Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1054 |
5.3 (3.1)
|
RegistrationMagic <= 6.0.7.4 - Missing Authorization t… |
metagauss |
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login |
2026-01-28T07:27:35.396Z | 2026-01-28T14:43:48.192Z |
| CVE-2026-1506 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
D-Link DIR-615 MAC Filter Configuration adv_mac_filter… |
D-Link |
DIR-615 |
2026-01-28T02:32:09.027Z | 2026-01-28T14:43:26.080Z |
| CVE-2026-1060 |
5.3 (3.1)
|
WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Inf… |
litonice13 |
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer |
2026-01-28T14:25:11.551Z | 2026-01-28T14:42:12.226Z |
| CVE-2026-1514 |
7.1 (4.0)
6.5 (3.1)
|
2100 Technology|Official Document Management System - … |
2100 Technology |
Official Document Management System |
2026-01-28T03:39:56.271Z | 2026-01-28T14:40:49.336Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-1377 |
4.3 (3.1)
|
imwptip <= 1.1 - Cross-Site Request Forgery to Setting… |
hu_chao |
imwptip |
2026-01-28T11:23:37.683Z | 2026-01-28T14:38:35.221Z |
| CVE-2026-1391 |
5.3 (3.1)
|
Vzaar Media Management <= 1.2 - Reflected Cross-Site S… |
mamunreza |
Vzaar Media Management |
2026-01-28T11:23:38.696Z | 2026-01-28T14:37:57.013Z |
| CVE-2020-36990 |
8.5 (4.0)
7.8 (3.1)
|
Input Director 1.4.3 - 'Input Director' Unquoted Servi… |
Inputdirector |
Input Director |
2026-01-28T12:29:02.426Z | 2026-01-28T14:37:50.562Z |
| CVE-2020-36991 |
8.5 (4.0)
7.8 (3.1)
|
ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Serv… |
Sharemouse |
ShareMouse |
2026-01-28T12:29:02.905Z | 2026-01-28T14:35:00.241Z |
| CVE-2026-1380 |
4.3 (3.1)
|
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forg… |
lxicon |
Bitcoin Donate Button |
2026-01-28T11:23:39.083Z | 2026-01-28T14:34:56.900Z |
| CVE-2025-14386 |
8.8 (3.1)
|
Search Atlas SEO – Premier SEO Plugin for One-Click WP… |
shahrukhlinkgraph |
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization |
2026-01-28T11:23:39.459Z | 2026-01-28T14:34:19.372Z |
| CVE-2026-0844 |
8.8 (3.1)
|
Simple User Registration <= 6.7 - Authenticated (Subsc… |
nmedia |
Simple User Registration |
2026-01-28T11:23:39.860Z | 2026-01-28T14:33:44.325Z |
| CVE-2020-36992 |
8.5 (4.0)
7.8 (3.1)
|
Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path |
nordvpn |
nordvpn |
2026-01-28T12:29:03.368Z | 2026-01-28T14:33:26.269Z |
| CVE-2025-14063 |
6.1 (3.1)
|
SEO Links Interlinking <= 1.7.5 - Reflected Cross-Site… |
seomantis |
SEO Links Interlinking |
2026-01-28T11:23:40.286Z | 2026-01-28T14:32:42.715Z |
| CVE-2025-14283 |
6.4 (3.1)
|
BlockArt Blocks – Gutenberg Blocks, Page Builder Block… |
wpblockart |
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library |
2026-01-28T11:23:40.744Z | 2026-01-28T14:31:14.092Z |
| CVE-2025-14795 |
4.3 (3.1)
|
Stop Spammers Classic <= 2026.1 - Cross-Site Request F… |
webguyio |
Stop Spammers Classic |
2026-01-28T13:26:14.651Z | 2026-01-28T14:28:44.994Z |
| CVE-2026-1467 |
5.8 (3.1)
|
Libsoup: libsoup: http header injection via specially … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-27T09:17:44.535Z | 2026-01-28T14:25:32.314Z |
| CVE-2026-23014 |
N/A
|
perf: Ensure swevent hrtimer is properly destroyed |
Linux |
Linux |
2026-01-28T14:24:44.189Z | 2026-01-28T14:24:44.189Z |
| CVE-2026-24549 |
4.3 (3.1)
|
WordPress GeoDirectory plugin < 2.8.150 - Cross Site R… |
Paolo |
GeoDirectory |
2026-01-23T14:28:52.855Z | 2026-01-28T14:24:26.166Z |
| CVE-2026-0746 |
6.4 (3.1)
|
AI Engine <= 3.3.2 - Authenticated (Subscriber+) Serve… |
tigroumeow |
AI Engine – The Chatbot and AI Framework for WordPress |
2026-01-27T18:27:55.920Z | 2026-01-28T14:11:11.277Z |
| CVE-2026-22264 |
7.4 (3.1)
|
Suricata detect/alert: heap-use-after-free on alert qu… |
OISF |
suricata |
2026-01-27T18:33:50.354Z | 2026-01-28T14:02:38.233Z |
| CVE-2025-14693 |
7 (4.0)
6.2 (3.1)
6.2 (3.0)
|
Ugreen DH2100+ USB symlink |
Ugreen |
DH2100+ |
2025-12-15T00:02:06.966Z | 2026-01-28T06:49:07.795Z |
| CVE-2025-14188 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T11:02:05.449Z | 2026-01-28T06:48:58.591Z |
| CVE-2025-14187 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T08:32:07.027Z | 2026-01-28T06:48:53.137Z |
| CVE-2025-36911 |
7.1 (3.1)
|
In key-based pairing, there is a possible ID due … |
Google |
Android |
2026-01-15T17:41:57.504Z | 2026-01-28T04:55:59.423Z |
| CVE-2023-0507 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:35:55.259Z | 2026-01-28T04:55:39.324Z |
| CVE-2023-22462 |
6.4 (3.1)
|
Stored XSS in Grafana Text plugin |
grafana |
grafana |
2023-03-02T00:06:59.876Z | 2026-01-28T04:55:37.854Z |
| CVE-2023-0594 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:36:43.881Z | 2026-01-28T04:55:36.581Z |
| CVE-2022-23552 |
7.3 (3.1)
|
Grafana stored XSS in FileUploader component |
grafana |
grafana |
2023-01-27T22:59:16.675Z | 2026-01-28T04:55:35.339Z |
| CVE-2022-31097 |
7.3 (3.1)
|
Stored XSS in Grafana's Unified Alerting |
grafana |
grafana |
2022-07-15T12:10:10.000Z | 2026-01-28T04:55:34.182Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-63647 |
7.5 (3.1)
|
A NULL pointer dereference in the parse_meta func… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:52:39.071Z |
| CVE-2026-1410 |
5.4 (4.0)
6.4 (3.1)
6.4 (3.0)
|
Beetel 777VR1 UART missing authentication |
Beetel |
777VR1 |
2026-01-26T00:02:05.878Z | 2026-01-26T17:29:34.409Z |
| CVE-2025-63648 |
7.5 (3.1)
|
A NULL pointer dereference in the dacp_reply_play… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:47:18.727Z |
| CVE-2025-66692 |
7.5 (3.1)
|
A buffer over-read in the PublicKey::verify() met… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:40:24.978Z |
| CVE-2025-66902 |
7.5 (3.1)
|
An input validation issue in in Pithikos websocke… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T14:45:23.965Z |
| CVE-2026-21636 |
5.8 (3.0)
|
A flaw in Node.js's permission model allows Unix … |
nodejs |
node |
2026-01-20T20:41:55.700Z | 2026-01-21T18:52:53.133Z |
| CVE-2026-1411 |
5.4 (4.0)
6.1 (3.1)
6.1 (3.0)
|
Beetel 777VR1 UART access control |
Beetel |
777VR1 |
2026-01-26T00:32:06.281Z | 2026-01-26T17:29:02.637Z |
| CVE-2026-21637 |
5.9 (3.0)
|
A flaw in Node.js TLS error handling allows remot… |
nodejs |
node |
2026-01-20T20:41:55.352Z | 2026-01-21T20:22:51.033Z |
| CVE-2026-21640 |
2.7 (3.0)
|
HackerOne community member Faraz Ahmed (PakCyberb… |
Revive |
Revive Adserver |
2026-01-20T20:48:47.940Z | 2026-01-21T18:52:43.635Z |
| CVE-2025-13292 |
7.6 (4.0)
|
Improper access control in Google Cloud Apigee-X allow… |
Google Cloud |
Apigee-X |
2025-12-06T05:05:51.597Z | 2026-01-30T19:08:02.176Z |
| CVE-2024-34703 |
7.5 (3.1)
|
Botan Vulnerable to Denial of Service Due to Overly La… |
randombit |
botan |
2024-06-30T20:22:32.910Z | 2026-01-30T19:54:58.434Z |
| CVE-2022-39314 |
4.8 (3.0)
|
User enumeration in the code-based login and password … |
getkirby |
kirby |
2022-10-24T00:00:00.000Z | 2026-01-30T19:57:13.349Z |
| CVE-2026-21641 |
7.1 (3.0)
|
HackerOne community member Jad Ghamloush (0xjad) … |
Revive |
Revive Adserver |
2026-01-20T20:48:47.885Z | 2026-01-21T18:52:48.506Z |
| CVE-2026-21642 |
6.1 (3.0)
|
HackerOne community member Patrick Lang (7yr) has… |
Revive |
Revive Adserver |
2026-01-20T20:48:48.079Z | 2026-01-21T20:47:21.691Z |
| CVE-2026-22258 |
7.5 (3.1)
|
Suricata DCERPC: unbounded fragment buffering leads to… |
OISF |
suricata |
2026-01-27T16:17:29.903Z | 2026-01-27T18:28:38.707Z |
| CVE-2025-55423 |
9.8 (3.1)
|
A command injection vulnerability exists in the u… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-27T14:58:59.154Z |
| CVE-2025-67261 |
6.5 (3.1)
|
Abacre Retail Point of Sale 14.0.0.396 is vulnera… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:38:37.574Z |
| CVE-2025-67263 |
6.1 (3.1)
|
Abacre Retail Point of Sale 14.0.0.396 is affecte… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-20T18:53:28.009Z |
| CVE-2025-66803 |
4.8 (3.1)
|
Race condition in the turbo-frame element handler… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T15:26:53.433Z |
| CVE-2026-22259 |
7.5 (3.1)
|
Suricata dnp3: unbounded transaction growth |
OISF |
suricata |
2026-01-27T17:13:11.057Z | 2026-01-27T18:16:55.422Z |
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2026-20047 |
4.8 (3.1)
|
Cisco Identity Services Engine Cross-Site Scripting Vu… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:15.578Z | 2026-01-16T04:55:52.838Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| CVE-2026-20076 |
4.8 (3.1)
|
Cisco Identity Services Engine Stored Cross-Site Scrip… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:03.744Z | 2026-01-16T04:55:53.964Z |
| CVE-2026-23495 |
4.3 (3.1)
|
Pimcore's Admin Classic Bundle is Missing Function Lev… |
pimcore |
pimcore |
2026-01-15T16:47:07.114Z | 2026-01-15T17:09:32.298Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2026-0765 |
8.8 (3.0)
|
Open WebUI PIP install_frontmatter_requirements Comman… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:32.185Z | 2026-01-24T04:55:37.773Z |
| CVE-2026-0766 |
8.8 (3.0)
|
Open WebUI load_tool_module_by_id Command Injection Re… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:35.773Z | 2026-01-24T04:55:36.583Z |
| CVE-2025-67025 |
6.1 (3.1)
|
Cross Site Scripting vulnerability in Anycomment … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T21:07:24.240Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-1411 | A flaw has been found in Beetel 777VR1 up to 01.00.09/01.00.09_55. The affected element is an unkno… | 2026-01-26T01:15:49.363 | 2026-01-30T20:19:25.920 |
| fkie_cve-2026-21637 | A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS… | 2026-01-20T21:16:05.950 | 2026-01-30T20:18:32.377 |
| fkie_cve-2026-21640 | HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the … | 2026-01-20T21:16:06.063 | 2026-01-30T20:17:33.390 |
| fkie_cve-2025-13292 | A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apige… | 2025-12-06T05:16:44.110 | 2026-01-30T20:16:40.567 |
| fkie_cve-2024-34703 | Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either a… | 2024-06-30T21:15:02.053 | 2026-01-30T20:16:40.003 |
| fkie_cve-2022-39314 | Kirby is a flat-file CMS. In versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, Kirby is subje… | 2022-10-24T14:15:51.477 | 2026-01-30T20:16:35.970 |
| fkie_cve-2026-21641 | HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability… | 2026-01-20T21:16:06.187 | 2026-01-30T20:15:53.850 |
| fkie_cve-2026-21642 | HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `ba… | 2026-01-20T21:16:06.310 | 2026-01-30T20:14:51.447 |
| fkie_cve-2026-22258 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, crafted DCERPC t… | 2026-01-27T17:16:12.253 | 2026-01-30T20:09:24.067 |
| fkie_cve-2025-55423 | A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router mod… | 2026-01-20T18:16:04.810 | 2026-01-30T20:07:11.633 |
| fkie_cve-2025-67261 | Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vuln… | 2026-01-20T18:16:05.567 | 2026-01-30T20:05:56.960 |
| fkie_cve-2025-67263 | Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting (XSS) vulnerabi… | 2026-01-20T18:16:05.677 | 2026-01-30T20:05:33.477 |
| fkie_cve-2025-66803 | Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout oper… | 2026-01-20T19:15:49.537 | 2026-01-30T20:03:34.880 |
| fkie_cve-2026-22259 | Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, specially crafte… | 2026-01-27T17:16:12.407 | 2026-01-30T20:01:49.137 |
| fkie_cve-2021-47767 | 10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in th… | 2026-01-15T16:16:08.170 | 2026-01-30T20:00:34.543 |
| fkie_cve-2021-47768 | ImportExportTools NG 10.0.4 contains a persistent HTML injection vulnerability in the email export … | 2026-01-15T16:16:08.340 | 2026-01-30T20:00:04.870 |
| fkie_cve-2026-20047 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and C… | 2026-01-15T17:16:07.160 | 2026-01-30T19:58:27.947 |
| fkie_cve-2026-20075 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager… | 2026-01-15T17:16:07.337 | 2026-01-30T19:54:36.580 |
| fkie_cve-2026-20076 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could… | 2026-01-15T17:16:07.517 | 2026-01-30T19:53:59.787 |
| fkie_cve-2026-23495 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the AP… | 2026-01-15T17:16:08.597 | 2026-01-30T19:51:59.950 |
| fkie_cve-2026-23496 | Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and… | 2026-01-15T17:16:08.747 | 2026-01-30T19:49:56.363 |
| fkie_cve-2026-0765 | Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerabili… | 2026-01-23T04:16:03.390 | 2026-01-30T19:48:35.070 |
| fkie_cve-2026-0766 | Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulne… | 2026-01-23T04:16:03.527 | 2026-01-30T19:47:56.023 |
| fkie_cve-2025-67025 | Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to ex… | 2026-01-15T21:16:04.620 | 2026-01-30T19:42:50.463 |
| fkie_cve-2026-0767 | Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnera… | 2026-01-23T04:16:03.660 | 2026-01-30T19:36:59.573 |
| fkie_cve-2025-63045 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:09.747 | 2026-01-30T19:36:50.487 |
| fkie_cve-2022-47425 | Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Co… | 2025-12-09T17:15:47.830 | 2026-01-30T19:36:17.163 |
| fkie_cve-2025-13743 | Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to erro… | 2025-12-09T21:15:53.500 | 2026-01-30T19:35:24.140 |
| fkie_cve-2026-23645 | SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a S… | 2026-01-16T20:15:49.880 | 2026-01-30T19:32:11.660 |
| fkie_cve-2025-67488 | SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-202512021… | 2025-12-09T21:16:00.317 | 2026-01-30T19:30:11.173 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-gm44-v6r8-p25m |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team SearchAzon searchazon allows Cross Site … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-f25r-2j92-5mqm |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-9fcm-hxf8-v4x6 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-79q7-wj69-pjqg |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in winkm89 teachPress teachpress allows Cross Site … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-74q9-gx85-44m3 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in richardevcom Add Polylang support for Customizer… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-6x26-wr3f-8332 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-6p2m-8xf7-qgpf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-5v37-qm3f-mh2p |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-wxqh-5r9q-5hhf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-ww54-q5mm-h44g |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-wgrv-6j54-h2xj |
6.5 (3.1)
|
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appoin… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-vhqg-6cjf-4jw7 |
9.1 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-el… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-v79x-27fq-r59f |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-rjv5-9xjq-63w7 |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogzee blogzee allows… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-qp54-rrr2-2cx5 |
7.6 (3.1)
|
Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting In… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-q9f5-85hh-g48c |
7.5 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-jhxx-jxcx-hxjh |
6.5 (3.1)
|
Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configu… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-j4p5-pg39-488f |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogistic blogistic al… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-gh9v-9mv6-p8g9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-9wq4-qhqp-553r |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-75wm-q5m3-c399 |
7.5 (3.1)
|
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Conf… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-75hf-52rg-6v76 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-7335-mx3x-jg48 |
5.3 (3.1)
|
Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-5p48-v8rv-8f32 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-4p8r-wx48-qfxr |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-3w43-vh49-x5jp |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-3mf6-3q6q-vqgr |
7.3 (3.1)
|
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allo… | 2026-01-22T18:30:38Z | 2026-01-27T21:31:42Z |
| ghsa-32qq-wr5q-gh7c |
7.5 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Bu… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-2p99-vc9j-4p2g |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-g7gq-qmh4-jhww |
7.3 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2019-178 |
|
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there… | elastic-apm | 2019-08-22T17:15:00Z | 2021-08-27T03:22:03.550445Z |
| pysec-2019-177 |
|
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature … | ecdsa | 2019-11-26T13:15:00Z | 2021-08-27T03:22:03.507805Z |
| pysec-2019-175 |
|
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag R… | djblets | 2019-11-04T21:15:00Z | 2021-08-27T03:22:03.149747Z |
| pysec-2016-25 |
|
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect | flask-oidc | 2016-10-07T18:59:00Z | 2021-08-27T03:22:03.924557Z |
| pysec-2015-35 |
|
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich… | dulwich | 2015-03-31T14:59:00Z | 2021-08-27T03:22:03.427700Z |
| pysec-2015-34 |
|
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote atta… | dulwich | 2015-03-31T14:59:00Z | 2021-08-27T03:22:03.389388Z |
| pysec-2014-80 |
|
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connectio… | docker-py | 2014-11-17T16:59:00Z | 2021-08-27T03:22:03.349219Z |
| pysec-2014-79 |
|
Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblet… | djblets | 2014-06-16T18:55:00Z | 2021-08-27T03:22:03.303468Z |
| pysec-2014-78 |
|
Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets be… | djblets | 2014-06-16T18:55:00Z | 2021-08-27T03:22:03.219875Z |
| pysec-2012-14 |
|
Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote at… | feedparser | 2012-05-21T22:55:00Z | 2021-08-27T03:22:03.863933Z |
| pysec-2012-13 |
|
Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vecto… | elixir | 2012-08-26T21:55:00Z | 2021-08-27T03:22:03.583910Z |
| pysec-2011-21 |
|
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka f… | feedparser | 2011-04-11T18:55:00Z | 2021-08-27T03:22:03.831291Z |
| pysec-2011-20 |
|
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka f… | feedparser | 2011-04-11T18:55:00Z | 2021-08-27T03:22:03.796807Z |
| pysec-2011-19 |
|
feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1… | feedparser | 2011-04-11T18:55:00Z | 2021-08-27T03:22:03.762667Z |
| pysec-2011-18 |
|
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka f… | feedparser | 2011-04-11T18:55:00Z | 2021-08-27T03:22:03.724216Z |
| pysec-2020-230 |
|
In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow use… | django-user-sessions | 2020-01-24T20:15:00Z | 2021-08-27T03:21:57.616152Z |
| pysec-2020-229 |
|
django-nopassword before 5.0.0 stores cleartext secrets in the database. | django-nopassword | 2020-03-18T15:15:00Z | 2021-08-27T03:21:57.541967Z |
| pysec-2019-174 |
|
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin… | django-crm | 2019-08-27T15:15:00Z | 2021-08-27T03:21:57.382280Z |
| pysec-2018-83 |
|
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an un… | diffoscope | 2018-04-13T16:29:00Z | 2021-08-27T03:21:57.266779Z |
| pysec-2018-82 |
|
There is a vulnerability in load() method in definitions/parser.py in the Danijar Hafner … | definitions | 2018-12-21T23:29:00Z | 2021-08-27T03:21:57.237018Z |
| pysec-2017-86 |
|
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted cont… | django-epiceditor | 2017-03-09T20:59:00Z | 2021-08-27T03:21:57.430234Z |
| pysec-2021-129 |
|
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by usi… | bottle | 2021-01-18T12:15:00Z | 2021-08-27T03:21:56.437494Z |
| pysec-2020-228 |
|
An insecure-credentials flaw was found in all openstack-cinder versions before openstack-… | cinder | 2020-06-10T17:15:00Z | 2021-08-27T03:21:56.949334Z |
| pysec-2020-227 |
|
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoi… | cabot | 2020-09-22T08:15:00Z | 2021-08-27T03:21:56.574917Z |
| pysec-2020-226 |
|
Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via t… | cabot | 2020-12-04T20:15:00Z | 2021-08-27T03:21:56.543783Z |
| pysec-2020-225 |
|
An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. A u… | blazar-dashboard | 2020-10-16T06:15:00Z | 2021-08-27T03:21:56.229273Z |
| pysec-2016-24 |
|
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads t… | bottle | 2016-12-16T09:59:00Z | 2021-08-27T03:21:56.402931Z |
| pysec-2014-77 |
|
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not pro… | bottle | 2014-10-25T22:55:00Z | 2021-08-27T03:21:56.361083Z |
| pysec-2011-17 |
|
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effec… | celery | 2011-12-05T11:55:00Z | 2021-08-27T03:21:56.662825Z |
| pysec-2021-128 |
|
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL tha… | apache-superset | 2021-04-27T10:15:00Z | 2021-08-27T03:21:55.733407Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-32137 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.136897Z |
| gsd-2024-32136 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.143714Z |
| gsd-2024-32135 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.141282Z |
| gsd-2024-32134 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.139635Z |
| gsd-2024-32133 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.127437Z |
| gsd-2024-32132 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.148901Z |
| gsd-2024-32131 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.157365Z |
| gsd-2024-32130 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.236360Z |
| gsd-2024-32129 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Freshworks Freshdesk… | 2024-04-12T05:02:22.139177Z |
| gsd-2024-32128 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.124496Z |
| gsd-2024-32127 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.136218Z |
| gsd-2024-32126 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vuln… | 2024-04-12T05:02:22.130590Z |
| gsd-2024-32125 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln… | 2024-04-12T05:02:22.127635Z |
| gsd-2024-32124 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.133313Z |
| gsd-2024-32123 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.135258Z |
| gsd-2024-32122 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.159280Z |
| gsd-2024-32121 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.160945Z |
| gsd-2024-32120 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.130814Z |
| gsd-2024-32119 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.151656Z |
| gsd-2024-32118 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.137310Z |
| gsd-2024-32117 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.161416Z |
| gsd-2024-32116 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.140690Z |
| gsd-2024-32115 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.124942Z |
| gsd-2024-32114 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.128946Z |
| gsd-2024-32113 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:02:22.152051Z |
| gsd-2023-52718 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:01:42.490161Z |
| gsd-2023-7257 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:01:23.450972Z |
| gsd-2023-7256 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-12T05:01:23.556926Z |
| gsd-2021-47258 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.564568Z |
| gsd-2021-47257 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.628891Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192744 | Malicious code in huangmingming-demo (npm) | 2025-12-23T16:56:23Z | 2025-12-24T00:53:17Z |
| MAL-2025-192806 | Malicious code in jest-formatting (npm) | 2025-12-23T08:17:34Z | 2025-12-24T00:53:17Z |
| MAL-2025-192805 | Malicious code in intuit-test (npm) | 2025-12-23T08:17:01Z | 2025-12-24T00:53:17Z |
| MAL-2025-192804 | Malicious code in injectorpackage (npm) | 2025-12-23T08:16:49Z | 2025-12-24T00:53:17Z |
| MAL-2025-192803 | Malicious code in init-router (npm) | 2025-12-23T08:16:47Z | 2025-12-24T00:53:17Z |
| MAL-2025-192802 | Malicious code in ingka-test (npm) | 2025-12-23T08:16:45Z | 2025-12-24T00:53:17Z |
| MAL-2025-192801 | Malicious code in hiro-docs (npm) | 2025-12-23T08:16:14Z | 2025-12-24T00:53:17Z |
| MAL-2025-192800 | Malicious code in gibertserct8 (npm) | 2025-12-23T08:15:14Z | 2025-12-24T00:53:17Z |
| MAL-2025-192799 | Malicious code in gibertserct15 (npm) | 2025-12-23T08:15:05Z | 2025-12-24T00:53:17Z |
| MAL-2025-192798 | Malicious code in flagstealer (npm) | 2025-12-23T08:14:04Z | 2025-12-24T00:53:17Z |
| MAL-2025-192797 | Malicious code in fe-cdnpath-transform (npm) | 2025-12-23T08:13:47Z | 2025-12-24T00:53:17Z |
| MAL-2025-192796 | Malicious code in estree-util (npm) | 2025-12-23T08:12:35Z | 2025-12-24T00:53:17Z |
| MAL-2025-192747 | Malicious code in excluder-mcp-package (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:17Z |
| MAL-2025-192746 | Malicious code in excluder-mcp (npm) | 2025-12-23T18:19:20Z | 2025-12-24T00:53:17Z |
| MAL-2025-192744 | Malicious code in huangmingming-demo (npm) | 2025-12-23T16:56:23Z | 2025-12-24T00:53:17Z |
| mal-2025-192795 | Malicious code in elf-stats-whimsical-satchel-586 (npm) | 2025-12-23T08:11:46Z | 2025-12-24T00:53:16Z |
| mal-2025-192794 | Malicious code in elf-stats-whimsical-cocoa-613 (npm) | 2025-12-23T08:11:33Z | 2025-12-24T00:53:16Z |
| mal-2025-192793 | Malicious code in elf-stats-whimsical-cocoa-243 (npm) | 2025-12-23T08:11:32Z | 2025-12-24T00:53:16Z |
| mal-2025-192792 | Malicious code in elf-stats-velvet-sparkler-555 (npm) | 2025-12-23T08:11:31Z | 2025-12-24T00:53:16Z |
| mal-2025-192791 | Malicious code in elf-stats-velvet-bow-244 (npm) | 2025-12-23T08:11:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192790 | Malicious code in elf-stats-sprucey-giftbox-118 (npm) | 2025-12-23T08:10:50Z | 2025-12-24T00:53:16Z |
| mal-2025-192789 | Malicious code in elf-stats-sprucey-cookie-492 (npm) | 2025-12-23T08:10:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192788 | Malicious code in elf-stats-sparkly-train-831 (npm) | 2025-12-23T08:10:48Z | 2025-12-24T00:53:16Z |
| mal-2025-192787 | Malicious code in elf-stats-sparkly-toolkit-703 (npm) | 2025-12-23T08:10:46Z | 2025-12-24T00:53:16Z |
| mal-2025-192786 | Malicious code in elf-stats-sparkly-sled-484 (npm) | 2025-12-23T08:10:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192785 | Malicious code in elf-stats-sleighing-hammer-902 (npm) | 2025-12-23T08:10:05Z | 2025-12-24T00:53:16Z |
| mal-2025-192784 | Malicious code in elf-stats-silvered-toolkit-914 (npm) | 2025-12-23T08:10:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192783 | Malicious code in elf-stats-silvered-bow-679 (npm) | 2025-12-23T08:09:51Z | 2025-12-24T00:53:16Z |
| mal-2025-192782 | Malicious code in elf-stats-shimmering-fir-491 (npm) | 2025-12-23T08:09:49Z | 2025-12-24T00:53:16Z |
| mal-2025-192781 | Malicious code in elf-stats-rooftop-pinecone-887 (npm) | 2025-12-23T08:09:47Z | 2025-12-24T00:53:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0548 | PaloAlto Networks GlobalProtect: Mehrere Schwachstellen | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0547 | PaloAlto Networks PAN-OS: Mehrere Schwachstellen | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0546 | Cisco IOS: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-03-12T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0539 | Microsoft Developer Tools: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2024-1770 | AMD-Prozessor: Mehrere Schwachstellen ermöglichen Manipulation von Daten und Offenlegung von Informationen | 2024-08-05T22:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2024-0983 | win.rar WinRAR: Schwachstelle ermöglicht Denial of Service und Informationsoffenlegung | 2024-04-28T22:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2023-3175 | libssh: Mehrere Schwachstellen | 2023-12-18T23:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2023-2093 | win.rar WinRAR: Mehrere Schwachstellen ermöglichen Codeausführung | 2023-08-17T22:00:00.000+00:00 | 2025-03-12T23:00:00.000+00:00 |
| wid-sec-w-2025-0543 | Ivanti Neurons for MDM: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0540 | WithSecure Endpoint Protection: Schwachstelle ermöglicht Denial of Service | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0538 | Microsoft Office: Mehrere Schwachstellen ermöglichen Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0536 | Adobe Acrobat und Reader: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0535 | Adobe Creative Cloud Applikationen: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0534 | Mehrere Fortinet Produkte: Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0533 | Fortinet FortiWeb: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0532 | Fortinet FortiSIEM: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0531 | Fortinet FortiSandbox: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0530 | Fortinet FortiMail: Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0529 | Fortinet FortiAnalyzer, FortiManager und FortiAnalyzer-BigData: Mehrere Schwachstellen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0528 | Arista EOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0527 | Joomla: Schwachstelle ermöglicht Codeausführung | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0526 | Apache Nifi: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0525 | Ivanti Secure Access Client: Schwachstelle ermöglicht Privilegieneskalation | 2025-03-11T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0440 | AMD Radeon: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-25T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2024-2154 | Apple macOS: Mehrere Schwachstellen | 2024-09-16T22:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2024-1613 | Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-07-15T22:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2023-3087 | Linux Kernel: Mehrere Schwachstellen | 2023-12-07T23:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2023-1254 | Linux Kernel (vmwgfx): Mehrere Schwachstellen | 2023-05-18T22:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2023-0894 | Linux Kernel: Schwachstelle ermöglicht Denial of Service | 2023-04-10T22:00:00.000+00:00 | 2025-03-11T23:00:00.000+00:00 |
| wid-sec-w-2025-0522 | Fleet: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:5068 | Red Hat Security Advisory: OpenShift Container Platform 4.11.0 packages and security update | 2022-08-10T10:13:03+00:00 | 2026-02-03T21:12:49+00:00 |
| rhsa-2022:5026 | Red Hat Security Advisory: OpenShift Virtualization 4.10.2 Images security and bug fix update | 2022-06-14T17:40:25+00:00 | 2026-02-03T21:12:49+00:00 |
| rhsa-2022:5006 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 Containers security update | 2022-06-13T12:43:57+00:00 | 2026-02-03T21:12:48+00:00 |
| rhsa-2022:5004 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 security update | 2022-06-13T12:34:12+00:00 | 2026-02-03T21:12:48+00:00 |
| rhsa-2022:4863 | Red Hat Security Advisory: Release of OpenShift Serverless Version 1.22.1 | 2022-06-01T13:57:52+00:00 | 2026-02-03T21:12:47+00:00 |
| rhsa-2022:4667 | Red Hat Security Advisory: OpenShift Virtualization 4.10.1 RPMs security and bug fix update | 2022-05-18T15:57:43+00:00 | 2026-02-03T21:12:47+00:00 |
| rhsa-2022:4860 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.1 | 2022-06-01T11:48:35+00:00 | 2026-02-03T21:12:46+00:00 |
| rhsa-2022:2217 | Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.3.7 | 2022-05-11T20:33:12+00:00 | 2026-02-03T21:12:46+00:00 |
| rhsa-2022:4668 | Red Hat Security Advisory: OpenShift Virtualization 4.10.1 Images security and bug fix update | 2022-05-18T20:25:33+00:00 | 2026-02-03T21:12:45+00:00 |
| rhsa-2022:2280 | Red Hat Security Advisory: OpenShift Container Platform 3.11.705 security update | 2022-05-31T05:45:09+00:00 | 2026-02-03T21:12:44+00:00 |
| rhsa-2022:2265 | Red Hat Security Advisory: OpenShift Container Platform 4.6.58 security and extras update | 2022-05-26T20:06:24+00:00 | 2026-02-03T21:12:43+00:00 |
| rhsa-2022:2218 | Red Hat Security Advisory: Openshift Logging Security and Bug update Release (5.2.10) | 2022-05-11T19:51:53+00:00 | 2026-02-03T21:12:43+00:00 |
| rhsa-2022:2216 | Red Hat Security Advisory: Red Hat OpenShift Logging Security and Bug update Release 5.4.1 | 2022-05-11T18:50:05+00:00 | 2026-02-03T21:12:42+00:00 |
| rhsa-2022:1819 | Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update | 2022-05-10T14:02:26+00:00 | 2026-02-03T21:12:41+00:00 |
| rhsa-2022:1747 | Red Hat Security Advisory: Release of OpenShift Serverless Version 1.22.0 | 2022-05-09T16:47:58+00:00 | 2026-02-03T21:12:40+00:00 |
| rhsa-2022:1745 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.22.0 | 2022-05-09T07:48:15+00:00 | 2026-02-03T21:12:40+00:00 |
| rhsa-2022:1734 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.1 security and bug fix update | 2022-05-05T13:49:11+00:00 | 2026-02-03T21:12:39+00:00 |
| rhsa-2022:1699 | Red Hat Security Advisory: OpenShift Container Platform 4.7.50 security update | 2022-05-12T18:05:11+00:00 | 2026-02-03T21:12:38+00:00 |
| rhsa-2022:1622 | Red Hat Security Advisory: OpenShift Container Platform 4.6.57 security and extras update | 2022-05-04T09:05:42+00:00 | 2026-02-03T21:12:37+00:00 |
| rhsa-2022:1461 | Red Hat Security Advisory: Logging Subsystem 5.4 - Red Hat OpenShift Security and Bug update | 2022-04-20T22:57:16+00:00 | 2026-02-03T21:12:35+00:00 |
| rhsa-2022:1372 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 enhancement, security & bug fix update | 2022-04-13T18:48:58+00:00 | 2026-02-03T21:12:35+00:00 |
| rhsa-2022:1370 | Red Hat Security Advisory: OpenShift Container Platform 4.8.37 security and extras update | 2022-04-20T12:18:41+00:00 | 2026-02-03T21:12:34+00:00 |
| rhsa-2022:1363 | Red Hat Security Advisory: OpenShift Container Platform 4.9.29 bug fix and security update | 2022-04-20T14:43:46+00:00 | 2026-02-03T21:12:34+00:00 |
| rhsa-2022:1361 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement&bugfix update | 2022-04-13T15:33:28+00:00 | 2026-02-03T21:12:33+00:00 |
| rhsa-2022:1357 | Red Hat Security Advisory: OpenShift Container Platform 4.10.10 security and extras update | 2022-04-20T11:41:10+00:00 | 2026-02-03T21:12:32+00:00 |
| rhsa-2022:1356 | Red Hat Security Advisory: OpenShift Container Platform 4.10.10 bug fix and security update | 2022-04-21T13:13:54+00:00 | 2026-02-03T21:12:32+00:00 |
| rhsa-2022:1081 | Red Hat Security Advisory: Gatekeeper Operator v0.2 security updates and bug fixes | 2022-03-28T14:14:19+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0595 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.6 security updates and bug fixes | 2022-03-04T01:35:35+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0432 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.20.0 | 2022-02-03T16:10:33+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0687 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.1 security and bug fix update | 2022-02-28T21:18:28+00:00 | 2026-02-03T21:12:28+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-165-03 | Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-02 | Meridian Cooperative Meridian | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-165-01 | Johnson Controls Metasys ADS ADX OAS Servers | 2022-06-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-041-07 | Siemens Solid Edge, JT2Go, and Teamcenter Visualization | 2022-02-08T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-257-06 | Siemens SIMATIC CP (Update A) | 2021-09-14T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-21-222-07 | Siemens SIMATIC CP (Update A) | 2021-08-10T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-17-285-05 | Siemens BACnet Field Panels (Update A) | 2017-10-12T00:00:00.000000Z | 2022-06-14T00:00:00.000000Z |
| icsa-22-160-01 | Mitsubishi Electric Air Conditioning Systems | 2022-06-09T00:00:00.000000Z | 2022-06-09T00:00:00.000000Z |
| icsa-22-154-01 | Vulnerabilities Affecting Dominion Voting Systems ImageCast X | 2022-06-03T00:00:00.000000Z | 2022-06-03T00:00:00.000000Z |
| icsa-22-153-01 | Carrier LenelS2 HID Mercury access panels | 2022-06-02T00:00:00.000000Z | 2022-06-02T00:00:00.000000Z |
| icsma-22-151-02 | BD Synapsys | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsma-22-151-01 | BD Pyxis | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-151-01 | Fuji Electric Alpha7 PC Loader | 2022-05-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-139-01 | Mitsubishi Electric MELSEC iQ-F Series | 2022-05-19T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-090-04 | Mitsubishi Electric FA Products | 2022-03-31T00:00:00.000000Z | 2022-05-31T00:00:00.000000Z |
| icsa-22-146-02 | Horner Automation Cscape Csfont | 2022-05-26T00:00:00.000000Z | 2022-05-26T00:00:00.000000Z |
| icsa-22-146-01 | Keysight N6854A Geolocation server and N6841A RF Sensor software | 2022-05-26T00:00:00.000000Z | 2022-05-26T00:00:00.000000Z |
| icsa-22-144-02 | Matrikon OPC Server | 2022-05-24T00:00:00.000000Z | 2022-05-24T00:00:00.000000Z |
| icsa-22-144-01 | Rockwell Automation Logix Controllers | 2022-05-24T00:00:00.000000Z | 2022-05-24T00:00:00.000000Z |
| icsa-22-137-01 | Circutor COMPACT DC-S BASIC | 2022-05-17T00:00:00.000000Z | 2022-05-17T00:00:00.000000Z |
| icsa-22-132-05 | Siemens Industrial PCs and CNC devices | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-04 | Cambium Networks cnMaestro | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-03 | Inkscape in Industrial Products | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-02 | Mitsubishi Electric MELSOFT iQ AppPortal | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-132-01 | Delta Electronics CNCSoft | 2022-05-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-102-04 | Mitsubishi Electric GT25-WLAN | 2022-04-12T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-21-194-12 | Siemens VxWorks-based Industrial Products (Update C) | 2021-07-13T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-19-253-03 | ICSA-19-253-03_Siemens Industrial Products (Update P) | 2019-09-10T00:00:00.000000Z | 2022-05-12T00:00:00.000000Z |
| icsa-22-130-06 | Mitsubishi Electric MELSOFT GT OPC UA | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-05 | AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-fmc-redirect-NYDuSEQn | Cisco Firepower Management Center Software Open Redirect Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-dos-3wymywkh | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-dos-3WymYWKh | Cisco Firepower Management Center Software Denial of Service Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-cacauthbyp-nclgzm3q | Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-fmc-cacauthbyp-NCLGZm3Q | Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-asaftd-tls-bb-2g9uwkp | Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-asaftd-tls-bb-2g9uWkP | Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability | 2020-10-21T16:00:00+00:00 | 2020-10-21T16:00:00+00:00 |
| cisco-sa-20200205-iosxr-cdp-rce | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability | 2020-02-05T16:00:00+00:00 | 2020-10-20T18:23:29+00:00 |
| cisco-sa-webex-teams-dll-drsnh5an | Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-webex-teams-dll-drsnH5AN | Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-privilege-esc-pyb7ytd | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-privilege-esc-pyb7YTd | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-priv-esc-ggcumfxv | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-staros-priv-esc-gGCUMFxv | Cisco StarOS Privilege Escalation Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-sdwan-xss-xxelfpc3 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-sdwan-xss-xXeLFpC3 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ndb-path-traversal-wvdyxzpy | Cisco Nexus Data Broker Software Path Traversal Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ndb-path-traversal-wVDyXZPy | Cisco Nexus Data Broker Software Path Traversal Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-xxs-mf5cbyx5 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-xxs-mf5cbYx5 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-auth-bypass-ujwqltzm | Cisco Identity Services Engine Authorization Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ise-auth-bypass-uJWqLTZM | Cisco Identity Services Engine Authorization Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ind-dos-bwg634zn | Cisco Industrial Network Director Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-ind-dos-BwG634zn | Cisco Industrial Network Director Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-fmc-xss-ylrjqqu | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-fmc-xss-yLrjqqU | Cisco Firepower Management Center Cross-Site Scripting Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-expressway-vcs-dos-n6xxtmzb | Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-expressway-vcs-dos-n6xxTMZB | Cisco Expressway Series and TelePresence Video Communication Server Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-zztugtg3 | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-zZtugtg3 | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38528 | bpf: Reject %p% format string in bprintf-like helpers | 2025-08-02T00:00:00.000Z | 2025-09-04T02:02:23.000Z |
| msrc_cve-2024-26691 | KVM: arm64: Fix circular locking dependency | 2024-04-02T07:00:00.000Z | 2025-09-04T01:59:14.000Z |
| msrc_cve-2025-38537 | net: phy: Don't register LEDs for genphy | 2025-08-02T00:00:00.000Z | 2025-09-04T01:58:39.000Z |
| msrc_cve-2025-8225 | GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | 2025-07-02T00:00:00.000Z | 2025-09-04T01:57:24.000Z |
| msrc_cve-2025-7069 | HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow | 2025-07-02T00:00:00.000Z | 2025-09-04T01:57:23.000Z |
| msrc_cve-2025-23133 | wifi: ath11k: update channel list in reg notifier instead reg worker | 2025-04-02T00:00:00.000Z | 2025-09-04T01:56:16.000Z |
| msrc_cve-2025-38082 | gpio: virtuser: fix potential out-of-bound write | 2025-06-02T00:00:00.000Z | 2025-09-04T01:55:27.000Z |
| msrc_cve-2025-0690 | Grub2: read: integer overflow may lead to out-of-bounds write | 2025-02-02T00:00:00.000Z | 2025-09-04T01:55:00.000Z |
| msrc_cve-2025-38516 | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 2025-08-02T00:00:00.000Z | 2025-09-04T01:53:53.000Z |
| msrc_cve-2023-39319 | Improper handling of special tags within script contexts in html/template | 2023-09-01T00:00:00.000Z | 2025-09-04T01:51:46.000Z |
| msrc_cve-2025-38527 | smb: client: fix use-after-free in cifs_oplock_break | 2025-08-02T00:00:00.000Z | 2025-09-04T01:51:07.000Z |
| msrc_cve-2025-38036 | drm/xe/vf: Perform early GT MMIO initialization to read GMDID | 2025-06-02T00:00:00.000Z | 2025-09-04T01:49:55.000Z |
| msrc_cve-2025-38471 | tls: always refresh the queue when reading sock | 2025-07-02T00:00:00.000Z | 2025-09-04T01:48:57.000Z |
| msrc_cve-2025-1148 | GNU Binutils ld ldelfgen.c link_order_scan memory leak | 2025-02-02T00:00:00.000Z | 2025-09-04T01:47:42.000Z |
| msrc_cve-2025-38512 | wifi: prevent A-MSDU attacks in mesh networks | 2025-08-02T00:00:00.000Z | 2025-09-04T01:45:38.000Z |
| msrc_cve-2024-58015 | wifi: ath12k: Fix for out-of bound access error | 2025-02-02T00:00:00.000Z | 2025-09-04T01:44:58.000Z |
| msrc_cve-2025-38493 | tracing/osnoise: Fix crash in timerlat_dump_stack() | 2025-07-02T00:00:00.000Z | 2025-09-04T01:44:20.000Z |
| msrc_cve-2025-38529 | comedi: aio_iiro_16: Fix bit shift out of bounds | 2025-08-02T00:00:00.000Z | 2025-09-04T01:42:30.000Z |
| msrc_cve-2025-38515 | drm/sched: Increment job count before swapping tail spsc queue | 2025-08-02T00:00:00.000Z | 2025-09-04T01:39:53.000Z |
| msrc_cve-2025-38132 | coresight: holding cscfg_csdev_lock while removing cscfg from csdev | 2025-07-02T00:00:00.000Z | 2025-09-04T01:39:05.000Z |
| msrc_cve-2022-50232 | arm64: set UXN on swapper page tables | 2025-06-02T00:00:00.000Z | 2025-09-04T01:37:56.000Z |
| msrc_cve-2025-38530 | comedi: pcl812: Fix bit shift out of bounds | 2025-08-02T00:00:00.000Z | 2025-09-04T01:36:44.000Z |
| msrc_cve-2023-52508 | nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() | 2024-03-02T08:00:00.000Z | 2025-09-04T01:35:25.000Z |
| msrc_cve-2023-52656 | io_uring: drop any code related to SCM_RIGHTS | 2024-05-02T07:00:00.000Z | 2025-09-04T01:35:23.000Z |
| msrc_cve-2023-53154 | parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called. | 2025-05-02T00:00:00.000Z | 2025-09-04T01:32:31.000Z |
| msrc_cve-2025-21972 | net: mctp: unshare packets when reassembling | 2025-04-02T00:00:00.000Z | 2025-09-04T01:32:13.000Z |
| msrc_cve-2025-38514 | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 2025-08-02T00:00:00.000Z | 2025-09-04T01:32:03.000Z |
| msrc_cve-2023-45285 | Command 'go get' may unexpectedly fallback to insecure git in cmd/go | 2023-12-01T08:00:00.000Z | 2025-09-04T01:31:42.000Z |
| msrc_cve-2024-26812 | vfio/pci: Create persistent INTx handler | 2024-04-02T07:00:00.000Z | 2025-09-04T01:30:54.000Z |
| msrc_cve-2025-37977 | scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set | 2025-05-02T00:00:00.000Z | 2025-09-04T01:30:15.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13904-1 | topgrade-14.0.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13903-1 | teleport-15.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13902-1 | python310-autobahn-23.6.2-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13901-1 | pdns-recursor-5.0.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13900-1 | freerdp-3.5.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13899-1 | flatpak-1.15.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13898-1 | dcmtk-3.6.8-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13897-1 | matrix-synapse-1.105.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13896-1 | gstreamer-plugins-bad-1.24.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13895-1 | ffmpeg-6-6.1.1-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13894-1 | ffmpeg-4-4.4.4-7.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13893-1 | shadowsocks-rust-1.18.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13892-1 | python312-3.12.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13891-1 | python-gunicorn-doc-22.0.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13890-1 | python-gevent-doc-24.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13889-1 | ffmpeg-7-7.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13888-1 | ffmpeg-5-5.1.4-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13887-1 | python310-Django-4.2.11-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13886-1 | python310-Beaker-1.13.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13885-1 | nodejs-electron-29.3.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13884-1 | MozillaThunderbird-115.10.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13883-1 | python311-3.11.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13882-1 | kubernetes1.29-apiserver-1.29.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13881-1 | kubernetes1.28-apiserver-1.28.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13880-1 | kubernetes1.27-apiserver-1.27.13-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13879-1 | java-1_8_0-openjdk-1.8.0.412-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13878-1 | jasper-4.2.3-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13877-1 | glibc-2.39-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13876-1 | qemu-8.2.2-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13875-1 | java-22-openjdk-22.0.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-7404 | Improper Restriction of Rendered UI Layers or Frames in GitLab | 2024-11-16T07:12:07.188Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7296 | Incorrect Authorization in GitLab | 2025-03-15T07:19:42.794Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7110 | Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab | 2024-08-26T08:28:53.762Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7091 | Exposure of Sensitive Information to an Unauthorized Actor in GitLab | 2024-07-26T07:18:49.551Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7060 | Exposure of Sensitive Information to an Unauthorized Actor in GitLab | 2024-07-26T07:19:04.262Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7057 | Improper Access Control in GitLab | 2024-07-26T07:19:19.356Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-7047 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-07-26T07:19:35.456Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6826 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-10-26T07:11:57.115Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6685 | Authorization Bypass Through User-Controlled Key in GitLab | 2024-09-18T07:17:55.746Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6678 | Authentication Bypass by Spoofing in GitLab | 2024-09-14T07:08:36.238Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6595 | Uncontrolled Search Path Element in GitLab | 2024-07-19T07:19:00.729Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6530 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-10-13T19:10:25.204Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6502 | Incorrect Provision of Specified Functionality in GitLab | 2024-08-26T08:29:33.838Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6446 | Business Logic Errors in GitLab | 2024-09-14T07:09:14.036Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6389 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab | 2024-09-14T07:09:28.429Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6385 | Improper Access Control in GitLab | 2024-07-13T07:18:39.985Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6356 | Incorrect User Management in GitLab | 2025-02-07T07:16:51.890Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6329 | Improper Encoding or Escaping of Output in GitLab | 2024-08-10T07:20:44.297Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6324 | Inefficient Algorithmic Complexity in GitLab | 2025-01-10T19:17:23.895Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-6323 | Improper Isolation or Compartmentalization in GitLab | 2024-06-28T07:18:50.287Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5655 | Improper Access Control in GitLab | 2024-06-28T07:19:05.283Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5470 | Improper Access Control in GitLab | 2024-07-13T07:19:23.283Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5469 | Uncontrolled Resource Consumption in GitLab | 2024-06-18T07:18:41.229Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5435 | Generation of Error Message Containing Sensitive Information in GitLab | 2024-09-14T07:10:53.429Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5430 | Improper Access Control in GitLab | 2024-06-28T07:19:36.388Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5423 | Uncontrolled Resource Consumption in GitLab | 2024-08-10T07:22:13.593Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5318 | Missing Authorization in GitLab | 2024-05-29T07:18:35.469Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5258 | Authorization Bypass Through User-Controlled Key in GitLab | 2024-05-29T07:19:02.770Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5257 | Improper Access Control in GitLab | 2024-07-13T07:20:36.387Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-5067 | Exposure of Sensitive Information to an Unauthorized Actor in GitLab | 2024-07-26T07:22:33.753Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-201412-0535 | Multiple stack-based buffer overflows in (1) HWOPOSScale.ocx and (2) HWOPOSSCANNER.ocx in… | 2024-04-19T22:49:54.970000Z |
| var-201406-0321 | Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.… | 2024-04-19T22:47:35.081000Z |
| var-201512-0076 | Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware… | 2024-04-19T22:44:32.715000Z |
| var-201512-0075 | Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for au… | 2024-04-19T22:44:32.748000Z |
| var-201512-0074 | The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blan… | 2024-04-19T22:44:32.781000Z |
| var-201512-0073 | Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting th… | 2024-04-19T22:44:32.681000Z |
| var-202403-1239 | An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could … | 2024-04-19T22:43:55.992000Z |
| var-201504-0521 | The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate… | 2024-04-19T22:40:11.917000Z |
| var-201607-0243 | Integer overflow in the rtxMemHeapAlloc function in asn1rt_a.lib in Objective Systems ASN… | 2024-04-19T22:40:09.559000Z |
| var-201508-0177 | Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services … | 2024-04-19T22:40:08.722000Z |
| var-202112-0166 | ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9… | 2024-04-19T22:39:53.036000Z |
| var-202112-0023 | Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 … | 2024-04-19T22:39:53.058000Z |
| var-202108-1931 | D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS comma… | 2024-04-19T22:39:53.666000Z |
| var-202108-1930 | D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthor… | 2024-04-19T22:39:53.641000Z |
| var-202112-0026 | Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and… | 2024-04-19T22:39:52.996000Z |
| var-202112-0025 | Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and… | 2024-04-19T22:39:52.974000Z |
| var-202112-0024 | Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and… | 2024-04-19T22:39:52.948000Z |
| var-202112-0008 | Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and… | 2024-04-19T22:39:52.902000Z |
| var-202112-0004 | Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmw… | 2024-04-19T22:39:52.927000Z |
| var-201402-0185 | Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 … | 2024-04-19T22:37:05.363000Z |
| var-201006-1205 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T22:25:26.489000Z |
| var-201507-0105 | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) imple… | 2024-04-19T22:16:04.240000Z |
| var-201006-1222 | Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x b… | 2024-04-19T22:12:06.565000Z |
| var-201408-0271 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2886, CVE-2014-2… | 2024-04-19T22:11:18.963000Z |
| var-201006-1242 | Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.… | 2024-04-19T21:51:57.530000Z |
| var-201006-1214 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T21:51:26.481000Z |
| var-201006-1213 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T21:47:43.907000Z |
| var-201006-1193 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T21:45:26.115000Z |
| var-201006-0264 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Win… | 2024-04-19T21:12:04.344000Z |
| var-201711-0420 | An issue was discovered in certain Apple products. macOS High Sierra before Security Upda… | 2024-04-19T21:11:20.488000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2012-000024 | twicca fails to restrict access permissions | 2012-03-13T13:36+09:00 | 2012-03-13T13:36+09:00 |
| jvndb-2012-000023 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:35+09:00 | 2012-03-09T14:35+09:00 |
| jvndb-2012-000022 | Jenkins vulnerable to cross-site scripting | 2012-03-09T14:28+09:00 | 2012-03-09T14:28+09:00 |
| jvndb-2012-000021 | SquirrelMail plugin Autocomplete vulnerable to cross-site scripting | 2012-03-09T14:18+09:00 | 2012-03-09T14:18+09:00 |
| jvndb-2012-000020 | ES File Explorer fails to restrict access permissions | 2012-03-05T15:50+09:00 | 2012-03-05T15:50+09:00 |
| jvndb-2012-000019 | Kingsoft Internet Security 2011 vulnerable to denial-of-service | 2012-03-01T14:03+09:00 | 2012-03-01T14:03+09:00 |
| jvndb-2012-000014 | Multiple COOKPAD applications for Android vulnerable in WebView class | 2012-02-22T14:44+09:00 | 2012-02-29T10:56+09:00 |
| jvndb-2012-000018 | Movable Type vulnerable to session hijacking | 2012-02-23T14:28+09:00 | 2012-02-23T14:28+09:00 |
| jvndb-2012-000017 | Movable Type vulnerable to OS command injection | 2012-02-23T14:21+09:00 | 2012-02-23T14:21+09:00 |
| jvndb-2012-000016 | Movable Type vulnerable to cross-site scripting | 2012-02-23T14:20+09:00 | 2012-02-23T14:20+09:00 |
| jvndb-2012-000015 | Movable Type vulnerable to cross-site request forgery | 2012-02-23T14:19+09:00 | 2012-02-23T14:19+09:00 |
| jvndb-2008-001576 | Fujitsu Interstage Application Server Interstage Management Console Arbitrary File Read/Delete Vulnerability | 2008-09-03T12:34+09:00 | 2012-02-15T18:13+09:00 |
| jvndb-2012-000013 | cforms II vulnerable to cross-site scripting | 2012-02-15T17:14+09:00 | 2012-02-15T17:14+09:00 |
| jvndb-2012-000011 | ALFTP may insecurely load executable files | 2012-02-13T15:58+09:00 | 2012-02-13T15:58+09:00 |
| jvndb-2012-000012 | Apache Struts 2 vulnerable to an arbitrary Java method execution | 2012-02-10T14:29+09:00 | 2012-02-10T14:29+09:00 |
| jvndb-2012-000010 | Pocket WiFi (GP02) vulnerable to cross-site request forgery | 2012-02-01T14:12+09:00 | 2012-02-01T14:12+09:00 |
| jvndb-2012-001191 | Arbitrary Code Execution Vulnerability in Hitachi COBOL2002 | 2012-01-27T10:44+09:00 | 2012-01-27T10:44+09:00 |
| jvndb-2012-001190 | Hitachi IT Operations Director Cross-Site Scripting Vulnerability | 2012-01-27T10:38+09:00 | 2012-01-27T10:38+09:00 |
| jvndb-2012-001189 | Hitachi IT Operations Analyzer Cross-Site Scripting Vulnerability | 2012-01-27T10:37+09:00 | 2012-01-27T10:37+09:00 |
| jvndb-2012-000008 | glucose 2 vulnerable to arbitrary script execution | 2012-01-23T18:27+09:00 | 2012-01-23T18:27+09:00 |
| jvndb-2012-000004 | osCommerce Japanese version vulnerable to cross-site scripting | 2012-01-20T16:23+09:00 | 2012-01-20T16:23+09:00 |
| jvndb-2012-000006 | osCommerce vulnerable to directory traversal | 2012-01-20T16:09+09:00 | 2012-01-20T16:09+09:00 |
| jvndb-2012-000007 | Oracle WebLogic Server vulnerable to cross-site scripting | 2012-01-20T15:37+09:00 | 2012-01-20T15:37+09:00 |
| jvndb-2012-000002 | Cogent DataHub vulnerable to HTTP header injection | 2012-01-11T15:12+09:00 | 2012-01-13T16:08+09:00 |
| jvndb-2012-000001 | Cogent DataHub vulnerable to cross-site scripting | 2012-01-11T15:22+09:00 | 2012-01-13T15:57+09:00 |
| jvndb-2012-000003 | Wibu-Systems CodeMeter Runtime vulnerable to denial-of-service | 2012-01-11T15:02+09:00 | 2012-01-11T15:02+09:00 |
| jvndb-2011-002122 | An authentication information Exposure Vulnerability in JP1/IT Resource Management - Manager | 2012-01-06T19:53+09:00 | 2012-01-06T19:53+09:00 |
| jvndb-2011-003295 | JP1/Cm2/Network Node Manager i Denial of Service (DoS) Vulnerability | 2012-01-06T19:51+09:00 | 2012-01-06T19:51+09:00 |
| jvndb-2011-000108 | Movable Type Plugin MailForm vulnerable to cross-site scripting | 2011-12-26T14:49+09:00 | 2011-12-26T14:49+09:00 |
| jvndb-2011-000109 | WordPress vulnerable to arbitrary PHP code execution | 2011-12-26T14:28+09:00 | 2011-12-26T14:28+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:20410-1 | Security update for ucode-intel | 2025-06-16T09:53:26Z | 2025-06-16T09:53:26Z |
| suse-su-2025:20424-1 | Security update for ucode-intel | 2025-06-16T09:28:11Z | 2025-06-16T09:28:11Z |
| suse-su-2025:20408-1 | Security update for the Linux Kernel | 2025-06-15T13:06:50Z | 2025-06-15T13:06:50Z |
| suse-su-2025:20419-1 | Security update for the Linux Kernel | 2025-06-15T12:06:46Z | 2025-06-15T12:06:46Z |
| suse-su-2025:01958-1 | Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3) | 2025-06-13T19:33:39Z | 2025-06-13T19:33:39Z |
| suse-su-2025:01957-1 | Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6) | 2025-06-13T18:33:38Z | 2025-06-13T18:33:38Z |
| suse-su-2025:01956-1 | Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3) | 2025-06-13T16:04:11Z | 2025-06-13T16:04:11Z |
| suse-su-2025:01954-1 | Security update for java-1_8_0-openj9 | 2025-06-13T13:56:03Z | 2025-06-13T13:56:03Z |
| suse-su-2025:01953-1 | Security update for apache2-mod_auth_openidc | 2025-06-13T13:55:31Z | 2025-06-13T13:55:31Z |
| suse-su-2025:01952-1 | Security update for python-Django | 2025-06-13T13:55:02Z | 2025-06-13T13:55:02Z |
| suse-su-2025:01951-1 | Security update for the Linux Kernel | 2025-06-13T13:54:47Z | 2025-06-13T13:54:47Z |
| suse-su-2025:01950-1 | Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4) | 2025-06-13T12:33:33Z | 2025-06-13T12:33:33Z |
| suse-su-2025:01949-1 | Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6) | 2025-06-13T12:03:58Z | 2025-06-13T12:03:58Z |
| suse-su-2025:01948-1 | Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6) | 2025-06-13T12:03:49Z | 2025-06-13T12:03:49Z |
| suse-su-2025:20407-1 | Security update for python-cryptography | 2025-06-13T11:08:48Z | 2025-06-13T11:08:48Z |
| suse-su-2025:20406-1 | Security update for openssl-3 | 2025-06-13T11:05:04Z | 2025-06-13T11:05:04Z |
| suse-su-2025:20418-1 | Security update for libxml2 | 2025-06-13T10:48:44Z | 2025-06-13T10:48:44Z |
| suse-su-2025:20417-1 | Security update for openssl-3 | 2025-06-13T10:47:24Z | 2025-06-13T10:47:24Z |
| suse-su-2025:01946-1 | Security update for MozillaThunderbird | 2025-06-13T10:17:01Z | 2025-06-13T10:17:01Z |
| suse-su-2025:01945-1 | Security update for kubernetes-old | 2025-06-13T10:16:36Z | 2025-06-13T10:16:36Z |
| suse-su-2025:01944-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-06-13T10:04:01Z | 2025-06-13T10:04:01Z |
| suse-su-2025:01942-1 | Security update for valkey | 2025-06-13T08:33:49Z | 2025-06-13T08:33:49Z |
| suse-su-2025:01941-1 | Security update for kubernetes1.24 | 2025-06-13T07:20:55Z | 2025-06-13T07:20:55Z |
| suse-su-2025:01940-1 | Security update for kubernetes1.23 | 2025-06-13T07:20:45Z | 2025-06-13T07:20:45Z |
| suse-su-2025:01939-1 | Security update for libcryptopp | 2025-06-13T07:20:34Z | 2025-06-13T07:20:34Z |
| suse-su-2025:01932-1 | Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6) | 2025-06-13T03:33:54Z | 2025-06-13T03:33:54Z |
| suse-su-2025:01935-1 | Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4) | 2025-06-12T22:33:14Z | 2025-06-12T22:33:14Z |
| suse-su-2025:01930-1 | Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6) | 2025-06-12T19:33:35Z | 2025-06-12T19:33:35Z |
| suse-su-2025:01929-1 | Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4) | 2025-06-12T18:33:35Z | 2025-06-12T18:33:35Z |
| suse-su-2025:01928-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-06-12T17:03:54Z | 2025-06-12T17:03:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27053 | WordPress Community Events plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27052 | WordPress Blocksy Companion Plugin跨站脚本漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27051 | WordPress Bard plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27050 | WordPress AppPresser plugin未经授权的数据访问漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27049 | WordPress Analytify Pro plugin信息泄露漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-27048 | WordPress Advanced Database Cleaner plugin跨站请求伪造漏洞 | 2025-11-05 | 2025-11-06 |
| cnvd-2025-26891 | 多款Mozilla产品代码执行漏洞(CNVD-2025-26891) | 2025-09-18 | 2025-11-06 |
| cnvd-2025-26890 | 多款Mozilla产品欺骗漏洞(CNVD-2025-26890) | 2025-09-18 | 2025-11-06 |
| cnvd-2025-26885 | Google Android权限提升漏洞(CNVD-2025-26885) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26884 | Google Android权限提升漏洞(CNVD-2025-26884) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26883 | Google Android权限提升漏洞(CNVD-2025-26883) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26882 | Google Android权限提升漏洞(CNVD-2025-26882) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26881 | Google Android拒绝服务漏洞(CNVD-2025-26881) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26880 | Google Android信息泄露漏洞(CNVD-2025-26880) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26879 | Google Android权限提升漏洞(CNVD-2025-26879) | 2025-09-08 | 2025-11-06 |
| cnvd-2025-26878 | TP-LINK AX10信息泄露漏洞 | 2025-09-11 | 2025-11-06 |
| cnvd-2025-27237 | Tenda O3 formAdvSetLanip函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| cnvd-2025-27236 | Tenda O3 form/setDhcpConfig函数函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| cnvd-2025-27235 | Tenda CH22 fromVirtualSer函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| cnvd-2025-27234 | Tenda CH22 fromSafeUrlFilter函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| cnvd-2025-27047 | jonnys Liquor跨站脚本漏洞 | 2024-11-15 | 2025-11-05 |
| cnvd-2025-27046 | jonnys Liquor browse.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27045 | jonnys Liquor delete-row.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27044 | jonnys Liquor admin-area.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27043 | Crime Reporting System userlogin.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27042 | Crime Reporting System registration.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27041 | Crime Reporting System policelogin.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27040 | Crime Reporting System /headlogin.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27039 | Crime Reporting System /complainer_page.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27038 | Chat System update_room.php文件SQL注入漏洞 | 2024-12-30 | 2025-11-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2025-avi-0005 | Vulnérabilité dans Google Pixel | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0013 | Multiples vulnérabilités dans les produits SonicWall | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0012 | Vulnérabilité dans Google Chrome | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0011 | Vulnérabilité dans VMware Aria automation et Cloud Fondation | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0010 | Multiples vulnérabilités dans les produits Splunk | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0008 | Multiples vulnérabilités dans Joomla! | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0007 | Multiples vulnérabilités dans HPE Aruba Networking 501 Wireless Client Bridge | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0006 | Multiples vulnérabilités dans LibreOffice | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| CERTFR-2025-AVI-0005 | Vulnérabilité dans Google Pixel | 2025-01-08T00:00:00.000000 | 2025-01-08T00:00:00.000000 |
| certfr-2025-avi-0004 | Multiples vulnérabilités dans Google Android | 2025-01-07T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0004 | Multiples vulnérabilités dans Google Android | 2025-01-07T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2025-avi-0002 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-01-03T00:00:00.000000 | 2025-01-06T00:00:00.000000 |
| CERTFR-2025-AVI-0002 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2025-01-03T00:00:00.000000 | 2025-01-06T00:00:00.000000 |
| certfr-2025-avi-0003 | Multiples vulnérabilités dans les produits IBM | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2025-avi-0001 | Multiples vulnérabilités dans les produits Moxa | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0003 | Multiples vulnérabilités dans les produits IBM | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| CERTFR-2025-AVI-0001 | Multiples vulnérabilités dans les produits Moxa | 2025-01-03T00:00:00.000000 | 2025-01-03T00:00:00.000000 |
| certfr-2024-avi-1110 | Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1109 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1108 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1107 | Vulnérabilité dans les produits Palo Alto Networks | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1110 | Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1109 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1108 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| CERTFR-2024-AVI-1107 | Vulnérabilité dans les produits Palo Alto Networks | 2024-12-27T00:00:00.000000 | 2024-12-27T00:00:00.000000 |
| certfr-2024-avi-1106 | Vulnérabilité dans Adobe ColdFusion | 2024-12-24T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| certfr-2024-avi-1091 | Multiples vulnérabilités dans Apache Tomcat | 2024-12-18T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| CERTFR-2024-AVI-1106 | Vulnérabilité dans Adobe ColdFusion | 2024-12-24T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| CERTFR-2024-AVI-1091 | Multiples vulnérabilités dans Apache Tomcat | 2024-12-18T00:00:00.000000 | 2024-12-24T00:00:00.000000 |
| certfr-2024-avi-1105 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |