Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-36959 |
8.5 (4.0)
7.8 (3.1)
|
IDT PC Audio 1.0.6499.0 - 'STacSV' Unquoted Service Path |
IDT |
IDT PC Audio |
2026-01-26T17:43:15.414Z | 2026-01-26T20:56:20.051Z |
| CVE-2020-36960 |
5.1 (4.0)
6.4 (3.1)
|
Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site … |
Formalms |
Forma LMS |
2026-01-26T17:43:22.174Z | 2026-01-26T20:55:45.410Z |
| CVE-2025-57783 |
5.3 (3.1)
|
Improper header parsing may lead to request smuggling |
Hiawatha |
Hiawatha Web server |
2026-01-26T17:45:36.947Z | 2026-01-26T20:55:04.568Z |
| CVE-2025-57785 |
6.5 (3.1)
|
Double free in XSLT in 'show_index' |
Hiawatha |
Hiawatha Web server |
2026-01-26T17:46:09.707Z | 2026-01-26T20:54:04.714Z |
| CVE-2025-9784 |
7.5 (3.1)
|
Undertow: undertow madeyoureset http/2 ddos vulnerability |
|
|
2025-09-02T13:37:59.772Z | 2026-01-26T20:53:19.630Z |
| CVE-2026-24432 |
5.1 (4.0)
|
Tenda W30E V2 Missing CSRF Protections for Administrat… |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:46:54.531Z | 2026-01-26T20:52:57.250Z |
| CVE-2025-57784 |
4 (3.1)
|
Tomahawk authentication timing attack due to usage of … |
Hiawatha |
Hiawatha Web server |
2026-01-26T17:47:19.382Z | 2026-01-26T20:52:06.748Z |
| CVE-2026-24390 |
7.5 (3.1)
|
WordPress Kentha Elementor Widgets plugin < 3.1 - Loca… |
QantumThemes |
Kentha Elementor Widgets |
2026-01-22T16:52:48.114Z | 2026-01-26T20:50:08.534Z |
| CVE-2026-24389 |
6.5 (3.1)
|
WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross … |
WP Chill |
Gallery PhotoBlocks |
2026-01-22T16:52:47.889Z | 2026-01-26T20:49:11.321Z |
| CVE-2026-22445 |
5.3 (3.1)
|
WordPress Apimo Connector plugin <= 2.6.4 - Broken Acc… |
Proptech Plugin |
Apimo Connector |
2026-01-22T16:52:38.969Z | 2026-01-26T20:47:32.006Z |
| CVE-2026-22430 |
5.4 (3.1)
|
WordPress Verdure theme <= 1.6 - Insecure Direct Objec… |
Mikado-Themes |
Verdure |
2026-01-22T16:52:38.780Z | 2026-01-26T20:46:27.360Z |
| CVE-2026-22426 |
5.4 (3.1)
|
WordPress Sweet Jane theme <= 1.2 - Insecure Direct Ob… |
Elated-Themes |
Sweet Jane |
2026-01-22T16:52:38.525Z | 2026-01-26T20:45:34.564Z |
| CVE-2026-23864 |
7.5 (3.1)
|
Multiple denial of service vulnerabilities exist … |
Meta |
react-server-dom-webpack |
2026-01-26T19:16:38.250Z | 2026-01-26T20:26:45.709Z |
| CVE-2025-9615 |
3.3 (3.0)
|
Networkmanager: networkmanager file access |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-26T19:58:17.401Z | 2026-01-26T20:15:40.818Z |
| CVE-2025-9820 |
4 (3.1)
|
Gnutls: stack-based buffer overflow in gnutls_pkcs11_t… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-26T19:58:32.886Z | 2026-01-26T20:12:19.249Z |
| CVE-2026-24439 |
2.1 (4.0)
|
Tenda W30E V2 Lacks X-Content-Type-Options Header |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:48:37.336Z | 2026-01-26T19:52:59.467Z |
| CVE-2026-24435 |
7.1 (4.0)
|
Tenda W30E V2 Permissive CORS Allows Cross-origin Data… |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:49:03.354Z | 2026-01-26T19:52:12.119Z |
| CVE-2026-0925 |
2.7 (3.1)
|
Tanium addressed an improper input validation vulnerab… |
Tanium |
Discover |
2026-01-26T17:51:34.091Z | 2026-01-26T19:50:46.864Z |
| CVE-2025-71178 |
7.1 (4.0)
|
Crucial Storage Executive < 11.08.082025.00 Installer … |
Micron Technology, Inc. |
Crucial Storage Executive |
2026-01-26T17:55:02.467Z | 2026-01-26T19:48:35.855Z |
| CVE-2026-22464 |
7.5 (3.1)
|
WordPress My auctions allegro plugin <= 3.6.33 - Local… |
wphocus |
My auctions allegro |
2026-01-22T16:52:40.530Z | 2026-01-26T19:46:02.680Z |
| CVE-2025-11065 |
5.3 (3.1)
|
Github.com/go-viper/mapstructure/v2: go-viper's mapstr… |
|
|
2026-01-26T19:36:28.900Z | 2026-01-26T19:36:28.900Z |
| CVE-2025-9522 |
5.1 (4.0)
|
Blind Server-Side Request Forgery (SSRF) in Omada Controller |
TP-Link Systems Inc. |
Omada Controller |
2026-01-26T19:35:59.689Z | 2026-01-26T19:35:59.689Z |
| CVE-2025-9521 |
2.1 (4.0)
|
Password Confirmation Bypass in Omada Controller |
TP-Link Systems Inc. |
Omada Controller |
2026-01-26T19:35:26.711Z | 2026-01-26T19:35:26.711Z |
| CVE-2026-24556 |
5.3 (3.1)
|
WordPress ElementCamp plugin <= 2.3.2 - Broken Access … |
wpdive |
ElementCamp |
2026-01-23T14:28:53.780Z | 2026-01-26T19:15:18.132Z |
| CVE-2026-24564 |
4.3 (3.1)
|
WordPress Textmetrics plugin <= 3.6.3 - Arbitrary Shor… |
Israpil |
Textmetrics |
2026-01-23T14:28:55.667Z | 2026-01-26T19:15:02.916Z |
| CVE-2026-24568 |
5.3 (3.1)
|
WordPress WP Travel plugin <= 11.0.0 - Broken Access C… |
WP Travel |
WP Travel |
2026-01-23T14:28:56.433Z | 2026-01-26T19:14:53.329Z |
| CVE-2026-24569 |
4.3 (3.1)
|
WordPress Media Library File Size plugin <= 1.6.7 - Br… |
Sully |
Media Library File Size |
2026-01-23T14:28:56.622Z | 2026-01-26T19:14:44.289Z |
| CVE-2026-24570 |
5.4 (3.1)
|
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Acce… |
WisdmLabs |
Edwiser Bridge |
2026-01-23T14:28:56.795Z | 2026-01-26T19:14:35.557Z |
| CVE-2026-24571 |
4.3 (3.1)
|
WordPress BOX NOW Delivery plugin <= 3.0.2 - Broken Ac… |
boxnow |
BOX NOW Delivery |
2026-01-23T14:28:56.952Z | 2026-01-26T19:14:27.946Z |
| CVE-2026-24578 |
4.3 (3.1)
|
WordPress Admin login URL Change plugin <= 1.1.5 - Bro… |
Jahid Hasan |
Admin login URL Change |
2026-01-23T14:28:58.618Z | 2026-01-26T19:14:17.161Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24525 |
5.3 (3.1)
|
WordPress CLP Varnish Cache plugin <= 1.0.2 - Broken A… |
CloudPanel |
CLP Varnish Cache |
2026-01-23T14:28:49.126Z | 2026-01-28T15:11:14.494Z |
| CVE-2025-69076 |
8.1 (3.1)
|
WordPress Modern Housewife theme <= 1.0.12 - Local Fil… |
AncoraThemes |
Modern Housewife |
2026-01-22T16:52:25.218Z | 2026-01-28T15:20:37.640Z |
| CVE-2025-68869 |
9.8 (3.1)
|
WordPress LazyTasks plugin <= 1.4.01 - Privilege Escal… |
LazyCoders LLC |
LazyTasks |
2026-01-22T16:52:10.526Z | 2026-01-28T15:22:59.412Z |
| CVE-2025-68507 |
6.5 (3.1)
|
WordPress Icegram plugin <= 3.1.35 - Broken Access Con… |
Icegram |
Icegram |
2026-01-22T16:52:07.377Z | 2026-01-28T15:38:01.128Z |
| CVE-2025-68073 |
6.5 (3.1)
|
WordPress GDPR CCPA Compliance Support plugin <= 2.7.4… |
Ninja Team |
GDPR CCPA Compliance Support |
2026-01-22T16:52:07.197Z | 2026-01-28T15:49:44.753Z |
| CVE-2025-68072 |
6.5 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.17 - Br… |
Merv Barrett |
Easy Property Listings |
2026-01-22T16:52:06.979Z | 2026-01-28T15:39:01.232Z |
| CVE-2025-47348 |
7.8 (3.1)
|
Use of Uninitialized Variable in HLOS |
Qualcomm, Inc. |
Snapdragon |
2026-01-06T22:48:41.474Z | 2026-01-07T16:15:48.841Z |
| CVE-2026-24477 |
8.7 (4.0)
|
AnythingLLM has key leak in `systemSettings.js` |
Mintplex-Labs |
anything-llm |
2026-01-26T23:22:27.793Z | 2026-01-27T21:30:45.245Z |
| CVE-2024-54383 |
9.8 (3.1)
|
WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - … |
wpweb |
WooCommerce PDF Vouchers |
2024-12-18T18:48:52.656Z | 2024-12-18T19:16:35.299Z |
| CVE-2026-24478 |
7.2 (3.1)
|
AnythingLLM vulnerable to Path Traversal |
Mintplex-Labs |
anything-llm |
2026-01-26T23:23:54.923Z | 2026-01-27T21:29:55.195Z |
| CVE-2022-36943 |
8.1 (3.1)
|
SSZipArchive versions 2.5.3 and older contain an … |
ZipArchive |
SSZipArchive |
2023-01-03T00:00:00.000Z | 2025-04-10T15:56:21.976Z |
| CVE-2023-28689 |
6.5 (3.1)
|
WordPress JS Job Manager plugin <= 2.0.0 - Broken Acce… |
JoomSky |
JS Job Manager |
2024-12-09T11:31:14.476Z | 2024-12-09T18:45:11.269Z |
| CVE-2023-25993 |
4.3 (3.1)
|
WordPress Top 10 – Popular posts plugin for WordPress … |
WebberZone |
Top 10 |
2024-12-09T11:31:26.884Z | 2024-12-09T18:43:33.925Z |
| CVE-2025-47382 |
7.8 (3.1)
|
Incorrect Authorization in Boot |
Qualcomm, Inc. |
Snapdragon |
2025-12-18T05:29:11.983Z | 2025-12-18T15:00:16.777Z |
| CVE-2025-47387 |
7.8 (3.1)
|
Untrusted Pointer Dereference in Camera |
Qualcomm, Inc. |
Snapdragon |
2025-12-18T05:29:13.939Z | 2025-12-18T15:00:03.739Z |
| CVE-2025-47332 |
6.7 (3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition in C… |
Qualcomm, Inc. |
Snapdragon |
2026-01-06T22:48:30.718Z | 2026-01-07T16:16:48.296Z |
| CVE-2025-39485 |
9.8 (3.1)
|
WordPress GrandTour Theme <= 5.5.1 - PHP Object Inject… |
ThemeGoods |
Grand Tour | Travel Agency WordPress |
2025-05-23T12:43:55.410Z | 2025-05-23T13:37:54.091Z |
| CVE-2025-32309 |
8.1 (3.1)
|
WordPress Healsoul <= 2.0.2 - Local File Inclusion Vul… |
ThemeMove |
Healsoul |
2025-05-23T12:43:56.345Z | 2025-05-23T13:40:11.018Z |
| CVE-2025-39354 |
9.8 (3.1)
|
WordPress Grand Conference theme <= 5.2 - PHP Object I… |
ThemeGoods |
Grand Conference |
2025-05-19T19:48:09.530Z | 2025-05-19T21:19:46.638Z |
| CVE-2025-39458 |
8.1 (3.1)
|
WordPress Foton theme <= 2.5.2 - Local File Inclusion … |
Mikado-Themes |
Foton |
2025-05-19T18:47:55.062Z | 2025-05-19T19:34:36.694Z |
| CVE-2025-39590 |
6.5 (3.1)
|
WordPress Essential Addons for Elementor <= 6.1.9 - Cr… |
WPDeveloper |
Essential Addons for Elementor |
2025-04-16T12:44:20.971Z | 2025-04-16T14:31:36.811Z |
| CVE-2026-1415 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC media_export.c gf_media_export_webvtt_metadata nu… |
n/a |
GPAC |
2026-01-26T02:32:08.374Z | 2026-01-26T15:30:07.071Z |
| CVE-2025-39589 |
4.3 (3.1)
|
WordPress Essential Addons for Elementor <= 6.1.9 - Se… |
WPDeveloper |
Essential Addons for Elementor |
2025-04-16T12:44:21.605Z | 2025-04-16T14:31:21.052Z |
| CVE-2026-1416 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC filedump.c DumpMovieInfo null pointer dereference |
n/a |
GPAC |
2026-01-26T03:02:07.336Z | 2026-01-26T15:26:47.761Z |
| CVE-2026-24549 |
4.3 (3.1)
|
WordPress GeoDirectory plugin < 2.8.150 - Cross Site R… |
Paolo |
GeoDirectory |
2026-01-23T14:28:52.855Z | 2026-01-28T14:24:26.166Z |
| CVE-2026-1467 |
5.8 (3.1)
|
Libsoup: libsoup: http header injection via specially … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-27T09:17:44.535Z | 2026-01-28T14:25:32.314Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-1417 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC filedump.c dump_isom_rtp null pointer dereference |
n/a |
GPAC |
2026-01-26T03:32:07.165Z | 2026-01-26T15:22:24.412Z |
| CVE-2025-13053 |
7 (4.0)
|
A missing encryption of sensitive data vulnerability w… |
ASUSTOR |
ADM |
2025-12-12T02:46:08.403Z | 2025-12-12T18:16:46.902Z |
| CVE-2025-13052 |
7 (4.0)
|
An improper certificates validation vulnerability was … |
ASUSTOR |
ADM |
2025-12-12T02:30:35.812Z | 2025-12-12T18:17:24.167Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-24525 | Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploi… | 2026-01-23T15:16:08.340 | 2026-01-28T16:16:17.060 |
| fkie_cve-2025-69076 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T17:16:21.753 | 2026-01-28T16:16:15.410 |
| fkie_cve-2025-68869 | Incorrect Privilege Assignment vulnerability in LazyCoders LLC LazyTasks lazytasks-project-task-man… | 2026-01-22T17:16:12.293 | 2026-01-28T16:16:15.083 |
| fkie_cve-2025-68507 | Missing Authorization vulnerability in Icegram Icegram icegram allows Exploiting Incorrectly Config… | 2026-01-22T17:16:10.393 | 2026-01-28T16:16:14.020 |
| fkie_cve-2025-68073 | Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-complianc… | 2026-01-22T17:16:10.120 | 2026-01-28T16:16:13.867 |
| fkie_cve-2025-68072 | Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings a… | 2026-01-22T17:16:09.993 | 2026-01-28T16:16:13.657 |
| fkie_cve-2025-47348 | Memory corruption while processing identity credential operations in the trusted application. | 2026-01-07T12:17:04.457 | 2026-01-28T16:14:04.430 |
| fkie_cve-2026-24477 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as ref… | 2026-01-27T00:15:51.150 | 2026-01-28T15:59:06.483 |
| fkie_cve-2024-54383 | Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers allows Privilege Esc… | 2024-12-18T19:15:11.467 | 2026-01-28T15:56:37.257 |
| fkie_cve-2026-24478 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as ref… | 2026-01-27T00:15:51.297 | 2026-01-28T15:52:39.977 |
| fkie_cve-2022-36943 | SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of … | 2023-01-03T21:15:12.757 | 2026-01-28T15:51:44.647 |
| fkie_cve-2023-28689 | Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configu… | 2024-12-09T13:15:26.500 | 2026-01-28T15:50:17.743 |
| fkie_cve-2023-25993 | Missing Authorization vulnerability in WebberZone Top 10 allows Exploiting Incorrectly Configured A… | 2024-12-09T13:15:24.500 | 2026-01-28T15:49:56.760 |
| fkie_cve-2025-47382 | Memory corruption while loading an invalid firmware in boot loader. | 2025-12-18T06:15:49.387 | 2026-01-28T15:49:45.800 |
| fkie_cve-2025-47387 | Memory Corruption when processing IOCTLs for JPEG data without verification. | 2025-12-18T06:15:49.553 | 2026-01-28T15:46:46.420 |
| fkie_cve-2025-47332 | Memory corruption while processing a config call from userspace. | 2026-01-07T12:17:02.680 | 2026-01-28T15:43:12.647 |
| fkie_cve-2025-39485 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour | Travel Agency WordPress … | 2025-05-23T13:15:30.610 | 2026-01-28T15:39:51.910 |
| fkie_cve-2025-32309 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-05-23T13:15:30.263 | 2026-01-28T15:39:31.080 |
| fkie_cve-2025-39354 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference allows Object Inject… | 2025-05-19T20:15:23.337 | 2026-01-28T15:38:19.927 |
| fkie_cve-2025-39458 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2025-05-19T19:15:50.293 | 2026-01-28T15:36:32.693 |
| fkie_cve-2025-39590 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-04-16T13:15:51.673 | 2026-01-28T15:36:05.813 |
| fkie_cve-2026-1415 | A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt… | 2026-01-26T03:15:49.780 | 2026-01-28T15:29:05.810 |
| fkie_cve-2025-39589 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDevel… | 2025-04-16T13:15:51.540 | 2026-01-28T15:26:36.763 |
| fkie_cve-2026-1416 | A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the func… | 2026-01-26T04:16:09.960 | 2026-01-28T15:18:57.673 |
| fkie_cve-2026-24549 | Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory allows Cross Site Request For… | 2026-01-23T15:16:11.227 | 2026-01-28T15:16:17.937 |
| fkie_cve-2026-1467 | A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Re… | 2026-01-27T10:15:48.597 | 2026-01-28T15:16:16.807 |
| fkie_cve-2025-69820 | Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensit… | 2026-01-22T16:16:07.820 | 2026-01-28T15:16:15.157 |
| fkie_cve-2026-1417 | A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_iso… | 2026-01-26T04:16:10.180 | 2026-01-28T15:04:30.863 |
| fkie_cve-2025-13053 | When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certif… | 2025-12-12T03:15:51.377 | 2026-01-28T14:54:44.440 |
| fkie_cve-2025-13052 | When the user set the Notification's sender to send emails to the SMTP server via msmtp, an imprope… | 2025-12-12T03:15:50.070 | 2026-01-28T14:53:53.883 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-qj73-vvw8-rhhf |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-q5rh-rhr2-9pqq |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:36Z | 2026-01-23T22:35:51Z |
| ghsa-mjpw-2hx8-jvrc |
6.5 (3.1)
|
Missing Authorization vulnerability in Damian WP Popups wp-popups-lite allows Exploiting Incorrectl… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-mjh6-hc9m-977x |
5.3 (3.1)
|
Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploitin… | 2026-01-23T15:31:37Z | 2026-01-23T22:35:51Z |
| ghsa-jqg4-9wc7-2cqr |
8.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-23T22:35:51Z |
| ghsa-ff36-pjpc-rvw7 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-23T22:35:51Z |
| ghsa-cgc2-28w6-wq4g |
5.3 (3.1)
|
Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping C… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-9g3h-4xrc-w4fr |
5.3 (3.1)
|
Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting In… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-8xrp-hqw9-v3r6 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:36Z | 2026-01-23T22:35:51Z |
| ghsa-8gxm-rc6r-rg28 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-23T22:35:51Z |
| ghsa-63vr-ppcf-2wwm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-5vv6-8wrr-wj6p |
7.5 (3.1)
|
An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to missing au… | 2026-01-23T15:31:34Z | 2026-01-23T22:35:51Z |
| ghsa-53j3-cfjv-xfqj |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:36Z | 2026-01-23T22:35:51Z |
| ghsa-43fm-9f2q-hw2w |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:38Z | 2026-01-23T22:35:51Z |
| ghsa-jpgg-cp2x-qrw3 |
9.8 (3.1)
|
Duplicate Advisory: ecnepsnai/web vulnerable to Uncontrolled Resource Consumption | 2022-12-28T00:30:23Z | 2026-01-23T22:35:48Z |
| ghsa-w277-wpqf-rcfv |
|
Duplicate Advisory: Svix vulnerable to improper comparison of different-length signatures | 2024-02-06T20:30:14Z | 2026-01-23T22:35:18Z |
| ghsa-g3vv-g2j5-45f2 |
7.5 (3.1)
|
ipld/go-codec-dagpb panics when processing certain blocks | 2022-04-08T22:08:45Z | 2026-01-23T22:34:06Z |
| ghsa-967g-cjx4-h7j6 |
7.0 (3.1)
|
Duplicate Advisory: go-codec-dagpb vulnerable to panic when decoding invalid blocks | 2022-12-28T00:30:23Z | 2026-01-23T22:34:00Z |
| ghsa-xvcg-2q82-r87j |
7.5 (3.1)
|
Panic mishandled in libpulse-binding | 2022-01-06T22:18:19Z | 2026-01-23T22:33:12Z |
| ghsa-wcxc-jf6c-8rx9 |
|
Duplicate Advisory: Uncaught Exception in libpulse-binding | 2021-08-25T20:57:21Z | 2026-01-23T22:32:51Z |
| ghsa-h2g5-2rhx-ffgj |
|
Duplicate Advisory: Command injection in Weblate | 2022-03-05T00:00:44Z | 2026-01-23T22:29:40Z |
| ghsa-vjrh-7rvq-8ghw |
7.8 (3.1)
4.8 (4.0)
|
The communication protocol used between the server process and the service control had a flaw that … | 2025-07-11T06:30:30Z | 2026-01-23T22:06:23Z |
| ghsa-r6wv-x735-w2v5 |
5.3 (3.1)
6.9 (4.0)
|
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attac… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-qfq8-mv2q-hvwp |
6.1 (3.1)
7.0 (4.0)
|
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attac… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-mhj4-9938-5fpw |
9.8 (3.1)
6.3 (4.0)
|
An OS command injection vulnerability in Palo Alto Networks Expedition enables an authenticated att… | 2025-01-11T03:30:41Z | 2026-01-23T22:06:23Z |
| ghsa-mf45-qm92-8v76 |
9.1 (3.1)
6.9 (4.0)
|
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticate… | 2025-01-11T03:30:41Z | 2026-01-23T22:06:23Z |
| ghsa-cv6f-rw49-r829 |
8.8 (3.1)
9.2 (4.0)
|
An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker t… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-h7j3-xrmw-5xv3 |
5.5 (3.1)
|
libuser has information disclosure when moving user's home directory | 2022-04-23T00:40:20Z | 2026-01-23T22:06:22Z |
| ghsa-2gqc-6j2q-83qp |
8.9 (4.0)
|
RustCrypto Utilities cmov: `thumbv6m-none-eabi` compiler emits non-constant time assembly when usin… | 2026-01-15T18:17:15Z | 2026-01-23T21:46:10Z |
| ghsa-52c5-vh7f-26fx |
7.6 (3.1)
|
Cross-Site Scripting (XSS) vulnerability through unescaped HTML attribute values | 2025-11-06T15:44:35Z | 2026-01-23T21:37:34Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2018-113 |
|
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code… | ajenti-panel | 2018-03-13T21:29:00Z | 2022-02-17T09:17:11.143263Z |
| pysec-2018-112 |
|
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON r… | ajenti-panel | 2018-03-13T15:29:00Z | 2022-02-17T09:17:11.100025Z |
| pysec-2018-111 |
|
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the… | ajenti-panel | 2018-03-13T15:29:00Z | 2022-02-17T09:17:11.053772Z |
| pysec-2018-110 |
|
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-va… | ajenti-panel | 2018-03-13T15:29:00Z | 2022-02-17T09:17:11.010349Z |
| pysec-2018-109 |
|
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins downloa… | ajenti-panel | 2018-03-13T15:29:00Z | 2022-02-17T09:17:10.970141Z |
| pysec-2022-27 |
|
twisted is an event-driven networking engine written in Python. In affected versions twis… | twisted | 2022-02-07T22:15:00Z | 2022-02-15T06:31:29.205025Z |
| pysec-2022-26 |
|
treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq… | treq | 2022-02-01T11:15:00Z | 2022-02-08T17:32:07.420457Z |
| pysec-2022-25 |
|
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendInd… | ujson | 2022-01-01T00:15:00Z | 2022-02-07T23:29:33.363244Z |
| pysec-2022-24 |
|
Flask-AppBuilder is an application development framework, built on top of the Flask web f… | flask-appbuilder | 2022-01-31T21:15:00Z | 2022-02-07T21:26:59.516513Z |
| pysec-2022-23 |
|
Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16. | calibreweb | 2022-01-30T14:15:00Z | 2022-02-04T19:19:26.704356Z |
| pysec-2022-22 |
|
Improper Access Control in Pypi calibreweb prior to 0.6.16. | calibreweb | 2022-01-30T14:15:00Z | 2022-02-04T19:19:26.662601Z |
| pysec-2022-21 |
|
Products.ATContentTypes are the core content types for Plone 2.1 - 4.3. Versions of Plone… | products-atcontenttypes | 2022-01-28T22:15:00Z | 2022-02-04T17:23:45.077200Z |
| pysec-2022-20 |
|
An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12… | django | 2022-02-03T02:15:00Z | 2022-02-03T06:35:23.159453Z |
| pysec-2022-19 |
|
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 befo… | django | 2022-02-03T02:15:00Z | 2022-02-03T06:35:22.988491Z |
| pysec-2022-18 |
|
Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16. | calibreweb | 2022-01-28T22:15:00Z | 2022-02-03T02:16:29.312073Z |
| pysec-2022-17 |
|
Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenti… | gerapy | 2022-01-26T22:15:00Z | 2022-02-02T21:26:17.207117Z |
| pysec-2022-16 |
|
Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versio… | jupyter-server-proxy | 2022-01-25T14:15:00Z | 2022-02-01T17:37:55.179786Z |
| pysec-2022-15 |
|
This CVE has been rejected as it was incorrectly assigned. | loguru | 2022-01-21T11:15:00Z | 2022-01-29T16:47:14.527876Z |
| pysec-2022-14 |
|
Improper Privilege Management in Conda loguru prior to 0.5.3. | loguru | 2022-01-25T09:15:00Z | 2022-01-28T21:25:28.417398Z |
| pysec-2022-13 |
|
Wagtail is a Django based content management system focused on flexibility and user exper… | wagtail | 2022-01-18T18:15:00Z | 2022-01-26T19:22:48.977586Z |
| pysec-2022-12 |
|
IPython (Interactive Python) is a command shell for interactive computing in multiple pro… | ipython | 2022-01-19T22:15:00Z | 2022-01-26T19:22:31.675139Z |
| pysec-2022-11 |
|
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who ha… | apache-airflow | 2022-01-20T11:15:00Z | 2022-01-26T17:33:56.560362Z |
| pysec-2022-9 |
|
path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initializatio… | pillow | 2022-01-10T14:12:00Z | 2022-01-24T23:48:19.735368Z |
| pysec-2022-8 |
|
path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. | pillow | 2022-01-10T14:12:00Z | 2022-01-24T23:48:19.580598Z |
| pysec-2022-10 |
|
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, suc… | pillow | 2022-01-10T14:12:00Z | 2022-01-24T23:48:19.853348Z |
| pysec-2022-7 |
|
Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messa… | django-cms | 2022-01-12T13:15:00Z | 2022-01-20T15:35:06.506852Z |
| pysec-2022-6 |
|
pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior t… | pipenv | 2022-01-10T21:15:00Z | 2022-01-19T19:22:23.694218Z |
| pysec-2021-869 |
|
archivy is vulnerable to Cross-Site Request Forgery (CSRF) | archivy | 2021-12-25T12:15:00Z | 2022-01-13T03:02:27.086269Z |
| pysec-2022-5 |
|
nltk is vulnerable to Inefficient Regular Expression Complexity | nltk | 2022-01-04T15:15:00Z | 2022-01-12T23:31:32.837727Z |
| pysec-2022-4 |
|
The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS r… | dnslib | 2022-01-10T14:12:00Z | 2022-01-10T17:03:19.898330Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32882 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.257263Z |
| gsd-2024-32881 | Danswer is the AI Assistant connected to company's docs, apps, and people. Danswer is vul… | 2024-04-20T05:02:00.282615Z |
| gsd-2024-32880 | pyload is an open-source Download Manager written in pure Python. An authenticated user c… | 2024-04-20T05:02:00.467829Z |
| gsd-2024-32879 | Python Social Auth is a social authentication/registration mechanism. Prior to version 5.… | 2024-04-20T05:02:00.519400Z |
| gsd-2024-32878 | Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulner… | 2024-04-20T05:02:00.218394Z |
| gsd-2024-32877 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.377294Z |
| gsd-2024-32876 | NewPipe is an Android app for video streaming written in Java. It supports exporting and … | 2024-04-20T05:02:00.367883Z |
| gsd-2024-32875 | Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3… | 2024-04-20T05:02:00.498945Z |
| gsd-2024-32874 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.489476Z |
| gsd-2024-32873 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.527327Z |
| gsd-2024-32872 | Umbraco workflow provides workflows for the Umbraco content management system. Prior to v… | 2024-04-20T05:02:00.440259Z |
| gsd-2024-32871 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.339472Z |
| gsd-2024-32870 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.461722Z |
| gsd-2024-32869 | Hono is a Web application framework that provides support for any JavaScript runtime. Pri… | 2024-04-20T05:02:00.323863Z |
| gsd-2024-32868 | ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One… | 2024-04-20T05:02:00.501884Z |
| gsd-2024-32867 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.506215Z |
| gsd-2024-32866 | Conform, a type-safe form validation library, allows the parsing of nested objects in the… | 2024-04-20T05:02:00.433052Z |
| gsd-2024-32865 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.350599Z |
| gsd-2024-32864 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.324062Z |
| gsd-2024-32863 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.260983Z |
| gsd-2024-32862 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.385050Z |
| gsd-2024-32861 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.368611Z |
| gsd-2024-32860 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.377542Z |
| gsd-2024-32859 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.397552Z |
| gsd-2024-32858 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.325615Z |
| gsd-2024-32857 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.291614Z |
| gsd-2024-32856 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.451904Z |
| gsd-2024-32855 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.339004Z |
| gsd-2024-32854 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.396455Z |
| gsd-2024-32853 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-20T05:02:00.444243Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-191533 | Malicious code in spellcheckers (PyPI) | 2025-11-15T18:49:10Z | 2026-01-28T19:13:29Z |
| MAL-2025-1512 | Malicious code in testresearchpackagedc (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:16Z |
| MAL-2024-12369 | Malicious code in wehaveatogether (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:16Z |
| MAL-2024-12365 | Malicious code in transformars (PyPI) | 2024-07-07T18:03:21Z | 2025-12-31T02:45:16Z |
| MAL-2024-12364 | Malicious code in tiktok-session-lite-sdk (PyPI) | 2024-08-22T22:25:03Z | 2025-12-31T02:45:16Z |
| MAL-2024-12357 | Malicious code in szn-url (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:16Z |
| MAL-2024-12356 | Malicious code in szn-search-mlops-common (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:16Z |
| MAL-2024-12351 | Malicious code in spy-ai (PyPI) | 2024-10-02T09:16:00Z | 2025-12-31T02:45:16Z |
| MAL-2024-12350 | Malicious code in springboot (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:16Z |
| MAL-2024-12348 | Malicious code in spiderai (PyPI) | 2024-10-02T09:16:00Z | 2026-01-30T00:34:33Z |
| MAL-2024-11746 | Malicious code in voto3 (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:16Z |
| MAL-2024-11738 | Malicious code in user-gen-agent-random (PyPI) | 2024-10-07T22:16:18Z | 2025-12-31T02:45:16Z |
| MAL-2024-11713 | Malicious code in spiderxr-ai (PyPI) | 2024-10-02T09:16:00Z | 2025-12-31T02:45:16Z |
| MAL-2024-11712 | Malicious code in spider-ai (PyPI) | 2024-10-02T09:16:00Z | 2025-12-31T02:45:16Z |
| MAL-2024-11704 | Malicious code in sendtowev (PyPI) | 2024-09-17T21:01:02Z | 2025-12-31T02:45:16Z |
| MAL-2024-10241 | Malicious code in youreallydontwantthispackage2131 (PyPI) | 2024-10-22T13:55:39Z | 2025-12-31T02:45:16Z |
| MAL-2024-10163 | Malicious code in solana-token (PyPI) | 2024-10-16T14:51:34Z | 2025-12-31T02:45:16Z |
| mal-2025-975 | Malicious code in reqzest (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-969 | Malicious code in reqiest (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-968 | Malicious code in reqeuts (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-966 | Malicious code in reqest (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-942 | Malicious code in langer-updater (PyPI) | 2024-12-16T10:40:50Z | 2025-12-31T02:45:15Z |
| mal-2025-935 | Malicious code in hugginglega (PyPI) | 2024-12-29T19:16:24Z | 2025-12-31T02:45:15Z |
| mal-2025-926 | Malicious code in flasl (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-923 | Malicious code in fflask (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| mal-2025-6973 | Malicious code in flatfox-api-python (PyPI) | 2025-08-18T18:31:35Z | 2025-12-31T02:45:15Z |
| mal-2025-6787 | Malicious code in flatfox-api (PyPI) | 2025-07-30T10:19:17Z | 2025-12-31T02:45:15Z |
| mal-2025-6579 | Malicious code in runway-python (PyPI) | 2025-07-31T19:16:19Z | 2025-12-31T02:45:15Z |
| mal-2025-6575 | Malicious code in rehttps (PyPI) | 2025-07-01T16:05:05Z | 2025-12-31T02:45:15Z |
| mal-2025-6566 | Malicious code in piprce (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-1234 | FreeType: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2017-04-27T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1233 | FreeType: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2017-04-24T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1232 | FreeType: Mehrere Schwachstellen | 2014-03-11T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1230 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1229 | ZScaler Client Connector für MacOS: Schwachstelle ermöglicht Privilegieneskalation | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1227 | Samsung Android: Mehrere Schwachstellen | 2025-06-03T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-1217 | Red Hat Enterprise Linux pymongo: Schwachstelle ermöglicht Denial of Service und Offenlegung | 2025-06-02T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0823 | Oracle Communications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0432 | libarchive: Schwachstelle ermöglicht Denial of Service | 2025-02-24T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0373 | SUSE Manager: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-13T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0360 | vim: Schwachstelle ermöglicht Denial of Service | 2025-02-12T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0329 | Intel Prozessoren: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0297 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-09T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0253 | Red Hat Enterprise Linux (Podman und Buildah): Schwachstelle ermöglicht Manipulation von Dateien | 2025-02-03T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0130 | vim: Schwachstelle ermöglicht Denial of Service | 2025-01-20T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0097 | git: Mehrere Schwachstellen ermöglichen Manipulation | 2025-01-14T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0054 | Red Hat Enterprise Linux (Jinja): Mehrere Schwachstellen ermöglichen Codeausführung | 2025-01-13T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0049 | vim: Schwachstelle ermöglicht Codeausführung | 2025-01-12T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2025-0038 | Red Hat Enterprise Linux (iperf): Schwachstelle ermöglicht Denial of Service | 2025-01-08T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3715 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-12-17T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3569 | Red Hat Enterprise Linux (python-tornado): Schwachstelle ermöglicht Denial of Service | 2024-12-01T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3565 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2024-11-28T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3560 | HAProxy: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-11-27T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3547 | Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2024-11-25T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3543 | Red Hat Enterprise Linux (PAM): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-11-25T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3426 | Intel Prozessor (Xeon): Mehrere Schwachstellen | 2024-11-12T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3337 | Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-11-04T23:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3142 | libarchive: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-10-09T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-3097 | vim: Schwachstelle ermöglicht Denial of Service | 2024-10-07T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| wid-sec-w-2024-2114 | cURL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-09-10T22:00:00.000+00:00 | 2025-06-03T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:0740 | Red Hat Security Advisory: OpenShift Container Platform 4.13.33 security and extras update | 2024-02-14T05:51:44+00:00 | 2026-01-29T21:06:44+00:00 |
| rhsa-2024:0843 | Red Hat Security Advisory: Release of OpenShift Serverless 1.31.1 | 2024-02-15T12:55:28+00:00 | 2026-01-29T21:06:43+00:00 |
| rhsa-2024:0832 | Red Hat Security Advisory: OpenShift Container Platform 4.12.50 security and extras update | 2024-02-21T00:30:34+00:00 | 2026-01-29T21:06:40+00:00 |
| rhsa-2024:0820 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.5 security and bug fix container updates | 2024-02-14T18:44:22+00:00 | 2026-01-29T21:06:40+00:00 |
| rhsa-2024:0735 | Red Hat Security Advisory: OpenShift Container Platform 4.14.12 bug fix and security update | 2024-02-13T17:23:36+00:00 | 2026-01-29T21:06:38+00:00 |
| rhsa-2024:0729 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.7.11 security and bug fix container update | 2024-02-07T20:48:50+00:00 | 2026-01-29T21:06:36+00:00 |
| rhsa-2024:0692 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps 1.10.2 security update | 2024-02-05T20:41:28+00:00 | 2026-01-29T21:06:36+00:00 |
| rhsa-2024:0641 | Red Hat Security Advisory: OpenShift Container Platform 4.14.11 security and extras update | 2024-02-07T16:41:29+00:00 | 2026-01-29T21:06:33+00:00 |
| rhsa-2024:0298 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.2 security and bug fix container updates | 2024-01-18T16:35:58+00:00 | 2026-01-29T21:06:29+00:00 |
| rhsa-2023:7197 | Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update | 2024-02-27T19:47:37+00:00 | 2026-01-29T21:06:28+00:00 |
| rhba-2024:3593 | Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.9.4 bug fixes and container updates | 2024-06-04T14:47:10+00:00 | 2026-01-29T21:06:26+00:00 |
| rhba-2024:3555 | Red Hat Bug Fix Advisory: multicluster engine for Kubernetes 2.4.5 bug fixes and container updates | 2024-06-03T19:43:56+00:00 | 2026-01-29T21:06:26+00:00 |
| rhba-2024:1793 | Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.10.1 bug fix advisory | 2024-04-11T21:04:22+00:00 | 2026-01-29T21:06:23+00:00 |
| rhba-2024:1775 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.2 bug fixes and container updates | 2024-04-10T22:19:22+00:00 | 2026-01-29T21:06:20+00:00 |
| rhsa-2025:16823 | Red Hat Security Advisory: openssh security update | 2025-09-26T01:05:14+00:00 | 2026-01-29T21:06:11+00:00 |
| rhsa-2025:0664 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.35.0 security update & enhancements | 2025-01-23T13:02:37+00:00 | 2026-01-29T21:06:09+00:00 |
| rhsa-2024:9615 | Red Hat Security Advisory: OpenShift Container Platform 4.16.23 bug fix and security update | 2024-11-20T00:46:32+00:00 | 2026-01-29T21:06:08+00:00 |
| rhsa-2024:8704 | Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 | 2024-12-02T14:11:34+00:00 | 2026-01-29T21:06:08+00:00 |
| rhsa-2024:8434 | Red Hat Security Advisory: OpenShift Container Platform 4.17.3 security update | 2024-10-29T17:50:43+00:00 | 2026-01-29T21:06:07+00:00 |
| rhsa-2024:8415 | Red Hat Security Advisory: OpenShift Container Platform 4.16.19 bug fix and security update | 2024-10-30T01:12:50+00:00 | 2026-01-29T21:06:06+00:00 |
| rhsa-2024:8040 | Red Hat Security Advisory: Cluster Observability Operator 0.4.1 | 2024-10-14T01:36:23+00:00 | 2026-01-29T21:06:05+00:00 |
| rhsa-2024:6824 | Red Hat Security Advisory: OpenShift Container Platform 4.16.14 security update | 2024-09-24T15:28:01+00:00 | 2026-01-29T21:06:04+00:00 |
| rhsa-2024:7548 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9 | 2024-10-16T00:34:49+00:00 | 2026-01-29T21:06:03+00:00 |
| rhsa-2024:7184 | Red Hat Security Advisory: OpenShift Container Platform 4.14.38 security update | 2024-10-03T11:01:15+00:00 | 2026-01-29T21:06:03+00:00 |
| rhsa-2024:6409 | Red Hat Security Advisory: OpenShift Container Platform 4.15.31 bug fix and security update | 2024-09-11T13:39:54+00:00 | 2026-01-29T21:05:59+00:00 |
| rhsa-2024:6221 | Red Hat Security Advisory: The Red Hat OpenShift Builds 1.1.0 General Availability | 2024-09-03T11:45:04+00:00 | 2026-01-29T21:05:59+00:00 |
| rhsa-2024:5422 | Red Hat Security Advisory: OpenShift Container Platform 4.16.8 bug fix and security update | 2024-08-20T15:21:42+00:00 | 2026-01-29T21:05:58+00:00 |
| rhsa-2024:5054 | Red Hat Security Advisory: OpenShift Virtualization 4.16.1 Images security update | 2024-08-06T16:21:05+00:00 | 2026-01-29T21:05:56+00:00 |
| rhsa-2024:5013 | Red Hat Security Advisory: The Red Hat OpenShift Builds Client 1.1.0 General Availability | 2024-08-05T15:40:28+00:00 | 2026-01-29T21:05:56+00:00 |
| rhsa-2024:4597 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update | 2024-07-17T18:49:17+00:00 | 2026-01-29T21:05:56+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-25-100-06 | Siemens SENTRON 7KT PAC1260 Data Manager | 2025-04-08T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-100-05 | Siemens Insights Hub Private Cloud | 2025-04-08T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-044-12 | Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor | 2025-02-11T00:00:00.000000Z | 2025-04-08T00:00:00.000000Z |
| icsa-25-105-08 | ABB M2M Gateway | 2025-04-07T10:30:00.000000Z | 2025-04-07T10:30:00.000000Z |
| icsa-25-100-09 | ABB Arctic Wireless Gateways | 2025-04-07T10:30:00.000000Z | 2025-04-07T10:30:00.000000Z |
| icsa-25-091-01 | Rockwell Automation Lifecycle Services with Veeam Backup and Replication | 2025-04-01T06:00:00.000000Z | 2025-04-01T06:00:00.000000Z |
| icsa-25-093-04 | ABB Low Voltage DC Drives and Power Controllers CODESYS RTS | 2025-03-26T00:30:00.000000Z | 2025-03-26T00:30:00.000000Z |
| icsa-25-093-03 | ABB ACS880 Drives Containing CODESYS RTS | 2025-03-26T00:30:00.000000Z | 2025-03-26T00:30:00.000000Z |
| icsa-25-093-02 | Hitachi Energy TRMTracker | 2025-03-25T13:30:00.000000Z | 2025-03-25T13:30:00.000000Z |
| icsa-24-331-04 | Hitachi Energy MicroSCADA Pro/X SYS600 (Update A) | 2024-08-27T12:30:00.000000Z | 2025-03-25T13:30:00.000000Z |
| icsa-25-084-04 | Inaba Denki Sangyo CHOCO TEI WATCHER mini | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-084-03 | Rockwell Automation 440G TLS-Z | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-084-02 | Rockwell Automation Verve Asset Manager | 2025-03-25T06:00:00.000000Z | 2025-03-25T06:00:00.000000Z |
| icsa-25-093-05 | B&R APROL | 2025-03-24T00:30:00.000000Z | 2025-03-24T00:30:00.000000Z |
| icsma-25-079-01 | Santesoft Sante DICOM Viewer Pro | 2025-03-20T06:00:00.000000Z | 2025-03-20T06:00:00.000000Z |
| icsa-25-079-04 | SMA Sunny Portal | 2025-03-20T06:00:00.000000Z | 2025-03-20T06:00:00.000000Z |
| icsa-25-077-02 | Rockwell Automation Lifecycle Services with VMware | 2025-03-18T06:00:00.000000Z | 2025-03-18T06:00:00.000000Z |
| icsa-25-077-01 | Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI) | 2025-03-18T06:00:00.000000Z | 2025-03-18T06:00:00.000000Z |
| icsma-25-072-01 | Philips Intellispace Cardiovascular (ISCV) | 2025-03-13T06:00:00.000000Z | 2025-03-13T06:00:00.000000Z |
| icsa-25-072-12 | Sungrow iSolarCloud Android App, WiNet Firmware | 2025-03-13T06:00:00.000000Z | 2025-03-13T06:00:00.000000Z |
| icsa-25-070-02 | Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool | 2025-03-11T06:00:00.000000Z | 2025-03-11T06:00:00.000000Z |
| icsa-25-077-04 | Schneider Electric EcoStruxure Panel Server | 2025-03-11T04:00:00.000000Z | 2025-03-11T04:00:00.000000Z |
| icsa-25-077-03 | Schneider Electric EcoStruxure Power Automation System | 2025-03-11T04:00:00.000000Z | 2025-03-11T04:00:00.000000Z |
| icsa-25-084-01 | ABB RMC-100 | 2025-03-11T00:30:00.000000Z | 2025-03-11T00:30:00.000000Z |
| icsa-25-072-10 | Siemens SINEMA Remote Connect Client | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-07 | Siemens SCALANCE M-800 and SC-600 Families | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-05 | Siemens SINAMICS S200 | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-25-072-02 | Siemens SINEMA Remote Connect Server | 2025-03-11T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-21-103-05 | Siemens Nucleus Products IPv6 Stack | 2021-04-13T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| icsa-19-318-01 | Siemens Mentor Nucleus Networking Module | 2019-11-12T00:00:00.000000Z | 2025-03-11T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-ucm-csrf-jrkp4ent | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-ucm-csrf-jrKP4eNT | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-imp-sqlinj-grpuuqej | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-imp-sqlinj-GrpUuQEJ | Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-xss-6mce4kpf | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-xss-6MCe4kPF | Cisco Unified Communications Products Cross-Site Scripting Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-arb-write-74qzruuu | Cisco Unified Communications Products Arbitrary File Write Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-cucm-arb-write-74QzruUU | Cisco Unified Communications Products Arbitrary File Write Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-ce-roomos-dos-c65x2qf2 | Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-ce-roomos-dos-c65x2Qf2 | Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability | 2022-04-20T16:00:00+00:00 | 2022-04-20T16:00:00+00:00 |
| cisco-sa-bgpevpn-zwtrtpbb | Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-19T14:12:27+00:00 |
| cisco-sa-bgpevpn-zWTRtPBb | Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-19T14:12:27+00:00 |
| cisco-sa-java-spring-scf-rce-dqrhhjxh | Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 | 2022-04-01T23:45:00+00:00 | 2022-04-15T15:31:28+00:00 |
| cisco-sa-java-spring-scf-rce-DQrHhJxH | Vulnerability in Spring Cloud Function Framework Affecting Cisco Products: March 2022 | 2022-04-01T23:45:00+00:00 | 2022-04-15T15:31:28+00:00 |
| cisco-sa-wlc-auth-bypass-jrnhv4ff | Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-wlc-auth-bypass-JRNhV4fF | Cisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-webuiapi-inj-nyrq92od | Cisco IOS XE Software Web UI API Injection Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-webuiapi-inj-Nyrq92Od | Cisco IOS XE Software Web UI API Injection Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-csrf-rxql4txr | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vmanage-csrf-rxQL4tXR | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vman-infodis-73shjneq | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vman-infodis-73sHJNEq | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vedge-dos-jervm4bb | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-vedge-dos-jerVm4bB | Cisco SD-WAN vEdge Routers Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-vman-tejfpbsl | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-vman-tEJFpBSL | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-qfp-ipsec-gqmqvtqv | Cisco IOS XE Software IPSec Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-qfp-ipsec-GQmqvtqV | Cisco IOS XE Software IPSec Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-ncossh-dos-zakfodq8 | Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| cisco-sa-ncossh-dos-ZAkfOdq8 | Cisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability | 2022-04-13T16:00:00+00:00 | 2022-04-13T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-40165 | media: nxp: imx8-isi: m2m: Fix streaming cleanup on release | 2025-11-02T00:00:00.000Z | 2025-11-13T01:02:47.000Z |
| msrc_cve-2025-40172 | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | 2025-11-02T00:00:00.000Z | 2025-11-13T01:02:30.000Z |
| msrc_cve-2025-37928 | dm-bufio: don't schedule in atomic context | 2025-05-02T00:00:00.000Z | 2025-11-12T01:02:14.000Z |
| msrc_cve-2023-53105 | net/mlx5e: Fix cleanup null-ptr deref on encap lock | 2025-05-02T00:00:00.000Z | 2025-11-12T01:01:38.000Z |
| msrc_cve-2022-49833 | btrfs: zoned: clone zoned device info when cloning a device | 2025-05-02T00:00:00.000Z | 2025-11-12T01:01:26.000Z |
| msrc_cve-2022-49829 | drm/scheduler: fix fence ref counting | 2025-05-02T00:00:00.000Z | 2025-11-12T01:01:21.000Z |
| msrc_cve-2025-62453 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62452 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62449 | Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62222 | Agentic AI and Visual Studio Code Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62219 | Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62218 | Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62217 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62216 | Microsoft Office Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62215 | Windows Kernel Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62214 | Visual Studio Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62213 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62211 | Dynamics 365 Field Service (online) Spoofing Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62210 | Dynamics 365 Field Service (online) Spoofing Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62206 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62205 | Microsoft Office Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62204 | Microsoft SharePoint Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62203 | Microsoft Excel Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62202 | Microsoft Excel Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62201 | Microsoft Excel Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62200 | Microsoft Excel Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-62199 | Microsoft Office Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-60728 | Microsoft Excel Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-60727 | Microsoft Excel Remote Code Execution Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| msrc_cve-2025-60726 | Microsoft Excel Information Disclosure Vulnerability | 2025-11-11T08:00:00.000Z | 2025-11-11T08:00:00.000Z |
| ID | Description | Updated |
|---|---|---|
| var-201211-0370 | Buffer overflow in Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on … | 2024-07-23T19:27:47.083000Z |
| var-200803-0013 | Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other vers… | 2024-07-23T19:27:47.167000Z |
| var-201408-0082 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.… | 2024-07-23T19:27:34.786000Z |
| var-201008-0306 | Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in th… | 2024-07-23T19:27:33.093000Z |
| var-202002-0749 | Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x… | 2024-07-23T19:27:31.732000Z |
| var-200703-0029 | Stack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple… | 2024-07-23T19:27:29.688000Z |
| var-200505-0310 | The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse … | 2024-07-23T19:27:29.558000Z |
| var-201310-0614 | Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, J… | 2024-07-23T19:26:54.505000Z |
| var-200904-0818 | Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 a… | 2024-07-23T19:26:48.956000Z |
| var-200702-0471 | Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allow… | 2024-07-23T19:26:48.591000Z |
| var-200106-0168 | Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows lo… | 2024-07-23T19:26:48.468000Z |
| var-202201-0414 | addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. Ex… | 2024-07-23T19:26:42.515000Z |
| var-201302-0149 | Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.… | 2024-07-23T19:26:42.200000Z |
| var-201912-0639 | Multiple memory corruption issues were addressed with improved memory handling. This issu… | 2024-07-23T19:26:41.209000Z |
| var-200106-0080 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGat… | 2024-07-23T19:26:39.063000Z |
| var-201904-1426 | A memory corruption issue was addressed with improved memory handling. This issue affecte… | 2024-07-23T19:26:37.206000Z |
| var-201108-0147 | Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before … | 2024-07-23T19:26:36.816000Z |
| var-201710-0206 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key… | 2024-07-23T19:26:04.525000Z |
| var-202005-1051 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identi… | 2024-07-23T19:26:02.990000Z |
| var-200102-0021 | WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of s… | 2024-07-23T19:26:02.921000Z |
| var-201108-0183 | Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and … | 2024-07-23T19:25:55.922000Z |
| var-202005-0473 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. SQLite… | 2024-07-23T19:25:54.896000Z |
| var-201912-0511 | A logic issue existed in the handling of document loads. This issue was addressed with im… | 2024-07-23T19:25:54.984000Z |
| var-200906-0598 | Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in… | 2024-07-23T19:25:52.060000Z |
| var-201302-0223 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-23T19:25:21.579000Z |
| var-202201-0395 | Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for con… | 2024-07-23T19:25:17.721000Z |
| var-201605-0145 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly… | 2024-07-23T19:25:17.908000Z |
| var-201302-0304 | Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on … | 2024-07-23T19:25:13.753000Z |
| var-200801-0204 | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other… | 2024-07-23T19:25:13.959000Z |
| var-202110-1706 | The Bzip2 decompression decoder function doesn't allow setting size restrictions on the d… | 2024-07-23T19:25:12.310000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2017-007582 | jwt-scala fails to verify token signatures | 2017-09-26T15:37+09:00 | 2018-03-07T12:23+09:00 |
| jvndb-2017-000225 | Cybozu Office fails to restrict access permissions | 2017-10-11T14:28+09:00 | 2018-03-07T12:21+09:00 |
| jvndb-2015-000181 | Gurunavi App for iOS fails to verify SSL server certificates | 2015-11-17T14:21+09:00 | 2018-03-07T12:17+09:00 |
| jvndb-2017-000226 | HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries | 2017-10-11T16:43+09:00 | 2018-03-07T12:12+09:00 |
| jvndb-2017-000228 | Installer of HIBUN Confidential File Viewer may insecurely load Dynamic Link Libraries and invoke executable files | 2017-10-11T16:43+09:00 | 2018-03-07T12:09+09:00 |
| jvndb-2017-000227 | HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries | 2017-10-11T16:43+09:00 | 2018-03-07T12:06+09:00 |
| jvndb-2018-001389 | XXE Vulnerability in Hitachi Device Manager | 2018-02-14T14:59+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2018-001388 | Multiple Vulnerabilities in Hitachi Command Suite | 2018-02-14T14:58+09:00 | 2018-03-01T15:20+09:00 |
| jvndb-2015-000065 | "Honda Moto LINC" App for Android fails to verify SSL server certificates | 2015-05-15T12:23+09:00 | 2018-02-28T14:36+09:00 |
| jvndb-2017-000215 | Installer and self-extracting archive containing the installer of "Security Setup Tool" may insecurely load Dynamic Link Libraries | 2017-08-25T14:50+09:00 | 2018-02-28T14:28+09:00 |
| jvndb-2017-000204 | Multiple vulnerabilities in "Dokodemo eye Smart HD" SCR02HD | 2017-08-23T15:36+09:00 | 2018-02-28T14:28+09:00 |
| jvndb-2017-000222 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2017-09-11T15:19+09:00 | 2018-02-28T14:12+09:00 |
| jvndb-2017-000217 | Backdoor access issue in Wi-Fi STATION L-02F | 2017-09-12T14:34+09:00 | 2018-02-28T14:11+09:00 |
| jvndb-2017-000218 | Wi-Fi STATION L-02F fails to restrict access permissions | 2017-09-12T14:35+09:00 | 2018-02-28T14:09+09:00 |
| jvndb-2017-000214 | Installer of "Flets Install Tool" may insecurely load Dynamic Link Libraries | 2017-08-25T15:02+09:00 | 2018-02-28T14:07+09:00 |
| jvndb-2017-000212 | Installer of "Flets Azukeru for Windows Auto Backup Tool" may insecurely load Dynamic Link Libraries | 2017-08-25T15:02+09:00 | 2018-02-28T14:07+09:00 |
| jvndb-2017-000210 | Installer of "Security Kinou Mihariban" may insecurely load Dynamic Link Libraries | 2017-08-25T14:50+09:00 | 2018-02-28T14:04+09:00 |
| jvndb-2017-000205 | The installer of the Ministry of Justice [The electronic authentication system based on the commercial registration system "The CRCA user's Software"] may insecurely load Dynamic Link Libraries | 2017-08-23T15:24+09:00 | 2018-02-28T14:04+09:00 |
| jvndb-2017-000221 | Installer of FENCE-Explorer may insecurely load Dynamic Link Libraries and invoke executable files | 2017-09-11T14:55+09:00 | 2018-02-28T13:58+09:00 |
| jvndb-2017-000208 | WordPress plugin "BackupGuard" vulnerable to cross-site scripting | 2017-08-24T14:03+09:00 | 2018-02-28T12:26+09:00 |
| jvndb-2017-000209 | Installer of Optimal Guard may insecurely load Dynamic Link Libraries | 2017-08-25T14:50+09:00 | 2018-02-28T12:23+09:00 |
| jvndb-2017-000220 | Multiple vulnerabilities in CG-WLR300NM | 2017-09-08T14:14+09:00 | 2018-02-28T12:21+09:00 |
| jvndb-2017-000207 | Multiple vulnerabilities in SEO Panel | 2017-08-24T14:03+09:00 | 2018-02-28T12:19+09:00 |
| jvndb-2017-000197 | Installer of Photo Collection PC Software provided by NTT DOCOMO, INC. may insecurely load Dynamic Link Libraries and invoke executable files | 2017-08-22T12:34+09:00 | 2018-02-28T12:13+09:00 |
| jvndb-2017-000206 | Multiple vulnerabilities in WebCalendar | 2017-08-24T14:03+09:00 | 2018-02-28T12:07+09:00 |
| jvndb-2016-006114 | The Bank of Tokyo-Mitsubishi UFJ for Android vulnerable to SSL/TLS downgrade attack | 2016-12-08T11:33+09:00 | 2018-02-28T11:47+09:00 |
| jvndb-2017-000203 | Multiple vulnerabilities in baserCMS | 2017-08-25T14:50+09:00 | 2018-02-28T11:45+09:00 |
| jvndb-2017-000216 | Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries | 2017-08-25T14:52+09:00 | 2018-02-28T11:39+09:00 |
| jvndb-2017-001053 | Mis-configuration of Apache Velocity template engine used to send emails in GigaCC OFFICE | 2017-01-23T17:57+09:00 | 2018-02-28T11:35+09:00 |
| jvndb-2017-001054 | Arbitrary file upload vulnerability in GigaCC OFFICE | 2017-01-23T17:57+09:00 | 2018-02-28T11:25+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20584-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20583-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20582-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20581-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20580-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20579-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:20578-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-08-25T12:45:12Z | 2025-08-25T12:45:12Z |
| suse-su-2025:02977-1 | Security update for kubernetes1.18 | 2025-08-25T12:18:12Z | 2025-08-25T12:18:12Z |
| suse-su-2025:20617-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20616-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20615-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20614-1 | Security update for kernel-livepatch-MICRO-6-0_Update_7 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20613-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20612-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20574-1 | Security update for kernel-livepatch-MICRO-6-0_Update_9 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20573-1 | Security update for kernel-livepatch-MICRO-6-0_Update_7 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20572-1 | Security update for kernel-livepatch-MICRO-6-0_Update_5 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20571-1 | Security update for kernel-livepatch-MICRO-6-0_Update_10 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20570-1 | Security update for kernel-livepatch-MICRO-6-0_Update_8 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20569-1 | Security update for kernel-livepatch-MICRO-6-0_Update_6 | 2025-08-25T12:16:44Z | 2025-08-25T12:16:44Z |
| suse-su-2025:20611-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-08-25T12:16:43Z | 2025-08-25T12:16:43Z |
| suse-su-2025:20610-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-08-25T12:16:43Z | 2025-08-25T12:16:43Z |
| suse-su-2025:20576-1 | Security update for kernel-livepatch-MICRO-6-0_Update_3 | 2025-08-25T12:16:43Z | 2025-08-25T12:16:43Z |
| suse-su-2025:20575-1 | Security update for kernel-livepatch-MICRO-6-0_Update_2 | 2025-08-25T12:16:43Z | 2025-08-25T12:16:43Z |
| suse-su-2025:20568-1 | Security update for kernel-livepatch-MICRO-6-0_Update_4 | 2025-08-25T12:16:43Z | 2025-08-25T12:16:43Z |
| suse-su-2025:20601-1 | Security update for the Linux Kernel | 2025-08-25T11:19:19Z | 2025-08-25T11:19:19Z |
| suse-su-2025:02975-1 | Security update for cmake3 | 2025-08-25T10:42:11Z | 2025-08-25T10:42:11Z |
| suse-su-2025:02974-1 | Security update for net-tools | 2025-08-25T09:23:53Z | 2025-08-25T09:23:53Z |
| suse-su-2025:02973-1 | Security update for webkit2gtk3 | 2025-08-25T08:49:16Z | 2025-08-25T08:49:16Z |
| suse-su-2025:02972-1 | Security update for ffmpeg-4 | 2025-08-25T08:46:43Z | 2025-08-25T08:46:43Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2025:14644-1 | govulncheck-vulndb-0.0.20250109T194159-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14643-1 | dcmtk-3.6.9-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14642-1 | SDL2_sound-devel-2.0.4-1.1 on GA media | 2025-01-14T00:00:00Z | 2025-01-14T00:00:00Z |
| opensuse-su-2025:14641-1 | rclone-1.69.0-1.1 on GA media | 2025-01-13T00:00:00Z | 2025-01-13T00:00:00Z |
| opensuse-su-2025:14640-1 | kepler-0.7.11-2.1 on GA media | 2025-01-13T00:00:00Z | 2025-01-13T00:00:00Z |
| opensuse-su-2025:14639-1 | yq-4.44.6-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14638-1 | valkey-8.0.2-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14637-1 | python311-mistune-3.1.0-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14636-1 | proftpd-1.3.8c-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14635-1 | perl-Module-ScanDeps-1.370.0-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14634-1 | operator-sdk-1.39.0-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14633-1 | grafana-11.3.0-4.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14632-1 | frr-10.2.1-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14631-1 | dpdk-23.11.1-4.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14630-1 | MozillaFirefox-134.0-1.1 on GA media | 2025-01-12T00:00:00Z | 2025-01-12T00:00:00Z |
| opensuse-su-2025:14629-1 | chromedriver-131.0.6778.264-1.1 on GA media | 2025-01-10T00:00:00Z | 2025-01-10T00:00:00Z |
| opensuse-su-2025:14628-1 | python311-slixmpp-1.8.6-1.1 on GA media | 2025-01-09T00:00:00Z | 2025-01-09T00:00:00Z |
| opensuse-su-2025:14627-1 | logback-1.2.11-4.1 on GA media | 2025-01-09T00:00:00Z | 2025-01-09T00:00:00Z |
| opensuse-su-2025:14626-1 | kubo-0.32.1-1.1 on GA media | 2025-01-09T00:00:00Z | 2025-01-09T00:00:00Z |
| opensuse-su-2025:14625-1 | gstreamer-plugins-base-1.24.11-1.1 on GA media | 2025-01-09T00:00:00Z | 2025-01-09T00:00:00Z |
| opensuse-su-2025:14624-1 | govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media | 2025-01-09T00:00:00Z | 2025-01-09T00:00:00Z |
| opensuse-su-2025:0008-1 | Security update for python-django-ckeditor | 2025-01-07T17:02:06Z | 2025-01-07T17:02:06Z |
| opensuse-su-2025:0004-1 | Security update for rubygem-json-jwt | 2025-01-07T17:01:48Z | 2025-01-07T17:01:48Z |
| opensuse-su-2025:0003-1 | Security update for etcd | 2025-01-07T15:04:12Z | 2025-01-07T15:04:12Z |
| opensuse-su-2025:14623-1 | tomcat10-10.1.34-1.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| opensuse-su-2025:14622-1 | tomcat-9.0.98-1.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| opensuse-su-2025:14621-1 | libruby3_4-3_4-3.4.1-1.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| opensuse-su-2025:14620-1 | libopenjp2-7-2.5.3-2.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| opensuse-su-2025:14619-1 | firefox-esr-128.6.0-1.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| opensuse-su-2025:14618-1 | apptainer-1.3.6-2.1 on GA media | 2025-01-07T00:00:00Z | 2025-01-07T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-30262 | Dell PowerScale OneFS资源管理错误漏洞 | 2024-12-13 | 2025-12-08 |
| cnvd-2025-30261 | Dell PowerScale OneFS参数指定不正确漏洞 | 2024-12-13 | 2025-12-08 |
| cnvd-2025-30260 | WordPress插件CP Contact Form with PayPal存在未明漏洞 | 2025-11-25 | 2025-12-08 |
| cnvd-2025-30259 | WordPress插件Accessibility Toolkit by WebYes存在未明漏洞 | 2025-11-25 | 2025-12-08 |
| cnvd-2025-30258 | WordPress插件YouTube Subscribe跨站脚本漏洞 | 2025-11-27 | 2025-12-08 |
| cnvd-2025-30257 | WordPress插件Zweb Social Mobile跨站脚本漏洞 | 2025-11-27 | 2025-12-08 |
| cnvd-2025-30256 | Huawei HarmonyOS file management模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30255 | Huawei HarmonyOS App Lock模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30254 | Huawei HarmonyOS screen recording framework模块内存错误引用漏洞（CNVD-2025-30254） | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30253 | Huawei HarmonyOS file management模块权限控制漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30252 | Huawei HarmonyOS video-related system service模块拒绝服务漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30251 | Huawei HarmonyOS screen recording framework模块内存错误引用漏洞 | 2025-12-03 | 2025-12-08 |
| cnvd-2025-30213 | NVIDIA TAO资源加载漏洞 | 2025-12-04 | 2025-12-05 |
| cnvd-2025-30212 | Courier Management System search-edit.php文件SQL注入漏洞 | 2025-11-20 | 2025-12-05 |
| cnvd-2025-30211 | Courier Management System add-new-officer.php文件SQL注入漏洞 | 2025-11-20 | 2025-12-05 |
| cnvd-2025-30210 | Nero Social Networking Site profilefriends.php文件SQL注入漏洞 | 2025-11-20 | 2025-12-05 |
| cnvd-2025-30209 | Nero Social Networking Site friendsphoto.php文件SQL注入漏洞 | 2025-11-20 | 2025-12-05 |
| cnvd-2025-30208 | Blog Site admin.php文件授权不当漏洞 | 2025-11-27 | 2025-12-05 |
| cnvd-2025-30207 | Blog Site blog.php文件SQL注入漏洞 | 2025-11-27 | 2025-12-05 |
| cnvd-2025-30206 | Devolutions Server证书验证不当漏洞 | 2025-10-21 | 2025-12-05 |
| cnvd-2025-30171 | WordPress Import WP plugin信息泄露漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30170 | WordPress I Order Terms plugin跨站请求伪造漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30169 | WordPress HT Mega plugin跨站脚本漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30168 | WordPress Gutenverse plugin缺少授权漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30167 | WordPress Gutenverse Form plugin缺少授权漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30166 | WordPress EchBay Admin Security plugin跨站脚本漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30165 | WordPress Display Pages Shortcode plugin跨站脚本漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30164 | WordPress Custom Post Type plugin跨站请求伪造漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30163 | WordPress Custom Order Numbers for WooCommerce plugin缺少授权漏洞 | 2025-11-25 | 2025-12-05 |
| cnvd-2025-30162 | WordPress Checkbox plugin未经授权的数据丢失漏洞 | 2025-11-25 | 2025-12-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0541 | Vulnérabilité dans Centreon Map | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0540 | Multiples vulnérabilités dans les produits Citrix | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| CERTFR-2025-AVI-0538 | Multiples vulnérabilités dans VMware Tanzu | 2025-06-26T00:00:00.000000 | 2025-06-26T00:00:00.000000 |
| certfr-2025-avi-0537 | Multiples vulnérabilités dans GitLab | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0536 | Multiples vulnérabilités dans les produits Mozilla | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0535 | Vulnérabilité dans VMware Tanzu | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0534 | Multiples vulnérabilités dans Google Chrome | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0533 | Multiples vulnérabilités dans Elastic Kibana | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| CERTFR-2025-AVI-0537 | Multiples vulnérabilités dans GitLab | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| CERTFR-2025-AVI-0536 | Multiples vulnérabilités dans les produits Mozilla | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| CERTFR-2025-AVI-0535 | Vulnérabilité dans VMware Tanzu | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| CERTFR-2025-AVI-0534 | Multiples vulnérabilités dans Google Chrome | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| CERTFR-2025-AVI-0533 | Multiples vulnérabilités dans Elastic Kibana | 2025-06-25T00:00:00.000000 | 2025-06-25T00:00:00.000000 |
| certfr-2025-avi-0532 | Multiples vulnérabilités dans les produits Splunk | 2025-06-24T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| CERTFR-2025-AVI-0532 | Multiples vulnérabilités dans les produits Splunk | 2025-06-24T00:00:00.000000 | 2025-06-24T00:00:00.000000 |
| certfr-2025-avi-0531 | Vulnérabilité dans Bitdefender SecurePass | 2025-06-23T00:00:00.000000 | 2025-06-23T00:00:00.000000 |
| CERTFR-2025-AVI-0531 | Vulnérabilité dans Bitdefender SecurePass | 2025-06-23T00:00:00.000000 | 2025-06-23T00:00:00.000000 |
| certfr-2025-avi-0530 | Multiples vulnérabilités dans les produits IBM | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0528 | Multiples vulnérabilités dans les produits Citrix | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0527 | Vulnérabilité dans les produits Microsoft | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| certfr-2025-avi-0526 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| CERTFR-2025-AVI-0530 | Multiples vulnérabilités dans les produits IBM | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| CERTFR-2025-AVI-0529 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| CERTFR-2025-AVI-0528 | Multiples vulnérabilités dans les produits Citrix | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| CERTFR-2025-AVI-0527 | Vulnérabilité dans les produits Microsoft | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |
| CERTFR-2025-AVI-0526 | Multiples vulnérabilités dans Microsoft Edge | 2025-06-20T00:00:00.000000 | 2025-06-20T00:00:00.000000 |