Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1588 |
5.1 (4.0)
2.7 (3.1)
2.7 (3.0)
|
jishenghua jshERP installByPath install path traversal |
jishenghua |
jshERP |
2026-01-29T13:32:06.240Z | 2026-01-29T14:29:46.680Z |
| CVE-2026-24769 |
8.5 (4.0)
|
NocoDB Vulnerable to Stored Cross-Site Scripting via S… |
nocodb |
nocodb |
2026-01-28T20:36:23.859Z | 2026-01-29T14:02:12.813Z |
| CVE-2022-50898 |
8.6 (4.0)
8.8 (3.1)
|
NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated) |
kalyan02 |
NanoCMS |
2026-01-13T22:51:44.934Z | 2026-01-29T13:43:59.758Z |
| CVE-2025-41084 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in Sesame web application |
SESAME LABS S.L |
Sesame |
2026-01-20T09:14:40.629Z | 2026-01-29T11:33:18.995Z |
| CVE-2024-4447 |
9.9 (3.1)
|
In the System → Maintenance tool, the Logged User… |
dotCMS |
dotCMS core |
2024-07-26T02:02:32.506Z | 2026-01-29T10:25:19.929Z |
| CVE-2026-24858 |
9.4 (3.1)
|
An Authentication Bypass Using an Alternate Path … |
Fortinet |
FortiProxy |
2026-01-27T19:18:23.591Z | 2026-01-29T09:36:15.433Z |
| CVE-2025-33220 |
7.8 (3.1)
|
NVIDIA vGPU software contains a vulnerability in … |
NVIDIA |
GeForce |
2026-01-28T17:48:40.752Z | 2026-01-29T04:55:53.558Z |
| CVE-2025-33219 |
7.8 (3.1)
|
NVIDIA Display Driver for Linux contains a vulner… |
NVIDIA |
GeForce |
2026-01-28T17:48:07.106Z | 2026-01-29T04:55:52.440Z |
| CVE-2025-33218 |
7.8 (3.1)
|
NVIDIA GPU Display Driver for Windows contains a … |
NVIDIA |
GeForce |
2026-01-28T17:47:25.322Z | 2026-01-29T04:55:51.373Z |
| CVE-2025-33217 |
7.8 (3.1)
|
NVIDIA Display Driver for Windows contains a vuln… |
NVIDIA |
GeForce |
2026-01-28T17:46:41.741Z | 2026-01-29T04:55:50.215Z |
| CVE-2025-13918 |
6.7 (3.1)
|
Elevation of Privileges in Symantec Endpoint Protectio… |
Broadcom |
Symantec Endpoint Protection Windows Client |
2026-01-28T16:35:43.684Z | 2026-01-29T04:55:49.047Z |
| CVE-2025-40553 |
9.8 (3.1)
|
SolarWinds Web Help Desk Deserialization of Untrusted … |
SolarWinds |
Web Help Desk |
2026-01-28T07:35:41.825Z | 2026-01-29T04:55:44.341Z |
| CVE-2025-40554 |
9.8 (3.1)
|
SolarWinds Web Help Desk Authentication Bypass Vulnerability |
SolarWinds |
Web Help Desk |
2026-01-28T07:36:50.177Z | 2026-01-29T04:55:43.242Z |
| CVE-2025-67616 |
8.1 (3.1)
|
WordPress Mella theme <= 1.2.29 - Local File Inclusion… |
BZOTheme |
Mella |
2026-01-22T16:51:51.660Z | 2026-01-29T01:15:42.088Z |
| CVE-2025-67617 |
9.8 (3.1)
|
WordPress Consult Aid theme <= 1.4.3 - PHP Object Inje… |
themeton |
Consult Aid |
2026-01-22T16:51:51.873Z | 2026-01-29T01:14:09.745Z |
| CVE-2025-67615 |
8.1 (3.1)
|
WordPress Myour theme <= 1.5.1 - Local File Inclusion … |
bslthemes |
Myour |
2026-01-22T16:51:51.412Z | 2026-01-29T01:13:15.045Z |
| CVE-2025-66143 |
5.4 (3.1)
|
WordPress Crumber plugin <= 1.0.10 - Broken Access Con… |
merkulove |
Crumber |
2026-01-22T16:51:50.950Z | 2026-01-29T01:12:19.617Z |
| CVE-2025-66142 |
5.4 (3.1)
|
WordPress Comparimager for Elementor plugin <= 1.0.1 -… |
merkulove |
Comparimager for Elementor |
2026-01-22T16:51:50.767Z | 2026-01-29T01:11:33.821Z |
| CVE-2025-66141 |
5.4 (3.1)
|
WordPress Scroller plugin <= 2.0.2 - Broken Access Con… |
merkulove |
Scroller |
2026-01-22T16:51:50.559Z | 2026-01-29T01:10:46.778Z |
| CVE-2025-67619 |
8.8 (3.1)
|
WordPress Kids Heaven theme <= 3.2 - PHP Object Inject… |
designthemes |
Kids Heaven |
2026-01-22T16:51:52.055Z | 2026-01-29T01:09:45.164Z |
| CVE-2025-66139 |
5.4 (3.1)
|
WordPress Audier For Elementor plugin <= 1.0.9 - Broke… |
merkulove |
Audier For Elementor |
2026-01-22T16:51:50.099Z | 2026-01-29T01:08:51.396Z |
| CVE-2025-67614 |
7.1 (3.1)
|
WordPress TheNa theme <= 1.5.5 - Reflected Cross Site … |
foreverpinetree |
TheNa |
2026-01-22T16:51:51.190Z | 2026-01-29T01:08:08.706Z |
| CVE-2025-67626 |
4.3 (3.1)
|
WordPress WP SEO Search plugin <= 1.1 - Cross Site Req… |
Angel Costa |
WP SEO Search |
2026-01-22T16:51:52.454Z | 2026-01-29T01:06:54.487Z |
| CVE-2025-67620 |
7.1 (3.1)
|
WordPress Anon theme <= 2.2.10 - Reflected Cross Site … |
CleverSoft |
Anon |
2026-01-22T16:51:52.273Z | 2026-01-29T01:05:11.215Z |
| CVE-2025-67947 |
7.1 (3.1)
|
WordPress AdForest Elementor plugin <= 3.0.11 - Cross … |
scriptsbundle |
AdForest Elementor |
2026-01-22T16:51:54.712Z | 2026-01-29T01:04:29.713Z |
| CVE-2025-67949 |
7.1 (3.1)
|
WordPress Hostiko theme < 94.3.6 - Cross Site Scriptin… |
designingmedia |
Hostiko |
2026-01-22T16:51:54.975Z | 2026-01-29T01:03:13.132Z |
| CVE-2025-67952 |
7.1 (3.1)
|
WordPress Grand Tour theme < 5.6.2 - Cross Site Script… |
ThemeGoods |
Grand Tour |
2026-01-22T16:51:55.230Z | 2026-01-29T01:02:24.298Z |
| CVE-2025-67958 |
6.5 (3.1)
|
WordPress TaxCloud for WooCommerce plugin <= 8.3.8 - B… |
Taxcloud |
TaxCloud for WooCommerce |
2026-01-22T16:51:56.847Z | 2026-01-29T01:01:52.379Z |
| CVE-2025-67959 |
7.1 (3.1)
|
WordPress WorkScout theme <= 4.1.07 - Cross Site Scrip… |
purethemes |
WorkScout |
2026-01-22T16:51:57.097Z | 2026-01-29T00:59:41.995Z |
| CVE-2025-67960 |
7.1 (3.1)
|
WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site… |
purethemes |
WorkScout-Core |
2026-01-22T16:51:57.383Z | 2026-01-29T00:58:49.876Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-42130 |
N/A
|
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | N/A | N/A | 2024-07-30T07:46:26.153Z | 2026-01-31T11:58:31.317Z |
| CVE-2025-15545 |
7.3 (4.0)
|
Insufficient Backup File Upload Input Validation on TP… |
TP-Link Systems Inc. |
Archer RE605X |
2026-01-29T17:31:10.117Z | 2026-01-30T23:15:46.194Z |
| CVE-2026-24770 |
9.8 (3.1)
|
RAGFlow Affected by Zip Slip Remote Code Execution (RC… |
infiniflow |
ragflow |
2026-01-27T21:51:44.874Z | 2026-01-28T21:11:58.921Z |
| CVE-2026-24747 |
8.8 (3.1)
|
PyTorch Vulnerable to Remote Code Execution via Untrus… |
pytorch |
pytorch |
2026-01-27T21:13:46.878Z | 2026-01-30T04:55:40.231Z |
| CVE-2026-1505 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
D-Link DIR-615 URL Filter set_temp_nodes.php os comman… |
D-Link |
DIR-615 |
2026-01-28T01:32:08.889Z | 2026-01-28T14:45:20.266Z |
| CVE-2026-1506 |
8.6 (4.0)
7.2 (3.1)
7.2 (3.0)
|
D-Link DIR-615 MAC Filter Configuration adv_mac_filter… |
D-Link |
DIR-615 |
2026-01-28T02:32:09.027Z | 2026-01-28T14:43:26.080Z |
| CVE-2025-41375 |
9.3 (4.0)
|
SQL Injection in Limesurvey |
LimeSurvey |
LimeSurvey |
2025-08-01T12:29:48.916Z | 2025-09-11T08:51:03.073Z |
| CVE-2025-41376 |
5.1 (4.0)
|
CRLF Injection in Limesurvey |
LimeSurvey |
LimeSurvey |
2025-08-01T12:29:59.023Z | 2025-09-11T08:56:57.154Z |
| CVE-2024-6933 |
5.3 (4.0)
6.3 (3.1)
6.3 (3.0)
|
LimeSurvey Survey General Settings updatesurveylocales… |
n/a |
LimeSurvey |
2024-07-21T00:31:04.336Z | 2025-12-09T14:52:38.866Z |
| CVE-2026-23755 |
8.4 (4.0)
|
D-Link D-View 8 Installer DLL Preloading via Uncontrol… |
D-Link |
D-View 8 |
2026-01-21T18:02:30.160Z | 2026-01-26T17:37:29.534Z |
| CVE-2026-23754 |
8.7 (4.0)
|
D-Link D-View 8 IDOR Allows Credential Disclosure and … |
D-Link |
D-View 8 |
2026-01-21T18:02:45.878Z | 2026-01-26T17:36:57.115Z |
| CVE-2024-55930 |
6.7 (3.1)
|
Weak default folder permissions |
Xerox |
Xerox Workplace Suite |
2025-01-23T17:36:01.763Z | 2025-02-24T17:18:39.252Z |
| CVE-2024-55931 |
6.5 (3.1)
|
Token stored in session storage |
Xerox |
Xerox Workplace Suite |
2025-01-27T11:28:45.510Z | 2025-02-24T17:20:04.431Z |
| CVE-2024-55929 |
5.3 (3.1)
|
Mail spoofing |
Xerox |
Xerox Workplace Suite |
2025-01-23T17:30:34.224Z | 2025-02-24T17:17:09.394Z |
| CVE-2025-70985 |
9.1 (3.1)
|
Incorrect access control in the update function o… |
n/a |
n/a |
2026-01-23T00:00:00.000Z | 2026-01-23T19:39:50.348Z |
| CVE-2025-70986 |
7.5 (3.1)
|
Incorrect access control in the selectDept functi… |
n/a |
n/a |
2026-01-23T00:00:00.000Z | 2026-01-23T19:30:44.227Z |
| CVE-2024-7517 |
8.5 (4.0)
|
Privileged escalation via crafted use of portcfg command |
Brocade |
Fabric OS |
2024-11-21T05:53:34.442Z | 2025-09-09T19:02:20.886Z |
| CVE-2025-48753 |
2.9 (3.1)
|
In the anode crate 0.1.0 for Rust, data races can… |
obsidiandynamics |
anode |
2025-05-24T00:00:00.000Z | 2025-05-24T10:19:20.813Z |
| CVE-2025-48752 |
2.9 (3.1)
|
In the process-sync crate 0.2.2 for Rust, the dro… |
Forestryks |
process-sync-rs |
2025-05-24T00:00:00.000Z | 2025-05-24T10:19:47.303Z |
| CVE-2025-48751 |
2.9 (3.1)
|
The process_lock crate 0.1.0 for Rust allows data… |
tickbh |
ProcessLock |
2025-05-24T00:00:00.000Z | 2025-05-24T10:21:12.718Z |
| CVE-2025-20966 |
4.6 (3.1)
|
Improper access control in Samsung Gallery prior … |
Samsung Mobile |
Samsung Gallery |
2025-05-07T08:24:20.945Z | 2025-05-07T16:16:19.184Z |
| CVE-2025-20967 |
5.1 (3.1)
|
Improper access control in Samsung Gallery prior … |
Samsung Mobile |
Samsung Gallery |
2025-05-07T08:24:22.166Z | 2025-05-07T16:13:00.363Z |
| CVE-2025-20968 |
7.2 (3.1)
|
Improper access control in Samsung Gallery prior … |
Samsung Mobile |
Samsung Gallery |
2025-05-07T08:24:23.488Z | 2025-05-07T16:12:06.660Z |
| CVE-2025-20969 |
5.5 (3.1)
|
Improper input validation in Samsung Gallery prio… |
Samsung Mobile |
Samsung Gallery |
2025-05-07T08:24:24.722Z | 2025-05-07T15:51:19.190Z |
| CVE-2025-47737 |
2.9 (3.1)
|
lib.rs in the trailer crate through 0.1.2 for Rus… |
Geal |
trailer |
2025-05-09T00:00:00.000Z | 2025-05-09T15:54:31.213Z |
| CVE-2025-47735 |
2.9 (3.1)
|
inner::drop in inner.rs in the wgp crate through … |
Nugine |
wgp |
2025-05-09T00:00:00.000Z | 2025-05-09T15:45:02.125Z |
| CVE-2026-22461 |
5.3 (3.1)
|
WordPress CTX Feed plugin <= 6.6.18 - Broken Access Co… |
WebAppick |
CTX Feed |
2026-01-22T16:52:39.747Z | 2026-01-30T20:24:17.214Z |
| CVE-2025-59946 |
7.5 (3.1)
|
NanoMQ has a Use After Free vulnerability via sub info list |
nanomq |
nanomq |
2025-12-27T00:40:51.122Z | 2025-12-29T15:54:27.851Z |
| CVE-2025-59947 |
8.5 (4.0)
|
NanoMQ has Buffer Overflow |
nanomq |
nanomq |
2025-12-15T20:19:17.212Z | 2025-12-15T20:58:37.814Z |
| CVE-2024-3387 |
5.3 (3.1)
|
PAN-OS: Weak Certificate Strength in Panorama Software… |
Palo Alto Networks |
PAN-OS |
2024-04-10T17:06:36.676Z | 2024-08-01T20:12:06.646Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2024-42130 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2024-07-30T08:15:05.053 | 2026-01-31T12:15:49.570 |
| fkie_cve-2025-15545 | The backup restore function does not properly validate unexpected or unrecognized tags within the b… | 2026-01-29T18:16:07.533 | 2026-01-31T00:15:51.647 |
| fkie_cve-2026-24770 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possib… | 2026-01-27T22:15:56.947 | 2026-01-30T21:53:46.573 |
| fkie_cve-2026-24747 | PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerabil… | 2026-01-27T22:15:56.470 | 2026-01-30T21:51:55.367 |
| fkie_cve-2026-1505 | A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the… | 2026-01-28T02:16:00.083 | 2026-01-30T21:47:30.330 |
| fkie_cve-2026-1506 | A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file … | 2026-01-28T03:15:50.367 | 2026-01-30T21:46:35.937 |
| fkie_cve-2025-41375 | SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to … | 2025-08-01T13:15:27.257 | 2026-01-30T21:45:13.263 |
| fkie_cve-2025-41376 | CRLF Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability could allow a remote… | 2025-08-01T13:15:27.450 | 2026-01-30T21:44:53.750 |
| fkie_cve-2024-6933 | A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpd… | 2024-07-21T01:15:10.040 | 2026-01-30T21:41:54.680 |
| fkie_cve-2026-23755 | D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in t… | 2026-01-21T18:16:26.117 | 2026-01-30T21:33:18.047 |
| fkie_cve-2026-23754 | D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in ba… | 2026-01-21T18:16:25.370 | 2026-01-30T21:30:51.903 |
| fkie_cve-2024-55930 | Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, … | 2025-01-23T18:15:32.450 | 2026-01-30T21:30:28.317 |
| fkie_cve-2024-55931 | Xerox Workplace Suite stores tokens in session storage, which may expose them to potential access i… | 2025-01-27T12:15:27.407 | 2026-01-30T21:30:11.770 |
| fkie_cve-2024-55929 | A mail spoofing vulnerability in Xerox Workplace Suite allows attackers to forge email headers, mak… | 2025-01-23T18:15:32.277 | 2026-01-30T21:29:46.733 |
| fkie_cve-2025-70985 | Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to ar… | 2026-01-23T19:15:53.907 | 2026-01-30T21:27:40.100 |
| fkie_cve-2025-70986 | Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers t… | 2026-01-23T19:15:54.017 | 2026-01-30T21:26:10.400 |
| fkie_cve-2024-7517 | A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on I… | 2024-11-21T11:15:35.990 | 2026-01-30T21:24:46.627 |
| fkie_cve-2025-48753 | In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock. | 2025-05-24T03:15:23.863 | 2026-01-30T21:23:32.170 |
| fkie_cve-2025-48752 | In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_m… | 2025-05-24T03:15:23.700 | 2026-01-30T21:22:39.770 |
| fkie_cve-2025-48751 | The process_lock crate 0.1.0 for Rust allows data races in unlock. | 2025-05-24T03:15:23.533 | 2026-01-30T21:21:47.597 |
| fkie_cve-2025-20966 | Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09… | 2025-05-07T09:15:16.890 | 2026-01-30T21:18:51.750 |
| fkie_cve-2025-20967 | Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09… | 2025-05-07T09:15:17.027 | 2026-01-30T21:18:34.967 |
| fkie_cve-2025-20968 | Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09… | 2025-05-07T09:15:17.153 | 2026-01-30T21:17:56.700 |
| fkie_cve-2025-20969 | Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.… | 2025-05-07T09:15:17.280 | 2026-01-30T21:17:31.707 |
| fkie_cve-2025-47737 | lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero. | 2025-05-09T05:15:51.877 | 2026-01-30T21:17:11.327 |
| fkie_cve-2025-47735 | inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization. | 2025-05-09T05:15:51.420 | 2026-01-30T21:16:07.283 |
| fkie_cve-2026-22461 | Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce al… | 2026-01-22T17:16:34.910 | 2026-01-30T21:15:58.023 |
| fkie_cve-2025-59946 | NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to version 0.24.2, there is a clas… | 2025-12-27T01:15:41.880 | 2026-01-30T21:14:23.593 |
| fkie_cve-2025-59947 | NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflo… | 2025-12-15T21:15:59.157 | 2026-01-30T21:14:03.200 |
| fkie_cve-2024-3387 | A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an att… | 2024-04-10T17:15:57.787 | 2026-01-30T21:13:20.710 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-vf62-mr8q-5x6j |
5.4 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Electrician - Electrical Service … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-r27c-7g4j-xm44 |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterina… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-q32f-r8pm-4x22 |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Ex… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-phpf-j5wm-v54r |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:41Z | 2026-01-27T21:31:43Z |
| ghsa-mv6g-87f6-hxrp |
7.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-jm69-rg69-2cwx |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:43Z |
| ghsa-jfcc-c4r2-57h6 |
7.1 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in gregmolnar Simple XML Sitemap simple-xml-sitemap… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-grxh-vmwr-556w |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino all… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-gm44-v6r8-p25m |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in AA-Team SearchAzon searchazon allows Cross Site … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-f25r-2j92-5mqm |
5.4 (3.1)
|
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-9fcm-hxf8-v4x6 |
5.9 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-79q7-wj69-pjqg |
5.4 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in winkm89 teachPress teachpress allows Cross Site … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-74q9-gx85-44m3 |
4.3 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in richardevcom Add Polylang support for Customizer… | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-6x26-wr3f-8332 |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-6p2m-8xf7-qgpf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:40Z | 2026-01-27T21:31:43Z |
| ghsa-5v37-qm3f-mh2p |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:43Z |
| ghsa-wxqh-5r9q-5hhf |
6.5 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-ww54-q5mm-h44g |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-wgrv-6j54-h2xj |
6.5 (3.1)
|
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appoin… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-vhqg-6cjf-4jw7 |
9.1 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-el… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-v79x-27fq-r59f |
8.1 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-rjv5-9xjq-63w7 |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogzee blogzee allows… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-qp54-rrr2-2cx5 |
7.6 (3.1)
|
Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting In… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-q9f5-85hh-g48c |
7.5 (3.1)
|
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aiv… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-jhxx-jxcx-hxjh |
6.5 (3.1)
|
Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configu… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-j4p5-pg39-488f |
9.8 (3.1)
|
Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogistic blogistic al… | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ghsa-gh9v-9mv6-p8g9 |
7.1 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-9wq4-qhqp-553r |
8.2 (3.1)
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusi… | 2026-01-22T18:30:37Z | 2026-01-27T21:31:42Z |
| ghsa-75wm-q5m3-c399 |
7.5 (3.1)
|
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Conf… | 2026-01-22T18:30:39Z | 2026-01-27T21:31:42Z |
| ghsa-75hf-52rg-6v76 |
7.3 (3.1)
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability … | 2026-01-22T18:30:36Z | 2026-01-27T21:31:42Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-52 |
|
traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow… | plone | 2014-03-11T19:37:00Z | 2021-07-25T23:34:45.751265Z |
| pysec-2014-38 |
|
kupu_spellcheck.py in Kupu in Plone before 4.0 allows remote attackers to cause a denial … | plone | 2014-09-30T14:55:00Z | 2021-07-25T23:34:44.340105Z |
| pysec-2014-28 |
|
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3… | plone | 2014-09-30T14:55:00Z | 2021-07-25T23:34:43.396566Z |
| pysec-2011-16 |
|
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the prop… | plone | 2011-06-06T19:55:00Z | 2021-07-25T23:34:43.220669Z |
| pysec-2011-15 |
|
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransf… | plone | 2011-06-06T19:55:00Z | 2021-07-25T23:34:43.166940Z |
| pysec-2011-14 |
|
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers… | plone | 2011-06-06T19:55:00Z | 2021-07-25T23:34:43.114497Z |
| pysec-2011-13 |
|
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly … | plone | 2011-02-03T17:00:00Z | 2021-07-25T23:34:43.059075Z |
| pysec-2013-23 |
|
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in … | moin | 2013-01-03T01:55:00Z | 2021-07-25T23:34:40.266603Z |
| pysec-2012-10 |
|
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names t… | moin | 2012-09-10T22:55:00Z | 2021-07-25T23:34:40.223243Z |
| pysec-2020-217 |
|
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x… | mercurial | 2020-02-12T02:15:00Z | 2021-07-25T23:34:39.934367Z |
| pysec-2016-20 |
|
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x be… | keystonemiddleware | 2016-02-03T18:59:00Z | 2021-07-25T23:34:39.104396Z |
| pysec-2015-30 |
|
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystonec… | keystonemiddleware | 2015-04-17T17:59:00Z | 2021-07-25T23:34:39.021539Z |
| pysec-2017-49 |
|
The checkPassword function in python-kerberos does not authenticate the KDC it attempts t… | kerberos | 2017-08-25T18:29:00Z | 2021-07-25T23:34:38.763837Z |
| pysec-2015-28 |
|
OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is… | ironic-inspector | 2015-11-25T20:59:00Z | 2021-07-25T23:34:38.274751Z |
| pysec-2014-26 |
|
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x b… | keystonemiddleware | 2014-10-02T14:55:00Z | 2021-07-25T23:34:38.976180Z |
| pysec-2014-25 |
|
The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly… | django-tastypie | 2014-10-27T01:55:00Z | 2021-07-25T23:34:28.733002Z |
| pysec-2014-24 |
|
emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly dese… | django-piston | 2014-10-27T01:55:00Z | 2021-07-25T23:34:28.692113Z |
| pysec-2020-216 |
|
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted … | beaker | 2020-06-26T20:15:00Z | 2021-07-25T23:34:27.636176Z |
| pysec-2018-58 |
|
An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0… | ansible | 2018-07-26T14:29:00Z | 2021-07-25T23:34:24.709864Z |
| pysec-2010-27 |
|
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allow… | zodb3 | 2010-10-19T20:00:00Z | 2021-07-16T01:31:36.925737Z |
| pysec-2009-9 |
|
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) data… | zodb3 | 2009-08-07T19:30:00Z | 2021-07-16T01:31:36.719288Z |
| pysec-2009-8 |
|
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope … | zodb3 | 2009-08-07T19:30:00Z | 2021-07-16T01:31:36.649414Z |
| pysec-2009-7 |
|
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack… | trac | 2009-12-23T21:30:00Z | 2021-07-16T01:31:34.738485Z |
| pysec-2008-7 |
|
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attac… | trac | 2008-12-17T18:30:00Z | 2021-07-16T01:31:34.677272Z |
| pysec-2008-6 |
|
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of ser… | trac | 2008-12-17T18:30:00Z | 2021-07-16T01:31:34.451441Z |
| pysec-2008-5 |
|
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows … | trac | 2008-07-27T22:41:00Z | 2021-07-16T01:31:34.385513Z |
| pysec-2008-4 |
|
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote atta… | trac | 2008-07-27T22:41:00Z | 2021-07-16T01:31:34.307332Z |
| pysec-2007-3 |
|
Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attach… | trac | 2007-03-10T22:19:00Z | 2021-07-16T01:31:34.212521Z |
| pysec-2007-2 |
|
Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in T… | trac | 2007-03-10T22:19:00Z | 2021-07-16T01:31:34.136788Z |
| pysec-2006-3 |
|
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows … | trac | 2006-11-14T19:07:00Z | 2021-07-16T01:31:34.062903Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3588 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.125613Z |
| gsd-2024-3587 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.315493Z |
| gsd-2024-3586 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.426280Z |
| gsd-2024-3585 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.321138Z |
| gsd-2024-3584 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.361507Z |
| gsd-2024-3583 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425833Z |
| gsd-2024-3582 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.159468Z |
| gsd-2024-3581 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.198006Z |
| gsd-2024-3580 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.114353Z |
| gsd-2024-3579 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.170753Z |
| gsd-2024-3578 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.361004Z |
| gsd-2024-3577 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.258329Z |
| gsd-2024-3576 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.342675Z |
| gsd-2024-3575 | Cross-site Scripting (XSS) - Stored in mindsdb/mindsdb | 2024-04-11T05:03:27.241722Z |
| gsd-2024-3574 | In scrapy version 2.10.1, an issue was identified where the Authorization header, contain… | 2024-04-11T05:03:27.341458Z |
| gsd-2024-3573 | mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs… | 2024-04-11T05:03:27.266130Z |
| gsd-2024-3572 | The scrapy/scrapy project is vulnerable to XML External Entity (XXE) attacks due to the u… | 2024-04-11T05:03:27.353099Z |
| gsd-2024-3571 | langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pa… | 2024-04-11T05:03:27.110260Z |
| gsd-2024-3570 | A stored Cross-Site Scripting (XSS) vulnerability exists in the chat functionality of the… | 2024-04-11T05:03:27.363916Z |
| gsd-2024-3569 | A Denial of Service (DoS) vulnerability exists in the mintplex-labs/anything-llm reposito… | 2024-04-11T05:03:27.274375Z |
| gsd-2024-3568 | The huggingface/transformers library is vulnerable to arbitrary code execution through de… | 2024-04-11T05:03:27.225234Z |
| gsd-2024-3567 | A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() … | 2024-04-11T05:03:27.426639Z |
| gsd-2024-3566 | A command inject vulnerability allows an attacker to perform command injection on Windows… | 2024-04-11T05:03:27.053396Z |
| gsd-2024-3565 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.385858Z |
| gsd-2024-3564 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.254387Z |
| gsd-2024-3563 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.127666Z |
| gsd-2024-3562 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.084835Z |
| gsd-2024-3561 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.181214Z |
| gsd-2024-3560 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-… | 2024-04-11T05:03:27.232296Z |
| gsd-2024-3559 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.367828Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192717 | Malicious code in bootstrap-setcolors (npm) | 2025-12-23T08:01:18Z | 2025-12-24T00:53:16Z |
| MAL-2025-192716 | Malicious code in bootstrap-setcolor (npm) | 2025-12-23T08:01:17Z | 2025-12-24T00:53:16Z |
| MAL-2025-192715 | Malicious code in booms-ai (npm) | 2025-12-23T08:01:16Z | 2025-12-24T00:53:16Z |
| MAL-2025-192714 | Malicious code in bignumberx (npm) | 2025-12-23T08:00:59Z | 2025-12-24T00:53:16Z |
| MAL-2025-192713 | Malicious code in baidu-src-test4 (npm) | 2025-12-23T08:00:16Z | 2025-12-24T00:53:16Z |
| mal-2025-192752 | Malicious code in @google_recaptcha/js (npm) | 2025-12-23T19:10:06Z | 2025-12-24T00:53:15Z |
| mal-2025-192745 | Malicious code in @aa-techops-ui/ping-authentication (npm) | 2025-12-23T17:29:18Z | 2025-12-24T00:53:15Z |
| mal-2025-192712 | Malicious code in auth-handler (npm) | 2025-12-23T07:59:48Z | 2025-12-24T00:53:15Z |
| mal-2025-192711 | Malicious code in assert-json-not (npm) | 2025-12-23T07:59:32Z | 2025-12-24T00:53:15Z |
| mal-2025-192710 | Malicious code in amournapraia (npm) | 2025-12-23T07:56:20Z | 2025-12-24T00:53:15Z |
| mal-2025-192709 | Malicious code in amazon-testpackage (npm) | 2025-12-23T07:56:17Z | 2025-12-24T00:53:15Z |
| mal-2025-192708 | Malicious code in alicenpmpackage (npm) | 2025-12-23T07:56:14Z | 2025-12-24T00:53:15Z |
| mal-2025-192707 | Malicious code in acz.view.src (npm) | 2025-12-23T07:55:31Z | 2025-12-24T00:53:15Z |
| mal-2025-192706 | Malicious code in @ownbackup/ob-query-builder (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| mal-2025-192705 | Malicious code in @ownbackup/ob-loader (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| mal-2025-192704 | Malicious code in @ownbackup/ob-design-system (npm) | 2025-12-23T07:49:18Z | 2025-12-24T00:53:15Z |
| mal-2025-192703 | Malicious code in @ownbackup/icons (npm) | 2025-12-23T07:49:17Z | 2025-12-24T00:53:15Z |
| mal-2025-192702 | Malicious code in @ownbackup/data-grid (npm) | 2025-12-23T07:49:16Z | 2025-12-24T00:53:15Z |
| mal-2025-192701 | Malicious code in @ownbackup/data-chart (npm) | 2025-12-23T07:49:16Z | 2025-12-24T00:53:15Z |
| mal-2025-192700 | Malicious code in @ads-core/types (npm) | 2025-12-23T07:43:33Z | 2025-12-24T00:53:15Z |
| MAL-2025-192752 | Malicious code in @google_recaptcha/js (npm) | 2025-12-23T19:10:06Z | 2025-12-24T00:53:15Z |
| MAL-2025-192745 | Malicious code in @aa-techops-ui/ping-authentication (npm) | 2025-12-23T17:29:18Z | 2025-12-24T00:53:15Z |
| MAL-2025-192712 | Malicious code in auth-handler (npm) | 2025-12-23T07:59:48Z | 2025-12-24T00:53:15Z |
| MAL-2025-192711 | Malicious code in assert-json-not (npm) | 2025-12-23T07:59:32Z | 2025-12-24T00:53:15Z |
| MAL-2025-192710 | Malicious code in amournapraia (npm) | 2025-12-23T07:56:20Z | 2025-12-24T00:53:15Z |
| MAL-2025-192709 | Malicious code in amazon-testpackage (npm) | 2025-12-23T07:56:17Z | 2025-12-24T00:53:15Z |
| MAL-2025-192708 | Malicious code in alicenpmpackage (npm) | 2025-12-23T07:56:14Z | 2025-12-24T00:53:15Z |
| MAL-2025-192707 | Malicious code in acz.view.src (npm) | 2025-12-23T07:55:31Z | 2025-12-24T00:53:15Z |
| MAL-2025-192706 | Malicious code in @ownbackup/ob-query-builder (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| MAL-2025-192705 | Malicious code in @ownbackup/ob-loader (npm) | 2025-12-23T07:49:19Z | 2025-12-24T00:53:15Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2025-0431 | Joomla: Mehrere Schwachstellen ermöglichen Manipulation von Dateien | 2025-02-24T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0187 | Mattermost: Mehrere Schwachstellen | 2025-01-23T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2024-3551 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-11-26T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2024-0115 | Oracle Supply Chain: Mehrere Schwachstellen | 2024-01-16T23:00:00.000+00:00 | 2025-02-24T23:00:00.000+00:00 |
| wid-sec-w-2025-0429 | ffmpeg: Schwachstelle ermöglicht Denial of Service, potentiell Codeausführung | 2025-02-23T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0287 | F5 BIG-IP: Mehrere Schwachstellen | 2025-02-05T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0246 | Grafana: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-02T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-2972 | strongSwan: Schwachstelle ermöglicht Codeausführung und DoS | 2023-11-20T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-2588 | libxml2: Schwachstelle ermöglicht Denial of Service | 2023-10-08T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-2214 | libxml2: Schwachstelle ermöglicht Denial of Service | 2023-08-29T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-2038 | PostgreSQL: Mehrere Schwachstellen | 2023-08-10T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-1203 | PostgreSQL: Mehrere Schwachstellen | 2023-05-11T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2023-0370 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2023-02-14T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-2347 | Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung | 2022-12-15T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-2316 | Apache CXF: Mehrere Schwachstellen | 2022-12-13T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-2050 | Red Hat JBoss Application Server (JBoss): Mehrere Schwachstellen | 2020-06-11T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-1912 | Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen | 2020-08-17T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-1758 | Apache Commons Text: Schwachstelle ermöglicht Codeausführung | 2022-10-17T22:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0352 | Apache log4j: Schwachstelle ermöglicht Codeausführung | 2021-12-14T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2022-0351 | Apache log4j: Schwachstelle ermöglicht Codeausführung | 2021-12-09T23:00:00.000+00:00 | 2025-02-23T23:00:00.000+00:00 |
| wid-sec-w-2025-0425 | xwiki: Schwachstelle ermöglicht Codeausführung | 2025-02-20T23:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0424 | Keycloak: Schwachstelle ermöglicht Cross-Site Scripting | 2025-02-20T23:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0423 | Apache Tomcat: Mehrere Schwachstellen | 2017-09-19T22:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0422 | Apache Tomcat: Schwachstelle ermöglicht Codeausführung | 2017-10-03T22:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0421 | IBM Security Verify Access: Schwachstelle ermöglicht Codeausführung | 2025-02-20T23:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0420 | Nagios Enterprises Nagios XI: Mehrere Schwachstellen | 2025-02-20T23:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0291 | Microsoft Edge: Mehrere Schwachstellen | 2025-02-06T23:00:00.000+00:00 | 2025-02-20T23:00:00.000+00:00 |
| wid-sec-w-2025-0418 | Microsoft Power Pages: Schwachstelle ermöglicht Privilegieneskalation | 2025-02-19T23:00:00.000+00:00 | 2025-02-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0417 | Cisco IP Phone: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-19T23:00:00.000+00:00 | 2025-02-19T23:00:00.000+00:00 |
| wid-sec-w-2025-0415 | Cisco AsyncOS für Secure Email Gateway : Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen | 2025-02-19T23:00:00.000+00:00 | 2025-02-19T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2022:6258 | Red Hat Security Advisory: OpenShift Container Platform 4.10.31 security update | 2022-09-08T05:39:54+00:00 | 2026-02-03T21:13:11+00:00 |
| rhsa-2022:6188 | Red Hat Security Advisory: Node Maintenance Operator 4.11.1 security update | 2022-08-25T11:20:51+00:00 | 2026-02-03T21:13:11+00:00 |
| rhsa-2022:6187 | Red Hat Security Advisory: Node Health Check Operator 0.3.1 security update | 2022-08-25T10:08:43+00:00 | 2026-02-03T21:13:10+00:00 |
| rhsa-2022:6183 | Red Hat Security Advisory: Logging Subsystem 5.4.5 Security and Bug Fix Update | 2022-09-06T13:32:06+00:00 | 2026-02-03T21:13:09+00:00 |
| rhsa-2022:6156 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement, & bugfix update | 2022-08-24T13:45:52+00:00 | 2026-02-03T21:13:09+00:00 |
| rhsa-2022:6155 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.11.0 security, enhancement & bugfix update | 2022-08-24T13:43:53+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6152 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.1.0 security update | 2022-09-01T05:40:28+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6147 | Red Hat Security Advisory: OpenShift Container Platform 4.9.47 bug fix and security update | 2022-08-31T16:38:13+00:00 | 2026-02-03T21:13:08+00:00 |
| rhsa-2022:6133 | Red Hat Security Advisory: OpenShift Container Platform 4.10.30 bug fix and security update | 2022-08-31T12:31:50+00:00 | 2026-02-03T21:13:07+00:00 |
| rhsa-2022:6113 | Red Hat Security Advisory: Red Hat Application Interconnect 1.0 Release (rpms) | 2022-08-18T15:12:43+00:00 | 2026-02-03T21:13:06+00:00 |
| rhsa-2022:6103 | Red Hat Security Advisory: OpenShift Container Platform 4.11.1 bug fix and security update | 2022-08-23T15:06:48+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6102 | Red Hat Security Advisory: OpenShift Container Platform 4.11.1 packages and security update | 2022-08-23T14:48:05+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6094 | Red Hat Security Advisory: OpenShift Container Platform 4.10.28 packages and security update | 2022-08-23T18:15:46+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6066 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (etcd) security update | 2022-08-15T09:45:49+00:00 | 2026-02-03T21:13:05+00:00 |
| rhsa-2022:6061 | Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (etcd) security update | 2022-08-15T09:18:19+00:00 | 2026-02-03T21:13:04+00:00 |
| rhsa-2022:6051 | Red Hat Security Advisory: Logging Subsystem 5.5.0 - Red Hat OpenShift security update | 2022-08-18T16:04:18+00:00 | 2026-02-03T21:13:03+00:00 |
| rhsa-2022:6042 | Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.24.0 | 2022-08-10T11:39:17+00:00 | 2026-02-03T21:13:03+00:00 |
| rhsa-2022:6040 | Red Hat Security Advisory: Release of OpenShift Serverless 1.24.0 | 2022-08-10T13:13:24+00:00 | 2026-02-03T21:13:02+00:00 |
| rhsa-2022:5909 | Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.2.13) | 2022-08-04T16:17:59+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5908 | Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.3.10) | 2022-08-04T15:59:19+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5875 | Red Hat Security Advisory: OpenShift Container Platform 4.10.26 security update | 2022-08-09T02:34:48+00:00 | 2026-02-03T21:13:01+00:00 |
| rhsa-2022:5866 | Red Hat Security Advisory: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update | 2022-08-02T09:56:09+00:00 | 2026-02-03T21:13:00+00:00 |
| rhsa-2022:5775 | Red Hat Security Advisory: go-toolset:rhel8 security and bug fix update | 2022-08-01T12:10:47+00:00 | 2026-02-03T21:13:00+00:00 |
| rhsa-2022:5840 | Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.3 security and bug fix update | 2022-08-02T07:44:20+00:00 | 2026-02-03T21:12:59+00:00 |
| rhsa-2022:5799 | Red Hat Security Advisory: go-toolset and golang security and bug fix update | 2022-08-01T16:07:42+00:00 | 2026-02-03T21:12:59+00:00 |
| rhsa-2022:5730 | Red Hat Security Advisory: OpenShift Container Platform 4.10.25 bug fix and security update | 2022-08-01T11:33:31+00:00 | 2026-02-03T21:12:58+00:00 |
| rhsa-2022:5729 | Red Hat Security Advisory: OpenShift Container Platform 4.10.25 security update | 2022-08-01T11:18:52+00:00 | 2026-02-03T21:12:58+00:00 |
| rhsa-2022:5673 | Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview | 2022-07-20T15:48:31+00:00 | 2026-02-03T21:12:57+00:00 |
| rhsa-2022:5556 | Red Hat Security Advisory: Logging Subsystem 5.4.3 - Red Hat OpenShift security update | 2022-07-18T16:21:11+00:00 | 2026-02-03T21:12:57+00:00 |
| rhsa-2022:5525 | Red Hat Security Advisory: Service Binding Operator security update | 2022-07-07T10:16:27+00:00 | 2026-02-03T21:12:57+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsma-21-322-01 | Philips IntelliBridge EC 40 and EC 80 Hub | 2021-11-18T00:00:00.000000Z | 2021-11-18T00:00:00.000000Z |
| icsa-20-084-01 | VISAM Automation Base (VBASE) (Update B) | 2020-03-24T00:00:00.000000Z | 2021-11-18T00:00:00.000000Z |
| icsa-21-320-02 | Mitsubishi Electric GOT products | 2021-11-16T00:00:00.000000Z | 2021-11-16T00:00:00.000000Z |
| icsa-21-320-01 | FATEK Automation WinProladder | 2021-11-16T00:00:00.000000Z | 2021-11-16T00:00:00.000000Z |
| icsa-21-315-01 | WECON PLC Editor | 2021-11-11T00:00:00.000000Z | 2021-11-11T00:00:00.000000Z |
| icsa-21-042-01 | Multiple Embedded TCP/IP Stacks (Update B) | 2021-02-11T00:00:00.000000Z | 2021-11-11T00:00:00.000000Z |
| icsma-21-313-01 | Philips MRI 1.5T and 3T | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-06 | OSIsoft PI Web API | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-05 | OSIsoft PI Vision | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-04 | mySCADA myDESIGNER | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-02 | Schneider Electric GUIcon | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-313-01 | Schneider Electric NMC cards and Embedded Devices | 2021-11-09T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsa-21-173-01 | Advantech WebAccess HMI Designer (Update A) | 2021-06-22T00:00:00.000000Z | 2021-11-09T00:00:00.000000Z |
| icsma-21-308-01 | Philips Tasy EMR | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-02 | AzeoTech DAQFactory | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-308-01 | VISAM VBASE Editor | 2021-11-04T00:00:00.000000Z | 2021-11-04T00:00:00.000000Z |
| icsa-21-306-01 | Sensormatic Electronics VideoEdge | 2021-11-02T00:00:00.000000Z | 2021-11-02T00:00:00.000000Z |
| icsa-18-277-01 | WECON PI Studio (Update A) | 2018-10-04T00:00:00.000000Z | 2021-11-02T00:00:00.000000Z |
| icsa-21-301-01 | Sensormatic Electronics victor | 2021-10-28T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-280-04 | Mitsubishi Electric MELSEC iQ-R Series C Controller Module (Update B) | 2021-10-07T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-238-04 | Delta Electronics DOPSoft (Update A) | 2021-08-26T00:00:00.000000Z | 2021-10-28T00:00:00.000000Z |
| icsa-21-299-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-10-26T00:00:00.000000Z | 2021-10-26T00:00:00.000000Z |
| icsma-21-294-01 | B. Braun Infusomat Space Large Volume Pump | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-03 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-02 | Delta Electronics DIALink | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-294-01 | ICONICS GENESIS64 and Mitsubishi Electric MC Works64 | 2021-10-21T00:00:00.000000Z | 2021-10-21T00:00:00.000000Z |
| icsa-21-292-02 | Trane HVAC Systems Controls | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-292-01 | AUVESY Versiondog | 2021-10-19T00:00:00.000000Z | 2021-10-19T00:00:00.000000Z |
| icsa-21-287-02 | Uffizio GPS Tracker | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| icsa-21-287-01 | Schneider Electric CNM | 2021-10-14T00:00:00.000000Z | 2021-10-14T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-nxos-dme-rce-cbe3nhzs | Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T21:13:38+00:00 |
| cisco-sa-nxos-dme-rce-cbE3nhZS | Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T21:13:38+00:00 |
| cisco-sa-n3n9k-priv-escal-3qhxjbc | Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:59:18+00:00 |
| cisco-sa-n3n9k-priv-escal-3QhXJBC | Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:59:18+00:00 |
| cisco-sa-nxosbgp-mvpn-dos-k8kbcrjp | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:56:48+00:00 |
| cisco-sa-nxosbgp-mvpn-dos-K8kbCrJp | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:56:48+00:00 |
| cisco-sa-nxosbgp-nlri-dos-458rg2oq | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:54:18+00:00 |
| cisco-sa-nxosbgp-nlri-dos-458rG2OQ | Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:54:18+00:00 |
| cisco-sa-callhome-cmdinj-zkxzscy | Cisco NX-OS Software Call Home Command Injection Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:51:18+00:00 |
| cisco-sa-callhome-cmdinj-zkxzSCY | Cisco NX-OS Software Call Home Command Injection Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:51:18+00:00 |
| cisco-sa-20180620-nx-os-cli-injection | Cisco NX-OS Software CLI Arbitrary Command Injection Vulnerability | 2018-06-20T16:00:00+00:00 | 2020-08-26T20:48:58+00:00 |
| cisco-sa-20180620-nx-os-cli-execution | Cisco NX-OS Software CLI Arbitrary Command Execution Vulnerability | 2018-06-20T16:00:00+00:00 | 2020-08-26T20:48:53+00:00 |
| cisco-sa-nxos-pim-memleak-dos-tc8ep7uw | Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:42:53+00:00 |
| cisco-sa-nxos-pim-memleak-dos-tC8eP7uw | Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T20:42:53+00:00 |
| cisco-sa-ucs-cli-dos-gquxcnte | Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T16:00:00+00:00 |
| cisco-sa-ucs-cli-dos-GQUxCnTe | Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability | 2020-08-26T16:00:00+00:00 | 2020-08-26T16:00:00+00:00 |
| cisco-sa-20190821-imc-cmdinject-1896 | Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability | 2019-08-21T16:00:00+00:00 | 2020-08-26T14:48:23+00:00 |
| cisco-sa-treck-ip-stack-jybq5gyc | Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 | 2020-06-17T20:00:00+00:00 | 2020-08-21T16:40:13+00:00 |
| cisco-sa-treck-ip-stack-JyBQ5GyC | Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 | 2020-06-17T20:00:00+00:00 | 2020-08-21T16:40:13+00:00 |
| cisco-sa-waas-encsw-cspw-cred-hzzl29a7 | Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-waas-encsw-cspw-cred-hZzL29A7 | Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-vdsd-w7mnkwj7 | Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-vdsd-W7mnkwj7 | Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-smart-priv-esca-nqwxxwbu | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-smart-priv-esca-nqwxXWBu | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-sbss-ipv6-dos-tsgqbffw | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-sbss-ipv6-dos-tsgqbffW | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-ipcameras-rce-dos-upyjyxn3 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-ipcameras-rce-dos-uPyJYxN3 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| cisco-sa-hyp-wsv-yt3j5hsb | Cisco Hyperflex HX-Series Software Weak Storage Vulnerability | 2020-08-19T16:00:00+00:00 | 2020-08-19T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2020-8910 | Auth Bypass in Google's Closure-Library | 2020-03-02T00:00:00.000Z | 2025-09-03T23:49:20.000Z |
| msrc_cve-2025-5914 | Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | 2025-06-02T00:00:00.000Z | 2025-09-03T23:49:02.000Z |
| msrc_cve-2025-1179 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption | 2025-02-02T00:00:00.000Z | 2025-09-03T23:48:55.000Z |
| msrc_cve-2025-8846 | NASM Netwide Assember parser.c parse_line stack-based overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:48:09.000Z |
| msrc_cve-2024-24784 | Comments in display names are incorrectly handled in net/mail | 2024-03-02T08:00:00.000Z | 2025-09-03T23:48:08.000Z |
| msrc_cve-2025-21891 | ipvlan: ensure network headers are in skb linear part | 2025-03-02T00:00:00.000Z | 2025-09-03T23:46:34.000Z |
| msrc_cve-2022-49177 | hwrng: cavium - fix NULL but dereferenced coccicheck error | 2025-02-02T00:00:00.000Z | 2025-09-03T23:45:45.000Z |
| msrc_cve-2024-26648 | drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay() | 2024-03-02T08:00:00.000Z | 2025-09-03T23:45:23.000Z |
| msrc_cve-2024-2606 | Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124. | 2024-03-02T08:00:00.000Z | 2025-09-03T23:44:41.000Z |
| msrc_cve-2025-9390 | vim xxd xxd.c main buffer overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:44:33.000Z |
| msrc_cve-2022-49296 | ceph: fix possible deadlock when holding Fwb to get inline_data | 2025-02-02T00:00:00.000Z | 2025-09-03T23:43:53.000Z |
| msrc_cve-2024-44939 | jfs: fix null ptr deref in dtInsertEntry | 2024-08-02T00:00:00.000Z | 2025-09-03T23:43:38.000Z |
| msrc_cve-2023-52639 | KVM: s390: vsie: fix race during shadow creation | 2024-04-02T07:00:00.000Z | 2025-09-03T23:43:34.000Z |
| msrc_cve-2024-45774 | Grub2: reader/jpeg: heap oob write during jpeg parsing | 2025-02-02T00:00:00.000Z | 2025-09-03T23:43:28.000Z |
| msrc_cve-2023-34417 | Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 114. | 2023-06-01T07:00:00.000Z | 2025-09-03T23:40:46.000Z |
| msrc_cve-2024-26646 | thermal: intel: hfi: Add syscore callbacks for system-wide PM | 2024-03-02T08:00:00.000Z | 2025-09-03T23:40:44.000Z |
| msrc_cve-2022-49750 | cpufreq: CPPC: Add u64 casts to avoid overflowing | 2025-03-02T00:00:00.000Z | 2025-09-03T23:40:42.000Z |
| msrc_cve-2013-6418 | PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate. | 2014-05-02T00:00:00.000Z | 2025-09-03T23:39:48.000Z |
| msrc_cve-2024-47664 | spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware | 2024-10-01T07:00:00.000Z | 2025-09-03T23:39:40.000Z |
| msrc_cve-2024-45775 | Grub2: commands/extcmd: missing check for failed allocation | 2025-02-02T00:00:00.000Z | 2025-09-03T23:39:00.000Z |
| msrc_cve-2025-9403 | jqlang jq JSON jq_test.c run_jq_tests assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T23:38:41.000Z |
| msrc_cve-2025-8845 | NASM Netwide Assember nasm.c assemble_file stack-based overflow | 2025-08-02T00:00:00.000Z | 2025-09-03T23:38:10.000Z |
| msrc_cve-2025-22101 | net: libwx: fix Tx L4 checksum | 2025-04-02T00:00:00.000Z | 2025-09-03T23:37:47.000Z |
| msrc_cve-2023-53002 | drm/i915: Fix a memory leak with reused mmap_offset | 2025-03-02T00:00:00.000Z | 2025-09-03T23:37:44.000Z |
| msrc_cve-2022-49516 | ice: always check VF VSI pointer values | 2025-02-02T00:00:00.000Z | 2025-09-03T23:37:34.000Z |
| msrc_cve-2023-39533 | libp2p nodes vulnerable to attack using large RSA keys | 2023-08-01T00:00:00.000Z | 2025-09-03T23:37:27.000Z |
| msrc_cve-2023-29537 | Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. | 2023-06-01T07:00:00.000Z | 2025-09-03T23:36:01.000Z |
| msrc_cve-2022-24963 | Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions | 2023-01-04T00:00:00.000Z | 2025-09-03T23:35:51.000Z |
| msrc_cve-2023-39326 | Denial of service via chunk extensions in net/http | 2023-12-01T08:00:00.000Z | 2025-09-03T23:35:43.000Z |
| msrc_cve-2025-52194 | A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution. | 2025-08-02T00:00:00.000Z | 2025-09-03T23:34:47.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13754-1 | crun-1.14.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13753-1 | MozillaThunderbird-115.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13752-1 | go1.22-1.22.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13751-1 | tar-1.35-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13750-1 | rabbitmq-java-client-5.20.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13749-1 | python310-Django-4.2.11-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13748-1 | libopenjp2-7-2.5.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13747-1 | caja-engrampa-1.26.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13746-1 | libzzip-0-13-0.13.72-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13745-1 | xen-4.18.0_06-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13744-1 | python312-3.12.2-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13743-1 | xmlgraphics-batik-1.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13742-1 | libunbound8-1.19.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13741-1 | python39-3.9.18-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13740-1 | python311-3.11.8-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13739-1 | python310-3.10.13-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13738-1 | nodejs-electron-28.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13737-1 | glade-3.40.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13736-1 | python38-3.8.18-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13735-1 | python310-orjson-3.9.15-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13734-1 | postgresql-jdbc-42.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13733-1 | opensc-0.24.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13732-1 | libmodsecurity3-3.0.12-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13731-1 | exiv2-0.28.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13730-1 | dav1d-1.4.0-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13729-1 | python310-uamqp-1.6.8-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13728-1 | MozillaFirefox-123.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13727-1 | ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13726-1 | ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13725-1 | libopenvswitch-3_1-0-3.1.0-19.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitlab-2023-3994 | Inefficient Regular Expression Complexity in GitLab | 2024-03-06T11:00:53.875Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3993 | Insertion of Sensitive Information into Log File in GitLab | 2024-03-06T11:01:06.172Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3979 | Incorrect Authorization in GitLab | 2024-03-06T11:01:15.790Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3964 | Incorrect Authorization in GitLab | 2024-03-06T11:01:24.492Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3950 | Cleartext Storage of Sensitive Information in GitLab | 2024-03-06T11:01:33.975Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3949 | Insertion of Sensitive Information Into Sent Data in GitLab | 2024-03-06T11:01:45.006Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3932 | Incorrect User Management in GitLab | 2024-03-06T11:01:54.178Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3922 | URL Redirection to Untrusted Site ('Open Redirect') in GitLab | 2024-03-06T11:02:04.162Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3920 | Incorrect Authorization in GitLab | 2024-03-06T11:02:16.277Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3917 | Improper Validation of Specified Type of Input in GitLab | 2024-03-06T11:02:27.067Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3915 | Incorrect Execution-Assigned Permissions in GitLab | 2024-03-06T11:02:39.174Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3914 | Incorrect User Management in GitLab | 2024-03-06T11:02:49.276Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3909 | Inefficient Regular Expression Complexity in GitLab | 2024-03-06T11:02:58.072Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3907 | Improper User Management in GitLab | 2024-03-06T11:03:07.886Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3906 | Improper Validation of Specified Type of Input in GitLab | 2024-03-06T11:03:19.001Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3904 | Improper Validation of Specified Type of Input in GitLab | 2024-03-06T11:03:27.476Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3900 | Improper Validation of Specified Type of Input in GitLab | 2024-03-06T11:03:40.193Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3511 | Incorrect Authorization in GitLab | 2024-03-06T11:03:50.106Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3509 | Incorrect Authorization in GitLab | 2024-03-06T11:04:01.070Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3500 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | 2024-03-06T11:04:10.871Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3484 | Incorrect Authorization in GitLab | 2024-03-06T11:04:20.968Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3444 | Incorrect Authorization in GitLab | 2024-03-06T11:04:34.691Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3443 | Incorrect Authorization in GitLab | 2024-03-06T11:04:44.368Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3441 | Exposure of Sensitive Information Due to Incompatible Policies in GitLab | 2024-10-03T07:38:54.069Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3424 | Inefficient Regular Expression Complexity in GitLab | 2024-03-06T11:04:54.702Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3413 | Insertion of Sensitive Information Into Sent Data in GitLab | 2024-03-06T11:05:05.395Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3401 | Improper Control of Generation of Code ('Code Injection') in GitLab | 2024-03-06T11:05:16.794Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3399 | Insertion of Sensitive Information Into Sent Data in GitLab | 2024-03-06T11:05:27.387Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3385 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab | 2024-03-06T11:05:38.479Z | 2025-05-20T10:02:07.006Z |
| bit-gitlab-2023-3364 | Inefficient Regular Expression Complexity in GitLab | 2024-03-06T11:05:47.492Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202402-1997 | An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.… | 2024-03-27T22:40:17.658000Z |
| var-202103-1030 | An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In so… | 2024-03-27T22:36:25.890000Z |
| var-202109-1795 | When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumsta… | 2024-03-27T22:17:19.199000Z |
| var-202107-1503 | libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncomp… | 2024-03-27T22:01:25.663000Z |
| var-202210-1889 | In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTT… | 2024-03-27T21:37:34.675000Z |
| var-202206-1962 | A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP respons… | 2024-03-27T21:37:32.967000Z |
| var-202106-0520 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to … | 2024-03-27T21:32:55.444000Z |
| var-202210-1887 | curl can be told to parse a `.netrc` file for credentials. If that file endsin a line wit… | 2024-03-27T21:05:26.209000Z |
| var-202210-1886 | curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer… | 2024-03-27T20:56:27.026000Z |
| var-202206-1963 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the oper… | 2024-03-27T20:05:24.756000Z |
| var-202303-1599 | An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses … | 2024-03-27T19:59:15.923000Z |
| var-202104-0328 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS … | 2024-03-27T19:39:03.303000Z |
| var-200110-0353 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a de… | 2024-03-27T19:24:31.614000Z |
| var-202106-0522 | curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in alrea… | 2024-03-27T19:22:50.313000Z |
| var-200110-0259 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers t… | 2024-03-26T20:35:19.600000Z |
| var-202103-1029 | An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certai… | 2024-03-25T22:16:57.992000Z |
| var-202109-0377 | Possible buffer overflow due to improper validation of device types during P2P search in … | 2024-03-24T20:05:24.781000Z |
| var-202109-0374 | A use after free can occur due to improper validation of P2P device address in PD Request… | 2024-03-24T19:58:54.562000Z |
| var-202403-0510 | Dell Digital Delivery, versions prior to 5.0.86.0, contain a Buffer Overflow vulnerabili… | 2024-03-23T22:54:17.747000Z |
| var-202403-0195 | Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross… | 2024-03-23T22:54:17.772000Z |
| var-200609-1358 | 2024-03-23T22:29:20.017000Z | |
| var-202302-1564 | An improper neutralization of input during web page generation [CWE-79] vulnerability in … | 2024-03-23T21:49:18.557000Z |
| var-202109-0010 | Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network ca… | 2024-03-23T21:38:49.622000Z |
| var-202302-1270 | An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3… | 2024-03-23T21:37:50.799000Z |
| var-202011-0423 | Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows loca… | 2024-03-23T21:25:15.898000Z |
| var-202401-1038 | A vulnerability classified as critical was found in Tenda AC10U 15.03.06.49_multi_TDE01. … | 2024-03-22T23:09:17.973000Z |
| var-202401-1162 | A vulnerability was found in Tenda AC10U 15.03.06.49_multi_TDE01. It has been rated as cr… | 2024-03-22T23:08:06.008000Z |
| var-202402-0826 | Buffer Overflow vulnerability in the function setSchedWifi in Tenda AC9 v.3.0, firmware v… | 2024-03-22T23:05:07.358000Z |
| var-202105-0641 | A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenti… | 2024-03-22T19:57:25.226000Z |
| var-202403-0630 | A vulnerability has been identified in SENTRON 7KM PAC3120 AC/DC (7KM3120-0BA01-1DA0) (Al… | 2024-03-20T23:07:23.578000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2010-002467 | Interstage Application Server Information Disclosure Vulnerability | 2010-12-14T15:18+09:00 | 2010-12-14T15:18+09:00 |
| jvndb-2010-001538 | Safari address bar spoofing vulnerability | 2010-11-26T17:16+09:00 | 2010-12-10T17:48+09:00 |
| jvndb-2010-000061 | Movable Type vulnerable to SQL injection | 2010-12-08T18:28+09:00 | 2010-12-08T18:28+09:00 |
| jvndb-2010-000060 | Movable Type vulnerable to cross-site scripting | 2010-12-08T18:26+09:00 | 2010-12-08T18:26+09:00 |
| jvndb-2010-000059 | Vulnerability in Epson printer driver installer where access permissions are changed | 2010-12-08T18:25+09:00 | 2010-12-08T18:25+09:00 |
| jvndb-2010-000058 | Clipboard contents alteration vulnerability in Grani | 2010-12-01T20:27+09:00 | 2010-12-01T20:27+09:00 |
| jvndb-2010-000057 | Clipboard contents alteration vulnerability in Sleipnir | 2010-12-01T20:27+09:00 | 2010-12-01T20:27+09:00 |
| jvndb-2010-000056 | Google Chrome information disclosure vulnerability | 2010-11-26T17:32+09:00 | 2010-11-26T17:32+09:00 |
| jvndb-2010-000053 | Ichitaro series vulnerable to arbitrary code execution | 2010-11-04T19:11+09:00 | 2010-11-05T16:15+09:00 |
| jvndb-2010-000052 | Ichitaro series vulnerable to arbitrary code execution | 2010-11-04T19:10+09:00 | 2010-11-05T16:15+09:00 |
| jvndb-2010-000051 | GVim may insecurely load dynamic libraries | 2010-11-01T18:51+09:00 | 2010-11-01T18:51+09:00 |
| jvndb-2010-000050 | Active! mail 6 vulnerable to HTTP header injection | 2010-10-29T20:36+09:00 | 2010-10-29T20:36+09:00 |
| jvndb-2010-000046 | Apsaly may insecurely load executable files | 2010-10-26T16:52+09:00 | 2010-10-26T16:52+09:00 |
| jvndb-2010-000045 | TeraPad may insecurely load dynamic libraries | 2010-10-26T16:51+09:00 | 2010-10-26T16:51+09:00 |
| jvndb-2010-000049 | Multiple Yokka provided products may insecurely load executable files | 2010-10-25T17:43+09:00 | 2010-10-25T17:43+09:00 |
| jvndb-2010-000048 | Sleipnir and Grani may insecurely load executable files | 2010-10-25T17:43+09:00 | 2010-10-25T17:43+09:00 |
| jvndb-2010-000047 | Sleipnir and Grani may insecurely load dynamic libraries | 2010-10-25T17:42+09:00 | 2010-10-25T17:42+09:00 |
| jvndb-2010-000044 | Archive Decoder may insecurely load executable files | 2010-10-20T17:41+09:00 | 2010-10-20T17:41+09:00 |
| jvndb-2010-000043 | Explzh may insecurely load executable files | 2010-10-20T17:41+09:00 | 2010-10-20T17:41+09:00 |
| jvndb-2010-000041 | K2Editor may insecurely load executable files | 2010-10-20T17:41+09:00 | 2010-10-20T17:41+09:00 |
| jvndb-2010-000040 | XacRett may insecurely load executable files | 2010-10-20T17:40+09:00 | 2010-10-20T17:40+09:00 |
| jvndb-2010-000039 | Lhaplus may insecurely load executable files | 2010-10-20T17:40+09:00 | 2010-10-20T17:40+09:00 |
| jvndb-2008-000084 | PHP vulnerable to cross-site scripting | 2008-12-19T15:37+09:00 | 2010-10-19T17:40+09:00 |
| jvndb-2010-000042 | Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server | 2010-10-18T19:37+09:00 | 2010-10-18T19:37+09:00 |
| jvndb-2010-000038 | Lhasa may insecurely load executable files | 2010-10-18T19:36+09:00 | 2010-10-18T19:36+09:00 |
| jvndb-2010-000037 | Lhaplus may insecurely load dynamic libraries | 2010-10-18T19:36+09:00 | 2010-10-18T19:36+09:00 |
| jvndb-2010-002078 | Multiple Vulnerabilities in Groupmax Scheduler Server | 2010-10-13T16:58+09:00 | 2010-10-13T16:58+09:00 |
| jvndb-2010-002077 | Phishing Vulnerability in Accela BizSearch Document View Window | 2010-10-13T16:58+09:00 | 2010-10-13T16:58+09:00 |
| jvndb-2005-000775 | Vulnerability involving security zone handling in applications using Internet Explorer components | 2008-05-21T00:00+09:00 | 2010-10-12T16:44+09:00 |
| jvndb-2010-000036 | AD-EDIT2 vulnerable to cross-site scripting | 2010-10-05T19:31+09:00 | 2010-10-05T19:31+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:01779-1 | Security update for iputils | 2025-05-30T13:39:04Z | 2025-05-30T13:39:04Z |
| suse-su-2025:01778-1 | Security update for open-vm-tools | 2025-05-30T13:05:19Z | 2025-05-30T13:05:19Z |
| suse-su-2025:01777-1 | Security update for iputils | 2025-05-30T13:04:03Z | 2025-05-30T13:04:03Z |
| suse-su-2025:01776-1 | Security update for iputils | 2025-05-30T13:02:56Z | 2025-05-30T13:02:56Z |
| suse-su-2025:01774-1 | Security update for python312-setuptools | 2025-05-30T12:10:38Z | 2025-05-30T12:10:38Z |
| suse-su-2025:01772-1 | Security update for postgresql14 | 2025-05-30T10:44:48Z | 2025-05-30T10:44:48Z |
| suse-su-2025:01771-1 | Security update for iputils | 2025-05-30T10:41:24Z | 2025-05-30T10:41:24Z |
| suse-su-2025:01770-1 | Security update for java-1_8_0-ibm | 2025-05-30T10:09:24Z | 2025-05-30T10:09:24Z |
| suse-su-2025:01769-1 | Security update for MozillaFirefox | 2025-05-30T09:30:30Z | 2025-05-30T09:30:30Z |
| suse-su-2025:01767-1 | Security update for postgresql16 | 2025-05-30T07:47:19Z | 2025-05-30T07:47:19Z |
| suse-su-2025:01766-1 | Security update for postgresql16 | 2025-05-30T07:45:38Z | 2025-05-30T07:45:38Z |
| suse-su-2025:01765-1 | Security update for postgresql17 | 2025-05-30T07:44:39Z | 2025-05-30T07:44:39Z |
| suse-su-2025:01763-1 | Security update for augeas | 2025-05-29T20:55:38Z | 2025-05-29T20:55:38Z |
| suse-su-2025:01762-1 | Security update for brotli | 2025-05-29T20:55:26Z | 2025-05-29T20:55:26Z |
| suse-su-2025:01761-1 | Security update for slurm_24_11 | 2025-05-29T16:08:32Z | 2025-05-29T16:08:32Z |
| suse-su-2025:01565-1 | Security update for open-vm-tools | 2025-05-29T16:00:39Z | 2025-05-29T16:00:39Z |
| suse-su-2025:01760-1 | Security update for slurm | 2025-05-29T14:54:19Z | 2025-05-29T14:54:19Z |
| suse-su-2025:01759-1 | Security update for slurm | 2025-05-29T14:53:55Z | 2025-05-29T14:53:55Z |
| suse-su-2025:01758-1 | Security update for slurm_23_02 | 2025-05-29T14:48:59Z | 2025-05-29T14:48:59Z |
| suse-su-2025:01757-1 | Security update for slurm_24_11 | 2025-05-29T14:47:58Z | 2025-05-29T14:47:58Z |
| suse-su-2025:01756-1 | Security update for slurm_22_05 | 2025-05-29T14:39:06Z | 2025-05-29T14:39:06Z |
| suse-su-2025:01755-1 | Security update for slurm_22_05 | 2025-05-29T14:37:35Z | 2025-05-29T14:37:35Z |
| suse-su-2025:01754-1 | Security update for augeas | 2025-05-29T14:19:21Z | 2025-05-29T14:19:21Z |
| suse-su-2025:01521-1 | Security update for tomcat | 2025-05-29T14:04:09Z | 2025-05-29T14:04:09Z |
| suse-su-2025:01582-1 | Security update for brltty | 2025-05-29T13:34:13Z | 2025-05-29T13:34:13Z |
| suse-su-2025:01504-1 | Security update for libsoup | 2025-05-29T13:33:46Z | 2025-05-29T13:33:46Z |
| suse-su-2025:01503-1 | Security update for libsoup2 | 2025-05-29T13:33:40Z | 2025-05-29T13:33:40Z |
| suse-su-2025:01662-2 | Security update for python-cryptography | 2025-05-29T13:31:03Z | 2025-05-29T13:31:03Z |
| suse-su-2025:01644-2 | Security update for postgresql17 | 2025-05-29T13:30:04Z | 2025-05-29T13:30:04Z |
| suse-su-2025:01753-1 | Security update for slurm_20_11 | 2025-05-29T12:55:13Z | 2025-05-29T12:55:13Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-26797 | Google Android权限提升漏洞 | 2025-09-08 | 2025-11-03 |
| cnvd-2025-26796 | Google Android缺少权限检漏洞 | 2025-09-08 | 2025-11-03 |
| cnvd-2025-26795 | Google Android拒绝服务漏洞 | 2025-09-08 | 2025-11-03 |
| cnvd-2025-26794 | Google Android逻辑错误漏洞 | 2025-09-08 | 2025-11-03 |
| cnvd-2025-26793 | Google Android协议实现不正确漏洞 | 2025-09-08 | 2025-11-03 |
| cnvd-2025-26789 | IBM Concert Software缓冲区溢出漏洞 | 2025-09-10 | 2025-11-03 |
| cnvd-2025-26788 | IBM Storage TS4500 Library跨站请求伪造漏洞 | 2025-09-29 | 2025-11-03 |
| cnvd-2025-26786 | Curfew e-Pass Management System edit-category-detail.php文件跨站脚本漏洞 | 2025-10-31 | 2025-11-03 |
| cnvd-2025-26785 | Curfew e-Pass Management System admin-profile.php文件跨站脚本漏洞 | 2025-10-31 | 2025-11-03 |
| cnvd-2025-26784 | IBM Concert Software服务端请求伪造漏洞 | 2025-10-31 | 2025-11-03 |
| cnvd-2025-26783 | IBM Concert Software日志输入中和不当漏洞 | 2025-10-31 | 2025-11-03 |
| cnvd-2025-26736 | ISC BIND 9存在未明漏洞（CNVD-2025-26736） | 2025-10-29 | 2025-11-03 |
| cnvd-2025-26735 | ISC BIND 9拒绝服务漏洞 | 2025-10-29 | 2025-11-03 |
| cnvd-2025-26734 | ISC BIND 9存在未明漏洞 | 2025-10-29 | 2025-11-03 |
| cnvd-2025-26728 | Microsoft Office代码执行漏洞（CNVD-2025-26728） | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26727 | Microsoft OfficePlus欺骗漏洞 | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26726 | Microsoft Office代码执行漏洞（CNVD-2025-26726） | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26725 | Microsoft Office Visio代码执行漏洞 | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26724 | Microsoft Sharepoint远程代码执行漏洞（CNVD-2025-26724） | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26723 | Microsoft PowerPoint代码执行漏洞（CNVD-2025-26723） | 2025-09-11 | 2025-11-03 |
| cnvd-2025-26722 | Microsoft Exchange Server权限提升漏洞（CNVD-2025-26722） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26721 | Microsoft Word代码执行漏洞（CNVD-2025-26721） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26720 | Microsoft Word代码执行漏洞（CNVD-2025-26720） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26719 | Microsoft PowerPoint代码执行漏洞（CNVD-2025-26719） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26718 | Microsoft Exchange Server欺骗漏洞（CNVD-2025-26718） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-26717 | Microsoft Exchange Server权限提升漏洞（CNVD-2025-26717） | 2025-10-17 | 2025-11-03 |
| cnvd-2025-27115 | Tenda A15缓冲区溢出漏洞 | 2025-11-05 | 2025-11-02 |
| cnvd-2025-27117 | Tenda CH22 fromDhcpListClient函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-27116 | Tenda CH22 formwebExcptypemanFilter函数缓冲区溢出漏洞 | 2025-10-31 | 2025-10-31 |
| cnvd-2025-26831 | Wazifa System logincontrol.php文件SQL注入漏洞 | 2024-11-07 | 2025-10-31 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-1046 | Multiples vulnérabilités dans Tenable Security Center | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| CERTFR-2024-AVI-1045 | Multiples vulnérabilités dans Google Pixel | 2024-12-06T00:00:00.000000 | 2024-12-06T00:00:00.000000 |
| certfr-2024-avi-1044 | Multiples vulnérabilités dans MISP | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1043 | Vulnérabilité dans Cisco NX-OS | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1042 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1044 | Multiples vulnérabilités dans MISP | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1043 | Vulnérabilité dans Cisco NX-OS | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| CERTFR-2024-AVI-1042 | Multiples vulnérabilités dans Sonicwall Secure Mobile Access | 2024-12-05T00:00:00.000000 | 2024-12-05T00:00:00.000000 |
| certfr-2024-avi-1041 | Vulnérabilité dans SolarWinds Platform | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1040 | Vulnérabilité dans Moxa VPort 07-3 Series | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1039 | Multiples vulnérabilités dans les produits Veeam | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1038 | Vulnérabilité dans Google Chrome | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1037 | Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1041 | Vulnérabilité dans SolarWinds Platform | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1040 | Vulnérabilité dans Moxa VPort 07-3 Series | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1039 | Multiples vulnérabilités dans les produits Veeam | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1038 | Vulnérabilité dans Google Chrome | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| CERTFR-2024-AVI-1037 | Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager | 2024-12-04T00:00:00.000000 | 2024-12-04T00:00:00.000000 |
| certfr-2024-avi-1036 | Multiples vulnérabilités dans Google Android | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1035 | Multiples vulnérabilités dans les produits Axis | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1034 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1036 | Multiples vulnérabilités dans Google Android | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1035 | Multiples vulnérabilités dans les produits Axis | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| CERTFR-2024-AVI-1034 | Multiples vulnérabilités dans Ruby on Rails | 2024-12-03T00:00:00.000000 | 2024-12-03T00:00:00.000000 |
| certfr-2024-avi-1033 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |
| certfr-2024-avi-1032 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |
| certfr-2024-avi-1031 | Multiples vulnérabilités dans le noyau Linux de Debian | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |
| certfr-2024-avi-1030 | Multiples vulnérabilités dans IBM QRadar | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |
| certfr-2024-avi-1029 | Vulnérabilité dans Traefik | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |
| certfr-2024-avi-1028 | Multiples vulnérabilités dans Zabbix | 2024-11-29T00:00:00.000000 | 2024-11-29T00:00:00.000000 |