Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-33219 |
7.8 (3.1)
|
NVIDIA Display Driver for Linux contains a vulner… |
NVIDIA |
GeForce |
2026-01-28T17:48:07.106Z | 2026-01-29T04:55:52.440Z |
| CVE-2025-33218 |
7.8 (3.1)
|
NVIDIA GPU Display Driver for Windows contains a … |
NVIDIA |
GeForce |
2026-01-28T17:47:25.322Z | 2026-01-29T04:55:51.373Z |
| CVE-2025-33217 |
7.8 (3.1)
|
NVIDIA Display Driver for Windows contains a vuln… |
NVIDIA |
GeForce |
2026-01-28T17:46:41.741Z | 2026-01-29T04:55:50.215Z |
| CVE-2025-13918 |
6.7 (3.1)
|
Elevation of Privileges in Symantec Endpoint Protectio… |
Broadcom |
Symantec Endpoint Protection Windows Client |
2026-01-28T16:35:43.684Z | 2026-01-29T04:55:49.047Z |
| CVE-2025-40553 |
9.8 (3.1)
|
SolarWinds Web Help Desk Deserialization of Untrusted … |
SolarWinds |
Web Help Desk |
2026-01-28T07:35:41.825Z | 2026-01-29T04:55:44.341Z |
| CVE-2025-40554 |
9.8 (3.1)
|
SolarWinds Web Help Desk Authentication Bypass Vulnerability |
SolarWinds |
Web Help Desk |
2026-01-28T07:36:50.177Z | 2026-01-29T04:55:43.242Z |
| CVE-2025-67616 |
8.1 (3.1)
|
WordPress Mella theme <= 1.2.29 - Local File Inclusion… |
BZOTheme |
Mella |
2026-01-22T16:51:51.660Z | 2026-01-29T01:15:42.088Z |
| CVE-2025-67617 |
9.8 (3.1)
|
WordPress Consult Aid theme <= 1.4.3 - PHP Object Inje… |
themeton |
Consult Aid |
2026-01-22T16:51:51.873Z | 2026-01-29T01:14:09.745Z |
| CVE-2025-67615 |
8.1 (3.1)
|
WordPress Myour theme <= 1.5.1 - Local File Inclusion … |
bslthemes |
Myour |
2026-01-22T16:51:51.412Z | 2026-01-29T01:13:15.045Z |
| CVE-2025-66143 |
5.4 (3.1)
|
WordPress Crumber plugin <= 1.0.10 - Broken Access Con… |
merkulove |
Crumber |
2026-01-22T16:51:50.950Z | 2026-01-29T01:12:19.617Z |
| CVE-2025-66142 |
5.4 (3.1)
|
WordPress Comparimager for Elementor plugin <= 1.0.1 -… |
merkulove |
Comparimager for Elementor |
2026-01-22T16:51:50.767Z | 2026-01-29T01:11:33.821Z |
| CVE-2025-66141 |
5.4 (3.1)
|
WordPress Scroller plugin <= 2.0.2 - Broken Access Con… |
merkulove |
Scroller |
2026-01-22T16:51:50.559Z | 2026-01-29T01:10:46.778Z |
| CVE-2025-67619 |
8.8 (3.1)
|
WordPress Kids Heaven theme <= 3.2 - PHP Object Inject… |
designthemes |
Kids Heaven |
2026-01-22T16:51:52.055Z | 2026-01-29T01:09:45.164Z |
| CVE-2025-66139 |
5.4 (3.1)
|
WordPress Audier For Elementor plugin <= 1.0.9 - Broke… |
merkulove |
Audier For Elementor |
2026-01-22T16:51:50.099Z | 2026-01-29T01:08:51.396Z |
| CVE-2025-67614 |
7.1 (3.1)
|
WordPress TheNa theme <= 1.5.5 - Reflected Cross Site … |
foreverpinetree |
TheNa |
2026-01-22T16:51:51.190Z | 2026-01-29T01:08:08.706Z |
| CVE-2025-67626 |
4.3 (3.1)
|
WordPress WP SEO Search plugin <= 1.1 - Cross Site Req… |
Angel Costa |
WP SEO Search |
2026-01-22T16:51:52.454Z | 2026-01-29T01:06:54.487Z |
| CVE-2025-67620 |
7.1 (3.1)
|
WordPress Anon theme <= 2.2.10 - Reflected Cross Site … |
CleverSoft |
Anon |
2026-01-22T16:51:52.273Z | 2026-01-29T01:05:11.215Z |
| CVE-2025-67947 |
7.1 (3.1)
|
WordPress AdForest Elementor plugin <= 3.0.11 - Cross … |
scriptsbundle |
AdForest Elementor |
2026-01-22T16:51:54.712Z | 2026-01-29T01:04:29.713Z |
| CVE-2025-67949 |
7.1 (3.1)
|
WordPress Hostiko theme < 94.3.6 - Cross Site Scriptin… |
designingmedia |
Hostiko |
2026-01-22T16:51:54.975Z | 2026-01-29T01:03:13.132Z |
| CVE-2025-67952 |
7.1 (3.1)
|
WordPress Grand Tour theme < 5.6.2 - Cross Site Script… |
ThemeGoods |
Grand Tour |
2026-01-22T16:51:55.230Z | 2026-01-29T01:02:24.298Z |
| CVE-2025-67958 |
6.5 (3.1)
|
WordPress TaxCloud for WooCommerce plugin <= 8.3.8 - B… |
Taxcloud |
TaxCloud for WooCommerce |
2026-01-22T16:51:56.847Z | 2026-01-29T01:01:52.379Z |
| CVE-2025-67959 |
7.1 (3.1)
|
WordPress WorkScout theme <= 4.1.07 - Cross Site Scrip… |
purethemes |
WorkScout |
2026-01-22T16:51:57.097Z | 2026-01-29T00:59:41.995Z |
| CVE-2025-67960 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site… |
purethemes |
WorkScout-Core |
2026-01-22T16:51:57.383Z | 2026-01-29T00:58:49.876Z |
| CVE-2025-68911 |
6.5 (3.1)
|
WordPress Solace theme <= 2.1.16 - Broken Access Contr… |
solacewp |
Solace |
2026-01-22T16:52:14.813Z | 2026-01-29T00:57:35.517Z |
| CVE-2025-69046 |
8.1 (3.1)
|
WordPress iRecco Core plugin <= 1.3.6 - Local File Inc… |
WebGeniusLab |
iRecco Core |
2026-01-22T16:52:19.210Z | 2026-01-29T00:56:55.087Z |
| CVE-2025-69041 |
8.1 (3.1)
|
WordPress Dekoro theme <= 1.0.7 - Local File Inclusion… |
goalthemes |
Dekoro |
2026-01-22T16:52:18.140Z | 2026-01-29T00:56:14.618Z |
| CVE-2025-69047 |
8.1 (3.1)
|
WordPress MaxShop theme <= 3.6.20 - Local File Inclusi… |
magentech |
MaxShop |
2026-01-22T16:52:19.420Z | 2026-01-29T00:55:33.373Z |
| CVE-2025-69049 |
8.1 (3.1)
|
WordPress Töbel theme <= 1.6 - Local File Inclusion vu… |
Elated-Themes |
Töbel |
2026-01-22T16:52:19.830Z | 2026-01-29T00:54:35.135Z |
| CVE-2025-69062 |
8.1 (3.1)
|
WordPress Weedles theme <= 1.1.12 - Local File Inclusi… |
AncoraThemes |
Weedles |
2026-01-22T16:52:22.689Z | 2026-01-29T00:53:35.524Z |
| CVE-2025-69061 |
8.1 (3.1)
|
WordPress MoveMe theme <= 1.2.15 - Local File Inclusio… |
AncoraThemes |
MoveMe |
2026-01-22T16:52:22.452Z | 2026-01-29T00:52:48.327Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-22218 |
7.1 (4.0)
|
Chainlit < 2.9.4 Arbitrary File Read via /project/element |
Chainlit |
Chainlit |
2026-01-19T23:14:52.969Z | 2026-01-21T19:42:24.327Z |
| CVE-2026-22219 |
8.3 (4.0)
|
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /proje… |
Chainlit |
Chainlit |
2026-01-19T23:15:08.897Z | 2026-01-20T18:41:46.632Z |
| CVE-2026-1593 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Society Management System edit_expenses_q… |
itsourcecode |
Society Management System |
2026-01-29T14:32:06.560Z | 2026-01-29T16:43:13.740Z |
| CVE-2026-1594 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Society Management System add_expenses.ph… |
itsourcecode |
Society Management System |
2026-01-29T14:32:08.929Z | 2026-01-29T16:42:57.773Z |
| CVE-2026-1595 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode Society Management System edit_student_qu… |
itsourcecode |
Society Management System |
2026-01-29T15:32:08.118Z | 2026-01-29T21:30:34.042Z |
| CVE-2026-23625 |
8.7 (3.1)
|
OpenProject has stored XSS regression using attachment… |
opf |
openproject |
2026-01-19T17:41:41.803Z | 2026-01-20T15:10:58.947Z |
| CVE-2026-23646 |
6.5 (3.1)
|
OpenProject users can delete other user's session, cau… |
opf |
openproject |
2026-01-19T17:48:03.082Z | 2026-01-20T14:54:40.162Z |
| CVE-2026-23721 |
4.3 (3.1)
|
OpenProject users with "View Members" permission in an… |
opf |
openproject |
2026-01-19T17:52:35.307Z | 2026-01-20T14:51:21.936Z |
| CVE-2025-69198 |
6 (4.0)
|
Pterodactyl's improper resource locking allows raced q… |
pterodactyl |
panel |
2026-01-19T19:05:38.530Z | 2026-01-20T20:05:30.610Z |
| CVE-2025-69199 |
8.3 (4.0)
|
Pterodactyl Wings's websocket endpoints have no visibl… |
pterodactyl |
panel |
2026-01-19T19:17:53.569Z | 2026-01-20T20:05:22.699Z |
| CVE-2026-21696 |
8.3 (4.0)
|
Endless reprocessing/reupload of activity log data due… |
pterodactyl |
wings |
2026-01-19T19:25:43.283Z | 2026-01-20T17:27:48.498Z |
| CVE-2026-1176 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-19T21:02:07.529Z | 2026-01-21T20:59:11.687Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-23961 |
5.3 (3.1)
|
Mastodon may allow a remote suspension bypass |
mastodon |
mastodon |
2026-01-22T01:47:36.828Z | 2026-01-22T21:38:52.885Z |
| CVE-2026-23962 |
7.5 (3.1)
|
Mastodon vulnerable to Denial of Service from a single… |
mastodon |
mastodon |
2026-01-22T01:51:37.430Z | 2026-01-22T21:35:41.343Z |
| CVE-2026-23963 |
4.3 (3.1)
|
Mastodon missing length limits on list names, filter n… |
mastodon |
mastodon |
2026-01-22T01:53:49.887Z | 2026-01-22T17:32:13.067Z |
| CVE-2025-69821 |
7.4 (3.1)
|
An issue in Beat XP VEGA Smartwatch (Firmware Ver… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:12:50.212Z |
| CVE-2026-23964 |
6.5 (3.1)
|
Mastodon has insufficient access control to push notif… |
mastodon |
mastodon |
2026-01-22T01:55:29.904Z | 2026-01-22T17:02:23.614Z |
| CVE-2025-69822 |
7.4 (3.1)
|
An issue in Atomberg Atomberg Erica Smart Fan Fir… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:09:34.142Z |
| CVE-2025-56589 |
7.5 (3.1)
|
A Local File Inclusion (LFI) and a Server-Side Re… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-26T18:55:29.116Z |
| CVE-2025-70899 |
6.5 (3.1)
|
PHPgurukul Online Course Registration v3.1 lacks … |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-23T16:40:22.807Z |
| CVE-2025-53968 |
7.5 (3.1)
|
EVMAPA Improper Restriction of Excessive Authenticatio… |
EVMAPA |
EVMAPA |
2026-01-22T22:37:36.978Z | 2026-01-23T20:11:29.349Z |
| CVE-2026-24435 |
7.1 (4.0)
|
Tenda W30E V2 Permissive CORS Allows Cross-origin Data… |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:49:03.354Z | 2026-01-26T19:52:12.119Z |
| CVE-2025-54816 |
9.4 (3.1)
|
EVMAPA Missing Authentication for Critical Function |
EVMAPA |
EVMAPA |
2026-01-22T22:40:55.625Z | 2026-01-23T20:12:02.940Z |
| CVE-2020-36947 |
7.1 (4.0)
7.1 (3.1)
|
LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL… |
LibreNMS |
LibreNMS |
2026-01-27T15:23:49.490Z | 2026-01-27T21:36:40.950Z |
| CVE-2025-69564 |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 i… |
n/a |
n/a |
2026-01-27T00:00:00.000Z | 2026-01-28T20:28:16.668Z |
| CVE-2026-1521 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s5c-handler.c denial of service |
n/a |
Open5GS |
2026-01-28T14:32:10.348Z | 2026-01-28T16:12:00.256Z |
| CVE-2026-1545 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-28T21:32:12.268Z | 2026-01-29T18:00:59.239Z |
| CVE-2025-12776 |
1.8 (4.0)
|
Stored Cross-Site Scripting |
Commvault |
WebConsole |
2026-01-07T22:03:05.033Z | 2026-01-08T18:17:45.215Z |
| CVE-2025-13151 |
7.5 (3.1)
|
CVE-2025-13151 |
GnuTLS |
libtasn1 |
2026-01-07T21:14:05.223Z | 2026-01-20T17:08:41.712Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-22219 | Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the … | 2026-01-20T00:15:49.053 | 2026-02-02T20:56:09.457 |
| fkie_cve-2026-1593 | A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vuln… | 2026-01-29T15:16:13.797 | 2026-02-02T20:54:26.120 |
| fkie_cve-2026-1594 | A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected … | 2026-01-29T15:16:13.993 | 2026-02-02T20:53:42.123 |
| fkie_cve-2026-1595 | A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown… | 2026-01-29T16:16:14.807 | 2026-02-02T20:52:57.747 |
| fkie_cve-2026-23625 | OpenProject is an open-source, web-based project management software. Versions 16.3.0 through 16.6.… | 2026-01-19T18:16:05.437 | 2026-02-02T20:49:09.927 |
| fkie_cve-2026-23646 | OpenProject is an open-source, web-based project management software. Users of OpenProject versions… | 2026-01-19T18:16:05.587 | 2026-02-02T20:46:13.157 |
| fkie_cve-2026-23721 | OpenProject is an open-source, web-based project management software. When using groups in OpenProj… | 2026-01-19T18:16:05.730 | 2026-02-02T20:44:39.410 |
| fkie_cve-2025-69198 | Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits… | 2026-01-19T19:16:03.023 | 2026-02-02T20:42:41.630 |
| fkie_cve-2025-69199 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel… | 2026-01-19T20:15:48.370 | 2026-02-02T20:41:13.750 |
| fkie_cve-2026-21696 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel… | 2026-01-19T20:15:49.107 | 2026-02-02T20:40:21.660 |
| fkie_cve-2026-1176 | A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an un… | 2026-01-19T21:15:50.587 | 2026-02-02T20:37:03.877 |
| fkie_cve-2025-69820 | Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensit… | 2026-01-22T16:16:07.820 | 2026-02-02T20:33:56.877 |
| fkie_cve-2026-23961 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server … | 2026-01-22T02:15:52.780 | 2026-02-02T20:29:07.753 |
| fkie_cve-2026-23962 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions befor… | 2026-01-22T03:15:46.400 | 2026-02-02T20:27:51.360 |
| fkie_cve-2026-23963 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5… | 2026-01-22T03:15:46.550 | 2026-02-02T20:27:15.387 |
| fkie_cve-2025-69821 | An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause… | 2026-01-22T16:16:07.927 | 2026-02-02T20:27:14.310 |
| fkie_cve-2026-23964 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5… | 2026-01-22T03:15:46.700 | 2026-02-02T20:26:10.053 |
| fkie_cve-2025-69822 | An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtai… | 2026-01-22T16:16:08.033 | 2026-02-02T20:11:38.843 |
| fkie_cve-2025-56589 | A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in th… | 2026-01-22T17:15:58.183 | 2026-02-02T20:09:27.567 |
| fkie_cve-2025-70899 | PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on al… | 2026-01-22T17:16:28.580 | 2026-02-02T20:01:45.377 |
| fkie_cve-2025-53968 | This vulnerability arises because there are no limitations on the number of authentication attempt… | 2026-01-22T23:15:49.800 | 2026-02-02T19:59:16.310 |
| fkie_cve-2026-24435 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecur… | 2026-01-26T18:16:41.030 | 2026-02-02T19:56:16.290 |
| fkie_cve-2025-54816 | This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechani… | 2026-01-22T23:15:49.953 | 2026-02-02T19:56:13.070 |
| fkie_cve-2020-36947 | LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph end… | 2026-01-27T16:16:12.040 | 2026-02-02T19:48:55.727 |
| fkie_cve-2025-69564 | code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php… | 2026-01-27T17:16:10.063 | 2026-02-02T19:46:38.523 |
| fkie_cve-2026-1521 | A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_hand… | 2026-01-28T15:16:17.493 | 2026-02-02T19:44:26.477 |
| fkie_cve-2026-1545 | A weakness has been identified in itsourcecode School Management System 1.0. The affected element i… | 2026-01-28T22:15:55.470 | 2026-02-02T19:41:32.603 |
| fkie_cve-2025-12776 | The Report Builder component of the application stores user input directly in a web page and displa… | 2026-01-07T22:15:43.030 | 2026-02-02T19:32:01.800 |
| fkie_cve-2025-13151 | Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size o… | 2026-01-07T22:15:43.200 | 2026-02-02T19:27:23.070 |
| fkie_cve-2026-1551 | A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknow… | 2026-01-29T00:16:08.450 | 2026-02-02T19:26:59.780 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-f58r-gxf3-3xr8 |
7.3 (3.1)
5.5 (4.0)
|
A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown func… | 2026-01-28T21:31:24Z | 2026-01-28T21:31:24Z |
| ghsa-94pv-jr92-pc2h |
7.3 (3.1)
5.5 (4.0)
|
A security vulnerability has been detected in code-projects Online Music Site 1.0. This impacts an … | 2026-01-28T21:31:24Z | 2026-01-28T21:31:24Z |
| ghsa-6j3c-8fmm-47jq |
4.7 (3.1)
2.0 (4.0)
|
A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is… | 2026-01-28T21:31:24Z | 2026-01-28T21:31:24Z |
| ghsa-wmp3-phmx-x8q8 |
|
Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal HTTP Client Manager al… | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-mxrg-rhmf-2mjf |
8.7 (4.0)
|
Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Com… | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-fw4r-9q4w-pxx8 |
4.8 (4.0)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-9g2x-9v62-m8g9 |
5.3 (3.1)
|
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access file… | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-6gfh-6c5f-fx83 |
|
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability … | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-3p56-grmc-2fxh |
|
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability … | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-2v5p-5pj6-h3hp |
|
Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue af… | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-cc53-w5wm-253v |
6.8 (3.1)
|
Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded stat… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:22Z |
| ghsa-r8w3-p4p4-x3j6 |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php… | 2026-01-27T18:32:17Z | 2026-01-28T21:31:21Z |
| ghsa-jrq9-fh3p-h9g6 |
4.3 (3.1)
|
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-hj7x-r6cx-rqqh |
9.1 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerab… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-54f4-9j4c-c7x8 |
10.0 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficie… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-2px4-jf33-3273 |
8.6 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficie… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-2646-g369-4jgh |
9.9 (3.1)
|
Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerabili… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-w42r-ph9f-9x66 |
7.5 (3.1)
|
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code wh… | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-h3px-p99h-9f2w |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.ph… | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-9hp9-m3m3-mp2v |
7.5 (3.1)
|
Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox < 147.0.2. | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-8pgr-h8jj-q62w |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via … | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-7prc-fr4v-836v |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php. | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-6c9g-6gr7-3mm5 |
9.8 (3.1)
|
code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php. | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-46gc-wc69-mw4h |
8.8 (3.1)
8.7 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwo… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:20Z |
| ghsa-w69g-qrmr-3cf2 |
6.5 (3.1)
2.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-vw2m-ppwv-6g52 |
7.5 (3.1)
8.2 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive a… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-p4q3-78m7-rm2f |
6.5 (3.1)
7.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-j73p-m2g8-wpgm |
9.8 (3.1)
9.2 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-f3h8-6qj8-rp34 |
5.5 (3.1)
4.8 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive admi… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-5rh5-q22h-69wj |
4.3 (3.1)
5.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site requ… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-365 |
|
Vyper is a Pythonic Smart Contract Language for the EVM. In affected versions when perfor… | vyper | 2021-10-06T18:15:00Z | 2021-10-11T01:16:43.176882Z |
| pysec-2021-364 |
|
Scrapy-splash is a library which provides Scrapy and JavaScript integration. In affected … | scrapy-splash | 2021-10-05T21:15:00Z | 2021-10-11T01:16:42.816754Z |
| pysec-2021-363 |
|
Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAu… | scrapy | 2021-10-06T18:15:00Z | 2021-10-11T01:16:42.905582Z |
| pysec-2021-361 |
|
An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x … | neutron | 2021-08-31T18:15:00Z | 2021-10-11T01:16:41.242054Z |
| pysec-2021-360 |
|
OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address i… | neutron | 2021-08-23T05:15:00Z | 2021-10-11T01:16:41.119513Z |
| pysec-2021-359 |
|
Flask-AppBuilder is an application development framework, built on top of Flask. In affec… | flask-appbuilder | 2021-09-08T18:15:00Z | 2021-10-11T01:16:40.573932Z |
| pysec-2021-358 |
|
A flaw was found in Ansible, where a user's controller is vulnerable to template injectio… | ansible | 2021-09-22T12:15:00Z | 2021-10-11T01:16:39.746753Z |
| pysec-2021-357 |
|
The Unicorn framework through 0.35.3 for Django allows XSS via component.name. | django-unicorn | 2021-10-07T06:15:00Z | 2021-10-08T02:27:35.256995Z |
| pysec-2021-356 |
|
nltk is vulnerable to Inefficient Regular Expression Complexity | nltk | 2021-09-27T13:15:00Z | 2021-10-01T22:29:03.465380Z |
| pysec-2021-355 |
|
“Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vu… | shuup | 2021-09-29T14:15:00Z | 2021-09-30T23:26:29.598032Z |
| pysec-2021-354 |
|
furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrar… | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.851532Z |
| pysec-2021-353 |
|
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN manag… | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.808242Z |
| pysec-2021-352 |
|
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client. | openvpn-monitor | 2021-09-27T06:15:00Z | 2021-09-30T23:26:26.774511Z |
| pysec-2021-351 |
|
ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP… | esphome | 2021-09-28T16:15:00Z | 2021-09-30T23:26:26.067991Z |
| pysec-2021-350 |
|
In Shuup, versions 1.6.0 through 2.10.8 are vulnerable to reflected Cross-Site Scripting … | shuup | 2021-09-30T08:15:00Z | 2021-09-30T10:32:36.636402Z |
| pysec-2017-35 |
|
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.1… | salt | 2017-08-23T14:29:00Z | 2021-09-29T02:54:43.147751Z |
| pysec-2021-338 |
|
Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS… | leo | 2021-09-22T20:15:00Z | 2021-09-26T23:50:00.616119Z |
| pysec-2021-349 |
|
XXE vulnerability in 'XML2Dict' version 0.2.2 allows an attacker to cause a denial of service. | xml2dict | 2021-06-30T12:15:00Z | 2021-09-26T23:33:39.694828Z |
| pysec-2018-103 |
|
ymlref allows code injection. | ymlref | 2018-12-17T19:29:00Z | 2021-09-26T23:33:39.795406Z |
| pysec-2021-348 |
|
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitra… | simiki | 2021-08-27T19:15:00Z | 2021-09-26T23:33:04.328365Z |
| pysec-2021-347 |
|
Cross Site Scripting (XSS) in Simiki v1.6.2.1 and prior allows remote attackers to execut… | simiki | 2021-08-27T19:15:00Z | 2021-09-26T23:33:04.295133Z |
| pysec-2021-345 |
|
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding… | rencode | 2021-09-10T02:15:00Z | 2021-09-26T23:32:54.963571Z |
| pysec-2021-344 |
|
OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuz… | onefuzz | 2021-08-13T21:15:00Z | 2021-09-26T23:32:40.198740Z |
| pysec-2021-342 |
|
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows att… | lxdui | 2021-09-03T02:15:00Z | 2021-09-26T23:32:34.569818Z |
| pysec-2021-337 |
|
This affects all versions of package Flask-User. When using the make_safe_url function, i… | flask-user | 2021-07-05T11:15:00Z | 2021-09-26T23:32:30.327481Z |
| pysec-2021-336 |
|
Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote atta… | django-widgy | 2021-08-16T18:15:00Z | 2021-09-26T23:32:19.117278Z |
| pysec-2020-261 |
|
A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and… | aws-encryption-sdk | 2020-11-16T12:15:00Z | 2021-09-26T23:32:16.436833Z |
| pysec-2021-335 |
|
The module `AccessControl` defines security policies for Python code used in restricted c… | accesscontrol | 2021-07-30T22:15:00Z | 2021-09-26T23:32:08.989778Z |
| pysec-2021-334 |
|
parlai is a framework for training and evaluating AI models on a variety of openly availa… | parlai | 2021-09-10T23:15:00Z | 2021-09-23T16:57:40.954858Z |
| pysec-2021-331 |
|
Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker… | pillow | 2021-07-13T17:15:00Z | 2021-09-23T00:11:05.797411Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3724 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.603066Z |
| gsd-2024-3723 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.862308Z |
| gsd-2024-3722 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.683967Z |
| gsd-2024-3721 | A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as c… | 2024-04-13T05:02:35.909545Z |
| gsd-2024-3720 | A vulnerability has been found in Tianwell Fire Intelligent Command Platform 1.1.1.1 and … | 2024-04-13T05:02:35.675254Z |
| gsd-2024-3719 | A vulnerability, which was classified as critical, was found in Campcodes House Rental Ma… | 2024-04-13T05:02:35.720548Z |
| gsd-2024-3718 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.856686Z |
| gsd-2024-3717 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.841428Z |
| gsd-2024-3716 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.779671Z |
| gsd-2024-3715 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.771633Z |
| gsd-2024-3714 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.858339Z |
| gsd-2024-3713 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.792781Z |
| gsd-2024-3712 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.925014Z |
| gsd-2024-3711 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.820336Z |
| gsd-2024-3710 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.768088Z |
| gsd-2024-3709 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.762343Z |
| gsd-2024-3708 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.677590Z |
| gsd-2024-3707 | Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). Thi… | 2024-04-13T05:02:35.884589Z |
| gsd-2024-3706 | Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This… | 2024-04-13T05:02:35.674722Z |
| gsd-2024-3705 | Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). Th… | 2024-04-13T05:02:35.853521Z |
| gsd-2024-3704 | SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d … | 2024-04-13T05:02:35.767076Z |
| gsd-2024-3703 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.882181Z |
| gsd-2024-3702 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.737044Z |
| gsd-2024-3701 | The system application (com.transsion.kolun.aiservice) component does not perform an aut… | 2024-04-13T05:02:35.808418Z |
| gsd-2024-3700 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.712317Z |
| gsd-2024-3699 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.607453Z |
| gsd-2024-3698 | A vulnerability was found in Campcodes House Rental Management System 1.0. It has been de… | 2024-04-13T05:02:35.665259Z |
| gsd-2024-3697 | A vulnerability was found in Campcodes House Rental Management System 1.0. It has been cl… | 2024-04-13T05:02:35.834311Z |
| gsd-2024-3696 | A vulnerability was found in Campcodes House Rental Management System 1.0 and classified … | 2024-04-13T05:02:35.815827Z |
| gsd-2024-3695 | A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.… | 2024-04-13T05:02:35.602372Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2024-12260 | Malicious code in easyioctl (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-12256 | Malicious code in discord-embedbuilder (PyPI) | 2024-07-06T17:16:40Z | 2025-12-31T02:45:15Z |
| MAL-2024-12251 | Malicious code in deepseek-api (PyPI) | 2024-07-09T18:52:06Z | 2025-12-31T02:45:15Z |
| MAL-2024-12249 | Malicious code in companyx-metaflow (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-12233 | Malicious code in chatgpt-aitools (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-12232 | Malicious code in ceiec (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-12224 | Malicious code in c2 (PyPI) | 2024-08-27T21:24:04Z | 2025-12-31T02:45:15Z |
| MAL-2024-12201 | Malicious code in artifact-lab-3-package-77d0c154 (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-12194 | Malicious code in artifact-lab-3-package-1b4d0db5 (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-11702 | Malicious code in search-python-common (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-11660 | Malicious code in pojang-resorter (PyPI) | 2024-09-02T20:50:31Z | 2025-12-31T02:45:15Z |
| MAL-2024-11627 | Malicious code in luna-paysure (PyPI) | 2024-10-14T09:08:35Z | 2025-12-31T02:45:15Z |
| MAL-2024-11608 | Malicious code in http-query (PyPI) | 2024-09-06T11:29:16Z | 2025-12-31T02:45:15Z |
| MAL-2024-11607 | Malicious code in hellopythopyy (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-11606 | Malicious code in hellopythopy (PyPI) | 2024-08-23T22:55:41Z | 2025-12-31T02:45:15Z |
| MAL-2024-11577 | Malicious code in discordmessager (PyPI) | 2024-10-13T09:30:47Z | 2025-12-31T02:45:15Z |
| MAL-2024-11560 | Malicious code in colotama (PyPI) | 2024-09-29T16:36:08Z | 2025-12-31T02:45:15Z |
| MAL-2024-11555 | Malicious code in chain00x (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-11536 | Malicious code in bitforger (PyPI) | 2024-09-28T09:22:43Z | 2025-12-31T02:45:15Z |
| MAL-2024-11535 | Malicious code in bibit (PyPI) | 2024-09-28T09:22:43Z | 2025-12-31T02:45:15Z |
| MAL-2024-11528 | Malicious code in artifact-lab-3-package-f9dafccc (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-11527 | Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-11522 | Malicious code in alfooou (PyPI) | 2024-10-03T15:11:09Z | 2025-12-31T02:45:15Z |
| MAL-2024-11519 | Malicious code in aiopbotocore (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-10473 | Malicious code in artifact-lab-3-package-02f73e0e (PyPI) | 2024-08-10T23:05:21Z | 2025-12-31T02:45:15Z |
| MAL-2024-10358 | Malicious code in lightseeq (PyPI) | 2024-11-05T08:15:44Z | 2025-12-31T02:45:15Z |
| MAL-2024-10315 | Malicious code in nvidia-clara-sim (PyPI) | 2024-07-26T16:53:30Z | 2025-12-31T02:45:15Z |
| MAL-2024-10112 | Malicious code in pybanners (PyPI) | 2024-07-24T19:53:31Z | 2025-12-31T02:45:15Z |
| MAL-2024-10047 | Malicious code in modeflow (PyPI) | 2024-09-04T21:25:32Z | 2025-12-31T02:45:15Z |
| MAL-2024-10031 | Malicious code in gentorqkkh1 (PyPI) | 2024-07-21T11:39:54Z | 2025-12-31T02:45:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0800 | Mozilla Firefox: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-04-15T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0771 | GraphicsMagick: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-04-08T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0671 | Zabbix: Mehrere Schwachstellen | 2025-03-31T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0594 | Progress Software MOVEit: Schwachstelle ermöglicht Privilegieneskalation | 2025-03-19T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0501 | GraphicsMagick: Mehrere Schwachstellen ermöglichen Denial of Service und nicht spezifizierte Angriffe | 2025-03-06T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0419 | Erlang/OTP: Schwachstelle ermöglicht Denial of Service | 2025-02-20T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0256 | Xerox WorkCentre / Phaser: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2024-0034 | OpenSSL: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-01-09T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2838 | OpenSSL: Schwachstelle ermöglicht Denial of Service | 2023-11-06T23:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2023-2357 | shadow: Schwachstelle ermöglicht Offenlegung von Informationen | 2023-09-14T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2023-1316 | ImageMagick: Mehrere Schwachstellen | 2023-05-29T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2023-0978 | shadow: Schwachstelle ermöglicht Darstellen falscher Informationen | 2023-04-16T22:00:00.000+00:00 | 2025-04-21T22:00:00.000+00:00 |
| wid-sec-w-2025-0848 | xwiki: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0847 | Drupal Plugins Mehrere Schwachstellen | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0846 | Apple iOS, iPadOS und macOS: Mehrere Schwachstellen | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0845 | Cisco Nexus Dashboard: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0843 | Cisco WebEx App: Schwachstelle ermöglicht Codeausführung | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0840 | Microsoft Power Automate Desktop: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0839 | PyTorch: Schwachstelle ermöglicht Denial of Service | 2025-04-16T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0578 | Mattermost Plugins: Schwachstelle ermöglicht Offenlegung von Daten | 2025-03-17T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0551 | vim: Schwachstelle ermöglicht Manipulation von Dateien | 2025-03-12T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0408 | vim: Schwachstelle ermöglicht Manipulation von Dateien | 2025-02-18T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0040 | Red Hat Enterprise Linux (dpdk): Schwachstelle ermöglicht Denial of Service | 2025-01-09T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2023-2719 | PHP: Mehrere Schwachstellen | 2017-06-18T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2023-1970 | PHP: Mehrere Schwachstellen | 2023-08-06T22:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2023-0383 | PHP: Mehrere Schwachstellen | 2023-02-14T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2023-0035 | PHP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2023-01-05T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2022-1613 | git: Mehrere Schwachstellen | 2019-12-10T23:00:00.000+00:00 | 2025-04-16T22:00:00.000+00:00 |
| wid-sec-w-2025-0835 | Atlassian Jira: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0834 | ESRI ArcGIS: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:5808 | Red Hat Security Advisory: OpenShift Container Platform 4.12.64 security update | 2024-08-29T03:07:50+00:00 | 2026-02-03T21:37:50+00:00 |
| rhsa-2024:5446 | Red Hat Security Advisory: OpenShift Container Platform 4.13.48 packages and security update | 2024-08-22T12:20:05+00:00 | 2026-02-03T21:37:48+00:00 |
| rhsa-2024:5444 | Red Hat Security Advisory: OpenShift Container Platform 4.13.48 bug fix and security update | 2024-08-22T11:42:26+00:00 | 2026-02-03T21:37:47+00:00 |
| rhsa-2024:5442 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update | 2024-08-22T12:02:45+00:00 | 2026-02-03T21:37:47+00:00 |
| rhsa-2024:5439 | Red Hat Security Advisory: OpenShift Container Platform 4.15.28 bug fix and security update | 2024-08-22T11:42:04+00:00 | 2026-02-03T21:37:43+00:00 |
| rhsa-2024:5436 | Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update | 2024-08-22T12:00:30+00:00 | 2026-02-03T21:37:42+00:00 |
| rhsa-2024:5422 | Red Hat Security Advisory: OpenShift Container Platform 4.16.8 bug fix and security update | 2024-08-20T15:21:42+00:00 | 2026-02-03T21:37:41+00:00 |
| rhsa-2024:5294 | Red Hat Security Advisory: jose security update | 2024-08-13T15:37:20+00:00 | 2026-02-03T21:37:40+00:00 |
| rhsa-2024:5202 | Red Hat Security Advisory: OpenShift Container Platform 4.12.63 packages and security update | 2024-08-19T03:55:38+00:00 | 2026-02-03T21:37:39+00:00 |
| rhsa-2024:5077 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-08-07T10:58:53+00:00 | 2026-02-03T21:37:38+00:00 |
| rhsa-2024:5075 | Red Hat Security Advisory: golang security update | 2024-08-07T10:39:03+00:00 | 2026-02-03T21:37:37+00:00 |
| rhsa-2024:5054 | Red Hat Security Advisory: OpenShift Virtualization 4.16.1 Images security update | 2024-08-06T16:21:05+00:00 | 2026-02-03T21:37:36+00:00 |
| rhsa-2024:4867 | Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes | 2024-07-25T13:11:14+00:00 | 2026-02-03T21:37:33+00:00 |
| rhsa-2024:4785 | Red Hat Security Advisory: Network Observability 1.6.1 for OpenShift | 2024-08-07T00:48:13+00:00 | 2026-02-03T21:37:30+00:00 |
| rhsa-2024:4626 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.6 security update | 2024-07-18T13:37:38+00:00 | 2026-02-03T21:37:28+00:00 |
| rhsa-2024:4336 | Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.6.21 | 2024-07-25T06:35:28+00:00 | 2026-02-03T21:37:01+00:00 |
| rhsa-2024:4335 | Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.8.9 | 2024-07-17T13:48:25+00:00 | 2026-02-03T21:37:00+00:00 |
| rhsa-2024:4333 | Red Hat Security Advisory: security update Logging for Red Hat OpenShift - 5.9.4 | 2024-07-23T16:27:58+00:00 | 2026-02-03T21:36:59+00:00 |
| rhsa-2024:4246 | Red Hat Security Advisory: container-tools security update | 2024-07-02T15:45:28+00:00 | 2026-02-03T21:36:58+00:00 |
| rhsa-2024:4237 | Red Hat Security Advisory: go-toolset security update | 2024-07-02T15:43:47+00:00 | 2026-02-03T21:36:57+00:00 |
| rhsa-2024:4212 | Red Hat Security Advisory: golang security update | 2024-07-02T09:02:04+00:00 | 2026-02-03T21:36:56+00:00 |
| rhsa-2024:4163 | Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.12.4 security update | 2024-06-27T12:38:04+00:00 | 2026-02-03T21:36:55+00:00 |
| rhsa-2024:4159 | Red Hat Security Advisory: OpenShift Container Platform 4.16.1 packages and security update | 2024-07-03T11:45:54+00:00 | 2026-02-03T21:36:53+00:00 |
| rhsa-2024:4150 | Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update | 2024-07-02T16:43:39+00:00 | 2026-02-03T21:36:52+00:00 |
| rhsa-2024:3968 | Red Hat Security Advisory: container-tools:rhel8 bug fix and enhancement update | 2024-06-18T00:36:57+00:00 | 2026-02-03T21:36:49+00:00 |
| rhsa-2024:3827 | Red Hat Security Advisory: buildah security and bug fix update | 2024-06-11T20:07:13+00:00 | 2026-02-03T21:36:48+00:00 |
| rhsa-2024:3826 | Red Hat Security Advisory: podman security and bug fix update | 2024-06-11T19:55:42+00:00 | 2026-02-03T21:36:47+00:00 |
| rhsa-2024:3722 | Red Hat Security Advisory: OpenShift Container Platform 4.17.0 packages and security update | 2024-10-01T08:49:32+00:00 | 2026-02-03T21:36:45+00:00 |
| rhsa-2024:3717 | Red Hat Security Advisory: OpenShift Container Platform 4.17.0 security and extras update | 2024-10-01T01:42:32+00:00 | 2026-02-03T21:36:45+00:00 |
| rhsa-2024:3715 | Red Hat Security Advisory: OpenShift Container Platform 4.12.59 packages and security update | 2024-06-12T07:34:34+00:00 | 2026-02-03T21:36:44+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-236-01 | KNX Protocol | 2023-08-24T06:00:00.000000Z | 2023-08-24T06:00:00.000000Z |
| icsa-23-234-03 | Rockwell Automation ThinManager ThinServer | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-234-02 | Trane Thermostats | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-234-01 | Hitachi Energy AFF66x | 2023-08-22T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-138-02 | Mitsubishi Electric MELSEC WS Series | 2023-05-18T06:00:00.000000Z | 2023-08-22T06:00:00.000000Z |
| icsa-23-229-03 | Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters | 2023-08-17T06:00:00.000000Z | 2023-08-17T06:00:00.000000Z |
| icsa-23-229-01 | ICONICS and Mitsubishi Electric Products | 2023-08-17T06:00:00.000000Z | 2023-08-17T06:00:00.000000Z |
| icsa-23-227-02 | Rockwell Automation Armor PowerFlex | 2023-08-15T06:00:00.000000Z | 2023-08-15T06:00:00.000000Z |
| icsa-23-227-01 | Schneider Electric EcoStruxure Control Expert, Process Expert, Modicon M340, M580 and M580 CPU | 2023-08-15T06:00:00.000000Z | 2023-08-15T06:00:00.000000Z |
| icsa-23-220-02 | Hitachi Energy RTU500 series | 2023-08-08T06:00:00.000000Z | 2023-08-08T06:00:00.000000Z |
| icsa-23-222-11 | Siemens Solid Edge SE2023 | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| icsa-23-222-02 | Siemens Parasolid Installer | 2023-08-08T00:00:00Z | 2023-08-08T00:00:00Z |
| icsa-23-131-01 | Siemens Solid Edge | 2023-05-09T00:00:00.000000Z | 2023-08-08T00:00:00.000000Z |
| icsa-23-215-04 | Sensormatic Electronics VideoEdge | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-03 | TEL-STER TelWin SCADA WebInterface | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-02 | Mitsubishi Electric GT and GOT Series Products | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-215-01 | Mitsubishi Electric GOT2000 and GOT SIMPLE | 2023-08-03T06:00:00.000000Z | 2023-08-03T06:00:00.000000Z |
| icsa-23-213-01 | APSystems Altenergy Power Control | 2023-08-01T06:00:00.000000Z | 2023-08-01T06:00:00.000000Z |
| icsa-23-208-02 | PTC KEPServerEX | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-208-01 | ETIC Telecom RAS Authentication | 2023-07-27T00:00:00.000000Z | 2023-07-27T00:00:00.000000Z |
| icsa-23-206-04 | Johnson Controls IQ Wifi 6 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-03 | Emerson ROC800 Series RTU and DL8000 Preset Controller | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-02 | Rockwell Automation ThinManager ThinServer | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-206-01 | AXIS A1001 | 2023-07-25T00:00:00.000000Z | 2023-07-25T00:00:00.000000Z |
| icsa-23-229-04 | Walchem Intuition 9 | 2023-07-21T06:00:00.000000Z | 2023-07-21T06:00:00.000000Z |
| icsa-23-201-01 | Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers | 2023-07-20T06:00:00.000000Z | 2023-07-20T06:00:00.000000Z |
| icsa-23-199-07 | WellinTech KingHistorian | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-06 | GE Digital CIMPLICITY | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-05 | GeoVision GV-ADR2701 | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-04 | Weintek Weincloud | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-iosxe-romvar-cmd-inj-N56fYbrw | Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-decnet-dos-cupwdkyl | Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-decnet-dos-cuPWDkyL | Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-cswsh-fkk9azt5 | Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-cswsh-FKk9AzT5 | Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-buffover-cqdrwlc | Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-buffover-CqdRWLc | Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-arbfile-fuxskkde | Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-iosxe-arbfile-FUxskKDE | Cisco IOS XE SD-WAN Software Arbitrary File Corruption Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-pnp-priv-esc-amg3kuvl | Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL | Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-os-cmd-inj-ef6tv5e9 | Cisco IOS XE Software Web UI OS Command Injection Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-os-cmd-inj-Ef6TV5e9 | Cisco IOS XE Software Web UI OS Command Injection Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-iot-codexec-k46eff6q | Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-iot-codexec-k46EFF6q | Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-evss-code-exe-8cw5vsvw | Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-evss-code-exe-8cw5VSvw | Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-bq5hrxgh | Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ios-xe-cat-verify-BQ5hrXgH | Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-xss-cafmtczv | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-xss-cAfMtCzv | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-capwap-dos-2oa3jgks | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ewlc-capwap-dos-2OA3JgKS | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-arp-mtfhbfje | Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-arp-mtfhBfjE | Cisco IOS and IOS XE Software ARP Resource Management Exhaustion Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-privesc-wevfp8ud | Cisco Access Point Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-privesc-wEVfp8Ud | Cisco Access Point Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-foverwrt-hyvxvrtb | Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-ap-foverwrt-HyVXvrtb | Cisco Aironet Access Points Arbitrary File Overwrite Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-alg-dos-hbbs7sze | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2005-0868 | AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC. | 2005-03-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2005-0469 | Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands. | 2005-03-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2002-0318 | FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets. | 2003-04-02T00:00:00.000Z | 2025-10-01T23:10:50.000Z |
| msrc_cve-2002-0130 | Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-2002-0129 | efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-1999-1090 | The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files. | 2002-03-02T00:00:00.000Z | 2025-10-01T23:10:49.000Z |
| msrc_cve-1999-0965 | Race condition in xterm allows local users to modify arbitrary files via the logging option. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0902 | ypserv allows local administrators to modify password tables. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0901 | ypserv allows a local user to modify the GECOS and login shells of other users. | 2000-01-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0475 | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | 1999-09-02T00:00:00.000Z | 2025-10-01T23:10:48.000Z |
| msrc_cve-1999-0163 | In older versions of Sendmail, an attacker could use a pipe character to execute root commands. | 2000-02-02T00:00:00.000Z | 2025-10-01T23:10:47.000Z |
| msrc_cve-1999-0145 | Sendmail WIZ command enabled, allowing root access. | 2000-10-02T00:00:00.000Z | 2025-10-01T23:10:10.000Z |
| msrc_cve-2025-55553 | A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS). | 2025-09-02T00:00:00.000Z | 2025-10-01T17:11:29.000Z |
| msrc_cve-2025-53132 | Win32k Elevation of Privilege Vulnerability | 2025-08-12T07:00:00.000Z | 2025-09-30T07:00:00.000Z |
| msrc_cve-2025-46148 | In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results. | 2025-09-02T00:00:00.000Z | 2025-09-29T01:01:59.000Z |
| msrc_cve-2025-11021 | Libsoup: out-of-bounds read in cookie date handling of libsoup http library | 2025-09-02T00:00:00.000Z | 2025-09-29T01:01:39.000Z |
| msrc_cve-2025-60018 | Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()" | 2025-09-02T00:00:00.000Z | 2025-09-29T01:01:31.000Z |
| msrc_cve-2025-60019 | Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() | 2025-09-02T00:00:00.000Z | 2025-09-29T01:01:23.000Z |
| msrc_cve-2025-59362 | Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c. | 2025-09-02T00:00:00.000Z | 2025-09-28T01:02:19.000Z |
| msrc_cve-2025-21656 | hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur | 2025-01-02T00:00:00.000Z | 2025-09-28T01:02:13.000Z |
| msrc_cve-2024-57945 | riscv: mm: Fix the out of bound issue of vmemmap address | 2025-01-02T00:00:00.000Z | 2025-09-28T01:02:08.000Z |
| msrc_cve-2024-57924 | fs: relax assertions on failure to encode file handles | 2025-01-02T00:00:00.000Z | 2025-09-28T01:02:02.000Z |
| msrc_cve-2024-57893 | ALSA: seq: oss: Fix races at processing SysEx messages | 2025-01-02T00:00:00.000Z | 2025-09-28T01:01:57.000Z |
| msrc_cve-2024-57876 | drm/dp_mst: Fix resetting msg rx state after topology removal | 2025-01-02T00:00:00.000Z | 2025-09-28T01:01:52.000Z |
| msrc_cve-2024-41069 | ASoC: topology: Fix references to freed memory | 2024-07-01T07:00:00.000Z | 2025-09-28T01:01:40.000Z |
| msrc_cve-2024-35826 | block: Fix page refcounts for unaligned buffers in __bio_release_pages() | 2024-05-02T07:00:00.000Z | 2025-09-28T01:01:35.000Z |
| msrc_cve-2024-35803 | x86/efistub: Call mixed mode boot services on the firmware's stack | 2024-05-02T07:00:00.000Z | 2025-09-28T01:01:29.000Z |
| msrc_cve-2023-52916 | media: aspeed: Fix memory overwrite if timing is 1600x900 | 2024-09-01T07:00:00.000Z | 2025-09-28T01:01:17.000Z |
| msrc_cve-2025-22247 | Insecure file handling vulnerability | 2025-05-02T00:00:00.000Z | 2025-09-27T01:03:15.000Z |
| msrc_cve-2025-9900 | Libtiff: libtiff write-what-where | 2025-09-02T00:00:00.000Z | 2025-09-27T01:03:04.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:0254-2 | Security update for chromium, gn, rust-bindgen | 2024-08-18T22:20:17Z | 2024-08-18T22:20:17Z |
| opensuse-su-2024:0253-1 | Security update for python-Pillow | 2024-08-18T16:01:19Z | 2024-08-18T16:01:19Z |
| opensuse-su-2024:0252-1 | Security update for opera | 2024-08-18T14:01:24Z | 2024-08-18T14:01:24Z |
| opensuse-su-2024:14273-1 | element-desktop-1.11.73-1.1 on GA media | 2024-08-18T00:00:00Z | 2024-08-18T00:00:00Z |
| opensuse-su-2024:14272-1 | chromedriver-127.0.6533.119-1.1 on GA media | 2024-08-18T00:00:00Z | 2024-08-18T00:00:00Z |
| opensuse-su-2024:14271-1 | nginx-1.27.1-1.1 on GA media | 2024-08-17T00:00:00Z | 2024-08-17T00:00:00Z |
| opensuse-su-2024:0244-1 | Security update for apptainer | 2024-08-16T04:02:52Z | 2024-08-16T04:02:52Z |
| opensuse-su-2024:0243-1 | Security update for python-aiosmtpd | 2024-08-16T04:02:47Z | 2024-08-16T04:02:47Z |
| opensuse-su-2024:14270-1 | libunbound8-1.21.0-1.1 on GA media | 2024-08-16T00:00:00Z | 2024-08-16T00:00:00Z |
| opensuse-su-2024:14269-1 | bubblewrap-0.10.0-1.1 on GA media | 2024-08-16T00:00:00Z | 2024-08-16T00:00:00Z |
| opensuse-su-2024:0242-1 | Security update for opera | 2024-08-15T15:07:36Z | 2024-08-15T15:07:36Z |
| opensuse-su-2024:14268-1 | ucode-intel-20240813-1.1 on GA media | 2024-08-15T00:00:00Z | 2024-08-15T00:00:00Z |
| opensuse-su-2024:14267-1 | klp-build-0~20240812.ad9f0e0-1.1 on GA media | 2024-08-14T00:00:00Z | 2024-08-14T00:00:00Z |
| opensuse-su-2024:14266-1 | kernel-firmware-all-20240809-1.1 on GA media | 2024-08-14T00:00:00Z | 2024-08-14T00:00:00Z |
| opensuse-su-2024:14265-1 | java-21-openj9-21.0.4.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14264-1 | java-1_8_0-openj9-1.8.0.422-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14263-1 | java-17-openj9-17.0.12.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14262-1 | java-11-openj9-11.0.24.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14261-1 | curl-8.9.1-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14260-1 | MozillaFirefox-129.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14259-1 | libzzip-0-13-0.13.78-1.1 on GA media | 2024-08-11T00:00:00Z | 2024-08-11T00:00:00Z |
| opensuse-su-2024:14258-1 | traefik2-2.11.8-1.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14257-1 | traefik-3.1.2-1.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14256-1 | python38-3.8.19-7.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14255-1 | python311-3.11.9-6.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14254-1 | python310-3.10.14-6.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14253-1 | python39-3.9.19-6.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14252-1 | ksh-93vu-10.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14251-1 | ansible-core-2.16-2.16.9-1.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14250-1 | MozillaThunderbird-115.14.0-1.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-moodle-2023-28329 | Moodle: authenticated sql injection via availability check | 2024-03-06T11:00:53.463Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2023-23923 | Moodle: possible to set the preferred "start page" of other users | 2024-03-06T11:01:04.603Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2023-23922 | Moodle: reflected xss risk in blog search | 2024-03-06T11:01:14.978Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2023-23921 | Moodle: reflected xss risk in some returnurl parameters | 2024-03-06T11:01:25.162Z | 2025-05-20T10:02:07.006Z |
| bit-moodle-2023-1402 | Moodle: course participation report shows roles the user should not see | 2024-03-06T11:01:34.997Z | 2025-05-20T10:02:07.006Z |
| bit-mongoose-2023-3696 | Prototype Pollution in automattic/mongoose | 2024-03-06T10:56:42.406Z | 2025-05-20T10:02:07.006Z |
| bit-mongoose-2022-2564 | Prototype Pollution in automattic/mongoose | 2024-03-06T10:56:53.276Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-8305 | MongoDB Server secondaries may crash due to forced index constraints | 2024-11-08T07:12:18.219Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-8207 | MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths | 2024-08-31T07:15:12.317Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-7553 | Accessing Untrusted Directory May Allow Local Privilege Escalation | 2024-09-20T07:17:59.251Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-6375 | Missing authorization check may lead to shard key refinement | 2024-07-04T07:26:49.343Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2024-1351 | MongoDB Server may allow successful untrusted connection | 2025-03-12T07:18:10.164Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2023-1409 | Certificate validation issue in MongoDB Server running on Windows or macOS | 2024-03-06T10:56:41.982Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2022-24272 | MongoDB Server (mongod) may crash in response to unexpected requests | 2024-03-06T10:57:01.078Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-32040 | Large aggregation pipelines with a specific stage can crash mongod under default configuration | 2024-03-06T10:57:09.971Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-32039 | MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text | 2024-03-06T10:57:20.477Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-32037 | User may trigger invariant when allowed to send commands directly to shards | 2024-03-06T10:57:31.261Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-32036 | Denial of Service and Data Integrity vulnerability in features command | 2024-03-06T10:57:41.177Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-20333 | Server log entry spoofing via newline injection | 2024-03-06T10:57:52.807Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-20330 | Specific replication command with malformed oplog entries can crash secondaries | 2024-03-06T10:58:03.684Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2021-20326 | Specially crafted query may result in a denial of service of mongod | 2024-03-06T10:58:14.498Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7929 | Specially crafted regex query can cause DoS | 2024-03-06T10:58:23.672Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7928 | Improper neutralization of null byte leads to read overrun | 2024-03-06T10:58:33.099Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7926 | Specific query can cause a DoS against MongoDB Server | 2024-03-06T10:58:44.575Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7925 | Denial of Service when processing malformed Role names | 2024-03-06T10:58:54.976Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7923 | Specific GeoQuery can cause DoS against MongoDB Server | 2024-03-06T10:59:03.972Z | 2025-05-20T10:02:07.006Z |
| bit-mongodb-2020-7921 | Administrative action may disable enforcement of per-user IP whitelisting | 2024-03-06T10:59:14.555Z | 2025-05-20T10:02:07.006Z |
| bit-modsecurity2-2025-27110 | Libmodsecurity3 has possible bypass of encoded HTML entities | 2025-03-07T20:58:44.656Z | 2025-05-20T10:02:07.006Z |
| bit-modsecurity2-2024-1019 | WAF bypass of the ModSecurity v3 release line | 2024-03-06T10:56:19.660Z | 2025-05-20T10:02:07.006Z |
| bit-modsecurity-2025-27110 | Libmodsecurity3 has possible bypass of encoded HTML entities | 2025-03-07T20:58:41.959Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-201910-0706 | An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Inje… | 2024-05-17T23:11:12.313000Z |
| var-201907-0310 | An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MS… | 2024-05-17T23:11:12.658000Z |
| var-202007-0951 | An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP … | 2024-05-17T23:11:11.445000Z |
| var-202001-1785 | Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a d… | 2024-05-17T23:11:11.995000Z |
| var-202212-2426 | A vulnerability was found in Exciting Printer and classified as critical. This issue affe… | 2024-05-17T23:11:06.189000Z |
| var-202302-0091 | A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. T… | 2024-05-17T23:11:05.663000Z |
| var-202305-0900 | A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical.… | 2024-05-17T23:11:04.811000Z |
| var-202401-0542 | A vulnerability, which was classified as critical, has been found in Tenda W9 1.0.0.7(445… | 2024-05-17T23:11:02.447000Z |
| var-202404-0124 | A vulnerability was found in Tenda W30E 1.0.1.25(633). It has been classified as critical… | 2024-05-17T23:11:01.530000Z |
| var-202403-0901 | A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi… | 2024-05-17T23:11:01.725000Z |
| var-201112-0259 | The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 … | 2024-05-17T23:09:54.066000Z |
| var-201708-1532 | An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explo… | 2024-05-17T23:09:51.544000Z |
| var-201907-1136 | Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE:… | 2024-05-17T23:09:49.734000Z |
| var-202101-1833 | Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent … | 2024-05-17T23:09:48.118000Z |
| var-202004-0538 | In IQrouter through 3.3.1, there is a root user without a password, which allows attacker… | 2024-05-17T23:09:48.972000Z |
| var-202301-0089 | A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This aff… | 2024-05-17T23:09:45.657000Z |
| var-202403-0920 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classifie… | 2024-05-17T23:09:38.068000Z |
| var-202403-0815 | A vulnerability was found in Tenda AC15 15.03.20_multi. It has been rated as critical. Th… | 2024-05-17T23:09:38.108000Z |
| var-202401-1133 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06… | 2024-05-17T23:09:38.537000Z |
| var-202401-1091 | A vulnerability has been found in Tenda AC10U 15.03.06.49_multi_TDE01 and classified as c… | 2024-05-17T23:09:38.559000Z |
| var-202401-0297 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as crit… | 2024-05-17T23:09:38.751000Z |
| var-202403-1067 | A vulnerability classified as critical has been found in Tenda F1203 2.0.1.6. This affect… | 2024-05-17T23:09:37.967000Z |
| var-200212-0447 | NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows r… | 2024-05-17T23:09:36.113000Z |
| var-201708-1521 | An issue was discovered in SMA Solar Technology products. By sending nonsense data or set… | 2024-05-17T23:09:28.719000Z |
| var-201907-1138 | Vivotek FD8136 devices allow remote memory corruption and remote code execution because o… | 2024-05-17T23:09:26.724000Z |
| var-202004-0540 | In IQrouter through 3.3.1, remote attackers can control the device (restart network, rebo… | 2024-05-17T23:09:25.962000Z |
| var-202302-0047 | A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critica… | 2024-05-17T23:09:18.819000Z |
| var-202304-2225 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problema… | 2024-05-17T23:09:17.892000Z |
| var-202403-0946 | A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. T… | 2024-05-17T23:09:15.083000Z |
| var-202403-0883 | A vulnerability was found in Tenda AC15 15.03.20_multi. It has been declared as critical.… | 2024-05-17T23:09:15.101000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000034 | Maroyaka Simple Board vulnerable to cross-site scripting | 2015-03-04T14:48+09:00 | 2015-03-06T15:07+09:00 |
| jvndb-2015-000019 | Squid input validation vulnerability | 2015-02-20T14:55+09:00 | 2015-03-06T14:57+09:00 |
| jvndb-2015-000031 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2015-02-27T15:39+09:00 | 2015-03-05T15:42+09:00 |
| jvndb-2015-000030 | Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:39+09:00 | 2015-03-04T15:23+09:00 |
| jvndb-2015-000029 | BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass | 2015-03-03T13:38+09:00 | 2015-03-04T15:22+09:00 |
| jvndb-2015-001269 | Cross-site Scripting Vulnerability in Hitachi Application Server Help | 2015-02-16T11:21+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2015-001268 | Cross-site Scripting Vulnerability in Hitachi Command Suite Products | 2015-02-16T11:12+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-004833 | Vulnerability in JP1/NETM/DM and Job Management Partner 1/Software Distribution data reproduction functionality | 2014-11-11T15:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002802 | Xml eXternal Entity Vulnerability in XML link function of Hitachi COBOL2002 | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-002800 | Multiple Vulnerabilities in Hitachi Tuning Manager and JP1/Performance Management - Manager Web Option | 2014-06-12T11:43+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001594 | JP1/File Transmission Server / FTP vulnerable to access control violation | 2014-03-11T16:33+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001593 | JP1/Integrated Management - Service Support vulnerable to cross-site scripting | 2014-03-11T15:54+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2014-001203 | A Problem of CPU Consumption in Host Data Collector bundled with Hitachi Device Manager Software | 2014-01-22T18:06+09:00 | 2015-03-03T16:59+09:00 |
| jvndb-2015-000028 | KENT-WEB Clip Board vulnerability where arbitary files may be deleted | 2015-02-27T14:02+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000024 | Joyful Note vulnerability in handling files | 2015-02-27T13:57+09:00 | 2015-03-03T15:59+09:00 |
| jvndb-2015-000033 | Vulnerability in the jBCrypt key stretching process | 2015-02-27T14:03+09:00 | 2015-03-03T15:58+09:00 |
| jvndb-2015-000032 | checkpw vulnerable to denial-of-service (DoS) | 2015-02-27T12:30+09:00 | 2015-03-03T15:57+09:00 |
| jvndb-2015-000026 | SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution | 2015-02-25T15:00+09:00 | 2015-03-02T14:23+09:00 |
| jvndb-2015-000027 | Zen Cart Japanese version vulnerable to cross-site scripting | 2015-02-25T15:09+09:00 | 2015-03-02T14:19+09:00 |
| jvndb-2015-001558 | Cross-site Scripting Vulnerability in Hitachi IT Operations Analyzer | 2015-02-27T15:57+09:00 | 2015-02-27T15:57+09:00 |
| jvndb-2015-001557 | Cross-site Scripting Vulnerability in JP1/IT Desktop Management - Manager and Hitachi IT Operations Director | 2015-02-27T15:56+09:00 | 2015-02-27T15:56+09:00 |
| jvndb-2015-001556 | Multiple Cross-site Scripting Vulnerabilities in Hitachi Compute Systems Manager | 2015-02-27T15:55+09:00 | 2015-02-27T15:55+09:00 |
| jvndb-2015-000023 | Speed Software Root Explorer and Explorer vulnerable to directory traversal | 2015-02-24T14:35+09:00 | 2015-02-26T17:18+09:00 |
| jvndb-2015-000020 | AL-Mail32 vulnerable to directory traversal | 2015-02-20T14:37+09:00 | 2015-02-24T16:38+09:00 |
| jvndb-2015-000021 | AL-Mail32 vulnerable to denial-of-service (DoS) | 2015-02-20T14:54+09:00 | 2015-02-24T16:37+09:00 |
| jvndb-2015-000022 | AL-Mail32 vulnerable to buffer overflow | 2015-02-20T14:55+09:00 | 2015-02-24T16:36+09:00 |
| jvndb-2015-000010 | Fumy News Clipper vulnerable to cross-site scripting | 2015-01-30T13:52+09:00 | 2015-02-16T15:55+09:00 |
| jvndb-2015-000007 | Arbitrary files may be overwritten in multiple VMware products | 2015-01-29T13:52+09:00 | 2015-02-16T15:34+09:00 |
| jvndb-2015-000006 | SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal | 2015-01-19T13:54+09:00 | 2015-02-13T15:09+09:00 |
| jvndb-2015-000014 | PerlTreeBBS vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02499-1 | Security update 5.0.5 for Multi-Linux Manager Salt Bundle | 2025-07-23T12:46:00Z | 2025-07-23T12:46:00Z |
| suse-su-2025:02492-1 | Security update 5.0.5 for Multi-Linux Manager Salt Bundle | 2025-07-23T12:43:53Z | 2025-07-23T12:43:53Z |
| suse-su-2025:02491-1 | Security update 5.0.5 for Multi-Linux Manager Salt Bundle | 2025-07-23T12:43:13Z | 2025-07-23T12:43:13Z |
| suse-su-2025:02478-1 | Security update 5.0.5 for Multi-Linux Manager Server | 2025-07-23T12:39:24Z | 2025-07-23T12:39:24Z |
| suse-su-2025:02476-1 | Security update 4.3.16 for Multi-Linux Manager Server | 2025-07-23T12:37:12Z | 2025-07-23T12:37:12Z |
| suse-su-2025:02475-1 | Security update 4.3.16 for Multi-Linux Manager Server | 2025-07-23T12:36:44Z | 2025-07-23T12:36:44Z |
| suse-su-2025:02474-1 | Security update for php8 | 2025-07-23T12:03:54Z | 2025-07-23T12:03:54Z |
| suse-su-2025:02473-1 | Security update for php7 | 2025-07-23T12:02:59Z | 2025-07-23T12:02:59Z |
| suse-su-2025:02472-1 | Security update for gstreamer-plugins-base | 2025-07-23T11:18:56Z | 2025-07-23T11:18:56Z |
| suse-su-2025:02471-1 | Security update for xen | 2025-07-22T22:58:21Z | 2025-07-22T22:58:21Z |
| suse-su-2025:02470-1 | Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) | 2025-07-22T20:04:04Z | 2025-07-22T20:04:04Z |
| suse-su-2025:02469-1 | Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4) | 2025-07-22T19:03:55Z | 2025-07-22T19:03:55Z |
| suse-su-2025:02468-1 | Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP4) | 2025-07-22T18:33:43Z | 2025-07-22T18:33:43Z |
| suse-su-2025:02467-1 | Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3) | 2025-07-22T15:04:18Z | 2025-07-22T15:04:18Z |
| suse-su-2025:02464-1 | Security update for libgcrypt | 2025-07-22T11:40:21Z | 2025-07-22T11:40:21Z |
| suse-su-2025:02463-1 | Security update for php8 | 2025-07-22T08:42:55Z | 2025-07-22T08:42:55Z |
| suse-su-2025:02462-1 | Security update for php8 | 2025-07-22T08:41:03Z | 2025-07-22T08:41:03Z |
| suse-su-2025:02460-1 | Security update for python | 2025-07-22T05:48:26Z | 2025-07-22T05:48:26Z |
| suse-su-2025:02459-1 | Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) | 2025-07-22T05:04:25Z | 2025-07-22T05:04:25Z |
| suse-su-2025:02456-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3) | 2025-07-21T21:18:35Z | 2025-07-21T21:18:35Z |
| suse-su-2025:02455-1 | Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) | 2025-07-21T19:33:42Z | 2025-07-21T19:33:42Z |
| suse-su-2025:01783-2 | Security update for postgresql17 | 2025-07-21T19:31:41Z | 2025-07-21T19:31:41Z |
| suse-su-2025:02454-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-07-21T19:03:58Z | 2025-07-21T19:03:58Z |
| suse-su-2025:02451-1 | Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4) | 2025-07-21T17:33:48Z | 2025-07-21T17:33:48Z |
| suse-su-2025:02449-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-07-21T15:33:47Z | 2025-07-21T15:33:47Z |
| suse-su-2025:02448-1 | Security update for python-oslo.utils | 2025-07-21T14:46:13Z | 2025-07-21T14:46:13Z |
| suse-su-2025:02447-1 | Security update for libgcrypt | 2025-07-21T14:45:26Z | 2025-07-21T14:45:26Z |
| suse-su-2025:02446-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-07-21T14:33:46Z | 2025-07-21T14:33:46Z |
| suse-su-2025:02445-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-07-21T14:04:05Z | 2025-07-21T14:04:05Z |
| suse-su-2025:02444-1 | Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) | 2025-07-21T13:04:21Z | 2025-07-21T13:04:21Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-28730 | WordPress插件Astra Security Suite – Firewall & Malware Scan授权问题漏洞 | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28729 | WordPress插件Add Multiple Marker存在未明漏洞 | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28724 | Time Table Generator System跨站脚本漏洞 | 2025-07-23 | 2025-11-19 |
| cnvd-2025-28716 | Student Record System add-course.php文件SQL注入漏洞 | 2025-11-18 | 2025-11-19 |
| cnvd-2025-28692 | Tenda AC15堆栈缓冲区溢出漏洞 | 2024-04-03 | 2025-11-19 |
| cnvd-2025-28681 | Ivanti Secure Access Client开放重定向漏洞 | 2025-10-21 | 2025-11-19 |
| cnvd-2025-28658 | Google Android权限提升漏洞(CNVD-2025-28658) | 2025-09-08 | 2025-11-19 |
| cnvd-2025-28657 | Adobe InDesign Desktop堆缓冲区溢出漏洞(CNVD-2025-28657) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28656 | Adobe InDesign Desktop堆缓冲区溢出漏洞 | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28655 | Adobe InCopy内存错误引用漏洞(CNVD-2025-28655) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28654 | Adobe InCopy内存错误引用漏洞(CNVD-2025-28654) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28653 | Adobe InCopy堆缓冲区溢出漏洞 | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28652 | Adobe Illustrator越界写入漏洞(CNVD-2025-28652) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28651 | Adobe Illustrator堆缓冲区溢出漏洞(CNVD-2025-28651) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28650 | Adobe Illustrator on iPad整数潜流漏洞(CNVD-2025-28650) | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28649 | Adobe Illustrator on iPad整数潜流漏洞 | 2025-11-14 | 2025-11-19 |
| cnvd-2025-28648 | Adobe Illustrator on iPad越界写入漏洞 | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28647 | Adobe Illustrator on iPad堆缓冲区溢出漏洞 | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28646 | Adobe Format Plugins内存错误引用漏洞 | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28645 | Adobe Format Plugins越界读取漏洞(CNVD-2025-28645) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28644 | Adobe Format Plugins越界读取漏洞(CNVD-2025-28644) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28643 | Adobe Format Plugins越界读取漏洞(CNVD-2025-28643) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28642 | Adobe Format Plugins越界读取漏洞(CNVD-2025-28642) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28641 | Adobe Format Plugins越界读取漏洞(CNVD-2025-28641) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28640 | Adobe Format Plugins越界读取漏洞 | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28639 | Adobe Format Plugins堆缓冲区溢出漏洞(CNVD-2025-28639) | 2025-11-14 | 2025-11-18 |
| cnvd-2025-28638 | Adobe Format Plugins堆缓冲区溢出漏洞 | 2025-11-14 | 2025-11-18 |
| cnvd-2025-29019 | Siemens PS/IGES Parasolid Translator Component越界读取漏洞 | 2025-11-20 | 2025-11-17 |
| cnvd-2025-28982 | Siemens Mendix Rich Text组件跨站脚本漏洞 | 2025-11-20 | 2025-11-17 |
| cnvd-2025-28725 | Online DJ Booking Management System跨站脚本漏洞 | 2025-06-27 | 2025-11-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0221 | Multiples vulnérabilités dans HPE Aruba Networking AOS-CX | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0219 | Multiples vulnérabilités dans GLPI | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| CERTFR-2025-AVI-0218 | Multiples vulnérabilités dans Atlassian Jira | 2025-03-19T00:00:00.000000 | 2025-03-19T00:00:00.000000 |
| certfr-2025-avi-0216 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0215 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| CERTFR-2025-AVI-0216 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| CERTFR-2025-AVI-0215 | Multiples vulnérabilités dans VMware Tanzu Gemfire | 2025-03-17T00:00:00.000000 | 2025-03-17T00:00:00.000000 |
| certfr-2025-avi-0214 | Multiples vulnérabilités dans les produits IBM | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0213 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0212 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0211 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0210 | Multiples vulnérabilités dans VMware Tanzu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0209 | Multiples vulnérabilités dans PHP | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0208 | Vulnérabilité dans Microsoft Dataverse | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0214 | Multiples vulnérabilités dans les produits IBM | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0213 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0212 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0211 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0210 | Multiples vulnérabilités dans VMware Tanzu | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0209 | Multiples vulnérabilités dans PHP | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| CERTFR-2025-AVI-0208 | Vulnérabilité dans Microsoft Dataverse | 2025-03-14T00:00:00.000000 | 2025-03-14T00:00:00.000000 |
| certfr-2025-avi-0207 | Multiples vulnérabilités dans Cisco IOS XR | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0206 | Vulnérabilité dans Juniper Networks Junos OS | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0205 | Multiples vulnérabilités dans GitLab | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0204 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0203 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| CERTFR-2025-AVI-0207 | Multiples vulnérabilités dans Cisco IOS XR | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| CERTFR-2025-AVI-0206 | Vulnérabilité dans Juniper Networks Junos OS | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| CERTFR-2025-AVI-0205 | Multiples vulnérabilités dans GitLab | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| CERTFR-2025-AVI-0204 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |