Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-65041 |
10 (3.1)
|
Microsoft Partner Center Elevation of Privilege Vulner… |
Microsoft |
Microsoft Partner Center |
2025-12-18T22:02:06.021Z | 2026-01-28T18:16:21.408Z |
| CVE-2025-65037 |
10 (3.1)
|
Azure Container Apps Remote Code Execution Vulnerability |
Microsoft |
Azure Container Apps |
2025-12-18T22:02:06.737Z | 2026-01-28T18:16:21.909Z |
| CVE-2025-64663 |
9.9 (3.1)
|
Custom Question Answering Elevation of Privilege Vulne… |
Microsoft |
Azure Cognitive Service for Language |
2025-12-18T22:02:05.377Z | 2026-01-28T18:16:20.843Z |
| CVE-2025-64679 |
7.8 (3.1)
|
Windows DWM Core Library Elevation of Privilege Vulner… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:56:08.304Z | 2026-01-28T18:16:19.900Z |
| CVE-2025-64678 |
8.8 (3.1)
|
Windows Routing and Remote Access Service (RRAS) Remot… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:56:07.648Z | 2026-01-28T18:16:19.362Z |
| CVE-2025-64672 |
8.8 (3.1)
|
Microsoft SharePoint Server Spoofing Vulnerability |
Microsoft |
Microsoft SharePoint Server Subscription Edition |
2025-12-09T17:56:06.979Z | 2026-01-28T18:16:18.635Z |
| CVE-2025-62553 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Microsoft Office 2019 |
2025-12-09T17:55:55.901Z | 2026-01-28T18:16:14.756Z |
| CVE-2025-62455 |
7.8 (3.1)
|
Microsoft Message Queuing (MSMQ) Elevation of Privileg… |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:48.052Z | 2026-01-28T18:16:11.002Z |
| CVE-2025-64667 |
5.3 (3.1)
|
Microsoft Exchange Server Spoofing Vulnerability |
Microsoft |
Microsoft Exchange Server Subscription Edition RTM |
2025-12-09T17:55:44.488Z | 2026-01-28T18:16:08.066Z |
| CVE-2025-64666 |
7.5 (3.1)
|
Microsoft Exchange Server Elevation of Privilege Vulne… |
Microsoft |
Microsoft Exchange Server 2019 Cumulative Update 15 |
2025-12-09T17:55:45.263Z | 2026-01-28T18:16:08.672Z |
| CVE-2025-62563 |
7.8 (3.1)
|
Microsoft Excel Remote Code Execution Vulnerability |
Microsoft |
Office Online Server |
2025-12-09T17:55:40.704Z | 2026-01-28T18:16:06.110Z |
| CVE-2025-62458 |
7.8 (3.1)
|
Win32k Elevation of Privilege Vulnerability |
Microsoft |
Windows 10 Version 1809 |
2025-12-09T17:55:34.989Z | 2026-01-28T18:16:02.671Z |
| CVE-2025-57796 |
6.8 (3.1)
|
Use of a hardcoded static key to protect sensitive dat… |
Explorance |
Blue |
2026-01-28T17:47:56.607Z | 2026-01-28T18:11:13.946Z |
| CVE-2025-33237 |
5.5 (3.1)
|
NVIDIA HD Audio Driver for Windows contains a vul… |
NVIDIA |
GeForce |
2026-01-28T17:49:02.521Z | 2026-01-28T18:02:25.586Z |
| CVE-2025-23276 |
7.8 (3.1)
|
NVIDIA Installer for Windows contains a vulnerabi… |
NVIDIA |
GPU Display Drivers |
2025-08-02T22:01:47.735Z | 2026-01-28T17:59:24.517Z |
| CVE-2026-24685 |
9.4 (4.0)
|
OpenProject has Argument Injection on Repository modul… |
opf |
openproject |
2026-01-28T16:47:22.850Z | 2026-01-28T17:54:14.053Z |
| CVE-2025-68030 |
7.2 (3.1)
|
WordPress Frontis Blocks plugin <= 1.1.5 - Server Side… |
WP Messiah |
Frontis Blocks |
2026-01-22T16:52:04.821Z | 2026-01-28T17:31:29.744Z |
| CVE-2025-68034 |
9.3 (3.1)
|
WordPress CleverReach® WP plugin <= 1.5.22 - SQL Injec… |
CleverReach® |
CleverReach® WP |
2026-01-22T16:52:05.046Z | 2026-01-28T17:28:24.636Z |
| CVE-2025-68035 |
7.5 (3.1)
|
WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive D… |
tabbyai |
Tabby Checkout |
2026-01-22T16:52:05.252Z | 2026-01-28T17:25:21.581Z |
| CVE-2025-68041 |
7.1 (3.1)
|
WordPress Omnichannel for WooCommerce plugin <= 1.3.65… |
codisto |
Omnichannel for WooCommerce |
2026-01-22T16:52:05.698Z | 2026-01-28T17:24:27.636Z |
| CVE-2025-68046 |
6.5 (3.1)
|
WordPress Contact Form & Lead Form Elementor Builder p… |
ThemeHunk |
Contact Form & Lead Form Elementor Builder |
2026-01-22T16:52:05.895Z | 2026-01-28T17:23:46.876Z |
| CVE-2026-24530 |
5.3 (3.1)
|
WordPress WebP Conversion plugin <= 2.1 - Broken Acces… |
sheepfish |
WebP Conversion |
2026-01-23T14:28:50.001Z | 2026-01-28T17:23:45.267Z |
| CVE-2025-68047 |
8.8 (3.1)
|
WordPress Eventin plugin <= 4.1.1 - PHP Object Injecti… |
Arraytics |
Eventin |
2026-01-22T16:52:06.124Z | 2026-01-28T17:21:42.963Z |
| CVE-2025-68015 |
9 (3.1)
|
WordPress Event Tickets with Ticket Scanner plugin <= … |
Vollstart |
Event Tickets with Ticket Scanner |
2026-01-22T16:52:03.228Z | 2026-01-28T17:20:22.234Z |
| CVE-2025-68016 |
6.5 (3.1)
|
WordPress onepay Payment Gateway For WooCommerce plugi… |
Onepay Sri Lanka |
onepay Payment Gateway For WooCommerce |
2026-01-22T16:52:03.497Z | 2026-01-28T17:18:11.108Z |
| CVE-2025-68017 |
7.5 (3.1)
|
WordPress Antideo Email Validator plugin <= 1.0.10 - S… |
Antideo |
Antideo Email Validator |
2026-01-22T16:52:03.768Z | 2026-01-28T17:14:05.415Z |
| CVE-2025-68018 |
9.4 (3.1)
|
WordPress Order Listener for WooCommerce plugin <= 3.6… |
ilmosys |
Order Listener for WooCommerce |
2026-01-22T16:52:03.969Z | 2026-01-28T17:09:19.390Z |
| CVE-2025-68057 |
7.6 (3.1)
|
WordPress Hospital Doctor Directory plugin <= 1.3.9 - … |
e-plugins |
Hospital Doctor Directory |
2026-01-22T16:52:06.352Z | 2026-01-28T17:02:22.911Z |
| CVE-2026-22458 |
5.3 (3.1)
|
WordPress Wanderland theme <= 1.5 - Broken Access Cont… |
Mikado-Themes |
Wanderland |
2026-01-22T16:52:39.562Z | 2026-01-28T17:01:47.729Z |
| CVE-2025-68058 |
7.6 (3.1)
|
WordPress Institutions Directory plugin <= 1.3..4 - Br… |
e-plugins |
Institutions Directory |
2026-01-22T16:52:06.554Z | 2026-01-28T17:00:49.571Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66488 |
4.6 (3.1)
|
Discourse allows script execution in uploaded HTML/XML… |
discourse |
discourse |
2026-01-28T18:15:52.902Z | 2026-01-28T19:29:11.123Z |
| CVE-2026-21865 |
6.5 (3.1)
|
Discourse topic conversion permission vulnerability fo… |
discourse |
discourse |
2026-01-28T19:51:37.991Z | 2026-01-28T20:10:06.915Z |
| CVE-2022-3689 |
7.2 (3.1)
|
HTML Forms < 1.3.25 - Admin+ SQLi |
Unknown |
HTML Forms |
2022-11-28T13:47:10.138Z | 2025-04-25T15:02:21.600Z |
| CVE-2023-50836 |
5.9 (3.1)
|
WordPress HTML Forms Plugin <= 1.3.28 is vulnerable to… |
ibericode |
HTML Forms |
2023-12-28T10:19:57.333Z | 2024-11-20T19:39:26.127Z |
| CVE-2024-6243 |
5.9 (3.1)
|
HTML Forms < 1.3.33 - Admin+ Stored XSS |
Unknown |
HTML Forms |
2024-07-22T06:00:06.064Z | 2024-08-01T21:33:05.323Z |
| CVE-2024-6412 |
6.5 (3.1)
|
HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - … |
Unknown |
HTML Forms |
2024-07-31T06:00:04.014Z | 2024-08-01T17:41:48.337Z |
| CVE-2025-46236 |
6.5 (3.1)
|
WordPress HTML Forms <= 1.5.2 - Cross Site Scripting (… |
Link Software LLC |
HTML Forms |
2025-04-22T09:53:25.263Z | 2025-04-22T14:12:04.172Z |
| CVE-2024-11090 |
5.3 (3.1)
|
Membership Plugin – Restrict Content <= 3.2.13 - Unaut… |
stellarwp |
Membership Plugin – Restrict Content |
2025-01-26T06:41:20.755Z | 2025-01-27T14:40:21.275Z |
| CVE-2025-9276 |
9.8 (3.0)
|
Cockroach Labs cockroach-k8s-request-cert Empty Root P… |
Cockroach Labs |
cockroach-k8s-request-cert |
2025-09-02T20:00:51.838Z | 2025-09-03T15:32:42.164Z |
| CVE-2026-1409 |
1 (4.0)
2 (3.1)
2 (3.0)
|
Beetel 777VR1 UART excessive authentication |
Beetel |
777VR1 |
2026-01-25T23:32:06.715Z | 2026-01-26T17:29:59.180Z |
| CVE-2025-57156 |
7.5 (3.1)
|
NULL pointer dereference in the dacp_reply_playqu… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:50:17.449Z |
| CVE-2025-59464 |
6.5 (3.0)
|
A memory leak in Node.js’s OpenSSL integration oc… |
nodejs |
node |
2026-01-20T20:41:55.599Z | 2026-01-21T20:41:09.437Z |
| CVE-2025-59465 |
7.5 (3.0)
|
A malformed `HTTP/2 HEADERS` frame with oversized… |
nodejs |
node |
2026-01-20T20:41:55.317Z | 2026-01-21T20:11:28.986Z |
| CVE-2025-59466 |
5.9 (3.0)
|
We have identified a bug in Node.js error handlin… |
nodejs |
node |
2026-01-20T20:41:55.628Z | 2026-01-21T18:52:57.892Z |
| CVE-2025-63647 |
7.5 (3.1)
|
A NULL pointer dereference in the parse_meta func… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:52:39.071Z |
| CVE-2026-1410 |
5.4 (4.0)
6.4 (3.1)
6.4 (3.0)
|
Beetel 777VR1 UART missing authentication |
Beetel |
777VR1 |
2026-01-26T00:02:05.878Z | 2026-01-26T17:29:34.409Z |
| CVE-2025-63648 |
7.5 (3.1)
|
A NULL pointer dereference in the dacp_reply_play… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:47:18.727Z |
| CVE-2025-66692 |
7.5 (3.1)
|
A buffer over-read in the PublicKey::verify() met… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:40:24.978Z |
| CVE-2025-66902 |
7.5 (3.1)
|
An input validation issue in in Pithikos websocke… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:45:23.965Z |
| CVE-2026-21636 |
5.8 (3.0)
|
A flaw in Node.js's permission model allows Unix … |
nodejs |
node |
2026-01-20T20:41:55.700Z | 2026-01-21T18:52:53.133Z |
| CVE-2026-1411 |
5.4 (4.0)
6.1 (3.1)
6.1 (3.0)
|
Beetel 777VR1 UART access control |
Beetel |
777VR1 |
2026-01-26T00:32:06.281Z | 2026-01-26T17:29:02.637Z |
| CVE-2026-21637 |
5.9 (3.0)
|
A flaw in Node.js TLS error handling allows remot… |
nodejs |
node |
2026-01-20T20:41:55.352Z | 2026-01-21T20:22:51.033Z |
| CVE-2026-21640 |
2.7 (3.0)
|
HackerOne community member Faraz Ahmed (PakCyberb… |
Revive |
Revive Adserver |
2026-01-20T20:48:47.940Z | 2026-01-21T18:52:43.635Z |
| CVE-2025-13292 |
7.6 (4.0)
|
Improper access control in Google Cloud Apigee-X allow… |
Google Cloud |
Apigee-X |
2025-12-06T05:05:51.597Z | 2026-01-30T19:08:02.176Z |
| CVE-2024-34703 |
7.5 (3.1)
|
Botan Vulnerable to Denial of Service Due to Overly La… |
randombit |
botan |
2024-06-30T20:22:32.910Z | 2026-01-30T19:54:58.434Z |
| CVE-2022-39314 |
4.8 (3.0)
|
User enumeration in the code-based login and password … |
getkirby |
kirby |
2022-10-24T00:00:00.000Z | 2026-01-30T19:57:13.349Z |
| CVE-2026-21641 |
7.1 (3.0)
|
HackerOne community member Jad Ghamloush (0xjad) … |
Revive |
Revive Adserver |
2026-01-20T20:48:47.885Z | 2026-01-21T18:52:48.506Z |
| CVE-2026-21642 |
6.1 (3.0)
|
HackerOne community member Patrick Lang (7yr) has… |
Revive |
Revive Adserver |
2026-01-20T20:48:48.079Z | 2026-01-21T20:47:21.691Z |
| CVE-2026-22258 |
7.5 (3.1)
|
Suricata DCERPC: unbounded fragment buffering leads to… |
OISF |
suricata |
2026-01-27T16:17:29.903Z | 2026-01-27T18:28:38.707Z |
| CVE-2025-55423 |
9.8 (3.1)
|
A command injection vulnerability exists in the u… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-27T14:58:59.154Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-66488 | Discourse is an open source discussion platform. A vulnerability present in versions prior to 3.5.4… | 2026-01-28T19:16:22.453 | 2026-01-30T20:31:25.150 |
| fkie_cve-2026-21865 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:14.530 | 2026-01-30T20:30:18.947 |
| fkie_cve-2022-3689 | The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before … | 2022-11-28T14:15:13.530 | 2026-01-30T20:28:37.070 |
| fkie_cve-2023-50836 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2023-12-28T11:15:09.333 | 2026-01-30T20:28:32.403 |
| fkie_cve-2024-6243 | The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs… | 2024-07-22T06:15:02.663 | 2026-01-30T20:28:24.210 |
| fkie_cve-2024-6412 | The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which coul… | 2024-07-31T06:15:04.083 | 2026-01-30T20:28:17.483 |
| fkie_cve-2025-46236 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-04-22T10:15:16.943 | 2026-01-30T20:28:01.297 |
| fkie_cve-2024-11090 | The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Sensitive Informatio… | 2025-01-26T07:15:08.750 | 2026-01-30T20:27:55.477 |
| fkie_cve-2025-9276 | Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. … | 2025-09-02T20:15:40.407 | 2026-01-30T20:27:48.443 |
| fkie_cve-2026-1409 | A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. This issue … | 2026-01-26T00:16:03.050 | 2026-01-30T20:27:24.987 |
| fkie_cve-2025-57156 | NULL pointer dereference in the dacp_reply_playqueueedit_clear function in src/httpd_dacp.c in ownt… | 2026-01-20T21:16:03.790 | 2026-01-30T20:27:01.903 |
| fkie_cve-2025-59464 | A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to… | 2026-01-20T21:16:03.900 | 2026-01-30T20:26:26.333 |
| fkie_cve-2025-59465 | A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash … | 2026-01-20T21:16:04.010 | 2026-01-30T20:25:39.890 |
| fkie_cve-2025-59466 | We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors … | 2026-01-20T21:16:04.110 | 2026-01-30T20:25:11.810 |
| fkie_cve-2025-63647 | A NULL pointer dereference in the parse_meta function (src/httpd_daap.c) of owntone-server commit 3… | 2026-01-20T21:16:04.220 | 2026-01-30T20:24:28.027 |
| fkie_cve-2026-1410 | A vulnerability was detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. Impacted is an unknown fu… | 2026-01-26T01:15:48.773 | 2026-01-30T20:24:17.860 |
| fkie_cve-2025-63648 | A NULL pointer dereference in the dacp_reply_playqueueedit_move function (src/httpd_dacp.c) of ownt… | 2026-01-20T21:16:04.333 | 2026-01-30T20:23:34.890 |
| fkie_cve-2025-66692 | A buffer over-read in the PublicKey::verify() method of Binance - Trust Wallet Core before commit 5… | 2026-01-20T21:16:04.437 | 2026-01-30T20:22:09.553 |
| fkie_cve-2025-66902 | An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtai… | 2026-01-20T21:16:04.557 | 2026-01-30T20:21:29.483 |
| fkie_cve-2026-21636 | A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network … | 2026-01-20T21:16:05.813 | 2026-01-30T20:20:56.843 |
| fkie_cve-2026-1411 | A flaw has been found in Beetel 777VR1 up to 01.00.09/01.00.09_55. The affected element is an unkno… | 2026-01-26T01:15:49.363 | 2026-01-30T20:19:25.920 |
| fkie_cve-2026-21637 | A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS… | 2026-01-20T21:16:05.950 | 2026-01-30T20:18:32.377 |
| fkie_cve-2026-21640 | HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the … | 2026-01-20T21:16:06.063 | 2026-01-30T20:17:33.390 |
| fkie_cve-2025-13292 | A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apige… | 2025-12-06T05:16:44.110 | 2026-01-30T20:16:40.567 |
| fkie_cve-2024-34703 | Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either a… | 2024-06-30T21:15:02.053 | 2026-01-30T20:16:40.003 |
| fkie_cve-2022-39314 | Kirby is a flat-file CMS. In versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, Kirby is subje… | 2022-10-24T14:15:51.477 | 2026-01-30T20:16:35.970 |
| fkie_cve-2026-21641 | HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability… | 2026-01-20T21:16:06.187 | 2026-01-30T20:15:53.850 |
| fkie_cve-2026-21642 | HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `ba… | 2026-01-20T21:16:06.310 | 2026-01-30T20:14:51.447 |
| fkie_cve-2026-22258 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, crafted DCERPC t… | 2026-01-27T17:16:12.253 | 2026-01-30T20:09:24.067 |
| fkie_cve-2025-55423 | A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router mod… | 2026-01-20T18:16:04.810 | 2026-01-30T20:07:11.633 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-24v5-4jhh-vxrv |
6.4 (3.1)
|
The Passster – Password Protect Pages and Content plugin for WordPress is vulnerable to Stored Cros… | 2026-01-28T15:31:30Z | 2026-01-28T15:31:30Z |
| ghsa-wwvm-vmw2-56q8 |
3.7 (3.1)
7.0 (4.0)
|
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certif… | 2025-12-12T03:30:20Z | 2026-01-28T15:31:29Z |
| ghsa-qf35-p6j5-89hp |
7.8 (3.1)
8.5 (4.0)
|
An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker… | 2026-01-06T03:31:36Z | 2026-01-28T15:31:29Z |
| ghsa-9cx6-52c2-phg6 |
5.9 (3.1)
7.0 (4.0)
|
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an imprope… | 2025-12-12T03:30:19Z | 2026-01-28T15:31:28Z |
| ghsa-xgm3-v5hc-wc6j |
8.2 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-o… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:29Z |
| ghsa-x94j-wr94-g6g7 |
4.3 (3.1)
|
The imwptip plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-q3p7-5h3x-778g |
5.1 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent auth… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-q3j5-7jc9-jvf7 |
5.3 (3.1)
|
The Vzaar Media Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in … | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-ppq6-cj3p-4xhv |
8.8 (3.1)
|
The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-p7w4-x87r-m2xc |
4.3 (3.1)
|
The Bitcoin Donate Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-m9wm-cxxw-876h |
8.5 (4.0)
|
Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_di… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-gmxm-wmfm-4gvg |
4.4 (3.1)
|
The WP Google Ad Manager Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-g2xg-qw63-fpx3 |
6.9 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in the PDF file upload functionality of Live Helper… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-fcg3-c6jm-9qxr |
5.1 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent auth… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-cg8j-jfqg-q55w |
5.1 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent auth… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-95g8-rf6q-22v9 |
7.5 (3.1)
|
The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a … | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-4qh4-93x2-h5wr |
4.3 (3.1)
|
The Change WP URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions … | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-45v9-p764-4x3m |
5.1 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent auth… | 2026-01-28T12:30:29Z | 2026-01-28T12:30:29Z |
| ghsa-v47p-p4r6-wcwj |
5.3 (3.1)
|
The Rupantorpay plugin for WordPress is vulnerable to unauthorized modification of data due to a mi… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-rc9r-w4h6-4hqv |
6.4 (3.1)
|
The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Tem… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-pgp3-jrf2-crj2 |
6.0 (4.0)
|
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-mf42-3pgf-r88c |
8.8 (3.1)
|
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-jfcj-mjhj-m88q |
5.1 (4.0)
|
Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent auth… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-g75h-mgx2-c5rq |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-cqpf-3v3x-x2f7 |
6.1 (3.1)
|
The SEO Links Interlinking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-chvq-5q36-924f |
7.1 (4.0)
|
Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. T… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-7c75-f958-6j3m |
4.3 (3.1)
|
The Recooty – Job Widget (Old Dashboard) plugin for WordPress is vulnerable to Cross-Site Request F… | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-75rp-pqq4-fpv7 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-33r4-r5rc-phcf |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ghsa-3376-jw3x-f6j6 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk … | 2026-01-28T12:30:28Z | 2026-01-28T12:30:28Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-418 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:46.070716Z |
| pysec-2021-417 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:45.918636Z |
| pysec-2021-416 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.767410Z |
| pysec-2021-415 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.621437Z |
| pysec-2021-414 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:45.470098Z |
| pysec-2021-413 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:45.325083Z |
| pysec-2021-412 |
|
TensorFlow is an open source platform for machine learning. In affected versions the asyn… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:45.180075Z |
| pysec-2021-411 |
|
TensorFlow is an open source platform for machine learning. In affected versions the code… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:45.099185Z |
| pysec-2021-410 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T22:15:00Z | 2021-11-13T06:52:44.955817Z |
| pysec-2021-409 |
|
TensorFlow is an open source platform for machine learning. In affected versions the proc… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.799831Z |
| pysec-2021-408 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:44.644675Z |
| pysec-2021-407 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.476075Z |
| pysec-2021-406 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:44.328170Z |
| pysec-2021-405 |
|
TensorFlow is an open source platform for machine learning. In affected versions the code… | tensorflow | 2021-11-05T23:15:00Z | 2021-11-13T06:52:44.160284Z |
| pysec-2021-404 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.991676Z |
| pysec-2021-403 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.843277Z |
| pysec-2021-402 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:43.758467Z |
| pysec-2021-401 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T22:15:00Z | 2021-11-13T06:52:43.607331Z |
| pysec-2021-400 |
|
TensorFlow is an open source platform for machine learning. In affected versions the code… | tensorflow | 2021-11-05T22:15:00Z | 2021-11-13T06:52:43.429056Z |
| pysec-2021-399 |
|
TensorFlow is an open source platform for machine learning. In affected versions the impl… | tensorflow | 2021-11-05T22:15:00Z | 2021-11-13T06:52:43.264871Z |
| pysec-2021-398 |
|
TensorFlow is an open source platform for machine learning. In affected versions the shap… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:43.104468Z |
| pysec-2021-397 |
|
TensorFlow is an open source platform for machine learning. In affected versions during T… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:42.949977Z |
| pysec-2021-396 |
|
TensorFlow is an open source platform for machine learning. In affected versions an attac… | tensorflow | 2021-11-05T21:15:00Z | 2021-11-13T06:52:42.793363Z |
| pysec-2021-395 |
|
TensorFlow is an open source platform for machine learning. In affected versions while ca… | tensorflow | 2021-11-05T22:15:00Z | 2021-11-13T06:52:42.645758Z |
| pysec-2021-394 |
|
TensorFlow is an open source platform for machine learning. In affeced versions during ex… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.499515Z |
| pysec-2021-393 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.s… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.348013Z |
| pysec-2021-392 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.i… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.174686Z |
| pysec-2021-391 |
|
TensorFlow is an open source platform for machine learning. In affected versions if `tf.t… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:42.007550Z |
| pysec-2021-390 |
|
TensorFlow is an open source platform for machine learning. In affected versions TensorFl… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:41.833730Z |
| pysec-2021-389 |
|
TensorFlow is an open source platform for machine learning. In affected versions the Kera… | tensorflow | 2021-11-05T20:15:00Z | 2021-11-13T06:52:41.665281Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32489 | TCPDF before 6.7.4 mishandles calls that use HTML syntax. | 2024-04-16T05:01:54.667173Z |
| gsd-2024-32488 | In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur duri… | 2024-04-16T05:01:54.594334Z |
| gsd-2024-3778 | The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded … | 2024-04-15T05:02:09.014732Z |
| gsd-2024-3777 | The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthent… | 2024-04-15T05:02:09.057524Z |
| gsd-2024-3776 | The parameter used in the login page of Netvision airPASS is not properly filtered for us… | 2024-04-15T05:02:09.247268Z |
| gsd-2024-3775 | aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does … | 2024-04-15T05:02:09.270813Z |
| gsd-2024-3774 | aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration … | 2024-04-15T05:02:09.135484Z |
| gsd-2024-3773 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-15T05:02:09.302686Z |
| gsd-2024-3772 | Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attacker… | 2024-04-15T05:02:09.205289Z |
| gsd-2024-3771 | A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as crit… | 2024-04-15T05:02:09.030027Z |
| gsd-2024-3770 | A vulnerability has been found in PHPGurukul Student Record System 3.20 and classified as… | 2024-04-15T05:02:09.096290Z |
| gsd-2024-3769 | A vulnerability, which was classified as critical, was found in PHPGurukul Student Record… | 2024-04-15T05:02:09.159026Z |
| gsd-2024-3768 | A vulnerability, which was classified as critical, has been found in PHPGurukul News Port… | 2024-04-15T05:02:09.024287Z |
| gsd-2024-3767 | A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vuln… | 2024-04-15T05:02:09.123846Z |
| gsd-2024-3766 | A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin … | 2024-04-15T05:02:09.257984Z |
| gsd-2024-3765 | A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL,… | 2024-04-15T05:02:09.200385Z |
| gsd-2024-3764 | A vulnerability classified as problematic has been found in Tuya Camera 3.2.9. Affected i… | 2024-04-14T05:01:58.411045Z |
| gsd-2024-3763 | A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This iss… | 2024-04-14T05:01:58.291334Z |
| gsd-2024-3762 | A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This … | 2024-04-14T05:01:58.508492Z |
| gsd-2024-3761 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:58.439474Z |
| gsd-2024-3760 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:58.243052Z |
| gsd-2024-3759 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:58.411524Z |
| gsd-2024-3758 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:58.511091Z |
| gsd-2024-3757 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:58.476646Z |
| gsd-2024-31078 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:54.657305Z |
| gsd-2024-31071 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:54.928586Z |
| gsd-2024-32487 | less through 653 allows OS command execution via a newline character in the name of a fil… | 2024-04-14T05:01:53.601837Z |
| gsd-2024-32486 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-14T05:01:53.595374Z |
| gsd-2024-3756 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.767875Z |
| gsd-2024-3755 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.633219Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-191644 | Malicious code in lbank-connector-pythons (PyPI) | 2025-10-22T12:45:32Z | 2025-12-31T02:45:15Z |
| MAL-2025-191643 | Malicious code in krisp-audio (PyPI) | 2025-11-02T16:54:07Z | 2025-12-31T02:45:15Z |
| MAL-2025-191640 | Malicious code in install-all-setup (PyPI) | 2025-10-29T21:52:42Z | 2025-12-31T02:45:15Z |
| MAL-2025-191636 | Malicious code in humunculous591014 (PyPI) | 2025-10-19T16:45:19Z | 2025-12-31T02:45:15Z |
| MAL-2025-191634 | Malicious code in humunculous5910 (PyPI) | 2025-10-19T16:57:22Z | 2025-12-31T02:45:15Z |
| MAL-2025-191631 | Malicious code in hexdecpy (PyPI) | 2025-10-24T21:59:02Z | 2025-12-31T02:45:15Z |
| MAL-2025-191630 | Malicious code in hexdecli (PyPI) | 2025-10-25T16:03:26Z | 2025-12-31T02:45:15Z |
| MAL-2025-191624 | Malicious code in ethaddrlib (PyPI) | 2025-10-25T09:03:01Z | 2025-12-31T02:45:15Z |
| MAL-2025-1514 | Malicious code in ninjainjtest1337 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-9962 | Malicious code in colorbytes (PyPI) | 2024-09-08T17:47:46Z | 2025-12-31T02:45:15Z |
| MAL-2024-9947 | Malicious code in audio-separator-fork (PyPI) | 2024-08-11T12:09:25Z | 2025-12-31T02:45:15Z |
| MAL-2024-9938 | Malicious code in aiotrans (PyPI) | 2024-08-14T22:01:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-9937 | Malicious code in aiohttp-libscss (PyPI) | 2024-08-10T13:21:32Z | 2025-12-31T02:45:15Z |
| MAL-2024-9271 | Malicious code in lab-3-package-438d82fc (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-9266 | Malicious code in innostage (PyPI) | 2024-10-07T13:23:16Z | 2025-12-31T02:45:15Z |
| MAL-2024-8927 | Malicious code in artifact-lab-3-package-db7d716a (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-8914 | Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-8044 | Malicious code in artifact-lab-3-package-2b6a4744 (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-8023 | Malicious code in artifact-lab-3-package-b6920ef4 (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-8017 | Malicious code in artifact-lab-3-package-392c6acd (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-5721 | Malicious code in pyhttpproxifier (PyPI) | 2024-06-25T13:40:09Z | 2025-12-31T02:45:15Z |
| MAL-2024-5357 | Malicious code in me-dheeraj-moye-moye (PyPI) | 2024-06-25T13:37:11Z | 2025-12-31T02:45:15Z |
| MAL-2024-5326 | Malicious code in libsocks5 (PyPI) | 2024-06-25T13:36:56Z | 2025-12-31T02:45:15Z |
| MAL-2024-12342 | Malicious code in rwoka (PyPI) | 2024-12-14T16:26:57Z | 2025-12-31T02:45:15Z |
| MAL-2024-12338 | Malicious code in requesr (PyPI) | 2024-12-24T18:09:49Z | 2025-12-31T02:45:15Z |
| MAL-2024-12336 | Malicious code in raydium (PyPI) | 2024-07-03T17:04:18Z | 2025-12-31T02:45:15Z |
| MAL-2024-12326 | Malicious code in pitest117 (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-12320 | Malicious code in osint-tool (PyPI) | 2024-10-02T07:55:07Z | 2025-12-31T02:45:15Z |
| MAL-2024-12317 | Malicious code in oe-extract-idss (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-12316 | Malicious code in oe-extract-ids (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0893 | JetBrains TeamCity: Mehrere Schwachstellen | 2025-04-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0890 | Rancher: Schwachstelle ermöglicht Privilegieneskalation | 2025-04-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0888 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2021-08-18T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0799 | Google Chrome und Microsoft Edge: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2024-3532 | Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service | 2022-02-02T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2024-0910 | Red Hat Single Sign On: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2024-04-16T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2200 | poppler: Schwachstelle ermöglicht Denial of Service | 2023-08-28T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2171 | poppler: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-08-24T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-2051 | poppler: Mehrere Schwachstellen | 2023-08-13T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-1584 | Red Hat Single Sign On: Mehrere Schwachstellen | 2023-06-27T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2023-0209 | Red Hat Integration Camel Extensions for Quarkus: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-01-26T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-1635 | Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-10-05T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0771 | Apache XML-Security for Java: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2021-09-19T22:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0726 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-11-15T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2022-0105 | Apache ActiveMQ: Schwachstelle ermöglicht Denial of Service | 2022-02-03T23:00:00.000+00:00 | 2025-04-27T22:00:00.000+00:00 |
| wid-sec-w-2025-0887 | VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0884 | Acronis Cyber Protect (Cloud Agent): Mehrere Schwachstellen | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0883 | IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-24T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0865 | Ruby: Schwachstelle ermöglicht Manipulation von Dateien | 2013-01-07T23:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0719 | SAP Patchday April 2025: Mehrere Schwachstellen | 2025-04-07T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2024-2153 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2024-09-16T22:00:00.000+00:00 | 2025-04-24T22:00:00.000+00:00 |
| wid-sec-w-2025-0881 | Drupal Extensions: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0880 | GitLab: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0878 | IBM InfoSphere Information Server: Mehrere Schwachstellen | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0876 | Proxmox Virtual Environment: Schwachstelle ermöglicht Manipulation von Dateien | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0874 | SonicWall SSL-VPN: Schwachstelle ermöglicht Denial of Service | 2025-04-23T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2025-0856 | Proxmox Virtual Environment: Mehrere Schwachstellen | 2025-04-21T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2024-0486 | Eclipse Jetty: Schwachstelle ermöglicht Denial of Service | 2024-02-26T23:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2023-2627 | Eclipse Jetty: Mehrere Schwachstellen ermöglichen Denial of Service | 2023-10-10T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| wid-sec-w-2022-0614 | Eclipse Jetty: Mehrere Schwachstellen | 2022-07-07T22:00:00.000+00:00 | 2025-04-23T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1925 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update | 2024-04-18T12:41:00+00:00 | 2026-02-03T21:25:06+00:00 |
| rhsa-2024:1899 | Red Hat Security Advisory: OpenShift Container Platform 4.12.56 security update | 2024-04-26T04:36:21+00:00 | 2026-02-03T21:24:53+00:00 |
| rhsa-2024:1892 | Red Hat Security Advisory: OpenShift Container Platform 4.15.10 packages and security update | 2024-04-26T05:31:01+00:00 | 2026-02-03T21:24:43+00:00 |
| rhsa-2024:1683 | Red Hat Security Advisory: OpenShift Container Platform 4.13.39 bug fix and security update | 2024-04-08T09:52:30+00:00 | 2026-02-03T21:24:35+00:00 |
| rhsa-2024:1681 | Red Hat Security Advisory: OpenShift Container Platform 4.14.20 bug fix and security update | 2024-04-08T08:43:50+00:00 | 2026-02-03T21:24:32+00:00 |
| rhsa-2024:1679 | Red Hat Security Advisory: OpenShift Container Platform 4.12.55 bug fix and security update | 2024-04-08T06:38:12+00:00 | 2026-02-03T21:24:32+00:00 |
| rhsa-2024:1677 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update | 2024-04-04T15:22:45+00:00 | 2026-02-03T21:24:30+00:00 |
| rhsa-2024:1676 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update | 2024-04-04T15:23:45+00:00 | 2026-02-03T21:24:28+00:00 |
| rhsa-2024:1675 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update | 2024-04-04T15:23:50+00:00 | 2026-02-03T21:24:26+00:00 |
| rhsa-2024:1674 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update | 2024-04-04T15:23:51+00:00 | 2026-02-03T21:24:22+00:00 |
| rhsa-2024:1668 | Red Hat Security Advisory: OpenShift Container Platform 4.15.8 bug fix and security update | 2024-04-08T06:24:52+00:00 | 2026-02-03T21:24:20+00:00 |
| rhsa-2024:1616 | Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.1.1 for RHEL 9 | 2024-07-01T00:28:51+00:00 | 2026-02-03T21:24:14+00:00 |
| rhsa-2024:1433 | Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update | 2024-03-20T00:40:07+00:00 | 2026-02-03T21:23:55+00:00 |
| rhsa-2024:1383 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.0 security, enhancement, & bug fix update | 2024-03-19T15:19:34+00:00 | 2026-02-03T21:23:53+00:00 |
| rhsa-2024:1210 | Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update | 2024-03-13T15:31:52+00:00 | 2026-02-03T21:23:47+00:00 |
| rhsa-2024:1197 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update | 2024-03-06T17:52:22+00:00 | 2026-02-03T21:23:45+00:00 |
| rhsa-2024:1196 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update | 2024-03-06T17:58:21+00:00 | 2026-02-03T21:23:44+00:00 |
| rhsa-2024:1194 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update | 2024-03-06T15:38:13+00:00 | 2026-02-03T21:23:43+00:00 |
| rhsa-2024:1193 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update | 2024-03-06T15:32:21+00:00 | 2026-02-03T21:23:40+00:00 |
| rhsa-2024:1150 | Red Hat Security Advisory: buildah security update | 2024-03-05T18:16:47+00:00 | 2026-02-03T21:23:38+00:00 |
| rhsa-2024:1192 | Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update | 2024-03-06T15:32:30+00:00 | 2026-02-03T21:23:37+00:00 |
| rhsa-2024:1130 | Red Hat Security Advisory: openssh security update | 2024-03-05T18:18:29+00:00 | 2026-02-03T21:23:30+00:00 |
| rhsa-2024:10908 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7 | 2024-12-10T08:27:47+00:00 | 2026-02-03T21:23:30+00:00 |
| rhsa-2024:10784 | Red Hat Security Advisory: rhc security update | 2024-12-04T08:38:33+00:00 | 2026-02-03T21:20:28+00:00 |
| rhsa-2024:10759 | Red Hat Security Advisory: rhc security update | 2024-12-03T16:12:11+00:00 | 2026-02-03T21:20:25+00:00 |
| rhsa-2024:10517 | Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security and extras update | 2024-12-03T08:24:26+00:00 | 2026-02-03T21:20:22+00:00 |
| rhsa-2024:1027 | Red Hat Security Advisory: Migration Toolkit for Applications security update | 2024-02-28T18:13:39+00:00 | 2026-02-03T21:20:19+00:00 |
| rhsa-2024:0789 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final) | 2024-02-12T16:02:02+00:00 | 2026-02-03T21:20:13+00:00 |
| rhsa-2024:0778 | Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update | 2024-02-12T10:38:58+00:00 | 2026-02-03T21:20:12+00:00 |
| rhsa-2024:0746 | Red Hat Security Advisory: new container image: rhceph-5.3 | 2024-02-08T16:49:55+00:00 | 2026-02-03T21:20:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-285-13 | Mitsubishi Electric MELSEC-F Series | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-12 | Weintek cMT3000 HMI Web CGI | 2023-10-12T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-243-03 | PTC Kepware KepServerEX (Update A) | 2023-08-31T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-220-01 | Schneider Electric IGSS | 2023-08-08T06:00:00.000000Z | 2023-10-12T06:00:00.000000Z |
| icsa-23-285-11 | Siemens Mendix Forgot Password Module | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-10 | Siemens Tecnomatix Plant Simulation | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-09 | Siemens CPCI85 Firmware of SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-05 | Siemens Simcenter Amesim | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-04 | Siemens Xpedition Layout Browser | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-03 | Siemens SICAM A8000 Devices | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-02 | Siemens SCALANCE W1750D | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-285-01 | Siemens SIMATIC CP products | 2023-10-10T00:00:00Z | 2023-10-10T00:00:00Z |
| icsa-23-131-02 | Siemens SCALANCE W1750D | 2023-05-09T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-223-07 | Siemens SCALANCE (Update A) | 2022-08-09T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-132-08 | Siemens Industrial Products with OPC UA | 2022-05-10T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-22-069-03 | Siemens SINEC NMS | 2022-03-08T00:00:00.000000Z | 2023-10-10T00:00:00.000000Z |
| icsa-23-278-02 | Qognify NiceVision | 2023-10-05T06:00:00.000000Z | 2023-10-05T06:00:00.000000Z |
| icsa-23-278-01 | Hitachi Energy AFS65x,AFF66x, AFS67x, and AFR67x Series Products | 2023-10-05T06:00:00.000000Z | 2023-10-05T06:00:00.000000Z |
| icsa-23-271-01 | Rockwell Automation PanelView 800 | 2023-09-28T06:00:00.000000Z | 2023-09-28T06:00:00.000000Z |
| icsa-23-271-02 | DEXMA DexGate | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-05 | Baker Hughes Bently Nevada 3500 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-04 | Advantech EKI-1524-CE series | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-02 | Hitachi Energy Asset Suite 9 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-269-01 | Suprema BioStar 2 | 2023-09-26T06:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-024-02 | SOCOMEC MODULYS GP (UPDATE A) | 2023-01-24T07:00:00.000000Z | 2023-09-26T06:00:00.000000Z |
| icsa-23-264-06 | Rockwell Automation FactoryTalk View Machine Edition | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-05 | Rockwell Automation Connected Components Workbench | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-04 | Rockwell Automation Select Logix Communication Modules | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-03 | Delta Electronics DIAScreen | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| icsa-23-264-01 | Real Time Automation 460 Series | 2023-09-21T06:00:00.000000Z | 2023-09-21T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-esa-sma-info-disclo-vou2ghbz | Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-04-12T12:54:51+00:00 |
| cisco-sa-esa-sma-info-disclo-VOu2GHbZ | Cisco Content Security Management Appliance Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-04-12T12:54:51+00:00 |
| cisco-sa-webex-vobwrkwv | Cisco Webex Meetings HTML Injection Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-webex-andro-iac-f3ur8frb | Cisco Webex Meetings for Android Avatar Modification Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-webex-andro-iac-f3UR8frB | Cisco Webex Meetings for Android Avatar Modification Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-webex-VObwRKWV | Cisco Webex Meetings HTML Injection Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-vmanage-yutvwqy | Cisco SD-WAN vManage Software Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-vmanage-YuTVWqy | Cisco SD-WAN vManage Software Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-umbrella-inject-gbzghp5t | Cisco Umbrella Link and CSV Formula Injection Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-umbrella-inject-gbZGHP5T | Cisco Umbrella Link and CSV Formula Injection Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-sb-rv34x-rce-8bfg2h6b | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-sb-rv34x-rce-8bfG2h6b | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-sb-rv-bypass-inject-rbhgvfdx | Cisco Small Business RV Series Routers Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-sb-rv-bypass-inject-Rbhgvfdx | Cisco Small Business RV Series Routers Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-rv-rce-q3rxhnvm | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-rv-rce-q3rxHnvm | Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-xss-q4pzcnzj | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-xss-Q4PZcNzJ | Cisco Unified Communications Products Cross-Site Scripting Vulnerabilities | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-selfcare-vrwwwhge | Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-selfcare-VRWWWHgE | Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-rce-pqvywyb | Cisco Unified Communications Products Remote Code Execution Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-rce-pqVYwyb | Cisco Unified Communications Products Remote Code Execution Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-inf-disc-wcxznjl2 | Cisco Unified Communications Manager Information Disclosure Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-cucm-inf-disc-wCxZNjL2 | Cisco Unified Communications Manager Information Disclosure Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-amp-imm-dll-tu79hvko | Cisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-amp-imm-dll-tu79hvkO | Cisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability | 2021-04-07T16:00:00+00:00 | 2021-04-07T16:00:00+00:00 |
| cisco-sa-20190703-jabber-dll | Cisco Jabber for Windows DLL Preloading Vulnerability | 2019-07-03T16:00:00+00:00 | 2021-04-01T22:11:38+00:00 |
| cisco-sa-fast-zqr6dd5 | Cisco IOS XE Software Fast Reload Vulnerabilities | 2021-03-24T16:00:00+00:00 | 2021-03-31T18:40:34+00:00 |
| cisco-sa-fast-Zqr6DD5 | Cisco IOS XE Software Fast Reload Vulnerabilities | 2021-03-24T16:00:00+00:00 | 2021-03-31T18:40:34+00:00 |
| cisco-sa-iox-pt-hwgcpf7g | Cisco IOx Application Environment Path Traversal Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-30T22:12:35+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-27748 | A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-26159 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none | 2020-09-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25207 | JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:05.000Z |
| msrc_cve-2020-25013 | JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. | 2020-11-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-17527 | Apache Tomcat: Request header mix-up between HTTP/2 streams | 2020-12-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-14150 | GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison. | 2020-06-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2020-12825 | libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption. | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:04.000Z |
| msrc_cve-2019-9192 | In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion | 2019-02-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-9185 | Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke | 2019-03-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-18368 | In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-17414 | tinylcy Vino through 2017-12-15 allows remote attackers to cause a denial of service ("vn_get_string error: Resource temporarily unavailable" error and daemon crash) via a long URL. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:03.000Z |
| msrc_cve-2019-15485 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15484 | Bolt before 3.6.10 has XSS via an image's alt or title field. | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-15483 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log | 2019-08-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-14959 | JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. | 2019-10-02T00:00:00.000Z | 2025-10-01T23:11:02.000Z |
| msrc_cve-2019-12280 | PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element. | 2019-06-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-25078 | man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.) | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-20225 | An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely | 2020-05-02T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-14628 | An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store. | 2023-01-04T00:00:00.000Z | 2025-10-01T23:11:01.000Z |
| msrc_cve-2018-10195 | lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around. | 2021-06-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9120 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-9118 | PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. | 2018-08-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-8923 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. | 2017-05-02T00:00:00.000Z | 2025-10-01T23:11:00.000Z |
| msrc_cve-2017-6839 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6838 | Integer overflow in sfcommands/sfconvert.c in Audio File Library | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6837 | WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6836 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:59.000Z |
| msrc_cve-2017-6835 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6834 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| msrc_cve-2017-6833 | Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service | 2017-03-02T00:00:00.000Z | 2025-10-01T23:10:58.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14323-1 | go1.22-1.22.7-1.1 on GA media | 2024-09-06T00:00:00Z | 2024-09-06T00:00:00Z |
| opensuse-su-2024:14322-1 | expat-2.6.3-1.1 on GA media | 2024-09-06T00:00:00Z | 2024-09-06T00:00:00Z |
| opensuse-su-2024:14321-1 | docker-26.1.5_ce-2.1 on GA media | 2024-09-06T00:00:00Z | 2024-09-06T00:00:00Z |
| opensuse-su-2024:14320-1 | containerd-1.7.21-1.1 on GA media | 2024-09-06T00:00:00Z | 2024-09-06T00:00:00Z |
| opensuse-su-2024:14319-1 | aardvark-dns-1.12.2-1.1 on GA media | 2024-09-06T00:00:00Z | 2024-09-06T00:00:00Z |
| opensuse-su-2024:0278-1 | Security update for chromium | 2024-09-05T10:49:38Z | 2024-09-05T10:49:38Z |
| opensuse-su-2024:14318-1 | python310-Django-5.1.1-1.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14317-1 | libopenssl-3-devel-3.1.4-13.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14316-1 | nqptp-1.2.4-1.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14315-1 | libvirt-10.7.0-1.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14314-1 | klp-build-0~20240902.c95cc9e-1.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14313-1 | chromedriver-128.0.6613.119-1.1 on GA media | 2024-09-05T00:00:00Z | 2024-09-05T00:00:00Z |
| opensuse-su-2024:14312-1 | runc-1.2.0~rc3-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14311-1 | python310-numpy1-1.26.4-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14310-1 | python310-Django4-4.2.16-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14309-1 | libpcap-devel-1.10.5-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14308-1 | htmldoc-1.9.18-2.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14307-1 | haproxy-3.0.4+git0.7a59afa93-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14306-1 | 389-ds-3.1.1~git13.a9c7ff9-1.1 on GA media | 2024-09-04T00:00:00Z | 2024-09-04T00:00:00Z |
| opensuse-su-2024:14305-1 | tcpdump-4.99.5-1.1 on GA media | 2024-09-03T00:00:00Z | 2024-09-03T00:00:00Z |
| opensuse-su-2024:14304-1 | libmbedcrypto7-2.28.9-1.1 on GA media | 2024-09-03T00:00:00Z | 2024-09-03T00:00:00Z |
| opensuse-su-2024:0276-1 | Security update for cacti, cacti-spine | 2024-09-02T16:41:32Z | 2024-09-02T16:41:32Z |
| opensuse-su-2024:0275-1 | Security update for opera | 2024-09-02T16:36:37Z | 2024-09-02T16:36:37Z |
| opensuse-su-2024:0274-1 | Security update for cacti, cacti-spine | 2024-09-02T08:09:11Z | 2024-09-02T08:09:11Z |
| opensuse-su-2024:14303-1 | chromedriver-128.0.6613.113-1.1 on GA media | 2024-08-31T00:00:00Z | 2024-08-31T00:00:00Z |
| opensuse-su-2024:0269-1 | Security update for trivy | 2024-08-30T08:00:45Z | 2024-08-30T08:00:45Z |
| opensuse-su-2024:0268-1 | Security update for trivy | 2024-08-30T08:00:39Z | 2024-08-30T08:00:39Z |
| opensuse-su-2024:0267-1 | Security update for chromium | 2024-08-30T06:36:55Z | 2024-08-30T06:36:55Z |
| opensuse-su-2024:14302-1 | libwireshark17-4.2.7-1.1 on GA media | 2024-08-30T00:00:00Z | 2024-08-30T00:00:00Z |
| opensuse-su-2024:14301-1 | python313-3.13.0~rc1-3.1 on GA media | 2024-08-30T00:00:00Z | 2024-08-30T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-nginx-2024-32760 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:49:48.003Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-31079 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:02.910Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-24990 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:17.408Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2024-24989 | NGINX HTTP/3 QUIC vulnerability | 2024-06-04T09:50:31.007Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2022-41742 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41742 | 2024-03-06T10:58:59.003Z | 2025-05-20T10:02:07.006Z |
| bit-nginx-2022-41741 | NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 | 2024-03-06T10:59:11.025Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2025-30215 | NATS-Server Fails to Authorize Certain Jetstream Admin APIs | 2025-04-18T19:17:14.515Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2023-46129 | xkeys Seal encryption used fixed key for all encryption | 2024-03-06T10:58:03.564Z | 2025-05-20T10:02:07.006Z |
| bit-nats-2020-28466 | Denial of Service (DoS) | 2024-03-06T10:58:44.583Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43440 | Moodle: lfi vulnerability when restoring malformed block backups | 2025-05-02T06:19:00.410Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43439 | Moodle: reflected xss via h5p error message | 2025-04-24T07:29:07.150Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43437 | Moodle: xss risk when restoring malicious course backup file | 2025-04-24T07:29:05.528Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43435 | Moodle: can create global glossary without being admin | 2025-05-02T06:18:56.485Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43434 | Moodle: csrf risk in feedback non-respondents report | 2025-05-02T06:18:55.145Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43433 | Moodle: matrix user/power level management not always working as expected with suspended users | 2025-05-02T06:18:53.795Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43432 | Moodle: authorization headers preserved between "emulated redirects" | 2025-05-02T06:18:52.499Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43431 | Moodle: idor in badges allows deletion of arbitrary badges | 2025-05-02T06:18:51.186Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43430 | Moodle: lack of access control when using external methods for quiz overrides | 2025-05-02T06:18:49.899Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43429 | Moodle: user information visibility control issues in gradebook reports | 2025-05-02T06:18:48.592Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43428 | Moodle: cache poisoning via injection into storage | 2025-05-02T06:18:47.252Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43427 | Moodle: admin presets export tool includes some secrets that should not be exported | 2025-05-02T06:18:45.967Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-43425 | Moodle: remote code execution via calculated question types | 2025-05-02T06:18:44.557Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-38276 | moodle: CSRF risks due to misuse of confirm_sesskey | 2024-08-09T07:26:18.452Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-38275 | moodle: HTTP authorization header is preserved between "emulated redirects" | 2025-05-01T05:57:26.688Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34008 | moodle: CSRF risk in analytics management of models | 2024-07-19T07:25:34.028Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34005 | moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup | 2025-05-02T06:18:37.889Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34004 | moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup | 2025-05-02T06:18:36.041Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34003 | moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup | 2025-05-02T06:18:33.951Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-34002 | moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup | 2025-05-02T06:18:31.695Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2024-25983 | Msa-24-0006: idor on dashboard comments block | 2024-03-31T18:22:02.363Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-200110-0240 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-24T22:10:35.107000Z |
| var-202404-2105 | A vulnerability was found in Tenda W9 1.0.0.7(4456). It has been declared as critical. Th… | 2024-05-23T22:57:30.011000Z |
| var-202310-0320 | Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an una… | 2024-05-23T22:50:37.013000Z |
| var-202002-1458 | eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_requ… | 2024-05-23T22:26:19.779000Z |
| var-202310-1699 | FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated t… | 2024-05-22T22:32:35.333000Z |
| var-200110-0179 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-05-22T21:09:20.229000Z |
| var-202307-2352 | There exists an authentication bypass vulnerability in OpenThread border router devices a… | 2024-05-21T23:20:43.016000Z |
| var-202302-1246 | SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user… | 2024-05-21T23:11:03.652000Z |
| var-202105-1223 | ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal… | 2024-05-21T23:09:06.926000Z |
| var-200110-0343 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.… | 2024-05-21T19:25:53.228000Z |
| var-200609-1445 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-05-20T22:28:41.668000Z |
| var-202404-2121 | A vulnerability, which was classified as critical, was found in Tenda AX1806 1.0.0.1. Aff… | 2024-05-19T22:41:22.167000Z |
| var-202405-0699 | D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the h… | 2024-05-18T23:24:22.265000Z |
| var-202404-2629 | Incorrect Access Control in Asus RT-N12+ B1 routers allows local attackers to obtain root… | 2024-05-18T23:20:13.220000Z |
| var-201011-0233 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T23:04:33.796000Z |
| var-201011-0243 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T23:00:04.669000Z |
| var-201011-0238 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T22:59:25.935000Z |
| var-200910-0097 | Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Vir… | 2024-05-18T22:56:12.481000Z |
| var-200902-0885 | Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms al… | 2024-05-18T22:30:21.877000Z |
| var-201011-0237 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T22:26:52.587000Z |
| var-200910-0352 | Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Vir… | 2024-05-18T22:06:25.543000Z |
| var-201011-0240 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T22:05:42.446000Z |
| var-201011-0239 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T22:05:36.666000Z |
| var-200910-0199 | Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x… | 2024-05-18T22:00:12.024000Z |
| var-201011-0244 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T21:39:00.410000Z |
| var-201011-0234 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T21:32:28.763000Z |
| var-201011-0241 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T21:29:05.832000Z |
| var-201011-0236 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T21:03:54.664000Z |
| var-201011-0232 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T21:02:37.966000Z |
| var-201011-0235 | Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102… | 2024-05-18T20:22:59.549000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000090 | namshi/jose fails to verify token signatures | 2015-06-25T15:00+09:00 | 2015-07-14T17:18+09:00 |
| jvndb-2015-000092 | OpenEMR vulnerable to authentication bypass | 2015-06-30T13:55+09:00 | 2015-07-14T17:16+09:00 |
| jvndb-2014-002239 | Cacti vulnerable to cross-site request forgery | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2009-003901 | Cacti vulnerable to cross-site scripting | 2015-07-09T14:41+09:00 | 2015-07-09T14:41+09:00 |
| jvndb-2015-000093 | Explorer+ File Manager vulnerable to directory traversal | 2015-06-30T13:56+09:00 | 2015-07-02T15:04+09:00 |
| jvndb-2015-000091 | osCommerce Japanese version vulnerable to directory traversal | 2015-06-25T15:53+09:00 | 2015-06-30T11:53+09:00 |
| jvndb-2015-000089 | Symfony vulnerable to code injection | 2015-06-23T12:29+09:00 | 2015-06-25T17:34+09:00 |
| jvndb-2015-000012 | Multiple ASUS wireless LAN routers vulnerable to cross-site request forgery | 2015-01-27T14:24+09:00 | 2015-06-17T16:42+09:00 |
| jvndb-2015-000011 | Multiple ASUS wireless LAN routers vulnerable to OS command injection | 2015-01-27T14:23+09:00 | 2015-06-17T16:42+09:00 |
| jvndb-2015-000082 | MilkyStep vulnerable to cross-site scripting | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000081 | MilkyStep vulnerable to SQL injection | 2015-06-09T14:15+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000080 | MilkyStep vulnerable to OS command injection | 2015-06-09T14:02+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000079 | MilkyStep vulnerable to cross-site request forgery | 2015-06-09T13:45+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000078 | MilkyStep fails to restrict access permissions | 2015-06-09T13:43+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000077 | MilkyStep fails to restrict access permissions | 2015-06-12T14:13+09:00 | 2015-06-16T16:52+09:00 |
| jvndb-2015-000087 | BloBee vulnerable to arbitrary file creation | 2015-06-12T14:12+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000083 | MilkyStep fails to restrict access permissions | 2015-06-09T14:16+09:00 | 2015-06-16T16:51+09:00 |
| jvndb-2015-000086 | LoadLibrary function in Microsoft Windows fails to validate input properly | 2015-06-12T14:11+09:00 | 2015-06-12T14:11+09:00 |
| jvndb-2015-000085 | Multiple Buffalo wireless LAN routers vulnerable to OS command injection | 2015-06-05T14:16+09:00 | 2015-06-10T17:54+09:00 |
| jvndb-2015-000076 | NetFlow Analyzer vulnerable to cross-site request forgery | 2015-06-05T14:14+09:00 | 2015-06-10T16:14+09:00 |
| jvndb-2015-000075 | NetFlow Analyzer fails to restrict access permissions | 2015-06-05T14:02+09:00 | 2015-06-10T16:10+09:00 |
| jvndb-2015-000074 | NetFlow Analyzer vulnerable to cross-site scripting | 2015-06-05T13:59+09:00 | 2015-06-10T16:06+09:00 |
| jvndb-2015-000072 | "Open Explorer Beta" App for Android vulnerable to directory traversal | 2015-06-03T14:59+09:00 | 2015-06-08T12:25+09:00 |
| jvndb-2015-000073 | F21 JWT fails to verify token signatures | 2015-06-03T15:01+09:00 | 2015-06-08T12:04+09:00 |
| jvndb-2015-000069 | Apache Sling API and Servlets Post components vulnerable to cross-site scripting | 2015-05-27T14:43+09:00 | 2015-06-04T15:39+09:00 |
| jvndb-2015-000071 | ZenPhoto20 vulnerable to cross-site scripting | 2015-05-28T13:42+09:00 | 2015-06-03T18:06+09:00 |
| jvndb-2015-000070 | Zenphoto vulnerable to cross-site scripting | 2015-05-28T13:42+09:00 | 2015-06-03T18:06+09:00 |
| jvndb-2015-000068 | SXF Common Library vulnerable to buffer overflow | 2015-05-22T14:15+09:00 | 2015-05-28T18:14+09:00 |
| jvndb-2015-000067 | mt-phpincgi vulnerable to PHP object injection | 2015-05-20T14:34+09:00 | 2015-05-28T18:05+09:00 |
| jvndb-2015-000064 | Cacti vulnerable to SQL injection | 2015-05-14T13:39+09:00 | 2015-05-25T15:29+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20523-1 | Security update for coreutils | 2025-07-31T09:41:53Z | 2025-07-31T09:41:53Z |
| suse-su-2025:20538-1 | Security update for libgcrypt | 2025-07-31T09:38:25Z | 2025-07-31T09:38:25Z |
| suse-su-2025:02566-1 | Security update for libarchive | 2025-07-31T07:18:45Z | 2025-07-31T07:18:45Z |
| suse-su-2025:02565-1 | Security update for apache2 | 2025-07-31T06:27:04Z | 2025-07-31T06:27:04Z |
| suse-su-2025:02564-1 | Security update for rmt-server | 2025-07-31T06:26:40Z | 2025-07-31T06:26:40Z |
| suse-su-2025:02563-1 | Security update for java-11-openjdk | 2025-07-31T02:15:52Z | 2025-07-31T02:15:52Z |
| suse-su-2025:02555-1 | Recommended update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container | 2025-07-30T17:15:11Z | 2025-07-30T17:15:11Z |
| suse-su-2025:2554-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2025-07-30T16:48:54Z | 2025-07-30T16:48:54Z |
| suse-su-2025:02554-1 | Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer | 2025-07-30T16:48:54Z | 2025-07-30T16:48:54Z |
| suse-su-2025:20547-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20546-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20545-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20544-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20521-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20520-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20519-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_4 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20518-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_3 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20517-1 | Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 | 2025-07-30T16:17:29Z | 2025-07-30T16:17:29Z |
| suse-su-2025:20516-1 | Security update for helm | 2025-07-30T09:27:44Z | 2025-07-30T09:27:44Z |
| suse-su-2025:20515-1 | Security update for ignition | 2025-07-30T09:22:28Z | 2025-07-30T09:22:28Z |
| suse-su-2025:20514-1 | Security update for protobuf | 2025-07-30T09:22:28Z | 2025-07-30T09:22:28Z |
| suse-su-2025:02366-2 | Security update for docker | 2025-07-30T07:52:22Z | 2025-07-30T07:52:22Z |
| suse-su-2025:02547-1 | Security update for libxml2 | 2025-07-30T07:38:28Z | 2025-07-30T07:38:28Z |
| suse-su-2025:02546-1 | Security update for MozillaThunderbird | 2025-07-30T07:34:22Z | 2025-07-30T07:34:22Z |
| suse-su-2025:02545-1 | Security update for java-1_8_0-openj9 | 2025-07-30T06:34:52Z | 2025-07-30T06:34:52Z |
| suse-su-2025:20513-1 | Security update for pam-config | 2025-07-29T14:09:33Z | 2025-07-29T14:09:33Z |
| suse-su-2025:20535-1 | Security update for docker | 2025-07-29T14:02:30Z | 2025-07-29T14:02:30Z |
| suse-su-2025:02544-1 | Security update for python-starlette | 2025-07-29T13:47:48Z | 2025-07-29T13:47:48Z |
| suse-su-2025:20511-1 | Security update for grub2 | 2025-07-29T08:20:21Z | 2025-07-29T08:20:21Z |
| suse-su-2025:02538-1 | Security update for the Linux Kernel | 2025-07-28T15:10:31Z | 2025-07-28T15:10:31Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-28826 | WordPress Frontend File Manager Plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-28825 | WordPress Data Tables Generator by Supsystic plugin任意文件删除漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-28824 | WordPress Contact Form Email plugin缺少授权漏洞 | 2025-11-18 | 2025-11-20 |
| cnvd-2025-28721 | Mozilla Firefox缓冲区溢出漏洞（CNVD-2025-28721） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28720 | Mozilla Firefox代码执行漏洞（CNVD-2025-28720） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28719 | Mozilla Firefox和Firefox ESR安全绕过漏洞（CNVD-2025-28719） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28718 | Mozilla Firefox和Firefox ESR代码执行漏洞（CNVD-2025-28718） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28717 | Mozilla Firefox和Firefox ESR缓冲区溢出漏洞（CNVD-2025-28717） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28715 | Mozilla Firefox和Firefox ESR安全绕过漏洞（CNVD-2025-28715） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28714 | Mozilla Firefox和Firefox ESR欺骗漏洞（CNVD-2025-28714） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28713 | Mozilla Firefox和Firefox ESR代码执行漏洞（CNVD-2025-28713） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28712 | Mozilla Firefox和Firefox ESR安全绕过漏洞（CNVD-2025-28712） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28669 | Mozilla Firefox和Firefox ESR代码执行漏洞 | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28668 | Mozilla Firefox和Firefox ESR安全绕过漏洞（CNVD-2025-28668） | 2025-11-14 | 2025-11-20 |
| cnvd-2025-28667 | Google Android信息泄露漏洞（CNVD-2025-28667） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28666 | Google Android信息泄露漏洞（CNVD-2025-28666） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28665 | Google Android权限提升漏洞（CNVD-2025-28665） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28664 | Google Android权限提升漏洞（CNVD-2025-28664） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28663 | Google Android拒绝服务漏洞（CNVD-2025-28663） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28662 | Google Android权限提升漏洞（CNVD-2025-28662） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28661 | Google Android权限提升漏洞（CNVD-2025-28661） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28660 | Google Android拒绝服务漏洞（CNVD-2025-28660） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-28659 | Google Android权限提升漏洞（CNVD-2025-28659） | 2025-09-08 | 2025-11-20 |
| cnvd-2025-29101 | Tenda AX3 fromSetSysTime函数堆栈缓冲区溢出漏洞 | 2022-02-10 | 2025-11-19 |
| cnvd-2025-29100 | Tenda AC18 form_fast_setting_wifi_set函数缓冲区溢出漏洞 | 2022-11-23 | 2025-11-19 |
| cnvd-2025-29099 | Tenda AC18 R7WebsSecurityHandler函数缓冲区溢出漏洞 | 2022-11-23 | 2025-11-19 |
| cnvd-2025-29098 | Tenda AC18 formSetDeviceName函数缓冲区溢出漏洞 | 2022-11-23 | 2025-11-19 |
| cnvd-2025-29097 | Tenda AC18 formSetMacFilterCfg函数缓冲区溢出漏洞 | 2022-11-23 | 2025-11-19 |
| cnvd-2025-29096 | Tenda AC18 SetRouteStatic函数缓冲区溢出漏洞 | 2022-11-23 | 2025-11-19 |
| cnvd-2025-28857 | Tenda AX3 SetSysTimeCfg堆栈缓冲区溢出漏洞 | 2023-02-27 | 2025-11-19 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0246 | Vulnérabilité dans Mitel MiContact Center Business | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| CERTFR-2025-AVI-0245 | Multiples vulnérabilités dans les produits Splunk | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| CERTFR-2025-AVI-0244 | Vulnérabilité dans Exim | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| CERTFR-2025-AVI-0243 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-27T00:00:00.000000 | 2025-03-27T00:00:00.000000 |
| certfr-2025-avi-0242 | Multiples vulnérabilités dans Moodle | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0241 | Vulnérabilité dans Google Chrome | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0240 | Vulnérabilité dans les produits VMware | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| CERTFR-2025-AVI-0242 | Multiples vulnérabilités dans Moodle | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| CERTFR-2025-AVI-0241 | Vulnérabilité dans Google Chrome | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| CERTFR-2025-AVI-0240 | Vulnérabilité dans les produits VMware | 2025-03-26T00:00:00.000000 | 2025-03-26T00:00:00.000000 |
| certfr-2025-avi-0239 | Multiples vulnérabilités dans Microsoft Azure Kubernetes Service | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0238 | Multiples vulnérabilités dans Laravel | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| CERTFR-2025-AVI-0239 | Multiples vulnérabilités dans Microsoft Azure Kubernetes Service | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| CERTFR-2025-AVI-0238 | Multiples vulnérabilités dans Laravel | 2025-03-25T00:00:00.000000 | 2025-03-25T00:00:00.000000 |
| certfr-2025-avi-0237 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0236 | Vulnérabilité dans Qnap NAKIVO Backup & Replication | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| CERTFR-2025-AVI-0237 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| CERTFR-2025-AVI-0236 | Vulnérabilité dans Qnap NAKIVO Backup & Replication | 2025-03-24T00:00:00.000000 | 2025-03-24T00:00:00.000000 |
| certfr-2025-avi-0235 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0234 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0233 | Multiples vulnérabilités dans les produits IBM | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0232 | Vulnérabilité dans Liferay | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0231 | Vulnérabilité dans Microsoft Office | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| certfr-2025-avi-0230 | Vulnérabilité dans Tenable Nessus Agent | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0235 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0234 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0233 | Multiples vulnérabilités dans les produits IBM | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0232 | Vulnérabilité dans Liferay | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0231 | Vulnérabilité dans Microsoft Office | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |
| CERTFR-2025-AVI-0230 | Vulnérabilité dans Tenable Nessus Agent | 2025-03-21T00:00:00.000000 | 2025-03-21T00:00:00.000000 |