Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1060 |
5.3 (3.1)
|
WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Inf… |
litonice13 |
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer |
2026-01-28T14:25:11.551Z | 2026-01-28T14:42:12.226Z |
| CVE-2026-1514 |
7.1 (4.0)
6.5 (3.1)
|
2100 Technology|Official Document Management System - … |
2100 Technology |
Official Document Management System |
2026-01-28T03:39:56.271Z | 2026-01-28T14:40:49.336Z |
| CVE-2025-69820 |
6 (3.1)
|
Directory Traversal vulnerability in Beam beta9 v… |
n/a |
n/a |
2026-01-22T00:00:00.000Z | 2026-01-28T14:40:20.538Z |
| CVE-2026-1377 |
4.3 (3.1)
|
imwptip <= 1.1 - Cross-Site Request Forgery to Setting… |
hu_chao |
imwptip |
2026-01-28T11:23:37.683Z | 2026-01-28T14:38:35.221Z |
| CVE-2026-1391 |
5.3 (3.1)
|
Vzaar Media Management <= 1.2 - Reflected Cross-Site S… |
mamunreza |
Vzaar Media Management |
2026-01-28T11:23:38.696Z | 2026-01-28T14:37:57.013Z |
| CVE-2020-36990 |
8.5 (4.0)
7.8 (3.1)
|
Input Director 1.4.3 - 'Input Director' Unquoted Servi… |
Inputdirector |
Input Director |
2026-01-28T12:29:02.426Z | 2026-01-28T14:37:50.562Z |
| CVE-2020-36991 |
8.5 (4.0)
7.8 (3.1)
|
ShareMouse 5.0.43 - 'ShareMouse Service' Unquoted Serv… |
Sharemouse |
ShareMouse |
2026-01-28T12:29:02.905Z | 2026-01-28T14:35:00.241Z |
| CVE-2026-1380 |
4.3 (3.1)
|
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forg… |
lxicon |
Bitcoin Donate Button |
2026-01-28T11:23:39.083Z | 2026-01-28T14:34:56.900Z |
| CVE-2025-14386 |
8.8 (3.1)
|
Search Atlas SEO – Premier SEO Plugin for One-Click WP… |
shahrukhlinkgraph |
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization |
2026-01-28T11:23:39.459Z | 2026-01-28T14:34:19.372Z |
| CVE-2026-0844 |
8.8 (3.1)
|
Simple User Registration <= 6.7 - Authenticated (Subsc… |
nmedia |
Simple User Registration |
2026-01-28T11:23:39.860Z | 2026-01-28T14:33:44.325Z |
| CVE-2020-36992 |
8.5 (4.0)
7.8 (3.1)
|
Nord VPN-6.31.13.0 - 'nordvpn-service' Unquoted Service Path |
nordvpn |
nordvpn |
2026-01-28T12:29:03.368Z | 2026-01-28T14:33:26.269Z |
| CVE-2025-14063 |
6.1 (3.1)
|
SEO Links Interlinking <= 1.7.5 - Reflected Cross-Site… |
seomantis |
SEO Links Interlinking |
2026-01-28T11:23:40.286Z | 2026-01-28T14:32:42.715Z |
| CVE-2025-14283 |
6.4 (3.1)
|
BlockArt Blocks – Gutenberg Blocks, Page Builder Block… |
wpblockart |
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library |
2026-01-28T11:23:40.744Z | 2026-01-28T14:31:14.092Z |
| CVE-2025-14795 |
4.3 (3.1)
|
Stop Spammers Classic <= 2026.1 - Cross-Site Request F… |
webguyio |
Stop Spammers Classic |
2026-01-28T13:26:14.651Z | 2026-01-28T14:28:44.994Z |
| CVE-2026-1467 |
5.8 (3.1)
|
Libsoup: libsoup: http header injection via specially … |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-01-27T09:17:44.535Z | 2026-01-28T14:25:32.314Z |
| CVE-2026-23014 |
N/A
|
perf: Ensure swevent hrtimer is properly destroyed |
Linux |
Linux |
2026-01-28T14:24:44.189Z | 2026-01-28T14:24:44.189Z |
| CVE-2026-24549 |
4.3 (3.1)
|
WordPress GeoDirectory plugin < 2.8.150 - Cross Site R… |
Paolo |
GeoDirectory |
2026-01-23T14:28:52.855Z | 2026-01-28T14:24:26.166Z |
| CVE-2026-0746 |
6.4 (3.1)
|
AI Engine <= 3.3.2 - Authenticated (Subscriber+) Serve… |
tigroumeow |
AI Engine – The Chatbot and AI Framework for WordPress |
2026-01-27T18:27:55.920Z | 2026-01-28T14:11:11.277Z |
| CVE-2026-22264 |
7.4 (3.1)
|
Suricata detect/alert: heap-use-after-free on alert qu… |
OISF |
suricata |
2026-01-27T18:33:50.354Z | 2026-01-28T14:02:38.233Z |
| CVE-2025-14693 |
7 (4.0)
6.2 (3.1)
6.2 (3.0)
|
Ugreen DH2100+ USB symlink |
Ugreen |
DH2100+ |
2025-12-15T00:02:06.966Z | 2026-01-28T06:49:07.795Z |
| CVE-2025-14188 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T11:02:05.449Z | 2026-01-28T06:48:58.591Z |
| CVE-2025-14187 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
UGREEN DH2100+ nas_svr create handler_file_backup_crea… |
UGREEN |
DH2100+ |
2025-12-07T08:32:07.027Z | 2026-01-28T06:48:53.137Z |
| CVE-2025-36911 |
7.1 (3.1)
|
In key-based pairing, there is a possible ID due … |
Google |
Android |
2026-01-15T17:41:57.504Z | 2026-01-28T04:55:59.423Z |
| CVE-2023-0507 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:35:55.259Z | 2026-01-28T04:55:39.324Z |
| CVE-2023-22462 |
6.4 (3.1)
|
Stored XSS in Grafana Text plugin |
grafana |
grafana |
2023-03-02T00:06:59.876Z | 2026-01-28T04:55:37.854Z |
| CVE-2023-0594 |
7.3 (3.1)
|
Grafana is an open-source platform for monitoring… |
Grafana |
Grafana |
2023-03-01T15:36:43.881Z | 2026-01-28T04:55:36.581Z |
| CVE-2022-23552 |
7.3 (3.1)
|
Grafana stored XSS in FileUploader component |
grafana |
grafana |
2023-01-27T22:59:16.675Z | 2026-01-28T04:55:35.339Z |
| CVE-2022-31097 |
7.3 (3.1)
|
Stored XSS in Grafana's Unified Alerting |
grafana |
grafana |
2022-07-15T12:10:10.000Z | 2026-01-28T04:55:34.182Z |
| CVE-2022-24812 |
8 (3.1)
|
FGAC API Key privilege escalation in Grafana |
grafana |
grafana |
2022-04-12T17:00:19.000Z | 2026-01-28T04:55:33.003Z |
| CVE-2022-31107 |
7.1 (3.1)
|
Grafana account takeover via OAuth vulnerability |
grafana |
grafana |
2022-07-15T12:30:14.000Z | 2026-01-28T04:55:31.786Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-13292 |
7.6 (4.0)
|
Improper access control in Google Cloud Apigee-X allow… |
Google Cloud |
Apigee-X |
2025-12-06T05:05:51.597Z | 2026-01-30T19:08:02.176Z |
| CVE-2024-34703 |
7.5 (3.1)
|
Botan Vulnerable to Denial of Service Due to Overly La… |
randombit |
botan |
2024-06-30T20:22:32.910Z | 2026-01-30T19:54:58.434Z |
| CVE-2022-39314 |
4.8 (3.0)
|
User enumeration in the code-based login and password … |
getkirby |
kirby |
2022-10-24T00:00:00.000Z | 2026-01-30T19:57:13.349Z |
| CVE-2026-21641 |
7.1 (3.0)
|
HackerOne community member Jad Ghamloush (0xjad) … |
Revive |
Revive Adserver |
2026-01-20T20:48:47.885Z | 2026-01-21T18:52:48.506Z |
| CVE-2026-21642 |
6.1 (3.0)
|
HackerOne community member Patrick Lang (7yr) has… |
Revive |
Revive Adserver |
2026-01-20T20:48:48.079Z | 2026-01-21T20:47:21.691Z |
| CVE-2026-22258 |
7.5 (3.1)
|
Suricata DCERPC: unbounded fragment buffering leads to… |
OISF |
suricata |
2026-01-27T16:17:29.903Z | 2026-01-27T18:28:38.707Z |
| CVE-2025-55423 |
9.8 (3.1)
|
A command injection vulnerability exists in the u… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-27T14:58:59.154Z |
| CVE-2025-67261 |
6.5 (3.1)
|
Abacre Retail Point of Sale 14.0.0.396 is vulnera… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T16:38:37.574Z |
| CVE-2025-67263 |
6.1 (3.1)
|
Abacre Retail Point of Sale 14.0.0.396 is affecte… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-20T18:53:28.009Z |
| CVE-2025-66803 |
4.8 (3.1)
|
Race condition in the turbo-frame element handler… |
n/a |
n/a |
2026-01-20T00:00:00.000Z | 2026-01-21T15:26:53.433Z |
| CVE-2026-22259 |
7.5 (3.1)
|
Suricata dnp3: unbounded transaction growth |
OISF |
suricata |
2026-01-27T17:13:11.057Z | 2026-01-27T18:16:55.422Z |
| CVE-2021-47767 |
8.5 (4.0)
7.8 (3.1)
|
10-Strike Network Inventory Explorer Pro 9.31 - 'srvIn… |
10-Strike |
Strike Network Inventory Explorer Pro |
2026-01-15T15:52:09.919Z | 2026-01-15T18:27:09.610Z |
| CVE-2021-47768 |
5.3 (4.0)
6.1 (3.1)
|
ImportExportTools NG 10.0.4 - HTML Injection |
thundernest |
ImportExportTools NG |
2026-01-15T15:52:10.377Z | 2026-01-15T18:27:03.728Z |
| CVE-2026-20047 |
4.8 (3.1)
|
Cisco Identity Services Engine Cross-Site Scripting Vu… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:15.578Z | 2026-01-16T04:55:52.838Z |
| CVE-2026-20075 |
4.8 (3.1)
|
Cisco Evolved Programmable Network Manager and Cisco P… |
Cisco |
Cisco Evolved Programmable Network Manager (EPNM) |
2026-01-15T16:32:15.838Z | 2026-01-15T18:11:54.678Z |
| CVE-2026-20076 |
4.8 (3.1)
|
Cisco Identity Services Engine Stored Cross-Site Scrip… |
Cisco |
Cisco Identity Services Engine Software |
2026-01-15T16:32:03.744Z | 2026-01-16T04:55:53.964Z |
| CVE-2026-23495 |
4.3 (3.1)
|
Pimcore's Admin Classic Bundle is Missing Function Lev… |
pimcore |
pimcore |
2026-01-15T16:47:07.114Z | 2026-01-15T17:09:32.298Z |
| CVE-2026-23496 |
5.4 (3.1)
|
Pimcore Web2Print Tools Bundle "Favourite Output Chann… |
pimcore |
pimcore |
2026-01-15T16:58:39.431Z | 2026-01-15T18:26:33.948Z |
| CVE-2026-0765 |
8.8 (3.0)
|
Open WebUI PIP install_frontmatter_requirements Comman… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:32.185Z | 2026-01-24T04:55:37.773Z |
| CVE-2026-0766 |
8.8 (3.0)
|
Open WebUI load_tool_module_by_id Command Injection Re… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:35.773Z | 2026-01-24T04:55:36.583Z |
| CVE-2025-67025 |
6.1 (3.1)
|
Cross Site Scripting vulnerability in Anycomment … |
n/a |
n/a |
2026-01-15T00:00:00.000Z | 2026-01-15T21:07:24.240Z |
| CVE-2026-0767 |
5.3 (3.0)
|
Open WebUI Cleartext Transmission of Credentials Infor… |
Open WebUI |
Open WebUI |
2026-01-23T03:28:39.523Z | 2026-01-23T16:33:51.687Z |
| CVE-2025-63045 |
6.5 (3.1)
|
WordPress Master Slider Pro plugin <= 3.7.12 - Cross S… |
averta |
Master Slider Pro |
2025-12-09T14:52:30.970Z | 2026-01-30T17:36:16.361Z |
| CVE-2022-47425 |
4.3 (3.1)
|
WordPress ARMember – Membership Plugin, Content Restri… |
Repute Infosystems |
ARMember |
2025-12-09T16:41:37.058Z | 2025-12-09T17:05:20.626Z |
| CVE-2025-13743 |
2.4 (4.0)
|
Expired Personal Access Tokens (PATs) are recorded in … |
Docker |
Docker Desktop |
2025-12-09T20:39:52.071Z | 2025-12-10T15:45:17.295Z |
| CVE-2026-23645 |
5.3 (4.0)
|
SiYuan Vulnerable to Stored Cross-Site Scripting (XSS)… |
siyuan-note |
siyuan |
2026-01-16T19:20:06.744Z | 2026-01-16T21:37:58.336Z |
| CVE-2025-67488 |
7.8 (3.1)
|
SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE |
siyuan-note |
siyuan |
2025-12-09T20:32:37.274Z | 2025-12-09T21:30:12.799Z |
| CVE-2025-40700 |
5.1 (4.0)
|
Reflected Cross-Site Scripting (XSS) in Governalia by … |
IDI Eikon |
Governalia |
2025-12-02T13:08:55.540Z | 2025-12-02T13:26:32.149Z |
| CVE-2024-50388 |
9.5 (4.0)
|
HBS 3 Hybrid Backup Sync |
QNAP Systems Inc. |
HBS 3 Hybrid Backup Sync |
2024-12-06T16:35:07.434Z | 2024-12-06T19:59:55.053Z |
| CVE-2024-13086 |
5.3 (3.1)
|
QTS, QuTS hero |
QNAP Systems Inc. |
QTS |
2025-03-07T16:12:39.065Z | 2025-03-07T17:55:56.464Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-20076 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could… | 2026-01-15T17:16:07.517 | 2026-01-30T19:53:59.787 |
| fkie_cve-2026-23495 | Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the AP… | 2026-01-15T17:16:08.597 | 2026-01-30T19:51:59.950 |
| fkie_cve-2026-23496 | Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and… | 2026-01-15T17:16:08.747 | 2026-01-30T19:49:56.363 |
| fkie_cve-2026-0765 | Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerabili… | 2026-01-23T04:16:03.390 | 2026-01-30T19:48:35.070 |
| fkie_cve-2026-0766 | Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulne… | 2026-01-23T04:16:03.527 | 2026-01-30T19:47:56.023 |
| fkie_cve-2025-67025 | Cross Site Scripting vulnerability in Anycomment anycomment.io 0.4.4 allows a remote attacker to ex… | 2026-01-15T21:16:04.620 | 2026-01-30T19:42:50.463 |
| fkie_cve-2026-0767 | Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnera… | 2026-01-23T04:16:03.660 | 2026-01-30T19:36:59.573 |
| fkie_cve-2025-63045 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2025-12-09T16:18:09.747 | 2026-01-30T19:36:50.487 |
| fkie_cve-2022-47425 | Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Co… | 2025-12-09T17:15:47.830 | 2026-01-30T19:36:17.163 |
| fkie_cve-2025-13743 | Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to erro… | 2025-12-09T21:15:53.500 | 2026-01-30T19:35:24.140 |
| fkie_cve-2026-23645 | SiYuan is self-hosted, open source personal knowledge management software. Prior to 3.5.4-dev2, a S… | 2026-01-16T20:15:49.880 | 2026-01-30T19:32:11.660 |
| fkie_cve-2025-67488 | SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-202512021… | 2025-12-09T21:16:00.317 | 2026-01-30T19:30:11.173 |
| fkie_cve-2025-40700 | Reflected Cross-Site Scripting (XSS) in IDI Eikon's Governalia. The vulnerability allows an attacke… | 2025-12-02T13:15:53.537 | 2026-01-30T19:13:04.337 |
| fkie_cve-2024-50388 | An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If expl… | 2024-12-06T17:15:09.373 | 2026-01-30T19:03:53.217 |
| fkie_cve-2024-13086 | An exposure of sensitive information vulnerability has been reported to affect product. If exploite… | 2025-03-07T17:15:18.430 | 2026-01-30T18:54:35.447 |
| fkie_cve-2025-66476 | Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search … | 2025-12-02T22:16:09.940 | 2026-01-30T18:50:29.877 |
| fkie_cve-2026-21625 | User provided uploads to the Easy Discuss component for Joomla aren't properly validated. Uploads a… | 2026-01-16T15:15:55.017 | 2026-01-30T18:45:43.407 |
| fkie_cve-2025-13751 | Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on… | 2025-12-03T17:15:49.913 | 2026-01-30T18:43:57.883 |
| fkie_cve-2026-21624 | Lack of input filterung leads to a persistent XSS vulnerability in the user avatar text handling of… | 2026-01-16T15:15:54.873 | 2026-01-30T18:43:24.353 |
| fkie_cve-2026-21623 | Lack of input filterung leads to a persistent XSS vulnerability in the forum post handling of the E… | 2026-01-16T15:15:54.733 | 2026-01-30T18:42:53.640 |
| fkie_cve-2025-63083 | Lack of output escaping leads to a XSS vector in the pagebreak plugin. | 2026-01-06T17:15:44.740 | 2026-01-30T18:41:36.323 |
| fkie_cve-2025-33208 | NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an unco… | 2025-12-03T19:15:55.983 | 2026-01-30T18:41:29.603 |
| fkie_cve-2025-63082 | Lack of input filtering leads to an XSS vector in the HTML filter code related to data URLs in img tags. | 2026-01-06T17:15:44.590 | 2026-01-30T18:41:18.417 |
| fkie_cve-2025-10865 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause … | 2026-01-13T18:16:04.433 | 2026-01-30T18:39:09.417 |
| fkie_cve-2025-58409 | Software installed and run as a non-privileged user may conduct improper GPU system calls to subver… | 2026-01-13T17:15:57.680 | 2026-01-30T18:39:02.007 |
| fkie_cve-2025-58411 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause … | 2026-01-13T17:15:57.813 | 2026-01-30T18:38:40.350 |
| fkie_cve-2025-13086 | Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 t… | 2025-12-03T20:16:24.353 | 2026-01-30T18:38:13.833 |
| fkie_cve-2025-25176 | Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from app… | 2026-01-13T17:15:56.753 | 2026-01-30T18:37:54.833 |
| fkie_cve-2025-39205 | A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation … | 2025-06-24T13:15:22.470 | 2026-01-30T18:36:38.200 |
| fkie_cve-2026-1260 | Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file,… | 2026-01-22T17:16:30.643 | 2026-01-30T18:33:45.450 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-rjv5-9xjq-63w7 |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogzee blogzee allows… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-qp54-rrr2-2cx5 |
7.6 (3.1)
|
Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting In… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-q9f5-85hh-g48c |
7.5 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-jhxx-jxcx-hxjh |
6.5 (3.1)
|
Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configu… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-j4p5-pg39-488f |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogistic blogistic al… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-gh9v-9mv6-p8g9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-9wq4-qhqp-553r |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-75wm-q5m3-c399 |
7.5 (3.1)
|
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Conf… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-75hf-52rg-6v76 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-7335-mx3x-jg48 |
5.3 (3.1)
|
Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-5p48-v8rv-8f32 |
7.5 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-4p8r-wx48-qfxr |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-3w43-vh49-x5jp |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-3mf6-3q6q-vqgr |
7.3 (3.1)
|
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allo… | 2026-01-22T18:30:38Z | 2026-01-27T21:31:42Z |
| ghsa-32qq-wr5q-gh7c |
7.5 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Bu… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-2p99-vc9j-4p2g |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-g7gq-qmh4-jhww |
7.3 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-g3rp-cv32-x284 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-g2pf-4pxg-m8xx |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-27T21:31:41Z |
| ghsa-fv85-v87w-8wjv |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-62cp-mf64-qf99 |
8.5 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:35Z | 2026-01-27T21:31:41Z |
| ghsa-3fmc-7wj3-j5v5 |
8.6 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-28gq-jr92-xw88 |
8.8 (3.1)
|
Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:41Z |
| ghsa-mwg5-cwh8-88m5 |
9.8 (3.1)
9.3 (4.0)
|
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthentica… | 2026-01-13T00:30:45Z | 2026-01-27T21:31:40Z |
| ghsa-4hcq-q3qf-q453 |
7.5 (3.1)
8.7 (4.0)
|
Enhancesoft osTicket versions up to and including 1.18.2 contain an arbitrary file read vulnerabili… | 2026-01-12T21:30:34Z | 2026-01-27T21:31:40Z |
| ghsa-xvh8-9h96-57r8 |
8.1 (3.1)
8.6 (4.0)
|
IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user with… | 2026-01-12T15:30:42Z | 2026-01-27T21:31:39Z |
| ghsa-r7v3-974m-576m |
8.1 (3.1)
8.7 (4.0)
|
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated us… | 2026-01-12T15:30:42Z | 2026-01-27T21:31:39Z |
| ghsa-m5q9-73x5-pf78 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remai… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:36Z |
| ghsa-9px7-88w4-86hp |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to … | 2025-10-01T12:30:31Z | 2026-01-27T21:31:36Z |
| ghsa-xw7x-gch6-cpx7 |
7.1 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate dat… | 2025-10-04T09:30:21Z | 2026-01-27T21:31:35Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2021-127 |
|
Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component o… | apache-superset | 2021-03-05T12:15:00Z | 2021-08-27T03:21:55.702415Z |
| pysec-2020-223 |
|
In the course of work on the open source project it was discovered that authenticated use… | apache-superset | 2020-09-30T21:15:00Z | 2021-08-27T03:21:55.668622Z |
| pysec-2020-222 |
|
While investigating a bug report on Apache Superset, it was determined that an authentica… | apache-superset | 2020-09-17T13:15:00Z | 2021-08-27T03:21:55.635305Z |
| pysec-2012-12 |
|
Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of… | apache-libcloud | 2012-11-04T22:55:00Z | 2021-08-27T03:21:55.557676Z |
| pysec-2021-124 |
|
A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console… | ansible | 2021-05-26T21:15:00Z | 2021-08-27T03:21:53.214122Z |
| pysec-2019-171 |
|
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5… | ansible | 2019-10-14T15:15:00Z | 2021-08-27T03:21:53.021460Z |
| pysec-2018-80 |
|
aio-libs aiohttp-session contains a Session Fixation vulnerability in load_session functi… | aiohttp-session | 2018-06-26T16:29:00Z | 2021-08-27T03:21:52.874717Z |
| pysec-2017-80 |
|
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript… | mistune | 2017-10-19T08:29:00Z | 2021-08-25T04:57:34.565130Z |
| pysec-2019-166 |
|
The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptio… | coapthon3 | 2019-04-02T19:29:00Z | 2021-08-25T04:57:20.904496Z |
| pysec-2019-165 |
|
The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles ce… | coapthon | 2019-04-02T20:29:00Z | 2021-08-25T04:57:20.831477Z |
| pysec-2020-219 |
|
In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other us… | wagtail-2fa | 2020-03-13T22:15:00Z | 2021-08-25T04:30:36.375287Z |
| pysec-2018-79 |
|
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed… | websockets | 2018-06-26T16:29:00Z | 2021-08-25T04:30:36.925398Z |
| pysec-2018-78 |
|
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot opti… | uwsgi | 2018-02-26T22:29:00Z | 2021-08-25T04:30:36.296302Z |
| pysec-2017-85 |
|
txAWS (all current versions) fail to perform complete certificate verification resulting … | txaws | 2017-07-17T13:18:00Z | 2021-08-25T04:30:35.998894Z |
| pysec-2018-77 |
|
The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext … | tryton | 2018-11-22T19:29:00Z | 2021-08-25T04:30:34.252835Z |
| pysec-2018-76 |
|
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::pa… | topydo | 2018-06-26T16:29:00Z | 2021-08-25T04:30:33.312157Z |
| pysec-2017-84 |
|
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with… | swauth | 2017-11-21T13:29:00Z | 2021-08-25T04:30:33.081491Z |
| pysec-2018-75 |
|
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability i… | suricata-update | 2018-04-18T19:29:00Z | 2021-08-25T04:30:32.993759Z |
| pysec-2018-74 |
|
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to … | superset | 2018-11-07T14:29:00Z | 2021-08-25T04:30:32.701868Z |
| pysec-2017-82 |
|
The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configura… | salt | 2017-04-25T17:59:00Z | 2021-08-25T04:30:30.228761Z |
| pysec-2019-170 |
|
An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket… | python-engineio | 2019-07-16T00:15:00Z | 2021-08-25T04:30:27.861588Z |
| pysec-2019-169 |
|
When using PySpark , it's possible for a different local user to connect to the Spark app… | pyspark | 2019-02-04T17:29:00Z | 2021-08-25T04:30:27.510120Z |
| pysec-2018-73 |
|
By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send… | plone | 2018-01-03T20:29:00Z | 2021-08-25T04:30:17.052846Z |
| pysec-2017-81 |
|
Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox… | plone | 2017-03-23T16:59:00Z | 2021-08-25T04:30:17.184045Z |
| pysec-2018-72 |
|
Accessing private content via str.format in through-the-web templates and scripts in Plon… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.983029Z |
| pysec-2018-71 |
|
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of h… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.873350Z |
| pysec-2018-70 |
|
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login fo… | plone | 2018-01-03T18:29:00Z | 2021-08-25T04:30:16.749835Z |
| pysec-2018-69 |
|
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect A… | paramiko | 2018-10-08T15:29:00Z | 2021-08-25T04:30:15.170380Z |
| pysec-2018-68 |
|
An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 a… | oauthenticator | 2018-02-18T03:29:00Z | 2021-08-25T04:30:14.910557Z |
| pysec-2019-168 |
|
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4… | ipa | 2019-11-27T08:15:00Z | 2021-08-25T04:30:10.435825Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2021-47256 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.727123Z |
| gsd-2021-47255 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.617481Z |
| gsd-2021-47254 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.693685Z |
| gsd-2021-47253 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.659914Z |
| gsd-2021-47252 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.619083Z |
| gsd-2021-47251 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.668115Z |
| gsd-2021-47250 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.717215Z |
| gsd-2021-47249 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.602618Z |
| gsd-2021-47248 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.555070Z |
| gsd-2021-47247 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.586265Z |
| gsd-2021-47246 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.583702Z |
| gsd-2021-47245 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722706Z |
| gsd-2021-47244 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.691032Z |
| gsd-2021-47243 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.553204Z |
| gsd-2021-47242 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722977Z |
| gsd-2021-47241 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.611830Z |
| gsd-2021-47240 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.709261Z |
| gsd-2021-47239 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.532966Z |
| gsd-2021-47238 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.698901Z |
| gsd-2021-47237 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.685235Z |
| gsd-2021-47236 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.722364Z |
| gsd-2021-47235 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.622533Z |
| gsd-2021-47234 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.673329Z |
| gsd-2021-47233 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.619298Z |
| gsd-2021-47232 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.652916Z |
| gsd-2021-47231 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.639304Z |
| gsd-2021-47230 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.647834Z |
| gsd-2021-47229 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.726005Z |
| gsd-2021-47228 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.698614Z |
| gsd-2021-47227 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:05:09.566309Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2025-192780 | Malicious code in elf-stats-rooftop-mitten-324 (npm) | 2025-12-23T08:09:46Z | 2025-12-24T00:53:16Z |
| mal-2025-192779 | Malicious code in elf-stats-piney-train-884 (npm) | 2025-12-23T08:09:34Z | 2025-12-24T00:53:16Z |
| mal-2025-192778 | Malicious code in elf-stats-nutmeg-fir-716 (npm) | 2025-12-23T08:09:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192777 | Malicious code in elf-stats-mistletoe-muffin-976 (npm) | 2025-12-23T08:09:15Z | 2025-12-24T00:53:16Z |
| mal-2025-192776 | Malicious code in elf-stats-mistletoe-cookie-256 (npm) | 2025-12-23T08:09:14Z | 2025-12-24T00:53:16Z |
| mal-2025-192775 | Malicious code in elf-stats-merry-sparkler-797 (npm) | 2025-12-23T08:09:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192774 | Malicious code in elf-stats-joyous-saddlebag-967 (npm) | 2025-12-23T08:08:33Z | 2025-12-24T00:53:16Z |
| mal-2025-192773 | Malicious code in elf-stats-jolly-snowglobe-266 (npm) | 2025-12-23T08:08:32Z | 2025-12-24T00:53:16Z |
| mal-2025-192772 | Malicious code in elf-stats-holly-fir-593 (npm) | 2025-12-23T08:08:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192771 | Malicious code in elf-stats-glittering-cookie-844 (npm) | 2025-12-23T08:08:17Z | 2025-12-24T00:53:16Z |
| mal-2025-192770 | Malicious code in elf-stats-ginger-bow-370 (npm) | 2025-12-23T08:08:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192769 | Malicious code in elf-stats-fuzzy-ribbon-205 (npm) | 2025-12-23T08:08:00Z | 2025-12-24T00:53:16Z |
| mal-2025-192768 | Malicious code in elf-stats-flickering-satchel-815 (npm) | 2025-12-23T08:07:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192767 | Malicious code in elf-stats-festive-marshmallow-962 (npm) | 2025-12-23T08:07:35Z | 2025-12-24T00:53:16Z |
| mal-2025-192766 | Malicious code in elf-stats-evergreen-lantern-387 (npm) | 2025-12-23T08:07:18Z | 2025-12-24T00:53:16Z |
| mal-2025-192765 | Malicious code in elf-stats-ember-workbench-742 (npm) | 2025-12-23T08:07:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192755 | Malicious code in dotjsenv (npm) | 2025-12-23T18:37:29Z | 2025-12-24T00:53:16Z |
| mal-2025-192754 | Malicious code in chai-max (npm) | 2025-12-23T18:30:01Z | 2025-12-24T00:53:16Z |
| mal-2025-192753 | Malicious code in chai-async-chains (npm) | 2025-12-23T18:26:52Z | 2025-12-24T00:53:16Z |
| mal-2025-192751 | Malicious code in elf-stats-cosy-sled-455 (npm) | 2025-12-23T08:07:03Z | 2025-12-24T00:53:16Z |
| mal-2025-192750 | Malicious code in elf-stats-cosy-cocoa-331 (npm) | 2025-12-23T08:07:02Z | 2025-12-24T00:53:16Z |
| mal-2025-192743 | Malicious code in dotenv-extend (npm) | 2025-12-23T16:58:53Z | 2025-12-24T00:53:16Z |
| mal-2025-192742 | Malicious code in chai-tests-await (npm) | 2025-12-23T16:58:53Z | 2025-12-24T00:53:16Z |
| mal-2025-192741 | Malicious code in elf-stats-cocoa-mitten-558 (npm) | 2025-12-23T08:06:52Z | 2025-12-24T00:53:16Z |
| mal-2025-192740 | Malicious code in elf-stats-caroling-wreath-635 (npm) | 2025-12-23T08:06:45Z | 2025-12-24T00:53:16Z |
| mal-2025-192739 | Malicious code in elf-stats-caroling-train-677 (npm) | 2025-12-23T08:06:35Z | 2025-12-24T00:53:16Z |
| mal-2025-192738 | Malicious code in elf-stats-caroling-star-725 (npm) | 2025-12-23T08:06:34Z | 2025-12-24T00:53:16Z |
| mal-2025-192737 | Malicious code in elf-stats-candlelit-ornament-402 (npm) | 2025-12-23T08:06:15Z | 2025-12-24T00:53:16Z |
| mal-2025-192736 | Malicious code in elf-stats-bright-pinecone-706 (npm) | 2025-12-23T08:06:06Z | 2025-12-24T00:53:16Z |
| mal-2025-192735 | Malicious code in elf-stats-aurora-rocket-733 (npm) | 2025-12-23T08:06:01Z | 2025-12-24T00:53:16Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0521 | SAP Patchday März 2025: Mehrere Schwachstellen | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0520 | Laravel Framework: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0519 | Veritas Infoscale: Schwachstelle ermöglicht Codeausführung | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0518 | IBM InfoSphere Data Replication: Mehrere Schwachstellen | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0517 | IBM Security Guardium: Schwachstelle ermöglicht Manipulation von Dateien | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0516 | Camunda: Mehrere Schwachstellen ermöglichen Cross-Site Scripting | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0514 | Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen | 2025-03-10T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0513 | OpenVPN: Schwachstelle ermöglicht Denial of Service | 2017-09-28T22:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0392 | Keycloak Organization Feature: Schwachstelle ermöglicht Privilegieneskalation | 2025-02-17T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0365 | Kubernetes: Schwachstelle ermöglicht Denial of Service | 2025-02-13T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0298 | OPC Foundation OPC UA .NET Standard Stack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen | 2025-02-09T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0173 | Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-01-22T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0072 | Ivanti Endpoint Manager: Mehrere Schwachstellen | 2025-01-14T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-3577 | Red Hat OpenShift: Schwachstelle ermöglicht Manipulation von Daten | 2024-12-02T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-3280 | Squid: Schwachstelle ermöglicht Denial of Service | 2024-10-27T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-3277 | F5 BIG-IP: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-10-27T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-1755 | Gitea: Mehrere Schwachstellen | 2024-08-04T22:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-1447 | Squid: Schwachstelle ermöglicht Denial of Service | 2024-06-24T22:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-0544 | Squid: Schwachstelle ermöglicht Denial of Service | 2024-03-04T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2024-0424 | PostgreSQL JDBC Driver: Schwachstelle ermöglicht SQL-Injection | 2024-02-19T23:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2023-2375 | Insyde UEFI Firmware: Schwachstelle ermöglicht Codeausführung | 2023-09-17T22:00:00.000+00:00 | 2025-03-10T23:00:00.000+00:00 |
| wid-sec-w-2025-0510 | Microsoft Edge: Schwachstelle ermöglicht Darstellen falscher Informationen | 2025-03-09T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0509 | Apache OFBiz: Schwachstelle ermöglicht Codeausführung | 2025-03-09T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0506 | QNAP NAS (QuLog Center, QTS, QuTS hero): Mehrere Schwachstellen | 2025-03-09T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0486 | Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-03-04T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2024-3464 | Mozilla Thunderbird: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-11-13T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2023-2663 | zlib: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2023-10-16T22:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2022-0116 | OpenVPN: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2022-03-16T23:00:00.000+00:00 | 2025-03-09T23:00:00.000+00:00 |
| wid-sec-w-2025-0505 | ServiceNow Now Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| wid-sec-w-2025-0504 | HCL BigFix WebUI Applications: Mehrere Schwachstellen | 2025-03-06T23:00:00.000+00:00 | 2025-03-06T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:1461 | Red Hat Security Advisory: Logging Subsystem 5.4 - Red Hat OpenShift Security and Bug update | 2022-04-20T22:57:16+00:00 | 2026-02-03T21:12:35+00:00 |
| rhsa-2022:1372 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 enhancement, security & bug fix update | 2022-04-13T18:48:58+00:00 | 2026-02-03T21:12:35+00:00 |
| rhsa-2022:1370 | Red Hat Security Advisory: OpenShift Container Platform 4.8.37 security and extras update | 2022-04-20T12:18:41+00:00 | 2026-02-03T21:12:34+00:00 |
| rhsa-2022:1363 | Red Hat Security Advisory: OpenShift Container Platform 4.9.29 bug fix and security update | 2022-04-20T14:43:46+00:00 | 2026-02-03T21:12:34+00:00 |
| rhsa-2022:1361 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement&bugfix update | 2022-04-13T15:33:28+00:00 | 2026-02-03T21:12:33+00:00 |
| rhsa-2022:1357 | Red Hat Security Advisory: OpenShift Container Platform 4.10.10 security and extras update | 2022-04-20T11:41:10+00:00 | 2026-02-03T21:12:32+00:00 |
| rhsa-2022:1356 | Red Hat Security Advisory: OpenShift Container Platform 4.10.10 bug fix and security update | 2022-04-21T13:13:54+00:00 | 2026-02-03T21:12:32+00:00 |
| rhsa-2022:1081 | Red Hat Security Advisory: Gatekeeper Operator v0.2 security updates and bug fixes | 2022-03-28T14:14:19+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0595 | Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.6 security updates and bug fixes | 2022-03-04T01:35:35+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0432 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.20.0 | 2022-02-03T16:10:33+00:00 | 2026-02-03T21:12:30+00:00 |
| rhsa-2022:0687 | Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.1 security and bug fix update | 2022-02-28T21:18:28+00:00 | 2026-02-03T21:12:28+00:00 |
| rhsa-2022:0434 | Red Hat Security Advisory: Release of OpenShift Serverless 1.20.0 | 2022-02-03T20:05:14+00:00 | 2026-02-03T21:12:27+00:00 |
| rhsa-2022:0056 | Red Hat Security Advisory: OpenShift Container Platform 4.10.3 security update | 2022-03-10T16:00:51+00:00 | 2026-02-03T21:12:22+00:00 |
| rhsa-2022:0055 | Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update | 2022-03-10T14:59:25+00:00 | 2026-02-03T21:12:22+00:00 |
| rhsa-2021:5176 | Red Hat Security Advisory: go-toolset-1.16 and go-toolset-1.16-golang security and bug fix update | 2021-12-16T16:38:14+00:00 | 2026-02-03T21:12:22+00:00 |
| rhsa-2021:2920 | Red Hat Security Advisory: OpenShift Virtualization 4.8.0 Images | 2021-07-28T14:11:53+00:00 | 2026-02-03T21:12:08+00:00 |
| rhea-2024:6787 | Red Hat Enhancement Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.14.0 | 2024-09-18T18:30:16+00:00 | 2026-02-03T21:12:07+00:00 |
| rhea-2024:11005 | Red Hat Enhancement Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.15.0 | 2024-12-12T14:32:14+00:00 | 2026-02-03T21:12:04+00:00 |
| rhea-2023:7493 | Red Hat Enhancement Advisory: OpenShift sandboxed containers 1.5.0 update | 2023-11-27T11:44:10+00:00 | 2026-02-03T21:12:04+00:00 |
| rhba-2024:1246 | Red Hat Bug Fix Advisory: Multicluster Engine for Kubernetes 2.4.4 bug fixes | 2024-03-11T18:16:03+00:00 | 2026-02-03T21:12:02+00:00 |
| rhba-2024:1127 | Red Hat Bug Fix Advisory: libssh bug fix update | 2024-03-05T18:22:05+00:00 | 2026-02-03T21:12:02+00:00 |
| rhba-2024:1136 | Red Hat Bug Fix Advisory: podman bug fix update | 2024-03-05T20:05:51+00:00 | 2026-02-03T21:12:01+00:00 |
| rhba-2023:4315 | Red Hat Bug Fix Advisory: Red Hat OpenShift Pipelines 1.10.5 release | 2023-07-27T18:51:06+00:00 | 2026-02-03T21:11:51+00:00 |
| rhba-2023:3611 | Red Hat Bug Fix Advisory: Release of Bug Advisories for the OpenShift Jenkins and Jenkins agent base image | 2023-06-15T00:29:54+00:00 | 2026-02-03T21:11:50+00:00 |
| rhba-2023:2181 | Red Hat Bug Fix Advisory: delve, golang, and go-toolset bug fix and enhancement update | 2023-05-09T09:51:23+00:00 | 2026-02-03T21:11:49+00:00 |
| rhba-2023:1649 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11.35 packages and security update | 2023-04-12T04:51:26+00:00 | 2026-02-03T21:11:48+00:00 |
| rhba-2023:0568 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.12.2 packages update | 2023-02-08T04:26:39+00:00 | 2026-02-03T21:11:48+00:00 |
| rhba-2022:5876 | Red Hat Bug Fix Advisory: OpenShift Container Platform 4.10.26 extras update | 2022-08-09T02:28:26+00:00 | 2026-02-03T21:11:46+00:00 |
| rhsa-2026:1815 | Red Hat Security Advisory: openssh security update | 2026-02-03T13:31:42+00:00 | 2026-02-03T20:56:58+00:00 |
| rhsa-2026:1790 | Red Hat Security Advisory: openssh security update | 2026-02-03T07:04:31+00:00 | 2026-02-03T20:56:58+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-22-130-04 | Eaton Intelligent Power Manager | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-03 | Eaton Intelligent Power Manager Infrastructure | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-02 | Eaton Intelligent Power Protector | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-130-01 | Adminer in Industrial Products | 2022-05-10T00:00:00.000000Z | 2022-05-10T00:00:00.000000Z |
| icsa-22-125-01 | Johnson Controls Metasys | 2022-05-05T00:00:00.000000Z | 2022-05-05T00:00:00.000000Z |
| icsa-22-123-01 | Yokogawa CENTUM and ProSafe-RS | 2022-05-03T00:00:00.000000Z | 2022-05-03T00:00:00.000000Z |
| icsa-22-118-01 | Johnson Controls Metasys | 2022-04-28T00:00:00.000000Z | 2022-04-28T00:00:00.000000Z |
| icsa-22-081-01 | Delta Electronics DIAEnergie (Update C) | 2022-03-22T00:00:00.000000Z | 2022-04-28T00:00:00.000000Z |
| icsa-22-116-01 | Hitachi Energy System Data Manager | 2022-04-26T00:00:00.000000Z | 2022-04-26T00:00:00.000000Z |
| icsa-22-111-03 | Hitachi Energy MicroSCADA Pro/X SYS600 | 2022-04-21T00:00:00.000000Z | 2022-04-21T00:00:00.000000Z |
| icsa-22-111-02 | Johnson Controls Metasys SCT Pro | 2022-04-21T00:00:00.000000Z | 2022-04-21T00:00:00.000000Z |
| icsa-22-111-01 | Delta Electronics ASDA-Soft | 2022-04-21T00:00:00.000000Z | 2022-04-21T00:00:00.000000Z |
| icsa-22-109-05 | Elcomplus SmartPTT SCADA Server | 2022-04-19T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-22-109-04 | Elcomplus SmartPTT SCADA | 2022-04-19T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-22-109-03 | FANUC ROBOGUIDE Simulation Platform | 2022-04-19T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-22-109-02 | Automated Logic WebCTRL | 2022-04-19T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-22-109-01 | Interlogix Hills ComNav | 2022-04-19T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-21-119-04 | Multiple RTOS (Update E) | 2021-04-29T00:00:00.000000Z | 2022-04-19T00:00:00.000000Z |
| icsa-22-104-04 | Siemens SCALANCE FragAttacks | 2022-04-14T00:00:00.000000Z | 2022-04-14T00:00:00.000000Z |
| icsa-22-104-03 | Red Lion DA50N | 2022-04-14T00:00:00.000000Z | 2022-04-14T00:00:00.000000Z |
| icsa-22-104-02 | Johnson Controls Metasys | 2022-04-14T00:00:00.000000Z | 2022-04-14T00:00:00.000000Z |
| icsa-22-104-01 | Delta Electronics DMARS | 2022-04-14T00:00:00.000000Z | 2022-04-14T00:00:00.000000Z |
| icsa-19-099-03 | Siemens Industrial Products with OPC UA (Update H) | 2019-04-09T00:00:00.000000Z | 2022-04-14T00:00:00.000000Z |
| icsa-22-102-05 | Aethon TUG Home Base Server | 2022-04-12T00:00:00.000000Z | 2022-04-12T00:00:00.000000Z |
| icsa-22-102-03 | Inductive Automation Ignition | 2022-04-12T00:00:00.000000Z | 2022-04-12T00:00:00.000000Z |
| icsa-22-102-02 | Mitsubishi Electric MELSEC-Q Series C Controller Module | 2022-04-12T00:00:00.000000Z | 2022-04-12T00:00:00.000000Z |
| icsa-22-102-01 | Valmet DNA | 2022-04-12T00:00:00.000000Z | 2022-04-12T00:00:00.000000Z |
| icsa-22-097-02 | ABB SPIET800 and PNI800 | 2022-04-07T00:00:00.000000Z | 2022-04-07T00:00:00.000000Z |
| icsa-22-097-01 | Pepperl+Fuchs WirelessHART-Gateway | 2022-04-07T00:00:00.000000Z | 2022-04-07T00:00:00.000000Z |
| icsa-21-278-01 | Mitsubishi Electric GOT and Tension Controller (Update A) | 2021-10-05T00:00:00.000000Z | 2022-04-07T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-cvdsd-missing-auth-rqo88rnj | Cisco Vision Dynamic Signage Director Missing Authentication Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cvdsd-missing-auth-rQO88rnj | Cisco Vision Dynamic Signage Director Missing Authentication Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-rcedos-mahr8vnx | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-rcedos-mAHR8vNx | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-cdp-memleak-heyebx9 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability | 2020-10-07T16:00:00+00:00 | 2020-10-07T16:00:00+00:00 |
| cisco-sa-rv-osinj-rce-pwtkpcjv | Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities | 2020-09-02T16:00:00+00:00 | 2020-09-30T19:35:24+00:00 |
| cisco-sa-rv-osinj-rce-pwTkPCJv | Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities | 2020-09-02T16:00:00+00:00 | 2020-09-30T19:35:24+00:00 |
| cisco-sa-ap-ethport-dos-xtjtt8py | Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-30T15:49:49+00:00 |
| cisco-sa-ap-ethport-dos-xtjTt8pY | Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-30T15:49:49+00:00 |
| cisco-sa-iosxr-dvmrp-memexh-dsmpdvfz | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | 2020-08-29T03:00:00+00:00 | 2020-09-28T21:36:50+00:00 |
| cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities | 2020-08-29T03:00:00+00:00 | 2020-09-28T21:36:50+00:00 |
| cisco-sa-zbfw-94ckg4g | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-zbfw-94ckG4G | Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-wpa-dos-cxshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-wpa-dos-cXshjerc | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-webui-auth-bypass-6j2byuc7 | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-webui-auth-bypass-6j2BYUc7 | Cisco IOS XE Software Web UI Authorization Bypass Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-web-ui-exnfmcpo | Cisco IOS XE Software Web UI Improper Input Validation Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-unauth-file-access-ebtwkkvw | Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-unauth-file-access-eBTWkKVW | Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-splitdns-spwqpdgw | Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-splitdns-SPWqpdGW | Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-rommon-secboot-7jgvlvyc | Cisco IOS XE ROM Monitor Software Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-rommon-secboot-7JgVLVYC | Cisco IOS XE ROM Monitor Software Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-mdns-dos-3th6ca9j | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-mdns-dos-3tH6cA9J | Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-le-drtob625 | Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-le-drTOB625 | Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-jp-dos-g5ffgm8y | Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| cisco-sa-isr4461-gkkurohx | Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability | 2020-09-24T16:00:00+00:00 | 2020-09-24T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2025-38038 | cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost | 2025-06-02T00:00:00.000Z | 2025-09-04T01:29:23.000Z |
| msrc_cve-2025-38543 | drm/tegra: nvdec: Fix dma_alloc_coherent error check | 2025-08-02T00:00:00.000Z | 2025-09-04T01:28:47.000Z |
| msrc_cve-2024-26765 | LoongArch: Disable IRQ before init_fn() for nonboot CPUs | 2024-04-02T07:00:00.000Z | 2025-09-04T01:28:29.000Z |
| msrc_cve-2025-38496 | dm-bufio: fix sched in atomic context | 2025-07-02T00:00:00.000Z | 2025-09-04T01:25:57.000Z |
| msrc_cve-2022-49218 | drm/dp: Fix OOB read when handling Post Cursor2 register | 2025-02-02T00:00:00.000Z | 2025-09-04T01:25:00.000Z |
| msrc_cve-2025-38513 | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 2025-08-02T00:00:00.000Z | 2025-09-04T01:21:04.000Z |
| msrc_cve-2024-58093 | PCI/ASPM: Fix link state exit during switch upstream function removal | 2025-04-02T00:00:00.000Z | 2025-09-04T01:16:43.000Z |
| msrc_cve-2025-38060 | bpf: copy_verifier_state() should copy 'loop_entry' field | 2025-06-02T00:00:00.000Z | 2025-09-04T01:15:43.000Z |
| msrc_cve-2022-41724 | Panic on large handshake records in crypto/tls | 2023-02-01T00:00:00.000Z | 2025-09-04T01:14:18.000Z |
| msrc_cve-2025-38539 | tracing: Add down_write(trace_event_sem) when adding trace event | 2025-08-02T00:00:00.000Z | 2025-09-04T01:12:44.000Z |
| msrc_cve-2018-1000215 | Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service | 2018-08-02T00:00:00.000Z | 2025-09-04T01:12:38.000Z |
| msrc_cve-2025-38494 | HID: core: do not bypass hid_hw_raw_request | 2025-07-02T00:00:00.000Z | 2025-09-04T01:11:10.000Z |
| msrc_cve-2025-38538 | dmaengine: nbpfaxi: Fix memory corruption in probe() | 2025-08-02T00:00:00.000Z | 2025-09-04T01:10:08.000Z |
| msrc_cve-2023-45289 | Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http | 2024-03-02T08:00:00.000Z | 2025-09-04T01:09:58.000Z |
| msrc_cve-2023-42503 | Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file | 2023-09-01T00:00:00.000Z | 2025-09-04T01:07:36.000Z |
| msrc_cve-2025-38510 | kasan: remove kasan_find_vm_area() to prevent possible deadlock | 2025-08-02T00:00:00.000Z | 2025-09-04T01:07:11.000Z |
| msrc_cve-2025-38677 | f2fs: fix to avoid out-of-boundary access in dnode page | 2025-08-02T00:00:00.000Z | 2025-09-04T01:06:37.000Z |
| msrc_cve-2025-37984 | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 2025-05-02T00:00:00.000Z | 2025-09-04T01:05:17.000Z |
| msrc_cve-2025-38329 | firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) | 2025-07-02T00:00:00.000Z | 2025-09-04T01:01:28.000Z |
| msrc_cve-2025-38490 | net: libwx: remove duplicate page_pool_put_full_page() | 2025-07-02T00:00:00.000Z | 2025-09-04T01:00:10.000Z |
| msrc_cve-2023-6270 | Kernel: aoe: improper reference count leads to use-after-free vulnerability | 2024-01-01T08:00:00.000Z | 2025-09-04T00:59:32.000Z |
| msrc_cve-2025-38542 | net: appletalk: Fix device refcount leak in atrtr_create() | 2025-08-02T00:00:00.000Z | 2025-09-04T00:57:26.000Z |
| msrc_cve-2025-38340 | firmware: cs_dsp: Fix OOB memory read access in KUnit test | 2025-07-02T00:00:00.000Z | 2025-09-04T00:57:21.000Z |
| msrc_cve-2025-4969 | Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c | 2025-05-02T00:00:00.000Z | 2025-09-04T00:56:39.000Z |
| msrc_cve-2025-38047 | x86/fred: Fix system hang during S4 resume with FRED enabled | 2025-06-02T00:00:00.000Z | 2025-09-04T00:56:21.000Z |
| msrc_cve-2025-38503 | btrfs: fix assertion when building free space tree | 2025-08-02T00:00:00.000Z | 2025-09-04T00:53:31.000Z |
| msrc_cve-2024-26671 | blk-mq: fix IO hang from sbitmap wakeup race | 2024-04-02T07:00:00.000Z | 2025-09-04T00:53:31.000Z |
| msrc_cve-2025-38548 | hwmon: (corsair-cpro) Validate the size of the received input buffer | 2025-08-02T00:00:00.000Z | 2025-09-04T00:51:22.000Z |
| msrc_cve-2024-26645 | tracing: Ensure visibility when inserting an element into tracing_map | 2024-03-02T08:00:00.000Z | 2025-09-04T00:50:26.000Z |
| msrc_cve-2024-24785 | Errors returned from JSON marshaling may break template escaping in html/template | 2024-03-02T08:00:00.000Z | 2025-09-04T00:47:50.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13874-1 | python310-idna-3.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13873-1 | java-21-openjdk-21.0.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13872-1 | java-17-openjdk-17.0.11.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13871-1 | java-11-openjdk-11.0.23.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13870-1 | filezilla-3.67.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13869-1 | python310-pydantic-2.6.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13868-1 | putty-0.81-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13867-1 | php8-8.3.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13866-1 | perl-CryptX-0.80.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13865-1 | golang-github-v2fly-v2ray-core-5.15.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13864-1 | python310-pikepdf-8.15.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13863-1 | cosign-2.2.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13862-1 | python310-ecdsa-0.19.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13861-1 | python310-djangorestframework-3.15.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13860-1 | frr-8.4-10.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13859-1 | nodejs-electron-28.3.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13858-1 | kernel-devel-6.8.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13857-1 | aws-nitro-enclaves-binaryblobs-upstream-1.2.3~git11.d3d77e0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13856-1 | sngrep-1.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13855-1 | nodejs-electron-28.2.10-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13854-1 | python310-yt-dlp-2024.04.09-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13853-1 | xen-4.18.2_02-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13852-1 | corepack21-21.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13851-1 | corepack20-20.12.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13850-1 | nodejs-electron-28.2.10-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13849-1 | coredns-1.11.1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13848-1 | apache2-mod_auth_mellon-0.19.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13847-1 | syncthing-1.27.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13846-1 | nodejs-electron-28.2.10-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13845-1 | kubo-0.27.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2024-5005 | Incorrect Provision of Specified Functionality in GitLab | 2024-10-15T19:18:05.224Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4901 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-06-28T07:20:21.085Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4835 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-05-29T07:19:26.961Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4784 | Authentication Bypass by Primary Weakness in GitLab | 2024-08-10T07:23:52.701Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4660 | Missing Authorization in GitLab | 2024-09-14T07:12:55.540Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4612 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-09-14T07:13:08.316Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4597 | Cross-Site Request Forgery (CSRF) in GitLab | 2024-05-24T07:18:32.743Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4557 | Uncontrolled Resource Consumption in GitLab | 2024-06-28T07:21:04.484Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-45409 | The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selector | 2024-09-21T07:19:08.053Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4539 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-24T07:19:07.246Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4472 | Insertion of Sensitive Information into Log File in GitLab | 2024-09-14T07:13:58.424Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4283 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-09-18T07:23:19.137Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4278 | Incorrect Synchronization in GitLab | 2024-09-27T07:24:05.639Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4210 | Uncontrolled Resource Consumption in GitLab | 2024-08-10T07:24:57.497Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4207 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-08-10T07:25:14.194Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4201 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-06-17T07:20:12.630Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4024 | Authentication Bypass by Assumed-Immutable Data in GitLab | 2024-04-27T07:18:17.032Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4011 | Improper Access Control in GitLab | 2024-06-28T07:22:06.584Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-4006 | Incorrect Authorization in GitLab | 2024-04-27T07:18:44.636Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3976 | Missing Authorization in GitLab | 2025-02-07T07:21:27.185Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3959 | Improper Authorization in GitLab | 2024-06-28T07:22:40.884Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3958 | Improper Control of Generation of Code ('Code Injection') in GitLab | 2024-08-10T07:26:42.995Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3127 | Improper Access Control in GitLab | 2024-08-26T08:32:29.904Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3115 | Exposure of Sensitive Information to an Unauthorized Actor in GitLab | 2024-06-28T07:22:56.381Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3114 | Uncontrolled Resource Consumption in GitLab | 2024-08-10T07:27:12.594Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3092 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-04-16T07:18:36.205Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-3035 | Authorization Bypass Through User-Controlled Key in GitLab | 2024-08-10T07:27:41.389Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2880 | Improper Access Control in GitLab | 2024-07-13T07:23:46.684Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2878 | Allocation of Resources Without Limits or Throttling in GitLab | 2025-02-07T07:22:41.794Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2024-2874 | Allocation of Resources Without Limits or Throttling in GitLab | 2024-05-29T07:22:20.064Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202301-0629 | A vulnerability has been identified in Automation License Manager V5 (All versions), Auto… | 2024-04-19T21:02:29.529000Z |
| var-201006-1189 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:55:46.393000Z |
| var-201006-1157 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:42:13.167000Z |
| var-202403-0635 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2)… | 2024-04-19T20:42:10.148000Z |
| var-201006-1247 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T20:40:43.955000Z |
| var-201507-0106 | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implemen… | 2024-04-19T20:31:50.284000Z |
| var-201404-0286 | ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to… | 2024-04-19T20:14:12.803000Z |
| var-201006-1181 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:57:19.002000Z |
| var-201512-0395 | Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Cl… | 2024-04-19T19:46:59.905000Z |
| var-201006-1129 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:40:16.790000Z |
| var-201006-1163 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:27:47.252000Z |
| var-201006-1200 | Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, … | 2024-04-19T19:23:56.455000Z |
| var-202012-1387 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal' V… | 2024-04-18T13:40:13.625000Z |
| var-202303-0725 | Memory corruption in WLAN due to use after free. APQ8064AU firmware, APQ8096AU firmware, … | 2024-04-18T13:40:09.597000Z |
| var-202302-0730 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or… | 2024-04-18T13:40:09.935000Z |
| var-202310-2659 | Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP… | 2024-04-18T13:40:08.434000Z |
| var-202302-0680 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a v… | 2024-04-18T13:37:18.689000Z |
| var-202307-0109 | Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage r… | 2024-04-18T13:37:17.755000Z |
| var-202309-1995 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. 9205… | 2024-04-18T13:36:21.114000Z |
| var-202310-2416 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during… | 2024-04-18T13:35:59.496000Z |
| var-201512-0029 | Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 … | 2024-04-18T13:35:20.563000Z |
| var-202302-0804 | Memory corruption due to configuration weakness in modem wile sending command to write pr… | 2024-04-18T13:35:07.880000Z |
| var-202101-1034 | A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex … | 2024-04-18T13:33:45.319000Z |
| var-202302-0870 | Memory corruption due to improper access control in Qualcomm IPC. plural Qualcomm There a… | 2024-04-18T13:30:08.872000Z |
| var-202302-0807 | Memory corruption due to use after free in trusted application environment. plural Qualco… | 2024-04-18T13:30:08.909000Z |
| var-202101-1033 | A vulnerability in the web-based management interface of Cisco Webex Meetings could allow… | 2024-04-18T13:29:48.528000Z |
| var-202305-0093 | Memory corruption in Graphics while importing a file. 315 5g iot modem firmware, 9206 lte… | 2024-04-18T13:29:46.267000Z |
| var-202311-1527 | Memory Corruption in Multi-mode Call Processor while processing bit mask API. 315 5g iot … | 2024-04-18T13:29:43.081000Z |
| var-202310-2020 | Memory Corruption in Data Modem while making a MO call or MT VOLTE call. 315 5g iot modem… | 2024-04-18T13:29:43.570000Z |
| var-202309-1991 | Transient DOS in WLAN Host when an invalid channel (like channel out of range) is receive… | 2024-04-18T13:29:43.760000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2011-000110 | WordPress Japanese vulnerable to cross-site scripting | 2011-12-26T14:26+09:00 | 2011-12-26T14:26+09:00 |
| jvndb-2011-000107 | PukiWiki Plus! vulnerable to cross-site scripting | 2011-12-22T18:16+09:00 | 2011-12-22T18:16+09:00 |
| jvndb-2011-000106 | Apache Struts vulnerable to cross-site scripting | 2011-12-22T18:08+09:00 | 2011-12-22T18:08+09:00 |
| jvndb-2011-000102 | Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK | 2011-12-15T16:26+09:00 | 2011-12-20T18:14+09:00 |
| jvndb-2011-000099 | ChaSen vulnerable to buffer overflow | 2011-11-08T18:31+09:00 | 2011-12-20T18:13+09:00 |
| jvndb-2011-000105 | Safari for iOS vulnerable to denial-of-service | 2011-12-15T16:30+09:00 | 2011-12-15T16:30+09:00 |
| jvndb-2011-000104 | FFFTP may insecurely load executable files | 2011-12-09T17:08+09:00 | 2011-12-09T17:08+09:00 |
| jvndb-2011-000103 | phpWebSite vulnerable to cross-site scripting | 2011-12-08T17:15+09:00 | 2011-12-08T17:15+09:00 |
| jvndb-2011-000101 | Etomite vulnerable to cross-site scripting | 2011-12-06T17:45+09:00 | 2011-12-06T17:45+09:00 |
| jvndb-2011-000100 | PowerChute Business Edition vulnerable to cross-site scripting | 2011-12-06T16:49+09:00 | 2011-12-06T16:49+09:00 |
| jvndb-2011-000079 | Cybozu Office vulnerable in restricting access | 2011-10-11T09:11+09:00 | 2011-11-28T16:48+09:00 |
| jvndb-2011-000076 | Nikki vulnerable to OS command injection | 2011-11-21T18:23+09:00 | 2011-11-21T18:23+09:00 |
| jvndb-2011-000075 | Nikki vulnerable to directory traversal | 2011-11-21T18:22+09:00 | 2011-11-21T18:22+09:00 |
| jvndb-2011-000098 | Iwate Portal Bar vulnerable to arbitrary script execution | 2011-11-08T18:25+09:00 | 2011-11-08T18:25+09:00 |
| jvndb-2011-000094 | Multiple SKYARC System Co., Ltd. products vulnerable to cross-site request forgery | 2011-10-31T18:03+09:00 | 2011-11-08T17:38+09:00 |
| jvndb-2011-000093 | Multiple SKYARC System Co., Ltd. products fail to restrict access permissions | 2011-10-31T17:54+09:00 | 2011-11-08T17:38+09:00 |
| jvndb-2011-000097 | WebObjects vulnerable to cross-site scripting | 2011-11-04T17:36+09:00 | 2011-11-04T17:36+09:00 |
| jvndb-2011-000096 | Opengear console servers vulnerable to authentication bypass | 2011-11-04T17:34+09:00 | 2011-11-04T17:34+09:00 |
| jvndb-2011-000095 | CSWorks LiveData Service vulnerable to denial-of-service (DoS) | 2011-11-01T16:05+09:00 | 2011-11-02T14:42+09:00 |
| jvndb-2011-000089 | Touhou Hisouten vulnerable to denial-of-service | 2011-10-28T17:49+09:00 | 2011-10-28T17:49+09:00 |
| jvndb-2011-000092 | Multiple D-Link products vulnerable to buffer overflow | 2011-10-28T17:42+09:00 | 2011-10-28T17:42+09:00 |
| jvndb-2011-000091 | FFFTP may insecurely load executable files | 2011-10-28T17:39+09:00 | 2011-10-28T17:39+09:00 |
| jvndb-2011-000082 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:28+09:00 | 2011-10-25T13:46+09:00 |
| jvndb-2011-000081 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:27+09:00 | 2011-10-25T13:45+09:00 |
| jvndb-2011-000080 | WEB FORUM vulnerable to cross-site scripting | 2011-10-11T19:24+09:00 | 2011-10-25T13:44+09:00 |
| jvndb-2011-000087 | EC-CUBE vulnerable to SQL injection | 2011-10-14T17:53+09:00 | 2011-10-14T17:53+09:00 |
| jvndb-2011-000086 | DBD::mysqlPP vulnerable to SQL injection | 2011-10-14T17:50+09:00 | 2011-10-14T17:50+09:00 |
| jvndb-2011-000085 | DAEMON Tools vulnerable to denial-of-service | 2011-10-13T18:58+09:00 | 2011-10-13T18:58+09:00 |
| jvndb-2011-000084 | Pligg vulnerable to cross-site scripting | 2011-10-13T18:56+09:00 | 2011-10-13T18:56+09:00 |
| jvndb-2011-000083 | Plume vulnerable to cross-site scripting | 2011-10-13T18:38+09:00 | 2011-10-13T18:38+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01927-1 | Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4) | 2025-06-12T15:33:34Z | 2025-06-12T15:33:34Z |
| suse-su-2025:01596-2 | Security update for helm | 2025-06-12T14:50:35Z | 2025-06-12T14:50:35Z |
| suse-su-2025:01559-1 | Security update for audiofile | 2025-06-12T14:50:15Z | 2025-06-12T14:50:15Z |
| suse-su-2025:01748-2 | Security update for postgresql15 | 2025-06-12T14:50:08Z | 2025-06-12T14:50:08Z |
| suse-su-2025:01922-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-06-12T09:04:16Z | 2025-06-12T09:04:16Z |
| suse-su-2025:20416-1 | Security update for systemd | 2025-06-12T07:31:28Z | 2025-06-12T07:31:28Z |
| suse-su-2025:20405-1 | Security update for systemd | 2025-06-12T07:16:56Z | 2025-06-12T07:16:56Z |
| suse-su-2025:01921-1 | Security update for wget | 2025-06-12T06:29:35Z | 2025-06-12T06:29:35Z |
| suse-su-2025:01919-1 | Security update for the Linux Kernel | 2025-06-12T06:29:09Z | 2025-06-12T06:29:09Z |
| suse-su-2025:01918-1 | Security update for the Linux Kernel | 2025-06-12T06:29:00Z | 2025-06-12T06:29:00Z |
| suse-su-2025:01906-1 | Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4) | 2025-06-12T05:33:38Z | 2025-06-12T05:33:38Z |
| suse-su-2025:01908-1 | Security update for the Linux Kernel (Live Patch 66 for SLE 12 SP5) | 2025-06-11T23:21:24Z | 2025-06-11T23:21:24Z |
| suse-su-2025:01907-1 | Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5) | 2025-06-11T21:47:42Z | 2025-06-11T21:47:42Z |
| suse-su-2025:01901-1 | Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3) | 2025-06-11T17:33:37Z | 2025-06-11T17:33:37Z |
| suse-su-2025:01899-1 | Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5) | 2025-06-11T14:34:04Z | 2025-06-11T14:34:04Z |
| suse-su-2025:01466-1 | Security update for rabbitmq-server | 2025-06-11T12:47:33Z | 2025-06-11T12:47:33Z |
| suse-su-2025:01548-1 | Security update for rabbitmq-server313 | 2025-06-11T12:47:27Z | 2025-06-11T12:47:27Z |
| suse-su-2025:01894-1 | Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5) | 2025-06-11T12:04:29Z | 2025-06-11T12:04:29Z |
| suse-su-2025:01893-1 | Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5) | 2025-06-11T12:04:16Z | 2025-06-11T12:04:16Z |
| suse-su-2025:01892-1 | Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3) | 2025-06-11T11:33:35Z | 2025-06-11T11:33:35Z |
| suse-su-2025:20415-1 | Security update for augeas | 2025-06-11T09:59:42Z | 2025-06-11T09:59:42Z |
| suse-su-2025:01890-1 | Security update for transfig | 2025-06-11T05:43:46Z | 2025-06-11T05:43:46Z |
| suse-su-2025:01889-1 | Security update for nbdkit | 2025-06-11T05:43:35Z | 2025-06-11T05:43:35Z |
| suse-su-2025:01888-1 | Security update for nbdkit | 2025-06-11T05:43:28Z | 2025-06-11T05:43:28Z |
| suse-su-2025:01887-1 | Security update for perl-Crypt-OpenSSL-RSA | 2025-06-11T05:43:12Z | 2025-06-11T05:43:12Z |
| suse-su-2025:01886-1 | Security update for perl-YAML-LibYAML | 2025-06-11T05:42:58Z | 2025-06-11T05:42:58Z |
| suse-su-2025:01885-1 | Security update for perl-YAML-LibYAML | 2025-06-11T05:42:49Z | 2025-06-11T05:42:49Z |
| suse-su-2025:01884-1 | Security update for perl-Crypt-OpenSSL-RSA | 2025-06-11T05:42:36Z | 2025-06-11T05:42:36Z |
| suse-su-2025:01883-1 | Security update for libjxl | 2025-06-11T05:42:29Z | 2025-06-11T05:42:29Z |
| suse-su-2025:01882-1 | Security update for tomcat | 2025-06-11T05:42:17Z | 2025-06-11T05:42:17Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-27037 | Chat System update_user.php文件跨站脚本漏洞 | 2024-12-30 | 2025-11-05 |
| cnvd-2025-27036 | Chat System update_user.php文件SQL注入漏洞 | 2024-12-30 | 2025-11-05 |
| cnvd-2025-27035 | Chat System chatroom.php文件跨站脚本漏洞 | 2024-12-30 | 2025-11-05 |
| cnvd-2025-27034 | Chat System chatroom.php文件SQL注入漏洞 | 2024-12-30 | 2025-11-05 |
| cnvd-2025-27033 | Chat System update_room.php文件跨站脚本漏洞 | 2024-12-30 | 2025-11-05 |
| cnvd-2025-27032 | Chat System deleteuser.php文件SQL注入漏洞 | 2025-01-07 | 2025-11-05 |
| cnvd-2025-27031 | Chat System deleteroom.php文件SQL注入漏洞 | 2025-01-16 | 2025-11-05 |
| cnvd-2025-27030 | Chat System leaveroom.php文件SQL注入漏洞 | 2025-01-23 | 2025-11-05 |
| cnvd-2025-27029 | Chat System addnewmember.php文件SQL注入漏洞 | 2025-02-13 | 2025-11-05 |
| cnvd-2025-27028 | Chat System add_chatroom.php文件SQL注入漏洞 | 2025-02-17 | 2025-11-05 |
| cnvd-2025-27027 | Chat System confirm_password.php文件SQL注入漏洞 | 2025-06-23 | 2025-11-05 |
| cnvd-2025-27026 | Chat System update_account.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-05 |
| cnvd-2025-27025 | Chat System send_message.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27024 | Chat System fetch_member.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27023 | Chat System fetch_chat.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27022 | Chat System addmember.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27021 | Online Appointment Booking System ulocateus.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-05 |
| cnvd-2025-27020 | Online Appointment Booking System getDay.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-05 |
| cnvd-2025-27019 | Online Appointment Booking System getclinic.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-05 |
| cnvd-2025-27018 | Online Appointment Booking System get_town.php文件SQL注入漏洞 | 2025-07-18 | 2025-11-05 |
| cnvd-2025-27017 | Online Appointment Booking System cover.php文件SQL注入漏洞 | 2025-07-21 | 2025-11-05 |
| cnvd-2025-27016 | Online Appointment Booking System adddoctorclinic.php文件SQL注入漏洞 | 2025-07-23 | 2025-11-05 |
| cnvd-2025-27015 | Online Appointment Booking System deletedoctor.php文件SQL注入漏洞 | 2025-07-23 | 2025-11-05 |
| cnvd-2025-27014 | Online Appointment Booking System getmanagerregion.php文件SQL注入漏洞 | 2025-07-23 | 2025-11-05 |
| cnvd-2025-26963 | Tenda AC6 openSchedWifi函数缓冲区溢出漏洞 | 2025-10-24 | 2025-11-05 |
| cnvd-2025-26962 | Tenda AC6 SetClientState函数缓冲区溢出漏洞 | 2025-10-24 | 2025-11-05 |
| cnvd-2025-26961 | Tenda AC6 AdvSetMacMtuWan函数缓冲区溢出漏洞 | 2025-10-24 | 2025-11-05 |
| cnvd-2025-26960 | Tenda AC6 SetSpeedWan函数缓冲区溢出漏洞 | 2025-10-24 | 2025-11-05 |
| cnvd-2025-26959 | Tenda AC6 DhcpListClient函数缓冲区溢出漏洞 | 2025-10-24 | 2025-11-05 |
| cnvd-2025-26958 | Tenda O3 formsetNetworkService函数缓冲区溢出漏洞 | 2025-10-31 | 2025-11-05 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-1104 | Vulnérabilité dans les produits NetApp | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| CERTFR-2024-AVI-1105 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| CERTFR-2024-AVI-1104 | Vulnérabilité dans les produits NetApp | 2024-12-23T00:00:00.000000 | 2024-12-23T00:00:00.000000 |
| certfr-2024-avi-1103 | Multiples vulnérabilités dans les produits IBM | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1102 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1101 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1100 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1099 | Multiples vulnérabilités dans Sophos Firewall | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1098 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1103 | Multiples vulnérabilités dans les produits IBM | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1102 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1101 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1100 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1099 | Multiples vulnérabilités dans Sophos Firewall | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| CERTFR-2024-AVI-1098 | Multiples vulnérabilités dans Microsoft Edge | 2024-12-20T00:00:00.000000 | 2024-12-20T00:00:00.000000 |
| certfr-2024-avi-1097 | Vulnérabilité dans Trend Micro Deep Security Agent | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1096 | Multiples vulnérabilités dans les produits Fortinet | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1095 | Multiples vulnérabilités dans Google Chrome | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| CERTFR-2024-AVI-1097 | Vulnérabilité dans Trend Micro Deep Security Agent | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| CERTFR-2024-AVI-1096 | Multiples vulnérabilités dans les produits Fortinet | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| CERTFR-2024-AVI-1095 | Multiples vulnérabilités dans Google Chrome | 2024-12-19T00:00:00.000000 | 2024-12-19T00:00:00.000000 |
| certfr-2024-avi-1094 | Vulnérabilité dans les produits Elastic | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1093 | Multiples vulnérabilités dans Xen | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1092 | Vulnérabilité dans Traefik | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| CERTFR-2024-AVI-1094 | Vulnérabilité dans les produits Elastic | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| CERTFR-2024-AVI-1093 | Multiples vulnérabilités dans Xen | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| CERTFR-2024-AVI-1092 | Vulnérabilité dans Traefik | 2024-12-18T00:00:00.000000 | 2024-12-18T00:00:00.000000 |
| certfr-2024-avi-1089 | Vulnérabilité dans les produits StormShield Management Center | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1088 | Multiples vulnérabilités dans les produits Foxit | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |
| certfr-2024-avi-1087 | Vulnérabilité dans les produits Siemens | 2024-12-17T00:00:00.000000 | 2024-12-17T00:00:00.000000 |