Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-24358 |
8.8 (3.1)
|
WordPress Quiz And Survey Master plugin <= 10.3.3 - Br… |
ExpressTech Systems |
Quiz And Survey Master |
2026-01-22T16:52:44.066Z | 2026-01-26T18:54:28.907Z |
| CVE-2026-24368 |
8.8 (3.1)
|
WordPress The Grid plugin < 2.8.0 - Broken Access Cont… |
Theme-one |
The Grid |
2026-01-22T16:52:45.439Z | 2026-01-26T18:54:22.753Z |
| CVE-2026-24371 |
9.8 (3.1)
|
WordPress BA Book Everything plugin <= 1.8.16 - Broken… |
bookingalgorithms |
BA Book Everything |
2026-01-22T16:52:45.641Z | 2026-01-26T18:54:16.806Z |
| CVE-2026-24377 |
7.5 (3.1)
|
WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Da… |
POSIMYTH |
Nexter Blocks |
2026-01-22T16:52:46.045Z | 2026-01-26T18:54:10.921Z |
| CVE-2026-24379 |
9.1 (3.1)
|
WordPress WP Job Portal plugin <= 2.4.3 - Insecure Dir… |
wpjobportal |
WP Job Portal |
2026-01-22T16:52:46.322Z | 2026-01-26T18:54:05.541Z |
| CVE-2026-24380 |
8.8 (3.1)
|
WordPress EventPrime plugin <= 4.2.8.0 - Broken Access… |
Metagauss |
EventPrime |
2026-01-22T16:52:46.530Z | 2026-01-26T18:53:58.695Z |
| CVE-2026-24430 |
8.2 (4.0)
|
Tenda W30E V2 HTTP Responses Expose Plaintext Credentials |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:39:14.924Z | 2026-01-26T18:51:11.089Z |
| CVE-2026-24656 |
N/A
|
Apache Karaf: Decanter log-socket collector has deseri… |
Apache Software Foundation |
Apache Karaf |
2026-01-26T09:41:24.356Z | 2026-01-26T18:35:51.514Z |
| CVE-2025-14797 |
5.4 (3.1)
|
Same Category Posts <= 1.1.19 - Authenticated (Author+… |
kometschuh |
Same Category Posts |
2026-01-24T07:26:43.936Z | 2026-01-26T18:20:12.658Z |
| CVE-2025-14985 |
6.4 (3.1)
|
Alpha Blocks <= 1.5.0 - Authenticated (Contributor+) S… |
robiulawal40 |
Alpha Blocks |
2026-01-24T07:26:44.302Z | 2026-01-26T18:19:43.352Z |
| CVE-2026-1103 |
5.4 (3.1)
|
AIKTP <= 5.0.04 - Missing Authorization to Authenticat… |
aiktp |
AIKTP |
2026-01-24T07:26:44.703Z | 2026-01-26T18:19:14.889Z |
| CVE-2025-14629 |
5.3 (3.1)
|
Alchemist Ajax Upload <= 1.1 - Missing Authorization t… |
tandubhai |
Alchemist Ajax Upload |
2026-01-24T07:26:45.155Z | 2026-01-26T18:18:54.374Z |
| CVE-2026-1097 |
6.4 (3.1)
|
ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Cont… |
themeruby |
ThemeRuby Multi Authors – Assign Multiple Writers to Posts |
2026-01-24T07:26:47.342Z | 2026-01-26T18:18:23.495Z |
| CVE-2025-14609 |
5.3 (3.1)
|
Wise Analytics <= 1.1.9 - Missing Authorization to Una… |
marcinlawrowski |
Wise Analytics |
2026-01-24T07:26:47.717Z | 2026-01-26T18:17:35.427Z |
| CVE-2025-27821 |
N/A
|
HDFS native client: Out of bounds write in URI parser … |
Apache Software Foundation |
HDFS native client |
2026-01-26T09:44:13.532Z | 2026-01-26T18:13:19.241Z |
| CVE-2026-24551 |
5.4 (3.1)
|
WordPress Monetag Official Plugin plugin <= 1.1.3 - Br… |
monetagwp |
Monetag Official Plugin |
2026-01-23T14:28:53.243Z | 2026-01-26T18:09:59.697Z |
| CVE-2026-1099 |
6.4 (3.1)
|
Administrative Shortcodes <= 0.3.4 - Authenticated (Co… |
shazdeh |
Administrative Shortcodes |
2026-01-24T07:26:48.103Z | 2026-01-26T18:07:08.791Z |
| CVE-2025-13676 |
6.1 (3.1)
|
JustClick registration plugin <= 0.1 - Reflected Cross… |
ostin654 |
JustClick registration plugin |
2026-01-24T07:26:48.445Z | 2026-01-26T18:06:38.909Z |
| CVE-2026-1088 |
4.3 (3.1)
|
Login Page Editor <= 1.2 - Cross-Site Request Forgery … |
zero1zerouk |
Login Page Editor |
2026-01-24T07:26:48.803Z | 2026-01-26T18:06:19.277Z |
| CVE-2016-15057 |
N/A
|
Apache Continuum: Command injection leading to RCE |
Apache Software Foundation |
Apache Continuum |
2026-01-26T11:29:03.524Z | 2026-01-26T18:06:06.158Z |
| CVE-2026-0800 |
7.2 (3.1)
|
User Submitted Posts – Enable Users to Submit Posts fr… |
specialk |
User Submitted Posts – Enable Users to Submit Posts from the Front End |
2026-01-24T08:26:32.494Z | 2026-01-26T18:05:59.221Z |
| CVE-2025-15516 |
4.3 (3.1)
|
All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Autho… |
plugins360 |
All-in-One Video Gallery |
2026-01-24T08:26:33.155Z | 2026-01-26T18:05:35.718Z |
| CVE-2025-14907 |
4.3 (3.1)
|
Moderate Selected Posts <= 1.4 - Cross-Site Request Fo… |
hallsofmontezuma |
Moderate Selected Posts |
2026-01-24T08:26:33.683Z | 2026-01-26T18:05:17.950Z |
| CVE-2026-1266 |
4.4 (3.1)
|
Postalicious <= 3.0.1 - Authenticated (Administrator+)… |
neop |
Postalicious |
2026-01-24T08:26:34.094Z | 2026-01-26T18:04:35.619Z |
| CVE-2026-0687 |
4.3 (3.1)
|
Meta-box GalleryMeta <= 3.0.1 - Missing Authorization … |
shahinurislam |
Meta-box GalleryMeta |
2026-01-24T08:26:34.512Z | 2026-01-26T18:01:57.710Z |
| CVE-2026-1302 |
4.4 (3.1)
|
Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+… |
shahinurislam |
Meta-box GalleryMeta |
2026-01-24T08:26:35.418Z | 2026-01-26T18:00:34.990Z |
| CVE-2026-0633 |
3.7 (3.1)
|
MetForm – Contact Form, Survey, Quiz, & Custom Form Bu… |
roxnor |
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor |
2026-01-24T08:26:35.777Z | 2026-01-26T17:47:55.740Z |
| CVE-2026-1098 |
6.4 (3.1)
|
CM CSS Columns <= 1.2.1 - Authenticated (Contributor+)… |
codemacher |
CM CSS Columns |
2026-01-24T08:26:36.215Z | 2026-01-26T17:47:29.505Z |
| CVE-2026-24553 |
4.3 (3.1)
|
WordPress Fraud Prevention For Woocommerce plugin <= 2… |
Dotstore |
Fraud Prevention For Woocommerce |
2026-01-23T14:28:53.445Z | 2026-01-26T17:47:19.606Z |
| CVE-2025-13139 |
4.3 (3.1)
|
SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.2… |
devsoftbaltic |
SurveyJS: Drag & Drop Form Builder |
2026-01-24T09:08:05.683Z | 2026-01-26T17:46:58.712Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-39458 |
8.1 (3.1)
|
WordPress Foton theme <= 2.5.2 - Local File Inclusion … |
Mikado-Themes |
Foton |
2025-05-19T18:47:55.062Z | 2025-05-19T19:34:36.694Z |
| CVE-2025-39590 |
6.5 (3.1)
|
WordPress Essential Addons for Elementor <= 6.1.9 - Cr… |
WPDeveloper |
Essential Addons for Elementor |
2025-04-16T12:44:20.971Z | 2025-04-16T14:31:36.811Z |
| CVE-2026-1415 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC media_export.c gf_media_export_webvtt_metadata nu… |
n/a |
GPAC |
2026-01-26T02:32:08.374Z | 2026-01-26T15:30:07.071Z |
| CVE-2025-39589 |
4.3 (3.1)
|
WordPress Essential Addons for Elementor <= 6.1.9 - Se… |
WPDeveloper |
Essential Addons for Elementor |
2025-04-16T12:44:21.605Z | 2025-04-16T14:31:21.052Z |
| CVE-2026-1416 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC filedump.c DumpMovieInfo null pointer dereference |
n/a |
GPAC |
2026-01-26T03:02:07.336Z | 2026-01-26T15:26:47.761Z |
| CVE-2026-24549 |
4.3 (3.1)
|
WordPress GeoDirectory plugin < 2.8.150 - Cross Site R… |
Paolo |
GeoDirectory |
2026-01-23T14:28:52.855Z | 2026-01-28T14:24:26.166Z |
| CVE-2026-1467 |
5.8 (3.1)
|
Libsoup: libsoup: http header injection via specially … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-27T09:17:44.535Z | 2026-01-28T14:25:32.314Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-1417 |
4.8 (4.0)
3.3 (3.1)
3.3 (3.0)
|
GPAC filedump.c dump_isom_rtp null pointer dereference |
n/a |
GPAC |
2026-01-26T03:32:07.165Z | 2026-01-26T15:22:24.412Z |
| CVE-2025-13053 |
7 (4.0)
|
A missing encryption of sensitive data vulnerability w… |
ASUSTOR |
ADM |
2025-12-12T02:46:08.403Z | 2025-12-12T18:16:46.902Z |
| CVE-2025-13052 |
7 (4.0)
|
An improper certificates validation vulnerability was … |
ASUSTOR |
ADM |
2025-12-12T02:30:35.812Z | 2025-12-12T18:17:24.167Z |
| CVE-2026-1418 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
GPAC SRT Subtitle Import text_to_bifs.c gf_text_import… |
n/a |
GPAC |
2026-01-26T04:02:06.877Z | 2026-01-26T15:18:59.430Z |
| CVE-2025-12793 |
8.5 (4.0)
|
An uncontrolled DLL loading path vulnerability ex… |
ASUS |
ASCI |
2026-01-06T02:14:37.216Z | 2026-01-06T18:57:12.443Z |
| CVE-2026-1420 |
8.7 (4.0)
8.8 (3.1)
8.8 (3.0)
|
Tenda AC23 WifiExtraSet buffer overflow |
Tenda |
AC23 |
2026-01-26T05:02:07.727Z | 2026-01-26T17:04:03.490Z |
| CVE-2026-1421 |
5.1 (4.0)
3.5 (3.1)
3.5 (3.0)
|
code-projects Online Examination System Add Pages cros… |
code-projects |
Online Examination System |
2026-01-26T05:32:06.400Z | 2026-01-26T14:59:42.775Z |
| CVE-2026-1422 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
code-projects Online Examination System Login Page ind… |
code-projects |
Online Examination System |
2026-01-26T06:02:06.635Z | 2026-01-26T14:43:47.130Z |
| CVE-2026-1423 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
code-projects Online Examination System admin_pic.php … |
code-projects |
Online Examination System |
2026-01-26T06:32:07.017Z | 2026-01-26T14:29:14.361Z |
| CVE-2025-14693 |
7 (4.0)
6.2 (3.1)
6.2 (3.0)
|
Ugreen DH2100+ USB symlink |
Ugreen |
DH2100+ |
2025-12-15T00:02:06.966Z | 2026-01-28T06:49:07.795Z |
| CVE-2025-14188 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T11:02:05.449Z | 2026-01-28T06:48:58.591Z |
| CVE-2025-14187 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T08:32:07.027Z | 2026-01-28T06:48:53.137Z |
| CVE-2025-36911 |
7.1 (3.1)
|
In key-based pairing, there is a possible ID due … |
Google |
Android |
2026-01-15T17:41:57.504Z | 2026-01-28T04:55:59.423Z |
| CVE-2026-24867 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:05.454Z | |
| CVE-2026-24866 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:05.999Z | |
| CVE-2026-24865 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:06.486Z | |
| CVE-2026-24864 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:06.964Z | |
| CVE-2026-24863 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:07.412Z | |
| CVE-2026-24862 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:07.877Z | |
| CVE-2026-24861 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:08.318Z | |
| CVE-2026-24860 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:08.774Z | |
| CVE-2026-24859 |
N/A
|
Not used | N/A | N/A | 2026-01-28T03:55:09.264Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-24549 | Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory allows Cross Site Request For… | 2026-01-23T15:16:11.227 | 2026-01-28T15:16:17.937 |
| fkie_cve-2026-1467 | A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF (Carriage Re… | 2026-01-27T10:15:48.597 | 2026-01-28T15:16:16.807 |
| fkie_cve-2025-69820 | Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensit… | 2026-01-22T16:16:07.820 | 2026-01-28T15:16:15.157 |
| fkie_cve-2026-1417 | A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_iso… | 2026-01-26T04:16:10.180 | 2026-01-28T15:04:30.863 |
| fkie_cve-2025-13053 | When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certif… | 2025-12-12T03:15:51.377 | 2026-01-28T14:54:44.440 |
| fkie_cve-2025-13052 | When the user set the Notification's sender to send emails to the SMTP server via msmtp, an imprope… | 2025-12-12T03:15:50.070 | 2026-01-28T14:53:53.883 |
| fkie_cve-2026-1418 | A security vulnerability has been detected in GPAC up to 2.4.0. This affects the function gf_text_i… | 2026-01-26T04:16:10.360 | 2026-01-28T14:50:49.357 |
| fkie_cve-2025-12793 | An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker… | 2026-01-06T03:15:41.120 | 2026-01-28T14:50:43.323 |
| fkie_cve-2026-1420 | A flaw has been found in Tenda AC23 16.03.07.52. This impacts an unknown function of the file /gofo… | 2026-01-26T06:16:04.073 | 2026-01-28T14:44:39.930 |
| fkie_cve-2026-1421 | A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unkno… | 2026-01-26T06:16:04.327 | 2026-01-28T14:24:24.363 |
| fkie_cve-2026-1422 | A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerab… | 2026-01-26T07:16:07.570 | 2026-01-28T14:07:37.900 |
| fkie_cve-2026-1423 | A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this iss… | 2026-01-26T07:16:07.830 | 2026-01-28T13:44:58.317 |
| fkie_cve-2025-14693 | A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of t… | 2025-12-15T01:15:37.903 | 2026-01-28T07:15:58.950 |
| fkie_cve-2025-14188 | A security vulnerability has been detected in UGREEN DH2100+ up to 5.3.0.251125. This impacts the f… | 2025-12-07T11:15:47.557 | 2026-01-28T07:15:58.807 |
| fkie_cve-2025-14187 | A weakness has been identified in UGREEN DH2100+ up to 5.3.0.251125. This affects the function hand… | 2025-12-07T09:15:48.307 | 2026-01-28T07:15:58.607 |
| fkie_cve-2025-36911 | In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to r… | 2026-01-15T18:16:37.193 | 2026-01-28T05:16:08.870 |
| fkie_cve-2026-24867 | Rejected reason: Not used | 2026-01-28T04:16:00.587 | 2026-01-28T04:16:00.587 |
| fkie_cve-2026-24866 | Rejected reason: Not used | 2026-01-28T04:16:00.527 | 2026-01-28T04:16:00.527 |
| fkie_cve-2026-24865 | Rejected reason: Not used | 2026-01-28T04:16:00.470 | 2026-01-28T04:16:00.470 |
| fkie_cve-2026-24864 | Rejected reason: Not used | 2026-01-28T04:16:00.413 | 2026-01-28T04:16:00.413 |
| fkie_cve-2026-24863 | Rejected reason: Not used | 2026-01-28T04:16:00.353 | 2026-01-28T04:16:00.353 |
| fkie_cve-2026-24862 | Rejected reason: Not used | 2026-01-28T04:16:00.300 | 2026-01-28T04:16:00.300 |
| fkie_cve-2026-24861 | Rejected reason: Not used | 2026-01-28T04:16:00.237 | 2026-01-28T04:16:00.237 |
| fkie_cve-2026-24860 | Rejected reason: Not used | 2026-01-28T04:16:00.177 | 2026-01-28T04:16:00.177 |
| fkie_cve-2026-24859 | Rejected reason: Not used | 2026-01-28T04:16:00.090 | 2026-01-28T04:16:00.090 |
| fkie_cve-2026-24793 | Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera… | 2026-01-27T09:15:48.940 | 2026-01-27T22:15:57.597 |
| fkie_cve-2026-22481 | Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier… | 2026-01-22T17:16:36.013 | 2026-01-27T22:15:55.327 |
| fkie_cve-2025-69190 | Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Co… | 2026-01-22T17:16:25.883 | 2026-01-27T22:15:54.413 |
| fkie_cve-2025-69183 | Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor… | 2026-01-22T17:16:24.833 | 2026-01-27T22:15:54.267 |
| fkie_cve-2025-69182 | Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-direc… | 2026-01-22T17:16:24.680 | 2026-01-27T22:15:54.113 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-mjpw-2hx8-jvrc |
6.5 (3.1)
|
Missing Authorization vulnerability in Damian WP Popups wp-popups-lite allows Exploiting Incorrectl… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-mjh6-hc9m-977x |
5.3 (3.1)
|
Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploitin… | 2026-01-23T15:31:37Z | 2026-01-23T22:35:51Z |
| ghsa-jqg4-9wc7-2cqr |
8.8 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-23T22:35:51Z |
| ghsa-ff36-pjpc-rvw7 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-23T22:35:51Z |
| ghsa-cgc2-28w6-wq4g |
5.3 (3.1)
|
Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping C… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-9g3h-4xrc-w4fr |
5.3 (3.1)
|
Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting In… | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-8xrp-hqw9-v3r6 |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:36Z | 2026-01-23T22:35:51Z |
| ghsa-8gxm-rc6r-rg28 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-23T22:35:51Z |
| ghsa-63vr-ppcf-2wwm |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-23T22:35:51Z |
| ghsa-5vv6-8wrr-wj6p |
7.5 (3.1)
|
An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to missing au… | 2026-01-23T15:31:34Z | 2026-01-23T22:35:51Z |
| ghsa-53j3-cfjv-xfqj |
5.4 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:36Z | 2026-01-23T22:35:51Z |
| ghsa-43fm-9f2q-hw2w |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:38Z | 2026-01-23T22:35:51Z |
| ghsa-jpgg-cp2x-qrw3 |
9.8 (3.1)
|
Duplicate Advisory: ecnepsnai/web vulnerable to Uncontrolled Resource Consumption | 2022-12-28T00:30:23Z | 2026-01-23T22:35:48Z |
| ghsa-w277-wpqf-rcfv |
|
Duplicate Advisory: Svix vulnerable to improper comparison of different-length signatures | 2024-02-06T20:30:14Z | 2026-01-23T22:35:18Z |
| ghsa-g3vv-g2j5-45f2 |
7.5 (3.1)
|
ipld/go-codec-dagpb panics when processing certain blocks | 2022-04-08T22:08:45Z | 2026-01-23T22:34:06Z |
| ghsa-967g-cjx4-h7j6 |
7.0 (3.1)
|
Duplicate Advisory: go-codec-dagpb vulnerable to panic when decoding invalid blocks | 2022-12-28T00:30:23Z | 2026-01-23T22:34:00Z |
| ghsa-xvcg-2q82-r87j |
7.5 (3.1)
|
Panic mishandled in libpulse-binding | 2022-01-06T22:18:19Z | 2026-01-23T22:33:12Z |
| ghsa-wcxc-jf6c-8rx9 |
|
Duplicate Advisory: Uncaught Exception in libpulse-binding | 2021-08-25T20:57:21Z | 2026-01-23T22:32:51Z |
| ghsa-h2g5-2rhx-ffgj |
|
Duplicate Advisory: Command injection in Weblate | 2022-03-05T00:00:44Z | 2026-01-23T22:29:40Z |
| ghsa-vjrh-7rvq-8ghw |
7.8 (3.1)
4.8 (4.0)
|
The communication protocol used between the server process and the service control had a flaw that … | 2025-07-11T06:30:30Z | 2026-01-23T22:06:23Z |
| ghsa-r6wv-x735-w2v5 |
5.3 (3.1)
6.9 (4.0)
|
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attac… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-qfq8-mv2q-hvwp |
6.1 (3.1)
7.0 (4.0)
|
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attac… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-mhj4-9938-5fpw |
9.8 (3.1)
6.3 (4.0)
|
An OS command injection vulnerability in Palo Alto Networks Expedition enables an authenticated att… | 2025-01-11T03:30:41Z | 2026-01-23T22:06:23Z |
| ghsa-mf45-qm92-8v76 |
9.1 (3.1)
6.9 (4.0)
|
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticate… | 2025-01-11T03:30:41Z | 2026-01-23T22:06:23Z |
| ghsa-cv6f-rw49-r829 |
8.8 (3.1)
9.2 (4.0)
|
An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker t… | 2025-01-11T03:30:40Z | 2026-01-23T22:06:23Z |
| ghsa-h7j3-xrmw-5xv3 |
5.5 (3.1)
|
libuser has information disclosure when moving user's home directory | 2022-04-23T00:40:20Z | 2026-01-23T22:06:22Z |
| ghsa-2gqc-6j2q-83qp |
8.9 (4.0)
|
RustCrypto Utilities cmov: `thumbv6m-none-eabi` compiler emits non-constant time assembly when usin… | 2026-01-15T18:17:15Z | 2026-01-23T21:46:10Z |
| ghsa-52c5-vh7f-26fx |
7.6 (3.1)
|
Cross-Site Scripting (XSS) vulnerability through unescaped HTML attribute values | 2025-11-06T15:44:35Z | 2026-01-23T21:37:34Z |
| ghsa-v3mr-gp7j-pw5w |
9.8 (3.1)
|
Possible SQL injection in tablelookupwizard Contao Extension | 2022-02-10T22:33:46Z | 2026-01-23T21:31:05Z |
| ghsa-wvc4-6xqp-9v2f |
4.3 (3.1)
|
Missing Authorization vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows Ex… | 2026-01-23T15:31:37Z | 2026-01-23T21:30:43Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-772 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.616060Z |
| pysec-2021-771 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T18:15:00Z | 2021-12-09T06:35:37.526889Z |
| pysec-2021-770 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.426472Z |
| pysec-2021-769 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.342418Z |
| pysec-2021-768 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.257593Z |
| pysec-2021-767 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.172867Z |
| pysec-2021-766 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:37.088195Z |
| pysec-2021-765 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.998638Z |
| pysec-2021-764 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T18:15:00Z | 2021-12-09T06:35:36.903192Z |
| pysec-2021-763 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T22:15:00Z | 2021-12-09T06:35:36.820839Z |
| pysec-2021-762 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.737111Z |
| pysec-2021-761 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.648389Z |
| pysec-2021-760 |
|
TensorFlow is an end-to-end open source platform for machine learning. The code for `tf.r… | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:36.563048Z |
| pysec-2021-759 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T22:15:00Z | 2021-12-09T06:35:36.478576Z |
| pysec-2021-758 |
|
TensorFlow is an end-to-end open source platform for machine learning. When a user does n… | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:36.390179Z |
| pysec-2021-757 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.306207Z |
| pysec-2021-756 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.218671Z |
| pysec-2021-755 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:36.131748Z |
| pysec-2021-754 |
|
TensorFlow is an end-to-end open source platform for machine learning. If a user does not… | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:36.031970Z |
| pysec-2021-753 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T18:15:00Z | 2021-12-09T06:35:35.943696Z |
| pysec-2021-752 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:35.841569Z |
| pysec-2021-751 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T18:15:00Z | 2021-12-09T06:35:35.756075Z |
| pysec-2021-750 |
|
TensorFlow is an end-to-end open source platform for machine learning. When restoring ten… | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:35.665255Z |
| pysec-2021-749 |
|
TensorFlow is an end-to-end open source platform for machine learning. Sending invalid ar… | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:35.577694Z |
| pysec-2021-748 |
|
TensorFlow is an end-to-end open source platform for machine learning. It is possible to … | tensorflow-gpu | 2021-08-12T19:15:00Z | 2021-12-09T06:35:35.492639Z |
| pysec-2021-747 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T18:15:00Z | 2021-12-09T06:35:35.406311Z |
| pysec-2021-746 |
|
TensorFlow is an end-to-end open source platform for machine learning. In affected versio… | tensorflow-gpu | 2021-08-12T21:15:00Z | 2021-12-09T06:35:35.309422Z |
| pysec-2021-745 |
|
TensorFlow is an end-to-end open source platform for machine learning. Passing invalid ar… | tensorflow-gpu | 2021-05-14T20:15:00Z | 2021-12-09T06:35:35.220537Z |
| pysec-2021-744 |
|
TensorFlow is an end-to-end open source platform for machine learning. Passing a complex … | tensorflow-gpu | 2021-05-14T20:15:00Z | 2021-12-09T06:35:35.049527Z |
| pysec-2021-743 |
|
TensorFlow is an end-to-end open source platform for machine learning. An attacker can ca… | tensorflow-gpu | 2021-05-14T20:15:00Z | 2021-12-09T06:35:34.887813Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32777 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.857990Z |
| gsd-2024-32775 | Server-Side Request Forgery (SSRF) vulnerability in Pavex Embed Google Photos album.This … | 2024-04-19T05:01:57.927012Z |
| gsd-2024-32771 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.883611Z |
| gsd-2024-32770 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.897349Z |
| gsd-2024-32769 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.889529Z |
| gsd-2024-32768 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.867813Z |
| gsd-2024-32767 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.838957Z |
| gsd-2024-32766 | An OS command injection vulnerability has been reported to affect several QNAP operating … | 2024-04-19T05:01:57.820666Z |
| gsd-2024-32764 | A missing authentication for critical function vulnerability has been reported to affect … | 2024-04-19T05:01:57.901196Z |
| gsd-2024-32763 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.927225Z |
| gsd-2024-32762 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-19T05:01:57.879896Z |
| gsd-2024-3947 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.842542Z |
| gsd-2024-3946 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.614769Z |
| gsd-2024-3945 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.477480Z |
| gsd-2024-3944 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.487851Z |
| gsd-2024-3943 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.656681Z |
| gsd-2024-3942 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.532781Z |
| gsd-2024-3941 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.467866Z |
| gsd-2024-3940 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.548604Z |
| gsd-2024-3939 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.488797Z |
| gsd-2024-3938 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.730603Z |
| gsd-2024-3937 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.534300Z |
| gsd-2024-3936 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.872068Z |
| gsd-2024-3935 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.660998Z |
| gsd-2024-3934 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.583078Z |
| gsd-2024-3933 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.836212Z |
| gsd-2024-3932 | A vulnerability classified as problematic has been found in Totara LMS 18.0.1 Build 20231… | 2024-04-18T05:02:10.820638Z |
| gsd-2024-3931 | A vulnerability was found in Totara LMS 18.0.1 Build 20231128.01. It has been rated as pr… | 2024-04-18T05:02:10.509708Z |
| gsd-2024-3930 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-18T05:02:10.722087Z |
| gsd-2024-3929 | The Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg B… | 2024-04-18T05:02:10.608602Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-191802 | Malicious code in netmanagement (PyPI) | 2025-09-07T16:49:12Z | 2025-12-31T02:45:15Z |
| mal-2025-191797 | Malicious code in multis (PyPI) | 2025-02-13T13:18:05Z | 2025-12-31T02:45:15Z |
| mal-2025-191796 | Malicious code in mulaptested-pakname (PyPI) | 2025-08-28T22:36:38Z | 2025-12-31T02:45:15Z |
| mal-2025-191791 | Malicious code in minemeld-core (PyPI) | 2025-11-14T17:22:38Z | 2025-12-31T02:45:15Z |
| mal-2025-191789 | Malicious code in mcp-weather-full (PyPI) | 2025-11-06T08:46:54Z | 2025-12-31T02:45:15Z |
| mal-2025-191788 | Malicious code in mcp-runcmd-server (PyPI) | 2025-10-13T07:46:53Z | 2025-12-31T02:45:15Z |
| mal-2025-191785 | Malicious code in matlab-cli (PyPI) | 2025-05-09T08:09:20Z | 2025-12-31T02:45:15Z |
| mal-2025-191782 | Malicious code in loggerex (PyPI) | 2025-08-01T15:57:37Z | 2025-12-31T02:45:15Z |
| mal-2025-191780 | Malicious code in libopenblas (PyPI) | 2025-09-18T20:37:33Z | 2025-12-31T02:45:15Z |
| mal-2025-191778 | Malicious code in kraken123 (PyPI) | 2025-08-29T12:14:53Z | 2025-12-31T02:45:15Z |
| mal-2025-191774 | Malicious code in kertash (PyPI) | 2025-08-12T10:29:23Z | 2025-12-31T02:45:15Z |
| mal-2025-191772 | Malicious code in kdewebhelper (PyPI) | 2025-11-20T22:25:56Z | 2025-12-31T02:45:15Z |
| mal-2025-191769 | Malicious code in jsonschemex (PyPI) | 2025-11-24T18:30:10Z | 2025-12-31T02:45:15Z |
| mal-2025-191765 | Malicious code in import-license-checker (PyPI) | 2025-08-26T09:33:55Z | 2025-12-31T02:45:15Z |
| mal-2025-191760 | Malicious code in hooktest1 (PyPI) | 2025-11-23T16:26:36Z | 2025-12-31T02:45:15Z |
| mal-2025-191745 | Malicious code in gtts-lts (PyPI) | 2025-09-15T16:44:31Z | 2025-12-31T02:45:15Z |
| mal-2025-191744 | Malicious code in gradio-videotimeline (PyPI) | 2025-10-01T09:22:55Z | 2025-12-31T02:45:15Z |
| mal-2025-191740 | Malicious code in gnosis-py (PyPI) | 2025-10-06T10:53:16Z | 2025-12-31T02:45:15Z |
| mal-2025-191739 | Malicious code in giteegit (PyPI) | 2025-09-06T11:22:48Z | 2025-12-31T02:45:15Z |
| mal-2025-191733 | Malicious code in fonafx (PyPI) | 2025-07-04T09:57:46Z | 2025-12-31T02:45:15Z |
| mal-2025-191732 | Malicious code in flask-tdg-cyberx (PyPI) | 2025-08-17T19:39:48Z | 2025-12-31T02:45:15Z |
| mal-2025-191723 | Malicious code in fastertelethon (PyPI) | 2025-04-04T12:54:50Z | 2025-12-31T02:45:15Z |
| mal-2025-191722 | Malicious code in evil-py-argo-shell (PyPI) | 2025-11-24T13:19:35Z | 2025-12-31T02:45:15Z |
| mal-2025-191718 | Malicious code in discord-selfsbotsx (PyPI) | 2025-11-27T23:24:51Z | 2025-12-31T02:45:15Z |
| mal-2025-191713 | Malicious code in db-aggregator-api (PyPI) | 2025-11-08T20:20:23Z | 2025-12-31T02:45:15Z |
| mal-2025-191712 | Malicious code in d1snakegame (PyPI) | 2025-10-03T16:11:50Z | 2025-12-31T02:45:15Z |
| mal-2025-191711 | Malicious code in d1n0exploitaaaa (PyPI) | 2025-11-14T17:22:10Z | 2025-12-31T02:45:15Z |
| mal-2025-191709 | Malicious code in cti-ctf-challenges (PyPI) | 2025-09-09T17:40:01Z | 2025-12-31T02:45:15Z |
| mal-2025-191708 | Malicious code in crto5 (PyPI) | 2025-07-14T16:42:19Z | 2025-12-31T02:45:15Z |
| mal-2025-191704 | Malicious code in computestpspeedcomp (PyPI) | 2025-02-13T13:18:05Z | 2025-12-31T02:45:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0902 | PowerDNS: Schwachstelle ermöglicht Denial of Service | 2025-04-29T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0875 | ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-04-23T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0803 | Mozilla Thunderbird und Thunderbird ESR: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0632 | IBM MQ: Mehrere Schwachstellen | 2025-03-24T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0541 | FreeType: Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0468 | ffmpeg: Schwachstelle ermöglicht Denial of Service | 2025-03-02T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0331 | Microsoft Windows: Mehrere Schwachstellen | 2025-02-11T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0301 | WebKit (GTK und WPE): Mehrere Schwachstellen | 2025-02-09T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0194 | libxml2: Schwachstelle ermöglicht remote Code Execution | 2025-01-26T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-0004 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-01-02T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3739 | WebKitGTK: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-12-22T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3557 | WebKitGTK: Mehrere Schwachstellen ermöglichen Cross-Site Scripting und und Code-Ausführung | 2024-11-27T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3461 | Red Hat Enterprise Linux (WebKitGTK): Mehrere Schwachstellen | 2024-11-13T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-3075 | Golang Go "FIPS OpenSSL": Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-10-03T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-1328 | Red Hat Ansible Automation Platform: Mehrere Schwachstellen | 2024-06-10T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2024-1071 | Golang Go: Mehrere Schwachstellen | 2024-05-07T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2023-2280 | Golang Go: Mehrere Schwachstellen | 2023-09-06T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2023-1009 | Eclipse Jetty: Mehrere Schwachstellen | 2023-04-18T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-2193 | DNS Server: Schwachstelle ermöglicht Denial of Service | 2016-07-06T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-2192 | Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service | 2016-07-18T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-2187 | IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-11-28T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-2055 | Mozilla Firefox und Thunderbird: Mehrere Schwachstellen | 2022-11-15T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-1961 | Apache Commons: Schwachstelle ermöglicht Codeausführung | 2022-11-06T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-1595 | Eclipse Jetty: Schwachstelle ermöglicht Offenlegung von Informationen | 2021-06-09T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-1365 | Eclipse Jetty: Mehrere Schwachstellen | 2021-04-05T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-1347 | jQuery: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2020-05-03T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-1196 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2022-08-25T22:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2022-0156 | Linux Kernel: Mehrere Schwachstellen | 2022-03-20T23:00:00.000+00:00 | 2025-05-29T22:00:00.000+00:00 |
| wid-sec-w-2025-1159 | Arista EOS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| wid-sec-w-2025-1156 | Xen: Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-05-27T22:00:00.000+00:00 | 2025-05-27T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:0164 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.9 Bug Fix Update | 2025-01-09T11:27:57+00:00 | 2026-01-29T21:00:42+00:00 |
| rhsa-2024:11292 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.4 security and bug fix update | 2024-12-17T18:29:55+00:00 | 2026-01-29T21:00:37+00:00 |
| rhsa-2024:11031 | Red Hat Security Advisory: OpenShift Container Platform 4.14.43 security update | 2024-12-19T00:31:17+00:00 | 2026-01-29T21:00:34+00:00 |
| rhsa-2024:10986 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.1 Bug Fix Update | 2024-12-12T09:54:33+00:00 | 2026-01-29T21:00:33+00:00 |
| rhsa-2024:10907 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.13 | 2024-12-10T08:27:59+00:00 | 2026-01-29T21:00:32+00:00 |
| rhsa-2024:10839 | Red Hat Security Advisory: OpenShift Container Platform 4.15.41 bug fix and security update | 2024-12-12T01:47:43+00:00 | 2026-01-29T21:00:32+00:00 |
| rhsa-2024:10823 | Red Hat Security Advisory: OpenShift Container Platform 4.16.26 bug fix and security update | 2024-12-12T00:39:58+00:00 | 2026-01-29T21:00:31+00:00 |
| rhsa-2024:10665 | Red Hat Security Advisory: ACS 4.4 enhancement and security update | 2024-12-02T11:23:09+00:00 | 2026-01-29T21:00:30+00:00 |
| rhsa-2024:10518 | Red Hat Security Advisory: OpenShift Container Platform 4.17.7 bug fix and security update | 2024-12-03T18:08:06+00:00 | 2026-01-29T21:00:29+00:00 |
| rhba-2024:10760 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.3 bugfix release | 2024-12-17T13:34:55+00:00 | 2026-01-29T21:00:24+00:00 |
| rhsa-2025:3837 | Red Hat Security Advisory: openssh security update | 2025-04-14T11:04:59+00:00 | 2026-01-29T21:00:14+00:00 |
| rhsa-2024:2865 | Red Hat Security Advisory: OpenShift Container Platform 4.15.14 bug fix and security update | 2024-05-21T09:37:43+00:00 | 2026-01-29T21:00:12+00:00 |
| rhsa-2025:3358 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update | 2025-03-27T16:47:04+00:00 | 2026-01-29T20:59:47+00:00 |
| rhsa-2025:2445 | Red Hat Security Advisory: OpenShift Container Platform 4.17.20 bug fix and security update | 2025-03-12T19:12:02+00:00 | 2026-01-29T20:59:45+00:00 |
| rhsa-2025:4550 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update | 2025-05-06T14:32:08+00:00 | 2026-01-29T20:59:43+00:00 |
| rhsa-2025:3357 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update | 2025-03-27T16:42:38+00:00 | 2026-01-29T20:59:40+00:00 |
| rhsa-2024:4626 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update | 2024-07-18T13:37:38+00:00 | 2026-01-29T20:59:38+00:00 |
| rhsa-2025:4549 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update | 2025-05-06T14:32:48+00:00 | 2026-01-29T20:59:37+00:00 |
| rhsa-2025:4548 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update | 2025-05-06T14:31:57+00:00 | 2026-01-29T20:58:27+00:00 |
| rhsa-2024:4163 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.4 security update | 2024-06-27T12:38:04+00:00 | 2026-01-29T20:58:24+00:00 |
| rhsa-2024:8534 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Release Update | 2024-10-28T13:27:10+00:00 | 2026-01-29T20:58:21+00:00 |
| rhsa-2025:6993 | Red Hat Security Advisory: openssh security update | 2025-05-13T08:40:48+00:00 | 2026-01-29T20:58:19+00:00 |
| rhsa-2024:1255 | Red Hat Security Advisory: OpenShift Container Platform 4.15.3 bug fix and security update | 2024-03-19T00:19:06+00:00 | 2026-01-29T20:58:17+00:00 |
| rhsa-2024:1328 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.9.3 security and bug fix container updates | 2024-03-14T14:47:02+00:00 | 2026-01-29T20:58:14+00:00 |
| rhsa-2024:0855 | Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update | 2024-02-19T01:16:12+00:00 | 2026-01-29T20:58:12+00:00 |
| rhsa-2025:4336 | Red Hat Security Advisory: Red Hat build of Keycloak 26.0.11 Update | 2025-04-29T22:53:23+00:00 | 2026-01-29T19:38:34+00:00 |
| rhsa-2025:7683 | Red Hat Security Advisory: kernel security update | 2025-05-15T18:26:00+00:00 | 2026-01-29T19:38:31+00:00 |
| rhsa-2025:7676 | Red Hat Security Advisory: kernel-rt security update | 2025-05-15T13:20:31+00:00 | 2026-01-29T19:38:30+00:00 |
| rhsa-2025:6966 | Red Hat Security Advisory: kernel security update | 2025-05-13T08:28:50+00:00 | 2026-01-29T19:38:30+00:00 |
| rhsa-2025:4509 | Red Hat Security Advisory: kernel security update | 2025-05-06T07:19:20+00:00 | 2026-01-29T19:38:30+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-24-331-01 | Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC | 2021-06-08T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-326-06 | Schneider Electric PowerLogic PM5300 Series | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-326-05 | Schneider Electric EcoStruxure IT Gateway | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-326-03 | Schneider Electric Modicon M340, MC80, and Momentum Unity M1E | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-09 | Siemens Spectrum Power 7 | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-08 | Siemens SINEC INS | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-05 | Siemens Solid Edge | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-319-04 | Siemens SINEC NMS | 2024-11-12T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-193-16 | Siemens SIMATIC WinCC | 2024-07-09T00:00:00.000000Z | 2024-11-12T00:00:00.000000Z |
| icsa-24-312-03 | Bosch Rexroth IndraDrive | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| icsa-24-312-02 | Delta Electronics DIAScreen | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| icsa-24-312-01 | Beckhoff Automation TwinCAT Package Manager | 2024-11-07T07:00:00.000000Z | 2024-11-07T07:00:00.000000Z |
| icsa-24-305-01 | Rockwell Automation FactoryTalk ThinManager | 2024-10-31T06:00:00.000000Z | 2024-10-31T06:00:00.000000Z |
| icsa-25-014-01 | Hitachi Energy FOXMAN-UN | 2024-06-11T12:30:00.000000Z | 2024-10-29T13:30:00.000000Z |
| icsa-24-303-03 | Delta Electronics InfraSuite Device Master | 2024-10-29T06:00:00.000000Z | 2024-10-29T06:00:00.000000Z |
| icsa-24-303-02 | Solar-Log Base 15 | 2024-10-29T06:00:00.000000Z | 2024-10-29T06:00:00.000000Z |
| icsa-24-298-03 | Deep Sea Electronics DSE855 | 2024-10-24T06:00:00.000000Z | 2024-10-24T06:00:00.000000Z |
| icsa-24-298-02 | iniNet Solutions SpiderControl SCADA PC HMI Editor | 2024-10-24T06:00:00.000000Z | 2024-10-24T06:00:00.000000Z |
| icsa-24-298-01 | VIMESA VHF/FM Transmitter Blue Plus | 2024-10-24T06:00:00.000000Z | 2024-10-24T06:00:00.000000Z |
| icsa-24-268-06 | OMNTEC Proteus Tank Monitoring (Update A) | 2024-09-24T06:00:00.000000Z | 2024-10-24T06:00:00.000000Z |
| icsa-24-291-05 | Kieback&Peter DDC4000 Series | 2024-10-17T06:00:00.000000Z | 2024-10-17T06:00:00.000000Z |
| icsa-24-291-04 | HMS Networks EWON FLEXY 202 | 2024-10-17T06:00:00.000000Z | 2024-10-17T06:00:00.000000Z |
| icsa-24-291-02 | LCDS LAquis SCADA | 2024-10-17T06:00:00.000000Z | 2024-10-17T06:00:00.000000Z |
| icsa-24-270-05 | goTenna Pro ATAK Plugin (Update A) | 2024-09-26T06:00:00.000000Z | 2024-10-17T06:00:00.000000Z |
| icsa-24-270-04 | goTenna Pro X and Pro X2 (Update A) | 2024-09-26T06:00:00.000000Z | 2024-10-17T06:00:00.000000Z |
| icsa-24-284-21 | Delta Electronics CNCSoft-G2 | 2024-10-10T06:00:00.000000Z | 2024-10-10T06:00:00.000000Z |
| icsa-24-284-20 | Rockwell Automation ControlLogix | 2024-10-10T06:00:00.000000Z | 2024-10-10T06:00:00.000000Z |
| icsa-24-284-19 | Rockwell Automation PowerFlex 6000T | 2024-10-10T06:00:00.000000Z | 2024-10-10T06:00:00.000000Z |
| icsa-24-284-18 | Rockwell Automation Logix Controllers | 2024-10-10T06:00:00.000000Z | 2024-10-10T06:00:00.000000Z |
| icsa-24-284-17 | Rockwell Automation Verve Asset Manager | 2024-10-10T06:00:00.000000Z | 2024-10-10T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-webex-activation-3sdNFxcy | Cisco Webex Meetings Email Content Injection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-vmesh-openred-agnrmf5 | Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-vmesh-openred-AGNRmf5 | Cisco Webex Video Mesh Arbitrary Site Redirection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-videomesh-xss-qjm2bdqf | Cisco Webex Video Mesh Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-videomesh-xss-qjm2BDQf | Cisco Webex Video Mesh Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-umbrella-user-enum-s7xfjwde | Cisco Umbrella Email Enumeration Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-umbrella-user-enum-S7XfJwDE | Cisco Umbrella Email Enumeration Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-ucm-csrf-xrtkdu3h | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-ucm-csrf-xrTkDu3H | Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-web-dos-xmyffkt8 | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-web-dos-xMyFFkt8 | Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-tokens-uzwpr4e5 | Cisco Small Business Series Switches Session Credentials Replay Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-smb-switches-tokens-UzwpR4e5 | Cisco Small Business Series Switches Session Credentials Replay Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-sbrv-cmdinjection-z5cwfdk | Cisco Small Business RV Series Routers Command Injection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-sbrv-cmdinjection-Z5cWFdK | Cisco Small Business RV Series Routers Command Injection Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-pi-epnm-xss-u2jk537j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-pi-epnm-xss-U2JK537j | Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-esa-dos-jom9etfo | Cisco Email Security Appliance Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-esa-dos-JOm9ETfO | Cisco Email Security Appliance Denial of Service Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cucm-path-trav-dkcvktvo | Cisco Unified Communications Products Path Traversal Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cucm-path-trav-dKCvktvO | Cisco Unified Communications Products Path Traversal Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cpar-strd-xss-a4dcvetg | Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-cpar-strd-xss-A4DCVETG | Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-catpon-multivulns-ce3dsygr | Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-catpon-multivulns-CE3DSYGr | Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-anyconnect-nam-priv-ycsrnugt | Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-anyconnect-nam-priv-yCsRNUGT | Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability | 2021-11-03T16:00:00+00:00 | 2021-11-03T16:00:00+00:00 |
| cisco-sa-snort-dos-s2r7w9uu | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T14:07:40+00:00 |
| cisco-sa-snort-dos-s2R7W9UU | Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T14:07:40+00:00 |
| cisco-sa-asaftd-ikev2-dos-g4cmrr7c | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability | 2021-10-27T16:00:00+00:00 | 2021-10-29T13:51:25+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-40018 | ipvs: Defer ip_vs_ftp unregister during netns cleanup | 2025-10-02T00:00:00.000Z | 2025-10-25T14:01:29.000Z |
| msrc_cve-2025-21712 | md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime | 2025-02-02T00:00:00.000Z | 2025-10-25T01:02:06.000Z |
| msrc_cve-2024-57993 | HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check | 2025-02-02T00:00:00.000Z | 2025-10-25T01:01:57.000Z |
| msrc_cve-2025-59501 | Microsoft Configuration Manager Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-24T07:00:00.000Z |
| msrc_cve-2025-59287 | Windows Server Update Service (WSUS) Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-24T07:00:00.000Z |
| msrc_cve-2025-62813 | LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in lib/lz4frame.c mishandles NULL checks. | 2025-10-02T00:00:00.000Z | 2025-10-24T01:02:42.000Z |
| msrc_cve-2022-49635 | drm/i915/selftests: fix subtraction overflow bug | 2025-02-02T00:00:00.000Z | 2025-10-24T01:02:36.000Z |
| msrc_cve-2022-49610 | KVM: VMX: Prevent RSB underflow before vmenter | 2025-02-02T00:00:00.000Z | 2025-10-24T01:02:30.000Z |
| msrc_cve-2022-49562 | KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits | 2025-02-02T00:00:00.000Z | 2025-10-24T01:01:54.000Z |
| msrc_cve-2022-49552 | bpf: Fix combination of jit blinding and pointers to bpf subprogs. | 2025-02-02T00:00:00.000Z | 2025-10-24T01:01:49.000Z |
| msrc_cve-2022-49543 | ath11k: fix the warning of dev_wake in mhi_pm_disable_transition() | 2025-02-02T00:00:00.000Z | 2025-10-24T01:01:44.000Z |
| msrc_cve-2022-49469 | btrfs: fix anon_dev leak in create_subvol() | 2025-02-02T00:00:00.000Z | 2025-10-24T01:01:38.000Z |
| msrc_cve-2022-49173 | spi: fsi: Implement a timeout for polling status | 2025-02-02T00:00:00.000Z | 2025-10-24T01:01:33.000Z |
| msrc_cve-2025-59500 | Azure Notification Service Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-23T07:00:00.000Z |
| msrc_cve-2025-59295 | Windows URL Parsing Remote Code Execution Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-23T07:00:00.000Z |
| msrc_cve-2025-59273 | Azure Event Grid System Elevation of Privilege Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-23T07:00:00.000Z |
| msrc_cve-2025-55676 | Windows USB Video Class System Driver Information Disclosure Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-23T07:00:00.000Z |
| msrc_cve-2025-53054 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:45.000Z |
| msrc_cve-2025-53045 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:38.000Z |
| msrc_cve-2025-53069 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:30.000Z |
| msrc_cve-2025-53053 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:22.000Z |
| msrc_cve-2025-53062 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:15.000Z |
| msrc_cve-2025-53040 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:07.000Z |
| msrc_cve-2025-53044 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:06:00.000Z |
| msrc_cve-2025-53042 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). | 2025-10-02T00:00:00.000Z | 2025-10-23T01:05:53.000Z |
| msrc_cve-2025-55315 | ASP.NET Security Feature Bypass Vulnerability | 2025-10-14T07:00:00.000Z | 2025-10-22T07:00:00.000Z |
| msrc_cve-2024-57888 | workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker | 2025-01-02T00:00:00.000Z | 2025-10-22T01:02:36.000Z |
| msrc_cve-2022-49533 | ath11k: Change max no of active probe SSID and BSSID to fw capability | 2025-02-02T00:00:00.000Z | 2025-10-22T01:02:31.000Z |
| msrc_cve-2022-49528 | media: i2c: dw9714: Disable the regulator when the driver fails to probe | 2025-02-02T00:00:00.000Z | 2025-10-22T01:02:25.000Z |
| msrc_cve-2022-49504 | scsi: lpfc: Inhibit aborts if external loopback plug is inserted | 2025-02-02T00:00:00.000Z | 2025-10-22T01:02:20.000Z |
| ID | Description | Updated |
|---|---|---|
| var-202406-0247 | CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of th… | 2024-07-04T23:01:16.144000Z |
| var-202301-2256 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discove… | 2024-07-04T22:59:39.501000Z |
| var-202212-1929 | Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation ME… | 2024-07-04T22:59:39.711000Z |
| var-202405-0176 | A vulnerability has been identified in CPCI85 Central Processing/Communication (All versi… | 2024-07-04T22:59:37.336000Z |
| var-202405-0175 | A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affec… | 2024-07-04T22:59:37.320000Z |
| var-202405-0174 | A vulnerability has been identified in CPC80 Central Processing/Communication (All versio… | 2024-07-04T22:59:37.352000Z |
| var-202402-0226 | In Modem NL1, there is a possible system crash due to an improper input validation. This … | 2024-07-04T22:52:33.082000Z |
| var-202406-0299 | CWE-532: Insertion of Sensitive Information into Log File vulnerability exists that could… | 2024-07-04T22:52:32.453000Z |
| var-201707-0964 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 an… | 2024-07-04T22:50:25.110000Z |
| var-202111-0660 | Active Directory Domain Services Elevation of Privilege Vulnerability. This vulnerability… | 2024-07-04T22:48:15.754000Z |
| var-202204-1376 | Windows Common Log File System Driver Elevation of Privilege Vulnerability. This vulnerab… | 2024-07-04T22:43:37.100000Z |
| var-202403-0784 | Privileges are not fully verified server-side, which can be abused by a user with limite… | 2024-07-04T22:43:26.731000Z |
| var-201208-0108 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:40:02.829000Z |
| var-201306-0148 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:39:15.298000Z |
| var-201304-0352 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:38:36.514000Z |
| var-201304-0184 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:37:15.699000Z |
| var-201302-0020 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:30:20.317000Z |
| var-201201-0038 | protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict head… | 2024-07-04T22:29:48.615000Z |
| var-201310-0368 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java S… | 2024-07-04T22:23:37.217000Z |
| var-200107-0045 | Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location… | 2024-07-04T22:18:25.097000Z |
| var-201206-0053 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:14:03.453000Z |
| var-201206-0061 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T22:13:15.782000Z |
| var-200609-0858 | Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 throug… | 2024-07-04T22:10:51.415000Z |
| var-201506-0498 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 bef… | 2024-07-04T22:03:03.877000Z |
| var-201206-0028 | The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6… | 2024-07-04T21:55:06.733000Z |
| var-201703-0328 | The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0… | 2024-07-04T21:49:02.280000Z |
| var-201304-0379 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java … | 2024-07-04T21:42:08.702000Z |
| var-201408-0212 | The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows re… | 2024-07-04T21:41:39.624000Z |
| var-201310-0135 | Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Ja… | 2024-07-04T21:33:37.499000Z |
| var-201609-0592 | The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remot… | 2024-07-04T21:32:12.934000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2016-000211 | Installer of 7-Zip for Windows may insecurely load Dynamic Link Libraries | 2016-10-26T15:13+09:00 | 2017-12-25T10:27+09:00 |
| jvndb-2017-000091 | FlashAir do not set credential information in PhotoShare | 2017-05-16T15:46+09:00 | 2017-12-21T19:16+09:00 |
| jvndb-2017-000090 | FlashAir fails to restrict access permissions in PhotoShare | 2017-05-16T15:34+09:00 | 2017-12-21T19:13+09:00 |
| jvndb-2017-000069 | Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries | 2017-04-14T14:09+09:00 | 2017-12-21T17:50+09:00 |
| jvndb-2017-010275 | Cross-site Scripting Vulnerability in JP1/Service Support and JP1/Integrated Management - Service Support | 2017-12-11T11:46+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-010043 | Cross-site Scripting Vulnerability in JP1/Operations Analytics | 2017-12-01T14:59+09:00 | 2017-12-20T11:09+09:00 |
| jvndb-2017-010280 | Fluentd vulenrable to escape sequence injection | 2017-12-11T14:13+09:00 | 2017-12-11T14:13+09:00 |
| jvndb-2016-000206 | Installer of Evernote for Windows may insecurely load Dynamic Link Libraries | 2016-10-19T15:32+09:00 | 2017-11-27T18:12+09:00 |
| jvndb-2017-000098 | The installer of Empirical Project Monitor - eXtended may insecurely load Dynamic Link Libraries | 2017-05-19T14:57+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000097 | Empirical Project Monitor - eXtended vulnerable to cross-site scripting | 2017-05-19T14:55+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000096 | Empirical Project Monitor - eXtended vulnerable to cross-site scripting | 2017-05-19T14:53+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2016-000161 | Money Forward Apps for Android vulnerability that allows unintended operations | 2016-09-20T15:19+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2016-000160 | Money Forward Apps for Android vulnerable in the WebView class | 2016-09-20T15:19+09:00 | 2017-11-27T18:01+09:00 |
| jvndb-2017-000083 | The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries | 2017-05-09T13:52+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000079 | The installer of SOY CMS vulnerable to cross-site scripting | 2017-05-11T13:37+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000078 | SOY CMS vulnerable to directory traversal | 2017-05-11T13:36+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2016-000159 | H2O use of externally-controlled format string | 2016-09-15T14:26+09:00 | 2017-11-27T17:23+09:00 |
| jvndb-2017-000114 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000113 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:21+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000112 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure | 2017-06-06T14:20+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2017-000111 | Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution | 2017-06-06T14:19+09:00 | 2017-11-27T17:22+09:00 |
| jvndb-2016-000244 | Access restriction bypass to delete DBM files in Cybozu Dezie | 2016-12-12T14:49+09:00 | 2017-11-27T17:12+09:00 |
| jvndb-2016-000243 | Access restriction bypass to download DBM files in Cybozu Dezie | 2016-12-12T14:49+09:00 | 2017-11-27T17:12+09:00 |
| jvndb-2016-000241 | WNC01WH vulnerable to directory traversal due to an issue in processing POST request | 2016-12-02T14:46+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2016-000229 | Cybozu Garoon vulnerable to SQL injection | 2016-12-19T14:19+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2016-000228 | Cybozu Garoon vulnerable to directory traversal | 2016-12-19T13:44+09:00 | 2017-11-27T17:11+09:00 |
| jvndb-2017-000094 | Multiple BestWebSoft WordPress plugins vulnerable to cross-site scripting | 2017-05-16T14:00+09:00 | 2017-11-27T17:04+09:00 |
| jvndb-2016-000168 | Toshiba FlashAir does not require authentication in "Internet pass-thru Mode" | 2016-10-12T10:03+09:00 | 2017-11-27T17:04+09:00 |
| jvndb-2016-000227 | Cybozu Garoon vulnerable to cross-site request forgery | 2016-12-19T13:36+09:00 | 2017-11-27T16:58+09:00 |
| jvndb-2016-000226 | Cybozu Garoon fails to restrict access permission in To-Dos of Space function | 2016-12-19T14:38+09:00 | 2017-11-27T16:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02778-1 | Security update for python3 | 2025-08-13T06:46:17Z | 2025-08-13T06:46:17Z |
| suse-su-2025:02777-1 | Security update for webkit2gtk3 | 2025-08-13T06:44:04Z | 2025-08-13T06:44:04Z |
| suse-su-2025:02423-2 | Security update for kubernetes1.23 | 2025-08-13T00:10:52Z | 2025-08-13T00:10:52Z |
| suse-su-2025:02773-1 | Security update for libgcrypt | 2025-08-13T00:10:27Z | 2025-08-13T00:10:27Z |
| suse-su-2025:02772-1 | Recommended update for grub2 | 2025-08-12T17:35:34Z | 2025-08-12T17:35:34Z |
| suse-su-2025:20554-1 | Security update for systemd | 2025-08-12T14:05:24Z | 2025-08-12T14:05:24Z |
| suse-su-2025:02771-1 | Security update for tiff | 2025-08-12T13:50:53Z | 2025-08-12T13:50:53Z |
| suse-su-2025:02770-1 | Security update for tiff | 2025-08-12T13:50:14Z | 2025-08-12T13:50:14Z |
| suse-su-2025:02769-1 | Security update for amber-cli | 2025-08-12T13:49:30Z | 2025-08-12T13:49:30Z |
| suse-su-2025:02768-1 | Security update for sccache | 2025-08-12T13:01:12Z | 2025-08-12T13:01:12Z |
| suse-su-2025:02767-1 | Security update for python313 | 2025-08-12T13:01:00Z | 2025-08-12T13:01:00Z |
| suse-su-2025:02766-1 | Security update for webkit2gtk3 | 2025-08-12T13:00:40Z | 2025-08-12T13:00:40Z |
| suse-su-2025:02765-1 | Security update for webkit2gtk3 | 2025-08-12T12:59:26Z | 2025-08-12T12:59:26Z |
| suse-su-2025:02762-1 | Security update for eclipse-jgit | 2025-08-12T12:45:02Z | 2025-08-12T12:45:02Z |
| suse-su-2025:02760-1 | Security update for go1.24 | 2025-08-12T12:08:24Z | 2025-08-12T12:08:24Z |
| suse-su-2025:02759-1 | Security update for go1.23 | 2025-08-12T12:06:25Z | 2025-08-12T12:06:25Z |
| suse-su-2025:02758-1 | Security update for libxml2 | 2025-08-12T10:05:26Z | 2025-08-12T10:05:26Z |
| suse-su-2025:02756-1 | Security update for libgcrypt | 2025-08-12T08:23:08Z | 2025-08-12T08:23:08Z |
| suse-su-2025:02755-1 | Security update for libssh | 2025-08-12T07:35:23Z | 2025-08-12T07:35:23Z |
| suse-su-2025:02754-1 | Security update for opensc | 2025-08-12T07:35:08Z | 2025-08-12T07:35:08Z |
| suse-su-2025:02752-1 | Security update for libgcrypt | 2025-08-11T13:15:24Z | 2025-08-11T13:15:24Z |
| suse-su-2025:02751-1 | Security update for ImageMagick | 2025-08-11T13:14:11Z | 2025-08-11T13:14:11Z |
| suse-su-2025:01786-2 | Security update for postgresql14 | 2025-08-11T12:43:59Z | 2025-08-11T12:43:59Z |
| suse-su-2025:01782-2 | Security update for postgresql16 | 2025-08-11T12:42:58Z | 2025-08-11T12:42:58Z |
| suse-su-2025:02749-1 | Security update for iperf | 2025-08-11T07:06:39Z | 2025-08-11T07:06:39Z |
| suse-su-2025:02746-1 | Security update for zabbix | 2025-08-11T06:20:26Z | 2025-08-11T06:20:26Z |
| suse-su-2025:02745-1 | Security update for tomcat | 2025-08-11T06:20:12Z | 2025-08-11T06:20:12Z |
| suse-su-2025:02744-1 | Security update for sqlite3 | 2025-08-08T12:41:39Z | 2025-08-08T12:41:39Z |
| suse-su-2025:20591-1 | Security update for jq | 2025-08-08T10:28:21Z | 2025-08-08T10:28:21Z |
| suse-su-2025:20590-1 | Security update for xz | 2025-08-08T10:26:17Z | 2025-08-08T10:26:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14520-1 | opentofu-1.8.6-1.1 on GA media | 2024-11-23T00:00:00Z | 2024-11-23T00:00:00Z |
| opensuse-su-2024:14519-1 | govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media | 2024-11-23T00:00:00Z | 2024-11-23T00:00:00Z |
| opensuse-su-2024:0374-1 | Security update for chromium | 2024-11-22T14:44:00Z | 2024-11-22T14:44:00Z |
| opensuse-su-2024:0373-1 | Security update for chromium | 2024-11-22T14:42:36Z | 2024-11-22T14:42:36Z |
| opensuse-su-2024:14518-1 | chromedriver-131.0.6778.85-1.1 on GA media | 2024-11-22T00:00:00Z | 2024-11-22T00:00:00Z |
| opensuse-su-2024:0372-1 | Security update for icinga2 | 2024-11-21T14:37:26Z | 2024-11-21T14:37:26Z |
| opensuse-su-2024:0371-1 | Security update for icinga2 | 2024-11-21T14:37:13Z | 2024-11-21T14:37:13Z |
| opensuse-su-2024:0370-1 | Security update for cobbler | 2024-11-21T11:21:20Z | 2024-11-21T11:21:20Z |
| opensuse-su-2024:14517-1 | traefik2-2.11.14-1.1 on GA media | 2024-11-21T00:00:00Z | 2024-11-21T00:00:00Z |
| opensuse-su-2024:14516-1 | iptraf-ng-1.2.2-1.1 on GA media | 2024-11-21T00:00:00Z | 2024-11-21T00:00:00Z |
| opensuse-su-2024:14515-1 | govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media | 2024-11-21T00:00:00Z | 2024-11-21T00:00:00Z |
| opensuse-su-2024:14514-1 | dcmtk-3.6.8-5.1 on GA media | 2024-11-21T00:00:00Z | 2024-11-21T00:00:00Z |
| opensuse-su-2024:14513-1 | govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14512-1 | cobbler-3.3.7-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14511-1 | chromedriver-131.0.6778.69-1.1 on GA media | 2024-11-20T00:00:00Z | 2024-11-20T00:00:00Z |
| opensuse-su-2024:14510-1 | nodejs-electron-31.7.5-1.1 on GA media | 2024-11-19T00:00:00Z | 2024-11-19T00:00:00Z |
| opensuse-su-2024:14509-1 | gh-2.62.0-1.1 on GA media | 2024-11-18T00:00:00Z | 2024-11-18T00:00:00Z |
| opensuse-su-2024:14508-1 | python39-3.9.20-6.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14507-1 | python310-3.10.15-5.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14506-1 | libecpg6-17.1-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14505-1 | postgresql16-16.5-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14504-1 | postgresql15-15.9-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14503-1 | postgresql14-14.14-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14502-1 | postgresql13-13.17-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14501-1 | postgresql12-12.21-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14500-1 | kernel-devel-6.11.8-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14499-1 | ansible-core-2.16-2.16.13-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14498-1 | ansible-core-2.17.6-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14497-1 | MozillaThunderbird-128.4.3-1.1 on GA media | 2024-11-15T00:00:00Z | 2024-11-15T00:00:00Z |
| opensuse-su-2024:14496-1 | ucode-intel-20241112-1.1 on GA media | 2024-11-14T00:00:00Z | 2024-11-14T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-29744 | AMD XOCL driver输入验证不当漏洞(CNVD-2025-29744) | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29743 | AMD Xilinx Run Time权限提升漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29742 | AMD Xilinx Run Time缓冲区溢出漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29741 | AMD Xilinx Run Time锁定保护不足漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29740 | AMD XOCL driver输入验证不当漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29739 | AMD uProf输入验证不当漏洞(CNVD-2025-29739) | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29738 | AMD uProf返回值处理不当漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29737 | AMD uProf输入验证不当漏洞 | 2025-11-27 | 2025-12-03 |
| cnvd-2025-29736 | Online Birth Certificate System between-dates-report.php文件SQL注入漏洞 | 2025-05-13 | 2025-12-02 |
| cnvd-2025-29735 | Online Birth Certificate System users-applications.php文件SQL注入漏洞 | 2025-06-06 | 2025-12-02 |
| cnvd-2025-29734 | Online Birth Certificate System all-applications.php文件SQL注入漏洞 | 2025-06-06 | 2025-12-02 |
| cnvd-2025-29733 | Medical Card Generation System HTML注入漏洞 | 2025-06-06 | 2025-12-02 |
| cnvd-2025-29732 | Notice Board System category.php文件SQL注入漏洞 | 2025-05-07 | 2025-12-02 |
| cnvd-2025-29731 | Notice Board System bwdates-reports-details.php文件SQL注入漏洞 | 2025-05-13 | 2025-12-02 |
| cnvd-2025-29730 | Notice Board System login.php文件SQL注入漏洞 | 2025-05-22 | 2025-12-02 |
| cnvd-2025-29729 | Notice Board System search-notice.php文件SQL注入漏洞 | 2025-06-11 | 2025-12-02 |
| cnvd-2025-29728 | Notice Board System forgot-password.php文件SQL注入漏洞 | 2025-06-11 | 2025-12-02 |
| cnvd-2025-29727 | Notice Board System admin-profile.php文件SQL注入漏洞 | 2025-06-11 | 2025-12-02 |
| cnvd-2025-29726 | Notice Board System manage-notices.php文件跨站脚本漏洞 | 2025-06-27 | 2025-12-02 |
| cnvd-2025-29725 | TOTOLINK A950RG硬编码漏洞 | 2022-08-30 | 2025-12-02 |
| cnvd-2025-29724 | TOTOLINK A720R硬编码漏洞 | 2022-08-30 | 2025-12-02 |
| cnvd-2025-29723 | TOTOLINK A720R命令注入漏洞(CNVD-2025-29723) | 2022-08-30 | 2025-12-02 |
| cnvd-2025-29722 | TOTOLINK A720R代码执行漏洞(CNVD-2025-29722) | 2022-09-19 | 2025-12-02 |
| cnvd-2025-29721 | TOTOLINK A720R代码执行漏洞 | 2022-09-19 | 2025-12-02 |
| cnvd-2025-29720 | TOTOLINK A720R访问控制错误漏洞 | 2023-02-21 | 2025-12-02 |
| cnvd-2025-29719 | TOTOLINK X2000R跨站脚本漏洞(CNVD-2025-29719) | 2024-04-15 | 2025-12-02 |
| cnvd-2025-29718 | TOTOLINK X2000R跨站脚本漏洞 | 2024-05-22 | 2025-12-02 |
| cnvd-2025-29717 | TOTOLINK A7000R urldecode函数堆栈缓冲区溢出漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29716 | TOTOLINK A7000R堆栈缓冲区溢出漏洞 | 2025-11-14 | 2025-12-02 |
| cnvd-2025-29715 | TOTOLINK LR1200GB命令注入漏洞 | 2025-11-18 | 2025-12-02 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0465 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0464 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0463 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0462 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0461 | Vulnérabilité dans Apache Tomcat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0460 | Vulnérabilité dans Spring Cloud Gateway Server | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0459 | Multiples vulnérabilités dans ISC Kea DHCP | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0401 | Multiples vulnérabilités dans Juniper Networks Secure Analytics | 2025-05-14T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0467 | Multiples vulnérabilités dans IBM Db2 | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0466 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0465 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0464 | Multiples vulnérabilités dans le noyau Linux de Debian | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0463 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0462 | Multiples vulnérabilités dans Microsoft Edge | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0461 | Vulnérabilité dans Apache Tomcat | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0460 | Vulnérabilité dans Spring Cloud Gateway Server | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0459 | Multiples vulnérabilités dans ISC Kea DHCP | 2025-05-30T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| CERTFR-2025-AVI-0401 | Multiples vulnérabilités dans Juniper Networks Secure Analytics | 2025-05-14T00:00:00.000000 | 2025-05-30T00:00:00.000000 |
| certfr-2025-avi-0458 | Multiples vulnérabilités dans Curl | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0457 | Vulnérabilité dans Traefik | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0456 | Multiples vulnérabilités dans Citrix et Xen | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0455 | Multiples vulnérabilités dans Google Chrome | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0454 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| CERTFR-2025-AVI-0458 | Multiples vulnérabilités dans Curl | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| CERTFR-2025-AVI-0457 | Vulnérabilité dans Traefik | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| CERTFR-2025-AVI-0456 | Multiples vulnérabilités dans Citrix et Xen | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| CERTFR-2025-AVI-0455 | Multiples vulnérabilités dans Google Chrome | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| CERTFR-2025-AVI-0454 | Multiples vulnérabilités dans les produits Mozilla | 2025-05-28T00:00:00.000000 | 2025-05-28T00:00:00.000000 |
| certfr-2025-avi-0452 | Multiples vulnérabilités dans les produits IBM | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |
| certfr-2025-avi-0451 | Vulnérabilité dans Microsoft Edge | 2025-05-23T00:00:00.000000 | 2025-05-23T00:00:00.000000 |