Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-69047 |
8.1 (3.1)
|
WordPress MaxShop theme <= 3.6.20 - Local File Inclusi… |
magentech |
MaxShop |
2026-01-22T16:52:19.420Z | 2026-01-29T00:55:33.373Z |
| CVE-2025-69049 |
8.1 (3.1)
|
WordPress Töbel theme <= 1.6 - Local File Inclusion vu… |
Elated-Themes |
Töbel |
2026-01-22T16:52:19.830Z | 2026-01-29T00:54:35.135Z |
| CVE-2025-69062 |
8.1 (3.1)
|
WordPress Weedles theme <= 1.1.12 - Local File Inclusi… |
AncoraThemes |
Weedles |
2026-01-22T16:52:22.689Z | 2026-01-29T00:53:35.524Z |
| CVE-2025-69061 |
8.1 (3.1)
|
WordPress MoveMe theme <= 1.2.15 - Local File Inclusio… |
AncoraThemes |
MoveMe |
2026-01-22T16:52:22.452Z | 2026-01-29T00:52:48.327Z |
| CVE-2025-69050 |
8.1 (3.1)
|
WordPress Overworld theme <= 1.3 - Local File Inclusio… |
Edge-Themes |
Overworld |
2026-01-22T16:52:20.020Z | 2026-01-29T00:52:24.706Z |
| CVE-2025-69045 |
8.5 (3.1)
|
WordPress FooEvents for WooCommerce plugin <= 1.20.4 -… |
FooEvents |
FooEvents for WooCommerce |
2026-01-22T16:52:19.002Z | 2026-01-29T00:51:03.689Z |
| CVE-2025-69064 |
8.1 (3.1)
|
WordPress Pets Land theme <= 1.2.8 - Local File Inclus… |
AncoraThemes |
Pets Land |
2026-01-22T16:52:22.874Z | 2026-01-29T00:49:13.480Z |
| CVE-2025-69065 |
8.1 (3.1)
|
WordPress Snow Mountain theme <= 1.4.3 - Local File In… |
AncoraThemes |
Snow Mountain |
2026-01-22T16:52:23.109Z | 2026-01-29T00:48:36.993Z |
| CVE-2025-69077 |
8.1 (3.1)
|
WordPress Hobo theme <= 1.0.10 - Local File Inclusion … |
AncoraThemes |
Hobo |
2026-01-22T16:52:25.403Z | 2026-01-29T00:47:47.339Z |
| CVE-2025-67961 |
6.4 (3.1)
|
WordPress WPO365 plugin <= 40.0 - Server Side Request … |
Marco van Wieren |
WPO365 |
2026-01-22T16:51:57.784Z | 2026-01-29T00:11:24.069Z |
| CVE-2025-69078 |
8.1 (3.1)
|
WordPress Malta theme <= 1.3.3 - Local File Inclusion … |
AncoraThemes |
Malta |
2026-01-22T16:52:25.630Z | 2026-01-29T00:10:40.791Z |
| CVE-2025-68871 |
7.1 (3.1)
|
WordPress Dooodl plugin <= 2.3.0 - Reflected Cross Sit… |
noCreativity |
Dooodl |
2026-01-22T16:52:10.736Z | 2026-01-29T00:07:41.413Z |
| CVE-2025-68538 |
7.1 (3.1)
|
WordPress Craft | Coffee Shop Cafe Restaurant WordPres… |
ThemeGoods |
Craft |
2026-01-22T16:52:08.348Z | 2026-01-29T00:06:54.994Z |
| CVE-2025-68520 |
7.1 (3.1)
|
WordPress DotLife theme < 4.9.5 - Reflected Cross Site… |
ThemeGoods |
DotLife |
2026-01-22T16:52:08.148Z | 2026-01-29T00:06:15.051Z |
| CVE-2025-68518 |
7.1 (3.1)
|
WordPress Hoteller theme < 6.8.9 - Reflected Cross Sit… |
ThemeGoods |
Hoteller |
2026-01-22T16:52:07.893Z | 2026-01-29T00:05:32.936Z |
| CVE-2025-68838 |
7.1 (3.1)
|
WordPress MemberPress Discord Addon plugin <= 1.1.4 - … |
expresstechsoftware |
MemberPress Discord Addon |
2026-01-22T16:52:08.981Z | 2026-01-29T00:04:13.149Z |
| CVE-2025-67963 |
8.6 (3.1)
|
WordPress Movie Booking plugin <= 1.1.5 - Arbitrary Fi… |
ovatheme |
Movie Booking |
2026-01-22T16:51:58.001Z | 2026-01-29T00:03:16.490Z |
| CVE-2025-68864 |
7.1 (3.1)
|
WordPress Infility Global plugin <= 2.14.50 - Cross Si… |
Infility |
Infility Global |
2026-01-22T16:52:10.147Z | 2026-01-29T00:02:42.281Z |
| CVE-2025-68866 |
7.1 (3.1)
|
WordPress Dinatur plugin <= 1.18 - Cross Site Scriptin… |
woofer696 |
Dinatur |
2026-01-22T16:52:10.347Z | 2026-01-29T00:01:53.421Z |
| CVE-2025-69097 |
8.1 (3.1)
|
WordPress WPLMS plugin <= 1.9.9.5.4 - Arbitrary File D… |
VibeThemes |
WPLMS |
2026-01-22T16:52:26.228Z | 2026-01-29T00:00:29.444Z |
| CVE-2025-67964 |
7.1 (3.1)
|
WordPress Homey Core plugin <= 2.4.3 - Cross Site Scri… |
favethemes |
Homey Core |
2026-01-22T16:51:58.200Z | 2026-01-28T23:58:42.879Z |
| CVE-2025-67966 |
8.8 (3.1)
|
WordPress Lawyer Directory plugin <= 1.3.3 - Privilege… |
e-plugins |
Lawyer Directory |
2026-01-22T16:51:58.463Z | 2026-01-28T23:57:40.216Z |
| CVE-2025-69100 |
8.1 (3.1)
|
WordPress North theme <= 5.7.5 - Local File Inclusion … |
fuelthemes |
North |
2026-01-22T16:52:27.045Z | 2026-01-28T23:56:13.581Z |
| CVE-2025-67967 |
7.6 (3.1)
|
WordPress Lawyer Directory plugin <= 1.3.3 - Broken Ac… |
e-plugins |
Lawyer Directory |
2026-01-22T16:51:58.716Z | 2026-01-28T23:55:02.454Z |
| CVE-2025-69102 |
7.1 (3.1)
|
WordPress WP Test Email plugin <= 1.1.7 - Reflected Cr… |
Boopathi Rajan |
WP Test Email |
2026-01-22T16:52:27.736Z | 2026-01-28T23:53:20.952Z |
| CVE-2025-68019 |
6.5 (3.1)
|
WordPress SEO Booster plugin <= 6.1.8 - Broken Access … |
cleverplugins |
SEO Booster |
2026-01-22T16:52:04.172Z | 2026-01-28T23:51:35.017Z |
| CVE-2024-52807 |
8.6 (3.1)
|
XXE vulnerability in XSLT parsing in `org.hl7.fhir.pub… |
HL7 |
fhir-ig-publisher |
2025-01-24T18:34:23.255Z | 2026-01-28T23:21:13.318Z |
| CVE-2025-59843 |
6.9 (4.0)
|
FlagForgeCTF Exposes User Emails via Public /api/user/… |
FlagForgeCTF |
flagForge |
2025-09-26T16:03:34.038Z | 2026-01-28T23:11:20.765Z |
| CVE-2025-61777 |
9.4 (3.1)
|
FlagForge Allows Unauthenticated Badge Template API Access |
FlagForgeCTF |
flagForge |
2025-10-06T16:44:27.713Z | 2026-01-28T23:09:53.135Z |
| CVE-2025-14625 |
5.4 (4.0)
6.7 (3.1)
|
Quartus® Prime Standard and Quartus® Prime Lite Securi… |
Altera |
Quartus Prime Standard |
2026-01-06T21:42:28.480Z | 2026-01-28T22:28:10.748Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1521 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s5c-handler.c denial of service |
n/a |
Open5GS |
2026-01-28T14:32:10.348Z | 2026-01-28T16:12:00.256Z |
| CVE-2026-1545 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-28T21:32:12.268Z | 2026-01-29T18:00:59.239Z |
| CVE-2025-12776 |
1.8 (4.0)
|
Stored Cross-Site Scripting |
Commvault |
WebConsole |
2026-01-07T22:03:05.033Z | 2026-01-08T18:17:45.215Z |
| CVE-2025-13151 |
7.5 (3.1)
|
CVE-2025-13151 |
GnuTLS |
libtasn1 |
2026-01-07T21:14:05.223Z | 2026-01-20T17:08:41.712Z |
| CVE-2026-1551 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
itsourcecode School Management System controller.php s… |
itsourcecode |
School Management System |
2026-01-28T23:32:15.865Z | 2026-01-29T16:53:34.111Z |
| CVE-2026-1589 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-29T14:02:07.250Z | 2026-01-29T16:43:37.512Z |
| CVE-2026-1590 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
itsourcecode School Management System index.php sql in… |
itsourcecode |
School Management System |
2026-01-29T14:02:09.246Z | 2026-01-29T16:43:25.868Z |
| CVE-2026-1522 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s5c-handler.c sgwc_s5c_handle_modify_bear… |
n/a |
Open5GS |
2026-01-28T16:32:07.267Z | 2026-01-28T16:42:10.044Z |
| CVE-2025-62224 |
5.5 (3.1)
|
Microsoft Edge (Chromium-based) for Android Spoofing V… |
Microsoft |
Microsoft Edge for Android |
2026-01-07T22:54:54.800Z | 2026-01-08T18:17:31.322Z |
| CVE-2026-21859 |
5.8 (3.1)
|
Mailpit Proxy Endpoint is Vulnerable to Server-Side Re… |
axllent |
mailpit |
2026-01-07T23:24:07.869Z | 2026-01-08T19:23:22.033Z |
| CVE-2020-36962 |
5.3 (4.0)
9.8 (3.1)
|
Tendenci 12.3.1 - CSV/ Formula Injection |
Tendenci |
Tendenci |
2026-01-28T17:35:08.249Z | 2026-01-29T18:12:58.454Z |
| CVE-2026-21869 |
8.8 (3.1)
|
llama.cpp has Out-of-bounds Write in llama-server |
ggml-org |
llama.cpp |
2026-01-07T23:37:59.886Z | 2026-01-08T19:15:28.709Z |
| CVE-2026-21896 |
5.8 (4.0)
|
Kirby is missing permission checks in the content chan… |
getkirby |
kirby |
2026-01-08T18:09:10.362Z | 2026-01-08T18:20:29.904Z |
| CVE-2026-0858 |
6.1 (3.1)
|
Versions of the package net.sourceforge.plantuml:… |
n/a |
net.sourceforge.plantuml:plantuml |
2026-01-16T05:00:06.808Z | 2026-01-16T14:10:00.485Z |
| CVE-2026-1586 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denia… |
n/a |
Open5GS |
2026-01-29T12:32:06.331Z | 2026-01-29T15:11:30.103Z |
| CVE-2026-22795 |
N/A
|
Missing ASN1_TYPE validation in PKCS#12 parsing |
OpenSSL |
OpenSSL |
2026-01-27T16:01:27.320Z | 2026-01-29T18:13:37.371Z |
| CVE-2026-22796 |
N/A
|
ASN1_TYPE Type Confusion in the PKCS7_digest_from_attr… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:28.150Z | 2026-01-27T16:28:52.046Z |
| CVE-2026-1587 |
6.9 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open5GS SGWC s11-handler.c sgwc_s11_handle_modify_bear… |
n/a |
Open5GS |
2026-01-29T12:32:08.109Z | 2026-01-29T14:46:26.399Z |
| CVE-2025-11187 |
N/A
|
Improper validation of PBMAC1 parameters in PKCS#12 MA… |
OpenSSL |
OpenSSL |
2026-01-27T15:59:41.681Z | 2026-01-29T14:48:29.161Z |
| CVE-2025-15467 |
N/A
|
Stack buffer overflow in CMS AuthEnvelopedData parsing |
OpenSSL |
OpenSSL |
2026-01-27T16:01:19.922Z | 2026-01-29T14:50:58.363Z |
| CVE-2026-21973 |
8.1 (3.1)
|
Vulnerability in the Oracle FLEXCUBE Investor Ser… |
Oracle Corporation |
Oracle FLEXCUBE Investor Servicing |
2026-01-20T21:56:36.283Z | 2026-01-21T17:22:59.687Z |
| CVE-2025-15468 |
N/A
|
NULL dereference in SSL_CIPHER_find() function on unkn… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:20.824Z | 2026-01-29T14:53:03.572Z |
| CVE-2025-57681 |
5.4 (3.1)
|
The WorklogPRO - Timesheets for Jira plugin in Ji… |
n/a |
n/a |
2026-01-21T00:00:00.000Z | 2026-01-21T16:26:13.307Z |
| CVE-2025-15469 |
N/A
|
'openssl dgst' one-shot codepath silently truncates in… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:21.597Z | 2026-01-29T14:54:35.153Z |
| CVE-2025-66199 |
N/A
|
TLS 1.3 CompressedCertificate excessive memory allocation |
OpenSSL |
OpenSSL |
2026-01-27T16:01:22.399Z | 2026-01-29T15:03:51.754Z |
| CVE-2025-68160 |
N/A
|
Heap out-of-bounds write in BIO_f_linebuffer on short writes |
OpenSSL |
OpenSSL |
2026-01-27T16:01:23.181Z | 2026-01-29T15:06:04.443Z |
| CVE-2025-34467 |
5.3 (4.0)
|
ZwiiCMS < 13.7.00 Lock Persistence Authenticated DoS A… |
fredtempez |
ZwiiCMS |
2025-12-31T18:39:35.214Z | 2026-01-05T14:23:51.016Z |
| CVE-2025-69418 |
N/A
|
Unauthenticated/unencrypted trailing bytes with low-le… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:23.986Z | 2026-01-29T15:07:14.052Z |
| CVE-2025-69419 |
N/A
|
Out of bounds write in PKCS12_get_friendlyname() UTF-8… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:24.822Z | 2026-01-29T15:09:39.154Z |
| CVE-2025-69420 |
N/A
|
Missing ASN1_TYPE validation in TS_RESP_verify_respons… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:25.643Z | 2026-01-28T19:33:41.253Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-12776 | The Report Builder component of the application stores user input directly in a web page and displa… | 2026-01-07T22:15:43.030 | 2026-02-02T19:32:01.800 |
| fkie_cve-2025-13151 | Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size o… | 2026-01-07T22:15:43.200 | 2026-02-02T19:27:23.070 |
| fkie_cve-2026-1551 | A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknow… | 2026-01-29T00:16:08.450 | 2026-02-02T19:26:59.780 |
| fkie_cve-2026-1589 | A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknow… | 2026-01-29T15:16:13.050 | 2026-02-02T19:25:56.550 |
| fkie_cve-2026-1590 | A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknow… | 2026-01-29T15:16:13.350 | 2026-02-02T19:25:13.073 |
| fkie_cve-2026-1522 | A weakness has been identified in Open5GS up to 2.7.6. This vulnerability affects the function sgwc… | 2026-01-28T17:16:15.330 | 2026-02-02T19:23:51.507 |
| fkie_cve-2025-62224 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows … | 2026-01-07T23:15:44.407 | 2026-02-02T19:21:20.177 |
| fkie_cve-2026-21859 | Mailpit is an email testing tool and API for developers. Versions 1.28.0 and below have a Server-Si… | 2026-01-08T00:16:00.150 | 2026-02-02T19:16:52.987 |
| fkie_cve-2020-36962 | Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field th… | 2026-01-28T18:16:46.277 | 2026-02-02T19:13:52.203 |
| fkie_cve-2026-21869 | llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_dis… | 2026-01-08T00:16:00.297 | 2026-02-02T19:12:36.020 |
| fkie_cve-2026-21896 | Kirby is an open-source content management system. From versions 5.0.0 to 5.2.1, Kirby is missing p… | 2026-01-08T18:15:59.593 | 2026-02-02T19:02:51.850 |
| fkie_cve-2026-0858 | Versions of the package net.sourceforge.plantuml:plantuml before 1.2026.0 are vulnerable to Stored … | 2026-01-16T05:16:16.117 | 2026-02-02T18:52:02.240 |
| fkie_cve-2026-1586 | A flaw has been found in Open5GS up to 2.7.5. Impacted is the function ogs_gtp2_f_teid_to_ip of the… | 2026-01-29T13:15:53.113 | 2026-02-02T18:43:23.160 |
| fkie_cve-2026-22795 | Issue summary: An invalid or NULL pointer dereference can happen in an application processing a mal… | 2026-01-27T16:16:35.430 | 2026-02-02T18:41:14.917 |
| fkie_cve-2026-22796 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7… | 2026-01-27T16:16:35.543 | 2026-02-02T18:40:27.467 |
| fkie_cve-2026-1587 | A vulnerability has been found in Open5GS up to 2.7.6. The affected element is the function sgwc_s1… | 2026-01-29T13:15:53.717 | 2026-02-02T18:40:02.970 |
| fkie_cve-2025-11187 | Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-… | 2026-01-27T16:16:14.093 | 2026-02-02T18:39:21.740 |
| fkie_cve-2025-15467 | Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can t… | 2026-01-27T16:16:14.257 | 2026-02-02T18:38:55.073 |
| fkie_cve-2026-21973 | Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applic… | 2026-01-20T22:16:00.460 | 2026-02-02T18:38:25.583 |
| fkie_cve-2025-15468 | Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or … | 2026-01-27T16:16:14.400 | 2026-02-02T18:38:00.947 |
| fkie_cve-2025-57681 | The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and be… | 2026-01-21T17:16:05.330 | 2026-02-02T18:37:51.730 |
| fkie_cve-2025-15469 | Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when usin… | 2026-01-27T16:16:14.523 | 2026-02-02T18:37:39.313 |
| fkie_cve-2025-66199 | Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large… | 2026-01-27T16:16:15.777 | 2026-02-02T18:37:19.613 |
| fkie_cve-2025-68160 | Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter wh… | 2026-01-27T16:16:15.900 | 2026-02-02T18:36:57.727 |
| fkie_cve-2025-34467 | ZwiiCMS versions prior to 13.7.00 contain a denial-of-service vulnerability in multiple administrat… | 2025-12-31T19:15:43.753 | 2026-02-02T18:36:13.617 |
| fkie_cve-2025-69418 | Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerat… | 2026-01-27T16:16:33.253 | 2026-02-02T18:36:03.557 |
| fkie_cve-2025-69419 | Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file wit… | 2026-01-27T16:16:34.113 | 2026-02-02T18:35:02.177 |
| fkie_cve-2025-69420 | Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code wh… | 2026-01-27T16:16:34.317 | 2026-02-02T18:33:30.557 |
| fkie_cve-2025-69421 | Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PK… | 2026-01-27T16:16:34.437 | 2026-02-02T18:29:59.693 |
| fkie_cve-2026-21978 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applica… | 2026-01-20T22:16:01.137 | 2026-02-02T18:25:25.303 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-rm5m-fjmr-4hwj |
6.5 (3.1)
|
Missing Authorization vulnerability in Chris Simmons WP BackItUp wp-backitup allows Exploiting Inco… | 2026-01-22T18:30:35Z | 2026-01-28T21:31:18Z |
| ghsa-hcj7-c9m7-w5g2 |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in garidium g-FFL Checkout g-ffl-chec… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-7r22-q5hv-pc72 |
7.3 (3.1)
|
Incorrect Privilege Assignment vulnerability in Themefic Hydra Booking hydra-booking allows Privile… | 2026-01-22T18:30:35Z | 2026-01-28T21:31:18Z |
| ghsa-4224-439j-q3pp |
6.5 (3.1)
|
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCo… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-36jg-fqm9-hv24 |
6.5 (3.1)
|
Missing Authorization vulnerability in WANotifier WANotifier notifier allows Exploiting Incorrectly… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:18Z |
| ghsa-x87w-5wj7-8cwc |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:33Z | 2026-01-28T21:31:17Z |
| ghsa-v2hq-hpvp-pm2v |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:33Z | 2026-01-28T21:31:17Z |
| ghsa-v265-mq78-w999 |
6.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-05-14T18:30:49Z | 2026-01-28T21:31:17Z |
| ghsa-j392-f58p-c38q |
9.8 (3.1)
|
Missing Authorization vulnerability in ThemeMove Makeaholic allows Exploiting Incorrectly Configure… | 2026-01-28T21:31:17Z | 2026-01-28T21:31:17Z |
| ghsa-hxcg-77v3-qx52 |
5.9 (3.1)
|
If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server… | 2025-11-12T18:31:25Z | 2026-01-28T21:31:17Z |
| ghsa-h3vg-292w-9x2c |
5.3 (3.1)
|
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.0… | 2026-01-28T21:31:17Z | 2026-01-28T21:31:17Z |
| ghsa-9rmh-gmj9-rv2m |
9.9 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in InspiryThemes Real Homes CRM realh… | 2026-01-22T18:30:34Z | 2026-01-28T21:31:17Z |
| ghsa-6jv6-w2pq-vr7g |
6.5 (3.1)
|
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploi… | 2026-01-22T18:30:33Z | 2026-01-28T21:31:17Z |
| ghsa-26cj-fq73-4g9h |
5.5 (3.1)
|
Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-202… | 2026-01-28T21:31:17Z | 2026-01-28T21:31:17Z |
| ghsa-86hp-xrhj-fhpq |
8.8 (3.1)
|
TYPO3 Vulnerable to Insecure Deserialization | 2022-05-24T22:00:13Z | 2026-01-28T21:28:48Z |
| ghsa-rvxj-7f72-mhrx |
8.7 (4.0)
|
EGroupware has SQL Injection in Nextmatch Filter Processing | 2026-01-28T20:39:27Z | 2026-01-28T20:39:27Z |
| ghsa-xcvv-2phh-wm85 |
7.8 (3.1)
|
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest c… | 2026-01-28T18:30:49Z | 2026-01-28T18:30:49Z |
| ghsa-h92q-fpwc-x9x5 |
7.8 (3.1)
|
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attac… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:49Z |
| ghsa-cww3-jp3g-84xg |
7.8 (3.1)
|
NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use af… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:49Z |
| ghsa-67qq-rj26-wj76 |
5.5 (3.1)
|
NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL … | 2026-01-28T18:30:49Z | 2026-01-28T18:30:49Z |
| ghsa-4p4m-966v-gqhf |
7.8 (3.1)
|
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.s… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:49Z |
| ghsa-vcq8-wcj4-22xm |
6.5 (3.1)
8.7 (4.0)
|
PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-rw7c-7pw9-f8cv |
9.8 (3.1)
8.4 (4.0)
|
Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-r4vc-qvp9-9h22 |
6.5 (3.1)
7.1 (4.0)
|
M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retri… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-qwcg-c534-7pw3 |
9.8 (3.1)
8.4 (4.0)
|
10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception han… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-mwjm-9r99-f56x |
8.8 (3.1)
8.7 (4.0)
|
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modi… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-mhpf-wffw-p7vp |
8.2 (3.1)
8.8 (4.0)
|
WebDamn User Registration Login System contains a SQL injection vulnerability that allows unauthent… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-mgpr-67wh-564q |
7.5 (3.1)
8.7 (4.0)
|
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability tha… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-mc39-mcp7-82wg |
8.4 (3.1)
6.9 (4.0)
|
PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read … | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ghsa-jjx9-wqhx-pw9m |
7.5 (3.1)
6.7 (4.0)
|
aSc TimeTables 2021.6.2 contains a denial of service vulnerability that allows attackers to crash t… | 2026-01-28T18:30:48Z | 2026-01-28T18:30:48Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-36 |
|
Cross-site scripting (XSS) vulnerability in python_scripts.py in Plone before 4.2.3 and 4… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.835907Z |
| pysec-2014-35 |
|
gtbn.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users wit… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.732595Z |
| pysec-2014-34 |
|
uid_catalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obt… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.620104Z |
| pysec-2014-33 |
|
z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.513262Z |
| pysec-2014-32 |
|
Cross-site scripting (XSS) vulnerability in kssdevel.py in Plone before 4.2.3 and 4.3 bef… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.407022Z |
| pysec-2014-31 |
|
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.299631Z |
| pysec-2014-30 |
|
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.194034Z |
| pysec-2014-29 |
|
The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before b… | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:29.087946Z |
| pysec-2014-27 |
|
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers … | plone | 2014-09-30T14:55:00Z | 2021-09-01T08:44:28.919312Z |
| pysec-2018-67 |
|
In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "o… | marshmallow | 2018-09-18T17:29:00Z | 2021-09-01T08:44:17.759030Z |
| pysec-2016-2 |
|
Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function … | django | 2016-08-05T15:59:00Z | 2021-09-01T08:35:44.164135Z |
| pysec-2015-9 |
|
The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, … | django | 2015-03-25T14:59:00Z | 2021-09-01T08:35:43.249549Z |
| pysec-2015-18 |
|
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and… | django | 2015-03-25T14:59:00Z | 2021-09-01T08:35:41.398239Z |
| pysec-2015-11 |
|
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x b… | django | 2015-12-07T20:59:00Z | 2021-09-01T08:35:41.190803Z |
| pysec-2020-139 |
|
In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resiz… | tensorflow | 2020-10-21T21:15:00Z | 2021-09-01T08:19:35.637564Z |
| pysec-2020-138 |
|
In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.q… | tensorflow | 2020-10-21T21:15:00Z | 2021-09-01T08:19:35.574576Z |
| pysec-2020-124 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.344299Z |
| pysec-2020-123 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.281926Z |
| pysec-2020-122 |
|
In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that … | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.217572Z |
| pysec-2020-121 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.154302Z |
| pysec-2020-120 |
|
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.096342Z |
| pysec-2020-119 |
|
In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` … | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:33.034745Z |
| pysec-2020-116 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` c… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:32.562362Z |
| pysec-2020-115 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlp… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:32.462320Z |
| pysec-2020-114 |
|
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `d… | tensorflow | 2020-09-25T19:15:00Z | 2021-09-01T08:19:32.360913Z |
| pysec-2021-17 |
|
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22.… | impacket | 2021-05-05T11:15:00Z | 2021-09-01T08:19:03.897095Z |
| pysec-2014-20 |
|
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, … | django | 2014-05-16T15:55:00Z | 2021-09-01T08:18:55.675902Z |
| pysec-2014-19 |
|
Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does n… | django | 2014-05-16T15:55:00Z | 2021-09-01T08:18:55.376993Z |
| pysec-2020-26 |
|
Synopsys hub-rest-api-python (aka blackduck on PyPI) version 0.0.25 - 0.0.52 does not val… | blackduck | 2020-11-06T14:15:00Z | 2021-09-01T06:49:41.380049Z |
| pysec-2021-315 |
|
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local pat… | nbgitpuller | 2021-08-25T18:15:00Z | 2021-08-30T18:40:30.558311Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32464 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047703Z |
| gsd-2024-32463 | phlex is an open source framework for building object-oriented views in Ruby. There is a … | 2024-04-13T05:02:29.026298Z |
| gsd-2024-32462 | Flatpak is a system for building, distributing, and running sandboxed desktop application… | 2024-04-13T05:02:29.046935Z |
| gsd-2024-32461 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injecti… | 2024-04-13T05:02:29.114351Z |
| gsd-2024-32460 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based based clie… | 2024-04-13T05:02:29.149963Z |
| gsd-2024-32459 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients an… | 2024-04-13T05:02:29.042567Z |
| gsd-2024-32458 | FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients th… | 2024-04-13T05:02:29.137782Z |
| gsd-2024-32457 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-13T05:02:29.034804Z |
| gsd-2024-32456 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-13T05:02:29.028431Z |
| gsd-2024-32455 | Missing Authorization vulnerability in Very Good Plugins Fatal Error Notify.This issue af… | 2024-04-13T05:02:29.134269Z |
| gsd-2024-32454 | Server-Side Request Forgery (SSRF) vulnerability in Wappointment Appointment Bookings for… | 2024-04-13T05:02:29.108037Z |
| gsd-2024-32453 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-13T05:02:29.086234Z |
| gsd-2024-32452 | Cross-Site Request Forgery (CSRF) vulnerability in WP EasyCart.This issue affects WP Easy… | 2024-04-13T05:02:29.096017Z |
| gsd-2024-32451 | Cross-Site Request Forgery (CSRF) vulnerability in wpWax Legal Pages.This issue affects L… | 2024-04-13T05:02:29.123557Z |
| gsd-2024-32450 | Cross-Site Request Forgery (CSRF) vulnerability in MagePeople Team WpTravelly.This issue … | 2024-04-13T05:02:29.062938Z |
| gsd-2024-32449 | Cross-Site Request Forgery (CSRF) vulnerability in MagniGenie RestroPress.This issue affe… | 2024-04-13T05:02:29.103783Z |
| gsd-2024-32448 | Cross-Site Request Forgery (CSRF) vulnerability in VideoYield.Com Ads.Txt Admin.This issu… | 2024-04-13T05:02:29.077038Z |
| gsd-2024-32447 | Cross-Site Request Forgery (CSRF) vulnerability in AWP Classifieds Team AWP Classifieds.T… | 2024-04-13T05:02:29.139862Z |
| gsd-2024-32446 | Cross-Site Request Forgery (CSRF) vulnerability in WP Swings Wallet System for WooCommerc… | 2024-04-13T05:02:29.080489Z |
| gsd-2024-32445 | Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team WebinarIgnition.This … | 2024-04-13T05:02:29.077828Z |
| gsd-2024-32444 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.138782Z |
| gsd-2024-32443 | Cross-Site Request Forgery (CSRF) vulnerability in IP2Location Download IP2Location Count… | 2024-04-13T05:02:29.028110Z |
| gsd-2024-32442 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Campaigns.This issue affects Zoho… | 2024-04-13T05:02:29.120672Z |
| gsd-2024-32441 | Cross-Site Request Forgery (CSRF) vulnerability in Zoho Campaigns.This issue affects Zoho… | 2024-04-13T05:02:29.033171Z |
| gsd-2024-32440 | Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum.This issue… | 2024-04-13T05:02:29.078424Z |
| gsd-2024-32439 | Cross-Site Request Forgery (CSRF) vulnerability in SwitchWP WP Client Reports.This issue … | 2024-04-13T05:02:29.079688Z |
| gsd-2024-32438 | Cross-Site Request Forgery (CSRF) vulnerability in cleverplugins.Com SEO Booster.This iss… | 2024-04-13T05:02:29.047512Z |
| gsd-2024-32437 | Cross-Site Request Forgery (CSRF) vulnerability in impleCode eCommerce Product Catalog.Th… | 2024-04-13T05:02:29.080680Z |
| gsd-2024-32436 | Cross-Site Request Forgery (CSRF) vulnerability in Codemenschen Gift Vouchers.This issue … | 2024-04-13T05:02:29.049395Z |
| gsd-2024-32435 | Cross-Site Request Forgery (CSRF) vulnerability in Affieasy Team AffiEasy.This issue affe… | 2024-04-13T05:02:29.134074Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-0000-kam193-171994a8c3aaa87e | Pentesting or research code in crpto (PyPI) | 2025-12-27T08:55:55Z | 2025-12-27T08:55:55Z |
| MAL-0000-KAM193-171994A8C3AAA87E | Pentesting or research code in crpto (PyPI) | 2025-12-27T08:55:55Z | 2025-12-27T08:55:55Z |
| mal-0000-kam193-dcf730d86bfb8fcf | Pentesting or research code in flaask (PyPI) | 2025-12-27T08:53:06Z | 2025-12-27T08:53:06Z |
| MAL-0000-KAM193-DCF730D86BFB8FCF | Pentesting or research code in flaask (PyPI) | 2025-12-27T08:53:06Z | 2025-12-27T08:53:06Z |
| mal-2025-192940 | Malicious code in aiogram-3 (PyPI) | 2025-12-26T04:33:18Z | 2025-12-26T10:09:30Z |
| MAL-2025-192940 | Malicious code in aiogram-3 (PyPI) | 2025-12-26T04:33:18Z | 2025-12-26T10:09:30Z |
| mal-0000-kam193-f6a9fb1c7d327b2f | Malicious code in aiogram-sever-patch (PyPI) | 2025-12-25T14:18:44Z | 2025-12-25T15:55:13Z |
| MAL-0000-KAM193-F6A9FB1C7D327B2F | Malicious code in aiogram-sever-patch (PyPI) | 2025-12-25T14:18:44Z | 2025-12-25T15:55:13Z |
| mal-0000-kam193-6a06919b9f87236d | Pentesting or research code in pxdbench (PyPI) | 2025-12-25T11:04:53Z | 2025-12-25T11:04:53Z |
| MAL-0000-KAM193-6A06919B9F87236D | Pentesting or research code in pxdbench (PyPI) | 2025-12-25T11:04:53Z | 2025-12-25T11:04:53Z |
| mal-2025-192929 | Malicious code in envtoolsx (PyPI) | 2025-12-24T22:45:19Z | 2025-12-24T22:45:19Z |
| MAL-2025-192929 | Malicious code in envtoolsx (PyPI) | 2025-12-24T22:45:19Z | 2025-12-24T22:45:19Z |
| mal-0000-kam193-cc5aee4d7ffd5c96 | Pentesting or research code in livekit-agents-hedra (PyPI) | 2025-12-24T20:38:01Z | 2025-12-24T20:38:01Z |
| MAL-0000-KAM193-CC5AEE4D7FFD5C96 | Pentesting or research code in livekit-agents-hedra (PyPI) | 2025-12-24T20:38:01Z | 2025-12-24T20:38:01Z |
| mal-2025-6629 | Malicious code in webpack-dev-server (RubyGems) | 2025-07-31T19:17:14Z | 2025-12-24T10:09:32Z |
| mal-2025-6628 | Malicious code in maventa_utils (RubyGems) | 2025-07-31T19:17:12Z | 2025-12-24T10:09:32Z |
| mal-2025-6627 | Malicious code in maventa_common (RubyGems) | 2025-07-31T19:17:11Z | 2025-12-24T10:09:32Z |
| mal-2025-5129 | Malicious code in requestsdev (PyPI) | 2025-06-18T10:15:20Z | 2025-12-24T10:09:32Z |
| mal-2025-5109 | Malicious code in dbgpkg (PyPI) | 2025-06-18T10:15:07Z | 2025-12-24T10:09:32Z |
| mal-2025-5096 | Malicious code in aliyun-ai-labs-snippets-sdk (PyPI) | 2025-05-19T15:43:26Z | 2025-12-24T10:09:32Z |
| mal-2025-5095 | Malicious code in aliyun-ai-labs-sdk (PyPI) | 2025-06-18T10:15:00Z | 2025-12-24T10:09:32Z |
| mal-2025-47815 | Malicious code in sqlcommenter_rails (RubyGems) | 2025-09-26T09:15:02Z | 2025-12-24T10:09:32Z |
| mal-2025-41805 | Malicious code in omniauth-pro-sante-connect (RubyGems) | 2025-08-28T07:12:29Z | 2025-12-24T10:09:32Z |
| mal-2025-192657 | Malicious code in yt-smm (npm) | 2025-12-19T08:41:06Z | 2025-12-24T10:09:32Z |
| mal-2025-191940 | Malicious code in zakuchienne (PyPI) | 2025-11-24T06:34:51Z | 2025-12-24T10:09:32Z |
| mal-2025-191898 | Malicious code in threading-helper (PyPI) | 2025-11-27T07:11:52Z | 2025-12-24T10:09:32Z |
| mal-2025-191894 | Malicious code in testingpkgja (PyPI) | 2025-11-23T21:05:33Z | 2025-12-24T10:09:32Z |
| mal-2025-191860 | Malicious code in rtcpy (PyPI) | 2025-11-24T23:29:43Z | 2025-12-24T10:09:32Z |
| mal-2025-191859 | Malicious code in rtcpstream (PyPI) | 2025-11-25T22:02:58Z | 2025-12-24T10:09:32Z |
| mal-2025-191858 | Malicious code in rtcplogin (PyPI) | 2025-11-26T16:19:39Z | 2025-12-24T10:09:32Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0798 | HPE HP-UX: Schwachstelle ermöglicht Codeausführung | 2022-01-10T23:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2025-0797 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-04-14T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2025-0796 | SolarWinds Serv-U: Schwachstelle ermöglicht Cross-Site Scripting | 2025-04-14T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2025-0571 | Mattermost Mobile: Schwachstelle ermöglicht Offenlegung von Daten | 2025-03-16T23:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2023-1175 | Intel i915 Graphics Driver für Linux: Schwachstelle ermöglicht Privilegieneskalation | 2023-05-09T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2023-0774 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-03-27T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-1648 | Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen | 2022-10-09T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-1429 | Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation | 2022-09-14T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-1215 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2022-08-29T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-1202 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2022-08-28T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-0532 | Linux Kernel: Mehrere Schwachstellen | 2018-05-01T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2022-0160 | Linux Kernel: Mehrere Schwachstellen | 2022-03-28T22:00:00.000+00:00 | 2025-04-14T22:00:00.000+00:00 |
| wid-sec-w-2025-0793 | Microsoft Visual Studio Code: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten | 2025-04-13T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0792 | Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-04-13T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0739 | Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten | 2025-04-08T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0701 | Apache Traffic Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-04-02T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0692 | Django: Schwachstelle ermöglicht Denial of Service | 2025-04-02T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0673 | Google Chrome/Microsoft Edge: Mehrere Schwachstellen | 2025-04-01T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0355 | hostapd: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-11T23:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2024-3637 | Apache Subversion: Schwachstelle ermöglicht Denial of Service | 2024-12-08T23:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2024-2199 | pgAdmin: Schwachstelle ermöglicht Privilegieneskalation | 2024-09-23T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2024-1452 | pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2024-06-25T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2023-2521 | wpa_supplicant: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-01-27T23:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2023-2454 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2023-09-26T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2023-2453 | Apple macOS: Mehrere Schwachstellen | 2023-09-26T22:00:00.000+00:00 | 2025-04-13T22:00:00.000+00:00 |
| wid-sec-w-2025-0787 | Pixel Patchday April 2025: Mehrere Schwachstellen | 2025-04-10T22:00:00.000+00:00 | 2025-04-10T22:00:00.000+00:00 |
| wid-sec-w-2025-0785 | Flowise: Schwachstelle ermöglicht Manipulation von Dateien | 2025-04-10T22:00:00.000+00:00 | 2025-04-10T22:00:00.000+00:00 |
| wid-sec-w-2025-0428 | Mattermost Mobile: Schwachstelle ermöglicht Denial of Service | 2025-02-23T23:00:00.000+00:00 | 2025-04-10T22:00:00.000+00:00 |
| wid-sec-w-2025-0410 | Mattermost: Mehrere Schwachstellen | 2025-02-18T23:00:00.000+00:00 | 2025-04-10T22:00:00.000+00:00 |
| wid-sec-w-2024-0632 | Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-03-13T23:00:00.000+00:00 | 2025-04-10T22:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1461 | Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update | 2024-03-27T00:45:48+00:00 | 2026-02-03T21:36:06+00:00 |
| rhsa-2024:1456 | Red Hat Security Advisory: OpenShift Container Platform 4.13.38 packages and security update | 2024-03-27T00:46:13+00:00 | 2026-02-03T21:36:05+00:00 |
| rhsa-2024:1363 | Red Hat Security Advisory: OpenShift Container Platform 4.15.3 low-latency extras security update | 2024-03-19T22:11:56+00:00 | 2026-02-03T21:36:04+00:00 |
| rhsa-2024:1321 | Red Hat Security Advisory: ACS 4.3 enhancement and security update | 2024-03-13T20:55:36+00:00 | 2026-02-03T21:36:03+00:00 |
| rhsa-2024:11023 | Red Hat Security Advisory: HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update. | 2024-12-12T20:00:23+00:00 | 2026-02-03T21:35:57+00:00 |
| rhsa-2024:10990 | Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.10 | 2025-01-15T10:46:45+00:00 | 2026-02-03T21:35:55+00:00 |
| rhsa-2024:10962 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release | 2024-12-11T16:47:10+00:00 | 2026-02-03T21:35:55+00:00 |
| rhsa-2024:10917 | Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release | 2024-12-10T11:04:35+00:00 | 2026-02-03T21:35:55+00:00 |
| rhsa-2024:10775 | Red Hat Security Advisory: ACS 4.6 enhancement and security update | 2024-12-04T00:59:51+00:00 | 2026-02-03T21:35:53+00:00 |
| rhsa-2024:10147 | Red Hat Security Advisory: OpenShift Container Platform 4.16.24 security update | 2024-11-26T18:45:35+00:00 | 2026-02-03T21:35:44+00:00 |
| rhsa-2024:0043 | Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update | 2024-06-27T13:18:33+00:00 | 2026-02-03T21:35:23+00:00 |
| rhea-2024:4022 | Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release | 2024-06-20T14:25:41+00:00 | 2026-02-03T21:35:16+00:00 |
| rhba-2025:0409 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.1 release. | 2025-01-20T12:54:15+00:00 | 2026-02-03T21:35:15+00:00 |
| rhba-2024:9054 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.1 bugfix release | 2024-11-11T01:39:34+00:00 | 2026-02-03T21:35:13+00:00 |
| rhba-2024:4458 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.5 bug fix updates | 2024-07-10T15:00:31+00:00 | 2026-02-03T21:35:12+00:00 |
| rhba-2024:3593 | Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.9.4 bug fixes and container updates | 2024-06-04T14:47:10+00:00 | 2026-02-03T21:35:09+00:00 |
| rhba-2024:3555 | Red Hat Bug Fix Advisory: multicluster engine for Kubernetes 2.4.5 bug fixes and container updates | 2024-06-03T19:43:56+00:00 | 2026-02-03T21:35:09+00:00 |
| rhba-2024:1775 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.5.2 bug fixes and container updates | 2024-04-10T22:19:22+00:00 | 2026-02-03T21:35:07+00:00 |
| rhba-2024:1793 | Red Hat Bug Fix Advisory: Red Hat Advanced Cluster Management 2.10.1 bug fix advisory | 2024-04-11T21:04:22+00:00 | 2026-02-03T21:35:06+00:00 |
| rhba-2024:11265 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.0 release. | 2024-12-17T15:12:17+00:00 | 2026-02-03T21:35:02+00:00 |
| rhba-2024:10184 | Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.5 bugfix release | 2024-11-21T22:06:56+00:00 | 2026-02-03T21:34:59+00:00 |
| rhsa-2025:4664 | Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates | 2025-05-07T12:48:57+00:00 | 2026-02-03T21:30:50+00:00 |
| rhsa-2025:2876 | Red Hat Security Advisory: ACS 4.7 enhancement and security update | 2025-03-17T01:38:45+00:00 | 2026-02-03T21:30:49+00:00 |
| rhsa-2025:1866 | Red Hat Security Advisory: RHODF-4.14-RHEL-9 security update | 2025-02-26T02:32:43+00:00 | 2026-02-03T21:30:45+00:00 |
| rhsa-2025:1865 | Red Hat Security Advisory: RHODF-4.15-RHEL-9 security update | 2025-02-26T00:59:33+00:00 | 2026-02-03T21:30:42+00:00 |
| rhsa-2025:0654 | Red Hat Security Advisory: OpenShift Container Platform 4.17.14 bug fix and security update | 2025-01-28T04:28:50+00:00 | 2026-02-03T21:30:33+00:00 |
| rhsa-2024:8991 | Red Hat Security Advisory: OpenShift Container Platform 4.15.38 bug fix and security update | 2024-11-13T18:34:50+00:00 | 2026-02-03T21:30:32+00:00 |
| rhsa-2024:7921 | Red Hat Security Advisory: OpenShift Container Platform 4.17.1 security and extras update | 2024-10-15T15:24:07+00:00 | 2026-02-03T21:30:22+00:00 |
| rhsa-2024:6642 | Red Hat Security Advisory: OpenShift Container Platform 4.12.65 bug fix and security update | 2024-09-18T03:07:18+00:00 | 2026-02-03T21:30:15+00:00 |
| rhsa-2024:6004 | Red Hat Security Advisory: OpenShift Container Platform 4.16.10 bug fix and security update | 2024-09-03T19:13:56+00:00 | 2026-02-03T21:30:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-23-166-13 | Siemens SICAM A8000 Devices | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-166-05 | Siemens SIMATIC WinCC | 2023-06-13T00:00:00.000000Z | 2023-06-13T00:00:00.000000Z |
| icsa-23-159-02 | Sensormatic Electronics Illustra Pro Gen 4 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-159-01 | Atlas Copco Power Focus 6000 | 2023-06-08T06:00:00.000000Z | 2023-06-08T06:00:00.000000Z |
| icsa-23-152-02 | HID Global SAFE | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-152-01 | Advantech WebAccess/SCADA | 2023-06-01T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-22-256-03 | Delta Electronics DIAEnergie | 2022-09-19T06:00:00.000000Z | 2023-06-01T06:00:00.000000Z |
| icsa-23-145-01 | Moxa MXsecurity Series | 2023-05-31T20:26:29.755020Z | 2023-05-31T20:26:29.755020Z |
| icsa-23-143-04 | Horner Automation Cscape | 2023-05-31T20:26:29.732849Z | 2023-05-31T20:26:29.732849Z |
| icsa-23-143-01 | Hitachi Energy’s AFS65x, AFS67x, AFR67x and AFF66x Products | 2023-05-31T20:26:29.765074Z | 2023-05-31T20:26:29.765074Z |
| icsa-23-150-01 | Advantech WebAccess/SCADA | 2023-05-25T06:00:00.000000Z | 2023-05-25T06:00:00.000000Z |
| icsa-23-138-04 | Johnson Controls OpenBlue Enterprise Manager Data Collector | 2023-05-22T14:17:19.565087Z | 2023-05-22T14:17:19.565087Z |
| icsa-23-138-03 | Hitachi Energy’s MicroSCADA Pro/X SYS600 Products | 2023-05-18T19:01:59.415885Z | 2023-05-18T19:01:59.415885Z |
| icsa-23-138-01 | Carlo Gavazzi Powersoft | 2023-05-18T19:01:59.436599Z | 2023-05-18T19:01:59.436599Z |
| icsa-23-136-02 | Rockwell ArmorStart | 2023-05-18T19:01:59.428226Z | 2023-05-18T19:01:59.428226Z |
| icsa-23-136-03 | Rockwell Automation FactoryTalk Vantagepoint | 2023-05-16T19:48:44.881188Z | 2023-05-16T19:48:44.881188Z |
| icsa-23-131-13 | PTC Vuforia Studio | 2023-05-12T18:09:09.420860Z | 2023-05-12T18:09:09.420860Z |
| icsa-23-131-12 | SDG PnPSCADA | 2023-05-12T18:09:09.435069Z | 2023-05-12T18:09:09.435069Z |
| icsa-23-131-10 | Rockwell Automation Arena Simulation Software | 2023-05-12T15:07:40.899704Z | 2023-05-12T15:07:40.899704Z |
| icsa-23-131-15 | Rockwell Automation ThinManager | 2023-05-11T22:14:23.629560Z | 2023-05-11T22:14:23.629560Z |
| icsa-23-131-14 | Rockwell Automation PanelView 800 | 2023-05-11T22:14:23.620441Z | 2023-05-11T22:14:23.620441Z |
| icsa-23-131-09 | Rockwell Automation Kinetix 5500 | 2023-05-11T22:14:23.610081Z | 2023-05-11T22:14:23.610081Z |
| icsa-23-131-08 | Teltonika Remote Management System and RUT Model Routers | 2023-05-11T06:00:00.000000Z | 2023-05-11T06:00:00.000000Z |
| icsa-23-131-07 | Sierra Wireless AirVantage | 2023-05-10T21:14:08.895031Z | 2023-05-10T21:14:08.895031Z |
| icsa-23-129-02 | Hitachi Energy MSM | 2023-05-10T21:13:09.601070Z | 2023-05-10T21:13:09.601070Z |
| icsa-23-131-11 | BirdDog Cameras & Encoders | 2023-05-10T20:52:45.090469Z | 2023-05-10T20:52:45.090469Z |
| icsa-23-131-03 | Siemens Siveillance | 2023-05-09T00:00:00.000000Z | 2023-05-09T00:00:00.000000Z |
| icsa-18-317-02 | Siemens S7-400 CPUs (Update B) | 2018-11-13T00:00:00.000000Z | 2023-05-09T00:00:00.000000Z |
| icsa-18-079-02 | Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D) | 2018-03-20T00:00:00.000000Z | 2023-05-09T00:00:00.000000Z |
| icsa-22-263-03 | Dataprobe iBoot-PDU | 2022-09-20T06:00:00.000000Z | 2023-05-04T23:12:37.028223Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-sdwan-vdaemon-bo-RuzzEA2 | Cisco SD-WAN vDaemon Buffer Overflow Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwan-sigverbypass-gpyxd6mk | Cisco SD-WAN Software Signature Verification Bypass Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwan-sigverbypass-gPYXd6Mk | Cisco SD-WAN Software Signature Verification Bypass Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-vman-kth3c82b | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdwan-privesc-vman-kth3c82B | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdw-sqlinj-hdjueeax | Cisco SD-WAN vManage SQL Injection Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-sdw-sqlinj-HDJUeEAX | Cisco SD-WAN vManage SQL Injection Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-nso-path-trvsl-dzrqe8lc | Cisco Network Services Orchestrator Path Traversal Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-nso-path-trvsl-dZRQE8Lc | Cisco Network Services Orchestrator Path Traversal Vulnerability | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-ipphone-rce-dos-u2psskz3 | Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-ipphone-rce-dos-U2PsSkz3 | Cisco IP Phones Buffer Overflow and Denial of Service Vulnerabilities | 2021-03-03T16:00:00+00:00 | 2021-03-03T16:00:00+00:00 |
| cisco-sa-ise-xss-eurcwx9 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-02-26T18:56:49+00:00 |
| cisco-sa-ise-xss-euRCwX9 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-02-26T18:56:49+00:00 |
| cisco-sa-cimc-auth-zwkppjxl | Cisco Integrated Management Controller Authorization Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-02-26T15:37:04+00:00 |
| cisco-sa-cimc-auth-zWkppJxL | Cisco Integrated Management Controller Authorization Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2021-02-26T15:37:04+00:00 |
| cisco-sa-n9kaci-unauth-access-5pwzdx2w | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-25T14:44:59+00:00 |
| cisco-sa-n9kaci-unauth-access-5PWzDx2w | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-25T14:44:59+00:00 |
| cisco-sa-nxos-udld-rce-xeth6w35 | Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-udld-rce-xetH6w35 | Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrary Code Execution Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-pim-dos-y8sjmz4 | Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-pim-dos-Y8SjMz4 | Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-nxapi-csrf-wrmzwl9z | Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-nxapi-csrf-wRMzWL9z | Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-ipv6-netstack-edxpgv7k | Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-nxos-ipv6-netstack-edXPGV7K | Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-n9kaci-bgp-de9dpksk | Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-n9kaci-bgp-De9dPKSK | Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-fxos-nxos-icmpv6-dos-yd55jvcq | Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-fxos-nxos-icmpv6-dos-YD55jVCq | Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| cisco-sa-case-mvuln-dyrdpc6w | Cisco Application Services Engine Unauthorized Access Vulnerabilities | 2021-02-24T16:00:00+00:00 | 2021-02-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2021-47658 | drm/amd/pm: fix a potential gpu_metrics_table memory leak | 2025-02-02T00:00:00.000Z | 2025-09-25T01:01:19.000Z |
| msrc_cve-2025-55322 | OmniParser Remote Code Execution Vulnerability | 2025-09-09T07:00:00.000Z | 2025-09-24T07:00:00.000Z |
| msrc_cve-2025-39880 | libceph: fix invalid accesses to ceph_connection_v1_info | 2025-09-02T00:00:00.000Z | 2025-09-24T01:02:31.000Z |
| msrc_cve-2025-39876 | net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() | 2025-09-02T00:00:00.000Z | 2025-09-24T01:02:26.000Z |
| msrc_cve-2025-39869 | dmaengine: ti: edma: Fix memory allocation size for queue_priority_map | 2025-09-02T00:00:00.000Z | 2025-09-24T01:02:15.000Z |
| msrc_cve-2025-39873 | can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB | 2025-09-02T00:00:00.000Z | 2025-09-24T01:02:10.000Z |
| msrc_cve-2025-39867 | netfilter: nft_set_pipapo: fix null deref for empty set | 2025-09-02T00:00:00.000Z | 2025-09-24T01:02:05.000Z |
| msrc_cve-2025-39877 | mm/damon/sysfs: fix use-after-free in state_show() | 2025-09-02T00:00:00.000Z | 2025-09-24T01:01:55.000Z |
| msrc_cve-2025-39881 | kernfs: Fix UAF in polling when open file is released | 2025-09-02T00:00:00.000Z | 2025-09-24T01:01:49.000Z |
| msrc_cve-2025-10824 | axboe fio init.c __parse_jobs_ini use after free | 2025-09-02T00:00:00.000Z | 2025-09-24T01:01:39.000Z |
| msrc_cve-2025-10823 | axboe fio options.c str_buffer_pattern_cb null pointer dereference | 2025-09-02T00:00:00.000Z | 2025-09-24T01:01:30.000Z |
| msrc_cve-2022-49234 | net: dsa: Avoid cross-chip syncing of VLAN filtering | 2025-02-02T00:00:00.000Z | 2025-09-24T01:01:24.000Z |
| msrc_cve-2025-58767 | REXML has a DoS condition when parsing malformed XML file | 2025-09-02T00:00:00.000Z | 2025-09-21T01:04:06.000Z |
| msrc_cve-2025-58749 | WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:55.000Z |
| msrc_cve-2024-53190 | wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures | 2024-12-02T00:00:00.000Z | 2025-09-21T01:03:44.000Z |
| msrc_cve-2025-39838 | cifs: prevent NULL pointer dereference in UTF16 conversion | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:35.000Z |
| msrc_cve-2024-35799 | drm/amd/display: Prevent crash when disable stream | 2024-05-02T07:00:00.000Z | 2025-09-21T01:03:16.000Z |
| msrc_cve-2025-39866 | fs: writeback: fix use-after-free in __mark_inode_dirty() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:07.000Z |
| msrc_cve-2025-39864 | wifi: cfg80211: fix use-after-free in cmp_bss() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:03:02.000Z |
| msrc_cve-2025-39861 | Bluetooth: vhci: Prevent use-after-free by removing debugfs files early | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:57.000Z |
| msrc_cve-2025-39860 | Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:36.000Z |
| msrc_cve-2025-39865 | tee: fix NULL pointer dereference in tee_shm_put | 2025-09-02T00:00:00.000Z | 2025-09-21T01:02:21.000Z |
| msrc_cve-2023-52700 | tipc: fix kernel warning when sending SYN message | 2024-05-02T07:00:00.000Z | 2025-09-21T01:02:15.000Z |
| msrc_cve-2023-52682 | f2fs: fix to wait on block writeback for post_read case | 2024-05-02T07:00:00.000Z | 2025-09-21T01:02:10.000Z |
| msrc_cve-2025-39857 | net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:49.000Z |
| msrc_cve-2025-39842 | ocfs2: prevent release journal inode after journal shutdown | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:44.000Z |
| msrc_cve-2025-39849 | wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:29.000Z |
| msrc_cve-2025-39843 | mm: slub: avoid wake up kswapd in set_track_prepare | 2025-09-02T00:00:00.000Z | 2025-09-21T01:01:24.000Z |
| msrc_cve-2025-39832 | net/mlx5: Fix lockdep assertion on sync reset unload event | 2025-09-02T00:00:00.000Z | 2025-09-20T01:08:42.000Z |
| msrc_cve-2022-48633 | drm/gma500: Fix WARN_ON(lock->magic != lock) error | 2024-04-02T07:00:00.000Z | 2025-09-20T01:08:10.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:14240-1 | libnbd-1.20.2-1.1 on GA media | 2024-08-06T00:00:00Z | 2024-08-06T00:00:00Z |
| opensuse-su-2024:0231-1 | Security update for python-notebook | 2024-08-02T10:51:39Z | 2024-08-02T10:51:39Z |
| opensuse-su-2024:14239-1 | patch-2.7.6-8.1 on GA media | 2024-08-02T00:00:00Z | 2024-08-02T00:00:00Z |
| opensuse-su-2024:14238-1 | libneatvnc0-0.8.1-1.1 on GA media | 2024-08-02T00:00:00Z | 2024-08-02T00:00:00Z |
| opensuse-su-2024:14237-1 | trivy-0.54.1-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14236-1 | python-Twisted-doc-24.3.0-2.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14235-1 | nova-3.10.0-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14234-1 | klp-build-0~20240731.edfe0bf-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14233-1 | java-1_8_0-openjdk-1.8.0.422-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14232-1 | golang-github-prometheus-prometheus-2.53.0-3.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14231-1 | ffmpeg-4-4.4.4-12.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14230-1 | espeak-ng-1.51.1-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14229-1 | docker-26.1.5_ce-1.1 on GA media | 2024-08-01T00:00:00Z | 2024-08-01T00:00:00Z |
| opensuse-su-2024:14228-1 | matrix-synapse-1.112.0-1.1 on GA media | 2024-07-31T00:00:00Z | 2024-07-31T00:00:00Z |
| opensuse-su-2024:14227-1 | 389-ds-3.1.1~git0.aef1668-1.1 on GA media | 2024-07-31T00:00:00Z | 2024-07-31T00:00:00Z |
| opensuse-su-2024:14226-1 | ffmpeg-6-6.1.1-6.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14225-1 | curl-8.9.0-1.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14224-1 | cargo-audit-advisory-db-20240730-1.1 on GA media | 2024-07-30T00:00:00Z | 2024-07-30T00:00:00Z |
| opensuse-su-2024:14223-1 | libwireshark17-4.2.6-3.1 on GA media | 2024-07-29T00:00:00Z | 2024-07-29T00:00:00Z |
| opensuse-su-2024:14222-1 | ffmpeg-7-7.0-3.1 on GA media | 2024-07-28T00:00:00Z | 2024-07-28T00:00:00Z |
| opensuse-su-2024:14221-1 | ffmpeg-5-5.1.4-9.1 on GA media | 2024-07-28T00:00:00Z | 2024-07-28T00:00:00Z |
| opensuse-su-2024:0227-1 | Security update for gh | 2024-07-27T04:01:36Z | 2024-07-27T04:01:36Z |
| opensuse-su-2024:0226-1 | Security update for gh | 2024-07-27T04:01:34Z | 2024-07-27T04:01:34Z |
| opensuse-su-2024:0225-1 | Security update for assimp | 2024-07-27T04:01:30Z | 2024-07-27T04:01:30Z |
| opensuse-su-2024:0224-2 | Security update for keybase-client | 2024-07-26T18:12:13Z | 2024-07-26T18:12:13Z |
| opensuse-su-2024:0223-1 | Security update for opera | 2024-07-26T14:31:50Z | 2024-07-26T14:31:50Z |
| opensuse-su-2024:0222-1 | Security update for python-nltk | 2024-07-26T10:41:48Z | 2024-07-26T10:41:48Z |
| opensuse-su-2024:0221-1 | Security update for python-nltk | 2024-07-26T10:32:35Z | 2024-07-26T10:32:35Z |
| opensuse-su-2024:0220-1 | Security update for caddy | 2024-07-26T10:03:44Z | 2024-07-26T10:03:44Z |
| opensuse-su-2024:14220-1 | libopenssl-3-devel-3.1.4-11.1 on GA media | 2024-07-26T00:00:00Z | 2024-07-26T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-mlflow-2023-2356 | Relative Path Traversal in mlflow/mlflow | 2024-03-06T10:59:06.605Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-1177 | Path Traversal: '\..\filename' in mlflow/mlflow | 2024-03-06T10:59:15.795Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2023-1176 | Absolute Path Traversal in mlflow/mlflow | 2024-03-06T10:59:27.081Z | 2025-05-20T10:02:07.006Z |
| bit-mlflow-2022-0736 | Insecure Temporary File in mlflow/mlflow | 2024-03-06T10:59:37.587Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2025-31489 | MinIO performs incomplete signature validation for unsigned-trailer uploads | 2025-04-14T11:14:54.951Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2025-27414 | MinIO SFTP authentication bypass due to improperly trusted SSH key | 2025-04-14T11:14:42.946Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2024-55949 | Privilege escalation in IAM import API in MinIO | 2025-04-14T11:14:32.648Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2024-36107 | Information disclosure in minio | 2024-06-04T09:46:16.011Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2023-28433 | Minio Privilege Escalation on Windows via Path separator manipulation | 2024-03-06T10:56:28.094Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2023-27589 | Minio vulnerable to denial of access by an admin privileged user for root credential | 2024-03-06T10:56:49.290Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2023-25812 | Allowed DELETE on resources on object locked buckets under Governance mode in Minio | 2024-03-06T10:56:58.195Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2022-35919 | Authenticated requests for server update admin API allows path traversal in minio | 2024-03-06T10:57:07.178Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2022-31028 | Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO | 2024-03-06T10:57:16.966Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2022-24842 | Improper Privilege Management in MinIO | 2024-03-06T10:57:27.260Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2021-43858 | User privilege escalation in MinIO | 2024-03-06T10:57:38.503Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2021-21390 | MITM modification of request bodies in MinIO | 2024-03-06T10:58:02.168Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2021-21362 | Bypassing readOnly policy by creating a temporary 'mc share upload' URL | 2024-03-06T10:58:10.992Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2021-21287 | Server-Side Request Forgery in MinIO Browser API | 2024-03-06T10:58:22.370Z | 2025-05-20T10:02:07.006Z |
| bit-minio-2020-11012 | Authentication bypass MinIO Admin API | 2024-03-06T10:58:32.002Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2025-27399 | Mastodon's domain blocks & rationales ignore user approval when visibility set as "users" | 2025-03-02T07:13:02.508Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2025-27157 | Mastodon's rate-limits are missing on `/auth/setup` | 2025-03-02T07:13:08.797Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-37903 | Mastodon has improper authorship check on audience extension for existing posts | 2024-07-09T07:24:52.373Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-25623 | Lack of media type verification of Activity Streams objects allows impersonation of remote accounts | 2024-03-31T18:20:59.562Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-25619 | Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodon | 2024-03-31T18:21:09.827Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-25618 | External OpenID Connect Account Takeover by E-Mail Change in mastodon | 2024-03-31T18:21:20.227Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2024-23832 | Mastodon Remote user impersonation and takeover | 2024-03-06T10:55:37.581Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-42452 | Mastodon vulnerable to Stored XSS through the translation feature | 2024-03-06T10:55:46.292Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-42451 | Mastodon Invalid Domain Name Normalization vulnerability | 2024-03-06T10:55:56.068Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-36462 | Mastodon's verified profile links can be formatted in a misleading way | 2024-03-06T10:56:16.089Z | 2025-05-20T10:02:07.006Z |
| bit-mastodon-2023-36461 | Mastodon vulnerable to Denial of Service through slow HTTP responses | 2024-03-06T10:56:27.083Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202109-1847 | An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and olde… | 2024-05-17T23:04:28.294000Z |
| var-202109-1107 | DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The… | 2024-05-17T23:04:28.264000Z |
| var-202307-2197 | Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to… | 2024-05-17T23:04:21.117000Z |
| var-202403-0816 | A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical. Affect… | 2024-05-17T23:04:19.022000Z |
| var-202401-0742 | A vulnerability classified as critical was found in Tenda PA6 1.0.1.21. Affected by this … | 2024-05-17T23:04:19.633000Z |
| var-202401-0051 | A vulnerability has been found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as… | 2024-05-17T23:04:19.837000Z |
| var-201708-1534 | An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer… | 2024-05-17T23:04:03.036000Z |
| var-201806-0642 | A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface wit… | 2024-05-17T23:04:02.173000Z |
| var-201808-0239 | Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of se… | 2024-05-17T23:04:01.991000Z |
| var-202004-0536 | IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabili… | 2024-05-17T23:04:00.294000Z |
| var-202206-0121 | D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded o… | 2024-05-17T23:03:58.093000Z |
| var-202205-0310 | Agoo before 2.14.3 does not reject GraphQL fragment spreads that form cycles, leading to … | 2024-05-17T23:03:58.219000Z |
| var-202403-0576 | A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.… | 2024-05-17T23:03:50.040000Z |
| var-202401-1243 | A vulnerability classified as critical has been found in Totolink N200RE 9.3.5u.6139_B202… | 2024-05-17T23:03:50.368000Z |
| var-202401-1159 | A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Af… | 2024-05-17T23:03:50.405000Z |
| var-202403-0912 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classifie… | 2024-05-17T23:03:49.974000Z |
| var-200512-0178 | NOTE: the vendor has disputed this issue. Cross-site scripting (XSS) vulnerability in le… | 2024-05-17T23:03:46.870000Z |
| var-202010-0520 | Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow… | 2024-05-17T23:03:20.833000Z |
| var-202302-2018 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in … | 2024-05-17T23:03:17.258000Z |
| var-202302-0191 | A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical.… | 2024-05-17T23:03:17.516000Z |
| var-202309-0807 | The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users… | 2024-05-17T23:03:15.491000Z |
| var-202401-1132 | A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49_m… | 2024-05-17T23:03:14.454000Z |
| var-202401-1090 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been classified … | 2024-05-17T23:03:14.477000Z |
| var-202312-0346 | A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DB… | 2024-05-17T23:03:14.836000Z |
| var-202311-1790 | ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to… | 2024-05-17T23:03:14.959000Z |
| var-202403-0926 | A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.… | 2024-05-17T23:03:13.743000Z |
| var-202405-0646 | Beijing Yakong Technology Development Co., Ltd., referred to as "Yakong Technology", is a… | 2024-05-17T23:03:12.750000Z |
| var-201708-1533 | An issue was discovered in SMA Solar Technology products. The SIP implementation does not… | 2024-05-17T23:02:47.102000Z |
| var-201806-0938 | A remote attacker can bypass the System Manager Mode on the Canon MF210 and MF220 web int… | 2024-05-17T23:02:46.014000Z |
| var-201712-0474 | HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximat… | 2024-05-17T23:02:46.829000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2014-000129 | OpenAM vulnerable to denial-of-service (DoS) | 2014-11-10T14:23+09:00 | 2014-11-20T10:09+09:00 |
| jvndb-2014-000133 | iLogScanner vulnerable to cross-site scripting | 2014-11-14T14:38+09:00 | 2014-11-18T18:22+09:00 |
| jvndb-2014-000122 | Aflax vulnerable to cross-site scripting | 2014-10-16T13:35+09:00 | 2014-10-24T18:32+09:00 |
| jvndb-2014-000119 | Huawei E5332 vulnerable to denial-of-service (DoS) | 2014-10-10T14:02+09:00 | 2014-10-21T15:15+09:00 |
| jvndb-2014-000120 | Huawei E5332 vulnerable to denial-of-service (DoS) | 2014-10-10T14:03+09:00 | 2014-10-21T15:11+09:00 |
| jvndb-2014-000121 | BirdBlog vulnerable to cross-site scripting | 2014-10-16T13:26+09:00 | 2014-10-16T13:26+09:00 |
| jvndb-2014-000108 | jigbrowser+ for iOS same origin policy bypass | 2014-09-25T14:52+09:00 | 2014-09-29T11:47+09:00 |
| jvndb-2014-000105 | Help Page in multiple Adobe products vulnerable to cross-site scripting | 2014-09-12T14:00+09:00 | 2014-09-29T11:42+09:00 |
| jvndb-2014-000112 | N-Media file uploader vulnerability in handling uploaded files | 2014-09-25T14:53+09:00 | 2014-09-29T11:39+09:00 |
| jvndb-2014-000110 | Dotclear vulnerable to cross-site scripting | 2014-09-19T13:42+09:00 | 2014-09-25T17:52+09:00 |
| jvndb-2014-000109 | Bump for Android vulnerable in handling of implicit intents | 2014-09-19T13:41+09:00 | 2014-09-25T17:44+09:00 |
| jvndb-2014-004316 | Safari issue in handling application cache | 2014-09-25T14:54+09:00 | 2014-09-25T14:54+09:00 |
| jvndb-2014-000116 | Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates | 2014-09-25T14:54+09:00 | 2014-09-25T14:54+09:00 |
| jvndb-2014-000114 | FileMaker Pro fails to verify SSL server certificates | 2014-09-18T20:36+09:00 | 2014-09-24T18:47+09:00 |
| jvndb-2014-000111 | Yuko Yuko App for Android fails to verify SSL server certificates | 2014-09-22T13:50+09:00 | 2014-09-22T13:50+09:00 |
| jvndb-2014-000106 | 365 Links series vulnerable to cross-site scripting | 2014-09-17T15:23+09:00 | 2014-09-19T13:33+09:00 |
| jvndb-2013-000048 | FileMaker Pro fails to verify SSL server certificates | 2013-05-31T15:43+09:00 | 2014-09-18T21:08+09:00 |
| jvndb-2014-000104 | Movable Type vulnerable to cross-site scripting | 2014-09-09T15:02+09:00 | 2014-09-11T16:56+09:00 |
| jvndb-2014-000103 | EmFTP may insecurely load executable files | 2014-09-04T16:36+09:00 | 2014-09-09T15:15+09:00 |
| jvndb-2014-000084 | WisePoint vulnerable to session fixation | 2014-09-04T16:46+09:00 | 2014-09-09T15:02+09:00 |
| jvndb-2014-000102 | Kindle App for Android fails to verify SSL server certificates | 2014-08-29T13:38+09:00 | 2014-09-03T18:25+09:00 |
| jvndb-2014-000101 | MailPoet Newsletters vulnerable to cross-site request forgery | 2014-08-26T13:33+09:00 | 2014-08-28T18:13+09:00 |
| jvndb-2013-000087 | Multiple broadband routers may behave as open resolvers | 2013-09-19T13:29+09:00 | 2014-08-28T18:10+09:00 |
| jvndb-2014-000100 | Cakifo vulnerable to cross-site scripting | 2014-08-18T13:32+09:00 | 2014-08-20T16:30+09:00 |
| jvndb-2014-000099 | Advance-Flow vulnerable to SQL injection | 2014-08-19T12:35+09:00 | 2014-08-20T16:26+09:00 |
| jvndb-2014-000093 | Piwigo vulnerable to cross-site scripting | 2014-08-08T13:52+09:00 | 2014-08-19T16:48+09:00 |
| jvndb-2014-000096 | Shutter vulnerable to cross-site scripting | 2014-08-15T13:27+09:00 | 2014-08-19T16:27+09:00 |
| jvndb-2014-000098 | Ameba for Android contains an issue where it fails to verify SSL server certificates | 2014-08-14T12:32+09:00 | 2014-08-18T12:22+09:00 |
| jvndb-2014-000086 | Outlook.com for Android contains an issue where it fails to verify SSL server certificates | 2014-07-30T15:11+09:00 | 2014-08-18T10:09+09:00 |
| jvndb-2014-000091 | ServerView Operations Manager vulnerable to cross-site scripting | 2014-08-01T15:42+09:00 | 2014-08-18T10:05+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02413-1 | Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6) | 2025-07-21T07:34:18Z | 2025-07-21T07:34:18Z |
| suse-su-2025:02412-1 | Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6) | 2025-07-21T07:34:13Z | 2025-07-21T07:34:13Z |
| suse-su-2025:02411-1 | Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6) | 2025-07-21T07:34:09Z | 2025-07-21T07:34:09Z |
| suse-su-2025:02410-1 | Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5) | 2025-07-21T07:34:05Z | 2025-07-21T07:34:05Z |
| suse-su-2025:02405-1 | Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP6) | 2025-07-21T07:07:13Z | 2025-07-21T07:07:13Z |
| suse-su-2025:02403-1 | Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) | 2025-07-21T07:07:03Z | 2025-07-21T07:07:03Z |
| suse-su-2025:02402-1 | Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5) | 2025-07-21T07:06:57Z | 2025-07-21T07:06:57Z |
| suse-su-2025:02401-1 | Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) | 2025-07-21T06:34:10Z | 2025-07-21T06:34:10Z |
| suse-su-2025:02400-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-07-21T06:34:03Z | 2025-07-21T06:34:03Z |
| suse-su-2025:02399-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-07-21T06:33:56Z | 2025-07-21T06:33:56Z |
| suse-su-2025:02398-1 | Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) | 2025-07-21T06:33:50Z | 2025-07-21T06:33:50Z |
| suse-su-2025:02396-1 | Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5) | 2025-07-21T06:33:38Z | 2025-07-21T06:33:38Z |
| suse-su-2025:02394-1 | Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5) | 2025-07-20T00:04:08Z | 2025-07-20T00:04:08Z |
| suse-su-2025:02393-1 | Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5) | 2025-07-19T18:03:51Z | 2025-07-19T18:03:51Z |
| suse-su-2025:02392-1 | Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5) | 2025-07-19T13:33:38Z | 2025-07-19T13:33:38Z |
| suse-su-2025:02391-1 | Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5) | 2025-07-19T10:33:34Z | 2025-07-19T10:33:34Z |
| suse-su-2025:02390-1 | Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6) | 2025-07-19T06:03:50Z | 2025-07-19T06:03:50Z |
| suse-su-2025:02389-1 | Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6) | 2025-07-19T05:33:43Z | 2025-07-19T05:33:43Z |
| suse-su-2025:02388-1 | Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6) | 2025-07-18T18:33:37Z | 2025-07-18T18:33:37Z |
| suse-su-2025:02387-1 | Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6) | 2025-07-18T18:03:50Z | 2025-07-18T18:03:50Z |
| suse-su-2025:02385-1 | Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6) | 2025-07-18T17:33:30Z | 2025-07-18T17:33:30Z |
| suse-su-2025:02384-1 | Security update for jq | 2025-07-18T16:46:06Z | 2025-07-18T16:46:06Z |
| suse-su-2025:02383-1 | Security update for kubernetes1.26 | 2025-07-18T16:44:46Z | 2025-07-18T16:44:46Z |
| suse-su-2025:02381-1 | Security update for ffmpeg-4 | 2025-07-18T14:58:40Z | 2025-07-18T14:58:40Z |
| suse-su-2025:02375-1 | Security update for glib2 | 2025-07-18T13:16:27Z | 2025-07-18T13:16:27Z |
| suse-su-2025:02372-1 | Security update for FastCGI | 2025-07-18T12:47:08Z | 2025-07-18T12:47:08Z |
| suse-su-2025:02371-1 | Security update for python-requests | 2025-07-18T12:42:43Z | 2025-07-18T12:42:43Z |
| suse-su-2025:02369-1 | Security update for FastCGI | 2025-07-18T12:41:09Z | 2025-07-18T12:41:09Z |
| suse-su-2025:02368-1 | Security update for MozillaThunderbird | 2025-07-18T12:37:54Z | 2025-07-18T12:37:54Z |
| suse-su-2025:02367-1 | Security update for gimp | 2025-07-18T12:37:01Z | 2025-07-18T12:37:01Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-28679 | Intel Gaudi资源管理错误漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28678 | Intel CIP输入验证错误漏洞(CNVD-2025-28678) | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28677 | Intel CIP输入验证错误漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28676 | Intel CIP访问控制不当漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28675 | Intel CIP权限提升漏洞(CNVD-2025-28675) | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28674 | Intel CIP权限提升漏洞(CNVD-2025-28674) | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28673 | Intel CIP信息泄露漏洞(CNVD-2025-28673) | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28672 | Intel CIP权限提升漏洞(CNVD-2025-28672) | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28671 | Intel CIP权限提升漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28670 | Intel CIP信息泄露漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28526 | Dell Command Monitor权限提升漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28525 | Dell CloudLink命令注入漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28524 | Dell CloudLink操作系统命令注入漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28523 | Dell CloudLink命令执行漏洞(CNVD-2025-28523) | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28522 | Dell CloudLink命令执行漏洞(CNVD-2025-28522) | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28521 | Dell CloudLink拒绝服务漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28520 | Dell CloudLink命令执行漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28519 | Dell CloudLink权限提升漏洞 | 2025-11-10 | 2025-11-17 |
| cnvd-2025-28483 | Intel CIP代码问题漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28482 | Intel CIP访问控制不当漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28465 | Intel CIP权限提升漏洞 | 2025-11-14 | 2025-11-17 |
| cnvd-2025-28527 | MantisBT授权问题漏洞(CNVD-2025-28527) | 2025-11-10 | 2025-11-14 |
| cnvd-2025-28011 | Simple Online Hotel Reservation System delete_room.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-28010 | Simple Online Hotel Reservation System delete_pending.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-28009 | Simple Online Hotel Reservation System confirm_reserve.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| cnvd-2025-27985 | Samba操作系统命令注入漏洞 | 2025-10-20 | 2025-11-14 |
| cnvd-2025-27925 | ThinkDashboard跨站脚本漏洞 | 2025-11-11 | 2025-11-14 |
| cnvd-2025-27924 | FoxCMS跨站脚本漏洞 | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27923 | Calibre输入验证错误漏洞(CNVD-2025-27923) | 2025-11-12 | 2025-11-14 |
| cnvd-2025-27911 | Simple Online Hotel Reservation System checkout_query.php文件SQL注入漏洞 | 2025-06-27 | 2025-11-14 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0187 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| CERTFR-2025-AVI-0188 | Multiples vulnérabilités dans les produits Qnap | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| CERTFR-2025-AVI-0187 | Multiples vulnérabilités dans Microsoft Edge | 2025-03-10T00:00:00.000000 | 2025-03-10T00:00:00.000000 |
| certfr-2025-avi-0186 | Multiples vulnérabilités dans les produits IBM | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0185 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0184 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0183 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0182 | Vulnérabilité dans Nagios XI | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0178 | Vulnérabilité dans Elastic Kibana | 2025-03-05T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0186 | Multiples vulnérabilités dans les produits IBM | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0185 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0184 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0183 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0182 | Vulnérabilité dans Nagios XI | 2025-03-07T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| CERTFR-2025-AVI-0178 | Vulnérabilité dans Elastic Kibana | 2025-03-05T00:00:00.000000 | 2025-03-07T00:00:00.000000 |
| certfr-2025-avi-0181 | Vulnérabilité dans les produits Moxa | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0180 | Vulnérabilité dans Cisco Secure Client | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0179 | Vulnérabilité dans Symantec Carbon Black Cloud | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| CERTFR-2025-AVI-0181 | Vulnérabilité dans les produits Moxa | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| CERTFR-2025-AVI-0180 | Vulnérabilité dans Cisco Secure Client | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| CERTFR-2025-AVI-0179 | Vulnérabilité dans Symantec Carbon Black Cloud | 2025-03-06T00:00:00.000000 | 2025-03-06T00:00:00.000000 |
| certfr-2025-avi-0177 | Multiples vulnérabilités dans les produits VMware | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0176 | Multiples vulnérabilités dans les produits Mozilla | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0175 | Vulnérabilité dans LibreOffice | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0174 | Multiples vulnérabilités dans Google Chrome | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| certfr-2025-avi-0173 | Multiples vulnérabilités dans Google Pixel | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| CERTFR-2025-AVI-0177 | Multiples vulnérabilités dans les produits VMware | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| CERTFR-2025-AVI-0176 | Multiples vulnérabilités dans les produits Mozilla | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| CERTFR-2025-AVI-0175 | Vulnérabilité dans LibreOffice | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |
| CERTFR-2025-AVI-0174 | Multiples vulnérabilités dans Google Chrome | 2025-03-05T00:00:00.000000 | 2025-03-05T00:00:00.000000 |