update for java-11-openj9 2025-02-18T16:58:15Z 2025-02-18T16:58:15Z
opensuse-su-2025:14821-1 ruby3.4-rubygem-grpc-1.70.1-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14820-1 openssh-9.9p2-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14819-1 kubernetes1.32-apiserver-1.32.2-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14818-1 kubernetes1.31-apiserver-1.31.6-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14817-1 kubernetes1.30-apiserver-1.30.10-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14816-1 kubernetes1.29-apiserver-1.29.14-1.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14815-1 google-osconfig-agent-20250115.01-2.1 on GA media 2025-02-18T00:00:00Z 2025-02-18T00:00:00Z
opensuse-su-2025:14814-1 obs-service-cargo-4.5.0-2.1 on GA media 2025-02-16T00:00:00Z 2025-02-16T00:00:00Z
opensuse-su-2025:14813-1 keylime-config-7.12.1-1.1 on GA media 2025-02-16T00:00:00Z 2025-02-16T00:00:00Z
opensuse-su-2025:14812-1 chromedriver-133.0.6943.98-2.1 on GA media 2025-02-15T00:00:00Z 2025-02-15T00:00:00Z
opensuse-su-2025:0059-1 Security update for chromium 2025-02-14T08:59:39Z 2025-02-14T08:59:39Z
opensuse-su-2025:14811-1 ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media 2025-02-14T00:00:00Z 2025-02-14T00:00:00Z
opensuse-su-2025:14810-1 libecpg6-17.3-1.1 on GA media 2025-02-14T00:00:00Z 2025-02-14T00:00:00Z
opensuse-su-2025:14809-1 curl-8.12.1-1.1 on GA media 2025-02-14T00:00:00Z 2025-02-14T00:00:00Z
opensuse-su-2025:0058-1 Security update for chromium 2025-02-13T08:57:17Z 2025-02-13T08:57:17Z
opensuse-su-2025:14808-1 postgresql16-16.7-1.1 on GA media 2025-02-13T00:00:00Z 2025-02-13T00:00:00Z
opensuse-su-2025:14807-1 postgresql15-15.11-1.1 on GA media 2025-02-13T00:00:00Z 2025-02-13T00:00:00Z
opensuse-su-2025:14806-1 postgresql14-14.16-1.1 on GA media 2025-02-13T00:00:00Z 2025-02-13T00:00:00Z
opensuse-su-2025:14805-1 postgresql13-13.19-1.1 on GA media 2025-02-13T00:00:00Z 2025-02-13T00:00:00Z
ID Description Published Updated
cnvd-2025-29078 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4信息泄露漏洞(CNVD-2025-29078) 2025-11-05 2025-11-20
cnvd-2025-29077 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4信息泄露漏洞 2025-11-05 2025-11-20
cnvd-2025-29076 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29076) 2025-11-05 2025-11-20
cnvd-2025-29075 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29075) 2025-11-05 2025-11-20
cnvd-2025-29074 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4拒绝服务漏洞(CNVD-2025-29074) 2025-11-05 2025-11-20
cnvd-2025-29073 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4拒绝服务漏洞(CNVD-2025-29073) 2025-11-05 2025-11-20
cnvd-2025-29072 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29072) 2025-11-05 2025-11-20
cnvd-2025-29071 Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4存在未明漏洞(CNVD-2025-29071) 2025-11-05 2025-11-20
cnvd-2025-28950 Simple Cafe Ordering System portal.php文件SQL注入漏洞 2025-08-20 2025-11-20
cnvd-2025-28949 Simple Cafe Ordering System login.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28948 Simple Cafe Ordering System add_to_cart文件跨站脚本漏洞 2025-11-18 2025-11-20
cnvd-2025-28947 Simple Cafe Ordering System addmem.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28946 Student Information System searchquery.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28944 Student Information System /index.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28943 Student Information System register.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28942 Student Information System /editprofile.php文件SQL注入漏洞 2025-11-18 2025-11-20
cnvd-2025-28941 Student Information System register.php跨站脚本漏洞 2025-11-18 2025-11-20
cnvd-2025-28940 Student Information System editprofile.php文件跨站脚本漏洞 2025-11-18 2025-11-20
cnvd-2025-28838 WordPress Payments Braintree For WooCommerce plugin授权绕过漏洞 2025-11-14 2025-11-20
cnvd-2025-28837 WordPress Easy Email Subscription plugin跨站脚本漏洞 2025-11-14 2025-11-20
cnvd-2025-28836 WordPress Asgaros Forum plugin跨站请求伪造漏洞 2025-11-14 2025-11-20
cnvd-2025-28835 WordPress Theater for WordPress plugin缺少授权漏洞 2025-11-18 2025-11-20
cnvd-2025-28834 WordPress Survey Maker plugin缺少能力检查漏洞 2025-11-18 2025-11-20
cnvd-2025-28833 WordPress Survey Maker plugin缺少授权漏洞 2025-11-18 2025-11-20
cnvd-2025-28832 WordPress Survey Maker plugin未授权访问漏洞 2025-11-18 2025-11-20
cnvd-2025-28831 WordPress SureForms plugin信息泄露漏洞 2025-11-18 2025-11-20
cnvd-2025-28830 WordPress Save as PDF Button plugin跨站脚本漏洞 2025-11-18 2025-11-20
cnvd-2025-28829 WordPress quicq plugin缺少能力检查漏洞 2025-11-18 2025-11-20
cnvd-2025-28828 WordPress Qi Blocks plugin跨站脚本漏洞 2025-11-18 2025-11-20
cnvd-2025-28827 WordPress Popup addon for Ninja Forms plugin跨站脚本漏洞 2025-11-18 2025-11-20
ID Description Published Updated
certfr-2025-avi-0634 Vulnérabilité dans Python 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0633 Vulnérabilité dans Tenable Patch Management 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0632 Multiples vulnérabilités dans GLPI 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0639 Multiples vulnérabilités dans Google Chrome 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0638 Vulnérabilité dans les produits Sonicwall 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0637 Vulnérabilité dans SolarWinds Web Help Desk 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0636 Multiples vulnérabilités dans les produits Elastic 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0635 Vulnérabilité dans VMware vCenter 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0634 Vulnérabilité dans Python 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0633 Vulnérabilité dans Tenable Patch Management 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
CERTFR-2025-AVI-0632 Multiples vulnérabilités dans GLPI 2025-07-30T00:00:00.000000 2025-07-30T00:00:00.000000
certfr-2025-avi-0631 Vulnérabilité dans SolarWinds SWOSH 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
certfr-2025-avi-0630 Vulnérabilité dans Palo Alto Networks GlobalProtect App 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
CERTFR-2025-AVI-0631 Vulnérabilité dans SolarWinds SWOSH 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
CERTFR-2025-AVI-0630 Vulnérabilité dans Palo Alto Networks GlobalProtect App 2025-07-29T00:00:00.000000 2025-07-29T00:00:00.000000
certfr-2025-avi-0629 Multiples vulnérabilités dans Microsoft Edge 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
certfr-2025-avi-0628 Multiples vulnérabilités dans Synology BeeDrive 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
CERTFR-2025-AVI-0629 Multiples vulnérabilités dans Microsoft Edge 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
CERTFR-2025-AVI-0628 Multiples vulnérabilités dans Synology BeeDrive 2025-07-28T00:00:00.000000 2025-07-28T00:00:00.000000
certfr-2025-avi-0627 Multiples vulnérabilités dans les produits IBM 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0626 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0625 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0624 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0623 Multiples vulnérabilités dans les produits ESET 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
certfr-2025-avi-0622 Multiples vulnérabilités dans les produits VMware 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
CERTFR-2025-AVI-0627 Multiples vulnérabilités dans les produits IBM 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
CERTFR-2025-AVI-0626 Multiples vulnérabilités dans le noyau Linux de Red Hat 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
CERTFR-2025-AVI-0625 Multiples vulnérabilités dans le noyau Linux d'Ubuntu 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
CERTFR-2025-AVI-0624 Multiples vulnérabilités dans le noyau Linux de SUSE 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
CERTFR-2025-AVI-0623 Multiples vulnérabilités dans les produits ESET 2025-07-25T00:00:00.000000 2025-07-25T00:00:00.000000
ID CVSS Description Vendor Product Published Updated
ID CVSS Description Vendor Product Published Updated