Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-14616 |
4.3 (3.1)
|
Recooty <= 1.0.6 - Cross-Site Request Forgery to Setti… |
recooty |
Recooty – Job Widget (Old Dashboard) |
2026-01-28T11:23:41.712Z | 2026-01-28T15:55:14.348Z |
| CVE-2026-24883 |
3.7 (3.1)
|
In GnuPG before 2.5.17, a long signature packet l… |
GnuPG |
GnuPG |
2026-01-27T18:43:18.883Z | 2026-01-28T15:52:11.076Z |
| CVE-2026-1399 |
4.4 (3.1)
|
WP Google Ad Manager Plugin <= 1.1.0 - Authenticated (… |
miles99 |
WP Google Ad Manager Plugin |
2026-01-28T11:23:42.082Z | 2026-01-28T15:51:55.729Z |
| CVE-2026-1398 |
4.3 (3.1)
|
Change WP URL <= 1.0 - Cross-Site Request Forgery to S… |
chrisnowak |
Change WP URL |
2026-01-28T11:23:42.461Z | 2026-01-28T15:50:37.635Z |
| CVE-2025-68073 |
6.5 (3.1)
|
WordPress GDPR CCPA Compliance Support plugin <= 2.7.4… |
Ninja Team |
GDPR CCPA Compliance Support |
2026-01-22T16:52:07.197Z | 2026-01-28T15:49:44.753Z |
| CVE-2025-26386 |
7.1 (4.0)
|
Stack-based Buffer Overflow in Johnson Controls iSTAR … |
Johnson Controls |
iSTAR Configuration Utility (ICU) |
2026-01-28T11:24:46.317Z | 2026-01-28T15:49:08.575Z |
| CVE-2026-0483 |
6.9 (4.0)
|
Stored Cross-Site Scripting (XSS) vulnerability in Liv… |
LiveHelperChat |
LiveHelperChat |
2026-01-28T11:43:42.484Z | 2026-01-28T15:47:13.081Z |
| CVE-2025-59891 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:52:15.635Z | 2026-01-28T15:46:23.117Z |
| CVE-2026-24882 |
8.4 (3.1)
|
In GnuPG before 2.5.17, a stack-based buffer over… |
GnuPG |
GnuPG |
2026-01-27T18:40:18.166Z | 2026-01-28T15:45:56.231Z |
| CVE-2025-59892 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:52:35.782Z | 2026-01-28T15:45:40.967Z |
| CVE-2024-12397 |
7.4 (3.1)
|
Io.quarkus.http/quarkus-http-core: quarkus http cookie… |
|
|
2024-12-12T09:05:28.451Z | 2026-01-28T15:45:38.773Z |
| CVE-2020-36984 |
8.5 (4.0)
7.8 (3.1)
|
EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path |
Epson |
EPSON |
2026-01-28T12:28:58.749Z | 2026-01-28T15:45:05.554Z |
| CVE-2025-59893 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:52:51.985Z | 2026-01-28T15:43:40.929Z |
| CVE-2025-59894 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:53:24.197Z | 2026-01-28T15:40:28.684Z |
| CVE-2025-68072 |
6.5 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.17 - Br… |
Merv Barrett |
Easy Property Listings |
2026-01-22T16:52:06.979Z | 2026-01-28T15:39:01.232Z |
| CVE-2025-59895 |
8.2 (4.0)
|
Remote denial-of-service (DoS) vulnerability in Sync B… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:55:43.546Z | 2026-01-28T15:38:11.029Z |
| CVE-2025-68507 |
6.5 (3.1)
|
WordPress Icegram plugin <= 3.1.35 - Broken Access Con… |
Icegram |
Icegram |
2026-01-22T16:52:07.377Z | 2026-01-28T15:38:01.128Z |
| CVE-2025-59896 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:13.762Z | 2026-01-28T15:35:37.114Z |
| CVE-2025-59897 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:28.711Z | 2026-01-28T15:34:32.254Z |
| CVE-2024-52616 |
5.3 (3.1)
|
Avahi: avahi wide-area dns predictable transaction ids |
|
|
2024-11-21T20:41:11.636Z | 2026-01-28T15:34:19.759Z |
| CVE-2025-59898 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:44.144Z | 2026-01-28T15:32:32.025Z |
| CVE-2025-59899 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:59:02.326Z | 2026-01-28T15:26:31.667Z |
| CVE-2025-59900 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T12:00:05.516Z | 2026-01-28T15:23:07.693Z |
| CVE-2025-68869 |
9.8 (3.1)
|
WordPress LazyTasks plugin <= 1.4.01 - Privilege Escal… |
LazyCoders LLC |
LazyTasks |
2026-01-22T16:52:10.526Z | 2026-01-28T15:22:59.412Z |
| CVE-2025-69076 |
8.1 (3.1)
|
WordPress Modern Housewife theme <= 1.0.12 - Local Fil… |
AncoraThemes |
Modern Housewife |
2026-01-22T16:52:25.218Z | 2026-01-28T15:20:37.640Z |
| CVE-2025-69421 |
N/A
|
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:26.435Z | 2026-01-28T15:19:41.794Z |
| CVE-2026-24736 |
9.1 (3.1)
|
Squidex has Server-Side Request Forgery (SSRF) Issue i… |
Squidex |
squidex |
2026-01-27T20:54:51.489Z | 2026-01-28T15:17:12.814Z |
| CVE-2025-59901 |
8.5 (4.0)
|
authenticated reflected XSS vulnerability in Sync Bree… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T12:01:30.669Z | 2026-01-28T15:16:54.606Z |
| CVE-2026-24738 |
5.9 (4.0)
|
gmrtd ReadFile Vulnerable to Denial of Service via Exc… |
gmrtd |
gmrtd |
2026-01-27T21:08:29.392Z | 2026-01-28T15:16:31.785Z |
| CVE-2024-52337 |
5.5 (3.1)
|
Tuned: improper sanitization of `instance_name` parame… |
|
|
2024-11-26T15:21:17.538Z | 2026-01-28T15:15:17.757Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-20969 |
5.5 (3.1)
|
Improper input validation in Samsung Gallery prio… |
Samsung Mobile |
Samsung Gallery |
2025-05-07T08:24:24.722Z | 2025-05-07T15:51:19.190Z |
| CVE-2025-47737 |
2.9 (3.1)
|
lib.rs in the trailer crate through 0.1.2 for Rus… |
Geal |
trailer |
2025-05-09T00:00:00.000Z | 2025-05-09T15:54:31.213Z |
| CVE-2025-47735 |
2.9 (3.1)
|
inner::drop in inner.rs in the wgp crate through … |
Nugine |
wgp |
2025-05-09T00:00:00.000Z | 2025-05-09T15:45:02.125Z |
| CVE-2026-22461 |
5.3 (3.1)
|
WordPress CTX Feed plugin <= 6.6.18 - Broken Access Co… |
WebAppick |
CTX Feed |
2026-01-22T16:52:39.747Z | 2026-01-30T20:24:17.214Z |
| CVE-2025-59946 |
7.5 (3.1)
|
NanoMQ has a Use After Free vulnerability via sub info list |
nanomq |
nanomq |
2025-12-27T00:40:51.122Z | 2025-12-29T15:54:27.851Z |
| CVE-2025-59947 |
8.5 (4.0)
|
NanoMQ has Buffer Overflow |
nanomq |
nanomq |
2025-12-15T20:19:17.212Z | 2025-12-15T20:58:37.814Z |
| CVE-2024-3387 |
5.3 (3.1)
|
PAN-OS: Weak Certificate Strength in Panorama Software… |
Palo Alto Networks |
PAN-OS |
2024-04-10T17:06:36.676Z | 2024-08-01T20:12:06.646Z |
| CVE-2024-5911 |
7 (4.0)
|
PAN-OS: File Upload Vulnerability in the Panorama Web … |
Palo Alto Networks |
PAN-OS |
2024-07-10T18:40:02.209Z | 2024-08-01T21:25:03.109Z |
| CVE-2024-37282 |
8.1 (3.1)
|
It was identified that under certain specific pre… |
Elastic |
Elastic Cloud Enterprise |
2024-06-28T04:58:18.200Z | 2024-08-02T03:50:55.693Z |
| CVE-2025-24483 |
6.5 (3.0)
|
NULL pointer dereference vulnerability exists in … |
Humming Heads Inc. |
Defense Platform Home Edition |
2025-02-06T07:05:56.408Z | 2025-02-12T19:51:10.698Z |
| CVE-2025-24845 |
6.3 (3.0)
|
Improper neutralization of argument delimiters in… |
Humming Heads Inc. |
Defense Platform Home Edition |
2025-02-06T07:06:05.293Z | 2025-02-12T19:51:10.579Z |
| CVE-2025-27924 |
5.4 (3.1)
|
Nintex Automation 5.6 and 5.7 before 5.8 has a st… |
Nintex |
Automation |
2025-03-10T00:00:00.000Z | 2025-03-11T15:51:51.478Z |
| CVE-2024-24506 |
6.1 (3.1)
|
Cross Site Scripting (XSS) vulnerability in Lime … |
n/a |
n/a |
2024-04-03T00:00:00 | 2024-08-15T20:11:13.215Z |
| CVE-2024-27674 |
7.8 (3.1)
|
Macro Expert through 4.9.4 allows BUILTIN\Users:(… |
n/a |
n/a |
2024-04-03T00:00:00 | 2024-10-28T13:57:54.101Z |
| CVE-2024-2433 |
4.3 (3.1)
|
PAN-OS: Improper Privilege Management Vulnerability in… |
Palo Alto Networks |
PAN-OS |
2024-03-13T17:51:45.578Z | 2024-08-12T18:54:08.465Z |
| CVE-2022-27540 |
7.8 (3.1)
|
A potential Time-of-Check to Time-of Use (TOCTOU)… |
HP Inc. |
HP PC BIOS |
2024-06-28T19:00:28.307Z | 2024-08-22T14:52:53.925Z |
| CVE-2024-39063 |
8.8 (3.1)
|
Lime Survey <= 6.5.12 is vulnerable to Cross Site… |
n/a |
n/a |
2024-07-09T00:00:00 | 2024-08-02T04:19:20.617Z |
| CVE-2024-7887 |
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
|
LimeSurvey File Upload index.php denial of service |
n/a |
LimeSurvey |
2024-08-17T09:00:05.806Z | 2024-08-19T14:57:41.521Z |
| CVE-2025-69289 |
5.1 (4.0)
|
Discourse has insecure default configuration that allo… |
discourse |
discourse |
2026-01-28T19:33:58.921Z | 2026-01-28T20:15:03.696Z |
| CVE-2024-42756 |
8.8 (3.1)
|
An issue in Netgear DGN1000WW v.1.1.00.45 allows … |
n/a |
n/a |
2024-08-23T00:00:00 | 2024-08-27T14:47:10.891Z |
| CVE-2025-69218 |
7.1 (4.0)
|
Discourse moderators can access admin-only reports exp… |
discourse |
discourse |
2026-01-28T19:30:28.793Z | 2026-01-28T19:45:12.386Z |
| CVE-2025-68934 |
6.5 (3.1)
|
Discourse Has Denial of Service (DoS) Vulnerability in… |
discourse |
discourse |
2026-01-28T19:19:59.627Z | 2026-01-28T19:46:16.472Z |
| CVE-2025-68933 |
6.9 (3.1)
|
Discourse non-admin moderators can exfiltrate private … |
discourse |
discourse |
2026-01-28T19:17:23.713Z | 2026-01-28T20:16:21.375Z |
| CVE-2025-68666 |
5.9 (4.0)
|
Discourse users archives leaked to users with moderati… |
discourse |
discourse |
2026-01-28T19:14:09.984Z | 2026-01-28T20:20:50.203Z |
| CVE-2025-68662 |
7.6 (3.1)
|
FinalDestination hostname matching allows SSRF protect… |
discourse |
discourse |
2026-01-28T19:12:24.903Z | 2026-01-28T20:21:50.707Z |
| CVE-2025-68660 |
5.3 (4.0)
|
Discourse AI Discover's continue conversation allows t… |
discourse |
discourse |
2026-01-28T18:55:11.557Z | 2026-01-28T19:27:18.739Z |
| CVE-2025-68659 |
4.3 (3.1)
|
Discourse has DoS vulnerability in username change endpoint |
discourse |
discourse |
2026-01-28T18:51:40.341Z | 2026-01-28T20:20:41.258Z |
| CVE-2023-33940 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in IFram… |
Liferay |
Portal |
2023-05-24T13:55:23.431Z | 2024-10-22T15:52:33.662Z |
| CVE-2023-33939 |
5.4 (3.1)
|
Cross-site scripting (XSS) vulnerability in the M… |
Liferay |
Portal |
2023-05-24T13:41:22.321Z | 2024-10-22T15:52:40.777Z |
| CVE-2025-68479 |
7.1 (3.1)
|
Discourse subscriptions are susceptible to takeover |
discourse |
discourse |
2026-01-28T18:34:00.486Z | 2026-01-29T18:11:42.379Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-3387 | A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an att… | 2024-04-10T17:15:57.787 | 2026-01-30T21:13:20.710 |
| fkie_cve-2024-5911 | An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authentic… | 2024-07-10T19:15:11.547 | 2026-01-30T21:11:32.447 |
| fkie_cve-2024-37282 | It was identified that under certain specific preconditions, an API key that was originally created… | 2024-06-28T05:15:11.633 | 2026-01-30T21:10:25.350 |
| fkie_cve-2025-24483 | NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and ear… | 2025-02-06T08:15:30.327 | 2026-01-30T21:07:00.390 |
| fkie_cve-2025-24845 | Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in … | 2025-02-06T08:15:30.673 | 2026-01-30T21:05:58.620 |
| fkie_cve-2025-27924 | Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a … | 2025-03-10T23:15:35.280 | 2026-01-30T21:03:11.060 |
| fkie_cve-2024-24506 | Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, … | 2024-04-03T07:15:42.663 | 2026-01-30T21:02:09.183 |
| fkie_cve-2024-27674 | Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\Gras… | 2024-04-03T17:15:55.710 | 2026-01-30T21:01:08.850 |
| fkie_cve-2024-2433 | An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenti… | 2024-03-13T18:15:08.893 | 2026-01-30T20:58:17.900 |
| fkie_cve-2022-27540 | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS … | 2024-06-28T19:15:03.407 | 2026-01-30T20:53:03.233 |
| fkie_cve-2024-39063 | Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is onl… | 2024-07-09T20:15:12.080 | 2026-01-30T20:52:36.270 |
| fkie_cve-2024-7887 | A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by thi… | 2024-08-17T09:15:12.040 | 2026-01-30T20:51:22.553 |
| fkie_cve-2025-69289 | Discourse is an open source discussion platform. A privilege escalation vulnerability in versions p… | 2026-01-28T20:16:13.713 | 2026-01-30T20:47:35.167 |
| fkie_cve-2024-42756 | An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via th… | 2024-08-23T16:15:06.840 | 2026-01-30T20:47:34.863 |
| fkie_cve-2025-69218 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:13.553 | 2026-01-30T20:47:31.610 |
| fkie_cve-2025-68934 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.627 | 2026-01-30T20:47:28.030 |
| fkie_cve-2025-68933 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.477 | 2026-01-30T20:47:13.950 |
| fkie_cve-2025-68666 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.010 | 2026-01-30T20:47:05.087 |
| fkie_cve-2025-68662 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:11.860 | 2026-01-30T20:44:48.133 |
| fkie_cve-2025-68660 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T19:16:23.753 | 2026-01-30T20:44:35.807 |
| fkie_cve-2025-68659 | Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and… | 2026-01-28T19:16:23.563 | 2026-01-30T20:44:05.130 |
| fkie_cve-2023-33940 | Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through… | 2023-05-24T14:15:09.697 | 2026-01-30T20:43:54.860 |
| fkie_cve-2023-33939 | Cross-site scripting (XSS) vulnerability in the Modified Facet widget in Liferay Portal 7.1.0 throu… | 2023-05-24T14:15:09.623 | 2026-01-30T20:43:29.767 |
| fkie_cve-2025-68479 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T19:16:23.380 | 2026-01-30T20:43:17.910 |
| fkie_cve-2023-3426 | The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 8… | 2023-08-02T10:15:09.887 | 2026-01-30T20:43:02.643 |
| fkie_cve-2025-21746 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash w… | 2025-02-27T03:15:15.243 | 2026-01-30T20:42:52.380 |
| fkie_cve-2025-52986 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (… | 2025-07-11T16:15:26.020 | 2026-01-30T20:42:45.180 |
| fkie_cve-2025-13001 | The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it … | 2025-12-02T06:15:45.543 | 2026-01-30T20:42:15.960 |
| fkie_cve-2025-13000 | The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowin… | 2025-12-02T06:15:45.160 | 2026-01-30T20:42:11.060 |
| fkie_cve-2025-9014 | A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP… | 2026-01-15T18:16:38.100 | 2026-01-30T20:42:05.277 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-c6jq-h3hj-7vwx |
8.8 (3.1)
|
Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier… | 2026-01-22T18:30:40Z | 2026-01-28T00:31:39Z |
| ghsa-9m3q-c2qh-cgvf |
8.1 (3.1)
|
Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploi… | 2026-01-23T15:31:35Z | 2026-01-28T00:31:39Z |
| ghsa-492m-9864-4xjr |
8.8 (3.1)
|
Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-direc… | 2026-01-22T18:30:38Z | 2026-01-28T00:31:39Z |
| ghsa-vw4j-gphv-4524 |
7.5 (3.1)
|
Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Con… | 2026-01-22T18:30:35Z | 2026-01-28T00:31:38Z |
| ghsa-rmjp-62mc-qxg4 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-mh85-rfqv-qpgw |
9.3 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-28T00:31:38Z |
| ghsa-jjf6-qp7m-45xc |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-h9pv-47wv-cp2w |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-f46g-p4wx-ggmf |
8.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in designthemes Vivagh vivagh allows Object Injecti… | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-cr2h-34f7-vx28 |
6.5 (3.1)
|
Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectl… | 2026-01-22T18:30:35Z | 2026-01-28T00:31:38Z |
| ghsa-c759-qxvg-wjj9 |
5.8 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-7jq6-95cj-mcx6 |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:38Z | 2026-01-28T00:31:38Z |
| ghsa-6h74-r6p3-8hvh |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-28T00:31:38Z |
| ghsa-4ffx-5v5p-gf97 |
6.5 (3.1)
|
Missing Authorization vulnerability in vrpr WDV One Page Docs wdv-one-page-docs allows Exploiting I… | 2026-01-22T18:30:36Z | 2026-01-28T00:31:38Z |
| ghsa-34g3-9529-6r2w |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-28T00:31:38Z |
| ghsa-x7q3-hv76-4q29 |
6.5 (3.1)
|
Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-complianc… | 2026-01-22T18:30:35Z | 2026-01-28T00:31:37Z |
| ghsa-qj62-79j9-vf3g |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:35Z | 2026-01-28T00:31:37Z |
| ghsa-grjj-54gm-q5vf |
4.1 (3.1)
|
Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a m… | 2024-08-27T21:31:13Z | 2026-01-28T00:31:37Z |
| ghsa-9chr-m38j-w26g |
5.9 (3.1)
|
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in Wo… | 2024-08-30T00:31:23Z | 2026-01-28T00:31:37Z |
| ghsa-6mw6-mj76-grwc |
5.5 (4.0)
|
gix-date can create non-utf8 string with `TimeBuf::as_str` | 2026-01-05T19:43:29Z | 2026-01-27T22:23:11Z |
| ghsa-8rgq-m2pm-jvmg |
5.5 (4.0)
|
Duplicate Advisory: gix-date can create non-utf8 string with `TimeBuf::as_str` | 2026-01-26T21:30:36Z | 2026-01-27T22:22:40Z |
| ghsa-63v5-26vq-m4vm |
3.1 (3.1)
|
Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods | 2026-01-26T21:30:36Z | 2026-01-27T21:56:13Z |
| ghsa-vjjg-c428-g9r3 |
9.8 (3.1)
9.3 (4.0)
|
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Sessi… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:50Z |
| ghsa-mpc3-hqr8-w5f3 |
8.4 (3.1)
|
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the P… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-9vq4-c9v3-2hx5 |
10.0 (4.0)
|
A security issue has been identified in ibaPDA that could allow unauthorized actions on the file sy… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-7246-cvp4-g68w |
3.7 (3.1)
|
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success wit… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-5w36-x85h-pphm |
8.1 (3.1)
|
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped … | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-xfvq-g9gj-p73c |
7.8 (3.1)
8.5 (4.0)
|
Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local att… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:48Z |
| ghsa-ghv4-rv7x-5rvv |
6.4 (3.1)
|
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up … | 2026-01-27T21:31:48Z | 2026-01-27T21:31:48Z |
| ghsa-wg6j-wq96-5mm4 |
7.8 (3.1)
8.5 (4.0)
|
Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its W… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2013-30 |
|
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in Mo… | pymongo | 2013-08-15T17:55:00Z | 2021-08-27T03:22:17.455260Z |
| pysec-2010-30 |
|
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows c… | python-cjson | 2010-07-02T19:00:00Z | 2021-08-27T03:22:17.891561Z |
| pysec-2020-249 |
|
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory acc… | py-bcrypt | 2020-01-28T15:15:00Z | 2021-08-27T03:22:16.441551Z |
| pysec-2019-196 |
|
While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was disc… | pyarrow | 2019-11-08T19:15:00Z | 2021-08-27T03:22:16.568373Z |
| pysec-2019-195 |
|
It was discovered that the C++ implementation (which underlies the R, Python and Ruby imp… | pyarrow | 2019-11-08T19:15:00Z | 2021-08-27T03:22:16.533972Z |
| pysec-2018-98 |
|
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that l… | pycsw | 2018-08-01T18:29:00Z | 2021-08-27T03:22:16.790168Z |
| pysec-2018-97 |
|
lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key para… | pycrypto | 2018-02-03T15:29:00Z | 2021-08-27T03:22:16.704345Z |
| pysec-2018-96 |
|
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers … | py-evm | 2018-11-12T02:29:00Z | 2021-08-27T03:22:16.474976Z |
| pysec-2017-94 |
|
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptogra… | pycrypto | 2017-02-15T15:59:00Z | 2021-08-27T03:22:16.665546Z |
| pysec-2017-93 |
|
A HTTP/2 implementation built using any version of the Python priority library prior to v… | priority | 2017-01-10T15:59:00Z | 2021-08-27T03:22:16.246169Z |
| pysec-2013-29 |
|
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the p… | pycrypto | 2013-10-26T17:55:00Z | 2021-08-27T03:22:16.634811Z |
| pysec-2012-16 |
|
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal sche… | pycrypto | 2012-06-17T03:41:00Z | 2021-08-27T03:22:16.601238Z |
| pysec-2020-248 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied per… | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.576448Z |
| pysec-2020-247 |
|
Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.505885Z |
| pysec-2020-246 |
|
Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to … | plone | 2020-12-30T19:15:00Z | 2021-08-27T03:22:11.436437Z |
| pysec-2011-22 |
|
Plone 4.1.3 and earlier computes hash values for form parameters without restricting the … | plone | 2011-12-30T01:55:00Z | 2021-08-27T03:22:11.387960Z |
| pysec-2021-139 |
|
An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sani… | pillow | 2021-06-02T15:15:00Z | 2021-08-27T03:22:10.501313Z |
| pysec-2021-138 |
|
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… | pillow | 2021-06-02T16:15:00Z | 2021-08-27T03:22:10.437557Z |
| pysec-2021-137 |
|
An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDeco… | pillow | 2021-06-02T16:15:00Z | 2021-08-27T03:22:10.375655Z |
| pysec-2017-92 |
|
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1… | pillow | 2017-04-24T18:59:00Z | 2021-08-27T03:22:10.292415Z |
| pysec-2014-87 |
|
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers … | pillow | 2014-04-27T20:55:00Z | 2021-08-27T03:22:10.225452Z |
| pysec-2012-15 |
|
Paste Script 1.7.5 and earlier does not properly set group memberships during execution w… | paste | 2012-05-01T19:55:00Z | 2021-08-27T03:22:10.166915Z |
| pysec-2010-29 |
|
Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implement… | paste | 2010-11-06T00:00:00Z | 2021-08-27T03:22:10.125815Z |
| pysec-2008-8 |
|
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not… | paramiko | 2008-01-16T23:00:00Z | 2021-08-27T03:22:10.050129Z |
| pysec-2020-245 |
|
ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of t… | ovirt-engine-sdk-python | 2020-01-02T18:15:00Z | 2021-08-27T03:22:09.942049Z |
| pysec-2020-244 |
|
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to… | omero-web | 2020-06-17T17:15:00Z | 2021-08-27T03:22:09.833484Z |
| pysec-2020-243 |
|
An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova befor… | nova | 2020-08-26T19:15:00Z | 2021-08-27T03:22:09.410263Z |
| pysec-2019-194 |
|
An access-control flaw was found in the Octavia service when the cloud platform was deplo… | octavia | 2019-06-03T19:29:00Z | 2021-08-27T03:22:09.805726Z |
| pysec-2019-193 |
|
In a default Red Hat Openstack Platform Director installation, openstack-octavia before v… | octavia | 2019-03-26T18:29:00Z | 2021-08-27T03:22:09.768851Z |
| pysec-2019-192 |
|
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1,… | novajoin | 2019-07-30T17:15:00Z | 2021-08-27T03:22:09.442632Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32194 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.119297Z |
| gsd-2024-32193 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.079299Z |
| gsd-2024-32192 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.104905Z |
| gsd-2024-32191 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.118896Z |
| gsd-2024-32190 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049965Z |
| gsd-2024-32189 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.105888Z |
| gsd-2024-32188 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.125213Z |
| gsd-2024-32187 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.080085Z |
| gsd-2024-32186 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.082122Z |
| gsd-2024-32185 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.055229Z |
| gsd-2024-32184 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.094410Z |
| gsd-2024-32183 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.133447Z |
| gsd-2024-32182 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.047895Z |
| gsd-2024-32181 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.130345Z |
| gsd-2024-32180 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.142032Z |
| gsd-2024-32179 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.140256Z |
| gsd-2024-32178 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.098921Z |
| gsd-2024-32177 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.145555Z |
| gsd-2024-32176 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.135621Z |
| gsd-2024-32175 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.121903Z |
| gsd-2024-32174 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.120918Z |
| gsd-2024-32173 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.075055Z |
| gsd-2024-32172 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.043833Z |
| gsd-2024-32171 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.078624Z |
| gsd-2024-32170 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.075254Z |
| gsd-2024-32169 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.118678Z |
| gsd-2024-32168 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.138370Z |
| gsd-2024-32167 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.098511Z |
| gsd-2024-32166 | Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Cont… | 2024-04-13T05:02:29.122096Z |
| gsd-2024-32165 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.049154Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-48830 | Malicious code in cross-sessions (npm) | 2025-10-23T19:29:15Z | 2025-12-24T10:09:27Z |
| mal-2025-48518 | Malicious code in dist-decoder (npm) | 2025-10-20T03:06:26Z | 2025-12-24T10:09:27Z |
| mal-2025-47848 | Malicious code in epc-booking-insights-core (npm) | 2025-09-26T04:46:21Z | 2025-12-24T10:09:27Z |
| mal-2025-2876 | Malicious code in ethers-providerz (npm) | 2025-03-28T12:45:51Z | 2025-12-24T10:09:27Z |
| mal-2025-2731 | Malicious code in ethers-provider2 (npm) | 2025-03-26T17:27:08Z | 2025-12-24T10:09:27Z |
| mal-2025-191572 | Malicious code in cwanner (npm) | 2025-12-01T13:06:26Z | 2025-12-24T10:09:27Z |
| mal-2025-191569 | Malicious code in cookie-validate (npm) | 2025-12-01T13:05:53Z | 2025-12-24T10:09:27Z |
| mal-2024-2370 | Malicious code in financialtimes-classic (npm) | 2024-06-25T12:43:03Z | 2025-12-24T10:09:27Z |
| mal-2024-10974 | Malicious code in etherscancontracthandler (npm) | 2024-11-26T23:52:16Z | 2025-12-24T10:09:27Z |
| MAL-2025-48830 | Malicious code in cross-sessions (npm) | 2025-10-23T19:29:15Z | 2025-12-24T10:09:27Z |
| MAL-2025-48518 | Malicious code in dist-decoder (npm) | 2025-10-20T03:06:26Z | 2025-12-24T10:09:27Z |
| MAL-2025-47848 | Malicious code in epc-booking-insights-core (npm) | 2025-09-26T04:46:21Z | 2025-12-24T10:09:27Z |
| MAL-2025-2876 | Malicious code in ethers-providerz (npm) | 2025-03-28T12:45:51Z | 2025-12-24T10:09:27Z |
| MAL-2025-2731 | Malicious code in ethers-provider2 (npm) | 2025-03-26T17:27:08Z | 2025-12-24T10:09:27Z |
| MAL-2025-191572 | Malicious code in cwanner (npm) | 2025-12-01T13:06:26Z | 2025-12-24T10:09:27Z |
| MAL-2025-191569 | Malicious code in cookie-validate (npm) | 2025-12-01T13:05:53Z | 2025-12-24T10:09:27Z |
| MAL-2024-2370 | Malicious code in financialtimes-classic (npm) | 2024-06-25T12:43:03Z | 2025-12-24T10:09:27Z |
| MAL-2024-10974 | Malicious code in etherscancontracthandler (npm) | 2024-11-26T23:52:16Z | 2025-12-24T10:09:27Z |
| mal-2025-5074 | Malicious code in build-react-wrapper (npm) | 2025-06-18T10:23:35Z | 2025-12-24T10:09:26Z |
| mal-2025-49380 | Malicious code in chai-await-test (npm) | 2025-11-07T03:52:52Z | 2025-12-24T10:09:26Z |
| mal-2025-41538 | Malicious code in bsd-ui-stylekit (npm) | 2025-08-28T07:23:31Z | 2025-12-24T10:09:26Z |
| mal-2025-191567 | Malicious code in chai-sync (npm) | 2025-12-01T13:05:09Z | 2025-12-24T10:09:26Z |
| mal-2025-191566 | Malicious code in chai-promise-chain (npm) | 2025-12-01T13:05:08Z | 2025-12-24T10:09:26Z |
| mal-2025-190634 | Malicious code in @validate-pubkey/hex (npm) | 2025-11-24T05:47:56Z | 2025-12-24T10:09:26Z |
| mal-2025-190624 | Malicious code in base62-58x (npm) | 2025-11-24T03:27:37Z | 2025-12-24T10:09:26Z |
| mal-2025-190599 | Malicious code in @vreden-team/baileys (npm) | 2025-11-21T03:58:09Z | 2025-12-24T10:09:26Z |
| mal-2025-1721 | Malicious code in amazon-test (npm) | 2025-03-03T13:15:56Z | 2025-12-24T10:09:26Z |
| mal-2025-149905 | Malicious code in aes-core-valid-ipherv (npm) | 2025-11-12T06:10:33Z | 2025-12-24T10:09:26Z |
| mal-2024-11326 | Malicious code in ccs-react-lib (npm) | 2024-12-08T23:12:10Z | 2025-12-24T10:09:26Z |
| MAL-2025-5074 | Malicious code in build-react-wrapper (npm) | 2025-06-18T10:23:35Z | 2025-12-24T10:09:26Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0631 | Octopus Deploy: Schwachstelle ermöglicht Manipulation von Dateien | 2025-03-24T23:00:00.000+00:00 | 2025-03-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0624 | Microsoft Edge: Mehrere Schwachstellen | 2025-03-23T23:00:00.000+00:00 | 2025-03-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3692 | Apple macOS: Mehrere Schwachstellen | 2024-12-11T23:00:00.000+00:00 | 2025-03-24T23:00:00.000+00:00 |
| wid-sec-w-2024-1724 | Apple iOS und iPadOS: Mehrere Schwachstellen | 2024-07-29T22:00:00.000+00:00 | 2025-03-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0623 | PyTorch: Mehrere Schwachstellen | 2025-03-23T23:00:00.000+00:00 | 2025-03-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0621 | Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-03-23T23:00:00.000+00:00 | 2025-03-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0523 | hostapd (RADIUS): Schwachstelle ermöglicht Denial of Service | 2025-03-11T23:00:00.000+00:00 | 2025-03-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0202 | D-LINK DSL-3788 Router: Schwachstelle ermöglicht Codeausführung | 2025-01-27T23:00:00.000+00:00 | 2025-03-23T23:00:00.000+00:00 |
| wid-sec-w-2024-0036 | Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen | 2024-01-09T23:00:00.000+00:00 | 2025-03-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0620 | libxml2: Schwachstelle ermöglicht Denial of Service | 2014-05-06T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0619 | libxml2: Schwachstelle ermöglicht Denial of Service | 2015-07-21T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0618 | libxml2: Schwachstelle ermöglicht Denial of Service | 2015-10-21T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0617 | libxml2: Schwachstelle ermöglicht Denial of Service | 2015-11-02T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0616 | libxml2: Schwachstelle ermöglicht Denial of Service | 2020-01-27T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0614 | Synology Replication Service: Schwachstelle ermöglicht Codeausführung | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0613 | xpdf: Schwachstelle ermöglicht Denial of Service | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0612 | IBM Security Guardium: Mehrere Schwachstellen | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0611 | Liferay Portal und Liferay DXP: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0609 | Kubernetes: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0608 | OpenBSD: Schwachstelle ermöglicht Denial of Service | 2025-03-20T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3391 | libxml2: Schwachstelle ermöglicht Denial of Service | 2014-10-16T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3390 | libxml2: Mehrere Schwachstellen | 2015-11-18T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3389 | libxml2: Mehrere Schwachstellen | 2015-11-22T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3384 | libxml2: Mehrere Schwachstellen | 2016-05-24T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3383 | libxml2: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2016-06-09T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3381 | libxml2: Mehrere Schwachstellen ermöglichen Denial of Service | 2016-12-07T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3380 | libxml2: Schwachstelle ermöglicht Denial of Service | 2020-01-01T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2024-3180 | Apache Camel und mehrere Red Hat Produkte: Mehrere Schwachstellen | 2024-10-14T22:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2022-0280 | PHP: Schwachstelle ermöglicht Denial of Service | 2022-02-16T23:00:00.000+00:00 | 2025-03-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0605 | xwiki: Mehrere Schwachstellen | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:8932 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.26.0 | 2022-12-12T18:07:50+00:00 | 2026-02-03T21:13:48+00:00 |
| rhsa-2022:8893 | Red Hat Security Advisory: OpenShift Container Platform 4.11.20 security update | 2022-12-15T21:32:49+00:00 | 2026-02-03T21:13:48+00:00 |
| rhsa-2022:8781 | Red Hat Security Advisory: Logging Subsystem 5.5.5 - Red Hat OpenShift security update | 2022-12-08T07:37:32+00:00 | 2026-02-03T21:13:48+00:00 |
| rhsa-2022:8750 | Red Hat Security Advisory: OpenShift Virtualization 4.11.1 security and bug fix update | 2022-12-01T21:09:40+00:00 | 2026-02-03T21:13:47+00:00 |
| rhsa-2022:8634 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.1.1 security and bug fix update | 2022-11-28T02:51:35+00:00 | 2026-02-03T21:13:46+00:00 |
| rhsa-2022:8626 | Red Hat Security Advisory: OpenShift Container Platform 4.11.17 packages and security update | 2022-11-28T20:47:08+00:00 | 2026-02-03T21:13:46+00:00 |
| rhsa-2022:8535 | Red Hat Security Advisory: OpenShift Container Platform 4.11.16 security update | 2022-11-24T04:13:37+00:00 | 2026-02-03T21:13:46+00:00 |
| rhsa-2022:8534 | Red Hat Security Advisory: OpenShift Container Platform 4.11.16 security update | 2022-11-24T04:11:41+00:00 | 2026-02-03T21:13:45+00:00 |
| rhsa-2022:8250 | Red Hat Security Advisory: grafana-pcp security update | 2022-11-15T15:16:26+00:00 | 2026-02-03T21:13:43+00:00 |
| rhsa-2022:8098 | Red Hat Security Advisory: toolbox security and bug fix update | 2022-11-15T15:12:42+00:00 | 2026-02-03T21:13:43+00:00 |
| rhsa-2022:8057 | Red Hat Security Advisory: grafana security, bug fix, and enhancement update | 2022-11-15T10:31:43+00:00 | 2026-02-03T21:13:43+00:00 |
| rhsa-2022:8008 | Red Hat Security Advisory: buildah security and bug fix update | 2022-11-15T15:06:08+00:00 | 2026-02-03T21:13:41+00:00 |
| rhsa-2022:7950 | Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update | 2022-11-15T12:38:51+00:00 | 2026-02-03T21:13:40+00:00 |
| rhsa-2022:7874 | Red Hat Security Advisory: OpenShift Container Platform 4.8.53 bug fix and security update | 2022-11-18T05:14:22+00:00 | 2026-02-03T21:13:40+00:00 |
| rhsa-2022:7648 | Red Hat Security Advisory: grafana-pcp security update | 2022-11-08T09:46:12+00:00 | 2026-02-03T21:13:39+00:00 |
| rhsa-2022:7548 | Red Hat Security Advisory: Image Builder security, bug fix, and enhancement update | 2022-11-08T09:47:13+00:00 | 2026-02-03T21:13:38+00:00 |
| rhsa-2022:7529 | Red Hat Security Advisory: container-tools:3.0 security update | 2022-11-08T09:43:29+00:00 | 2026-02-03T21:13:36+00:00 |
| rhsa-2022:7519 | Red Hat Security Advisory: grafana security, bug fix, and enhancement update | 2022-11-08T09:34:04+00:00 | 2026-02-03T21:13:36+00:00 |
| rhsa-2022:7469 | Red Hat Security Advisory: container-tools:4.0 security and bug fix update | 2022-11-08T09:43:38+00:00 | 2026-02-03T21:13:36+00:00 |
| rhsa-2022:7457 | Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update | 2022-11-08T09:27:39+00:00 | 2026-02-03T21:13:35+00:00 |
| rhsa-2022:7435 | Red Hat Security Advisory: Logging Subsystem 5.4.8 - Red Hat OpenShift security update | 2022-11-16T12:13:01+00:00 | 2026-02-03T21:13:34+00:00 |
| rhsa-2022:7434 | Red Hat Security Advisory: Logging Subsystem 5.5.4 - Red Hat OpenShift security update | 2022-11-10T03:50:23+00:00 | 2026-02-03T21:13:34+00:00 |
| rhsa-2022:7407 | Red Hat Security Advisory: Service Binding Operator 1.3.1 security update | 2022-11-03T13:32:17+00:00 | 2026-02-03T21:13:32+00:00 |
| rhsa-2022:7401 | Red Hat Security Advisory: OpenShift Container Platform 4.12 security update | 2023-01-17T19:35:30+00:00 | 2026-02-03T21:13:32+00:00 |
| rhsa-2022:7399 | Red Hat Security Advisory: OpenShift Container Platform 4.12.0 bug fix and security update | 2023-01-17T19:36:40+00:00 | 2026-02-03T21:13:31+00:00 |
| rhsa-2022:7398 | Red Hat Security Advisory: OpenShift Container Platform 4.12.0 packages and security update | 2023-01-17T19:29:22+00:00 | 2026-02-03T21:13:30+00:00 |
| rhsa-2022:6905 | Red Hat Security Advisory: OpenShift Container Platform 4.9.50 bug fix and security update | 2022-10-19T19:49:51+00:00 | 2026-02-03T21:13:30+00:00 |
| rhsa-2022:7261 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.5 security and bug fix update | 2022-10-31T10:58:27+00:00 | 2026-02-03T21:13:29+00:00 |
| rhsa-2022:7216 | Red Hat Security Advisory: OpenShift Container Platform 4.9.51 bug fix and security update | 2022-11-03T05:55:12+00:00 | 2026-02-03T21:13:28+00:00 |
| rhsa-2022:7211 | Red Hat Security Advisory: OpenShift Container Platform 4.10.39 bug fix and security update | 2022-11-02T07:24:04+00:00 | 2026-02-03T21:13:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-235-05 | Measuresoft ScadaPro Server | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-03 | mySCADA myPRO | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-235-02 | Delta Industrial Automation DIALink | 2022-08-23T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-153-02 | Illumina Local Run Manager | 2022-06-02T00:00:00.000000Z | 2022-08-23T00:00:00.000000Z |
| icsa-22-228-07 | Sequi PortBloque S | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-06 | Emerson Proficy Machine Edition | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-05 | B&R Industrial Automation Automation Studio 4 | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-04 | Softing Secure Integration Server | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-03 | Delta Industrial Automation DRAS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-228-01 | Yokogawa CENTUM Controller FCS | 2022-08-16T00:00:00.000000Z | 2022-08-16T00:00:00.000000Z |
| icsa-22-223-06 | Siemens SICAM TOOLBOX II | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-04 | Emerson ROC800, ROC800L and DL8000 | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-03 | Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 | 2022-08-11T00:00:00.000000Z | 2022-08-11T00:00:00.000000Z |
| icsa-22-223-05 | Siemens SICAM A8000 Web Server Module | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-223-02 | Siemens Teamcenter | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-223-01 | Siemens Simcenter STAR-CCM+ | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-221-03 | Emerson OpenBSI | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-221-02 | Emerson ControlWave | 2022-08-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-195-15 | Siemens SIMATIC eaSie Core Package | 2022-07-12T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-195-07 | Siemens Datalogics File Parsing Vulnerability | 2022-07-12T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-167-13 | Siemens Teamcenter | 2022-06-14T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-132-16 | Siemens Teamcenter | 2022-05-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-132-13 | Siemens Industrial Devices using libcurl | 2022-05-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-041-05 | Siemens SICAM TOOLBOX II (Update A) | 2022-02-08T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-041-02 | Siemens SIMATIC WinCC and PCS | 2022-02-08T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-21-194-06 | Siemens SIMATIC Software Products (Update B) | 2021-07-13T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-20-315-04 | Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A) | 2020-11-10T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-20-196-05 | Siemens UMC Stack (Update H) | 2020-07-14T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-19-134-09 | Siemens SIMATIC Panels and WinCC (TIA Portal) | 2019-04-09T00:00:00.000000Z | 2022-08-09T00:00:00.000000Z |
| icsa-22-216-01 | Digi ConnectPort X2D | 2022-08-04T00:00:00.000000Z | 2022-08-04T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-vman-traversal-hQh24tmk | Cisco SD-WAN vManage Software Directory Traversal Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepestd-8c3j9vc | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepestd-8C3J9Vc | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepeshlg-tjghoqca | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepeshlg-tJghOQcA | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepegr-4xynyluj | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-vepegr-4xynYLUj | Cisco SD-WAN Software Privilege Escalation Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-tele-info-dreglpdq | Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-tele-info-DrEGLpDQ | Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-ise-xxs-pkjcmq9d | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-ise-xxs-pkjCmq9d | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-imp-dos-utx2dqu2 | Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-imp-dos-uTx2dqu2 | Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-esa-zip-bypass-gbu4gttg | Cisco Email Security Appliance Zip Content Filter Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-esa-zip-bypass-gbU4gtTg | Cisco Email Security Appliance Zip Content Filter Bypass Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-eff-incperm-9e6h4ybz | Cisco Edge Fog Fabric Resource Exposure Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-eff-incperm-9E6h4yBz | Cisco Edge Fog Fabric Resource Exposure Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-cimc-enum-cyhep3b7 | Cisco Integrated Management Controller Username Enumeration Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-cimc-enum-CyheP3B7 | Cisco Integrated Management Controller Username Enumeration Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-cimc-civ-pkdbe9x5 | Cisco Integrated Management Controller Command Injection Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-anyconnect-file-read-lsvdd6uh | Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-anyconnect-file-read-LsvDD6Uh | Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-CIMC-CIV-pKDBe9x5 | Cisco Integrated Management Controller Command Injection Vulnerability | 2020-11-04T16:00:00+00:00 | 2020-11-04T16:00:00+00:00 |
| cisco-sa-xbace-oncebys | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-11-02T15:15:42+00:00 |
| cisco-sa-xbace-OnCEbyS | Cisco IOS XE Software Arbitrary Code Execution Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-11-02T15:15:42+00:00 |
| cisco-sa-asa-ssl-dos-7uzwwsey | Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability | 2020-10-22T16:00:00+00:00 | 2020-10-27T20:31:40+00:00 |
| cisco-sa-asa-ssl-dos-7uZWwSEy | Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability | 2020-10-22T16:00:00+00:00 | 2020-10-27T20:31:40+00:00 |
| cisco-sa-fxos-sbbyp-kqp6ngre | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:31:44+00:00 |
| cisco-sa-fxos-sbbyp-KqP6NgrE | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:31:44+00:00 |
| cisco-sa-fxos-cmdinj-pqzvmxcr | Cisco FXOS Software Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:21:04+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-49795 | Libxml: null pointer dereference leads to denial of service (dos) | 2025-06-02T00:00:00.000Z | 2025-09-04T03:44:32.000Z |
| msrc_cve-2025-3576 | Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions | 2025-04-02T00:00:00.000Z | 2025-09-04T03:44:11.000Z |
| msrc_cve-2022-27536 | Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. | 2022-04-02T00:00:00.000Z | 2025-09-04T03:43:28.000Z |
| msrc_cve-2025-54349 | In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow. | 2025-08-02T00:00:00.000Z | 2025-09-04T03:41:51.000Z |
| msrc_cve-2025-38611 | vmci: Prevent the dispatching of uninitialized payloads | 2025-08-02T00:00:00.000Z | 2025-09-04T03:38:53.000Z |
| msrc_cve-2025-38351 | KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush | 2025-07-02T00:00:00.000Z | 2025-09-04T03:38:46.000Z |
| msrc_cve-2020-36422 | An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:38:16.000Z |
| msrc_cve-2025-54350 | In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. | 2025-08-02T00:00:00.000Z | 2025-09-04T03:37:15.000Z |
| msrc_cve-2022-49651 | srcu: Tighten cleanup_srcu_struct() GP checks | 2025-02-02T00:00:00.000Z | 2025-09-04T03:37:05.000Z |
| msrc_cve-2023-24540 | Improper handling of JavaScript whitespace in html/template | 2023-05-01T00:00:00.000Z | 2025-09-04T03:33:46.000Z |
| msrc_cve-2025-40913 | Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T03:33:01.000Z |
| msrc_cve-2025-38566 | sunrpc: fix handling of server side tls alerts | 2025-08-02T00:00:00.000Z | 2025-09-04T03:32:11.000Z |
| msrc_cve-2025-45768 | pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement). | 2025-07-02T00:00:00.000Z | 2025-09-04T03:30:36.000Z |
| msrc_cve-2021-44732 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure. | 2021-12-02T00:00:00.000Z | 2025-09-04T03:28:34.000Z |
| msrc_cve-2025-38605 | wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:28:14.000Z |
| msrc_cve-2025-53605 | The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:26:57.000Z |
| msrc_cve-2022-45410 | When a ServiceWorker intercepted a request with <code>FetchEvent</code>, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect of negating SameSite cookie protections. This was addressed in the spec and then in browsers. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107. | 2022-12-02T00:00:00.000Z | 2025-09-04T03:26:05.000Z |
| msrc_cve-2025-38555 | usb: gadget : fix use-after-free in composite_dev_cleanup() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:24:39.000Z |
| msrc_cve-2020-36426 | An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). | 2021-07-02T00:00:00.000Z | 2025-09-04T03:23:43.000Z |
| msrc_cve-2025-54126 | WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified | 2025-07-02T00:00:00.000Z | 2025-09-04T03:22:55.000Z |
| msrc_cve-2025-38574 | pptp: ensure minimal skb length in pptp_xmit() | 2025-08-02T00:00:00.000Z | 2025-09-04T03:20:25.000Z |
| msrc_cve-2021-24119 | In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:20:13.000Z |
| msrc_cve-2020-36425 | An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock. | 2021-07-02T00:00:00.000Z | 2025-09-04T03:19:33.000Z |
| msrc_cve-2025-38577 | f2fs: fix to avoid panic in f2fs_evict_inode | 2025-08-02T00:00:00.000Z | 2025-09-04T03:16:52.000Z |
| msrc_cve-2023-45283 | Insecure parsing of Windows paths with a \??\ prefix in path/filepath | 2023-11-01T07:00:00.000Z | 2025-09-04T03:15:18.000Z |
| msrc_cve-2025-40777 | A possible assertion failure when 'stale-answer-client-timeout' is set to '0' | 2025-07-02T00:00:00.000Z | 2025-09-04T03:14:11.000Z |
| msrc_cve-2022-30767 | nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | 2022-05-02T00:00:00.000Z | 2025-09-04T03:14:08.000Z |
| msrc_cve-2023-53158 | The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:13:40.000Z |
| msrc_cve-2025-38609 | PM / devfreq: Check governor before using governor->name | 2025-08-02T00:00:00.000Z | 2025-09-04T03:11:58.000Z |
| msrc_cve-2023-53159 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host. | 2025-07-02T00:00:00.000Z | 2025-09-04T03:10:43.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13994-1 | freerdp2-devel-2.11.5-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13993-1 | python310-PyMySQL-1.1.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13992-1 | libopenssl-3-devel-3.1.4-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13991-1 | glibc-2.39-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13990-1 | forgejo-7.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13989-1 | containerd-1.7.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13988-1 | chromedriver-125.0.6422.76-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13987-1 | gitoxide-0.36.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13986-1 | bpftrace-0.20.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13985-1 | xdg-desktop-portal-1.18.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13984-1 | python310-aiosmtpd-1.4.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13983-1 | python-2.7.18-47.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13982-1 | chromedriver-125.0.6422.60-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13981-1 | MozillaThunderbird-115.11.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13980-1 | MozillaFirefox-126.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13979-1 | gitui-0.26.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13978-1 | libwireshark17-4.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13977-1 | python310-pywbem-1.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13976-1 | chromedriver-124.0.6367.207-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13975-1 | warewulf4-4.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13974-1 | ucode-intel-20240514-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13973-1 | perl-Email-MIME-1.954.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13972-1 | nodejs-electron-29.4.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13971-1 | libxml2-2-2.12.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13970-1 | gio-branding-upstream-2.80.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13969-1 | git-cliff-2.2.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13968-1 | git-2.45.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13967-1 | gdk-pixbuf-devel-2.42.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13966-1 | cargo1.77-1.77.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13965-1 | python310-aiohttp-3.9.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-golang-2023-39323 | Arbitrary code execution during build via line directives in cmd/go | 2024-03-06T10:53:48.482Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-39322 | Memory exhaustion in QUIC connection handling in crypto/tls | 2024-03-06T10:53:58.705Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-39321 | Panic when processing post-handshake message on QUIC connections in crypto/tls | 2024-03-06T10:54:10.069Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-39320 | Arbitrary code execution via go.mod toolchain directive in cmd/go | 2024-03-06T10:54:20.860Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-39319 | Improper handling of special tags within script contexts in html/template | 2024-03-06T10:54:32.276Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-39318 | Improper handling of HTML-like comments in script contexts in html/template | 2024-03-06T10:54:41.909Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29409 | Large RSA keys can cause high CPU usage in crypto/tls | 2024-03-06T10:54:53.392Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29406 | Insufficient sanitization of Host header in net/http | 2024-03-06T10:55:04.890Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29405 | Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go | 2024-03-06T10:55:15.285Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29404 | Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go | 2024-03-06T10:55:27.675Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29403 | Unsafe behavior in setuid/setgid binaries in runtime | 2024-03-06T10:55:36.361Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29402 | Code injection via go command with cgo in cmd/go | 2024-03-06T10:55:47.592Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-29400 | Improper handling of empty HTML attributes in html/template | 2024-03-06T10:55:58.472Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24540 | Improper handling of JavaScript whitespace in html/template | 2024-03-06T10:56:09.496Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24539 | Improper sanitization of CSS values in html/template | 2024-03-06T10:56:20.094Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24538 | Backticks not treated as string delimiters in html/template | 2024-03-06T10:56:31.898Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24537 | Infinite loop in parsing in go/scanner | 2024-03-06T10:56:42.169Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24536 | Excessive resource consumption in net/http, net/textproto and mime/multipart | 2024-03-06T10:56:52.802Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24534 | Excessive memory allocation in net/http and net/textproto | 2024-03-06T10:57:03.774Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24532 | Incorrect calculation on P256 curves in crypto/internal/nistec | 2024-03-06T10:57:15.189Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2023-24531 | Output of "go env" does not sanitize values in cmd/go | 2024-07-04T07:29:14.949Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41725 | Excessive resource consumption in mime/multipart | 2024-03-06T10:57:26.992Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41724 | Panic on large handshake records in crypto/tls | 2024-03-06T10:57:37.680Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41723 | Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net | 2024-03-06T10:57:47.288Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41722 | Path traversal on Windows in path/filepath | 2024-03-06T10:57:57.994Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41720 | Restricted file access on Windows in os and net/http | 2024-03-06T10:58:08.803Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41717 | Excessive memory growth in net/http and golang.org/x/net/http2 | 2024-03-06T10:58:17.486Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41716 | Unsanitized NUL in environment variables on Windows in syscall and os/exec | 2024-03-06T10:58:28.267Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-41715 | Memory exhaustion when compiling regular expressions in regexp/syntax | 2024-03-06T10:58:39.087Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-32190 | Failure to strip relative path components in net/url | 2024-03-06T10:58:50.479Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-200110-0351 | 2024-04-29T22:45:24.654000Z | |
| var-202404-0795 | Ruijie Networks is a professional network manufacturer with a full range of network equip… | 2024-04-28T22:52:09.771000Z |
| var-202401-2496 | Tenda AX1803 is a dual-band Gigabit WIFI6 router from China's Tenda company. There is a … | 2024-04-28T22:49:54.454000Z |
| var-202403-0456 | Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper autho… | 2024-04-28T22:49:04.873000Z |
| var-202309-1942 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a sta… | 2024-04-28T22:47:11.583000Z |
| var-202404-0248 | TP-LINK AC1350 is a router from China's TP-LINK company. TP-LINK AC1350 has a security v… | 2024-04-28T22:43:21.428000Z |
| var-200505-0687 | Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products… | 2024-04-28T22:41:27.361000Z |
| var-202308-1647 | All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrust… | 2024-04-28T22:38:42.569000Z |
| var-202404-0330 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the func… | 2024-04-28T22:38:41.227000Z |
| var-202307-2464 | Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communic… | 2024-04-28T22:38:09.133000Z |
| var-202403-0112 | Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross… | 2024-04-28T22:37:38.180000Z |
| var-202404-0250 | TP-LINK AC1350/N300 is a router from TP-LINK of China. TP-LINK AC1350/N300 has a securit… | 2024-04-28T22:37:37.922000Z |
| var-202404-0249 | TP-LINK AC1350/N300 is a router from TP-LINK of China. TP-LINK AC1350 and TP-LINK N300 h… | 2024-04-28T22:37:37.909000Z |
| var-202403-3300 | The Discovery and Basic Configuration Protocol is a discovery and basic configuration pro… | 2024-04-28T22:37:37.938000Z |
| var-202403-0239 | Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross… | 2024-04-28T22:36:38.295000Z |
| var-202403-0113 | Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross… | 2024-04-28T22:36:38.315000Z |
| var-202404-0336 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the funct… | 2024-04-28T22:36:37.865000Z |
| var-202310-1075 | Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMir… | 2024-04-28T22:33:28.049000Z |
| var-202404-1155 | Ruijie Networks, founded in 2003, is an industry-leading provider of network infrastructu… | 2024-04-28T22:26:59.302000Z |
| var-202308-0261 | SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. A… | 2024-04-28T22:20:21.109000Z |
| var-200110-0282 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-04-28T19:46:42.430000Z |
| var-202404-0371 | TP-LINK AC1350 is a router from China's TP-LINK company. TP-LINK AC1350 has a security v… | 2024-04-28T19:10:58.011000Z |
| var-200108-0012 | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) vi… | 2024-04-27T12:22:55.253000Z |
| var-202307-1941 | A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all pre… | 2024-04-27T12:22:09.007000Z |
| var-202306-0752 | ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies… | 2024-04-27T12:22:09.219000Z |
| var-202403-2964 | A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulatio… | 2024-04-27T12:18:44.533000Z |
| var-200505-0603 | Zyxel P310, P314, P324 and Netgear RT311, RT314 running the latest firmware, allows remot… | 2024-04-27T12:17:41.613000Z |
| var-202306-2258 | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which… | 2024-04-27T12:12:02.285000Z |
| var-202404-0086 | Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may a… | 2024-04-27T12:11:57.442000Z |
| var-202404-0085 | OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in use… | 2024-04-27T12:11:57.427000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000107 | KENT-WEB ACCESS REPORT vulnerable to cross-site scripting | 2012-12-06T12:41+09:00 | 2012-12-06T12:41+09:00 |
| jvndb-2012-000106 | KENT-WEB ACCESS REPORT vulnerable to cross-site scripting | 2012-12-06T12:40+09:00 | 2012-12-06T12:40+09:00 |
| jvndb-2012-000102 | Multiple Android devices vulnerable to denial-of-service (DoS) | 2012-11-14T15:07+09:00 | 2012-11-30T18:01+09:00 |
| jvndb-2012-000105 | Multiple KYOCERA mobile devices may reboot during email reception | 2012-11-30T13:58+09:00 | 2012-11-30T13:58+09:00 |
| jvndb-2012-005486 | Denial of Service (DoS) Vulnerability in JP1/Automatic Job Management System 3 and JP1/Automatic Job Management System 2 | 2012-11-29T15:23+09:00 | 2012-11-29T15:23+09:00 |
| jvndb-2012-005485 | Hitachi Device Manager Software Denial of Service (DoS) Vulnerability | 2012-11-29T14:48+09:00 | 2012-11-29T14:48+09:00 |
| jvndb-2012-005201 | Multiple Vulnerabilities in Hitachi JP1/File Transmission Server/FTP | 2012-11-05T17:58+09:00 | 2012-11-26T18:01+09:00 |
| jvndb-2012-000104 | BIGACE vulnerable to session fixation | 2012-11-21T14:34+09:00 | 2012-11-21T14:34+09:00 |
| jvndb-2012-000103 | Monaca Debugger for Android information management vulnerability | 2012-11-16T14:10+09:00 | 2012-11-16T14:10+09:00 |
| jvndb-2012-000101 | BeZIP vulnerable to directory traversal | 2012-11-07T16:01+09:00 | 2012-11-07T16:01+09:00 |
| jvndb-2012-000100 | Pebble vulnerable to open redirect | 2012-11-02T14:23+09:00 | 2012-11-02T14:23+09:00 |
| jvndb-2012-000099 | Pebble vulnerable to HTTP header injection | 2012-11-02T14:21+09:00 | 2012-11-02T14:21+09:00 |
| jvndb-2012-000098 | Pebble vulnerability where entries may become unviewable | 2012-11-02T14:20+09:00 | 2012-11-02T14:20+09:00 |
| jvndb-2012-000097 | MosP kintai kanri vulnerable to authentication bypass | 2012-11-02T14:18+09:00 | 2012-11-02T14:18+09:00 |
| jvndb-2012-000096 | MosP kintai kanri fails to restrict access permissions | 2012-11-02T14:16+09:00 | 2012-11-02T14:16+09:00 |
| jvndb-2012-000095 | Mac OS X OpenSSH vulnerable to denial-of-service (DoS) | 2012-10-31T15:01+09:00 | 2012-10-31T15:01+09:00 |
| jvndb-2012-000093 | Tokyo BBS vulnerable to cross-site scripting | 2012-10-26T14:00+09:00 | 2012-10-26T14:00+09:00 |
| jvndb-2012-000088 | Safari vulnerable to local file content disclosure | 2012-10-23T14:57+09:00 | 2012-10-23T14:57+09:00 |
| jvndb-2012-000094 | Smarty vulnerable to cross-site scripting | 2012-10-10T14:45+09:00 | 2012-10-10T14:45+09:00 |
| jvndb-2012-000092 | MyWebSearch vulnerable to cross-site scripting | 2012-10-05T16:49+09:00 | 2012-10-05T16:49+09:00 |
| jvndb-2009-000037 | Apache Tomcat denial of service (DoS) vulnerability | 2009-06-18T17:54+09:00 | 2012-09-28T13:40+09:00 |
| jvndb-2009-000036 | Apache Tomcat information disclosure vulnerability | 2009-06-18T17:53+09:00 | 2012-09-28T13:35+09:00 |
| jvndb-2012-000091 | jigbrowser+ for Android vulnerable in the WebView class | 2012-09-28T12:20+09:00 | 2012-09-28T12:20+09:00 |
| jvndb-2012-000090 | Trend Micro Control Manager vulnerable to SQL injection | 2012-09-27T12:43+09:00 | 2012-09-27T12:43+09:00 |
| jvndb-2012-000089 | ATOK for Android issue in the access permissions for the learning information file | 2012-09-25T13:40+09:00 | 2012-09-25T13:40+09:00 |
| jvndb-2012-000087 | myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution | 2012-09-20T12:33+09:00 | 2012-09-20T12:33+09:00 |
| jvndb-2012-000086 | Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service | 2012-09-20T12:31+09:00 | 2012-09-20T12:31+09:00 |
| jvndb-2012-000085 | KUNAI Browser for Remote Service beta vulnerable in the WebView class | 2012-09-13T13:51+09:00 | 2012-09-13T13:51+09:00 |
| jvndb-2012-000084 | Cybozu KUNAI for Android vulnerable in the WebView class | 2012-09-07T16:40+09:00 | 2012-09-07T16:40+09:00 |
| jvndb-2012-000083 | Cybozu KUNAI for Android vulnerable to arbitrary Java method execution | 2012-09-07T16:39+09:00 | 2012-09-07T16:39+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20444-1 | Security update for gpg2 | 2025-06-23T13:33:24Z | 2025-06-23T13:33:24Z |
| suse-su-2025:02066-1 | Security update for distribution | 2025-06-23T10:48:35Z | 2025-06-23T10:48:35Z |
| suse-su-2025:02059-1 | Security update for icu | 2025-06-23T01:38:08Z | 2025-06-23T01:38:08Z |
| suse-su-2025:02058-1 | Security update for gstreamer-plugins-good | 2025-06-21T09:04:59Z | 2025-06-21T09:04:59Z |
| suse-su-2025:02057-1 | Security update for python311 | 2025-06-21T09:04:25Z | 2025-06-21T09:04:25Z |
| suse-su-2025:02056-1 | Security update for apache-commons-beanutils | 2025-06-20T16:17:22Z | 2025-06-20T16:17:22Z |
| suse-su-2025:02055-1 | Security update for gstreamer-plugins-good | 2025-06-20T15:35:07Z | 2025-06-20T15:35:07Z |
| suse-su-2025:20442-1 | Security update for iputils | 2025-06-20T14:28:28Z | 2025-06-20T14:28:28Z |
| suse-su-2025:20429-1 | Security update for afterburn | 2025-06-20T14:11:51Z | 2025-06-20T14:11:51Z |
| suse-su-2025:02053-1 | Security update for gstreamer-plugins-good | 2025-06-20T13:05:43Z | 2025-06-20T13:05:43Z |
| suse-su-2025:02052-1 | Security update for apache2-mod_security2 | 2025-06-20T13:04:57Z | 2025-06-20T13:04:57Z |
| suse-su-2025:02051-1 | Security update for perl | 2025-06-20T12:42:29Z | 2025-06-20T12:42:29Z |
| suse-su-2025:02050-1 | Security update for python39 | 2025-06-20T12:41:57Z | 2025-06-20T12:41:57Z |
| suse-su-2025:02049-1 | Security update for python311 | 2025-06-20T12:41:35Z | 2025-06-20T12:41:35Z |
| suse-su-2025:02048-1 | Security update for python312 | 2025-06-20T12:40:39Z | 2025-06-20T12:40:39Z |
| suse-su-2025:02047-1 | Security update for python310 | 2025-06-20T12:40:08Z | 2025-06-20T12:40:08Z |
| suse-su-2025:02046-1 | Security update for ignition | 2025-06-20T12:33:38Z | 2025-06-20T12:33:38Z |
| suse-su-2025:02045-1 | Security update for nodejs20 | 2025-06-20T11:04:00Z | 2025-06-20T11:04:00Z |
| suse-su-2025:02044-1 | Security update for libblockdev | 2025-06-20T10:44:00Z | 2025-06-20T10:44:00Z |
| suse-su-2025:02043-1 | Security update for libblockdev | 2025-06-20T10:41:38Z | 2025-06-20T10:41:38Z |
| suse-su-2025:02042-1 | Security update for openssl-3 | 2025-06-20T10:38:46Z | 2025-06-20T10:38:46Z |
| suse-su-2025:02041-1 | Security update for ignition | 2025-06-20T10:04:07Z | 2025-06-20T10:04:07Z |
| suse-su-2025:02040-1 | Security update for ignition | 2025-06-20T09:40:59Z | 2025-06-20T09:40:59Z |
| suse-su-2025:02039-1 | Security update for nodejs20 | 2025-06-20T09:40:53Z | 2025-06-20T09:40:53Z |
| suse-su-2025:02038-1 | Security update for python3 | 2025-06-20T09:40:38Z | 2025-06-20T09:40:38Z |
| suse-su-2025:02037-1 | Security update for ghc-pandoc | 2025-06-20T09:40:16Z | 2025-06-20T09:40:16Z |
| suse-su-2025:02035-1 | Security update for ignition | 2025-06-20T09:03:57Z | 2025-06-20T09:03:57Z |
| suse-su-2025:02034-1 | Security update for gstreamer | 2025-06-20T08:04:51Z | 2025-06-20T08:04:51Z |
| suse-su-2025:02033-1 | Security update for webkit2gtk3 | 2025-06-20T08:04:15Z | 2025-06-20T08:04:15Z |
| suse-su-2025:02032-1 | Security update for pam_pkcs11 | 2025-06-20T07:56:53Z | 2025-06-20T07:56:53Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27338 | WordPress Post SMTP plugin未授权访问数据漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27337 | WordPress Polylang plugin反序列化漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27336 | WordPress OOPSpam Anti-Spam plugin IP头伪造漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27335 | WordPress Ohio Extra plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27334 | WordPress NS Maintenance Mode for WP plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27327 | Foxit PDF Reader缓冲区溢出漏洞(CNVD-2025-27327) | 2025-09-04 | 2025-11-07 |
| cnvd-2025-27320 | Modern Bag login.php文件SQL注入漏洞 | 2025-03-19 | 2025-11-07 |
| cnvd-2025-27319 | Modern Bag slideupdate.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27318 | Modern Bag product-update.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27317 | Modern Bag product-detail.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27316 | Modern Bag productadd_back.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27315 | Modern Bag login-back.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27314 | Modern Bag contact-list.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27313 | Modern Bag contact-back.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27312 | Modern Bag category-list.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27311 | Modern Bag action.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27310 | Voting System voters_row.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27309 | Voting System voters_edit.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27308 | Voting System voters_add.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27307 | Voting System positions_row.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27306 | Voting System positions_edit.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27305 | Mobile Shop LoginAsAdmin.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27304 | Mobile Shop EditMobile.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-07 |
| cnvd-2025-27303 | Mobile Shop login.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-07 |
| cnvd-2025-27302 | Mobile Shop Management System AddNewProduct.php文件代码问题漏洞 | 2025-09-05 | 2025-11-07 |
| cnvd-2025-27277 | TOTOLINK N600R硬编码漏洞 | 2022-08-30 | 2025-11-07 |
| cnvd-2025-27276 | TOTOLINK A7000R访问控制错误漏洞 | 2022-08-31 | 2025-11-07 |
| cnvd-2025-27275 | TOTOLINK A7000R setOpModeCfg栈缓冲区溢出漏洞 | 2023-12-13 | 2025-11-07 |
| cnvd-2025-27274 | TOTOLINK A7000R setIpPortFilterRules堆栈缓冲区溢出漏洞 | 2023-12-13 | 2025-11-07 |
| cnvd-2025-27273 | TOTOLINK N600R main函数空指针取消引用漏洞 | 2025-10-24 | 2025-11-07 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2025-AVI-0059 | Multiples vulnérabilités dans les produits Atlassian | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0058 | Multiples vulnérabilités dans Oracle Weblogic | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0057 | Multiples vulnérabilités dans Oracle Virtualization | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0056 | Vulnérabilité dans Oracle Systems | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0055 | Multiples vulnérabilités dans Oracle PeopleSoft | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0054 | Multiples vulnérabilités dans Oracle MySQL | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0053 | Multiples vulnérabilités dans Oracle Java SE | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0052 | Multiples vulnérabilités dans Oracle Database Server | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| CERTFR-2025-AVI-0051 | Multiples vulnérabilités dans phpMyAdmin | 2025-01-22T00:00:00.000000 | 2025-01-22T00:00:00.000000 |
| certfr-2025-avi-0050 | Multiples vulnérabilités dans les produits Elastic | 2025-01-21T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| certfr-2024-avi-0752 | Multiples vulnérabilités dans les produits Qnap | 2024-09-09T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| CERTFR-2025-AVI-0050 | Multiples vulnérabilités dans les produits Elastic | 2025-01-21T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| CERTFR-2024-AVI-0752 | Multiples vulnérabilités dans les produits Qnap | 2024-09-09T00:00:00.000000 | 2025-01-21T00:00:00.000000 |
| certfr-2025-avi-0049 | Multiples vulnérabilités dans Microsoft Edge | 2025-01-20T00:00:00.000000 | 2025-01-20T00:00:00.000000 |
| CERTFR-2025-AVI-0049 | Multiples vulnérabilités dans Microsoft Edge | 2025-01-20T00:00:00.000000 | 2025-01-20T00:00:00.000000 |
| certfr-2025-avi-0048 | Vulnérabilité dans Microsoft Windows | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0046 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0045 | Multiples vulnérabilités dans les produits IBM | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0044 | Vulnérabilité dans les produits Moxa | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0048 | Vulnérabilité dans Microsoft Windows | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0047 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0046 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0045 | Multiples vulnérabilités dans les produits IBM | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| CERTFR-2025-AVI-0044 | Vulnérabilité dans les produits Moxa | 2025-01-17T00:00:00.000000 | 2025-01-17T00:00:00.000000 |
| certfr-2025-avi-0042 | Vulnérabilité dans le greffon Splunk Supporting pour Active Directory | 2025-01-16T00:00:00.000000 | 2025-01-16T00:00:00.000000 |
| CERTFR-2025-AVI-0042 | Vulnérabilité dans le greffon Splunk Supporting pour Active Directory | 2025-01-16T00:00:00.000000 | 2025-01-16T00:00:00.000000 |
| certfr-2025-avi-0041 | Multiples vulnérabilités dans les produits Microsoft | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0040 | Multiples vulnérabilités dans Microsoft .Net | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0039 | Multiples vulnérabilités dans Microsoft Windows | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |