Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-1371 |
5.3 (3.1)
|
Tutor LMS <= 3.9.5 - Authenticated (Subscriber+) Infor… |
themeum |
Tutor LMS – eLearning and online course solution |
2026-02-03T07:31:23.720Z | 2026-02-03T15:45:34.642Z |
| CVE-2026-1730 |
8.8 (3.1)
|
OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arb… |
skirridsystems |
OS DataHub Maps |
2026-02-03T07:31:24.084Z | 2026-02-03T15:45:00.936Z |
| CVE-2025-67852 |
3.5 (3.1)
|
Moodle: moodle: open redirect vulnerability in oauth l… |
|
|
2026-02-03T10:52:09.893Z | 2026-02-03T15:44:29.178Z |
| CVE-2025-67853 |
7.5 (3.1)
|
Moodle: moodle: brute-force facilitation due to missin… |
|
|
2026-02-03T10:52:12.755Z | 2026-02-03T15:43:49.951Z |
| CVE-2025-67855 |
5.4 (3.1)
|
Mooodle: mooodle: information disclosure and script ex… |
|
|
2026-02-03T10:52:15.809Z | 2026-02-03T15:43:19.863Z |
| CVE-2026-22778 |
9.8 (3.1)
|
vLLM leaks a heap address when PIL throws an error |
vllm-project |
vllm |
2026-02-02T21:09:53.265Z | 2026-02-03T15:42:57.155Z |
| CVE-2025-67856 |
5.4 (3.1)
|
Moodle: moodle: privilege escalation via incomplete ro… |
|
|
2026-02-03T10:52:19.744Z | 2026-02-03T15:42:54.452Z |
| CVE-2025-67857 |
4.3 (3.1)
|
Moodle: moodle: data exposure of user identifiers in urls |
|
|
2026-02-03T10:52:22.459Z | 2026-02-03T15:40:59.601Z |
| CVE-2025-13096 |
7.1 (3.1)
|
XML eXternal Entity injection (XXE) vulnerability affe… |
IBM |
Business Automation Workflow containers |
2026-02-02T20:56:48.318Z | 2026-02-03T15:39:59.140Z |
| CVE-2026-22780 |
4.4 (3.1)
|
Rizin has a heap overflow on mach0_chained_fixups.c |
rizinorg |
rizin |
2026-02-02T20:52:23.859Z | 2026-02-03T15:37:25.089Z |
| CVE-2025-12680 |
6 (4.0)
|
Brocade SANnav DataBase plaintext password is logged i… |
Brocade |
SANnav |
2026-02-02T20:50:29.756Z | 2026-02-03T15:35:13.850Z |
| CVE-2026-23476 |
5.4 (3.1)
|
FacturaScripts Affected by Reflected XSS |
NeoRazorX |
facturascripts |
2026-02-02T20:49:05.731Z | 2026-02-03T15:33:51.348Z |
| CVE-2026-25253 |
8.8 (3.1)
|
OpenClaw (aka clawdbot or Moltbot) before 2026.1.… |
OpenClaw |
OpenClaw |
2026-02-01T22:34:17.590Z | 2026-02-03T15:32:57.600Z |
| CVE-2026-1733 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Zhong Bang CRMEB :uni tidyOrder improper authorization |
Zhong Bang |
CRMEB |
2026-02-01T23:02:07.073Z | 2026-02-03T15:32:53.223Z |
| CVE-2026-1743 |
2.3 (4.0)
3.1 (3.1)
3.1 (3.0)
|
DJI Mavic Mini/Air/Spark/Mini SE Enhanced Wi-Fi Pairin… |
DJI |
Mavic Mini |
2026-02-02T04:02:07.053Z | 2026-02-03T15:32:46.738Z |
| CVE-2026-1744 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross si… |
D-Link |
DSL-6641K |
2026-02-02T04:32:08.247Z | 2026-02-03T15:32:40.494Z |
| CVE-2025-67479 |
0 (4.0)
|
Magic word replacement in legacy parser allows using r… |
Wikimedia Foundation |
MediaWiki |
2026-02-03T01:12:21.567Z | 2026-02-03T15:32:35.931Z |
| CVE-2025-67478 |
0 (4.0)
|
Wrong E-Mail address composition for usernames with a … |
Wikimedia Foundation |
CheckUser |
2026-02-03T01:14:17.814Z | 2026-02-03T15:32:27.124Z |
| CVE-2025-67477 |
0 (4.0)
|
Stored XSS through a system message in Special:ApiSandbox |
Wikimedia Foundation |
MediaWiki |
2026-02-03T01:16:40.616Z | 2026-02-03T15:32:21.011Z |
| CVE-2025-67476 |
1.3 (4.0)
|
Importing leaks IP address of importer via EventStreams |
Wikimedia Foundation |
MediaWiki |
2026-02-03T01:18:55.104Z | 2026-02-03T15:32:15.153Z |
| CVE-2025-67475 |
0 (4.0)
|
Stored XSS through edit summaries in MW Core |
Wikimedia Foundation |
MediaWiki |
2026-02-03T01:21:09.480Z | 2026-02-03T15:32:07.211Z |
| CVE-2026-23515 |
10 (3.1)
|
RCE - Command Injection in Signal K set-system-time plugin |
SignalK |
signalk-server |
2026-02-02T20:43:32.219Z | 2026-02-03T15:32:04.099Z |
| CVE-2025-12774 |
4.6 (4.0)
|
SQL queries with sensitive information printed in logs… |
Brocade |
SANnav |
2026-02-03T01:28:43.430Z | 2026-02-03T15:31:59.719Z |
| CVE-2025-67482 |
1.7 (4.0)
|
Lua segfault in unpack() |
Wikimedia Foundation |
Scribunto |
2026-02-03T01:28:56.233Z | 2026-02-03T15:31:50.791Z |
| CVE-2025-67481 |
0 (4.0)
|
mw.message(…).parse() doesn't output safe HTML, but it… |
Wikimedia Foundation |
MediaWiki |
2026-02-03T01:30:39.642Z | 2026-02-03T15:31:43.813Z |
| CVE-2025-58379 |
6 (4.0)
|
Password Exposure in Brocade Fabric OS |
Brocade |
Fabric OS |
2026-02-03T01:55:09.736Z | 2026-02-03T15:31:23.455Z |
| CVE-2026-24932 |
8.9 (4.0)
|
An improper certificate validation vulnerability was f… |
ASUSTOR |
ADM |
2026-02-03T02:19:41.915Z | 2026-02-03T15:31:15.303Z |
| CVE-2026-24933 |
8.9 (4.0)
|
An improper certificate validation vulnerability was f… |
ASUSTOR |
ADM |
2026-02-03T02:22:01.943Z | 2026-02-03T15:31:09.436Z |
| CVE-2026-24934 |
6.3 (4.0)
|
An improper certificate validation vulnerability was f… |
ASUSTOR |
ADM |
2026-02-03T02:26:55.995Z | 2026-02-03T15:31:00.835Z |
| CVE-2026-24935 |
6.3 (4.0)
|
An improper certificate validation vulnerability was f… |
ASUSTOR |
ADM |
2026-02-03T02:28:56.413Z | 2026-02-03T15:30:54.564Z |
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-65077 |
8.8 (4.0)
|
Relative path traversal vulnerability in Embedded Solu… |
Lexmark |
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
2026-02-03T20:44:32.330Z | 2026-02-06T04:55:27.123Z |
| CVE-2025-64438 |
1.7 (4.0)
|
Fast-DDS: Unbounded GAP range triggers OOM DoS under R… |
eProsima |
Fast-DDS |
2026-02-03T19:32:22.265Z | 2026-02-03T20:30:50.310Z |
| CVE-2025-64098 |
1.7 (4.0)
|
FastDDS has Out-of-memory in readOctetVector via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:29:09.168Z | 2026-02-03T20:36:46.443Z |
| CVE-2025-62799 |
7.2 (4.0)
|
FastDDS's heap buffer overflow in RTPS DATA_FRAG enabl… |
eProsima |
Fast-DDS |
2026-02-03T19:26:22.397Z | 2026-02-03T20:40:35.185Z |
| CVE-2025-62603 |
1.7 (4.0)
|
FastDDS has Out-of-memory while parsing GenericMessage… |
eProsima |
Fast-DDS |
2026-02-03T19:23:38.191Z | 2026-02-03T20:44:12.618Z |
| CVE-2025-62602 |
1.7 (4.0)
|
FastDDS has heap buffer overflow in readData via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:20:55.963Z | 2026-02-03T20:54:07.544Z |
| CVE-2025-62601 |
1.7 (4.0)
|
FastDDS has heap buffer overflow in readString via Man… |
eProsima |
Fast-DDS |
2026-02-03T19:16:20.692Z | 2026-02-03T21:11:05.836Z |
| CVE-2025-62600 |
1.7 (4.0)
|
FastDDS has Out-of-Memory in readPropertySeq via Manip… |
eProsima |
Fast-DDS |
2026-02-03T19:11:19.429Z | 2026-02-03T19:48:12.163Z |
| CVE-2025-5329 |
9.8 (3.1)
|
SQLi in Martcode Software's Delta Course Automation |
Martcode Software Inc. |
Delta Course Automation |
2026-02-04T13:29:44.834Z | 2026-02-04T14:26:38.072Z |
| CVE-2025-41085 |
5.1 (4.0)
|
Stored Cross-Site Scripting (XSS) in Apidog web platform |
Apidog |
Apidog Web Platform |
2026-02-04T09:56:45.513Z | 2026-02-04T15:11:26.369Z |
| CVE-2025-36094 |
5.4 (3.1)
|
Multiple security vulnerabilities are addressed with I… |
IBM |
Cloud Pak for Business Automation |
2026-02-03T22:06:09.620Z | 2026-02-04T16:06:46.499Z |
| CVE-2025-36033 |
5.4 (3.1)
|
IBM Engineering Lifecycle Management - Global Configur… |
IBM |
Engineering Lifecycle Management - Global Configuration Management |
2026-02-03T22:12:29.853Z | 2026-02-04T14:50:34.015Z |
| CVE-2025-29867 |
8.5 (4.0)
|
Access of Resource Using Incompatible Type ('Type… |
Hancom Inc. |
Hancom Office 2018 |
2026-02-04T04:46:55.545Z | 2026-02-04T20:20:08.918Z |
| CVE-2025-15508 |
5.3 (3.1)
|
Magic Import Document Extractor <= 1.0.4 - Unauthentic… |
magicimport |
Magic Import Document Extractor |
2026-02-04T08:25:31.431Z | 2026-02-04T16:49:45.837Z |
| CVE-2025-15507 |
5.3 (3.1)
|
Magic Import Document Extractor <= 1.0.4 - Missing Aut… |
magicimport |
Magic Import Document Extractor |
2026-02-04T08:25:30.675Z | 2026-02-04T16:48:28.737Z |
| CVE-2025-15487 |
4.9 (3.1)
|
Code Explorer <= 1.4.6 - Authenticated (Administrator+… |
qriouslad |
Code Explorer |
2026-02-04T08:25:33.630Z | 2026-02-04T15:17:26.026Z |
| CVE-2025-15482 |
5.3 (3.1)
|
Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 … |
chapaet |
Chapa Payment Gateway Plugin for WooCommerce |
2026-02-04T08:25:26.785Z | 2026-02-04T16:19:03.418Z |
| CVE-2025-15368 |
8.8 (3.1)
|
SportsPress <= 2.7.26 - Authenticated (Contributor+) L… |
themeboy |
SportsPress – Sports Club & League Manager |
2026-02-04T13:24:42.212Z | 2026-02-04T14:32:09.499Z |
| CVE-2025-15285 |
7.5 (3.1)
|
SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbi… |
lupsonline |
SEO Flow by LupsOnline |
2026-02-04T08:25:29.295Z | 2026-02-04T17:00:40.302Z |
| CVE-2025-15268 |
7.5 (3.1)
|
Infility Global <= 2.14.46 - Unauthenticated SQL Injec… |
infility |
Infility Global |
2026-02-04T08:25:30.164Z | 2026-02-04T17:01:29.377Z |
| CVE-2025-15260 |
6.5 (3.1)
|
MyRewards – Loyalty Points and Rewards for WooCommerce… |
lwsdevelopers |
MyRewards – Loyalty Points and Rewards for WooCommerce – Reward orders, referrals, product reviews and more |
2026-02-04T08:25:27.589Z | 2026-02-04T16:18:24.196Z |
| CVE-2025-14740 |
6.7 (3.1)
|
Docker Desktop for Windows Incorrect Permission Assign… |
Docker Inc. |
Docker Desktop |
2026-02-04T13:57:23.002Z | 2026-02-05T04:55:14.212Z |
| CVE-2025-14461 |
5.3 (3.1)
|
Xendit Payment <= 6.0.2 - Missing Authorization to Una… |
tpixendit |
Xendit Payment |
2026-02-04T08:25:28.276Z | 2026-02-04T15:19:39.235Z |
| CVE-2020-37097 |
8.7 (4.0)
7.5 (3.1)
|
Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi … |
EDIMAX Technology Co., Ltd. |
EW-7438RPn Mini |
2026-02-03T22:01:54.059Z | 2026-02-04T20:23:36.967Z |
| CVE-2020-37096 |
5.1 (4.0)
5.3 (3.1)
|
Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Fi… |
EDIMAX Technology Co., Ltd. |
EW-7438RPn Mini |
2026-02-03T22:01:53.564Z | 2026-02-04T20:25:16.439Z |
| CVE-2020-37094 |
8.7 (4.0)
9.8 (3.1)
|
EspoCRM 5.8.5 - Privilege Escalation |
EspoCRM |
EspoCRM |
2026-02-03T22:01:52.861Z | 2026-02-04T19:36:48.658Z |
| CVE-2020-37093 |
8.7 (4.0)
7.5 (3.1)
|
Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak |
Netis Systems Co., Ltd. |
Netis E1+ |
2026-02-03T22:01:52.385Z | 2026-02-04T19:39:01.265Z |
| CVE-2020-37092 |
9.3 (4.0)
7.5 (3.1)
|
Netis E1+ 1.2.32533 - Backdoor Account (root) |
Netis Systems Co., Ltd. |
Netis E1+ |
2026-02-03T22:01:51.893Z | 2026-02-04T20:14:25.291Z |
| CVE-2020-37091 |
5.1 (4.0)
5.3 (3.1)
|
Maian Support Helpdesk 4.3 - Cross-Site Request Forger… |
Maian Media |
Maian Support Helpdesk |
2026-02-03T22:01:51.427Z | 2026-02-04T20:13:51.276Z |
| CVE-2020-37087 |
5.1 (4.0)
|
Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting |
Rubikon Teknoloji |
Easy Transfer |
2026-02-03T22:09:48.283Z | 2026-02-04T14:52:11.245Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2025-64438 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.280 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-64098 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:57.127 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62799 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.983 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62603 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.787 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62602 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.640 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62601 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T20:15:56.493 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-62600 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object… | 2026-02-03T19:16:14.170 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-5329 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability … | 2026-02-04T14:16:08.840 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-41085 | Stored Cross-Site Scripting (XSS) vulnerability type in Apidog in the version 2.7.15, where SVG im… | 2026-02-04T10:16:03.270 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-36094 | IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 … | 2026-02-03T23:16:05.780 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-36033 | IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim … | 2026-02-03T23:16:05.620 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-29867 | Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Hancom Inc. Hancom O… | 2026-02-04T05:16:06.620 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15508 | The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exp… | 2026-02-04T09:15:51.547 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15507 | The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification… | 2026-02-04T09:15:51.377 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15487 | The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and i… | 2026-02-04T09:15:51.207 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15482 | The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive In… | 2026-02-04T09:15:51.033 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15368 | The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a… | 2026-02-04T14:16:08.673 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15285 | The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data … | 2026-02-04T09:15:50.863 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15268 | The Infility Global plugin for WordPress is vulnerable to unauthenticated SQL Injection via the 'in… | 2026-02-04T09:15:50.690 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-15260 | The MyRewards – Loyalty Points and Rewards for WooCommerce plugin for WordPress is vulnerable to mi… | 2026-02-04T09:15:50.517 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-14740 | Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the… | 2026-02-04T14:16:08.533 | 2026-02-04T16:33:44.537 |
| fkie_cve-2025-14461 | The Xendit Payment plugin for WordPress is vulnerable to unauthorized order status manipulation in … | 2026-02-04T09:15:49.513 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37097 | Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network c… | 2026-02-03T22:16:26.037 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37096 | Edimax EW-7438RPn 1.13 contains a cross-site request forgery vulnerability in the MAC filtering con… | 2026-02-03T22:16:25.847 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37094 | EspoCRM 5.8.5 contains an authentication vulnerability that allows attackers to access other user a… | 2026-02-03T22:16:25.673 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37093 | Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated at… | 2026-02-03T22:16:25.510 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37092 | Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthentic… | 2026-02-03T22:16:25.340 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37091 | Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attacker… | 2026-02-03T22:16:25.167 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37087 | Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability t… | 2026-02-03T23:16:04.743 | 2026-02-04T16:33:44.537 |
| fkie_cve-2020-37086 | Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows r… | 2026-02-03T22:16:24.500 | 2026-02-04T16:33:44.537 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-9crm-342q-wg6v |
5.4 (3.1)
8.4 (4.0)
|
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitH… | 2026-01-06T21:30:34Z | 2026-01-30T18:31:12Z |
| ghsa-cqc3-xrjw-8pwv |
4.3 (3.1)
|
The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting… | 2021-11-30T00:00:51Z | 2026-01-30T18:31:10Z |
| ghsa-73rr-hh4g-fpgx |
2.7 (4.0)
|
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch | 2026-01-14T21:34:12Z | 2026-01-30T17:13:35Z |
| ghsa-rv8x-5qhg-m8hq |
4.6 (3.1)
|
Zohocorp ManageEngine OpManager, NetFlow Analyzer, and OpUtils versions prior to 128582 are affecte… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-qqgm-c595-2xpg |
5.8 (4.0)
|
Chef InSpec up to version 5.23 creates named pipes with overly permissive default Windows access co… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-hc69-r6rr-hmxf |
5.3 (3.1)
5.5 (4.0)
|
A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationRel… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-frg8-29h3-wvgf |
5.3 (3.1)
5.5 (4.0)
|
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the fu… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-75v6-gf74-7fjw |
7.0 (4.0)
|
An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attack… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-4v8j-92c3-9f2f |
5.3 (3.1)
6.9 (4.0)
|
A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function Handle… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-4h4g-2r65-5v68 |
3.7 (3.1)
2.9 (4.0)
|
A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function s… | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-2p6p-hqq4-q469 |
8.4 (4.0)
|
Planting a custom configuration file in ESET Inspect Connector allow load a malicious DLL. | 2026-01-30T15:31:14Z | 2026-01-30T15:31:14Z |
| ghsa-hm5p-82g6-m3xh |
6.0 (4.0)
|
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac | 2026-01-30T14:43:18Z | 2026-01-30T14:43:18Z |
| ghsa-vj87-jj27-4h9c |
9.3 (4.0)
|
wolfSSL Python module vulnerable to Improper Authentication | 2026-01-08T00:31:15Z | 2026-01-30T14:41:49Z |
| ghsa-xw74-3hjf-3xpv |
|
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlo… | 2025-12-22T18:30:25Z | 2026-01-30T12:31:20Z |
| ghsa-x689-8m9r-8332 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM op… | 2025-05-20T18:30:56Z | 2026-01-30T12:31:20Z |
| ghsa-vf8g-fqmm-6vc5 |
4.6 (3.1)
|
Improper handling of filenames in certain HIKSEMI NAS products may lead to the exposure of sensitiv… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-rqq8-2mxg-mgr6 |
4.9 (3.1)
|
Due to insufficient input parameter validation on the interface, authenticated users of certain HIK… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-r8f6-f62h-4px7 |
9.5 (4.0)
|
Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements u… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-r738-32mw-386p |
10.0 (3.1)
|
In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml … | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-pc3q-7xfr-h5h3 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use unin… | 2025-06-18T12:30:31Z | 2026-01-30T12:31:20Z |
| ghsa-mpfh-94p7-8328 |
5.5 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall wh… | 2025-04-16T15:34:39Z | 2026-01-30T12:31:20Z |
| ghsa-jw7f-48gr-mm37 |
7.2 (3.1)
|
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insu… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-8phj-p75x-7gv8 |
|
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix race condition… | 2025-12-24T15:30:44Z | 2026-01-30T12:31:20Z |
| ghsa-6qp4-m27m-3pjj |
7.2 (3.1)
|
Due to insufficient input parameter validation on the interface, authenticated users of certain HIK… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-4f82-h634-f877 |
|
In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in ex… | 2025-12-24T12:30:29Z | 2026-01-30T12:31:20Z |
| ghsa-3737-xm99-hq62 |
4.3 (3.1)
|
Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulat… | 2026-01-30T12:31:20Z | 2026-01-30T12:31:20Z |
| ghsa-2838-84rj-32xc |
7.8 (3.1)
|
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-f… | 2025-07-09T12:31:34Z | 2026-01-30T12:31:20Z |
| ghsa-h2j5-qh4r-f6cm |
8.2 (3.1)
|
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation a… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-86f8-8qwm-r888 |
7.8 (3.1)
|
Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements u… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ghsa-857q-6v86-xp84 |
6.9 (3.1)
|
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSiz… | 2026-01-30T09:30:55Z | 2026-01-30T09:30:55Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2020-209 |
|
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible… | ansible | 2020-09-23T13:15:00Z | 2021-07-02T02:41:35.012028Z |
| pysec-2021-105 |
|
A flaw was found in the use of insufficiently random values in Ansible. Two random passwo… | ansible | 2021-05-27T19:15:00Z | 2021-07-02T02:41:34.811883Z |
| pysec-2020-208 |
|
An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure tempo… | ansible | 2020-05-15T14:15:00Z | 2021-07-02T02:41:34.927743Z |
| pysec-2020-207 |
|
A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, … | ansible | 2020-03-24T14:15:00Z | 2021-07-02T02:41:34.761872Z |
| pysec-2020-206 |
|
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8… | ansible | 2020-03-31T17:15:00Z | 2021-07-02T02:41:34.645049Z |
| pysec-2019-146 |
|
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None | ansible | 2019-11-26T14:15:00Z | 2021-07-02T02:41:34.512855Z |
| pysec-2019-145 |
|
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x bef… | ansible | 2019-11-22T13:15:00Z | 2021-07-02T02:41:34.397311Z |
| pysec-2018-44 |
|
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. Thi… | ansible | 2018-10-23T15:29:00Z | 2021-07-02T02:41:34.271290Z |
| pysec-2018-43 |
|
A flaw was found in ansible. ansible.cfg is read from the current working directory which… | ansible | 2018-07-13T22:29:00Z | 2021-07-02T02:41:34.153569Z |
| pysec-2018-42 |
|
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for… | ansible | 2018-07-03T01:29:00Z | 2021-07-02T02:41:34.017806Z |
| pysec-2020-205 |
|
Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attacker… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.376176Z |
| pysec-2020-204 |
|
Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, a… | ansible | 2020-02-18T15:15:00Z | 2021-07-02T02:41:33.333300Z |
| pysec-2020-203 |
|
The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.286907Z |
| pysec-2020-202 |
|
Ansible before 1.5.5 constructs filenames containing user and password fields on the basi… | ansible | 2020-02-20T03:15:00Z | 2021-07-02T02:41:33.239912Z |
| pysec-2020-201 |
|
Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local user… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.195519Z |
| pysec-2020-200 |
|
The vault subsystem in Ansible before 1.5.5 does not set the umask before creation or mod… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.150700Z |
| pysec-2020-199 |
|
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset… | ansible | 2020-02-20T15:15:00Z | 2021-07-02T02:41:33.107799Z |
| pysec-2020-198 |
|
Ansible prior to 1.5.4 mishandles the evaluation of some strings. | ansible | 2020-01-09T13:15:00Z | 2021-07-02T02:41:33.018970Z |
| pysec-2018-41 |
|
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results … | ansible | 2018-07-19T13:29:00Z | 2021-07-02T02:41:33.849138Z |
| pysec-2018-40 |
|
Ansible before version 2.3 has an input validation vulnerability in the handling of data … | ansible | 2018-06-22T13:29:00Z | 2021-07-02T02:41:33.763354Z |
| pysec-2018-39 |
|
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ans… | ansible | 2018-04-24T16:29:00Z | 2021-07-02T02:41:33.713953Z |
| pysec-2018-38 |
|
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansi… | ansible | 2018-07-31T20:29:00Z | 2021-07-02T02:41:33.612895Z |
| pysec-2018-37 |
|
A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly ve… | ansible | 2018-07-31T21:29:00Z | 2021-07-02T02:41:33.569568Z |
| pysec-2017-4 |
|
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed c… | ansible | 2017-11-21T17:29:00Z | 2021-07-02T02:41:33.938371Z |
| pysec-2017-3 |
|
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users t… | ansible | 2017-06-07T20:29:00Z | 2021-07-02T02:41:33.471109Z |
| pysec-2017-2 |
|
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbi… | ansible | 2017-06-08T18:29:00Z | 2021-07-02T02:41:33.064199Z |
| pysec-2016-1 |
|
The create_script function in the lxc_container module in Ansible before 1.9.6-1 and 2.x … | ansible | 2016-06-03T14:59:00Z | 2021-07-02T02:41:33.519196Z |
| pysec-2015-1 |
|
Ansible before 1.9.2 does not verify that the server hostname matches a domain name in th… | ansible | 2015-08-12T14:59:00Z | 2021-07-02T02:41:33.423322Z |
| pysec-2018-36 |
|
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle at… | ansible | 2018-05-04T20:29:00Z | 2021-07-02T02:41:32.885648Z |
| pysec-2018-35 |
|
aio-libs aiohttp-session version 2.6.0 and earlier contains a Other/Unknown vulnerability… | aiohttp-session | 2018-12-20T15:29:00Z | 2021-07-02T02:41:32.834524Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-3348 | A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Reso… | 2024-04-11T05:03:27.271700Z |
| gsd-2024-3347 | A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has… | 2024-04-11T05:03:27.120017Z |
| gsd-2024-3346 | A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as cri… | 2024-04-11T05:03:27.309732Z |
| gsd-2024-3345 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.076692Z |
| gsd-2024-3344 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.060660Z |
| gsd-2024-3343 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for W… | 2024-04-11T05:03:27.166355Z |
| gsd-2024-3342 | The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to SQL I… | 2024-04-11T05:03:27.402495Z |
| gsd-2024-3341 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.301053Z |
| gsd-2024-3340 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.429943Z |
| gsd-2024-3339 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.263258Z |
| gsd-2024-3338 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.111800Z |
| gsd-2024-3337 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.062743Z |
| gsd-2024-3336 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.425049Z |
| gsd-2024-3335 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.412287Z |
| gsd-2024-3334 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.288283Z |
| gsd-2024-3333 | The Essential Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Sit… | 2024-04-11T05:03:27.404703Z |
| gsd-2024-3332 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.420637Z |
| gsd-2024-3331 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.190011Z |
| gsd-2024-3330 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.292829Z |
| gsd-2024-3329 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.144654Z |
| gsd-2024-3328 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.146224Z |
| gsd-2024-3327 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.367458Z |
| gsd-2024-3326 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.099206Z |
| gsd-2024-3325 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.187222Z |
| gsd-2024-3324 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.159785Z |
| gsd-2024-3323 | Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server … | 2024-04-11T05:03:27.132126Z |
| gsd-2024-3322 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.246760Z |
| gsd-2024-3321 | A vulnerability classified as problematic has been found in SourceCodester eLearning Syst… | 2024-04-11T05:03:27.409204Z |
| gsd-2024-3320 | A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as pr… | 2024-04-11T05:03:27.051075Z |
| gsd-2024-3319 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-11T05:03:27.323120Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| MAL-2025-192252 | Malicious code in elf-stats-sleighing-mailbag-109 (npm) | 2025-12-03T17:53:09Z | 2025-12-23T21:08:54Z |
| MAL-2025-192251 | Malicious code in elf-stats-silvered-stocking-120 (npm) | 2025-12-03T17:53:05Z | 2025-12-23T21:08:54Z |
| MAL-2025-192231 | Malicious code in elf-stats-snowdusted-drum-647 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| MAL-2025-192230 | Malicious code in elf-stats-snowdusted-cocoa-694 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| MAL-2025-192229 | Malicious code in elf-stats-sleighing-nutcracker-806 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T21:08:54Z |
| MAL-2025-192202 | Malicious code in elf-stats-sleighing-stocking-579 (npm) | 2025-12-03T16:30:43Z | 2025-12-23T21:08:54Z |
| MAL-2025-192140 | Malicious code in elf-stats-snowdusted-fireplace-396 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192138 | Malicious code in elf-stats-sleighing-lantern-878 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192136 | Malicious code in elf-stats-sleighing-hammer-214 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192135 | Malicious code in elf-stats-silvered-snowman-898 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192128 | Malicious code in elf-stats-shimmering-nightcap-245 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192124 | Malicious code in elf-stats-rooftop-hammer-580 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-192123 | Malicious code in elf-stats-rooftop-hammer-362 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T21:08:54Z |
| MAL-2025-191977 | Malicious code in elf-stats-rooftop-stockpile-626 (npm) | 2025-12-03T12:57:17Z | 2025-12-23T21:08:54Z |
| MAL-2025-191976 | Malicious code in elf-stats-sleighing-bow-514 (npm) | 2025-12-03T12:49:19Z | 2025-12-23T21:08:54Z |
| mal-2025-192522 | Malicious code in elf-stats-peppermint-wishlist-307 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192520 | Malicious code in elf-stats-nutmeg-candy-869 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192514 | Malicious code in elf-stats-merry-cookiejar-796 (npm) | 2025-12-11T19:46:09Z | 2025-12-23T20:41:02Z |
| mal-2025-192334 | Malicious code in elf-stats-midnight-rocket-813 (npm) | 2025-12-05T21:10:10Z | 2025-12-23T20:41:02Z |
| mal-2025-192304 | Malicious code in elf-stats-northbound-sparkler-410 (npm) | 2025-12-04T19:12:07Z | 2025-12-23T20:41:02Z |
| mal-2025-192273 | Malicious code in elf-stats-merry-cookiejar-139 (npm) | 2025-12-03T19:22:08Z | 2025-12-23T20:41:02Z |
| mal-2025-192263 | Malicious code in elf-stats-nutmeg-garland-645 (npm) | 2025-12-03T19:06:00Z | 2025-12-23T20:41:02Z |
| mal-2025-192248 | Malicious code in elf-stats-marzipan-pantry-560 (npm) | 2025-12-03T17:50:51Z | 2025-12-23T20:41:02Z |
| mal-2025-192223 | Malicious code in elf-stats-nutmeg-cocoa-967 (npm) | 2025-12-03T17:20:38Z | 2025-12-23T20:41:02Z |
| mal-2025-192221 | Malicious code in elf-stats-midnight-chimney-291 (npm) | 2025-12-03T17:22:10Z | 2025-12-23T20:41:02Z |
| mal-2025-192220 | Malicious code in elf-stats-merry-cookiejar-646 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192219 | Malicious code in elf-stats-merry-cookiejar-511 (npm) | 2025-12-03T17:31:24Z | 2025-12-23T20:41:02Z |
| mal-2025-192201 | Malicious code in elf-stats-merry-garland-548 (npm) | 2025-12-03T16:32:02Z | 2025-12-23T20:41:02Z |
| mal-2025-192116 | Malicious code in elf-stats-piney-garland-824 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| mal-2025-192114 | Malicious code in elf-stats-peppermint-stocking-949 (npm) | 2025-12-03T15:59:29Z | 2025-12-23T20:41:02Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| wid-sec-w-2024-0092 | Red Hat SQLite: Schwachstelle ermöglicht nicht spezifizierten Angriff | 2024-01-15T23:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2489 | PostgreSQL: Mehrere Schwachstellen | 2016-04-03T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2023-2090 | ClamAV & Cisco Secure Endpoint: Mehrere Schwachstellen | 2023-08-16T22:00:00.000+00:00 | 2025-02-03T23:00:00.000+00:00 |
| wid-sec-w-2025-0248 | Acronis Cyber Protect (Cloud Agent): Mehrere Schwachstellen ermöglichen Privilegieneskalation | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0247 | Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service | 2025-02-02T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0245 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2018-01-25T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0244 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2018-03-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0243 | Dovecot: Schwachstelle ermöglicht Erlangen von Benutzerrechten | 2019-02-05T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0242 | Dovecot: Schwachstelle ermöglicht Erlangen von Administratorrechten | 2019-04-04T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0241 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2019-04-23T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0240 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2019-05-01T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0239 | Dovecot: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes | 2019-08-28T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0238 | Dovecot: Schwachstelle ermöglicht Denial of Service | 2019-12-12T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0237 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-02-12T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0236 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-05-18T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0235 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2020-08-12T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0234 | Dovecot: Mehrere Schwachstellen | 2021-01-04T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0208 | Google Chrome/ Microsoft Edge: Schwachstelle ermöglicht Codeausführung | 2025-01-28T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0150 | QT: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen | 2025-01-21T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2024-1867 | Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service | 2024-08-15T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2024-0715 | Fluent Bit: Schwachstelle ermöglicht Denial of Service | 2024-03-26T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2023-2964 | Splunk Enterprise: Mehrere Schwachstellen | 2023-11-16T23:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2023-0098 | Apache Maven: Schwachstelle ermöglicht Manipulation von Dateien oder Offenlegung von Informationen | 2021-04-25T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2022-1536 | Dovecot: Mehrere Schwachstellen | 2021-06-21T22:00:00.000+00:00 | 2025-02-02T23:00:00.000+00:00 |
| wid-sec-w-2025-0229 | Rockwell Automation FactoryTalk AssetCentre: Mehrere Schwachstellen ermöglichen Erlangen von Benutzerrechten | 2025-01-30T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2025-0227 | IBM QRadar SIEM: Mehrere Schwachstellen | 2021-11-30T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2025-0191 | Vaultwarden: Mehrere Schwachstellen | 2025-01-26T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-3732 | IBM MQ: Mehrere Schwachstellen | 2024-12-18T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-3713 | IBM MQ: Schwachstelle ermöglicht Denial of Service | 2024-12-17T23:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| wid-sec-w-2024-1324 | PHP: Schwachstelle ermöglicht Offenlegung von Informationen | 2024-06-09T22:00:00.000+00:00 | 2025-01-30T23:00:00.000+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| rhsa-2025:0323 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.13 Bug Fix Update | 2025-01-15T01:19:29+00:00 | 2026-02-04T12:56:05+00:00 |
| rhsa-2024:8113 | Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.3 security and bug fix update | 2024-10-15T08:52:38+00:00 | 2026-02-04T12:56:01+00:00 |
| rhsa-2024:8023 | Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements | 2024-10-14T00:59:58+00:00 | 2026-02-04T12:56:00+00:00 |
| rhsa-2024:7726 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.6.2 | 2024-10-07T09:24:48+00:00 | 2026-02-04T12:55:57+00:00 |
| rhsa-2024:7724 | Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.4.11 | 2024-10-07T09:22:37+00:00 | 2026-02-04T12:55:54+00:00 |
| rhsa-2024:7706 | Red Hat Security Advisory: Red Hat build of Cryostat security update | 2024-10-07T01:12:29+00:00 | 2026-02-04T12:55:52+00:00 |
| rhsa-2024:10214 | Red Hat Security Advisory: Red Hat Data Grid 8.5.2 security update | 2024-11-25T16:56:04+00:00 | 2026-02-04T12:55:46+00:00 |
| rhsa-2017:2534 | Red Hat Security Advisory: thunderbird security update | 2017-08-24T06:45:27+00:00 | 2026-02-04T12:55:30+00:00 |
| rhsa-2017:2456 | Red Hat Security Advisory: firefox security update | 2017-08-10T23:20:02+00:00 | 2026-02-04T12:55:26+00:00 |
| rhsa-2025:0542 | Red Hat Security Advisory: JBoss EAP XP 5.0 Update 1.0 release. See references for release notes. | 2025-01-21T17:55:49+00:00 | 2026-02-04T12:55:24+00:00 |
| rhsa-2024:7052 | Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA) | 2024-09-24T12:51:36+00:00 | 2026-02-04T12:55:18+00:00 |
| rhsa-2025:9563 | Red Hat Security Advisory: OpenShift Container Platform 4.20.0 security and extras update | 2025-10-21T03:27:40+00:00 | 2026-02-04T09:40:58+00:00 |
| rhsa-2025:22863 | Red Hat Security Advisory: OpenShift Container Platform 4.17.45 CNF IBU extras update | 2025-12-08T16:08:23+00:00 | 2026-02-04T09:40:56+00:00 |
| rhsa-2025:2223 | Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update | 2025-03-04T14:40:23+00:00 | 2026-02-04T09:40:54+00:00 |
| rhsa-2025:19357 | Red Hat Security Advisory: OpenShift Container Platform 4.16.51 CNF IBU extras update | 2025-10-30T15:22:05+00:00 | 2026-02-04T09:40:53+00:00 |
| rhsa-2025:19356 | Red Hat Security Advisory: OpenShift Container Platform 4.14.57 CNF IBU extras update | 2025-10-30T15:20:42+00:00 | 2026-02-04T09:40:53+00:00 |
| rhsa-2025:16534 | Red Hat Security Advisory: OpenShift Container Platform 4.12 ztp-site-generate container | 2025-09-23T21:08:07+00:00 | 2026-02-04T09:40:52+00:00 |
| rhsa-2025:14860 | Red Hat Security Advisory: OpenShift Container Platform 4.16.47 security and extras update | 2025-09-03T14:26:28+00:00 | 2026-02-04T09:40:50+00:00 |
| rhsa-2025:15674 | Red Hat Security Advisory: OpenShift Container Platform 4.13.60 security and extras update | 2025-09-18T04:25:22+00:00 | 2026-02-04T09:40:49+00:00 |
| rhsa-2025:15333 | Red Hat Security Advisory: OpenShift Container Platform 4.12.80 security and extras update | 2025-09-11T09:52:22+00:00 | 2026-02-04T09:40:48+00:00 |
| rhsa-2025:14856 | Red Hat Security Advisory: OpenShift Container Platform 4.14.56 security and extras update | 2025-09-04T03:47:46+00:00 | 2026-02-04T09:40:47+00:00 |
| rhsa-2025:14398 | Red Hat Security Advisory: OpenShift Container Platform 4.15.57 security and extras update | 2025-08-27T17:57:53+00:00 | 2026-02-04T09:40:46+00:00 |
| rhsa-2025:14061 | Red Hat Security Advisory: OpenShift Container Platform 4.17.38 security and extras update | 2025-08-27T17:25:43+00:00 | 2026-02-04T09:40:45+00:00 |
| rhsa-2025:14397 | Red Hat Security Advisory: OpenShift Container Platform 4.15.57 bug fix and security update | 2025-08-27T19:02:18+00:00 | 2026-02-04T09:40:44+00:00 |
| rhsa-2025:13849 | Red Hat Security Advisory: OpenShift Container Platform 4.19.9 security and extras update | 2025-08-19T18:04:34+00:00 | 2026-02-04T09:40:42+00:00 |
| rhsa-2025:13338 | Red Hat Security Advisory: OpenShift Container Platform 4.16.46 security and extras update | 2025-08-13T01:45:55+00:00 | 2026-02-04T09:40:41+00:00 |
| rhsa-2025:13327 | Red Hat Security Advisory: OpenShift Container Platform 4.18.22 security and extras update | 2025-08-13T01:15:12+00:00 | 2026-02-04T09:40:41+00:00 |
| rhsa-2025:13291 | Red Hat Security Advisory: OpenShift Container Platform 4.14.55 security and extras update | 2025-08-14T01:26:54+00:00 | 2026-02-04T09:40:40+00:00 |
| rhsa-2025:12439 | Red Hat Security Advisory: OpenShift Container Platform 4.17.37 security and extras update | 2025-08-06T22:53:00+00:00 | 2026-02-04T09:40:39+00:00 |
| rhsa-2025:12372 | Red Hat Security Advisory: OpenShift Container Platform 4.15.56 security and extras update | 2025-08-06T22:56:24+00:00 | 2026-02-04T09:40:39+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| icsa-21-012-04 | Siemens Solid Edge | 2021-01-12T00:00:00.000000Z | 2021-01-15T00:00:00.000000Z |
| icsma-21-012-01 | SOOIL Dana Diabecare RS Products | 2021-01-12T00:00:00.000000Z | 2021-01-12T00:00:00.000000Z |
| icsma-21-007-01 | Innokas Yhtymä Oy Vital Signs Monitor | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-04 | Delta Electronics CNCSoft-B | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-02 | Omron CX-One | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-007-01 | Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer | 2021-01-07T00:00:00.000000Z | 2021-01-07T00:00:00.000000Z |
| icsa-21-005-06 | Delta Electronics CNCSoft ScreenEditor | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-05 | Delta Electronics DOPSoft | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-04 | Red Lion Crimson 3.1 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-03 | GE Reason RT43X Clocks | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-02 | Panasonic FPWIN Pro | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-21-005-01 | Schneider Electric Web Server on Modicon M340 | 2021-01-05T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-352-02 | PTC Kepware KEPServerEX (Update A) | 2020-12-17T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-308-03 | ARC Informatique PcVue (Update A) | 2020-11-03T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-282-01 | Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A) | 2020-10-08T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-224-01 | Yokogawa CENTUM (Update A) | 2020-08-11T00:00:00.000000Z | 2021-01-05T00:00:00.000000Z |
| icsa-20-352-03 | PTC Kepware LinkMaster | 2020-12-17T00:00:00.000000Z | 2020-12-17T00:00:00.000000Z |
| icsa-20-352-01 | Emerson Rosemount X-STREAM | 2020-12-17T00:00:00.000000Z | 2020-12-17T00:00:00.000000Z |
| icsa-20-308-01 | WAGO Series 750-88x and 750-352 (Update A) | 2020-11-03T00:00:00.000000Z | 2020-12-15T00:00:00.000000Z |
| icsa-20-345-02 | Host Engineering H2-ECOM100 Module | 2020-12-10T00:00:00.000000Z | 2020-12-10T00:00:00.000000Z |
| icsa-20-345-01 | Mitsubishi Electric MELSEC iQ-F Series | 2020-12-10T00:00:00.000000Z | 2020-12-10T00:00:00.000000Z |
| icsma-20-345-01 | Medtronic MyCareLink Smart | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsma-20-343-01 | GE Healthcare Imaging and Ultrasound Products | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-10 | Siemens LOGO! 8 BM | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-09 | Siemens SIMATIC Controller Web Servers | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-07 | Siemens SICAM A8000 RTUs | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-06 | Siemens XHQ Operations Intelligence | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-04 | Schneider Electric Modicon M221 Programmable Logic Controller | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-03 | Schneider Electric Easergy T300 | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| icsa-20-343-01 | Multiple Embedded TCP/IP Stacks | 2020-12-08T00:00:00.000000Z | 2020-12-08T00:00:00.000000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cisco-sa-esa-url-bypass-WO4BZ75s | Cisco Email Security Appliance URL Filtering Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yjyqbjgu | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-yJyqBJGU | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-vye4bnah | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-euygpqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-eUyGPqxm | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-dcnm-stored-xss-VyE4bNAh | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2lqfpcl | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-asr5k-ecs-bypass-2LqfPCL | Cisco ASR 5000 Series Aggregation Services Routers Enhanced Charging Service Rule Bypass Vulnerability | 2020-06-17T16:00:00+00:00 | 2020-06-17T16:00:00+00:00 |
| cisco-sa-salt-2vx545ag | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-salt-2vx545AG | SaltStack FrameWork Vulnerabilities Affecting Cisco Products | 2020-05-28T16:00:00+00:00 | 2020-06-16T15:17:35+00:00 |
| cisco-sa-tcl-dos-mazqunmf | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-tcl-dos-MAZQUnMF | Cisco IOS and IOS XE Software Tcl Denial of Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-08T20:41:10+00:00 |
| cisco-sa-20191002-pi-xss-12713 | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability | 2019-10-02T16:00:00+00:00 | 2020-06-08T20:15:05+00:00 |
| cisco-sa-webui-unauthprxy-kxxsbwh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-unauthprxy-KXXsbWh | Cisco IOS XE Software Web UI Unauthenticated Proxy Service Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-pzgqxjfg | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-hngndygk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-filerd-HngnDYGk | Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-zm283zdw | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-cmdinj-zM283Zdw | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-webui-PZgQxjfG | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj4-s2tmh7ga | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj4-S2TmH7GA | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj3-44st5cca | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj3-44st5CcA | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj2-fonjk2ld | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-web-cmdinj2-fOnjk2LD | Cisco IOS XE Software Web UI Command Injection Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-uccx-api-auth-wsx4v7sb | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| cisco-sa-uccx-api-auth-WSx4v7sB | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | 2020-06-03T16:00:00+00:00 | 2020-06-03T16:00:00+00:00 |
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2023-52629 | sh: push-switch: Reorder cleanup operations to avoid use-after-free bug | 2024-03-02T08:00:00.000Z | 2025-09-03T22:31:11.000Z |
| msrc_cve-2025-8835 | JasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference | 2025-08-02T00:00:00.000Z | 2025-09-03T22:30:59.000Z |
| msrc_cve-2025-22866 | Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | 2025-02-02T00:00:00.000Z | 2025-09-03T22:30:35.000Z |
| msrc_cve-2020-10941 | Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import. | 2020-03-02T00:00:00.000Z | 2025-09-03T22:30:18.000Z |
| msrc_cve-2023-52670 | rpmsg: virtio: Free driver_override when rpmsg_remove() | 2024-05-02T07:00:00.000Z | 2025-09-03T22:30:14.000Z |
| msrc_cve-2024-57970 | libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname. | 2025-02-02T00:00:00.000Z | 2025-09-03T22:29:47.000Z |
| msrc_cve-2024-26661 | drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' | 2024-04-02T07:00:00.000Z | 2025-09-03T22:29:43.000Z |
| msrc_cve-2025-6516 | HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow | 2025-06-02T00:00:00.000Z | 2025-09-03T22:29:38.000Z |
| msrc_cve-2024-50027 | thermal: core: Free tzp copy along with the thermal zone | 2024-10-01T07:00:00.000Z | 2025-09-03T22:29:21.000Z |
| msrc_cve-2025-50422 | Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c. | 2025-08-02T00:00:00.000Z | 2025-09-03T22:28:31.000Z |
| msrc_cve-2024-35999 | smb3: missing lock when picking channel | 2024-05-02T07:00:00.000Z | 2025-09-03T22:28:23.000Z |
| msrc_cve-2024-49974 | NFSD: Limit the number of concurrent async COPY operations | 2024-10-01T07:00:00.000Z | 2025-09-03T22:28:21.000Z |
| msrc_cve-2023-46847 | Squid: denial of service in http digest authentication | 2023-11-01T07:00:00.000Z | 2025-09-03T22:27:21.000Z |
| msrc_cve-2023-47100 | In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0. | 2023-12-01T08:00:00.000Z | 2025-09-03T22:27:01.000Z |
| msrc_cve-2025-38622 | net: drop UFO packets in udp_rcv_segment() | 2025-08-02T00:00:00.000Z | 2025-09-03T22:26:54.000Z |
| msrc_cve-2024-40965 | i2c: lpi2c: Avoid calling clk_get_rate during transfer | 2024-07-01T07:00:00.000Z | 2025-09-03T22:26:33.000Z |
| msrc_cve-2024-6615 | Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128. | 2024-07-01T07:00:00.000Z | 2025-09-03T22:26:00.000Z |
| msrc_cve-2020-24371 | lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage. | 2020-08-02T00:00:00.000Z | 2025-09-03T22:25:53.000Z |
| msrc_cve-2019-18222 | The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks. | 2020-01-02T00:00:00.000Z | 2025-09-03T22:25:51.000Z |
| msrc_cve-2024-35887 | ax25: fix use-after-free bugs caused by ax25_ds_del_timer | 2024-05-02T07:00:00.000Z | 2025-09-03T22:25:48.000Z |
| msrc_cve-2023-5824 | Squid: dos against http and https | 2023-11-01T07:00:00.000Z | 2025-09-03T22:25:30.000Z |
| msrc_cve-2022-31104 | Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime | 2022-06-02T00:00:00.000Z | 2025-09-03T22:24:52.000Z |
| msrc_cve-2025-38652 | f2fs: fix to avoid out-of-boundary access in devs.path | 2025-08-02T00:00:00.000Z | 2025-09-03T22:24:43.000Z |
| msrc_cve-2025-25183 | vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache | 2025-02-02T00:00:00.000Z | 2025-09-03T22:24:23.000Z |
| msrc_cve-2024-49925 | fbdev: efifb: Register sysfs groups through driver core | 2024-10-01T07:00:00.000Z | 2025-09-03T22:24:04.000Z |
| msrc_cve-2023-52585 | drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() | 2024-03-02T08:00:00.000Z | 2025-09-03T22:23:46.000Z |
| msrc_cve-2025-38385 | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 2025-07-02T00:00:00.000Z | 2025-09-03T22:23:41.000Z |
| msrc_cve-2023-31484 | CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. | 2023-04-01T00:00:00.000Z | 2025-09-03T22:23:25.000Z |
| msrc_cve-2024-40647 | Unintentional exposure of environment variables to subprocesses in sentry-sdk | 2024-07-01T07:00:00.000Z | 2025-09-03T22:23:12.000Z |
| msrc_cve-2024-42135 | vhost_task: Handle SIGKILL by flushing work and exiting | 2024-07-01T07:00:00.000Z | 2025-09-03T22:23:09.000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| opensuse-su-2024:13529-1 | ppp-2.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13528-1 | libcryptopp-devel-8.9.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13527-1 | krb5-1.21.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13526-1 | cppcheck-2.12.1-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13525-1 | libzbar-devel-0.23.90-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13524-1 | libtinyxml0-2.6.2-12.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13523-1 | python-paramiko-doc-3.3.1-2.3 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13522-1 | libssh2-1-1.11.0-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13521-1 | jq-1.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13520-1 | jbigkit-2.1-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13519-1 | MozillaThunderbird-115.6.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13518-1 | putty-0.80-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13517-1 | openssh-9.3p2-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13516-1 | libsass-3_6_5-1-3.6.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13515-1 | python310-asyncssh-2.14.2-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13514-1 | s390-tools-2.30.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13513-1 | xwayland-23.2.2-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13512-1 | xorg-x11-server-21.1.9-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13511-1 | python312-3.12.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13510-1 | python3-bandit-1.7.6-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13509-1 | curl-8.5.0-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13508-1 | budgie-app-launcher-applet-1.7.1-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13507-1 | bluez-5.70-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13506-1 | traefik-2.10.7-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13505-1 | gstreamer-plugins-bad-1.22.7-5.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13504-1 | freerdp-2.11.2-3.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13503-1 | gnome-shell-search-provider-nautilus-45.2.1-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13502-1 | gdk-pixbuf-loader-libheif-1.17.5-2.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13501-1 | fish-3.6.4-1.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| opensuse-su-2024:13500-1 | gdk-pixbuf-loader-rsvg-2.57.0-4.1 on GA media | 2024-06-15T00:00:00Z | 2024-06-15T00:00:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-dotnet-2023-35391 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | 2024-03-06T10:54:21.276Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-35390 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:54:32.665Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-33170 | ASP.NET and Visual Studio Security Feature Bypass Vulnerability | 2024-03-06T10:54:39.969Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-33135 | .NET and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:54:49.902Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-33128 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:55:02.206Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-33127 | .NET and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:55:14.374Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-33126 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:55:26.073Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-32032 | .NET and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:55:37.681Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-29331 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:55:49.195Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-28260 | .NET DLL Hijacking Remote Code Execution Vulnerability | 2024-03-06T10:56:02.705Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-24936 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:56:15.561Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-24897 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:56:27.786Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-24895 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:56:39.574Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-21808 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:56:49.666Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2023-21538 | .NET Denial of Service Vulnerability | 2024-03-06T10:57:01.111Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-41032 | NuGet Client Elevation of Privilege Vulnerability | 2024-03-06T10:57:14.194Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-38013 | .NET Core and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:57:24.899Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-34716 | .NET Spoofing Vulnerability | 2024-03-06T10:57:38.101Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-30184 | .NET and Visual Studio Information Disclosure Vulnerability | 2024-03-06T10:57:49.379Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-29145 | .NET and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:58:00.664Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-29117 | .NET and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:58:11.981Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-24512 | .NET and Visual Studio Remote Code Execution Vulnerability | 2024-03-06T10:58:23.161Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-24464 | .NET and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:58:33.275Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-23267 | .NET and Visual Studio Denial of Service Vulnerability | 2024-03-06T10:58:45.671Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2022-21986 | .NET Denial of Service Vulnerability | 2024-03-06T10:58:58.279Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-41355 | .NET Core and Visual Studio Information Disclosure Vulnerability | 2024-03-06T10:59:07.911Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-34485 | .NET Core and Visual Studio Information Disclosure Vulnerability | 2024-03-06T10:59:18.390Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-31957 | ASP.NET Core Denial of Service Vulnerability | 2024-03-06T10:59:29.617Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-31204 | .NET and Visual Studio Elevation of Privilege Vulnerability | 2024-03-06T10:59:39.307Z | 2025-05-20T10:02:07.006Z |
| bit-dotnet-2021-26701 | .NET Core Remote Code Execution Vulnerability | 2024-03-06T10:59:50.664Z | 2025-05-20T10:02:07.006Z |
| ID | Description | Updated |
|---|---|---|
| var-202402-1471 | Transient DOS in Audio when invoking callback function of ASM driver. AQT1000 firmware, A… | 2024-02-15T22:56:43.227000Z |
| var-202402-1489 | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4… | 2024-02-15T22:52:40.576000Z |
| var-202402-1488 | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to versio… | 2024-02-15T19:09:43.974000Z |
| var-202106-1773 | D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-… | 2024-02-14T23:10:49.539000Z |
| var-201311-0339 | jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 bef… | 2024-02-14T23:10:01.500000Z |
| var-201801-1518 | diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540… | 2024-02-14T23:09:39.817000Z |
| var-200607-0468 | Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device han… | 2024-02-14T23:09:27.252000Z |
| var-200605-0266 | Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restr… | 2024-02-14T23:09:27.582000Z |
| var-201705-3686 | On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can b… | 2024-02-14T23:09:18.558000Z |
| var-202207-0880 | A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) … | 2024-02-14T23:09:13.772000Z |
| var-201803-1342 | Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstr… | 2024-02-14T23:08:52.205000Z |
| var-202402-1418 | Memory corruption in Audio while calling START command on host voice PCM multiple times f… | 2024-02-14T23:08:42.198000Z |
| var-200605-0265 | Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restr… | 2024-02-14T23:08:40.203000Z |
| var-201702-0485 | An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Comm… | 2024-02-14T23:07:12.955000Z |
| var-200212-0099 | sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features,… | 2024-02-14T23:07:01.561000Z |
| var-200609-0071 | Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to… | 2024-02-14T23:06:59.409000Z |
| var-200605-0268 | ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct un… | 2024-02-14T23:06:59.761000Z |
| var-202205-1841 | D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. of … | 2024-02-14T23:06:04.024000Z |
| var-202206-0222 | TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the f… | 2024-02-14T23:06:03.964000Z |
| var-200512-0471 | SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct req… | 2024-02-14T23:05:59.598000Z |
| var-202112-0695 | An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unaut… | 2024-02-14T23:05:13.446000Z |
| var-202110-1437 | Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for … | 2024-02-14T23:05:13.616000Z |
| var-202401-1419 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows … | 2024-02-14T23:05:10.292000Z |
| var-202206-0381 | TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function Reb… | 2024-02-14T23:01:52.113000Z |
| var-202402-1427 | Information disclosure in Audio while accessing AVCS services from ADSP payload. AQT1000 … | 2024-02-14T23:01:45.028000Z |
| var-200703-0036 | SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow re… | 2024-02-14T23:01:39.421000Z |
| var-200901-0055 | The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easie… | 2024-02-14T23:01:36.198000Z |
| var-201402-0420 | Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to i… | 2024-02-14T23:01:32.535000Z |
| var-201709-0895 | Intelbras WRN 150 devices allow remote attackers to read the configuration file, and cons… | 2024-02-14T23:00:01.722000Z |
| var-202106-1771 | D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bo… | 2024-02-14T22:59:53.850000Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| jvndb-2008-000037 | Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting | 2008-08-04T14:34+09:00 | 2008-08-04T14:34+09:00 |
| jvndb-2008-001514 | Cross-Site Scripting Vulnerability in Hitachi Collaboration - Online Community Management | 2008-07-30T13:46+09:00 | 2008-07-30T13:46+09:00 |
| jvndb-2008-000045 | Geeklog Forum Plugin vulnerable to cross-site scripting | 2008-07-29T14:57+09:00 | 2008-07-29T14:57+09:00 |
| jvndb-2008-000044 | K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000043 | K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting | 2008-07-29T14:56+09:00 | 2008-07-29T14:56+09:00 |
| jvndb-2008-000021 | Mozilla Firefox cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-29T14:54+09:00 |
| jvndb-2008-000042 | Multiple Century Systems routers vulnerable to cross-site request forgery | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000041 | WebProxy from LunarNight Laboratory vulnerable to cross-site scripting | 2008-07-24T14:23+09:00 | 2008-07-24T14:23+09:00 |
| jvndb-2008-000040 | Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins | 2008-07-24T14:22+09:00 | 2008-07-24T14:22+09:00 |
| jvndb-2008-000039 | Safari installed in iPod touch and iPhone vulnerable in handling server certificates | 2008-07-16T12:27+09:00 | 2008-07-16T12:27+09:00 |
| jvndb-2007-000457 | Apache Tomcat cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:48+09:00 |
| jvndb-2007-000456 | Apache Tomcat sample web application cross-site scripting vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:48+09:00 |
| jvndb-2007-000297 | Apache Tomcat Accept-Language Header Cross-Site Scripting Vulnerability | 2008-05-21T00:00+09:00 | 2008-07-11T13:47+09:00 |
| jvndb-2008-000038 | Redmine vulnerable to cross-site scripting | 2008-07-08T12:15+09:00 | 2008-07-08T12:15+09:00 |
| jvndb-2008-000036 | FreeStyleWiki cross-site scripting vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000035 | Cybozu Garoon vulnerable to arbitrary script execution | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000034 | Cybozu Garoon session fixation vulnerability | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2008-000033 | Multiple Cybozu products vulnerable to cross-site request forgery | 2008-07-08T12:14+09:00 | 2008-07-08T12:14+09:00 |
| jvndb-2005-000804 | Tomcat vulnerable in request processing | 2008-05-21T00:00+09:00 | 2008-07-07T18:04+09:00 |
| jvndb-2008-001417 | Vulnerability in Sample Code in Hitachi uCosminexus Portal Framework Manuals | 2008-07-07T10:38+09:00 | 2008-07-07T10:38+09:00 |
| jvndb-2008-000032 | nProtect : Netizen denial of service (DoS) vulnerability | 2008-07-07T10:24+09:00 | 2008-07-07T10:24+09:00 |
| jvndb-2008-000031 | CGIWrap error page cross-site scripting vulnerability | 2008-06-20T13:46+09:00 | 2008-06-20T13:46+09:00 |
| jvndb-2008-000030 | BlognPlus SQL injection vulnerability | 2008-06-20T13:45+09:00 | 2008-06-20T13:45+09:00 |
| jvndb-2007-000818 | Flash Player allows to send arbitrary HTTP headers | 2008-05-21T00:00+09:00 | 2008-06-20T13:34+09:00 |
| jvndb-2008-000029 | Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history | 2008-06-10T13:59+09:00 | 2008-06-10T13:59+09:00 |
| jvndb-2006-000639 | Pixelpost cross-site scripting vulnerability | 2008-06-10T13:57+09:00 | 2008-06-10T13:57+09:00 |
| jvndb-2007-000329 | Java Web Start vulnerable to execution of unauthorized system classes | 2008-05-21T00:00+09:00 | 2008-06-06T16:22+09:00 |
| jvndb-2008-000028 | WEB MART from KENT WEB vulnerable to cross-site scripting | 2008-06-06T12:01+09:00 | 2008-06-06T12:01+09:00 |
| jvndb-2008-001350 | Hitachi Groupmax Collaboration Products Cross-Site Scripting Vulnerability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| jvndb-2008-001349 | XMAP3 Denial of Service (DoS) Vulneability | 2008-06-06T12:00+09:00 | 2008-06-06T12:00+09:00 |
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| suse-su-2025:1468-1 | Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6) | 2025-05-06T09:06:57Z | 2025-05-06T09:06:57Z |
| suse-su-2025:1466-1 | Security update for rabbitmq-server | 2025-05-06T06:06:37Z | 2025-05-06T06:06:37Z |
| suse-su-2025:1465-1 | Security update for apache2-mod_auth_openidc | 2025-05-05T21:04:37Z | 2025-05-05T21:04:37Z |
| suse-su-2025:1464-1 | Security update for ImageMagick | 2025-05-05T18:49:06Z | 2025-05-05T18:49:06Z |
| suse-su-2025:1463-1 | Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3) | 2025-05-05T12:06:27Z | 2025-05-05T12:06:27Z |
| suse-su-2025:1457-1 | Security update for glib2 | 2025-05-05T10:56:39Z | 2025-05-05T10:56:39Z |
| suse-su-2025:1453-1 | Security update for libva | 2025-05-05T07:44:16Z | 2025-05-05T07:44:16Z |
| suse-su-2025:1452-1 | Security update for libva | 2025-05-05T07:43:59Z | 2025-05-05T07:43:59Z |
| suse-su-2025:1451-1 | Security update for libva | 2025-05-05T07:43:40Z | 2025-05-05T07:43:40Z |
| suse-su-2025:1450-1 | Security update for ffmpeg | 2025-05-05T07:42:43Z | 2025-05-05T07:42:43Z |
| suse-su-2025:1449-1 | Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4) | 2025-05-05T07:36:00Z | 2025-05-05T07:36:00Z |
| suse-su-2025:1448-1 | Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3) | 2025-05-05T06:37:02Z | 2025-05-05T06:37:02Z |
| suse-su-2025:1445-1 | Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4) | 2025-05-04T16:10:05Z | 2025-05-04T16:10:05Z |
| suse-su-2025:1444-1 | Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4) | 2025-05-04T13:39:40Z | 2025-05-04T13:39:40Z |
| suse-su-2025:1440-1 | Security update for libxml2 | 2025-05-02T13:44:52Z | 2025-05-02T13:44:52Z |
| suse-su-2025:1439-1 | Security update for libxml2 | 2025-05-02T13:44:39Z | 2025-05-02T13:44:39Z |
| suse-su-2025:1438-1 | Security update for libxml2 | 2025-05-02T13:44:11Z | 2025-05-02T13:44:11Z |
| suse-su-2025:1436-1 | Security update for MozillaFirefox | 2025-05-02T13:13:53Z | 2025-05-02T13:13:53Z |
| suse-su-2025:1435-1 | Security update for libxml2 | 2025-05-02T10:39:17Z | 2025-05-02T10:39:17Z |
| suse-su-2025:1434-1 | Security update for poppler | 2025-05-02T10:37:00Z | 2025-05-02T10:37:00Z |
| suse-su-2025:1433-1 | Security update for redis | 2025-05-02T10:23:46Z | 2025-05-02T10:23:46Z |
| suse-su-2025:1432-1 | Security update for redis | 2025-05-02T10:23:30Z | 2025-05-02T10:23:30Z |
| suse-su-2025:1431-1 | Security update for govulncheck-vulndb | 2025-05-02T08:11:07Z | 2025-05-02T08:11:07Z |
| suse-su-2025:1430-1 | Security update for python-h11 | 2025-05-02T08:10:35Z | 2025-05-02T08:10:35Z |
| suse-su-2025:1429-1 | Security update for java-21-openjdk | 2025-05-02T08:10:04Z | 2025-05-02T08:10:04Z |
| suse-su-2025:1425-1 | Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) | 2025-05-01T18:39:32Z | 2025-05-01T18:39:32Z |
| suse-su-2025:1423-1 | Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3) | 2025-05-01T16:11:35Z | 2025-05-01T16:11:35Z |
| suse-su-2025:1422-1 | Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3) | 2025-04-30T19:09:59Z | 2025-04-30T19:09:59Z |
| suse-su-2025:1420-1 | Security update for redis | 2025-04-30T12:55:40Z | 2025-04-30T12:55:40Z |
| suse-su-2025:1419-1 | Security update for redis | 2025-04-30T12:55:00Z | 2025-04-30T12:55:00Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2025-24789 | Opencast信息泄露漏洞（CNVD-2025-24789） | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24788 | Flowise文件上传漏洞（CNVD-2025-24788） | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24786 | Mongoose缓冲区溢出漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24785 | Wireshark存在未明漏洞（CNVD-2025-24785） | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24784 | SAMSUNG Mobile devices存在未明漏洞（CNVD-2025-24784） | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24783 | SAMSUNG Mobile devices存在未明漏洞（CNVD-2025-24783） | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24782 | Oracle Solaris资源管理错误漏洞 | 2025-10-22 | 2025-10-24 |
| cnvd-2025-24780 | Beauty Parlour Management System search-invoices.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24779 | Beauty Parlour Management System search-appointment.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24778 | Beauty Parlour Management System sales-reports-detail.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24777 | Beauty Parlour Management System new-appointment.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24776 | Beauty Parlour Management System manage-services.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24775 | Beauty Parlour Management System invoices.php文件SQL注入漏洞 | 2025-10-13 | 2025-10-24 |
| cnvd-2025-24774 | D-Link DIR-825 ping6_ipaddr参数缓冲区溢出漏洞 | 2025-09-09 | 2025-10-24 |
| cnvd-2025-24773 | D-Link DIR-825缓冲区溢出漏洞 | 2025-09-23 | 2025-10-24 |
| cnvd-2025-24772 | D-Link DIR-852 os命令注入漏洞 | 2025-09-04 | 2025-10-24 |
| cnvd-2025-24771 | D-Link DIR-852 cgibin文件命令注入漏洞 | 2025-09-23 | 2025-10-24 |
| cnvd-2025-24770 | D-Link DIR-852 hedwig.cgi文件命令注入漏洞 | 2025-09-23 | 2025-10-24 |
| cnvd-2025-24769 | D-Link DIR-645 service参数命令注入漏洞 | 2025-09-23 | 2025-10-24 |
| cnvd-2025-24768 | D-Link DI-7100G OS命令注入漏洞 | 2025-09-25 | 2025-10-24 |
| cnvd-2025-24767 | D-Link DI-7100G缓冲区溢出漏洞 | 2025-09-25 | 2025-10-24 |
| cnvd-2025-24766 | D-Link Nuclias Connec Login端点可观察的响应差异漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24765 | D-Link Nuclias Connect跨站脚本漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24764 | D-Link Nuclias Connect可被观察响应差异漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24763 | D-Link DIR-852 HNAP1文件命令注入漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24762 | D-Link DI-7100G C1命令注入漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24761 | D-Link DI-7100G C1 openid参数缓冲区溢出漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24760 | D-Link DI-7100G C1 popupId参数缓冲区溢出漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24759 | D-Link Nuclias Connect目录遍历漏洞 | 2025-10-21 | 2025-10-24 |
| cnvd-2025-24758 | Bank Locker Management System search参数跨站脚本漏洞 | 2025-10-23 | 2025-10-24 |
| ID | Description | Published | Updated |
|---|---|---|---|
| CERTFR-2024-AVI-0938 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0937 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0936 | Multiples vulnérabilités dans les produits Splunk | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| CERTFR-2024-AVI-0935 | Vulnérabilité dans Tenable Sensor Proxy | 2024-10-31T00:00:00.000000 | 2024-10-31T00:00:00.000000 |
| certfr-2024-avi-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0933 | Multiples vulnérabilités dans les produits Qnap | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0932 | Multiples vulnérabilités dans les produits Apple | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0931 | Multiples vulnérabilités dans Google Chrome | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0934 | Multiples vulnérabilités dans les produits Mozilla | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0933 | Multiples vulnérabilités dans les produits Qnap | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0932 | Multiples vulnérabilités dans les produits Apple | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| CERTFR-2024-AVI-0931 | Multiples vulnérabilités dans Google Chrome | 2024-10-30T00:00:00.000000 | 2024-10-30T00:00:00.000000 |
| certfr-2024-avi-0930 | Vulnérabilité dans MongoDB | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0929 | Multiples vulnérabilités dans les produits Apple | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| CERTFR-2024-AVI-0930 | Vulnérabilité dans MongoDB | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| CERTFR-2024-AVI-0929 | Multiples vulnérabilités dans les produits Apple | 2024-10-29T00:00:00.000000 | 2024-10-29T00:00:00.000000 |
| certfr-2024-avi-0928 | Vulnérabilité dans Squid | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| certfr-2024-avi-0927 | Multiples vulnérabilités dans les produits Synology | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| CERTFR-2024-AVI-0928 | Vulnérabilité dans Squid | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| CERTFR-2024-AVI-0927 | Multiples vulnérabilités dans les produits Synology | 2024-10-28T00:00:00.000000 | 2024-10-28T00:00:00.000000 |
| certfr-2024-avi-0926 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0925 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0924 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0923 | Multiples vulnérabilités dans les produits IBM | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| certfr-2024-avi-0922 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0926 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0925 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0924 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0923 | Multiples vulnérabilités dans les produits IBM | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |
| CERTFR-2024-AVI-0922 | Multiples vulnérabilités dans Microsoft Edge | 2024-10-25T00:00:00.000000 | 2024-10-25T00:00:00.000000 |