Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-36984 |
8.5 (4.0)
7.8 (3.1)
|
EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path |
Epson |
EPSON |
2026-01-28T12:28:58.749Z | 2026-01-28T15:45:05.554Z |
| CVE-2025-59893 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:52:51.985Z | 2026-01-28T15:43:40.929Z |
| CVE-2025-59894 |
8.5 (4.0)
|
Cross-Site request forgery (CSRF) vulnerability in Syn… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:53:24.197Z | 2026-01-28T15:40:28.684Z |
| CVE-2025-68072 |
6.5 (3.1)
|
WordPress Easy Property Listings plugin <= 3.5.17 - Br… |
Merv Barrett |
Easy Property Listings |
2026-01-22T16:52:06.979Z | 2026-01-28T15:39:01.232Z |
| CVE-2025-59895 |
8.2 (4.0)
|
Remote denial-of-service (DoS) vulnerability in Sync B… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:55:43.546Z | 2026-01-28T15:38:11.029Z |
| CVE-2025-68507 |
6.5 (3.1)
|
WordPress Icegram plugin <= 3.1.35 - Broken Access Con… |
Icegram |
Icegram |
2026-01-22T16:52:07.377Z | 2026-01-28T15:38:01.128Z |
| CVE-2025-59896 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:13.762Z | 2026-01-28T15:35:37.114Z |
| CVE-2025-59897 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:28.711Z | 2026-01-28T15:34:32.254Z |
| CVE-2024-52616 |
5.3 (3.1)
|
Avahi: avahi wide-area dns predictable transaction ids |
|
|
2024-11-21T20:41:11.636Z | 2026-01-28T15:34:19.759Z |
| CVE-2025-59898 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:58:44.144Z | 2026-01-28T15:32:32.025Z |
| CVE-2025-59899 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T11:59:02.326Z | 2026-01-28T15:26:31.667Z |
| CVE-2025-59900 |
5.1 (4.0)
|
Authenticated Cross-Site Scripting (XSS) vulnerability… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T12:00:05.516Z | 2026-01-28T15:23:07.693Z |
| CVE-2025-68869 |
9.8 (3.1)
|
WordPress LazyTasks plugin <= 1.4.01 - Privilege Escal… |
LazyCoders LLC |
LazyTasks |
2026-01-22T16:52:10.526Z | 2026-01-28T15:22:59.412Z |
| CVE-2025-69076 |
8.1 (3.1)
|
WordPress Modern Housewife theme <= 1.0.12 - Local Fil… |
AncoraThemes |
Modern Housewife |
2026-01-22T16:52:25.218Z | 2026-01-28T15:20:37.640Z |
| CVE-2025-69421 |
N/A
|
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex… |
OpenSSL |
OpenSSL |
2026-01-27T16:01:26.435Z | 2026-01-28T15:19:41.794Z |
| CVE-2026-24736 |
9.1 (3.1)
|
Squidex has Server-Side Request Forgery (SSRF) Issue i… |
Squidex |
squidex |
2026-01-27T20:54:51.489Z | 2026-01-28T15:17:12.814Z |
| CVE-2025-59901 |
8.5 (4.0)
|
authenticated reflected XSS vulnerability in Sync Bree… |
Flexense |
Sync Breeze Enterprise Server |
2026-01-28T12:01:30.669Z | 2026-01-28T15:16:54.606Z |
| CVE-2026-24738 |
5.9 (4.0)
|
gmrtd ReadFile Vulnerable to Denial of Service via Exc… |
gmrtd |
gmrtd |
2026-01-27T21:08:29.392Z | 2026-01-28T15:16:31.785Z |
| CVE-2024-52337 |
5.5 (3.1)
|
Tuned: improper sanitization of `instance_name` parame… |
|
|
2024-11-26T15:21:17.538Z | 2026-01-28T15:15:17.757Z |
| CVE-2026-24741 |
8.1 (3.1)
|
ConvertX Vulnerable to Arbitrary File Deletion via Pat… |
C4illin |
ConvertX |
2026-01-27T21:11:57.295Z | 2026-01-28T15:14:23.019Z |
| CVE-2026-24525 |
5.3 (3.1)
|
WordPress CLP Varnish Cache plugin <= 1.0.2 - Broken A… |
CloudPanel |
CLP Varnish Cache |
2026-01-23T14:28:49.126Z | 2026-01-28T15:11:14.494Z |
| CVE-2026-24785 |
8 (4.0)
|
Clatter has a PSK Validity Rule Violation issue |
jmlepisto |
clatter |
2026-01-27T23:38:53.409Z | 2026-01-28T15:10:48.864Z |
| CVE-2025-55292 |
8.2 (3.1)
|
In Meshtastic, an attacker can spoof licensed amateur … |
meshtastic |
firmware |
2026-01-27T23:28:28.962Z | 2026-01-28T15:10:48.709Z |
| CVE-2026-23830 |
10 (3.1)
|
SandboxJS has Sandbox Escape via Unprotected AsyncFunc… |
nyariv |
SandboxJS |
2026-01-27T23:32:16.104Z | 2026-01-28T15:09:44.543Z |
| CVE-2026-24134 |
6.5 (3.1)
|
StudioCMS has an Authorization Bypass Through User-Con… |
withstudiocms |
studiocms |
2026-01-27T23:34:55.922Z | 2026-01-28T15:08:38.778Z |
| CVE-2026-24784 |
6.8 (3.1)
|
DotNetNuke.Core has a potential XSS vulnerability in m… |
dnnsoftware |
Dnn.Platform |
2026-01-27T23:47:41.846Z | 2026-01-28T15:06:44.527Z |
| CVE-2026-1237 |
2.1 (4.0)
|
Vulnerable cross-model authorization in juju. If … |
Canonical |
juju |
2026-01-28T15:01:46.364Z | 2026-01-28T15:06:23.120Z |
| CVE-2026-1244 |
6.4 (3.1)
|
Forms Bridge <= 4.2.5 - Authenticated (Contributor+) S… |
codeccoop |
Forms Bridge – Infinite integrations |
2026-01-28T06:43:41.879Z | 2026-01-28T15:04:11.678Z |
| CVE-2026-24838 |
9.1 (3.1)
|
DotNetNuke.Core Vulnerable to Stored XSS via Module Title |
dnnsoftware |
Dnn.Platform |
2026-01-27T23:58:33.340Z | 2026-01-28T15:03:27.676Z |
| CVE-2026-24839 |
4.7 (3.1)
|
Dokploy has a clickjacking vulnerability - Missing X-F… |
Dokploy |
dokploy |
2026-01-28T00:01:49.253Z | 2026-01-28T15:02:29.344Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-27924 |
5.4 (3.1)
|
Nintex Automation 5.6 and 5.7 before 5.8 has a st… |
Nintex |
Automation |
2025-03-10T00:00:00.000Z | 2025-03-11T15:51:51.478Z |
| CVE-2024-24506 |
6.1 (3.1)
|
Cross Site Scripting (XSS) vulnerability in Lime … |
n/a |
n/a |
2024-04-03T00:00:00 | 2024-08-15T20:11:13.215Z |
| CVE-2024-27674 |
7.8 (3.1)
|
Macro Expert through 4.9.4 allows BUILTIN\Users:(… |
n/a |
n/a |
2024-04-03T00:00:00 | 2024-10-28T13:57:54.101Z |
| CVE-2024-2433 |
4.3 (3.1)
|
PAN-OS: Improper Privilege Management Vulnerability in… |
Palo Alto Networks |
PAN-OS |
2024-03-13T17:51:45.578Z | 2024-08-12T18:54:08.465Z |
| CVE-2022-27540 |
7.8 (3.1)
|
A potential Time-of-Check to Time-of Use (TOCTOU)… |
HP Inc. |
HP PC BIOS |
2024-06-28T19:00:28.307Z | 2024-08-22T14:52:53.925Z |
| CVE-2024-39063 |
8.8 (3.1)
|
Lime Survey <= 6.5.12 is vulnerable to Cross Site… |
n/a |
n/a |
2024-07-09T00:00:00 | 2024-08-02T04:19:20.617Z |
| CVE-2024-7887 |
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
|
LimeSurvey File Upload index.php denial of service |
n/a |
LimeSurvey |
2024-08-17T09:00:05.806Z | 2024-08-19T14:57:41.521Z |
| CVE-2025-69289 |
5.1 (4.0)
|
Discourse has insecure default configuration that allo… |
discourse |
discourse |
2026-01-28T19:33:58.921Z | 2026-01-28T20:15:03.696Z |
| CVE-2024-42756 |
8.8 (3.1)
|
An issue in Netgear DGN1000WW v.1.1.00.45 allows … |
n/a |
n/a |
2024-08-23T00:00:00 | 2024-08-27T14:47:10.891Z |
| CVE-2025-69218 |
7.1 (4.0)
|
Discourse moderators can access admin-only reports exp… |
discourse |
discourse |
2026-01-28T19:30:28.793Z | 2026-01-28T19:45:12.386Z |
| CVE-2025-68934 |
6.5 (3.1)
|
Discourse Has Denial of Service (DoS) Vulnerability in… |
discourse |
discourse |
2026-01-28T19:19:59.627Z | 2026-01-28T19:46:16.472Z |
| CVE-2025-68933 |
6.9 (3.1)
|
Discourse non-admin moderators can exfiltrate private … |
discourse |
discourse |
2026-01-28T19:17:23.713Z | 2026-01-28T20:16:21.375Z |
| CVE-2025-68666 |
5.9 (4.0)
|
Discourse users archives leaked to users with moderati… |
discourse |
discourse |
2026-01-28T19:14:09.984Z | 2026-01-28T20:20:50.203Z |
| CVE-2025-68662 |
7.6 (3.1)
|
FinalDestination hostname matching allows SSRF protect… |
discourse |
discourse |
2026-01-28T19:12:24.903Z | 2026-01-28T20:21:50.707Z |
| CVE-2025-68660 |
5.3 (4.0)
|
Discourse AI Discover's continue conversation allows t… |
discourse |
discourse |
2026-01-28T18:55:11.557Z | 2026-01-28T19:27:18.739Z |
| CVE-2025-68659 |
4.3 (3.1)
|
Discourse has DoS vulnerability in username change endpoint |
discourse |
discourse |
2026-01-28T18:51:40.341Z | 2026-01-28T20:20:41.258Z |
| CVE-2023-33940 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in IFram… |
Liferay |
Portal |
2023-05-24T13:55:23.431Z | 2024-10-22T15:52:33.662Z |
| CVE-2023-33939 |
5.4 (3.1)
|
Cross-site scripting (XSS) vulnerability in the M… |
Liferay |
Portal |
2023-05-24T13:41:22.321Z | 2024-10-22T15:52:40.777Z |
| CVE-2025-68479 |
7.1 (3.1)
|
Discourse subscriptions are susceptible to takeover |
discourse |
discourse |
2026-01-28T18:34:00.486Z | 2026-01-29T18:11:42.379Z |
| CVE-2023-3426 |
4.3 (3.1)
|
The organization selector in Liferay Portal 7.4.3… |
Liferay |
DXP |
2023-08-02T09:40:28.090Z | 2024-10-11T14:09:13.856Z |
| CVE-2025-21746 |
N/A
|
Input: synaptics - fix crash when enabling pass-through port |
Linux |
Linux |
2025-02-27T02:12:18.477Z | 2025-05-04T07:20:14.042Z |
| CVE-2025-52986 |
5.5 (3.1)
6.8 (4.0)
|
Junos OS and Junos OS Evolved: When RIB sharding is co… |
Juniper Networks |
Junos OS |
2025-07-11T15:10:20.934Z | 2025-07-15T19:55:10.352Z |
| CVE-2025-13001 |
4.1 (3.1)
|
Donation <= 1.0 - Admin+ SQLi |
Unknown |
donation |
2025-12-02T06:00:07.918Z | 2025-12-02T13:33:33.294Z |
| CVE-2025-13000 |
7.7 (3.1)
|
DB Access <= 0.8.7 - Subscriber+ SQLi |
Unknown |
db-access |
2025-12-02T06:00:07.107Z | 2025-12-02T13:34:41.546Z |
| CVE-2025-9014 |
6.3 (4.0)
|
Null Pointer Dereference Vulnerability on TL-WR841N |
TP-Link Systems Inc. |
TL-WR841N v14 |
2026-01-15T17:36:06.139Z | 2026-01-15T18:26:28.154Z |
| CVE-2023-33944 |
4.8 (3.1)
|
Cross-site scripting (XSS) vulnerability in Layou… |
Liferay |
Portal |
2023-05-24T15:07:14.026Z | 2024-10-22T15:52:07.008Z |
| CVE-2023-33943 |
5.4 (3.1)
|
Cross-site scripting (XSS) vulnerability in the A… |
Liferay |
Portal |
2023-05-24T14:57:46.177Z | 2024-10-22T15:52:13.867Z |
| CVE-2024-50120 |
N/A
|
smb: client: Handle kstrdup failures for passwords |
Linux |
Linux |
2024-11-05T17:10:49.887Z | 2025-05-04T12:59:34.110Z |
| CVE-2025-21439 |
7.8 (3.1)
|
Out-of-bounds Read in Windows WLAN Host |
Qualcomm, Inc. |
Snapdragon |
2025-04-07T10:16:07.416Z | 2025-04-08T03:55:59.260Z |
| CVE-2025-8889 |
3.8 (3.1)
|
Compress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload |
Unknown |
Compress & Upload |
2025-09-09T06:00:08.095Z | 2025-11-13T20:58:02.324Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2022-27540 | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS … | 2024-06-28T19:15:03.407 | 2026-01-30T20:53:03.233 |
| fkie_cve-2024-39063 | Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is onl… | 2024-07-09T20:15:12.080 | 2026-01-30T20:52:36.270 |
| fkie_cve-2024-7887 | A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by thi… | 2024-08-17T09:15:12.040 | 2026-01-30T20:51:22.553 |
| fkie_cve-2025-69289 | Discourse is an open source discussion platform. A privilege escalation vulnerability in versions p… | 2026-01-28T20:16:13.713 | 2026-01-30T20:47:35.167 |
| fkie_cve-2024-42756 | An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via th… | 2024-08-23T16:15:06.840 | 2026-01-30T20:47:34.863 |
| fkie_cve-2025-69218 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:13.553 | 2026-01-30T20:47:31.610 |
| fkie_cve-2025-68934 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.627 | 2026-01-30T20:47:28.030 |
| fkie_cve-2025-68933 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.477 | 2026-01-30T20:47:13.950 |
| fkie_cve-2025-68666 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:12.010 | 2026-01-30T20:47:05.087 |
| fkie_cve-2025-68662 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T20:16:11.860 | 2026-01-30T20:44:48.133 |
| fkie_cve-2025-68660 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T19:16:23.753 | 2026-01-30T20:44:35.807 |
| fkie_cve-2025-68659 | Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and… | 2026-01-28T19:16:23.563 | 2026-01-30T20:44:05.130 |
| fkie_cve-2023-33940 | Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through… | 2023-05-24T14:15:09.697 | 2026-01-30T20:43:54.860 |
| fkie_cve-2023-33939 | Cross-site scripting (XSS) vulnerability in the Modified Facet widget in Liferay Portal 7.1.0 throu… | 2023-05-24T14:15:09.623 | 2026-01-30T20:43:29.767 |
| fkie_cve-2025-68479 | Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, … | 2026-01-28T19:16:23.380 | 2026-01-30T20:43:17.910 |
| fkie_cve-2023-3426 | The organization selector in Liferay Portal 7.4.3.81 through 7.4.3.85, and Liferay DXP 7.4 update 8… | 2023-08-02T10:15:09.887 | 2026-01-30T20:43:02.643 |
| fkie_cve-2025-21746 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash w… | 2025-02-27T03:15:15.243 | 2026-01-30T20:42:52.380 |
| fkie_cve-2025-52986 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (… | 2025-07-11T16:15:26.020 | 2026-01-30T20:42:45.180 |
| fkie_cve-2025-13001 | The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it … | 2025-12-02T06:15:45.543 | 2026-01-30T20:42:15.960 |
| fkie_cve-2025-13000 | The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowin… | 2025-12-02T06:15:45.160 | 2026-01-30T20:42:11.060 |
| fkie_cve-2025-9014 | A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP… | 2026-01-15T18:16:38.100 | 2026-01-30T20:42:05.277 |
| fkie_cve-2023-33944 | Cross-site scripting (XSS) vulnerability in Layout module in Liferay Portal 7.3.4 through 7.4.3.68,… | 2023-05-24T16:15:09.693 | 2026-01-30T20:41:58.827 |
| fkie_cve-2023-33943 | Cross-site scripting (XSS) vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7… | 2023-05-24T15:15:09.897 | 2026-01-30T20:41:24.127 |
| fkie_cve-2024-50120 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Handle kstrdup fa… | 2024-11-05T18:15:15.023 | 2026-01-30T20:39:44.850 |
| fkie_cve-2025-21439 | Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the… | 2025-04-07T11:15:52.457 | 2026-01-30T20:39:24.563 |
| fkie_cve-2025-8889 | The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allo… | 2025-09-09T06:15:32.370 | 2026-01-30T20:38:51.963 |
| fkie_cve-2025-48755 | In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type). | 2025-05-24T03:15:24.193 | 2026-01-30T20:38:29.627 |
| fkie_cve-2026-1407 | A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. This affects an un… | 2026-01-25T22:16:00.563 | 2026-01-30T20:34:56.397 |
| fkie_cve-2025-48754 | In the memory_pages crate 0.1.0 for Rust, division by zero can occur. | 2025-05-24T03:15:24.027 | 2026-01-30T20:34:49.800 |
| fkie_cve-2025-13505 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improp… | 2025-12-02T15:15:49.623 | 2026-01-30T20:32:54.783 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9chr-m38j-w26g |
5.9 (3.1)
|
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in Wo… | 2024-08-30T00:31:23Z | 2026-01-28T00:31:37Z |
| ghsa-6mw6-mj76-grwc |
5.5 (4.0)
|
gix-date can create non-utf8 string with `TimeBuf::as_str` | 2026-01-05T19:43:29Z | 2026-01-27T22:23:11Z |
| ghsa-8rgq-m2pm-jvmg |
5.5 (4.0)
|
Duplicate Advisory: gix-date can create non-utf8 string with `TimeBuf::as_str` | 2026-01-26T21:30:36Z | 2026-01-27T22:22:40Z |
| ghsa-63v5-26vq-m4vm |
3.1 (3.1)
|
Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods | 2026-01-26T21:30:36Z | 2026-01-27T21:56:13Z |
| ghsa-vjjg-c428-g9r3 |
9.8 (3.1)
9.3 (4.0)
|
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Sessi… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:50Z |
| ghsa-mpc3-hqr8-w5f3 |
8.4 (3.1)
|
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the P… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-9vq4-c9v3-2hx5 |
10.0 (4.0)
|
A security issue has been identified in ibaPDA that could allow unauthorized actions on the file sy… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-7246-cvp4-g68w |
3.7 (3.1)
|
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success wit… | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-5w36-x85h-pphm |
8.1 (3.1)
|
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped … | 2026-01-27T21:31:49Z | 2026-01-27T21:31:49Z |
| ghsa-xfvq-g9gj-p73c |
7.8 (3.1)
8.5 (4.0)
|
Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local att… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:48Z |
| ghsa-ghv4-rv7x-5rvv |
6.4 (3.1)
|
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up … | 2026-01-27T21:31:48Z | 2026-01-27T21:31:48Z |
| ghsa-wg6j-wq96-5mm4 |
7.8 (3.1)
8.5 (4.0)
|
Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its W… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-v6wc-f4xv-cw3w |
7.8 (3.1)
8.5 (4.0)
|
Wondershare Driver Install Service contains an unquoted service path vulnerability in the Elevation… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-rj4c-4hgr-w984 |
7.8 (3.1)
8.5 (4.0)
|
EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows loca… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-jv2h-2w94-chwv |
7.8 (3.1)
8.5 (4.0)
|
Motorola Device Manager 2.5.4 contains an unquoted service path vulnerability in the MotoHelperServ… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-85q3-6228-58f9 |
7.8 (3.1)
8.5 (4.0)
|
SAntivirus IC 10.0.21.61 contains an unquoted service path vulnerability in its Windows service con… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-7jqp-g5vc-78qc |
7.8 (3.1)
8.5 (4.0)
|
Motorola Device Manager 2.4.5 contains an unquoted service path vulnerability in the PST Service th… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-56p5-hjp2-w73q |
7.8 (3.1)
8.5 (4.0)
|
Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its ser… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-3wfw-hw9j-3p3m |
6.4 (3.1)
5.1 (4.0)
|
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in… | 2026-01-27T21:31:47Z | 2026-01-27T21:31:47Z |
| ghsa-rxx2-x5v3-hv94 |
5.4 (3.1)
|
Worklenz version 2.1.5 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Project Up… | 2026-01-26T21:30:36Z | 2026-01-27T21:31:46Z |
| ghsa-q7qm-9q6p-5wg7 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-27T21:31:46Z |
| ghsa-pmpq-66cp-597x |
8.8 (3.1)
|
The binary serving the web server and executing basically all actions launched from the Web UI is r… | 2026-01-26T12:30:29Z | 2026-01-27T21:31:46Z |
| ghsa-jc49-q8pm-mwx9 |
7.8 (3.1)
8.5 (4.0)
|
Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows loca… | 2026-01-27T21:31:46Z | 2026-01-27T21:31:46Z |
| ghsa-h7wx-c535-fxf8 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:37Z | 2026-01-27T21:31:46Z |
| ghsa-5xj3-mjvp-h43q |
5.5 (3.1)
|
The kernel driver of CPUID CPU-Z v2.17 and earlier does not validate user-supplied values passed vi… | 2026-01-27T18:32:17Z | 2026-01-27T21:31:46Z |
| ghsa-387g-7jpp-vpxj |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:38Z | 2026-01-27T21:31:46Z |
| ghsa-vgxm-x435-rmh6 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in John James Jacoby WP Term Order wp-term-order al… | 2026-01-23T15:31:36Z | 2026-01-27T21:31:45Z |
| ghsa-m8pw-x258-449r |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-23T15:31:35Z | 2026-01-27T21:31:45Z |
| ghsa-g43m-r7jr-63q9 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Sit… | 2026-01-23T15:31:36Z | 2026-01-27T21:31:45Z |
| ghsa-r4q4-9cp2-vvhf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-27T21:31:44Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-191 |
|
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x be… | nova | 2019-08-09T19:15:00Z | 2021-08-27T03:22:09.327110Z |
| pysec-2018-95 |
|
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary … | osxcollector | 2018-06-13T22:29:00Z | 2021-08-27T03:22:09.893229Z |
| pysec-2014-86 |
|
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo … | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.666793Z |
| pysec-2014-85 |
|
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, w… | oauth2 | 2014-05-20T14:55:00Z | 2021-08-27T03:22:09.637359Z |
| pysec-2021-136 |
|
A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending c… | neutron | 2021-05-28T19:15:00Z | 2021-08-27T03:22:08.884816Z |
| pysec-2019-190 |
|
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.… | neutron | 2019-03-13T02:29:00Z | 2021-08-27T03:22:08.807010Z |
| pysec-2019-189 |
|
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and … | neutron | 2019-04-05T05:29:00Z | 2021-08-27T03:22:08.705789Z |
| pysec-2018-94 |
|
Live-migrated instances are briefly able to inspect traffic for other instances on the sa… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.615958Z |
| pysec-2018-93 |
|
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and att… | neutron | 2018-09-10T19:29:00Z | 2021-08-27T03:22:08.555558Z |
| pysec-2020-241 |
|
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write perm… | moin | 2020-11-11T16:15:00Z | 2021-08-27T03:22:07.834309Z |
| pysec-2020-240 |
|
A Denial of Service (DoS) condition is possible in OpenStack Mistral in versions up to an… | mistral | 2020-06-15T15:15:00Z | 2021-08-27T03:22:07.520532Z |
| pysec-2019-188 |
|
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subreposito… | mercurial | 2019-04-22T16:29:00Z | 2021-08-27T03:22:07.409198Z |
| pysec-2018-92 |
|
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the … | mistral | 2018-11-02T21:29:00Z | 2021-08-27T03:22:07.552723Z |
| pysec-2018-91 |
|
cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a m… | mercurial | 2018-10-04T23:29:00Z | 2021-08-27T03:22:07.367975Z |
| pysec-2018-90 |
|
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situa… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.326002Z |
| pysec-2018-89 |
|
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-2… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.281860Z |
| pysec-2018-88 |
|
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in c… | mercurial | 2018-07-06T00:29:00Z | 2021-08-27T03:22:07.239369Z |
| pysec-2018-87 |
|
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerabi… | mercurial | 2018-03-14T13:29:00Z | 2021-08-27T03:22:07.192158Z |
| pysec-2017-91 |
|
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch… | mercurial | 2017-06-06T21:29:00Z | 2021-08-27T03:22:07.149994Z |
| pysec-2017-90 |
|
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause… | mercurial | 2017-12-07T18:29:00Z | 2021-08-27T03:22:07.106645Z |
| pysec-2017-89 |
|
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to po… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.062416Z |
| pysec-2017-88 |
|
Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can maliciou… | mercurial | 2017-10-05T01:29:00Z | 2021-08-27T03:22:07.021138Z |
| pysec-2016-31 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.805432Z |
| pysec-2016-30 |
|
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using… | moin | 2016-11-10T17:59:00Z | 2021-08-27T03:22:07.777797Z |
| pysec-2010-28 |
|
Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module … | moin | 2010-04-05T15:30:00Z | 2021-08-27T03:22:07.708069Z |
| pysec-2021-135 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-05-11T15:15:00Z | 2021-08-27T03:22:06.756710Z |
| pysec-2021-134 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.710356Z |
| pysec-2021-133 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-03-26T20:15:00Z | 2021-08-27T03:22:06.660066Z |
| pysec-2021-132 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.616674Z |
| pysec-2021-131 |
|
Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse).… | matrix-synapse | 2021-02-26T18:15:00Z | 2021-08-27T03:22:06.569635Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32164 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.118472Z |
| gsd-2024-32163 | CMSeasy 7.7.7.9 is vulnerable to code execution. | 2024-04-13T05:02:29.035823Z |
| gsd-2024-32162 | CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. | 2024-04-13T05:02:29.116676Z |
| gsd-2024-32161 | jizhiCMS 2.5 suffers from a File upload vulnerability. | 2024-04-13T05:02:29.030360Z |
| gsd-2024-32160 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.065557Z |
| gsd-2024-32159 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.074632Z |
| gsd-2024-32158 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.086840Z |
| gsd-2024-32157 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032980Z |
| gsd-2024-32156 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.032218Z |
| gsd-2024-32155 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.058740Z |
| gsd-2024-32154 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.079094Z |
| gsd-2024-32153 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-13T05:02:29.131911Z |
| gsd-2024-3684 | A server side request forgery vulnerability was identified in GitHub Enterprise Server th… | 2024-04-12T05:02:29.275037Z |
| gsd-2024-3683 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.274257Z |
| gsd-2024-3682 | The WP STAGING and WP STAGING Pro plugins for WordPress are vulnerable to Sensitive Infor… | 2024-04-12T05:02:29.292769Z |
| gsd-2024-3681 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.307607Z |
| gsd-2024-3680 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.373611Z |
| gsd-2024-3679 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.286671Z |
| gsd-2024-3678 | The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to… | 2024-04-12T05:02:29.184693Z |
| gsd-2024-3677 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212296Z |
| gsd-2024-3676 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.354611Z |
| gsd-2024-3675 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.169103Z |
| gsd-2024-3674 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.368889Z |
| gsd-2024-3673 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.255028Z |
| gsd-2024-3672 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2024-04-12T05:02:29.176394Z |
| gsd-2024-3671 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.295959Z |
| gsd-2024-3670 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.308996Z |
| gsd-2024-3669 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.212978Z |
| gsd-2024-3668 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.302178Z |
| gsd-2024-3667 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:29.125163Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-49380 | Malicious code in chai-await-test (npm) | 2025-11-07T03:52:52Z | 2025-12-24T10:09:26Z |
| MAL-2025-41538 | Malicious code in bsd-ui-stylekit (npm) | 2025-08-28T07:23:31Z | 2025-12-24T10:09:26Z |
| MAL-2025-191567 | Malicious code in chai-sync (npm) | 2025-12-01T13:05:09Z | 2025-12-24T10:09:26Z |
| MAL-2025-191566 | Malicious code in chai-promise-chain (npm) | 2025-12-01T13:05:08Z | 2025-12-24T10:09:26Z |
| MAL-2025-190634 | Malicious code in @validate-pubkey/hex (npm) | 2025-11-24T05:47:56Z | 2025-12-24T10:09:26Z |
| MAL-2025-190624 | Malicious code in base62-58x (npm) | 2025-11-24T03:27:37Z | 2025-12-24T10:09:26Z |
| MAL-2025-190599 | Malicious code in @vreden-team/baileys (npm) | 2025-11-21T03:58:09Z | 2025-12-24T10:09:26Z |
| MAL-2025-1721 | Malicious code in amazon-test (npm) | 2025-03-03T13:15:56Z | 2025-12-24T10:09:26Z |
| MAL-2025-149905 | Malicious code in aes-core-valid-ipherv (npm) | 2025-11-12T06:10:33Z | 2025-12-24T10:09:26Z |
| MAL-2024-11326 | Malicious code in ccs-react-lib (npm) | 2024-12-08T23:12:10Z | 2025-12-24T10:09:26Z |
| mal-2025-49331 | Malicious code in 8jfiesaf83 (npm) | 2025-11-03T18:59:00Z | 2025-12-24T10:09:25Z |
| mal-2025-47916 | Malicious code in @hash-validator/v2 (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| mal-2025-47913 | Malicious code in @bs58-utils/wrapper (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| mal-2025-3958 | Malicious code in @chat-components/common (npm) | 2025-05-07T19:59:49Z | 2025-12-24T10:09:25Z |
| MAL-2025-49331 | Malicious code in 8jfiesaf83 (npm) | 2025-11-03T18:59:00Z | 2025-12-24T10:09:25Z |
| MAL-2025-47916 | Malicious code in @hash-validator/v2 (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| MAL-2025-47913 | Malicious code in @bs58-utils/wrapper (npm) | 2025-10-07T00:21:42Z | 2025-12-24T10:09:25Z |
| MAL-2025-3958 | Malicious code in @chat-components/common (npm) | 2025-05-07T19:59:49Z | 2025-12-24T10:09:25Z |
| mal-2025-192764 | Malicious code in trial-guard (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192763 | Malicious code in supply_chain_dummy_test_4 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192762 | Malicious code in supply_chain_dummy_test_3 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192761 | Malicious code in supply_chain_dummy_test_2 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| mal-2025-192760 | Malicious code in supply_chain_dummy_test_1 (npm) | 2025-12-23T19:07:55Z | 2025-12-24T00:53:20Z |
| mal-2025-192759 | Malicious code in start-log-plugin (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192758 | Malicious code in start-log-backend (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| mal-2025-192729 | Malicious code in streamixer (npm) | 2025-12-23T16:22:41Z | 2025-12-24T00:53:20Z |
| MAL-2025-192764 | Malicious code in trial-guard (npm) | 2025-12-23T18:30:06Z | 2025-12-24T00:53:20Z |
| MAL-2025-192763 | Malicious code in supply_chain_dummy_test_4 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192762 | Malicious code in supply_chain_dummy_test_3 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| MAL-2025-192761 | Malicious code in supply_chain_dummy_test_2 (npm) | 2025-12-23T19:07:56Z | 2025-12-24T00:53:20Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0604 | Liferay DXP und Liferay Portal: Schwachstelle ermöglicht Cross-Site Scripting | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0603 | ESRI ArcGIS Portal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0601 | Google Cloud Platform - Gemini Cloud Assist: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0598 | IBM InfoSphere Information Server: Schwachstelle ermöglicht Privilegieneskalation | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0597 | SAP: Mehrere Schwachstellen | 2017-08-07T22:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0596 | Veeam Backup & Replication: Schwachstelle ermöglicht Codeausführung | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0595 | Jenkins Plugins: Mehrere Schwachstellen | 2025-03-19T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2023-0792 | ffmpeg: Schwachstelle ermöglicht Codeausführung | 2023-03-29T22:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2022-0210 | ffmpeg: Mehrere Schwachstellen | 2021-05-26T22:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2022-0146 | Python: Schwachstelle ermöglicht Cross-Site Scripting | 2022-01-31T23:00:00.000+00:00 | 2025-03-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0592 | Microsoft Windows: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0591 | Synology DiskStation Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0590 | Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0589 | Google Cloud Platform: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0588 | Kemp LoadMaster: Schwachstelle ermöglicht Codeausführung | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0586 | Aruba AOS-CX: Mehrere Schwachstellen | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0584 | IBM AIX: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-03-18T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2024-3378 | Synology DiskStation Manager: Mehrere Schwachstellen | 2024-11-07T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2024-0216 | GitLab: Mehrere Schwachstellen | 2024-01-25T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2022-0910 | PostgreSQL JDBC Treiber: Schwachstelle ermöglicht SQL Injection | 2022-08-03T22:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2022-0416 | PostgreSQL JDBC Treiber: Schwachstelle ermöglicht Codeausführung | 2022-02-01T23:00:00.000+00:00 | 2025-03-18T23:00:00.000+00:00 |
| wid-sec-w-2025-0583 | CODESYS Gateway: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0582 | CODESYS Control: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0581 | CODESYS Runtime Toolkit: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0577 | Dell BSAFE Crypto-J: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0576 | Contao: Schwachstelle ermöglicht Cross-Site Scripting | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0575 | TYPO3 Extension: Mehrere Schwachstellen | 2025-03-17T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0550 | Apache Camel: Schwachstelle ermöglicht Manipulation von Dateien | 2025-03-12T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0385 | Mattermost Desktop: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2025-02-16T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| wid-sec-w-2025-0043 | IBM QRadar SIEM (Log Source Management App): Mehrere Schwachstellen | 2025-01-12T23:00:00.000+00:00 | 2025-03-17T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:7201 | Red Hat Security Advisory: OpenShift Container Platform 4.11.12 security update | 2022-11-02T06:25:16+00:00 | 2026-02-03T21:13:28+00:00 |
| rhsa-2022:7058 | Red Hat Security Advisory: OpenShift sandboxed containers 1.3.1 security fix and bug fix update | 2022-10-19T22:19:53+00:00 | 2026-02-03T21:13:26+00:00 |
| rhsa-2022:6882 | Red Hat Security Advisory: Openshift Logging 5.3.13 security and bug fix release | 2022-11-09T16:43:13+00:00 | 2026-02-03T21:13:26+00:00 |
| rhsa-2022:6537 | Red Hat Security Advisory: Moderate:OpenShift Container Platform 4.11.5 security and extras update | 2022-09-20T08:13:12+00:00 | 2026-02-03T21:13:25+00:00 |
| rhsa-2022:6805 | Red Hat Security Advisory: OpenShift Container Platform 4.10.36 security update | 2022-10-12T08:13:59+00:00 | 2026-02-03T21:13:24+00:00 |
| rhsa-2022:6801 | Red Hat Security Advisory: OpenShift Container Platform 4.8.51 packages and security update | 2022-10-13T07:44:51+00:00 | 2026-02-03T21:13:24+00:00 |
| rhsa-2022:6714 | Red Hat Security Advisory: RHACS 3.72 enhancement and security update | 2022-09-26T15:26:11+00:00 | 2026-02-03T21:13:23+00:00 |
| rhsa-2022:6696 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.6 security update and bug fixes | 2022-09-26T14:49:03+00:00 | 2026-02-03T21:13:23+00:00 |
| rhsa-2022:6535 | Red Hat Security Advisory: OpenShift Container Platform 4.11.5 packages and security update | 2022-09-20T17:03:38+00:00 | 2026-02-03T21:13:22+00:00 |
| rhsa-2022:6347 | Red Hat Security Advisory: VolSync 0.5 security fixes and updates | 2022-09-06T14:14:15+00:00 | 2026-02-03T21:13:22+00:00 |
| rhsa-2022:6527 | Red Hat Security Advisory: OpenShift Virtualization 4.11.0 RPMs security and bug fix update | 2022-09-15T09:13:04+00:00 | 2026-02-03T21:13:21+00:00 |
| rhsa-2022:6526 | Red Hat Security Advisory: OpenShift Virtualization 4.11.0 Images security and bug fix update | 2022-09-14T19:28:51+00:00 | 2026-02-03T21:13:21+00:00 |
| rhsa-2022:6430 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update | 2022-09-13T02:09:43+00:00 | 2026-02-03T21:13:20+00:00 |
| rhsa-2022:6370 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes | 2022-09-06T22:27:58+00:00 | 2026-02-03T21:13:19+00:00 |
| rhsa-2022:6348 | Red Hat Security Advisory: Gatekeeper Operator v0.2 security and container updates | 2022-09-06T13:43:08+00:00 | 2026-02-03T21:13:19+00:00 |
| rhsa-2022:6346 | Red Hat Security Advisory: RHSA: Submariner 0.13 - security and enhancement update | 2022-09-06T13:00:18+00:00 | 2026-02-03T21:13:18+00:00 |
| rhsa-2022:6345 | Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.1 security updates and bug fixes | 2022-09-06T14:28:04+00:00 | 2026-02-03T21:13:17+00:00 |
| rhsa-2022:6344 | Red Hat Security Advisory: Logging Subsystem 5.5.1 Security and Bug Fix Update | 2022-09-06T17:00:14+00:00 | 2026-02-03T21:13:16+00:00 |
| rhsa-2022:6277 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.5 security update | 2022-08-31T16:58:21+00:00 | 2026-02-03T21:13:16+00:00 |
| rhsa-2022:6318 | Red Hat Security Advisory: OpenShift Container Platform 4.9.48 extras security update | 2022-09-12T12:17:08+00:00 | 2026-02-03T21:13:15+00:00 |
| rhsa-2022:6308 | Red Hat Security Advisory: OpenShift Container Platform 4.8.49 security update | 2022-09-14T20:37:57+00:00 | 2026-02-03T21:13:15+00:00 |
| rhsa-2022:6290 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.1.0 security and bug fix update | 2022-09-01T01:24:16+00:00 | 2026-02-03T21:13:15+00:00 |
| rhsa-2022:6287 | Red Hat Security Advisory: OpenShift Container Platform 4.11.3 packages and security update | 2022-09-07T20:47:50+00:00 | 2026-02-03T21:13:12+00:00 |
| rhsa-2022:6283 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.2.2 Containers security update | 2022-08-31T18:49:06+00:00 | 2026-02-03T21:13:12+00:00 |
| rhsa-2022:6263 | Red Hat Security Advisory: OpenShift Container Platform 4.6.61 security and extras update | 2022-09-09T04:53:55+00:00 | 2026-02-03T21:13:12+00:00 |
| rhsa-2022:6258 | Red Hat Security Advisory: OpenShift Container Platform 4.10.31 security update | 2022-09-08T05:39:54+00:00 | 2026-02-03T21:13:11+00:00 |
| rhsa-2022:6188 | Red Hat Security Advisory: Node Maintenance Operator 4.11.1 security update | 2022-08-25T11:20:51+00:00 | 2026-02-03T21:13:11+00:00 |
| rhsa-2022:6187 | Red Hat Security Advisory: Node Health Check Operator 0.3.1 security update | 2022-08-25T10:08:43+00:00 | 2026-02-03T21:13:10+00:00 |
| rhsa-2022:6183 | Red Hat Security Advisory: Logging Subsystem 5.4.5 Security and Bug Fix Update | 2022-09-06T13:32:06+00:00 | 2026-02-03T21:13:09+00:00 |
| rhsa-2022:6156 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement, & bugfix update | 2022-08-24T13:45:52+00:00 | 2026-02-03T21:13:09+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-207-01 | Inductive Automation Ignition | 2022-07-26T00:00:00.000000Z | 2022-08-04T00:00:00.000000Z |
| icsa-22-209-01 | Rockwell Products Impacted by Chromium Type Confusion | 2022-07-28T00:00:00.000000Z | 2022-07-28T00:00:00.000000Z |
| icsa-22-207-02 | Honeywell Safety Manager | 2022-07-26T06:00:00.000000Z | 2022-07-26T06:00:00.000000Z |
| icsa-22-207-04 | MOXA NPort 5110 | 2022-07-26T00:00:00.000000Z | 2022-07-26T00:00:00.000000Z |
| icsa-22-207-03 | Honeywell Saia Burgess PG5 PCD | 2022-07-26T00:00:00.000000Z | 2022-07-26T00:00:00.000000Z |
| icsa-22-202-05 | AutomationDirect Stride Field I/O | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-202-03 | Rockwell Automation ISaGRAF Workbench | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-202-02 | Johnson Controls Metasys ADS, ADX, OAS | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-202-01 | ABB Drive Composer, Automation Builder, Mint Workbench | 2022-07-21T00:00:00.000000Z | 2022-07-21T00:00:00.000000Z |
| icsa-22-193-01 | Dahua ASI7213X-T1 (Update A) | 2022-07-12T00:00:00.000000Z | 2022-07-19T00:00:00.000000Z |
| icsa-22-195-17 | Siemens Opcenter Quality | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-16 | Siemens EN100 Ethernet Module | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-14 | Siemens CPC80 Firmware of SICAM A8000 | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-13 | Siemens Mendix | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-10 | Siemens Mendix Applications | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-08 | Siemens PADS Standard/Plus Viewer | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-06 | Siemens Mendix Excel Importer | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-05 | Siemens RUGGEDCOM ROX | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-04 | Siemens Simcenter Femap | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-195-03 | Siemens SIMATIC MV500 Devices | 2022-07-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-104-16 | Siemens TIA Administrator | 2022-04-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-104-07 | Siemens Mendix | 2022-04-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-19-085-01 | Siemens SCALANCE X (Update D) | 2019-03-12T00:00:00.000000Z | 2022-07-12T00:00:00.000000Z |
| icsa-22-188-02 | Bently Nevada ADAPT 3701/4X Series and 60M100 | 2022-07-07T00:00:00.000000Z | 2022-07-07T00:00:00.000000Z |
| icsa-22-188-01 | Rockwell Automation MicroLogix | 2022-07-07T00:00:00.000000Z | 2022-07-07T00:00:00.000000Z |
| icsa-22-181-04 | Distributed Data Systems WebHMI | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-03 | Emerson DeltaV Distributed Control System | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-02 | Yokogawa Wide Area Communication Router | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-181-01 | Exemys RME1 | 2022-06-30T00:00:00.000000Z | 2022-06-30T00:00:00.000000Z |
| icsa-22-179-06 | Motorola Solutions ACE1000 | 2022-06-28T00:00:00.000000Z | 2022-06-28T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fxos-cmdinj-pqZvmXCr | Cisco FXOS Software Command Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:21:04+00:00 |
| cisco-sa-asaftd-dos-qfcnepfx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:16:34+00:00 |
| cisco-sa-asaftd-dos-QFcNEPfx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T13:16:34+00:00 |
| cisco-sa-asa-ftd-crlf-inj-bx9urwsn | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:24+00:00 |
| cisco-sa-asa-ftd-crlf-inj-BX9uRwSn | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:24+00:00 |
| cisco-sa-asa-rxss-l54htxp | Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:19+00:00 |
| cisco-sa-asa-rxss-L54Htxp | Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:19+00:00 |
| cisco-sa-asaftd-sipdos-3dgvdjvg | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:14+00:00 |
| cisco-sa-asaftd-sipdos-3DGvdjvg | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:14+00:00 |
| cisco-sa-asaftd-ftpbypass-hy3utxyu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:09+00:00 |
| cisco-sa-asaftd-ftpbypass-HY3UTxYu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:09+00:00 |
| cisco-sa-asaftd-frag-memleak-mctqdp9n | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:05+00:00 |
| cisco-sa-asaftd-frag-memleak-mCtqdP9n | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:05+00:00 |
| cisco-sa-asaftd-fileup-dos-zvc7wtys | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:04+00:00 |
| cisco-sa-asaftd-fileup-dos-zvC7wtys | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:07:04+00:00 |
| cisco-sa-asaftd-webdos-fbzm5ynw | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-webdos-fBzM5Ynw | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-sslvpndma-dos-hrrqb9yx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-sslvpndma-dos-HRrqB9Yx | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:59+00:00 |
| cisco-sa-asaftd-ospflls-37xy2q6r | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:55+00:00 |
| cisco-sa-asaftd-ospflls-37Xy2q6r | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:55+00:00 |
| cisco-sa-asaftd-rule-bypass-p73abnwq | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:54+00:00 |
| cisco-sa-asaftd-rule-bypass-P73ABNWQ | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-23T01:06:54+00:00 |
| cisco-sa-asa-ftd-tcp-dos-n3dmnu4t | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-22T23:49:39+00:00 |
| cisco-sa-asa-ftd-tcp-dos-N3DMnU4T | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-22T23:49:39+00:00 |
| cisco-sa-tcp-intercept-bypass-xg9m3pby | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-tcp-intercept-bypass-xG9M3PbY | Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxosfcm-csrf-uho4e5bz | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxosfcm-csrf-uhO4e5BZ | Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fxos-sbbp-xtupkytn | Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-32911 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value | 2025-04-02T00:00:00.000Z | 2025-09-04T03:10:11.000Z |
| msrc_cve-2024-21176 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). | 2024-07-01T07:00:00.000Z | 2025-09-04T03:09:45.000Z |
| msrc_cve-2025-38349 | eventpoll: don't decrement ep refcount while still holding the ep mutex | 2025-07-02T00:00:00.000Z | 2025-09-04T03:09:39.000Z |
| msrc_cve-2025-30258 | In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS." | 2025-03-02T00:00:00.000Z | 2025-09-04T03:09:31.000Z |
| msrc_cve-2023-0664 | A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system. | 2023-03-10T00:00:00.000Z | 2025-09-04T03:08:29.000Z |
| msrc_cve-2025-38571 | sunrpc: fix client side handling of tls alerts | 2025-08-02T00:00:00.000Z | 2025-09-04T03:08:05.000Z |
| msrc_cve-2024-25177 | LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS). | 2025-07-02T00:00:00.000Z | 2025-09-04T03:05:40.000Z |
| msrc_cve-2024-57254 | An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. | 2025-02-02T00:00:00.000Z | 2025-09-04T03:04:13.000Z |
| msrc_cve-2024-26896 | wifi: wfx: fix memory leak when starting AP | 2024-04-02T07:00:00.000Z | 2025-09-04T03:02:24.000Z |
| msrc_cve-2023-52927 | netfilter: allow exp not to be removed in nf_ct_find_expectation | 2025-03-02T00:00:00.000Z | 2025-09-04T03:00:35.000Z |
| msrc_cve-2025-38608 | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 2025-08-02T00:00:00.000Z | 2025-09-04T02:59:49.000Z |
| msrc_cve-2025-4373 | Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar | 2025-05-02T00:00:00.000Z | 2025-09-04T02:58:55.000Z |
| msrc_cve-2022-34835 | In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function. | 2022-06-02T00:00:00.000Z | 2025-09-04T02:58:01.000Z |
| msrc_cve-2025-38562 | ksmbd: fix null pointer dereference error in generate_encryptionkey | 2025-08-02T00:00:00.000Z | 2025-09-04T02:55:37.000Z |
| msrc_cve-2025-21650 | net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue | 2025-01-02T00:00:00.000Z | 2025-09-04T02:55:33.000Z |
| msrc_cve-2022-41725 | Excessive resource consumption in mime/multipart | 2023-02-01T00:00:00.000Z | 2025-09-04T02:53:04.000Z |
| msrc_cve-2025-38204 | jfs: fix array-index-out-of-bounds read in add_missing_indices | 2025-07-02T00:00:00.000Z | 2025-09-04T02:52:29.000Z |
| msrc_cve-2019-14204 | An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:52:16.000Z |
| msrc_cve-2025-5994 | Cache poisoning via the ECS-enabled Rebirthday Attack | 2025-07-02T00:00:00.000Z | 2025-09-04T02:52:05.000Z |
| msrc_cve-2025-38610 | powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() | 2025-08-02T00:00:00.000Z | 2025-09-04T02:51:36.000Z |
| msrc_cve-2025-4056 | Glib: glib crash after long command line | 2025-07-02T00:00:00.000Z | 2025-09-04T02:50:16.000Z |
| msrc_cve-2025-21651 | net: hns3: don't auto enable misc vector | 2025-01-02T00:00:00.000Z | 2025-09-04T02:46:28.000Z |
| msrc_cve-2021-28211 | A heap overflow in LzmaUefiDecompressGetInfo function in EDK II. | 2021-06-02T00:00:00.000Z | 2025-09-04T02:46:24.000Z |
| msrc_cve-2025-21812 | ax25: rcu protect dev->ax25_ptr | 2025-02-02T00:00:00.000Z | 2025-09-04T02:45:19.000Z |
| msrc_cve-2025-38604 | wifi: rtl818x: Kill URBs before clearing tx status queue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:44:21.000Z |
| msrc_cve-2017-7718 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. | 2017-04-02T00:00:00.000Z | 2025-09-04T02:42:31.000Z |
| msrc_cve-2025-7207 | mruby nregs codegen.c scope_new heap-based overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T02:39:43.000Z |
| msrc_cve-2025-38579 | f2fs: fix KMSAN uninit-value in extent_info usage | 2025-08-02T00:00:00.000Z | 2025-09-04T02:39:27.000Z |
| msrc_cve-2019-14196 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. | 2019-07-02T00:00:00.000Z | 2025-09-04T02:36:43.000Z |
| msrc_cve-2025-38602 | iwlwifi: Add missing check for alloc_ordered_workqueue | 2025-08-02T00:00:00.000Z | 2025-09-04T02:35:35.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13964-1 | iperf-3.17.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13963-1 | containerized-data-importer-api-1.59.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13962-1 | cacti-1.2.27-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13961-1 | sccache-0.8.0~3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13960-1 | podman-5.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13959-1 | kernel-devel-6.8.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13958-1 | dnsdist-1.9.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13957-1 | liburiparser1-0.9.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13956-1 | ruby3.3-rubygem-grpc-1.63.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13955-1 | python-2.7.18-46.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13954-1 | gnu-recutils-1.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13953-1 | chromedriver-124.0.6367.201-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13952-1 | buildah-1.35.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13951-1 | apptainer-1.3.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13950-1 | libecpg6-16.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13949-1 | ovmf-202308-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13948-1 | libvirt-10.3.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13947-1 | postgresql15-15.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13946-1 | postgresql14-14.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13945-1 | nodejs-electron-29.3.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13944-1 | libunbound8-1.20.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13943-1 | tinyproxy-1.11.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13942-1 | libopenssl-3-devel-3.1.4-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13941-1 | go1.21-1.21.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13940-1 | ffmpeg-4-4.4.4-10.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13939-1 | python-tqdm-bash-completion-4.66.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13938-1 | python310-sqlparse-0.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13937-1 | libopenssl-1_1-devel-1.1.1w-9.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13936-1 | go1.22-1.22.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13935-1 | glibc-2.39-6.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-golang-2022-32189 | Panic when decoding Float and Rat types in math/big | 2024-03-06T10:59:01.492Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-32148 | Exposure of client IP addresses in net/http | 2024-03-06T10:59:14.057Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30635 | Stack exhaustion when decoding certain messages in encoding/gob | 2024-03-06T10:59:22.735Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30634 | Indefinite hang with large buffers on Windows in crypto/rand | 2024-03-06T10:59:32.189Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30633 | Stack exhaustion when unmarshaling certain documents in encoding/xml | 2024-03-06T10:59:42.110Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30632 | Stack exhaustion on crafted paths in path/filepath | 2024-03-06T10:59:52.395Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30631 | Stack exhaustion when reading certain archives in compress/gzip | 2024-03-06T11:00:01.316Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30630 | Stack exhaustion in Glob on certain paths in io/fs | 2024-03-06T11:00:11.789Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30629 | Session tickets lack random ticket_age_add in crypto/tls | 2024-03-06T11:00:22.416Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-30580 | Empty Cmd.Path can trigger unintended binary in os/exec on Windows | 2024-03-06T11:00:32.217Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-29804 | Path traversal via Clean on Windows in path/filepath | 2024-03-06T11:00:46.305Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-2880 | Incorrect sanitization of forwarded query parameters in net/http/httputil | 2024-03-06T11:01:07.968Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-2879 | Unbounded memory consumption when reading headers in archive/tar | 2024-03-06T11:01:17.293Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-28131 | Stack exhaustion from deeply nested XML documents in encoding/xml | 2024-03-06T11:01:37.507Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-1962 | Stack exhaustion due to deeply nested types in go/parser | 2024-03-06T11:02:59.703Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2022-1705 | Improper sanitization of Transfer-Encoding headers in net/http | 2024-03-06T11:03:10.170Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2020-28367 | Arbitrary code execution via the go command with cgo in cmd/go | 2024-03-06T11:07:32.402Z | 2025-05-20T10:02:07.006Z |
| bit-golang-2020-28366 | Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo | 2024-03-06T11:07:42.467Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-2408 | Insufficient Granularity of Access Control in GitLab | 2025-04-12T08:05:53.910Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-1908 | Business Logic Errors in GitLab | 2025-04-26T06:31:29.850Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-1072 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-02-11T07:10:10.109Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0555 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-03-05T07:09:06.942Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0549 | Authentication Bypass Using an Alternate Path or Channel in GitLab | 2025-05-13T06:11:47.084Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0516 | Incorrect Authorization in GitLab | 2025-02-17T19:10:56.835Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0475 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2025-03-05T07:09:22.656Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0290 | Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab | 2025-01-30T19:13:11.925Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2025-0194 | Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab | 2025-01-10T19:11:23.175Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9693 | Incorrect Authorization in GitLab | 2024-11-16T07:09:22.299Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9633 | Incorrect Ownership Assignment in GitLab | 2024-11-16T07:09:30.396Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-9631 | Inefficient Algorithmic Complexity in GitLab | 2025-02-07T07:10:40.789Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202211-1696 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, whi… | 2024-04-27T11:57:39.547000Z |
| var-202211-1695 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may l… | 2024-04-27T11:57:39.661000Z |
| var-202211-1694 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead t… | 2024-04-27T11:57:39.635000Z |
| var-202107-1421 | A vulnerability has been identified in JT2Go (All versions < V13.2), Solid Edge SE2021 (A… | 2024-04-26T10:58:15.919000Z |
| var-200505-0609 | Linksys PSUS4 running firmware 6032 allows remote attackers to cause a denial of service … | 2024-04-26T10:44:27.129000Z |
| var-202403-2157 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due t… | 2024-04-20T23:23:33.360000Z |
| var-202404-0165 | SIMATIC PCS 7 is a process control system. SIMATIC WinCC is an automated supervisory cont… | 2024-04-20T23:23:18.968000Z |
| var-202403-2357 | A memory buffer vulnerability in Rockwell Automation Arena Simulation software could pot… | 2024-04-20T23:19:06.927000Z |
| var-201409-0173 | The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP communi… | 2024-04-20T23:18:01.803000Z |
| var-202403-2758 | An uninitialized pointer in Rockwell Automation Arena Simulation software could potentia… | 2024-04-20T23:17:49.371000Z |
| var-201807-0057 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer … | 2024-04-20T23:17:14.127000Z |
| var-201712-0130 | Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 con… | 2024-04-20T23:17:14.088000Z |
| var-202403-3014 | Technicolor TC8715D TC8715D-01.EF.04.38.00-180405-S-FF9-D RSE-TC8717T devices allow a rem… | 2024-04-20T23:05:59.994000Z |
| var-201204-0037 | RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password … | 2024-04-20T23:04:08.913000Z |
| var-202006-1646 | A memory consumption issue was addressed with improved memory handling. This issue is fix… | 2024-04-20T23:03:00.743000Z |
| var-201403-0506 | The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "ma… | 2024-04-20T19:59:14.400000Z |
| var-200110-0342 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-04-20T19:49:59.696000Z |
| var-202002-0036 | Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Sy… | 2024-04-20T19:49:44.965000Z |
| var-201703-0755 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.… | 2024-04-19T23:01:51.687000Z |
| var-201501-0774 | plural UEFI In the system, EFI S3 Resume Boot Path Used in boot script Does not properly … | 2024-04-19T23:01:21.735000Z |
| var-201811-0173 | A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adapt… | 2024-04-19T22:59:46.206000Z |
| var-202401-2573 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler … | 2024-04-19T22:57:46.120000Z |
| var-201502-0200 | D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary… | 2024-04-19T22:57:38.149000Z |
| var-201501-0762 | BIOS As a locking mechanism BIOS_CNTL.BIOSWE When BIOS_CNTL.BLE Use only Intel Corporatio… | 2024-04-19T22:57:38.199000Z |
| var-201602-0071 | Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7… | 2024-04-19T22:56:33.440000Z |
| var-201503-0067 | Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc10… | 2024-04-19T22:56:33.838000Z |
| var-201306-0355 | ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax mod… | 2024-04-19T22:55:29.087000Z |
| var-201411-0154 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows … | 2024-04-19T22:55:28.224000Z |
| var-201504-0559 | HP Network Automation Has multiple vulnerabilities in the web administration screen. HP N… | 2024-04-19T22:55:06.850000Z |
| var-201705-3474 | An unprivileged network attacker could gain system privileges to provisioned Intel manage… | 2024-04-19T22:55:05.789000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000082 | Cybozu Live for Android vulnerable in the WebView class | 2012-09-03T10:41+09:00 | 2012-09-03T10:41+09:00 |
| jvndb-2012-000081 | Cybozu Live for Android vulnerable to arbitrary Java method execution | 2012-09-03T10:34+09:00 | 2012-09-03T10:34+09:00 |
| jvndb-2012-000078 | mixi for Android information management vulnerability | 2012-08-17T15:58+09:00 | 2012-08-17T15:58+09:00 |
| jvndb-2012-000077 | Multiple GREE Android applications vulnerable in the WebView class | 2012-08-17T15:52+09:00 | 2012-08-17T15:52+09:00 |
| jvndb-2012-003525 | Cross-site Scripting Vulnerability in JP1/Integrated Management - Service Support | 2012-08-10T15:05+09:00 | 2012-08-10T15:05+09:00 |
| jvndb-2012-000076 | Sleipnir Mobile for Android vulnerable to arbitrary script execution | 2012-08-08T14:43+09:00 | 2012-08-08T14:43+09:00 |
| jvndb-2012-000075 | Sleipnir Mobile for Android vulnerable to arbitrary Java method execution | 2012-08-08T14:39+09:00 | 2012-08-08T14:39+09:00 |
| jvndb-2012-000074 | LINE for Android vulnerable in handling of implicit intents | 2012-08-07T13:33+09:00 | 2012-08-07T13:33+09:00 |
| jvndb-2011-000088 | Safari for iOS vulnerable to cross-site scripting | 2011-10-17T18:56+09:00 | 2012-08-07T12:11+09:00 |
| jvndb-2012-000072 | Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration | 2012-07-30T14:56+09:00 | 2012-08-02T16:33+09:00 |
| jvndb-2012-000073 | GoodReader vulnerable to cross-site scripting | 2012-08-02T14:46+09:00 | 2012-08-02T14:46+09:00 |
| jvndb-2012-000009 | Multiple web browsers vulnerable in processing Tranfer-Encoding header | 2012-07-30T14:53+09:00 | 2012-07-30T14:53+09:00 |
| jvndb-2012-000049 | Opera fails to verify SSL server certificates | 2012-05-25T15:40+09:00 | 2012-07-26T17:31+09:00 |
| jvndb-2012-000071 | Sleipnir Mobile for Android vulnerable in the WebView class | 2012-07-24T14:05+09:00 | 2012-07-24T14:05+09:00 |
| jvndb-2012-003244 | Privilege escalation vulnerability in Hitachi JP1/NETM/DM | 2012-07-23T17:13+09:00 | 2012-07-23T17:13+09:00 |
| jvndb-2012-000070 | Yahoo! Browser vulnerable in the WebView class | 2012-07-13T15:00+09:00 | 2012-07-20T12:12+09:00 |
| jvndb-2012-000069 | Movable Type plugin MT4i vulnerable to cross-site scripting | 2012-07-06T17:24+09:00 | 2012-07-06T17:24+09:00 |
| jvndb-2012-000068 | YY-BOARD vulnerable to cross-site scripting | 2012-07-06T17:19+09:00 | 2012-07-06T17:19+09:00 |
| jvndb-2012-000067 | Movable Type plugin MT4i vulnerable to cross-site scripting | 2012-07-06T17:14+09:00 | 2012-07-06T17:14+09:00 |
| jvndb-2012-000066 | Ruby hash table implementation vulnerable to denial-of-service | 2012-07-06T17:11+09:00 | 2012-07-06T17:11+09:00 |
| jvndb-2012-000064 | Yome Collection for Android issue in management of IMEI | 2012-07-03T14:57+09:00 | 2012-07-03T14:57+09:00 |
| jvndb-2012-000065 | Zenphoto vulnerable to cross-site scripting | 2012-07-03T14:49+09:00 | 2012-07-03T14:49+09:00 |
| jvndb-2012-000061 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T14:31+09:00 | 2012-06-19T14:31+09:00 |
| jvndb-2012-000060 | SmallPICT vulnerable to cross-site scripting | 2012-06-19T14:00+09:00 | 2012-06-19T14:00+09:00 |
| jvndb-2012-000062 | WEB PATIO vulnerable to cross-site scripting | 2012-06-19T12:35+09:00 | 2012-06-19T12:35+09:00 |
| jvndb-2012-000057 | Dolphin Browser vulnerable in the WebView class | 2012-06-14T14:20+09:00 | 2012-06-14T14:20+09:00 |
| jvndb-2012-000046 | Flash Player issue in implementations of the Same Origin Policy | 2012-06-11T15:05+09:00 | 2012-06-13T16:39+09:00 |
| jvndb-2012-000056 | FeedDemon vulnerable to arbitrary script execution | 2012-06-07T15:39+09:00 | 2012-06-07T15:39+09:00 |
| jvndb-2012-000059 | SEIL series fail to restrict access permissions | 2012-06-06T12:39+09:00 | 2012-06-06T12:39+09:00 |
| jvndb-2012-000058 | WordPress plugin WassUp vulnerable to cross-site scripting | 2012-06-06T12:29+09:00 | 2012-06-06T12:29+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:02031-1 | Security update for pam_pkcs11 | 2025-06-20T07:56:26Z | 2025-06-20T07:56:26Z |
| suse-su-2025:02030-1 | Security update for xen | 2025-06-20T07:04:04Z | 2025-06-20T07:04:04Z |
| suse-su-2025:02029-1 | Security update for apache2-mod_security2 | 2025-06-19T15:17:27Z | 2025-06-19T15:17:27Z |
| suse-su-2025:02028-1 | Security update for apache2-mod_security2 | 2025-06-19T15:16:46Z | 2025-06-19T15:16:46Z |
| suse-su-2025:02027-1 | Security update for perl | 2025-06-19T15:15:57Z | 2025-06-19T15:15:57Z |
| suse-su-2025:02026-1 | Security update for pam_pkcs11 | 2025-06-19T13:30:55Z | 2025-06-19T13:30:55Z |
| suse-su-2025:20427-1 | Security update for pam | 2025-06-19T08:49:31Z | 2025-06-19T08:49:31Z |
| suse-su-2025:20441-1 | Security update for pam | 2025-06-19T08:44:07Z | 2025-06-19T08:44:07Z |
| suse-su-2025:02020-1 | Security update for gstreamer-plugins-base | 2025-06-19T08:35:03Z | 2025-06-19T08:35:03Z |
| suse-su-2025:02019-1 | Security update for systemd | 2025-06-19T07:58:03Z | 2025-06-19T07:58:03Z |
| suse-su-2025:02017-1 | Security update for s390-tools | 2025-06-19T07:14:56Z | 2025-06-19T07:14:56Z |
| suse-su-2025:02016-1 | Security update for screen | 2025-06-19T07:14:39Z | 2025-06-19T07:14:39Z |
| suse-su-2025:02015-1 | Security update for gdm | 2025-06-19T07:14:10Z | 2025-06-19T07:14:10Z |
| suse-su-2025:02014-1 | Security update for ignition | 2025-06-19T07:13:44Z | 2025-06-19T07:13:44Z |
| suse-su-2025:02013-1 | Security update for pam | 2025-06-18T18:05:26Z | 2025-06-18T18:05:26Z |
| suse-su-2025:02012-1 | Security update for xorg-x11-server | 2025-06-18T15:36:17Z | 2025-06-18T15:36:17Z |
| suse-su-2025:02010-1 | Security update for redis | 2025-06-18T15:25:25Z | 2025-06-18T15:25:25Z |
| suse-su-2025:02005-1 | Security update for gdm | 2025-06-18T11:22:41Z | 2025-06-18T11:22:41Z |
| suse-su-2025:02004-1 | Security update for gdm | 2025-06-18T11:22:28Z | 2025-06-18T11:22:28Z |
| suse-su-2025:02003-1 | Security update for gdm | 2025-06-18T11:21:50Z | 2025-06-18T11:21:50Z |
| suse-su-2025:02002-1 | Security update for gdm | 2025-06-18T11:21:39Z | 2025-06-18T11:21:39Z |
| suse-su-2025:02001-1 | Security update for pam | 2025-06-18T11:21:27Z | 2025-06-18T11:21:27Z |
| suse-su-2025:02000-1 | Security update for the Linux Kernel | 2025-06-18T11:08:16Z | 2025-06-18T11:08:16Z |
| suse-su-2025:20426-1 | Security update for libblockdev | 2025-06-18T08:56:50Z | 2025-06-18T08:56:50Z |
| suse-su-2025:20440-1 | Security update for libblockdev | 2025-06-18T08:50:24Z | 2025-06-18T08:50:24Z |
| suse-su-2025:01999-1 | Security update for python-requests | 2025-06-18T08:43:00Z | 2025-06-18T08:43:00Z |
| suse-su-2025:01998-1 | Security update for python-requests | 2025-06-18T08:42:28Z | 2025-06-18T08:42:28Z |
| suse-su-2025:01997-1 | Security update for python3-requests | 2025-06-18T08:41:18Z | 2025-06-18T08:41:18Z |
| suse-su-2025:01995-1 | Security update for the Linux Kernel | 2025-06-18T08:34:45Z | 2025-06-18T08:34:45Z |
| suse-su-2025:01994-1 | Security update 4.3.15.2 SUSE Manager Server 4.3 | 2025-06-18T02:13:38Z | 2025-06-18T02:13:38Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27272 | TOTOLINK N600R setWiFiBasicConfig函数栈缓冲区溢出漏洞 | 2025-10-24 | 2025-11-07 |
| cnvd-2025-27271 | TOTOLINK N600R sub_41773C函数空指针取消引用漏洞 | 2025-10-24 | 2025-11-07 |
| cnvd-2025-27270 | TOTOLINK N600R setWiFiMultipleConfig函数堆栈缓冲区溢出漏洞 | 2025-10-24 | 2025-11-07 |
| cnvd-2025-27269 | TOTOLINK LR350 sub_421BAC函数堆栈缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27268 | TOTOLINK A7000R urldecode函数堆栈缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27267 | TOTOLINK A7000R sub_4222E0函数栈缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27266 | TOTOLINK A7000R sub_421CF0函数栈缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27265 | TOTOLINK A7000R sub_421A04函数堆栈缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27233 | Tenda AX-1803缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27232 | Tenda AC8缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27231 | AIxBlock跨站脚本漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-27230 | Tenda AC21缓冲区溢出漏洞 | 2025-11-05 | 2025-11-07 |
| cnvd-2025-26916 | WordPress插件Auto Featured Image服务端请求伪造漏洞 | 2025-10-31 | 2025-11-07 |
| cnvd-2025-26915 | Delta Electronics DRASimuCAD类型混淆漏洞 | 2024-12-23 | 2025-11-07 |
| cnvd-2025-26914 | Delta Electronics DTM代码问题漏洞 | 2024-12-23 | 2025-11-07 |
| cnvd-2025-26913 | Delta Electronics CNCSoft越界写入漏洞 | 2025-06-11 | 2025-11-07 |
| cnvd-2025-26912 | Delta Electronics ASDA-Soft堆栈缓冲区溢出漏洞(CNVD-2025-26912) | 2025-10-21 | 2025-11-07 |
| cnvd-2025-26911 | Delta Electronics ASDA-Soft堆栈缓冲区溢出漏洞 | 2025-10-21 | 2025-11-07 |
| cnvd-2025-26895 | 多款Mozilla产品安全绕过漏洞(CNVD-2025-26895) | 2025-08-26 | 2025-11-07 |
| cnvd-2025-26894 | 多款Mozilla产品代码执行漏洞(CNVD-2025-26894) | 2025-08-26 | 2025-11-07 |
| cnvd-2025-26893 | 多款Mozilla产品代码执行漏洞(CNVD-2025-26893) | 2025-08-26 | 2025-11-07 |
| cnvd-2025-26892 | 多款Mozilla产品欺骗漏洞(CNVD-2025-26892) | 2025-08-26 | 2025-11-07 |
| cnvd-2025-27264 | Library System add-book.php文件代码问题漏洞 | 2025-07-04 | 2025-11-06 |
| cnvd-2025-27263 | Library System代码问题漏洞 | 2025-07-07 | 2025-11-06 |
| cnvd-2025-27262 | Library System student-issue-book.php文件SQL注入漏洞 | 2025-07-07 | 2025-11-06 |
| cnvd-2025-27261 | Library System profile.php文件SQL注入漏洞 | 2025-07-07 | 2025-11-06 |
| cnvd-2025-27260 | Library System teacher/profile.php文件代码问题漏洞 | 2025-07-18 | 2025-11-06 |
| cnvd-2025-27259 | Library System profile.php文件代码问题漏洞 | 2025-07-18 | 2025-11-06 |
| cnvd-2025-27258 | Voting System positions_add.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| cnvd-2025-27257 | Library System books.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-06 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0038 | Multiples vulnérabilités dans Microsoft Office | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0037 | Vulnérabilité dans Microsoft Edge | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0036 | Multiples vulnérabilités dans les produits Moxa | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0035 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0034 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0033 | Multiples vulnérabilités dans Google Chrome | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0032 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0031 | Multiples vulnérabilités dans les produits Fortinet | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0019 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-01-09T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0009 | Multiples vulnérabilités dans les produits Mozilla | 2025-01-08T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0041 | Multiples vulnérabilités dans les produits Microsoft | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0040 | Multiples vulnérabilités dans Microsoft .Net | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0039 | Multiples vulnérabilités dans Microsoft Windows | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0038 | Multiples vulnérabilités dans Microsoft Office | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0037 | Vulnérabilité dans Microsoft Edge | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0036 | Multiples vulnérabilités dans les produits Moxa | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0035 | Multiples vulnérabilités dans Ivanti Endpoint Manager (EPM) | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0034 | Multiples vulnérabilités dans les produits Schneider Electric | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0033 | Multiples vulnérabilités dans Google Chrome | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0032 | Multiples vulnérabilités dans HPE Aruba Networking AOS | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0031 | Multiples vulnérabilités dans les produits Fortinet | 2025-01-15T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0019 | Multiples vulnérabilités dans Mozilla Thunderbird | 2025-01-09T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| CERTFR-2025-AVI-0009 | Multiples vulnérabilités dans les produits Mozilla | 2025-01-08T00:00:00.000000 | 2025-01-15T00:00:00.000000 |
| certfr-2025-avi-0029 | Multiples vulnérabilités dans les produits Siemens | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0028 | Multiples vulnérabilités dans Typo3 | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0027 | Multiples vulnérabilités dans les produits SAP | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| certfr-2025-avi-0026 | Vulnérabilité dans Veeam Backup pour Microsoft Azure | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| CERTFR-2025-AVI-0029 | Multiples vulnérabilités dans les produits Siemens | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| CERTFR-2025-AVI-0028 | Multiples vulnérabilités dans Typo3 | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |
| CERTFR-2025-AVI-0027 | Multiples vulnérabilités dans les produits SAP | 2025-01-14T00:00:00.000000 | 2025-01-14T00:00:00.000000 |