Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-66143 |
5.4 (3.1)
|
WordPress Crumber plugin <= 1.0.10 - Broken Access Con… |
merkulove |
Crumber |
2026-01-22T16:51:50.950Z | 2026-01-29T01:12:19.617Z |
| CVE-2025-66142 |
5.4 (3.1)
|
WordPress Comparimager for Elementor plugin <= 1.0.1 -… |
merkulove |
Comparimager for Elementor |
2026-01-22T16:51:50.767Z | 2026-01-29T01:11:33.821Z |
| CVE-2025-66141 |
5.4 (3.1)
|
WordPress Scroller plugin <= 2.0.2 - Broken Access Con… |
merkulove |
Scroller |
2026-01-22T16:51:50.559Z | 2026-01-29T01:10:46.778Z |
| CVE-2025-67619 |
8.8 (3.1)
|
WordPress Kids Heaven theme <= 3.2 - PHP Object Inject… |
designthemes |
Kids Heaven |
2026-01-22T16:51:52.055Z | 2026-01-29T01:09:45.164Z |
| CVE-2025-66139 |
5.4 (3.1)
|
WordPress Audier For Elementor plugin <= 1.0.9 - Broke… |
merkulove |
Audier For Elementor |
2026-01-22T16:51:50.099Z | 2026-01-29T01:08:51.396Z |
| CVE-2025-67614 |
7.1 (3.1)
|
WordPress TheNa theme <= 1.5.5 - Reflected Cross Site … |
foreverpinetree |
TheNa |
2026-01-22T16:51:51.190Z | 2026-01-29T01:08:08.706Z |
| CVE-2025-67626 |
4.3 (3.1)
|
WordPress WP SEO Search plugin <= 1.1 - Cross Site Req… |
Angel Costa |
WP SEO Search |
2026-01-22T16:51:52.454Z | 2026-01-29T01:06:54.487Z |
| CVE-2025-67620 |
7.1 (3.1)
|
WordPress Anon theme <= 2.2.10 - Reflected Cross Site … |
CleverSoft |
Anon |
2026-01-22T16:51:52.273Z | 2026-01-29T01:05:11.215Z |
| CVE-2025-67947 |
7.1 (3.1)
|
WordPress AdForest Elementor plugin <= 3.0.11 - Cross … |
scriptsbundle |
AdForest Elementor |
2026-01-22T16:51:54.712Z | 2026-01-29T01:04:29.713Z |
| CVE-2025-67949 |
7.1 (3.1)
|
WordPress Hostiko theme < 94.3.6 - Cross Site Scriptin… |
designingmedia |
Hostiko |
2026-01-22T16:51:54.975Z | 2026-01-29T01:03:13.132Z |
| CVE-2025-67952 |
7.1 (3.1)
|
WordPress Grand Tour theme < 5.6.2 - Cross Site Script… |
ThemeGoods |
Grand Tour |
2026-01-22T16:51:55.230Z | 2026-01-29T01:02:24.298Z |
| CVE-2025-67958 |
6.5 (3.1)
|
WordPress TaxCloud for WooCommerce plugin <= 8.3.8 - B… |
Taxcloud |
TaxCloud for WooCommerce |
2026-01-22T16:51:56.847Z | 2026-01-29T01:01:52.379Z |
| CVE-2025-67959 |
7.1 (3.1)
|
WordPress WorkScout theme <= 4.1.07 - Cross Site Scrip… |
purethemes |
WorkScout |
2026-01-22T16:51:57.097Z | 2026-01-29T00:59:41.995Z |
| CVE-2025-67960 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site… |
purethemes |
WorkScout-Core |
2026-01-22T16:51:57.383Z | 2026-01-29T00:58:49.876Z |
| CVE-2025-68911 |
6.5 (3.1)
|
WordPress Solace theme <= 2.1.16 - Broken Access Contr… |
solacewp |
Solace |
2026-01-22T16:52:14.813Z | 2026-01-29T00:57:35.517Z |
| CVE-2025-69046 |
8.1 (3.1)
|
WordPress iRecco Core plugin <= 1.3.6 - Local File Inc… |
WebGeniusLab |
iRecco Core |
2026-01-22T16:52:19.210Z | 2026-01-29T00:56:55.087Z |
| CVE-2025-69041 |
8.1 (3.1)
|
WordPress Dekoro theme <= 1.0.7 - Local File Inclusion… |
goalthemes |
Dekoro |
2026-01-22T16:52:18.140Z | 2026-01-29T00:56:14.618Z |
| CVE-2025-69047 |
8.1 (3.1)
|
WordPress MaxShop theme <= 3.6.20 - Local File Inclusi… |
magentech |
MaxShop |
2026-01-22T16:52:19.420Z | 2026-01-29T00:55:33.373Z |
| CVE-2025-69049 |
8.1 (3.1)
|
WordPress Töbel theme <= 1.6 - Local File Inclusion vu… |
Elated-Themes |
Töbel |
2026-01-22T16:52:19.830Z | 2026-01-29T00:54:35.135Z |
| CVE-2025-69062 |
8.1 (3.1)
|
WordPress Weedles theme <= 1.1.12 - Local File Inclusi… |
AncoraThemes |
Weedles |
2026-01-22T16:52:22.689Z | 2026-01-29T00:53:35.524Z |
| CVE-2025-69061 |
8.1 (3.1)
|
WordPress MoveMe theme <= 1.2.15 - Local File Inclusio… |
AncoraThemes |
MoveMe |
2026-01-22T16:52:22.452Z | 2026-01-29T00:52:48.327Z |
| CVE-2025-69050 |
8.1 (3.1)
|
WordPress Overworld theme <= 1.3 - Local File Inclusio… |
Edge-Themes |
Overworld |
2026-01-22T16:52:20.020Z | 2026-01-29T00:52:24.706Z |
| CVE-2025-69045 |
8.5 (3.1)
|
WordPress FooEvents for WooCommerce plugin <= 1.20.4 -… |
FooEvents |
FooEvents for WooCommerce |
2026-01-22T16:52:19.002Z | 2026-01-29T00:51:03.689Z |
| CVE-2025-69064 |
8.1 (3.1)
|
WordPress Pets Land theme <= 1.2.8 - Local File Inclus… |
AncoraThemes |
Pets Land |
2026-01-22T16:52:22.874Z | 2026-01-29T00:49:13.480Z |
| CVE-2025-69065 |
8.1 (3.1)
|
WordPress Snow Mountain theme <= 1.4.3 - Local File In… |
AncoraThemes |
Snow Mountain |
2026-01-22T16:52:23.109Z | 2026-01-29T00:48:36.993Z |
| CVE-2025-69077 |
8.1 (3.1)
|
WordPress Hobo theme <= 1.0.10 - Local File Inclusion … |
AncoraThemes |
Hobo |
2026-01-22T16:52:25.403Z | 2026-01-29T00:47:47.339Z |
| CVE-2025-67961 |
6.4 (3.1)
|
WordPress WPO365 plugin <= 40.0 - Server Side Request … |
Marco van Wieren |
WPO365 |
2026-01-22T16:51:57.784Z | 2026-01-29T00:11:24.069Z |
| CVE-2025-69078 |
8.1 (3.1)
|
WordPress Malta theme <= 1.3.3 - Local File Inclusion … |
AncoraThemes |
Malta |
2026-01-22T16:52:25.630Z | 2026-01-29T00:10:40.791Z |
| CVE-2025-68871 |
7.1 (3.1)
|
WordPress Dooodl plugin <= 2.3.0 - Reflected Cross Sit… |
noCreativity |
Dooodl |
2026-01-22T16:52:10.736Z | 2026-01-29T00:07:41.413Z |
| CVE-2025-68538 |
7.1 (3.1)
|
WordPress Craft | Coffee Shop Cafe Restaurant WordPres… |
ThemeGoods |
Craft |
2026-01-22T16:52:08.348Z | 2026-01-29T00:06:54.994Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69199 |
8.3 (4.0)
|
Pterodactyl Wings's websocket endpoints have no visibl… |
pterodactyl |
panel |
2026-01-19T19:17:53.569Z | 2026-01-20T20:05:22.699Z |
| CVE-2026-21696 |
8.3 (4.0)
|
Endless reprocessing/reupload of activity log data due… |
pterodactyl |
wings |
2026-01-19T19:25:43.283Z | 2026-01-20T17:27:48.498Z |
| CVE-2026-1176 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-19T21:02:07.529Z | 2026-01-21T20:59:11.687Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-23961 |
5.3 (3.1)
|
Mastodon may allow a remote suspension bypass |
mastodon |
mastodon |
2026-01-22T01:47:36.828Z | 2026-01-22T21:38:52.885Z |
| CVE-2026-23962 |
7.5 (3.1)
|
Mastodon vulnerable to Denial of Service from a single… |
mastodon |
mastodon |
2026-01-22T01:51:37.430Z | 2026-01-22T21:35:41.343Z |
| CVE-2026-23963 |
4.3 (3.1)
|
Mastodon missing length limits on list names, filter n… |
mastodon |
mastodon |
2026-01-22T01:53:49.887Z | 2026-01-22T17:32:13.067Z |
| CVE-2025-69821 |
7.4 (3.1)
|
An issue in Beat XP VEGA Smartwatch (Firmware Ver… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:12:50.212Z |
| CVE-2026-23964 |
6.5 (3.1)
|
Mastodon has insufficient access control to push notif… |
mastodon |
mastodon |
2026-01-22T01:55:29.904Z | 2026-01-22T17:02:23.614Z |
| CVE-2025-69822 |
7.4 (3.1)
|
An issue in Atomberg Atomberg Erica Smart Fan Fir… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-22T16:09:34.142Z |
| CVE-2025-56589 |
7.5 (3.1)
|
A Local File Inclusion (LFI) and a Server-Side Re… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-26T18:55:29.116Z |
| CVE-2025-70899 |
6.5 (3.1)
|
PHPgurukul Online Course Registration v3.1 lacks … |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-23T16:40:22.807Z |
| CVE-2025-53968 |
7.5 (3.1)
|
EVMAPA Improper Restriction of Excessive Authenticatio… |
EVMAPA |
EVMAPA |
2026-01-22T22:37:36.978Z | 2026-01-23T20:11:29.349Z |
| CVE-2026-24435 |
7.1 (4.0)
|
Tenda W30E V2 Permissive CORS Allows Cross-origin Data… |
Shenzhen Tenda Technology Co., Ltd. |
W30E V2 |
2026-01-26T17:49:03.354Z | 2026-01-26T19:52:12.119Z |
| CVE-2025-54816 |
9.4 (3.1)
|
EVMAPA Missing Authentication for Critical Function |
EVMAPA |
EVMAPA |
2026-01-22T22:40:55.625Z | 2026-01-23T20:12:02.940Z |
| CVE-2020-36947 |
7.1 (4.0)
7.1 (3.1)
|
LibreNMS 1.46 - MAC Accounting Graph Authenticated SQL… |
LibreNMS |
LibreNMS |
2026-01-27T15:23:49.490Z | 2026-01-27T21:36:40.950Z |
| CVE-2025-69564 |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 i… |
n/a |
n/a |
2026-01-27T00:00:00.000Z | 2026-01-28T20:28:16.668Z |
| CVE-2026-1521 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s5c-handler.c denial of service |
n/a |
Open5GS |
2026-01-28T14:32:10.348Z | 2026-01-28T16:12:00.256Z |
| CVE-2026-1545 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-28T21:32:12.268Z | 2026-01-29T18:00:59.239Z |
| CVE-2025-12776 |
1.8 (4.0)
|
Stored Cross-Site Scripting |
Commvault |
WebConsole |
2026-01-07T22:03:05.033Z | 2026-01-08T18:17:45.215Z |
| CVE-2025-13151 |
7.5 (3.1)
|
CVE-2025-13151 |
GnuTLS |
libtasn1 |
2026-01-07T21:14:05.223Z | 2026-01-20T17:08:41.712Z |
| CVE-2026-1551 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
itsourcecode School Management System controller.php s… |
itsourcecode |
School Management System |
2026-01-28T23:32:15.865Z | 2026-01-29T16:53:34.111Z |
| CVE-2026-1589 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-29T14:02:07.250Z | 2026-01-29T16:43:37.512Z |
| CVE-2026-1590 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-29T14:02:09.246Z | 2026-01-29T16:43:25.868Z |
| CVE-2026-1522 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bear… |
n/a |
Open5GS |
2026-01-28T16:32:07.267Z | 2026-01-28T16:42:10.044Z |
| CVE-2025-62224 |
5.5 (3.1)
|
Microsoft Edge (Chromium-based) for Android Spoofing V… |
Microsoft |
Microsoft Edge for Android |
2026-01-07T22:54:54.800Z | 2026-01-08T18:17:31.322Z |
| CVE-2026-21859 |
5.8 (3.1)
|
Mailpit Proxy Endpoint is Vulnerable to Server-Side Re… |
axllent |
mailpit |
2026-01-07T23:24:07.869Z | 2026-01-08T19:23:22.033Z |
| CVE-2020-36962 |
5.3 (4.0)
9.8 (3.1)
|
Tendenci 12.3.1 - CSV/ Formula Injection |
Tendenci |
Tendenci |
2026-01-28T17:35:08.249Z | 2026-01-29T18:12:58.454Z |
| CVE-2026-21869 |
8.8 (3.1)
|
llama.cpp has Out-of-bounds Write in llama-server |
ggml-org |
llama.cpp |
2026-01-07T23:37:59.886Z | 2026-01-08T19:15:28.709Z |
| CVE-2026-21896 |
5.8 (4.0)
|
Kirby is missing permission checks in the content chan… |
getkirby |
kirby |
2026-01-08T18:09:10.362Z | 2026-01-08T18:20:29.904Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-69199 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel… | 2026-01-19T20:15:48.370 | 2026-02-02T20:41:13.750 |
| fkie_cve-2026-21696 | Wings is the server control plane for Pterodactyl, a free, open-source game server management panel… | 2026-01-19T20:15:49.107 | 2026-02-02T20:40:21.660 |
| fkie_cve-2026-1176 | A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an un… | 2026-01-19T21:15:50.587 | 2026-02-02T20:37:03.877 |
| fkie_cve-2025-69820 | Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensit… | 2026-01-22T16:16:07.820 | 2026-02-02T20:33:56.877 |
| fkie_cve-2026-23961 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server … | 2026-01-22T02:15:52.780 | 2026-02-02T20:29:07.753 |
| fkie_cve-2026-23962 | Mastodon is a free, open-source social network server based on ActivityPub. Mastodon versions befor… | 2026-01-22T03:15:46.400 | 2026-02-02T20:27:51.360 |
| fkie_cve-2026-23963 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5… | 2026-01-22T03:15:46.550 | 2026-02-02T20:27:15.387 |
| fkie_cve-2025-69821 | An issue in Beat XP VEGA Smartwatch (Firmware Version - RB303ATV006229) allows an attacker to cause… | 2026-01-22T16:16:07.927 | 2026-02-02T20:27:14.310 |
| fkie_cve-2026-23964 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.5.5… | 2026-01-22T03:15:46.700 | 2026-02-02T20:26:10.053 |
| fkie_cve-2025-69822 | An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtai… | 2026-01-22T16:16:08.033 | 2026-02-02T20:11:38.843 |
| fkie_cve-2025-56589 | A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in th… | 2026-01-22T17:15:58.183 | 2026-02-02T20:09:27.567 |
| fkie_cve-2025-70899 | PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on al… | 2026-01-22T17:16:28.580 | 2026-02-02T20:01:45.377 |
| fkie_cve-2025-53968 | This vulnerability arises because there are no limitations on the number of authentication attempt… | 2026-01-22T23:15:49.800 | 2026-02-02T19:59:16.310 |
| fkie_cve-2026-24435 | Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecur… | 2026-01-26T18:16:41.030 | 2026-02-02T19:56:16.290 |
| fkie_cve-2025-54816 | This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechani… | 2026-01-22T23:15:49.953 | 2026-02-02T19:56:13.070 |
| fkie_cve-2020-36947 | LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph end… | 2026-01-27T16:16:12.040 | 2026-02-02T19:48:55.727 |
| fkie_cve-2025-69564 | code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php… | 2026-01-27T17:16:10.063 | 2026-02-02T19:46:38.523 |
| fkie_cve-2026-1521 | A security flaw has been discovered in Open5GS up to 2.7.6. This affects the function sgwc_s5c_hand… | 2026-01-28T15:16:17.493 | 2026-02-02T19:44:26.477 |
| fkie_cve-2026-1545 | A weakness has been identified in itsourcecode School Management System 1.0. The affected element i… | 2026-01-28T22:15:55.470 | 2026-02-02T19:41:32.603 |
| fkie_cve-2025-12776 | The Report Builder component of the application stores user input directly in a web page and displa… | 2026-01-07T22:15:43.030 | 2026-02-02T19:32:01.800 |
| fkie_cve-2025-13151 | Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size o… | 2026-01-07T22:15:43.200 | 2026-02-02T19:27:23.070 |
| fkie_cve-2026-1551 | A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknow… | 2026-01-29T00:16:08.450 | 2026-02-02T19:26:59.780 |
| fkie_cve-2026-1589 | A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknow… | 2026-01-29T15:16:13.050 | 2026-02-02T19:25:56.550 |
| fkie_cve-2026-1590 | A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknow… | 2026-01-29T15:16:13.350 | 2026-02-02T19:25:13.073 |
| fkie_cve-2026-1522 | A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwc… | 2026-01-28T17:16:15.330 | 2026-02-02T19:23:51.507 |
| fkie_cve-2025-62224 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows … | 2026-01-07T23:15:44.407 | 2026-02-02T19:21:20.177 |
| fkie_cve-2026-21859 | Mailpit is an email testing tool and API for developers. Versions 1.28.0 and below have a Server-Si… | 2026-01-08T00:16:00.150 | 2026-02-02T19:16:52.987 |
| fkie_cve-2020-36962 | Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field th… | 2026-01-28T18:16:46.277 | 2026-02-02T19:13:52.203 |
| fkie_cve-2026-21869 | llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_dis… | 2026-01-08T00:16:00.297 | 2026-02-02T19:12:36.020 |
| fkie_cve-2026-21896 | Kirby is an open-source content management system. From versions 5.0.0 to 5.2.1, Kirby is missing p… | 2026-01-08T18:15:59.593 | 2026-02-02T19:02:51.850 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-3p56-grmc-2fxh |
|
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability … | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-2v5p-5pj6-h3hp |
|
Incorrect Authorization vulnerability in Drupal Entity Share allows Forceful Browsing.This issue af… | 2026-01-28T21:31:23Z | 2026-01-28T21:31:23Z |
| ghsa-cc53-w5wm-253v |
6.8 (3.1)
|
Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded stat… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:22Z |
| ghsa-r8w3-p4p4-x3j6 |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php… | 2026-01-27T18:32:17Z | 2026-01-28T21:31:21Z |
| ghsa-jrq9-fh3p-h9g6 |
4.3 (3.1)
|
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.1… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-hj7x-r6cx-rqqh |
9.1 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerab… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-54f4-9j4c-c7x8 |
10.0 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficie… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-2px4-jf33-3273 |
8.6 (3.1)
|
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficie… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-2646-g369-4jgh |
9.9 (3.1)
|
Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerabili… | 2026-01-28T18:30:49Z | 2026-01-28T21:31:21Z |
| ghsa-w42r-ph9f-9x66 |
7.5 (3.1)
|
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code wh… | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-h3px-p99h-9f2w |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.ph… | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-9hp9-m3m3-mp2v |
7.5 (3.1)
|
Mitigation bypass in the Privacy: Anti-Tracking component. This vulnerability affects Firefox < 147.0.2. | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-8pgr-h8jj-q62w |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via … | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-7prc-fr4v-836v |
9.8 (3.1)
|
code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php. | 2026-01-27T18:32:16Z | 2026-01-28T21:31:20Z |
| ghsa-6c9g-6gr7-3mm5 |
9.8 (3.1)
|
code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php. | 2026-01-27T18:32:17Z | 2026-01-28T21:31:20Z |
| ghsa-46gc-wc69-mw4h |
8.8 (3.1)
8.7 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwo… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:20Z |
| ghsa-w69g-qrmr-3cf2 |
6.5 (3.1)
2.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-vw2m-ppwv-6g52 |
7.5 (3.1)
8.2 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive a… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-p4q3-78m7-rm2f |
6.5 (3.1)
7.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-j73p-m2g8-wpgm |
9.8 (3.1)
9.2 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate … | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-f3h8-6qj8-rp34 |
5.5 (3.1)
4.8 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive admi… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-5rh5-q22h-69wj |
4.3 (3.1)
5.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site requ… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-4pfw-2gcp-q7h8 |
5.4 (3.1)
5.1 (4.0)
|
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain a stored cro… | 2026-01-26T18:31:31Z | 2026-01-28T21:31:19Z |
| ghsa-rm5m-fjmr-4hwj |
6.5 (3.1)
|
Missing Authorization vulnerability in Chris Simmons WP BackItUp wp-backitup allows Exploiting Inco… | 2026-01-22T18:30:35Z | 2026-01-28T21:31:18Z |
| ghsa-hcj7-c9m7-w5g2 |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in garidium g-FFL Checkout g-ffl-chec… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-7r22-q5hv-pc72 |
7.3 (3.1)
|
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privile… | 2026-01-22T18:30:35Z | 2026-01-28T21:31:18Z |
| ghsa-4224-439j-q3pp |
6.5 (3.1)
|
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCo… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-36jg-fqm9-hv24 |
6.5 (3.1)
|
Missing Authorization vulnerability in WANotifier WANotifier notifier allows Exploiting Incorrectly… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-x87w-5wj7-8cwc |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:33Z | 2026-01-28T21:31:17Z |
| ghsa-v2hq-hpvp-pm2v |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:33Z | 2026-01-28T21:31:17Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-330 |
|
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify l… | parlai | 2021-09-10T22:15:00Z | 2021-09-23T00:11:05.455785Z |
| pysec-2021-329 |
|
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x… | neutron | 2021-09-08T20:15:00Z | 2021-09-23T00:11:02.378195Z |
| pysec-2021-328 |
|
mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and b… | mitmproxy | 2021-09-16T15:15:00Z | 2021-09-23T00:11:00.900340Z |
| pysec-2021-327 |
|
Apprise is an open source library which allows you to send a notification to almost all o… | apprise | 2021-09-20T22:15:00Z | 2021-09-23T00:10:35.209283Z |
| pysec-2021-326 |
|
The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1… | apache-airflow | 2021-09-09T15:15:00Z | 2021-09-21T14:26:17.443988Z |
| pysec-2021-325 |
|
Flask-RESTX (pypi package flask-restx) is a community driven fork of Flask-RESTPlus. Flas… | flask-restx | 2021-09-20T18:15:00Z | 2021-09-20T20:31:06.092661Z |
| pysec-2021-324 |
|
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the func… | lief | 2021-09-20T16:15:00Z | 2021-09-20T18:35:23.431537Z |
| pysec-2021-323 |
|
Products.isurlinportal is a replacement for isURLInPortal method in Plone. Versions of Pr… | products-isurlinportal | 2021-08-02T19:15:00Z | 2021-09-20T14:26:43.785985Z |
| pysec-2021-322 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.947373Z |
| pysec-2021-321 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.… | wasmtime | 2021-09-17T21:15:00Z | 2021-09-17T22:30:49.898970Z |
| pysec-2021-320 |
|
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.19.… | wasmtime | 2021-09-17T20:15:00Z | 2021-09-17T22:30:49.852358Z |
| pysec-2021-319 |
|
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attack… | postorius | 2021-09-10T19:15:00Z | 2021-09-10T20:31:12.904905Z |
| pysec-2021-317 |
|
The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of… | pillow | 2021-09-03T16:15:00Z | 2021-09-03T18:35:52.828411Z |
| pysec-2019-201 |
|
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_han… | roundup | 2019-04-06T20:29:00Z | 2021-09-02T01:11:35.189013Z |
| pysec-2020-224 |
|
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and … | apache-superset | 2020-01-28T01:15:00Z | 2021-09-02T01:10:59.006282Z |
| pysec-2021-371 |
|
BinderHub is a kubernetes-based cloud service that allows users to share reproducible int… | binderhub | 2021-08-25T19:15:00Z | 2021-09-01T12:23:00Z |
| pysec-2014-51 |
|
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:31.427296Z |
| pysec-2014-50 |
|
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obt… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:31.321280Z |
| pysec-2014-49 |
|
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:31.212307Z |
| pysec-2014-48 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:31.097145Z |
| pysec-2014-47 |
|
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read priva… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.978910Z |
| pysec-2014-46 |
|
Cross-site scripting (XSS) vulnerability in widget_traversal.py in Plone before 4.2.3 and… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.873895Z |
| pysec-2014-45 |
|
ftp.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read hidden… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.766279Z |
| pysec-2014-44 |
|
Cross-site scripting (XSS) vulnerability in safe_html.py in Plone before 4.2.3 and 4.3 be… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.658658Z |
| pysec-2014-43 |
|
at_download.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to rea… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.552304Z |
| pysec-2014-42 |
|
The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before… | plone | 2014-11-03T22:55:00Z | 2021-09-01T08:44:30.447394Z |
| pysec-2014-41 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.342149Z |
| pysec-2014-40 |
|
queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to by… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.217052Z |
| pysec-2014-39 |
|
membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:30.107520Z |
| pysec-2014-37 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.952455Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3694 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.609033Z |
| gsd-2024-3693 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.782958Z |
| gsd-2024-3692 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.917140Z |
| gsd-2024-3691 | A vulnerability, which was classified as critical, has been found in PHPGurukul Small CRM… | 2024-04-13T05:02:35.784787Z |
| gsd-2024-3690 | A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by… | 2024-04-13T05:02:35.881527Z |
| gsd-2024-3689 | A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Networ… | 2024-04-13T05:02:35.586853Z |
| gsd-2024-3688 | A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It h… | 2024-04-13T05:02:35.858909Z |
| gsd-2024-3687 | A vulnerability was found in bihell Dice 3.1.0 and classified as problematic. Affected by… | 2024-04-13T05:02:35.873605Z |
| gsd-2024-3686 | A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Aff… | 2024-04-13T05:02:35.802762Z |
| gsd-2024-3685 | A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Aff… | 2024-04-13T05:02:35.862849Z |
| gsd-2024-26024 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:35.554681Z |
| gsd-2024-28042 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:33.649306Z |
| gsd-2024-32482 | The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability h… | 2024-04-13T05:02:29.036012Z |
| gsd-2024-32481 | Vyper is a pythonic Smart Contract Language for the Ethereum virtual machine. Starting in… | 2024-04-13T05:02:29.060928Z |
| gsd-2024-32480 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prio… | 2024-04-13T05:02:29.064142Z |
| gsd-2024-32479 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to vers… | 2024-04-13T05:02:29.082525Z |
| gsd-2024-32478 | Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debia… | 2024-04-13T05:02:29.141641Z |
| gsd-2024-32477 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using … | 2024-04-13T05:02:29.081733Z |
| gsd-2024-32476 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Deni… | 2024-04-13T05:02:29.139616Z |
| gsd-2024-32475 | Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster… | 2024-04-13T05:02:29.105695Z |
| gsd-2024-32474 | Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when au… | 2024-04-13T05:02:29.106080Z |
| gsd-2024-32473 | Moby is an open source container framework that is a key component of Docker Engine, Dock… | 2024-04-13T05:02:29.067500Z |
| gsd-2024-32472 | excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerabil… | 2024-04-13T05:02:29.058522Z |
| gsd-2024-32471 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.055748Z |
| gsd-2024-32470 | Tolgee is an open-source localization platform. When API key created by admin user is use… | 2024-04-13T05:02:29.134464Z |
| gsd-2024-32469 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.130549Z |
| gsd-2024-32468 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.025407Z |
| gsd-2024-32467 | MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, … | 2024-04-13T05:02:29.107455Z |
| gsd-2024-32466 | Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `… | 2024-04-13T05:02:29.137980Z |
| gsd-2024-32465 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.044853Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192601 | Malicious code in vscode-azure-mcp-server (npm) | 2025-12-16T17:02:46Z | 2025-12-30T17:25:53Z |
| MAL-2025-192601 | Malicious code in vscode-azure-mcp-server (npm) | 2025-12-16T17:02:46Z | 2025-12-30T17:25:53Z |
| mal-2025-192698 | Malicious code in ro-mobile (npm) | 2025-12-22T22:29:27Z | 2025-12-30T17:25:52Z |
| MAL-2025-192698 | Malicious code in ro-mobile (npm) | 2025-12-22T22:29:27Z | 2025-12-30T17:25:52Z |
| mal-2025-192694 | Malicious code in dc-extras (npm) | 2025-12-22T22:29:27Z | 2025-12-30T17:25:49Z |
| MAL-2025-192694 | Malicious code in dc-extras (npm) | 2025-12-22T22:29:27Z | 2025-12-30T17:25:49Z |
| mal-2025-4762 | Malicious code in react-server-dom-fb (npm) | 2025-06-09T22:10:11Z | 2025-12-30T16:26:14Z |
| MAL-2025-4762 | Malicious code in react-server-dom-fb (npm) | 2025-06-09T22:10:11Z | 2025-12-30T16:26:14Z |
| mal-2025-48848 | Malicious code in internal-test-utils (npm) | 2025-10-23T19:35:56Z | 2025-12-30T16:26:12Z |
| mal-2024-2379 | Malicious code in float-kit (npm) | 2024-06-25T12:43:12Z | 2025-12-30T16:26:12Z |
| MAL-2025-48848 | Malicious code in internal-test-utils (npm) | 2025-10-23T19:35:56Z | 2025-12-30T16:26:12Z |
| MAL-2024-2379 | Malicious code in float-kit (npm) | 2024-06-25T12:43:12Z | 2025-12-30T16:26:12Z |
| mal-2024-1800 | Malicious code in baas-admin-sdk (npm) | 2024-06-25T12:29:11Z | 2025-12-30T16:26:11Z |
| MAL-2024-1800 | Malicious code in baas-admin-sdk (npm) | 2024-06-25T12:29:11Z | 2025-12-30T16:26:11Z |
| mal-0000-kam193-8ddff882bfe186cc | Pentesting or research code in rippling-cli (PyPI) | 2025-12-30T10:00:51Z | 2025-12-30T10:00:53Z |
| MAL-0000-KAM193-8DDFF882BFE186CC | Pentesting or research code in rippling-cli (PyPI) | 2025-12-30T10:00:51Z | 2025-12-30T10:00:53Z |
| mal-0000-kam193-a5e82ba558a433d6 | Pentesting or research code in awsutil (PyPI) | 2025-12-29T21:57:34Z | 2025-12-29T21:57:34Z |
| MAL-0000-KAM193-A5E82BA558A433D6 | Pentesting or research code in awsutil (PyPI) | 2025-12-29T21:57:34Z | 2025-12-29T21:57:34Z |
| mal-0000-kam193-7a913c42577c1aac | Malicious code in cryptozip (PyPI) | 2025-12-28T19:49:40Z | 2025-12-29T12:13:22Z |
| MAL-0000-KAM193-7A913C42577C1AAC | Malicious code in cryptozip (PyPI) | 2025-12-28T19:49:40Z | 2025-12-29T12:13:22Z |
| mal-2025-192579 | Malicious code in smtblib (PyPI) | 2025-12-15T15:24:47Z | 2025-12-29T11:08:56Z |
| MAL-2025-192579 | Malicious code in smtblib (PyPI) | 2025-12-15T15:24:47Z | 2025-12-29T11:08:56Z |
| mal-2025-192958 | Malicious code in smtmlib (PyPI) | 2025-12-29T10:04:23Z | 2025-12-29T10:08:51Z |
| MAL-2025-192958 | Malicious code in smtmlib (PyPI) | 2025-12-29T10:04:23Z | 2025-12-29T10:08:51Z |
| mal-0000-kam193-04bd21d6e982435e | Malicious code in aiogram-types-v3 (PyPI) | 2025-12-28T01:44:36Z | 2025-12-28T19:40:03Z |
| MAL-0000-KAM193-04BD21D6E982435E | Malicious code in aiogram-types-v3 (PyPI) | 2025-12-28T01:44:36Z | 2025-12-28T19:40:03Z |
| mal-2025-192948 | Malicious code in extrazip (PyPI) | 2025-12-27T09:41:01Z | 2025-12-27T09:41:01Z |
| MAL-2025-192948 | Malicious code in extrazip (PyPI) | 2025-12-27T09:41:01Z | 2025-12-27T09:41:01Z |
| mal-0000-kam193-32bc16cb2876d151 | Pentesting or research code in crypo (PyPI) | 2025-12-27T08:56:38Z | 2025-12-27T08:56:38Z |
| MAL-0000-KAM193-32BC16CB2876D151 | Pentesting or research code in crypo (PyPI) | 2025-12-27T08:56:38Z | 2025-12-27T08:56:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0833 | Axis OS: Schwachstelle ermöglicht Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0832 | Autodesk AutoCAD und Civil 3D: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0829 | HCL BigFix: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0827 | Oracle Secure Backup: Schwachstelle gefährdet Vertraulichkeit, Integrität und Verfügbarkeit | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0826 | Oracle TimesTen In-Memory Database: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0825 | Oracle Commerce: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0824 | Oracle Communications Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0822 | Oracle Construction and Engineering: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0821 | Oracle E-Business Suite: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0820 | Oracle Enterprise Manager: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0819 | Oracle Financial Services Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0818 | Oracle Fusion Middleware: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0817 | Oracle Hyperion: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0816 | Oracle Insurance Applications: Schwachstelle gefährdet Vertraulichkeit | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0814 | Oracle JD Edwards: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0812 | Oracle PeopleSoft: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0811 | Oracle Policy Automation: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0810 | Oracle Retail Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0809 | Oracle Siebel CRM: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0808 | Oracle Supply Chain: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0807 | Oracle Support Tools: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0805 | Oracle Utilities Applications: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0802 | Atlassian Confluence Data Center und Server: Mehrere Schwachstellen | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0801 | Atlassian Bamboo: Schwachstelle ermöglicht Denial of Service | 2025-04-15T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0705 | HCL BigFix WebUI-Anwendungen: Mehrere Schwachstellen | 2025-04-03T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0700 | Red Hat OpenShift: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-04-02T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2025-0585 | Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-18T23:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2024-2112 | Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-09-10T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2024-1516 | 7-Zip: Mehrere Schwachstellen | 2024-07-03T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| wid-sec-w-2023-1003 | Linux Kernel: Mehrere Schwachstellen | 2023-04-18T22:00:00.000+00:00 | 2025-04-15T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:3683 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.2 security update | 2024-06-06T12:25:31+00:00 | 2026-02-03T21:36:43+00:00 |
| rhsa-2024:3351 | Red Hat Security Advisory: OpenShift Container Platform 4.12.58 security update | 2024-05-30T04:16:04+00:00 | 2026-02-03T21:36:39+00:00 |
| rhsa-2024:3349 | Red Hat Security Advisory: OpenShift Container Platform 4.12.58 security update | 2024-05-30T03:55:17+00:00 | 2026-02-03T21:36:39+00:00 |
| rhsa-2024:3254 | Red Hat Security Advisory: container-tools:rhel8 security update | 2024-05-22T11:48:26+00:00 | 2026-02-03T21:36:39+00:00 |
| rhsa-2024:2877 | Red Hat Security Advisory: OpenShift Container Platform 4.13.42 packages and security update | 2024-05-23T20:46:21+00:00 | 2026-02-03T21:36:36+00:00 |
| rhsa-2024:2874 | Red Hat Security Advisory: OpenShift Container Platform 4.13.42 security and extras update | 2024-05-23T06:22:23+00:00 | 2026-02-03T21:36:36+00:00 |
| rhsa-2024:2869 | Red Hat Security Advisory: OpenShift Container Platform 4.14.26 security update | 2024-05-23T08:24:44+00:00 | 2026-02-03T21:36:35+00:00 |
| rhsa-2024:2784 | Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update | 2024-05-16T18:36:22+00:00 | 2026-02-03T21:36:33+00:00 |
| rhsa-2024:2669 | Red Hat Security Advisory: OpenShift Container Platform 4.15.12 security update | 2024-05-09T14:16:07+00:00 | 2026-02-03T21:36:32+00:00 |
| rhsa-2024:2781 | Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update | 2024-05-16T16:12:11+00:00 | 2026-02-03T21:36:30+00:00 |
| rhsa-2024:2776 | Red Hat Security Advisory: OpenShift Container Platform 4.15.13 packages and security update | 2024-05-15T19:05:25+00:00 | 2026-02-03T21:36:29+00:00 |
| rhsa-2024:2666 | Red Hat Security Advisory: OpenShift Container Platform 4.14.24 security and extras update | 2024-05-09T15:00:25+00:00 | 2026-02-03T21:36:28+00:00 |
| rhsa-2024:2639 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.15 security and bug fix update | 2024-05-01T02:44:36+00:00 | 2026-02-03T21:36:28+00:00 |
| rhsa-2024:2550 | Red Hat Security Advisory: buildah bug fix update | 2024-04-30T13:38:22+00:00 | 2026-02-03T21:36:27+00:00 |
| rhsa-2024:2549 | Red Hat Security Advisory: skopeo security and bug fix update | 2024-04-30T13:36:46+00:00 | 2026-02-03T21:36:26+00:00 |
| rhsa-2024:2548 | Red Hat Security Advisory: podman security and bug fix update | 2024-04-30T13:39:21+00:00 | 2026-02-03T21:36:25+00:00 |
| rhsa-2024:1874 | Red Hat Security Advisory: rhc-worker-script security and enhancement update | 2024-04-18T02:08:28+00:00 | 2026-02-03T21:36:25+00:00 |
| rhsa-2024:2071 | Red Hat Security Advisory: OpenShift Container Platform 4.15.11 packages and security update | 2024-05-02T14:53:59+00:00 | 2026-02-03T21:36:22+00:00 |
| rhsa-2024:2054 | Red Hat Security Advisory: OpenShift Container Platform 4.14.23 security update | 2024-05-02T15:57:53+00:00 | 2026-02-03T21:36:20+00:00 |
| rhsa-2024:1946 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.1 security update | 2024-04-22T12:47:08+00:00 | 2026-02-03T21:36:20+00:00 |
| rhsa-2024:1795 | Red Hat Security Advisory: VolSync 0.9.1 security fixes and enhancements | 2024-04-11T21:29:12+00:00 | 2026-02-03T21:36:18+00:00 |
| rhsa-2024:1665 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.8.6 security and bug fix updates | 2024-04-03T18:43:56+00:00 | 2026-02-03T21:36:16+00:00 |
| rhsa-2024:1508 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T14:39:42+00:00 | 2026-02-03T21:36:13+00:00 |
| rhsa-2024:1559 | Red Hat Security Advisory: OpenShift Container Platform 4.15.6 bug fix and security update | 2024-04-02T19:33:26+00:00 | 2026-02-03T21:36:10+00:00 |
| rhsa-2024:1538 | Red Hat Security Advisory: OpenShift Container Platform 4.12 low-latency extras security update | 2024-03-27T15:07:29+00:00 | 2026-02-03T21:36:09+00:00 |
| rhsa-2024:1537 | Red Hat Security Advisory: OpenShift Container Platform 4.13.38 low-latency extras security update | 2024-03-27T15:03:41+00:00 | 2026-02-03T21:36:09+00:00 |
| rhsa-2024:1507 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T14:21:24+00:00 | 2026-02-03T21:36:08+00:00 |
| rhsa-2024:1362 | Red Hat Security Advisory: OpenShift Container Platform 4.14.17 low-latency extras security update | 2024-03-20T11:40:31+00:00 | 2026-02-03T21:36:07+00:00 |
| rhsa-2024:1474 | Red Hat Security Advisory: logging for Red Hat OpenShift security update | 2024-03-27T15:00:48+00:00 | 2026-02-03T21:36:06+00:00 |
| rhsa-2024:1461 | Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update | 2024-03-27T00:45:48+00:00 | 2026-02-03T21:36:06+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-199-03 | Iagona ScrutisWeb | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-02 | Keysight N6845A Geolocation Server | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-199-01 | Rockwell Automation Kinetix 5700 DC Bus Power Supply | 2023-07-18T06:00:00.000000Z | 2023-07-18T06:00:00.000000Z |
| icsa-23-194-05 | Rockwell Automation PowerMonitor 1000 | 2023-07-13T06:00:00.000000Z | 2023-07-13T06:00:00.000000Z |
| icsa-23-171-01 | Enphase Envoy | 2023-06-20T06:00:00.000000Z | 2023-07-13T06:00:00.000000Z |
| icsa-23-194-06 | Honeywell Experion PKS, LX and PlantCruise | 2023-07-13T00:00:00.000000Z | 2023-07-13T00:00:00.000000Z |
| icsa-23-193-01 | Rockwell Automation Select Communication Modules | 2023-07-12T06:00:00.000000Z | 2023-07-12T06:00:00.000000Z |
| icsa-23-192-03 | Panasonic Control FPWin Pro7 | 2023-07-11T06:00:00.000000Z | 2023-07-11T06:00:00.000000Z |
| icsa-23-180-04 | Mitsubishi Electric MELSEC-F Series | 2023-06-29T06:00:00.000000Z | 2023-07-11T06:00:00.000000Z |
| icsa-23-192-02 | Sensormatic Electronics iSTAR | 2023-07-11T00:00:00.000000Z | 2023-07-11T00:00:00.000000Z |
| icsa-23-192-01 | Rockwell Automation Enhanced HIM | 2023-07-11T00:00:00.000000Z | 2023-07-11T00:00:00.000000Z |
| icsa-23-187-02 | ABUS TVIP | 2023-07-06T06:00:00.000000Z | 2023-07-06T06:00:00.000000Z |
| icsa-23-187-01 | PiiGAB M-Bus | 2023-07-06T06:00:00.000000Z | 2023-07-06T06:00:00.000000Z |
| icsma-23-180-01 | Medtronic Paceart Optima System | 2023-06-29T06:00:00.000000Z | 2023-06-29T06:00:00.000000Z |
| icsa-23-180-03 | Ovarro TBox RTUs | 2023-06-29T06:00:00.000000Z | 2023-06-29T06:00:00.000000Z |
| icsa-23-180-02 | Schneider Electric EcoStruxure Operator Terminal Expert | 2023-06-29T06:00:00.000000Z | 2023-06-29T06:00:00.000000Z |
| icsa-23-180-01 | Delta Electronics InfraSuite Device Master | 2023-06-29T06:00:00.000000Z | 2023-06-29T06:00:00.000000Z |
| icsa-23-178-01 | Hitachi Energy FOXMAN-UN and UNEM Products | 2023-06-27T06:00:00.000000Z | 2023-06-27T06:00:00.000000Z |
| icsa-23-173-03 | SpiderControl SCADAWebServer | 2023-06-23T06:00:00.000000Z | 2023-06-23T06:00:00.000000Z |
| icsa-23-026-02 | Econolite EOS (Update A) | 2023-01-26T07:00:00.000000Z | 2023-06-22T06:00:00.000000Z |
| icsa-23-173-02 | Advantech R-SeeNet | 2023-06-20T06:00:00.000000Z | 2023-06-20T06:00:00.000000Z |
| icsa-23-171-02 | Enphase Installer Toolkit Android App | 2023-06-20T06:00:00.000000Z | 2023-06-20T06:00:00.000000Z |
| icsa-23-061-01 | Mitsubishi Electric MELSEC iQ-F Series | 2023-03-02T07:00:00.000000Z | 2023-06-20T06:00:00.000000Z |
| icsa-23-166-02 | Advantech WebAccess/SCADA | 2023-06-15T06:00:00.000000Z | 2023-06-15T06:00:00.000000Z |
| icsa-23-166-01 | SUBNET PowerSYSTEM Center | 2023-06-15T06:00:00.000000Z | 2023-06-15T06:00:00.000000Z |
| icsa-23-166-12 | Siemens SINAMICS Medium Voltage Products | 2023-06-13T00:00:00.000000Z | 2023-06-14T00:00:00.000000Z |
| icsa-23-164-04 | Rockwell Automation FactoryTalk Transaction Manager | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-03 | Rockwell Automation FactoryTalk Edge Gateway | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-02 | Rockwell Automation FactoryTalk Services Platform | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| icsa-23-164-01 | Datalogics Library Third-Party | 2023-06-13T06:00:00.000000Z | 2023-06-13T06:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-alg-dos-hbBS7SZE | Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-mdns-dos-e6kwyumx | Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-mdns-dos-E6KwYuMx | Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-info-disc-bfwqghj | Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-aironet-info-disc-BfWqghj | Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-SAP-OPLbze68 | Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-OFP-6Nezgn7b | Cisco IOS XE Software Local Privilege Escalation Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-BLKH-Ouvrnf2s | Cisco IOS XE Software Active Debug Code Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-XE-ACE-75K3bRWe | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2021-03-24T16:00:00+00:00 | 2021-03-24T16:00:00+00:00 |
| cisco-sa-rv-132w134w-overflow-pptt4h2p | Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability | 2021-03-17T16:00:00+00:00 | 2021-03-17T16:00:00+00:00 |
| cisco-sa-rv-132w134w-overflow-Pptt4H2p | Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability | 2021-03-17T16:00:00+00:00 | 2021-03-17T16:00:00+00:00 |
| cisco-sa-sudo-privesc-jan2021-qnyqfcm | Sudo Privilege Escalation Vulnerability Affecting Cisco Products: January 2021 | 2021-01-29T21:30:00+00:00 | 2021-03-16T20:43:10+00:00 |
| cisco-sa-sudo-privesc-jan2021-qnYQfcM | Sudo Privilege Escalation Vulnerability Affecting Cisco Products: January 2021 | 2021-01-29T21:30:00+00:00 | 2021-03-16T20:43:10+00:00 |
| cisco-sa-mso-authbyp-bb5gmbqv | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-03-12T16:02:24+00:00 |
| cisco-sa-mso-authbyp-bb5GmBQv | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-03-12T16:02:24+00:00 |
| cisco-sa-3000-9000-fileaction-qtlzdry2 | Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-03-08T20:56:03+00:00 |
| cisco-sa-3000-9000-fileaction-QtLzDRy2 | Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-03-08T20:56:03+00:00 |
| cisco-sa-webex-distupd-n87eb6z3 | Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-webex-distupd-N87eB6Z3 | Cisco Webex Meetings Unauthorized Distribution List Update Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-vman-dir-trav-bpwc5gtm | Cisco SD-WAN vManage Directory Traversal Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-vman-dir-trav-Bpwc5gtm | Cisco SD-WAN vManage Directory Traversal Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-vman-authorization-b-guepslk | Cisco SD-WAN vManage Authorization Bypass Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-vman-authorization-b-GUEpSLK | Cisco SD-WAN vManage Authorization Bypass Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-staros-ipsecmgr-dos-3gkhxwvs | Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-staros-ipsecmgr-dos-3gkHXwvS | Cisco ASR 5000 Series Software (StarOS) ipsecmgr Process Denial of Service Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-snort-ethernet-dos-hgxgjh8n | Multiple Cisco Products Snort Ethernet Frame Decoder Denial of Service Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-snort-ethernet-dos-HGXgJH8n | Multiple Cisco Products Snort Ethernet Frame Decoder Denial of Service Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwanvman-infodis1-yuqschb | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwanvman-infodis1-YuQScHB | Cisco SD-WAN vManage Information Disclosure Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwan-vdaemon-bo-ruzzea2 | Cisco SD-WAN vDaemon Buffer Overflow Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-8869 | Fallback tar extraction in pip doesn't check symbolic links point to extraction directory | 2025-09-02T00:00:00.000Z | 2025-09-27T01:02:56.000Z |
| msrc_cve-2024-57843 | virtio-net: fix overflow inside virtnet_rq_alloc | 2025-01-02T00:00:00.000Z | 2025-09-27T01:02:44.000Z |
| msrc_cve-2024-41030 | ksmbd: discard write access to the directory open | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:35.000Z |
| msrc_cve-2024-41013 | xfs: don't walk off the end of a directory data block | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:30.000Z |
| msrc_cve-2024-40998 | ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() | 2024-07-01T07:00:00.000Z | 2025-09-27T01:02:25.000Z |
| msrc_cve-2024-35995 | ACPI: CPPC: Use access_width over bit_width for system memory accesses | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:20.000Z |
| msrc_cve-2024-35971 | net: ks8851: Handle softirqs at the end of IRQ thread to fix hang | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:14.000Z |
| msrc_cve-2024-35965 | Bluetooth: L2CAP: Fix not validating setsockopt user input | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:09.000Z |
| msrc_cve-2024-35951 | drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() | 2024-05-02T07:00:00.000Z | 2025-09-27T01:02:04.000Z |
| msrc_cve-2024-35939 | dma-direct: Leak pages on dma_set_decrypted() failure | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:58.000Z |
| msrc_cve-2024-35924 | usb: typec: ucsi: Limit read size on v1.2 | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:50.000Z |
| msrc_cve-2024-35875 | x86/coco: Require seeding RNG with RDRAND on CoCo systems | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:44.000Z |
| msrc_cve-2024-35839 | netfilter: bridge: replace physindev with physinif in nf_bridge_info | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:39.000Z |
| msrc_cve-2023-52732 | ceph: blocklist the kclient when receiving corrupted snap trace | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:34.000Z |
| msrc_cve-2023-52676 | bpf: Guard stack limits against 32bit overflow | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:29.000Z |
| msrc_cve-2023-52671 | drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:23.000Z |
| msrc_cve-2023-52660 | media: rkisp1: Fix IRQ handling due to shared interrupts | 2024-05-02T07:00:00.000Z | 2025-09-27T01:01:18.000Z |
| msrc_cve-2025-59251 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 2025-09-09T07:00:00.000Z | 2025-09-25T07:00:00.000Z |
| msrc_cve-2025-55232 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability | 2025-09-09T07:00:00.000Z | 2025-09-25T07:00:00.000Z |
| msrc_cve-2024-56566 | mm/slub: Avoid list corruption when removing a slab from the full list | 2024-12-02T00:00:00.000Z | 2025-09-25T01:02:33.000Z |
| msrc_cve-2024-41935 | f2fs: fix to shrink read extent node in batches | 2025-01-02T00:00:00.000Z | 2025-09-25T01:02:23.000Z |
| msrc_cve-2024-36000 | mm/hugetlb: fix missing hugetlb_lock for resv uncharge | 2024-05-02T07:00:00.000Z | 2025-09-25T01:02:15.000Z |
| msrc_cve-2024-35956 | btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations | 2024-05-02T07:00:00.000Z | 2025-09-25T01:02:09.000Z |
| msrc_cve-2024-35932 | drm/vc4: don't check if plane->state->fb == state->fb | 2024-05-02T07:00:00.000Z | 2025-09-25T01:01:55.000Z |
| msrc_cve-2023-52831 | cpu/hotplug: Don't offline the last non-isolated CPU | 2024-05-02T07:00:00.000Z | 2025-09-25T01:01:50.000Z |
| msrc_cve-2023-52761 | riscv: VMAP_STACK overflow detection thread-safe | 2024-05-02T07:00:00.000Z | 2025-09-25T01:01:45.000Z |
| msrc_cve-2022-49178 | memstick/mspro_block: fix handling of read-only devices | 2025-02-02T00:00:00.000Z | 2025-09-25T01:01:40.000Z |
| msrc_cve-2022-49172 | parisc: Fix non-access data TLB cache flush faults | 2025-02-02T00:00:00.000Z | 2025-09-25T01:01:35.000Z |
| msrc_cve-2022-49161 | ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe | 2025-02-02T00:00:00.000Z | 2025-09-25T01:01:29.000Z |
| msrc_cve-2022-49138 | Bluetooth: hci_event: Ignore multiple conn complete events | 2025-02-02T00:00:00.000Z | 2025-09-25T01:01:24.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14269-1 | bubblewrap-0.10.0-1.1 on GA media | 2024-08-16T00:00:00Z | 2024-08-16T00:00:00Z |
| opensuse-su-2024:0242-1 | Security update for opera | 2024-08-15T15:07:36Z | 2024-08-15T15:07:36Z |
| opensuse-su-2024:14268-1 | ucode-intel-20240813-1.1 on GA media | 2024-08-15T00:00:00Z | 2024-08-15T00:00:00Z |
| opensuse-su-2024:14267-1 | klp-build-0~20240812.ad9f0e0-1.1 on GA media | 2024-08-14T00:00:00Z | 2024-08-14T00:00:00Z |
| opensuse-su-2024:14266-1 | kernel-firmware-all-20240809-1.1 on GA media | 2024-08-14T00:00:00Z | 2024-08-14T00:00:00Z |
| opensuse-su-2024:14265-1 | java-21-openj9-21.0.4.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14264-1 | java-1_8_0-openj9-1.8.0.422-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14263-1 | java-17-openj9-17.0.12.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14262-1 | java-11-openj9-11.0.24.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14261-1 | curl-8.9.1-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14260-1 | MozillaFirefox-129.0-1.1 on GA media | 2024-08-13T00:00:00Z | 2024-08-13T00:00:00Z |
| opensuse-su-2024:14259-1 | libzzip-0-13-0.13.78-1.1 on GA media | 2024-08-11T00:00:00Z | 2024-08-11T00:00:00Z |
| opensuse-su-2024:14258-1 | traefik2-2.11.8-1.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14257-1 | traefik-3.1.2-1.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14256-1 | python38-3.8.19-7.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14255-1 | python311-3.11.9-6.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14254-1 | python310-3.10.14-6.1 on GA media | 2024-08-10T00:00:00Z | 2024-08-10T00:00:00Z |
| opensuse-su-2024:14253-1 | python39-3.9.19-6.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14252-1 | ksh-93vu-10.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14251-1 | ansible-core-2.16-2.16.9-1.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14250-1 | MozillaThunderbird-115.14.0-1.1 on GA media | 2024-08-09T00:00:00Z | 2024-08-09T00:00:00Z |
| opensuse-su-2024:14249-1 | python313-3.13.0~rc1-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14248-1 | python310-Django4-4.2.15-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14247-1 | python310-Django-5.0.8-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14246-1 | db48-doc-4.8.30-45.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14245-1 | apache2-2.4.62-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14244-1 | ansible-9-9.8.0-1.1 on GA media | 2024-08-08T00:00:00Z | 2024-08-08T00:00:00Z |
| opensuse-su-2024:14243-1 | roundcubemail-1.6.8-1.1 on GA media | 2024-08-07T00:00:00Z | 2024-08-07T00:00:00Z |
| opensuse-su-2024:14242-1 | element-web-1.11.73-1.1 on GA media | 2024-08-07T00:00:00Z | 2024-08-07T00:00:00Z |
| opensuse-su-2024:14241-1 | libxml2-2-2.12.9-1.1 on GA media | 2024-08-06T00:00:00Z | 2024-08-06T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-modsecurity-2024-1019 | WAF bypass of the ModSecurity v3 release line | 2024-03-06T10:56:13.572Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2025-1474 | Weak Password Requirements in mlflow/mlflow | 2025-03-28T07:22:47.450Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2025-0453 | Denial of Service through Batched Queries in GraphQL in mlflow/mlflow | 2025-04-03T09:02:58.147Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-6838 | Uncontrolled Resource Consumption in mlflow/mlflow | 2025-04-02T07:17:05.688Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-4263 | Improper Access Control in mlflow/mlflow | 2025-02-04T07:17:58.524Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-3848 | Path Traversal Bypass in mlflow/mlflow | 2025-01-27T07:13:35.132Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-3573 | Local File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow | 2025-02-04T07:20:26.331Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-2928 | Local File Inclusion (LFI) via URI Fragment Parsing in mlflow/mlflow | 2024-10-13T19:12:13.705Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-27134 | Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf | 2024-11-27T19:16:49.374Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-27133 | Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. | 2024-03-31T18:21:40.530Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-27132 | Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. | 2024-03-31T18:21:50.638Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-1594 | Local File Read via Path Traversal in mlflow/mlflow | 2025-02-04T07:21:32.028Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-1593 | Path Traversal via Parameter Smuggling in mlflow/mlflow | 2025-02-04T07:21:44.709Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-1558 | Path Traversal Vulnerability in mlflow/mlflow | 2025-02-04T07:22:09.430Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-1483 | Path Traversal Vulnerability in mlflow/mlflow | 2025-02-04T07:22:21.033Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2024-0520 | Remote Code Execution due to Full Controlled File Write in mlflow/mlflow | 2024-10-13T19:12:37.607Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6977 | Path Traversal: '\..\filename' | 2024-03-06T10:56:07.461Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6976 | Unrestricted Upload of File with Dangerous Type | 2024-03-06T10:56:16.395Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6975 | Path Traversal: '\..\filename' | 2024-03-06T10:56:26.983Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6974 | Server-Side Request Forgery (SSRF) | 2024-03-06T10:56:37.402Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6940 | Command Injection | 2024-03-06T10:56:48.513Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6909 | Path Traversal: '\..\filename' in mlflow/mlflow | 2024-03-06T10:56:59.590Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6831 | Path Traversal: '\..\filename' in mlflow/mlflow | 2024-03-06T10:57:09.481Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6753 | Path Traversal in mlflow/mlflow | 2024-03-06T10:57:17.802Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6709 | Improper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow | 2024-03-06T10:57:27.805Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6568 | Reflected XSS via Content-Type Header in mlflow/mlflow | 2024-03-06T10:57:37.872Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-6015 | MLflow Arbitrary File Upload | 2024-03-06T10:57:56.782Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-4033 | OS Command Injection in mlflow/mlflow | 2024-03-06T10:58:27.677Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-3765 | Absolute Path Traversal in mlflow/mlflow | 2024-03-06T10:58:35.367Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-2780 | Path Traversal: '\..\filename' in mlflow/mlflow | 2024-03-06T10:58:54.968Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202403-0820 | A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. Thi… | 2024-05-17T23:09:15.133000Z |
| var-202405-0120 | A vulnerability was found in Tenda i21 1.0.0.14(4656) and classified as critical. Affecte… | 2024-05-17T23:09:14.510000Z |
| var-202405-1505 | EG2000UE is a gateway product. Beijing Xingwang Ruijie Network Technology Co., Ltd. EG20… | 2024-05-17T23:09:13.484000Z |
| var-202405-1356 | EG3210 is a new generation of multi-service security gateway in the RG-EG3200 series. It … | 2024-05-17T23:09:13.566000Z |
| var-201808-0217 | Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networ… | 2024-05-17T23:07:58.902000Z |
| var-202004-0227 | An issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may b… | 2024-05-17T23:07:57.256000Z |
| var-202210-2140 | Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_sco… | 2024-05-17T23:07:54.267000Z |
| var-202304-2287 | A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problem… | 2024-05-17T23:07:52.587000Z |
| var-202304-2224 | A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3… | 2024-05-17T23:07:52.628000Z |
| var-202401-1079 | A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical.… | 2024-05-17T23:07:50.411000Z |
| var-202401-0073 | A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.… | 2024-05-17T23:07:50.634000Z |
| var-202403-0937 | A vulnerability was found in Tenda F1203 2.0.1.6. It has been rated as critical. Affected… | 2024-05-17T23:07:49.872000Z |
| var-202403-0832 | A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15… | 2024-05-17T23:07:49.929000Z |
| var-201204-0203 | McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the… | 2024-05-17T23:07:37.630000Z |
| var-201710-0718 | The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka… | 2024-05-17T23:07:05.007000Z |
| var-201708-1531 | An issue was discovered in SMA Solar Technology products. The inverters make use of a wea… | 2024-05-17T23:07:05.143000Z |
| var-201910-0889 | The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies… | 2024-05-17T23:07:02.891000Z |
| var-202108-1369 | D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded creden… | 2024-05-17T23:06:57.478000Z |
| var-202304-2226 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as probl… | 2024-05-17T23:06:54.314000Z |
| var-202401-1183 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classifie… | 2024-05-17T23:06:52.017000Z |
| var-202403-1087 | A vulnerability has been found in Tenda FH1205 2.0.0.7(775) and classified as critical. A… | 2024-05-17T23:06:51.425000Z |
| var-202403-0814 | A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected b… | 2024-05-17T23:06:51.537000Z |
| var-202403-0709 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by t… | 2024-05-17T23:06:51.588000Z |
| var-202108-0228 | A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attacker… | 2024-05-17T23:05:01.093000Z |
| var-202206-0974 | Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected c… | 2024-05-17T23:04:59.898000Z |
| var-202312-0729 | A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4… | 2024-05-17T23:04:52.233000Z |
| var-202401-0755 | A vulnerability, which was classified as critical, was found in Totolink N350RT 9.3.5u.61… | 2024-05-17T23:04:51.913000Z |
| var-202401-0377 | A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. T… | 2024-05-17T23:04:51.990000Z |
| var-200708-0147 | PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remo… | 2024-05-17T23:04:47.149000Z |
| var-200707-0278 | Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device bef… | 2024-05-17T23:04:47.224000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2015-000013 | shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting | 2015-02-13T13:58+09:00 | 2015-02-13T13:58+09:00 |
| jvndb-2015-000008 | shiromuku(bu2)BBS vulnerable to arbitrary file creation | 2015-01-23T14:22+09:00 | 2015-02-13T09:51+09:00 |
| jvndb-2015-000001 | Cybozu Remote Service Manager vulnerable to denial-of-service (DoS) | 2015-01-30T14:19+09:00 | 2015-01-30T14:19+09:00 |
| jvndb-2014-000132 | Multiple Allied Telesis products vulnerable to buffer overflow | 2014-12-18T14:47+09:00 | 2015-01-28T17:38+09:00 |
| jvndb-2014-000056 | TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation | 2014-06-17T15:01+09:00 | 2015-01-22T15:50+09:00 |
| jvndb-2014-000095 | Shutter vulnerable to SQL injection | 2014-08-15T13:24+09:00 | 2015-01-15T17:47+09:00 |
| jvndb-2014-000124 | TSUTAYA App for Android vulnerable to arbitrary Java method execution | 2014-12-18T13:41+09:00 | 2014-12-22T17:52+09:00 |
| jvndb-2014-000152 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:49+09:00 | 2014-12-22T17:33+09:00 |
| jvndb-2014-000151 | WBS Gantt-Chart for JIRA vulnerable to cross-site scripting | 2014-12-18T14:48+09:00 | 2014-12-22T17:30+09:00 |
| jvndb-2014-000143 | "File Upload BBS" of i-HTTPD vulnerable to remote command execution | 2014-12-09T14:40+09:00 | 2014-12-16T17:10+09:00 |
| jvndb-2014-000144 | i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:41+09:00 | 2014-12-16T17:09+09:00 |
| jvndb-2014-000134 | BSD Operating Systems vulnerable to denial-of-service (DoS) | 2014-11-21T14:10+09:00 | 2014-12-16T17:08+09:00 |
| jvndb-2014-000150 | LinPHA vulnerable to cross-site scripting | 2014-12-12T13:48+09:00 | 2014-12-16T17:07+09:00 |
| jvndb-2014-000145 | "Omake BBS" of i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:44+09:00 | 2014-12-15T19:16+09:00 |
| jvndb-2014-000149 | Chyrp vulnerable to cross-site scripting | 2014-12-10T14:18+09:00 | 2014-12-15T18:06+09:00 |
| jvndb-2014-000141 | FAST/TOOLS vulnerable to improper restriction of XML external entity references | 2014-11-28T14:54+09:00 | 2014-12-10T10:16+09:00 |
| jvndb-2014-000137 | Multiple improper data validation vulnerabilities in Syslink driver for Texas Instruments OMAP mobile processors | 2014-12-02T13:56+09:00 | 2014-12-09T15:34+09:00 |
| jvndb-2014-000138 | OS command injection vulnerability in multiple FUJITSU Android devices | 2014-12-02T14:21+09:00 | 2014-12-09T15:33+09:00 |
| jvndb-2014-000135 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:18+09:00 | 2014-12-09T15:32+09:00 |
| jvndb-2014-000136 | SEIL Series routers vulnerable to denial-of-service (DoS) | 2014-12-01T15:24+09:00 | 2014-12-09T15:31+09:00 |
| jvndb-2014-000146 | i-HTTPD vulnerable to cross-site scripting | 2014-12-09T14:45+09:00 | 2014-12-09T14:45+09:00 |
| jvndb-2014-000140 | LG Electronics mobile access routers lack access restrictions | 2014-12-02T14:27+09:00 | 2014-12-08T16:07+09:00 |
| jvndb-2014-000139 | ARROWS Me F-11D vulnerability where arbitrary areas may be accessed | 2014-12-02T14:26+09:00 | 2014-12-08T16:06+09:00 |
| jvndb-2014-000148 | Kaku-San-Sei Million Arthur for Android information management vulnerability | 2014-12-04T12:28+09:00 | 2014-12-08T16:05+09:00 |
| jvndb-2014-000147 | KENT-WEB Clip Board vulnerable to cross-site scripting | 2014-12-04T12:22+09:00 | 2014-12-08T16:03+09:00 |
| jvndb-2014-000142 | DBD::PgPP vulnerable to SQL injection | 2014-12-03T15:09+09:00 | 2014-12-03T15:09+09:00 |
| jvndb-2014-000131 | Ichitaro series vulnerable to arbitrary code execution | 2014-11-13T16:52+09:00 | 2014-11-27T17:58+09:00 |
| jvndb-2014-000130 | Multiple Cybozu products vulnerable to buffer overflow | 2014-11-11T13:36+09:00 | 2014-11-25T17:52+09:00 |
| jvndb-2014-000118 | Direct Web Remoting (DWR) vulnerable to cross-site scripting | 2014-11-14T14:37+09:00 | 2014-11-25T17:51+09:00 |
| jvndb-2014-000117 | Direct Web Remoting (DWR) vulnerable to XML external entity injection | 2014-11-14T14:33+09:00 | 2014-11-25T17:50+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02454-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-07-21T19:03:58Z | 2025-07-21T19:03:58Z |
| suse-su-2025:02451-1 | Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4) | 2025-07-21T17:33:48Z | 2025-07-21T17:33:48Z |
| suse-su-2025:02449-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-07-21T15:33:47Z | 2025-07-21T15:33:47Z |
| suse-su-2025:02448-1 | Security update for python-oslo.utils | 2025-07-21T14:46:13Z | 2025-07-21T14:46:13Z |
| suse-su-2025:02447-1 | Security update for libgcrypt | 2025-07-21T14:45:26Z | 2025-07-21T14:45:26Z |
| suse-su-2025:02446-1 | Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3) | 2025-07-21T14:33:46Z | 2025-07-21T14:33:46Z |
| suse-su-2025:02445-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-07-21T14:04:05Z | 2025-07-21T14:04:05Z |
| suse-su-2025:02444-1 | Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) | 2025-07-21T13:04:21Z | 2025-07-21T13:04:21Z |
| suse-su-2025:02442-1 | Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6) | 2025-07-21T12:34:23Z | 2025-07-21T12:34:23Z |
| suse-su-2025:02439-1 | Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6) | 2025-07-21T12:34:00Z | 2025-07-21T12:34:00Z |
| suse-su-2025:02438-1 | Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5) | 2025-07-21T12:33:57Z | 2025-07-21T12:33:57Z |
| suse-su-2025:02437-1 | Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5) | 2025-07-21T12:33:50Z | 2025-07-21T12:33:50Z |
| suse-su-2025:02436-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) | 2025-07-21T12:33:43Z | 2025-07-21T12:33:43Z |
| suse-su-2025:02440-1 | Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6) | 2025-07-21T12:04:43Z | 2025-07-21T12:04:43Z |
| suse-su-2025:02434-1 | Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4) | 2025-07-21T12:04:26Z | 2025-07-21T12:04:26Z |
| suse-su-2025:02433-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-07-21T11:33:36Z | 2025-07-21T11:33:36Z |
| suse-su-2025:02432-1 | Security update for iputils | 2025-07-21T11:23:54Z | 2025-07-21T11:23:54Z |
| suse-su-2025:02431-1 | Security update for iputils | 2025-07-21T11:23:49Z | 2025-07-21T11:23:49Z |
| suse-su-2025:02430-1 | Security update for iputils | 2025-07-21T11:23:21Z | 2025-07-21T11:23:21Z |
| suse-su-2025:02429-1 | Security update for rmt-server | 2025-07-21T11:04:10Z | 2025-07-21T11:04:10Z |
| suse-su-2025:20502-1 | Security update for iputils | 2025-07-21T10:04:01Z | 2025-07-21T10:04:01Z |
| suse-su-2025:02428-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-07-21T09:04:15Z | 2025-07-21T09:04:15Z |
| suse-su-2025:02427-1 | Security update for python3 | 2025-07-21T08:54:02Z | 2025-07-21T08:54:02Z |
| suse-su-2025:02422-1 | Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5) | 2025-07-21T08:33:35Z | 2025-07-21T08:33:35Z |
| suse-su-2025:02421-1 | Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6) | 2025-07-21T08:05:09Z | 2025-07-21T08:05:09Z |
| suse-su-2025:02420-1 | Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6) | 2025-07-21T08:04:57Z | 2025-07-21T08:04:57Z |
| suse-su-2025:02419-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4) | 2025-07-21T08:04:52Z | 2025-07-21T08:04:52Z |
| suse-su-2025:02418-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3) | 2025-07-21T08:04:41Z | 2025-07-21T08:04:41Z |
| suse-su-2025:02416-1 | Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3) | 2025-07-21T08:04:24Z | 2025-07-21T08:04:24Z |
| suse-su-2025:02415-1 | Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5) | 2025-07-21T08:04:13Z | 2025-07-21T08:04:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-28711 | WordPress Easy Email Subscription plugin跨站请求伪造漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28710 | WordPress Easy Email Subscription plugin SQL注入漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28709 | WordPress Easy Digital Downloads plugin订单操作漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28708 | WordPress Easy Appointments plugin跨站脚本漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28707 | WordPress Doliconnect plugin跨站脚本漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28706 | WordPress Dessau plugin文件包含漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28705 | WordPress Cost Calculator Builder plugin缺少授权漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28704 | WordPress Contest Gallery plugin跨站请求伪造漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28703 | WordPress Case Addons plugin文件上传漏洞 | 2025-11-11 | 2025-11-17 |
| cnvd-2025-28702 | WordPress age-restriction plugin缺少授权漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28701 | Tenda AC10U form_fast_setting_wifi_set函数栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28700 | Tenda AC10U formSetClientState函数栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28699 | Tenda AC10U formWifiBasicSet函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28698 | Tenda AC10U add_white_node函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28697 | Tenda AC10U GetParentControlInfo函数栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28696 | Tenda AC10U addWifiMacFilter函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28695 | Tenda AC10U setSchedWifi函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28694 | Tenda AC10U fromSetIpMacBind函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28693 | Tenda AC10U formSetMacFilterCfg函数堆栈缓冲区溢出漏洞 | 2023-09-28 | 2025-11-17 |
| cnvd-2025-28691 | Tenda AC10U fromWizardHandle方法堆栈缓冲区溢出漏洞 | 2024-04-22 | 2025-11-17 |
| cnvd-2025-28690 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-28690） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28689 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-28689） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28688 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-28688） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28687 | Ivanti Endpoint Manager路径遍历漏洞（CNVD-2025-28687） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28686 | Ivanti Endpoint Manager路径遍历漏洞（CNVD-2025-28686） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28685 | Ivanti Endpoint Manager SQL注入漏洞（CNVD-2025-28685） | 2024-11-15 | 2025-11-17 |
| cnvd-2025-28684 | Ivanti Endpoint Manager路径遍历漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-28683 | Ivanti Endpoint Manager反序列化漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-28682 | Ivanti Endpoint Manager SQL注入漏洞 | 2025-10-17 | 2025-11-17 |
| cnvd-2025-28680 | Ivanti Endpoint Manager权限问题漏洞 | 2025-11-14 | 2025-11-17 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0203 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-13T00:00:00.000000 | 2025-03-13T00:00:00.000000 |
| certfr-2025-avi-0202 | Vulnérabilité dans Joomla! | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0201 | Multiples vulnérabilités dans les produits Adobe | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0200 | Vulnérabilité dans Apache Tomcat | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0199 | Vulnérabilité dans les produits Apple | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0198 | Multiples vulnérabilités dans les produits Ivanti | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0197 | Multiples vulnérabilités dans les produits Fortinet | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0196 | Multiples vulnérabilités dans les produits Microsoft | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0195 | Multiples vulnérabilités dans Microsoft Azure | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0194 | Vulnérabilité dans Microsoft .Net | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0193 | Multiples vulnérabilités dans Microsoft Windows | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0192 | Multiples vulnérabilités dans Microsoft Office | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0202 | Vulnérabilité dans Joomla! | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0201 | Multiples vulnérabilités dans les produits Adobe | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0200 | Vulnérabilité dans Apache Tomcat | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0199 | Vulnérabilité dans les produits Apple | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0198 | Multiples vulnérabilités dans les produits Ivanti | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0197 | Multiples vulnérabilités dans les produits Fortinet | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0196 | Multiples vulnérabilités dans les produits Microsoft | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0195 | Multiples vulnérabilités dans Microsoft Azure | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0194 | Vulnérabilité dans Microsoft .Net | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0193 | Multiples vulnérabilités dans Microsoft Windows | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| CERTFR-2025-AVI-0192 | Multiples vulnérabilités dans Microsoft Office | 2025-03-12T00:00:00.000000 | 2025-03-12T00:00:00.000000 |
| certfr-2025-avi-0191 | Multiples vulnérabilités dans les produits Siemens | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0190 | Multiples vulnérabilités dans les produits SAP | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0189 | Multiples vulnérabilités dans Google Chrome | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| CERTFR-2025-AVI-0191 | Multiples vulnérabilités dans les produits Siemens | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| CERTFR-2025-AVI-0190 | Multiples vulnérabilités dans les produits SAP | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| CERTFR-2025-AVI-0189 | Multiples vulnérabilités dans Google Chrome | 2025-03-11T00:00:00.000000 | 2025-03-11T00:00:00.000000 |
| certfr-2025-avi-0188 | Multiples vulnérabilités dans les produits Qnap | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |