Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-25010 |
5.3 (3.1)
|
WordPress Share This Image plugin <= 2.09 - Broken Acc… |
ILLID |
Share This Image |
2026-02-03T14:08:38.599Z | 2026-02-03T16:18:58.156Z |
| CVE-2026-25012 |
5.3 (3.1)
|
WordPress WP Bannerize Pro plugin <= 1.11.0 - Broken A… |
gfazioli |
WP Bannerize Pro |
2026-02-03T14:08:38.953Z | 2026-02-03T16:17:24.045Z |
| CVE-2026-25019 |
5.3 (3.1)
|
WordPress Atarim plugin <= 4.3.1 - Broken Access Contr… |
Vito Peleg |
Atarim |
2026-02-03T14:08:39.681Z | 2026-02-03T16:14:10.299Z |
| CVE-2026-25021 |
5.4 (3.1)
|
WordPress Mizan Demo Importer plugin <= 0.1.3 - Broken… |
Mizan Themes |
Mizan Demo Importer |
2026-02-03T14:08:40.392Z | 2026-02-03T16:13:12.772Z |
| CVE-2026-25023 |
5.3 (3.1)
|
WordPress Run Contests, Raffles, and Giveaways with Co… |
mdedev |
Run Contests, Raffles, and Giveaways with ContestsWP |
2026-02-03T14:08:40.899Z | 2026-02-03T16:12:10.005Z |
| CVE-2026-24996 |
4.3 (3.1)
|
WordPress WPElemento Importer plugin <= 0.6.4 - Broken… |
wpelemento |
WPElemento Importer |
2026-02-03T14:08:37.567Z | 2026-02-03T16:11:29.126Z |
| CVE-2025-53453 |
8.2 (3.1)
|
WordPress Hygia theme <= 1.16 - Local File Inclusion v… |
axiomthemes |
Hygia |
2025-12-18T07:21:49.127Z | 2026-02-03T16:05:11.528Z |
| CVE-2025-54723 |
9.8 (3.1)
|
WordPress DentiCare Theme < 1.4.3 - PHP Object Injecti… |
BoldThemes |
DentiCare |
2025-12-18T07:21:49.313Z | 2026-02-03T16:04:44.922Z |
| CVE-2025-54741 |
8.6 (3.1)
|
WordPress Super Blank Plugin <= 1.2.0 - Arbitrary Cont… |
Tyler Moore |
Super Blank |
2025-12-18T07:21:49.496Z | 2026-02-03T16:03:36.275Z |
| CVE-2026-24001 |
2.7 (4.0)
|
jsdiff has a Denial of Service vulnerability in parseP… |
kpdecker |
jsdiff |
2026-01-22T02:23:44.059Z | 2026-02-03T16:03:16.859Z |
| CVE-2026-24694 |
7.8 (3.0)
8.4 (4.0)
|
The installer for Roland Cloud Manager ver.3.1.19… |
Roland Corporation |
Roland Cloud Manager |
2026-02-03T05:27:56.739Z | 2026-02-03T16:01:27.410Z |
| CVE-2026-23794 |
N/A
|
Apache Syncope: Reflected XSS on Enduser Login |
Apache Software Foundation |
Apache Syncope |
2026-02-03T15:15:24.310Z | 2026-02-03T16:01:22.030Z |
| CVE-2026-23795 |
N/A
|
Apache Syncope: Console XXE on Keymaster parameters |
Apache Software Foundation |
Apache Syncope |
2026-02-03T15:14:35.448Z | 2026-02-03T16:00:32.112Z |
| CVE-2025-14274 |
5.4 (3.1)
|
Unlimited Elements for Elementor <= 2.0.1 - Authentica… |
unitecms |
Unlimited Elements For Elementor |
2026-02-03T05:30:13.892Z | 2026-02-03T15:59:25.552Z |
| CVE-2026-0950 |
5.3 (3.1)
|
Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated … |
brainstormforce |
Spectra Gutenberg Blocks – Website Builder for the Block Editor |
2026-02-03T05:30:14.865Z | 2026-02-03T15:57:03.562Z |
| CVE-2026-20704 |
4.3 (3.0)
5.1 (4.0)
|
Cross-site request forgery vulnerability exists i… |
ELECOM CO.,LTD. |
WRC-X1500GS-B |
2026-02-03T06:56:42.019Z | 2026-02-03T15:56:26.479Z |
| CVE-2026-22550 |
7.2 (3.0)
8.6 (4.0)
|
OS command injection vulnerability exists in WRC-… |
ELECOM CO.,LTD. |
WRC-X1500GS-B |
2026-02-03T06:56:59.277Z | 2026-02-03T15:55:14.398Z |
| CVE-2026-24449 |
4.6 (3.0)
5.1 (4.0)
|
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial… |
ELECOM CO.,LTD. |
WRC-X1500GS-B |
2026-02-03T06:57:20.505Z | 2026-02-03T15:54:07.198Z |
| CVE-2026-24998 |
5.3 (3.1)
|
WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Ex… |
WPMU DEV - Your All-in-One WordPress Platform |
Hustle |
2026-02-03T14:08:38.085Z | 2026-02-03T15:53:48.502Z |
| CVE-2026-24465 |
9.8 (3.0)
9.3 (4.0)
|
Stack-based buffer overflow vulnerability exists … |
ELECOM CO.,LTD. |
WAB-S733IW2-PD |
2026-02-03T06:57:51.704Z | 2026-02-03T15:47:24.584Z |
| CVE-2025-8589 |
7.6 (3.1)
|
Reflected XSS in AKCE Software's SKSPro |
AKCE Software Technology R&D Industry and Trade Inc. |
SKSPro |
2026-02-03T07:14:54.601Z | 2026-02-03T15:46:57.250Z |
| CVE-2025-66480 |
9.8 (3.1)
|
Wildfire has Arbitrary File Upload via Directory Trave… |
wildfirechat |
im-server |
2026-02-02T21:33:23.989Z | 2026-02-03T15:46:51.569Z |
| CVE-2025-8590 |
7.5 (3.1)
|
Information Disclosure in AKCE Software's SKSPro |
AKCE Software Technology R&D Industry and Trade Inc. |
SKSPro |
2026-02-03T07:19:34.965Z | 2026-02-03T15:46:29.569Z |
| CVE-2026-1375 |
8.1 (3.1)
|
Tutor LMS <= 3.9.5 - Insecure Direct Object Reference … |
themeum |
Tutor LMS – eLearning and online course solution |
2026-02-03T07:31:23.100Z | 2026-02-03T15:46:05.937Z |
| CVE-2025-69207 |
5.4 (3.1)
|
Khoj has an IDOR in Notion OAuth Flow Enables Index Po… |
khoj-ai |
khoj |
2026-02-02T21:16:49.041Z | 2026-02-03T15:45:38.393Z |
| CVE-2026-1371 |
5.3 (3.1)
|
Tutor LMS <= 3.9.5 - Authenticated (Subscriber+) Infor… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-02-03T07:31:23.720Z | 2026-02-03T15:45:34.642Z |
| CVE-2026-1730 |
8.8 (3.1)
|
OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arb… |
skirridsystems |
OS DataHub Maps |
2026-02-03T07:31:24.084Z | 2026-02-03T15:45:00.936Z |
| CVE-2025-67852 |
3.5 (3.1)
|
Moodle: moodle: open redirect vulnerability in oauth l… |
|
|
2026-02-03T10:52:09.893Z | 2026-02-03T15:44:29.178Z |
| CVE-2025-67853 |
7.5 (3.1)
|
Moodle: moodle: brute-force facilitation due to missin… |
|
|
2026-02-03T10:52:12.755Z | 2026-02-03T15:43:49.951Z |
| CVE-2025-67855 |
5.4 (3.1)
|
Mooodle: mooodle: information disclosure and script ex… |
|
|
2026-02-03T10:52:15.809Z | 2026-02-03T15:43:19.863Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1791 |
2.7 (3.1)
|
Arbitrary File Upload Vulnerability in Operation and M… |
Hillstone Networks |
Operation and Maintenance Security Gateway |
2026-02-04T03:11:30.275Z | 2026-02-04T20:19:45.301Z |
| CVE-2026-1756 |
8.8 (3.1)
|
WP FOFT Loader <= 2.1.39 - Authenticated (Author+) Arb… |
seezee |
WP FOFT Loader |
2026-02-04T06:42:37.451Z | 2026-02-04T16:59:57.807Z |
| CVE-2026-1755 |
6.4 (3.1)
|
Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Au… |
themeisle |
Menu Icons by ThemeIsle |
2026-02-03T22:22:47.333Z | 2026-02-04T14:35:12.337Z |
| CVE-2026-1633 |
10 (3.1)
10 (4.0)
|
Synectix LAN 232 TRIO Missing Authentication for Criti… |
Synectix |
LAN 232 TRIO |
2026-02-03T23:02:58.208Z | 2026-02-04T20:18:22.726Z |
| CVE-2026-1632 |
9.1 (3.1)
9.3 (4.0)
|
RISS SRL MOMA Seismic Station Missing Authentication f… |
RISS SRL |
MOMA Seismic Station |
2026-02-03T22:59:32.539Z | 2026-02-04T20:17:57.156Z |
| CVE-2026-1622 |
4.8 (4.0)
|
Unredacted data exposure in query.log |
neo4j |
Enterprise Edition |
2026-02-04T09:14:46.320Z | 2026-02-04T15:12:37.400Z |
| CVE-2026-1580 |
8.8 (3.1)
|
ingress-nginx auth-method nginx configuration injection |
Kubernetes |
ingress-nginx |
2026-02-03T22:16:47.223Z | 2026-02-06T03:14:22.819Z |
| CVE-2026-1370 |
4.9 (3.1)
|
SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) S… |
comprassibs |
SIBS woocommerce payment gateway |
2026-02-04T08:25:33.253Z | 2026-02-04T15:18:10.439Z |
| CVE-2026-1341 |
9.3 (4.0)
|
Missing Authentication for Critical Function in Avatio… |
Avation |
Avation Light Engine Pro |
2026-02-03T21:26:41.708Z | 2026-02-04T16:47:32.531Z |
| CVE-2026-0873 |
4.8 (4.0)
|
Privilege Elevation in Ercom Cryptobox administration … |
Ercom |
Cryptobox |
2026-02-04T10:42:14.626Z | 2026-02-04T14:56:23.511Z |
| CVE-2026-0816 |
4.9 (3.1)
|
All push notification for WP <= 1.5.3 - Authenticated … |
gtlwpdev |
All push notification for WP |
2026-02-04T08:25:34.026Z | 2026-02-04T15:13:39.572Z |
| CVE-2026-0743 |
4.4 (3.1)
|
WP Content Permission <= 1.2 - Authenticated (Administ… |
orenhav |
WP Content Permission |
2026-02-04T08:25:32.820Z | 2026-02-04T16:53:12.830Z |
| CVE-2026-0742 |
6.4 (3.1)
|
Smart Appointment & Booking <= 1.0.7 - Authenticated (… |
zealopensource |
Smart Appointment & Booking |
2026-02-04T08:25:32.460Z | 2026-02-04T16:52:48.316Z |
| CVE-2026-0681 |
4.4 (3.1)
|
Extended Random Number Generator <= 1.1 - Authenticate… |
rtddev |
Extended Random Number Generator |
2026-02-04T08:25:29.711Z | 2026-02-04T17:01:08.520Z |
| CVE-2026-0679 |
5.3 (3.1)
|
Fortis for WooCommerce <= 1.2.0 - Missing Authorizatio… |
fortispay |
Fortis for WooCommerce |
2026-02-04T08:25:31.970Z | 2026-02-04T16:51:34.991Z |
| CVE-2026-0620 |
6 (4.0)
|
L2TP over IPSec Encryption Failure on ArcherAXE75 |
TP-Link Systems Inc. |
AXE75 |
2026-02-03T18:05:44.077Z | 2026-02-04T20:46:15.816Z |
| CVE-2026-0572 |
6.5 (3.1)
|
WebPurify Profanity Filter <= 4.0.2 - Missing Authoriz… |
webpurify |
WebPurify Profanity Filter |
2026-02-04T08:25:31.042Z | 2026-02-04T16:49:05.287Z |
| CVE-2025-71192 |
N/A
|
ALSA: ac97: fix a double free in snd_ac97_controller_r… |
Linux |
Linux |
2026-02-04T16:00:23.044Z | 2026-02-09T08:36:17.217Z |
| CVE-2025-65081 |
6.9 (4.0)
|
Out-of-bounds read vulnerability in Postscript interpreter |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:39:14.501Z | 2026-02-04T04:56:07.648Z |
| CVE-2025-65080 |
6.9 (4.0)
|
Type confusion vulnerability in Postscript interpreter |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:35:54.592Z | 2026-02-04T04:56:06.362Z |
| CVE-2025-65079 |
6.9 (4.0)
|
Heap-based buffer overflow vulnerability in Postscript… |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:23:24.405Z | 2026-02-04T04:56:05.225Z |
| CVE-2025-65078 |
9.3 (4.0)
|
Untrusted search path vulnerability in Embedded Soluti… |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:51:20.556Z | 2026-02-06T04:55:26.157Z |
| CVE-2025-65077 |
8.8 (4.0)
|
Relative path traversal vulnerability in Embedded Solu… |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:44:32.330Z | 2026-02-06T04:55:27.123Z |
| CVE-2025-64438 |
1.7 (4.0)
|
Fast-DDS: Unbounded GAP range triggers OOM DoS under R… |
eProsima |
Fast-DDS |
2026-02-03T19:32:22.265Z | 2026-02-03T20:30:50.310Z |
| CVE-2025-64098 |
1.7 (4.0)
|
FastDDS has Out-of-memory in readOctetVector via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:29:09.168Z | 2026-02-03T20:36:46.443Z |
| CVE-2025-62799 |
7.2 (4.0)
|
FastDDS's heap buffer overflow in RTPS DATA_FRAG enabl… |
eProsima |
Fast-DDS |
2026-02-03T19:26:22.397Z | 2026-02-03T20:40:35.185Z |
| CVE-2025-62603 |
1.7 (4.0)
|
FastDDS has Out-of-memory while parsing GenericMessage… |
eProsima |
Fast-DDS |
2026-02-03T19:23:38.191Z | 2026-02-03T20:44:12.618Z |
| CVE-2025-62602 |
1.7 (4.0)
|
FastDDS has heap buffer overflow in readData via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:20:55.963Z | 2026-02-03T20:54:07.544Z |
| CVE-2025-62601 |
1.7 (4.0)
|
FastDDS has heap buffer overflow in readString via Man… |
eProsima |
Fast-DDS |
2026-02-03T19:16:20.692Z | 2026-02-03T21:11:05.836Z |
| CVE-2025-62600 |
1.7 (4.0)
|
FastDDS has Out-of-Memory in readPropertySeq via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:11:19.429Z | 2026-02-03T19:48:12.163Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-0743 | The WP Content Permission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 2026-02-04T09:15:52.653 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0742 | The Smart Appointment & Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting v… | 2026-02-04T09:15:52.477 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0681 | The Extended Random Number Generator plugin for WordPress is vulnerable to Stored Cross-Site Script… | 2026-02-04T09:15:52.313 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0679 | The Fortis for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to an inv… | 2026-02-04T09:15:52.143 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0620 | When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without… | 2026-02-03T19:16:15.580 | 2026-02-04T16:33:44.537 |
| fkie_cve-2026-0572 | The WebPurify Profanity Filter plugin for WordPress is vulnerable to unauthorized modification of d… | 2026-02-04T09:15:51.970 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-71192 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free … | 2026-02-04T16:16:18.770 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65081 | An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Le… | 2026-02-03T21:16:11.737 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65080 | A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark… | 2026-02-03T21:16:11.577 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65079 | A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in var… | 2026-02-03T21:16:11.420 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65078 | An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in v… | 2026-02-03T21:16:11.280 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-65077 | A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in … | 2026-02-03T21:16:11.120 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-64438 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.280 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-64098 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.127 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62799 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.983 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62603 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.787 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62602 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.640 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62601 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.493 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62600 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T19:16:14.170 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-5329 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-04T14:16:08.840 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-41085 | Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG im… | 2026-02-04T10:16:03.270 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-36094 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 … | 2026-02-03T23:16:05.780 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-36033 | IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim … | 2026-02-03T23:16:05.620 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-29867 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom O… | 2026-02-04T05:16:06.620 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15508 | The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exp… | 2026-02-04T09:15:51.547 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15507 | The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification… | 2026-02-04T09:15:51.377 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15487 | The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and i… | 2026-02-04T09:15:51.207 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15482 | The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive In… | 2026-02-04T09:15:51.033 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15368 | The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a… | 2026-02-04T14:16:08.673 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15285 | The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data … | 2026-02-04T09:15:50.863 | 2026-02-04T16:33:44.537 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9256-w668-cg6v |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted elemen… | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-8m3g-w86x-w9wc |
8.6 (3.1)
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-75ww-9jqw-jwf8 |
6.4 (3.1)
5.1 (4.0)
|
Dolibarr 11.0.3 contains a persistent cross-site scripting vulnerability in LDAP synchronization se… | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-6jrw-wp7c-r8q8 |
6.4 (3.1)
5.1 (4.0)
|
OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's … | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-64w2-cvg8-q3c3 |
7.8 (3.1)
8.5 (4.0)
|
Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows s… | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-3vjv-ww5h-3x77 |
6.4 (3.1)
5.1 (4.0)
|
Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input … | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-2xxq-pq3h-297f |
8.8 (3.1)
7.4 (4.0)
|
A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function s… | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-286p-xvv8-3qx5 |
6.4 (3.1)
5.1 (4.0)
|
Sellacious eCommerce 4.6 contains a persistent cross-site scripting vulnerability in the Manage You… | 2026-01-30T18:31:15Z | 2026-01-30T18:31:15Z |
| ghsa-j822-wp67-3ww6 |
7.1 (3.1)
|
A maliciously crafted HTML payload, stored in a component’s description and clicked by a user, can … | 2026-01-22T18:30:39Z | 2026-01-30T18:31:14Z |
| ghsa-4rcj-vhqg-6g52 |
7.1 (3.1)
|
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger… | 2026-01-22T18:30:39Z | 2026-01-30T18:31:14Z |
| ghsa-h2w2-28mj-m289 |
3.5 (3.1)
|
HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard … | 2026-01-19T18:30:27Z | 2026-01-30T18:31:13Z |
| ghsa-cfwp-mmqm-9vrh |
3.1 (3.1)
|
HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of… | 2026-01-19T21:33:11Z | 2026-01-30T18:31:13Z |
| ghsa-9crm-342q-wg6v |
5.4 (3.1)
8.4 (4.0)
|
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitH… | 2026-01-06T21:30:34Z | 2026-01-30T18:31:12Z |
| ghsa-cqc3-xrjw-8pwv |
4.3 (3.1)
|
The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting… | 2021-11-30T00:00:51Z | 2026-01-30T18:31:10Z |
| ghsa-73rr-hh4g-fpgx |
2.7 (4.0)
|
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch | 2026-01-14T21:34:12Z | 2026-01-30T17:13:35Z |
| ghsa-rv8x-5qhg-m8hq |
4.6 (3.1)
|
Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affecte… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-qqgm-c595-2xpg |
5.8 (4.0)
|
Chef InSpec up to version 5.23 creates named pipes with overly permissive default Windows access co… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-hc69-r6rr-hmxf |
5.3 (3.1)
5.5 (4.0)
|
A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationRel… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-frg8-29h3-wvgf |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the fu… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-75v6-gf74-7fjw |
7.0 (4.0)
|
An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attack… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-4v8j-92c3-9f2f |
5.3 (3.1)
6.9 (4.0)
|
A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function Handle… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-4h4g-2r65-5v68 |
3.7 (3.1)
2.9 (4.0)
|
A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function s… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-2p6p-hqq4-q469 |
8.4 (4.0)
|
Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL. | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-hm5p-82g6-m3xh |
6.0 (4.0)
|
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac | 2026-01-30T14:43:18Z | 2026-01-30T14:43:18Z |
| ghsa-vj87-jj27-4h9c |
9.3 (4.0)
|
wolfSSL Python module vulnerable to Improper Authentication | 2026-01-08T00:31:15Z | 2026-01-30T14:41:49Z |
| ghsa-xw74-3hjf-3xpv |
|
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlo… | 2025-12-22T18:30:25Z | 2026-01-30T12:31:20Z |
| ghsa-x689-8m9r-8332 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM op… | 2025-05-20T18:30:56Z | 2026-01-30T12:31:20Z |
| ghsa-vf8g-fqmm-6vc5 |
4.6 (3.1)
|
Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitiv… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-rqq8-2mxg-mgr6 |
4.9 (3.1)
|
Due to insufficient input parameter validation on the interface, authenticated users of certain HIK… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-r8f6-f62h-4px7 |
9.5 (4.0)
|
Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements u… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2014-2 |
|
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, an… | django | 2014-04-23T15:55:00Z | 2021-07-05T00:01:18.594368Z |
| pysec-2014-1 |
|
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6… | django | 2014-04-23T15:55:00Z | 2021-07-05T00:01:18.476528Z |
| pysec-2012-4 |
|
The get_image_dimensions function in the image-handling functionality in Django before 1.… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.369979Z |
| pysec-2012-3 |
|
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x bef… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.288820Z |
| pysec-2012-2 |
|
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirec… | django | 2012-07-31T17:55:00Z | 2021-07-05T00:01:18.211806Z |
| pysec-2011-5 |
|
The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not pr… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:18.129041Z |
| pysec-2011-4 |
|
Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:18.041571Z |
| pysec-2019-150 |
|
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection c… | bodhi | 2019-01-10T21:29:00Z | 2021-07-05T00:01:17.244288Z |
| pysec-2019-149 |
|
In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authentica… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.060541Z |
| pysec-2019-148 |
|
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command in… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.030004Z |
| pysec-2019-147 |
|
In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on t… | apache-airflow | 2019-01-23T17:29:00Z | 2021-07-05T00:01:17.000324Z |
| pysec-2018-46 |
|
Anymail django-anymail version version 0.2 through 1.3 contains a CWE-532, CWE-209 vulner… | django-anymail | 2018-03-13T15:29:00Z | 2021-07-05T00:01:17.580240Z |
| pysec-2017-8 |
|
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less… | cryptography | 2017-03-27T17:59:00Z | 2021-07-05T00:01:17.464237Z |
| pysec-2017-7 |
|
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website own… | cfscrape | 2017-03-23T04:59:00Z | 2021-07-05T00:01:17.351047Z |
| pysec-2017-6 |
|
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote… | attic | 2017-08-18T16:29:00Z | 2021-07-05T00:01:17.176184Z |
| pysec-2017-11 |
|
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before… | django-cms | 2017-08-18T18:29:00Z | 2021-07-05T00:01:17.665929Z |
| pysec-2015-3 |
|
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/c… | ceph-deploy | 2015-06-08T14:59:00Z | 2021-07-05T00:01:17.307671Z |
| pysec-2015-2 |
|
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring,… | ceph-deploy | 2015-06-16T16:59:00Z | 2021-07-05T00:01:17.275200Z |
| pysec-2015-12 |
|
django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTING… | django-markupfield | 2015-04-24T14:59:00Z | 2021-07-05T00:01:17.695542Z |
| pysec-2012-1 |
|
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode… | beaker | 2012-09-15T17:55:00Z | 2021-07-05T00:01:17.212849Z |
| pysec-2011-3 |
|
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.957407Z |
| pysec-2011-2 |
|
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and… | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.875375Z |
| pysec-2011-1 |
|
django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data … | django | 2011-10-19T10:55:00Z | 2021-07-05T00:01:17.786807Z |
| pysec-2006-1 |
|
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 … | cherrypy | 2006-02-22T02:02:00Z | 2021-07-05T00:01:17.388273Z |
| pysec-2018-45 |
|
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS atta… | apache-airflow | 2018-08-06T13:29:00Z | 2021-07-05T00:01:16.968952Z |
| pysec-2017-5 |
|
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault be… | ansible-vault | 2017-09-14T19:29:00Z | 2021-07-05T00:01:14.915465Z |
| pysec-2021-108 |
|
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing man… | urllib3 | 2021-06-29T11:15:00Z | 2021-07-02T18:56:20.858344Z |
| pysec-2021-107 |
|
A flaw was found in several ansible modules, where parameters containing credentials, suc… | ansible | 2021-04-01T18:15:00Z | 2021-07-02T02:41:35.257212Z |
| pysec-2021-106 |
|
A flaw was found in ansible module where credentials are disclosed in the console log by … | ansible | 2021-05-26T12:15:00Z | 2021-07-02T02:41:35.206595Z |
| pysec-2020-210 |
|
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, … | ansible | 2020-03-16T15:15:00Z | 2021-07-02T02:41:35.152435Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3378 | A vulnerability has been found in iboss Secure Web Gateway up to 10.1 and classified as p… | 2024-04-11T05:03:27.124885Z |
| gsd-2024-3377 | A vulnerability classified as problematic was found in SourceCodester Computer Laboratory… | 2024-04-11T05:03:27.339976Z |
| gsd-2024-3376 | A vulnerability classified as critical has been found in SourceCodester Computer Laborato… | 2024-04-11T05:03:27.067437Z |
| gsd-2024-3375 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.290322Z |
| gsd-2024-3374 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.054372Z |
| gsd-2024-3373 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.177974Z |
| gsd-2024-3372 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.302233Z |
| gsd-2024-3371 | MongoDB Compass may accept and use insufficiently validated input from an untrusted exter… | 2024-04-11T05:03:27.371311Z |
| gsd-2024-3370 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.325529Z |
| gsd-2024-3369 | A vulnerability, which was classified as critical, has been found in code-projects Car Re… | 2024-04-11T05:03:27.316890Z |
| gsd-2024-3368 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.131853Z |
| gsd-2024-3367 | Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p25 and <2… | 2024-04-11T05:03:27.404908Z |
| gsd-2024-3366 | A vulnerability classified as problematic was found in Xuxueli xxl-job up to 2.4.1. This … | 2024-04-11T05:03:27.416780Z |
| gsd-2024-3365 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been rated … | 2024-04-11T05:03:27.039816Z |
| gsd-2024-3364 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been declar… | 2024-04-11T05:03:27.123181Z |
| gsd-2024-3363 | A vulnerability was found in SourceCodester Online Library System 1.0. It has been classi… | 2024-04-11T05:03:27.195993Z |
| gsd-2024-3362 | A vulnerability was found in SourceCodester Online Library System 1.0 and classified as c… | 2024-04-11T05:03:27.262432Z |
| gsd-2024-3361 | A vulnerability has been found in SourceCodester Online Library System 1.0 and classified… | 2024-04-11T05:03:27.388783Z |
| gsd-2024-3360 | A vulnerability, which was classified as critical, was found in SourceCodester Online Lib… | 2024-04-11T05:03:27.343043Z |
| gsd-2024-3359 | A vulnerability, which was classified as critical, has been found in SourceCodester Onlin… | 2024-04-11T05:03:27.069232Z |
| gsd-2024-3358 | A vulnerability classified as problematic was found in SourceCodester Aplaya Beach Resort… | 2024-04-11T05:03:27.058577Z |
| gsd-2024-3357 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.246024Z |
| gsd-2024-3356 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.237199Z |
| gsd-2024-3355 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.424056Z |
| gsd-2024-3354 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.189400Z |
| gsd-2024-3353 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.269917Z |
| gsd-2024-3352 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.324860Z |
| gsd-2024-3351 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.397506Z |
| gsd-2024-3350 | A vulnerability, which was classified as critical, has been found in SourceCodester Aplay… | 2024-04-11T05:03:27.296473Z |
| gsd-2024-3349 | A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort On… | 2024-04-11T05:03:27.112880Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-191987 | Malicious code in elf-stats-starlit-ribbon-255 (npm) | 2025-12-03T15:38:17Z | 2025-12-23T21:38:09Z |
| mal-2025-192525 | Malicious code in elf-stats-silvered-wishlist-708 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T21:08:54Z |
| mal-2025-192524 | Malicious code in elf-stats-silvered-cushion-811 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T21:08:54Z |
| mal-2025-192338 | Malicious code in elf-stats-shimmering-toolkit-483 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T21:08:54Z |
| mal-2025-192275 | Malicious code in elf-stats-sleighing-mailbag-621 (npm) | 2025-12-03T19:10:54Z | 2025-12-23T21:08:54Z |
| mal-2025-192266 | Malicious code in elf-stats-silvered-star-676 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T21:08:54Z |
| mal-2025-192265 | Malicious code in elf-stats-rooftop-fireplace-499 (npm) | 2025-12-03T18:48:03Z | 2025-12-23T21:08:54Z |
| mal-2025-192264 | Malicious code in elf-stats-rooftop-cocoa-966 (npm) | 2025-12-03T18:48:03Z | 2025-12-23T21:08:54Z |
| mal-2025-192252 | Malicious code in elf-stats-sleighing-mailbag-109 (npm) | 2025-12-03T17:53:09Z | 2025-12-23T21:08:54Z |
| mal-2025-192251 | Malicious code in elf-stats-silvered-stocking-120 (npm) | 2025-12-03T17:53:05Z | 2025-12-23T21:08:54Z |
| mal-2025-192231 | Malicious code in elf-stats-snowdusted-drum-647 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| mal-2025-192230 | Malicious code in elf-stats-snowdusted-cocoa-694 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| mal-2025-192229 | Malicious code in elf-stats-sleighing-nutcracker-806 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| mal-2025-192202 | Malicious code in elf-stats-sleighing-stocking-579 (npm) | 2025-12-03T16:30:43Z | 2025-12-23T21:08:54Z |
| mal-2025-192140 | Malicious code in elf-stats-snowdusted-fireplace-396 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192138 | Malicious code in elf-stats-sleighing-lantern-878 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192136 | Malicious code in elf-stats-sleighing-hammer-214 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192135 | Malicious code in elf-stats-silvered-snowman-898 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192128 | Malicious code in elf-stats-shimmering-nightcap-245 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192124 | Malicious code in elf-stats-rooftop-hammer-580 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-192123 | Malicious code in elf-stats-rooftop-hammer-362 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| mal-2025-191977 | Malicious code in elf-stats-rooftop-stockpile-626 (npm) | 2025-12-03T12:57:17Z | 2025-12-23T21:08:54Z |
| mal-2025-191976 | Malicious code in elf-stats-sleighing-bow-514 (npm) | 2025-12-03T12:49:19Z | 2025-12-23T21:08:54Z |
| MAL-2025-192525 | Malicious code in elf-stats-silvered-wishlist-708 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T21:08:54Z |
| MAL-2025-192524 | Malicious code in elf-stats-silvered-cushion-811 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T21:08:54Z |
| MAL-2025-192338 | Malicious code in elf-stats-shimmering-toolkit-483 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T21:08:54Z |
| MAL-2025-192275 | Malicious code in elf-stats-sleighing-mailbag-621 (npm) | 2025-12-03T19:10:54Z | 2025-12-23T21:08:54Z |
| MAL-2025-192266 | Malicious code in elf-stats-silvered-star-676 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T21:08:54Z |
| MAL-2025-192265 | Malicious code in elf-stats-rooftop-fireplace-499 (npm) | 2025-12-03T18:48:03Z | 2025-12-23T21:08:54Z |
| MAL-2025-192264 | Malicious code in elf-stats-rooftop-cocoa-966 (npm) | 2025-12-03T18:48:03Z | 2025-12-23T21:08:54Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2023-1640 | cURL: Mehrere Schwachstellen | 2019-02-05T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1637 | cURL: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff | 2019-09-10T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-1015 | Oracle Health Sciences Applications: Mehrere Schwachstellen | 2023-04-18T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2023-0938 | ntp: Mehrere Schwachstellen | 2023-04-11T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1243 | RPM: Mehrere Schwachstellen | 2022-08-31T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1113 | GStreamer: Schwachstelle ermöglicht Denial of Service | 2021-06-09T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-1105 | GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service | 2021-03-31T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-0882 | libpng: Schwachstelle ermöglicht Denial of Service | 2019-02-04T23:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2022-0374 | GStreamer: Mehrere Schwachstellen | 2022-06-16T22:00:00.000+00:00 | 2025-02-04T23:00:00.000+00:00 |
| wid-sec-w-2025-0255 | Samsung Android: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0254 | IBM Security Verify Access: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0252 | Roundcube: Schwachstelle ermöglicht Cross-Site Scripting | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0251 | Google Android: Mehrere Schwachstellen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0250 | Dell PowerProtect Data Domain OS: Schwachstelle ermöglicht Offenlegung von Informationen | 2025-02-03T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0249 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-10-11T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0177 | ClamAV und Cisco Secure Endpoint: Schwachstelle ermöglicht Denial of Service | 2025-01-22T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0129 | 7-Zip: Schwachstelle ermöglicht Codeausführung | 2025-01-20T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-3660 | Apache Struts: Schwachstelle ermöglicht Codeausführung | 2024-12-10T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-2186 | Red Hat Enterprise Linux: Mehrere Schwachstellen | 2024-09-19T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-2051 | ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Dateimanipulation | 2024-09-04T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-1079 | PostgreSQL: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-05-09T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-0921 | ClamAV: Schwachstelle ermöglicht Denial of Service | 2024-04-17T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2024-0092 | Red Hat SQLite: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-01-15T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2489 | PostgreSQL: Mehrere Schwachstellen | 2016-04-03T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2090 | ClamAV & Cisco Secure Endpoint: Mehrere Schwachstellen | 2023-08-16T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0248 | Acronis Cyber Protect (Cloud Agent): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0247 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0245 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2018-01-25T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0244 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-03-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0243 | Dovecot: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2019-02-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2024:1078 | Red Hat Security Advisory: Service Telemetry Framework 1.5.4 security update | 2024-03-05T00:34:10+00:00 | 2026-02-04T13:50:50+00:00 |
| rhsa-2024:1041 | Red Hat Security Advisory: go-toolset-1.19-golang security update | 2024-02-29T09:06:38+00:00 | 2026-02-04T13:50:50+00:00 |
| rhsa-2024:0887 | Red Hat Security Advisory: go-toolset:rhel8 security update | 2024-02-20T12:38:28+00:00 | 2026-02-04T13:50:48+00:00 |
| rhsa-2024:0728 | Red Hat Security Advisory: Logging Subsystem 5.8.3 - Red Hat OpenShift | 2024-02-08T17:27:13+00:00 | 2026-02-04T13:50:46+00:00 |
| rhsa-2024:0695 | Red Hat Security Advisory: Logging 5.6.16 - Red Hat OpenShift | 2024-02-07T22:50:22+00:00 | 2026-02-04T13:50:45+00:00 |
| rhsa-2024:0694 | Red Hat Security Advisory: Logging Subsystem 5.7.11 - Red Hat OpenShift | 2024-02-07T18:45:43+00:00 | 2026-02-04T13:50:45+00:00 |
| rhsa-2024:0530 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-01-25T18:10:36+00:00 | 2026-02-04T13:50:43+00:00 |
| rhsa-2024:0281 | Red Hat Security Advisory: Secondary Scheduler Operator for Red Hat OpenShift 1.2.1 for RHEL 9 | 2024-03-06T14:39:54+00:00 | 2026-02-04T13:50:42+00:00 |
| rhba-2024:1440 | Red Hat Bug Fix Advisory: MTV 2.5.6 Images | 2024-03-20T11:13:11+00:00 | 2026-02-04T13:50:28+00:00 |
| rhsa-2026:0173 | Red Hat Security Advisory: kernel security update | 2026-01-07T01:07:25+00:00 | 2026-02-04T12:57:16+00:00 |
| rhsa-2025:22395 | Red Hat Security Advisory: kernel security update | 2025-12-01T09:41:22+00:00 | 2026-02-04T12:56:45+00:00 |
| rhsa-2025:21469 | Red Hat Security Advisory: kernel security update | 2025-11-17T09:52:08+00:00 | 2026-02-04T12:56:39+00:00 |
| rhsa-2025:21933 | Red Hat Security Advisory: kernel security update | 2025-11-24T10:44:17+00:00 | 2026-02-04T12:56:37+00:00 |
| rhsa-2025:21920 | Red Hat Security Advisory: kernel-rt security update | 2025-11-24T06:25:11+00:00 | 2026-02-04T12:56:35+00:00 |
| rhsa-2025:21917 | Red Hat Security Advisory: kernel security update | 2025-11-24T02:50:01+00:00 | 2026-02-04T12:56:30+00:00 |
| rhsa-2025:0323 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.13 Bug Fix Update | 2025-01-15T01:19:29+00:00 | 2026-02-04T12:56:05+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-02-04T12:56:01+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-02-04T12:56:00+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-02-04T12:55:57+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-02-04T12:55:54+00:00 |
| rhsa-2024:7706 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-07T01:12:29+00:00 | 2026-02-04T12:55:52+00:00 |
| rhsa-2024:10214 | Red Hat Security Advisory: Red Hat Data Grid 8.5.2 security update | 2024-11-25T16:56:04+00:00 | 2026-02-04T12:55:46+00:00 |
| rhsa-2017:2534 | Red Hat Security Advisory: thunderbird security update | 2017-08-24T06:45:27+00:00 | 2026-02-04T12:55:30+00:00 |
| rhsa-2017:2456 | Red Hat Security Advisory: firefox security update | 2017-08-10T23:20:02+00:00 | 2026-02-04T12:55:26+00:00 |
| rhsa-2025:0542 | Red Hat Security Advisory: JBoss EAP XP 5.0 Update 1.0 release. See references for release notes. | 2025-01-21T17:55:49+00:00 | 2026-02-04T12:55:24+00:00 |
| rhsa-2024:7052 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) | 2024-09-24T12:51:36+00:00 | 2026-02-04T12:55:18+00:00 |
| rhsa-2025:9563 | Red Hat Security Advisory: OpenShift Container Platform 4.20.0 security and extras update | 2025-10-21T03:27:40+00:00 | 2026-02-04T09:40:58+00:00 |
| rhsa-2025:22863 | Red Hat Security Advisory: OpenShift Container Platform 4.17.45 CNF IBU extras update | 2025-12-08T16:08:23+00:00 | 2026-02-04T09:40:56+00:00 |
| rhsa-2025:2223 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2025-03-04T14:40:23+00:00 | 2026-02-04T09:40:54+00:00 |
| rhsa-2025:19357 | Red Hat Security Advisory: OpenShift Container Platform 4.16.51 CNF IBU extras update | 2025-10-30T15:22:05+00:00 | 2026-02-04T09:40:53+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-056-02 | FATEK Automation FvDesigner | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-056-01 | PerFact OpenVPN-Client | 2021-02-25T00:00:00.000000Z | 2021-02-25T00:00:00.000000Z |
| icsa-21-054-03 | Advantech Spectre RT Industrial Routers | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-02 | Advantech BB-ESWGP506-2SFP-T | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-054-01 | Rockwell Automation FactoryTalk Services Platform | 2021-02-23T00:00:00.000000Z | 2021-02-23T00:00:00.000000Z |
| icsa-21-049-01 | Johnson Controls Metasys Reporting Engine (MRE) Web Services | 2021-02-18T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsa-21-012-01 | Schneider Electric EcoStruxure Power Build-Rapsody (Update A) | 2021-01-12T00:00:00.000000Z | 2021-02-18T00:00:00.000000Z |
| icsma-21-047-01 | Hamilton-T1 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-047-02 | Rockwell Automation Allen-Bradley Micrologix 1100 | 2021-02-16T00:00:00.000000Z | 2021-02-16T00:00:00.000000Z |
| icsa-21-042-02 | Rockwell Automation DriveTools SP and Drives AOP | 2021-02-11T00:00:00.000000Z | 2021-02-11T00:00:00.000000Z |
| icsa-21-040-10 | Siemens DIGSI 4 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-09 | SIMATIC WinCC Graphics Designer | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-07 | Siemens SCALANCE W780 and W740 | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-04 | Siemens RUGGEDCOM ROX II | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-03 | Siemens SINEMA Server & SINEC NMS | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-02 | Advantech iView | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-040-01 | GE Digital HMI/SCADA iFIX | 2021-02-09T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-20-105-04 | Siemens Climatix (Update A) | 2020-04-14T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-19-162-04 | Siemens SCALANCE X (Update B) | 2019-06-11T00:00:00.000000Z | 2021-02-09T00:00:00.000000Z |
| icsa-21-035-02 | Horner Automation Cscape | 2021-02-04T00:00:00.000000Z | 2021-02-04T00:00:00.000000Z |
| icsa-21-033-02 | Siemens SIMATIC HMI Comfort Panels & SIMATIC HMI KTP Mobile Panels | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-028-01 | Rockwell Automation FactoryTalk Linx and FactoryTalk Services Platform | 2021-01-28T00:00:00.000000Z | 2021-01-28T00:00:00.000000Z |
| icsa-21-026-01 | Fuji Electric Tellus Lite V-Simulator and V-Server Lite | 2021-01-26T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-21-007-03 | Eaton EASYsoft (Update A) | 2021-01-07T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-20-353-01 | Treck TCP/IP Stack (Update A) | 2020-12-18T00:00:00.000000Z | 2021-01-26T00:00:00.000000Z |
| icsa-21-021-03 | Honeywell OPC UA Tunneller | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-02 | Delta Electronics TPEditor | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsa-21-021-01 | Delta Electronics ISPSoft | 2021-01-21T00:00:00.000000Z | 2021-01-21T00:00:00.000000Z |
| icsma-21-019-01 | Philips Interventional Workstations | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| icsa-21-019-02 | Reolink P2P Cameras | 2021-01-19T00:00:00.000000Z | 2021-01-19T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-anyconnect-mac-dos-36s2y3Lv | Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability | 2020-07-01T16:00:00+00:00 | 2020-07-01T16:00:00+00:00 |
| cisco-sa-phone-logs-2o7f7exm | Cisco IP Phones Call Log Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-18T14:54:30+00:00 |
| cisco-sa-phone-logs-2O7f7ExM | Cisco IP Phones Call Log Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-18T14:54:30+00:00 |
| cisco-sa-xracl-zbwswret | Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-xracl-zbWSWREt | Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-token-zpvejkn | Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-token-zPvEjKN | Cisco Webex Meetings and Cisco Webex Meetings Server Token Handling Unauthorized Access Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-client-mac-x7vp65bl | Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-webex-client-mac-X7vp65BL | Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-umbrella-open-redire-ugk9dwk4 | Cisco Umbrella Open Redirect Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-umbrella-open-redire-UgK9dWK4 | Cisco Umbrella Open Redirect Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-task-path-trav-d67zuak7 | Cisco UCS Director Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-task-path-trav-d67ZuAk7 | Cisco UCS Director Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-info-disclosure-gsmu8ekt | Cisco UCS Director Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-ucsd-info-disclosure-gSMU8EKT | Cisco UCS Director Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-tp-cmd-inj-7zpwhvzb | Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-tp-cmd-inj-7ZpWhvZb | Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-stack-vuxhmnnz | Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-stack-vUxHmnNz | Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-injection-twc7krkq | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-rv-routers-injection-tWC7krKQ | Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpqrfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-on-prem-access-ctrl-fpQRfdpf | Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-wdnvbtnq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nso-info-disclosure-WdNvBTNq | Cisco Network Services Orchestrator Information Disclosure Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-shmzzwvr | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-nfvis-ptrav-SHMzzwVR | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-zepdxy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-famp-ZEpdXy | Cisco AMP for Endpoints and ClamAV Privilege Escalation Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-esa-url-bypass-wo4bz75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-24534 | Excessive memory allocation in net/http and net/textproto | 2023-04-01T00:00:00.000Z | 2025-09-03T22:40:02.000Z |
| msrc_cve-2024-49939 | wifi: rtw89: avoid to add interface to list twice when SER | 2024-10-01T07:00:00.000Z | 2025-09-03T22:39:44.000Z |
| msrc_cve-2024-52981 | An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow. | 2025-04-02T00:00:00.000Z | 2025-09-03T22:38:10.000Z |
| msrc_cve-2024-36012 | Bluetooth: msft: fix slab-use-after-free in msft_do_close() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:38:10.000Z |
| msrc_cve-2024-46751 | btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() | 2024-09-01T07:00:00.000Z | 2025-09-03T22:38:08.000Z |
| msrc_cve-2023-45857 | An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. | 2023-11-01T07:00:00.000Z | 2025-09-03T22:38:03.000Z |
| msrc_cve-2024-57256 | An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:38:00.000Z |
| msrc_cve-2023-52584 | spmi: mediatek: Fix UAF on device remove | 2024-03-02T08:00:00.000Z | 2025-09-03T22:37:27.000Z |
| msrc_cve-2014-4607 | Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run. | 2020-02-02T00:00:00.000Z | 2025-09-03T22:36:44.000Z |
| msrc_cve-2024-56784 | drm/amd/display: Adding array index check to prevent memory corruption | 2025-01-02T00:00:00.000Z | 2025-09-03T22:36:39.000Z |
| msrc_cve-2023-45929 | S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr(). | 2024-03-02T08:00:00.000Z | 2025-09-03T22:36:34.000Z |
| msrc_cve-2024-41066 | ibmvnic: Add tx check to prevent skb leak | 2024-07-01T07:00:00.000Z | 2025-09-03T22:36:21.000Z |
| msrc_cve-2024-3220 | Default mimetype known files writeable on Windows | 2025-02-02T00:00:00.000Z | 2025-09-03T22:36:11.000Z |
| msrc_cve-2025-8836 | JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion | 2025-08-02T00:00:00.000Z | 2025-09-03T22:35:09.000Z |
| msrc_cve-2022-24791 | Use after free in Wasmtime | 2022-03-02T00:00:00.000Z | 2025-09-03T22:34:55.000Z |
| msrc_cve-2023-52591 | reiserfs: Avoid touching renamed directory if parent does not change | 2024-03-02T08:00:00.000Z | 2025-09-03T22:34:49.000Z |
| msrc_cve-2025-37743 | wifi: ath12k: Avoid memory leak while enabling statistics | 2025-05-02T00:00:00.000Z | 2025-09-03T22:34:36.000Z |
| msrc_cve-2025-38617 | net/packet: fix a race in packet_set_ring() and packet_notifier() | 2025-08-02T00:00:00.000Z | 2025-09-03T22:34:22.000Z |
| msrc_cve-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 2021-02-02T00:00:00.000Z | 2025-09-03T22:33:59.000Z |
| msrc_cve-2019-14193 | An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length. | 2019-07-02T00:00:00.000Z | 2025-09-03T22:33:58.000Z |
| msrc_cve-2025-38414 | wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 | 2025-07-02T00:00:00.000Z | 2025-09-03T22:33:00.000Z |
| msrc_cve-2023-52601 | jfs: fix array-index-out-of-bounds in dbAdjTree | 2024-03-02T08:00:00.000Z | 2025-09-03T22:32:54.000Z |
| msrc_cve-2023-45927 | S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf(). | 2024-03-02T08:00:00.000Z | 2025-09-03T22:32:27.000Z |
| msrc_cve-2025-0913 | Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall | 2025-06-02T00:00:00.000Z | 2025-09-03T22:32:05.000Z |
| msrc_cve-2024-43895 | drm/amd/display: Skip Recompute DSC Params if no Stream on Link | 2024-08-02T00:00:00.000Z | 2025-09-03T22:32:03.000Z |
| msrc_cve-2025-1767 | This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable. | 2025-03-02T00:00:00.000Z | 2025-09-03T22:31:42.000Z |
| msrc_cve-2024-11235 | Reference counting in php_request_shutdown causes Use-After-Free | 2025-04-02T00:00:00.000Z | 2025-09-03T22:31:40.000Z |
| msrc_cve-2024-3660 | Arbitrary code injection vulnerability in Keras framework < 2.13 | 2024-04-02T07:00:00.000Z | 2025-09-03T22:31:36.000Z |
| msrc_cve-2025-38206 | exfat: fix double free in delayed_free | 2025-07-02T00:00:00.000Z | 2025-09-03T22:31:13.000Z |
| msrc_cve-2022-24999 | qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such as a[__proto__]=b&a[__proto__]&a[length]=100000000. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4 (and therefore Express 4.17.3, which has "deps: qs@6.9.7" in its release description, is not vulnerable). | 2022-11-02T00:00:00.000Z | 2025-09-03T22:31:12.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13559-1 | libnss_slurm2-23.02.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13558-1 | perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13557-1 | gstreamer-plugins-bad-1.22.8-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13556-1 | libwireshark17-4.2.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13555-1 | libQt6Concurrent6-6.6.1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13554-1 | proftpd-1.3.8b-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13553-1 | libQt5Bootstrap-devel-static-32bit-5.15.12+kde147-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13552-1 | libjpeg-turbo-3.0.1-77.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13551-1 | gdk-pixbuf-loader-libheif-1.17.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13550-1 | libcryptopp-devel-8.9.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13549-1 | bsdtar-3.7.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13548-1 | ghostscript-9.56.1-8.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13547-1 | kernel-devel-6.6.9-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13546-1 | libmosquitto1-2.0.18-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13545-1 | liblog4cxx-devel-1.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13544-1 | libredwg-devel-0.12.5.6924-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13543-1 | exim-4.97.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13542-1 | cargo-audit-advisory-db-20231219-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13541-1 | deepin-compressor-5.12.13-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13540-1 | libxerces-c-3_2-3.2.5-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13539-1 | proftpd-1.3.8b-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13538-1 | postfix-3.8.4-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13537-1 | cJSON-devel-1.7.17-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13536-1 | deepin-reader-5.10.23-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13535-1 | zabbix-agent-6.0.25-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13534-1 | avif-tools-1.0.3-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13533-1 | cacti-1.2.26-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13532-1 | nodejs-electron-27.2.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13531-1 | MozillaFirefox-121.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13530-1 | ssh-audit-3.1.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-dotnet-2025-21171 | .NET Remote Code Execution Vulnerability | 2025-02-06T07:10:17.782Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-43499 | .NET and Visual Studio Denial of Service Vulnerability | 2024-11-20T07:08:52.493Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-43498 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-11-20T07:09:17.692Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-43485 | .NET and Visual Studio Denial of Service Vulnerability | 2024-10-22T07:08:41.106Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-43484 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 2024-10-22T07:09:04.708Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-43483 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 2024-10-22T07:09:27.117Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-38229 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-10-17T19:11:02.919Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-38168 | .NET and Visual Studio Denial of Service Vulnerability | 2024-08-17T07:17:03.951Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-38167 | .NET and Visual Studio Information Disclosure Vulnerability | 2024-08-17T07:17:18.748Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-38095 | .NET and Visual Studio Denial of Service Vulnerability | 2024-07-12T07:17:04.616Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-38081 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2024-08-20T07:18:07.714Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-35264 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-07-20T07:17:07.352Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-30105 | .NET and Visual Studio Denial of Service Vulnerability | 2024-07-20T07:17:25.261Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-30046 | Visual Studio Denial of Service Vulnerability | 2024-06-04T09:38:50.507Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-30045 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-06-04T09:39:07.406Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-26190 | Microsoft QUIC Denial of Service Vulnerability | 2024-06-04T09:39:22.706Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-21409 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2024-06-04T09:39:37.204Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-21392 | .NET and Visual Studio Denial of Service Vulnerability | 2024-06-04T09:39:52.406Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-21319 | Microsoft Identity Denial of service vulnerability | 2024-03-06T10:51:16.762Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2024-20672 | .NET Denial of Service Vulnerability | 2024-03-06T10:51:30.677Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-38178 | .NET Core and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:52:28.462Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-38171 | Microsoft QUIC Denial of Service Vulnerability | 2024-03-06T10:52:42.705Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36799 | .NET Core and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:52:55.313Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36796 | Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:53:04.879Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36794 | Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:53:17.695Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36793 | Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:53:27.694Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36792 | Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:53:40.388Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36558 | ASP.NET Core Security Feature Bypass Vulnerability | 2024-03-06T10:53:49.580Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36435 | Microsoft QUIC Denial of Service Vulnerability | 2024-03-06T10:54:00.604Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-36049 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:54:10.094Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-201903-1269 | An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensiti… | 2024-02-20T02:20:23.008000Z |
| var-201708-0889 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS … | 2024-02-20T02:13:05.846000Z |
| var-202001-0382 | D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrar… | 2024-02-20T02:07:33.655000Z |
| var-202203-0142 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15… | 2024-02-20T01:13:41.562000Z |
| var-202008-1215 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between seriali… | 2024-02-20T01:12:46.882000Z |
| var-200609-1118 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key… | 2024-02-20T00:26:20.655000Z |
| var-202107-1585 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be craf… | 2024-02-20T00:22:37.524000Z |
| var-202101-1933 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between seriali… | 2024-02-19T23:19:28.257000Z |
| var-202009-1633 | FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between seriali… | 2024-02-19T22:54:37.042000Z |
| var-202309-0579 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.739000Z |
| var-202309-0576 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.758000Z |
| var-202309-0574 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visua… | 2024-02-17T22:35:48.694000Z |
| var-202204-1722 | A vulnerability in the VPN web client services component of Cisco Adaptive Security Appli… | 2024-02-17T22:29:38.170000Z |
| var-202107-1611 | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supp… | 2024-02-17T21:15:00.385000Z |
| var-202402-1506 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to ins… | 2024-02-16T22:51:30.771000Z |
| var-202402-0244 | In Modem NL1, there is a possible system crash due to an improper input validation. This … | 2024-02-16T22:51:30.990000Z |
| var-202310-2079 | Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK… | 2024-02-16T22:46:04.083000Z |
| var-202210-1176 | D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via t… | 2024-02-16T22:39:18.597000Z |
| var-202201-1251 | graphql-go is a GraphQL server with a focus on ease of use. In versions prior to 1.3.0 th… | 2024-02-16T22:38:44.331000Z |
| var-202206-1272 | Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write… | 2024-02-16T22:38:43.560000Z |
| var-202402-0736 | Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allow… | 2024-02-16T22:38:38.474000Z |
| var-202402-1514 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some inst… | 2024-02-16T22:33:21.305000Z |
| var-202402-1475 | Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to versi… | 2024-02-15T23:17:49.723000Z |
| var-202402-1457 | Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 … | 2024-02-15T23:15:43.867000Z |
| var-202401-1568 | MinIO is a High Performance Object Storage. When someone creates an access key, it inheri… | 2024-02-15T23:13:44.206000Z |
| var-202311-0148 | Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Ele… | 2024-02-15T23:01:41.621000Z |
| var-200212-0510 | D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP ser… | 2024-02-15T23:01:07.925000Z |
| var-202212-0950 | OS command injection vulnerability in Buffalo network devices allows a network-adjacent a… | 2024-02-15T22:56:53.081000Z |
| var-202212-0949 | OS command injection vulnerability in Buffalo network devices allows an network-adjacent … | 2024-02-15T22:56:53.105000Z |
| var-202212-0948 | Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent a… | 2024-02-15T22:56:53.056000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000068 | hisa_cart information disclosure vulnerability | 2008-10-21T19:25+09:00 | 2008-10-21T19:25+09:00 |
| jvndb-2008-000073 | Blosxom vulnerable to cross-site scripting | 2008-10-20T17:30+09:00 | 2008-10-20T17:30+09:00 |
| jvndb-2008-000016 | Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations | 2008-05-21T00:00+09:00 | 2008-10-09T13:35+09:00 |
| jvndb-2008-000066 | Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting | 2008-10-06T15:24+09:00 | 2008-10-06T15:24+09:00 |
| jvndb-2008-000063 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:32+09:00 | 2008-10-01T16:32+09:00 |
| jvndb-2008-000062 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:32+09:00 | 2008-10-01T16:32+09:00 |
| jvndb-2008-000065 | EC-CUBE vulnerable to SQL injection | 2008-10-01T16:31+09:00 | 2008-10-01T16:31+09:00 |
| jvndb-2008-000064 | EC-CUBE cross-site scripting vulnerability | 2008-10-01T16:31+09:00 | 2008-10-01T16:31+09:00 |
| jvndb-2008-000061 | phpMyAdmin cross-site scripting vulnerability | 2008-09-26T16:37+09:00 | 2008-09-26T16:37+09:00 |
| jvndb-2008-001665 | Data Transfer Control Process Cessation Issue in XFIT/S/JCA and XFIT/S/ZGN | 2008-09-24T12:03+09:00 | 2008-09-24T12:03+09:00 |
| jvndb-2008-000060 | Kantan WEB Server cross-site scripting vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000059 | Kantan WEB Server directory traversal vulnerability | 2008-09-22T12:26+09:00 | 2008-09-22T12:26+09:00 |
| jvndb-2008-000058 | Multiple Tor World CGI scripts vulnerable to arbitrary script execution | 2008-09-18T11:48+09:00 | 2008-09-18T11:48+09:00 |
| jvndb-2008-000057 | Sound Master 2nd from High Norm vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| jvndb-2008-000056 | Movable Type vulnerable to cross-site scripting | 2008-09-10T11:28+09:00 | 2008-09-10T11:28+09:00 |
| jvndb-2008-001614 | JP1/NETM/DM SubManager and JP1/NETM/DM Client Process Termination Vulnerability | 2008-09-09T16:21+09:00 | 2008-09-09T16:21+09:00 |
| jvndb-2008-001613 | Fujitsu Interstage Application Server Access Control Update Problem | 2008-09-09T16:21+09:00 | 2008-09-09T16:21+09:00 |
| jvndb-2008-000052 | Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting | 2008-09-08T17:01+09:00 | 2008-09-08T17:01+09:00 |
| jvndb-2008-001585 | Hitachi JP1/File Transmission Server/FTP Unauthorized File Permission Change Vulnerability | 2008-09-05T12:24+09:00 | 2008-09-05T12:24+09:00 |
| jvndb-2008-001584 | Hitachi JP1/File Transmission Server/FTP Transmission Failure Problem | 2008-09-05T12:23+09:00 | 2008-09-05T12:23+09:00 |
| jvndb-2008-001575 | Fujitsu Interstage Application Server Single Sign-On Buffer Overflow Vulnerability | 2008-09-03T12:33+09:00 | 2008-09-03T12:33+09:00 |
| jvndb-2008-000055 | Blogn vulnerable to cross-site scripting | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000054 | Blogn vulnerable to cross-site request forgery | 2008-09-02T17:22+09:00 | 2008-09-02T17:22+09:00 |
| jvndb-2008-000053 | mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting | 2008-09-02T17:05+09:00 | 2008-09-02T17:05+09:00 |
| jvndb-2008-000049 | Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution | 2008-09-02T17:03+09:00 | 2008-09-02T17:03+09:00 |
| jvndb-2008-000048 | La!cooda WIZ and LacoodaST vulnerable to cross-site scripting | 2008-09-02T17:02+09:00 | 2008-09-02T17:02+09:00 |
| jvndb-2008-000047 | LacoodaST from SpaceTag, Inc. session fixation vulnerability | 2008-09-02T17:01+09:00 | 2008-09-02T17:01+09:00 |
| jvndb-2008-000046 | La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery | 2008-09-02T16:58+09:00 | 2008-09-02T16:58+09:00 |
| jvndb-2008-000050 | Virus Security and Virus Security ZERO denial of service (DoS) vulnerability | 2008-08-14T18:15+09:00 | 2008-08-14T18:15+09:00 |
| jvndb-2008-000037 | Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting | 2008-08-04T14:34+09:00 | 2008-08-04T14:34+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1520-1 | Security update for govulncheck-vulndb | 2025-05-09T01:08:21Z | 2025-05-09T01:08:21Z |
| suse-su-2025:1519-1 | Security update for libsoup | 2025-05-09T00:07:45Z | 2025-05-09T00:07:45Z |
| suse-su-2025:1518-1 | Security update for libsoup | 2025-05-08T19:35:59Z | 2025-05-08T19:35:59Z |
| suse-su-2025:1517-1 | Security update for apparmor | 2025-05-08T19:35:48Z | 2025-05-08T19:35:48Z |
| suse-su-2025:1516-1 | Security update for openssl-3 | 2025-05-08T13:17:46Z | 2025-05-08T13:17:46Z |
| suse-su-2025:20304-1 | Security update for util-linux | 2025-05-08T12:24:01Z | 2025-05-08T12:24:01Z |
| suse-su-2025:20303-1 | Security update for krb5 | 2025-05-08T12:22:20Z | 2025-05-08T12:22:20Z |
| suse-su-2025:1512-1 | Security update for apparmor | 2025-05-07T19:36:38Z | 2025-05-07T19:36:38Z |
| suse-su-2025:1511-1 | Security update for apparmor | 2025-05-07T19:35:59Z | 2025-05-07T19:35:59Z |
| suse-su-2025:1455-1 | Security update for sqlite3 | 2025-05-07T15:13:56Z | 2025-05-07T15:13:56Z |
| suse-su-2025:1456-1 | Security update for sqlite3 | 2025-05-07T15:13:45Z | 2025-05-07T15:13:45Z |
| suse-su-2025:1510-1 | Security update for libsoup | 2025-05-07T14:38:16Z | 2025-05-07T14:38:16Z |
| suse-su-2025:1509-1 | Security update for libsoup2 | 2025-05-07T14:37:37Z | 2025-05-07T14:37:37Z |
| suse-su-2025:1508-1 | Security update for openvpn | 2025-05-07T14:02:51Z | 2025-05-07T14:02:51Z |
| suse-su-2025:1506-1 | Security update for MozillaThunderbird | 2025-05-07T12:13:16Z | 2025-05-07T12:13:16Z |
| suse-su-2025:1505-1 | Security update for apparmor | 2025-05-07T12:06:42Z | 2025-05-07T12:06:42Z |
| suse-su-2025:1504-1 | Security update for libsoup | 2025-05-07T12:06:15Z | 2025-05-07T12:06:15Z |
| suse-su-2025:1503-1 | Security update for libsoup2 | 2025-05-07T12:06:04Z | 2025-05-07T12:06:04Z |
| suse-su-2025:1501-1 | Security update for opensaml | 2025-05-07T09:42:33Z | 2025-05-07T09:42:33Z |
| suse-su-2025:1500-1 | Security update for opensaml | 2025-05-07T09:42:17Z | 2025-05-07T09:42:17Z |
| suse-su-2025:1494-1 | Security update for libxslt | 2025-05-06T23:46:13Z | 2025-05-06T23:46:13Z |
| suse-su-2025:1492-1 | Security update for rubygem-rack-1_6 | 2025-05-06T14:36:01Z | 2025-05-06T14:36:01Z |
| suse-su-2025:1490-1 | Security update for java-17-openjdk | 2025-05-06T11:48:27Z | 2025-05-06T11:48:27Z |
| suse-su-2025:1489-1 | Security update for ImageMagick | 2025-05-06T10:57:42Z | 2025-05-06T10:57:42Z |
| suse-su-2025:1488-1 | Security update for ImageMagick | 2025-05-06T10:57:22Z | 2025-05-06T10:57:22Z |
| suse-su-2025:20299-1 | Security update for libX11 | 2025-05-06T10:21:10Z | 2025-05-06T10:21:10Z |
| suse-su-2025:20217-1 | Security update for gdk-pixbuf | 2025-05-06T10:17:13Z | 2025-05-06T10:17:13Z |
| suse-su-2025:1454-1 | Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) | 2025-05-06T09:44:20Z | 2025-05-06T09:44:20Z |
| suse-su-2025:1477-1 | Security update for libva | 2025-05-06T09:17:15Z | 2025-05-06T09:17:15Z |
| suse-su-2025:1467-1 | Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) | 2025-05-06T09:07:02Z | 2025-05-06T09:07:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-25470 | Microsoft Azure Cache for Redis Enterprise权限提升漏洞 | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25469 | Microsoft 365 Word Copilot欺骗漏洞 | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25468 | Microsoft 365 Copilot Business Chat欺骗漏洞(CNVD-2025-25468) | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25467 | Microsoft 365 Copilot Business Chat欺骗漏洞 | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25464 | IBM Aspera Faspex存在未明漏洞 | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25463 | HCL MyXalytics存在未明漏洞 | 2025-10-21 | 2025-10-28 |
| cnvd-2025-25481 | Google Pixel权限提升漏洞(CNVD-2025-25481) | 2025-09-08 | 2025-10-27 |
| cnvd-2025-25480 | Google Pixel权限提升漏洞(CNVD-2025-25480) | 2025-09-08 | 2025-10-27 |
| cnvd-2025-25462 | HCL BigFix WebUI存在未明漏洞 | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25461 | HCL AION信息泄露漏洞(CNVD-2025-25461) | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25460 | HCL AION信息泄露漏洞(CNVD-2025-25460) | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25409 | HCL AION存在未明漏洞(CNVD-2025-25409) | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25388 | HCL AION存在未明漏洞 | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25387 | HCL AION信息泄露漏洞 | 2025-10-21 | 2025-10-27 |
| cnvd-2025-25386 | WordPress插件Addison反序列化漏洞 | 2025-10-24 | 2025-10-27 |
| cnvd-2025-25385 | WordPress插件Acknowledgify缺少授权漏洞 | 2025-10-24 | 2025-10-27 |
| cnvd-2025-25384 | WordPress插件Accordion缺少授权漏洞 | 2025-10-24 | 2025-10-27 |
| cnvd-2025-25383 | WordPress插件Academy LMS权限提升漏洞 | 2025-10-24 | 2025-10-27 |
| cnvd-2015-06128 | 赛飞OA管理系统存在通用型任意文件下载漏洞 | 2015-09-10 | 2025-10-25 |
| cnvd-2025-25376 | Apache Spark加密问题漏洞(CNVD-2025-25376) | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24802 | OpenEXR存在未明漏洞(CNVD-2025-24802) | 2024-04-10 | 2025-10-24 |
| cnvd-2025-24799 | OpenEXR缓冲区溢出漏洞(CNVD-2025-24799) | 2025-08-11 | 2025-10-24 |
| cnvd-2025-24798 | OpenEXR缓冲区溢出漏洞(CNVD-2025-24798) | 2025-08-11 | 2025-10-24 |
| cnvd-2025-24797 | OpenEXR代码问题漏洞(CNVD-2025-24797) | 2025-08-11 | 2025-10-24 |
| cnvd-2025-24796 | OpenEXR存在未明漏洞(CNVD-2025-24796) | 2025-08-11 | 2025-10-24 |
| cnvd-2025-24795 | Mattermost存在未明漏洞(CNVD-2025-24795) | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24794 | Fortinet FortiDLP日志信息泄露漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24792 | OpenEXR存在未明漏洞(CNVD-2025-24792) | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24791 | OpenEXR存在未明漏洞(CNVD-2025-24791) | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24790 | OpenEXR存在未明漏洞(CNVD-2025-24790) | 2025-10-21 | 2025-10-24 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2024-avi-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0951 | Multiples vulnérabilités dans Google Pixel | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0950 | Multiples vulnérabilités dans les produits Cisco | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| CERTFR-2024-AVI-0949 | Vulnérabilité dans Veeam Backup & Replication | 2024-11-07T00:00:00.000000 | 2024-11-07T00:00:00.000000 |
| certfr-2024-avi-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0948 | Multiples vulnérabilités dans les produits Symfony | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0947 | Vulnérabilité dans NetApp ONTAP Select Deploy administration utility | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0946 | Multiples vulnérabilités dans Google Chrome | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| CERTFR-2024-AVI-0945 | Multiples vulnérabilités dans les produits HPE Aruba Networking | 2024-11-06T00:00:00.000000 | 2024-11-06T00:00:00.000000 |
| certfr-2024-avi-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| CERTFR-2024-AVI-0944 | Multiples vulnérabilités dans Google Android | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| CERTFR-2024-AVI-0943 | Vulnérabilité dans Qnap QuRouter | 2024-11-05T00:00:00.000000 | 2024-11-05T00:00:00.000000 |
| certfr-2024-avi-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0942 | Vulnérabilité dans les produits Broadcom | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0941 | Multiples vulnérabilités dans Microsoft Edge | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| CERTFR-2024-AVI-0940 | Multiples vulnérabilités dans les produits Moxa | 2024-11-04T00:00:00.000000 | 2024-11-04T00:00:00.000000 |
| certfr-2024-avi-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0939 | Multiples vulnérabilités dans les produits IBM | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |